xinyin025/TravianZ
1
0
Fork 0
mirror of https://github.com/Shadowss/TravianZ.git synced 2026-08-17 16:51:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

General fixes

Browse Source 
+Removed almost all "BANNED" controls to template and .php UI files. The
control will be done only once and in the Session class
This commit is contained in:
iopietro
2018-06-11 02:22:22 +02:00
parent 56f4e799e0
commit 79eb6a73d6
38 changed files with 681 additions and 1026 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Templates/Alliance/Forum/forum_1.tpl
-4
View File
@@ -5,10 +5,6 @@
## FIX BY RONIX ##
## TRAVIANZ ##
############################################################
if($session->access == BANNED){
header("Location: banned.php");
exit;
}
if($session->access != ADMIN && ($session->alliance == 0 || ($session->alliance > 0 && !$opt['opt5']))) $alliance->redirect($_GET);
Templates/Alliance/Forum/forum_10.tpl
-4
View File
@@ -5,10 +5,6 @@
// # FIX BY RONIX ##
// # TRAVIANZ ##
// ###########################################################
if($session->access == BANNED){
header("Location: banned.php");
exit();
}
$topic_id = $_GET['tid'];
$post_id = $_GET['pod'];
Templates/Alliance/Forum/forum_2.tpl
-4
View File
@@ -5,10 +5,6 @@
// # FIX BY RONIX ##
// # TRAVIANZ ##
// ###########################################################
if($session->access == BANNED){
header("Location: banned.php");
exit();
}
$opt = $database->getAlliPermissions($session->uid, $aid);
$displayarray = $database->getUserArray($session->uid, 1);
Templates/Alliance/Forum/forum_3.tpl
-4
View File
@@ -5,10 +5,6 @@
## FIX BY RONIX ##
## TRAVIANZ ##
############################################################
if($session->access == BANNED){
header("Location: banned.php");
exit;
}
$topicID = $_GET['idt'];
$showTopic = reset($database->ShowTopic($topicID));
Templates/Alliance/Forum/forum_4.tpl
-4
View File
@@ -5,10 +5,6 @@
## FIX BY RONIX ##
## TRAVIANZ ##
############################################################
if($session->access == BANNED){
header("Location: banned.php");
exit;
}
$cat_id = $_GET['fid'];
$forumInfo = $database->ForumCatEdit($cat_id);
Templates/Alliance/Forum/forum_5.tpl
-4
View File
@@ -5,10 +5,6 @@
## FIX BY RONIX ##
## TRAVIANZ ##
############################################################
if($session->access == BANNED){
header("Location: banned.php");
exit;
}
$cat_id = $_GET['fid'];
$forumData = reset($database->ForumCatEdit($cat_id));
Templates/Alliance/Forum/forum_6.tpl
-4
View File
@@ -5,10 +5,6 @@
// # FIX BY RONIX ##
// # TRAVIANZ ##
// ###########################################################
if($session->access == BANNED){
header("Location: banned.php");
exit();
}
$tid = $_GET['tid'];
$topics = $database->ShowTopic($tid);
Templates/Alliance/Forum/forum_7.tpl
-4
View File
@@ -1,9 +1,5 @@
<?php
//////////////// made by TTMTT ////////////////
if($session->access == BANNED){
header("Location: banned.php");
exit;
}
$tid = $_GET['tid'];
$topic = reset($database->ShowTopic($tid));
Templates/Alliance/Forum/forum_8.tpl
-4
View File
@@ -5,10 +5,6 @@
## FIX BY RONIX ##
## TRAVIANZ ##
############################################################
if($session->access == BANNED){
header("Location: banned.php");
exit;
}
$forumData = reset($database->ForumCatEdit($_GET['idf']));
if(empty($forumData) || ($forumData['alliance'] == 0 && $session->access != ADMIN) ||
Templates/Alliance/Forum/forum_9.tpl
-4
View File
@@ -5,10 +5,6 @@
## FIX BY RONIX ##
## TRAVIANZ ##
############################################################
if($session->access == BANNED){
header("Location: banned.php");
exit;
}
$topic_id = $_GET['idt'];
$topics = $database->ShowTopic($topic_id);
