Sunbelt Computer Software

PL/B Language Development and Support

HackMe-SQL-Injection-Challenges/donator.php at master · zados/HackMe-SQL-Injection-Challenges · GitHub

Repository navigation

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

<?php

session_start();

require "global_func.php";

if ($_SESSION['loggedin'] == 0)

{

header("Location: login.php");

exit;

}

$userid = $_SESSION['userid'];

require "header.php";

$h = new headers;

$h->startheaders();

include "mysql.php";

global $c;

$is =

mysql_query(

"SELECT u.*,us.* FROM users u LEFT JOIN userstats us ON u.userid=us.userid WHERE u.userid=$userid",

$c) or die(mysql_error());

$ir = mysql_fetch_array($is);

check_level();

$fm = money_formatter($ir['money']);

$cm = money_formatter($ir['crystals'], '');

$lv = date('F j, Y, g:i a', $ir['laston']);

$h->userdata($ir, $lv, $fm, $cm);

$h->menuarea();

$game_url = determine_game_urlbase();

print

<<<EOF

<h3>Donations</h3>

<b>[<a href='willpotion.php'>Buy Will Potions</a>]</b><br />

If you become a donator to breakthenet, you will receive (each time you donate):<br />

<b>1st Offer:</b><ul>

<li>\$5,000 game money</li>

<li>50 crystals</li>

<li>50 IQ, the hardest stat to get in the game!</li>

<li>30 days Donator Status: Red name + cross next to your name</li>

<li><b>NEW!</b> Friend and Black Lists</li>

<li><b>NEW!</b> 17% Energy every 5 mins instead of 8%</li></ul><br />

<form action="https://www.paypal.com/cgi-bin/webscr" method="post">

<input type=hidden name=cmd value=_xclick>

<input type="hidden" name="business" value="teachthenet@gmail.com">

<input type="hidden" name="item_name" value="breakthenet Donation for ($userid) (Pack 1)">

<input type="hidden" name="amount" value="3.00">

<input type="hidden" name="no_shipping" value="1">

<input type="hidden" name="return" value="http://{$game_url}/donatordone.php?action=done&type=standard">

<input type="hidden" name="cancel_return" value="http://{$game_url}/donatordone.php?action=cancel">

<input type="hidden" name="cn" value="Your Player ID">

<input type="hidden" name="currency_code" value="USD">

<input type="hidden" name="tax" value="0">

<input type="image" src="https://www.paypal.com/en_US/i/btn/x-click-but21.gif" border="0" name="submit" alt="Make payments with PayPal - it's fast, free and secure!">

</form>

<b>2nd Offer:</b><ul>

<li>100 crystals</li>

<li>30 days Donator Status: Red name + cross next to your name</li>

<li><b>NEW!</b> Friend and Black Lists</li>

<li><b>NEW!</b> 17% Energy every 5 mins instead of 8%</li></ul><br />

<form action="https://www.paypal.com/cgi-bin/webscr" method="post">

<input type="hidden" name="cmd" value="_xclick">

<input type="hidden" name="business" value="teachthenet@gmail.com">

<input type="hidden" name="item_name" value="breakthenet Donation for ($userid) (Pack 2)">

<input type="hidden" name="amount" value="3.00">

<input type="hidden" name="no_shipping" value="1">

<input type="hidden" name="return" value="http://{$game_url}/donatordone.php?action=done&type=crystals">

<input type="hidden" name="cancel_return" value="http://{$game_url}/donatordone.php?action=cancel">

<input type="hidden" name="cn" value="Your Player ID">

<input type="hidden" name="currency_code" value="USD">

<input type="hidden" name="tax" value="0">

<input type="image" src="https://www.paypal.com/en_US/i/btn/x-click-but21.gif" border="0" name="submit" alt="Make payments with PayPal - it's fast, free and secure!">

