<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Ankit Kumar Agarwal</title>
	<atom:link href="http://ankitkumaragarwal.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://ankitkumaragarwal.com</link>
	<description>Hack the way you Think!!</description>
	<lastBuildDate>Thu, 20 May 2010 05:27:27 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<image>
<link>http://ankitkumaragarwal.com</link>
<url>http://ankitkumaragarwal.com/wp-content/plugins/maxblogpress-favicon/icons/favicon-56.ico</url>
<title>Ankit Kumar Agarwal</title>
</image>
		<item>
		<title>History of Search Engines</title>
		<link>http://ankitkumaragarwal.com/history-of-search-engines/</link>
		<comments>http://ankitkumaragarwal.com/history-of-search-engines/#comments</comments>
		<pubDate>Thu, 20 May 2010 05:27:27 +0000</pubDate>
		<dc:creator>Ankit Kumar Agarwal</dc:creator>
				<category><![CDATA[History]]></category>
		<category><![CDATA[Networking]]></category>
		<category><![CDATA[info]]></category>

		<guid isPermaLink="false">http://ankitkumaragarwal.com/?p=123</guid>
		<description><![CDATA[You&#8217;ll have a better feel for today&#8217;s search engines if you know a little of the history behind them. Of course, there&#8217;s not much history to cover, since the Internet is still a youngster! Let&#8217;s take a look at how it all started.
We&#8217;ll begin by clearing up a common misunderstanding. Did you ever wonder what [...]]]></description>
			<content:encoded><![CDATA[<p>You&#8217;ll have a better feel for today&#8217;s search engines if you know a little of the history behind them. Of course, there&#8217;s not much history to cover, since the Internet is still a youngster! Let&#8217;s take a look at how it all started.</p>
<p>We&#8217;ll begin by clearing up a common misunderstanding. Did you ever wonder what the difference is between the Internet and the World Wide Web? Many people believe that the two terms can be used interchangeably. In actuality, nothing could be further from the truth.</p>
<p>The Internet is a worldwide network of computer networks. It was dreamed up in 1969 by a U.S. government agency called ARPA, or the Advanced Research Projects Agency. (In fact, the Internet&#8217;s original name was ARPANET.) Nowadays, you can access the Internet via telephone lines, cable, fiber optics, and other communication mediums.</p>
<p>The Internet: A worldwide network of computer networks</p>
<p>The World Wide Web is younger still. It came into being around 1990, when researchers realized that they could use the Internet to connect a web of stored hypertext pages and make them accessible to people around the world. That web of pages grew from a handful at the outset to billions today.</p>
<p>The World Wide Web is, by far, the most commonly used application on the Internet. (E-mail is another application of the Internet that you&#8217;re familiar with.)</p>
<p>All users of the Web utilize HTTP, or the hypertext transfer protocol, in order to navigate from one Web site to another. Look at the address bar near the top of your Web browser. You&#8217;ll find that the www is preceded by http://. This tells the Web site that you&#8217;re on the World Wide Web and that you&#8217;re using the hypertext transfer protocol.</p>
<p>It&#8217;s important to understand the difference between the Internet and the Web so you can fully grasp how search engines work. While search engines use the Internet, they don&#8217;t search the entire Internet. Typically, search engines only search for Web sites on the World Wide Web.</p>
<p>The Search Engine Power Players, Yesterday and Today</p>
<p>For a young industry, the search engine field already has quite a past! Here&#8217;s a quick summary of important points on the search engine timeline. If you&#8217;re a real history buff, you&#8217;ll find more details in the FAQs for this lesson.</p>
<p>1993: The first widely acclaimed search engine, the World Wide Web Wanderer, appears. Created to measure the growth of the Web, it performs its job through 1997. The statistics compiled by this search engine are still available on the Web today.</p>
<p>1994: WebCrawler comes on the scene. The original WebCrawler database contains just 6,000 Web sites. (I think I have more Web sites than that listed in my favorites!) AOL-now there&#8217;s a name you probably recognize-purchases WebCrawler in 1995, but sells it just two years later to Excite. Infospace, its current owner, buys WebCrawler when Excite declares bankruptcy.</p>
<p>1994: Another powerhouse, the Lycos search engine, launches with 54,000 indexed documents. The Lycos search engine is still a player today, but it&#8217;s changed hands several times. Currently, it&#8217;s a subsidiary of the Korean-based Daum Communications Corporation.</p>
<p>1995: AltaVista explodes onto the scene. AltaVista (or AV) is the first search engine to include multilingual search capabilities. After changing hands several times, AltaVista becomes the property of Overture Services. (Overture is owned by Yahoo!, which we&#8217;ll discuss a bit later.) AltaVista maintains its status as the search king until the launch of Google.</p>
<p>1998: Larry Page and Sergey Brin introduce the world to Google, which quickly shoots to the top of the search engine rankings. (The name comes from the word googol, which is the name for the number 1 followed by 100 zeros.) Google&#8217;s database now includes trillions of Web pages, and most experts agree that Google enjoys greater than 50% of total search engine traffic. This means that a top Google ranking will yield more traffic to your site than a top ranking with any other search engine&#8230;period.</p>
<p>That&#8217;s where things stand now, with Google by far the most used search engine on the Web.</p>
<p>However, things change rapidly, with companies constantly buying, selling, and creating search engines. As a result, you&#8217;ll want to keep tabs on which search engines are gaining or losing popularity.</p>
<p>Search Engines versus Directories</p>
<p>Are you wondering why we didn&#8217;t talk about Yahoo! in the last section? That&#8217;s because Yahoo! began as a directory, not a search engine.</p>
<p>While search engines&#8217; indexes are compiled by computers, directories are categorical lists of Web sites compiled by humans. Before it&#8217;s accepted, each Web site listed in a directory is carefully scrutinized and deemed acceptable for placement in one specific category.</p>
<p>Some people argue that because directories are compiled by humans, they&#8217;re limited because they don&#8217;t offer as many search results as search engines. However, I think you&#8217;ll find that the search results displayed by directories can often be much more useful than the search results displayed by search engines.</p>
<p>The most popular directory on the Web is Yahoo!, founded in 1994 by David Filo and Jerry Yang. They started Yahoo! on a couple of computers in a campus trailer at Stanford, initially using it to track their own interests. It surprised them by taking off quickly, and they incorporated it in 1995 with an initial investment of almost $2 million. By the way, Yahoo! Is an acronym for Yet Another Hierarchical Officious Oracle-but I promise not to test you on that!</p>
<p>In an effort to diversify, Yahoo decided to use Google&#8217;s engine to supply users with primary search results. However, in 2004, Yahoo! unveiled its own brand-new search engine.</p>
<p>You can still tap into Yahoo!&#8217;s directory, and I think you&#8217;ll find it extremely useful at times. If you perform a search at http://www.yahoo.com, the results you&#8217;ll get are derived from the Yahoo Search Engine. However, you can obtain Yahoo Directory search results by initiating a search at http://dir.yahoo.com.</p>
<p>The Open Directory Project is perhaps the second most popular directory on the Web. It&#8217;s compiled by more than 50,000 volunteers who&#8217;ve indexed nearly 4 million Web sites. The directory contains just under 500,000 categories, all of which can be searched by keyword or category.</p>
<p>Due to the limited resources of the Open Directory, searching for results through their Web site can be time-consuming and cumbersome. However, some search engines include Open Directory listings within their secondary search results.</p>
]]></content:encoded>
			<wfw:commentRss>http://ankitkumaragarwal.com/history-of-search-engines/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Spammers All around</title>
		<link>http://ankitkumaragarwal.com/spammers-all-around/</link>
		<comments>http://ankitkumaragarwal.com/spammers-all-around/#comments</comments>
		<pubDate>Tue, 20 Apr 2010 02:24:32 +0000</pubDate>
		<dc:creator>Ankit Kumar Agarwal</dc:creator>
				<category><![CDATA[Random]]></category>

		<guid isPermaLink="false">http://ankitkumaragarwal.com/?p=119</guid>
		<description><![CDATA[Well i don&#8217;t know what i am doing..i have final sems tomorrow and today i am sitting here and deleting the 200 spam comments i got on this blog.Its really a tedious job..i have over 5 blogs and each is being spammed like hell.
