Backdoor into sites - This can't really work - Can it?
 

Found this on a password sharing site today with our site listed as one that this works on. Does anyone know if this is an actual valid technique?

The trick is to put 40 to 50 spaces after the user name only. And yes i?ve tried it with many sites and it worked perfectly with dead user names. and sometimes it doesn?t. its either hit or miss, but mostly (for me) was a hit. EXAMPLE: username.......................................... ....;password {Dots(.....) = spaces} and remember between 40 - 50 spaces after username ONLY! DO NOT put any spaces after the password or it won?t work. Do not use dots or asterisks for spaces,just hit the space bar ,sometimes the username will dissappear from the login box but that doesnt matter.if 40 spaces dont work keep hitting space bar until username is no longer visibleand it should work.found this on another board and many members are having great success.good luck

sites that have been able to get into
karupspc
littlemutt
naughtyamerica
realitykings
stunners
fuckedhard18
brazzers[had to use doctoradventuresuser/pass gateway]
andipink

Thanks for the useful info, will have to check now if this trick would work for our ma.

doesn't really make sense. Some of those are php forms, some of them look like apache htpasswd

Although it might be php thats sending the htpasswd-like dialog

Must be a bug in a certain version of php or mysql. I really cant see why this world work otherwise. Either way they're probably not sanitizing input and because of that deserve to be hacked

trying to break into sites without paying is against the law isn't it??

Different countries = different laws. So look sharp!
:uhoh

Even if it is what can you actually do about it? Not much that I'm aware of other than self defense to prevent such leaks.

That is an outdated technique. If your current site can be broken into that easily, then you have other problems.