Jump to content
MakeWebGames

Admin

Brad

By Brad
in Modification Support

 Share

Recommended Posts

Brad Newbie

Brad

Posted
Posted

i dont understand why most of my admin stuff dont work can someone fix it like edit user dont work.

 

I have added to it but it the lite adminnever works

Brad Newbie

Brad

Posted
  • Author
Posted

Line 1 to 600

 

<?php
/*
MCCodes Lite
admin.php Rev 1.0.1
Copyright (C) 2006 Dabomstew

This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
as published by the Free Software Foundation; either version 2
of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with this program; if not, write to the Software
Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
*/
session_start();
require "global_func.php";
if($_SESSION['loggedin']==0) { header("Location: login.php");exit; }
$userid=$_SESSION['userid'];
require "header.php";
$h = new headers;
$h->startheaders();
include "mysql.php";
global $c;
$is=mysql_query("SELECT u.*,us.* FROM users u LEFT JOIN userstats us ON u.userid=us.userid WHERE u.userid=$userid",$c) or die(mysql_error());
$ir=mysql_fetch_array($is);
check_level();
$fm=money_formatter($ir['money']);
$lv=date('F j, Y, g:i a',$ir['laston']);
$h->userdata($ir,$lv,$fm);
$h->menuarea();
if($ir['user_level'] != 2)
{
print "You sneak, get out of here!";
$h->endpage();
exit;
}
$posta=mysql_real_escape_string(print_r($_POST,1),$c);
$geta=mysql_real_escape_string(print_r($_GET,1),$c);
mysql_query("INSERT INTO adminlogs VALUES('', $userid, '$posta', '$geta', unix_timestamp() )",$c);

switch($_GET['action'])
{
case 'newuser': new_user_form(); break;
case 'newusersub': new_user_submit(); break;
case 'newitem': new_item_form(); break;
case 'newitemsub': new_item_submit(); break;
case 'giveitem': give_item_form(); break;
case 'giveitemsub': give_item_submit(); break;
case 'killitem': kill_item_form(); break;
case 'killitemsub': kill_item_submit(); break;
case 'edititem': edit_item_begin(); break;
case 'edititemform': edit_item_form(); break;
case 'edititemsub': edit_item_sub(); break;
case 'newshop': new_shop_form(); break;
case 'newshopsub': new_shop_submit(); break;
case 'newstock': new_stock_form(); break;
case 'newstocksub': new_stock_submit(); break;
case 'edituser': edit_user_begin(); break;
case 'edituserform': edit_user_form(); break;
case 'editusersub': edit_user_sub(); break;
case 'fedform': fed_user_form(); break;
case 'fedsub': fed_user_submit(); break;
case 'fedeform': fed_edit_form(); break;
case 'fedesub': fed_edit_submit(); break;
case 'mailform': mail_user_form(); break;
case 'mailsub': mail_user_submit(); break;
case 'unfedform': unfed_user_form(); break;
case 'unfedsub': unfed_user_submit(); break;
case 'editnews': newspaper_form(); break;
case 'subnews': newspaper_submit(); break;
case 'editadnews': adnewspaper_form(); break;
case 'subadnews': adnewspaper_submit(); break;
case 'atklogs': view_attack_logs(); break;
case 'index': admin_index(); break;
case 'invbeg': inv_user_begin(); break;
case 'invuser': inv_user_view(); break;
case 'deleinv': inv_delete(); break;
case 'creditform': credit_user_form(); break;
case 'creditsub': credit_user_submit(); break;
case 'ccreditform': ccredit_user_form(); break;
case 'ccreditsub': ccredit_user_submit(); break;
case 'ipform': ip_search_form(); break;
case 'ipsub': ip_search_submit(); break;
case 'massjailip': mass_jail(); break;
case 'itmlogs': view_itm_logs(); break;
case 'cashlogs': view_cash_logs(); break;
case 'maillogs': view_mail_logs(); break;
case 'stafflist': staff_list(); break;
case 'userlevel': userlevel(); break;
case 'userlevelform': userlevelform(); break;
case 'massmailer': massmailer(); break;
case 'ipban': ipban(); break;
case 'ipbancon': ipbancon(); break;
case 'ipbanview': ipbanview(); break;
case 'ipbanremove': ipbanremove(); break;
case 'deluserform': del_user_form(); break;
case 'delusersub': del_user_submit(); break;
default: admin_index(); break;
}
function admin_index()
{
global $ir,$c,$userid;
print "Welcome to the Your Game Name admin panel, [b]{$ir['username']}![/b]

[b]Admin Pad:[/b] 
";
include "admin.news";
print "

<u>Users</u>

[[url='admin.php?action=newuser']Create New User[/url]]

[[url='admin.php?action=deluserform']Delete User[/url]]

[[url='admin.php?action=edituser']Edit User[/url]]

[[url='admin.php?action=mailform']Mail Ban User[/url]]

[[url='admin.php?action=fedform']Jail User[/url]]

[[url='admin.php?action=fedeform']Edit Fedjail Sentence[/url]]

[[url='admin.php?action=unfedform']Unjail User[/url]]

[[url='admin.php?action=invbeg']View User Inventory[/url]]

[[url='admin.php?action=creditform']Credit User Money[/url]]

[[url='admin.php?action=ccreditform']Credit User Crystals[/url]]

[[url='admin.php?action=ipform']Ip Search[/url]]

[[url='admin.php?action=ipban'][b]Ban an IP[/b][/url]]

[[url='admin.php?action=ipbanview'][b]View Banned IP's[/b][/url]]



<u>Items</u>

[[url='admin.php?action=newitem']Create New Item[/url]]

[[url='admin.php?action=giveitem']Give Item To User[/url]]

