SMOKEY_TEK

Okay, I understand how that works now. Thanks sniko

Thanks for the link Djkanna, I'm just confused on the a href links as it shows "<a href="javascript:void(0);" target="_blank">".. How does it know which to follow? What I mean is if a player doesn't have an account and they click on "Open an account" how does it know that is what the users is clicking on if it says "javascript:void(0);" ?

Would it be possible to add the file again? When it was transferred to the new MWG site it screwed up the script.. Thanks!

For those that messaged me, I appreciate it but I will no longer need any assistance with this as I will be investing in a new script that is totally secured and whatnot..

Yea I know, I previously changed my scripts so I haven't rechanged it back to the original GRPG way..

I know for a fact skooda did not code this game engine as I bought the same engine from a friend which was a friend from the owner of the script that is being sold here..

My game is currently using the GRPG script, but I'm having trouble securing it lol.. So if you could fix it I would totally pay you for the work you have done.. Send me a PM if your interested.. Link to my game: http://www.hitmanmassacre.com

Anybody know how "Gang Ranks" could be done? Let's say, You created a gang, it would insert that new gang in the database and you have the rank "Leader" and if another player joined your gang they would have a rank "Member". Leader and Member rank would automatically be in every gangs ranks. But the leader could create/edit gang ranks for that gang, which would have checkboxes next to things that rank can manage in the gang i.e: Vault, Members, Ranks, Invitations, Crimes, Gang Page, Gang Profile, Applications, Gang Name/Tag, and Mass Mail. And could update any member of the gang to that new rank.. I've tried to do this, but I can't get it to work...

What would it be called to have pages load like the following http://www.yourgamename.com/index.php?do=city ? Here is a little code to what I'm meaning   <?php $page = $_REQUEST['do']; file_exists($page.".php") ? include($page.".php") : include("homepage.php");?>

