PDA

View Full Version : Bad news for tsp script users


Swat
05-04-2000, 09:27 PM
Anyone who is using the tsp script for his cj site should be aware of a serious security holes that were found on version 1.1

1 : there is a way to sign up and easily have your ratio more then 10000%
2 : the gateway is not safe from img-src cheat .
3 : the seriest bug here is the admin file , which can be hacked in 1 minute (the solution for this is to remane it or to hide it )

Of course it doesnt mean that your sites will be hacked right away , but if i managed to discover it , i believe it's a matter of time untill few bad guys will find it as well .

For you attention only .

Swat .

Due
05-05-2000, 02:49 AM
A few bad guys already know that. In November / December '99 a lot of the TSP sites was hacked and all the traffic directed to other sites
/Due
ICQ ~ 7694991

Jimbo
05-18-2000, 07:57 PM
yeah I know the bug and got hacked lots of time before I hide tsconfig.dat http://adultwebmasterinfo.com/ubb/smile.gif

jimbo

Juggler
05-18-2000, 08:59 PM
Just thougth I would add a little story that I find funny. I have been running TSP on a site for a while and it has been ticking along NP I had been meaning to change it to UCJ-C for while but just never got around to it. Well yesterday I had some free time and thought I would do it so I contacted Tim how said he could do. I had check to see how the traffic was going and low and behold it was nearly dead and was all being redirected to another site.

I suppose I should of been upset but far from it I found it funny the site had very little traffic to start with and they had killed the site. I got Tim to put UCJ-C in started a few of the trades that I know where working started by forcing 10 hits to them signed up a few toplist and went for a drink. This morning I just checked the site and it has more traffic than it has had for a long time.

My point if any is I did very little work and I am getting a lot more traffic than could of been stolen and guess what I will get that EVER day without the hassle of looking for other sites to screw. It just does not make sense to me the moment some hacks into a site and steals traffic the site is going to start dropping because it does not return so you have just got something that is dead it take about the same time and effort to build a site that will grow and keep going. I do not think I will ever understand cheats and there short term mentality.

Just my 2 cents worth

Happy trading everyone hope you have a good one