Guest User

Untitled

a guest
Apr 4th, 2013
423
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 14.98 KB | None | 0 0
  1. <?PHP
  2. if($group_id_of_acc_logged >= $config['site']['access_admin_panel']) {
  3. $offertype = $_REQUEST['offer_type'];
  4. if((empty($action)) AND (empty($offertype))) {
  5. $main_content .= '<br><h2><center><a href="?subtopic=shopguildadmin&action=addoffer">ADD SHOP OFFER</a><br><br><a href="?subtopic=shopguildadmin&action=viewoffer">
  6. VIEW SHOP OFFER <i>(EDIT/DELETE)</i></a><br><br><a href="?subtopic=shopguildadmin&action=points">ADD POINTS</a></center>';
  7. }
  8. if($action == "addoffer"){
  9. $shop_points = stripslashes(ucwords(strtolower(trim($_REQUEST['shop_points']))));
  10. $shop_offer_type = stripslashes(trim($_REQUEST['offer_type']));
  11. if(empty($shop_points)) {
  12. $main_content .= '<table border="0"><tr><td align="center"><b>Select offer type:</b></td><td><table border="0" ><tr bgcolor="#505050">
  13. <td><font color="white">Item</td><td><font color="white">Container</td><td><font color="white">VipDays</td><td><font color="white">Redskull</td>
  14. <td><font color="white">Unban</td><td><font color="white">Changename</td></tr><tr bgcolor="#D4C0A1"><form action="" method="post">
  15. <td align="center"><input type="radio" name="offer_type" value="item" onClick="this.form.submit()"></td></lable>
  16. <td align="center"><input type="radio" name="offer_type" value="container" onClick="this.form.submit()"></td>
  17. <td align="center"><input type="radio" name="offer_type" value="vipdays" onClick="this.form.submit()"></td>
  18. <td align="center"><input type="radio" name="offer_type" value="redskull" onClick="this.form.submit()"></td>
  19. <td align="center"><input type="radio" name="offer_type" value="unban" onClick="this.form.submit()"></td>
  20. <td align="center"><input type="radio" name="offer_type" value="changename" onClick="this.form.submit()"></td>
  21. </form></tr></table></td></tr>';
  22. $main_content .= '<form action="?subtopic=shopguildadmin&action=addoffer&offer_type='.$shop_offer_type.'" method="post" ><table border="0"><tr>
  23. <td align="center" ><b>Points:</b></td><td><input type="textbox" name="shop_points" maxlenght="7" style="width: 70px"></td></tr>';
  24. if($_REQUEST['offer_type'] == 'container'){
  25. $main_content .= '<tr><td align="center" ><b>Container ID:</b></td>
  26. <td><input type="text" name="shop_itemid1" maxlenght="7" style="width: 70px" ></td></tr>
  27. <tr><td align="center" ><b>Count Container:</b></td>
  28. <td><input type="text" name="shop_count1" maxlenght="7" style="width: 70px" ></td></tr>
  29. <tr><td align="center" ><b>Item ID:</b></td>
  30. <td><input type="text" name="shop_itemid2" maxlenght="7" style="width: 70px" ></td></tr>
  31. <tr><td align="center" ><b>Count Item:</b></td>
  32. <td><input type="text" name="shop_count2" maxlenght="7" style="width: 70px" ></td></tr>';
  33. }
  34. if($_REQUEST['offer_type'] == 'item'){
  35. $main_content .= '<tr><td align="center"><b>Item ID:</b></td>
  36. <td><input type="text" name="shop_itemid1" maxlenght="7" style="width: 70px" ></td></tr>
  37. <tr><td align="center"><b>Item Count:</b></td>
  38. <td><input type="text" name="shop_count1" maxlenght="7" style="width: 70px" ></td></tr>';
  39. }
  40. if($_REQUEST['offer_type'] == 'vipdays'){
  41. $main_content .= '<tr><td align="center" ><b>Days:</b></td>
  42. <td><input type="text" name="shop_count1" maxlenght="7" style="width: 70px" ></td></tr>';
  43. }
  44. $main_content .= '<tr><td align="center" ><b>Offer Description:</b></td>
  45. <td ><textarea name="shop_offer_description" rows="2" cols="35"></textarea></td></tr>
  46. <tr><td align="center" ><b>Offer Name:</b></td>
  47. <td><input type="text" name="shop_offer_name" maxlenght="40" style="width: 200px" ></td></tr></table>
  48. <input name="submit" type="submit" value="Submit" /></form>
  49. <form action="?subtopic=shopguildadmin&action=addoffer" method="post" >
