403Webshell
Server IP : 109.234.162.214  /  Your IP : 216.73.216.222
Web Server : Apache
System : Linux servd162214.srv.odns.fr 4.18.0-372.26.1.lve.1.el8.x86_64 #1 SMP Fri Sep 16 14:08:19 EDT 2022 x86_64
User : carpe ( 1178)
PHP Version : 8.0.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/carpe/public_html/MuletVsFondation/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/carpe/public_html/MuletVsFondation/univers.php
<style>
    #recruter{
        display:none;
    }
</style>
<?php

session_start();

echo "<form method='POST' action='univers.php'><input type='submit' name='deco' value='Deconnexion'></form>";

$serveur = "localhost";
$utilisateur = "carpe_php";
$mot_de_passe = "onestdestubesonestpasdespots"; 
$base_de_donnees = "carpe_mulet"; 

$mysqli = mysqli_connect($serveur, $utilisateur, $mot_de_passe, $base_de_donnees);

if(isset($_SESSION['login'])){
    
}else{
    header("Location: login.php");
    
}
echo "Navigation : ";
echo "<form method='post' action='univers.php'><input type='submit' value='Marché' name='marche'><input type='submit' value='Garage' name='garage'><input type='submit' value='Gestion' name='gestion'></form>";

include 'personne.php';
include 'vaisseaux.php';
    
//$personnes= [];

if(isset($_POST['days'])){
    $id = getId($mysqli);
    $edit = "UPDATE `users` SET `jour`= jour + 1 WHERE id_user = $id";
        $result_edit = mysqli_query($mysqli,$edit);
        
        $personnesArray = array_map(function($personne) {
            return $personne->toArray();
        }, $personnes);
        
        shuffle($personnesArray);
        //$elementsAleatoires = array_slice($personnesArray, 0, 5);
        
        $personnes5 = [];
        
        foreach($personnesArray as $value){
            $error = 0;

            $select = "SELECT * from team where id_user = '$id' and etat = 'vivant'";
            $result_select = mysqli_query($mysqli,$select);
            
            $select2 = "SELECT * from team where id_user = '$id' and etat = 'mort'";
            $result_select2 = mysqli_query($mysqli,$select2);
            
            while ($row = mysqli_fetch_assoc($result_select2)) {
                if($value['nom'] == $row['nom']){
                    $error++;
                }
            }
            
            while ($row = mysqli_fetch_assoc($result_select)) {
                //echo "<br/>";
                //echo $row['nom'];
                //echo $value['nom'];
                if($value['nom'] == $row['nom']){
                    //echo "NON";
                    $error++;
                }else{
                    
                }
            }
            if($error<1){
                //si la personne ne fait pas parti de la team + est vivante, on ajoute au tableau)
                array_push($personnes5, $value);
                

            }
            
            
        }
        shuffle($personnes5);
        $elementsAleatoires2 = array_slice($personnes5, 0, 5);
        foreach($elementsAleatoires2 as $value){
            $id = getId($mysqli);
            $nom = $value['nom'];
            $prenom = $value['prenom'];
            $age = $value['age'];
            $metier = $value['metier'];
            $classe = $value['classe'];
            $insert2 = "INSERT INTO `persos`(`id_user`, `nom`, `prenom`, `age`, `metier`, `classe`) VALUES ('$id','$nom','$prenom','$age','$metier','$classe')";
            $result_insert2 = mysqli_query($mysqli,$insert2);
        }
        //header("Location: univers.php");
        
        
        //GESTION DE LAVANCEE DES VAISSEAUX
        
        
        
        $select1 = "SELECT * from vaisseaux where id_user ='$id'";
        $result_select1 = mysqli_query($mysqli,$select1);
        
        while ($row = mysqli_fetch_assoc($result_select1)) {
            $vaisseau4 = [];
            $operateurs = [];
            $idVaisseau = $row['id_vaisseau'];
            $nomVaisseau = $row['nom'];
            $etat_technique = $row['etat_technique'];
            $etat_proprete = $row['etat_proprete'];
            
            $vaisseau4[]= new Vaisseau("$nomVaisseau","$etat_technique","$etat_proprete");
            
