PageRenderTime 60ms CodeModel.GetById 22ms RepoModel.GetById 0ms app.codeStats 1ms

/includes/user.php

https://bitbucket.org/ogsteam/ogspy
PHP | 2897 lines | 2315 code | 321 blank | 261 comment | 473 complexity | afb8463db4a9648a237b82554e970d08 MD5 | raw file
Possible License(s): GPL-3.0, BSD-3-Clause

Large files files are truncated, but you can click here to view the full file

    

  1. <?php
    2. 

  2. /**
    3. 

  3.  * user.php Fonctions concernant les utilisateurs
    4. 

  4.  * @author Kyser
    5. 

  5.  * @package OGSpy
    6. 

  6.  * @subpackage user
    7. 

  7.  * @copyright Copyright &copy; 2007, http://ogsteam.fr/
    8. 

  8.  * @modified $Date: 2012-11-05 13:04:30 +0100 (Mon, 05 Nov 2012) $
    9. 

  9.  * @author Kyser
    10. 

  10.  * @link $HeadURL: http://svn.ogsteam.fr/trunk/ogspy/includes/user.php $
    11. 

  11.  * @version 3.04b ( $Rev: 7752 $ ) 
    12. 

  12.  * $Id: user.php 7752 2012-11-05 12:04:30Z darknoon $
    13. 

  13.  */
    14. 

  14. 

  15. if (!defined('IN_SPYOGAME')) {
    16. 

  16.     die("Hacking attempt");
    17. 

  17. }
    18. 

  18. 

  19. /**
    20. 

  20.  * Verification des droits utilisateurs sur une action avec redirection le cas echeant
    21. 

  21.  * @param string $action Action verifie
    22. 

  22.  * @param int $user_id identificateur optionnel de l'utilisateur teste
    23. 

  23.  */
    24. 

  24. function user_check_auth($action, $user_id = null)
    25. 

  25. {
    26. 

  26.     global $user_data;
    27. 

  27. 

  28.     switch ($action) {
    29. 

  29.         case "user_create":
    30. 

  30.         case "usergroup_manage":
    31. 

  31.             if ($user_data["user_admin"] != 1 && $user_data["user_coadmin"] != 1 && $user_data["management_user"] !=
    32. 

  32.                 1)
    33. 

  33.                 redirection("index.php?action=message&id_message=forbidden&info");
    34. 

  34. 

  35.             break;
    36. 

  36. 

  37.         case "user_update":
    38. 

  38.             if ($user_data["user_admin"] != 1 && $user_data["user_coadmin"] != 1 && $user_data["management_user"] !=
    39. 

  39.                 1)
    40. 

  40.                 redirection("index.php?action=message&id_message=forbidden&info");
    41. 

  41. 

  42.             $info_user = user_get($user_id);
    43. 

  43.             if ($info_user === false)
    44. 

  44.                 redirection("index.php?action=message&id_message=deleteuser_failed&info");
    45. 

  45. 

  46.             if (($user_data["user_admin"] != 1 && $user_data["user_coadmin"] != 1 && $user_data["management_user"] !=
    47. 

  47.                 1) || ($info_user[0]["user_admin"] == 1) || (($user_data["user_coadmin"] == 1) &&
    48. 

  48.                 ($info_user[0]["user_coadmin"] == 1)) || (($user_data["user_coadmin"] != 1 && $user_data["management_user"] ==
    49. 

  49.                 1) && ($info_user[0]["user_coadmin"] == 1 || $info_user[0]["management_user"] ==
    50. 

  50.                 1))) {
    51. 

  51.                 redirection("index.php?action=message&id_message=forbidden&info");
    52. 

  52.             }
    53. 

  53. 

  54.             break;
    55. 

  55. 

  56. 

  57.         default:
    58. 

  58.             redirection("index.php?action=message&id_message=errorfatal&info");
    59. 

  59.     }
    60. 

  60. }
    61. 

  61. /**
    62. 

  62.  * Login d'un utilisateur
    63. 

  63.  * @global string $pub_login
    64. 

  64.  * @global string $pub_password
    65. 

  65.  * @global string $pub_goto
    66. 

  66.  * @todo Query : "select user_id, user_active from " . TABLE_USER .
    67. 

  67.             " where user_name = '" .  $db->sql_escape_string($pub_login) .
    68. 

  68.             "' and user_password = '" . md5(sha1($pub_password)) . "'";
    69. 

  69.  * @todo Query : "select user_lastvisit from " . TABLE_USER . " where user_id = " . $user_id;
    70. 

  70.  * @todo Query : "update " . TABLE_USER . " set user_lastvisit = " . time() ." where user_id = " . $user_id;
    71. 

  71.  * @todo Query : "update " . TABLE_STATISTIC ." set statistic_value = statistic_value + 1" " where statistic_name = 'connection_server'";
    72. 

  72.  * @todo Query : "insert ignore into " . TABLE_STATISTIC ." values ('connection_server', '1')";
    73. 

  73.  */
    74. 

  74. function user_login()
    75. 

  75. {
    76. 

  76.     global $db;
    77. 

  77.     global $pub_login, $pub_password, $pub_goto, $url_append;
    78. 

  78. 

  79.     if (!check_var($pub_login, "Pseudo_Groupname") || !check_var($pub_password,
    80. 

  80.         "Password") || !check_var($pub_goto, "Special", "#^[\w=&%+]+$#")) {
    81. 

  81.         redirection("index.php?action=message&id_message=errordata&info");
    82. 

  82.     }
    83. 

  83. 

  84.     if (!isset($pub_login) || !isset($pub_password)) {
    85. 

  85.         redirection("index.php?action=message&id_message=errorfatal&info");
    86. 

  86.     } else {
    87. 

  87.         $request = "SELECT user_id, user_active FROM " . TABLE_USER .
    88. 

  88.             " WHERE user_name = '" .  $db->sql_escape_string($pub_login) .
    89. 

  89.             "' AND user_password = '" . md5(sha1($pub_password)) . "'";
    90. 

  90.         $result = $db->sql_query($request);
    91. 

  91.         if (list($user_id, $user_active) = $db->sql_fetch_row($result)) {
    92. 

  92.             if ($user_active == 1) {
    93. 

  93.                 $request = "select user_lastvisit from " . TABLE_USER . " where user_id = " . $user_id;
    94. 

  94.                 $result = $db->sql_query($request);
    95. 

  95.                 list($lastvisit) = $db->sql_fetch_row($result);
    96. 

  96. 

  97.                 $request = "update " . TABLE_USER . " set user_lastvisit = " . time() .
    98. 

  98.                     " where user_id = " . $user_id;
    99. 

  99.                 $db->sql_query($request);
    100. 

  100.                 
    101. 

  101.                 $request = "update " . TABLE_STATISTIC .
    102. 

  102.                     " set statistic_value = statistic_value + 1";
    103. 

  103.                 $request .= " where statistic_name = 'connection_server'";
    104. 

  104.                 $db->sql_query($request);
    105. 

  105.                 if ($db->sql_affectedrows() == 0) {
    106. 

  106.                     $request = "insert ignore into " . TABLE_STATISTIC .
    107. 

  107.                         " values ('connection_server', '1')";
    108. 

  108.                     $db->sql_query($request);
    109. 

  109.                 }
    110. 

  110. 

  111.                 session_set_user_id($user_id, $lastvisit);
    112. 

  112.                 log_('login');
    113. 

  113.                 if(!isset($url_append)){
    114. 

  114.                 	$url_append="";
    115. 

  115.                 }
    116. 

  116.                 redirection("index.php?action=" . $pub_goto . "" . $url_append);
    117. 

  117.             } else {
    118. 

  118.                 redirection("index.php?action=message&id_message=account_lock&info");
    119. 

  119.             }
    120. 

  120.         } else {
    121. 

  121.             redirection("index.php?action=message&id_message=login_wrong&info");
    122. 

  122.         }
    123. 

  123.     }
    124. 

  124. }
    125. 

  125. /**
    126. 

  126. * Login d'un utilisateur avec redirection
    127. 

  127. * @global string $pub_login
    128. 

  128. * @global string $pub_password
    129. 

  129. * @global string $pub_goto
    130. 

  130. */
    131. 

  131. function user_login_redirection()
    132. 

  132. {
    133. 

  133. 	global $pub_goto, $url_append;
    134. 

  134. 	
    135. 

  135. 	if($pub_goto=='galaxy'){
    136. 

  136. 		global $pub_galaxy, $pub_system;
    137. 

  137. 		$url_append="&galaxy=" . $pub_galaxy . "&system=" . $pub_system;		
    138. 

  138. 		user_login();
    139. 

  139. 	} else {
    140. 

  140. 		user_login();
    141. 

  141. 	}
    142. 

  142. }
    143. 

  143. 

  144. /**
    145. 

  145.  * Deconnection utilisateur
    146. 

  146.  */
    147. 

  147. function user_logout()
    148. 

  148. {
    149. 

  149.     log_("logout");
    150. 

  150.     session_close();
    151. 

  151.     redirection("index.php");
    152. 

  152. }
    153. 

  153. /**
    154. 

  154.  * Verification de la validite des inputs utilisateurs
    155. 

  155.  * @param string $type Type de variable verifie (pseudo,groupname,password,galaxy,system)
    156. 

  156.  * @param string $string La chaine teste
    157. 

  157.  * @return false|string 
    158. 

  158.  */
    159. 

  159. function string_check($type, $string)
    160. 

  160. {
    161. 

