php file for creating a token

[bennetcat]

Hi,
could someone please post a code for creating a random 25char long token?
Ty

[MentaL]

[Charisma Doll]

&createrandom25chartoken

[Black12]

<?php
$conf['db_host'] = ".\SQLEXPRESS";
$conf['db_user'] = "sa";
$conf['db_pass'] = "sapw";
$conf['db_name'] = "OdinAccount";

$user = sql_clean($_GET['Username']);
$passhash = sql_clean($_GET['Password']);


$con = mssql_connect($conf['db_host'],$conf['db_user'],$conf['db_pass']) or die('Database connect Fail.');
$db = mssql_select_db($conf['db_name'], $con) or die('Database Init Fail.');

$exec = mssql_query("SELECT nEMID, sUserPass FROM tAccounts where sUsername = '$user'");

if($exec)
{
    if(mssql_num_rows($exec) != 1)
    {
        die('Account Not Found.');
    }
    $AccountData = mssql_fetch_assoc($exec);
    $PlaintxtPass = $AccountData['sUserPass'];
    $PlaintxtnEMID = $AccountData['nEMID'];
    if (MD5($PlaintxtPass) == $passhash)
    {
        $Token = RandomToken(50);

        $setToken = null;

        if (mssql_num_rows(mssql_query("SELECT * FROM tTokens WHERE nEMID = '".$PlaintxtnEMID."'")) >= 1)
        {
            mssql_query("DELETE FROM tTokens WHERE nEMID = '".$PlaintxtnEMID."'");
            $setToken = mssql_query("INSERT INTO tTokens (nEMID, sToken) VALUES('".$PlaintxtnEMID."', '".$Token."')");
        }
        else
            $setToken = mssql_query("INSERT INTO tTokens (nEMID, sToken) VALUES('".$PlaintxtnEMID."', '".$Token."')");

        if ($setToken)
            die('OK#'.$Token);
        else
            die('SetToken Error');
    }
    else
    {
        die('Wrong Password.');
    }
}
else
{
    die('Query Failed');
}

mssql_close();

function sql_clean($str)
{
    $search  = array("\\", "\0", "\n", "\r", "\x1a", "'", '"');
    $replace = array("", "", "", "", "", "", "");
    return str_replace($search, $replace, $str);
}

function RandomToken( $length )
{
    $chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
        $str = "";
    $size = strlen( $chars );
    for( $i = 0; $i < $length; $i++ ) {
        $str .= $chars[ rand( 0, $size - 1 ) ];
    }

    return $str;
}
?>

[xWhiteCore]

<?php
$conf['db_host'] = ".\SQLEXPRESS";
$conf['db_user'] = "sa";
$conf['db_pass'] = "sapw";
$conf['db_name'] = "OdinAccount";

$user = sql_clean($_GET['Username']);
$passhash = sql_clean($_GET['Password']);


$con = mssql_connect($conf['db_host'],$conf['db_user'],$conf['db_pass']) or die('Database connect Fail.');
$db = mssql_select_db($conf['db_name'], $con) or die('Database Init Fail.');

$exec = mssql_query("SELECT nEMID, sUserPass FROM tAccounts where sUsername = '$user'");

if($exec)
{
    if(mssql_num_rows($exec) != 1)
    {
        die('Account Not Found.');
    }
    $AccountData = mssql_fetch_assoc($exec);
    $PlaintxtPass = $AccountData['sUserPass'];
    $PlaintxtnEMID = $AccountData['nEMID'];
    if (MD5($PlaintxtPass) == $passhash)
    {
        $Token = RandomToken(50);

        $setToken = null;

        if (mssql_num_rows(mssql_query("SELECT * FROM tTokens WHERE nEMID = '".$PlaintxtnEMID."'")) >= 1)
        {
            mssql_query("DELETE FROM tTokens WHERE nEMID = '".$PlaintxtnEMID."'");
            $setToken = mssql_query("INSERT INTO tTokens (nEMID, sToken) VALUES('".$PlaintxtnEMID."', '".$Token."')");
        }
        else
            $setToken = mssql_query("INSERT INTO tTokens (nEMID, sToken) VALUES('".$PlaintxtnEMID."', '".$Token."')");

        if ($setToken)
            die('OK#'.$Token);
        else
            die('SetToken Error');
    }
    else
    {
        die('Wrong Password.');
    }
}
else
{
    die('Query Failed');
}

mssql_close();

function sql_clean($str)
{
    $search  = array("\\", "\0", "\n", "\r", "\x1a", "'", '"');
    $replace = array("", "", "", "", "", "", "");
    return str_replace($search, $replace, $str);
}

function RandomToken( $length )
{
    $chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
        $str = "";
    $size = strlen( $chars );
    for( $i = 0; $i < $length; $i++ ) {
        $str .= $chars[ rand( 0, $size - 1 ) ];
    }

    return $str;
}
?>

From iStu....

[Myth]

Id laugh if Stu left a little surprise in his OdinRest, then a few months later he just buttfucks every server using his REST.

Has anyone re-done their REST instead of using the Odin one? Or is this an Odin section now?

[Cyndaquil]

Odin section.

[Crystalz]

Id laugh if Stu left a little surprise in his OdinRest, then a few months later he just buttfucks every server using his REST.

Has anyone re-done their REST instead of using the Odin one? Or is this an Odin section now?

Nah I know a guy who remade it.

[Gruntilda]

Id laugh if Stu left a little surprise in his OdinRest, then a few months later he just buttfucks every server using his REST.

Has anyone re-done their REST instead of using the Odin one? Or is this an Odin section now?

Using any program out there, you could just listen an see that it only has one open tcp connection, and that should be on 127.0.0.1:80. So unless I invented a way to connect to everyone's localhost, you sir, are an idiot.

Nah I know a guy who remade it.

Goodbye item mall bag.

[Crystalz]

Goodbye item mall bag.

Actually item mall bag works.

[Gruntilda]

We'll see c:

[Kreain]

Using any program out there, you could just listen an see that it only has one open tcp connection, and that should be on 127.0.0.1:80. So unless I invented a way to connect to everyone's localhost, you sir, are an idiot.

Not if a token would cause it from the inside...

[Gruntilda]

Never even that of that...hey look you finally had a good idea.

[Myth]

Using any program out there, you could just listen an see that it only has one open tcp connection, and that should be on 127.0.0.1:80. So unless I invented a way to connect to everyone's localhost, you sir, are an idiot.

"Id laugh" is common to suggest something sarcastic, in a sense that the chances of it happening are slimmer than that of the gap between your ass cheeks.. but its cool, a person who quit still has the attitude of a full-blown developer, seems your Fiesta-ego still didn't die yet, 4lyfe reppin'.

[Gruntilda]

I'd laugh if you learned how to dev anything.

Am I doing it right?

[Myth]

Guess your salty-ass is full of laughter then.

[ThePunisher]

I was beginning to wonder if this section's 'reputation' had vanished but never mind.