<?php
ob_start();
?>
<?php /* ------------------------- */
// anti mysql injections
// bovenaan omdat dit belangrijk is
$locatie = $_SERVER['REQUEST_URI'];
$array = Array();
$array[] = "mysql";
$array[] = "query";
$array[] = ")";
$array[] = ";";
$array[] = "INSERT";
$array[] = "%40";
$array[] = "DROPTABLE";
$array[] = "TRUNCATE";
foreach($array As $foutbezig) {
if(eregi($foutbezig,$locatie)) {
echo "Hey Waar Ben je nou mee Bezig :D";
exit();
}
}
?>
<?PHP
@session_start();
error_reporting(E_ALL ^ E_NOTICE);
date_default_timezone_set('Europe/Amsterdam');
#variabelen
$titel = 'G-game.nl - ';
$vipdagen = 30;
//die('De site wordt momenteel gereset, je kunt over enkele minuten weer spelen :)!
# Database connectie
//mysql_connect("localhost","root","");
//mysql_select_db("ggamenl_01") or die('We hebben een probleem met de verbinding naar de database..');
$ext = (file_exists('../play.php')) ? '../' : '';
if(!(@mysql_connect("localhost","dbuser","dbpass") && @mysql_select_db("dbname"))) {
die('We zijn bezig met het resetten..');
}
if(isset($_SESSION['login']))
{
$dbres = mysql_query("SELECT *,UNIX_TIMESTAMP(`signup`) AS `signup`,UNIX_TIMESTAMP(`online`) AS `online` FROM `[users]` WHERE `login`='".$_SESSION['login']."'");
$data = mysql_fetch_array($dbres);
$query = mysql_query("SELECT login, rankvord FROM `[users]` WHERE rankvord > 100");
while($leden = mysql_fetch_assoc($query)) {
$som = $leden['rankvord'] - "100";
if($som >= 0) {
mysql_query("UPDATE `[users]` SET `rank`=`rank`+1, `rankvord`='". $som ."' WHERE login='". $leden['login'] ."'");
}
else
{
mysql_query("UPDATE `[users]` SET `rank`=`rank`+1, `rankvord`='0.00' WHERE login='". $leden['login'] ."'");
}
}
}
/**
* @todo Beveilig input
*/
foreach ($_GET as $get => $it)
{
$_GET[$get] = valid_input($it);
}
foreach ($_POST as $post => $it)
{
if(!is_array($it)) $_POST[$post] = valid_input($it);
}
/**
* @todo Functions
*/
function numcheck($int='id', $table, $value){
$daf = mysql_query("SELECT COUNT(".$int.") FROM `".$table."`".$value);
return mysql_result($daf,0);
}
function logincheck() {
global $ext;
$query = mysql_query("SELECT logincode FROM `[users]` WHERE login='". $_SESSION['login'] ."'");
$data = mysql_fetch_assoc($query);
if(isset($_SESSION['login'], $_SESSION['code']) && $_SESSION['ip'] == $_SERVER['REMOTE_ADDR']) {
return true;
}
elseif($_SESSION['code'] != $data['logincode'] || $_SESSION['ip'] != $_SERVER['REMOTE_ADDR']) {
unset($_SESSION['login']);
unset($_SESSION['code']);
unset($_SESSION['ip']);
header("Location: ".$ext."includes/login.php");
}
else
{
unset($_SESSION['login']);
unset($_SESSION['code']);
unset($_SESSION['ip']);
header("Location: ".$ext."includes/login.php");
return false;
}
}
function cHeader()
{
global $ext,$data;
$num = mysql_result(mysql_query("SELECT COUNT(id) FROM `[messages]` WHERE `read`=0 AND `inbox`=1 AND `to`='".$data['login']."'"),0);
if($data['melding'] == 'ja' and $num > 0){?><table width="100%"><tr><td class="subTitle">SMS Melding</td></tr><tr><td class="mainTxt"><a href="<?=$ext;?>sms.php">Je hebt <?=$num;?> nieuwe SMS(jes)</a></td></tr></table><?php }
}
function VIPcheck()
{
global $data;
if($data['vipdagen'] > 0)