  161.     if ($type == "pseudo" || $type == "groupname") {
    162. 

  162.         $length_min = 3;
    163. 

  163.         $length_max = 15;
    164. 

  164.     } elseif ($type = "password") {
    165. 

  165.         $length_min = 6;
    166. 

  166.         $length_max = 15;
    167. 

  167.     } elseif ($type = "galaxy") {
    168. 

  168.         $length_min = 1;
    169. 

  169.         $length_max = 999;
    170. 

  170.     } elseif ($type = "system" || $type = "systems") {
    171. 

  171.         $length_min = 1;
    172. 

  172.         $length_max = 999;
    173. 

  173.     }
    174. 

  174. 

  175.     $string = trim($string);
    176. 

  176.     if (strlen($string) < $length_min || strlen($string) > $length_max) {
    177. 

  177.         return false;
    178. 

  178.     }
    179. 

  179. 

  180.     return $string;
    181. 

  181. }
    182. 

  182. 

  183. /**
    184. 

  184.  * Modification des droits ogspy d'un utilisateur par l'admin
    185. 

  185.  */
    186. 

  186. function admin_user_set()
    187. 

  187. {
    188. 

  188.     global $user_data;
    189. 

  189.     global $pub_user_id, $pub_active, $pub_user_coadmin, $pub_management_user, $pub_management_ranking;
    190. 

  190. 

  191.     if (!check_var($pub_user_id, "Num") || !check_var($pub_active, "Num") || !
    192. 

  192.         check_var($pub_user_coadmin, "Num") || !check_var($pub_management_user, "Num") ||
    193. 

  193.         !check_var($pub_management_ranking, "Num")) {
    194. 

  194.         redirection("index.php?action=message&id_message=errordata&info");
    195. 

  195.     }
    196. 

  196. 

  197.     if (!isset($pub_user_id) || !isset($pub_active)) {
    198. 

  198.         redirection("index.php?action=message&id_message=admin_modifyuser_failed&info");
    199. 

  199.     }
    200. 

  200. 

  201.     //Vérification des droits
    202. 

  202.     user_check_auth("user_update", $pub_user_id);
    203. 

  203. 

  204.     if ($user_data["user_admin"] == 1) {
    205. 

  205.         if (!isset($pub_user_coadmin) || !isset($pub_management_user) || !isset($pub_management_ranking)) {
    206. 

  206.             redirection("index.php?action=message&id_message=admin_modifyuser_failed&info");
    207. 

  207.         }
    208. 

  208.     } elseif ($user_data["user_coadmin"] == 1) {
    209. 

  209.         $pub_user_coadmin = null;
    210. 

  210.         if (!isset($pub_management_user) || !isset($pub_management_ranking)) {
    211. 

  211.             redirection("index.php?action=message&id_message=admin_modifyuser_failed&info");
    212. 

  212.         }
    213. 

  213.     } else {
    214. 

  214.         $pub_user_coadmin = $pub_management_user = null;
    215. 

  215.     }
    216. 

  216.     if (user_get($pub_user_id) === false) {
    217. 

  217.         redirection("index.php?action=message&id_message=admin_modifyuser_failed&info");
    218. 

  218.     }
    219. 

  219.     user_set_grant($pub_user_id, null, $pub_active, $pub_user_coadmin, $pub_management_user,
    220. 

  220.         $pub_management_ranking);
    221. 

  221.     redirection("index.php?action=administration&subaction=member");
    222. 

  222. }
    223. 

  223. 

  224. /**
    225. 

  225.  * Generation d'un mot de passe par l'admin pour un utilisateur
    226. 

  226.  */
    227. 

  227. function admin_regeneratepwd()
    228. 

  228. {
    229. 

  229.     global $pub_user_id; // $pub_new_pass;
    230. 

  230.     $pass_id = "pub_pass_" . $pub_user_id;
    231. 

  231.     global $$pass_id;
    232. 

  232.     $new_pass = $$pass_id;
    233. 

  233. 

  234.     if (!check_var($pub_user_id, "Num")) {
    235. 

  235.         redirection("index.php?action=message&id_message=errordata&info");
    236. 

  236.     }
    237. 

  237. 

  238.     if (!isset($pub_user_id)) {
    239. 

  239.         redirection("index.php?action=message&id_message=errorfatal&info");
    240. 

  240.     }
    241. 

  241. 

  242.     user_check_auth("user_update", $pub_user_id);
    243. 

  243. 

  244.     if (user_get($pub_user_id) === false) {
    245. 

  245.         redirection("index.php?action=message&id_message=regeneratepwd_failed&info");
    246. 

  246.     }
    247. 

  247.     if ($new_pass != "") {
    248. 

  248.         $password = $new_pass;
    249. 

  249.     } else {
    250. 

  250.         $password = password_generator();
    251. 

  251.     }
    252. 

  252.     user_set_general($pub_user_id, null, $password);
    253. 

  253. 

  254.     $info = $pub_user_id . ":" . $password;
    255. 

  255.     log_("regeneratepwd", $pub_user_id);
    256. 

  256.     redirection("index.php?action=message&id_message=regeneratepwd_success&info=" .
    257. 

  257.         $info);
    258. 

  258. }
    259. 

  259. 

  260. /**
    261. 

  261.  * Modification du profil par un utilisateur
    262. 

  262.  * @todo Query : x11
    263. 

  263.  */
    264. 

  264. function member_user_set()
    265. 

  265. {
    266. 

  266.     global $db, $user_data, $user_technology;
    267. 

  267.     global $pub_pseudo, $pub_old_password, $pub_new_password, $pub_new_password2, $pub_galaxy,
    268. 

  268.         $pub_system, $pub_skin, $pub_disable_ip_check, $pub_off_commandant, $pub_off_amiral, $pub_off_ingenieur,
    269. 

  269.         $pub_off_geologue, $pub_off_technocrate, $pub_pseudo_ingame, $pub_pseudo_email;
    270. 

  270. 

  271.     if (!check_var($pub_pseudo, "Text") || !check_var($pub_old_password, "Text") ||
    272. 

  272.         !check_var($pub_new_password, "Text") || !check_var($pub_new_password2,
    273. 

  273.         "CharNum") || !check_var($pub_pseudo_email, "Email")
    274. 

  274. 		|| !check_var($pub_galaxy, "Num") || !check_var($pub_system, "Num") ||
    275. 

  275.         !check_var($pub_skin, "URL") || !check_var($pub_disable_ip_check, "Num") || !
    276. 

  276.         check_var($pub_pseudo_ingame, "Pseudo_ingame")) {
    277. 

  277.         redirection("index.php?action=message&id_message=errordata&info");
    278. 

  278.     }
    279. 

  279. 

  280.     $user_id = $user_data["user_id"];
    281. 

  281.     $user_info = user_get($user_id);
    282. 

  282. 	$user_empire = user_get_empire();
    283. 

  283. 	$user_technology = $user_empire["technology"];
    284. 

  284. 

  285.     $password_validated = null;
    286. 

  286.     if (!isset($pub_pseudo) || !isset($pub_old_password) || !isset($pub_new_password) ||
    287. 

  287.         !isset($pub_new_password2) || !isset($pub_pseudo_email) || !isset($pub_galaxy) || !isset($pub_system) || !
    288. 

  288.         isset($pub_skin)) {
    289. 

  289.         redirection("index.php?action=message&id_message=member_modifyuser_failed&info");
    290. 

  290.     }
    291. 

  291. 

  292.     if ($pub_old_password != "" || $pub_new_password != "" || $pub_new_password2 !=
    293. 

  293.         "") {
    294. 

  294.         if ($pub_old_password == "" || $pub_new_password == "" || $pub_new_password != $pub_new_password2) {
    295. 

  295.             redirection("index.php?action=message&id_message=member_modifyuser_failed_passwordcheck&info");
    296. 

  296.         }
    297. 

  297.         if (md5(sha1($pub_old_password)) != $user_info[0]["user_password"]) {
    298. 

  298.             redirection("index.php?action=message&id_message=member_modifyuser_failed_passwordcheck&info");
    299. 

  299.         }
    300. 

  300.         if (!check_var($pub_new_password, "Password")) {
    301. 

  301.             redirection("index.php?action=message&id_message=member_modifyuser_failed_password&info");
    302. 

  302.         }
    303. 

  303.     }
    304. 

  304. 

  305.     if (!check_var($pub_pseudo, "Pseudo_Groupname")) {
    306. 

  306.         redirection("index.php?action=message&id_message=member_modifyuser_failed_pseudo&info");
    307. 

  307.     }
    308. 

  308. 

  309.     //pseudo ingame
    310. 

  310.     if ($user_data["user_stat_name"] !== $pub_pseudo_ingame) {
    311. 

  311.         user_set_stat_name($pub_pseudo_ingame);
    312. 

  312.     }
    313. 

  313. 

  314. 	//compte Commandant
    315. 

  315.     if ($user_data['off_commandant'] == "0" && $pub_off_commandant == 1) {
    316. 

  316.         $db->sql_query("UPDATE " . TABLE_USER .
    317. 

  317.             " SET `off_commandant` = '1' WHERE `user_id` = " . $user_id);
    318. 

  318.     }
    319. 

  319.     if ($user_data['off_commandant'] == 1 && (is_null($pub_off_commandant) || $pub_off_commandant !=
    320. 

  320.         1)) {
    321. 

  321.         $db->sql_query("UPDATE " . TABLE_USER .
    322. 

  322.             " SET `off_commandant` = '0' WHERE `user_id` = " . $user_id);
    323. 

