284 lines
11 KiB
PHP
284 lines
11 KiB
PHP
<?php
|
|
|
|
# Ïîëó÷àåì IP
|
|
function getIPblock()
|
|
{
|
|
return isset($_SERVER['HTTP_X_REAL_IP']) ? $_SERVER['HTTP_X_REAL_IP'] : $_SERVER['REMOTE_ADDR'];
|
|
}
|
|
|
|
# Âûïîëíÿåì ïðîâåðêó áåçîïàñíîñòè.
|
|
|
|
if ($_SERVER['HTTP_CF_CONNECTING_IP'] != $_SERVER['SERVER_ADDR'] && $_SERVER['HTTP_CF_CONNECTING_IP'] != '127.0.0.1') {
|
|
die('Hello pussy!');
|
|
}
|
|
if (getIPblock() != $_SERVER['SERVER_ADDR'] && getIPblock() != '127.0.0.1' && getIPblock() != '' && getIPblock(
|
|
) != '91.228.152.24') {
|
|
die(getIPblock() . '<br>' . $_SERVER['SERVER_ADDR']);
|
|
}
|
|
|
|
|
|
include('_incl_data/__config.php');
|
|
const GAME = true;
|
|
include('_incl_data/class/__db_connect.php');
|
|
|
|
function e($t)
|
|
{
|
|
mysql_query(
|
|
'INSERT INTO `chat` (`text`,`city`,`to`,`type`,`new`,`time`) VALUES ("core #' . date('d.m.Y') . ' %' . date(
|
|
'H:i:s'
|
|
) . ' (Êðèòè÷åñêàÿ îøèáêà): <b>' . mysql_real_escape_string($t) . '</b>","capitalcity","TABU","6","1","-1")'
|
|
);
|
|
}
|
|
|
|
if (isset($_GET['cron_core'])) {
|
|
$id = [
|
|
'id' => $_GET['uid'],
|
|
'pass' => $_GET['pass'],
|
|
];
|
|
if (md5($id['id'] . '_brfCOreW@!_' . $id['pass']) == $_GET['cron_core']) {
|
|
$uzr = mysql_fetch_array(
|
|
mysql_query(
|
|
'SELECT `id`,`login`,`pass` FROM `users` WHERE `id` = "' . mysql_real_escape_string(
|
|
$id['id']
|
|
) . '" AND `pass` = "' . mysql_real_escape_string($id['pass']) . '" LIMIT 1'
|
|
)
|
|
);
|
|
if (isset($uzr['id'])) {
|
|
$CRON_CORE = true;
|
|
$_COOKIE['login'] = $uzr['login'];
|
|
$_COOKIE['pass'] = $uzr['pass'];
|
|
$_POST['id'] = 'reflesh';
|
|
|
|
|
|
if (isset($_GET['atack'])) {
|
|
$_POST['atack'] = $_GET['atack'];
|
|
}
|
|
if (isset($_GET['block'])) {
|
|
$_POST['block'] = $_GET['block'];
|
|
}
|
|
if (isset($_GET['usepriem'])) {
|
|
$_POST['usepriem'] = $_GET['usepriem'];
|
|
}
|
|
if (isset($_GET['useitem'])) {
|
|
$_POST['useitem'] = $_GET['useitem'];
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!isset($uzr['id'])) {
|
|
header('location: main.php');
|
|
die();
|
|
}
|
|
|
|
unset($uzr);
|
|
|
|
$magic = new Magic();
|
|
$u = User::start();
|
|
$filter = new Filter();
|
|
$q = new Quests;
|
|
|
|
if ($u->info['activ'] > 0) {
|
|
die('Âàì íåîáõîäèìî àêòèâèðîâàòü ïåðñîíàæà.<br>Àâòîðèçèðóéòåñü ñ ãëàâíîé ñòðàíèöû.');
|
|
}
|
|
|
|
$tjs = '';
|
|
#--------äëÿ îáùàãè, è ïîçæå äëÿ ïî÷òû
|
|
$sleep = $u->testAction('`vars` = "sleep" AND `uid` = "' . $u->info['id'] . '" LIMIT 1', 1);
|
|