Templates/Alliance/assignpos.tpl
+1 -8
View File
@@ -5,8 +5,7 @@ $allianceinfo = $database->getAlliance($aid);
$memberlist = $database->getAllMember($aid);
echo "<h1>".$allianceinfo['tag']." - ".$allianceinfo['name']."</h1>";
include("alli_menu.tpl");
if($session->access!=BANNED){
include("alli_menu.tpl");
?>
<form method="post" action="allianz.php">
<table cellpadding="1" cellspacing="1" id="position" class="small_option">
@@ -41,9 +40,3 @@ if($session->access!=BANNED){
<button value="ok" name="s1" id="btn_ok" class="trav_buttons">OK</button>
</p>
</form>
<?php
}else{
header("Location: banned.php");
exit;
}
?>
Templates/Build/15_1.tpl
+10 -28
View File
@@ -1,39 +1,25 @@
<?php
$ty=(isset($_GET['ty']))? $_GET['ty']:"";
$ty = (isset($_GET['ty']))? $_GET['ty']:"";
if(isset($_REQUEST["cancel"]) && $_REQUEST["cancel"] == "1") {
if($session->access != BANNED){
$database->delDemolition($village->wid);
header("Location: build.php?gid=15&ty=$ty&cancel=0&demolish=0");
exit;
}else{
header("Location: banned.php");
exit;
}
}
if ($session->alliance) {
$memberCount = $database->countAllianceMembers($session->alliance);
} else {
$memberCount = 0;
}
if($session->alliance) $memberCount = $database->countAllianceMembers($session->alliance);
else $memberCount = 0;
if(!empty($_REQUEST["demolish"]) && $_REQUEST["c"] == $session->mchecker) {
if($session->access != BANNED){
if($_REQUEST["type"] != null && ($_REQUEST["type"] >= 19 && $_REQUEST["type"] <= 40 || $_REQUEST["type"] == 99)) {
$type = $_REQUEST['type'];
$demolish_permitted = $database->addDemolition($village->wid,$type);
if ($demolish_permitted === true) {
$session->changeChecker();
header("Location: build.php?gid=15&ty=$type&cancel=0&demolish=0");
} else {
header("Location: build.php?gid=15&ty=$type&nodemolish=".$demolish_permitted);
}
exit;
$session->changeChecker();
header("Location: build.php?gid=15&ty=$type&cancel=0&demolish=0");
}
else header("Location: build.php?gid=15&ty=$type&nodemolish=".$demolish_permitted);
exit;
}
}else{
header("Location: banned.php");
exit;
}
}
if($village->resarray['f'.$id] >= DEMOLISH_LEVEL_REQ) {
@@ -46,13 +32,9 @@ if($village->resarray['f'.$id] >= DEMOLISH_LEVEL_REQ) {
echo "<a href='build.php?id=".$_GET['id']."&ty=".$ty."&cancel=1'><img src='img/x.gif' class='del' title='".CANCEL."' alt='cancel'></a> ";
echo "".DEMOLITION_OF." ".$building->procResType($VillageResourceLevels['f'.$Demolition['buildnumber'].'t']).": <span id=timer1>".$generator->getTimeFormat($Demolition['timetofinish']-time())."</span>";
if($session->gold >= 2) {
if($session->access!=BANNED){
?> <a href="?id=15&buildingFinish=1&ty=<?php echo $ty;?>" onclick="return confirm('Finish all construction and research orders in this village immediately for 2 Gold?');" title="<?php echo FINISH_GOLD; ?>"><img class="clock" alt="Finish all construction and research orders in this village immediately for 2 Gold?" src="img/x.gif"/></a>
?>
<a href="?id=15&buildingFinish=1&ty=<?php echo $ty;?>" onclick="return confirm('Finish all construction and research orders in this village immediately for 2 Gold?');" title="<?php echo FINISH_GOLD; ?>"><img class="clock" alt="Finish all construction and research orders in this village immediately for 2 Gold?" src="img/x.gif"/></a>
<?php
}else{
?> <a href="banned.php" title="<?php echo FINISH_GOLD; ?>"><img class="clock" alt="Finish all construction and research orders in this village immediately for 2 Gold?" src="img/x.gif"/></a>
<?php
}
}
echo "</b>";
} else {
Templates/Build/37_hero.tpl
+10 -53
View File
@@ -38,16 +38,8 @@ if (isset($_POST['name']) && !empty($_POST['name'])) {
