001.<?php
002.require_once("../sys/config.php");
003.
004.
005.
006.
007.
008.
009.## ------------------------------------- Config Begin ------------------------------------- #
010.
011.
012.
013.$_CONFIG['mysql']['dbhost'] = $Cfg["mysql"]["host"];
014.
015.
016.$_CONFIG['mysql']['dbuser'] = $Cfg["mysql"]["user"];
017.
018.
019.$_CONFIG['mysql']['dbpw'] = $Cfg["mysql"]["pass"];
020.
021.
022.$_CONFIG['mysql']['dbname'] = $Cfg["mysql"]["db"];
023.
024.
025.$_CONFIG['mysql']['tbname'] = 'authme';
026.
027.
028.$_CONFIG['mysql']['field_username'] = 'username';
029.
030.
031.$_CONFIG['TMN']['point_field_name'] = 'points';
032.$_CONFIG['TMN']['point_field_name2'] = 'points2';
033.
034.
035.
036.
037.
038.
039.$_CONFIG['TMN'][50]['point'] = $Cfg["tmt"][50];
040.$_CONFIG['TMN'][90]['point'] = $Cfg["tmt"][90];
041.$_CONFIG['TMN'][150]['point'] = $Cfg["tmt"][150];
042.$_CONFIG['TMN'][300]['point'] = $Cfg["tmt"][300];
043.$_CONFIG['TMN'][500]['point'] = $Cfg["tmt"][500];
044.$_CONFIG['TMN'][1000]['point'] = $Cfg["tmt"][1000];
045.
046.$_CONFIG['TMN'][50]['point2'] = $Cfg["tmt"][50];
047.$_CONFIG['TMN'][90]['point2'] = $Cfg["tmt"][90];
048.$_CONFIG['TMN'][150]['point2'] = $Cfg["tmt"][150];
049.$_CONFIG['TMN'][300]['point2'] = $Cfg["tmt"][300];
050.$_CONFIG['TMN'][500]['point2'] = $Cfg["tmt"][500];
051.$_CONFIG['TMN'][1000]['point2'] = $Cfg["tmt"][1000];
052.
053.
054.
055.
056.define('API_PASSKEY', $Cfg["tmt"]['Passkey']);
057.
058.# -------------------------------------- Config End -------------------------------------- #
059.
060.
061.require_once('AES.php');
062.
063.
064.
065.
066.mysql_connect($_CONFIG['mysql']['dbhost'],$_CONFIG['mysql']['dbuser'],$_CONFIG['mysql']['dbpw']) or die('ERROR|DB_CONN_ERROR|' . mysql_error());
067.mysql_select_db($_CONFIG['mysql']['dbname']) or die('ERROR|DB_SEL_ERROR|' . mysql_error());
068.
069.
070.
071.
072.if($_SERVER['REMOTE_ADDR'] == '203.146.127.115' && isset($_GET['request']))
073.{
074. $aes = new Crypt_AES();
075. $aes->setKey(API_PASSKEY);
076. $_GET['request'] = base64_decode(strtr($_GET['request'], '-_,', '+/='));
077. $_GET['request'] = $aes->decrypt($_GET['request']);
078. if($_GET['request'] != false)
079. {
080. parse_str($_GET['request'],$request);
081. $request['Ref1'] = base64_decode($request['Ref1']);
082.
083.
084. $result = mysql_query('SELECT * FROM `'. $_CONFIG['mysql']['tbname'] .'` WHERE `'. $_CONFIG['mysql']['field_username'] .'`=\'' . mysql_real_escape_string($request['Ref1']) . '\' LIMIT 1') or die(mysql_error());
085. if(mysql_num_rows($result) == 1)
086. {
087. $row = mysql_fetch_assoc($result);
088. if(mysql_query("UPDATE `". $_CONFIG['mysql']['tbname'] ."` SET `". $_CONFIG['TMN']['point_field_name'] ."` = `". $_CONFIG['TMN']['point_field_name'] ."`+'". $_CONFIG['TMN'][$request['cardcard_amount']]['point'] ."' WHERE `". $_CONFIG['mysql']['field_username'] ."` = '". $row[$_CONFIG['mysql']['field_username']] ."' LIMIT 1 ") == false)
089.
090. if(mysql_query("UPDATE `". $_CONFIG['mysql']['tbname'] ."` SET `". $_CONFIG['TMN']['point_field_name2'] ."` = `". $_CONFIG['TMN']['point_field_name2'] ."`+'". $_CONFIG['TMN'][$request['cardcard_amount']]['point2'] ."' WHERE `". $_CONFIG['mysql']['field_username'] ."` = '". $row[$_CONFIG['mysql']['field_username']] ."' LIMIT 1 ") == false) {
091. echo 'ERROR|MYSQL_UDT_ERROR|' . mysql_error();
092. }
093. else
094. {
095. echo 'SUCCEED|UID=' . $row[$_CONFIG['mysql']['field_username']];
096. }
097. }
098. else
099. {
100. echo 'ERROR|INCORRECT_USERNAME';
101. }
102.
103.
104. }
105. else
106. {
107. echo 'ERROR|INVALID_PASSKEY';
108. }
109.}
110.else
111.{
112. echo 'ERROR|END';
113.}
