Advertisement
Guest User

Untitled

a guest
Nov 22nd, 2017
81
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.98 KB | None | 0 0
  1. <?PHP
  2. session_start();
  3. require "../script.php";
  4.  
  5. if(isset($_GET['SKINID'])) {
  6. function getUserSkinInfo($uid, $skinId) {
  7. require "../../inc/bdd.php";
  8. $sql = $db->prepare("SELECT s.* FROM `skins` s INNER JOIN `users` m ON m.id = :id AND s.skinid = :skinId");
  9. $sql->bindParam("id", $uid);
  10. $sql->bindParam("skinId", $skinId);
  11.  
  12. $sql->execute();
  13. $data = $sql->fetch();
  14. require "../../inc/bdd.php";
  15. $arraysql = $db->prepare('SELECT skinList, skin FROM users WHERE id = :uid');
  16. $arraysql->bindParam('uid',$uid);
  17.  
  18. $arraysql->execute();
  19. $data_array = $arraysql->fetch();
  20. $skListStr = $data_array["skinList"];
  21. $Array = explode(",", $skListStr);
  22. $poss = 0;
  23. for($i=0;$i<count($Array);$i++) {
  24. if($_GET['SKINID'] == $Array[$i]) {
  25. $poss = 1;
  26. }
  27. }
  28. return $poss;
  29. }
  30.  
  31. function colorToStr($color) {
  32. $color = array_map("ord", str_split($color));
  33. return implode(";", $color);
  34. }
  35.  
  36. function getDataFromSession($session) {
  37. require "../../inc/bdd.php";
  38. $sql = $db->prepare("SELECT * FROM `users` WHERE `session` = :session");
  39. $sql->bindParam("session", $session);
  40.  
  41. $sql->execute();
  42. return $sql->fetch();
  43. }
  44.  
  45. $session = $_SESSION['session'];
  46. $uid = getDataFromSession($session)["id"];
  47.  
  48. $result = Array();
  49. $result["RESULT"] = 0;
  50.  
  51. $skinId = intval($_GET["SKINID"]);
  52. $skinColor = $_GET["SKINCOLOR"];
  53. $avatarCol = urldecode($skinColor);
  54.  
  55. $userSkinInfo = getUserSkinInfo($uid, $skinId);
  56.  
  57. if ($userSkinInfo != 0) {
  58. $result["RESULT"] = 1;
  59. $skinColor = colorToStr($skinColor);
  60. require "../../inc/bdd.php";
  61. $sql = $db->prepare("UPDATE `users` SET `skin` = :skin, `colors` = :colors, `colorAvatar` = :avatarCol WHERE `id` = :id");
  62. $sql->bindParam("skin", $skinId);
  63. $sql->bindParam("colors", $skinColor);
  64. $sql->bindParam('avatarCol', $avatarCol);
  65. $sql->bindParam("id", $uid);
  66. $sql->execute();
  67. $sql->closeCursor();
  68. } else {
  69. $result["RESULT"] = 0;
  70. }
  71. die(http_build_query($result));
  72. } elseif(isset($_GET['FAVORI_BDD'])) {
  73. function getDataFromSession($session) {
  74. require "../../inc/bdd.php";
  75. $sql = $db->prepare('SELECT * FROM `users` WHERE `session` = :session');
  76. $sql->bindParam('session', $session);
  77. $sql->execute();
  78. return $sql->fetch();
  79. }
  80.  
  81. function getUserSkinInfo($uid, $skinId) {
  82. require "../../inc/bdd.php";
  83. $sql = $db->prepare("SELECT s.* FROM `skins` s INNER JOIN `users` m ON m.id = :id AND s.skinid = :skinId");
  84. $sql->bindParam("id", $uid);
  85. $sql->bindParam("skinId", $skinId);
  86.  
  87. $sql->execute();
  88. $data = $sql->fetch();
  89. require "../../inc/bdd.php";
  90. $arraysql = $db->prepare('SELECT skinList, skin FROM users WHERE id = :uid');
  91. $arraysql->bindParam('uid',$uid);
  92.  
  93. $arraysql->execute();
  94. $data_array = $arraysql->fetch();
  95. $skListStr = $data_array["skinList"];
  96. $Array = explode(",", $skListStr);
  97. $poss = 0;
  98. for($i=0;$i<count($Array);$i++) {
  99. if($_GET['SKINID'] == $Array[$i]) {
  100. $poss = 1;
  101. }
  102. }
  103. return $poss;
  104. }
  105.  
  106.  
  107. }
  108. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement