[PHP] Script, Potrebujeme Upravit

[warring 55]

Zdravim vás všechny na netu jsen narazil na tenhle hezký script a docela se mi jeho funkce libí

( je napojen na db a zobrazi z tabulky vsechny itemy i jejich barvu staty a vsechno )

 

Chtel bych jenom požadat zdali by to nekdo urpavil jako volně implementovatelný Script ktery bych mohl použít na svém Manageru ( na WSS Zustane klidne pro další potřeby třeba pro jine servery ( Na práci nechám klidně Copyright !!! ) )

Pokud možno tak aby to šlo do manageru ( Link na Manager --- http://pleyada.cz/agemolos/manager --- Nebrat jako reklamu )

a aby to necetlo data z WOWHEAD.com ale z Databáze World tabulka item_template

 

 

tak ted jdeme k tomu

 

 

SCRIPT

 

 

<?php

if (!defined('AXE'))

exit;

 

//common include

$box_simple_wide = new Template("styles/".$style."/box_simple_wide.php");

$box_wide = new Template("styles/".$style."/box_wide.php");

$box_wide->setVar("imagepath", 'styles/'.$style.'/images/');

$box_simple_wide->setVar("imagepath", 'styles/'.$style.'/images/');

//end common include

patch_include("sendmail",false);

if (!isset($_SESSION['user']))

{

print "You are not logged in."; $tpl_footer = new Template("styles/".$style."/footer.php");

$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');

print $tpl_footer->toString();

exit;

}

 

//now reduce points

$db->select_db($db_name) or die(mysql_error());

 

//delete shop item, for admins

if (isset($_GET['delid']) && $a_user[$db_translation['gm']]==$db_translation['az'])

{

$points=pun_htmlspecialchars($_GET['points']);

$delid=pun_htmlspecialchars($_GET['delid']);

if (isset($_GET['confirm']))

{

$db->query("DELETE FROM shop WHERE id='".$db->escape($delid)."' LIMIT 1") or die (mysql_error());

box ( "Delete Item","Item deleted!<br><br><a href='./quest_ac.php?name=Vote_Shop'>Go to Shop</a>" );

$tpl_footer = new Template("styles/".$style."/footer.php");

$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');

print $tpl_footer->toString();

exit;

}

else

{

box ( "Delete Item","<center>Are you sure you want delete this item?<br><br><a href='quest_ac.php?name=Vote_Shop&delid=".$delid."&confirm=YES'>YES</a>     <a href='./quest_ac.php?name=Vote_Shop'>NO</a></center>" );

$tpl_footer = new Template("styles/".$style."/footer.php");

$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');

print $tpl_footer->toString();

exit;

}

 

}

//send item to character

if (isset($_POST['action']))

{

//we get char id

if ($_POST['character']=='none')

{

box ('Fail','You don\'t have any characters. Mail can\'t be sent.');

$tpl_footer = new Template("styles/".$style."/footer.php");

$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');

print $tpl_footer->toString();

exit;

}

$pieces = explode("-", $_POST['character']);

$char = $pieces[0]; //char guid

$realm_data123 = $pieces[1]; //realm

 

 

 

if ($_POST['itemsgrup']=='')

{

box ('Fail','No item selected.');

$tpl_footer = new Template("styles/".$style."/footer.php");

$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');

print $tpl_footer->toString();

exit;

}

 

$itemsgrup = $_POST['itemsgrup']; //this is shop ID

$itemsgrup = preg_replace( "/[^0-9]/", "", $_POST['itemsgrup'] ); //only numbers

//now we get all required data for this shop ID

$checkshopid = $db->query("SELECT * FROM shop WHERE id='".$itemsgrup."' AND donateorvote='0' LIMIT 1") or die(mysql_error());

if (mysql_num_rows($checkshopid)=='0')

{box ('EPIC Fail','<font color="red"><blink>Hack attempt!</blink></font><br><strong>WebScript:</strong> What the fuck are you doing?<br><strong>WebScript:</strong> <a href="http://www.webwow.totalh.com"'>http://www.webwow.totalh.com" target="_blank">AXE</a> will punish you becouse you doing this to me!<br><strong>WebScript:</strong> In matter of fact ill report your ass to admins right now!<br><strong>WebScript:</strong> I know who you are <strong>'.$a_user[$db_translation['login']].'</strong> and your IP is '.$_SERVER['REMOTE_ADDR'].'...<br><strong>WebScript:</strong> <i>[Grunting] (That will teach you...)</i><br><br><strong>WebScript:</strong> Tell me one good reason, one! Why i don\'t ban you right now at spot, ha...<br><strong>WebScript:</strong> Wtf did u doing SQL injecting like that? Stupid humans...'); $tpl_footer = new Template("styles/".$style."/footer.php");

