MBL_349876.UNOFFICIAL FOUND - cpanel

I use CPanel to upload html and filezilla for FTP.
The problems when I upload the file 'index.php' are:
<meta http-equiv='Content-Type' content='text/html; charset=utf-8'>
<!--/***************LIBRERIE JS,CSS************/ -->
<link href="style.css" rel="stylesheet" type="text/css" />
<script language="JavaScript" type="text/javascript" src="js/jquery-1.9.1.js"></script>
<!--/******************************************/ -->
<!--INDICIZZAZIONE GOOGLE -->
<META NAME="KEYWORDS" CONTENT="infissi sardegna, infissi alluminio, aretino, serramenti, aretino serramenti, infissi sardegna, infissi cagliari, aretino cagliari,Infissi sardegna, infissi, infissi, finestre, finestre PVC">
<META NAME="DESCRIPTION" CONTENT="Aretino Serramenti, Leader costruzione e vendita di infissi in tutta la Sardegna.">
<div id="description_hidden">Aretino Serramenti, Leader costruzione e vendita di infissi in tutta la Sardegna.(Aretino, serramenti, infissi cagliari, Infissi sardegna, infissi, infissi, finestre, finestre PVC, FINESTRE LEGNO, infissi pvc, infissi pvc cagliari.)</div>
<img src="images/description.jpg" alt="Aretino Serramenti, Leader costruzione e vendita di infissi in tutta la Sardegna.(Aretino, serramenti, infissi cagliari, Infissi sardegna, infissi, infissi, finestre, finestre PVC, FINESTRE LEGNO, infissi pvc, infissi pvc cagliari.)"/>
<div id="fb-root"></div>
<?php
/*******Copyrigth YourWW*******/
$m = $_GET['m'];
echo '<head>';
echo '<title>Aretino Serramenti di Armando Aretino</title>';
echo '</head>';
/*******HEADER********/
include('header.php');
/*******COPERTINA********/
echo '<div id="copertina">';
echo '</div>';
echo '<div id="under_cop">
<div id="container_under_cop">
<span class="font_under_cop">
COSTRUZIONE SU MISURA MADE IN SARDEGNA
CON 25 ANNI DI ESPERIENZA NEL SETTORE DEI SERRAMENTI IN PVC</span>
';
echo '</div>';
echo '</div>';
switch($m){
default:
/*******MAIN********/
echo '<div class="main">';
echo'<div id="up_main"><span class="font_up_main">';
echo"AMPIA GAMMA DI FORME E COLORI - QUALITA' DEI MATERIALI E ATTENZIONE AI PARTICOLARI - ASSISTENZA TECNICA E DI PROGETTO - CONSEGNA
MONTAGGIO E ASSISTENZA POST VENDITA - RISPARMIO ENERGETICO - RISPARMIO SULLA MANUTENZIONE - PREVENTIVI GRATUITI";
echo'</span></div>';
include('main.php');
echo '</div>';
break;
case'home':
/*******MAIN********/
echo '<div class="main">';
echo '<div class="main">';
echo'<div id="up_main"><span class="font_up_main">';
echo"AMPIA GAMMA DI FORME E COLORI - QUALITA' DEI MATERIALI E ATTENZIONE AI PARTICOLARI - ASSISTENZA TECNICA E DI PROGETTO - CONSEGNA
MONTAGGIO E ASSISTENZA POST VENDITA - RISPARMIO ENERGETICO - RISPARMIO SULLA MANUTENZIONE - PREVENTIVI GRATUITI";
echo'</span></div>';
include('main.php');
echo '</div>';
break;
include('main.php');
echo '</div>';
break;
case 'inostrilavori':
echo '<div id="main_long">';
echo'<div id="up_main"><span class="font_up_main">';
echo"AMPIA GAMMA DI FORME E COLORI - QUALITA' DEI MATERIALI E ATTENZIONE AI PARTICOLARI - ASSISTENZA TECNICA E DI PROGETTO - CONSEGNA
MONTAGGIO E ASSISTENZA POST VENDITA - RISPARMIO ENERGETICO - RISPARMIO SULLA MANUTENZIONE - PREVENTIVI GRATUITI";
echo'</span></div>';
include('gallery.php');
echo '</div>';
break;
case 'contatti':
echo '<div class="main">';
echo'<div id="up_main"><span class="font_up_main">';
echo"AMPIA GAMMA DI FORME E COLORI - QUALITA' DEI MATERIALI E ATTENZIONE AI PARTICOLARI - ASSISTENZA TECNICA E DI PROGETTO - CONSEGNA
MONTAGGIO E ASSISTENZA POST VENDITA - RISPARMIO ENERGETICO - RISPARMIO SULLA MANUTENZIONE - PREVENTIVI GRATUITI";
echo'</span></div>';
include('contatti.php');
echo '</div>';
break;
}
/*******FOOTER********/
echo '<div id="footer">
<div id="container_footer">
<span class="font_footer">ARETINO SERRAMENTI<br/>
Via Roma 264, Ussana (CA) - Tel: 328 222 4802<br/>
e-mail: info#aretinoserramenti.it</span>';
echo '</div>';
echo'<div id="facebook">';
echo'<div class="fb-like" data-href="http://www.facebook.com/pages/Aretino-Serramenti/288686627886431?fref=ts" data-send="true" data-width="450" data-show-faces="false"></div>';
echo '</div>';
echo '</div>';
echo '<body>';
echo '</body>';
?>
<script>(function(d, s, id) {
var js, fjs = d.getElementsByTagName(s)[0];
if (d.getElementById(id)) return;
js = d.createElement(s); js.id = id;
js.src = "//connect.facebook.net/it_IT/all.js#xfbml=1&appId=339320619516879";
fjs.parentNode.insertBefore(js, fjs);
}(document, 'script', 'facebook-jssdk'));</script>
Virus Detected; File not Uploaded! (MBL_349876.UNOFFICIAL FOUND)

