PHP httpallpost函数代码示例

                 }
             }
             reset($modules);
             while (list($key, $module) = each($modules)) {
                 $content = wizard_scanfile("modules/{$module}.php");
                 wizard_insertfile($content, $languageschema);
             }
         }
     }
     if (get_module_setting("translationdelete")) {
         if (httpget('op') == "uninstall") {
             $get = rawurlencode(serialize(httpallget()));
             require_once "./modules/translationwizard/deleteuninstalled.php";
         } elseif (httpget('op') == "mass" && httppost("uninstall")) {
             $get = rawurlencode(serialize(httpallget()));
             $post = rawurlencode(serialize(httpallpost()));
             require_once "./modules/translationwizard/deleteuninstalled.php";
         }
     }
     break;
     /*case "footer-modules":
     		output_notl("Get:");
     		debug(httpallget());
     	break;
     	*/
 /*case "footer-modules":
 		output_notl("Get:");
 		debug(httpallget());
 	break;
 	*/
 default:

function hunterslodge_avatar_run()
{
    require_once "lib/sanitize.php";
    require_once "lib/names.php";
    global $session;
    $op = httpget("op");
    $free = httpget("free");
    $context = httpget("context");
    switch ($context) {
        case "village":
            $backlink = "village.php";
            break;
        case "forest":
            $backlink = "forest.php";
            break;
        case "worldmap":
            $backlink = "runmodule.php?module=worldmapen&op=continue";
            break;
        case "lodge":
            $backlink = "runmodule.php?module=iitems_hunterslodge&op=start";
            break;
    }
    page_header("Choose your Avatar");
    switch ($op) {
        case "change":
            output("Want to change your Avatar?  No problem.  Upload your avatar via the box below.  Please note that NSFW images, stolen artwork or otherwise dodgy avatars will be erased without refund.  Upload files in .jpg or .png format.  Your limits are 100 pixels wide, 100 pixels tall, with a maximum filesize of 100k.  100px * 100px * 100k, simple!`n`n");
            output("Upload your avatar:`n");
            rawoutput("<form method='POST' enctype='multipart/form-data' name='upload' action='runmodule.php?module=hunterslodge_avatar&op=confirm&free={$free}&context={$context}'><input type='file' name='file'><br><br><input type='submit' class='button' name='Upload' value='Upload!'></form>");
            addnav("", "runmodule.php?module=hunterslodge_avatar&op=confirm&free={$free}&context={$context}");
            addnav("Cancel");
            addnav("Don't set an Avatar, just go back to where I came from", $backlink);
            break;
        case "confirm":
            if (httppost("Upload")) {
                $allowed_types = "(jpg|png)";
                debug(httpallpost());
                debug($_FILES);
                $file = $_FILES["file"];
                debug($file);
                $errors = array(0 => "File Received!", 1 => "The uploaded file exceeds the upload_max_filesize directive in php.ini.", 2 => "The uploaded file exceeds the MAX_FILE_SIZE directive that was specified in the HTML form.", 3 => "The uploaded file was only partially uploaded.", 4 => "No file was uploaded.", 6 => "Missing a temporary folder.");
                output_notl("`\$" . $errors[$error] . "`n");
                if (is_uploaded_file($file["tmp_name"])) {
                    if (preg_match("/\\." . $allowed_types . "\$/i", $file["name"])) {
                        if ($file["size"] <= 102400) {
                            $extension = substr($file['name'], strlen($file['name']) - 4, 4);
                            $loginname = str_replace(" ", "", $session['user']['login']);
                            $filename = "images/avatars/" . date("YmdHs") . $loginname . $extension;
                            if (move_uploaded_file($file["tmp_name"], $filename)) {
                                $pic_size = @getimagesize($filename);
                                // GD2 required here - else size always is recognized as 0
                                $pic_width = $pic_size[0];
                                $pic_height = $pic_size[1];
                                if ($pic_height <= 100 && $pic_width <= 100) {
                                    output("So, this is what you want to look like?  Click \"Set Avatar\" to confirm.`n`n");
                                    addnav("Confirm");
                                    addnav("Set Avatar", "runmodule.php?module=hunterslodge_avatar&op=set&free={$free}&context={$context}&avatar=" . rawurlencode($filename));
                                    $image = "<img align='left' src='" . $filename . "'>";
                                    rawoutput("<table><tr><td valign='top'>");
                                    $terms = appoencode(translate_inline("Your Avatar"));
                                    rawoutput("</td><td valign='top'>{$image}</td></tr><td></td><td>{$terms}</td></table>");
                                } else {
                                    output("That picture's too big!  The limit is 100 pixels by 100 pixels.`n`n");
                                }
                            } else {
                                output("The file could not be uploaded.`n`n");
                            }
                        } else {
                            output("You may only have a filesize up to 100 kilobytes!`n`n");
                        }
                    } else {
                        output("That file extension is not supported!`n`n");
                    }
                } else {
                    output("You did not specify a file to upload.`n`n");
                }
            }
            output("`0To try again with a different picture, use the form below.`n`n");
            rawoutput("<form method='POST' enctype='multipart/form-data' name='upload' action='runmodule.php?module=hunterslodge_avatar&op=confirm&free={$free}&context={$context}'><input type='file' name='file'><br><br><input type='submit' class='button' name='Upload' value='Upload!'></form>");
            addnav("", "runmodule.php?module=hunterslodge_avatar&op=confirm&free={$free}&context={$context}");
            addnav("Cancel");
            addnav("Don't set an Avatar, just go back to where I came from", $backlink);
            break;
        case "set":
            $av = httpget("avatar");
            set_module_pref("avatar", $av);
            output("Your Avatar has been changed!`n`n");
            if (!$free) {
                $id = has_item("hunterslodge_avatar");
                delete_item($id);
            }
            addnav("Return");
            addnav("Go back to where I came from", $backlink);
            break;
    }
    page_footer();
}

