[insert_php]
\n\/*<\/p>\n
$challenges = array(
\n“5 plus 5 = ?” => “10”,
\n“7 – 1 = ?” => “6”,
\n“7 – 2 = ?” => “5”,
\n“7 – 3 = ?” => “4”,
\n“7 minus 4 = ?” => “3”,
\n“7 – 5 = ?” => “2”,
\n“7 – 6 = ?” => “1”,
\n“7 – 7 = ?” => “0”,
\n“12 + 12 = ?” => “24”,
\n“77 – 3 = ?” => “74”,
\n“77 – 4 = ?” => “73”,
\n“77 minus 5 = ?” => “72”,
\n“77 – 6 = ?” => “71”,
\n“67 – 3 = ?” => “64”,
\n“67 – 4 = ?” => “63”,
\n“67 – 5 = ?” => “62”,
\n“67 – 6 = ?” => “61”,
\n“47 minus 3 = ?” => “44”,
\n“47 – 4 = ?” => “43”,
\n“47 – 5 = ?” => “42”,
\n“47 – 6 = ?” => “41”);<\/p>\n
$QUIET_IP_CHECK = false;
\n$IP_LIMIT_ACTIVE = true;
\n$DEBUG = true;<\/p>\n
if ($DEBUG) { error_reporting(E_ALL); ini_set(‘display_errors’, 1); }<\/p>\n
$ip = getRealIpAddr();<\/p>\n
\t$link = mysqli_connect(“localhost”, “sgdach_vouchers5”, “n2vUM2Rse3Z@3bkk#8Ho”, “sgdach_vouchers5”);<\/p>\n
\tif (mysqli_connect_errno() || $ip == “212.120.88.137”) {<\/p>\n
\t\techo_please_later();
\n echo_debug( $ip );
\n\t\treturn;<\/p>\n
\t}<\/p>\n
\tif (isset($_POST[“email”]) && isset($_POST[“game”]) && strlen(trim($_POST[“email”])) > 0) {<\/p>\n
$challenge = mysqli_real_escape_string($link, $_POST[“chal”]);
\n$response = mysqli_real_escape_string($link, $_POST[“resp”]);<\/p>\n
if ($challenges[$challenge] !== $response) {
\n echo_form($link, array_rand($challenges));
\n return;
\n}<\/p>\n
\t\t$email = mysqli_real_escape_string($link, $_POST[“email”]);
\n if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
\n return;
\n }
\n\t\t$game_id = mysqli_real_escape_string($link, $_POST[“game”]);
\n\t\t$result = mysqli_query($link, “SELECT * FROM `Games` WHERE game_id = $game_id LIMIT 1;”);
\n\t\t$row = mysqli_fetch_assoc($result);
\n\t\t$game_name = $row[“game”];
\n\t\t$game_url = $row[“game_url”];
\n\t\t$studio_name = $row[“studio”];
\n\t\t$studio_url = $row[“studio_url”];<\/p>\n
\t\t\/\/ log
\n\t\t$result = mysqli_query($link, “INSERT INTO `sgdach_vouchers5`.`Requests` (`t`, `email`, `game`, `ip`) VALUES (CURRENT_TIMESTAMP, ‘$email’, ‘$game_id’, ‘”. $ip .”‘);”);<\/p>\n
\tif (strpos($email, “roy.v.dijk”) > 0) {<\/p>\n
\t\techo_please_later();
\n echo_debug( $ip );
\n\t\treturn;<\/p>\n
\t}<\/p>\n
\t\t\/\/ check if email already exists
\n\t\t$result = mysqli_query($link, “SELECT * FROM `Vouchers` WHERE email = ‘$email’ LIMIT 1;”);<\/p>\n
\t\tif (mysqli_num_rows($result) == 0) {<\/p>\n
\/\/ IP Blocker Begin
\n if ($IP_LIMIT_ACTIVE) {
\n $result = mysqli_query($link, “SELECT * FROM `sgdach_vouchers5`.`Requests` WHERE ip = ‘$ip’ AND t > DATE_SUB(NOW(), INTERVAL 5 MINUTE) ORDER BY `Requests`.`t` DESC;”);
