diff options
Diffstat (limited to 'npc/custom/eAAC_Scripts/DonationGirl/donate.txt')
| -rw-r--r-- | npc/custom/eAAC_Scripts/DonationGirl/donate.txt | 222 |
1 files changed, 112 insertions, 110 deletions
diff --git a/npc/custom/eAAC_Scripts/DonationGirl/donate.txt b/npc/custom/eAAC_Scripts/DonationGirl/donate.txt index 6c1687ae1..5ef48ebce 100644 --- a/npc/custom/eAAC_Scripts/DonationGirl/donate.txt +++ b/npc/custom/eAAC_Scripts/DonationGirl/donate.txt @@ -15,9 +15,13 @@ //= options for GMs.
//= 2.1 - Made few changes including the add/remove items
//= feature.
+//= 3.0 - All strings inputed by a user and user/char names
+//= in sql queries are now escaped. Each item has a
+//= price rather than a quantity. This script can work
+//= with decimals.
//===== Compatible With =====================================
-//= eAthena - any version that contains the sql_query
-//= function (4368)
+//= eAthena - any version that contains the escape_sql
+//= function (Stable 6299 OR Trunk 6262)
//===== Description =========================================
//= A script that lets a player claim an item for donating.
//= Allows a GM to input each donation.
@@ -30,15 +34,13 @@ //===========================================================
//= Thanks to Vich for helping me with the SQL syntax.
//= Thanks to Lance for helping me with the the arrays and
-//= for implementing this feature. XD
+//= for implementing query_sql.
+//= Thanks to Skotlex for implementing escape_sql.
//===========================================================
prontera.gat,145,179,5 script Donation Girl 714,{
-//Set how many 'dollars' per reward.
-set @currency, 10;
-
-if (getgmlevel(99) == 99) goto L_GM;
+if (getgmlevel() >= 80) goto L_GM;
L_START:
mes "[Donation Girl]";
mes "Hello! I'm the Donation Girl!";
@@ -48,7 +50,7 @@ next; menu "More info",-,"Make a claim",L_CHECK,"Statistics",L_STATS;
L_INFO:
mes "[Donation Girl]";
-mes "Every month, we (the admins) are required to pay hundreds of dollars to keep this server running.";
+mes "Each month, a lot of money is paid to keep this server running.";
next;
mes "[Donation Girl]";
mes "You can support us by donating any amount of money.";
@@ -56,27 +58,27 @@ next; mes "[Donation Girl]";
mes "To show our appreciation, we will gladly give you a reward.";
next;
-next;
-menu "Continue",L_START,"Cancel",L_CLOSE;
+menu "Continue",L_START,"Cancel",-;
close;
L_CHECK:
-query_sql "SELECT `amount` FROM `donate` WHERE `account_id` = "+getcharid(3)+"", @amount;
-query_sql "SELECT `claimed` FROM `donate` WHERE `account_id` = "+getcharid(3)+"", @claimed;
-set @value, @amount-@claimed;
-if(@value>=@currency) goto L_CLAIM;
+query_sql "SELECT `amount` FROM `donate` WHERE `account_id` = "+escape_sql(getcharid(3))+"", @amount$;
+query_sql "SELECT `claimed` FROM `donate` WHERE `account_id` = "+escape_sql(getcharid(3))+"", @claimed$;
+query_sql "SELECT MIN(price) FROM `donate_item_db`", @min$;
+query_sql "SELECT "+@amount$+" - "+@claimed$+"", @value$;