         }
     }
 } else {
     $session['message'] = translate_inline("`4Error, your login was incorrect`0");
     //now we'll log the failed attempt and begin to issue bans if
     //there are too many, plus notify the admins.
     $sql = "DELETE FROM " . db_prefix("faillog") . " WHERE date<'" . date("Y-m-d H:i:s", strtotime("-" . getsetting("expirecontent", 180) / 4 . " days")) . "'";
     checkban($name, true);
     db_query($sql);
     $sql = "SELECT acctid FROM " . db_prefix("accounts") . " WHERE login='{$name}'";
     $result = db_query($sql);
     if (db_num_rows($result) > 0) {
         // just in case there manage to be multiple accounts on
         // this name.
         while ($row = db_fetch_assoc($result)) {
             $post = httpallpost();
             $sql = "INSERT INTO " . db_prefix("faillog") . " VALUES (0,'" . date("Y-m-d H:i:s") . "','" . addslashes(serialize($post)) . "','{$_SERVER['REMOTE_ADDR']}','{$row['acctid']}','{$_COOKIE['lgi']}')";
             db_query($sql);
             $sql = "SELECT " . db_prefix("faillog") . ".*," . db_prefix("accounts") . ".superuser,name,login FROM " . db_prefix("faillog") . " INNER JOIN " . db_prefix("accounts") . " ON " . db_prefix("accounts") . ".acctid=" . db_prefix("faillog") . ".acctid WHERE ip='{$_SERVER['REMOTE_ADDR']}' AND date>'" . date("Y-m-d H:i:s", strtotime("-1 day")) . "'";
             $result2 = db_query($sql);
             $c = 0;
             $alert = "";
             $su = false;
             while ($row2 = db_fetch_assoc($result2)) {
                 if ($row2['superuser'] > 0) {
                     $c += 1;
                     $su = true;
                 }
                 $c += 1;
                 $alert .= "`3{$row2['date']}`7: Failed attempt from `&{$row2['ip']}`7 [`3{$row2['id']}`7] to log on to `^{$row2['login']}`7 ({$row2['name']}`7)`n";
             }

function addcommentary()
{
    global $session, $emptypost, $afk, $dni;
    $section = httppost('section');
    $talkline = httppost('talkline');
    $schema = httppost('schema');
    $comment = trim(httppost('insertcommentary'));
    $counter = httppost('counter');
    $remove = URLDecode(httpget('removecomment'));
    $restore = URLDecode(httpget('restorecomment'));
    //debug(httpallpost());
    if (httpget("bulkdelete")) {
        $everything = httpallpost();
        foreach ($everything as $key => $val) {
            if (substr($key, 0, 14) == "deletecomment_") {
                $del = str_replace("deletecomment_", "", $key);
                removecommentary($del, "Mass deletion by " . $session['user']['name'], $session['user']['acctid']);
            }
        }
    }
    if (!$comment) {
        return false;
    }
    if ($session['user']['chatloc'] == "DNI") {
        $dni = true;
    }
    if ($comment == strtoupper($comment)) {
        //this is an all-uppercase entry.  Do not add this comment to the database; instead, check it for built-in stuff like AFK and GREM, then run it through the commentarycommand hook
        if ($comment == "AFK" || $comment == "BRB") {
            $session['user']['chatloc'] = "AFK";
            $afk = true;
            output("`0`n`c`bYou are Away From the Keyboard until you load another page.`b`c`n");
            return false;
        }
        if ($comment == "DNI") {
            if ($session['user']['chatloc'] == "DNI") {
                $session['user']['chatloc'] = $section;
                $dni = false;
                output("`0`n`c`bYou are no longer in Do Not Interrupt status.`b`c`n");
            } else {
                $session['user']['chatloc'] = "DNI";
                $dni = true;
                output("`0`n`c`bYou are in Do Not Interrupt status.  Type DNI again to leave.`b`nDNI status is used for whenever you're doing or saying something that means other players shouldn't try to interact with you.  For example, when two or more characters are chatting just outside of the main group of characters, and other characters shouldn't be able to hear them.`c`n");
            }
            return false;
        }
        if ($comment == "GREM") {
            //handle deleting the player's last comment
            $sql = "SELECT * FROM " . db_prefix("commentary") . " WHERE author='" . $session['user']['acctid'] . "' ORDER BY commentid DESC LIMIT 1";
            $result = db_query($sql);
            while ($row = db_fetch_assoc($result)) {
                $now = time();
                $then = strtotime($row['postdate']);
                $ago = $now - $then;
                if ($ago < 120) {
                    removecommentary($row['commentid'], "Typo Gremlin", $session['user']['acctid']);
                    output("`0`n`c`bA nearby Typo Gremlin notices the peculiar tastiness of your previous comment.  Within moments, a small horde of them have descended upon your words, and consumed them.`b`c`n");
                } else {
                    output("`0`n`c`bThe Typo Gremlins turn up their nose at your latest comment - it's just too old.  They have no taste for stale words.`b`c`n");
                }
            }
            return false;
        }
        $hookcommand = array('command' => $comment, 'section' => $section);
        $returnedhook = modulehook("commentarycommand", $hookcommand);
        if (!$returnedhook['processed']) {
            debug($returnedhook);
            output("`c`b`JCommand Not Recognized`b`0`nWhen you type in ALL CAPS, the game doesn't think you're talking to other players; it thinks you're trying to perform an action within the game.  For example, typing `#GREM`0 will remove the last comment you posted, as long as you posted it less than two minutes ago.  Typing `#AFK`0 or `#BRB`0 will turn your online status bar grey, so that people know you're `#A`0way `#F`0rom the `#K`0eyboard (or, if you prefer, that you'll `#B`0e `#R`0ight `#B`0ack).  Typing `#DNI`0 will let other players know that you're busy talking to one particular player - maybe somewhere off-camera - and that you don't want to be interrupted right now.`nSome areas have special hidden commands or other easter eggs that you can hunt for.  This time around, you didn't trigger anything special.`c`0`n");
        }
        return false;
    }
    if ($remove > 0) {
        removecommentary($remove, "Moderated by " . $session['user']['name'], $session['user']['acctid']);
    }
    if ($restore > 0) {
        restorecommentary($restore, "Restored by " . $session['user']['name'], $session['user']['acctid']);
    }
    if (array_key_exists('commentcounter', $session) && $session['commentcounter'] == $counter) {
        if ($section || $talkline || $comment) {
            $tcom = color_sanitize($comment);
            if ($tcom == "" || $tcom == ":" || $tcom == "::" || $tcom == "/me") {
                $emptypost = 1;
            } else {
                injectcommentary($section, $talkline, $comment);
            }
        }
    }
}