[[url='admin.php?action=edititem']Edit Item[/url]]

[[url='admin.php?action=killitem']Delete An Item[/url]]


<u>Shops</u>

[[url='admin.php?action=newshop']Create New Shop[/url]]

[[url='admin.php?action=newstock']Add Item To Shop[/url]]


<u>Misc</u>

[[url='admin.php?action=editnews']Edit Announcements[/url]]

[[url='admin.php?action=massmailer']Mass mailer[/url]]


<u>Logs</u>

[[url='admin.php?action=atklogs']Attack Logs[/url]]

[[url='admin.php?action=cashlogs']Cash Xfer Logs[/url]]

[[url='admin.php?action=itmlogs']Item Xfer Logs[/url]]

[[url='admin.php?action=maillogs']Mail Logs[/url]]
";

print "

<u>Critical Tools</u>

[[url='admin.php?action=stafflist']Staff List[/url]]

[[url='admin.php?action=userlevelform']Adjust User Level[/url]]

[[url='admin.php?action=editadnews']Edit Admin Pad[/url]]
";

}

function new_user_form()
{
global $ir, $c;
print "Adding a new user.

<form action='admin.php?action=newusersub' method='post'>
Username: <input type='text' name='username' />

Login Name: <input type='text' name='login_name' />

Email: <input type='text' name='email' />

Password: <input type='text' name='userpass' />

Type: <input type='radio' name='user_level' value='0' />NPC <input type='radio' name='user_level' value='1' checked='checked' />Regular Member

Level: <input type='text' name='level' value='1' />

Money: <input type='text' name='money' value='100' />

Crystals: <input type='text' name='crystals' value='0' />

Gender: <select name='gender' type='dropdown'><option>Male</option><option>Female</option></select>



[b]Stats[/b]

Strength: <input type='text' name='strength' value='10' />

Agility: <input type='text' name='agility' value='10' />

Guard: <input type='text' name='guard' value='10' />

Labour: <input type='text' name='labour' value='10' />

IQ: <input type='text' name='labour' value='10' />



<input type='submit' value='Create User' /></form>";
}
function new_user_submit()
{
global $ir,$c,$userid;
if(!isset($_POST['username']) || !isset($_POST['login_name']) || !isset($_POST['userpass']))
{
print "You missed one or more of the required fields. Please go back and try again.

[url='admin.php?action=newuser']> Back[/url]";
$h->endpage();
exit;
}
$level=abs((int) $_POST['level']);
$money=make_bigint($_POST['money']);
$crys=make_bigint($_POST['crystals']);
$ulevel=abs((int) $_POST['user_level']);
$strength=abs((int) $_POST['strength']);
$agility=abs((int) $_POST['agility']);
$guard=abs((int) $_POST['guard']);
$labour=abs((int) $_POST['labour']);
$iq=abs((int) $_POST['iq']);
$energy=10+$level*2;
$brave=3+$level*2;
$hp=50+$level*50;
mysql_query("INSERT INTO users (username, login_name, userpass, level, money,  user_level, energy, maxenergy, will, maxwill, brave, maxbrave, hp, maxhp, location, gender, signedup, email, crystals) VALUES( '{$_POST['username']}', '{$_POST['login_name']}', md5('{$_POST['userpass']}'), $level, $money, $crystals, $donator, $ulevel, $energy, $energy, 100, 100, $brave, $brave, $hp, $hp, 1, '{$_POST['gender']}', unix_timestamp(), '{$_POST['email']}', -1, $crys)", $c);
$i=mysql_insert_id($c);
mysql_query("INSERT INTO userstats VALUES($i, $strength, $agility, $guard, $labour, $iq)", $c);
print "User created!";
} 

function new_item_form()
{
global $ir,$c;
print "<h3>Adding an item to the game</h3><form action='admin.php?action=newitemsub' method='post'>
Item Name: <input type='text' name='itmname' value='' />

Item Desc.: <input type='text' name='itmdesc' value='' />

Item Type: ".itemtype_dropdown($c,'itmtype')."

Item Buyable: <input type='checkbox' name='itmbuyable' checked='checked' />

Item Price: <input type='text' name='itmbuyprice' />

Item Sell Value: <input type='text' name='itmsellprice' />


[b]Specialized[/b]

Item Energy Regen (food only): <input type='text' name='energy' value='1' />

Power (weapons only): <input type='text' name='damage' value='10' />

Damage Off (armor only): <input type='text' name='Defence' value='10' />

<input type='submit' value='Add Item To Game' /></form>";
}
function new_item_submit()
{
global $ir,$c,$h;
if(!isset($_POST['itmname']) || !isset($_POST['itmdesc']) || !isset($_POST['itmtype'])  || !isset($_POST['itmbuyprice']) || !isset($_POST['itmsellprice']))
{
print "You missed one or more of the fields. Please go back and try again.

[url='admin.php?action=newitem']> Back[/url]";
$h->endpage();
exit;
}
$itmname=mysql_escape($_POST['itmname']);
$itmdesc=mysql_escape($_POST['itmdesc']);
if($_POST['itmbuyable'] == 'on') { $itmbuy=1; } else { $itmbuy=0; }
$m=mysql_query("INSERT INTO items VALUES('',{$_POST['itmtype']},'$itmname','$itmdesc',{$_POST['itmbuyprice']},{$_POST['itmsellprice']},$itmbuy)",$c) or die(mysql_error());
if($_POST['itmtype'] == 1)
{
$i=mysql_insert_id();
mysql_query("INSERT INTO food VALUES($i,{$_POST['energy']})",$c) or die(mysql_error());
}
if($_POST['itmtype'] == 3 || $_POST['itmtype'] == 4)
{
$i=mysql_insert_id();
mysql_query("INSERT INTO weapons VALUES($i,{$_POST['damage']})",$c) or die(mysql_error());
}
if($_POST['itmtype'] == 7)
{
$i=mysql_insert_id();
mysql_query("INSERT INTO armour VALUES($i,{$_POST['Defence']})",$c) or die(mysql_error());
}
print "The {$_POST['itmname']} Item was added to the game.";
}
function give_item_form()
{
global $ir,$c;
print "<h3>Giving Item To User</h3>
<form action='admin.php?action=giveitemsub' method='post'>
User: ".user_dropdown($c,'user')."

