Cyberbyte-Studios /
CyberWorks
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 9 | if (isset($_POST['editType'])) { |
||
| 10 | if (formtoken::validateToken($_POST)) { |
||
| 11 | switch ($_POST['editType']) { |
||
| 12 | View Code Duplication | case 'civ_inv': |
|
|
|
|||
| 13 | $civ_gear_value = $_POST['civ_inv_value']; |
||
| 14 | $update = "UPDATE `players` SET civ_gear = '$civ_gear_value' WHERE `uid` = '$uID';"; |
||
| 15 | $result_of_query = $db_link->query($update); |
||
| 17 | message($lang['edited'].' '.$lang['civ'].' '.$lang['inventory']); |
||
| 18 | break; |
||
| 19 | |||
| 20 | View Code Duplication | case 'cop_inv': |
|
| 21 | $cop_gear_value = $_POST['cop_inv_value']; |
||
| 22 | $update = "UPDATE `players` SET cop_gear = '$cop_gear_value' WHERE `uid` = '$uID';"; |
||
| 23 | $result_of_query = $db_link->query($update); |
||
| 46 | if ($result->num_rows > 0) { |
||
| 47 | $player = $result->fetch_object(); |
||
| 48 | |||
| 49 | View Code Duplication | if ($coplevel != $player->coplevel) { |
|
| 50 | logAction($_SESSION['user_name'], $lang['edited'].' '.nameID($player->playerid, $db_link).'('.$player->playerid.') '.$lang['cop'].' '.$lang['level'].' '.$lang['from'].' ('.$player->coplevel.') '.$lang['to'].' ('.$coplevel.')', 2); |
||
| 51 | } |
||
| 52 | View Code Duplication | if ($mediclevel != $player->mediclevel) { |
|
| 53 | logAction($_SESSION['user_name'], $lang['edited'].' '.nameID($player->playerid, $db_link).'('.$player->playerid.') '.$lang['medic'].' '.$lang['level'].' '.$lang['from'].' ('.$player->mediclevel.') '.$lang['to'].' ('.$mediclevel.')', 2); |
||
| 54 | } |
||
| 55 | View Code Duplication | if ($donorlevel != $player->$settings['donorFormat']) { |
|
| 56 | logAction($_SESSION['user_name'], $lang['edited'].' '.nameID($player->playerid, $db_link).'('.$player->playerid.') '.$lang['donator'].' '.$lang['level'].' '.$lang['from'].' ('.$player->$settings['donorFormat'].') '.$lang['to'].' ('.$donorlevel.')', 2); |
||
| 57 | } |
||
| 58 | View Code Duplication | if ($adminlevel != $player->adminlevel) { |
|
| 59 | logAction($_SESSION['user_name'], $lang['edited'].' '.nameID($player->playerid, $db_link).'('.$player->playerid.') '.$lang['admin'].' '.$lang['level'].' '.$lang['from'].' ('.$player->adminlevel.') '.$lang['to'].' ('.$adminlevel.')', 2); |
||
| 60 | } |
||
| 61 | View Code Duplication | if ($cash != $player->cash) { |
|
| 62 | logAction($_SESSION['user_name'], $lang['edited'].' '.nameID($player->playerid, $db_link).'('.$player->playerid.') '.$lang['cash'].' '.$lang['from'].' ('.$player->cash.') '.$lang['to'].' ('.$cash.')', 2); |
||
| 63 | } |
||
| 64 | View Code Duplication | if ($bankacc != $player->bankacc) { |
|
| 65 | logAction($_SESSION['user_name'], $lang['edited'].' '.nameID($player->playerid, $db_link).'('.$player->playerid.') '.$lang['bank'].' '.$lang['from'].' ('.$player->bankacc.') '.$lang['to'].' ('.$bankacc.')', 2); |
||
| 66 | } |
||
| 67 | |||
| 84 | if (is_null($donorlevel)) { |
||
| 85 | $donorlevel = $player->$settings['donorFormat']; |
||
| 86 | } |
||
| 87 | View Code Duplication | if ($coplevel != $player->coplevel) { |
|
| 88 | logAction($_SESSION['user_name'], $lang['edited'].' '.nameID($player->playerid, $db_link).'('.$player->playerid.') '.$lang['cop'].' '.$lang['level'].' '.$lang['from'].' ('.$player->coplevel.') '.$lang['to'].' ('.$coplevel.')', 2); |
