public function run($name, $from)
{
// validate user input
if (strlen($name) > 16 || !preg_match("/^[0-9a-zA-Z_]{1,16}\$/", $name)) {
$this->println("Invalid name.");
return;
}
$page = new Page("check", false);
$history = $page->settings->table['history'];
try {
$stmt = $page->conn->prepare("SELECT name,uuid FROM {$history} WHERE name=? ORDER BY date LIMIT 1");
if ($stmt->execute(array($name))) {
if ($row = $stmt->fetch()) {
$name = $row['name'];
$uuid = $row['uuid'];
}
}
if (!isset($uuid)) {
$name = htmlspecialchars($name, ENT_QUOTES, 'UTF-8');
$this->println("{$name} has not joined before.");
return;
}
$href = "history.php?uuid={$uuid}";
// sanitize $_POST['table'] ($from)
$from_type = $page->type_info($from);
$type = $from_type['type'];
if ($type !== null) {
$href .= "&from=" . lcfirst($from_type['title']);
}
echo "<br><script type=\"text/javascript\">document.location=\"{$href}\";</script>";
/*
$table = $page->settings->table['bans'];
$stmt = $page->conn->prepare("SELECT * FROM $table WHERE (uuid=? AND active=" . Settings::$TRUE . ") LIMIT 1");
if ($stmt->execute(array($uuid))) {
if (!($row = $stmt->fetch())) {
$this->println("$name is not banned.");
return;
}
$banner = $page->get_banner_name($row);
$reason = $page->clean($row['reason']);
$time = $page->millis_to_date($row['time']);
$until = $page->millis_to_date($row['until']);
$this->println("$name is banned!");
$this->println("Banned by: $banner");
$this->println("Reason: $reason");
$this->println("Banned on: $time");
if ($row['until'] > 0) {
$this->println("Banned until: $until");
} else {
$this->println("Banned permanently.");
}
}
*/
} catch (PDOException $ex) {
die($ex->getMessage());
}
}
$uuid = $_GET['uuid'];
$name = $page->get_name($uuid);
$name !== null or die("Player not found in database.");
if ($staffhistory) {
$page->name = "Recent Punishments by {$name}";
} else {
$page->name = "Recent Punishments for {$name}";
}
$page->print_title();
$page->print_page_header();
$from = null;
$from_title = null;
$from_href = null;
if (isset($_GET['from'])) {
// sanitize $_GET['from']
$info = $page->type_info($_GET['from']);
if ($info['type'] !== null) {
$from_title = $info['title'];
$from = lcfirst($from_title);
$from_href = "{$from}.php";
}
}
try {
$all = array();
$counts = array();
$field = "uuid";
if ($staffhistory) {
$field = "banned_by_uuid";
}
History::push($page, $all, 'bans', $uuid, $field, $counts);
History::push($page, $all, 'mutes', $uuid, $field, $counts);
