Aide dans une requetes

[niahoo]

bataille pas..

[blingcru2]

Comme vous verrez il n'y a pas de requete tel quel pour la recherche de la ville ..

Sinon bien je suis dans les patates mdr
je vais montrer la page complete comme sa vous pouvez voir plus a profondi

Désoler mais moi et l'orthographe ses 2 pas très douer coté orthographe

<?php





include("lib.php");

define("PAGENAME", "Ville");

$player = check_user($secret_key, $db);

$img = "<img src=images/ville_logo.PNG border=0 align=absmiddle><br /><br />";



if ($player->cache == 0 && $player->prison == 0) {

switch($_GET['act'])

{

	case "attack":

		if (!$_GET['username']) //No username entered

		{

			header("Location: battle1.php");

			break;

		}

		

		//Otherwise, get player data:

		$query = $db->execute("select * from `players` where `username`=?", array($_GET['username']));

		if ($query->recordcount() == 0) //Player doesn't exist

		{

			include("templates/private_header.php");

			echo "<div class=\"contenu\">

 <div class=\"contenu_bloc\">

  <h1>Ville</h1>";

			echo "Ce joueur n'existe pas ou est cacher !";

			include("templates/private_footer.php");

			break;

		}

		$requete = $db->execute("select * from `players` where `username`=?", array($_GET['username']));

		

		

		$fucked = $requete->fetchrow();

		if ($fucked['cache'] == 1) //Player cacher

		{

			include("templates/private_header.php");

			echo "<div class=\"contenu\">

 <div class=\"contenu_bloc\">

  <h1>Ville</h1>";

			echo "Ce joueur s'est cacher (quelle tappette) !";

			include("templates/private_footer.php");

			break;

		}

		if ($fucked['prison'] == 1) //Player cacher

		{

			include("templates/private_header.php");

			echo "<div class=\"contenu\">

 <div class=\"contenu_bloc\">

  <h1>Ville</h1>";

			echo "Ce joueur est dans la cit&eacute !";

			include("templates/private_footer.php");

			break;

		}

		if ($fucked['energy'] == 0) //Player cacher

		{

			include("templates/private_header.php");

			echo "<div class=\"contenu\">

 <div class=\"contenu_bloc\">

  <h1>Ville</h1>";

			echo "Pas asser de pa !";

			include("templates/private_footer.php");

			break;

		}

		if ($fucked['energy'] == 0) //Player cacher

		{

			include("templates/private_header.php");

			echo "<div class=\"contenu\">

 <div class=\"contenu_bloc\">

  <h1>Ville</h1>";

			echo "^u a plus de pa !";

			include("templates/private_footer.php");

			break;

		}

		if ($fucked['banni'] == 1) //Player cach�

		{

			include("templates/private_header.php");

			echo "<div class=\"contenu\">

 <div class=\"contenu_bloc\">

  <h1>Ville</h1>";

			echo "Ce joueur est banni fils de pute de tricheur !";

			include("templates/private_footer.php");

			break;

		}

		if ($fucked['cachette'] == 1) //Player cach�

		{

			include("templates/private_header.php");

			echo "<div class=\"contenu\">

 <div class=\"contenu_bloc\">

  <h1>Ville</h1>";

			echo "Ce joueur s'est cach&eacute tros longtemps !";

			include("templates/private_footer.php");

			break;

		}

		

		

		$enemy1 = $query->fetchrow(); //Get player info

		foreach($enemy1 as $key=>$value)

		{

			$enemy->$key = $value;

		}

		

		if ($enemy->level != $player->level)

		{

			include("templates/private_header.php");

			echo "Vos quartier sont diff&eacuterents.";

			include("templates/private_footer.php");

			break;

		}

		if ($player->level == 1)

		{

			include("templates/private_header.php");

			echo "Tu ne peux pas attaquer au niveau 1 !<br />";

			echo "<br /><a href=monter.php>Monter au niveau 2</a> <font color=white>[500 000$]</font>";

			include("templates/private_footer.php");

			break;

		}

		if ($enemy->ville != $player->ville)

		{

			include("templates/private_header.php");

			echo "Vos quartier sont diff&eacuterents. Tu ne peux attaquer que quelqu'un de ton quartier !";

			include("templates/private_footer.php");

			break;

		}



		if ($enemy->gang == $player->gang && $player->gang > 0)

		{

			include("templates/private_header.php");

			echo "Pourquoi attaquer ton pote de gang ?";

			include("templates/private_footer.php");

			break;

		}

		

		//Otherwise, check if player has any health

		if ($enemy->hp == 0)

		{

			include("templates/private_header.php");

			echo "<div class=\"contenu\">

 <div class=\"contenu_bloc\">

  <h1>Ville</h1>";

			echo "Ce joueur est mort !";

			include("templates/private_footer.php");

			break;

		}





		

		//Player cannot attack anymore

		if ($player->energy == 0)

