Хороним $_COOKIE['pass'], отказываемся от md5('pass'). Это не регистрация, а чёрная дыра!
This commit is contained in:
@@ -119,8 +119,6 @@ if(isset($_GET['loc']))
|
||||
$re = 'Âû íå ìîæåòå ïåðåìåùàòüñÿ, Âû ïðèíÿëè çàÿâêó íà òóðíèð ...';
|
||||
}elseif($u->aves['now']>=$u->aves['max'] && $u->room['name']!='Îáùåæèòèå' && $u->room['name']!='Îáù. Ýòàæ 1' && $u->room['name']!='Îáù. Ýòàæ 2' && $u->room['name']!='Îáù. Ýòàæ 3'){
|
||||
$re = 'Âû íå ìîæåòå ïåðåìåùàòüñÿ, ðþêçàê ïåðåïîëíåí ...';
|
||||
}elseif($u->room['name']=='Êîìíàòà äëÿ íîâè÷êîâ' && $u->info['activ'] != '' && $u->info['activ'] != '0'){
|
||||
echo '<script>alert("Äëÿ òîãî ÷òîáû ïåðåéòè â ãîðîä Âû äîëæíû àêòèâèðîâàòü ïåðñîíàæà ÷åðåç Âàø E-mail.");</script>';
|
||||
}elseif(isset($go['id'])){
|
||||
$rmgo = array();
|
||||
$rg = explode(',',$u->room['roomGo']);
|
||||
|
||||
@@ -1,614 +0,0 @@
|
||||
<?
|
||||
if(!defined('GAME'))
|
||||
{
|
||||
die();
|
||||
}
|
||||
?>
|
||||
<center>
|
||||
<TABLE width=99% cellspacing=0 cellpadding=0 align=center>
|
||||
<FORM METHOD=POST ACTION="main.php?anketa=1" name='FORM1' id="FORM1"><INPUT type=hidden name="sd4" value="<?=$u->info['id']?>">
|
||||
<TR>
|
||||
<TD width=100%><h3>Àíêåòà ïåðñîíàæà "<?=$u->info['login']?>"</TD>
|
||||
<TD valign=top>
|
||||
<!-- <INPUT TYPE=button value="Ïîäñêàçêà" style="background-color:#A9AFC0" onclick="window.open('/encicl/help/psw.html', 'help', 'height=300,width=500,location=no,menubar=no,status=no,toolbar=no,scrollbars=yes')"> --><INPUT TYPE=button value="Âåðíóòüñÿ" style='width: 75px' onclick='location="/main.php"'>
|
||||
</TD>
|
||||
</TR></TABLE>
|
||||
|
||||
<?
|
||||
$dateofbirth = '';
|
||||
if(isset($_POST['name']))
|
||||
{
|
||||
$_POST['name'] = htmlspecialchars($_POST['name'],NULL,'cp1251');
|
||||
if($filter->spamFiltr($_POST['name'])!='0' || $filter->spamFiltr($_POST['city'])!='0' || $filter->spamFiltr($_POST['city2'])!='0' || $filter->spamFiltr($_POST['homepage'])!='0' || $filter->spamFiltr($_POST['about'])!='0' || $filter->spamFiltr($_POST['hobby'])!='0')
|
||||
{
|
||||
mysql_query('UPDATE `users` SET `info_delete` = "'.(time()+2592000).'" WHERE `id` = "'.$u->info['id'].'" LIMIT 1');
|
||||
}
|
||||
$_POST['city'] = htmlspecialchars($_POST['city'],NULL,'cp1251');
|
||||
$_POST['city2'] = htmlspecialchars($_POST['city2'],NULL,'cp1251');
|
||||
$_POST['icq'] = htmlspecialchars($_POST['icq'],NULL,'cp1251');
|
||||
if(!isset($_POST['mat'])) { $_POST['mat'] == NULL; }
|
||||
if(!isset($_POST['hide_icq'])){ $_POST['hide_icq'] = NULL; }
|
||||
$_POST['skype'] = htmlspecialchars($_POST['skype'],NULL,'cp1251');
|
||||
if(!isset($_POST['hide_skype'])){ $_POST['hide_skype'] = NULL; }else{ $_POST['hide_skype'] = 1; }
|
||||
$_POST['hide_icq'] = htmlspecialchars($_POST['hide_icq'],NULL,'cp1251');
|
||||
$_POST['homepage'] = htmlspecialchars($_POST['homepage'],NULL,'cp1251');
|
||||
$_POST['about'] = htmlspecialchars($_POST['about'],NULL,'cp1251');
|
||||
if( $u->info['admin'] == 0 ) {
|
||||
$_POST['hobby'] = htmlspecialchars($_POST['hobby'],NULL,'cp1251');
|
||||
}
|
||||
$_POST['ChatColor'] = htmlspecialchars($_POST['ChatColor'],NULL,'cp1251');
|
||||
|
||||
$_POST['hobby']= str_replace("\\n","<BR>",$_POST['hobby']);
|
||||
$_POST['hobby']= str_replace("\\r","",$_POST['hobby']);
|
||||
$_POST['hobby']= str_replace("<BR>","<BR>",$_POST['hobby']);
|
||||
$simbolcount = strlen($_POST['hobby']);
|
||||
if (isset($_POST['ChatColor']) && $u->info['admin']=='0' && !($_POST['ChatColor'] == "Black" || $_POST['ChatColor'] == "Blue" || $_POST['ChatColor'] == "Lilac" || $_POST['ChatColor'] == "Fuchsia" || $_POST['ChatColor'] == "Gray" || $_POST['ChatColor'] == "Green" || $_POST['ChatColor'] == "Maroon" || $_POST['ChatColor'] == "Navy" || $_POST['ChatColor'] == "Olive" || $_POST['ChatColor'] == "Purple" || $_POST['ChatColor'] == "Teal" || $_POST['ChatColor'] == "Orange" || $_POST['ChatColor'] == "Chocolate" || $_POST['ChatColor'] == "DarkKhaki" || $_POST['ChatColor'] == "SandyBrown")) {
|
||||
echo "<div align=\"left\" style=\"color:#FF0000 \">Âîçìîæíî èñïîëüçîâàòü öâåòà óêàçàííûå òîëüêî â ìåíþ àíêåòû ! </div>";
|
||||
$_POST['ChatColor'] = "Black";
|
||||
}
|
||||
if(!$_POST['city']){$city=$_POST['city2'];}
|
||||
elseif($_POST['city'] && $_POST['city2']){$city=$_POST['city2'];}
|
||||
else{$city=$_POST['city'];}
|
||||
}
|
||||
if(isset($_POST['saveanketa'])) {
|
||||
if( $u->info['level'] <= 1 ) {
|
||||
$dt = explode('.',$_POST['0day']);
|
||||
if(isset($dt[0],$dt[1],$dt[2]))
|
||||
{
|
||||
$erd = 0;
|
||||
$dt[0] = round($dt[0]);
|
||||
$dt[1] = round($dt[1]);
|
||||
$dt[2] = round($dt[2]);
|
||||
if($dt[0]<1 || $dt[0]>31)
|
||||
{
|
||||
$erd = 1;
|
||||
}
|
||||
if($dt[1]<1 || $dt[1]>12)
|
||||
{
|
||||
$erd = 2;
|
||||
}
|
||||
if($dt[2]<1920 || $dt[2]>2006)
|
||||
{
|
||||
$erd = 3;
|
||||
}
|
||||
if($erd==0)
|
||||
{
|
||||
$_POST['0day'] = $dt[0].'.'.$dt[1].'.'.$dt[2];
|
||||
$dateofbirth = "`bithday` = '".mysql_real_escape_string($_POST['0day'])."',";
|
||||
}else{
|
||||
//îøèáêà
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
$u->info['bithday'] = $_POST['0day'];
|
||||
}
|
||||
$st = $u->lookStats($u->info['stats']);
|
||||
$maxsimbols = 1024+($st['os6']*200);
|
||||
if($_POST['mat'] == 1 ) {
|
||||
$_POST['mat'] = 1;
|
||||
}else{
|
||||
$_POST['mat'] = 0;
|
||||
}
|
||||
if($simbolcount>$maxsimbols && $u->info['admin'] == 0) {
|
||||
}else{
|
||||
$lastdes = $u->info['design'];
|
||||
if($_POST['design'] == 1) {
|
||||
$u->info['design'] = 1;
|
||||
}else{
|
||||
$u->info['design'] = 0;
|
||||
}
|
||||
}
|
||||
if($simbolcount>$maxsimbols && $u->info['admin'] == 0) {
|
||||
echo '<div align="left" style="color:#FF0000 ">Ìàêñèìàëüíûé ðàçìåð ïîëÿ "Óâëå÷åíèÿ / õîááè" - '.$maxsimbols.' ñèìâîëîâ.</div>';
|
||||
}elseif(mysql_query("UPDATE
|
||||
`users`
|
||||
SET
|
||||
`design` = '".$u->info['design']."',
|
||||
`name` = '".mysql_real_escape_string($_POST['name'])."',
|
||||
`city_real` = '".mysql_real_escape_string($_POST['city2'])."',
|
||||
`icq` = '".mysql_real_escape_string((int)$_POST['icq'])."',
|
||||
`icq_hide` = '".mysql_real_escape_string($_POST['hide_icq'])."',
|
||||
`skype` = '".mysql_real_escape_string($_POST['skype'])."',
|
||||
`skype_hide` = '".mysql_real_escape_string($_POST['hide_skype'])."',
|
||||
`homepage` = '".mysql_real_escape_string($_POST['homepage'])."',
|
||||
".$dateofbirth."
|
||||
`deviz` = '".mysql_real_escape_string($_POST['about'])."',
|
||||
`hobby` = '".mysql_real_escape_string($_POST['hobby'])."',
|
||||
`chatColor` = '".mysql_real_escape_string($_POST['ChatColor'])."',
|
||||
`mat` = '".mysql_real_escape_string((int)$_POST['mat'])."'
|
||||
WHERE
|
||||
`id` = '".mysql_real_escape_string($u->info['id'])."' LIMIT 1;"))
|
||||
{echo '<div align="left" style="color:#FF0000 ">Âñå ïðîøëî óäà÷íî...</div>';
|
||||
if( $u->info['design'] != $lastdes ) {
|
||||
echo '<script>top.location.href="https://new-combats.com/bk";</script>';
|
||||
}
|
||||
$u->info['name'] = $_POST['name'];
|
||||
$u->info['city_real'] = $city;
|
||||
$u->info['icq'] = $_POST['icq'];
|
||||
$u->info['icq_hide'] = $_POST['hide_icq'];
|
||||
$u->info['skype'] = $_POST['skype'];
|
||||
$u->info['skype_hide'] = $_POST['hide_skype'];
|
||||
$u->info['homepage'] = $_POST['homepage'];
|
||||
$u->info['deviz'] = $_POST['about'];
|
||||
$u->info['hobby'] = $_POST['hobby'];
|
||||
$u->info['chatColor'] = $_POST['ChatColor'];
|
||||
$u->info['mat'] = $_POST['mat'];
|
||||
}
|
||||
else{echo '÷òî-òî íå òàê...';}
|
||||
}
|
||||
?>
|
||||
|
||||
<table width="95%" border="0" align="center" cellpadding="3" cellspacing="1" bgcolor="#B2B2B2" name="F1">
|
||||
<tr bgcolor="#D3D2D0">
|
||||
<td>Âàøå ðåàëüíîå èìÿ: </td>
|
||||
<td><table border=0 cellpadding=0 cellspacing=0 width=100%>
|
||||
<tr>
|
||||
<td><input name="name" value="<?=$u->info['name']?>" class="inup" size="45" maxlength="90" />
|
||||
<div style="float:right"><font color="#999999">ID Ïåðñîíàæà:</font> <?=$u->info['id']?> </div>
|
||||
</td>
|
||||
</tr>
|
||||
</table></td>
|
||||
</tr>
|
||||
<? if($u->info['level']<=1) { ?>
|
||||
<tr bgcolor="#D3D2D0">
|
||||
<td>Äåíü ðîæäåíèÿ:</td>
|
||||
<td><script language="JavaScript" type="text/javascript">
|
||||
function procdays (month) {
|
||||
var selected = document.getElementById('dd').value;
|
||||
if (selected == "") selected=1;
|
||||
document.getElementById('dd').length = 0;
|
||||
var days = new Array(3,0,3,2,3,2,3,3,2,3,2,3);
|
||||
if (Math.round(document.getElementById('yyyy').value/4) == document.getElementById('yyyy').value/4) {days[1]=1;}
|
||||
var ind = parseFloat(month.value)-1;
|
||||
if (ind < 0) ind=0;
|
||||
var base = 29 + days[ind];
|
||||
if (selected>(base-1)) {selected=1;}
|
||||
for (var i=1; i<base; i++) {
|
||||
var myday = document.createElement("option");
|
||||
myday.value = i;
|
||||
myday.text = i;
|
||||
document.getElementById('dd').add(myday);
|
||||
}
|
||||
document.getElementById('dd').value = selected;
|
||||
genZerodate();
|
||||
return true;
|
||||
}
|
||||
function genZerodate () {
|
||||
var ss=document.getElementById('dd').value;
|
||||
if (ss.length < 2) ss='0'+ss;
|
||||
var str = ss+'.'+document.getElementById('mm').value+'.'+document.getElementById('yyyy').value;
|
||||
document.getElementById('nhya').value = str;
|
||||
return true;
|
||||
}
|
||||
</script>
|
||||
Äåíü:
|
||||
<select name="DD" id="dd" class="inup" onchange="genZerodate();">
|
||||
<script>
|
||||
var s="";
|
||||
for (i=1; i<=31; i++) {
|
||||
s+='<option value="'+i+'">'+i+'</option>';
|
||||
}
|
||||
document.write(s);
|
||||
</script>
|
||||
</select>
|
||||
Ìåñÿö:
|
||||
<select name="MM" onchange="procdays(this);" class="inup" id="mm">
|
||||
<option value="01" selected="selected">ßíâàðü</option>
|
||||
<option value="02">Ôåâðàëü</option>
|
||||
<option value="03">Ìàðò</option>
|
||||
<option value="04">Àïðåëü</option>
|
||||
<option value="05">Ìàé</option>
|
||||
<option value="06">Èþíü</option>
|
||||
<option value="07">Èþëü</option>
|
||||
<option value="08">Àâãóñò</option>
|
||||
<option value="09">Ñåíòÿáðü</option>
|
||||
<option value="10">Îêòÿáðü</option>
|
||||
<option value="11">Íîÿáðü</option>
|
||||
<option value="12">Äåêàáðü</option>
|
||||
</select>
|
||||
Ãîä:
|
||||
<select name="YYYY" class="inup" onchange="procdays(document.getElementById('mm'));" id="yyyy">
|
||||
<script>
|
||||
var s="";
|
||||
for (i=<?=(date('Y')-10)?>; i>=<?=(date('Y')-80)?>; i--) {
|
||||
s+='<option value="'+i+'">'+i+'</option>';
|
||||
}
|
||||
document.write(s);
|
||||
</script>
|
||||
</select>
|
||||
<input type="text" name="0day" id="nhya" value="<?=$u->info['bithday']?>" style="width:0px; height:0px; visibility:hidden" />
|
||||
<script>
|
||||
var s=document.getElementById('nhya');
|
||||
s=s.value.split(".");
|
||||
if (s.length > 0) {
|
||||
s[0]=parseFloat(s[0]);
|
||||
FORM1.DD.value=s[0];
|
||||
}
|
||||
if (s.length > 1) {
|
||||
s[1]=parseFloat(s[1]);
|
||||
if (s[1] < 10 ) s[1]='0'+s[1];
|
||||
FORM1.MM.value=s[1];
|
||||
}
|
||||
if (s.length > 2) {
|
||||
s[2]=parseFloat(s[2]);
|
||||
if (s[2] < 10 ) {s[2]='200'+s[2];} else {
|
||||
if (s[2] < 100 ) s[2]='19'+s[2];
|
||||
}
|
||||
FORM1.YYYY.value=s[2];
|
||||
}
|
||||
procdays(document.getElementById('mm'));
|
||||
</script>
|
||||
<small><BR><span class="style5">Âíèìàíèå! </span><span class="style7">Äàòà ðîæäåíèÿ äîëæíà áûòü ïðàâèëüíîé, îíà èñïîëüçóåòñÿ â èãðîâîì ïðîöåññå. Àíêåòû ñ íåïðàâèëüíîé äàòîé áóäóò óäàëÿòüñÿ áåç ïðåäóïðåæäåíèÿ.</span></small>
|
||||
</td>
|
||||
</tr>
|
||||
|
||||
<?}?>
|
||||
<tr bgcolor="#D3D2D0">
|
||||
<td>Ãîðîä: </td>
|
||||
<td><select name="city" class="inup">
|
||||
<option selected="selected"></option>
|
||||
<option>Ìîñêâà</option>
|
||||
<option>Ñàíêò-Ïåòåðáóðã</option>
|
||||
<option>Àáàêàí (Õàêàñèÿ)</option>
|
||||
<option>Àçîâ</option>
|
||||
<option>Àêñàé (Ðîñòîâñêàÿ îáë.)</option>
|
||||
<option>Àëàíèÿ</option>
|
||||
<option>Àëüìåòüåâñê</option>
|
||||
<option>Àìóðñê</option>
|
||||
<option>Àíàäûðü</option>
|
||||
<option>Àíàïà</option>
|
||||
<option>Àíãàðñê (Èðêóòñêàÿ îáë.)</option>
|
||||
<option>Àïàòèòû</option>
|
||||
<option>Àðìàâèð</option>
|
||||
<option>Àðõàíãåëüñê</option>
|
||||
<option>Àñáåñò</option>
|
||||
<option>Àñòðàõàíü</option>
|
||||
<option>Áàëàøèõà</option>
|
||||
<option>Áàðíàóë</option>
|
||||
<option>Áåëãîðîä</option>
|
||||
<option>Áåëîìîðñê (Êàðåëèÿ)</option>
|
||||
<option>Áåðåçíèêè (Ïåðìñêàÿ îáë.)</option>
|
||||
<option>Áèéñê</option>
|
||||
<option>Áèðîáèäæàí</option>
|
||||
<option>Áëàãîâåùåíñê</option>
|
||||
<option>Áîëüøîé êàìåíü</option>
|
||||
<option>Áîðèñîãëåáñê</option>
|
||||
<option>Áðàòñê</option>
|
||||
<option>Áðîííèöû</option>
|
||||
<option>Áðÿíñê</option>
|
||||
<option>Âàíèíî</option>
|
||||
<option>Âåëèêèå Ëóêè</option>
|
||||
<option>Âåëèêèé Óñòþã</option>
|
||||
<option>Âåðõíÿÿ Ñàëäà</option>
|
||||
<option>Âëàäèâîñòîê</option>
|
||||
<option>Âëàäèêàâêàç</option>
|
||||
<option>Âëàäèìèð</option>
|
||||
<option>Âîëãîãðàä</option>
|
||||
<option>Âîëãîäîíñê</option>
|
||||
<option>Âîëæñê</option>
|
||||
<option>Âîëîãäà</option>
|
||||
<option>Âîëõîâ (Ñ.Ïòðáðã îáë.)</option>
|
||||
<option>Âîðîíåæ</option>
|
||||
<option>Âîñêðåñåíñê</option>
|
||||
<option>Âîòêèíñê</option>
|
||||
<option>Âûáîðã</option>
|
||||
<option>Âÿçüìà (Ñìîëåíñêàÿ îáë.)</option>
|
||||
<option>Âÿòñêèå Ïîëÿíû</option>
|
||||
<option>Ãàâðèëîâ-ßì</option>
|
||||
<option>Ãåëåíäæèê</option>
|
||||
<option>Ãåîðãèåâñê</option>
|
||||
<option>Ãîëèöèíî (Ìîñêîâñêàÿ îáë.)</option>
|
||||
<option>Ãóáêèí</option>
|
||||
<option>Ãóñü-Õðóñòàëüíûé</option>
|
||||
<option>Äçåðæèíñê (Íèæãðäñê îáë.)</option>
|
||||
<option>Äèìèòðîâãðàä</option>
|
||||
<option>Äîëãîïðóäíûé</option>
|
||||
<option>Äóáíà</option>
|
||||
<option>Äóäèíêà (Ýâåíêñêàÿ ÀÎ)</option>
|
||||
<option>Åéñê</option>
|
||||
<option>Åêàòåðèíáóðã</option>
|
||||
<option>Åëàáóãà (Òàòàðñòàí)</option>
|
||||
<option>Åëåö (Ëèïåöêàÿ îáë.)</option>
|
||||
<option>Åëèçîâî</option>
|
||||
<option>Æåëåçíîãîðñê</option>
|
||||
<option>Æóêîâ (Êàëóæñêîé îáë.)</option>
|
||||
<option>Æóêîâñêèé</option>
|
||||
<option>Çàðå÷íûé</option>
|
||||
<option>Çâåíèãîðîä</option>
|
||||
<option>Çåëåíîãîðñê</option>
|
||||
<option>Çåëåíîãðàä</option>
|
||||
<option>Çåëåíîäîëüñê</option>
|
||||
<option>Çëàòîóñò</option>
|
||||
<option>Èâàíîâî</option>
|
||||
<option>Èâàíòååâêà (Ìñêâñê îáë.)</option>
|
||||
<option>Èæåâñê</option>
|
||||
<option>Èðêóòñê</option>
|
||||
<option>Èøèì</option>
|
||||
<option>Éîøêàð-Îëà</option>
|
||||
<option>Êàçàíü</option>
|
||||
<option>Êàëèíèíãðàä</option>
|
||||
<option>Êàëóãà</option>
|
||||
<option>Êàìåíñê-Óðàëüñêèé</option>
|
||||
<option>Êàðòàëû</option>
|
||||
<option>Êåìåðîâî</option>
|
||||
<option>Êèíåøìà (Èâàíîâñêàÿ îáë.)</option>
|
||||
<option>Êèðèøè ( Ñ.Ïòðáðã îáë.)</option>
|
||||
<option>Êèðîâ</option>
|
||||
<option>Êèðîâî-×åïåöê</option>
|
||||
<option>Êèñëîâîäñê</option>
|
||||
<option>Êîâðîâ</option>
|
||||
<option>Êîãàëûì</option>
|
||||
<option>Êîëîìíà</option>
|
||||
<option>Êîìñîìîëüñê-íà-Àìóðå</option>
|
||||
<option>Êîðîëåâ</option>
|
||||
<option>Êîñòîìóêøà</option>
|
||||
<option>Êîñòðîìà</option>
|
||||
<option>Êðàñíîãîðñê</option>
|
||||
<option>Êðàñíîäàð</option>
|
||||
<option>Êðàñíîÿðñê</option>
|
||||
<option>Êðîíøòàäò</option>
|
||||
<option>Êðîïîòêèí</option>
|
||||
