$cacheme=1;
$cachetime=40 * 60;
$archive=1;
require "./includes/header.php";
require "./includes/topbanarch.php";
function title(){
if($_GET['special']==1 || $_POST['special']==1){
$title="XSS Archive | Famous and Government Websites | XSSed.com";
}else{
$title="XSS Archive | XSSed.com";
}
return $title;
}
function meta(){
if($_GET['special']==1 || $_POST['special']==1){
$meta="
";
}else{
$meta="
";
}
return $meta;
}
?>
// GLOBAL ROWS TO OUTPUT
$global_limit=30;
require ("/var/www/users/xssed/beta/includes/db.php");
// LIMIT START
if($_GET['page'] && $_GET['page']!=""){
$querystart=((int)intval($_GET['page']))-1;
if($querystart < 0)$querystart=0;
$urlstart="start=" . $querystart;
$startvalue=$querystart;
$querystart="limit " . ($querystart*$global_limit) . "," . $global_limit;
}else{
if($_POST['page'] && $_POST['page']!=""){
$querystart=((int)intval($_POST['page']))-1;
if($querystart < 0)$querystart=0;
$urlstart="start=" . $querystart;
$startvalue=$querystart;
$querystart="limit " . ($querystart*$global_limit) . "," . $global_limit;
}else{
$querystart="limit 0," . $global_limit;
$urlstart="";
$startvalue=0;
}
}
// AUTHOR FILTER
if($_GET['author'] && $_GET['author']!=""){
$queryauthor=substr($_GET['author'],0,60);
$urlauthor="author=" . htmlentities($queryauthor) . "/";
$queryauthor=" and author='" . mysql_real_escape_string($queryauthor) . "' ";
}else{
if($_POST['author'] && $_POST['author']!=""){
$queryauthor=substr($_POST['author'],0,60);
$queryauthor=" and author='" . mysql_real_escape_string($queryauthor) . "' ";
$urlauthor="author=" . htmlentities($queryauthor) . "/";
}else{
$queryauthor="";
$urlauthor="";
}
}
// DOMAIN FILTER
if($_GET['domain'] && $_GET['domain']!=""){
$querydomain=substr($_GET['domain'],0,100);
$urldomain="domain=" . htmlentities($querydomain) . "/";
if(substr($querydomain, 0, 4)=="www."){
$querydomain2=substr($querydomain, 4);
}else{
$querydomain2=$querydomain;
}
$querydomain=" and domain_reverse like '" . mysql_real_escape_string(strrev($querydomain2)) . "%' ";
}else{
if($_POST['domain'] && $_POST['domain']!=""){
$querydomain=substr($_POST['domain'],0,100);
if(substr($querydomain, 0, 4)=="www."){
$querydomain2=substr($querydomain, 4);
}else{
$querydomain2=$querydomain;
}
$querydomain=" and domain_reverse like '" . mysql_real_escape_string(strrev($querydomain2)) . "%' ";
$urldomain="domain=" . htmlentities($querydomain) . "/";
}else{
$querydomain="";
$urldomain="";
}
}
// SPECIAL FILTER
if($_GET['special'] && $_GET['special']=="1" || $_GET['special']=="0"){
$queryspecial=" and special='" . (int)intval($_GET['special']) . "' ";
$urlspecial="special=" . (int)intval($_GET['special']) . "/";
}else{
if($_POST['special'] && $_POST['special']=="1" || $_POST['special']=="0"){
$queryspecial=" and special='" . (int)intval($_POST['special']) . "' ";
$urlspecial="special=" . (int)intval($_POST['special']) . "/";
}else{
$queryspecial="";
$urlspecial="";
}
}
// FIXED FILTER
if($_GET['fixed'] && $_GET['fixed']=="1" || $_GET['fixed']=="0"){
$queryfixed=" and fixed='" . (int)intval($_GET['fixed']) . "' ";
$urlfixed="fixed=" . (int)intval($_GET['fixed']) . "/";
}else{
if($_POST['fixed'] && $_POST['fixed']=="1" || $_POST['fixed']=="0"){
$queryfixed=" and fixed='" . (int)intval($_POST['fixed']) . "' ";
$urlfixed="fixed=" . (int)intval($_POST['fixed']) . "/";
}else{
$queryfixed="";
$urlfixed="";
}
}
?>
Syndicate |
| R | Domains already xss'ed. |
| S | Famous and Government web sites. |
| F | Status: Fixed/Unfixed. |
| PR | Pagerank by Alexa®. |
| You can subscribe to our mailing list to receive alerts by mail. |
|
if(!$_SESSION['loggedin'] || $_SESSION['loggedin']!=1){
/*
?>
*/ } ?>
|
| Date |
Author |
Domain |
R |
S |
F |
PR |
Category |
Mirror |
require "./includes/db.php";
$categories="select name from xss_vuln_category;";
$categories=mysql_query($categories);
while($categoriess=mysql_fetch_array($categories))$categ[]=$categoriess['name'];
