486 lines
18 KiB
PHP
486 lines
18 KiB
PHP
<?
|
||
session_start();
|
||
define('AntiBK', true);
|
||
|
||
include("engline/config.php");
|
||
include("engline/data.php");
|
||
include("engline/dbsimple/Generic.php");
|
||
include("engline/functions/functions.php");
|
||
include("engline/token/bootstrap.php");
|
||
|
||
$guid = getGuid('ajax');
|
||
|
||
if (!lpg_csrf_token($guid))
|
||
toIndex('ajax');
|
||
|
||
$adb = DbSimple_Generic::connect($database['adb']);
|
||
$adb->query("SET NAMES ? ",$database['db_encoding']);
|
||
$adb->setErrorHandler("databaseErrorHandler");
|
||
|
||
$char = Char::initialization($guid, $adb);
|
||
|
||
$char->test->Guid('ajax');
|
||
|
||
$char_db = $char->getChar('char_db', '*');
|
||
$char_stats = $char->getChar('char_stats', '*');
|
||
$char_feat = array_merge($char_db, $char_stats);
|
||
|
||
$lang = $char->getLang();
|
||
|
||
$login = $char_feat['login'];
|
||
$sex = $char_feat['sex'];
|
||
$mass = $char_feat['mass'];
|
||
$city = $char_feat['city'];
|
||
$room = $char_feat['room'];
|
||
$money = $char_feat['money'];
|
||
|
||
$do = getVar('do', '', 2);
|
||
switch ($do)
|
||
{
|
||
case 'geterror':
|
||
$char->error->getFormattedError($_POST['error'], $_POST['parameters']);
|
||
die();
|
||
break;
|
||
case 'getroomname':
|
||
$room = getVar('room');
|
||
$name = $char->city->getRoom($room, $city, 'name');
|
||
$name = "Вы перейдете в: <strong>$name</strong> (<a href='#' class='nick' onclick='return clear_solo();'>отмена</a>)";
|
||
returnAjax($name);
|
||
break;
|
||
case 'showshapes':
|
||
$available = getVar('available', 1);
|
||
$shapes = $adb->select("SELECT * FROM `player_shapes` WHERE `sex` = ?s ORDER BY `id`;", $sex);
|
||
$required = array('str', 'dex', 'con', 'vit', 'fire', 'water', 'air', 'earth', 'dark', 'light', 'int', 'wis', 'level', 'sword', 'axe', 'fail', 'knife');
|
||
$return = "<table cellspacing='0' cellpadding='0' border='0' align='center'><tr>";
|
||
$i = 0;
|
||
foreach ($shapes as $shape)
|
||
{
|
||
$availabled = $char->checkShape($shape['id']);
|
||
$requirement = "";
|
||
$title = "";
|
||
foreach ($required as $key)
|
||
{
|
||
if ($shape[$key] <= 0)
|
||
continue;
|
||
|
||
if (!$requirement)
|
||
$requirement = "$lang[min_stat]<br>";
|
||
|
||
$title .= (compare($shape[$key], $char_feat[$key], "• $lang[$key] $shape[$key]"))."<br>";
|
||
}
|
||
if ($availabled)
|
||
{
|
||
$return .= "<td class='shape'><a href='javascript:chooseShape($shape[id]);'><img src='img/chars/$shape[sex]/$shape[img]' alt='<strong>$lang[select_shape]</strong><br>$requirement$title' border='0' style='opacity: 0.6;' onmouseover=\"this.style.opacity = '1';\" onmouseout=\"this.style.opacity = '0.6';\"></a></td>";
|
||
$i++;
|
||
}
|
||
else if (!$available)
|