		{

			include("templates/private_header.php");

			echo "<div class=\"contenu\">

 <div class=\"contenu_bloc\">

  <h1>Ville</h1>";

			echo "Tu n'as plus de PA.";

			include("templates/private_footer.php");

			break;

		}

		

		//Player is dead

		if ($player->hp == 0)

		{

			include("templates/private_header.php");

			echo "Tu es mort ! Va faire un tour a l'infirmerie !";

			include("templates/private_footer.php");

			break;

		}

		

		if ($player->energy == 0)

		{

			include("templates/private_header.php");

			echo "Tu es mort ! Va faire un tour a l'infirmerie !";

			include("templates/private_footer.php");

			break;

		}



		if ($enemy->username == $player->username)

		{

			include("templates/private_header.php");

			echo "<div class=\"contenu\">

 <div class=\"contenu_bloc\">

  <h1>Ville</h1>";

			echo "Tu ne peux pas t'attaquer toi meme. Enfin voyons !";

			include("templates/private_footer.php");

			break;

		}

		

		//Get enemy's bonuses from equipment

		$query = $db->query("select blueprint_items.effectiveness, blueprint_items.name from `items`, `blueprint_items` where blueprint_items.id=items.item_id and items.player_id=? and blueprint_items.type='weapon' and items.status='equipped'", array($enemy->id));

		$enemy->atkbonus = ($query->recordcount() == 1)?$query->fetchrow():0;

		$query = $db->query("select blueprint_items.effectiveness, blueprint_items.name from `items`, `blueprint_items` where blueprint_items.id=items.item_id and items.player_id=? and blueprint_items.type='armour' and items.status='equipped'", array($enemy->id));

		$enemy->defbonus = ($query->recordcount() == 1)?$query->fetchrow():0;

		

		//Get player's bonuses from equipment

		$query = $db->query("select blueprint_items.effectiveness, blueprint_items.name from `items`, `blueprint_items` where blueprint_items.id=items.item_id and items.player_id=? and blueprint_items.type='weapon' and items.status='equipped'", array($player->id));

		$player->atkbonus = ($query->recordcount() == 1)?$query->fetchrow():0;

		$query = $db->query("select blueprint_items.effectiveness, blueprint_items.name from `items`, `blueprint_items` where blueprint_items.id=items.item_id and items.player_id=? and blueprint_items.type='armour' and items.status='equipped'", array($player->id));

		$player->defbonus = ($query->recordcount() == 1)?$query->fetchrow():0;

		

		//Calculate some variables that will be used

		$enemy->strdiff = (($enemy->strength - $player->strength) > 0)?($enemy->strength - $player->strength):0;

		$enemy->vitdiff = (($enemy->vitality - $player->vitality) > 0)?($enemy->vitality - $player->vitality):0;

		$enemy->agidiff = (($enemy->agility - $player->agility) > 0)?($enemy->agility - $player->agility):0;

		$player->strdiff = (($player->strength - $enemy->strength) > 0)?($player->strength - $enemy->strength):0;

		$player->vitdiff = (($player->vitality - $enemy->vitality) > 0)?($player->vitality - $enemy->vitality):0;

		$player->agidiff = (($player->agility - $enemy->agility) > 0)?($player->agility - $enemy->agility):0;

		$totalstr = $enemy->strength + $player->strength;

		$totalvit = $enemy->vitality + $player->vitality;

		$totalagi = $enemy->agility + $player->agility;

		

		//Calculate the damage to be dealt by each player (dependent on strength and vitality)

		$enemy->maxdmg = (($enemy->strength * 2) + $enemy->atkbonus['effectiveness']) - ($player->defbonus['effectiveness']);

		$enemy->maxdmg = $enemy->maxdmg - intval($enemy->maxdmg * ($player->vitdiff / $totalvit));

		$enemy->maxdmg = ($enemy->maxdmg <= 2)?2:$enemy->maxdmg; //Set 2 as the minimum damage

		$enemy->mindmg = (($enemy->maxdmg - 4) < 1)?1$enemy->maxdmg - 4); //Set a minimum damage range of maxdmg-4

		$player->maxdmg = (($player->strength * 2) + $player->atkbonus['effectiveness']) - ($enemy->defbonus['effectiveness']);

		$player->maxdmg = $player->maxdmg - intval($player->maxdmg * ($enemy->vitdiff / $totalvit));

		$player->maxdmg = ($player->maxdmg <= 2)?2:$player->maxdmg; //Set 2 as the minimum damage

		$player->mindmg = (($player->maxdmg - 4) < 1)?1$player->maxdmg - 4); //Set a minimum damage range of maxdmg-4

		

		//Calculate battle 'combos' - how many times in a row a player can attack (dependent on agility)

		$enemy->combo = ceil($enemy->agility / $player->agility);

		$enemy->combo = ($enemy->combo > 3)?3:$enemy->combo;

		$player->combo = ceil($player->agility / $enemy->agility);

		$player->combo = ($player->combo > 3)?3:$player->combo;

		

		//Calculate the chance to miss opposing player

		$enemy->miss = intval(($player->agidiff / $totalagi) * 100);

		$enemy->miss = ($enemy->miss > 20)?20:$enemy->miss; //Maximum miss chance of 20% (possible to change in admin panel?)

