mirror of
https://github.com/Shadowss/TravianZ.git
synced 2026-08-10 21:31:01 +00:00
Fix some sql inject & Add Credits
Fix some sql inject & Add Credits
This commit is contained in:
novgorodschi catalin
@@ -1,15 +1,21 @@
|
||||
<?php
|
||||
|
||||
#################################################################################
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Filename : alli_menu.tpl ##
|
||||
## Type : Alliance Navigation Menu ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Developed by : Shadow ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Contact : cata7007@gmail.com ##
|
||||
## Project : TravianZ ##
|
||||
## URLs: : https://travianz.org ##
|
||||
## GitHub : https://github.com/Shadowss/TravianZ ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## License : TravianZ Project ##
|
||||
## Copyright : TravianZ (c) 2010-2026. All rights reserved. ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Project: TravianZ (Refactor incremental) ##
|
||||
## File: alli_menu.tpl ##
|
||||
## Description: Alliance menu navigation ##
|
||||
## Improvements: ##
|
||||
## - Reduced duplication ##
|
||||
## - Safer input handling ##
|
||||
## - Cleaner structure ##
|
||||
## - Added comments ##
|
||||
#################################################################################
|
||||
|
||||
// Verifică dacă jucătorul este în alianța curentă
|
||||
|
||||
@@ -1,16 +1,21 @@
|
||||
<?php
|
||||
|
||||
#################################################################################
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Filename : alliance.tpl ##
|
||||
## Type : Alliance Ranking List ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Developed by : Shadow ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Contact : cata7007@gmail.com ##
|
||||
## Project : TravianZ ##
|
||||
## URLs: : https://travianz.org ##
|
||||
## GitHub : https://github.com/Shadowss/TravianZ ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## License : TravianZ Project ##
|
||||
## Copyright : TravianZ (c) 2010-2026. All rights reserved. ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Project: TravianZ (Refactor incremental) ##
|
||||
## File: alliance.tpl ##
|
||||
## Description: Alliance ranking table ##
|
||||
## Improvements: ##
|
||||
## - Safer input handling ##
|
||||
## - Removed duplicate function calls ##
|
||||
## - Fixed variable overwrite ($ranking) ##
|
||||
## - Cleaner pagination logic ##
|
||||
## - Added comments ##
|
||||
#################################################################################
|
||||
|
||||
// Validare search (poziția din ranking)
|
||||
|
||||
@@ -1,15 +1,21 @@
|
||||
<?php
|
||||
|
||||
#################################################################################
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Filename : allidesc.tpl ##
|
||||
## Type : Alliance Description Editor ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Developed by : Shadow ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Contact : cata7007@gmail.com ##
|
||||
## Project : TravianZ ##
|
||||
## URLs: : https://travianz.org ##
|
||||
## GitHub : https://github.com/Shadowss/TravianZ ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## License : TravianZ Project ##
|
||||
## Copyright : TravianZ (c) 2010-2026. All rights reserved. ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Project: TravianZ (Refactor incremental) ##
|
||||
## File: allidesc.tpl ##
|
||||
## Description: Alliance description + medals + edit form ##
|
||||
## Improvements: ##
|
||||
## - Reduced unnecessary loops ##
|
||||
## - Safer output (XSS protection) ##
|
||||
## - Cleaner structure ##
|
||||
## - Medals switch simplified ##
|
||||
#################################################################################
|
||||
|
||||
// fallback alliance id
|
||||
|
||||
@@ -1,15 +1,21 @@
|
||||
<?php
|
||||
|
||||
#################################################################################
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Filename : assignpos.tpl ##
|
||||
## Type : Alliance Assign Member Position ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Developed by : Shadow ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Contact : cata7007@gmail.com ##
|
||||
## Project : TravianZ ##
|
||||
## URLs: : https://travianz.org ##
|
||||
## GitHub : https://github.com/Shadowss/TravianZ ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## License : TravianZ Project ##
|
||||
