new-combats/game
3
0
Fork 0
Code Issues 23 Pull Requests Releases Wiki Activity

Вычистка огрызков getIP() и перенос функции mail() в класс.

Browse Source
This commit is contained in:
Ivor Barhansky
2022-12-19 23:15:56 +02:00
parent 2f6517f5b3
commit a0efddefc5
14 changed files with 3388 additions and 2430 deletions
Download Patch File Download Diff File Expand all files Collapse all files
register.php
+213 -85
View File
@@ -1,31 +1,19 @@
<?php
if (!defined('GAME_VERSION')) {
require_once '_incl_data/autoload.php';
}
use Core\Mail;
use Insallah\Db;
const GAME = true;
require_once('_incl_data/__config.php');
require_once('_incl_data/class/__db_connect.php');
Core\Config::init();
Core\Database::init();
//const GAME = true;
//require_once('_incl_data/__config.php');
//require_once('_incl_data/class/__db_connect.php');
$chat = new Chat();
$filter = new Filter();
require_once '_incl_data/mails.php';
function getIp()
{
$keys = [
'HTTP_CLIENT_IP',
'HTTP_X_FORWARDED_FOR',
'REMOTE_ADDR',
];
foreach ($keys as $key) {
if (!empty($_SERVER[$key])) {
$iparr = explode(',', $_SERVER[$key]);
$ip = trim(end($iparr));
if (filter_var($ip, FILTER_VALIDATE_IP)) {
return $ip;
}
}
}
}
//require_once '_incl_data/mails.php';
function add_effn($uid, $id)
{
@@ -34,7 +22,10 @@ function add_effn($uid, $id)
if (isset($eff['id2'])) {
$n = $eff['mname'];
$d = $eff['mdata'];
$ins = mysql_query('INSERT INTO `eff_users` (`overType`,`id_eff`,`uid`,`name`,`timeUse`,`data`) VALUES ("' . $eff['oneType'] . '","' . $eff['id2'] . '","' . $uid . '","' . $n . '","' . time() . '","' . $d . '")');
$ins = mysql_query(
'INSERT INTO `eff_users` (`overType`,`id_eff`,`uid`,`name`,`timeUse`,`data`) VALUES ("' . $eff['oneType'] . '","' . $eff['id2'] . '","' . $uid . '","' . $n . '","' . time(
) . '","' . $d . '")'
);
if ($ins) {
$g[0] = 1;
$g[1] = '...';
@@ -125,7 +116,9 @@ function error_check($id, $str_u, $name = 0)
$log = mysql_fetch_array($q);
unset($q);
}
$q = mysql_query('SELECT `id` from `lastnames` where `login`="' . mysql_real_escape_string($str_u) . '" LIMIT 1');
$q = mysql_query(
'SELECT `id` from `lastnames` where `login`="' . mysql_real_escape_string($str_u) . '" LIMIT 1'
);
if ($q) {
$log2 = mysql_fetch_array($q);
unset($q);
@@ -140,8 +133,12 @@ function error_check($id, $str_u, $name = 0)
if (strlen($str_u) < 6 || strlen($str_u) > 50) {
$error = 'E-mail íå ìîæåò áûòü êîðî÷å 6-õ ñèìâîëîâ è äëèíåå 50-òè.';
} else {
$testEREm = mysql_fetch_array(mysql_query('SELECT `mail` FROM `users` WHERE `mail` LIKE "' . $str_u . '" LIMIT 1'));
$emails = mysql_fetch_array(mysql_query('SELECT * FROM `ban_email` WHERE `email` LIKE "' . $str_u . '" LIMIT 1'));
$testEREm = mysql_fetch_array(
mysql_query('SELECT `mail` FROM `users` WHERE `mail` LIKE "' . $str_u . '" LIMIT 1')
);
$emails = mysql_fetch_array(
mysql_query('SELECT * FROM `ban_email` WHERE `email` LIKE "' . $str_u . '" LIMIT 1')
);
if (isset($testEREm['mail'])) {
$error = 'E-mail óæå çàíÿò.';
}
@@ -179,13 +176,19 @@ function error_check($id, $str_u, $name = 0)
if ($id == 3 && !empty($str_u) && !empty($name)) //îòñûëêà åìàèëà ïðè óäà÷íîì åìàèëå str_u -> mail name -> nickname
{
$code = rand(10000000, 99999999);
mysql_query('INSERT INTO `secure_code`(`email`, `code`, `time`) VALUES ("' . $str_u . '","' . $code . '","' . time() . '");');
mails($str_u, 'Ñåêðåòíûé Êîä: ' . $code, 'Ñåêðåòíûé Êîä - Íîâûé Áîéöîâñêèé Êëóá ' . $name);
mysql_query(