		$enemy->miss = ($enemy->miss <= 5)?5:$enemy->miss; //Minimum miss chance of 5%

		$player->miss = intval(($enemy->agidiff / $totalagi) * 100);

		$player->miss = ($player->miss > 20)?20:$player->miss; //Maximum miss chance of 20%

		$player->miss = ($player->miss <= 5)?5:$player->miss; //Minimum miss chance of 5%

		

		

		$battlerounds = 2; //Maximum number of rounds/turns in the battle. Changed in admin panel?

		

		$output = ""; //Output message

		

		

		//While somebody is still alive, battle!

		while ($enemy->hp > 0 && $player->hp > 0 && $battlerounds > 0)

		{

			$attacking = ($player->agility >= $enemy->agility)?$player:$enemy;

			$defending = ($player->agility >= $enemy->agility)?$enemy:$player;

			

			for($i = 0;$i < $attacking->combo;$i++)

			{

				//Chance to miss?

				$misschance = intval(rand(0, 100));

				if ($misschance <= $attacking->miss)

				{

					$output .= $attacking->username . " a essayer d'attaquer " . $defending->username . " mais a rater !<br />";

				}

				else

				{

					$damage = rand($attacking->mindmg, $attacking->maxdmg); //Calculate random damage				

					$defending->hp -= $damage;

					$output .= ($player->username == $defending->username)?"<font color=\"red\">":"<font color=\"green\">";

					$output .= $attacking->username . " attaque " . $defending->username . " pour <b>" . $damage . "</b> degats ! (";

					$output .= ($defending->hp > 0)?$defending->hp . " Vie restante":"Mort";

					$output .= ")<br />";

					$output .= "</font>";



					//Check if anybody is dead

					if ($defending->hp <= 0)

					{

						$player = ($player->agility >= $enemy->agility)?$attacking:$defending;

						$enemy = ($player->agility >= $enemy->agility)?$defending:$attacking;

						break 2; //Break out of the for and while loop, but not the switch structure

					}

				}

				$battlerounds--;

				if ($battlerounds <= 0)

				{

					break 2; //Break out of for and while loop, battle is over!

				}

			}

			

			for($i = 0;$i < $defending->combo;$i++)

			{

				//Chance to miss?

				$misschance = intval(rand(0, 100));

				if ($misschance <= $defending->miss)

				{

					$output .= $defending->username . " a essayer d'attaquer " . $attacking->username . " mais a louper !<br />";

				}

				else

				{

					$damage = rand($defending->mindmg, $defending->maxdmg); //Calculate random damage

					$attacking->hp -= $damage;

					$output .= ($player->username == $defending->username)?"<font color=\"green\">":"<font color=\"red\">";

					$output .= $defending->username . " attaque " . $attacking->username . " pour <b>" . $damage . "</b> degats ! (";

					$output .= ($attacking->hp > 0)?$attacking->hp . " Vie restante :":"Mort";

					$output .= ")<br />";

					$output .= "</font>";



					//Check if anybody is dead

					if ($attacking->hp <= 0)

					{

						$player = ($player->agility >= $enemy->agility)?$attacking:$defending;

						$enemy = ($player->agility >= $enemy->agility)?$defending:$attacking;

						break 2; //Break out of the for and while loop, but not the switch structure

					}

				}

				$battlerounds--;

				if ($battlerounds <= 0)

				{

					break 2; //Break out of for and while loop, battle is over!

				}

			}

			

			$player = ($player->agility >= $enemy->agility)?$attacking:$defending;

			$enemy = ($player->agility >= $enemy->agility)?$defending:$attacking;

		}

		

		if ($player->hp <= 0)

		{

		$date = date("d/m H:i");

		$meurtre = "[ " . $date . " N" . $player->level . " ] <a href=profile.php?id=" . $enemy->username . ">" . $enemy->username . "</a> a d&eacutefoncer <a href=profile.php?id=" . $player->username . ">" . $player->username . "</a> pour " . $player->contrat . " $\n";

			$tfile = 'logs.txt';

			if (file_exists($tfile)) {

			$file = file($tfile);

			$fp = fopen("$tfile", "w+");

			fwrite($fp,$meurtre);

			if (is_array($file)) {

			while (list(, $line) = each($file)) {



fwrite($fp, $line);

}

}

}

fclose($fp); 



		$insert['player'] = $enemy->username;

		$insert['time'] = date("H:i");

		$insert['level'] = $enemy->level;

		$insert['killed'] = $player->username;

		$insert['contrat'] = $player->contrat;

		$insert['gang'] = $enemy->gang;

                $insert['ville'] = $player->Quartier;

                $insert['ville'] = $enemy->Quartier;

