game/modules_data/_bukmeker.php

<?php
if (!defined('GAME') || !$u->info['bukmeker'] && !$u->info['admin']) {
    die();
}
$pl = mysql_fetch_array(mysql_query('SELECT * FROM `bank_table` ORDER BY `time` DESC LIMIT 1'));
$ba = mysql_fetch_array(mysql_query("SELECT * FROM `bank_alh` WHERE `uid` = " . $u->info['id']));
?>
<script>
    let elem = document.getElementById('se-pre-con');
    elem.parentNode.removeChild(elem);
</script>
<script type="text/javascript" src='https://img.new-combats.com/js/commoninf.js'></script>
<style>
    .modpow {
        background-color: #ddd5bf;
    }

    .mt {
        background-color: #b1a993;
        padding-left: 10px;
        padding-right: 10px;
        padding-top: 5px;
        padding-bottom: 5px;
    }

    .md {
        padding: 10px;
    }
</style>
<h4><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD></h4>
<div style="float: right">
    <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <?= $u->info['login'] ?>.
    <INPUT TYPE="button" onclick="location.href='main.php?bukmeker=1';" value="<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>" class="btn"
           title="<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>">
    <INPUT TYPE="button" onclick="location.href='main.php';" class="btn" value="<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>" title="<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>">
</div>


<?php
if (isset($ba['id'])): ?>
    <table width=320>
        <tr>
            <td>
                <h4><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD></h4>
                <b><?= $ba['cr'] ?></b> <20><>.
                <hr/>
                <form method="post" action="main.php?bukmeker=1">
                    <?
                    if (isset($_POST['buy_cr'])) {
                        $uba = mysql_fetch_array(
                            mysql_query(
                                'SELECT * FROM `users` WHERE `login` = "' . mysql_real_escape_string(
                                    $_POST['buy_cr']
                                ) . '" LIMIT 1'
                            )
                        );
                        if (isset($uba['login'])) {
                            echo '<27><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>: ' . $u->microLogin($uba['id'], 1) . '<br>';
                        } else {
                            echo '<font color=red><3E><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD> <20><> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>.</font><hr>';
                            unset($_POST['buy_cr']);
                        }
                        echo '<hr>';
                        if (isset($uba['login'])) {
                            $_POST['buk_cr'] = round($_POST['buk_cr'], 2);
                            if (isset($_POST['buk_cr']) && $_POST['buk_cr'] < 1) {
                                echo '<font color=red><3E><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>: 1 <20><>.</font><hr>';
                                unset($_POST['buk_cr']);
                            } elseif ($_POST['buk_cr'] > $ba['cr']) {
                                echo '<font color=red><3E><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><> <20><><EFBFBD><EFBFBD><EFBFBD></font><hr>';
                                unset($_POST['buk_cr']);
                            }
                            if (isset($_POST['buygoodluck'])) {
                                echo '<script>alert("<22><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> ' . $_POST['buk_cr'] . ' <20><>!");location.href="main.php?bukmeker=1";</script>';
                                $ba['cr'] -= $_POST['buk_cr'];
                                $ba['USD'] += round($_POST['buk_cr'] * $ucur, 2);
                                mysql_query(
                                    'UPDATE `bank_alh` SET `cr` = "' . mysql_real_escape_string(
                                        $ba['cr']
                                    ) . '",`USD` = "' . mysql_real_escape_string(
                                        $ba['USD']
                                    ) . '" WHERE `id` = "' . $ba['id'] . '" LIMIT 1'
                                );
                                mysql_query(
                                    'UPDATE `users` SET `money` = `money` + ' . mysql_real_escape_string(
                                        $_POST['buk_cr']
                                    ) . ' WHERE `login` = "' . $uba['login'] . '" LIMIT 1'
                                );

                                $money = round($_POST['buk_cr'] * $pl['cur'], 2);
                                $money = round($money / 100 * (100 - $ba['procent']), 2);

                            } else {
                                echo '<27><><EFBFBD><EFBFBD><EFBFBD> <20><>.:';
                                if (!isset($_POST['buk_cr'])) {
                                    echo '&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; <input name="buk_cr" style="width:50px;" value="0.00" /> <input class="btn btn-success" value="<22><><EFBFBD><EFBFBD><EFBFBD>" type="submit" /><br>';
                                } else {
                                    echo ' <b>' . round(
                                            (int)$_POST['buk_cr'], 2
                                        ) . '</b> <20><>.<input name="buk_cr" type="hidden" value="' . $_POST['buk_cr'] . '" />';
                                    echo ' &nbsp; <input type="submit" name="buygoodluck" class="btn btn-danger" value="<22><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><>">';
                                }
                            }
                        }
                    }

                    if (isset($_POST['buy_cr'])) { ?><input name="buy_cr" type="hidden"
                                                            value="<?= $_POST['buy_cr'] ?>" /> <?
                    } else { ?><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>: <input name="buy_cr" style="width:50px;"
                                                              value="<?= $_POST['buy_cr'] ?>"/> <input
                            class="btn btn-success" value="<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>" type="submit"/><?
                    } ?>
                </form>
            </td>
        </tr>
    </table>
<?php
endif;

if (!$u->info['bukmeker'] && !$u->info['admin']) {
    return;
}
if (!empty($_POST['systemM'])) {
    $r = "<strong><3E><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>: <span style='color: darkgreen;'>{$_POST['sysMes']}</span> [<5B><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>]</strong>";
    mysql_query("INSERT INTO `chat` (`new`,`text`,`time`,`type`) VALUES ('1','" . $r . "', unix_timestamp(),'6')");
    echo "<br><b style='color: red;'><3E><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>.</b>";
}
?>
<div style="width: 500px;">
    <form method='POST'>
        <label><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <EFBFBD> <EFBFBD><EFBFBD><EFBFBD>: <br>
            <textarea name="sysMes" rows="4" cols="80"></textarea>
        </label>
        <br>
        <input type='submit' name='systemM' class='btn' value='<27><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>'>
    </form>
</div>