require function nick color (on code = maunick) or find and delete it
1. download attack, unzip, upload to root
2. open /pages/mainmenu.php paste
//chat box ajax
if ($user_id) {
echo '<script type="text/javascript" src="../cnd/jquery.js"></script><script type="text/javascript" src="http://ajax.microsoft.com/ajax/jquery.validate/1.7/jquery.validate.min.js"></script>';
echo '<script type="text/javascript" src="../cnd/ajax.js"></script>';
switch ($act) {
default:
echo '<div class="phdr"><a href="/guestbook/index.php">' . $lng['guestbook'] . '</a>' . ($rights >= 7 ? '<div style="float:right;"><a href="' . $home . '/guestbook/index.php?act=clean">'.functions::image('del.png').'</a></div>' : '') . '</div>';
$refer = base64_encode($_SERVER['REQUEST_URI']);
$token = mt_rand(1000, 100000);
$_SESSION['token'] = $token;
echo '<div class="list1"><form id="form" action="" method="POST">
<input type="text" placeholder="Chat comment" id="postText" name="msg" class="form-control"></input>
<button name="submit" type="submit" id="submit">' . $lng['write'] . '</button>
<input type="hidden" name="token" value="' . $token . '"/>
</form></div>';
echo '<div id="alert"></div><div id="postText"></div><div id="idChat"></div>';
}
}
3. open css paste
.tb {
background-color: #FFFFC8;
border: 1px solid #E0E3E9;
border-top: none;
color: #7f7212;
padding: 2px 4px
}
4. have fun