mirror of
https://github.com/Shadowss/TravianZ.git
synced 2026-09-10 12:37:13 +00:00
novgorodschi catalin
483f0ae30c
Add Global Chat Options 1. emoji 2. Poll 3. Delete message 4. Edit message
295 lines
10 KiB
PHP
295 lines
10 KiB
PHP
<?php
|
|
|
|
#################################################################################
|
|
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
|
## --------------------------------------------------------------------------- ##
|
|
## Filename : ajax.php ##
|
|
## Type : In Game Ajax File ##
|
|
## --------------------------------------------------------------------------- ##
|
|
## Developed by : Dzoki & Advocaite & Donnchadh ##
|
|
## Refactored by : Shadow ##
|
|
## Redesign by : Shadow ##
|
|
## --------------------------------------------------------------------------- ##
|
|
## Contact : cata7007@gmail.com ##
|
|
## Project : TravianZ ##
|
|
## URLs: : https://travianz.org ##
|
|
## GitHub : https://github.com/Shadowss/TravianZ ##
|
|
## --------------------------------------------------------------------------- ##
|
|
## License : TravianZ Project ##
|
|
## Copyright : TravianZ (c) 2010-2026. All rights reserved. ##
|
|
## --------------------------------------------------------------------------- ##
|
|
#################################################################################
|
|
|
|
// even with autoloader created, we can't use it here yet, as it's not been created
|
|
// ... so, let's see where it is and include it
|
|
$autoloader_found = false;
|
|
// go max 5 levels up - we don't have folders that go deeper than that
|
|
for ($i = 0; $i < 5; $i++) {
|
|
$autoprefix = str_repeat('../', $i);
|
|
if (file_exists($autoprefix.'autoloader.php')) {
|
|
$autoloader_found = true;
|
|
include_once $autoprefix.'autoloader.php';
|
|
break;
|
|
}
|
|
}
|
|
|
|
if (!$autoloader_found) {
|
|
die('Could not find autoloading class.');
|
|
}
|
|
|
|
// we need config to determine whether to log access or not
|
|
include_once($autoprefix.'GameEngine/config.php');
|
|
|
|
use App\Utils\AccessLogger;
|
|
AccessLogger::logRequest();
|
|
|
|
/**
|
|
* ajax.php poate fi cerut si fara parametrul "f" (boti, prefetch de browser,
|
|
* un link vechi). Fara isset() iesea "Undefined array key f" la fiecare
|
|
* astfel de cerere; acum pica linistit pe default.
|
|
*/
|
|
switch(isset($_GET['f']) ? $_GET['f'] : '') {
|
|
case 'k7':
|
|
header('Content-Type: application/json');
|
|
$x = preg_replace("/[^a-zA-Z0-9_-]/","",$_GET['x']);
|
|
$y = preg_replace("/[^a-zA-Z0-9_-]/","",$_GET['y']);
|
|
$xx = preg_replace("/[^a-zA-Z0-9_-]/","",$_GET['xx']);
|
|
$yy = preg_replace("/[^a-zA-Z0-9_-]/","",$_GET['yy']);
|
|
$howmany = $x - $xx;
|
|
if($howmany == 12 || $howmany == -12) {
|
|
include("Templates/Ajax/mapscroll2.tpl");
|
|
}
|
|
else {
|
|
include("Templates/Ajax/mapscroll.tpl");
|
|
}
|
|
break;
|
|
case 'qst':
|
|
|
|
if (isset($_GET['qact'])){
|
|
$qact=preg_replace("/[^a-zA-Z0-9_-]/","",$_GET['qact']);
|
|
}else {
|
|
$qact=null;
|
|
}
|
|
if (isset($_GET['qact2'])){
|
|
$qact2=preg_replace("/[^a-zA-Z0-9_-]/","",$_GET['qact2']);
|
|
}else {
|
|
$qact2=null;
|
|
}
|
|
if (isset($_GET['qact3'])){
|
|
$qact3=preg_replace("/[^a-zA-Z0-9_-]/","",$_GET['qact3']);
|
|
}else {
|
|
$qact3=null;
|
|
}
|
|
if (!isset($_SESSION)) {
|
|
session_start();
|
|
}
|
|
if (isset($_SESSION['qtyp']) && $_SESSION['qtyp']==37) {
|
|
include("Templates/Ajax/quest_core.tpl");
|
|
}else{
|
|
include("Templates/Ajax/quest_core25.tpl");
|
|
}
|
|
break;
|
|
// Rally-point attack marker (issue #245): persist the green/yellow/red tag
|
|
// a defender sets on an incoming attack. setMovementMarker() enforces that
|
|
// the targeted village belongs to the logged-in user.