## Copyright : TravianZ (c) 2010-2026. All rights reserved. ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Project: TravianZ (Refactor incremental) ##
|
||||
## File: assignpost.tpl ##
|
||||
## Description: Assign alliance positions ##
|
||||
## Improvements: ##
|
||||
## - Safer output (XSS protection) ##
|
||||
## - Cleaner structure ##
|
||||
## - Reduced inline logic clutter ##
|
||||
## - Consistent casting ##
|
||||
#################################################################################
|
||||
|
||||
// fallback alliance id
|
||||
|
||||
@@ -1,16 +1,21 @@
|
||||
<?php
|
||||
|
||||
#################################################################################
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Filename : attack-filtered.tpl ##
|
||||
## Type : Alliance Incoming Attacks (filtered) ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Developed by : Shadow ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Contact : cata7007@gmail.com ##
|
||||
## Project : TravianZ ##
|
||||
## URLs: : https://travianz.org ##
|
||||
## GitHub : https://github.com/Shadowss/TravianZ ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## License : TravianZ Project ##
|
||||
## Copyright : TravianZ (c) 2010-2026. All rights reserved. ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Project: TravianZ (Refactor incremental) ##
|
||||
## File: attack-filtered.tpl ##
|
||||
## Description: Attack / report filtering ##
|
||||
## Improvements: ##
|
||||
## - Secure GET handling ##
|
||||
## - Safer SQL parameters (cast only) ##
|
||||
## - Reduced duplicated conditions ##
|
||||
## - Cleaner rendering ##
|
||||
## - XSS protection ##
|
||||
#################################################################################
|
||||
|
||||
// filter type (secure cast)
|
||||
|
||||
@@ -1,16 +1,21 @@
|
||||
<?php
|
||||
|
||||
#################################################################################
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Filename : attacks.tpl ##
|
||||
## Type : Alliance Incoming Attacks Overview ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Developed by : Shadow ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Contact : cata7007@gmail.com ##
|
||||
## Project : TravianZ ##
|
||||
## URLs: : https://travianz.org ##
|
||||
## GitHub : https://github.com/Shadowss/TravianZ ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## License : TravianZ Project ##
|
||||
## Copyright : TravianZ (c) 2010-2026. All rights reserved. ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Project: TravianZ (Refactor incremental) ##
|
||||
## File: attacks.tpl ##
|
||||
## Description: Alliance military events ##
|
||||
## Improvements: ##
|
||||
## - Secure GET handling ##
|
||||
## - Reduced duplicated logic ##
|
||||
## - Cleaner SQL usage ##
|
||||
## - Safer output (XSS protection) ##
|
||||
## - Simplified condition branches ##
|
||||
#################################################################################
|
||||
|
||||
// fallback alliance id
|
||||
|
||||
@@ -1,10 +1,21 @@
|
||||
<?php
|
||||
|
||||
#################################################################################
|
||||
## Bonusuri de alianta (port T4) ##
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Filename : bonuses.tpl ##
|
||||
## Type : Alliance Bonuses and Donations ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Developed by : Shadow ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Contact : cata7007@gmail.com ##
|
||||
## Project : TravianZ ##
|
||||
## URLs: : https://travianz.org ##
|
||||
## GitHub : https://github.com/Shadowss/TravianZ ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## License : TravianZ Project ##
|
||||
## Copyright : TravianZ (c) 2010-2026. All rights reserved. ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Membrii doneaza resurse, alianta deblocheaza patru bonusuri de cate cinci ##
|
||||
## niveluri. Toata logica sta in GameEngine/AllianceBonus.php; aici doar ##
|
||||
## afisam starea si preluam formularul de donatie. ##
|
||||
#################################################################################
|
||||
|
||||
if (!class_exists('AllianceBonus')) {
|
||||
|
||||
@@ -1,15 +1,21 @@
|
||||
<?php
|
||||
|
||||
#################################################################################
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Filename : changename.tpl ##
|
||||
## Type : Alliance Rename Form ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Developed by : Shadow ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Contact : cata7007@gmail.com ##
|