<td class="xp"><img class="bar" src="img/x.gif" style="width:<?php echo (2*$hero_info['attack'])+1; ?>px;" alt="<?php echo $hero_info['atk']; ?>" title="<?php echo $hero_info['atk']; ?>" /></td>
<td class="up"><span class="none">
<?php
if($hero_info['points'] > 0 && $hero_info['attack'] < 100){
if($session->access != BANNED){
echo "<a href=\"build.php?id=".$id."&add=off\">(<b>+</b>)</a>";
}else{
header("Location: banned.php");
exit;
}
}else {
echo "<span class=\"none\">(+)</span>";
}
if($hero_info['points'] > 0 && $hero_info['attack'] < 100) echo "<a href=\"build.php?id=".$id."&add=off\">(<b>+</b>)</a>";
else echo "<span class=\"none\">(+)</span>";
?>
</td>
<td class="po"><?php echo $hero_info['attack']; ?></td>
@@ -58,16 +50,8 @@ if (isset($_POST['name']) && !empty($_POST['name'])) {
<td class="xp"><img class="bar" src="img/x.gif" style="width:<?php echo (2*$hero_info['defence'])+1; ?>px;" alt="<?php echo ($hero_info['di']) . "/" . ($hero_info['dc']); ?>" title="<?php echo ($hero_info['di']) . "/" . ($hero_info['dc']); ?>" /></td>
<td class="up"><span class="none">
<?php
if($hero_info['points'] > 0 && $hero_info['defence'] < 100){
if($session->access != BANNED){
echo "<a href=\"build.php?id=".$id."&add=deff\">(<b>+</b>)</a>";
}else{
header("Location: banned.php");
exit;
}
}else {
echo "<span class=\"none\">(+)</span>";
}
if($hero_info['points'] > 0 && $hero_info['defence'] < 100) echo "<a href=\"build.php?id=".$id."&add=deff\">(<b>+</b>)</a>";
else echo "<span class=\"none\">(+)</span>";
?>
</td>
<td class="po"><?php echo $hero_info['defence']; ?></td>
@@ -78,17 +62,8 @@ if (isset($_POST['name']) && !empty($_POST['name'])) {
<td class="xp"><img class="bar" src="img/x.gif" style="width:<?php echo ($hero_info['ob']-1)*1000+1; ?>px;" alt="<?php echo ($hero_info['ob']-1)*100; ?>%" title="<?php echo ($hero_info['ob']-1)*100; ?>%" /></td>
<td class="up"><span class="none">
<?php
if($hero_info['points'] > 0 && $hero_info['attackbonus'] < 100){
if($session->access != BANNED){
echo "<a href=\"build.php?id=".$id."&add=obonus\">(<b>+</b>)</a>";
}else{
header("Location: banned.php");
exit;
}
}else {
echo "<span class=\"none\">(+)</span>";
}
if($hero_info['points'] > 0 && $hero_info['attackbonus'] < 100) echo "<a href=\"build.php?id=".$id."&add=obonus\">(<b>+</b>)</a>";
else echo "<span class=\"none\">(+)</span>";
?>
</td>
<td class="po"><?php echo $hero_info['attackbonus']; ?></td>
@@ -99,17 +74,8 @@ if (isset($_POST['name']) && !empty($_POST['name'])) {
<td class="xp"><img class="bar" src="img/x.gif" style="width:<?php echo ($hero_info['db']-1)*1000+1; ?>px;" alt="<?php echo ($hero_info['db']-1)*100; ?>%" title="<?php echo ($hero_info['db']-1)*100; ?>%" /></td>
<td class="up"><span class="none">
<?php
if($hero_info['points'] > 0 && $hero_info['defencebonus'] < 100){
if($session->access != BANNED){
echo "<a href=\"build.php?id=".$id."&add=dbonus\">(<b>+</b>)</a>";
}else{
header("Location: banned.php");
exit;
}
}else {
echo "<span class=\"none\">(+)</span>";
}
if($hero_info['points'] > 0 && $hero_info['defencebonus'] < 100) echo "<a href=\"build.php?id=".$id."&add=dbonus\">(<b>+</b>)</a>";
else echo "<span class=\"none\">(+)</span>";
?>
</td>
<td class="po"><?php echo $hero_info['defencebonus']; ?></td>
@@ -120,17 +86,8 @@ if (isset($_POST['name']) && !empty($_POST['name'])) {
<td class="xp"><img class="bar" src="img/x.gif" style="width:<?php echo ($hero_info['regeneration']*2)+1; ?>px;" alt="<?php echo ($hero_info['regeneration']*5*SPEED); ?>%/Day" title="<?php echo ($hero_info['regeneration']*5*SPEED); ?>%/Day" /></td>
<td class="up"><span class="none">
<?php
if($hero_info['points'] > 0 && $hero_info['regeneration'] < 100){
if($session->access != BANNED){
echo "<a href=\"build.php?id=".$id."&add=reg\">(<b>+</b>)</a>";