if ($u->room['file'] != "objaga" && $sleep['id'] > 0) {
|
|
mysql_query('UPDATE `actions` SET `vars` = "unsleep" WHERE `id` = "' . $sleep['id'] . '" LIMIT 1');
|
|
}
|
|
if ($u->room['file'] == "objaga" || $u->room['file'] == "post") {
|
|
$trololo = 0;
|
|
} else {
|
|
$trololo = 1;
|
|
}
|
|
|
|
#--------äëÿ îáùàãè, è ïîçæå äëÿ ïî÷òû
|
|
if ($u->info['online'] < time() - 60) {
|
|
$filter->setOnline($u->info['online'], $u->info['id']);
|
|
mysql_query(
|
|
"UPDATE `users` SET `online`='" . time() . "',`timeMain`='" . time(
|
|
) . "' WHERE `id`='" . $u->info['id'] . "' LIMIT 1"
|
|
);
|
|
} elseif ($u->info['timeMain'] < time() - 60) {
|
|
mysql_query(
|
|
"UPDATE `users` SET `online`='" . time() . "',`timeMain`='" . time(
|
|
) . "' WHERE `id`='" . $u->info['id'] . "' LIMIT 1"
|
|
);
|
|
}
|
|
|
|
if (!isset($u->info['id']) || ($u->info['joinIP'] == 1 && $u->info['ip'] != $_SERVER['HTTP_X_REAL_IP']) || $u->info['banned'] > 0) {
|
|
die($c['exit']);
|
|
}
|
|
|
|
if (isset($_GET['atak_user']) && $u->info['battle'] == 0 && $_GET['atak_user'] != $u->info['id']) {
|
|
if ($u->room['noatack'] == 0) {
|
|
$ua = mysql_fetch_array(
|
|
mysql_query(
|
|
'SELECT `id`,`clan` FROM `users` WHERE`id` = "' . mysql_real_escape_string(
|
|
$_GET['atak_user']
|
|
) . '" LIMIT 1'
|
|
)
|
|
);
|
|
$cruw = mysql_fetch_array(
|
|
mysql_query(
|
|
'SELECT `id` FROM `clan_wars` WHERE
|
|
((`clan1` = "' . $ua['clan'] . '" AND `clan2` = "' . $u->info['clan'] . '") OR (`clan2` = "' . $ua['clan'] . '" AND `clan1` = "' . $u->info['clan'] . '")) AND
|
|
`time_finish` > ' . time() . ' LIMIT 1'
|
|
)
|
|
);
|
|
unset($ua);
|
|
if (isset($cruw['id'])) {
|
|
$cruw = 1;
|
|
}
|
|
|
|
$ua = mysql_fetch_array(
|
|
mysql_query(
|
|
'SELECT `s`.`team`,`s`.`id`,`s`.`bbexp`,`u`.`battle`,`u`.`id`,`u`.`room`,`u`.`login`,`u`.`online` FROM `stats` AS `s` LEFT JOIN `users` AS `u` ON `s`.`id` = `u`.`id` WHERE (`s`.`atack` > "' . time(
|
|
) . '" OR `s`.`atack` = 1 OR 1 = ' . $cruw . ') AND `s`.`id` = "' . mysql_real_escape_string(
|
|
$_GET['atak_user']
|
|
) . '" LIMIT 1'
|
|
)
|
|
);
|
|
if (isset($ua['id']) && $ua['online'] > time() - 520) {
|
|
$usta = $u->getStats($ua['id'], 0); // ñòàòû öåëè
|
|
$minHp = $usta['hpAll'] / 100 * 33; // ìèíèìàëüíûé çàïàñ çäîðîâüÿ öåëè ïðè êîòîðîì ìîæíî íàïàñòü
|
|
|
|
if ($ua['room'] == $u->info['room'] && ($minHp < $usta['hpNow'] || $ua['battle'] > 0)) {
|
|
$magic->atackUser($u->info['id'], $ua['id'], $ua['team'], $ua['battle'], $ua['bbexp'], 50);
|
|
|
|
