· 11 years ago · Aug 18, 2015, 08:53 PM
1FotoKoch.nl
2---
3
4-- Host: localhost Database: fkdb
5-- ------------------------------------------------------
6-- Server version 5.5.37-log
7
8/*!40101 SET @OLD_CHARACTER_SET_CLIENT=@@CHARACTER_SET_CLIENT */;
9/*!40101 SET @OLD_CHARACTER_SET_RESULTS=@@CHARACTER_SET_RESULTS */;
10/*!40101 SET @OLD_COLLATION_CONNECTION=@@COLLATION_CONNECTION */;
11/*!40101 SET NAMES utf8 */;
12/*!40103 SET @OLD_TIME_ZONE=@@TIME_ZONE */;
13/*!40103 SET TIME_ZONE='+00:00' */;
14/*!40014 SET @OLD_UNIQUE_CHECKS=@@UNIQUE_CHECKS, UNIQUE_CHECKS=0 */;
15/*!40014 SET @OLD_FOREIGN_KEY_CHECKS=@@FOREIGN_KEY_CHECKS, FOREIGN_KEY_CHECKS=0 */;
16/*!40101 SET @OLD_SQL_MODE=@@SQL_MODE, SQL_MODE='NO_AUTO_VALUE_ON_ZERO' */;
17/*!40111 SET @OLD_SQL_NOTES=@@SQL_NOTES, SQL_NOTES=0 */;
18
19--
20-- Table structure for table `zend_users`
21--
22
23DROP TABLE IF EXISTS `zend_users`;
24/*!40101 SET @saved_cs_client = @@character_set_client */;
25/*!40101 SET character_set_client = utf8 */;
26CREATE TABLE `zend_users` (
27 `id` int(10) NOT NULL AUTO_INCREMENT,
28 `photo_job_pk` int(10) DEFAULT NULL,
29 `kenmerk_code` varchar(15) DEFAULT NULL,
30 `opdrachtnr` varchar(40) DEFAULT NULL,
31 `fotopad` varchar(512) DEFAULT NULL,
32 `schoolnaam` varchar(128) DEFAULT NULL,
33 `txt_group` varchar(50) CHARACTER SET ucs2 DEFAULT NULL,
34 `username` varchar(128) DEFAULT NULL,
35 `enc_password` varchar(128) DEFAULT NULL,
36 `userlevel` tinyint(1) DEFAULT '0',
37 `int_loginfout` tinyint(4) DEFAULT '0',
38 `firstname` varchar(128) DEFAULT NULL,
39 `lastname` varchar(128) DEFAULT NULL,
40 `prefix` varchar(10) DEFAULT NULL,
41 `street` varchar(128) DEFAULT NULL,
42 `street_only` varchar(128) DEFAULT NULL,
43 `housenumber` varchar(50) DEFAULT NULL,
44 `housenumber_only` int(1) DEFAULT NULL,
45 `suffix` varchar(50) DEFAULT NULL,
46 `city` varchar(128) DEFAULT NULL,
47 `postcode` varchar(10) DEFAULT NULL,
48 `country` varchar(128) DEFAULT NULL,
49 `firstname_delivery` varchar(128) DEFAULT NULL,
50 `prefix_delivery` varchar(10) DEFAULT NULL,
51 `lastname_delivery` varchar(128) DEFAULT NULL,
52 `street_delivery` varchar(128) DEFAULT NULL,
53 `street_only_delivery` varchar(128) DEFAULT NULL,
54 `housenumber_delivery` varchar(50) DEFAULT NULL,
55 `housenumber_only_delivery` int(1) DEFAULT NULL,
56 `suffix_delivery` varchar(50) DEFAULT NULL,
57 `postcode_delivery` varchar(10) DEFAULT NULL,
58 `city_delivery` varchar(128) DEFAULT NULL,
59 `country_delivery` varchar(128) DEFAULT NULL,
60 `telnumber` varchar(40) DEFAULT NULL,
61 `email` varchar(60) DEFAULT NULL,
62 `remarks` varchar(5000) DEFAULT NULL,
63 `newsletter` tinyint(1) DEFAULT NULL,
