mirror of
https://github.com/Shadowss/TravianZ.git
synced 2026-06-28 00:24:23 +00:00
Incremental Refactor Session
Incremental Refactor Session
This commit is contained in:
Catalin Novgorodschi
+407
-319
@@ -1,383 +1,471 @@
|
||||
<?php
|
||||
use App\Entity\User;
|
||||
|
||||
ob_start(); // Enesure, that no more header already been sent error not showing up again
|
||||
mb_internal_encoding("UTF-8"); // Add for utf8 varriables.
|
||||
|
||||
#################################################################################
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Project: TravianZ ##
|
||||
## Version: 22.06.2015 ##
|
||||
## Version: 13.05.2026 ##
|
||||
## Filename Session.php ##
|
||||
## Developed by: Mr.php , Advocaite , brainiacX , yi12345 , Shadow , ronix ##
|
||||
## Fixed by: Shadow - STARVATION , HERO FIXED COMPL. ##
|
||||
## Fixed by: InCube - double troops ##
|
||||
## Developed by: Dzoki ##
|
||||
## Refactor by: Shadow ##
|
||||
## License: TravianZ Project ##
|
||||
## Copyright: TravianZ (c) 2010-2015. All rights reserved. ##
|
||||
## URLs: http://travian.shadowss.ro ##
|
||||
## Source code: https://github.com/Shadowss/TravianZ ##
|
||||
## Copyright: TravianZ (c) 2010-2026. All rights reserved. ##
|
||||
## URLs: https://travianz.org ##
|
||||
## https://github.com/Shadowss/TravianZ ##
|
||||
## ##
|
||||
#################################################################################
|
||||
|
||||
use App\Entity\User;
|
||||
|
||||
ob_start();
|
||||
mb_internal_encoding("UTF-8");
|
||||
|
||||
global $autoprefix;
|
||||
|
||||
// go max 5 levels up - we don't have folders that go deeper than that
|
||||
/**
|
||||
* Auto-detect root path (max 5 levels up)
|
||||
*/
|
||||
$autoprefix = '';
|
||||
for ($i = 0; $i < 5; $i++) {
|
||||
$autoprefix = str_repeat('../', $i);
|
||||
if (file_exists($autoprefix.'autoloader.php')) {
|
||||
// we have our path, let's leave
|
||||
if (file_exists($autoprefix . 'autoloader.php')) {
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
if(!file_exists($autoprefix.'GameEngine/config.php')) {
|
||||
if (!file_exists($autoprefix . 'GameEngine/config.php')) {
|
||||
header("Location: install/");
|
||||
exit;
|
||||
}
|
||||
|
||||
$script_name = ($_SERVER['REQUEST_URI'] == 'karte.php') ? 'karte' : $_SERVER['REQUEST_URI'];
|
||||
include_once ("Battle.php");
|
||||
include_once ("Data/buidata.php");
|
||||
include_once ("Data/cp.php");
|
||||
include_once ("Data/cel.php");
|
||||
include_once ("Data/resdata.php");
|
||||
include_once ("Data/unitdata.php");
|
||||
include_once ("Data/hero_full.php");
|
||||
include_once ("config.php");
|
||||
include_once ("Database.php");
|
||||
include_once ("Mailer.php");
|
||||
include_once ("Form.php");
|
||||
include_once ("Generator.php");
|
||||
include_once ("Multisort.php");
|
||||
include_once ("Ranking.php");
|
||||
include_once ("Lang/" . LANG . ".php");
|
||||
include_once ("Logging.php");
|
||||
include_once ("Message.php");
|
||||
include_once ("Alliance.php");
|
||||
include_once ("Profile.php");
|
||||
|
||||
include_once("Battle.php");
|
||||
include_once("Data/buidata.php");
|
||||
include_once("Data/cp.php");
|
||||
include_once("Data/cel.php");
|
||||
include_once("Data/resdata.php");
|
||||
include_once("Data/unitdata.php");
|
||||
include_once("Data/hero_full.php");
|
||||
include_once("config.php");