function module_do_event($type, $module, $allowinactive = false, $baseLink = false)
{
    global $navsection;
    if ($baseLink === false) {
        global $PHP_SELF;
        $baseLink = substr($PHP_SELF, strrpos($PHP_SELF, "/") + 1) . "?";
    } else {
        //debug("Base link was specified as $baseLink");
        //debug(debug_backtrace());
    }
    // Save off the mostrecent module since having that change can change
    // behaviour especially if a module calls modulehooks itself or calls
    // library functions which cause them to be called.
    if (!isset($mostrecentmodule)) {
        $mostrecentmodule = "";
    }
    $mod = $mostrecentmodule;
    $_POST['i_am_a_hack'] = 'true';
    if (injectmodule($module, $allowinactive)) {
        $oldnavsection = $navsection;
        tlschema("module-{$module}");
        $fname = $module . "_runevent";
        $fname($type, $baseLink);
        tlschema();
        //hook into the running event, but only in *this* running event, not in all
        modulehook("runevent_{$module}", array("type" => $type, "baselink" => $baseLink, "get" => httpallget(), "post" => httpallpost()));
        //revert nav section after we're done here.
        $navsection = $oldnavsection;
    }
    $mostrecentmodule = $mod;
}

function textme_dohook($hook, $args)
{
    if (httpget('op') == 'send') {
        require_once 'lib/names.php';
        textme_sendmail(httpallpost(), get_player_basename());
    }
    return $args;
}

function addcommentary()
{
    global $session, $emptypost;
    $info = httpallpost();
    unset($info['section']);
    unset($info['talkline']);
    unset($info['schema']);
    unset($info['insertcommentary']);
    unset($info['counter']);
    unset($info['removecomment']);
    $section = httppost('section');
    $talkline = httppost('talkline');
    $schema = httppost('schema');
    $comment = trim(httppost('insertcommentary'));
    $counter = httppost('counter');
    $remove = URLDecode(httpget('removecomment'));
    if ($remove > 0) {
        $return = '/' . httpget('returnpath');
        $section = httpget('section');
        $sql = "SELECT " . db_prefix("commentary") . ".*," . db_prefix("accounts") . ".name," . db_prefix("accounts") . ".acctid, " . db_prefix("accounts") . ".clanrank," . db_prefix("clans") . ".clanshort FROM " . db_prefix("commentary") . " INNER JOIN " . db_prefix("accounts") . " ON " . db_prefix("accounts") . ".acctid = " . db_prefix("commentary") . ".author LEFT JOIN " . db_prefix("clans") . " ON " . db_prefix("clans") . ".clanid=" . db_prefix("accounts") . ".clanid WHERE commentid={$remove}";
        $row = db_fetch_assoc(db_query($sql));
        $sql = "INSERT LOW_PRIORITY INTO " . db_prefix("moderatedcomments") . " (moderator,moddate,comment) VALUES ('{$session['user']['acctid']}','" . date("Y-m-d H:i:s") . "','" . addslashes(serialize($row)) . "')";
        db_query($sql);
        $sql = "DELETE FROM " . db_prefix("commentary") . " WHERE commentid='{$remove}';";
        db_query($sql);
        invalidatedatacache("comments-{$section}");
        // *** DRAGONBG.COM CORE PATCH START ***
        invalidatedatacache("comments-");
        // *** DRAGONBG.COM CORE PATCH END ***
        $session['user']['specialinc'] == '';
        //just to make sure he was not in a special
        $return = cmd_sanitize($return);
        $return = substr($return, strrpos($return, "/") + 1);
        if (strpos($return, "?") === false && strpos($return, "&") !== false) {
            $x = strpos($return, "&");
            $return = substr($return, 0, $x - 1) . "?" . substr($return, $x + 1);
        }
        debug($return);
        redirect($return);
    }
    if (array_key_exists('commentcounter', $session) && $session['commentcounter'] == $counter) {
        if ($section || $talkline || $comment) {
            $tcom = color_sanitize($comment);
            if ($tcom == "" || $tcom == ":" || $tcom == "::" || $tcom == "/me") {
                $emptypost = 1;
            } else {
                injectcommentary($section, $talkline, $comment, $schema);
            }
        }
    }
}

function changelog_dohook($hook, $args)
{
    switch ($hook) {
        case 'header-modules':
            $module = httppost('module') ?: httpget('module');
            $op = httpget('op');
            if ($module != '') {
                if (substr($op, -1) == 'e') {
                    $op = substr($op, 0, -1);
                } else {
                    if ($op == 'mass') {
                        $method = array_keys(httpallpost())[1];
                        if (substr($method, -1) == 'e') {
                            $method = substr($method, 0, -1);
                        }
                        $op = "mass {$method}";
                        $plural = 's';
                    }
                }
                require_once 'lib/gamelog.php';
                if (is_array($module)) {
                    $lastModule = array_pop($module);
                    $module = implode(', ', $module);
                    $module .= ",`@ and `^{$lastModule}";
                }
                gamelog(sprintf_translate('`Q%sed`@ the `^%s`@ module%s.', $op, $module, $plural), get_module_setting('category'));
            }
            break;
        case 'village':
            if (get_module_setting('infonav')) {
                addnav($args['infonav']);
                addnav('View Changelog', 'runmodule.php?module=changelog&ret=village');
            }
            break;
        case 'header-about':
            addnav('About LoGD');
            addnav('View Changelog', 'runmodule.php?module=changelog&ret=about');
            break;
        case 'newday-runonce':
            $gamelog = db_prefix('gamelog');
            $date = date('Y-m-d H:i:s', strtotime('now'));
            $category = get_module_setting('category');
            db_query("UPDATE {$gamelog} SET date = '{$date}' WHERE category = '{$category}'");
            break;
    }
    return $args;
}

