\n";
@@ -1807,6 +1988,11 @@ else if(myisset("me"))
while( $r = mysql_fetch_array($result,MYSQL_NUM))
echo " ".$r[0]." ".$r[1]."
\n";
+ $queryresult = mysql_query("SELECT timediff(mod_date,create_date) ".
+ " FROM Game WHERE id='$gameid'");
+ $r = mysql_fetch_array($queryresult,MYSQL_NUM);
+ echo "
This game took ".$r[0]." hours.
";
+
echo "
\n Points Re:
\n";
$queryresult = mysql_query("SELECT score FROM Score ".
" WHERE game_id=$gameid AND party='re'".
@@ -1899,7 +2085,6 @@ else if(myisset("me"))
echo "
\n";
-
echo "\n";
output_footer();
DB_close();
@@ -1921,8 +2106,10 @@ else if( myisset("email","password") || isset($_SESSION["name"]) )
$password = DB_get_passwd_by_name($name);
};
+ /* user has forgotten his password */
if(myisset("forgot"))
{
+ /* check if player is in the database */
$ok = 1;
$myid = DB_get_userid_by_email($email);
@@ -1942,8 +2129,9 @@ else if( myisset("email","password") || isset($_SESSION["name"]) )
echo "N.B. You tried this already $number times during the last day and it will only work ".
" 5 times during a day.
";
echo "The new password will be valid for one day, make sure you reset it to something else.
";
- echo "Back to the
main page.";
+ echo "Back to the
main page.";
+ /* create temporary password, use the fist 8 letters of a md5 hash */
$TIME = (string) time(); /* to avoid collisions */
$hash = md5("Anewpassword".$email.$TIME);
$newpw = substr($hash,1,8);
@@ -1956,28 +2144,33 @@ else if( myisset("email","password") || isset($_SESSION["name"]) )
" also still be valid until you set a new one\n";
mymail($email,$EmailName."recovery ",$message);
+ /* we save these in the database */
DB_set_recovery_password($myid,md5($newpw));
}
else
{
+ /* make it so that people (or a robot) can request thousands of passwords within a short time
+ * and spam a user this way */
echo "Sorry you already tried 5 times during the last 24h.
".
"You need to use one of those passwords or wait to get a new one.
";
- echo "Back to the
main page.";
+ echo "Back to the
main page.";
}
}
else
- {
+ {/* can't find user id in the database */
+
+ /* no email given? */
if($email=="")
echo "You need to give me an email address!
".
- "Please try
again.";
- else
+ "Please try
again.";
+ else /* default error message */
echo "Couldn't find a player with this email!
".
"Please contact Arun, if you think this is a mistake
".
- "or else try
again.";
+ "or else try
again.";
}
}
- else
- {
+ else
+ { /* normal user page */
/* verify password and email */
if(strlen($password)!=32)
$password = md5($password);
@@ -1989,12 +2182,14 @@ else if( myisset("email","password") || isset($_SESSION["name"]) )
if($ok)
{
+ /* user information is ok */
$myname = DB_get_name_by_email($email);
$_SESSION["name"] = $myname;
output_status();
DB_get_PREF($myid);
+ /* does the user want to change some preferences? */
if(myisset("setpref"))
{
$setpref=$_REQUEST["setpref"];
@@ -2026,6 +2221,7 @@ else if( myisset("email","password") || isset($_SESSION["name"]) )
break;
}
}
+ /* user wants to change his password or request a temporary one */
else if(myisset("passwd"))
{
if( $_REQUEST["passwd"]=="ask" )
@@ -2072,6 +2268,7 @@ else if( myisset("email","password") || isset($_SESSION["name"]) )
display_user_menu();
+ /* display all games the user has played */
echo "
";
echo "
These are all your games:
\n";
echo "
Session:
\n";
@@ -2101,50 +2298,57 @@ else if( myisset("email","password") || isset($_SESSION["name"]) )
}
if($r[4]=='pre')
{
- echo "\n p ";
+ echo "\n p ";
}
else if ($r[4]=='gameover')
- echo "\n F ";
+ echo "\n F ";
else
{
- echo "\n P ";
+ echo "\n P ";
}
if($r[4] != 'gameover')
{
echo "
\n ";
- if($r[3])
+ if($r[3]==$myid || !$r[3])
+ echo "(it's your turn)\n";
+ else
{
- if($r[3]==$myid)
- echo "(it's your turn)\n";
- else
- {
- $name = DB_get_name_by_userid($r[3]);
- $gameid = $r[1];
- if(DB_get_reminder($r[3],$gameid)==0)
- if(time()-strtotime($r[2]) > 60*60*24*7)
- echo "".
- "Send a reminder.";
- echo "(it's $name's turn)\n";
- };
- }
+ $name = DB_get_name_by_userid($r[3]);
+ $gameid = $r[1];
+ if(DB_get_reminder($r[3],$gameid)==0)
+ if(time()-strtotime($r[2]) > 60*60*24*7)
+ echo "".
+ "Send a reminder.";
+ echo "(it's $name's turn)\n";
+ };
if(time()-strtotime($r[2]) > 60*60*24*30)
echo "".
- "Cancel?".
+ "Cancel?".
" (clicking here is final and can't be restored)";
}
}
echo " | \n\n";
- $names = DB_get_all_names();
- echo "
Registered players:
\n
\n";
- echo implode(", ",$names)."\n";
- echo "
\n
";
+
+ /* display last 5 users that have signed up to e-DoKo */
+ $names = DB_get_names_of_new_logins(5);
+ echo "
New Players:
\n
\n";
+ echo implode(", ",$names).",...\n";
+ echo "
\n";
+
+ /* display last 5 users that logged on */
+ $names = DB_get_names_of_last_logins(5);
+ echo "
Players last logged in:
\n
\n";
+ echo implode(", ",$names).",...\n";
+ echo "
\n";
+
+ echo "