mirror of
https://github.com/Shadowss/TravianZ.git
synced 2026-07-21 20:16:11 +00:00
novgorodschi catalin
d89ffe4482
### Core Architecture Refactor - Split the `Database.php` class into domain-specific traits under `GameEngine/Database/`. - Split the `Automation` class into domain-specific traits under `GameEngine/Automation/`. - Grouped methods by functional domain for improved maintainability and navigation. - Preserved 100% backward compatibility. - No logic or behavioral changes. - Pure structural refactor.
769 lines
28 KiB
PHP
769 lines
28 KiB
PHP
<?php
|
|
|
|
#################################################################################
|
|
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
|
|
## --------------------------------------------------------------------------- ##
|
|
## Project: TravianZ ##
|
|
## Filename: DatabaseUserQueries.php ##
|
|
## Split&Refactor Shadow ##
|
|
## Purpose: Accounts, login, profiles, gold, sitters, vacation mode, ##
|
|
## friends ##
|
|
## ##
|
|
## Phase S1: Trait extracted from GameEngine/Database.php ##
|
|
## (MYSQLi_DB class). ##
|
|
## Methods were moved IDENTICALLY, with no logic changes. ##
|
|
## ##
|
|
## License: TravianZ Project ##
|
|
## Copyright: TravianZ (c) 2010-2026. All rights reserved. ##
|
|
## URLs: https://travianz.org ##
|
|
## https://github.com/Shadowss/TravianZ ##
|
|
#################################################################################
|
|
|
|
trait DatabaseUserQueries {
|
|
|
|
|
|
function register($username, $password, $email, $tribe, $act, $uid = 0, $desc = null) {
|
|
$username = trim($username);
|
|
$email = filter_var($email, FILTER_VALIDATE_EMAIL) ?: '';
|
|
$tribe = (int)$tribe;
|
|
$uid = (int)$uid;
|
|
$desc = $desc ?? '';
|
|
$time = time();
|
|
$access = USER;
|
|
|
|
$startTime = strtotime(START_DATE) - strtotime(date('d.m.Y')) + strtotime(START_TIME);
|
|
$protectionTime = $uid != 3 ? (($startTime > $time) ? $startTime : $time) + PROTECTION : 0;
|
|
|
|
// încercăm varianta cu is_bcrypt (PHP 8.3)
|
|
$stmt = $this->dblink->prepare(
|
|
"INSERT INTO `".TB_PREFIX."users`
|
|
(id, username, password, access, email, timestamp, tribe, act, protect, lastupdate, regtime, desc2, is_bcrypt)
|
|
VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?)"
|
|
);
|
|
$is_bcrypt = 1;
|
|
$stmt->bind_param("issisiiiiiisi", $uid, $username, $password, $access, $email, $time, $tribe, $act, $protectionTime, $time, $time, $desc, $is_bcrypt);
|
|
|
|
if($stmt->execute()){
|
|
$id = $stmt->insert_id ?: $uid;
|
|
$stmt->close();
|
|
$this->grantRegistrationGold($id);
|
|
return $id;
|
|
}
|
|
$stmt->close();
|
|
|
|
// fallback pentru DB vechi fără coloana is_bcrypt
|
|
$stmt2 = $this->dblink->prepare(
|
|
"INSERT INTO `".TB_PREFIX."users`
|
|
(id, username, password, access, email, timestamp, tribe, act, protect, lastupdate, regtime, desc2)
|
|
VALUES (?,?,?,?,?,?,?,?,?,?,?,?)"
|
|
);
|
|
$stmt2->bind_param("issisiiiiiis", $uid, $username, $password, $access, $email, $time, $tribe, $act, $protectionTime, $time, $time, $desc);
|
|
|
|
if($stmt2->execute()){
|
|
$id = $stmt2->insert_id ?: $uid;
|
|
$stmt2->close();
|
|
$this->grantRegistrationGold($id);
|
|
return $id;
|
|
}
|
|
$stmt2->close();
|
|
return false;
|
|
}
|
|
/**
|
|
* Registration bonus gold (NEW_FUNCTION_REGISTRATION_GOLD).
|
|
* Grants a one-time gold bonus to a freshly created player account. Called
|
|
* from register() right after the users row is inserted, so it covers every
|
|
* registration path (email activation, instant registration, admin-created
|
|
* users). No-ops when disabled, amount <= 0, or system account (id <= 3).
|
|
*/
|
|
private function grantRegistrationGold($id) {
|
|
$id = (int) $id;
|
|
if ($id <= 3) {
|
|
return; // system accounts: admin / nature / natars
|
|
}
|
|
if (!defined('NEW_FUNCTION_REGISTRATION_GOLD') || !NEW_FUNCTION_REGISTRATION_GOLD) {
|
|
return;
|
|
}
|
|
$amount = defined('NEW_FUNCTION_REGISTRATION_GOLD_VALUE') ? (int) NEW_FUNCTION_REGISTRATION_GOLD_VALUE : 0;
|
|
if ($amount <= 0) {
|
|
return;
|
|
}
|
|
$this->modifyGold($id, $amount, 1); // mode 1 = add
|
|
|
|
// Best-effort audit trail. The village does not exist yet, so wid = 0.
