FilesExpand file tree

master

/

attackmug.php

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

executable file

·

100 lines (97 loc) · 3.48 KB

master

/

attackmug.php

Copy path

Top

File metadata and controls

• Code
• Blame

executable file

·

100 lines (97 loc) · 3.48 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

<?php

session_start();

require "global_func.php";

if ($_SESSION['loggedin'] == 0)

{

header("Location: login.php");

exit;

}

$userid = $_SESSION['userid'];

require "header.php";

$h = new headers;

$h->startheaders();

include "mysql.php";

global $c;

$is =

mysql_query(

"SELECT u.*,us.* FROM users u LEFT JOIN userstats us ON u.userid=us.userid WHERE u.userid=$userid",

$c) or die(mysql_error());

$ir = mysql_fetch_array($is);

check_level();

$fm = money_formatter($ir['money']);

$cm = money_formatter($ir['crystals'], '');

$lv = date('F j, Y, g:i a', $ir['laston']);

$h->userdata($ir, $lv, $fm, $cm, 0);

$h->menuarea();

$_GET['ID'] = abs((int) $_GET['ID']);

$_SESSION['attacking'] = 0;

$od = mysql_query("SELECT * FROM users WHERE userid={$_GET['ID']}", $c);

if ($_SESSION['attackwon'] != $_GET['ID'])

{

die("Cheaters don't get anywhere.");

}

if (mysql_num_rows($od))

{

$r = mysql_fetch_array($od);

if ($r['hp'] == 1)

{

print "What a cheater u are.";

}

else

{

$stole = (int) (rand($r['money'] / 500, $r['money'] / 20));

print "You beat {$r['username']} and stole \$$stole";

$qe = $r['level'] * $r['level'] * $r['level'];

$expgain = rand($qe / 4, $qe / 2);

$expperc = (int) ($expgain / $ir['exp_needed'] * 100);

print " and gained $expperc% EXP!";

mysql_query(

"UPDATE users SET exp=exp+$expgain,money=money+$stole WHERE userid=$userid",

$c);

mysql_query(

"UPDATE users SET hp=1,money=money-$stole WHERE userid={$r['userid']}",

$c);

event_add($r['userid'],

"<a href='viewuser.php?u=$userid'>{$ir['username']}</a> attacked you and stole $stole.",

$c);

mysql_query(

"UPDATE users SET hp=1,hospital=hospital+20+(rand()*20),hospreason='Attacked by <a href=\'viewuser.php?u={$userid}\'>{$ir['username']}</a>' WHERE userid={$r['userid']}",

$c);

$atklog = mysql_escape_string($_SESSION['attacklog']);

mysql_query(

"INSERT INTO attacklogs VALUES(NULL,$userid,{$_GET['ID']},'won',"

. time() . ",$stole,'$atklog');", $c);

$_SESSION['attackwon'] = 0;

$bots = array(2477, 2479, 2480, 2481, 263, 264, 265);

$moneys =

array(2477 => 80000, 2479 => 30000, 2480 => 30000,

2481 => 30000, 263 => 10000, 264 => 10000,

265 => 15000, 536 => 100000, 720 => 1400000,

721 => 1400000, 722 => 1400000, 585 => 5000000,

820 => 10000000);

if (in_array($r['userid'], $bots))

{

$qk =

mysql_query(

"SELECT * FROM challengesbeaten WHERE userid=$userid AND npcid={$r['userid']}",

$c);

if (!mysql_num_rows($qk))

{

$gain = $moneys[$r['userid']];

mysql_query(

"UPDATE users SET money=money+$gain WHERE userid=$userid",

$c);

mysql_query(

"INSERT INTO challengesbeaten VALUES ($userid,{$r['userid']})",

$c);

print

"<br /><br />Congrats, for beating the Challenge Bot {$r['username']}, you have earnt \$$gain!";

}

}

}

}

else

{

print "You beat Mr. non-existant!";

}

$h->endpage();