dbr(mysql_error()); $result3 = mysql_query("UPDATE " . $PA["table"] . " SET astropods_base=0 where astropods_base < 0", $db); dbr(mysql_error()); $result3 = mysql_query("UPDATE " . $PA["table"] . " SET avengers=0 where avengers < 0 ", $db); dbr(mysql_error()); $result3 = mysql_query("UPDATE " . $PA["table"] . " SET rcannons=0 where rcannons < 0 ", $db); dbr(mysql_error()); $result3 = mysql_query("UPDATE " . $PA["table"] . " SET lstalkers=0 where lstalkers < 0 ", $db); dbr(mysql_error()); ?> <?php if ($os == "windows") { echo "<meta HTTP-EQUIV=\"Refresh\" content=\"60\">"; } Logging("ticker", "Ticker done in " . (time() - $time1) . " seconds. MySQL Report: {$dbr}\nOB: " . ob_get_contents()); /*mysql_query("unlock tables"); while(@mysql_close($db)) { } while(@mysql_close()) { } while(mysql_close()) { } while(@mysql_kill()) { } while(@mysql_kill($db)) { }*/ mysql_close($db); /*mysql_close();*/ unset($db); ?> Ticker works! <?php // begin comment /* //if ($os=="windows") echo "<meta HTTP-EQUIV=\"Refresh\" content=\"$tickertime\">";
while ($row = $q->fetch_assoc()) { $notes[] = $row; } $q->free(); $notice_filename = 'notice.txt'; if ($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_POST['updatetxt'])) { $updatetxt = $_POST['updatetxt']; //not protected from sql injection to prevent html / php added from derping. if (!file_exists('notice.txt')) { file_put_contents('notice.txt', ''); } if (!is_writable($notice_filename)) { chmod($notice_filename, 0755); } file_put_contents('notice.txt', $updatetxt); Logging('admin', $_loginaccount->GetUsername(), 'notice_update', 'Updated notice on Stream.'); ?> <p class="alert alert-success">Successfully updated notice!</p> <?php } ?> <h2>General</h2> <p>Welcome to the administrative panel of Mapler.me. You can control many aspects of the site including monitoring status messages and our listening servers.</p> <p><i class="icon-exclamation-sign"></i> <b>Please be aware some actions or changes are logged.</b></p> <h2>Stream Notice</h2> <form method="post"> <textarea name="updatetxt" class="input-xxlarge" id="updatetxt" style="height:200px;" rows="5"><?php
<?php if ($_SERVER['REQUEST_METHOD'] == 'GET') { if (isset($_GET['deletecharacter'])) { $id = intval($_GET['deletecharacter']); $name = GetCharacterName($id, CURRENT_LOCALE); $character_account_id = GetCharacterAccountId($id, CURRENT_LOCALE); echo $name; echo $character_account_id; $cerror = ''; if ($_loginaccount->GetID() !== $character_account_id) { DisplayError(6); $cerror = 'nope'; } echo $cerror; if ($id != NULL && ($cerror = NULL)) { Logging('characterdeletion', $name, $_loginaccount->GetID(), NULL); ?> <p class="alert-info alert fademeout">Successfully requested deletion of <?php echo $name; ?> .<p> <?php } } } $i = 0; $chars_per_row = 3; foreach ($cache as $row) { if ($char_config['main_character'] == null) { $char_config['main_character'] = $row['name']; }
if ($id != NULL) { $account = Account::Load($id); $account->SetAccountRank(RANK_BANNED); $account->Save(); Logging('admin', $_loginaccount->GetUsername(), 'account_ban', 'Banned ' . $name . '.'); ?> <p class="alert-info alert fademeout">Successfully banned @<?php echo $name; ?> .<p> <?php } } elseif (isset($_GET['ipban'])) { $name = $_GET['ipban']; $id = GetAccountID($name); if ($id != NULL) { $account = Account::Load($id); $__database->query("\r\n\t\tINSERT IGNORE INTO\r\n\t\t\t`ip_ban`\r\n\t\tVALUES\r\n\t\t(\r\n\t\t\t'" . $account->GetLastIP() . "'\r\n\t\t)"); if ($__database->affected_rows == 1) { // Send mail? Logging('admin', $_loginaccount->GetUsername(), 'account_ipban', 'IP Banned ' . $name . '.'); ?> <p class="alert-info alert fademeout">Successfully IP banned @<?php echo $name; ?> .<p> <?php } } } }
## GNU General Public License for more details. ## ## You should have received a copy of the GNU General Public License ## along with Foobar. If not, see <http://www.gnu.org/licenses/>. ## ################################################################################ require "dblogon.php"; require "options.php"; if ($createtag != "") { $r = mysql_query("SELECT * FROM pa_tags WHERE tag='{$createtag}'"); if (mysql_num_rows($r) == 0) { $garbage = "tag" . substr(md5(time()), 0, 7); mysql_query("INSERT INTO pa_tags (tag,password) VALUES ('{$createtag}','{$garbage}')"); mail($myrow["email"], $PA["name"] . " - Tag", $PA["name"] . " tag: {$createtag}\nPassword: {$garbage}\n\n-" . $PA["name"] . " crew\nhttp://www.ewsnl.com/~wassink/pa/", "From: j.wassink@student.unimaas.nl"); Header("Location: endre.php?msggreen=Tag created. Password is sent by e-mail."); Logging("tag", "{$Username} created tag: {$createtag}"); die; } } if ($selecttag != "") { $r = mysql_query("SELECT * FROM pa_tags WHERE password='******'"); if (mysql_num_rows($r) == 1) { $mr = mysql_fetch_array($r); mysql_query("UPDATE " . $PA["table"] . " SET tag='" . $mr["tag"] . "' WHERE id={$Userid}"); Header("Location: endre.php?msggreen=Tag selected."); die; } } if ($Access >= 10 && $Adminuserid != "") { $Userid = $Adminuserid; }
## along with Foobar. If not, see <http://www.gnu.org/licenses/>. ## ################################################################################ require "dblogon.php"; require "options.php"; if ($submit) { $loggedin = "false"; $result = mysql_query("SELECT * FROM " . $PA["table"] . " WHERE nick='{$nick}' AND password='******'", $db); $myrow = mysql_fetch_array($result); if ($myrow['closed'] == 1) { require "header.php"; die("Your account is closed, probably due to multi-playing. Contact planetarion@twistd.org if you believe your account was closed in error."); } if (mysql_num_rows($result) >= 1) { $Userid = $myrow["id"]; Logging("login", "{$nick}"); setcookie("Username", $nick); setcookie("Password", $pw); setcookie("Userid", $myrow["id"]); setcookie("Access", $myrow["access"]); $loggedin = "true"; } else { setcookie("Username", ""); } if ($loggedin == "true") { Header("Location: index.php"); } else { Header("Location: index.php?msgred=Wrong+login+or+password!"); } die; }
} $result = mysql_query("SELECT * FROM " . $PA["table"] . " WHERE nick='{$nick}'", $db); if ($myrow = mysql_fetch_array($result)) { echo "User '{$nick}' already registered!"; require "footer.php"; die; } $result = mysql_query("SELECT * FROM " . $PA["table"] . " WHERE email='{$email}'", $db); if ($myrow = mysql_fetch_array($result)) { echo "User with e-mail '{$email}' already registered!"; require "footer.php"; die; } $garbage = substr(md5(time()), 0, 10); $sql = "INSERT INTO " . $PA["table"] . " (nick,name,city,phone,email,password) VALUES ('{$nick}','{$navn}','{$bosted}','{$telefon}','{$email}','{$garbage}')"; Logging("register", $sql); $result = mysql_query($sql); if ($result && $mode == "inet") { echo "Account created! Your password is sent by e-mail.<br>\n"; mail($email, $PA["name"] . " - Account", $PA["name"] . " account:\n\nUsername: {$nick}\nPassword: {$garbage}\n\nYou can edit the password under 'Preferences' after you log in.\n\nWhy dont you come to #WPA at irc.netgamers.org to have a chat? :)\n\n-" . $PA["name"] . " crew\nhttp://www.ewsnl.com/~wassink/pa/", "From: j.wassink@student.unimaas.nl"); } if ($result && $mode == "LAN") { echo "Account created! Your password is:<br>\n"; echo "{$garbage}\n"; } } else { ?> This game is now <a href="postcard.php">postcardware</a>.<br><br> <i> Deto-Planetarion is still in its testing period, and might have bugs/problems etc.<br> You will not get your asteroids/ships/resources back if you lose them because<br>
<p class="side"><i class="icon-user faded"></i> <a href="//<?php echo $subdomain . "." . $domain; ?> /friends/"><?php echo $stats[2]; ?> Friends</a></p> </div> </div> <?php if ($_loggedin && $_loginaccount->IsRankORHigher(RANK_ADMIN)) { if ($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_POST['setrankpls'])) { $__url_useraccount->SetAccountRank(intval($_POST['setrankpls'])); $__url_useraccount->Save(); Logging('admin', $_loginaccount->GetUsername(), 'account_rank', 'Changed ' . $__url_useraccount->GetUserName() . '\'s rank.'); } $currentrank = $__url_useraccount->GetAccountRank(); ?> <div id="myModal" class="modal hide fade" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true"> <div class="modal-header"> <button type="button" class="close" data-dismiss="modal" aria-hidden="true">×</button> <h3 id="myModalLabel">Manage: @<?php echo $__url_useraccount->GetUsername(); ?> <span style="font-size:15px !important;">[<?php echo $__url_useraccount->GetLastIP(); ?> ]</span>
Header("Location: ./?msg={$msg}"); exit; } else { Header("Location: ./?msg=Cant find the emailaddress <b>{$_POST['email']}</b>"); exit; } } else { if ($_GET[pwdvergeten] && $_GET[username] && $_GET[password]) { $a = mysql_query("SELECT * FROM {$TABLE['users']} WHERE username='******'username']}' AND password='******'password']}'"); if (!mysql_num_rows($a)) { Header("Location: ?"); exit; } $i = mysql_fetch_assoc($a); $UID = $i[id]; Logging("login", $usr); $save[username] = $i[username]; $save[password] = $i[password]; $save[uid] = $UID; $save[access] = $i[acces]; $_SESSION[ED_TEST] = $save; mysql_query("UPDATE {$TABLE['users']} SET sleep='0' WHERE id='{$UID}'"); Header("Location: menu.php?"); exit; } else { if (!$_POST[check] && !$_POST[pwdvergeten]) { ?> <html> <head> <title><?php