Cronic, Replace your register.php with the code below:   <?php include (DIRNAME(__FILE) . '/notloggedinh.php'); function getRealIp() { if (!empty($_SERVER['HTTP_CLIENT_IP'])) { //check ip from share internet $ip=$_SERVER['HTTP_CLIENT_IP']; } elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) { //to check ip is pass from proxy $ip=$_SERVER['HTTP_X_FORWARDED_FOR']; } else { $ip=$_SERVER['REMOTE_ADDR']; } return $ip; } $ip = getRealIp(); function clean($str) { $str = @trim($str); if(get_magic_quotes_gpc()) { $str = stripslashes($str); } return mysql_real_escape_string($str); } if (isset($_POST['registerSubmit'])) { $login_name = clean($_POST['loginName']); $registerPassword = clean($_POST['registerPassword']); $confirmPassword = clean($_POST['confirmPassword']); $PASSWORD = hash("sha512", $_POST["registerPassword"]); $registerEmail = clean($_POST['registerEmail']); $confirmEmail = clean($_POST['confirmEmail']); $activateCode = clean(rand(11111111,99999999)); $registerToS = $_POST['registerToS']; $registerGender = clean($_POST['registerGender']); $date = time(); @session_start(); if ($_SESSION['AntiSpamImage'] != $_REQUEST['anti_spam_code']) { $_SESSION['AntiSpamImage'] = rand(1,9999999); $message .= "<div>The verification code you entered is invalid.</div>"; } $checkuser = mysql_query("SELECT * FROM `grpusers` WHERE `loginame`='$login_name'"); $username_exist = mysql_num_rows($checkuser); if($username_exist > 0) { $message .= "<div>The Login Name you entered is already in use.</div>"; } $checkemail = mysql_query("SELECT * FROM `grpgusers` WHERE `email` ='$registerEmail'"); $email_exist = mysql_num_rows($checkemail); if($email_exist > 0) { $message .= "<div>The Email you entered is already in use.</div>"; } if(strlen($login_name) < 3 or strlen($login_name) > 16) { $message .= "<div>Your Login Name must be between 3-16 characters.</div>"; } if(strlen($registerPassword) < 5 or strlen($registerPassword) > 16) { $message .= "<div>Your Password must be between 5-16 characters.</div>"; } if($registerPassword != $confirmPassword) { $message .= "<div>Your passwords don't match. </div>"; } if($registerToS != checked) { $message .= "<div>You need to agree with the Terms of Service.</div>"; } if (!eregi("^[_a-z0-9-]+(\.[_a-z0-9-]+)*@[a-z0-9-]+(\.[a-z0-9-]+)*(\.[a-z]{2,3})$", $registerEmail)) { $message .= "<div>The e-mail address you entered was invalid.</div>"; } if($registerEmail != $confirmEmail) { $message .= "<div>Your emails don't match.</div>"; } //insert the values if (!isset($message)){ // now we insert it into the database $insert = mysql_query("INSERT INTO `users` (`loginame`, `username`, `password`, `email`, `ip`, `signuptime`, `lastactive`, `gender`, `verified`, `activateCode`)". "VALUES ('$login_name', '$login_name', '$PASSWORD', '$registerEmail', '$ip', '$date', '$date', '$registerGender', '0', '$activateCode')") or die(mysql_error()); $add_member = mysql_query($insert); $emailSubject = "Mafia Heros: Account Registration Confirmation"; $headers = "From: Mafia Heros"; $headers = "MIME-Version: 1.0"; $headers = "Content-Type: text/html; charset=ISO-8859-1"; $emailBody = " <html><body> <h2>Welcome to Mafia Heros</h2> <p> This email has been sent from http://www.mafiaheros.com. You have received this email because your address was used to register on Mafia Heros. </p> <p> If you did not register, please disregard this email. You do not need to unsubscribe or take any further action. </p> <h3>Activation Instructions</h3> <p> We require that you validate your registration to ensure that the email address you entered was correct. This protects against unwanted spam and malicious abuse. </p> <p> You registered with the login name '".$login_name."' your password: '".$registerPassword."''. To activate your account, simply click on the following link: <a href='http://www.mafiaheros.com/activate.php?activateCode=$activateCode&user=$login_name' target='_blank' onclick='onClickUnsafeLink(event);'>http://www.mafiaheros.com/activate.php?activateCode=$activateCode&user=$login_name</a> </p> <p> For questions or concerns about your account, please contact us via contact form <a href='http://www.mafiaheros.com/contactus.php' target='_blank' onclick='onClickUnsafeLink(event);'>http://www.mafiaheros.com/contactus.php</a> </p> </body></html>"; mail($registerEmail, $emailSubject, $emailBody, $headers); echo Message("You successfully created an account. We sent an activation link to the listed email '<b>".$registerEmail."</b>'."); if ($_POST['referer'] != ""){ $result12 = mysql_query("SELECT * FROM `grpgusers` WHERE `loginame`='".$login_name."'"); $worked12 = mysql_fetch_array($result12); $result= mysql_query("INSERT INTO `referrals` (`when`, `referrer`, `referred`)". "VALUES ('$date', '".$_POST['referer']."', '".$worked12['id']."')"); } die(); } } ?> <? if (isset($message)) { echo Message($message); } ?> <div id="right_c"> <div class="g_content"> <h3> Register</h3> <div class="g_text"> <center>You will need to register with an valid e-mail address, After signing up you have to activate your account.</center> <form name='register' method='post' action='register.php'> <table width='60%' border='0' align='center' cellpadding='0' cellspacing='2'> <tr> <td><b>Username:</b></td> <td><input type='text' name='login_name' size='30'></td> </tr> <tr> <td><b>Email:</b></td> <td><input type='text' name='registerEmail' size='30'></td> </tr> <tr> <td><b>Confirm Email:</b></td> <td><input type='text' name='confirmEmail' size='30'></td> </tr> <tr> <td><b>Password:</b></td> <td><input type='password' name='registerPassword'></td> </tr> <tr> <td><b>Confirm Password:</b></td> <td><input type='password' name='confirmPassword'></td> </tr> <tr> <td><b>Gender:</b></td> <td><select name="registerGender"> <option value="Male">Male</option> <option value="Female">Female</option> </select></td> </tr> <tr> <td><b>ToS:</b></td> <td>I have read and agree to follow the ToS <input type="checkbox" name='tos' value="checked" /></td> </tr> <tr> <td><b>Image Verification:</b></td> <td><img src="antispam.php" /></td> </tr> <tr> <td><b>Verify Code Above:</b></td> <td><input type='text' name='anti_spam_code'></td> </tr> <tr> <td> </td> <td> <input type='hidden' name='referer' value='<? echo $_GET['referer'] ?>'> <input type='submit' name='registerSubmit' value='Register'> </td> </tr> </table> </form> </div> </div> </div> <? include (DIRNAME(__FILE__) . '/notloggedinf.php'); ?>   Make a file called activate.php and insert the code below into it and save. <?php include (DIRNAME(__FILE) . '/global.php'); $activateCode = $_GET["activateCode"]; $user = $_GET["user"]; if(!$activateCode){ echo " <div class='content'> <h3>Activate Account</h3> <p>No activation code supplied.</p> </div>"; die(); } else { $check = mysql_query("SELECT * FROM `users` WHERE `activateCode` = '$activateCode' AND `username` = '$user' AND `verified` = '1'"); if($check == 1) { echo " <div class='content'> <h3>Activate Account</h3> <p>You have already activated your account.</p> </div>"; die(); } else { $activate = mysql_query("UPDATE `users` SET `verified` = '1' WHERE `activateCode` = '$activateCode' AND `user` = '$user'"); echo " <div class='content'> <h3>Activate Account</h3> <p>Your account has been successfully activated. You may login now. </p> </div>"; die(); } } ?>   Add these to your grpgusers database: verified int(1) NOT NULL default '0' activateCode VARCHAR(200) NOT NULL;

Thanks I'll give it a try in a little bit, and let you know ... Thanks again!

Does anyone know how I could change the way the experience is set up in the GRPG script? What I mean is, as of right now when your like level 45 you have 12 million exp, and it doesn't seem right to me.. I would like it to be lower way lower than it is now. Here's the experience and level code:   function experience($L) { $a=0; $end=0; for($x=1; $x<$L; $x++) { $a += floor($x+1500*pow(4, ($x/7))); } return floor($a/4); } function Get_The_Level($exp) { $a=0; $end =0; for($x=1; ($end==0 && $x<100); $x++) { $a += floor($x+1500*pow(4, ($x/7))); if ($exp >= floor($a/4)){ } else { return $x; $end=1; } } } function Get_Max_Exp($L){ $end=0; if ($exp == 0){ return 457; $end =1; } for($L=1;($L<100 && $end==0);$L++) { $exp = experience($L); //echo $exp; if ($exp >= $user_class->exp){ return $exp; $end=1; } } }   Thanks, James

What can't you get it to work?

This is the file that reads the messages.. It's called mailbox_read.php   <?php include (DIRNAME(__FILE__) . '/header.php'); include (DIRNAME(__FILE__) . '/parser.php'); $_GET['sent'] = abs(intval($_GET['sent'])); if($_GET['sent']){ echo " <div class='content'> <h3>Mailbox</h3> <table width='100%'>"; $result = mysql_query("SELECT * from `mailbox` WHERE `id`='".$_GET['sent']."'"); $row = mysql_fetch_array($result); $from_user_class = new User($row['mailFrom']); $mailBody = $row['mailBody']; $subject = ($row['mailSubject'] == "") ? "No Subject" : $row['mailSubject']; if ($_GET['sent'] != ""){ echo " <table width='100%'> <tr> <td width='25%'><h4>Sender</h4></td> <td>".$from_user_class->formattedname."</td> </tr> <tr> <td width='25%'><h4>Received</h4></td> <td>".date(F." ".d.", ".Y." ".g.":".i.":".sa,$row['mailTime'])."</td> </tr> <tr> <td width='25%'><h4>Subject</h4></td> <td>".$subject."</td> </tr> <tr> <td colspan='2'><h4>Message</h4></td> </tr> <tr> <td colspan='2'><p>"; ?> <?php $formatted_text=bb_code(bbcode($mailBody)); echo $formatted_text; echo "</p></td></td> </tr> <tr> <td colspan='2'><h4>Actions</h4></td> </tr> <tr> <td colspan='2'> <table width='100%'> <tr> <td width='25%' align='center'><a href='mailbox.php?mail=new&mailTo=".$from_user_class->id."&reply=".$row['id']."'>Reply</a></td> <td width='25%' align='center'><a href='mailbox_read.php?id=".$row['id']."&save=1'>Save</a></td> <td width='25%' align='center'><a href='mailbox_read.php?id=".$row['id']."&del=true'>Delete</a></td> <td width='25%' align='center'><a href='mailbox_read.php?id=".$row['id']."&report=yes'>Report</a></td> </tr> <tr> <td width='25%' align='center'><a href='contacts_add.php?id=".$from_user_class->id."'>Add Contact</a></td> <td width='25%' align='center'><a href='ignores_add.php?id=".$from_user_class->id."'>Ignore</a></td> <td width='25%' align='center'> </td> <td width='25%' align='center'> </td> </tr> </table> </td> </tr> </table> <p><a href='mailbox.php?mail=inbox'>Back</a></p> </div>"; die(); } } ?> <div class='content'> <h3>Mailbox</h3> <table width='100%'> <?php $_GET['id'] = abs(intval($_GET['id'])); $result = mysql_query("SELECT * from `mailbox` WHERE `id`='".$_GET['id']."'"); $row = mysql_fetch_array($result); $from_user_class = new User($row['mailFrom']); $mailBody = $row['mailBody']; $subject = ($row['mailSubject'] == "") ? "No Subject" : $row['mailSubject']; if ($_GET['id'] != ""){ if (strtoupper($row['mailTo']) == strtoupper($user_class->id)) { echo " <table width='100%'> <tr> <td width='25%'><h4>Sender</h4></td> <td>".$from_user_class->formattedname."</td> </tr> <tr> <td width='25%'><h4>Received</h4></td> <td>".date(F." ".d.", ".Y." ".g.":".i.":".sa,$row['mailTime'])."</td> </tr> <tr> <td width='25%'><h4>Subject</h4></td> <td>".$subject."</td> </tr> <tr> <td colspan='2'><h4>Message</h4></td> </tr> <tr> <td colspan='2'><p>"; ?> <?php $formatted_text=bb_code(bbcode($mailBody)); echo $formatted_text; echo "</p></td></td> </tr> <tr> <td colspan='2'><h4>Actions</h4></td> </tr> <tr> <td colspan='2'> <table width='100%'> <tr> <td width='25%' align='center'><a href='mailbox.php?mail=new&mailTo=".$from_user_class->id."&reply=".$row['id']."'>Reply</a></td> <td width='25%' align='center'><a href='mailbox_read.php?id=".$row['id']."&save=1'>Save</a></td> <td width='25%' align='center'><a href='mailbox_read.php?id=".$row['id']."&del=true'>Delete</a></td> <td width='25%' align='center'><a href='mailbox_read.php?id=".$row['id']."&report=yes'>Report</a></td> </tr> <tr> <td width='25%' align='center'><a href='contacts_add.php?id=".$from_user_class->id."'>Add Contact</a></td> <td width='25%' align='center'><a href='ignores_add.php?id=".$from_user_class->id."'>Ignore</a></td> <td width='25%' align='center'> </td> <td width='25%' align='center'> </td> </tr> </table> </td> </tr> </table> <p><a href='mailbox.php?mail=inbox'>Back</a></p>"; $result2 = mysql_query("UPDATE `mailbox` SET `mailRead` = '1' WHERE `id`='".$row['id']."'"); } } ?> </div>

Okay, I tried both of these suggestions but I am still getting that annoying "rn" when I look at a message... I tried putting it in the actual mailbox.php file and my mailbox_read.php file.. Could it be something with my BBcode Parser?

