A little PHP question

[shanes]

Well i'm a total 'newbie' when it comes to PHP , I know close to nothing , anyway I recently downloaded a CMS and I was looking through the source and I found this , i'm wondering what this code does as it seems dodgy , to me it looks like the site is logging the information I enter into my mysql database and sending it off to a 3rd party site , I just want someone to confirm it.
Here's the code:

$domain = $_SERVER['HTTP_HOST'];
$ip = $_SERVER['REMOTE_ADDR'];
$report = file_get_contents("*Removed*/logger/installs.php?d=".$domain."&i=".$ip."");

It probably isn't anything bad but better safe than sorry :lockd:

 

[leafypiggy]

1. What is the CMS?

2. What is the name of the file?

3. I think it is logging your info like time and date into your mysql database, joomla does that.

 

[shanes]

1. What is the CMS?

2. What is the name of the file?

3. I think it is logging your info like time and date into your mysql database, joomla does that.

1. You woun't know the CMS as it's a made by a user on a forum I go on , it's called HSP (Habbo site panel)

2. Ermm can't remember , it's a config file that you go on to create a username for the CMS

3 Probably is , wasn't too sure so i asked , I'm guessing it's a way of checking who uses their panel

 

[Bryon]

Looks like it is logging your site's domain and your IP address to some remote site. What is the *Removed*? What was there? Was it a URL? That is what it looks like

 

[coolcat50]

yeah its probably a removed link and just ask the person you got it from

 

[shanes]

I removed the domain manually lol I only removed the domain name , the extension of the url is still there.

Thanks for your help , I'm guessing that's their way of tracking sites , I still think it's kinda dodgy though

 

[Slothie]

Heh, I have similar code in a number of free scripts I've released over the years, its nice to know who's using 'em.

 

[Thewinator]

$domain = $_SERVER['HTTP_HOST'];

Gets the domain the file is running from.

$ip = $_SERVER['REMOTE_ADDR'];

Gets the ip address of the visitor of your site.

$report = file_get_contents("*Removed*/logger/installs.php?d=".$domain."&i=".$ip."");

Is actualy a bit of a useless line unless the $report is actualy echo'ed later.
But basicly it loads the response of /logger/installs.php to the domain and ip sent to it.
If you want to find out what that file does with that data then you should open it (if you have access to it), and look for

$_GET['d']

and

$_GET['i']

 

[Slothie]

Its not quite useless, it sends the domain and the IP to installs.php via GET.

They do the processing from there. The file itself probably outputs nothing at all.

 

[Thewinator]

I was refering to the designating it to the variable.
just the file_get_contents command would suffice to send information using the get method.
And like you said it probebly outputs nothing, so it no use to store that nothing.