[RELEASE] Vote For Coins V2

Newbie Spellweaver
Joined
Dec 23, 2008
Messages
46
Reaction score
29
Here is a remake of Vote for coins with mysql


Works on PHP 4 and PHP 5

Instructions:
- create new db called "vote"
- import "vote.sql"
- edit "vote.php" and fill in mssql and mysql
- edit "vote.php" to change values to your own wishes
- Upload vote.php and votenow.php
- go to yousite/votenow.php

Update:
- Total re-write of vote.php
- re-write of time difference
- added anti sql inject
- added java messages
- removed log from mysql
- added check for dshop
- changed date(); format

vote.php


PHP:
<html>
    <head>
        <title>Vote Now!</title>
        <style>
           body { background-color: #202020; 
                  color: yellow;
                }	
        </style>
    </head>
	<body>
		<?php
        // Report all PHP errors (see changelog)
		error_reporting(E_ALL);
		
		
        //---------------------------------------------------------- 
		// Give X coins
        $coins = 25;
		
		// Yout website after vote was successfull
		// Add http:// in your list
        $webpage = "http://www.google.com";
		
		// Time needed to vote again
		// You need to remove 1 minut from the time
		// 720 should be 12hours
		$time_needed = "719"; // in mintutes
		
        
        // Insert your MSSQL info here 
            $mssql = array( 
            'host' => "YOUR HOST", 
            'user' => "YOUR USER", 
            'pass' => "YOUR PASS" 
            ); 
			
        // Insert your MYSQL info here 
            $mysql = array( 
            'host' => "YOUR HOST", 
            'user' => "YOUR USER", 
            'pass' => "YOUR PASS", 
            'db'   => "vote" // Do not change it the DB is vote
            ); 
			
        //---DO NOT EDIT ANYTHING BELOW HERE UNLESS YOU KNOW WHAT YOU ARE DOING!! ---
		
		function clean($str){
			return is_array($str) ? array_map('clean', $str) : str_replace("\\", "\\\\", htmlspecialchars((get_magic_quotes_gpc() ? stripslashes($str) : $str), ENT_QUOTES));
		}
		  
		$mslink = mssql_connect($mssql['host'],$mssql['user'],$mssql['pass']);
        $mylink = mysql_Connect($mysql['host'], $mysql['user'], $mysql['pass']);
        mysql_select_db($mysql['db'],$mylink); 
        $ip = getenv("REMOTE_ADDR");
        $httpref = getenv ("HTTP_REFERER");
        $httpagent = getenv ("HTTP_USER_AGENT");
        $account = clean($_POST['account']);
		$date = date("Y-m-d G:i");
        
        if (empty($account)){
		
			echo '<SCRIPT LANGUAGE="JavaScript">alert("You didnt enter a account name! \n Please try again.")</script>';
			echo "<script type='text/javascript'>window.location='votenow.php';</script>";

			
        } elseif(!preg_match("/[0-9a-zA-Z]?/", $account)) {
		
			echo '<SCRIPT LANGUAGE="JavaScript">alert("Incorrect account name format. \n Please try again.")</script>';
			echo "<script type='text/javascript'>window.location='votenow.php';</script>";

			
        } else {
            
            $result1 = mssql_query("SELECT * FROM account.dbo.user_profile WHERE user_id = '".$account."'",$mslink);
            $count1 = mssql_num_rows($result1);
			$row1 = mssql_fetch_row($result1);
			
            if($count1 == '0') {
			
				echo '<SCRIPT LANGUAGE="JavaScript">alert("Account not found. \n Please try again.")</script>';
				echo "<script type='text/javascript'>window.location='votenow.php';</script>";

				
            } else { 

				$result2 = mssql_query("SELECT * FROM cash.dbo.user_cash WHERE user_no = '".$row1[0]."'",$mslink);
				$count_coins = mssql_num_rows($result2);
			
				if($count_coins == '0') {
				
					echo '<SCRIPT LANGUAGE="JavaScript">alert("This account didnt visit the D-shop yet. \n You cannot recive your coins. \n Please login into the server, and visit the D-shop.")</script>';
					echo "<script type='text/javascript'>window.location='votenow.php';</script>";

				} else {

        
					$result2 = mysql_query("SELECT * FROM users WHERE account = '".$account."' ");
					$row2 = mysql_fetch_row($result2);
					$count2 = mysql_num_rows($result2);
					
					if($count2 == 1){
							
						$voted_ip = $row2[2];
						$voted_date = $row2[3];
						$voted_id = $row2[0];
						$voted_account = $row2[1];
						$to_time = strtotime($voted_date);
						$from_time = strtotime($date);
					
						if (round(abs($to_time - $from_time) / 60,2) > $time_needed) {
							
							$amount = $coins;	
							mysql_query("UPDATE users SET date = '".$date."' WHERE account = '".$account."' ");		
							mssql_query("UPDATE cash.dbo.user_cash SET amount = amount+".$amount." WHERE user_no = '".$row1[0]."'",$mslink);	
							echo '<SCRIPT LANGUAGE="JavaScript">alert("Thank you for you vote!")</script>';
							echo "<script type='text/javascript'>window.location='$webpage';</script>";
										