My mailbox works just fine, it's just that I have no idea on how to get rid of the "rn" for a new line, I can insert a new line when typing out the message in the message text area, but when I send a message and look at the message it inserts the "rn" instead of the actual new line.. Can anyone help me to fix this, I've tried using $mailBody = stripslashes(str_replace("\rn", "[br\]", $_POST['mailBody']));   <?php include (DIRNAME(__FILE__) . '/header.php'); if ($user_class->mailban == 1){ echo ' <div class="content"> <h3>Mailbox</h3> <b style="font-size:18px"><center>You have been mail banned for <span style="color:#FF0000;">'; ?> <? echo $user_class->days; ?> </span> days.</b><br><br> <b>Reason:</b><br> <? echo $user_class->mb_reason; ?></center></div></div> <? die(); } echo " <div class='content'> <h3>Mailbox</h3> <table width='100%'> <tr> <td width='25%' align='center'><a href='mailbox.php?mail=new'>New Message</a></td> <td width='25%' align='center'><a href='mailbox.php?mail=inbox'>Inbox</a></td> <td width='25%' align='center'><a href='mailbox.php?mail=saved'>Saved Mail</a></td> <td width='25%' align='center'><a href='mailbox.php?mail=sent'>Sent Mail</a></td> </tr> </table>"; $_GET['mail'] = isset($_GET['mail']) && ctype_alpha($_GET['mail']) ? trim($_GET['mail']) : 'mail_inbox'; switch($_GET['mail']) { case 'inbox' : mail_inbox(); break; case 'new' : mail_new(); break; case 'send' : send_mail(); break; case 'saved' : mail_saved(); break; case 'sent' : mail_sent(); break; default: mail_inbox(); break; } $delete = $_REQUEST['delete']; $checkbox = $_REQUEST['checkbox']; $count = count($_REQUEST['checkbox']); if($delete){ for($i=0;$i<$count;$i++){ $del_id = $checkbox[$i]; $sql = "DELETE FROM `mailbox` WHERE id='$del_id'"; $result = mysql_query($sql); } // if successful redirect to delete_multiple.php if($result){ echo "<meta http-equiv=\"refresh\" content=\"0;URL=mailbox.php\">"; } } function mail_inbox() { if($_POST['mailRead']){ $sql = "DELETE FROM `mailbox` WHERE `mailRead` = '1'"; $result = mysql_query($sql); } if($result){ echo "<meta http-equiv=\"refresh\" content=\"0;URL=mailbox.php\">"; } ?> <h3>Inbox</h3> <form method='post' onSubmit='return confirmAction("Are you sure you want to delete read/selected mail?");'> <table width='100%'> <tr> <td colspan='2'><h4>Subject</h4></td> <td><h4>Sender</h4></td> <td><h4>Received</h4></td> <td align='center'><h4> <input type='checkbox' name='delete' onClick='allCheckUncheck(this);'> </h4></td> </tr> <?php $userid = $_SESSION['id']; $result = mysql_query("SELECT * FROM `mailbox` ORDER BY `mailTime` DESC LIMIT 25"); while($row = mysql_fetch_array($result)){ $newmails = mysql_num_rows($result); if (strtoupper($row['mailTo']) == strtoupper($userid)) { $from_user_class = new User($row['mailFrom']); $subject = ($row['mailSubject'] == "") ? "No Subject" : $row['mailSubject']; if ($row['mailRead'] == "0"){ $mailUnread = "<a href='mailbox_read.php?id=".$row['id']."' class='mailUnread' title='Unread'></a>"; $mail = "<a href='mailbox_read.php?id=".$row['id']."'><b>$subject</b></a>"; } else { $mailUnread = "<a href='mailbox_read.php?id=".$row['id']."' class='mailRead' title='Read'></a>"; $mail = "<a href='mailbox_read.php?id=".$row['id']."'>$subject</a>"; } echo " <tr> <td align='center'>".$mailUnread."</td> <td>".$mail."</td> <td>".$from_user_class->formattedname."</td> <td>".date(d." ".M." ".y.", ".g.":".i." ".a,$row['mailTime'])."</td> <td align='center'><input type='checkbox' name='checkbox[]' id='checkbox[]' value='".$row['id']."'></td> </tr>"; } } echo " <tr> <td colspan='5' align='right'> <input type='submit' name='mailRead' value='Delete All Read'> <input type='submit' name='delete' id='delete' value='Delete Selected'> </td> </tr> </form>"; if($newmails < 1){ echo " <tr> <td colspan='2'><i>There are no new mail.</i></td> </tr>"; } echo " <tr> <td width='3%'></td> <td width='30%'></td> <td width='30%'></td> <td width='22%'></td> <td width='5%'></td> </tr> </table> </div>"; } function mail_new() { if ($_GET['reply'] != ""){ $result2 = mysql_query("SELECT * from `mailbox` WHERE `id`='".$_GET['reply']."'"); $worked2 = mysql_fetch_array($result2); $from_user_class = new User($worked2['mailFrom']); } ?> <h3>New Message</h3> <table width='100%'> <form action='mailbox.php?mail=send' method='post'> <tr> <td width='25%'><h4>Send To</h4></td> <td><input type='text' name='mailTo' size='15' maxlength='10' value='<?php echo $_GET['mailTo']; ?>'> <select name='mailContactList' onChange='mailTo.value = this.value'> <option value='' style='font-weight: bold;'> --- [Contacts] --- </option> <?php $userid = $_SESSION['id']; $result = mysql_query("SELECT * FROM `contacts` WHERE `userID` = '".$userid."'"); while ($row = mysql_fetch_array($result)){ $contactList = new User($row['contactID']); echo '<option value="'.$row['contactID'].'">'.$contactList->username.'</option>'; } ?> </select></td> </tr> <tr> <td><h4>Subject</h4></td> <td><input type='text' name='mailSubject' size='70' value='<? echo ($_GET['reply'] != "") ? "Re: ".$worked2['mailSubject'] : ""; ?>'></td> </tr> <tr> <td colspan='2'><h4>Message</h4></td> </tr> <tr> <td colspan='2' align='center'><textarea name='mailBody' cols='70' rows='10'></textarea></td> </tr> <tr> <td colspan='2' align='center'><input type='submit' value='Send' /></td> </tr> </form> </table> </div> <?php } function send_mail() { $userid = $_SESSION['id']; $mailTime = time(); $mailFrom = $userid; $mailTo = abs(intval($_POST['mailTo'])); $mailSubject = stripslashes($_POST['mailSubject']); $mailBody = stripslashes(str_replace("\rn", "[br\]", $_POST['mailBody'])); if(!