SCRIPT REDIRECT
PHP Code:
<? session_start(); if(!isset($_SESSION['login'])) { include("login.php"); } else { ?>
PHP Code:
<?php if(session_id()=="") session_start(); function getLevelByXp($xp){ $listlevel=array(0,40,60,100,200,350,550,800,1113,1504,1993,2604,3368,4323,5517,​7010,8876,11209,13659,16232,18934,21771,24750,27878,31162,34610,38230,42031,46022,50213,54614,59235,64087,69182,74532,80150,86049,92243,98747,105576,112746,120275,128180,136480,145195,154346,163955,174044,184637,195760,207439,219702,232578,246098,260294,275200,290851,307285,324541,342660,361685,381661,402636,424660,447785,472066,497561,524331,552440,581954,612944,645484,679651,715526,756782,804226,858787,921532,993689,1076670,1172098,1281840,1408043,1553176,1720079,1912017,2132746,2386584,2678498,3014199,3400255,3844219,4354778,4941921,5617135,6393631,7286601,8313517,9494470,2016089205); $j=count($listlevel); for($i=0;$i<$j;$i++){ if($listlevel[$i] > $xp) break; } return $i; } function userkey($fbid) { $ch = curl_init (); curl_setopt ( $ch, CURLOPT_URL, "http://dynamicdc.socialpointgames.com/dragoncity/web/srv/get_user_session.php?secret=zoltan3287&id=" . $fbid); curl_setopt ( $ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.116 Safari/537.36" ); curl_setopt ( $ch, CURLOPT_SSL_VERIFYPEER, false ); curl_setopt ( $ch, CURLOPT_HEADER, false ); //curl_setopt($ch, CURLOPT_PROXY, "127.0.0.1:8888"); curl_setopt ( $ch, CURLOPT_NOBODY, false ); curl_setopt($ch, CURLOPT_ENCODING , "gzip"); curl_setopt ( $ch, CURLOPT_RETURNTRANSFER, true ); curl_setopt ( $ch, CURLOPT_CONNECTTIMEOUT, 5 ); curl_setopt ( $ch, CURLOPT_TIMEOUT, 10 ); $userkey = curl_exec ( $ch ); $ch = curl_init (); curl_setopt ( $ch, CURLOPT_URL, 'http://dynamicdc.socialpointgames.com/dragoncity/web/srv/get_game_config.php?USERID=' . $fbid . '&user_key=' . $userkey."&language=tr" ); curl_setopt ( $ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.116 Safari/537.36" ); curl_setopt ( $ch, CURLOPT_SSL_VERIFYPEER, false ); curl_setopt ( $ch, CURLOPT_HEADER, false ); curl_setopt($ch, CURLOPT_ENCODING , "gzip"); curl_setopt ( $ch, CURLOPT_NOBODY, false ); //curl_setopt($ch, CURLOPT_PROXY, "127.0.0.1:8888"); curl_setopt ( $ch, CURLOPT_RETURNTRANSFER, true ); curl_setopt ( $ch, CURLOPT_CONNECTTIMEOUT, 5 ); curl_setopt ( $ch, CURLOPT_TIMEOUT, 10 ); $result = curl_exec ( $ch ); curl_setopt ( $ch, CURLOPT_URL, 'http://dynamicdc.socialpointgames.com/dragoncity/web/srv/get_player_info.php?USERID=' . $fbid . '&user_key=' . $userkey."&language=tr" ); curl_setopt ( $ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.116 Safari/537.36" ); curl_setopt ( $ch, CURLOPT_SSL_VERIFYPEER, false ); curl_setopt ( $ch, CURLOPT_HEADER, false ); curl_setopt ( $ch, CURLOPT_NOBODY, false ); curl_setopt ( $ch, CURLOPT_ENCODING , "gzip"); //curl_setopt ( $ch, CURLOPT_PROXY, "127.0.0.1:8888"); curl_setopt ( $ch, CURLOPT_RETURNTRANSFER, true ); curl_setopt ( $ch, CURLOPT_CONNECTTIMEOUT, 5 ); curl_setopt ( $ch, CURLOPT_TIMEOUT, 10 ); $result = curl_exec ( $ch ); return $userkey; } if(isset($_POST['flashVersion']) and !empty($_POST['flashVersion'])) $_SESSION['swversi']=$_POST['flashVersion']; $versi="0.5.23a"; if(isset($_SESSION['swversi'])) $versi=$_SESSION['swversi']; $str = '<html><head><title>Dragon City Hack tools By OneKidsz</title></head><body> <body style="background-color:yellow"> <div id="DADrun" style="bottom: 0px; left: 0px; position: fixed; right: 0px;"><marquee behavior="left" scrollamount="7"> <a href="http://fb.com/onekids1234" target="_blank"> <span style="color: red; font-size: large;">Untuk Cheat Gems DC Masih Ada Permasalahan, Jadi Kadang Work Kadang Tidak :)</span></a></marquee></div> <center><font face="arial" size=15" color="red">Hack Tools Dragon City<br/></font> <center><font face="Monotype Corsiva" size=9" color="blue"><BLINK>Edited = Mr.OneKidsz<br/></font></BLINK> <form method="post"> ID FB:<br/> <input name="fbid" /><br/> Flash Version:<br/> <input name="flashVersion" value="'.