Danny696 Posted May 17, 2009 Posted May 17, 2009 i tried to make a little page where when you make the NPC's you pick weapons and armour for it and because my game has a verfifaction mod on it it will get deleted after 3 days so i tried to make it so it would get validated straight away but it dont work heres what i made it works but it dont get verified and im nto sure about the weapons im pritty sure that it will work but i need the verified really: <?php include "sglobals.php"; //This contains user stuffs switch($_GET['action']) { case 'newuser': new_user_form(); break; case 'newusersub': new_user_submit(); break; case 'edituser': edit_user_begin(); break; case 'edituserform': edit_user_form(); break; case 'editusersub': edit_user_sub(); break; case 'invbeg': inv_user_begin(); break; case 'invuser': inv_user_view(); break; case 'deleinv': inv_delete(); break; case 'deluser': deluser(); break; default: print "Error: This script requires an action."; break; } function htmlspcl($in) { return str_replace("'", "'", htmlspecialchars($in)); } function new_user_form() { global $db,$ir, $c; if($ir['user_level'] != 2) { die("403"); } print "Adding a new NPC. <form action='staff_npc.php?action=newusersub' method='post'> Username: <input type='text' name='username' /> Login Name: <input type='text' name='login_name' /> Email: <input type='text' name='email' /> Password: <input type='text' name='userpass' /> Type: <input type='radio' name='user_level' checked='checked' value='0' />NPC <input type='radio' name='user_level' value='6' />Animal <input type='radio' name='user_level' value='7' />Police <input type='radio' name='user_level' value='8' />Mobster Level: <input type='text' name='level' value='1' /> Money: <input type='text' name='money' value='0' /> Crystals: <input type='text' name='crystals' value='0' /> City ID: <input type='test' name='location' value='1' Gender: <select name='gender' type='dropdown'><option>N/A</option></select> Primamy Item: <name='equip_primary' ".item_dropdown($c,'item')." Secondary Item <name= 'equip_secondary' ".item_dropdown($c,'item')." Armor <name= 'equip_armor' ".item_dropdown($c,'item')." [b]Stats[/b] Strength: <input type='text' name='strength' value='10' /> Agility: <input type='text' name='agility' value='10' /> Guard: <input type='text' name='guard' value='10' /> Labour: <input type='text' name='labour' value='10' /> IQ: <input type='text' name='labour' value='10' /> [b]Valadated[/b] Validate Days: <input type='text' name='validateDays' value='0' /> Validateted: <input type='text' name='validated' value='1' /> <input type='submit' value='Create User' /></form>"; } function new_user_submit() { global $db,$ir,$c,$userid; if($ir['user_level'] != 2) { die("403"); } if(!isset($_POST['username']) || !isset($_POST['login_name']) || !isset($_POST['userpass'])) { print "You missed one or more of the required fields. Please go back and try again. [url='admin.php?action=newuser']> Back[/url]"; $h->endpage(); exit; } $level=abs((int) $_POST['level']); $money=abs((int) $_POST['money']); $crystals=abs((int) $_POST['crystals']); $donator=abs((int) $_POST['donatordays']); $ulevel=abs((int) $_POST['user_level']); $strength=abs((int) $_POST['strength']); $agility=abs((int) $_POST['agility']); $guard=abs((int) $_POST['guard']); $labour=abs((int) $_POST['labour']); $iq=abs((int) $_POST['iq']); $energy=10+$level*2; $brave=3+$level*2; $hp=50+$level*50; $db->query("INSERT INTO users (username, login_name, userpass, level, money, crystals, donatordays, user_level, energy, maxenergy, will, maxwill, brave, maxbrave, hp, maxhp, location, gender, signedup, email, bankmoney, equip_primary, equip_secondary, equip_armor, validateDays, validated) VALUES( '{$_POST['username']}', '{$_POST['login_name']}', md5('{$_POST['userpass']}'), $level, $money, $crystals, $donator, $ulevel, $energy, $energy, 500, 500, $brave, $brave, $hp, $hp, 1, '{$_POST['gender']}', unix_timestamp(), '{$_POST['email']}', '{$_POST['equip_primary']}', '{$_POST['equip_secondary']}', '{$_POST['equip_armor']}', '{$_POST['validateDays']}', '{$_POST['validated']}', -1)"); $i=mysql_insert_id($c); $db->query("INSERT INTO userstats VALUES($i, $strength, $agility, $guard, $labour, $iq)"); print "NPC created!"; stafflog_add("Created NPC {$_POST['username']} [$i]"); } function edit_user_begin() { global $db,$ir,$c,$h,$userid; if($ir['user_level'] != 2) { die("403"); } print "<h3>Editing NPC</h3> You can edit any aspect of this NPC. <form action='staff_npc.php?action=edituserform' method='post'> User: ".user_dropdown($c,'user')." <input type='submit' value='Edit NPC' /></form> OR enter a NPC ID to edit: <form action='staff_npc.php?action=edituserform' method='post'> User: <input type='text' name='user' value='0' /> <input type='submit' value='Edit NPC' /></form>"; } function edit_user_form() { global $db,$ir,$c,$h,$userid; if($ir['user_level'] != 2) { die("403"); } $d=$db->query("SELECT u.*,us.* FROM users u LEFT JOIN userstats us on u.userid=us.userid WHERE u.userid={$_POST['user']}"); $itemi=$db->fetch_row($d); $itemi['hospreason']=htmlspcl($itemi['hospreason']); $itemi['jail_reason']=htmlspcl($itemi['jail_reason']); print "<h3>Editing User</h3> <form action='staff_npc.php?action=editusersub' method='post'> <input type='hidden' name='userid' value='{$_POST['user']}' /> Username: <input type='text' name='username' value='{$itemi['username']}' /> Login Name: <input type='text' name='login_name' value='{$itemi['login_name']}' /> Duties: <input type='text' name='duties' value='{$itemi['duties']}' /> Staff Notes: <input type='text' name='staffnotes' value='{$itemi['staffnotes']}' /> Level: <input type='text' name='level' value='{$itemi['level']}' /> Money: \$<input type='text' name='money' value='{$itemi['money']}' /> Bank: \$<input type='text' name='bankmoney' value='{$itemi['bankmoney']}' /> Cyber Bank: \$<input type='text' name='cybermoney' value='{$itemi['cybermoney']}' /> Crystals: <input type='text' name='crystals' value='{$itemi['crystals']}' /> Mail Ban: <input type='text' name='mailban' value='{$itemi['mailban']}' /> Mail Ban Reason: <input type='text' name='mb_reason' value='{$itemi['mb_reason']}' /> Forum Ban: <input type='text' name='forumban' value='{$itemi['forumban']}' /> Forum Ban Reason: <input type='text' name='fb_reason' value='{$itemi['fb_reason']}' /> Hospital time: <input type='text' name='hospital' value='{$itemi['hospital']}' /> Hospital reason: <input type='text' name='hospreason' value='{$itemi['hospreason']}' /> Jail time: <input type='text' name='jail' value='{$itemi['jail']}' /> Jail reason: <input type='text' name='jail_reason' value='{$itemi['jail_reason']}' /> <h4>Stats</h4> Strength: <input type='text' name='strength' value='{$itemi['strength']}' /> Agility: <input type='text' name='agility' value='{$itemi['agility']}' /> Guard: <input type='text' name='guard' value='{$itemi['guard']}' /> Labour: <input type='text' name='labour' value='{$itemi['labour']}' /> IQ: <input type='text' name='IQ' value='{$itemi['IQ']}' /> <h4>NPC Info</h4> City: <input type='test' name='location' value='{$itemi['location']}' Primamy