Can someone add anti sql function to this?

**Taxic** · 28-11-11

PHP Code:


<?

$errorcode = "";

$er = 0;

$registered = 0;

if (isset($_POST['submit'])){

    $user = clean($_POST['userid']);

    $email = clean($_POST['email']);

    $pw1 = clean($_POST['pw1']);

    $pw2 = clean($_POST['pw2']);

    $country = clean($_POST['country']);

    $sq = clean($_POST['sq']);

    $sa = clean($_POST['sa']);

    $name = clean($_POST['name']);

    $zip = clean($_POST['zip']);

    $age = clean($_POST['age']);

    $sex = clean($_POST['sex']);

    $address = clean($_POST['address']);





        $res = mssql_query_logged("SELECT * FROM Account WHERE email = '".$email."'");

        if (mssql_num_rows($res) >= 1){

            $errorcode.="e-Mail in use.</br>";

            $er = 1;

        }



        $res = mssql_query_logged("SELECT * FROM Login WHERE UserID = '".$user."'");

        if (mssql_num_rows($res) >= 1){

            $errorcode.="UserID in use.</br>";

            $er = 1;

        }



        if($pw1 == $pw2){

            $lol = "xDDD";

        }else{

            $errorcode.="The passwords do not match</br>";

            $er = 1;

        }



        if($user == ""){

            $errorcode.="Please enter a User ID.</br>";

            $er = 1;

        }



        if($email == ""){

            $errorcode.="Please type an e-mail.</br>";

            $er = 1;

        }



        if(strlen($pw1) < 6){

            $errorcode.="Please enter a password with 6 or more characters.</br>";

            $er =1;

        }



        if($pw1 == "" Or $pw2 == ""){

            $errorcode.="Please enter a password.</br>";

            $er = 1;

        }



        if($sq == ""){

            $errorcode.="Please enter a secret question.</br>";

            $er =1;

        }



        if($sa == ""){

            $errorcode.="Please enter a secret answer.</br>";

            $er = 1;

        }



        require_once('recaptchalib.php');

        $privatekey = "6LepMAgAAAAAAGQa4_jAZoG-HnX3Jgz2Ut0Ho5YO";

        $resp = recaptcha_check_answer ($privatekey,

                                $_SERVER["REMOTE_ADDR"],

                                $_POST["recaptcha_challenge_field"],

                                $_POST["recaptcha_response_field"]);



        if (!$resp->is_valid) {

            $errorcode.="The recaptcha wasn't entered correctly.</br>";

            $er = 1;

        }



        if($er == 0){

            $registered = 1;

            mssql_query_logged("INSERT INTO Account (UserID, Cert, Name, Email, Age, Sex, UGradeID, PGradeID, RegDate, Country, sa, sq, ZipCode, Address)Values ('$user', NULL, '$name','$email','$age', '$sex', 0, 0, GETDATE(),'$country', '$sa', '$sq', '$zip', '$address')");

        $res = mssql_query_logged("SELECT * FROM Account WHERE UserID = '$user'");

        $usr = mssql_fetch_assoc($res);

        $aid = $usr['AID'];

            mssql_query_logged("INSERT INTO Login ([UserID],[AID],[Password],[RZCoins],[EVCoins])VALUES('$user','$aid','$pw1',0,0)");

            //mssql_query_logged("UPDATE LastAccount SET Last = '$user' WHERE ID = 1");

            // start query invitation code

            

            // end query invitation code

        }else{

            $errorbox = ErrorBox($errorcode);

        }

}







if ($registered == 0){

?>



<form name="reg" method="POST" action="index.php?do=register"><body bgcolor="#323232">



                    <div align="center">

                        <table border="0" width="456" style="border-collapse: collapse">

                            <tr>

                                <td background="images/cont_up.png">&nbsp;</td>

                            </tr>

                            <tr>

                                <td background="images/cont_bg.png">

                                <div align="center">

                                    <table border="0" style="border-collapse: collapse" width="454" height="100%">

                                        <tr>

                                            <td width="4" rowspan="36">&nbsp;</td>

                                            <td width="436" colspan="2">

                                            <img border="0" src="images/inf/createaccount.png" width="413" height="18"></td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">&nbsp;

                                            </td>

                                            <td width="289">&nbsp;

                                            </td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

<? echo @$errorbox ?>

                                        <tr>

                                            <td width="145">&nbsp;

                                            </td>

                                            <td width="289">

                                            <font size="1" color="#FF0000">The fields marked with an <font color="#FFFFFF">*</font> are required.</font></td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">&nbsp;

                                            </td>

                                            <td width="289">&nbsp;

                                            </td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145" valign="middle">

                                            ·<span lang="es">

                                            User ID<font color="#FFFFFF">*</font></span></td>

                                            <td width="289">

                                            <input type="text" name="userid" size="20"></td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">&nbsp;</td>

                                            <td width="289">&nbsp;</td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">

                                            ·<span lang="es">

                                            E-mail<font color="#FFFFFF">*</font></span></td>

                                            <td width="289">

                                            <input type="text" name="email" size="20"></td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">&nbsp;</td>

                                            <td width="289">&nbsp;</td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">

                                            ·<span lang="es">

                                            Password<font color="#FFFFFF">*</font></span></td>

                                            <td width="289">

                                            <input type="password" name="pw1" size="20"></td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">&nbsp;</td>

                                            <td width="289">

                                            <font color="#FF0000">

                                            <span style="font-size: 7pt">Minimum 6 characters in length.</span></font></td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">