		$insert['td'] = "a defoncer";

		$query = $db->autoexecute('meurtres', $insert, 'INSERT');

		

		

			//Calculate losses

			$exploss1 = $player->level * 6;

			$exploss2 = (($player->level - $enemy->level) > 0)?($enemy->level - $player->level) * 4:0;

			$exploss = $exploss1 + $exploss2;

			$goldloss = intval(0.2 * $player->gold);

			$goldloss = intval(rand(1, $goldloss));

			$output .= "<br /><u>Tu as &eacutet&eacute tu&eacute par " . $enemy->username . " !</u><br />";

			$output .= "<br />Tu perds <b></b>toutes tes $.";

			$goldloss2 = (($player->gold - $goldloss) <= 0)?0:$goldloss;

			//Update player (the loser)

			$query = $db->execute("update `players` set `energy`=?, `stat_points`=5, `deaths`=?, `hp`=0, `level`=1, `maxhp`=50, `strength`=1, `vitality`=1, `agility`=1, `contrat`=0, `bank`=0, `gold`=?, `cnd`=0 where `id`=?", array($player->energy - 2, $player->deaths + 1, $player->gold = $player->cnd,  $player->id));

			$query = $db->execute("update `players` set `shit`=0, `beuh`=0, `lsd`=0, `coke`=0, `hero`=0, `morphine`=0, `crack`=0 where id`=?", array($player->id));

			$query = $db->execute("DELETE FROM `items` WHERE `player_id` = ?", array($player->id));

			//123456

			

			// HERE HERE HERE

			

						

			

			//Update enemy (the winner)

			if ($exploss + $enemy->exp < $enemy->maxexp)

			{

				$query = $db->execute("update `players` set `gold`=?, `kills`=?, `hp`=? where `id`=?", array($enemy->exp + $exploss + $enemy->gold + $goldloss + $player->contrat, $enemy->kills + 1, $enemy->hp, $enemy->id));

				$query = $db->execute("update `gangs` set `kills`=`kills`+1 where `id`=?", array($enemy->gang));

				//Add log message for winner

				$logmsg = "Tu as ete attaquer par <a href=\"profile.php?id=" . $player->username . "\">" . $player->username . "</a> mais tu l'a tu&eacute !<br />\nTu remportes donc " . $goldloss . " $. Tu r&eacutecup&egraveres le contrat de " . $player->contrat . " $. <br />";

				addlog($enemy->id, $logmsg, $db);

				



				

			}

			else //Defender has gained a level! =)

			{

			if ($enemy->level == 100) {

				$query = $db->execute("update `players` set `gold`=?, `kills`=? where `id`=?", array($enemy->gold + $goldloss, $enemy->kills + 1, $enemy->id));

				$query = $db->execute("update `gangs` set `kills`=`kills`+1 where `id`=?", array($enemy->gang));

				}

				else {

				$query = $db->execute("update `players` set `stat_points`=?, `level`=?, `maxexp`=?, `gold`=?, `kills`=?, `hp`=?, `maxhp`=? where `id`=?", array($enemy->stat_points + 3, $enemy->level + 1, ($enemy->level+1) * 70 - 20, ($enemy->exp + $exploss) - $enemy->maxexp, $enemy->gold + $goldloss, $enemy->kills + 1, $enemy->maxhp + 30, $enemy->maxhp + 30, $enemy->id));

				$query = $db->execute("update `gangs` set `kills`=`kills`+1 where `id`=?", array($enemy->gang));

				//Add log message for winner

$logmsg = "Tu as ete attaquer par <a href=\"profile.php?id=" . $player->username . "\">" . $player->username . "</a> et tu l'as tu� !";

				addlog($enemy->id, $logmsg, $db);

				}

				}

		}

		else if ($enemy->hp <= 0)

		{

		$date = date("d/m H:i");

		$meurtre = "[ " . $date . " N" . $player->level . " ] <a href=profile.php?id=" . $player->username . ">" . $player->username . "</a> a tu&eacute <a href=profile.php?id=" . $enemy->username . ">" . $enemy->username . "</a> pour " . $enemy->contrat . " $\n";

			$tfile = 'logs.txt';

			if (file_exists($tfile)) {

			$file = file($tfile);

			$fp = fopen("$tfile", "w+");

			fwrite($fp,$meurtre);

			if (is_array($file)) {

			while (list(, $line) = each($file)) {



fwrite($fp, $line);

}

}

}

fclose($fp); 



		$insert['player'] = $player->username;

		$insert['time'] = date("H:i");

		$insert['level'] = $player->level;

		$insert['killed'] = $enemy->username;

		$insert['contrat'] = $enemy->contrat;

		$insert['gang'] = $player->gang;

                $insert['ville'] = $player->Quartier;

                $insert['ville'] = $enemy->ville;

		$insert['td'] = "a tuer";

		$query = $db->autoexecute('meurtres', $insert, 'INSERT');

		

			//Calculate losses

			$expwin1 = $enemy->level * 6;