  323.     }
    324. 

  324. 

  325.     //compte amiral
    326. 

  326.     if ($user_data['off_amiral'] == "0" && $pub_off_amiral == 1) {
    327. 

  327.         $db->sql_query("UPDATE " . TABLE_USER .
    328. 

  328.             " SET `off_amiral` = '1' WHERE `user_id` = " . $user_id);
    329. 

  329.     }
    330. 

  330.     if ($user_data['off_amiral'] == 1 && (is_null($pub_off_amiral) || $pub_off_amiral !=
    331. 

  331.         1)) {
    332. 

  332.         $db->sql_query("UPDATE " . TABLE_USER .
    333. 

  333.             " SET `off_amiral` = '0' WHERE `user_id` = " . $user_id);
    334. 

  334.     }
    335. 

  335. 

  336.     //compte ingenieur
    337. 

  337.     if ($user_data['off_ingenieur'] == "0" && $pub_off_ingenieur == 1) {
    338. 

  338.         $db->sql_query("UPDATE " . TABLE_USER .
    339. 

  339.             " SET `off_ingenieur` = '1' WHERE `user_id` = " . $user_id);
    340. 

  340.     }
    341. 

  341.     if ($user_data['off_ingenieur'] == 1 && (is_null($pub_off_ingenieur) || $pub_off_ingenieur !=
    342. 

  342.         1)) {
    343. 

  343.         $db->sql_query("UPDATE " . TABLE_USER .
    344. 

  344.             " SET `off_ingenieur` = '0' WHERE `user_id` = " . $user_id);
    345. 

  345.     }
    346. 

  346. 

  347.     //compte geologue
    348. 

  348.     if ($user_data['off_geologue'] == "0" && $pub_off_geologue == 1) {
    349. 

  349.         $db->sql_query("UPDATE " . TABLE_USER .
    350. 

  350.             " SET `off_geologue` = '1' WHERE `user_id` = " . $user_id);
    351. 

  351.     }
    352. 

  352.     if ($user_data['off_geologue'] == 1 && (is_null($pub_off_geologue) || $pub_off_geologue !=
    353. 

  353.         1)) {
    354. 

  354.         $db->sql_query("UPDATE " . TABLE_USER .
    355. 

  355.             " SET `off_geologue` = '0' WHERE `user_id` = " . $user_id);
    356. 

  356.     }
    357. 

  357. 

  358.     //compte technocrate
    359. 

  359.     if ($user_data['off_technocrate'] == "0" && $pub_off_technocrate == 1) {
    360. 

  360.         $db->sql_query("UPDATE " . TABLE_USER .
    361. 

  361.             " SET `off_technocrate` = '1' WHERE `user_id` = " . $user_id);
    362. 

  362.         $tech = $user_technology['Esp'] + 2;
    363. 

  363.         $db->sql_query("UPDATE " . TABLE_USER_TECHNOLOGY . " SET `Esp` = " . $tech .
    364. 

  364.             " WHERE `user_id` = " . $user_id);
    365. 

  365.     }
    366. 

  366.     if ($user_data['off_technocrate'] == 1 && (is_null($pub_off_technocrate) || $pub_off_technocrate !=
    367. 

  367.         1)) {
    368. 

  368.         $db->sql_query("UPDATE " . TABLE_USER .
    369. 

  369.             " SET `off_technocrate` = '0' WHERE `user_id` = " . $user_id);
    370. 

  370.         $tech = $user_technology['Esp'] - 2;
    371. 

  371.         $db->sql_query("UPDATE " . TABLE_USER_TECHNOLOGY . " SET `Esp` = " . $tech .
    372. 

  372.             " WHERE `user_id` = " . $user_id);
    373. 

  373.     }
    374. 

  374. 

  375.     //Contrôle que le pseudo ne soit pas déjà utilisé
    376. 

  376.     $request = "select * from " . TABLE_USER . " where user_name = '" .
    377. 

  377.          $db->sql_escape_string($pub_pseudo) . "' and user_id <> " . $user_id;
    378. 

  378.     $result = $db->sql_query($request);
    379. 

  379.     if ($db->sql_numrows($result) != 0) {
    380. 

  380.         redirection("index.php?action=message&id_message=member_modifyuser_failed_pseudolocked&info");
    381. 

  381.     }
    382. 

  382. 

  383.     if (is_null($pub_disable_ip_check) || $pub_disable_ip_check != 1)
    384. 

  384.         $pub_disable_ip_check = 0;
    385. 

  385. 

  386.     user_set_general($user_id, $pub_pseudo, $pub_new_password, $pub_pseudo_email, null, $pub_galaxy, $pub_system,
    387. 

  387.         $pub_skin, $pub_disable_ip_check);
    388. 

  388.     redirection("index.php?action=profile");
    389. 

  389. }
    390. 

  390. 

  391. /**
    392. 

  392.  * Entree en BDD de donnees utilisateur
    393. 

  393.  * @todo Query x1
    394. 

  394.  */
    395. 

  395. function user_set_general($user_id, $user_name = null, $user_password = null, $user_email = null, $user_lastvisit = null,
    396. 

  396.     $user_galaxy = null, $user_system = null, $user_skin = null, $disable_ip_check = null)
    397. 

  397. {
    398. 

  398.     global $db, $user_data, $server_config;
    399. 

  399. 

  400.     if (!isset($user_id)) {
    401. 

  401.         redirection("index.php?action=message&id_message=errorfatal&info");
    402. 

  402.     }
    403. 

  403. 

  404.     if (!empty($user_galaxy)) {
    405. 

  405.         $user_galaxy = intval($user_galaxy);
    406. 

  406.         if ($user_galaxy < 1 || $user_galaxy > intval($server_config['num_of_galaxies']))
    407. 

  407.             $user_galaxy = 1;
    408. 

  408.     }
    409. 

  409.     if (!empty($user_system)) {
    410. 

  410.         $user_system = intval($user_system);
    411. 

  411.         if ($user_system < 1 || $user_system > intval($server_config['num_of_systems']))
    412. 

  412.             $user_system = 1;
    413. 

  413.     }
    414. 

  414. 

  415.     $update = "";
    416. 

  416. 

  417.     //Pseudo et mot de passe
    418. 

  418.     if (!empty($user_name))
    419. 

  419.         $update .= "user_name = '" .  $db->sql_escape_string($user_name) . "'";
    420. 

  420.     if (!empty($user_password))
    421. 

  421.         $update .= ((strlen($update) > 0) ? ", " : "") . "user_password = '" . md5(sha1
    422. 

  422.             ($user_password)) . "'";
    423. 

  423. 

  424.     //Galaxy et système solaire du membre
    425. 

  425.     if (!empty($user_galaxy))
    426. 

  426.         $update .= ((strlen($update) > 0) ? ", " : "") . "user_galaxy = '" . $user_galaxy .
    427. 

  427.             "'";
    428. 

  428.     if (!empty($user_system))
    429. 

  429.         $update .= ((strlen($update) > 0) ? ", " : "") . "user_system = '" . $user_system .
    430. 

  430.             "'";
    431. 

  431. 

  432.     //Dernière visite
    433. 

  433.     if (!empty($user_lastvisit))
    434. 

  434.         $update .= ((strlen($update) > 0) ? ", " : "") . "user_lastvisit = '" . $user_lastvisit .
    435. 

  435.             "'";
    436. 

  436.    
    437. 

  437.    //Email
    438. 

  438.     if (!empty($user_email))
    439. 

  439.         $update .= ((strlen($update) > 0) ? ", " : "") . "user_email = '" . $user_email .
    440. 

  440.             "'";			
    441. 

  441. 			
    442. 

  442.     //Skin
    443. 

  443.     if (!is_null($user_skin)) {
    444. 

  444.         if (strlen($user_skin) > 0 && substr($user_skin, strlen($user_skin) - 1) != "/")
    445. 

  445.             $user_skin .= "/";
    446. 

  446.         $update .= ((strlen($update) > 0) ? ", " : "") . "user_skin = '" .
    447. 

  447.              $db->sql_escape_string($user_skin) . "'";
    448. 

  448.     }
    449. 

  449. 

  450.     //Désactivation de la vérification de l'adresse ip
    451. 

  451.     if (!is_null($disable_ip_check))
    452. 

  452.         $update .= ((strlen($update) > 0) ? ", " : "") . "disable_ip_check = '" . $disable_ip_check .
    453. 

  453.             "'";
    454. 

  454. 

  455. 

  456.     $request = "update " . TABLE_USER . " set " . $update . " where user_id = " . $user_id;
    457. 

  457.     $db->sql_query($request);
    458. 

  458. 

  459.     if ($user_id == $user_data['user_id']) {
    460. 

  460.         log_("modify_account");
    461. 

  461.     } else {
    462. 

  462.         log_("modify_account_admin", $user_id);
    463. 

  463.     }
    464. 

  464. }
    465. 

  465. 

  466. /**
    467. 

  467.  * Enregistrement des droits et status utilisateurs
    468. 

  468.  * @todo Query : x2
    469. 

  469.  */
    470. 

  470. function user_set_grant($user_id, $user_admin = null, $user_active = null, $user_coadmin = null,
    471. 

  471.     $management_user = null, $management_ranking = null)
    472. 

  472. {
    473. 

  473.     global $db, $user_data;
    474. 

  474. 

  475.     if (!isset($user_id)) {
    476. 

  476.         redirection("index.php?action=message&id_message=errorfatal&info");
    477. 

  477.     }
    478. 

  478. 

