sql injection protection on this package is not working but i managed to find and use the sql injection protection attached with the "simple registration web" also found here at RZ. made also some further modification on the package and adopted it myself for my website. well of course credits still goes to FragMu.
my site is btw, my server is up only between 9am and 1100pm HK time
explain
someone know what table or collumn i need to make this script work?
is a simple reset script!
ps: i think maybe need create or if created only run this script!
a column named lifecount
correct me if im wrong!
[CODE]<?php if (!isset($index_checking)) die("Server error!!! This page is not available..."); ?>
<table width="100%" height="5%" border="0.5">
<tr>
</tr>
<tr>
<th scope="col">
<?php
$name = stripslashes($_POST['name']);
$login = stripslashes($_COOKIE['login']);
anti_injection( $name );
anti_injection( $login );
$sql_username_check = mssql_query("SELECT memb___id FROM MEMB_INFO WHERE memb___id='$login'");
$username_check = mssql_num_rows($sql_username_check);
$sql_name_check = mssql_query("SELECT Class,Resets FROM vResets WHERE Name='$name' and AccountID = '$login'");
$name_check = mssql_num_rows($sql_name_check);
$row = mssql_fetch_row($sql_name_check);
$class_check = $row[0];
$mResets = $row[1];
if (empty($mResets)) $resets_check = 0;
else $resets_check = min(($Level_Reset + ($mResets * $Level_Up_Once)) , 350);
$sql_level_check = mssql_query("SELECT cLevel FROM Character WHERE Name = '$name' and cLevel >= '$resets_check'");
$level_check = mssql_num_rows($sql_level_check);
$sql_level_check = mssql_query("SELECT Money FROM Character WHERE Name = '$name' and Money >= '$Reset_Fee'");
$money_check = mssql_num_rows($sql_level_check);
$sql_user_online = mssql_query("SELECT memb___id FROM MEMB_STAT WHERE memb___id = '$login' and ConnectStat = '0'");
$user_online_check = mssql_num_rows($sql_user_online);
if (empty($name) || ($username_check <= 0) || ($name_check <= 0) || ($level_check <= 0) || ($money_check <= 0) || ($user_online_check <= 0))
{
echo "Erro: <br>";
if (empty($name))
{
echo "Nome incorreto.<br>";**
elseif ($username_check <= 0){
echo "Nome de usuario invalido.<br>"; **
elseif ($name_check <= 0){
echo "Tên nhân v
Create "Resets" collumn, type int.
P.S.:
It does not forget to mention the Class=64. :wink_4:else { //Dark Lord
$msquery = $msquery."
Strength = '28' ,
Dexterity = '20' ,
Vitality = '25' ,
Energy = '10' ,
Inventory = null ,
MagicList = null ,
Life = '110' ,
MaxLife = '110' ,
Mana = '20' ,
MaxMana = '20' ,
MapNumber = '0' ,
MapPosX = '182' ,
MapPosY = '128' ,
Pklevel = '3' ,
Mapdir = '1' "; **
Web page running in 99b+
I
[QUOTE=chrisph]Web page running in 99b+
I
How to fix this error?
Fatal error: Call to undefined function: mssql_connect() in D:\Apache\Apache2\htdocs\config.php on line 34
If your webserver doesn't understand the MSSQL database function you quite clearly didn't follow the setup guides, which state you should enable those functions by editing your php.ini file located in your windows directory.Originally Posted by !!Jin!!
I got it FragForg thanks..
But I need Reset with out reward only rewarded to there points
![[GR]SiLvER's Avatar](https://forum.ragezone.com/customavatars/avatar127235_2.gif "[GR]SiLvER's Avatar"){kind=avatar}
thanks i really need this :D
now where to put it and publish it :eh: ????
why not to do in the sub config files a INCLUDE function that inculde the main config file - it will save work.
