Invalid Referer Error
Contents |
here for a quick overview of the site Help Center Detailed answers to any questions you might have Meta Discuss the workings invalid referer hack this site and policies of this site About Us Learn more about Stack Overflow invalid referrer html the company Business Learn more about hiring developers or posting ads with us Stack Overflow Questions Jobs Documentation
Hack This Site Level 5
Tags Users Badges Ask Question x Dismiss Join the Stack Overflow Community Stack Overflow is a community of 4.7 million programmers, just like you, helping each other. Join them; it
Javascript Injection
only takes a minute: Sign up reCaptcha show “input error: invalid referer” up vote 23 down vote favorite 5 I have registered an account on recaptcha.net with mydomain.com. While I'm developing on my localhost it works fine, but whenever I try to open the page from another machine in my local network it shows "input error: invalid referer" error message! recaptcha I'm not using recaptcha plugins. php recaptcha share|improve this question asked Aug 17 '12 at 3:02 ehsun7b 2,12294178 add a comment| 4 Answers 4 active oldest votes up vote 28 down vote accepted reCaptcha keys are tied to a certain domain + localhost (when you got your private/public keys from them). You can use it on another domain by requesting new private/public keys or by using a global key. From their website: By default, your reCAPTCHA key is restricted to the specified domain, and any subdomains for additional security. A key for foo.com works on test.foo.com. If you wish to use your key across a large number of domains (e.g., if you are a hosting provider, OEM, etc.), select the global key option. You may want to use a descriptive domain name such as "global-key.mycompany.com" If you own multiple domain names (foocars.com and footrucks.com), you can sign up for multiple keys, or use a global key. share|improve this answer answered Aug 17 '12 at 3:09 Nasreddine 18.4k104174 damn, so I'm trying to get my pull reque
von GoogleAnmeldenAusgeblendete FelderNach Gruppen oder Nachrichten suchen
Existing customer? Login to your account (top right corner) before you can post a question. Forgot your login? Read this page for instructions. Pre-sales questions? Send us a message via our pre-sales contact form. Important Notice This forum http://forums.appthemes.com/jobroller-general-discussion/input-error-invalid-referer-login-62012/ is setup for community support only so customers can interact and help each other. The AppThemes support team does not monitor, respond, or provide support here. For official AppThemes support, please use the "Help Using JobRoller" forum. http://itknowledgeexchange.techtarget.com/security-corner/hacking-skills-challenge-level-5/ Results 1 to 3 of 3 Thread: Input error: Invalid referer on login/register page Thread Tools Show Printable Version Subscribe to this Thread… Search Thread Advanced Search November 27th, 2013 #1 srd75 Thread Starter Join invalid referer Date Nov 2013 Location United States Posts 109 Thanks 0 Thanked 3 Times in 3 Posts Input error: Invalid referer on login/register page Hi. We're using JobRoller and Flux, and when we click login/register at top right, we're taken to http://sec-2-sec.com/login On this page, where the captcha code should be (I believe), there is a message saying "Input error: Invalid referer". We have Better WP Security installed, and previously we turned on the "hide hack this site backend" feature, which rewrote the Login Slug to "login". However the "hide backend" feature is now turned off, and there is no mention of this feature in .htaccess. Should JobRoller/Flux be using /login as the URL to login/register? If not, why is it still being served this way when it has been turned off in Better WP Security and .htaccess? Is there a way we can tell JobRoller/Flux to listen to /login when producing the captcha code, so that the invalid referrer doesn't occur? Thanks and regards, Steve. Reply With Quote December 21st, 2013 #2 srd75 Thread Starter Join Date Nov 2013 Location United States Posts 109 Thanks 0 Thanked 3 Times in 3 Posts You must be an AppThemes customer and logged in to view this response. Join today! Reply With Quote December 23rd, 2013 #3 jomarkosabel Join Date Mar 2009 Location Philippines Posts 27,498 Thanks 126 Thanked 2,125 Times in 2,019 Posts You must be an AppThemes customer and logged in to view this response. Join today! Please help our moderating team work more efficiently by not sending us support questions via PM. You can read more about how AppThemes support works here. However, you can send a PM to follow up and remind me if I missed your support request/thread. Thank you and have a nice day
? Ask a question, help others, and get answers from the community Discussions Start a thread and discuss today's topics with top experts Blogs Read the latest tech blogs written by experienced community members >>VIEW ALL POSTS Security Corner « Google Safe Browsing Diagnostic Page Protect HTML Code for Increased Security » Sep 23 2009 8:15PM GMT Hacking Skills Challenge - Level 5 Ken Harthun Profile: Ken Harthun So far, we’ve explored the first 4 basic missions at HackThisSite.org. As we get to each new level, the difficulty increases, but they’re still pretty easy. Today, we solve level 5: Sam has gotten wise to all the people who wrote their own forms to get the password. Rather than actually learn the password, he decided to make his email program a little more secure. If you try the same tactic we used to solve level 4, you'll get the error message, "Invalid referrer. The requested URL /missions/basic/5/level5.php will not be loaded." You get this because the script checks the HTTP headers to see where you are viewing the page from. If the url is not /missions/basic/5/ or /missions/basic/5/index.php then it will give an error. Since you're viewing it from a local file, the script fails. There are two approaches we can take here: 1. Change the email address in the script using some form of code injection; 2. Use an online monitor/debugger that allows us to edit a page on the fly. For the first approach, Javascript injection allows us to change the email address using the following code: javascript:alert(document.forms[0].to.value="put_your@email. here"); Enter that in the address bar, hit Enter, and you'll be greeted with an alert box show the email address you entered. If you then click the "Send Password to Sam" button, the password will be revealed. Copy the password, paste it into the password field, click Submit and you're in. Like the last exploit, the page won't actually send the password to the email address. In fact, you don't even have to change the email address in the code; it will work as shown. For the second approach, if you use Firefox, you can install a cool add-on called Firebug. This powerful tool allows you edit, debug, and monitor CSS, HTML, and JavaScript live in any web page. I installed it, went to the challenge page and used the "