Item: ".item_dropdown($c,'item')."

Quantity: <input type='text' name='qty' value='1' />

<input type='submit' value='Give Item' /></form>";
}
function give_item_submit()
{
global $ir,$c;
mysql_query("INSERT INTO inventory VALUES('',{$_POST['item']},{$_POST['user']},{$_POST['qty']})",$c) or die(mysql_error());
print "You gave {$_POST['qty']} of item ID {$_POST['item']} to user ID {$_POST['user']}";
}
function kill_item_form()
{
global $ir,$c,$h,$userid;



print "<h3>Deleting Item</h3>
The item will be permanently removed from the game.

<form action='admin.php?action=killitemsub' method='post'>
Item: ".item_dropdown($c,'item')."

<input type='submit' value='Kill Item' /></form>";
}
function kill_item_submit()
{
global $ir,$c,$h,$userid;


$d=mysql_query("SELECT * FROM items WHERE itmid={$_POST['item']}",$c);
$itemi=mysql_fetch_array($d);
mysql_query("DELETE FROM items WHERE itmid={$_POST['item']}",$c);
mysql_query("DELETE FROM shopitems WHERE sitemITEMID={$_POST['item']}",$c);
mysql_query("DELETE FROM inventory WHERE inv_itemid={$_POST['item']}",$c);
mysql_query("DELETE FROM food WHERE item_id={$_POST['item']}",$c);
mysql_query("DELETE FROM weapons WHERE item_id={$_POST['item']}",$c);
mysql_query("DELETE FROM armour WHERE item_ID={$_POST['item']}",$c);
mysql_query("DELETE FROM itemmarket WHERE imITEM={$_POST['item']}",$c);

print "The {$itemi['itmname']} Item was removed from the game.";
}
function edit_item_begin()
{
global $ir,$c,$h,$userid;



print "<h3>Editing Item</h3>
You can edit any aspect of this item.

<form action='admin.php?action=edititemform' method='post'>
Item: ".item_dropdown($c,'item')."

<input type='submit' value='Edit Item' /></form>";
}
function edit_item_form()
{
global $ir,$c,$h;
$d=mysql_query("SELECT * FROM items WHERE itmid={$_POST['item']}",$c);
$itemi=mysql_fetch_array($d);
$f=mysql_query("SELECT * FROM food WHERE item_id={$_POST['item']}",$c);
if(mysql_num_rows($f) > 0)
{
$a=mysql_fetch_array($f);
$energy=$a['energy'];
}
else
{
$energy=1;
}
$f=mysql_query("SELECT * FROM weapons WHERE item_id={$_POST['item']}",$c);
if(mysql_num_rows($f) > 0)
{
$a=mysql_fetch_array($f);
$damage=$a['damage'];
}
else
{
$damage=1;
}
$f=mysql_query("SELECT * FROM armour WHERE item_ID={$_POST['item']}",$c);
if(mysql_num_rows($f) > 0)
{
$a=mysql_fetch_array($f);
$def=$a['Defence'];
}
else
{
$def=10;
}
print "<h3>Editing Item</h3>
<form action='admin.php?action=edititemsub' method='post'>
<input type='hidden' name='itmid' value='{$_POST['item']}' />
Item Name: <input type='text' name='itmname' value='{$itemi['itmname']}' />

Item Desc.: <input type='text' name='itmdesc' value='{$itemi['itmdesc']}' />

Item Type: ".itemtype_dropdown($c,'itmtype',$itemi['itmtype'])."

Item Buyable: <input type='checkbox' name='itmbuyable'";
if ($itemi['itmbuyable']) { print " checked='checked'"; }
print " />

Item Price: <input type='text' name='itmbuyprice' value='{$itemi['itmbuyprice']}' />

Item Sell Value: <input type='text' name='itmsellprice' value='{$itemi['itmsellprice']}'/>


[b]Specialized[/b]

Item Energy Regen (food only): <input type='text' name='energy' value='$energy' />

Power (weapons only): <input type='text' name='damage' value='$damage' />

Damage Off (armor only): <input type='text' name='Defence' value='$def' />

<input type='submit' value='Edit Item' /></form>";
}
function edit_item_sub()
{
global $ir,$c,$h,$userid;


if(!isset($_POST['itmname']) || !isset($_POST['itmdesc']) || !isset($_POST['itmtype'])  || !isset($_POST['itmbuyprice']) || !isset($_POST['itmsellprice']))
{
print "You missed one or more of the fields. Please go back and try again.

