No, only one particular one, I figgured it out anyway
First page
<?
if (!file_exists("c:/fsoserver/dat/char/$username.txt")) {
print "Incorrect Username";
exit;
}
$array = file("c:/fsoserver/dat/char/$username.txt");
$usersys = "$username.txt`$username";
foreach($array as $row) {
$line = explode(":", $row);
if ($usersys == $line[0]) {
if ($password == $line[1]) {
$vile = explode("/", $row);
$faction = $vile[4];
$factions = explode(":", $faction);
if ($vile[7] == 1) {
$vilen = "Yes";
}
if ($vile[7] == 0) {
$vilen = "No";
}
if ($factions[0] == 1) {
$fact = "Mages";
}
if ($factions[0] == 2) {
$fact = "Warriors";
}
if ($factions[0] == 0) {
$fact = "None";
}
if ($factions[0] == 3) {
$fact = "Adventurers";
}
echo ("Username: $username<br>Password: $line[1]<br>Vile: $vilen<br>Faction: $fact<br><br>");
$unvile = str_replace(":/1/", ":/0/", $row);
$facti = str_replace("$faction", "0:0", $row);
echo ("<form action=\"main.php?id=vile.php\" method=post><input type=\"hidden\" name=\"username\" value=\"$username\"><input type=\"hidden\" name=\"file\" value=\"$unvile\"><input type=\"submit\" value=\"Unvile Me!\"></form><br>");
echo ("<form action=\"main.php?id=faction.php\" method=post><input type=\"hidden\" name=\"username\" value=\"$username\"><input type=\"hidden\" name=\"file\" value=\"$facti\"><input type=\"submit\" value=\"Remove me from $fact faction!\"></form>");
exit;
}
Print "Incorrect Password";
exit;
}
}
?>
Vile.php
<?
if (empty ($username) || empty ($file)) {
print "Your not ment to be here, naughty naughty";
exit;
}
$array = file("c:/fsoserver/dat/char/$username-i.txt");
foreach($array as $row) {
$line = explode("|", $row);
if ($line[0] > 15000) {
$fp = fopen("c:/fsoserver/dat/char/$username.txt","w");
fwrite($fp, $file);
echo ("<meta Http-Equiv=\"Refresh\" content=\"0;url=main.php?id=vilegold.php&username=$username\">");
}
Print "You do not have 15000 gold";
}
?>
Vilegold.php
<?
if (empty ($username)) {
print "IP Logged for hacking attempt!";
//MySQL Information removed
exit;
}
$array = file("c:/fsoserver/dat/char/$username-i.txt");
foreach($array as $row) {
$line = explode("|", $row);
if ($line[0] > 15000) {
$price = "15000";
$gold = $line[0]-$price;
$newinv = str_replace("$line[0]", "$gold", $row);
$fp = fopen("c:/fsoserver/dat/char/$username-i.txt","w");
fwrite($fp, $newinv);
Print "Character now Un-Viled, 15000 Gold removed from account";
exit;
}
}
?>
