Well, I use a very good website gunz but the problem is they are using some kind of trick to add as many coins and want to know how to prevent this from no happening again.
Printable View
Well, I use a very good website gunz but the problem is they are using some kind of trick to add as many coins and want to know how to prevent this from no happening again.
Which release are you using?
I'm using gunz 1.5 and web called Project RED created by s00rk a certain something?.
I'm in situations of emergency, are adding more and more coins.
Add this dirty piece of code on top of your config file.
Consider finding someone who could find the exploit and fix it.PHP Code:<?php
if(count($_POST) > 0)
{
foreach($_POST as $key=>$value)
{
$_POST[$key] = str_replace(array("\x1a", "\x00", "\0", "'", '"', ";", "--", "/*"), "", $value);
}
}
if(count($_GET) > 0)
{
foreach($_GET as $key=>$value)
{
$_GET[$key] = str_replace(array("\x1a", "\x00", "\0", "'", '"', ";", "--", "/*"), "", $value);
}
}
?>
this should go where in the config.php?
After connecting to your database.
Example:
Correct?Code:<?php
if(count($_POST) > 0)
{
foreach($_POST as $key=>$value)
{
$_POST[$key] = str_replace(array("\x1a", "\x00", "\0", "'", '"', ";", "--", "/*"), "", $value);
}
}
if(count($_GET) > 0)
{
foreach($_GET as $key=>$value)
{
$_GET[$key] = str_replace(array("\x1a", "\x00", "\0", "'", '"', ";", "--", "/*"), "", $value);
}
}
@session_start();
$DBHost = '184.45.63.974';
$DBUser = 'gunz';
$DBPass = 'randonmama';
$DB = 'Gunzdatabase';
$r = mssql_connect($DBHost, $DBUser, $DBPass);
if(!$r)
{
die( mssql_error() );
}
mssql_select_db($DB,$r);
$_SESSION['correo'] = 'finalgunz@gmail.com';
$_SESSION['passcorreo'] = 'felizfeliz';
$_SESSION['nombregunz'] = 'FinalGunZ';
date_default_timezone_set("America/Mazatlan");
?>
Sr. SuperWaffle these is correct?
This in here I have not to modify it or something like that?.
$_POST[$key] = str_replace(array("\x1a", "\x00", "\0", "'", '"', ";", "--", "/*"), "", $value);
and
$_GET[$key] = str_replace(array("\x1a", "\x00", "\0", "'", '"', ";", "--", "/*"), "", $value);
replace this narb :
Spoiler: