mixmaster

I like all your work, but maybe you should move on from orbs and expand what you can do (just my opinion) :) good work

Would easily bypassed by the user auto refreshing the crimes page a second or so before the crime do page

  I will add you for black ops , my psn is JD-ILLusiONS-JD

which ones are you trying to keep on same line ?

  ------------------------

nm ----------

$150 --too short-----

Don't you think , he needs to go learn to code and understand what functions do what before he goes looking through pages of code that will just mean nothing to him Go learn http://php.net

You had 2 of the best programmers on this forum trying to help you (SRB(Guest) and Djkanna , if you new what you were doing you would have understood their advise Best advise on that thread was ( Give up. If you can't do this, how the hell you going to run a game/application/program of any kind? Quit, while you're still sane.)

Seen as you struggle to sort out a "missing column" problem i highly advise you not to touch your script (even if you were following the simplest of tutorials)

Actually , the binary value of 10 is 10 , the decimal value of binary 10 is 2 :)

Post the code from lines 252 - 272

change all $userid == 1 to $ir['user_level'] == 2 (or which staff members you want to allow access to)

  if it was his , he would know how to do it wouldn't he due , jesus not smart are you

http://php.net ---to short---

Any script is worth fixing up , it helps you learn what to do and what not to do , some can become quite troublesome to fix , but it helps you learn from others mistakes and what you can do to make it better

ah yes , i forgot about that lol , a bit too tired at that time in the morning lol