                $textboxoutput .= ";;";
            }
            rawoutput($textboxoutput);
        }
        rawoutput("</textarea><br /><br />");
    }
    rawoutput("<input type='submit' class='button' value='" . translate_inline("Save") . "'");
    rawoutput("</form>");
    addnav("", "runmodule.php?module=staminasystem&op=editplayer&op2=save&id=" . $id . "");
    addnav("Return");
    addnav("Search again", "runmodule.php?module=staminasystem&op=editplayer");
    addnav("Return", "runmodule.php?module=staminasystem&op=superuser");
}
if ($op2 == "save") {
    $userid = httpget('id');
    $postedactions = httpallpost();
    function trim_value(&$value)
    {
        $value = trim($value);
    }
    foreach ($postedactions as $action => $details) {
        $action = str_replace("_", " ", $action);
        $action = trim($action);
        $detailsexploded = explode(";;", $details);
        foreach ($detailsexploded as $detail) {
            $detailandvalue = explode("=>", $detail);
            $size = count($detailandvalue);
            for ($i = 0; $i < $size / 2; $i++) {
                $detailandvalue[$i] = trim($detailandvalue[$i]);
                $actionsarray[$action][$detailandvalue[$i]] = $detailandvalue[$i + $size / 2];
            }

function improbablehousing_secretrooms_run()
{
    global $session;
    page_header("Secret Rooms");
    require_once "modules/improbablehousing/lib/lib.php";
    $hid = httpget("hid");
    $rid = httpget("rid");
    $house = improbablehousing_gethousedata($hid);
    $cost = get_module_setting("cost");
    $roomname = $house['data']['rooms'][$rid]['name'];
    switch (httpget('op')) {
        case "start":
            output("`5Secret Rooms`0 are rooms that exist in your Dwelling and operate just like normal rooms - except that there's no nav link for players to reach them by.  Instead, a player will be instantly transported from the current room to your `5Secret Room`0 by typing a key phrase into their chat box (the phrase itself won't show up in the chat log - it'd be pretty hard to keep it secret otherwise!).`n`nYou as the secret room owner can assign as many key phrases per room as you would like.  For example, you might assign the key phrases \"`#EXAMINE BOOKCASE`0\", \"`&LOOK BEHIND BOOKCASE`0\", and perhaps a few others, to have the player discover a traditional secret passage.  Or, you could assign the phrase \"`#OPEN SESAME`0\" to reveal a cleverly-hidden door.`n`nIn all other aspects, `5Secret Rooms`0 operate exactly like normal rooms - they can be extended, decorated, and can have more rooms branch from them (including other `5Secret Rooms`0).  They can even be locked just like normal rooms - if a player tries to enter a locked `5Secret Room`0 to which he or she doesn't have access, they'll get bounced straight back as usual.`n`n`5Secret Rooms`0 are a donator-only feature, cost %s Donator Points per room, and come pre-assembled.  No construction materials are necessary; `5Secret Rooms`0 arrive ready to decorate.`n`nYou're currently building a `5Secret Room`0 that can be accessed from the room called \"`b%s`b`0\" - are you sure that this is the room you want to build from?`n`n", $cost, $roomname);
            addnav("Want a Secret Room?");
            $donationavailable = $session['user']['donation'] - $session['user']['donationspent'];
            if ($donationavailable >= $cost) {
                addnav(array("Yes, build a Secret Room branching from this one (%s Points)", $cost), "runmodule.php?module=improbablehousing_secretrooms&op=buy&hid={$hid}&rid={$rid}");
            } else {
                addnav("Ah, but you don't have enough points!", "");
            }
            addnav("Cancel and return to the last room", "runmodule.php?module=improbablehousing&op=interior&hid={$hid}&rid={$rid}");
            break;
        case "buy":
            $session['user']['donationspent'] += $cost;
            output("You've bought a `5Secret Room!`0  To enter it, just type \"`#SECRET`0\" into the chat box in the room called \"%s\" (you can delete this trigger phrase and set up some new ones once you're inside the secret room).`n`nHave fun!`n`n", $roomname);
            $newroom = array("name" => "Secret Room", "size" => 1, "enterfrom" => $rid, "desc" => "You're standing in a small, undecorated secret room.", "sleepslots" => array(), "hidden" => 1, "triggers" => array(0 => "SECRET"), "lockreject" => "You do all the right things, but you still can't get in.  Maybe the room is locked?");
            $house['data']['rooms'][] = $newroom;
            improbablehousing_sethousedata($house);
            addnav("Let's get busy!");
            addnav("Back to your Dwelling", "runmodule.php?module=improbablehousing&op=interior&hid={$hid}&rid={$rid}");
            break;
        case "manage":
            if (httpget("save")) {
                $posted = httpallpost();
                $nphrases = array();
                foreach ($posted as $phrase) {
                    $nphrase = stripslashes($phrase);
                    if ($nphrase != "") {
                        $nphrases[] = strtoupper($nphrase);
                    }
                }
                $house['data']['rooms'][$rid]['triggers'] = $nphrases;
                improbablehousing_sethousedata($house);
            }
            $phrases = $house['data']['rooms'][$rid]['triggers'];
            output("You're currently managing the secret room called \"`b%s`b.`0\"  You can set this room's trigger phrases and lock rejection notices below.`n`nRemember, the text that the player inputs must be an exact match.  There's no extra charge for adding more trigger phrases, so more is often better.`n`nTo erase a trigger phrase, just blank the box.`n`n", $roomname);
            rawoutput("<form action='runmodule.php?module=improbablehousing_secretrooms&op=manage&save=true&hid={$hid}&rid={$rid}' method='POST'>");
            rawoutput("<table border='0' cellpadding='2' cellspacing='2'>");
            $phrasecount = 0;
            foreach ($phrases as $phrase) {
                $class = $phrasecount % 2 ? "trlight" : "trdark";
                $phrasecount++;
                rawoutput("<tr class='{$class}'><td><input name=\"phrase{$phrasecount}\" value=\"{$phrase}\"></td></tr>");
            }
            rawoutput("</table>");
            output("`nNow add up to ten new phrases.  Boxes left blank will be ignored.  To add more, just save and you'll get another ten slots.");
            $extracount = $phrasecount + 10;
            rawoutput("<table border='0' cellpadding='2' cellspacing='2'>");
            for ($i = $phrasecount; $i <= $extracount; $i++) {
                $class = $phrasecount % 2 ? "trlight" : "trdark";
                $phrasecount++;
                rawoutput("<tr class='{$class}'><td><input name=\"phrase{$phrasecount}\" value=''></td></tr>");
            }
            rawoutput("</table>");
            rawoutput("<input type='submit' class='button' value='" . translate_inline("Save") . "'");
            rawoutput("</form>");
            addnav("", "runmodule.php?module=improbablehousing_secretrooms&op=manage&save=true&hid={$hid}&rid={$rid}");
            addnav("Return");
            addnav("Back to the Dwelling", "runmodule.php?module=improbablehousing&op=interior&hid={$hid}&rid={$rid}");
            break;
    }
    page_footer();
    return true;
}

