- Joined
- Oct 12, 2008
- Messages
- 134
- Reaction score
- 49
jesss, read PM
$email=trim($_POST['email']);
$result=mssql_query("SELECT mail_addr FROM MEMB_INFO WHERE mail_addr='$email'");
PHP:$email=trim($_POST['email']); $result=mssql_query("SELECT mail_addr FROM MEMB_INFO WHERE mail_addr='$email'");
1. no filter = easily droped database
2. eregi is not binary safe
3. dude plz learn switch()![]()
:mellow: :thumbdown: ...go up and drop all mu db witch use this website...success!RewriteEngine On
RewriteBase /
ErrorDocument 403 /error.php
ErrorDocument 404 /error.php
RewriteRule ^Image-verify/?$ ./image.php
<?php
/* I'm not responsible for any damage of your server if you don't buy this site */
$connect['IP'] = "127.0.0.1"; // server IP
$connect['login'] = "MuOnlineAdmin"; // server login
$connect['pass'] = "wkfwkRnfRnf"; // server password
$connect['database'] = "MuOnline"; // database name
$_SERVER['ROOT_FOLDER'] = "/4.4"; // Web Site root folder start with '/' symbol. Ex: /enemy
$show_error = 1; // report errors in code 1 - on, 0 - off
$enemy['title'] = "ENEMY MU WEB::"; // web title
$enemy['template'] = "enemy"; // template name (default: enemy)
$enemy['meta_d'] = "The Best Mu Online Web Site in the world :). Multifunctional, Antihack 100%"; // Meta Description
$enemy['meta_k'] = "Mu, Fun, Moldova, Server, Online, Enemy, Web, MMORPG, Web Site, Template, Best"; // Meta Keywords
$enemy['md5'] = 1; // MD5 1 - on, 0 - off
$enemy['support'] = "[email protected]"; // Support Email
$enemy['language'] = "en"; // default site language. suport en|ru|ro
$enemy["allow_char"] = "]a-z0-9^*()_+=~{}/\[-"; // symbols wich are allowed to use in characters nickname (eregi function, if you dont know how to arrange symbols dont change this)
$enemy['top10'] = 1; // Show Top10 Panel: 1 - on / 0 - off
$enemy['banner_panel'] = 0; // Show Baners Panel: 1 - on / 0 - off
$enemy['friends_panel'] = 0; // Show Our Friends Panel: 1 - on / 0 - off
$enemy['advices'] = 1; // Show Advices Panel: 1 - on / 0 - off
$enemy['chat'] = 1; // Show Chat Panel: 1 - on / 0 - off
/* !@#$%^&*()_+|=-`~[]{}.,?><;:/ */
$enemy['languages'] = "ru,ro,en"; // Site languages.
$enemy['GMs'] = "GrInYa"; // GM accounts separate by comma (,)
$enemy['Admins'] = "GrInYa,test"; // admin accounts separate by comma (,)
$enemy['LogAdmins'] = "GrInYa"; // admin accounts who can delete site logs, separate by comma (,)
$register['email_activate'] = 0; // Need Activate Account: 1- ON , 0 - OFF
$register['email_subject'] = "Enemy Mu Web Account Activation";
$register['email_servername'] = "Enemy Mu Web";
$server['birthday'] = 12; // server birthday (number format)
$server['birthmonth'] = 11; // server birthmounth (number format)
$server['birthyear'] = 2009; // server birthyear (number format)
$server['birthhour'] = 10; // server birthhour (number format)
$server['birthminutes'] = 40; // server birthminutes (number format)
$server['birthsecundes'] = 00; // server birthsecundes (number format)
$server['Season4Master'] = 0; // Season 4 Master Level Show 1/0
$server['Season4mlvl'] = "MASTER_LEVEL"; // Column name of master level. Default: MasterLevel
$server['Season4mskill'] = "MagicList"; // Column name of master Skills. Default: MasterSkills
$server['Season4mpoints'] = "ML_POINT"; // Column name of master Points. Default: MasterPoints
$server['Season4mlvlt'] = "T_SkillTree_Info"; // Table name of master level. if table name is MEMB_INFO leave this NULL
$server['Season4mlvlw'] = "CHAR_NAME"; // Column name of character in table. if table name is MEMB_INFO leave this NULL
$server['version'] = "Season 3"; // mu server version
$server['drop'] = "80%"; // server drop
$server['experience'] = "5x"; // server experience
$server['max_lvl'] = "400"; // maxim level
$server['reset'] = "Off"; // reset system on/off
$advice['timeout'] = 7000; // Advice Time Out until change; 1 sec = 1000
$forum['count_th_per_pg'] = 10; // Count of threads per page
$forum['count_post_per_pg'] = 5; // Count of posts per page
$profile['max_kib_avatar'] = 60000; // Max KiB per avatar.
