0){ $database->query("DELETE FROM `".TB_PREFIX."deleting` WHERE `uid` = $id"); // redirect ca să dispară ?action din URL header("Location: ?p=player&uid=".$id); exit; } if(isset($id)) { include_once("../GameEngine/Ranking.php"); $varmedal = $database->getProfileMedal($id); // Issue #250: escape the user-controlled descriptions before they reach the // raw nl2br() render in playerinfo.tpl, so a stored HTML/JS payload (e.g. //

) is shown as inert text. BBCode is // intentionally NOT expanded here: the admin panel has no $generator (the // [coor] tag would fatal) and seeing the raw markup helps moderation. $profiel=htmlspecialchars($user['desc1'] ?? '', ENT_QUOTES, 'UTF-8').md5('skJkev3').htmlspecialchars($user['desc2'] ?? '', ENT_QUOTES, 'UTF-8'); $separator="../"; require("../Templates/Profile/medal.php"); $profiel=explode("".md5('skJkev3')."", $profiel); $varray = $database->getProfileVillages($id); $refreshiconfrm = "../img/admin/refresh.png"; $refreshicon = "

"; ?>

query($sql); if($result && $row = mysqli_fetch_assoc($result)){ if($row['timestamp'] > time()){ $deletion = true; // 2. calculează cât a mai rămas $remaining = $row['timestamp'] - time(); $h = floor($remaining / 3600); $m = floor(($remaining % 3600) / 60); $s = $remaining % 60; $delTime = sprintf("%02d:%02d:%02d", $h, $m, $s); } } // 3. afișează doar dacă e în proces if($deletion){ include("playerdeletion.tpl"); } include("playerinfo.tpl"); include("playerheroinfo.tpl"); include("playeradditionalinfo.tpl"); include("playermedals.tpl"); include ("villages.tpl"); ?>

'; } ?>

Ban History ()
Start	End	Duration	Reason
'.date('d:m:Y H:i', $row['time']).'	'.date('d:m:Y H:i', $row['end']).'	'.round((($row['end'] - $row['time']) / 3600), 2).' hours	'.$row['reason'].'