  50. <input name="submit" type="submit" value="Reset" /></form>';
  51. $main_content .= '<form action="?subtopic=shopguildadmin" method="post" ><input name="submit" type="submit" value="Back" title="Back"/></form>';
  52. } else {
  53. $shop_points = stripslashes(trim($_POST['shop_points']));
  54. $shop_offer_type = stripslashes(trim($_REQUEST['offer_type']));
  55. $shop_itemid1 = stripslashes(trim($_POST['shop_itemid1']));
  56. $shop_count1 = stripslashes(trim($_POST['shop_count1']));
  57. $shop_itemid2 = stripslashes(trim($_POST['shop_itemid2']));
  58. $shop_count2 = stripslashes(trim($_POST['shop_count2']));
  59. $shop_offer_description = stripslashes(trim($_POST['shop_offer_description']));
  60. $shop_offer_name = stripslashes(trim($_POST['shop_offer_name']));
  61. $SQL->query('INSERT INTO `z_shopguild_offer` (id, points, itemid1, count1, itemid2, count2, offer_type, offer_description, offer_name, pid) VALUES (NULL, '.$SQL->quote($shop_points).', '.$SQL->quote($shop_itemid1).', '.$SQL->quote($shop_count1).', '.$SQL->quote($shop_itemid2).', '.$SQL->quote($shop_count2).', '.$SQL->quote($shop_offer_type).', '.$SQL->quote($shop_offer_description).', '.$SQL->quote($shop_offer_name).', 0)');
  62. $main_content .= '<center><h2><font color="red">Added to Shop:</font></h2></center><hr/>
  63. <tr><td align="center" ><b>Points:</b></td>
  64. <td>'.$shop_points.'</td></tr><br>';
  65. if($shop_offer_type == 'container'){
  66. $main_content .= '<tr><td align="center" ><b>Container ID:</b></td>
  67. <td>'.$shop_itemid1.'</td></tr><br>
  68. <tr><td align="center" ><b>Count Container:</b></td>
  69. <td>'.$shop_count1.'</td></tr><br>
  70. <tr><td align="center" ><b> Item ID (in Container):</b></td>
  71. <td>'.$shop_itemid2.'</td></tr><br>
  72. <tr><td align="center" ><b>Count Item (in Container):</b></td>
  73. <td>'.$shop_count2.'</td></tr><br>';
  74. }
  75. if ($shop_offer_type == 'item'){
  76. $main_content .= '<tr><td align="center" ><b>Item ID:</b></td>
  77. <td>'.$shop_itemid1.'</td></tr><br>
  78. <tr><td align="center" ><b>Count Item:</b></td>
  79. <td>'.$shop_count1.'</td></tr><br>';
  80. }
  81. if ($shop_offer_type == 'vipdays'){
  82. $main_content .= '<tr><td align="center" ><b>Days:</b></td>
  83. <td>'.$shop_count1.'</td></tr><br>';
  84. }
  85. $main_content .= '<tr><td align="center" ><b>Offer Type:</b></td>
  86. <td>'.$shop_offer_type.'</td></tr><br>
  87. <tr><td align="center" ><b>Offer Description:</b></td>
  88. <td>'.$shop_offer_description.'</td></tr><br>
  89. <tr><td align="center" ><b>Offer Name:</b></td>
  90. <td>'.$shop_offer_name.'</td></tr>
  91. <br><form action="?subtopic=shopguildadmin&action=addoffer" method="post" ><input name="submit" type="submit" value="Back" title="Back"/></form>';
  92. }
  93. }
  94. if($action == "viewoffer") {
  95. $items = simplexml_load_file($config['site']['server_path'].'/data/items/items.xml') or die('<b>Could not load items!</b>');
  96. foreach($items->item as $v)
  97. $itemList[(int)$v['id']] = $v['name'];
  98. $order = array("id" => "id", "points" => "points", "offer_type" => "offer_type", "itemid1" => "itemid1", "itemid2" => "itemid2");
  99. $main_content .= '<center><table width="550"><tr BGCOLOR="#505050"><td width="5"><font color="white"><a href="index.php?subtopic=shopguildadmin&action=viewoffer&order=' . getOrder($order, 'order', 'id') . '" class=white>ID:</td><td width="5"><font color="white"><a href="index.php?subtopic=shopguildadmin&action=viewoffer&order=' . getOrder($order, 'order', 'points') . '" class=white>Points:</td><td width="7">
  100. <font color="white"><a href="index.php?subtopic=shopguildadmin&action=viewoffer&order=' . getOrder($order, 'order', 'itemid1') . '" class=white>Item ID:</td><td width="5"><font color="white">Count:</td><td width="7"><center><font color="white"><a href="index.php?subtopic=shopguildadmin&action=viewoffer&order=' . getOrder($order, 'order', 'itemid2') . '" class=white>Container ID:</center></td><td width="5"><font color="white">Count:</td><td width="7"><font color="white"><a href="index.php?subtopic=shopguildadmin&action=viewoffer&order=' . getOrder($order, 'order', 'offer_type') . '" class=white>Offer Type:</td>