$rtxt = '[img[items/pal_button8.gif]] "' . $u->info['login'] . '" ñîâåðøèë' . $sx . ' íàïàäåíèå ïî ìåòêå íà ïåðñîíàæà "' . $ua['login'] . '".';
|
|
mysql_query(
|
|
"INSERT INTO `chat` (`new`,`city`,`room`,`login`,`to`,`text`,`time`,`type`,`toChat`,`typeTime`) VALUES (1,'" . $u->info['city'] . "','" . $u->info['room'] . "','','','" . $rtxt . "','" . time(
|
|
) . "','6','0','1')"
|
|
);
|
|
|
|
header('location: main.php');
|
|
die();
|
|
} else {
|
|
if ($ua['room'] != $u->info['room']) {
|
|
//Ïåðñîíàæ â äðóãîé êîìíàòå
|
|
$u->error = 'Ïåðñîíàæ íàõîäèòñÿ â äðóãîé êîìíàòå';
|
|
} else {
|
|
$u->error = 'Ïåðñîíàæ èìååò ñëèøêîì ìàëûé óðîâåíü æèçíåé.';
|
|
}
|
|
}
|
|
} else {
|
|
//Íà ïåðñîíàæà íåëüçÿ íàïàñòü
|
|
$u->error = 'Ïåðñîíàæ íå â èãðå, ëèáî íà íåì íåò ìåòêè';
|
|
}
|
|
}
|
|
$u->error = 'Âàì çàïðåùàåòñÿ àòàêîâàòü áåç ðàçðåøåíèÿ...';
|
|
}
|
|
|
|
if ($u->info['battle_text'] != '') {
|
|
//Ïîêàçûâàåì ñèñòåìêó è çàíîñèì äàííûå
|
|
if ($u->info['last_b'] > 0) {
|
|
mysql_query(
|
|
'INSERT INTO `battle_last` (`battle_id`,`uid`,`time`,`act`,`level`,`align`,`clan`,`exp`) VALUES ("' . $u->info['last_b'] . '","' . $u->info['id'] . '","' . time(
|
|
) . '","' . $u->info['last_a'] . '","' . $u->info['level'] . '","' . $u->info['align'] . '","' . $u->info['clan'] . '","' . $u->info['exp'] . '")'
|
|
);
|
|
}
|
|
mysql_query('UPDATE `stats` SET `battle_text` = "",`last_b`="0" WHERE `id` = "' . $u->info['id'] . '" LIMIT 1');
|
|
}
|
|
|
|
$act = -2;
|
|
$act2 = 0;
|
|
$u->stats = $u->getStats($u->info['id'], 0);
|
|
$u->aves = $u->ves(null);
|
|
if (!isset($u->stats['act'])) {
|
|
$u->stats['act'] = 0;
|
|
}
|
|
if ($u->stats['act'] == 1) {
|
|
$act = 1;
|
|
}
|
|
$u->rgd = $u->regen($u->info['id'], 0, 0);
|
|
//Ïðîâåðêà óðîâíÿ
|
|
$ul = $u->testLevel();
|
|
if ($ul == 1) {
|
|
$act = 1;
|
|
}
|
|
if ($u->info['repass'] > 0 && $u->info['id'] != 5433446) {
|
|
function GetRealIp()
|
|
{
|
|
if (!empty($_SERVER['HTTP_CLIENT_IP'])) {
|
|
$ip = $_SERVER['HTTP_CLIENT_IP'];
|
|
} elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
|
|
$ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
|
|
} else {
|
|
$ip = $_SERVER['REMOTE_ADDR'];
|
|
}
|
|
return $ip;
|
|
}
|
|
|
|
/*-----------------------*/
|
|
if ($u->info['battle'] == 0) {
|
|
if ($act2 != -2 && $act == -2) {
|
|
$act = $act2;
|
|
}
|
|
|
|
if (!isset($u->tfer['id']) && $u->room['block_all'] == 0) {
|
|
//Îäåòü/ñíÿòü ïðåäìåò
|
|
if (isset($_GET['rstv']) && isset($_GET['inv'])) {
|
|
$act = $u->freeStatsMod($_GET['rstv'], $_GET['mf'], $u->info['id']);
