mirror of
https://github.com/Shadowss/TravianZ.git
synced 2026-08-09 21:01:00 +00:00
b2dec1d942
Fix some sql inject & Add Credits
90 lines
3.1 KiB
Smarty
90 lines
3.1 KiB
Smarty
<?php
|
|
|
|
#################################################################################
|
|
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
|
## --------------------------------------------------------------------------- ##
|
|
## Filename : assignpos.tpl ##
|
|
## Type : Alliance Assign Member Position ##
|
|
## --------------------------------------------------------------------------- ##
|
|
## Developed by : Shadow ##
|
|
## --------------------------------------------------------------------------- ##
|
|
## Contact : cata7007@gmail.com ##
|
|
## Project : TravianZ ##
|
|
## URLs: : https://travianz.org ##
|
|
## GitHub : https://github.com/Shadowss/TravianZ ##
|
|
## --------------------------------------------------------------------------- ##
|
|
## License : TravianZ Project ##
|
|
## Copyright : TravianZ (c) 2010-2026. All rights reserved. ##
|
|
## --------------------------------------------------------------------------- ##
|
|
#################################################################################
|
|
|
|
// fallback alliance id
|
|
if (!isset($aid)) {
|
|
$aid = $session->alliance;
|
|
}
|
|
|
|
// load alliance data
|
|
$allianceinfo = $database->getAlliance($aid);
|
|
$memberlist = $database->getAllMember($aid);
|
|
|
|
// safe header output
|
|
echo "<h1>" . htmlspecialchars($allianceinfo['tag'], ENT_QUOTES, 'UTF-8') .
|
|
" - " .
|
|
htmlspecialchars($allianceinfo['name'], ENT_QUOTES, 'UTF-8') .
|
|
"</h1>";
|
|
|
|
// menu include
|
|
include("alli_menu.tpl");
|
|
?>
|
|
|
|
<form method="post" action="allianz.php">
|
|
|
|
<table cellpadding="1" cellspacing="1" id="position" class="small_option">
|
|
|
|
<thead>
|
|
<tr>
|
|
<th colspan="2"><?php echo TZ_ASSIGN_TO_POSITION; ?></th>
|
|
</tr>
|
|
</thead>
|
|
|
|
<tbody>
|
|
|
|
<tr>
|
|
<th colspan="2">
|
|
Here you can grant the players from your alliance rights & positions.
|
|
</th>
|
|
</tr>
|
|
|
|
<!-- MEMBER SELECT -->
|
|
<tr>
|
|
<th><?php echo NAME; ?></th>
|
|
<td>
|
|
<select name="a_user" class="name dropdown">
|
|
<?php
|
|
// list alliance members
|
|
if (!empty($memberlist)) {
|
|
foreach ($memberlist as $member) {
|
|
echo "<option value='" . (int)$member['id'] . "'>"
|
|
. htmlspecialchars($member['username'], ENT_QUOTES, 'UTF-8')
|
|
. "</option>";
|
|
}
|
|
}
|
|
?>
|
|
</select>
|
|
</td>
|
|
</tr>
|
|
|
|
</tbody>
|
|
</table>
|
|
|
|
<!-- FORM ACTIONS -->
|
|
<p>
|
|
<input type="hidden" name="o" value="1">
|
|
<input type="hidden" name="s" value="5">
|
|
|
|
<button type="submit" name="s1" id="btn_ok" class="trav_buttons">
|
|
OK
|
|
</button>
|
|
</p>
|
|
|
|
</form> |