|
||||
include_once("Database.php");
|
||||
include_once("Mailer.php");
|
||||
include_once("Form.php");
|
||||
include_once("Generator.php");
|
||||
include_once("Multisort.php");
|
||||
include_once("Ranking.php");
|
||||
include_once("Lang/" . LANG . ".php");
|
||||
include_once("Logging.php");
|
||||
include_once("Message.php");
|
||||
include_once("Alliance.php");
|
||||
include_once("Profile.php");
|
||||
|
||||
class Session {
|
||||
|
||||
private $time;
|
||||
var $logged_in = false;
|
||||
var $referrer, $url;
|
||||
var $username, $uid, $access, $plus, $tribe, $isAdmin, $alliance, $gold, $oldrank, $gpack, $goldclub;
|
||||
var $bonus = 0;
|
||||
var $bonus1 = 0;
|
||||
var $bonus2 = 0;
|
||||
var $bonus3 = 0;
|
||||
var $bonus4 = 0;
|
||||
var $timer = 0;
|
||||
var $sharedForums = [];
|
||||
var $checker, $mchecker;
|
||||
public $userinfo = [];
|
||||
private $userarray = [];
|
||||
var $villages = [];
|
||||
private $time;
|
||||
|
||||
function __construct() {
|
||||
global $database; //TienTN fix
|
||||
var $logged_in = false;
|
||||
var $referrer, $url;
|
||||
var $username, $uid, $access, $plus, $tribe, $isAdmin, $alliance, $gold, $oldrank, $gpack, $goldclub;
|
||||
|
||||
$this->time = time();
|
||||
if (!isset($_SESSION)) {
|
||||
session_start();
|
||||
}
|
||||
var $bonus = 0;
|
||||
var $bonus1 = 0;
|
||||
var $bonus2 = 0;
|
||||
var $bonus3 = 0;
|
||||
var $bonus4 = 0;
|
||||
|
||||
$this->logged_in = $this->checkLogin();
|
||||
var $timer = 0;
|
||||
var $sharedForums = [];
|
||||
|
||||
if($this->logged_in && TRACK_USR) $database->updateActiveUser($this->username, $this->time);
|
||||
|
||||
if(isset($_SESSION['url'])) $this->referrer = $_SESSION['url'];
|
||||
else $this->referrer = "/";
|
||||
|
||||
$this->url = $_SESSION['url'] = $_SERVER['PHP_SELF'];
|
||||
$this->SurfControl();
|
||||
}
|
||||
var $checker, $mchecker;
|
||||
|
||||
public function Login($user) {
|
||||
global $database, $generator, $logging;
|
||||
|
||||
$this->logged_in = true;
|
||||
$_SESSION['sessid'] = $generator->generateRandID();
|
||||
$_SESSION['username'] = $user;
|
||||
$user_sanitized = $database->escape($user);
|
||||
$_SESSION['checker'] = $generator->generateRandStr(3);
|
||||
$_SESSION['mchecker'] = $generator->generateRandStr(5);
|
||||
public $userinfo = [];
|
||||
private $userarray = [];
|
||||
|
||||
$userFields = $database->getUserFields($user_sanitized, "quest, id", 1, true);
|
||||
$_SESSION['qst'] = $userFields["quest"];
|
||||
var $villages = [];
|
||||
|
||||
$dbarray = $database->getUserFields($user_sanitized, 'id, village_select', 1);
|
||||
$selected_village=(int) $dbarray['village_select'];
|
||||
function __construct() {
|
||||
global $database;
|
||||
|
||||
if ($dbarray['id'] > 1) {
|
||||
if(!isset($_SESSION['wid'])) {
|
||||
if(!empty($selected_village)) $data = $database->getVillage($selected_village);
|
||||
else $data = $database->getVillage($userFields["id"]);
|
||||
$_SESSION['wid'] = $data['wref'];
|
||||
} else
|
||||
if(empty($_SESSION['wid'])) {
|
||||
if(!empty($selected_village)) $data = $database->getVillage($selected_village);
|
||||
else $data = $database->getVillage($userFields["id"]);
|
||||
$_SESSION['wid'] = $data['wref'];
|
||||
}
|
||||
$this->PopulateVar();
|
||||
$this->time = time();
|
||||
|
||||
$database->updateActiveUser($user_sanitized, $this->time);
|
||||
$database->updateUserField($user_sanitized, "sessid", $_SESSION['sessid'], 0);
|
||||
if (!isset($_SESSION)) {
|
||||
session_start();
|
||||
}
|
||||
|
||||
$this->logged_in = $this->checkLogin();
|
||||
|
||||
if ($this->logged_in && TRACK_USR) {
|
||||
$database->updateActiveUser($this->username, $this->time);
|
||||
}
|
||||
|
||||
$this->referrer = $_SESSION['url'] ?? "/";
|
||||
$this->url = $_SESSION['url'] = $_SERVER['PHP_SELF'];
|
||||
|
||||
$this->SurfControl();
|
||||
}
|
||||
|
||||
/**
|
||||
* LOGIN USER
|
||||
*/
|
||||
public function Login($user) {
|
||||
global $database, $generator, $logging;
|
||||
|
||||
$this->logged_in = true;
|
||||
|
||||
$_SESSION['sessid'] = $generator->generateRandID();
|
||||
$_SESSION['username'] = $user;
|
||||
|
||||
$user_sanitized = $database->escape($user);
|
||||
|
||||
$_SESSION['checker'] = $generator->generateRandStr(3);
|
||||
$_SESSION['mchecker'] = $generator->generateRandStr(5);
|
||||
|
||||
$userFields = $database->getUserFields($user_sanitized, "quest, id", 1, true);
|
||||
$_SESSION['qst'] = $userFields["quest"];
|
||||
|
||||
$dbarray = $database->getUserFields($user_sanitized, 'id, village_select', 1);
|
||||
$selected_village = (int)$dbarray['village_select'];
|
||||
|
||||
if ($dbarray['id'] > 1) {
|
||||
|
||||
if (!isset($_SESSION['wid']) || empty($_SESSION['wid'])) {
|
||||
|
||||
if (!empty($selected_village)) {
|
||||
$data = $database->getVillage($selected_village);
|
||||
} else {
|
||||
$data = $database->getVillage($userFields["id"]);
|
||||
}
|
||||
|
||||
$logging->addLoginLog($dbarray['id'], $_SERVER['REMOTE_ADDR']);
|
||||
$_SESSION['wid'] = $data['wref'];
|
||||
}
|
||||
|
||||
if ($dbarray['id'] == 1) {
|
||||
header("Location: nachrichten.php");
|
||||
exit;
|
||||
} else {
|
||||
header("Location: dorf1.php");
|
||||
exit;
|
||||
}
|
||||
}
|
||||
$this->logged_in = true;
|
||||
$this->PopulateVar(); // only once, controlled by flag
|
||||
|
||||
public function Logout() {
|
||||
global $database;
|
||||
$this->logged_in = false;
|
||||
$database->updateUserField($_SESSION['username'], "sessid", "", 0);
|
||||
if(ini_get("session.use_cookies")) {
|
||||
$params = session_get_cookie_params();
|
||||
setcookie(session_name(), '', time() - 42000, $params["path"], $params["domain"], $params["secure"], $params["httponly"]);
|
||||
}
|
||||
session_destroy();
|
||||
session_start();
|
||||
}
|
||||
$database->updateActiveUser($user_sanitized, $this->time);
|
||||
$database->updateUserField($user_sanitized, "sessid", $_SESSION['sessid'], 0);
|
||||
}
|
||||
|
||||
public function changeChecker() {
|
||||
global $generator;
|
||||
|
||||
$this->checker = $_SESSION['checker'] = $generator->generateRandStr(3);
|
||||
$this->mchecker = $_SESSION['mchecker'] = $generator->generateRandStr(5);
|
||||
}
|
||||
$logging->addLoginLog($dbarray['id'], $_SERVER['REMOTE_ADDR']);
|
||||
|
||||
private function checkLogin(){
|
||||
global $database;
|
||||
|
||||
$user = $id = '';
|
||||
$admin = false;
|
||||
$inAdmin = (strpos($_SERVER['REQUEST_URI'], '/Admin') !== false);
|
||||
if ($dbarray['id'] == 1) {
|
||||
header("Location: nachrichten.php");
|
||||
exit;
|
||||
}
|
||||
|
||||
if (!$inAdmin && isset($_SESSION['username'])) {
|
||||
$user = $_SESSION['username'];
|
||||
$id = (int) $_SESSION['id_user'];
|
||||
