Automatic VIP after calling

Seems someone finded out the php syntax mysql_query();

Quote:

---

But if someone finds the "really hard url" or some shares the url that they're redirected to.. then the hotels basically kinda stuffed? Free VIP to people who know? :S

---

It redirects you to fast for it. You can't even see the url.

Edit it and put in the redirect

print_r("I am now VIP, woohoo i have payed for Retro's, now i'm not smart.");

Hmm thats not good!

<?php
define('USERNAME_REQUIRED', TRUE);
define('ACCOUNT_REQUIRED', TRUE);
include('global.php');
include('config.php');
define("THIS_SCRIPT", 'vip');
$username = $core->EscapeString($_SESSION['username']);
$query = "UPDATE users SET vip='1' WHERE username = '".$_SESSION['username']."' ";
$query = "UPDATE users SET rank='2' WHERE username = '".$_SESSION['username']."' ";
mysql_query($query) or die (mysql_error());
?>

Fixed by Dylan "Dylz"

Quote:

---

Originally Posted by Nilenz

Hmm thats not good!

<?php
define('USERNAME_REQUIRED', TRUE);
define('ACCOUNT_REQUIRED', TRUE);
include('global.php');
include('config.php');
define("THIS_SCRIPT", 'vip');
$username = $core->EscapeString($_SESSION['username']);
$query = "UPDATE users SET vip='1' WHERE username = '".$_SESSION['username']."' ";
$query = "UPDATE users SET rank='2' WHERE username = '".$_SESSION['username']."' ";
mysql_query($query) or die (mysql_error());
?>

Fixed by Dylan "Dylz"

---

Lol Epic fail, You overruled the first query xD

Its working so fascinating.

Does this work with Desire Edit of UberCMS compatible with Phoenix?

A way to make this script better is so that it only works if its been accessed via a click from an external page/redirect from another website - this'd stop people just typing in "page.php" into their browser.

Quote:

---

Originally Posted by JohnHearfield

Does this work with Desire Edit of UberCMS compatible with Phoenix?

---

It works with everything.

Quote:

---

Originally Posted by Nilenz

Hmm thats not good!

<?php
define('USERNAME_REQUIRED', TRUE);
define('ACCOUNT_REQUIRED', TRUE);
include('global.php');
include('config.php');
define("THIS_SCRIPT", 'vip');
$username = $core->EscapeString($_SESSION['username']);
$query = "UPDATE users SET vip='1' WHERE username = '".$_SESSION['username']."' ";
$query = "UPDATE users SET rank='2' WHERE username = '".$_SESSION['username']."' ";
mysql_query($query) or die (mysql_error());
?>

Fixed by Dylan "Dylz"

---

No, you didnt do it right. How i did it was right, So don't try to make my shit better if you can't dylan.

Quote:

---

Originally Posted by donszeh

It works with everything.



No, you didnt do it right. How i did it was right, So don't try to make my shit better if you can't dylan.

---

Its not right, its simply if some one buys it and gives out the url its fucked, it should be with somekinda session tickets or so.

$username = $core->EscapeString($_SESSION['username']);
$query = "UPDATE users SET vip='1' WHERE username = '".$_SESSION['username']."' ";
$query = "UPDATE users SET rank='2' WHERE username = '".$_SESSION['username']."' ";

Why use $username = blabla when your just getting it from the session anyway? geez.

Quote:

---

Originally Posted by Shredinator

$username = $core->EscapeString($_SESSION['username']);
$query = "UPDATE users SET vip='1' WHERE username = '".$_SESSION['username']."' ";
$query = "UPDATE users SET rank='2' WHERE username = '".$_SESSION['username']."' ";

Why use $username = blabla when your just getting it from the session anyway? geez.

---

Just be happy it works. I'm using this and it works perfect.

Script really fails guys :L

Quote:

---

Originally Posted by donszeh

Just be happy it works. I'm using this and it works perfect.

---

Fuck if it works, it still sucks.

Quote:

---

Originally Posted by Shredinator

Fuck if it works, it still sucks.

---

True, for the next time , Fix everything and then release it.