 |
|
09-10-2009, 10:46 AM
|
|
#1
|
|
|
Novice (Level 1)
Join Date: Sep 2009
Posts: 3
|
help please ? <?php echo ; ?>
hello im prety new to all this stuff but ive tryed an simple rgp maffia site now i got everything done all i get when i try to conenct to my site is this : Even offline
There has been a temporary disturbance. This will be corrected as soon as possible. Thank you for your understanding and patience!
next comment is the script.
if you can help me please add my msn deadtolumb@hotmail.com
thank you. |
|
 Add to del.icio.us
 Can you digg it?
|
|
|
|
|
09-10-2009, 10:48 AM
|
|
#2
|
|
|
Novice (Level 1)
Join Date: Sep 2009
Posts: 3
|
the script
the script
Quote:
<?php /* ------------------------- */
include("gegevens.php");
function quote_smart($value) {
if (get_magic_quotes_gpc()) {
$value = stripslashes($value);
}
if(version_compare(phpversion(),"4.3.0") == "-1") {
return mysql_escape_string($value);
} else {
return mysql_real_escape_string($value);
}
}
if(!(@mysql_connect("$host","$user","$pass") && @mysql_select_db("$tablename"))) {
print <<<ENDHTML
<html>
<head>
<title><?php echo $page->sitetitle; ?></title>
<link rel="stylesheet" type="text/css" href="<? echo $sitelink;?>/layout/layout<?php echo $page->layout; ?>/css/css.css">
<script language="javascript">
function showTxt(id) {
document.getElementById(id).style.position = "relative";
document.getElementById(id).style.visibility = "visible";
}
</script>
</head>
<table width=50%>
<tr><td class="subTitle"><b>Even offline</b></td></tr>
<tr><td class="mainTxt">
<center>There has been a temporary disturbance. This will be corrected as soon as possible. Thank you for your understanding and patience!
</center>
</td></tr>
</table>
</body>
</html>
ENDHTML;
exit;
}
error_reporting ( 0 );
session_start();
include("_include-funcs2.php");
if(isset($_SESSION['login'])) {
$dbres = mysql_query("SELECT *,UNIX_TIMESTAMP(`signup`) AS `signup`,UNIX_TIMESTAMP(`online`) AS `online` FROM `[users]` WHERE `login`='{$_SESSION['login']}'");
$data = mysql_fetch_object($dbres);
if($data->ip == '')
{
$IP = $_SERVER['REMOTE_ADDR'];
mysql_query("UPDATE `[users]` SET `IP`='$IP' WHERE `login`='$data->login'");
}
}
foreach($_POST as $key => $value) {
if(gettype($_POST[$key]) == "array")
foreach($_POST[$key] as $key2 => $value2)
$_POST[$key][$key2] = addslashes($_POST[$key][$key2]);
else
$_POST[$key] = addslashes($_POST[$key]);
}
foreach($_GET as $key => $value) {
if(gettype($_GET[$key]) == "array")
foreach($_GET[$key] as $key2 => $value2)
$_GET[$key][$key2] = addslashes($_GET[$key][$key2]);
else
$_GET[$key] = addslashes($_GET[$key]);
}
foreach($_COOKIE as $key => $value) {
if(gettype($_COOKIE[$key]) == "array")
foreach($_COOKIE[$key] as $key2 => $value2)
$_COOKIE[$key][$key2] = addslashes($_COOKIE[$key][$key2]);
else
$_COOKIE[$key] = addslashes($_COOKIE[$key]);
}
$clientIP = $_SERVER['REMOTE_ADDR'];
$forwardedFor = ($_SERVER['HTTP_X_FORWARDED_FOR'] != "") ? $_SERVER['HTTP_X_FORWARDED_FOR'] : $_SERVER['HTTP_CLIENT_IP'];
$forwardedFor = preg_replace('/, .+/','',$forwardedFor);
$dbres = mysql_query("SELECT `id` FROM `[users]` WHERE `level`='-1' AND `login`='{$data->login}'");
