API tools faq
paste
Guest User

Untitled

a guest
Jun 8th, 2016
247
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 18.06 KB | None | 0 0
raw download clone embed print report
  1. <?PHP
  2. if($group_id_of_acc_logged >= $config['site']['access_admin_panel']) {
  3. $offertype = $_REQUEST['offer_type'];
  4. if((empty($action)) AND (empty($offertype))) {
  5. $main_content .= '<br><h2><center><a href="?subtopic=shopadmin&offer_type=item">ADD SHOP OFFER</a><br><br>
  6. <a href="?subtopic=shopadmin&action=viewoffer">VIEW SHOP OFFER <i>(EDIT/DELETE)</i></a><br><br><a href="?subtopic=shopadmin&action=points">ADD POINTS</a></center>';
  7. }
  8. if($_REQUEST['offer_type']){
  9. $shop_points = stripslashes(ucwords(strtolower(trim($_REQUEST['shop_points']))));
  10. $shop_offer_type = stripslashes(trim($_REQUEST['offer_type']));
  11. if(empty($shop_points)) {
  12. $main_content .= '<table border="0"><tr><td align="center"><b>Select offer type:</b></td><td><table border="0" ><tr bgcolor="#505050">
  13. <td><font color="white">Item</td><td><font color="white">Addon</td><td><font color="white">Mount</td><td><font color="white">Container</td><td><font color="white">Pacc</td><td><font color="white">Redskull</td><td><font color="white">Unban</td><td><font color="white">Changename</td></tr>
  14. <tr bgcolor="#D4C0A1">
  15. <td align="center"><a href="?subtopic=shopadmin&offer_type=item"><input type="radio" name="offer_type" value="item"></a></td>
  16. <td align="center"><a href="?subtopic=shopadmin&offer_type=addon"><input type="radio" name="offer_type" value="addon"></a></td>
  17. <td align="center"><a href="?subtopic=shopadmin&offer_type=mount"><input type="radio" name="offer_type" value="mount"></a></td>
  18. <td align="center"><a href="?subtopic=shopadmin&offer_type=container"><input type="radio" name="offer_type" value="container" ></a></td>
  19. <td align="center"><a href="?subtopic=shopadmin&offer_type=pacc"><input type="radio" name="offer_type" value="pacc" ></a></td>
  20. <td align="center"><a href="?subtopic=shopadmin&offer_type=redskull"><input type="radio" name="offer_type" value="redskull" ></a></td>
  21. <td align="center"><a href="?subtopic=shopadmin&offer_type=unban"><input type="radio" name="offer_type" value="unban" ></a></td>
  22. <td align="center"><a href="?subtopic=shopadmin&offer_type=changename"><input type="radio" name="offer_type" value="changename" ></a></td>
  23. </tr></table></td></tr>';
  24. $main_content .= '<form action="?subtopic=shopadmin&offer_type='.$shop_offer_type.'&check" method="post" ><table border="0"><tr><td align="center" ><b>Points:</b></td>
  25. <td><input type="textbox" name="shop_points" maxlenght="7" style="width: 70px"></td></tr>';
  26. if($_REQUEST['offer_type'] == 'container'){
  27. $main_content .= '<tr><td align="center" ><b>Container ID:</b></td>
  28. <td><input type="text" name="shop_itemid1" maxlenght="7" style="width: 70px" ></td></tr>
  29. <tr><td align="center" ><b>Count Container:</b></td>
  30. <td><input type="text" name="shop_count1" maxlenght="7" style="width: 70px" ></td></tr>
  31. <tr><td align="center" ><b>Item ID:</b></td>
  32. <td><input type="text" name="shop_itemid2" maxlenght="7" style="width: 70px" ></td></tr>
  33. <tr><td align="center" ><b>Count Item:</b></td>
  34. <td><input type="text" name="shop_count2" maxlenght="7" style="width: 70px" ></td></tr>';
  35. }
  36. if($_REQUEST['offer_type'] == 'item'){
  37. $main_content .= '<tr><td align="center"><b>Item ID:</b></td>
