Line 601 to 991
}
function unfed_user_submit()
{
global $ir,$c,$h,$userid;
mysql_query("UPDATE users SET fedjail=0 WHERE userid={$_POST['user']}",$c);
mysql_query("DELETE FROM fedjail WHERE fed_userid={$_POST['user']}",$c);
mysql_query("INSERT INTO unjaillogs VALUES('',$userid, {$_POST['user']}, unix_timestamp())",$c);
print "User unjailed.";
}
function newspaper_form()
{
global $ir,$c,$h,$userid;
$q=mysql_query("SELECT * FROM papercontent LIMIT 1",$c);
$news=mysql_result($q,0,0);
print "<h3>Editing Announcements</h3><form action='admin.php?action=subnews' method='post'>
<textarea rows='7' cols='35' name='newspaper'>$news</textarea>
<input type='submit' value='Change' /></form>";
}
function newspaper_submit()
{
global $ir,$c,$h,$userid;
$news=$_POST['newspaper'];
mysql_query("UPDATE papercontent SET content='$news'",$c);
print "Announcements updated!";
}
function view_attack_logs()
{
global $ir,$c,$h,$userid;
print "<h3>Attack Logs</h3>
<table width=75%><tr style='background:gray'><th>Time</th><th>Detail</th></tr>";
$q=mysql_query("SELECT * FROM attacklogs ORDER BY time DESC",$c);
while($r=mysql_fetch_array($q))
{
print "<tr><td>".date('F j, Y, g:i:s a',$r['time'])."</td><td>{$r['attacker']} attacked {$r['attacked']} and {$r['result']} and stole \${$r['stole']}</td></tr>";
}
print "</table>";
}
function inv_user_begin()
{
global $ir,$c,$h,$userid;
print "<h3>Viewing User Inventory</h3>
You may browse this user's inventory.
<form action='admin.php?action=invuser' method='post'>
User: ".user_dropdown($c,'user')."
<input type='submit' value='View Inventory' /></form>";
}
function inv_user_view()
{
global $ir,$c,$h,$userid;
$inv=mysql_query("SELECT iv.*,i.*,it.* FROM inventory iv LEFT JOIN items i ON iv.inv_itemid=i.itmid LEFT JOIN itemtypes it ON i.itmtype=it.itmtypeid WHERE iv.inv_userid={$_POST['user']}",$c);
if (mysql_num_rows($inv) == 0)
{
print "[b]This person has no items![/b]";
}
else
{
print "[b]Their items are listed below.[/b]
<table width=100%><tr style='background-color:gray;'><th>Item</th><th>Sell Value</th><th>Total Sell Value</th><th>Links</th></tr>";
while($i=mysql_fetch_array($inv))
{
print "<tr><td>{$i['itmname']}";
if ($i['inv_qty'] > 1)
{
print "x{$i['inv_qty']}";
}
print "</td><td>\${$i['itmsellprice']}</td><td>";
print "$".($i['itmsellprice']*$i['inv_qty']);
print "</td><td>[[url='admin.php?action=deleinv&ID={$i[']Delete[/url]]";
print "</td></tr>";
}
print "</table>";
}
}
function inv_delete()
{
global $ir,$c,$h,$userid;
mysql_query("DELETE FROM inventory WHERE inv_id={$_GET['ID']}",$c);
print "Item deleted from inventory.";
}
function credit_user_form()
{
global $ir,$c,$h,$userid;
print "<h3>Crediting User</h3>
You can give a user money.
<form action='admin.php?action=creditsub' method='post'>
User: ".user_dropdown($c,'user')."
Money: <input type='text' name='money' />
<input type='submit' value='Credit User' /></form>";
}
function credit_user_submit()
{
global $ir,$c,$h,$userid;
$_POST['money'] = (int) $_POST['money'];
mysql_query("UPDATE users u SET money=money+{$_POST['money']} WHERE u.userid={$_POST['user']}",$c);
print "User credited.";
}
function ccredit_user_form()
{
global $ir,$c,$h,$userid;
print "<h3>Crediting User Crystals</h3>
You can give a user crystals.
<form action='admin.php?action=ccreditsub' method='post'>
User: ".user_dropdown($c,'user')."
