From 5f8fe438f944b89ad5eff107be93324a2dc29161 Mon Sep 17 00:00:00 2001 From: Git-Admin Date: Tue, 13 Jan 2026 11:36:51 +0000 Subject: [PATCH] Initial commit - Release v1.0 --- .gitignore | 3 ++ index.php | 116 +++++++++++++++++++++++++++++++++++++++++++++++++++++ login.php | 53 ++++++++++++++++++++++++ 3 files changed, 172 insertions(+) create mode 100755 .gitignore create mode 100755 index.php create mode 100755 login.php diff --git a/.gitignore b/.gitignore new file mode 100755 index 0000000..eb72aa1 --- /dev/null +++ b/.gitignore @@ -0,0 +1,3 @@ +uploads/* +!uploads/.gitkeep +db_config.php diff --git a/index.php b/index.php new file mode 100755 index 0000000..64523a0 --- /dev/null +++ b/index.php @@ -0,0 +1,116 @@ +prepare("INSERT INTO posts (content, image_path, ip_address) VALUES (?, ?, ?)"); + $stmt->bind_param("sss", $content, $target_file, $ip); + + if ($stmt->execute()) { + $_SESSION['last_post_time'] = time(); + $msg = "Message posté avec succès !"; + } else { + $msg = "Erreur SQL."; // On évite d'afficher l'erreur précise aux utilisateurs + } + } + } +} +?> + + + + + Mini Forum CTF + + + + +
+ Accueil (Forum) | + Espace Admin (Flag) +
+ +

Bienvenue sur le Dev Web

+ +$msg

"; ?> + +
+

Poster un message

+
+

+ Image (JPG/PNG, Min 2Mo possible) :
+ +
+
+ +
+ +

Derniers messages

+query($sql); + +if ($result->num_rows > 0) { + while($row = $result->fetch_assoc()) { + echo "
"; + echo "
Posté par IP: " . $row["ip_address"] . " le " . $row["created_at"] . "
"; + echo "

" . nl2br($row["content"]) . "

"; + if ($row["image_path"]) { + echo "Image user"; + } + echo "
"; + } +} else { + echo "Aucun message pour le moment."; +} +?> + + + diff --git a/login.php b/login.php new file mode 100755 index 0000000..9e1c323 --- /dev/null +++ b/login.php @@ -0,0 +1,53 @@ + + + + +Admin Login + + +Retour au Forum + + + +
+

Félicitations !

+

Voici le flag du challenge Web :

+

+
+ Déconnexion +
+ + + +

Espace Administration

+ $msg

"; ?> +
+ User:

+ Pass:

+ +
+ + + + +