ياريت من المشرف يمسح الموصوع دة والله السيت كلو .php و انا كنت حطو و اخترقني و عمل لنفسو user و رفع الداتا بتعتي ع elitepvpers
guildshow.php
<aside id="right">
<article>
<h1 class="top">Guild View</h1>
<section class="body">
<center><br /><br />
<?php
mssql_select_db($gamedb);
if($fnc->secure($_GET['name'], 3))
{
if($fnc -> numRows("select * from _Guild where Name='$_GET[name]'") == 0)
{
echo "Guild with such name not found.";
}
else
{
$GuildData = $fnc->fetchArray($fnc->exec("select * from _Guild where Name='$_GET[name]'"));
$GuildMembers = $fnc -> exec("select * from _GuildMember where GuildID='$GuildData[ID]' order by MemberClass asc,Contribution DESC,GuildWarKill DESC,CharLevel DESC,GP_Donation DESC");
/*
for guild Gold add those lines :
<td align='center'>Gold</td>
<td align='center'>$GuildData[Gold]</td>
*/?>
<table class="nice_table" width='90%' border='0' align='center' cellpadding='0' cellspacing='0'>
<tr>
<td ><b>Name</b></td>
<td ><b class="color-green"><?php echo $GuildData[Name];?></b></td>
</tr>
<tr>
<td ><b>Level</b></td>
<td ><?php echo $GuildData[Lvl];?></td>
</tr>
<tr>
<td ><b>Points</b></td>
<td ><?php echo $GuildData[GatheredSP];?></td>
</tr>
<tr>
<td ><b>Foundation</b></td>
<td ><?php echo $GuildData[FoundationDate];?></td>
</tr>
</table>
<table class="nice_table" width='90%' border='0' align='center' cellpadding='0' cellspacing='0'>
<tr>
<td width='5%' ><b>#</td>
<td width='5%' ><b>Race</b></td>
<td width='15%' ><b>Charname</b></td>
<td width='15%' ><b>Nick</b></td>
<td width='10%' ><b>Level</b></td>
<td width='15%' ><b>Donation</b></td>
<td width='15%' ><b>Guild War Kills</b></td>
<td width='15%' ><b>Guild War Killed</b></td>
<td width='5%' ><b>Type</b></td>
</tr>
<?php $n = 1;
while($row = mssql_fetch_array($GuildMembers))
{
$cName = $fnc->charnameByCharID($row['CharID']);
$szNickname = "";
$nRefObjID = $fnc -> getRow("select RefObjID from _Char where CharName16='$cName'");
$icon = "".Race($nRefObjID)."";
$memberType = "";
if($row['MemberClass'] == 0) $memberType = "<font class='color-red'>Master</font>";
else
$memberType = "Member";
if(empty($row['Nickname'])) $szNickname = "<font color='blue'>NONE</font>";
else $szNickname = $row['Nickname'];?>
<tr>
<td ><?php echo $n;?></td>
<td ><?php echo $icon;?></td>
<td ><a target="_blank" href='?page=itemrank&name=<?php echo $cName;?>'><b class="color-green"><?php echo $cName;?></a></td>
<td ><?php echo $szNickname;?></td>
<td ><?php echo $row[CharLevel];?></td>
<td ><?php echo $row[GP_Donation];?></td>
<td ><?php echo $row[GuildWarKill];?></td>
<td ><?php echo $row[GuildWarKilled];?></td>
<td ><?php echo $memberType;?></td>
</tr>
<? $n++;
}
echo "</table>";
}
} else echo "Invalid guild name.";
?>
</tr>
</table>
<table width='90%' border='0' align='center' cellpadding='0' cellspacing='0'>
<tr>
<center><td ><a href="?page=ranking">Click Here To Back To Ranking Page .</a></td>
</tr>
</table>
<br /><br /></center>
</section>
</article>
</aside>
itemrank.php
<?php
if(realpath(__FILE__) == realpath($_SERVER['SCRIPT_FILENAME'])) {
header('HTTP/1.0 404 Not Found');
exit;
}
?>
<aside id="right">
<article>
<h1 class="top"># <?php Echo"$servername";?> , View Player Items</h1>
<section class="body">
<center><br /><br />
<table width='90%' border='0' align='center' cellpadding='0' cellspacing='0'>
