what is wong with this??

welard

New Member
Messages
34
Reaction score
0
Points
0
<code><?php
$macropage="docrime.php?c={$_GET['c']}";
include "globals.php";
if($ir['jail'] or $ir['hospital']) { die("This page cannot be accessed while in jail or hospital."); }
$_GET['c']=abs((int) $_GET['c']);
if(!$_GET['c'])
{
print "Invalid crime";
}
else
{
$q=mysql_query("SELECT * FROM crimes WHERE crimeID={$_GET['c']}",$c);
$r=mysql_fetch_array($q);
if($ir['brave'] < $r['crimeBRAVE'])
{
print "You do not have enough Brave to perform this crime.";
}
else
{
$ec="\$sucrate=".str_replace(array("LEVEL","CRIMEXP","EXP","WILL","IQ"), array($ir['level'], $ir['crimexp'], $ir['exp'], $ir['will'], $ir['IQ']),$r['crimePERCFORM']).";";
eval($ec);
print $r['crimeITEXT'];
$ir['brave']-=$r['crimeBRAVE'];
mysql_query("UPDATE users SET brave={$ir['brave']} WHERE userid=$userid",$c);
if(rand(1,100) <= $sucrate)
{
print str_replace("{money}",$r['crimeSUCCESSMUNY'],$r['crimeSTEXT']);
$ir['money']+=$r['crimeSUCCESSMUNY'];
$ir['crystals']+=$r['crimeSUCCESSCRYS'];
$ir['exp']+=(int) ($r['crimeSUCCESSMUNY']/8);
mysql_query("UPDATE users SET money={$ir['money']}, crystals={$ir['crystals']}, exp={$ir['exp']},crimexp=crimexp+{$r['crimeXP']} WHERE userid=$userid",$c);
if($r['crimeSUCCESSITEM'])
{
item_add($userid, $r['crimeSUCCESSITEM'], 1);
}
}
else
{
if(rand(1, 2) == 1)
{
print $r['crimeFTEXT'];
}
else
{
print $r['crimeJTEXT'];
$db->query("UPDATE `users` SET `jail` = '$r[crimeJAILTIME]', `jail_reason` = '$r[crimeJREASON]' WHERE `userid` = '$userid'");
}
}

print "<br /><a href='docrime.php?c={$_GET['c']}'>Try Again</a><br />
<a href='criminal.php'>Crimes</a>";
}
}


$h->endpage();
?></code>


and this is what i get!!!


Fatal error: SUHOSIN - Use of eval is forbidden by configuration in /home/welard/public_html/docrime.php(21) : eval()'d code on line 21
 

Lurien

New Member
Messages
31
Reaction score
0
Points
0
*hasnot read the whole post*
I've seen a lot of people asking about errors of that kind and they are all answered with something reffered to:
"Have you checked that your php level is high enough?"
Just a suggestion
 

welard

New Member
Messages
34
Reaction score
0
Points
0
how do u meen ??



and i get this in cpanel error log


[Fri Nov 2 17:28:04 2007] [error] [client me] File does not exist: /home/welard/public_html/navybar.png
ALERT - use of eval is forbidden by configuration (attacker 'me', file '/home/welard/public_html/docrime.php', line 21)


how am i a attcker i am trying to run my code i have ugraded the php to intermidiat and still nothing
 
Last edited:

naim4u

New Member
Messages
51
Reaction score
0
Points
0
hii,
the code you have written is right.
but your php hosting version didnot enable: eval() function.
you would have heared many functiona like mail() ,etc.

eval() is also one of the function in php.upgrade or ask your hosting admin to enable eval() function.
then your code works.

bye.. i wish you for your success
Naim,
naim@naimonline.net.ms
www.naimonline.net.ms
 
Last edited:
Top