Guest User

Untitled

a guest
Feb 9th, 2018
35
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 10.81 KB | None | 0 0
  1. <?
  2.  
  3. $id = _string(_num($_COOKIE['id']));
  4. $password = _string($_COOKIE['password']);
  5.  
  6. if($id && $password) {
  7.  
  8. $q = mysql_query('SELECT * FROM `users` WHERE `id` = "'.$id.'" AND `password` = "'.$password.'"');
  9. $user = mysql_fetch_array($q);
  10.  
  11. if(!$user) {
  12.  
  13. setCookie('id', '');
  14.  
  15. setCookie('password', '');
  16.  
  17. }
  18.  
  19. mysql_query('UPDATE `users` SET `online` = "'.time().'",
  20. `ip` = "'.$_SERVER['REMOTE_ADDR'].'",
  21. `ua` = "'.$_SERVER['HTTP_USER_AGENT'].'",
  22. `self` = "'.$_SERVER['PHP_SELF'].'" WHERE `id` = "'.$user['id'].'"');
  23.  
  24.  
  25.  
  26. if($user['last_update'] - $user['timon'] > 1) {
  27.  
  28. mysql_query('UPDATE `users` SET `timon` = "'.($user['timon'] + 1).'" WHERE `id` ="'.$user['id'].'"');
  29. }
  30.  
  31.  
  32.  
  33.  
  34. $_time = 40;
  35.  
  36. if($user['last_update'] < (time() - $_time)){
  37.  
  38. mysql_query('UPDATE `users` SET `last_update` = "'.time().'" WHERE `id` = "'.$user['id'].'"');
  39.  
  40. }
  41.  
  42.  
  43.  
  44. if((time() - $user['last_update']) > $_time) {
  45.  
  46. mysql_query('UPDATE `users` SET `last_update` = "'.time().'" WHERE `id` = "'.$user['id'].'"');
  47.  
  48.  
  49.  
  50. if($user['self'] != '/coliseum.php') {
  51.  
  52. $hp = $user['vit'];
  53.  
  54. if($user['hp'] < $hp) {
  55. $_hp = (((time() - $user['last_update']) / $_time) - 1 );
  56. if($_hp > $hp) {
  57.  
  58. $_hp = $hp - $user['hp'];
  59.  
  60. }
  61.  
  62.  
  63. $_hpy= round(100 / ($user['vit']/ $user['hp']));
  64.  
  65. mysql_query('UPDATE `users` SET `hp` = "'.($user['hp'] + $_hp*60).'" WHERE `id` = "'.$user['id'].'"');
  66.  
  67. }
  68.  
  69.  
  70. if($user['mp'] < $user['mana']) {
  71.  
  72. $_mp = (((time() - $user['last_update']) / $_time) - 1 );
  73. if($_mp > $user['mana']) {
  74. $_mp = $user['mana'] - $user['mp'];
  75. }
  76. mysql_query('UPDATE `users` SET `mp` = "'.($user['mp'] +$_mp*150 ).'" WHERE `id` = "'.$user['id'].'"');
  77.  
  78.  
  79. }
  80.  
  81. }
  82.  
  83. }
  84.  
  85.  
  86. if($user['last_update'] - $user['duel_last_update'] > (60 * 30)) {
  87.  
  88. mysql_query('UPDATE `users` SET `duel_last_update` = "'.($user['duel_last_update'] + (60 * 30)).'",
  89. `duel_fights` = "'.($user['duel_fights'] + (($user['duel_fights'] < 11) ? 1:0)).'",
  90. `duel_changes` = "'.($user['duel_changes'] + (($user['duel_changes'] < 11) ? 1:0)).'" WHERE `id` = "'.$user['id'].'"');
  91.  
  92. }
  93.  
  94. if($user['hp'] > $user['vit'] ) {
  95. mysql_query('UPDATE `users` SET `hp` = "'.($user['vit']).'" WHERE `id` = "'.$user['id'].'"');
  96. }
  97.  
  98. if($user['hp'] < 0) {
  99. mysql_query('UPDATE `users` SET `hp` = "0" WHERE `id` = "'.$user['id'].'"');
  100. }
  101.  
  102. if($user['mp'] > $user['mana']) {
  103. mysql_query('UPDATE `users` SET `mp` = "'.$user['mana'].'" WHERE `id` = "'.$user['id'].'"');
  104. }
  105.  
