Ir para conteúdo
Banner com Efeitos
BR seuserver.com.br DESCRIÇÃO: ANUNCIE AQUI neste countdown e dê maior visibilidade ao seu lançamento | Fórum Otserv | Downloads | Tutoriais | IA Especializada para otserv | Lista de Servidores | mais de 10 anos de conteúdos! INICIA EM:

[Ajuda] SQL Inject

Por Farathor
em Suporte Tibia OTServer

Featured Replies

Postado

Galera,Tentei Adicionar O Anti Sql Inject No Meu Site,Mais Não Deu Certo,O Site Fica Assim

154wtj4.png

Meu Layout.php

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<head>
<script type="text/javascript">
function click() {
if (event.button==2||event.button==3) {
oncontextmenu='return false';
}
}
document.onmousedown=click
document.oncontextmenu = new Function("return false;")
</script>
<meta http-equiv='content-language' content='en & pl' />
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<META HTTP-EQUIV="Reply-to" CONTENT="WorldRPGBrasil OT Server">
<meta name="revisit-after" content="1 Days"/>

<meta name="date" content="2012-01-29">
<meta http-equiv="Creation-date" content="2012-01-29 T09:40:00Z" />
<meta http-equiv="pragma" content="no-cache">
<meta content="global" name="distribution">
<meta content="ots" name="classification">
<meta content="general" name="rating">

<link rel="stylesheet" type="text/css" href="<?php echo $layout_name; ?>/css/basic.css" />
<link rel="stylesheet" type="text/css" href="<?php echo $layout_name; ?>/css/tooltip.css" />
<link rel="stylesheet" type="text/css" href="<?php echo $layout_name; ?>/css/screen.css" />
<link rel="stylesheet" type="text/css" href="equipshower/js/tooltip.css" />
<script src='equipshower/js/tooltip.js'></script>
<script type="text/javascript" src="<?PHP echo $layout_name; ?>/jquery.js"></script>
<meta name="page-topic" content="Onix-Pbot">

<meta name='author' content='Farathor :*' />
<meta name='description' content='WorldRPGBrasil OT Server' />
<meta name='keywords' content='WorldRPGBrasil OT Server' />

<link rel="shortcut icon" href="<?php echo $layout_name; ?>/images/server.ico" type="image/x-icon"/>
<link rel="icon" href="<?php echo $layout_name; ?>/images/server.ico" type="image/x-icon"/>

<title>WorldRPGBrasil OT Server</title>

<link rel="stylesheet" type="text/css" href="<?php echo $layout_name; ?>/js2/tooltip.css" />
<script src='<?php echo $layout_name; ?>/js2/tooltip.js'></script>
<script type="text/javascript" src="<?php echo $layout_name; ?>/js/jQuery.js"></script>
<script type="text/javascript" src="<?php echo $layout_name; ?>/js/jQuery2.js"></script>

<script type="text/javascript" src="..<?php echo $layout_name; ?>/js/initialize.js"></script>
<script type='text/javascript'> var IMAGES=0; IMAGES='<?php echo $layout_name; ?>/images'; var g_FormField=''; var LINK_ACCOUNT=0; LINK_ACCOUNT='';</script>
<SCRIPT TYPE="text/javascript">
<!-- // Framekiller
setTimeout ("changePage()", 6000);
function changePage()
{
if (parent.frames.length > 2) {
if (browserTyp == "ie") {
parent.location=document.location;
} else {
self.top.location=document.location;
}
}
}
// -->
</SCRIPT>
<script type='text/javascript'>
$(document).ready(function(){
$("img.a").hover(
function() {
$(this).stop().animate({"opacity": "0"}, "slow");
},
function() {
$(this).stop().animate({"opacity": "1"}, "slow");
});
});
</script>
<script type='text/javascript'>
function GetXmlHttpObject()
{
var xmlHttp=null;
try
{
xmlHttp=new XMLHttpRequest();
}
catch (e)
{
try
{
xmlHttp=new ActiveXObject("Msxml2.XMLHTTP");
}
catch (e)
{
xmlHttp=new ActiveXObject("Microsoft.XMLHTTP");
}
}
return xmlHttp;
}