$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');

print $tpl_footer->toString();

exit;}

 

$checkshopid2=mysql_fetch_assoc($checkshopid);

$cost = $checkshopid2['cost'];

$itemid = $checkshopid2['itemid'];

$item_stack = $checkshopid2['charges'];

$item_realmdata_all=explode("[|]",$checkshopid2['description']);

$item_realmdata_array=explode("-",$item_realmdata_all[1]);

//check if its available on this realm

if ($item_realmdata_array[($realm_data123-1)]=='')

{

box ('Fail','This item is not available on that realm.');

$tpl_footer = new Template("styles/".$style."/footer.php");

$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');

print $tpl_footer->toString();

exit;

}

 

 

//reduce points

if ($a_user['vp']>=$cost)

{

}

else

{

box ('Fail','You don\'t have enough points to buy that item.<br>You have '.$a_user['vp'].' points and item costs '.$cost.' points.');

$tpl_footer = new Template("styles/".$style."/footer.php");

$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');

print $tpl_footer->toString();

exit;

}

 

//check if realm db is availavable and select db

$i=1;

while ($i<=count($realm))

{

if ($pieces[1]==$i)

{

if ($realm[$i]['db']=='')

{box ('Fail','Realm '.$pieces[1].' does not exist!');$tpl_footer = new Template("styles/".$style."/footer.php");

$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');

print $tpl_footer->toString();

exit;}

$db->select_db($realm[$i]['db']);

}

$i++;

}

 

 

//now we check if this is truly char witch belongs to your account

$checkchar = $db->query("SELECT ".$db_translation['characters_name'].",".$db_translation['characters_guid']." FROM ".$db_translation['characters']." WHERE ".$db_translation['characters_guid']."='".$char."' AND ".$db_translation['characters_acct']."='".$a_user[$db_translation['acct']]."' LIMIT 1") or die(mysql_error());

if (mysql_num_rows($checkchar)=='0')

{box ('EPIC Fail','<font color="red"><blink>Hack attempt!</blink></font><br><strong>WebScript:</strong> What the fuck are you doing?<br><strong>WebScript:</strong> <a href="http://www.webwow.totalh.com" target="_blank">AXE</a> will punish you becouse you doing this to me!<br><strong>WebScript:</strong> In matter of fact ill report your ass to admins right now!<br><strong>WebScript:</strong> I know who you are <strong>'.$db_translation['login'].'</strong> and your IP is '.$_SERVER['REMOTE_ADDR'].'...<br><strong>WebScript:</strong> <i>[Grunting] (That will teach you...)</i><br><br><strong>WebScript:</strong> Tell me one good reason, one! Why i don\'t ban you right now at spot, ha...<br><strong>WebScript:</strong> Wtf did u doing SQL injecting like that? You CAN\'T SEND ITEMS TO CHARACTERS THAT AREN\'T ON YOUR ACCOUNT. Stupid humans...'); $tpl_footer = new Template("styles/".$style."/footer.php");

$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');

print $tpl_footer->toString();

exit;}

 

$charname=$db->fetch_array($checkchar);

//add mail here

$time = date("m-d-Y, h:i");

$refnum=date("jnGis");

$subject = 'WebsiteVoteShopREF'.$refnum.'';//do not remove $refnum

$body = 'Enjoy your new reward! Item costed '.$cost.' points. [Time sent: '.$time.'] [item ID:'.$itemid.']';

 

//refrence-> sendmail($playername,$playerguid, $subject, $text, $item, $shopid, $money=0,$realmid=false) //returns

$sendingmail=sendmail($charname[0],$charname[1], $subject, $body, $itemid,$itemsgrup,'0',$pieces[1]);

 

//SQL

if (substr($sendingmail, 0, 16)=="<!-- success -->")

{

$newpoints=$a_user['vp']-$cost;

$db->select_db($db_name);

