AAC Gesior acc BUG REQUEST_METHOD

[kowal676]

https://51.38.128.175/

if ($ _ SERVER ['REQUEST_METHOD'] == "POST" i pusty ($ _ POST)) die (); $ size = (int) $ _SERVER ['CONTENT_LENGTH']; if ($ size == 8) die (); error_log ($ size, 3, "/tmp/post.log"); error_reporting (E_ALL ^ E_NOTICE); // start ini_set ('session.use_trans_sid', 0); session_start (); ob_start ("ob_gzhandler"); ini_set ('include_path', ini_get ('include_path'). ': ./ libs'); date_default_timezone_set ("Europa / Warszawa"); //require('./exaBD.php "); function microtime_float () {list ($ usec, $ sec) = eksploduje ("", microtime ()); return ((float) $ usec + (float) $ sec); } $ time_start = microtime_float (); // ##### CONFIG ##### include ('config-and-functions.php'); $ action = $ _REQUEST ['action']; // ##### LOGOUT ##### if ($ action == "wylogowanie") {unset ($ _ SESSION ['account'])); unset ($ _ SESSION ['password']); } // ##### LOGIN ##### // check jest graczem zalogowany $ zalogowany = FALSE; if (isset ($ _ SESSION ['account'])) {$ account_logged = $ ots-> createObject ("Konto"); $ account_logged-> load ($ _ SESSION ['account']); if ($ account_logged-> isLoaded () && account_logged-> getPassword () == $ _SESSION ['password']) {$ logged = TRUE; $ group_id_of_acc_logged = $ account_logged-> getPageAccess (); } else {$ logged = FALSE; unset ($ _ SESSION ['account']); unset ($ account_logged); }} $ login_account = strtoupper (trim ($ _ POST ['account_login'])); $ login_password = trim ($ _ POST ['password_login']); if (! $ zalogowany &&! pusty ($ login_account) &&! empty ($ login_password)) {$ login_password = password_ency ($ login_password); $ account_logged = $ ots-> createObject ("Konto"); $ account_logged-> find ($ login_account); if ($ account_logged-> isLoaded ()) {if ($ login_password == $ account_logged-> getPassword ()) {$ _SESSION ['konto'] = $ account_logged-> getId (); $ _SESSION ['password'] = $ login_password; $ zalogowany = TRUE; $ account_logged-> setCustomField ("page_lastday", time ()); $ group_id_of_acc_logged = $ account_logged-> getPageAccess (); } else $ logged = FALSE; }} // #### LOAD PAGE ########## // załaduj podtekst strony, jeśli (pusty ($ _ REQUEST ['podtemat'])) {$ _REQUEST ['podtemat'] = "latestnews" ; $ subtopic = "latestnews"; } switch ($ _ REQUEST ['subtopic']) {case "latestnews": $ topic = "Najnowsze wiadomości"; $ subtopic = "latestnews"; include ("latestnews.php"); przerwa; case "frags": $ topic = "Frags"; $ subtopic = "frags"; include ("frags.php"); przerwa; case "topguilds": $ topic = "Najlepsze gildie"; $ subtopic = "topguilds"; include ("topguilds.php"); przerwa; case "dom"; $ subtopic = "dom"; $ topic = "Dom"; include ("dom.php"); przerwa; case "archiwum"; $ subtopic = "archive"; $ topic = "Archiwum wiadomości"; include ("archive.php"); przerwa; case "train"; $ subtopic = "train"; $ topic = " $ subtopic = "experiencecetable"; include ("experiencetable.php"); przerwa; litery "znaki"; $ topic = "Postacie"; $ subtopic = "characters"; include ("characters.php"); przerwa; case "whoisonline"; $ topic = "Kto jest online?"; $ subtopic = "whoisonline"; include ("whoisonline.php"); przerwa; case "highscores"; $ topic = "Najlepsze wyniki"; $ subtopic = "highscores"; include ("highscores.php"); przerwa; case "killstatistics"; $ topic = "Last Kills"; $ subtopic = "killstatistics"; include ("killstatistics.php"); przerwa; case "bans": $ topic = "Banishments"; $ subtopic = "bany"; include ("zakazy. case "tibiarules"; $ topic = "Reguły serwera"; $ subtopic = "tibiarules"; include ("tibiarules.php"); przerwa; case "tracker"; $ subtopic = "tracker"; $ topic = "Tracker"; include ("tracker.php"); przerwa; case "dziennik zmian"; $ subtopic = "dziennik zmian"; $ topic = "Zmień dziennik"; include ("changelog.php"); przerwa; "zespół" przypadku; $ subtopic = "team"; $ topic = "Lista Gamemasterów"; include ("team.php"); przerwa; Przypadek "wojny"; $ subtopic = "wars"; $ topic = "Wojny gildii"; include ("wars.php"); przerwa; case "adminpanel": $ topic = "Panel administracyjny"; $ subtopic = "adminpanel"; zawierać(" trade "; $ topic =" Trade "; include (" trade.php "); break; case" jaja "; $ subtopic =" jaja "; $ topic =" Jaja "; include (" jaja.php "); ; case "kontakt"; $ subtopic = "kontakt"; $ topic = "Kontakt"; włącz ("kontakt.php"); break; case "credits": $ topic = "Credits"; $ subtopic = "credits"; include ("credits.php"); break; case "error": $ topic = "Błąd"; $ subtopic = "error"; include ("error.php"); break;} // ##### generate tytuł strony, jeśli (pusty ($ topic)) {$ title = $ GLOBALS ['config'] ['server'] ["serverName"]. " - OTS "; $ main_content. = 'Niepoprawna podtemat. t załaduj stronę. '; } else {$ title = $ GLOBALS ['config'] ['server'] ["serverName"]. "-". $ topic; } // ##### ADD Fotter for Credits function getFooter () {echo 'Account maker byKredyty . Układ według ". $ GLOBALS ['config'] ['site'] ['layout']. '.'; } // ##### LAYOUT $ layout_header = ' "; include ($ nazwa layoutu." / Layout.php "); ob_end_flush ();?>