rendered paste body<?phprequire 'memory.php';require 'header.inc';check_auth($_SERVER['PHP_SELF']); // checks for required accessif (is_online($STORED_id)) { redir("login.php","You can't modify your roster while you're logged in the game!");}//CHECKSEX $query = sprintf(CHECK_SEX_BY_ID,$STORED_id); $result = execute_query($query, "roster.php"); if ($result->RowCount() == 0) { echo ("BIG_ERROR_1"); } $line = $result->FetchRow(); $STORED_sex = "$line[0]";//PALASX SET POSE$pose=rand(0,2);$pose_array = array('sit','sta','fig');$pose=$pose_array[$pose];if (!$POST_action) { EchoHead(80); echo " <tr class=mytitle> <td colspan=3>Character Roster</td> </tr> <tr class=myheader> <td>Slot</td> <td>Name Info Equippment</td> <td>Inventory</td> </tr> "; //ORIGINAL ROSTER-------------------------------------------------------------------------- $z_var = 0; $query = sprintf(GET_ROSTER_CHARS, $STORED_id); $result = execute_query($query, "roster.php"); if ($result->RowCount() == 0) { redir("index.php", "You must have at least 1 character to use the roster!"); } while ($line = $result->FetchRow()) { echo "<tr class=mycell>\n"; foreach ($line as $display_index => $col_value) { if ($display_index == 0) { $char_slot = $col_value; if ($col_value > 100) { $col_value -= 100; } } elseif ($display_index == 1) { $A = $col_value; continue; } elseif ($display_index == 2) { $char_class = $col_value; if($char_class >= 4023 && $char_class <= 4044){$char_class -= 4023;} if($char_class == 4045){$char_class = 23;} $col_value = determine_class($col_value); $B = $col_value; continue; } elseif ($display_index == 3) { $C = $col_value; continue; } elseif ($display_index == 4) { $D = $col_value; continue; } elseif ($display_index == 5) { $E = $col_value; continue; } elseif ($display_index == 6) { $F = $col_value; continue; } elseif ($display_index == 7) { $G = $col_value; continue; } elseif ($display_index == 8) { $H = $col_value; continue; } elseif ($display_index == 9) { $I = $col_value; continue; } elseif ($display_index == 10) { $J = $col_value; continue; } elseif ($display_index == 11) { $K = $col_value; continue; } elseif ($display_index == 12) { $L = $col_value; continue; } elseif ($display_index == 13) { $M = $col_value; continue; } elseif ($display_index == 14) { $N = $col_value; continue; } elseif ($display_index == 15) { $O = $col_value; continue; } elseif ($display_index == 16) { $P = $col_value; continue; } elseif ($display_index == 17) { $Q = $col_value; $Guild_Name = GuildID_To_GuildName($F); echo '<td valign="top"> <div align="left" style="position:relative; top:0px; left:0px; width:280px; height:137px;"> <span style="z-index:3; position:relative; left:0px; top:0px;"><img src="'.$CONFIG[image_folder].'/char/bg/basewin_bg.gif"></span> <span style="z-index:4; position:absolute; left:5px; top:1px;">Name: '.$A.'</span> <span style="z-index:4; position:absolute; left:5px; top:17px; float:right;">Lvl.'.$C.' / '.$B.' / Lvl.'.$D.'</span> <span style="z-index:4; position:absolute; left:180px; top:1px;">Zeny:'.$E.'</span> <span style="z-index:4; position:absolute; left:55px; top:37px;">'.$G.'</span> <span style="z-index:4; position:absolute; left:55px; top:53px;">'.$H.'</span> <span style="z-index:4; position:absolute; left:55px; top:69px;">'.$I.'</span> <span style="z-index:4; position:absolute; left:55px; top:85px;">'.$J.'</span> <span style="z-index:4; position:absolute; left:55px; top:101px;">'.$K.'