Skip to content
Snippets Groups Projects

Compare revisions

Changes are shown as if the source revision was being merged into the target revision. Learn more about comparing revisions.

Source

Select target project
No results found

Target

Select target project
  • isaack/VMS-SUEE_2.0
  • ztk.me/VMS-z
2 results
Show changes
Hide whitespace changes
Inline Side-by-side
lib/funktionen/konto/anmelden.php
View file @ 0d33c7a0
......@@ -87,10 +87,10 @@ if (!isset($ak)) $ak = "";
)");
$email_message = 'Hallo ' . $_POST['nickname'] . ',
Du hast Dich soeben erfolgreich bei ' . $seitenname . ' angemeldet.
Du hast Dich soeben erfolgreich bei ' . $pageconfig['seitenname'] . ' angemeldet.
Bitte aktiviere jetzt Deinen Account, klicke dazu bitte auf den
Aktivierungslink: ' . $domain . '/?content=/intern/aktivieren&ak=' . $ak . '
Aktivierungslink: ' . $pageconfig['domain'] . '/?content=/intern/aktivieren&ak=' . $ak . '
----------------------------------------------------------
Kontonummer: ' . $uid . '
......@@ -101,11 +101,11 @@ if (!isset($ak)) $ak = "";
uns teilnehmen.
Mit freundlichen Gren
Das ' . $seitenname . ' Team
Das ' . $pageconfig['seitenname'] . ' Team
';
usermail($_POST['emailadresse'], "$seitenname Accountaktivierung", $email_message, '"' . $seitenname . '" <' . $betreibermail . '>');
usermail($_POST['emailadresse'], $pageconfig['seitenname']." Accountaktivierung", $email_message, '"' . $pageconfig['seitenname'] . '" <' . $betreibermail . '>');
$anmeldeok = "true";
}
$meldung = meldung($error,$meldung);
?>
\ No newline at end of file
?>
lib/session.lib.php
View file @ 0d33c7a0
......@@ -4,6 +4,7 @@ Datei : session.lib.php
Änderungen in dieser Datei nur dann vornehmen wenn Sie wissen was Sie tun!
*/
@session_start();
$ip = (isset($_SERVER['REMOTE_ADDR'])) ? $_SERVER['REMOTE_ADDR'] : '127.0.0.1';
// Variabeln definieren
if(isset($_POST['checkid'])){
if (!isset($_SESSION['login'])) $_SESSION['login'] = "";
......@@ -16,8 +17,8 @@ if(isset($_POST['checkid'])){
if (!isset($_GET['logout'])) $_GET['logout'] = "";
if (!isset($_GET['ref'])) $_GET['ref'] = "0";
}
if ($_SESSION['werber'] == "0") $_SESSION['werber'] = (int)$_GET['ref'];
if( ( !isset($_SESSION['werber']) || ("0" == $_SESSION['werber']) ) && isset($_GET['ref']) )
$_SESSION['werber'] = (int)$_GET['ref'];
// Seiteneinstellungen laden...
$pageconfig = mysqli_fetch_array(db_query("SELECT * FROM " . $db_prefix . "_seitenkonfig LIMIT 1"));
......@@ -28,11 +29,11 @@ if ($pageconfig['wartung'] == 1 && $_SESSION['uid'] != $admin_id) {
$_SESSION['uid'] = "";
$_SESSION['passwort'] = "";
$_SESSION['login'] = "";
header ("location: " . $domain . "/wartung.php");
header ("location: " . $pageconfig['domain'] . "/wartung.php");
die();
}
// Login
if ($_POST['checkid'] == 'Login' && $_POST['nickname'] && $_POST['passwort']) {
if (isset($_POST['checkid']) && $_POST['checkid'] == 'Login' && $_POST['nickname'] && $_POST['passwort']) {
$_POST['nickname'] = addslashes($_POST['nickname']);
$pw = pw_erstellen($_POST['passwort']);
