Hi
Ich musste meinen MSQl Server neu machen aber nun geht die rei seite nicht mehr die daten habe ich alle wieder eingetragen ich bin verzweifelt ich habe nun 7 STK ausprobiert und sie gehen alle nicht
Wiest ihr den fehler den ich mache ich lase ihn nur über Apache laufen sie hatte mal funktioniert ka warum
diese funktioniert nicht und diese auch nicht
ich hoffe ihr könnt mir helfen
Ich musste meinen MSQl Server neu machen aber nun geht die rei seite nicht mehr die daten habe ich alle wieder eingetragen ich bin verzweifelt ich habe nun 7 STK ausprobiert und sie gehen alle nicht
Wiest ihr den fehler den ich mache ich lase ihn nur über Apache laufen sie hatte mal funktioniert ka warum
HTML Code:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <meta name="robots" content="INDEX,FOLLOW"> <meta name="keywords" content="FightForShinobi"> <meta name="description" content="FightForShinobi" > <title>FightForShinobi</title> <link rel="stylesheet" href="format.css" type="text/css"> </head> <body > <div align="center"> <table align="center" id="main" cellspacing="0" cellpadding="0" border="0" > <tr> <td align="center" > <table align="center" id="main_top" cellspacing="0" cellpadding="0" border="0" > <tr> <td> <table align="center" cellspacing="0" cellpadding="0" border="0" > <tr> <td id="top"> <!-- menü GANZ oben--> <!-- ende menü GANZ oben--></td> </tr> <td align="right" id="top1" > </td> <br> <br> <br> <br> <br> <br> <br> <td align="center" id="top2" > <table width="899" align="center" id="menuhorizontal" border="0" cellpadding="0" cellspacing="0" > <tr> <td width="10%"><a href="http://fightforshinobi.co.de/index.php" >News</a></td> <td width="10%"><a href="http://5.135.101.171/register.php" >Register</a></td> <td width="10%"><a href="http://5.135.101.171/ranking.php" >Ranking</a></td> <td width="10%"><a href="http://fightforshinobi.co.de/team.php" >Team</a></td> </tr> </table> </td> </tr> <br> <!-- ende boxen inhalt--></td> <td valign="top" id="inbox"> <br> <h1>Register</h1> <center> <h 1>bitte alles klein schreiben</h1><br><br> </center> <?php $ip = $_SERVER['REMOTE_ADDR']; $time = date; $script = $_SERVER[PATH_TRANSLATED]; $fp = fopen ("[WEB]SQL_Injection.txt", "a+"); $sql_inject_1 = array(";","'","%",'"'); #Whoth need replace $sql_inject_2 = array("", "","","""); #To wont replace $GET_KEY = array_keys($_GET); #array keys from $_GET $POST_KEY = array_keys($_POST); #array keys from $_POST $COOKIE_KEY = array_keys($_COOKIE); #array keys from $_COOKIE /*begin clear $_GET */ for($i=0;$i<count($GET_KEY);$i++) { $real_get[$i] = $_GET[$GET_KEY[$i]]; $_GET[$GET_KEY[$i]] = str_replace($sql_inject_1, $sql_inject_2, HtmlSpecialChars($_GET[$GET_KEY[$i]])); if($real_get[$i] != $_GET[$GET_KEY[$i]]) { fwrite ($fp, "IP: $ip\r\n"); fwrite ($fp, "Method: GET\r\n"); fwrite ($fp, "Value: $real_get[$i]\r\n"); fwrite ($fp, "Script: $script\r\n"); fwrite ($fp, "Time: $time\r\n"); fwrite ($fp, "==================================\r\n"); } } /*end clear $_GET */ /*begin clear $_POST */ for($i=0;$i<count($POST_KEY);$i++) { $real_post[$i] = $_POST[$POST_KEY[$i]]; $_POST[$POST_KEY[$i]] = str_replace($sql_inject_1, $sql_inject_2, HtmlSpecialChars($_POST[$POST_KEY[$i]])); if($real_post[$i] != $_POST[$POST_KEY[$i]]) { fwrite ($fp, "IP: $ip\r\n"); fwrite ($fp, "Method: POST\r\n"); fwrite ($fp, "Value: $real_post[$i]\r\n"); fwrite ($fp, "Script: $script\r\n"); fwrite ($fp, "Time: $time\r\n"); fwrite ($fp, "==================================\r\n"); } } /*end clear $_POST */ /*begin clear $_COOKIE */ for($i=0;$i<count($COOKIE_KEY);$i++) { $real_cookie[$i] = $_COOKIE[$COOKIE_KEY[$i]]; $_COOKIE[$COOKIE_KEY[$i]] = str_replace($sql_inject_1, $sql_inject_2, HtmlSpecialChars($_COOKIE[$COOKIE_KEY[$i]])); if($real_cookie[$i] != $_COOKIE[$COOKIE_KEY[$i]]) { fwrite ($fp, "IP: $ip\r\n"); fwrite ($fp, "Method: COOKIE\r\n"); fwrite ($fp, "Value: $real_cookie[$i]\r\n"); fwrite ($fp, "Script: $script\r\n"); fwrite ($fp, "Time: $time\r\n"); fwrite ($fp, "==================================\r\n"); } } /*end clear $_COOKIE */ fclose ($fp); ?> <?php ini_set('display_errors', 0); $connection = mssql_connect('MATTHIAS-PC\SQLEXPRESS', 'sa', 'msql ps '); if(!connection || !mssql_select_db('ACCOUNT_DBF', $connection)) { die('Konnte keine verbindung zum MSSQL Server herstellen'); } function resafe($key){ $s = array("\x00", "\n", "\r", "\\", "'", "\"", "\x1a", "\"'\"", "'\"'"); return str_replace($s, "", $key); } function __construct(){ if($_SERVER['REQUEST_METHOD'] == 'GET'){ $_GET = array_map(array(&$this, 'resafe'), $_GET); } if($_SERVER['REQUEST_METHOD'] == 'POST'){ $_POST = array_map(array(&$this, 'resafe'), $_POST); } } $checkusername = $_POST['Username']; $query = mssql_query("SELECT account FROM ACCOUNT_DBF WHERE account = '$checkusername'"); $result = mssql_fetch_row($query); if(isset($_POST['submit'])){ if($_POST['Username'] == ""){ $error = '<font color="red">Bitte gib deinen Accountnamen an.