Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Programming > Perl > Perl Misc > Want password hack for Matt's old calendar script

Reply
Thread Tools

Want password hack for Matt's old calendar script

 
 
Butch
Guest
Posts: n/a
 
      02-18-2004
I am using Matt Kruse's old calendar script [no version number in the
comments] and want to have multiple user/password capability to allow
more than one person to administer it without sharing the
username/passwords. Has any one already written this hack and would
be willing to share it?

Thanks,
Butch
 
Reply With Quote
 
 
 
 
Trent Curry
Guest
Posts: n/a
 
      02-18-2004
Butch wrote:
> I am using Matt Kruse's old calendar script [no version number in the
> comments] and want to have multiple user/password capability to allow
> more than one person to administer it without sharing the
> username/passwords. Has any one already written this hack and would
> be willing to share it?
>
> Thanks,
> Butch


Well for starters using any of Matt's scripts as been long deemed flawed
in anything reguarding security. If you want to modify the script, I'd
suggest usign a data base and doing lookups. Mysql works well, as a
quick and free solution.

Some moduels to handle Mysql lookups:

Mysql.pm
perl -MCPAN -e 'install Mysql'
http://search.cpan.org/author/RUDY/D...3/lib/Mysql.pm

DBD::mysql.pm
perl -MCPAN -e 'install DBD::mysql'
http://search.cpan.org/~rudy/DBD-mys...b/DBD/mysql.pm

Just create your tables, then right a query to see if the user exists
and if the password (I'd recommends a crypt'ed or a md5-hex'ed password)
matches.

MD5.pm
perl -MCPAN -e 'install MD5'
http://search.cpan.org/~gaas/MD5-2.03/MD5.pm

--
Trent Curry

perl -e
'($s=qq/e29716770256864702379602c6275605/)=~s!([0-9a-f]{2})!pack("h2",$1
)!eg;print(reverse("$s")."\n");'


 
Reply With Quote
 
 
 
 
Uri Guttman
Guest
Posts: n/a
 
      02-18-2004
>>>>> "T" == Trent*Curry <> writes:

T> Butch wrote:
>> I am using Matt Kruse's old calendar script [no version number in the
>> comments] and want to have multiple user/password capability to allow
>> more than one person to administer it without sharing the
>> username/passwords. Has any one already written this hack and would
>> be willing to share it?



T> Well for starters using any of Matt's scripts as been long deemed flawed
T> in anything reguarding security. If you want to modify the script, I'd
T> suggest usign a data base and doing lookups. Mysql works well, as a
T> quick and free solution.

different matt. this is kruse and the bad kiddie scripter is write.

and to the OP, fix it on line 17.

uri

--
Uri Guttman ------ -------- http://www.stemsystems.com
--Perl Consulting, Stem Development, Systems Architecture, Design and Coding-
Search or Offer Perl Jobs ---------------------------- http://jobs.perl.org
 
Reply With Quote
 
Trent Curry
Guest
Posts: n/a
 
      02-18-2004
Uri Guttman wrote:
>>>>>> "T" == Trent Curry <> writes:

>
>> Butch wrote:
> >> I am using Matt Kruse's old calendar script [no version number

> in the >> comments] and want to have multiple user/password
> capability to allow >> more than one person to administer it
> without sharing the >> username/passwords. Has any one already
> written this hack and would >> be willing to share it?
>
>
>> Well for starters using any of Matt's scripts as been long deemed
>> flawed in anything reguarding security. If you want to modify the
>> script, I'd suggest usign a data base and doing lookups. Mysql works
>> well, as a quick and free solution.

>
> different matt. this is kruse and the bad kiddie scripter is write.
>
> and to the OP, fix it on line 17.


Thanks for clearing that up Uri.

--
Trent Curry

perl -e
'($s=qq/e29716770256864702379602c6275605/)=~s!([0-9a-f]{2})!pack("h2",$1
)!eg;print(reverse("$s")."\n");'


 
Reply With Quote
 
Uri Guttman
Guest
Posts: n/a
 
      02-18-2004
>>>>> "T" == Trent*Curry <> writes:

>> different matt. this is kruse and the bad kiddie scripter is write.


wright. should at least spell his name correctly when dissing him.

T> Thanks for clearing that up Uri.

not that the calendar script the OP is using is any better. i would
wager many quatloos that it is of the same crap quality of wright's
scripts. it sounds like it is free and unsupported and of use only to
kiddies who don't know perl.

if you want a decent perl based web calendar, then check out
webevent.com. there are others out there too.

uri

--
Uri Guttman ------ -------- http://www.stemsystems.com
--Perl Consulting, Stem Development, Systems Architecture, Design and Coding-
Search or Offer Perl Jobs ---------------------------- http://jobs.perl.org
 
Reply With Quote
 
Trent Curry
Guest
Posts: n/a
 
      02-18-2004
Uri Guttman wrote:
>>>>>> "T" == Trent Curry <> writes:

>
> >> different matt. this is kruse and the bad kiddie scripter is

> write.
>
> wright. should at least spell his name correctly when dissing him.
>
>> Thanks for clearing that up Uri.

>
> not that the calendar script the OP is using is any better. i would
> wager many quatloos that it is of the same crap quality of wright's
> scripts. it sounds like it is free and unsupported and of use only to
> kiddies who don't know perl.


Bawaa, how many script kiddies named Matt that freely destribute bad
scripts are there... jeepers.

> if you want a decent perl based web calendar, then check out
> webevent.com. there are others out there too.


I've seen that one in action, very nice. Good call.

--
Trent Curry

perl -e
'($s=qq/e29716770256864702379602c6275605/)=~s!([0-9a-f]{2})!pack("h2",$1
)!eg;print(reverse("$s")."\n");'


 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Claimed to be an "old hack" Charles Polisher Perl Misc 9 10-01-2010 08:54 PM
Change a users password without knowing the old password nor the answer to the password question AAaron123 ASP .Net 1 01-16-2009 02:56 PM
Changing a users password without knowing the old password nor the answer to the password question AAaron123 ASP .Net 2 01-16-2009 02:08 PM
How can Administrator change the Password of existing User, without knowing his Old Password in Administer Security Tool ? Luqman ASP .Net 5 07-12-2007 09:29 AM
filthy old hack =?Utf-8?B?TG9vcGJhY2s=?= MCSE 20 03-23-2006 04:55 AM



Advertisments
 



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57