<?php
/*
Geinclude anti-SQL injections, deze zorgt ervoor dat dit bijna onmogelijk is om nog te doen.
Ook is de config al extra beveiligd tegen deze injections.
Optimale config.php die perfect alle crons uitvoerd zoals het moet.
Ook is deze ietsjes sneller omdat er opties zijn verandert waardoor we tijd winnen.
Deze source wordt onderhouden door :
OSvendetta v1.6
http://crimepatrol.be/ontwikkeling
*/
include("ansql.php");
?>
<?php /* ------------------------- */
error_reporting(E_PARSE);
include("gegevens.php");
if(!(@mysql_connect("$host","$user","$pass") && @mysql_select_db("$tablename"))) {
?>
<html>
<head>
<title> <?php echo $sitename; ?> </title>
<link rel="shortcut icon" href="favicon.ico">
<link rel="stylesheet" type="text/css" href="style.css">
<META HTTP-EQUIV='refresh' CONTENT='160'; URL='$PHP_SELF'>
</head>
<table width=100%>
<tr>
<td class="subTitle"><b>MySQL error</b></td>
</tr>
<tr><td> </td></tr>
<tr>
<td class="mainTxt">
Geachte speler/bezoeker,<br>
<br>
Wegens een MySQL fout is onze site offline.<br>
De webmaster is al op de hoogte van deze error.<br>
<br>
Of wij zijn bezig met een update of een grote onderhoud !<br>
<br>
Het <?php echo $sitename; ?> ontwikkelings team.
</td></tr>
</table>
</body>
</html>
<?php
exit;
}
session_start();
if(isset($_SESSION['login'])) {
$dbres = mysql_query("SELECT *,UNIX_TIMESTAMP(`pc`) AS `pc`,UNIX_TIMESTAMP(`transport`) AS `transport`,UNIX_TIMESTAMP(`bc`) AS `bc`,UNIX_TIMESTAMP(`slaap`) AS `slaap`,UNIX_TIMESTAMP(`kc`) AS `kc`,UNIX_TIMESTAMP(`start`) AS `start`,UNIX_TIMESTAMP(`crime`) AS `crime`,UNIX_TIMESTAMP(`ac`) AS `ac` FROM `users` WHERE `login`='{$_SESSION['login']}'");
$data = mysql_fetch_object($dbres);
$blata = mysql_num_rows($dbres);
foreach($_POST as $key => $value) {
if(gettype($_POST[$key]) == "array")
foreach($_POST[$key] as $key2 => $value2)
$_POST[$key][$key2] = addslashes($_POST[$key][$key2]);
else
$_POST[$key] = addslashes($_POST[$key]);
}
foreach($_GET as $key => $value) {
if(gettype($_GET[$key]) == "array")
foreach($_GET[$key] as $key2 => $value2)
$_GET[$key][$key2] = addslashes($_GET[$key][$key2]);
else
$_GET[$key] = addslashes($_GET[$key]);
}
foreach($_COOKIE as $key => $value) {
if(gettype($_COOKIE[$key]) == "array")
foreach($_COOKIE[$key] as $key2 => $value2)
$_COOKIE[$key][$key2] = addslashes($_COOKIE[$key][$key2]);
else
$_COOKIE[$key] = addslashes($_COOKIE[$key]);
}
include("rangen.php");
include("tijden.php");
include("rangmsg.php");
// Kliklimiet:
if($data->golduser == 0) {
include("kliklimiet.php");
}
mysql_query("UPDATE `users` SET `health`='100' WHERE (`health` > 100)");
mysql_query("UPDATE `users` SET `se`='100' WHERE (`se` > 100)");
mysql_query("UPDATE `users` SET `stad`='Hasselt' WHERE `stad`=''");
if ($blata == 0) { header('Location login.php'); }
if ($data->status != dood) { mysql_query("UPDATE `users` SET `online`=NOW() WHERE `login`='{$data->login}'"); }
$huis = $data->stad;
$ctime = time();
}
$ip = $_SERVER['REMOTE_ADDR'];
$iban = mysql_fetch_object(mysql_query("SELECT * FROM `bans` WHERE `IP`='$ip'"));
