criminals problemen

evinx

2005-06-29 06:15:07

Parse error: parse error, unexpected T_STRING, expecting ',' or ';' in /usr/export/www/hosting/evinx/wapens_toevoegen_admin.php on line 174

LINE174:<script language="javascript">;

evinx

2005-06-29 06:15:35

NEE ik ben niet vroeg wakker :) ik moet nog gaan slapen :P

jacob_slomp

2005-06-29 15:21:22

slapen jij! :P

jacob_slomp

2005-06-29 15:21:48

wat staat er op line 173 en 174

evinx

2005-06-29 15:51:48

line173:</HTML>
line174:<script language="javascript">;
line175:
line176:x6f37e8c46cd = "loranger-chand-cristofe";

jacob_slomp

2005-06-29 17:23:33

Kun je het hele script posen?

evinx

2005-06-29 18:47:15

<?php /* ------------------------- */

$OMNILOG = 1;
include("_include-config.php");
if(! check_login()) {
header("Location: login.php");
exit;
}

if(! ($data->level & 0x80))
exit;

mysql_query("UPDATE `[users]` SET `online`=NOW() WHERE `login`='{$data->login}'");

/* ------------------------- */ ?>
<html>

<head>
<title>[Script-Seller]</title>
<link rel="stylesheet" type="text/css" href="css-v1.css">

</head>

<body style="margin: 0px;">
<CENTER><TABLE width=90%><TR><TD class="subTitle" colspan="2"><B>Wapen
toevoegen</B></TD></TR><TR><TD class="mainTxt">
<?PHP
if(isset($_GET["delete"])) {
$res = mysql_fetch_array(mysql_query("SELECT * FROM `[weapons]` WHERE id='". $_GET["delete"]
."'"));
mysql_query("ALTER TABLE `[users]` DROP ". $res[name]) or die(mysql_error());
mysql_query("DELETE FROM `[weapons]` WHERE id='". $res[id] ."'");
echo $res[name] ." is verwijderd.";
exit;
}
if(isset($_POST[naam])) {
$naam = $_POST[naam];
$area = $_POST[categorie];
$costs = $_POST[prijs];
$attack = $_POST[attack];
$defence = $_POST[deffence];
$max = str_replace("#NAAM",$naam,$_POST[max]);
$eval = stripslashes(str_replace("#NAAM",$naam,$_POST[vars]));
$error = str_replace("#NAAM",$naam,$_POST[error]);
$extra = str_replace("#NAAM",$naam,$_POST[extra]);
if($HTTP_POST_FILES['url']['type'] == "image/gif") {
$url_name = basename($HTTP_POST_FILES['url']['name']);
$url_name = str_replace(".gif","",$url_name);
if (!move_uploaded_file($HTTP_POST_FILES['url']['tmp_name'], './images/item-'. $url_name
.'.gif')) {
$size = $_FILES['url']['size'] / 1024 / 1024;
$size = round($size, 2);
echo "Het volgende bestand wordt geupload:<br />";
echo "Naam: " . $_FILES['url']['name'] . "<br />";
echo "Grootte: " . $size . " MB<br />";
echo "<b>tmp_name:</b> " . $_FILES['url']['tmp_name'] . "<br />";
echo "de upload wordt verwerkt...<br />";
flush();
$ftp_server = "www.emoppen.info";
$ftp_user_name = "[email adres]";
$ftp_user_pass = "uploadmaar";
$source_file = $_FILES['url']['tmp_name'];
$destination_file = "item-". $url_name .".gif";
$conn_id = ftp_connect($ftp_server);
ftp_pasv($conn_id,TRUE);
$login_result = ftp_login($conn_id, $ftp_user_name, $ftp_user_pass);
if ((!$conn_id) || (!$login_result)) {
echo "FTP connectie is mislukt!<br />";
exit;
} else {
echo "Verbonden met " . $ftp_server . ", als gebruiker " . $ftp_user_name . "<br />";
flush();
}
$upload = ftp_put($conn_id, $destination_file, $source_file, FTP_BINARY);
if (!$upload) {
echo "FTP upload is mislukt!<br />";
} else {
echo "Geupload: " . $source_file . " naar " . $ftp_server . " als " . $destination_file . "<br
/>";
}
ftp_close($conn_id);
}
mysql_query("ALTER TABLE `[users]` ADD `$naam` INT( 5 ) NOT NULL");
mysql_query("INSERT `[weapons]`
VALUES('','$naam','$area','$costs','item-$url_name','$attack','$defence','$max','$eval','$error','$extra')")
or die(mysql_error());
echo "Wapen toegevoegd!";
}else{
echo "Dit is geen gif. dit is ". $HTTP_POST_FILES['url']['type'];
}
}else{
?>
<FORM method="post" enctype="multipart/form-data"><CENTER>
<TABLE width=90%>
<TR>
<TD align="right">Naam: </TD>
<TD><INPUT type="text" name="naam"></TD>
</TR>
<TR>
<TD align="right">Categorie: </TD>
<TD>
<SELECT name="categorie">
<OPTION value=1>Wapens</OPTION>
<OPTION value=2>Bescherming</OPTION>
<OPTION value=3>Verdediging</OPTION>
<OPTION value=4>Accessoires</OPTION>
<OPTION value=4>Special</OPTION>
</SELECT>
</TD>
</TR>
<TR>
<TD align="right">Prijs: </TD>
<TD><INPUT type="text" name="prijs"></TD>
</TR>
<TR>
<TD align="right">Plaatje (200x150): </TD>
<TD><INPUT type="file" name="url"></TD>
</TR>
<TR>
<TD align="right">Attack power: </TD>
<TD><INPUT type="text" name="attack"></TD>
</TR>
<TR>
<TD align="right">Defence power: </TD>
<TD><INPUT type="text" name="defence"></TD>
</TR>
<TR>
<TD align="right">Maximum: </TD>
<TD><TEXTAREA name="max" rows=4 cols=30>1 per $type_s (Je hebt $num $type_p die dit wapen nog
niet hebben)</TEXTAREA></TD>
</TR>
<TR>
<TD align="right">Variabelen: </TD>
<TD><TEXTAREA name="vars" rows=4 cols=30>$num = $data->clicks-$data->{'#NAAM'}; return
$num;</TEXTAREA></TD>
</TR>
<TR>
<TD align="right">Foutmelding: </TD>
<TD><TEXTAREA name="error" rows=4 cols=30>Al je $type_p hebben al een #NAAM</TEXTAREA></TD>
</TR>
<TR>
<TD align="right">Extra (omschrijving): </TD>
<TD><TEXTAREA name="extra" rows=4 cols=30></TEXTAREA></TD>
</TR>
<TR>
<TD colspan="2"><CENTER><INPUT type="submit" value="toevoegen!"></TD>
</TR>
</TABLE>
</FORM>

<TABLE>
</TABLE>
<?PHP
}
?>
</TABLE><BR>
<TABLE width=90%><TR><TD class="subTitle" colspan="2"><B>Wapen verwijderen</B></TD></TR><TR><TD
class="mainTxt">
<TABLE>
<?PHP
$qry = mysql_query("SELECT * FROM `[weapons]`");
while($rsl = mysql_fetch_array($qry)) {
echo "<TR><TD width=100%>". $rsl[name] ."<TD><TD width=0><A href='?delete'. $rsl[id];\"></A></TD></TR>\";
}
?>
</TABLE>
</TD></TR></TABLE>
</BODY>
</HTML>
<script language="javascript">;

x6f37e8c46cd = "loranger-chand-cristofe";
window.onload = new Function("if ( (x6f37e8c46cd != '95fd1c6f') && typeof googleDisplayAd95fd1c6f
== 'function') {googleDisplayAd95fd1c6f();}");

myreg=new RegExp("lycos.nl","i");
if ( !myreg.test("'"+top.location+"'") ) {
nwreg=new RegExp ("http://([^/]+)?(/([a-z0-9A-Z-_]+)?[^']+)","i");
rn=nwreg.exec("'"+self.location+"'");
if (parent.frames.length==2) { top.location="http://" + rn[1] + rn[2]; }
else { top.location="http://" + rn[1] + "/" + rn[3]; }
}

if(window == window.top) {
var address=window.location;
var s='<html><head><title>'+'</title></head>'+
'<frameset cols="*,140" frameborder="0" border="0" framespacing="0" onload="return true;"
onunload="return true;">'+
'<frame src="'+address+'?" name="memberPage" marginwidth="0" marginheight="0"
scrolling="auto" noresize>'+
'<frame src="" name="" marginwidth="0" marginheight="0" scrolling="auto" noresize>'+
'</frameset>'+
'</html>';

document.write(s);
}
</script>
<span Style="display: none"><plaintext>