Fix gold log script

Fix gold log script
This commit is contained in:
novgorodschi catalin
2026-06-02 08:10:46 +03:00
parent 04a1565155
commit 2eaa92fc03
5 changed files with 19 additions and 9 deletions
+6 -2
View File
@@ -69,10 +69,14 @@ if($diffGold!== 0){
$details = 'Admin adjustment by '.($session->username?? 'Admin');
$now = time();
// folosește mysqli_real_escape_string dacă $database->query nu face escape automat
$action_esc = mysqli_real_escape_string($GLOBALS["link"], $action);
$details_esc = mysqli_real_escape_string($GLOBALS["link"], $details);
$database->query("
INSERT INTO ".TB_PREFIX."gold_fin_log
(wid, uid, action, gold, time, details)
VALUES ($wid, $id, '$action', $diffGold, $now, '$details')
(uid, wid, action, gold, time, log)
VALUES ($id, $wid, '$action_esc', $diffGold, $now, '$details_esc')
");
}
+4 -1
View File
@@ -54,7 +54,10 @@ while($u = mysqli_fetch_assoc($users)){
$vill = mysqli_fetch_assoc(mysqli_query($GLOBALS["link"], "SELECT wref FROM ".TB_PREFIX."vdata WHERE owner = $uid LIMIT 1"));
$wid = (int)($vill['wref'] ?? 0);
mysqli_query($GLOBALS["link"], "INSERT INTO ".TB_PREFIX."gold_fin_log (wid, uid, action, gold, time, details) VALUES ($wid, $uid, 'Admin added Gold', $amount, $now, '$details')");
mysqli_query($GLOBALS["link"],
"INSERT INTO ".TB_PREFIX."gold_fin_log (uid, wid, action, gold, time, log)
VALUES ($uid, $wid, 'Admin added Gold', $amount, $now, '$details')"
) or die(mysqli_error($GLOBALS["link"]));
}
header("Location: ../../../Admin/admin.php?p=gold&g");
+4 -1
View File
@@ -48,7 +48,10 @@ $adminName = $acc['username'];
$details = mysqli_real_escape_string($GLOBALS["link"], 'Admin gift by '.$adminName);
$now = time();
mysqli_query($GLOBALS["link"], "INSERT INTO ".TB_PREFIX."gold_fin_log (wid, uid, action, gold, time, details) VALUES ($wid, $id, '$action', $amount, $now, '$details')") or die(mysqli_error($GLOBALS["link"]));
mysqli_query($GLOBALS["link"],
"INSERT INTO ".TB_PREFIX."gold_fin_log (uid, wid, action, gold, time, log)
VALUES ($id, $wid, '$action', $amount, $now, '$details')"
) or die(mysqli_error($GLOBALS["link"]));
header("Location: ../../../Admin/admin.php?p=usergold&g");
exit;
+3 -3
View File
@@ -64,8 +64,8 @@
strtolower($_POST['aname']) != 'multihunter' &&
strtolower($_POST['aname']) != 'support'
) {
mysqli_query($database->dblink, "INSERT INTO " . TB_PREFIX . "users SET username = '".$database->escape($_POST['aname'])."', password = '" . password_hash($_POST['apass'], PASSWORD_BCRYPT, ['cost' => 12]) . "', email = '".$database->escape($_POST['aemail'])."', tribe = ".(int) $_POST['atribe'].", access = 9, is_bcrypt = 1") OR DIE (mysqli_error($database->dblink));
$uid = mysqli_insert_id($database->dblink);
mysqli_query($database->dblink, "INSERT INTO " . TB_PREFIX . "users SET username = '".$database->escape($_POST['aname'])."', password = '" . password_hash($_POST['apass'], PASSWORD_BCRYPT, ['cost' => 12]) . "', email = '".$database->escape($_POST['aemail'])."', tribe = ".(int) $_POST['atribe'].", access = 9, is_bcrypt = 1, desc1 = '[#MULTIHUNTER]', desc2 = '[#MH]\n[#TEAM]'") OR DIE (mysqli_error($database->dblink));
$uid = mysqli_insert_id($database->dblink);
$admin_village_created = false;
$xcoor = round(WORLD_MAX / 2);
$addUnitsWrefs = [];
@@ -93,7 +93,7 @@
// set up MultiHunter
$password = $_POST['mhpw'];
mysqli_query($database->dblink, "UPDATE " . TB_PREFIX . "users SET password = '" . password_hash($password, PASSWORD_BCRYPT,['cost' => 12]) . "' WHERE username = 'Multihunter'");
mysqli_query($database->dblink, "UPDATE " . TB_PREFIX . "users SET password = '" . password_hash($password, PASSWORD_BCRYPT,['cost' => 12]) . "', desc1 = '[#MH]', desc2 = '[#MULTIHUNTER]' WHERE username = 'Multihunter'");
$wid = $admin->getWref(0, 0);
$uid = 5;
$status = $database->getVillageState($wid);
+2 -2
View File
@@ -68,7 +68,7 @@ document.addEventListener('DOMContentLoaded',function(){
<path d="M26 32l5 5 11-11" stroke="white" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"/>
<defs><linearGradient id="g" x1="8" y1="4" x2="56" y2="58"><stop stop-color="#22c55e"/><stop offset="1" stop-color="#0f172a"/></linearGradient></defs>
</svg>
<div><h1>TravianZ Installation</h1><p>Setup wizard v.9.0 Incremental Refactor</p></div>
<div><h1>TravianZ Installation</h1><p>Setup wizard v.10.0 Full Refactor&Redesign</p></div>
`;
var wrap = document.querySelector('.wrapper');
if(wrap) wrap.parentNode.insertBefore(h, wrap);
@@ -76,7 +76,7 @@ document.addEventListener('DOMContentLoaded',function(){
// FOOTER
var f = document.createElement('div');
f.className = 'tz-footer';
f.innerHTML = `<div>© 2010 - 2026 TravianZ All rights reserved</div><div>Server running on <b>v.9.0 Incremental Refactor</b></div>`;
f.innerHTML = `<div>© 2010 - 2026 TravianZ All rights reserved</div><div>Server running on <b>v.10.0 Full Refactor&Redesign</b></div>`;
document.body.appendChild(f);
// curăță resturi vechi