            //echo $row['nom'];
            $select2 = "SELECT * from team where id_user ='$id' AND id_vaisseau = '$idVaisseau' and etat != 'mort' and metier != 'Pilote'";
            $result_select2 = mysqli_query($mysqli,$select2);
            while ($row2 = mysqli_fetch_assoc($result_select2)) {
                $nom = $row2['nom'];
                $prenom = $row2['prenom'];
                $age = $row2['age'];
                $metier = $row2['metier'];
                $classe = $row2['classe'];
                
                $operateurs[] = new Operateur("$nom","$prenom",$age,"$metier","$classe");
                
            }
            
            //echo $vaisseau4[0];
            
            foreach($operateurs as $value){
                echo $value->reparation($vaisseau4[0]);
                echo "<br/>";
                

            }
        
            $nomVaisseau = $vaisseau4[0]->toArray();
            echo $nomVaisseau['nom'];
            
            echo "Etat technique : ";
            echo $vaisseau4[0]->etat_technique();
            $etat_technique = $vaisseau4[0]->etat_technique();
            echo "Etat propreté : ";
            echo $vaisseau4[0]->etat_proprete();
            $etat_proprete = $vaisseau4[0]->etat_proprete();
            
            echo "<br/>";
            //echo $idVaisseau;
            //echo $id;
            
            $update_etat = "UPDATE `vaisseaux` SET `etat_technique`='$etat_technique',`etat_proprete`='$etat_proprete' WHERE id_user ='$id' AND id_vaisseau ='$idVaisseau'";
            $result_etat = mysqli_query($mysqli,$update_etat);
            
            echo "<br/>";
        }
        
        
}
    

if(isset($_POST['marche'])){
    echo "Vous vous trouvez au marché, vous pouvez discuter et/ou recruter de nouveaux membres.";
    $id = getId($mysqli);
    $select = "SELECT * from persos where id_user = '$id'";
    $result_select = mysqli_query($mysqli,$select);

    if (mysqli_num_rows($result_select) == 0) {
        echo "<br/> Plus aucun client pour aujourd'hui...";
        //echo "<form method='POST' action='univers.php'><input type='submit' name='days' value='Passer au jour suivant'></form>";
        
        
        
        
        
    } else {
        $personnes3 = [];
    
        while ($row = mysqli_fetch_assoc($result_select)) {
            $nom = $row['nom'];
            $prenom = $row['prenom'];
            $age = $row['age'];
            $metier = $row['metier'];
            $classe = $row['classe'];
            
            $personnes3[] = new Personne("$nom","$prenom",$age,"$metier","$classe");
        }
        
        echo "<br/>";
        $personnes3[0]->achat();
        echo "<div id='buttons'><button id='talk'>Discuter</button>
        <button id='infos'>Informations</button>
        <form method='POST' action='univers.php'><input type='submit' id='sell' value='Vendre les produits' name='sell'><input type='submit' name='recruter' value='Recruter' id='recruter'></form></div>";
    
    }
    
    
    
    
    
    
    

    
}else if (isset($_POST['garage'])){
    echo "Vous vous trouvez dans votre garage, sur Issal, vous pouvez gérer vos vaisseaux";
    $id=getId($mysqli);
    $vaisseaux2 = [];
    
    $select_garrage = "SELECT * from vaisseaux where id_user = '$id'";
    $result_select_garrage = mysqli_query($mysqli,$select_garrage);
    echo "<br/>";
    if (mysqli_num_rows($result_select_garrage) > 0) {
        while ($row=mysqli_fetch_array($result_select_garrage)){
            $nom = $row['nom'];
            $etat_technique = $row['etat_technique'];
            $etat_proprete = $row['etat_proprete'];
            
            $vaisseaux2[] = new Vaisseau("$nom","$etat_technique","$etat_proprete");
        }
    }
    
    echo "<br/>";
    foreach($vaisseaux2 as $value){
        $value->sePresenter();
        
        
        $tab = $value->toArray();
        //echo $tab['nom'];
        $nomVaisseau = $tab['nom'];
        
        $id = getId($mysqli);
        
        $select1 = "SELECT * from vaisseaux where id_user = '$id' and nom = '$nomVaisseau'";
        $result_select1 = mysqli_query($mysqli,$select1);
        