[url='admin.php?action=edititem']> Back[/url]";
$h->endpage();
exit;
}
$itmname=mysql_escape($_POST['itmname']);
$itmdesc=mysql_escape($_POST['itmdesc']);
if($_POST['itmbuyable'] == 'on') { $itmbuy=1; } else { $itmbuy=0; }
mysql_query("DELETE FROM items WHERE itmid={$_POST['itmid']}",$c);
mysql_query("DELETE FROM food WHERE item_id={$_POST['itmid']}",$c);
mysql_query("DELETE FROM weapons WHERE item_id={$_POST['itmid']}",$c);
mysql_query("DELETE FROM armour WHERE item_ID={$_POST['itmid']}",$c);
$m=mysql_query("INSERT INTO items VALUES('{$_POST['itmid']}',{$_POST['itmtype']},'$itmname','$itmdesc',{$_POST['itmbuyprice']},{$_POST['itmsellprice']},$itmbuy)",$c) or die(mysql_error());
if($_POST['itmtype'] == 1)
{
mysql_query("INSERT INTO food VALUES({$_POST['itmid']},{$_POST['energy']})",$c) or die(mysql_error());
}
if($_POST['itmtype'] == 3 || $_POST['itmtype'] == 4)
{
mysql_query("INSERT INTO weapons VALUES({$_POST['itmid']},{$_POST['damage']})",$c) or die(mysql_error());
}
if($_POST['itmtype'] == 7)
{
$i=mysql_insert_id();
mysql_query("INSERT INTO armour VALUES({$_POST['itmid']} ,{$_POST['Defence']})",$c) or die(mysql_error());
}
print "The {$_POST['itmname']} Item was edited successfully.";
}
function new_shop_form()
{
global $ir,$c,$h;
print "<h3>Adding a New Shop</h3>
<form action='admin.php?action=newshopsub' method='post'>
Shop Name: <input type='text' name='sn' value='' />

Shop Desc: <input type='text' name='sd' value='' />

Shop Location: ".location_dropdown($c,"sl")."

<input type='submit' value='Create Shop' /></form>";
}

function new_shop_submit()
{
global $ir,$c,$h;
if(!isset($_POST['sn']) || !isset($_POST['sd']))
{
print "You missed a field, go back and try again.

[url='admin.php?action=newitem']> Back[/url]";
}
else
{
$sn=mysql_escape($_POST['sn']);
$sd=mysql_escape($_POST['sd']);
mysql_query("INSERT INTO shops VALUES('',{$_POST['sl']},'$sn','$sd')",$c);
print "The $sn Shop was successfully added to the game.";
}
}
function new_stock_form()
{
global $ir,$c,$h;
print "<h3>Adding an item to a shop</h3>
<form action='admin.php?action=newstocksub' method='post'>
Shop: ".shop_dropdown($c,"shop")."

Item: ".item_dropdown($c,"item")."

<input type='submit' value='Add Item To Shop' /></form>";
}
function new_stock_submit()
{
global $ir,$c,$h;
mysql_query("INSERT INTO shopitems VALUES('',{$_POST['shop']},{$_POST['item']})",$c);
print "Item ID {$_POST['item']} was successfully added to shop ID {$_POST['shop']}";
}
function edit_user_begin()
{
global $ir,$c,$h,$userid;
print "<h3>Editing User</h3>
You can edit any aspect of this user. 

<form action='admin.php?action=edituserform' method='post'>
User: ".user_dropdown($c,'user')."

<input type='submit' value='Edit User' /></form>
OR enter a user ID to edit:
<form action='admin.php?action=edituserform' method='post'>
User: <input type='text' name='user' value='0' />

<input type='submit' value='Edit User' /></form>";
}
function edit_user_form()
{
global $ir,$c,$h,$userid;

$d=mysql_query("SELECT u.*,us.* FROM users u LEFT JOIN userstats us on u.userid=us.userid WHERE u.userid={$_POST['user']}",$c);
$itemi=mysql_fetch_array($d);
print "<h3>Editing User</h3>
<form action='admin.php?action=editusersub' method='post'>
<input type='hidden' name='userid' value='{$_POST['user']}' />
Username: <input type='text' name='username' value='{$itemi['username']}' />

Login Name: <input type='text' name='login_name' value='{$itemi['login_name']}' />

Duties: <input type='text' name='duties' value='{$itemi['duties']}' />

Staff Notes: <input type='text' name='staffnotes' value='{$itemi['staffnotes']}' />

Level: <input type='text' name='level' value='{$itemi['level']}' />

Money: \$<input type='text' name='money' value='{$itemi['money']}' />

Crystals: \$<input type='text' name='crystals' value='{$itemi['crystals']}' />

Mail Ban: <input type='text' name='mailban' value='{$itemi['mailban']}' />

Mail Ban Reason: <input type='text' name='mb_reason' value='{$itemi['mb_reason']}' />

<h4>Stats</h4>
Strength: <input type='text' name='strength' value='{$itemi['strength']}' />