'INSERT INTO `secure_code`(`email`, `code`, `time`) VALUES ("' . $str_u . '","' . $code . '","' . time(
) . '");'
);
Mail::send($str_u, 'Ñåêðåòíûé Êîä: ' . $code, 'Ñåêðåòíûé Êîä - Íîâûé Áîéöîâñêèé Êëóá ' . $name);
//mails($str_u, 'Ñåêðåòíûé Êîä: ' . $code, 'Ñåêðåòíûé Êîä - Íîâûé Áîéöîâñêèé Êëóá ' . $name);
}
if ($id == 4 && !empty($str_u) && !empty($name)) //ïðîâåðêà êîäà áåçîïàñíîñòè str_u -> ââåäåííûé êîä name -> email
{
$testcode = mysql_fetch_array(mysql_query('SELECT code FROM `secure_code` WHERE `email` = "' . $name . '" ORDER BY id DESC LIMIT 1'));
$testcode = mysql_fetch_array(
mysql_query('SELECT code FROM `secure_code` WHERE `email` = "' . $name . '" ORDER BY id DESC LIMIT 1')
);
if ($testcode['code'] != $str_u) {
$error = 'Íåâåðíûé êîä áåçîïàñíîñòè (Ïðîâåðòå ïðîáåëû è ñàì êîä â ïîñëåäíåì åìåèëå)';
}
@@ -436,7 +439,7 @@ if ($_SERVER['HTTP_USER_AGENT'] != '' &&
left: 100%;
}
</style>
<form action="register.php" method="post">
@@ -516,7 +519,9 @@ if ($_SERVER['HTTP_USER_AGENT'] != '' &&
<?php
if (empty($_POST['secure_code']) && !empty($_POST['email_u']) && error_check(2, $_POST['email_u']) == "" && error_check(3, $_POST['email_u'], $_POST['nick_u']) == "") {
if (empty($_POST['secure_code']) && !empty($_POST['email_u']) && error_check(
2, $_POST['email_u']
) == "" && error_check(3, $_POST['email_u'], $_POST['nick_u']) == "") {
?>
<div class="visible_class">
<p>
@@ -549,7 +554,9 @@ if ($_SERVER['HTTP_USER_AGENT'] != '' &&
} ?>
<?php
if ((empty($_POST['pass1_u']) || empty($_POST['pass2_u'])) && !empty($_POST['secure_code']) && error_check(4, $_POST['secure_code'], $_POST['email_u']) == "") {
if ((empty($_POST['pass1_u']) || empty($_POST['pass2_u'])) && !empty($_POST['secure_code']) && error_check(
4, $_POST['secure_code'], $_POST['email_u']
) == "") {
?>
<div class="visible_class">
<p>
@@ -563,7 +570,9 @@ if ($_SERVER['HTTP_USER_AGENT'] != '' &&
öèôðû äëÿ íàä¸æíîñòè.</h3></p>
</div>
<?php
} elseif (!empty($_POST['pass1_u']) && !empty($_POST['secure_code']) && error_check(5, $_POST['pass1_u'], $_POST['pass2_u']) != "") {
} elseif (!empty($_POST['pass1_u']) && !empty($_POST['secure_code']) && error_check(
5, $_POST['pass1_u'], $_POST['pass2_u']
) != "") {
?>
<div class="visible_class">
<p>
@@ -592,7 +601,9 @@ if ($_SERVER['HTTP_USER_AGENT'] != '' &&
} ?>
<?php
if (empty($_POST['pol_u']) && !empty($_POST['pass1_u']) && !empty($_POST['pass2_u']) && error_check(5, $_POST['pass1_u'], $_POST['pass2_u']) == "") {
if (empty($_POST['pol_u']) && !empty($_POST['pass1_u']) && !empty($_POST['pass2_u']) && error_check(
5, $_POST['pass1_u'], $_POST['pass2_u']
) == "") {
?>
<div class="visible_class">
<p>
@@ -676,7 +687,8 @@ if ($_SERVER['HTTP_USER_AGENT'] != '' &&
</p>
</div>
<div class="form_radio_btn">
<p><input name="class_u" type="radio" value="9" id="radio-9"> <label for="radio-9">Êðèòîóâîðîò</label>
<p><input name="class_u" type="radio" value="9" id="radio-9"> <label
for="radio-9">Êðèòîóâîðîò</label>
</p>
</div>
</div>
@@ -685,16 +697,24 @@ if ($_SERVER['HTTP_USER_AGENT'] != '' &&
href='https://new-combats.com/encicl/law2.html'>ïðàâèëàìè è çàêîíàìè</a> èãðîâîãî ìèðà </h3></p>
<br>
</div>
<?php
}
if (!empty($_POST['nick_u']) && !empty($_POST['email_u']) && !empty($_POST['secure_code']) && !empty($_POST['pol_u']) && !empty($_POST['bday_u']) && !empty($_POST['class_u']) && error_check(4, $_POST['secure_code'], $_POST['email_u']) == "") {
