Jump to content
MakeWebGames

Recommended Posts

Posted

It's not really an error, it's the default of the switch(), that is why the links all have something on the end e.g. “file.php?action=gwar” just call the file, and you get that echoed out.

Posted

look in your switch area make sure you have all the functions and look at the link in which you clicked and make sure it is calling the correct path to the action in which it says...

Post your page and maybe someone can help hard to know when you havent posted lol

Posted

Need some more information, what link are you clicking on, judging from the staff_gangs.php there is around ten.

Also have you changed your smenu.php any or even the staff_gangs.php?

Looking at the code there should be no reason why it's reverting to the default.

Posted

http://samplev2.mccodes.com/staff_gangs.php?action=grecord

Please post your staff_gangs.php file ill take a look but the v2 sample it works (obviously not submitting data due to the submits being removed because of abusers).

Although i did find a minor bug in the stafflist.php so replace the existing file with this:

<?php
include_once "globals.php";
	$staff = array();
$q = $db->query("SELECT `userid`,`user_level`,`main`,`level`,`username`,`laston` FROM `users` WHERE `user_level` IN(2,3,5) ORDER BY `userid` ASC");
    while ( $r = $db->fetch_row($q) ) {
	$staff[$r['userid']] = $r;
    }
  echo '
[b]Admins[/b]


<table width="75%" cellspacing="1" cellpadding="1" class="table">
	<tr style="background:gray">
<th>User</th>
<th>Level</th>
<th>Money</th>
<th>Last Seen</th>
<th>Status</th>
	</tr>
  ';

    foreach ( $staff as  $r ) {
         if ( $r['user_level'] == 2 ) {
	$on = ( $r['laston'] >= ($_SERVER['REQUEST_TIME'] - 15) * 60 )?'<span style="color: green;">Online</span>':'<span style="color: green;">Offline</span>';
  echo '
	<tr>
<td>[url="viewuser.php?u='.$r['userid'].'"]'.$r['username'].'[/url] ['.$r['userid'].']</td>
<td>'.$r['level'].'</td>
<td>'.money_formatter($r['money'],'$').'</td>
<td>'.date("F j, Y, g:i:s a",$r['laston']).'</td>
<td>'.$on.'</td>
	</tr>
  ';
         }
    }
  echo '</table>

[b]Secretaries[/b]


<table width="75%" cellspacing="1" cellpadding="1" class="table">
	<tr style="background:gray">
<th>User</th>
<th>Level</th>
<th>Money</th>
<th>Last Seen</th>
<th>Status</th>
	</tr>
  ';
    foreach ( $staff as  $r ) {
         if ( $r['user_level'] == 3 ) {
	$on = ( $r['laston'] >= ($_SERVER['REQUEST_TIME'] - 15) * 60 )?'<span style="color: green;">Online</span>':'<span style="color: green;">Offline</span>';
  echo '
	<tr>
<td>[url="viewuser.php?u='.$r['userid'].'"]'.$r['username'].'[/url] ['.$r['userid'].']</td>
<td>'.$r['level'].'</td>
<td>'.money_formatter($r['money'],'$').'</td>
<td>'.date("F j, Y, g:i:s a",$r['laston']).'</td>
<td>'.$on.'</td>
	</tr>
  ';
         }
    }
  echo '</table>

[b]Assistants[/b]


<table width="75%" cellspacing="1" cellpadding="1" class="table">
	<tr style="background:gray">
<th>User</th>
<th>Level</th>
<th>Money</th>
<th>Last Seen</th>
<th>Status</th>
	</tr>
  ';
    foreach( $staff as  $r ) {
         if ( $r['user_level'] == 5 ) {
	$on = ( $r['laston'] >= ($_SERVER['REQUEST_TIME'] - 15) * 60 )?'<span style="color: green;">Online</span>':'<span style="color: green;">Offline</span>';
  echo '
	<tr>
<td>[url="viewuser.php?u='.$r['userid'].'"]'.$r['username'].'[/url] ['.$r['userid'].']</td>
<td>'.$r['level'].'</td>
<td>'.money_formatter($r['money'],'$').'</td>
<td>'.date("F j, Y, g:i:s a",$r['laston']).'</td>
<td>'.$on.'</td>
	</tr>
  ';
         }
    }
  echo '</table>';
	$h->endpage();
?>

