AdSense AdLogger 1.1 XSS vulnerabilities fix

I hope I could fix some XSS security holes in AdLogger 1.1. I hardly recommend to download it.

Link: http://hac.kers.hu/AdSense-AdLogger-1.1-XSS-vulnerabilities-fix_t32.html

 

I could be wrong but I'd be very wary of visiting that link. Take a look at the URL before even thinking of copying and pasting that into your address bar.

Apologies if I'm wrong.

 

Pony, you're right, but it's your turn.

I made it for myself, and I share with the community. It contains the fixed version of 'trackclick.php' and 'trackpageview.php'. So, it's your biz to determine if you would like to download it.

 

I have a little bit more time than yesterday, so here is what i am talking about:

Tracking cliks: trackclick.php

check line: 7. and 19-39.​

Oh my god, I can fake all the get variables and my user_agent! I can insert any type of html/js code!

And what about the log? Check the clickinfo.php file for example:

check line: 100-123.​

Oh shit, that's the sucks That's what Im talking about!

So I've fixed this shit bug in trackpageview.php and trackclick.php, and you can download these files from my forum.
If you download it, you will recognise this is a very simple and short patch, and I don't want to fuck with you or with the community. Pony's post made me a little bit angry yesterday, that's why I write this long post (sorry guys for my bad english )

I'm curious about your opinion!
And Pony: fuck you, you should apology! It's my forum, not some crap site. Pls, somebody check it and tell the truth that it's ok.

 

Lovely use of language there. Well done.

 

Newest version of AdLogger is released, XSS bugs have been fixed! Download it guys.

 

You are quite a salesperson as is evident in the way you promote your product!

 

TooHappy: you're wrong Im not a salesperson, and AdLogger isn't my product. I just found a bug in it...