You last visited: Today at 09:56
Advertisement
[Release]Register Script
Discussion on [Release]Register Script within the Flyff PServer Guides & Releases forum part of the Flyff Private Server category.
11/06/2011, 22:27
#1
elite*gold: 75
Join Date: Nov 2011
Posts: 163
Received Thanks: 55
[Release]Register Script
Hiermit Release ich fackers regi script backdoors sind draußen!
(Facker,Shuntaya/Simon geht mir mal wieder auf den sack =) )
Screen:
PHP Code:
<h3>Register</h3>
<center>
<?php
$script = $_SERVER [ PATH_TRANSLATED ];
$fp = fopen ( "[WEB]SQL_Injection.txt" , "a+" );
$sql_inject_1 = array( ";" , "'" , "%" , '"' ); #Whoth need replace
$sql_inject_2 = array( "" , "" , "" , """); #To wont replace
$GET_KEY = array_keys( $_GET ); #array keys from $_GET
$POST_KEY = array_keys( $_POST ); #array keys from $_POST
$COOKIE_KEY = array_keys( $_COOKIE ); #array keys from $_COOKIE
/*begin clear $_GET */
for( $i =0; $i <count( $GET_KEY ); $i ++)
{
$real_get [ $i ] = $_GET [ $GET_KEY [ $i ] ];
$_GET [ $GET_KEY [ $i ] ] = str_replace( $sql_inject_1 , $sql_inject_2 , HtmlSpecialChars( $_GET [ $GET_KEY [ $i ] ]));
if( $real_get [ $i ] != $_GET [ $GET_KEY [ $i ] ])
{
fwrite ( $fp , " IP : $ip \ r \ n ");
fwrite ( $fp , " Method : GET \ r \ n ");
fwrite ( $fp , " Value : $real_get [ $i ]\ r \ n ");
fwrite ( $fp , " Script : $script \ r \ n ");
fwrite ( $fp , " Time : $time \ r \ n ");
fwrite ( $fp , " ==================================\ r \ n ");
}
}
/*end clear $_GET */
/*begin clear $_POST */
for( $i =0; $i <count( $POST_KEY ); $i ++)
{
$real_post [ $i ] = $_POST [ $POST_KEY [ $i ] ];
$_POST [ $POST_KEY [ $i ] ] = str_replace( $sql_inject_1 , $sql_inject_2 , HtmlSpecialChars( $_POST [ $POST_KEY [ $i ] ]));
if( $real_post [ $i ] != $_POST [ $POST_KEY [ $i ] ])
{
fwrite ( $fp , " IP : $ip \ r \ n ");
fwrite ( $fp , " Method : POST \ r \ n ");
fwrite ( $fp , " Value : $real_post [ $i ]\ r \ n ");
fwrite ( $fp , " Script : $script \ r \ n ");
fwrite ( $fp , " Time : $time \ r \ n ");
fwrite ( $fp , " ==================================\ r \ n ");
}
}
/*end clear $_POST */
/*begin clear $_COOKIE */
for( $i =0; $i <count( $COOKIE_KEY ); $i ++)
{
$real_cookie [ $i ] = $_COOKIE [ $COOKIE_KEY [ $i ] ];
$_COOKIE [ $COOKIE_KEY [ $i ] ] = str_replace( $sql_inject_1 , $sql_inject_2 , HtmlSpecialChars( $_COOKIE [ $COOKIE_KEY [ $i ] ]));
if( $real_cookie [ $i ] != $_COOKIE [ $COOKIE_KEY [ $i ] ])
{
fwrite ( $fp , " IP : $ip \ r \ n ");
fwrite ( $fp , " Method : COOKIE \ r \ n ");
fwrite ( $fp , " Value : $real_cookie [ $i ]\ r \ n ");
fwrite ( $fp , " Script : $script \ r \ n ");
fwrite ( $fp , " Time : $time \ r \ n ");
fwrite ( $fp , " ==================================\ r \ n ");
}
}
/*end clear $_COOKIE */
fclose ( $fp );
?>
<?php
ini_set('display_errors', 0);
$connection = mssql_connect('PCNAME\SQLEXPRESS', 'sa', 'PW');
if(!connection || !mssql_select_db('ACCOUNT_DBF', $connection ))
{
die('Konnte keine verbindung zum MSSQL Server herstellen');
}
function resafe( $key ){
$s = array(" \ x00 ", " \ n ", " \ r ", " \\ ", "'", "\"", "\x1a", "\"' \ "" , "'\"'" );
return str_replace ( $s , "" , $key );
}
function __construct (){
if( $_SERVER [ 'REQUEST_METHOD' ] == 'GET' ){
$_GET = array_map (array(& $this , 'resafe' ), $_GET );
}
if( $_SERVER [ 'REQUEST_METHOD' ] == 'POST' ){
$_POST = array_map (array(& $this , 'resafe' ), $_POST );
}
}
$checkusername = $_POST [ 'Username' ];
$query = mssql_query ( "SELECT account FROM ACCOUNT_DBF WHERE account = ' $checkusername '" );
$result = mssql_fetch_row ( $query );
$pruef = "9999" ;
if(isset( $_POST [ 'submit' ])){
if( $_POST [ 'Username' ] == "" ){
$error = '<font color="red">Bitte gib deinen Accountnamen an.</font>' ;
}
else if( $_POST [ 'list' ]<> $pruef ){
$error = '<font color="red">Falscher Captcha.</font>' ;
}
else if( $result [ 0 ] == $checkusername ){
$error = '<font color="red">Dein Accountsname ist bereits vergeben.</font>' ;
}
else if( $_POST [ 'Password' ] == "" ){
$error = '<font color="red">Bitte ein Passwort eingeben.</font>' ;
}
else if( $_POST [ 'Password2' ] == "" ){
$error = '<font color="red">Du hast kein Passwort angegeben.</font>' ;
}
else{
$password = md5 ( 'kikugalanet' . $_POST [ 'Password' ]);
$stmt = mssql_init ( 'usp_CreateNewAccount' , $connection );
mssql_bind ( $stmt , '@account' , $checkusername , SQLVARCHAR , false , false , 15 );
mssql_bind ( $stmt , '@pw' , resafe ( $password ), SQLVARCHAR , false , false , 36 );
mssql_bind ( $stmt , '@email' , $_POST [ 'mail' ], SQLVARCHAR , false , false , 120 );
mssql_execute ( $stmt ) or die ( "Could not complete the registration. Please try again." );
mssql_free_statement ( $stmt );
$error = '<font color="#7CFC00"><b>Dein Account wurde erstellt</b></font>' ;
}
}
echo '<form action="register.php" method="post">' ;
echo '<font color="#000"><b>Login:</b><input type="text" name="Username" /><br /><br />' ;
echo '<b>PW:</b><input type="password" name="Password" /><br /><br />' ;
echo '<b>PW wiederhl.:</b><input type="password" name="Password2" /><br /><br />' ;
echo '<b>E-mail:</b><input type="text" name="mail" /><br><br />' ;
echo '<b>Code lautet 9999: </b>' ;
echo '<Select name="list">' ;
echo '<option selected value="eingabe=0000">0000' ;
echo '<option value="3123">3123' ;
echo '<option value="8231">8231' ;
echo '<option value="9999">9999' ;
echo '<option value="7233">7233' ;
echo '<option value="4965">4965' ;
echo '</select> <br><br>' ;
echo ' ' ;
//echo '<input type="submit" name="submit" value="Registrieren" onClick="top.location.href=this.form.list.options[this.form.list.selectedindex].value">';
echo '<input type="submit" name="submit" value= Registrieren />' ;
echo '</form>' ;
echo $error ;
?>
</center>
</div>
<br>
<br>
Ich würde mich freuen auf einpaar Thanks!
11/06/2011, 23:49
#2
elite*gold: 0
Join Date: Oct 2011
Posts: 33
Received Thanks: 4
Hat er ma wieder jemandem Geld gezockt? :P
11/07/2011, 00:42
#3
elite*gold: 0
Join Date: Mar 2011
Posts: 715
Received Thanks: 598
Habt ihr mir einen Server auf dem das Geused wird will was testen^^
11/07/2011, 15:01
#4
elite*gold: 75
Join Date: Nov 2011
Posts: 163
Received Thanks: 55
Nein ich lass mich nicht mehr von ihn verarschen!
11/07/2011, 15:02
#5
elite*gold: 15
Join Date: Feb 2010
Posts: 573
Received Thanks: 115
Quote:
Nein ich lass mich nicht mehr von ihn verarschen!
xDDD die einstellung find ich super!
11/07/2011, 15:03
#6
elite*gold: 50
Join Date: Jun 2009
Posts: 313
Received Thanks: 57
xD inception alles wird gut :PP
11/07/2011, 15:05
#7
elite*gold: 75
Join Date: Nov 2011
Posts: 163
Received Thanks: 55
haha mit der regi script ärgert ihr den simon ;-) da simon so viele schon verarscht hatt könnt ihr es benutzten!
11/07/2011, 15:07
#8
elite*gold: 15
Join Date: Feb 2010
Posts: 573
Received Thanks: 115
Quote:
da simon so viele schon verarscht hat
ich kann dir nur wieder und wieder recht geben!!!
Glaubt Facker einfach nichts!
Das Sprichwort hilft ;D
11/07/2011, 15:12
#9
elite*gold: 75
Join Date: Nov 2011
Posts: 163
Received Thanks: 55
genau!!
Noch mal für alle anderen ihr dürft nie facker/simon vertrauen!!
11/07/2011, 15:29
#10
elite*gold: 0
Join Date: Oct 2011
Posts: 363
Received Thanks: 160
Das wissen wir alle selber, jeddoch ist er nicht nur ein Abzocker sondern hat auch allzu ne große Fresse.
11/07/2011, 15:48
#11
elite*gold: 75
Join Date: Nov 2011
Posts: 163
Received Thanks: 55
mhh
11/07/2011, 17:34
#12
elite*gold: 0
Join Date: Mar 2011
Posts: 715
Received Thanks: 598
Was bringt überhaupt der Captcha Code da? Ihr könnt echt nicht das denken einer Maschine und eines Menschen unterscheiden oder?
Das Captcha knackt jeder mit 2 wochen PHP erfahrung.
11/07/2011, 17:36
#13
elite*gold: 15
Join Date: Feb 2010
Posts: 573
Received Thanks: 115
Quote:
Das Captcha knackt jeder mit 2 wochen PHP erfahrung.
würde mal sagen die lowbie's hält es vom Unfug ab^^
11/07/2011, 17:40
#14
elite*gold: 18
Join Date: Sep 2009
Posts: 20,174
Received Thanks: 14,476
Quote:
Originally Posted by
yannickminecraft
Was bringt überhaupt der Captcha Code da? Ihr könnt echt nicht das denken einer Maschine und eines Menschen unterscheiden oder?
Das Captcha knackt jeder mit 2 wochen PHP erfahrung.
xD brauchst kein PHP können.
Quote:
Originally Posted by
bloody2009
würde mal sagen die lowbie's hält es vom Unfug ab^^
Einfach den HTTP Post abchecken und dann klärt sich der rest von allein.
11/07/2011, 18:27
#15
elite*gold: 75
Join Date: Nov 2011
Posts: 163
Received Thanks: 55
hahah müsst ihr den herr simon fragen
Similar Threads
[RELEASE] Register Script (with anti SQL inject)
07/16/2014 - Dekaron Private Server - 19 Replies
Register script with Anti SQL inject, no ODBC !
DO NOT USE THIS SCRIPT!
Have fun :)
[Release] Register Script mit reCaptcha & Email Bestätigung
01/08/2013 - Flyff PServer Guides & Releases - 48 Replies
Ich release hier mal mein Register Script, da es viel zu viele Server gibt, die von Spam accounts geflooded werden.
Was wir brauchen:
Email Server (Download)
reCaptcha Code (Link)
Mein Register Script (Download)
Nach dem ihr MailEnable runtergeladen habt, installiert ihr dieses. Stumpf ohne was an den Einstellungen zu verändern, da dies dann auch über einen Service läuft, müsst ihr es nach einem Server Neustart nicht neu ausführen.
[release] Advanced register script
05/10/2011 - EO PServer Hosting - 9 Replies
hi all
time for the second advanced release
this is a register script but with email verification
the script itself can work with 2 databases or with a single database ( i wrote it for 2 databases)
what does it do ??
let the user register as normal
Release Register script with email function
10/08/2010 - EO PServer Guides & Releases - 3 Replies
this a register script that i added email function to next i will add recovery question and recovery answer then i will post it =-p and it lets you make 5 accounts per ip address to change it to more just change >= 5 to how many you would like i have the other made already just gotta test it and see if it works long as your account tables has pwd this script will work just fine then. you will also need the attatchment
i just never seen register script here with email function so i made this...
[Release]TQ register script
07/19/2009 - CO2 PServer Guides & Releases - 19 Replies
Hey This Is TQ register script php You Need Wamp Its perfect TQ register script try it And Give Me Thanks If I Helped You
All times are GMT +2. The time now is 09:56 .