I'm surprised no one noticed that :P

Posted
<?php
include_once "sglobals.php";
//This contains gang stuffs
switch($_GET['action']) {
	case 'grecord': admin_gang_record(); break;
	case 'gcredit': admin_gang_credit(); break;
	case 'gwar': admin_gang_wars(); break;
	case 'gwardelete': admin_gang_wardelete(); break;
	case 'gedit': admin_gang_edit_begin(); break;
	case 'gedit_name': admin_gang_edit_name(); break;
	case 'gedit_prefix': admin_gang_edit_prefix(); break;
	case 'gedit_finances': admin_gang_edit_finances(); break;
	case 'gedit_staff': admin_gang_edit_staff(); break;
	case 'gedit_capacity': admin_gang_edit_capacity(); break;
	case 'gedit_crime': admin_gang_edit_crime(); break;
	case 'gedit_ament': admin_gang_edit_ament(); break;
	default: echo 'Error: This script requires an action.'; break;
}
function admin_gang_record() {
global $db,$ir, $userid,$c,$h;
     if ( !in_array($ir['user_level'],array(2,3,7)) ) {
  echo 'You cannot access this area.
> [url="index.php"]Go Back[/url]';
  die($h->endpage());
     }
	$gang = ( isset($_GET['gang'])&&is_numeric($_GET['gang']) )?abs(intval($_GET['gang'])):'';
	$_GET['reason'] = ( isset($_GET['reason'])&&preg_match("/^[a-z0-9_]+([\\s]{1}[a-z0-9_]|[a-z0-9_])+$/i", $_GET['reason']) )?strip_tags($db->escape($_GET['reason'])):'';
         if ( $gang ) {
$q = $db->query("SELECT `gangNAME`,`gangDESC`,`gangPREF`,`gangMONEY`,`gangCRYSTALS`,`gangRESPECT`,`gangPRESIDENT`,`gangVICEPRES`,`gangCAPACITY`,`gangCRIME`,`gangCHOURS`,`gangAMENT` FROM `gangs` WHERE `gangID`  = $gang");
      if ( $db->num_rows($q) == 0 ) {
	$_GET['gang'] = 0;
	admin_gang_record();
      } else if (!$_GET['reason']) {
	$_GET['gang'] = 0;
	admin_gang_record();
      } else {
$r = $db->fetch_row($q);
  echo "
<table width='100%' border='1'>
	<tr>
<td>
Gang Name: {$r['gangNAME']}


Gang Description: {$r['gangDESC']}


Prefix: {$r['gangPREF']}


Money: {$r['gangMONEY']}


Crystals: {$r['gangCRYSTALS']}


Respect: {$r['gangRESPECT']}


President: {$r['gangPRESIDENT']}


Vice-President: {$r['gangVICEPRES']}


Capacity: {$r['gangCAPACITY']}


Crime: {$r['gangCRIME']}


Hours Left: {$r['gangCHOURS']}


Annnouncement: {$r['gangAMENT']}
</td>
	</tr>
</table>
  ";
	stafflog_add($ir['username'].' looked at gang id '.$r['gangID'].' ('.$r['gangNAME'].')\'s record. with the reason '.$_GET['reason']);
      }
         } else {
echo "
<form action='staff_gangs.php?action=grecord' method='get'>
<h4>Gang Record</h4>
Enter a gang ID to view the record of: <input type='text' name='gang' value='1' />