function MouseOverBigButton(source)
{
source.firstChild.style.visibility = "visible";
}
function MouseOutBigButton(source)
{
source.firstChild.style.visibility = "hidden";
}
function BigButtonAction(path)
{
window.location = path;
}
varloginStatus=0; loginStatus='false';var activeSubmenuItem='latestnews'; var IMAGES=0; IMAGES='http://legoria.eu/<?php echo $layout_name; ?>/images'; var LINK_ACCOUNT=0; LINK_ACCOUNT='http://legoria.eu/';</script>


</head>

<body onBeforeUnLoad="SaveMenu();" onUnload="SaveMenu();" oncontextmenu="return false" onselectstart="return false" ondragstart="return false">
<?php
{
$sql = preg_replace(sql_regcase("/(from|select|insert|delete|where|drop table|show tables|#|\*|--|\\\\)/"),"",$sql);
$sql = trim($sql);
$sql = strip_tags($sql);
$sql = addslashes($sql);
return $sql;
}

function protect($str)
{
if( !is_array($str) ) {
$str = preg_replace("/(from|select|insert|delete|where|drop table|show tables)/i","",$str);
$str = preg_replace('~&amp;#x([0-9a-f]+);~ei', 'chr(hexdec("\\1"))',$str);
$str = preg_replace('~&amp;#([0-9]+);~e', 'chr("\\1")',$str);
$str = str_replace("<script","",$str);
$str = str_replace("script>","",$str);
$str = str_replace("<Script","",$str);
$str = str_replace("Script>","",$str);
$str = trim($str);
$tbl = get_html_translation_table(HTML_ENTITIES);
$tbl = array_flip($tbl);
$str = addslashes($str);
$str = strip_tags($str);
return strtr($str,$tbl);
}
else return $str;
}

$nome = anti_injection($_POST["nome"]);
$senha = anti_injection($_POST["senha"]);

$link = htmlspecialchars($_POST['link'], ENT_QUOTES);
echo $link;

header("Content-Type: text/html; charset=ISO-8859-1",true)?>
<div id='page'>
<div id='logo'>
<div class='img'>
<div id='menu_top_home'>
<a href="?subtopic=latestnews">
<div class='fadehover'>
<img src='<?php echo $layout_name; ?>/images/bar/home.png' alt='Legoria.eu :: PvP' class='a' />
<img src='<?php echo $layout_name; ?>/images/bar/home_on.png' alt='Legoria.eu :: PvP' class='b' />
</div>
</a>
</div>
<div id='menu_top_acc'>
<a href="?subtopic=accountmanagement">
<div class='fadehover'>
<img src='<?php echo $layout_name; ?>/images/bar/account.png' alt='Legoria.eu :: PvP' class='a' />
<img src='<?php echo $layout_name; ?>/images/bar/account_on.png' alt='Legoria.eu :: PvP' class='b' />
</div>
</a>
</div>
<div id='menu_top_guild'>
<a href="?subtopic=guilds">
<div class='fadehover'>
<img src='<?php echo $layout_name; ?>/images/bar/guilds.png' alt='Legoria.eu :: PvP' class='a' />
<img src='<?php echo $layout_name; ?>/images/bar/guilds_on.png' alt='Legoria.eu :: PvP' class='b' />
</div>
</a>
</div>
<div id='menu_top_shop'>
<a href="?subtopic=shopsystem">
<div class='fadehover'>
<img src='<?php echo $layout_name; ?>/images/bar/shop.png' alt='Legoria.eu :: PvP' class='a' />
<img src='<?php echo $layout_name; ?>/images/bar/shop_on.png' alt='Legoria.eu :: PvP' class='b' />
</div>
</a>
</div>