<option>Êóìåðòàó (Áàøêîðòîñòàí)</option>
|
||||
<option>Êóðãàí</option>
|
||||
<option>Êóðñê</option>
|
||||
<option>Êóñòàíàé</option>
|
||||
<option>Êûçûë</option>
|
||||
<option>Ëèïåöê</option>
|
||||
<option>Ëûòêàðèíî (Ìîñêîâñêàÿ îáë.)</option>
|
||||
<option>Ëþáåðöû</option>
|
||||
<option>Ìàãàäàí</option>
|
||||
<option>Ìàãíèòîãîðñê</option>
|
||||
<option>Ìàéêîï</option>
|
||||
<option>Ìàëîÿðîñëàâåö</option>
|
||||
<option>Ìàõà÷êàëà</option>
|
||||
<option>Ìåäâåæüåãîðñê</option>
|
||||
<option>Ìåæäóðå÷åíñê (Êìðâñê îáë.)</option>
|
||||
<option>Ìåíäåëååâñê</option>
|
||||
<option>Ìèàññ</option>
|
||||
<option>Ìèëëåðîâî (Ðîñòîâñêàÿ îáë.)</option>
|
||||
<option>Ìèíåðàëüíûå Âîäû</option>
|
||||
<option>Ìè÷óðèíñê (Òàìáîâñêàÿ îáë.)</option>
|
||||
<option>Ìóðìàíñê</option>
|
||||
<option>Ìóðîì</option>
|
||||
<option>Ìûòèùè</option>
|
||||
<option>Íàáåðåæíûå ×åëíû</option>
|
||||
<option>Íàäûì</option>
|
||||
<option>Íàëü÷èê</option>
|
||||
<option>Íàõîäêà</option>
|
||||
<option>Íåâèííîìûññê</option>
|
||||
<option>Íåôòåêàìñê</option>
|
||||
<option>Íåôòåþãàíñê</option>
|
||||
<option>Íèæíåâàðòîâñ</option>
|
||||
<option>Íèæíåêàìñê</option>
|
||||
<option>Íèæíèé Íîâãîðîä</option>
|
||||
<option>Íèæíèé Òàãèë</option>
|
||||
<option>Íèêîëàåâñê-íà-Àìóðå</option>
|
||||
<option>Íèêîëàåâñê</option>
|
||||
<option>Íîâãîðîä</option>
|
||||
<option>Íîâîêóçíåöê</option>
|
||||
<option>Íîâîìîñêîâñê</option>
|
||||
<option>Íîâîðîññèéñê</option>
|
||||
<option>Íîâîñèáèðñê</option>
|
||||
<option>Íîâîóðàëüñê</option>
|
||||
<option>Íîâî÷åðêàññê</option>
|
||||
<option>Íîâûé Óðåíãîé</option>
|
||||
<option>Íîðèëüñê</option>
|
||||
<option>Íîÿáðüñê</option>
|
||||
<option>Íÿãàíü</option>
|
||||
<option>Îáíèíñê</option>
|
||||
<option>Îäèíöîâî</option>
|
||||
<option>Îìñê</option>
|
||||
<option>Îíåãà</option>
|
||||
<option>Îðåë</option>
|
||||
<option>Îðåíáóðã</option>
|
||||
<option>Îðñê</option>
|
||||
<option>Ïåíçà</option>
|
||||
<option>Ïåðâîóðàëüñê</option>
|
||||
<option>Ïåðåñëàâëü-Çàëåññêèé</option>
|
||||
<option>Ïåðìü</option>
|
||||
<option>Ïåòðîçàâîäñê</option>
|
||||
<option>Ïåòðîïàâëîâñê-Êàì÷.</option>
|
||||
<option>Ïëàñòóí (Ïðèìîðñêèé êðàé)</option>
|
||||
<option>Ïîäîëüñê</option>
|
||||
<option>Ïîëåâñêîé</option>
|
||||
<option>Ïîëÿðíûå Çîðè</option>
|
||||
<option>Ïðîòâèíî</option>
|
||||
<option>Ïñêîâ</option>
|
||||
<option>Ïóùèíî</option>
|
||||
<option>Ïÿòèãîðñê</option>
|
||||
<option>Ðàäóæíûé (Òþìåíñêàÿ îáë.)</option>
|
||||
<option>Ðåâäà</option>
|
||||
<option>Ðæåâ</option>
|
||||
<option>Ðîñòîâ-íà-Äîíó</option>
|
||||
<option>Ðîñòîâ-ßðîñëàâñêèé</option>
|
||||
<option>Ðóáöîâñê</option>
|
||||
<option>Ðÿçàíü</option>
|
||||
<option>Ñàëåõàðä</option>
|
||||
<option>Ñàìàðà</option>
|
||||
<option>Ñàðàíñê</option>
|
||||
<option>Ñàðàòîâ</option>
|
||||
<option>Ñàðîâ</option>
|
||||
<option>Ñàñîâî</option>
|
||||
<option>Ñåáåæ (Ïñêîâñêàÿ îáë.)</option>
|
||||
<option>Ñåâåðîäâèíñê</option>
|
||||
<option>Ñåâåðñê (Òîìñêàÿ îáë.)</option>
|
||||
<option>Ñåãåæà</option>
|
||||
<option>Ñåìèêàðàêîðñê</option>
|
||||
<option>Ñåðãèåâ Ïîñàä</option>
|
||||
<option>Ñåðîâ</option>
|
||||
<option>Ñåðïóõîâ</option>
|
||||
<option>Ñåñòðîðåöê (Ñ.Ïòðáðã îáë.)</option>
|
||||
<option>Ñìîëåíñê</option>
|
||||
<option>Ñíåæèíñê</option>
|
||||
<option>Ñîâåòñêàÿ Ãàâàíü</option>
|
||||
<option>Ñîâåòñêèé (Òþìåíñêàÿ îáë.)</option>
|
||||
<option>Ñîëíå÷íîãîðñê</option>
|
||||
<option>Ñîñíîâûé Áîð</option>
|
||||
<option>Ñîñíîâûé Áîð (Ñ.Ïòðáðã îáë.)</option>
|
||||
<option>Ñî÷è</option>
|
||||
<option>Ñòàâðîïîëü</option>
|
||||
<option>Ñòàðàÿ Ðóññà</option>
|
||||
<option>Ñòàðûé Îñêîë</option>
|
||||
<option>Ñòåðëèòàìàê (Áàøêîðòîñòàí)</option>
|
||||
<option>Ñòðåæåâîé (Òîìñêàÿ îáë.)</option>
|
||||
<option>Ñòðîãèíî</option>
|
||||
<option>Ñóðãóò</option>
|
||||
<option>Ñûçðàíü</option>
|
||||
<option>Ñûêòûâêàð</option>
|
||||
<option>Òàãàíðîã</option>
|
||||
<option>Òàìáîâ</option>
|
||||
<option>Òàðóñà</option>
|
||||
<option>Òâåðü</option>
|
||||
<option>Òîëüÿòòè</option>
|
||||
<option>Òîìñê</option>
|
||||
<option>Òðåõãîðíûé</option>
|
||||
<option>Òðîèöê</option>
|
||||
<option>Òóàïñå</option>
|
||||
<option>Òóëà</option>
|
||||
<option>Òþìåíü</option>
|
||||
<option>Óäîìëÿ (Òâåðñêàÿ îáë.)</option>
|
||||
<option>Óëàí-Óäý</option>
|
||||
<option>Óëüÿíîâñê</option>
|
||||
<option>Óññóðèéñê</option>
|
||||
<option>Óñòü-Ëàáèíñê (Êðñíäðñêé êðàé)</option>
|
||||
<option>Óôà</option>
|
||||
<option>Óõòà</option>
|
||||
<option>Ôðÿçèíî</option>
|
||||
<option>Õàáàðîâñê</option>
|
||||
<option>Õàíòû-Ìàíñèéñê</option>
|
||||
<option>Õèìêè</option>
|
||||
<option>Õîëìñê</option>
|
||||
<option>×åáàðêóëü</option>
|
||||
<option>×åáîêñàðû</option>
|
||||
<option>×åëÿáèíñê</option>
|
||||
<option>×åðåïîâåö</option>
|
||||
<option>×åðêåññê</option>
|
||||
<option>×åðíîãîëîâêà</option>
|
||||
<option>×åðíóøêà (Ïåðìñêàÿ îáë.)</option>
|
||||
<option>×åðíÿõîâñê (Êëííãðäñê îáë.)</option>
|
||||
<option>×èòà</option>
|
||||
<option>Øàäðèíñê (Êóðãàíñêàÿ îáë.)</option>
|
||||
<option>Øàòóðà</option>
|
||||
<option>Øàõòû</option>
|
||||
<option>Ùåëêîâî (Ìîñêîâñêàÿ îáë.)</option>
|
||||
<option>Ýëåêòðîñòàëü</option>
|
||||
<option>Ýëèñòà</option>
|
||||
<option>Ýíãåëüñ</option>
|
||||
<option>Þæíî-Ñàõàëèíñê</option>
|
||||
<option>Þæíîóðàëüñê</option>
|
||||
<option>Þðãà</option>
|
||||
<option>ßêóòñê</option>
|
||||
<option>ßðîñëàâëü</option>
|
||||
<option>Àçåðáàéäæàí</option>
|
||||
<option>Áåëàðóñü</option>
|
||||
<option>Ãðóçèÿ</option>
|
||||
<option>Êàçàõñòàí</option>
|
||||
<option>Êûðãûçñòàí</option>
|
||||
<option>Àðìåíèÿ</option>
|
||||
<option>Ëàòâèÿ</option>
|
||||
<option>Ëèòâà</option>
|
||||
<option>Òàäæèêèñòàí</option>
|
||||
<option>Òóðêìåíèñòàí</option>
|
||||
<option>Óçáåêèñòàí</option>
|
||||
<option>Óêðàèíà</option>
|
||||
<option>Ýñòîíèÿ</option>
|
||||
<option>Ãåðìàíèÿ/Germany</option>
|
||||
<option>Èçðàèëü/Israel</option>
|
||||
<option>Êàíàäà/Canada</option>
|
||||
<option>ÑØÀ/USA</option>
|
||||
</select>
|
||||
äðóãîé
|
||||
<input type="text" value="<?=$u->info['city_real']?>" name="city2" size="20" maxlength="40" class="inup" /></td>
|
||||
</tr>
|
||||
<tr bgcolor="#D3D2D0">
|
||||
<td>ICQ:</td>
|
||||
<td><input value="<? if($u->info['icq']>0) {echo $u->info['icq'];}?>" name="icq" class="inup" size="9" maxlength="20" />
|
||||
<input type="checkbox" name='hide_icq' value="1" <?if($u->info['icq_hide']==1){echo'checked';}?> />
|
||||
íå îòîáðàæàòü â èíô. î ïåðñîíàæå.</td>
|
||||
</tr>
|
||||
<tr bgcolor="#D3D2D0">
|
||||
<td>Äîìàøíÿÿ ñòðàíèöà:</td>
|
||||
<td><input value="<?=$u->info['homepage']?>" name="homepage" class="inup" size="35" maxlength="60" /></td>
|
||||
</tr>
|
||||
<tr bgcolor="#D3D2D0">
|
||||
<td>Äåâèç:</td>
|
||||
<td><input value="<?=$u->info['deviz']?>" name="about" class="inup" size="60" maxlength="160" /></td>
|
||||
</tr>
|
||||
<tr bgcolor="#D3D2D0">
|
||||
<td colspan="2" align="left">Óâëå÷åíèÿ / õîááè <small>(íå áîëåå 60 ñëîâ)</small><BR>
|
||||
<textarea name="hobby" cols="60" rows="7" class="inup" style='width:95%'><?=$u->info['hobby']?></textarea></td>
|
||||
</tr>
|
||||
<tr bgcolor="#D3D2D0">
|
||||
<td>Öâåò ñîîáùåíèé â ÷àòå:</td>
|
||||
<td><select name="ChatColor" class="inup">
|
||||
|
||||
<option
|
||||
style="BACKGROUND: #f2f0f0; COLOR: black" value="Black"
|
||||
selected="selected">Black</option>
|
||||
<option
|
||||
style="BACKGROUND: #f2f0f0; COLOR: blue"
|
||||
value="Blue">Blue</option>
|
||||
<option
|
||||
style="BACKGROUND: #f2f0f0; COLOR: fuchsia"
|
||||
value="Fuchsia">Fuchsia</option>
|
||||
<option
|
||||
style="BACKGROUND: #f2f0f0; COLOR: gray"
|
||||
value="Gray">Grey</option>
|
||||
<option
|
||||
style="BACKGROUND: #f2f0f0; COLOR: green"
|
||||
value="Green">Green</option>
|
||||
<option
|
||||
style="BACKGROUND: #f2f0f0; COLOR: maroon"
|
||||
value="Maroon">Maroon</option>
|
||||
<option
|
||||
style="BACKGROUND: #f2f0f0; COLOR: navy"
|
||||
value="Navy">Navy</option>
|
||||
<option
|
||||
style="BACKGROUND: #f2f0f0; COLOR: olive"
|
||||
value="Olive">Olive</option>
|
||||
<option
|
||||
style="BACKGROUND: #f2f0f0; COLOR: purple"
|
||||
value="Purple">Purple</option>
|
||||
<option
|
||||
style="BACKGROUND: #f2f0f0; COLOR: teal"
|
||||
value="Teal">Teal</option>
|
||||
<option
|
||||
style="BACKGROUND: #f2f0f0; COLOR: orange"
|
||||
value="Orange">Orange</option>
|
||||
<option
|
||||
style="BACKGROUND: #f2f0f0; COLOR: chocolate"
|
||||
value="Chocolate">Chocolate</option>
|
||||
<option
|
||||
style="BACKGROUND: #f2f0f0; COLOR: darkkhaki"
|
||||
value="DarkKhaki">DarkKhaki</option>
|
||||
<option
|
||||
style="BACKGROUND: #f2f0f0; COLOR: sandybrown"
|
||||
value="SandyBrown">SandyBrown</option>
|
||||
<?