$profile['max_width_avatar'] = 100; // Max width size avatar.
$profile['max_height_avatar'] = 120; // Max height size avatar.
$profile['min_width_avatar'] = 50; // Min width size avatar.
$profile['min_height_avatar'] = 50; // Min height size avatar.
$top['hide_gm'] = 1; // hide gm's on top 1 - on, 0 - off
$top['hide_banned'] = 1; // hide banned nick's on top 1 - on, 0 - off
$top['hide_nicks'] = ""; // hide nick's on tops
$Limit['forum_add_post'] = 8000; // Maximum length of message on forum.
$Limit['news_post'] = 8000; // Maximum length of message on forum.
$Limit['signature'] = 1024; // Maximum length of message on forum.
$Limit['max_str'] = 32767; // Maximumum character stats.
$Limit['max_agg'] = 32767; // Maximumum character stats.
$Limit['max_vit'] = 32767; // Maximumum character stats.
$Limit['max_eng'] = 32767; // Maximumum character stats.
$Limit['max_comm'] = 32767; // Maximumum character stats.
$reset_column = "resets"; // Type the resets column name
$Option['is_resets'] = 1; // Show Character Resets
$Option['reset_stats'] = 50; // Credits for Reset stats
$Option['boughtpprr'] = 1; // Add Bought points for credits after reset 1 - ON, 0 - OFF
$Option['boughtppgr'] = 1; // Add Bought points for credits after grand reset 1 - ON, 0 - OFF
$Option['reset_stats_type'] = 1; // Clear stats after reset 1 - ON, 0 - OFF
$Option['reset_class'] = 1; // Reset the character class status 1 - ON, 0 - OFF
$Option['clear_skill'] = 1; // Clear magic list after reset 1 - ON, 0 - OFF
$Option['clear_inv'] = 1; // Clear Inventory after reset 1 - ON, 0 - OFF
$Option['reset_dk'] = 300; // Stats after reset for DK
$Option['reset_dw'] = 300; // Stats after reset for DW
$Option['reset_elf'] = 300; // Stats after reset for ELF
$Option['reset_mg'] = 300; // Stats after reset for MG
$Option['reset_dl'] = 300; // Stats after reset for DL
$Option['reset_sum'] = 300; // Stats after reset for SUM
$Option['clear_pk'] = 1; // Credits for clear 1 pk
$Option['rename'] = 200; // Rename Character
$Option['news_pg'] = 5; // News per page
$Option['topc_pg'] = 50; // Top characters per page
$Option['reset_level'] = 400; // Level for reset
$Option['zen_per_reset'] = 1000000; // Zen for 1 reset
$items['db_type'] = 2; // Database Type: 1 - Old Codification(0.99.0X - 0.99.6X) , 2 - New Codification (0.99.8X - Season 6)
$vip['week'] = 20; // Credits for buying vip statur for a week
$viptime['week'] = 604800; // Credits for buying vip statur for a week
$vip['month'] = 32; // Credits for buying vip statur for a month
$viptime['month'] = 2592000; // Credits for buying vip statur for a month
$vip['threemonths'] = 90; // Credits for buying vip statur for three months
$viptime['threemonths'] = 7776000; // Credits for buying vip statur for three months
$GameServer['check'] = 1; // Check game servers
$GameServer['count'] = 2; // Count of game servers
//If you want to add a new server just add +1 count value at $GameServer['count'] and add a new values like next values
$GameServer['host'][1] = '195.177.64.43'; // Connect Server's IP/host
$GameServer['port'][1] = '55901'; // Connect Server's Port
$GameServer['Name'][1] = 'Underworld'; // Server Name
$GameServer['GSName'][1] = '1'; // Game Server Server Name (in database)
$GameServer['maxuser'][1] = 200; // Game Server Server Name (in database)
$GameServer['xp'][1] = "300"; // Game Server Server Name (in database)
$GameServer['drop'][1] = "80%"; // Game Server Server Name (in database)
$GameServer['host'][2] = '195.177.64.43'; // Connect Server's IP/host
$GameServer['port'][2] = '55919'; // Connect Server's Port
$GameServer['Name'][2] = 'Castle Siege'; // Server Name
$GameServer['GSName'][2] = '2'; // Game Server Server Name (in database)
$GameServer['maxuser'][2] = 200; // Game Server Server Name (in database)
$GameServer['xp'][2] = "300"; // Game Server Server Name (in database)
$GameServer['drop'][2] = 90; // Game Server Server Name (in database)
$chat['maxlines'] = 50;
$chat['waittime_sec'] = 5; /* Set this to a minimum wait time between posts (in sec) */
$chat['maxsmslength'] = 200; /* Set this to a minimum wait time between posts (in sec) */
//next values are x/1 (or (x*100)percents(%) from nulled item price)
/*
Example:
Nulled Explosion Blade Price : 20 kr.
