LOL I was talking about the GD. The GD library alone cannot help him display a php file WHILST still having the extension ".gif" they are just php functions. Thats when htaccess comes in.
Executable PHP in a GIF image
- Thread starter On_The_Edge
- Start date
- Status
LOL I was talking about the GD. The GD library alone cannot help him display a php file WHILST still having the extension ".gif" they are just php functions. Thats when htaccess comes in.
aymoon1987
Newbie
- Aug 15, 2008
- 4
- 0
there is a tool called edjpgcom that hide a php in jpg file . I don't know if it acts like php scripts or not .
The Scarlet Pimp
Supreme Member
- Apr 2, 2008
- 1,416
- 4,457
that program lets you edit comments in .jpg files.
doubtful the code would run when you view the .jpg
tsp
The Scarlet Pimp
Supreme Member
- Apr 2, 2008
- 1,416
- 4,457
fwiw... there is a web site that explains how to do this in detail, and has code that you can download and edit. i just saw it a few days ago.
do a search on 'cookie stuffing script' and you'll likely find it.
tsp
catman08
Junior Member
- Jan 11, 2008
- 170
- 110
guys .. it not hard to create php commands ins in jpg files.
create a php file as normal. upload it to the server ... rename it to the image type you want. make your server (via htaccess file in this specific folder) handle this jpg or whatever image file as a php file. done
create a php file as normal. upload it to the server ... rename it to the image type you want. make your server (via htaccess file in this specific folder) handle this jpg or whatever image file as a php file. done
agj32mrgibbits
Registered Member
- Mar 1, 2008
- 73
- 50
I execute PHP and then output a GIF using PHP all the time.
The Scarlet Pimp
Supreme Member
- Apr 2, 2008
- 1,416
- 4,457
i just tried forcing the server to consider a jpg file
as a php file, but it didn't work.
this is the code, why isn't it working?
<Files test5.jpg>
ForceType application/x-httpd-php
</Files>
tsp
as a php file, but it didn't work.
this is the code, why isn't it working?
<Files test5.jpg>
ForceType application/x-httpd-php
</Files>
tsp
catman08
Junior Member
- Jan 11, 2008
- 170
- 110
try and put the file in its own directory and then add this to your htaccess
AddType application/x-httpd-php .php .jpg .gif
Then in your php file make sure you have a correct header
eg
header("Content-type: image/png");
Look at the code I wrote its used for taking a image file and then over lays a random quote to it
AddType application/x-httpd-php .php .jpg .gif
Then in your php file make sure you have a correct header
eg
header("Content-type: image/png");
Look at the code I wrote its used for taking a image file and then over lays a random quote to it
matapples01
Regular Member
- May 15, 2008
- 358
- 210
Try this...works for me with hostgator
<Files test5.jpg>
AddHandler application/x-httpd-php5 jpg
</files>
The Scarlet Pimp
Supreme Member
- Apr 2, 2008
- 1,416
- 4,457
note: some servers won't accept 'forcetype'
so you must use 'sethandler' instead.
i've got it half right... still getting some errors.
will keep working on it...
tsp
so you must use 'sethandler' instead.
i've got it half right... still getting some errors.
will keep working on it...
tsp
The Scarlet Pimp
Supreme Member
- Apr 2, 2008
- 1,416
- 4,457
not quite... this is the correct format, you
must add a period before jpg -- like this:
<files test5.jpg>
AddHandler application/x-httpd-php5 .jpg
</files>
tested it and it works!
tsp
N.R.P
Regular Member
- Jul 8, 2008
- 231
- 38
not quite... this is the correct format, you
must add a period before jpg -- like this:
<files test5.jpg>
AddHandler application/x-httpd-php5 .jpg
</files>
tested it and it works!
tsp
I'm messing with php to learn , so this would be on the .htaccess right?
We're telling the server to read all .php5 as .jpg
Wouldn't only the command AddHandler application/x-httpd-php5 .jpg
Be enough? Why include
<files test5.jpg>
</files>
?
Last edited:
The Scarlet Pimp
Supreme Member
- Apr 2, 2008
- 1,416
- 4,457
The Scarlet Pimp
Supreme Member
- Apr 2, 2008
- 1,416
- 4,457
one thing i'm trying to do is to keep people from directly viewing a certain file (this has to do with cs).
this code doesn't work properly:
<?php
if(!$_SERVER['HTTP_REFERER']){
//
} else {
header("Location: http://www.ebay.com/?affid=12345");
}
?>
has anyone written anything on blocking direct access, so if someone enters the full url, they get taken to a different file or page? i don't want anyone to see that i'm using a fake image to stuff cookies. if they view the image it takes them to the ebay page.
this has been mentioned here, but nobody said how to do it....
this code doesn't work properly:
<?php
if(!$_SERVER['HTTP_REFERER']){
//
} else {
header("Location: http://www.ebay.com/?affid=12345");
}
?>
has anyone written anything on blocking direct access, so if someone enters the full url, they get taken to a different file or page? i don't want anyone to see that i'm using a fake image to stuff cookies. if they view the image it takes them to the ebay page.
this has been mentioned here, but nobody said how to do it....
matapples01
Regular Member
- May 15, 2008
- 358
- 210
The test5 is just the name of jpg file that you want to be treated as a php file. I think you could probably tell it to treat multiple files too...I just haven't needed to. It should be:
<files yourfilename.jpg>
</files>
bhnoobz
BANNED
- Jul 26, 2008
- 394
- 113
one thing i'm trying to do is to keep people from directly viewing a certain file (this has to do with cs).
this code doesn't work properly:
<?php
if(!$_SERVER['HTTP_REFERER']){
//
} else {
header("Location: http://www.ebay.com/?affid=12345");
}
?>
has anyone written anything on blocking direct access, so if someone enters the full url, they get taken to a different file or page? i don't want anyone to see that i'm using a fake image to stuff cookies. if they view the image it takes them to the ebay page.
this has been mentioned here, but nobody said how to do it....
The problem is $_SERVER['HTTP_REFERER'] will be set even if it is empty.. So you need to do the check based on the length of the string..
if (strlen($_SERVER['HTTP_REFERER'])) {
// not blank
} else {
// blank
}
- Status