attack.php

<?php

session_start();
require "global_func.php";
if ($_SESSION['loggedin'] == 0)
{
 header("Location: login.php");
 exit;
}
$userid = $_SESSION['userid'];
require "header.php";
$h = new headers;
$h->startheaders();
include "mysql.php";
global $c;
$is =
 mysql_query(
 "SELECT u.*,us.* FROM users u LEFT JOIN userstats us ON u.userid=us.userid WHERE u.userid=$userid",
 $c) or die(mysql_error());
$ir = mysql_fetch_array($is);
check_level();
$fm = money_formatter($ir['money']);
$cm = money_formatter($ir['crystals'], '');
$lv = date('F j, Y, g:i a', $ir['laston']);
$h->userdata($ir, $lv, $fm, $cm, 0);
$_GET['ID'] == (int) $_GET['ID'];
if (!$_GET['ID'])
{
 print "<font color='red'>WTF you doing, bro?</font></b>";
 $h->endpage();
 exit;
}
else if ($_GET['ID'] == $userid)
{
 print "<font color='red'><b>Only the crazy attack themselves.</font></b>";
 $h->endpage();
 exit;
}
//get player data
$youdata = $ir;
$q =
 mysql_query(
 "SELECT u.*,us.* FROM users u LEFT JOIN userstats us ON u.userid=us.userid WHERE u.userid={$_GET['ID']}",
 $c);
if (mysql_num_rows($q) == 0)
{
 print
 "<b><font color='red'>This player does not exist.</font></b><br />
<a href='index.php'>&gt; Back</a>";
 $h->endpage();
 $_SESSION['attacking'] = 0;
 exit;
}
$odata = mysql_fetch_array($q);
if ($odata['hp'] == 1)
{
 print
 "<b><font color='red'>This player is unconscious.</font></b><br />
<a href='index.php'>&gt; Back</a>";
 $h->endpage();
 $_SESSION['attacking'] = 0;
 exit;
}
else if ($odata['hospital'] and $ir['hospital'] == 0)
{
 print
 "<font color='red'><b>This player is in hospital.</b><font><br />
<a href='index.php'>&gt; Back</a>";
 $h->endpage();
 $_SESSION['attacking'] = 0;
 exit;
}
else if ($ir['hospital'])
{
 print
 "<b><font color='red'>You can not attack while in hospital.</font></b><br />
<a href='hospital.php'>&gt; Back</a>";
 $h->endpage();
 $_SESSION['attacking'] = 0;
 exit;
}
print "<table width=100%><tr><td colspan=2 align=center>";
if ($_GET['wepid'])
{
 if ($_SESSION['attacking'] == 0)
 {
 if ($youdata['energy'] >= $youdata['maxenergy'] / 2)
 {