  479.     //Vérification des droits
    480. 

  480.     user_check_auth("user_update", $user_id);
    481. 

  481. 

  482.     $update = "";
    483. 

  483. 

  484.     //Activation membre
    485. 

  485.     if (!is_null($user_active)) {
    486. 

  486.         $update .= ((strlen($update) > 0) ? ", " : "") . "user_active = '" . intval($user_active) .
    487. 

  487.             "'";
    488. 

  488.         if (intval($user_active) == 0) {
    489. 

  489.             $request = "delete from " . TABLE_SESSIONS . " where session_user_id = " . $user_id;
    490. 

  490.             $db->sql_query($request);
    491. 

  491.         }
    492. 

  492.     }
    493. 

  493. 

  494.     //Co-administration
    495. 

  495.     if (!is_null($user_coadmin)) {
    496. 

  496.         $update .= ((strlen($update) > 0) ? ", " : "") . "user_coadmin = '" . intval($user_coadmin) .
    497. 

  497.             "'";
    498. 

  498.     }
    499. 

  499. 

  500.     //Gestion des membres
    501. 

  501.     if (!is_null($management_user)) {
    502. 

  502.         $update .= ((strlen($update) > 0) ? ", " : "") . "management_user = '" . intval($management_user) .
    503. 

  503.             "'";
    504. 

  504.     }
    505. 

  505. 

  506.     //Gestion des classements
    507. 

  507.     if (!is_null($management_ranking)) {
    508. 

  508.         $update .= ((strlen($update) > 0) ? ", " : "") . "management_ranking = '" .
    509. 

  509.             intval($management_ranking) . "'";
    510. 

  510.     }
    511. 

  511. 

  512. 

  513.     $request = "update " . TABLE_USER . " set " . $update . " where user_id = " . $user_id;
    514. 

  514.     $db->sql_query($request);
    515. 

  515. 

  516.     if ($user_id == $user_data['user_id']) {
    517. 

  517.         log_("modify_account");
    518. 

  518.     } else {
    519. 

  519.         log_("modify_account_admin", $user_id);
    520. 

  520.     }
    521. 

  521. }
    522. 

  522. /**
    523. 

  523.  * Enregistrement des statistiques utilisateurs
    524. 

  524.  * @todo Query : x1
    525. 

  525.  */
    526. 

  526. function user_set_stat($planet_added_web = null, $planet_added_ogs = null, $search = null,
    527. 

  527.     $spy_added_web = null, $spy_added_ogs = null, $rank_added_web = null, $rank_added_ogs = null,
    528. 

  528.     $planet_exported = null, $spy_exported = null, $rank_exported = null)
    529. 

  529. {
    530. 

  530.     global $db, $user_data;
    531. 

  531. 

  532.     $update = "";
    533. 

  533. 

  534.     //Statistiques envoi systèmes solaires et rapports d'espionnage
    535. 

  535.     if (!is_null($planet_added_web))
    536. 

  536.         $update .= ((strlen($update) > 0) ? ", " : "") .
    537. 

  537.             "planet_added_web = planet_added_web + " . $planet_added_web;
    538. 

  538.     if (!is_null($planet_added_ogs))
    539. 

  539.         $update .= ((strlen($update) > 0) ? ", " : "") .
    540. 

  540.             "planet_added_ogs = planet_added_ogs + " . $planet_added_ogs;
    541. 

  541.     if (!is_null($search))
    542. 

  542.         $update .= ((strlen($update) > 0) ? ", " : "") . "search = search + " . $search;
    543. 

  543.     if (!is_null($spy_added_web))
    544. 

  544.         $update .= ((strlen($update) > 0) ? ", " : "") .
    545. 

  545.             "spy_added_web = spy_added_web + " . $spy_added_web;
    546. 

  546.     if (!is_null($spy_added_ogs))
    547. 

  547.         $update .= ((strlen($update) > 0) ? ", " : "") .
    548. 

  548.             "spy_added_ogs = spy_added_ogs + " . $spy_added_ogs;
    549. 

  549.     if (!is_null($rank_added_web))
    550. 

  550.         $update .= ((strlen($update) > 0) ? ", " : "") .
    551. 

  551.             "rank_added_web = rank_added_web + " . $rank_added_web;
    552. 

  552.     if (!is_null($rank_added_ogs))
    553. 

  553.         $update .= ((strlen($update) > 0) ? ", " : "") .
    554. 

  554.             "rank_added_ogs = rank_added_ogs + " . $rank_added_ogs;
    555. 

  555.     if (!is_null($planet_exported))
    556. 

  556.         $update .= ((strlen($update) > 0) ? ", " : "") .
    557. 

  557.             "planet_exported = planet_exported + " . $planet_exported;
    558. 

  558.     if (!is_null($spy_exported))
    559. 

  559.         $update .= ((strlen($update) > 0) ? ", " : "") .
    560. 

  560.             "spy_exported = spy_exported + " . $spy_exported;
    561. 

  561.     if (!is_null($rank_exported))
    562. 

  562.         $update .= ((strlen($update) > 0) ? ", " : "") .
    563. 

  563.             "rank_exported = rank_exported + " . $rank_exported;
    564. 

  564. 

  565.     $request = "update " . TABLE_USER . " set " . $update . " where user_id = " . $user_data["user_id"];
    566. 

  566.     $db->sql_query($request);
    567. 

  567. }
    568. 

  568. 

  569. /**
    570. 

  570.  * Recuperation d'une ligne d'information utilisateur
    571. 

  571.  * @param int $user_id Identificateur optionnel d'1 utilisateur specifique 
    572. 

  572.  * @return Array Liste des utilisateurs ou de l'utilisateur specifique
    573. 

  573.  * @comment Pourrait peut etre avantageusement remplace par select * from TABLE_USER
    574. 

  574.  * @comment pour les eventuels champs supplementaires
    575. 

  575.  * @todo Query : x1
    576. 

  576.  */
    577. 

  577. function user_get($user_id = false)
    578. 

  578. {
    579. 

  579.     global $db;
    580. 

  580. 

  581.     $request = "select user_id, user_name, user_password, user_email, user_active, user_regdate, user_lastvisit," .
    582. 

  582.         " user_galaxy, user_system, user_admin, user_coadmin, management_user, management_ranking, disable_ip_check," .
    583. 

  583.         " off_commandant, off_amiral, off_ingenieur, off_geologue, off_technocrate" .
    584. 

  584.         " from " . TABLE_USER;
    585. 

  585. 

  586.     if ($user_id !== false) {
    587. 

  587.         $request .= " where user_id = " . $user_id;
    588. 

  588.     }
    589. 

  589.     $request .= " order by user_name";
    590. 

  590.     $result = $db->sql_query($request);
    591. 

  591. 

  592.     $info_users = array();
    593. 

  593.     while ($row = $db->sql_fetch_assoc($result)) {
    594. 

  594. 

  595.         $info_users[] = $row;
    596. 

  596.     }
    597. 

  597. 

  598.     if (sizeof($info_users) == 0) {
    599. 

  599.         return false;
    600. 

  600.     }
    601. 

  601. 

  602.     return $info_users;
    603. 

  603. }
    604. 

  604. /**
    605. 

  605.  * Recuperation des droits d'un utilisateur
    606. 

  606.  * @param int $user_id Identificateur de l'utilisateur demande
    607. 

  607.  * @todo Query : x1
    608. 

  608.  * @return Array Tableau des droits
    609. 

  609.  */
    610. 

  610. function user_get_auth($user_id)
    611. 

  611. {
    612. 

  612.     global $db;
    613. 

  613. 

  614.     $user_info = user_get($user_id);
    615. 

  615.     $user_info = $user_info[0];
    616. 

  616.     if ($user_info["user_admin"] == 1 || $user_info["user_coadmin"] == 1) {
    617. 

  617.         $user_auth = array("server_set_system" => 1, "server_set_spy" => 1,
    618. 

  618.             "server_set_rc" => 1, "server_set_ranking" => 1, "server_show_positionhided" =>
    619. 

  619.             1, "ogs_connection" => 1, "ogs_set_system" => 1, "ogs_get_system" => 1,
    620. 

  620.             "ogs_set_spy" => 1, "ogs_get_spy" => 1, "ogs_set_ranking" => 1,
    621. 

  621.             "ogs_get_ranking" => 1);
    622. 

  622. 

  623.         return $user_auth;
    624. 

  624.     }
    625. 

  625. 

  626.     $request = "select server_set_system, server_set_spy, server_set_rc, server_set_ranking, server_show_positionhided,";
    627. 

  627.     $request .= " ogs_connection, ogs_set_system, ogs_get_system, ogs_set_spy, ogs_get_spy, ogs_set_ranking, ogs_get_ranking";
    628. 

  628.     $request .= " from " . TABLE_GROUP . " g, " . TABLE_USER_GROUP . " u";
    629. 

  629.     $request .= " where g.group_id = u.group_id";
    630. 

  630.     $request .= " and user_id = " . $user_id;
    631. 

  631.     $result = $db->sql_query($request);
    632. 

  632. 

  633.     if ($db->sql_numrows($result) > 0) {
    634. 

  634.         $user_auth = array("server_set_system" => 0, "server_set_spy" => 0,
    635. 

  635.             "server_set_rc" => 0, "server_set_ranking" => 0, "server_show_positionhided" =>
    636. 

  636.             0, "ogs_connection" => 0, "ogs_set_system" => 0, "ogs_get_system" => 0,
    637. 