}else{
header("Location: banned.php");
exit;
}
}else {
echo "<span class=\"none\">(+)</span>";
}
if($hero_info['points'] > 0 && $hero_info['regeneration'] < 100) echo "<a href=\"build.php?id=".$id."&add=reg\">(<b>+</b>)</a>";
else echo "<span class=\"none\">(+)</span>";
?>
</td>
<td class="po"><?php echo $hero_info['regeneration']; ?></td>
Templates/Build/37_land.tpl
-5
View File
@@ -4,14 +4,9 @@
$oasisarray = $database->getOasis($village->wid);
if(isset($_GET['gid']) && $_GET['gid'] == 37 && isset($_GET['del']) && $database->getOasisField($_GET['del'], 'owner') == $session->uid){
if($session->access != BANNED){
$database->removeOases($_GET['del']);
header("Location: build.php?id=".$id."&land");
exit;
}else{
header("Location: banned.php");
exit;
}
}
?>
<table id="oases" cellpadding="1" cellspacing="1">
Templates/Build/37_revive.tpl
+4 -9
View File
@@ -141,15 +141,10 @@
}
if(isset($_GET['revive']) && $_GET['revive'] == 1 && isset($_GET['hid']) && $_GET['hid'] == $hero_datarow['heroid'] && $hero_datarow['inrevive'] == 0 && $hero_datarow['intraining'] == 0 && $hero_datarow['dead'] == 1){
if($session->access != BANNED){
mysqli_query($database->dblink,"UPDATE ".TB_PREFIX."hero SET `inrevive` = '1', `trainingtime` = '".(int) $training_time2."', `wref` = '".(int) $village->wid."' WHERE `heroid` = ".(int) $_GET['hid']." AND `uid` = '".(int) $session->uid."'");
$database->modifyResource($village->wid, $wood, $clay, $iron, $crop, 0);
header("Location: build.php?id=".$id."");
exit;
} else {
header("Location: banned.php");
exit;
}
mysqli_query($database->dblink,"UPDATE ".TB_PREFIX."hero SET `inrevive` = '1', `trainingtime` = '".(int) $training_time2."', `wref` = '".(int) $village->wid."' WHERE `heroid` = ".(int) $_GET['hid']." AND `uid` = '".(int) $session->uid."'");
$database->modifyResource($village->wid, $wood, $clay, $iron, $crop, 0);
header("Location: build.php?id=".$id."");
exit;
}
}
?>
Templates/Build/37_train.tpl
+7 -12
View File
@@ -647,12 +647,11 @@ $output.="<tr>
// check for a valid unit value
if (in_array($_GET['train'], $validationArray)) {
if($session->access != BANNED){
if($count_hero < 3){
$unitID = $_GET['train'];
mysqli_query($database->dblink,"INSERT INTO ".TB_PREFIX."hero (`uid`, `wref`, `regeneration`, `unit`, `name`, `level`, `points`, `experience`, `dead`, `health`, `attack`, `defence`, `attackbonus`, `defencebonus`, `trainingtime`, `autoregen`, `intraining`) VALUES (".$database->escape($session->uid).", " . (int) $village->wid . ", 0, ".$unitID.", '".$database->escape($session->username)."', 0, 5, 0, 0, 100, 0, 0, 0, 0, ".round((time() + (${'u'.$unitID}['time'] / SPEED)*3)).", 50, 1)");
mysqli_query($database->dblink,"UPDATE " . TB_PREFIX . "units SET `u$unitID` = `u$unitID` - 1 WHERE `vref` = " . (int) $village->wid);
mysqli_query($database->dblink,"
if($count_hero < 3){
$unitID = $_GET['train'];
mysqli_query($database->dblink,"INSERT INTO ".TB_PREFIX."hero (`uid`, `wref`, `regeneration`, `unit`, `name`, `level`, `points`, `experience`, `dead`, `health`, `attack`, `defence`, `attackbonus`, `defencebonus`, `trainingtime`, `autoregen`, `intraining`) VALUES (".$database->escape($session->uid).", " . (int) $village->wid . ", 0, ".$unitID.", '".$database->escape($session->username)."', 0, 5, 0, 0, 100, 0, 0, 0, 0, ".round((time() + (${'u'.$unitID}['time'] / SPEED)*3)).", 50, 1)");
mysqli_query($database->dblink,"UPDATE " . TB_PREFIX . "units SET `u$unitID` = `u$unitID` - 1 WHERE `vref` = " . (int) $village->wid);
mysqli_query($database->dblink,"
UPDATE " . TB_PREFIX . "vdata
SET
`wood` = `wood` - ".(int) ${'u'.$unitID}['wood'].",
@@ -661,13 +660,9 @@ $output.="<tr>
`crop` = `crop` - ".(int) ${'u'.$unitID}['crop']."