} else if ($inAdmin && isset($_SESSION['admin_username'])) {
|
||||
$user = $_SESSION['admin_username'];
|
||||
$id = (int) $_SESSION['id'];
|
||||
$admin = true;
|
||||
}
|
||||
header("Location: dorf1.php");
|
||||
exit;
|
||||
}
|
||||
|
||||
if($user && ($admin || isset($_SESSION['sessid']))) {
|
||||
$this->maintenance();
|
||||
$this->isWinner();
|
||||
|
||||
// check if this is not a support user, for who only messages and statistics are available
|
||||
if ($user == 'Support') {
|
||||
$req_file = basename($_SERVER['PHP_SELF']);
|
||||
if (!in_array($req_file, ['nachrichten.php', 'logout.php', 'statistiken.php', 'rules.php', 'karte.php', 'karte2.php', 'spieler.php'])) {
|
||||
header('Location: nachrichten.php');
|
||||
exit;
|
||||
}
|
||||
}
|
||||
/**
|
||||
* LOGOUT
|
||||
*/
|
||||
public function Logout() {
|
||||
global $database;
|
||||
|
||||
//Get and Populate Data
|
||||
$this->PopulateVar();
|
||||
|
||||
//Check if the player is banned
|
||||
$this->isBanned();
|
||||
|
||||
//update database
|
||||
$database->updateActiveUser($user, $this->time);
|
||||
return true;
|
||||
}
|
||||
else return false;
|
||||
}
|
||||
$this->logged_in = false;
|
||||
|
||||
/**
|
||||
* Called if the player is banned
|
||||
*
|
||||
*/
|
||||
|
||||
function isBanned(){
|
||||
if($this->access == BANNED && !in_array(basename($_SERVER['PHP_SELF']), ['banned.php', 'nachrichten.php', 'rules.php'])){
|
||||
header('Location: banned.php');
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* Called when the server is under maintenance
|
||||
*
|
||||
*/
|
||||
|
||||
function maintenance(){
|
||||
if($_SESSION['ok'] == 2 && basename($_SERVER['PHP_SELF']) != 'maintenance.php'){
|
||||
header('Location: maintenance.php');
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* Called when there's a player who built a WW to level 100
|
||||
*
|
||||
*/
|
||||
|
||||
function isWinner(){
|
||||
global $database;
|
||||
|
||||
$requiredPage = basename($_SERVER['PHP_SELF']);
|
||||
if($database->isThereAWinner() && (in_array($requiredPage, ['build.php', 'plus1.php']) ||
|
||||
(in_array($requiredPage, ['plus.php']) && isset($_GET['id']) && !empty($_GET['id'] && $_GET['id'] >= 7))))
|
||||
{
|
||||
header('Location: winner.php');
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* Function to check Real Hero
|
||||
* Made by: Shadow and brainiacX
|
||||
*
|
||||
*/
|
||||
$database->updateUserField($_SESSION['username'], "sessid", "", 0);
|
||||
|
||||
function CheckHeroReal () {
|
||||
global $database,$link;
|
||||
if (ini_get("session.use_cookies")) {
|
||||
$params = session_get_cookie_params();
|
||||
setcookie(session_name(), '', time() - 42000,
|
||||
$params["path"], $params["domain"],
|
||||
$params["secure"], $params["httponly"]
|
||||
);
|
||||
}
|
||||
|
||||
$villageIDs = implode(', ', $this->villages);
|
||||
if (!count($this->villages)) {
|
||||
$this->Logout();
|
||||
header('login.php');
|
||||
exit;
|
||||
}
|
||||
session_destroy();
|
||||
session_start();
|
||||
}
|
||||
|
||||
// check if hero unit for this player is present anywhere on the map
|
||||
$q = '
|
||||
SELECT
|
||||
IFNULL((SELECT SUM(hero) from '.TB_PREFIX.'enforcement where `from` IN('.$villageIDs.')), 0) +
|
||||
IFNULL((SELECT SUM(hero) from '.TB_PREFIX.'units where `vref` IN('.$villageIDs.')), 0) +
|
||||
