xinyin025/TravianZ
1
0
Fork 0
mirror of https://github.com/Shadowss/TravianZ.git synced 2026-06-28 08:34:33 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
v10-full-refactor
TravianZ/GameEngine/Session.php
T
novgorodschi catalin 05bfde9063 Remove some unused code and some fix 
Remove some unused code and some fix
2026-05-21 13:12:21 +03:00

474 lines
14 KiB
PHP
Executable File
Raw Permalink Blame History

<?php
#################################################################################
## -= YOU MAY NOT REMOVE OR CHANGE THIS NOTICE =- ##
## --------------------------------------------------------------------------- ##
## Project: TravianZ ##
## Version: 13.05.2026 ##
## Filename Session.php ##
## Developed by: Dzoki ##
## Refactor by: Shadow ##
## License: TravianZ Project ##
## Copyright: TravianZ (c) 2010-2026. All rights reserved. ##
## URLs: https://travianz.org ##
## https://github.com/Shadowss/TravianZ ##
## ##
#################################################################################
use App\Entity\User;
ob_start();
mb_internal_encoding("UTF-8");
global $autoprefix;
/**
* Auto-detect root path (max 5 levels up)
*/
$autoprefix = '';
for ($i = 0; $i < 5; $i++) {
$autoprefix = str_repeat('../', $i);
if (file_exists($autoprefix . 'autoloader.php')) {
break;
}
}
if (!file_exists($autoprefix . 'GameEngine/config.php')) {
header("Location: install/");
exit;
}
$script_name = ($_SERVER['REQUEST_URI'] == 'karte.php') ? 'karte' : $_SERVER['REQUEST_URI'];
include_once("Battle.php");
include_once("Data/buidata.php");
include_once("Data/cp.php");
include_once("Data/cel.php");
include_once("Data/resdata.php");
include_once("Data/unitdata.php");
include_once("Data/hero_full.php");
include_once("config.php");
include_once("Database.php");
include_once("Mailer.php");
include_once("Form.php");
include_once("Generator.php");
include_once("Multisort.php");
include_once("Ranking.php");
include_once("Lang/" . LANG . ".php");
include_once("Logging.php");
include_once("Message.php");
include_once("Alliance.php");
include_once("Profile.php");
class Session {
private $time;
private $populated = false;
var $logged_in = false;
var $referrer, $url;
var $username, $uid, $access, $plus, $tribe, $isAdmin, $alliance, $gold, $oldrank, $gpack, $goldclub;
var $bonus = 0;
var $bonus1 = 0;
var $bonus2 = 0;
var $bonus3 = 0;
var $bonus4 = 0;
var $timer = 0;
var $sharedForums = [];
var $checker, $mchecker;
public $userinfo = [];
private $userarray = [];
var $villages = [];
var $sit;
var $sit1;
var $sit2;
var $cp;
function __construct() {
global $database;
$this->time = time();
if (!isset($_SESSION)) {
session_start();
}
$this->logged_in = $this->checkLogin();
if ($this->logged_in && TRACK_USR) {
$database->updateActiveUser($this->username, $this->time);
}
$this->referrer = $_SESSION['url'] ?? "/";
$this->url = $_SESSION['url'] = $_SERVER['PHP_SELF'];
$this->SurfControl();
}
/**
* LOGIN USER
*/
public function Login($user) {
global $database, $generator, $logging;
$this->logged_in = true;
$_SESSION['sessid'] = $generator->generateRandID();
$_SESSION['username'] = $user;
$user_sanitized = $database->escape($user);
$_SESSION['checker'] = $generator->generateRandStr(3);
$_SESSION['mchecker'] = $generator->generateRandStr(5);
$userFields = $database->getUserFields($user_sanitized, "quest, id", 1, true);
$_SESSION['qst'] = $userFields["quest"];
$dbarray = $database->getUserFields($user_sanitized, 'id, village_select', 1);
$selected_village = (int)$dbarray['village_select'];
if ($dbarray['id'] > 1) {
if (!isset($_SESSION['wid']) || empty($_SESSION['wid'])) {
if (!empty($selected_village)) {
$data = $database->getVillage($selected_village);
} else {
$data = $database->getVillage($userFields["id"]);
}
$_SESSION['wid'] = $data['wref'];
}
