Nun decke ich das ganze mal auf.
Die Datei ist lediglich eine index (Startseite eines Hotels), die endung .php gefailt hat.
Ihr könnt sie ohne probleme mit notepad öffnen, und vorerst mal abchecken.
Nochmal der inhalt:PHP<?php require_once('./data_classes/server-data.php_data_classes-core.php.php'); session_start(); if(isset($_GET['registerCancel']) && $_GET['registerCancel'] == "true"){session_unset();} if(!session_is_registered(username)){ if(isset($_POST['username']) && isset($_POST['password'])){ $username = FilterText($_POST['username']); $password = HoloHash($_POST['password'], $username); $password2 = HoloHashMD5($_POST['password'], $username); if(empty($username) || empty($_POST['password'])){ $login_error = "Bitte füll alle Felder aus!"; } else { $sql = mysql_query("SELECT id FROM users WHERE username = '".$username."' AND password = '".$password."' OR username = '".$username."' AND password = '".$password2."' LIMIT 1") or die(mysql_error()); if(mysql_num_rows($sql) < 1){ $login_error = "Username oder Passwort falsch"; } else { $userdata = mysql_fetch_assoc($sql); $userid = $userdata['id']; $ban = mysql_query("SELECT * FROM bans WHERE value = '".$username."' AND bantype = 'user' or value = '".$remote_ip."' AND bantype = 'ip' LIMIT 1") or die(mysql_error()); if(mysql_num_rows($ban) < 1){ mysql_query("UPDATE users SET password = '".$password2."', ip_last = '".$remote_ip."' WHERE username = '".$username."'"); $_SESSION['username'] = $username; $_SESSION['password'] = $password2; if($_POST['_login_remember_me'] == "true"){ setcookie("remember", "remember", time()+60*60*24*100, "/"); setcookie("rusername", $_SESSION['username'], time()+60*60*24*100, "/"); setcookie("rpassword", $_SESSION['password'], time()+60*60*24*100, "/"); } header("location: $path/me"); exit; } else { $bandata = mysql_fetch_assoc($ban); $timestamp = time(); if($bandata['expire'] > $timestamp){ $login_error = "Du bist gebannt! Der Grund für deinen Bann lautet \"" . $bandata['reason'] . "\" und dauert bis " . date('d.m.Y - H:i:s', $bandata['expire']) . "."; } else { mysql_query("DELETE FROM bans WHERE value = '".$username."' AND bantype = 'user' OR value = '".$remote_ip."' AND bantype = 'ip' LIMIT 1") or die(mysql_error()); mysql_query("UPDATE users SET password = '".$password2."', ip_last = '".$remote_ip."' WHERE username = '".$username."'"); $_SESSION['username'] = $username; $_SESSION['password'] = $password2; if($_POST['_login_remember_me'] == "true"){ setcookie("remember", "remember", time()+60*60*24*100, "/"); setcookie("rusername", $_SESSION['username'], time()+60*60*24*100, "/"); setcookie("rpassword", $_SESSION['password'], time()+60*60*24*100, "/"); } header("location: $path/me"); exit; } } } } } $body_id = "index";$pagename = "Erstelle deinen ".$shortname.", designe deinen Raum, chatte und triff neue Freunde"; include('./templates/login_subheader.php'); ?> <style type="text/css"> body { background-color: #000000; } #footer { color: #595959; } #footer .footer-links a { color: #333333; } #footer .copyright { color: #595959; } </style><br/><br/><br/><body id="frontpage"> <div id="overlay"></div> <div id="site-header"> <form id="loginformitem" name="loginformitem" action="<?php echo $path; ?>?name=<?php echo FilterText($_POST['username']); ?>&password=true" method="post"><?php if(isset($login_error)){ ?> <div id="loginerrorfieldwrapper"> <div id="loginerrorfield"> <div><?php echo $login_error; ?></div> </div> </div> <?php } ?> <div style="clear: both;"></div> <div id="site-header-content"> <div id="habbo-logo"></div> <div id="login-form"> <div id="login-form-email"> <label for="login-username" class="login-text">Username</label> <input tabindex="3" type="text" class="login-field" name="username" id="login-username" value="" maxlength="48"/> <div id="landing-remember-me-notification" class="bottom-bubble" style="display:none;"> <div class="bottom-bubble-t"><div></div></div> <div class="bottom-bubble-c"> Wenn du diese Option aktivierst, bleibst Du im HabboRE Hotel eingeloggt bis Du auf "ausloggen" klickst. </div> <div class="bottom-bubble-b"><div></div></div></div> </div> <div id="login-form-password"> <label for="login-password" class="login-text">Passwort</label> <input tabindex="4" type="password" class="login-field" name="password" id="login-password" maxlength="32"/> <div id="login-forgot-password"> </div> </div> <div id="login-form-submit"> <input type="submit" value="Login" class="login-top-button" id="login-submit-button"/> <a href="/index.php?form=PostAdd&threadID=32881#" tabindex="5"f id="login-submit-new-button"><span>Login</span></a> </div> </div> <noscript> <div id="alert-container"> <div id="alert-title"> JavaScript wird nicht unterstützt </div> <div id="alert-text"> Javascript ist in deinem Browser deaktiviert. Bitte aktiviere Javascript oder benutze einen Javascript fähigen Browser um Habbo zu spielen. </div> </div></noscript> <script type="text/javascript"> HabboView.add(function() { fieldFocus('login-username'); popdownSetupRun(); }); HabboView.add(function() { LandingPage.init(); }); </script> </div> </form> </div> <div id="fp-container"> <div id="content"> <div id="column1" class="column"> <div class="habblet-container "> <div style="width: 890px; margin: 0 auto"> </div> <div id="frontpage-image-container"> <div id="join-now-button-container"> <div id="join-now-button-wrapper-fb"> <div class="join-now-alternative"> </div> <div class="join-now-button"> <a class="join-now-link" href="/index.php?form=PostAdd&threadID=32881#" onclick="assistedLogin(FB); return false;"> <div class="join-now-text-big">ReCMS mit</div> <div class="join-now-text-small">Facebook<span class="fbword">starten</span></div> </a> <span class="close"></span> </div> <div class="join-now-alternative"> <a id="register-link-fb" href="http://retrotown.ws//quickregister/start" onclick="startRegistration(); return false;"> oder erstelle einen Habbo Account. </a> </div> </div> <div id="join-now-button-wrapper"> <div class="join-now-alternative"> <a href="http://retrotown.ws/./quickregister/start" class="newusers" onclick="startRegistration(); return false;"><b>Neu bei <?php echo $shortname; ?>?</b>,<span style="color: #8f8f8f;">hier klicken</span></a> </div> <div class="join-now-button"> <a class="join-now-link" id="register-link" href="http://retrotown.ws//quickregister/start" onclick="startRegistration(); return false;"> <div class="join-now-text-big">Jetzt gratis</div><br/> <div class="join-now-text-small">anmelden</div> </a> <span class="close"></span> </div> </div> </div> <script type="text/javascript"> function startRegistration() { window.location.replace("/quickregister/start"); } </script> </div><a href="http://retrotown.ws/./quickregister/start" id="frontpage-image" style="background-image: url('./Frontpage.png')"></a></div><?php require_once('./templates/login_footer.php');?> </div> <?php } else {header("location:../me");} ?>
Stimmt, dass ist dann kein Virus.
Dann denke ich mal ein Fehler aufm Server.