</font>'; } else if($result[0] == $checkusername){ $error = '<font color="red">Dein Accountsname ist bereits vergeben.</font>'; } else if($_POST['Password'] == ""){ $error = '<font color="red">Bitte ein Passwort eingeben.</font>'; } else if($_POST['Password2'] == ""){ $error = '<font color="red">Du hast kein Passwort angegeben.</font>'; } else{ $password = md5('kikugalanet' . $_POST['Password']); $stmt = mssql_init('usp_CreateNewAccount', $connection); mssql_bind($stmt, '@account', $checkusername, SQLVARCHAR, false, false, 15); mssql_bind($stmt, '@pw', resafe($password), SQLVARCHAR, false, false, 36); mssql_bind($stmt, '@email', $_POST['mail'], SQLVARCHAR, false, false, 120); mssql_execute($stmt) or die ("Registration fehlgeschlagen bitte versuche es noch einmal."); mssql_free_statement($stmt); $error = 'Dein Account wurde erstellt</font>'; } } echo '<form action="register.php" method="post">'; echo '<font color="#7CFC00"><h1>Login ID:</h1> <input type="text" name="Username" /><br /><br />'; echo '<h1>Passwort:</h1> <input type="password" name="Password" /><br /><br />'; echo '<h1>Passwort wiederholen:</h1> <input type="password" name="Password2" /><br /><br />'; echo '<h1>E-mail Adresse eintragen:</h1> <input type="text" name="mail" /><br><br />'; echo '<input type="submit" name="submit" value= Re gistration &nbs p; />'; echo '</form>'; echo $error; ?> </tr> </table> </td> </tr> </table> </td> </tr> </table></div> </body> </html>
HTML Code:
<?php $ip='deine Instazn'; //Server instanz $usr='Benutzername'; //Benutzername $pwd='pw'; //Passwort $salt='kikugalanet'; //Salt ?> <center> <?php $link = @mssql_connect($ip, $usr, $pwd) or die ("Server is down!"); $db = @mssql_select_db('ACCOUNT_DBF') or die ("Accout table is missing!"); $b = ''; $mail = ''; function doesUsernameExist($name){ $exit = FALSE; $result = @mssql_query("SELECT * FROM ACCOUNT_TBL WHERE account='$name'"); if (mssql_num_rows($result) != 0){ $exit = TRUE; } return $exit; } if(isset($_POST['submit'])){ $user = preg_replace ("[^A-Za-z0-9]", "", $_POST['regusername']); $pass = preg_replace ("[^A-Za-z0-9]", "", $_POST['regpassword']); $mail = preg_replace ("[^A-Za-z0-9@.]", "", $_POST['email']); $user = str_replace($idk, '', $user); $pass = str_replace($idk, '', $pass); if($_POST['regusername'] == ""){ echo '<font color="red">Enter a user.</font><br /><br />'; } else if($_POST['regpassword'] == ""){ echo '<font color="red">Enter a password.</font><br /><br />'; } else if($_POST['regpassword'] != $_POST['regpassword2']){ echo '<font color="red">Passwords do not match.</font><br /><br />'; } else if ((strlen($_POST['regusername']) > 16) || (strlen($_POST['regusername']) < 3)){ echo '<font color="red">The user should be 3 to 16 characters.</font><br /><br />'; } else if ((strlen($_POST['regpassword']) > 16) || (strlen($_POST['regpassword']) < 3)){ echo '<font color="red">The password should be 3 to 16 characters.</font><br /><br />'; } else if($_POST['regusername'] != $user){ echo '<font color="red">User with invalid characters.</font><br /><br />'; } else if($_POST['regpassword'] != $pass){ echo '<font color="red">Password with invalid characters.</font><br /><br />'; } else { $pass = md5('kikugalanet' . $pass); if(!doesUsernameExist($user)){ $stmt = mssql_init('usp_CreateNewAccount', $link); mssql_bind($stmt, '@account', $user, SQLVARCHAR, false, false, 15); mssql_bind($stmt, '@password', $pass, SQLVARCHAR, false, false, 36); mssql_bind($stmt, '@email', $mail, SQLVARCHAR, false, false, 120); mssql_execute($stmt) or die ("Something is wrong on the execution"); mssql_free_statement($stmt); echo '<font color="Green">Register Successfull.</font><br /><br />'; } else { echo '<font color="red">User already Exists.</font><br /><br />'; } } mssql_close(); } echo '<form action="register.php" method="post"><table border=0>'; echo '<tr><td>Username:</td><td><input type="text" size="15" name="regusername" /></td></tr>'; echo '<tr><td>Password:</td><td><input type="password" size="15" name="regpassword" /></td></tr>'; echo '<tr><td>Repeat Password:</td><td><input type="password" size="15" name="regpassword2" /></td></tr>'; echo '<tr><td>Email:</td><td><input type="text" size="15" name="email" /></td></tr></table>'; echo '<br /><input type="submit" name="submit" value="Register" />'; echo '</form>'; ?>