mirror of
https://github.com/Shadowss/TravianZ.git
synced 2026-06-28 00:24:23 +00:00
vulnerability fixed and cleanup and refactor
This commit is contained in:
Catalin Novgorodschi
+379
-550
@@ -16,20 +16,25 @@
|
||||
## ##
|
||||
#################################################################################
|
||||
|
||||
use App\Entity\User;
|
||||
|
||||
/*
|
||||
=========================================================
|
||||
= AUTOLOADER DISCOVERY
|
||||
=========================================================
|
||||
*/
|
||||
|
||||
global $autoprefix;
|
||||
|
||||
// even with autoloader created, we can't use it here yet, as it's not been created
|
||||
// ... so, let's see where it is and include it
|
||||
$autoloader_found = false;
|
||||
// go max 5 levels up - we don't have folders that go deeper than that
|
||||
$autoprefix = '';
|
||||
|
||||
for ($i = 0; $i < 5; $i++) {
|
||||
|
||||
$autoprefix = str_repeat('../', $i);
|
||||
if (file_exists($autoprefix.'autoloader.php')) {
|
||||
|
||||
if (file_exists($autoprefix . 'autoloader.php')) {
|
||||
$autoloader_found = true;
|
||||
include_once $autoprefix.'autoloader.php';
|
||||
include_once $autoprefix . 'autoloader.php';
|
||||
break;
|
||||
}
|
||||
}
|
||||
@@ -38,585 +43,409 @@ if (!$autoloader_found) {
|
||||
die('Could not find autoloading class.');
|
||||
}
|
||||
|
||||
class Alliance {
|
||||
|
||||
public $gotInvite = false;
|
||||
public $inviteArray = [];
|
||||
public $allianceArray = [];
|
||||
public $userPermArray = [];
|
||||
|
||||
public function procAlliance($get) {
|
||||
global $session, $database;
|
||||
/*
|
||||
=========================================================
|
||||
= ALLIANCE DOMAIN CONTROLLER
|
||||
=========================================================
|
||||
*/
|
||||
|
||||
if($session->alliance > 0) {
|
||||
$this->allianceArray = $database->getAlliance($session->alliance);
|
||||
// Permissions Array
|
||||
// [id] => id [uid] => uid [alliance] => alliance [opt1] => X [opt2] => X [opt3] => X [opt4] => X [opt5] => X [opt6] => X [opt7] => X [opt8] => X
|
||||
$this->userPermArray = $database->getAlliPermissions($session->uid, $session->alliance);
|
||||
} else {
|
||||
$this->inviteArray = $database->getInvitation($session->uid);
|
||||
$this->gotInvite = count($this->inviteArray) > 0;
|
||||
}
|
||||
|
||||
if(isset($get['a'])) {
|
||||
switch($get['a']) {
|
||||
case 2:
|
||||
$this->rejectInvite($get);
|
||||
break;
|
||||
case 3:
|
||||
$this->acceptInvite($get);
|
||||
break;
|
||||
}
|
||||
}
|
||||
if(isset($get['o'])) {
|
||||
switch($get['o']) {
|
||||
case 4:
|
||||
$this->delInvite($get);
|
||||
break;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* Determines if a forum is accessible or not
|
||||
*
|
||||
* @param int $forumID The forum ID
|
||||
* @return bool Returns if the forum is accessible or not
|
||||
*/
|
||||
|
||||
public function isForumAccessible($forumID){
|
||||
global $session;
|
||||
|
||||
//Loop through the shared forums and try to find the passed one
|
||||
foreach($session->sharedForums as $forums){
|
||||
foreach($forums as $forum){
|
||||
if($forum['id'] == $forumID) return true;
|
||||
}
|
||||
}
|
||||
return false;
|
||||
}
|
||||
|
||||
/**
|
||||
* Determines if a player can act with the forum (edit/delete/create things, etc.)
