<?php
session_start();
if(!(@mysql_pconnect("localhost","Zeg ik niet","zeg ik niet") && @mysql_select_db("crime"))) {
print <<<ENDHTML
<html>
<head>
<title>[[(*( GETTO GANG )*)]]</title>
<link rel="stylesheet" type="text/css" href="css-v1.css">
</head>
<body style="background: #999999; margin: 0px;">
<table width=100%>
<tr><td class="subTitle"><b>Onderhoud</b></td></tr>
<tr><td class="mainTxt">Goed nieuws morgen gaat Getto gang weer open!!!
<br>
</td></tr>
</table>
<center>
<a href="http://www.nintendo-europe.com/NOE/nl/NL/register/index.jsp?a=patric121&m=b" target="_blank"> <img src="http://crime-ware.nl/crime/banner_2_full.gif" border=0></a><br />Crime-ware.org (BANEX)</center>
<br /><CENTER><SCRIPT TYPE="text/javascript" LANGUAGE="JavaScript" src="http://dutchleader.nl/php/banex/view.php?id=pattric"></SCRIPT></CENTER>
<h6>
</h6>
</center>
<br><br>
<center><img src="http://www.aboutdivorce.org/image.asp?cid=270471 border=0"><br></center>
</body>
</html>
ENDHTML;
exit;
}
include("_include-funcs.php");
if(isset($_SESSION['login'])) {
$dbres = mysql_query("SELECT *,UNIX_TIMESTAMP(`signup`) AS `signup`,UNIX_TIMESTAMP(`online`) AS `online` FROM `[users]` WHERE `login`='{$_SESSION['login']}'");
$data = mysql_fetch_object($dbres);
}
if(((count($_POST) > 0 && !isset($_POST['omnilog'])) || ($_POST['omnilog'] == 1 && count($_GET) > 1)) && isset($OMNILOG)) {
$forwardedFor = ($_SERVER['HTTP_X_FORWARDED_FOR'] != "") ? $_SERVER['HTTP_X_FORWARDED_FOR'] : $_SERVER['HTTP_CLIENT_IP'];
$forwardedFor = preg_replace('/, .+/','',$forwardedFor);
$postVars = addslashes(var_export($_POST,TRUE));
if($postVars == "array (n)" || (count($_POST) == 1 && isset($_POST['omnilog'])))
$postVars = "";
$getVars = addslashes(var_export($_GET,TRUE));
if($getVars == "array (n)")
$getVars = "";
mysql_query("INSERT INTO `[omnilog]` VALUES(NOW(),'{$_COOKIE['login']}','{$_SERVER['REMOTE_ADDR']}','$forwardedFor','{$_SERVER['PHP_SELF']}','$postVars','$getVars')");
}
foreach($_POST as $key => $value) {
if(gettype($_POST[$key]) == "array")
foreach($_POST[$key] as $key2 => $value2)
$_POST[$key][$key2] = addslashes($_POST[$key][$key2]);
else
$_POST[$key] = addslashes($_POST[$key]);
}
foreach($_GET as $key => $value) {
if(gettype($_GET[$key]) == "array")
foreach($_GET[$key] as $key2 => $value2)
$_GET[$key][$key2] = addslashes($_GET[$key][$key2]);
else
$_GET[$key] = addslashes($_GET[$key]);
}
foreach($_COOKIE as $key => $value) {
if(gettype($_COOKIE[$key]) == "array")
foreach($_COOKIE[$key] as $key2 => $value2)
$_COOKIE[$key][$key2] = addslashes($_COOKIE[$key][$key2]);
else
$_COOKIE[$key] = addslashes($_COOKIE[$key]);
}
$clientIP = $_SERVER['REMOTE_ADDR'];
$forwardedFor = ($_SERVER['HTTP_X_FORWARDED_FOR'] != "") ? $_SERVER['HTTP_X_FORWARDED_FOR'] : $_SERVER['HTTP_CLIENT_IP'];
$forwardedFor = preg_replace('/, .+/','',$forwardedFor);
$dbres = mysql_query("SELECT `id` FROM `[users]` WHERE `level`='-1' AND (`IP`='$clientIP' OR `IP`='$forwardedFor')");
if(mysql_num_rows($dbres) != 0) {
print <<<ENDHTML
<html>
<head>
<title>Gettoh</title>
<link rel="stylesheet" type="text/css" href="css-v1.css">
</head>
<body style="background: #999999; margin: 0px;">
<table width=100% height=100%>
<tr><td class="subTitle"><b>Ban</b></td></tr>
<tr><td class="mainTxt">
u bent verbannen u weet vast wel waarom<br />
<br />
Kijk over paar maanden en meschien ben je Dan wel Weer Vrij
<br />
</td></tr>
</table>
</body>
</html>
ENDHTML;
exit;
}
if($data->level == -1){
print <<<ENDHTML
<html>
<head>
<title>Getto Gang</title>
<link rel="stylesheet" type="text/css" href="css-v1.css">
</head>
<body style="background: #999999; margin: 0px;">
<table width=100% height=0%>
<tr><td class="subTitle"><b>Ban</b></td></tr>
<tr><td class="mainTxt">
u bent verbannen u weet vast wel waarom<br />
<br />
naam? - Email adress? of Vloeken? spammen? Clan naam? Cheaten? of Injecties ! of 3 straf punten?<br />
<br />
<br />
De volgen de regels kunnen worden Verband<br />
<br />
Email = Niet zo erg<br />
naam = Erg zekker als er K**k*r in zit<br />
Spammen = worden Vergoed verbannen<br />
Niet Veel Spammen = soms unban<br />
Vloeken = Soms unban<br />
Bug Gebruiken = Ban tot Einden van het jaar<br />
</td></tr>
</table>
