Peq character mover...

[Grebbin]

<?php
if (!ISSET($_POST['action'])) {
?>
<FORM ACTION="PEQ-Char-Move.php?action=process" METHOD="post">
<table width='300' cellpadding='0' cellspacing='2' border='0' align='center' >
<tr>
</tr>
<tr>
<td colspan=2>&nbsp </td>
</tr>
<tr>
<td colspan=2><INPUT TYPE="hidden" NAME="s_id" value=<?php echo "\"".session_id()."\""; ?>></td>
</tr>
<tr>
<td colspan=2><INPUT TYPE="hidden" NAME="action" value="process"></td>
</tr>
<tr>
<td><b><font size="-1">LoginServer Username: </font></b></td>
<td><font color="#000080"><INPUT TYPE="text" NAME="lsusername" ></font></td>
</tr>
<tr>
<td><b><font size="-1">Character Name: </font></b></td>
<td><font color="#000080"><INPUT TYPE="text" NAME="charname" ></font></td>
</tr>
<tr>
<td colspan=2>&nbsp </td>
</tr>
<tr>
<td colspan='2' align='center'><INPUT TYPE="submit" NAME="SUBMIT" VALUE="Next..."></td>
</tr>
</table>
</form>
<?php
} else {
if ($_POST['action'] == 'process') {
if (session_id() != $_POST['s_id']) {
echo "Session IDs do not match! Aborting...";
echo "<a href=\"PEQ-Char-Move.php\">Go back</a>";
exit;
}
$lsusername = $_POST['lsusername'];
$charname = $_POST['charname'];
$zonename = "nexus";

$mhost = '192.168.1.107';
$muser = 'root';
$mpass = 'XXXXX';
$mdb = 'peq';

// Connects to database
$link = mysql_connect($mhost, $muser, $mpass) or die (mysql_error());
mysql_select_db($mdb, $link) or die (mysql_error());

###Character Query###
$query = "SELECT account_id,name FROM character_ WHERE name='$charname'";
$cresult = mysql_query($query);
if (mysql_num_rows($cresult) != 1) {
echo "Character Name Incorrect! Aborting...";
echo "<a href=\"PEQ-Char-Move.php\">Go back</a>";
} else {
while ($char = mysql_fetch_array($cresult)) {
$account_id = $char['account_id'];
$ccharname = $char['name'];

###LoginServer Query###
$query2 = "SELECT id,name FROM account WHERE id='$account_id'";
$lsresult = mysql_query($query2);
if (mysql_num_rows($lsresult) != 1) {
echo "LoginServer Data Incorrect! Aborting...";
echo "<a href=\"PEQ-Char-Move.php\">Go back</a>";
} else {
while ($ls = mysql_fetch_array($lsresult)) {
$id = $ls['id'];
$lsname = $ls['name'];

###Zone Query###
$query3 = "SELECT * FROM zone WHERE short_name like '$zonename'";
$zresult = mysql_query($query3);
if (mysql_num_rows($zresult) != 1) {
echo "Zone Data Incorrect! Aborting...";
echo "<a href=\"PEQ-Char-Move.php\">Go back</a>";
} else {
while ($zid = mysql_fetch_array($zresult)) {
$short_name = $zid['short_name'];
$long_name = $zid['long_name'];
$zoneidnumber = $zid['zoneidnumber'];

if ($lsusername != $lsname) {
echo "Incorrect, this has been logged! Aborting...";
echo "<a href=\"PEQ-Char-Move.php\">Go back</a>";




} else {
?>
<FORM ACTION="?action=postdata" METHOD="post">
<table width='300' cellpadding='0' cellspacing='2' border='0' align='center'>
<tr bgcolor="#006600">
<td colspan=2 align="center">
<font size="+2" color='#ffffff'><b>STEP 2 OF 3</B></font>
</td>
</tr>
<tr>
<td colspan=2><INPUT TYPE="hidden" NAME="s_id" value=<?php echo "\"".session_id()."\""; ?>></td>
</tr>
<tr>
<td colspan=2><INPUT TYPE="hidden" NAME="action" value="postdata"></td>
</tr>
<tr>
<td colspan=2>&nbsp </td>
</tr>
<tr>
<td colspan=2>
<INPUT TYPE="hidden" NAME="lsusername" value=<?php echo "\"".$lsusername."\""; ?>>
<INPUT TYPE="hidden" NAME="charname" value=<?php echo "\"".$charname."\""; ?>>
<INPUT TYPE="hidden" NAME="zoneid" value=<?php echo "\"".$zoneidnumber."\""; ?>>
</td>
</tr>
<tr>
<td><b>LoginServer Name: </b></td>
<td>Confirmed: <? echo $lsname; ?></td>
</tr>
<tr>
<td><b>Character Name: </b></td>
<td>Confirmed: <? echo $ccharname; ?></td>
</tr>
<tr>
<td><b>Zone Name: </b></td>
<td>Confirmed Zone: <? echo $zonename; ?>, <? echo $long_name; ?></td>
</tr>
<tr>
<td colspan=2><input type=submit value="DO IT!"></td>
</tr>
</table>
</form>
</center>
<?php
}}}
}
}
}
} // end step 2
} else {
if (session_id() != $_POST['s_id']) {
echo "Session IDs do not match! Aborting...";
echo "<a href=\"upload.php\">Go back</a>";
exit;
}
$lsusername = $_POST['lsusername'];
$charname = $_POST['charname'];
$zoneid = 152;
$zone = "nexus";

$mhost = '192.168.1.107';
$muser = 'root';
$mpass = 'firiona';
$mdb = 'peq';


// Connects to database
$link = mysql_connect($mhost, $muser, $mpass) or die (mysql_error());
mysql_select_db($mdb, $link) or die (mysql_error());
$query = "UPDATE character_ SET zonename='$zone',zoneid=$zoneid,x=-1,y=-1,z=-1 WHERE name='$charname'";
$result = mysql_query($query);
if (!$result) {
echo "Update Error";
echo "<a href=\"PEQ-Char-Move.php\">Go back</a>";
exit;
}


?>
<table width='300' cellpadding='0' cellspacing='2' border='0' align='center'>
<tr>
<td colspan=2 bgcolor='#006600' align="center">
<font size="+2" color='ffffff'><b> STEP 3 OF 3</B></font>
</td>
</tr>
<tr>
<td> <?echo $charname; ?> has been moved to <? echo $zone; ?></td>
</tr>
</table>
<a href="http://www.projecteq.net">Back</a> to Projecteq.net
<?php
}
}
?>