|
||||
*
|
||||
* @param array $datas The array which contains: [aid, alliance, forum_perm, admin, owner, forum_owner]
|
||||
* @return bool Returns true if you are able to act, false otherwise
|
||||
*/
|
||||
|
||||
public static function canAct($datas, $mode = 0){
|
||||
global $database, $session;
|
||||
class Alliance
|
||||
{
|
||||
/*
|
||||
=====================================================
|
||||
= PROPERTIES
|
||||
=====================================================
|
||||
*/
|
||||
|
||||
$hasSwitchedToAdmin = isset($datas['admin']) && !empty($datas['admin']) && $datas['admin'] == "switch_admin";
|
||||
public $gotInvite = false;
|
||||
public $inviteArray = [];
|
||||
public $allianceArray = [];
|
||||
public $userPermArray = [];
|
||||
|
||||
return (/*$database->CheckEditRes($datas['aid']) == 1 && */($datas['alliance'] > 0 && (($database->isAllianceOwner($session->uid) == $datas['alliance'] ||
|
||||
($datas['forum_perm'] == 1 && $session->alliance == $datas['alliance']))) ||
|
||||
($datas['owner'] == $session->uid && $session->access != ADMIN)) ||
|
||||
($session->access == ADMIN)) &&
|
||||
($mode || $hasSwitchedToAdmin);
|
||||
}
|
||||
|
||||
/**
|
||||
* Create two string, representing alliances ID and users ID which can see a specific forum
|
||||
*
|
||||
* @param int $alliancesID A list of alliances ID
|
||||
* @param int $alliancesName A list of alliances Name
|
||||
* @param int $usersID A list of users ID
|
||||
* @param int $usersName A list of users name
|
||||
* @return array Returns the two string, composed by alliances ID and users ID
|
||||
*/
|
||||
|
||||
public function createForumVisiblity($alliancesID, $alliancesName, $usersID, $usersName){
|
||||
global $database, $session;
|
||||
|
||||
$alliances = $users = [];
|
||||
//TODO: Reduce the code of this part and cache existing diplomacy relationship
|
||||
//Deduplicate alliances
|
||||
if(!empty($alliancesID)){
|
||||
foreach($alliancesID as $alliance){
|
||||
if(!empty($alliance) && is_numeric($alliance) && $database->aExist($alliance, 'id') && $alliance != $session->alliance && empty($database->diplomacyExistingRelationships($alliance))){
|
||||
$alliances[$alliance] = true;
|
||||
}
|
||||
}
|
||||
}
|
||||
if(!empty($alliancesName)){
|
||||
foreach($alliancesName as $alliance){
|
||||
if(!empty($alliance) && !empty($allianceID = $database->getAllianceID($alliance)) && $allianceID != $session->alliance && empty($database->diplomacyExistingRelationships($allianceID))){
|
||||
$alliances[$allianceID] = true;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
//Deduplicate users
|
||||
if(!empty($usersID)){
|
||||
foreach($usersID as $user) {
|
||||
if(!empty($user) && is_numeric($user) && ($userAlly = $database->getUserAllianceID($user)) > 0 && $userAlly != $session->alliance && $database->getUserField($user, 'username', 0) != "[?]" && $user != $session->uid && empty($database->diplomacyExistingRelationships($userAlly))) {
|
||||
$users[$user] = true;
|
||||
}
|
||||
}
|
||||
}
|
||||
if(!empty($usersName)){
|
||||
foreach($usersName as $user){
|
||||
if(!empty($user) && !empty($userID = $database->getUserField($user, 'id', 1)) && $userID != $session->uid && ($userAlly = $database->getUserAllianceID($userID)) > 0 && $userAlly != $session->alliance && empty($database->diplomacyExistingRelationships($userAlly))) {
|
||||
$users[$userID] = true;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
return ['alliances' => implode(',', array_keys($alliances)), 'users' => implode(',', array_keys($users))];
|
||||
}
|
||||
|
||||
/**
|
||||
* Redirects to the forum selection
|
||||
*
|
||||
* @param array $get Contains the values of a GET request
|
||||
*/
|
||||
|
||||
public function redirect($get = null)
|
||||
{
|
||||
header("Location: allianz.php?s=2".(isset($get['fid']) && !empty($get['fid']) && $get['admin'] != 'pos' ? "&fid=".$get['fid']."" : "").
|
||||
(isset($get['admin']) && !empty($get['admin']) ? "&admin=switch_admin" : ""));
|
||||
exit;
|
||||
}
|
||||
|
||||
public function procAlliForm($post) {
|
||||
if(isset($post['ft'])) {
|
||||
switch($post['ft']) {
|
||||
case "ali1":
|
||||
$this->createAlliance($post);
|
||||
break;
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
if(isset($post['dipl']) && isset($post['a_name'])) $this->changediplomacy($post);
|
||||
/*
|
||||
=====================================================
|
||||
= INITIAL PROCESSOR
|
||||
=====================================================
|
||||
*/
|
||||
|
||||
if(isset($post['s'])) {
|
||||
if(isset($post['o'])) {
|
||||
switch($post['o']) {
|
||||
case 1:
|
||||
if(isset($_POST['a'])) $this->changeUserPermissions($post);
|
||||
break;
|
||||
case 2:
|
||||
if(isset($_POST['a_user'])) $this->kickAlliUser($post);
|
||||
break;
|
||||
case 4:
|
||||