if(mysql_num_rows($dbres) == 1) {
print "
<html>
<head>
<title><?php echo $page->sitetitle; ?></title>
<link rel=\"stylesheet\" type=\"text/css\" href=\"<? echo $sitelink;?>/layout/layout<?php echo $page->layout; ?>/css/css.css\">
</head>
<body>
<center><table align=\"center\" width=\"50%\">
<tr><td class=\"subTitle\"><b>Unbanned</b></td></tr>
<tr><td class=\"mainTxt\">You are unbanned. If you want to re-enter The Gangster Game, Click on this Link:<br>
<center><a href=\"klikmissiebanned.php\" target=\"_new\"><img style=\"border; 1px solid #000000;\" src=\"images/stem.gif\" width=\"100\" height=\"20\"></a></center></td></tr>
</table>
</body>
</html>
";
mysql_query("UPDATE `[users]` SET `IP`='$clientIP' WHERE `login`='$data->login'");
exit;
}
if(isset($UPDATE_DB)) {
$dbres = mysql_query("SELECT UNIX_TIMESTAMP(`time`) AS `time`,`name` FROM `[cron]`");
while($x = mysql_fetch_object($dbres))
$update[$x->name] = $x->time;
if(floor($update['hour']/3600) != floor(time()/3600)) {
$dbres = mysql_query("SELECT GET_LOCK('hour_update',0)");
if(mysql_result($dbres,0) == 1) {
$cron_pass = "secretcronpassword";
mysql_query("UPDATE `[cron]` SET `time`=NOW() WHERE `name`='hour'");
include("_cron_hour.php");
mysql_query("SELECT RELEASE_LOCK('hour_update')");
}
}
if(floor($update['day']/86400) != floor(time()/86400)) {
$dbres = mysql_query("SELECT GET_LOCK('day_update',0)");
if(mysql_result($dbres,0) == 1) {
$cron_pass = "secretcronpassword";
mysql_query("UPDATE `[cron]` SET `time`=NOW() WHERE `name`='day'");
include("_cron_day.php");
mysql_query("SELECT RELEASE_LOCK('day_update')");
}
}
if(floor($update['week']/604800) != floor(time()/604800)) {
$dbres = mysql_query("SELECT GET_LOCK('week_update',0)");
if(mysql_result($dbres,0) == 1) {
$cron_pass = "secretcronpassword";
mysql_query("UPDATE `[cron]` SET `time`=NOW() WHERE `name`='week'");
include("_cron_week.php");
mysql_query("SELECT RELEASE_LOCK('week_update')");
}
}
if(date('n',$update['month']) != date('n',time())) {
$dbres = mysql_query("SELECT GET_LOCK('month_update',0)");
if(mysql_result($dbres,0) == 1) {
$cron_pass = "secretcronpassword";
mysql_query("UPDATE `[cron]` SET `time`=NOW() WHERE `name`='month'");
include("_cron_month.php");
mysql_query("SELECT RELEASE_LOCK('month_update')");
}
}
if((date('G',time()) >= 16 && date('z',time()) != date('z',$update['horserace'])) || (date('G',time()) >= 21 && date('G',$update['horserace']) < 21)) {
$dbres = mysql_query("SELECT GET_LOCK('horserace_update',0)");
if(mysql_result($dbres,0) == 1) {
$cron_pass = "secretcronpassword";
mysql_query("UPDATE `[cron]` SET `time`=NOW() WHERE `name`='horserace'");
include("_cron_horserace.php");
mysql_query("SELECT RELEASE_LOCK('horserace_update')");
}
}
}
mysql_query("UPDATE `[users]` SET `online2`='ja' WHERE UNIX_TIMESTAMP(NOW())-UNIX_TIMESTAMP(`online`) < 300");
mysql_query("UPDATE `[users]` SET `online2`='nee' WHERE UNIX_TIMESTAMP(NOW())-UNIX_TIMESTAMP(`online`) >= 300");
$dbres = mysql_query("SELECT *,UNIX_TIMESTAMP(`signup`) AS `signup`,UNIX_TIMESTAMP(`online`) AS `online` FROM `[users]` WHERE `login`='{$_SESSION['login']}'");
$data = mysql_fetch_object($dbres);
if($data->rankvord >= 100 && $data->rank <16) {