FragFrog is right. if anyone of you is having problem with the scripts for web here. it usually boils down to the tables at SQL. in short, the first you must learn is how to navigate through SQL DB. as for me, i have costumized several functions for my own need, of course, by reviewing and studying the flow of script of the original files attached by FragFrog
You're right, but as you can see a lot of the original release is copy-past work, adjusted only slightly to get different pages / options. In fact, the whole website is basicly a collection of options and functions of which about only 70% I wrote myself, all sort of hunked together in a basic template. I'll be the first to admin its not a fairly beautifull way of coding, in fact it probably looks quite disgusting to a REAL php coder, but it all works more or less which is in the end the important thing (and I'm quoting Linus Torvald here who said the same thing about Linux :icon6: ). Feel free to adjust it yourself, I will do the same for the next release :)
Thanks for the support, though I think only half of the problems people are having is caused by missing / wrong SQL tables. The other half is probably because people don't know how to setup a webserver, get MSSQL instructions to work on that webserver and then still remember their SQL username / password :icon6:
I'm happy with the fact that you're using my release the way it was intended though: adjusting and rewriting parts of it as you saw fit. I tried writing the code as easy as possibly (mostly because I can't write hard code :icon6: ), since there is no such thing as a perfect website or perfect code and there are bound to be people with enough skills to improve my work :)
Last edited by FragFrog; 25-06-05 at 02:12 AM.
http://mu.efektor.gr/
Bug Ranking!!!
to takashiOk SImple Just FOllow Tis Guide Below by daemon_px
Ok guys, I'm doing this step by step, while I'm installing Appserv 2.4.0 (get it at Appserv ,this pack comes with Apache, PHP and MySQL.
In this guide I'm not using MySQL, as IO* PHP MU Web Center is designed to work with Microsoft SQL Server, and if people have trouble using it as it is, i wonder if I'd go around asking to change scripts.
Let's move on:
1. Installing Apache webserver & PHP Support:
Just follow on-screen instructions regarding where to Install, in the Setup Type, choose Custom.
Untick phpMyAdmin And MYSQL
Note: DUN UNTICK Apache and PHP.
Next, type in your server name: something like www.mydomain.com or just leave it as localhost.
If localhost is chosen, the webserver will work only locally.
Remember that you can't just come up with a servername, it has to be registered and working DNS.
You can get free DNS with "auto" update for dynamic IPs from http://www.no-ip.com or http://www.no-ip.com/ (I won't give any help on this, read the sites FAQ's).
Type in the server admin e-mail (probably it's your's), and the port where it sould be listening for conections. If possible, just leave it 80.
------------------- my config for this dialog ------------------------
server name: e-daemon.gotdns.org
server admin email: services.admin@e-daemon.gotdns.org
port: 80
----------------------------------------------------------------------------
Click next, and setup will finish.On the last dialog, let it start apache. No need to start MySQL, as it hasn't been installed.
Now, if you type your chosen server name (localhost or whatever) in your web browser, you'll get a wellcome page from AppServ.
- !!!!!!!!!!!!!!! Your webserver is now running !!!!!!!!!!!!!!!!!!
////////////////////////////////////**********************\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\
2. Configure PHP so it works with SQL (No more "Line 9 error")
I think this is where most people get in trouble, but that's just because they haven't read IO* readme that goes with the webpage files.
Let's open the php.ini file (it's in your windows dir - for me it's "C:\WINNT\php.ini" ). Use notepad to open it, disable word wrap, so you can check line numbers on the status bar.
*In line 576, where it reads
;extension=php_mssql.dll
take the leading ";"
Save the file, close, and restart Apache (If you haven't done it allready, bring up apache monitor - it's in your start menu\AppServ\Apache Control Server - it's easyer to stop/start apache this way).
Now you can extract the files from Website(FragFrog)New Package(Extract to C:appserv/www/here
3. Configure Webcenter and/or your SQL server so they work with each other
After extracting the files, let's open config.php in notepad.