</span> <span style="z-index:4; position:absolute; left:55px; top:117px;">'.$L.'</span> <span style="z-index:4; position:absolute; left:174px; top:38px;">'.$M.'</span> <span style="z-index:4; position:absolute; left:174px; top:53px;">'.$N.'</span> <span style="z-index:4; position:absolute; left:165px; top:70px;"><b>'.$Guild_Name.'</b></span> <span style="z-index:4; position:absolute; left:127px; top:102px;">'.$O.'</span> <span style="z-index:4; position:absolute; left:127px; top:115px;">x: '.$P.', y: '.$Q.'</span> </div>'; continue; } elseif ($display_index == 18) { $char_hair = $col_value; if($char_hair<1){$char_hair=1;} continue; } elseif ($display_index == 19) { $char_color = $col_value % 9; continue; } elseif ($display_index == 20) { $char_top = $col_value; continue; } elseif ($display_index == 21) { $char_mid = $col_value; continue; } elseif ($display_index == 22) { $char_bot = $col_value; continue; } elseif ($display_index == 23) { $char_id = $col_value; //fill $COL_VALUE with out image DIV/SPAN combo. $job_gif = sprintf('<img src="%s/char/%s/job_%d_sta.gif"> ', $CONFIG['image_folder'], $STORED_sex, $char_class); $hair_gif = sprintf('<img src="%s/char/%s/hair_%03d_%02d.gif"> ', $CONFIG['image_folder'], $STORED_sex, $char_hair, $char_color); $top_gif = sprintf('<img src="%s/char/%s/helm_01_%d.gif"> ', $CONFIG['image_folder'], $STORED_sex, $char_top); $mid_gif = sprintf('<img src="%s/char/%s/helm_02_%d.gif"> ', $CONFIG['image_folder'], $STORED_sex, $char_mid); $bot_gif = sprintf('<img src="%s/char/%s/helm_03_%d.gif"> ', $CONFIG['image_folder'], $STORED_sex, $char_bot); $head_x = 100; $head_y = 10; if($STORED_sex == 'F'){$head_x = 95;} if (!file_exists(sprintf('%s/char/%s/helm_01_%d.gif', $CONFIG['image_folder'], $STORED_sex, $char_top))){$top_gif=" ";} if (!file_exists(sprintf('%s/char/%s/helm_02_%d.gif', $CONFIG['image_folder'], $STORED_sex, $char_mid))){$mid_gif=" ";} if (!file_exists(sprintf('%s/char/%s/helm_03_%d.gif', $CONFIG['image_folder'], $STORED_sex, $char_bot))){$bot_gif=" ";} $col_value = ' <div align="left" style="position:relative; top:0px; left:0px; width:280px;"> <span style="z-index:9; position:relative; left:0px; top:0px;"><img src="'.$CONFIG[image_folder].'/char/bg/equipwin_bg.gif"></span> <span style="z-index:10; position:absolute; left:5px; top:1px;">Equipment</span> <span style="z-index:10; position:absolute; left:50px; top:'.$head_y.'px;">'.$job_gif.'</span> <span style="z-index:11; position:absolute; left:'.$head_x.'px; top:'.($head_y + 3).'px;">'.$hair_gif.'</span> <span style="z-index:12; position:absolute; left:'.$head_x.'px; top:'.($head_y - 2).'px;">'.$top_gif.'</span> <span style="z-index:13; position:absolute; left:'.$head_x.'px; top:'.($head_y - 1).'px;">'.$mid_gif.'</span> <span style="z-index:14; position:absolute; left:'.$head_x.'px; top:'.($head_y - 1).'px;">'.$bot_gif.'</span> '; echo "$col_value\n";//---Inventory MGMT------------------------------------------------------------------------- $query_inv = sprintf(GET_INVENTORY, $char_id); $result_inv = execute_query($query_inv, "roster.php"); while ($line_inv = $result_inv->FetchRow()) { foreach ($line_inv as $display_index_inv => $col_value_inv) { if ($display_index_inv == 0) { $A = $col_value_inv; continue; } elseif ($display_index_inv == 1) { $B = $col_value_inv; continue; } elseif ($display_index_inv == 2) { $C = $col_value_inv; continue; } elseif ($display_index_inv == 3) { $D = $col_value_inv; continue; } elseif ($display_index_inv == 4) { $E = $col_value_inv; if ($E) { $E = "+$E"; } else { $E = ""; } $Inv_Name = ItemID_To_ItemName($B); $Inv_Name = str_replace("'", "\'", $Inv_Name); $inv_pic = '<img src="'.