Agility: <input type='text' name='agility' value='{$itemi['agility']}' />

Guard: <input type='text' name='guard' value='{$itemi['guard']}' />

Labour: <input type='text' name='labour' value='{$itemi['labour']}' />

IQ: <input type='text' name='IQ' value='{$itemi['IQ']}' />

<input type='submit' value='Edit User' /></form>";
}
function edit_user_sub()
{

global $ir,$c,$h,$userid;
$go=0;
if(!isset($_POST['level'])) { $go=1; }
if(!isset($_POST['money'])) { $go=1; }
if(!isset($_POST['crystals'])) { $go=1; }
if(!isset($_POST['strength'])) { $go=1; }
if(!isset($_POST['agility'])) { $go=1; }
if(!isset($_POST['guard'])) { $go=1; }
if(!isset($_POST['labour'])) { $go=1; }
if(!isset($_POST['IQ'])) { $go=1; }
if(!isset($_POST['username'])) { $go=1; }
if(!isset($_POST['login_name'])) { $go=1; }
if($go)
{
print "You did not fully fill out the form.";
new_user_form();
}
else
{
$_POST['level']=(int) $_POST['level'];
$_POST['strength']=abs((int) $_POST['strength']);
$_POST['agility']=abs((int) $_POST['agility']);
$_POST['guard']=abs((int) $_POST['guard']);
$_POST['labour']=abs((int) $_POST['labour']);
$_POST['IQ']=abs((int) $_POST['IQ']);
$_POST['money']=make_bigint($_POST['money'],0);
$_POST['crystals']=make_bigint($_POST['crystals'],0);
$_POST['mailban']=(int) $_POST['mailban'];
//check for username usage
$u=mysql_query("SELECT * FROM users WHERE username='{$_POST['username']}' and userid != {$_POST['userid']}",$c);
if(mysql_num_rows($u) != 0)
{
print "That username is in use, choose another.";
print "
[url='admin.php?action=edituser']> Back[/url]";
$h->endpage();
exit;
}
$oq=mysql_query("SELECT * FROM users WHERE userid={$_POST['userid']}",$c);
$rm=mysql_fetch_array($oq);
$energy=10+$_POST['level']*2;
$nerve=3+$_POST['level']*2;
$hp=50+$_POST['level']*50;
mysql_query("UPDATE users SET username='{$_POST['username']}', level={$_POST['level']}, money={$_POST['money']}, energy=$energy, brave=$nerve, maxbrave=$nerve, maxenergy=$energy, hp=$hp, maxhp=$hp, hospital={$_POST['hospital']}, duties='{$_POST['duties']}', staffnotes='{$_POST['staffnotes']}', mailban={$_POST['mailban']}, mb_reason='{$_POST['mb_reason']}', login_name='{$_POST['login_name']}', crystals='{$_POST['crystals']}' WHERE userid={$_POST['userid']}", $c);
mysql_query("UPDATE userstats SET strength={$_POST['strength']}, agility={$_POST['agility']}, guard={$_POST['guard']}, labour={$_POST['labour']}, IQ={$_POST['IQ']} WHERE userid={$_POST['userid']}", $c);

print "User edited....";

} }

function fed_user_form()
{
global $ir,$c,$h,$userid;
print "<h3>Jailing User</h3>
The user will be put in fed jail and will be unable to do anything in the game.

<form action='admin.php?action=fedsub' method='post'>
User: ".user_dropdown($c,'user',$_GET['XID'])."

Days: <input type='text' name='days' />

Reason: <input type='text' name='reason' />

<input type='submit' value='Jail User' /></form>";
}
function fed_user_submit()
{
global $ir,$c,$h,$userid;
$re=mysql_query("UPDATE users SET fedjail=1 WHERE userid={$_POST['user']}",$c);
if(mysql_affected_rows($c))
{
mysql_query("INSERT INTO fedjail VALUES('',{$_POST['user']},{$_POST['days']},$userid,'".
mysql_real_escape_string($_POST['reason'],$c)."')",$c);
}
mysql_query("INSERT INTO jaillogs VALUES('',$userid, {$_POST['user']}, {$_POST['days']}, '{$_POST['reason']}',unix_timestamp())",$c);
print "User jailed.";
}
function fed_edit_form()
{
global $ir,$c,$h,$userid;
print "<h3>Editing Fedjail Reason</h3>
You are editing a player's sentence in fed jail.

<form action='admin.php?action=fedesub' method='post'>
User: ".fed_user_dropdown($c,'user')."

Days: <input type='text' name='days' />

Reason: <input type='text' name='reason' />

<input type='submit' value='Jail User' /></form>";
}
function fed_edit_submit()
{
global $ir,$c,$h,$userid;

mysql_query("DELETE FROM fedjail WHERE fed_userid={$_POST['user']}",$c);
mysql_query("INSERT INTO fedjail VALUES('',{$_POST['user']},{$_POST['days']},$userid,'".
mysql_real_escape_string($_POST['reason'],$c)."')",$c);

mysql_query("INSERT INTO jaillogs VALUES('',$userid, {$_POST['user']}, {$_POST['days']}, '{$_POST['reason']}',unix_timestamp())",$c);
print "User's sentence edited.";
}

function mail_user_form()
{
global $ir,$c,$h,$userid;
print "<h3>Mail Banning User</h3>
The user will be banned from the mail system.

<form action='admin.php?action=mailsub' method='post'>
User: ".user_dropdown($c,'user',$_GET['ID'])."

Days: <input type='text' name='days' />

Reason: <input type='text' name='reason' />

<input type='submit' value='Mailban User' /></form>";
}
function mail_user_submit()
{
global $ir,$c,$h,$userid;
$_POST['reason']=stripslashes($_POST['reason']);
$re=mysql_query("UPDATE users SET mailban={$_POST['days']},mb_reason='{$_POST['reason']}' WHERE userid={$_POST['user']}",$c);
event_add($_POST['user'],"You were banned from mail for {$_POST['days']} day(s) for the following reason: {$_POST['reason']}",$c);
print "User mail banned.";
}
function unfed_user_form()
{
global $ir,$c,$h,$userid;
print "<h3>Unjailing User</h3>
The user will be taken out of fed jail.

<form action='admin.php?action=unfedsub' method='post'>
User: ".fed_user_dropdown($c,'user')."

