update

2025-04-07 13:45:42 +12:00 · 2021-06-27 15:32:09 +12:00 · 2021-06-27 15:32:09 +12:00 · 7c987d8d35
commit 7c987d8d35
parent 6267910923
8 changed files with 242 additions and 29 deletions
--- a/Server/HorseIsleServer/Server/Database.cs
+++ b/Server/HorseIsleServer/Server/Database.cs
@ -23,7 +23,7 @@ namespace HISP.Server
            {
                db.Open();
                string UserTable = "CREATE TABLE IF NOT EXISTS Users(Id INT, Username TEXT(16), PassHash TEXT(128), Salt TEXT(128), Gender TEXT(16), Admin TEXT(3), Moderator TEXT(3))";
-                string ExtTable = "CREATE TABLE IF NOT EXISTS UserExt(Id INT, X INT, Y INT, LastLogin INT, Money INT, QuestPoints INT, BankBalance DOUBLE, BankInterest DOUBLE, ProfilePage Text(4000),IpAddress TEXT(1028),PrivateNotes Text(65535), CharId INT, ChatViolations INT,Subscriber TEXT(3), SubscribedUntil INT,  Experience INT, Tiredness INT, Hunger INT, Thirst INT, FreeMinutes INT)";
+                string ExtTable = "CREATE TABLE IF NOT EXISTS UserExt(Id INT, X INT, Y INT, LastLogin INT, Money INT, QuestPoints INT, BankBalance DOUBLE, BankInterest DOUBLE, ProfilePage Text(4000),IpAddress TEXT(1028),PrivateNotes Text(65535), CharId INT, ChatViolations INT,Subscriber TEXT(3), SubscribedUntil INT,  Experience INT, Tiredness INT, Hunger INT, Thirst INT, FreeMinutes INT, TotalLogins INT)";
                string MailTable = "CREATE TABLE IF NOT EXISTS Mailbox(RandomId INT, IdTo INT, IdFrom INT, Subject TEXT(100), Message Text(65535), TimeSent INT, BeenRead TEXT(3))";
                string BuddyTable = "CREATE TABLE IF NOT EXISTS BuddyList(Id INT, IdFriend INT)";
                string MessageQueue = "CREATE TABLE IF NOT EXISTS MessageQueue(Id INT, Message TEXT(1028))";
@ -3792,6 +3792,37 @@ namespace HISP.Server
                return gender;
            }
        }
+        public static int GetLoginCount(int playerId)
+        {
+            using (MySqlConnection db = new MySqlConnection(ConnectionString))
+            {
+                db.Open();
+                MySqlCommand sqlCommand = db.CreateCommand();
+
+                sqlCommand.CommandText = "SELECT TotalLogins FROM UserExt WHERE Id=@playerId";
+                sqlCommand.Parameters.AddWithValue("@playerId", playerId);
+                sqlCommand.Prepare();
+                int count = Convert.ToInt32(sqlCommand.ExecuteScalar());
+                sqlCommand.Dispose();
+
+                return count;
+            }
+        }
+        public static void SetLoginCount(int playerId, int count)
+        {
+            using (MySqlConnection db = new MySqlConnection(ConnectionString))
+            {
+                db.Open();
+                MySqlCommand sqlCommand = db.CreateCommand();
+
+                sqlCommand.CommandText = "UPDATE UserExt SET TotalLogins=@count WHERE Id=@playerId";
+                sqlCommand.Parameters.AddWithValue("@playerId", playerId);
+                sqlCommand.Parameters.AddWithValue("@count", count);
+                sqlCommand.Prepare();
+                sqlCommand.ExecuteNonQuery();
+                sqlCommand.Dispose();
+            }
+        }
        public static int GetExperience(int playerId)
        {
            using (MySqlConnection db = new MySqlConnection(ConnectionString))
--- a/Server/HorseIsleServer/Server/GameClient.cs
+++ b/Server/HorseIsleServer/Server/GameClient.cs