i have a meeting soon , so as soon as i get back , i will re-do it all for you

``````````````````````````````` this will work now <?php /****************************************/ /*********** Created By Seker ***********/ /****************************************/ require_once('globals.php'); $hsteps = $ir['hsteps']; $maxenergy = $ir['maxenergy']; if (!$ir['hospital']) { echo " You are not in the hospital! <a href='index.php'>[Home]</a>"; exit($h->endpage()); } if ($ir['jail']) { echo " You cannot be here while in jail! <a href='index.php'>[Home]</a>"; exit($h->endpage()); } if ($ir['energy'] < 5) { echo " You do not have enough energy to explore the hospital! <a href='crystaltemple.php'>[Refill Energy]</a>"; exit($h->endpage()); } echo " <table width='70%' border='1'> <tr> <td align='center'> <b><u>Explore The Hospital</u></b> </td> </tr> <tr> <td align='center'> Explore the hospital! You never know what you'll find! </td> </tr> <tr> <td align='center'> It will cost you 5 energy, and you get 50 chances to explore each day! </td> </tr> <tr> <td align='center'> You can earn your release, or you can end up spending even longer in the hospital, so be careful! </td> </tr> </table> <table width='70%' border='1'> <tr> <td align='center'> You currently have {$hsteps} more chances to explore! Don't waste them! </td> </tr> <tr> <td align='center'>"; if ($ir['hsteps'] > 0) { echo " <a href='hospexplore.php?action=explore'>[Explore]</a> </td> </tr> </table>"; } else { echo " You have explored enough! Try again tomorrow! <a href='hospital.php'>[back]</a> </td> </tr> </table>"; } $_GET['action'] = $db->escape( htmlentities(stripslashes($_GET['action']), ENT_QUOTES, 'ISO-8859-1')); switch ($_GET['action']) { case 'explore': do_explore(); break; } function do_explore() { global $ir, $h, $c, $userid, $db; if (!$ir['hospital']) { echo " You are not in the hospital! <a href='index.php'>[Home]</a>"; exit($h->endpage()); } if ($ir['jail']) { echo " You cannot be here while in jail! <a href='index.php'>[Home]</a>"; exit($h->endpage()); } if ($ir['energy'] < 5) { echo " You do not have enough energy to explore the hospital! <a href='crystaltemple.php'>[Refill Energy]</a>"; exit($h->endpage()); } if($ir['hsteps'] < 1) { echo" you have no steps left": exit($H->endpage()): } $result = rand(1,3); $db->query("UPDATE users SET energy=energy-5,hsteps=hsteps-1 WHERE steps > 0 && userid=$userid"); if ($result == 1) { $db->query("UPDATE users SET hospital=hospital+5 WHERE userid=$userid"); echo " The doctor ordered bedrest! Your hospital time has increased! <a href='hospexplore.php?action=explore'>[Continue Exploring]</a> <a href='hospital.php'>[back]</a>"; exit($h->endpage()); } else if ($result == 2) { $db->query("UPDATE users SET energy=$maxenergy WHERE userid=$userid"); echo " You stopped at the vending machine and got a coffee. You feel re-energized! <a href='hospexplore.php?action=explore'>[Continue Exploring]</a> <a href='hospital.php'>[back]</a>"; exit($h->endpage()); } else if ($result == 3) { $db->query("UPDATE users SET hospital=0 WHERE userid=$userid"); echo " You stumbled across the back exit! Time to get out of here! <a href='index.php'>[Home]</a>"; exit($h->endpage()); } } $h->endpage();

replace $db->query("UPDATE users SET energy=energy-5,hsteps=hsteps-1 WHERE userid=$userid"); with $db->query("UPDATE users SET energy=energy-5,hsteps=hsteps-1 WHERE hsteps > 0 && userid=$userid");

  replace if ($result = 1) { $db->query("UPDATE users SET hospital=hospital+5 WHERE userid=$userid"); echo " The doctor ordered bedrest! Your hospital time has increased! <a href='hospexplore.php?action=explore'>[Continue Exploring]</a> <a href='hospital.php'>[back]</a>"; exit($h->endpage()); } else if ($result = 3) { $db->query("UPDATE users SET energy=maxenergy WHERE userid=$userid"); echo " You stopped at the vending machine and got a coffee. You feel re-energized! <a href='hospexplore.php?action=explore'>[Continue Exploring]</a> <a href='hospital.php'>[back]</a>"; exit($h->endpage()); } else if ($result = 5) { $db->query("UPDATE users SET hospital=0 WHERE userid=$userid"); echo " You stumbled across the back exit! Time to get out of here! <a href='index.php'>[Home]</a>"; exit($h->endpage()); } else { echo " This hospital is huge! You haven't found anything, yet! <a href='hospexplore.php?action=explore'>[Continue Exploring]</a> <a href='hospital.php'>[back]</a>"; exit($h->endpage()); } } $h->endpage(); with if ($result == 1) { $db->query("UPDATE users SET hospital=hospital+5 WHERE userid=$userid"); echo " The doctor ordered bedrest! Your hospital time has increased! <a href='hospexplore.php?action=explore'>[Continue Exploring]</a> <a href='hospital.php'>[back]</a>"; exit($h->endpage()); } else if ($result == 2) { $db->query("UPDATE users SET energy=$maxenergy WHERE userid=$userid"); echo " You stopped at the vending machine and got a coffee. You feel re-energized! <a href='hospexplore.php?action=explore'>[Continue Exploring]</a> <a href='hospital.php'>[back]</a>"; exit($h->endpage()); } else if ($result == 3) { $db->query("UPDATE users SET hospital=0 WHERE userid=$userid"); echo " You stumbled across the back exit! Time to get out of here! <a href='index.php'>[Home]</a>"; exit($h->endpage()); } else { echo " This hospital is huge! You haven't found anything, yet! <a href='hospexplore.php?action=explore'>[Continue Exploring]</a> <a href='hospital.php'>[back]</a>"; exit($h->endpage()); } } $h->endpage();   and   $hsteps = $ir['hsteps']; with $hsteps = $ir['hsteps']; $maxenergy = $ir['maxenergy']; and $rand = rand(1,5); with $rand = rand(1,3);  

Go study --too short--

It isn't just your admin account's password that you have to worry about , if someone does get all the md5 passwords from your database and finds JUST 1 that is able to be decrypted and then starts shouting it off to all the other uses , how long do you think they will stay knowing the could have their account breached ?

So you are saying that using md5 as a password encryption is fine , because to me any form of it being so easy to attempt a decryption in seconds of getting the md5 encrypted password , IS a security threat

Yes that is what i am saying , md5 should not be used for password encyption , anyone can go on google and find a sql injection to retrieve any md5 password from your database then use an md5 decrypter to get the plain text password , so upgrade as soon as you can http://uk.php.net/manual/en/function.crypt.php