+query_sql "SELECT "+@value$+" >= "+@min$+"", @enough;
+if(@enough) goto L_CLAIM;
mes "[Donation Girl]";
-mes "Sorry, but I have no records of your donation.";
+mes "Sorry, you do not have enough to make a claim.";
mes "If you have donated but have not made a claim,";
mes "Please give us time to process your donation.";
close;
L_CLAIM:
-set @items, @value/@currency;
mes "[Donation Girl]";
mes "Thankyou for donating!";
-mes "You are able to claim "+@items+" item(s).";
-mes "Would you like to claim them now?";
+mes "You have $"+@value$+" worth of credit!";
+mes "Would you like to claim an item now?";
next;
menu "No",-,"Yes",L_YES;
mes "[Donation Girl]";
@@ -96,37 +98,52 @@ set $@menu$, $@name$[0]; set @menu, (select($@menu$))-1;
query_sql "SELECT ID FROM `donate_item_db` WHERE name = '"+$@name$[@menu]+"'", @id;
-query_sql "SELECT amount FROM `donate_item_db` WHERE ID = "+@id+"", @amount;
+query_sql "SELECT price FROM `donate_item_db` WHERE ID = "+@id+"", @price$;
+query_sql "SELECT TRUNCATE("+@value$+" / "+@price$+",0)", @max;
+//query_sql "SELECT "+@value$+" div "+@price$+"", @max;
-if (checkweight(@id,@amount) == 0) goto L_OVERWEIGHT;
-mes "Are you sure you want to claim "+@amount+" "+$@name$[@menu]+"?";
-next;
-menu "No",L_YES,"Yes",-;
-getitem @id,@amount;
-query_sql "UPDATE `donate` SET `claimed` = `claimed` + "+@currency+" WHERE `account_id` = '"+getcharid(3)+"'";
-set @amount, 0;
-set @claimed, 0;
-set @value, 0;
-set @items, 0;
mes "[Donation Girl]";
-mes "Thankyou for donating! We hope you enjoy your gift!";
-close;
+mes ""+$@name$[@menu]+"s cost $"+@price$+" each.";
+mes "How many "+$@name$[@menu]+"s would you like to claim?";
+mes "Maximum: "+@max+".";
+input @quantity;
+
+if(@quantity>@max) {
+ mes "[Donation Girl]";
+ mes "Sorry, but you do not have enough to claim "+@quantity+" "+$@name$[@menu]+"s.";
+ next;
+ goto L_CLAIM;
+ }
+
+if(!@quantity) {
+ mes "[Donation Girl]";
+ mes "You can't have 0 as an amount!";
+ next;
+ goto L_CLAIM;
+ }
+
+if (checkweight(@id,@quantity) == 0) {
+ mes "[Donation Girl]";
+ mes "I'm sorry, but you cannot carry "+@quantity+" "+$@name$[@menu]+"s.";
+ next;
+ goto L_CLAIM;
+ }
-L_OVERWEIGHT:
-set @amount, 0;
-set @claimed, 0;
-set @value, 0;
-set @items, 0;
+query_sql "SELECT "+@quantity+" * "+@price$+"", @total$;
+mes "Are you sure you want to claim "+@quantity+" "+$@name$[@menu]+"s for $"+@total$+"?";
+next;
+menu "No",L_CLAIM,"Yes",-;
+query_sql "UPDATE `donate` SET `claimed` = `claimed` + "+@total$+" WHERE `account_id` = '"+escape_sql(getcharid(3))+"'";
+getitem @id,@quantity;
mes "[Donation Girl]";
-mes "I'm sorry, but you cannot carry so many things.";
+mes "Thankyou for donating! We hope you enjoy your gift!";
close;
L_STATS:
mes "[Donation Girl]";
-query_sql "SELECT SUM(amount) FROM `donate`", @total;
-mes "Our fund is at a total of $"+@total+"";
+query_sql "SELECT SUM(amount) FROM `donate`", @total$;
+mes "Our fund is at a total of $"+@total$+"";
next;
-set @total, 0;
menu "More info",L_INFO,"Make a claim",L_CHECK,"Statistics",L_STATS;