                                            ·<span lang="es">

                                            Confirm password<font color="#FFFFFF">*</font></span></td>

                                            <td width="289">

                                            <input type="password" name="pw2" size="20"></td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">&nbsp;</td>

                                            <td width="289">&nbsp;</td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145" valign="middle">

                                            ·<span lang="es">

                                            Country<font color="#FFFFFF">*</font></span></td>

                                            <td width="289">

                                            <select id="dropDownCountrySelector" name="country" class onChange="refreshCountry(this, false);">

                                            <option value="Albania" selected="selected">

                                            Albania</option>

                                            <option value="Algeria">Algeria</option>

                                            <option value="Andorra">Andorra</option>

                                            <option value="Angola">Angola</option>

                                            <option value="Anguilla">Anguilla</option>

                                            <option value="Antigua and Barbuda">Antigua and

                                            Barbuda</option>

                                            <option value="Argentina">Argentina

                                            </option>

                                            <option value="Armenia">Armenia</option>

                                            <option value="Aruba">Aruba</option>

                                            <option value="Australia">Australia

                                            </option>

                                            <option value="Austria">Austria</option>

                                            <option value="Azerbaijan Republic">Azerbaijan

                                            Republic</option>

                                            <option value="Bahamas">Bahamas</option>

                                            <option value="Bahrain">Bahrain</option>

                                            <option value="Barbados">Barbados</option>

                                            <option value="Belgium">Belgium</option>

                                            <option value="Belize">Belize</option>

                                            <option value="Benin">Benin</option>

                                            <option value="Bermuda">Bermuda</option>

                                            <option value="Bhutan">Bhutan</option>

                                            <option value="Bolivia">Bolivia</option>

                                            <option value="Bosnia and Herzegovina">Bosnia and

                                            Herzegovina</option>

                                            <option value="Botswana">Botswana</option>

                                            <option value="Brazil">Brazil</option>

                                            <option value="British Virgin Islands">British Virgin

                                            Islands</option>

                                            <option value="Brunei">Brunei</option>

                                            <option value="Bulgaria">Bulgaria</option>

                                            <option value="Burkina Faso">Burkina Faso

                                            </option>

                                            <option value="Burundi">Burundi</option>

                                            <option value="Cambodia">Cambodia</option>

                                            <option value="Canada">Canada</option>

                                            <option value="Cape Verde">Cape Verde

                                            </option>

                                            <option value="Cayman Islands">Cayman Islands

                                            </option>

                                            <option value="Chad">Chad</option>

                                            <option value="Chile">Chile</option>

                                            <option value="China Worldwide">China Worldwide

                                            </option>

                                            <option value="Colombia">Colombia</option>

                                            <option value="Comoros">Comoros</option>

                                            <option value="Cook Islands">Cook Islands

                                            </option>

                                            <option value="Costa Rica">Costa Rica

                                            </option>

                                            <option value="Croatia">Croatia</option>

                                            <option value="Cyprus">Cyprus</option>

                                            <option value="Czech Republic">Czech Republic

                                            </option>

                                            <option value="Democratic Republic of the Congo">Democratic

                                            Republic of the Congo</option>

                                            <option value="Denmark">Denmark</option>

                                            <option value="Djibouti">Djibouti</option>

                                            <option value="Dominica">Dominica</option>

                                            <option value="Dominican Republic">Dominican

                                            Republic</option>

                                            <option value="Ecuador">Ecuador</option>

                                            <option value="El Salvador">El Salvador

                                            </option>

                                            <option value="Eritrea">Eritrea</option>

                                            <option value="Estonia">Estonia</option>

                                            <option value="Ethiopia">Ethiopia</option>

                                            <option value="Falkland Islands">Falkland Islands

                                            </option>

                                            <option value="Faroe Islands">Faroe Islands

                                            </option>

                                            <option value="Federated States of Micronesia">Federated States

                                            of Micronesia</option>

                                            <option value="Fiji">Fiji</option>

                                            <option value="Finland">Finland</option>

                                            <option value="France">France</option>

                                            <option value="French Guiana">French Guiana

                                            </option>

                                            <option value="French Polynesia">French Polynesia

                                            </option>

                                            <option value="Gabon Republic">Gabon Republic

                                            </option>

                                            <option value="Gambia">Gambia</option>

                                            <option value="Germany">Germany</option>

                                            <option value="Gibraltar">Gibraltar

                                            </option>

                                            <option value="Greece">Greece</option>

                                            <option value="Greenland">Greenland

                                            </option>

                                            <option value="Grenada">Grenada</option>

                                            <option value="Guadeloupe">Guadeloupe

                                            </option>

                                            <option value="Guatemala">Guatemala

                                            </option>

                                            <option value="Guinea">Guinea</option>

                                            <option value="Guinea Bissau">Guinea Bissau

                                            </option>

                                            <option value="Guyana">Guyana</option>

                                            <option value="Honduras">Honduras</option>

                                            <option value="Hong Kong">Hong Kong

                                            </option>

                                            <option value="Hungary">Hungary</option>

                                            <option value="Iceland">Iceland</option>

                                            <option value="India">India</option>

                                            <option value="Indonesia">Indonesia

                                            </option>

                                            <option value="Ireland">Ireland</option>

                                            <option value="Israel">Israel</option>

                                            <option value="Italy">Italy</option>

                                            <option value="Jamaica">Jamaica</option>

                                            <option value="Japan">Japan</option>

                                            <option value="Jordan">Jordan</option>

