Файл: bloodlands.pw/core.php
Строк: 161
<?php
defined('cms') or die('Error:restricted access');
error_reporting(0);
ob_start();
if(empty($patch)) $patch = '';
require_once $patch.'include/db.php';
require_once $patch.'include/func.php';
if (!empty($_COOKIE['login']) AND !empty($_COOKIE['pass'])) {
$login = filter($_COOKIE['login']);
$pass = filter($_COOKIE['pass']);
$check = mysql_num_rows(mysql_query("SELECT * FROM `users` WHERE `login` = '".$login."' AND `pass` = '".$pass."'"));
if ($check == 1) {
$us = mysql_fetch_array(mysql_query("SELECT * FROM `users` WHERE `login` = '".$login."' AND `pass` = '".$pass."'"));
$user = abs(intval($us['id']));
$se = mysql_fetch_array(mysql_query("SELECT * FROM `settings` WHERE `user` = '".$user."'"));
$set = abs(intval($se['id']));
$pit = mysql_fetch_array(mysql_query("SELECT * FROM `pit` WHERE `user` = '".$user."' AND `status` = '1' AND `energy` > '1' AND `hp` > '0'"));
$piter = abs(intval($pit['id']));
$vip_us = mysql_fetch_array(mysql_query("SELECT * FROM `vip` WHERE `user` = '".$user."'"));
} else $user = FALSE;
} else $user = FALSE;
include $patch.'include/func2.php';
$id = !empty($_GET['id']) ? abs(intval($_GET['id'])) : '';
$d = !empty($_GET['d']) ? abs(intval($_GET['d'])) : '';
$t = !empty($_GET['t']) ? filter($_GET['t']) : '';
$it = !empty($_GET['it']) ? filter($_GET['it']) : '';
if(empty($us['kol'])) $us['kol'] = 7;
if(empty($title) or !$user) $title = 'Кровавые земли';
if($user) $title = ''.$title.' "Кровавые земли"';
echo '<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html xmlns="http://www.w3.org/1999/xhtml"><head><title>'.$title.'</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta http-equiv="Cache-Control" content="no-cache" forua="true">
<meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1, maximum-scale=2">';
if($user && $set) echo'<link rel="stylesheet" type="text/css" href="'.$patch.'include/style/'.$se['style'].'.css">'; else echo'<link rel="stylesheet" type="text/css" href="'.$patch.'include/style/0.css">';
echo'<link rel="stylesheet" type="text/css" href="'.$patch.'include/style/main.css"></head><body>';
//if($user != 1){echo'<div class="menu">Ведутся тех. работы</div>'; exit;}
if($user){
include $patch.'include/dop.php';
$n_level_daiy = mysql_fetch_array(mysql_query("SELECT * FROM `level` WHERE `level` = '".$us['level']."' LIMIT 1"));
if (!empty($n_level_daiy) && $us['exp'] >= $n_level_daiy['exp']){
$lvl_UP = round($us['level']+1);
$heal_up = round($us['hp_all']+$n_level_daiy['hp']);
$mp_up = round($us['mp_all']+$n_level_daiy['mp']);
$points = round($us['points']+$n_level_daiy['points']);
if($us['level'] >= 5) $mag_points = round($us['mag_points']+1); else $mag_points = 0;
if($us['race'] == 1) mysql_query("UPDATE `users` SET `vin` = (`vin` + 1), `hp_all` = (`hp_all` + 10) WHERE `id` = '".$user."'");
elseif($us['race'] == 3) mysql_query("UPDATE `users` SET `lovk` = (`lovk` + 1), `dodge` = (`dodge` + 5), `antidodge` = (`antidodge` + 5) WHERE `id` = '".$user."'");
elseif($us['race'] == 2 or $us['race'] == 4) mysql_query("UPDATE `users` SET `sila` = (`sila` + 1), `damage` = (`damage` + 1), `damagemax` = (`damagemax` + 2) WHERE `id` = '".$user."'");
mysql_query("UPDATE `users` SET `level` = '".$lvl_UP."', `hp_all` = '".$heal_up."', `mp_all` = '".$mp_up."', `points` = '".$points."', `money` = (`money` + ".$lvl_UP."), `mag_points` = '".$mag_points."' WHERE `id` = '".$user."'");
if($us['ref'] > 0){if($lvl_UP == 10) mysql_query("UPDATE `users` SET `money` = (`money` + 50) WHERE `id` = '".$us['ref']."'");
elseif($lvl_UP == 15) mysql_query("UPDATE `users` SET `money` = (`money` + 150) WHERE `id` = '".$us['ref']."'");
elseif($lvl_UP == 20) mysql_query("UPDATE `users` SET `money` = (`money` + 300) WHERE `id` = '".$us['ref']."'");}
echo '<div class="shapka"><img src="'.$patch.'img/icon/error.png" alt=""> Вы получили новый уровень!</div>';
}
if($piter > 0 && $pit['lvl'] < $pit['max_lvl']){
$p_level_daiy = mysql_fetch_array(mysql_query("SELECT * FROM `level_pit` WHERE `level` = '".$pit['lvl']."' LIMIT 1"));
if(!empty($p_level_daiy) && $pit['rost'] >= $p_level_daiy['rost']){
if($pit['lvl'] > 9 && $pit['lvl'] < 21) $cost = 25;
