Fix your source and secure it!
Every Stresser that's been recently compromised, is because of the exact same vuln that is in the exact same file at the exact spot!
Now, I'm going to tell you how to fix these public known vulns because if not, the SST Section will be cleared out within days.
The most known vuln is in the ticket.php file that most users have including the old ass vDoS source.
Now, find the line that has the following (Or something familiar)
Code
$SQLGetTickets = $odb -> execute("SELECT * FROM `tickets` WHERE `id` = $id");If you have common sense, you'll see the issue.
You don't see it? You're going straight into a query with a un-sanitize variable.
The whole point of using PDO is to avoid sanitizing little stuff like this aka escaping strings like when you're using MySQL.
Now, I don't ever want you to use a query directly, especially if you're inserting data into that query.
Let's do it the proper way
Code
$SQLGetTickets = $odb -> prepare("SELECT * FROM `tickets` WHERE `id` = :?") -> execute(array(":?" => $id));Every single booter who has been compromised, has been compromised because of this exact reason.
Now, I want you all to go into every single file you have and check if you're inserting data into a pdo query directly. If you are, FOR THE LOVE OF GOD GO PREPARE YOUR GOD DAMN PDO QUERY!!!
If you want to have that extra security, just bind it to the data type assigned to it.
With that being said, I'll let you go fix your stuff now.
![[Image: lPQX27G.png]](https://i.imgur.com/lPQX27G.png)