file	line	code
index.php	5	$sql = mysqli_query($con, "SELECT * FROM  general");
index.php	11	$result=mysqli_query($con,"SELECT * FROM theme WHERE status='$data'");
index.php	12	$check=mysqli_query($con,"SELECT * FROM theme WHERE status=5");
assets/loanemail.php	3	$sql = mysqli_query($con, "SELECT * FROM  mail");
assets/mail.php	3	$sql = mysqli_query($con, "SELECT * FROM  mail");
assets/mail.php	12	$chek = mysqli_query($con,"SELECT * FROM pay");
assets/monnify.php	8	$chek = mysqli_query($con, "SELECT * FROM pay");
assets/monnify.php	147	mysqli_query($con, "UPDATE user SET bankname='".$wema_name."', accountnumber='".$wema."', accountname='".$fullname."',autofund='ACTIVE',rolexbank='$rolex_name',rolexnumber='$rolex',sterlingnumber='$sterling',sterlingbank='$sterling_name' WHERE email='".$remail."'");
assets/transferemail.php	3	$sql = mysqli_query($con, "SELECT * FROM  mail");
contact/index.php	5	$sql = mysqli_query($con, "SELECT * FROM  mail");
contact/index.php	45	$insert = mysqli_query($con, "INSERT INTO contact (name,subject,message,email) VALUES('$name','$subject','$message','$email')");
contact/indexs.php	5	$sql = mysqli_query($con, "SELECT * FROM  mail");
contact/indexs.php	45	$insert = mysqli_query($con, "INSERT INTO contact (name,subject,message,email) VALUES('$name','$subject','$message','$email')");
core/apio.php	4	$sql = mysqli_query($con, 'SELECT * FROM api ORDER BY id DESC LIMIT 1');
core/conn.php	56	$sql = mysqli_query($con, 'SELECT * FROM general ORDER BY id DESC LIMIT 1');
core/conn.php	61	$sql = mysqli_query($con, 'SELECT * FROM mail ORDER BY id DESC LIMIT 1');
core/credit.php	3	$sql = mysqli_query($con, "SELECT * FROM  general order by id desc LIMIT 1");
core/flu.php	3	$sql = mysqli_query($con, "SELECT * FROM  general order by id desc LIMIT 1");
core/loan.php	3	$sql = mysqli_query($con, "SELECT * FROM  general order by id desc LIMIT 1");
core/notice.php	3	$sql = mysqli_query($con, "SELECT * FROM  general order by id desc LIMIT 1");
core/pin.php	3	$sql = mysqli_query($con, "SELECT * FROM  general order by id desc LIMIT 1");
core/transfer.php	3	$sql = mysqli_query($con, "SELECT * FROM  general order by id desc LIMIT 1");
core/v.php	4	$sql = mysqli_query($con, "SELECT * FROM  general order by id desc LIMIT 1");
faq/index.php	5	$sql = mysqli_query($con, "SELECT * FROM  mail");
faq/index.php	45	$insert = mysqli_query($con, "INSERT INTO contact (name,subject,message,email) VALUES('$name','$subject','$message','$email')");
includes/header.php	155	$chekd = mysqli_query($con, "SELECT * FROM setting");
real-admin/abank.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/abank.php	17	$sql = mysqli_query($con, "SELECT * FROM bankpayment WHERE id ='$id'");
real-admin/abank.php	24	$sql = mysqli_query($con, "SELECT * FROM user WHERE username='$username'");
real-admin/abank.php	40	mysqli_query($con, "UPDATE user SET bal = '$deduct'  WHERE username = '$username'");
real-admin/abank.php	41	mysqli_query($con, "UPDATE bankpayment SET status =1  WHERE id = '$id'");
real-admin/abank.php	49	$sql = mysqli_query($con, "SELECT * FROM bankpayment WHERE id ='$id'");
real-admin/abank.php	56	$sql = mysqli_query($con, "SELECT * FROM user WHERE username='$username'");
real-admin/abank.php	67	mysqli_query($con, "UPDATE user SET bal = '$add'  WHERE username = '$username'");
real-admin/abank.php	68	mysqli_query($con, "UPDATE bankpayment SET status =0  WHERE id = '$id'");
real-admin/abank.php	78	$sql = mysqli_query($con, "SELECT * FROM bankpayment WHERE id ='$id'");
real-admin/abank.php	87	mysqli_query($con, "DELETE FROM bankpayment  WHERE id = '$id'");
real-admin/abank.php	97	$sql = mysqli_query($con, "SELECT * FROM bankpayment WHERE id ='$id'");
real-admin/abank.php	106	mysqli_query($con, "UPDATE bankpayment SET status=2 WHERE id = '$id'");
real-admin/acard.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/acategories.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/acategories.php	20	$delete = mysqli_query($con, "DELETE FROM categories WHERE id=$id");
real-admin/account.php	6	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/add.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/add.php	10	$sql = mysqli_query($con, "SELECT * FROM  mail");
real-admin/add.php	28	$chek = mysqli_query($con,"SELECT * FROM user WHERE username='$username'; ");
real-admin/add.php	40	$query = mysqli_query($con,"UPDATE user SET bal='$total' WHERE email='$email'") or die(mysqli_error());
real-admin/add.php	118	$sql = "SELECT * FROM user"; $result = $con->query($sql); if ($result->num_rows > 0) {
real-admin/adduser.php	11	$sql = mysqli_query($con, "SELECT * FROM  mail");
real-admin/adduser.php	16	$user = mysqli_query($con, "SELECT * FROM admin WHERE id={$_SESSION['id']}");
real-admin/adduser.php	39	$res = mysqli_query($con, "SELECT * FROM user WHERE username='$username'");
real-admin/adduser.php	40	$result = mysqli_query($con, "SELECT * FROM user WHERE phone='$phone'");
real-admin/adduser.php	41	$result2 = mysqli_query($con, "SELECT * FROM user WHERE email='$email'");
real-admin/adduser.php	42	$sql = mysqli_query($con, "SELECT * FROM  user WHERE username ='" . $_POST['ref'] . " ' ");
