1
<?php
2
/**
3
 *   File functions:
4
 *   Clans - info, manage, herbs, minerals and battles
5
 *
6
 *   @name                 : tribes.php
7
 *   @copyright            : (C) 2004,2005,2006,2007 Vallheru Team based on Gamers-Fusion ver 2.5
8
 *   @author               : thindil <thindil@users.sourceforge.net>
9
 *   @author               : mori <ziniquel@users.sourceforge.net>
10
 *   @author               : eyescream <tduda@users.sourceforge.net>
11
 *   @author               : Erechail <kuba.stasiak at gmail.com>
12
 *   @version              : 1.3a
13
 *   @since                : 17.07.2007
14
 *
15
 */
16
17
//
18
//
19
//       This program is free software; you can redistribute it and/or modify
20
//   it under the terms of the GNU General Public License as published by
21
//   the Free Software Foundation; either version 2 of the License, or
22
//   (at your option) any later version.
23
//
24
//   This program is distributed in the hope that it will be useful,
25
//   but WITHOUT ANY WARRANTY; without even the implied warranty of
26
//   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
27
//   GNU General Public License for more details.
28
//
29
//   You should have received a copy of the GNU General Public License
30
//   along with this program; if not, write to the Free Software
31
//   Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
32
//
33
// $Id: tribes.php 918 2007-03-03 17:55:42Z thindil $
34
35
$title = "Klany";
36
require_once("includes/head.php");
37
require_once('includes/security.php');
38
39
/**
40
* Get the localization for game
41
*/
42
require_once("languages/".$player -> lang."/tribes.php");
43
44
if ($player -> location != 'Altara' && $player -> location != 'Ardulith')
45
{
46
    error (ERROR, RET_LOC);
47
}
48
49
$smarty -> assign(array("Logo" => '',
50
                        "WWW" => '',
51
                        "Message" => '',
52
                        "Message2" => '',
53
                        "Pubmessage" => '',
54
                        "Privmessage" => '',
55
                        "Hospass1" => '',
56
                        "Message1" => '',
57
                        "Step4" => '',
58
                        "New" => '',
59
                        "Perm" => '',
60
                        "Victory" => '',
61
                        "Link" => '',
62
                        "Menu" => '',
63
                        "Empty" => '',
64
                        "Change" => '',
65
                        "Itemid" => '',
66
                        "Perm1" => 0,
67
                        "Perm2" => 0,
68
                        "Perm3" => 0,
69
                        "Perm4" => 0,
70
                        "Perm5" => 0,
71
                        "Perm6" => 0,
72
                        "Perm7" => 0,
73
                        "Perm8" => 0,
74
                        "Perm9" => 0,
75
                        "Perm10" => 0,
76
                        "Perm11" => 0,
77
                        "Rank1" => 0,
78
                        "Rank2" => 0,
79
                        "Rank3" => 0,
80
                        "Rank4" => 0,
81
                        "Rank5" => 0,
82
                        "Rank6" => 0,
83
                        "Rank7" => 0,
84
                        "Rank8" => 0,
85
                        "Rank9" => 0,
86
                        "Rank10" => 0));
87
88
/**
89
* Main menu
90
*/
91
if (!isset ($_GET['view']) && !isset($_GET['join']))
92
{
93
    $smarty -> assign(array("Claninfo" => CLAN_INFO,
94
        "Ashow" => A_SHOW));
95
    if ($player -> tribe)
96
    {
97
        $mytribe = $db -> Execute("SELECT `name` FROM `tribes` WHERE `id`=".$player -> tribe);
98
        $smarty -> assign ("Mytribe", "<li><a href=\"tribes.php?view=my\">".MY_TRIBE."</a> (".$mytribe -> fields['name'].")</li>");
99
    }
100
        else
101
    {
102
        $smarty -> assign ("Mytribe", "<li>".MY_TRIBE."</li>");
103
    }
104
    if (!$player -> tribe && $player -> credits >= 2500000)
105
    {
106
        $smarty -> assign ("Make", "<li><a href=\"tribes.php?view=make\">".MAKE_NEW."</a></li>");
107
    }
108
        else
109
    {
110
        $smarty -> assign ("Make", "<li>".MAKE_NEW."</li>");
111
    }
112
}
113
114
/**
115
* List of clans
116
*/
117
if (isset ($_GET['view']) && $_GET['view'] == 'all')
118
{
119
    $query = $db -> Execute("SELECT count(*) FROM `tribes`");
120
    $numt = $query -> fields['count(*)'];
121
    $query -> Close();
122
    if ($numt <= 0)
123
    {
124
        $smarty -> assign(array("Text" => NO_CLANS,
125
                           "Showinfo" => ''));
126
    }
127
        else
128
    {
129
        $smarty -> assign ("Text", "<ul>");
130
        $tribe = $db -> Execute("SELECT `id`, `name`, `owner` FROM `tribes` ORDER BY `id`");
131
        $arrid = array();
132
        $arrname = array();
133
        $arrowner = array();
134
		$ID2Name = array ();
135
        $i = 0;
136
        while (!$tribe -> EOF)
137
        {
138
            $arrid[$i] = $tribe -> fields['id'];
139
            $arrname[$i] = $tribe -> fields['name'];
140
            $arrownerid[$i] = $tribe -> fields['owner'];
141
			if (!isset ($ID2Name [$i])) {
142
				$objname = $db->Execute ('SELECT user FROM players WHERE id = \''.$arrownerid[$i].'\'');
143
						$ID2Name[$arrownerid[$i]] = $objname->fields['user'];
144
			}
145
146
			$arrowner[$i] = $ID2Name[$arrownerid[$i]];
147
            $tribe -> MoveNext();
148
            $i = $i + 1;
149
        }
150
        $tribe -> Close();
151
        $smarty -> assign(array("Tribeid" => $arrid,
152
            "Name" => $arrname,
153
            "OwnerID" => $arrownerid,
154
			'Owner'	=>	$arrowner,
155
            "Showinfo" => SHOW_INFO,
156
            "Leader" => LEADER));
157
    }
158
}
159
160
/**
161
* Clan info
162
*/
163
if (isset ($_GET['view']) && $_GET['view'] == 'view')
164
{
165
    if (!isset ($_GET['step']))
166
    {
167
        if (!ereg("^[1-9][0-9]*$", $_GET['id']))
168
        {
169
            error (ERROR);
170
        }
171
        $tribe = $db -> Execute("SELECT `id`, `name`, `owner`, `wygr`, `przeg`, `public_msg`, `www`, `logo` FROM `tribes` WHERE `id`=".$_GET['id']);
172
        if (!$tribe -> fields['id'])
173
        {
174
            error (NO_CLAN);
175
        }
176
        $plik = 'images/tribes/'.$tribe -> fields['logo'];
177
        $query = $db -> Execute("SELECT count(*) FROM `players` WHERE `tribe`=".$tribe -> fields['id']);
178
        $memnum = $query -> fields['count(*)'];
179
        $query -> Close();
180
        if (is_file($plik))
181
        {
182
            $arrImageparams = getimagesize($plik);
183
            if ($arrImageparams[0] > 200)
184
            {
185
                $arrImageparams[0] = 200;
186
            }
187
            if ($arrImageparams[1] > 100)
188
            {
189
                $arrImageparams[1] = 100;
190
            }
191
            $smarty -> assign ("Logo", "<center><img src=\"".$plik."\" width=\"".$arrImageparams[0]."\" height=\"".$arrImageparams[1]."\" /></center><br />");
192
        }
193
194
        $objAstral = $db -> Execute("SELECT `used` FROM `astral_machine` WHERE `owner`=".$tribe -> fields['id']);
195
        if ($objAstral -> fields['used'])
196
        {
197
            $intPercent = round($objAstral -> fields['used'] / 200, 2);
198
            $arrPercent = array(20.99, 40.99, 70.99, 85.99, 99.99, 100);
199
            $arrAstral = array(ASTRAL1, ASTRAL2, ASTRAL3, ASTRAL4, ASTRAL5, ASTRAL6);
200
            for ($i = 0; $i < 5; $i++)
201
            {
202
                if ($intPercent <= $arrPercent[$i])
203
                {
204
                    break;
205
                }
206
            }
207
            $strAstral = ASTRAL.$arrAstral[$i]."<br />";
208
        }
209
            else
210
        {
211
            $strAstral = '';
212
        }
213
        $objAstral -> Close();
214
215
		$objname = $db->Execute ('SELECT user FROM players WHERE id = \''.$tribe->fields['owner'].'\'');
216
		$owner = $objname->fields['user'];
217
218
        $smarty -> assign(array("Name" => $tribe -> fields['name'],
219
                                "OwnerID" => $tribe -> fields['owner'],
220
								'Owner'	=>	$owner,
221
                                "Members" => $memnum,
222
                                "Tribeid" => $tribe -> fields['id'],
223
                                "Wins"=> $tribe -> fields['wygr'],
224
                                "Lost" => $tribe -> fields['przeg'],
225
                                "Pubmessage" => $tribe -> fields['public_msg'],
226
                                "Astral" => $strAstral,
227
                                "Yousee" => YOU_SEE,
228
                                "Leader2" => LEADER2,
229
                                "Memamount" => MEM_AMOUNT,
230
                                "Amembers" => A_MEMBERS,
231
                                "Winamount" => WIN_AMOUNT,
232
                                "Lostamount" => LOST_AMOUNT,
233
                                "Jointo" => JOIN_TO,
234
                                "Ajoin" => A_JOIN));
235
        if ($tribe -> fields['www'])
236
        {
237
            $smarty -> assign ("WWW", CLAN_PAGE.": <a href=\"http://".$tribe -> fields['www']."\">".$tribe -> fields['www']."</a><br />");
238
        }
239
240
        if ($player -> clas == 'Złodziej' && $player -> tribe != $tribe -> fields['id'])
241
        {
242
            $objAstralcrime = $db -> Execute("SELECT `astralcrime` FROM `players` WHERE `id`=".$player -> id);
243
            if ($objAstralcrime -> fields['astralcrime'] == 'Y')
244
            {
245
                $smarty -> assign("Asteal", "<br /><br /><a href=\"tribes.php?view=view&id=".$_GET['id']."&amp;step=steal\">".A_STEAL."</a>");
246
            }
247
                else
248
            {
249
                $smarty -> assign("Asteal", '');
250
            }
251
            $objAstralcrime -> Close();
252
        }
253
            else
254
        {
255
            $smarty -> assign("Asteal", '');
256
        }
257
258
        $tribe -> Close();
259
    }
260
261
    /**
262
     * Steal astral components
263
     */
264
    if (isset($_GET['step']) && $_GET['step'] == 'steal')
265
    {
266
        if (!ereg("^[1-9][0-9]*$", $_GET['id']))
267
        {
268
            error(ERROR);
269
        }
270
        $objTribe = $db -> Execute("SELECT `id`, `owner` FROM `tribes` WHERE `id`=".$_GET['id']);
271
        if (!$objTribe -> fields['id'])
272
        {
273
            error(NO_CLAN." (<a href=\"tribes.php?view=view&id=".$_GET['id']."\">".BACK."</a>)");
274
        }
275
        if ($player -> clas != 'Złodziej' || $player -> clas == 'Lochy')
276
        {
277
            error(ERROR." (<a href=\"tribes.php?view=view&id=".$_GET['id']."\">".BACK."</a>)");
278
        }
279
        $objAstralcrime = $db -> Execute("SELECT `astralcrime` FROM `players` WHERE `id`=".$player -> id);
280
        if ($objAstralcrime -> fields['astralcrime'] == 'N')
281
        {
282
            error (NO_CRIME." (<a href=\"tribes.php?view=view&id=".$_GET['id']."\">".BACK."</a>)");
283
        }
284
        $objAstralcrime -> Close();
285
        if ($player -> hp <= 0)
286
        {
287
            error (YOU_DEAD." (<a href=\"tribes.php?view=view&id=".$_GET['id']."\">".BACK."</a>)");
288
        }
289
        if ($player -> tribe == $_GET['id'])
290
        {
291
            error(SAME_CLAN." (<a href=\"tribes.php?view=view&id=".$_GET['id']."\">".BACK."</a>)");
292
        }
293
294
        require_once('includes/astralsteal.php');
295
        astralsteal($_GET['id'], 'C', $objTribe -> fields['owner']);
296
297
        require_once('includes/checkastral.php');
298
        checkastral($objTribe -> fields['id']);
299
300
        $objTribe -> Close();
301
    }
302
303
    if (isset ($_GET['step']) && $_GET['step'] == 'members')
304
    {
305
        if (!ereg("^[1-9][0-9]*$", $_GET['tid']))
306
        {
307
            error (ERROR);
308
        }
309
        $tribename = $db -> Execute("SELECT `name`, `owner` FROM `tribes` WHERE `id`=".$_GET['tid']);
310
        $mem = $db -> Execute("SELECT `id`, `user`, `tribe_rank` FROM `players` WHERE `tribe`=".$_GET['tid']);
311
        $arrlink = array();
312
        $i = 0;
313
        while (!$mem -> EOF)
314
        {
315
            if ($mem -> fields['id'] == $tribename -> fields['owner']) {
316
                $arrlink[$i] = "- <a href=\"view.php?view=".$mem -> fields['id']."\">".$mem -> fields['user']."</a> (".$mem -> fields['id'].") (".$mem -> fields['tribe_rank'].") (".LEADER.")<br />";
