MPOG is auto unbanning accounts

[alfredao]

Yes, in my Db has AccountBan.dbo.

I put this fixed script, but I need the Antisql function.

Fatal error: Call to undefined function antisql() in C:\AppServ\www\gunz\banneduser.php on line 6

------
Edit
------

I got antisql function and I thinks its working.

And, how can I fix this error?

It's on page top.

Strict Standards: date() [function.date]: It is not safe to rely on the system's timezone settings. Please use the date.timezone setting, the TZ environment variable or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/Sao_Paulo' for '-3.0/no DST' instead in C:\AppServ\www\gunz\banneduser.php on line 8

[Pauliinho]

<?php
//This file has been edited by Wizkid. All rights reserved.
//Fixed 2 exploits in this.
//Once again, a SESSION can be spoofed.
if($_SESSION['UGradeID'] == 253){
    $res = mssql_query("SELECT * FROM AccountBan WHERE AID = '" . antisql($_SESSION['AID']) . "' AND Opened = '1'");
    $data = mssql_fetch_assoc($res);
    $hoy = date("dmY");
    if($hoy >= $data['BanFinish']){
        //We remove the ban if it has expired
        mssql_query("UPDATE Account SET UGradeID = '0' WHERE AID = '" . antisql($_SESSION['AID']) . "'");
        mssql_query("UPDATE AccountBan SET Opened = '0' WHERE ABID = '".$data['ABID']."'");
        $_SESSION['UGradeID'] = 0;
        //Redirect to the index
        re_dir("index.php");
    }

TO

<?php
//This file has been edited by Wizkid. All rights reserved.
//Fixed 2 exploits in this.
//Once again, a SESSION can be spoofed.
if($_SESSION['UGradeID'] == 253){
    $res = mssql_query("SELECT * FROM AccountBan WHERE AID = '" . antisql($_SESSION['AID']) . "' AND Opened = '1'");
    $data = mssql_fetch_assoc($res);
    $hoy = date("dmY");
    if($hoy >= $data['BanFinish']){
        //We remove the ban if it has expired
        mssql_query("UPDATE Account SET UGradeID = '253' WHERE AID = '" . antisql($_SESSION['AID']) . "'");
        mssql_query("UPDATE AccountBan SET Opened = '253' WHERE ABID = '".$data['ABID']."'");
        $_SESSION['UGradeID'] = 0;
        //Redirect to the index
        re_dir("index.php");
    }

Change 0 to 253 :D

[alfredao]

<?php
//This file has been edited by Wizkid. All rights reserved.
//Fixed 2 exploits in this.
//Once again, a SESSION can be spoofed.
if($_SESSION['UGradeID'] == 253){
    $res = mssql_query("SELECT * FROM AccountBan WHERE AID = '" . antisql($_SESSION['AID']) . "' AND Opened = '1'");
    $data = mssql_fetch_assoc($res);
    $hoy = date("dmY");
    if($hoy >= $data['BanFinish']){
        //We remove the ban if it has expired
        mssql_query("UPDATE Account SET UGradeID = '0' WHERE AID = '" . antisql($_SESSION['AID']) . "'");
        mssql_query("UPDATE AccountBan SET Opened = '0' WHERE ABID = '".$data['ABID']."'");
        $_SESSION['UGradeID'] = 0;
        //Redirect to the index
        re_dir("index.php");
    }

TO

<?php
//This file has been edited by Wizkid. All rights reserved.
//Fixed 2 exploits in this.
//Once again, a SESSION can be spoofed.
if($_SESSION['UGradeID'] == 253){
    $res = mssql_query("SELECT * FROM AccountBan WHERE AID = '" . antisql($_SESSION['AID']) . "' AND Opened = '1'");
    $data = mssql_fetch_assoc($res);
    $hoy = date("dmY");
    if($hoy >= $data['BanFinish']){
        //We remove the ban if it has expired
        mssql_query("UPDATE Account SET UGradeID = '253' WHERE AID = '" . antisql($_SESSION['AID']) . "'");
        mssql_query("UPDATE AccountBan SET Opened = '253' WHERE ABID = '".$data['ABID']."'");
        $_SESSION['UGradeID'] = 0;
        //Redirect to the index
        re_dir("index.php");
    }

Change 0 to 253 :D

No, when ban date finish, the account will stay banned '-'

[frenchfatcat]

i prefer use free website host

thats why you fail.