Hallo ich habe eine regi seite die nicht mehr geht sie ist für einen hamachi p server sie hat eigentlich immer funktionirt xD ka warum jetzt nicht mehr
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type"
content="text/html; charset=iso-8859-1">
<meta name="robots" content="INDEX,FOLLOW">
<meta name="keywords"
content="FightForShinobi">
<meta name="description"
content="FightForShinobi" >
<title>FightForShinobi</title>
<link rel="stylesheet" href="format.css" type="text/css">
</head>
<body >
<div align="center">
<table align="center" id="main" cellspacing="0" cellpadding="0" border="0" >
<tr>
<td align="center" >
<table align="center" id="main_top" cellspacing="0" cellpadding="0" border="0" >
<tr>
<td>
<table align="center" cellspacing="0" cellpadding="0" border="0" >
<tr>
<td id="top">
<!-- menü GANZ oben-->
<!-- ende menü GANZ oben--></td>
</tr>
<td align="right" id="top1" >
</td>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<td align="center" id="top2" >
<table width="899" align="center" id="menuhorizontal" border="0" cellpadding="0" cellspacing="0" >
<tr>
<td width="10%"><a href="http://fightforshinobi.co.de/index.php" >News</a></td>
<td width="10%"><a href="http://5.135.101.171/register.php" >Register</a></td>
<td width="10%"><a href="http://5.135.101.171/ranking.php" >Ranking</a></td>
<td width="10%"><a href="http://fightforshinobi.co.de/team.php" >Team</a></td>
</tr>
</table>
</td>
</tr>
<br>
<!-- ende boxen inhalt--></td>
<td valign="top" id="inbox">
<br>
<h1>Register</h1>
<center>
<h1>bitte alles klein schreiben</h1><br><br>
</center>
<?php
$ip = $_SERVER['REMOTE_ADDR'];
$time = date;
$script = $_SERVER[PATH_TRANSLATED];
$fp = fopen ("[WEB]SQL_Injection.txt", "a+");
$sql_inject_1 = array(";","'","%",'"'); #Whoth need replace
$sql_inject_2 = array("", "","","""); #To wont replace
$GET_KEY = array_keys($_GET); #array keys from $_GET
$POST_KEY = array_keys($_POST); #array keys from $_POST
$COOKIE_KEY = array_keys($_COOKIE); #array keys from $_COOKIE
/*begin clear $_GET */
for($i=0;$i<count($GET_KEY);$i++)
{
$real_get[$i] = $_GET[$GET_KEY[$i]];
$_GET[$GET_KEY[$i]] = str_replace($sql_inject_1, $sql_inject_2, HtmlSpecialChars($_GET[$GET_KEY[$i]]));
if($real_get[$i] != $_GET[$GET_KEY[$i]])
{
fwrite ($fp, "IP: $ip\r\n");
fwrite ($fp, "Method: GET\r\n");
fwrite ($fp, "Value: $real_get[$i]\r\n");
fwrite ($fp, "Script: $script\r\n");
fwrite ($fp, "Time: $time\r\n");
fwrite ($fp, "==================================\r\n");
}
}
/*end clear $_GET */
/*begin clear $_POST */
for($i=0;$i<count($POST_KEY);$i++)
{
$real_post[$i] = $_POST[$POST_KEY[$i]];
$_POST[$POST_KEY[$i]] = str_replace($sql_inject_1, $sql_inject_2, HtmlSpecialChars($_POST[$POST_KEY[$i]]));
if($real_post[$i] != $_POST[$POST_KEY[$i]])
{
fwrite ($fp, "IP: $ip\r\n");
fwrite ($fp, "Method: POST\r\n");
fwrite ($fp, "Value: $real_post[$i]\r\n");
fwrite ($fp, "Script: $script\r\n");
fwrite ($fp, "Time: $time\r\n");
fwrite ($fp, "==================================\r\n");
}
}
/*end clear $_POST */
/*begin clear $_COOKIE */
for($i=0;$i<count($COOKIE_KEY);$i++)
{
$real_cookie[$i] = $_COOKIE[$COOKIE_KEY[$i]];
$_COOKIE[$COOKIE_KEY[$i]] = str_replace($sql_inject_1, $sql_inject_2, HtmlSpecialChars($_COOKIE[$COOKIE_KEY[$i]]));
if($real_cookie[$i] != $_COOKIE[$COOKIE_KEY[$i]])
{
fwrite ($fp, "IP: $ip\r\n");
fwrite ($fp, "Method: COOKIE\r\n");
fwrite ($fp, "Value: $real_cookie[$i]\r\n");
fwrite ($fp, "Script: $script\r\n");
fwrite ($fp, "Time: $time\r\n");
fwrite ($fp, "==================================\r\n");
}
}
/*end clear $_COOKIE */
fclose ($fp);
?>
<?php
ini_set('display_errors', 0);
$connection = mssql_connect('MATTHIAS-PC\SQLEXPRESS', 'sa', 'msql ps ');
if(!connection || !mssql_select_db('ACCOUNT_DBF', $connection))
{
die('Konnte keine verbindung zum MSSQL Server herstellen');
}
function resafe($key){
$s = array("\x00", "\n", "\r", "\\", "'", "\"", "\x1a", "\"'\"", "'\"'");