317
            }
318
                else
319
            {
320
                $arrlink[$i] = "- <a href=\"view.php?view=".$mem -> fields['id']."\">".$mem -> fields['user']."</a> (".$mem -> fields['id'].") (".$mem -> fields['tribe_rank'].")<br />";
321
            }
322
            $mem -> MoveNext();
323
            $i = $i + 1;
324
        }
325
        $mem -> Close();
326
        $smarty -> assign(array("Name" => $tribename -> fields['name'],
327
                                "Link" => $arrlink,
328
                                "Memberlist" => MEMBER_LIST));
329
        $tribename -> Close();
330
    }
331
}
332
333
/**
334
* Join to clan
335
*/
336
if (isset($_GET['join']))
337
{
338
    if (!ereg("^[1-9][0-9]*$", $_GET['join']))
339
    {
340
        error (ERROR);
341
    }
342
    $tribe = $db -> Execute("SELECT * FROM tribes WHERE id=".$_GET['join']);
343
    $test = $db -> Execute("SELECT gracz FROM tribe_oczek WHERE gracz=".$player -> id);
344
    if (!isset ($_GET['change']))
345
    {
346
        if ($player -> tribe)
347
        {
348
            error (YOU_IN_CLAN);
349
        }
350
        if ($test -> fields['gracz'])
351
        {
352
            $smarty -> assign(array("Tribeid" => $_GET['join'],
353
                "Playerid" => $test -> fields['gracz'],
354
                "Check" => 1,
355
                "Youwait" => YOU_WAIT,
356
                "Ayes" => YES,
357
                "Ano" => NO));
358
        }
359
            else
360
        {
361
            $strDate = $db -> DBDate($newdate);
362
            $db -> Execute("INSERT INTO `tribe_oczek` (`gracz`, `klan`) VALUES(".$player -> id.",".$tribe -> fields['id'].")");
363
            $db -> Execute("INSERT INTO `log` (`owner`,`log`, `czas`) VALUES(".$tribe -> fields['owner'].",'".L_PLAYER."<b><a href=\"view.php?view=".$player -> id."\">".$player -> user.L_ID.'<b>'.$player -> id.'</b>'.HE_WANT."', ".$strDate.")");
364
            error (YOU_SEND.$tribe -> fields['name'].".");
365
        }
366
    }
367
        else
368
    {
369
        if ($player -> tribe)
370
        {
371
            error (YOU_IN_CLAN);
372
        }
373
        $strDate = $db -> DBDate($newdate);
374
        $db -> Execute("INSERT INTO `log` (`owner`,`log`, `czas`) VALUES(".$tribe -> fields['owner'].",'".L_PLAYER." <b><a href=view.php?view=".$player -> id.">".$player -> user.L_ID.'<b>'.$player -> id.'</b>'.HE_WANT."', ".$strDate.")");
375
        $objPerm = $db -> Execute("SELECT `player` FROM `tribe_perm` WHERE `tribe`=".$tribe -> fields['id']." AND `wait`=1");
376
        while (!$objPerm -> EOF)
377
        {
378
            $db -> Execute("INSERT INTO `log` (`owner`,`log`, `czas`) VALUES(".$objPerm -> fields['player'].",'".L_PLAYER." <b><a href=view.php?view=".$player -> id.">".$player -> user.L_ID.'<b>'.$player -> id.'</b>'.HE_WANT."', ".$strDate.")");
379
            $objPerm -> MoveNext();
380
        }
381
        $objPerm -> Close();
382
        $db -> Execute("UPDATE `tribe_oczek` SET `klan`=".$tribe -> fields['id']." WHERE `gracz`=".$player -> id);
383
        error (YOU_SEND.$tribe -> fields['name'].".");
384
    }
385
}
386
387
/**
388
* Make clan
389
*/
390
if (isset ($_GET['view']) && $_GET['view'] == 'make')
391
{
392
    $smarty -> assign(array("Clanname" => CLAN_NAME,
393
        "Amake" => A_MAKE));
394
    if ($player -> credits < 2500000)
395
    {
396
        error (NO_MONEY);
397
    }
398
    if ($player -> tribe)
399
    {
400
        error (YOU_IN_CLAN);
401
    }
402
    if ($player -> hp < 1)
403
    {
404
        error(YOU_DEAD);
405
    }
406
    if (isset($_GET['step']) && $_GET['step'] == 'make')
407
    {
408
        if (!$_POST['name'])
409
        {
410
            error (NO_NAME);
411
        }
412
        $db -> Execute("INSERT INTO tribes (name,owner) VALUES('".strip_tags($_POST['name'])."',".$player -> id.")");
413
        $db -> Execute("UPDATE players SET credits=credits-2500000 WHERE id=".$player -> id);
414
        $newt = $db -> Execute("SELECT id FROM tribes WHERE owner=".$player -> id);
415
        $db -> Execute("UPDATE players SET tribe=".$newt -> fields['id']." WHERE id=".$player -> id);
416
        $newt -> Close();
417
        error (YOU_MAKE.strip_tags($_POST['name'])."</i>.<br />");
418
    }
419
}
420
421
/**
422
* My clan menu
423
*/
424
if (isset ($_GET['view']) && $_GET['view'] == 'my')
425
{
426
    if (!$player -> tribe)
427
    {
428
        error (NOT_IN);
429
    }
430
    $mytribe = $db -> Execute("SELECT * FROM tribes WHERE id=".$player -> tribe);
431
    $perm = $db -> Execute("SELECT * FROM tribe_perm WHERE tribe=".$mytribe -> fields['id']." AND player=".$player -> id);
432
    $smarty -> assign (array("Name" => $mytribe -> fields['name'],
433
                             "Myclan" => MY_CLAN,
434
                             "Menu1" => MENU1,
435
                             "Menu2" => MENU2,
436
                             "Menu3" => MENU3,
437
                             "Menu4" => MENU4,
438
                             "Menu5" => MENU5,
439
                             "Menu6" => MENU6,
440
                             "Menu7" => MENU7,
441
                             "Menu8" => MENU8,
442
                             "Menu9" => MENU9,
443
                             "Menu10" => MENU10,
444
                             "Menu11" => MENU11));
445
    if (!isset ($_GET['step']))
446
    {
447
        $plik = 'images/tribes/'.$mytribe -> fields['logo'];
448
        if (is_file($plik))
449
        {
450
            $smarty -> assign ("Logo", "<center><img src=\"".$plik."\" height=\"100\"></center><br>");
451
        }
452
        $query = $db -> Execute("SELECT count(*) FROM `players` WHERE `tribe`=".$mytribe -> fields['id']);
453
        $memnum = $query -> fields['count(*)'];
454
        $query -> Close();
455
        $owner = $db -> Execute("SELECT `id`, `user` FROM `players` WHERE `id`=".$mytribe -> fields['owner']);
456
        if ($player -> id == $mytribe -> fields['owner'] || !$perm -> fields['info'])
457
        {
458
            $smarty -> assign(array("Gold" => $mytribe -> fields['credits'],
459
                                    "Mithril" => $mytribe -> fields['platinum'],
460
                                    "Soldiers" => $mytribe -> fields['zolnierze'],
461
                                    "Forts" => $mytribe -> fields['forty']));
462
        }
463
            else
464
        {
465
            $smarty -> assign(array("Gold" => UNKNOWN,
466
                                    "Mithril" => UNKNOWN,
467
                                    "Soldiers" => UNKNOWN,
468
                                    "Forts" => UNKNOWN));
469
        }
470
        $objAstral = $db -> Execute("SELECT `aviable`, `used` FROM `astral_machine` WHERE `owner`=".$mytribe -> fields['id']);
471
        if ($objAstral -> fields['aviable'] == 'Y')
472
        {
473
            $strAstral = "<a href=\"tribes.php?view=my&amp;step=astral\">".A_MACHINE."</a>";
474
        }
475
            else
476
        {
477
            $strAstral = A_MACHINE;
478
        }
479
        if ($objAstral -> fields['used'])
480
        {
481
            $intPercent = round($objAstral -> fields['used'] / 200, 2);
482
        }
483
            else
484
        {
485
            $intPercent = 0;
486
        }
487
        $objAstral -> Close();
488
        $smarty -> assign(array("Members" => $memnum,
489
                                "Owner" => $owner -> fields['user'],
490
                                "Ownerid" => $owner -> fields['id'],
491
                                "Wins" => $mytribe -> fields['wygr'],
492
                                "Lost" => $mytribe -> fields['przeg'],
493
                                "Privmessage" => $mytribe -> fields['private_msg'],
494
                                "Amachine" => $strAstral,
495
                                "Percent" => $intPercent,
496
                                "Apercent" => A_PERCENT,
497
                                "Clanname" => CLAN_NAME,
498
                                "Welcome" => WELCOME,
499
                                "Memamount" => MEM_AMOUNT,
500
                                "Leader" => LEADER,
501
                                "Goldcoins" => GOLD_COINS,
502
                                "Mithcoins" => MITH_COINS,
503
                                "Winamount" => WIN_AMOUNT,
504
                                "Lostamount" => LOST_AMOUNT,
505
                                "Tsoldiers" => T_SOLDIERS,
506
                                "Tforts" => T_FORTS));
507
        if ($mytribe -> fields['www'])
508
        {
509
            $smarty -> assign ("WWW", "<li>".CLAN_PAGE.": <a href=\"http://".$mytribe -> fields['www']."\" target=\"_blank\">".$mytribe -> fields['www']."</a></li>");
510
        }
511
    }
512
513
    /**
514
     * Build astral machine
515
     */
516
    if (isset($_GET['step']) && $_GET['step'] == 'astral')
517
    {
518
        $objAstral = $db -> Execute("SELECT `used`, `directed`, `aviable` FROM `astral_machine` WHERE `owner`=".$mytribe -> fields['id']);
519
        if ($objAstral -> fields['aviable'] != 'Y')
520
        {
521
            error(NO_COMPONENTS);
522
        }
523
        $objTest = $db -> Execute("SELECT `value` FROM `settings` WHERE `setting`='tribe'");
524
        if ($objTest -> fields['value'])
525
        {
526
            error(ASTRAL_BUILD);
527
        }
528
        $smarty -> assign(array("Aused" => A_USED,
529
                                "Aenergy" => A_ENERGY,
530
                                "Atoday" => A_TODAY,
531
                                "Amax" => A_MAX,
532
                                "Adirect" => A_DIRECT,
533
                                "Aform" => A_FORM,
534
                                "Message" => '',
535
                                "Eused" => $objAstral -> fields['used'],
536
                                "Edirected" => $objAstral -> fields['directed']));
537
538
        /**
539
         * Add energy to astral machine
540
         */
541
        if (isset($_GET['step2']) && $_GET['step2'] == 'add')
542
        {
543
            if (!ereg("^[1-9][0-9]*$", $_POST['amount']))
544
            {
545
                error(ERROR);
546
            }
547
            if ($_POST['amount'] > $player -> energy)
548
            {
549
                error(NO_ENERGY);
550
            }
551
            $intDirected = $objAstral -> fields['directed'] + $_POST['amount'];
552
            if ($intDirected > 1000)
553
            {
554
                error(TOO_MUCH);
555
            }
556
            $intUsed = $objAstral -> fields['used'] + $intDirected;
557
            if ($intUsed > 20000)
558
            {
559
                error(TOO_MUCH2);
560
            }
561
            $db -> Execute("UPDATE `players` SET `energy`=`energy`-".$_POST['amount']." WHERE `id`=".$player -> id);
562
            $db -> Execute("UPDATE `astral_machine` SET `directed`=".$intDirected." WHERE `owner`=".$mytribe -> fields['id']);
563
            $smarty -> assign("Message", YOU_ADD.$_POST['amount']." ".A_ENERGY." <a href=\"tribes.php?view=my&amp;step=astral\">".A_REFRESH."</a>");
564
        }
565
566
        $objAstral -> Close();
567
    }
568
569
    /**
570
    * Donations to clan
571
    */
572
    if (isset ($_GET['step']) && $_GET['step'] == 'donate')
573
    {
574
        $smarty -> assign(array("Doninfo" => DON_INFO,
575
                                "Adonate" => A_DONATE,
576
                                "Goldcoins" => GOLD_COINS2,
577
                                "Mithcoins" => MITH_COINS2,
578
                                "Toclan" => TO_CLAN));
579
        if (isset ($_GET['step2']) && $_GET['step2'] == 'donate')
580
        {
581
            if ($_POST['type'] == 'credits')
582
            {
583
                $dot = GOLD_COINS;
584
            }
585
            if ($_POST['type'] == 'platinum')
586
            {
587
                $dot = MITH_COINS;
588
            }
589
            integercheck($_POST['amount']);
590
            if (!ereg("^[1-9][0-9]*$", $_POST['amount']))
591
            {
592
                error(ERROR);
593
            }
594
            if ($_POST['type'] != 'credits' && $_POST['type'] != 'platinum')
595
            {
596
                error(ERROR);
597
            }
598
            if ($_POST['amount'] > $player -> $_POST['type'])
599
            {
600
                $smarty -> assign ("Message", NO_AMOUNT.$dot.".");
601
            }
602
                else
603
            {
604
