php

When you want to share some data and it should be expired after the number of view then take a look at this work.

The below demo will generate a link which will be expired after single view.

This is fofG.php which generate links. DB schema at the bottom.

<?php
$actionGen = isset($_POST["gen"]) ? 1 : 0;

if ($actionGen) {
    $hofHash = md5(uniqid(rand(), true));
    //insert and respond

    $con = mysqli_connect("localhost", "username", "password", "database");
    $in1 = "INSERT INTO `fof`(`fofHash`, `isBurned`, `content`, `ip`) VALUES ('" . $hofHash . "',0,'<li class=\"w3-black\">Price list</li><li>iphone X  600USD</li>	<li>One plus 6 500USD</li>	<li>Samsung s10 1200 USD</li>','')";
    mysqli_query($con, $in1);
}

?>
<!DOCTYPE html>
<html>
<title>Generate one time Link</title>
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" href="https://www.w3schools.com/w3css/4/w3.css">
<head>

</head>
<body>
<div class="w3-container">
    <p>One time Link Generator</p>
    <?php if (!$actionGen) { ?>
        <div class="w3-bar">
            <form name="generateH" method="post">
                <button class="w3-button w3-teal" name="gen">Generate Link</button>
            </form>
        </div>

    <?php } ?>


    <?php if ($actionGen) { ?>
        <div class="tooltip">

            <p><?php echo $_SERVER['HTTP_HOST'] . "/fof/fofAuth.php?fofAuth=" . $hofHash; ?></p>
        </div>
        <a href="fofG.php" class="w3-button w3-teal">Back</a>
    <?php } ?>

</div>
</body>

</html>

<?php

$actionGen = isset($_POST["gen"]) ? 1 : 0;

if ($actionGen) {

$hofHash = md5(uniqid(rand(), true));

//insert and respond

$con = mysqli_connect("localhost", "username", "password", "database");

$in1 = "INSERT INTO `fof`(`fofHash`, `isBurned`, `content`, `ip`) VALUES ('" . $hofHash . "',0,'<li class=\"w3-black\">Price list</li><li>iphone X 600USD</li> <li>One plus 6 500USD</li> <li>Samsung s10 1200 USD</li>','')";

mysqli_query($con, $in1);

}

<!DOCTYPE html>

<html>

<title>Generate one time Link</title>

<head>

</head>

<body>

<p>One time Link Generator</p>

<?php if (!$actionGen) { ?>

<button class="w3-button w3-teal" name="gen">Generate Link</button>

</form>

</div>

<?php } ?>

<?php if ($actionGen) { ?>

</div>

<?php } ?>

</div>

</body>

</html>

This is fofAuth.php which will render the data you want to share and can be viewed only once.

<?php
function getUserIP()
{
    // Get real visitor IP behind CloudFlare network
    if (isset($_SERVER["HTTP_CF_CONNECTING_IP"])) {
        $_SERVER['REMOTE_ADDR'] = $_SERVER["HTTP_CF_CONNECTING_IP"];
        $_SERVER['HTTP_CLIENT_IP'] = $_SERVER["HTTP_CF_CONNECTING_IP"];
    }
    $client = @$_SERVER['HTTP_CLIENT_IP'];
    $forward = @$_SERVER['HTTP_X_FORWARDED_FOR'];
    $remote = $_SERVER['REMOTE_ADDR'];

    if (filter_var($client, FILTER_VALIDATE_IP)) {
        $ip = $client;
    } elseif (filter_var($forward, FILTER_VALIDATE_IP)) {
        $ip = $forward;
    } else {
        $ip = $remote;
    }

    return $ip;
}


$user_ip = getUserIP();

$con = mysqli_connect("localhost", "username", "password", "database");
$fofId = mysqli_real_escape_string($con, htmlspecialchars($_REQUEST['fofAuth']));
$fofContent = "<p class='w3-center'>Not a valid hash or the one time link has expired. Contact skype: xyz OR Email:xyz@outlook.com  :-)</p>";