if (!empty($_POST['nick_u']) && !empty($_POST['email_u']) && !empty($_POST['secure_code']) && !empty($_POST['pol_u']) && !empty($_POST['bday_u']) && !empty($_POST['class_u']) && error_check(
4, $_POST['secure_code'], $_POST['email_u']
) == "") {
//================================
session_start();
$u = User::start();
//Ñîçäàåì ïåðñîíàæà
if ($_POST['ref'] > 0) {
$ref = mysql_fetch_array(mysql_query('SELECT `id`,`login` FROM `users` WHERE `id` = "' . mysql_real_escape_string($_POST['ref']) . '" LIMIT 1'));
$ref = mysql_fetch_array(
mysql_query(
'SELECT `id`,`login` FROM `users` WHERE `id` = "' . mysql_real_escape_string(
$_POST['ref']
) . '" LIMIT 1'
)
);
if (isset($ref['id'])) {
$_POST['ref'] = $ref['id'];
} else {
@@ -703,7 +723,8 @@ if ($_SERVER['HTTP_USER_AGENT'] != '' &&
unset($ref);
}
mysql_query('INSERT INTO `users` (`name`,`align`,`real`,`login`,`host_reg`,`pass`,`ip`,`ipreg`,`city`,`cityreg`,`room`,`timereg`,
mysql_query(
'INSERT INTO `users` (`name`,`align`,`real`,`login`,`host_reg`,`pass`,`ip`,`ipreg`,`city`,`cityreg`,`room`,`timereg`,
`activ`,`mail`,`bithday`,`sex`,`fnq`,`battle`,`design`,`molch2`,`level`, `hobby`, `clan_zv`
) VALUES (
"",
@@ -712,8 +733,8 @@ if ($_SERVER['HTTP_USER_AGENT'] != '' &&
"' . mysql_real_escape_string($_POST['nick_u']) . '",
"' . (int)$_POST['ref'] . '",
"' . mysql_real_escape_string(md5($_POST['pass1_u'])) . '",
"' . getIp() . '",
"' . getIp() . '",
"' . UserIp::get() . '",
"' . UserIp::get() . '",
"capitalcity",
"capitalcity",
9,
@@ -729,26 +750,46 @@ if ($_SERVER['HTTP_USER_AGENT'] != '' &&
8,
"",
0
)');
)'
);
$uid = mysql_insert_id();
if ($uid > 0) {
if (isset($_COOKIE['from'])) {
mysql_query('INSERT INTO `from` (`type`,`ip`,`uid`,`time`,`val`) VALUES ( "0", "' . getIp() . '","' . $uid . '", "' . time() . '", "' . mysql_real_escape_string($_COOKIE['from']) . '" ) ');
mysql_query(
'INSERT INTO `from` (`type`,`ip`,`uid`,`time`,`val`) VALUES ( 0, "' . UserIp::get(
) . '",' . $uid . ', unix_timestamp(), "' . mysql_real_escape_string($_COOKIE['from']) . '" ) '
);
}
//Ñîîáùåíèÿ ïðè ðåãèñòðàöèè îò ïàëàäèíîâ.
$pal = mysql_fetch_array(mysql_query('SELECT * FROM `users` WHERE `align` > 1 AND `align` < 2 AND `online` > "' . (time() - 120) . '" ORDER BY `online` DESC LIMIT 1'));
$pal = mysql_fetch_array(
mysql_query(
'SELECT * FROM `users` WHERE `align` > 1 AND `align` < 2 AND `online` > "' . (time(
) - 120) . '" ORDER BY `online` DESC LIMIT 1'
)
);
if (!isset($pal['id'])) {
$pal = mysql_fetch_array(mysql_query('SELECT * FROM `users` WHERE `align` > 3 AND `align` < 4 AND `online` > "' . (time() - 120) . '" ORDER BY `online` DESC LIMIT 1'));
$pal = mysql_fetch_array(
mysql_query(
'SELECT * FROM `users` WHERE `align` > 3 AND `align` < 4 AND `online` > "' . (time(
) - 120) . '" ORDER BY `online` DESC LIMIT 1'
)
);
}
if (isset($pal['id'])) {
//îòñûëàåì ñîîáùåíèå îò $pal['login']
$paltext = 'Ïðèâåòñòâóþ ' . $_POST['nick_u'] . '. Îòïðàâëÿåìñÿ äðàòüñÿ â õàîòû, åñëè íåò çàÿâîê, ñîçäàéòå áîé, äîïîëíèòåëüíî êóïèòå çâåðÿ è íå çàáûâàéòå âûõîäèòü íà öåíòðàëüíóþ ïëîùàòü óáèâàòü Òðóïîæîðà ñâîåãî óðîâíÿ!Ïðèÿòíîé èãðû. ';
mysql_query("INSERT INTO `chat` (`city`,`room`,`login`,`to`,`text`,`time`,`type`,`toChat`,`new`) VALUES ('capitalcity','0','" . $pal['login'] . "','" . $_POST['nick_u'] . "','" . $paltext . "','" . time() . "','3','0','1')");
mysql_query(
"INSERT INTO `chat` (`city`,`room`,`login`,`to`,`text`,`time`,`type`,`toChat`,`new`) VALUES ('capitalcity','0','" . $pal['login'] . "','" . $_POST['nick_u'] . "','" . $paltext . "','" . time(