\n if (mysqli_num_rows($result) > 2) {<\/p>\n
if (mysqli_num_rows($result) == 3) {
\n\t$headers = ‘From: noreply-vouchers@sgda.ch’ .”\\r\\n”.’Content-Type: text\/plain’.”\\r\\n”.’X-Mailer: Gbanga-Voucher-Mailer’;
\n\t\/\/ mail(“r.vanrooden@sgda.ch”, “Mehrfacheinl\u00f6sung $ip”, “$ip (dieses mal $email) hat ” . (mysqli_num_rows($result)) . ” mal versucht, einen Code zu bestellen”, $headers);
\n\t\/\/ mail(“m.sala@sgda.ch”, “Mehrfacheinl\u00f6sung $ip”, “$ip (dieses mal $email) hat ” . (mysqli_num_rows($result)) . ” mal versucht, einen Code zu bestellen”, $headers);
\n}<\/p>\n
if (!$QUIET_IP_CHECK) {
\n echo_please_later();
\n echo_debug( $ip );
\n return;
\n }<\/p>\n
}
\n }
\n\/\/ IP Blocker End<\/p>\n
\t\t\t\/\/ consume a new code<\/p>\n
\t\t\t\/\/ $result = mysqli_query($link, “SELECT * FROM `Vouchers` WHERE game_id = $game_id AND email IS NULL LIMIT 1;”);<\/p>\n
\t\t\t$isUpdated = mysqli_query($link, “UPDATE `sgdach_vouchers5`.`Vouchers` SET `email` = ‘$email’ WHERE game_id = $game_id AND email IS NULL LIMIT 1;”);<\/p>\n
\t\t\tif ($isUpdated && mysqli_affected_rows($link)) {<\/p>\n
\t\t\t\techo_debug( “new code” );
\n\t\t\t\techo_your_code($email, $game_name, $game_url, $studio_name, $studio_url);<\/p>\n
\t\t\t\t\/\/ mail
\n\t\t\t\t\/\/ $email = “noreply-vouchers@sgda.ch”;
\n\t\t\t\t\/\/ $password = “K#BNNhbUhhT47xqc$XYK”;<\/p>\n
\t\t\t\t$result = mysqli_query($link, “SELECT * FROM `Vouchers` WHERE email = ‘$email’ LIMIT 1;”);
\n\t\t\t\t$row = mysqli_fetch_assoc($result);
\n\t\t\t\t$code = $row[“voucher”];<\/p>\n
\t\t\t\tsend_mail($email, $game_name, $game_url, $studio_name, $studio_url, $code);<\/p>\n
\t\t\t} else {
\n\t\t\t\techo_debug(“all codes for this game have gone”);
\n\t\t\t\techo_all_gone($email, $game_name, $game_url, $studio_name, $studio_url);
\n\t\t\t\techo_form($link, array_rand($challenges));
\n\t\t\t}<\/p>\n
\t\t} else {<\/p>\n
\t\t\techo_debug(“already ordered a code
“);
\n\t\t\t$result = mysqli_query($link, “SELECT * FROM `Games` AS G, `Vouchers` AS V WHERE G.game_id = V.game_id AND V.email = ‘$email’ LIMIT 1;”);
\n \t$row = mysqli_fetch_assoc($result);
\n\t\t\t$game_name = $row[“game”];
\n\t\t\t$game_url = $row[“game_url”];
\n\t\t\t$studio_name = $row[“studio”];
\n\t\t\t$studio_url = $row[“studio_url”];
\n\t\t\techo_your_code($email, $game_name, $game_url, $studio_name, $studio_url);<\/p>\n
\t\t}<\/p>\n
\t} else {<\/p>\n
\t\techo_form($link, array_rand($challenges));<\/p>\n
\t}<\/p>\n
function echo_form($link, $this_chal) {<\/p>\n
?>
\n