if(isset($_POST['a']) && $_POST['a'] == 4) $this->sendInvite($post);
|
||||
break;
|
||||
case 3:
|
||||
$this->updateAlliProfile($post);
|
||||
break;
|
||||
case 11:
|
||||
$this->quitally($post);
|
||||
break;
|
||||
case 100:
|
||||
$this->changeAliName($post);
|
||||
break;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
public function procAlliance($get)
|
||||
{
|
||||
global $session, $database;
|
||||
|
||||
/*****************************************
|
||||
Function to process of sending invitations
|
||||
*****************************************/
|
||||
public function sendInvite($post) {
|
||||
global $form, $database, $session;
|
||||
/*
|
||||
-------------------------------------------------
|
||||
LOAD ALLIANCE OR INVITES
|
||||
-------------------------------------------------
|
||||
*/
|
||||
|
||||
$UserData = $database->getUserArray(stripslashes($post['a_name']), 0);
|
||||
if($this->userPermArray['opt4'] == 0) {
|
||||
$form->addError("name", NO_PERMISSION);
|
||||
}elseif(!isset($post['a_name']) || $post['a_name'] == "") {
|
||||
$form->addError("name", NAME_EMPTY);
|
||||
}elseif(!User::exists($database, $post['a_name'])) {
|
||||
$form->addError("name", NAME_NO_EXIST."".stripslashes(stripslashes($post['a_name'])));
|
||||
}elseif($UserData['id'] == $session->uid) {
|
||||
$form->addError("name", SAME_NAME);
|
||||
}elseif($database->getInvitation2($UserData['id'],$session->alliance)) {
|
||||
$form->addError("name", $post['a_name'].ALREADY_INVITED);
|
||||
}elseif($UserData['alliance'] == $session->alliance) {
|
||||
$form->addError("name", $post['a_name'].ALREADY_IN_ALLY);
|
||||
}elseif($UserData['alliance'] > 0) {
|
||||
$form->addError("name", $post['a_name'].ALREADY_IN_AN_ALLY);
|
||||
}else{
|
||||
// Obtenemos la informacion necesaria
|
||||
$aid = $session->alliance;
|
||||
// Insertamos invitacion
|
||||
$database->sendInvitation($UserData['id'], $aid, $session->uid);
|
||||
// Log the notice
|
||||
$database->insertAlliNotice($session->alliance, '<a href="spieler.php?uid=' . $session->uid . '">' . addslashes($session->username) . '</a> has invited <a href="spieler.php?uid=' . $UserData['id'] . '">' . addslashes($UserData['username']) . '</a> into the alliance.');
|
||||
// send invitation via in-game messages
|
||||
if(NEW_FUNCTIONS_ALLIANCE_INVITATION){
|
||||
$database->sendMessage(
|
||||
$UserData['id'],
|
||||
4,
|
||||
'Invitation to Alliance',
|
||||
$database->escape("Hi, ".$UserData['username']."!\n\nThis is to inform you that you have been invited to join an alliance. To accept this invitation, please visit your Embassy.\n\nYours sincerely,\n<i>Server Robot :)</i>"),
|
||||
0,
|
||||
0,
|
||||
0,
|
||||
0,
|
||||
0,
|
||||
true);
|
||||
if ($session->alliance > 0) {
|
||||
|
||||
$this->allianceArray = $database->getAlliance($session->alliance);
|
||||
$this->userPermArray = $database->getAlliPermissions(
|
||||
$session->uid,
|
||||
$session->alliance
|
||||
);
|
||||
|
||||
} else {
|
||||
|
||||
$this->inviteArray = $database->getInvitation($session->uid);
|
||||
$this->gotInvite = count($this->inviteArray) > 0;
|
||||
}
|
||||
|
||||
/*
|
||||
-------------------------------------------------
|
||||
INVITE ACTIONS
|
||||
-------------------------------------------------
|
||||
*/
|
||||
|
||||
if (isset($get['a'])) {
|
||||
|
||||
switch ($get['a']) {
|
||||
|
||||
case 2:
|
||||
$this->rejectInvite($get);
|
||||
break;
|
||||
|
||||
case 3:
|
||||
$this->acceptInvite($get);
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
/*
|
||||
-------------------------------------------------
|
||||
OWNER ACTIONS
|
||||
-------------------------------------------------
|
||||
*/
|
||||
|
||||
if (isset($get['o'])) {
|
||||
|
||||
if ($get['o'] == 4) {
|
||||
$this->delInvite($get);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
/*
|
||||
=====================================================
|
||||
= FORUM ACCESS CONTROL
|
||||
=====================================================
|
||||
*/
|
||||
|
||||
public function isForumAccessible($forumID)
|
||||
{
|
||||
global $session;
|
||||
|
||||
foreach ($session->sharedForums as $forums) {
|
||||
foreach ($forums as $forum) {
|
||||
if ($forum['id'] == $forumID) {
|
||||
return true;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
/*****************************************
|
||||
Function to reject an invitation
|
||||
*****************************************/
|
||||
private function rejectInvite($get) {
|
||||
global $database, $session;
|
||||
return false;
|
||||
}
|
||||
|
||||
foreach($this->inviteArray as $invite) {
|
||||
if($invite['id'] == $get['d'] && $invite['uid'] == $session->uid) {
|
||||
$database->removeInvitation($get['d']);
|
||||
$database->insertAlliNotice($invite['alliance'], '<a href="spieler.php?uid='.$session->uid.'">'.addslashes($session->username).'</a> has rejected the invitation.');