|
|
if (defined('LOG_GOLD_FIN') && LOG_GOLD_FIN) {
|
|
try {
|
|
$now = time();
|
|
$details = 'Registration bonus';
|
|
$stmt = $this->dblink->prepare(
|
|
"INSERT INTO `".TB_PREFIX."gold_fin_log` (wid, uid, action, gold, time, details)
|
|
VALUES (0, ?, 'Registration bonus Gold', ?, ?, ?)"
|
|
);
|
|
if ($stmt) {
|
|
$stmt->bind_param("iiis", $id, $amount, $now, $details);
|
|
$stmt->execute();
|
|
$stmt->close();
|
|
}
|
|
} catch (\Throwable $e) {
|
|
// swallow: logging must never block account creation
|
|
}
|
|
}
|
|
}
|
|
|
|
function activate($username, $password, $email, $tribe, $locate, $act, $act2) {
|
|
$username = trim($username);
|
|
$email = filter_var($email, FILTER_VALIDATE_EMAIL) ?: '';
|
|
$tribe = (int)$tribe;
|
|
$locate = (int)$locate;
|
|
$time = time();
|
|
$access = USER;
|
|
|
|
$stmt = $this->dblink->prepare(
|
|
"INSERT INTO `".TB_PREFIX."activate`
|
|
(username,password,access,email,tribe,timestamp,location,act,act2)
|
|
VALUES (?,?,?,?,?,?,?,?,?)"
|
|
);
|
|
$stmt->bind_param("ssisiiiss", $username, $password, $access, $email, $tribe, $time, $locate, $act, $act2);
|
|
|
|
if($stmt->execute()){
|
|
$id = $stmt->insert_id;
|
|
$stmt->close();
|
|
return $id;
|
|
}
|
|
$stmt->close();
|
|
return false;
|
|
}
|
|
|
|
function unreg($username) {
|
|
list($username) = $this->escape_input($username);
|
|
|
|
$q = "DELETE from " . TB_PREFIX . "activate where username = '$username'";
|
|
return mysqli_query($this->dblink,$q);
|
|
}
|
|
|
|
/**
|
|
* IP ban lookup (issue #185).
|
|
* Returns the active ban row for the given packed binary IP, or false.
|
|
* Uses a prepared statement and tolerates the table not existing yet
|
|
* (older installs): in that case it simply reports "not banned".
|
|
*
|
|
* @param string $ipBinary Packed IP (inet_pton output), 4 or 16 bytes.
|
|
* @return array|false
|
|
*/
|
|
function ipBanActive($ipBinary) {
|
|
if (!is_string($ipBinary) || $ipBinary === '') {
|
|
return false;
|
|
}
|
|
try {
|
|
$now = time();
|
|
$stmt = $this->dblink->prepare(
|
|
"SELECT id, ip_text, reason, end FROM `".TB_PREFIX."banlist_ip`
|
|
WHERE ip = ? AND active = 1 AND (end IS NULL OR end = 0 OR end > ?) LIMIT 1"
|
|
);
|
|
if (!$stmt) {
|
|
return false; // table missing / prepare failed (non-throwing mysqli)
|
|
}
|
|
$stmt->bind_param("si", $ipBinary, $now);
|
|
$stmt->execute();
|
|
$res = $stmt->get_result();
|
|
$row = $res ? $res->fetch_assoc() : null;
|
|
$stmt->close();
|
|
return $row ?: false;
|
|
} catch (\Throwable $e) {
|
|
return false; // table missing (throwing mysqli) → treat as not banned
|
|
}
|
|
}
|
|
|
|
// no need to cache this method
|
|
public function hasBeginnerProtection($vid) {
|
|
list($vid) = $this->escape_input($vid);
|
|
$q = "SELECT u.protect FROM ".TB_PREFIX."users u,".TB_PREFIX."vdata v WHERE u.id=v.owner AND v.wref=".(int) $vid." LIMIT 1";
|
|
$result = mysqli_query($this->dblink,$q);
|
|
$dbarray = mysqli_fetch_array($result);
|
|
if(!empty($dbarray)) {
|
|
if(time()<$dbarray[0]) {
|
|
return true;
|
|
} else {
|
|
return false;
|
|
}
|
|
} else {
|
|
return false;
|
|
}
|
|
}
|
|
|
|
function updateUserField($ref, $field, $value, $switch) {
|
|
list($ref) = $this->escape_input($ref);
|
|
|
|
if (!is_array($field)) {
|
|
$field = [$field];
|
|
$value = [$value];
|
|
}
|
|
|
|
$pairs = [];
|
|
foreach ($field as $i => $f) {
|
|
$pairs[] = $this->escape($f) . ' = ' . (is_numeric($value[$i]) ? $value[$i] : "'".$this->escape($value[$i])."'");
|
|
}
|
|
|
|
$q = !$switch
|
|
? "UPDATE ".TB_PREFIX."users SET ".implode(', ', $pairs)." WHERE username = '$ref'"
|
|
: "UPDATE ".TB_PREFIX."users SET ".implode(', ', $pairs)." WHERE id = ".(int)$ref;
|
|
|
|
$ret = mysqli_query($this->dblink, $q);
|
|
|
|