real-admin/adduser.php	67	$query = mysqli_query($con, "INSERT INTO user  (name,username,email,phone,address,ref,status,password1,password2,bal,refbal,date,kyc) VALUES ('$name','$username','$email','$phone','$address','$ref','$status','$password','$password','$bal','$refbal','$date',0)") or die(mysqli_error($con));
real-admin/all.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/all.php	11	$sql = mysqli_query($con, "SELECT * FROM price");
real-admin/all.php	22	$delete = mysqli_query($con, "DELETE FROM coupon WHERE id=$id");
real-admin/apidata.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/apidata.php	17	$delete = mysqli_query($con, "DELETE FROM apiprice WHERE id=$id");
real-admin/apio.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/apio.php	11	$chek = mysqli_query($con, "SELECT * FROM  api");
real-admin/apio.php	33	$updat = mysqli_query($con, "UPDATE api SET apikey='$apikey' ") or die(mysqli_error());
real-admin/apio.php	46	$updat = mysqli_query($con, "UPDATE api SET sendlink='$sendlink' ") or die(mysqli_error());
real-admin/apio.php	67	$updat = mysqli_query($con, "UPDATE api SET apimtn='$apimtn' ") or die(mysqli_error());
real-admin/apio.php	84	$updat = mysqli_query($con, "UPDATE api SET mtnsend='$mtnsend' ") or die(mysqli_error());
real-admin/apio.php	107	$updat = mysqli_query($con, "UPDATE api SET apiairtel='$apiairtel' ") or die(mysqli_error());
real-admin/apio.php	124	$updat = mysqli_query($con, "UPDATE api SET airtelsend='$airtelsend' ") or die(mysqli_error());
real-admin/apio.php	151	$updat = mysqli_query($con, "UPDATE api SET apiglo='$apiglo' ") or die(mysqli_error());
real-admin/apio.php	168	$updat = mysqli_query($con, "UPDATE api SET glosend='$glosend' ") or die(mysqli_error());
real-admin/apio.php	194	$updat = mysqli_query($con, "UPDATE api SET apimobile='$apimobile' ") or die(mysqli_error());
real-admin/apio.php	211	$updat = mysqli_query($con, "UPDATE api SET mobilesend='$mobilesend' ") or die(mysqli_error());
real-admin/apiprice.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/apiprice.php	20	$result = mysqli_query($con, "SELECT * FROM apiprice WHERE network='$network' AND networkid='$data' AND amount='$amount' AND day='$day'");
real-admin/aplans.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/aplans.php	18	$delete = mysqli_query($con, "DELETE FROM plans WHERE id=$id");
real-admin/aprice.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/atesti.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/atesti.php	11	$sql = mysqli_query($con, "SELECT * FROM price");
real-admin/atesti.php	22	$delete = mysqli_query($con, "DELETE FROM rate WHERE id=$id");
real-admin/atesti.php	56	$approve = mysqli_query($con, "UPDATE rate SET status=1  WHERE id=$id");
real-admin/atesti.php	90	$change = mysqli_query($con, "UPDATE rate SET status=0  WHERE id=$id");
real-admin/autopay.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/autopay.php	11	$chek = mysqli_query($con, "SELECT * FROM pay ");
real-admin/autopay.php	26	$updat = mysqli_query($con, "UPDATE pay SET fsecret='$fsecret',psecret='$psecret',min='$min',max='$max'");
real-admin/bank.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/bank.php	11	$chek = mysqli_query($con, "SELECT * FROM bank");
real-admin/bank.php	32	$updat = mysqli_query($con, "UPDATE bank SET name='$name', bankname='$bankname', number='$number' ") or die(mysqli_error());
real-admin/busers.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/busers.php	10	$sql = mysqli_query($con, "SELECT * FROM price");
real-admin/busers.php	18	$delete = mysqli_query($con, "DELETE FROM user WHERE id=$id");
real-admin/cancelled.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/cancelled.php	15	$sql = mysqli_query($con, "SELECT * FROM transactions WHERE id ='$id'");
real-admin/cancelled.php	22	$sql = mysqli_query($con, "SELECT * FROM user WHERE username='$username'");
real-admin/cancelled.php	28	$chek = mysqli_query($con, "SELECT * FROM pay");
real-admin/cancelled.php	40	mysqli_query($con, "UPDATE user SET bal = '$deduct'  WHERE username = '$username'");
real-admin/cancelled.php	41	mysqli_query($con, "UPDATE transactions SET status =1  WHERE id = '$id'");
real-admin/cancelled.php	48	$sql = mysqli_query($con, "SELECT * FROM transactions WHERE id ='$id'");
real-admin/cancelled.php	55	$sql = mysqli_query($con, "SELECT * FROM user WHERE username='$username'");
real-admin/cancelled.php	65	mysqli_query($con, "UPDATE user SET bal = '$add'  WHERE username = '$username'");
real-admin/cancelled.php	66	mysqli_query($con, "UPDATE transactions SET status =0  WHERE id = '$id'");
real-admin/cancelled.php	74	$sql = mysqli_query($con, "SELECT * FROM transactions WHERE id ='$id'");
real-admin/cancelled.php	82	mysqli_query($con, "DELETE FROM transactions  WHERE id = '$id'");
real-admin/cancelled.php	90	$sql = mysqli_query($con, "SELECT * FROM transactions WHERE id ='$id'");
real-admin/cancelled.php	98	mysqli_query($con, "UPDATE transactions SET status=2 WHERE id = '$id'");
real-admin/card.php	4	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/card.php	11	$sql = mysqli_query($con, "SELECT * FROM pin");