$this->logged_in = true;
$this->PopulateVar(); // only once, controlled by flag
$database->updateActiveUser($user_sanitized, $this->time);
$database->updateUserField($user_sanitized, "sessid", $_SESSION['sessid'], 0);
}
$logging->addLoginLog($dbarray['id'], $_SERVER['REMOTE_ADDR']);
if ($dbarray['id'] == 1) {
header("Location: nachrichten.php");
exit;
}
header("Location: dorf1.php");
exit;
}
/**
* LOGOUT
*/
public function Logout() {
global $database;
$this->logged_in = false;
$database->updateUserField($_SESSION['username'], "sessid", "", 0);
if (ini_get("session.use_cookies")) {
$params = session_get_cookie_params();
setcookie(session_name(), '', time() - 42000,
$params["path"], $params["domain"],
$params["secure"], $params["httponly"]
);
}
session_destroy();
session_start();
}
public function changeChecker() {
global $generator;
$this->checker = $_SESSION['checker'] = $generator->generateRandStr(3);
$this->mchecker = $_SESSION['mchecker'] = $generator->generateRandStr(5);
}
/**
* LOGIN CHECK
*/
private function checkLogin() {
global $database;
$user = '';
$admin = false;
$inAdmin = (strpos($_SERVER['REQUEST_URI'], '/Admin') !== false);
if (!$inAdmin && isset($_SESSION['username'])) {
$user = $_SESSION['username'];
} elseif ($inAdmin && isset($_SESSION['admin_username'])) {
$user = $_SESSION['admin_username'];
$admin = true;
}
if ($user && ($admin || isset($_SESSION['sessid']))) {
$this->maintenance();
$this->isWinner();
if ($user == 'Support') {
$req_file = basename($_SERVER['PHP_SELF']);
if (!in_array($req_file, [
'nachrichten.php', 'logout.php', 'statistiken.php',
'rules.php', 'karte.php', 'karte2.php', 'spieler.php'
])) {
header('Location: nachrichten.php');
exit;
}
}
if (!$this->logged_in) {
$this->PopulateVar();
}
$this->isBanned();
$database->updateActiveUser($user, $this->time);
return true;
}
return false;
}
function isBanned() {
if ($this->access == BANNED &&
!in_array(basename($_SERVER['PHP_SELF']), ['banned.php', 'nachrichten.php', 'rules.php'])) {
header('Location: banned.php');
exit;
}
}
function maintenance() {
if (($_SESSION['ok'] ?? null) == 2 &&
basename($_SERVER['PHP_SELF']) != 'maintenance.php') {
header('Location: maintenance.php');
exit;
}
}
/**
* FIXED: winner condition bug (safe parentheses + logic)
*/
function isWinner() {
global $database;
$requiredPage = basename($_SERVER['PHP_SELF']);
$idParam = isset($_GET['id']) ? (int)$_GET['id'] : 0;
if (
$database->isThereAWinner() &&
(
in_array($requiredPage, ['build.php', 'plus1.php']) ||
(
$requiredPage === 'plus.php' && $idParam >= 7
)
)
) {
header('Location: winner.php');
exit;
}
}
/**
* HERO CHECK (SAFE)
*/
function CheckHeroReal() {
global $database;
$villageIDs = implode(', ', $this->villages);
if (!count($this->villages)) {
$this->Logout();
header('Location: login.php');
exit;
}
$q = '
SELECT
IFNULL((SELECT SUM(hero) FROM ' . TB_PREFIX . 'enforcement WHERE `from` IN(' . $villageIDs . ')), 0) +
IFNULL((SELECT SUM(hero) FROM ' . TB_PREFIX . 'units WHERE `vref` IN(' . $villageIDs . ')), 0) +
IFNULL((SELECT SUM(t11) FROM ' . TB_PREFIX . 'prisoners WHERE `from` IN(' . $villageIDs . ')), 0) +
IFNULL((SELECT SUM(t11) FROM ' . TB_PREFIX . 'movement, ' . TB_PREFIX . 'attacks
WHERE ' . TB_PREFIX . 'movement.`from` IN(' . $villageIDs . ')
AND ' . TB_PREFIX . 'movement.ref = ' . TB_PREFIX . 'attacks.id
AND ' . TB_PREFIX . 'movement.proc = 0
AND ' . TB_PREFIX . 'movement.sort_type = 3), 0) +
IFNULL((SELECT SUM(t11) FROM ' . TB_PREFIX . 'movement, ' . TB_PREFIX . 'attacks
WHERE ' . TB_PREFIX . 'movement.`to` IN(' . $villageIDs . ')
AND ' . TB_PREFIX . 'movement.ref = ' . TB_PREFIX . 'attacks.id
AND ' . TB_PREFIX . 'movement.proc = 0
AND ' . TB_PREFIX . 'movement.sort_type = 4), 0)
AS herocount';
$heroUnitRegisters = mysqli_fetch_array(