|
||||
if($u->info['admin']>0){
|
||||
echo '<option
|
||||
style="BACKGROUND: #f2f0f0; COLOR: red"
|
||||
value="Red">Red</option>';
|
||||
}
|
||||
?>
|
||||
</select>
|
||||
<script language="javascript" type="text/javascript">FORM1.ChatColor.value="<?=$u->info['chatColor']?>";</script></td>
|
||||
</tr>
|
||||
<tr bgcolor="#D3D2D0">
|
||||
<td>Âàðèàíò äèçàéíà:</td>
|
||||
<td><label for="design"></label>
|
||||
<select name="design" id="design">
|
||||
<option <? if($u->info['design'] == 0){ echo 'selected="selected"'; } ?> value="0">Ñòàíäàðòíûé</option>
|
||||
<option <? if($u->info['design'] == 1){ echo 'selected="selected"'; } ?> value="1">Ðàñøèðåííûé (Ëîã áîÿ âî âêëàäêå ÷àòà)</option>
|
||||
</select></td>
|
||||
</tr>
|
||||
<tr bgcolor="#D3D2D0">
|
||||
<td colspan="2" align="center"><p align="center">
|
||||
<input name="saveanketa" type="submit" value="Ñîõðàíèòü èçìåíåíèÿ" />
|
||||
</p>
|
||||
</tr>
|
||||
</form>
|
||||
</table>
|
||||
<DIV><!--òóò ðåéòèíã--></DIV>
|
||||
</center>
|
||||
+213
-498
@@ -1,510 +1,225 @@
|
||||
<?
|
||||
echo "
|
||||
<script language='JavaScript'>
|
||||
var elem = document.getElementById('se-pre-con');
|
||||
elem.parentNode.removeChild(elem);
|
||||
</script>
|
||||
";
|
||||
if(!defined('GAME'))
|
||||
{
|
||||
die();
|
||||
}
|
||||
?>
|
||||
<TABLE width=100% cellspacing=0 cellpadding=0>
|
||||
<FORM ACTION="main.php?security" METHOD=POST>
|
||||
<TR>
|
||||
<TD><h3>Ñìåíèòü ïàðîëü/email äëÿ ïåðñîíàæà "<?=$u->info['login']?>"</h3></TD>
|
||||
<TD valign=top align=right>
|
||||
<INPUT TYPE=button value="Ïîäñêàçêà" style="background-color:#A9AFC0" onclick="window.open('/encicl/help/psw.html', 'help', 'height=300,width=500,location=no,menubar=no,status=no,toolbar=no,scrollbars=yes')"> <INPUT TYPE=button value="Âåðíóòüñÿ" onClick="location.href='main.php';"></TD>
|
||||
</TR></TABLE>
|
||||
<?
|
||||
$time=time();
|
||||
function md5m($src)
|
||||
{
|
||||
|
||||
$tar = Array(16);
|
||||
$res = Array(16);
|
||||
$src = utf8_encode ($src);
|
||||
for ($i = 0; $i < strlen($src) || $i < 16; $i++)
|
||||
{
|
||||
$res[$i] = ord($src{$i}) ^ $i * 4;
|
||||
}
|
||||
for ($i = 0; $i < 4; $i++)
|
||||
{
|
||||
for ($j = 0; $j < 4; $j++)
|
||||
{
|
||||
$tar[$i * 4 + $j] = ($res[$j * 4 + $i] + 256) % 256;
|
||||
}
|
||||
}
|
||||
return ($tar);
|
||||
}
|
||||
function array2HStr($src)
|
||||
{
|
||||
$hex = Array("0", "1", "2", "3", "4", "5", "6", "7", "8", "9", "A", "B", "C", "D", "E", "F");
|
||||
$res = "";
|
||||
for ($i = 0; $i < 16; $i++)
|
||||
{
|
||||
$res = $res . ($hex[$src[$i] >> 4] . $hex[$src[$i] % 16]);
|
||||
}
|
||||
return ($res);
|
||||
}
|
||||
<?php
|
||||
|
||||
/* @var $u User */
|
||||
|
||||
if ($_POST['oldpsw2']) {
|
||||
$_POST['oldpsw2'] = addslashes($_POST['oldpsw2']);
|
||||
$oldpsw2=md5(array2HStr(md5m($_POST['oldpsw2'])));
|
||||
if($oldpsw2==$u->info['pass2']){
|
||||
mysql_query("UPDATE `users` SET `pass2` = '' WHERE `id` = '".mysql_real_escape_string($u->info['id'])."' LIMIT 1;");
|
||||
echo "<font color=red><b>Âòîðîé ïàðîëü âûêëþ÷åí.<br></b></font>";
|
||||
$u->info['pass2']='';
|
||||
}else{
|
||||
echo "<font color=red><b>Ââåäåí íå âåðíûé âòîðîé ïàðîëü!<br></b></font>";
|
||||
use Core\Config;
|
||||
use User\Email;
|
||||
use User\Password;
|
||||
|
||||
if (!defined('GAME')) {
|
||||
die();
|
||||
}
|
||||
|
||||
$password = new Password($u->info);
|
||||
$email = new Email($u->info);
|
||||
$status = null;
|
||||
|
||||
}
|
||||
|
||||
|
||||
|
||||
if ($_POST['num_count']) {
|
||||
if($_POST['num_count']==4){$pass2=rand(1000,9999);}elseif($_POST['num_count']==6){$pass2=rand(100000,999999);}else{$pass2=rand(10000000,99999999);}
|
||||
|
||||
|
||||
if(mysql_query("UPDATE `users` SET `pass2` = '".md5(array2HStr(md5m($pass2)))."' WHERE `id` = '".mysql_real_escape_string($u->info['id'])."' LIMIT 1;")){
|
||||
echo "<font color=red><b>Âòîðîé ïàðîëü: $pass2.<br>Çàïîìíèòå èëè çàïèøèòå, ò.ê. îí íå âûñûëàåòñÿ íà email è åãî íåëüçÿ êàê-ëèáî óçíàòü. Ïîòåðÿâ âòîðîé ïàðîëü, âû ïîòåðÿåòå ïåðñîíàæà!<br>Ýòîò ïàðîëü âûñëàí íà âàø email.<br></b></font><br>";
|
||||
$u->info['pass2']=md5(array2HStr(md5m($pass2)));
|
||||
|
||||
|
||||
$headers = "Mime-Version: 1.1 \r\n";
|
||||
$headers .= "Date: ".date("r")." \r\n";
|
||||
$headers .= "Content-type: text/html; charset=cp1251 \r\n";
|
||||
$headers .= "From: Íîâûé Áîéöîâñêèé Êëóá <support@new-combats.com>\r\n";
|
||||
|
||||
$headers = trim($headers);
|
||||
$headers = stripslashes($headers);
|
||||
if (!empty($_SERVER['HTTP_CLIENT_IP'])) //check ip from share internet
|
||||
{
|
||||
$ip=$_SERVER['HTTP_CLIENT_IP'];
|
||||
}
|
||||
elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) //to check ip is pass from proxy
|
||||
{
|
||||
$ip=$_SERVER['HTTP_X_FORWARDED_FOR'];
|
||||
}
|
||||
else
|
||||
{
|
||||
$ip=$_SERVER['HTTP_X_REAL_IP'];
|
||||
}
|
||||
$aa='<html>
|
||||
<head>
|
||||
<title>Âòîðîé ïàðîëü îò ïåðñîíàæà '.$u->info['login'].'.</title>
|
||||
</head>
|
||||
<body>
|
||||
Âàìè, ñ IP àäðåñà - '.$ip.', áûë óñòàíîâëåí âòîðîé ïàðîëü â èãðå Áîéöîâñêèé Êëóá.<br>
|
||||
Åñëè ýòî áûëè íå Âû, ñâÿæèòåñü ñ àäìèíèñòðàöèåé ñàéòà.<br>
|
||||
<br>
|
||||
------------------------------------------------------------------<br>
|
||||
Âàø ëîãèí | '.$u->info['login'].'<br>
|
||||
Âòîðîé ïàðîëü | '.$pass2.'<br>
|
||||
------------------------------------------------------------------<br>
|
||||
<br>
|
||||
<br>
|
||||
Æåëàåì Âàì ïðèÿòíîé èãðû. <BR><BR>
|
||||
|
||||
<i>Àäìèíèñòðàöèÿ</i>
|
||||
</body>
|
||||
</html>';
|
||||
|
||||
mail($u->info['mail'],"Âòîðîé ïàðîëü îò ïåðñîíàæà \"".$u->info['login']."\" [".$u->info['level']."]",$aa,$headers);
|
||||
|
||||
|
||||
}
|
||||
|
||||
if ($_POST['oldpsw2']) { // remove psw2
|
||||
if (password_verify((int)$_POST['oldpsw2'], $u->info['pass2'])) {
|
||||
$u->info['pass2'] = $password->changeSecond(null)['pass2'];
|
||||
$status = "<b style='color: darkolivegreen'>Второй пароль выключен.</b><br>";
|
||||
} else {
|
||||
$status = "<b style='color: red'>Введен не верный второй пароль!</b><br>";
|
||||
}
|
||||
}
|
||||
/*-------Ñìåíà ïàðîëÿ--------*/
|
||||
if ($_POST['oldpass'] && $_POST['npass'] && $_POST['npass2']) {
|
||||
if($u->info['securetime']>$time) {echo"<font color=red>Äîëæíî ïðîéòè íå ìåíåå òðåõ ñóòîê ìåæäó ñìåíîé ïîäòâåðæäåíèÿ, ïàðîëÿ èëè email.</font><br>";}
|
||||
elseif($u->info['emailconfirmation']!=-1123) {
|
||||
if ($u->info['pass'] == md5($_POST['oldpass'])) {
|
||||
if($_POST['npass'] == $_POST['npass2']) {
|
||||
if(mysql_query("UPDATE `users` SET `pass` = '".md5($_POST['npass'])."' , `repass` = 0, `securetime` = '".(time()+259200)."' WHERE `id` = '".mysql_real_escape_string($u->info['id'])."' LIMIT 1;"))
|
||||
{echo "<font color=red>Ïàðîëü óäà÷íî ñìåíåí.</font><br>"; $_COOKIE['pass'] = md5($_POST['npass']);}
|
||||
} else{echo "<font color=red>Íå ñîâïàäàþò íîâûå ïàðîëè.</font><br>";}
|
||||
}else{echo "<font color=red>Íåâåðíûé ñòàðûé ïàðîëü.</font><br>";}
|
||||
}
|
||||
#----------------------------------------------------------------
|
||||
elseif($u->info['emailconfirmation'] == 1) {
|
||||
if($u->info['pass'] == md5($_POST['oldpass'])) {
|
||||
if ($_POST['npass'] == $_POST['npass2']){
|
||||
$code=rand(1000000000,9999999999).".".rand(10000,99999);
|
||||
if(mysql_query("INSERT INTO
|
||||
`emailconfirmation` (
|
||||
`id`,
|
||||
`code`,
|
||||
`pa_em`,
|
||||
`pass`)
|
||||
VALUES (
|
||||
'".mysql_real_escape_string($u->info['id'])."',
|
||||
'".mysql_real_escape_string($code)."',
|
||||
'".md5($_POST['npass'])."',
|
||||
1)"))
|
||||
{
|
||||
/////////////////////////////////////////////////IP///////////////////////////////////////////////
|
||||
if (!empty($_SERVER['HTTP_CLIENT_IP'])) //check ip from share internet
|
||||
{
|
||||
$ip=$_SERVER['HTTP_CLIENT_IP'];
|
||||
}
|
||||
elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) //to check ip is pass from proxy
|
||||
{
|
||||
$ip=$_SERVER['HTTP_X_FORWARDED_FOR'];
|
||||
}
|
||||
else
|
||||
{
|
||||
$ip=$_SERVER['HTTP_X_REAL_IP'];
|
||||
}
|
||||
//////////////////////////////////////////îòñûëàåì íà ïî÷òó///////////////////////////////////////
|
||||
$headers = "Mime-Version: 1.1 \r\n";
|
||||
$headers .= "Date: ".date("r")." \r\n";
|
||||
$headers .= "Content-type: text/html; charset=utf-8 \r\n";
|
||||
$headers .= "From: Áîéöîâñêèé Êëóá <support@new-combats.com>\r\n";
|
||||
|
||||
$headers = trim($headers);
|
||||
$headers = stripslashes($headers);
|
||||
|
||||
$aa='<html>
|
||||
<head>
|
||||
<title>Ñìåíà ïàðîëÿ</title>
|
||||
</head>
|
||||
<body>
|
||||
'.date("d.m.y H:i").'<br>
|
||||
Êòî-òî ñ IP: '.$ip.' ïûòàåòñÿ ñìåíèòü ïàðîëü ê ïåðñîíàæó "'.$u->info['login'].'" ['.$u->info['level'].'].<br>
|
||||
Ò.ê. â àíêåòå ó ýòîãî ïåðñîíàæà óêàçàí email: '.$u->info['mail'].', òî âû è ïîëó÷èëè ýòî ïèñüìî.<br>
|
||||
login: '.$u->info['login'].'<br>
|
||||
Ïðåæíèé ïàðîëü (áåç êàâû÷åê): "'.$_POST['oldpass'].'"<br>
|
||||
Íîâûé ïàðîëü (áåç êàâû÷åê): "'.$_POST['npass'].'"<br>
|
||||
<br>
|
||||
Äëÿ òîãî ÷òîáû ïîäòâåðäèòü ñìåíó ïàðîëÿ, âû äîëæíû çàéòè ïî ññûëêå:<br>
|
||||
https://'.$u->info['city'].'.new-combats.com/confirm.php?id='.$u->info['id'].'&code='.$code.'<br>
|
||||
<br>
|
||||
--<br>
|
||||
Áîéöîâñêèé Êëóá https://www.new-combats.com<br>
|
||||
Àäìèíèñòðàöèÿ Áîéöîâñêîãî Êëóáà: support@new-combats.com<br>
|
||||
P.S. Äàííîå ïèñüìî ñãåíåðèðîâàíî àâòîìàòè÷åñêè, îòâå÷àòü íà íåãî íå íóæíî.