||
| 89 | } |
||
| 90 | View Code Duplication | if ($mediclevel != $player->mediclevel) { |
|
| 91 | logAction($_SESSION['user_name'], $lang['edited'].' '.nameID($player->playerid, $db_link).'('.$player->playerid.') '.$lang['medic'].' '.$lang['level'].' '.$lang['from'].' ('.$player->mediclevel.') '.$lang['to'].' ('.$mediclevel.')', 2); |
||
| 92 | } |
||
| 93 | View Code Duplication | if ($donorlevel != $player->$settings['donorFormat']) { |
|
| 94 | logAction($_SESSION['user_name'], $lang['edited'].' '.nameID($player->playerid, $db_link).'('.$player->playerid.') '.$lang['donator'].' '.$lang['level'].' '.$lang['from'].' ('.$player->$settings['donorFormat'].') '.$lang['to'].' ('.$donorlevel.')', 2); |
||
| 95 | } |
||
| 96 | View Code Duplication | if ($cash != $player->cash) { |
|
| 97 | logAction($_SESSION['user_name'], $lang['edited'].' '.nameID($player->playerid, $db_link).'('.$player->playerid.') '.$lang['cash'].' '.$lang['from'].' ('.$player->cash.') '.$lang['to'].' ('.$cash.')', 2); |
||
| 98 | } |
||
| 99 | View Code Duplication | if ($bankacc != $player->bankacc) { |
|
| 100 | logAction($_SESSION['user_name'], $lang['edited'].' '.nameID($player->playerid, $db_link).'('.$player->playerid.') '.$lang['bank'].' '.$lang['from'].' ('.$player->bankacc.') '.$lang['to'].' ('.$bankacc.')', 2); |
||
| 101 | } |
||
| 102 | |||
| 110 | } elseif ($_SESSION['user_level'] >= 2) { |
||
| 111 | $coplevel = intval($_POST['player_coplvl']); |
||
| 112 | $mediclevel = intval($_POST['player_medlvl']); |
||
| 113 | View Code Duplication | if ($coplevel != $player->coplevel) { |
|
| 114 | logAction($_SESSION['user_name'], $lang['edited'].' '.nameID($player->playerid, $db_link).'('.$player->playerid.') '.$lang['cop'].' '.$lang['level'].' '.$lang['from'].' ('.$player->coplevel.') '.$lang['to'].' ('.$coplevel.')', 2); |
||
| 115 | } |
||
| 116 | View Code Duplication | if ($mediclevel != $player->mediclevel) { |
|
| 117 | logAction($_SESSION['user_name'], $lang['edited'].' '.nameID($player->playerid, $db_link).'('.$player->playerid.') '.$lang['medic'].' '.$lang['level'].' '.$lang['from'].' ('.$player->mediclevel.') '.$lang['to'].' ('.$mediclevel.')', 2); |
||
| 118 | } |
||
| 119 | |||
| 143 | |||
| 144 | $temp = ''; |
||
| 145 | $pGID = $player->playerid; |
||
| 146 | View Code Duplication | for ($i = 0; $i < 8; ++$i) { |
|
| 147 | $temp .= chr($pGID & 0xFF); |
||
| 148 | $pGID >>= 8; |
||
| 149 | } |
||
| 173 | <i class="fa fa-2x fa-bank"></i> |
||
| 174 | <h4> <?php echo $lang['bank'].': '.$player->bankacc; ?> </h4> |
||
| 175 | <?php |
||
| 176 | View Code Duplication | if ($player->arrested == 0) { |
|
| 177 | echo "<h4><button type='button' id='arrested' class='arrest btn btn-xs btn-success'>".$lang['not'].' '.$lang['arrested'].'</button></h4>'; |
||
| 178 | } else { |
||
| 179 | echo "<h4><button type='button' id='arrested' class='arrest btn btn-xs btn-theme01'>".$lang['arrested'].'</button></h4>'; |
||
| 180 | } |
||
| 181 | |||
| 182 | View Code Duplication | if ($player->blacklist == 0) { |
|
| 183 | echo "<h4><button type='button' id='blacklist' class='arrest btn btn-xs btn-success'>".$lang['not'].' '.$lang['blacklisted'].'</button></h4>'; |
||
| 184 | } else { |
||
| 185 | echo "<h4><button type='button' id='blacklist' class='arrest btn btn-xs btn-theme01'>".$lang['blacklisted'].'</button></h4>'; |