WHERE
`wref` = " . (int) $village->wid);
}
header("Location: build.php?id=".$id."");
exit;
}else{
header("Location: banned.php");
exit;
}
header("Location: build.php?id=".$id."");
exit;
}
}
Templates/Building.tpl
+6 -12
View File
@@ -17,29 +17,23 @@ $building->loadBuilding();
<?php
if($session->gold >= 2) {
if($session->access!=BANNED){
?> <a href="?buildingFinish=1" onclick="return confirm('Finish all construction and research orders in this village immediately for 2 Gold?');" title="Finish all construction and research orders in this village immediately for 2 Gold?"><img class="clock" alt="Finish all construction and research orders in this village immediately for 2 Gold?" src="img/x.gif"/></a>
<?php
}else{
?> <a href="banned.php" onclick="return confirm('Finish all construction and research orders in this village immediately for 2 Gold?');" title="Finish all construction and research orders in this village immediately for 2 Gold?"><img class="clock" alt="Finish all construction and research orders in this village immediately for 2 Gold?" src="img/x.gif"/></a>
<?php
}
?>
<a href="?buildingFinish=1" onclick="return confirm('Finish all construction and research orders in this village immediately for 2 Gold?');" title="Finish all construction and research orders in this village immediately for 2 Gold?"><img class="clock" alt="Finish all construction and research orders in this village immediately for 2 Gold?" src="img/x.gif"/></a>
<?php
}
?>
</th>
</tr></thead>
<tbody>
<?php
$BuildingList = array();
foreach($building->buildArray as $jobs) {
if($jobs['master'] == 0){
echo "<tr><td class=\"ico\"><a href=\"?d=".$jobs['id']."&a=0&c=$session->checker\">";
echo "<img src=\"img/x.gif\" class=\"del\" title=\"cancel\" alt=\"cancel\" /></a></td><td>";
echo Building::procResType($jobs['type'])." (Level ".$jobs['level'].")";
if($jobs['loopcon'] == 0) { $BuildingList[] = $jobs['field']; }
if($jobs['loopcon'] == 1) {
echo " (waiting loop)";
}
if($jobs['loopcon'] == 1) echo " (waiting loop)";
echo "</td><td>in <span id=\"timer".++$session->timer."\">";
echo $generator->getTimeFormat($jobs['timestamp']-time());
echo "</span> hrs.</td>";
Templates/Plus/10.tpl
+1 -4
View File
@@ -1,6 +1,6 @@
<?php
////////////// made by alq0rsan, improved by evader /////////////////////////
if($session->access != BANNED && $session->gold >= 5){
if($session->gold >= 5){
$MyGold = mysqli_query($database->dblink,"SELECT gold, b2 FROM ".TB_PREFIX."users WHERE `id`='".$session->uid."'") or die(mysqli_error($database->dblink));
$golds = mysqli_fetch_array($MyGold);
if($session->sit == 0) {
@@ -24,8 +24,5 @@ if($session->access != BANNED && $session->gold >= 5){
}
header("Location: plus.php?id=3");
exit;
} else {
header("Location: banned.php");
exit;
}
?>
Templates/Plus/11.tpl
+1 -4
View File
@@ -1,6 +1,6 @@
<?php
////////////// made by alq0rsan, improved by evader /////////////////////////
if($session->access != BANNED && $session->gold >= 5){
if($session->gold >= 5){
$MyGold = mysqli_query($database->dblink,"SELECT gold, b3 FROM ".TB_PREFIX."users WHERE `id`='".$session->uid."'") or die(mysqli_error($database->dblink));
$golds = mysqli_fetch_array($MyGold);
if($session->sit == 0) {
@@ -24,8 +24,5 @@ if($session->access != BANNED && $session->gold >= 5){
}
header("Location: plus.php?id=3");
exit;
} else {
header("Location: banned.php");
exit;
}
?>
Templates/Plus/12.tpl
+1 -4
View File
@@ -1,6 +1,6 @@
<?php
////////////// made by alq0rsan, improved by evader /////////////////////////
if($session->access != BANNED && $session->gold >= 5){
if($session->gold >= 5){
$MyGold = mysqli_query($database->dblink,"SELECT gold, b4 FROM ".TB_PREFIX."users WHERE `id`='".$session->uid."'") or die(mysqli_error($database->dblink));
$golds = mysqli_fetch_array($MyGold);
if($session->sit == 0) {
@@ -24,8 +24,5 @@ if($session->access != BANNED && $session->gold >= 5){
}
header("Location: plus.php?id=3");
exit;
} else {
header("Location: banned.php");
exit;
}
?>
Templates/Plus/14.tpl
+2 -5
View File
@@ -1,6 +1,6 @@
<?php
////////////// made by alq0rsan /////////////////////////
if($session->access != BANNED){
$MyVilId = mysqli_query($database->dblink,"SELECT * FROM ".TB_PREFIX."vdata WHERE `wref`='".$village->wid."'") or die(mysqli_error($database->dblink));
