PageRenderTime 44ms CodeModel.GetById 14ms RepoModel.GetById 0ms app.codeStats 0ms

/inc/user.inc.php

https://bitbucket.org/mhell/mhmcr
PHP | 210 lines | 181 code | 28 blank | 1 comment | 30 complexity | aae1c00d5df8ce85f4d8dcad9a5d2fd6 MD5 | raw file
    

  1. <?php

    2. 

  2. 

    3. 

  3. class User {

    4. 

  4. 	var $id;

    5. 

  5. 	var $name;

    6. 

  6. 	var $lvl;

    7. 

  7. 	var $tmp;

    8. 

  8. 	var $ip;

    9. 

  9. 	var $email;

    10. 

  10. 

    11. 

  11. 	function User($input,$method) {

    12. 

  12. 		global $db;

    13. 

  13. 		$result = mysql_query("SELECT ".$db['users']['username'].",".$db['users']['id'].",".$db['users']['level'].",".$db['users']['temp'].",".$db['users']['ip'].",".$db['users']['email']." FROM ".$db['tables']['users']." WHERE $method='$input'");

    14. 

  14. 		if (!$result) 

    15. 

  15. 			$this->id=false;

    16. 

  16. 		else {

    17. 

  17. 			$line = mysql_fetch_array($result, MYSQL_ASSOC);

    18. 

  18. 			$this->id = $line[$db['users']['id']];			

    19. 

  19. 			$this->name = $line[$db['users']['username']];			

    20. 

  20. 			$this->lvl = $line[$db['users']['level']];

    21. 

  21. 			$this->tmp = $line[$db['users']['temp']];

    22. 

  22. 			$this->ip = $line[$db['users']['ip']];

    23. 

  23. 			$this->email = $line[$db['users']['email']];

    24. 

  24. 		}

    25. 

  25. 		return true;			

    26. 

  26. 	}

    27. 

  27. 	

    28. 

  28. 	function gameLoginConfirm() {

    29. 

  29. 		global $db;

    30. 

  30. 		if (!$this->id) 

    31. 

  31. 			return false;

    32. 

  32. 		mysql_query("UPDATE ".$db['tables']['users']." SET ".$db['users']['lastlogin']."=NOW() WHERE ".$db['users']['id']."='".intval($this->id)."' LIMIT 1;"); 

    33. 

  33. 		return true;

    34. 

  34. 	}

    35. 

  35. 	

    36. 

  36. 	function gameLogoutConfirm() {

    37. 

  37. 		global $db;

    38. 

  38. 		if (!$this->id) 

    39. 

  39. 			return false;

    40. 

  40. 		$result = mysql_query("SELECT ".$db['users']['id']." FROM ".$db['tables']['users']." WHERE ".$db['users']['server']." IS NOT NULL and ".$db['users']['id']."='".intval($this->id)."' LIMIT 1;");

    41. 

  41. 		if ($result) //(mysql_num_rows($result) == 1)

    42. 

  42. 			mysql_query("UPDATE ".$db['tables']['users']." SET ".$db['users']['server']."=NULL WHERE ".$db['users']['id']."='".intval($this->id)."'"); 

    43. 

  43. 		return true;

    44. 

  44. 	}

    45. 

  45. 	

    46. 

  46. 	function gameLoginLast() {

    47. 

  47. 		global $db;

    48. 

  48. 		if (!$this->id) return false;

    49. 

  49. 		$result = mysql_query("SELECT ".$db['users']['lastlogin']." FROM ".$db['tables']['users']." WHERE ".$db['users']['lastlogin']."<>'0000-00-00 00:00:00' and ".$db['users']['id']."='".intval($this->id)."' LIMIT 1;");

    50. 

  50. 		if ($result) {

    51. 

  51. 			return mysql_result($result,0);	

    52. 

  52. 		} else {

    53. 

  53. 			return false;

    54. 

  54. 		}

    55. 

  55. 	}

    56. 

  56. 	

    57. 

  57. 	function login($tmp,$ip) {

    58. 

  58. 		global $db;

    59. 

  59. 	

    60. 

  60. 		if (!$this->id) return false;

    61. 

  61. 	

    62. 

  62. 		mysql_query("UPDATE ".$db['tables']['users']." SET ".$db['users']['temp']."='$tmp' WHERE ".$db['users']['id']."='".$this->id."'");

    63. 