Common man give it a break xumer is not everything , if [...]]]></description>
			<content:encoded><![CDATA[<p>Well i don&#8217;t know what i am doing..i have final sems tomorrow and today i am sitting here and deleting the 200 spam comments i got on this blog.Its really a tedious job..i have over 5 blogs and each is being spammed like hell.</p>
<p>Common man give it a break xumer is not everything , if you don&#8217;t know whats SEO quit marketing,spamming all round isn&#8217;t something worth the trouble.My site is no follow any way,Mo rover its manually approved,so save trouble-<strong>DON&#8217;T SPAM THIS BLOG.</strong></p>
]]></content:encoded>
			<wfw:commentRss>http://ankitkumaragarwal.com/spammers-all-around/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Indians on social sites</title>
		<link>http://ankitkumaragarwal.com/indians-on-social-sites/</link>
		<comments>http://ankitkumaragarwal.com/indians-on-social-sites/#comments</comments>
		<pubDate>Wed, 20 Jan 2010 16:18:36 +0000</pubDate>
		<dc:creator>Ankit Kumar Agarwal</dc:creator>
				<category><![CDATA[Whatsup!!]]></category>

		<guid isPermaLink="false">http://ankitkumaragarwal.com/?p=111</guid>
		<description><![CDATA[We all know that Indians are pretty found of social networking sites..perhaps they have so much time to kill..any way check this two pics out 

]]></description>
			<content:encoded><![CDATA[<p>We all know that Indians are pretty found of social networking sites..perhaps they have so much time to kill..any way check this two pics out <img src='http://ankitkumaragarwal.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /><br />
<img class="alignnone size-full wp-image-112" title="1-2" src="http://ankitkumaragarwal.com/wp-content/uploads/2010/01/1-2.jpg" alt="1-2" width="567" height="437" /><img class="alignnone size-full wp-image-113" title="2-2" src="http://ankitkumaragarwal.com/wp-content/uploads/2010/01/2-2.jpg" alt="2-2" width="505" height="800" /></p>
]]></content:encoded>
			<wfw:commentRss>http://ankitkumaragarwal.com/indians-on-social-sites/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>can you read this?</title>
		<link>http://ankitkumaragarwal.com/can-you-read-this/</link>
		<comments>http://ankitkumaragarwal.com/can-you-read-this/#comments</comments>
		<pubDate>Thu, 24 Dec 2009 17:05:26 +0000</pubDate>
		<dc:creator>Ankit Kumar Agarwal</dc:creator>
				<category><![CDATA[Random]]></category>
		<category><![CDATA[Whatsup!!]]></category>

		<guid isPermaLink="false">http://ankitkumaragarwal.com/?p=109</guid>
		<description><![CDATA[To my &#8217;selected&#8217;
strange-minded friends:
If you can read the
following paragraph, forward it on to your friends and the person that sent it to you with &#8216;yes&#8217; in the subject line.
Only great minds can read
this
fi yuo cna
raed tihs, yuo hvae a sgtrane mnid too
Cna yuo raed tihs? Olny 55 plepoe
out of 100 can.
i cdnuolt blveiee taht I [...]]]></description>
			<content:encoded><![CDATA[<p>To my &#8217;selected&#8217;<br />
strange-minded friends:</p>
<p>If you can read the<br />
following paragraph, forward it on to your friends and the person that sent it to you with &#8216;yes&#8217; in the subject line.</p>
<p>Only great minds can read<br />
this</p>
<p>fi yuo cna<br />
raed tihs, yuo hvae a sgtrane mnid too</p>
<p>Cna yuo raed tihs? Olny 55 plepoe<br />
out of 100 can.</p>
<p>i cdnuolt blveiee taht I cluod aulaclty uesdnatnrd waht<br />
I was rdanieg. The phaonmneal pweor of the hmuan mnid, aoccdrnig to a rscheearch<br />
at Cmabrigde Uinervtisy, it dseno&#8217;t mtaetr in waht oerdr the ltteres in a wrod<br />
are, the olny iproamtnt tihng is taht the frsit and lsat ltteer be in the rghit<br />
pclae. The rset can be a taotl mses and you can sitll raed it whotuit a pboerlm.<br />
Tihs is bcuseae the huamn mnid deos not raed ervey lteter by istlef, but the wrod as a wlohe. Azanmig huh? yaeh and I awlyas tghuhot slpeling was ipmorantt!<br />
if you can raed tihs forwrad it</p>
<p>FORWARD ONLY IF YOU CAN READ IT</p>
<p>Forward it &#038; put &#8216;YES&#8217; in the Subject<br />
Line</p>
]]></content:encoded>
			<wfw:commentRss>http://ankitkumaragarwal.com/can-you-read-this/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Change Your Thinking</title>
		<link>http://ankitkumaragarwal.com/change-your-thinking/</link>
		<comments>http://ankitkumaragarwal.com/change-your-thinking/#comments</comments>
		<pubDate>Sun, 29 Nov 2009 16:09:07 +0000</pubDate>
		<dc:creator>Ankit Kumar Agarwal</dc:creator>
				<category><![CDATA[Random]]></category>
		<category><![CDATA[Whatsup!!]]></category>

		<guid isPermaLink="false">http://ankitkumaragarwal.com/?p=107</guid>
		<description><![CDATA[Change Your Thinking
It will take just 37 seconds to read this and change your thinking..