Per level : 0.015 (item +13 = 5.655) (Fibonaci numbers)
Per option : 0.075 (item +28add = 1.575) (Fibonaci numbers)
Skill : 1
Luck : 1
Item with 2 exe options : 2.5 for first exe option and 2.5*1.5 or 3.75 for second exe option
Total Explosion Blade + 13 + 28add + skill + luck + exedmg + level/20 Price:
20cr + 20cr * 5.655 + 20cr * 1.575 + 20cr * 1 + 20cr * 1 + 20cr * 2.5 + 20cr * 3.75 =
20 + 113.1 + 20 + 20 + 31.5 + 50 + 75 = 329.6 credits
*/
$WebShop['kr_per_level'] = 0.015; // Value for item level, From 1 to 13 are Fibonaci numbers, for example: 1,2,3,5,8,13,21,34,55,89,114,...
$WebShop['kr_per_option'] = 0.075; // Value for item additional option, From 1 to 7 are Fibonaci numbers,for example: 1,2,3,5,8,13,21,34,55,89,114,...
$WebShop['item_skill'] = 1; // Value for Item with skill
$WebShop['item_luck'] = 1; // Value for Item with luck
$WebShop['ancient1'] = 4; // ancient item +5 Increase value
$WebShop['ancient2'] = 5; // ancient item +10 Increase value
$WebShop['exe_option'] = 2.5; // one exe option value
$WebShop['exe_option_inc'] = 1.5; // next exe option value increase ($WebShop['exe_option']*$WebShop['exe_option_inc'])
$WebShop['socket_option'] = 3.5; // one socket option value
$WebShop['socket_option_inc'] = 2; // next socket option value increase ($WebShop['socket_option']*$WebShop['socket_option_inc'])
// end
$WebShop['socket_slot'] = 30; // Socket Item Slot Price
$WebShop['refinery_price'] = 55; // Refinery Level 380 Option Price
$WebShop['harmony_price'] = 20; // Harmony Option Price
$WebShop['fenrir_destroy'] = 100; // fenrir+destroy price
$WebShop['fenrir_protect'] = 150; // fenrir+protect price
$WebShop['golden_fenrir'] = 200; // golden fenrir price
$WebShop['max_level'] = 13; // max level for items (default 13)
$WebShop['kr_per_point'] = 2; // one point level price
$WebShop['change_class'] = 200; // to change class price
$WebShop['zen_for_kr'] = 200000; // zen for 1 credit.
$WebShop['show_zero'] = 0; // To see in webshop items who cost 0 credits: 1-on/0-off
$WebShop['reduce'] = 1; // To reduce price of items to x (0.1 = 10%, 0.5 = 50% 1 = 100% 2 = 200%)
if ($items['db_type'] == 1)
{
$_SERVER['itemlenght'] = 20;
$_SERVER['varbinary'] = 1200;
$_SERVER['itemnull'] = "FFFFFFFFFFFFFFFFFFFF";
}
elseif ($items['db_type'] == 2)
{
$_SERVER['itemlenght'] = 32;
$_SERVER['varbinary'] = 1920;
$_SERVER['itemnull'] = "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF";
}
?>
wtf man? will you learn me?:mellow: :thumbdown: ...go up and drop all mu db witch use this website...success!
![]()
if(function_exists('get_magic_quotes_gpc') && get_magic_quotes_gpc()) {
$_GET = array_map('stripslashes', $_GET);
$_POST = array_map('stripslashes', $_POST);
$_COOKIE = array_map('stripslashes', $_COOKIE);
}
He's right though, you're relying on PHP's magic quotes features, which is now disabled by default under PHP 5.3.2+ and which will be removed as soon as PHP 6 is out. When it will, your website won't be secure at all and one small quote will make it bug. Ereg(i)() is not binary safe and is deprecated, turning off error reporting is the "easy way out" if you see what i mean. I won't even mention the backdoor you put in in the first place.
PHP:if(function_exists('get_magic_quotes_gpc') && get_magic_quotes_gpc()) { $_GET = array_map('stripslashes', $_GET); $_POST = array_map('stripslashes', $_POST); $_COOKIE = array_map('stripslashes', $_COOKIE); }
show off newbie...ok?
PS: i know that eregi function is deprecated...and the lattest versionof emw is using preg_match function...but about your magi_quotes...better will be if you will stay quite...because your confirmation are a big ****...maybe you will stop writting stupid confirmations and will look around my website better?
}
else
{
$password = $password;
}
if ($ip_not_allow == true)
{