Bug after atualization

  • Resolved Henry Pitily

    (@henry-pitily)


    6 years, 8 months ago

    Hi,

    Having a bug after atualization. Before that, the system was working.

    Ficha do golpista – 
Parse error: syntax error, unexpected ”,$url);
‘ (T_ENCAPSED_AND_WHITESPACE) in /home/abortivo/public_html/wp-content/plugins/insert-php/insert_php.php(86) : eval()’d code on line 4
Parse error: syntax error, unexpected ”,$url);
‘ (T_CONSTANT_ENCAPSED_STRING) in /home/abortivo/public_html/wp-content/plugins/insert-php/insert_php.php(86) : eval()’d code on line 10

    You can use this number in search to see the error:

    1388233010

    Any idea?

    The page I need help with: [log in to see the link]

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Author webcraftic

    (@webcraftic)

    Hi,

    Do you have a bug in the code, can you show your code so I can fix this bug?

    Best regards, Alex

    Thread Starter Henry Pitily

    (@henry-pitily)

    Hi,

    Follow the same:

    BLOCK 01

    <h2>Ficha do golpista - [insert_php]
$url = $_SERVER['REQUEST_URI'];
$url = str_replace('ficha-do-golpista/','',rtrim($url, '/\'));
$url = str_replace('/','',$url);
echo $url;
[/insert_php]</h2>

    BLOCK 02

    [insert_php]
$coni = mysqli_connect("162.144.84.149", "abortivo_golpes", "golpes@77","abortivo_golpes") or die("BANCO N?O CONECTADO!");

$url = $_SERVER['REQUEST_URI'];
$url = str_replace('ficha-do-golpista/','',rtrim($url, '/\'));
$url = str_replace('/','',$url);

$n_unico = $url;

echo '
<table class="website-summary-table">
<tbody>
<tr>
<td>Nomes:</td>
<td>';
$SQL = "select * from nome where n_unico = '".$n_unico."'";
$dataDB = mysqli_query($coni, $SQL);
while ($r_ = mysqli_fetch_assoc($dataDB)){
echo $r_['nome']."
";

}

echo '</td>
</tr>
<tr>
<td>Sites</td>
<td>';
$SQL = "select * from site where n_unico = '".$n_unico."'";
$dataDB = mysqli_query($coni, $SQL);
while ($r_ = mysqli_fetch_assoc($dataDB)){
echo $r_['site']."
";

}

echo '</td>
</tr>
<tr>
<td>Email:</td>
<td>';
$SQL = "select * from email where n_unico = '".$n_unico."'";
$dataDB = mysqli_query($coni, $SQL);
while ($r_ = mysqli_fetch_assoc($dataDB)){
echo $r_['email'] . "
";

}

echo '</td>
</tr>
<tr>
<td>Telefones:</td>
<td>';
$SQL = "select * from telefone where n_unico = '".$n_unico."'";
$dataDB = mysqli_query($coni, $SQL);
while ($r_ = mysqli_fetch_assoc($dataDB)){
echo $r_['telefone']."
";

}

echo '</td>
</tr>
</tbody>
</table>
';

//Dados do boleto
$SQL = "select * from boleto where n_unico = '".$n_unico."'";
$conf = mysqli_fetch_assoc(mysqli_query($coni, $SQL));
if ($conf == true){

echo '
<table class="website-summary-table">
<tbody>
<tr>
<td>Forma de cobran?a</td>
<td>Boleto</td>
</tr>
<tr>
<td>Nome do emissor:</td>
<td>';
$SQL = "select * from boleto where n_unico = '".$n_unico."'";
$dataDB = mysqli_query($coni, $SQL);
while ($r_ = mysqli_fetch_assoc($dataDB)){
echo $r_['nome'] . "
";
}
echo '</td>
</tr>
</tbody>
</table>
';

}

//Dados do banco
$SQL = "
select * from (
(select * from banco where n_unico = '".$n_unico."') a,
(SELECT id, banco as nomebanco FROM comp_bancos) b
) where a.banco = b.id
";

$dataDB = mysqli_query($coni, $SQL);
while ($r_ = mysqli_fetch_assoc($dataDB)){
echo '
<table class="website-summary-table">
<tbody>
<tr>
<td>Forma de cobran?a</td>
<td>Depósito bancário</td>
</tr>
<tr>
<td>Banco:</td>
<td>'.utf8_encode($r_['nomebanco']).'</td>
</tr>
<tr>
<td>Agência</td>
<td>'.$r_['agencia'].'</td>
</tr>
<tr>
<td>Conta</td>
<td>'.$r_['conta'].'</td>
</tr>
<tr>
<td>Titular da conta:</td>
<td>'.$r_['titular'].'</td>
</tr>
</tbody>
</table>
';
}[/insert_php]

    BLOCK 03

    [insert_php]
if (!empty($_GET['r'])){
if ($_GET['r'] == "n"){
echo "
<h3 style="text-align: center;">NENHUM REGISTO ENCONTRADO</h3>
";
}
}
[/insert_php]

    Thanks

    Plugin Author webcraftic

    (@webcraftic)

    @henry-pitily
    You need to quickly change access to your database, you can not publish such data in a public place.

