Sendcash.php secured and messages added.

[Redex]

Hello again, fellow members of the Makewebgame community. Today i bring to you, a secured sendcash.php with the ability to send messages added as well ;)

 

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

Enjoy :P

[Zero-Affect]

in most fetching data exploits on MC what is the most common mistake made with MySQL queries?

hint: * selects every single column...

so in my opinion if they can error the script even in the slightest then it's possible to select any or all columns in a table... again i say add [OPINION] on the end of your subject on the first post.

[Paddy]

Hi guys,

Just wanted to add a little bit to it, if you cant see the difference well would be best to test it your selves,

 

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

Hope you like the little effort i put in :)

[Redex]

Thanks for that, Paddytm.

[Zero-Affect]

I'm so proud no *'s paddy but may i suggest one little thing, `` on

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

[Redex]

I'm so proud no *'s paddy but may i suggest one little thing, `` on

 

 

 

 

PHP Source code

 

 

1

2

3

 

$it = $db->query("SELECT userid,

username FROM users u LEFT JOIN userstats us ON

u.userid=us.userid WHERE u.userid=".$_GET['ID']."");

 

 

Zero Affect, so polite and sweet :P

[Robertmo116]

Nice modification.

I don't know about you guys but i got a SQL error when running this script i had to change

 

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

to

 

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

[L96A1]

nice little add on

[gazsr123]

When I use paddytm's version I get the error:

 

Parse error: syntax error, unexpected $end in /home/theghetto/public_html/sendcash.php on line 138

 

and that line is ?>

so I don't know what the error is.

[Jordan Palmer]

add a } before..

[gazsr123]

That didn't solve the problem. Their already is 2 } before ?>

[Jordan Palmer]

Try removing the two } that's already there, When I took a quick look over i can't see them being opened anywhere