$rank = array("Cafone","LowLife","Pickpocket","Shoplifter","Mugger","Thief","WiseGuy","Associate","Mobster", "Gangster","Assassin","Good Fella","Mob Boss","The Don","The Lengendary Don","The Godfather");
$rank = $rank[$data->rank];
mysql_query("UPDATE `[users]` SET `rank`=`rank`+'1',`rankvord`=`rankvord`-'100' WHERE `login`='".$data->login."'");
mysql_query("INSERT INTO `[messages]`(`time`,`from`,`to`,`subject`,`message`)
VALUES(NOW(),'**Note**','".$data->login."','Rank Increased','You have been promted to ".$rank.".')");
}
if($data->rijbewijsmissie == 10 AND $data->rijbewijsauto > 4){
mysql_query("UPDATE `tunegarage` SET `banden`=`banden`+'$rand1',`motor`=`motor`+'$rand8',`interieur`=`interieur`+'$rand2',`uitlaat`=`uitl aat`+'$rand3',`remmen`=`remmen`+'$rand4',`body`=`body`+'$rand5',`velgen`=`velgen`+'$rand6',`nitro`=` nitro`+'$rand7' WHERE `eigenaar`='{$data->login}' AND `rijbewijs`='1'");
mysql_query("UPDATE `[users]` SET `rijbewijsmissie`='11' WHERE `login`='{$data->login}'");
mysql_query("INSERT INTO `[messages]`(`time`,`from`,`to`,`subject`,`message`) values(NOW(),'TGGame Staff','{$data->login}','Driving License','<center><b>Congratulations</b><br>You have received your drivers license!<br>You pimped car has<br> <b>{$rand1}</b> Link levels<br> <b>{$rand8}</b> Engine levels<br> <b>{$rand2}</b> Interieur levels<br> <b>{$rand3}</b> Exhaust levels<br> <b>{$rand4}</b> Brake levels<br> <b>{$rand5}</b> Body levels<br> <b>{$rand6}</b> Rim levels<br> <b>{$rand7}</b> Nitro levels!<br><br><b>We congratulate you on behalf of the staff</b></center> ')");
}
$gelderaf = $data->werknemers*50+$data->bewakers*50;
if($data->fabrieksgeld < $gelderaf AND $data->staking == 0 AND $data->nietstaken == 0){
mysql_query("UPDATE `[users]` SET `staking`='3' WHERE `login`='{$data->login}'");
mysql_query("UPDATE `[users]` SET `fabrieksgeld`='0' WHERE `login`='{$data->login}'");
mysql_query("INSERT INTO `[messages]`(`time`,`from`,`to`,`subject`,`message`) values(NOW(),'Your employees','{$data->login}','Strike','We are striking for 3 days, you have to pay up because nobody else will make you any cash. ')");
}
if($data->dagenwerken == 1){
mysql_query("UPDATE `[users]` SET `werklevel`=`werklevel`+1 WHERE `login`='{$data->login}'");
mysql_query("UPDATE `[users]` SET `baan`='0' WHERE `login`='{$data->login}'");
mysql_query("INSERT INTO `[messages]`(`time`,`from`,`to`,`subject`,`message`) values(NOW(),'Your Boss','{$data->login}','You have been promoted','Congratulations, you have stuck at it for these 5 days and so you worklevel has increased by 1.')");
mysql_query("UPDATE `[users]` SET `dagenwerken`='0' WHERE `login`='{$data->login}'");
}
$dbres = mysql_query("SELECT `id` FROM `rechtbankusers` WHERE `leven`<'1' AND `login`='{$data->login}'");
if(mysql_num_rows($dbres) == 1) {
echo 'You have been murdered, you can no longer play for 2 hours.';
exit;
}
$ipban1 = mysql_query("SELECT * FROM `[ipbanz]` WHERE IP='{$_SERVER['REMOTE_ADDR']}'");
$ipban = mysql_num_rows($ipban1);
if($ipban != 0){
$ipa = mysql_fetch_object($ipban1);
print 'You have been banned via your IP.<br>
Reason:'.$ipa->reden.'';
exit;
}
|
|
|
|
Add to del.icio.us
Can you digg it?