Reason for viewing: <input type='text' name='reason' value='' />

<input type='submit' value='Go' />
</form>
  ";
         }
}
function admin_gang_credit() {
global $db,$ir, $userid,$c,$h;
     if ( !in_array($ir['user_level'],array(2,3,7)) ) {
  echo 'You cannot access this area.
> [url="index.php"]Go Back[/url]';
  die($h->endpage());
     }
	$gang = ( isset($_POST['gang'])&&is_numeric($_POST['gang']) )?abs(intval($_POST['gang'])):'';
	$money = ( isset($_POST['money'])&&is_numeric($_POST['money']) )?abs(intval($_POST['money'])):0;
	$crystals = ( isset($_POST['crystal'])&&is_numeric($_POST['crystal']) )?abs(intval($_POST['crystal'])):0;
	$reason = ( isset($_POST['reason'])&&preg_match("/^[a-z0-9_]+([\\s]{1}[a-z0-9_]|[a-z0-9_])+$/i", $_POST['reason']) )?strip_tags($db->escape($_POST['reason'])):'';
         if (  ($money != 0 OR $crystals != 0) && ($gang && $reason) ) {
$db->query("UPDATE `gangs` SET `gangMONEY` = `gangMONEY` + $money, `gangCRYSTALS` = `gangCRYSTALS` + $crystals WHERE `gangID` = $gang");
  echo "The gang was successfully credited.";
	stafflog_add("{$ir['username']} credited gang ID {$gang} with {$money} money and/or {$crystals} crystals with the reason {$reason}");
         } else if ( $gang && ($money != 0 OR $crystals != 0) ) {
$q = $db->query("SELECT `gangNAME` FROM `gangs` WHERE `gangID` = $gang");
  echo "
You are crediting ".$db->fetch_single($q)." with \$$money and/or $crystals crystals.


<form action='staff_gangs.php?action=gcredit' method='post'>
<input type='hidden' name='gang' value='$gang' />
<input type='hidden' name='money' value='$money' />
<input type='hidden' name='crystals' value='$crystals' />
Reason: <input type='text' name='reason' />


<input type='submit' value='Credit' />
</form>
  ";
         } else {
  echo "
<h3>Credit Gang</h3>
<form action='staff_gangs.php?action=gcredit' method='post'>
<table border='1' width='50%'>
	<tr>
<td align='right'>Gang's ID:</td> <td align='left'><input type='text' name='gang' value='1' /></td>
	</tr>
	<tr>
<td align='right'>Money:</td> <td align='left'><input type='text' name='money' value='1000' /></td>
	</tr>
	<tr>
<td align='right'>Crystals:</td> <td align='left'><input type='text' name='crystals' value='10' /></td>
	</tr>
	<tr>
<td align='center' colspan='2'> <input type='submit' value='Credit' /> </td>
	</tr>
</table>
  ";
         }
}
function admin_gang_wars() {
global $db,$ir, $userid,$c,$h;
     if ( !in_array($ir['user_level'],array(2,3,7)) ) {
  echo 'You cannot access this area.
> [url="index.php"]Go Back[/url]';
  die($h->endpage());
     }
  echo '
<h3>Manage Gang Wars</h3>
<table width="75%" border="2">
  ';
$q = $db->query("SELECT w.`warID`,`warDECLARED`,`warDECLARER`,g1.`gangNAME` as `declarer`, g1.`gangRESPECT` as `drespect`, g2.`gangNAME` as `defender`, g2.`gangRESPECT` as `frespect` FROM `gangwars` w LEFT JOIN `gangs` g1 ON w.`warDECLARER` = g1.`gangID` LEFT JOIN `gangs` g2 ON w.`warDECLARED` = g2.`gangID`");
     while ( $r = $db->fetch_row($q) ) {
  echo "
	<tr>
<td width=40%>[url='gangs.php?action=view&ID={$r[']{$r['declarer']}[/url] [{$r['drespect']} respect]</a></td>
<td width=10%>vs.</td>
<td width=40%>[url='gangs.php?action=view&ID={$r[']{$r['defender']}[/url] [{$r['frespect']} respect]</a></td>
<td>[[url='staff_gangs.php?action=gwardelete&war={$r[']Delete[/url]]</td>
	</tr>
  ";
     }
  echo '</table>';
}
function admin_gang_wardelete() {
global $db,$ir, $userid,$h,$c;
     if ( !in_array($ir['user_level'],array(2,3,7)) ) {
  echo 'You cannot access this area.
> [url="index.php"]Go Back[/url]';
  die($h->endpage());
     }
	$_GET['war'] = ( isset($_GET['war'])&&is_numeric($_GET['war']) )?abs(intval($_GET['war'])):'';
$q = $db->query("SELECT w.`warDECLARED`,`warDECLARER`,g1.`gangNAME` as `declarer`, g1.`gangRESPECT` as `drespect`, g2.`gangNAME` as `defender`, g2.`gangRESPECT` as `frespect` FROM `gangwars` w LEFT JOIN `gangs` g1 ON w.`warDECLARER` = g1.`gangID` LEFT JOIN `gangs` g2 ON w.`warDECLARED` = g2.`gangID` WHERE w.`warID` = {$_GET['war']}");
    if ( $db->num_rows($q) == 0 ) {
  echo 'Invalid war.
> [url="staff_gangs.php?action=gwar"]Go Back[/url]';
  die($h->endpage());
    }
$r = $db->fetch_row($q);
$db->query("DELETE FROM `gangwars` WHERE `warID` = {$_GET['war']}");
  echo 'War cleared.
> [url="staff_gangs.php?action=gwar"]Go Back[/url]';
  		stafflog_add("{$ir['username']} deleted war ID {$_GET['war']} ([url='gangs.php?action=view&ID={$r[']{$r['declarer']}[/url] [{$r['drespect']} respect]</a> vs. [url='gangs.php?action=view&ID={$r[']{$r['defender']}[/url] [{$r['frespect']} respect]</a>)");
  die($h->endpage());
}
function admin_gang_edit_begin() {
global $db,$ir, $userid,$h,$c;
     if ( !in_array($ir['user_level'],array(2,3,7)) ) {
  echo 'You cannot access this area.
> [url="index.php"]Go Back[/url]';
  die($h->endpage());
     }
	$gang = ( isset($_POST['gang'])&&is_numeric($_POST['gang']) )?abs(intval($_POST['gang'])):'';
         if ( $gang ) {
$q = $db->query("SELECT `gangNAME` FROM `gangs` WHERE `gangID` = $gang");
$theirname = $db->fetch_single($q);