$versi.'"/><br/> <select name="mode"> <option value="1">100k xp + 100k gold</option> <option value="2">100k xp + 100k food</option> <option value="3">200 Gems</option> </select><br/> <input type="submit" value="Submit" /> </form>'; if(isset($_POST['fbid']) and isset($_POST['mode'])){ if(empty($_POST['fbid'])) die('Please enter your FB ID'); $fbid=$_POST['fbid']; $user=userkey($fbid); $result=komut("http://dynamicdc.socialpointgames.com/dragoncity/web/srv/get_player_info.php?USERID=$fbid&user_key=$user&language=en"); $payload = explode(';',$result); $data = json_decode($payload[1],true); $str .= "------------------------------<br/>"; $str .= "------------------------------<br/>"; $str .= "Uphlink: OneKidsz Tools<br/>"; $str .= "|Name|: ".$data['playerInfo']['name']."<br/>"; $str .= "|Gold|: ".number_format($data['playerInfo']['gold'],0,',','.')."<br/>"; $str .= "|Food|: ".number_format($data['playerInfo']['food'],0,',','.')."<br/>"; $str .= "| XP |: ".number_format($data['playerInfo']['xp'],0,',','.')."<br/>"; $str .= "|Gems|: ".number_format($data['playerInfo']['cash'],0,',','.')."<br/>"; $hcx=''; for($i=1;$i<100;$i++) { //$hcx.='{"args":[89,25],"number":'.$i.',"cmd":"collect","time":1372771201},'; $hcx.='{"args":[18],"number":'.$i.',"cmd":"collect","time":1372771201},'; //$hcx.='{"args":[134],"number":'.$i.',"cmd":"collect","time":1372771201},'; } $hcx=substr($hcx,0,-1); $hc='{"commands":['.$hcx.']}'; $hc=json_decode($hc,1); $num=1; for($i=0;$i<count($hc['commands']);$i++) { $hc['commands'][$i]['time']=time(); } $hc=substr(substr(str_replace(" ","",json_encode($hc)),0,-1),1); function arasi($a,$b,$data) { $x = explode($a,$data); $z = explode($b,$x[1]); $oh = $z[0]; if($x && $z) { return $oh; } else { return false; } } function komut2($komut,$num) { $data=komutyolla($komut,$num); if(stristr($data,'bad command number: expected')) { $yeninum=arasi('bad command number: expected ',',',$data); $data=komutyolla($komut,$yeninum); return substr($data,65); } else { return substr($data,65); } } function komutyolla($komut,$num) { global $fbid,$user; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL,"http://dynamicdc.socialpointgames.com/dragoncity/web/srv/packet.php?USERID=$fbid&user_key=$user&language=tr"); curl_setopt($ch, CURLOPT_POST, 1); curl_setopt($ch, CURLOPT_POSTFIELDS,http_build_query(array("id"=>"$fbid","data"=>hashla($komut,$num)))); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); //curl_setopt($ch, CURLOPT_HTTPHEADER, array("REMOTE_ADDR: ".fakeip(),"X-Client-IP: ".fakeip(),"Client-IP: ".fakeip(),"HTTP_X_FORWARDED_FOR: ".fakeip(),"X-Forwarded-For: ".fakeip())); curl_setopt($ch, CURLOPT_ENCODING , "gzip"); //curl_setopt($ch, CURLOPT_PROXY, "127.0.0.1:8888"); $data = curl_exec ($ch); curl_close ($ch); return $data; } function hashla($komut,$n) { $ar=array("first_number"=>$n,"publishActions"=>0,"tries"=>1,"flashVersion"=>"0.5.19","ts"=>time()); $x='RGhXbiy4xEeDnSNX1oBG'; $sonkod=str_replace(" ","",str_replace('}',','.$komut.'}',json_encode($ar))); return hash_hmac('sha256', $sonkod, $x).';'.$sonkod; } if(isset($_POST["fbid"])) { $fbid=$_POST['fbid']; $user=userkey($fbid); /* {"commands":[{"args":[1040],"number":1,"cmd":"get_rewarded_dragon","time":1372844166}]} {"commands":[{"cmd":"assist_receive","number":1,"args":[1],"time":1372539611}]} */ if($_POST["mode"]==1) { unset($hc,$hcx);$hcx=''; for($i=1;$i<10001;$i++) { /* 3gems (work 1 times) $hcx.