$CONFIG[image_folder].'/item/small/'.$B.'.gif" onmouseover="this.T_OFFSETY=25;this.T_WIDTH=80;return escape(\''.$Inv_Name.' '.$E.'<br><img src='.$CONFIG[image_folder].'/item/large/'.$B.'.gif>\')">'; switch($D){ case 1: echo '<span style="z-index:15; position:absolute; left:5px; top:42px;">'.$inv_pic.'</span><span style="width:85px; line-height:130%; font-size: 7pt; z-index:15; position:absolute; left:30px; top:42px;">'.$E.' '.$Inv_Name.'</span>'; break; case 2: echo '<span style="z-index:15; position:absolute; left:5px; top:70px;">'.$inv_pic.'</span><span style="width:85px; line-height:130%; font-size: 7pt; z-index:15; position:absolute; left:30px; top:68px;">'.$E.' '.$Inv_Name.'</span>'; break; case 4: echo '<span style="z-index:15; position:absolute; left:5px; top:97px;">'.$inv_pic.'</span><span style="width:85px; line-height:130%; font-size: 7pt; z-index:15; position:absolute; left:30px; top:95px;">'.$E.' '.$Inv_Name.'</span>'; break; case 8: echo '<span style="z-index:15; position:absolute; left:5px; top:124px;">'.$inv_pic.'</span><span style="width:85px; line-height:130%; font-size: 7pt; z-index:15; position:absolute; left:30px; top:122px;">'.$E.' '.$Inv_Name.'</span>'; break; case 16: echo '<span style="z-index:15; position:absolute; left:250px; top:44px;">'.$inv_pic.'</span><span style="width:85px; line-height:130%; font-size: 7pt; z-index:15; position:absolute; left:175px; top:42px;">'.$E.' '.$Inv_Name.'</span>'; break; case 32: echo '<span style="z-index:15; position:absolute; left:250px; top:70px;">'.$inv_pic.'</span><span style="width:85px; line-height:130%; font-size: 7pt; z-index:15; position:absolute; left:175px; top:68px;">'.$E.' '.$Inv_Name.'</span>'; break; case 34: echo '<span style="z-index:15; position:absolute; left:5px; top:70px;">'.$inv_pic.'</span><span style="width:85px; line-height:130%; font-size: 7pt; z-index:15; position:absolute; left:30px; top:68px;">'.$E.' '.$Inv_Name.'</span>'; echo '<span style="z-index:15; position:absolute; left:250px; top:70px;">'.$inv_pic.'</span><span style="width:85px; line-height:130%; font-size: 7pt; z-index:15; position:absolute; left:175px; top:68px;">'.$E.' '.$Inv_Name.'</span>'; break; case 64: echo '<span style="z-index:15; position:absolute; left:250px; top:97px;">'.$inv_pic.'</span><span style="width:85px; line-height:130%; font-size: 7pt; z-index:15; position:absolute; left:175px; top:95px;">'.$E.' '.$Inv_Name.'</span>'; break; case 128: echo '<span style="z-index:15; position:absolute; left:250px; top:124px;">'.$inv_pic.'</span><span style="width:85px; line-height:130%; font-size: 7pt; z-index:15; position:absolute; left:175px; top:122px;">'.$E.' '.$Inv_Name.'</span>'; break; case 256: echo '<span style="z-index:15; position:absolute; left:5px; top:19px;">'.$inv_pic.'</span><span style="width:85px; line-height:130%; font-size: 7pt; z-index:15; position:absolute; left:30px; top:17px;">'.$E.' '.$Inv_Name.'</span>'; break; case 257: echo '<span style="z-index:15; position:absolute; left:5px; top:19px;">'.$inv_pic.'</span><span style="width:85px; line-height:130%; font-size: 7pt; z-index:15; position:absolute; left:30px; top:17px;">'.$E.' '.$Inv_Name.'</span> <span style="z-index:15; position:absolute; left:5px; top:44px;">'.