View file public_html/sql.php

<?php
include "inc/def.php";
require_once "inc/siteinfo.php";

$ukey=secureget('ukey');
$ckey=secureget('ckey');
include "antifraud.php";

$getux = mysql_query("SELECT * FROM comp WHERE ckey='$ckey'");
$getux1 = mysql_fetch_array($getux);
$advcid = $getux1['id'];
$cuid = $getux1['uid'];
$advurl = $getux1['url'];


$getuxxx = mysql_query("SELECT * FROM users WHERE id='$cuid'");
$getuxxx1 = mysql_fetch_array($getuxxx);
$cpnt = $getuxxx1['point'];

$balance=$getuxxx1['bal'];
$cid1 = $getuxxx1['id'];
$cutamount="0.0015625";
$cutit = $cpnt-$cutamount;
$cutit1 = $balance-$cutamount;
if($cpnt<0.0016)
{
$updt1 = mysql_query("UPDATE users SET bal='$cutit1' WHERE id='$cuid'") or die("UNABLE TO PROCCESS REQUEST !");
}

else
{

$updt1 = mysql_query("UPDATE users SET point='$cutit' WHERE id='$cuid'") or die("UNABLE TO PROCCESS REQUEST !");
}

$getu = mysql_query("SELECT * FROM users WHERE skey='$ukey'");
$getu1 = mysql_fetch_array($getu);
$advuid = $getu1['id'];
$bal = $getu1['bal'];
$points = $getu1['point'];
$today = date("F j Y");
$ip = $_SERVER['REMOTE_ADDR'];
$ua = $_SERVER['HTTP_USER_AGENT'];
$tm=date("U");

$addclick = mysql_query("INSERT INTO clicks (uid,compid,ip,ua,time,tm) VALUES ('$advuid','$advcid','$ip','$ua','$today','$tm')") or die("ERRRORR !! UNABLE TO PROCESS PROCESS...");
$current = date("U")-14400;
if($addclick) {
$chker = mysql_query("SELECT * FROM clicks WHERE tm>'$current' AND ip='$ip'") or die("CONTACT TricksCafe Team !!!!!errorr...");
//while($hmm=mysql_fetch_array($chker)) {
//   echo $hmm['tm'];
//}
$chk = mysql_num_rows($chker);
if($chk>1) {
$add1 = "51";
$addme1 = $points+$add1;
$updt = mysql_query("UPDATE users SET point='$addme1' WHERE skey='$ukey'") or die("UNABLE TO PROCCESS REQUEST !");
} else {

$add = "0.9360";
$addme = $bal+$add;
$updt = mysql_query("UPDATE users SET bal='$addme' WHERE skey='$ukey'") or die("UNABLE TO PROCCESS REQUEST !");
}
}
header('location:'.$advurl.'');
?>