                $db -> Execute("UPDATE players SET ".$_POST['type']."=".$_POST['type']."-".$_POST['amount']." WHERE id=".$player -> id);
605
                $db -> Execute("UPDATE tribes set ".$_POST['type']."=".$_POST['type']."+".$_POST['amount']." WHERE id=".$mytribe -> fields['id']);
606
                $smarty -> assign ("Message", YOU_GIVE.$_POST['amount']." ".$dot."</b>.");
607
                $strDate = $db -> DBDate($newdate);
608
                $db -> Execute("INSERT INTO `log` (`owner`,`log`, `czas`) VALUES(".$mytribe -> fields['owner'].", '".L_PLAYER." <b><a href=view.php?view=".$player -> id.">".$player -> user.L_ID.'<b>'.$player -> id.'</b>'.HE_ADD.$_POST['amount']." ".$dot.".', ".$strDate.")");
609
                $objPerm = $db -> Execute("SELECT player FROM tribe_perm WHERE tribe=".$mytribe -> fields['id']." AND loan=1");
610
                while (!$objPerm -> EOF)
611
                {
612
                    $db -> Execute("INSERT INTO `log` (`owner`,`log`, `czas`) VALUES(".$objPerm -> fields['player'].", '".L_PLAYER." <b><a href=view.php?view=".$player -> id.">".$player -> user.L_ID.'<b>'.$player -> id.'</b>'.HE_ADD.$_POST['amount']." ".$dot.".', ".$strDate.")");
613
                    $objPerm -> MoveNext();
614
                }
615
                $objPerm -> Close();
616
            }
617
        }
618
    }
619
620
    /**
621
    * Clan herbs
622
    */
623
    if (isset ($_GET['step']) && $_GET['step'] == 'zielnik')
624
    {
625
        $arrName = array(HERB1, HERB2, HERB3, HERB4, HERB5, HERB6, HERB7, HERB8);
626
        $arrSqlname = array('illani', 'illanias', 'nutari', 'dynallca', 'ilani_seeds', 'illanias_seeds', 'nutari_seeds', 'dynallca_seeds');
627
        $arrAmount = array($mytribe -> fields['illani'],
628
                           $mytribe -> fields['illanias'],
629
                           $mytribe -> fields['nutari'],
630
                           $mytribe -> fields['dynallca'],
631
                           $mytribe -> fields['ilani_seeds'],
632
                           $mytribe -> fields['illanias_seeds'],
633
                           $mytribe -> fields['nutari_seeds'],
634
                           $mytribe -> fields['dynallca_seeds']);
635
        if (!isset ($_GET['step2']) && !isset ($_GET['step3']) && !isset ($_GET['daj']) && !isset ($_GET['step4']))
636
        {
637
            $arrTable = array();
638
            $i = 0;
639
            foreach ($arrName as $strName)
640
            {
641
                if ($player -> id == $mytribe -> fields['owner'] || $perm -> fields['herbs'])
642
                {
643
                    $arrTable[$i] = "<td width=\"100\"><a href=\"tribes.php?view=my&amp;step=zielnik&amp;daj=".$arrSqlname[$i]."\"><b><u>".$strName."</u></b></a></td>";
644
                }
645
                    else
646
                {
647
                    $arrTable[$i] = "<td width=\"100\"><b><u>".$strName."</u></b></td>";
648
                }
649
                $i++;
650
            }
651
            $smarty -> assign(array("Tamount" => $arrAmount,
652
                                    "Ttable" => $arrTable,
653
                                    "Herbsinfo" => HERBS_INFO,
654
                                    "Whatyou" => WHAT_YOU,
655
                                    "Agiveto" => A_GIVE_TO));
656
        }
657
        /**
658
         * Give herbs to player
659
         */
660
        if (isset ($_GET['daj']) && $_GET['daj'])
661
        {
662
            if ($player -> id != $mytribe -> fields['owner'] && !$perm -> fields['herbs'])
663
            {
664
                error(ERROR);
665
            }
666
            if (!in_array($_GET['daj'], $arrSqlname))
667
            {
668
                error(ERROR);
669
            }
670
            $intKey = array_search($_GET['daj'], $arrSqlname);
671
            $min1 = $arrName[$intKey];
672
            $smarty -> assign(array("Giveplayer" => GIVE_PLAYER,
673
                                    "Agive" => A_GIVE,
674
                                    "Tamount" => T_AMOUNT,
675
                                    "Hamount2" => H_AMOUNT2,
676
                                    "Tamount2" => $arrAmount[$intKey],
677
                                    "Nameherb" => $min1,
678
                                    "Itemid" => $_GET['daj']));
679
            if (isset ($_GET['step4']) && $_GET['step4'] == 'add')
680
            {
681
                if (!ereg("^[1-9][0-9]*$", $_POST['ilosc']))
682
                {
683
                    error (ERROR);
684
                }
685
                if (!ereg("^[1-9][0-9]*$", $_POST['did']))
686
                {
687
                    error (ERROR);
688
                }
689
                $dtrib = $db -> Execute("SELECT `tribe` FROM `players` WHERE `id`=".$_POST['did']);
690
                if ($dtrib -> fields['tribe'] != $mytribe -> fields['id'])
691
                {
692
                    error (NOT_IN_CLAN);
693
                }
694
                $give = $_GET['daj'];
695
                if ($mytribe -> fields[$give] < $_POST['ilosc'])
696
                {
697
                    error (NO_AMOUNT.$min1."!");
698
                }
699
                $kop = $db -> Execute("SELECT * FROM `herbs` WHERE `gracz`=".$_POST['did']);
700
                if (!$kop -> fields['id'])
701
                {
702
                    $db -> Execute("INSERT INTO `herbs` (`gracz`, `".$_GET['daj']."`) VALUES(".$_POST['did'].",".$_POST['ilosc'].")");
703
                }
704
                    else
705
                {
706
                    $db -> Execute("UPDATE `herbs` SET `".$_GET['daj']."`=`".$_GET['daj']."`+".$_POST['ilosc']." WHERE `gracz`=".$_POST['did']);
707
                }
708
                $db -> Execute("UPDATE `tribes` SET `".$_GET['daj']."`=`".$_GET['daj']."`-".$_POST['ilosc']." WHERE `id`=".$mytribe -> fields['id']);
709
710
                // Get name of the person which receives herbs.
711
                $objGetName = $db -> Execute("SELECT `user` FROM `players` WHERE `id`=".$_POST['did'].';');
712
                $strReceiversName = $objGetName -> fields['user'];
713
                $objGetName -> Close();
714
                unset( $objGetName );
715
716
                $smarty -> assign ("Message",  YOU_SEND1.'<b><a href="view.php?view='.$_POST['did'].'">'.$strReceiversName.'</a></b>'.YOU_SEND2.$_POST['did']." ".$_POST['ilosc']." ".$min1.'.');
717
718
                /**
719
                 * Send information about give herbs to player
720
                 */
721
                $strDate = $db -> DBDate($newdate);
722
723
                $db -> Execute("INSERT INTO `log` (`owner`, `log`, `czas`) VALUES(".$mytribe -> fields['owner'].", '".YOU_SEND1.'<b><a href="view.php?view='.$_POST['did'].'">'.$strReceiversName.'</a></b>'.YOU_SEND2.'<b>'.$_POST['did']."</b> ".$_POST['ilosc']." ".$min1.".', ".$strDate.")");
724
                $objPerm = $db -> Execute("SELECT `player` FROM `tribe_perm` WHERE `tribe`=".$mytribe -> fields['id']." AND `herbs`=1");
725
                while (!$objPerm -> EOF)
726
                {
727
                    $db -> Execute("INSERT INTO `log` (`owner`, `log`, `czas`) VALUES(".$objPerm -> fields['player'].", '".YOU_SEND1.'<b><a href="view.php?view='.$_POST['did'].'">'.$strReceiversName.'</a></b>'.YOU_SEND2.'<b>'.$_POST['did']."</b> ".$_POST['ilosc']." ".$min1.".', ".$strDate.")");
728
                    $objPerm -> MoveNext();
729
                }
730
                $objPerm -> Close();
731
                $db -> Execute("INSERT INTO `log` (`owner`, `log`, `czas`) VALUES(".$_POST['did'].", '".YOU_GET.$_POST['ilosc']." ".$min1.".', ".$strDate.")");
732
            }
733
        }
734
        if (isset ($_GET['step2']) && $_GET['step2'] == 'daj')
735
        {
736
            $smarty -> assign(array("Addherb" => ADD_HERB,
737
                                    "Aadd" => A_ADD,
738
                                    "Herb" => HERB,
739
                                    "Hamount" => H_AMOUNT,
740
                                    "Herbname" => $arrName,
741
                                    "Sqlname" => $arrSqlname));
742
            if (isset ($_GET['step3']) && $_GET['step3'] == 'add')
743
            {
744
                $gr = $db -> Execute("SELECT * FROM `herbs` WHERE `gracz`=".$player -> id);
745
                if (!in_array($_POST['mineral'], $arrSqlname))
746
                {
747
                    error(ERROR);
748
                }
749
                $intKey = array_search($_POST['mineral'], $arrSqlname);
750
                $nazwa = $arrName[$intKey];
751
                $min = $arrSqlname[$intKey];
752
                if ($_POST['ilosc'] > $gr -> fields[$min])
753
                {
754
                    error(NO_AMOUNT2.$nazwa.".");
755
                }
756
                if ($_POST['ilosc'] <= 0 || !ereg("^[1-9][0-9]*$", $_POST['ilosc']))
757
                {
758
                    error (ERROR);
759
                }
760
                $db -> Execute("UPDATE `tribes` SET `".$min."`=`".$min."`+".$_POST['ilosc']." WHERE `id`=".$mytribe -> fields['id']);
761
                $db -> Execute("UPDATE `herbs` SET `".$min."`=`".$min."`-".$_POST['ilosc']." WHERE `gracz`=".$player -> id);
762
                $smarty -> assign ("Message", YOU_ADD.$_POST['ilosc']." ".$nazwa.TO_CLAN);
763
                /**
764
                 * Send information about give herbs to tribe
765
                 */
766
                $strDate = $db -> DBDate($newdate);
767
                $db -> Execute("INSERT INTO `log` (`owner`, `log`, `czas`) VALUES(".$mytribe -> fields['owner'].", '".L_PLAYER." <b><a href=view.php?view=".$player -> id.">".$player -> user.L_ID.'<b>'.$player -> id.'</b>'.HE_ADD.$_POST['ilosc']." ".$nazwa.".', ".$strDate.")");
768
                $objPerm = $db -> Execute("SELECT `player` FROM `tribe_perm` WHERE `tribe`=".$mytribe -> fields['id']." AND `herbs`=1");
769
                while (!$objPerm -> EOF)
770
                {
771
                    $db -> Execute("INSERT INTO `log` (`owner`, `log`, `czas`) VALUES(".$objPerm -> fields['player'].", '".L_PLAYER." <b><a href=view.php?view=".$player -> id.">".$player -> user.L_ID.'<b>'.$player -> id.'</b>'.HE_ADD.$_POST['ilosc']." ".$nazwa.".', ".$strDate.")");
772
                    $objPerm -> MoveNext();
773
                }
774
                $objPerm -> Close();
775
            }
776
        }
777
    }
778
779
    /**
780
    * Clan minerals
781
    */
782
    if (isset ($_GET['step']) && $_GET['step'] == 'skarbiec')
783
    {
784
        $arrSqlname = array('copperore', 'zincore', 'tinore', 'ironore', 'copper', 'bronze', 'brass', 'iron', 'steel', 'coal', 'adamantium', 'meteor', 'crystal', 'pine', 'hazel', 'yew', 'elm');
785
        $arrName = array(MINE1, MINE2, MINE3, MINE4, MINE5, MINE6, MINE7, MINE8, MINE9, MINE10, MINE11, MINE12, MINE13, MINE14, MINE15, MINE16, MINE17);
786
        $arrAmount = array($mytribe -> fields['copperore'],
787
                           $mytribe -> fields['zincore'],
788
                           $mytribe -> fields['tinore'],
789
                           $mytribe -> fields['ironore'],
790
                           $mytribe -> fields['copper'],
791
                           $mytribe -> fields['bronze'],
792
                           $mytribe -> fields['brass'],
793
                           $mytribe -> fields['iron'],
794
                           $mytribe -> fields['steel'],
795
                           $mytribe -> fields['coal'],
796
                           $mytribe -> fields['adamantium'],
797
                           $mytribe -> fields['meteor'],
798
                           $mytribe -> fields['crystal'],
799
                           $mytribe -> fields['pine'],
800
                           $mytribe -> fields['hazel'],
801
                           $mytribe -> fields['yew'],
802
                           $mytribe -> fields['elm']);
803
        if (!isset ($_GET['step2']) && !isset ($_GET['step3']) && !isset ($_GET['daj']) && !isset ($_GET['step4']))
804
        {
805
            $arrTable = array();
806
            $i = 0;
807
            foreach ($arrName as $strName)
808
            {
809
                if ($player -> id == $mytribe -> fields['owner'] || $perm -> fields['bank'])
810
                {
811
                    $arrTable[$i] = "<tr><td><a href=\"tribes.php?view=my&amp;step=skarbiec&amp;daj=".$arrSqlname[$i]."\">".$strName."</a></td><td width=\"75%\" align=\"center\"><b>".$arrAmount[$i]."</b></td></tr>";
812
                }
813
                    else
814
                {
815