@ -256,6 +256,7 @@ namespace HISP.Server
            LoggedIn = true;

            Database.SetIpAddress(id, RemoteIp);
+            Database.SetLoginCount(id, Database.GetLoginCount(id) + 1);

            inactivityTimer = new Timer(new TimerCallback(keepAliveTimerTick), null, keepAliveInterval, keepAliveInterval);
        }
--- a/WebInterface/game-site/account.php
+++ b/WebInterface/game-site/account.php
@ -69,6 +69,19 @@ if(!is_logged_in())
 	exit();
 }

+
+// Get account data
+$money = getUserMoney($dbname, $_SESSION['PLAYER_ID']);
+$bankMoney = getUserBankMoney($dbname, $_SESSION['PLAYER_ID']);
+$loginDate = getUserLoginDate($dbname, $_SESSION['PLAYER_ID']);
+$questPoints = getUserQuestPoints($dbname, $_SESSION['PLAYER_ID']);
+$totalLogins = getUserTotalLogins($dbname, $_SESSION['PLAYER_ID']);
+
+$hasIntl = function_exists('numfmt_create');
+
+if($hasIntl)
+	$fmt = numfmt_create( 'en_US', NumberFormatter::DECIMAL );
+
 include("web/header.php");
 ?>

@ -138,13 +151,39 @@ h+=60;//h += 96;
 // -->
 </script>

-<TABLE WIDTH=100% CELLPADDING=5><TR><TD VALIGN=TOP><TABLE BORDER=0 CELLPADDING=5><TR><TD VALIGN=top><CENTER>When Ready, <a href='/horseisle.php?USER=SilicaAndPina' target=popup onClick="wopen('/horseisle.php?USER=SilicaAndPina', 'popup', 790, 522); return false;">Enter the World<BR><BR><IMG BORDER=0 SRC=/web/screenshots/enterhorseisle.png></A><BR><BR>(<a href='/horseisle.php?USER=SilicaAndPina' target=popup onClick="wopen('/horseisle.php?USER=SilicaAndPina', 'popup', 846, 542); return false;">bigger borders version</A>)<BR>(<A HREF=horseisle.php?USER=SilicaAndPina>same window version</A>)</TD><TD VALIGN=top>Welcome back <B>SilicaAndPina</B>, Here is your account info and Horse Isle server status: (<A HREF=?>refresh</A>)<BR><BR>It has been: 0.2 hours since you were last online. You have logged in 2 times.<BR>You have <B><FONT COLOR=005500>$5,910</FONT></B> in Horse Isle money on hand and <B><FONT COLOR=005500>$0</FONT></B> in the bank.<BR>You have earned <B>25</B> of <B>63005</B> total quest points  (<B>0%</B> Complete)<BR></TD></TR></TABLE><BR><HR>
+<TABLE WIDTH=100% CELLPADDING=5><TR><TD VALIGN=TOP><TABLE BORDER=0 CELLPADDING=5><TR><TD VALIGN=top><CENTER>When Ready, <a href='/horseisle.php?USER=<?php echo(htmlspecialchars($_SESSION['USERNAME'],ENT_QUOTES)); ?>' target=popup onClick="wopen('/horseisle.php?USER=<?php echo(htmlspecialchars($_SESSION['USERNAME'],ENT_QUOTES)); ?>', 'popup', 790, 522); return false;">Enter the World<BR><BR><IMG BORDER=0 SRC=/web/screenshots/enterhorseisle.png></A><BR><BR>(<a href='/horseisle.php?USER=<?php echo(htmlspecialchars($_SESSION['USERNAME'],ENT_QUOTES)); ?>' target=popup onClick="wopen('/horseisle.php?USER=<?php echo(htmlspecialchars($_SESSION['USERNAME'],ENT_QUOTES)); ?>', 'popup', 846, 542); return false;">bigger borders version</A>)<BR>(<A HREF=horseisle.php?USER=<?php echo(htmlspecialchars($_SESSION['USERNAME'],ENT_QUOTES)); ?>>same window version</A>)</TD><TD VALIGN=top>Welcome back <B><?php echo(htmlspecialchars($_SESSION['USERNAME'])); ?></B>, Here is your account info and Horse Isle server status: (<A HREF=?>refresh</A>)<BR><BR><?php 
+	$moneyStr = "";
+	if($hasIntl)					
+		$moneyStr .= numfmt_format($fmt, $money);
+	else
+		$moneyStr .= $money;
+
+	$bankmoneyStr = "";
+	if($hasIntl)					
+		$bankmoneyStr .= numfmt_format($fmt, $bankMoney);
+	else
+		$bankmoneyStr .= $bankMoney;
+