It is a wrong signature that happens to block basically everything... I have deleted it locally and hope they will re-release soon.

Happened to us as well with customers legitimate e-mail. We are using Amavis / ClamAV. I have created a temporary rule in amavisd.conf to allow this signature to pass through for now:
#virus_name_to_spam_score_maps =
(new_RE(
[ qr'MBL_349876.UNOFFICIAL' => -10.0 ],
));

My mail server would send dozens off alerts about this.
MBL_349876.UNOFFICIAL
it seems to be a signature mistake where any match to :// will cause a false positive. To solve this, we commented sources on /etc/clamav-unofficial-sigs

ClamAV detected virus = [MBL_349876.UNOFFICIAL]:
We are using CXS / ClamAV On our server which shows our 500 sites are infected ,
Most probably it`s a false Positive Error.
We checked our users using maldet and http://sitecheck.sucuri.net/results
Both shows sites are clean .

Related

HttpClient with latest User Agent being out of date?

Hi I'm sending a request through HttpClient to a webpage using this code:
Imports System.Net
Imports System.Net.Http
Public Class Form1
Dim client As HttpClient = New HttpClient()
Private Async Sub Button1_Click(sender As Object, e As EventArgs) Handles Button1.Click
' Set User-Agent header
client.DefaultRequestHeaders.UserAgent.ParseAdd("Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36")
' Send request and receive response
Dim response As HttpResponseMessage = client.GetAsync("https://ikalogs.ru/tools/map/?page=1&server=22&world=10&state=active&search=city&allies%5B1%5D=&allies%5B2%5D=&allies%5B3%5D=&allies%5B4%5D=&nick=Bauer&ally=&island=&city=&x=&y=").Result
If response.IsSuccessStatusCode Then
' Get response content as string
Dim vcmode As String = response.Content.ReadAsStringAsync().Result
' Print response content
RichTextBox1.Text = vcmode
End If
End Sub
End Class
I'm using the latest user agenti I'm taking from https://www.useragentstring.com/
but the reponse keep saying the browser is out of date:
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>Browser is out of date!</title>
<meta charset="utf-8">
<meta name="description" content="Ikalogs - Saving battle reports" />
<meta name="author" content="ZigFreeD" />
<meta name="keywords" content="ikalogs, логовица, анализатор, ikariam" />
<meta name="copyright" content="(c) 2012-2015 by ZigFreeD"/>
<meta http-equiv="pragma" content="no-cache"/>
<meta name="language" content=""/>
<base target=”_blank” />
<noscript>
<meta http-equiv="refresh" content="0; url=/default/jsdisabled/">
</noscript>
<style>
*{
margin: 0;
padding: 0;
color: #542c0f;
font: 700 20px/27px Arial,sans-serif;
text-align: center;
text-decoration: none;
}
body{
background: url(/themes/default/img/themes/error/background.jpg) #eedbb2;
}
.errorBrowser{
width: 500px;
min-height: 190px;
position: fixed;
left: 50%;
top: 50%;
margin: -95px 0 0 -250px;
}
.errorIcoDesk{
font: italic 700 14px/18px Arial,sans-serif;
background: url(/themes/default/img/themes/browsers.png) no-repeat top left;
width: 50px;
float: left;
padding: 100px 25px 0;
cursor: pointer;
filter:progid:DXImageTransform.Microsoft.Alpha(opacity=80);
opacity: .8;
}
.errorIcoDesk:hover{
filter: progid:DXImageTransform.Microsoft.Alpha(opacity=100);
opacity: 1;
}
.errorFi{background-position: -100px 0;}
.errorCh{background-position: -200px 0;}
.errorOp{background-position: -300px 0;}