$inv_pic.'</span><span style="width:85px; line-height:130%; font-size: 7pt; z-index:15; position:absolute; left:30px; top:42px;">'.$E.' '.$Inv_Name.'</span>'; break; case 512: echo '<span style="z-index:15; position:absolute; left:250px; top:19px;">'.$inv_pic.'</span><span style="width:85px; line-height:130%; font-size: 7pt; z-index:15; position:absolute; left:175px; top:17px;">'.$E.' '.$Inv_Name.'</span>'; break; case 513: echo ' <span style="z-index:15; position:absolute; left:250px; top:19px;">'.$inv_pic.'</span><span style="width:85px; line-height:130%; font-size: 7pt; z-index:15; position:absolute; left:175px; top:17px;">'.$E.' '.$Inv_Name.'</span> <span style="z-index:15; position:absolute; left:5px; top:44px;">'.$inv_pic.'</span><span style="width:85px; line-height:130%; font-size: 7pt; z-index:15; position:absolute; left:30px; top:42px;">'.$Inv_Name.'</span>'; break; case 768: echo ' <span style="z-index:15; position:absolute; left:5px; top:19px;">'.$inv_pic.'</span><span style="width:85px; line-height:130%; font-size: 7pt; z-index:15; position:absolute; left:30px; top:17px;">'.$E.' '.$Inv_Name.'</span> <span style="z-index:15; position:absolute; left:250px; top:19px;">'.$inv_pic.'</span><span style="width:85px; line-height:130%; font-size: 7pt; z-index:15; position:absolute; left:175px; top:17px;">'.$E.' '.$Inv_Name.'</span>'; break; case 769: echo ' <span style="z-index:15; position:absolute; left:5px; top:44px;">'.$inv_pic.'</span><span style="width:85px; line-height:130%; font-size: 7pt; z-index:15; position:absolute; left:30px; top:42px;">'.$E.' '.$Inv_Name.'</span> <span style="z-index:15; position:absolute; left:5px; top:19px;">'.$inv_pic.'</span><span style="width:85px; line-height:130%; font-size: 7pt; z-index:15; position:absolute; left:30px; top:17px;">'.$E.' '.$Inv_Name.'</span> <span style="z-index:15; position:absolute; left:250px; top:19px;">'.$inv_pic.'</span><span style="width:85px; line-height:130%; font-size: 7pt; z-index:15; position:absolute; left:175px; top:17px;">'.$E.' '.$Inv_Name.'</span>'; break; default: $inv_array[] = $B; $amt_array[] = $C; $ref_array[] = $E; break; } } } } echo "\n</div>\n<br>"; echo ' <FORM action="roster.php" method="post"> <input name="charid" type="hidden" class="myctl" value="'.$char_id.'"></input> <input name="action" type="submit" class="myctl" value="Unequip Everything And Reset View!"></input> </FORM> '; echo "<br><br>\n</td>\n<td valign=top>\n"; echo ' <div style="position:relative; top:0px; left:0px; width:280px; background-color:#FFFFFF;"> <img src="'.$CONFIG[image_folder].'/char/bg/titlebar_bg.gif"><br>'; if($inv_array){ $j = 0; foreach ($inv_array as $inv_value) { $Inv_Name = ItemID_To_ItemName($inv_value); $Inv_Name = str_replace("'", "\'", $Inv_Name); $inv_pic = '<img src="'.$CONFIG[image_folder].'/item/small/'.$inv_value.'.gif" onmouseover="this.T_OFFSETY=25;this.T_WIDTH=80;return escape(\''.$Inv_Name.' '.$ref_array[$j].'<br><img src='.$CONFIG[image_folder].'/item/large/'.$inv_value.'.gif><br>Amount: '.$amt_array[$j].'\')">'; echo '<span style="width:32px; height:32px; background-image: url('.$CONFIG['image_folder'].'