Fixed some things

Added $config to enable or disable country flags its on false by
default.
Also some advice from Znote for securing integer database values.
Cleanedup some if statements.
This commit is contained in:
Tandloze 2015-08-15 23:24:44 +02:00
parent a2b241b6c1
commit 651b62686c
3 changed files with 18 additions and 57 deletions

View File

@ -7,7 +7,7 @@ if ($config['log_ip'])
if (isset($_GET['name']) === true && empty($_GET['name']) === false) if (isset($_GET['name']) === true && empty($_GET['name']) === false)
{ {
$name = $_GET['name']; $name = getValue($_GET['name']);
$user_id = user_character_exist($name); $user_id = user_character_exist($name);
if ($user_id !== false) if ($user_id !== false)
@ -19,7 +19,7 @@ if (isset($_GET['name']) === true && empty($_GET['name']) === false)
if ($config['Ach']) if ($config['Ach'])
{ {
$achievementPoints = mysql_select_single("SELECT SUM(`value`) AS `sum` FROM `player_storage` WHERE `key` LIKE '30___' AND `player_id`='$user_id'"); $achievementPoints = mysql_select_single("SELECT SUM(`value`) AS `sum` FROM `player_storage` WHERE `key` LIKE '30___' AND `player_id`=(int)$user_id");
} }
} }
@ -47,8 +47,12 @@ if (isset($_GET['name']) === true && empty($_GET['name']) === false)
<!-- Profile name --> <!-- Profile name -->
<h1><font class="profile_font" name="profile_font_header">Profile: <?php echo $profile_data['name']; ?></font></h1> <h1><font class="profile_font" name="profile_font_header">Profile: <?php echo $profile_data['name']; ?></font></h1>
<ul class="unstyled"> <ul class="unstyled">
<?php
if ($config['country_flags'])
{ ?>
<!-- Player country data --> <!-- Player country data -->
<li><font class="profile_font" name="profile_font_country">Country: <?php echo '<img src="\flags\\' . $account_data['flag'] . '.png">'; ?></font></li> <li><font class="profile_font" name="profile_font_country">Country: <?php echo '<img src="\flags\\' . $account_data['flag'] . '.png">'; ?></font></li><?php
} ?>
<!-- Player male / female --> <!-- Player male / female -->
<li> <li>
@ -130,7 +134,7 @@ if (isset($_GET['name']) === true && empty($_GET['name']) === false)
$townid = ($config['TFSVersion'] === 'TFS_03') ? 'town' : 'town_id'; $townid = ($config['TFSVersion'] === 'TFS_03') ? 'town' : 'town_id';
$houses = mysql_select_multi("SELECT `id`, `owner`, `name`, `$townid` AS `town_id` FROM `houses` WHERE `owner` = $user_id;"); $houses = mysql_select_multi("SELECT `id`, `owner`, `name`, `$townid` AS `town_id` FROM `houses` WHERE `owner` = $user_id;");
if ($houses !== false) if ($houses)
{ {
$playerlist = array(); $playerlist = array();
foreach ($houses as $h) foreach ($houses as $h)
@ -144,7 +148,7 @@ if (isset($_GET['name']) === true && empty($_GET['name']) === false)
{ {
?> ?>
<li>House: <?php echo $h['name']; ?>, <?php <li>House: <?php echo $h['name']; ?>, <?php
foreach ($config['towns'] as $key=>$value) foreach ($config['towns'] as $key => $value)
{ {
if ($key == $h['town_id']) if ($key == $h['town_id'])
{ {
@ -159,8 +163,9 @@ if (isset($_GET['name']) === true && empty($_GET['name']) === false)
} }
} }
?> ?>
<!-- Display house end --> <!-- Display house end -->
<!-- Display player status -->
<li><font class="profile_font" name="profile_font_status">Status:</font> <?php <li><font class="profile_font" name="profile_font_status">Status:</font> <?php
if ($config['TFSVersion'] == 'TFS_10') if ($config['TFSVersion'] == 'TFS_10')
{ {
@ -175,7 +180,7 @@ if (isset($_GET['name']) === true && empty($_GET['name']) === false)
} }
else else
{ {
if ($profile_data['online'] == 1) if ($profile_data['online'])
{ {
echo '<font class="profile_font" name="profile_font_online" color="green"><b>ONLINE</b></font>'; echo '<font class="profile_font" name="profile_font_online" color="green"><b>ONLINE</b></font>';