|
|
case 'marker':
|
|
header('Content-Type: application/json');
|
|
if (!isset($_SESSION)) {
|
|
session_start();
|
|
}
|
|
include_once($autoprefix.'GameEngine/Database.php');
|
|
$uid = (int) ($_SESSION['id_user'] ?? 0);
|
|
if (!$uid) {
|
|
http_response_code(403);
|
|
echo json_encode(['ok' => 0]);
|
|
break;
|
|
}
|
|
$ok = $database->setMovementMarker($_POST['moveid'] ?? 0, $_POST['marker'] ?? 0, $uid);
|
|
echo json_encode(['ok' => $ok ? 1 : 0]);
|
|
break;
|
|
|
|
// Chat general (server-wide), cerut de Catalin 07.09.2026. Separat de
|
|
// alliance chat (Chat.php, SAJAX) - vazut/scris de orice user logat,
|
|
// moderat de MH (access 8) si Admin (access 9).
|
|
// Faza 2 (09.09.2026): sterge/editeaza mesaj, sondaje, mai jos.
|
|
case 'gchat_poll':
|
|
header('Content-Type: application/json');
|
|
if (!isset($_SESSION)) {
|
|
session_start();
|
|
}
|
|
include_once($autoprefix.'GameEngine/Database.php');
|
|
$uid = (int) ($_SESSION['id_user'] ?? 0);
|
|
if (!$uid) {
|
|
http_response_code(403);
|
|
echo json_encode(['ok' => 0, 'reason' => 'notloggedin']);
|
|
break;
|
|
}
|
|
$sinceId = (int) ($_GET['sinceId'] ?? 0);
|
|
echo json_encode([
|
|
'ok' => 1,
|
|
'messages' => $database->getGlobalChatMessages(30, $sinceId, $uid),
|
|
'viewer' => $database->getGlobalChatViewerInfo($uid),
|
|
]);
|
|
break;
|
|
|
|
// Faza 2 (09.09.2026): editari/stergeri intamplate de la ultimul cec al
|
|
// clientului - separat de 'gchat_poll' de mai sus (acela e long-polling
|
|
// pentru mesaje NOI dupa id; asta e watermark pe timp, pentru mesaje VECHI
|
|
// deja afisate care s-au schimbat - denumiri diferite intentionat, ca sa
|
|
// nu se confunde cele doua mecanisme).
|
|
case 'gchat_updates':
|
|
header('Content-Type: application/json');
|
|
if (!isset($_SESSION)) {
|
|
session_start();
|
|
}
|
|
include_once($autoprefix.'GameEngine/Database.php');
|
|
$uid = (int) ($_SESSION['id_user'] ?? 0);
|
|
if (!$uid) {
|
|
http_response_code(403);
|
|
echo json_encode(['ok' => 0, 'reason' => 'notloggedin']);
|
|
break;
|
|
}
|
|
$sinceTs = (int) ($_GET['sinceTs'] ?? 0);
|
|
$result = $database->getGlobalChatUpdates($sinceTs, $uid);
|
|
echo json_encode([
|
|
'ok' => 1,
|
|
'rows' => $result['rows'],
|
|
'now' => $result['now'],
|
|
]);
|
|
break;
|
|
|
|
case 'gchat_send':
|
|
header('Content-Type: application/json');
|
|
if (!isset($_SESSION)) {
|
|
session_start();
|
|
}
|
|
include_once($autoprefix.'GameEngine/Database.php');
|
|
$uid = (int) ($_SESSION['id_user'] ?? 0);
|
|
if (!$uid) {
|
|
http_response_code(403);
|
|
echo json_encode(['ok' => 0, 'reason' => 'notloggedin']);
|
|
break;
|
|
}
|
|
echo json_encode($database->postGlobalChatMessage($uid, $_POST['msg'] ?? ''));
|
|
break;
|
|
|
|
// Faza 2 (09.09.2026): userul isi editeaza propriul mesaj. Verificarea de
|
|
// proprietate (doar mesajul lui) se face in Database::editGlobalChatMessage().
|
|
case 'gchat_edit':
|
|
header('Content-Type: application/json');
|
|
if (!isset($_SESSION)) {
|
|
session_start();
|
|
}
|
|
include_once($autoprefix.'GameEngine/Database.php');
|
|
$uid = (int) ($_SESSION['id_user'] ?? 0);
|
|
if (!$uid) {
|
|
http_response_code(403);
|
|
echo json_encode(['ok' => 0, 'reason' => 'notloggedin']);
|
|
break;
|
|
}
|
|
echo json_encode($database->editGlobalChatMessage($uid, $_POST['id'] ?? 0, $_POST['msg'] ?? ''));
|
|
break;
|
|
|
|
// Faza 2 (09.09.2026): MH/Admin sterg un mesaj (de obicei vulgar). Spre
|
|
// deosebire de mute/block mai jos, aici NU se compara rangul cu al
|
|
// autorului mesajului - vezi comentariul din Database::deleteGlobalChatMessage().