Item: <input type='text'name= 'equip_primary' value='{$itemi['equip_primary']}' Secondary Item <input type='text'name= 'equip_secondary' value='{$itemi['equip_secondary']}' Armor <input type='text'name= 'equip_armor' value='{$itemi['equip_armor']}' <input type='submit' value='Edit User' /></form>"; } function edit_user_sub() { global $db,$ir,$c,$h,$userid; if($ir['user_level'] != 2) { die("403"); } $go=0; if(!isset($_POST['level'])) { $go=1; } if(!isset($_POST['money'])) { $go=1; } if(!isset($_POST['bankmoney'])) { $go=1; } if(!isset($_POST['crystals'])) { $go=1; } if(!isset($_POST['strength'])) { $go=1; } if(!isset($_POST['agility'])) { $go=1; } if(!isset($_POST['guard'])) { $go=1; } if(!isset($_POST['labour'])) { $go=1; } if(!isset($_POST['IQ'])) { $go=1; } if(!isset($_POST['username'])) { $go=1; } if(!isset($_POST['login_name'])) { $go=1; } if($go) { print "You did not fully fill out the form."; $_POST['user']=$_POST['userid']; edit_user_form(); } else { $_POST['level']=(int) $_POST['level']; $_POST['strength']=abs((int) $_POST['strength']); $_POST['agility']=abs((int) $_POST['agility']); $_POST['guard']=abs((int) $_POST['guard']); $_POST['labour']=abs((int) $_POST['labour']); $_POST['IQ']=abs((int) $_POST['IQ']); $_POST['money']=(int) $_POST['money']; $_POST['bankmoney']=(int) $_POST['bankmoney']; $_POST['cybermoney']=(int) $_POST['cybermoney']; $_POST['crystals']=(int) $_POST['crystals']; $_POST['mailban']=(int) $_POST['mailban']; $_POST['forumban']=(int) $_POST['forumban']; $_POST['location']=(int) $_POST['location']; $_POST['equip_primary']=(int) $_POST['equip_primary']; $_POST['equip_secondary']=(int) $_POST['equip_secondary']; $_POST['equip_armor']=(int) $_POST['equip_armor']; $maxwill=abs((int) $_POST['maxwill']); //check for username usage $u=$db->query("SELECT * FROM users WHERE username='{$_POST['username']}' and userid != {$_POST['userid']}"); if($db->num_rows($u) != 0) { print "That username is in use, choose another."; print " [url='staff_npc.php?action=edituser']> Back[/url]"; $h->endpage(); exit; } $oq=$db->query("SELECT * FROM users WHERE userid={$_POST['userid']}"); $rm=$db->fetch_row($oq); $nerve=3+$_POST['level']*2; $hp=50+$_POST['level']*50; $db->query("UPDATE users SET username='{$_POST['username']}', level={$_POST['level']}, money={$_POST['money']}, crystals={$_POST['crystals']}, energy=100, brave=$nerve, maxbrave=$nerve, maxenergy=100, hp=$hp, maxhp=$hp, hospital={$_POST['hospital']}, jail={$_POST['jail']}, duties='{$_POST['duties']}', staffnotes='{$_POST['staffnotes']}', mailban={$_POST['mailban']}, mb_reason='{$_POST['mb_reason']}', forumban={$_POST['forumban']}, fb_reason='{$_POST['fb_reason']}', hospreason='{$_POST['hospreason']}', jail_reason='{$_POST['jail_reason']}', login_name='{$_POST['login_name']}', location'= {$_POST['location']}, equip_primary'= {$_POST['equip_primary']},equip_secondary'= {$_POST['equip_secondary']}, equip_armor'= {$_POST['equip_armor']}, WHERE userid={$_POST['userid']}"); $db->query("UPDATE userstats SET strength={$_POST['strength']}, agility={$_POST['agility']}, guard={$_POST['guard']}, labour={$_POST['labour']}, IQ={$_POST['IQ']} WHERE userid={$_POST['userid']}"); stafflog_add("Edited user {$_POST['username']} [{$_POST['userid']}]"); print "User edited...."; } } function deluser() { global $ir,$c,$h,$userid,$db; if($ir['user_level'] != 2) { die("403"); } $undeletable = array('1','2','6','8','30' ); // add more IDs here, such as NPCs switch ($_GET['step']) { default: echo "<h3>Deleteing User</h3> Here