                    $arrTable[$i] = "<tr><td>".$strName."</td><td width=\"75%\" align=\"center\"><b>".$arrAmount[$i]."</b></td></tr>";
816
                }
817
                $i++;
818
            }
819
            $smarty -> assign(array("Mininfo" => MIN_INFO,
820
                                    "Whatyou" => WHAT_YOU,
821
                                    "Agiveto" => A_GIVE_TO,
822
                                    "Ttable" => $arrTable));
823
        }
824
        if (isset ($_GET['daj']) && $_GET['daj'])
825
        {
826
            if ($player -> id != $mytribe -> fields['owner'] && !$perm -> fields['bank'])
827
            {
828
                error(ERROR);
829
            }
830
            if (!in_array($_GET['daj'], $arrSqlname))
831
            {
832
                error(ERROR);
833
            }
834
            $intKey = array_search($_GET['daj'], $arrSqlname);
835
            $smarty -> assign(array("Itemid" => $_GET['daj'],
836
                                    "Giveplayer" => GIVE_PLAYER,
837
                                    "Agive" => A_GIVE,
838
                                    "Tamount" => T_AMOUNT,
839
                                    "Mamount2" => M_AMOUNT2,
840
                                    "Namemin" => $arrName[$intKey],
841
                                    "Tamount2" => $arrAmount[$intKey]));
842
            if (isset ($_GET['step4']) && $_GET['step4'] == 'add')
843
            {
844
                if (!ereg("^[1-9][0-9]*$", $_POST['ilosc']))
845
                {
846
                    error (ERROR);
847
                }
848
                $daj = $_GET['daj'];
849
                if (!ereg("^[1-9][0-9]*$", $_POST['did']))
850
                {
851
                    error (ERROR);
852
                }
853
                $dtrib = $db -> Execute("SELECT `tribe` FROM `players` WHERE `id`=".$_POST['did']);
854
                if ($dtrib -> fields['tribe'] != $mytribe -> fields['id'])
855
                {
856
                    error (NOT_IN_CLAN);
857
                }
858
                $dtrib -> Close();
859
                $give = $_GET['daj'];
860
                if ($mytribe -> fields[$give] < $_POST['ilosc'])
861
                {
862
                    error (NO_AMOUNT.$_POST['min']."!");
863
                }
864
                $kop = $db -> Execute("SELECT `owner` FROM `minerals` WHERE `owner`=".$_POST['did']);
865
                if (!$kop -> fields['owner'])
866
                {
867
                    $db -> Execute("INSERT INTO `minerals` (`owner`, `".$daj."`) VALUES(".$_POST['did'].",".$_POST['ilosc'].")");
868
                }
869
                    else
870
                {
871
                    $db -> Execute("UPDATE `minerals` SET `".$daj."`=`".$daj."`+".$_POST['ilosc']." WHERE `owner`=".$_POST['did']);
872
                }
873
                $kop -> Close();
874
                $db -> Execute("UPDATE `tribes` SET `".$daj."`=`".$daj."`-".$_POST['ilosc']." WHERE `id`=".$mytribe -> fields['id']);
875
876
                // Get name of the person which receives minerals.
877
                $objGetName = $db -> Execute("SELECT `user` FROM `players` WHERE `id`=".$_POST['did'].';');
878
                $strReceiversName = $objGetName -> fields['user'];
879
                $objGetName -> Close();
880
                unset( $objGetName );
881
882
                $smarty -> assign ("Message",  CLAN_SEND1.'<b><a href="view.php?view='.$_POST['did'].'">'.$strReceiversName.'</a></b>'.CLAN_SEND2.$_POST['did']." ".$_POST['ilosc']." ".$_POST['min']);
883
                /**
884
                 * Send information about give minerals to player
885
                 */
886
                $strDate = $db -> DBDate($newdate);
887
                $db -> Execute("INSERT INTO `log` (`owner`, `log`, `czas`) VALUES(".$mytribe -> fields['owner'].", '".CLAN_SEND1.'<b><a href="view.php?view='.$_POST['did'].'">'.$strReceiversName.'</a></b>'.CLAN_SEND2.'<b>'.$_POST['did']."</b> ".$_POST['ilosc']." ".$_POST['min'].".', ".$strDate.")");
888
                $objPerm = $db -> Execute("SELECT `player` FROM `tribe_perm` WHERE `tribe`=".$mytribe -> fields['id']." AND `bank`=1");
889
                while (!$objPerm -> EOF)
890
                {
891
                    $db -> Execute("INSERT INTO `log` (`owner`, `log`, `czas`) VALUES(".$objPerm -> fields['player'].", '".CLAN_SEND1.'<b><a href="view.php?view='.$_POST['did'].'">'.$strReceiversName.'</a></b>'.CLAN_SEND2.'<b>'.$_POST['did']."</b> ".$_POST['ilosc']." ".$_POST['min'].".', ".$strDate.")");
892
                    $objPerm -> MoveNext();
893
                }
894
                $objPerm -> Close();
895
                $db -> Execute("INSERT INTO `log` (`owner`, `log`, `czas`) VALUES(".$_POST['did'].", '".YOU_GET.$_POST['ilosc']." ".$_POST['min'].".', ".$strDate.")");
896
            }
897
        }
898
        if (isset ($_GET['step2']) && $_GET['step2'] == 'daj')
899
        {
900
            $smarty -> assign(array("Addmin" => ADD_MIN,
901
                                    "Aadd" => A_ADD,
902
                                    "Mineral" => MINERAL,
903
                                    "Mamount" => M_AMOUNT,
904
                                    "Minsql" => $arrSqlname,
905
                                    "Minname" => $arrName));
906
            if (isset ($_GET['step3']) && $_GET['step3'] == 'add')
907
            {
908
                if (!in_array($_POST['mineral'], $arrSqlname))
909
                {
910
                    error(ERROR);
911
                }
912
                $gr = $db -> Execute("SELECT ".$_POST['mineral']." FROM `minerals` WHERE `owner`=".$player -> id);
913
                $intKey = array_search($_POST['mineral'], $arrSqlname);
914
                if ($_POST['ilosc'] > $gr -> fields[$arrSqlname[$intKey]])
915
                {
916
                    error(NO_AMOUNT2.$arrName[$intKey].".");
917
                }
918
                if ($_POST['ilosc'] <= 0 || !ereg("^[1-9][0-9]*$", $_POST['ilosc']))
919
                {
920
                    error (ERROR);
921
                }
922
                $db -> Execute("UPDATE `tribes` SET `".$arrSqlname[$intKey]."`=`".$arrSqlname[$intKey]."`+".$_POST['ilosc']." WHERE `id`=".$mytribe -> fields['id']);
923
                $db -> Execute("UPDATE `minerals` SET `".$arrSqlname[$intKey]."`=`".$arrSqlname[$intKey]."`-".$_POST['ilosc']." WHERE `owner`=".$player -> id);
924
                $smarty -> assign ("Message", YOU_ADD.$_POST['ilosc'].PIECES.$arrName[$intKey].TO_CLAN);
925
                /**
926
                 * Send information about give minerals to tribe
927
                 */
928
                $strDate = $db -> DBDate($newdate);
929
                $db -> Execute("INSERT INTO `log` (`owner`, `log`, `czas`) VALUES(".$mytribe -> fields['owner'].", '".L_PLAYER." <b><a href=\"view.php?view=".$player -> id."\">".$player -> user.L_ID.'<b>'.$player -> id.'</b>'.HE_ADD.$_POST['ilosc'].PIECES.$arrName[$intKey].".', ".$strDate.")");
930
                $objPerm = $db -> Execute("SELECT `player` FROM `tribe_perm` WHERE `tribe`=".$mytribe -> fields['id']." AND `bank`=1");
931
                while (!$objPerm -> EOF)
932
                {
933
                    $db -> Execute("INSERT INTO `log` (`owner`, `log`, `czas`) VALUES(".$objPerm -> fields['player'].", '".L_PLAYER." <b><a href=\"view.php?view=".$player -> id."\">".$player -> user.L_ID.'<b>'.$player -> id.'</b>'.HE_ADD.$_POST['ilosc'].PIECES.$arrName[$intKey].".', ".$strDate.")");
934
                    $objPerm -> MoveNext();
935
                }
936
                $objPerm -> Close();
937
            }
938
        }
939
    }
940
941
    /**
942
    * Members list
943
    */
944
    if (isset ($_GET['step']) && $_GET['step'] == 'members')
945
    {
946
        $mem = $db -> Execute("SELECT id, user, tribe_rank FROM players WHERE tribe=".$mytribe -> fields['id']);
947
        $arrlink = array();
948
        $i = 0;
949
        while (!$mem -> EOF)
950
        {
951
            if ($mem -> fields['id'] == $mytribe -> fields['owner'])
952
            {
953
                $arrlink[$i] = "- <a href=\"view.php?view=".$mem -> fields['id']."\">".$mem -> fields['user']."</a> (".$mem -> fields['id'].") (".$mem -> fields['tribe_rank'].") (".LEADER.")<br />";
954
            }
955
                else
956
            {
957
                $arrlink[$i] = "- <a href=\"view.php?view=".$mem -> fields['id']."\">".$mem -> fields['user']."</a> (".$mem -> fields['id'].") (".$mem -> fields['tribe_rank'].")<br />";
958
            }
959
            $mem -> MoveNext();
960
            $i = $i + 1;
961
        }
962
        $mem -> Close();
963
        $smarty -> assign("Link", $arrlink);
964
    }
965
966
    /**
967
    * Leave clan
968
    */
969
    if (isset ($_GET['step']) && $_GET['step'] == 'quit')
970
    {
971
        $smarty -> assign(array("Ayes" => YES,
972
            "Ano" => NO));
973
        if ($mytribe -> fields['owner'] == $player -> id)
974
        {
975
            $smarty -> assign(array("Owner" => 1,
976
                "Qleader" => Q_LEADER));
977
            if (isset ($_GET['dalej']))
978
            {
979
                $db -> Execute("UPDATE players SET tribe=0 WHERE tribe=".$mytribe -> fields['id']);
980
                $db -> Execute("DELETE FROM tribes WHERE id=".$mytribe -> fields['id']);
981
                $db -> Execute("DELETE FROM tribe_zbroj WHERE klan=".$mytribe -> fields['id']);
982
                $db -> Execute("DELETE FROM tribe_mag WHERE klan=".$mytribe -> fields['id']);
983
                $db -> Execute("DELETE FROM tribe_oczek WHERE klan=".$mytribe -> fields['id']);
984
                $db -> Execute("DELETE FROM tribe_perm WHERE tribe=".$mytribe -> fields['id']);
985
                $db -> Execute("UPDATE players SET tribe_rank='' WHERE id=".$player -> id);
986
                error (L_LEADER);
987
            }
988
        }
989
            else
990
        {
991
            $smarty -> assign(array("Owner" => 0,
992
                "Qmember" => Q_MEMBER));
993
            if (isset ($_GET['dalej']))
994
            {
995
                $db -> Execute("UPDATE players SET tribe=0, tribe_rank='' WHERE id=".$player -> id);
996
                $db -> Execute("DELETE FROM tribe_perm WHERE tribe=".$mytribe -> fields['id']." AND player=".$player -> id);
997
                $strDate = $db -> DBDate($newdate);
998
                $db -> Execute("INSERT INTO `log` (`owner`,`log`, `czas`) VALUES(".$mytribe -> fields['owner'].", '".L_PLAYER." <b><a href=\"view.php?view=".$player -> id."\">".$player -> user.L_ID.'<b>'.$player -> id.'</b>'.M_LEAVE."', ".$strDate.")");
999
                error (L_MEMBER);
1000
            }
1001
        }
1002
    }
1003
1004
    /**
1005
    * Clan control menu
1006
    */
1007
    if (isset ($_GET['step']) && $_GET['step'] == 'owner')
1008
    {
1009
        $smarty -> assign(array("Panelinfo" => PANEL_INFO,
1010
                                "Aperm" => A_PERM,
1011
                                "Arank" => A_RANK,
1012
                                "Adesc" => A_DESC,
1013
                                "Awaiting" => A_WAITING,
1014
                                "Akick" => A_KICK,
1015
                                "Aarmy" => A_ARMY,
1016
                                "Aattack2" => A_ATTACK2,
1017
                                "Aloan" => A_LOAN,
1018
                                "Amisc" => A_MISC,
1019
                                "Amail2" => A_MAIL2));
1020
        $test = array($perm -> fields['messages'],$perm -> fields['wait'],$perm -> fields['kick'],$perm -> fields['army'],$perm -> fields['attack'],$perm -> fields['loan'],$perm -> fields['armory'],$perm -> fields['warehouse'],$perm -> fields['bank'],$perm -> fields['herbs'], $perm -> fields['mail'], $perm -> fields['ranks']);
1021
        $intTest = 0;
1022
        for ($i = 0; $i < 12; $i++)
1023
        {
1024
            if ($test[$i])
1025
            {
1026
                $intTest = 1;
1027
                break;
1028
            }
1029
        }
1030
        if ($player -> id == $mytribe -> fields['owner'] || $intTest)
1031
        {
1032
1033
            /**
1034
            * Set ranks for members
1035
            */
1036
            if (isset ($_GET['step2']) && $_GET['step2'] == 'rank')
1037
            {
1038
                if($player -> id != $mytribe -> fields['owner'] && !$perm -> fields['ranks'])
1039
                {
1040
                   error (NO_PERM2);
1041
                }
1042
                if (!isset ($_GET['step3']))
1043