  637.             "ogs_set_spy" => 0, "ogs_get_spy" => 0, "ogs_set_ranking" => 0,
    638. 

  638.             "ogs_get_ranking" => 0);
    639. 

  639. 

  640.         while ($row = $db->sql_fetch_assoc($result)) {
    641. 

  641.             if ($row["server_set_system"] == 1)
    642. 

  642.                 $user_auth["server_set_system"] = 1;
    643. 

  643.             if ($row["server_set_spy"] == 1)
    644. 

  644.                 $user_auth["server_set_spy"] = 1;
    645. 

  645.             if ($row["server_set_rc"] == 1)
    646. 

  646.                 $user_auth["server_set_rc"] = 1;
    647. 

  647.             if ($row["server_set_ranking"] == 1)
    648. 

  648.                 $user_auth["server_set_ranking"] = 1;
    649. 

  649.             if ($row["server_show_positionhided"] == 1)
    650. 

  650.                 $user_auth["server_show_positionhided"] = 1;
    651. 

  651.             if ($row["ogs_connection"] == 1)
    652. 

  652.                 $user_auth["ogs_connection"] = 1;
    653. 

  653.             if ($row["ogs_set_system"] == 1)
    654. 

  654.                 $user_auth["ogs_set_system"] = 1;
    655. 

  655.             if ($row["ogs_get_system"] == 1)
    656. 

  656.                 $user_auth["ogs_get_system"] = 1;
    657. 

  657.             if ($row["ogs_set_spy"] == 1)
    658. 

  658.                 $user_auth["ogs_set_spy"] = 1;
    659. 

  659.             if ($row["ogs_get_spy"] == 1)
    660. 

  660.                 $user_auth["ogs_get_spy"] = 1;
    661. 

  661.             if ($row["ogs_set_ranking"] == 1)
    662. 

  662.                 $user_auth["ogs_set_ranking"] = 1;
    663. 

  663.             if ($row["ogs_get_ranking"] == 1)
    664. 

  664.                 $user_auth["ogs_get_ranking"] = 1;
    665. 

  665.         }
    666. 

  666.     } else {
    667. 

  667.         $user_auth = array("server_set_system" => 0, "server_set_spy" => 0,
    668. 

  668.             "server_set_ranking" => 0, "server_show_positionhided" => 0, "ogs_connection" =>
    669. 

  669.             0, "ogs_set_system" => 0, "ogs_get_system" => 0, "ogs_set_spy" => 0,
    670. 

  670.             "ogs_get_spy" => 0, "ogs_set_ranking" => 0, "ogs_get_ranking" => 0);
    671. 

  671.     }
    672. 

  672. 

  673.     return $user_auth;
    674. 

  674. }
    675. 

  675. 

  676. /**
    677. 

  677.  * Creation d'un utilisateur a partir des donnees du formulaire admin
    678. 

  678.  * @comment redirection si erreur de type de donnee
    679. 

  679.  * @todo Query : x3
    680. 

  680.  */
    681. 

  681. function user_create()
    682. 

  682. {
    683. 

  683.     global $db, $user_data;
    684. 

  684.     global $pub_pseudo, $pub_user_id, $pub_active, $pub_user_coadmin, $pub_management_user,
    685. 

  685.         $pub_management_ranking, $pub_group_id, $pub_pass;
    686. 

  686. 

  687.     if (!check_var($pub_pseudo, "Pseudo_Groupname")) {
    688. 

  688.         redirection("index.php?action=message&id_message=errordata&info=1");
    689. 

  689.     }
    690. 

  690. 

  691.     if (!isset($pub_pseudo)) {
    692. 

  692.         redirection("index.php?action=message&id_message=createuser_failed_general&info");
    693. 

  693.     }
    694. 

  694. 

  695.     //Vérification des droits
    696. 

  696.     user_check_auth("user_create");
    697. 

  697. 

  698.     if (!check_var($pub_pseudo, "Pseudo_Groupname")) {
    699. 

  699.         redirection("index.php?action=message&id_message=createuser_failed_pseudo&info=" .
    700. 

  700.             $pub_pseudo);
    701. 

  701.     }
    702. 

  702. 

  703.     if (!check_var($pub_pass, "Password")) {
    704. 

  704.         redirection("index.php?action=message&id_message=createuser_failed_password&info=" .
    705. 

  705.             $pub_pseudo);
    706. 

  706.     }
    707. 

  707. 

  708.     if ($pub_pass != "") {
    709. 

  709.         $password = $pub_pass;
    710. 

  710.     } else {
    711. 

  711.         $password = password_generator();
    712. 

  712.     }
    713. 

  713.     //$request = "select user_id from ".TABLE_USER." where user_name = '". $db->sql_escape_string($pub_pseudo)."'";
    714. 

  714.     $request = "select user_id from " . TABLE_USER . " where user_name = '" . $pub_pseudo .
    715. 

  715.         "'";
    716. 

  716.     $result = $db->sql_query($request);
    717. 

  717.     if ($db->sql_numrows($result) == 0) {
    718. 

  718.         $request = "insert into " . TABLE_USER .
    719. 

  719.             " (user_name, user_password, user_regdate, user_active)" . " values ('" . $pub_pseudo .
    720. 

  720.             "', '" . md5(sha1($password)) . "', " . time() . ", '1')";
    721. 

  721.         $db->sql_query($request);
    722. 

  722.         $user_id = $db->sql_insertid();
    723. 

  723. 

  724.         $request = "insert into " . TABLE_USER_GROUP . " (group_id, user_id) values (" .
    725. 

  725.             $pub_group_id . ", " . $user_id . ")";
    726. 

  726.         $db->sql_query($request);
    727. 

  727. 

  728.         $info = $user_id . ":" . $password;
    729. 

  729.         log_("create_account", $user_id);
    730. 

  730.         user_set_grant($user_id, null, $pub_active, $pub_user_coadmin, $pub_management_user,
    731. 

  731.             $pub_management_ranking);
    732. 

  732.         redirection("index.php?action=message&id_message=createuser_success&info=" . $info);
    733. 

  733.     } else {
    734. 

  734.         redirection("index.php?action=message&id_message=createuser_failed_pseudolocked&info=" .
    735. 

  735.             $pub_pseudo);
    736. 

  736.     }
    737. 

  737. }
    738. 

  738. /**
    739. 

  739.  * Suppression d'un utilisateur ($pub_user_id)
    740. 

  740.  * @todo Query : x12
    741. 

  741.  */
    742. 

  742. function user_delete()
    743. 

  743. {
    744. 

  744.     global $db, $user_data;
    745. 

  745.     global $pub_user_id;
    746. 

  746. 

  747.     if (!check_var($pub_user_id, "Num")) {
    748. 

  748.         redirection("index.php?action=message&id_message=errordata&info");
    749. 

  749.     }
    750. 

  750. 

  751.     if (!isset($pub_user_id)) {
    752. 

  752.         redirection("index.php?action=message&id_message=createuser_failed_general&info");
    753. 

  753.     }
    754. 

  754. 

  755.     user_check_auth("user_update", $pub_user_id);
    756. 

  756. 

  757.     log_("delete_account", $pub_user_id);
    758. 

  758.     $request = "delete from " . TABLE_USER . " where user_id = " . $pub_user_id;
    759. 

  759.     $db->sql_query($request);
    760. 

  760. 

  761.     $request = "delete from " . TABLE_USER_GROUP . " where user_id = " . $pub_user_id;
    762. 

  762.     $db->sql_query($request);
    763. 

  763. 

  764.     $request = "delete from " . TABLE_USER_BUILDING . " where user_id = " . $pub_user_id;
    765. 

  765.     $db->sql_query($request);
    766. 

  766. 

  767.     $request = "delete from " . TABLE_USER_FAVORITE . " where user_id = " . $pub_user_id;
    768. 

  768.     $db->sql_query($request);
    769. 

  769. 

  770.     $request = "delete from " . TABLE_USER_DEFENCE . " where user_id = " . $pub_user_id;
    771. 

  771.     $db->sql_query($request);
    772. 

  772. 

  773.     $request = "delete from " . TABLE_USER_SPY . " where user_id = " . $pub_user_id;
    774. 

  774.     $db->sql_query($request);
    775. 

  775. 

  776.     $request = "delete from " . TABLE_USER_TECHNOLOGY . " where user_id = " . $pub_user_id;
    777. 

  777.     $db->sql_query($request);
    778. 

  778. 

  779.     $request = "update " . TABLE_RANK_PLAYER_POINTS ." set sender_id = 0 where sender_id = " . $pub_user_id;
    780. 

  780.     $db->sql_query($request);
    781. 

  781. 

  782.     $request = "update " . TABLE_RANK_PLAYER_ECO ." set sender_id = 0 where sender_id = " . $pub_user_id;
    783. 

  783.     $db->sql_query($request);
    784. 

  784. 

  785. 	$request = "update " . TABLE_RANK_PLAYER_TECHNOLOGY ." set sender_id = 0 where sender_id = " . $pub_user_id;
    786. 

  786.     $db->sql_query($request);
    787. 

  787. 	
    788. 

  788. 	$request = "update " . TABLE_RANK_PLAYER_MILITARY ." set sender_id = 0 where sender_id = " . $pub_user_id;
    789. 

  789.     $db->sql_query($request);
    790. 

  790. 

  791. 	$request = "update " . TABLE_RANK_PLAYER_MILITARY_BUILT ." set sender_id = 0 where sender_id = " . $pub_user_id;
    792. 

  792.     $db->sql_query($request);
    793. 

  793. 