function iitems_superuser()
{
    global $session;
    $superop = httpget('superop');
    switch ($superop) {
        case "export":
            page_header("Export an IItem");
            $itemid = httpget("exportitemid");
            $sql = "SELECT id,localname,data FROM " . db_prefix("iitems") . " WHERE localname = '{$itemid}'";
            $result = db_query_cached($sql, "iitems-" . $localname);
            $row = db_fetch_assoc($result);
            $exportcode = $localname . "|BREAK|" . $data;
            rawoutput("<textarea>");
            rawoutput($exportcode);
            rawoutput("</textarea>");
            addnav("Back to the IItem Editor", "runmodule.php?module=iitems&op=superuser&superop=start");
            break;
        case "import":
            page_header("Import an IItem");
            $itemid = httpget("exportitemid");
            $sql = "SELECT id,localname,data FROM " . db_prefix("iitems") . " WHERE localname = '{$itemid}'";
            $result = db_query_cached($sql, "iitems-" . $localname);
            $row = db_fetch_assoc($result);
            $exportcode = $localname . "|BREAK|" . $data;
            rawoutput("<textarea>");
            rawoutput($exportcode);
            rawoutput("</textarea>");
            addnav("Back to the IItem Editor", "runmodule.php?module=iitems&op=superuser&superop=start");
            break;
        case "start":
            page_header("IItems");
            iitems_superuser_item_menu();
            addnav("Return to the Grotto", "superuser.php");
            addnav("Create a new Item", "runmodule.php?module=iitems&op=superuser&superop=create");
            break;
        case "give":
            page_header("Giving IItem");
            output("Giving the item.`n`n");
            $id = httpget('id');
            require_once "modules/iitems/lib/lib.php";
            $success = iitems_give_item($id);
            if (!$success) {
                output("Item could not be given.`n`n");
            } else {
                output("Item given successfully.`n`n");
            }
            iitems_superuser_item_menu();
            addnav("Back to the Item Editor", "runmodule.php?module=iitems&op=superuser&superop=start");
            break;
        case "edit":
            page_header("Editing Item");
            $id = httpget('id');
            if (httpget('subop') == "save") {
                $posted = httpallpost();
                debug($posted);
                $sarray = array();
                $prearray = array();
                foreach ($posted as $ele => $val) {
                    if (substr($ele, 0, 3) == "ele") {
                        $num = substr($ele, 3, 5);
                        // $sarray[$val]=$val;
                        $prearray[$num]['ele'] = $val;
                    } else {
                        if (substr($ele, 0, 3) == "val") {
                            $num = substr($ele, 3, 5);
                            $prearray[$num]['val'] = $val;
                        }
                    }
                }
                foreach ($prearray as $num => $vals) {
                    if ($vals['ele'] != "") {
                        $sarray[$vals['ele']] = $vals['val'];
                    }
                }
                debug($sarray);
                $data = serialize($sarray);
                $data = addslashes($data);
                $sql = "UPDATE " . db_prefix("iitems") . " SET data = '{$data}' WHERE id = {$id}";
                db_query($sql);
                output("Array has been reserialised and saved.");
            }
            $sql = "SELECT id,localname,data FROM " . db_prefix("iitems") . " WHERE id = {$id}";
            $result = db_query($sql);
            $row = db_fetch_assoc($result);
            debug($row['data']);
            $sarray = unserialize($row['data']);
            if (!is_array($sarray)) {
                $sarray = array();
            }
            output("`bEntries handled by IItems core:`b`n");
            output("`bverbosename`b (REQUIRED): A verbose name for the item that is shown to the player.`n");
            output("`btype`b (REQUIRED): normal, special or inventory.  A 'normal' item is a generic consumable item such as a grenade.  If a player has ten grenades, they will all do the same thing in the same way.  'special' items are disposable items that can have different stats assigned to them - a player might have five throwing knives, but some of them will be rustier than others.`nWhen giving a 'normal' item, the 'quantity' parameter in the player's Inventory array is increased by one for that item.  When giving a 'special' item, if an item of the same verbose name is present in the Inventory array, a fresh one is added with the name 'Verbose Name (x)', where 'x' is an incrementing number.`nWhere an item is given the 'inventory' type `iby an advanced admin`i, adding the item will give the player another Inventory in which to store things.  Use this for things like backpacks, bandoliers, saddle bags, quivers and so forth.`n");
            output("`bimage`b: Specify an image to use in the Inventory here.  All images are stored in images/iitems, so just give the filename.  Example: medkit.png (references yoursite.com/images/iitems/medkit.png)`n");
            output("`bdestroyafteruse`b: When set, the item will be destroyed after a single use.`n");
            output("`bdkpersist`b: When set, this item will be preserved in the player's Inventory across Dragon Kills.`n");
            output("`bdescription`b: Description of the item shown in the player's Inventory.`n");
            output("`busetext`b: Text shown when item is used.  Can be modified by a module when using an item if necessary.`n");
            output("`bdestroytext`b: Text shown when item is destroyed.`n");
            output("`buseatnewday`b: When true, iitem is automatically used at newday.  Useful for things that provide a buff each day.`n");
            output("`bcannotdiscard`b: When true, item cannot be discarded by the player.`n");
//.........这里部分代码省略.........