$uuVilid = mysqli_fetch_array($MyVilId);
@@ -25,8 +25,5 @@ echo "failed";
header("Location: plus.php?id=3");
exit;
}else{
header("Location: banned.php");
exit;
}
?>
Templates/Plus/15.tpl
+2 -8
View File
@@ -1,14 +1,8 @@
<?php
////////////// made by alq0rsan /////////////////////////
if($session->access != BANNED){
if($session->gold >= 100 && $session->sit == 0 && $session->goldclub == 0) {
mysqli_query($database->dblink,"UPDATE ".TB_PREFIX."users set goldclub = 1, gold = gold - 100 where `id`='".$session->uid."'");
mysqli_query($database->dblink,"UPDATE ".TB_PREFIX."users set goldclub = 1, gold = gold - 100 where `id`='".$session->uid."'");
}
header("Location: plus.php?id=3");
exit;
}else{
header("Location: banned.php");
exit;
}
?>
?>
Templates/Plus/3.tpl
+24 -26
View File
@@ -1,22 +1,19 @@
<?php
$MyGold = mysqli_query($database->dblink,"SELECT * FROM ".TB_PREFIX."users WHERE `id`='".$session->uid."'") or die(mysqli_error($database->dblink));
$golds = mysqli_fetch_array($MyGold);
$MyGold = mysqli_query($database->dblink,"SELECT * FROM ".TB_PREFIX."users WHERE `id`='".$session->uid."'") or die(mysqli_error($database->dblink));
$golds = mysqli_fetch_array($MyGold);
include("Templates/Plus/pmenu.tpl");
$MyGold = mysqli_query($database->dblink,"SELECT * FROM ".TB_PREFIX."users WHERE `id`='".$session->uid."'") or die(mysqli_error($database->dblink));
$golds = mysqli_fetch_array($MyGold);
$MyGold = mysqli_query($database->dblink,"SELECT * FROM ".TB_PREFIX."users WHERE `id`='".$session->uid."'") or die(mysqli_error($database->dblink));
$golds = mysqli_fetch_array($MyGold);
$today = date("mdHi");
$today = date("mdHi");
if (mysqli_num_rows($MyGold)) {
if($session->gold == 0) {
echo "<p>You currently don't own gold.</p>";
} else {
echo "<p>You currently have <b> $session->gold </b> gold</p>";
}
if(mysqli_num_rows($MyGold)){
if($session->gold == 0) echo "<p>You currently don't own gold.</p>";
else echo "<p>You currently have <b> $session->gold </b> gold</p>";
}
?>
@@ -44,24 +41,25 @@ if (mysqli_num_rows($MyGold)) {
<b><font color="#71D000">P</font><font color="#FF6F0F">l</font><font color="#71D000">u</font><font color="#FF6F0F">s</font></b> Account<br />
<span class="run">
<?php
$datetimep=$golds['plus'];
$datetime1=$golds['b1'];
$datetime2=$golds['b2'];
$datetime3=$golds['b3'];
$datetime4=$golds['b4'];
$datetimeap=$golds['ap'];
$datetimedp=$golds['dp'];
$datetimep = $golds['plus'];
$datetime1 = $golds['b1'];
$datetime2 = $golds['b2'];
$datetime3 = $golds['b3'];
$datetime4 = $golds['b4'];
$datetimeap = $golds['ap'];
$datetimedp = $golds['dp'];
//Retrieve the current date/time
$date2=strtotime("NOW");
$date2 = strtotime("NOW");
if ($datetimep == 0) {
print "get PLUS<br>";
}else
if ($datetimep <= $date2) {
print "Your PLUS advantage has ended.<br>";
mysqli_query($database->dblink,"UPDATE ".TB_PREFIX."users set plus = '0' where `id`='".$session->uid."'") or die(mysqli_error($database->dblink));
} else {
if ($datetimep == 0) echo "get PLUS<br>";
else
{
if ($datetimep <= $date2) {
print "Your PLUS advantage has ended.<br>";
mysqli_query($database->dblink,"UPDATE ".TB_PREFIX."users set plus = '0' where `id`='".$session->uid."'") or die(mysqli_error($database->dblink));
} else {
$holdtotmin=(($datetimep-$date2)/60);
$holdtothr=(($datetimep-$date2)/3600);
Templates/Plus/5.tpl
-5
View File
@@ -12,12 +12,7 @@ include("Templates/Plus/pmenu.tpl");
<h2>How is it done?</h2>
<h3>1) Invite your friends via Email</h3>
<?php if($session->access != BANNED){ ?>
<p><a href="plus.php?id=5&amp;a=1&amp;mail">&raquo; Invite by e-mail</a></p>
<?php }else{ ?>
<p><a href="banned.php">&raquo; Invite by e-mail</a></p>
<?php } ?>
<h3>2) Copy your personal REF-Link and share it!</h3><span class="notice">Your personal REF Link:</span>
<br>
<span class="link"><?php echo HOMEPAGE.(substr(HOMEPAGE, -1)=="/" ? "":"/");?>anmelden.php?uid=ref_<?php echo $session->uid; ?></span>
Templates/Plus/7.tpl
+3 -8
View File
@@ -1,9 +1,4 @@
<?php
if($session->access!=BANNED){
$building->finishAll('plus.php?id=3');
exit;
}else{
header("Location: banned.php");
exit;
}
<?php
$building->finishAll('plus.php?id=3');
exit;
?>
Templates/Plus/8.tpl
+1 -4
View File
@@ -1,6 +1,6 @@
<?php
