How To Patch No Redirect Bug on Your Website

farahulfa(42)

Published in

#utopian-io

Words

312

Reading

2 min

Listen

Play

What Will I Learn?

You will learn a hacker's path to hack websites with bugs No Redirect.
You will learn to secure your website from bugs No Redirect.

Requirements

You should be able to PHP language.

Difficulty

Either choose between the following options:

Basic

Tutorial Contents

Well hello People, now I wan't to tell you "How To Patch No Redirect Bug on Your Website".
But first I will tell you what is bugs no redirect? Technique No Redirect Login Page allows hackers to exploit the admin area on a website that has bug No Redirect . With this gap hacker can become a web admin without knowing the web Developer's username and password. But in this bugs hackers will use the help of add ons mozilla firefox is NoRedirect.Okay I will show you how a hacker using this bugs.

You look that guys? a hacker can become a web admin without knowing the web Developer's username and password,huh?. Okay now I want to tell you why this bug can happen and how to take it.

This bug exists in the absence of function exit; on the dashboard admin page, and how to patch this bug?
You can see the source below which there is no exit function at all,

<?php

session_start();

if (!$_SESSION['email']) {
  $_SESSION["sigin_error"] = "Please Signin";
header("Location: index.php");
}

include 'dbconnection.php';

$sql_query="SELECT * FROM contact1 ORDER BY entrydate DESC";
$result_set=mysql_query($sql_query);
if(isset($_GET['delete_id']))
{
 $sql_query="DELETE FROM contact1 WHERE id=".$_GET['delete_id'];
 mysql_query($sql_query);
 header("Location: admin.php");
}
$count=0;
?>

Because on admin.php file is admin dashboard page then I take source from admin.php file.
look on source

if (!$_SESSION['email']) {
  $_SESSION["sigin_error"] = "Please Signin";
header("Location: index.php");
}

It should be under command header ("Location: index.php"); must have exit; function to remove or stop the hacker's command.

This source has added exit; function,

<?php

session_start();

if (!$_SESSION['email']) {
  $_SESSION["sigin_error"] = "Please Signin";
header("Location: index.php");
exit;
}

include 'dbconnection.php';

$sql_query="SELECT * FROM contact1 ORDER BY entrydate DESC";
$result_set=mysql_query($sql_query);
if(isset($_GET['delete_id']))
{
 $sql_query="DELETE FROM contact1 WHERE id=".$_GET['delete_id'];
 mysql_query($sql_query);
 header("Location: admin.php");
}
$count=0;
?>

And this results after the patch,

okay guys until here I told you "How To Patch No Redirect Bug on Your Website",
hopefully useful for you and your website. don't let hackers damage your system again. :)