  106. if($user['mp'] < 0) {
  107. mysql_query('UPDATE `users` SET `mp` = "0" WHERE `id` = "'.$user['id'].'"');
  108. }
  109. if($user['d'] > 10000000) {
  110. mysql_query('UPDATE `users` SET `d` = "0" WHERE `id` = "'.$user['id'].'"');
  111. }
  112. if($user['g'] > 5000000) {
  113. mysql_query('UPDATE `users` SET `g` = "0" WHERE `id` = "'.$user['id'].'"');
  114. }
  115.  
  116.  
  117.  
  118.  
  119. $clan_memb = mysql_query('SELECT * FROM `clan_memb` WHERE `user` = "'.$user['id'].'"');
  120. $clan_memb = mysql_fetch_array($clan_memb);
  121.  
  122.  
  123. if($clan_memb) {
  124.  
  125. $clan = mysql_fetch_array(mysql_query('SELECT * FROM `clans` WHERE `id` = "'.$clan_memb['clan'].'"'));
  126.  
  127. if($clan_memb['last_update'] <= time()) {
  128.  
  129. mysql_query('UPDATE `clan_memb` SET `last_update` = "'.($clan_memb['last_update'] + ((60 * 60) * 24 )).'",
  130. `v` = `v` + 3 WHERE `id` = "'.$clan_memb['id'].'"');
  131.  
  132. }
  133.  
  134. $clan_1 = ($clan['built_1'] * 250);
  135.  
  136.  
  137. if($clan['built_1'] > 0 && $clan_1) {
  138.  
  139. $user['vit'] += $clan_1*6;
  140.  
  141. $user['hp'] += $clan_1*6;
  142.  
  143. }
  144.  
  145. $clan_2 = ($clan['built_2'] * 250);
  146.  
  147.  
  148.  
  149. if($clan['built_2'] > 0 && $clan_2) {
  150.  
  151.  
  152. $user['str'] += $clan_2*6;
  153. }
  154.  
  155. $clan_3 = ($clan['built_3'] * 250);
  156.  
  157.  
  158.  
  159. if($clan['built_3'] > 0 && $clan_3) {
  160.  
  161. $user['def'] += $clan_3*6;
  162.  
  163. }
  164.  
  165.  
  166.  
  167. }
  168.  
  169.  
  170.  
  171.  
  172.  
  173.  
  174.  
  175.  
  176.  
  177.  
  178. $ban = mysql_fetch_array(mysql_query('SELECT * FROM `ban` WHERE `user` = "'.$user['id'].'"'));
  179. if($ban) {
  180. if($ban['time'] <=time()) {
  181. mysql_query('DELETE FROM `ban` WHERE `user` = "'.$user['id'].'"');
  182. }
  183. if($ban['time'] > time() && $_SERVER['PHP_SELF'] != '/ban.php') {
  184. header('location: /ban.php?'.$udet=rand(111111,999999).'');
  185. exit;
  186. }
  187. }
  188.  
  189. # banned chat / forum
  190. $banned = mysql_fetch_array(mysql_query('SELECT * FROM `banned` WHERE `user` = "'.$user['id'].'"'));
  191. if($banned['time'] <=time()) {
  192. mysql_query('DELETE FROM `banned` WHERE `user` = "'.$user['id'].'"');
  193. }
  194.  
  195.  
  196.  
  197.  
  198.  
  199.  
  200. if($user['time_d'] < time()){
  201. mysql_query('UPDATE `users` SET `time_d` = "0", `bg_d` = "1" WHERE `id` = "'.$user['id'].'"');
  202.  
  203. if($user['lvl_d'] == 20){
  204. mysql_query('UPDATE `users` SET `lvl_d` = "0" WHERE `id` = "'.$user['id'].'"');
  205. }
  206. }
  207.  
  208.  
  209.  
  210. $ar = mysql_fetch_array(mysql_query('SELECT * FROM `arena_xod` WHERE `user` = "'.$user['id'].'"'));
  211.  
  212. if($user['arena_xod'] == 1) {
  213. mysql_query('INSERT INTO `arena_xod` SET `user` = "'.$user['id'].'",`time` = "'.(time() + (3600)).'"');
  214. }
  215. if($ar) {
  216. if($ar['time'] < time()) {
  217.  
