Зачем-то инкапсулирем.
This commit is contained in:
@@ -18,7 +18,7 @@ $u_res = mysql_fetch_array(mysql_query("select * from `lab_user` where `id_user`
|
||||
</script>
|
||||
|
||||
<?php
|
||||
$room = mysql_fetch_array(mysql_query("SELECT * FROM `lab_rooms` WHERE `id` = '" . mysql_real_escape_string($user->room) . "';"));
|
||||
$room = mysql_fetch_array(mysql_query("SELECT * FROM `lab_rooms` WHERE `id` = '" . mysql_real_escape_string($user->getRoom()) . "';"));
|
||||
|
||||
if ($_GET['healall'] == 1) {
|
||||
$cost = $_GET['cost'];
|
||||
@@ -124,7 +124,7 @@ if ($_GET['mobkill'] == 1) {
|
||||
}
|
||||
$rand_hp1 = rand(1, 10);
|
||||
$rand_hp = $rand_hp1 * $user['level'];
|
||||
$bot = mysql_fetch_array(mysql_query("select * from `lab_bots` where `id_bot`='" . $id . "' AND `id_user`='" . $user['id'] . "' AND `id_room`='" . $user->room . "' LIMIT 1"));
|
||||
$bot = mysql_fetch_array(mysql_query("select * from `lab_bots` where `id_bot`='" . $id . "' AND `id_user`='" . $user['id'] . "' AND `id_room`='" . $user->getRoom() . "' LIMIT 1"));
|
||||
$hels = $bot['bot_hp'] - $rand_hp;
|
||||
if ($hels < 0) {
|
||||
echo "<b>Вы убили моба!</b><br>";
|
||||
@@ -135,11 +135,11 @@ if ($_GET['mobkill'] == 1) {
|
||||
echo "Вы получили 1 записку!<br>";
|
||||
Mysql_query("update `lab_user` set `zad" . $u_res['zadanie'] . "_kol`=`zad" . $u_res['zadanie'] . "_kol`+'1' where `id_user`='" . $user['id'] . "'");
|
||||
}
|
||||
mysql_query("delete from `lab_bots` where `id_bot`='" . $id . "' AND `id_user`='" . $user['id'] . "' AND `id_room`='" . $user->room . "' LIMIT 1");
|
||||
mysql_query("delete from `lab_bots` where `id_bot`='" . $id . "' AND `id_user`='" . $user['id'] . "' AND `id_room`='" . $user->getRoom() . "' LIMIT 1");
|
||||
//если просто убивалка
|
||||
} else {
|
||||
Mysql_query("update `lab_user` set `zad" . $u_res['zadanie'] . "_kol`=`zad" . $u_res['zadanie'] . "_kol`+'1' where `id_user`='" . $user['id'] . "'");
|
||||
mysql_query("delete from `lab_bots` where `id_bot`='" . $id . "' AND `id_user`='" . $user['id'] . "' AND `id_room`='" . $user->room . "' LIMIT 1");
|
||||
mysql_query("delete from `lab_bots` where `id_bot`='" . $id . "' AND `id_user`='" . $user['id'] . "' AND `id_room`='" . $user->getRoom() . "' LIMIT 1");
|
||||
}
|
||||
} else {
|
||||
echo "Вы отняли у моба -<b>" . $rand_hp . "</b> HP!<br>";
|
||||
@@ -177,7 +177,7 @@ if ($_GET['exit'] && $room['exit'] == 1) {
|
||||
|
||||
if ($_GET['get']) {
|
||||
$data = mysql_fetch_array(mysql_query("SELECT * FROM `lab_inv` WHERE `id` = '" . mysql_real_escape_string($_GET['get']) . "' AND `id_user`='" . $user['id'] . "';"));
|
||||
if ($data['id_room'] == $user->room) {
|
||||
if ($data['id_room'] == $user->getRoom()) {
|
||||
|
||||
switch ($data['type']) {
|
||||
case 1:
|
||||
@@ -241,13 +241,13 @@ if ($_GET['get']) {
|
||||
if ($_GET['drop']) {
|
||||
$data = mysql_fetch_array(mysql_query("SELECT * FROM `lab_tmp` WHERE `id` = '" . mysql_real_escape_string($_GET['drop']) . "' AND `id_user`='" . $user['id'] . "';"));
|
||||
mysql_query("DELETE FROM `lab_tmp` WHERE `id` = '" . mysql_real_escape_string($data['id']) . "' AND `id_user`='" . $user['id'] . "' LIMIT 1;");
|
||||
mysql_query("INSERT INTO `lab_inv` (`id_room`,`type`,`value`,`id_user`) values ('" . mysql_real_escape_string($user->room) . "','" . mysql_real_escape_string($data['type']) . "','" . mysql_real_escape_string($data['value']) . "','" . mysql_real_escape_string($user['id']) . "');");
|
||||
