<?PHP
// Creator =Master=
// Get from MuWeb 0.8
// Edited by Vaflan
// It's modified for MyMuWeb

class option{

function register() {
$account = stripslashes($_POST['account']);
$password = stripslashes($_POST['password']);
$repassword = stripslashes($_POST['repassword']);
$email = stripslashes($_POST['email']);
$squestion = stripslashes($_POST['question']);
$sanswer = stripslashes($_POST['answer']);
$verifyinput = stripslashes($_POST['verifyinput']);
$country = stripslashes($_POST['country']);
$gender = stripslashes($_POST['gender']);
$fullname = stripslashes($_POST['fullname']);
$referral = stripslashes($_SESSION['referral']);
$ip = $_SERVER['REMOTE_ADDR'];

require("config.php");
include("includes/validate.class.php");

$username_check = mssql_query("SELECT memb___id FROM MEMB_INFO WHERE memb___id='$account'");
$username_verify = mssql_num_rows($username_check);

$email_check = mssql_query("SELECT mail_addr FROM MEMB_INFO WHERE mail_addr='$email'");
$email_verify = mssql_num_rows($email_check);

$ip_check = mssql_query("SELECT ip FROM MEMB_INFO WHERE ip='$ip'");
$ip_verify = mssql_num_rows($ip_check);

$elems[] = array('name'=>'account','label'=>$die_start. mmw_lang_invalid_account .$die_end, 'type'=>'text', 'uname'=>'true', 'required'=>true, 'len_min'=>4, 'len_max'=>10, 'cont'=>'alpha');
$elems[] = array('name'=>'email', 'label'=>$die_start. mmw_lang_invalid_email .$die_end, 'type'=>'text', 'required'=>true, 'len_max'=>50, 'cont'=>'email');
$elems[] = array('name'=>'password', 'label'=>$die_start. mmw_lang_invalid_password .$die_end, 'type'=>'text', 'required'=>true, 'len_min'=>4,'len_max'=>10, 'cont'=>'alpha');
$elems[] = array('name'=>'repassword', 'label'=>$die_start. mmw_lang_invalid_repassword .$die_end, 'type'=>'text', 'required'=>true, 'len_min'=>4, 'len_max'=>10, 'cont'=>'alpha', 'equal'=> array('password'));
$elems[] = array('name'=>'question', 'label'=>$die_start. mmw_lang_invalid_question .$die_end, 'type'=>'text', 'required'=>true, 'len_min'=>4, 'len_max'=>10, 'cont'=>'alpha');
$elems[] = array('name'=>'answer', 'label'=>$die_start. mmw_lang_invalid_answer .$die_end, 'type'=>'text', 'required'=>true, 'len_min'=>4, 'len_max'=>10, 'cont'=>'alpha');
$elems[] = array('name'=>'fullname','label'=>$die_start. mmw_lang_invalid_fullname .$die_end, 'type'=>'text', 'required'=>true, 'len_min'=>4, 'len_max'=>10, 'cont'=>'alpha');

$f = new FormValidator($elems);
$err = $f->validate($_POST);
if( $err === true ) {
$valid = $f->getValidElems();
foreach ( $valid as $k => $v ) {
if( $valid[$k][0][1] == false ) {
if( empty($valid[$k][0][2]) ) {
echo $valid[$k][0][2];
}else {
echo $valid[$k][0][2];
}
}
}
} else {
if($_SESSION[image_random_value] != md5($verifyinput)) {
$error= 1;
echo $die_start . mmw_lang_correctly_code . $die_end;
}
if($username_verify > 0) {
$error= 1;
echo $die_start . mmw_lang_account_in_use . $die_end;
}
if($email_verify > 0) {
$error= 1;
echo $die_start . mmw_lang_email_in_use . $die_end;
}
if($country <= 0) {
$error= 1;
echo $die_start . mmw_lang_invalid_country . $die_end;
}
if($ip_verify >= $mmw[max_ip_acc] && $mmw[max_ip_acc] != 0) {
$error= 1;
$result_max_ip_acc = str_replace("{NUMBER}",$mmw[max_ip_acc],mmw_lang_max_acc_one_ip);
echo $die_start . $result_max_ip_acc . $die_end;
}

if($error!=1) {
if($mmw['md5'] == yes) {
mssql_query("INSERT INTO MEMB_INFO (memb___id,memb__pwd,memb_name,sno__numb,mail_addr,appl_days,modi_days,out__days,true_days,mail_chek,bloc_code,ctl1_code,memb__pwd2,fpas_que   s,fpas_answ,country,gender,hide_profile,ref_acc,ip) VALUES ('$account',[dbo].[fn_md5]('$password','$account'),'$fullname','1234','$email',GETDATE(),GETDATE(),'2008-12-20','2008-12-20','1','0','0','$password','$squestion','$sa   nswer','$country','$gender','0','$referral','$ip')");
}
elseif($mmw['md5'] == no) {
mssql_query("INSERT INTO MEMB_INFO (memb___id,memb__pwd,memb_name,sno__numb,mail_addr,appl_days,modi_days,out__days,true_days,mail_chek,bloc_code,ctl1_code,memb__pwd2,fpas_que   s,fpas_answ,country,gender,hide_profile,ref_acc,ip) VALUES ('$account','$password','$fullname','1234','$email',GETDATE(),GETDATE(),'2008-12-20','2008-12-20','1','0','0','$password','$squestion','$san   swer','$country','$gender','0','$referral','$ip')");
mssql_query("INSERT INTO VI_CURR_INFO (ends_days,chek_code,used_time,memb___id,memb_name,memb_guid,sno__numb,Bill_Section,Bill_value,Bill_Hour,Surplus_Point,Surplus_Minute,Increa   se_Days) VALUES ('2005','1',1234,'$account','$account',1,'7','6','3','6','6','2003-11-23 10:36:00','0')");
}
$warehouse_items = '0x'.free_hex($mmw[free_hex],120);
mssql_query("INSERT INTO warehouse (AccountID,Items,EndUseDate,DbVersion,extMoney) VALUES ('$account',$warehouse_items,GETDATE(),'2','$mmw[zen_for_acc]')");
echo $okey_start . mmw_lang_account_created . $okey_end;
}
}
}

function reset($charactername) {
if((isset($_SESSION['pass'])) && (isset($_SESSION['user']))); {
require("config.php");
$login = clean_var(stripslashes($_SESSION[user]));
$charactername = stripslashes($charactername);

$online_check_result = mssql_query("SELECT ConnectStat FROM MEMB_STAT WHERE memb___id='$login'");
$online_check = mssql_fetch_row($online_check_result);
$wh_result = mssql_query("SELECT AccountID,extMoney FROM warehouse WHERE accountid='$login'");
$wh_row = mssql_fetch_row($wh_result); if($wh_row[1]=="" || $wh_row[1]==" ") {$wh_row[1]="0";}

$result = mssql_query("SELECT Clevel,Reset,Money,LevelUpPoint,class FROM Character WHERE Name='$charactername' AND AccountID='$login'");
$character_check = mssql_num_rows($result);
$row = mssql_fetch_row($result);

if($row[4] >= 0 && $row[4] <= 15) {$reset_level = $mmw[reset_level_dw]; $reset_points = $mmw[reset_points_dw];}
if($row[4] >= 16 && $row[4] <= 31) {$reset_level = $mmw[reset_level_dk]; $reset_points = $mmw[reset_points_dk];}
if($row[4] >= 32 && $row[4] <= 47) {$reset_level = $mmw[reset_level_elf]; $reset_points = $mmw[reset_points_elf];}
if($row[4] >= 48 && $row[4] <= 63) {$reset_level = $mmw[reset_level_mg]; $reset_points = $mmw[reset_points_mg];}
if($row[4] >= 64 && $row[4] <= 79) {$reset_level = $mmw[reset_level_dl]; $reset_points = $mmw[reset_points_dl];}
if($row[4] >= 80 && $row[4] <= 95) {$reset_level = $mmw[reset_level_sum]; $reset_points = $mmw[reset_points_sum];}