	$edits = array (
1 => array ('Name And Description', 'gedit_name', '4'),
2 => array ('Prefix', 'gedit_prefix', '4'),
3 => array ('Finances + Respect', 'gedit_finances', '4'),
4 => array ('Staff', 'gedit_staff', '4'),
5 => array ('Capacity', 'gedit_capacity', '4'),
6 => array ('Organised Crime', 'gedit_crime', '4'),
7 => array ('Announcement', 'gedit_ament', '4')
	);
  echo "
<h3>Manage Gang</h3>
You are managing the gang: $theirname


Choose an edit to perform.


<table width='80%' class='table' cellspacing='1'>
	<tr style='background: gray'>
<th>Edit Type</th>
<th>Available For Use</th>
<th>Use</th>
	</tr>
  ";
      foreach ( $edits as $k => $v) {
   if ($v[2] >= $ir['user_level']) {
	$a = "green'>Yes";
	$l  =  "[url='staff_gangs.php?action=$v[1]&gang=$gang']Go[/url]";
   } else {
	$a = "red'>No";
	$l = "N/A";
   }
  echo "
	<tr>
<td>$v[0]</td>
<td>[b]<span style='color: $a</span>[/b]</td>
<td>$l</td>
	</tr>
  ";
      }
  echo '</table>';
         } else {
  echo "
<form action='staff_gangs.php?action=gedit' method='post'>
<h4>Gang Management</h4>
Enter a gang ID to manage: <input type='text' name='gang' value='1' />