real-admin/card.php	30	$check_card = mysqli_query($con, "SELECT * FROM $card_type WHERE (pin='$cardpin' && serial_no='$card_serial') ");
real-admin/card_prices.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/card_prices.php	11	$card = mysqli_query($con, "SELECT * FROM  scratch_card_prices");
real-admin/card_prices.php	25	$updat = mysqli_query($con, "UPDATE scratch_card_prices SET waec_card='$waec',neco_token='$neco',
real-admin/categories.php	6	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/categories.php	18	$result = mysqli_query($con, "SELECT * FROM categories WHERE name='$name' AND type='$type'");
real-admin/code.php	6	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/coupon.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/coupon.php	10	$sql = mysqli_query($con, "SELECT * FROM coupon");
real-admin/dashboard.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/dashboard.php	16	$sql = mysqli_query($con, "SELECT * FROM transactions WHERE id ='$id'");
real-admin/dashboard.php	23	$sql = mysqli_query($con, "SELECT * FROM user WHERE username='$username'");
real-admin/dashboard.php	29	$chek = mysqli_query($con, "SELECT * FROM pay");
real-admin/dashboard.php	41	mysqli_query($con, "UPDATE user SET bal = '$deduct'  WHERE username = '$username'");
real-admin/dashboard.php	42	mysqli_query($con, "UPDATE transactions SET status =1  WHERE id = '$id'");
real-admin/dashboard.php	50	$sql = mysqli_query($con, "SELECT * FROM transactions WHERE id ='$id'");
real-admin/dashboard.php	57	$sql = mysqli_query($con, "SELECT * FROM user WHERE username='$username'");
real-admin/dashboard.php	67	mysqli_query($con, "UPDATE user SET bal = '$add'  WHERE username = '$username'");
real-admin/dashboard.php	68	mysqli_query($con, "UPDATE transactions SET status =0  WHERE id = '$id'");
real-admin/dashboard.php	77	$sql = mysqli_query($con, "SELECT * FROM transactions WHERE id ='$id'");
real-admin/dashboard.php	85	mysqli_query($con, "DELETE FROM transactions  WHERE id = '$id'");
real-admin/dashboard.php	94	$sql = mysqli_query($con, "SELECT * FROM transactions WHERE id ='$id'");
real-admin/dashboard.php	102	mysqli_query($con, "UPDATE transactions SET status=2 WHERE id = '$id'");
real-admin/data.php	4	$sql = "SELECT * FROM categories WHERE (type='" . $_POST['val']."' ) AND (name='" . $_POST['id']." ') "; $result = $con->query($sql); if ($result->num_rows > 0) {
real-admin/deposit.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/deposit.php	15	$sql = mysqli_query($con, "SELECT * FROM transactions WHERE id ='$id'");
real-admin/deposit.php	22	$sql = mysqli_query($con, "SELECT * FROM user WHERE username='$username'");
real-admin/deposit.php	28	$chek = mysqli_query($con, "SELECT * FROM pay");
real-admin/deposit.php	40	mysqli_query($con, "UPDATE user SET bal = '$deduct'  WHERE username = '$username'");
real-admin/deposit.php	41	mysqli_query($con, "UPDATE transactions SET status =1  WHERE id = '$id'");
real-admin/deposit.php	48	$sql = mysqli_query($con, "SELECT * FROM transactions WHERE id ='$id'");
real-admin/deposit.php	55	$sql = mysqli_query($con, "SELECT * FROM user WHERE username='$username'");
real-admin/deposit.php	65	mysqli_query($con, "UPDATE user SET bal = '$add'  WHERE username = '$username'");
real-admin/deposit.php	66	mysqli_query($con, "UPDATE transactions SET status =0  WHERE id = '$id'");
real-admin/deposit.php	74	$sql = mysqli_query($con, "SELECT * FROM transactions WHERE id ='$id'");
real-admin/deposit.php	82	mysqli_query($con, "DELETE FROM transactions  WHERE id = '$id'");
real-admin/deposit.php	90	$sql = mysqli_query($con, "SELECT * FROM transactions WHERE id ='$id'");
real-admin/deposit.php	98	mysqli_query($con, "UPDATE transactions SET status=2 WHERE id = '$id'");
real-admin/email.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/email.php	10	$chek = mysqli_query($con, "SELECT * FROM  mail");
real-admin/email.php	25	$updat = mysqli_query($con, "UPDATE mail SET host='$host',sender='$sender',username='$username',password='$password'  ") or die(mysqli_error());
real-admin/footer.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/footer.php	10	$chek = mysqli_query($con, "SELECT * FROM general ");
real-admin/footer.php	27	$updat = mysqli_query($con, "UPDATE general SET footer='$footer',facebook='$facebook',youtube='$youtube',instergram='$instergram',twitter='$twitter',whatlink='$whatlink',whatgroup='$whatgroup'  ") or die(mysqli_error());
real-admin/fund_users.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/fund_users.php	10	$sql = mysqli_query($con, "SELECT * FROM coupon");
real-admin/fund_users.php	25	$user_check = mysqli_query($con, "SELECT * FROM user WHERE username='$username'");
real-admin/fund_users.php	35	$update_user = mysqli_query($con, "UPDATE user SET bal='$newbal' WHERE username='$username'");
real-admin/fund_users.php	49	$update_users = mysqli_query($con, "UPDATE user SET bal='$newbals' WHERE username='$username'");
real-admin/pbank.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/pbank.php	15	$sql = mysqli_query($con, "SELECT * FROM bankpayment WHERE id ='$id'");
