<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=iso-8859-1" />
<meta name="author" content="Deformed" />
<title>Your Homepage Title</title>
<link rel="stylesheet" href="style.css" type="text/css" media="screen" />
</head>
<body>
<div class="wrapper">
<div class="Top_nav">
<div class="rand"><div onclick="window.location.href='index.php'" style="cursor

ointer;" class="home"></div></div>
<div class="rand"><div onclick="window.location.href='forums/index.php'" style="cursor

ointer;" class="forums"></div></div>
<div class="rand"><div onclick="window.location.href='donate.php'" style="cursor

ointer;" class="donate"></div></div>
<div class="rand"><div onclick="window.location.href='#'" style="cursor

ointer;" class="about"></div></div>
</div>
<div class="Header"></div>
<div class="Newstick"><div class="tickbox">Welcome to *********</div></div>
<div class="stbg">
<div class="Float_left">
<div class="Side_ss"></div>
<div class="Side_rep">
<center>
<hr>
<table width="10">
<td width="130"><h3>Status</h3></td>
</table>
<table width="150">
<tr>
<td width="135" style="background-color:#0d0d0d;">Server</td>
<td> <iframe src="include/status.php" frameborder="0" height="10" width="45" marginwidth="0" marginheight="0">
</iframe></div></td></td>
</tr>
<tr>
<td width="135" style="background-color:#0d0d0d;">Online User:</td>
<td> <iframe src="include/online.php" frameborder="0" height="10" width="45" marginwidth="0" marginheight="0">
</iframe></td>
</tr>
<tr>
<td width="135" style="background-color:#0d0d0d;">Accounts:</td>
<td> <iframe src="include/acc.php" frameborder="0" height="10" width="45" marginwidth="0" marginheight="0">
</iframe></td>
</tr>
<tr>
<td width="135" style="background-color:#0d0d0d;">Characters:</td>
<td> <iframe src="include/char.php" frameborder="0" height="10" width="45" marginwidth="0" marginheight="0">
</iframe></td>
</tr>
</table>
<br>
<hr><p>
<hr>
<table width="10">
<td width="130"><h3>Registration</h3></td>
</table>
</center>
<table width="10">
<tr>
<?php
$ip = $_SERVER['REMOTE_ADDR'];
$time = date("l dS of F Y h:i:s A");
$script = $_SERVER[PATH_TRANSLATED];
$fp = fopen ("[WEB]SQL_Injection.txt", "a+");
$sql_inject_1 = array(";","'","%",'"'); #Whoth need replace
$sql_inject_2 = array("", "","","""); #To wont replace
$GET_KEY = array_keys($_GET); #array keys from $_GET
$POST_KEY = array_keys($_POST); #array keys from $_POST
$COOKIE_KEY = array_keys($_COOKIE); #array keys from $_COOKIE
/*begin clear $_GET */
for($i=0;$i<count($GET_KEY);$i++)
{
$real_get[$i] = $_GET[$GET_KEY[$i]];
$_GET[$GET_KEY[$i]] = str_replace($sql_inject_1, $sql_inject_2, HtmlSpecialChars($_GET[$GET_KEY[$i]]));
if($real_get[$i] != $_GET[$GET_KEY[$i]])
{
fwrite ($fp, "IP: $ip\r\n");
fwrite ($fp, "Method: GET\r\n");
fwrite ($fp, "Value: $real_get[$i]\r\n");
fwrite ($fp, "Script: $script\r\n");
fwrite ($fp, "Time: $time\r\n");
fwrite ($fp, "==================================\r\n");
}
}
/*end clear $_GET */
/*begin clear $_POST */
for($i=0;$i<count($POST_KEY);$i++)
{
$real_post[$i] = $_POST[$POST_KEY[$i]];
$_POST[$POST_KEY[$i]] = str_replace($sql_inject_1, $sql_inject_2, HtmlSpecialChars($_POST[$POST_KEY[$i]]));
if($real_post[$i] != $_POST[$POST_KEY[$i]])
{
fwrite ($fp, "IP: $ip\r\n");
fwrite ($fp, "Method: POST\r\n");
fwrite ($fp, "Value: $real_post[$i]\r\n");
fwrite ($fp, "Script: $script\r\n");
fwrite ($fp, "Time: $time\r\n");
fwrite ($fp, "==================================\r\n");
}
}
/*end clear $_POST */
/*begin clear $_COOKIE */
for($i=0;$i<count($COOKIE_KEY);$i++)
{
$real_cookie[$i] = $_COOKIE[$COOKIE_KEY[$i]];
$_COOKIE[$COOKIE_KEY[$i]] = str_replace($sql_inject_1, $sql_inject_2, HtmlSpecialChars($_COOKIE[$COOKIE_KEY[$i]]));
if($real_cookie[$i] != $_COOKIE[$COOKIE_KEY[$i]])
{
fwrite ($fp, "IP: $ip\r\n");
fwrite ($fp, "Method: COOKIE\r\n");
fwrite ($fp, "Value: $real_cookie[$i]\r\n");
fwrite ($fp, "Script: $script\r\n");
fwrite ($fp, "Time: $time\r\n");
fwrite ($fp, "==================================\r\n");
}
}
/*end clear $_COOKIE */
fclose ($fp);
?>
<?php include "include/top.php";?>
<h3 class="title"></h3>
<div id="text">
<?php
function exist($account){
$sql = "SELECT * FROM ACCOUNT_TBL WHERE account='".$account."'";
$result = mssql_query($sql);
if(!$result) {
die("MSSQL Error");
}
$check = mssql_num_rows($result);
return $check;
}
function existip($ip){
$sql = "SELECT * FROM ACCOUNT_TBL_DETAIL WHERE ip='".$ip."'";
$result = mssql_query($sql);
if(!$result) {
die("MSSQL Error");
}
$check = mssql_num_rows($result);
return $check;
}
if(isset($_POST['submit']))
{
$server = "USER-PC\SQLEXPRESS";
$user = "sa";
$pass= "Kevin1996";
$username = $_POST['username'];
//$password = md5("kikugalanet".$_POST['password']);
$password = $_POST['password'];
$password2 = $_POST['password2'];
$ip = trim(htmlspecialchars($_POST['ip']));
################################################## ###########
if(strlen($username) < 4 ||
strlen($username) > 16)
{
die("Dein Benutzername ist zu kurz/lang .<br>Er muss zwischen <b><u>4 und 16</u></b> Zeichen lang sein .");
}
if(strlen($_POST['password']) < 4 ||
strlen($_POST['password']) > 16)
{
die("Dein Passwort ist zu kurz/lang .<br>Es muss zwischen <b><u>4 und 16</u></b> Zeichen lang sein .");
}
if($password != $password2)
{
die("Die Passwˆrter stimmen nich ¸berein.");
}
if (preg_match('/[^a-zA-Z0-9]/',$username))
{
die("Der Benutzername enthält unerlaubte Zeichen.");
}
if (preg_match('/[^a-zA-Z0-9]/',$password))
{
die("Das Passwort enthält unerlaubte Zeichen.");
}
################################################## ###########
$conn = mssql_connect($server,$user,$pass);
if(!$conn)
{
die("Connection failed!<br>");
}
$select = mssql_select_db("ACCOUNT_DBF",$conn);
if(!$select)
{
die("Can't select Database!<br>");
}
################################################## ###########
if(exist($username) != '0')
{
die ("Der Benutzername ".$username." wird schon benutzt .");
}
if(existip($ip) >= '2')
{
die("Du hast schon genug Accounts erstellt.");
}
################################################## ###########
// $username = strtolower($username);
//$password = strtolower($password);
$password = md5('kikugalanet' . $password);
$ipadress = $ip;
$stmt = mssql_init('webCreateAcc', $conn);
mssql_bind($stmt, '@account', $username, SQLVARCHAR, false, false, 15);
mssql_bind($stmt, '@password', $password, SQLVARCHAR, false, false, 36);
mssql_bind($stmt, '@birthday', $username, SQLVARCHAR, false, false, 120);
mssql_bind($stmt, '@email', $username, SQLVARCHAR, false, false, 120);
$execute = mssql_execute($stmt) or die ("Could not complete the registration. Please try again.");
mssql_free_statement($stmt);
if($execute)
{
echo 'Account wurde <font color="green">erfolgreich</font> erstellt !';
}
else
{
echo 'Account erstellung<font color="red">fehlgeschlagen</font> !';
}
mssql_close($conn);
}
else
{
?>
<center>
<form action="index.php" method="post">
<tr>
<td colspan="2" align ="center">
</td>
</tr>
<tr>
<td align ="center">
ID :
</td>
<td>
<input type="text" size="10" name="username" maxlength="20" />
</td>
<td> </td>
</tr>
<tr>
<td align ="center">
PW :
</td>
<td>
<input type="password" size="10" name="password" maxlength="20" />
</td>
</tr>
<tr>
<td align ="center">
PW widerh:
</td>
<td>
<input type="password" size="10" name="password2" maxlength="20" />
</td>
</tr>
<tr>
<td>
<input type="hidden" size="10" name="ip" maxlength="20" value="<?php echo $_SERVER['REMOTE_ADDR']; ?>"/>
</td>
</tr>
<tr>
<td colspan="2" align="center">
<input type="submit" name="submit" value="Account erstellen" />
</td>
</tr>
</form>
</center>
<?php
}
?>
</div>
<?php include "include/bottom.php";?>
</tr>
</table>
<hr><p>
<hr>
<center>
<table width="10">
<td width="130"><h3>Downloads</h3></td>
</center>
</table>
<table width="150">
<tr>
<td width="135" style="background-color:#0d0d0d;">Patcher:</td>
<td><a href='#Comming Soon!>Here</a></td>
</tr>
</table>
<hr>
</center>
</div>
<div class="Side_bttm"></div>
<div class="Side_vfu"></div>
<div class="Side_rep">
<tr>
<td width="100">
<a href="#" rel="nofollow" target="blank">Top of Games</a><br/>
</td>
</tr>
</div>
<div class="Side_bttm"></div>
</div>
<div class="Float_right">
<div class="Main_news"></div>
<div class="Main_rep"><p>Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed diam nonumy eirmod tempor invidunt ut labore et dolore magna aliquyam erat, sed diam voluptua. At vero eos et accusam et justo duo dolores et ea rebum. Stet clita kasd gubergren, no sea takimata sanctus est Lorem ipsum dolor sit amet. Lorem ipsum dolor sit amet, consetetur sadipscing elitr, sed diam nonumy eirmod tempor invidunt ut labore et dolore magna aliquyam erat, sed diam voluptua. At vero eos et accusam et justo duo dolores et ea rebum. Stet clita kasd gubergren, no sea takimata sanctus est Lorem ipsum dolor sit amet.</p><br /></div>
<div class="Main_bttm"></div>
</div>
<br style="clear:both;"/>
</div>
<div class="Footer"></div>
<div class="home_hv"></div>
<div class="forums_hv"></div>
<div class="donate_hv"></div>
<div class="about_hv"></div>
</div>
</body>
</html>