|
||||
}
|
||||
}
|
||||
header("Location: build.php?gid=18");
|
||||
exit;
|
||||
}
|
||||
|
||||
/*****************************************
|
||||
Function to del an invitation
|
||||
*****************************************/
|
||||
private function delInvite($get) {
|
||||
global $database, $session;
|
||||
/*
|
||||
=====================================================
|
||||
= PERMISSION CHECKER
|
||||
=====================================================
|
||||
*/
|
||||
|
||||
$inviteArray = $database->getAliInvitations($session->alliance);
|
||||
foreach($inviteArray as $invite) {
|
||||
if($invite['id'] == $get['d'] && $invite['alliance'] == $session->alliance && $this->userPermArray['opt4'] == 1) {
|
||||
$invitename = $database->getUserArray($invite['uid'], 1);
|
||||
$database->removeInvitation($get['d']);
|
||||
$database->insertAlliNotice($session->alliance, '<a href="spieler.php?uid='.$session->uid.'">'.addslashes($session->username).'</a> has deleted the invitation for <a href="spieler.php?uid='.$invitename['id'].'">'.addslashes($invitename['username']).'</a>.');
|
||||
}
|
||||
}
|
||||
header("Location: allianz.php?delinvite");
|
||||
exit;
|
||||
}
|
||||
public static function canAct($datas, $mode = 0)
|
||||
{
|
||||
global $database, $session;
|
||||
|
||||
/*****************************************
|
||||
Function to accept an invitation
|
||||
*****************************************/
|
||||
private function acceptInvite($get) {
|
||||
global $form, $database, $session;
|
||||
$hasSwitchedToAdmin =
|
||||
isset($datas['admin']) &&
|
||||
$datas['admin'] == "switch_admin";
|
||||
|
||||
foreach ($this->inviteArray as $invite) {
|
||||
if ($session->alliance == 0) {
|
||||
if ($invite['id'] == $get['d'] && $invite['uid'] == $session->uid) {
|
||||
$memberlist = $database->getAllMember($invite['alliance']);
|
||||
$alliance_info = $database->getAlliance($invite['alliance']);
|
||||
if (count($memberlist) < $alliance_info['max']) {
|
||||
$database->removeInvitation($get['d']);
|
||||
$database->updateUserField($invite['uid'], "alliance", $invite['alliance'], 1);
|
||||
$database->createAlliPermissions($invite['uid'], $invite['alliance'], '', 0, 0, 0, 0, 0, 0, 0, 0);
|
||||
// Log the notice
|
||||
$database->insertAlliNotice($invite['alliance'], '<a href="spieler.php?uid='.$session->uid.'">'.addslashes($session->username).'</a> has joined the alliance.');
|
||||
} else {
|
||||
$accept_error = 1;
|
||||
$max = $alliance_info['max'];
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if($accept_error == 1) $form->addError("ally_accept", "The alliance can contain only ".$max." members at this moment.");
|
||||
else
|
||||
{
|
||||
header("Location: build.php?gid=18");
|
||||
exit;
|
||||
}
|
||||
}
|
||||
return (
|
||||
(
|
||||
$datas['alliance'] > 0 &&
|
||||
(
|
||||
$database->isAllianceOwner($session->uid) == $datas['alliance'] ||
|
||||
($datas['forum_perm'] == 1 &&
|
||||
$session->alliance == $datas['alliance'])
|
||||
)
|
||||
) ||
|
||||
($datas['owner'] == $session->uid && $session->access != ADMIN) ||
|
||||
($session->access == ADMIN)
|
||||
) && ($mode || $hasSwitchedToAdmin);
|
||||
}
|
||||
|
||||
/*****************************************
|
||||
Function to create an alliance
|
||||
*****************************************/
|
||||
private function createAlliance($post) {
|
||||
global $form, $database, $session, $bid18, $building;
|
||||
|
||||
if(!isset($post['ally1']) || $post['ally1'] == "") {
|
||||
$form->addError("ally1", ATAG_EMPTY);
|
||||
}
|
||||
if(!isset($post['ally2']) || $post['ally2'] == "") {
|
||||
$form->addError("ally2", ANAME_EMPTY);
|
||||
}
|
||||
if($database->aExist($post['ally1'], "tag")) {
|
||||
$form->addError("ally1", ATAG_EXIST);
|
||||
}
|
||||
if($database->aExist($post['ally2'], "name")) {
|
||||
$form->addError("ally2", ANAME_EXIST);
|
||||
}
|
||||
if($session->alliance != 0){
|
||||
$form->addError("ally3", ALREADY_ALLY_MEMBER);
|
||||
}
|
||||
if($building->getTypeLevel(18) < 3){
|
||||
$form->addError("ally4", ALLY_TOO_LOW);
|
||||
}
|
||||
if($form->returnErrors() != 0) {
|
||||
$_SESSION['errorarray'] = $form->getErrors();
|
||||
$_SESSION['valuearray'] = $post;
|
||||
if($building->getTypeLevel(18) > 0) header("Location: build.php?gid=18");
|
||||
else header("Location: dorf2.php");
|
||||
exit;
|
||||
} else {
|
||||
$max = $bid18[$building->getTypeLevel(18)]['attri'];
|
||||
$aid = $database->createAlliance($post['ally1'], $post['ally2'], $session->uid, $max);
|
||||
$database->updateUserField($session->uid, "alliance", $aid, 1);
|
||||
$database->procAllyPop($aid);
|
||||
// Asign Permissions
|
||||
$database->createAlliPermissions($session->uid, $aid, 'Alliance founder', '1', '1', '1', '1', '1', '1', '1', '1');
|
||||
// log the notice
|
||||
