[Gesior ACC][FIX] Clone SMS SHOP Points

Lanceq said:

A few days ago a pseudo-hackers cloning SHOP point in SMS with a code. Code differs from the normal log in dotpay so beware.

This is normal log of dotpay.log:

Code:

L153F48N=1201458

This is log if hacker clone sms shop items:

Code:

&id=30535&code=inwob&check=V7B4N1RW&type=sms&#=1338739

Now fix
1. Find this:

Code:

function check_code_dotpay($code, $posted_code, $user_id, $type)
{
        $handle = fopen("http://dotpay.pl/check_code.php?id=".$user_id."&code=".$code."&check=".$posted_code."&type=".$type."&del=0", 'r');
    $status = fgets($handle, 8);
    $czas_zycia = fgets($handle, 24);
    fclose($handle);
    $czas_zycia = rtrim($czas_zycia);
        return array($status, $czas_zycia);
}

It may look different, depending on the version.

2. ctrl+c

Code:

if(ereg('[^0-9A-Za-z]',$code) || ereg('[^0-9A-Za-z]',$posted_code) || ereg('[^0-9A-Za-z]',$user_id) || ereg('[^0-9A-Za-z]',$type))  {
                die("Odejdz duchu nieczysty!");
        }

3. Paste it after:

Code:

function check_code_dotpay($code, $posted_code, $user_id, $type)
{

4. The final effect:

Code:

function check_code_dotpay($code, $posted_code, $user_id, $type)
{
        [COLOR="Red"]if(ereg('[^0-9A-Za-z]',$code) || ereg('[^0-9A-Za-z]',$posted_code) || ereg('[^0-9A-Za-z]',$user_id) || ereg('[^0-9A-Za-z]',$type))  {
                die("odejdz duchu nieczysty");
        }[/COLOR]
        $handle = fopen("http://dotpay.pl/check_code.php?id=".$user_id."&code=".$code."&check=".$posted_code."&type=".$type."&del=0", 'r');
    $status = fgets($handle, 8);
    $czas_zycia = fgets($handle, 24);
    fclose($handle);
    $czas_zycia = rtrim($czas_zycia);
        return array($status, $czas_zycia);
}

Now you will earn more

5. Give me rep++

Click to expand...

Koci94 said:

Give link to Orginal theard...
That's not your job.

Click to expand...

Lanceq said:

Noob?
it's mine tut wtf

Click to expand...

Red said:

Is this just for dotpay?

Red

Click to expand...

Red said:

Is this just for dotpay?

Red

Click to expand...