real-admin/pbank.php	21	$sql = mysqli_query($con, "SELECT * FROM user WHERE username='$username'");
real-admin/pbank.php	36	mysqli_query($con, "UPDATE user SET bal = '$deduct'  WHERE username = '$username'");
real-admin/pbank.php	37	mysqli_query($con, "UPDATE bankpayment SET status =1  WHERE id = '$id'");
real-admin/pbank.php	44	$sql = mysqli_query($con, "SELECT * FROM bankpayment WHERE id ='$id'");
real-admin/pbank.php	50	$sql = mysqli_query($con, "SELECT * FROM user WHERE username='$username'");
real-admin/pbank.php	61	mysqli_query($con, "UPDATE user SET bal = '$add'  WHERE username = '$username'");
real-admin/pbank.php	62	mysqli_query($con, "UPDATE bankpayment SET status =0  WHERE id = '$id'");
real-admin/pbank.php	70	$sql = mysqli_query($con, "SELECT * FROM bankpayment WHERE id ='$id'");
real-admin/pbank.php	78	mysqli_query($con, "DELETE FROM bankpayment  WHERE id = '$id'");
real-admin/pbank.php	86	$sql = mysqli_query($con, "SELECT * FROM bankpayment WHERE id ='$id'");
real-admin/pbank.php	94	mysqli_query($con, "UPDATE bankpayment SET status=2 WHERE id = '$id'");
real-admin/pending.php	6	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/pending.php	16	$sql = mysqli_query($con, "SELECT * FROM transactions WHERE id ='$id'");
real-admin/pending.php	23	$sql = mysqli_query($con, "SELECT * FROM user WHERE username='$username'");
real-admin/pending.php	29	$chek = mysqli_query($con, "SELECT * FROM pay");
real-admin/pending.php	41	mysqli_query($con, "UPDATE user SET bal = '$deduct'  WHERE username = '$username'");
real-admin/pending.php	42	mysqli_query($con, "UPDATE transactions SET status =1  WHERE id = '$id'");
real-admin/pending.php	49	$sql = mysqli_query($con, "SELECT * FROM transactions WHERE id ='$id'");
real-admin/pending.php	56	$sql = mysqli_query($con, "SELECT * FROM user WHERE username='$username'");
real-admin/pending.php	66	mysqli_query($con, "UPDATE user SET bal = '$add'  WHERE username = '$username'");
real-admin/pending.php	67	mysqli_query($con, "UPDATE transactions SET status =0  WHERE id = '$id'");
real-admin/pending.php	76	$sql = mysqli_query($con, "SELECT * FROM transactions WHERE id ='$id'");
real-admin/pending.php	84	mysqli_query($con, "DELETE FROM transactions  WHERE id = '$id'");
real-admin/pending.php	93	$sql = mysqli_query($con, "SELECT * FROM transactions WHERE id ='$id'");
real-admin/pending.php	101	mysqli_query($con, "UPDATE transactions SET status=2 WHERE id = '$id'");
real-admin/pins.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/pins.php	10	$sql = mysqli_query($con, "SELECT * FROM price");
real-admin/pins.php	23	$delete = mysqli_query($con, "DELETE FROM nabteb_result_token WHERE id=$id");
real-admin/pins.php	58	$delete = mysqli_query($con, "DELETE FROM waec_scratch_card WHERE id=$id");
real-admin/pins.php	93	$delete = mysqli_query($con, "DELETE FROM neco_result_token WHERE id=$id");
real-admin/plans.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/plans.php	24	$result = mysqli_query($con, "SELECT * FROM plans WHERE name='$name' AND cid='$type'");
real-admin/price.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/price.php	21	$result = mysqli_query($con, "SELECT * FROM price WHERE network='$network' AND name='$name' AND price='$price' AND day='$day'");
real-admin/ptesti.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/ptesti.php	10	$sql = mysqli_query($con, "SELECT * FROM price");
real-admin/ptesti.php	21	$delete = mysqli_query($con, "DELETE FROM rate WHERE id=$id");
real-admin/ptesti.php	55	$approve = mysqli_query($con, "UPDATE rate SET status=1  WHERE id=$id");
real-admin/ptesti.php	89	$change = mysqli_query($con, "UPDATE rate SET status=0  WHERE id=$id");
real-admin/radd.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/radd.php	9	$sql = mysqli_query($con, "SELECT * FROM  mail");
real-admin/radd.php	26	$chek = mysqli_query($con, "SELECT * FROM user WHERE username='$username'; ");
real-admin/setting.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/setting.php	10	$chek = mysqli_query($con, "SELECT * FROM general ");
real-admin/setting.php	25	$updat = mysqli_query($con, "UPDATE general SET name='$name',phone='$phone',email='$email',address='$address',web='$web'  ") or die(mysqli_error($con));
real-admin/setting.php	181	$updatlogo = mysqli_query($con, "UPDATE general SET image='$newfilename'") or die(mysqli_error($con));
real-admin/site.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/site.php	10	$chek = mysqli_query($con, "SELECT * FROM general ");
real-admin/site.php	28	$updat = mysqli_query($con, "UPDATE general SET mobile='$app',bmobile='$lapp',nmobile='$napp',notif='$notif', status='$status',color='$color', dev='$dev', referprice='$referprice'  ") or die(mysqli_error());
real-admin/sms.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/sms.php	10	$chek = mysqli_query($con, "SELECT * FROM  sms");
real-admin/sms.php	25	$updat = mysqli_query($con, "UPDATE sms SET host='$host',apikey='$apikey',username='$username',password='$password'  ") or die(mysqli_error());
