rendered paste body // -------------------- // What shall we do? // if ( $valsubm ) { $message = ( !empty($HTTP_POST_VARS['message']) ) ? htmlspecialchars(trim(stripslashes($HTTP_POST_VARS['message']))) : ''; $winner_id = ( !empty($HTTP_POST_VARS['winner_id']) ) ? $HTTP_POST_VARS['winner_id'] : ''; $sql=''; // When a player is validating if ( !empty($HTTP_POST_VARS['validate_single_user']) && empty($HTTP_POST_VARS['validate_game']) ) { $game_id = $HTTP_POST_VARS['validate_single_user']; $sql = "SELECT player_id, player_b_id, winner_id, winner_b_id FROM " . GAMES_TABLE . " WHERE game_id = " . $game_id; if ( $result = $db->sql_query($sql) ) { $game_info = $db->sql_fetchrow($result); $db->sql_freeresult($result); } else { message_die(GENERAL_MESSAGE, $lang['Games_Game_Not_Excists']); } $sql = ''; if ( empty($game_info['winner_id']) && empty($game_info['winner_b_id']) ) { if ( $userdata['user_id'] == $game_info['player_id'] ) { $sql = "UPDATE " . GAMES_TABLE . " SET winner_id = " . $winner_id . ", comment = '" . $message . "' WHERE game_id = " . $game_id; } else if ( $userdata['user_id'] == $game_info['player_b_id'] ) { $sql = "UPDATE " . GAMES_TABLE . " SET winner_b_id = " . $winner_id . ", comment_b = '" . $message . "' WHERE game_id = " . $game_id; } } else if ( empty($game_info['winner_id']) && !empty($game_info['winner_b_id']) ) { if ( $userdata['user_id'] == $game_info['player_id'] ) { $sql = "UPDATE " . GAMES_TABLE . " SET winner_id = " . $winner_id . ", comment = '" . $message . "' WHERE game_id = " . $game_id; } } else if ( !empty($game_info['winner_id']) && empty($game_info['winner_b_id']) ) { if ( $userdata['user_id'] == $game_info['player_b_id'] ) { $sql = "UPDATE " . GAMES_TABLE . " SET winner_b_id = " . $winner_id . ", comment_b = '" . $message . "' WHERE game_id = " . $game_id; } } else { message_die(GENERAL_MESSAGE, $lang['Games_Validated_Yet']); } } // When moderator is validating else if ( !empty($HTTP_POST_VARS['validate_game']) && empty($HTTP_POST_VARS['validate_single_user']) ) { $game_id = $HTTP_POST_VARS['validate_game']; if ( !$is_mod ) { die('Hacking attempt'); } $sql = "UPDATE " . GAMES_TABLE . " SET winner_id = " . $winner_id . ", winner_b_id = " . $winner_id . ", comment = '" . $message . "', comment_b = '" . $message . "' WHERE game_id = " . $game_id; } if ( empty($sql) ) { die('Hacking attempt'); } if (!$db->sql_query($sql, BEGIN_TRANSACTION)) { message_die(GENERAL_ERROR, 'Error in games table update', '', __LINE__, __FILE__, $sql); } // If both winners are validated, end the game (= make reply in topic and change some database stuff) $sql = "SELECT * FROM " . GAMES_TABLE . " WHERE game_id = " . $game_id; if ( $result = $db->sql_query($sql) ) { $game_info = $db->sql_fetchrow($result); $db->sql_freeresult($result); } else { message_die(GENERAL_MESSAGE, $lang['Games_Game_Not_Excists']); } if ( $game_info['winner_id'] == $game_info['winner_b_id'] ) { // // Set some vars // $post_data = array(); $post_data['first_post'] = false; $post_data['last_post'] = true; $post_data['has_poll'] = false; $post_data['edit_poll'] = false; $post_data['last_topic'] = false;