</form>

<b>3rd Offer:</b><ul>

<li>120 IQ, the hardest stat to get in the game!</li>

<li>30 days Donator Status: Red name + cross next to your name</li>

<li><b>NEW!</b> Friend and Black Lists</li>

<li><b>NEW!</b> 17% Energy every 5 mins instead of 8%</li></ul><br />

<form action="https://www.paypal.com/cgi-bin/webscr" method="post">

<input type="hidden" name="cmd" value="_xclick">

<input type="hidden" name="business" value="teachthenet@gmail.com">

<input type="hidden" name="item_name" value="breakthenet Donation for ($userid) (Pack 3)">

<input type="hidden" name="amount" value="3.00">

<input type="hidden" name="no_shipping" value="1">

<input type="hidden" name="return" value="http://{$game_url}/donatordone.php?action=done&type=iq">

<input type="hidden" name="cancel_return" value="http://{$game_url}/donatordone.php?action=cancel">

<input type="hidden" name="cn" value="Your Player ID">

<input type="hidden" name="currency_code" value="USD">

<input type="hidden" name="tax" value="0">

<input type="image" src="https://www.paypal.com/en_US/i/btn/x-click-but21.gif" border="0" name="submit" alt="Make payments with PayPal - it's fast, free and secure!">

</form>

<b>4th Offer ($5.00 pack):</b><ul>

<li>\$15,000 game money</li>

<li>75 crystals</li>

<li>80 IQ, the hardest stat to get in the game!</li>

<li>55 days Donator Status: Red name + cross next to your name</li>

<li><b>NEW!</b> Friend and Black Lists</li>

<li><b>NEW!</b> 17% Energy every 5 mins instead of 8%</li></ul><br />

<form action="https://www.paypal.com/cgi-bin/webscr" method="post">

<input type="hidden" name="cmd" value="_xclick">

<input type="hidden" name="business" value="teachthenet@gmail.com">

<input type="hidden" name="item_name" value="breakthenet Donation for ($userid) (Pack 4)">

<input type="hidden" name="amount" value="5.00">

<input type="hidden" name="no_shipping" value="1">

<input type="hidden" name="return" value="http://{$game_url}/donatordone.php?action=done&type=fivedollars">

<input type="hidden" name="cancel_return" value="http://{$game_url}/donatordone.php?action=cancel">

<input type="hidden" name="cn" value="Your Player ID">

<input type="hidden" name="currency_code" value="USD">

<input type="hidden" name="tax" value="0">

<input type="image" src="https://www.paypal.com/en_US/i/btn/x-click-but21.gif" border="0" name="submit" alt="Make payments with PayPal - it's fast, free and secure!">

</form>

<b>5th Offer ($10.00 pack):</b><ul>

<li>\$35,000 game money</li>

<li>160 crystals</li>

<li>180 IQ, the hardest stat to get in the game!</li>

<li>A free Rifle valued at \$25,000</li>

<li>115 days Donator Status: Red name + cross next to your name</li>

<li><b>NEW!</b> Friend and Black Lists</li>

<li><b>NEW!</b> 17% Energy every 5 mins instead of 8%</li></ul><br />

<form action="https://www.paypal.com/cgi-bin/webscr" method="post">

<input type="hidden" name="cmd" value="_xclick">

<input type="hidden" name="business" value="teachthenet@gmail.com">

<input type="hidden" name="item_name" value="breakthenet Donation for ($userid) (Pack 5)">

<input type="hidden" name="amount" value="10.00">

<input type="hidden" name="no_shipping" value="1">

<input type="hidden" name="return" value="http://{$game_url}/donatordone.php?action=done&type=tendollars">

<input type="hidden" name="cancel_return" value="http://{$game_url}/donatordone.php?action=cancel">

<input type="hidden" name="cn" value="Your Player ID">

<input type="hidden" name="currency_code" value="USD">

<input type="hidden" name="tax" value="0">

<input type="image" src="https://www.paypal.com/en_US/i/btn/x-click-but21.gif" border="0" name="submit" alt="Make payments with PayPal - it's fast, free and secure!">

</form>

EOF;

$h->endpage();