IFNULL((SELECT SUM(t11) from '.TB_PREFIX.'prisoners where `from` IN('.$villageIDs.')), 0) +
|
||||
IFNULL((SELECT SUM(t11) FROM '.TB_PREFIX.'movement, '.TB_PREFIX.'attacks WHERE '.TB_PREFIX.'movement.`from` IN('.$villageIDs.') and '.TB_PREFIX.'movement.ref = '.TB_PREFIX.'attacks.id and '.TB_PREFIX.'movement.proc = 0 and '.TB_PREFIX.'movement.sort_type = 3), 0) +
|
||||
IFNULL((SELECT SUM(t11) FROM '.TB_PREFIX.'movement, '.TB_PREFIX.'attacks where '.TB_PREFIX.'movement.`to` IN('.$villageIDs.') and '.TB_PREFIX.'movement.ref = '.TB_PREFIX.'attacks.id and '.TB_PREFIX.'movement.proc = 0 and '.TB_PREFIX.'movement.sort_type = 4), 0)
|
||||
as herocount';
|
||||
$heroUnitRegisters = mysqli_fetch_array( mysqli_query($database->dblink, $q, MYSQLI_ASSOC ))['herocount'];
|
||||
public function changeChecker() {
|
||||
global $generator;
|
||||
|
||||
// check if the actual hero is alive or being trained/revived into a living state
|
||||
$isHeroLivingOrRaising = $database->getHeroDeadReviveOrInTraining($this->uid);
|
||||
$this->checker = $_SESSION['checker'] = $generator->generateRandStr(3);
|
||||
$this->mchecker = $_SESSION['mchecker'] = $generator->generateRandStr(5);
|
||||
}
|
||||
|
||||
// if he doesn't register anywhere on the map but is marked as alive,
|
||||
// we need to kill him
|
||||
if(!$heroUnitRegisters && $isHeroLivingOrRaising) {
|
||||
$database->KillMyHero($this->uid);
|
||||
/**
|
||||
* LOGIN CHECK
|
||||
*/
|
||||
private function checkLogin() {
|
||||
global $database;
|
||||
|
||||
$user = '';
|
||||
$admin = false;
|
||||
|
||||
$inAdmin = (strpos($_SERVER['REQUEST_URI'], '/Admin') !== false);
|
||||
|
||||
if (!$inAdmin && isset($_SESSION['username'])) {
|
||||
$user = $_SESSION['username'];
|
||||
} elseif ($inAdmin && isset($_SESSION['admin_username'])) {
|
||||
$user = $_SESSION['admin_username'];
|
||||
$admin = true;
|
||||
}
|
||||
|
||||
if ($user && ($admin || isset($_SESSION['sessid']))) {
|
||||
|
||||
$this->maintenance();
|
||||
$this->isWinner();
|
||||
|
||||
if ($user == 'Support') {
|
||||
$req_file = basename($_SERVER['PHP_SELF']);
|
||||
|
||||
if (!in_array($req_file, [
|
||||
'nachrichten.php', 'logout.php', 'statistiken.php',
|
||||
'rules.php', 'karte.php', 'karte2.php', 'spieler.php'
|
||||
])) {
|
||||
header('Location: nachrichten.php');
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
private function PopulateVar() {
|
||||
global $database;
|
||||
|
||||
$this->userarray = $this->userinfo = $database->getUserArray($_SESSION['username'], 0);
|
||||
$this->username = $this->userarray['username'];
|
||||
$this->uid = $_SESSION['id_user'] = $this->userarray['id'];
|
||||
$this->gpack = $this->userarray['gpack'];
|
||||
$this->access = $this->userarray['access'];
|
||||
$this->plus = ($this->userarray['plus'] > $this->time);
|
||||
$this->goldclub = $this->userarray['goldclub'];
|
||||
$this->villages = $database->getVillagesID($this->uid);
|
||||
$this->tribe = $this->userarray['tribe'];
|
||||
$this->isAdmin = $this->access >= MODERATOR;
|
||||
$this->alliance = $_SESSION['alliance_user'] = $this->userarray['alliance'];
|
||||
$this->checker = $_SESSION['checker'];
|
||||
$this->mchecker = $_SESSION['mchecker'];
|
||||
$this->sit = $database->GetOnline($this->uid);
|
||||
$this->sit1 = $this->userarray['sit1'];
|
||||
$this->sit2 = $this->userarray['sit2'];
|
||||
$this->cp = floor($this->userarray['cp']);
