Files
2026-06-09 15:15:27 +03:00

425 lines
16 KiB
PHP
Executable File

<?php
#################################################################################
## ##
## -= YOU MUST NOT REMOVE OR CHANGE THIS NOTICE =- ##
## ##
## --------------------------------------------------------------------------- ##
## ##
## Project: TravianZ ##
## Version: 05.03.2014 ##
## Filename: GameEngine/Admin/function.php ##
## Developed by: Dzoki ##
## Edited by: Shadow and ronix ##
## License: Creative Commons BY-NC-SA 3.0 ##
## Copyright: TravianZ (c) 2014 - All rights reserved ##
## URLs: http://travian.shadowss.ro ##
## Source code: https://github.com/Shadowss/TravianZ ##
## ##
#################################################################################
include_once(__DIR__ . "/../Artifacts.php");
include_once(__DIR__ . "/../Units.php");
include_once(__DIR__ . "/../Generator.php");
class funct
{
function CheckLogin()
{
return isset($_SESSION['access']) && $_SESSION['access'] >= MULTIHUNTER && $_SESSION['id'];
}
function Act($get)
{
global $admin, $database, $units, $generator;
$artifact = new Artifacts();
switch ($get['action']) {
case "recountPop":
$admin->recountPop($get['did']);
$admin->recountCP($get['did']);
break;
case "recountPopUsr":
$admin->recountPopUser($get['uid']);
break;
case "StopDel":
// stop deleting
break;
case "delVil":
if ($get['mode'] != 1) {
$admin->DelVillage($get['did']);
} else {
$admin->DelVillage($get['did'], 1);
}
break;
case "delBan":
$admin->DelBan($get['uid'], $get['id']);
// remove ban
break;
case "delIpBan":
// remove IP ban (issue #185)
if (isset($get['id'])) {
$admin->DelIpBan($get['id']);
}
break;
case "addBan":
if ($get['time']) {
$end = time() + $get['time'];
} else {
$end = '';
}
if (is_numeric($get['uid'])) {
$get['uid'] = $get['uid'];
} else {
$get['uid'] = $database->getUserField(addslashes($get['uid']), 'id', 1);
}
$admin->AddBan($get['uid'], $end, $get['reason']);
// add ban
break;
case "delOas":
$units->returnTroops($get['did'], 1);
$database->removeOases($get['oid']);
break;
case "logout":
$this->LogOut();
break;
case "delArtifact":
if(isset($_GET['artid']) && is_numeric($_GET['artid'])) $database->updateArtifactDetails($_GET['artid'], ['del' => 1]);
break;
case "returnArtifact":
//Check if the artifact id is valid
if(!isset($_GET['artid']) || !is_numeric($_GET['artid'])){
header("location: admin.php");
exit;
}
//Get the informations of the artifact
$artifactInfo = $database->getArtefactDetails($_GET['artid'], $_GET['del']);
//Check if the artifact exists
if(empty($artifactInfo)) {
header("location: admin.php");
exit;
}elseif($artifactInfo['owner'] == Artifacts::NATARS_UID){
$database->updateArtifactDetails($_GET['artid'], ['del' => 0]);
header("location: admin.php");
exit;
}
//Return the artifacts to the Natars' account
$artifact->returnArtifactToNatars($artifactInfo);
break;
case "addArtifacts":
$selectedArtifact = $_POST['selectedArtifact'];
$artifactQuantity = (int)$_POST['artifactQuantity'];
$playerId = (int)$_POST['playerId'];
//Check if the inputs are valid
if(!isset($selectedArtifact) || !isset($artifactQuantity) || !isset($playerId) || empty($selectedArtifact) ||
!is_numeric($artifactQuantity) || $artifactQuantity <= 0 || $artifactQuantity > 999 || !is_numeric($playerId) ||
strpos($selectedArtifact, ':') === false || $database->getUserField($playerId, "username", 0) == "[?]"){