$_POST['mailBody']){ echo " <h3>New Message</h3> <p>You must enter a message for this mail. <br><br> <a href='mailbox.php?mail=new'>Back</a></p></div>"; die(); } elseif(!$_POST['mailTo']) { echo " <h3>New Message</h3> <p>You must enter a player ID for this mail. <br><br> <a href='mailbox.php?mail=new'>Back</a></p></div>"; die(); } else { $checkuser = mysql_query("SELECT `id` FROM `users` WHERE `id` = '".$mailTo."'"); $username_exist = mysql_num_rows($checkuser); if($username_exist > 0){ $result = mysql_query("INSERT INTO `mailbox` (`mailTo`, `mailFrom`, `mailTime`, `mailSubject`, `mailBody`)". "VALUES ('$mailTo', '$mailFrom', '$mailTime', '$mailSubject', '$mailBody')"); echo " <h3>New Message</h3> <p>You successfully sent a message. <br><br> <a href='mailbox.php?mail=new'>Back</a></p> </div>"; } else { echo " <h3>New Message</h3> <p>The user you entered doesn't exist. <br><br> <a href='mailbox.php?mail=new'>Back</a></p> </div>"; } } } function mail_saved() { $delete = $_REQUEST['delete']; $checkbox = $_REQUEST['checkbox']; $count = count($_REQUEST['checkbox']); if($delete){ for($i=0;$i<$count;$i++){ $del_id = $checkbox[$i]; $sql = "DELETE FROM `mailbox` WHERE id='$del_id'"; $result = mysql_query($sql); } // if successful redirect to delete_multiple.php if($result){ echo "<meta http-equiv=\"refresh\" content=\"0;URL=mailbox.php\">"; } } ?> <h3>Saved Mail</h3> <form method='post' onSubmit='return confirmAction("Are you sure you want to delete read/selected mail?");'> <table width='100%'> <tr> <td colspan='2'><h4>Subject</h4></td> <td><h4>Sender</h4></td> <td><h4>Received</h4></td> <td align='center'><h4> <input type='checkbox' name='delete' onClick='allCheckUncheck(this);'> </h4></td> </tr> <?php $userid = $_SESSION['id']; $result = mysql_query("SELECT * FROM `mailbox` WHERE `mailSaved` = 'Yes' ORDER BY `mailTime` DESC LIMIT 25"); while($row = mysql_fetch_array($result)){ $newmails = mysql_num_rows($result); if (strtoupper($row['mailTo']) == strtoupper($userid)) { $from_user_class = new User($row['mailFrom']); $subject = ($row['mailSubject'] == "") ? "No Subject" : $row['mailSubject']; echo " <tr> <td colspan='2' align='center'><a href='mail_read.php?id=".$row['id']."'>".$subject."</a></td> <td align='center'>".$from_user_class->formattedname."</td> <td align='center'>".date(d." ".M." ".y.", ".g.":".i." ".a,$row['mailTime'])."</td> <td align='center'><input type='checkbox' name='checkbox[]' id='checkbox[]' value='".$row['id']."'></td> </tr>"; } } echo " <tr> <td colspan='5' align='right'> <input type='submit' name='mailRead' value='Delete All Read'> <input type='submit' name='delete' id='delete' value='Delete Selected'> </td> </tr> </form> <tr> <td width='3%'></td> <td width='30%'></td> <td width='30%'></td> <td width='22%'></td> <td width='5%'></td> </tr> </table> </div>"; } function mail_sent() { $delete = $_REQUEST['delete']; $checkbox = $_REQUEST['checkbox']; $count = count($_REQUEST['checkbox']); if($delete){ for($i=0;$i<$count;$i++){ $del_id = $checkbox[$i]; $sql = "DELETE FROM `mailbox` WHERE id='$del_id'"; $result = mysql_query($sql); } // if successful redirect to delete_multiple.php if($result){ echo "<meta http-equiv=\"refresh\" content=\"0;URL=mailbox.php?mail=sent\">"; } } if($_POST['mailRead']){ $sql = "DELETE FROM `mailbox` WHERE `mailRead` = '1', `mailFrom` = '".$userid."'"; $result = mysql_query($sql); } if($result){ echo "<meta http-equiv=\"refresh\" content=\"0;URL=mailbox.php?mail=sent\">"; } ?> <h3>Sent Mail</h3> <form method='post' onSubmit='return confirmAction("Are you sure you want to delete read/selected mail?");'> <table width='100%'> <tr> <td colspan='2'><h4>Subject</h4></td> <td><h4>Recipient</h4></td> <td><h4>Sent</h4></td> <td align='center'><h4> <input type='checkbox' name='delete' onClick='allCheckUncheck(this);'> </h4></td> </tr> <?php $userid = $_SESSION['id']; $result = mysql_query("SELECT * FROM `mailbox` ORDER BY `mailTime` DESC LIMIT 25"); while($row = mysql_fetch_array($result)){ $sentmails = mysql_num_rows($result); if (strtoupper($row['mailFrom']) == strtoupper($userid)) { $to_user_class = new User($row['mailTo']); $subject = ($row['mailSubject'] == "") ? "No Subject" : $row['mailSubject']; if ($row['mailRead'] == "0"){ $mailUnread = "<a href='mailbox_read.php?sent=".$row['id']."' class='mailUnread' title='Unread'></a>"; $mail = "<a href='mailbox_read.php?sent=".$row['id']."'><b>$subject</b></a>"; } else { $mailUnread = "<a href='mailbox_read.php?sent=".$row['id']."' class='mailRead' title='Read'></a>"; $mail = "<a href='mailbox_read.php?sent=".$row['id']."'>$subject</a>"; } echo " <tr> <td align='center'>".$mailUnread."</td> <td>".$mail."</td> <td>".$to_user_class->formattedname."</td> <td>".date(d." ".M." ".y.", ".g.":".i." ".a,$row['mailTime'])."</td> <td align='center'><input type='checkbox' name='checkbox[]' id='checkbox[]' value='".$row['id']."'></td> </tr>"; } } echo " <tr> <td colspan='5' align='right'> <input type='submit' name='mailRead' value='Delete All Read'> <input type='submit' name='delete' id='delete' value='Delete Selected'> </td> </tr> </form>"; if($sentmails < 1){ echo " <tr> <td colspan='2'><i>There is no mail to display.</i></td> </tr>"; } echo " <tr> <td width='3%'></td> <td width='30%'></td> <td width='30%'></td> <td width='22%'></td> <td width='5%'></td> </tr> </table> </div>"; }

