hackaholic-2018/check_finals.php at master · Pranav-AM/hackaholic-2018 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
<?php

$host="localhost";
$username="hackaholic"; // Mysql username
$password="vineetissucky"; // Mysql password
$db_name="hackaholic";

$link = mysql_connect($host, $username, $password)or die("cannot connect");

mysql_select_db("$db_name")or die("cannot select DB");

session_start();

if (!isset($_SESSION['user_id']) || empty($_SESSION['user_id'])) {
      header('Location: error.html');
      exit();
}


/*Check login ends....*/

$qno = explode(".", $_SERVER['HTTP_REFERER']);
$qno = $qno[count($qno) - 2];

$qno = explode("/", $qno);
$qno = $qno[count($qno) - 1];
$qno = (int)$qno;
$answer = $_POST["answer"];

$user_id = $_SESSION['user_id'];

$sql_check = "SELECT * FROM scores WHERE user_id='".$user_id."' and question_passed=".$qno."";
$qno_done_check = mysql_query($sql_check);

$result = "failed";


if (mysql_num_rows($qno_done_check) >= 1) {
	$result = "already_done";
} else {

	$sql_get_score="SELECT * FROM finals WHERE user_id = '".$user_id."'";
	$get_score = mysql_query($sql_get_score);
	while ($row = mysql_fetch_array($get_score, MYSQL_ASSOC)) {
	    $score = $row['score'];
	}


	switch ($qno) {

		case 1:
                           if ($answer=="AnDIKnoWthis'llbeThe,DEAthofME,ATlEASTits,ALLforFUNAndTHEY'll,AlwaysGETTHEBESTofme,theWorstISYETtocome,-THErealXO"){
					$result = "success";
					$score = $score + 10;
					$sql_update_score = "UPDATE finals SET score = ".$score." WHERE user_id = '".$user_id."'";
					$update_score = mysql_query($sql_update_score);

					$sql_question_done = "INSERT INTO scores (user_id, question_passed) VALUES ('".$user_id."',".$qno.")";
					$question_done = mysql_query($sql_question_done);
				}
				break;

		case 2:
				if ($answer == "HIGILBERTVERNAM") {
					$result = "success";
					$score = $score + 10;
					$sql_update_score = "UPDATE finals SET score = ".$score." WHERE user_id = '".$user_id."'";
					$update_score = mysql_query($sql_update_score);

					$sql_question_done = "INSERT INTO scores (user_id, question_passed) VALUES ('".$user_id."',".$qno.")";
					$question_done = mysql_query($sql_question_done);
				}
				break;

		case 3:
				if ($answer == "ThatsMuchAmaZE") {
					$result = "success";
					$score = $score + 10;
					$sql_update_score = "UPDATE finals SET score = ".$score." WHERE user_id = '".$user_id."'";
					$update_score = mysql_query($sql_update_score);

					$sql_question_done = "INSERT INTO scores (user_id, question_passed) VALUES ('".$user_id."',".$qno.")";
					$question_done = mysql_query($sql_question_done);
				}
				break;

		case 4:
				if ($answer == "f@!lUre") {
					$result = "success";
					$score = $score + 10;
					$sql_update_score = "UPDATE finals SET score = ".$score." WHERE user_id = '".$user_id."'";
					$update_score = mysql_query($sql_update_score);

					$sql_question_done = "INSERT INTO scores (user_id, question_passed) VALUES ('".$user_id."',".$qno.")";
					$question_done = mysql_query($sql_question_done);
				}
				break;

		case 5:
				if ($answer == "t3hPeNgU1NoFd00m") {
					$result = "success";
					$score = $score + 10;
					$sql_update_score = "UPDATE finals SET score = ".$score." WHERE user_id = '".$user_id."'";
					$update_score = mysql_query($sql_update_score);

					$sql_question_done = "INSERT INTO scores (user_id, question_passed) VALUES ('".$user_id."',".$qno.")";
					$question_done = mysql_query($sql_question_done);
				}
				break;
		default:
				$result = "failed";
	}

}


echo json_encode($result);

 ?>