<?php
session_start();
include "include/query.php";
include "include/functions.php";
if($_GET["mode"]==msg_call)
{
	$db = new db_query;
	$db->connect();
	if($_SESSION["userrank"]<getConfig("enable_call"))
	{
		echo "<script language=javascript>opener.showNotice('您的級別不允許呼叫聊友！');window.close()</script>";
		exit;
	}
	if(!$db->result($db->query("select count(*) from `onlinelist` where `username` = '{$_POST["username"]}' and `roomid` = '{$_SESSION["roomid"]}'"),0,"count(*)"))
	{
		echo "<script language=javascript>opener.showNotice('<font color=\"blue\">{$_POST["username"]}</font> 不在聊天室中！');window.close();</script>";
		exit;
	}
	$content = addslashes(htmlspecialchars($_POST["why"]));
	$message = array("private"=>"","event"=>"","from_user"=>"","type"=>"","roomid"=>"","content"=>"","to_user"=>"","title"=>"","namecolor"=>"","saycolor"=>"","face"=>"");
	$message["from_user"] = $_SESSION["username"];
	$message["type"] = type_system;
	$message["event"] = msg_call;
	$message["roomid"] = $_SESSION["roomid"];
	$message["to_user"] = $_POST["username"];
	$message["content"] = $content;
	addMessage($message,$db);
	//送入消息列表
	echo "<script language=javascript>opener.showNotice('呼叫 <font color=\"blue\">{$_POST["username"]}</font> 成功。');window.close()</script>";
	$db->close();
	exit;
}
if($_GET["mode"]==msg_clear)
{
	if(!verifyMember(session_id(),$_SESSION["username"]))
	{
		header("location:notice.php?id=".not_login);
		exit;
	}
	$db = new db_query;
	$db->connect();
	$message = array("private"=>"","event"=>"","from_user"=>"","type"=>"","roomid"=>"","content"=>"","to_user"=>"","title"=>"","namecolor"=>"","saycolor"=>"","face"=>"");
	$message["from_user"] = $_SESSION["username"];
	$message["type"] = type_system;
	$message["event"] = msg_clear;
	$message["roomid"] = $_SESSION["roomid"];
	addMessage($message,$db);
	UnOnline($_SESSION["username"]);
	header("location:notice.php?id=".msg_clear);
	$db->close();
	exit;
}
if($_GET["mode"]==msg_rank)
{
	$db = new db_query;
	$db->connect();
	//調整級別
	//取得允許踢人的權限
	//檢測用戶是否有調整級別的權限
	if($_SESSION["username"]==$_POST["username"])
	{
		echo "<script language=javascript>opener.showNotice('不能對自己進行級別管理！');window.close();</script>";
		exit;
	}
	if(!$db->result($db->query("select count(*) from `members` where `username` = '{$_POST["username"]}'"),0,"count(*)"))
	{
		echo "<script language=javascript>opener.showNotice('該用戶不存在！');window.close();</script>";
		exit;
	}
	$enableGrade = true;
	if($_POST["grade"]>=getConfig("enable_kick"))
	{
		if($_SESSION["userrank"]<getConfig("enable_nolimit_grade"))
		{
			$enableGrade = false;
		}
	}
	else
	{
		if($_SESSION["userrank"]<getConfig("enable_grade"))
		{
			$enableGrade = false;
		}
	}
	if(!$enableGrade)
	{
		echo "<script language=javascript>opener.showNotice('請檢查您是否有權限執行此操作！');window.close();</script>";
		exit;
	}
	//檢測對方級別
	$hisRank = $db->result($db->query("select `rank` from `members` where `username` = '{$_POST["username"]}'"),0,"rank");
	if($hisRank>=$_SESSION["userrank"])
	{
		echo "<script language=javascript>opener.showNotice('對方級別不比你低~');window.close();</script>";
		exit;
	}
	if($_POST["grade"]>=($_SESSION["userrank"]))
	{
		echo "<script language=javascript>opener.showNotice('只能調整到比你小一級的級別！');window.close()</script>";
		exit;
	}
	if($_POST["grade"]>12&&$_POST["grade"]<0)
	{
		echo "<script language=javascript>opener.showNotice('只能調整對方級別在0-12的范圍內！');window.close();</script>";
		exit;
	}
	//通過檢測
	//執行升級操作
	$db->query("update `members` set `rank` = '{$_POST["grade"]}' where `username` = '{$_POST["username"]}'");
	//寫進日志
	$db->query("insert into `logs` set `type` = '".logtype_grade."',`user` = '{$_POST["username"]}',`manager` = '{$_SESSION["username"]}',`why` = '{$_POST["why"]}',`time` = '".date("Y-m-d H:i:s")."',`action`=5,`tags` = '{$hisRank},{$_POST["grade"]}'");
	$db->close();
	echo "<script language=javascript>opener.showNotice('調整級別成功！');window.close();</script>";
}
if($_GET["mode"]==msg_kick||$_GET["mode"]==msg_bomb||$_GET["mode"]==msg_lock||$_GET["mode"]==msg_warn)
{
	$db = new db_query;
	$db->connect();
	//檢測用戶是否為該房間的主人
	//房間主人允許踢，炸，警告，封鎖。但是不允許級別管理。
	$masters = $db->result($db->query("select `masters` from `rooms` where `id` = '{$_SESSION["roomid"]}'"),0,"masters");