  794. 	$request = "update " . TABLE_RANK_PLAYER_MILITARY_LOOSE ." set sender_id = 0 where sender_id = " . $pub_user_id;
    795. 

  795.     $db->sql_query($request);
    796. 

  796. 

  797. 	$request = "update " . TABLE_RANK_PLAYER_MILITARY_DESTRUCT ." set sender_id = 0 where sender_id = " . $pub_user_id;
    798. 

  798.     $db->sql_query($request);
    799. 

  799. 

  800. 	$request = "update " . TABLE_RANK_PLAYER_HONOR ." set sender_id = 0 where sender_id = " . $pub_user_id;
    801. 

  801.     $db->sql_query($request);
    802. 

  802. 

  803. 	$request = "update " . TABLE_RANK_ALLY_POINTS ." set sender_id = 0 where sender_id = " . $pub_user_id;
    804. 

  804.     $db->sql_query($request);
    805. 

  805. 

  806. 	$request = "update " . TABLE_RANK_ALLY_ECO ." set sender_id = 0 where sender_id = " . $pub_user_id;
    807. 

  807.     $db->sql_query($request);
    808. 

  808. 

  809. 	$request = "update " . TABLE_RANK_ALLY_TECHNOLOGY ." set sender_id = 0 where sender_id = " . $pub_user_id;
    810. 

  810.     $db->sql_query($request);
    811. 

  811. 

  812. 	$request = "update " . TABLE_RANK_ALLY_MILITARY ." set sender_id = 0 where sender_id = " . $pub_user_id;
    813. 

  813.     $db->sql_query($request);
    814. 

  814. 

  815. 	$request = "update " . TABLE_RANK_ALLY_MILITARY_BUILT ." set sender_id = 0 where sender_id = " . $pub_user_id;
    816. 

  816.     $db->sql_query($request);
    817. 

  817. 

  818. 	$request = "update " . TABLE_RANK_ALLY_MILITARY_LOOSE ." set sender_id = 0 where sender_id = " . $pub_user_id;
    819. 

  819.     $db->sql_query($request);
    820. 

  820. 

  821. 	$request = "update " . TABLE_RANK_ALLY_MILITARY_DESTRUCT ." set sender_id = 0 where sender_id = " . $pub_user_id;
    822. 

  822.     $db->sql_query($request);
    823. 

  823. 

  824. 	$request = "update " . TABLE_RANK_ALLY_HONOR ." set sender_id = 0 where sender_id = " . $pub_user_id;
    825. 

  825.     $db->sql_query($request);
    826. 

  826. 

  827.     $request = "update " . TABLE_UNIVERSE ." set last_update_user_id = 0 where last_update_user_id = " . $pub_user_id;
    828. 

  828.     $db->sql_query($request);
    829. 

  829. 

  830.     session_close($pub_user_id);
    831. 

  831. 

  832.     redirection("index.php?action=administration&subaction=member");
    833. 

  833. }
    834. 

  834. /**
    835. 

  835.  * Recuperation des statistiques
    836. 

  836.  * @todo Query : x1
    837. 

  837.  */
    838. 

  838. function user_statistic()
    839. 

  839. {
    840. 

  840.     global $db;
    841. 

  841. 

  842.     $request = "select user_id, user_name, planet_added_web, planet_added_ogs, search, spy_added_web, spy_added_ogs, rank_added_web, rank_added_ogs, planet_exported, spy_exported, rank_exported, xtense_type, xtense_version, user_active, user_admin";
    843. 

  843.     $request .= " from " . TABLE_USER .
    844. 

  844.         " order by (planet_added_web + planet_added_ogs) desc";
    845. 

  845.     $result = $db->sql_query($request);
    846. 

  846. 

  847.     $user_statistic = array();
    848. 

  848.     while ($row = $db->sql_fetch_assoc($result)) {
    849. 

  849.         $here = "";
    850. 

  850.         $request = "select session_ogs from " . TABLE_SESSIONS .
    851. 

  851.             " where session_user_id = " . $row["user_id"];
    852. 

  852.         $result_2 = $db->sql_query($request);
    853. 

  853.         if ($db->sql_numrows($result_2) > 0) {
    854. 

  854.             $here = "(*)";
    855. 

  855.             list($session_ogs) = $db->sql_fetch_row($result_2);
    856. 

  856.             if ($session_ogs == 1)
    857. 

  857.                 $here = "(**)";
    858. 

  858.         }
    859. 

  859.         $user_statistic[] = array_merge($row, array("here" => $here));
    860. 

  860.     }
    861. 

  861. 

  862.     return $user_statistic;
    863. 

  863. }
    864. 

  864. /**
    865. 

  865.  * Recuperation du nombres de comptes actifs
    866. 

  866.  * @todo Query : x1
    867. 

  867.  */
    868. 

  868. function user_get_nb_active_users()
    869. 

  869. {
    870. 

  870.     global $db;
    871. 

  871. 

  872.     $request = "SELECT user_id, user_active";
    873. 

  873.     $request .= " FROM ".TABLE_USER;
    874. 

  874.     $request .= " WHERE user_active='1'";
    875. 

  875.     $result = $db->sql_query($request);
    876. 

  876.     $number = $db->sql_numrows();
    877. 

  877.     
    878. 

  878.     return($number);
    879. 

  879. }
    880. 

  880. /**
    881. 

  881.  * Enregistrement des donnees Empires d'un utilisateur
    882. 

  882.  */
    883. 

  883. function user_set_empire()
    884. 

  884. {
    885. 

  885.     global $pub_typedata, $pub_data, $pub_planet_id, $pub_planet_name, $pub_fields,
    886. 

  886.         $pub_coordinates, $pub_temperature_min, $pub_temperature_max, $pub_satellite;
    887. 

  887. 

  888.     if (!isset($pub_typedata) || !isset($pub_data)) {
    889. 

  889.         redirection("index.php?action=message&id_message=errorfatal&info");
    890. 

  890.     }
    891. 

  891. 

  892.     switch ($pub_typedata) {
    893. 

  893.         case "B":
    894. 

  894.             if (!isset($pub_planet_name) || !isset($pub_fields) || !isset($pub_coordinates) ||
    895. 

  895.                 !isset($pub_temperature_min) || !isset($pub_temperature_max) || !isset($pub_satellite)) {
    896. 

  896.                 redirection("index.php?action=message&id_message=errorfatal&info");
    897. 

  897.             }
    898. 

  898.             user_set_building($pub_data, $pub_planet_id, $pub_planet_name, $pub_fields, $pub_coordinates,
    899. 

  899.                 $pub_temperature_min, $pub_temperature_max, $pub_satellite);
    900. 

  900.             break;
    901. 

  901. 

  902.         case "T":
    903. 

  903.             user_set_technology($pub_data);
    904. 

  904.             break;
    905. 

  905. 

  906.         case "D":
    907. 

  907.             if (!isset($pub_planet_name) || !isset($pub_fields) || !isset($pub_coordinates) ||
    908. 

  908.                 !isset($pub_temperature_min) || !isset($pub_temperature_max) || !isset($pub_satellite)) {
    909. 

  909.                 redirection("index.php?action=message&id_message=errorfatal&info");
    910. 

  910.             }
    911. 

  911.             user_set_defence($pub_data, $pub_planet_id, $pub_planet_name, $pub_fields, $pub_coordinates,
    912. 

  912.                 $pub_temperature_min, $pub_temperature_max, $pub_satellite);
    913. 

  913.             break;
    914. 

  914. 

  915.         case "E":
    916. 

  916.             user_set_all_empire($pub_data);
    917. 

  917.             break;
    918. 

  918. 

  919. 

  920.         default:
    921. 

  921.             redirection("index.php?action=message&id_message=errorfatal&info");
    922. 

  922.             break;
    923. 

  923.     }
    924. 

  924. 

  925.     redirection("index.php?action=home&subaction=empire");
    926. 

  926. }
    927. 

  927. /**
    928. 

  928.  * Enregistrement de toutes les donnees empires
    929. 

  929.  * @param array $data All data related to the empire
    930. 

  930.  * @todo Query : x5
    931. 

  931.  */
    932. 

  932. function user_set_all_empire($data)
    933. 

  933. {
    934. 

  934.     global $db, $user_data;
    935. 

  935.     global $pub_view;
    936. 

  936.     require_once ("parameters/lang_empire.php");
    937. 

  937. 

  938.     $data = str_replace("-", "0", $data);
    939. 

  939.     $data = str_replace(".", "", $data);
    940. 

  940.     $data = stripcslashes($data);
    941. 

  941.     $lines = explode(chr(10), $data);
    942. 

  942.     $OK = false;
    943. 

  943.     $etape = "";
    944. 

  944.     $planetes_total_row = false;
    945. 

  945.     foreach ($lines as $line) {
    946. 

  946.         $arr = array();
    947. 

  947.         $line = trim($line);
    948. 

  948. 

  949.         if ($line == "Vue d'ensemble de votre empire") {
    950. 

  950.             $OK = true;
    951. 

  951.             continue;
    952. 

  952.         }
    953. 

  953. 

  954.         if ($OK) {
    955. 

  955.             if (preg_match("#^Coordonnées\s+\[(.*)\]$#", $line, $arr)) {
    956. 

  956.                 $coordonnees = preg_split("/\]\s+\[/", $arr[1]);
    957. 

  957.                 $planetes_total_row = sizeof($coordonnees) + 1;
    958. 

  958.                 if ($planetes_total_row > 10)
    959. 

  959.                     return false;
    960. 