  218. if($user['vip']==0){ $xod=100;}else{$xod=200; }
  219. mysql_query('UPDATE `users` SET `arena_xod` = "'.$xod.'" WHERE `id` = "'.$user['id'].'"');
  220. mysql_query('DELETE FROM `arena_xod` WHERE `user` = \''.$user['id'].'\'');
  221. }}
  222.  
  223. $premium = mysql_fetch_array(mysql_query('SELECT * FROM `premium` WHERE `user` = "'.$user['id'].'"'));
  224.  
  225. if($premium) {
  226.  
  227. if($premium['time'] < time()) {
  228.  
  229.  
  230. $vip_1 = 30000;
  231.  
  232. $vip_2 = 30000;
  233.  
  234. $vip_3 = 30000;
  235.  
  236.  
  237. mysql_query('UPDATE `users` SET `str` = `str` - '.$vip_1.',
  238. `vit` = `vit` - '.$vip_2.',
  239.  
  240. `def` = `def` - '.$vip_3.', `vip` = "0" WHERE `id` = \''.$user['id'].'\'');
  241.  
  242. mysql_query('DELETE FROM `premium` WHERE `user` = \''.$user['id'].'\'');
  243.  
  244. }
  245.  
  246. }
  247.  
  248. $limt = mysql_fetch_array(mysql_query('SELECT * FROM `users` WHERE `id` = "'.$user['id'].'"'));
  249.  
  250. if($limt) {
  251. if($user['gold_clan_time'] < time()) {
  252. if($user['save'] == 1) {
  253. mysql_query('UPDATE `users` SET `gold_clan`= "10000" WHERE `id` = \''.$user['id'].'\'');
  254.  
  255. if($user['gold_clan']== 0){ mysql_query('UPDATE `users` SET `gold_clan_time` = "'.(time() +(23*3600)).'" WHERE `id` = \''.$user['id'].'\'');
  256. }
  257. }
  258. if($user['save'] == 0) {
  259. mysql_query('UPDATE `users` SET `gold_clan_time` = "'.(time() +(48*3600)).'",`gold_clan`= "10000" WHERE `id` = \''.$user['id'].'\'');
  260. }}}
  261.  
  262. $limit = mysql_fetch_array(mysql_query('SELECT * FROM `users` WHERE `id` = "'.$user['id'].'"'));
  263.  
  264. if($limit) {
  265. if($user['times_limit'] < time()) {
  266. if($user['save'] == 1) {
  267. if($user['s_limit'] == 0) {
  268. mysql_query('UPDATE `users` SET `s_limit`= "30000" WHERE `id` = \''.$user['id'].'\'');
  269. if($user['s_limit']==0){ mysql_query('UPDATE `users` SET `times_limit` = "'.(time() +(23*3600)).'" WHERE `id` = \''.$user['id'].'\'');}}}
  270. if($user['save'] == 0) {
  271. mysql_query('UPDATE `users` SET `times_limit` = "'.(time() +(23*3600)).'"`s_limit`= "15000" WHERE `id` = \''.$user['id'].'\'');
  272. }}}
  273.  
  274. if($user['level'] >= 10 && $user['level'] <= 29) {
  275. $lvlh=1;
  276. }
  277. if($user['level'] >= 30 && $user['level'] <= 49) {
  278. $lvlh=2;
  279. }
  280. if($user['level'] >= 50 && $user['level'] <= 69) {
  281. $lvlh=3;
  282. }
  283. if($user['level'] >= 70 && $user['level'] <= 79) {
  284. $lvlh=4;
  285. }
  286. if($user['level'] >= 80 && $user['level'] <= 99) {
  287. $lvlh=5;
  288. }
  289. if($user['level'] >= 100 && $user['level'] <= 129) {
  290. $lvlh=6;
  291. }
  292. if($user['level'] >= 130 && $user['level'] <= 150) {
  293. $lvlh=7;
  294. }
  295. if($user['level'] >= 150 && $user['level'] <= 170) {
  296. $lvlh=8;
  297. }
  298. if($user['level'] >= 170 && $user['level'] <= 200) {
  299. $lvlh=9;
  300. }
  301.  
  302. $member = mysql_query('SELECT * FROM `undying_member` WHERE `user` = "'.$user['id'].'" ORDER BY `id` DESC LIMIT 1');
  303. $member = mysql_fetch_array($member);
  304.  
