[Web Site] Painel de Voto 4.0 by JPSMASTER16

[kikopsm]

Não contêm essa linha não segue o verificar completo:

<?php
ini_set("allow_url_fopen", 1);
ini_set("allow_url_include", 1);
include "config/config.php";

if($contagem != 1) {
header("Location: index.php");
}else{
$dataatual = date("d/m/Y");//Dia: M&ecirc;s: Ano:
?>


<?php

//inicia busca de login
//************************************************** ******************************
$sql_login = mysql_query("SELECT * FROM loginvotos WHERE login='$_SESSION[login]'");
$c_login = mysql_num_rows($sql_login);
//************************************************** ******************************
//inicia busca de ip
//************************************************** ******************************
$sql_ip = mysql_query("SELECT * FROM ipvotos WHERE ip='$_SERVER[REMOTE_ADDR]'");
$c_ip = mysql_num_rows($sql_ip);
//************************************************** ******************************


if (($c_ip == 0) && ($c_login == 0)) {


$charid = $_POST['char_id'];

$a = mysql_query("SELECT valor FROM voto_config WHERE id = 'seu_id_topgs200'") or die (mysql_error());
$c_a = mysql_fetch_array($a);


//************************************************** ********************************
$ipUsuario = $_SERVER['REMOTE_ADDR'];
$arrIpUsuario = explode('.', $ipUsuario);
$arrIpUsuario[3] = 'xxx';
$ipUsuario = implode('.', $arrIpUsuario);



$site = file_get_contents('http://www.topgs200.com/lineage2/voto.php?id='.$c_a['valor'].'');
$pattern = '/[0-9]{1,3}[.][0-9]{1,3}[.][0-9]{1,3}[.][x]{3}/i';
preg_match_all($pattern, $site, $arrResultado);
$resultado = $arrResultado[0];

if(array_search($ipUsuario, $resultado)===false){
echo "<script>alert('Voce nao votou, ou nao confirmou corretamente o seu voto, clique em VOTAR novamente!!');</script>";

echo "<script>window.location='javascript:history.g o(-1)';</script>";

}else{
//inicio do registro de lieberação de acesso ao site******************************

mysql_query("REPLACE INTO `ipvotos` (`ip`, `datadovoto`) VALUES ('$_SERVER[REMOTE_ADDR]', '$dataatual')") or die(mysql_error());
mysql_query("REPLACE INTO `loginvotos` (`login`, `datadovoto`) VALUES ('$_SESSION[login]', '$dataatual')") or die(mysql_error());

///////////////////////////////////////////////////////////////////////////////////////////////////////////////


$h = mysql_query("SELECT * FROM items WHERE owner_id = '".$charid."' AND itemid = '".$item."' AND loc = 'WAREHOUSE'") or die (mysql_error());

$num_h = mysql_num_rows($h);

if ($num_h > 0) {

$c_h = mysql_fetch_array($h);

mysql_query("UPDATE items SET count = (count + '".$qtd_item."') WHERE object_id = '".$c_h['object_id']."'") or die (mysql_error());

echo "<script>alert('Verificado com Sucesso, seu item se encontra na Warehouse!!');</script>";
echo "<script>window.location='javascript:history.g o(-1)';</script>";
}else{

function random2($nNumeros) {
$aRand = array();
for ($i=1; $i<=1; $i++) {
$aRand[$i] = $rand = rand(1, 9);

while (count($aRand) < $nNumeros)
if (!in_array($rand, $aRand))
$aRand[] = $rand;
else
$rand = rand(1, 9);
}

return $aRand;
}

function random($x) {
$return .= '5';
foreach(random2($x) as $num) {
$return .= $num;
}
return $return;
}


$random = random(8);

mysql_query("INSERT INTO items (owner_id, object_id, itemid, count, enchant_level, loc) VALUES ('".$charid."', '".$random."', '".$item."', '".$qtd_item."', 0, 'WAREHOUSE')") or die (mysql_error());


//************************************************** **********************************
mysql_query("UPDATE totalvoto SET votos = (votos+1)") or die(mysql_error());

//fim de todo o registro****************************************** *******************
echo "<script>alert('Verificado com Sucesso, seu item se encontra na Warehouse!!');</script>";
echo "<script>window.location='javascript:history.g o(-1)';</script>";


}
}
}else{
echo "<script>alert('Você não pode faser isso!!');</script>";
echo "<script>window.location='javascript:history.g o(-2)';</script>";
}
?>
<?php }
?>