$lban = mysql_fetch_object(mysql_query("SELECT * FROM `bans` WHERE `IP`='$ip' OR `login`='{$data->login}'"));
$ban = ($data->login) ? $lban : $iban;
if ($ban) {
?>
<html>
<head>
<title> <?php echo $sitename; ?> </title>
<link rel="stylesheet" type="text/css" href="style.css">
</head>
<table width=100%>
<tr>
<td class="subTitle"><b>Verbannen</b></td>
</tr>
<tr><td> </td></tr>
<tr>
<td class="mainTxt">
Je bent verbannen van <?php echo $sitename; ?> <br /><br />Reden: <?php echo "".$ban->reden.""; ?>
</td></tr>
</table>
</body>
</html>
<?php
unset($_SESSION['login']);
exit;
}
function check_login() {
$res = mysql_num_rows(mysql_query("SELECT * FROM `users` WHERE `login`='{$_SESSION['login']}'"));
if($res == 0) {
unset($_SESSION['login']);
return FALSE;
}
else { return TRUE; }
}
if ($data->xp < 10) { $jailtime = (TIME() + 20); $boete = 250; }
elseif ($data->xp < 20) { $jailtime = (TIME() + 40); $boete = 500; }
elseif ($data->xp < 50) { $jailtime = (TIME() + 60); $boete = 750; }
elseif ($data->xp < 150) { $jailtime = (TIME() + 90); $boete = 1000; }
elseif ($data->xp < 500) { $jailtime = (TIME() + 120); $boete = 5000; }
elseif ($data->xp < 1000) { $jailtime = (TIME() + 180); $boete = 7500; }
elseif ($data->xp < 2000) { $jailtime = (TIME() + 190); $boete = 12500; }
elseif ($data->xp < 3000) { $jailtime = (TIME() + 230); $boete = 25000; }
elseif ($data->xp < 4500) { $jailtime = (TIME() + 270); $boete = 50000; }
elseif ($data->xp < 6000) { $jailtime = (TIME() + 320); $boete = 60000; }
elseif ($data->xp < 8000) { $jailtime = (TIME() + 370); $boete = 75000; }
elseif ($data->xp < 11000) { $jailtime = (TIME() + 420); $boete = 85000; }
elseif ($data->xp < 15000) { $jailtime = (TIME() + 480); $boete = 100000; }
elseif ($data->xp < 20000) { $jailtime = (TIME() + 540); $boete = 125000; }
elseif ($data->xp >= 20000) { $jailtime = (TIME() + 600); $boete = 150000; }
if (!$data->famillie) { $famillie = "Geen"; }
else { $famillie = $data->famillie; }
$dbres = mysql_query("SELECT UNIX_TIMESTAMP(`time`) AS `time`,`name` FROM `cron`");
while($x = mysql_fetch_object($dbres))
$update[$x->name] = $x->time;
$golduser = round(0*1);
$rand = rand(520,1200);
if(floor($update['kogels']/ 180) != floor(time()/ 180)) {
$dbres = mysql_query("SELECT GET_LOCK('kogels_update',0)");
if(mysql_result($dbres,0) == 1) {
mysql_query("UPDATE `cron` SET `time`=NOW() WHERE `name`='kogels'");
mysql_query("DELETE FROM `messages` WHERE `to`=''");
mysql_query("DELETE FROM `iplog` WHERE `login`=''");
mysql_query("UPDATE `users` SET `golduser`='".$golduser."' WHERE `golduserdagen`<'1'");
mysql_query("UPDATE `stad` SET `kogels`='100',`prijs`='$rand'");
mysql_query("SELECT RELEASE_LOCK('kogels_update')");
}
}
if(floor($update['uur']/ 3600) != floor(time()/ 3600)) {
$dbres = mysql_query("SELECT GET_LOCK('uur_update',0)");
if(mysql_result($dbres,0) == 1) {
mysql_query("UPDATE `cron` SET `time`=NOW() WHERE `name`='uur'");
mysql_query("UPDATE `casino` SET `winst`=`winst`+100 WHERE `spel`='kogelfabriek'");
mysql_query("UPDATE `bruteforce` SET `geprobeert`=`geprobeert`='0' "); // Dit zorgt ervoor dat de persoon terug 3x een verkeerd wachtwoord kan geven.