Crystals: <input type='text' name='crystals' />
<input type='submit' value='Credit User' /></form>";
}
function ccredit_user_submit()
{
global $ir,$c,$h,$userid;
$_POST['crystals'] = (int) $_POST['crystals'];
mysql_query("UPDATE users u SET crystals=crystals+{$_POST['crystals']} WHERE u.userid={$_POST['user']}",$c);
print "User credited.";
}
function ip_search_form()
{
global $ir,$c,$h,$userid;
print "<h3>IP Search</h3>
<form action='admin.php?action=ipsub' method='post'>
IP: <input type='text' name='ip' value='...' />
<input type='submit' value='Search' /></form>";
}
function ip_search_submit()
{
global $ir,$c,$h,$userid;
print "Searching for users with the IP: [b]{$_POST['ip']}[/b]
<table width=75%><tr style='background:gray'> <th>User</th> <th>Level</th> <th>Money</th> </tr>";
$q=mysql_query("SELECT * FROM users WHERE lastip='{$_POST['ip']}'",$c);
$ids=array();
while($r=mysql_fetch_array($q))
{
$ids[]=$r['userid'];
print "\n<tr> <td> [url='viewuser.php?u={$r[']{$r['username']}[/url]</td> <td> {$r['level']}</td> <td>{$r['money']}</td> </tr>";
}
print "</table>
[b]Mass Jail[/b]
<form action='admin.php?action=massjailip' method='post'>
<input type='hidden' name='ids' value='".implode(",",$ids)."' /> Days: <input type='text' name='days' value='300' />
Reason: <input type='text' name='reason' value='Same IP users, Mail [email]
[email protected][/email] with your case.' />
<input type='submit' value='Mass Jail' /></form>";
}
function mass_jail()
{
global $ir,$c,$h,$userid;
$ids=explode(",",$_POST['ids']);
foreach($ids as $id)
{
$re=mysql_query("UPDATE users SET fedjail=1 WHERE userid={$id}",$c);
if(mysql_affected_rows($c))
{
mysql_query("INSERT INTO fedjail VALUES('',{$id},{$_POST['days']},$userid,'".
mysql_real_escape_string($_POST['reason'],$c)."')",$c);
}
mysql_query("INSERT INTO jaillogs VALUES('',$userid, {$id}, {$_POST['days']}, '{$_POST['reason']}',unix_timestamp())",$c);
print "User jailed : $id.";
}
}
function view_itm_logs()
{
global $ir,$c,$h,$userid;
print "<h3>Item Xfer Logs</h3>
<table width=75%><tr style='background:gray'><th>Time</th><th>Detail</th></tr>";
$q=mysql_query("SELECT ix.*,u1.username as sender, u2.username as sent,i.itmname as item FROM itemxferlogs ix LEFT JOIN users u1 ON ix.ixFROM=u1.userid LEFT JOIN users u2 ON ix.ixTO=u2.userid LEFT JOIN items i ON i.itmid=ix.ixITEM ORDER BY ix.ixTIME DESC",$c);
while($r=mysql_fetch_array($q))
{
print "<tr><td>" . date("F j, Y, g:i:s a",$r['ixTIME']) . "</td><td>{$r['sender']} sent {$r['ixQTY']} {$r['item']}(s) to {$r['sent']} </td></tr>";
}
print "</table>";
}
function view_cash_logs()
{
global $ir,$c,$h,$userid;
print "<h3>Cash Xfer Logs</h3>
<table width=75% border=1> <tr style='background:gray'> <th>ID</th> <th>Time</th> <th>User From</th> <th>User To</th> <th>Multi?</th> <th>Amount</th> <th></th> </tr>";
$q=mysql_query("SELECT cx.*,u1.username as sender, u2.username as sent FROM cashxferlogs cx LEFT JOIN users u1 ON cx.cxFROM=u1.userid LEFT JOIN users u2 ON cx.cxTO=u2.userid ORDER BY cx.cxTIME DESC",$c) or die(mysql_error()."