// === FIX CACHE - ștergem tot ce ține de user ===
|
|
$uid = $switch ? (int)$ref : (int)$this->getUserField($ref, 'id', 0, false);
|
|
|
|
// 1. cache-ul de fields
|
|
unset(self::$fieldsCache[$uid.'0'], self::$fieldsCache[$uid.'1']);
|
|
unset(self::$fieldsCache[$ref.'0'], self::$fieldsCache[$ref.'1']);
|
|
|
|
// 2. cache-ul de query-uri
|
|
$this->clearQueryCache('userarray');
|
|
$this->clearQueryCache('getUser');
|
|
|
|
// 3. forțăm și sesiunea dacă e userul curent
|
|
global $session;
|
|
if (isset($session) && $session->uid == $uid && in_array('alliance', (array)$field)) {
|
|
$idx = array_search('alliance', (array)$field);
|
|
$session->alliance = $value[$idx];
|
|
$session->userinfo['alliance'] = $value[$idx];
|
|
}
|
|
|
|
return $ret;
|
|
}
|
|
|
|
// no need to cache this method
|
|
function getSitee($uid) {
|
|
list($uid) = $this->escape_input((int) $uid);
|
|
|
|
$q = "SELECT id from " . TB_PREFIX . "users where sit1 = $uid or sit2 = $uid";
|
|
$result = mysqli_query($this->dblink,$q);
|
|
return $this->mysqli_fetch_all($result);
|
|
}
|
|
|
|
function removeMeSit($uid, $uid2) {
|
|
list($uid, $uid2) = $this->escape_input((int) $uid, (int) $uid2);
|
|
|
|
$q = "UPDATE " . TB_PREFIX . "users set sit1 = 0 where id = $uid and sit1 = $uid2";
|
|
mysqli_query($this->dblink,$q);
|
|
$q2 = "UPDATE " . TB_PREFIX . "users set sit2 = 0 where id = $uid and sit2 = $uid2";
|
|
mysqli_query($this->dblink,$q2);
|
|
}
|
|
|
|
function getUserField($ref, $field, $mode, $use_cache = true) {
|
|
// update for Multihunter's username and ID
|
|
if (($mode && $ref == '') || (!$mode && $ref == 0)) {
|
|
$ref = 'Multihunter';
|
|
$mode = 1;
|
|
}
|
|
|
|
// return all data, don't waste time by selecting fields one by one
|
|
$userArray = $this->getUserArray($ref, ($mode ? 0 : 1), $use_cache);
|
|
$result = (isset($userArray[$field]) ? $userArray[$field] : null);
|
|
|
|
if ($result) {
|
|
// will return the result
|
|
} elseif($field=="username") {
|
|
$result = "[?]";
|
|
} else {
|
|
$result = 0;
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
|
|
function getUserFields($ref, $fields, $mode, $use_cache = true) {
|
|
// update for Multihunter's username and ID
|
|
if (($mode && $ref == '') || (!$mode && $ref == 0)) {
|
|
$ref = 'Multihunter';
|
|
$mode = 1;
|
|
}
|
|
|
|
// return all data, don't waste time by selecting fields one by one
|
|
return $this->getUserArray($ref, ($mode ? 0 : 1), $use_cache);
|
|
}
|
|
|
|
// no need to cache this method
|
|
function getInvitedUser($uid) {
|
|
list($uid) = $this->escape_input((int) $uid);
|
|
|
|
$q = "SELECT * FROM " . TB_PREFIX . "users where invited = $uid order by regtime desc";
|
|
$result = mysqli_query($this->dblink,$q);
|
|
return $this->mysqli_fetch_all($result);
|
|
}
|
|
|
|
// no need to cache this method
|
|
function getActivateField($ref, $field, $mode) {
|
|
list($ref, $field, $mode) = $this->escape_input($ref, $field, $mode);
|
|
|
|
if(!$mode) {
|
|
$q = "SELECT $field FROM " . TB_PREFIX . "activate where id = " . (int) $ref . " LIMIT 1";
|
|
} else {
|
|
$q = "SELECT $field FROM " . TB_PREFIX . "activate where username = '$ref' LIMIT 1";
|
|
}
|
|
$result = mysqli_query($this->dblink,$q);
|
|
$dbarray = mysqli_fetch_array($result);
|
|
return $dbarray[$field];
|
|
}
|
|
|
|
function login($username, $password) {
|
|
static $cachedResult = null;
|
|
|
|
if ($cachedResult !== null) {
|
|
return $cachedResult;
|
|
}
|
|
|
|
list($username, $password) = $this->escape_input($username, $password);
|
|
$q = "SELECT id,password,sessid,is_bcrypt FROM " . TB_PREFIX . "users where username = '$username'";
|
|
$result = mysqli_query($this->dblink,$q);
|
|
|
|
// if we didn't update the database for bcrypt hashes yet...