						} else {
						
							echo '<SCRIPT LANGUAGE="JavaScript">alert("You cant vote anymore! \n Please try again later.")</script>';
							echo "<script type='text/javascript'>window.location='votenow.php';</script>";

						}
						
					} else {
						$amount = $coins;	
						$sql4 = mysql_query("INSERT INTO users (account,ip,date) VALUES ('".$account."','".$ip."','".$date."' ) ");
						mssql_query("UPDATE cash.dbo.user_cash SET amount = amount+".$amount." WHERE user_no = '".$row1[0]."'",$mslink);				
						echo '<SCRIPT LANGUAGE="JavaScript">alert("Thank you for you vote!")</script>';
						echo "<script type='text/javascript'>window.location='$webpage';</script>";
	
					}
				}	
			}
        }
		mysql_close($mylink);
		mssql_close($mslink);
        ?>
	</body>
</html>


votenow.php

PHP:
<html>
	<head>
		<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
		<title> vote for coins</title>
		<style type="text/css">
			div#container
			{
			   width: 350px;
			   position: relative;
			   margin-top: 0px;
			   margin-left: auto;
			   margin-right: auto;
			   text-align: left;
			}
			body
			{
			   text-align: center;
			   margin: 0;
			}
		</style>
	</head>
	<body bgcolor="#202020" text="#FFD700">
		<div id="wb_Text1" style="position:absolute;left:10px;top:120px;width:240px;height:14px;z-index:0;" align="left">
			<font style="font-size:11px" color="#ffffff" face="Arial">You can vote every 12 hours. 1 vote = 25 coins</font>
        </div>
						<img src="http://www.xtremeTop100.com/votenew.jpg" border="0" alt="Dekaron Servers" style="position:absolute;left:250px;top:34px; >
        <div id="container">
            <div id="wb_Form1" style="position:absolute;left:0px;top:0px;width:239px;height:135px;z-index:3;" align="left">
                   <form name="Form1" method="post" action="vote.php" id="Form1">
                        <div id="wb_Text1" style="position:absolute;left:10px;top:15px;width:78px;height:14px;z-index:0;" align="left">
                            <font style="font-size:11px" color="#FFD700" face="Arial">Account name:</font></div>
                        <input type="text" id="Editbox1" style="position:absolute;left:10px;top:34px;width:200px;font-family:Courier New;font-size:16px;z-index:1" name="account" value="">
                        <input type="submit" id="Button1" name="Button1" value="Vote" style="position:absolute;left:10px;top:65px;width:96px;height:25px;font-family:Arial;font-size:13px;z-index:2">
                    </form>
                </div>
            </div>
		</div>
	</body>
</html>


vote.sql


PHP:
SET FOREIGN_KEY_CHECKS=0;

SET FOREIGN_KEY_CHECKS=0;
DROP TABLE IF EXISTS `users`;
CREATE TABLE `users` (
  `id` bigint(11) NOT NULL auto_increment,
  `account` varchar(30) default NULL,
  `ip` varchar(30) default NULL,
  `date` datetime default NULL,
  PRIMARY KEY  (`id`)
) ENGINE=MyISAM AUTO_INCREMENT=33 DEFAULT CHARSET=latin1;
 
Instructions:
- create new db called "vote"
- import "vote.sql"
- edit "vote.php" and fill in mssql and mysql
- edit "vote.php" to change values to your own wishes
- Upload vote.php and votenow.php
- go to yousite/votenow.php

How do i import vote.sql to my database/vote also where is my mssql at ?i had xampp but i dun see mssql?
 
Instructions:
- create new db called "vote"
- import "vote.sql"
- edit "vote.php" and fill in mssql and mysql
- edit "vote.php" to change values to your own wishes
- Upload vote.php and votenow.php
- go to yousite/votenow.php

How do i import vote.sql to my database/vote also where is my mssql at ?i had xampp but i dun see mssql?

Just open the .sql files with notepad/wordpad, and execute the query on the proper database.

EDIT: Also this should be used directly to MSSQL there is no need for MySQL to be running on the same machine unless you host your web content there as well.
 
Last edited:
Just open the .sql files with notepad/wordpad, and execute the query on the proper database.

EDIT: Also this should be used directly to MSSQL there is no need for MySQL to be running on the same machine unless you host your web content there as well.
can u show me step in step how to run directly to mssql>? thanks for reply
 
when i try to run this query i get this message:
Server: Msg 170, Level 15, State 1, Line 1
Line 1: Incorrect syntax near '='.

Help? Please?
 
can u help me to make it ??? how i can add it in sql ???


SET FOREIGN_KEY_CHECKS=0;

SET FOREIGN_KEY_CHECKS=0;
DROP TABLE IF EXISTS `users`;
CREATE TABLE `users` (
`id` bigint(11) NOT NULL auto_increment,
`account` varchar(30) default NULL,
`ip` varchar(30) default NULL,
`date` datetime default NULL,
PRIMARY KEY (`id`)
) ENGINE=MyISAM AUTO_INCREMENT=33 DEFAULT CHARSET=latin1;

with query analyzer ??? :S?
 
Back