<?php
/*
* @copyright (c) 2010 animegame.eu
* @license http://www.gnu.org/licenses/gpl-3.0.html GNU General Public Licence
*
*/
include_once('path.inc.php'); // get the path ;)
include_once (ROOT_PATH . '/include/config.inc.php');
include_once(ROOT_PATH.'/include/parse.inc.php');
include_once(ROOT_PATH.'/include/char.inc.php');
// GET-Section
// Kritisch (SQL-Injections)
$kampf_id = validateUnsignedInteger($_GET['kampf_id'], null);
$kampf_name = validateString($_GET['kampf_name']);
//Unkritisch
$search = $_GET['search'];
?>
<body bgcolor="#202020">
<?php
if ($search) {
$kampf_id2 = mysql_fetch_array(mysql_query("SELECT k.id FROM chars c LEFT JOIN wanted_kampf k ON(k.char1=c.id OR k.char2=c.id) WHERE c.name='$kampf_name' LIMIT 1"));
?>
<SCRIPT language="JavaScript">
window.open(<?php echo '"wanted_kampf_anzeige.php?kampf_id=' .$kampf_id2[id]. '"'; ?>,"","status=no,hotkeys=no,Height=600,Width=820,scrollbars=yes");
</SCRIPT>
<?php
}
if ($kampf_id) {
echo "<p align=center>$back<br> <br>";
$kampf1 = mysql_Fetch_array(mysql_query("SELECT * FROM wanted_kampf WHERE id='$kampf_id' LIMIT 1"));
$char_1 = getChar($kampf1['char1']);
$char_2 = getChar($kampf1['char2']);
$spleoic = "wanted";
$starke1 = explode(",", $kampf1[starke1]);
$starke2 = explode(",", $kampf1[starke2]);
$ver1 = explode(",", $kampf1[ver1]);
$ver2 = explode(",", $kampf1[ver2]);
$speed1 = explode(",", $kampf1[speed1]);
$speed2 = explode(",", $kampf1[speed2]);
$ausdauer1 = explode(",", $kampf1[ausdauer1]);
$ausdauer2 = explode(",", $kampf1[ausdauer2]);
$glueck1 = explode(',', $kampf1['glueck1']);
$glueck2 = explode(',', $kampf1['glueck2']);
$schaden1 = explode(",", $kampf1[schaden1]);
$schaden2 = explode(",", $kampf1[schaden2]);
$attacke1 = explode(",", $kampf1[attacke1]);
$attacke2 = explode(",", $kampf1[attacke2]);
$hp1 = explode(",", $kampf1[hp1]);
$hp2 = explode(",", $kampf1[hp2]);
$mp1 = explode(",", $kampf1[mp1]);
$mp2 = explode(",", $kampf1[mp2]);
$a_hp1 = explode(",", $char_1[hp]);
$a_hp2 = explode(",", $char_2[hp]);
$a_mp1 = explode(",", $char_1[mp]);
$a_mp2 = explode(",", $char_2[mp]);
$runde = 1;
// das muss noch umgestellt werden!!
include "include/kampf_anzeige.php";
} else {
$kampf_search = mysql_query('SELECT c1.name AS c1_name, c2.name AS c2_name, k.id FROM wanted_kampf k LEFT JOIN chars c1 ON(c1.id=k.char1) LEFT JOIN chars c2 ON(c2.id=k.char2) LEFT JOIN user u ON(u.id=c1.besitzer OR u.id=c2.besitzer) WHERE u.id=' . $user_ida[id]);
?>
<SCRIPT language="JavaScript">
function wanted_anzeige(id){
var Info = window.open("wanted_kampf_anzeige.php?kampf_id="+id,"","status=no,hotkeys=no,Height=600,Width=820,scrollbars=yes");
}
</SCRIPT>
<table border="0" cellpadding="0" cellspacing="0" style="border-collapse: collapse" width="100%" height="88">
<tr>
<th width="484" height="40" colspan="4" align="center">Meine Wantedkämpfe</th>
</tr>
<?php
$kampfs = 1;
while ($row = mysql_fetch_array($kampf_search)) {
?>
<tr>
<th width="102" height="23" align="center"><?php echo $row[c1_name]; ?></th>
<th width="19" height="23">vs.</th>
<th width="298" height="23"><?php echo $row[c2_name]; ?></th>
<th width="279" height="22"><a href='javascript:wanted_anzeige(<?php echo $row[id]; ?>)'>Anzeigen</a></td>
</tr>
<?php
$kampfs++;
}
?>
<tr>
<th width="135" height="20" align="center">Wantedkampf suche</th>
<td width="343" height="20" colspan="3">
<form action="index.php" method="GET">
<input type="hidden" name="as" value="wanted_kampf_anzeige" />
<input type="hidden" name="search" value="1" />
<input id="input" name="kampf_name">
<input id="input" type=submit value="nach Namen suchen.">
</td>
</tr>
</table>
<?php
}
?>