|
||||
$this->gold = $this->userarray['gold'];
|
||||
$this->oldrank = $this->userarray['oldrank'];
|
||||
$this->sharedForums = $database->getSharedForums($this->uid, $this->alliance);
|
||||
$_SESSION['ok'] = $this->userarray['ok'];
|
||||
|
||||
if($this->userarray['b1'] > $this->time) $this->bonus1 = 1;
|
||||
if($this->userarray['b2'] > $this->time) $this->bonus2 = 1;
|
||||
if($this->userarray['b3'] > $this->time) $this->bonus3 = 1;
|
||||
if($this->userarray['b4'] > $this->time) $this->bonus4 = 1;
|
||||
|
||||
if (!in_array($this->username, ['Support', 'Multihunter'])) $this->CheckHeroReal();
|
||||
if (!$this->logged_in) {
|
||||
$this->PopulateVar();
|
||||
}
|
||||
|
||||
/**
|
||||
* Creates an array with the vrefs of attacked/scouted/reinforced villages and oasis
|
||||
*
|
||||
*/
|
||||
|
||||
public function populateAttacks(){
|
||||
global $database, $village;
|
||||
|
||||
$troopsMovement = $database->getMovement(3, $village->wid, 0);
|
||||
if(count($troopsMovement) > 0){
|
||||
foreach($troopsMovement as $movement)
|
||||
{
|
||||
switch($movement['attack_type']){
|
||||
case 1:
|
||||
$_SESSION['troops_movement']['scouts'][] = $movement['to'];
|
||||
break;
|
||||
case 2:
|
||||
$_SESSION['troops_movement']['enforcements'][] = $movement['to'];
|
||||
break;
|
||||
case 3:
|
||||
case 4:
|
||||
$_SESSION['troops_movement']['attacks'][] = $movement['to'];
|
||||
break;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
private function SurfControl(){
|
||||
if(SERVER_WEB_ROOT) {
|
||||
$page = $_SERVER['SCRIPT_NAME'];
|
||||
} else {
|
||||
$explode = explode("/", $_SERVER['SCRIPT_NAME']);
|
||||
$i = count($explode) - 1;
|
||||
$page = $explode[$i];
|
||||
$this->isBanned();
|
||||
|
||||
}
|
||||
$pagearray = array("index.php", "anleitung.php", "tutorial.php", "login.php", "activate.php", "anmelden.php", "xaccount.php");
|
||||
if(!$this->logged_in) {
|
||||
if(!in_array($page, $pagearray) || $page == "logout.php") {
|
||||
header("Location: login.php");
|
||||
exit;
|
||||
}
|
||||
} else {
|
||||
if(in_array($page, $pagearray)) {
|
||||
if ($this->uid == 1) {
|
||||
header("Location: nachrichten.php");
|
||||
exit;
|
||||
} else {
|
||||
header("Location: dorf1.php");
|
||||
exit;
|
||||
}
|
||||
}
|
||||
$database->updateActiveUser($user, $this->time);
|
||||
|
||||
return true;
|
||||
}
|
||||
|
||||
return false;
|
||||
}
|
||||
|
||||
function isBanned() {
|
||||
if ($this->access == BANNED &&
|
||||
!in_array(basename($_SERVER['PHP_SELF']), ['banned.php', 'nachrichten.php', 'rules.php'])) {
|
||||
|
||||
header('Location: banned.php');
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
function maintenance() {
|
||||
if (($_SESSION['ok'] ?? null) == 2 &&
|
||||
basename($_SERVER['PHP_SELF']) != 'maintenance.php') {
|
||||
|
||||
header('Location: maintenance.php');
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* FIXED: winner condition bug (safe parentheses + logic)
|
||||
*/
|
||||
function isWinner() {
|
||||
global $database;
|
||||
|
||||
$requiredPage = basename($_SERVER['PHP_SELF']);
|
||||
|
||||
$idParam = isset($_GET['id']) ? (int)$_GET['id'] : 0;
|
||||
|
||||
if (
|
||||
$database->isThereAWinner() &&
|
||||
(
|
||||
in_array($requiredPage, ['build.php', 'plus1.php']) ||
|
||||
(
|
||||
$requiredPage === 'plus.php' && $idParam >= 7
|
||||
)
|
||||
)
