Файл: impwar.tk/buy_thing.php
Строк: 159
<?php
require_once('conf/dbc.php');
require_once('conf/session_start.php');
require_once('conf/ban.php');
if ((!isset($_SESSION['id'])) or (!isset($_SESSION['nick']))) {
?>
<script type="text/javascript">
document.location.href = "reg.php?err_login=1";
</script>
<?php
}
$type = abs(intval($_GET['type']));
$thing_id = abs(intval($_GET['thing']));
$money_type = abs(intval($_GET['money']));
$user_id = abs(intval($_SESSION['id']));
$query_c = "Select user_id from things where place=0 and user_id = '$user_id' limit 20";
$result_c = mysqli_query($dbc, $query_c) or die ('Ошибка передачи запроса к БД1');
$count = mysqli_num_rows($result_c);
if ($count==20) {
?>
<script type="text/javascript">
document.location.href="bag.php?err=3";
</script>
<?php
exit();
}
if ($money_type <> 1 and $money_type <> 2) {
$money_type = 2;
}
if (empty($thing_id) or empty($type)) {
?>
<script type="text/javascript">
document.location.href = "syslov.php?mod=snr";
</script>
<?php
exit();
}
if ($type <> 1 and $type <> 2 and $type <> 3 and $type <> 4 and $type <> 6) {
?>
<script type="text/javascript">
document.location.href = "syslov.php?mod=snr";
</script>
<?php
exit();
}
if ($type == 1) {
$query_c = "Select * from clothes where clothes_id = '$thing_id' limit 1";
$result_c = mysqli_query($dbc, $query_c) or die ('Ошибка передачи запроса к БД');
$row_cl = mysqli_fetch_array($result_c);
}
if ($type == 2) {
$query_c = "Select * from pistols where pistols_id = '$thing_id' limit 1";
$result_c = mysqli_query($dbc, $query_c) or die ('Ошибка передачи запроса к БД');
$row_cl = mysqli_fetch_array($result_c);
}
if ($type == 3) {
$query_c = "Select * from weapons where weapons_id = '$thing_id' limit 1";
$result_c = mysqli_query($dbc, $query_c) or die ('Ошибка передачи запроса к БД');
$row_cl = mysqli_fetch_array($result_c);
}
if ($type == 4) {
$query_c = "Select * from shlem where shlem_id = '$thing_id' limit 1";
$result_c = mysqli_query($dbc, $query_c) or die ('Ошибка передачи запроса к БД');
$row_cl = mysqli_fetch_array($result_c);
}
if ($type == 6) {
$query_c = "Select * from artefact where artefact_id = '$thing_id' limit 1";
$result_c = mysqli_query($dbc, $query_c) or die ('Ошибка передачи запроса к БД');
$row_cl = mysqli_fetch_array($result_c);
}
if ($row_cl == 0) {
?>
<script type="text/javascript">
document.location.href = "syslov.php?mod=snr";
</script>
<?php
exit();
}
$query = "Select money, habar from users where id = '$user_id'";
$result = mysqli_query($dbc, $query) or die ('Ошибка передачи запроса к БД');
$row = mysqli_fetch_array($result);
$money = $row['money'];
$habar = $row['habar'];
if ($money_type == 1) {
if ($row_cl['price_hab'] < 0) {
$money_type = 2;
}
else {
if($row['vip'] == 0){
$habar = ($habar - $row_cl['price_hab']);}else{
$sumpro = ($row_cl['price_hab']/100);
$sumres = ($sumpro*75);
$habar = ($habar - $sumres);
}
}
}
if ($money_type == 2) {
if ($row_cl['price'] < 0) {
?>
<script type="text/javascript">
document.location.href = "sale_thing.php?thing=<?php echo "$thing_id";?>&type=<?php echo "$type"?>";
</script>
<?php
exit();
}
else {
if($row['vip'] == 0){
$money = ($money - $row_cl['price']);}else{