<div id='menu_top_forum'>
<a href="?subtopic=forum">
<div class='fadehover'>
<img src='<?php echo $layout_name; ?>/images/bar/forum.png' alt='Legoria.eu :: PvP' class='a' />
<img src='<?php echo $layout_name; ?>/images/bar/forum_on.png' alt='Legoria.eu :: PvP' class='b' />
</div>
</a>
</div>
<div id='menu_top_high'>
<a href="?subtopic=highscores">
<div class='fadehover'>
<img src='<?php echo $layout_name; ?>/images/bar/highscores.png' alt='Legoria.eu :: PvP' class='a' />
<img src='<?php echo $layout_name; ?>/images/bar/highscores_on.png' alt='Legoria.eu :: PvP' class='b' />
</div>
</a>
</div>

<div id='menu_top_online'>
<center><a href="?subtopic=whoisonline">
<center><?PHP
if(count($config['site']['worlds']) > 1)
$whoisonlineworld = '?subtopic=whoisonline';
else
$whoisonlineworld = '?subtopic=whoisonline&world=0';
?>
<b><div id="PlayersOnline" onClick="window.location='<?PHP echo $whoisonlineworld; ?>'"> <b><font color="#00FF00"> <?PHP if($config['status']['serverStatus_online'] == 1) echo $config['status']['serverStatus_players'].'</font> / <font color="red">150</font>'; else echo '<font color="red"><b>Server<br />OFFLINE</b></font>'; ?>
</div></center></a></center> <a href="?subtopic=createaccount">

<div class='fadehover'>
<img src='<?php echo $layout_name; ?>/images/bar/register.png' class='a' />
<img src='<?php echo $layout_name; ?>/images/bar/register_on.png' class='b' />
</div>
</a>
</div>
</div>
</div>

<div id='menu'>
<div class='nav-top'>
<div class='text'>
<div id="icon-news"></div>
Servidor
</div>
</div>
<div class='bg'>
<ul>
<li><a href="?subtopic=latestnews"><b>Notícias</b></a></li>
<li><a href="?subtopic=bans"><b>Banimentos</b></a></li>
<?php
if($group_id_of_acc_logged >= $config['site']['access_admin_panel'])
echo '<li><a href="?subtopic=adminpanel"><font color="red"><b>! Painel do Administrador !</b></font></a></li>';
if($group_id_of_acc_logged >= $config['site']['access_admin_panel'])
echo '<li><a href="?subtopic=namelock"><font color="red"><b>! Name Lock !</b></font></a></li>';
if($group_id_of_acc_logged >= $config['site']['access_admin_panel'])
echo '<li><a href="?subtopic=shopadmin"><font color="red"><b>! Shop Admin !</b></font></a></li>';
if($group_id_of_acc_logged >= $config['site']['access_admin_panel'])
echo '<li><a href="?subtopic=auctionpanel"><font color="red"><b>! Auction Panel !</b></font></a></li>';
if($group_id_of_acc_logged >= $config['site']['access_admin_panel'])

{
echo '
<li><a href="?subtopic=accountmanagement"><b>Minha Conta</b></a></li>
<li><a href="?subtopic=accountmanagement&action=logout"><b>Sair</b></a></li>
<li><a href="?subtopic=guilds&action=createguild"><font color="yellow"><b>Criar Guild</font></b></a></li>
<li><a href="?subtopic=createaccount"><b>Criar Conta</b></a></li>
<li><a href="?subtopic=lostaccount"><b>Recuperar Conta</b></a></li>';
}
else
{
echo '<li><a href="?subtopic=accountmanagement"><b>Entrar Na Conta</b></a></li>';
echo '<li><a href="?subtopic=createaccount"><b>Criar Conta</b></a></li>';
echo '<li><a href="?subtopic=lostaccount"><b>Recuperar Conta</b></a></li>';
}
?>