||
{
|
||
$return .= "<td class='shape dis_shape'><img src='img/chars/$shape[sex]/$shape[img]' alt='$requirement$title' border='0' style='opacity: 0.6;'></td>";
|
||
$i++;
|
||
}
|
||
|
||
if ($i % 9 === 0)
|
||
$return .= "</tr><tr>";
|
||
}
|
||
$return .= "</tr></table>";
|
||
returnAjax($return);
|
||
break;
|
||
case 'chooseshape':
|
||
$shape = getVar('shape', 0);
|
||
|
||
if (!$shape || !($char->checkShape($shape)))
|
||
returnAjax('error', 215);
|
||
|
||
$char->setChar('char_db', array('shape' => "$sex/$shape.gif", 'next_shape' => (time() + 86400)));
|
||
returnAjax('complete');
|
||
break;
|
||
/*Invetory*/
|
||
case 'showinventory':
|
||
$mail_guid = getVar('mail_guid');
|
||
$section = getVar('section', 1);
|
||
$type = getVar('type');
|
||
switch ($type)
|
||
{
|
||
default:
|
||
case 'inv':
|
||
$rows = $adb->select("SELECT *
|
||
FROM `character_inventory` AS `c`
|
||
LEFT JOIN `item_template` AS `i`
|
||
ON `c`.`item_entry` = `i`.`entry`
|
||
WHERE `i`.`section` = ?s
|
||
and `c`.`guid` = ?d
|
||
and `c`.`wear` = '0'
|
||
and `c`.`mailed` = '0'
|
||
ORDER BY `c`.`last_update` DESC", $data['sections'][$section] ,$guid);
|
||
break;
|
||
case 'mail_to':
|
||
$rows = $adb->select("SELECT *
|
||
FROM `character_inventory` AS `c`
|
||
LEFT JOIN `item_template` AS `i`
|
||
ON `c`.`item_entry` = `i`.`entry`
|
||
WHERE (`i`.`item_flags` & '1')
|
||
and `c`.`wear` = '0'
|
||
and `c`.`mailed` = '0'
|
||
and `i`.`section` = ?s
|
||
and `c`.`guid` = ?d
|
||
and `i`.`price_euro` = '0'
|
||
ORDER BY `c`.`last_update` DESC;", $data['sections'][$section] ,$guid);
|
||
break;
|
||
}
|
||
if (count($rows) > 0)
|
||
{
|
||
$inventory = '';
|
||
$i = 1;
|
||
foreach ($rows as $item_info)
|
||
{
|
||
$inventory .= $char->equip->showItem($item_info, $type, $i, $mail_guid);
|
||
$i = !$i;
|
||
}
|
||
returnAjax($inventory);
|
||
}
|
||
else
|
||
returnAjax("<table width='100%' cellspacing='1' cellpadding='2' bgcolor='#A5A5A5'><tr><td bgcolor='#E2E0E0' align='center'>$lang[empty]</td></tr></table>");
|
||
break;
|
||
case 'sortinventory':
|
||
$type = getVar('type');
|
||
$section = getVar('section', 1, 7);
|
||
$sort = ($_POST['num']) ?' DESC' :'';
|
||
$items = $adb->selectCol("SELECT `c`.`id` AS ARRAY_KEY, `i`.?#
|
||
FROM `character_inventory` AS `c`
|
||
LEFT JOIN `item_template` AS `i`
|
||
ON `c`.`item_entry` = `i`.`entry`
|
||
WHERE `c`.`guid` = ?d
|
||
and `c`.`wear` = '0'
|
||
and `c`.`mailed` = '0'
|
||
and `i`.`section` = ?s
|
||
ORDER BY `i`.?#$sort", $type ,$guid ,$data['sections'][$section] ,$type);
|
||
$i = 0;
|
||
foreach ($items as $id => $value)
|
||
{
|
||
$adb->query("UPDATE `character_inventory` SET `last_update` = ?d WHERE `guid` = ?d and `id` = ?d", time() + $i ,$guid ,$id);
|
||