"."SELECT cx.*,u1.username as sender, u2.username as sent FROM cashxferlogs cx LEFT JOIN users u1 ON cx.cxFROM=u1.userid LEFT JOIN users u2 ON cx.cxTO=u2.userid ORDER BY cx.cxTIME DESC");
while($r=mysql_fetch_array($q))
{
if($r['cxFROMIP'] == $r['cxTOIP']) { $m="<span style='color:red;font-weight:800'>MULTI</span>"; } else { $m=""; }
print "<tr><td>{$r['cxID']}</td> <td>" . date("F j, Y, g:i:s a",$r['cxTIME']) . "</td><td>[url='viewuser.php?u={$r[']{$r['sender']}[/url] [{$r['cxFROM']}] (IP: {$r['cxFROMIP']}) </td><td>[url='viewuser.php?u={$r[']{$r['sent']}[/url] [{$r['cxTO']}] (IP: {$r['cxTOIP']}) </td> <td>$m</td> <td> \${$r['cxAMOUNT']}</td> <td> [[url='admin.php?action=fedform&XID={$r[']Jail Sender[/url]] [[url='admin.php?action=fedform&XID={$r[']Jail Receiver[/url]]</td> </tr>";
}
print "</table>";
}
function view_mail_logs()
{
global $ir,$c,$h,$userid;
$_GET['st']=abs((int) $_GET['st']);
$rpp=100;
print "<h3>Mail Logs</h3>
<table width=75% border=2> \n<tr style='background:gray'> <th>ID</th> <th>Time</th> <th>User From</th> <th>User To</th> <th width>Subj</th> <th width=30%>Msg</th> <th></th> </tr>";
$q=mysql_query("SELECT m.*,u1.username as sender, u2.username as sent FROM mail m LEFT JOIN users u1 ON m.mail_from=u1.userid LEFT JOIN users u2 ON m.mail_to=u2.userid WHERE m.mail_from != 0 ORDER BY m.mail_time DESC LIMIT {$_GET['st']},$rpp",$c) or die(mysql_error()."
"."SELECT cx.*,u1.username as sender, u2.username as sent FROM cashxferlogs cx LEFT JOIN users u1 ON cx.cxFROM=u1.userid LEFT JOIN users u2 ON cx.cxTO=u2.userid ORDER BY cx.cxTIME DESC LIMIT {$_GET['st']},$rpp");
while($r=mysql_fetch_array($q))
{
print "\n<tr><td>{$r['mail_id']}</td> <td>" . date("F j, Y, g:i:s a",$r['mail_time']) . "</td><td>{$r['sender']} [{$r['mail_from']}] </td> <td>{$r['sent']} [{$r['mail_to']}] </td> \n<td> {$r['mail_subject']}</td> \n<td>{$r['mail_text']}</td> <td> [[url='admin.php?action=mailform&XID={$r[']MailBan Sender[/url]] [[url='admin.php?action=mailform&XID={$r[']MailBan Receiver[/url]]</td> </tr>";
}
print "</table>
";
$q2=mysql_query("SELECT mail_id FROM mail WHERE mail_from != 0",$c);
$rs=mysql_num_rows($q2);
$pages=ceil($rs/20);
print "Pages: ";
for($i=1;$i<=$pages;$i++)
{
$st=($i-1)*20;
print "[url='admin.php?action=maillogs&st=$st']$i[/url]";
if($i % 7 == 0) { print "
\n"; }
}
}
function staff_list()
{
global $ir,$c,$h,$userid;
print "<h3>Staff Management</h3>";
print "[b]Admins[/b]
<table width=80%><tr style='background:gray'> <th>User</th> <th>Online?</th> <th>Links</th> </tr>";
$q=mysql_query("SELECT * FROM users WHERE user_level=2 ORDER BY userid ASC", $c);
while($r=mysql_fetch_array($q))
{
if($r['laston'] >= time()-15*60) { $on="<font color=green>[b]Online[/b]</font>"; } else { $on="<font color=red>[b]Offline[/b]</font>"; }
print "\n<tr> <td>[url='viewuser.php?u={$r[']{$r['username']}[/url] [{$r['userid']}]</td> <td>$on</td> <td>[url='admin.php?action=userlevel&level=1&ID={$r[']Member[/url]</td></tr>";
}
print "</table>";
}
function userlevel()
{
global $ir,$c,$h,$userid;
$_GET['level']=abs((int) $_GET['level']);
$_GET['ID']=abs((int) $_GET['ID']);
mysql_query("UPDATE users SET user_level={$_GET['level']} WHERE userid={$_GET['ID']}", $c);
print "User's level adjusted.";
}
function userlevelform()
{
global $ir,$c,$h,$userid;
print "<h3>User Level Adjust</h3>
<form action='admin.php' method='get'>
<input type='hidden' name='action' value='userlevel'>
User: ".user_dropdown($c,'ID')."