        $idVaisseau = 0;
        while ($row=mysqli_fetch_array($result_select1)){
            $idVaisseau = $row['id_vaisseau'];
        }
        
        
        $select = "SELECT * from team where id_user = '$id' and id_vaisseau = '$idVaisseau'";
        $result_select = mysqli_query($mysqli,$select);
        if (mysqli_num_rows($result_select) > 0) {
            echo "<br/>Membres affectés à ce vaisseau : ";
            while ($row=mysqli_fetch_array($result_select)){
                echo $row['nom'] . " " . $row['prenom'] . ", " . $row['metier'] . " .";
            }
        }else{
            echo "<br/>";
            echo "Aucun membre affecté à ce vaisseau";
        }
        
        
        echo "<br/>";
    }
    
    
    
    
    
    
    
}else if(isset($_POST['gestion'])){
    $personnes2 = [];
    echo "Vous vous trouvez dans vos dortoirs, vous pouvez gérer vos recrues.";
    $id = getId($mysqli);
    $etat = "vivant";
    $select_gest = "SELECT * from team where id_user = '$id' and etat='$etat'";
    $result_select_gest = mysqli_query($mysqli,$select_gest);
    echo "<br/>";
    if (mysqli_num_rows($result_select_gest) > 0) {
        while ($row=mysqli_fetch_array($result_select_gest)){
            $nom = $row['nom'];
            $prenom = $row['prenom'];
            $age = $row['age'];
            $metier = $row['metier'];
            $classe = $row['classe'];
            
            $personnes2[] = new Personne("$nom","$prenom",$age,"$metier","$classe");
            
            
        }
    }
    foreach($personnes2 as $value){
        echo "<br/>";
        $value->sePresenter();
        
        $personneArray = $value->toArray();
        $nom = $personneArray['nom'];

    
        echo "<form method='POST' action='univers.php'><input type='submit' name='ban' value='Tuer'><input type='submit' name='affecter' value='Affecter à un vaisseau'><input type='hidden' name='nom' value='$nom'></form>";
    }
    
    
}else{
    
}

if(isset($_POST['affecter'])){
    echo "A quel vaisseau souhaitez vous l'affecter ?";
    echo "<form method='POST' action='univers.php'>
    <select name='choix'>";
    $id=getId($mysqli);
    $nomPerso = $_POST['nom'];
    
    $select_garrage = "SELECT * from vaisseaux where id_user = '$id'";
    $result_select_garrage = mysqli_query($mysqli,$select_garrage);
        while ($row=mysqli_fetch_array($result_select_garrage)){
            $nom = $row['nom'];
            $value = $row['id_vaisseau'];
            echo "<option value='$value'>$nom</option> ";
            
        }
    
    //<option value="option1">Option 1</option>        
    echo "
    </select>
    <input type='hidden' name='nom' value='$nomPerso'>
    <input type='submit' name='affecter2' value='Affecter'></form>";
    
}

if(isset($_POST['affecter2'])){
    $choix = $_POST['choix'];
    $nom = $_POST['nom'];
    $id = getId($mysqli);
    
    $select = "SELECT * from team where id_user ='$id' and nom = '$nom'";
    $result_select = mysqli_query($mysqli,$select);
    
    $id_perso = 0;
    $metier = "";
    
    while ($ligne=mysqli_fetch_array($result_select)){
        $id_perso = $ligne['id_perso'];
        $metier = $ligne['metier'];
    }
    
    $select2 = "SELECT * from vaisseaux where id_user ='$id' and id_vaisseau = '$choix'";
    $result_select2 = mysqli_query($mysqli,$select2);
    
    $nomVaisseau = 0;
    
    while ($ligne=mysqli_fetch_array($result_select2)){
        $nomVaisseau = $ligne['nom'];
    }
    
    if($metier == "Pilote"){
        //echo "DZIDZZIDIDZ";
        $verifier = "SELECT * from team where id_user = '$id' AND id_vaisseau ='$choix' AND metier ='Pilote'";
        $result_verifier = mysqli_query($mysqli, $verifier);
        
        if (mysqli_num_rows($result_verifier) > 0) {
            echo "Il y a deja un pilote pour ce vaisseau";
        }else{
            $update = "UPDATE `team` SET `id_vaisseau`='$choix' WHERE id_user = '$id' and id_perso = '$id_perso'";
            $result_update = mysqli_query($mysqli,$update);
            
            echo "$nom a été affecté.e au vaisseau $nomVaisseau";
        }
    }else{
        $update = "UPDATE `team` SET `id_vaisseau`='$choix' WHERE id_user = '$id' and id_perso = '$id_perso'";
        $result_update = mysqli_query($mysqli,$update);
        
        echo "$nom a été affecté.e au vaisseau $nomVaisseau";
    }
    
    
    
