Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <?php
- $array = Array('admin'=>'22abc2','guest'=>'123password'); #censored
- $serial = base64_encode(serialize(Array("username"=>"admin","password"=>true)));
- ?>
- <!DOCTYPE HTML>
- <html>
- <head>
- <title>Login bypass</title>
- <meta charset="uft-8"/>
- </head>
- <body>
- <h1>Try to login with admin :D</h1>
- <?php
- if (isset($_POST['login'])){
- $data = unserialize(base64_decode($_POST['data']));
- var_dump($data['password']);
- printf("<br />");
- var_dump($array['admin']);
- printf("<br />");
- var_dump($data['password'] == $array['admin']);
- printf("<br />");
- if ($data['username'] == 'admin' && $data['password'] == $array['admin']){
- echo "This if Flag";
- }else if($data['username'] == 'guest' && $data['password'] == $array['guest']){
- echo "You are a <b>guest</b> users. Try to login with admin :D";
- }else{
- echo "Login Failed";
- }
- }else{
- ?>
- <form action="http://peternguyen.uns.vn/challenges/" method="POST">
- <input type="hidden" name="data" value="<?php echo $serial;?>"/>
- <input type="submit" name="login" value="Login">
- </form>
- <?php
- }
- ?>
- </body>
- </html>
Advertisement
Add Comment
Please, Sign In to add comment