) . "','3','0','1')"
);
} else {
//Íå çíàþ ÷òî äåëàòü, ïóñòü áóäåò ïðîñòî ïðèâåòñòâèå :)
$text = 'Ïðèâåòñòâóþ <b>' . $_POST['nick_u'] . '</b>.<b>Â èíâåíòàðå Âû íàéäåòå ñóíäóê, â êîòîðîì Âàøå Îáìóíäèðîâàíèå!Îòïðàâëÿéòåñü äðàòüñÿ â õàîòû è íå çàáûâàéòå áèòü Ãîðîäñêîãî Ìîíñòðà!';
mysql_query("INSERT INTO `chat` (`city`,`room`,`login`,`to`,`text`,`time`,`type`,`toChat`,`new`) VALUES ('capitalcity','0','','" . $_POST['nick_u'] . "','" . $text . "','" . time() . "','3','0','1')");
mysql_query(
"INSERT INTO `chat` (`city`,`room`,`login`,`to`,`text`,`time`,`type`,`toChat`,`new`) VALUES ('capitalcity','0','','" . $_POST['nick_u'] . "','" . $text . "','" . time(
) . "','3','0','1')"
);
}
//òîïîð
@@ -757,41 +798,69 @@ if ($_SERVER['HTTP_USER_AGENT'] != '' &&
$us = add_effn($uid, 1); // ñèëà
$us = add_effn($uid, 20); // ñîêðóøåíèå
//ÒÎÏÎÐ
mysql_query("INSERT INTO `stats` (`id`,`stats`,`ability`,`skills`,exp) VALUES ('" . $uid . "','s1=62|s2=3|s3=3|s4=30|rinv=40|m9=5|m6=10|s7=0|a1=0|a2=9|a3=0|a4=0|a5=0|mg1=0|mg2=0|mg3=0|mg4=0|mg5=0|mg6=0|mg7=0|s5=0|s6=0|a6=0|s8=0|s9=0|s10=0|s11=0|s12=0|s13=0|s14=0|s15=0',-75,-9,100000)");
mysql_query(
"INSERT INTO `stats` (`id`,`stats`,`ability`,`skills`,exp) VALUES ('" . $uid . "','s1=62|s2=3|s3=3|s4=30|rinv=40|m9=5|m6=10|s7=0|a1=0|a2=9|a3=0|a4=0|a5=0|mg1=0|mg2=0|mg3=0|mg4=0|mg5=0|mg6=0|mg7=0|s5=0|s6=0|a6=0|s8=0|s9=0|s10=0|s11=0|s12=0|s13=0|s14=0|s15=0',-75,-9,100000)"
);
$re = $u->addItem(6433, $uid);
Db::sql('update items_users set `1price` = (select price_1 from items_shop where items_shop.item_id = ? and sid = 1) where id = ?', [6433, $re]);
Db::sql(
'update items_users set `1price` = (select price_1 from items_shop where items_shop.item_id = ? and sid = 1) where id = ?',
[6433, $re]
);
//Êîððåêöèÿ êðåäîâ
mysql_query('UPDATE `users` SET `money` = `money`200 WHERE `id` = "' . $uid . '" LIMIT 1');//êîðåêòèðîâêà äåíåã 2244 - 2101
mysql_query(
'UPDATE `users` SET `money` = `money`200 WHERE `id` = "' . $uid . '" LIMIT 1'
);//êîðåêòèðîâêà äåíåã 2244 - 2101
//óâîðîò
} elseif ($_POST['class_u'] == 2) {
//êàñòèì ýôåêòû óâîðîòà
$us = add_effn($uid, 8); // ëîâêà
$us = add_effn($uid, 20); // ñîêðóøåíèå
mysql_query("INSERT INTO `stats` (`id`,`stats`,`ability`,`skills`,exp) VALUES ('" . $uid . "','s1=21|s2=31|s3=16|s4=30|rinv=40|m9=5|m6=10|s7=0|a1=9|a2=0|a3=0|a4=0|a5=0|mg1=0|mg2=0|mg3=0|mg4=0|mg5=0|mg6=0|mg7=0|s5=0|s6=0',-75,-9,100000)");
mysql_query(
"INSERT INTO `stats` (`id`,`stats`,`ability`,`skills`,exp) VALUES ('" . $uid . "','s1=21|s2=31|s3=16|s4=30|rinv=40|m9=5|m6=10|s7=0|a1=9|a2=0|a3=0|a4=0|a5=0|mg1=0|mg2=0|mg3=0|mg4=0|mg5=0|mg6=0|mg7=0|s5=0|s6=0',-75,-9,100000)"
);
$re = $u->addItem(6431, $uid);
Db::sql('update items_users set `1price` = (select price_1 from items_shop where items_shop.item_id = ? and sid = 1) where id = ?', [6431, $re]);
Db::sql(
'update items_users set `1price` = (select price_1 from items_shop where items_shop.item_id = ? and sid = 1) where id = ?',
[6431, $re]
);
//Êîððåêöèÿ êðåäèòîâ
mysql_query('UPDATE `users` SET `money` = `money`200 WHERE `id` = "' . $uid . '" LIMIT 1');//êîðåêòèðîâêà äåíåã 2244 - 1972
mysql_query(
'UPDATE `users` SET `money` = `money`200 WHERE `id` = "' . $uid . '" LIMIT 1'
);//êîðåêòèðîâêà äåíåã 2244 - 1972
//òàíê
} elseif ($_POST['class_u'] == 3) {
//êàñòèì ýôåêòû
$us = add_effn($uid, 1); // ñèëà
$us = add_effn($uid, 20); // ñîêðóøåíèå