function jquerycommentary_run()
{
    global $_SERVER, $output, $session;
    require_once 'lib/commentary.php';
    $section = httpget('section');
    $commentary = db_prefix('commentary');
    $accounts = db_prefix('accounts');
    if (($commid = httpget('rmvcmmnt')) != "") {
        $prefix = db_prefix('commentary');
        check_su_access(SU_EDIT_COMMENTS);
        if ($session['user']['superuser'] & SU_EDIT_COMMENTS) {
            db_query("DELETE FROM {$prefix} WHERE commentid = '{$commid}'");
        }
        db_query("INSERT INTO {$commentary} (section, author, comment, postdate) VALUES ('blackhole', '{$session['user']['acctid']}', 'I fucked up', '" . date('Y-m-d H:i:s') . "')");
        invalidatedatacache("comments-{$section}");
        invalidatedatacache("comments-blackhole");
    }
    if (httpget('section') == get_module_pref('current_section') && httpget('section') != '') {
        //echo 'x';
        //var_dump(get_all_module_settings());
        $output = "";
        $_SERVER['REQUEST_URI'] = httpget('r');
        $session['counter'] = httpget('c');
        viewcommentary(get_module_pref('current_section'), get_module_setting('message'), get_module_setting('limit'), get_module_setting('talkline'));
        $output = preg_replace('#<script(.*?)>(.*?)</script>#is', '', $output);
        $output = substr($output, 0, strpos($output, "<jquerycommentaryend>"));
        db_query("UPDATE accounts SET laston = '" . date('Y-m-d H:i:s') . "' WHERE acctid = '{$session['user']['acctid']}'");
        echo trim("{$output}");
        invalidatedatacache("comments-{$section}");
        /*$sql = db_query(
              "SELECT a.name, a.acctid
              FROM accounts AS a
              LEFT JOIN module_userprefs AS m
              ON m.userid = a.acctid
              LEFT JOIN module_userprefs AS u
              ON u.userid = m.userid
              WHERE m.modulename = 'jquerycommentary'
              AND m.setting = 'is_typing'
              AND m.value = '1'
              AND u.modulename = 'jquerycommentary'
              AND u.setting = 'current_section'
              and u.value = '" . get_module_pref('current_section') ."'"
          );
          $typing = [];
          while ($row = db_fetch_assoc($sql)) {
              array_push($typing, [$row['acctid'], $row['name']]);
          }
          $isTyping = appoencode('`@');
          $i = 0;
          echo appoencode('`@Who\'s typing: `n');
          if (count($typing) != 0) {
              foreach ($typing as $key => $val) {
                  $i++;
                  if ($i == 1) {
                      $isTyping .= appoencode($val[1]);
                  }
                  else if ($i > 1 && count($typing) > $i) {
                      $isTyping .= appoencode("`@, {$val[1]}");
                  }
                  else if ($i == count($typing)) {
                      $isTyping .= appoencode("`@ and {$val[1]}");
                  }
              }
              echo $isTyping;
          }
          else {
              echo appoencode('`@No one');
          }*/
    }
    switch (httpget('op')) {
        case 'get_json':
            $sql = db_query("SELECT commentid, author, comment FROM commentary WHERE section = '{$session['current_commentary_area']}' AND deleted = '0' ORDER BY commentid+0 DESC LIMIT 0, 25");
            $json = [];
            while ($row = db_fetch_assoc($sql)) {
                array_push($json, $row);
            }
            echo "<pre>";
            echo json_encode($json, JSON_PRETTY_PRINT);
            echo "</pre>";
            break;
        case 'post':
            $post = httpallpost();
            $post = modulehook('jquery-post-commentary', $post);
            $commentary = db_prefix('commentary');
            if ($post['method'] == 'insertcommentary') {
                require_once 'lib/commentary.php';
                injectcommentary(get_module_pref('current_section'), get_module_setting('talkline'), $post['comment']);
            } else {
                $commentid = explode('_', $post['method']);
                require_once 'lib/systemmail.php';
                require_once 'lib/sanitize.php';
                $post['comment'] = htmlent($post['comment']);
                db_query("UPDATE {$commentary} SET comment = '{$post['comment']}' WHERE commentid = '{$commentid[1]}'");
                db_query("INSERT INTO {$commentary} (section, author, comment, postdate) VALUES ('blackhole', '{$session['user']['acctid']}', 'I fucked up', '" . date('Y-m-d H:i:s') . "')");
                invalidatedatacache("comments-{$session['current_commentary_section']}");
                invalidatedatacache("comments-blackhole");
            }
            break;
        case 'last_comment':
            require_once 'lib/sanitize.php';
//.........这里部分代码省略.........