$reset_up = $row[1] + (1);
$char_money = $row[2];
//CastleSiege Member % Price
if($mmw[mix_cs_memb_reset]=="yes") {
$guildm_results = mssql_query("Select G_name from GuildMember where name='$charactername'");
$guildm = mssql_fetch_row($guildm_results);
if($guildm[0]!=NULL || $guildm[0]!=" "){
$cs_query = mssql_query("SELECT owner_guild,money FROM MuCastle_DATA");
$cs_row = mssql_fetch_row($cs_query);
if($cs_row[0]==$guildm[0]) {
if($mmw[max_zen_cs_reset]>$cs_row[1]){$edited_zen_cs = $cs_row[1];} else{$edited_zen_cs = $mmw[max_zen_cs_reset];}
$cs_memb_reset_zen = ( substr($mmw['reset_money'], 0, -6) * ceil( substr($edited_zen_cs, 0, -6) / $mmw[num_for_mix_cs_reset] ) ) / 100;
}
}
$edited_res_money = $mmw['reset_money'] - ($cs_memb_reset_zen * 1000000);
}
else {$edited_res_money = $mmw['reset_money'];}
//Reset * Zen
if($mmw[reset_system]=='yes') {$resetmoneysys = $edited_res_money * $reset_up;}
else {$resetmoneysys = $edited_res_money;}

if($mmw[reset_limit_price] != '0' && $mmw[reset_limit_price] <= $resetmoneysys) {$resetmoneysys = $mmw[reset_limit_price];}
$wh_money = $wh_row[1] - $resetmoneysys;
if($wh_money < 0) {$char_money = $char_money + $wh_money; $wh_money = 0;}
$resetpt = $row[3] + $reset_points;
$resetpt1 = $reset_points * $reset_up;

//Check Inventory
if($mmw[check_inventory] == 'yes') {
$result = mssql_query("declare @vault varbinary(1728); set @vault=(SELECT Inventory FROM Character WHERE Name='$charactername'); print @vault;");
$inventory = substr(mssql_get_last_message(),2,$mmw[free_hex] * 12);
$test_invetory = free_hex($mmw[free_hex],12);
}

if(empty($charactername) || empty($login)){ $error=1;
echo $die_start . mmw_lang_left_blank . $die_end;
}
if($character_check <= 0) {$error=1;
echo $die_start . $charactername . mmw_lang_character_does_not_exist . $die_end;
}
if($online_check[0] != 0) {$error=1;
echo $die_start . mmw_lang_account_is_online_must_be_logged_off . $die_end;
}
if($char_money < 0) {$error=1;
echo $die_start . mmw_lang_for_reset_need .' '.zen_format($resetmoneysys)." Zen! $die_end";
}
if($row[0] < $reset_level) {$error=1;
echo $die_start . mmw_lang_for_reset_need ." $reset_level ".mmw_lang_level."! $die_end";
}
if($row[1] > $mmw['reset_limit_level']) {$error=1;
echo $die_start . mmw_lang_reset_limit_to . " $mmw[reset_limit_level]! $die_end";
}
if($mmw[check_inventory] == 'yes' && $inventory!=$test_invetory) {$error=1;
echo $die_start . mmw_lang_take_off_set . $die_end;
}

if($error != 1){
if($mmw['level_up_mode']=='normal') {$LevelUpPoint = "$resetpt";} else {$LevelUpPoint = "$resetpt1";}
if($mmw['reset_mode']=='reset') {$reset_stats = "[strength]='25',[dexterity]='25',[vitality]='25',[energy]='25',";}
if($mmw['reset_command']=='yes' && $row[4] >= 64 && $row[4] <= 79) {$reset_command = "[Leadership]='25',";}
if($mmw['clean_inventory']=='yes') {$clean_inventory = "[inventory]=CONVERT(varbinary(1080), null),";}
if($mmw['clean_skills']=='yes') {$clean_skills = "[magiclist]=CONVERT(varbinary(180), null),";}

$sql_reset_script = "UPDATE character Set $clean_inventory $clean_skills $reset_stats $reset_command [clevel]='1',[experience]='0',[money]='$char_money',[LevelUpPoint]='$LevelUpPoint',[reset]='$reset_up' Where name='$charactername'";
mssql_query($sql_reset_script);
mssql_query("UPDATE warehouse SET [extMoney]='$wh_money' WHERE accountid='$login'");

echo $okey_start . mmw_lang_character_reseted . $okey_end;
writelog("resets","Character <b>$charactername</b> Has Been <font color=#FF0000>Reseted</font>, Before Reset: $row[1](reset), After Reset: $reset_up(reset), For: $resetmoneysys Zen");
}
}
}

function add_stats($name) {
if(isset($_SESSION['pass']) && isset($_SESSION['user'])) {
require("config.php");
require("includes/validate.class.php");
$login = stripslashes($_SESSION['user']);
$strength = stripslashes($_POST['str']);
$dexterity = stripslashes($_POST['agi']);
$vitality = stripslashes($_POST['vit']);
$energy = stripslashes($_POST['ene']);
$command = stripslashes($_POST['com']);

