startheaders(); include "mysql.php"; global $c; $is = mysql_query( "SELECT u.*,us.* FROM users u LEFT JOIN userstats us ON u.userid=us.userid WHERE u.userid=$userid", $c) or die(mysql_error()); $ir = mysql_fetch_array($is); check_level(); $fm = money_formatter($ir['money']); $cm = money_formatter($ir['crystals'], ''); $lv = date('F j, Y, g:i a', $ir['laston']); $h->userdata($ir, $lv, $fm, $cm, 0); $_GET['ID'] == (int) $_GET['ID']; if (!$_GET['ID']) { print "WTF you doing, bro?"; $h->endpage(); exit; } else if ($_GET['ID'] == $userid) { print "Only the crazy attack themselves."; $h->endpage(); exit; } //get player data $youdata = $ir; $q = mysql_query( "SELECT u.*,us.* FROM users u LEFT JOIN userstats us ON u.userid=us.userid WHERE u.userid={$_GET['ID']}", $c); if (mysql_num_rows($q) == 0) { print "This player does not exist.
> Back"; $h->endpage(); $_SESSION['attacking'] = 0; exit; } $odata = mysql_fetch_array($q); if ($odata['hp'] == 1) { print "This player is unconscious.
> Back"; $h->endpage(); $_SESSION['attacking'] = 0; exit; } else if ($odata['hospital'] and $ir['hospital'] == 0) { print "This player is in hospital.
> Back"; $h->endpage(); $_SESSION['attacking'] = 0; exit; } else if ($ir['hospital']) { print "You can not attack while in hospital.
> Back"; $h->endpage(); $_SESSION['attacking'] = 0; exit; } print ""; if ($youdata['hp'] <= 0 || $odata['hp'] <= 0) { print "

"; if ($_GET['wepid']) { if ($_SESSION['attacking'] == 0) { if ($youdata['energy'] >= $youdata['maxenergy'] / 2) { $youdata['energy'] -= $youdata['maxenergy'] / 2; $me = $youdata['maxenergy'] / 2; mysql_query( "UPDATE users SET energy=energy- {$me} WHERE userid=$userid", $c); $_SESSION['attacklog'] = ""; } else { print "You can only attack someone when you have 50% energy"; $h->endpage(); exit; } } $_SESSION['attacking'] = 1; $_GET['wepid'] = (int) $_GET['wepid']; $_GET['nextstep'] = (int) $_GET['nextstep']; //damage $qr = mysql_query( "SELECT * FROM inventory WHERE inv_itemid={$_GET['wepid']} and inv_userid=$userid", $c); if (mysql_num_rows($qr) == 0) { print "Stop trying to abuse a game bug. You can lose all your EXP for that. > Home"; mysql_query("UPDATE users SET exp=0 where userid=$userid", $c); die(""); } $qo = mysql_query( "SELECT i.*,w.* FROM items i LEFT JOIN weapons w ON i.itmid=w.item_id WHERE w.item_id={$_GET['wepid']}", $c); $r1 = mysql_fetch_array($qo); $mydamage = (int) (($r1['damage'] * $youdata['strength'] / $odata['guard']) * (rand(8000, 12000) / 10000)); $hitratio = min(50 * $ir['agility'] / $odata['agility'], 95); if (rand(1, 100) <= $hitratio) { $q3 = mysql_query( "SELECT a.Defence FROM inventory iv LEFT JOIN items i ON iv.inv_itemid = i.itmid LEFT JOIN armour a ON i.itmid=a.item_ID WHERE i.itmtype=7 AND iv.inv_userid={$_GET['ID']} ORDER BY rand()", $c); if (mysql_num_rows($q3)) { $mydamage -= mysql_result($q3, 0, 0); } if ($mydamage < 1) { $mydamage = 1; } $odata['hp'] -= $mydamage; if ($odata['hp'] == 1) { $odata['hp'] = 0; $mydamage += 1; } mysql_query( "UPDATE users SET hp=hp-$mydamage WHERE userid={$_GET['ID']}", $c); print "{$_GET['nextstep']}. Using your {$r1['itmname']} you hit {$odata['username']} doing $mydamage damage ({$odata['hp']}) \n"; $_SESSION['attacklog'] .