////////////// made by alq0rsan, improved by evader /////////////////////////
if($session->access != BANNED && $session->gold >= 10){
if($session->gold >= 10){
$MyGold = mysqli_query($database->dblink,"SELECT gold, plus FROM ".TB_PREFIX."users WHERE `id`='".$session->uid."'") or die(mysqli_error($database->dblink));
$golds = mysqli_fetch_array($MyGold);
if($session->sit == 0) {
@@ -24,8 +24,5 @@ if($session->access != BANNED && $session->gold >= 10){
}
header("Location: plus.php?id=3");
exit;
} else {
header("Location: banned.php");
exit;
}
?>
Templates/Plus/9.tpl
+1 -4
View File
@@ -1,6 +1,6 @@
<?php
////////////// made by alq0rsan, improved by evader /////////////////////////
if($session->access != BANNED && $session->gold >= 5){
if($session->gold >= 5){
$MyGold = mysqli_query($database->dblink,"SELECT gold, b1 FROM ".TB_PREFIX."users WHERE `id`='".$session->uid."'") or die(mysqli_error($database->dblink));
$golds = mysqli_fetch_array($MyGold);
if($session->sit == 0) {
@@ -24,8 +24,5 @@ if($session->access != BANNED && $session->gold >= 5){
}
header("Location: plus.php?id=3");
exit;
} else {
header("Location: banned.php");
exit;
}
?>
Templates/Plus/invite.tpl
-4
View File
@@ -12,7 +12,6 @@ include("Templates/Plus/pmenu.tpl");
<h2>How is it done?</h2>
<h3>1) Invite your friends via Email</h3>
<?php if($session->access != BANNED){ ?>
<form action="plus.php" method="POST">
<p><input class="mail" name="mail" value=""></p>
<p>Own text:</p>
@@ -21,9 +20,6 @@ hi, please use this link.
<?php echo HOMEPAGE.(substr(HOMEPAGE, -1)=="/" ? "":"/"); ?>anmelden.php?uid=ref_<?php echo $session->uid; ?>
</textarea></p>
</form>
<?php }else{ ?>
<p><a href="banned.php">&raquo; Invite by e-mail</a></p>
<?php } ?>
<h3>2) Copy your personal REF-Link and share it!</h3><span class="notice">Your personal REF Link:</span>
<br>
<span class="link"><?php echo HOMEPAGE.(substr(HOMEPAGE, -1)=="/" ? "":"/");?>anmelden.php?uid=ref_<?php echo $session->uid; ?></span>
Templates/Profile/preference.tpl
+49 -56
View File
@@ -20,75 +20,68 @@ if(isset($_GET['del']) && is_numeric($_GET['del'])){
#################################################################################
// Save new link or just edit a link
if($_POST) {
$links = array();
$links = [];
// let's do some complicated code x'D
foreach($_POST as $key => $value) {
if(substr($key, 0, 2) == 'nr') {
$i = substr($key, 2);
$links[$i]['nr'] = mysqli_real_escape_string($database->dblink, $value);
}
if(substr($key, 0, 2) == 'id') {
$i = substr($key, 2);
$links[$i]['id'] = mysqli_real_escape_string($database->dblink, $value);
}
if(substr($key, 0, 8) == 'linkname') {
$i = substr($key, 8);
$links[$i]['linkname'] = mysqli_real_escape_string($database->dblink, $value);
}
if(substr($key, 0, 8) == 'linkziel') {
$i = substr($key, 8);
$links[$i]['linkziel'] = mysqli_real_escape_string($database->dblink, $value);
}
if(substr($key, 0, 2) == 'nr') {
$i = substr($key, 2);
$links[$i]['nr'] = mysqli_real_escape_string($database->dblink, $value);
}
if(substr($key, 0, 2) == 'id') {
$i = substr($key, 2);
$links[$i]['id'] = mysqli_real_escape_string($database->dblink, $value);
}
if(substr($key, 0, 8) == 'linkname') {
$i = substr($key, 8);
$links[$i]['linkname'] = mysqli_real_escape_string($database->dblink, $value);
}
if(substr($key, 0, 8) == 'linkziel') {
$i = substr($key, 8);
$links[$i]['linkziel'] = mysqli_real_escape_string($database->dblink, $value);
}
}
// Save
foreach($links as $link) {
settype($link['nr'], 'int');
if(trim($link['nr']) != '' AND trim($link['linkname']) != '' AND trim($link['linkziel']) != '' AND trim($link['id']) == '') {
// Add new link
$userid = (int) $session->uid;
if($session->access!=BANNED){
$query = mysqli_query($database->dblink,'INSERT INTO `' . TB_PREFIX . 'links` (`userid`, `name`, `url`, `pos`) VALUES (' . $userid . ', \'' . $link['linkname'] . '\', \'' . $link['linkziel'] . '\', ' . $link['nr'] . ')');
}else{
header("Location: banned.php");
exit;
}
} elseif(trim($link['nr']) != '' AND trim($link['linkname']) != '' AND trim($link['linkziel']) != '' AND trim($link['id']) != '') {
// Update link
$query = mysqli_query($database->dblink,'SELECT userid FROM `' . TB_PREFIX . 'links` WHERE `id` = ' . $link['id']);
$data = mysqli_fetch_assoc($query);
// May the user update this entry?