$online_check = mssql_query("SELECT ConnectStat FROM MEMB_STAT WHERE memb___id='$login'");
$online_check_row = mssql_fetch_row($online_check);

$result = mssql_query("select vitality,strength,energy,dexterity,levelupPoint,leadership from Character WHERE Name='$name'");
$row = mssql_fetch_row($result);

$new_str = $row[1] + $strength;
$new_agi = $row[3] + $dexterity;
$new_vit = $row[0] + $vitality;
$new_eng = $row[2] + $energy;
$new_com = $row[5] + $command;
$points = $row[4] - $vitality - $strength - $energy - $dexterity - $command;

$nmbr = "/^\d*$/";

if(!preg_match($nmbr,$strength) || !preg_match($nmbr,$dexterity) || !preg_match($nmbr,$vitality) || !preg_match($nmbr,$energy) || !preg_match($nmbr,$command)) {$error=1;
echo $die_start . mmw_lang_point_must_be_number . $die_end;
}
if ($online_check_row[0] != 0) {$error = 1;
echo $die_start . mmw_lang_account_is_online_must_be_logged_off . $die_end;
}
if ($points < 0) {$error = 1;
echo $die_start . mmw_lang_dont_have_point ." $row[4]! $die_end";
}
if($new_str>$mmw[max_stats] || $new_agi>$mmw[max_stats] || $new_vit>$mmw[max_stats] || $new_eng>$mmw[max_stats] || $new_com>$mmw[max_stats]) {$error=1;
echo "$die_start $mmw[max_stats] " . mmw_lang_max_point . $die_end;
}
if($error != 1) {
mssql_query("UPDATE Character SET [Vitality]='$new_vit',[Strength]='$new_str',[Energy]='$new_eng',[Dexterity]='$new_agi',[leadership]='$new_com',[LevelUpPoint]='$points' WHERE Name='$name'");
echo $okey_start . mmw_lang_character_stats_added . " $points $okey_end";
writelog("stats","Character <b>$name</b> Has Been <font color=#FF0000>Updated</font> Stats with the next -> Strength: $new_str|Agiltiy: $new_agi|Vitality: $new_vit|Energy: $new_eng|Command: $new_command, Levelup Points Left: $points");
}
}
}

function clear_pk($name) {
if(isset($_SESSION['pass']) && isset($_SESSION['user'])); {
require("config.php");
$name = stripslashes($name);
$login = stripslashes($_SESSION['user']);

$online_check = mssql_query("SELECT ConnectStat FROM MEMB_STAT WHERE memb___id='$login'");
$online_check_row = mssql_fetch_row($online_check);

$sql_Pk_check = mssql_query("SELECT PkLevel,PkCount,Money FROM Character WHERE PkLevel > 3 and Name='$name'");
$PkLevel_check = mssql_num_rows($sql_Pk_check);
$row_Pk = mssql_fetch_row($sql_Pk_check);

$wh_result = mssql_query("SELECT AccountID,extMoney FROM warehouse WHERE accountid='$login'");
$wh_row = mssql_fetch_row($wh_result); if($wh_row[1]=="" || $wh_row[1]==" ") {$wh_row[1]="0";}

$char_money = $row_Pk[2];
$wh_money = $wh_row[1] - $mmw['pkmoney'];
if($wh_money < 0) {$char_money = $char_money + $wh_money; $wh_money = 0;}

if (empty($name) || empty($login)) {$error = 1;
echo $die_start . mmw_lang_left_blank . $die_end;
}
if ($online_check_row[0] != 0) {$error = 1;
echo $die_start . mmw_lang_account_is_online_must_be_logged_off . $die_end;
}
if ($PkLevel_check <= 0) {$error = 1;
echo $die_start . mmw_lang_is_not_killer . $die_end;
}
if ($char_money < 0) {$error = 1;
echo $die_start . mmw_lang_clean_pk_need .' '.zen_format($mmw[pkmoney])." Zen! $die_end";
}