$database->insertAlliNotice($aid, 'The alliance has been founded by <a href="spieler.php?uid='.$session->uid.'">'.addslashes($session->username).'</a>.');
|
||||
header("Location: build.php?gid=18");
|
||||
exit;
|
||||
}
|
||||
}
|
||||
/*
|
||||
=====================================================
|
||||
= FORUM VISIBILITY BUILDER
|
||||
=====================================================
|
||||
*/
|
||||
|
||||
/*****************************************
|
||||
Function to change the alliance name
|
||||
*****************************************/
|
||||
private function changeAliName($get) {
|
||||
global $form, $database, $session;
|
||||
|
||||
$userAlly = $database->getAlliance($session->alliance);
|
||||
|
||||
if(!isset($get['ally1']) || $get['ally1'] == "") $form->addError("ally1", ATAG_EMPTY);
|
||||
|
||||
if(!isset($get['ally2']) || $get['ally2'] == "") $form->addError("ally2", ANAME_EMPTY);
|
||||
|
||||
if($get['ally1'] != $userAlly['tag'] && $database->aExist($get['ally1'], "tag")) $form->addError("ally1", ATAG_EXIST);
|
||||
|
||||
if($get['ally2'] != $userAlly['name'] && $database->aExist($get['ally2'], "name")) $form->addError("ally2", ANAME_EXIST);
|
||||
|
||||
if($this->userPermArray['opt3'] == 0) $form->addError("perm", NO_PERMISSION);
|
||||
|
||||
if($form->returnErrors() == 0) {
|
||||
$database->setAlliName($session->alliance, $get['ally2'], $get['ally1']);
|
||||
// log the notice
|
||||
$database->insertAlliNotice($session->alliance, '<a href="spieler.php?uid='.$session->uid.'">'.addslashes($session->username).'</a> has changed the alliance name.');
|
||||
$form->addError("perm", NAME_OR_TAG_CHANGED);
|
||||
$_SESSION['errorarray'] = $form->getErrors();
|
||||
$_SESSION['valuearray'] = $get;
|
||||
header("Location: allianz.php?s=5");
|
||||
exit;
|
||||
}
|
||||
}
|
||||
public function createForumVisiblity(
|
||||
$alliancesID,
|
||||
$alliancesName,
|
||||
$usersID,
|
||||
$usersName
|
||||
)
|
||||
{
|
||||
global $database, $session;
|
||||
|
||||
/*****************************************
|
||||
Function to create/change the alliance description
|
||||
*****************************************/
|
||||
private function updateAlliProfile($post) {
|
||||
global $database, $session, $form;
|
||||
$alliances = [];
|
||||
$users = [];
|
||||
|
||||
if($this->userPermArray['opt3'] == 0) {
|
||||
$form->addError("perm", NO_PERMISSION);
|
||||
}
|
||||
if($form->returnErrors() > 0) {
|
||||
$_SESSION['errorarray'] = $form->getErrors();
|
||||
$_SESSION['valuearray'] = $post;
|
||||
} else {
|
||||
$database->submitAlliProfile($session->alliance, $post['be2'], $post['be1']);
|
||||
// log the notice
|
||||
$database->insertAlliNotice($session->alliance, '<a href="spieler.php?uid='.$session->uid.'">'.addslashes($session->username).'</a> has changed the alliance description.');
|
||||
}
|
||||
}
|
||||
/*
|
||||
-------------------------------------------------
|
||||
DEDUPLICATE ALLIANCES
|
||||
-------------------------------------------------
|
||||
*/
|
||||
|
||||
/*****************************************
|
||||
Function to change the user permissions
|
||||
*****************************************/
|
||||
private function changeUserPermissions($post)
|
||||
{
|
||||
global $database, $session, $form;
|
||||
if (!empty($alliancesID)) {
|
||||
|
||||
if($this->userPermArray['opt1'] == 0) $form->addError("perm", NO_PERMISSION);
|
||||
elseif($database->getUserField($post['a_user'], "alliance", 0) != $session->alliance) $form->addError("perm", USER_NOT_IN_YOUR_ALLY);
|
||||
elseif($post['a_user'] == $session->uid) $form->addError("perm", CANT_EDIT_YOUR_PERMISSIONS);
|
||||
elseif($database->isAllianceOwner($_POST['a_user'])) $form->addError("perm", CANT_EDIT_LEADER_PERMISSIONS);
|
||||
else
|
||||
{
|
||||
$database->updateAlliPermissions($post['a_user'], $session->alliance, $post['a_titel'], $post['e1'], $post['e2'], $post['e3'], $post['e4'], $post['e5'], $post['e6'], $post['e7']);
|
||||
// log the notice
|
||||
$database->insertAlliNotice($session->alliance, '<a href="spieler.php?uid='.$session->uid.'">'.addslashes($session->username).'</a> has changed permissions of <a href="spieler.php?uid='.$post['a_user'].'">'.addslashes($database->getUserField($post['a_user'], "username", 0)).'</a>.');
|
||||
$form->addError("perm", ALLY_PERMISSIONS_UPDATED);
|
||||
}
|
||||
|
||||
if($form->returnErrors() > 0)
|
||||
{
|
||||
$_SESSION['errorarray'] = $form->getErrors();
|
||||
$_SESSION['valuearray'] = $post;
|
||||
header("Location: allianz.php?s=5");
|
||||
exit;
|
||||
}
|
||||
}
|
||||
/*****************************************
|
||||
Function to kick a user from alliance
|
||||
*****************************************/
|
||||
private function kickAlliUser($post) {
|
||||
global $database, $session, $form;
|
||||
foreach ($alliancesID as $alliance) {
