Gitiles
Code Review Sign In
gerrit.avm99963.com / edu / fisi-pastanagapp / 73fd1bc1a7dfdfc474fa8d7dd2537654c0ed045b / . / main.php
blob: bfbbc1ee2f541cf7ddccc73b0105cb40666fd7c8 [file] [log] [blame]
Andreu78e5bb02019-09-22 13:38:04 +0200[diff] [blame]1<?php
2 require './credentials.php';
3 require './php/utils.php';
Andreu0d0f9fd2019-09-23 03:56:08 +0200[diff] [blame]4
Andreu20af6c22019-09-24 18:33:50 +0200[diff] [blame]5 $credentials = new Credentials();
6 $usersdb = $credentials->usersdb;
7 $mortsdb = $credentials->mortsdb;
8
Andreu03d030d2019-09-25 21:52:01 +0200[diff] [blame]9 date_default_timezone_set("Europe/Berlin");
10
11 $user = $_COOKIE['user']; // (int)$_POST['user'];
12 $password = $_COOKIE['password']; // isset($_POST['password']) ? md5($_POST['password']) : '';
Andreu4b2fbd92019-09-22 22:30:25 +0200[diff] [blame]13
Andreu03d030d2019-09-25 21:52:01 +0200[diff] [blame]14 if (!isset($_COOKIE['user']) or $_COOKIE['user'] == '') {
15 die("<script>window.location.href = './'</script>");
16 } else if (isset($_COOKIE['password'])) {
Andreu20af6c22019-09-24 18:33:50 +0200[diff] [blame]17 $query_password = "SELECT password FROM $usersdb WHERE id=$user";
Andreua0fc8272019-09-23 00:35:25 +0200[diff] [blame]18 if (query($query_password)->fetch_row()[0] != $password) {
Andreu78e5bb02019-09-22 13:38:04 +0200[diff] [blame]19 // Unset variables
20 setcookie('user', '', -1, "/");
21 setcookie('password', '', -1, "/");
22
Andreu03d030d2019-09-25 21:52:01 +0200[diff] [blame]23 die("<script>window.location.href = './?passwordchanged=1'</script>");
Andreu78e5bb02019-09-22 13:38:04 +0200[diff] [blame]24 }
Andreu09b8b052019-09-21 21:47:20 +0200[diff] [blame]25 }
26?>
Andreu66ad5cf2019-09-18 17:15:44 +0200[diff] [blame]27<html>
28 <head>
29 <meta charset="UTF-8">
Andreu0d0f9fd2019-09-23 03:56:08 +0200[diff] [blame]30 <title>PastanagAPP</title>
avm99963db383ed2019-09-22 02:14:42 +0200[diff] [blame]31
32 <meta name="viewport" content="width=device-width, initial-scale=1">
Andreu0d0f9fd2019-09-23 03:56:08 +0200[diff] [blame]33 <link rel="manifest" href="https://api.myjson.com/bins/u6r41">
34
35 <!-- Apple web app -->
36 <link rel="apple-touch-icon" href="./bin/images/icons/icon-72x72.png">
37 <meta name="apple-mobile-web-app-title" content="PastanagAPP">
38 <meta name="apple-mobile-web-app-capable" content="yes">
39 <meta name="apple-mobile-web-app-status-bar-style" content="green">
40
avm99963db383ed2019-09-22 02:14:42 +0200[diff] [blame]41
Andreu4b2fbd92019-09-22 22:30:25 +0200[diff] [blame]42 <link rel="stylesheet" type="text/css" href="//fonts.googleapis.com/css?family=Open+Sans" />
43
Andreu66ad5cf2019-09-18 17:15:44 +0200[diff] [blame]44 <link rel="stylesheet" href="./css/basic.css" />
45 <link rel="stylesheet" href="./css/main.css" />
avm99963db383ed2019-09-22 02:14:42 +0200[diff] [blame]46