real-admin/status.php	4	$query = mysqli_query($con, "update user set status='".$_POST['val']."' where id='".$_POST['id']."' ");
real-admin/status.php	6	$q =mysqli_query($con, "select * from user where id='".$_POST['id']."' ");
real-admin/success.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/success.php	15	$sql = mysqli_query($con, "SELECT * FROM transactions WHERE id ='$id'");
real-admin/success.php	22	$sql = mysqli_query($con, "SELECT * FROM user WHERE username='$username'");
real-admin/success.php	28	$chek = mysqli_query($con, "SELECT * FROM pay");
real-admin/success.php	40	mysqli_query($con, "UPDATE user SET bal = '$deduct'  WHERE username = '$username'");
real-admin/success.php	41	mysqli_query($con, "UPDATE transactions SET status =1  WHERE id = '$id'");
real-admin/success.php	48	$sql = mysqli_query($con, "SELECT * FROM transactions WHERE id ='$id'");
real-admin/success.php	55	$sql = mysqli_query($con, "SELECT * FROM user WHERE username='$username'");
real-admin/success.php	65	mysqli_query($con, "UPDATE user SET bal = '$add'  WHERE username = '$username'");
real-admin/success.php	66	mysqli_query($con, "UPDATE transactions SET status =0  WHERE id = '$id'");
real-admin/success.php	74	$sql = mysqli_query($con, "SELECT * FROM transactions WHERE id ='$id'");
real-admin/success.php	82	mysqli_query($con, "DELETE FROM transactions  WHERE id = '$id'");
real-admin/success.php	90	$sql = mysqli_query($con, "SELECT * FROM transactions WHERE id ='$id'");
real-admin/success.php	98	mysqli_query($con, "UPDATE transactions SET status=2 WHERE id = '$id'");
real-admin/term.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/term.php	10	$chek = mysqli_query($con, "SELECT * FROM terms");
real-admin/term.php	21	$update = mysqli_query($con, "UPDATE terms SET nlazy='$term' ") or die(mysqli_error());
real-admin/terms.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/terms.php	17	$delete = mysqli_query($con, "DELETE FROM price WHERE id=$id");
real-admin/theme.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/upgrade.php	7	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/upgrade.php	50	$sql = "SELECT * FROM user"; $result = $con->query($sql); if ($result->num_rows > 0) {
real-admin/users.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/users.php	10	$sql = mysqli_query($con, "SELECT * FROM price");
real-admin/users.php	18	$delete = mysqli_query($con, "DELETE FROM user WHERE id=$id");
real-admin/vusers.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/vusers.php	10	$sql = mysqli_query($con, "SELECT * FROM price");
real-admin/vusers.php	18	$delete = mysqli_query($con, "DELETE FROM user WHERE id=$id");
real-admin/websetting.php	5	$sql = mysqli_query($con, "SELECT * FROM admin WHERE id = {$_SESSION['id']}");
real-admin/websetting.php	10	$chek = mysqli_query($con, "SELECT * FROM setting");
real-admin/websetting.php	24	$updat = mysqli_query($con, "UPDATE setting SET bank='$bank',flutter='$flutter',paystack='$paystack',email='$email' ") or die(mysqli_error());
reset/change.php	6	$sql = mysqli_query($con, "SELECT * FROM  mail");
reset/index.php	5	$sql = mysqli_query($con, "SELECT * FROM  mail");
reset/index.php	34	$sql = mysqli_query($con, "SELECT * FROM  user WHERE (email='$phone' OR phone='$phone' OR username='$phone') ");
reset/index.php	101	$sql = mysqli_query($con, "SELECT * FROM  user WHERE (email='$phone' OR phone='$phone' OR username='$phone') ");
reset/reset.php	125	$sql = mysqli_query($con, "SELECT * FROM  user WHERE email='$email");
signup/index.php	5	$check = mysqli_query($con, "SELECT * FROM general WHERE status=1");
signup/index.php	13	$chekd = mysqli_query($con, "SELECT * FROM setting");
signup/index.php	18	$sql = mysqli_query($con, "SELECT * FROM  mail");
signup/index.php	23	$refcom = mysqli_query($con, "SELECT * FROM general");
signup/index.php	29	$qrysite = mysqli_query($con,"SELECT * FROM setting");
signup/index.php	47	$sql = mysqli_query($con, "SELECT * FROM  general");
signup/index.php	68	$res = mysqli_query($con, "SELECT * FROM user WHERE username='$username'");
signup/index.php	69	$result = mysqli_query($con, "SELECT * FROM user WHERE phone='$phone'");
signup/index.php	70	$result2 = mysqli_query($con, "SELECT * FROM user WHERE email='$email'");
signup/index.php	71	$sql = mysqli_query($con, "SELECT * FROM  user WHERE username ='" . $_POST['ref'] . " ' ");
signup/index.php	76	$userip = mysqli_query($con, "SELECT * FROM user WHERE ip ='$ipaddress'");
signup/index.php	110	$refUser= mysqli_query($con, "SELECT * FROM user WHERE username='$ref'");
signup/index.php	135	$check_record = mysqli_query($con, "SELECT * FROM otp WHERE username='$username' OR email='$email'");
signup/index.php	140	$insert_otp = mysqli_query($con, "INSERT INTO otp (username,email,reg_otp,time_sent,status) VALUE('$username','$email','$otp','$log','$used')");
signup/index.php	182	$delete_acct = mysqli_query($con, "DELETE FROM user WHERE username='$username' && email='$email'");
signup/verification.php	6	$sql = mysqli_query($con, "SELECT * FROM  general");
signup/verification.php	126	$sql = mysqli_query($con, "SELECT * FROM  mail");