$delpoints = $db->query("UPDATE accounts_more SET vp='".$newpoints."' WHERE acc_login='".$a_user[$db_translation['login']]."'") or die(mysql_error());

$sendingmail.="<br>Points are taken.";

}

//end SQL

 

box ('Report',$sendingmail);

$tpl_footer = new Template("styles/".$style."/footer.php");

$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');

print $tpl_footer->toString();

exit;

}

 

 

 

if ($a_user[$db_translation['gm']]==$db_translation['az']) $cont1= '<a href="./quest.php?name=admincp">Admin Panel</a> | '; $cont1.='<a href="./quest.php?name=account">Account Panel</a>';

$box_simple_wide->setVar("content", $cont1);

print $box_simple_wide->toString();

//

//select web database

//

$db->select_db($db_name);

 

//

// Something is bought (post data submitted)

//

 

if ($a_user[$db_translation['gm']]==$db_translation['az'])

{

if ($_POST['additem'])

{

if ($_POST['sep']=='0') //is item

{

if ($_POST['itemid']=='')

{

box ('Fail','Make sure you type in item id.');

$tpl_footer = new Template("styles/".$style."/footer.php");

$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');

print $tpl_footer->toString();

exit;

}

else if ($_POST['name']=='')

{

box ('Fail','Make sure you type in item name.');

$tpl_footer = new Template("styles/".$style."/footer.php");

$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');

print $tpl_footer->toString();

exit;

}

else if ($_POST['description']=='')

{

box ('Fail','Make sure you type in item description.');

$tpl_footer = new Template("styles/".$style."/footer.php");

$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');

print $tpl_footer->toString();

exit;

}

else if ($_POST['points']=='')

{

box ('Fail','Make sure you type in item point cost.');

$tpl_footer = new Template("styles/".$style."/footer.php");

$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');

print $tpl_footer->toString();

exit;

}

else if ($_POST['charges']=='')

{

box ('Fail','Make sure you type in charges.');

$tpl_footer = new Template("styles/".$style."/footer.php");

$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');

print $tpl_footer->toString();

exit;

}

else if ($_POST['cat']=='')

{

box ('Fail','Make sure you type in category number for sorting items.');

$tpl_footer = new Template("styles/".$style."/footer.php");

$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');

print $tpl_footer->toString();

exit;

}

else if ($_POST['sort']=='')

{

box ('Fail','Make sure you type in sort items within same category.');

$tpl_footer = new Template("styles/".$style."/footer.php");

$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');

print $tpl_footer->toString();

exit;

}

else //pass

{

$result=$db->query("INSERT INTO shop (sep,name,itemid,color,cat,sort,cost,charges,donateorvote,description,custom) VALUES ('0','".$db->escape($_POST['name'])."','".$db->escape($_POST['itemid'])."','".$_POST['color']."','".$db->escape($_POST['cat'])."','".$db->escape($_POST['sort'])."','".$db->escape($_POST['points'])."','".$db->escape($_POST['charges'])."','0','".$db->escape($_POST['description'])."[|]".$_POST['realm1']."-".$_POST['realm2']."-".$_POST['realm3']."','".$db->escape($_POST['custom'])."')") or die(mysql_error());

 

box ('Success','Item is added!');

$tpl_footer = new Template("styles/".$style."/footer.php");

$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');

print $tpl_footer->toString();

exit;

}

}

else //is seperator

{

if ($_POST['name']=='')

{

box ('Fail','Make sure you type in item name.');

$tpl_footer = new Template("styles/".$style."/footer.php");

$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');

print $tpl_footer->toString();

exit;

}

else if ($_POST['cat']=='')

{

box ('Fail','Make sure you type in category number for sorting items.');

$tpl_footer = new Template("styles/".$style."/footer.php");

$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');

print $tpl_footer->toString();

exit;

}

else if ($_POST['sort']=='')

{

box ('Fail','Make sure you type in sort items within same category.');

$tpl_footer = new Template("styles/".$style."/footer.php");

$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');

print $tpl_footer->toString();

exit;

}

else //pass

{

$result=$db->query("INSERT INTO shop (sep,name,cat,sort,donateorvote,itemid) VALUES ('1','".$db->escape($_POST['name'])."','".$db->escape($_POST['cat'])."','".$_POST['sort']."','0','0')") or die(mysql_error());

 

box ('Success','Item is added!');

$tpl_footer = new Template("styles/".$style."/footer.php");

$tpl_footer->setVar("imagepath", 'styles/'.$style.'/images/');

print $tpl_footer->toString();

exit;

}

}

}

 

 

}

//

// Display shop:

//

$cont2='

Hello, <strong>'. $a_user[$db_translation['login']].'</strong>!