||||
## Project : TravianZ ##
|
||||
## URLs: : https://travianz.org ##
|
||||
## GitHub : https://github.com/Shadowss/TravianZ ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## License : TravianZ Project ##
|
||||
## Copyright : TravianZ (c) 2010-2026. All rights reserved. ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Project: TravianZ (Refactor incremental) ##
|
||||
## File: changename.tpl ##
|
||||
## Description: Alliance name/tag change ##
|
||||
## Improvements: ##
|
||||
## - Fixed HTML issues ##
|
||||
## - XSS protection ##
|
||||
## - Cleaner structure ##
|
||||
## - Removed duplicate attributes ##
|
||||
#################################################################################
|
||||
|
||||
// fallback alliance id
|
||||
|
||||
@@ -1,17 +1,21 @@
|
||||
<?php
|
||||
|
||||
#################################################################################
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Filename : changepos.tpl ##
|
||||
## Type : Alliance Edit Member Position ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Developed by : Shadow ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Contact : cata7007@gmail.com ##
|
||||
## Project : TravianZ ##
|
||||
## URLs: : https://travianz.org ##
|
||||
## GitHub : https://github.com/Shadowss/TravianZ ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## License : TravianZ Project ##
|
||||
## Copyright : TravianZ (c) 2010-2026. All rights reserved. ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Project: TravianZ (Refactor incremental) ##
|
||||
## File: changepos.tpl ##
|
||||
## Description: Alliance member permissions ##
|
||||
## Improvements: ##
|
||||
## - Fixed PHP 5.3 compatibility (no [] arrays) ##
|
||||
## - Removed invalid array syntax ##
|
||||
## - Input validation & casting ##
|
||||
## - XSS protection ##
|
||||
## - Cleaner checkbox rendering ##
|
||||
## - Allow leader to edit own rank only ##
|
||||
#################################################################################
|
||||
|
||||
// secure input
|
||||
|
||||
+15
-10
@@ -1,16 +1,21 @@
|
||||
<?php
|
||||
|
||||
#################################################################################
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Filename : chat.tpl ##
|
||||
## Type : Alliance Internal Chat ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Developed by : Shadow ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Contact : cata7007@gmail.com ##
|
||||
## Project : TravianZ ##
|
||||
## URLs: : https://travianz.org ##
|
||||
## GitHub : https://github.com/Shadowss/TravianZ ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## License : TravianZ Project ##
|
||||
## Copyright : TravianZ (c) 2010-2026. All rights reserved. ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Project: TravianZ (Incremental Refactor SAFE) ##
|
||||
## File: chat.tpl ##
|
||||
## Description: Alliance chat (AJAX) ##
|
||||
## Improvements: ##
|
||||
## - Input validation ##
|
||||
## - XSS protection ##
|
||||
## - Fixed invalid HTML structure ##
|
||||
## - Safer JavaScript (no string eval) ##
|
||||
## - Prevent empty / spam messages ##
|
||||
#################################################################################
|
||||
|
||||
// -------------------------------------------------
|
||||
|
||||
@@ -1,16 +1,21 @@
|
||||
<?php
|
||||
|
||||
#################################################################################
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Filename : chgdiplo.tpl ##
|
||||
## Type : Alliance Diplomacy Management ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Developed by : Shadow ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Contact : cata7007@gmail.com ##
|
||||
## Project : TravianZ ##
|
||||
## URLs: : https://travianz.org ##
|
||||
## GitHub : https://github.com/Shadowss/TravianZ ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## License : TravianZ Project ##
|
||||
## Copyright : TravianZ (c) 2010-2026. All rights reserved. ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Project: TravianZ (Refactor incremental) ##
|
||||
## File: chgdiplo.tpl ##
|
||||
## Description: Alliance diplomacy system ##
|
||||
## Improvements: ##
|
||||
## - Cleaner structure ##
|
||||
## - Reduced duplication ##
|
||||
## - Fixed HTML form nesting issues ##
|
||||
## - Safer output (XSS protection) ##
|
||||
## - More stable loops ##
|
||||
#################################################################################