|
|
|
|
|
09-10-2009, 10:49 AM
|
|
#3
|
|
|
Novice (Level 1)
Join Date: Sep 2009
Posts: 3
|
script p 2
scripts part 2
Quote:
//
$locatie = $_SERVER['REQUEST_URI'];
$array = Array();
$array[] = "mysql";
$array[] = ")";
$array[] = ";";
$array[] = "}";
$array[] = "INSERT";
$array[] = "DROPTABLE";
$array[] = "TRUNCATE";
$array[] = "DROP";
$array[] = "UPDATE";
$array[] = "COOKIE";
$array[] = "ENV";
$array[] = "FILES";
$array[] = "GET";
$array[] = "POST";
$array[] = "REQUEST";
$array[] = "SERVER";
foreach($array As $foutbezig) {
if(eregi($foutbezig,$locatie)) {
exit("Dont use sql injections.");
}
}
$type = array("","DrugDealer","Thug","Pretty Boy","Officer","Gangster Wanabee","Hired Gun","Ho","Hustler","Playa","Original Gangster","Rude Boy","PeaceKeeper","Street Doll","Gangster *****","Drug Runner","Hoodie","Criminal","Lady *****","Real Thug","Avenger","Mugger","Capone","Thief","PIMP","Pretty Women","WiseGuy","Mobster","Fella","Gangster Girl","The Daddy" );
$ctype = $type[$data->ctype];
#
$select = mysql_query("SELECT * FROM `instellingen`");
#
$page = mysql_fetch_object($select);
mysql_query("UPDATE `[users]` SET `camera`=`camera`+'25' WHERE `ctype`='1'");
mysql_query("UPDATE `[users]` SET `shotgun`=`shotgun`+'30' WHERE `ctype`='2'");
mysql_query("UPDATE `[users]` SET `camera`=`camera`+'25' WHERE `ctype`='3'");
mysql_query("UPDATE `[users]` SET `shotgun`=`shotgun`+'30' WHERE `ctype`='4'");
mysql_query("UPDATE `[users]` SET `camera`=`camera`+'25' WHERE `ctype`='5'");
mysql_query("UPDATE `[users]` SET `shotgun`=`shotgun`+'30' WHERE`ctype`='6'");
mysql_query("UPDATE `[users]` SET `camera`=`camera`+'25' WHERE `ctype`='7'");
mysql_query("UPDATE `[users]` SET `shotgun`=`shotgun`+'30' WHERE `ctype`='8'");
mysql_query("UPDATE `[users]` SET `camera`=`camera`+'25' WHERE `ctype`='9'");
mysql_query("UPDATE `[users]` SET `shotgun`=`shotgun`+'30' WHERE`ctype`='10'");
mysql_query("UPDATE `[users]` SET `camera`=`camera`+'25' WHERE `ctype`='11'");
mysql_query("UPDATE `[users]` SET `shotgun`=`shotgun`+'30' WHERE `ctype`='12'");
mysql_query("UPDATE `[users]` SET `camera`=`camera`+'25' WHERE `ctype`='13'");
mysql_query("UPDATE `[users]` SET `shotgun`=`shotgun`+'30' WHERE `ctype`='14'");
mysql_query("UPDATE `[users]` SET `camera`=`camera`+'25' WHERE `ctype`='15'");
mysql_query("UPDATE `[users]` SET `shotgun`=`shotgun`+'30' WHERE `ctype`='16'");
mysql_query("UPDATE `[users]` SET `camera`=`camera`+'25' WHERE `ctype`='17'");
mysql_query("UPDATE `[users]` SET `shotgun`=`shotgun`+'30' WHERE `ctype`='18'");
mysql_query("UPDATE `[users]` SET `camera`=`camera`+'25' WHERE `ctype`='19'");
mysql_query("UPDATE `[users]` SET `shotgun`=`shotgun`+'30' WHERE `ctype`='20'");