if($error != 1) {
mssql_query("UPDATE warehouse SET [extMoney]='$wh_money' WHERE accountid='$login'");
mssql_query("UPDATE Character SET [PkLevel]='3',[PkTime]='0',[Money]='$char_money' where Name='$name'");
echo $okey_start . mmw_lang_character_cleared . $okey_end;
writelog("clearpk","Character <b>$name</b> Has Been <font color=#FF0000>Cleaned</font> His Pk Status");
}
}
}

function changepassword() {
if ((isset($_SESSION['pass'])) && (isset($_SESSION['user']))); {
require("config.php");
require("includes/validate.class.php");
$login = clean_var(stripslashes($_SESSION['user']));
$oldpwd = clean_var(stripslashes($_POST['oldpassword']));
$newpwd = clean_var(stripslashes($_POST['newpassword']));
$renewpwd = clean_var(stripslashes($_POST['renewpassword']));

$online_check = mssql_query("SELECT ConnectStat FROM MEMB_STAT WHERE memb___id='$login'");
$online_check_row = mssql_fetch_row($online_check);

if($mmw['md5']==yes) {$sql_pw_check = mssql_query("SELECT * FROM dbo.MEMB_INFO WHERE memb___id='$login' AND memb__pwd = [dbo].[fn_md5]('$oldpwd','$login')");}
elseif($mmw['md5']==no) {$sql_pw_check = mssql_query("SELECT * FROM dbo.MEMB_INFO WHERE memb___id='$login' AND memb__pwd='$oldpwd'");}
$pw_check = mssql_num_rows($sql_pw_check);

$elems[] = array('name'=>'oldpassword', 'label'=>$die_start. mmw_lang_invalid_current_password .$die_end, 'type'=>'text', 'required'=>true, 'len_min'=>4, 'len_max'=>10, 'cont' =>'alpha');
$elems[] = array('name'=>'newpassword', 'label'=>$die_start. mmw_lang_invalid_new_password .$die_end, 'type'=>'text', 'required'=>true, 'len_min'=>4, 'len_max'=>10, 'cont' =>'alpha');
$elems[] = array('name'=>'renewpassword', 'label'=>$die_start. mmw_lang_invalid_repassword .$die_end, 'type'=>'text', 'required'=>true, 'len_min'=>4,'len_max'=>10, 'cont' =>'alpha', 'equal'=> array('newpassword'));

$f = new FormValidator($elems);
$err = $f->validate($_POST);

if ( $err === true ) {
$valid = $f->getValidElems();
foreach ( $valid as $k => $v ) {
if ( $valid[$k][0][1] == false ) {
if ( empty($valid[$k][0][2]) ) {
echo $valid[$k][0][2];
}else {
echo $valid[$k][0][2];
}
}
}
} else {

if ($online_check_row[0] != 0) {$error = 1;
echo $die_start . mmw_lang_account_is_online_must_be_logged_off . $die_end;
}
if ($oldpwd==$newpwd) {$error = 1;
echo $die_start . mmw_lang_old_and_new_password . $die_end;
}
if ($pw_check <= 0) {$error = 1;
echo $die_start . mmw_lang_invalid_current_password . $die_end;
}
if($error!=1){
if($mmw['md5']==yes){mssql_query("UPDATE MEMB_INFO SET [memb__pwd]=[dbo].[fn_md5]('$newpwd','$login'),[memb__pwd2]='$newpwd' WHERE memb___id ='$login'");}
elseif($mmw['md5']==no){mssql_query("UPDATE MEMB_INFO SET [memb__pwd]='$newpwd',[memb__pwd2]='$newpwd' WHERE memb___id ='$login'");}

$_SESSION['pass'] = $newpwd;
echo $okey_start . mmw_lang_password_changed . $okey_end;
}
}
}
}

function lostpassword() {
require("config.php");
require("includes/validate.class.php");
$login = clean_var(stripslashes($_POST['username']));
$quest = clean_var(stripslashes($_POST['quest']));
$answer = clean_var(stripslashes($_POST['answer']));
$email = clean_var(stripslashes($_POST['email']));