                {
1044
                    $smarty -> assign(array("Ranksinfo" => RANKS_INFO,
1045
                        "Aaddranks" => A_ADD_RANKS));
1046
                    $test = $db -> Execute("SELECT id FROM tribe_rank WHERE tribe_id=".$mytribe -> fields['id']);
1047
                    if ($test -> fields['id'])
1048
                    {
1049
                        $smarty -> assign ("Menu", "<li><a href=\"tribes.php?view=my&amp;step=owner&amp;step2=rank&amp;step3=get\">".GIVE_RANK."</a></li>");
1050
                    }
1051
                        else
1052
                    {
1053
                        $smarty -> assign("Menu", '');
1054
                    }
1055
                    $test -> Close();
1056
                }
1057
                if (isset ($_GET['step3']) && $_GET['step3'] == 'set')
1058
                {
1059
                    $ranks = $db -> Execute("select * from tribe_rank where tribe_id=".$mytribe -> fields['id']);
1060
                    if (!$ranks -> fields['id'])
1061
                    {
1062
                        $smarty -> assign(array("Empty" => 1,
1063
                            "Noranks2" => NO_RANKS2,
1064
                            "Amake" => A_MAKE));
1065
                    }
1066
                        else
1067
                    {
1068
						$RankArr = array ();
1069
						$TagPrefixArr = array ();
1070
						for ($i = 1; $i <= 10; $i++) {
1071
							$RankArr[$i] = $ranks->fields['rank'.$i];
1072
							$TagPrefixArr[$i] = $ranks->fields['tag_prefix_'.$i];
1073
						}
1074
1075
						$TagSufix = $ranks->fields['tag_sufix'];
1076
1077
                        $smarty -> assign(array("Empty" => 0,
1078
                            "Editranks" => EDIT_RANKS,
1079
                            "Asave" => A_SAVE,
1080
                            "Rank" => RANK,
1081
							'RankArr' => $RankArr,
1082
							'TagPrefixArr' => $TagPrefixArr,
1083
							'TagSufix' => $TagSufix));
1084
                    }
1085
1086
1087
					$TagLenSumMax = 9;
1088
1089
                    if (isset ($_GET['step4']) && $_GET['step4'] == 'add')
1090
                    {
1091
1092
                        $arrRank = array();
1093
						$arrTagPrefix = array ();
1094
                        for ($i=1; $i<=10; $i++)
1095
                        {
1096
                            $number = "rank".$i;
1097
							$tag = "tag_prefix_".$i;
1098
                            $j = $i - 1;
1099
							if (strlen ($_POST[$tag]) + strlen ($_POST['tag_sufix']) > $TagLenSumMax) {
1100
								error (TOO_LONG_TAG.' <a href="tribes.php?view=my&amp;step=owner&amp;step2=rank&amp;step3=set">'.BACK.'</a>');
1101
							}
1102
1103
                            $_POST[$number] = strip_tags($_POST[$number]);
1104
							$_POST[$tag] = strip_tags($_POST[$tag]);
1105
1106
                            $arrRank[$j] = $db -> qstr($_POST[$number], get_magic_quotes_gpc());
1107
							$arrTagPrefix[$j] = $db->qstr ($_POST[$tag], get_magic_quotes_gpc ());
1108
                        }
1109
1110
						$TagSufix = strip_tags($_POST['tag_sufix']);
1111
						$TagSufix = $db->qstr ($TagSufix, get_magic_quotes_gpc ());
1112
1113
					$query = "INSERT INTO tribe_rank (tribe_id, rank1, rank2, rank3, rank4, rank5, rank6, rank7, rank8, rank9, rank10, tag_sufix, tag_prefix_1, tag_prefix_2, tag_prefix_3, tag_prefix_4, tag_prefix_5, tag_prefix_6, tag_prefix_7, tag_prefix_8, tag_prefix_9, tag_prefix_10) VALUES(".$mytribe -> fields['id'].", ".$arrRank[0].", ".$arrRank[1].", ".$arrRank[2].", ".$arrRank[3].", ".$arrRank[4].", ".$arrRank[5].", ".$arrRank[6].", ".$arrRank[7].", ".$arrRank[8].", ".$arrRank[9].", ".$TagSufix.", ".$arrTagPrefix[0].", ".$arrTagPrefix[1].", ".$arrTagPrefix[2].", ".$arrTagPrefix[3].", ".$arrTagPrefix[4].", ".$arrTagPrefix[5].", ".$arrTagPrefix[6].", ".$arrTagPrefix[7].", ".$arrTagPrefix[8].", ".$arrTagPrefix[9].")";
1114
1115
					$db->Execute ($query);
1116
1117
			error (RANK_CREATED.'. <a href="tribes.php?view=my&amp;step=owner&amp;step2=rank&amp;step3=set">'.BACK_TO.'</a>');
1118
                    }
1119
                    if (isset ($_GET['step4']) && $_GET['step4'] == 'edit')
1120
                    {
1121
                        $arrRank = array();
1122
						$arrTagPrefix = array ();
1123
                        for ($i=1; $i<=10; $i++)
1124
                        {
1125
                            $number = "rank".$i;
1126
							$tag = "tag_prefix_".$i;
1127
                            $j = $i - 1;
1128
							if (strlen ($_POST[$tag]) + strlen ($_POST['tag_sufix']) > $TagLenSumMax) {
1129
								error (TOO_LONG_TAG.' <a href="tribes.php?view=my&amp;step=owner&amp;step2=rank&amp;step3=set">'.BACK.'</a>');
1130
							}
1131
1132
                            $_POST[$number] = strip_tags($_POST[$number]);
1133
							$_POST[$tag] = strip_tags($_POST[$tag]);
1134
1135
                            $arrRank[$j] = $db -> qstr($_POST[$number], get_magic_quotes_gpc());
1136
							$arrTagPrefix[$j] = $db->qstr ($_POST[$tag], get_magic_quotes_gpc ());
1137
                        }
1138
1139
						$TagSufix = strip_tags($_POST['tag_sufix']);
1140
						$TagSufix = $db->qstr ($TagSufix, get_magic_quotes_gpc ());
1141
1142
                        $db -> Execute("UPDATE tribe_rank SET rank1=".$arrRank[0].", rank2=".$arrRank[1].", rank3=".$arrRank[2].", rank4=".$arrRank[3].", rank5=".$arrRank[4].", rank6=".$arrRank[5].", rank7=".$arrRank[6].", rank8=".$arrRank[7].", rank9=".$arrRank[8].", rank10=".$arrRank[9].", tag_sufix=".$TagSufix.", tag_prefix_1=".$arrTagPrefix[0].", tag_prefix_2=".$arrTagPrefix[1].", tag_prefix_3=".$arrTagPrefix[2].", tag_prefix_4=".$arrTagPrefix[3].", tag_prefix_5=".$arrTagPrefix[4].", tag_prefix_6=".$arrTagPrefix[5].", tag_prefix_7=".$arrTagPrefix[6].", tag_prefix_8=".$arrTagPrefix[7].", tag_prefix_9=".$arrTagPrefix[8].", tag_prefix_10=".$arrTagPrefix[9]." WHERE tribe_id=".$mytribe -> fields['id']);
1143
1144
			error (RANK_CHANGED.'. <a href="tribes.php?view=my&amp;step=owner&amp;step2=rank&amp;step3=set">'.BACK_TO.'</a>');
1145
                    }
1146
                }
1147
                if (isset ($_GET['step3']) && $_GET['step3'] == 'get')
1148
                {
1149
                    $test = $db -> Execute("SELECT id FROM tribe_rank WHERE tribe_id=".$mytribe -> fields['id']);
1150
                    if (!$test -> fields['id'])
1151
                    {
1152
                        error (NO_RANKS);
1153
                    }
1154
                    $test -> Close();
1155
                    $rank = $db -> Execute("select rank1, rank2, rank3, rank4, rank5, rank6, rank7, rank8, rank9, rank10 from tribe_rank where tribe_id=".$mytribe -> fields['id']);
1156
                    $name = array('rank1','rank2','rank3','rank4','rank5','rank6','rank7','rank8','rank9','rank10');
1157
                    $arrname = array();
1158
                    $j = 0;
1159
                    for ($i=0;$i<10;$i++)
1160
                    {
1161
                        $number = $name[$i];
1162
                        if ($rank -> fields[$number])
1163
                        {
1164
                            $arrname[$j] = $rank -> fields[$number];
1165
                            $j = $j + 1;
1166
                        }
1167
                    }
1168
                    $rank -> Close();
1169
                    $smarty -> assign (array("Rank" => $arrname,
1170
                        "Aset" => A_SET,
1171
                        "Setrank" => SET_RANK,
1172
                        "Rankplayer" => RANK_PLAYER));
1173
                    if (isset ($_GET['step4']) && $_GET['step4'] == 'add')
1174
                    {
1175
                        $_POST['rank'] = strip_tags($_POST['rank']);
1176
                        if (!ereg("^[1-9][0-9]*$", $_POST['rid']))
1177
                        {
1178
                            error (ERROR);
1179
                        }
1180
                        $test = $db -> Execute("SELECT tribe FROM players WHERE id=".$_POST['rid']);
1181
                        if ($test -> fields['tribe'] != $mytribe -> fields['id'])
1182
                        {
1183
                            error (NOT_IN_CLAN);
1184
                        }
1185
                        $test -> Close();
1186
                        $strRank = $db -> qstr($_POST['rank'], get_magic_quotes_gpc());
1187
                        $db -> Execute("UPDATE players SET tribe_rank=".$strRank." WHERE id=".$_POST['rid']);
1188
                        $smarty -> assign ("Message", YOU_GIVE.$_POST['rid'].T_RANK.$_POST['rank']."<br />");
1189
                    }
1190
                }
1191
            }
1192
1193
            /**
1194
            * Add members permission in clan - only clan leader
1195
            */
1196
            if (isset ($_GET['step2']) && $_GET['step2'] == 'permissions')
1197
            {
1198
                if ($player -> id != $mytribe -> fields['owner'])
1199
                {
1200
                    error (ONLY_LEADER);
1201
                }
1202
                if (!isset ($_GET['step3']))
1203
                {
1204
                    $objMembers = $db -> Execute("SELECT user, id FROM players WHERE tribe=".$mytribe -> fields['id']." AND id!=".$mytribe -> fields['owner']);
1205
                    $arrMembers = array();
1206
                    $arrMemid = array();
1207
                    $i = 0;
1208
                    while (!$objMembers -> EOF)
1209
                    {
1210
                        $arrMembers[$i] = $objMembers -> fields['user'];
1211
                        $arrMemid[$i] = $objMembers -> fields['id'];
1212
                        $i = $i + 1;
1213
                        $objMembers -> MoveNext();
1214
                    }
1215
                    $objMembers -> Close();
1216
                    if (!isset($_GET['next']))
1217
                    {
1218
                        $_GET['next'] = '';
1219
                    }
1220
                    $smarty -> assign(array("Perminfo" => PERM_INFO,
1221
                                            "Tperm1" => T_PERM1,
1222
                                            "Tperm2" => T_PERM2,
1223
                                            "Tperm3" => T_PERM3,
1224
                                            "Tperm4" => T_PERM4,
1225
                                            "Tperm5" => T_PERM5,
1226
                                            "Tperm6" => T_PERM6,
1227
                                            "Tperm7" => T_PERM7,
1228
                                            "Tperm8" => T_PERM8,
1229
                                            "Tperm9" => T_PERM9,
1230
                                            "Tperm10" => T_PERM10,
1231
                                            "Tperm11" => T_PERM11,
1232
                                            "Tperm12" => T_PERM12,
1233
                                            "Tperm13" => T_PERM13,
1234
                                            "Tperm14" => T_PERM14,
1235
                                            "Tperm15" => T_PERM15,
1236
                                            "Asave" => A_SAVE,
1237
                                            "Anext" => A_NEXT,
1238
                                            "Next" => $_GET['next'],
1239
                                            "Members" => $arrMembers,
1240
                                            "Memid" => $arrMemid,
1241
                                            "Yes" => YES,
1242
                                            "No" => NO));
1243
                    if (isset($_GET['next']) && $_GET['next'] == 'add')
1244
                    {
1245
                        if (!ereg("^[1-9][0-9]*$", $_POST['memid']))
1246
                        {
1247
                            error(ERROR);
1248
                        }
1249
                        $objTest = $db -> Execute("SELECT * FROM tribe_perm WHERE player=".$_POST['memid']);
1250
                        $arrTest = array($objTest -> fields['messages'],
1251
                                         $objTest -> fields['wait'],
1252
                                         $objTest -> fields['kick'],
1253
                                         $objTest -> fields['army'],
1254
                                         $objTest -> fields['attack'],
1255
                                         $objTest -> fields['loan'],
1256
                                         $objTest -> fields['armory'],
1257
                                         $objTest -> fields['warehouse'],
1258
