Account Sistemi Hata

Nicole · 2008-03-16T17:07:12+00:00

Parse error: syntax error, unexpected '091;' in C:AppServwwwindex.php on line 59 Hata bu. Sistemde bu;/b lt;? //----------------------------------------------------------------------------------------------------------------- // Portal Account Sistemi 2b // www.portalservisleri.com // sistemin kullanim hakki gizlidir. // sinangunayportalservisleri.com - muratkaratasportalservisleri.com //----------------------------------------------------------------------------------------------------------------- mysqlconnect(quot;localhostquot;,quot;quot;,quot;quot;); mysqlselectdb(quot;quot;); sessionstart(); //----------------------------------------------------------------------------------------------------------------- // Güvenlik Ayarlari //----------------------------------------------------------------------------------------------------------------- if( !getmagicquotesgpc() ) if( isarray(GET) ) while( list(k, v) each(GET) ) if( isarray(GET091;k093;) ) while( list(k2, v2) each(GET091;k093;) ) GET091;k093;091;k2093; addslashes(v2); reset(GET091;k093;); else GET091;k093; addslashes(v); reset(GET); if( isarray(POST) ) while( list(k, v) each(POST) ) if( isarray(POST091;k093;) ) while( list(k2, v2) each(POST091;k093;) ) POST091;k093;091;k2093; addslashes(v2); reset(POST091;k093;); else POST091;k093; addslashes(v); reset(POST); if( isarray(COOKIE) ) while( list(k, v) each(COOKIE) ) if( isarray(COOKIE091;k093;) ) while( list(k2, v2) each(COOKIE091;k093;) ) COOKIE091;k093;091;k2093; addslashes(v2); reset(COOKIE091;k093;); else COOKIE091;k093; addslashes(v); reset(COOKIE); foreach (GET as secvalue) //XSS acigi fixi if ((eregi(quot;lt;091;gt;093;scriptquot;?091;gt;093;gt;quot;, secvalue)) (eregi(quot;lt;091;gt;093;objectquot;?091;gt;093;gt;quot;, secvalue)) (eregi(quot;lt;091;gt;093;iframequot;?091;gt;093;gt;quot;, secvalue)) (eregi(quot;lt;091;gt;093;appletquot;?091;gt;093;gt;quot;, secvalue)) (eregi(quot;lt;091;gt;093;metaquot;?091;gt;093;gt;quot;, secvalue)) (eregi(quot;lt;091;gt;093;stylequot;?091;gt;093;gt;quot;, secvalue)) (eregi(quot;lt;091;gt;093;formquot;?091;gt;093;gt;quot;, secvalue)) (eregi(quot;lt;091;gt;093;imgquot;?091;gt;093;gt;quot;, secvalue)) (eregi(quot;lt;091;gt;093;spanquot;?091;gt;093;gt;quot;, secvalue)) (eregi(quot;lt;091;gt;093;h1quot;?091;gt;093;gt;quot;, secvalue)) (eregi(quot;lt;091;gt;093;tablequot;?091;gt;093;gt;quot;, secvalue)) (eregi(quot;lt;091;gt;093;bodyquot;?091;gt;093;gt;quot;, secvalue)) (eregi(quot;lt;091;gt;093;prequot;?091;gt;093;gt;quot;, secvalue)) (eregi(quot;lt;091;gt;093;emquot;?091;gt;093;gt;quot;, secvalue)) (eregi(quot;lt;091;gt;093;inputquot;?091;gt;093;gt;quot;, secvalue)) (eregi(quot;lt;091;gt;093;tdquot;?091;gt;093;gt;quot;, secvalue)) (eregi(quot;lt;091;gt;093;optionquot;?091;gt;093;gt;quot;, secvalue)) (eregi(quot;;quot;, secvalue)) (eregi(quot;'quot;, secvalue)) (eregi(quot;quot;, secvalue)) (eregi(quot;quot;, secvalue)) // (eregi('', secvalue)) (eregi(quot;quot;quot;, secvalue))) die (quot;ueuehueheu komik olma...quot;); //----------------------------------------------------------------------------------------------------------------- // Script Baslangici //----------------------------------------------------------------------------------------------------------------- DosyaAdi quot;index.phpquot;; ServerAdi quot;Mirrandisquot;; Hosting quot;https://217.172.48.251quot;; scriptyol quot;https://217.172.48.251/accquot;; echo quot;lt;headgt;lt;titlegt;serveradilt;/titlegt;quot;. quot;lt;stylegt;body scrollbar-3d-light-color: 000000; scrollbar-arrow-color: ffffff; scrollbar-base-color: ffffff; scrollbar-dark-shadow-color: 000000; scrollbar-face-color: 000000; scrollbar-highlight-color: ffffff; scrollbar-shadow-color: 000000; scrollbar-track-color: 4e4e4e body background color:008888 fixed; lt;/stylegt;quot;. quot;lt;centergt;quot;. quot;lt;stylegt;quot;. quot;TD font-family:verdana; font-size:10px; quot;. quot;Th background-color:f3e7aa; color:000000; height:20px; font-family:verdana; font-size:10px; border:0px solid 000000; quot;. quot;Tr