                                            <option value="Kazakhstan">Kazakhstan

                                            </option>

                                            <option value="Kenya">Kenya</option>

                                            <option value="Kiribati">Kiribati</option>

                                            <option value="Kuwait">Kuwait</option>

                                            <option value="Kyrgyzstan">Kyrgyzstan

                                            </option>

                                            <option value="Laos">Laos</option>

                                            <option value="Latvia">Latvia</option>

                                            <option value="Lesotho">Lesotho</option>

                                            <option value="Liechtenstein">Liechtenstein

                                            </option>

                                            <option value="Lithuania">Lithuania

                                            </option>

                                            <option value="Luxembourg">Luxembourg

                                            </option>

                                            <option value="Madagascar">Madagascar

                                            </option>

                                            <option value="Malawi">Malawi</option>

                                            <option value="Malaysia">Malaysia</option>

                                            <option value="Maldives">Maldives</option>

                                            <option value="Mali">Mali</option>

                                            <option value="Malta">Malta</option>

                                            <option value="Marshall Islands">Marshall Islands

                                            </option>

                                            <option value="Martinique">Martinique

                                            </option>

                                            <option value="Mauritania">Mauritania

                                            </option>

                                            <option value="Mauritius">Mauritius

                                            </option>

                                            <option value="Mayotte">Mayotte</option>

                                            <option value="Mexico">Mexico</option>

                                            <option value="Mongolia">Mongolia</option>

                                            <option value="Montserrat">Montserrat

                                            </option>

                                            <option value="Morocco">Morocco</option>

                                            <option value="Mozambique">Mozambique

                                            </option>

                                            <option value="Namibia">Namibia</option>

                                            <option value="Nauru">Nauru</option>

                                            <option value="Nepal">Nepal</option>

                                            <option value="Netherlands">Netherlands

                                            </option>

                                            <option value="Netherlands Antilles">Netherlands

                                            Antilles</option>

                                            <option value="New Caledonia">New Caledonia

                                            </option>

                                            <option value="New Zealand">New Zealand

                                            </option>

                                            <option value="Nicaragua">Nicaragua

                                            </option>

                                            <option value="Niger">Niger</option>

                                            <option value="Niue">Niue</option>

                                            <option value="Norfolk Island">Norfolk Island

                                            </option>

                                            <option value="Norway">Norway</option>

                                            <option value="Oman">Oman</option>

                                            <option value="Palau">Palau</option>

                                            <option value="Panama">Panama</option>

                                            <option value="Papua New Guinea">Papua New Guinea

                                            </option>

                                            <option value="Peru">Peru</option>

                                            <option value="Philippines">Philippines

                                            </option>

                                            <option value="Pitcairn Islands">Pitcairn Islands

                                            </option>

                                            <option value="Poland">Poland</option>

                                            <option value="Portugal">Portugal</option>

                                            <option value="Qatar">Qatar</option>

                                            <option value="Republic of the Congo">Republic of the

                                            Congo</option>

                                            <option value="Reunion">Reunion</option>

                                            <option value="Romania">Romania</option>

                                            <option value="Russia">Russia</option>

                                            <option value="Rwanda">Rwanda</option>

                                            <option value="Saint Vincent and the Grenadines">Saint Vincent and

                                            the Grenadines</option>

                                            <option value="Samoa">Samoa</option>

                                            <option value="San Marino">San Marino

                                            </option>

                                            <option value="São Tomé and Príncipe">São Tomé and

                                            Príncipe</option>

                                            <option value="Saudi Arabia">Saudi Arabia

                                            </option>

                                            <option value="Senegal">Senegal</option>

                                            <option value="Seychelles">Seychelles

                                            </option>

                                            <option value="Sierra Leone">Sierra Leone

                                            </option>

                                            <option value="Singapore">Singapore

                                            </option>

                                            <option value="Slovakia">Slovakia</option>

                                            <option value="Slovenia">Slovenia</option>

                                            <option value="Solomon Islands">Solomon Islands

                                            </option>

                                            <option value="Somalia">Somalia</option>

                                            <option value="South Africa">South Africa

                                            </option>

                                            <option value="South Korea">South Korea

                                            </option>

                                            <option value="Spain">Spain</option>

                                            <option value="Sri Lanka">Sri Lanka

                                            </option>

                                            <option value="St. Helena">St. Helena

                                            </option>

                                            <option value="St. Kitts and Nevis">St. Kitts and

                                            Nevis</option>

                                            <option value="St. Lucia">St. Lucia

                                            </option>

                                            <option value="St. Pierre and Miquelon">St. Pierre and

                                            Miquelon</option>

                                            <option value="Suriname">Suriname</option>

                                            <option value="Svalbard and Jan Mayen Islands">Svalbard and Jan

                                            Mayen Islands</option>

                                            <option value="Swaziland">Swaziland

                                            </option>

                                            <option value="Sweden">Sweden</option>

                                            <option value="Switzerland">Switzerland

                                            </option>

                                            <option value="Taiwan">Taiwan</option>

                                            <option value="Tajikistan">Tajikistan

                                            </option>

                                            <option value="Tanzania">Tanzania</option>

                                            <option value="Thailand">Thailand</option>

                                            <option value="Togo">Togo</option>

                                            <option value="Tonga">Tonga</option>

                                            <option value="Trinidad and Tobago">Trinidad and

                                            Tobago</option>

                                            <option value="Tunisia">Tunisia</option>