Two men, both seriously ill, occupied the same hospital room.
One man was allowed to sit up in his bed for an hour each afternoon to help drain the fluid from his lungs.
His bed was next to the room&#8217;s only window.
The other [...]]]></description>
			<content:encoded><![CDATA[<p><strong>Change Your Thinking</strong></p>
<p>It will take just 37 seconds to read this and change your thinking..</p>
<p>Two men, both seriously ill, occupied the same hospital room.</p>
<p>One man was allowed to sit up in his bed for an hour each afternoon to help drain the fluid from his lungs.</p>
<p>His bed was next to the room&#8217;s only window.</p>
<p>The other man had to spend all his time flat on his back.</p>
<p>The men talked for hours on end.</p>
<p>They spoke of their wives and families, their homes, their jobs, their involvement in the military service, where they had been on vacation..</p>
<p>Every afternoon, when the man in the bed by the window could sit up, he would pass the time by describing to his roommate all the things he could see outside the window.</p>
<p>The man in the other bed began to live for those one hour periods where his world would be broadened and enlivened by all the activity and colour of the world outside.</p>
<p>The window overlooked a park with a lovely lake.</p>
<p>Ducks and swans played on the water while children sailed their model boats. Young lovers walked arm in arm amidst flowers of every colour and a fine view of the city skyline could be seen in the distance.</p>
<p>As the man by the window described all this in exquisite details, the man on the other side of the room would close his eyes and imagine this picturesque scene.</p>
<p>One warm afternoon, the man by the window described a parade passing by.</p>
<p>Although the other man could not hear the band &#8211; he could see it in his mind&#8217;s eye as the gentleman by the window portrayed it with descriptive words.</p>
<p>Days, weeks and months passed.</p>
<p>One morning, the day nurse arrived to bring water for their baths only to find the lifeless body of the ma n by the window, who had died peacefully in his sleep.</p>
<p>She was saddened and called the hospital attendants to take the body away.</p>
<p>As soon as it seemed appropriate, the other man asked if he could be moved next to the window. The nurse was happy to make the switch, and after making sure he was comfortable, she left him alone.</p>
<p>0A</p>
<p>Slowly, painfully, he propped himself up on one elbow to take his first look at the real world outside.<br />
He strained to slowly turn to look out the window besides the bed..</p>
<p>It faced a blank wall.</p>
<p>The man asked the nurse what could have compelled his deceased roommate who had described such wonderful things outside this window.</p>
<p>The nurse responded that the man was blind and could not even see the wall.</p>
<p>She said, &#8216;Per haps he just wanted to encourage you.&#8217;</p>
<p>Epilogue:</p>
<p>There is tremendous happiness in making others happy, despite our own situations.</p>
<p>Shared grief is half the sorrow, but happiness when shared, is doubled.</p>
<p>If you want to feel rich, just count all the things you have that money can&#8217;t buy.</p>
<p>&#8216;Today is a gift, that is why it is called The Present .&#8217;</p>
<p>source:-Via Email</p>
]]></content:encoded>
			<wfw:commentRss>http://ankitkumaragarwal.com/change-your-thinking/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>WordPress 2.8.5 Unrestricted File Upload Arbitrary PHP Code Execution</title>
		<link>http://ankitkumaragarwal.com/wordpress-2-8-5-unrestricted-file-upload-arbitrary-php-code-execution/</link>
		<comments>http://ankitkumaragarwal.com/wordpress-2-8-5-unrestricted-file-upload-arbitrary-php-code-execution/#comments</comments>
		<pubDate>Fri, 13 Nov 2009 16:11:16 +0000</pubDate>
		<dc:creator>Ankit Kumar Agarwal</dc:creator>
				<category><![CDATA[News]]></category>
		<category><![CDATA[Tutorials]]></category>
		<category><![CDATA[hacking]]></category>

		<guid isPermaLink="false">http://ankitkumaragarwal.com/?p=104</guid>
		<description><![CDATA[Recently Dawid Golunski released a wp 2.8.5 exploit which let users to execute arbitatry PHP codes.
After i had a conversation with him it was concluded that this exploied is confiend to a few apchae servers only and other servers are safe!! Below is a copy of his discolsure and our conversation:-
Disclosure
==============================
===============
- Release date: November 11th, [...]]]></description>
			<content:encoded><![CDATA[<p>Recently Dawid Golunski released a wp 2.8.5 exploit which let users to execute arbitatry PHP codes.</p>
<p>After i had a conversation with him it was concluded that this exploied is confiend to a <strong>few apchae </strong>servers only and other servers are safe!! Below is a copy of his discolsure and our conversation:-</p>
<p><strong>Disclosure</strong></p>
<p>==============================</p>
<div id=":1lv">===============<br />
- Release date: November 11th, 2009<br />
- Discovered by: Dawid Golunski<br />
- Severity: Moderately High<br />
=============================================</p>
<p>I. VULNERABILITY<br />
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br />
WordPress &lt;= 2.8.5 Unrestricted File Upload Arbitrary PHP Code Execution</p>
<p>II. BACKGROUND<br />
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br />
WordPress is a state-of-the-art publishing platform with a focus on aesthetics, web standards,<br />
and  usability. WordPress is both free and priceless at the same time. More simply, WordPress is<br />
what you use when you want to work with your blogging software, not fight it.</p>
<p>III. DESCRIPTION<br />
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-</p>
<p>Wordpress allows authorised users to add an attachment to a blog post.<br />
It does not sanitize provided file properly before moving it to an uploads directory.</p>
<p>The part of the code responsible for uploading files looks as follows:</p>
<p>wp-admin/includes/file.php:<br />
&#8212;[cut]&#8212;<br />
line 217:<br />
function wp_handle_upload( &amp;$file, $overrides = false, $time = null ) {<br />
&#8212;[cut]&#8212;<br />
// All tests are on by default. Most can be turned off by $override[{test_name}] = false;<br />
$test_form = true;<br />
$test_size = true;</p>
<p>// If you override this, you must provide $ext and $type!!!!<br />
$test_type = true;<br />
$mimes = false;<br />
&#8212;[cut]&#8212;</p>
<p>// A properly uploaded file will pass this test. There should be no reason to override this one.<br />
if (! @ is_uploaded_file( $file['tmp_name'] ) )<br />
