[CriZ]

المشاركة الأصلية كتبت بواسطة FirsT_MasTer عفوا ,,, لايمكنك مشاهده الروابط لانك غير مسجل لدينا [ للتسجيل اضغط هنا ]

ياريت من المشرف يمسح الموصوع دة والله السيت كلو .php و انا كنت حطو و اخترقني و عمل لنفسو user و رفع الداتا بتعتي ع elitepvpers

[SPOILER="نعم ؟"]guildshow.php

<aside id="right">
		<article>
			<h1 class="top">Guild View</h1>
			<section class="body">
								<center><br /><br />
		<?php 

		
		mssql_select_db($gamedb);
			if($fnc->secure($_GET['name'], 3))
			{
				if($fnc -> numRows("select * from _Guild where Name='$_GET[name]'") == 0)
				{
					echo "Guild with such name not found.";
				}
				else
				{
					$GuildData = $fnc->fetchArray($fnc->exec("select * from _Guild where Name='$_GET[name]'"));
					$GuildMembers = $fnc -> exec("select * from _GuildMember where GuildID='$GuildData[ID]' order by MemberClass asc,Contribution DESC,GuildWarKill DESC,CharLevel DESC,GP_Donation DESC");
			
					/*
					for guild Gold add those lines :
					
					<td align='center'>Gold</td>
					<td align='center'>$GuildData[Gold]</td>
					
					*/?>
<table class="nice_table" width='90%' border='0' align='center' cellpadding='0' cellspacing='0'>
	<tr>
		<td ><b>Name</b></td>
		<td ><b class="color-green"><?php echo $GuildData[Name];?></b></td>
	</tr>
	<tr>
		<td ><b>Level</b></td>
		<td ><?php echo $GuildData[Lvl];?></td>
	</tr>
	<tr>
		<td ><b>Points</b></td>
		<td ><?php echo $GuildData[GatheredSP];?></td>
	</tr>
	<tr>
		<td ><b>Foundation</b></td>
		<td ><?php echo $GuildData[FoundationDate];?></td>
	</tr>
</table>

	<table class="nice_table" width='90%' border='0' align='center' cellpadding='0' cellspacing='0'>
	<tr>
		<td width='5%' ><b>#</td>
		<td width='5%' ><b>Race</b></td>
		<td width='15%' ><b>Charname</b></td>
		<td width='15%' ><b>Nick</b></td>
		<td width='10%' ><b>Level</b></td>
		<td width='15%' ><b>Donation</b></td>
		<td width='15%' ><b>Guild War Kills</b></td>
		<td width='15%' ><b>Guild War Killed</b></td>
		<td width='5%' ><b>Type</b></td>
	</tr>
							<?php $n = 1;
						while($row = mssql_fetch_array($GuildMembers))
						{
							$cName = $fnc->charnameByCharID($row['CharID']);
							$szNickname = "";
							
							$nRefObjID = $fnc -> getRow("select RefObjID from _Char where CharName16='$cName'");
							$icon = "".Race($nRefObjID)."";
							
							$memberType = "";
							if($row['MemberClass'] == 0) $memberType = "<font class='color-red'>Master</font>";
							else
							$memberType = "Member";
							
							if(empty($row['Nickname'])) $szNickname = "<font color='blue'>NONE</font>";
							else $szNickname = $row['Nickname'];?>
	<tr>
		<td ><?php echo $n;?></td>
		<td ><?php echo $icon;?></td>
		<td ><a target="_blank" href='?page=itemrank&name=<?php echo $cName;?>'><b class="color-green"><?php echo $cName;?></a></td>
		<td ><?php echo $szNickname;?></td>
		<td ><?php echo $row[CharLevel];?></td>
		<td ><?php echo $row[GP_Donation];?></td>
		<td ><?php echo $row[GuildWarKill];?></td>
		<td ><?php echo $row[GuildWarKilled];?></td>
		<td ><?php echo $memberType;?></td>
	</tr>
						<? $n++;
						 }
echo "</table>";
				}
			}	else echo "Invalid guild name.";
			
		

