/*
if ($player["id"] == 10033) {
## Система защиты.
include_once('lastdays_mod/sheild.php');
}
*/
$TravmGo = 0;
if(mysql_num_rows(mysql_query("SELECT * FROM `effects` WHERE `time`>'".time()."' and `userid`='".$player['id']."' AND (`eff_id`='1' OR `eff_id`='2')"))>0){
$TravmGo = 1;
}
if($player['mov']==1 and $player["wait"]<time() and $player["wait2"]<time()){
$_SESSION['user']['pos']=3;
mysql_query("UPDATE `user` SET `mov`=DEFAULT WHERE `id`='".$player['id']."' LIMIT 1;");
unset($_SESSION['secur']);
}
if($_GET['useaction'] != 'error-page'){
if(!preg_match("/{$HTTP_HOST}/",getenv('HTTP_REFERER')) or $player['pcid']!=md5($player['id'].$player['pass'].$player['Autch_time'].getIP().$_SERVER['HTTP_USER_AGENT'].$player['block'])){
if($player['block']!=''){
exit("<script>top.location = 'index.php?act=logout';</script>");
}else{
exit("<script>top.frames['main_top'].location = '/main.php?useaction=error-page';</script>");
}
}
}
if($player['active'] == '0'){
echo'<center><b><font class=nickname><font color=#cc0000>Верификация вашего аккаунта еше не произведена.</font></font></b></center>';
}
if(isset($_REQUEST['get']) and in_array($_REQUEST['vcode'],$_SESSION['secur'])){
$_SESSION['user']['pos']=$_REQUEST['get'];
mysql_query("UPDATE `user` SET `useaction`='".$_REQUEST['get']."' WHERE `id`='".$player['id']."' LIMIT 1;");
}
if(isset($_REQUEST['get_id']) and in_array($_REQUEST['vcode'],$_SESSION['secur']) and $player["wait"]<time() and $player["wait2"]<time()){
include("inc/get_id.php");
}
if(isset($_REQUEST['go']) and in_array($_REQUEST['vcode'],$_SESSION['secur']) and $player["wait"]<time() and $player["wait2"]<time()){
if($TravmGo == 0){
change_get($_REQUEST['go']);
}elseif($TravmGo == 1){
$_SESSION['user']['pos'] = 0;
mysql_query("UPDATE `user` SET `useaction`='0' WHERE `id`='".$player['id']."' LIMIT 1;");
}
}
if(!empty($_GET['GoLoc']) and in_array($_GET['vcode'],$_SESSION['SecHash'])){
if(in_array(md5($_SESSION['SecMove'].$_GET['GoLoc']),$_SESSION['SecHash'])){
change_get($_GET['GoLoc']);
}
}
if(isset($post_id) and in_array($vcode,$secur)){include "inc/post_id.php";}
if(isset($_REQUEST['fightmagicstart']) and in_array($_REQUEST['fmc'],$_SESSION['secur'])){include "inc/post_attack.php";}
$player=player();
$plst=explode("|",$player[st]);
$plstt=allparam($player);
$secur='';
if($player['battle']!=0 and $player['fight']!=0){require "inc/battle.php"; exit;}
if(isset($_GET['useaction']) and $player["wait"]<time() and $player["wait2"]<time()){
switch($_GET['useaction']){
case'error-page':
exit(include("includes/windows/error.php"));
break;
case'trade':
exit(include("inc/trade.php"));
break;
case'addon-action':
exit(include("inc/addon-action.php"));
break;
case'clan-action':
exit(header("location:http://www.gosters.e3w.ru/core2.php?useaction=clan-action"));
break;
case'admin-action':
exit(header("location:http://www.gosters.e3w.ru/core2.php?useaction=admin-action"));
break;
}
}
if($player['battle']!=0 or $player[wait]>time())$_SESSION['user'][pos]=3;
if(!empty($_GET['atack']) and $player['clan_id']=='chaos'){
BotAtack($_GET['atack']);
echo"<script>window.location = '/main.php';</script>";
}
include "inc/hedder.php";
if($_SESSION['user']['pos']<2){$inc="mpers.php";}
if($_SESSION['user']['pos']>1){
$pl_loc = pl_loc($player['loc']);
if($pl_loc == 'core2.php'){
exit("<script>window.location='/core2.php';</script>");
}else{
$inc=$ret[3]."/".$pl_loc;
}
}
include "inc/$inc";
if($_COOKIE['Puid']==10000){
// echo "<center>".(time()+microtime())-$v."</center>";
//print_r($_REQUEST);
}
?>
</BODY>
</HTML>