Andreu66ad5cf2019-09-18 17:15:44 +0200[diff] [blame]47 <script src="https://code.jquery.com/jquery-3.4.1.min.js"></script>
Andreued8e1f92019-09-18 22:26:04 +0200[diff] [blame]48 <script src="https://rawgit.com/notifyjs/notifyjs/master/dist/notify.js"></script>
avm99963db383ed2019-09-22 02:14:42 +0200[diff] [blame]49
Andreu10cb3042019-09-18 19:55:36 +0200[diff] [blame]50 <script src="./js/utils.js"></script>
Andreuefe66eb2019-09-21 18:41:49 +0200[diff] [blame]51 <script src="./js/animations.js"></script>
avm99963db383ed2019-09-22 02:14:42 +0200[diff] [blame]52
53 <?php
Andreua0fc8272019-09-23 00:35:25 +0200[diff] [blame]54 $user = get_users($user);
Andreu09b8b052019-09-21 21:47:20 +0200[diff] [blame]55 $victim = get_users($user->quimata);
Andreu0530b302019-09-24 04:18:20 +0200[diff] [blame]56 if ($user->mort) die("<script>window.location.href = './dead.php'</script>");
Andreu779c3b72019-09-24 03:14:35 +0200[diff] [blame]57
58 $bits = dec2bits($user->bits);
59 $bit_counter = 0;
Andreudca79f42019-09-18 23:53:19 +0200[diff] [blame]60 ?>
avm99963db383ed2019-09-22 02:14:42 +0200[diff] [blame]61
Andreu66ad5cf2019-09-18 17:15:44 +0200[diff] [blame]62 <script>
Andreued491672019-09-20 13:09:18 +0200[diff] [blame]63 let user = {
Andreu99501052019-09-22 20:09:08 +0200[diff] [blame]64 'id': <?=(int)$user->id?>,
65 'quimata': <?=(int)$user->quimata?>,
66 'requested': <?=(int)$user->requested?>,
67 'mort': <?=(int)$user->mort?>,
avm99963db383ed2019-09-22 02:14:42 +0200[diff] [blame]68
Andreuabbcb7e2019-09-21 18:22:14 +0200[diff] [blame]69 'nom': "<?=$user->nomcomplet?>",
Andreu99501052019-09-22 20:09:08 +0200[diff] [blame]70 'curs': <?=(int)$user->curs?>,
71 'grau': <?=(int)$user->grau?>
Andreued491672019-09-20 13:09:18 +0200[diff] [blame]72 };
Andreu66ad5cf2019-09-18 17:15:44 +0200[diff] [blame]73 </script>
avm99963db383ed2019-09-22 02:14:42 +0200[diff] [blame]74
Andreu66ad5cf2019-09-18 17:15:44 +0200[diff] [blame]75 </head>
76 <body>
77 <div id="outter-container">
78 <div id="inner-container">
Andreu03d030d2019-09-25 21:52:01 +0200[diff] [blame]79 <a href="./" class="goback">Canvi d'usuari</a><br />
Andreu66ad5cf2019-09-18 17:15:44 +0200[diff] [blame]80 <h2>Hola <name id="user_name"><?=$user->nom()?></name>,</h2>
avm99963db383ed2019-09-22 02:14:42 +0200[diff] [blame]81
Andreu4b2fbd92019-09-22 22:30:25 +0200[diff] [blame]82 <div class="formulari_contrasenya">
Andreua0fc8272019-09-23 00:35:25 +0200[diff] [blame]83 <p>Sembla que no tens clau d'accés, la gent podrà entrar al teu compte...</p>
Andreu20cbd1d2019-09-22 00:00:57 +0200[diff] [blame]84 <form action="./php/change_password.php" method="POST">
Andreu03d030d2019-09-25 21:52:01 +0200[diff] [blame]85 <input type="hidden" value="<?=$user->id?>" name="userid">
Andreu543e70c2019-09-22 14:08:49 +0200[diff] [blame]86 <input type="password" placeholder="Nova clau d'accés..." name="password" /><br />