} }
@ -186,6 +191,7 @@ if (isset($_GET['name']) === true && empty($_GET['name']) === false)
} }
?> ?>
</li> </li>
<!-- Display player status end -->
<!-- Player created --> <!-- Player created -->
<li><font class="profile_font" name="profile_font_created">Created: <?php echo getClock($profile_znote_data['created'], true); ?></font></li> <li><font class="profile_font" name="profile_font_created">Created: <?php echo getClock($profile_znote_data['created'], true); ?></font></li>
@ -203,52 +209,6 @@ if (isset($_GET['name']) === true && empty($_GET['name']) === false)
} }
?> ?>
<!-- Character information by Znote -->
<table cellspacing="1" cellpadding="4" style="width:540px;">
<tr>
<td bgcolor="#F1E0C6" align="left" width="20%">
<b>Player HP:</b>
</td>
<td bgcolor="#F1E0C6" align="left">
<?php echo $profile_data['health'] . ' / ' . $profile_data['healthmax']; ?>
<div style="width: 100%; height: 3px; border: 1px solid #000;">
<div style="background: red; width: <?php echo (int)($profile_data['health'] / $profile_data['healthmax'] * 100); ?>%; height: 3px;"></div>
</div>
</td>
</tr>
<tr>
<td bgcolor="#D4C0A1" align="left">
<b>Player MP:</b>
</td>
<td bgcolor="#D4C0A1" align="left">
<?php echo $profile_data['mana'] . ' / ' . $profile_data['manamax']; ?>
<div style="width: 100%; height: 3px; border: 1px solid #000;">
<div style="background: blue; width: <?php echo (int)($profile_data['mana'] / $profile_data['manamax'] * 100); ?>%; height: 3px;"></div>
</div>
</td>
</tr>
<tr>
<td bgcolor="#D4C0A1" align="left">
<b>Player XP:</b>
</td>
<td bgcolor="#D4C0A1" align="left">
<?php echo number_format($profile_data['experience']); ?> Experience.
</td>
</tr>
<tr>
<td bgcolor="#F1E0C6" align="left">
<b>To Next Lvl:</b>
</td>
<td bgcolor="#F1E0C6" align="left">
Need <b><?php echo number_format((int)(level_to_experience($profile_data['level'] + 1) - $profile_data['experience'])); ?> experience (<?php echo (100 - (int)max(0, min(100, ($profile_data['experience'] - level_to_experience($profile_data['level'])) / (level_to_experience($profile_data['level'] + 1) - level_to_experience($profile_data['level'])) * 100))); ?>%)</b> to Level <b><?php echo (int)$profile_data['level'] + 1; ?></b>.
<div title="99.320604545 %" style="width: 100%; height: 3px; border: 1px solid #000;">
<div style="background: red; width: <?php echo (int)max(0, min(100, ($profile_data['experience'] - level_to_experience($profile_data['level'])) / (level_to_experience($profile_data['level'] + 1) - level_to_experience($profile_data['level'])) * 100)); ?>%; height: 3px;"></div>
</div>
</td>
</tr>
</table>
<!-- END Character information by Znote -->
<!-- Achievements start --> <!-- Achievements start -->
<?php if ($config['Ach']) <?php if ($config['Ach'])
{ ?> { ?>

View File

@ -440,6 +440,9 @@
// Use guild logo system // Use guild logo system
$config['use_guild_logos'] = true; $config['use_guild_logos'] = true;
// Use country flags
$config['country_flags'] = false;
// Level requirement to create guild? (Just set it to 1 to allow all levels). // Level requirement to create guild? (Just set it to 1 to allow all levels).
$config['create_guild_level'] = 8; $config['create_guild_level'] = 8;

View File

@ -1,8 +1,6 @@
<?php <?php
require_once 'engine/init.php'; require_once 'engine/init.php';
if (user_logged_in() === false) { protect_page();
header('Location: register.php');
}
include 'layout/overall/header.php'; include 'layout/overall/header.php';
$view = (isset($_GET['view']) && (int)$_GET['view'] > 0) ? (int)$_GET['view'] : false; $view = (isset($_GET['view']) && (int)$_GET['view'] > 0) ? (int)$_GET['view'] : false;