 $youdata['energy'] -= $youdata['maxenergy'] / 2;
 $me = $youdata['maxenergy'] / 2;
 mysql_query(
 "UPDATE users SET energy=energy- {$me} WHERE userid=$userid",
 $c);
 $_SESSION['attacklog'] = "";
 }
 else
 {
 print
 "<font color='red'><b>You can only attack someone when you have 50% energy</font></b>";
 $h->endpage();
 exit;
 }
 }
 $_SESSION['attacking'] = 1;
 $_GET['wepid'] = (int) $_GET['wepid'];
 $_GET['nextstep'] = (int) $_GET['nextstep'];
 //damage
 $qr =
 mysql_query(
 "SELECT * FROM inventory WHERE inv_itemid={$_GET['wepid']} and inv_userid=$userid",
 $c);
 if (mysql_num_rows($qr) == 0)
 {
 print
 "<font color='red'>Stop trying to abuse a game bug. You can lose all your EXP for that.</font></b><br />
<a href='index.php'>&gt; Home</a>";
 mysql_query("UPDATE users SET exp=0 where userid=$userid", $c);
 die("");
 }
 $qo =
 mysql_query(
 "SELECT i.*,w.* FROM items i LEFT JOIN weapons w ON i.itmid=w.item_id WHERE w.item_id={$_GET['wepid']}",
 $c);
 $r1 = mysql_fetch_array($qo);
 $mydamage =
 (int) (($r1['damage'] * $youdata['strength'] / $odata['guard'])
 * (rand(8000, 12000) / 10000));
 $hitratio = min(50 * $ir['agility'] / $odata['agility'], 95);
 if (rand(1, 100) <= $hitratio)
 {
 $q3 =
 mysql_query(
 "SELECT a.Defence FROM inventory iv LEFT JOIN items i ON iv.inv_itemid = i.itmid LEFT JOIN armour a ON i.itmid=a.item_ID WHERE i.itmtype=7 AND iv.inv_userid={$_GET['ID']} ORDER BY rand()",
 $c);
 if (mysql_num_rows($q3))
 {
 $mydamage -= mysql_result($q3, 0, 0);
 }
 if ($mydamage < 1)
 {
 $mydamage = 1;
 }
 $odata['hp'] -= $mydamage;
 if ($odata['hp'] == 1)
 {
 $odata['hp'] = 0;
 $mydamage += 1;
 }
 mysql_query(
 "UPDATE users SET hp=hp-$mydamage WHERE userid={$_GET['ID']}",
 $c);
 print
 "<font color=red>{$_GET['nextstep']}. Using your {$r1['itmname']} you hit {$odata['username']} doing $mydamage damage ({$odata['hp']})</font><br />\n";
 $_SESSION['attacklog'] .=
 "<font color=red>{$_GET['nextstep']}. Using his {$r1['itmname']} {$ir['username']} hit {$odata['username']} doing $mydamage damage ({$odata['hp']})</font><br />\n";
 }
 else
 {
 print
 "<font color=red>{$_GET['nextstep']}. You tried to hit {$odata['username']} but missed ({$odata['hp']})</font><br />\n";
 $_SESSION['attacklog'] .=
 "<font color=red>{$_GET['nextstep']}. {$ir['username']} tried to hit {$odata['username']} but missed ({$odata['hp']})</font><br />\n";
 }
 if ($odata['hp'] <= 0)
 {
 $odata['hp'] = 0;
 $_SESSION['attackwon'] = $_GET['ID'];
 mysql_query("UPDATE users SET hp=0 WHERE userid={$_GET['ID']}", $c);
 print
 "<form action='attackleave.php?ID={$_GET['ID']}' method='post'><input type='submit' value='Leave Them' /></form>
<form action='attackmug.php?ID={$_GET['ID']}' method='post'><input type='submit' value='Mug Them'></form>
<form action='attackhosp.php?ID={$_GET['ID']}' method='post'><input type='submit' value='Hospitalize Them'></form>";
 }
 else
 {
 //choose opp gun
 $eq =
 mysql_query(
 "SELECT iv.*,i.*,w.* FROM inventory iv LEFT JOIN items i ON iv.inv_itemid=i.itmid LEFT JOIN weapons w ON iv.inv_itemid=w.item_id WHERE iv.inv_userid={$_GET['ID']} AND ( i.itmtype=3 OR i.itmtype=4 )",
 $c);
 if (mysql_num_rows($eq) == 0)
 {
 $wep = "Fists";
 $dam =
 (int) ((((int) ($odata['strength'] / 100)) + 1)
 * (rand(8000, 12000) / 10000));
 }
 else
 {
 $cnt = 0;
 while ($r = mysql_fetch_array($eq))
 {
 $enweps[] = $r;
 $cnt++;
 }
 $weptouse = rand(0, $cnt - 1);
 $wep = $enweps[$weptouse]['itmname'];
 $dam =
 (int) (($enweps[$weptouse]['damage'] * $odata['strength']
 / $youdata['guard']) * (rand(8000, 12000) / 10000));
 }
 $hitratio = min(50 * $odata['agility'] / $ir['agility'], 95);
 if ($odata['userid'] == 1)
 {
 $hitratio = 100;
 }
 if (rand(1, 100) <= $hitratio)
 {
 $q3 =
 mysql_query(
 "SELECT a.Defence FROM inventory iv LEFT JOIN items i ON iv.inv_itemid = i.itmid LEFT JOIN armour a ON i.itmid=a.item_ID WHERE i.itmtype=7 AND iv.inv_userid=$userid ORDER BY rand()",
 $c);
 if (mysql_num_rows($q3))
 {
 $dam -= mysql_result($q3, 0, 0);
 }
 if ($dam < 1)
 {
 $dam = 1;
 }
 $youdata['hp'] -= $dam;
 mysql_query("UPDATE users SET hp=hp-$dam WHERE userid=$userid", $c);
 $ns = $_GET['nextstep'] + 1;
 print
 "<font color=blue>{$ns}. Using his $wep {$odata['username']} hit you doing $dam damage ({$youdata['hp']})</font><br />\n";
 $_SESSION['attacklog'] .=
 "<font color=blue>{$ns}. Using his $wep {$odata['username']} hit {$ir['username']} doing $dam damage ({$youdata['hp']})</font><br />\n";
 }
 else
 {
 $ns = $_GET['nextstep'] + 1;
 print
 "<font color=blue>{$ns}. {$odata['username']} tried to hit you but missed ({$youdata['hp']})</font><br />\n";
 $_SESSION['attacklog'] .=
 "<font color=blue>{$ns}. {$odata['username']} tried to hit {$ir['username']} but missed ({$youdata['hp']})</font><br />\n";
 }
 if ($youdata['hp'] <= 0)
 {
 $youdata['hp'] = 0;
 mysql_query("UPDATE users SET hp=0 WHERE userid=$userid", $c);
 print
 "<form action='attacklost.php?ID={$_GET['ID']}' method='post'><input type='submit' value='Continue' />";
 }
 }
}
else if ($odata['hp'] < $odata['maxhp'] / 2)
{
 print "You can only attack those who have at least 1/2 their max health";
 $h->endpage();
 exit;
}
else if ($youdata['energy'] < $youdata['maxenergy'] / 2)
{
 print "You can only attack someone when you have 50% energy";
 $h->endpage();
 exit;
}
else if ($youdata['location'] != $odata['location'])
{
 print "You can only attack someone in the same location!";
 $h->endpage();
 exit;
}
else
{
}
print "</td></tr>";
if ($youdata['hp'] <= 0 || $odata['hp'] <= 0)
{
 print "</table>";
}
else
{
 print
 "<tr><td>Your Health: {$youdata['hp']}/{$youdata['maxhp']}</td><td>Opponents Health: {$odata['hp']}/{$odata['maxhp']}</td></tr>";
 $mw =
 mysql_query(
 "SELECT iv.*,i.* FROM inventory iv LEFT JOIN items i ON iv.inv_itemid=i.itmid WHERE iv.inv_userid=$userid AND (i.itmtype = 3 || i.itmtype = 4)",
 $c);
 print "<tr><td colspan=2 align='center'>Attack with:<br />";
 while ($r = mysql_fetch_array($mw))
 {
 if (!$_GET['nextstep'])
 {
 $ns = 1;
 }
 else
 {
 $ns = $_GET['nextstep'] + 2;
 }
 print
 "<a href='attack.php?nextstep=$ns&amp;ID={$_GET['ID']}&amp;wepid={$r['itmid']}'>{$r['itmname']}</a><br />";
 }
 print "</table>";
}
$h->endpage();