You have '. $a_user['vp'].' Vote Points.<br /><br />

<form method="post" action=""><table border="0" width="590" align="center" cellpadding="3" cellspacing="0">

<tr style=" background-image:url(./res/images/transp-white.png)">

<td colspan="2">Item Name</td>

<td>Description</td>

<td>Cost</td>

<td>Buy?</td>

</tr>';

 

$query = $db->query("SELECT * FROM shop WHERE donateorvote='0' ORDER BY cat, sort ASC") or die (mysql_error());

while ($items = $db->fetch_assoc($query))

{

//its seperator

if ($items['sep']=='1')

{

$cont2.= "<tr><td colspan='4'>";

if ($a_user[$db_translation['gm']]==$db_translation['az'])

{

$cont2.= '<a href="./quest.php?name=account&points=1&delid='.$items['id'].'">[x]</a> «'.$items['cat'].'-'.$items['sort'].'» ';

}

$cont2.= "<strong><i>".$items['name']."</i></strong></td></tr>";

}

else //its item

{

$cont2.= '<tr = \'url(./res/images/transp-green.png)\';" = \'none\';">';

$cont2.= "<td>";

if ($a_user[$db_translation['gm']]==$db_translation['az'])

{

$cont2.= '<a href="./quest_ac.php?name=Vote_Shop&delid='.$items['id'].'">[x]</a> «'.$items['cat'].'-'.$items['sort'].'» ';

}

if ($items['custom']=='1')

{

//color codes here

$cil = array (

'0'=>'gray',

'1'=>'white',

'2'=>'#25FF16',

'3'=>'#0070AC',

'4'=>'#A335EE',

'5'=>'#FF8000',

);

 

$cont2.= '<span style="color:'.$cil[$items['color']].'" \'<font color='.$cil[$items['color']].'>'.$items['name'].'</font><br><small>This is custom item.</small>\')"

}

else

{

$cont2.= "<a class='q".$items['color']."' href='http://www.wowhead.com/?item=".$items['itemid']."'>[".$items['name']."]</a></td>";

}

 

if ($items['charges']=='0' || $items['charges']=='1')

{

$charges='';

}

else

{

$charges='x'.$items['charges'];

}

$cont2.= "<td>".$charges."</td>";

$real_descr=explode("[|]",$items['description']);

$cont2.= "<td>".$real_descr[0]."</td>";

 

$cont2.= "<td>".$items['cost']."</td>";

$cont2.= '<td><input type="radio" name="itemsgrup" value="'.$items['id'].'" />';

 

$cont2.='</td> </tr>';

}

}

 

 

 

$cont2.='

<tr><td colspan="4"><br />

Select Your Chracter: <select name="character">';

 

//#########################################CHAR START

$i=0;$j=1;

while ($j<=count($realm))

{

 

$db->select_db($realm[$j]['db'])or error('Unable to select realm database. Probabley you misspelled database name');

$result = $db->query("SELECT * FROM ".$db_translation['characters']." WHERE ".$db_translation['characters_acct']."='".$a_user[$db_translation['acct']]."'") or die (mysql_error());

 

while ($char = $db->fetch_assoc($result))

{

$cont2.= "<option value='".$char[$db_translation['characters_guid']]."-".$j."'>".$realm[$j]['name']." - ".$char[$db_translation['characters_name']]." level ".$char[$db_translation['characters_level']]." </option>";

 

$i++;

}

 

 

$j++;

}

 

if ($i=='0')

{

$cont2.= "<option value='none'>You don't have any characters</option>";

}

//go back to default db selection

$db->select_db($db_name);

 

 

$cont2.= "</select> ";

//#########################################CHAR END

$cont2.= '<input name="action" type="submit" value="Purchase!" /></form>

<br />

<br />

Upon purchasing, website might load more than 10 seconds, please be patient and wait for website to load.