<input type='submit' value='Unjail User' /></form>";
Brad Newbie

Brad

Posted
  • Author
Posted

Line 601 to 991

 

}
function unfed_user_submit()
{
global $ir,$c,$h,$userid;
mysql_query("UPDATE users SET fedjail=0 WHERE userid={$_POST['user']}",$c);
mysql_query("DELETE FROM fedjail WHERE fed_userid={$_POST['user']}",$c);
mysql_query("INSERT INTO unjaillogs VALUES('',$userid, {$_POST['user']}, unix_timestamp())",$c);
print "User unjailed.";
}
function newspaper_form()
{
global $ir,$c,$h,$userid;
$q=mysql_query("SELECT * FROM papercontent LIMIT 1",$c);
$news=mysql_result($q,0,0);
print "<h3>Editing Announcements</h3><form action='admin.php?action=subnews' method='post'>
<textarea rows='7' cols='35' name='newspaper'>$news</textarea>
<input type='submit' value='Change' /></form>";
}
function newspaper_submit()
{
global $ir,$c,$h,$userid;
$news=$_POST['newspaper'];
mysql_query("UPDATE papercontent SET content='$news'",$c);
print "Announcements updated!";
}

function view_attack_logs()
{
global $ir,$c,$h,$userid;
print "<h3>Attack Logs</h3>
<table width=75%><tr style='background:gray'><th>Time</th><th>Detail</th></tr>";
$q=mysql_query("SELECT * FROM attacklogs ORDER BY time DESC",$c);
while($r=mysql_fetch_array($q))
{
print "<tr><td>".date('F j, Y, g:i:s a',$r['time'])."</td><td>{$r['attacker']} attacked {$r['attacked']} and {$r['result']} and stole \${$r['stole']}</td></tr>";
}
print "</table>";
}
function inv_user_begin()
{
global $ir,$c,$h,$userid;

print "<h3>Viewing User Inventory</h3>
You may browse this user's inventory.

<form action='admin.php?action=invuser' method='post'>
User: ".user_dropdown($c,'user')."

<input type='submit' value='View Inventory' /></form>";
}
function inv_user_view()
{
global $ir,$c,$h,$userid;
$inv=mysql_query("SELECT iv.*,i.*,it.* FROM inventory iv LEFT JOIN items i ON iv.inv_itemid=i.itmid LEFT JOIN itemtypes it ON i.itmtype=it.itmtypeid WHERE iv.inv_userid={$_POST['user']}",$c);
if (mysql_num_rows($inv) == 0)
{
print "[b]This person has no items![/b]";
}
else
{
print "[b]Their items are listed below.[/b]

<table width=100%><tr style='background-color:gray;'><th>Item</th><th>Sell Value</th><th>Total Sell Value</th><th>Links</th></tr>";
while($i=mysql_fetch_array($inv))
{
print "<tr><td>{$i['itmname']}";
if ($i['inv_qty'] > 1)
{
print "x{$i['inv_qty']}";
}
print "</td><td>\${$i['itmsellprice']}</td><td>";
print "$".($i['itmsellprice']*$i['inv_qty']);
print "</td><td>[[url='admin.php?action=deleinv&ID={$i[']Delete[/url]]";
print "</td></tr>";
}
print "</table>";
}
}
function inv_delete()
{
global $ir,$c,$h,$userid;

mysql_query("DELETE FROM inventory WHERE inv_id={$_GET['ID']}",$c);
print "Item deleted from inventory.";
}
function credit_user_form()
{
global $ir,$c,$h,$userid;
print "<h3>Crediting User</h3>
You can give a user money.

<form action='admin.php?action=creditsub' method='post'>
User: ".user_dropdown($c,'user')."

Money: <input type='text' name='money' />

<input type='submit' value='Credit User' /></form>";
}
function credit_user_submit()
{
global $ir,$c,$h,$userid;
$_POST['money'] = (int) $_POST['money'];

mysql_query("UPDATE users u SET money=money+{$_POST['money']}  WHERE u.userid={$_POST['user']}",$c);
print "User credited.";
}
function ccredit_user_form()
{
global $ir,$c,$h,$userid;
print "<h3>Crediting User Crystals</h3>
You can give a user crystals.

<form action='admin.php?action=ccreditsub' method='post'>
User: ".user_dropdown($c,'user')."

Crystals: <input type='text' name='crystals' />

<input type='submit' value='Credit User' /></form>";
}
function ccredit_user_submit()
{
global $ir,$c,$h,$userid;
$_POST['crystals'] = (int) $_POST['crystals'];

mysql_query("UPDATE users u SET crystals=crystals+{$_POST['crystals']}  WHERE u.userid={$_POST['user']}",$c);
print "User credited.";
}
function ip_search_form()
{
global $ir,$c,$h,$userid;
print "<h3>IP Search</h3>
<form action='admin.php?action=ipsub' method='post'>
IP: <input type='text' name='ip' value='...' />

<input type='submit' value='Search' /></form>";
}
function ip_search_submit()
{
global $ir,$c,$h,$userid;
print "Searching for users with the IP: [b]{$_POST['ip']}[/b]

<table width=75%><tr style='background:gray'> <th>User</th> <th>Level</th> <th>Money</th> </tr>";
$q=mysql_query("SELECT * FROM users WHERE lastip='{$_POST['ip']}'",$c);
$ids=array();
while($r=mysql_fetch_array($q))
{
$ids[]=$r['userid'];
print "\n<tr> <td> [url='viewuser.php?u={$r[']{$r['username']}[/url]</td> <td> {$r['level']}</td> <td>{$r['money']}</td> </tr>";
}
print "</table>

[b]Mass Jail[/b]

<form action='admin.php?action=massjailip' method='post'>
<input type='hidden' name='ids' value='".implode(",",$ids)."' /> Days: <input type='text' name='days' value='300' /> 

Reason: <input type='text' name='reason' value='Same IP users, Mail [email][email protected][/email] with your case.' />

<input type='submit' value='Mass Jail' /></form>";
}
function mass_jail()
{
global $ir,$c,$h,$userid;
$ids=explode(",",$_POST['ids']);
foreach($ids as $id)
{
$re=mysql_query("UPDATE users SET fedjail=1 WHERE userid={$id}",$c);
if(mysql_affected_rows($c))
{
mysql_query("INSERT INTO fedjail VALUES('',{$id},{$_POST['days']},$userid,'".
mysql_real_escape_string($_POST['reason'],$c)."')",$c);
}
mysql_query("INSERT INTO jaillogs VALUES('',$userid, {$id}, {$_POST['days']}, '{$_POST['reason']}',unix_timestamp())",$c);
print "User jailed : $id.";