  305.  
  306. $battle = mysql_query('SELECT * FROM `undying` WHERE `start` = "0" AND `lvl` = "'.$lvlh.'"');
  307. $battle = mysql_fetch_array($battle);
  308.  
  309.  
  310. if(!$battle) {
  311.  
  312. $h = date('H',time());
  313.  
  314. if($h > 22 && $h < 6)
  315. {
  316.  
  317. $time = 3600;
  318.  
  319. }
  320. else
  321. {
  322.  
  323. $time = 3600;
  324.  
  325. }
  326.  
  327. if($user['level'] >= 10 && $user['level'] <= 29) {
  328. $lvlx=1;
  329. mysql_query('INSERT INTO `undyingg` (`time`,`lvl`) VALUES ("'.(time() + $time).'","1")');
  330. }
  331. if($user['level'] >= 30 && $user['level'] <= 49) {
  332. $lvlx=2;
  333. mysql_query('INSERT INTO `undyingg` (`time`,`lvl`) VALUES ("'.(time() + $time).'","2")');
  334. }
  335. if($user['level'] >= 50 && $user['level'] <= 69) {
  336. $lvlx=3;
  337. mysql_query('INSERT INTO `undyingg` (`time`,`lvl`) VALUES ("'.(time() + $time).'","3")');
  338. }
  339. if($user['level'] >= 70 && $user['level'] <= 79) {
  340. $lvlx=4;
  341. mysql_query('INSERT INTO `undyingg` (`time`,`lvl`) VALUES ("'.(time() + $time).'","4")');
  342. }
  343. if($user['level'] >= 80 && $user['level'] <= 99) {
  344. $lvlx=5;
  345. mysql_query('INSERT INTO `undyingg` (`time`,`lvl`) VALUES ("'.(time() + $time).'","5")');
  346. }
  347. if($user['level'] >= 100 && $user['level'] <= 129) {
  348. $lvlx=6;
  349. mysql_query('INSERT INTO `undyingg` (`time`,`lvl`) VALUES ("'.(time() + $time).'","6")');
  350. }
  351. if($user['level'] >= 130 && $user['level'] <= 149) {
  352. $lvlx=7;
  353. mysql_query('INSERT INTO `undyingg` (`time`,`lvl`) VALUES ("'.(time() + $time).'","7")');
  354. }
  355. if($user['level'] >= 150 && $user['level'] <= 170) {
  356. $lvlx=8;
  357. mysql_query('INSERT INTO `undyingg` (`time`,`lvl`) VALUES ("'.(time() + $time).'","8")');
  358. }
  359. if($user['level'] >= 170 && $user['level'] <= 200) {
  360. $lvlx=9;
  361. mysql_query('INSERT INTO `undyingg` (`time`,`lvl`) VALUES ("'.(time() + $time).'","9")');
  362. }
  363.  
  364. }
  365. if($battle['time'] <= time()) {
  366. mysql_query('UPDATE `undying` SET `start` = "1", `time` = "'.(time() + (360*6)).'" WHERE `id` = "'.$battle['id'].'" AND `lvl` ="'.$lvlx.'"');
  367. }
  368.  
  369.  
  370. $battl = mysql_query('SELECT * FROM `podval` WHERE `start` = "0" AND `clan` = "'.$clan['id'].'"');
  371. $battl = mysql_fetch_array($battl);
  372.  
  373. if(!$battl) {
  374.  
  375. $h = date('H',time());
  376. if($h > 22 && $h < 6)
  377. {
  378. $timy = 3600;
  379. }
  380. else
  381. {
  382. $timy = 2400;
  383. }
  384. mysql_query('INSERT INTO `podval` (`time`,`clan`) VALUES ("'.(time() + $timy).'","'.$clan['id'].'")');
  385. }
  386. if($battl['time'] <= time()) {
  387.  
  388. mysql_query('UPDATE `podval` SET `start` = "1", `time` = "'.(time() + (220)).'" WHERE `id` = "'.$battle['id'].'" AND `clan` = "'.$clan['id'].'"');
  389. }
  390.  
  391.  
  392. if($user['access'] < 0 && $_SERVER['PHP_SELF'] != '/zak.php') {
  393. header('location: /zak.php');
  394. exit;
  395. }
  396. }
  397.  
  398. ?>
Add Comment
Please, Sign In to add comment