Untitled

<?php
include 'config.php';

$SCI_SECRET_WORD = '6145155azi';
echo 'test0';
if (isset($_GET['lr_paidto'])) {
  $str = array($_GET['lr_paidto'], $_GET['lr_paidby'], $_GET['lr_store'], $_GET['lr_amnt'],
               $_GET['lr_transfer'], $_GET['lr_currency'], $SCI_SECRET_WORD);
  $str = implode(':', $str);
  require_once("sha256.inc.php");
  $str = strtoupper(cybester($str));

  $sql = "UPDATE `users` SET balance = balance + ".$_GET['lr_amnt']." WHERE id='".$_GET['user']."'";
  echo $sql;

  if ($_GET['lr_encrypted'] !== $str) {
    die('Hashcheck failed!');
  } else {
        echo 'test2';
    $sql = "UPDATE `users` SET balance = balance + ".$_GET['lr_amnt']." WHERE id='".$_GET['user']."'";
    $res = @mysql_query($sql);
  }
}

?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="ru" xml:lang="ru">
<head>
<style type="text/css">
#olo {
font-family: Georgia,"Times New Roman",Times,serif;
font-size: 24px;
}
</style>
<title>Rules</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1251" />
</head>

<body style="padding-left:110px;">
<div id="olo">
<br /><br /><br /><br />

Your payment <font color='green'><b>DONE!</b></font><br /><br /><br /><br />
<a href="main.php">Back to the shop ></a>
</div>
</body>
</html>