{
return true;
}
else
{
return false;
}
}
function rank($rank)
{
$cRank = array("","Empty-Suit","No-Respect","Picciotto","Shoplifter","Pickpocket","Associate","Soldier","Mobster","Local Chief","Chief","Godfather","Highlord","Maffia Lord", "Don", "God's Helper", "The God");
return $cRank[$rank];
}
function wapen($weapon)
{
$cWapen = array("","Knuckle-Duster","Stiletto","Colt AR-15A3 Tactical Carbine","BFG-50 Carbine","Tommy Gun Assault Riflee");
return $cWapen[$weapon];
}
function def($protection)
{
$cDef = array("","Helm","Kogelwerend vest","Kogelwerend pak","Motorfiets","Kogelwerend Lincoln");
return $cDef[$protection];
}
function valid_input($input)
{
return(htmlentities(trim(mysql_real_escape_string($input))));
}
// Email validator
function email_validator($email){
if (eregi("^[0-9a-z]([-_.]?[0-9a-z])*@[0-9a-z]([-.]?[0-9a-z])*\\.[a-z]{2,4}$",$email)){
return true;
}else{
return false;
}
}
function landImage($string)
{
global $ext;
if($string == "1")
{
$image = '<img src="'.$ext.'images/game/landen/nederland.gif" border="0" alt="Nederland">';
}
elseif($string == "2")
{
$image = '<img src="'.$ext.'images/game/landen/duitsland.gif" border="0" alt="Duitsland">';
}
elseif($string == "3")
{
$image = '<img src="'.$ext.'images/game/landen/engeland.gif" border="0" alt="Engeland">';
}
elseif($string == "4")
{
$image = '<img src="'.$ext.'images/game/landen/frankrijk.gif" border="0" alt="Frankrijk">';
}
elseif($string == "5")
{
$image = '<img src="'.$ext.'images/game/landen/griekenland.gif" border="0" alt="Griekenland">';
}
elseif($string == "6")
{
$image = '<img src="'.$ext.'images/game/landen/italie.gif" border="0" alt="Italië">';
}
elseif($string == "7")
{
$image = '<img src="'.$ext.'images/game/landen/belgie.gif" border="0" alt="België">';
}
return $image;
}
function landImageName($string)
{
global $ext;
$image = "";
if($string == "1")
{
$image = '<img src="'.$ext.'images/game/landen/nederland.gif" border="0" alt="Nederland">';
}
elseif($string == "2")
{
$image = '<img src="'.$ext.'images/game/landen/duitsland.gif" border="0" alt="Duitsland">';
}
elseif($string == "3")
{
$image = '<img src="'.$ext.'images/game/landen/engeland.gif" border="0" alt="Engeland">';
}
elseif($string == "4")
{
$image = '<img src="'.$ext.'images/game/landen/frankrijk.gif" border="0" alt="Frankrijk">';
}
elseif($string == "5")
{
$image = '<img src="'.$ext.'images/game/landen/griekenland.gif" border="0" alt="Griekenland">';
}
elseif($string == "6")
{
$image = '<img src="'.$ext.'images/game/landen/italie.gif" border="0" alt="Italië">';
}
elseif($string == "7")
{
$image = '<img src="'.$ext.'images/game/landen/belgie.gif" border="0" alt="België">';
}
return $image;
}
if(isset($_SESSION['login'])){
$dbres = mysql_query("SELECT UNIX_TIMESTAMP(`time`) AS `time`,`name` FROM `[cron]`");
while($x = mysql_fetch_object($dbres))
$update[$x->name] = $x->time;
if(floor($update['hour']/3600) != floor(time()/3600)) {
$dbres = mysql_query("SELECT GET_LOCK('hour_update',0)");
if(mysql_result($dbres,0) == 1) {
$cron_pass = "secretcronpassword";
mysql_query("UPDATE `[cron]` SET `time`=NOW() WHERE `name`='hour'");
include("_cron_hour.php");
