HTTP/1.1 200 OK
X-Powered-By: PHP/7.1.7
Set-Cookie: PHPSESSID=d28a8dcf5e038f23f564192a29cbb3cc; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-type: text/html; charset=UTF-8
Content-Length: 11493
Date: Mon, 03 Mar 2025 20:10:39 GMT
Server: lighttpd/1.4.45
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
<title>Login @ Reporter - OLYM</title>
<link rel="SHORTCUT ICON" href="/images/reporter.ico" type="image/x-icon"/>
<link type="text/css" rel="stylesheet" href="/style/common.css" />
<script language="javascript" type="text/javascript" src="/js/prototype.js"></script>
<script language="javascript" type="text/javascript" src="/js/base.js"></script>
<style type="text/css">
body{
positon:relative;
background:#005F9F;
}
#lf{
background:url(../images/login_bg.png) no-repeat top left;
width:349px;
height:166px;
position:absolute;
left:50%;
top:50%;
margin:-84px 0 0 -175px;
}
#version{
padding:3px 0 0 10px;
color:#fff;
}
#loginBox{
margin:28px 0 0 0 ;
}
#lang{
width:138px;
#width:136px;
}
#loginField{
position:relative;
}
#msgBox{
position:absolute;
top:6px;
left:10px;
color:#ff0000;
}
</style>
<script type="text/javascript">
document.observe('dom:loaded',function(){
changeLang();
regBt();
});
function changeLang(){
$('lang').observe('change',function(){
setCookie('lan',$F('lang'));
//location.reload();
location.href = '../index.php?lan='+$F('lang');
});
}
function regBt(){
$('lf').observe('submit',function(){
$('user_password').value = $('user_password').value;
});
}
</script>
</head>
<body>
<form id='lf' name='lf' action='../action.php' method="post" class="loginForm">
<p id="version">
Welcome to Reporter
</p>
<fieldset id="loginField">
<div id="loginBox">
<p>
<label for="lang">Language</label>
<select name="language" id="lang">
<option label="English" value="en_US" selected="selected">English</option>
<option label="简体中文" value="zh_CN">简体中文</option>
</select>
</p>
<p>
<label for="user_name">User name</label>
<input name="user_name" id="user_name" type="text" maxlength="32" class="text" />
</p>
<p>
<label for="user_password">Password</label>
<input name="user_password" id="user_password" type="password" class="text" autocomplete="off"/>
<input name="do" id="do" type="hidden" value="login" />
</p>
<p class="subArea">
<label> </label>
<button type='submit' id="sub" class="bt2">Login</button>
<button type="reset" id="reset" class="bt2">Cancel</button>
</p>
</div>
</fieldset>
</form>
</body>
</html>
<script language="javascript">
/*
* A JavaScript implementation of the RSA Data Security, Inc. MD5 Message
* Digest Algorithm, as defined in RFC 1321.
* Version 2.1 Copyright (C) Paul Johnston 1999 - 2002.
* Other contributors: Greg Holt, Andrew Kepert, Ydnar, Lostinet
* Distributed under the BSD License
* See http://pajhome.org.uk/crypt/md5 for more info.
*/
/*
* Configurable variables. You may need to tweak these to be compatible with
* the server-side, but the defaults work in most cases.
*/
var hexcase = 0; /* hex output format. 0 - lowercase; 1 - uppercase */
var b64pad = ""; /* base-64 pad character. "=" for strict RFC compliance */
var chrsz = 8; /* bits per input character. 8 - ASCII; 16 - Unicode */
/*
* These are the functions you'll usually want to call
* They take string arguments and return either hex or base-64 encoded strings
*/
function hex_md5(s){ return binl2hex(core_md5(str2binl(s), s.length * chrsz));}
function b64_md5(s){ return binl2b64(core_md5(str2binl(s), s.length * chrsz));}
function str_md5(s){ return binl2str(core_md5(str2binl(s), s.length * chrsz));}
function hex_hmac_md5(key, data) { return binl2hex(core_hmac_md5(key, data)); }
function b64_hmac_md5(key, data) { return binl2b64(core_hmac_md5(key, data)); }
function str_hmac_md5(key, data) { return binl2str(core_hmac_md5(key, data)); }
/*
* Perform a simple self-test to see if the VM is working
*/
function md5_vm_test()
{
return hex_md5("abc") == "900150983cd24fb0d6963f7d28e17f72";
}
/*
* Calculate the MD5 of an array of little-endian words, and a bit length
*/
function core_md5(x, len)
{
/* append padding */
x[len >> 5] |= 0x80 << ((len) % 32);
x[(((len + 64) >>> 9) << 4) + 14] = len;
var a = 1732584193;
var b = -271733879;
var c = -1732584194;
var d = 271733878;
for(var i = 0; i < x.length; i += 16)
{
var olda = a;
var oldb = b;
var oldc = c;
var oldd = d;
a = md5_ff(a, b, c, d, x[i+ 0], 7 , -680876936);
d = md5_ff(d, a, b, c, x[i+ 1], 12, -389564586);
c = md5Vulnerabilities
HTTP/1.1 200 OK
X-Powered-By: PHP/7.1.7
Set-Cookie: PHPSESSID=eac7f63576581811d4290bb22690c092; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-type: text/html; charset=UTF-8
Content-Length: 815
Date: Tue, 25 Feb 2025 06:54:44 GMT
Server: lighttpd/1.4.45
Vulnerabilities
