|
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !! Original PHP Krazy Image Host Script 0.7 by: lappy512 @ Forums.KrazyLetter.com !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !! Modified by: Threatcon !! KrazyImage.com !! Thankx lappy512 for such a wonderful script. !! A list of scripts that I have compiled together and used in here can be found at the bottom of this page. !! Please do not remove any Copyright info unless given specific permission to do so from the author of the script. !! Thankx to all the authors of the added scripts as well for releasing them under the GNU General Public License. !! See GNU General Public License.txt for more info. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! CHANGES IN VERSION 1.0.1 FROM 0.7 1. Disable and/or enable all pages via Admin Menu and leave a customized explaination 2. Ability to password protect most pages via Admin Menu and require a user password 3. Disable or enable the visual confirmation image via Admin Menu 4. New admin login stuff: -- login time expires configurable in seconds -- multiple admin and user passwords -- maximum attempts to login configurable -- all attempts to login as an admin or user are logged with ip, date, time and password attempted to use -- view log files for above in the Admin Menu 5. Original image size added in text to thumbnail image for phpBB and html posting 6. Added searching the comments. See admin panel for setup of the page. Enable/disable comment searching 7. Added days since last image view 8. Added NEW MySQL entries to store the original image files uploaded time counter 9. Added NEW MySQL entries to store the image files dimensions in width and height 10. Added new ban system that works wonderfully 11. Added new security script that detects and stops hacks, worms and other malicious activity 12. Working on moving all hard-coded english language into its own language file -- This will make it easier to translate into other languages 13. Added NEW MySQL entry to track total unique visitors (by IP) in the last 24 hours 14. Fixed a Remote SQL Injection Exploit in display.php (see below for more information) 15. Edited index.php and footer.php so that if a page is disabled so are the links to that page 0.9.3 16. Added auto ban IP to user and admin login. If too many failed login attempts are made, IP is automatically banned 17. Added show IP, password and time/date to user on incorrect logins 18. Edited all code to make the CSS validate and XHTML 1.0 compliant 0.9.8 19. Added page hit counter 20. Added robots.txt file to keep bots out of the sub folders 21. Added a simple MySQL admin page. This allows admins the ability to work with their PHP Krazy Image Host Script database 22. Organized some of the files into an "includes" folder 23. Added "That image does not exist." to full size image page if image does not exist 24. No more red X's if image was deleted 25. Added additional PNG images for missing and/or deleted images. -- They show instead of red X's. Located in the _docs/replacements/ folder. Use the image 0 with no extension and place it in the uploads folder. 26. If an image is reported it now shows a replacement image and not the original. This is temporary until an admin can review the image. 27. If a person is banned from the site they are no longer able to view thumbnails and full size images. Instead they are shown an image stating that they are banned. 28. Removed auto IP ban for sql injection exploit. It sometimes bans false positives. Logging is still enabled. 29. Added if less than 4 images or less are shown on the index than they are displayed side-by-side. More than four and they are displayed vertically. -- This will help keep pages from stretching too wide and keep visitors from scrolling up and down. 30. Added a new user system. You can now enable user registrations, email validation, reset passwords and such. -- All stored in MySQL database and configurable in Admin panel. 31. Added auto version check in the Admin panel. Enable or disable in the Admin Configure Script page. 32. Search page has been re-coded. Now standard layout for all pages. 33. Report Image link no longer shows if image is already reported. 34. Fixed alot of code and this should be the last release before version 1.0 1.0 35. Enable/disable report image link in Admin Panel 36. Allow exact same IP address to delete images with matching IP of uploaded image. -- Requires user account registration 37. User defines whether to show image on last uploaded and random blocks. -- Private image hosting per say definable in the Admin Control Panel 38. Updated display.php and thumbdisplay.php to check mysql for image dimensions and auto update them if not set in database. -- This is primarily for users who started using my modified script prior to 0.9.2. 39. Beefed up and improved the admin login 40. Moved all navigation links in the Admin Panel to one file for ease of editing 41. Logout script incorporated into the Admin Panel 42. Added ability to clear both the log files in the Admin Panel 43. Renamed and moved .php files in logs directory to admin directory 1.0.1 44. Captcha image security added to user images page 45. Admin search images by IP page added XX. Various improvements and code clean up 46. Added a popup window that can be used as a mini image upload. Either use it in an iframe or via the mini link in the footer. <-- Added on 25 Aug 2008 **** New in 1.1 <-- 11 July 2009 47. More code clean up and improvements 48. Added user defined MySQL table prefix 49. Removed CBACK.DE script and added myPHPscripts Injection Scanner 50. Added phpWhois 4.1.3 51. Added search images by IP and number of views 52. Added pinned images on homepage <-- 7 July 2009 53. Added pinned images page <-- 7 July 2009 54. Added private pinned images in admin control panel <-- 7 July 2009 55. Minor bugs and code clean up <-- 7 July 2009 56. Added phpInfo <-- 11 July 2009 !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! A list of scripts that I have compiled together and used. Thanks to all the authors of the added scripts as well for releasing them under the GNU General Public License. See GNU General Public License.txt for more info. freeCap v1.4.1 and PHP Pass Copyright 2005 Howard Yeend PureMango.co.uk Dropdown java script Copyright (C) 2005 Ilya S. Lyubinskiy php-development.ru DynamicDrive.com for various javascripts -Disable "Enter" key in Form script- By Nurul Fadilah - Form field Limiter script - "Accept terms" form submission - Required field(s) validation v1.10 Security script that detects and stops hacks, worms and other malicious activity CBACK.DE Users Online, Basic IP Banning & Hit Counter WLScripting.com User Register / Login Script and Injection Scanner Scott J. LeCompte MyPhpScripts.net Simple MySQL Admin WizMySQLAdmin 0.11.4 Wiz's Shelf WizShelf.org Captcha Security Images Copyright: 2006 Simon Jarvis Date: 03/08/06 --> Updated: 07/02/07 White-Hat-Web-Design.co.uk phpWhois Copyright: Mark Jeftovic, David Saez Padros and Ross Golder phpWhois 4.1.3 ********************************************************************** PHP Krazy Image Host Script (id) Remote SQL Injection Exploit Discovered by: Trex More Info: SecurityReason.com Solution: Trex-Online.net Visit: Trex-Online.net / UnderGround.ag Solution Implamented into VERSION 0.9.1 on 29 Oct 2006 ********************************************************************** |