......@@ -61,7 +62,7 @@ WHERE u.nickname='" . $_POST['nickname'] . "' OR u.uid = '". $_POST['nickname']
$_SESSION['uid'] = $login_check['uid'];
$_SESSION['passwort'] = $login_check['passwort'];
$_SESSION['login'] = "true";
header ("location: " . $domain);
header ("location: " . $pageconfig['domain']);
die();
}
// Wenn User gesperrt wurde!
......@@ -76,10 +77,10 @@ WHERE u.nickname='" . $_POST['nickname'] . "' OR u.uid = '". $_POST['nickname']
$_GET['content'] = '/error/kein_zutritt';
}
} else {
if ($_POST['checkid'] == 'Login') $_GET['content'] = '/error/kein_zutritt';
if (isset($_POST['checkid']) && $_POST['checkid'] == 'Login') $_GET['content'] = '/error/kein_zutritt';
}
// Autologin
if ($_SESSION['login'] != 'true' && isset($_COOKIE['autologin']) && isset($_COOKIE['uid']) && isset($_COOKIE['passwort'])) {
if ( (isset($_SESSION['login']) && $_SESSION['login'] != 'true') || ( isset($_COOKIE['autologin']) && isset($_COOKIE['uid']) && isset($_COOKIE['passwort'])) ) {
$_COOKIE['uid'] = (int)$_COOKIE['uid'];
$_COOKIE['passwort'] = addslashes ($_COOKIE['passwort']);
......@@ -95,18 +96,18 @@ if ($_SESSION['login'] != 'true' && isset($_COOKIE['autologin']) && isset($_COOK
}
}
// Logout
if ($_GET['logout'] == 'true') {
if (isset($_GET['logout']) && $_GET['logout'] == 'true') {
setCookie('uid', '', time() - 86400 * 30);
setCookie('passwort', '', time() - 86400 * 30);
setCookie('autologin', '', time() - 86400 * 30);
$_SESSION['uid'] = "";
$_SESSION['passwort'] = "";
$_SESSION['login'] = "";
header ("location: " . $domain);
header ("location: " . $pageconfig['domain']);
die();
}
if (isset ($_SESSION['uid']) && isset ($_SESSION['passwort']) && !empty ($_SESSION['uid']) && !empty ($_SESSION['passwort'])) {
db_query ("UPDATE " . $db_prefix . "_kontodaten SET last_active = " . time() . " WHERE uid = " . $_SESSION['uid'] . " AND passwort = '" . $_SESSION['passwort'] . "' LIMIT 1");
}
?>
\ No newline at end of file
?>
lib/weristonline.php
View file @ 0d33c7a0
<?php
$zeit = (5 * 60); // Sekunden seit der letzten Aktivität
$np = $domain . '/?content=/nickpage&amp;id='; // Nickpagelink
$np = $pageconfig['domain'] . '/?content=/nickpage&amp;id='; // Nickpagelink
// verhindern, dass die Datei direkt aufgerufen wird
if (!function_exists ("db_query")) die ("Kein Direktaufruf");
......@@ -26,4 +26,4 @@ else {
}
?>
\ No newline at end of file
?>
pcheck.php
View file @ 0d33c7a0
<?php
require ( 'lib/datenbank.inc.php' );
require_once ('lib/functions.lib.php');
//Variablen vordefinieren
......@@ -10,9 +11,6 @@ if (!isset($_GET['auszahlen'])) $_GET['auszahlen'] = "false";
$_GET['uid'] = (int)$_GET['uid'];
$_GET['tan'] = addslashes ($_GET['tan']);
//DB Verbindung herstellen
db_connect();
$mail = mysqli_fetch_assoc(db_query("SELECT e.start,e.aufendhalt,e.status,e.uid,v.verdienst FROM ".$db_prefix."_paidmails_empfaenger e
LEFT JOIN ".$db_prefix."_paidmails_versendet v ON v.tan = e.tan
WHERE e.tan='".$_GET['tan']."' AND e.uid=".$_GET['uid']." AND e.gueltig > ".time()." LIMIT 1"));