+	$totalLoginsStr = "";
+	if($hasIntl)					
+		$totalLoginsStr .= numfmt_format($fmt, $totalLogins);
+	else
+		$totalLoginsStr .= $bankMoney;
+
+
+	$lastOn = 0.00;
+	$current_time = time();
+	$difference = $current_time - $loginDate;
+	$lastOn = $difference/60;
+    
+	echo('It has been: '.$lastOn.' hours since you were last online. You have logged in '.$totalLoginsStr.' times.<BR>You have <B><FONT COLOR=005500>$'.$moneyStr.'</FONT></B> in Horse Isle money on hand and <B><FONT COLOR=005500>$'.$bankmoneyStr.'</FONT></B> in the bank.<BR>You have earned <B>'.(string)$questPoints.'</B> of <B>63005</B> total quest points  (<B>'.(string)floor(($questPoints / 63005) * 100.0).'%</B> Complete)<BR></TD></TR></TABLE><BR><HR>');
+?>



 <CENTER><TABLE WIDTH=500><TR><TD class=forumlist>

-<FONT SIZE=+1>SILICAANDPINA'S PINTO SUBSCRIPTION STATUS:<BR></FONT><FONT SIZE=+2><FONT COLOR=GREEN>ACTIVE</FONT></FONT><BR>(31 days remain in your subscription)</FONT> (<A HREF=web/reasonstosubscribe.php>Subscription Benefits</A>)
+<FONT SIZE=+1><?php echo(strtoupper(htmlspecialchars($_SESSION['USERNAME']))); ?>'S <?php echo(strtoupper($server_id)); ?> SUBSCRIPTION STATUS:<BR></FONT><FONT SIZE=+2><FONT COLOR=GREEN>ACTIVE</FONT></FONT><BR>(∞ days remain in your subscription)</FONT> (<A HREF=web/reasonstosubscribe.php>Subscription Benefits</A>)
 </TD></TR><TR><TD class=forumlist>
 <TABLE WIDTH=100%>
 <TR><TD><B>BUY 1 Month Membership <FONT COLOR=GREEN>$5.00</FONT>usd</B> <I><FONT SIZE=-1>(adds 31 days membership time to the account that you are currently logged in with.) Non-refundable.</FONT></I></TD><TD>
@ -152,13 +191,13 @@ h+=60;//h += 96;
 <input type="hidden" name="cmd" value="_xclick">
 <input type="hidden" name="business" value="paypal@horseisle.com">
 <input type="hidden" name="undefined_quantity" value="1">
-<input type="hidden" name="item_name" value="One Month Horse Isle Membership-on pinto.horseisle.com">
+<input type="hidden" name="item_name" value="One Month Horse Isle Membership-on <?php echo($_SERVER["HTTP_HOST"]); ?>">
 <input type="hidden" name="item_number" value="588112">
 <input type="hidden" name="custom" value="588112">
 <input type="hidden" name="amount" value="5.00">
 <input type="hidden" name="no_shipping" value="1">
-<input type="hidden" name="return" value="http://pinto.horseisle.com/web/paypalpayment.php">
-<input type="hidden" name="notify_url" value="http://pinto.horseisle.com/web/paypalgateway.php">
+<input type="hidden" name="return" value="http://<?php echo($_SERVER["HTTP_HOST"]); ?>/web/paypalpayment.php">
+<input type="hidden" name="notify_url" value="http://<?php echo($_SERVER["HTTP_HOST"]); ?>/web/paypalgateway.php">
 <input type="hidden" name="no_note" value="1">
 <input type="hidden" name="currency_code" value="USD">
 <input type="hidden" name="lc" value="US">
@ -178,13 +217,13 @@ h+=60;//h += 96;
 <input type="hidden" name="cmd" value="_xclick">
 <input type="hidden" name="business" value="paypal@horseisle.com">
 <input type="hidden" name="undefined_quantity" value="1">
-<input type="hidden" name="item_name" value="Full Year Horse Isle Membership-on pinto.horseisle.com">
+<input type="hidden" name="item_name" value="Full Year Horse Isle Membership-on <?php echo($_SERVER["HTTP_HOST"]); ?>">
 <input type="hidden" name="item_number" value="588112">
 <input type="hidden" name="custom" value="588112">
 <input type="hidden" name="amount" value="40.00">