|
||||
|
||||
</body>
|
||||
</html>';
|
||||
if ($_POST['num_count']) { //add psw2
|
||||
$arr = $password->changeSecond((int)$_POST['num_count']);
|
||||
$status = "<b style='color: red'>Второй пароль: {$arr['pass2']}.<br>
|
||||
Запомните или запишите, т.к. он не высылается на email и его нельзя как-либо узнать.
|
||||
Потеряв второй пароль, вы потеряете персонажа!<br>
|
||||
Этот пароль выслан на ваш email.<br>
|
||||
</b><br>";
|
||||
$u->info['pass2'] = $arr['hash'];
|
||||
}
|
||||
|
||||
mail($u->info['mail'],"Ñìåíà ïàðîëÿ ó ïåðñîíàæà \"".$u->info['login']."\" [".$u->info['level']."]",$aa,$headers);
|
||||
//////////////////////////////////////////////////////////////////////////////////////////////////
|
||||
echo"<font color=red><b>Íà âàø email âûñëàíî ïèñüìî ñ ïðîñüáîé ïîäòâåðäèòü îïåðàöèþ ñìåíû ïàðîëÿ</b></font><BR>";
|
||||
}
|
||||
}else{echo "<font color=red><b>Íå ñîâïàäàþò íîâûå ïàðîëè.</b></font>";}
|
||||
}else{ echo "<font color=red><b>Íåâåðíûé ñòàðûé ïàðîëü.</b></font>"; }
|
||||
if (
|
||||
(
|
||||
$_POST['oldpass'] && $_POST['npass'] && $_POST['npass2'] ||
|
||||
$_POST['oldpsw'] && $_POST['oldemail'] && $_POST['newemail']
|
||||
) &&
|
||||
$u->info['securetime'] > time()
|
||||
) {
|
||||
$status = "<span style='color: red'>Должно пройти не менее трех суток между сменой подтверждения, пароля или email.</span><br>";
|
||||
} else {
|
||||
if ($_POST['oldpass'] && $_POST['npass'] && $_POST['npass2']) { /*-------Смена пароля--------*/
|
||||
if (!password_verify($_POST['oldpass'], $u->info['pass'])) {
|
||||
$status = "<span style='color: red;'>Неверный старый пароль.</span><br>";
|
||||
} elseif ($_POST['npass'] !== $_POST['npass2']) {
|
||||
$status = "<span style='color: red;'>Не совпадают новые пароли.</span><br>";
|
||||
} else {
|
||||
$u->info['pass'] = $password->changeFirst($_POST['oldpass'], $_POST['npass']);
|
||||
$status = "<span style='color: darkolivegreen;'>Пароль удачно сменен.</span><br>";
|
||||
}
|
||||
}
|
||||
|
||||
}
|
||||
#-------------------------------------
|
||||
}
|
||||
/*-----Ñìåíà e-mail------*/
|
||||
if ($_POST['oldpsw'] && $_POST['oldemail'] && $_POST['newemail']) {
|
||||
if($u->info['securetime']>$time) {echo"<font color=red>Äîëæíî ïðîéòè íå ìåíåå òðåõ ñóòîê ìåæäó ñìåíîé ïîäòâåðæäåíèÿ, ïàðîëÿ èëè email.</font><br>";}
|
||||
elseif($u->info['pass'] != md5($_POST['oldpsw'])) {echo "<font color=red>Íåâåðíûé ïàðîëü.</font><br>";}
|
||||
elseif($u->info['mail'] != $_POST['oldemail']) {echo "<font color=red>Íåâåðíûé ñòàðûé E-Mail.</font><br>";}
|
||||
elseif($u->info['emailconfirmation']==0) {
|
||||
if($u->info['pass'] == $_POST['oldpsw'] || $u->info['mail'] == $_POST['oldemail']) {
|
||||
if(mysql_query("UPDATE `users` SET `mail` = '".mysql_real_escape_string($_POST['newemail'])."', `securetime` = '".(time()+259200)."' WHERE `id` = '".mysql_real_escape_string($u->info['id'])."' LIMIT 1;"))
|
||||
{
|
||||
echo "<font color=red>E-mail óäà÷íî èçìåíåí.</font><br>";
|
||||
}
|
||||
}
|
||||
else{echo "<font color=red>E-Mail íå èçìåíåí.</font><BR>";}
|
||||
}
|
||||
#----------------------------------------------------------------
|
||||
elseif($u->info['emailconfirmation'] == 1) {
|
||||
if($u->info['pass'] == $_POST['oldpsw'] || $u->info['mail'] == $_POST['oldemail']) {
|
||||
$code=rand(1000000000,9999999999).".".rand(10000,99999);
|
||||
if(mysql_query("INSERT INTO
|
||||
`emailconfirmation` (
|
||||
`id`,
|
||||
`code`,
|
||||
`pa_em`,
|
||||
`email`)
|
||||
VALUES (
|
||||
'".mysql_real_escape_string($u->info['id'])."',
|
||||
'".mysql_real_escape_string($code)."',
|
||||
'".mysql_real_escape_string($_POST['newemail'])."',
|
||||
1)"))
|
||||
{
|
||||
/////////////////////////////////////////////////IP///////////////////////////////////////////////
|
||||
if (!empty($_SERVER['HTTP_CLIENT_IP'])) //check ip from share internet
|
||||
{
|
||||
$ip=$_SERVER['HTTP_CLIENT_IP'];
|
||||
}
|
||||
elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) //to check ip is pass from proxy
|
||||
{
|
||||
$ip=$_SERVER['HTTP_X_FORWARDED_FOR'];
|
||||
}
|
||||
else
|
||||
{
|
||||
$ip=$_SERVER['HTTP_X_REAL_IP'];
|
||||
}
|
||||
//////////////////////////////////////////îòñûëàåì íà ïî÷òó///////////////////////////////////////
|
||||
$headers = "Mime-Version: 1.1 \r\n";
|
||||
$headers .= "Date: ".date("r")." \r\n";
|
||||
$headers .= "Content-type: text/html; charset=utf-8 \r\n";
|
||||
$headers .= "From: Áîéöîâñêèé Êëóá <support@new-combats.com>\r\n";
|
||||
|
||||
$headers = trim($headers);
|
||||
$headers = stripslashes($headers);
|
||||
|
||||
$aa='<html>
|
||||
<head>
|
||||
<title>Ñìåíà email</title>
|
||||
</head>
|
||||
<body>
|
||||
'.date("d.m.y H:i").'<br>
|
||||
Êòî-òî ñ IP: '.$ip.' ïûòàåòñÿ ñìåíèòü email ê ïåðñîíàæó "'.$u->info['login'].'" ['.$u->info['level'].'].<br>
|
||||
Ò.ê. â àíêåòå ó ýòîãî ïåðñîíàæà óêàçàí email: '.$u->info['mail'].', òî âû è ïîëó÷èëè ýòî ïèñüìî.<br>
|
||||
login: '.$u->info['login'].'<br>
|
||||
Ïðåæíèé email (áåç êàâû÷åê): "'.$_POST['oldemail'].'"<br>
|
||||
Íîâûé email (áåç êàâû÷åê): "'.$_POST['newemail'].'"<br>
|
||||
<br>
|
||||
Äëÿ òîãî ÷òîáû ïîäòâåðäèòü ñìåíó email, âû äîëæíû çàéòè ïî ññûëêå:<br>
|
||||
https://new-combats.com/confirm.php?id='.$u->info['id'].'&code='.$code.'<br>
|
||||
<br>
|
||||
--<br>
|
||||
Áîéöîâñêèé Êëóá https://www.new-combats.com<br>
|
||||
Àäìèíèñòðàöèÿ Áîéöîâñêîãî Êëóáà: support@new-combats.com<br>
|
||||
P.S. Äàííîå ïèñüìî ñãåíåðèðîâàíî àâòîìàòè÷åñêè, îòâå÷àòü íà íåãî íå íóæíî.