}
}

function view_itm_logs()
{
global $ir,$c,$h,$userid;
print "<h3>Item Xfer Logs</h3>
<table width=75%><tr style='background:gray'><th>Time</th><th>Detail</th></tr>";
$q=mysql_query("SELECT ix.*,u1.username as sender, u2.username as sent,i.itmname as item FROM itemxferlogs ix LEFT JOIN users u1 ON ix.ixFROM=u1.userid LEFT JOIN users u2 ON ix.ixTO=u2.userid LEFT JOIN items i ON i.itmid=ix.ixITEM ORDER BY ix.ixTIME DESC",$c);
while($r=mysql_fetch_array($q))
{
print "<tr><td>" . date("F j, Y, g:i:s a",$r['ixTIME']) . "</td><td>{$r['sender']} sent {$r['ixQTY']}  {$r['item']}(s) to {$r['sent']} </td></tr>";
}
print "</table>";
}


function view_cash_logs()
{
global $ir,$c,$h,$userid;
print "<h3>Cash Xfer Logs</h3>
<table width=75% border=1> <tr style='background:gray'> <th>ID</th> <th>Time</th> <th>User From</th> <th>User To</th> <th>Multi?</th> <th>Amount</th> <th></th> </tr>";
$q=mysql_query("SELECT cx.*,u1.username as sender, u2.username as sent FROM cashxferlogs cx LEFT JOIN users u1 ON cx.cxFROM=u1.userid LEFT JOIN users u2 ON cx.cxTO=u2.userid ORDER BY cx.cxTIME DESC",$c) or die(mysql_error()."
"."SELECT cx.*,u1.username as sender, u2.username as sent FROM cashxferlogs cx LEFT JOIN users u1 ON cx.cxFROM=u1.userid LEFT JOIN users u2 ON cx.cxTO=u2.userid ORDER BY cx.cxTIME DESC");
while($r=mysql_fetch_array($q))
{
if($r['cxFROMIP'] == $r['cxTOIP']) { $m="<span style='color:red;font-weight:800'>MULTI</span>"; } else { $m=""; }
print "<tr><td>{$r['cxID']}</td> <td>" . date("F j, Y, g:i:s a",$r['cxTIME']) . "</td><td>[url='viewuser.php?u={$r[']{$r['sender']}[/url] [{$r['cxFROM']}] (IP: {$r['cxFROMIP']}) </td><td>[url='viewuser.php?u={$r[']{$r['sent']}[/url] [{$r['cxTO']}] (IP: {$r['cxTOIP']}) </td> <td>$m</td> <td> \${$r['cxAMOUNT']}</td> <td> [[url='admin.php?action=fedform&XID={$r[']Jail Sender[/url]] [[url='admin.php?action=fedform&XID={$r[']Jail Receiver[/url]]</td> </tr>";
}
print "</table>";
}
function view_mail_logs()
{
global $ir,$c,$h,$userid;
$_GET['st']=abs((int) $_GET['st']);
$rpp=100;

print "<h3>Mail Logs</h3>
<table width=75% border=2> \n<tr style='background:gray'> <th>ID</th> <th>Time</th> <th>User From</th> <th>User To</th> <th width>Subj</th> <th width=30%>Msg</th> <th></th> </tr>";
$q=mysql_query("SELECT m.*,u1.username as sender, u2.username as sent FROM mail m LEFT JOIN users u1 ON m.mail_from=u1.userid LEFT JOIN users u2 ON m.mail_to=u2.userid WHERE m.mail_from != 0 ORDER BY m.mail_time DESC LIMIT {$_GET['st']},$rpp",$c) or die(mysql_error()."
"."SELECT cx.*,u1.username as sender, u2.username as sent FROM cashxferlogs cx LEFT JOIN users u1 ON cx.cxFROM=u1.userid LEFT JOIN users u2 ON cx.cxTO=u2.userid ORDER BY cx.cxTIME DESC LIMIT {$_GET['st']},$rpp");
while($r=mysql_fetch_array($q))
{
print "\n<tr><td>{$r['mail_id']}</td> <td>" . date("F j, Y, g:i:s a",$r['mail_time']) . "</td><td>{$r['sender']} [{$r['mail_from']}] </td> <td>{$r['sent']} [{$r['mail_to']}] </td> \n<td> {$r['mail_subject']}</td> \n<td>{$r['mail_text']}</td> <td> [[url='admin.php?action=mailform&XID={$r[']MailBan Sender[/url]] [[url='admin.php?action=mailform&XID={$r[']MailBan Receiver[/url]]</td> </tr>";
}
print "</table>

";
$q2=mysql_query("SELECT mail_id FROM mail WHERE mail_from != 0",$c);
$rs=mysql_num_rows($q2);
$pages=ceil($rs/20);
print "Pages: ";
for($i=1;$i<=$pages;$i++)
{
$st=($i-1)*20;
print "[url='admin.php?action=maillogs&st=$st']$i[/url]";
if($i % 7 == 0) { print "
\n"; }
}
}
function staff_list()
{
global $ir,$c,$h,$userid;

print "<h3>Staff Management</h3>";
print "[b]Admins[/b]