='{"args":[147,"[0,1]"],"number":'.$i.',"cmd":"set_goals","time":1372771201},'; $hcx.='{"args":[147],"number":'.$i.',"cmd":"complete_goal","time":1372771201},'; $hcx.='{"args":[134],"number":'.$i.',"cmd":"complete_goal","time":1372771201},'; $hcx.='{"args":[148,"[0,1]"],"number":'.$i.',"cmd":"set_goals","time":1372771201},'; $hcx.='{"args":[148],"number":'.$i.',"cmd":"complete_goal","time":1372771201},'; $hcx.='{"args":[134,"[0,1]"],"number":'.$i.',"cmd":"set_goals","time":1372771201},'; $hcx.='{"args":[147,"[0,1]"],"number":1,"cmd":"set_goals","time":1372771201},'; $hcx.='{"args":[145,"[1,1]"],"number":1,"cmd":"set_goals","time":1372771201},'; $hcx.='{"args":[145],"number":1,"cmd":"set_goals","time":1372771201},'; */ $hcx.='{"args":[1],"number":'.$i.',"cmd":"assist_receive","time":1372771201},'; } $hcx=substr($hcx,0,-1); $hc='{"commands":['.$hcx.']}'; $hc=json_decode($hc,1); $num=1; for($i=0;$i<count($hc['commands']);$i++) { $hc['commands'][$i]['time']=time(); } } else if ($_POST["mode"]==2) { unset($hc,$hcx);$hcx=''; for($i=1;$i<10001;$i++) { $hcx.='{"args":[18],"number":'.$i.',"cmd":"assist_receive","time":1372771201},'; // xp:$hcx.='{"args":[3666,1],"number":'.$i.',"cmd":"finish_building","time":1372771201},'; } $hcx=substr($hcx,0,-1); $hc='{"commands":['.$hcx.']}'; $hc=json_decode($hc,1); $num=1; for($i=0;$i<count($hc['commands']);$i++) { $hc['commands'][$i]['time']=time(); } } else if ($_POST["mode"]==3) { unset($hc,$hcx);$hcx=''; for($i=1;$i<201;$i++) { $hcx.='{"args":[8241,0],"number":'.$i.',"cmd":"finish_building","time":1372771201},'; } $hcx=substr($hcx,0,-1); $hc='{"commands":['.$hcx.']}'; $hc=json_decode($hc,1); $num=1; for($i=0;$i<count($hc['commands']);$i++) { $hc['commands'][$i]['time']=time(); } } $hc=substr(substr(str_replace(" ","",json_encode($hc)),0,-1),1); $sucb=json_decode(komut2($hc,$num),1); } else { } $result=komut("http://dynamicdc.socialpointgames.com/dragoncity/web/srv/get_player_info.php?USERID=$fbid&user_key=$user&language=en"); $payload = explode(';',$result); $data = json_decode($payload[1],true); $str .= "------------------------------<br/>"; $str .= "Jika hasil 0 , Disarankan harus membuka game Dragon City dulu<br/>"; $str .= "------------------------------<br/>"; $str .= "Uphlink: OneKidsz Tools<br/>"; $str .= "|Name|: ".$data['playerInfo']['name']."<br/>"; $str .= "|Gold|: ".number_format($data['playerInfo']['gold'],0,',','.')."<br/>"; $str .= "|Food|: ".number_format($data['playerInfo']['food'],0,',','.')."<br/>"; $str .= "| XP |: ".number_format($data['playerInfo']['xp'],0,',','.')."<br/>"; $str .= "|Gems|: ".number_format($data['playerInfo']['cash'],0,',','.')."<br/>"; $str .= "------------------------------<br/>"; $str .= "------------------------------<br/>"; die("$str</body></html>"); }else die("$str</body></html>"); function fakeip() { return long2ip( mt_rand(0, 65537) * mt_rand(0, 65535) ); } function komut($url,$args=false) { global $fbid,$user; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL,$url); curl_setopt($ch, CURLOPT_HTTPHEADER, array("REMOTE_ADDR: ".fakeip(),"X-Client-IP: ".fakeip(),"Client-IP: ".fakeip(),"HTTP_X_FORWARDED_FOR: ".fakeip(),"X-Forwarded-For: ".fakeip())); if($args) { curl_setopt($ch, CURLOPT_POST, 1); curl_setopt($ch, CURLOPT_POSTFIELDS,$args); } curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); //curl_setopt($ch, CURLOPT_PROXY, "127.0.0.1:8888"); $result = curl_exec ($ch); curl_close ($ch); return $result; } ?>
anyone HELPING ME?






