View Single Post
  #395  
Old 8th June 2013, 02:42
Black1 Black1 is offline
Senior Member
 
Join Date: Oct 2011
P2P
Posts: 55
Default
The whole file (error.php) is a backdoor. Just delete it.
Ban IP TS currect ip

Also you should edit this file (/admin/include/adminfunctions.php)
function stop_script ($msg = 'Your Script License has been Terminated!')
Just add it in comments
PHP Code:
/*  function stop_script ($msg = 'Your Script License has been Terminated!')
  {
    echo '<style type="text/css">
    <!--
    .warnbox
    {
        line-height: 1.4em; 
        float:center;
        background: lightyellow; 
        border:1px solid black;
        border-color:#6D90B0;
        font:normal 12px verdana;
        line-height:18px;
        z-index:100;
        border-right: 4px solid black;
        border-bottom: 4px solid black;
        padding: 0 0 3px 31px;
    }
    .red
    {
        color: #9f0808;
        font:bold 12px verdana;
    }
    a { color: #9f0808; background: inherit; text-decoration:none; }
    a:hover { background: inherit; text-decoration:underline; }
    -->
    </style>
    <div class="warnbox" align="center">
    <p align="center" class="red">    
    ' . $msg . ' Please contact the TS Team regarding the issue by clicking following link: no thanks!    
    </font>
    </p>
    <p align="center">
    <strong>This could be because of one of the following reasons:</strong>
    <ul>
    <li>Your account has either been suspended or you have been banned from accessing this resource.</li>
    <li>Your account may still be awaiting activation or moderation.</li>
    <li>Feel free to contact us about this error message.</li>
    </ul></p>';
    exit ();
  }*/ 
I have uploaded the edited php file.
USE IT AT YOUR OWN RISK. IM NOT A CODER. I TESTED IT AND IT WORKS FINE.

I have batch searched with "TextCrawler" all TSSE 5.6 *.php files with "hot words" like
violation, claiming, unauthorised, purchase, license, security, _deletefiles_
and I didnt find anything except error.php and adminfunctions.php

include/ts_functions.php has also something like a small backdoor
but is already disabled by nightcrawler
Attached Files
File Type: php adminfunctions.php (12.4 KB, 14 views)

Last edited by Krypto; 13th April 2014 at 22:44.
Reply With Quote