$sql_user_check = mssql_query("SELECT memb___id FROM MEMB_INFO WHERE memb___id='$login'");
$sql_mail_check = mssql_query("SELECT memb___id,mail_addr FROM MEMB_INFO WHERE memb___id='$login' and mail_addr='$email'");
$sql_qa_check = mssql_query("SELECT memb___id,fpas_ques,fpas_answ FROM MEMB_INFO WHERE memb___id='$login' and fpas_ques='$quest' and fpas_answ='$answer'");

if($mmw['md5'] == yes) {$sql_pw_get = mssql_query("SELECT memb__pwd2,fpas_ques FROM MEMB_INFO WHERE memb___id='$login'");}
elseif($mmw['md5'] == no) {$sql_pw_get = mssql_query("SELECT memb__pwd,fpas_ques FROM MEMB_INFO WHERE memb___id='$login'");}

$user_check = mssql_num_rows($sql_user_check);
$mail_check = mssql_num_rows($sql_mail_check);
$qa_check = mssql_num_rows($sql_qa_check);
$pw_retrieval = mssql_fetch_row($sql_pw_get);

$elems[] = array('name'=>'username', 'label'=>$die_start. mmw_lang_invalid_account .$die_end, 'type'=>'text', 'required'=>true, 'len_min'=>4, 'len_max'=>10, 'cont' =>'alpha');
$elems[] = array('name'=>'email', 'label'=>$die_start. mmw_lang_invalid_email .$die_end, 'type'=>'text', 'required'=>true, 'len_min'=>4, 'len_max'=>50, 'cont' =>'email');
$elems[] = array('name'=>'quest', 'label'=>$die_start. mmw_lang_invalid_question .$die_end, 'type'=>'text', 'required'=>true, 'len_min'=>4, 'len_max'=>10, 'cont' =>'alpha');
$elems[] = array('name'=>'answer', 'label'=>$die_start. mmw_lang_invalid_answer .$die_end, 'type'=>'text', 'required'=>true, 'len_min'=>4, 'len_max'=>10, 'cont' =>'alpha');

$f = new FormValidator($elems);
$err = $f->validate($_POST);
if ( $err === true ) {
$valid = $f->getValidElems();
foreach ( $valid as $k => $v ) {
if ( $valid[$k][0][1] == false ) {
if ( empty($valid[$k][0][2]) ) {
echo $valid[$k][0][2];
}else {
echo $valid[$k][0][2];
}
}
}
} else {

if($user_check <= 0 || $mail_check <= 0) {$error = 1;
echo $die_start . mmw_lang_account_or_email_address_is_incorrect . $die_end;
}
if($qa_check <= 0) {$error = 1;
echo $die_start . mmw_lang_question_or_answer_incorrect . $die_end;
}
if($error != 1) {
echo $okey_start . mmw_lang_your_password . " $pw_retrieval[0] $okey_end";
}
}
}

function profile($account) {
require("config.php");
$fullname = clean_var(stripslashes($_POST['fullname']));
$age = clean_var(stripslashes($_POST['age']));
$country = clean_var(stripslashes($_POST['country']));
$avatar = clean_var(stripslashes($_POST['avatar']));
$gender = clean_var(stripslashes($_POST['gender']));
$hide_profile = clean_var(stripslashes($_POST['hide_profile']));
$y = clean_var(stripslashes($_POST['y']));
$msn = clean_var(stripslashes($_POST['msn']));
$icq = clean_var(stripslashes($_POST['icq']));
$skype = clean_var(stripslashes($_POST['skype']));

mssql_query("Update memb_info set [memb_name]='$fullname',[country]='$country',[gender]='$gender',[age]='$age',[avatar]='$avatar',[hide_profile]='$hide_profile',[y]='$y',[msn]='$msn',[icq]='$icq',[skype]='$skype' where memb___id='$account'");
echo $okey_start . mmw_lang_profile_edited . $okey_end;
writelog("profile","Acc <font color=red>$account</font> Has Been Change: [memb_name]='$fullname',[country]='$country',[gender]='$gender',[age]='$age',[avatar]='$avatar',[hide_profile]='$hide_profile',[y]='$y',[msn]='$msn',[icq]='$icq',[skype]='$skype'");
}

function move($name) {
include("move.php");
require("config.php");
$login = clean_var(stripslashes($_SESSION['user']));
$map = clean_var(stripslashes($_POST['map']));
$name = stripslashes($name);
$mapnumber = $move[$map][0];
$x = $move[$map][1];
$y = $move[$map][2];