......@@ -38,7 +36,7 @@ if ($_GET['auszahlen']!='true') {
bilanz(0,$mail['verdienst']);
db_query("UPDATE ".$db_prefix."_paidmails_empfaenger SET status=1 WHERE tan='".$_GET['tan']."' and uid=".$_GET['uid']." LIMIT 1");
db_query("UPDATE ".$db_prefix."_paidmails_versendet SET bestaedigt=bestaedigt+1 WHERE tan='".$_GET['tan']."' LIMIT 1");
$headmsg = $mail['verdienst'].' '.$waehrung.' gutgeschrieben!';
$headmsg = $mail['verdienst'].' '.$pageconfig['waehrung'].' gutgeschrieben!';
} else {
$headmsg = 'Wartezeit umgangen! Paidmail ungültig!';
db_query("UPDATE ".$db_prefix."_paidmails_empfaenger SET status=2 WHERE tan='".$_GET['tan']."' and uid=".$_GET['uid']." LIMIT 1");
......@@ -61,4 +59,3 @@ echo '
</table>
</body>
</html>';
db_close();
\ No newline at end of file
pclick.php
View file @ 0d33c7a0
<?php
require ( 'lib/datenbank.inc.php' );
require_once ('lib/functions.lib.php');
db_connect();
$_GET['uid'] = (int)$_GET['uid'];
$_GET['tan'] = addslashes ($_GET['tan']);
......@@ -18,5 +18,3 @@ echo '
<frame name="werbung" src="'.$mail['ziel'].'" scrolling="auto" frameborder="0">
</frameset>
</html>';
db_close();
pl.php
View file @ 0d33c7a0
<?
<?php
require_once ( 'lib/datenbank.inc.php' );
@require_once ('lib/functions.lib.php');
@db_connect();
@require_once ('lib/session.lib.php');
if (!isset($_GET['art'])) $_GET['art'] = "";
if (!isset($text['tan'])) $text['tan'] = "";
......@@ -21,4 +21,3 @@ $text = mysqli_fetch_array(db_query("SELECT * FROM ".$db_prefix."_gebuchte_werbu
</frameset>
</body>
</html>
<?db_close();?>
topframe_forced.php
View file @ 0d33c7a0
......@@ -52,7 +52,7 @@ if ($_GET['auszahlen'] == 'true' && $force_error != 'true' && $_GET['puk'] == md
db_query("INSERT INTO " . $db_prefix . "_reloads (ip,uid,tan,bis) VALUES ('" . $ip . "'," . $_SESSION['uid'] . ",'" . $forced['tan'] . "'," . $new_reload . ")");
db_query("UPDATE " . $db_prefix . "_gebuchte_werbung SET menge = menge - 1 WHERE tan='" . $_GET['tan'] . "'");
$_SESSION['earlies_payout' . $_GET['tan']] = '';
$headmsg = $forced['verdienst'] . ' ' . $waehrung . ' erhalten!';
$headmsg = $forced['verdienst'] . ' ' . $pageconfig['waehrung'] . ' erhalten!';
} elseif ($_GET['auszahlen'] == 'true' && time() < $_SESSION['earlies_payout' . $_GET['tan']]) {
$headmsg = 'Wartezeit umgangen.';
} elseif ($_GET['auszahlen'] == 'true' && $force_error != 'true') {
......
topframe_text.php
View file @ 0d33c7a0
......@@ -47,7 +47,7 @@ $new_reload = time()+$text['reload'];
db_query("INSERT INTO ".$db_prefix."_reloads (ip,uid,tan,bis) VALUES ('".$ip."','".$_SESSION['uid']."','".$text['tan']."','".$new_reload."')");
db_query("UPDATE ".$db_prefix."_gebuchte_werbung SET menge = menge - 1 WHERE tan='".$_GET['tan']."'");
db_query("UPDATE ".$db_prefix."_kontodaten SET textlinks = textlinks + 1, tlv = tlv + ".$text['verdienst']." WHERE uid = '".$_SESSION['uid']."'");
$headmsg = $text['verdienst'].' '.$waehrung.' erhalten!';
$headmsg = $text['verdienst'].' '.$pageconfig['waehrung'].' erhalten!';
} else {
$headmsg = 'Leider bist Du nicht eingeloggt!';
}
......