		?>
						   </tr>
								</table>
                                <table width='90%' border='0' align='center' cellpadding='0' cellspacing='0'>
									<tr>
										<center><td ><a href="?page=ranking">Click Here To Back To Ranking Page .</a></td>
									</tr>
								</table>
								<br /><br /></center>
			</section>
		</article>
	</aside>

itemrank.php

<?php
if(realpath(__FILE__) == realpath($_SERVER['SCRIPT_FILENAME'])) {
    header('HTTP/1.0 404 Not Found');
	exit;
}
?>
	<aside id="right">
		<article>
			<h1 class="top"># <?php  Echo"$servername";?> , View Player Items</h1>
			<section class="body">
								<center><br /><br />
<table width='90%' border='0' align='center' cellpadding='0' cellspacing='0'>
	<tr>
		<td class="down"><b>Char Name</b></td>
		<td class="down"><b>Image</b></td>
		<td class="down"><b>Item Name</b></td>
		<td class="down"><b>Type</b></td>
		<td class="down"><b>Level</b></td>
		<td class="down"><b>Plus Value</b></td>
	</tr>
<?php 

if(isset($_GET['name']) && addslashes($fnc->secure($_GET['name'])))
{
$nCharName = $_GET['name'];
mssql_select_db($gamedb);
$query = $fnc->exec("
select it.OptLevel, ch.RefObjID, ch.CharName16, obj.AssocFileIcon128, obj.Country, obj.CodeName128 ,obj.ReqLevel1 , item.ItemClass , adv.nOptValue ,es.EndTextString
from _Items as it
LEFT JOIN [dbo].[_Inventory] as inv ON it.ID64 = inv.ItemID
LEFT JOIN [dbo].[_Char] as ch ON inv.CharID = ch.CharID
LEFT JOIN [dbo].[_RefObjCommon] as obj ON it.RefItemID = obj.ID
LEFT JOIN [dbo].[_RefObjItem] as item ON obj.Link = item.ID
LEFT JOIN [dbo].[_BindingOptionWithItem] as adv ON it.ID64 = adv.nItemDBID
LEFT JOIN [dbo].[C_EquipStrings] as es on obj.NameStrID128 = es.TextString
where ch.CharName16 = '$nCharName' and inv.Slot between 0 and 12 and inv.Slot != 8
") or die (mssql_get_last_message());
$charObj = $fnc->fetchArray($query);
echo '<img src="image.php?faces='.$charObj['RefObjID'].'.GIF" alt="" /></img>';
while ($row = $fnc->fetchArray($query)){

echo '<tr>';
echo '<td class="down2">'.$row['CharName16'].'</td>';
if($row['AssocFileIcon128'] == 'xxx'){
echo '<td class="down2"><img src="image.php?item=item\clean.png" width="32" height="32"  alt=""/></td>';
} else {
echo '<td class="down2"><img src="image.php?item='.$row['AssocFileIcon128'].'.png" width="32" height="32"  alt=""/></td>';
}
if($row['CodeName128'] == 'DUMMY_OBJECT'){
echo '<td class="down2">-</td>';
} else {
echo '<td class="down2">'.$row['EndTextString'].'</td>';		
}
$totalvalue = $row['OptLevel']+$row['nOptValue'];
$advonly = $row['nOptValue'];
if($row['CodeName128'] == 'ITEM_ETC_AMMO_ARROW_01' || $row['CodeName128'] == 'ITEM_ETC_AMMO_BOLT_01' || $row['CodeName128'] == 'DUMMY_OBJECT'){
echo '<td class="down2">-</td>';
} else {
$itemclass = $row['ItemClass'];
switch($itemclass) {
case 27:
echo '<td class="down2">Normal</td>';
break;
case 28:
echo '<td class="down2">Seal Of Star</td>';
break;
case 29:
echo '<td class="down2">Seal Of Moon</td>';
break;
case 30:
echo '<td class="down2">Seal Of Sun</td>';
break;
default:
echo '<td class="down2">Normal</td>';
break;
}}
if($row['CodeName128'] == 'ITEM_ETC_AMMO_ARROW_01' || $row['CodeName128'] == 'ITEM_ETC_AMMO_BOLT_01' || $row['CodeName128'] == 'DUMMY_OBJECT'){
echo '<td class="down2">-</td>';
} else {
echo '<td class="down2">'.$row['ReqLevel1'].'</td>';
}
if($row['CodeName128'] == 'ITEM_ETC_AMMO_ARROW_01' || $row['CodeName128'] == 'ITEM_ETC_AMMO_BOLT_01' || $row['CodeName128'] == 'DUMMY_OBJECT'){
echo '<td class="down2">-</td>';
} else {
echo '<td class="down2">'.$totalvalue.'';
switch($advonly) {
case "NULL":
break;
case 1:
echo '+(1) ADV</td>';
break;
case 2:
echo '+(2) ADV</td>';
break;
}}
echo '</tr>';
}
}
else {
	echo 'Character Name Is invalid.';
}
?>	

			</table>
                                <table width='90%' border='0' align='center' cellpadding='0' cellspacing='0'>
									<tr>
										<td class="down2"><a href="?page=ranking">Click Here To Back To Ranking Page .</a></td>
									</tr>
								</table>
								<br /><br /></center>
			</section>
		</article>
	</aside>

[/SPOILER]
يا ريت تجيب دليل قبل لما تقول حاجة زى كدة