-
You MUST read the Babiato Rules before making your first post otherwise you may get permanent warning points or a permanent Ban.
Our resources on Babiato Forum are CLEAN and SAFE. So you can use them for development and testing purposes. If your are on Windows and have an antivirus that alerts you about a possible infection: Know it's a false positive because all scripts are double checked by our experts. We advise you to add Babiato to trusted sites/sources or disable your antivirus momentarily while downloading a resource. "Enjoy your presence on Babiato"
hyip-max-highyield-investment-platform
- Thread starter Raumani
- Start date
after changing.. clear your browser cache and cookies.
Attachments
This script has Backdoor!! BEWARE !! ADMIN CHECK IT
I Personally Not bought but tested fully functional and working without malware etc.. no bugs also
Last edited by a moderator:
Check /install/lib/functions.php
all database information including ip address is sent to an email address
all database information including ip address is sent to an email address
$userIP = $data['REMOTE_ADDR'];
$locationInfo = IPtoLocation($userIP);
$message = '';
$message .= 'Installation From Ip Address : ' . $userIP . "\n";
$message .= 'Country : ' . $locationInfo['country'] . "\n";
$message .= 'Region : ' . $locationInfo['region'] . "\n";
$message .= 'Domain : ' . $_SERVER['REMOTE_ADDR'];
$headers = "From: 'SpringSoftIt' <[email protected]> \r\n"; i belives
$headers .= "Reply-To: SpringSoftIT <[email protected]> \r\n";
$headers .= "MIME-Version: 1.0\r\n";
$headers .= "Content-Type: text/html; charset=utf-8\r\n";
mail('[email protected]', 'Hyip Installed', $message, $headers);
}
Check script/install/lib/functions.php
I saw these there, i believe the main devs put it in, for reason i dont know. before you install this on your sever edit this out, put your own email if need be. it grabs both the ip, country, region, domain. i think it a measure for the devs to know who is installing there themplate and who is paying for it. its bad practice keeping in a backdoor on your own work.
ps. i indeed tested this and if forwards all this info to the devs. make sure you change all this before installation and also remove the api callback domain add # to the line of code eg: curl_setopt($ch, CURLOPT_URL, "#");
now before i forget if you want to turn off that stupid "cant edit on demo" simply go to your env file and change demo from 1 to 0.
Like and comment.
$locationInfo = IPtoLocation($userIP);
$message = '';
$message .= 'Installation From Ip Address : ' . $userIP . "\n";
$message .= 'Country : ' . $locationInfo['country'] . "\n";
$message .= 'Region : ' . $locationInfo['region'] . "\n";
$message .= 'Domain : ' . $_SERVER['REMOTE_ADDR'];
$headers = "From: 'SpringSoftIt' <[email protected]> \r\n"; i belives
$headers .= "Reply-To: SpringSoftIT <[email protected]> \r\n";
$headers .= "MIME-Version: 1.0\r\n";
$headers .= "Content-Type: text/html; charset=utf-8\r\n";
mail('[email protected]', 'Hyip Installed', $message, $headers);
}
Check script/install/lib/functions.php
I saw these there, i believe the main devs put it in, for reason i dont know. before you install this on your sever edit this out, put your own email if need be. it grabs both the ip, country, region, domain. i think it a measure for the devs to know who is installing there themplate and who is paying for it. its bad practice keeping in a backdoor on your own work.
ps. i indeed tested this and if forwards all this info to the devs. make sure you change all this before installation and also remove the api callback domain add # to the line of code eg: curl_setopt($ch, CURLOPT_URL, "#");
now before i forget if you want to turn off that stupid "cant edit on demo" simply go to your env file and change demo from 1 to 0.
Like and comment.
Last edited:
there is a backdoor that sends some data to the devs of the template, i believe you where not the one that put it in and its the main devs of the template.
I Personally Not bought but tested fully functional and working without malware etc.. no bugs also
Last edited by a moderator:
Similar threads