Yes, I understand, I been doing interviews already... Just waiting to get a couple more people to see if they want to help. I do appreciate you guys warning me. I wish you a Merry Christmas!

Also, if I have 5 people that are interested in helping me out, I will choose one person out of those 5 to help me out. Again, I'm looking for someone that is good at high levels of PHP security. And I know $250 isn't a lot, but I'm really in need of some help..

Hi, I'm not sure if this would be the correct place to put this thread, but I'm looking for a coder that could secure my game and maybe reduce some of the code. I'm offering up to $250. I'm looking for someone that is very good at securing and coding PHP, Mysql, and maybe AJAX. It's be nearly three years now that I have been working on trying to get my game live, but having a few issues.. I'm not very good at securing PHP, so that is why I'm making this thread. On the payments on this, I won't be able to pay $50 - $100 every two weeks, in a bind with other bills so this is how I could pay someone to do this for me. Your probably thinking why are you trying to make a text-base game if you can't secure PHP, well I really kinda just taught myself from messing around with the GRPG script. If your interested in helping me out, please send me a Private Message on here or send me an email @ [email protected]. What I want done with my game, is securing it, fixing bugs/errors, reducing PHP coding, and maybe add in some ajax. Regards, James Ayling

Hmmm, I really need help on securing my game... And I'm in need of a in game forum... Send me a message on here if your interested in helping me..

Preview of my Staff Panel And last time I tried looking a players mail, it wasn't working.. And to be honest, I think looking at players mail is so inappropriate and invades privacy. Oh yea, the menu on the left is an ajax dropdown menu. And I'm using Lightbox in this Staff Panel also, PM on here, or reply to this thread to get the files. If your interested in getting my css file, either PM on here, or reply to this thread.

function add_note() { echo " <div class='content'> <h3>Staff Notes - Add Note</h3> <table width='100%'> <tr> <td colspan='2'><h4>Add Staff Note</h4></td> </tr> </table> <table width='100%'> <form action='staff_panel.php?action=submitnote' method='post'> <tr> <td colspan='2' align='center'><textarea name='staffnote' rows='5' cols='60'></textarea></td> </tr> <tr> <td colspan='2' align='center'><input type='submit' value='Submit' /></td. </tr> </form> </table> </div>"; } function submit_note() { $userid = $_SESSION['id']; $timesent = time(); $staffAction = "Added a staff note."; $staffnote = $_POST['staffnote']; $order = array("\r\n", "\n", "\r"); $replace = '<br>'; $newstr = str_replace($order, $replace, $staffnote); $result = mysql_query("INSERT INTO `staffnotes` (user, timesent, note) VALUES"."('".$userid."', '".$timesent."', '".$newstr."')"); $result = mysql_query("INSERT INTO `stafflog` (user, timesent, action)"."VALUES ('".$userid."', '".$timesent."', '".$staffAction."')"); echo " <div class='content'> <h3>Staff Notes - Add Note</h3> <p>Note was successfully added.</p> </div>"; die(); } function staff_notes() { echo " <div class='content'> <h3>View Staff Notes</h3> <table width='100%'> <tr> <td colspan='2'><h4>Staff Notes</h4></td> </tr>"; $result = mysql_query("SELECT * FROM `staffnotes` ORDER BY `timesent` DESC LIMIT 5"); while ($line = mysql_fetch_array($result)){ $staff_notes = new User($line['user']); $notes = mysql_num_rows($result); echo " <tr> <td class='forumSide' align='center' valign='top'>".date(d." ".M.", ".y." ".g.":".i."".a,$line['timesent'])." <br> ".$staff_notes->formattedname."</td> <td class='forumPost' valign='top'>".$line['note']."</td> </tr>"; } if($notes < 1){ echo " <table width='100%'> <tr> <td colspan='2'><div style='text-align:center;'><i>There are no staff notes.</i></div></td> </tr> </table> </div>"; } }