  63. 		mysql_query("UPDATE ".$db['tables']['users']." SET ".$db['users']['ip']."='".GetRealIp()."' WHERE ".$db['users']['id']."='".$this->id."'"); 

    64. 

  64. 	

    65. 

  65. 		$this->tmp = $tmp;

    66. 

  66. 		

    67. 

  67. 		return true;

    68. 

  68. 	}

    69. 

  69. 	

    70. 

  70. 	function logout() {

    71. 

  71. 		global $db;

    72. 

  72. 		if (!isset($_SESSION)) session_start();

    73. 

  73. 		if (isset($_SESSION)) session_destroy();

    74. 

  74. 		if (isset($_COOKIE['PRTCookie1']))

    75. 

  75. 		{ 

    76. 

  76. 			$cook=$_COOKIE['PRTCookie1'];

    77. 

  77. 			mysql_query("UPDATE ".$db['tables']['users']." SET ".$db['users']['temp']."='0' WHERE ".$db['users']['temp']."='$cook'");

    78. 

  78. 			setcookie("PRTCookie1","",time()-3600);

    79. 

  79. 			$this->tmp = 0;

    80. 

  80. 		}	

    81. 

  81. 	}

    82. 

  82. 	

    83. 

  83. 	function name()

    84. 

  84. 	{

    85. 

  85. 		return $this->name;

    86. 

  86. 	}

    87. 

  87. 	

    88. 

  88. 	function email()

    89. 

  89. 	{

    90. 

  90. 		return $this->email;

    91. 

  91. 	}

    92. 

  92. 	

    93. 

  93. 	function getSkinFName() {

    94. 

  94. 		global $config;

    95. 

  95. 		return $config['mcsrv_dir'].$config['skins_dir'].$this->name.'.png';

    96. 

  96. 	}

    97. 

  97. 	

    98. 

  98. 	function getCloakFName() {

    99. 

  99. 		global $config;

    100. 

  100. 		return $config['mcsrv_dir'].$config['cloaks_dir'].$this->name.'.png';

    101. 

  101. 	}

    102. 

  102. 	

    103. 

  103. 	function deleteSkin() {

    104. 

  104. 		if (file_exists($this->getSkinFName())) {

    105. 

  105. 			unlink($this->getSkinFName());	

    106. 

  106. 			$this->deleteBuffer();

    107. 

  107. 		}

    108. 

  108. 	}

    109. 

  109. 	

    110. 

  110. 	function deleteCloak() {

    111. 

  111. 		if (file_exists($this->getCloakFName())) {

    112. 

  112. 			unlink($this->getCloakFName());	

    113. 

  113. 			$this->deleteBuffer();

    114. 

  114. 		}

    115. 

  115. 	}

    116. 

  116. 	

    117. 

  117. 	function deleteBuffer() {

    118. 

  118. 		global $config;

    119. 

  119. 

    120. 

  120. 		$mini = $config['mcsrv_dir'].'tmp/skin_buffer/'.$this->name.'_Mini.png';

    121. 

  121. 		$skin = $config['mcsrv_dir'].'tmp/skin_buffer/'.$this->name.'.png';

    122. 

  122. 

    123. 

  123. 		if (file_exists($mini)) 

    124. 

  124. 			unlink($mini); 

    125. 

  125. 		if (file_exists($skin)) 

    126. 

  126. 			unlink($skin); 

    127. 

  127. 	}

    128. 

  128. 	

    129. 

  129. 	function changeName($newname) {

    130. 

  130. 		global $db,$config;

    131. 

  131. 		if (!$this->id) 

    132. 

  132. 			return false;

    133. 

  133. 		$newname = addslashes(trim($newname));

    134. 

  134. 		if (!preg_match("/^[a-zA-Z0-9_-]+$/", $newname)) 

    135. 

  135. 			return false;

    136. 

  136. 		$result = mysql_query("SELECT ".$db['users']['username']." FROM ".$db['tables']['users']." WHERE ".$db['users']['username']."='$newname'");

    137. 

  137. 		if (mysql_num_rows($result)) 

    138. 

  138. 			return false;

    139. 

  139. 		if ((strlen($newname) < 4) or (strlen($newname) > 8)) 

    140. 

  140. 			return false;

    141. 