|
||||
|
||||
// fallback alliance id
|
||||
|
||||
@@ -1,4 +1,23 @@
|
||||
<?php
|
||||
|
||||
#################################################################################
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Filename : forum.tpl ##
|
||||
## Type : Alliance Forum Board View ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Developed by : Shadow ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Contact : cata7007@gmail.com ##
|
||||
## Project : TravianZ ##
|
||||
## URLs: : https://travianz.org ##
|
||||
## GitHub : https://github.com/Shadowss/TravianZ ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## License : TravianZ Project ##
|
||||
## Copyright : TravianZ (c) 2010-2026. All rights reserved. ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
#################################################################################
|
||||
|
||||
// ###########################################################
|
||||
// # TRAVIANZ FORUM MODULE #
|
||||
// # ------------------------------------------------------- #
|
||||
@@ -15,9 +34,9 @@
|
||||
* ========================================================= */
|
||||
if (!isset($aid)) {
|
||||
if (isset($_GET['fid']) && !empty($_GET['fid'])) {
|
||||
$aid = $database->ForumCatAlliance($_GET['fid']);
|
||||
$aid = $database->ForumCatAlliance((int) $_GET['fid']);
|
||||
} else if (isset($_GET['fid2']) && !empty($_GET['fid2'])) {
|
||||
$aid = $database->ForumCatAlliance($_GET['fid2']);
|
||||
$aid = $database->ForumCatAlliance((int) $_GET['fid2']);
|
||||
} else {
|
||||
$aid = $session->alliance;
|
||||
}
|
||||
@@ -98,11 +117,11 @@ if (
|
||||
isset($_POST['thema']) && !empty($_POST['thema']) &&
|
||||
Alliance::canAct([
|
||||
'aid' => $aid,
|
||||
'alliance' => ($topic = reset($database->ShowTopic($_POST['tid'])))['alliance'],
|
||||
'alliance' => ($topic = reset($database->ShowTopic((int) $_POST['tid'])))['alliance'],
|
||||
'forum_perm' => $opt['opt5'],
|
||||
'admin' => $_GET['admin'],
|
||||
'owner' => $topic['owner'],
|
||||
'forum_owner' => ($forumData = reset($database->ForumCatEdit($_POST['fid'])))['owner']
|
||||
'forum_owner' => ($forumData = reset($database->ForumCatEdit((int) $_POST['fid'])))['owner']
|
||||
], 1) &&
|
||||
(
|
||||
($forumData['forum_area'] != 1 &&
|
||||
@@ -130,14 +149,14 @@ if (
|
||||
isset($_POST['u1']) && !empty($_POST['u1']) &&
|
||||
isset($_POST['u2']) && !empty($_POST['u2']) &&
|
||||
(
|
||||
($database->ForumCatAlliance($_POST['fid']) == $session->alliance && $opt['opt5'] == 1)
|
||||
($database->ForumCatAlliance((int) $_POST['fid']) == $session->alliance && $opt['opt5'] == 1)
|
||||
|| $session->access == ADMIN
|
||||
)
|
||||
) {
|
||||
|
||||
$forumViewable['alliances'] = $forumViewable['users'] = "";
|
||||
|
||||
$forumData = reset($database->ForumCatEdit($_POST['fid']));
|
||||
$forumData = reset($database->ForumCatEdit((int) $_POST['fid']));
|
||||
|
||||
// visibility logic unchanged
|
||||
if ($forumData['forum_area'] != 1) {
|
||||
@@ -172,7 +191,7 @@ if (
|
||||
!empty($_POST['thema']) && !empty($_POST['text']) && !empty($_POST['fid']) &&
|
||||
(
|
||||
(
|
||||
($forumData = reset($database->ForumCatEdit($_POST['fid'])))['alliance'] == $session->alliance ||
|
||||
($forumData = reset($database->ForumCatEdit((int) $_POST['fid'])))['alliance'] == $session->alliance ||
|
||||
$forumData['forum_area'] == 1 ||
|
||||
$alliance->isForumAccessible($_POST['fid'])
|
||||
) &&
|
||||
@@ -240,12 +259,12 @@ if (
|
||||
!empty($_POST['text']) && !empty($_POST['tid']) && !empty($_POST['fid2']) &&
|
||||
(
|
||||
(
|
||||
($forumData = reset($database->ForumCatEdit($_POST['fid2'])))['alliance'] == $session->alliance ||
|
||||
($forumData = reset($database->ForumCatEdit((int) $_POST['fid2'])))['alliance'] == $session->alliance ||
|
||||
$forumData['forum_area'] == 1 ||
|
||||
$alliance->isForumAccessible($_POST['fid2'])
|
||||
) &&
|
||||
(
|
||||
($forumData['forum_area'] != 3 && !reset($database->ShowTopic($_POST['tid']))['close'])
|
||||
($forumData['forum_area'] != 3 && !reset($database->ShowTopic((int) $_POST['tid']))['close'])
|
||||
|| ($forumData['forum_area'] == 3 && $opt['opt5'] == 1)
|
||||
)
|
||||
)
|
||||
@@ -274,7 +293,7 @@ if (
|
||||
isset($_POST['tid']) && !empty($_POST['tid']) &&
|
||||
Alliance::canAct([
|
||||
'aid' => $aid,
|
||||
'alliance' => ($topic = reset($database->ShowTopic($_POST['tid'])))['alliance'],
|
||||
'alliance' => ($topic = reset($database->ShowTopic((int) $_POST['tid'])))['alliance'],