function mail_logs() { ?> <div class='content'> <h3>Mail Logs</h3> <table width='100%'> <tr> <td colspan='2'><h4>View Players Mail</h4></td> </tr> </table> <table width='100%'> <form action='staff_panel.php?action=submitmaillog' method='post' name='maillogs'> <tr> <td width='20%'><h4 onmouseover="TagToTip('formA')" onmouseout="UnTip()">Name</h4></td> <td width='27%'> <input type='hidden' name='searchPlayer' value=''> <input type='text' name='searchPlayerText' value="" size='14' class='itNoB' readonly> <a href="act_select.php?t=maillog" class="lbOn">select</a> </td> <td width='3%'>[<b class='qmark' onmouseover="TagToTip('formA')" onmouseout="UnTip()">?</b>]</td> </tr> <tr> <td colspan='6' align='center'><input type='submit' value='View Mails' /></td> </tr> </form> </table> <span id="formA">Choose the player you want view their mail inbox/sent.</span> </div> <?php } function submit_maillog() { echo " <div class='content'> <h3>Mail Logs</h3> <table width='100%'> <tr> <td colspan='2'><h4>Received Mail Logs for: ".$_POST['searchPlayerText']."</h4></td> </tr> </table>"; echo " <table width='100%'> <tr> <td width='25%'><h4>Sender</h4></td> <td width='25%'><h4>Received</h4></td> <td width='50%'><h4>Message</h4></td> </tr>"; $result = mysql_query("SELECT * FROM `mailbox` WHERE `mailTo` = '".$_POST['searchPlayerText']."'"); while ($row = mysql_fetch_array($result)){ $mail_logs = new User($row['mailFrom']); echo " <tr> <td align='center'>".$mail_logs->formattedname."</td> <td align='center'>".date(d." ".M." ".y.", ".g.":".i." ".a,$row['mailTime'])."</td> <td align='center'>"; $profile = str_replace("<br />", "[br]", $row['mailBody']); $formatted_text = bb_code(bbcode($profile)); echo $formatted_text; echo "</td> </tr>"; } echo " <table width='100%'> <tr> <td colspan='2'><h4>Sent Mail Logs for: ".$_POST['searchPlayerText']."</h4></td> </tr> </table> <table width='100%'> <tr> <td width='25%'><h4>Recipient</h4></td> <td width='25%'><h4>Sent</h4></td> <td width='50%'><h4>Message</h4></td> </tr>"; $result6 = mysql_query("SELECT * FROM `mailbox` WHERE `mailFrom` = '".$_POST['searchPlayerText']."'"); while ( $row = mysql_fetch_array($result6)){ $maillogs6 = new User($row['mailTo']); echo " <tr> <td align='center'>".$maillogs6->formattedname."</td> <td align='center'>".date(d." ".M." ".y.", ".g.":".i." ".a,$row['mailTime'])."</td> <td align='center'>"; $profile = str_replace("<br />", "[br]", $row['mailBody']); $formatted_text = bb_code(bbcode($profile)); echo $formatted_text; echo "</td> </tr> </div>"; } }