                                         $objTest -> fields['bank'],
1259
                                         $objTest -> fields['herbs'],
1260
                                         $objTest -> fields['forum'],
1261
                                         $objTest -> fields['ranks'],
1262
                                         $objTest -> fields['mail'],
1263
                                         $objTest -> fields['info'],
1264
                                         $objTest -> fields['astralvault']);
1265
                        $objTest -> Close();
1266
                        $objName = $db -> Execute("SELECT user FROM players WHERE id=".$_POST['memid']);
1267
                        $arrSelected = array();
1268
                        $i = 0;
1269
                        foreach ($arrTest as $intTest)
1270
                        {
1271
                            if ($intTest)
1272
                            {
1273
                                $arrSelected[$i] = 'selected';
1274
                            }
1275
                                else
1276
                            {
1277
                                $arrSelected[$i] = '';
1278
                            }
1279
                            $i ++;
1280
                        }
1281
                        $smarty -> assign(array("Memid2" => $_POST['memid'],
1282
                            "Tselected" => $arrSelected,
1283
                            "Tname" => $objName -> fields['user'],
1284
                            "Tuser" => T_USER));
1285
                        $objName -> Close();
1286
                    }
1287
                }
1288
                if (isset ($_GET['step3']))
1289
                {
1290
                    $test = array($_POST['messages'],
1291
                                  $_POST['wait'],
1292
                                  $_POST['kick'],
1293
                                  $_POST['army'],
1294
                                  $_POST['attack'],
1295
                                  $_POST['loan'],
1296
                                  $_POST['armory'],
1297
                                  $_POST['warehouse'],
1298
                                  $_POST['bank'],
1299
                                  $_POST['herbs'],
1300
                                  $_POST['forum'],
1301
                                  $_POST['ranks'],
1302
                                  $_POST['mail'],
1303
                                  $_POST['info'],
1304
                                  $_POST['astralvault']);
1305
                    for ($i=0; $i<15; $i++)
1306
                    {
1307
                        if (!ereg("^[0-1]*$", $test[$i]))
1308
                        {
1309
                            error (ERROR);
1310
                        }
1311
                        if (!ereg("^[1-9][0-9]*$", $_POST['memid']))
1312
                        {
1313
                            error(ERROR);
1314
                        }
1315
                        $ttribe = $db -> Execute("SELECT tribe FROM players WHERE id=".$_POST['memid']);
1316
                        if ($ttribe -> fields['tribe'] != $mytribe -> fields['id'])
1317
                        {
1318
                            error (NOT_IN_CLAN." <a href=\"tribes.php?view=my&amp;step=owner\">".BACK_TO."</a>");
1319
                        }
1320
                    }
1321
                }
1322
                if (isset ($_GET['step3']) && $_GET['step3'] == 'add')
1323
                {
1324
                    $objTest = $db -> Execute("SELECT id FROM tribe_perm WHERE tribe=".$mytribe -> fields['id']." AND player=".$_POST['memid']);
1325
                    if (!$objTest -> fields['id'])
1326
                    {
1327
                        $db -> Execute("INSERT INTO tribe_perm (tribe, player, messages, wait, kick, army, attack, loan, armory, warehouse, bank, herbs, forum, ranks, mail, info, astralvault) VALUES(".$mytribe -> fields['id'].", ".$_POST['memid'].", ".$_POST['messages'].", ".$_POST['wait'].", ".$_POST['kick'].", ".$_POST['army'].", ".$_POST['attack'].", ".$_POST['loan'].", ".$_POST['armory'].", ".$_POST['warehouse'].", ".$_POST['bank'].", ".$_POST['herbs'].", ".$_POST['forum'].", ".$_POST['ranks'].", ".$_POST['mail'].", ".$_POST['info'].", ".$_POST['astralvault'].")");
1328
                    }
1329
                        else
1330
                    {
1331
                        $db -> Execute("UPDATE tribe_perm SET messages=".$_POST['messages'].", wait=".$_POST['wait'].", kick=".$_POST['kick'].", army=".$_POST['army'].", attack=".$_POST['attack'].", loan=".$_POST['loan'].", armory=".$_POST['armory'].", warehouse=".$_POST['warehouse'].", bank=".$_POST['bank'].", herbs=".$_POST['herbs'].", forum=".$_POST['forum'].", ranks=".$_POST['ranks'].", mail=".$_POST['mail'].", info=".$_POST['info'].", astralvault=".$_POST['astralvault']." WHERE id=".$objTest -> fields['id']);
1332
                    }
1333
                    $objTest -> Close();
1334
                    $smarty -> assign ("Message", YOU_SET." <a href=\"tribes.php?view=my&amp;step=owner\">".BACK_TO."</a>");
1335
                }
1336
            }
1337
1338
            /**
1339
            * Send mail to all members
1340
            */
1341
            if (isset ($_GET['step2']) && $_GET['step2'] == 'mail')
1342
            {
1343
                if ($player -> id != $mytribe -> fields['owner'] && !$perm -> fields['mail'])
1344
                {
1345
                    error (NO_PERM2);
1346
                }
1347
                if (isset($_GET['step3']) && $_GET['step3'] == 'send')
1348
                {
1349
                    $strBody = strip_tags($_POST['body']);
1350
                    $strTitle = strip_tags($_POST['mtitle']);
1351
                    if (empty($strBody) || empty($strTitle))
1352
                    {
1353
                        error(EMPTY_FIELDS);
1354
                    }
1355
                    require_once('includes/bbcode.php');
1356
                    $strBody = bbcodetohtml($strBody);
1357
                    $strTitle = bbcodetohtml($strTitle);
1358
                    $strTitle = T_CLAN.$strTitle;
1359
                    $objOwner = $db -> Execute("SELECT `id` FROM `players` WHERE `tribe`=".$mytribe -> fields['id']." AND `id`!=".$player -> id);
1360
                    $strDate = $db -> DBDate($newdate);
1361
                    while (!$objOwner -> EOF)
1362
                    {
1363
                        $db -> Execute("INSERT INTO `mail` (`sender`, `senderid`, `owner`, `subject`, `body`, `date`) VALUES('".$player -> user."','".$player -> id."',".$objOwner -> fields['id'].",'".$strTitle."','".$strBody."', ".$strDate.")");
1364
                        $objOwner -> MoveNext();
1365
                    }
1366
                    $objOwner -> Close();
1367
                    $smarty -> assign("Message", YOU_SEND);
1368
                }
1369
                    else
1370
                {
1371
                    $smarty -> assign(array("Tbody" => T_BODY,
1372
                                            "Asend" => A_SEND,
1373
                                            "Ttitle" => T_TITLE));
1374
                }
1375
            }
1376
1377
            /**
1378
            * Buy army and barricades to clan
1379
            */
1380
            if (isset ($_GET['step2']) && $_GET['step2'] == 'wojsko')
1381
            {
1382
                if ($player -> id != $mytribe -> fields['owner'] && !$perm -> fields['army'])
1383
                {
1384
                    error (NO_PERM);
1385
                }
1386
                $smarty -> assign(array("Armyinfo" => ARMY_INFO,
1387
                                        "Howmanys" => HOW_MANY_S,
1388
                                        "Howmanyf" => HOW_MANY_F,
1389
                                        "Abuy" => A_BUY));
1390
                if (isset ($_GET['action']) && $_GET['action'] == 'kup')
1391
                {
1392
                    if (!ereg("^[0-9]*$",$_POST['zolnierze']))
1393
                    {
1394
                        error (ERROR);
1395
                    }
1396
                    if (!ereg("^[0-9]*$",$_POST['forty']))
1397
                    {
1398
                        error (ERROR);
1399
                    }
1400
                    if ($_POST["zolnierze"] == 0 && $_POST["forty"] == 0)
1401
                    {
1402
                        error (EMPTY_FIELDS);
1403
                    }
1404
                    $cenaz = ($_POST["zolnierze"] * 1000);
1405
                    $cenaf = ($_POST["forty"] * 1000);
1406
                    $suma = $cenaz + $cenaf;
1407
                    if ($suma > $mytribe -> fields['credits'])
1408
                    {
1409
                        error (NO_MONEY);
1410
                    }
1411
                    $message = '';
1412
                    $strLog = '';
1413
                    if ($_POST["zolnierze"] > 0)
1414
                    {
1415
                        $db -> Execute("UPDATE `tribes` SET `zolnierze`=`zolnierze`+".$_POST['zolnierze']." WHERE `id`=".$mytribe -> fields['id']);
1416
                        $message =  $message.YOU_BUY.$_POST['zolnierze'].SOLDIERS.$cenaz.FOR_A;
1417
                        $strLog =  $strLog.SOMEONE_BUY.$_POST['zolnierze'].SOLDIERS.$cenaz.FOR_A;
1418
                    }
1419
                    if ($_POST["forty"] > 0)
1420
                    {
1421
                        $db -> Execute("UPDATE `tribes` SET `forty`=`forty`+".$_POST['forty']." WHERE `id`=".$mytribe -> fields['id']);
1422
                        $message = $message.YOU_BUY.$_POST['forty'].BARRICADES.$cenaf.FOR_A;
1423
                        $strLog = $strLog.SOMEONE_BUY.$_POST['forty'].BARRICADES.$cenaf.FOR_A;
1424
                    }
1425
                    $db -> Execute("UPDATE `tribes` SET `credits`=`credits`-".$suma." WHERE `id`=".$mytribe -> fields['id']);
1426
                    $message = $message.ALL_COST.$suma.FOR_A;
1427
                    $strLog = $strLog.ALL_COST2.$suma.FOR_A;
1428
                    $smarty -> assign("Message", $message);
1429
                    /**
1430
                     * Send informations about buy army
1431
                     */
1432
                    $strDate = $db -> DBDate($newdate);
1433
                    $db -> Execute("INSERT INTO `log` (`owner`,`log`, `czas`) VALUES(".$mytribe -> fields['owner'].", '".$strLog."', ".$strDate.")");
1434
                    $objPerm = $db -> Execute("SELECT `player` FROM `tribe_perm` WHERE `tribe`=".$mytribe -> fields['id']." AND `army`=1");
1435
                    while (!$objPerm -> EOF)
1436
                    {
1437
                        $db -> Execute("INSERT INTO `log` (`owner`,`log`, `czas`) VALUES(".$objPerm -> fields['player'].", '".$strLog."', ".$strDate.")");
1438
                        $objPerm -> MoveNext();
1439
                    }
1440
                    $objPerm -> Close();
1441
                }
1442
            }
1443
1444
            /**
1445
            * Waiting for join to clan
1446
            */
1447
            if (isset ($_GET['step2']) && $_GET['step2'] == 'nowy')
1448
            {
1449
                if ($player -> id != $mytribe -> fields['owner'] && !$perm -> fields['wait'])
1450
                {
1451
                    error (NO_PERM2);
1452
                }
1453
                $smarty -> assign("New", 0);
1454
                if (!isset($_GET['odrzuc']) && !isset($_GET['dodaj']))
1455
                {
1456
                    $smarty -> assign ("New", 1);
1457
                    $czeka = $db -> Execute("SELECT * FROM tribe_oczek WHERE klan=".$mytribe -> fields['id']);
1458
                    $arrlink = array();
1459
                    $i = 0;
1460
                    while (!$czeka -> EOF)
1461
                    {
1462
                        $arrlink[$i] = "<tr><td><a href=\"view.php?view=".$czeka -> fields['gracz']."\">".$czeka -> fields['gracz']."</a></td><td><a href=\"tribes.php?view=my&amp;step=owner&amp;step2=nowy&dodaj=".$czeka -> fields['id']."\">".YES."</a></td><td><a href=\"tribes.php?view=my&amp;step=owner&amp;step2=nowy&odrzuc=".$czeka -> fields['id']."\">".YES."</a></td></tr>";
1463
                        $czeka -> MoveNext();
1464
                        $i = $i + 1;
1465
                    }
1466
                    $czeka -> Close();
1467
                    $smarty -> assign (array("Link" => $arrlink,
1468
                        "Waitlist" => WAIT_LIST,
1469
                        "Tid" => T_ID,
1470
                        "Taccept" => T_ACCEPT,