||
| 239 | </div> |
||
| 240 | </div> |
||
| 241 | <?php |
||
| 242 | View Code Duplication | if ($_SESSION['permissions']['view']['steam'] || $player->playerid == $_SESSION['playerid']) { |
|
| 243 | echo '<div class="col-md-2 col-sm-2 box0">'; |
||
| 244 | echo '<a href="http://steamcommunity.com/profiles/'.$player->playerid.'"'; |
||
| 245 | echo 'target="_blank">'; |
||
| 275 | if ($_SESSION['permissions']['edit']['houses']) { |
||
| 276 | echo '<li><a href="#house" data-toggle="tab">'.$lang['houses'].'</a></li>'; |
||
| 277 | } |
||
| 278 | View Code Duplication | if ($_SESSION['permissions']['edit']['vehicles']) { |
|
| 279 | echo '<li><a href="#veh" data-toggle="tab">'.$lang['vehicles'].'</a></li>'; |
||
| 280 | } |
||
| 281 | if ($_SESSION['permissions']['edit']['notes']) { |
||
| 291 | ?> |
||
| 292 | <div class="tab-pane fade in active well" id="civ_lic"> |
||
| 293 | <?php |
||
| 294 | View Code Duplication | if ($player->civ_licenses !== '"[]"' && $player->civ_licenses !== '') { |
|
| 295 | echo '<h4 style="centred">'.$lang['civil'].' '.$lang['licenses'].'</h4>'; |
||
| 296 | $return = stripArray($player->civ_licenses, 0); |
||
| 297 | foreach ($return as $value) { |
||
| 298 | if (strpos($value, '1') == true) { |
||
| 299 | $name = before(',', $value); |
||
| 300 | echo "<button type='button' id=".$name." class='license btn btn-xs btn-success' style='margin-bottom: 3px;'>".licName($name, $license).'</button> '; |
||
| 301 | } else { |
||
| 309 | </div> |
||
| 310 | <div class="tab-pane well fade" id="medic_lic"> |
||
| 311 | <?php |
||
| 312 | View Code Duplication | if ($player->med_licenses !== '"[]"' && $player->med_licenses !== '') { |
|
| 313 | echo '<h4 style="centred">'.$lang['medic'].' '.$lang['licenses'].'</h4>'; |
||
| 314 | $return = stripArray($player->med_licenses, 0); |
||
| 315 | foreach ($return as $value) { |
||
| 316 | if (strpos($value, '1') == true) { |
||
| 317 | $name = before(',', $value); |
||
| 318 | echo "<button type='button' id=".$name." class='license btn btn-xs btn-success' style='margin-bottom: 3px;'>".licName($name, $license).'</button> '; |
||
| 319 | } else { |
||
| 327 | </div> |
||
| 328 | <div class="tab-pane well fade" id="police_lic"> |
||
| 329 | <?php |
||
| 330 | View Code Duplication | if ($player->cop_licenses !== '"[]"' && $player->cop_licenses !== '') { |
|
| 331 | $return = stripArray($player->cop_licenses, 0); |
||
| 332 | echo '<h4 style="centred">'.$lang['cop'].' '.$lang['licenses'].'</h4>'; |
||
| 333 | foreach ($return as $value) { |
||
| 334 | if (strpos($value, '1') == true) { |
||
| 335 | $name = before(',', $value); |
||
| 336 | echo "<button type='button' id=".$name." class='license btn btn-xs btn-success' style='margin-bottom: 3px;'>".licName($name, $license).'</button> '; |
||
| 337 | } else { |
||
| 349 | ?> |
||
| 350 | <div class="tab-pane fade well" id="civ_inv"> |
||
| 351 | <?php |
||
| 352 | View Code Duplication | if ($player->civ_gear !== '"[]"' && $player->civ_gear !== '') { |
|
| 353 | echo '<h4 style="centred">'.$lang['civil'].' '.$lang['gear'].'</h4>'; |
||
| 354 | echo "<textarea class='form-control' readonly rows='5' style='width: 100%' id='civ_gear' name='civ_gear'>".$player->civ_gear.'</textarea><br>'; |
||
| 355 | |||
| 363 | </div> |
