Hey guys/gals. I was wondering if there were programs out there to automaticly sniff or search out from a domain and pick up every page on a website. I know thats possible where there is no authentication involved. Im starting a text based game, and what i dont want to happen is for someone to use a program and authenticate with it and then pull down every page on my site.even if they could not get access to the pages could they still see them? IS this a very big threat? is it possible? is it legal? If your allowed could you give me a link to a program as an example. needs to be able to validate a user id and password and crawl out from there thanks again hope i put this in the right spot. -_-
What they can sniff is the html, css, images, flash, javascript and any other client side based script. Not the php code. It's very easy to write a program in C that can access a page which requires authentication and do whatever you program it to do. You just need a username and a password.