                                            <option value="Turkey">Turkey</option>

                                            <option value="Turkmenistan">Turkmenistan

                                            </option>

                                            <option value="Turks and Caicos Islands">Turks and Caicos

                                            Islands</option>

                                            <option value="Tuvalu">Tuvalu</option>

                                            <option value="Uganda">Uganda</option>

                                            <option value="Ukraine">Ukraine</option>

                                            <option value="United Arab Emirates">United Arab

                                            Emirates</option>

                                            <option value="United Kingdom">United Kingdom

                                            </option>

                                                                                        <option value="United States">United States</option>

                                            <option value="Uruguay">Uruguay</option>

                                            <option value="Vanuatu">Vanuatu</option>

                                            <option value="Vatican City State">Vatican City

                                            State</option>

                                            <option value="Venezuela">Venezuela

                                            </option>

                                            <option value="Vietnam">Vietnam</option>

                                            <option value="Wallis and Futuna Islands">Wallis and Futuna

                                            Islands</option>

                                            <option value="Yemen">Yemen</option>

                                            <option value="Zambia">Zambia</option>

                                            </select></td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">&nbsp;</td>

                                            <td width="289">&nbsp;</td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="434" colspan="2">

                                            <hr color="#323232" width="96%"></td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">·<span lang="es">

                                            Name</span></td>

                                            <td width="289">

                                            <input type="text" name="name" size="20"></td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">&nbsp;</td>

                                            <td width="289">&nbsp;</td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">·<span lang="es"> 

                                            Age</span></td>

                                            <td width="289">

                                            <select size="1" name="age">

                                            <option value='1'>1</option>

<option value='2'>2</option>

<option value='3'>3</option>

<option value='4'>4</option>

<option value='5'>5</option>

<option value='6'>6</option>

<option value='7'>7</option>

<option value='8'>8</option>

<option value='9'>9</option>



<option value='10'>10</option>

<option value='11'>11</option>

<option value='12'>12</option>

<option value='13'>13</option>

<option value='14'>14</option>

<option value='15'>15</option>

<option value='16'>16</option>

<option value='17'>17</option>

<option value='18'>18</option>



<option value='19'>19</option>

<option value='20'>20</option>

<option value='21'>21</option>

<option value='22'>22</option>

<option value='23'>23</option>

<option value='24'>24</option>

<option value='25'>25</option>

<option value='26'>26</option>

<option value='27'>27</option>



<option value='28'>28</option>

<option value='29'>29</option>

<option value='30'>30</option>

<option value='31'>31</option>

<option value='32'>32</option>

<option value='33'>33</option>

<option value='34'>34</option>

<option value='35'>35</option>

<option value='36'>36</option>



<option value='37'>37</option>

<option value='38'>38</option>

<option value='39'>39</option>

<option value='40'>40</option>

<option value='41'>41</option>

<option value='42'>42</option>

<option value='43'>43</option>

<option value='44'>44</option>

<option value='45'>45</option>



<option value='46'>46</option>

<option value='47'>47</option>

<option value='48'>48</option>

<option value='49'>49</option>

<option value='50'>50</option>

<option value='51'>51</option>

<option value='52'>52</option>

<option value='53'>53</option>

<option value='54'>54</option>



<option value='55'>55</option>

<option value='56'>56</option>

<option value='57'>57</option>

<option value='58'>58</option>

<option value='59'>59</option>

<option value='60'>60</option>

<option value='61'>61</option>

<option value='62'>62</option>

<option value='63'>63</option>



<option value='64'>64</option>

<option value='65'>65</option>

<option value='66'>66</option>

<option value='67'>67</option>

<option value='68'>68</option>

<option value='69'>69</option>

<option value='70'>70</option>

<option value='71'>71</option>

<option value='72'>72</option>



<option value='73'>73</option>

<option value='74'>74</option>

<option value='75'>75</option>

<option value='76'>76</option>

<option value='77'>77</option>

<option value='78'>78</option>

<option value='79'>79</option>

<option value='80'>80</option>

<option value='81'>81</option>



<option value='82'>82</option>

<option value='83'>83</option>

<option value='84'>84</option>

<option value='85'>85</option>

<option value='86'>86</option>

<option value='87'>87</option>

<option value='88'>88</option>

<option value='89'>89</option>

<option value='90'>90</option>



<option value='91'>91</option>

<option value='92'>92</option>

<option value='93'>93</option>

<option value='94'>94</option>

<option value='95'>95</option>

<option value='96'>96</option>

<option value='97'>97</option>

<option value='98'>98</option>

<option value='99'>99</option>



<option value='100'>100</option>

                                            </select></td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">&nbsp;</td>

                                            <td width="289">&nbsp;</td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">·<span lang="es">

                                            Sex</span></td>

                                            <td width="289">

                                            <select size="1" name="sex">

                                            <option selected value="Male">Male

                                            </option>

                                            <option value="Female">Female

                                            </option>

                                            </select></td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">&nbsp;</td>

                                            <td width="289">&nbsp;</td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                                        <tr>

                                            <td width="145">·<span lang="es">

                                            </span>ZIP Code</td>

                                            <td width="289">

                                            <input type="text" name="zip" size="20"></td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">&nbsp;</td>

                                            <td width="289">&nbsp;</td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">·<span lang="es">

                                            Address</span></td>

                                            <td width="289">

                                            <input type="text" name="address" size="20"></td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">&nbsp;</td>

                                            <td width="289">&nbsp;</td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="436" colspan="2">

                                            <hr color="#323232" width="96%"></td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">&nbsp;</td>

                                            <td width="289">&nbsp;</td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">· Secret Question<font color="#FFFFFF">*</font></td>

                                            <td width="289">

                                            <input type="text" name="sq" size="34"></td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">&nbsp;</td>

                                            <td width="289">

                                            <font color="#FF0000">

                                            <span style="font-size: 7pt">The Secret question is used to retrieve your password.</span></font></td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">&nbsp;</td>

                                            <td width="289">&nbsp;</td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">· Security Answer<font color="#FFFFFF">*</font></td>

                                            <td width="289">

                                            <input type="text" name="sa" size="34"></td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">&nbsp;</td>

                                            <td width="289">&nbsp;</td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="436" colspan="2">

                                            <hr color="#323232" width="96%"></td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="145">· Recaptcha<font color="#FFFFFF">*</font>

                                            <td width="289">

                                            <? 