 <input type="hidden" name="no_shipping" value="1">
-<input type="hidden" name="return" value="http://pinto.horseisle.com/web/paypalpayment.php">
-<input type="hidden" name="notify_url" value="http://pinto.horseisle.com/web/paypalgateway.php">
+<input type="hidden" name="return" value="http://<?php echo($_SERVER["HTTP_HOST"]); ?>/web/paypalpayment.php">
+<input type="hidden" name="notify_url" value="http://<?php echo($_SERVER["HTTP_HOST"]); ?>/web/paypalgateway.php">
 <input type="hidden" name="no_note" value="1">
 <input type="hidden" name="currency_code" value="USD">
 <input type="hidden" name="lc" value="US">
@ -246,13 +285,13 @@ Select: <SELECT NAME=quantity>
 <I><FONT SIZE=-1>(Gives your account Horse Isle currency for use in the game.  You can earn Horse Isle money by playing the game.  This is not required.) Non-refundable.</FONT></I></TD><TD>
 <input type="hidden" name="cmd" value="_xclick">
 <input type="hidden" name="business" value="paypal@horseisle.com">
-<input type="hidden" name="item_name" value="100k Horse Isle Money-on pinto.horseisle.com">
+<input type="hidden" name="item_name" value="100k Horse Isle Money-on <?php echo($_SERVER["HTTP_HOST"]); ?>">
 <input type="hidden" name="item_number" value="588112">
 <input type="hidden" name="custom" value="588112">
 <input type="hidden" name="amount" value="1.00">
 <input type="hidden" name="no_shipping" value="1">
-<input type="hidden" name="return" value="http://pinto.horseisle.com/web/paypalpayment.php">
-<input type="hidden" name="notify_url" value="http://pinto.horseisle.com/web/paypalgateway.php">
+<input type="hidden" name="return" value="http://<?php echo($_SERVER["HTTP_HOST"]); ?>/web/paypalpayment.php">
+<input type="hidden" name="notify_url" value="http://<?php echo($_SERVER["HTTP_HOST"]); ?>/web/paypalgateway.php">
 <input type="hidden" name="no_note" value="1">
 <input type="hidden" name="currency_code" value="USD">
 <input type="hidden" name="lc" value="US">
@ -271,13 +310,13 @@ Select: <SELECT NAME=quantity>
 <input type="hidden" name="cmd" value="_xclick">
 <input type="hidden" name="business" value="paypal@horseisle.com">
 <input type="hidden" name="undefined_quantity" value="1">
-<input type="hidden" name="item_name" value="Pawneer Order-on pinto.horseisle.com">
+<input type="hidden" name="item_name" value="Pawneer Order-on <?php echo($_SERVER["HTTP_HOST"]); ?>">
 <input type="hidden" name="item_number" value="588112">
 <input type="hidden" name="custom" value="588112">
 <input type="hidden" name="amount" value="8.00">
 <input type="hidden" name="no_shipping" value="1">
-<input type="hidden" name="return" value="http://pinto.horseisle.com/web/paypalpayment.php">
-<input type="hidden" name="notify_url" value="http://pinto.horseisle.com/web/paypalgateway.php">
+<input type="hidden" name="return" value="http://<?php echo($_SERVER["HTTP_HOST"]); ?>/web/paypalpayment.php">
+<input type="hidden" name="notify_url" value="http://<?php echo($_SERVER["HTTP_HOST"]); ?>/web/paypalgateway.php">
 <input type="hidden" name="no_note" value="1">
 <input type="hidden" name="currency_code" value="USD">
 <input type="hidden" name="lc" value="US">
@ -296,13 +335,13 @@ Select: <SELECT NAME=quantity>
 <input type="hidden" name="cmd" value="_xclick">
 <input type="hidden" name="business" value="paypal@horseisle.com">
 <input type="hidden" name="undefined_quantity" value="1">