|
|
if (mysqli_error($this->dblink) != '') {
|
|
$q = "SELECT id, password,sessid,0 as is_bcrypt FROM " . TB_PREFIX . "users where username = '$username' LIMIT 1";
|
|
$result = mysqli_query($this->dblink,$q);
|
|
$bcrypt_update_done = false;
|
|
} else {
|
|
$bcrypt_update_done = true;
|
|
}
|
|
|
|
$dbarray = mysqli_fetch_array($result);
|
|
|
|
// even if we didn't do a DB conversion for bcrypt passwords,
|
|
// we still need to check if this password wasn't encrypted via password_hash,
|
|
// since all methods were updated to use that instead of md5 and therefore
|
|
// new passwords in DB will be bcrypt already even without the is_bcrypt field present
|
|
$bcrypted = true;
|
|
$pwOk = password_verify($password, $dbarray['password']);
|
|
|
|
if (!$pwOk && !$dbarray['is_bcrypt']) {
|
|
$pwOk = ($dbarray['password'] == md5($password));
|
|
$bcrypted = false;
|
|
}
|
|
|
|
if($pwOk) {
|
|
// update password to bcrypt, if correct
|
|
if (!$dbarray['is_bcrypt'] && !$bcrypted) {
|
|
mysqli_query($this->dblink, "UPDATE " . TB_PREFIX . "users SET password = '".password_hash($password, PASSWORD_BCRYPT,['cost' => 12])."'".($bcrypt_update_done ? ', is_bcrypt = 1' : '')." where id = ".(int) $dbarray['id']);
|
|
}
|
|
$cachedResult = true;
|
|
} else {
|
|
$cachedResult = false;
|
|
}
|
|
|
|
return $cachedResult;
|
|
}
|
|
|
|
function sitterLogin($username, $password) {
|
|
list($username, $password) = $this->escape_input($username, $password);
|
|
|
|
$q = "SELECT sit1,sit2 FROM " . TB_PREFIX . "users where username = '$username' and access != " . BANNED ." LIMIT 1";
|
|
$result = mysqli_query($this->dblink,$q);
|
|
$dbarray = mysqli_fetch_array($result);
|
|
if($dbarray['sit1'] != 0) {
|
|
$q2 = "SELECT password FROM " . TB_PREFIX . "users where id = " . (int) $dbarray['sit1'] . " and access != " . BANNED . " LIMIT 1";
|
|
$result2 = mysqli_query($this->dblink,$q2);
|
|
$dbarray2 = mysqli_fetch_array($result2);
|
|
}
|
|
if($dbarray['sit2'] != 0) {
|
|
$q3 = "SELECT password FROM " . TB_PREFIX . "users where id = " . (int) $dbarray['sit2'] . " and access != " . BANNED . " LIMIT 1";
|
|
$result3 = mysqli_query($this->dblink,$q3);
|
|
$dbarray3 = mysqli_fetch_array($result3);
|
|
}
|
|
if($dbarray['sit1'] != 0 || $dbarray['sit2'] != 0) {
|
|
if(password_verify($password, $dbarray2['password']) || password_verify($password, $dbarray3['password'])) {
|
|
return true;
|
|
} else {
|
|
return false;
|
|
}
|
|
} else {
|
|
return false;
|
|
}
|
|
}
|
|
|
|
function setDeleting($uid, $mode) {
|
|
list($uid, $mode) = $this->escape_input((int) $uid, $mode);
|
|
|
|
$time = time() + 72 * 3600;
|
|
if(!$mode) {
|
|
$q = "INSERT into " . TB_PREFIX . "deleting values ($uid,$time)";
|
|
} else {
|
|
$q = "DELETE FROM " . TB_PREFIX . "deleting where uid = $uid";
|
|
}
|
|
mysqli_query($this->dblink,$q);
|
|
}
|
|
|
|
function isDeleting($uid) {
|
|
list($uid) = $this->escape_input((int) $uid);
|
|
|
|
$q = "SELECT timestamp from " . TB_PREFIX . "deleting where uid = $uid LIMIT 1";
|
|
$result = mysqli_query($this->dblink,$q);
|
|
$dbarray = mysqli_fetch_array($result);
|
|
return isset($dbarray['timestamp']) ? (int)$dbarray['timestamp'] : 0;
|
|
}
|
|
|
|
