Unbugged MPOG Web.

nice one :P

Quote:

---

Originally Posted by Wizkidje

Yeah, I've fixed a lot of exploits in it.
For the username/password check use the following code (Copied from the GunZ CMS I'm working on):

PHP Code:

---

//Let's have a look at the SESSIONS and kill some people if needed.
//Note that this is extra secutity.
if (isset($_SESSION['UserID']) || isset($_SESSION['Password']))
{
$query = odbc_exec($connect,"SELECT AID FROM Login WHERE UserID = '" . antisql($_SESSION['UserID']) . "' AND Password = '" . antisql($_SESSION['Password']) . "'");
$count = num_rows($query);

//If some weird guy got a SESSION spoofed.
if ($count == 0)
{
    session_destroy();
    gtfo("That was funny. Sessions cleared though <3.");
}    
} 


---

---

Where is this O.o?

help shop eoor?

-(_)- ----------> Shop

I'm with the problem of fatal error that is too error is not SQL?me

Fatal error: Call to undefined function mssql_connect() in C:\AppServ\www\site2\config.php on line 2

hey guys ... i get this error .. i just cant w8to use this tool ..... but my bad sm error...

Any one got solution to this... ?

Quote:

---

Originally Posted by kochon

i got it working using appserv :)

---

Hey,,,,kochon.. i gewt same error with appserv too...
"Fatal error: Call to undefined function mssql_connect() in C:\AppServ\www\English MPOG\config.php on line 2" can u please tell me the solution which worked for u ..

ThanX in advance

ny one else got solution for this..

@Torrentspy: Unless you edit it yourself.
@Brazil-Paulinho: In your face lol. >.>
@ygoraugusto: Search in this thread.
@hednylsinop: wesman2232's fix thread.
@westernbees: Don't quadruple post. There's an edit button for a reason. Search around this thread.

@Linear88 edited my post :P
eurogunz web is much better, but it is stoolen so don't use it even it is pro

Quote:

---

Originally Posted by Linear88

@Brazil-Paulinho: In your face lol. >.>

---

When I add Item in ma Shop it doesnt appear in shop...wtf btw i searched all the thread and related trhread but can find the Solution help ma..

OK so i got the website working, but I have a few Notice errors that i need help with.. Well quite a few acctually...

They are covering almost every page (They are not all the same notices)

on the index page for example these are showing

Notice: Undefined index: expand in C:\wamp\www\English MPOG\English MPOG\index.php on line 46


Notice: Undefined index: UGradeID in C:\wamp\www\English MPOG\English MPOG\index.php on line 59

Notice: Undefined index: UGradeID in C:\wamp\www\English MPOG\English MPOG\index.php on line 59

Notice: Undefined index: AID in C:\wamp\www\English MPOG\English MPOG\mod_iLogin.php on line 2

Notice: Undefined index: do in C:\wamp\www\English MPOG\English MPOG\title.php on line 2

Notice: Undefined index: sub in C:\wamp\www\English MPOG\English MPOG\title.php on line 31

Notice: Undefined index: action in C:\wamp\www\English MPOG\English MPOG\title.php on line 67

Notice: Undefined index: act in C:\wamp\www\English MPOG\English MPOG\title.php on line 76

Notice: Undefined index: header in C:\wamp\www\English MPOG\English MPOG\index.php on line 6

Notice: Undefined index: UGradeID in C:\wamp\www\English MPOG\English MPOG\banneduser.php on line 5

Notice: Undefined index: MPOGLogin_usr in C:\wamp\www\English MPOG\English MPOG\checkcookie.php on line 3


Any help would be appreciated.

Ty Wizkid My Website Is Fixed But The Item's Shop Still Not Work lol !

Quote:

---

Originally Posted by Shockdot1

OK so i got the website working, but I have a few Notice errors that i need help with.. Well quite a few acctually...