  38. <td><input type="text" name="shop_itemid1" maxlenght="7" style="width: 70px" ></td></tr>
  39. <tr><td align="center"><b>Item Count:</b></td>
  40. <td><input type="text" name="shop_count1" maxlenght="7" style="width: 70px" ></td></tr>';
  41. }
  42. if($_REQUEST['offer_type'] == 'addon'){
  43. $main_content .= '<tr><td align="center"><b>Addon Outfit ID:</b></td>
  44. <td><input type="text" name="shop_itemid1" maxlenght="7" style="width: 70px" ></td></tr>';
  45. }
  46. if($_REQUEST['offer_type'] == 'mount'){
  47. $main_content .= '<tr><td align="center" ><b>Mount ID:</b></td>
  48. <td><input type="text" name="shop_itemid1" maxlenght="7" style="width: 70px" ></td></tr>';
  49. }
  50. if($_REQUEST['offer_type'] == 'pacc'){
  51. $main_content .= '<tr><td align="center" ><b>Days:</b></td>
  52. <td><input type="text" name="shop_count1" maxlenght="7" style="width: 70px" ></td></tr>';
  53. }
  54. $main_content .= '<tr><td align="center" ><b>Offer Description:</b></td>
  55. <td ><textarea name="shop_offer_description" rows="2" cols="35"></textarea></td></tr>
  56. <tr><td align="center" ><b>Offer Name:</b></td>
  57. <td><input type="text" name="shop_offer_name" maxlenght="40" style="width: 200px" ></td></tr>
  58. <tr><td><input name="submit" type="submit" value="Submit" /></form></td><td>
  59. <form action="?subtopic=shopadmin&offer_type=container" method="post" >
  60. <input name="submit" type="submit" value="Reset" /></form></td></tr></table>';
  61. $main_content .= '<form action="?subtopic=shopadmin" method="post" ><input name="submit" type="submit" value="Back" title="Back"/></form>';
  62. }
  63. else
  64. {
  65. $shop_points = stripslashes(trim($_POST['shop_points']));
  66. $shop_offer_type = stripslashes(trim($_REQUEST['offer_type']));
  67. $shop_itemid1 = stripslashes(trim($_POST['shop_itemid1']));
  68. $shop_count1 = stripslashes(trim($_POST['shop_count1']));
  69. $shop_itemid2 = stripslashes(trim($_POST['shop_itemid2']));
  70. $shop_count2 = stripslashes(trim($_POST['shop_count2']));
  71. $shop_offer_description = stripslashes(trim($_POST['shop_offer_description']));
  72. $shop_offer_name = stripslashes(trim($_POST['shop_offer_name']));
  73. $SQL->query('INSERT INTO `z_shop_offer` (id, points, itemid1, count1, itemid2, count2, offer_type, offer_description, offer_name, pid) VALUES (NULL, '.$SQL->quote($shop_points).', '.$SQL->quote($shop_itemid1).', '.$SQL->quote($shop_count1).', '.$SQL->quote($shop_itemid2).', '.$SQL->quote($shop_count2).', '.$SQL->quote($shop_offer_type).', '.$SQL->quote($shop_offer_description).', '.$SQL->quote($shop_offer_name).', 0)');
  74. $main_content .= '<center><h2><font color="red">Added to Shop:</font></h2></center><hr/>
  75. <tr><td align="center" ><b>Points:</b></td>
  76. <td>'.$shop_points.'</td></tr><br>';
  77. if($shop_offer_type == 'container'){
  78. $main_content .= '<tr><td align="center" ><b>Container ID:</b></td>
  79. <td>'.$shop_itemid1.'</td></tr><br>
  80. <tr><td align="center" ><b>Count Container:</b></td>
  81. <td>'.$shop_count1.'</td></tr><br>
  82. <tr><td align="center" ><b> Item ID (in Container):</b></td>
  83. <td>'.$shop_itemid2.'</td></tr><br>
  84. <tr><td align="center" ><b>Count Item (in Container):</b></td>
  85. <td>'.$shop_count2.'</td></tr><br>'; }
  86. if ($shop_offer_type == 'item'){
  87. $main_content .= '<tr><td align="center" ><b>Item ID:</b></td>
  88. <td>'.$shop_itemid1.'</td></tr><br>
  89. <tr><td align="center" ><b>Count Item:</b></td>
