\\/-]",$act) or ereg("[<>\\/-]",$school) or ereg("[<>\\/-]",$scroll) or ereg("[<>\\/-]",$param)) {print "?!"; exit();} $act=htmlspecialchars($act); $school=htmlspecialchars($school); $scroll=htmlspecialchars($scroll); $param=htmlspecialchars($param); $S="select * from characters where login='$param'"; $q=mysql_query($S); $res=mysql_fetch_array($q); $on1 = 0; $text =""; $chas = date("H"); $date = date("H:i", mktime($chas-$GSM)); $sss = mysql_query("SELECT * FROM online"); while($D = mysql_fetch_array($sss)){ if($D["login"] == $param){ $on1 = 1; } } $user_sql="SELECT * FROM characters WHERE login='$login'"; $user_q=mysql_query($user_sql); $user_dat=mysql_fetch_array($user_q); $shans = rand(0,100); if(!$res){ print""; die(); } if($res["travm"]==0){ print""; die(); } if(empty($ip)) { if (getenv('HTTP_X_FORWARDED_FOR')) { $ip=getenv('HTTP_X_FORWARDED_FOR'); } else { $ip=getenv('REMOTE_ADDR'); } } $SQL = mysql_query("UPDATE characters SET cast = cast+0.5,earth=earth+0.5 WHERE login='$login'"); $S = mysql_query("UPDATE inv SET iznos = iznos+1 WHERE id=$scroll"); $S_INV = mysql_query("SELECT * FROM inv WHERE id = $scroll"); $DATA = mysql_fetch_array($S_INV); $iznos = $DATA["iznos"]; $tear_max = $DATA["tear_max"]; $iznos_k = $iznos+1; if($iznos_k>=$tear_max){ $S_D = mysql_query("DELETE FROM inv WHERE id = $scroll"); } if($shans>50){ print""; die(); } $QUERY=mysql_query("SELECT * FROM characters WHERE login='$param'"); $data=mysql_fetch_array($QUERY); $o_stat = $data['travm_old_stat']; $t_stat = $data['travm_stat']; $SQ = mysql_query("UPDATE characters SET $t_stat='$o_stat',travm='0' WHERE login='$param'"); $pref=$user_dat["sex"]; if($pref=="female"){ $prefix="а"; } else{ $prefix=""; } if($user_dat["orden"]==2){$opr="Тарман";} else {$opr="Персонаж";} if ($user_dat["orden"]==1){$opr="Паладин";} $city = $user_dat["city_game"]; $time = time(); $room = $user_dat["room"]; $d=date("d.m.y H:i"); if($login!=$param){ $text = "от всех травм персонажа "$param""; } else{ $text = "себя от всех травм"; } $masseg= "$opr "$login" излечил$prefix $text."; mysql_query("INSERT INTO chat(date,name,room,msg,class,date_stamp,city) VALUES('$d','','$room','$masseg','sys','$time','$city')"); print""; } ?>