                                            require_once('recaptchalib.php');

                                            $publickey = "6LepMAgAAAAAAG8JszlL7PQKy_UsrS6rndEisQjL";

                                            echo recaptcha_get_html($publickey);

                                            ?>

                                            <td width="8">&nbsp;</td>

                                                                </tr>

                                        <tr>

                                            <td width="434" colspan="4">

                                            <hr color="#323232" width="96%"></td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="434" colspan="4">

                                            <center>

                                            <input type="submit" value="Register" name="submit"></center></td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                    </table>

                                </div>

                                </td>

                            </tr>

                            <tr>

                                <td background="images/cont_top.png" height="27">&nbsp;</td>

                            </tr>

                        </table>

                    </div></form>

<?

}else{

?>

<head>

<meta http-equiv="Content-Language" content="es">

</head>



<form name="reg" method="POST" action="index.php?do=register"><body bgcolor="#323232">



                    <div align="center">

                        <table border="0" width="456" style="border-collapse: collapse">

                            <tr>

                                <td background="images/cont_up.jpg">&nbsp;</td>

                            </tr>

                            <tr>

                                <td background="images/cont_bg.jpg">

                                <div align="center">

                                    <table border="0" style="border-collapse: collapse" width="454" height="100%">

                                        <tr>

                                            <td width="4" rowspan="8">&nbsp;</td>

                                            <td width="436" colspan="2">

                                            <img border="0" src="images/inf/createaccount.png" width="413" height="18"></td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="434" colspan="2">&nbsp;

                                            </td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="25" valign="middle">&nbsp;

                                            </td>

                                            <td width="409" valign="middle">

                                            Account '<b><?=$user?></b>' has been created correctly.</td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="25">&nbsp;</td>

                                            <td width="409">You can play Nolife_x GunZ now.</td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="434" colspan="2">&nbsp;

                                            </td>

                                            <td width="8">&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width="434" height="24" colspan="2">

                                            <center>

                                            &nbsp;</center></td>

                                            <td width="8" height="24">&nbsp;</td>

                                        </tr>

                                    </table>

                                </div>

                                </td>

                            </tr>

                            <tr>

                                <td background="images/cont_top.jpg" height="27">&nbsp;</td>

                            </tr>

                        </table>

                    </div></form>

<?

}

?>

people can inject from there.. please can someone anti sql it?

**MentaL**

Can someone add anti sql function to this?

**Vusion** · 28-11-11

Look for this "function clean" in your functions.php, and post the whole function.

**Taxic** · 28-11-11

here you go

PHP Code:


<?

@session_start();

function makepoststring($string) {

    if (strlen($string) > 17){

        return ucfirst(substr($string,0,17) . "...");

    }else{

        return ucfirst($string);

    }

}



function clean($value)

{

        $check = $value;



        $search = array('chr(', 'chr=', 'chr%20', '%20chr', 'wget%20', '%20wget', 'wget(',

        'cmd=', '%20cmd', 'cmd%20', 'rush=', '%20rush', 'rush%20',

        'union%20', '%20union', 'union(', 'union=', 'echr(', '%20echr', 'echr%20', 'echr=',

        'esystem(', 'esystem%20', 'cp%20', '%20cp', 'cp(', 'mdir%20', '%20mdir', 'mdir(',

        'mcd%20', 'mrd%20', 'rm%20', '%20mcd', '%20mrd', '%20rm',

        'mcd(', 'mrd(', 'rm(', 'mcd=', 'mrd=', 'mv%20', 'rmdir%20', 'mv(', 'rmdir(',

        'chmod(', 'chmod%20', '%20chmod', 'chmod(', 'chmod=', 'chown%20', 'chgrp%20', 'chown(', 'chgrp(',

        'locate%20', 'grep%20', 'locate(', 'grep(', 'diff%20', 'kill%20', 'kill(', 'killall',

        'passwd%20', '%20passwd', 'passwd(', 'telnet%20', 'vi(', 'vi%20',

        'insert%20into', 'select%20', 'fopen', 'fwrite', '%20like', 'like%20',

        '$_request', '$_get', '$request', '$get', '.system', 'HTTP_PHP', '&aim', '%20getenv', 'getenv%20',

        'new_password', '&icq','/etc/password','/etc/shadow', '/etc/groups', '/etc/gshadow',

        'HTTP_USER_AGENT', 'HTTP_HOST', '/bin/ps', 'wget%20', 'uname\x20-a', '/usr/bin/id',

        '/bin/echo', '/bin/kill', '/bin/', '/chgrp', '/chown', '/usr/bin', 'g\+\+', 'bin/python',

        'bin/tclsh', 'bin/nasm', 'perl%20', 'traceroute%20', 'ping%20', '.pl', 'lsof%20',

        '/bin/mail', '.conf', 'motd%20', 'HTTP/1.', '.inc.php', 'config.php', 'cgi-', '.eml',

        'file\://', 'window.open', '<script>', 'javascript\://','img src', 'img%20src','.jsp','ftp.exe',

        'xp_enumdsn', 'xp_availablemedia', 'xp_filelist', 'xp_cmdshell', 'nc.exe', '.htpasswd',