mysql_query("SELECT RELEASE_LOCK('hour_update')");
}
}
if(floor($update['day']/86400) != floor(time()/86400)) {
$dbres = mysql_query("SELECT GET_LOCK('day_update',0)");
if(mysql_result($dbres,0) == 1) {
$cron_pass = "secretcronpassword";
mysql_query("UPDATE `[cron]` SET `time`=NOW() WHERE `name`='day'");
include("_cron_day.php");
mysql_query("SELECT RELEASE_LOCK('day_update')");
}
}
if(floor($update['week']/604800) != floor(time()/604800)) {
$dbres = mysql_query("SELECT GET_LOCK('week_update',0)");
if(mysql_result($dbres,0) == 1) {
$cron_pass = "secretcronpassword";
mysql_query("UPDATE `[cron]` SET `time`=NOW() WHERE `name`='week'");
include("_cron_week.php");
mysql_query("SELECT RELEASE_LOCK('week_update')");
}
}
if((date('G',time()) >= 16 && date('z',time()) != date('z',$update['horserace'])) || (date('G',time()) >= 21 && date('G',$update['horserace']) < 21)) {
$dbres = mysql_query("SELECT GET_LOCK('horserace_update',0)");
if(mysql_result($dbres,0) == 1) {
$cron_pass = "secretcronpassword";
mysql_query("UPDATE `[cron]` SET `time`=NOW() WHERE `name`='horserace'");
include("_cron_horserace.php");
mysql_query("SELECT RELEASE_LOCK('horserace_update')");
}
}
}
?>
<?
if($data['level'] == -1)
{
echo '
<html>
<head>
<title>Mafiaplace - Vermoord</title>
<link rel="stylesheet" type="text/css" href="http://mafiaplace.summerhost.nl/includes/css.css">
</head>
<body>
<table align="center" width="600">
<tr><td class="subTitle" colspan="2"><b>Mafiaplace - Verbannen!</b></td></tr>
<tr><td class="mainTxt" colspan="2"><center><img src="images/dead.gif"></center></td></tr>
<tr><td class="mainTxt" width="300">Reden</td><td class="mainTxt" width="300">Er is geen manier om dit om te draaien! Als je erg onterecht vind mail dan naar [email protected]</td></tr>
<tr><td class="mainTxt" width="300">Bericht</td><td class="mainTxt" width="300">Bespaar jezelf de moeite en ga niets proberen ! </td></tr>
</table>
</body>
</html>
';
exit;
}
?>
<?
$dbres = mysql_query("SELECT *,UNIX_TIMESTAMP(`moordtijd`) AS `moordtijd`,0 FROM `[users]` WHERE `login`='{$data['login']}'");
$data1 = mysql_fetch_object($dbres);
$seconden = ($data1->moordtijd)- time() - 3600;
$seconden2 = date("H:i:s", "$seconden");
if($data['vermoord'] == 2)
{
echo '
<html>
<head>
<title>mafiaplace - Vermoord</title>
<link rel="stylesheet" type="text/css" href="http://mafiaplace.summerhost.nl/includes/css.css">
</head>
<body>
<table align="center" width="600">
<tr><td class="subTitle" colspan="2"><b>Mafiaplace - Crimineel vermoord!</b></td></tr>
<tr><td class="mainTxt" colspan="2"><center><img src="images/dead.gif"></center></td></tr>
<tr><td class="mainTxt" colspan="2"><center>Je bent nog '.$seconden2.' Seconden wachten voor je weer kunt spelen</center>
<tr><td class="mainTxt" width="300">Dader</td><td class="mainTxt" width="300">Ombekent</td></tr>
<tr><td class="mainTxt" width="300">Bericht</td><td class="mainTxt" width="300">Geen Bericht </td></tr>
</table>
</body>
</html>
';
exit;
}
?>
Zou iemand mij kunnen vertellen wat er veranderd moet worden om het te laten werken? Ik kan niets vinden...
dbuser/pass/name heb ik niet ingevuld bij deze post, duh.. :p
knop om je tekst aan te passen.