ambulance.php
<div class='codetop'>CODE</div><div class='codemain' style='height:200px;white-space:pre;overflow:auto'><?
include("../config/config.php");
##################### Класс борьбы с SQL атаками ################
include_once("../config/sql.php");
$stop_injection = new InitVars();
$stop_injection->checkVars();
##################### Класс борьбы с SQL атаками ################
$stat = mysql_fetch_array(mysql_query("SELECT p.user, p.id, p.bloked, p.t_time, p.k_time, p.battle, p.room, p.vitality, p.level, p.hp_now, p.v_time, p.w_time, p.kwest0, ph.sp_5 FROM person p, person_har ph WHERE p.user='".$_COOKIE['user']."' and p.pass='".$_COOKIE['pass']."' LIMIT 1"));
mysql_query("SET CHARSET cp1251");
include("../person/func/changed.php");
if ($stat['bloked']) echo"<script>top.location='../index.php?action=logout'</script>";
if ($stat['t_time']) { header("Location: prison.php"); exit; }
elseif ($stat['battle']) { header("Location: ../battle.php"); exit; }
elseif ($stat['k_time']) { header("Location: academy.php"); exit; }
elseif ($stat['w_time']) { header("Location: works.php"); exit; }
elseif ($stat['r_time']) { header("Location: vault.php"); exit; }
elseif ($stat['o_time']) { header("Location: repair.php"); exit; }
elseif ($stat['room'] != 8) { header("Location: ../main.php"); exit; }
else {
$now=time();
if (isset($take1)) {
if ($stat['kwest0'] != 20) $msg="Ошибка, не пытайтесь взломать игру !";
else {
mysql_query("UPDATE person SET kwest0=21 WHERE user='".$stat['user']."'");
echo"Вы попытались взять котёнка в руки, но он убежал от вас..."; } }
$hp_max=$stat['hp_max'];if ($stat['level'] < 4) { $hp_reglev=180; } else { $hp_reglev=360; }
$reg_time = $hp_reglev*(1-($stat['sp_5']/100));
$vt=(1-($stat['hp_now']/$hp_max))*$reg_time;
if ($use) { if (!$stat['v_time']) { if ($vt>0) { mysql_query("UPDATE person set v_time=$now+$vt where user='$stat[user]'");
header ("Location: ambulance.php"); }}} // Запускаем лечение
include("../config/html_city.php");
if (!$stat[v_time]) $back="<input type=button value=Вернуться onclick='window.location.href=\"street1.php?refer=8&tmp=\"+Math.random();\"\"' class=standbut>";
echo"<body leftmargin=0 topmargin=0>
<table border='0' cellspacing='0' cellpadding='0' class='tmain'>
<tr><td valign='top' style='text-align:center;'>
<table border='0' cellspacing='0' cellpadding='0' align='center' class='ltable' style='width:98%;'>
<tr>
<td colspan='3' valign='top' style='width:100%;'>
<table border='0' cellspacing='0' cellpadding='0'>
<tr>
<td><img src='../img/game/main/ltmenu.png' width='22' height='23' border='0' alt='' /></td>
<td class='nmenu' style='white-space: nowrap; width:50%'></td>
<td align='center' valign='top' class='nmenu'>
<table border='0' cellspacing='0' cellpadding='0'>
<tr>
<td><img src='../img/game/main/l_z_l.png' width='34' height='23' alt='' border='0' /></td>
<td class='l_z_f'>Больница</td>
<td><img src='../img/game/main/l_z_r.png' width='34' height='23' alt='' border='0' /></td>
</tr>
</table>
</td>
<td class='nmenu' style='white-space: nowrap; width:50%; text-align:right;'> </td>
<td><img src='../img/game/main/rtmenu.png' width='22' height='23' border='0' alt='' /></td>
</tr>
</table>
</td>
</tr>
<tr>
<td class='rkfon'><img src='../img/game/main/z.gif' width='2' height='1' border='0' alt='' /></td>
<td valign='top' class='lpfon'>
<table border='0' cellspacing='0' cellpadding='0' class='bfon'>
<td valign='top' class='tmain' style='text-align:center;padding-top:4px;'>
<table width='100%' cellpadding='0' cellspacing='0'>
<tr>
<td valign='top' width='100%' style='padding:10px;'>
</td>
</tr>
</table>
<table width='100%' cellpadding='0' cellspacing='0'>
<tr>
<td valign='top' width='100%' style='padding:10px;'>
</td>
</tr>
</table>";