        'servlet', '/etc/passwd', 'wwwacl', '~root', '~ftp', '.js', '.jsp', 'admin_', '.history',

        'bash_history', '.bash_history', '~nobody', 'server-info', 'server-status', 'reboot%20', 'halt%20',

        'powerdown%20', '/home/ftp', '/home/www', 'secure_site, ok', 'chunked', 'org.apache', '/servlet/con',

        '<script', 'UPDATE', 'SELECT', 'DROP', '/robot.txt' ,'/perl' ,'mod_gzip_status', 'db_mysql.inc', '.inc', 'select%20from',

        'select from', 'drop%20', 'getenv', 'http_', '_php', 'php_', 'phpinfo()', '<?php', '?>', 'sql=');



        $value = str_replace($search, '', $value);

        $value = preg_replace(sql_regcase("/(from|select|insert|delete|where|drop table|show tables|#|\*|--|\\\\)/"),"",$value);

        $value = trim($value);

        $value = strip_tags($value);

        $value = addslashes($value);

        $value = str_replace("'", "''", $value);



        if( $check != $value )

        {

            $logf = fopen("logs/Hacklogs.txt", "a+");

            fprintf($logf, "Date: %s IP: %s Code: %s, Fixed: %s\r\n", date("d-m-Y h:i:s A"), $_SERVER['REMOTE_ADDR'], $check, $value );

            fclose($logf);

alertbox("Your IP has been saved. Admin will check it soon!","index.php");

        }



        return( $value );

}



function mssql_query_logged($query)

{



    //$f = fopen("logs/Querylogs.txt", "a+");

    //fprintf($f, "%s (mod_%s.php) - [AID=%s] %s [%s] - %s\r\n", $_SERVER[PHP_SELF],$_GET['do'], $_SESSION['AID'],  date("d-m-y - H:i:S"), $_SERVER['REMOTE_ADDR'], $query);

    //fclose($f);



    return mssql_query($query);

}



function ChangeTitle($title) {

    echo "<script language='JavaScript'>

document.title='".$title."';

</script>";

}



function mTrim($cadena){

    return str_replace(" ","",$cadena);

   }



function ErrorBox($data) {

    return "                               <tr>

                                            <td width='434' colspan='2'>

                                            <div align='center'>

                                                <table border='1' width='90%' height='90%' style='border-collapse: collapse' bordercolor='#FF0000' bgcolor='#FF9191' class='errorbox'>

                                                    <tr>

                                                        <td>

                                                        <table border='0' width='100%' height='100%' style='border-collapse: collapse'>

                                                            <tr>

                                                                <td valign='bottom' width='434' colspan='2'>

                                                        <img border='0' src='images/icon_error.gif' width='16' height='17'>

                                                        <font size='1'><b>An error occurred!</b></font></td>

                                                            </tr>

                                                            <tr>

                                                                <td width='19'>&nbsp;</td>

                                                                <td width='434' valign='top'><b>$data</b></td>

                                                            </tr>

                                                        </table>

                                                        </td>

                                                    </tr>

                                                </table>

                                            </div>

                                            </td>

                                            <td width='8'>&nbsp;</td>

                                        </tr>

                                        <tr>

                                            <td width='145'>

                                            &nbsp;</td>

                                            <td width='289'>

                                            &nbsp;</td>

                                            <td width='8'>&nbsp;</td>

                                        </tr>";

}



function msgbox($text, $url){

echo "<body  bgcolor='#000000'><script>alert('$text');document.location = '$url'</script></body>"; 

}







function re_dir($url){

echo "<body  bgcolor='#000000'><script>document.location = '$url'</script></body>";



}



function MakePercent($Value, $Total)

{

    return ($Value * $Total) / 100;

}



function GetKDRatio($kills, $deaths)

{

    $total = $kills + $deaths;



    $percent = @round((100 * $kills) / $total, 2);



    if($kills == 0 && $deaths == 0)

    {

        return "0/0 (100%)";

    }else{

        return sprintf("%d/%d (%d%%)", $kills, $deaths, $percent);

    }

}



function GetCharNameByCID($cid)

{

    $ncid = clean($cid);

    $a = mssql_fetch_assoc(mssql_query("SELECT Name FROM Character(nolock) WHERE CID = '$ncid'"));

    return $a[Name];

}



function FormatCharName($cid)

{

    $ncid = clean($cid);

    $res = mssql_fetch_row(mssql_query("SELECT ac.UGradeID, ch.Name From Character(nolock) ch INNER JOIN Account ac ON ac.AID = ch.AID WHERE ch.CID = '$ncid'"));



    $name = $res[1];



    switch($res[0])

    {

        case 255:

            return "<font color='#FF8040'>$name</font>";

        break;

        case 254:

            return "<font color='#00FF00'>$name</font>";

        break;

        case 3:

            return "<font color='#00FFFF'>$name</font>";

        break;

        case 1:

            return "<font color='#CD0000'>$name</font>";

        break;

        case 2:

            return "<font color='#FF92BB'>$name</font>";

        break;

        default:

            return $name;

        break;

    }

}



function GetClanPercent($Wins, $Losses)

{

    $total = $Wins + $Losses;



    return ($total == 0) ? "0%" : round((100 * $Wins) / $total, 2) . "%";

}





//from google.com and edited by Demantor



function validateIpAddress($ip)

{

  

  if(preg_match("/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/",$ip))

  {

    

    $parts=explode(".",$ip);

    

    foreach($parts as $ip_parts)

    {

      if(intval($ip_parts)>255 || intval($ip_parts)<0)

      return false;