return $upload_error_handler( $file, __( &#8216;Specified file failed upload test.&#8217; ));</p>
<p>// A correct MIME type will pass this test. Override $mimes or use the upload_mimes filter.<br />
if ( $test_type ) {<br />
$wp_filetype = wp_check_filetype( $file['name'], $mimes );</p>
<p>extract( $wp_filetype );</p>
<p>if ( ( !$type || !$ext ) &amp;&amp; !current_user_can( &#8216;unfiltered_upload&#8217; ) )<br />
return $upload_error_handler( $file,<br />
__( &#8216;File type does not meet security guidelines. Try another.&#8217; ));</p>
<p>if ( !$ext )<br />
$ext = ltrim(strrchr($file['name'], &#8216;.&#8217;), &#8216;.&#8217;);</p>
<p>if ( !$type )<br />
$type = $file['type'];<br />
} else {<br />
$type = &#8221;;<br />
}</p>
<p>// A writable uploads dir will pass this test. Again, there&#8217;s no point overriding this one.<br />
if ( ! ( ( $uploads = wp_upload_dir($time) ) &amp;&amp; false === $uploads['error'] ) )<br />
return $upload_error_handler( $file, $uploads['error'] );</p>
<p>$filename = wp_unique_filename( $uploads['path'], $file['name'], $unique_filename_callback );</p>
<p>// Move the file to the uploads dir<br />
$new_file = $uploads['path'] . &#8220;/$filename&#8221;;<br />
if ( false === @ move_uploaded_file( $file['tmp_name'], $new_file ) ) {<br />
return $upload_error_handler( $file,<br />
sprintf( __(&#8216;The uploaded file could not be moved to %s.&#8217; ), $uploads['path'] ) );<br />
}<br />
&#8212;[cut ]&#8212;</p>
<p>From the above code we can see that provided filename gets checked with:<br />
$wp_filetype = wp_check_filetype( $file['name'], $mimes );</p>
<p>Here is how the wp_check_filetype() function looks like:</p>
<p>wp-includes/functions.php:<br />
&#8212;[cut]&#8212;<br />
line 2228:</p>
<p>function wp_check_filetype( $filename, $mimes = null ) {<br />
// Accepted MIME types are set here as PCRE unless provided.<br />
$mimes = ( is_array( $mimes ) ) ? $mimes : apply_filters( &#8216;upload_mimes&#8217;, array(<br />
&#8216;jpg|jpeg|jpe&#8217; =&gt; &#8216;image/jpeg&#8217;,<br />
&#8216;gif&#8217; =&gt; &#8216;image/gif&#8217;,<br />
&#8216;png&#8217; =&gt; &#8216;image/png&#8217;,<br />
&#8216;bmp&#8217; =&gt; &#8216;image/bmp&#8217;,<br />
&#8216;tif|tiff&#8217; =&gt; &#8216;image/tiff&#8217;,<br />
&#8216;ico&#8217; =&gt; &#8216;image/x-icon&#8217;,<br />
&#8216;asf|asx|wax|wmv|wmx&#8217; =&gt; &#8216;video/asf&#8217;,<br />
&#8216;avi&#8217; =&gt; &#8216;video/avi&#8217;,</p>
<p>&#8212;[cut, more mime types]&#8212;<br />
line 2279:</p>
<p>$type = false;<br />
$ext = false;</p>
<p>foreach ( $mimes as $ext_preg =&gt; $mime_match ) {<br />
$ext_preg = &#8216;!\.(&#8216; . $ext_preg . &#8216;)$!i&#8217;;<br />
if ( preg_match( $ext_preg, $filename, $ext_matches ) ) {<br />
$type = $mime_match;<br />
$ext = $ext_matches[1];<br />
break;<br />
}<br />
}</p>
<p>return compact( &#8216;ext&#8217;, &#8216;type&#8217; );<br />
}</p>
<p>We can see that type of the file gets set to a predefined MIME type that matches supplied<br />
extension, and that the extension is obtained from a regexp that matches a mime ext. string after<br />
the LAST dot.<br />
If extension is not on the list $type and $ext will be set to FALSE and wordpress will<br />
produce an error (&#8220;File type does not meet security guidelines. Try another&#8221;).</p>
<p>Let&#8217;s look at the other check that is performed on the filename before a file gets uploaded,<br />
that is a call to the following function:<br />
$filename = wp_unique_filename( $uploads['path'], $file['name'], $unique_filename_callback );</p>
<p>wp-includes/functions.php:<br />
line 2096:<br />
function wp_unique_filename( $dir, $filename, $unique_filename_callback = null ) {<br />
// sanitize the file name before we begin processing<br />
$filename = sanitize_file_name($filename);</p>
<p>&#8212;[cut, code that only matters if uploaded file already exists]&#8212;<br />
line 2126:<br />
return $filename;<br />
}</p>
<p>To have a complete view on file sanitization performed by wordpress we need to look into the<br />
sanitize_file_name() function:</p>
<p>wp-includes/formatting.php:<br />
line 601:<br />
function sanitize_file_name( $filename ) {<br />
$filename_raw = $filename;<br />
$special_chars = array(&#8220;?&#8221;, &#8220;[", "]&#8220;, &#8220;/&#8221;, &#8220;\\&#8221;, &#8220;=&#8221;, &#8220;&lt;&#8221;, &#8220;&gt;&#8221;, &#8220;:&#8221;, &#8220;;&#8221;, &#8220;,&#8221;, &#8220;&#8216;&#8221;, &#8220;\&#8221;",<br />
&#8220;&amp;&#8221;, &#8220;$&#8221;, &#8220;#&#8221;, &#8220;*&#8221;, &#8220;(&#8220;, &#8220;)&#8221;, &#8220;|&#8221;, &#8220;~&#8221;, &#8220;`&#8221;, &#8220;!&#8221;, &#8220;{&#8220;, &#8220;}&#8221;, chr(0));<br />
$special_chars = apply_filters(&#8217;sanitize_file_name_chars&#8217;, $special_chars, $filename_raw);<br />
$filename = str_replace($special_chars, &#8221;, $filename);<br />
$filename = preg_replace(&#8216;/[\s-]+/&#8217;, &#8216;-&#8217;, $filename);<br />
$filename = trim($filename, &#8216;.-_&#8217;);<br />
return apply_filters(&#8217;sanitize_file_name&#8217;, $filename, $filename_raw);<br />
}</p>
<p>This function removes special characters shown above, replaces spaces and consecutive dashes with<br />
a single dash, trims period, dash and underscore from beginning and end of the filename.</p>
<p>The sanitization process appears quite extensive however it does not take into account files that<br />
have multiple extensions.<br />
It is possible to upload a file containing an arbitrary PHP script with an extension of &#8216;.php.jpg&#8217;<br />
and execute it by requesting the uploaded file directly.</p>
<p>The execution of the PHP code despite the .php.jpg extension is possible because Apache<br />
allows for multiple extensions. Here is a quote from Apache docs regarding this matter:</p>
<p>&#8221;<br />
Files can have more than one extension, and the order of the extensions is normally irrelevant.<br />
For example, if the file <a href="http://welcome.html.fr/" target="_blank">welcome.html.fr</a> maps onto content type text/html and language French then<br />
the file welcome.fr.html will map onto exactly the same information. If more than one extension is<br />
given that maps onto the same type of meta-information, then the one to the right will be used,<br />
except for languages and content encodings. For example, if .gif maps to the MIME-type  image/gif<br />
and .html maps to the MIME-type text/html, then the file welcome.gif.html will be associated with<br />
the MIME-type text/html.</p>
<p>Care should be taken when a file with multiple extensions gets associated with both a MIME-type<br />