    
    //echo $nomVaisseau;
    
    //echo $id_perso;
    
    
}

function getId($mysqli){
    $username = $_SESSION['login'];
    $select2 = "SELECT id_user from users where username = '$username'";
    $result_select2 = mysqli_query($mysqli,$select2);
    if (mysqli_num_rows($result_select2) > 0) {
        while ($ligne2=mysqli_fetch_array($result_select2)){
            $id = $ligne2['id_user'];
            return $id;
        }
    }
}

if(isset($_POST['ban'])){
        echo $_POST['nom'];
        $nom = $_POST['nom'];
        $id = getId($mysqli);
        echo $id;
        //$delete = "DELETE FROM `team` WHERE nom = '$nom' and id_user = '$id'";
        //$result_delete = mysqli_query($mysqli,$delete);
        
        $update = "UPDATE `team` SET `etat`='mort' WHERE id_user = '$id' and nom = '$nom'";
        $result_update = mysqli_query($mysqli,$update);
        
        header("Location: univers.php");
        
        $nom = "resultat";
        $valeur = "Vous avez eliminé une de vos recrues, c'était peu être un.e espion.ne mentaliste...";
        $expire = time() + (30 * 24 * 60 * 60);

        setcookie($nom, $valeur, $expire, "/");
        
}


if(isset($_POST['recruter'])){
    
    $personnes = getPersonnes($mysqli);
    $personneArray = $personnes[0]->toArray();
    $nom = $personneArray['nom'];
    $prenom = $personneArray['prenom'];
    $age = $personneArray['age'];
    $classe = $personneArray['classe'];
    $metier = $personneArray['metier'];
    echo $nom . " recruté avec succès";
    $id = getId($mysqli);
    //echo $id;
    
    $select3 = "SELECT id_perso from persos where nom = '$nom' and id_user = '$id'";
    $result_select3 = mysqli_query($mysqli,$select3);
    if (mysqli_num_rows($result_select3) > 0) {
        while ($ligne3=mysqli_fetch_array($result_select3)){
            $idPerso = $ligne3['id_perso'];
        }
    }
    
    $delete = "DELETE FROM `persos` WHERE id_perso = '$idPerso'";
    $result_delete = mysqli_query($mysqli,$delete);
    
    $etat = "vivant";
    $id_vaisseau = 0;
    
    
    $insert = "INSERT INTO `team`( `id_user`, `id_perso`, `nom`, `prenom`, `age`, `classe`, `metier`, `etat`, `id_vaisseau`) VALUES ('$id','$idPerso','$nom','$prenom','$age','$classe','$metier','$etat','$id_vaisseau')";
    $result_insert = mysqli_query($mysqli,$insert);
    header("Location: univers.php");
    
    $nom = "resultat";
    $valeur = "Vous avez recruté une nouvelle personne !";
    $expire = time() + (30 * 24 * 60 * 60);

    setcookie($nom, $valeur, $expire, "/");
    
}

function getPersonnes($mysqli) {
    $personnes = []; 
    $id = getId($mysqli);
    $select = "SELECT * FROM persos where id_user = '$id'";
    $result_select = mysqli_query($mysqli, $select);

    if ($result_select) {
        while ($row = mysqli_fetch_assoc($result_select)) {
            $personnes[] = new Personne($row['nom'], $row['prenom'], $row['age'], $row['metier'], $row['classe']);
        }
    } else {
        echo "Erreur dans la requête : " . mysqli_error($mysqli);
    }
    return $personnes; 
}

if(isset($_POST['sell'])){
    $personnes = getPersonnes($mysqli);
    $personneArray = $personnes[0]->toArray();
    $nom = $personneArray['nom'];
    echo $nom . " : Merci, au revoir.";
    $id = getId($mysqli);
    