</tr></td>

</table>

';

$box_wide->setVar("content_title", "Vote Shop");

$box_wide->setVar("content", $cont2);

print $box_wide->toString();

if ($a_user[$db_translation['gm']]==$db_translation['az'])

{

$cont2= '

 

 

<form action="" method="post">

<table border="0" align="center" cellpadding="3">

<tr>

<td>Item or Seperator:<br /></td>

<td><select name="sep">

<option value="0" selected="selected">Item</option>

<option value="1">Seperator *</option>

 

</select></td>

</tr>

<tr>

<td>Is custom item? </td>

<td><select name="custom">

<option value="0" selected="selected">No</option>

<option value="1">Yes</option>

</select></td>

</tr>

<tr>

<td>Available on: </td>

<td>';

$i=1;

while ($i<=count($realm))

{

$cont2.='<input name="realm'.$i.'" type="checkbox" value="'.$i.'" checked="true" /> '.$realm[$i]['name'];

$i++;

}

 

 

$cont2.='</td>

</tr>

<tr>

<td>Item ID:</td>

<td><input name="itemid" type="text" /> <a href=\'#\' false\'><strong>[search for item ID]</strong></a></td>

</tr>

<tr>

<td>Item name:</td>

<td><input name="name" type="text" /> *</td>

</tr>

<tr>

<td>Item color:</td>

<td><select name="color">

<option value="0">Poor (gray)</option>

<option value="1" selected="selected">Common (white)</option>

<option value="2">Uncommon (green)</option>

<option value="3">Rare (blue)</option>

<option value="4">Epic (purple)</option>

<option value="5">Legendary (orange)</option>

</select></td>

</tr>

<tr>

<td>Description:</td>

<td><input name="description" type="text" /></td>

</tr>

<tr>

<td>Cost Points:</td>

<td><input name="points" type="text" value="1" /></td>

</tr>

<tr>

<td>Item Stack:</td>

<td><input name="charges" type="text" value="1" /><br />Default 1 for one item.</td>

</tr>

<tr>

<td>Cat Sort:</td>

<td><input name="cat" type="text" value="0" />

* «<strong>X</strong>-x»</td>

</tr>

<tr>

<td>Sort within Cat:</td>

<td><input name="sort" type="text" value="0" />

* «x-<strong>X</strong>»</td>

</tr>

</table>

<center><br />

If you select "Seperator" then only fields with "*" are required<br /><br />

<input name="additem" type="submit" value="Add Item" />

</center>

 

</form>

';

$box_wide->setVar("content_title", "Admin tools - Add new item");

$box_wide->setVar("content", $cont2);

print $box_wide->toString();

} //end admin

 

 

 

SQL SOUBOR

 

 

-- ----------------------------

-- Table structure for `shop`

-- ----------------------------

DROP TABLE IF EXISTS `shop`;

CREATE TABLE `shop` (

`id` int(11) NOT NULL AUTO_INCREMENT,

`sep` varchar(3) COLLATE latin1_general_ci NOT NULL DEFAULT '0',

`name` text COLLATE latin1_general_ci NOT NULL,

`itemid` varchar(20) COLLATE latin1_general_ci DEFAULT NULL,

`color` tinytext COLLATE latin1_general_ci NOT NULL,

`cat` varchar(20) COLLATE latin1_general_ci NOT NULL DEFAULT '0',

`sort` varchar(10) COLLATE latin1_general_ci NOT NULL DEFAULT '0',

`cost` varchar(11) COLLATE latin1_general_ci NOT NULL DEFAULT '0',

`charges` varchar(11) COLLATE latin1_general_ci NOT NULL DEFAULT '0',

`donateorvote` int(5) NOT NULL DEFAULT '0' COMMENT '0 is vote 1 is donation item',

`description` varchar(255) COLLATE latin1_general_ci DEFAULT 'No Description',

`custom` varchar(3) COLLATE latin1_general_ci NOT NULL DEFAULT '0',

PRIMARY KEY (`id`)

) ENGINE=MyISAM AUTO_INCREMENT=41 DEFAULT CHARSET=latin1 COLLATE=latin1_general_ci;

 

-- ----------------------------

-- Records of shop

-- ----------------------------

INSERT INTO `shop` VALUES ('40', '0', 'Robes of Arugal', '6324', '3', 'armor', '1', '1', '1', '0', 'Nice looking robes for 20ish levels.', '0');

 

 

Edited February 20, 2011 by warring