mysql_query("UPDATE `users` SET `klikmissie`='0'"); // Verwijdert de tijd van klikmissie, zodat elke users elk uur terug kan klikken
mysql_query("SELECT RELEASE_LOCK('uur_update')");
}
}
if(floor($update['day']/ 86400) != floor(time()/ 86400)) {
$dbres = mysql_query("SELECT GET_LOCK('day_update',0)");
if(mysql_result($dbres,0) == 1) {
mysql_query("UPDATE `cron` SET `time`=NOW() WHERE `name`='day'");
mysql_query("UPDATE `famillie` SET `crusher`='0',`aantal`='0'");
mysql_query("DELETE FROM `kras`");
$abrussel = rand(1000,6000);
$aleuven = rand(1000,6000);
$agent = rand(1000,6000);
$abrugge = rand(1000,6000);
$aantwerpen = rand(1000,6000);
$ahasselt = rand(1000,6000);
$aamsterdam = rand(1000,6000);
$aenschede = rand(1000,6000);
$ubrussel = rand(6000,15000);
$uleuven = rand(6000,15000);
$ugent = rand(6000,15000);
$ubrugge = rand(6000,15000);
$uantwerpen = rand(6000,15000);
$uhasselt = rand(6000,15000);
$uamsterdam = rand(6000,15000);
$uenschede = rand(6000,15000);
mysql_query("UPDATE `stad` SET `drugsp`='$ubrussel',`drankp`='$abrussel' WHERE `stad`='Brussel'");
mysql_query("UPDATE `stad` SET `drugsp`='$uleuven',`drankp`='$aleuven' WHERE `stad`='Leuven'");
mysql_query("UPDATE `stad` SET `drugsp`='$ugent',`drankp`='$agent' WHERE `stad`='Gent'");
mysql_query("UPDATE `stad` SET `drugsp`='$ubrugge',`drankp`='$abrugge' WHERE `stad`='Brugge'");
mysql_query("UPDATE `stad` SET `drugsp`='$uantwerpen',`drankp`='$aantwerpen' WHERE `stad`='Antwerpen'");
mysql_query("UPDATE `stad` SET `drugsp`='$uhasselt',`drankp`='$ahasselt' WHERE `stad`='Hasselt'");
mysql_query("UPDATE `stad` SET `drugsp`='$uamsterdam',`drankp`='$aamsterdam' WHERE `stad`='Amsterdam'");
mysql_query("UPDATE `stad` SET `drugsp`='$uenschede',`drankp`='$aenschede' WHERE `stad`='Enschede'");
mysql_query("truncate table ipcheck");
mysql_query("truncate table `bruteforce`"); // Dropt alle gegevens van deze dag van deze tabel !
mysql_query("UPDATE `users` SET `golduserdagen`=`golduserdagen`-'1' WHERE `golduser`>'0'");
mysql_query("UPDATE `users` SET `golduser`=`golduser`=0 WHERE `golduserdagen`<'1'");
mysql_query("SELECT RELEASE_LOCK('day_update')");
}
}
if(floor($update['week']/ 604800) != floor(time()/ 604800)) {
$dbres = mysql_query("SELECT GET_LOCK('week_update',0)");
if(mysql_result($dbres,0) == 1) {
mysql_query("UPDATE `cron` SET `time`=NOW() WHERE `name`='week'");
$blah = mysql_query("SELECT * FROM `users` WHERE `activated`='1' AND `status`='levend'");
while($blahh = mysql_fetch_object($blah)) {
$rp = round($blahh->xp / 50);
if ($rp > 0) { mysql_query("UPDATE `users` SET `rp`='$rp' WHERE `login`='{$blahh->login}'"); }
}
mysql_query("SELECT RELEASE_LOCK('week_update')");
}
}
if(floor($update['loterij']/ 259200) != floor(time()/ 259200)) {
$dbres = mysql_query("SELECT GET_LOCK('loterij_update',0)");
if(mysql_result($dbres,0) == 1) {
$sql = mysql_query("SELECT * FROM `loterij`");
$nroflot = mysql_num_rows($sql);
if($nroflot < 1){$nroflot = 1;}
$a = rand(1,$nroflot);
$b = rand(1,$nroflot);
$c = rand(1,$nroflot);
$d = rand(1,$nroflot);
$e = rand(1,$nroflot);
$f = rand(1,$nroflot);
$g = rand(1,$nroflot);
$h = rand(1,$nroflot);
$i = rand(1,$nroflot);
$sql = mysql_query("SELECT `login` FROM `loterij` WHERE `id`='{$a}'");
$a = mysql_num_rows($sql);
$jackpot = $nroflot*10000;
mysql_query("UPDATE `user` SET `zak`=`zak`+$jackpot WHERE `login`='{$a->login}'");
mysql_query("INSERT INTO `messages`(`time`,`from`,`to`,`subject`,`message`) values(NOW(),'Notificatie','{$a->login}','Loterij','Je hebt € $jackpot gewonnen met de loterij.')");
$sql = mysql_query("SELECT `login` FROM `loterij` WHERE `id`='{$b}'");
$b = mysql_num_rows($sql);
$prijs = 1000000;
mysql_query("UPDATE `user` SET `zak`=`zak`+$prijs WHERE `login`='{$b->login}'");
mysql_query("INSERT INTO `messages`(`time`,`from`,`to`,`subject`,`message`) values(NOW(),'Notificatie','{$b->login}','Loterij','Je hebt € $prijs gewonnen met de loterij.')");
$sql = mysql_query("SELECT `login` FROM `loterij` WHERE `id`='{$c}'");
$c = mysql_num_rows($sql);
$prijs = 500000;
mysql_query("UPDATE `user` SET `zak`=`zak`+$prijs WHERE `login`='{$c->login}'");
mysql_query("INSERT INTO `messages`(`time`,`from`,`to`,`subject`,`message`) values(NOW(),'Notificatie','{$c->login}','Loterij','Je hebt € $prijs gewonnen met de loterij.')");
$sql = mysql_query("SELECT `login` FROM `loterij` WHERE `id`='{$d}'");
$d = mysql_num_rows($sql);
$prijs = 250000;
mysql_query("UPDATE `user` SET `zak`=`zak`+$prijs WHERE `login`='{$d->login}'");
mysql_query("INSERT INTO `messages`(`time`,`from`,`to`,`subject`,`message`) values(NOW(),'Notificatie','{$d->login}','Loterij','Je hebt € $prijs gewonnen met de loterij.')");
$sql = mysql_query("SELECT `login` FROM `loterij` WHERE `id`='{$e}'");
$e = mysql_num_rows($sql);
$prijs = 400000;
$steden = Array("Brussel","Leuven","Gent","Brugge","Hasselt","Antwerpen","Enschede","Amsterdam");
$rstad = rand(0,7);
$stad = "$steden[$rstad]";
mysql_query("INSERT INTO `garage`(`login`,`naam`,`waarde`,`damage`,`stad`) values('{$e->login}','$prijs','$prijs','0','$stad')");
mysql_query("INSERT INTO `messages`(`time`,`from`,`to`,`subject`,`message`) values(NOW(),'Notificatie','{$e->login}','Loterij','Je hebt een Mercedes W124 Avus Streamling met 0% schade gewonnen met de loterij.')");