mysql_query("INSERT INTO `stats` (`id`,`stats`,`ability`,`skills`,exp) VALUES ('" . $uid . "','s1=42|s2=3|s3=3|s4=50|rinv=40|m9=5|m6=10|s7=0|a1=0|a2=0|a3=9|a4=0|a5=0|mg1=0|mg2=0|mg3=0|mg4=0|mg5=0|mg6=0|mg7=0|s5=0|s6=0|a6=0|s8=0|s9=0|s10=0|s11=0|s12=0|s13=0|s14=0|s15=0',-75,-9,100000)");
mysql_query(
"INSERT INTO `stats` (`id`,`stats`,`ability`,`skills`,exp) VALUES ('" . $uid . "','s1=42|s2=3|s3=3|s4=50|rinv=40|m9=5|m6=10|s7=0|a1=0|a2=0|a3=9|a4=0|a5=0|mg1=0|mg2=0|mg3=0|mg4=0|mg5=0|mg6=0|mg7=0|s5=0|s6=0|a6=0|s8=0|s9=0|s10=0|s11=0|s12=0|s13=0|s14=0|s15=0',-75,-9,100000)"
);
$re = $u->addItem(6432, $uid);
Db::sql('update items_users set `1price` = (select price_1 from items_shop where items_shop.item_id = ? and sid = 1) where id = ?', [6432, $re]);
Db::sql(
'update items_users set `1price` = (select price_1 from items_shop where items_shop.item_id = ? and sid = 1) where id = ?',
[6432, $re]
);
//Êîððåêöèÿ Êðåäèòîâ
mysql_query('UPDATE `users` SET `money` = `money`200 WHERE `id` = "' . $uid . '" LIMIT 1');//êîðåêòèðîâêà äåíåã 2244 - 2101
mysql_query(
'UPDATE `users` SET `money` = `money`200 WHERE `id` = "' . $uid . '" LIMIT 1'
);//êîðåêòèðîâêà äåíåã 2244 - 2101
//êðèò
} elseif ($_POST['class_u'] == 4)//êðèò
{
$us = add_effn($uid, 7); // èíòà
$us = add_effn($uid, 20); // ñîêðóøåíèå
mysql_query("INSERT INTO `stats` (`id`,`stats`,`ability`,`skills`,exp) VALUES ('" . $uid . "','s1=24|s2=15|s3=29|s4=30|rinv=40|m9=5|m6=10|s7=0|a1=0|a2=0|a3=0|a4=9|a5=0|mg1=0|mg2=0|mg3=0|mg4=0|mg5=0|mg6=0|mg7=0|s5=0|s6=0|a6=0|s8=0|s9=0|s10=0|s11=0|s12=0|s13=0|s14=0|s15=0',-75,-9,100000)");
mysql_query(
"INSERT INTO `stats` (`id`,`stats`,`ability`,`skills`,exp) VALUES ('" . $uid . "','s1=24|s2=15|s3=29|s4=30|rinv=40|m9=5|m6=10|s7=0|a1=0|a2=0|a3=0|a4=9|a5=0|mg1=0|mg2=0|mg3=0|mg4=0|mg5=0|mg6=0|mg7=0|s5=0|s6=0|a6=0|s8=0|s9=0|s10=0|s11=0|s12=0|s13=0|s14=0|s15=0',-75,-9,100000)"
);
$re = $u->addItem(6430, $uid);
Db::sql('update items_users set `1price` = (select price_1 from items_shop where items_shop.item_id = ? and sid = 1) where id = ?', [6430, $re]);
Db::sql(
'update items_users set `1price` = (select price_1 from items_shop where items_shop.item_id = ? and sid = 1) where id = ?',
[6430, $re]
);
//êîððåêöèÿ êðåäîâ ïðè ñòàðòå
mysql_query('UPDATE `users` SET `money` = `money`200 WHERE `id` = "' . $uid . '" LIMIT 1');//êîðåêòèðîâêà äåíåã 2244 - 1988
mysql_query(
'UPDATE `users` SET `money` = `money`200 WHERE `id` = "' . $uid . '" LIMIT 1'
);//êîðåêòèðîâêà äåíåã 2244 - 1988
//âîçäóõ
} elseif ($_POST['class_u'] == 5)//âîçäóõ
{
@@ -800,11 +869,18 @@ if ($_SERVER['HTTP_USER_AGENT'] != '' &&
$us = add_effn($uid, 32); // Õîëîäíûé ðàçóì
$us = add_effn($uid, 53); // Ìàã óñåëîê âîçäóõ
$us = add_effn($uid, 439); // Ìàã óñåëîê
mysql_query("INSERT INTO `stats` (`id`,`stats`,`ability`,`skills`,exp) VALUES ('" . $uid . "','s1=14|s2=3|s3=3|s4=25|rinv=40|m9=5|m6=10|s7=0|a1=0|a2=0|a3=0|a4=0|a5=3|mg1=0|mg2=6|mg3=0|mg4=0|mg5=0|mg6=0|mg7=0|s5=13|s6=40|a6=0|s8=0|s9=0|s10=0|s11=0|s12=0|s13=0|s14=0|s15=0',-75,-9,100000)");
mysql_query(
"INSERT INTO `stats` (`id`,`stats`,`ability`,`skills`,exp) VALUES ('" . $uid . "','s1=14|s2=3|s3=3|s4=25|rinv=40|m9=5|m6=10|s7=0|a1=0|a2=0|a3=0|a4=0|a5=3|mg1=0|mg2=6|mg3=0|mg4=0|mg5=0|mg6=0|mg7=0|s5=13|s6=40|a6=0|s8=0|s9=0|s10=0|s11=0|s12=0|s13=0|s14=0|s15=0',-75,-9,100000)"
);
$re = $u->addItem(6435, $uid);