|
||||
'forum_perm' => $opt['opt5'],
|
||||
'admin' => (!empty($_GET['admin']) ? $_GET['admin'] : ''),
|
||||
'owner' => $topic['owner'],
|
||||
@@ -303,7 +322,7 @@ if (
|
||||
Alliance::canAct([
|
||||
'aid' => $aid,
|
||||
'alliance' => ($topic = reset($database->ShowTopic(
|
||||
($post = reset($database->ShowPostEdit($_POST['pod'])))['topic']
|
||||
($post = reset($database->ShowPostEdit((int) $_POST['pod'])))['topic']
|
||||
)))['alliance'],
|
||||
'forum_perm' => $opt['opt5'],
|
||||
'owner' => $post['owner'],
|
||||
@@ -343,13 +362,13 @@ if (
|
||||
$_GET['admin'] == "pos" &&
|
||||
isset($_GET['res'], $_GET['fid']) && !empty($_GET['fid']) &&
|
||||
(
|
||||
($database->ForumCatAlliance($_GET['fid']) == $session->alliance && $opt['opt5'] == 1) ||
|
||||
($forumData = reset($database->ForumCatEdit($_GET['fid'])))['owner'] == $session->uid
|
||||
($database->ForumCatAlliance((int) $_GET['fid']) == $session->alliance && $opt['opt5'] == 1) ||
|
||||
($forumData = reset($database->ForumCatEdit((int) $_GET['fid'])))['owner'] == $session->uid
|
||||
&& $session->access == ADMIN
|
||||
)
|
||||
) {
|
||||
|
||||
$database->moveForum($_GET['fid'], $forumData['forum_area'], $session->alliance, $_GET['res']);
|
||||
$database->moveForum((int) $_GET['fid'], $forumData['forum_area'], $session->alliance, $_GET['res']);
|
||||
$alliance->redirect($_GET);
|
||||
}
|
||||
|
||||
@@ -421,14 +440,14 @@ elseif (
|
||||
isset($_GET['idf']) && !empty($_GET['idf']) &&
|
||||
(
|
||||
(
|
||||
($database->ForumCatAlliance($_GET['idf']) == $session->alliance && $opt['opt5'] == 1) ||
|
||||
($forumData = reset($database->ForumCatEdit($_GET['idf'])))['owner'] == $session->uid
|
||||
($database->ForumCatAlliance((int) $_GET['idf']) == $session->alliance && $opt['opt5'] == 1) ||
|
||||
($forumData = reset($database->ForumCatEdit((int) $_GET['idf'])))['owner'] == $session->uid
|
||||
) ||
|
||||
($forumData['alliance'] == 0 && $session->access == ADMIN)
|
||||
)
|
||||
) {
|
||||
|
||||
$database->DeleteCat($_GET['idf']);
|
||||
$database->DeleteCat((int) $_GET['idf']);
|
||||
$alliance->redirect($_GET);
|
||||
}
|
||||
|
||||
@@ -442,15 +461,15 @@ elseif (
|
||||
!empty($_GET['pod']) && !empty($_GET['tid']) && !empty($_GET['fid2']) &&
|
||||
Alliance::canAct([
|
||||
'aid' => $aid,
|
||||
'alliance' => reset($database->ShowTopic($_GET['tid']))['alliance'],
|
||||
'alliance' => reset($database->ShowTopic((int) $_GET['tid']))['alliance'],
|
||||
'forum_perm' => $opt['opt5'],
|
||||
'owner' => reset($database->ShowPostEdit($_GET['pod']))['owner'],
|
||||
'owner' => reset($database->ShowPostEdit((int) $_GET['pod']))['owner'],
|
||||
'admin' => $_GET['admin'],
|
||||
'forum_owner' => reset($database->ForumCatEdit($_GET['fid2']))['owner']
|
||||
'forum_owner' => reset($database->ForumCatEdit((int) $_GET['fid2']))['owner']
|
||||
], 1)
|
||||
) {
|
||||
|
||||
$database->DeletePost($_GET['pod']);
|
||||
$database->DeletePost((int) $_GET['pod']);
|
||||
|
||||
header("Location: allianz.php?s=2&fid2=".$_GET['fid2']."&tid=".$_GET['tid']);
|
||||
exit;
|
||||
@@ -467,11 +486,11 @@ elseif ($_GET['admin'] == "editpost" &&
|
||||
!empty($_GET['pod']) && !empty($_GET['tid']) && !empty($_GET['fid']) &&
|
||||
Alliance::canAct([
|
||||
'aid' => $aid,
|
||||
'alliance' => reset($database->ShowTopic($_GET['tid']))['alliance'],
|
||||
'alliance' => reset($database->ShowTopic((int) $_GET['tid']))['alliance'],
|
||||
'forum_perm' => $opt['opt5'],
|
||||
'owner' => reset($database->ShowPostEdit($_GET['pod']))['owner'],
|
||||
'owner' => reset($database->ShowPostEdit((int) $_GET['pod']))['owner'],
|
||||
'admin' => $_GET['admin'],
|
||||
'forum_owner' => reset($database->ForumCatEdit($_GET['fid']))['owner']
|
||||
'forum_owner' => reset($database->ForumCatEdit((int) $_GET['fid']))['owner']
|
||||
], 1)
|
||||
) include("Forum/forum_10.tpl");
|
||||
|
||||
|
||||
@@ -1,11 +1,21 @@
|
||||
<?php
|
||||
|
||||
#################################################################################
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Filename : index.php ##
|
||||
## Type : Directory Access Guard ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Developed by : aggenkeech & Shadow ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Contact : cata7007@gmail.com ##
|
||||
## Project : TravianZ ##
|
||||
## URLs: : https://travianz.org ##
|
||||
## GitHub : https://github.com/Shadowss/TravianZ ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## License : TravianZ Project ##
|
||||