They are covering almost every page (They are not all the same notices)

on the index page for example these are showing

Notice: Undefined index: expand in C:\wamp\www\English MPOG\English MPOG\index.php on line 46


Notice: Undefined index: UGradeID in C:\wamp\www\English MPOG\English MPOG\index.php on line 59

Notice: Undefined index: UGradeID in C:\wamp\www\English MPOG\English MPOG\index.php on line 59

Notice: Undefined index: AID in C:\wamp\www\English MPOG\English MPOG\mod_iLogin.php on line 2

Notice: Undefined index: do in C:\wamp\www\English MPOG\English MPOG\title.php on line 2

Notice: Undefined index: sub in C:\wamp\www\English MPOG\English MPOG\title.php on line 31

Notice: Undefined index: action in C:\wamp\www\English MPOG\English MPOG\title.php on line 67

Notice: Undefined index: act in C:\wamp\www\English MPOG\English MPOG\title.php on line 76

Notice: Undefined index: header in C:\wamp\www\English MPOG\English MPOG\index.php on line 6

Notice: Undefined index: UGradeID in C:\wamp\www\English MPOG\English MPOG\banneduser.php on line 5

Notice: Undefined index: MPOGLogin_usr in C:\wamp\www\English MPOG\English MPOG\checkcookie.php on line 3


Any help would be appreciated.

---

cant remember what it was but you go to php.ini and set something like show_errors to Off

Quote:

---

Originally Posted by wesman2232

cant remember what it was but you go to php.ini and set something like show_errors to Off

---

Ya, i found it yesterday was under PHP settings it was called "display errors"

My website is nearly 100% working... Now I am just trying to figure out why the Individual Ranking page does not load... I beleive that is the only bug/error left...

Show us a screenshot and the code.

Quote:

---

Originally Posted by Projectix

In edit account, if you change the password it changes for all rows in your database lol..Well, that happened to me.

---

Quote:

---

Originally Posted by Projectix

Hey Wizkid.. Know what I gotta fix to make it so the "Change Password" doesnt change for every row in my DB?! -.-

---

im havin this prob, can som1 post a fix for it?

There is a Fix for it, Use the Search button. =]

Quote:

---

Originally Posted by Projectix

There is a Fix for it, Use the Search button. =]

---

i already did tat :|

Code:

---

$hash = rand(10000,60000);
$hash = md5($hash);

---

Sigh..you do realize PHP auto-generates a proper session to be given?

In fact, why not just use the REAL random function, with time as a seed?

Code:

---

$hash = sha1 ( srand(floor(time() / (60*60*24))) );

---

SHA1 (40 characters) with the real random function is a much better solution than pseudo-random and and MD5..

it doesn't matter anyway the code doesn't work.
That is from mod_startscript.php which is supposed to start the gunz launcher. I don't think it ever worked though.

so wat do i nid to do guys?

I like to Bump ^_^

This isnt totally Unbugged...still w8ing For 1...hmmm

bah....can any one get a proper fix for add item/gif coin bugs ?

gosh stop bumping threads
Request close

so these scripts are working ?

yes it works

mod_itemshop , mod_gift , mod_additem Fixed ?

Quote:

---

Originally Posted by Azet

This isnt totally Unbugged...still w8ing For 1...hmmm

---

It's still exploitable.

And basic SQL injections work. Don' use this lol.

well then can you provide a working one?

Could you reupload please?

There you go:

http://www.megaupload.com/?d=KZCYIS8H

Sigh im getting MSSQL error while i got all my info good.

Someone can help me over msn?

Thanks for reupload <3

EDIT: Evrything works exept for itemshop , i get this.

Code:

---

Warning: mssql_query () [function.mssql-query]: message: Column name lock is invalid. (Severity 16) in C: xampphtdocsEnglish MPOG\mod_itemshop.php on line 25

 Warning: mssql_query () [function.mssql-query]: Query failed in C: xampphtdocsEnglish MPOG\mod_itemshop.php on line 25


 Warning: mssql_fetch_assoc () expect parameter 1 to be resource, boolean Given in C: xampphtdocsEnglish MPOG\mod_itemshop.php on line 72

---