<?

////////////////////////////////////////////////////////////////////
/////////  DEFINING GLOBAL VARIABLES CALLED IN FUNCTIONS   /////////
////////////////////////////////////////////////////////////////////
$mypoints = $userdata['attack'];
$username = $userdata['user_name'];
$userid = $userdata['user_id'];
$ourswins = $userdata[win];
$ourspoints = $userdata[user_points];
$tehmonee = $userdata[money];
$oursloss = $userdata[loss];
$azzmoney = $userdata[money];

$opp = $_GET[to];
$opp = stripinput($opp);
$us = $userdata['user_id'];
///////////////////////////////////////////////////////////////////////////////
///////////////////////////////////////////////////////////////////////////////

//////////////CHECK IF ALREADY TRIED////////////////////////////////////////////
$checksql = "SELECT * FROM project_birdie_attack WHERE user_id='$userid' AND victim_id='$opp' LIMIT 1";
$checkquery = dbquery($checksql) or die("no checkquery");
$checkrows = dbrows($checkquery);

if($checkrows < '1')
{
//1st time
$insertsql = "INSERT INTO `project_birdie_attack` ( `id` , `user_id` , `victim_id` )
VALUES (
NULL, '$userid', '$opp'
);";
dbquery($insertsql) or die("no insert"); //////////////////////////////////////////////////////////////////////////////////
}
else
{
//already tried
echo "<center><img src='iprestricted.gif'><hr><h3>ERROR: You Have Already Attempted To Hack This User. Your IP Address Has Been Blocked For This User Until Cron Run. Please Try Again Later.</h3></center>";
}
///
///
///
///
/////////////////check if hacked too many times today ///////////////////
$wsql = "SELECT * FROM project_users WHERE user_id='$us' LIMIT 1";
$wquery = dbquery($wsql);
while($row = dbarray($wquery))
{
$r = $row[hackstoday];
	if($r == '20')
	{
	echo"<center><img src='overlimit.gif'><hr><h3>ERROR: You Have Reached The Limit Of Allotted Hack Attempts Per Day. This Will Reset At Server Cron Run. Your IP Has Been Blocked From Hacking For The Rest Of Todays Session. Please Try Again Later.</h3></center>"; // hacks exceeeded
	}
	elseif($r == "19")
	{
	echo "Only 1 more hack remaining today<br>"; //19 hacks
	}
$r2 = $r+1;
$update = "UPDATE project_users SET hackstoday='$r2' WHERE user_id='$us' LIMIT 1";                ///////////////////////////////////
dbquery($update) or die("could not update hackstoday");
}

////



$bingobox = array('0','1');
$query = dbquery("SELECT * FROM project_users WHERE user_id='$opp' LIMIT 1");

while($row = dbarray($query))
{
$opppoints = $row[security];
$oppmoney = $row[money];
$oppname = $row[user_name];
$oppid = $row[user_id];
}
echo "<h2><center>Attempting To Hack User: ".$oppname."...</center></h2>";

function win($username, $tehmonee, $ourswins, $ourspoints, $opp, $oppid, $awins, $apoints, $userid, $oppname, $opppoints)
{
$query = dbquery("SELECT * FROM project_users WHERE user_id='$opp' LIMIT 1");
while($row = dbarray($query))
{
$opppoints = $row[security];
$oppmoney = $row[money];
$oppname = $row[user_name];
$opplossnum = $row[loss];
$opplosspoints = $row[user_points];
}
$winr = "UPDATE project_users SET lasthacker='$username' WHERE user_id='$oppid' LIMIT 1";
dbquery($winr) or die("no lasthacker");

echo "<center><img src='success.gif'><hr>You've Successfully Hacked The User. The Server Has Logged This Hack And Your Stats Will Be Updated.<hr> <a href='viewpage.php?page_id=89'>Click Here To Return To Your Uplink</a><br><a href='viewpage.php?page_id=85'>Click Here To Return To The Hackable Users List</a></center><hr>";


//guess what this does

$tehlosr = $opplossnum+1;
$sqlosr = "UPDATE project_users SET loss='$tehlosr' WHERE user_id='$oppid' LIMIT 1";
dbquery($sqlosr) or die("no add lossr");

$tehpnts = $opplosspoints-2;
$sqpnts = "UPDATE project_users SET user_points='$tehpnts' WHERE user_id='$oppid' LIMIT 1";
dbquery($sqpnts) or die("no add pnts");

$tehzwins2 = $ourswins+1;
$sqlwinzors = "UPDATE project_users SET win='$tehzwins2' WHERE user_id='$userid' LIMIT 1";
dbquery($sqlwinzors) or die("no add win");