<input type='submit' value='Go' />
</form>
  ";
         }
}
function admin_gang_edit_name() {
global $db,$ir, $userid,$h,$c;
     if ( !in_array($ir['user_level'],array(2,3,7)) ) {
  echo 'You cannot access this area.
> [url="index.php"]Go Back[/url]';
  die($h->endpage());
     }
	$gang = ( isset($_GET['gang'])&&is_numeric($_GET['gang']) )?abs(intval($_GET['gang'])):'';
	$_POST['gangNAME'] = ( isset($_POST['gangNAME'])&&preg_match("/^[a-z0-9_]+([\\s]{1}[a-z0-9_]|[a-z0-9_])+$/i", $_POST['gangNAME']) )?strip_tags($db->escape($_POST['gangNAME'])):'';
	$_POST['gangDESC'] = ( isset($_POST['gangDESC']) )?strip_tags($db->escape($_POST['gangDESC'])):'';
$q = $db->query("SELECT `gangNAME`,`gangDESC` FROM `gangs` WHERE `gangID` = $gang");
    if ( $db->num_rows($q) == 0 ) {
  echo 'Invalid gang.
> [url="staff_gangs.php?action=gedit_name"]Go Back[/url]';
  die($h->endpage());
    }
$r = $db->fetch_row($q);
         if ( $gang && $_POST['gangNAME'] && $_POST['gangDESC'] ) {
$db->query("UPDATE `gangs` SET `gangNAME` = '{$_POST['gangNAME']}', `gangDESC` = '{$_POST['gangDESC']}' WHERE `gangID` = $gang");
  echo 'Gang has been successfully modified.
> [url="staff_gangs.php?action=gedit_name"]Go Back[/url]';
	stafflog_add($userid, "{$ir['username']} edited gang ID $gang's name and/or description", $c);
  die($h->endpage());
         } else {
  echo "
<h3>Gang Management: Name/Description</h3>
Editing the gang: {$r['gangNAME']}


<form action='staff_gangs.php?action=gedit_name&gang=$gang' method='post'>
<table width='50%' cellspacing='1' class='table'>
	<tr>
<td align=right>Name:</td>
<td align=left><input type='text' name='gangNAME' value='{$r['gangNAME']}' /></td>
	</tr>
	<tr>
<td align=right>Description:</td>
<td align=left><textarea rows='7' cols='40' name='gangDESC'>{$r['gangDESC']}</textarea></td>
	</tr>
	<tr>
<td align=center colspan=2><input type='submit' value='Edit' /></td>
	</tr>
</table>
</form>
  ";
         }
}
function admin_gang_edit_prefix() {
global $db,$ir, $userid,$h,$c;
     if ( !in_array($ir['user_level'],array(2,3,7)) ) {
  echo 'You cannot access this area.
> [url="index.php"]Go Back[/url]';
  die($h->endpage());
     }
	$gang = ( isset($_GET['gang'])&&is_numeric($_GET['gang']) )?abs(intval($_GET['gang'])):'';
	$_POST['gangPREF'] = ( isset($_POST['gangPREF']) && strlen($_POST['gangPREF']) <= 5 )?strip_tags($db->escape($_POST['gangPREF'])):'';
$q = $db->query("SELECT `gangNAME`,`gangPREF` FROM `gangs` WHERE `gangID` = $gang");
    if ( $db->num_rows($q) == 0 ) {
  echo 'Invalid gang.
> [url="staff_gangs.php?action=gedit_prefix"]Go Back[/url]';
  die($h->endpage());
    }
$r = $db->fetch_row($q);
         if ( $gang && $_POST['gangPREF'] ) {
$db->query("UPDATE `gangs` SET `gangPREF` = '{$_POST['gangPREF']}' WHERE `gangID` = $gang");
  echo 'Gang has been successfully modified.
> [url="staff_gangs.php?action=gedit_prefix"]Go Back[/url]';
	stafflog_add("{$ir['username']} edited gang ID $gang's prefix");
  die($h->endpage());
         } else {
  echo "
<h3>Gang Management: Prefix</h3>
Editing the gang: {$r['gangNAME']}

