001.<?php
002.
003.
004.
005.
006.
007.
008.# ------------------------------------- Config Begin ------------------------------------- #
009.
010.
011.
012.$_CONFIG['mysql']['dbhost'] = 'localhost';
013.
014.
015.$_CONFIG['mysql']['dbuser'] = '*****';
016.
017.
018.$_CONFIG['mysql']['dbpw'] = '*****';
019.
020.
021.$_CONFIG['mysql']['dbname'] = '*****';
022.
023.
024.$_CONFIG['mysql']['tbname'] = 'member';
025.
026.
027.$_CONFIG['mysql']['field_username'] = 'member_id';
028.
029.
030.$_CONFIG['TMN']['point_field_name'] = 'point';
031.
032.
033.
034.
035.
036.
037.$_CONFIG['TMN'][50]['point'] = 50;
038.$_CONFIG['TMN'][90]['point'] = 90;
039.$_CONFIG['TMN'][150]['point'] = 150;
040.$_CONFIG['TMN'][300]['point'] = 320;
041.$_CONFIG['TMN'][500]['point'] = 550;
042.$_CONFIG['TMN'][1000]['point'] = 1100;
043.
044.
045.
046.
047.
048.define('API_PASSKEY', '*****');
049.
050.# -------------------------------------- Config End -------------------------------------- #
051.
052.
053.require_once('AES.php');
054.
055.
056.
057.
058.mysql_connect($_CONFIG['mysql']['dbhost'],$_CONFIG['mysql']['dbuser'],$_CONFIG['mysql']['dbpw']) or die('ERROR|DB_CONN_ERROR|' . mysql_error());
059.mysql_select_db($_CONFIG['mysql']['dbname']) or die('ERROR|DB_SEL_ERROR|' . mysql_error());
060.
061.
062.
063.
064.if($_SERVER['REMOTE_ADDR'] == '203.146.127.115' && isset($_GET['request']))
065.{
066. $aes = new Crypt_AES();
067. $aes->setKey(API_PASSKEY);
068. $_GET['request'] = base64_decode(strtr($_GET['request'], '-_,', '+/='));
069. $_GET['request'] = $aes->decrypt($_GET['request']);
070. if($_GET['request'] != false)
071. {
072. parse_str($_GET['request'],$request);
073. $request['Ref1'] = base64_decode($request['Ref1']);
074.
075.
076. $result = mysql_query('SELECT * FROM `'. $_CONFIG['mysql']['tbname'] .'` WHERE `'. $_CONFIG['mysql']['field_username'] .'`=\'' . mysql_real_escape_string($request['Ref1']) . '\' LIMIT 1') or die(mysql_error());
077. if(mysql_num_rows($result) == 1)
078. {
079. $row = mysql_fetch_assoc($result);
080. if(mysql_query("UPDATE `". $_CONFIG['mysql']['tbname'] ."` SET `". $_CONFIG['TMN']['point_field_name'] ."` = `". $_CONFIG['TMN']['point_field_name'] ."`+'". $_CONFIG['TMN'][$request['cardcard_amount']]['point'] ."' WHERE `". $_CONFIG['mysql']['field_username'] ."` = '". $row[$_CONFIG['mysql']['field_username']] ."' LIMIT 1 ") == false)
081. {
082. echo 'ERROR|MYSQL_UDT_ERROR|' . mysql_error();
083. }
084. else
085. {
086. echo 'SUCCEED|UID=' . $row[$_CONFIG['mysql']['field_username']];
087. }
088. }
089. else
090. {
091. echo 'ERROR|INCORRECT_USERNAME';
092. }
093.
094.
095. }
096. else
097. {
098. echo 'ERROR|INVALID_PASSKEY';
099. }
100.}
101.else
102.{
103. echo 'ERROR|ACCESS_DENIED';
104.}
105.?>
Quote:
จัดไปครับ