$select_zen_sql = mssql_query("Select money from character where name='$name'");
$select_zen = mssql_fetch_row($select_zen_sql);

$wh_result = mssql_query("SELECT AccountID,extMoney FROM warehouse WHERE accountid='$login'");
$wh_row = mssql_fetch_row($wh_result); if(empty($wh_row[1]) || $wh_row[1]==" ") {$wh_row[1]="0";}

$char_money = $select_zen[0];
$wh_money = $wh_row[1] - $mmw['move_zen'];
if($wh_money < 0) {$char_money = $char_money + $wh_money; $wh_money = 0;}

if(empty($name)) {
echo $die_start . mmw_lang_left_blank . $die_end;
}
elseif($char_money < 0) {
echo $die_start . mmw_lang_move_need .' '.zen_format($mmw[move_zen])." Zen! $die_end";
}
else {
mssql_query("UPDATE warehouse SET [extMoney]='$wh_money' WHERE accountid='$login'");
mssql_query("UPDATE character SET [mapnumber]='$mapnumber',[mapposx]='$x',[mapposy]='$y',[money]='$char_money' where name='$name'");
echo $okey_start . mmw_lang_character_moved . $okey_end;
writelog("move","Char <font color=red>$name</font> Has Been Moved To: $mapnumber, $x-$y|Char: $char_money Zen|Acc: $wh_money Zen");
}
}

function change_class($name) {
include("class.php");
require("config.php");
$login = clean_var(stripslashes($_SESSION['user']));
$change_class = clean_var(stripslashes($_POST['class']));
$name = stripslashes($name);
$class = $class_list[$change_class][0];
$price = $class_list[$change_class][1];

$result = mssql_query("declare @vault varbinary(1728); set @vault=(SELECT Inventory FROM Character WHERE Name='$name'); print @vault;");
$inventory = substr(mssql_get_last_message(),2,$mmw[free_hex] * 12);
$test_invetory = free_hex($mmw[free_hex],12);

$select_zen_sql = mssql_query("Select money from character where name='$name'");
$select_zen = mssql_fetch_row($select_zen_sql);

$wh_result = mssql_query("SELECT AccountID,extMoney FROM warehouse WHERE accountid='$login'");
$wh_row = mssql_fetch_row($wh_result); if(empty($wh_row[1]) || $wh_row[1]==" ") {$wh_row[1]="0";}

$char_money = $select_zen[0];
$wh_money = $wh_row[1] - $price;
if($wh_money < 0) {$char_money = $char_money + $wh_money; $wh_money = 0;}

if(empty($name) || $change_class=='class') {
echo $die_start . mmw_lang_left_blank . $die_end;
}
elseif($inventory != $test_invetory) {
echo $die_start . mmw_lang_take_off_set . $die_end;
}
elseif($char_money < 0) {
echo $die_start . mmw_lang_change_class_need .' '.zen_format($price)." Zen! $die_end";
}
else {
mssql_query("UPDATE warehouse SET [extMoney]='$wh_money' WHERE accountid='$login'");
mssql_query("UPDATE character SET [class]='$class',[money]='$char_money',[MagicList]=0xFF,[Quest]=0xFF, where name='$name'");
echo $okey_start . mmw_lang_character_changed . $okey_end;
writelog("change_class","Char <font color=red>$name</font> Has Been Changed Class To: $class|Char: $char_money Zen|Acc: $wh_money Zen");
}
}

function warehouse($from,$to,$zen)
{
require("config.php");
require("includes/validate.class.php");
$login = clean_var(stripslashes($_SESSION['user']));
$from = stripslashes($from);
$to = stripslashes($to);
$zen = stripslashes($zen);

// From
if($from=="ewh" || $from=="wh0") {
$result = mssql_query("SELECT AccountID,Money,extMoney FROM warehouse WHERE accountid='$login'");
$row_from = mssql_fetch_row($result);
if($from=="wh0") {
if($row_from[1]==""){$from_wh="0";} else{$from_wh=$row_from[1];}
$from_query[0]="Update warehouse set [Money]='"; $from_query[1]="' where AccountID='$login'";
}
if($from=="ewh") {
if($row_from[2]==""){$from_wh="0";} else{$from_wh=$row_from[2];}
$from_query[0]="Update warehouse set [extMoney]='"; $from_query[1]="' where AccountID='$login'";
}
}
elseif(substr($from,0,2)=="ch") {
$result = mssql_query("SELECT AccountID,Money,Name FROM Character WHERE accountid='$login' AND Name='".substr($from,2)."'");
$row_from = mssql_fetch_row($result);
if($row_from[1]=="") {$from_wh="0";} else{$from_wh=$row_from[1];}
$from_query[0]="Update Character set [Money]='"; $from_query[1]="' where AccountID='$login' AND Name='$row_from[2]'";
}