  90. <td>'.$shop_count1.'</td></tr><br>'; }
  91. if ($shop_offer_type == 'addon'){
  92. $main_content .= '<tr><td align="center" ><b>Addon Outfit ID:</b></td>
  93. <td>'.$shop_itemid1.'</td></tr><br>'; }
  94. if ($shop_offer_type == 'mount'){
  95. $main_content .= '<tr><td align="center" ><b>Mounts ID:</b></td>
  96. <td>'.$shop_itemid1.'</td></tr><br>'; }
  97. if ($shop_offer_type == 'pacc'){
  98. $main_content .= '<tr><td align="center" ><b>Days:</b></td>
  99. <td>'.$shop_count1.'</td></tr><br>'; }
  100. $main_content .= '<tr><td align="center" ><b>Offer Type:</b></td>
  101. <td>'.$shop_offer_type.'</td></tr><br>
  102. <tr><td align="center" ><b>Offer Description:</b></td>
  103. <td>'.$shop_offer_description.'</td></tr><br>
  104. <tr><td align="center" ><b>Offer Name:</b></td>
  105. <td>'.$shop_offer_name.'</td></tr>
  106. <br><form action="?subtopic=shopadmin&offer_type=item" method="post" ><input name="submit" type="submit" value="Back" title="Back"/></form>';
  107. }
  108. }
  109. if($action == "viewoffer") {
  110. $items = simplexml_load_file($config['site']['server_path'].'/data/items/items.xml') or die('<b>Could not load items!</b>');
  111. foreach($items->item as $v)
  112. $itemList[(int)$v['id']] = $v['name'];
  113. $order = array("id" => "id", "points" => "points", "offer_type" => "offer_type", "itemid1" => "itemid1", "itemid2" => "itemid2");
  114. $main_content .= '<center><table width="550"><tr BGCOLOR="#505050"><td width="5"><font color="white"><a href="index.php?subtopic=shopadmin&action=viewoffer&order=' . getOrder($order, 'order', 'id') . '" class=white>ID:</td><td width="5"><font color="white"><a href="index.php?subtopic=shopadmin&action=viewoffer&order=' . getOrder($order, 'order', 'points') . '" class=white>Points:</td><td width="7">
  115. <font color="white"><a href="index.php?subtopic=shopadmin&action=viewoffer&order=' . getOrder($order, 'order', 'itemid1') . '" class=white>Item ID:</td><td width="5"><font color="white">Count:</td><td width="7"><center><font color="white"><a href="index.php?subtopic=shopadmin&action=viewoffer&order=' . getOrder($order, 'order', 'itemid2') . '" class=white>Container ID:</center></td><td width="5"><font color="white">Count:</td><td width="7"><font color="white"><a href="index.php?subtopic=shopadmin&action=viewoffer&order=' . getOrder($order, 'order', 'offer_type') . '" class=white>Offer Type:</td>
  116. <td width="85"><font color="white">Offer Description:</td><td width="30"><font color="white">Offer Name:</td><td width="30"></td></tr>';
  117. $shopoffers = $SQL->query('SELECT id, points, itemid1, count1, itemid2, count2, offer_type, offer_description, offer_name, pid FROM z_shop_offer ' . makeOrder($order, 'order', 'id'));
  118. foreach($shopoffers as $shop) {
  119. $main_content .= '</B><tr BGCOLOR="#D4C0A1"><td align="center">'.$shop['id'].'<td align="center">'.$shop['points'].'</td>';
  120. if($shop['itemid1'] == "0") {
  121. $main_content .= '<td align="center">'.$shop['itemid1'].'<br></td>';
  122. }
  123. else
  124. {
  125. $main_content .= '<td align="center">'.$shop['itemid1'].'<br>(' . $itemList[(int)$shop['itemid1']] . ')</td>';
  126. }
  127. $main_content .= '<td align="center">'.$shop['count1'].'</td>';
  128. if($shop['itemid2'] == "0") {
  129. $main_content .= '<td align="center">'.$shop['itemid2'].'</td>';
  130. }
  131. else
  132. {
  133. $main_content .= '<td align="center">'.$shop['itemid2'].'<br>(' . $itemList[(int)$shop['itemid2']] . ')</td>';