$shpn2 = $ourspoints+2;
$sqpoints = "UPDATE project_users SET user_points='$shpn2' WHERE user_id='$userid' LIMIT 1";
dbquery($sqpoints) or die("no add points");


$query23 = dbquery("SELECT * FROM project_users WHERE user_id='$oppid' LIMIT 1");

while($row = dbarray($query23))
{
$opppoints = $row[security];
$oppmoney = $row[money];
$opploss = $row[loss];
$opppoints = $row[user_points];
$amoney = $userdata[money];
$lossr = $opploss++;
$pointsr = user_points-1;
$oppmonee = $row[money];


if($oppmoney > '15' || $oppmoney == '15')
{
$azmoney = $tehmonee+15;
$oppmoney = $oppmonee-15;
dbquery("UPDATE project_users SET money=$oppmoney WHERE user_id='$oppid' LIMIT 1") or die("no loss of opp money");
}
else
{
$azmoney = $tehmonee+15;
}
dbquery("UPDATE project_users SET money='$azmoney' WHERE user_id='$userid' LIMIT 1") or die("no add of money to you");


}








}
function loss($username, $tehmonee, $ourswins, $ourspoints, $opp, $oppid, $awins, $apoints, $userid, $oppname, $opppoints, $oursloss, $azzmoney)
{
$query = dbquery("SELECT * FROM project_users WHERE user_id='$opp' LIMIT 1");
while($row = dbarray($query))
{
$opppoints = $row[security];
$oppmoney = $row[money];
$oppname = $row[user_name];
$oppwinnum = $row[win];
$opplosspoints = $row[user_points];
}



$tehwnr = $oppwinnum+1;
$sqwnr = "UPDATE project_users SET win='$tehwnr' WHERE user_id='$oppid' LIMIT 1";
dbquery($sqwnr) or die("no add lossr");

$tehpnts = $opplosspoints+2;
$sqpnts = "UPDATE project_users SET user_points='$tehpnts' WHERE user_id='$oppid' LIMIT 1";
dbquery($sqpnts) or die("no add pnts");

$tehzwins2 = $oursloss+1;
$sqlwinzors = "UPDATE project_users SET loss='$tehzwins2' WHERE user_id='$userid' LIMIT 1";
dbquery($sqlwinzors) or die("no add win");

$shpn2 = $ourspoints-2;
$sqpoints = "UPDATE project_users SET user_points='$shpn2' WHERE user_id='$userid' LIMIT 1";
dbquery($sqpoints) or die("no add points");



$query23 = dbquery("SELECT * FROM project_users WHERE user_id='$oppid' LIMIT 1");

while($row = dbarray($query23))
{
$opppoints = $row[security];
$oppmoney = $row[money];
$opploss = $row[loss];
$opppoints = $row[user_points];
$amoney = $userdata[money];
$lossr = $opploss++;
$pointsr = user_points-1;
$oppmonee = $row[money];
}

if($azzmoney > '15' || $azzmoney == '15')
{
$azzmoney = $tehmonee-15;
$oppmoney = $oppmonee+15;
dbquery("UPDATE project_users SET money=$azzmoney WHERE user_id='$userid' LIMIT 1") or die("no loss of opp money");
}
else
{
$oppmoney = $oppmonee+15;
}
dbquery("UPDATE project_users SET money='$oppmoney' WHERE user_id='$oppid' LIMIT 1") or die("no add of money to you");




//guess what this does too
echo "<center><img src='fail.jpg'><hr>You've Failed To Hack The User. The Server Has Logged This Hack And Your Stats Will Be Updated.<hr> <a href='viewpage.php?page_id=89'>Click Here To Return To Your Uplink</a><br><a href='viewpage.php?page_id=85'>Click Here To Return To The Hackable Users List</a></center><hr>";
}

if($opppoints > $mypoints)
{
loss($username, $tehmonee, $ourswins, $ourspoints, $opp, $oppid, $awins, $apoints, $userid, $oppname, $opppoints, $oursloss, $azzmoney);
exit;
}
else
{
	$diff = $mypoints-$opppoints;
	$diff = $diff*6;
	$i = "0";
		while($i < $diff)
		{
		$i++;
		array_push($bingobox, "1");
		}
}

//
//
$finalentry = array_rand($bingobox, 1);

//interprit
$winq = $userdata[win];
$pointsq = $userdata[user_points];
if($bingobox[$finalentry] == "1")
	{
win($username, $tehmonee, $ourswins, $ourspoints, $opp, $oppid, $awins, $apoints, $userid, $oppname, $opppoints);
	}
	else
	{
	loss($username, $tehmonee, $ourswins, $ourspoints, $opp, $oppid, $awins, $apoints, $userid, $oppname, $opppoints, $oursloss, $azzmoney);
	}
?>