    }

    return $ip;

  }

  else

    return false;

}





function getRealIpAddr()

{

    if (!empty($_SERVER['HTTP_CLIENT_IP']))

    {

      $ip=$_SERVER['HTTP_CLIENT_IP'];

    }

    elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR']))

    {

      $ip=$_SERVER['HTTP_X_FORWARDED_FOR'];

    }

    else

    {

      $ip=$_SERVER['REMOTE_ADDR'];

    }

    return $ip;

}



function clean_news($value)

{

        

        $check = $value;



        $search = array('chr(', 'chr=', 'chr%20', '%20chr', 'wget%20', '%20wget', 'wget(',

        'cmd=', '%20cmd', 'cmd%20', 'rush=', '%20rush', 'rush%20',

        'union%20', '%20union', 'union(', 'union=', 'echr(', '%20echr', 'echr%20', 'echr=',

        'esystem(', 'esystem%20', 'cp%20', '%20cp', 'cp(', 'mdir%20', '%20mdir', 'mdir(',

        'mcd%20', 'mrd%20', 'rm%20', '%20mcd', '%20mrd', '%20rm',

        'mcd(', 'mrd(', 'rm(', 'mcd=', 'mrd=', 'mv%20', 'rmdir%20', 'mv(', 'rmdir(',

        'chmod(', 'chmod%20', '%20chmod', 'chmod(', 'chmod=', 'chown%20', 'chgrp%20', 'chown(', 'chgrp(',

        'locate%20', 'grep%20', 'locate(', 'grep(', 'diff%20', 'kill%20', 'kill(', 'killall',

        'passwd%20', '%20passwd', 'passwd(', 'telnet%20', 'vi(', 'vi%20',

        'insert%20into', 'select%20', 'fopen', 'fwrite', '%20like', 'like%20',

        '$_request', '$_get', '$request', '$get', '.system', 'HTTP_PHP', '&aim', '%20getenv', 'getenv%20',

        'new_password', '&icq','/etc/password','/etc/shadow', '/etc/groups', '/etc/gshadow',

        'HTTP_USER_AGENT', 'HTTP_HOST', '/bin/ps', 'wget%20', 'uname\x20-a', '/usr/bin/id',

        '/bin/echo', '/bin/kill', '/bin/', '/chgrp', '/chown', '/usr/bin', 'g\+\+', 'bin/python',

        'bin/tclsh', 'bin/nasm', 'perl%20', 'traceroute%20', 'ping%20', '.pl', 'lsof%20',

        '/bin/mail', '.conf', 'motd%20', 'HTTP/1.', '.inc.php', 'config.php', 'cgi-', '.eml',

        'file\://', 'window.open', '<script>', 'javascript\://','img src', 'img%20src','.jsp','ftp.exe',

        'xp_enumdsn', 'xp_availablemedia', 'xp_filelist', 'xp_cmdshell', 'nc.exe', '.htpasswd',

        'servlet', '/etc/passwd', 'wwwacl', '~root', '~ftp', '.js', '.jsp', 'admin_', '.history',

        'bash_history', '.bash_history', '~nobody', 'server-info', 'server-status', 'reboot%20', 'halt%20',

        'powerdown%20', '/home/ftp', '/home/www', 'secure_site, ok', 'chunked', 'org.apache', '/servlet/con',

        '<script', 'UPDATE', 'SELECT', 'DROP', '/robot.txt' ,'/perl' ,'mod_gzip_status', 'db_mysql.inc', '.inc', 'select%20from',

        'select from', 'drop%20', 'getenv', 'http_', '_php', 'php_', 'phpinfo()', '<?php', '?>', 'sql=');



        $value = str_replace($search, '', $value);



        $value = preg_replace(sql_regcase("/(update|select|declare|cast|exec|0x|union|insert|delete|drop table|show tables|'|#|\*|--|\\\\)/"),"",$value);

        $value = trim($value);

        $value = strip_tags($value);

        $value = addslashes($value);

        $value = str_replace("'", "''", $value);



if( $check != $value )

        {

        



//ipbansystem();



setmessage("Illegal Characters detected!", array("Please, check your entered data.", "You Entered: $check", "Allowed is: $value", "Please, Correct your data."));



$date = date("d-m-y - H:i:s");

    $logfile = fopen("logs/log.php","a+");

    $logtext = "[$date] IP: [{$_SERVER['REMOTE_ADDR']}] - ::: Data['$check'] - Staff['{$_SESSION[UserID]}'] - AID['{$_SESSION[AID]}']\r\n";

    fputs($logfile, $logtext);

    fclose($logfile);





   header("Location: index.php");



        die();

}

        return( $value );

}



    function CheckIP()

    {

        $ip = getRealIpAddr();

        $query = mssql_query("SELECT * FROM IPBans WHERE IP = '$ip' AND Opened = 1");



        if( mssql_num_rows($query) != 0 )

        {



            SetMessage("Your IP: $ip is Banned!", array("The access to CTGunz Servers is forbidden!", "If you see that this Ban is a mistake/incorrect; Please contact an Administrator or post your request on the Forums."));

            header("Location: index.php");

die();

  }

} 





























?>

**Vusion** · 28-11-11

Code:

<?
@session_start();
function makepoststring($string) {
    if (strlen($string) > 17){
        return ucfirst(substr($string,0,17) . "...");
    }else{
        return ucfirst($string);
    }
}

function clean($value)
{
  $array = array("'", '"', ")", "(", ";", "<script>", "<meta");
  $value = str_replace($array, "", $value);
  return $value;
}

function mssql_query_logged($query)
{

    //$f = fopen("logs/Querylogs.txt", "a+");
    //fprintf($f, "%s (mod_%s.php) - [AID=%s] %s [%s] - %s\r\n", $_SERVER[PHP_SELF],$_GET['do'], $_SESSION['AID'],  date("d-m-y - H:i:S"), $_SERVER['REMOTE_ADDR'], $query);
    //fclose($f);

    return mssql_query($query);
}

function ChangeTitle($title) {
    echo "<script language='JavaScript'>
document.title='".$title."';
</script>";
}

function mTrim($cadena){
    return str_replace(" ","",$cadena);
   }

function ErrorBox($data) {
    return "                               <tr>
                                            <td width='434' colspan='2'>
                                            <div align='center'>
                                                <table border='1' width='90%' height='90%' style='border-collapse: collapse' bordercolor='#FF0000' bgcolor='#FF9191' class='errorbox'>
                                                    <tr>
                                                        <td>
                                                        <table border='0' width='100%' height='100%' style='border-collapse: collapse'>
                                                            <tr>
                                                                <td valign='bottom' width='434' colspan='2'>
                                                        <img border='0' src='images/icon_error.gif' width='16' height='17'>
                                                        <font size='1'><b>An error occurred!</b></font></td>
                                                            </tr>
                                                            <tr>
                                                                <td width='19'>&nbsp;</td>
                                                                <td width='434' valign='top'><b>$data</b></td>
                                                            </tr>
                                                        </table>
                                                        </td>
                                                    </tr>
                                                </table>
                                            </div>
                                            </td>
                                            <td width='8'>&nbsp;</td>
                                        </tr>
                                        <tr>
                                            <td width='145'>
                                            &nbsp;</td>
                                            <td width='289'>
                                            &nbsp;</td>
                                            <td width='8'>&nbsp;</td>
                                        </tr>";
}

function msgbox($text, $url){
echo "<body  bgcolor='#000000'><script>alert('$text');document.location = '$url'</script></body>"; 
}



function re_dir($url){
echo "<body  bgcolor='#000000'><script>document.location = '$url'</script></body>";

}

function MakePercent($Value, $Total)
{
    return ($Value * $Total) / 100;
}

function GetKDRatio($kills, $deaths)
{
    $total = $kills + $deaths;

    $percent = @round((100 * $kills) / $total, 2);

    if($kills == 0 && $deaths == 0)
    {
        return "0/0 (100%)";
    }else{
        return sprintf("%d/%d (%d%%)", $kills, $deaths, $percent);
    }
}

function GetCharNameByCID($cid)
{
    $ncid = clean($cid);
    $a = mssql_fetch_assoc(mssql_query("SELECT Name FROM Character(nolock) WHERE CID = '$ncid'"));
    return $a[Name];
}

function FormatCharName($cid)
{
    $ncid = clean($cid);
    $res = mssql_fetch_row(mssql_query("SELECT ac.UGradeID, ch.Name From Character(nolock) ch INNER JOIN Account ac ON ac.AID = ch.AID WHERE ch.CID = '$ncid'"));

    $name = $res[1];

    switch($res[0])
    {
        case 255:
            return "<font color='#FF8040'>$name</font>";
        break;
        case 254:
            return "<font color='#00FF00'>$name</font>";
        break;
        case 3:
            return "<font color='#00FFFF'>$name</font>";
        break;
        case 1:
            return "<font color='#CD0000'>$name</font>";
        break;
        case 2:
            return "<font color='#FF92BB'>$name</font>";
        break;
        default:
            return $name;
        break;
    }
}

function GetClanPercent($Wins, $Losses)
{
    $total = $Wins + $Losses;

    return ($total == 0) ? "0%" : round((100 * $Wins) / $total, 2) . "%";
}


//from google.com and edited by Demantor

function validateIpAddress($ip)
{
  
  if(preg_match("/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/",$ip))
  {
    
    $parts=explode(".",$ip);
    
    foreach($parts as $ip_parts)
    {
      if(intval($ip_parts)>255 || intval($ip_parts)<0)
      return false;
    }
    return $ip;
  }
  else
    return false;
}


function getRealIpAddr()
{
    if (!empty($_SERVER['HTTP_CLIENT_IP']))
    {
      $ip=$_SERVER['HTTP_CLIENT_IP'];
    }
    elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR']))
    {
      $ip=$_SERVER['HTTP_X_FORWARDED_FOR'];
    }
    else
    {
      $ip=$_SERVER['REMOTE_ADDR'];
    }
    return $ip;
}

function clean_news($value)
{
  $array = array("'", '"', ")", "(", ";", "<script>", "<meta");
  $value = str_replace($array, "", $value);
  return $value;
}

    function CheckIP()
    {
        $ip = getRealIpAddr();
        $query = mssql_query("SELECT * FROM IPBans WHERE IP = '$ip' AND Opened = 1");

        if( mssql_num_rows($query) != 0 )
        {

            SetMessage("Your IP: $ip is Banned!", array("The access to CTGunz Servers is forbidden!", "If you see that this Ban is a mistake/incorrect; Please contact an Administrator or post your request on the Forums."));
            header("Location: index.php");
die();
  }
} 
?>

I was too lazy to write my own anti-sql injection function, so, I used SuperWaffle's from his website BlizB.

Note: this anti-sql function is applied to all your website.

Enjoy.

Can someone add anti sql function to this?

Thread Tools

Search Thread

Can someone add anti sql function to this?

Re: Can someone add anti sql function to this?

Re: Can someone add anti sql function to this?

Re: Can someone add anti sql function to this?

Advertisement