  141. 		mysql_query("UPDATE ".$db['tables']['users']." SET ".$db['users']['username']."='$newname' WHERE ".$db['users']['username']."='".$this->name."'");

    142. 

  142. 		if (!empty($_SESSION['user_name']) and $_SESSION['user_name'] == $this->name) 

    143. 

  143. 			$_SESSION['user_name'] = $newname;

    144. 

  144. 		/* Переименование файла скина и плаща */

    145. 

  145. 		$way_tmp_old = $config['mcsrv_dir'].$config['skins_dir'].$this->name.'.png';

    146. 

  146. 		$way_tmp_new = $config['mcsrv_dir'].$config['skins_dir'].$newname.'.png';

    147. 

  147. 		if (file_exists($way_tmp_old) and !file_exists($way_tmp_new)) 

    148. 

  148. 			rename($way_tmp_old, $way_tmp_new);

    149. 

  149. 		$way_tmp_old = $config['mcsrv_dir'].$config['skins_dir'].$this->name.'.png';

    150. 

  150. 		$way_tmp_new = $config['mcsrv_dir'].$config['skins_dir'].$newname.'.png';

    151. 

  151. 		if (file_exists($way_tmp_old) and !file_exists($way_tmp_new)) 

    152. 

  152. 			rename($way_tmp_old, $way_tmp_new);

    153. 

  153. 		$this->name = $newname;

    154. 

  154. 		return true;

    155. 

  155. 	}

    156. 

  156. 	

    157. 

  157. 	function changePassword($newpass,$pass = '',$check = false) {

    158. 

  158. 		global $db;

    159. 

  159. 		include_once('inc/pass.inc.php');

    160. 

  160. 		if (!$this->id) 

    161. 

  161. 			return 0;

    162. 

  162. 		if ($check) {

    163. 

  163. 			if (strlen($newpass)<6)

    164. 

  164. 				return 13;

    165. 

  165. 			$result = mysql_query("SELECT ".$db['users']['password']." FROM ".$db['tables']['users']." WHERE ".$db['users']['username']."='".$this->name."'"); 

    166. 

  166. 			$line = mysql_fetch_array( $result );

    167. 

  167. 			if (!$line or !checkPass($line[$db['users']['password']],$pass)) 

    168. 

  168. 				return 12;

    169. 

  169. 		}

    170. 

  170. 		mysql_query("UPDATE ".$db['tables']['users']." SET ".$db['users']['password']."='".createPass($newpass)."' WHERE ".$db['users']['username']."='".$this->name."'"); 

    171. 

  171. 		return 15;

    172. 

  172. 	}

    173. 

  173. 	

    174. 

  174. 	function changeLvl($newlvl) {

    175. 

  175. 		global $db;

    176. 

  176. 		$newlvl = (int) $newlvl;

    177. 

  177. 		if ($newlvl < 0 or $newlvl > 15)

    178. 

  178. 			return false;

    179. 

  179. 		mysql_query("UPDATE ".$db['tables']['users']." SET ".$db['users']['level']."='$newlvl' WHERE ".$db['users']['username']."='".$this->name."'"); 

    180. 

  180. 		return true;

    181. 

  181. 	}

    182. 

  182. 	

    183. 

  183. 	function changeEmail($newemail) {

    184. 

  184. 		global $db;

    185. 

  185. 		if (!filter_var($newemail,FILTER_VALIDATE_EMAIL))

    186. 

  186. 			return false;

    187. 

  187. 		mysql_query("UPDATE ".$db['tables']['users']." SET ".$db['users']['email']."='$newemail' WHERE ".$db['users']['username']."='".$this->name."'"); 

    188. 

  188. 		return true;

    189. 

  189. 	}

    190. 

  190. 	

    191. 

  191. 	function id()

    192. 

  192. 	{

    193. 

  193. 		return $this->id;

    194. 

  194. 	}

    195. 

  195. 	

    196. 

  196. 	function lvl()

    197. 

  197. 	{

    198. 

  198. 		return $this->lvl;

    199. 

  199. 	}	

    200. 

  200. 	

    201. 

  201. 	function tmp()

    202. 

  202. 	{

    203. 

  203. 		return $this->tmp;

    204. 

  204. 	}

    205. 

  205. 	

    206. 

  206. 	function ip()

    207. 

  207. 	{

    208. 

  208. 		return $this->ip;

    209. 

  209. 	}	

    210. 

  210. }
    211.