|
|
} elseif (isset($_GET['ufs2']) && isset($_GET['inv'])) {
|
|
$act = $u->freeStats2Item($_GET['itmid'], $_GET['ufs2'], $u->info['id'], 1);
|
|
} elseif (isset($_GET['ufs2mf']) && isset($_GET['inv'])) {
|
|
$act = $u->freeStats2Item($_GET['itmid'], $_GET['ufs2mf'], $u->info['id'], 2);
|
|
} elseif (isset($_GET['ufsmst']) && isset($_GET['inv'])) {
|
|
$act = $u->itemsSmSave($_GET['itmid'], $_GET['ufsmst'], $u->info['id']);
|
|
} elseif (isset($_GET['ufsms']) && isset($_GET['inv'])) {
|
|
$act = $u->itemsSmSave($_GET['itmid'], $_GET['ufsms'] + 100, $u->info['id']);
|
|
} elseif (isset($_GET['ufs']) && isset($_GET['inv'])) {
|
|
$act = $u->freeStatsItem($_GET['itmid'], $_GET['ufs'], $u->info['id']);
|
|
} elseif (isset($_GET['sid']) && isset($_GET['inv'])) {
|
|
$act = $u->snatItem($_GET['sid'], $u->info['id']);
|
|
} elseif (isset($_GET['oid']) && isset($_GET['inv'])) {
|
|
$act = $u->odetItem($_GET['oid'], $u->info['id']);
|
|
} elseif (isset($_GET['item_rune']) && isset($_GET['inv'])) {
|
|
$act = $u->runeItem(null);
|
|
} elseif (isset($_GET['remitem'], $_GET['inv'])) {
|
|
$act = $u->snatItemAll($u->info['id']);
|
|
} elseif (isset($_GET['delete']) && isset($_GET['inv']) && $u->newAct($_GET['sd4'])) {
|
|
$u->deleteItem(intval($_GET['delete']), $u->info['id']);
|
|
} elseif (isset($_GET['stack']) && isset($_GET['inv'])) {
|
|
$u->stack($_GET['stack']);
|
|
} elseif (isset($_GET['unstack']) && isset($_GET['inv'])) {
|
|
$u->unstack($_GET['unstack']);
|
|
} elseif (isset($_GET['end_qst_now'])) {
|
|
$q->endq((int)$_GET['end_qst_now'], 'end');
|
|
}
|
|
//Èñïîëüçîâàòü ýôôåêò
|
|
if (isset($_GET['use_pid'])) {
|
|
$magic->useItems((int)$_GET['use_pid']);
|
|
}
|
|
}
|
|
|
|
} elseif ($u->info['battle_text'] != '') {
|
|
mysql_query('UPDATE `stats` SET `battle_text` = "",`last_b`="0" WHERE `id` = "' . $u->info['id'] . '" LIMIT 1');
|
|
}
|
|
|
|
if ($magic->youuse > 0) {
|
|
$act = 1;
|
|
}
|
|
//Ïîëó÷åíèå ñòàòîâ
|
|
if ($act != -2) {
|
|
$u->stats = $u->getStats($u->info['id'], 0, 1);
|
|
$u->aves = $u->ves(null);
|
|
$act2 = $u->testItems($u->info['id'], $u->stats, 0);
|
|
if ($act2 != -2 && $act == -2) {
|
|
$act = $act2;
|
|
}
|
|
}
|
|
}
|
|
|
|
if (
|
|
(isset($_GET['zayvka']) && $u->info['battle'] == 0) ||
|
|
(isset($_GET['zayvka']) && ($_GET['r'] == 6 || $_GET['r'] == 7 || !isset($_GET['r'])) && $u->info['battle'] > 0) &&
|
|
!isset($u->tfer['id'])) {
|
|
include('modules_data/_zv.php');
|
|
}
|
|
|
|
mysql_query('UNLOCK TABLES');
|