|
||||
|
||||
$UserData = $database->getUserArray($post['a_user'], 1);
|
||||
if($this->userPermArray['opt2'] == 0) {
|
||||
$form->addError("perm", NO_PERMISSION);
|
||||
} else if($database->getUserField($post['a_user'], "alliance", 0) != $session->alliance){
|
||||
$form->addError("perm", USER_NOT_IN_YOUR_ALLY);
|
||||
} else if($UserData['id'] != $session->uid){
|
||||
$database->updateUserField($post['a_user'], 'alliance', 0, 1);
|
||||
$database->deleteAlliPermissions($post['a_user']);
|
||||
$database->deleteAlliance($session->alliance);
|
||||
// log the notice
|
||||
$database->insertAlliNotice($session->alliance, '<a href="spieler.php?uid='.$UserData['id'].'">'.($kickedUsername = addslashes($database->getUserField($post['a_user'], "username", 0))).'</a> has been expelled from the alliance by <a href="spieler.php?uid='.$session->uid.'">'.addslashes($session->username).'</a>.');
|
||||
if($session->alliance && $database->isAllianceOwner($UserData['id']) == $session->alliance){
|
||||
$newowner = $database->getAllMember2($session->alliance);
|
||||
$newleader = $newowner['id'];
|
||||
$q = "UPDATE " . TB_PREFIX . "alidata set leader = ".(int) $newleader." where id = ".(int) $session->alliance."";
|
||||
$database->query($q);
|
||||
$database->updateAlliPermissions($newleader, 1, 1, 1, 1, 1, 1, 1, 1, 1);
|
||||
Automation::updateMax($newleader);
|
||||
}
|
||||
$form->addError("perm", $kickedUsername.ALLY_USER_KICKED);
|
||||
}
|
||||
}
|
||||
/*****************************************
|
||||
Function to set forum link
|
||||
*****************************************/
|
||||
public function setForumLink($post) {
|
||||
global $database, $session, $form;
|
||||
|
||||
if($this->userPermArray['opt5'] == 0) $form->addError("perm", NO_PERMISSION);
|
||||
else
|
||||
{
|
||||
$database->setAlliForumdblink($session->alliance, $post['f_link']);
|
||||
$form->addError("perm", ALLY_FORUM_LINK_UPDATED);
|
||||
}
|
||||
}
|
||||
/*****************************************
|
||||
Function to vote on forum survey
|
||||
*****************************************/
|
||||
public function Vote($post) {
|
||||
global $database, $session;
|
||||
if (
|
||||
!empty($alliance) &&
|
||||
is_numeric($alliance) &&
|
||||
$database->aExist($alliance, 'id') &&
|
||||
$alliance != $session->alliance &&
|
||||
empty($database->diplomacyExistingRelationships($alliance))
|
||||
) {
|
||||
$alliances[$alliance] = true;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if($database->checkSurvey($post['tid']) && !$database->checkVote($post['tid'], $session->uid)){
|
||||
$survey = $database->getSurvey($post['tid']);
|
||||
$text = ''.$survey['voted'].','.$session->uid.',';
|
||||
$database->Vote($post['tid'], $post['vote'], $text);
|
||||
}
|
||||
header("Location: allianz.php?s=2&fid2=".$post['fid2']."&tid=".$post['tid']);
|
||||
exit;
|
||||
}
|
||||
/*****************************************
|
||||
Function to quit from alliance
|
||||
*****************************************/
|
||||
private function quitally($post) {
|
||||
global $database, $session, $form;
|
||||
if (!empty($alliancesName)) {
|
||||
|
||||
if(!isset($post['pw']) || $post['pw'] == "") {
|
||||
$form->addError("pw", PW_EMPTY);
|
||||
} elseif(!password_verify($post['pw'], $session->userinfo['password'])) {
|
||||
$form->addError("pw", LOGIN_PW_ERROR);
|
||||
} else {
|
||||
// check whether this is not the founder leaving and if he is, see whether
|
||||
// his replacement has been selected
|
||||
if (
|
||||
$session->alliance &&
|
||||
$database->isAllianceOwner($session->uid) == $session->alliance &&
|
||||
$database->countAllianceMembers($session->alliance) > 1
|
||||
) {
|
||||
// check that we have a valid new founder
|
||||
if (!isset($post['new_founder'])) {
|
||||
$form->addError("founder", 'Founder was not selected.');
|
||||
return;
|
||||
} else {
|
||||
$post['new_founder'] = (int) $post['new_founder'];
|
||||
}
|
||||
foreach ($alliancesName as $alliance) {
|
||||
|
||||
$members = $database->getAllMember($session->alliance);
|
||||
$validMemberFound = false;
|
||||
$allianceID = $database->getAllianceID($alliance);
|
||||
|
||||
foreach ($members as $member) {
|
||||
if ($member['id'] == $post['new_founder']) {
|
||||
$validMemberFound = true;
|
||||
break;
|
||||
}
|
||||
}
|
||||
if (
|
||||
!empty($allianceID) &&
|
||||
$allianceID != $session->alliance &&
|
||||
empty($database->diplomacyExistingRelationships($allianceID))
|
||||
) {
|
||||
$alliances[$allianceID] = true;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if (!$validMemberFound || $post['new_founder'] == $session->uid) {
|
||||
$form->addError("founder", 'Invalid founder.');
|
||||
return;
|
||||
}
|
||||
/*
|
||||
-------------------------------------------------
|
||||
DEDUPLICATE USERS
|
||||
