Файл: pages/combat/pits.php
Строк: 49
<?php
// Physical module map v50.6: public URL stays clean while code lives in /pages.
if (!defined('GAME_ROOT')) define('GAME_ROOT', dirname(__DIR__, 2));
chdir(GAME_ROOT);
if (PHP_SAPI !== 'cli') { $_SERVER['PHP_SELF']='/pits.php'; $_SERVER['SCRIPT_NAME']='/pits.php'; }
/* Обновление игры под PHP 8.4 / PDO и усиление безопасности: by Метриум (Стэлп) */
include './system/common.php';
include './system/functions.php';
include './system/user.php';
if(!$user) {
header('location: /');
exit;
}
/* by Метриум (Стэлп) */
if(isset($_GET['kup'])){
$pit = new DBResult(array_filter([db_fetch_one('SELECT * FROM `pits` WHERE `id`=:id LIMIT 1',['id'=>(int)($_GET['kup']??0)])]));
$pit = db_fetch_array($pit);
$pit_user = db_query('SELECT * FROM `pit_user` WHERE `id_user` = "'.$user['id'].'"');
$pit_user = db_fetch_array($pit_user);
if($pit_user){
header("Location: /pits/");
exit();
}
if(!$pit){
header("location: /pits/");
exit();
}elseif($user['g'] < $pit['cena']){
header("Location: /pits/");
exit();
}else{
db_query("INSERT INTO `pit_user` SET
`id_user` = '$user[id]',
`id_pit` = '$pit[id]',
`str` = '$pit[str]',
`vit` = '$pit[vit]',
`agi` = '$pit[agi]',
`def` = '$pit[def]'");
db_query("UPDATE `users` SET
`g` = `g` - '".$pit['cena']."',
`str` = `str` + '$pit[str]',
`vit` = `vit` + '$pit[vit]',
`agi` = `agi` + '$pit[agi]',
`def` = `def` + '$pit[def]'
WHERE `id` = '".$user['id']."'");
header("Location: /user/");
exit();
}
}
$title = 'Магазин питомцев';
include './system/h.php';
$q = db_query('SELECT * FROM `pits` ORDER BY `id` ASC');
while($post = db_fetch_array($q)) {
echo "<div class='block_zero'>";
echo "<div class='float-left'><img src='/images/pits/$post[image].png' style='margin-right:3px;margin-top:-2px;'></div>";
echo "<b>$post[name]</b><br><img src='/images/icon/str.png'> $post[str] <img src='/images/icon/vit.png'> $post[vit] <img src='/images/icon/agi.png'> $post[agi] <img src='/images/icon/def.png'> $post[def]";
echo "<div style='clear:both'></div>";
echo "<div class='center'><a href='?kup=$post[id]' class='btn'><span class='end'><span class='label'>Купить за <img src='/images/icon/gold.png'> $post[cena]</span</span></a></div>";
echo "</div>";
echo "<div class='mini-line'></div>";
echo "<ul class='hint'>";
echo "<li>Питомец сделает вас значительно сильнее...</li>";
echo "</ul>";
}
include './system/f.php';
?>