			$expwin2 = (($player->level - $enemy->level) > 0)?$expwin1 - (($player->level - $enemy->level) * 3):$expwin1 + (($player->level - $enemy->level) * 3);

			$expwin2 = ($expwin2 <= 0)?1:$expwin2;

			$expwin3 = round(0.6 * $expwin2);

			$expwin = ceil(rand($expwin3, $expwin2));

			$goldwin = ceil(10 * $enemy->level);

			$output .= "<br /><u>Tu as tu&eacute " . $enemy->username . "!</u><br />";

			$output .= "<br />Tu gagnes  <b>" . $goldwin . "</b> $. Tu r&eacutecup&egraveres le contrat de " . $enemy->contrat . " $.";

		

		//HERE HERE HERE

		

		

			if ($expwin + $player->exp >= $player->maxexp) //Player gained a level!

			{

				//Update player, gained a level

				if ($player->level == 100) {

				$query = $db->execute("update `players` set `gold`=?, `kills`=? where `id`=?", array($player->gold + $goldloss, $enemy->kills + 1, $player->id));

				$query = $db->execute("update `gangs` set `kills`=`kills`+1 where `id`=?", array($player->gang));

				}

				

				else {

				

				$output .= "<br /><b>Tu augmentes de niveau !</b>";

				$newexp = $expwin + $player->exp - $player->maxexp;

				$query = $db->execute("update `players` set `stat_points`=?, `level`=?, `maxexp`=?, `maxhp`=?, `exp`=?, `gold`=?, `kills`=?, `hp`=?, `energy`=? where `id`=?", array($player->stat_points + 3, $player->level + 1, ($player->level+1) * 70 - 20, $player->maxhp + 30, $newexp, $player->gold + $goldwin + $enemy->contrat, $player->kills + 1, $player->maxhp + 30, $player->energy - 1, $player->id));

				$query = $db->execute("update `gangs` set `kills`=`kills`+1 where `id`=?", array($player->gang));

				}

			}

			

			else

			{

				//Update player

				$query = $db->execute("update `players` set `gold`=?, `kills`=?, `hp`=?, `energy`=? where `id`=?", array($player->gold + $goldwin + $enemy->contrat, $player->kills + 1, $player->hp, $player->energy - 1, $player->id));

				$query = $db->execute("update `gangs` set `kills`=`kills`+1 where `id`=?", array($player->gang));

				

				$nombre123 = mt_rand(1,3);

				if ($nombre123 == 3) {

				$query = $db->execute("update `players` set `recherche`=`recherche`+1 where `id`=?", array($player->id)); 

				echo "<script>alert('Le flic t'as vu ! Une etoile\nde recherche s'est ajouter !')</script>";

				}

			}

			

			//Add log message

			$logmsg = "Tu as ete attaquer par <a href=\"profile.php?id=" . $player->username . "\">" . $player->username . "</a> et tu as ete tuer... Tu recuperes l'argent de ton Compte nouveau d�part.";

			addlog($enemy->id, $logmsg, $db);

			//Update enemy (who was defeated)

			$query = $db->execute("update `players` set `shit`=0, `beuh`=0, `lsd`=0, `coke`=0, `hero`=0, `morphine`=0, `crack`=0 where id`=?", array($enemy->id));

			$query = $db->execute("update `players` set `hp`=0, `deaths`=?, `level`=1, `maxexp`=50, `exp`=0, `maxhp`=50, `strength`=1, `vitality`=1, `agility`=1, `stat_points`=5, `contrat`=0, `gold`=?, `cnd`=0 where `id`=?", array($enemy->deaths + 1,$enemy->gold = $enemy->cnd, $enemy->id));

			$query = $db->execute("DELETE FROM `items` WHERE `player_id`=?", array($enemy->id));

					}

		else

		{

			$output .= "<br /><u>Personne n'a gagner...</u>";

			$query = $db->execute("update `players` set `hp`=?, `energy`=? where `id`=?", array($player->hp, $player->energy - 2, $player->id));

			$query = $db->execute("update `players` set `hp`=? where `id`=?", array($enemy->hp, $enemy->id));

			

			$logmsg = "Tu as &eacutet&eacute attaquer par <a href=\"profile.php?id=" . $player->username . "\">" . $player->username . "</a> mais personne n'a gagner...";

			addlog($enemy->id, $logmsg, $db);

		}

		

		$player = check_user($secret_key, $db); //Get new stats

		include("templates/private_header.php");

		echo "<div class=\"contenu\">

 <div class=\"contenu_bloc\">

  <h1>Ville</h1>";

		echo $output;

		include("templates/private_footer.php");

		break;

		

	

	case "search":

		//Check in case somebody entered 0

		$_GET['fromlevel'] = ($_GET['fromlevel'] == 0)?"":$_GET['fromlevel'];

		$_GET['tolevel'] = ($_GET['tolevel'] == 0)?"":$_GET['tolevel'];

		