.errorEx{background-position: -400px 0;}
</style>
</head>
<body>
<div class="errorBG">
<div class="errorBrowser">
<h1>Your browser is outdated or does not support the necessary technology for the operation of the site.</h1>
<a href="//www.apple.com/safari/">
<div class="errorIcoDesk errorSa">
Apple Safari
</div>
</a>
<a href="//www.mozilla.com/firefox/">
<div class="errorIcoDesk errorFi">
Mozilla Firefox
</div>
</a>
<a href="//www.google.com/chrome/">
<div class="errorIcoDesk errorCh">
Google Chrome
</div>
</a>
<a href="//www.opera.com/">
<div class="errorIcoDesk errorOp">
Opera
</div>
</a>
<a href="//ie.microsoft.com/">
<div class="errorIcoDesk errorEx">
Internet Explorer
</div>
</a>
</div>
</div>
</body>
</html>
I've been trying differents user agents, but this is the latest I can find online and It seems quite weird that page doesn't accept this one. I think I am doing something wrong while adding the user agent to the header.
Quite important: never use .Result or .Wait() in this platform
You often need to configure your HttpClient a bit more.
Always better add a CookieContainer and specify to use Cookies (event though it's the default behavior when a CookieContainer exists).
Then also better add headers that specify that decompression is supported and what decompression methods are handled, otherwise you may get back garbage (not in this specific case, but, well, since you're there...)
Now the User-Agent can be almost anything that's recognized
Here, I'm using Lazy initialization, as Lazy<T>(Func<T>).
I find it useful, both because allows to in-line the configuration of the HttpClient object and also add a configured HttpClientHandler with a Lambda and because you may create the class that contains the HttpClient but never actually use it (the object is initialized when you request the Lazy<T>.Value)
Private Shared ReadOnly client As Lazy(Of HttpClient) = New Lazy(Of HttpClient)(
Function()
Dim client = New HttpClient(CreateHandler(True), True) With {.Timeout = TimeSpan.FromSeconds(60)}
client.DefaultRequestHeaders.Add("User-Agent", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36")
client.DefaultRequestHeaders.Add("Cache-Control", "no-cache")
client.DefaultRequestHeaders.Add("Accept-Encoding", "gzip, deflate")
Return client
End Function
)
Private Shared Function CreateHandler(autoRedirect As Boolean) As HttpClientHandler
Return New HttpClientHandler() With {
.AllowAutoRedirect = autoRedirect,
.AutomaticDecompression = DecompressionMethods.GZip Or DecompressionMethods.Deflate,
.CookieContainer = New CookieContainer(),
.UseCookies = True ' Default here. To be clear...
}
End Function
After that, your HttpClient's request can act almost as a WebBrowser (unless the Web Site challenges your request and waits for a response - HSTS and different other tricks - then there's nothing you can do)
Private Async Sub Button1_Click(sender As Object, e As EventArgs) Handles Button1.Click
Dim url = "https://..."
Dim response As HttpResponseMessage = Await client.Value.GetAsync(url)
If response.IsSuccessStatusCode Then
RichTextBox1.Text = Await response.Content.ReadAsStringAsync()
Else
Debug.WriteLine(response.StatusCode)
End If
End Sub
Protected Overrides Sub OnFormClosed(e As FormClosedEventArgs)
client.Value.Dispose()
MyBase.OnFormClosed(e)
End Sub
As a note, the Web Site you have in your post is not secure

how to get socket_id from pusher with flask?