mysql_query("INSERT INTO `lab_inv` (`id_room`,`type`,`value`,`id_user`) values ('" . mysql_real_escape_string($user->getRoom()) . "','" . mysql_real_escape_string($data['type']) . "','" . mysql_real_escape_string($data['value']) . "','" . mysql_real_escape_string($user['id']) . "');");
|
||||
unset($data);
|
||||
}
|
||||
|
||||
if ($_GET['nal1']) {
|
||||
$data = mysql_fetch_array(mysql_query("SELECT * FROM `lab_bots` WHERE `id` = '" . mysql_real_escape_string($_GET['nal1']) . "' AND `id_user`='" . $user['id'] . "';"));
|
||||
if ($data['id_room'] == $user->room) {
|
||||
if ($data['id_room'] == $user->getRoom()) {
|
||||
$sum = mysql_fetch_array(mysql_query("SELECT SUM(`value`) FROM `lab_tmp` WHERE `id_user` = '" . mysql_real_escape_string($user['id']) . "' AND `type`='1';"));
|
||||
mysql_query("DELETE FROM `lab_tmp` WHERE `id_user` = '" . mysql_real_escape_string($user['id']) . "' AND `type`='1';");
|
||||
mysql_query("UPDATE `users` SET `money` = `money`+'" . mysql_real_escape_string($sum[0]) . "' WHERE `id` = '" . mysql_real_escape_string($user['id']) . "';");
|
||||
@@ -259,7 +259,7 @@ if ($_GET['nal1']) {
|
||||
|
||||
if ($_GET['nal2']) {
|
||||
$data = mysql_fetch_array(mysql_query("SELECT * FROM `lab_bots` WHERE `id` = '" . mysql_real_escape_string($_GET['nal2']) . "' AND `id_user`='" . $user['id'] . "';"));
|
||||
if ($data['id_room'] == $user->room) {
|
||||
if ($data['id_room'] == $user->getRoom()) {
|
||||
$sum = mysql_fetch_array(mysql_query("SELECT SUM(`value`) FROM `lab_tmp` WHERE `id_user` = '" . mysql_real_escape_string($user['id']) . "' AND `type`='3';"));
|
||||
mysql_query("DELETE FROM `lab_tmp` WHERE `id_user` = '" . mysql_real_escape_string($user['id']) . "' AND `type`='3';");
|
||||
mysql_query("UPDATE `users` SET `doblest` = `doblest`+'" . mysql_real_escape_string($sum[0]) . "' WHERE `id` = '" . mysql_real_escape_string($user['id']) . "';");
|
||||
@@ -271,7 +271,7 @@ if ($_GET['nal2']) {
|
||||
|
||||
if ($_GET['nal3']) {
|
||||
$data = mysql_fetch_array(mysql_query("SELECT * FROM `lab_bots` WHERE `id` = '" . mysql_real_escape_string($_GET['nal3']) . "' AND `id_user`='" . $user['id'] . "';"));
|
||||
if ($data['id_room'] == $user->room) {
|
||||
if ($data['id_room'] == $user->getRoom()) {
|
||||
$sum = mysql_fetch_array(mysql_query("SELECT SUM(`value`) FROM `lab_tmp` WHERE `id_user` = '" . mysql_real_escape_string($user['id']) . "' AND `type`='8';"));
|
||||
mysql_query("DELETE FROM `lab_tmp` WHERE `id_user` = '" . mysql_real_escape_string($user['id']) . "' AND `type`='8';");
|
||||
mysql_query("UPDATE `bank` SET `ekr` = `ekr`+'" . mysql_real_escape_string($sum[0]) . "' WHERE `id` = '" . mysql_real_escape_string($user['id']) . "';");
|
||||
@@ -283,7 +283,7 @@ if ($_GET['nal3']) {
|
||||
|
||||
if ($_GET['nal4']) {
|
||||
$data = mysql_fetch_array(mysql_query("SELECT * FROM `lab_bots` WHERE `id` = '" . mysql_real_escape_string($_GET['nal4']) . "' AND `id_user`='" . $user['id'] . "';"));
|
||||
if ($data['id_room'] == $user->room) {
|
||||
if ($data['id_room'] == $user->getRoom()) {
|
||||
$sum = mysql_fetch_array(mysql_query("SELECT SUM(`value`) FROM `lab_tmp` WHERE `id_user` = '" . mysql_real_escape_string($user['id']) . "' AND `type`='9';"));
|
||||
mysql_query("DELETE FROM `lab_tmp` WHERE `id_user` = '" . mysql_real_escape_string($user['id']) . "' AND `type`='9';");
|
||||
mysql_query("UPDATE `users` SET `exp` = `exp`+'" . mysql_real_escape_string($sum[0]) . "' WHERE `id` = '" . mysql_real_escape_string($user['id']) . "';");
|
||||
@@ -299,28 +299,28 @@ if ($_GET['go']) {
|
||||
switch ($_GET['go']) {
|
||||
case "p1":
|
||||