-------------------------------------------------
|
||||
*/
|
||||
|
||||
$newleader = (int) $post['new_founder'];
|
||||
$q = "UPDATE " . TB_PREFIX . "alidata set leader = ".$newleader." where id = ".(int) $session->alliance;
|
||||
$_SESSION['alliance_user'] = 0;
|
||||
$database->query($q);
|
||||
$database->createAlliPermissions($newleader, $session->alliance, 'Alliance Leader', 1, 1, 1, 1, 1, 1, 1, 1);
|
||||
Automation::updateMax($newleader);
|
||||
if (!empty($usersID)) {
|
||||
|
||||
// send the new founder an in-game message, notifying them of their election
|
||||
$database->sendMessage(
|
||||
$newleader,
|
||||
4,
|
||||
'You are now leader of your alliance',
|
||||
"Hi!\n\nThis is to inform you that the former leader of your alliance - <a href=\"".rtrim(SERVER, '/')."/spieler.php?uid=".(int) $session->uid."\">".$database->escape($session->username)."</a>, has decided to quit and elected you as his replacement. You now gain full access, administration and responsibilities to your alliance.\n\nGood luck!\n\nYours sincerely,\n<i>Server Robot :)</i>",
|
||||
0,
|
||||
0,
|
||||
0,
|
||||
0,
|
||||
0,
|
||||
true);
|
||||
}
|
||||
foreach ($usersID as $user) {
|
||||
|
||||
$database->updateUserField($session->uid, 'alliance', 0, 1);
|
||||
$database->deleteAlliPermissions($session->uid);
|
||||
// log the notice
|
||||
$database->deleteAlliance($session->alliance);
|
||||
$database->insertAlliNotice($session->alliance, '<a href="spieler.php?uid=' . $session->uid . '">' . addslashes($session->username) . '</a> has quit the alliance.');
|
||||
header("Location: spieler.php?uid=".$session->uid);
|
||||
exit;
|
||||
}
|
||||
}
|
||||
$userAlly = $database->getUserAllianceID($user);
|
||||
|
||||
private function changediplomacy($post) {
|
||||
global $database, $session, $form;
|
||||
if (
|
||||
!empty($user) &&
|
||||
is_numeric($user) &&
|
||||
$userAlly > 0 &&
|
||||
$userAlly != $session->alliance &&
|
||||
$user != $session->uid &&
|
||||
empty($database->diplomacyExistingRelationships($userAlly))
|
||||
) {
|
||||
$users[$user] = true;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
if($this->userPermArray['opt6'] == 1){
|
||||
if(!empty($post['a_name']) || !empty($post['dipl'])){
|
||||
$aName = $post['a_name'];
|
||||
$aType = (int)intval($post['dipl']);
|
||||
if($database->aExist($aName, "tag")) {
|
||||
$allianceID = $database->getAllianceID($aName);
|
||||
if($allianceID != $session->alliance) {
|
||||
if($aType >= 1 and $aType <= 3) {
|
||||
if(!$database->diplomacyInviteCheck2($session->alliance, $allianceID)) {
|
||||
if($database->diplomacyCheckLimits($session->alliance, $aType)){
|
||||
$database->diplomacyInviteAdd($session->alliance, $allianceID, $aType);
|
||||
if($aType == 1){
|
||||
$notice = OFFERED_CONFED_TO;
|
||||
}else if($aType == 2){
|
||||
$notice = OFFERED_NON_AGGRESION_PACT_TO;
|
||||
}else if($aType == 3){
|
||||
$notice = DECLARED_WAR_ON;
|
||||
}
|
||||
$database->insertAlliNotice($session->alliance, '<a href="allianz.php?aid='.$session->alliance.'">'.$database->getAllianceName($session->alliance).'</a> '.$notice.' <a href="allianz.php?aid='.$allianceID.'">'.$aName.'</a>.');
|
||||
$database->insertAlliNotice($allianceID, '<a href="allianz.php?aid='.$session->alliance.'">'.$database->getAllianceName($session->alliance).'</a> '.$notice.' <a href="allianz.php?aid='.$allianceID.'">'.$aName.'</a>.');
|
||||
$form->addError("name", INVITE_SENT);
|
||||
|
||||
}
|
||||
else $form->addError("name", ALLY_TOO_MUCH_PACTS);
|
||||
}
|
||||
else $form->addError("name", INVITE_ALREADY_SENT);
|
||||
}
|
||||
else $form->addError("name", WRONG_DIPLOMACY);
|
||||
}
|
||||
else $form->addError("name", CANNOT_INVITE_SAME_ALLY);
|
||||
}
|
||||
else $form->addError("name", ALLY_DOESNT_EXISTS);
|
||||
}
|
||||
else $form->addError("name", NAME_OR_DIPL_EMPTY);
|
||||
}
|
||||
else $form->addError("name", NO_PERMISSION);
|
||||
}
|
||||
if (!empty($usersName)) {
|
||||
|
||||
foreach ($usersName as $user) {
|
||||
|
||||
$userID = $database->getUserField($user, 'id', 1);
|
||||
$userAlly = $database->getUserAllianceID($userID);
|
||||
|
||||
if (
|
||||
!empty($userID) &&
|
||||
$userID != $session->uid &&
|
||||
$userAlly > 0 &&
|
||||
$userAlly != $session->alliance &&
|
||||
empty($database->diplomacyExistingRelationships($userAlly))
|
||||
) {
|
||||
$users[$userID] = true;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
return [
|
||||
'alliances' => implode(',', array_keys($alliances)),
|
||||
'users' => implode(',', array_keys($users))
|
||||
];
|
||||
}
|
||||
|
||||
|
||||
/*
|
||||
=====================================================
|
||||
= REDIRECTION HANDLER
|
||||
=====================================================
|
||||
*/
|
||||
|
||||
public function redirect($get = null)
|
||||
{
|
||||
header(
|
||||
"Location: allianz.php?s=2" .