return str_replace($s, "", $key);
}
function __construct(){
if($_SERVER['REQUEST_METHOD'] == 'GET'){
$_GET = array_map(array(&$this, 'resafe'), $_GET);
}
if($_SERVER['REQUEST_METHOD'] == 'POST'){
$_POST = array_map(array(&$this, 'resafe'), $_POST);
}
}
$checkusername = $_POST['Username'];
$query = mssql_query("SELECT account FROM ACCOUNT_DBF WHERE account = '$checkusername'");
$result = mssql_fetch_row($query);
if(isset($_POST['submit'])){
if($_POST['Username'] == ""){
$error = '<font color="red">Bitte gib deinen Accountnamen an.</font>';
}
else if($result[0] == $checkusername){
$error = '<font color="red">Dein Accountsname ist bereits vergeben.</font>';
}
else if($_POST['Password'] == ""){
$error = '<font color="red">Bitte ein Passwort eingeben.</font>';
}
else if($_POST['Password2'] == ""){
$error = '<font color="red">Du hast kein Passwort angegeben.</font>';
}
else{
$password = md5('kikugalanet' . $_POST['Password']);
$stmt = mssql_init('usp_CreateNewAccount', $connection);
mssql_bind($stmt, '@account', $checkusername, SQLVARCHAR, false, false, 15);
mssql_bind($stmt, '@pw', resafe($password), SQLVARCHAR, false, false, 36);
mssql_bind($stmt, '@email', $_POST['mail'], SQLVARCHAR, false, false, 120);
mssql_execute($stmt) or die ("Registration fehlgeschlagen bitte versuche es noch einmal.");
mssql_free_statement($stmt);
$error = 'Dein Account wurde erstellt</font>';
}
}
echo '<form action="register.php" method="post">';
echo '<font color="#7CFC00"><h1>Login ID:</h1> <input type="text" name="Username" /><br /><br />';
echo '<h1>Passwort:</h1> <input type="password" name="Password" /><br /><br />';
echo '<h1>Passwort wiederholen:</h1> <input type="password" name="Password2" /><br /><br />';
echo '<h1>E-mail Adresse eintragen:</h1> <input type="text" name="mail" /><br><br />';
echo '<input type="submit" name="submit" value= Registration />';
echo '</form>';
echo $error;
?>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table></div>
</body>
</html>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type"
content="text/html; charset=iso-8859-1">
<meta name="robots" content="INDEX,FOLLOW">
<meta name="keywords"
content="FightForShinobi">
<meta name="description"
content="FightForShinobi" >
<title>FightForShinobi</title>
<link rel="stylesheet" href="format.css" type="text/css">
</head>
<body >
<div align="center">
<table align="center" id="main" cellspacing="0" cellpadding="0" border="0" >
<tr>
<td align="center" >
<table align="center" id="main_top" cellspacing="0" cellpadding="0" border="0" >
<tr>
<td>
<table align="center" cellspacing="0" cellpadding="0" border="0" >
<tr>
<td id="top">
<!-- menü GANZ oben-->
<!-- ende menü GANZ oben--></td>
</tr>
<td align="right" id="top1" >
</td>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<td align="center" id="top2" >
<table width="899" align="center" id="menuhorizontal" border="0" cellpadding="0" cellspacing="0" >
<tr>
<td width="10%"><a href="http://fightforshinobi.co.de/index.php" >News</a></td>
<td width="10%"><a href="http://5.135.101.171/register.php" >Register</a></td>
<td width="10%"><a href="http://5.135.101.171/ranking.php" >Ranking</a></td>
<td width="10%"><a href="http://fightforshinobi.co.de/team.php" >Team</a></td>
</tr>
</table>
</td>
</tr>
<br>
<!-- ende boxen inhalt--></td>
<td valign="top" id="inbox">
<br>
<h1>Register</h1>
<center>
<h1>bitte alles klein schreiben</h1><br><br>
</center>
<?php
$ip = $_SERVER['REMOTE_ADDR'];
$time = date;
$script = $_SERVER[PATH_TRANSLATED];
$fp = fopen ("[WEB]SQL_Injection.txt", "a+");
$sql_inject_1 = array(";","'","%",'"'); #Whoth need replace
$sql_inject_2 = array("", "","","""); #To wont replace
$GET_KEY = array_keys($_GET); #array keys from $_GET
$POST_KEY = array_keys($_POST); #array keys from $_POST
$COOKIE_KEY = array_keys($_COOKIE); #array keys from $_COOKIE
