quote_smart($_GET['realm']); if (is_numeric($realmid)) $sqlc->connect($characters_db[$realmid]['addr'], $characters_db[$realmid]['user'], $characters_db[$realmid]['pass'], $characters_db[$realmid]['name']); else $realmid = $realm_id; } //==========================$_GET and SECURE======================== $id = $sqlc->quote_smart($_GET['id']); if (is_numeric($id)); else $id = 0; $order_by = (isset($_GET['order_by'])) ? $sqlc->quote_smart($_GET['order_by']) : 'name'; if (preg_match('/^[[:lower:]]{1,6}$/', $order_by)); else $order_by = 'name'; $dir = (isset($_GET['dir'])) ? $sqlc->quote_smart($_GET['dir']) : 1; if (preg_match('/^[01]{1}$/', $dir)); else $dir = 1; $order_dir = ($dir) ? 'ASC' : 'DESC'; $dir = ($dir) ? 0 : 1; //==========================$_GET and SECURE end======================== if ($order_by === 'map') $order_by = 'map '.$order_dir.', zone'; elseif ($order_by === 'zone') $order_by = 'zone '.$order_dir.', map'; // getting character data from database $result = $sqlc->query('SELECT account, name, race, class, level, gender FROM characters WHERE guid = '.$id.' LIMIT 1'); if ($sqlc->num_rows($result)) { $char = $sqlc->fetch_assoc($result); // we get user permissions first $owner_acc_id = $sqlc->result($result, 0, 'account'); $result = $sqlr->query('SELECT gmlevel, username FROM account WHERE id = '.$char['account'].''); $owner_gmlvl = $sqlr->result($result, 0, 'gmlevel'); $owner_name = $sqlr->result($result, 0, 'username'); if (($user_lvl > $owner_gmlvl)||($owner_name === $user_name)) { //------------------------Character Tabs--------------------------------- // we start with a lead of 10 spaces, // because last line of header is an opening tag with 8 spaces // keep html indent in sync, so debuging from browser source would be easy to read $output .= '
'.htmlentities($char['name']).' - - lvl '.char_get_level_color($char['level']).'

'; //---------------Page Specific Data Ends here---------------------------- //---------------Character Tabs Footer----------------------------------- $output .= '


'; } else error($lang_char['no_permission']); } else error($lang_char['no_char_found']); } //######################################################################################################################## // MAIN //######################################################################################################################## //$action = (isset($_GET['action'])) ? $_GET['action'] : NULL; $lang_char = lang_char(); char_friends($sqlr, $sqlc); //unset($action); unset($action_permission); unset($lang_char); require_once 'footer.php'; ?>