		//Construct query

		$query = "select `id`, `cache`, `username`, `hp`, `maxhp`, `ville`, `level`, `contrat`, `kills`, `bank`, `gang` from `players` where `id`!= ? and `prison`=0 and `banni`=0 and ";

		$query .= ($_GET['username'] != "")?"`username` LIKE  ? and ":"";

		$query .= ($_GET['fromlevel'] != "")?"`level` >= ? and ":"";

		$query .= ($_GET['tolevel'] != "")?"`level` <= ? and ":"";

		$query .= ($_GET['fromville'] != "")?"`ville` >= ? and ":"";

		$query .= ($_GET['toville'] != "")?"`ville` <= ? and ":"";

		$query .= ($_GET['alive'] == "1")?"`hp` > 0 ":"`hp` = 0 ";

		$query .= "limit 999999999";

		

		//Construct values array for adoDB

		$values = array();

		array_push($values, $player->id); //Make sure battle search doesn't show self

		if ($_GET['username'] != "")

		{

			array_push($values, "%".trim($_GET['username'])."%"); //Add username value for search

		}

		//Add level range for search

		if ($_GET['fromlevel'])

		{

			array_push($values, intval($_GET['fromlevel']));

		}

		if ($_GET['tolevel'])

		{

			array_push($values, intval($_GET['tolevel']));

		}

	if ($_GET['fromville'])

		{

			array_push($values, intval($_GET['fromville']));

		}

		if ($_GET['toville'])

		{

			array_push($values, intval($_GET['toville']));

		}

		

		include("templates/private_header.php");

		echo "<div class=\"contenu\">

 <div class=\"contenu_bloc\">

  <h1>Ville</h1>";

		

		//Display search form again

		$somme1 = (($player->gold + $player->bank)/3);

$somme = intval($somme1);

		echo "<table class=\"tableau\">

	  <tr><th colspan=\"2\">Se cacher</th></tr>

    <tr>

	

     <td width=\"100\">" . $somme . "$</td>

     <td width=\"300\">

		   

		  <form action=\"action.php\" method=\"post\">



        <a href=cachette.php><input type=\"submit\" value=\"Se cacher\" class=\"btn_large\" /></a>

      </form>

		 </td>

    </tr>

   </table><br /><br />";

		echo "<fieldset>\n";

		echo "<legend><b>Chercher un joueur</b></legend>\n";

		echo "<form method=\"get\" action=\"battle1.php\">\n<input type=\"hidden\" name=\"act\" value=\"search\" />\n";

		echo "<table width=\"100%\">\n";

		echo "<tr>\n<td width=\"40%\">Pseudo :</td>\n<td width=\"60%\"><input type=\"text\" name=\"username\" value=\"" . stripslashes($_GET['username']) . "\" /></td>\n</tr>\n";

		echo "<tr>\n<td width=\"40%\">Niveau :</td>\n<td width=\"60%\"><input type=\"text\" name=\"fromlevel\" size=\"4\" value=\"" . stripslashes($_GET['fromlevel']) . "\" /> &agrave <input type=\"text\" name=\"tolevel\" size=\"4\" value=\"" . stripslashes($_GET['tolevel']) . "\" /></td>\n</tr>\n";

		echo "<tr>\n<td width=\"40%\">Statut :</td>\n<td width=\"60%\"><select name=\"alive\" size=\"2\">\n<option value=\"1\"";

		echo ($_GET['alive'] == 1)?" selected=\"selected\"":"";

		echo ">En vie</option>\n<option value=\"0\"";

		echo ($_GET['alive'] == 0)?" selected=\"selected\"":"";

		echo ">Mort</option>\n</select></td>\n</tr>\n";

		echo "<tr><td></td><td><br /><input type=\"submit\" value=\"Chercher\" /></td></tr>\n";

		echo "</table>\n";

		echo "</form>\n</fieldset>\n";

		echo "<br /><br />";

		

		echo "<table width=\"100%\">\n";

		echo "<tr><th width=\"20%\">Joueur</th><th width=\"15%\">Contrat</th><th width=\"15%\">Meurtres</th><th width=\"15%\">Quartiers</th><th width=\"10%\">Niveau</th><th width=\"10%\">Gang</th><th width=\"15%\">Cacher</th><th width=\"15%\">Attaque</a></th><th width=\"15%\">Quartier</a></th></tr>\n";

		$query = $db->execute($query, $values); //Search!

		if ($query->recordcount() > 0) //Check if any players were found

		{

			$bool = 1;

			while ($result = $query->fetchrow())

			{

			

			

				echo "<tr class=\"row" . $bool . "\">\n";

				echo "<td width=\"20%\"><a href=\"profile.php?id=" . $result['username'] . "\">" . $result['username'] . "</a></td>\n";

				echo "<td width=\"15%\">" . $result['contrat'] . "</td>\n";

				echo "<td width=\"15%\">" . $result['kills'] . "</td>\n";