and a handler. This will usually result in the request being handled by the module associated with<br />
the handler. For example, if the .imap  extension is mapped to the handler imap-file<br />
(from mod_imagemap) and the .html extension is mapped to the MIME-type text/html, then the file<br />
world.imap.html will be associated with both the imap-file handler and text/html MIME-type.<br />
When it is processed, the imap-file handler will be used, and so it will be treated as a<br />
mod_imagemap imagemap file.<br />
&#8221;</p>
<p>IV. PROOF OF CONCEPT<br />
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br />
Browser is enough to replicate this issue. Simply log in to your wordpress blog as a low privileged<br />
user or admin. Create a new post and use the media file upload feature to upload a file:</p>
<p>test-image.php.jpg</p>
<p>containing the following code:</p>
<p>&lt;?php<br />
phpinfo();<br />
?&gt;</p>
<p>After the upload you should receive a positive response saying:</p>
<p>test-vuln.php.jpg<br />
image/jpeg<br />
2009-11-11</p>
<p>and it should be possible to request the uploaded file via a link:<br />
<a href="http://link-to-our-wp-unsecured-blog.com/wp-content/uploads/2009/11/test-vuln.php.jpg" target="_blank">http://link-to-our-wp-unsecured-blog.com/wp-content/uploads/2009/11/test-vuln.php.jpg</a></p>
<p>thus executing the PHP code it contains.</p>
<p>In the above code example, a php info page will be shown.</p>
<p>V. BUSINESS IMPACT<br />
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br />
An attacker that has already obtained login details (for example by stealing user&#8217;s cookies with<br />
an XSS attack) to the blog as one of the existing users could exploit this vulnerability to get<br />
access to the system in the Apache user&#8217;s context.<br />
From there he could use local bugs to further escalate the privileges. Apache account would be<br />
enough in most cases to view the source codes and gain access to the databases.</p>
<p>Some wordpress users of the 2.8.5 release have reported that some php files have been added to<br />
their wordpress directory. It could be possible that they have been hit by this bug. Therefore it<br />
is important to take some countermeasures as soon as possible.</p>
<p>VI. SYSTEMS AFFECTED<br />
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br />
Most likely all of the wordpress releases contain this bug. Including the current hardened stable<br />
release 2.8.5 and the beta version.</p>
<p>VII. SOLUTION<br />
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br />
Vendor has been informed about the bug. Currently wordpress developers and contributors are in<br />
the process of bug hunting and fixing reported bugs in beta versions before the new stable release,<br />
so hopefully it should not take long for them to take this problem into account.</p>
<p>You can apply the temporary solutions for this problem which I provide below before an official<br />
patch is made.</p>
<p>You can create a .htaccess file in the uploads dir (wordpress/wp-content/uploads) with<br />
the following content:</p>
<p>deny from all<br />
&lt;Files ~ &#8220;^\w+\.(gif|jpe?g|png|avi)$&#8221;&gt;<br />
order deny,allow<br />
allow from all<br />
&lt;/Files&gt;</p>
<p>Adjust allowed file extensions in the brackets if necessary.<br />
This will prevent Apache from serving files with double extensions inside the uploads directory.</p>
<p>Alternatively you can try to patch the source code yourself by editing the<br />
wp-admin/includes/file.php file and the wp_handle_upload() function it contains. An example patch<br />
could be to add the following three lines of code at the line 260:</p>
<p>// Fix Unrestricted File Upload Arbitrary PHP Code Execution bug, return if more than 1 extension provided<br />
if ( count(explode(&#8216;.&#8217;, $file['name'])) &gt; 2 );<br />
return $upload_error_handler( $file, __( &#8216;File type does not meet security guidelines. Try another.&#8217; ));</p>
<p>VIII. REFERENCES<br />
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br />
<a href="http://www.wordpress.org/" target="_blank">http://www.wordpress.org</a><br />
<a href="http://httpd.apache.org/docs/2.2/mod/mod_mime.html#multipleext" target="_blank">http://httpd.apache.org/docs/2.2/mod/mod_mime.html#multipleext</a></p>
<p>IX. CREDITS<br />
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br />
This vulnerability has been discovered by Dawid Golunski<br />
golunski (at) onet (dot) eu</p>
<p>Greetings go to: robxt, sajanek, xsoti, bart, falcon (for the old time&#8217;s sake <img src='http://ankitkumaragarwal.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />  and complexmind</p>
<p>X. REVISION HISTORY<br />
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br />
November 11th, 2009: Initial release</p>
<p>XI. LEGAL NOTICES<br />
&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br />
The information contained within this advisory is supplied &#8220;as-is&#8221; with no warranties or guarantees of fitness of<br />
use or otherwise. I accept no responsibility for any damage caused by the use or misuse of this information.</p></div>
<div><strong><br />
</strong></div>
<div><strong>Counter question by me</strong></div>
<div></div>
<div>Hi,<br />
i was testing this and i get just the url echoed nothing else.The php info command didnt work.<br />
am i missing something?<br />
Morover</p>
<div>
For example, if .gif maps to the MIME-type  image/gif<br />
and .html maps to the MIME-type text/html, then the file welcome.gif.html will be associated with<br />
the MIME-type text/html.</div>
</div>
<div>So doesnt that mean that the file will be associated with jpg only?<br />
sorry if you think this noobis.But i am not able to figure it out.<br />
Thanks</div>
<div>Ankit kumar agarwal</div>
<div></div>
<div><strong>His reply</strong></div>
<div></div>
<div>Hi,</p>
<div>Yes, you missed the other part of the quote from apache docs <img src='http://ankitkumaragarwal.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />  That is:</div>
<div>
<div>&#8220;Care should be taken when a file with multiple extensions gets associated with both a MIME-type</div>
<div>and a handler. This will usually result in the request being handled by the module associated with</div>
<div>the handler. For example, if the .imap  extension is mapped to the handler imap-file</div>
<div>(from mod_imagemap) and the .html extension is mapped to the MIME-type text/html, then the file</div>
<div>world.imap.html will be associated with both the imap-file handler and text/html MIME-type.</div>
<div>When it is processed, the imap-file handler will be used, and so it will be treated as a</div>