i fail with getting socket_id from pusher for presence and private channel with pusher_client.authenticate method.
here is schema to understand:
i am working with flask blueprints.
here is server url for identification:
from pusher import Pusher
PUSHER_APP_ID = '123456'
PUSHER_APP_KEY = 'secret109cfb2c29secret'
PUSHER_APP_SECRET = 'PUSHER_APP_SECRET'
PUSHER_APP_CLUSTER = 'eu'
SSL = True
pusher = Pusher(app_id=PUSHER_APP_ID, key=PUSHER_APP_KEY, secret=PUSHER_APP_SECRET, cluster=PUSHER_APP_CLUSTER)
#pousse_bp.route("/pusher/auth", methods=['POST'])
def pusher_authentication():
pusher_client = pusher
auth = pusher_client.authenticate(
channel=request.form['channel_name'],
socket_id=request.form['socket_id'])
flash(auth, 'success')
print(request.json)
return json.dumps(auth)
here is my template:
<form method="post" action="/pousse/pusher/auth">
<h3>test authenticate pusher</h3>
<h2>https://pusher.com/docs/channels/server_api/authenticating-users</h2>
<input type="hidden" name="csrf_token" value="{{ csrf_token() }}"/>
<input type="text" name="channel_name" placeholder="channel_name here"><br>
<input type="submit" name="Submit">
</form>
</body>
<script src="https://code.jquery.com/jquery-3.3.1.min.js" integrity="sha256-FgpCb/KJQlLNfOu91ta32o/NMZxltwRo8QtmkMRdAu8="
crossorigin="anonymous"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js" integrity="sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39j7fakFPskvXusvfa0b4Q" crossorigin="anonymous"></script>
<script src="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js" integrity="sha384-JZR6Spejh4U02d8jOt6vLEHfe/JQGiRRSQQxSfFWpi1MquVdAyjUar5+76PVCmYl" crossorigin="anonymous"></script>
<script src="https://js.pusher.com/4.0/pusher.min.js"></script>
<script type="text/javascript">
var pusher = new Pusher('secret109cfb2c29secret', {cluster: 'eu',encrypted: true, authTransport: 'jsonp',authEndpoint: 'pousse/pusher/auth'});
pusher.connection.bind('connected', function() {
console.log("connected");
socketId = pusher.connection.socket_id;
console.log("socketId" + socketId);
});
var channel = pusher.subscribe('presence-channel');
it does not work because something is wrong fot getting socket_id,
so it's invalid. i dont understand what it lacks in my code.
the message error on flask is :
in pusher_authentication
socket_id=request.form['socket_id'])
File "python3.7/site-packages/werkzeug/datastructures.py", line 443, in __getitem__
raise exceptions.BadRequestKeyError(key)
werkzeug.exceptions.BadRequestKeyError: 400 Bad Request: The browser (or proxy) sent a request that this server could not understand.
KeyError: 'socket_id'
the mozilla console error is:
connected pousseindex:88:17
socketId126757.3121110 pousseindex:90:17
Le script à l’adresse « http://localhost:5000/pousse/pousse/pusher/auth?callback=Pus…27%5D&socket_id=126757.3121110&channel_name=presence-channel » a été chargé alors que son type MIME (« text/html ») n’est pas un type MIME JavaScript valide.

How to use Apis to view lines in Xtream code 2.9.2?

How to view Lines from Xtream Code CMS?
I am using some APIs but not able view lines it always shows me 'Access Denied'.
How to allow API access? I have Xtream code 2.9.2 version.
I know To use APIs, we have to import our IP address into the whitelist from General Settings -> API Settings. It was an option in Xtream code 2.3.x but in later versions, they have changed things. And by default, they have disabled the access of APIs. There is no such type of option in the current version of Xtream code we have.
Any solution? How to allow API access in xtream code 2.9.2?
<?php
$panel_url = 'https://cms.xtream-codes.com/xxxx/'; //i am giving my cms xtream code panel link here
$username = "xxxx"; //i am giving my xtream code cms username here
$password = "xxxx"; //i am giving my xtream code cms password here
##############################################################################
$post_data = array( 'username' => $username, 'password' => $password );
$opts = array( 'http' => array(
'method' => 'POST',
'header' => 'Content-type: application/x-www-form-urlencoded',
'content' => http_build_query( $post_data ) ) );
$context = stream_context_create( $opts );
$api_result = json_decode( file_get_contents( $panel_url . "api.php?action=user&sub=info", false, $context ), true );
echo implode( ',', $api_result);
?>
Access denied
Pretty sure the $panel_url refers to the URL to your main server rather than your cms panel
My solution for checking active subscription info using xtream-codes V2 API
create an Index.php page for your form
<form class="form-inline" action="submit.php" method="post">
<div class="form-group">
<input type="text" class="form-control" id="username" placeholder="Enter Lines Username" name="username">
<input type="text" class="form-control" id="password" placeholder="Enter Lines Password" name="password">
<button type="submit" id="submit" class="btn btn-primary" name="submit">GET STREAM IDS</button>
</form>
Create submit.php and point your form action to it
<?php
$surname = $_POST['surname'];
$username = $_POST['username'];
$password = $_POST['password'];
$exp_date = date("d-m-Y",$json['user_info']["exp_date"]);
$json = json_decode(file_get_contents("http://<-YOUR DNS ->:<-YOUR PORT ->/panel_api.php?username=$username&password=$password"), true);
?>
<?php echo $json['user_info']["username"];?></a>
<?php echo $json['user_info']["password"];?></a>
<?php echo $json['user_info']["status"];?></a>
<?php echo $exp_date;?></a>
and create a line download button like this
DOWNLOAD PLAYLIST
The below code will generate a table of active channels and their TS numbers dependant to the entered line subscription packages
<table>
<thead>
<tr>
<th width="50%"><center>STREAM NAME</center></th>
<th width="50%"><center>STREAM TS NUMBER</center></th>
</tr>
</thead>
<tbody>
<tr>
<?php
$username = $_POST['username'];
$password = $_POST['password'];
$json = json_decode(file_get_contents("http://<-YOUR DNS ->:<-YOUR PORT ->/player_api.php?username=$username&password=$password&action=get_live_streams"), true);
for ($x = 0; $x < count($json); $x++)
{ ?>
<td><center><strong><?php echo $json[$x]['name'];?></strong></center></td>
<td><center><strong><?php echo $json[$x]['stream_id'];?></strong></center></td>
</tr>
<?php } ?>
these may not be the best methods but they work and I actually use myself