  960. 

  961.                 $link_building = array($lang_building["M"] => "M", $lang_building["C"] => "C", $lang_building["D"] =>
    962. 

  962.                     "D", $lang_building["CES"] => "CES", $lang_building["CEF"] => "CEF", $lang_building["UdR"] =>
    963. 

  963.                     "UdR", $lang_building["UdN"] => "UdN", $lang_building["CSp"] => "CSp", $lang_building["HM"] =>
    964. 

  964.                     "HM", $lang_building["HC"] => "HC", $lang_building["HD"] => "HD", $lang_building["Lab"] =>
    965. 

  965.                     "Lab", $lang_building["Ter"] => "Ter", $lang_building["Silo"] => "Silo", $lang_building["BaLu"] =>
    966. 

  966.                     "BaLu", $lang_building["Pha"] => "Pha", $lang_building["PoSa"] => "PoSa");
    967. 

  967. 

  968.                 $buildings = array("M" => array_fill(0, $planetes_total_row, 0), "C" =>
    969. 

  969.                     array_fill(0, $planetes_total_row, 0), "D" => array_fill(0, $planetes_total_row,
    970. 

  970.                     0), "CES" => array_fill(0, $planetes_total_row, 0), "CEF" => array_fill(0, $planetes_total_row,
    971. 

  971.                     0), "UdR" => array_fill(0, $planetes_total_row, 0), "UdN" => array_fill(0, $planetes_total_row,
    972. 

  972.                     0), "CSp" => array_fill(0, $planetes_total_row, 0), "HM" => array_fill(0, $planetes_total_row,
    973. 

  973.                     0), "HC" => array_fill(0, $planetes_total_row, 0), "HD" => array_fill(0, $planetes_total_row,
    974. 

  974.                     0), "Lab" => array_fill(0, $planetes_total_row, 0), "Ter" => array_fill(0, $planetes_total_row,
    975. 

  975.                     0), "Silo" => array_fill(0, $planetes_total_row, 0), "BaLu" => array_fill(0, $planetes_total_row,
    976. 

  976.                     0), "Pha" => array_fill(0, $planetes_total_row, 0), "PoSa" => array_fill(0, $planetes_total_row,
    977. 

  977.                     0));
    978. 

  978. 

  979.                 $link_defence = array($lang_defence["LM"] => "LM", $lang_defence["LLE"] => "LLE",
    980. 

  980.                     $lang_defence["LLO"] => "LLO", $lang_defence["CG"] => "CG", $lang_defence["AI"] =>
    981. 

  981.                     "AI", $lang_defence["LP"] => "LP", $lang_defence["PB"] => "PB", $lang_defence["GB"] =>
    982. 

  982.                     "GB", $lang_defence["MIC"] => "MIC", $lang_defence["MIP"] => "MIP");
    983. 

  983. 

  984.                 $defences = array("LM" => array_fill(0, $planetes_total_row, 0), "LLE" =>
    985. 

  985.                     array_fill(0, $planetes_total_row, 0), "LLO" => array_fill(0, $planetes_total_row,
    986. 

  986.                     0), "CG" => array_fill(0, $planetes_total_row, 0), "AI" => array_fill(0, $planetes_total_row,
    987. 

  987.                     0), "LP" => array_fill(0, $planetes_total_row, 0), "PB" => array_fill(0, $planetes_total_row,
    988. 

  988.                     0), "GB" => array_fill(0, $planetes_total_row, 0), "MIC" => array_fill(0, $planetes_total_row,
    989. 

  989.                     0), "MIP" => array_fill(0, $planetes_total_row, 0));
    990. 

  990. 

  991.                 $link_technology = array($lang_technology["Esp"] => "Esp", $lang_technology["Ordi"] =>
    992. 

  992.                     "Ordi", $lang_technology["Armes"] => "Armes", $lang_technology["Bouclier"] =>
    993. 

  993.                     "Bouclier", $lang_technology["Protection"] => "Protection", $lang_technology["NRJ"] =>
    994. 

  994.                     "NRJ", $lang_technology["Hyp"] => "Hyp", $lang_technology["RC"] => "RC", $lang_technology["RI"] =>
    995. 

  995.                     "RI", $lang_technology["PH"] => "PH", $lang_technology["Laser"] => "Laser", $lang_technology["Ions"] =>
    996. 

  996.                     "Ions", $lang_technology["Plasma"] => "Plasma", $lang_technology["RRI"] => "RRI",
    997. 

  997.                     $lang_technology["Graviton"] => "Graviton", $lang_technology["Astrophysique"] =>
    998. 

  998.                     "Astrophysique");
    999. 

  999. 

  1000.                 $technologies = array("Esp" => 0, "Ordi" => 0, "Armes" => 0, "Bouclier" => 0,
    1001. 

  1001.                     "Protection" => 0, "NRJ" => 0, "Hyp" => 0, "RC" => 0, "RI" => 0, "PH" => 0,
    1002. 

  1002.                     "Laser" => 0, "Ions" => 0, "Plasma" => 0, "RRI" => 0, "Graviton" => 0,
    1003. 

  1003.                     "Astrophysique" => 0);
    1004. 

  1004. 

  1005.                 $satellites = array_fill(0, $planetes_total_row, 0);
    1006. 

  1006.                 $cases = array_fill(0, $planetes_total_row, 0);
    1007. 

  1007. 

  1008.                 // creation du masque ici
    1009. 

  1009.                 $masq = "#^((?:\s?\S+)+)\s+";
    1010. 

  1010.                 for ($i = 0; $i < ($planetes_total_row - 1); $i++) {
    1011. 

  1011.                     $masq .= "(\d+)(?:|\s\d+|\s\(\d+\))\s+";
    1012. 

  1012.                 }
    1013. 

  1013.                 $masq .= "(\d+)(?:\s\d+|\s\(\d+\))*$#";
    1014. 

  1014. 

  1015.                 continue;
    1016. 

  1016.             }
    1017. 

  1017. 

  1018.             if ($OK && $planetes_total_row !== false) {
    1019. 

  1019. 

  1020.                 if (preg_match("#^Cases\s+\d+\/((?:\d+\s+(?:\d+)\/(?:\d+)\s*){1," . $planetes_total_row .
    1021. 

  1021.                     "})$#", $line, $arr)) {
    1022. 

  1022.                     $cases = preg_split("/\s+\d+\//", $arr[1]);
    1023. 

  1023.                     if (sizeof($cases) != $planetes_total_row)
    1024. 

  1024.                         return false;
    1025. 

  1025.                     continue;
    1026. 

  1026.                 }
    1027. 

  1027. 

  1028.                 if (preg_match("#^(" . $lang_empire["Batiment"] . "|" . $lang_empire["Recherche"] .
    1029. 

  1029.                     "|" . $lang_empire["Vaisseaux"] . "|" . $lang_empire["Défense"] . ")$#", $line)) {
    1030. 

  1030.                     $etape = $line;
    1031. 

  1031.                     continue;
    1032. 

  1032.                 }
    1033. 

  1033. 

  1034.                 if ($etape != "" && preg_match($masq, $line, $arr)) {
    1035. 

  1035. 

  1036.                     $building = $arr[1];
    1037. 

  1037.                     $levels = array_slice($arr, 2);
    1038. 

  1038. 

  1039.                     switch ($etape) {
    1040. 

  1040.                         case "Bâtiments":
    1041. 

  1041.                             if (isset($link_building[$building])) {
    1042. 

  1042.                                 if (sizeof($levels) != $planetes_total_row)
    1043. 

  1043.                                     return false;
    1044. 

  1044.                                 $buildings[$link_building[$building]] = $levels;
    1045. 

  1045.                             }
    1046. 

  1046.                             break;
    1047. 

  1047.                         case "Recherche":
    1048. 

  1048.                             if (isset($link_technology[$building])) {
    1049. 

  1049.                                 if (sizeof($levels) != $planetes_total_row)
    1050. 

  1050.                                     return false;
    1051. 

  1051.                                 $technologies[$link_technology[$building]] = max($levels);
    1052. 

  1052.                             }
    1053. 

  1053.                             break;
    1054. 

  1054.                         case "Vaisseaux":
    1055. 

  1055.                             if ($building == "Satellite solaire") {
    1056. 

  1056.                                 if (sizeof($levels) != $planetes_total_row)
    1057. 

  1057.                                     return false;
    1058. 

  1058.                                 $satellites = $levels;
    1059. 

  1059.                             }
    1060. 

  1060.                             break;
    1061. 

  1061.                         case "Défense":
    1062. 

  1062.                             if (isset($link_defence[$building])) {
    1063. 

  1063.                                 if (sizeof($levels) != $planetes_total_row)
    1064. 

  1064.                                     return false;
    1065. 

  1065.                                 $defences[$link_defence[$building]] = $levels;
    1066. 

  1066.                             }
    1067. 

  1067.                             break;
    1068. 

  1068.                         default:
    1069. 

  1069.                             redirection("index.php?action=message&id_message=set_empire_failed_data&info");
    1070. 

  1070.                     }
    1071. 

  1071.                     continue;
    1072. 

  1072.                 }
    1073. 

  1073. 

  1074.             }
    1075. 

  1075.         }
    1076. 

  1076.     }
    1077. 

  1077.     if ($OK && $planetes_total_row !== false) {
    1078. 

  1078.         $j = 19;
    1079. 

  1079.         for ($i = 0; $i < $planetes_total_row; $i++) {
    1080. 

  1080.             if ($pub_view == "moons") {
    1081. 

