create_universe.php

<?php
// Blacknova Traders - A web-based massively multiplayer space combat and trading game
// Copyright (C) 2001-2014 Ron Harwood and the BNT development team
//
//  This program is free software: you can redistribute it and/or modify
//  it under the terms of the GNU Affero General Public License as
//  published by the Free Software Foundation, either version 3 of the
//  License, or (at your option) any later version.
//
//  This program is distributed in the hope that it will be useful,
//  but WITHOUT ANY WARRANTY; without even the implied warranty of
//  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
//  GNU Affero General Public License for more details.
//
//  You should have received a copy of the GNU Affero General Public License
//  along with this program.  If not, see <http://www.gnu.org/licenses/>.
//
// File: create_universe.php

$index_page = true; // This prevents sessions from being started before DB exists
require_once './common.php';
require_once './config/admin_config.php';

// Set timelimit to infinite
set_time_limit(0);

// Detect if this variable exists, and filter it. Returns false if anything wasn't right.
$swordfish = null;
$swordfish = filter_input(INPUT_POST, 'swordfish', FILTER_SANITIZE_URL);
if (mb_strlen(trim($swordfish)) === 0)
{
    $swordfish = false;
}

// Detect if this variable exists, and filter it. Returns false if anything wasn't right.
$step = null;
$step = (int) filter_input(INPUT_POST, 'step', FILTER_SANITIZE_NUMBER_INT);
if (mb_strlen(trim($step)) === 0)
{
    $step = false;
}

if ($swordfish === null || $swordfish === false) // If no swordfish password has been entered and/or it did not clear the filter, we are on the first step
{
    $step = "1";
}

if (($swordfish !== null) && (ADMIN_PW != $swordfish)) // If a swordfish password is not null and it does not match (bad pass), redirect to step 1 (default or 0.php)
{
    $variables['goodpass'] = false;
    include_once 'create_universe/0.php';
}
else // If swordfish is set and matches (good pass)
{
    $variables['goodpass'] = true;
    if (isset($step) && $step != null) // We've got a good pass, and its not step 1
    {
        $create_universe_info = Bnt\BigBang::findStep(false);
        natsort($create_universe_info['files']);
        $loader_file = $create_universe_info['files'][$step];
        $filename = 'create_universe/' . $loader_file;
        if (file_exists($filename))
        {
            include_once($filename);
        }
    }
}
?>