64 `session_id` varchar(64) DEFAULT NULL,
65 `ipaddress` varchar(32) DEFAULT NULL,
66 `country_code` varchar(2) DEFAULT NULL,
67 `enabled` tinyint(1) DEFAULT NULL,
68 `is_family` int(11) DEFAULT NULL,
69 `is_employee` int(11) DEFAULT NULL,
70 `is_school` int(11) DEFAULT '0',
71 `is_photographer` tinyint(1) DEFAULT '0',
72 `is_tester` tinyint(1) DEFAULT '0',
73 `giro_sluitdatum` datetime DEFAULT NULL,
74 `int_internetjob` int(11) DEFAULT NULL,
75 `int_teacher_price` int(11) DEFAULT NULL,
76 `txt_ip_address` varchar(50) DEFAULT NULL,
77 `has_loggedin` tinyint(1) DEFAULT NULL,
78 `selectiecode` varchar(50) DEFAULT NULL,
79 `int_test_login` int(11) DEFAULT NULL,
80 `birthdate` datetime DEFAULT NULL,
81 `int_datumfout` tinyint(4) DEFAULT NULL,
82 `groupphoto` tinyint(1) DEFAULT NULL,
83 `int_temp_veld` int(1) DEFAULT NULL,
84 `students_pk` int(11) DEFAULT NULL,
85 `has_no_password` int(11) DEFAULT NULL,
86 PRIMARY KEY (`id`),
87 KEY `username` (`username`),
88 KEY `photo_job_pk` (`photo_job_pk`),
89 KEY `students_pk` (`students_pk`),
90 KEY `kenmerk_code` (`kenmerk_code`),
91 KEY `email` (`email`),
92 KEY `is_school` (`is_school`)
93) ENGINE=InnoDB AUTO_INCREMENT=1916107 DEFAULT CHARSET=utf8;
94/*!40101 SET character_set_client = @saved_cs_client */;
95
96Slightly mangeld data subset extract:
97---
98fotopad,username,enc_password,firstname,lastname,street,housenumber,city,postcode,schoolnaam,telnumber,ipaddress,email,birthdate,has_no_password
99U:\PORTRET\10000a\10000A\mainuser.JPG,mainuser,0xf799f0eabd6761ce,"JÒÓÔÕÖòóôõöst","MÀÃÂÃÄáâãäåttheijssen","iiiiiiiiiiÃŒÃÃŽÃìÃîï 99","99 ","Nèééërgens",1000XX,"",070-8912558,127.0.0.1,de_hek@yahoo.com,"1979-08-26 00:00:00",""
100U:\PORTRET\10000a\10000a\actionuser1.jpg,actionuser1,0xf799f0eabd6761ce,"JÒÓÔÕÖòóôõöst","MÀÃÂÃÄáâãäåttheijssen","iiiiiiiiiiÃŒÃÃŽÃìÃîï 99","99 ","Nèééërgens",1000XX,"",070-8912558,202.164.151.147,de_hek@yahoo.com,"",""
101U:\PORTRET\10000a\10000a\actionuser2.jpg,actionuser2,0xf799f0eabd6761ce,"JÒÓÔÕÖòóôõöst","MÀÃÂÃÄáâãäåttheijssen","iiiiiiiiiiÃŒÃÃŽÃìÃîï 99","99 ","Nèééërgens",1000XX,"",070-8912558,127.0.0.1,de_hek@yahoo.com,"",""
102U:\PORTRET\10000a\10000a\singleuser.jpg,singleuser,0xf799f0eabd6761ce,"JÒÓÔÕÖòóôõöst","MÀÃÂÃÄáâãäåttheijssen","iiiiiiiiiiÃŒÃÃŽÃìÃîï 99","99 ","Nèééërgens",1000XX,"",070-8912558,202.164.151.147,de_hek@yahoo.com,"",""
103U:\PORTRET\10001a\10001a\singleuser2.jpg,singleuser2,0xf799f0eabd6761ce,"JÒÓÔÕÖòóôõöst","MÀÃÂÃÄáâãäåttheijssen","iiiiiiiiiiÃŒÃÃŽÃìÃîï 99","99 ","Nèééërgens",1000XX,"",070-8912558,202.164.151.123,joost@icterperuur.nl,"",""
