mirror of
https://github.com/Shadowss/TravianZ.git
synced 2026-07-01 01:54:22 +00:00
novgorodschi catalin
82 lines
2.8 KiB
Smarty
82 lines
2.8 KiB
Smarty
<?php
|
||
include("Templates/Plus/pmenu.tpl");
|
||
|
||
$uid = (int)$session->uid;
|
||
$plusTime = 604800; // 7 zile
|
||
|
||
echo '<br><div align="center"><h2>Get <font color="#71D000">P</font><font color="#FF6F0F">l</font><font color="#71D000">u</font><font color="#FF6F0F">s</font></h2>';
|
||
echo 'Exchange gold for Plus features. All actions are logged.</div><br>';
|
||
|
||
if(empty($_POST['plus'])) {
|
||
?>
|
||
<form method="POST">
|
||
<table width="300" align="center">
|
||
<tr><td><b><?= $session->username ?></b> – Gold: <?= $session->gold ?></td></tr>
|
||
<tr><td align="center"><b>Select Reward:</b>
|
||
<select name="reward" required>
|
||
<option value="">Select reward...</option>
|
||
<option value="plus">VIP Account (10 gold – 7 days)</option>
|
||
<option value="b1">Lumber +25% (5 gold)</option>
|
||
<option value="b2">Clay +25% (5 gold)</option>
|
||
<option value="b3">Iron +25% (5 gold)</option>
|
||
<option value="b4">Crop +25% (5 gold)</option>
|
||
</select><br><br>
|
||
<input type="submit" name="plus" value="Get Now">
|
||
</td></tr>
|
||
</table>
|
||
</form>
|
||
<?php
|
||
} else {
|
||
$reward = $_POST['reward'] ?? '';
|
||
|
||
// whitelist
|
||
$map = [
|
||
'plus' => ['field'=>'plus','cost'=>10],
|
||
'b1' => ['field'=>'b1','cost'=>5],
|
||
'b2' => ['field'=>'b2','cost'=>5],
|
||
'b3' => ['field'=>'b3','cost'=>5],
|
||
'b4' => ['field'=>'b4','cost'=>5],
|
||
];
|
||
|
||
if(!isset($map[$reward])) {
|
||
die('<b>ERROR:</b> Invalid reward. <button onclick="history.back()">Back</button>');
|
||
}
|
||
|
||
$field = $map[$reward]['field'];
|
||
$cost = $map[$reward]['cost'];
|
||
$now = time();
|
||
|
||
// 1. scade gold ATOMIC – doar dacă ai suficient
|
||
$goldUpd = mysqli_query($database->dblink,
|
||
"UPDATE ".TB_PREFIX."users SET gold = gold - $cost
|
||
WHERE id = $uid AND gold >= $cost"
|
||
);
|
||
|
||
if(mysqli_affected_rows($database->dblink) != 1) {
|
||
die('<div align="center"><font color="red"><b>Not enough gold!</b></font><br><button onclick="history.back()">Back</button></div>');
|
||
}
|
||
|
||
// 2. adaugă timpul la feature
|
||
// dacă a expirat, setează de acum, altfel adaugă
|
||
mysqli_query($database->dblink,
|
||
"UPDATE ".TB_PREFIX."users
|
||
SET `$field` = IF(`$field` < $now, $now + $plusTime, `$field` + $plusTime)
|
||
WHERE id = $uid"
|
||
);
|
||
|
||
// 3. update sesiune
|
||
$session->gold -= $cost;
|
||
$_SESSION['gold'] = $session->gold;
|
||
$session->$field = max($session->$field, $now) + $plusTime;
|
||
|
||
// 4. log
|
||
mysqli_query($database->dblink,
|
||
"INSERT INTO ".TB_PREFIX."gold_fin_log (wid, action, time)
|
||
VALUES (0, 'Bought $field for $cost gold', $now)"
|
||
);
|
||
|
||
echo '<meta http-equiv="refresh" content="2;url=plus.php?id=3">';
|
||
echo '<br><div align="center"><font color="green" size="4"><b>Your status has been updated!</b></font></div>';
|
||
}
|
||
?>
|
||
</div> |