echo"<script src='../img/js/time.js'></script>";
print"<table width=100% cellspacing=0 cellpadding=5 border=0>
<tr>
<td align=right valign=top>
<input type=button value=Обновить onclick='window.location.href=\"ambulance.php?tmp=\"+Math.random();\"\"' class=standbut> $back
</td>
</tr>
</table>";
echo"
<table width=100% cellspacing=0 cellpadding=3 border=0>
<td align=center valign=top>
<font style='FONT-FAMILY: Arial; FONT-SIZE: 12pt;'>
Больница</font>
<table border=0 cellspacing=0 cellpadding=5 width=450 bordercolor=silver>
<tr>
<td align=center>";
///
if (!$stat[v_time] and $vt!="0") {$min=$vt/60;$min=round($min);$sec=60-($min*60-$vt);$min-=1;if ($sec>=60) { $min+=1; $sec-=60; }elseif ($sec=="60" and $vt==300 or $vt==240 or $vt==180 or $vt==120 or $vt==60 or $vt==0) { $sec=0; $min+=1;}$sec=round($sec);if ($sec<0) $sec-=100;$min.=" мин.";$sec.=" сек.";
echo"Вы можете подлечиться в нашей больнице.
Уровень жизни:
$stat[hp_now] ед. из
$hp_max ед.
Курс лечения займёт займёт:
$min $sec
<input type='button' value='Подлечиться' class=standbut style='WIDTH: 265px' onclick='window.location=\"ambulance.php?use=\"+Math.random();\"\"'>";}
elseif (!$stat[v_time] and $vt=="0") {
echo"
Извините, но у нас Вам делать нечего, Вы абсолютно здоровы!";
if ($stat['kwest0'] == 20)echo"<center><fieldset style='WIDTH: 40%'><font face=Verdana size=2><legend>Сообщение о Квесте</legend></font><div align=center><font face=Verdana size=2>Вы случайно здесь увидели
\"Котёнка\"!
<input class=input type=button value='Взять котёнка' onclick='window.location.href=\"ambulance.php?take1\"'></font></div></fieldset></center>
";}
// Лечение окончено
elseif ($stat[v_time] and $vt<=0) {mysql_query("UPDATE person SET v_time=NULL, room=1, cure_hp=0 WHERE user='".$stat['user']."'");
mysql_query("UPDATE person SET room=1, lpv=".$now." WHERE user='".$stat['user']."'");
require_once("../function/chat_insert.php");
insert_msg("Лечение окончено! Вы транспортированы в помещение:
Общий зал","","","1",$stat['user'],"","1");
print "<META HTTP-EQUIV=\"Refresh\" CONTENT=\"1; URL=ambulance.php?tmp=\"+Math.random();\"\">";}
//// Процесс лечения
elseif ($stat[v_time] and $vt>0) {
// Лечимся$vt=$stat[v_time]-$now;$hp=$hp_max-(round($vt*$hp_max/$reg_time));
if ($hp<=$hp_max) {mysql_query("UPDATE person set hp_now='$hp' where user='$stat[user]'");
echo"<table cellspacing=0 cellpadding=3><tr><td>Ещё лечиться:</td><td id=ambulance style='FONT-WEIGHT: Bold'><script language=JavaScript>ShowTime('ambulance','$vt',1);
</script></td></tr></table><TABLE width='90%' align='center' cellpadding='2' cellspacing='2'></TABLE>";}
else {mysql_query("UPDATE person SET v_time=NULL, room=1, hp_now=$hp_max, cure_hp=0 WHERE user='".$stat['user']."'");$_ROOM['TO_CHANGE'] = 1;
mysql_query("UPDATE person SET room=1, lpv=".$now." WHERE user='".$stat['user']."'");
require_once("../function/chat_insert.php");
insert_msg("Лечение окончено! Вы транспортированы в помещение:
Общий зал","","","1",
$stat['user'],"","1");
echo"<script>parent.main.location=\"street4.php?room=1&tmp=\"+Math.random();\"\"</script>";
print "<META HTTP-EQUIV=\"Refresh\" CONTENT=\"0; URL=ambulance.php?tmp=\"+Math.random();\"\">";}}
//
echo"</td></tr></table></td></table></td><td class='tbl-usi_right'></td> </tr> <tr height='18'> <td width='20' align='right' valign='top'><img src='../img/gamedw/main/tbl-shp_sml-corner-bottom-left.gif' width='20' height='18' /></td> <td class='tbl-shp_sml-bottom' valign='top' align='center'> </td> <td width='20' align='left' valign='top'><img src='../img/gamedw/main/tbl-shp_sml-corner-bottom-right.gif' width='20' height='18'/></td> </tr> </table></body></html>";}
?></div>
main.php
<div class='codetop'>CODE</div><div class='codemain' style='height:200px;white-space:pre;overflow:auto'><?
session_start();
include('config/config.php');
include_once("config/mysql.php");
##################### Класс борьбы с SQL атаками ################
include_once("config/sql.php");
$stop_injection = new InitVars();
$stop_injection->checkVars();
##################### Класс борьбы с SQL атаками ################
$stat = mysql_fetch_array(mysql_query("SELECT * FROM `person` WHERE `user` = '".$_COOKIE['user']."' AND `pass` = '".$_COOKIE['pass']."' LIMIT 1"));
if ($stat['bs'] == 1) {
if($stat['room'] != 36) mysql_query("update person set `room` = 36 where `user` = '".$stat['user']."'");
}
if ($stat['t_time']) {
if($stat['room'] != 666) mysql_query("update person set `room` = 666 where `user` = '".$stat['user']."'");
header("Location: city/prison.php"); exit;
}
elseif ($stat['v_time']) {
if($stat['room'] != 8) mysql_query("update person set `room` = 8 where `user` = '".$stat['user']."'");
header("Location: city/ambulance.php"); exit;
}
elseif ($stat['k_time']) {
if($stat['room'] != 9) mysql_query("update person set `room` = 9 where `user` = '".$stat['user']."'");
header("Location: city/academy.php"); exit;
}
elseif ($stat['w_time']) {
if($stat['room'] != 16) mysql_query("update person set `room` = 16 where `user` = '".$stat['user']."'");
header("Location: city/works.php"); exit;
}
elseif ($stat['r_time']) {
header("Location: city/vault.php"); exit;
}
elseif ($stat['for_time']) {
if($stat['room'] != 26) mysql_query("update person set `room` = 26 where `user` = '".$stat['user']."'");
header("Location: city/forest.php"); exit;
}
elseif ($stat['les']) {
if($stat['room'] != 34) mysql_query("update person set `room` = 34 where `user` = '".$stat['user']."'");
header("Location: city/les.php"); exit;
}
elseif ($stat['o_time']) {
if($stat['room'] != 11) mysql_query("update person set `room` = 11 where `user` = '".$stat['user']."'");
header("Location: city/repair.php?otdel=1");
exit; }
elseif ($stat['vault_time']) {
header("Location: city/vault.php"); exit;
}
elseif ($stat['fish_time']) {
if($stat['room'] != 30) mysql_query("update person set `room` = 30 where `user` = '".$stat['user']."'");
header("Location: city/prichal.php"); exit;
}
elseif ($stat['bog_time']) {
if($stat['room'] != 33) mysql_query("update person set `room` = 33 where `user` = '".$stat['user']."'");
header("Location: city/hram_bogov.php"); exit;
}
elseif ($stat['battle'] && $set!="abils") { header("Location: battle.php"); exit; }
elseif ($stat['battle'] || !$stat['battle'] && $set=="abils") include('person/set/abils.php');
else {
if (empty($set)) {
include('person/set/main.php');
}
elseif ($set=="edit") { include('person/set/edit.php'); }
elseif ($set=="pers") { include('person/set/main.php'); }
elseif ($set=="proff") { include('person/set/proff.php'); }
elseif ($set=="sclon") {
if ($stat['sclon'] == 2) include('person/set/dark.php');
elseif ($stat['sclon'] == 1) include('person/set/light.php');}
elseif ($set=="abils") { include('person/set/abils.php'); }
elseif ($set=="config") { include('person/set/config.php'); }
elseif ($set=="friends") { include('person/set/friends.php'); }
elseif ($set=="anketa") { include('person/set/anketa.php'); }
elseif ($set=="security") { include('person/set/security.php'); }
elseif ($set=="transfer") { include('person/set/transfer.php'); }
elseif ($set=="setimg") { include('person/set/img.php'); }