signup/verification.php	136	$qrysite = mysqli_query($conn,"SELECT * FROM general");
signup/verification.php	152	mysqli_query($con, "UPDATE user SET status = 1 WHERE email = '$email'");
signup/verification.php	154	$sql = mysqli_query($con, "SELECT * FROM  user WHERE email='$email'");
terms/index.php	4	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
terms/index.php	319	$result = mysqli_query($con, "SELECT * FROM terms order by id desc LIMIT 1") or die($mysqli->error);
vtu/account.php	5	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/airtel-data.php	9	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/airtel-data.php	63	$sql = "SELECT * FROM categories WHERE type='$types'"; $result = $con->query($sql); if ($result->num_rows > 0) {
vtu/airtimeprint.php	13249	$chek = mysqli_query($con, "SELECT * FROM transactions WHERE transid='$ref' ");
vtu/airtimeprint.php	13260	$nlazy = mysqli_query($con, "SELECT * FROM user WHERE username='$username' ");
vtu/autobank.php	6	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/autobank.php	14	$sql = mysqli_query($con, "SELECT * FROM  mail");
vtu/autobank.php	39	$sub = mysqli_query($con, "SELECT * FROM bankpayment WHERE name='$name' AND bankname='$bankname' AND amount='$amount'  AND status='$status' AND username='$username' ");
vtu/autobank.php	50	$query = mysqli_query($con, "INSERT INTO bankpayment (username,bankname,name,amount,number,status,date) VALUES('$username','$bankname','$name','$amount','$number','$status','$date') ");
vtu/bill.php	9	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/bonous.php	9	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/bonous.php	15	$sql = mysqli_query($con, "SELECT * FROM  mail");
vtu/bonous.php	22	$chek = mysqli_query($con,"SELECT * FROM pay");
vtu/booster.php	9	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/booster.php	15	$sql = mysqli_query($con, "SELECT * FROM  mail");
vtu/booster.php	22	$chek = mysqli_query($con,"SELECT * FROM pay");
vtu/booster.php	57	$sql = "SELECT * FROM categories WHERE type='$types'"; $result = $con->query($sql); if ($result->num_rows > 0) {
vtu/bulk.php	8	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/bulk.php	15	$chek = mysqli_query($con,"SELECT * FROM pay");
vtu/cable.php	6	$qrysite = mysqli_query($con,"SELECT * FROM pay");
vtu/cable.php	10	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/cable.php	17	$sql = mysqli_query($con, "SELECT * FROM  mail");
vtu/cable.php	89	$sql = "SELECT * FROM categories WHERE type='$types'"; $result = $con->query($sql); if ($result->num_rows > 0) {
vtu/cash.php	6	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/cash.php	11	$sql = mysqli_query($con, "SELECT * FROM  mail");
vtu/cash.php	26	$chek = mysqli_query($con,"SELECT * FROM pay");
vtu/cash.php	50	$query = mysqli_query($con, "INSERT INTO airtime (username,amount,network,pay,type,status,mobile,date) VALUES('$username','$amount','$network','$pay','$type','$status','$mobile','$date') ");
vtu/cash.php	363	$sql = mysqli_query($con, "SELECT * FROM kyc WHERE username='$username'");
vtu/confirmorders.php	6	$check_user = mysqli_query($con, "SELECT * FROM user WHERE id='$user_id'");
vtu/confirmorders.php	11	$sql = mysqli_query($con, "SELECT * FROM  mail");
vtu/confirmorders.php	24	$chek = mysqli_query($con, "SELECT * FROM pay");
vtu/confirmorders.php	1635	$card_print = mysqli_query($con, "SELECT * FROM $db WHERE status='0' LIMIT $quantity");
vtu/confirmorders.php	1655	$update_card = mysqli_query($con, "UPDATE $db SET status='1', buyer_id='$username',time_bought='$date' WHERE id='$card_id'");
vtu/confirmorders.php	1658	$update_bal = mysqli_query($con, "UPDATE user SET bal='$rem_bal' WHERE id='$uid'");
vtu/cooperate-data.php	9	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/cooperate-data.php	66	$sql = "SELECT * FROM categories WHERE type='$types'"; $result = $con->query($sql); if ($result->num_rows > 0) {
vtu/coupon.php	5	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/coupon.php	10	$sql = mysqli_query($con, "SELECT * FROM  mail");
vtu/coupon.php	35	$sql = mysqli_query($con, "SELECT * FROM coupon WHERE code ='$code' AND username='$username'");
vtu/coupon.php	44	mysqli_query($con, "UPDATE coupon SET status = 1 WHERE code= '$code'");
vtu/coupon.php	45	$credit= mysqli_query($con, "UPDATE user SET  bal='$total' WHERE id= {$_SESSION['id']}");
vtu/dataprint.php	13249	$chek = mysqli_query($con, "SELECT * FROM transactions WHERE transid='$ref' ");
vtu/dataprint.php	13260	$nlazy = mysqli_query($con, "SELECT * FROM user WHERE username='$username' ");
vtu/developer.php	7	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/developer.php	13	$sql = mysqli_query($con, "SELECT * FROM  mail");
vtu/developer.php	32	$updat = mysqli_query($con,"UPDATE user SET apikey='$apikey' WHERE email ='$email' ") or die(mysqli_error());
vtu/faq.php	6	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/faq.php	11	$sql = mysqli_query($con, "SELECT * FROM  mail");
vtu/faq.php	26	$chek = mysqli_query($con,"SELECT * FROM pay");
vtu/faq.php	50	$query = mysqli_query($con, "INSERT INTO airtime (username,amount,network,pay,type,status,mobile,date) VALUES('$username','$amount','$network','$pay','$type','$status','$mobile','$date') ");