|
||||
|
||||
</body>
|
||||
</html>';
|
||||
|
||||
mail($u->info['mail'],"Ñìåíà email ó ïåðñîíàæà \"".$u->info['login']."\" [".$u->info['level']."]",$aa,$headers);
|
||||
//////////////////////////////////////////////////////////////////////////////////////////////////
|
||||
echo"<font color=red><b>Íà âàø email âûñëàíî ïèñüìî ñ ïðîñüáîé ïîäòâåðäèòü îïåðàöèþ ñìåíû email</b></font><BR>";
|
||||
}
|
||||
}else{ echo "<font color=red><b>Íåâåðíûé ñòàðûé ïàðîëü èëè email.</b></font><br>"; }
|
||||
|
||||
}
|
||||
#-------------------------------------
|
||||
}
|
||||
/*----Âîïðîñ/Îòâåò------*/
|
||||
/* if ($_POST['oldpsw1']) {
|
||||
$ops = mysql_fetch_array(mysql_query("SELECT `pass`, `securetime`, `emailconfirmation` FROM `users` WHERE `id` = '".mysql_real_escape_string($u->info['id'])."'"));
|
||||
if($u->info['securetime']>$time) {echo"<font color=red>Äîëæíî ïðîéòè íå ìåíåå òðåõ ñóòîê ìåæäó ñìåíîé ïîäòâåðæäåíèÿ, ïàðîëÿ èëè email.</font><br>";}
|
||||
elseif($u->info['emailconfirmation']==0) {
|
||||
if ($u->info['pass'] == md5($_POST['oldpsw1'])) {
|
||||
if(mysql_query("UPDATE `users` SET `a1` = '".mysql_real_escape_string($_POST['secretquestion'])."', `q1` = '".mysql_real_escape_string($_POST['secretanswer'])."', `securetime` = '".(time()+259200)."' WHERE `id` = '".mysql_real_escape_string($u->info['id'])."' LIMIT 1;"))
|
||||
{
|
||||
$u->info['secretquestion'] = $_POST['secretquestion'];
|
||||
echo "<font color=red>Íîâûé ñåêðåòíûé âîïðîñ / îòâåò çàïèñàí.</font><br>";
|
||||
}
|
||||
}
|
||||
else{echo "<font color=red>Íåâåðíûé ñòàðûé ïàðîëü.</font><BR>";}
|
||||
}
|
||||
#----------------------------------------------------------------
|
||||
elseif($u->info['emailconfirmation'] == 1) {
|
||||
if($u->info['pass'] == md5($_POST['oldpsw1'])) {
|
||||
$code=rand(1000000000,9999999999).".".rand(10000,99999);
|
||||
if(mysql_query("INSERT INTO
|
||||
`emailconfirmation` (
|
||||
`id`,
|
||||
`code`,
|
||||
`question`,
|
||||
`answer`,
|
||||
`qu_an`)
|
||||
VALUES (
|
||||
'".mysql_real_escape_string($u->info['id'])."',
|
||||
'".mysql_real_escape_string($code)."',
|
||||
'".mysql_real_escape_string($_POST['secretquestion'])."',
|
||||
'".mysql_real_escape_string($_POST['secretanswer'])."',
|
||||
1)"))
|
||||
{
|
||||
/////////////////////////////////////////////////IP///////////////////////////////////////////////
|
||||
if (!empty($_SERVER['HTTP_CLIENT_IP'])) //check ip from share internet
|
||||
{
|
||||
$ip=$_SERVER['HTTP_CLIENT_IP'];
|
||||
}
|
||||
elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) //to check ip is pass from proxy
|
||||
{
|
||||
$ip=$_SERVER['HTTP_X_FORWARDED_FOR'];
|
||||
}
|
||||
else
|
||||
{
|
||||
$ip=$_SERVER['HTTP_X_REAL_IP'];
|
||||
}
|
||||
//////////////////////////////////////////îòñûëàåì íà ïî÷òó///////////////////////////////////////
|
||||
$headers = "Mime-Version: 1.1 \r\n";
|
||||
$headers .= "Date: ".date("r")." \r\n";
|
||||
$headers .= "Content-type: text/html; charset=utf-8 \r\n";
|
||||
$headers .= "From: Áîéöîâñêèé Êëóá <support@new-combats.com>\r\n";
|
||||
|
||||
$headers = trim($headers);
|
||||
$headers = stripslashes($headers);
|
||||
|
||||
$aa='<html>
|
||||
<head>
|
||||
<title>Ñìåíà ñåêðåòíîãî âîïðîñà è îòâåòà</title>
|
||||
</head>
|
||||
<body>
|
||||
'.date("d.m.y H:i").'<br>
|
||||
Êòî-òî ñ IP: '.$ip.' ïûòàåòñÿ ñìåíèòü ñåêðåòíûé âîïðîñ / îòâåò ê ïåðñîíàæó "'.$u->info['login'].'" ['.$u->info['level'].'].
|
||||
Ò.ê. â àíêåòå ó ýòîãî ïåðñîíàæà óêàçàí email: '.$u->info['mail'].', òî âû è ïîëó÷èëè ýòî ïèñüìî.<br>
|
||||
login: '.$u->info['login'].'<br>
|
||||
Ïðåæíèé ñåêðåòíûé âîïðîñ: '.$u->info['secretquestion'].'<br>
|
||||
Ïðåæíèé ñåêðåòíûé îòâåò: '.$u->info['secretanswer'].'<br>
|
||||
Íîâûé ñåêðåòíûé âîïðîñ: '.$_POST['secretquestion'].'<br>
|
||||
Íîâûé ñåêðåòíûé îòâåò: '.$_POST['secretanswer'].'<br>
|
||||
Äëÿ òîãî ÷òîáû ïîäòâåðäèòü ñìåíó, âû äîëæíû çàéòè ïî ññûëêå:<br>
|
||||
https://'.$u->info['city'].'.new-combats.com/confirm.php?id='.$u->info['id'].'&code='.$code.'<br>
|
||||
<br>
|
||||
--<br>
|
||||
Áîéöîâñêèé Êëóá https://www.new-combats.com<br>
|
||||
Àäìèíèñòðàöèÿ Áîéöîâñêîãî Êëóáà: support@new-combats.com<br>
|
||||
P.S. Äàííîå ïèñüìî ñãåíåðèðîâàíî àâòîìàòè÷åñêè, îòâå÷àòü íà íåãî íå íóæíî.
|
||||
|
||||
</body>
|
||||
</html>';
|
||||
|
||||
mail($u->info['mail'],"Ñìåíà ñåêðåòíîãî âîïðîñà è îòâåòà ó ïåðñîíàæà \"".$u->info['login']."\" [".$u->info['level']."]",$aa,$headers);
|
||||
//////////////////////////////////////////////////////////////////////////////////////////////////
|
||||
echo"<font color=red>Íà âàø email âûñëàíî ïèñüìî ñ ïðîñüáîé ïîäòâåðäèòü îïåðàöèþ ñìåíû ñåêðåòíîãî âîïðîñà è îòâåòà</font><BR>";
|
||||
}
|
||||
}else{ echo "<font color=red>Íåâåðíûé ñòàðûé ïàðîëü.</font><br>"; }
|
||||
|
||||
}
|
||||
#-------------------------------------
|
||||
$u->info['a1'] = $_POST['secretquestion'];
|
||||
/* }
|
||||
/*----Ïîäòâåðæäåíèå íà e-mail----*/
|
||||
if ($_POST['email'] && $_POST['set_on_emailconfirmation']) {
|
||||
if($u->info['securetime']>$time) {echo"<font color=red>Äîëæíî ïðîéòè íå ìåíåå òðåõ ñóòîê ìåæäó ñìåíîé ïîäòâåðæäåíèÿ, ïàðîëÿ èëè email.</font><BR>";}
|
||||
elseif ($u->info['mail'] == $_POST['email']) {
|
||||
$code=rand(1000000000,9999999999).".".rand(10000,99999);
|
||||
if(mysql_query("INSERT INTO
|
||||
`emailconfirmation` (
|
||||
`id`,
|
||||
`code`,
|
||||
`active`)
|
||||
VALUES (
|
||||
'".mysql_real_escape_string($u->info['id'])."',
|
||||
'".mysql_real_escape_string($code)."',
|
||||
1)"))
|
||||
{
|
||||
/////////////////////////////////////////////////IP///////////////////////////////////////////////
|
||||
if (!empty($_SERVER['HTTP_CLIENT_IP'])) //check ip from share internet
|
||||
{
|
||||
$ip=$_SERVER['HTTP_CLIENT_IP'];
|
||||
}
|
||||
elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) //to check ip is pass from proxy
|
||||
{
|
||||
$ip=$_SERVER['HTTP_X_FORWARDED_FOR'];
|
||||
}
|
||||
else
|
||||
{
|
||||
$ip=$_SERVER['HTTP_X_REAL_IP'];
|
||||
}
|
||||
//////////////////////////////////////////îòñûëàåì íà ïî÷òó///////////////////////////////////////
|
||||
$headers = "Mime-Version: 1.1 \r\n";
|
||||
$headers .= "Date: ".date("r")." \r\n";
|
||||
$headers .= "Content-type: text/html; charset=utf-8 \r\n";
|
||||
$headers .= "From: Áîéöîâñêèé Êëóá <support@new-combats.com>\r\n";
|
||||
|
||||
$headers = trim($headers);
|
||||
$headers = stripslashes($headers);
|
||||
|
||||
$aa='<html>
|
||||
<head>
|
||||
<title>Âîñòàíîâëåíèå ïàðîëÿ</title>
|
||||
</head>
|
||||
<body>
|
||||
'.date("d.m.y H:i").'<br>
|
||||
Çàïðîñ ïîñòóïèë ñ IP: '.$ip.'<br>
|
||||
Ò.ê. â àíêåòå ó ýòîãî ïåðñîíàæà óêàçàí email: '.$u->info['mail'].', òî âû è ïîëó÷èëè ýòî ïèñüìî.<br>
|
||||
Äëÿ òîãî ÷òîáû âêëþ÷èòü ôóíêöèþ ïîäòâåðæäåíèÿ ñìåíû ïàðîëÿ è email ÷åðåç ïî÷òó, âû äîëæíû çàéòè ïî ññûëêå:<br>
|
||||
https://'.$u->info['city'].'.new-combats.com/confirm.php?id='.$u->info['id'].'&code='.$code.'<br>
|
||||
<br>
|
||||
--<br>
|
||||
Áîéöîâñêèé Êëóá https://www.new-combats.com<br>
|
||||
Àäìèíèñòðàöèÿ Áîéöîâñêîãî Êëóáà: support@new-combats.com<br>
|
||||
P.S. Äàííîå ïèñüìî ñãåíåðèðîâàíî àâòîìàòè÷åñêè, îòâå÷àòü íà íåãî íå íóæíî.