<div>mod_imagemap imagemap file.&#8221;</div>
</div>
<div>A lot of systems that use apache/php have their apache configured so that it handles .php files via:</div>
<div>AddHandler php5-script .php</div>
<div>as opposed to :</div>
<div>AddType application/x-httpd-php .php (which is probably your case)</div>
<div>According to the above, handlers have priority over mime types thus .php.jpg will be executed as a php.</div>
<div>I&#8217;m going to clarify this on bugtraq soon so it is clear for others too.</div>
<div>Hope this clarifies it.</div>
<div>Take care,</div>
<div>Dawid</div>
</div>
<div><strong><br />
</strong></div>
<div><strong>His public Explanation of what i asked</strong></div>
<div></div>
<div>Hi,<br />
Just wanted to add a quick update on affected systems since I forgot to mention webservers along with wordpress versions in my advisory.<br />
Some people are wondering why the vulnerability doesn&#8217;t work on their system.</p>
<p>I&#8217;m pretty sure that the exploit won&#8217;t work on web servers other than Apache (as they probably won&#8217;t process extensions other than the last one). So not  apache based servers are probably safe here.<br />
Whether it will work on your Apache server or not depends on your mod_php configuration.<br />
The exploit won&#8217;t work on servers where PHP scripts handling has been configured as follows:</p>
<p>&lt;FilesMatch \.php$&gt;<br />
SetHandler application/x-httpd-php<br />
&lt;/FilesMatch&gt;</p>
<p>If the exploit doesn&#8217;t work for you this is most likely the case.</p>
<p>The exploit however will work on systems where php scripts are handled via the following setting in the php.conf:</p>
<p>AddHandler php5-script .php</p>
<p>which I think is quite common. For example Apache distributed in Red Hat based systems seem to have php configured in such a way.</p>
<p>Hope this clears the matter a bit.</p>
<p>Regards,<br />
Dawid</p></div>
<div></div>
<div></div>
<div>Thats it..dont misuse above information!!</div>
<div></div>
]]></content:encoded>
			<wfw:commentRss>http://ankitkumaragarwal.com/wordpress-2-8-5-unrestricted-file-upload-arbitrary-php-code-execution/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Google-The History Part-5</title>
		<link>http://ankitkumaragarwal.com/google-the-history-part-5/</link>
		<comments>http://ankitkumaragarwal.com/google-the-history-part-5/#comments</comments>
		<pubDate>Fri, 09 Oct 2009 06:03:23 +0000</pubDate>
		<dc:creator>Ankit Kumar Agarwal</dc:creator>
				<category><![CDATA[Uncategorized]]></category>

		<guid isPermaLink="false">http://ankitkumaragarwal.com/?p=98</guid>
		<description><![CDATA[2009 has been a busy year so far for Google, and it isn&#8217;t over yet. So far Google has added offline access to Gmail, introduced its Latitude location service, taken you to Mars with a new version of Google Earth, and re-launched the GrandCentral phone service as Google Voice, to name but a few things.
Google [...]]]></description>
			<content:encoded><![CDATA[<p>2009 has been a busy year so far for Google, and it isn&#8217;t over yet. So far Google has <a href="http://www.pcworld.com/article/158461/gmail_goes_offline.html">added offline access to Gmail</a>, introduced its <a href="http://www.pcworld.com/businesscenter/article/159137/google_latitude_an_indepth_look.html">Latitude location service</a>, taken you to Mars with a <a href="http://www.pcworld.com/article/161249/google_earth_now_shows_latest_images_of_mars.html">new version of Google Earth,</a> and <a href="http://www.pcworld.com/article/161119/google_relaunches_grandcentral_phone_service_as_google_voice.html?tk=rel_news">re-launched the GrandCentral phone service</a> as Google Voice, to name but a few things.</p>
<p><span><img src="http://images.pcworld.com/news/graphics/165765-165666-google_wave_logo-thumb_original_original.png" alt="" /></span>Google also <a href="http://www.pcworld.com/article/165779/google_wave_what_it_is_and_how_it_works.html">unveiled its Wave service</a> in May of this year. Wave combines a range of communication and social networking activities into a single web application and is expected to be available to the masses later this year.</p>
<p>The biggest news from Google this year came when the firm announced that it <a href="http://www.pcworld.com/article/168028/google_announces_chrome_os.html">plans to release an operating system</a>. Google Chrome OS is expected to land next year, and will initially be aimed at low end devices such as netbooks. Several hints at <a href="http://www.pcworld.com/article/171178/more_screenshots_of_google_chrome_os_emerge.html">what the OS could look like</a> have leaked online, but Google have yet to comment on any supposed screenshots.   <span><img src="http://images.pcworld.com/news/graphics/171178-chrome_f1_original.jpg" alt="" /></p>
<div>A rumoured screenshot of Google&#8217;s Chrome operating system.</div>
<p></span></p>
<h2>What Does The Future Hold?</h2>
<p>With eleven years behind them, <a href="http://www.pcworld.com/article/169973/Googles_Caffeine_Should_Give_Businesses_The_Jitters.html">Google is still innovating and tweaking</a>. What we can expect next from the search giant is anyone&#8217;s guess, but in the immediate future we can look forward to taking Chrome OS for a spin, trying out <a href="http://www.pcworld.com/article/172678/android_os_16_donut_is_a_treat_for_developers.html">new versions of Android</a>, and watching countless videos on YouTube.</p>
<p>Just be sure to remember this, Google: Don&#8217;t be evil. Please.</p>
<p><em>What will Google come up with next? Chime in with your thoughts in the comments.</em></p>
<p><em>Follow <a href="http://twitter.com/geektech" target="_blank">Geek Tech</a> and <a href="http://twitter.com/chrisbrandrick" target="_blank">Chris Brandrick</a> on Twitter.</em></p>
]]></content:encoded>
			<wfw:commentRss>http://ankitkumaragarwal.com/google-the-history-part-5/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Google-The History Part-4</title>
		<link>http://ankitkumaragarwal.com/google-the-history-part-4/</link>
		<comments>http://ankitkumaragarwal.com/google-the-history-part-4/#comments</comments>
		<pubDate>Thu, 08 Oct 2009 05:50:29 +0000</pubDate>
		<dc:creator>Ankit Kumar Agarwal</dc:creator>
				<category><![CDATA[History]]></category>

		<guid isPermaLink="false">http://ankitkumaragarwal.com/?p=94</guid>
		<description><![CDATA[
A Message From Chad &#38; Steve: 2006

Ending months of speculation, in late 2006 Google finally revealed that they had bought online video site YouTube in a massive $1.65 billion stock transaction.