elseif ($set=="updates") { include('person/set/updates.php'); }
elseif ($set=="clan") { include('person/set/clan.php'); }
elseif ($set=="otchets") { include('person/set/otchets.php'); }
elseif ($set=="work") { include('person/set/work.php'); }
elseif ($set=="priem") { include('person/set/priem.php'); }
elseif ($set=="molitva") { include('person/set/molitva.php'); }
elseif ($set=="quests") { include('person/set/quests.php'); }
elseif ($set=="map" && $stat['room']==1) { include('person/set/city.php'); }
elseif ($set=="map") {
if ($stat['room']==7) header("Location: city/shop.php");
elseif ($stat['room']==8) header("Location: city/ambulance.php");
elseif ($stat['room']==9) header("Location: city/academy.php");
elseif ($stat['room']==10) header("Location: city/mshop.php");
elseif ($stat['room']==11) header("Location: city/repair.php");
elseif ($stat['room']==12) header("Location: city/gamblinghouse.php");
elseif ($stat['room']==13) header("Location: city/gshop.php");
elseif ($stat['room']==14) header("Location: city/administ.php");
elseif ($stat['room']==16) header("Location: city/works.php");
elseif ($stat['room']==17) header("Location: city/bank.php");
elseif ($stat['room']==18) header("Location: city/mschool.php");
elseif ($stat['room']==19) header("Location: city/ambar.php");
elseif ($stat['room']==20) header("Location: city/komis.php");
elseif ($stat['room']==22) header("Location: city/brak.php");
elseif ($stat['room']==24) header("Location: city/stella.php");
elseif ($stat['room']==25) header("Location: city/pochta.php");
elseif ($stat['room']==26) header("Location: city/forest.php");
elseif ($stat['room']==27) header("Location: city/znahar.php");
elseif ($stat['room']==28) header("Location: city/sclad.php");
elseif ($stat['room']==29) header("Location: city/butik.php");
elseif ($stat['room']==30) header("Location: city/prichal.php");
elseif ($stat['room']==31) header("Location: city/world.php");
elseif ($stat['room']==33) header("Location: city/hram_bogov.php");
elseif ($stat['room']==34) header("Location: city/les.php");
elseif ($stat['room']==35) header("Location: city/kwest.php");
elseif ($stat['room']==36) header("Location: city/bs.php");
elseif ($stat['room']==38) header("Location: city/shop1.php");
elseif ($stat['room']==666) header("Location: city/prison.php");
elseif ($stat['room']==104) header("Location: city/street3.php");
elseif ($stat['room']==101) header("Location: city/street1.php");
elseif ($stat['room']==23) header("Location: city/street4.php");
elseif ($stat['room']==103) header("Location: city/street2.php");
elseif ($stat['room']==105) header("Location: city/street5.php");
elseif ($stat['room']==106) header("Location: city/street6.php");
elseif ($stat['room']==111) header("Location: city/world.php");
elseif ($stat['room']>=200 && $stat['room']<=230) header("Location: city/vault.php");
elseif ($stat['room']>=300 && $stat['room']<=370) header("Location: city/vault.php");
else include('person/set/city.php');
} else include('person/set/main.php');
}
mysql_close($link);
@include $pers;
?></div>
И что теперь ни че ни делать штоли andr3w?
Раз дыр много их исправить нельзя чтоль?
И вот опять я со свими репаками. Так как данная версия давно ходит по рукам я её выкладываю тут для паблика. Сборка Another World за конец марта 2008.