$sumpro2 = ($row_cl['price']/100);
$sumres2 = ($sumpro2*75);
$money = ($money - $sumres2);
}
}
}
if ($money < 0 or $habar < 0) {
?>
<script type="text/javascript">
document.location.href = "sale_thing.php?thing=<?php echo "$thing_id";?>&type=<?php echo "$type"?>&err=1";
</script>
<?php
exit();
}
$query_up = "update users set money='$money', habar='$habar' where id = '$user_id' limit 1";
$result_up = mysqli_query($dbc, $query_up) or die ('Ошибка передачи запроса к БД');
if ($type == 1) {
$inf_id = $row_cl['clothes_id'];
$stat1 = rand($row_cl['min_stats_hp'],$row_cl['max_stats_hp']);
$stat2 = rand($row_cl['min_stats_bronya'],$row_cl['max_stats_bronya']);
$stat3 = rand($row_cl['min_stats_razriv'],$row_cl['max_stats_razriv']);
$speed = rand($row_cl['min_stats_rad'],$row_cl['max_stats_rad']);
}
if ($type == 2) {
$inf_id = $row_cl['pistols_id'];
$stat1 = rand($row_cl['min_stats_yron'],$row_cl['max_stats_yron']);
$stat2 = rand($row_cl['min_stats_tochn'],$row_cl['max_stats_tochn']);
$stat3 = rand($row_cl['min_stats_safety'],$row_cl['max_stats_safety']);
$speed = $row_cl['speed'];
}
if ($type == 3) {
$inf_id = $row_cl['weapons_id'];
$stat1 = rand($row_cl['min_stats_yron'],$row_cl['max_stats_yron']);
$stat2 = rand($row_cl['min_stats_tochn'],$row_cl['max_stats_tochn']);
$stat3 = rand($row_cl['min_stats_safety'],$row_cl['max_stats_safety']);
$speed = $row_cl['speed'];
}
if ($type == 4) {
$inf_id = $row_cl['shlem_id'];
$stat1 = rand($row_cl['min_stats_hp'],$row_cl['max_stats_hp']);
$stat2 = rand($row_cl['min_stats_bronya'],$row_cl['max_stats_bronya']);
$stat3 = rand($row_cl['min_stats_razriv'],$row_cl['max_stats_razriv']);
$speed = rand($row_cl['min_stats_rad'],$row_cl['max_stats_rad']);
}
if ($type == 6) {
$inf_id = $row_cl['artefact_id'];
$stat1 = rand($row_cl['stats_yron']);
$stat2 = rand($row_cl['stats_tochn']);
$stat3 = rand($row_cl['hp']);
$speed = $row_cl['speed'];
}
$query_c = "Select * from things where user_id = '$user_id' and type = '5' limit 1";
$result_c = mysqli_query($dbc, $query_c) or die ('Ошибка передачи запроса к БД');
$ro = mysqli_fetch_array($result_c);
if($ro>0 && $type==5){
echo '<script type="text/javascript">
document.location.href = "/";
</script>';}else{
$name = $row_cl['name'];
$lvl_need = $row_cl['lvl_need'];
$query = "insert into things (`user_id`, `type`,`inf_id`,`stat1`,`upgrade_stat1`, `stat2`, `upgrade_stat2`, `stat3`, `upgrade_stat3`, `speed`, `upgrade_speed`, `sost`, `privat`, `place`, `need_lvl`) values ('$user_id', '$type', '$inf_id', '$stat1' , '0', '$stat2', '0', '$stat3', '0', '$speed', '0', '8', '0', '0', '$lvl_need')";
$result = mysqli_query($dbc, $query) or die ('Ошибка передачи запроса к БД');
$query = "select thing_id from things where user_id='$user_id' and type = '$type' and inf_id='$inf_id' and stat1='$stat1' and stat2='$stat2' and stat3='$stat3' and speed='$speed'";
$result = mysqli_query($dbc, $query) or die ('Ошибка передачи запроса к БД');
$row = mysqli_fetch_array($result);
$thing_id = $row['thing_id'];
?>
<script type="text/javascript">
document.location.href = "thing.php?thing=<?php echo "$thing_id";?>&err=4";
</script>
<?php
mysqli_close($dbc);
}
?>
</body>
</html>