1471
                        "Tdrop" => T_DROP));
1472
                }
1473
                if (isset($_GET['odrzuc']) && strictInt($_GET['odrzuc']))
1474
                {
1475
                    $del = $db -> Execute('SELECT * FROM `tribe_oczek` WHERE `id`='.$_GET['odrzuc'].' AND `klan`='.$mytribe -> fields['id']);
1476
                    if (!$del -> fields['id'])
1477
                    {
1478
                        error(ERROR);
1479
                    }
1480
                    $smarty -> assign ("Message", YOU_DROP.$del -> fields['gracz'].".");
1481
                    $strDate = $db -> DBDate($newdate);
1482
                    $db -> Execute("INSERT INTO `log` (`owner`, `log`, `czas`) VALUES(".$del -> fields['gracz'].",'".L_TRIBE.'<b><a href="tribes.php?view=view&amp;id='.$mytribe -> fields['id'].'">'.$mytribe -> fields['name'].'</a></b>'.L_DROP."', ".$strDate.")");
1483
                    $db -> Execute("DELETE FROM tribe_oczek WHERE id=".$del -> fields['id']);
1484
                    $del -> Close();
1485
                    $objPerm = $db -> Execute("SELECT player FROM tribe_perm WHERE tribe=".$mytribe -> fields['id']." AND wait=1");
1486
                    while (!$objPerm -> EOF)
1487
                    {
1488
                        $db -> Execute("INSERT INTO `log` (`owner`,`log`, `czas`) VALUES(".$objPerm -> fields['player'].", '".YOU_DROP.'<b>'.$del -> fields['gracz']."</b>', ".$strDate.")");
1489
                        $objPerm -> MoveNext();
1490
                    }
1491
                    $objPerm -> Close();
1492
                }
1493
                if (isset($_GET['dodaj']) && strictInt($_GET['dodaj']))
1494
                {
1495
                    $dod = $db -> Execute('SELECT * FROM `tribe_oczek` WHERE `id`='.$_GET['dodaj'].' AND `klan`='.$mytribe -> fields['id']);
1496
                    $smarty -> assign ("Message", YOU_ACCEPT.$dod -> fields['gracz'].".");
1497
                    $strDate = $db -> DBDate($newdate);
1498
                    $db -> Execute("INSERT INTO log (owner, log, czas) VALUES(".$dod -> fields['gracz'].",'".L_TRIBE.'<b><a href="tribes.php?view=my">'.$mytribe -> fields['name'].'</a></b>'.L_ACCEPT."', ".$strDate.")");
1499
                    $db -> Execute("UPDATE players SET tribe=".$dod -> fields['klan']." WHERE id=".$dod -> fields['gracz']);
1500
                    $db -> Execute("DELETE FROM tribe_oczek WHERE id=".$dod -> fields['id']);
1501
                    $dod -> Close();
1502
                    $objPerm = $db -> Execute("SELECT player FROM tribe_perm WHERE tribe=".$mytribe -> fields['id']." AND wait=1");
1503
                    while (!$objPerm -> EOF)
1504
                    {
1505
                        $db -> Execute("INSERT INTO log (owner,log, czas) VALUES(".$objPerm -> fields['player'].", '".YOU_ACCEPT.'<b>'.$dod -> fields['gracz']."</b>', ".$strDate.")");
1506
                        $objPerm -> MoveNext();
1507
                    }
1508
                    $objPerm -> Close();
1509
                }
1510
            }
1511
1512
            /**
1513
            * Clan's fight
1514
            */
1515
            if (isset($_GET['step2']) && $_GET['step2'] == 'walka')
1516
            {
1517
                require_once('includes/tribefight.php');
1518
            }
1519
1520
            /**
1521
            * Messages about clan, logo and www site
1522
            */
1523
            if (isset ($_GET['step2']) && $_GET['step2'] == 'messages')
1524
            {
1525
                if ($player -> id != $mytribe -> fields['owner'] && !$perm -> fields['messages'])
1526
                {
1527
                    error (NO_PERM2);
1528
                }
1529
                require_once('includes/bbcode.php');
1530
                $mytribe -> fields['public_msg'] = htmltobbcode($mytribe -> fields['public_msg']);
1531
                $mytribe -> fields['private_msg'] = htmltobbcode($mytribe -> fields['private_msg']);
1532
                $smarty -> assign(array("Pubmessage" => $mytribe -> fields['public_msg'],
1533
                                        "Privmessage" => $mytribe -> fields['private_msg'],
1534
                                        "WWW" => $mytribe -> fields['www'],
1535
                                        "Clandesc" => CLAN_DESC,
1536
                                        "Msgtomem" => MSG_TO_MEM,
1537
                                        "Aset" => A_SET,
1538
                                        "Asend" => A_SEND,
1539
                                        "Adelete" => A_DELETE,
1540
                                        "Achange" => A_CHANGE,
1541
                                        "Clansite" => CLAN_SITE,
1542
                                        "Logoinfo" => LOGO_INFO,
1543
                                        "Logoname" => LOGO_NAME));
1544
                $avatar = $db -> Execute("SELECT logo FROM tribes WHERE id=".$mytribe -> fields['id']);
1545
		$logocheck = (empty($avatar)) ? '' : $avatar -> fields['logo'];
1546
                $plik = 'images/tribes/'.$avatar -> fields['logo'];
1547
                if (is_file($plik))
1548
                {
1549
                    $smarty -> assign ("Logo1", "<center><img src=\"".$plik."\" heigth=\"100\" width=\"100\" /></center>");
1550
                }
1551
                if (is_file($plik))
1552
                {
1553
                        $smarty -> assign(array("Logo" => $avatar -> fields['logo'],
1554
                            "Change" => "Y"));
1555
                }
1556
                    else
1557
                {
1558
                    $smarty -> assign("Change", '');
1559
                }
1560
                if (isset ($_GET['action']) && $_GET['action'] == 'www')
1561
                {
1562
                    $_POST['www'] = str_replace("'","",strip_tags($_POST['www']));
1563
                    $strWWW = $db -> qstr($_POST['www'], get_magic_quotes_gpc());
1564
                    $db -> Execute("UPDATE tribes SET www=".$strWWW." WHERE id=".$mytribe -> fields['id']);
1565
                    $smarty -> assign ("Message", WWW_SET." <a href=\"http://".$_POST['www']."\" target=\"_blank\">".$_POST['www']."</a>. <a href=\"tribes.php?view=my&amp;step=owner&amp;step2=messages\">".A_REFRESH."</a><br />");
1566
                }
1567
                if (isset ($_GET['step4']) && $_GET['step4'] == 'usun')
1568
                {
1569
       		    global $newdate;
1570
	            if ($_POST['av'] != $logocheck || $logocheck == '')
1571
		    {
1572
			$db -> Execute("Insert into `mail` (`sender`,`senderid`,`owner`,`subject`,`body`,`date`) VALUES ('".($player -> user)."', ".($player -> id).", 1, 'wlasnie probowalem sie wlamac wpisujac ".($_SERVER['REQUEST_URI'])."', ".($db -> DBDate($newdate)).")");
1573
			error(ERROR);
1574
		    }
1575
		    $plik = 'images/tribes/'.$_POST['av'];
1576
                    if (is_file($plik))
1577
                    {
1578
                        unlink($plik);
1579
                        $db -> Execute("UPDATE tribes SET logo='' where id=".$mytribe -> fields['id']) or error ("nie mogę skasować");
1580
                        $smarty -> assign ("Message", LOGO_DEL." <a href=\"tribes.php?view=my&amp;step=owner&amp;step2=messages\">".A_REFRESH."</a><br />");
1581
                    }
1582
                        else
1583
                    {
1584
                        error (NO_FILE);
1585
                    }
1586
                }
1587
                if (isset ($_GET['step4']) && $_GET['step4'] == 'dodaj')
1588
                {
1589
                    $plik = $_FILES['plik']['tmp_name'];
1590
                    $nazwa = $_FILES['plik']['name'];
1591
                    $typ = $_FILES['plik']['type'];
1592
                    if ($typ != 'image/pjpeg' && $typ != 'image/jpeg' && $typ != 'image/gif'  && $typ != 'image/png')
1593
                    {
1594
                        error (BAD_TYPE);
1595
                    }
1596
                    if ($typ == 'image/pjpeg' || $typ == 'image/jpeg')
1597
                    {
1598
                        $liczba = rand(1,1000000);
1599
                        $newname = md5($liczba).'.jpg';
1600
                        $miejsce = 'images/tribes/'.$newname;
1601
                    }
1602
                    if ($typ == 'image/gif')
1603
                    {
1604
                        $liczba = rand(1,1000000);
1605
                        $newname = md5($liczba).'.gif';
1606
                        $miejsce = 'images/tribes/'.$newname;
1607
                    }
1608
                    if ($typ == 'image/png')
1609
                    {
1610
                        $liczba = rand(1,1000000);
1611
                        $newname = md5($liczba).'.png';
1612
                        $miejsce = 'images/tribes/'.$newname;
1613
                    }
1614
                    if (is_uploaded_file($plik))
1615
                    {
1616
                        if (!move_uploaded_file($plik,$miejsce))
1617
                        {
1618
                            error (NO_COPY);
1619
                        }
1620
                    }
1621
                        else
1622
                    {
1623
                        error (ERROR);
1624
                    }
1625
                    $db -> Execute("UPDATE tribes SET logo='".$newname."' where id=".$mytribe -> fields['id']);
1626
                    $smarty -> assign ("Message",  LOGO_LOAD." <a href=\"tribes.php?view=my&amp;step=owner&amp;step2=messages\">".A_REFRESH."</a><br />");
1627
                }
1628
                /**
1629
                 * Set new description and message
1630
                 */
1631
                if (isset ($_GET['action']) && $_GET['action'] == 'edit')
1632
                {
1633
                    $strPublicmsg =  bbcodetohtml($_POST['public_msg']);
1634
                    $strPrivatemsg =  bbcodetohtml($_POST['private_msg']);
1635
                    $strPrivatemsg = $db -> qstr($strPrivatemsg, get_magic_quotes_gpc());
1636
                    $strPublicmsg = $db -> qstr($strPublicmsg, get_magic_quotes_gpc());
1637
                    $db -> Execute("UPDATE `tribes` SET `private_msg`=".$strPrivatemsg.",  `public_msg`=".$strPublicmsg." WHERE `id`=".$mytribe -> fields['id']);
1638
                    $smarty -> assign(array("Message" => MSG_CHANGED,
1639
                                            "Pubmessage" => $_POST['public_msg'],
1640
                                            "Privmessage" => $_POST['private_msg']));
1641
                }
1642
            }
1643
1644
            /**
1645
            * Drop members from clan
1646
            */
1647
            if (isset ($_GET['step2']) && $_GET['step2'] == 'kick')
1648
            {
1649
                if ($player -> id != $mytribe -> fields['owner'] && !$perm -> fields['kick'])
1650
                {
1651
                    error (NO_PERM2);
1652
                }
1653
                $smarty -> assign(array("Kickid" => KICK_ID,
1654
                                        "Fromclan" => FROM_CLAN,
1655
                                        "Akick" => A_KICK2));
1656
                if (isset ($_GET['action']) && $_GET['action'] == 'kick')
1657
                {
1658
                    if (!isset($_POST['id']))
1659
                    {
1660
                        error(NO_ID);
1661
                    }
1662
                    if (!ereg("^[1-9][0-9]*$", $_POST['id']))
1663
                    {
1664
                        error (ERROR);
1665
                    }
1666
                    $objTribe = $db -> Execute("SELECT `tribe` FROM `players` WHERE `id`=".$_POST['id']);
1667
                    if ($objTribe -> fields['tribe'] != $mytribe -> fields['id'])
1668
                    {
1669
                        error(NOT_IN_CLAN);
1670
                    }
1671
                    $objTribe -> Close();
1672
                    if ($_POST['id'] != $mytribe -> fields['owner'])
1673
                    {
1674
                        $strDate = $db -> DBDate($newdate);
1675
                        $db -> Execute("UPDATE `players` SET `tribe`=0, `tribe_rank`='' WHERE `id`=".$_POST['id']." AND `tribe`=".$mytribe -> fields['id']);
1676
                        $db -> Execute("DELETE FROM `tribe_perm` WHERE `tribe`=".$mytribe -> fields['id']." AND `player`=".$_POST['id']);
1677
                        /**
1678
                         * Send info about kick
1679
                         */
1680
                         // Get name of the person which is being kicked.