Using ini_set in PHP file

I just asked this question here regarding sending email from Windows server. Got the answer that the php.ini file has to be configured. After reading a little bit more, I found out about ini_set() function in PHP. So I tried to use it like that:
ini_set('SMTP', 'mail.mysite.com');
ini_set('smtp_port', 25);
ini_set('auth_username', 'me#mysite.com');
ini_set('auth_password', 'mypass');
ini_set('sendmail_from', 'me#mysite.com');
function send_contact_form($strName, $strEmail, $strPhone, $strMessage)
{
$to = 'mymail#mysite.com';
$subject = 'From the site';
$message = '<html lang="HE">
<head>
<title>
'.$subject.'
</title>
</head>
<body style="text-align:right; direction:rtl; font-family: Arial;">
Name: '.$strName.'<br>Email: '
.$strEmail.'<br>Phone: '.$strPhone
.'<br><br>Message: <br>'.$strMessage.'
</body>
</html>';
$email = $strEmail;
$header = 'MIME-Version: 1.0' . "\r\n";
$header .= 'Content-type: text/html; charset=UTF-8' . "\r\n";
$header .= "From: $email\r\nReply-To: $email" . "\r\n";
mail($to, $subject, $message, $header);
}
However, I still don't receive any email. What am I doing wrong? Why is it not working?

Automatically grab file path

Everyone i am looking for a way to automatically upload a file but skip the browse and choose file process.
So i set the location of the file somehow via the form and the client just has to click submit and it will automatcially upload the file from the path i have set. skipping the browse for file process.
I would like to intergrate it into the following undesigns S3 Class
http://undesigned.org.za/2007/10/22/amazon-s3-php-class/documentation
<?php
S3::setAuth(awsAccessKey, awsSecretKey);
$bucket = "upload-bucket";
$path = "myfiles/"; // Can be empty ""
$lifetime = 3600; // Period for which the parameters are valid
$maxFileSize = (1024 * 1024 * 50); // 50 MB
$metaHeaders = array("uid" => 123);
$requestHeaders = array(
"Content-Type" => "application/octet-stream",
"Content-Disposition" => 'attachment; filename=${filename}'
);
$params = S3::getHttpUploadPostParams(
$bucket,
$path,
S3::ACL_PUBLIC_READ,
$lifetime,
$maxFileSize,
201, // Or a URL to redirect to on success
$metaHeaders,
$requestHeaders,
false // False since we're not using flash
);
$uploadURL = "https://{$bucket}.s3.amazonaws.com/";
?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>S3 Form Upload</title>
</head>
<body>
<form method="post" action="<?php echo $uploadURL; ?>" enctype="multipart/form-data">
<?php
foreach ($params as $p => $v)
echo " <input type=\"hidden\" name=\"{$p}\" value=\"{$v}\" />\n";
?>
<input type="file" name="file" /> <input type="submit" value="Upload" />
</form>
</body>
</html>
at what point does it grab the file path ?
is it grabbing it out of the name here
can i do something with $_FILES ???
Can someone please give me a point on where to start i would really appriciate this.
thanks
You'll have to specify the tools of the trade. A common html form has no such functionality.
You can try value="c:\somefile.ext" but many browsers will not accept this.