  1081.                 $request = "select planet_id from " . TABLE_USER_BUILDING .
    1082. 

  1082.                     " where coordinates = '" . $coordonnees[$i] . "' and planet_id > 9";
    1083. 

  1083.                 $result = $db->sql_query($request);
    1084. 

  1084.                 if ($db->sql_numrows($result) > 0) {
    1085. 

  1085.                     list($planete_id) = $db->sql_fetch_row($result);
    1086. 

  1086.                 } else {
    1087. 

  1087.                     $request = "select planet_id from " . TABLE_USER_BUILDING . " where user_id = " .
    1088. 

  1088.                         $user_data["user_id"] . " and coordinates = '" . $coordonnees[$i] . "'";
    1089. 

  1089.                     $result = $db->sql_query($request);
    1090. 

  1090.                     list($planete_id) = $db->sql_fetch_row($result);
    1091. 

  1091.                     if (!$planete_id) {
    1092. 

  1092.                         $planete_id = $j;
    1093. 

  1093.                         $j++;
    1094. 

  1094.                     } else
    1095. 

  1095.                         $planete_id += 9;
    1096. 

  1096.                 }
    1097. 

  1097.             } else
    1098. 

  1098.                 $planete_id = $i + 1;
    1099. 

  1099. 

  1100.             if ($pub_view == "planets")
    1101. 

  1101.                 $case = $cases[$i] - 5 * $buildings["Ter"][$i];
    1102. 

  1102.             else
    1103. 

  1103.                 $case = 1;
    1104. 

  1104. 

  1105.             $request = "update " . TABLE_USER_BUILDING . " set coordinates = '" . $coordonnees[$i] .
    1106. 

  1106.                 "', `fields` = " . $case . " , Sat = " . $satellites[$i];
    1107. 

  1107.             $request .= ", M = " . $buildings["M"][$i] . ", C = " . $buildings["C"][$i] .
    1108. 

  1108.                 ", D = " . $buildings["D"][$i];
    1109. 

  1109.             $request .= ", CES = " . $buildings["CES"][$i] . ", CEF = " . $buildings["CEF"][$i] .
    1110. 

  1110.                 ", UdR = " . $buildings["UdR"][$i];
    1111. 

  1111.             $request .= ", UdN = " . $buildings["UdN"][$i] . ", CSp = " . $buildings["CSp"][$i] .
    1112. 

  1112.                 ", HM = " . $buildings["HM"][$i];
    1113. 

  1113.             $request .= ", HC = " . $buildings["HC"][$i] . ", HD = " . $buildings["HD"][$i] .
    1114. 

  1114.                 ", Lab = " . $buildings["Lab"][$i];
    1115. 

  1115.             $request .= ", Ter = " . $buildings["Ter"][$i] . ", Silo = " . $buildings["Silo"][$i] .
    1116. 

  1116.                 ", BaLu = " . $buildings["BaLu"][$i];
    1117. 

  1117.             $request .= ", Pha = " . $buildings["Pha"][$i] . ", PoSa = " . $buildings["PoSa"][$i] . ($pub_view ==
    1118. 

  1118.                 'lunes' ? ', planet_name = \'Lune\'' : '');
    1119. 

  1119.             $request .= " where user_id = " . $user_data["user_id"] . " and planet_id = " .
    1120. 

  1120.                 $planete_id;
    1121. 

  1121.             $db->sql_query($request);
    1122. 

  1122.             if ($db->sql_affectedrows() == 0) {
    1123. 

  1123.                 $request = "insert ignore into " . TABLE_USER_BUILDING .
    1124. 

  1124.                     " (user_id, planet_id, planet_name, coordinates, `fields`, temperature_min, temperature_max, Sat, M, C, D, CES, CEF, UdR, UdN, CSp, HM, HC, HD, Lab, Ter, Silo, BaLu, Pha, PoSa)";
    1125. 

  1125.                 $request .= " values (" . $user_data["user_id"] . ", " . $planete_id . ", '" . ($pub_view ==
    1126. 

  1126.                     'moons' ? 'Lune' : 'planete ' . $planete_id) . "', '" . $coordonnees[$i] . "', " .
    1127. 

  1127.                     $case . ", 0, " . $satellites[$i];
    1128. 

  1128.                 $request .= ", " . $buildings["M"][$i] . ", " . $buildings["C"][$i] . ", " . $buildings["D"][$i];
    1129. 

  1129.                 $request .= ", " . $buildings["CES"][$i] . ", " . $buildings["CEF"][$i] . ", " .
    1130. 

  1130.                     $buildings["UdR"][$i];
    1131. 

  1131.                 $request .= ", " . $buildings["UdN"][$i] . ", " . $buildings["CSp"][$i] . ", " .
    1132. 

  1132.                     $buildings["HM"][$i];
    1133. 

  1133.                 $request .= ", " . $buildings["HC"][$i] . ", " . $buildings["HD"][$i] . ", " . $buildings["Lab"][$i];
    1134. 

  1134.                 $request .= ", " . $buildings["Ter"][$i] . ", " . $buildings["Silo"][$i] . ", " .
    1135. 

  1135.                     $buildings["BaLu"][$i];
    1136. 

  1136.                 $request .= ", " . $buildings["Pha"][$i] . ", " . $buildings["PoSa"][$i] . ")";
    1137. 

  1137.                 $db->sql_query($request);
    1138. 

  1138.             }
    1139. 

  1139. 

  1140.             $request = "delete from " . TABLE_USER_DEFENCE . " where user_id = " . $user_data["user_id"] .
    1141. 

  1141.                 " and planet_id= " . $planete_id;
    1142. 

  1142.             $db->sql_query($request);
    1143. 

  1143. 

  1144.             $request = "insert into " . TABLE_USER_DEFENCE .
    1145. 

  1145.                 " (user_id, planet_id, LM, LLE, LLO, CG, AI, LP, PB, GB, MIC, MIP)";
    1146. 

  1146.             $request .= " values (" . $user_data["user_id"] . ", " . $planete_id . ", " . $defences["LM"][$i] .
    1147. 

  1147.                 ", " . $defences["LLE"][$i] . "," . $defences["LLO"][$i] . ", " . $defences["CG"][$i] .
    1148. 

  1148.                 ", " . $defences["AI"][$i] . ", " . $defences["LP"][$i] . ", " . $defences["PB"][$i] .
    1149. 

  1149.                 ", " . $defences["GB"][$i] . ", " . $defences["MIC"][$i] . ", " . $defences["MIP"][$i] .
    1150. 

  1150.                 ")";
    1151. 

  1151.             $db->sql_query($request);
    1152. 

  1152.         }
    1153. 

  1153.         if ($pub_view == "planets") {
    1154. 

  1154.             $request = "delete from " . TABLE_USER_TECHNOLOGY . " where user_id = " . $user_data["user_id"];
    1155. 

  1155.             $db->sql_query($request);
    1156. 

  1156. 

  1157.             $request = "insert into " . TABLE_USER_TECHNOLOGY .
    1158. 

  1158.                 " (user_id, esp, Ordi, Armes, Bouclier, Protection, NRJ, Hyp, RC, RI, PH, Laser, Ions, Plasma, RRI, Graviton, Astrophysique)";
    1159. 

  1159.             $request .= " values (" . $user_data["user_id"] . ", " . $technologies["Esp"] .
    1160. 

  1160.                 ", " . $technologies["Ordi"] . "," . $technologies["Armes"] . ", " . $technologies["Bouclier"] .
    1161. 

  1161.                 ", " . $technologies["Protection"] . ", " . $technologies["NRJ"] . ", " . $technologies["Hyp"] .
    1162. 

  1162.                 ", " . $technologies["RC"] . ", " . $technologies["RI"] . ", " . $technologies["PH"] .
    1163. 

  1163.                 ", " . $technologies["Laser"] . ", " . $technologies["Ions"] . ", " . $technologies["Plasma"] .
    1164. 

  1164.                 ", " . $technologies["RRI"] . ", " . $technologies["Graviton"] . ", " . $technologies["Astrophysique"] .
    1165. 

  1165.                 ");";
    1166. 

  1166.             $db->sql_query($request);
    1167. 

  1167.         }
    1168. 

  1168. 

  1169. 

  1170.         if ($pub_view == "planets")
    1171. 

  1171.             redirection("index.php?action=home&subaction=empire&view=" . $pub_view .
    1172. 

  1172.                 "&alert_empire=true");
    1173. 

  1173.         else
    1174. 

  1174.             redirection("index.php?action=home&subaction=empire&view=" . $pub_view);
    1175. 

  1175.     } else
    1176. 

  1176.         redirection("index.php?action=message&id_message=set_empire_failed_data&info");
    1177. 

  1177. }
    1178. 

  1178. 

  1179. 

  1180. /**
    1181. 

  1181.  * remise en ordre des lunes en fonctions des positions des planetes
    1182. 

  1182.  * @todo Query : x6
    1183. 

  1183.  */
    1184. 

  1184. function user_set_all_empire_resync_moon()
    1185. 

  1185. {
    1186. 

  1186.     global $db, $user_data;
    1187. 

  1187. 

  1188. 

  1189.     // lews planetes
    1190. 

  1190.     $request = "select planet_id, coordinates";
    1191. 

  1191.     $request .= " from " . TABLE_USER_BUILDING;
    1192. 

  1192.     $request .= " where user_id = " . $user_data["user_id"];
    1193. 

  1193.     $request .= "…
    1194.

Large files files are truncated, but you can click here to view the full file