87 <input type="password" placeholder="Repeteix la clau d'accés" name="confirmation"/><br />
Andreu4b2fbd92019-09-22 22:30:25 +0200[diff] [blame]88 <input type="submit" value="Posar clau d'accés">
Andreu20cbd1d2019-09-22 00:00:57 +0200[diff] [blame]89 </form>
90 </div>
avm99963db383ed2019-09-22 02:14:42 +0200[diff] [blame]91
92 <p>La teva víctima és:</p>
93
Andreu04f79ef2019-09-22 18:52:19 +0200[diff] [blame]94 <div class="victima">
95 <table>
96 <tr>
Andreu779c3b72019-09-24 03:14:35 +0200[diff] [blame]97 <td class="table_img">
98 <div id="victim_img">
Andreu Huguetf1334172020-09-15 17:29:22 +0200[diff] [blame]99 <div class="grid-container">
100 <div class="grid-item <?=(int)$bits[$bit_counter++] ? 'black' : ''?>"></div>
101 <div class="grid-item <?=(int)$bits[$bit_counter++] ? 'black' : ''?>"></div>
102 <div class="grid-item <?=(int)$bits[$bit_counter++] ? 'black' : ''?>"></div>
103 <div class="grid-item <?=(int)$bits[$bit_counter++] ? 'black' : ''?>"></div>
104 <div class="grid-item <?=(int)$bits[$bit_counter++] ? 'black' : ''?>"></div>
105 <div class="grid-item <?=(int)$bits[$bit_counter++] ? 'black' : ''?>"></div>
106 <div class="grid-item <?=(int)$bits[$bit_counter++] ? 'black' : ''?>"></div>
107 <div class="grid-item <?=(int)$bits[$bit_counter++] ? 'black' : ''?>"></div>
108 <div class="grid-item <?=(int)$bits[$bit_counter++] ? 'black' : ''?>"></div>
109 </div>
Andreu779c3b72019-09-24 03:14:35 +0200[diff] [blame]110 </div>
111 </td>
Andreu0d0f9fd2019-09-23 03:56:08 +0200[diff] [blame]112 <td class="table_text">
Andreu04f79ef2019-09-22 18:52:19 +0200[diff] [blame]113 <div id="victim_name"><?=$victim->nomcomplet?></div>
114 <div id="victim_curs_i_grau">
Andreu4b2fbd92019-09-22 22:30:25 +0200[diff] [blame]115 <span id="victim_curs"><?=$victim->nomcurs()?></span>
Andreu04f79ef2019-09-22 18:52:19 +0200[diff] [blame]116 -
Andreu4b2fbd92019-09-22 22:30:25 +0200[diff] [blame]117 <span id="victim_grau"><?=$victim->nomgrau()?></span>
Andreu04f79ef2019-09-22 18:52:19 +0200[diff] [blame]118 </div>
119 <div id="butons" class="options">
120 <button id="win" onclick="js: send_request(user, 'REQ KILL');">L'he matat</button>
121 </div>
122 </td>
123 </tr>
124 </table>
125 </div>
Andreu03d030d2019-09-25 21:52:01 +0200[diff] [blame]126
Andreu Huguet6a633f22020-09-15 18:07:15 +0200[diff] [blame]127 <div id="message-board">
Andreu Huguet73fd1bc2020-09-15 19:21:05 +0200[diff] [blame^]128 <h1>L'atacat</h1>
129 <div id="messages-sent">
130 <?php
131 // Create connection
132 $credentials = new Credentials();
133 $conn = new mysqli($credentials->servername, $credentials->username, $credentials->password, $credentials->dbname);
134 if ($conn->connect_error) die("Connection failed: " . $conn->connect_error);
135 $conn->set_charset("utf8");
136
137 // Execute query and save result
138 $query_msgs = "SELECT * FROM `missatges` WHERE (`sender_id` = ".$user->id." AND `receiver_id` = ".$user->quimata .