Db::sql('update items_users set `1price` = (select price_1 from items_shop where items_shop.item_id = ? and sid = 1) where id = ?', [6435, $re]);
Db::sql(
'update items_users set `1price` = (select price_1 from items_shop where items_shop.item_id = ? and sid = 1) where id = ?',
[6435, $re]
);
// Êîððåêöèÿ Êðåäîâ
mysql_query('UPDATE `users` SET `money` = `money`200 WHERE `id` = "' . $uid . '" LIMIT 1');//êîðåêòèðîâêà äåíåã 2244 - 1988
mysql_query(
'UPDATE `users` SET `money` = `money`200 WHERE `id` = "' . $uid . '" LIMIT 1'
);//êîðåêòèðîâêà äåíåã 2244 - 1988
//îãîíü
} elseif ($_POST['class_u'] == 6) {
//êàñòèì ýôåêòû
@@ -812,11 +888,18 @@ if ($_SERVER['HTTP_USER_AGENT'] != '' &&
$us = add_effn($uid, 32); // Õîëîäíûé ðàçóì
$us = add_effn($uid, 51); // Ìàã óñåëîê îãîíü
$us = add_effn($uid, 439); // Ìàã óñåëîê
mysql_query("INSERT INTO `stats` (`id`,`stats`,`ability`,`skills`,exp) VALUES ('" . $uid . "','s1=14|s2=3|s3=3|s4=25|rinv=40|m9=5|m6=10|s7=0|a1=0|a2=0|a3=0|a4=0|a5=3|mg1=6|mg2=0|mg3=0|mg4=0|mg5=0|mg6=0|mg7=0|s5=13|s6=40|a6=0|s8=0|s9=0|s10=0|s11=0|s12=0|s13=0|s14=0|s15=0',-75,-9,100000)");
mysql_query(
"INSERT INTO `stats` (`id`,`stats`,`ability`,`skills`,exp) VALUES ('" . $uid . "','s1=14|s2=3|s3=3|s4=25|rinv=40|m9=5|m6=10|s7=0|a1=0|a2=0|a3=0|a4=0|a5=3|mg1=6|mg2=0|mg3=0|mg4=0|mg5=0|mg6=0|mg7=0|s5=13|s6=40|a6=0|s8=0|s9=0|s10=0|s11=0|s12=0|s13=0|s14=0|s15=0',-75,-9,100000)"
);
$re = $u->addItem(6447, $uid);
Db::sql('update items_users set `1price` = (select price_1 from items_shop where items_shop.item_id = ? and sid = 1) where id = ?', [6447, $re]);
Db::sql(
'update items_users set `1price` = (select price_1 from items_shop where items_shop.item_id = ? and sid = 1) where id = ?',
[6447, $re]
);
//Êîððåêöèÿ Êðåäèòîâ
mysql_query('UPDATE `users` SET `money` = `money`200 WHERE `id` = "' . $uid . '" LIMIT 1');//êîðåêòèðîâêà äåíåã 2244 - 1988
mysql_query(
'UPDATE `users` SET `money` = `money`200 WHERE `id` = "' . $uid . '" LIMIT 1'
);//êîðåêòèðîâêà äåíåã 2244 - 1988
//çåìëÿ
} elseif ($_POST['class_u'] == 7) {
//êàñòèì ýôåêòû
@@ -824,11 +907,18 @@ if ($_SERVER['HTTP_USER_AGENT'] != '' &&
$us = add_effn($uid, 32); // Õîëîäíûé ðàçóì
$us = add_effn($uid, 54); // Ìàã óñåëîê çåìëÿ
$us = add_effn($uid, 439); // Ìàã óñåëîê
mysql_query("INSERT INTO `stats` (`id`,`stats`,`ability`,`skills`,exp) VALUES ('" . $uid . "','s1=14|s2=3|s3=3|s4=25|rinv=40|m9=5|m6=10|s7=0|a1=0|a2=0|a3=0|a4=0|a5=3|mg1=0|mg2=0|mg3=0|mg4=6|mg5=0|mg6=0|mg7=0|s5=13|s6=40|a6=0|s8=0|s9=0|s10=0|s11=0|s12=0|s13=0|s14=0|s15=0',-75,-9,100000)");
mysql_query(
"INSERT INTO `stats` (`id`,`stats`,`ability`,`skills`,exp) VALUES ('" . $uid . "','s1=14|s2=3|s3=3|s4=25|rinv=40|m9=5|m6=10|s7=0|a1=0|a2=0|a3=0|a4=0|a5=3|mg1=0|mg2=0|mg3=0|mg4=6|mg5=0|mg6=0|mg7=0|s5=13|s6=40|a6=0|s8=0|s9=0|s10=0|s11=0|s12=0|s13=0|s14=0|s15=0',-75,-9,100000)"
);
$re = $u->addItem(6436, $uid);
Db::sql('update items_users set `1price` = (select price_1 from items_shop where items_shop.item_id = ? and sid = 1) where id = ?', [6436, $re]);
Db::sql(
'update items_users set `1price` = (select price_1 from items_shop where items_shop.item_id = ? and sid = 1) where id = ?',
[6436, $re]
);
//Êîððåêöèÿ Êðåäèòîâ
mysql_query('UPDATE `users` SET `money` = `money`200 WHERE `id` = "' . $uid . '" LIMIT 1');//êîðåêòèðîâêà äåíåã 2244 - 1988
mysql_query(
'UPDATE `users` SET `money` = `money`200 WHERE `id` = "' . $uid . '" LIMIT 1'
);//êîðåêòèðîâêà äåíåã 2244 - 1988
//âîäà
} elseif ($_POST['class_u'] == 8) {
//êàñòèì ýôåêòû
