attack.php

<?php

session_start();
require "global_func.php";
if ($_SESSION['loggedin'] == 0)
{
    header("Location: login.php");
    exit;
}
$userid = $_SESSION['userid'];
require "header.php";
$h = new headers;
$h->startheaders();
include "mysql.php";
global $c;
$is =
        mysql_query(
                "SELECT u.*,us.* FROM users u LEFT JOIN userstats us ON u.userid=us.userid WHERE u.userid=$userid",
                $c) or die(mysql_error());
$ir = mysql_fetch_array($is);
check_level();
$fm = money_formatter($ir['money']);
$cm = money_formatter($ir['crystals'], '');
$lv = date('F j, Y, g:i a', $ir['laston']);
$h->userdata($ir, $lv, $fm, $cm, 0);
$_GET['ID'] == (int) $_GET['ID'];
if (!$_GET['ID'])
{
    print "<font color='red'>WTF you doing, bro?</font></b>";
    $h->endpage();
    exit;
}
else if ($_GET['ID'] == $userid)
{
    print "<font color='red'><b>Only the crazy attack themselves.</font></b>";
    $h->endpage();
    exit;
}
//get player data
$youdata = $ir;
$q =
        mysql_query(
                "SELECT u.*,us.* FROM users u LEFT JOIN userstats us ON u.userid=us.userid WHERE u.userid={$_GET['ID']}",
                $c);
if (mysql_num_rows($q) == 0)
{
    print
            "<b><font color='red'>This player does not exist.</font></b><br />
<a href='index.php'>&gt; Back</a>";
    $h->endpage();
    $_SESSION['attacking'] = 0;
    exit;
}
$odata = mysql_fetch_array($q);
if ($odata['hp'] == 1)
{
    print
            "<b><font color='red'>This player is unconscious.</font></b><br />
<a href='index.php'>&gt; Back</a>";
    $h->endpage();
    $_SESSION['attacking'] = 0;
    exit;
}
else if ($odata['hospital'] and $ir['hospital'] == 0)
{
    print
            "<font color='red'><b>This player is in hospital.</b><font><br />
<a href='index.php'>&gt; Back</a>";
    $h->endpage();
    $_SESSION['attacking'] = 0;
    exit;
}
else if ($ir['hospital'])
{
    print
            "<b><font color='red'>You can not attack while in hospital.</font></b><br />
<a href='hospital.php'>&gt; Back</a>";
    $h->endpage();
    $_SESSION['attacking'] = 0;
    exit;
}
print "<table width=100%><tr><td colspan=2 align=center>";
if ($_GET['wepid'])
{
    if ($_SESSION['attacking'] == 0)
    {
        if ($youdata['energy'] >= $youdata['maxenergy'] / 2)
        {