<table width=80%><tr style='background:gray'> <th>User</th> <th>Online?</th> <th>Links</th> </tr>";
$q=mysql_query("SELECT * FROM users WHERE user_level=2 ORDER BY userid ASC", $c);
while($r=mysql_fetch_array($q))
{
if($r['laston'] >= time()-15*60) { $on="<font color=green>[b]Online[/b]</font>"; } else { $on="<font color=red>[b]Offline[/b]</font>"; }
print "\n<tr> <td>[url='viewuser.php?u={$r[']{$r['username']}[/url] [{$r['userid']}]</td> <td>$on</td> <td>[url='admin.php?action=userlevel&level=1&ID={$r[']Member[/url]</td></tr>";
}
print "</table>";

}
function userlevel()
{
global $ir,$c,$h,$userid;

$_GET['level']=abs((int) $_GET['level']);
$_GET['ID']=abs((int) $_GET['ID']);
mysql_query("UPDATE users SET user_level={$_GET['level']} WHERE userid={$_GET['ID']}", $c);
print "User's level adjusted.";
}
function userlevelform()
{
global $ir,$c,$h,$userid;


print "<h3>User Level Adjust</h3>
<form action='admin.php' method='get'>
<input type='hidden' name='action' value='userlevel'>
User: ".user_dropdown($c,'ID')."

User Level:

<input type='radio' name='level' value='0' /> NPC

<input type='radio' name='level' value='1' /> Member

<input type='radio' name='level' value='3' /> Helper

<input type='radio' name='level' value='4' /> Legend

<input type='radio' name='level' value='2' /> Admin

<input type='submit' value='Adjust' /></form>";
}
function massmailer()
{
global $ir,$c,$userid;
if($_POST['text'])
{
$_POST['text']=nl2br(strip_tags($_POST['text']));
$subj="This is a mass mail from the administration";
if($_POST['cat']==1)
$q=mysql_query("SELECT * FROM users ",$c);
else if($_POST['cat']==2)
$q=mysql_query("SELECT * FROM users WHERE user_level > 1",$c);
else if($_POST['cat']==3)
$q=mysql_query("SELECT * FROM users WHERE user_level=2",$c);
else
$q=mysql_query("SELECT * FROM users WHERE user_level={$_POST['level']}",$c);
while($r=mysql_fetch_array($q))
{
mysql_query("INSERT INTO mail VALUES('', 0, 0, {$r['userid']}, unix_timestamp(),'$subj','{$_POST['text']}')",$c);
print "Mass mail sent to {$r['username']}.
";
}
print "Mass mail sending complete!

[url='admin.php']> Back[/url]";
}
else
{
print "[b]Mass Mailer[/b]

<form action='admin.php?action=massmailer' method='post'> Text: 

<textarea name='text' rows='7' cols='40'></textarea>

<input type='radio' name='cat' value='1' /> Send to all members <input type='radio' name='cat' value='2' /> Send to staff only <input type='radio' name='cat' value='3' /> Send to admins only

OR Send to user level:

<input type='radio' name='level' value='1' /> Member

<input type='radio' name='level' value='2' /> Admin

<input type='submit' value='Send' /></form>";
}
}
function ipban()
{
?><h3>Ban an IP</h3>
<form action='admin.php?action=ipbancon' method='post'>
<input type="text" name="ip" />
<input type='submit' value='BAN!' /></form>
<hr width="50%" />
[url="admin.php?action=ipbanview"][b]Click to view current IP bans[/b][/url]
<?
}
function ipbancon()
{
$filename='/home/bradlll/public_html/ipbans/'.$_POST['ip'];
$file=fopen($filename,w) or die("Error Creating File");
fclose($file);
?>Done 

[url="admin.php?action=ipbanview"][b]Back[/b][/url]<?
}
function ipbanview()
{
$dir = "/home/bradlll/public_html/ipbans/";
?>
<h3>Viewing banned IP's</h3>
<table border="1">
<tr>
<th>
IP
</th>
<th>
Delete?
</th>
</tr><?
if (is_dir($dir)) {
   if ($dh = opendir($dir)) {
       while (($file = readdir($dh)) !== false) {
	if (strlen($file)>4)
	{
           ?>
           <tr>
           <td>
           <? echo $file; ?>
           </td>
           <td>
           [url="admin.php?action=ipbanremove&ip=<? echo $file; ?>"][b]Delete[/b][/url]
           </td>
           </tr>
           <?
		}
       }
       closedir($dh);
   }
}
?></table>

[url="admin.php"][b]Back[/b][/url]
<?

}
function ipbanremove()
{
$file=$_GET['ip'];
$filepath = "/home/bradlll/public_html/ipbans/".$file;
if (! unlink ($filepath)) {
  echo "Couldn't delete file";
} else {
   echo "Removed IP: ".$file;
}
?>

[url="admin.php?action=ipbanview"][b]Back[/b][/url]<?
}
function del_user_form()
{
global $ir,$c,$h,$userid;
print "<h3>Deleting User</h3>
The user will be deleted.

<form action='admin.php?action=delusersub' method='post'>
User: ".user_dropdown($c,'user',$_GET['XID'])."

<input type='submit' value='Delete User' /></form>";
}
function del_user_submit()
{
global $ir,$c,$h,$userid;
mysql_query("DELETE FROM users WHERE userid={$_POST['user']}",$c);
print "User deleted.";
}
function adnewspaper_form()
{
global $ir,$c,$h,$userid;

print "<h3>Editing Admin Pad</h3><form action='admin.php?action=subadnews' method='post'>
<textarea rows='7' cols='35' name='newspaper'>";
include "admin.news";
print "</textarea>
<input type='submit' value='Change' /></form>";
}
function adnewspaper_submit()
{
global $ir,$c,$h,$userid;
$l=fopen("admin.news","w");
fwrite($l,stripslashes($_POST['newspaper']));
fclose($l);
print "Admin Pad updated!";
}
$h->endpage();
?>

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
 Share
Go to topic listing
×
×
  • Create New...