User Level:
<input type='radio' name='level' value='0' /> NPC
<input type='radio' name='level' value='1' /> Member
<input type='radio' name='level' value='3' /> Helper
<input type='radio' name='level' value='4' /> Legend
<input type='radio' name='level' value='2' /> Admin
<input type='submit' value='Adjust' /></form>";
}
function massmailer()
{
global $ir,$c,$userid;
if($_POST['text'])
{
$_POST['text']=nl2br(strip_tags($_POST['text']));
$subj="This is a mass mail from the administration";
if($_POST['cat']==1)
$q=mysql_query("SELECT * FROM users ",$c);
else if($_POST['cat']==2)
$q=mysql_query("SELECT * FROM users WHERE user_level > 1",$c);
else if($_POST['cat']==3)
$q=mysql_query("SELECT * FROM users WHERE user_level=2",$c);
else
$q=mysql_query("SELECT * FROM users WHERE user_level={$_POST['level']}",$c);
while($r=mysql_fetch_array($q))
{
mysql_query("INSERT INTO mail VALUES('', 0, 0, {$r['userid']}, unix_timestamp(),'$subj','{$_POST['text']}')",$c);
print "Mass mail sent to {$r['username']}.
";
}
print "Mass mail sending complete!
[url='admin.php']> Back[/url]";
}
else
{
print "[b]Mass Mailer[/b]
<form action='admin.php?action=massmailer' method='post'> Text:
<textarea name='text' rows='7' cols='40'></textarea>
<input type='radio' name='cat' value='1' /> Send to all members <input type='radio' name='cat' value='2' /> Send to staff only <input type='radio' name='cat' value='3' /> Send to admins only
OR Send to user level:
<input type='radio' name='level' value='1' /> Member
<input type='radio' name='level' value='2' /> Admin
<input type='submit' value='Send' /></form>";
}
}
function ipban()
{
?><h3>Ban an IP</h3>
<form action='admin.php?action=ipbancon' method='post'>
<input type="text" name="ip" />
<input type='submit' value='BAN!' /></form>
<hr width="50%" />
[url="admin.php?action=ipbanview"][b]Click to view current IP bans[/b][/url]
<?
}
function ipbancon()
{
$filename='/home/bradlll/public_html/ipbans/'.$_POST['ip'];
$file=fopen($filename,w) or die("Error Creating File");
fclose($file);
?>Done
[url="admin.php?action=ipbanview"][b]Back[/b][/url]<?
}
function ipbanview()
{
$dir = "/home/bradlll/public_html/ipbans/";
?>
<h3>Viewing banned IP's</h3>
<table border="1">
<tr>
<th>
IP
</th>
<th>
Delete?
</th>
</tr><?
if (is_dir($dir)) {
if ($dh = opendir($dir)) {
while (($file = readdir($dh)) !== false) {
if (strlen($file)>4)
{
?>
<tr>
<td>
<? echo $file; ?>
</td>
<td>
[url="admin.php?action=ipbanremove&ip=<? echo $file; ?>"][b]Delete[/b][/url]
</td>
</tr>
<?
}
}
closedir($dh);
}
}
?></table>
[url="admin.php"][b]Back[/b][/url]
<?
}
function ipbanremove()
{
$file=$_GET['ip'];
$filepath = "/home/bradlll/public_html/ipbans/".$file;
if (! unlink ($filepath)) {
echo "Couldn't delete file";
} else {
echo "Removed IP: ".$file;
}
?>
[url="admin.php?action=ipbanview"][b]Back[/b][/url]<?
}
function del_user_form()
{
global $ir,$c,$h,$userid;
print "<h3>Deleting User</h3>
The user will be deleted.
<form action='admin.php?action=delusersub' method='post'>
User: ".user_dropdown($c,'user',$_GET['XID'])."
<input type='submit' value='Delete User' /></form>";
}
function del_user_submit()
{
global $ir,$c,$h,$userid;
mysql_query("DELETE FROM users WHERE userid={$_POST['user']}",$c);
print "User deleted.";
}
function adnewspaper_form()
{
global $ir,$c,$h,$userid;
print "<h3>Editing Admin Pad</h3><form action='admin.php?action=subadnews' method='post'>
<textarea rows='7' cols='35' name='newspaper'>";
include "admin.news";
print "</textarea>
<input type='submit' value='Change' /></form>";
}
function adnewspaper_submit()
{
global $ir,$c,$h,$userid;
$l=fopen("admin.news","w");
fwrite($l,stripslashes($_POST['newspaper']));
fclose($l);
print "Admin Pad updated!";
}
$h->endpage();
?>