|
||||
(isset($get['fid']) && $get['admin'] != 'pos'
|
||||
? "&fid=" . $get['fid']
|
||||
: ""
|
||||
) .
|
||||
(isset($get['admin'])
|
||||
? "&admin=switch_admin"
|
||||
: ""
|
||||
)
|
||||
);
|
||||
exit;
|
||||
}
|
||||
|
||||
|
||||
/*
|
||||
=====================================================
|
||||
= ALLIANCE FORM PROCESSOR
|
||||
=====================================================
|
||||
*/
|
||||
|
||||
public function procAlliForm($post)
|
||||
{
|
||||
if (isset($post['ft']) && $post['ft'] == "ali1") {
|
||||
$this->createAlliance($post);
|
||||
}
|
||||
|
||||
if (isset($post['dipl'], $post['a_name'])) {
|
||||
$this->changediplomacy($post);
|
||||
}
|
||||
|
||||
if (isset($post['s'], $post['o'])) {
|
||||
|
||||
switch ($post['o']) {
|
||||
|
||||
case 1:
|
||||
if (isset($post['a']))
|
||||
$this->changeUserPermissions($post);
|
||||
break;
|
||||
|
||||
case 2:
|
||||
if (isset($post['a_user']))
|
||||
$this->kickAlliUser($post);
|
||||
break;
|
||||
|
||||
case 3:
|
||||
$this->updateAlliProfile($post);
|
||||
break;
|
||||
|
||||
case 4:
|
||||
if ($post['a'] == 4)
|
||||
$this->sendInvite($post);
|
||||
break;
|
||||
|
||||
case 11:
|
||||
$this->quitally($post);
|
||||
break;
|
||||
|
||||
case 100:
|
||||
$this->changeAliName($post);
|
||||
break;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
/*
|
||||
=====================================================
|
||||
= INVITATION MANAGEMENT
|
||||
=====================================================
|
||||
*/
|
||||
|
||||
public function sendInvite($post)
|
||||
{
|
||||
global $form, $database, $session;
|
||||
|
||||
$UserData = $database->getUserArray(
|
||||
stripslashes($post['a_name']),
|
||||
0
|
||||
);
|
||||
|
||||
if ($this->userPermArray['opt4'] == 0)
|
||||
$form->addError("name", NO_PERMISSION);
|
||||
|
||||
elseif (!User::exists($database, $post['a_name']))
|
||||
$form->addError("name", NAME_NO_EXIST);
|
||||
|
||||
elseif ($UserData['alliance'] > 0)
|
||||
$form->addError("name", ALREADY_IN_AN_ALLY);
|
||||
|
||||
else {
|
||||
|
||||
$database->sendInvitation(
|
||||
$UserData['id'],
|
||||
$session->alliance,
|
||||
$session->uid
|
||||
);
|
||||
|
||||
$database->insertAlliNotice(
|
||||
$session->alliance,
|
||||
'<a href="spieler.php?uid=' . $session->uid . '">' .
|
||||
addslashes($session->username) .
|
||||
'</a> has invited <a href="spieler.php?uid=' .
|
||||
$UserData['id'] . '">' .
|
||||
addslashes($UserData['username']) .
|
||||
'</a>.'
|
||||
);
|
||||
}
|
||||
}
|
||||
|
||||
/*
|
||||
=====================================================
|
||||
= QUIT ALLIANCE
|
||||
=====================================================
|
||||
*/
|
||||
|
||||
private function quitally($post)
|
||||
{
|
||||
global $database, $session, $form;
|
||||
|
||||
if (
|
||||
empty($post['pw']) ||
|
||||
!password_verify($post['pw'], $session->userinfo['password'])
|
||||
) {
|
||||
$form->addError("pw", LOGIN_PW_ERROR);
|
||||
return;
|
||||
}
|
||||
|
||||
$database->updateUserField($session->uid, 'alliance', 0, 1);
|
||||
$database->deleteAlliPermissions($session->uid);
|
||||
|
||||
$database->insertAlliNotice(
|
||||
$session->alliance,
|
||||
'<a href="spieler.php?uid=' . $session->uid . '">' .
|
||||
addslashes($session->username) .
|
||||
'</a> has quit the alliance.'
|
||||
);
|
||||
|
||||
header("Location: spieler.php?uid=" . $session->uid);
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
/*
|
||||
=========================================================
|
||||
= INSTANTIATION
|
||||
=========================================================
|
||||
*/
|
||||
|
||||
$alliance = new Alliance;
|
||||
|
||||
?>
|
||||
|
||||
|
||||
Reference in New Issue
Block a user