vtu/glo-data.php	9	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/glo-data.php	63	$sql = "SELECT * FROM categories WHERE type='$types'"; $result = $con->query($sql); if ($result->num_rows > 0) {
vtu/index.php	4	$sql = mysqli_query($con, "SELECT * FROM  general order by id desc LIMIT 1");
vtu/index.php	11	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/kyc.php	7	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/kyc.php	13	$sql = mysqli_query($con, "SELECT * FROM  mail");
vtu/kyc.php	39	$sub = mysqli_query($con, "SELECT * FROM kyc WHERE username='$username' AND bank='$bank' AND number='$number' AND name='$name' ");
vtu/kyc.php	58	mysqli_query($con, "UPDATE user SET kyc = 1 WHERE username = '$username'");
vtu/loan.php	9	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/loan.php	15	$sql = mysqli_query($con, "SELECT * FROM  mail");
vtu/loan.php	22	$chek = mysqli_query($con,"SELECT * FROM pay");
vtu/mobile-data.php	9	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/mobile-data.php	63	$sql = "SELECT * FROM categories WHERE type='$types'"; $result = $con->query($sql); if ($result->num_rows > 0) {
vtu/monnify.php	8	$chek = mysqli_query($con, "SELECT * FROM pay");
vtu/monnify.php	147	mysqli_query($con, "UPDATE user SET bankname='".$wema_name."', accountnumber='".$wema."', accountname='".$fullname."',autofund='ACTIVE',rolexbank='$rolex_name',rolexnumber='$rolex',sterlingnumber='$sterling',sterlingbank='$sterling_name' WHERE email='".$remail."'");
vtu/mtn-data.php	9	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/mtn-data.php	63	$sql = "SELECT * FROM categories WHERE type='$types'"; $result = $con->query($sql); if ($result->num_rows > 0) {
vtu/nabteb_token.php	6	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/nabteb_token.php	12	$sql = mysqli_query($con, "SELECT * FROM  mail");
vtu/nabteb_token.php	18	$card_checking = mysqli_query($con, "SELECT * FROM nabteb_result_token WHERE status='0' ");
vtu/nabteb_token.php	41	$chek = mysqli_query($con, "SELECT * FROM pay");
vtu/nabteb_token.php	129	$card_print = mysqli_query($con, "SELECT * FROM neco_result_token WHERE status='0' LIMIT $quantity");
vtu/nabteb_token.php	157	$update_card = mysqli_query($con, "UPDATE neco_result_token SET status='1', time_bought=NOW() WHERE id='$card_id'");
vtu/nabteb_token.php	160	$update_bal = mysqli_query($con, "UPDATE user SET bal='$rem_bal' WHERE id='$uid'");
vtu/nabteb_token.php	454	$check_amount = mysqli_query($con, "SELECT * FROM scratch_card_prices");
vtu/neco_token.php	6	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/neco_token.php	12	$sql = mysqli_query($con, "SELECT * FROM  mail");
vtu/neco_token.php	18	$card_checking = mysqli_query($con, "SELECT * FROM neco_result_token WHERE status='0' ");
vtu/neco_token.php	41	$chek = mysqli_query($con, "SELECT * FROM pay");
vtu/neco_token.php	129	$card_print = mysqli_query($con, "SELECT * FROM neco_result_token WHERE status='0' LIMIT $quantity");
vtu/neco_token.php	158	$update_card = mysqli_query($con, "UPDATE neco_result_token SET status='1',buyer_id='$username',time_bought=NOW() WHERE id='$card_id'");
vtu/neco_token.php	161	$update_bal = mysqli_query($con, "UPDATE user SET bal='$rem_bal' WHERE id='$uid'");
vtu/neco_token.php	453	$check_amount = mysqli_query($con, "SELECT * FROM scratch_card_prices");
vtu/newpin.php	10	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/pay.php	7	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/pay.php	11	$sql = mysqli_query($con, "SELECT * FROM pay ");
vtu/price.php	6	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/rate.php	7	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/rate.php	22	$query= mysqli_query($con,"INSERT INTO rate (username,message,status,date) VALUES('$username','$message','$status','$date')")or die(mysqli_error($con));
vtu/refer.php	9	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/refer.php	16	$sql = mysqli_query($con, "SELECT * FROM  mail");
vtu/result.php	7	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/result.php	13	$sql = mysqli_query($con, "SELECT * FROM  mail");
vtu/result.php	27	$chek = mysqli_query($con, "SELECT * FROM pay");
vtu/result.php	54	$query_com = mysqli_query($con, "SELECT * FROM pin WHERE exam='$exam' AND status='0' LIMIT 1");
vtu/result.php	58	$query_com = mysqli_query($con, "SELECT * FROM pin LIMIT ");
vtu/result.php	71	$query_com = mysqli_query($con, "SELECT * FROM pin WHERE exam='$exam' AND status='0' LIMIT 4");
vtu/result.php	76	$query_com = mysqli_query($con, "SELECT * FROM pin WHERE exam='$exam' AND status='0' LIMIT 5");
vtu/result.php	82	$query_com = mysqli_query($con, "SELECT * FROM pin WHERE exam='$exam' AND status='0' order by id desc LIMIT 1");
vtu/result.php	90	$updat = mysqli_query($con, "UPDATE user SET bal='$total' WHERE email='$email' ") or die(mysqli_error());
vtu/result.php	92	$update = mysqli_query($con, "UPDATE pin SET status='1' WHERE cardpin='$cardpin'  ") or die(mysqli_error());
vtu/result.php	121	$updat = mysqli_query($con, "UPDATE user SET bal='$total' WHERE email='$email' ") or die(mysqli_error($con));