close;
@@ -151,27 +168,25 @@ L_NEWITEM: mes "[GM Menu]";
mes "Please enter the item name:";
input @itemname$;
-query_sql "SELECT `id` FROM `item_db` WHERE `name_english` = '"+@itemname$+"'", @iid;
-query_sql "SELECT `id` FROM `donate_item_db` WHERE `name` = '"+@itemname$+"'", @check;
+query_sql "SELECT `id` FROM `item_db` WHERE `name_english` = '"+escape_sql(@itemname$)+"'", @iid;
+query_sql "SELECT `id` FROM `donate_item_db` WHERE `name` = '"+escape_sql(@itemname$)+"'", @check;
if(@iid==0) goto L_INONE;
-next;
mes "[GM Menu]";
-mes "Please enter the amount claimable of "+@itemname$+" per donation";
-input @quantity;
-if(@quantity==0) goto L_ZERO;
+mes "Please enter the cost of each "+@itemname$+":";
+input @cost$;
+query_sql "SELECT "+escape_sql(@cost$)+" = 0", @invalid;
+if(@invalid) goto L_ZERO;
+query_sql "SELECT CAST('"+escape_sql(@cost$)+"' AS DECIMAL)", @cost$;
mes "[GM Menu]";
-mes "You have specified that donators can claim "+@quantity+" "+@itemname$+"s.";
+mes "You have specified that donators can claim "+@itemname$+"s for $"+@cost$+" each.";
mes "Would you like to continue?";
next;
menu "No",L_ITEM,"Yes",-;
if(@check!=0) goto L_REPLACE;
-query_sql "INSERT INTO `donate_item_db` VALUES ('"+@iid+"', '"+@itemname$+"', '"+@quantity+"')";
+query_sql "INSERT INTO `donate_item_db` VALUES ('"+@iid+"', '"+escape_sql(@itemname$)+"', '"+@cost$+"')";
mes "[GM Menu]";
mes "Item added successfully!";
next;
-set @itemname$, 0;
-set @iid, 0;
-set @quantity, 0;
menu "Add annother item",L_NEWITEM,"Remove an item",L_DELITEM,"View all items",L_ALLITEMS;
close;
@@ -181,13 +196,10 @@ mes "Item "+@itemname$+" already exists in the database."; mes "Would you like to replace it?";
next;
menu "No",L_ITEM,"Yes",-;
-query_sql "REPLACE INTO `donate_item_db` VALUES ('"+@iid+"', '"+@itemname$+"', '"+@quantity+"')";
+query_sql "REPLACE INTO `donate_item_db` VALUES ('"+@iid+"', '"+@itemname$+"', '"+@cost$+"')";
mes "[GM Menu]";
mes "Item replaced successfully!";
next;
-set @itemname$, 0;
-set @iid, 0;
-set @quantity, 0;
menu "Add annother item",L_NEWITEM,"Remove an item",L_DELITEM,"View all items",L_ALLITEMS;
close;
@@ -195,15 +207,13 @@ L_INONE: mes "[GM Menu]";
mes "Item "+@itemname$+" does not exist.";
next;
-set @itemname$, 0;
-set @iid, 0;
goto L_ITEM;
L_DELITEM:
mes "[GM Menu]";
mes "Please enter the item name:";
input @itemname$;
-query_sql "SELECT `id` FROM `donate_item_db` WHERE `name` = '"+@itemname$+"'", @iid;
+query_sql "SELECT `id` FROM `donate_item_db` WHERE `name` = '"+escape_sql(@itemname$)+"'", @iid;
if(@iid==0) goto L_INONE;
next;
mes "[GM Menu]";
@@ -215,56 +225,61 @@ query_sql "DELETE FROM `donate_item_db` WHERE `id` = '"+@iid+"'"; mes "[GM Menu]";
mes "Item deleted successfully!";
next;
-set @itemname$, 0;
-set @iid, 0;
menu "Add an item",L_NEWITEM,"Remove another item",L_DELITEM,"View all items",L_ALLITEMS;
close;
L_ALLITEMS:
mes "[GM Menu]";
query_sql "SELECT `name` FROM `donate_item_db` ORDER BY `name` ASC", @items$;