/char/bg/itemwin_bg.gif); background-repeat: no; float:left;">' . $inv_pic . '</span>'; echo "\n"; $j++; } } echo "\n</div>\n\n\n\n\n"; unset($inv_array); unset($amt_array); unset($ref_array); continue; } if ($char_slot >= 0 && $char_slot <= 9) { echo "<td><b>$col_value</b></td>\n"; } else { echo "<td>$col_value</td>\n"; } }echo "\n</td>";//------------------------------------------------------------------------------------------ echo "</tr>\n"; } echo "</table>\n"; EchoHead(80); echo " <tr class=mytitle> <td>What would you like to do?</td> </tr> <tr class=mycell> <td> <form action=\"\" method=\"POST\"> Switch Slot <input type=\"text\" name=\"slot1\" class=myctl maxlength=2 style=\"width:10px\"></input> with slot <input type=\"text\" name=\"slot2\" class=myctl maxlength=2 style=\"width:10px\"></input> </select> <input type=\"submit\" name=\"action\" class=myctl value=\"Swap!\"> </td> </tr> </table> ";}elseif ($POST_action == "Swap!") { if ((!$POST_slot1) || (!$POST_slot2)) { redir("roster.php", "Both character slots not entered"); } elseif ($POST_slot1 == $POST_slot2) { redir("roster.php", "Both character slots are the same"); } elseif (!is_numeric($POST_slot1) || !is_numeric($POST_slot2)) { add_exploit_entry("Used $POST_slot1 & $POST_slot2 as illegal input!"); redir("roster.php", "Invalid character slots selected"); } elseif (($POST_slot1 > $CONFIG_max_characters) || ($POST_slot2 > $CONFIG_max_characters)) { add_exploit_entry("Used $POST_slot1 & $POST_slot2 as illegal input!"); redir("roster.php", "Invalid character slots selected"); } //Check for GID of first char $query = sprintf(GET_ROSTER_GID, $POST_slot1, $STORED_id); $result = execute_query($query, "roster.php"); if ($result->RowCount() > 0) { $GID1 = $result->fields[0]; } else { $GID1 = 0; } //Check for GID of second char $query = sprintf(GET_ROSTER_GID, $POST_slot2, $STORED_id); $result = execute_query($query, "roster.php"); if ($result->RowCount() > 0) { $GID2 = $result->fields[0]; } else { $GID2 = 0; } if ($GID1 == 0 AND $GID2 == 0) { // Swapping two empty slots redir("roster.php", "You can't swap two empty slots!"); } elseif ($GID1 > 0 AND $GID2 == 0) { // Swapping active character to blank spot $query = sprintf(MOVE_ROSTER, $POST_slot2, $GID1, $STORED_id); $result = execute_query($query, "roster.php"); add_user_entry("Switched Slot $POST_slot1 with $POST_slot2"); redir("roster.php", "Character moved from active to reserve roster successfully"); } elseif ($GID1 == 0 AND $GID2 > 0) { // Swapping inactive character to blank spot $query = sprintf(MOVE_ROSTER, $POST_slot1, $GID2, $STORED_id); $result = execute_query($query, "roster.php"); add_user_entry("Switched Slot $POST_slot1 with $POST_slot2"); redir("roster.php", "Character moved from reserve to active roster successfully"); } elseif ($GID1 > 0 AND $GID2 > 0) { // Swapping active character with another active character $query = sprintf(MOVE_ROSTER, $POST_slot2, $GID1, $STORED_id); $result = execute_query($query, "roster.php"); $query = sprintf(MOVE_ROSTER, $POST_slot1, $GID2, $STORED_id); $result = execute_query($query, "roster.php"); add_user_entry("Switched Slot $POST_slot1 with $POST_slot2"); redir("roster.php", "Characters swapped between active and reserve successfully"); } else { add_exploit_entry("Used $POST_slot1 & $POST_slot2 as illegal input!"); redir("roster.php", "Invalid character slots selected"); }}elseif ($POST_action == "Unequip Everything!") { $query = sprintf(UNEQUIP_ALL, $POST_charid); $result = execute_query($query, "roster.php"); $queryA = sprintf(UNHATVIEW_ALL, $POST_charid); $resultA = execute_query($queryA, "roster.php"); redir("roster.php", "Your character is now naked.");}require 'footer.inc';?>