All pastes #80716 Raw Edit

Martindale

public php v1 · immutable
·published 2006-07-06 19:13 UTC
rendered paste body
		// --------------------		//  What shall we do?		//		if ( $valsubm )		{			$message = ( !empty($HTTP_POST_VARS['message']) ) ? htmlspecialchars(trim(stripslashes($HTTP_POST_VARS['message']))) : '';			$winner_id = ( !empty($HTTP_POST_VARS['winner_id']) ) ? $HTTP_POST_VARS['winner_id'] : '';			$sql='';			// When a player is validating			if ( !empty($HTTP_POST_VARS['validate_single_user']) && empty($HTTP_POST_VARS['validate_game']) )			{				$game_id = $HTTP_POST_VARS['validate_single_user'];				$sql = "SELECT player_id, player_b_id, winner_id, winner_b_id 					FROM " . GAMES_TABLE . " 					WHERE game_id = " . $game_id;				if ( $result = $db->sql_query($sql) )				{					$game_info = $db->sql_fetchrow($result);					$db->sql_freeresult($result);				}				else				{					message_die(GENERAL_MESSAGE, $lang['Games_Game_Not_Excists']);				}				$sql = '';				if ( empty($game_info['winner_id']) && empty($game_info['winner_b_id']) )				{					if ( $userdata['user_id'] == $game_info['player_id'] )					{						$sql = "UPDATE " . GAMES_TABLE . " SET winner_id = " . $winner_id . ", comment = '" . $message . "' WHERE game_id = " . $game_id;					}					else if ( $userdata['user_id'] == $game_info['player_b_id'] )					{						$sql = "UPDATE " . GAMES_TABLE . " SET winner_b_id = " . $winner_id . ", comment_b = '" . $message . "'  WHERE game_id = " . $game_id;					}				}				else if ( empty($game_info['winner_id']) && !empty($game_info['winner_b_id']) )				{					if ( $userdata['user_id'] == $game_info['player_id'] )					{						$sql = "UPDATE " . GAMES_TABLE . " SET winner_id = " . $winner_id . ", comment = '" . $message . "' WHERE game_id = " . $game_id;					}				}				else if ( !empty($game_info['winner_id']) && empty($game_info['winner_b_id']) )				{					if ( $userdata['user_id'] == $game_info['player_b_id'] )					{						$sql = "UPDATE " . GAMES_TABLE . " SET winner_b_id = " . $winner_id . ", comment_b = '" . $message . "'  WHERE game_id = " . $game_id;					}				}				else				{					message_die(GENERAL_MESSAGE, $lang['Games_Validated_Yet']);				}			}			// When moderator is validating			else if ( !empty($HTTP_POST_VARS['validate_game']) && empty($HTTP_POST_VARS['validate_single_user']) )			{				$game_id = $HTTP_POST_VARS['validate_game'];				if ( !$is_mod )				{					die('Hacking attempt');									}				$sql = "UPDATE " . GAMES_TABLE . " SET winner_id = " . $winner_id . ", winner_b_id = " . $winner_id . ", comment = '" . $message . "', comment_b = '" . $message . "' WHERE game_id = " . $game_id;			}			if ( empty($sql) )			{				die('Hacking attempt');			}			if (!$db->sql_query($sql, BEGIN_TRANSACTION))			{				message_die(GENERAL_ERROR, 'Error in games table update', '', __LINE__, __FILE__, $sql);			}			// If both winners are validated, end the game (= make reply in topic and change some database stuff)			$sql = "SELECT * 				FROM " . GAMES_TABLE . " 				WHERE game_id = " . $game_id;			if ( $result = $db->sql_query($sql) )			{				$game_info = $db->sql_fetchrow($result);				$db->sql_freeresult($result);			}			else			{				message_die(GENERAL_MESSAGE, $lang['Games_Game_Not_Excists']);			}			if ( $game_info['winner_id'] == $game_info['winner_b_id'] )			{				//				// Set some vars				//				$post_data = array();				$post_data['first_post'] = false;				$post_data['last_post'] = true;				$post_data['has_poll'] = false;				$post_data['edit_poll'] = false;				$post_data['last_topic'] = false;