mysqli_query($database->dblink, $q),
MYSQLI_ASSOC
)['herocount'];
$isHeroLivingOrRaising = $database->getHeroDeadReviveOrInTraining($this->uid);
if (!$heroUnitRegisters && $isHeroLivingOrRaising) {
$database->KillMyHero($this->uid);
}
}
/**
* POPULATE USER DATA
*/
private function PopulateVar() {
global $database;
// prevent double execution per request
if ($this->populated) {
return;
}
$this->populated = true;
// -----------------------------
// SIMPLE SESSION CACHE LAYER
// -----------------------------
$cacheKeyUser = 'cache_user_' . $_SESSION['username'];
$cacheKeyVillages = 'cache_villages_' . ($_SESSION['id_user'] ?? 0);
// TTL simplu (secunde)
$ttl = 30;
// USER CACHE
if (!isset($_SESSION[$cacheKeyUser]) || (time() - $_SESSION[$cacheKeyUser]['time'] > $ttl)) {
$_SESSION[$cacheKeyUser] = [
'time' => time(),
'data' => $database->getUserArray($_SESSION['username'], 0)
];
}
$this->userarray = $this->userinfo = $_SESSION[$cacheKeyUser]['data'];
$this->username = $this->userarray['username'];
$this->uid = $_SESSION['id_user'] = $this->userarray['id'];
$this->gpack = $this->userarray['gpack'];
$this->access = $this->userarray['access'];
$this->plus = ($this->userarray['plus'] > $this->time);
$this->goldclub = $this->userarray['goldclub'];
// VILLAGES CACHE
if (!isset($_SESSION[$cacheKeyVillages]) || (time() - $_SESSION[$cacheKeyVillages]['time'] > $ttl)) {
$_SESSION[$cacheKeyVillages] = [
'time' => time(),
'data' => $database->getVillagesID($this->uid)
];
}
$this->villages = $_SESSION[$cacheKeyVillages]['data'];
$this->tribe = $this->userarray['tribe'];
$this->isAdmin = $this->access >= MODERATOR;
$this->alliance = $_SESSION['alliance_user'] = $this->userarray['alliance'];
$this->checker = $_SESSION['checker'];
$this->mchecker = $_SESSION['mchecker'];
$this->sit = $database->GetOnline($this->uid);
$this->sit1 = $this->userarray['sit1'];
$this->sit2 = $this->userarray['sit2'];
$this->cp = floor($this->userarray['cp']);
$this->gold = $this->userarray['gold'];
$this->oldrank = $this->userarray['oldrank'];
$this->sharedForums = $database->getSharedForums($this->uid, $this->alliance);
$_SESSION['ok'] = $this->userarray['ok'];
if ($this->userarray['b1'] > $this->time) $this->bonus1 = 1;
if ($this->userarray['b2'] > $this->time) $this->bonus2 = 1;
if ($this->userarray['b3'] > $this->time) $this->bonus3 = 1;
if ($this->userarray['b4'] > $this->time) $this->bonus4 = 1;
if (!in_array($this->username, ['Support', 'Multihunter'])) {
$this->CheckHeroReal();
}
}
/**
* ATTACKS CACHE (SESSION)
*/
public function populateAttacks() {
global $database, $village;
$troopsMovement = $database->getMovement(3, $village->wid, 0);
if (count($troopsMovement) > 0) {
foreach ($troopsMovement as $movement) {
switch ($movement['attack_type']) {
case 1:
$_SESSION['troops_movement']['scouts'][] = $movement['to'];
break;
case 2:
$_SESSION['troops_movement']['enforcements'][] = $movement['to'];
break;
case 3:
case 4:
$_SESSION['troops_movement']['attacks'][] = $movement['to'];
break;
}
}
}
}
/**
* SURF CONTROL (ROUTING SAFE)
*/
private function SurfControl() {
$page = SERVER_WEB_ROOT
? $_SERVER['SCRIPT_NAME']
: basename($_SERVER['SCRIPT_NAME']);
$pagearray = [
"index.php", "anleitung.php", "tutorial.php",
"login.php", "activate.php", "anmelden.php", "xaccount.php"
];
if (!$this->logged_in) {
if (!in_array($page, $pagearray) || $page == "logout.php") {
header("Location: login.php");
exit;
}
} else {
if (in_array($page, $pagearray)) {
if (($this->uid ?? 0) == 1) {
header("Location: nachrichten.php");
exit;
}
header("Location: dorf1.php");
exit;
}
}
}
}
$session = new Session;
$form = new Form;
if (!empty($_SESSION['id_user'])) {
$message = new Message;
$user = new User((int)$_SESSION['id_user'], $database);
}
?>
Reference in New Issue View Git Blame Copy Permalink