-<input type="hidden" name="item_name" value="Five Pawneer Order-on pinto.horseisle.com">
+<input type="hidden" name="item_name" value="Five Pawneer Order-on <?php echo($_SERVER["HTTP_HOST"]); ?>">
 <input type="hidden" name="item_number" value="588112">
 <input type="hidden" name="custom" value="588112">
 <input type="hidden" name="amount" value="30.00">
 <input type="hidden" name="no_shipping" value="1">
-<input type="hidden" name="return" value="http://pinto.horseisle.com/web/paypalpayment.php">
-<input type="hidden" name="notify_url" value="http://pinto.horseisle.com/web/paypalgateway.php">
+<input type="hidden" name="return" value="http://<?php echo($_SERVER["HTTP_HOST"]); ?>/web/paypalpayment.php">
+<input type="hidden" name="notify_url" value="http://<?php echo($_SERVER["HTTP_HOST"]); ?>/web/paypalgateway.php">
 <input type="hidden" name="no_note" value="1">
 <input type="hidden" name="currency_code" value="USD">
 <input type="hidden" name="lc" value="US">
@ -322,7 +361,7 @@ Select: <SELECT NAME=quantity>

 <TR><TD class=forumlist>
 <BR>Alternative Payment Methods: <A HREF=/web/checks.php>Check/Cash via postal mail</A>
-<BR><BR>Gift Payments: <A HREF=//hi1.horseisle.com/web/giftmembership.php>Pay for a different player</A>
+<BR><BR>Gift Payments: <A HREF=<?php echo($master_site); ?>/web/giftmembership.php>Pay for a different player</A>
 <BR><BR></TD></TR>


--- a/WebInterface/game-site/web/crosserver.php
+++ b/WebInterface/game-site/web/crosserver.php
@ -30,6 +30,77 @@ function  getNoSubbedPlayersOnlineInServer($database)
 	return $onlineSubscribers->fetch_row()[0];
 }

+function getUserMoney($database, $id)
+{
+	include('config.php');
+	$dbname = $database;
+	$connect = mysqli_connect($dbhost, $dbuser, $dbpass,$dbname) or die("Unable to connect to '$dbhost'");
+	$stmt = $connect->prepare("SELECT Money FROM UserExt WHERE Id=?");
+	$stmt->bind_param("i", $id);
+	$stmt->execute();
+	$result = $stmt->get_result();
+	
+	return intval($result->fetch_row()[0]);
+	
+}
+
+function getUserBankMoney($database, $id)
+{
+	include('config.php');
+	$dbname = $database;
+	$connect = mysqli_connect($dbhost, $dbuser, $dbpass,$dbname) or die("Unable to connect to '$dbhost'");
+	$stmt = $connect->prepare("SELECT BankBalance FROM UserExt WHERE Id=?");
+	$stmt->bind_param("i", $id);
+	$stmt->execute();
+	$result = $stmt->get_result();
+	
+	return intval($result->fetch_row()[0]);
+	
+}
+
+function getUserLoginDate($database, $id)
+{
+	include('config.php');
+	$dbname = $database;
+	$connect = mysqli_connect($dbhost, $dbuser, $dbpass,$dbname) or die("Unable to connect to '$dbhost'");
+	$stmt = $connect->prepare("SELECT LastLogin FROM UserExt WHERE Id=?");
+	$stmt->bind_param("i", $id);
+	$stmt->execute();
+	$result = $stmt->get_result();
+	
+	return intval($result->fetch_row()[0]);
+	
+}
+
+function getUserQuestPoints($database, $id)
+{
+	include('config.php');
+	$dbname = $database;
+	$connect = mysqli_connect($dbhost, $dbuser, $dbpass,$dbname) or die("Unable to connect to '$dbhost'");
+	$stmt = $connect->prepare("SELECT QuestPoints FROM UserExt WHERE Id=?");
+	$stmt->bind_param("i", $id);
+	$stmt->execute();
+	$result = $stmt->get_result();
+	
+	return intval($result->fetch_row()[0]);
+	
+}
+
+function getUserTotalLogins($database, $id)
+{
+	include('config.php');
+	$dbname = $database;
+	$connect = mysqli_connect($dbhost, $dbuser, $dbpass,$dbname) or die("Unable to connect to '$dbhost'");