|
||||
) {
|
||||
header('Location: winner.php');
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* HERO CHECK (SAFE)
|
||||
*/
|
||||
function CheckHeroReal() {
|
||||
global $database;
|
||||
|
||||
$villageIDs = implode(', ', $this->villages);
|
||||
|
||||
if (!count($this->villages)) {
|
||||
$this->Logout();
|
||||
header('Location: login.php');
|
||||
exit;
|
||||
}
|
||||
|
||||
$q = '
|
||||
SELECT
|
||||
IFNULL((SELECT SUM(hero) FROM ' . TB_PREFIX . 'enforcement WHERE `from` IN(' . $villageIDs . ')), 0) +
|
||||
IFNULL((SELECT SUM(hero) FROM ' . TB_PREFIX . 'units WHERE `vref` IN(' . $villageIDs . ')), 0) +
|
||||
IFNULL((SELECT SUM(t11) FROM ' . TB_PREFIX . 'prisoners WHERE `from` IN(' . $villageIDs . ')), 0) +
|
||||
IFNULL((SELECT SUM(t11) FROM ' . TB_PREFIX . 'movement, ' . TB_PREFIX . 'attacks
|
||||
WHERE ' . TB_PREFIX . 'movement.`from` IN(' . $villageIDs . ')
|
||||
AND ' . TB_PREFIX . 'movement.ref = ' . TB_PREFIX . 'attacks.id
|
||||
AND ' . TB_PREFIX . 'movement.proc = 0
|
||||
AND ' . TB_PREFIX . 'movement.sort_type = 3), 0) +
|
||||
IFNULL((SELECT SUM(t11) FROM ' . TB_PREFIX . 'movement, ' . TB_PREFIX . 'attacks
|
||||
WHERE ' . TB_PREFIX . 'movement.`to` IN(' . $villageIDs . ')
|
||||
AND ' . TB_PREFIX . 'movement.ref = ' . TB_PREFIX . 'attacks.id
|
||||
AND ' . TB_PREFIX . 'movement.proc = 0
|
||||
AND ' . TB_PREFIX . 'movement.sort_type = 4), 0)
|
||||
AS herocount';
|
||||
|
||||
$heroUnitRegisters = mysqli_fetch_array(
|
||||
mysqli_query($database->dblink, $q),
|
||||
MYSQLI_ASSOC
|
||||
)['herocount'];
|
||||
|
||||
$isHeroLivingOrRaising = $database->getHeroDeadReviveOrInTraining($this->uid);
|
||||
|
||||
if (!$heroUnitRegisters && $isHeroLivingOrRaising) {
|
||||
$database->KillMyHero($this->uid);
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* POPULATE USER DATA
|
||||
*/
|
||||
private function PopulateVar() {
|
||||
global $database;
|
||||
|
||||
// prevent double execution per request
|
||||
if ($this->populated) {
|
||||
return;
|
||||
}
|
||||
|
||||
$this->populated = true;
|
||||
|
||||
// -----------------------------
|
||||
// SIMPLE SESSION CACHE LAYER
|
||||
// -----------------------------
|
||||
$cacheKeyUser = 'cache_user_' . $_SESSION['username'];
|
||||
$cacheKeyVillages = 'cache_villages_' . ($_SESSION['id_user'] ?? 0);
|
||||
|
||||
// TTL simplu (secunde)
|
||||
$ttl = 30;
|
||||
|
||||
// USER CACHE
|
||||
if (!isset($_SESSION[$cacheKeyUser]) || (time() - $_SESSION[$cacheKeyUser]['time'] > $ttl)) {
|
||||
$_SESSION[$cacheKeyUser] = [
|
||||
'time' => time(),
|
||||
'data' => $database->getUserArray($_SESSION['username'], 0)
|
||||
];
|
||||
}
|
||||
$this->userarray = $this->userinfo = $_SESSION[$cacheKeyUser]['data'];
|
||||
|
||||
$this->username = $this->userarray['username'];
|
||||
$this->uid = $_SESSION['id_user'] = $this->userarray['id'];
|
||||
|
||||
$this->gpack = $this->userarray['gpack'];
|
||||
$this->access = $this->userarray['access'];
|
||||
$this->plus = ($this->userarray['plus'] > $this->time);
|
||||
$this->goldclub = $this->userarray['goldclub'];
|
||||
|
||||
// VILLAGES CACHE
|
||||
if (!isset($_SESSION[$cacheKeyVillages]) || (time() - $_SESSION[$cacheKeyVillages]['time'] > $ttl)) {
|
||||
$_SESSION[$cacheKeyVillages] = [
|
||||
'time' => time(),
|
||||
'data' => $database->getVillagesID($this->uid)
|
||||
];
|
||||
}
|
||||