$result = mysqli_query($con, "SELECT isBurned,content FROM fof WHERE fofHash= '" . $fofId . "' AND isBurned=false");
$match = mysqli_num_rows($result);

if ($match > 0) {
    $row = mysqli_fetch_array($result);
    $fofContent = $row[1];
    mysqli_query($con, "UPDATE fof SET isBurned = TRUE,ip = '" . $user_ip . "' WHERE fofHash= '" . $fofId . "'");
}

?>

<!DOCTYPE html>
<html>
<title>HOF Price List</title>
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="stylesheet" href="https://www.w3schools.com/w3css/4/w3.css">
<body>

<div class="w3-container">

    <ul class="w3-ul w3-hoverable">
        <?php echo $fofContent; ?>
    </ul>
</div>
<footer>Note: Try reopening the link</footer>
</body>
</html>

<?php

function getUserIP()

{

// Get real visitor IP behind CloudFlare network

if (isset($_SERVER["HTTP_CF_CONNECTING_IP"])) {

$_SERVER['REMOTE_ADDR'] = $_SERVER["HTTP_CF_CONNECTING_IP"];

$_SERVER['HTTP_CLIENT_IP'] = $_SERVER["HTTP_CF_CONNECTING_IP"];

}

$client = @$_SERVER['HTTP_CLIENT_IP'];

$forward = @$_SERVER['HTTP_X_FORWARDED_FOR'];

$remote = $_SERVER['REMOTE_ADDR'];

if (filter_var($client, FILTER_VALIDATE_IP)) {

$ip = $client;

} elseif (filter_var($forward, FILTER_VALIDATE_IP)) {

$ip = $forward;

} else {

$ip = $remote;

}

return $ip;

}

$user_ip = getUserIP();

$con = mysqli_connect("localhost", "username", "password", "database");

$fofId = mysqli_real_escape_string($con, htmlspecialchars($_REQUEST['fofAuth']));

$fofContent = "<p class='w3-center'>Not a valid hash or the one time link has expired. Contact skype: xyz OR Email:xyz@outlook.com :-)</p>";

$result = mysqli_query($con, "SELECT isBurned,content FROM fof WHERE fofHash= '" . $fofId . "' AND isBurned=false");

$match = mysqli_num_rows($result);

if ($match > 0) {

$row = mysqli_fetch_array($result);

$fofContent = $row[1];

mysqli_query($con, "UPDATE fof SET isBurned = TRUE,ip = '" . $user_ip . "' WHERE fofHash= '" . $fofId . "'");

}

<!DOCTYPE html>

<html>

<title>HOF Price List</title>

<body>

<?php echo $fofContent; ?>

</ul>

</div>

<footer>Note: Try reopening the link</footer>

</body>

</html>

schema name “fof”

CREATE TABLE fof (
fofHash varchar(1000) NOT NULL,
isBurned tinyint(1) NOT NULL,
content varchar(10000) NOT NULL,
ip varchar(300) NOT NULL,
UNIQUE KEY hofHash (fofHash)
) ENGINE=MyISAM DEFAULT CHARSET=latin1;

CREATE TABLE fof (

fofHash varchar(1000) NOT NULL,

isBurned tinyint(1) NOT NULL,

content varchar(10000) NOT NULL,

ip varchar(300) NOT NULL,

UNIQUE KEY hofHash (fofHash)

) ENGINE=MyISAM DEFAULT CHARSET=latin1;

Demo – http://www.iseebug.com/fof/fofG.php Link Generator

Download- http://www.iseebug.com/loads/fof.rar

They say PHP’s biggest strength is its omnipresence and easy to do behavior. Since anything can be achieved using PHP, it runs on every current OS out there.I see it has a blessing and a curse. PHP’s biggest weak point is that it is easy to learn.

I still see horrible, insecure PHP W-apps out there. Many of the Non-developers picked it up and didn’t know to consider security. It has created the perception that PHP itself is insecure when the problem was within the frameworks and modules built upon top of it.

Although Facebook/Yahoo has taken PHP to a scale beyond the consideration and even better, as they’ve tackled issues with caching, deployment and operations etc. and shared most of it back with the world as well.

IseeBug|Web Application Security

One time self destructing link to share secure data using php

XSS vulnerable applications

MD5 Encrypt Online

I am a PHP Lover