@@ -836,21 +926,35 @@ if ($_SERVER['HTTP_USER_AGENT'] != '' &&
$us = add_effn($uid, 32); // Õîëîäíûé ðàçóì
$us = add_effn($uid, 52); // Ìàã óñåëîê âîäà
$us = add_effn($uid, 439); // Ìàã óñåëîê
mysql_query("INSERT INTO `stats` (`id`,`stats`,`ability`,`skills`,exp) VALUES ('" . $uid . "','s1=14|s2=3|s3=3|s4=25|rinv=40|m9=5|m6=10|s7=0|a1=0|a2=0|a3=0|a4=0|a5=3|mg1=0|mg2=0|mg3=6|mg4=0|mg5=0|mg6=0|mg7=0|s5=13|s6=40|a6=0|s8=0|s9=0|s10=0|s11=0|s12=0|s13=0|s14=0|s15=0',-75,-9,100000)");
mysql_query(
"INSERT INTO `stats` (`id`,`stats`,`ability`,`skills`,exp) VALUES ('" . $uid . "','s1=14|s2=3|s3=3|s4=25|rinv=40|m9=5|m6=10|s7=0|a1=0|a2=0|a3=0|a4=0|a5=3|mg1=0|mg2=0|mg3=6|mg4=0|mg5=0|mg6=0|mg7=0|s5=13|s6=40|a6=0|s8=0|s9=0|s10=0|s11=0|s12=0|s13=0|s14=0|s15=0',-75,-9,100000)"
);
$re = $u->addItem(6448, $uid);
Db::sql('update items_users set `1price` = (select price_1 from items_shop where items_shop.item_id = ? and sid = 1) where id = ?', [6448, $re]);
Db::sql(
'update items_users set `1price` = (select price_1 from items_shop where items_shop.item_id = ? and sid = 1) where id = ?',
[6448, $re]
);
//Êîððåêöèÿ êðåäîâ
mysql_query('UPDATE `users` SET `money` = `money`200 WHERE `id` = "' . $uid . '" LIMIT 1');//êîðåêòèðîâêà äåíåã 2244 - 1988
mysql_query(
'UPDATE `users` SET `money` = `money`200 WHERE `id` = "' . $uid . '" LIMIT 1'
);//êîðåêòèðîâêà äåíåã 2244 - 1988
//Êðèòîóâîðîò
} elseif ($_POST['class_u'] == 9) {
//êàñòèì ýôåêòû óâîðîòà
$us = add_effn($uid, 8); // ëîâêà
$us = add_effn($uid, 20); // ñîêðóøåíèå
mysql_query("INSERT INTO `stats` (`id`,`stats`,`ability`,`skills`,exp) VALUES ('" . $uid . "','s1=15|s2=23|s3=30|s4=30|rinv=40|m9=5|m6=10|s7=0|a1=9|a2=0|a3=0|a4=0|a5=0|mg1=0|mg2=0|mg3=0|mg4=0|mg5=0|mg6=0|mg7=0|s5=0|s6=0',-75,-9,100000)");
mysql_query(
"INSERT INTO `stats` (`id`,`stats`,`ability`,`skills`,exp) VALUES ('" . $uid . "','s1=15|s2=23|s3=30|s4=30|rinv=40|m9=5|m6=10|s7=0|a1=9|a2=0|a3=0|a4=0|a5=0|mg1=0|mg2=0|mg3=0|mg4=0|mg5=0|mg6=0|mg7=0|s5=0|s6=0',-75,-9,100000)"
);
$re = $u->addItem(6530, $uid);
Db::sql('update items_users set `1price` = (select price_1 from items_shop where items_shop.item_id = ? and sid = 1) where id = ?', [6530, $re]);
Db::sql(
'update items_users set `1price` = (select price_1 from items_shop where items_shop.item_id = ? and sid = 1) where id = ?',
[6530, $re]
);
//Êîððåêöèÿ êðåäèòîâ
mysql_query('UPDATE `users` SET `money` = `money`200 WHERE `id` = "' . $uid . '" LIMIT 1');//êîðåêòèðîâêà äåíåã 2244 - 1972
mysql_query(
'UPDATE `users` SET `money` = `money`200 WHERE `id` = "' . $uid . '" LIMIT 1'
);//êîðåêòèðîâêà äåíåã 2244 - 1972
}
if ($_POST['ref'] > 0) {
$re = $u->addItem(4811, $uid);
@@ -870,22 +974,44 @@ if ($_SERVER['HTTP_USER_AGENT'] != '' &&
//äîáîâëÿåì áëàãîäàòü àíãåëà ïðè ðåãèñòðàöèè
$ttime = time();
mysql_query("INSERT INTO `eff_users`(`id_eff`, `uid`, `name`, `data`, `overType`, `timeUse`, `timeAce`, `user_use`, `delete`, `v1`, `v2`, `img2`, `x`, `hod`, `bj`, `sleeptime`, `no_Ace`, `file_finish`, `tr_life_user`, `deactiveTime`, `deactiveLast`, `mark`, `bs`) VALUES
(412,'" . $uid . "','Áëàãîäàòü Àíãåëà [1]','add_gold=1|add_speedhp=35|add_speedmp=35|add_exp=35|add_repair_discount=25|add_speed_dungeon=10|add_hpVinos=5|add_m10=5|add_m11=5|add_za=25|add_zma=25',52," . $ttime . ",0,'',0,0,0,'',1,-1,0,0,1,'',0,0,0,0,0)");
mysql_query(