                                echo "<td width=\"15%\">" . $result['ville'] . "</td>\n";

				echo "<td width=\"10%\">" . $result['level'] . "</td>\n";

				if ($result['gang'] == 0) {echo "<td width=\"10%\">Sans</td>\n";}

				else {echo "<td width=\"10%\">N. " . $result['gang'] . "</td>\n"; }

				if ($result['cache'] == 0) {echo "<td width=\"15%\"><font color=green>Non</font></td>\n";}

				else {echo "<td width=\"10%\"><font color=red>Cacher</font></td>\n"; }				

				echo "<td width=\"15%\"><a href=\"battle1.php?act=attack&username=" . $result['username'] . "\">Attaquer</a></td>\n";

				if ($result['ville'] == 1) {echo "<td width=\"20%\">Doberwood</td>\n";}

				if ($result['ville'] == 2) {echo "<td width=\"20%\">East Side</td>\n";}

				if ($result['ville'] == 3) {echo "<td width=\"20%\">West Side</td>\n";}

				if ($result['ville'] == 4) {echo "<td width=\"20%\">Mtrl Sud</td>\n";}

				if ($result['ville'] == 5) {echo "<td width=\"20%\">Mtrl Nord</td> \n";}



				echo "</tr>\n";

				$bool = ($bool==1)?2:1;

			}

		}

		else //Display error message

		{

			echo "<tr>\n";

			echo "<td colspan=\"3\">Pas de joueur trouver. Change les crit&egraveres !</td>\n";

			echo "</tr>\n";

		}

		echo "</table>\n";

		include("templates/private_footer.php");

		break;

	

	default:

		include("templates/private_header.php");

			echo "<div class=\"contenu\">

 <div class=\"contenu_bloc\">

  <h1>Ville</h1>";

		

		//The default battle page, giving choice of whether to search for players or to target one

		echo "<fieldset>\n";

		echo "<legend><b>Chercher un joueur :</b></legend>\n";

		echo "<form method=\"get\" action=\"battle1.php\">\n<input type=\"hidden\" name=\"act\" value=\"search\" />\n";

		echo "<table width=\"100%\">\n";

		echo "<tr>\n<td width=\"40%\">Pseudo :</td>\n<td width=\"60%\"><input type=\"text\" name=\"username\" /></td>\n</tr>\n";

		echo "<tr>\n<td width=\"40%\">Niveau :</td>\n<td width=\"60%\"><input type=\"text\" name=\"fromlevel\" size=\"4\" /> &agrave <input type=\"text\" name=\"tolevel\" size=\"4\" /></td>\n</tr>\n";

		echo "<tr>\n<td width=\"40%\">Statut :</td>\n<td width=\"60%\"><select name=\"alive\" size=\"2\">\n<option value=\"1\" selected=\"selected\">En vie</option>\n<option value=\"0\">Mort</option>\n</select></td>\n</tr>\n";

		echo "<tr><td></td><td><br /><input type=\"submit\" value=\"Chercher\" /></td></tr>\n";

		echo "</table>\n";

		echo "</form>\n</fieldset>\n";

		echo "<br /><br />\n";

		echo "<fieldset>\n";

		echo "<legend><b>Attaquer un joueur</b></legend>\n";

		echo "<form method=\"get\" action=\"battle1.php?act=attack\">\n<input type=\"hidden\" name=\"act\" value=\"attack\" />\n";

		echo "Pseudo :&nbsp;&nbsp;&nbsp;<input type=\"text\" name=\"username\" /><br />\n";

		echo "<input type=\"submit\" value=\"Combattre !\" />\n";

		echo "</form>\n";

		

		

		include("templates/private_footer.php");

		break;

}

}

else {

include("templates/private_header.php");

echo "Tu ne peux pas aller ici !<br />";

echo "Sois tu es cacher, sois tu es dans une autres citer ou en prison !";

include("templates/private_footer.php");}

?>

[atra27]

Sa sent bon le code repompé!

Soit tu es caché, soit tu es dans une autres cité ou en prison !";

5! qui dis mieux?

Pour revenir sur le sujet, c'est quoi exactement ton probléme?

[niahoo]

echo "Ce joueur s'est cacher (quelle tappette) !";

Mais en plus c'est un comique !!




Bon, sinon, blingcru2, ce forum n'est pas un forum "le php pour les nuls".

Avant de faire un jeu costaud qui ne se fasse pas hacker en 5 minutes chrono, il y a un minimum de connaissances à acquérir.

Pour toi, apprendre à structurer une application pour ne pas avoir la même ligne de code 20 fois dans ta page:

include("templates/private_header.php");

apprendre à protéger les entrées, notamment $_GET/$_POST

et ne pas pondre des scripts illisibles. Crois-tu réellement que quelqu'un ici va s'amuser à essayer de comprendre tout ce fouillis ?

