LeakedIn Logo
Stories About Data Leaks and Related Stuff

Potential leak of data: URL with Credentials

0 votedvote

Detected 1 occurrence(s) of ‘[ht|f]tp[s]*:\/\/\w+\:.*\@\w*\.\w*’:

load xml file with authentication (and improving security)
$xml = simplexml_load_file($xml_query);

http://link.to/file.xml


http://username:password@link.to/file.xml

$ch = curl_init();

curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);  
curl_setopt($ch, CURLOPT_URL, $xml_query);
curl_setopt($ch, CURLOPT_USERPWD, $username . ':' . $password);
$result = curl_exec($ch);
curl_close($ch);

$xml = simplexml_load_st

Source: http://pastebin.com/raw.php?i=Axdi8z8s

Tags: ,

Comments are closed.