background-color:f3e7aa; color:000000; height:29px; font-family:verdana; font-size:10px; border:0px solid 000000; quot;. quot;TABLE border:0px solid 000000; quot;. quot;INPUT border:0px solid 000000; quot;. quot;A text-decoration:none; color:000000; quot;. quot;lt;/stylegt;quot;. quot;lt;/centergt;quot;. quot;lt;/headgt;lt;bodygt;lt;centergt;quot;. quot; quot;; Switch (GET091;islem093;) Case quot;unuttumquot;: if (isset(POST091;email093;)) sorgu mysqlquery(quot;select from uye where email'POST091;email093;'quot;); if (!mysqlnumrows(sorgu)) echo quot;Böyle bir email bulunamadiquot;; else mailsifrehatirlat(sorgu); echo tablogoster(quot;Sifre hatirlatma mailiniz gönderildiquot;); echo 'lt;centergt;lt;form actionquot;'.PHPSELF.'?islemunuttumquot; methodPOSTgt;lt;table width310gt;lt;trgt;lt;thgt; Sifre Hatirlatmalt;/thgt;lt;/trgt;lt;trgt;lt;tdgt;Email Adresiniz : lt;INPUT size12 TYPEquot;textquot; NAMEquot;emailquot;gt; lt;INPUT TYPEquot;submitquot; valuequot;Sifremi Gönderquot; stylewidth:100; gt;lt;/tdgt;lt;/trgt;lt;/tablegt;lt;/formgt;'; break; Case quot;kayitquot;: if (isset(POST091;username093;)) hata quot;quot;; POST091;isim093; trim(POST091;isim093;); POST091;username093; trim(POST091;username093;); POST091;password093; trim(POST091;password093;); POST091;email093; trim(POST091;email093;); if (strlen(POST091;isim093;) lt; 5 or strlen(POST091;isim093;) gt; 30 ) hata . quot;Isim soyad 5 karakterden küçük 30 karakterden büyük olamazlt;brgt;quot;; if (strtolower(POST091;username093;) quot;eofquot; or strtolower(POST091;username093;) quot;administratorquot; or strtolower(POST091;username093;) quot;remoteadminquot;) hata . quot;Seçtiginiz kullanici adi ile sisteme baglanamazsinizquot;; if (hatalikaraktervarmi(POST091;username093;)) hata . quot;Kullanici adinizda hatali karakterler varlt;brgt;quot;; if (hatalikaraktervarmi(POST091;password093;)) hata . quot;Sifrenizde adinizda hatali karakterler varlt;brgt;quot;; if (strlen(POST091;username093;) lt; 5 or strlen(POST091;username093;) gt; 16 ) hata . quot;Kullanici Adi 5 karakterden küçük 16 karakterden büyük olamazlt;brgt;quot;; if (strlen(POST091;password093;) lt; 5 or strlen(POST091;password093;) gt; 16 ) hata . quot;Sifre 5 karakterden küçük 16 karakterden büyük olamazlt;brgt;quot;; // if(!ereg(quot;....quot;, POST091;email093;)) hata . quot; POST091;email093; geçerli bir email degil.lt;brgt;nquot;; if (mysqlnumrows(mysqlquery(quot;select email from uye where email 'POST091;email093;' or kayitemail 'POST091;email093;'quot;))) hata . quot; POST091;email093; adresi sistemimize daha önceden kayitlidir lütfen baska bir email girinizlt;brgt;quot;; if (mysqlnumrows(mysqlquery(quot;select username from uye where username 'POST091;username093;'quot;))) hata . quot; POST091;username093; kullanici adi sistemimize daha önceden kayitlidir lütfen baska bir kullanici adi girinizlt;brgt;quot;; if (hata ! quot;quot;) echo tablogoster(quot;lt;bgt;Doldurdugunuz Formda Bazi hatalar bulundu lütfen bu hatalari giderip tekrar deneyiniz lt;brgt;lt;/bgt;lt;brgt;hataquot;); else extract(POST); onay (1); mysqlquery(quot;insert into uye (username,password,isim,email,kayitemail,onay) values('username','password','isim','email','email','onay')quot;); echo tablogoster(quot;Tebrikler üye oldunuz. Oyun Accountunuzun açilmasi için asagidaki linke tiklayin.lt;brgt; lt;a href'scriptyol?islemakivamp;kodonayamp;usernameusername'gt;AKTIF ETlt;/agt;quot;); else uyelikformugoster(); Break; Case quot;loginquot;: sorgu mysqlquery(quot;select id,onay from uye where username'POST091;username093;' and password'POST091;password093;'quot;); if (mysqlnumrows(sorgu)) field mysqlfetchobject(sorgu); SESSION091;'userid'093; field-gt;id; echo tablogoster(quot;Login oldunuz yönlendiriliyorsunuzquot;); echo quot;lt;META HTTP-EQUIVRefresh CONTENTquot;2; URLscriptyolquot;gt;quot;; else echo tablogoster(quot;Hatali kullanici adi yada sifrequot;); Break; Case quot;sifreunuttumquot;: Break; Case quot;akivquot;: if (mysqlnumrows(mysqlquery(quot;select from uye where username'GET091;username093;' and onay'GET091;kod093;'quot;))) mysqlquery(quot;update