if($data['userid'] == $session->uid) {
$query2 = mysqli_query($database->dblink,'UPDATE `' . TB_PREFIX . 'links` SET `name` = \'' . $link['linkname'] . '\', `url` = \'' . $link['linkziel'] . '\', `pos` = ' . $link['nr'] . ' WHERE `id` = ' . $link['id']);
}
} elseif(trim($link['nr']) == '' AND trim($link['linkname']) == '' AND trim($link['linkziel']) == '' AND trim($link['id']) != '') {
// Delete entry
$query = mysqli_query($database->dblink,'SELECT userid FROM `' . TB_PREFIX . 'links` WHERE `id` = ' . $link['id']);
$data = mysqli_fetch_assoc($query);
// May the user delete this entry?
if($data['userid'] == $session->uid) {
$query2 = mysqli_query($database->dblink,'DELETE FROM `' . TB_PREFIX . 'links` WHERE `id` = ' . $link['id']);
}
}
settype($link['nr'], 'int');
if(trim($link['nr']) != '' AND trim($link['linkname']) != '' AND trim($link['linkziel']) != '' AND trim($link['id']) == '') {
// Add new link
$userid = (int) $session->uid;
$query = mysqli_query($database->dblink,'INSERT INTO `' . TB_PREFIX . 'links` (`userid`, `name`, `url`, `pos`) VALUES (' . $userid . ', \'' . $link['linkname'] . '\', \'' . $link['linkziel'] . '\', ' . $link['nr'] . ')');
} elseif(trim($link['nr']) != '' AND trim($link['linkname']) != '' AND trim($link['linkziel']) != '' AND trim($link['id']) != '') {
// Update link
$query = mysqli_query($database->dblink,'SELECT userid FROM `' . TB_PREFIX . 'links` WHERE `id` = ' . $link['id']);
$data = mysqli_fetch_assoc($query);
// May the user update this entry?
if($data['userid'] == $session->uid) {
$query2 = mysqli_query($database->dblink,'UPDATE `' . TB_PREFIX . 'links` SET `name` = \'' . $link['linkname'] . '\', `url` = \'' . $link['linkziel'] . '\', `pos` = ' . $link['nr'] . ' WHERE `id` = ' . $link['id']);
}
} elseif(trim($link['nr']) == '' AND trim($link['linkname']) == '' AND trim($link['linkziel']) == '' AND trim($link['id']) != '') {
// Delete entry
$query = mysqli_query($database->dblink,'SELECT userid FROM `' . TB_PREFIX . 'links` WHERE `id` = ' . $link['id']);
$data = mysqli_fetch_assoc($query);
// May the user delete this entry?
if($data['userid'] == $session->uid) {
$query2 = mysqli_query($database->dblink,'DELETE FROM `' . TB_PREFIX . 'links` WHERE `id` = ' . $link['id']);
}
}
}
print '<meta http-equiv="refresh" content="0">';
echo '<meta http-equiv="refresh" content="0">';
}
// Fetch all links
$query = mysqli_query($database->dblink,'SELECT * FROM `' . TB_PREFIX . 'links` WHERE `userid` = ' . (int) $session->uid . ' ORDER BY `pos` ASC') or die(mysqli_error($database->dblink));
$links = array();
while($data = mysqli_fetch_assoc($query)) {
$links[] = $data;
}
$links = [];
while($data = mysqli_fetch_assoc($query)) $links[] = $data;
?>
<h1>Player profile</h1>