[pytanie] czy to jest skrypt dodajacy sm do konta?

watus · 7 Sierpnia 2013

~~"przeszukujac google" znalazlem taki oto skrypt~~

<?php
session_start();
if(!isset($_SESSION["UserID"]) || strlen($_SESSION["UserID"])<1){
echo '<script>alert("Nie jestes zalogowany");location.href="../default.php";</script>';
exit;
}
require_once("../../config.php");
?><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML>
<HEAD>
<TITLE>Doladuj kamienie</TITLE>
<META http-equiv=Content-Type content="text/html; charset=gb2312">
<STYLE type=text/css>
td img {display: block;}body,td,th {
        font-family: Tahoma, ËÎĚĺ;
        font-size: 12px;
        color: #A8031E;
}
body {
        margin-left: 0px;
        margin-top: 0px;
        margin-right: 0px;
        margin-bottom: 0px;
        background-image: url(../images/Page-BgTexture.jpg);
        background-repeat: repeat;
}
a:link {
        color: #6dd5fb;
        text-decoration: none;
}
a:visited {
        text-decoration: none;
        color: #6dd5fb;
}
a:hover {
        text-decoration: underline;
        color: #ccf9c4;
}
a:active {
        text-decoration: none;
        color: #ccf9c4;
}
.style1 {font-size: 12px}

img {
border:0;
}
</STYLE>

<META content="MSHTML 6.00.6000.16788" name=GENERATOR></HEAD>
<BODY>
<TABLE width="586" border=0 align="center" cellPadding=0 cellSpacing=0>
  <TBODY>
  <TR>
    <TD height=31>
	  <a href="http://5.87.32.39/itemshop/index.php"><img src="img/header.png" width="586" height="125"></a>
	  </TD>
</TR></TBODY></TABLE>
<TABLE width="586" height=250 border=0 align="center" cellPadding=0 cellSpacing=0>
  <TBODY>
  <TR>
    <TD vAlign=top align=left>
      <TABLE cellSpacing=0 cellPadding=0 width="96%" align=center border=0>
        <TBODY>
        <TR>
          <TD height=30><table border=0 cellpadding=0 cellspacing=0 width=560 align="center">
            <tbody>
              <tr>
                <td width="466" height="200" align=middle valign=top><form method=post name=chgform action="entermoney.php">
                    <input type="hidden" name="action" value="send" />
                    <table border=0 cellpadding=0 cellspacing=0 width=466>
                      <tbody>
                        <tr>
                          <td width="466"><br>
                              <b><font size="3"></font>Doladowanie Konta</b><span class="style1"><font 
              color=#cc3300></font></span></td>
                        </tr>
                        <tr>
                          <td height=1><img height=1 src="" width=300></td>
                        </tr>
                        <tr>
                          <td align=right>
                            <div align="left"></div>
                            <table align=center border=0 cellpadding=5 cellspacing=1 width="425">
                                <tbody>
                                  <tr>
                                    <td align=right class=txt_gray colspan=2><div align=left><font 
              color=#000000><b>Haslo dostaniesz od Admina Serwera.</b></font></div></td>
                                  </tr>
                                  <tr align="left" valign="middle">
                                    <td class=txt_gray width="184" height="32"><div align=left>Login:</div></td>
                                    <td class=txt_gray width="218" height="32"><input maxlength=20 name=UserID size=17 value="<?=$_SESSION["UserID"]?>" readonly="">
                                        <div align=center></div></td>
                                  </tr>
                                  <tr align="left" valign="middle">
                                    <td class=txt_gray width="184">Kod doladowania:</td>
                                    <td class=txt_gray width="218"><input maxlength=30 name=no size=30 type="text" onkeyup="value=value.replace(/[^\w\.\/]/ig,'')"></td>
                                  </tr>
                                  <tr align="left" valign="middle">
                                    <td color=txt_gra" width="184">Haslo doladowania:</td>
                                    <td class=txt_gray width="218"><input maxlength=30 name=pwd size=30 type="text" onkeyup="value=value.replace(/[^\w\.\/]/ig,'')"></td>
                                  </tr>
                                </tbody>
                              </table>
                            <div align="left"></div></td>
                        </tr>
                        <tr>
                          <td height=2><img height=1 src="" 
      width=466></td>
                        </tr>
                      </tbody>
                    </table>
                  <div align="center"><br>
                    <table width="400" border="0" cellspacing="0" cellpadding="0">
                          <tr>
                            <td align="center"><a 
      href="javascript:document.chgform.submit()"><img border=0 src="img/bt_confirm.png" width="82" height="30"></a></td>
                            </tr>
                        </table>
                        <br>
                        <br>
                    </div>
                </form></td>
              </tr>
            </tbody>
          </table></TD>
        </TR></TBODY></TABLE></TD></TR></TBODY></TABLE>
</BODY></HTML>
<?php
$action=$_POST["action"];
$no=$_POST["no"];
$pwd=$_POST["pwd"];
if ($action=="send"){
if ($no!="" && $pwd!=""){
mysql_select_db("player");
$exec="select id,no,pwd,cash,`lock` from card where no='$no' and pwd='$pwd'";
        $result=mysql_query($exec);
        $rs=mysql_fetch_object($result);
        if($rs){
        if($rs->lock==0){
                $_SESSION["cash"]=$_SESSION["cash"]+$rs->cash;
                $exec="update card set `lock`=1 where id=$rs->id";
                mysql_query($exec);
                mysql_select_db("account");
                $exec="update account set cash=".$_SESSION["cash"]." where login='".$_SESSION["UserID"]."'";
                mysql_query($exec);
                echo"<script>alert('Kamienie zostaly doladowane na twoje konto !');location.href='../default.php';</script>";
                }else{
                echo "<script>alert('Ten Kod zostal juz wykorzystany !');history.back();</script>";
                }
        }else{
                echo "<script>alert('Kod albo haslo nie jest poprawne !');history.back();</script>";
        }
}else{
        echo "<script>alert('Takie ID doladowania nie istnieje !');history.back();</script>";
exit;
}
}
?>

~~czy to jest skrypt dzieki ktoremu po wpisaniu loginu. kodu i hasla otrzymamy smocze monety? i czy wgl ten skrypt zadziala?~~

~~Nie ogarniam html/php (jeszcze ) ale zaciekawily mnie ostatnie linijki (php).~~

mysql_select_db("player");
$exec="select id,no,pwd,cash,`lock` from card where no='$no' and pwd='$pwd'";

~~poszukiwanie kodu z player/card~~

$exec="update account set cash=".$_SESSION["cash"]." where login='".$_SESSION["UserID"]."'";

~~update w tabeli account kolumny cash dla odpowiedniego UserID~~

~~Czy sie myle?~~

@edit

jestem idiotą!!! :huh: :huh: 8S

Do zamkniecia

CalipsoMt2 · 10 Sierpnia 2013

Tak to jest to

Zaloguj się

👋 Witaj na MPCForum!

[pytanie] czy to jest skrypt dodajacy sm do konta?

Rekomendowane odpowiedzi

watus

watus

CalipsoMt2

CalipsoMt2

Zarchiwizowany