    $select3 = "SELECT id_perso from persos where nom = '$nom' and id_user = '$id'";
    $result_select3 = mysqli_query($mysqli,$select3);
    if (mysqli_num_rows($result_select3) > 0) {
        while ($ligne3=mysqli_fetch_array($result_select3)){
            $idPerso = $ligne3['id_perso'];
        }
    }
    
    $delete = "DELETE FROM `persos` WHERE nom = '$nom' and id_user = '$id'";
    $result_delete = mysqli_query($mysqli,$delete);
    
    header("Location: univers.php");
    
    $nom = "resultat";
    $valeur = "Vous avez vendu les produits";
    $expire = time() + (30 * 24 * 60 * 60);

    setcookie($nom, $valeur, $expire, "/");
}

$id = getId($mysqli);

$select_jour = "SELECT jour from users where id_user ='$id'";
$result_jour = mysqli_query($mysqli,$select_jour);
$jour = 0;

while ($ligne=mysqli_fetch_array($result_jour)){
    $jour = $ligne['jour'];
}

echo "<br/> Jour : $jour";


echo "<form method='POST' action='univers.php'><input type='submit' name='days' value='Passer au jour suivant'></form>";


if(isset($_POST['deco'])){
    session_destroy();
    header("Location: login.php");
}

if (isset($_COOKIE['resultat'])) {
    echo "<br/>";
    echo $_COOKIE['resultat'];
    setcookie("resultat", "", time() - 3600, "/");
}



?>

<script>
    let sell = document.getElementById('sell');
    let talk = document.getElementById('talk');
    let recruter = document.getElementById('recruter');
    let infos = document.getElementById('infos');
    
    let buttons = document.getElementById('buttons');
    
    talk.addEventListener('click', function() {
        talk.style.display='none';
        recruter.style.display ='block';
        
        const nouveauTexte = document.createElement('span');
        
        nouveauTexte.innerHTML = "Vous : pas trop dur de survir ces temps ci ? ";
        nouveauTexte.innerHTML += "<br><?php
        
        $personnes = getPersonnes($mysqli);
        $personneArray = $personnes[0]->toArray();
        echo $personneArray['nom'];
        $classe = $personneArray['classe'];
        
        if($classe == 'Mentaliste'){
            $nombre_aleatoire = rand(1, 3);
            if($nombre_aleatoire == 1){
                echo " : Pas facile...";
            }
            if($nombre_aleatoire == 2){
                echo " : Avec tout ce qui ce passe en ce moment, c'est pas facile...";
            }
            if($nombre_aleatoire == 3){
                echo " : Difficile à vivre, on se sent pas vraiment en sécurité...";
            }
        }else{
            $nombre_aleatoire = rand(1, 3);
            if($nombre_aleatoire == 1){
                echo " : Pas facile... Il parait que des anciens rebels de Mulet ont rejoint le marché. Heuresement pour eux, la Fondation n'est pas encore au courant, du moins je l'espère...";
            }
            if($nombre_aleatoire == 2){
                echo " : On arrive même plus à se déplacer pour venir chercher à manger. Il parait que tout les pilotes restant sont des anciens résistants, et qu'ils sont activement recherchés...";
            }
            if($nombre_aleatoire == 3){
                echo " : Avec la chasse aux résistants, la Fondation coupe presque tous les apports d'alimentation, on a plus rien...";
            }
            
        }
        
        ?> ";
        
        buttons.prepend(nouveauTexte);
        
        
        
    });
    
    infos.addEventListener('click', function() {
        infos.style.display = "none";
        const nouveauTexte2 = document.createElement('span');
        
        nouveauTexte2.innerHTML = "<?php
        
        $personnes = getPersonnes($mysqli);
        $personneArray = $personnes[0]->toArray();
        $metier = $personneArray['metier'];
        $nom = $personneArray['nom'];
        $prenom = $personneArray['prenom'];
        
        echo "$prenom $nom, $metier, $age ans";
        
        ?>";
        buttons.append(nouveauTexte2);
        
    });
    
    
</script>

Youez - 2016 - github.com/yon3zu
LinuXploit