Привет, Гость!
 |
 |
 |
Тема: Взлом pro-kolhoz.ru
Mike [Off] (24.10.2014 / 17:34)
★ ★ ★ ★ ★ ☆ ☆
<?
if(isset($_GET['auth']))
{
include_once 'inc/auth.php';
}
elseif(isset($_GET['regi']))
{
include_once 'inc/reg.php';
}
elseif(isset($_GET['pass']))
{
include_once 'inc/pass.php';
}
elseif(isset($_GET['rules']))
{
include_once 'inc/rules.php';
}
elseif(isset($_GET['autologin']))
{
##EDITED_MIKE
$aLogin = mysql_real_escape_string(trim($_GET['autologin']));
if(mb_stristr($aLogin, "%00")) exit('Die');
if(mysql_result(mysql_query("SELECT COUNT(*) FROM `kolhoz_user` WHERE `autologin` = '".hsc($aLogin)."'"),0)!=0)
{
##EDITED_MIKE
$toSessSet = mysql_result(mysql_query("SELECT `id` FROM `kolhoz_user` WHERE `autologin` = '".hsc($aLogin)."'"),0);
$_SESSION['id_user'] = intval($toSessSet);
header("Location:?myfarm&autologin=".hsc($_GET['autologin']));
exit;
}
else err_game("Неверная ссылка автологина!");
}
if (isset($_SESSION['ref']))
{
##EDITED_MIKE
$_SESSION['id_user'] = intval($_SESSION['id_user']);
$_SESSION['ref'] = mysql_real_escape_string(trim($_SESSION['ref'] ));
mysql_query("UPDATE kolhoz_user SET rubies = rubies + '100' WHERE id = '" . $_SESSION['ref'] . "' LIMIT 1");
mysql_query("UPDATE kolhoz_user SET rating = rating + '5000' WHERE id = '" . $_SESSION['ref'] . "' LIMIT 1");
mysql_query("UPDATE kolhoz_user SET money = money + '500000' WHERE id = '" . $_SESSION['ref'] . "' LIMIT 1");
mysql_query("INSERT INTO `referals` SET `id_user` = '".$_SESSION['ref']."', `id_ref` = '".$_SESSION['id_user']."', `time` = '".time()."'");
unset($_SESSION['ref']);
}
echo "<div></div><div></div>";
echo "<div class='content'>";
echo "<div style='text-align:center;'>";
echo "</div>";
echo "<div class='framed'>";
if (isset($_SESSION['ref']))
{
##EDITED_MIKE
$_SESSION['ref'] = mysql_real_escape_string(trim($_SESSION['ref'] ));
$usr_ref = mysql_fetch_array(mysql_query("SELECT * FROM `kolhoz_user` WHERE `id` = '".$_SESSION['ref']."'"));
$refu = mysql_fetch_array(mysql_query("SELECT * FROM `kolhoz_user` WHERE `rubies` = '".$_SESSION['ref']."'"));
echo "<div class='block'>";
echo 'Вы по приглашению: '.$usr_ref['nick'].'<br />';
}
echo "<div class='block'>";
echo "<div>";
echo "<center><img src='images/logo6.jpg' alt='o'></center>";
echo "</div>";
echo "<div class='small ptm'>";
?>
</div>
<div class="block">
<div class="small ptm">
<center><font color="#BA55D3" size="7">Д</font><font color="#5588DD" size="6">о</font><font color="#DD7788" size="5">б</font><font color="#EE33AA" size="5">р</font><font color="#DD99CC" size="5">о</font> <font color="#AA66DD" size="4">п</font><font color="#B2EC5D" size="4">о</font><font color="#7755EE" size="6">ж</font><font color="#448855" size="4">а</font><font color="#119966" size="6">л</font><font color="#AA5599" size="3">о</font><font color="#BB2288" size="4">в</font><font color="#7799DD" size="6">а</font><font color="#45CEA2" size="3">т</font><font color="#CC6688" size="7">ь</font><font color="#EEDDEE" size="6">!</font></center>
<marquee behavior='alternate' direction='right' scrollamount='4'><li>
<div class='block'>Только сегодня бонус при регистрации: </div><div class='block'><center>100000 <img width='16' height='16' src='images/icons/money.png'/>, 500 <img width='16' height='16' src='images/icons/ruby.png'/></marquee></div>
<?
echo "<ul class='pt'>";
echo "</div>";
echo "<ul class='pt'>";
echo "<center> <a href='?regi'><center>Регистрация</font></a></center>";
echo "</ul>";
echo "</div>";
echo "<div class='framed'>";
echo "<div class='block event'>";
echo "<center>Онлайн <span class='title'>".mysql_result(mysql_query("SELECT COUNT(*) FROM `kolhoz_user` WHERE `date_last` > '".(time()-600)."'"), 0)."</span>, регистраций
<span class='title'>".mysql_result(mysql_query("SELECT COUNT(*) FROM `kolhoz_user`"), 0)."</span></div>";
echo "</div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>";
echo "</ul>";
echo "</div>";
echo "<div class='framed'>";
echo "<div class='block event'>";
echo "<center><div></div><div style='text-align:center;' class='pt small minor'> <a href='?rules'>Правила игры</a><div></div></div></center></br>";
include_once 'inc/auth.php';
exit;
?>