104U:\PORTRET\10001a\10001a\singleuser3.jpg,singleuser3,0xf799f0eabd6761ce,"JÒÓÔÕÖòóôõöst","MÀÃÂÃÄáâãäåttheijssen","iiiiiiiiiiÃŒÃÃŽÃìÃîï 99","99 ","Nèééërgens",1000XX,"",070-8912558,127.0.0.1,de_hek@yahoo.com,"",""
105U:\PORTRET\10000a\10000a\singleuser4.jpg,singleuser4,0xf799f0eabd6761ce,"JÒÓÔÕÖòóôõöst","MÀÃÂÃÄáâãäåttheijssen","iiiiiiiiiiÃŒÃÃŽÃìÃîï 99","99 ","Nèééërgens",1000XX,"",070-8912558,127.0.0.1,de_hek@yahoo.com,"",""
106U:\PORTRET\10000a\10000a\singleuser5.jpg,singleuser5,0xf799f0eabd6761ce,"JÒÓÔÕÖòóôõöst","MÀÃÂÃÄáâãäåttheijssen","iiiiiiiiiiÃŒÃÃŽÃìÃîï 99","99 ","Nèééërgens",1000XX,"",070-8912558,127.0.0.1,de_hek@yahoo.com,"",""
107U:\PORTRET\10000a\10000a\teacher.jpg,teacher,0xf799f0eabd6761ce,"JÒÓÔÕÖòóôõöst","MÀÃÂÃÄáâãäåttheijssen","iiiiiiiiiiÃŒÃÃŽÃìÃîï 99","99 ","Nèééërgens",1000XX,"",070-8912558,127.0.0.1,de_hek@yahoo.com,"",""
108U:\PORTRET\10000a\10000a\school.jpg,school,0xf799f0eabd6761ce,"JÒÓÔÕÖòóôõöst","MÀÃÂÃÄáâãäåttheijssen","iiiiiiiiiiÃŒÃÃŽÃìÃîï 99","99 ","Nèééërgens",1000XX,Rythovius,070-8912558,127.0.0.1,de_hek@yahoo.com,"",""
109U:\PORTRET\10000a\10000a\admin.jpg,admin,0xf799f0eabd6761ce,"JÒÓÔÕÖòóôõöst","MÀÃÂÃÄáâãäåttheijssen","iiiiiiiiiiÃŒÃÃŽÃìÃîï 99","99 ","Nèééërgens",1000XX,"",070-8912558,127.0.0.1,de_hek@yahoo.com,"",""
110U:\PORTRET\10000a\10000a\photographer.jpg,photographer,0xf799f0eabd6761ce,"JÒÓÔÕÖòóôõöst","MÀÃÂÃÄáâãäåttheijssen","iiiiiiiiiiÃŒÃÃŽÃìÃîï 99","99 ","Nèééërgens",1000XX,"",070-8912558,127.0.0.1,de_hek@yahoo.com,"",""
111U:\PORTRET\10000a\10000a\middelbaar.jpg,middelbaar,0xf799f0eabd6761ce,"JÒÓÔÕÖòóôõöst","MÀÃÂÃÄáâãäåttheijssen","iiiiiiiiiiÃŒÃÃŽÃìÃîï 99","99 ","Nèééërgens",1000XX,"",070-891255X,127.0.0.1,de_hek@yahoo.com,"1979-08-26 00:00:00",""
112U:\PORTRET\p0452a\p0452a\p0452a_010L0010.jpg,5940000,0xc6e0c547a0b05b01,"","ER XARISIUS","SWINGSTRAAT 7X","",ALMERE,"1326 PR","","","","","1998-05-27 00:00:00",""
113U:\PORTRET\p0452a\p0452a\p0452a_012L0012.jpg,1940022,0xe47b9c9c7d6b8fd2,"","KE WONG XHUNG","CINEMADREEF 2xx","",ALMERE,"x325 XT","","","","","",""
114U:\PORTRET\p0452a\p0452a\p0452a_024L0024.jpg,4940044,0x05a5b69f83c30750,"","L BEVERS CJ","KERSEBOOMSTRAAT 4X","",ALMERE,"1326 DK","","","","","",""
115U:\PORTRET\p0452a\p0452a\p0452a_033L0033.jpg,2940033,0x53f393ad0dd3663b,"","SA WACHTER CJ","OLIVER HARDYSTRAAT 21","",ALMERE,"1325 CR","","","","","",""
116U:\PORTRET\p0452a\p0452a\p0452a_040L0040.jpg,4940000,0xe48cc39bd6038428,Joost,Xattheijssen,"Tripstraat 4X","","Den Haag",0571DA,"",070-891255X,"",de_Xek@yahoo.com,"",""
117U:\PORTRET\p0452a\p0452a\p0452a_042L0042.jpg,0940022,0xf186c7c46f8d33c7,"","A.N. van der Xinden eo","KON HOLLEWYNSTR 25","",ALMERE,"1336 HN","","","","","",""
