From def01b331d305c48023acb96781f70b39ca6cb96 Mon Sep 17 00:00:00 2001
From: "Igor Barkov (iwork)" <lopar@lopar.us>
Date: Wed, 30 Sep 2020 17:06:12 +0300
Subject: [PATCH] =?UTF-8?q?=D0=97=D0=B0=D0=B1=D1=8B=D1=82=D1=8C=20=D0=B8?=
 =?UTF-8?q?=20=D0=B2=D1=8B=D0=B1=D1=80=D0=BE=D1=81=D0=B8=D1=82=D1=8C.=20:(?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 canalizaciya.php | 116 +++++++++++++++++++++--------------------------
 1 file changed, 52 insertions(+), 64 deletions(-)

diff --git a/canalizaciya.php b/canalizaciya.php
index 9f6aed8..2917730 100644
--- a/canalizaciya.php
+++ b/canalizaciya.php
@@ -5,63 +5,64 @@ if (empty($_SESSION['uid'])) {
     exit;
 }
 require_once "functions.php";
-$user = new User($_SESSION['uid']);
+$user = $user ?? null;
 if ($user->room == 403) {
-
 include "startpodzemel.php";
-if ($user->battle != 0) { header('location: fbattle.php'); exit; }
+    if ($user->battle != 0) {
+        header('location: fbattle.php');
+        exit;
+    }
 
-if($_GET['act']=="cexit")
-{
-$das=mysql_query("select glava,glav_id from `labirint` where user_id='".$user['id']."'");
-$rf=mysql_fetch_array($das);
-$glav_id=$rf["glav_id"];
-$glava=$rf["glava"];
-if($glava==$user['login']){//1
-$des=mysql_query("select login,user_id from `labirint` where `glav_id`='$glav_id' and `login`!='$glava'");
-$r=0;
-while($raf=mysql_fetch_array($des)){//2
-$r++;
-$log = $raf["login"];
-$id_us = $raf["user_id"];
-}//2
-if($r>=1){
-mysql_query("UPDATE labirint SET glav_id='$id_us',glava='$log' WHERE glav_id='".$user['id']."'");
-mysql_query("UPDATE podzem3 SET glava='$log' WHERE glava='".$user['login']."'");
-}else{
-mysql_query("DELETE FROM labirint WHERE glav_id='".$user['id']."'");
-mysql_query("DELETE FROM podzem3 WHERE glava='".$user['login']."'");
-mysql_query("DELETE FROM podzem4 WHERE glava='".$user['login']."'");
-mysql_query("DELETE FROM `inventory` WHERE name='Подземное зелье жизни' and owner='".$user['id']."'");
-mysql_query("DELETE FROM `inventory` WHERE name='Ключик №1' and owner='".$user['id']."'");
-mysql_query("DELETE FROM `inventory` WHERE name='Ключик №2' and owner='".$user['id']."'");
-mysql_query("DELETE FROM `inventory` WHERE name='Ключик №3' and owner='".$user['id']."'");
-mysql_query("DELETE FROM `inventory` WHERE name='Ключик №4' and owner='".$user['id']."'");
-mysql_query("DELETE FROM `inventory` WHERE name='Ключик №5' and owner='".$user['id']."'");
-mysql_query("DELETE FROM `inventory` WHERE name='Ключик №6' and owner='".$user['id']."'");
-mysql_query("DELETE FROM `inventory` WHERE name='Ключик №7' and owner='".$user['id']."'");
-mysql_query("DELETE FROM `inventory` WHERE name='Ключик №8' and owner='".$user['id']."'");
-mysql_query("DELETE FROM `inventory` WHERE name='Ключик №9' and owner='".$user['id']."'");
-mysql_query("DELETE FROM `inventory` WHERE name='Ключик №10' and owner='".$user['id']."'");
-}
-}//1
-$e = mysql_query("DELETE FROM labirint WHERE user_id='".$user['id']."'");
-mysql_query("UPDATE `users`,`online` SET `users`.`room` = '402',`online`.`room` = '402' WHERE `online`.`id` = `users`.`id` AND `online`.`id` = '".$user['id']."' ;");
-print "<script>location.href='vxod.php'</script>"; exit();
-}
+    if($_GET['act'] == "cexit") {
+        $das=mysql_query("select glava,glav_id from `labirint` where user_id='".$user['id']."'");
+        $rf=mysql_fetch_array($das);
+        $glav_id=$rf["glav_id"];
+        $glava=$rf["glava"];
+        if($glava==$user['login']) {
+            $des=mysql_query("select login,user_id from `labirint` where `glav_id`='$glav_id' and `login`!='$glava'");
+            $r=0;
+            while($raf=mysql_fetch_array($des)){
+                $r++;
+                $log = $raf["login"];
+                $id_us = $raf["user_id"];
+            }
+            if($r>=1){
+                mysql_query("UPDATE labirint SET glav_id='$id_us',glava='$log' WHERE glav_id='".$user['id']."'");
+                mysql_query("UPDATE podzem3 SET glava='$log' WHERE glava='".$user['login']."'");
+            } else {
+                mysql_query("DELETE FROM labirint WHERE glav_id='".$user['id']."'");
+                mysql_query("DELETE FROM podzem3 WHERE glava='".$user['login']."'");
+                mysql_query("DELETE FROM podzem4 WHERE glava='".$user['login']."'");
+                $items_to_delete = [
+                        'Подземное зелье жизни',
+                        'Ключик №1',
+                        'Ключик №2',
+                        'Ключик №3',
+                        'Ключик №4',
+                        'Ключик №5',
+                        'Ключик №6',
+                        'Ключик №7',
+                        'Ключик №8',
+                        'Ключик №9',
+                        'Ключик №10'
+                        ];
+                db::c()->query('DELETE FROM inventory WHERE name IN ("?s") AND owner_id = ?i', implode(",", $items_to_delete), $user->id);
+            }
+        }
+        $e = mysql_query("DELETE FROM labirint WHERE user_id='".$user['id']."'");
+        mysql_query("UPDATE `users`,`online` SET `users`.`room` = '402',`online`.`room` = '402' WHERE `online`.`id` = `users`.`id` AND `online`.`id` = '".$user['id']."' ;");
+        print "<script>location.href='vxod.php'</script>"; exit();
+    }
 