"INSERT INTO `eff_users`(`id_eff`, `uid`, `name`, `data`, `overType`, `timeUse`, `timeAce`, `user_use`, `delete`, `v1`, `v2`, `img2`, `x`, `hod`, `bj`, `sleeptime`, `no_Ace`, `file_finish`, `tr_life_user`, `deactiveTime`, `deactiveLast`, `mark`, `bs`) VALUES
(412,'" . $uid . "','Áëàãîäàòü Àíãåëà [1]','add_gold=1|add_speedhp=35|add_speedmp=35|add_exp=35|add_repair_discount=25|add_speed_dungeon=10|add_hpVinos=5|add_m10=5|add_m11=5|add_za=25|add_zma=25',52," . $ttime . ",0,'',0,0,0,'',1,-1,0,0,1,'',0,0,0,0,0)"
);
//ìóëüòû
$ipm1 = mysql_fetch_array(mysql_query('SELECT * FROM `logs_auth` WHERE `uid` = "' . $uid . '" AND `ip`!="' . getIp() . '" ORDER BY `id` LIMIT 1'));
$ppl = mysql_query('SELECT * FROM `logs_auth` WHERE `ip`!="" AND (`ip` = "' . getIp() . '" OR `ip`="' . $ipm1['ip'] . '" OR `ip`="' . $_COOKIE['ip'] . '")');
$ipm1 = mysql_fetch_array(
mysql_query(
'SELECT * FROM `logs_auth` WHERE `uid` = ' . $uid . ' AND `ip`!="' . UserIp::get(
) . '" ORDER BY `id` LIMIT 1'
)
);
$ppl = mysql_query(
'SELECT * FROM `logs_auth` WHERE `ip`!="" AND (`ip` = "' . UserIp::get(
) . '" OR `ip`="' . $ipm1['ip'] . '" OR `ip`="' . $_COOKIE['ip'] . '")'
);
while ($spl = mysql_fetch_array($ppl)) {
$ml = mysql_fetch_array(mysql_query('SELECT `id` FROM `mults` WHERE (`uid` = "' . $spl['uid'] . '" AND `uid2` = "' . $uid . '") OR (`uid2` = "' . $spl['uid'] . '" AND `uid` = "' . $uid . '") LIMIT 1'));
$ml = mysql_fetch_array(
mysql_query(
'SELECT `id` FROM `mults` WHERE (`uid` = "' . $spl['uid'] . '" AND `uid2` = "' . $uid . '") OR (`uid2` = "' . $spl['uid'] . '" AND `uid` = "' . $uid . '") LIMIT 1'
)
);
if (!isset($ml['id']) && $spl['ip'] != '' && $spl['ip'] != '127.0.0.1') {
mysql_query('INSERT INTO `mults` (`uid`,`uid2`,`ip`) VALUES ("' . $uid . '","' . $spl['uid'] . '","' . $spl['ip'] . '")');
mysql_query(
'INSERT INTO `mults` (`uid`,`uid2`,`ip`) VALUES ("' . $uid . '","' . $spl['uid'] . '","' . $spl['ip'] . '")'
);
}
}
mysql_query("INSERT INTO `logs_auth` (`uid`,`ip`,`browser`,`type`,`time`,`depass`) VALUES ('" . $uid . "','" . getIp() . "','" . $_SERVER['HTTP_USER_AGENT'] . "','1','" . time() . "','')");
mysql_query(
"INSERT INTO `logs_auth` (`uid`,`ip`,`browser`,`type`,`time`,`depass`) VALUES ('" . $uid . "','" . UserIp::get(
) . "','" . $_SERVER['HTTP_USER_AGENT'] . "','1','" . time() . "','')"
);
//Îáíîâÿåì òàáëèöû
mysql_query("UPDATE `users` SET `online`='" . time() . "',`ip` = '" . getIp() . "' WHERE `uid` = '" . $uid . "' LIMIT 1");
mysql_query(
"UPDATE `users` SET `online`= unix_timestamp(),`ip` = '" . UserIp::get(
) . "' WHERE id = '" . $uid . "' LIMIT 1"
);
if (
!setcookie('login', $_POST['nick_u'], (time() + 60 * 60 * 24 * 7), '', '.new-combats.com') ||
@@ -895,15 +1021,17 @@ if ($_SERVER['HTTP_USER_AGENT'] != '' &&
die('Îøèáêà ñîõðàíåíèÿ cookie.');
} else {
Db::sql('insert into users_learning_status (uid) values (?)', [$uid]);
die('Ñïàñèáî çà ðåãèñòðàöèþ â èãðîâîì ìèðå Áîéöîâñêîãî Êëóáà, æåëàåì âàì ïîáåä è äîëãîé èãðû.
 ñëó÷àå âîïðîñîâ ïî èãðå, Âàì áóäåò äîñòóïåí îáùèé ÷àò!<br><script>function test(){ top.location.href="https://new-combats.com/bk"; } setTimeout("test()",100);</script>');
die(
'Ñïàñèáî çà ðåãèñòðàöèþ â èãðîâîì ìèðå Áîéöîâñêîãî Êëóáà, æåëàåì âàì ïîáåä è äîëãîé èãðû.
 ñëó÷àå âîïðîñîâ ïî èãðå, Âàì áóäåò äîñòóïåí îáùèé ÷àò!<br><script>function test(){ top.location.href="https://new-combats.com/bk"; } setTimeout("test()",100);</script>'
);
}
}
} else {
?>
<div class="visible_class_s"><p><input class="box" type="submit"></p></div>
</form>
<?php
}
}