PHP- Kodu:
<%
Function Temizle(data)
data = Replace (data ,chr(13) ,"<br>", 1, -1, 1)
data = Replace (data ,"`" ,Chr(96),1,-1,1)
data = Replace (data ,"=" ,Chr(61),1,-1,1)
data = Replace (data ,"&" ,Chr(38),1,-1,1)
data = Replace (data ,"%" ,Chr(37),1,-1,1)
data = Replace (data ,"!" ,Chr(33),1,-1,1)
data = Replace (data ,"#" ,Chr(35),1,-1,1)
data = Replace (data ,"<" ,Chr(60),1,-1,1)
data = Replace (data ,">" ,Chr(62),1,-1,1)
data = Replace (data ,"*" ,Chr(42),1,-1,1)
data = Replace (data ,"/" ,Chr(47),1,-1,1)
data = Replace (data ,"\" ,Chr(92),1,-1,1)
data = Replace (data ,"'" ,Chr(39),1,-1,1)
Temizle=data
End Function
Set Conn = Server.CreateObject("ADODB.Connection")
Conn = "Provider=SQLOLEDB.1;Persist Security Info=False;User ID=xxx;Password=xxx;Initial Catalog=DATA;Data Source=127.0.0.1"
Set Rs1 = Server.CreateObject("Adodb.Recordset")
Set Rs2 = Server.CreateObject("Adodb.Recordset")
Set Rs3 = Server.CreateObject("Adodb.Recordset")
Response.Buffer = True
%>
<%
If Session("AccountID") = "" Then Response.Write "<script language=""javascript""> { alert(""DİKKAT ;\nBu Sayfaya Girebilmek İçin Lütfen Giriş Yapınız ..!""); window.top.location.href = ""index.asp""; } </script>"
AccountID = CheckSQLInjection(Session("AccountID"))
Session("Oturum") = True
Session("Kullanici")=Session("AccountID")
If Request.Form("form") = "esnYukle" Then
Rs1.Open "Select * From _CODE_5000 Where Code = '"&Temizle(Request.Form("Esn1"))&Temizle(Request.Form("Esn2"))&Temizle(Request.Form("Esn3"))&Temizle(Request.Form("Esn4"))&Temizle(Request.Form("Esn5"))&"' and statu = 0",Conn,1,3
If Not Rs1.Eof Then
ToplamCash = Rs1("cash") + Rs1("cashbonus")
Rs2.Open"Update TB_User Set Knight_Cash = Knight_Cash + "&ToplamCash&" Where StrAccountID = '"&Session("Kullanici")&"'",Conn,1,3
Rs2.Open"Update _ESN_COUNT Set Deneme = 0 Where StrAccountID = '"&Session("Kullanici")&"'",Conn,1,3
Rs2.Open "update _CODE_5000 set statu = 1 Where Code = '"&Temizle(Request.Form("Esn1"))&Temizle(Request.Form("Esn2"))&Temizle(Request.Form("Esn3"))&Temizle(Request.Form("Esn4"))&Temizle(Request.Form("Esn5"))&"'",Conn,1,3
Rs2.Open "INSERT INTO _ESN_5000 (Code,Cash,CashBonus,StrAccountID) VALUES ('"&Temizle(Request.Form("Esn1"))&Temizle(Request.Form("Esn2"))&Temizle(Request.Form("Esn3"))&Temizle(Request.Form("Esn4"))&Temizle(Request.Form("Esn5"))&"','"&Rs1("cash")&"','"&Rs1("cashbonus")&"','"&Session("Kullanici")&"')",Conn,1,3
Session("cashYukle") = True
Else
Rs2.Open "Select * From _ESN_COUNT Where StrAccountID = '"&Session("Kullanici")&"'",Conn,1,3
If Not Rs2.Eof Then
Rs3.Open "Update _ESN_COUNT Set Deneme = Deneme + 1 Where StrAccountID = '"&Session("Kullanici")&"'",Conn,1,3
Else
Rs3.Open "INSERT INTO _ESN_COUNT (StrAccountID,Deneme) VALUES ('"&Session("Kullanici")&"','0')",Conn,1,3
End If
If Rs2("Deneme") => "5" Then
Rs3.Open"Update TB_User Set Durum = 0 Where StrAccountID = '"&Session("Kullanici")&"'",Conn,1,3
Session("Durum") = False
End If
Rs2.Close
End If
Rs1.Close
Response.Redirect Request.ServerVariables("HTTP_REFERER")
End If
dim mehmet,rs41
set rs41 = Server.CreateObject("Adodb.Recordset")
rs41.open"select * from TB_User where StrAccountID = '"&Session("Kullanici")&"'",Conn,1,3
%>