uye set onay'1' where username'username'quot;); row mysqlfetchassoc(mysqlquery(quot;select username,password from uye where username'GET091;username093;'quot;)); accountdosyasinayaz(row091;username093;,row091;password093;); echo tablogoster(quot;Tebrikler üyeliginiz aktif oldu.Oyun hesabiniz açildi hemen oynamaya baslayabilirsiniz.quot;); else echo tablogoster(quot;Hata : Böyle bir kullanici bulunamadi yada hatali onay koduquot;); Break; Case quot;logoutquot;: sessiondestroy(); echo tablogoster(quot;Çikis Yaptinizquot;); echo quot;lt;META HTTP-EQUIVRefresh CONTENTquot;2; URLscriptyolquot;gt;quot;; Break; Case quot;bilgilerimquot;: if (!isnumeric(SESSION091;userid093;)) die(quot;Buraya login olmadan erisemezsinizquot;); echo quot;lt;table width310gt;lt;trgt;lt;thgt;lt;a hrefPHPSELFgt;Görünüsüm lt;/agt; lt;a hrefPHPSELF?islembilgilerimgt;Bilgilerimlt;/agt; lt;a hrefPHPSELF?islemlogoutgt;Çikislt;/agt;lt;/thgt;lt;/trgt;lt;/tablegt;lt;brgt;quot;; if (isset(POST091;isim093;)) hata quot;quot;; POST091;isim093; trim(POST091;isim093;); POST091;password093; trim(POST091;password093;); POST091;email093; trim(POST091;email093;); extract(mysqlfetchassoc(mysqlquery(quot;select from uye where id'SESSION091;userid093;'quot;))); if (strlen(POST091;isim093;) lt; 5 or strlen(POST091;isim093;) gt; 30 ) hata . quot;Isim soyad 5 karakterden küçük 30 karakterden büyük olamazlt;brgt;quot;; if (POST091;password093; ! quot;quot; and strlen(POST091;password093;) lt; 5 or strlen(POST091;password093;) gt; 16 ) hata . quot;Sifre 5 karakterden küçük 16 karakterden büyük olamazlt;brgt;quot;; if (hatalikaraktervarmi(POST091;password093;)) hata . quot;Sifrenizde adinizda hatali karakterler varlt;brgt;quot;; if (POST091;email093;!email) if (mysqlnumrows(mysqlquery(quot;select email from uye where email 'POST091;email093;' or kayitemail 'POST091;email093;'quot;))) hata . quot; POST091;email093; adresi sistemimize daha önceden kayitlidir lütfen baska bir email girinizlt;brgt;quot;; if(!ereg(quot;....quot;, POST091;email093;)) hata . quot; POST091;email093; geçerli bir email degil.lt;brgt;nquot;; if (mysqlnumrows(mysqlquery(quot;select username from uye where username 'POST091;username093;'quot;))) hata . quot; POST091;username093; kullanici adi sistemimize daha önceden kayitlidir lütfen baska bir kullanici adi girinizlt;brgt;quot;; if (hata ! quot;quot;) echo tablogoster(quot;lt;bgt;Doldurdugunuz Formda Bazi hatalar bulundu lütfen bu hatalari giderip tekrar deneyiniz lt;brgt;lt;/bgt;hataquot;); else if (POST091;password093; ! quot;quot;) ekle quot; ,password'POST091;password093;'quot;; if (POST091;email093;!email) ekle . quot; ,email'POST091;email093;'quot;; mysqlquery(quot;update uye set isim'POST091;isim093;'ekle where idSESSION091;userid093;quot;); row mysqlfetchassoc(mysqlquery(quot;select username,password from uye where idSESSION091;userid093;quot;)); accountdosyasinayaz(row091;username093;,row091;password093;); echo tablogoster(quot;Bilgileriniz güncellendiquot;); uyelikbilgiduzenle(); Break; default: if (isnumeric(SESSION091;userid093;)) echo quot;lt;table width310gt;lt;trgt;lt;thgt;lt;a hrefPHPSELFgt;Görünüsüm lt;/agt; lt;a hrefPHPSELF?islembilgilerimgt;Bilgilerimlt;/agt; lt;a hrefPHPSELF?islemlogoutgt;Çikislt;/agt;lt;/thgt;lt;/trgt;lt;/tablegt;lt;brgt;quot;; uyelikbilgigoster(); else uyeloginformugoster(); // switch sonu function uyeloginformugoster() global ServerAdi; printlt;lt;lt;EOF lt;form actionDosyaAdi?islemlogin methodPOSTgt; lt;table borderquot;0quot; width310gt; lt;trgt; lt;th widthquot;100quot; colspanquot;2quot;gt;ServerAdi Kullanici Girisilt;/thgt; lt;/trgt; lt;tr styleheight:10;gt; lt;tdgt;Kullanici Adilt;/tdgt; lt;tdgt;lt;input typequot;textquot; maxlengthquot;16quot; namequot;usernamequot; sizequot;15quot;gt;lt;/tdgt; lt;/trgt; lt;tr styleheight:10;gt; lt;tdgt;Sifrelt;/tdgt; lt;tdgt;lt;input typequot;passwordquot; maxlengthquot;16quot; namequot;passwordquot; sizequot;15quot;gt;lt;/tdgt; lt;/trgt; lt;trgt; lt;td widthquot;100quot; colspanquot;2quot;gt;lt;p alignquot;centerquot;gt;lt;a hrefPHPSELF?islemkayitgt;Kayitlt;/agt; lt;a