<form action='staff_gangs.php?action=gedit_prefix&gang=$gang' method='post'>
<table width='50%' cellspacing='1' class='table'>
	<tr>
<td align=right>Prefix:</td>
<td align=left><input type='text' name='gangPREF' value='{$r['gangPREF']}' maxlength='5' /></td>
	</tr>
	<tr>
<td align=center colspan=2><input type='submit' value='Edit' /></td>
	</tr>
</table>
</form>
  ";
         }
}
function admin_gang_edit_finances() {
global $db,$ir, $userid,$h,$c;
     if ( !in_array($ir['user_level'],array(2,3,7)) ) {
  echo 'You cannot access this area.
> [url="index.php"]Go Back[/url]';
  die($h->endpage());
     }
	$gang = ( isset($_GET['gang'])&&is_numeric($_GET['gang']) )?abs(intval($_GET['gang'])):'';
	$money = ( isset($_POST['money'])&&is_numeric($_POST['money']) )?abs(intval($_POST['money'])):0;
	$crystals = ( isset($_POST['crystals'])&&is_numeric($_POST['crystals']) )?abs(intval($_POST['crystals'])):0;
	$reason = ( isset($_POST['reason'])&&preg_match("/^[a-z0-9_]+([\\s]{1}[a-z0-9_]|[a-z0-9_])+$/i", $_POST['reason']) )?strip_tags($db->escape($_POST['reason'])):'';
	$respect = ( isset($_POST['respect'])&&is_numeric($_POST['respect']) )?abs(intval($_POST['respect'])):0;
$q = $db->query("SELECT `gangNAME`,`gangMONEY`,`gangCRYSTALS`,`gangRESPECT` FROM `gangs` WHERE `gangID` = $gang");
    if ( $db->num_rows($q) == 0 ) {
  echo 'Invalid gang.
> [url="staff_gangs.php?action=gedit_finances"]Go Back[/url]';
  die($h->endpage());
    }
$r = $db->fetch_row($q);
         if ( $gang && $reason ) {
$db->query("UPDATE `gangs` SET `gangMONEY` = $money, `gangCRYSTALS` = $crystals, `gangRESPECT` = $respect WHERE `gangID` = $gang");
  echo 'Gang has been successfully modified.
> [url="staff_gangs.php?action=gedit_finances"]Go Back[/url]';
	stafflog_add("{$ir['username']} edited gang ID $gang's finances with the reason $reason");
  die($h->endpage());
         } else {
  echo "
<h3>Gang Management: Financial Details</h3>
Editing the gang: {$r['gangNAME']}

<form action='staff_gangs.php?action=gedit_finances&gang=$gang' method='post'>
<table width='50%' cellspacing='1' class='table'>
	<tr>
<td align=right>Money:</td>
<td align=left><input type='text' name='money' value='{$r['gangMONEY']}' /></td>
	</tr>
	<tr>
<td align=right>Crystals:</td>
<td align=left><input type='text' name='crystals' value='{$r['gangCRYSTALS']}' /></td>
	</tr>
	<tr>
<td align=right>Respect:</td>
<td align=left><input type='text' name='respect' value='{$r['gangRESPECT']}' /></td>
	</tr>
	<tr>
<td align=right>Reason for editing:</td>
<td align=left><input type='text' name='reason' value='' /></td>
	</tr>
	<tr>
<td align=center colspan=2><input type='submit' value='Edit' /></td>
	</tr>
</table>
</form>
  ";
         }
}
function admin_gang_edit_staff() {
global $db,$ir, $userid,$h,$c;
     if ( !in_array($ir['user_level'],array(2,3,7)) ) {
  echo 'You cannot access this area.
> [url="index.php"]Go Back[/url]';
  die($h->endpage());
     }
	$gang = ( isset($_GET['gang'])&&is_numeric($_GET['gang']) )?abs(intval($_GET['gang'])):'';
	$president = ( isset($_POST['president'])&&is_numeric($_POST['president']) )?abs(intval($_POST['president'])):'';
	$vicepres = ( isset($_POST['vicepres'])&&is_numeric($_POST['vicepres']) )?abs(intval($_POST['vicepres'])):'';
	$reason = ( isset($_POST['reason'])&&preg_match("/^[a-z0-9_]+([\\s]{1}[a-z0-9_]|[a-z0-9_])+$/i", $_POST['reason']) )?strip_tags($db->escape($_POST['reason'])):'';
$q = $db->query("SELECT `gangNAME`,`gangPRESIDENT`,`gangVICEPRES` FROM `gangs` WHERE `gangID` = $gang");
    if ( $db->num_rows($q) == 0 ) {
  echo 'Invalid gang.
> [url="staff_gangs.php?action=gedit_staff"]Go Back[/url]';
  die($h->endpage());
    }
$r = $db->fetch_row($q);
         if ( $gang && $reason && $president && $vicepres ) {
$db->query("UPDATE `gangs` SET `gangPRESIDENT` = $president, `gangVICEPRES` = $vicepres WHERE `gangID` = $gang");
  echo 'Gang has been successfully modified.
> [url="staff_gangs.php?action=gedit_staff"]Go Back[/url]';
	stafflog_add("{$ir['username']} edited gang ID $gang's staff with the reason $reason");
  die($h->endpage());
         } else {
  echo "
<h3>Gang Management: Staff</h3>
Editing the gang: {$r['gangNAME']}