  134. }
  135. $main_content .= '<td align="center">'.$shop['count2'].'</td><td align="center">'.$shop['offer_type'].'</td><td align="left">'.$shop['offer_description'].'</td><td align="left">'.$shop['offer_name'].'</td>';
  136. $main_content .= '<td align="center"><a href="?subtopic=shopadmin&action=editoffer&id='.$shop['id'].'"><img src="'.$layout_name.'/images/news/edit_news.png" border="0"></a><br><br><a href="?subtopic=shopadmin&action=deleteoffer&id='.$shop['id'].'"><img src="'.$layout_name.'/images/news/delete_news.png" border="0"></a></td>';
  137. }
  138. $main_content .= '</td></tr></TABLE><br><form action="?subtopic=shopadmin" method="post" ><input name="submit" type="submit" value="Back" title="Back"/></form>';
  139. }
  140. if($action == "deleteoffer") {
  141. $id = (int) $_REQUEST['id'];
  142. $SQL->query('DELETE FROM z_shop_offer WHERE id = '.$id.' LIMIT 1;');
  143. $main_content .= '<center>Shop offer has been deleted.</center><br><center><form action="?subtopic=shopadmin&action=viewoffer" method="post" ><input name="submit" type="submit" value="Back" title="Back"/></form></center>';
  144. }
  145. if($action == "editoffer") {
  146. $id = (int) $_REQUEST['id'];
  147. $shopoffers = $SQL->query('SELECT * FROM z_shop_offer WHERE id = '.$id.' LIMIT 1;');
  148. foreach($shopoffers as $shop) {
  149. $main_content .= '<form action="?subtopic=shopadmin&action=edited&id='.$id.'" method="post" ><table border="0"><tr><td align="center" ><b>Points:</b></td>
  150. <td><input type="textbox" name="shop_points" maxlenght="7" value="'.$shop['points'].'" style="width: 70px"></td></tr>';
  151. if($shop['offer_type'] == 'container'){
  152. $main_content .= '<tr><td align="center" ><b>Container ID:</b></td>
  153. <td><input type="text" name="shop_itemid1" maxlenght="7" value="'.$shop['itemid1'].'" style="width: 70px" ></td></tr>
  154. <tr><td align="center" ><b>Count Container:</b></td>
  155. <td><input type="text" name="shop_count1" maxlenght="7" value="'.$shop['count1'].'" style="width: 70px" ></td></tr>
  156. <tr><td align="center" ><b>Item ID:</b></td>
  157. <td><input type="text" name="shop_itemid2" maxlenght="7" value="'.$shop['itemid2'].'" style="width: 70px" ></td></tr>
  158. <tr><td align="center" ><b>Count Item:</b></td>
  159. <td><input type="text" name="shop_count2" maxlenght="7" value="'.$shop['count2'].'" style="width: 70px" ></td></tr>';
  160. }
  161. if($shop['offer_type'] == 'item'){
  162. $main_content .= '<tr><td align="center"><b>Item ID:</b></td>
  163. <td><input type="text" name="shop_itemid1" maxlenght="7" value="'.$shop['itemid1'].'" style="width: 70px" ></td></tr>
  164. <tr><td align="center"><b>Item Count:</b></td>
  165. <td><input type="text" name="shop_count1" maxlenght="7" value="'.$shop['count1'].'" style="width: 70px" ></td></tr>';
  166. }
  167. if($shop['offer_type'] == 'addon'){
  168. $main_content .= '<tr><td align="center" ><b>Addon Outfit ID:</b></td>
  169. <td><input type="text" name="shop_itemid1" maxlenght="7" style="width: 70px" ></td></tr>';
  170. }
  171. if($shop['offer_type'] == 'mount'){
  172. $main_content .= '<tr><td align="center" ><b>Mount ID:</b></td>
  173. <td><input type="text" name="shop_itemid1" maxlenght="7" style="width: 70px" ></td></tr>';
  174. }
  175. if($shop['offer_type'] == 'pacc'){
  176. $main_content .= '<tr><td align="center" ><b>Days:</b></td>
  177. <td><input type="text" name="shop_count1" maxlenght="7" style="width: 70px" ></td></tr>';
  178. }