||
| 364 | <div class="tab-pane fade well" id="police_inv"> |
||
| 365 | <?php |
||
| 366 | View Code Duplication | if ($player->cop_gear !== '"[]"' && $player->cop_gear !== '') { |
|
| 367 | echo '<h4 style="centred">'.$lang['cop'].' '.$lang['gear'].'</h4>'; |
||
| 368 | echo "<textarea class='form-control' readonly rows='5' style='width: 100%' id='cop_gear' name='cop_gear'>".$player->cop_gear.'</textarea><br>'; |
||
| 369 | if ($_SESSION['permissions']['edit']['inventory']) { |
||
| 376 | </div> |
||
| 377 | <div class="tab-pane fade well" id="medic_inv"> |
||
| 378 | <?php |
||
| 379 | View Code Duplication | if ($player->med_gear !== '"[]"' && $player->med_gear !== '') { |
|
| 380 | echo '<h4 style="centred">'.$lang['medic'].' '.$lang['gear'].'</h4>'; |
||
| 381 | echo "<textarea class='form-control' readonly rows='5' style='width: 100%' id='med_gear' name='med_gear'>".$player->med_gear.'</textarea><br>'; |
||
| 382 | if ($_SESSION['permissions']['edit']['inventory']) { |
||
| 407 | </thead> |
||
| 408 | <tbody> |
||
| 409 | <?php |
||
| 410 | View Code Duplication | while ($row = mysqli_fetch_assoc($result_of_query)) { |
|
| 411 | echo '<tr>'; |
||
| 412 | echo '<td>'.substr($row['pos'], 1, -1).'</td>'; |
||
| 413 | echo "<td><a class='btn btn-primary btn-xs' href='".$settings['url'].'editHouse/'.$row['id']."'>"; |
||
| 438 | echo '<th>'.$lang['class'].'</th>'; |
||
| 439 | echo '<th class="hidden-xs">'.$lang['type'].'</th>'; |
||
| 440 | echo '<th class="hidden-xs">'.$lang['plate'].'</th>'; |
||
| 441 | View Code Duplication | if ($_SESSION['permissions']['edit']['vehicles']) { |
|
| 442 | echo '<th>'.$lang['edit'].'</th>'; |
||
| 443 | } |
||
| 444 | echo '</tr></thead><tbody'; |
||
| 527 | while ($row = mysqli_fetch_assoc($result_of_query)) { |
||
| 528 | if ($row['wantedCrimes'] !== '[]') { |
||
| 529 | $return = stripArray($row['wantedCrimes'], 3); |
||
| 530 | foreach ($return as $value) { |
||
| 531 | echo "<button type='button' id=".$value." class='wanted btn btn-xs btn-theme01' style='margin-bottom: 3px;'>".crimeName($value).'</button> '; |
||
| 532 | } |
||
| 533 | } else { |
||
| 558 | <?php echo $lang['edit'].' '.$lang['civ'].' '.$lang['inventory']; ?> |
||
| 559 | </h4> |
||
| 560 | </div> |
||
| 561 | View Code Duplication | <?php if ($_SESSION['permissions']['edit']['inventory']) { |
|
| 562 | ?> |
||
| 563 | <form method="post" action="<?php echo $settings['url'].'editPlayer/'.$uID; ?>" role="form"> |
||
| 564 | <?php echo formtoken::getField() ?> |
||
| 579 | </form> |
||
| 580 | <?php |
||
| 581 | } else { |
||
| 582 | errorMessage(5, $lang); |
||
| 583 | } ?> |
||
| 584 | </div> |
||
| 585 | </div> |
||
| 595 | <?php echo $lang['edit'].' '.$lang['medic'].' '.$lang['inventory']; ?> |
||
| 596 | </h4> |
||
| 597 | </div> |
||
| 598 | View Code Duplication | <?php if ($_SESSION['permissions']['edit']['inventory']) { |
|
| 599 | ?> |
||
| 600 | <form method="post" action="<?php echo $settings['url'].'editPlayer/'.$uID; ?>" role="form"> |
||
| 601 | <?php echo formtoken::getField() ?> |
||
| 616 | </form> |
||
| 617 | <?php |
||
| 618 | } else { |
||
| 619 | errorMessage(5, $lang); |
||
| 620 | } ?> |
||
| 621 | </div> |
||
| 622 | </div> |
||
| 632 | <?php echo $lang['edit'].' '.$lang['police'].' '.$lang['inventory']; ?> |
||
| 633 | </h4> |
||