The Growth Continues: 2007
The year started with Google expanding into new territories once again, with Google Maps making its way to Australia and the Google [...]]]></description>
			<content:encoded><![CDATA[<div>
<h2>A Message From Chad &amp; Steve: 2006</h2>
<p><object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" width="350" height="265" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,40,0"><param name="allowfullscreen" value="true" /><param name="allowscriptaccess" value="always" /><param name="src" value="http://www.youtube-nocookie.com/v/QCVxQ_3Ejkg&amp;hl=en&amp;fs=1&amp;rel=0&amp;color1=0x5d1719&amp;color2=0xcd311b" /><embed type="application/x-shockwave-flash" width="350" height="265" src="http://www.youtube-nocookie.com/v/QCVxQ_3Ejkg&amp;hl=en&amp;fs=1&amp;rel=0&amp;color1=0x5d1719&amp;color2=0xcd311b" allowscriptaccess="always" allowfullscreen="true"></embed></object></p>
<p>Ending months of speculation, in late 2006 <a href="http://www.pcworld.com/article/127436/its_official_google_buys_youtube.html">Google finally revealed that they had bought online video site YouTube</a> in a massive $1.65 billion stock transaction.</p>
<h2>The Growth Continues: 2007</h2>
<p>The year started with Google expanding into new territories once again, with Google Maps making its way to Australia and the Google Docs suite of tools being made available in several additional languages. Gmail was also made available to all, no longer requiring an invitation.</p>
<p>T<span><img src="http://images.pcworld.com/opinion/graphics/172698-street_view_original.jpg" alt="" /></span>he biggest innovation from Google in 2007 was the addition of street level photography to Google Maps. Dubbed <a href="http://www.youtube.com/watch?v=91wuBqlny50" target="_blank">Street View</a>, the service lets you view and explore a number of US locations at street level. Naturally, Street View&#8217;s introduction caused some controversy as it raised <a href="http://www.pcworld.com/article/140164/google_making_street_view_anonymous.html">quite a few privacy concerns</a>.</p>
<p>Popular search terms in 2007 included the iPhone, Facebook and Second Life. Since Google acquired YouTube in 2006, the <a href="http://www.youtube.com/watch?v=BudhFVnN2o0" target="_blank">popular video site</a> has grown into an outright juggernaut: Even <a href="http://www.youtube.com/theroyalchannel?hl=en" target="_blank">the Queen of England</a> has her own YouTube channel.</p>
<h2>Going Full Circle: 2008</h2>
<p>Last year Google celebrated their tenth year in operation, and showed no signs of slowing down. The company released its first iPhone application, expanded Street View&#8217;s coverage to include a number of additional countries, revealed a new version of its <a href="http://www.google.com/picasa/" target="_blank">Picasa</a> photo management app, and <a href="http://googleblog.blogspot.com/2008/07/knol-is-open-to-everyone.html" target="_blank">launched Knol</a>, a Wikipedia-type service.</p>
<p><span><img src="http://images.pcworld.com/news/graphics/168705-googlechromelogo_180.jpg" alt="" /></span> In its biggest move of the year, Google announced that it would enter the browser wars with <a href="http://www.google.com/chrome" target="_blank">its own take on the humble web browser</a>. The open source<a href="http://www.pcworld.com/businesscenter/article/150521/google_browser_will_be_available_tuesday.html"> Google Chrome appeared in September of last year</a>, and featured a minimalist interface and home page with shortcuts to frequently visited pages&#8211;features that have made their way into other browsers since then.</p>
<p>Later in the year, Google&#8217;s foray into software continued as the <a href="http://www.pcworld.com/article/151448/tmobiles_g1_in_pictures.html">first ever cell phone to use Android</a>, Google&#8217;s open-source mobile OS, hit the scene.</div>
]]></content:encoded>
			<wfw:commentRss>http://ankitkumaragarwal.com/google-the-history-part-4/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Google-The History Part-3</title>
		<link>http://ankitkumaragarwal.com/google-the-history-part-3/</link>
		<comments>http://ankitkumaragarwal.com/google-the-history-part-3/#comments</comments>
		<pubDate>Wed, 07 Oct 2009 05:47:14 +0000</pubDate>
		<dc:creator>Ankit Kumar Agarwal</dc:creator>
				<category><![CDATA[History]]></category>

		<guid isPermaLink="false">http://ankitkumaragarwal.com/?p=92</guid>
		<description><![CDATA[
The Written Word: 2003
2003 was one verbose year for the search-engine giant. It began in February when Google acquired Pyra Labs, creators of the Blogger service, which allowed the masses to publish their thoughts online with ease. Soon after the acquisition, Google&#8217;s company name was announced as a recognized verb, to &#8220;google it&#8221; had become [...]]]></description>
			<content:encoded><![CDATA[<div>
<h2>The Written Word: 2003</h2>
<p><span><img src="http://images.pcworld.com/reviews/graphics/products/2007/01.23.07/25619_92.jpg" alt="" /></span>2003 was one verbose year for the search-engine giant. It began in February when <a href="http://www.guardian.co.uk/business/2003/feb/18/digitalmedia.citynews" target="_blank">Google acquired Pyra Labs</a>, creators of the Blogger service, which allowed the masses to publish their thoughts online with ease. Soon after the acquisition, Google&#8217;s company name was announced as a recognized verb, to &#8220;google it&#8221; had become synonymous with search, however <a href="http://news.bbc.co.uk/1/hi/uk/3006486.stm" target="_blank">Google strived to steer clear of dictonaries</a> and protect their strong brand.</p>
<p>In December the <a href="http://www.pcworld.com/article/171357/amazon_objects_to_google_books_settlement.html">controversial</a> Google Print was launched: Now known as <a href="http://books.google.com/" target="_blank">Google Book Search</a>, the service allows users to view excerpts from thousands of books in digital form. Classic books and their film adaptations, such as Lord Of The Rings and Harry Potter, were some of the most searched for terms on Google in 2003.</p>
<h2>Email, Google Style: 2004</h2>