$i++;
|
||
}
|
||
returnAjax('complete');
|
||
break;
|
||
case 'deleteitem':
|
||
$item_id = getVar('id', 0);
|
||
$dropall = getVar('dropall', 0);
|
||
|
||
if (checki($item_id))
|
||
returnAjax('error', 213);
|
||
|
||
switch ($dropall)
|
||
{
|
||
default:
|
||
case 0:
|
||
if ($char->equip->deleteItem($item_id))
|
||
{
|
||
$mass = $char->getChar('char_stats', 'mass');
|
||
returnAjax('complete', $mass, 1);
|
||
}
|
||
else
|
||
returnAjax('error', 213);
|
||
break;
|
||
case 1:
|
||
$item_entry = $adb->selectCell("SELECT `item_entry` FROM `character_inventory` WHERE `guid` = ?d and `id` = ?d", $guid ,$item_id) or returnAjax('error', 213);
|
||
$items = $adb->select("SELECT `c`.`id`
|
||
FROM `character_inventory` AS `c`
|
||
LEFT JOIN `item_template` AS `i`
|
||
ON `c`.`item_entry` = `i`.`entry`
|
||
WHERE `c`.`guid` = ?d
|
||
and `c`.`item_entry` = ?d
|
||
and `c`.`wear` = '0'
|
||
and `c`.`mailed` = '0';", $guid ,$item_entry) or returnAjax('error', 213);
|
||
$i = 0;
|
||
foreach ($items as $i_info)
|
||
{
|
||
if ($char->equip->deleteItem($i_info['id']))
|
||
{
|
||
$i++;
|
||
continue;
|
||
}
|
||
|
||
returnAjax('error', 213);
|
||
}
|
||
$mass = $char->getChar('char_stats', 'mass');
|
||
returnAjax('complete', $mass, $i, $item_entry);
|
||
break;
|
||
}
|
||
break;
|
||
case 'switchbars':
|
||
$bar = getVar('bar');
|
||
$type = getVar('type');
|
||
$bars = $char->getChar('char_bars', 'stat', 'mod', 'power', 'def', 'btn', 'set') or returnAjax('error');
|
||
foreach ($bars as $key => $value)
|
||
{
|
||
if ($value == 0)
|
||
unset($bars[$key]);
|
||
}
|
||
asort ($bars);
|
||
|
||
if ($bar && in_array($bar, array_keys($bars)) && $type && count($bars) != 1)
|
||
{
|
||
$d_b_v = explode('|', $bars[$bar]);
|
||
list ($d_b_n, $d_b_s) = array_values($d_b_v);
|
||
if (($type == 'down' & $d_b_n != count($bars)) || ($type == 'up' & $d_b_n != 1))
|
||
{
|
||
$c_b_a = ($type == 'down') ?array_slice($bars, $d_b_n, 1) :array_slice($bars, $d_b_n - 2, 1);
|
||
list($c_b_k) = array_keys($c_b_a);
|
||
list($c_b_v) = array_values($c_b_a);
|
||
$c_b_v = explode('|', $c_b_v);
|
||
list($c_b_n, $c_b_s) = array_values($c_b_v);
|
||
$d_b_n += ($type == 'down') ?1 :-1;
|
||
$c_b_n += ($type == 'down') ?-1 :1;
|
||
if ($char->setChar('char_bars', array($bar => $d_b_n.'|'.$d_b_s, $c_b_k => $c_b_n.'|'.$c_b_s)))
|
||
{
|
||
$bars = $char->getChar('char_bars', 'stat', 'mod', 'power', 'def', 'btn', 'set');
|
||
foreach ($bars as $key => $value)
|
||
{
|
||
if ($value == 0)
|
||
unset($bars[$key]);
|
||
}
|
||
asort($bars);
|
||
returnAjax('complete', $bar, $char->showInventoryBar($bar, $bars[$bar], count($bars)), $c_b_k, ($char->showInventoryBar($c_b_k, $bars[$c_b_k], count($bars))));
|
||
}
|
||
}
|
||
else
|
||