<body bgcolor="#000000" topmargin="0" leftmargin="0" rightmargin="0" bottommargin="0" marginwidth="0" marginheight="0" text="#FFFFFF">
<table border="0" width="634" cellspacing="0" cellpadding="0" background="Images/ItemList/BackLine.jpg" height="505">
<tr>
<td class="GTitleBold" align="center">
<%
if rs41("Durum")=0 then
%>
<table border="0" width="400" id="table3" cellspacing="0" cellpadding="0">
<tr>
<td align="center">
<font face="Verdana" size="2" color="#FFFFFF">Hesabınız bloke edilmiştir. Yeniden
aktif edebilmek için <b> <a href="mailto:xxx@xxx.net">
<font color="#FFFF00">xxx@xxx.net</font></a></b>
adresine e-posta ile bildiriniz.</font></td>
</tr>
</table>
<%
else
%>
<table border="0" width="400">
<%If Session("cashYukle") = True Then%>
<tr>
<meta http-equiv="refresh" content="3;url=default.asp">
<td><font face="Verdana" style="font-size: 9pt"><%=Session("Kullanici")%> Adlı hesabınıza ESN başarıyla yüklenmiştir.</font></td>
</tr>
<%
Session("cashYukle") = ""
End If
Rs1.Open "Select * From TB_USER Where StrAccountID = '"&Session("Kullanici")&"' and Durum = 1",Conn,1,3
%>
<tr>
<td>
<br>
<br>
<table border="0" width="100%" id="table2">
<form name="cax" method="post">
<font face="Verdana">
<input type="hidden" name="form" value="esnYukle">
</font>
<script type="text/javascript">
function advance2(currentField,nextField,limit) {
if(nextField!="yukle"&&document.cax[currentField].value.length == limit){
document.cax[nextField].select();
} else {
if (document.cax[currentField].value.length == limit) {
document.cax[currentField].maxLength=limit
document.cax[nextField].select()
document.cax[nextField].disabled=false
document.cax[currentField].blur()
document.cax[nextField].style.backgroundColor="#EFCCA4"
}
}
}
</script>
<tr>
<td align="left" colspan="5"><hr><font face="Verdana" size="2">ESN KODU</font></td>
</tr>
<tr>
<td align="center">
<font face="Verdana">
<input type="text" name="Esn1" size="10" onclick="select()" onKeyUp="advance2('Esn1','Esn2',4)" maxlength="4" tabindex="1"><font size="2"> </font>
</font> </td>
<td align="center">
<font face="Verdana">
<input type="text" name="Esn2" size="10" onclick="select()" onKeyUp="advance2('Esn2','Esn3',4)" maxlength="4" tabindex="2"></font></td>
<td align="center">
<font face="Verdana">
<input type="text" name="Esn3" size="10" onclick="select()" onKeyUp="advance2('Esn3','Esn4',4)" maxlength="4" tabindex="3"></font></td>
<td align="center">
<font face="Verdana">
<input type="text" name="Esn4" size="10" onclick="select()" onKeyUp="advance2('Esn4','Esn5',4)" maxlength="4" tabindex="4"><font size="2"> </font>
</font> </td>
<td align="center">
<font face="Verdana">
<input type="text" name="Esn5" size="10" onKeyUp="advance2('Esn5','yukle',4)" maxlength="4" tabindex="5"></font></td>
</tr>
</table>
</td>
</tr>
<tr>
<td>
<p align="center">
<input type="submit" value="Kodu Yükle" name="yukle" onclick="this.blur()"><hr>
<p align="left"><font size="1" face="Verdana"><font color="#FFFF00">
Önemli Not:</font> 5 Denemeden sonra hesap bloke olmaktadır.</font><p align="center"> </td>
</tr>
</form>
</table>
<%
Rs1.Close
%>
<%
End If
%>
<%
Set Rs1 = Nothing
Set Rs2 = Nothing
Set Rs3 = Nothing
Set Conn = Nothing
%>
</td>
</tr>
</table>