</ul>
</div>
<div class='nav-top'>
<div class='text'>
<div id="icon-community"></div>
Community
</div>
</div>
<div class='bg'>
<ul>
<li><a href="?subtopic=characters"><b>Personagens</b></a></li>
<li><a href="?subtopic=whoisonline"><b>Jogadores Onlines</b></a></li>
<li><a href="?subtopic=highscores"><b>Ranking</b></a></li>
<li><a href="?subtopic=frags"><b>Top Frags</b></a></li>
<li><a href="?subtopic=killstatistics"><b>Ultimas Mortes</b></a></li>
<li><a href="?subtopic=guilds"><b>Guilds</b></a></li>
<li><a href="?subtopic=topguilds"><b><font color="yellow">Top Guilds</font></b></a></li>
<li><a href="?subtopic=wars"><b><font color="red">Wars</font></b></a></li>
</ul>
</div>
<div class='nav-top'>
<div class='text'>
<div id="icon-library"></div>
Library
</div>
</div>
<div class='bg'>
<ul>
<li><a href="?subtopic=downloads"><b>Download</b></a></li>
<li><a href="?subtopic=tibiarules"><b>Regras</b></a></li>
</ul>
</div>


<div class='nav-top'>
<div class='text'>
<div id="icon-shop"></div>
Shop
</div>
</div>
<div class='bg'>
<ul>
<li><a href="?subtopic=donate"><b><font color="red">Buy Points</font></b></a></li>
<li><a href="?subtopic=shopsystem"><b><font color="green">Shop Offer</font></b></a></li>
</ul>
</div>
<div id="menu_bot"></div>
</div>

<div id='content'>


<div id="cnt-right">
<div id="content-cnt">
<div id="content-bg">
<div id="content-top">
<div id="content-bot">
<?php echo $main_content; ?>
</div>
</div>
</div>
</div>
</div>
<div id="footer"><p style="color: #FFF;">&copy2014 - Todos os direito reservados - WorldRPGBrasil.</p></div>
</div>

<div id="cnt-box2">
<div id='menu'>
<div class='nav-top'>
<div class='text'>
<div id="icon-status"></div>
Status

</div>
</div>

<div class='bg'>

<center> <?PHP
if($config['status']['serverStatus_online'] == 1)
echo '<img src="online.png">';
else
echo '<img src="offline.png" width="143px" height="40px">';
?>
</center>
</div>



<div class='nav-top'>
<div class='text'>
<div id="icon-sss"></div>
Systems
</div>
</div>
<div class='bg'>
<ul>
<li><a href="?subtopic=addons"><b>Addons</b></a></li>
<li><a href="?subtopic=addonbonus"><b>Addon Bonus</b></a></li>
</ul>
</div>

<div id="cnt-box3">
<div id='menu'>
<div class='nav-top'>
<div class='text'>
<div id="icon-events"></div>
Events
</div>
</div>
<div class='bg'>
<ul>
<li><a href="?subtopic=zombievent"><b>Zombie</b></a></li>
<li><a href="?subtopic=BattleField"><b>Battlefield</b></a></li>

</ul>
<div id="cnt-box4">
<div id='menu'>
<div class='nav-top'>
<div class='text'>
Facebook
</div>
</div>
<div class=''>
<iframe src="//www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2FWorldRPGBrasil&amp;width=190&amp;height=62&amp;colorscheme=light&amp;show_faces=false&amp;header=true&amp;stream=false&amp;show_border=true" scrolling="no" frameborder="0" style="border:none; overflow:hidden; width:190px; height:62px;" allowTransparency="true"></iframe>
</ul>
</div>
<div id="menu_bot"></div>
</div>
<div id="menu-bottom2">&nbsp;</div>

</div>
</body>

Editado por Farathor (veja o histórico de edições)

[progress=green]50[/progress]

 

  • Citar
  • Mention
    • Respostas 10
    • Visualizações 1.2k
    • Created
    • Última resposta

    Top Posters In This Topic

    Popular Days

    Participe da conversa

    Você pode postar agora e se cadastrar mais tarde. Se você tem uma conta, faça o login para postar com sua conta.

    Visitante
    Responder
    Ir para a lista de tópicos

    Quem Está Navegando 0

    • Nenhum usuário registrado visualizando esta página.

    Estatísticas dos Fóruns

    • Tópicos 96.9k
    • Posts 519.7k

    Informação Importante

    Confirmação de Termo

    I accept