Файл: adm/BanPage.php
Строк: 325
<?php
##############################################################################
# *                                                                             #
# * XG PROYECT                                                                 #
# *                                                                           #
# * @copyright Copyright (C) 2008 - 2009 By lucky from xgproyect.net           #
# *                                                                             #
# *                                                                             #
# *  This program is free software: you can redistribute it and/or modify    #
# *  it under the terms of the GNU General Public License as published by    #
# *  the Free Software Foundation, either version 3 of the License, or       #
# *  (at your option) any later version.                                     #
# *                                                                             #
# *  This program is distributed in the hope that it will be useful,         #
# *  but WITHOUT ANY WARRANTY; without even the implied warranty of             #
# *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the             #
# *  GNU General Public License for more details.                             #
# *                                                                             #
##############################################################################
define('INSIDE'  , true);
define('INSTALL' , false);
define('IN_ADMIN', true);
$xgp_root = './../';
include($xgp_root . 'extension.inc.php');
include($xgp_root . 'common.' . $phpEx);
if ($EditUsers != 1) die(message ($lang['404_page']));
$parse = $lang;
if ($_GET['order'] == 'id')
    $ORDER    =    "id";
else
    $ORDER    =    "username";
    
    
    
if ($user['authlevel'] != 3)
    $ListWHERE        =    "WHERE `authlevel` != 3";
    
    
if ($_GET['view'] == 'bana' && $user['authlevel'] != 3)
    $WHEREBANA    =    "AND `bana` = 1";
elseif ($_GET['view'] == 'bana' && $user['authlevel'] == 3)
    $WHEREBANA    =    "WHERE `bana` = 1";
$UserList        =    doquery("SELECT `username`, `id`, `bana` FROM {{table}} ".$ListWHERE." ".$WHEREBANA." ORDER BY ".$ORDER." ASC", "users");
$Users    =    0;
while ($a    =    mysql_fetch_array($UserList))
{
    if ($a['bana']    ==    '1')
        $SuspendedNow    =    $lang['bo_characters_suus'];
    else
        $SuspendedNow    =    "";
        
    $parse['List']    .=    '<option value="'.$a['username'].'">'.$a['username'].'  (ID: '.$a['id'].')'.$SuspendedNow.'</option>';
    $Users++;
}
if ($_GET['order2'] == 'id')
    $ORDER2    =    "id";
else
    $ORDER2    =    "username";
    
$Banneds    =    0;
$UserListBan    =    doquery("SELECT `username`, `id` FROM {{table}} WHERE `bana` = '1' ORDER BY ".$ORDER2." ASC", "users");
while ($b    =    mysql_fetch_array($UserListBan))
{
    $parse['ListBan']    .=    '<option value="'.$b['username'].'">'.$b['username'].'  (ID: '.$b['id'].')</option>';
    $Banneds++;
}
$parse['userss']    =    "<font color=lime>".$Users."</font>";
$parse['banneds']    =    "<font color=lime>".$Banneds."</font>";
mysql_free_result($UserList);
mysql_free_result($UserListBan);
if($_GET['panel'])
{
    $QueryUserBan            =    doquery("SELECT * FROM {{table}} WHERE `who` = '".$_GET['ban_name']."'", "banned", true);
    $QueryUserBanVacation    =    doquery("SELECT urlaubs_modus FROM {{table}} WHERE `username` = '".$_GET['ban_name']."'", "users", true);
        
    if (!$QueryUserBan)
    {
        $parse['title']            =    $lang['bo_bbb_title_1'];
        $parse['changedate']    =    $lang['bo_bbb_title_2'];
    }
    else
    {
        $parse['title']            =    $lang['bo_bbb_title_3'];
        $parse['changedate']    =    $lang['bo_bbb_title_6'];
        $parse['changedate_advert']    =    "<td class=c width=5%><img src="../styles/images/Adm/i.gif" onMouseOver='return overlib("".$lang['bo_bbb_title_4']."", 
            CENTER, OFFSETX, -80, OFFSETY, -65, WIDTH, 250);' onMouseOut='return nd();'></td>";
            
        $parse['reas']            =    $QueryUserBan['theme'];
        $parse['timesus']        =    
            "<tr>
                <th>".$lang['bo_bbb_title_5']."</th>
                <th height=25 colspan=2>".date("d-m-Y H:i:s", $QueryUserBan['longer'])."</th>
            </tr>";
    }
    
    
    if ($QueryUserBanVacation['urlaubs_modus'] == 1)
        $parse['vacation']    =    'checked    =    "checked"';
    else
        $parse['vacation']    =    '';
        
    $parse['name']            =    $_GET['ban_name'];
    if ($_POST['bannow'])
    {
        if(!is_numeric($_POST['days']) || !is_numeric($_POST['hour']) || !is_numeric($_POST['mins']) || !is_numeric($_POST['secs']))
            return display( parsetemplate(gettemplate("adm/BanOptionsResultBody"), $parse), false, '', true, false);
            
        $name              = $_POST['ban_name'];
        $reas              = $_POST['why'];
        $days              = $_POST['days'];
        $hour              = $_POST['hour'];
        $mins              = $_POST['mins'];
        $secs              = $_POST['secs'];
        $admin             = $user['username'];
        $mail              = $user['email'];
        $Now               = time();
        $BanTime           = $days * 86400;
        $BanTime          += $hour * 3600;
        $BanTime          += $mins * 60;
        $BanTime          += $secs;
        if ($QueryUserBan['longer'] > time())
            $BanTime          += ($QueryUserBan['longer'] - time());
            
        if (($BanTime + $Now) < time())
            $BannedUntil       = $Now;
        else
            $BannedUntil       = $Now + $BanTime;
        
        
        if ($QueryUserBan)
        {
            $QryInsertBan      = "UPDATE {{table}} SET ";
            $QryInsertBan     .= "`who` = '". $name ."', ";
            $QryInsertBan     .= "`theme` = '". $reas ."', ";
            $QryInsertBan     .= "`who2` = '". $name ."', ";
            $QryInsertBan     .= "`time` = '". $Now ."', ";
            $QryInsertBan     .= "`longer` = '". $BannedUntil ."', ";
            $QryInsertBan     .= "`author` = '". $admin ."', ";
            $QryInsertBan     .= "`email` = '". $mail ."' ";
            $QryInsertBan     .= "WHERE `who2` = '".$name."';";
            doquery( $QryInsertBan, 'banned');
        }
        else
        {
            $QryInsertBan      = "INSERT INTO {{table}} SET ";
            $QryInsertBan     .= "`who` = "". $name ."", ";
            $QryInsertBan     .= "`theme` = '". $reas ."', ";
            $QryInsertBan     .= "`who2` = '". $name ."', ";
            $QryInsertBan     .= "`time` = '". $Now ."', ";
            $QryInsertBan     .= "`longer` = '". $BannedUntil ."', ";
            $QryInsertBan     .= "`author` = '". $admin ."', ";
            $QryInsertBan     .= "`email` = '". $mail ."';";
            doquery( $QryInsertBan, 'banned');
        }
        $QryUpdateUser     = "UPDATE {{table}} SET ";
        $QryUpdateUser    .= "`bana` = '1', ";
        $QryUpdateUser    .= "`banaday` = '". $BannedUntil ."', ";
        if(isset($_POST['vacat']))
        {
            $QryUpdateUser    .= "`urlaubs_modus` = '1'";
            $ASD    =    1;
        }
        else
        {
            $QryUpdateUser    .= "`urlaubs_modus` = '0'";
            $ASD    =    0;
        }
        $QryUpdateUser    .= "WHERE ";
        $QryUpdateUser    .= "`username` = '". $name ."';";
        doquery( $QryUpdateUser, 'users');
        $PunishThePlanets     = "UPDATE {{table}} SET ";
        $PunishThePlanets    .= "`metal_mine_porcent` = '0', ";
        $PunishThePlanets    .= "`crystal_mine_porcent` = '0', ";
        $PunishThePlanets    .= "`deuterium_sintetizer_porcent` = '0'";
        $PunishThePlanets    .= "WHERE ";
        $PunishThePlanets    .= "`id_owner` = '". $GetUserData['id'] ."';";
        doquery( $PunishThePlanets, 'planets');
        
        
        
        $Log    .=    "n".$lang['log_suspended_title']."n";
        $Log    .=    $lang['log_the_user'].$user['username']." ".$lang['log_suspended_1'].$name.$lang['log_suspended_2']."n";
        $Log    .=    $lang['log_reason'].$reas."n";
        $Log    .=    $lang['log_time'].date("d-m-Y H:i:s", time())."n";
        $Log    .=    $lang['log_longer'].date("d-m-Y H:i:s", $BannedUntil)."n";
        $Log    .=    $lang['log_vacations'].$lang['log_viewmod'][$ASD]."n";
                
        LogFunction($Log, "GeneralLog", $LogCanWork);
        header ("Location: BanPage.php?panel=ban_name&ban_name=".$_GET['ban_name']."&succes=yes");
    }
    if ($_GET['succes']    ==    'yes')
        $parse['display']    =    "<tr><th colspan="2"><font color=lime>". $lang['bo_the_player'] . $name . $lang['bo_banned'] ."</font></th></tr>";
    display( parsetemplate(gettemplate("adm/BanOptionsResultBody"), $parse), false, '', true, false);
}
elseif($_POST && $_POST['unban_name'])
{
    $name = $_POST['unban_name'];
    doquery("DELETE FROM {{table}} WHERE who = '".$name."'", 'banned');
    doquery("UPDATE {{table}} SET bana = '0', banaday = '0' WHERE username = '".$name."'", "users");
    
    
    
    $Log    .=    "n".$lang['log_suspended_title']."n";
    $Log    .=    $lang['log_the_user'].$user['username']." ".$lang['log_suspended_3'].$name."n";
                
    LogFunction($Log, "GeneralLog", $LogCanWork);
    
    header ("Location: BanPage.php?succes2=yes");
}
    if ($_GET['succes2'] == 'yes')
        $parse['display2']    =    "<tr><th colspan="2"><font color=lime>". $lang['bo_the_player2'] . $name . $lang['bo_unbanned'] ."</font></th></tr>";
display( parsetemplate(gettemplate("adm/BanOptions"), $parse), false, '', true, false);
?>