hrefPHPSELF?islemunuttumgt;Sifremi unuttumlt;/agt; lt;input typequot;submitquot; valuequot;Girisquot; namequot;B1quot;gt; lt;/tdgt; lt;/trgt; lt;/tablegt; lt;/formgt; EOF; function uyelikformugoster() global ServerAdi; printlt;lt;lt;EOF lt;centergt;lt;form actionquot;PHPSELF?islemkayitquot; methodPOSTgt; lt;table borderquot;0quot;gt; lt;trgt; lt;tH widthquot;100quot; colspanquot;2quot;gt;ServerAdi Kullanici Kayit Formult;/tHgt; lt;/trgt; lt;trgt; lt;td widthquot;50quot;gt;Isim Soyadlt;/tdgt; lt;td widthquot;50quot;gt;lt;input typequot;textquot; namequot;isimquot; maxlengthquot;30quot; sizequot;20quot;gt;lt;/tdgt; lt;/trgt; lt;trgt; lt;td widthquot;50quot;gt;Kullanici Adilt;/tdgt; lt;td widthquot;50quot;gt;lt;input typequot;textquot; namequot;usernamequot; maxlengthquot;16quot; sizequot;20quot;gt;lt;/tdgt; lt;/trgt; lt;trgt; lt;td widthquot;50quot;gt;Sifrelt;/tdgt; lt;td widthquot;50quot;gt;lt;input typequot;passwordquot; namequot;passwordquot; maxlengthquot;16quot; sizequot;20quot;gt;lt;/tdgt; lt;/trgt; lt;trgt; lt;td widthquot;50quot;gt;Emaillt;/tdgt; lt;td widthquot;50quot;gt;lt;input typequot;textquot; namequot;emailquot; sizequot;20quot;gt;lt;/tdgt; lt;/trgt; lt;trgt; lt;td widthquot;100quot; colspanquot;2quot;gt;lt;p alignquot;centerquot;gt;lt;input typequot;submitquot; valuequot;Yollaquot; namequot;B1quot;gt;lt;/tdgt; lt;/trgt; lt;/tablegt; lt;/centergt; EOF; function uyelikbilgiduzenle() global ServerAdi; extract(mysqlfetchassoc(mysqlquery(quot;select from uye where id'SESSION091;userid093;'quot;))); //echo username; printlt;lt;lt;EOF lt;form actionquot;PHPSELF?islembilgilerimquot; methodPOSTgt; lt;table borderquot;0quot; width310gt; lt;trgt; lt;th widthquot;100quot; colspanquot;2quot;gt;isim Kullanici Bilgilerilt;/thgt; lt;/trgt; lt;trgt; lt;td widthquot;50quot;gt;Isim Soyadlt;/tdgt; lt;td widthquot;50quot;gt;lt;input typequot;textquot; namequot;isimquot; sizequot;20quot; valuequot;isimquot;gt;lt;/tdgt; lt;/trgt; lt;trgt; lt;td widthquot;50quot;gt;Kullanici Adilt;/tdgt; lt;td widthquot;50quot;gt;usernamelt;/tdgt; lt;/trgt; lt;trgt; lt;td widthquot;50quot;gt;Sifrelt;/tdgt; lt;td widthquot;50quot;gt;lt;input typequot;passwordquot; namequot;passwordquot; sizequot;20quot;gt;lt;/tdgt; lt;/trgt; lt;trgt; lt;td widthquot;100quot; colspan2gt;Sifre degisikligi istemiyorsaniz bos birakiniz.lt;/tdgt; lt;/trgt; lt;trgt; lt;td widthquot;50quot;gt;Emaillt;/tdgt; lt;td widthquot;50quot;gt;lt;input typequot;textquot; namequot;emailquot; sizequot;20quot; valuequot;emailquot;gt;lt;/tdgt; lt;/trgt; lt;trgt; lt;td widthquot;100quot; colspanquot;2quot;gt;lt;p alignquot;centerquot;gt;lt;input typequot;submitquot; valuequot;Yollaquot; namequot;B1quot;gt;lt;/tdgt; lt;/trgt; lt;/tablegt; lt;/centergt; EOF; function mailsifrehatirlat(sorgu) row mysqlfetchassoc(sorgu); mail quot;Web sitemizden yapmis oldugunuz sifre hatirlatma islemi sonucu sifrenizi bildiriyoruz : nquot;. quot; Kullanici Adiniz : row091;username093; nquot;. quot; Sifreniz : row091;password093; nquot;; mail(row091;email093;,quot;ServerAdi Sifre Hatirlatmasiquot;,mail); //echo quot;lt;pregt;quot;;printr(row);echo quot;lt;/pregt;quot;; function uyelikbilgigoster() global ServerAdi,PHPSELF; extract(mysqlfetchassoc(mysqlquery(quot;select from uye where id'SESSION091;userid093;'quot;))); printlt;lt;lt;EOF lt;table borderquot;0quot; width310gt; lt;trgt; lt;th widthquot;100quot; colspanquot;2quot;gt;isim Kullanici Bilgilerilt;/thgt; lt;/trgt; lt;trgt; lt;td widthquot;50quot;gt;Isim Soyadlt;/tdgt; lt;td widthquot;50quot;gt;isimlt;/tdgt; lt;/trgt; lt;trgt; lt;td widthquot;50quot;gt;Kullanici Adilt;/tdgt; lt;td widthquot;50quot;gt;usernamelt;/tdgt; lt;/trgt; lt;trgt; lt;td widthquot;50quot;gt;Sifrelt;/tdgt; lt;td widthquot;50quot;gt;lt;/tdgt; lt;/trgt; lt;trgt; lt;td widthquot;50quot;gt;Emaillt;/tdgt; lt;td widthquot;50quot;gt;emaillt;/tdgt; lt;/trgt; lt;trgt; lt;form actionPHPSELFgt;lt;input namequot;islemquot; typequot;hiddenquot; valuequot;bilgilerimquot;gt;lt;/trgt; lt;trgt; lt;td widthquot;100quot; colspanquot;2quot;gt;lt;p alignquot;centerquot;gt;lt;input