Here are some images of our game engine which is currently a work in progress...
http://arytheon.awardspace.co.uk/moveplayer.php?file=screen001.png
http://arytheon.awardspace.co.uk/moveplayer.php?file=screen002.png
http://arytheon.awardspace.co.uk/moveplayer.php?file=screen003.png
http://arytheon.awardspace.co.uk/moveplayer.php?file=screen004.png
http://arytheon.awardspace.co.uk/moveplayer.php?file=screen005.png
http://arytheon.awardspace.co.uk/moveplayer.php?file=screen006.png
http://arytheon.awardspace.co.uk/moveplayer.php?file=screen007.png
http://arytheon.awardspace.co.uk/moveplayer.php?file=screen008.png
http://arytheon.awardspace.co.uk/moveplayer.php?file=screen009.png
http://arytheon.awardspace.co.uk/moveplayer.php?file=screen010.png
http://arytheon.awardspace.co.uk/moveplayer.php?file=screen011.png
http://arytheon.awardspace.co.uk/moveplayer.php?file=screen012.png
http://arytheon.awardspace.co.uk/moveplayer.php?file=screen013.png
The template will be redesigned and it has been coded from scratch, here is a snippet of the code we use, its pretty secure.
function send_app(){
global $ir, $h, $db;
if(!isset($_GET['id'])){
echo '<p>You have to set a gang to view! <br/><a href="index.php?p=gangs">Back</a></p>';
$h->footer();
exit;
}
$gangid = abs(@intval($_GET['id']));
$q = mysql_query(sprintf("SELECT * FROM `gangs` WHERE `gangid` = %d", $gangid)) or die(mysql_error());
if(mysql_num_rows($q) == 0) {
echo '<p>There is no such gang! <br/><a href="index.php?p=gangs">Back</a></p>';
$h->footer();
exit;
}
$r = mysql_fetch_assoc($q);
if($ir['gang'] == $r['gangid']){
echo '<p>You are already in this gang! <br/><a href="index.php?p=gangs">Back</a></p>';
$h->footer();
exit;
}else if($ir['gang'] > 0){
echo '<p>You cannot apply while you are in another gang! <br/><a href="index.php?p=gangs">Back</a></p>';
$h->footer();
exit;
}else if($ir['level'] < $r['gangmin']){
echo '<p>You are not of a high enough level to apply to this gang! <br/><a href="index.php?p=gangs">Back</a></p>';
$h->footer();
exit;
}
if(isset($_POST['apptext']) && $_POST['apptext'] != ""){
$apptext = $db->clean($_POST['apptext']);
mysql_query(sprintf("INSERT INTO gangapps (appid, appgang, appuser, apptext) VALUES ('NULL', '%d', '%d', '%s')", $r['gangid'], $ir['userid'], $apptext));
echo '<p>Your application has been submitted and awaiting acception! <br/><a href="index.php?p=gangs">Back</a></p>';
$h->footer();
exit;
}
echo '<p>Please enter your application and why you should be allowed to join the gang.</p>
<form method="post">
<p><textarea name="apptext"></textarea><br/>
<input type="submit" value="Submit"></p></form>';
}