returnAjax('error');
|
||
}
|
||
else
|
||
returnAjax('error');
|
||
break;
|
||
case 'spoilerbar':
|
||
$bar = getVar('bar');
|
||
$barr = $char->getChar('char_bars', $bar) or returnAjax('error');
|
||
$bar_v = explode('|', $barr);
|
||
list($bar_n, $bar_s) = array_values($bar_v);
|
||
if ($bar_s == 1)
|
||
{
|
||
$char->setChar('char_bars', $bar, $bar_n.'|0');
|
||
returnAjax('hide');
|
||
}
|
||
else if ($bar_s == 0)
|
||
{
|
||
$char->setChar('char_bars', $bar, $bar_n.'|1');
|
||
returnAjax('show');
|
||
}
|
||
break;
|
||
case 'worksets':
|
||
$type = getVar('type');
|
||
$name = getVar('name');
|
||
|
||
if ($name == '')
|
||
returnAjax('error', 222);
|
||
|
||
switch ($type)
|
||
{
|
||
case 'create':
|
||
$cur_set = $char->getChar('char_equip', '*') or returnAjax('error', 221);
|
||
$cur_set['name'] = $name;
|
||
unset($cur_set['hand_r_free'], $cur_set['hand_r_type'], $cur_set['hand_l_free'], $cur_set['hand_l_type']);
|
||
$adb->query("DELETE FROM `character_sets` WHERE `guid` = ?d and `name` = ?s", $guid ,$name);
|
||
$adb->query("INSERT INTO `character_sets` (?#)
|
||
VALUES (?a);", array_keys($cur_set), array_values($cur_set));
|
||
returnAjax('complete', $char->getSetRow($name));
|
||
break;
|
||
case 'delete':
|
||
$set = $adb->selectRow("SELECT * FROM `character_sets` WHERE `guid` = ?d and `name` = ?s", $guid ,$name) or returnAjax('error', 221);
|
||
$adb->query("DELETE FROM `character_sets` WHERE `guid` = ?d and `name` = ?s", $guid ,$name);
|
||
returnAjax('complete');
|
||
break;
|
||
case 'show':
|
||
$set = $adb->selectRow("SELECT * FROM `character_sets` WHERE `guid` = ?d and `name` = ?s", $guid ,$name) or returnAjax('error', 221);
|
||
$set['hand_l_s'] = "hand_l";
|
||
$char_feat = $char->getChar('char_db', 'shape', 'guid');
|
||
$char_feat['name'] = '';
|
||
returnAjax('complete', $char->equip->getCharacterEquipped($set, $char_feat, 'smart'));
|
||
break;
|
||
}
|
||
break;
|
||
case 'increaseitemstat':
|
||
$item_id = getVar('id', 0);
|
||
$stat = getVar('stat');
|
||
$count = getVar('count', 1);
|
||
|
||
if (checki($item_id))
|
||
returnAjax('error', 213);
|
||
|
||
$i_info = $adb->selectRow("SELECT `c`.`inc_count_p`,
|
||
`c`.?#,
|
||
`i`.?#
|
||
FROM `character_inventory` AS `c`
|
||
LEFT JOIN `item_template` AS `i`
|
||
ON `c`.`item_entry` = `i`.`entry`
|
||
WHERE `c`.`guid` = ?d
|
||
and `c`.`id` = ?d
|
||
and `c`.`wear` = '0'
|
||
and `c`.`mailed` = '0';", 'inc_'.$stat ,'add_'.$stat ,$guid ,$item_id) or returnAjax('error', 213);
|
||
if ($i_info['inc_count_p'] - $count < 0)
|
||
returnAjax('error', 216);
|
||
|
||
switch ($stat)
|
||
{
|
||
case 'str':
|
||
case 'dex':
|
||
case 'con':
|
||
case 'int':
|
||
$inc = $i_info['inc_'.$stat] + $count;
|
||
$inc_p = $i_info['inc_count_p']-$count;