| 634 | </div> |
||
| 635 | View Code Duplication | <?php if ($_SESSION['permissions']['edit']['inventory']) { |
|
| 636 | ?> |
||
| 637 | <form method="post" action="<?php echo $settings['url'].'editPlayer/'.$uID; ?>" role="form"> |
||
| 638 | <?php echo formtoken::getField() ?> |
||
| 653 | </form> |
||
| 654 | <?php |
||
| 655 | } else { |
||
| 656 | errorMessage(5, $lang); |
||
| 657 | } ?> |
||
| 658 | </div> |
||
| 659 | </div> |
||
| 668 | <?php echo $lang['new'].' '.$lang['note']; ?> |
||
| 669 | </h4> |
||
| 670 | </div> |
||
| 671 | View Code Duplication | <?php if ($_SESSION['permissions']['edit']['notes']) { |
|
| 672 | ?> |
||
| 673 | <form method="post" action="<?php echo $settings['url'].'editPlayer/'.$uID; ?>" role="form"> |
||
| 674 | <div class="modal-body"> |
||
| 690 | </form> |
||
| 691 | <?php |
||
| 692 | } else { |
||
| 693 | errorMessage(5, $lang); |
||
| 694 | } ?> |
||
| 695 | </div> |
||
| 696 | </div> |
||
| 723 | <?php if ($_SESSION['permissions']['edit']['ranks']) { |
||
| 724 | echo '<h4>'.$lang['cop'].': '; |
||
| 725 | echo "<select id='player_coplvl' name='player_coplvl'>"; |
||
| 726 | View Code Duplication | for ($lvl = 0; |
|
| 727 | $lvl <= $settings['maxLevels']['cop']; |
||
| 728 | ++$lvl) { |
||
| 729 | echo '<option value="'.$lvl.'"'.select($lvl, $player->coplevel).'>'.$lvl.'</option>'; |
||
| 731 | echo '</select>'; |
||
| 732 | echo '<h4>'.$lang['medic'].': '; |
||
| 733 | echo "<select id='player_medlvl' name='player_medlvl'>"; |
||
| 734 | View Code Duplication | for ($lvl = 0; |
|
| 735 | $lvl <= $settings['maxLevels']['medic']; |
||
| 736 | ++$lvl) { |
||
| 737 | echo '<option value="'.$lvl.'"'.select($lvl, $player->mediclevel).'>'.$lvl.'</option>'; |
||
| 741 | if ($_SESSION['permissions']['edit']['ignLVL']) { |
||
| 742 | echo '<h4>'.$lang['admin'].': '; |
||
| 743 | echo "<select id='player_adminlvl' name='player_adminlvl'>"; |
||
| 744 | View Code Duplication | for ($lvl = 0; |
|
| 745 | $lvl <= $settings['maxLevels']['admin']; |
||
| 746 | ++$lvl) { |
||
| 747 | echo '<option value="'.$lvl.'"'.select($lvl, $player->adminlevel).'>'.$lvl.'</option>'; |
||
| 749 | echo '</select>'; |
||
| 750 | echo '<h4>'.$lang['donator'].': '; |
||
| 751 | echo "<select id='player_donlvl' name='player_donlvl'>"; |
||
| 752 | View Code Duplication | for ($lvl = 0; |
|
| 753 | $lvl <= $settings['maxLevels']['donator']; |
||
| 754 | ++$lvl) { |
||
| 755 | echo '<option value="'.$lvl.'"'.select($lvl, $player->$settings['donorFormat']).'>'.$lvl.'</option>'; |
||
| 776 | |||
| 777 | <script> |
||
| 778 | $(document).ready(function () { |
||
| 779 | View Code Duplication | <?php if ($_SESSION['permissions']['edit']['licences']) { |
|
| 780 | ?> |
||
| 781 | $(".license").click(function () { |
||
| 782 | $(this).toggleClass('btn-success btn-theme01'); |
||
| 832 | <?php |
||
| 833 | } else { |
||
| 834 | echo '<h1>'.errorMessage(36, $lang).'</h1>'; |
||
| 835 | } |
||
| 836 |
Jason_000
MightySCollins
Sam Collins
Scrutinizer Auto-Fixer
Loading history...
Duplicated code is one of the most pungent code smells. If you need to duplicate the same code in three or more different places, we strongly encourage you to look into extracting the code into a single class or operation.
You can also find more detailed suggestions in the “Code” section of your repository.