===================In Config.PhP=================
<?php
//=========== FragFrog's MU WebCenter ===============
// Welcome to FrogMu's WebCenter, originally based on
// IO*'s files and editted and modified by FragFrog
//=========== FragFrog's Mu WebCenter ================
//============== USER EDITABLE AREA ===================
// Enter the username to connect to the db
$dbuser = "sa";
// Enter the password for the SQL Server
$dbpasswd = "";====>Change Tis to ur PassWord
//Admin Login
$alogin = ""; ===>U can use sa
//Admin Password
$apass = ""; ===>Change Tis to ur PassWord
========================================================
In Order to View it,It Should be as Example http://lala.no-ip.org/Website/
Change Lala.no-ip.org to ur dns name ^^ Ok after tis Done ^^
1)Open opties_reset.php And Change tis Lines
<center>
<a href='http://fragfrog.mine.nu/armor/reset.php'>ARMOR</a>
<a href='http://fragfrog.mine.nu/wing/reset.php'>WINGS</a>
<a href='http://fragfrog.mine.nu/weapon/reset.php'>WEAPON</a>
</center>
TO
<center>
<a href='http://youripaddress/armor/reset.php'>ARMOR</a>
<a href='http://youripaddress/wing/reset.php'>WINGS</a>
<a href='http://youripaddress/weapon/reset.php'>WEAPON</a>
</center>
2nd thing:Please copy config.php after u have edited it and paste in Weapon Folder,Wing Folder and Armour Folder which look like tis ===>Website\weapon,Website\wing,Website\armor
=========================================================
So I Should Look Like this
[U]Weapon Config.php[/U](C:\AppServ\www\Website\weapon)
// Enter the IP or DSN of the database server to connect to
// Change to your server IP (if remote only) works with DNS
$dbhost = "127.0.0.1";
// Enter the username to connect to the db
$dbuser = "sa";
// Enter the password for the SQL Server
$dbpasswd = "password";
//Admin Login
$alogin = "Admin";
//Admin Password
$apass = "password";
//Database Name
$db = 'MuOnline';
//Host. IP If working remotely
$host = '127.0.0.1';
$ip = "127.0.0.1";
$regsubmit = "regform.submit()";
$msconnect=mssql_connect("$host","$alogin","$apass");
$msdb=mssql_select_db("$db",$msconnect);
?>
-------------------------------------------------------------------------------------------------------
Armour Config.php(C:\AppServ\www\Website\armor)
// Enter the IP or DSN of the database server to connect to
// Change to your server IP (if remote only) works with DNS
$dbhost = "127.0.0.1";
// Enter the username to connect to the db
$dbuser = "sa";
// Enter the password for the SQL Server
$dbpasswd = "passwordhere";
//Admin Login
$alogin = "Admin";
//Admin Password
$apass = "passwordhere";
//Database Name
$db = 'MuOnline';
//Host. IP If working remotely
$host = '127.0.0.1';
$ip = "127.0.0.1";
$regsubmit = "regform.submit()";
$msconnect=mssql_connect("$host","$alogin","$apass");
$msdb=mssql_select_db("$db",$msconnect);
?>
==========================================================
Wing Config.php(C:\AppServ\www\Website\wing)
// Enter the IP or DSN of the database server to connect to
// Change to your server IP (if remote only) works with DNS
$dbhost = "127.0.0.1";
// Enter the username to connect to the db
$dbuser = "sa";
// Enter the password for the SQL Server
$dbpasswd = "passwordhere";
//Admin Login
$alogin = "Admin";
//Admin Password
$apass = "passwordhere";
//Database Name
$db = 'MuOnline';
//Host. IP If working remotely
$host = '127.0.0.1';
$ip = "127.0.0.1";
$regsubmit = "regform.submit()";
$msconnect=mssql_connect("$host","$alogin","$apass");
$msdb=mssql_select_db("$db",$msconnect);
?>
Forum Setup
If u wan simple forum go tis http://bb.hostaforumfree.com/new_forum.php
it easy and fast =)
=========================================================
All Credit Go to FragFroG
is it okay if i install phpmyadmin and mysql?
will it not create any conflict with my server?
i have windows 2003 enterprise and sql server 2000 with sp3 installed on my computer
phpmyadmin and mysql shouldn't interfere with MSSQL 2000 SP3, though there isn't really any reason to install them AFAIK. No problem if you do though :)
I have no idea what you mean or why you link to a russian bride website, but I have just finished work on a greatly improved ranking site which will be in my new release in a few days :)