<form action='staff_gangs.php?action=gedit_staff&gang=$gang' method='post'>
<table width='50%' cellspacing='1' class='table'>
	<tr>
<td align=right>President:</td>
<td align=left><input type='text' name='president' value='{$r['gangPRESIDENT']}' /></td>
	</tr>
	<tr>
<td align=right>Vice-President:</td>
<td align=left><input type='text' name='vicepres' value='{$r['gangVICEPRES']}' /></td>
	</tr>
	<tr>
<td align=right>Reason for editing:</td>
<td align=left><input type='text' name='reason' value='' /></td>
	</tr>
	<tr>
<td align=center colspan=2><input type='submit' value='Edit' /></td>
	</tr>
</table>
</form>
  ";
         }
}

function admin_gang_edit_capacity() {
global $db,$ir, $userid,$h,$c;
     if ( !in_array($ir['user_level'],array(2,3,7)) ) {
  echo 'You cannot access this area.
> [url="index.php"]Go Back[/url]';
  die($h->endpage());
     }
	$gang = ( isset($_GET['gang'])&&is_numeric($_GET['gang']) )?abs(intval($_GET['gang'])):'';
	$capacity = ( isset($_POST['capacity'])&&is_numeric($_POST['capacity']) )?abs(intval($_POST['capacity'])):'';
	$reason = ( isset($_POST['reason'])&&preg_match("/^[a-z0-9_]+([\\s]{1}[a-z0-9_]|[a-z0-9_])+$/i", $_POST['reason']) )?strip_tags($db->escape($_POST['reason'])):'';
$q = $db->query("SELECT `gangNAME`,`gangCAPACITY` FROM `gangs` WHERE `gangID` = $gang");
    if ( $db->num_rows($q) == 0 ) {
  echo 'Invalid gang.
> [url="staff_gangs.php?action=gedit_capacity"]Go Back[/url]';
  die($h->endpage());
    }
$r = $db->fetch_row($q);
        if ( $gang && $reason && $capacity ) {
$db->query("UPDATE `gangs` SET `gangCAPACITY` = $capacity WHERE `gangID` = $gang");
  echo 'Gang has been successfully modified.
> [url="staff_gangs.php?action=gedit_capacity"]Go Back[/url]';
	stafflog_add("{$ir['username']} edited gang ID $gang's capacity with the reason $reason");
  die($h->endpage());
         } else {
  echo "
<h3>Gang Management: Capacity</h3>
Editing the gang: {$r['gangNAME']}