// To
if($to=="ewh" || $to=="wh0") {
$result = mssql_query("SELECT AccountID,Money,extMoney FROM warehouse WHERE accountid='$login'");
$row_to = mssql_fetch_row($result);
if($to=="wh0") {
if($row_to[1]=="") {$to_wh="0";} else{$to_wh=$row_to[1];}
$to_query[0]="Update warehouse set [Money]='"; $to_query[1]="' where AccountID='$login'";
}
if($to=="ewh") {
if($row_to[2]=="") {$to_wh="0";} else{$to_wh=$row_to[2];}
$to_query[0]="Update warehouse set [extMoney]='"; $to_query[1]="' where AccountID='$login'";
}
}
elseif(substr($to,0,2)=="ch") {
$result = mssql_query("SELECT AccountID,Money,Name FROM character WHERE accountid='$login' AND Name='".substr($to,2)."'");
$row_to = mssql_fetch_row($result);
if($row_to[1]=="") {$to_wh="0";} else{$to_wh=$row_to[1];}
$to_query[0]="Update Character set [Money]='"; $to_query[1]="' where AccountID='$login' AND Name='$row_to[2]'";
}

$from_end = $from_wh - $zen; $to_end = $to_wh + $zen;

if(!isset($from_wh) || !isset($to_wh) || !isset($zen)){$error=1; echo $die_start . mmw_lang_left_blank . $die_end;}
elseif(!preg_match("/^\d*$/", $zen)){$error=1; echo $die_start . mmw_lang_zen_must_be_number . $die_end;}
elseif($from == $to){$error=1; echo $die_start . mmw_lang_zen_cant_move . $die_end;}
elseif($from_end < 0){$error=1; echo $die_start . mmw_lang_not_Zen_to_move . $die_end;}
elseif($to!="ewh" && $to_end > $mmw[max_char_wh_zen]){$error=1; echo $die_start . mmw_lang_zen_more_max . ' '.zen_format($mmw[max_char_wh_zen]).' Zen!' . $die_end;}

if($error!=1){
mssql_query($from_query[0].$from_end.$from_query[1]);
mssql_query($to_query[0].$to_end.$to_query[1]);
echo $okey_start . zen_format($zen).' '. mmw_lang_zen_moved . $okey_end;
writelog("money","Acc <font color=red>$login</font> Has Been from: $from_wh <u>$from</u>|to: $to_wh <u>$to</u>|how many: <b>$zen</b>|from end: $from_end|to end: $to_end");
}
}

function comment_send($c_id_blog,$c_id_code) {
require("config.php");
$c_char = clean_var(stripslashes($_SESSION['char_set']));
$result = mssql_query("SELECT TOP 1 c_date FROM MMW_comment WHERE c_char='$c_char' ORDER BY c_date DESC");
$losttime = mssql_fetch_row($result);
$timeout = $losttime[0] + $mmw[comment_time_out];
$date = time();
$needtime = $timeout - $date;

if($timeout>$date) {
echo $die_start . mmw_lang_cant_sent_comment_need_wait . " $needtime sec. $die_end";
}
elseif($_POST['c_message']!="") {
$bug_send = bugsend(stripslashes($_POST['c_message']));
mssql_query("INSERT INTO MMW_comment(c_id_blog,c_id_code,c_char,c_text,c_date) VALUES ('$c_id_blog','$c_id_code','$c_char','$bug_send','$date')");
echo $okey_start . mmw_lang_comment_sent . $okey_end;
}
}

function comment_delete($c_id) {
require("config.php");
$c_id = clean_var(stripslashes($c_id));
$char_set = stripslashes($_SESSION['char_set']);
$result = mssql_query("SELECT c_char FROM MMW_comment WHERE c_id='$c_id'");