$this->villages = $_SESSION[$cacheKeyVillages]['data'];
|
||||
|
||||
$this->tribe = $this->userarray['tribe'];
|
||||
$this->isAdmin = $this->access >= MODERATOR;
|
||||
|
||||
$this->alliance = $_SESSION['alliance_user'] = $this->userarray['alliance'];
|
||||
|
||||
$this->checker = $_SESSION['checker'];
|
||||
$this->mchecker = $_SESSION['mchecker'];
|
||||
|
||||
$this->sit = $database->GetOnline($this->uid);
|
||||
$this->sit1 = $this->userarray['sit1'];
|
||||
$this->sit2 = $this->userarray['sit2'];
|
||||
|
||||
$this->cp = floor($this->userarray['cp']);
|
||||
$this->gold = $this->userarray['gold'];
|
||||
$this->oldrank = $this->userarray['oldrank'];
|
||||
|
||||
$this->sharedForums = $database->getSharedForums($this->uid, $this->alliance);
|
||||
|
||||
$_SESSION['ok'] = $this->userarray['ok'];
|
||||
|
||||
if ($this->userarray['b1'] > $this->time) $this->bonus1 = 1;
|
||||
if ($this->userarray['b2'] > $this->time) $this->bonus2 = 1;
|
||||
if ($this->userarray['b3'] > $this->time) $this->bonus3 = 1;
|
||||
if ($this->userarray['b4'] > $this->time) $this->bonus4 = 1;
|
||||
|
||||
if (!in_array($this->username, ['Support', 'Multihunter'])) {
|
||||
$this->CheckHeroReal();
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* ATTACKS CACHE (SESSION)
|
||||
*/
|
||||
public function populateAttacks() {
|
||||
global $database, $village;
|
||||
|
||||
$troopsMovement = $database->getMovement(3, $village->wid, 0);
|
||||
|
||||
if (count($troopsMovement) > 0) {
|
||||
foreach ($troopsMovement as $movement) {
|
||||
|
||||
switch ($movement['attack_type']) {
|
||||
case 1:
|
||||
$_SESSION['troops_movement']['scouts'][] = $movement['to'];
|
||||
break;
|
||||
|
||||
case 2:
|
||||
$_SESSION['troops_movement']['enforcements'][] = $movement['to'];
|
||||
break;
|
||||
|
||||
case 3:
|
||||
case 4:
|
||||
$_SESSION['troops_movement']['attacks'][] = $movement['to'];
|
||||
break;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* SURF CONTROL (ROUTING SAFE)
|
||||
*/
|
||||
private function SurfControl() {
|
||||
|
||||
$page = SERVER_WEB_ROOT
|
||||
? $_SERVER['SCRIPT_NAME']
|
||||
: basename($_SERVER['SCRIPT_NAME']);
|
||||
|
||||
$pagearray = [
|
||||
"index.php", "anleitung.php", "tutorial.php",
|
||||
"login.php", "activate.php", "anmelden.php", "xaccount.php"
|
||||
];
|
||||
|
||||
if (!$this->logged_in) {
|
||||
if (!in_array($page, $pagearray) || $page == "logout.php") {
|
||||
header("Location: login.php");
|
||||
exit;
|
||||
}
|
||||
} else {
|
||||
if (in_array($page, $pagearray)) {
|
||||
|
||||
if (($this->uid ?? 0) == 1) {
|
||||
header("Location: nachrichten.php");
|
||||
exit;
|
||||
}
|
||||
|
||||
header("Location: dorf1.php");
|
||||
exit;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
};
|
||||
$session = new Session;
|
||||
$form = new Form;
|
||||
|
||||
// if there is no user, we'd try to load messages for user with ID 0, which is wrong
|
||||
if (!empty($_SESSION['id_user'])) {
|
||||
$message = new Message;
|
||||
|
||||
// create a global user variable which will later be removed from here
|
||||
// and created + retrieved either via Service Locator or other DI concept
|
||||
$user = new User((int) $_SESSION['id_user'], $database);
|
||||
$user = new User((int)$_SESSION['id_user'], $database);
|
||||
}
|
||||
|
||||
?>
|
||||
?>
|
||||
Reference in New Issue
Block a user