<?
if(!isset($_POST['delete'])){
$run = mssql_query("Select Name From Character Where AccountID='".$_SESSION['user']."'");
for($i=0; $i < mssql_num_rows($run);$i++){
$r = mssql_fetch_array($run);
$go = mssql_query("Select * From Character Where Name='".$r['Name']."'");
$check = mssql_num_rows($go);
if($check != 0){
$nr = mssql_fetch_array($go);
?>
<div style="width:100%; height:1px; background-color:#000;"></div>
<center><form action="" method="post">
<br><br>Искаш ли да изтриеш твоя играч (<font color="green"><b><? echo $nr['Name'] ?></b></font>)?<br><br>
<input type="hidden" value="<? echo $r['Name']; ?>" name="char" />
<input type="submit" value="Изтрий" name="delete" /><br><br><br>
</form></center>
<?
}
}
}
else
{
$char = (htmlspecialchars(addslashes($_POST['char'])));
$char = str_replace("shutdown", "", $char);
$char = str_replace("drop", "", $char);
$char = str_replace("-", "", $char);
$char = str_replace(";", "", $char);
$user = (htmlspecialchars(addslashes($_SESSION['user'])));
$check_acc = mssql_fetch_row(mssql_query("Select count From Character Where AccountID='$user' and Name='$char'"));
if($check_acc[0] != 0){
$go = mssql_query("Select * From Character Where Name='".$char."'");
$check = mssql_num_rows($go);
if($check != 0){
$stat = mssql_fetch_row(mssql_query("Select ConnectStat From MEMB_STAT Where memb___id='$user'"));
if($stat[0] == 0){
$r = mssql_fetch_array($go);
$pname = $r['Name'];
if($r['Name'] == NULL){
echo "<center><b>ГРЕШКА! Такъв герой не съществува!</b></center>";
}
else
{
mssql_query("Delete From AccountCharacter Where GameID1='$char' or GameID2='$char' or GameID3='$char' or GameID4='$char' or GameID5='$char'");
mssql_query("Delete From Character Where Name='$char'");
echo "<center><b>Ти успешно изтри своя герой!</b></center>";
}
}
else
{
echo "<center><b>Твоят акаунт е в игра! Моля излезте от сървъра!</b></center>";
}
}
}
else
{
echo "<center><b>Не се опитвай да хакваш, NOOB!</b></center>";
}
}
?>