header("location: admin.php?p=natars&error=0");
exit;
}
//The first element [0] is the type of the artifact, the second one [1] is the size of it
//and the third one, is the artifact description
$selectedArtifact = explode(":", $selectedArtifact);
//Add the chosen artifact(s)
$artifactsArray = array_merge(Artifacts::NATARS_ARTIFACTS, Artifacts::NATARS_WW_BUILDING_PLANS);
$chosenArtifact = $artifactsArray[$selectedArtifact[2]][$selectedArtifact[1] - 1];
//Check if the artifact has been found or if doesn't exist
if(empty($chosenArtifact)){
header("location: admin.php?p=natars&error=1");
exit;
}
//Create the artifacts array
$chosenArtifact['quantity'] = $artifactQuantity;
$artifactArrays[$selectedArtifact[2]][] = $chosenArtifact;
//Add the artifacts
$artifact->addArtifactVillages($artifactArrays, $playerId, $playerId == Artifacts::NATARS_UID);
break;
case "addWWVillages":
$numberOfVillages = (int)$_POST['numberOfVillages'];
$playerId = (int)$_POST['playerId'];
//Check if the inserted values are valid
if(!is_numeric($numberOfVillages) || $numberOfVillages <= 0 || $numberOfVillages > 999
|| !is_numeric($playerId) || $database->getUserField($playerId, "username", 0) == "[?]"){
header("location: admin.php?p=natars&error=2");
}
//Create the desired WW villages
$artifact->createWWVillages($numberOfVillages, $playerId, $playerId == Artifacts::NATARS_UID);
break;
case "killHero":
$varray = $database->getProfileVillages($get['uid']);
$killhero = false;
$error = "";
for ($i = 0; $i <= count($varray) - 1; $i ++) {
$killhero = $database->FindHeroInVil($varray[$i]['wref']);
if ($killhero)
break;
$killhero = $database->FindHeroInDef($varray[$i]['wref']);
if ($killhero)
break;
$killhero = $database->FindHeroInMovement($varray[$i]['wref']);
if ($killhero)
break;
}
if (! $killhero) {
$killhero = $database->FindHeroInOasis($get['uid']);
}
$database->KillMyHero($get['uid']);
$error = "&kc=1";
header("Location: admin.php?p=player&uid=" . $get['uid'] . $error);
exit();
case "reviveHero":
$livingHeroesCount = mysqli_fetch_array($database->query("SELECT Count(*) as Total FROM " . TB_PREFIX . "hero WHERE uid=" . (int) $get['uid'] . " AND (dead = 0 OR inrevive = 1 OR intraining = 1)"), MYSQLI_ASSOC);
if ($livingHeroesCount['Total'] > 0) {
header("Location: admin.php?p=player&uid=" . $get['uid'] . "&re=1");
exit();
}
$result = $database->query("SELECT * FROM " . TB_PREFIX . "hero WHERE heroid = " . (int) $get['hid'] . " AND uid=" . (int) $get['uid']);
$hdata = mysqli_fetch_array($result);
$database->query("UPDATE " . TB_PREFIX . "units SET hero = 1 WHERE vref = " . (int) $hdata['wref']);
$database->query("UPDATE " . TB_PREFIX . "hero SET `dead` = '0', `inrevive` = '0', `health` = '100', `lastupdate` = " . time() . " WHERE `heroid` = " . (int) $get['hid'] . " AND `uid` = " . (int) $get['uid']);
header("Location: admin.php?p=player&uid=" . $get['uid'] . "&rc=1");
exit();
case "addHero":
$user = $database->getUserArray($get['uid'], 1);
$vilarray = $database->getVrefCapital($get['uid']);
if (! $vilarray) {
return;
}
$database->query("INSERT INTO " . TB_PREFIX . "hero (`uid`, `wref`, `regeneration`, `unit`, `name`, `level`, `points`,
`experience`, `dead`, `health`, `attack`, `defence`, `attackbonus`, `defencebonus`, `trainingtime`, `autoregen`,
`intraining`) VALUES (" . (int) $get['uid'] . ", " . (int) $vilarray['wref'] . ", '0', " . (int) $get['u'] . ", '" . addslashes($user['username']) . "',
