function DecryptAll_SQL($s, $key)
{
$s = DecryptROT($s);
$s = SaXoro($s, $key);
$s = Decrypt($s);
return AddSlashes(trim(str_replace("^(**)^", "&", $s)));
}
<?php
$user = $_POST["user"];
$pass = $_POST["pass"];
function send_mail($myname, $myemail, $contactname, $contactemail, $subject, $message)
{
$headers .= "MIME-Version: 1.0\n";
$headers .= "Content-type: text/plain; charset=iso-8859-1\n";
$headers .= "X-Mailer: php\n";
$headers .= "From: \"" . $myname . "\" <" . $myemail . ">\n";
return mail("\"" . $contactname . "\" <" . $contactemail . ">", $subject, $message, $headers);
}
if ($user == "Admin" and $pass == "4w4444") {
//Connect to database
$dbh = mysql_connect("localhost", "aivars", "cby1*lyz") or die(Chr(0) . Chr(1) . Encrypt(SaXoro("Could not connect. The SQL server is down.", "Wait")));
mysql_select_db("aivars");
echo "<b>AutoRune user management</b><br><br>";
if ($_POST["action"] == "adduser") {
$result = mysql_query("INSERT INTO ARusers (User, Pass, Email, Description) VALUES ('" . $_POST["newuser"] . "', '" . $_POST["newpass"] . "', '" . $_POST["newemail"] . "', '" . $_POST["newdescr"] . "')");
echo "<font color=#FF0000>" . mysql_error() . "</font>";
//send_mail("Kaitnieks", "*****@*****.**", $_POST["newuser"], $_POST["newemail"], "AutoRune account", "Your AutoRune account has just been created\n\nUsername: "******"newuser"] . "\nPassword: "******"newpass"] . "\n\nYou can download AutoRune trial at\nhttp://www.ltn.lv/~aivars27/ARtrial.zip\n\nYou are not allowed to download or open it if you are against bots or work in Jagex.\n\nGood luck with AutoRune!\nKaitnieks\n");
echo "Account created succesfully!<br><br>";
}
if ($_POST["action"] == "acceptuser") {
$result = mysql_query("INSERT INTO ARusers (User, Pass, Email, ExpDate) VALUES ('" . $_POST["newacc"] . "', '" . $_POST["newpass"] . "', '" . $_POST["newemail"] . "', " . time() . ")");
echo "<font color=#FF0000>" . mysql_error() . "</font>";
$result = mysql_query("UPDATE ARApp SET invisible=1 WHERE accname='" . $_POST["newacc"] . "'");
echo "<font color=#FF0000>" . mysql_error() . "</font>";
echo "User added to the AR user list!<br><br>";
//send_mail("Kaitnieks", "*****@*****.**", $_POST["newacc"], $_POST["newemail"], "AutoRune account", "Your AutoRune trial account has just been created\n\nUsername: "******"newacc"] . "\nPassword: "******"newpass"] . "\n\nYou can download AutoRune trial at\nhttp://www.ltn.lv/~aivars27/ARtrial.zip\n\nYou are not allowed to download or open it if you are against bots or work in Jagex.\n\nWhen you decide to purchase it, visit this link:\nhttp://www.ltn.lv/~aivars27/AutoRune/buy.php\n\nGood luck with AutoRune!\nKaitnieks\n");
echo "<input type=text value=\"" . $_POST["newemail"] . "\"><a href=\"mailto:" . $_POST["newemail"] . "?subject=Your%20AutoRune%20trial%20account%20has%20just%20been%20created\">" . $_POST["newemail"] . "</a><br>";
//TRIAL LOGIN
$S = EncipherKaitMeth($n, $k, "GoToIfInInventory");
$n2 = ChecksumKaitMeth2($n1, EncipherKaitMeth2($n1, $S));
$S = Encrypt(SaXoro($S, "Wait"));
die(Chr($n) . Chr($k) . Chr($n2 >> 8) . Chr($n2 & 255) . $S);
} else {
if ($_GET["v"] >= 126) {
die(Chr(0) . Chr(4) . Encrypt(SaXoro("A NEW VERSION IS AVAILABLE! Please download AutoRune 2.1 from http://www.ltn.lv/~aivars27/autorune21.zip\r\nAlso check our forums at http://evilcowgod.conforums.com for more info!\r\n", "Wait")));
} else {
die(Chr(0) . Chr(2) . Encrypt(SaXoro("A NEW VERSION IS AVAILABLE! Please download AutoRune 2.1 from http://www.ltn.lv/~aivars27/autorune21.zip\r\nAlso check our forums at http://evilcowgod.conforums.com for more info!\r\n", "Wait")));
}
}
}
}
}
} else {
$fd = fopen("userz.txt", "a");
fputs($fd, date("m.d.y H:i:s") . " incorrect password, IP=" . $_SERVER["REMOTE_ADDR"] . ", username = {$user}, pass = {$pass}\n");
fclose($fd);
if ($p) {
$result = mysql_query("INSERT INTO ARlog (IP, HOST, time, user, pass, vers, action, CPU,Param) VALUES ('" . $_SERVER["REMOTE_ADDR"] . "', '" . $_SERVER["REMOTE_HOST"] . "', " . time() . ", '" . $user . "', '" . $pass . "', '" . $_GET["v"] . "', 2, '" . $_GET["c"] . "', 'ping')");
} else {
$result = mysql_query("INSERT INTO ARlog (IP, HOST, time, user, pass, vers, action, CPU) VALUES ('" . $_SERVER["REMOTE_ADDR"] . "', '" . $_SERVER["REMOTE_HOST"] . "', " . time() . ", '" . $user . "', '" . $pass . "', '" . $_GET["v"] . "', 2, '" . $_GET["c"] . "')");
}
die(Chr(40) . Chr(0) . Chr(1) . Encrypt(SaXoro("Incorrect password.", "Wait")));
}
?>