you can delete a user. <form action='staff_npc.php?action=deluser&step=2' method='post'> User: ".user_dropdown($c,'user')." <input type='submit' value='Delete User' /></form> OR enter a user ID to Delete: <form action='staff_npc.php?action=deluser&step=2' method='post'> User: <input type='text' name='user' value='0' /> <input type='submit' value='Delete User' /></form>"; break; case 2: $target = $_POST['user']; if (!is_numeric($target)) exit; if (in_array($target,$undeletable)) { die('You cannot delete this person.'); } $d=$db->query("SELECT username FROM users WHERE userid='$target'"); $itemi=$db->fetch_row($d); print "<h3>Confirm</h3> Delete user ".$itemi["username"]."? <form action='staff_npc.php?action=deluser&step=3' method='post'> <input type='hidden' name='userid' value='$target' /> <input type='submit' name='yesorno' value='Yes' /> <input type='submit' name='yesorno' value='No' onclick=\"window.location='staff_npc.php?action=deluser';\" /></form>"; break; case 3: $target = $_POST['userid']; if (!is_numeric($target)) exit; if (in_array($target,$undeletable)) { die('You cannot delete this person.'); } if($_POST['yesorno']=='No') { die("User not deleted. [url='staff_npc.php?action=deluser']>Back to main Delete Users page.[/url]"); } if ($_POST['yesorno'] != ("No" || "Yes")) die('Eh'); $d=$db->query("SELECT username FROM users WHERE userid='$target'"); $itemi=$db->fetch_row($d); $db->query("DELETE FROM users WHERE userid='$target'"); $db->query("DELETE FROM userstats WHERE userid='$target'"); $db->query("DELETE FROM inventory WHERE inv_userid='$target'"); $db->query("DELETE FROM fedjail WHERE fed_userid='$target'"); echo "User {$itemi['username']} Deleted. [url='staff_npc.php?action=deluser']>Back to main Delete Users page.[/url]"; stafflog_add("Deleted User {$itemi['username']} [{$_POST['userid']}]"); break; } } function inv_user_begin() { global $db,$ir,$c,$h,$userid; if($ir['user_level'] > 3) { die("403"); } print "<h3>Viewing User Inventory</h3> You may browse this user's inventory. <form action='staff_npc.php?action=invuser' method='post'> User: ".user_dropdown($c,'user')." <input type='submit' value='View Inventory' /></form>"; } function inv_user_view() { global $db,$ir,$c,$h,$userid; if($ir['user_level'] > 3) { die("403"); } $d=$db->query("SELECT username FROM users WHERE userid='{$_POST['user']}'"); $un=$db->fetch_single($d); $inv=$db->query("SELECT iv.*,i.*,it.* FROM inventory iv LEFT JOIN items i ON iv.inv_itemid=i.itmid LEFT JOIN itemtypes it ON i.itmtype=it.itmtypeid WHERE iv.inv_userid={$_POST['user']}"); if ($db->num_rows($inv) == 0) { print "[b]This person has no items![/b]"; } else { print "[b]Their items are listed below.[/b] <table width=100%><tr style='background-color:gray;'><th>Item</th><th>Sell Value</th><th>Total Sell Value</th><th>Links</th></tr>"; while($i=$db->fetch_row($inv)) { print "<tr><td>{$i['itmname']}"; if ($i['inv_qty'] > 1) { print " x{$i['inv_qty']}"; } print "</td><td>\${$i['itmsellprice']}</td><td>"; print "$".($i['itmsellprice']*$i['inv_qty']); print "</td><td>[[url='staff_npc.php?action=deleinv&ID={$i[']Delete[/url]]"; print "</td></tr>"; } print "</table>"; } stafflog_add("Viewed user {$un} [{$_POST['user']}] inventory"); } function inv_delete() { global $db,$ir,$c,$h,$userid; if($ir['user_level'] > 3) { die("403"); } $db->query("DELETE FROM inventory WHERE inv_id={$_GET['ID']}"); print "Item deleted from inventory."; stafflog_add("Deleted inventory ID {$_GET['ID']}"); } $h->endpage(); ?> Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.