typequot;submitquot; valuequot;Degistirquot; namequot;B1quot;gt;lt;/tdgt;lt;/formgt; lt;/trgt; lt;/tablegt; lt;/centergt; EOF; //echo quot;lt;pregt;quot;;printr(POST);echo quot;lt;/pregt;quot;; //echo quot;lt;pregt;quot;;printr(SESSION);echo quot;lt;/pregt;quot;; function tablogoster(mesaj) return quot;lt;table width310gt;lt;trgt;lt;thgt;mesajlt;/thgt;lt;/trgt;lt;/tablegt;quot;; function hatalikaraktervarmi(text) // hatliysa true döndür for (i 0; ilt;strlen(text); i) if (!strpos(quot;qwertyuopasdfghjklizxcvbnm1234567890quot;,strtolower(text091;i093;))) return true; return false; function accountdosyasinayaz(username,password) username trim(username); password trim(password); dosyaadi 'C:sphereaccountssphereacct.scp'; icerik quot;091;username093;quot;. chr(13). quot;npasswordpasswordquot;. chr(13) . quot;nplevel1quot; . chr(13) .quot;nquot; ; if (iswritable(dosyaadi)) if (!handle fopen(dosyaadi, 'a')) tablogoster(quot;Teknik Bir Sorundan dolayi su anda sistem hesabinizi güncelleyemiyor.quot;); die(); if (!fwrite(handle, icerik)) tablogoster(quot;Teknik Bir Sorundan dolayi su anda sistem hesabinizi güncelleyemiyor.quot;); die(); fclose(handle); else tablogoster(quot;Teknik Bir Sorundan dolayi su anda sistem hesabinizi güncelleyemiyor.quot;); die(); ?gt; Acaba neden verio bu hatayı?

Nicole

Novice

1.4

34 Yalova , Türkiye
72.10 179 0

Parse error: syntax error, unexpected '[' in C:\AppServ\www\index.php on line 59

Hata bu.

Sistemde bu;[/b]

<? //----------------------------------------------------------------------------------------------------------------- // Portal Account Sistemi 2b // www.portalservisleri.com // sistemin kullanim hakki gizlidir. // [email protected] - [email protected] //----------------------------------------------------------------------------------------------------------------- mysql_connect("localhost","",""); mysql_select_db(""); session_start(); //----------------------------------------------------------------------------------------------------------------- // Güvenlik Ayarlari //----------------------------------------------------------------------------------------------------------------- if( !get_magic_quotes_gpc() ) { if( is_array($_GET) ) { while( list($k, $v) = each($_GET) ) { if( is_array($_GET[$k]) ) { while( list($k2, $v2) = each($_GET[$k]) ) { $_GET[$k][$k2] = addslashes($v2); } @reset($_GET[$k]); } else { $_GET[$k] = addslashes($v); } } @reset($_GET); } if( is_array($_POST) ) { while( list($k, $v) = each($_POST) ) { if( is_array($_POST[$k]) ) { while( list($k2, $v2) = each($_POST[$k]) ) { $_POST[$k][$k2] = addslashes($v2); } @reset($_POST[$k]); } else { $_POST[$k] = addslashes($v); } } @reset($_POST); } if( is_array($_COOKIE) ) { while( list($k, $v) = each($_COOKIE) ) { if( is_array($_COOKIE[$k]) ) { while( list($k2, $v2) = each($_COOKIE[$k]) ) { $_COOKIE[$k][$k2] = addslashes($v2); } @reset($_COOKIE[$k]); } else { $_COOKIE[$k] = addslashes($v); } } @reset($_COOKIE); } } foreach ($_GET as $secvalue) { //XSS acigi fixi if ((eregi("<[^>]*script*"?[^>]*>", $secvalue)) || (eregi("<[^>]*object*"?[^>]*>", $secvalue)) || (eregi("<[^>]*iframe*"?[^>]*>", $secvalue)) || (eregi("<[^>]*applet*"?[^>]*>", $secvalue)) || (eregi("<[^>]*meta*"?[^>]*>", $secvalue)) || (eregi("<[^>]*style*"?[^>]*>", $secvalue)) || (eregi("<[^>]*form*"?[^>]*>", $secvalue)) || (eregi("<[^>]*img*"?[^>]*>", $secvalue)) || (eregi("<[^>]*span*"?[^>]*>", $secvalue)) || (eregi("<[^>]*h1*"?[^>]*>", $secvalue)) || (eregi("<[^>]*table*"?[^>]*>", $secvalue)) || (eregi("<[^>]*body*"?[^>]*>", $secvalue)) || (eregi("<[^>]*pre*"?[^>]*>", $secvalue)) || (eregi("<[^>]*em*"?[^>]*>", $secvalue)) || (eregi("<[^>]*input*"?[^>]*>", $secvalue)) || (eregi("<[^>]*td*"?[^>]*>", $secvalue)) || (eregi("<[^>]*option*"?