            $youdata['energy'] -= $youdata['maxenergy'] / 2;
            $me = $youdata['maxenergy'] / 2;
            mysql_query(
                    "UPDATE users SET energy=energy- {$me} WHERE userid=$userid",
                    $c);
            $_SESSION['attacklog'] = "";
        }
        else
        {
            print
                    "<font color='red'><b>You can only attack someone when you have 50% energy</font></b>";
            $h->endpage();
            exit;
        }
    }
    $_SESSION['attacking'] = 1;
    $_GET['wepid'] = (int) $_GET['wepid'];
    $_GET['nextstep'] = (int) $_GET['nextstep'];
    //damage
    $qr =
            mysql_query(
                    "SELECT * FROM inventory WHERE inv_itemid={$_GET['wepid']} and inv_userid=$userid",
                    $c);
    if (mysql_num_rows($qr) == 0)
    {
        print
                "<font color='red'>Stop trying to abuse a game bug. You can lose all your EXP for that.</font></b><br />
<a href='index.php'>&gt; Home</a>";
        mysql_query("UPDATE users SET exp=0 where userid=$userid", $c);
        die("");
    }
    $qo =
            mysql_query(
                    "SELECT i.*,w.* FROM items i LEFT JOIN weapons w ON i.itmid=w.item_id WHERE w.item_id={$_GET['wepid']}",
                    $c);
    $r1 = mysql_fetch_array($qo);
    $mydamage =
            (int) (($r1['damage'] * $youdata['strength'] / $odata['guard'])
                    * (rand(8000, 12000) / 10000));
    $hitratio = min(50 * $ir['agility'] / $odata['agility'], 95);
    if (rand(1, 100) <= $hitratio)
    {
        $q3 =
                mysql_query(
                        "SELECT a.Defence FROM inventory iv LEFT JOIN items i ON iv.inv_itemid = i.itmid LEFT JOIN armour a ON i.itmid=a.item_ID WHERE i.itmtype=7 AND iv.inv_userid={$_GET['ID']} ORDER BY rand()",
                        $c);
        if (mysql_num_rows($q3))
        {
            $mydamage -= mysql_result($q3, 0, 0);
        }
        if ($mydamage < 1)
        {
            $mydamage = 1;
        }
        $odata['hp'] -= $mydamage;
        if ($odata['hp'] == 1)
        {
            $odata['hp'] = 0;
            $mydamage += 1;
        }
        mysql_query(
                "UPDATE users SET hp=hp-$mydamage WHERE userid={$_GET['ID']}",
                $c);
        print
                "<font color=red>{$_GET['nextstep']}. Using your {$r1['itmname']} you hit {$odata['username']} doing $mydamage damage ({$odata['hp']})</font><br />\n";
        $_SESSION['attacklog'] .=
                "<font color=red>{$_GET['nextstep']}. Using his {$r1['itmname']} {$ir['username']} hit {$odata['username']} doing $mydamage damage ({$odata['hp']})</font><br />\n";
    }
    else
    {
        print
                "<font color=red>{$_GET['nextstep']}. You tried to hit {$odata['username']} but missed ({$odata['hp']})</font><br />\n";
        $_SESSION['attacklog'] .=
                "<font color=red>{$_GET['nextstep']}. {$ir['username']} tried to hit {$odata['username']} but missed ({$odata['hp']})</font><br />\n";
    }
    if ($odata['hp'] <= 0)
    {
        $odata['hp'] = 0;
        $_SESSION['attackwon'] = $_GET['ID'];
        mysql_query("UPDATE users SET hp=0 WHERE userid={$_GET['ID']}", $c);
        print
                "<form action='attackleave.php?ID={$_GET['ID']}' method='post'><input type='submit' value='Leave Them' /></form>
<form action='attackmug.php?ID={$_GET['ID']}' method='post'><input type='submit' value='Mug Them'></form>
<form action='attackhosp.php?ID={$_GET['ID']}' method='post'><input type='submit' value='Hospitalize Them'></form>";
    }
    else
    {
        //choose opp gun
        $eq =
                mysql_query(
                        "SELECT iv.*,i.*,w.* FROM inventory iv LEFT JOIN items i ON iv.inv_itemid=i.itmid LEFT JOIN weapons w ON iv.inv_itemid=w.item_id WHERE iv.inv_userid={$_GET['ID']} AND ( i.itmtype=3 OR i.itmtype=4 )",
                        $c);
        if (mysql_num_rows($eq) == 0)
        {
            $wep = "Fists";
            $dam =
                    (int) ((((int) ($odata['strength'] / 100)) + 1)
                            * (rand(8000, 12000) / 10000));
        }
        else
        {
            $cnt = 0;
            while ($r = mysql_fetch_array($eq))
            {
                $enweps[] = $r;
                $cnt++;
            }
            $weptouse = rand(0, $cnt - 1);
            $wep = $enweps[$weptouse]['itmname'];
            $dam =
                    (int) (($enweps[$weptouse]['damage'] * $odata['strength']
                            / $youdata['guard']) * (rand(8000, 12000) / 10000));
        }
        $hitratio = min(50 * $odata['agility'] / $ir['agility'], 95);
        if ($odata['userid'] == 1)
        {
            $hitratio = 100;
        }
        if (rand(1, 100) <= $hitratio)
        {
            $q3 =
                    mysql_query(
                            "SELECT a.Defence FROM inventory iv LEFT JOIN items i ON iv.inv_itemid = i.itmid LEFT JOIN armour a ON i.itmid=a.item_ID WHERE i.itmtype=7 AND iv.inv_userid=$userid ORDER BY rand()",
                            $c);
            if (mysql_num_rows($q3))
            {
                $dam -= mysql_result($q3, 0, 0);
            }
            if ($dam < 1)
            {
                $dam = 1;
            }
            $youdata['hp'] -= $dam;
            mysql_query("UPDATE users SET hp=hp-$dam WHERE userid=$userid", $c);
            $ns = $_GET['nextstep'] + 1;
            print
                    "<font color=blue>{$ns}. Using his $wep {$odata['username']} hit you doing $dam damage ({$youdata['hp']})</font><br />\n";
            $_SESSION['attacklog'] .=
                    "<font color=blue>{$ns}. Using his $wep {$odata['username']} hit {$ir['username']} doing $dam damage ({$youdata['hp']})</font><br />\n";
        }
        else
        {
            $ns = $_GET['nextstep'] + 1;
            print
                    "<font color=blue>{$ns}. {$odata['username']} tried to hit you but missed ({$youdata['hp']})</font><br />\n";
            $_SESSION['attacklog'] .=
                    "<font color=blue>{$ns}. {$odata['username']} tried to hit {$ir['username']} but missed ({$youdata['hp']})</font><br />\n";
        }
        if ($youdata['hp'] <= 0)
        {
            $youdata['hp'] = 0;
            mysql_query("UPDATE users SET hp=0 WHERE userid=$userid", $c);
            print
                    "<form action='attacklost.php?ID={$_GET['ID']}' method='post'><input type='submit' value='Continue' />";
        }
    }
}
else if ($odata['hp'] < $odata['maxhp'] / 2)
{
    print "You can only attack those who have at least 1/2 their max health";
    $h->endpage();
    exit;
}
else if ($youdata['energy'] < $youdata['maxenergy'] / 2)
{
    print "You can only attack someone when you have 50% energy";
    $h->endpage();
    exit;
}
else if ($youdata['location'] != $odata['location'])
{
    print "You can only attack someone in the same location!";
    $h->endpage();
    exit;
}
else
{
}
print "</td></tr>";
if ($youdata['hp'] <= 0 || $odata['hp'] <= 0)
{
    print "</table>";
}
else
{
    print
            "<tr><td>Your Health: {$youdata['hp']}/{$youdata['maxhp']}</td><td>Opponents Health: {$odata['hp']}/{$odata['maxhp']}</td></tr>";
    $mw =
            mysql_query(
                    "SELECT iv.*,i.* FROM inventory iv LEFT JOIN items i ON iv.inv_itemid=i.itmid WHERE iv.inv_userid=$userid AND (i.itmtype = 3 || i.itmtype = 4)",
                    $c);
    print "<tr><td colspan=2 align='center'>Attack with:<br />";
    while ($r = mysql_fetch_array($mw))
    {
        if (!$_GET['nextstep'])
        {
            $ns = 1;
        }
        else
        {
            $ns = $_GET['nextstep'] + 2;
        }
        print
                "<a href='attack.php?nextstep=$ns&amp;ID={$_GET['ID']}&amp;wepid={$r['itmid']}'>{$r['itmname']}</a><br />";
    }
    print "</table>";
}
$h->endpage();