-query_sql "SELECT `amount` FROM `donate_item_db` ORDER BY `name` ASC", @itemamount;
+query_sql "SELECT `price` FROM `donate_item_db` ORDER BY `name` ASC", @itemamount$;
for(set @i, 0; @i < getarraysize(@items$); set @i, @i + 1){
- mes ""+@items$[@i]+" - "+@itemamount[@i]+"";
+ mes ""+@items$[@i]+" - $"+@itemamount$[@i]+"";
}
next;
-set @items$, 0;
-set @itemamount, 0;
goto L_GM;
L_DONATE:
mes "[GM Menu]";
mes "Please enter the donator's username:";
input @donator$;
-query_sql "SELECT `account_id` FROM `login` WHERE `userid` = '"+@donator$+"'", @aid;
-query_sql "SELECT `amount` FROM `donate` WHERE `account_id` = "+@aid+"", @donated;
+query_sql "SELECT `account_id` FROM `login` WHERE `userid` = '"+escape_sql(@donator$)+"'", @aid;
if(@aid==0) goto L_NONE;
-if(@donated>0) mes ""+@donator$+" has donated $"+@donated+".";
-if(@donated==0) mes ""+@donator$+" has not donated before.";
+query_sql "SELECT `amount` FROM `donate` WHERE `account_id` = "+@aid+"", @donated$;
+query_sql "SELECT "+@donated$+" > 0", @donated;
+switch(@donated) {
+ case 0:
+ mes ""+@donator$+" has not donated before.";
+ break;
+ case 1:
+ mes ""+@donator$+" has donated $"+@donated+".";
+ break;
+ }
next;
mes "[GM Menu]";
mes "Please enter the amount donated by "+@donator$+"";
-input @donating;
-if(@donating==0) goto L_ZERO;
+input @donating$;
+query_sql "SELECT "+escape_sql(@donating$)+" = 0", @invalid;
+if(@invalid) goto L_ZERO;
+query_sql "SELECT CAST('"+escape_sql(@donating$)+"' AS DECIMAL)", @donating$;
mes "[GM Menu]";
-mes "You have specified that "+@donator$+" has donated $"+@donating+".";
+mes "You have specified that "+@donator$+" has donated $"+@donating$+".";
mes "Would you like to continue?";
next;
menu "No",L_GM,"Yes",-;
-if(@donated>0) query_sql "UPDATE `donate` SET `amount` = `amount` + "+@donating+" WHERE `account_id` = '"+@aid+"'";
-if(@donated==0) query_sql "INSERT INTO `donate` VALUES ('"+@aid+"', '"+@donating+"', '0')";
-query_sql "SELECT `amount` FROM `donate` WHERE `account_id` = "+@aid+"", @newdonated;
+switch(@donated) {
+ case 0:
+ query_sql "INSERT INTO `donate` VALUES ('"+@aid+"', '"+@donating$+"', '0')";
+ break;
+ case 1:
+ query_sql "UPDATE `donate` SET `amount` = `amount` + "+@donating$+" WHERE `account_id` = '"+@aid+"'";
+ break;
+ }
+query_sql "SELECT `amount` FROM `donate` WHERE `account_id` = "+@aid+"", @newdonated$;
mes "[GM Menu]";
mes "Donation added successfully!";
-mes ""+@donator$+" has donated a total of $"+@newdonated+"";
+mes ""+@donator$+" has donated a total of $"+@newdonated$+"";
next;
-set @donator$, 0;
-set @aid, 0;
-set @donated, 0;
-set @donating, 0;
-set @newdonated, 0;
goto L_GM;
-close;
L_ZERO:
mes "[GM Menu]";
@@ -276,27 +291,24 @@ L_NONE: mes "[GM Menu]";
mes "Account name "+@donator$+" does not exist.";
next;
-set @donator$, 0;
-set @aid, 0;
-set @donated, 0;
-set @donating, 0;
-set @newdonated, 0;
goto L_GM;
L_REMOVE:
mes "[GM Menu]";
mes "Please enter the donator's username:";
input @donator$;
-query_sql "SELECT `account_id` FROM `login` WHERE `userid` = '"+@donator$+"'", @aid;
