Файл: wenr.online/app/clan/inv.php
Строк: 92
<?php
if (!$user->isAuth()) {
redirect('/');
exit;
}
$clan = $db->prepare('select id,name,user,gold from clan where id = ?');
$clan -> execute([$user->get()->clan]);
$clan = $clan -> fetch(PDO :: FETCH_OBJ);
if(isset($_GET['yes']) and isset($_GET['id'])){
if($clan->user != $user->get()->user_id and $clan->zam != $user->get()->user_id){
redirect('/clan');
exit;
}
$inv = $db->prepare('select clan,user,id from clan_invite where id = ?');
$inv -> execute([Clean :: int($_GET['id'])]);
$inv = $inv -> fetch(PDO :: FETCH_OBJ);
if(!isset($inv->id) or $inv->clan != $clan->id){
redirect('/clan/inv');
exit;
}
$up = $db->prepare('update users set clan = ? where user_id = ?');
$up -> execute([$clan->id,$inv->user]);
notifSend($inv->user,'Глава клана «'.$clan->name.'» принял вас.');
$del = $db->prepare('delete from clan_invite where id = ?');
$del -> execute([$inv->id]);
redirect('/clan/inv');
exit;
}
if(isset($_GET['no']) and isset($_GET['id'])){
if($clan->user != $user->get()->user_id and $clan->zam != $user->get()->user_id){
redirect('/clan');
exit;
}
$inv = $db->prepare('select clan,user,id from clan_invite where id = ?');
$inv -> execute([Clean :: int($_GET['id'])]);
$inv = $inv -> fetch(PDO :: FETCH_OBJ);
if(!isset($inv->id) or $inv->clan != $clan->id){
redirect('/clan/inv');
exit;
}
notifSend($inv->user,'Глава клана «'.$clan->name.'» не принял вас.');
$del = $db->prepare('delete from clan_invite where id = ?');
$del -> execute([$inv->id]);
redirect('/clan/inv');
exit;
}
$all = $db->prepare('select * from clan_invite where clan = ? order by id');
$all -> execute([$clan->id]);
$all = $all->fetchAll();
$peger = new ArrayPaginator('/clan/inv', 10);
$items = $peger->getItems($all);
$invite = $db->prepare('select user_id from users where clan = ?');
$invite -> execute([$clan->id]);
echo $template->render('clan.inv', ['clan'=>$clan,'items'=>$items, 'peger'=>$peger,'invite'=>$invite->rowCount()]);