Файл: msmenu/msprofile.php
Строк: 132
<?php
if(isset($_GET['profile']) && my_esc($_GET['profile'])!=NULL && mysql_result(mysql_query("SELECT COUNT(*) FROM `ms_user` WHERE `login` = '".my_esc($_GET['profile'])."'"),0)!=0)
{
$msusers = mysql_fetch_array(mysql_query("SELECT * FROM `ms_user` WHERE `login` = '".my_esc($_GET['profile'])."' LIMIT 1"));
echo '<div class="content">
<img src="/img/pattern-left.png" alt="" />
<span>'.msuser($msusers['id']).' '.$msusers['level'].' ур</span>
<img src="/img/pattern-right.png" alt="" />
</div>
<div class="content">';
if($msusers['id'] == $user['id']){
echo '<img width="200" height="264" src="../Link:UserHero;" alt="" />';
}else{
echo '<img width="200" height="264" src="../Link:UserHero::'.my_esc($msusers['login']).';" alt="" />';
}
echo '<div>';
echo '</div>
<div style="margin-top:4px;">
<img src="/img/sword48.png" width="24" height="24" alt="Нападение"/> <span>'.$msusers['attack'].' </span>
<img src="img/potion.png" alt="" width="24" height="24"> <span>'.$msusers['life'].' / '.$msusers['lifes'].'</span>
<br />
<img src="/img/regen48.png" width="24" height="24" alt="Регенерация"/> <span>'.$msusers['regeneration'].'</span>
<img src="/img/shield48.png" width="24" height="24" alt="Защита"/> <span>'.$msusers['protection'].'</span>
<img src="/img/aura_attack.png" alt="" width="24" height="24"> <span>'.$msusers['msrage'].'%</span>
</div>
</div>';
echo '<div class="content">';
echo '<img src="/img/tournament.png" alt="" width="24" height="24"> Арена <br />
<span class="fl">Победы:</span> <span class="fr">'.$msusers['arena_victory'].'</span><div class="cb"></div>
<span class="fl">Поражения:</span> <span class="fr">'.$msusers['arena_defeat'].'</span>';
echo '<div class="cb"></div></div>';
if($user['admin'] == 1 || $user['admin'] == 2){
echo '<div class="content"><span class="nobr">
<img src="/img/pattern-left.png" alt="" />
<span class="btni">'.rating($msusers['rating']).'</span>
<img src="/img/pattern-right.png" alt="" /></span>
</span>
</div>';
}
echo '<div class="content">';
if($msusers['sex'] == 'm') $ms_time_left = 'л'; else $ms_time_left = 'ла';
echo 'В игре прове'.$ms_time_left.': '.time_lefts($msusers['ms_time']).'';
echo '</div>';
if($user['id'] != $msusers['id'])echo '<a class="btnl" href="../UserMail;'.$msusers['login'].'"><img src="/img/mail_white.png" width="24" height="24" alt="" /> Написать сообщение</a>';
if($user['id'] != $msusers['id']){
echo '<a class="btnl" href="../Link:ILinkListener-MsHero-User:'.my_esc($_GET['profile']).';"><img src="/img/armor48.png" width="24" height="24" alt=""/> Снаряжение</a>';
}else{
echo '<a class="btnl" href="../mshero"><img src="/img/armor48.png" width="24" height="24" alt=""/> Снаряжение</a>';
}
if(mysql_result(mysql_query("SELECT COUNT(*) FROM `ms_clan_user` WHERE `user` = '".$msusers['id']."' LIMIT 1"),0)!=0){
}else{
if(mysql_result(mysql_query("SELECT COUNT(*) FROM `ms_clan_user` WHERE `user` = '".$user['id']."' LIMIT 1"),0)!=0){
if($msusers['level'] > 19 || $msusers['id'] != $user['id'])echo '<a class="btnl" href="../Link:ILinkListener-Invitations:'.$msusers['login'].';"><img src="/img/clan.png" width="24" height="24" alt="" /> Пригласить в братство</a>';
}
}
if(mysql_result(mysql_query("SELECT COUNT(*) FROM `ms_clan_user` WHERE `user` = '".$msusers['id']."' LIMIT 1"),0)!=0){
$msuser_clan = mysql_fetch_array(mysql_query("SELECT * FROM `ms_clan_user` WHERE `user` = '".$msusers['id']."' LIMIT 1"));
$ms_clan = mysql_fetch_array(mysql_query("SELECT * FROM `ms_clan` WHERE `clan_id` = '".$msuser_clan['clan']."' LIMIT 1"));
if($msuser_clan['title'] == 1)$mstitle = 'новобранец';
if($msuser_clan['title'] == 2){
if($msusers['sex'] == 'm')$mstitle = 'Брат'; else $mstitle = 'Сестра';
}
if($msuser_clan['title'] == 3)$mstitle = 'адепт';
if($msuser_clan['title'] == 4)$mstitle = 'страж';
if($msuser_clan['title'] == 5)$mstitle = 'магистр';
if($msuser_clan['title'] == 6)$mstitle = 'глава братства';
echo '<a class="btnl" href="../Link:ILinkListener-MsInfoClan;Info:'.$msuser_clan['clan'].';">
<img src="/img/clan.png" width="24" height="24" alt=""/>
Братство <span class="item-n">'.$ms_clan['name'].'</span><br/>
<span> <span class="minor thint" style="padding-left: 24px;">'.$mstitle.'</span></span>
</a>';
}
}else{
header("Location: ../Link:Error;");
exit;
}
?>