mysql_query("UPDATE `users` SET `room` = '" . mysql_real_escape_string($room['p1']) . "', `fullhptime` = " . time() . " WHERE `id` = '" . mysql_real_escape_string($user['id']) . "';");
|
||||
$user->room = $room['p1'];
|
||||
$user->setRoom($room['p1']);
|
||||
$_SESSION['time'] = time();
|
||||
break;
|
||||
case "p2":
|
||||
mysql_query("UPDATE `users` SET `room` = '" . mysql_real_escape_string($room['p2']) . "', `fullhptime` = " . time() . " WHERE `id` = '" . mysql_real_escape_string($user['id']) . "';");
|
||||
$user->room = $room['p2'];
|
||||
$user->setRoom($room['p2']);
|
||||
$_SESSION['time'] = time();
|
||||
break;
|
||||
case "p3":
|
||||
mysql_query("UPDATE `users` SET `room` = '" . mysql_real_escape_string($room['p3']) . "', `fullhptime` = " . time() . " WHERE `id` = '" . mysql_real_escape_string($user['id']) . "';");
|
||||
$user->room = $room['p3'];
|
||||
$user->setRoom($room['p3']);
|
||||
$_SESSION['time'] = time();
|
||||
break;
|
||||
case "p4":
|
||||
mysql_query("UPDATE `users` SET `room` = '" . mysql_real_escape_string($room['p4']) . "', `fullhptime` = " . time() . " WHERE `id` = '" . mysql_real_escape_string($user['id']) . "';");
|
||||
$user->room = $room['p4'];
|
||||
$user->setRoom($room['p4']);
|
||||
$_SESSION['time'] = time();
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
$room = mysql_fetch_array(mysql_query("SELECT * FROM `lab_rooms` WHERE `id` = '" . mysql_real_escape_string($user->room) . "';"));
|
||||
$room = mysql_fetch_array(mysql_query("SELECT * FROM `lab_rooms` WHERE `id` = '" . mysql_real_escape_string($user->getRoom()) . "';"));
|
||||
|
||||
if ($user['hp'] <= 0) {
|
||||
mysql_query("DELETE FROM `lab_trap` WHERE `id_user` = '" . $user['id'] . "'");
|
||||
@@ -335,12 +335,12 @@ if ($user['hp'] <= 0) {
|
||||
}
|
||||
|
||||
|
||||
$data = mysql_query("SELECT * FROM `lab_inv` WHERE `id_room` = '" . mysql_real_escape_string($user->room) . "' AND `id_user`='" . $user['id'] . "';");
|
||||
$data = mysql_query("SELECT * FROM `lab_inv` WHERE `id_room` = '" . mysql_real_escape_string($user->getRoom()) . "' AND `id_user`='" . $user['id'] . "';");
|
||||
$data2 = mysql_query("SELECT * FROM `lab_tmp` WHERE `id_user` = '" . mysql_real_escape_string($user['id']) . "';");
|
||||
$data3 = mysql_query("SELECT * FROM `users` WHERE `lab` = 1 AND `room` = '" . mysql_real_escape_string($room['id']) . "';");
|
||||
$data4 = mysql_query("SELECT * FROM `lab_bots` WHERE `id_room` = '" . mysql_real_escape_string($room['id']) . "' AND `id_user`='" . $user['id'] . "';");
|
||||
|
||||
$roow = mysql_fetch_array(mysql_query("SELECT * FROM `lab_trap` WHERE `id_room` = '" . mysql_real_escape_string($user->room) . "' AND `id_user`='" . $user['id'] . "';"));
|
||||
$roow = mysql_fetch_array(mysql_query("SELECT * FROM `lab_trap` WHERE `id_room` = '" . mysql_real_escape_string($user->getRoom()) . "' AND `id_user`='" . $user['id'] . "';"));
|
||||
|
||||
if ($roow[0]) {
|
||||
$msg .= 'В комнате была установлена ловушка...<br>';
|
||||
@@ -390,7 +390,7 @@ for ($i = 0; $i < mysql_num_rows($log); $i++) {
|
||||
|
||||
}
|
||||
|
||||
echo "" . $room['name'] . " (" . $user->room . ")</tr>";
|
||||
echo "" . $room['name'] . " (" . $user->getRoom() . ")</tr>";
|
||||
echo "<tr><td><td><button style='width:50px; height:50px;' class='INPUT' disabled id=b1 onclick='location.href=\"lab.php?go=p1\";'>СЕВЕР</button><td><td rowspan=3 style='height:100px;'> <td rowspan=4 width=30% valign=top style='height:100px;'>";
|
||||
$u_lab = mysql_query("select `login` from `users` where `lab`='1' and `bot`!='1'");
|
||||
$u_lab_kol = mysql_num_rows($u_lab);
|
||||
|
||||
Reference in New Issue
Block a user