|
||||
|
||||
</body>
|
||||
</html>';
|
||||
|
||||
mail($u->info['mail'],"Ñìåíà ïîäòâåðæäåíèÿ ó ïåðñîíàæà \"".$u->info['login']."\" [".$u->info['level']."]",$aa,$headers);
|
||||
//////////////////////////////////////////////////////////////////////////////////////////////////
|
||||
echo "<font color=red>Íà âàø email âûñëàíî ïèñüìî ñ ïðîñüáîé ïîäòâåðäèòü îïåðàöèþ.</font><BR>";
|
||||
}
|
||||
}
|
||||
else{echo "<font color=red>email óêàçàí íåâåðíî.</font><BR>";}
|
||||
}
|
||||
if ($_POST['email'] && $_POST['set_off_emailconfirmation']) { //Îòêëþ÷åíèå ïîäòâåðæäåíèÿ íà email
|
||||
if($u->info['securetime']>$time) {echo"<font color=red>Äîëæíî ïðîéòè íå ìåíåå òðåõ ñóòîê ìåæäó ñìåíîé ïîäòâåðæäåíèÿ, ïàðîëÿ èëè email.</font><BR>";}
|
||||
/*ÍÅÄÎÄÅËÀÍÎ */
|
||||
}
|
||||
?>
|
||||
×åì âûøå óðîâåíü âàøåãî ïåðñîíàæà, òåì áîëüøå ê íåìó âíèìàíèÿ ñî ñòîðîíû çëîóìûøëåííèêîâ. ×òîáû âàø ïåðñîíàæ íåáûë ïîäâåðæåí âçëîìó, íåîáõîäèìî ñîáëþäàòü ýëåìåíòàðíûå ìåðû ïðåäîñòîðîæíîñòè. À èìåííî:<br>
|
||||
1. Íèêîãäà, íè ïîä êàêèì ïðåäëîãîì, íèêîìó íå ãîâîðèòå ñâîé ïàðîëü. Íè ïàëàäèíàì, íè àäìèíèñòðàöèè íå íóæíî çíàòü âàø ïàðîëü.<br>
|
||||
2. Ââîäèòå ëîãèí è ïàðîëü òîëüêî íà òèòóëüíîé ñòðàíèöå <a href=https://new-combats.com target="_blank">https://new-combats.com</a> Íè íà êàêèõ äðóãèõ ñàéòàõ, êîòîðûå áóäóò êàê äâå êàïëè ïîõîæèå íà íàø, è êóäà âàñ çàçûâàþò îáåùàÿ íà õàëÿâó ïðåäìåòû èëè åâðîêðåäèòû, íå ââîäèòå ñâîé ïàðîëü! Èíà÷å Âàø ïåðñîíàæ ñ âåðîÿòíîñòüþ 95% áóäåò âçëîìàí.<br>
|
||||
Íàñòîÿòåëüíî ðåêîìåíäóåì ïðî÷åñòü çàìåòêó <A HREF="https://new-combats.com/forum/?r=48&rnd=1" target=_blank>Êàê îáåçîïàñèòü ñâîåãî ïåðñîíàæà?</A>.<BR>
|
||||
<BR>Åñëè âû èãðàåòå èç èíòåðíåò êàôå èëè êîìïüþòåðíîãî êëóáà, ãäå øàíñ áûòü âçëîìàííûì î÷åíü âûñîêèé, ðåêîìåíäóåì âêëþ÷èòü âòîðîé óðîâåíü çàùèòû (ñì. íèæå)<br><br>
|
||||
<fieldset>
|
||||
<legend><b>Ñìåíà ïàðîëÿ</b></legend>
|
||||
<table>
|
||||
<tr><td align=right>Ñòàðûé ïàðîëü:</td><td><input type=password name="oldpass"></td></tr>
|
||||
<tr><td align=right>Íîâûé ïàðîëü:</td><td><input type=password name="npass"></td></tr>
|
||||
<tr><td align=right>Íîâûé ïàðîëü (åùå ðàç):</td><td><input type=password name="npass2"></td></tr>
|
||||
<tr><td align=right><input type=submit value="Ñìåíèòü ïàðîëü" name="changepsw"></td><td></td></tr>
|
||||
</table>
|
||||
</fieldset>
|
||||
</FORM>
|
||||
<FORM ACTION="main.php?security" METHOD=POST>
|
||||
<FIELDSET><LEGEND><B> Ñìåíà email </B> </LEGEND>
|
||||
|
||||
<TABLE>
|
||||
<TR><TD align=right>Âàø èãðîâîé ïàðîëü:</TD><TD><INPUT TYPE=password NAME=oldpsw size=15 maxlength=31></TD></TR>
|
||||
<TR><TD align=right>Ïðåæíèé email:</TD><TD><INPUT TYPE=text NAME=oldemail size=20 maxlength=50></TD></TR>
|
||||
<TR><TD align=right>Íîâûé email:</TD><TD><INPUT TYPE=text NAME=newemail size=20 maxlength=50></TD></TR>
|
||||
<TR><TD align=center colspan=2><INPUT TYPE=submit value="Ñìåíèòü email" name=changeemail></TD></TR>
|
||||
</TABLE>
|
||||
</FIELDSET>
|
||||
</FORM>
|
||||
|
||||
<!--<FORM ACTION="main.php?security" METHOD=POST>
|
||||
<FIELDSET><LEGEND><B> Âòîðîé óðîâåíü çàùèòû </B> </LEGEND>
|
||||
<?
|
||||
echo"Åñëè âû óâåðåíû â ñâîåì email, åãî íå âçëîìàþò (ó÷òèòå, õàëÿâíàÿ ïî÷òà íà ñåðâåðàõ òèïà mail.ru hotmail.com è ò.ï. ëåãêî âçëàìûâàåòñÿ), âû åãî íå \"çàáóäåòå\", îí íå ïðîïàäåò ïðè ñìåíå ïðîâàéäåðà è ò.ï., òîãäà âû ìîæåòå îáåçîïàñèòü ñâîåãî ïåðñîíàæà, âêëþ÷èâ ðåæèì ïîäòâåðæäåíèÿ ñìåíû ïàðîëÿ/email ÷åðåç ïî÷òó. Ïðè ïîïûòêå ñìåíèòü ïàðîëü, email èëè âûêëþ÷èòü ýòîò ðåæèì, íà âàø email âûñûëàåòñÿ ïèñüìî ñ ïðîñüáîé ïîäòâåðäèòü ýòó îïåðàöèþ. Òàêèì îáðàçîì, åñëè õàêåð, êàê-òî óçíàë âàø ïàðîëü, îí íå ñìîæåò ñìåíèòü åãî, è âû âñåãäà ñìîæåòå âîéòè ïîä ñâîèì ïåðñîíàæåì.<BR>";
|
||||
if($u->info['emailconfirmation']==0) {?>
|
||||
Âàø email <INPUT TYPE=text NAME=email size=20 maxlength=50><BR>
|
||||
<INPUT TYPE=submit name=set_on_emailconfirmation value="Âêëþ÷èòü ðåæèì ïîäòâåðæäåíèÿ ñìåíû ïàðîëÿ èëè email ÷åðåç ïî÷òó">
|
||||
<?}elseif($u->info['emailconfirmation']==1){?>
|
||||
<BR><B>Ðåæèì ïîäòâåðæäåíèÿ ÷åðåç email âêëþ÷åí.</B><BR><BR>
|
||||
Âàø email <INPUT TYPE=text NAME=email size=20 maxlength=50> <INPUT TYPE=submit name=set_off_emailconfirmation value="Âûêëþ÷èòü ðåæèì ïîäòâåðæäåíèÿ ÷åðåç email"><BR>
|
||||
<small>Åñëè âàø email áîëüøå íå ðàáîòàåò, âû ìîæåòå îòêëþ÷èòü åãî çäåñü áåç ïîäòâåðæäåíèÿ, â òå÷åíèå <b>÷àñà</b> ïîñëå ïîëó÷åíèÿ ïðîâåðêè íà ÷èñòîòó ó ïàëàäèíîâ.</small>
|
||||
<?}?>
|
||||
</FIELDSET>
|
||||
</FORM>-->
|
||||
<FORM METHOD=POST ACTION="main.php?security">
|
||||
<FIELDSET><LEGEND><B> Âòîðîé óðîâåíü çàùèòû </B> </LEGEND>
|
||||
Íàñòîÿòåëüíî ðåêîìåíäóåì âêëþ÷èòü âòîðîé óðîâåíü çàùèòû.<BR>
|
||||
Íà êîìïüþòåðå ìîæåò áûòü óñòàíîâëåí êëàâèàòóðíûé øïèîí, êîòîðûé çàïèñûâàåò âñå íàæàòèÿ êëàâèø, òàêèì îáðàçîì, ìîãóò óçíàòü âàø ïàðîëü.<BR>
|
||||
Âîçìîæíî, â ñåòè êîìïüþòåðîâ óñòàíîâëåí "ñåòåâîé ñíèôåð", ïåðåõâàòûâàþùèé âñå èíòåðíåò ïàêåòû, êîòîðûé ëåãêî ïîêàæåò âñå ïàðîëè. ×òîáû îáåçîïàñèòü ñåáÿ, âû ìîæåòå óñòàíîâèòü ñâîåìó ïåðñîíàæó âòîðîé ïàðîëü, êîòîðûé ìîæíî ââîäèòü ïðè ïîìîùè ìûøêè (êëàâèàòóðíûì øïèîíîì íå ïåðåõâàòèòü) è êîòîðûé ïåðåäàåòñÿ íà èãðîâîé ñåðâåð â çàøèôðîâàííîì âèäå, íå ïîääàþùèìñÿ ðàñøèôðîâêå ("ñåòåâîé ñíèôåð" íå ñìîæåò ïåðåõâàòèòü åãî).<BR>
|
||||
Âàø áðàóçåð äîëæåí íîðìàëüíî îòîáðàæàòü Flash 6! (<I>åñëè íàøè ÷àñèêè â íèæíåé ñòðîêå íîðìàëüíî òèêàþò, çíà÷èò ó âàñ âñå â ïîðÿäêå :</I>)<BR>
|
||||
<U>Áóäüòå âíèìàòåëüíû!</U> Âòîðîé ïàðîëü îòïðàâëÿåòñÿ íà email îäèí ðàç,ïðè óñòàíîâêå âòîðîãî óðîâíÿ çàùèòû!<BR>
|
||||
|
||||
<?
|
||||
if(!empty($u->info['pass2'])){echo"<BR><B>Âòîðîé ïàðîëü óñòàíîâëåí.</B><BR><BR>Ââåäèòå âòîðîé ïàðîëü <INPUT TYPE=password NAME=oldpsw2 size=10 maxlength=8> <INPUT TYPE=submit name=changepsw value=\"Âûêëþ÷èòü âòîðîé ïàðîëü\" onclick=\"return confirm('Âûêëþ÷èòü çàïðîñ âòîðîãî ïàðîëÿ ïðè âõîäå â Áîéöîâñêèé Êëóá?')\">";}else{
|
||||
?>
|
||||
|
||||
|
||||
Äëèíà ïàðîëÿ:<BR>
|
||||
<INPUT TYPE=radio NAME="num_count" value=4> 4 çíàêà<BR>
|
||||
<INPUT TYPE=radio NAME="num_count" checked value=6> 6 çíàêîâ<BR>
|
||||
<INPUT TYPE=radio NAME="num_count" value=8> 8 çíàêîâ<BR>
|
||||
<INPUT TYPE=submit name=changepsw value="Óñòàíîâèòü âòîðîé ïàðîëü" onclick="return confirm('Ñèñòåìà ñàìà ïðèäóìàåò âàì âòîðîé ïàðîëü, îí áóäåò ïîêàçàí íà ýòîé ñòðàíèöå, ïîñëå òîãî, êàê âû íàæìåòå OK è ïðîäóáëèðîâàí íà email, óêàçàííûé ïðè ðåãèñòðàöèè. Áóäüòå âíèìàòåëüíû.\nÓñòàíîâèòü âòîðîé ïàðîëü?')"><BR>
|
||||
<?
|
||||
if ($_POST['oldpsw'] && $_POST['oldemail'] && $_POST['newemail']) { /*-----Смена e-mail------*/
|
||||
if (password_verify($_POST['oldpsw'], $u->info['pass'])) {
|
||||
$status = "<span style='color: red'>Неверный пароль.</span><br>";
|
||||
} elseif ($u->info['mail'] !== $_POST['oldemail']) {
|
||||
$status = "<span style='color: red'>Неверный старый E-Mail.</span><br>";
|
||||
} else {
|
||||
$u->info['mail'] = $email->change($_POST['oldemail'], $_POST['newemail']);
|
||||
$status = "<span style='color: darkolivegreen;'>Email удачно сменен.</span><br>";
|
||||
}
|
||||
}
|
||||
}
|
||||
?>
|
||||
|
||||
</FIELDSET>
|
||||
</FORM>
|
||||
<form action="main.php?security" method="post" id="security"></form>
|
||||
|
||||
<div>
|
||||
<h3>Настройки безопасности</h3>
|
||||
<div style="text-align: right">
|
||||
<input type="button" value="Вернуться" onClick="location.href='main.php';">
|
||||
</div>
|
||||
<div><?= $status ?></div>
|
||||
<div>
|
||||
Чем выше уровень вашего персонажа, тем больше к нему внимания со стороны злоумышленников.
|
||||
Чтобы ваш персонаж небыл подвержен взлому, необходимо соблюдать элементарные меры предосторожности.
|
||||
<br> А именно:
|
||||
<ol>
|
||||
<li>
|
||||
Никогда, ни под каким предлогом, никому не говорите свой пароль.
|
||||
Ни паладинам, ни администрации не нужно знать ваш пароль.
|
||||
</li>
|
||||
<li>
|
||||
Вводите логин и пароль только на титульной странице
|
||||
<a href="<?= Config::get('https') ?>" target="_blank"><?= Config::get('https') ?></a>
|
||||
Ни на каких других сайтах, которые будут как две капли похожие на наш,
|
||||
и куда вас зазывают обещая на халяву предметы или еврокредиты, не вводите свой пароль!