-query_sql "SELECT `amount` FROM `donate` WHERE `account_id` = "+@aid+"", @donated;
+query_sql "SELECT `account_id` FROM `login` WHERE `userid` = '"+escape_sql(@donator$)+"'", @aid;
if(@aid==0) goto L_NONE;
-if(@donated>0) mes ""+@donator$+" has donated $"+@donated+".";
+query_sql "SELECT `amount` FROM `donate` WHERE `account_id` = "+@aid+"", @donated$;
+query_sql "SELECT "+@donated$+" > 0", @donated;
+
if(@donated==0) {
query_sql "DELETE FROM `donate` WHERE `account_id` = '"+@aid+"'";
mes ""+@donator$+" is not a donator and has been deleted from the donation database.";
goto L_GM;
- close;
}
+
+mes ""+@donator$+" has donated $"+@donated$+".";
next;
menu "Deduct an amount from "+@donator$+"",L_MINUS,"Remove "+@donator$+" from the donation database",L_DELETE;
close;
@@ -304,23 +316,21 @@ close; L_MINUS:
mes "[GM Menu]";
mes "Please enter the amount "+@donator$+" is to be deducted by:";
-input @deduct;
+input @deduct$;
+query_sql "SELECT "+escape_sql(@deduct$)+" = 0", @invalid;
+if(@invalid) goto L_ZERO;
+query_sql "SELECT CAST('"+escape_sql(@deduct$)+"' AS DECIMAL)", @deduct$;
mes "[GM Menu]";
-mes "You have specified that "+@donator$+" is to be deducted by $"+@deduct+".";
+mes "You have specified that "+@donator$+" is to be deducted by $"+@deduct$+".";
mes "Would you like to continue?";
next;
menu "No",L_GM,"Yes",-;
-query_sql "UPDATE `donate` SET `amount` = `amount` - "+@deduct+" WHERE `account_id` = '"+@aid+"'";
-query_sql "SELECT `amount` FROM `donate` WHERE `account_id` = "+@aid+"", @afterdeduct;
+query_sql "UPDATE `donate` SET `amount` = `amount` - "+@deduct$+" WHERE `account_id` = '"+@aid+"'";
+query_sql "SELECT `amount` FROM `donate` WHERE `account_id` = "+@aid+"", @afterdeduct$;
mes "[GM Menu]";
mes "Donation deducted successfully!";
-mes ""+@donator$+" has donated a total of $"+@afterdeduct+"";
+mes ""+@donator$+" has donated a total of $"+@afterdeduct$+"";
next;
-set @donator$, 0;
-set @aid, 0;
-set @donated, 0;
-set @deduct, 0;
-set @afterdeduct, 0;
goto L_GM;
L_DELETE:
@@ -333,27 +343,19 @@ query_sql "DELETE FROM `donate` WHERE `account_id` = '"+@aid+"'"; mes "[GM Menu]";
mes "Donator deleted successfully!";
next;
-set @donator$, 0;
-set @aid, 0;
-set @donated, 0;
goto L_GM;
L_VIEWALL:
mes "[GM Menu]";
query_sql "SELECT `account_id` FROM `donate` ORDER BY `amount` DESC", @donatoraid;
-query_sql "SELECT `amount` FROM `donate` ORDER BY `amount` DESC", @donatedamount;
+query_sql "SELECT `amount` FROM `donate` ORDER BY `amount` DESC", @donatedamount$;
for(set @i, 0; @i < getarraysize(@donatoraid); set @i, @i + 1){
query_sql "SELECT `userid` FROM `login` WHERE `account_id` = '"+@donatoraid[@i]+"'", @donateruserid$;
for(set @j, 0; @j < getarraysize(@donateruserid$); set @j, @j + 1){
- mes ""+@donateruserid$[@j]+" - "+@donatedamount[@i]+"";
+ mes ""+@donateruserid$[@j]+" - "+@donatedamount$[@i]+"";
}
}
next;
-set @donatoraid, 0;
-set @donatedamount, 0;
-set @donateruserid$, 0;
goto L_GM;
-L_CLOSE:
-close;
}
\ No newline at end of file |