= "{$_GET['nextstep']}. Using his {$r1['itmname']} {$ir['username']} hit {$odata['username']} doing $mydamage damage ({$odata['hp']}) \n"; } else { print "{$_GET['nextstep']}. You tried to hit {$odata['username']} but missed ({$odata['hp']}) \n"; $_SESSION['attacklog'] .= "{$_GET['nextstep']}. {$ir['username']} tried to hit {$odata['username']} but missed ({$odata['hp']}) \n"; } if ($odata['hp'] <= 0) { $odata['hp'] = 0; $_SESSION['attackwon'] = $_GET['ID']; mysql_query("UPDATE users SET hp=0 WHERE userid={$_GET['ID']}", $c); print " "; } else { //choose opp gun $eq = mysql_query( "SELECT iv.*,i.*,w.* FROM inventory iv LEFT JOIN items i ON iv.inv_itemid=i.itmid LEFT JOIN weapons w ON iv.inv_itemid=w.item_id WHERE iv.inv_userid={$_GET['ID']} AND ( i.itmtype=3 OR i.itmtype=4 )", $c); if (mysql_num_rows($eq) == 0) { $wep = "Fists"; $dam = (int) ((((int) ($odata['strength'] / 100)) + 1) * (rand(8000, 12000) / 10000)); } else { $cnt = 0; while ($r = mysql_fetch_array($eq)) { $enweps[] = $r; $cnt++; } $weptouse = rand(0, $cnt - 1); $wep = $enweps[$weptouse]['itmname']; $dam = (int) (($enweps[$weptouse]['damage'] * $odata['strength'] / $youdata['guard']) * (rand(8000, 12000) / 10000)); } $hitratio = min(50 * $odata['agility'] / $ir['agility'], 95); if ($odata['userid'] == 1) { $hitratio = 100; } if (rand(1, 100) <= $hitratio) { $q3 = mysql_query( "SELECT a.Defence FROM inventory iv LEFT JOIN items i ON iv.inv_itemid = i.itmid LEFT JOIN armour a ON i.itmid=a.item_ID WHERE i.itmtype=7 AND iv.inv_userid=$userid ORDER BY rand()", $c); if (mysql_num_rows($q3)) { $dam -= mysql_result($q3, 0, 0); } if ($dam < 1) { $dam = 1; } $youdata['hp'] -= $dam; mysql_query("UPDATE users SET hp=hp-$dam WHERE userid=$userid", $c); $ns = $_GET['nextstep'] + 1; print "{$ns}. Using his $wep {$odata['username']} hit you doing $dam damage ({$youdata['hp']}) \n"; $_SESSION['attacklog'] .= "{$ns}. Using his $wep {$odata['username']} hit {$ir['username']} doing $dam damage ({$youdata['hp']}) \n"; } else { $ns = $_GET['nextstep'] + 1; print "{$ns}. {$odata['username']} tried to hit you but missed ({$youdata['hp']}) \n"; $_SESSION['attacklog'] .= "{$ns}. {$odata['username']} tried to hit {$ir['username']} but missed ({$youdata['hp']}) \n"; } if ($youdata['hp'] <= 0) { $youdata['hp'] = 0; mysql_query("UPDATE users SET hp=0 WHERE userid=$userid", $c); print " "; } } } else if ($odata['hp'] < $odata['maxhp'] / 2) { print "You can only attack those who have at least 1/2 their max health"; $h->endpage(); exit; } else if ($youdata['energy'] < $youdata['maxenergy'] / 2) { print "You can only attack someone when you have 50% energy"; $h->endpage(); exit; } else if ($youdata['location'] != $odata['location']) { print "You can only attack someone in the same location!"; $h->endpage(); exit; } else { } print "

"; } else { print "Your Health: {$youdata['hp']}/{$youdata['maxhp']}Opponents Health: {$odata['hp']}/{$odata['maxhp']}"; $mw = mysql_query( "SELECT iv.*,i.* FROM inventory iv LEFT JOIN items i ON iv.inv_itemid=i.itmid WHERE iv.inv_userid=$userid AND (i.itmtype = 3 || i.itmtype = 4)", $c); print "Attack with:
"; while ($r = mysql_fetch_array($mw)) { if (!$_GET['nextstep']) { $ns = 1; } else { $ns = $_GET['nextstep'] + 2; } print "{$r['itmname']}
"; } print ""; } $h->endpage();