mysql_query("UPDATE `[users]` SET `camera`=`camera`+'25' WHERE `ctype`='21'");
mysql_query("UPDATE `[users]` SET `shotgun`=`shotgun`+'30' WHERE `ctype`='22'");
mysql_query("UPDATE `[users]` SET `camera`=`camera`+'25' WHERE `ctype`='23'");
mysql_query("UPDATE `[users]` SET `shotgun`=`shotgun`+'30' WHERE `ctype`='24'");
mysql_query("UPDATE `[users]` SET `camera`=`camera`+'25' WHERE `ctype`='25'");
mysql_query("UPDATE `[users]` SET `shotgun`=`shotgun`+'30' WHERE `ctype`='26'");
mysql_query("UPDATE `[users]` SET `camera`=`camera`+'25' WHERE `ctype`='27'");
mysql_query("UPDATE `[users]` SET `shotgun`=`shotgun`+'30' WHERE `ctype`='28'");
mysql_query("UPDATE `[users]` SET `camera`=`camera`+'25' WHERE `ctype`='29'");
mysql_query("UPDATE `[users]` SET `shotgun`=`shotgun`+'30' WHERE `ctype`='30'");
|
|
|
|
Add to del.icio.us
Can you digg it?
|
|
|
|
|
09-11-2009, 07:58 PM
|
|
#4
|
|
|
Myrmidon (Level 12)
Join Date: May 2008
Location: Lakeland, FL
Posts: 193
|
I'd say you have an issue with your SQL connection based on the first condition of the following code
PHP Code:
if(!(@mysql_connect("$host","$user","$pass") && @mysql_select_db("$tablename"))) {
print <<<ENDHTML
<html>
<head>
<title><?php echo $page->sitetitle; ?></title>
<link rel="stylesheet" type="text/css" href="<? echo $sitelink;?>/layout/layout<?php echo $page->layout; ?>/css/css.css">
<script language="javascript">
function showTxt(id) {
document.getElementById(id).style.position = "relative";
document.getElementById(id).style.visibility = "visible";
}
</script>
</head>
<table width=50%>
<tr><td class="subTitle"><b>Even offline</b></td></tr>
<tr><td class="mainTxt">
<center>There has been a temporary disturbance. This will be corrected as soon as possible. Thank you for your understanding and patience!
</center>
</td></tr>
</table>
</body>
</html>
ENDHTML;
A few things to consider:
1) Where are the $host, $user, $pass, and $tablename values declared? In gegevans.php?
2) You may want to change your first line to this:
PHP Code:
//This has not been test, it may not work or even compile
$connection = mysql_connect( $host, $user, $pass )
or mail( "deadtolumb@hotmail.com", "Your MySQL Connection Failed", mysql_error( ) );
$database = mysql_select_db("$tablename")
or mail( "deadtolumb@hotmail.com", "Your MySQL DB Selection Failed", mysql_error( ) );
if(!$connection) {
This way if there is a problem, the specifics are emailed to you so the details are not public knowledge, and the user gets the same generic message.
__________________
Never accept Kool-aid from someone who won't drink from the same punch bowl.
|
|
|
Add to del.icio.us
Can you digg it?
|
|
|
|
KEEP TABS |
|
SPONSORS |
| |
|
| |
|
|
| |
|
Linear Mode