function modifyGold($userid, $amt, $mode) {
|
|
list($userid, $amt, $mode) = $this->escape_input((int) $userid, (int) $amt, $mode);
|
|
|
|
if(!$mode) $q = "UPDATE " . TB_PREFIX . "users set gold = gold - $amt where id = $userid";
|
|
else $q = "UPDATE " . TB_PREFIX . "users set gold = gold + $amt where id = $userid";
|
|
|
|
return mysqli_query($this->dblink,$q);
|
|
}
|
|
|
|
/**
|
|
* Retrieves the user array via Username or ID
|
|
*
|
|
* @param int $ref The user ID or the username
|
|
* @param int $mode 0 --> Search by username, 1 --> Search by user ID
|
|
* @param bool $use_cache Will use the cache if true
|
|
* @return array Returns the user array
|
|
*/
|
|
|
|
function getUserArray($ref, $mode, $use_cache = true) {
|
|
list($ref, $mode) = $this->escape_input($ref, $mode);
|
|
|
|
// first of all, check if we should be using cache and whether the field
|
|
// required is already cached
|
|
if ($use_cache && ($cachedValue = self::returnCachedContent(self::$fieldsCache, $ref.$mode)) && !is_null($cachedValue)) {
|
|
return $cachedValue;
|
|
}
|
|
|
|
if(!$mode) $q = "SELECT * FROM " . TB_PREFIX . "users where username = '$ref' LIMIT 1";
|
|
else $q = "SELECT * FROM " . TB_PREFIX . "users where id = " . (int) $ref . " LIMIT 1";
|
|
|
|
$result = mysqli_query($this->dblink,$q);
|
|
|
|
self::$fieldsCache[$ref.$mode] = mysqli_fetch_array($result);
|
|
return self::$fieldsCache[$ref.$mode];
|
|
}
|
|
|
|
function activeModify($username, $mode) {
|
|
list($username, $mode) = $this->escape_input($username, $mode);
|
|
|
|
$time = time();
|
|
if(!$mode) {
|
|
$q = "INSERT into " . TB_PREFIX . "active VALUES ('$username',$time)";
|
|
} else {
|
|
$q = "DELETE FROM " . TB_PREFIX . "active where username = '$username'";
|
|
}
|
|
return mysqli_query($this->dblink,$q);
|
|
}
|
|
|
|
function addActiveUser($username, $time) {
|
|
list($username, $time) = $this->escape_input($username, $time);
|
|
|
|
$q = "REPLACE into " . TB_PREFIX . "active values ('$username',$time)";
|
|
if(mysqli_query($this->dblink,$q)) {
|
|
return true;
|
|
} else {
|
|
return false;
|
|
}
|
|
}
|
|
|
|
function updateActiveUser($username, $time) {
|
|
static $updated = false;
|
|
|
|
if ($updated) {
|
|
return;
|
|
}
|
|
|
|
list($username, $time) = $this->escape_input($username, $time);
|
|
|
|
$res1 = $this->addActiveUser($username, $time);
|
|
$q = "UPDATE " . TB_PREFIX . "users set timestamp = $time where username = '$username'";
|
|
$res2 = mysqli_query($this->dblink,$q);
|
|
if($res1 && $res2) {
|
|
$updated = true;
|
|
return true;
|
|
} else {
|
|
return false;
|
|
}
|
|
}
|
|
|
|
function submitProfile($uid, $gender, $location, $birthday, $desc1, $desc2) {
|
|
$uid = (int)$uid;
|
|
$gender = (int)$gender;
|
|
$location = mb_substr(trim($location), 0, 30, 'UTF-8');
|
|
$birthday = trim($birthday);
|
|
// Issue #250: cap profile descriptions (BBCode is rendered as HTML on
|
|
// display) so a single field cannot store an oversized payload.
|
|
$desc1 = mb_substr(trim($desc1), 0, 3000, 'UTF-8');
|
|
$desc2 = mb_substr(trim($desc2), 0, 3000, 'UTF-8');
|
|
|
|
$stmt = $this->dblink->prepare(
|
|
"UPDATE `".TB_PREFIX."users`
|
|
SET gender = ?, location = ?, birthday = ?, desc1 = ?, desc2 = ?