  101. <td width="85"><font color="white">Offer Description:</td><td width="30"><font color="white">Offer Name:</td><td width="30"></td></tr>';
  102. $shopoffers = $SQL->query('SELECT id, points, itemid1, count1, itemid2, count2, offer_type, offer_description, offer_name, pid FROM z_shopguild_offer ' . makeOrder($order, 'order', 'id'));
  103. foreach($shopoffers as $shop) {
  104. $main_content .= '</B><tr BGCOLOR="#D4C0A1"><td align="center">'.$shop['id'].'<td align="center">'.$shop['points'].'</td>';
  105. if($shop['itemid1'] == "0") {
  106. $main_content .= '<td align="center">'.$shop['itemid1'].'<br></td>';
  107. } else {
  108. $main_content .= '<td align="center">'.$shop['itemid1'].'<br>(' . $itemList[(int)$shop['itemid1']] . ')</td>';
  109. }
  110. $main_content .= '<td align="center">'.$shop['count1'].'</td>';
  111. if($shop['itemid2'] == "0") {
  112. $main_content .= '<td align="center">'.$shop['itemid2'].'</td>';
  113. } else {
  114. $main_content .= '<td align="center">'.$shop['itemid2'].'<br>(' . $itemList[(int)$shop['itemid2']] . ')</td>';
  115. }
  116. $main_content .= '<td align="center">'.$shop['count2'].'</td><td align="center">'.$shop['offer_type'].'</td><td align="left">'.$shop['offer_description'].'</td><td align="left">'.$shop['offer_name'].'</td>';
  117. $main_content .= '<td align="center"><a href="?subtopic=shopguildadmin&action=editoffer&id='.$shop['id'].'"><img src="'.$layout_name.'/images/news/edit_news.png" border="0"></a><br><br><a href="?subtopic=shopguildadmin&action=deleteoffer&id='.$shop['id'].'"><img src="'.$layout_name.'/images/news/delete_news.png" border="0"></a></td>';
  118. }
  119. $main_content .= '</td></tr></TABLE><br><form action="?subtopic=shopguildadmin" method="post" ><input name="submit" type="submit" value="Back" title="Back"/></form>';
  120. }
  121. if($action == "deleteoffer") {
  122. $id = (int) $_REQUEST['id'];
  123. $SQL->query('DELETE FROM z_shopguild_offer WHERE id = '.$id.' LIMIT 1;');
  124. $main_content .= '<center>Shop offer has been deleted.</center><br><center><form action="?subtopic=shopguildadmin&action=viewoffer" method="post" ><input name="submit" type="submit" value="Back" title="Back"/></form></center>';
  125. }
  126. if($action == "editoffer") {
  127. $id = (int) $_REQUEST['id'];
  128. $shopoffers = $SQL->query('SELECT * FROM z_shopguild_offer WHERE id = '.$id.' LIMIT 1;');
  129. foreach($shopoffers as $shop) {
  130. $main_content .= '<form action="?subtopic=shopguildadmin&action=edited&id='.$id.'" method="post" ><table border="0"><tr><td align="center" ><b>Points:</b></td>
  131. <td><input type="textbox" name="shop_points" maxlenght="7" value="'.$shop['points'].'" style="width: 70px"></td></tr>';
  132. if($shop['offer_type'] == 'container'){
  133. $main_content .= '<tr><td align="center" ><b>Container ID:</b></td>
  134. <td><input type="text" name="shop_itemid1" maxlenght="7" value="'.$shop['itemid1'].'" style="width: 70px" ></td></tr>
  135. <tr><td align="center" ><b>Count Container:</b></td>
  136. <td><input type="text" name="shop_count1" maxlenght="7" value="'.$shop['count1'].'" style="width: 70px" ></td></tr>
  137. <tr><td align="center" ><b>Item ID:</b></td>
  138. <td><input type="text" name="shop_itemid2" maxlenght="7" value="'.$shop['itemid2'].'" style="width: 70px" ></td></tr>
  139. <tr><td align="center" ><b>Count Item:</b></td>
  140. <td><input type="text" name="shop_count2" maxlenght="7" value="'.$shop['count2'].'" style="width: 70px" ></td></tr>';
  141. }
  142. if($shop['offer_type'] == 'item'){
  143. $main_content .= '<tr><td align="center"><b>Item ID:</b></td>
  144. <td><input type="text" name="shop_itemid1" maxlenght="7" value="'.$shop['itemid1'].'" style="width: 70px" ></td></tr>