$sql = mysql_query("SELECT `login` FROM `loterij` WHERE `id`='{$f}'");
$f = mysql_num_rows($sql);
$prijs = 3000;
mysql_query("UPDATE `user` SET `kogels`=`kogels`+$prijs WHERE `login`='{$f->login}'");
mysql_query("INSERT INTO `messages`(`time`,`from`,`to`,`subject`,`message`) values(NOW(),'Notificatie','{$f->login}','Loterij','Je hebt $prijs kogels gewonnen met de loterij.')");
$sql = mysql_query("SELECT `login` FROM `loterij` WHERE `id`='{$g}'");
$g = mysql_num_rows($sql);
$prijs = 2000;
mysql_query("UPDATE `user` SET `kogels`=`kogels`+$prijs WHERE `login`='{$g->login}'");
mysql_query("INSERT INTO `messages`(`time`,`from`,`to`,`subject`,`message`) values(NOW(),'Notificatie','{$g->login}','Loterij','Je hebt $prijs kogels gewonnen met de loterij.')");
$sql = mysql_query("SELECT `login` FROM `loterij` WHERE `id`='{$h}'");
$h = mysql_num_rows($sql);
$prijs = 1000;
mysql_query("UPDATE `user` SET `kogels`=`kogels`+$prijs WHERE `login`='{$h->login}'");
mysql_query("INSERT INTO `messages`(`time`,`from`,`to`,`subject`,`message`) values(NOW(),'Notificatie','{$h->login}','Loterij','Je hebt $prijs kogels gewonnen met de loterij.')");
$sql = mysql_query("SELECT `login` FROM `loterij` WHERE `id`='{$i}'");
$i = mysql_num_rows($sql);
$prijs = 500;
mysql_query("UPDATE `user` SET `kogels`=`kogels`+$prijs WHERE `login`='{$i->login}'");
mysql_query("INSERT INTO `messages`(`time`,`from`,`to`,`subject`,`message`) values(NOW(),'Notificatie','{$i->login}','Loterij','Je hebt $prijs kogels gewonnen met de loterij.')");
mysql_query("UPDATE `cron` SET `time`=NOW() WHERE `name`='loterij'");
mysql_query("TRUNCATE TABLE `loterij`");
mysql_query("SELECT RELEASE_LOCK('loterij_update')");
}
}
$dbre = mysql_query("SELECT *, UNIX_TIMESTAMP(`time`) AS `getime` FROM `jail` WHERE `login`='{$data->login}'");
$jisin = mysql_num_rows($dbre);
$jail = mysql_fetch_object($dbre);
$tim = ($jail->getime - time());
if ($jisin == 1) {
if ($tim == 1) { $time = gmdate('s', $tim); $word = seconde; $boete = $jail->boete; }
elseif ($tim < 61) { $time = gmdate('s', $tim); $word = seconden; $boete = $jail->boete; }
else { $time = gmdate('i:s', $tim); $word = minuten; $boete = $jail->boete; }
}
mysql_query("DELETE FROM `jail` WHERE UNIX_TIMESTAMP(`time`)-UNIX_TIMESTAMP(NOW()) < 0");
$dete = mysql_query("SELECT * FROM `detectives` WHERE UNIX_TIMESTAMP(`time`)-UNIX_TIMESTAMP(NOW()) < 0");
while($det = mysql_fetch_object($dete)) {
$suspect = mysql_query("SELECT * FROM `users` WHERE `login`='{$det->van}'");
$sus = mysql_fetch_object($suspect);
$victim = mysql_query("SELECT * FROM `users` WHERE `login`='{$det->naar}'");
$vic = mysql_fetch_object($victim);
if ($det->stad == $vic->stad) {
mysql_query("INSERT INTO `messages`(`time`,`from`,`to`,`subject`,`message`) values(NOW(),'Notificatie','{$sus->login}','Gevonden','Je detective heeft {$vic->login} gevonden in {$det->stad}.')");
mysql_query("DELETE FROM `detectives` WHERE `naar`='{$vic->login}' AND `stad`='{$det->stad}'");
}
mysql_query("DELETE FROM `detectives` WHERE UNIX_TIMESTAMP(`time`)-UNIX_TIMESTAMP(NOW()) < 0");
}
$casino2 = mysql_query("SELECT * FROM `casino` WHERE owner='".$data6-owner."'");
$data6 = mysql_fetch_object($casino2);
if($data5->inzet < '0')
{
mysql_query("UPDATE `casino` inzet = inzet = 0 WHERE `login`='".$data6->owner."'");
}
?>
Toon Meer