function drinks_editor()
{
    global $mostrecentmodule;
    if (!get_module_pref("canedit")) {
        check_su_access(SU_EDIT_USERS);
    }
    page_header("Drink Editor");
    require_once "lib/superusernav.php";
    superusernav();
    addnav("Drink Editor");
    addnav("Add a drink", "runmodule.php?module=drinks&act=editor&op=add&admin=true");
    $op = httpget('op');
    $drinkid = httpget('drinkid');
    $header = "";
    if ($op != "") {
        addnav("Drink Editor Main", "runmodule.php?module=drinks&act=editor&admin=true");
        if ($op == 'add') {
            $header = translate_inline("Adding a new drink");
        } else {
            if ($op == 'edit') {
                $header = translate_inline("Editing a drink");
            }
        }
    } else {
        $header = translate_inline("Current drinks");
    }
    output_notl("`&<h3>{$header}`0</h3>", true);
    $drinksarray = array("Drink,title", "drinkid" => "Drink ID,hidden", "name" => "Drink Name", "costperlevel" => "Cost per level,int", "hpchance" => "Chance of modifying HP (see below),range,0,10,1", "turnchance" => "Chance of modifying turns (see below),range,0,10,1", "alwayshp" => "Always modify hitpoints,bool", "alwaysturn" => "Always modify turns,bool", "drunkeness" => "Drunkeness,range,1,100,1", "harddrink" => "Is drink hard alchohol?,bool", "hpmin" => "Min HP to add (see below),range,-20,20,1", "hpmax" => "Max HP to add (see below),range,-20,20,1", "hppercent" => "Modify HP by some percent (see below),range,-25,25,5", "turnmin" => "Min turns to add (see below),range,-5,5,1", "turnmax" => "Max turns to add (see below),range,-5,5,1", "remarks" => "Remarks", "buffname" => "Name of the buff", "buffrounds" => "Rounds buff lasts,range,1,20,1", "buffroundmsg" => "Message each round of buff", "buffwearoff" => "Message when buff wears off", "buffatkmod" => "Attack modifier of buff", "buffdefmod" => "Defense modifier of buff", "buffdmgmod" => "Damage modifier of buff", "buffdmgshield" => "Damage shield modifier of buff", "buffeffectfailmsg" => "Effect failure message (see below)", "buffeffectnodmgmsg" => "No damage message (see below)", "buffeffectmsg" => "Effect message (see below)");
    if ($op == "del") {
        $sql = "DELETE FROM " . db_prefix("drinks") . " WHERE drinkid='{$drinkid}'";
        module_delete_objprefs('drinks', $drinkid);
        db_query($sql);
        $op = "";
        httpset('op', "");
    }
    if ($op == "save") {
        $subop = httpget("subop");
        if ($subop == "") {
            $drinkid = httppost("drinkid");
            list($sql, $keys, $vals) = postparse($drinksarray);
            if ($drinkid > 0) {
                $sql = "UPDATE " . db_prefix("drinks") . " SET {$sql} WHERE drinkid='{$drinkid}'";
            } else {
                $sql = "INSERT INTO " . db_prefix("drinks") . " ({$keys}) VALUES ({$vals})";
            }
            db_query($sql);
            if (db_affected_rows() > 0) {
                output("`^Drink saved!");
            } else {
                $str = db_error();
                if ($str == "") {
                    output("`^Drink not saved: no changes detected.");
                } else {
                    output("`^Drink not saved: `\$%s`0", $sql);
                }
            }
        } elseif ($subop == "module") {
            $drinkid = httpget("drinkid");
            // Save module settings
            $module = httpget("editmodule");
            // This should obey the same rules as the configuration editor
            // So disabling
            //$sql = "DELETE FROM " . db_prefix("module_objprefs") . " WHERE objtype='drinks' AND objid='$drinkid' AND modulename='$module'";
            //db_query($sql);
            $post = httpallpost();
            reset($post);
            while (list($key, $val) = each($post)) {
                set_module_objpref("drinks", $drinkid, $key, $val, $module);
            }
            output("`^Saved.");
        }
        if ($drinkid) {
            $op = "edit";
            httpset("drinkid", $drinkid, true);
        } else {
            $op = "";
        }
        httpset('op', $op);
    }
    if ($op == "activate") {
        $sql = "UPDATE " . db_prefix("drinks") . " SET active=1 WHERE drinkid='{$drinkid}'";
        db_query($sql);
        $op = "";
        httpset('op', "");
    }
    if ($op == "deactivate") {
        $sql = "UPDATE " . db_prefix("drinks") . " SET active=0 WHERE drinkid='{$drinkid}'";
        db_query($sql);
        $op = "";
        httpset('op', "");
    }
    if ($op == "") {
        $op = translate_inline("Ops");
        $id = translate_inline("Id");
        $nm = translate_inline("Name");
        $dkn = translate_inline("Drunkeness");
        $hard = translate_inline("Hard Alchohol?");
        $edit = translate_inline("Edit");
        $deac = translate_inline("Deactivate");
        $act = translate_inline("Activate");
//.........这里部分代码省略.........

 }
 $dbpass = "";
 if (substr($pass1, 0, 5) == "!md5!") {
     $dbpass = md5(substr($pass1, 5));
 } else {
     $dbpass = md5(md5($pass1));
 }
 $sql = "INSERT INTO " . db_prefix("accounts") . "\r\n\t\t\t\t\t\t(name, superuser, title, password, sex, login, laston, uniqueid, lastip, gold, emailaddress, emailvalidation, referer, regdate)\r\n\t\t\t\t\t\tVALUES\r\n\t\t\t\t\t\t('{$title} {$shortname}', '" . getsetting("defaultsuperuser", 0) . "', '{$title}', '{$dbpass}', '{$sex}', '{$shortname}', '" . date("Y-m-d H:i:s", strtotime("-1 day")) . "', '" . $_COOKIE['lgi'] . "', '" . $_SERVER['REMOTE_ADDR'] . "', " . getsetting("newplayerstartgold", 50) . ", '{$email}', '{$emailverification}', '{$referer}', NOW())";
 db_query($sql);
 if (db_affected_rows(LINK) <= 0) {
     output("`\$Error`^: Your account was not created for an unknown reason, please try again. ");
 } else {
     $sql = "SELECT acctid FROM " . db_prefix("accounts") . " WHERE login='{$shortname}'";
     $result = db_query($sql);
     $row = db_fetch_assoc($result);
     $args = httpallpost();
     $args['acctid'] = $row['acctid'];
     //insert output
     $sql_output = "INSERT INTO " . db_prefix("accounts_output") . " VALUES ({$row['acctid']},'');";
     db_query($sql_output);
     //end
     modulehook("process-create", $args);
     if ($emailverification != "") {
         $subj = translate_mail("LoGD Account Verification", 0);
         $msg = translate_mail(array("Login name: %s `n`nIn order to verify your account, you will need to click on the link below.`n`n http://%s?op=val&id=%s `n`nThanks for playing!", $shortname, $_SERVER['SERVER_NAME'] . ($_SERVER['SERVER_PORT'] == 80 ? "" : ":" . $_SERVER['SERVER_PORT']) . $_SERVER['SCRIPT_NAME'], $emailverification), 0);
         mail($email, $subj, str_replace("`n", "\n", $msg), "From: " . getsetting("gameadminemail", "postmaster@localhost.com"));
         output("`4An email was sent to `\$%s`4 to validate your address.  Click the link in the email to activate your account.`0`n`n", $email);
     } else {
         rawoutput("<form action='login.php' method='POST'>");
         rawoutput("<input name='name' value=\"{$shortname}\" type='hidden'>");
         rawoutput("<input name='password' value=\"{$pass1}\" type='hidden'>");