139 ") OR (`sender_id` = ".$user->quimata." AND `receiver_id` = ".$user->id . ")";
140 $result = $conn->query($query_msgs);
141
142 while($res = $result->fetch_row()) {
143 echo $res[1] . "->" . $res[2] . " (" . $res[3] . "): " . $res[4] . "<br />";
144 }
145 ?>
146 </div>
Andreu Huguetdd3ae822020-09-15 18:27:51 +0200[diff] [blame]147 <form action="./php/send_thread.php" method="POST">
Andreu Huguet92c6e0d2020-09-15 18:15:40 +0200[diff] [blame]148 <input type="text" name="msg-content" placeholder="Que es cagui de por" />
149 <input type="hidden" name="killer-id" value="<?=(int)$user->id?>">
150 <input type="hidden" name="victim-id" value="<?=(int)$user->quimata?>">
Andreu Huguet6a633f22020-09-15 18:07:15 +0200[diff] [blame]151 <input type="submit" value="Enviar amenaça" />
152 </form>
Andreu Huguet73fd1bc2020-09-15 19:21:05 +0200[diff] [blame^]153 <h1>L'atacant</h1>
154 <div id="messages-sent">
155 <?php
156 $query_quielmata = "SELECT id FROM pastanaga WHERE quimata = " . $user->id;
157 $quielmata = $conn->query($query_quielmata)->fetch_row()[0];
158
159 // Execute query and save result
160 $query_msgs = "SELECT * FROM `missatges` WHERE (`sender_id` = ".$user->id." AND `receiver_id` = ".$quielmata .
161 ") OR (`sender_id` = ".$quielmata." AND `receiver_id` = ".$user->id . ")";
162 $result = $conn->query($query_msgs);
163
164 while($res = $result->fetch_row()) {
165 echo $res[1] . "->" . $res[2] . " (" . $res[3] . "): " . $res[4] . "<br />";
166 }
167
168
169 // Close the connection
170 $conn->close();
171 ?>
172 </div>
173 <form action="./php/send_thread.php" method="POST">
174 <input type="text" name="msg-content" placeholder="Demostra que no tens por" />
175 <input type="hidden" name="killer-id" value="<?=(int)$user->id?>">
176 <input type="hidden" name="victim-id" value="<?=(int)$quielmata?>">
177 <input type="submit" value="Respon amenaça" />
178 </form>
Andreu Huguet6a633f22020-09-15 18:07:15 +0200[diff] [blame]179 </div>
180
Andreu03d030d2019-09-25 21:52:01 +0200[diff] [blame]181 <div>
182 <p>Podeu posar aquesta pàgina com a icona apretant el botó de "Add to Home Screen" del vostre navegador.</p>
183 <a href="./ranking.php">Anar al rànquing</a>
184 </div>
Andreu66ad5cf2019-09-18 17:15:44 +0200[diff] [blame]185 </div>
186 </div>
avm99963db383ed2019-09-22 02:14:42 +0200[diff] [blame]187
Andreu66ad5cf2019-09-18 17:15:44 +0200[diff] [blame]188 <script>
Andreudca79f42019-09-18 23:53:19 +0200[diff] [blame]189 $(document).ready(function() {
Andreuabbcb7e2019-09-21 18:22:14 +0200[diff] [blame]190 // Set interval of checking
Andreuefe66eb2019-09-21 18:41:49 +0200[diff] [blame]191 let checking = setInterval(function() { update_info(user); }, 1500);
Andreu96f1bcd2019-09-22 00:33:09 +0200[diff] [blame]192 // Set to hidden or not the password prompt
Andreu543e70c2019-09-22 14:08:49 +0200[diff] [blame]193 if (<?=$user->md5password=="" ? 1 : 0?>) {
194 $.notify("No tens clau d'accés", "info");
195 $(".formulari_contrasenya").show();
196 }
Andreu03d030d2019-09-25 21:52:01 +0200[diff] [blame]197 // Notify of messages
198 if (getUrlParameter("wrongconfirmation")) read_message("Les contrasenyes no coincideixen", "error");
199 if (getUrlParameter("errordb")) read_message("Hi ha hagut un problema a la base de dades, torna-ho a intentar", "error");
200 if (getUrlParameter("successpassword")) read_message("La teva clau d'accés s'ha guardat", "success");
Andreudca79f42019-09-18 23:53:19 +0200[diff] [blame]201 });
Andreu66ad5cf2019-09-18 17:15:44 +0200[diff] [blame]202 </script>
203 </body>
204</html>