[go: up one dir, main page]
Menu ▾ ▴

[d98cee]: / chat_add.php  Maximize  Restore  History

Download this file

63 lines (53 with data), 2.1 kB 

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
<?php

/**

 chat_add.php

   AJAX-called code to post message to chat



 Changelog:

   2.0 copyright (c) 2009-2001 by Gorlum for http://supernova.ws

     [+] Rewrote to remove unnecessary code dupes

   1.5 copyright (c) 2009-2001 by Gorlum for http://supernova.ws

     [~] More DDoS-realted fixes

   1.4 copyright (c) 2009-2001 by Gorlum for http://supernova.ws

     [~] DDoS-realted fixes

   1.3 copyright (c) 2009-2001 by Gorlum for http://supernova.ws

     [~] Security checks for SQL-injection

   1.2 by Ihor

   1.0 copyright 2008 by e-Zobar for XNova

*/



define('INSIDE'  , true);

define('INSTALL' , false);



$doNotUpdateFleet = true;



$ugamela_root_path = (defined('SN_ROOT_PATH')) ? SN_ROOT_PATH : './';

$phpEx = substr(strrchr(__FILE__, '.'), 1);

include("{$ugamela_root_path}common.{$phpEx}");



if ($IsUserChecked == false) {

  includeLang('login');

  header("Location: login.php");

}



if($config->array_get('users', $user['id'], 'chat_lastUpdate') + $config->chat_timeout < $time_now && $config->_MODE != CACHER_NO_CACHE)

  die();



$msg = SYS_mysqlSmartEscape ($_POST["msg"]);

$chat_type = SYS_mysqlSmartEscape($_GET['chat_type'] ? $_GET['chat_type'] : $_POST['chat_type']);

$ally_id = $user['ally_id'];



// On récupère les informations du message et de l'envoyeur

if ($msg && $user['username']) {

   if ($user['authlevel'] == 3) {

     $msg = preg_replace("#\[c=(white|blue|yellow|green|pink|red|orange)\](.+)\[/c\]#isU", $config->chat_admin_msgFormat, $msg);

   }

   $nick = addslashes ($user['username']);

   if($ally_id && $chat_type != 'ally'){

     $tag = doquery("SELECT ally_tag FROM {{alliance}} WHERE id = {$user['ally_id']}", '', true);

     $nick .= addslashes ("(" . $tag['ally_tag'] . ")");

   };

   $msg = iconv('UTF-8', 'CP1251', $msg); // CHANGE IT !!!!!!!!!!!

} else {

   $msg="";

   $nick="";

}



if ($msg && $nick) {

  if($chat_type!="ally" || !$ally_id)

    $ally_id = 0;



  $query = doquery("INSERT INTO {{chat}} (user, ally_id, message, timestamp) VALUES ('{$nick}','{$ally_id}','{$msg}', '{$time_now}');");

  $config->array_set('users', $user['id'], 'chat_lastUpdate', $time_now);

}

?>