    $coni = mysqli_connect("162.144.***", "abortivo_****", "golp***","abortivo***") or die("BANCO N?O CONECTADO!");

    It is very dangerous!

    I’ll modify your code, but please do not publish your private data for the security of your site.

    Best regards, Alex

    Plugin Author webcraftic

    (@webcraftic)

    These code blocks should work inside snippets. Try it, but do not forget to change access to the database, because someone could see it.

    BLOCK 01

    $url = $_SERVER['REQUEST_URI'];
$url = str_replace('ficha-do-golpista/', '', rtrim($url, '/\\'));
$url = str_replace('/', '', $url);
echo $url;

    BLOCK 03

    if (!empty($_GET['r'])){
if ($_GET['r'] == "n"){
	echo "<h3 style=\"text-align: center;\">NENHUM REGISTO ENCONTRADO</h3>";
}
}

    BLOCK 02

    $coni = mysqli_connect("162.144.84.149", "abortivo_golpes", "golpes@77", "abortivo_golpes") or die("BANCO N?O CONECTADO!");

	$url = $_SERVER['REQUEST_URI'];
	$url = str_replace('ficha-do-golpista/', '', rtrim($url, '/\\'));
	$url = str_replace('/', '', $url);

	$n_unico = sanitize_text_field($url);

?>

	<table class="website-summary-table">
		<tbody>
		<tr>
			<td>Nomes:</td>
			<td>
				<?php
					$SQL = "select * from nome where n_unico = '" . $n_unico . "'";
					$dataDB = mysqli_query($coni, $SQL);

					while( $r_ = mysqli_fetch_assoc($dataDB) ) {
						echo $r_['nome'] . '<br>';
					}
				?>
			</td>
		</tr>
		<tr>
			<td>Sites</td>
			<td>
				<?php
					$SQL = "select * from site where n_unico = '" . $n_unico . "'";
					$dataDB = mysqli_query($coni, $SQL);

					while( $r_ = mysqli_fetch_assoc($dataDB) ) {
						echo $r_['site'] . '<br>';
					}
				?>
			</td>
		</tr>
		<tr>
			<td>Email:</td>
			<td>
				<?php
					$SQL = "select * from email where n_unico = '" . $n_unico . "'";
					$dataDB = mysqli_query($coni, $SQL);

					while( $r_ = mysqli_fetch_assoc($dataDB) ) {
						echo $r_['email'] . '<br>';
					}
				?>
			</td>
		</tr>
		<tr>
			<td>Telefones:</td>
			<td>
				<?php
					$SQL = "select * from telefone where n_unico = '" . $n_unico . "'";
					$dataDB = mysqli_query($coni, $SQL);

					while( $r_ = mysqli_fetch_assoc($dataDB) ) {
						echo $r_['telefone'] . '<br>';
					}
				?>
			</td>
		</tr>
		</tbody>
	</table>
<?php
	//Dados do boleto
	$SQL = "select * from boleto where n_unico = '" . $n_unico . "'";
	$conf = mysqli_fetch_assoc(mysqli_query($coni, $SQL));

	if( $conf == true ) {
		?>

		<table class="website-summary-table">
			<tbody>
			<tr>
				<td>Forma de cobran?a</td>
				<td>Boleto</td>
			</tr>
			<tr>
				<td>Nome do emissor:</td>
				<td><?php
						$SQL = "select * from boleto where n_unico = '" . $n_unico . "'";
						$dataDB = mysqli_query($coni, $SQL);

						while( $r_ = mysqli_fetch_assoc($dataDB) ) {
							echo $r_['nome'] . '<br>';
						}
					?>
				</td>
			</tr>
			</tbody>
		</table>

	<?php }

	//Dados do banco
	$SQL = "select * from ((select * from banco where n_unico = '" . $n_unico . "') a, (SELECT id, banco as nomebanco FROM comp_bancos) b) where a.banco = b.id";

	$dataDB = mysqli_query($coni, $SQL);
	while( $r_ = mysqli_fetch_assoc($dataDB) ) {
		?>

		<table class="website-summary-table">
			<tbody>
			<tr>
				<td>Forma de cobran?a</td>
				<td>Depósito bancário</td>
			</tr>
			<tr>
				<td>Banco:</td>
				<td><?= utf8_encode($r_['nomebanco']) ?></td>
			</tr>
			<tr>
				<td>Agência</td>
				<td><?= $r_['agencia'] ?></td>
			</tr>
			<tr>
				<td>Conta</td>
				<td><?= $r_['conta'] ?></td>
			</tr>
			<tr>
				<td>Titular da conta:</td>
				<td><?= $r_['titular'] ?></td>
			</tr>
			</tbody>
		</table>
	<?php } ?>

    Best regards, Alex

    • This reply was modified 6 years, 8 months ago by webcraftic.
    • This reply was modified 6 years, 8 months ago by webcraftic.
    • This reply was modified 6 years, 8 months ago by webcraftic.
    Thread Starter Henry Pitily

    (@henry-pitily)

    Hi Alex,

    Thanks by the alert. The problem is solved.

    Thank you!

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Bug after atualization’ is closed to new replies.