|
||
$adb->query("UPDATE `character_inventory`
|
||
SET ?# = ?d,
|
||
`inc_count_p` = ?d,
|
||
`last_update` = ?d
|
||
WHERE `guid` = ?d
|
||
and `id` = ?d", 'inc_'.$stat ,$inc ,$inc_p ,time() ,$guid ,$item_id);
|
||
returnAjax('complete', $inc + $i_info['add_'.$stat], $inc_p);
|
||
break;
|
||
default: returnAjax('error', 219);
|
||
break;
|
||
}
|
||
break;
|
||
case 'loginbank':
|
||
$credit = getVar('credit', 0);
|
||
$pass = getVar('pass');
|
||
$bank_info = $adb->selectRow("SELECT `guid`,
|
||
`password`,
|
||
`cash`,
|
||
`euro`
|
||
FROM `character_bank`
|
||
WHERE `id` = ?d", $credit) or returnAjax('error', 303);
|
||
if ($guid != $bank_info['guid'])
|
||
returnAjax('error', 322);
|
||
|
||
if (SHA1($credit.':'.$pass) != $bank_info['password'])
|
||
returnAjax('error', 302);
|
||
|
||
$_SESSION['bankСredit'] = $credit;
|
||
returnAjax('complete', "<b>".getMoney($bank_info['cash'])."</b>кр. <b>".getMoney($bank_info['euro'])."</b>екр.<a href='javascript:UnLoginbank();'><img border='0' valign='bottom' width='13' height='9' title='$lang[credit_exit]' src='img/icon/close_bank.gif'></a>");
|
||
break;
|
||
case 'unloginbank':
|
||
unset ($_SESSION['bankСredit']);
|
||
$bank = $adb->selectCol("SELECT `id` FROM `character_bank` WHERE `guid` = ?d", $guid) or returnAjax('error');
|
||
foreach ($bank as $num => $bank_id)
|
||
{
|
||
if (empty($credits))
|
||
$credits = $bank_id;
|
||
else
|
||
$credits .= ",".$bank_id;
|
||
}
|
||
returnAjax("<a href=\"javascript:bank_open('$credits');\" class='nick' style='font-size: 7pt;'>$lang[credit_choose]</a>");
|
||
break;
|
||
/*Shop*/
|
||
case 'getshoptitle':
|
||
$section_shop = getVar('section_shop');
|
||
returnAjax($lang[$data['sections_shop'][$section_shop][1]].$lang['shop_'.$section_shop]);
|
||
break;
|
||
case 'showshopsection':
|
||
$flags = $char->city->getRoom($room, $city, 'flags');
|
||
|
||
if (!($flags & 2))
|
||
returnAjax("<table width='100%' cellspacing='1' cellpadding='2' bgcolor='#A5A5A5'><tr><td bgcolor='#E2E0E0' align='center'>$lang[shop_no]</td></tr></table>");
|
||
|
||
$section_shop = getVar('section_shop', '', 7);
|
||
$level_filter = getVar('level_filter', '', 7);
|
||
$check_level = ($level_filter > 0 || $level_filter == '0');
|
||
$name_filter = getVar('name_filter', '', 7);
|
||
setCookie('level_filter', $level_filter, time() + 3600);
|
||
setCookie('name_filter', $name_filter, time() + 3600);
|
||
$rows = $adb->select("SELECT *
|
||
FROM `item_template`
|
||
WHERE `type` = ?s
|
||
{and `min_level` = ?d}
|
||
{and `name` LIKE (?)}
|
||
{and !(`item_flags` & ?d)
|
||
and `price_euro` = '0'}
|
||
ORDER BY `min_level`;", $section_shop,
|
||
(($check_level) ?$level_filter :DBSIMPLE_SKIP),
|
||