-function podzem_brat() {
-    $frt=mysql_query("select user_id from `labirint` where glava='".$glava."'");
-    while($rbb=mysql_fetch_array($frt)){
-        addchp ('<b>'.$user->login.'</b> поднял предмет "'.$mis.'".   ','{[]}'.Nick::id($rbb["user_id"])->short().'{[]}');
+    function podzem_brat() {
+        $frt=mysql_query("select user_id from `labirint` where glava='".$glava."'");
+        while($rbb=mysql_fetch_array($frt)){
+            addchp ('<b>'.$user->login.'</b> поднял предмет "'.$mis.'".   ','{[]}'.Nick::id($rbb["user_id"])->short().'{[]}');
+        }
     }
 }
-}
-
+Template::header('canalizaciya');
 ?>
-<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
-<meta http-equiv="Content-Language" content="ru">
-<link rel=stylesheet type="text/css" href="css/main.css">
 <script>
 let Hint3Name = '';
 // Заголовок, название скрипта, имя поля с логином
@@ -76,7 +77,6 @@ function findlogin(title, script, name){
 	Hint3Name = name;
 }
 
-
 function returned2(s){
 	if (top.oldlocation !== '') { top.frames['main'].navigate(top.oldlocation+'?'+s+'tmp='+Math.random()); top.oldlocation=''; }
 	else { top.frames['main'].navigate('main.php?'+s+'tmp='+Math.random()) }
@@ -87,19 +87,7 @@ function closehint3(){
     Hint3Name='';
 }
 </script>
-<body onLoad="top.setHP(<?=$user['hp']?>,<?=$user['maxhp']?>,<?if(!$user['battle']){echo"10";}else{echo"0";}?>);">
-<script>
-<!--document.ondragstart = test;-->
-//запрет на перетаскивание
-<!--document.onselectstart = test;-->
-//запрет на выделение элементов страницы
-<!--document.oncontextmenu = test;-->
-//запрет на выведение контекстного меню
-function test() {
- return false
-}
-</script>
-<?
+<?php
 $ros=mysql_query("SELECT * FROM `labirint` WHERE `user_id`='{$_SESSION['uid']}'");                                         
 $mir=mysql_fetch_array($ros);
 $mesto = $mir['location'];