/*begin clear $_GET */
for($i=0;$i<count($GET_KEY);$i++)
{
$real_get[$i] = $_GET[$GET_KEY[$i]];
$_GET[$GET_KEY[$i]] = str_replace($sql_inject_1, $sql_inject_2, HtmlSpecialChars($_GET[$GET_KEY[$i]]));
if($real_get[$i] != $_GET[$GET_KEY[$i]])
{
fwrite ($fp, "IP: $ip\r\n");
fwrite ($fp, "Method: GET\r\n");
fwrite ($fp, "Value: $real_get[$i]\r\n");
fwrite ($fp, "Script: $script\r\n");
fwrite ($fp, "Time: $time\r\n");
fwrite ($fp, "==================================\r\n");
}
}
/*end clear $_GET */
/*begin clear $_POST */
for($i=0;$i<count($POST_KEY);$i++)
{
$real_post[$i] = $_POST[$POST_KEY[$i]];
$_POST[$POST_KEY[$i]] = str_replace($sql_inject_1, $sql_inject_2, HtmlSpecialChars($_POST[$POST_KEY[$i]]));
if($real_post[$i] != $_POST[$POST_KEY[$i]])
{
fwrite ($fp, "IP: $ip\r\n");
fwrite ($fp, "Method: POST\r\n");
fwrite ($fp, "Value: $real_post[$i]\r\n");
fwrite ($fp, "Script: $script\r\n");
fwrite ($fp, "Time: $time\r\n");
fwrite ($fp, "==================================\r\n");
}
}
/*end clear $_POST */
/*begin clear $_COOKIE */
for($i=0;$i<count($COOKIE_KEY);$i++)
{
$real_cookie[$i] = $_COOKIE[$COOKIE_KEY[$i]];
$_COOKIE[$COOKIE_KEY[$i]] = str_replace($sql_inject_1, $sql_inject_2, HtmlSpecialChars($_COOKIE[$COOKIE_KEY[$i]]));
if($real_cookie[$i] != $_COOKIE[$COOKIE_KEY[$i]])
{
fwrite ($fp, "IP: $ip\r\n");
fwrite ($fp, "Method: COOKIE\r\n");
fwrite ($fp, "Value: $real_cookie[$i]\r\n");
fwrite ($fp, "Script: $script\r\n");
fwrite ($fp, "Time: $time\r\n");
fwrite ($fp, "==================================\r\n");
}
}
/*end clear $_COOKIE */
fclose ($fp);
?>
<?php
ini_set('display_errors', 0);
$connection = mssql_connect('MATTHIAS-PC\SQLEXPRESS', 'sa', 'msql ps ');
if(!connection || !mssql_select_db('ACCOUNT_DBF', $connection))
{
die('Konnte keine verbindung zum MSSQL Server herstellen');
}
function resafe($key){
$s = array("\x00", "\n", "\r", "\\", "'", "\"", "\x1a", "\"'\"", "'\"'");
return str_replace($s, "", $key);
}
function __construct(){
if($_SERVER['REQUEST_METHOD'] == 'GET'){
$_GET = array_map(array(&$this, 'resafe'), $_GET);
}
if($_SERVER['REQUEST_METHOD'] == 'POST'){
$_POST = array_map(array(&$this, 'resafe'), $_POST);
}
}
$checkusername = $_POST['Username'];
$query = mssql_query("SELECT account FROM ACCOUNT_DBF WHERE account = '$checkusername'");
$result = mssql_fetch_row($query);
if(isset($_POST['submit'])){
if($_POST['Username'] == ""){
$error = '<font color="red">Bitte gib deinen Accountnamen an.</font>';
}
else if($result[0] == $checkusername){
$error = '<font color="red">Dein Accountsname ist bereits vergeben.</font>';
}
else if($_POST['Password'] == ""){
$error = '<font color="red">Bitte ein Passwort eingeben.</font>';
}
else if($_POST['Password2'] == ""){
$error = '<font color="red">Du hast kein Passwort angegeben.</font>';
}
else{
$password = md5('kikugalanet' . $_POST['Password']);
$stmt = mssql_init('usp_CreateNewAccount', $connection);
mssql_bind($stmt, '@account', $checkusername, SQLVARCHAR, false, false, 15);
mssql_bind($stmt, '@pw', resafe($password), SQLVARCHAR, false, false, 36);
mssql_bind($stmt, '@email', $_POST['mail'], SQLVARCHAR, false, false, 120);
mssql_execute($stmt) or die ("Registration fehlgeschlagen bitte versuche es noch einmal.");
mssql_free_statement($stmt);
$error = 'Dein Account wurde erstellt</font>';
}
}
echo '<form action="register.php" method="post">';
echo '<font color="#7CFC00"><h1>Login ID:</h1> <input type="text" name="Username" /><br /><br />';
echo '<h1>Passwort:</h1> <input type="password" name="Password" /><br /><br />';
echo '<h1>Passwort wiederholen:</h1> <input type="password" name="Password2" /><br /><br />';
echo '<h1>E-mail Adresse eintragen:</h1> <input type="text" name="mail" /><br><br />';
echo '<input type="submit" name="submit" value= Registration />';
echo '</form>';
echo $error;
?>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table></div>
</body>
</html>