vtu/result.php	123	$update = mysqli_query($con, "UPDATE pin SET status='1' WHERE cardpin='$cardpin'  ") or die(mysqli_error($con));
vtu/scratch_cards.php	7	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/scratch_cards.php	12	$chek = mysqli_query($con,"SELECT * FROM pay");
vtu/scratch_cards.php	16	$sql = mysqli_query($con, "SELECT * FROM  mail");
vtu/scratch_cards.php	30	$chek = mysqli_query($con, "SELECT * FROM pay");
vtu/scratch_cards.php	56	$query_com = mysqli_query($con, "SELECT * FROM pin WHERE exam='$exam' AND status='0' LIMIT 1");
vtu/scratch_cards.php	60	$query_com = mysqli_query($con, "SELECT * FROM pin LIMIT ");
vtu/scratch_cards.php	73	$query_com = mysqli_query($con, "SELECT * FROM pin WHERE exam='$exam' AND status='0' LIMIT 4");
vtu/scratch_cards.php	78	$query_com = mysqli_query($con, "SELECT * FROM pin WHERE exam='$exam' AND status='0' LIMIT 5");
vtu/scratch_cards.php	84	$query_com = mysqli_query($con, "SELECT * FROM pin WHERE exam='$exam' AND status='0' order by id desc LIMIT 1");
vtu/scratch_cards.php	92	$updat = mysqli_query($con, "UPDATE user SET bal='$total' WHERE email='$email'") or die(mysqli_error($con));
vtu/scratch_cards.php	94	$update = mysqli_query($con, "UPDATE pin SET status='1' WHERE cardpin='$cardpin'") or die(mysqli_error($con));
vtu/scratch_cards.php	123	$updat = mysqli_query($con, "UPDATE user SET bal='$total' WHERE email='$email' ") or die(mysqli_error($con));
vtu/scratch_cards.php	125	$update = mysqli_query($con, "UPDATE pin SET status='1' WHERE cardpin='$cardpin'  ") or die(mysqli_error($con));
vtu/scratch_cards.php	147	<?php $check_token = mysqli_query($con, "SELECT * FROM waec_scratch_card WHERE (status='0' && time_bought='')
vtu/scratch_cards.php	173	<?php $check_token = mysqli_query($con, "SELECT * FROM neco_result_token WHERE (status='0' && time_bought='')
vtu/scratch_cards.php	199	<?php $check_token = mysqli_query($con, "SELECT * FROM nabteb_result_token WHERE (status='0' && time_bought='')
vtu/sent.php	3	$sql = mysqli_query($con, "SELECT * FROM  mail");
vtu/setting.php	5	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/setting.php	24	$updat = mysqli_query($con,"UPDATE kyc SET bank='$bank',name='$name',number='$number' WHERE username='$username' ") or die(mysqli_error());
vtu/setting.php	76	$sql = mysqli_query($con, "SELECT * FROM kyc WHERE username ='$usernames'");
vtu/spay.php	7	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/spay.php	14	$sql = mysqli_query($con, "SELECT * FROM pay ");
vtu/spay.php	44	$update = mysqli_query($con,"INSERT deposit (name, amount, charge, type, status, trans, date)VALUES ('$name', '$money', '$amount', '$type', '$status', '$transid', '$date')") or die(mysqli_error());
vtu/stack.php	7	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/stack.php	14	$sql = mysqli_query($con, "SELECT * FROM pay ");
vtu/topup.php	9	$qrysite = mysqli_query($con,"SELECT * FROM pay");
vtu/topup.php	13	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/transaction.php	6	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/transfer.php	9	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/transfer.php	15	$sql = mysqli_query($con, "SELECT * FROM  mail");
vtu/transfer.php	27	$chek = mysqli_query($con,"SELECT * FROM pay");
vtu/waec_scratch_card.php	6	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
vtu/waec_scratch_card.php	12	$sql = mysqli_query($con, "SELECT * FROM  mail");
vtu/waec_scratch_card.php	25	$card_checking = mysqli_query($con, "SELECT * FROM waec_scratch_card WHERE status='0' ");
vtu/waec_scratch_card.php	48	$chek = mysqli_query($con, "SELECT * FROM pay");
vtu/waec_scratch_card.php	136	$card_print = mysqli_query($con, "SELECT * FROM neco_result_token WHERE status='0' LIMIT $quantity");
vtu/waec_scratch_card.php	164	$update_card = mysqli_query($con, "UPDATE neco_result_token SET status='1', time_bought=NOW() WHERE id='$card_id'");
vtu/waec_scratch_card.php	167	$update_bal = mysqli_query($con, "UPDATE user SET bal='$rem_bal' WHERE id='$uid'");
vtu/waec_scratch_card.php	462	$check_amount = mysqli_query($con, "SELECT * FROM scratch_card_prices");
vtu/wallet.php	6	$sql = mysqli_query($con, "SELECT * FROM user WHERE id = {$_SESSION['id']}");
assets/Folder/buydata2.php	28	$sql = mysqli_query($con, "SELECT * FROM user WHERE id ='$pid'");
assets/Folder/buydata2.php	33	$qrysite = mysqli_query($con,"SELECT * FROM pay");
assets/Folder/buydata2.php	126	$query = mysqli_query($con, "INSERT INTO transactions (username,transid,network,service,type,amount,mobile,plans,status,date) VALUES('$username','$transid','$network','$service','DATASUB','$price','$mobile','$plan','$statu','$date') ");
assets/Folder/buydata2.php	127	$updat = mysqli_query($con,"UPDATE user SET bal='$total' WHERE email='$email'  ") or die(mysqli_error());
assets/Folder/buydata2.php	162	$query = mysqli_query($con, "INSERT INTO transactions (username,transid,network,service,type,amount,mobile,plans,status,date) VALUES('$username','$transid','$network','$service','DATASUBe','$price','$mobile','$plan','$status','$date') ");