+	$stmt = $connect->prepare("SELECT TotalLogins FROM UserExt WHERE Id=?");
+	$stmt->bind_param("i", $id);
+	$stmt->execute();
+	$result = $stmt->get_result();
+	
+	return intval($result->fetch_row()[0]);
+	
+}
+
+
 function  getNoModPlayersOnlineInServer($database)
 {
 	include('config.php');
--- a/WebInterface/game-site/web/header.php
+++ b/WebInterface/game-site/web/header.php
@ -110,7 +110,7 @@ color: #440000;
 	if(is_logged_in())
 	{
 		$username = $_SESSION['USERNAME'];		
-		echo('<TABLE BORDER=0 CELLPADDING=0 CELLSPACING=10><TR><TD><B><A HREF=/account.php>'.strtoupper($_SERVER['HTTP_HOST']).'</A><BR>Logged in as: '.$username.'<BR><A HREF=/?LOGOUT=1><img src=/web/but-logout.gif border=0></A><BR><A HREF='.$master_site.'/><img src=/web/but-mainpage.gif border=0></A></TD><TD><BR><A HREF='.$master_site.'/account.php><img src=/web/but-serverlist.gif border=0></A><BR><A HREF='.$master_site.'/web/news.php><img src=/web/but-news.gif border=0></A><BR><A HREF='.$master_site.'/web/forums.php><img src=/web/but-forums.gif border=0></A><BR><A HREF='.$master_site.'/web/helpcenter.php><img src=/web/but-helpcenter.gif border=0></A></TD></TR></TABLE>');
+		echo('<TABLE BORDER=0 CELLPADDING=0 CELLSPACING=10><TR><TD><B><A HREF=/account.php>'.strtoupper($_SERVER['HTTP_HOST']).'</A><BR>Logged in as: '.htmlspecialchars($username).'<BR><A HREF=/?LOGOUT=1><img src=/web/but-logout.gif border=0></A><BR><A HREF='.$master_site.'/><img src=/web/but-mainpage.gif border=0></A></TD><TD><BR><A HREF='.$master_site.'/account.php><img src=/web/but-serverlist.gif border=0></A><BR><A HREF='.$master_site.'/web/news.php><img src=/web/but-news.gif border=0></A><BR><A HREF='.$master_site.'/web/forums.php><img src=/web/but-forums.gif border=0></A><BR><A HREF='.$master_site.'/web/helpcenter.php><img src=/web/but-helpcenter.gif border=0></A></TD></TR></TABLE>');
 	}
 	else
 	{
--- a/WebInterface/master-site/crosserver.php
+++ b/WebInterface/master-site/crosserver.php
@ -30,6 +30,77 @@ function  getNoSubbedPlayersOnlineInServer($database)
 	return $onlineSubscribers->fetch_row()[0];
 }

+function getUserMoney($database, $id)
+{
+	include('config.php');
+	$dbname = $database;
+	$connect = mysqli_connect($dbhost, $dbuser, $dbpass,$dbname) or die("Unable to connect to '$dbhost'");
+	$stmt = $connect->prepare("SELECT Money FROM UserExt WHERE Id=?");
+	$stmt->bind_param("i", $id);
+	$stmt->execute();
+	$result = $stmt->get_result();
+	
+	return intval($result->fetch_row()[0]);
+	
+}
+
+function getUserBankMoney($database, $id)
+{
+	include('config.php');
+	$dbname = $database;
+	$connect = mysqli_connect($dbhost, $dbuser, $dbpass,$dbname) or die("Unable to connect to '$dbhost'");
+	$stmt = $connect->prepare("SELECT BankBalance FROM UserExt WHERE Id=?");
+	$stmt->bind_param("i", $id);
+	$stmt->execute();
+	$result = $stmt->get_result();
+	
+	return intval($result->fetch_row()[0]);
+	
+}
+
+function getUserLoginDate($database, $id)
+{
+	include('config.php');
+	$dbname = $database;
+	$connect = mysqli_connect($dbhost, $dbuser, $dbpass,$dbname) or die("Unable to connect to '$dbhost'");
+	$stmt = $connect->prepare("SELECT LastLogin FROM UserExt WHERE Id=?");
+	$stmt->bind_param("i", $id);
+	$stmt->execute();
+	$result = $stmt->get_result();
+	
+	return intval($result->fetch_row()[0]);
+	
+}
+
+function getUserQuestPoints($database, $id)
+{