  145. <tr><td align="center"><b>Item Count:</b></td>
  146. <td><input type="text" name="shop_count1" maxlenght="7" value="'.$shop['count1'].'" style="width: 70px" ></td></tr>';
  147. }
  148. if($shop['offer_type'] == 'vipdays'){
  149. $main_content .= '<tr><td align="center" ><b>Days:</b></td>
  150. <td><input type="text" name="shop_count1" maxlenght="7" style="width: 70px" ></td></tr>';
  151. }
  152. $main_content .= '<tr><td align="center" ><b>Offer Type:</b></td>
  153. <td><input type="text" name="shop_offer_type" value="'.$shop['offer_type'].'" maxlenght="40" style="width: 200px" ></td></tr>
  154. <tr><td align="center" ><b>Offer Description:</b></td>
  155. <td ><textarea name="shop_offer_description" rows="2" cols="35">'.$shop['offer_description'].'</textarea></td></tr>
  156. <tr><td align="center" ><b>Offer Name:</b></td>
  157. <td><input type="text" name="shop_offer_name" value="'.$shop['offer_name'].'" maxlenght="40" style="width: 200px" ></td></tr>
  158. <tr><td><input name="submit" type="submit" value="Submit" /></form></td><td></td></tr></table>';
  159. $main_content .= '<form action="?subtopic=shopguildadmin&action=viewoffer" method="post" ><input name="submit" type="submit" value="Back" title="Back"/></form>';
  160. }
  161. }
  162. if($action == "edited") {
  163. $id = (int) $_REQUEST['id'];
  164. $shop_points = stripslashes(trim($_POST['shop_points']));
  165. $shop_offer_type = stripslashes(trim($_POST['shop_offer_type']));
  166. $shop_itemid1 = stripslashes(trim($_POST['shop_itemid1']));
  167. $shop_count1 = stripslashes(trim($_POST['shop_count1']));
  168. $shop_itemid2 = stripslashes(trim($_POST['shop_itemid2']));
  169. $shop_count2 = stripslashes(trim($_POST['shop_count2']));
  170. $shop_offer_description = stripslashes(trim($_POST['shop_offer_description']));
  171. $shop_offer_name = stripslashes(trim($_POST['shop_offer_name']));
  172. $SQL->query('UPDATE `z_shopguild_offer` SET `points` = '.$shop_points.', `itemid1` = '.$SQL->quote($shop_itemid1).', `count1` = '.$SQL->quote($shop_count1).', `itemid2` = '.$SQL->quote($shop_itemid2).', `count2` = '.$SQL->quote($shop_count2).', `offer_type` = '.$SQL->quote($shop_offer_type).', `offer_description` = '.$SQL->quote($shop_offer_description).', `offer_name` = '.$SQL->quote($shop_offer_name).' WHERE `id` = '.$id.';');
  173. $main_content .= '<b><center>Shop offer successfully edited.</b><br><br><form action="?subtopic=shopguildadmin&action=viewoffer" method="post" ><input name="submit" type="submit" value="Back" title="Back"/></form><meta http-equiv="refresh" content="1;url=/?subtopic=shopguildadmin&action=viewoffer" />';
  174. }
  175. if($action == "points") {
  176. $player = stripslashes(ucwords(strtolower(trim($_REQUEST['character']))));
  177. $points = $_POST['points'];
  178. if(empty($player)) {
  179. $main_content .= '<form action="" method="post"><B>Enter Character Name:</B><input type="textbox" name="character"><br>
  180. <B>Enter Points Amount:</B><input type="textbox" name="points"><br><br><input type="submit" value="Submit">
  181. </form></center><form action="?subtopic=shopguildadmin" method="post" ><input name="submit" type="submit" value="Back" title="Back"/></form>';
  182. } else {
  183. $player_data = $SQL->query("SELECT * FROM `players` WHERE `name` = '".$player."';")->fetch();
  184. $SQL->query("UPDATE `accounts` SET `guild_points` = `guild_points` + '".$points."' WHERE `id` = '".$player_data['account_id']."'");
  185. $main_content .= '<b><center>'.$points.' Premium Points added to the account of <i>'.$player.'</i> !</b></center><br>
  186. <form action="?subtopic=shopguildadmin" method="post" ><input name="submit" type="submit" value="Back" title="Back"/></form>';
  187. }
  188. }
  189. } else {
  190. $main_content .= 'Sorry, you have not the rights to access this page.';
  191. }
  192. ?>
Advertisement
Add Comment
Please, Sign In to add comment