|
|
case 'gchat_delete':
|
|
header('Content-Type: application/json');
|
|
if (!isset($_SESSION)) {
|
|
session_start();
|
|
}
|
|
include_once($autoprefix.'GameEngine/Database.php');
|
|
$modUid = (int) ($_SESSION['id_user'] ?? 0);
|
|
$msgId = (int) ($_POST['id'] ?? 0);
|
|
if (!$modUid || !$msgId) {
|
|
http_response_code(403);
|
|
echo json_encode(['ok' => 0, 'reason' => 'notloggedin']);
|
|
break;
|
|
}
|
|
$modAccess = (int) $database->getUserField($modUid, 'access', 0);
|
|
if ($modAccess < MULTIHUNTER) {
|
|
http_response_code(403);
|
|
echo json_encode(['ok' => 0, 'reason' => 'forbidden']);
|
|
break;
|
|
}
|
|
echo json_encode(['ok' => $database->deleteGlobalChatMessage($msgId) ? 1 : 0]);
|
|
break;
|
|
|
|
// Faza 2 (09.09.2026): creare sondaj in chat-ul general. $_POST['options']
|
|
// vine ca array (options[]=...&options[]=...) din formularul de creare.
|
|
case 'gchat_poll_create':
|
|
header('Content-Type: application/json');
|
|
if (!isset($_SESSION)) {
|
|
session_start();
|
|
}
|
|
include_once($autoprefix.'GameEngine/Database.php');
|
|
$uid = (int) ($_SESSION['id_user'] ?? 0);
|
|
if (!$uid) {
|
|
http_response_code(403);
|
|
echo json_encode(['ok' => 0, 'reason' => 'notloggedin']);
|
|
break;
|
|
}
|
|
$options = isset($_POST['options']) && is_array($_POST['options']) ? $_POST['options'] : [];
|
|
echo json_encode($database->createGlobalChatPoll($uid, $_POST['question'] ?? '', $options));
|
|
break;
|
|
|
|
case 'gchat_poll_vote':
|
|
header('Content-Type: application/json');
|
|
if (!isset($_SESSION)) {
|
|
session_start();
|
|
}
|
|
include_once($autoprefix.'GameEngine/Database.php');
|
|
$uid = (int) ($_SESSION['id_user'] ?? 0);
|
|
if (!$uid) {
|
|
http_response_code(403);
|
|
echo json_encode(['ok' => 0, 'reason' => 'notloggedin']);
|
|
break;
|
|
}
|
|
echo json_encode($database->voteGlobalChatPoll($uid, $_POST['pollId'] ?? 0, $_POST['option'] ?? -1));
|
|
break;
|
|
|
|
case 'gchat_mute':
|
|
case 'gchat_block':
|
|
case 'gchat_unmute':
|
|
header('Content-Type: application/json');
|
|
if (!isset($_SESSION)) {
|
|
session_start();
|
|
}
|
|
include_once($autoprefix.'GameEngine/Database.php');
|
|
$modUid = (int) ($_SESSION['id_user'] ?? 0);
|
|
$targetUid = (int) ($_POST['target'] ?? 0);
|
|
|
|
if (!$modUid || !$targetUid) {
|
|
http_response_code(403);
|
|
echo json_encode(['ok' => 0, 'reason' => 'notloggedin']);
|
|
break;
|
|
}
|
|
|
|
$modAccess = (int) $database->getUserField($modUid, 'access', 0);
|
|
$targetAccess = (int) $database->getUserField($targetUid, 'access', 0);
|
|
|
|
// doar MH (8) si Admin (9) modereaza chat-ul general, si nimeni nu
|
|
// poate modera pe cineva de rang egal sau mai mare - deci MH nu
|
|
// poate muta alt MH/Admin, iar Admin nu poate muta alt Admin
|
|
if ($modAccess < MULTIHUNTER || $targetAccess >= $modAccess) {
|
|
http_response_code(403);
|
|
echo json_encode(['ok' => 0, 'reason' => 'forbidden']);
|
|
break;
|
|
}
|
|
|
|
if ($_GET['f'] == 'gchat_unmute') {
|
|
$ok = $database->unmuteGlobalChatUser($targetUid);
|
|
} else {
|
|
$reason = substr((string) ($_POST['reason'] ?? ''), 0, 255);
|
|
// 'gchat_block' = permanent (~100 de ani); 'gchat_mute' = temporar, in minute (POST['minutes'])
|
|
$until = ($_GET['f'] == 'gchat_block')
|
|
? (time() + 3600 * 24 * 365 * 100)
|
|
: (time() + max(1, (int) ($_POST['minutes'] ?? 0)) * 60);
|
|
$ok = $database->muteGlobalChatUser($targetUid, $modUid, $until, $reason);
|
|
}
|
|
|
|
echo json_encode(['ok' => $ok ? 1 : 0]);
|
|
break;
|
|
}
|
|
?>
|