(($name_filter) ?escapeLike($name_filter) :DBSIMPLE_SKIP),
|
||
(($room != 'shop') ?4 :DBSIMPLE_SKIP));
|
||
if (count($rows) > 0)
|
||
{
|
||
$section = '';
|
||
$i = true;
|
||
foreach ($rows as $item_info)
|
||
{
|
||
$section .= $char->equip->showItem($item_info, 'shop', $i);
|
||
$i = !$i;
|
||
}
|
||
returnAjax($section);
|
||
}
|
||
else
|
||
returnAjax("<table width='100%' cellspacing='1' cellpadding='2' bgcolor='#A5A5A5'><tr><td bgcolor='#E2E0E0' align='center'>$lang[shop_empty]</td></tr></table>");
|
||
break;
|
||
case 'buyitem':
|
||
$item_entry = getVar('entry', 0);
|
||
$count = getVar('count', 1);
|
||
|
||
if (checki($item_entry))
|
||
returnAjax('error', 403);
|
||
|
||
$buycount = 0;
|
||
$amount = $city.'-'.$room;
|
||
$flags = $char->city->getRoom($room, $city, 'flags');
|
||
|
||
if (!($flags & 2))
|
||
returnAjax('error', 403);
|
||
|
||
$i_info = $adb->selectRow("SELECT `name`,
|
||
`price`,
|
||
`price_euro`
|
||
FROM `item_template`
|
||
WHERE `entry` = ?d", $item_entry) or returnAjax('error', 403);
|
||
list($name, $price, $price_euro) = array_values($i_info);
|
||
|
||
for ($i = 1; $i <= $count; $i++)
|
||
{
|
||
if ($price > 0 && !($char->changeMoney(-$price)))
|
||
continue;
|
||
|
||
$money = $money - $price;
|
||
|
||
if (!($char->equip->addItem($item_entry)))
|
||
returnAjax('error', 403);
|
||
|
||
$buycount++;
|
||
}
|
||
$mass = $char->getChar('char_stats', 'mass');
|
||
if ($buycount != 0 && $price > 0)
|
||
returnAjax('complete', getMoney($money), $mass, 400, "$name|".($price*$buycount)."|$buycount");
|
||
else if ($buycount != 0 && $price_euro > 0)
|
||
returnAjax('complete', getMoney($money), $mass, 401, "$name|".($price_euro*$buycount)."|$buycount");
|
||
else
|
||
returnAjax('error', 107);
|
||
break;
|
||
case 'sellitem':
|
||
$item_id = getVar('id', 0);
|
||
|
||
if (checki($item_id))
|
||
returnAjax('error', 213);
|
||
|
||
$i_info = $adb->selectRow("SELECT `i`.`name`,
|
||
`i`.`mass`,
|
||
`i`.`price`,
|
||
`i`.`price_euro`,
|
||
`c`.`tear_cur`, `c`.`tear_max`,
|
||
`i`.`tear`
|
||
FROM `character_inventory` AS `c`
|
||
LEFT JOIN `item_template` AS `i`
|
||
ON `c`.`item_entry` = `i`.`entry`
|
||
WHERE (`i`.`item_flags` & '1')
|
||
and `c`.`id` = ?d
|
||
and `c`.`guid` = ?d
|
||
and `c`.`wear` = '0'
|
||
and `c`.`mailed` = '0';", $item_id ,$guid) or returnAjax('error', 213);
|
||
$sell_price = $char->equip->getSellValue($i_info);
|
||
$char->changeMoney($sell_price);
|
||
$money = $money + $sell_price;
|
||
if ($char->equip->deleteItem($item_id, 'sell'))
|
||
{
|
||
$mass = $char->getChar('char_stats', 'mass');
|
||
returnAjax('complete', getMoney($money), $mass, 404, "$$i_info[name]|$sell_price");
|
||
}
|
||
else
|
||
returnAjax('error', 213);
|
||
break;
|
||
}
|
||
?>
|