<p>Without a doubt 2004 biggest Google news was the introduction of Gmail. <span><img src="http://images.pcworld.com/news/graphics/159350-gmail_original.jpg" alt="" /></span>The beta launched on April Fools Day, but Google made sure that Gmails was no joke, offering a <a href="http://en.wikipedia.org/wiki/Gmail" target="_blank">then-unheard-of 1GB</a> of storage along with a speedy user experience and the beauty of Google&#8217;s search technology built right in to your inbox. The service launched as a strictly invite-only affair, which resulted in an online gold rush of those hoping to land an invitation. After five years, <a href="http://www.pcworld.com/businesscenter/article/167965/google_removes_beta_label_from_gmail_calendar_other_services.html">Gmail finally disposed of its beta status</a> early in June of 2009.</p>
<p>2004 also saw Google move to its Mountain View, California &#8220;<a href="http://en.wikipedia.org/wiki/Googleplex" target="_blank">Googleplex</a>&#8221; headquarters, where the company still resides today. In addition, Google opened a research and development center in Tokyo and a European headquarters in Dublin, Ireland. With over three thousand employees, a range or products under its belt and over eight billion items in its search index Google&#8217;s growth continued to amaze.</p>
<h2>Mapping The World: 2005</h2>
<p>In 2005, Google&#8217;s ongoing effort to organize the world&#8217;s information continued as<span><img src="http://images.pcworld.com/opinion/graphics/172698-google_map_original.jpg" alt="" /></span> <a href="http://googleblog.blogspot.com/2005/02/mapping-your-way.html" target="_blank">they released Google Maps</a>. Since then, Google has continually improved the mapping service, adding new features such as satellite views and directions, as well as increasing the number of new searchable locations. <a href="http://earth.google.com/" target="_blank">Google Earth</a>, a 3D satellite photography-based mapping application, soon followed, further complimenting Google&#8217;s range of location services.</p>
<p>2005 also saw the release of the <a href="http://www.google.com/ig" target="_blank">iGoogle</a> customizable home page, <a href="http://www.google.com/reader/" target="_blank">Google Reader</a> RSS feed manager and <a href="http://www.google.com/analytics/" target="_blank">Google Analytics</a>. Optimized mobile versions of Gmail, Blogger, and Search were also released.</p>
<p>Oh, and could you imagine naming your newborn baby &#8220;Google&#8221;? <a href="http://googleblog.blogspot.com/2005/10/we-get-letters-3.html" target="_blank">It happened</a>.</div>
]]></content:encoded>
			<wfw:commentRss>http://ankitkumaragarwal.com/google-the-history-part-3/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Google-The History Part-2</title>
		<link>http://ankitkumaragarwal.com/google-the-history-part2/</link>
		<comments>http://ankitkumaragarwal.com/google-the-history-part2/#comments</comments>
		<pubDate>Tue, 06 Oct 2009 05:37:55 +0000</pubDate>
		<dc:creator>Ankit Kumar Agarwal</dc:creator>
				<category><![CDATA[History]]></category>

		<guid isPermaLink="false">http://ankitkumaragarwal.com/?p=90</guid>
		<description><![CDATA[
Growth &#38; Expansion: 2000
2000 was a year of growth, as along with the search engine reaching a milestone of one billion pages indexed, the website also expanded to support over fifteen languages including Chinese, French, German, Japanese and more.
How things change. This year (2000) also saw Yahoo! reveal that they will be using Google as [...]]]></description>
			<content:encoded><![CDATA[<div>
<h2>Growth &amp; Expansion: 2000</h2>
<p>2000 was a year of growth, as along with the search engine reaching a milestone of one billion pages indexed, the website also expanded to support over fifteen languages including Chinese, French, German, Japanese and more.</p>
<p><span><img src="http://images.pcworld.com/shared/graphics/cms/yahooNews_92.jpg" alt="" /></span>How things change. This year (2000) also saw Yahoo! reveal that they will be using Google as their default search provider. At the time this was a big deal, as Yahoo! was once one of the darlings of search, which Google had originally set their eyes on to compete with; mission accomplished? Of course today paints a very different picture as now both <a href="http://www.pcworld.com/businesscenter/article/169254/microsoft_signs_search_deal_with_yahoo.html?tk=rel_news">Yahoo! and Microsoft are collectively attempting to compete</a> with the search giant that Google has become.</p>
<p>Before the year was out Google also found time to launch the immensely successful AdWords program, and their Toolbar browser plug-in. With the year drawing to a close it was pretty clear that the search engine was on a meteoric rise, as Google was now handling nearly 100 million search queries a day.</p>
<h2>Going Global: 2001</h2>
<p>With the search engine now available in over twenty-five languages, it only seemed right that the company would expand on a global level with the opening of its first international office in Tokyo. <span><img src="http://images.pcworld.com/opinion/graphics/172698-eric_google_188.jpg" alt="" /></span>2001 also saw <a href="http://news.cnet.com/2100-1023-254750.html" target="_blank">Google hire ex-Novell chief executive Eric Schmidt</a>, who started at Google as the Chairman of the Board, before quickly moving on to <a href="http://www.forbes.com/2001/08/06/0806google.html" target="_blank">become the CEO</a>.</p>
<p>With the Google search index approaching three billion webpages, it seemed the perfect time to tackle a new type of search: Images. Google launched its Image Search service in July, and initially had an index of over 250 million images.</p>
<h2>Getting Geeky: 2002</h2>
<p>2002 saw Google launch a range of new products, including the <a href="http://www.google.com/products" target="_blank">shopping tool Froogle</a>, the experimental Google Labs, and the popular <a href="http://news.google.com/" target="_blank">Google News service</a>, a product of the company&#8217;s so-called &#8220;<a href="http://www.scottberkun.com/blog/2008/thoughts-on-googles-20-time/" target="_blank">twenty percent time</a>&#8220;. Geeky Google also decided to offer a Klingon translation of the site for all those Star Trek fans out there, bringing the total number of supports languages to over seventy. Spiderman, Warcraft 3 and pop star Shakira were amongst the most common search terms of the year.</div>
]]></content:encoded>
			<wfw:commentRss>http://ankitkumaragarwal.com/google-the-history-part2/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