## Copyright : TravianZ (c) 2010-2026. All rights reserved. ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Filename index.php ##
|
||||
## Developed by: aggenkeech ##
|
||||
## License: TravianZ Project ##
|
||||
## Copyright: TravianZ (c) 2010-2025. All rights reserved. ##
|
||||
#################################################################################
|
||||
|
||||
// prevent direct misuse in weird contexts (optional but safe)
|
||||
|
||||
@@ -1,7 +1,21 @@
|
||||
<?php
|
||||
|
||||
#################################################################################
|
||||
## -= TravianZ Alliance Invite (refactor incremental safe) =- ##
|
||||
## - cleanup + security + structure improvements ##
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Filename : invite.tpl ##
|
||||
## Type : Alliance Member Invitation ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Developed by : Shadow ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Contact : cata7007@gmail.com ##
|
||||
## Project : TravianZ ##
|
||||
## URLs: : https://travianz.org ##
|
||||
## GitHub : https://github.com/Shadowss/TravianZ ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## License : TravianZ Project ##
|
||||
## Copyright : TravianZ (c) 2010-2026. All rights reserved. ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
#################################################################################
|
||||
|
||||
// fallback alliance
|
||||
|
||||
@@ -1,10 +1,21 @@
|
||||
<?php
|
||||
|
||||
#################################################################################
|
||||
## -= TravianZ Alliance Kick (incremental refactor) =- ##
|
||||
## - preserves logic ##
|
||||
## - improves structure ##
|
||||
## - reduces duplication ##
|
||||
## - adds safety + comments ##
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Filename : kick.tpl ##
|
||||
## Type : Alliance Kick Member Form ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Developed by : Shadow ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Contact : cata7007@gmail.com ##
|
||||
## Project : TravianZ ##
|
||||
## URLs: : https://travianz.org ##
|
||||
## GitHub : https://github.com/Shadowss/TravianZ ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## License : TravianZ Project ##
|
||||
## Copyright : TravianZ (c) 2010-2026. All rights reserved. ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
#################################################################################
|
||||
|
||||
// -------------------------------------------------
|
||||
|
||||
@@ -1,9 +1,21 @@
|
||||
<?php
|
||||
|
||||
#################################################################################
|
||||
## -= TravianZ Alliance Link Forum (incremental refactor) =- ##
|
||||
## - preserves logic ##
|
||||
## - improves readability ##
|
||||
## - sanitizes output ##
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Filename : linkforum.tpl ##
|
||||
## Type : Alliance External Forum Link ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Developed by : Shadow ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Contact : cata7007@gmail.com ##
|
||||
## Project : TravianZ ##
|
||||
## URLs: : https://travianz.org ##
|
||||
## GitHub : https://github.com/Shadowss/TravianZ ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## License : TravianZ Project ##
|
||||
## Copyright : TravianZ (c) 2010-2026. All rights reserved. ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
#################################################################################
|
||||
|
||||
// -------------------------------------------------
|
||||
|
||||
@@ -1,14 +1,21 @@
|
||||
<?php
|
||||
|
||||
#################################################################################
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Filename : medal.php ##
|
||||
## Type : Alliance Medals Display ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Developed by : Shadow ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Contact : cata7007@gmail.com ##
|
||||
## Project : TravianZ ##
|
||||
## URLs: : https://travianz.org ##
|
||||
## GitHub : https://github.com/Shadowss/TravianZ ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## License : TravianZ Project ##
|
||||
## Copyright : TravianZ (c) 2010-2026. All rights reserved. ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Project: TravianZ (Incremental Refactor SAFE) ##
|
||||
## File: medal.php ##
|
||||
## Fixes: ##
|
||||
## - FIX broken tooltip (escaping JS/HTML) ##
|
||||