[^>]*>", $secvalue)) || (eregi(";", $secvalue)) || (eregi("'", $secvalue)) || (eregi("´", $secvalue)) || (eregi("`", $secvalue)) || // (eregi('+', $secvalue)) || (eregi(""", $secvalue))) { die ("ueuehueheu komik olma..."); } } //----------------------------------------------------------------------------------------------------------------- // Script Baslangici //----------------------------------------------------------------------------------------------------------------- $DosyaAdi = "index.php"; $ServerAdi = "Mirrandis"; $Hosting = "https://217.172.48.251"; $scriptyol = "https://217.172.48.251/acc"; echo "<head><title>$serveradi</title>". "<style>body { scrollbar-3d-light-color: #000000; scrollbar-arrow-color: #ffffff; scrollbar-base-color: #ffffff; scrollbar-dark-shadow-color: #000000; scrollbar-face-color: #000000; scrollbar-highlight-color: #ffffff; scrollbar-shadow-color: #000000; scrollbar-track-color: #4e4e4e } body { background color:#008888 fixed; }</style>". "<center>". "<style>". "TD { font-family:verdana; font-size:10px; }". "Th { background-color:#f3e7aa; color:#000000; height:20px; font-family:verdana; font-size:10px; border:0px solid #000000; }". "Tr { background-color:#f3e7aa; color:#000000; height:29px; font-family:verdana; font-size:10px; border:0px solid #000000; }". "TABLE { border:0px solid #000000; }". "INPUT { border:0px solid #000000; }". "A { text-decoration:none; color:#000000; }". "</style>". "</center>". "</head><body><center>". " "; Switch ($_GET[islem]) { Case "unuttum": if (isset($_POST[email])) { $sorgu = mysql_query("select * from uye where email='$_POST[email]'"); if (!mysql_num_rows($sorgu)) { echo "Böyle bir email bulunamadi"; } else { mail_sifre_hatirlat($sorgu); echo tablogoster("Sifre hatirlatma mailiniz gönderildi"); } } echo '<center><form action="'.$PHP_SELF.'?islem=unuttum" method=POST><table width=310><tr><th> Sifre Hatirlatma</th></tr><tr><td>Email Adresiniz : <INPUT size=12 TYPE="text" NAME="email"> <INPUT TYPE="submit" value="Sifremi Gönder" style={width:100;} ></td></tr></table></form>'; break; Case "kayit": if (isset($_POST[username])) { $hata = ""; $_POST[isim] = trim($_POST[isim]); $_POST[username] = trim($_POST[username]); $_POST[password] = trim($_POST[password]); $_POST[email] = trim($_POST[email]); if (strlen($_POST[isim]) < 5 or strlen($_POST[isim]) > 30 ) $hata .= "Isim soyad 5 karakterden küçük 30 karakterden büyük olamaz<br>"; if (strtolower($_POST[username]) == "eof" or strtolower($_POST[username]) == "administrator" or strtolower($_POST[username]) == "remoteadmin") { $hata .= "Seçtiginiz kullanici adi ile sisteme baglanamazsiniz"; } if (hatali_karakter_varmi($_POST[username])) { $hata .= "Kullanici adinizda hatali karakterler var<br>"; } if (hatali_karakter_varmi($_POST[password])) { $hata .= "Sifrenizde adinizda hatali karakterler var<br>"; } if (strlen($_POST[username]) < 5 or strlen($_POST[username]) > 16 ) $hata .= "Kullanici Adi 5 karakterden küçük 16 karakterden büyük olamaz<br>"; if (strlen($_POST[password]) < 5 or strlen($_POST[password]) > 16 ) $hata .= "Sifre 5 karakterden küçük 16 karakterden büyük olamaz<br>"; // if(!ereg("^.+@.+\\..+$", $_POST[email])) { $hata .= " $_POST[email] geçerli bir email degil.<br>\n"; } if (mysql_num_rows(mysql_query("select email from uye where email = '$_POST[email]' or kayit_email = '$_POST[email]'"))) { $hata .= " $_POST[email] adresi sistemimize daha önceden kayitlidir lütfen baska bir email giriniz<br>";} if (mysql_num_rows(mysql_query("select username from uye where username = '$_POST[username]'"))) { $hata .= " $_POST[username] kullanici adi sistemimize daha önceden kayitlidir lütfen baska bir kullanici adi giriniz<br>";} if ($hata !== "") { echo tablogoster("<b>Doldurdugunuz Formda Bazi hatalar bulundu lütfen bu hatalari giderip tekrar deneyiniz <br></b><br>$hata"); } else { extract($_POST); $onay = (1); mysql_query("insert into uye (username,password,isim,email,kayit_email,onay) values('$username','$password','$isim','$email','$email','$onay')"); echo tablogoster("Tebrikler üye oldunuz. Oyun Accountunuzun açilmasi için asagidaki linke tiklayin.