<a href="http://www.nintendo-europe.com/NOE/nl/NL/register/index.jsp?a=patric121&m=b" target="_blank"> <img src="http://crime-ware.org/crime/banner_2_full.gif" border=0></a>
</body>
</html>
ENDHTML;
exit;
}
// Straf punten systeem
if($data->straf >= 3){
print <<<ENDHTML
<html>
<head>
<title>Gettoh</title>
<link rel="stylesheet" type="text/css" href="css-v1.css">
</head>
<body style="background: #999999; margin: 0px;">
<table width=100% height=0%>
<tr><td class="subTitle"><b>Ban</b></td></tr>
<tr><td class="mainTxt">
u bent verbannen u weet vast wel waarom<br />
<br />
naam? - Email adress? of Vloeken? spammen? Clan naam? Cheaten? of Injecties ! of 3 straf punten?<br />
<br />
<br />
De volgen de regels kunnen worden Verband!<br />
<br />
Email = Niet zo erg<br />
naam = Erg zekker als er K**k*r in zit<br />
Spammen = worden Vergoed verbannen<br />
Niet Veel Spammen = soms unban<br />
Vloeken = Soms unban<br />
Bug Gebruiken = Ban tot Einden van het jaar<br />
</td></tr>
</table>
<a href="http://www.nintendo-europe.com/NOE/nl/NL/register/index.jsp?a=patric121&m=b" target="_blank"> <img src="http://crime-ware.org/crime/banner_2_full.gif" border=0></a>
</body>
</html>
ENDHTML;
exit;
}
if(isset($UPDATE_DB)) {
$dbres = mysql_query("SELECT UNIX_TIMESTAMP(`time`) AS `time`,`name` FROM `[cron]`");
while($x = mysql_fetch_object($dbres))
$update[$x->name] = $x->time;
if(floor($update['hour']/3600) != floor(time()/3600)) {
$dbres = mysql_query("SELECT GET_LOCK('hour_update',0)");
if(mysql_result($dbres,0) == 1) {
$cron_pass = "secretcronpassword";
mysql_query("UPDATE `[cron]` SET `time`=NOW() WHERE `name`='hour'");
include("_cron_hour.php");
mysql_query("SELECT RELEASE_LOCK('hour_update')");
}
}
if(floor($update['day']/86400) != floor(time()/86400)) {
$dbres = mysql_query("SELECT GET_LOCK('day_update',0)");
if(mysql_result($dbres,0) == 1) {
$cron_pass = "secretcronpassword";
mysql_query("UPDATE `[cron]` SET `time`=NOW() WHERE `name`='day'");
include("_cron_day.php");
mysql_query("SELECT RELEASE_LOCK('day_update')");
}
}
if(floor($update['second']/1) != floor(time()/1)) {
$dbres = mysql_query("SELECT GET_LOCK('second_update',0)");
if(mysql_result($dbres,0) == 1) {
$cron_pass = "secretcronpassword";
mysql_query("UPDATE `[cron]` SET `time`=NOW() WHERE `name`='second'");
include("_cron_second.php");
mysql_query("SELECT RELEASE_LOCK('second_update')");
}
}
if(floor($update['week']/604800) != floor(time()/604800)) {
$dbres = mysql_query("SELECT GET_LOCK('week_update',0)");
if(mysql_result($dbres,0) == 1) {
$cron_pass = "secretcronpassword";
mysql_query("UPDATE `[cron]` SET `time`=NOW() WHERE `name`='week'");
include("_cron_week.php");
mysql_query("SELECT RELEASE_LOCK('week_update')");
}
}
if(date('n',$update['month']) != date('n',time())) {
$dbres = mysql_query("SELECT GET_LOCK('month_update',0)");
if(mysql_result($dbres,0) == 1) {
$cron_pass = "secretcronpassword";
mysql_query("UPDATE `[cron]` SET `time`=NOW() WHERE `name`='month'");
include("_cron_month.php");
mysql_query("SELECT RELEASE_LOCK('month_update')");
}
}
if((date('G',time()) >= 16 && date('z',time()) != date('z',$update['horserace'])) || (date('G',time()) >= 21 && date('G',$update['horserace']) < 21)) {
$dbres = mysql_query("SELECT GET_LOCK('horserace_update',0)");
if(mysql_result($dbres,0) == 1) {
$cron_pass = "secretcronpassword";
mysql_query("UPDATE `[cron]` SET `time`=NOW() WHERE `name`='horserace'");
include("_cron_horserace.php");
mysql_query("SELECT RELEASE_LOCK('horserace_update')");
}
}
}
$url = substr($_SERVER['REQUEST_URI'], 1);
if(eregi("%", $url) or eregi(";", $url) or eregi("'", $url) or eregi("<", $url) or eregi(">", $url) or eregi(")", $url) or eregi("query", $url) or eregi("mysql", $url) or eregi('"', $url) or eregi('config', $url) or eregi('ingelogd', $url) or eregi("query", $url)){
echo "geen sql injectie doen<br>";
}
// anti mysql injections
// bovenaan omdat dit belangrijk is
$locatie = $_SERVER['REQUEST_URI'];
$array = Array();
$array[] = "mysql";
$array[] = "query";
$array[] = ")";
$array[] = ";";
$array[] = "}";
$array[] = "INSERT";
$array[] = "%40";
$array[] = "DROPTABLE";
$array[] = "TRUNCATE";
foreach($array As $foutbezig) {
if(eregi($foutbezig,$locatie)) {
echo "GEEN INJECTIE DOEN!<br>";
exit();
}
}
?>