|
|
WHERE id = ? LIMIT 1"
|
|
);
|
|
$stmt->bind_param("issssi", $gender, $location, $birthday, $desc1, $desc2, $uid);
|
|
$stmt->execute();
|
|
$stmt->close();
|
|
return true;
|
|
}
|
|
|
|
function gpack($uid, $gpack) {
|
|
list($uid, $gpack) = $this->escape_input((int) $uid, $gpack);
|
|
|
|
$q = "UPDATE " . TB_PREFIX . "users set gpack = '$gpack' where id = $uid";
|
|
return mysqli_query($this->dblink,$q);
|
|
}
|
|
|
|
// no need to cache this method
|
|
function GetOnline($uid) {
|
|
list($uid) = $this->escape_input((int) $uid);
|
|
|
|
$q = "SELECT sit FROM " . TB_PREFIX . "online WHERE uid = $uid LIMIT 1";
|
|
$result = mysqli_query($this->dblink,$q);
|
|
$dbarray = mysqli_fetch_array($result);
|
|
return $dbarray['sit'];
|
|
}
|
|
|
|
function UpdateOnline($mode, $name = "", $time = "", $uid = 0) {
|
|
list($mode, $name, $time, $uid) = $this->escape_input($mode, $name, $time, (int) $uid);
|
|
|
|
global $session;
|
|
if($mode == "login") {
|
|
$q = "INSERT IGNORE INTO " . TB_PREFIX . "online (name, uid, time, sit) VALUES ('$name', $uid, '" . time() . "', 0)";
|
|
return mysqli_query($this->dblink,$q);
|
|
} else if($mode == "sitter") {
|
|
$q = "INSERT IGNORE INTO " . TB_PREFIX . "online (name, uid, time, sit) VALUES ('$name', $uid, '" . time() . "', 1)";
|
|
return mysqli_query($this->dblink,$q);
|
|
} else {
|
|
$q = "DELETE FROM " . TB_PREFIX . "online WHERE name ='" . $this->escape($session->username) . "'";
|
|
return mysqli_query($this->dblink,$q);
|
|
}
|
|
}
|
|
|
|
// no need to cache this method
|
|
function getNeedDelete() {
|
|
$time = time();
|
|
$q = "SELECT uid FROM " . TB_PREFIX . "deleting where timestamp < $time";
|
|
$result = mysqli_query($this->dblink,$q);
|
|
return $this->mysqli_fetch_all($result);
|
|
}
|
|
|
|
// no need to cache this method
|
|
function getLinks($id) {
|
|
list($id) = $this->escape_input((int) $id);
|
|
$q = 'SELECT * FROM `' . TB_PREFIX . 'links` WHERE `userid` = ' . $id . ' ORDER BY `pos` ASC';
|
|
return mysqli_query($this->dblink,$q);
|
|
}
|
|
|
|
function removeLinks($id,$uid) {
|
|
list($id,$uid) = $this->escape_input((int) $id,(int) $uid);
|
|
$q = "DELETE FROM " . TB_PREFIX . "links WHERE `id` = ".$id." and `userid` = ".$uid;
|
|
return mysqli_query($this->dblink,$q);
|
|
}
|
|
|
|
function addPassword($uid, $npw, $cpw) {
|
|
list($uid, $npw, $cpw) = $this->escape_input((int) $uid, $npw, $cpw);
|
|
$q = "REPLACE INTO `" . TB_PREFIX . "password`(uid, npw, cpw) VALUES ($uid, '$npw', '$cpw')";
|
|
mysqli_query($this->dblink,$q);
|
|
}
|
|
|
|
function resetPassword($uid, $cpw) {
|
|
list($uid, $cpw) = $this->escape_input((int) $uid, $cpw);
|
|
$q = "SELECT npw FROM `" . TB_PREFIX . "password` WHERE uid = $uid AND cpw = '$cpw' AND used = 0 LIMIT 1";
|
|
$result = mysqli_query($this->dblink,$q);
|
|
$dbarray = mysqli_fetch_array($result);
|
|
|
|
if(!empty($dbarray)) {
|
|
if(!$this->updateUserField($uid, 'password', password_hash($dbarray['npw'], PASSWORD_BCRYPT,['cost' => 12]), 1)) return false;
|
|
$q = "UPDATE `" . TB_PREFIX . "password` SET used = 1 WHERE uid = $uid AND cpw = '$cpw' AND used = 0";
|
|
mysqli_query($this->dblink,$q);
|
|
return true;
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
//end general statistics
|
|
|
|
function addFriend($uid, $column, $friend) {
|
|
list($uid, $column, $friend) = $this->escape_input((int) $uid, $column, (int) $friend);
|
|
|
|
$q = "UPDATE " . TB_PREFIX . "users SET $column = $friend WHERE id = $uid";
|
|
return mysqli_query($this->dblink,$q);
|
|
}
|
|
|
|
function deleteFriend($uid, $column) {
|
|
list($uid, $column) = $this->escape_input((int) $uid, $column);
|
|
|
|
$q = "UPDATE " . TB_PREFIX . "users SET $column = 0 WHERE id = $uid";
|
|
return mysqli_query($this->dblink,$q);
|
|
}
|
|
|
|
// no need to cache this method
|
|
function checkFriends($uid) {
|
|
list($uid) = $this->escape_input($uid);
|
|
global $session;
|
|
|
|
$user = $this->getUserArray($uid, 1);
|
|
for($i = 0; $i <= 19; $i++){
|
|
if($user['friend'.$i] == 0 && $user['friend'.$i.'wait'] == 0){
|
|
for($j = $i + 1; $j <= 19; $j++){
|
|