function switch_run()
{
    global $session;
    $op = httpget('op');
    $id = httpget('id');
    $accounts = db_prefix('accounts');
    $allAccounts = json_decode(get_module_pref('accounts'), true);
    page_header('Switch Accounts');
    switch ($op) {
        case 'add':
            addnav('Go back', 'runmodule.php?module=switch');
            output("`@Please enter the information of the account you want to add to your switch list. Note that this link is symbolic, meaning it will be added both ways!`n`n`0");
            rawoutput("<form action='runmodule.php?module=switch&op=verify' method='POST'>\n                <input type='text' name='login' placeholder='Login' />\n                <input type='password' name='password' placeholder='Password' />\n                <input type='submit' value='Create Link' />\n                </form>");
            addnav('', 'runmodule.php?module=switch&op=verify');
            break;
        case 'verify':
            $post = httpallpost();
            $post['password'] = md5(md5($post['password']));
            $post['login'] = filter_var($post['login'], FILTER_SANITIZE_STRING);
            $sql = db_query("SELECT acctid, name, uniqueid, lastip\n                FROM {$accounts}\n                WHERE password = '{$post['password']}'\n                AND login = '{$post['login']}'");
            if (db_num_rows($sql) == 0) {
                addnav('Go back', 'runmodule.php?module=switch&op=add');
                output("`\$Sorry, no account was found with those credentials!");
                break;
            } else {
                $row = db_fetch_assoc($sql);
                addnav('Go back', 'runmodule.php?module=switch');
                if ($row['acctid'] == $session['user']['acctid']) {
                    output("`\$Sorry, but you cannot add a link to yourself!");
                    break;
                }
                output("`@Success! Adding a link between`^ %s `@and `^%s`@!`0", $session['user']['name'], $row['name']);
                $targetPref = json_decode(get_module_pref('accounts', 'switch', $row['acctid']), true);
                $targetPref = array_merge($targetPref, [$session['user']['acctid']]);
                set_module_pref('accounts', json_encode($targetPref), 'switch', $row['acctid']);
                $userPref = json_decode(get_module_pref('accounts'), true);
                $userPref = array_merge($userPref, [$row['acctid']]);
                set_module_pref('accounts', json_encode($userPref));
            }
            break;
        case 'remove':
            addnav('Go back', 'runmodule.php?module=switch');
            if (!in_array($id, $allAccounts)) {
                output("`\$Woops! That account is not linked to yours!");
                break;
            }
            $unsetId = array_search($id, $allAccounts);
            unset($allAccounts[$unsetId]);
            set_module_pref('accounts', json_encode($allAccounts));
            $targetPref = get_module_pref('accounts', false, $id);
            $targetPref = json_decode($targetPref, true);
            $key = array_search($session['user']['acctid'], $targetPref);
            unset($targetPref[$key]);
            set_module_pref('accounts', json_encode($targetPref), 'switch', $id);
            output("`@The link between your accounts has been destroyed!");
            break;
        case 'switch':
            require_once 'lib/redirect.php';
            require_once 'lib/checkban.php';
            if (!in_array($id, $allAccounts)) {
                addnav('Go back', 'runmodule.php?module=switch');
                output("`\$There was an error. We could not validate your link between these accounts!");
                debuglog('tried to switch into an account they do not have access to!');
                break;
            }
            $sql = db_query("UPDATE {$accounts} SET loggedin = 0 WHERE acctid = '{$session['user']['acctid']}'");
            $sql = db_query("UPDATE {$accounts} SET loggedin = 1 WHERE acctid = '{$id}'");
            $sql = db_query("SELECT * FROM {$accounts} WHERE acctid = '{$id}'");
            $session['user'] = db_fetch_assoc($sql);
            $session['loggedin'] = true;
            $session['laston'] = date('Y-m-d H:i:s');
            $session['user']['laston'] = $session['laston'];
            redirect($session['user']['restorepage'] ?: 'news.php');
            break;
        default:
            require_once 'lib/villagenav.php';
            villagenav();
            addnav('Link an account', 'runmodule.php?module=switch&op=add');
            if (count($allAccounts) > 0) {
                output("`i`@Which account would you like to sign in to?`i`n`n`0");
                rawoutput("<table class='switchAccounts'>\n                        <tr>\n                            <th>\n                                Ops\n                            </th>\n                            <th>\n                                Name\n                            </th>\n                        </tr>\n                    ");
                foreach ($allAccounts as $acctid) {
                    debug($acctid);
                    $sql = db_query("SELECT name\n                        FROM {$accounts}\n                        WHERE acctid = '{$acctid}'");
                    $row = db_fetch_assoc($sql);
                    output("<tr>\n                            <td>\n                                [<a href='runmodule.php?module=switch&op=remove&id=%s'>Del</a>]\n                            </td>\n                            <td>\n                                <a href='runmodule.php?module=switch&op=switch&id=%s'>%s</a>\n                            </td>\n                        </tr>", $acctid, $acctid, $row['name'], true);
                    addnav('', 'runmodule.php?module=switch&op=remove&id=' . $acctid);
                    addnav('', 'runmodule.php?module=switch&op=switch&id=' . $acctid);
                }
                rawoutput("</table>");
            } else {
                output("`@You need to add accounts! Click 'Link an account' to get started!");
            }
            break;
    }
    page_footer();
}