$sql="select id,date_format(d_published,'%d/%m/%y') as dated,author,domain,rexssed,special,pagerank,category,path,fixed from xss_vuln where status=2 $queryauthor $querydomain $queryspecial $queryfixed order by d_published desc $querystart";
$result=mysql_query($sql);
while($row=mysql_fetch_array($result)){
//foreach($result as $row){
if($row['special']==1){
$special="";
}else{
$special="";
}
if($row['fixed']==1){
$fixed="";
}else{
$fixed="";
}
$cutdomain=$row['domain'];
if(substr($cutdomain,0,4)=="www.")$cutdomain=substr($cutdomain,4);
if($row['rexssed']==1){
$rexssed="R";
}else{
$rexssed="";
}
//echo $categories[2];
if($colortab!=1 || !isset($colortab)){
$colortab=1;
}else{
$colortab=2;
}
$category=$categ[$row['category']-1];
print "| " . $row['dated'] . " | " . htmlentities($row['author'], ENT_QUOTES) . " | " . htmlentities($row['domain'], ENT_QUOTES) . " | " . $rexssed . " | " . $special . " | " . $fixed . " | " . $row['pagerank'] . " | " . $category . " | mirror | \n";
}
/*
|
*/ ?>
|
//OLD LISTING CODE
/*
$sql="select count(*) from xss_vuln where status=2 $queryauthor $querydomain $queryspecial $queryfixed order by d_published desc;";
$result=mysql_query($sql);
$result=mysql_fetch_row($result);
$totalrows=$result[0];
$totalpages=(int)($totalrows/$global_limit);
if($totalrows-($totalpages*$global_limit)>0)$totalpages=$totalpages+1;
$actualpage=$startvalue+1;
$counter=1;
if($counter==$actualpage){
$output=$counter;
}else{
$output="" . $counter . "";
}
$counter=($counter+1);
$totalrows=($totalrows - $global_limit);
while($totalrows > 0){
$totalrows=($totalrows - $global_limit);
if($counter==$actualpage){
$output=$output . " " . $counter;
}else{
$output=$output . " " . $counter . "";
}
$counter=($counter+1);
}
*/
//NEW LISTING CODE (to show 30 numbers max
$sql="select count(*) from xss_vuln where status=2 $queryauthor $querydomain $queryspecial $queryfixed order by d_published desc;";
$result=mysql_query($sql);
$result=mysql_fetch_row($result);
$totalrows=$result[0];
if($totalrows==0){}else{
$totalpages=(int)($totalrows/$global_limit);
if($totalrows-($totalpages*$global_limit)>0)$totalpages=$totalpages+1;
$actualpage=$startvalue+1;
$showbefore=14;
$showafter=15;
$totalcount=1;
$counter=1;
$max=($actualpage + 15);
if($max > $totalpages){
// $max=($actualpage + 15);
while($max>$totalpages){
$max=($max - 1);
$showbefore=($showbefore + 1);
$showafter=($showafter-1);
}
}
$output="";
$startat=($actualpage - $showbefore);
if($startat < 1){
while($startat < 1)
{
$startat=($startat + 1);
$showbefore=($showbefore - 1);
$showafter=($showafter + 1);
}
}
$counter=$startat;
if($startat!=$actualpage){
while($counter<$actualpage && $showbefore>0)
{
$showbefore=($showbefore - 1);
$output=$output . " " . $counter . "";
$counter++;
}
$output=$output . " " . $counter . "";
$counter++;
}else{
$output="" . $counter . "";
$counter++;
}
while($counter<=$totalpages && $showafter>0){
$output=$output . " " . $counter . "";
$counter++;
$showafter=($showafter - 1);
}
// PREVIOUS BUTTONS
$previous="";
if($startat!=1){
$started=($startat - 16);
if($started<1){
while($started<1){
$started=($started+1);
}
}
$previous="|< ";
$previous=$previous . "<< ";
//$output=$previous . $output;
}
if(($actualpage - 1) > 0){
$previous=$previous . "< ";
}
$output=$previous . $output;
// NEXT BUTTONS
$next="";
if($actualpage!=$totalpages){
$started=($counter + 14);
if($started>$totalpages){
while($started>$totalpages){
$started=($started-1);
}
}
$next=" >|";
$next=" >>" . $next;
//$output=$output . $next;
}
if(($actualpage + 1) <= $totalpages){
$next=" >" . $next;
}
$output=$output . $next;
//END if non result
}
?>
if($totalrows!=0)print $output; ?>
if(!$_SESSION['loggedin'] || $_SESSION['loggedin']!=1){
?>
|
//ADSENSE
print $bottomadsense;
?>
|
} ?>
require "./includes/bottomban.php";
require "./includes/footer.php";
?>