$k = $j - 1;
|
|
if($user['friend'.$j] != 0){
|
|
$friend = $this->getUserField($uid, "friend".$j, 0);
|
|
$this->addFriend($uid, "friend".$k, $friend);
|
|
$this->deleteFriend($uid, "friend".$j);
|
|
}
|
|
|
|
if($user['friend'.$j.'wait'] == 0){
|
|
$friendwait = $this->getUserField($uid, "friend".$j."wait", 0);
|
|
$this->addFriend($session->uid, "friend".$k."wait", $friendwait);
|
|
$this->deleteFriend($uid, "friend".$j."wait");
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
/*****************************************
|
|
Function to vacation mode - by advocaite
|
|
References:
|
|
*****************************************/
|
|
|
|
function setvacmode($uid, $days) {
|
|
// TODO: refactor vacation mode
|
|
list ($uid, $days) = $this->escape_input((int) $uid, (int) $days);
|
|
$days1 = 60 * 60 * 24 * $days;
|
|
$time = time() + $days1;
|
|
$q = "UPDATE " . TB_PREFIX . "users SET vac_mode = '1' , vac_time=" . $time . " WHERE id=" . $uid . "";
|
|
$result = mysqli_query($this->dblink, $q);
|
|
return;
|
|
}
|
|
|
|
function removevacationmode($uid){
|
|
// TODO: refactor vacation mode
|
|
list ($uid) = $this->escape_input((int) $uid);
|
|
$q = "UPDATE " . TB_PREFIX . "users SET vac_mode = '0' , vac_time='0' WHERE id=" . $uid . "";
|
|
$result = mysqli_query($this->dblink, $q);
|
|
return;
|
|
}
|
|
|
|
function getvacmodexy($wref){
|
|
// TODO: refactor vacation mode
|
|
list ($wref) = $this->escape_input((int) $wref);
|
|
$q = "SELECT id,oasistype,occupied FROM " . TB_PREFIX . "wdata where id = $wref";
|
|
$result = mysqli_query($this->dblink, $q);
|
|
$dbarray = mysqli_fetch_array($result);
|
|
if ($dbarray['occupied'] != 0 && $dbarray['oasistype'] == 0) {
|
|
$q1 = "SELECT owner FROM " . TB_PREFIX . "vdata where wref = " . (int) $dbarray['id'] . "";
|
|
$result1 = mysqli_query($this->dblink, $q1);
|
|
$dbarray1 = mysqli_fetch_array($result1);
|
|
if ($dbarray1['owner'] != 0) {
|
|
$q2 = "SELECT vac_mode,vac_time FROM " . TB_PREFIX . "users where id = " . (int) $dbarray1['owner'] . "";
|
|
$result2 = mysqli_query($this->dblink, $q2);
|
|
$dbarray2 = mysqli_fetch_array($result2);
|
|
return $dbarray2['vac_mode'] == 1;
|
|
}
|
|
}
|
|
else
|
|
return
|
|
false;
|
|
}
|
|
|
|
/*****************************************
|
|
Function to vacation mode
|
|
Remake & Refactor: Shadow
|
|
*****************************************/
|
|
|
|
function checkVacationRequirements(int $uid): array|bool{
|
|
$uid = (int)$uid;
|
|
$now = time();
|
|
$errors = [];
|
|
|
|
// HELPERS : returns true if it finds rows
|
|
$exists = function(string $sql, array $params = []) {
|
|
$stmt = mysqli_prepare($this->dblink, $sql);
|
|
if ($params) {
|
|
$types = str_repeat('i', count($params));
|
|
mysqli_stmt_bind_param($stmt, $types, ...$params);
|
|
}
|
|
mysqli_stmt_execute($stmt);
|
|
mysqli_stmt_store_result($stmt);
|
|
$found = mysqli_stmt_num_rows($stmt) > 0;
|
|
mysqli_stmt_close($stmt);
|
|
return $found;
|
|
};
|
|
|
|
// HELPERS : returns a single field
|
|
$fetchOne = function(string $sql, array $params = []) {
|
|
$stmt = mysqli_prepare($this->dblink, $sql);
|
|
if ($params) {
|
|
$types = str_repeat('i', count($params));
|
|
mysqli_stmt_bind_param($stmt, $types, ...$params);
|
|
}
|
|
mysqli_stmt_execute($stmt);
|
|
$res = mysqli_stmt_get_result($stmt);
|
|
$row = mysqli_fetch_assoc($res);
|
|
mysqli_stmt_close($stmt);
|
|
return $row;
|
|
};
|
|
|
|
// 1. TROOPS MOVING
|
|
$sql = "SELECT 1 FROM ".TB_PREFIX."movement m
|
|
JOIN ".TB_PREFIX."vdata v ON v.wref = m.from
|
|
WHERE v.owner=? AND m.proc=0 AND m.endtime>? AND m.sort_type=3 LIMIT 1";
|
|
if ($exists($sql, [$uid, $now])) $errors[] = "TROOPS_MOVING";
|
|
|
|
// 2. INCOMING TROOPS
|
|
$sql = "SELECT 1 FROM ".TB_PREFIX."movement m
|
|
JOIN ".TB_PREFIX."vdata v ON v.wref = m.to
|
|
WHERE v.owner=? AND m.proc=0 AND m.endtime>? AND m.sort_type IN (3,4) LIMIT 1";
|
|
if ($exists($sql, [$uid, $now])) $errors[] = "INCOMING_TROOPS";
|
|
|
|
// 3. REINFORCEMENTS
|
|
$sql = "SELECT 1 FROM ".TB_PREFIX."enforcement e
|
|
WHERE (e.from IN (SELECT wref FROM ".TB_PREFIX."vdata WHERE owner=?)
