getGJLevels19.php

<?php
include "incl/lib/connection.php";
require_once "incl/lib/injectionlibpatch.php";

// check if secret exists (basically finding if they are accessing from gd or url)
if (!isset($_POST["secret"]) || $_POST["secret"] !== "Wmfd2893gb7") {
    exit("-1");
}

// post params
$page = injectpatch::number($_POST["page"] ?? 0);
$str = injectpatch::clean($_POST["str"] ?? "");
$type = injectpatch::number($_POST["type"] ?? 0);

$gdDiff = injectpatch::number($_POST["diff"] ?? 0);

// makes the difficulty of gd go to database format
$diff = 0;
switch ($gdDiff) {
    case 1:
        $diff = 10;
        break;
    case 2:
        $diff = 20;
        break;
    case 3:
        $diff = 30;
        break;
    case 4:
        $diff = 40;
        break;
    case 5:
        $diff = 50;
        break;
    case 6:
        $diff = -1;
        break; // demon level
    default:
        $diff = 0;
        break;
}

$wheretype = "";
$order = "";
$params = [];

// star filters
if (!empty($_POST["star"])) {
    $wheretype = "WHERE rated > 0";
}
if (!empty($_POST["noStar"])) {
    $wheretype = "WHERE rated = 0";
}

switch ($type) {
    case 0:
        if (empty($str)) {
            $order = "ORDER BY levelID DESC";
            $wheretype = "";
        } elseif (is_numeric($str)) {
            $wheretype = "WHERE levelID = :str";
            $params[":str"] = $str;
            $order = "";
        } else {
            $wheretype = "WHERE LOWER(levelName) LIKE LOWER(:str)";
            $params[":str"] = "%$str%";
            $order = "ORDER BY levelID DESC";
        }
        break;
    // downloaded
    case 1:
        $order = "ORDER BY downloads DESC";
        break;
    // liked
    case 2:
        $order = "ORDER BY likes DESC";
        break;
    // trending (most liked this week)
    case 3:
        $wheretype = "WHERE uploadDate >= DATE_SUB(NOW(), INTERVAL 7 DAY)";
        $order = "ORDER BY likes DESC";
        break;
    // recent tab
    case 4:
        $order = "ORDER BY levelID DESC";
        break;
    // view a users levels
    case 5:
        $wheretype = "WHERE userID = :userid";
        $params[":userid"] = $str;
        $order = "ORDER BY levelID DESC";
        break;
    // featured
    case 6:
        $wheretype = "WHERE featured != 0";
        $order = "ORDER BY levelID DESC";
        break;
    // magic tab
    case 7:
        $wheretype = "WHERE length > 3";
        break;
}

// difficulty filter
if ($diff >= 10) {
    if ($wheretype == "") {
        $wheretype = "WHERE difficulty = :diff";
    } else {
        $wheretype .= " AND difficulty = :diff";
    }
    $params[":diff"] = $diff;
}

$offset = $page * 10;
$query = $db->prepare(
    "SELECT * FROM levels $wheretype $order LIMIT 10 OFFSET $offset"
);
$query->execute($params);
$levels = $query->fetchAll();

$levelObject = "";
$creatorObject = "";
$songString = ""; // empty for nwo

foreach ($levels as $level) {
    // level object
    $levelObject .=
        "1:{$level["levelID"]}:2:{$level["levelName"]}:3:{$level["description"]}" .
        ":5:{$level["levelVersion"]}:6:{$level["userID"]}:8:10:9:{$level["difficulty"]}" .
        ":10:{$level["downloads"]}:12:{$level["officialSong"]}:13:{$level["gameVersion"]}" .
        ":14:{$level["likes"]}:15:{$level["length"]}:17:{$level["demon"]}" .
        ":18:{$level["rated"]}:19:{$level["featured"]}:25:{$level["auto"]}" .
        ":26:0:30:0:31:0:35:0:36:|";

    // creator object
    $creatorObject .= "{$level["userID"]}:{$level["userName"]}:0|";
}

$levelObject = rtrim($levelObject, "|");
$creatorObject = rtrim($creatorObject, "|");

$countQuery = $db->prepare("SELECT COUNT(*) FROM levels $wheretype");
foreach ($params as $key => $value) {
    $countQuery->bindValue($key, $value);
}
$countQuery->execute();
$totalLevels = $countQuery->fetchColumn();

echo $levelObject .
    "#" .
    $creatorObject .
    "#" .
    $songString .
    "#" .
    $totalLevels .
    ":" .
    $page * 10 .
    ":10";
?>