[Jeckel]

Rien que ça :

if (!$_GET['username']) //No username entered

		{

			header("Location: battle1.php");

			break;

		}

C'est une ENORME faille de sécurité... ceci test que tu dois avoir un "username" dans l'url, sans doute celui de l'utilisateur en cours... il suffit donc de modifier l'url avec un autre username pour... et bien pour faire autre chose que ce qui était prévu...

Sans vouloir te décourager, il y a un gros travail de relecture à faire sur ton code...

(note pour plus tard : faire un tuto PHP sur le minimum de règle de sécurité à mettre en place)

Juste comme ça, la première règle de sécurité c'est "Never trust user data", autrement dit, ne jamais faire confiances aux données reçues du client, que ce soit en GET ou en POST, toujours les vérifier, les contrôler et les filtrer avant de les utiliser.

Ca c'est le meilleure moyen pour se faire pirater sa base de données :

$db->execute("select * from `players` where `username`=?", array($_GET['username']));

[blingcru2]

Ca c'est le meilleure moyen pour se faire pirater sa base de données :

$db->execute("select * from `players` where `username`=?", array($_GET['username']));

Heum Si tu serais lire le code tu aurais compris que Nous allons chercher le Username du Joueur que nous attackons et pas l'inverse ^^

Bon me sert a rien de venir ici sa se prend pour des gros connaissant quand sa sais meme pas lire le code correctement ! lol :mauvais:

et en plus apres sa nous dis qu'on es des nul lol mais se quoi votre delire :hahahaha:

INUTILE DE REPONDRE

[Myrina]

Ca c'est le meilleure moyen pour se faire pirater sa base de données :

$db->execute("select * from `players` where `username`=?", array($_GET['username']));

Heum Si tu serais lire le code tu aurais compris que Nous allons chercher le Username du Joueur que nous attackons et pas l'inverse ^^

Bon me sert a rien de venir ici sa se prend pour des gros connaissant quand sa sais meme pas lire le code correctement ! lol :mauvais:

et en plus apres sa nous dis qu'on es des nul lol mais se quoi votre delire :hahahaha:

INUTILE DE REPONDRE

C'est quand même bien dommage de tant dénigrer des personnes qui sont prêtes à vous aider.
Il faudrait également songer à lire soigneusement les réponses apportées et tourner sa langue 7 fois dans sa bouche avant d'écrire n'importe pas.

PS: pour reprendre les propos de Jeckel, une telle faille de sécurité permet de prendre le contrôle totale de la base de données sans aucun effort en moins de 5 minutes; après, le moindre mal qu'il peut y avoir, c'est que le pirate la supprime purement et simplement. CECI N'A RIEN A VOIR AVEC LE GAMEPLAY, c'est simplement la base de la sécurité des programmes informatiques publiés sur le Web.

[blingcru2]

Ca c'est le meilleure moyen pour se faire pirater sa base de données :

$db->execute("select * from `players` where `username`=?", array($_GET['username']));

Heum Si tu serais lire le code tu aurais compris que Nous allons chercher le Username du Joueur que nous attackons et pas l'inverse ^^

Bon me sert a rien de venir ici sa se prend pour des gros connaissant quand sa sais meme pas lire le code correctement ! lol :mauvais:

et en plus apres sa nous dis qu'on es des nul lol mais se quoi votre delire :hahahaha:

INUTILE DE REPONDRE

C'est quand même bien dommage de tant dénigrer des personnes qui sont prêtes à vous aider.
Il faudrait également songer à lire soigneusement les réponses apportées et tourner sa langue 7 fois dans sa bouche avant d'écrire n'importe pas.

PS: pour reprendre les propos de Jeckel, une telle faille de sécurité permet de prendre le contrôle totale de la base de données sans aucun effort en moins de 5 minutes; après, le moindre mal qu'il peut y avoir, c'est que le pirate la supprime purement et simplement. CECI N'A RIEN A VOIR AVEC LE GAMEPLAY, c'est simplement la base de la sécurité des programmes informatiques publiés sur le Web.

Je denigre pas ses simplement moi quand on vien me traiter de si et sa j'aime pas alors je repond ainsi ! chaque poste ses toujours sa a tu connait rien etc etc sa viens soulant

T'aimerais qu'on te dis a chaque message tu connait rien va apprendre ou va te faire foutre ? ses sa qu'il disent .. en d'autre mot !

simplement je ne tolere pas sa xD


Sinon pour l'aide sans me prendre pour un con je suis toujours partant

Explique moi alors comment puis-je remedier a se probleme ? il a des tuto des info sur sa je vais prendre le temp de lire

mais perso je voi pas comment il ferais :S ??

[niahoo]

Sinon pour l'aide sans me prendre pour un con je suis toujours partant

ça semble mal barré

[Jeckel]

Partons du début... Quel est ton outil de gestion de base de donnée ? c'est à dire ici :

$db->execute(...)

D'où vient ton $db, c'est un truc maison? une librairie toute faite récupérée quelque part? la partie d'un Framework PHP éprouvé ? (Zend, Symfony, Propel, PEAR, AdoDB, etc... ?)