|
|
OR e.vref IN (SELECT wref FROM ".TB_PREFIX."vdata WHERE owner=?))
|
|
AND (e.u1+e.u2+e.u3+e.u4+e.u5+e.u6+e.u7+e.u8+e.u9+e.u10+
|
|
e.u11+e.u12+e.u13+e.u14+e.u15+e.u16+e.u17+e.u18+e.u19+e.u20+
|
|
e.u21+e.u22+e.u23+e.u24+e.u25+e.u26+e.u27+e.u28+e.u29+e.u30+
|
|
e.u41+e.u42+e.u43+e.u44+e.u45+e.u46+e.u47+e.u48+e.u49+e.u50) > 0
|
|
LIMIT 1";
|
|
if ($exists($sql, [$uid, $uid])) $errors[] = "REINFORCEMENTS";
|
|
|
|
// 4. WONDER WORLD
|
|
$sql = "SELECT 1 FROM ".TB_PREFIX."fdata f
|
|
JOIN ".TB_PREFIX."vdata v ON v.wref=f.vref
|
|
WHERE v.owner=? AND f.f99t=40 LIMIT 1";
|
|
if ($exists($sql, [$uid])) $errors[] = "WW";
|
|
|
|
// 5. ARTEFACTS
|
|
$sql = "SELECT 1 FROM ".TB_PREFIX."artefacts WHERE owner=? LIMIT 1";
|
|
if ($exists($sql, [$uid])) $errors[] = "ARTEFACTS";
|
|
|
|
// 6 + 10. PROTECTION + ADMIN or MULTIHUNTER
|
|
$user = $fetchOne("SELECT protect, access FROM ".TB_PREFIX."users WHERE id=?", [$uid]);
|
|
if ($user) {
|
|
if ((int)$user['protect'] > $now) $errors[] = "PROTECTION";
|
|
if (in_array((int)$user['access'], [8,9])) $errors[] = "NO_VACATION_ACCESS";
|
|
}
|
|
|
|
// 7. PRISONERS IN & OUT (Enemy troops trapped in your villages & Your troops trapped in enemy villages)
|
|
$sqlIn = "SELECT 1 FROM ".TB_PREFIX."prisoners p
|
|
JOIN ".TB_PREFIX."vdata v ON v.wref=p.wref
|
|
WHERE v.owner=? LIMIT 1";
|
|
if ($exists($sqlIn, [$uid])) $errors[] = "PRISONERS_IN";
|
|
|
|
$sqlOut = "SELECT 1 FROM ".TB_PREFIX."prisoners p
|
|
JOIN ".TB_PREFIX."vdata v ON v.wref=p.from
|
|
WHERE v.owner=? LIMIT 1";
|
|
if ($exists($sqlOut, [$uid])) $errors[] = "PRISONERS_OUT";
|
|
|
|
// 8. MARKETPLACE MOVING
|
|
$sql = "SELECT 1 FROM ".TB_PREFIX."movement m
|
|
JOIN ".TB_PREFIX."vdata v ON v.wref=m.from
|
|
WHERE v.owner=? AND m.proc=0 AND m.endtime>? AND m.sort_type=0 LIMIT 1";
|
|
if ($exists($sql, [$uid, $now])) $errors[] = "MARKET";
|
|
|
|
// 9. ACCOUNT DELETION
|
|
$del = $fetchOne("SELECT timestamp FROM ".TB_PREFIX."deleting WHERE uid=?", [$uid]);
|
|
if (!empty($del['timestamp']) && $del['timestamp'] > $now) {
|
|
$errors[] = "ACCOUNT_DELETION";
|
|
}
|
|
return empty($errors) ? true : $errors;
|
|
}
|
|
}
|