$result = mysql_query("SELECT * FROM `attack_logs` ORDER BY `timestamp` DESC"); while ($row = mysql_fetch_array($result)) { $attacker = new User($row['attacker']); $defender = new User($row['defender']); $winner = new User($row['winner']); echo " <tr> <td align='center'>".$row['id']."</td> <td align='center'>".date(d." ".M.", ".y." ".g.":".i."".a,$row['timestamp'])."</td> <td align='center'>".$attacker->formattedname."</td> <td align='center'>".$defender->formattedname."</td> <td align='center'>".$winner->formattedname."</td> </tr> </div>"; } } function money_logs() { echo " <div class='content'> <h3>Money Logs</h3> <table width='100%'> <tr> <td colspan='2'><h4>Money Logs</h4></td> </tr> </table> <table width='100%'> <tr> <td><h4>ID</h4></td> <td><h4>Date/Time</h4></td> <td><h4>User To</h4></td> <td><h4>User From</h4></td> <td><h4>Amount</h4></td> <td><h4>Multi?</h4></td> </tr>"; $result = mysql_query("SELECT * FROM `moneyxferlog` ORDER BY `id`"); while ($line = mysql_fetch_array($result)) { if($row['usertoip'] == $row['userfromip']){ $multi = "<span style='color: #FF0000;'><b>YES</b></span>"; } else { $multi = "<span style='color: #00FF00;'><b>NO</b></span>";} echo " <tr> <td align='center'>".$line['id']."</td> <td align='center'>".date(d." ".M.", ".y." ".g.":".i."".a,$line['timesent'])."</td> <td align='center'>".$line['userto']."</td> <td align='center'>".$line['userfrom']."</td> <td align='center'>".$line['amount']."</td> <td align='center'>".$multi."</td> </tr> </div>"; } } function point_logs() { echo " <div class='content'> <h3>Point Xfer Logs</h3> <table width='100%'> <tr> <td colspan='2'><h4>Point Xfer Logs</h4></td> </tr> </table> <table width='100%'> <tr> <td><h4>ID</h4></td> <td><h4>Date/Time</h4></td> <td><h4>User To</h4></td> <td><h4>User From</h4></td> <td><h4>Amount</h4></td> <td><h4>Multi?</h4></td> </tr>"; $result = mysql_query("SELECT * FROM `pointxferlog` ORDER BY `id`"); while ($line = mysql_fetch_array($result)) { if($row['usertoip'] == $row['userfromip']){ $multi = "<span style='color: #FF0000;'><b>YES</b></span>"; } else { $multi = "<span style='color: #00FF00;'><b>NO</b></span>";} echo " <tr> <td align='center'>".$line['id']."</td> <td align='center'>".date(d." ".M.", ".y." ".g.":".i."".a,$line['timesent'])."</td> <td align='center'>".$line['userto']."</td> <td align='center'>".$line['userfrom']."</td> <td align='center'>".$line['amount']."</td> <td align='center'>".$multi."</td> </tr> </div>"; } }

<?php } function submit_freezerevoke() { $result = mysql_query("UPDATE `users` SET `frozen` = '0' WHERE `username` = '".$_POST['searchPlayerText']."'"); $result2 = mysql_query("SELECT `id` FROM `users` WHERE `username` = '".$_POST['searchPlayerText']."'"); $worked = mysql_fetch_array($result2); $freezeRevoke = new User($worked['id']); echo " <div class='content'> <h3>Revoke Freeze</h3> <p>".$freezeRevoke->formattedname."'s account freeze has been successfully revoked. <br> <a href='staff_panel.php?action=revokefreeze'>Back</a></p></div>"; die(); } function ip_search() { ?> <div class='content'> <h3>Ip Search</h3> <table width='100%'> <tr> <td colspan='2'><h4>Ip Search</h4></td> </tr> <form action='staff_panel.php?action=ipsubmit' method='post'> <tr> <td><h4>Ip Address</h4></td> <td><input type='text' name='ip' size='50' maxlength='75'></td> </tr> <tr> <td> </td> <td><input type='submit' value='Search' /></td> </tr> </form> </table> </div> <?php } function ipsearch_submit() { $ip = $_POST['ip']; echo " <div class='content'> <h3>Ip Search</h3> <table width='100%'> <tr> <td colspan='2'><h4>Accounts with Ip Address: ".$ip."</h4></td> </tr> </table> <table width='100%'> <tr> <td><h4>Account</h4></td> <td><h4>Ip Address</h4></td> <td><h4>Actions</h4></td> </tr>"; $result = mysql_query("SELECT * FROM `users` WHERE `ip`= '".$_POST['ip']."'"); while ($line = mysql_fetch_array($result)) { $ip_address = new User($line['id']); echo " <tr> <td align='center'>".$ip_address->formattedname."</td> <td align='center'><a href='http://whatismyipaddress.com/ip/".$ip."'><b>".$ip."</b></a></td> <td align='center'><a href='staff_panel.php?action=freeze&searchPlayerText=".$ip_address->username."'>Freeze Account</a><td> </tr> </div>"; } } function contact_messages() { echo " <div class='content'> <h3>Contact Messages</h3> <table width='100%'> <tr> <td colspan='2'><h4>Contact Messages</h4></td> </tr> </table> <table width='100%'> <tr> <td width='15%'><h4>ID</h4></td> <td width='35%'><h4>Subject</h4></td> <td width='35%'><h4>Date/Time</h4></td> </tr>"; $result = mysql_query("SELECT * FROM `contact_messages` ORDER BY `id` ASC"); while ($line = mysql_fetch_array($result)) { $contact = mysql_num_rows($result); if ($line['viewed'] == "1") { $viewed="<b><span style='color:#FF0000;'>NEW</span></b>"; } else { $viewed=" "; } echo " <tr> <td width='15%' align='center'>".$line['id']."</td> <td width='35%' align='center'>".$viewed." <a href='viewcontact.php?id=".$line['id']."'>".$line['subject']."</a></td> <td width='35%' align='center'>".date(d." ".M.", ".y." ".g.":".i."".a,$line['timesent'])."</td> </tr> </div>"; } if($contact < 1){ echo " <table width='100%'> <tr> <td colspan='2'><i>There are no contact messages.</i></td> </tr> </table> </div>"; } } function attack_logs() { echo " <div class='content'> <h3>Attack Logs</h3> <table width='100%'> <tr> <td colspan='2'><h4>Attack Logs</h4></td> </tr> </table> <table width='100%'> <tr> <td><h4>ID</h4></td> <td><h4>Date/Time</h4></td> <td><h4>Attacker</h4></td> <td><h4>Defender</h4></td> <td><h4>Winner</h4></td> <td><h4>Multi?</h4></td> </tr>";