'0', '5', '0', '0', '100', '0', '0', '0', '0', '" . time() . "', '50', '0')");
$database->query("UPDATE " . TB_PREFIX . "units SET hero = 1 WHERE vref = " . (int) $vilarray['wref']);
header("Location: admin.php?p=player&uid=" . $get['uid'] . "&ac=1");
exit();
}
if ($get['action'] == 'logout') {
header("Location: admin.php");
} else {
header("Location: " . $_SERVER['HTTP_REFERER']);
}
}
function Act2($post)
{
global $admin, $database;
switch ($post['action']) {
case "DelPlayer":
if ($admin->DelPlayer($post['uid'], $post['pass'])) {
header("Location: ?p=search&msg=ursdel");
} else {
die('Invalid Admin password, cannot delete player. Please go back and retry.');
}
break;
case "punish":
$admin->Punish($post);
header("Location: " . $_SERVER['HTTP_REFERER']);
break;
case "addVillage":
$admin->AddVillage($post);
header("Location: " . $_SERVER['HTTP_REFERER']);
break;
}
}
function LogIN($username, $password)
{
global $admin, $database;
if ($admin->Login($username, $password)) {
$_SESSION['admin_username'] = $username;
$_SESSION['access'] = $database->getUserField($username, 'access', 1);
$_SESSION['id'] = $database->getUserField($username, 'id', 1);
header("Location: " . $_SERVER['HTTP_REFERER']);
// header("Location: admin.php");
} else {
echo "Error";
}
}
function LogOut()
{
$_SESSION['access'] = '';
$_SESSION['id'] = '';
}
public function procResType($ref)
{
global $session;
switch ($ref) {
case 1:
$build = "Woodcutter";
break;
case 2:
$build = "Clay Pit";
break;
case 3:
$build = "Iron Mine";
break;
case 4:
$build = "Cropland";
break;
case 5:
$build = "Sawmill";
break;
case 6:
$build = "Brickyard";
break;
case 7:
$build = "Iron Foundry";
break;
case 8:
$build = "Grain Mill";
break;
case 9:
$build = "Bakery";
break;
case 10:
$build = "Warehouse";
break;
case 11:
$build = "Granary";
break;
case 12:
$build = "Blacksmith";
break;
case 13:
$build = "Armoury";
break;
case 14:
$build = "Tournament Square";
break;
case 15:
$build = "Main Building";
break;
case 16:
$build = "Rally Point";
break;
case 17:
$build = "Marketplace";
break;
case 18:
$build = "Embassy";
break;
case 19:
$build = "Barracks";
break;
case 20:
$build = "Stable";
break;
case 21:
$build = "Workshop";
break;
case 22:
$build = "Academy";
break;
case 23:
$build = "Cranny";
break;
case 24:
$build = "Town Hall";
break;
case 25:
$build = "Residence";
break;
case 26:
$build = "Palace";
break;
case 27:
$build = "Treasury";
break;
case 28:
$build = "Trade Office";
break;
case 29:
$build = "Great Barracks";
break;
case 30:
$build = "Great Stable";
break;
case 31:
$build = "City Wall";
break;
case 32:
$build = "Earth Wall";
break;
case 33:
$build = "Palisade";
break;
case 34:
$build = "Stonemason's Lodge";
break;
case 35:
$build = "Brewery";
break;
case 36:
$build = "Trapper";
break;
case 37:
$build = "Hero's Mansion";
break;
case 38:
$build = "Great Warehouse";
break;
case 39:
$build = "Great Granary";
break;
case 40:
$build = "Wonder of the World";
break;
case 41:
$build = "Horse Drinking Trough";
break;
case 42:
$build = "Great Workshop";
break;
default:
$build = "Error";
break;
}
return $build;
}
}
;
$funct = new funct();
if ($funct->CheckLogin()) {
if (isset($_GET['action']) && $_GET['action']) {
$funct->Act($_GET);
}
if (isset($_POST['action']) && $_POST['action']) {
$funct->Act2($_POST);
}
}
if (isset($_POST['action']) && $_POST['action'] == 'login') {
$funct->LogIN($_POST['name'], $_POST['pw']);
}
?>