|
||||
Иначе Ваш персонаж с вероятностью 95% будет взломан.
|
||||
</li>
|
||||
</ol>
|
||||
Настоятельно рекомендуем прочесть заметку
|
||||
<a href="<?= Config::get('https') ?>forum/?r=48&rnd=1" target=_blank>Как обезопасить своего персонажа?</a>.
|
||||
<br><br>
|
||||
Если вы играете из интернет кафе или компьютерного клуба, где шанс быть взломанным очень высокий,
|
||||
рекомендуем включить второй уровень защиты (см. ниже)
|
||||
<br><br>
|
||||
<fieldset>
|
||||
<legend><b>Смена пароля</b></legend>
|
||||
<table>
|
||||
<tr>
|
||||
<td style="text-align: right">
|
||||
Старый пароль:
|
||||
</td>
|
||||
<td>
|
||||
<label>
|
||||
<input form="security" type=password name="oldpass">
|
||||
</label>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td style="text-align: right">
|
||||
Новый пароль:
|
||||
</td>
|
||||
<td>
|
||||
<label>
|
||||
<input form="security" type=password name="npass">
|
||||
</label>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td style="text-align: right">
|
||||
Новый пароль (еще раз):
|
||||
</td>
|
||||
<td>
|
||||
<label>
|
||||
<input form="security" type=password name="npass2">
|
||||
</label>
|
||||
</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td colspan="2" style="text-align: right">
|
||||
<input form="security" type=submit value="Сменить пароль" name="changepsw">
|
||||
</td>
|
||||
<td></td>
|
||||
</tr>
|
||||
</table>
|
||||
</fieldset>
|
||||
|
||||
<FIELDSET>
|
||||
<LEGEND><B> Смена email </B></LEGEND>
|
||||
<TABLE>
|
||||
<TR>
|
||||
<TD style="text-align: right">
|
||||
Ваш игровой пароль:
|
||||
</TD>
|
||||
<TD>
|
||||
<label>
|
||||
<INPUT form="security" TYPE=password NAME=oldpsw size=15 maxlength=31>
|
||||
</label>
|
||||
</TD>
|
||||
</TR>
|
||||
<TR>
|
||||
<TD style="text-align: right">
|
||||
Прежний email:
|
||||
</TD>
|
||||
<TD>
|
||||
<label>
|
||||
<INPUT form="security" TYPE=text NAME=oldemail size=20 maxlength=50>
|
||||
</label>
|
||||
</TD>
|
||||
</TR>
|
||||
<TR>
|
||||
<TD style="text-align: right">
|
||||
Новый email:
|
||||
</TD>
|
||||
<TD>
|
||||
<label>
|
||||
<INPUT form="security" TYPE=text NAME=newemail size=20 maxlength=50>
|
||||
</label>
|
||||
</TD>
|
||||
</TR>
|
||||
<TR>
|
||||
<TD style="text-align: center" colspan=2>
|
||||
<INPUT form="security" TYPE=submit value="Сменить email" name=changeemail>
|
||||
</TD>
|
||||
</TR>
|
||||
</TABLE>
|
||||
</FIELDSET>
|
||||
<FIELDSET>
|
||||
<LEGEND><B> Второй уровень защиты </B></LEGEND>
|
||||
Настоятельно рекомендуем включить второй уровень защиты.<BR>
|
||||
На компьютере может быть установлен клавиатурный шпион, который записывает все нажатия клавиш, таким
|
||||
образом,
|
||||
могут узнать ваш пароль.<BR>
|
||||
Возможно, в сети компьютеров установлен "сетевой снифер", перехватывающий все интернет пакеты, который легко
|
||||
покажет все пароли. Чтобы обезопасить себя, вы можете установить своему персонажу второй пароль, который
|
||||
можно
|
||||
вводить при помощи мышки (клавиатурным шпионом не перехватить) и который передается на игровой сервер в
|
||||
зашифрованном виде, не поддающимся расшифровке ("сетевой снифер" не сможет перехватить его).<BR>
|
||||
<U>Будьте внимательны!</U> Второй пароль отправляется на email один раз,при установке второго уровня защиты!<BR>
|
||||
|
||||
<?php
|
||||
if (!empty($u->info['pass2'])) {
|
||||
echo "<BR><B>Второй пароль установлен.</B><BR><BR>
|
||||
Введите второй пароль <INPUT TYPE=password NAME=oldpsw2 size=10 maxlength=8>
|
||||
<INPUT form='security' TYPE=submit name=changepsw value=\"Выключить второй пароль\" onclick=\"return confirm('Выключить запрос второго пароля при входе в Бойцовский Клуб?')\">";
|
||||
} else {
|
||||
?>
|
||||
Длина пароля:<BR>
|
||||
<label>
|
||||
<INPUT form="security" TYPE=radio NAME="num_count" value=4> 4 знака<BR>
|
||||
</label>
|
||||
<label>
|
||||
<INPUT form="security" TYPE=radio NAME="num_count" checked value=6> 6 знаков<BR>
|
||||
</label>
|
||||
<label>
|
||||
<INPUT form="security" TYPE=radio NAME="num_count" value=8> 8 знаков<BR>
|
||||
</label>
|
||||
<INPUT form="security" TYPE=submit name=changepsw value="Установить второй пароль"
|
||||
onclick="return confirm('Система сама придумает вам второй пароль, он будет показан на этой странице, после того, как вы нажмете OK и продублирован на email, указанный при регистрации. Будьте внимательны.\nУстановить второй пароль?')">
|
||||
<BR>
|
||||
<?php
|
||||
}
|
||||
?>
|
||||
</FIELDSET>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<script>
|
||||
let elem = document.getElementById('se-pre-con');
|
||||
elem.parentNode.removeChild(elem);
|
||||
</script>
|
||||
|
||||
@@ -190,10 +190,7 @@ if(isset($_GET['loc']))
|
||||
}elseif( ($kos1['good'] == 0 && $kos2['good'] == 0) && ((!isset($zadej) || $zadej == 0) && $u->aves['now']>=$u->aves['max'] && $u->room['name']!='Îáùåæèòèå' && $u->room['name']!='Îáù. Ýòàæ 1' && $u->room['name']!='Îáù. Ýòàæ 2' && $u->room['name']!='Îáù. Ýòàæ 3'))
|
||||
{
|
||||
$re = 'Âû íå ìîæåòå ïåðåìåùàòüñÿ, ðþêçàê ïåðåïîëíåí ...';
|
||||
}elseif($u->room['name']=='Êîìíàòà äëÿ íîâè÷êîâ' && $u->info['activ'] != '' && $u->info['activ'] != '0')
|
||||
{
|
||||
echo '<script>alert("Äëÿ òîãî ÷òîáû ïåðåéòè â ãîðîä Âû äîëæíû àêòèâèðîâàòü ïåðñîíàæà ÷åðåç Âàø E-mail.");</script>';
|
||||
}elseif(isset($go['id']))
|
||||
elseif(isset($go['id']))
|
||||
{
|
||||
$rmgo = array();
|
||||
$rg = explode(',',$u->room['roomGo']);
|
||||
|
||||
@@ -27,14 +27,11 @@ if(isset($_POST['r_bank']) || isset($_POST['r_type']))
|
||||
}
|
||||
}
|
||||
$rfs['see'] = '';
|
||||
$sp = mysql_query('SELECT `s`.`active`,`u`.`activ`,`u`.`online`,`u`.`id`,`u`.`level`,`u`.`login` FROM `users` AS `u` LEFT JOIN `stats` AS `s` ON `u`.`id` = `s`.`id` WHERE `u`.`host_reg` = "'.$u->info['id'].'" AND `u`.`mail` != "No E-Mail" ORDER BY `u`.`level` DESC LIMIT '.$rfs['count']);
|
||||
$sp = mysql_query('SELECT `s`.`active`,`u`.`online`,`u`.`id`,`u`.`level`,`u`.`login` FROM `users` AS `u` LEFT JOIN `stats` AS `s` ON `u`.`id` = `s`.`id` WHERE `u`.`host_reg` = "'.$u->info['id'].'" AND `u`.`mail` != "No E-Mail" ORDER BY `u`.`level` DESC LIMIT '.$rfs['count']);
|
||||
while($pl = mysql_fetch_array($sp))
|
||||
{
|
||||
$rfs['c2'] = ' <img onclick="top.chat.addto(\''.$pl['login'].'\',\'private\')" style="display:inline-block;cursor:pointer;" src="https://img.new-combats.com/i/lock.gif" width="20" height="15"> '.$u->microLogin($pl['id'],1).'';
|
||||
if($pl['activ'] != 0)
|
||||
{
|
||||
$rfs['c2'] = '<font color="grey">'.$rfs['c2'].' <small>íå àêòèâèðîâàí</small></font>';
|
||||
}elseif($pl['level']>7)
|
||||
if($pl['level']>7)
|
||||
{
|
||||
$rfs['c2'] = '<font color="green">'.$rfs['c2'].'</font>';
|
||||
}
|
||||
|
||||
@@ -93,8 +93,8 @@ if($tcount >= 6 ) {
|
||||
$obraz = 'ih60.gif';
|
||||
}
|
||||
//
|
||||
mysql_query('INSERT INTO `users` (`obraz`,`chatColor`,`align`,`inTurnir`,`molch1`,`molch2`,`activ`,`login`,`room`,`name`,`sex`,`level`,`bithday`) VALUES (
|
||||
"'.$obraz.'","'.$bus['chatColor'].'","'.$bus['align'].'","'.$pl['id'].'","'.$bus['molch1'].'","'.$bus['molch2'].'","0","'.$bus['login'].'","411","'.$bus['name'].'","'.$bus['sex'].'","4","'.date('d.m.Y').'")');
|
||||
mysql_query('INSERT INTO `users` (`obraz`,`chatColor`,`align`,`inTurnir`,`molch1`,`molch2`,`login`,`room`,`name`,`sex`,`level`,`bithday`) VALUES (
|
||||
"'.$obraz.'","'.$bus['chatColor'].'","'.$bus['align'].'","'.$pl['id'].'","'.$bus['molch1'].'","'.$bus['molch2'].'","'.$bus['login'].'","411","'.$bus['name'].'","'.$bus['sex'].'","4","'.date('d.m.Y').'")');
|
||||
//
|
||||
$inbot = mysql_insert_id(); //àéäè áîòà
|
||||
if( $inbot > 0 ) {
|
||||
|
||||
@@ -136,8 +136,8 @@ if($u->room['file']=='ruine_enter') {
|
||||
//Ñîçäàåì áîòà
|
||||
$text_user[$team] .= $u->microLogin($bus['id'],1).', ';
|
||||
//
|
||||
mysql_query('INSERT INTO `users` (`obraz`,`chatColor`,`align`,`inTurnir`,`molch1`,`molch2`,`activ`,`login`,`room`,`name`,`sex`,`level`,`bithday`) VALUES (
|
||||
"'.$bus['obraz'].'","'.$bus['chatColor'].'","'.$bus['align'].'","'.$rid.'","'.$bus['molch1'].'","'.$bus['molch2'].'","0","'.$bus['login'].'","413","'.$bus['name'].'","'.$bus['sex'].'","10","'.date('d.m.Y').'")');
|
||||
mysql_query('INSERT INTO `users` (`obraz`,`chatColor`,`align`,`inTurnir`,`molch1`,`molch2`,`login`,`room`,`name`,`sex`,`level`,`bithday`) VALUES (
|
||||
"'.$bus['obraz'].'","'.$bus['chatColor'].'","'.$bus['align'].'","'.$rid.'","'.$bus['molch1'].'","'.$bus['molch2'].'","'.$bus['login'].'","413","'.$bus['name'].'","'.$bus['sex'].'","10","'.date('d.m.Y').'")');
|
||||
//
|
||||
$inbot = mysql_insert_id(); //àéäè áîòà
|
||||
if( $inbot > 0 ) {
|
||||
|
||||
Reference in New Issue
Block a user