<form action='staff_gangs.php?action=gedit_capacity&gang=$gang' method='post'>
<table width='50%' cellspacing='1' class='table'>
	<tr>
<td align=right>Capacity:</td>
<td align=left><input type='text' name='capacity' value='{$r['gangCAPACITY']}' /></td>
	</tr>
	<tr>
<td align=right>Reason for editing:</td>
<td align=left><input type='text' name='reason' value='' /></td>
	</tr>
	<tr>
<td align=center colspan=2><input type='submit' value='Edit' /></td>
	</tr>
</table>
</form>
  ";
         }
}
function admin_gang_edit_crime() {
global $db,$ir, $userid,$h,$c;
     if ( !in_array($ir['user_level'],array(2,3,7)) ) {
  echo 'You cannot access this area.
> [url="index.php"]Go Back[/url]';
  die($h->endpage());
     }
	$gang = ( isset($_GET['gang'])&&is_numeric($_GET['gang']) )?abs(intval($_GET['gang'])):'';
	$crime = ( isset($_POST['crime'])&&is_numeric($_POST['crime']) )?abs(intval($_POST['crime'])):'';
	$chours = ( isset($_POST['chours'])&&is_numeric($_POST['chours']) )?abs(intval($_POST['chours'])):'';
	$reason = ( isset($_POST['reason'])&&preg_match("/^[a-z0-9_]+([\\s]{1}[a-z0-9_]|[a-z0-9_])+$/i", $_POST['reason']) )?strip_tags($db->escape($_POST['reason'])):'';
$q = $db->query("SELECT `gangNAME`,`gangCRIME`,`gangCHOURS` FROM `gangs` WHERE `gangID` = $gang");
    if ( $db->num_rows($q) == 0 ) {
  echo 'Invalid gang.
> [url="staff_gangs.php?action=gedit_crime"]Go Back[/url]';
  die($h->endpage());
    }
$r = $db->fetch_row($q);
         if ( $gang && $reason && $crime && $chours ) {
$db->query("UPDATE `gangs` SET `gangCRIME` = $crime, `gangCHOURS` = $chours WHERE `gangID` = $gang");
  echo 'Gang has been successfully modified.
> [url="staff_gangs.php?action=gedit_crime"]Go Back[/url]';
	stafflog_add("{$ir['username']} edited gang ID $gang's organised crime with the reason $reason");
  die($h->endpage());
         } else {
  echo "
<h3>Gang Management: Organised Crimes</h3>
Editing the gang: {$r['gangNAME']}

<form action='staff_gangs.php?action=gedit_crime&gang=$gang' method='post'>
<table width='50%' cellspacing='1' class='table'>
	<tr>
<td align=right>Crime ID:</td>
<td align=left><input type='text' name='crime' value='{$r['gangCRIME']}' /></td>
	</tr>
	<tr>
<td align=right>Crime Hours Left:</td>
<td align=left><input type='text' name='chours' value='{$r['gangCHOURS']}' /></td>
	</tr>
	<tr>
<td align=right>Reason for editing:</td>
<td align=left><input type='text' name='reason' value='' /></td>
	</tr>
	<tr>
<td align=center colspan=2><input type='submit' value='Edit' /></td>
	</tr>
</table>
</form>
  ";
         }
}
function admin_gang_edit_ament() {
global $db,$ir, $userid,$h,$c;
     if ( !in_array($ir['user_level'],array(2,3,7)) ) {
  echo 'You cannot access this area.
> [url="index.php"]Go Back[/url]';
  die($h->endpage());
     }
	$gang = ( isset($_GET['gang'])&&is_numeric($_GET['gang']) )?abs(intval($_GET['gang'])):'';
	$_POST['gangAMENT'] = ( isset($_POST['gangAMENT']) )?strip_tags($db->escape($_POST['gangAMENT'])):'';
$q = $db->query("SELECT `gangNAME`,`gangAMENT` FROM `gangs` WHERE `gangID` = $gang");
    if ( $db->num_rows($q) == 0 ) {
  echo 'Invalid gang.
> [url="staff_gangs.php?action=gedit_ament"]Go Back[/url]';
  die($h->endpage());
    }
$r = $db->fetch_row($q);
         if ( $gang && $_POST['gangAMENT'] ) {
$db->query("UPDATE `gangs` SET `gangAMENT` = '{$_POST['gangAMENT']}' WHERE `gangID` = $gang");
  echo 'Gang has been successfully modified.
> [url="staff_gangs.php?action=gedit_ament"]Go Back[/url]';
	stafflog_add("{$ir['username']} edited gang ID $gang's announcement");
  die($h->endpage());
         } else {
  echo "
<h3>Gang Management: Announcement</h3>
Editing the gang: {$r['gangNAME']}

<form action='staff_gangs.php?action=gedit_ament&gang=$gang' method='post'>
<table width='50%' cellspacing='1' class='table'>
	<tr>
<td align=right>Announcement:</td>
<td align=left><textarea rows='7' cols='40' name='gangAMENT'>{$r['gangAMENT']}</textarea></td>
	</tr>
	<tr>
<td align=center colspan=2><input type='submit' value='Edit' /></td>
	</tr>
</table>
</form>
  ";
         }
}
	$h->endpage();
?>

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...