<tr>
<td class="down"><b>Char Name</b></td>
<td class="down"><b>Image</b></td>
<td class="down"><b>Item Name</b></td>
<td class="down"><b>Type</b></td>
<td class="down"><b>Level</b></td>
<td class="down"><b>Plus Value</b></td>
</tr>
<?php
if(isset($_GET['name']) && addslashes($fnc->secure($_GET['name'])))
{
$nCharName = $_GET['name'];
mssql_select_db($gamedb);
$query = $fnc->exec("
select it.OptLevel, ch.RefObjID, ch.CharName16, obj.AssocFileIcon128, obj.Country, obj.CodeName128 ,obj.ReqLevel1 , item.ItemClass , adv.nOptValue ,es.EndTextString
from _Items as it
LEFT JOIN [dbo].[_Inventory] as inv ON it.ID64 = inv.ItemID
LEFT JOIN [dbo].[_Char] as ch ON inv.CharID = ch.CharID
LEFT JOIN [dbo].[_RefObjCommon] as obj ON it.RefItemID = obj.ID
LEFT JOIN [dbo].[_RefObjItem] as item ON obj.Link = item.ID
LEFT JOIN [dbo].[_BindingOptionWithItem] as adv ON it.ID64 = adv.nItemDBID
LEFT JOIN [dbo].[C_EquipStrings] as es on obj.NameStrID128 = es.TextString
where ch.CharName16 = '$nCharName' and inv.Slot between 0 and 12 and inv.Slot != 8
") or die (mssql_get_last_message());
$charObj = $fnc->fetchArray($query);
echo '<img src="image.php?faces='.$charObj['RefObjID'].'.GIF" alt="" /></img>';
while ($row = $fnc->fetchArray($query)){
echo '<tr>';
echo '<td class="down2">'.$row['CharName16'].'</td>';
if($row['AssocFileIcon128'] == 'xxx'){
echo '<td class="down2"><img src="image.php?item=item\clean.png" width="32" height="32" alt=""/></td>';
} else {
echo '<td class="down2"><img src="image.php?item='.$row['AssocFileIcon128'].'.png" width="32" height="32" alt=""/></td>';
}
if($row['CodeName128'] == 'DUMMY_OBJECT'){
echo '<td class="down2">-</td>';
} else {
echo '<td class="down2">'.$row['EndTextString'].'</td>';
}
$totalvalue = $row['OptLevel']+$row['nOptValue'];
$advonly = $row['nOptValue'];
if($row['CodeName128'] == 'ITEM_ETC_AMMO_ARROW_01' || $row['CodeName128'] == 'ITEM_ETC_AMMO_BOLT_01' || $row['CodeName128'] == 'DUMMY_OBJECT'){
echo '<td class="down2">-</td>';
} else {
$itemclass = $row['ItemClass'];
switch($itemclass) {
case 27:
echo '<td class="down2">Normal</td>';
break;
case 28:
echo '<td class="down2">Seal Of Star</td>';
break;
case 29:
echo '<td class="down2">Seal Of Moon</td>';
break;
case 30:
echo '<td class="down2">Seal Of Sun</td>';
break;
default:
echo '<td class="down2">Normal</td>';
break;
}}
if($row['CodeName128'] == 'ITEM_ETC_AMMO_ARROW_01' || $row['CodeName128'] == 'ITEM_ETC_AMMO_BOLT_01' || $row['CodeName128'] == 'DUMMY_OBJECT'){
echo '<td class="down2">-</td>';
} else {
echo '<td class="down2">'.$row['ReqLevel1'].'</td>';
}
if($row['CodeName128'] == 'ITEM_ETC_AMMO_ARROW_01' || $row['CodeName128'] == 'ITEM_ETC_AMMO_BOLT_01' || $row['CodeName128'] == 'DUMMY_OBJECT'){
echo '<td class="down2">-</td>';
} else {
echo '<td class="down2">'.$totalvalue.'';
switch($advonly) {
case "NULL":
break;
case 1:
echo '+(1) ADV</td>';
break;
case 2:
echo '+(2) ADV</td>';
break;
}}
echo '</tr>';
}
}
else {
echo 'Character Name Is invalid.';
}
?>
</table>
<table width='90%' border='0' align='center' cellpadding='0' cellspacing='0'>
<tr>
<td class="down2"><a href="?page=ranking">Click Here To Back To Ranking Page .</a></td>
</tr>
</table>
<br /><br /></center>
</section>
</article>
</aside>
يا ريت تجيب دليل قبل لما تقول حاجة زى كدة