From d76512718942b390faeb693c7a97af6c1e7bc695 Mon Sep 17 00:00:00 2001 From: Git-Admin Date: Mon, 12 Jan 2026 22:49:29 +0000 Subject: [PATCH] Initial commit forum --- .env | 2 + .gitignore | 3 ++ db_config.example.php | 9 ++++ index.php | 116 +++++++++++++++++++++++++++++++++++++++++ index.php.bak | 118 ++++++++++++++++++++++++++++++++++++++++++ login.php | 53 +++++++++++++++++++ login.php.bak | 55 ++++++++++++++++++++ 7 files changed, 356 insertions(+) create mode 100755 .env create mode 100755 .gitignore create mode 100755 db_config.example.php create mode 100755 index.php create mode 100755 index.php.bak create mode 100755 login.php create mode 100755 login.php.bak diff --git a/.env b/.env new file mode 100755 index 0000000..041bdb4 --- /dev/null +++ b/.env @@ -0,0 +1,2 @@ +ADMIN_USER=lmao +ADMIN_PASS=F^!3'?1^MTzKTcV%dHVh'|;Am diff --git a/.gitignore b/.gitignore new file mode 100755 index 0000000..eb72aa1 --- /dev/null +++ b/.gitignore @@ -0,0 +1,3 @@ +uploads/* +!uploads/.gitkeep +db_config.php diff --git a/db_config.example.php b/db_config.example.php new file mode 100755 index 0000000..a308101 --- /dev/null +++ b/db_config.example.php @@ -0,0 +1,9 @@ + diff --git a/index.php b/index.php new file mode 100755 index 0000000..64523a0 --- /dev/null +++ b/index.php @@ -0,0 +1,116 @@ +prepare("INSERT INTO posts (content, image_path, ip_address) VALUES (?, ?, ?)"); + $stmt->bind_param("sss", $content, $target_file, $ip); + + if ($stmt->execute()) { + $_SESSION['last_post_time'] = time(); + $msg = "Message posté avec succès !"; + } else { + $msg = "Erreur SQL."; // On évite d'afficher l'erreur précise aux utilisateurs + } + } + } +} +?> + + + + + Mini Forum CTF + + + + +
+ Accueil (Forum) | + Espace Admin (Flag) +
+ +

Bienvenue sur le Dev Web

+ +$msg

"; ?> + +
+

Poster un message

+
+

+ Image (JPG/PNG, Min 2Mo possible) :
+ +
+
+ +
+ +

Derniers messages

+query($sql); + +if ($result->num_rows > 0) { + while($row = $result->fetch_assoc()) { + echo "
"; + echo "
Posté par IP: " . $row["ip_address"] . " le " . $row["created_at"] . "
"; + echo "

" . nl2br($row["content"]) . "

"; + if ($row["image_path"]) { + echo "Image user"; + } + echo "
"; + } +} else { + echo "Aucun message pour le moment."; +} +?> + + + diff --git a/index.php.bak b/index.php.bak new file mode 100755 index 0000000..9e16e71 --- /dev/null +++ b/index.php.bak @@ -0,0 +1,118 @@ +prepare("INSERT INTO posts (content, image_path, ip_address) VALUES (?, ?, ?)"); + $stmt->bind_param("sss", $content, $target_file, $ip); + + if ($stmt->execute()) { + $_SESSION['last_post_time'] = time(); + $msg = "Message posté avec succès !"; + } else { + $msg = "Erreur SQL : " . $conn->error; + } + } + } +} +?> + + + + + Mini Forum CTF + + + + +
+ Accueil (Forum) | + Espace Admin (Flag) +
+ +

Bienvenue sur le Dev Web

+ +$msg

"; ?> + +
+

Poster un message

+
+

+ Image (JPG/PNG, Min 2Mo possible) :
+ +
+
+ +
+ +

Derniers messages

+query($sql); + +if ($result->num_rows > 0) { + while($row = $result->fetch_assoc()) { + echo "
"; + echo "
Posté par IP: " . $row["ip_address"] . " le " . $row["created_at"] . "
"; + echo "

" . nl2br($row["content"]) . "

"; + if ($row["image_path"]) { + echo "Image user"; + } + echo "
"; + } +} else { + echo "Aucun message pour le moment."; +} +?> + + + diff --git a/login.php b/login.php new file mode 100755 index 0000000..9e1c323 --- /dev/null +++ b/login.php @@ -0,0 +1,53 @@ + + + + +Admin Login + + +Retour au Forum + + + +
+

Félicitations !

+

Voici le flag du challenge Web :

+

+
+ Déconnexion +
+ + + +

Espace Administration

+ $msg

"; ?> +
+ User:

+ Pass:

+ +
+ + + + + diff --git a/login.php.bak b/login.php.bak new file mode 100755 index 0000000..b7865fa --- /dev/null +++ b/login.php.bak @@ -0,0 +1,55 @@ + + + + + + Espace Admin + + + + +
+ Accueil (Forum) | + Espace Admin (Flag) +
+ + + +
+

Accès autorisé !

+

Voici votre récompense :

+

{CTFM1:lebeurredecacahuetesestsouscoté}

+
+ Se déconnecter +
+ + + +

Connexion Requise

+
+ User:

+ Pass:

+ +
+

(Tu peux tenter: admin / supersecret)

+ + + + +