+	include('config.php');
+	$dbname = $database;
+	$connect = mysqli_connect($dbhost, $dbuser, $dbpass,$dbname) or die("Unable to connect to '$dbhost'");
+	$stmt = $connect->prepare("SELECT QuestPoints FROM UserExt WHERE Id=?");
+	$stmt->bind_param("i", $id);
+	$stmt->execute();
+	$result = $stmt->get_result();
+	
+	return intval($result->fetch_row()[0]);
+	
+}
+
+function getUserTotalLogins($database, $id)
+{
+	include('config.php');
+	$dbname = $database;
+	$connect = mysqli_connect($dbhost, $dbuser, $dbpass,$dbname) or die("Unable to connect to '$dbhost'");
+	$stmt = $connect->prepare("SELECT TotalLogins FROM UserExt WHERE Id=?");
+	$stmt->bind_param("i", $id);
+	$stmt->execute();
+	$result = $stmt->get_result();
+	
+	return intval($result->fetch_row()[0]);
+	
+}
+
+
 function  getNoModPlayersOnlineInServer($database)
 {
 	include('config.php');
--- a/WebInterface/master-site/index.php
+++ b/WebInterface/master-site/index.php
@ -61,30 +61,30 @@ HREF=/web/parents.php>Parent's Guide</A> <BR>
 <FONT COLOR=550000><B>
 <?php 
 if($hasIntl)
-echo numfmt_format($fmt, $onlineUsers);
+	echo numfmt_format($fmt, $onlineUsers);
 else
-echo $onlineUsers;
+	echo $onlineUsers;
 ?></B></FONT> Players Online Now<BR>
 <FONT COLOR=550000><B><?php 
 if($hasIntl)					
-echo numfmt_format($fmt, $onlineSubscribers);
+	echo numfmt_format($fmt, $onlineSubscribers);
 else
-echo $onlineSubscribers;
+	echo $onlineSubscribers;
 ?></B></FONT> Subscribers Online Now<BR>
 <FONT COLOR=550000><B>
 <?php 
 if($hasIntl)					
-echo numfmt_format($fmt, $onlineModerators);
+	echo numfmt_format($fmt, $onlineModerators);
 else
-echo $onlineModerators;
+	echo $onlineModerators;
 ?></B></FONT> Moderators Online Now<BR>
 <FONT COLOR=550000><B>
 <?php 
 $activeUserCount = $activeAccounts->fetch_row()[0];
 if($hasIntl)						
-echo numfmt_format($fmt,  $activeUserCount);
+	echo numfmt_format($fmt,  $activeUserCount);
 else
-echo $activeUserCount;
+	echo $activeUserCount;
 ?></B></FONT> Active Accounts<BR><BR>
 <B>ABOUT:</B><BR>
 Horse Isle is a vast multi-player horse based world. It allows for many players to
--- a/WebInterface/master-site/web/header.php
+++ b/WebInterface/master-site/web/header.php
@ -111,7 +111,7 @@ color: #440000;
 	if(is_logged_in())
 	{
 		$username = $_SESSION['USERNAME'];		
-		echo('<TABLE BORDER=0 CELLPADDING=0 CELLSPACING=10><TR><TD><B>Logged in as: '.$username.'</B><BR><BR><A HREF=/?LOGOUT=1><img src=/web/but-logout.gif border=0></A><BR><A HREF=/><img src=/web/but-mainpage.gif border=0></A></TD><TD><BR><A HREF=/account.php><img src=/web/but-serverlist.gif border=0></A><BR><A HREF=/web/news.php><img src=/web/but-news.gif border=0></A><BR><A HREF=/web/forums.php><img src=/web/but-forums.gif border=0></A><BR><A HREF=/web/helpcenter.php><img src=/web/but-helpcenter.gif border=0></A></TD></TR></TABLE>');
+		echo('<TABLE BORDER=0 CELLPADDING=0 CELLSPACING=10><TR><TD><B>Logged in as: '.htmlspecialchars($username).'</B><BR><BR><A HREF=/?LOGOUT=1><img src=/web/but-logout.gif border=0></A><BR><A HREF=/><img src=/web/but-mainpage.gif border=0></A></TD><TD><BR><A HREF=/account.php><img src=/web/but-serverlist.gif border=0></A><BR><A HREF=/web/news.php><img src=/web/but-news.gif border=0></A><BR><A HREF=/web/forums.php><img src=/web/but-forums.gif border=0></A><BR><A HREF=/web/helpcenter.php><img src=/web/but-helpcenter.gif border=0></A></TD></TR></TABLE>');
 	}
 	else
 	{