View file release_fix#2/mods/game/settings.php

<?php
session_start();
$mod_title="игра-настройки";
$mod_status="on";
if($mod_status=="on")
{
function mod_body($auth,$adminauth)
{
$level="";
$guildc="";
$arenac="";
if($auth=="ok")
{
$mcl="";
$query = "SELECT * FROM users WHERE login='$_COOKIE[login]'";
$cat = mysql_query ($query);
if(!$cat) exit (mysql_error());
while(list($id,$login,$pass,$mail,$reg,$class,$m,$h,$z,$s,$mon,$gold,$pms,$lvl,$ava,$ban,$online) = mysql_fetch_row($cat))
{
$mcl=$class;
$level=$lvl;
}
$query = "SELECT * FROM count";
$cat = mysql_query ($query);
if(!$cat) exit (mysql_error());
while(list($id,$guild,$arena) = mysql_fetch_row($cat))
{
$guildc=$guild;
$arenac=$arena;
}
echo "
<img src='img/bo.png'> <a href='?do=game/char'>персонаж($level)</a>|<img src='img/bs.png'> <a href='?do=game/history'>история</a><br>
<br>
";
$_pg="0";
$ag="-10";
$_pg2="10";
if(!empty($_GET['_pg']))
{
$ag=$_GET['_pg']-"10";
$_pg=$_GET['_pg'];
$_pg2=$_GET['_pg']+"10";
}
if(empty($_GET['subdo']))
{
echo "
<form method='POST' action='?do=game/settings&subdo=changepwd'>
старый пароль:<br>
<input type='password' name='oldpwd' size='15'><br>
новый пароль:<br>
<input type='password' name='pwd' size='15'><br>
<input type='submit' value='изменить пароль'><br>
</form>
";
}
else if($_GET['subdo']=="changepwd")
{
if($_COOKIE['pass']==$_POST['oldpwd'])
{
$query="UPDATE users SET pass='$_POST[pwd]' WHERE login='".$_COOKIE[login]."'";
$result=mysql_query($query)
or die("<span style='color:red'>ошибка обновления пароля!</span><br>");
echo "<span style='color:green'>пароль изменён!</span><br>";
setcookie("pass","$_POST[pwd]",time()+$time);
}
else
{
echo "<span style='color:red'>старый пароль неверный!</span><br>";
}
}
include "data/buttons.auth.php";
}
else
{
echo "
Ошибка авторизации!<br>
";
}
}
}
else
{
function mod_body($auth,$adminauth)
{
echo "мод выключен администратором!<br>";
}
}
?>