## - Removed newline issues ##
|
||||
## - Safer string handling ##
|
||||
## - Reduced duplication (safe) ##
|
||||
#################################################################################
|
||||
|
||||
// -------------------------------------------------
|
||||
|
||||
@@ -1,9 +1,21 @@
|
||||
<?php
|
||||
|
||||
#################################################################################
|
||||
## -= TravianZ Alliance News (incremental refactor) =- ##
|
||||
## - preserves logic ##
|
||||
## - improves safety (XSS protection) ##
|
||||
## - cleaner structure ##
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Filename : news.tpl ##
|
||||
## Type : Alliance News Feed ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Developed by : Shadow ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Contact : cata7007@gmail.com ##
|
||||
## Project : TravianZ ##
|
||||
## URLs: : https://travianz.org ##
|
||||
## GitHub : https://github.com/Shadowss/TravianZ ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## License : TravianZ Project ##
|
||||
## Copyright : TravianZ (c) 2010-2026. All rights reserved. ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
#################################################################################
|
||||
|
||||
// -------------------------------------------------
|
||||
|
||||
@@ -1,10 +1,21 @@
|
||||
<?php
|
||||
|
||||
#################################################################################
|
||||
## -= TravianZ Alliance Options (incremental refactor) =- ##
|
||||
## - preserves permission logic ##
|
||||
## - reduces duplication ##
|
||||
## - improves readability ##
|
||||
## - adds safety ##
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Filename : option.tpl ##
|
||||
## Type : Alliance Settings Overview ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Developed by : Shadow ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Contact : cata7007@gmail.com ##
|
||||
## Project : TravianZ ##
|
||||
## URLs: : https://travianz.org ##
|
||||
## GitHub : https://github.com/Shadowss/TravianZ ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## License : TravianZ Project ##
|
||||
## Copyright : TravianZ (c) 2010-2026. All rights reserved. ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
#################################################################################
|
||||
|
||||
// -------------------------------------------------
|
||||
|
||||
@@ -1,4 +1,23 @@
|
||||
<?php
|
||||
|
||||
#################################################################################
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Filename : overview.tpl ##
|
||||
## Type : Alliance Member Overview ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Developed by : Shadow ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Contact : cata7007@gmail.com ##
|
||||
## Project : TravianZ ##
|
||||
## URLs: : https://travianz.org ##
|
||||
## GitHub : https://github.com/Shadowss/TravianZ ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## License : TravianZ Project ##
|
||||
## Copyright : TravianZ (c) 2010-2026. All rights reserved. ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
#################################################################################
|
||||
|
||||
/*
|
||||
|--------------------------------------------------------------------------
|
||||
| TravianZ - Alliance Overview (FINAL STABLE VERSION)
|
||||
|
||||
@@ -1,4 +1,23 @@
|
||||
<?php
|
||||
|
||||
#################################################################################
|
||||
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Filename : quitalli.tpl ##
|
||||
## Type : Alliance Leave / Dissolve Form ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Developed by : Shadow ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## Contact : cata7007@gmail.com ##
|
||||
## Project : TravianZ ##
|
||||
## URLs: : https://travianz.org ##
|
||||
## GitHub : https://github.com/Shadowss/TravianZ ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
## License : TravianZ Project ##
|
||||
## Copyright : TravianZ (c) 2010-2026. All rights reserved. ##
|
||||
## --------------------------------------------------------------------------- ##
|
||||
#################################################################################
|
||||
|
||||
/*
|
||||
|--------------------------------------------------------------------------
|
||||
| TravianZ - Quit Alliance (refactored incremental)
|
||||
|
||||
Reference in New Issue
Block a user