1681
                        $objGetName = $db -> Execute("SELECT `user` FROM `players` WHERE `id`=".$_POST['id'].';');
1682
                        $strReceiversName = $objGetName -> fields['user'];
1683
                        $objGetName -> Close();
1684
1685
                        $db -> Execute("INSERT INTO `log` (`owner`, `log`, `czas`) VALUES(".$_POST['id'].",'".YOU_DROP.'<b><a href="tribes.php?view=view&amp;id='.$mytribe -> fields['id'].'">'.$mytribe -> fields['name']."</a></b>.', ".$strDate.")");
1686
                        $db -> Execute("INSERT INTO `log` (`owner`, `log`, `czas`) VALUES(".$mytribe -> fields['owner'].", '".CLAN_KICK1.'<b><a href="view.php?view='.$_POST['id'].'">'.$strReceiversName.'</a></b>'. CLAN_KICK2.'<b>'.$_POST['id'].'</b>'.HAS_BEEN.$mytribe -> fields['name'].".', ".$strDate.")");
1687
                        $objPerm = $db -> Execute("SELECT `player` FROM `tribe_perm` WHERE `tribe`=".$mytribe -> fields['id']." AND `kick`=1");
1688
                        while (!$objPerm -> EOF)
1689
                        {
1690
                            $db -> Execute("INSERT INTO `log` (`owner`, `log`, `czas`) VALUES(".$objPerm -> fields['player'].", '".CLAN_KICK1.'<b><a href="view.php?view='.$_POST['did'].'">'.$strReceiversName.'</a></b>'. CLAN_KICK2.'<b>'.$_POST['id'].'</b>'.HAS_BEEN.$mytribe -> fields['name'].".', ".$strDate.")");
1691
                            $objPerm -> MoveNext();
1692
                        }
1693
                        $objPerm -> Close();
1694
                        $smarty -> assign ("Message", D_ID.$_POST['id'].NOT_IS);
1695
                    }
1696
                        else
1697
                    {
1698
                        $smarty -> assign ("Message", IS_LEADER);
1699
                    }
1700
                }
1701
            }
1702
1703
            /**
1704
            * Give money from clan to members
1705
            */
1706
            if (isset ($_GET['step2']) && $_GET['step2'] == 'loan')
1707
            {
1708
                if ($player -> id != $mytribe -> fields['owner'] && !$perm -> fields['loan'])
1709
                {
1710
                    error (NO_PERM2);
1711
                }
1712
                $smarty -> assign(array("Aloan2" => A_LOAN2,
1713
                                        "Playerid" => PLAYER_ID,
1714
                                        "Goldcoins" => GOLD_COINS,
1715
                                        "Mithcoins" => MITHRIL_COINS));
1716
                if (isset($_GET['action']) && $_GET['action'] == 'loan')
1717
                {
1718
                    integercheck($_POST['amount']);
1719
                    if (!ereg("^[1-9][0-9]*$", $_POST['amount']))
1720
                    {
1721
                        error(ERROR);
1722
                    }
1723
                    if ($_POST['currency'] != 'credits' && $_POST['currency'] != 'platinum')
1724
                    {
1725
                        error (ERROR);
1726
                    }
1727
                    if ($_POST['currency'] == 'credits')
1728
                    {
1729
                        $poz = GOLD_COINS;
1730
                    }
1731
                    if ($_POST['currency'] == 'platinum')
1732
                    {
1733
                        $poz = MITHRIL_COINS;
1734
                    }
1735
                    $rec = $db -> Execute("SELECT tribe FROM players WHERE id=".$_POST['id']);
1736
                    if ($rec -> fields['tribe'] != $mytribe -> fields['id'])
1737
                    {
1738
                        $smarty -> assign ("Message", NOT_IN_CLAN);
1739
                    }
1740
                        else
1741
                    {
1742
                        if (!$_POST['amount'] || !$_POST['id'])
1743
                        {
1744
                            $smarty -> assign ("Message", EMPTY_FIELDS);
1745
                        }
1746
                            else
1747
                        {
1748
                            if ($_POST['amount'] > $mytribe -> fields[$_POST['currency']] || !ereg("^[1-9][0-9]*$", $_POST['amount']))
1749
                            {
1750
                                $smarty -> assign ("Message", NO_AMOUNT.$poz.".");
1751
                            }
1752
                                else
1753
                            {
1754
                                $db -> Execute("UPDATE `players` SET `".$_POST['currency']."`=`".$_POST['currency']."`+".$_POST['amount']." WHERE `id`=".$_POST['id']);
1755
                                $db -> Execute("UPDATE `tribes` SET `".$_POST['currency']."`=`".$_POST['currency']."`-".$_POST['amount']." WHERE `id`=".$mytribe -> fields['id']);
1756
                                $strDate = $db -> DBDate($newdate);
1757
                                // Get name of the person which is receiving money.
1758
                                $objGetName = $db -> Execute("SELECT `user` FROM `players` WHERE `id`=".$_POST['id'].';');
1759
                                $strReceiversName = $objGetName -> fields['user'];
1760
                                $objGetName -> Close();
1761
                                $db -> Execute("INSERT INTO `log` (`owner`,`log`, `czas`) VALUES(".$_POST['id'].",'".SEND_YOU.$_POST['amount']." ".$poz.".', ".$strDate.")");
1762
                                /**
1763
                                 * Send informations about donation to player
1764
                                 */
1765
                                $db -> Execute("INSERT INTO `log` (`owner`,`log`, `czas`) VALUES(".$mytribe -> fields['owner'].", '".CLAN_GIVE1.'<b><a href="view.php?view='.$_POST['id'].'">'.$strReceiversName.'</a></b>'.CLAN_GIVE2.'<b>'.$_POST['id']."</b> ".$_POST['amount']." ".$poz.".', ".$strDate.")");
1766
                                $objPerm = $db -> Execute("SELECT `player` FROM `tribe_perm` WHERE `tribe`=".$mytribe -> fields['id']." AND `loan`=1");
1767
                                while (!$objPerm -> EOF)
1768
                                {
1769
                                    $db -> Execute("INSERT INTO `log` (`owner`,`log`, `czas`) VALUES(".$objPerm -> fields['player'].", '".CLAN_GIVE1.'<b><a href="view.php?view='.$_POST['id'].'">'.$strReceiversName.'</a></b>'.CLAN_GIVE2.'<b>'.$_POST['id']."</b> ".$_POST['amount']." ".$poz.".', ".$strDate.")");
1770
                                    $objPerm -> MoveNext();
1771
                                }
1772
                                $objPerm -> Close();
1773
                                $smarty -> assign ("Message", YOU_GIVE.$_POST['id']." ".$_POST['amount']." ".$poz.".");
1774
                            }
1775
                        }
1776
                    }
1777
                }
1778
            }
1779
1780
            /**
1781
            * Special options in clan
1782
            */
1783
            if (isset ($_GET['step2']) && $_GET['step2'] == 'te')
1784
            {
1785
                $smarty -> assign(array("Miscinfo" => MISC_INFO,
1786
                    "Afreeheal" => A_FREE_HEAL,
1787
                    "Youbuy" => YOU_BUY,
1788
                    "Aback" => A_BACK));
1789
                if (isset($_GET['step3']) && $_GET['step3'] == 'hospass')
1790
                {
1791
                    if ($mytribe -> fields['platinum'] < 100)
1792
                    {
1793
                        error (NO_MITH."<br /><a href=\"tribes.php?view=my&amp;step=owner\">...".A_BACK."</a>");
1794
                    }
1795
                        else
1796
                    {
1797
                            $db -> Execute("UPDATE tribes SET platinum=platinum-100 WHERE id=".$mytribe -> fields['id']);
1798
                        $db -> Execute("UPDATE tribes SET hospass='Y' WHERE id=".$mytribe -> fields['id']);
1799
                        $smarty -> assign ("Hospass1", 1);
1800
                    }
1801
                }
1802
                if ($mytribe -> fields['hospass'] == "Y")
1803
                {
1804
                    error (CLAN_HAVE."<br /><a href=\"tribes.php?view=my&amp;step=owner\">...".A_BACK."</a>");
1805
                }
1806
            }
1807
        }
1808
            else
1809
        {
1810
            error(NOT_LEADER);
1811
        }
1812
    }
1813
}
1814
1815
/**
1816
* Initialization of variables
1817
*/
1818
if (!isset($_GET['join']))
1819
{
1820
    $_GET['join'] = '';
1821
}
1822
if (!isset($_GET['step']))
1823
{
1824
    $_GET['step'] = '';
1825
}
1826
if (!isset($_GET['step2']))
1827
{
1828
    $_GET['step2'] = '';
1829
}
1830
if (!isset($_GET['step3']))
1831
{
1832
    $_GET['step3'] = '';
1833
}
1834
if (!isset($_GET['daj']))
1835
{
1836
    $_GET['daj'] = '';
1837
}
1838
if (!isset($_GET['action']))
1839
{
1840
    $_GET['action'] = '';
1841
}
1842
if (!isset($_GET['view']))
1843
{
1844
    $_GET['view'] = '';
1845
}
1846
1847
/**
1848
* Assign variables to template and display page
1849
*/
1850
$smarty -> assign(array("View" => $_GET['view'],
1851
    "Join" => $_GET['join'],
1852
    "Step" => $_GET['step'],
1853
    "Step2" => $_GET['step2'],
1854
    "Step3" => $_GET['step3'],
1855
    "Give" => $_GET['daj'],
1856
    "Action" => $_GET['action']));
1857
$smarty -> display('tribes.tpl');
1858
1859
require_once("includes/foot.php");
1860
?>