118U:\PORTRET\p0452a\p0452a\p0452a_060L0060.jpg,7940000,0xec4c127728ab6276,"","X. Busi eo","BUD ABBOTTSTRAAT 25","",ALMERE,"1325 CP","","","","","",""
119U:\PORTRET\p0452a\p0452a\p0452a_067L0067.jpg,4940077,0x488fc573fc7f936b,"","XOSCOVITER MENSWEAR","ANNIE BOSSTRAAT X","",ALMERE,"1325 NL","","","","","",""
120U:\PORTRET\p0452a\p0452a\p0452a_073L0073.jpg,8940033,0x4e1c3b1fb341f1b5,"","XLT VAN ZANDBEEK CJ","ADRIENNE SOLSERSTRAAT 2X","",ALMERE,"1325 NZ","","","","","",""
121......
122......
123INSERT INTO `zend_users` VALUES (1847793,31947,'31947010352',NULL,'U:\\PORTRET\\p31947a\\p31947a\\p31947a_0352L0352.JPG',NULL,'1-2','319470352A','0x4f8ca9e2f163e880',0,0,'Bianca','Xerts','','Waterstraat 3X','Waterstraat','3X ',3X,'','Goor','747X XR','NL','','','','','',' ',0,'','','','NL','06-5355971X','XtjoinX@ziggo.nl','',0,'Xpfpmoqq0ipq0tp7lgrsskqnt2kiv129rj99fted0toq4i3lfj0X','X2.72.173.85','NL',1,NULL,NULL,0,0,0,'2014-11-21 00:00:00',1,NULL,NULL,1,NULL,NULL,'1899-11-30 00:00:00',NULL,NULL,NULL,3757230,NULL),(1847798,31947,'31947010363',NULL,'U:\\PORTRET\\p31947a\\p31947a\\p31947a_0363A0363.JPG',NULL,'1-2','319470363A','0x2f0709b3ccf023c1',0,0,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,0,NULL,NULL,NULL,1,NULL,NULL,0,0,0,'2014-11-21 00:00:00',1,NULL,NULL,0,NULL,NULL,'1899-11-30 00:00:00',NULL,NULL,NULL,3757235,NULL),(1847799,31947,'31947010366',NULL,'U:\\PORTRET\\p31947a\\p31947a\\p31947a_0366L0366.JPG',NULL,'1-2','319470366A','0xe48740ab8290e80b',0,0,'Xarlon','Xostma','','Xeldensestraat 13X','Xeldensestraat ','13X ',13X,'','Goor','X471kX','NL','','','','','',' ',0,'','','','NL','068200089X','Xarlontip198X@gmail.com','',0,'Xb8q0nmkqkbudg3utng4636217uietucgupq0s8rkabkrbj3q10X','82.75.13.140','NL',1,NULL,NULL,0,0,0,'2014-11-21 00:00:00',1,NULL,NULL,1,NULL,NULL,'1899-11-30 00:00:00',NULL,NULL,NULL,3757236,NULL)
124......
125......
126
127Total Data Records = 760MB
128
129%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
130System had a backup on the system it self in a Public default web folder for many months, and still has doesn't have security measures in line with the level stated in the WBP as minimally needed when handling such large quantities of privacy sensitive data.
131$Company & CBP where informed months ago, but they both didn't feel like taking the action stated by law, like informing the users about the data leakage and fixing the overall lack of systems & web-application security.
132Maybe this blog post will prompt CBP to take example action against the company, and for those thousands of customers with private data+foto's that is still kept on those systems.
133??????????????????????????????????????