elseif($pit['lvl'] > 20 && $pit['lvl'] < 31) $cost = 60;
elseif($pit['lvl'] > 30) $cost = 100;
mysql_query("UPDATE `pit` SET `cost` = (`cost` + ".$cost."), `lvl` = (`lvl` + 1), `hp_all` = (`hp_all` + ".$p_level_daiy['hp']."), `energy_all` = (`energy_all` + ".$p_level_daiy['energy']."), `points` = (`points` + ".$p_level_daiy['points'].") WHERE `id` = '".$piter."'");
echo '<div class="shapka"><img src="'.$patch.'img/icon/error.png" alt=""> Ваш питомец получил новый уровень!</div>';
}}
if ($us['level'] == 10 && $us['status_id'] == 0) {
mysql_query("UPDATE `users` SET `status_id` = '1' WHERE `id` = '".$user."'");
echo '<div class="shapka"><img src="'.$patch.'img/icon/error.png" alt=""> Вы получили звание: <b>Новичок</b>!<br/>На 15 уровне его можно будет повысить.</div>';
}
if($se['news'] > 0){
echo'<div class="shapka"><img src="'.$patch.'img/icon/error.png" alt=""> Добавлена новость! <a href="'.$patch.'/news.php">смотреть</a></div>';
mysql_query("UPDATE `settings` SET `news` = '0' WHERE `id` = '".$set."'");
}
if($se['time_bonus'] == 0){
mysql_query("UPDATE `users` SET `repute` = (`repute` + 2) WHERE `id` = '".$user."'");
mysql_query("UPDATE `settings` SET `time_bonus` = '1' WHERE `id` = '".$set."'");
echo '<div class="shapka"><img src="'.$patch.'img/icon/error.png" alt=""> Сегодня за посещение игры получено +2 к репутации!</div>';
}
if($piter > 0 && $pit['energy'] < 5){
echo'<div class="shapka"><img src="'.$patch.'img/icon/error.png" alt=""> У питомца «'.$pit['title'].'» кончается энергия!</div>';
}
$top = mysql_query("SELECT `id`,`last_user` FROM `mail` WHERE `kol` > '0' AND `user_1` = '".$user."' AND `last_user` != '".$user."' OR `user_2` = '".$user."' AND `kol` > '0' AND `last_user` != '".$user."'");
while($res = mysql_fetch_assoc($top)){
$mailsms = mysql_result(mysql_query("SELECT count(*) FROM `mail_sms` WHERE `user` = '".$res['last_user']."' AND `mail_id` = '".$res['id']."' AND `read` = '0'"),0);
if($mailsms >= 1) $mail_col++;
}
$systems = mysql_num_rows(mysql_query("SELECT `id` FROM `mail_sys` WHERE `user` = '".$user."' AND `read` = '0'"));
if($us['clanmail'] > 0) $mail_col = round($mail_col+1);
if($systems > 0) $mail_col = round($mail_col+1);
$point_lvl = round($us['points']+$us['mag_points']);
if($mail_col >= 1 or $point_lvl >= 1 or $us['busy'] > 0 or $piter > 0 && $pit['points'] >= 1){
$you = mysql_fetch_array(mysql_query("SELECT * FROM `fight_user` WHERE `user` = '".$user."' AND `bot` = '0' ORDER BY `id` DESC"));
echo'<div class="shapka">';
if($point_lvl >= 1) echo'<a href="'.$patch.'user.php?a=points">Навыки +'.$us['points'].'</a>';
if($piter > 0 && $pit['points'] >= 1) echo'<a href="'.$patch.'npc.php?a=pit_info&id='.$piter.'">Навыки +'.$pit['points'].'</a>';
if($mail_col >= 1) echo '<a href="'.$patch.'mail.php">Почта +'.$mail_col.'</a>';
if($us['busy'] > 0) echo'<a href="'.$patch.'fight.php?id='.$us['busy'].'">В бой</a><br/>';
echo'</div>';
}
$clan = mysql_fetch_array(mysql_query("SELECT `id` FROM `orden` WHERE `id` = '".$us['orden']."' LIMIT 1"));
echo'<table class="header" cellpadding="0"><tr><td class="polu" align="center"><a href="'.$patch.'user.php?id='.$us['id'].'">';
if($clan['id'] > 0) echo'<img src="'.$patch.'img/clans/'.$clan['id'].'.png" alt=""> ';
if(!empty($us['color']) && $us['type_nick'] == 1) {echo'<font color="#'.$us['color'].'"><b>'.$us['login'].'</b></font>';
} else echo $us['login'];
if($_SERVER['PHP_SELF'] !== '/world.php') echo'</a></td><td class="polu" align="center"><a href="'.$patch.'index.php">Город</a></td>';
else echo'</a></td><td class="polu" align="center"><a href="'.$patch.'bag.php">'.$us['hp'].' HP</a></td>';
echo'</tr></table><div class="all">';
if(empty($us['email'])) echo'<div class="pt" align="center"><a class="line" href="'.$patch.'user.php?a=email">Сохранить персонажа!</a></div><div style="margin-bottom:4px;"></div>';
$artefakts = mysql_result(mysql_query("SELECT count(*) FROM `bag` WHERE `orden` > '0' AND `user` = '".$user."'"),0);
if($artefakts > 0 && $us['orden'] == 0 && $_SERVER['PHP_SELF'] !== '/bag.php'){
echo'<div class="pt">Вы не находитесь в клане! Нужно продать артефакты, не принадлежащие вам!<br/>
<a href="../bag.php">Инвентарь</a></div>';
include 'include/foot1.php'; exit;
}
}
?>