<br> <a href='$scriptyol?islem=akiv&kod=$onay&username=$username'>AKTIF ET</a>"); } } else { uyelik_formu_goster(); } Break; Case "login": $sorgu = mysql_query("select id,onay from uye where username='$_POST[username]' and password='$_POST[password]'"); if (mysql_num_rows($sorgu)) { $field = mysql_fetch_object($sorgu); $_SESSION['userid'] = $field->id; echo tablogoster("Login oldunuz yönlendiriliyorsunuz"); echo "<META HTTP-EQUIV=Refresh CONTENT="2; URL=$scriptyol">"; } else { echo tablogoster("Hatali kullanici adi yada sifre"); } Break; Case "sifre_unuttum": Break; Case "akiv": if (mysql_num_rows(mysql_query("select * from uye where username='$_GET[username]' and onay='$_GET[kod]'"))) { mysql_query("update uye set onay='1' where username='$username'"); $row = mysql_fetch_assoc(mysql_query("select username,password from uye where username='$_GET[username]'")); account_dosyasina_yaz($row[username],$row[password]); echo tablogoster("Tebrikler üyeliginiz aktif oldu.Oyun hesabiniz açildi hemen oynamaya baslayabilirsiniz."); } else { echo tablogoster("Hata : Böyle bir kullanici bulunamadi yada hatali onay kodu"); } Break; Case "logout": session_destroy(); echo tablogoster("Çikis Yaptiniz"); echo "<META HTTP-EQUIV=Refresh CONTENT="2; URL=$scriptyol">"; Break; Case "bilgilerim": if (!is_numeric($_SESSION[userid])) { die("Buraya login olmadan erisemezsiniz"); } echo "<table width=310><tr><th><a href=$PHP_SELF>Görünüsüm </a> | <a href=$PHP_SELF?islem=bilgilerim>Bilgilerim</a> | <a href=$PHP_SELF?islem=logout>Çikis</a></th></tr></table><br>"; if (isset($_POST[isim])) { $hata =""; $_POST[isim] = trim($_POST[isim]); $_POST[password] = trim($_POST[password]); $_POST[email] = trim($_POST[email]); extract(mysql_fetch_assoc(mysql_query("select * from uye where id='$_SESSION[userid]'"))); if (strlen($_POST[isim]) < 5 or strlen($_POST[isim]) > 30 ) $hata .= "Isim soyad 5 karakterden küçük 30 karakterden büyük olamaz<br>"; if ($_POST[password] !== "" and strlen($_POST[password]) < 5 or strlen($_POST[password]) > 16 ) $hata .= "Sifre 5 karakterden küçük 16 karakterden büyük olamaz<br>"; if (hatali_karakter_varmi($_POST[password])) { $hata .= "Sifrenizde adinizda hatali karakterler var<br>"; } if ($_POST[email]!==$email) { if (mysql_num_rows(mysql_query("select email from uye where email = '$_POST[email]' or kayit_email = '$_POST[email]'"))) { $hata .= " $_POST[email] adresi sistemimize daha önceden kayitlidir lütfen baska bir email giriniz<br>";} if(!ereg("^.+@.+\\..+$", $_POST[email])) { $hata .= " $_POST[email] geçerli bir email degil.<br>\n"; } } if (mysql_num_rows(mysql_query("select username from uye where username = '$_POST[username]'"))) { $hata .= " $_POST[username] kullanici adi sistemimize daha önceden kayitlidir lütfen baska bir kullanici adi giriniz<br>";} if ($hata !== "") { echo tablogoster("<b>Doldurdugunuz Formda Bazi hatalar bulundu lütfen bu hatalari giderip tekrar deneyiniz <br></b>$hata"); } else { if ($_POST[password] !== "") {$ekle = " ,password='$_POST[password]'";} if ($_POST[email]!==$email) { $ekle .= " ,email='$_POST[email]'"; } mysql_query("update uye set isim='$_POST[isim]'$ekle where id=$_SESSION[userid]"); $row = mysql_fetch_assoc(mysql_query("select username,password from uye where id=$_SESSION[userid]")); account_dosyasina_yaz($row[username],$row[password]); echo tablogoster("Bilgileriniz güncellendi"); } } uyelik_bilgi_duzenle(); Break; default: if (is_numeric($_SESSION[userid])) { echo "<table width=310><tr><th><a href=$PHP_SELF>Görünüsüm </a> | <a href=$PHP_SELF?islem=bilgilerim>Bilgilerim</a> | <a href=$PHP_SELF?islem=logout>Çikis</a></th></tr></table><br>"; uyelik_bilgi_goster(); } else { uye_login_formu_goster(); } }// switch sonu function uye_login_formu_goster() { global $ServerAdi; print<<<EOF <form action=$DosyaAdi?islem=login method=POST> <table border="0" width=310> <tr> <th width="100%" colspan="2">$ServerAdi Kullanici Girisi</th> </tr> <tr style={height:10;}> <td>Kullanici Adi</td> <td><input type="text" maxlength="16" name="username" size="15"></td> </tr> <tr style={height:10;}> <td>Sifre</td> <td><input type="password" maxlength="16" name="password" size="15"></td> </tr> <tr> <td width="100%" colspan="2"><p align="center"><a href=$PHP_SELF?islem=kayit>Kayit</a> | <a href=$PHP_SELF?islem=unuttum>Sifremi unuttum</a> <input type="submit" value="Giris" name="B1"> </td> </tr> </table> </form> EOF; } function uyelik_formu_goster() { global $ServerAdi; print<<<EOF <center><form action="$PHP_SELF?islem=kayit" method=POST> <table border="0"> <tr> <tH width="100%" colspan="2">$ServerAdi Kullanici Kayit Formu</tH> </tr> <tr> <td width="50%">Isim Soyad</td> <td width="50%"><input type="text" name="isim" maxlength="30" size="20"></td> </tr> <tr> <td width="50%">Kullanici Adi</td> <td width="50%"><input type="text" name="username" maxlength="16" size="20"></td> </tr> <tr> <td width="50%">Sifre</td> <td width="50%"><input type="password" name="password" maxlength="16" size="20"></td> </tr> <tr> <td width="50%">Email</td> <td width="50%"><input type="text" name="email" size="20"></td> </tr> <tr> <td width="100%" colspan="2"><p align="center"><input type="submit" value="Yolla" name="B1"></td> </tr> </table> </center> EOF; } function uyelik_bilgi_duzenle() { global $ServerAdi; extract(mysql_fetch_assoc(mysql_query("select * from uye where id='$_SESSION[userid]'"))); //echo $username; print<<<EOF <form action="$PHP_SELF?islem=bilgilerim" method=POST> <table border="0" width=310> <tr> <th width="100%" colspan="2">$isim Kullanici Bilgileri</th> </tr> <tr> <td width="50%">Isim Soyad</td> <td width="50%"><input type="text" name="isim" size="20" value="$isim"></td> </tr> <tr> <td width="50%">Kullanici Adi</td> <td width="50%">$username</td> </tr> <tr> <td width="50%">Sifre</td> <td width="50%"><input type="password" name="password" size="20"></td> </tr> <tr> <td width="100%" colspan=2>Sifre degisikligi istemiyorsaniz bos birakiniz.</td> </tr> <tr> <td width="50%">Email</td> <td width="50%"><input type="text" name="email" size="20" value="$email"></td> </tr> <tr> <td width="100%" colspan="2"><p align="center"><input type="submit" value="Yolla" name="B1"></td> </tr> </table> </center> EOF; } function mail_sifre_hatirlat($sorgu) { $row = mysql_fetch_assoc($sorgu); $mail = "Web sitemizden yapmis oldugunuz sifre hatirlatma islemi sonucu sifrenizi bildiriyoruz : \n". " Kullanici Adiniz : $row[username] \n". " Sifreniz : $row[password] \n"; mail($row[email],"$ServerAdi Sifre Hatirlatmasi",$mail); //echo "<pre>";print_r($row);echo "</pre>"; } function uyelik_bilgi_goster() { global $ServerAdi,$PHP_SELF; extract(mysql_fetch_assoc(mysql_query("select * from uye where id='$_SESSION[userid]'"))); print<<<EOF <table border="0" width=310> <tr> <th width="100%" colspan="2">$isim Kullanici Bilgileri</th> </tr> <tr> <td width="50%">Isim Soyad</td> <td width="50%">$isim</td> </tr> <tr> <td width="50%">Kullanici Adi</td> <td width="50%">$username</td> </tr> <tr> <td width="50%">Sifre</td> <td width="50%">*********</td> </tr> <tr> <td width="50%">Email</td> <td width="50%">$email</td> </tr> <tr> <form action=$PHP_SELF><input name="islem" type="hidden" value="bilgilerim"></tr> <tr> <td width="100%" colspan="2"><p align="center"><input type="submit" value="Degistir" name="B1"></td></form> </tr> </table> </center> EOF; } //echo "<pre>";print_r($_POST);echo "</pre>"; //echo "<pre>";print_r($_SESSION);echo "</pre>"; function tablogoster($mesaj) { return "<table width=310><tr><th>$mesaj</th></tr></table>"; } function hatali_karakter_varmi($text) { // hatliysa true döndür for ($i = 0; $i<strlen($text); $i++) { if (!strpos("qwertyuopasdfghjklizxcvbnm1234567890",strtolower($text[$i]))) { return true; } } return false; } function account_dosyasina_yaz($username,$password) { $username = trim($username); $password = trim($password); $dosya_adi = 'C:\sphere\accounts\sphereacct.scp'; $icerik = "[$username]". chr(13). "\npassword=$password". chr(13) . "\nplevel=1" . chr(13) ."\n" ; if (is_writable($dosya_adi)) { if (!$handle = fopen($dosya_adi, 'a')) { tablogoster("Teknik Bir Sorundan dolayi su anda sistem hesabinizi güncelleyemiyor."); die(); } if (!fwrite($handle, $icerik)) { tablogoster("Teknik Bir Sorundan dolayi su anda sistem hesabinizi güncelleyemiyor."); die(); } fclose($handle); } else { tablogoster("Teknik Bir Sorundan dolayi su anda sistem hesabinizi güncelleyemiyor."); die(); } } ?>

Acaba neden verio bu hatayı?

Üye Ol veya Giriş Yap

Bu forum başlığına mesaj atmak istiyorsanız hemen üye olun veya giriş yapın.