  179. $main_content .= '<tr><td align="center" ><b>Offer Type:</b></td>
  180. <td><input type="text" name="shop_offer_type" value="'.$shop['offer_type'].'" maxlenght="40" style="width: 200px" ></td></tr>
  181. <tr><td align="center" ><b>Offer Description:</b></td>
  182. <td ><textarea name="shop_offer_description" rows="2" cols="35">'.$shop['offer_description'].'</textarea></td></tr>
  183. <tr><td align="center" ><b>Offer Name:</b></td>
  184. <td><input type="text" name="shop_offer_name" value="'.$shop['offer_name'].'" maxlenght="40" style="width: 200px" ></td></tr>
  185. <tr><td><input name="submit" type="submit" value="Submit" /></form></td><td></td></tr></table>';
  186. $main_content .= '<form action="?subtopic=shopadmin&action=viewoffer" method="post" ><input name="submit" type="submit" value="Back" title="Back"/></form>';
  187. }
  188. }
  189. if($action == "edited") {
  190. $id = (int) $_REQUEST['id'];
  191. $shop_points = stripslashes(trim($_POST['shop_points']));
  192. $shop_offer_type = stripslashes(trim($_POST['shop_offer_type']));
  193. $shop_itemid1 = stripslashes(trim($_POST['shop_itemid1']));
  194. $shop_count1 = stripslashes(trim($_POST['shop_count1']));
  195. $shop_itemid2 = stripslashes(trim($_POST['shop_itemid2']));
  196. $shop_count2 = stripslashes(trim($_POST['shop_count2']));
  197. $shop_offer_description = stripslashes(trim($_POST['shop_offer_description']));
  198. $shop_offer_name = stripslashes(trim($_POST['shop_offer_name']));
  199. $SQL->query('UPDATE `z_shop_offer` SET `points` = '.$shop_points.', `itemid1` = '.$SQL->quote($shop_itemid1).', `count1` = '.$SQL->quote($shop_count1).', `itemid2` = '.$SQL->quote($shop_itemid2).', `count2` = '.$SQL->quote($shop_count2).', `offer_type` = '.$SQL->quote($shop_offer_type).', `offer_description` = '.$SQL->quote($shop_offer_description).', `offer_name` = '.$SQL->quote($shop_offer_name).' WHERE `id` = '.$id.';');
  200. $main_content .= '<b><center>Shop offer successfully edited.</b><br><br><form action="?subtopic=shopadmin&action=viewoffer" method="post" ><input name="submit" type="submit" value="Back" title="Back"/></form><meta http-equiv="refresh" content="1;url=/?subtopic=shopadmin&action=viewoffer" />';
  201. }
  202. if($action == "points") {
  203. $player = stripslashes(ucwords(strtolower(trim($_REQUEST['character']))));
  204. $points = $_POST['points'];
  205. if(empty($player)) {
  206. $main_content .= '<form action="" method="post"><B>Enter Character Name:</B><input type="textbox" name="character"><br>
  207. <B>Enter Points Amount:</B><input type="textbox" name="points"><br><input type="submit" value="Submit">
  208. </form></center><form action="?subtopic=shopadmin" method="post" ><input name="submit" type="submit" value="Back" title="Back"/></form>';
  209. }
  210. else
  211. {
  212. $player_data = $SQL->query("SELECT * FROM `players` WHERE `name` = '".$player."';")->fetch();
  213. $SQL->query("UPDATE `accounts` SET `premium_points` = `premium_points` + '".$points."' WHERE `id` = '".$player_data['account_id']."'");
  214. $main_content .= '<b><center>'.$points.' Premium Points added to the account of <i>'.$player.'</i> !</b></center><br>
  215. <form action="?subtopic=shopadmin" method="post" ><input name="submit" type="submit" value="Back" title="Back"/></form>';
  216. }
  217. }
  218. }
  219. else
  220. {
  221. $main_content .= 'Sorry, you have not the rights to access this page.';
  222. }
  223. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!