admin panel fix

2026-07-01 10:04:21 +00:00 · 2014-01-23 14:45:37 +02:00
parent 0ad0951cf8
commit 228227dff2
9 changed files with 317 additions and 140 deletions
@@ -0,0 +1,48 @@
+<?php
+#################################################################################
+##              -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =-                 ##
+## --------------------------------------------------------------------------- ##
+##  Filename       cp.php                                                      ##
+##  Developed by:  aggenkeech                                                  ##
+##  License:       TravianX Project                                            ##
+##  Copyright:     TravianX (c) 2010-2012. All rights reserved.                ##
+##                                                                             ##
+#################################################################################
+
+include_once("../../config.php");
+
+mysql_connect(SQL_SERVER, SQL_USER, SQL_PASS);
+mysql_select_db(SQL_DB);
+
+$id = $_POST['id'];
+$admid = $_POST['admid'];
+
+//$sql = mysql_query("SELECT * FROM ".TB_PREFIX."users WHERE id = ".$admid."");
+//$access = mysql_fetch_array($sql);
+//$sessionaccess = $access['access'];
+if (!isset($_SESSION)) {
+ session_start();
+}
+
+if($_SESSION['access'] != ADMIN) die("<h1><font color=\"red\">Access Denied: You are not Admin!</font></h1>");
+
+$access = $_POST['access'];
+$dur = $_POST['protect'] * 86400;
+$protection = (time() + $dur);
+
+mysql_query("UPDATE ".TB_PREFIX."users SET 
+	access = ".$access.",
+	gold = ".$_POST['gold'].",	
+	sit1 = '".$_POST['sitter1']."',
+	sit2 = '".$_POST['sitter2']."',
+	protect = '".$protection."',
+	cp = ".$_POST['cp'].",
+	ap = '".$_POST['off']."', 
+	dp = '".$_POST['def']."', 
+	RR = '".$_POST['res']."', 
+	apall = '".$_POST['ooff']."', 
+	dpall = '".$_POST['odef']."' 
+	WHERE id = ".$id."") or die(mysql_error());
+
+header("Location: ../../../Admin/admin.php?p=player&uid=".$id."");
+?>