	$isMaster = false;
	$heis_master = false;
	if($masters!="")
	{
		$arrMasters = explode(",",$masters);
		for($i=0;$i<count($arrMasters);$i++)
		{
			if($arrMasters[$i]==$_SESSION["username"])
			{
				$isMaster = true;
			}
			if($arrMasters[$i]==$_POST["username"])
			{
				$heis_master = true;
			}
		}
	}
	if($heis_master)
	{
		echo "<script language=javascript>opener.showNotice('該用戶是房間主人，不允許對他進行操作。');window.close()</script>";
		exit;
	}
	//檢測用戶權限
	if($db->result($db->query("select `protected` from `members` where `username` = '{$_POST["username"]}'"),0,"protected"))
	{
		echo "<script language=javascript>opener.showNotice('該用戶受系統保護，不允許對該用戶進行操作。');window.close()</script>";
		exit;
	}
	if($_POST["username"]==$_SESSION["username"])
	{
		echo "<script language=javascript>opener.showNotice('不允許自己管理自己！');window.close()</script>";
		exit;
	}
	$cannot = false;
	switch($_GET["mode"])
	{
		case msg_kick:
			if($_SESSION["userrank"]<getConfig("enable_kick"))
			{
				$cannot = true;
			}
			break;
		case msg_bomb:
			if($_SESSION["userrank"]<getConfig("enable_bomb"))
			{
				$cannot = true;
			}
			break;
		case msg_lock:
			if($_SESSION["userrank"]<getConfig("enable_lock"))
			{
				$cannot = true;
			}
			break;
		case msg_warn:
			if($_SESSION["userrank"]<getConfig("enable_warn"))
			{
				$cannot = true;
			}
			break;
	}
	if($cannot&&!$isMaster)
	{
		echo "<script language=javascript>opener.showNotice('請檢查您是否有權限執行此操作！');window.close()</script>";
		exit;
	}
	$rank = $_SESSION["userrank"];
	$manager = $_SESSION["username"];
	$why = addslashes($_POST["why"]);
	$to_user = $_POST["username"];
	$roomid = $_SESSION["roomid"];
	//用戶是否在線
	$isInChatRoom = $db->result($db->query("select count(*) from `onlinelist` where `username` = '{$to_user}' and `roomid` = '{$_SESSION["roomid"]}'"),0,"count(*)");
	if(!$isInChatRoom)
	{
		echo "<script language=javascript>opener.showNotice('〖<font color=blue>{$to_user}</font>〗不在聊天室');window.close()</script>";
		exit;
	}
	//用戶級別是否比自己高？
	$userRank = $db->result($db->query("select `rank` from `members` where `username` = '{$to_user}'"),0,"rank");
	if(!(($_SESSION["userrank"]>$userRank)||($isMaster&&$userRank<12)))
	{
		echo "<script language=javascript>opener.showNotice('對方級別比你高，操作失敗！');window.close()</script>";
		exit;
	}
	//封鎖IP
	if($_GET["mode"]==msg_lock)
	{
		//記錄IP
		$ip = $db->result($db->query("select `loginip` from `onlinelist` where `username` = '{$_POST["username"]}'"),0,"loginip");
		echo $ip;
		$isLocked = $db->result($db->query("select count(*) from `lockedip` where `ip` = '{$ip}'"),0,"count(*)");
		if($isLocked)
		{
			echo "<script language=javascript>opener.showNotice('該用戶的IP已經被封鎖了！');window.close();</script>";
			exit;
		}
		else
		{
			$db->query("insert into `lockedip` set `ip` = '{$ip}',`locktime` = '".time()."',`username` = '{$_POST["username"]}',`time` = '".date("Y-m-d H:i:s")."'");
		}
	}
	$message = array("private"=>"","event"=>"","from_user"=>"","type"=>"","roomid"=>"","content"=>"","to_user"=>"","title"=>"","namecolor"=>"","saycolor"=>"","face"=>"");
	$message["type"] = type_system;
	$message["from_user"] = $manager;
	$message["to_user"] = $to_user;
	$message["content"] = $why;
	$message["event"] = $_GET["mode"];
	$message["roomid"] = $roomid;
	addMessage($message,$db);
	$tm = date("H:i:s");
	if($_GET["mode"]!=msg_warn)
	{
		$db->query("update `members` set `lastkicktime` = '".time()."' where `username` = '{$to_user}'");
	}
	
	//寫入日志
	$db->query("insert into `logs` set `time` = '".date("Y-m-d H:i:s")."',`type` = ".logtype_manage.",`action` = '".$_GET["mode"]."',`user` = '{$to_user}',`manager`  = '{$manager}',`why` = '{$why}'");
	$db->close();
	echo "<script language=javascript>";
	echo "opener.showNotice('操作完全成功。');";
	echo "opener.writeMessage('".$message["content"]."','{$message["from_user"]}','{$message["to_user"]}','{$tm}','{$message["title"]}','{$message["saycolor"]}','{$message["namecolor"]}','{$message["private"]}',1,'{$message["event"]}','{$message["face"]}');";
	echo "window.close();";
	echo "</script>";
	exit;
}
if($_GET["mode"]==msg_forbid)
{
	$db = new db_query;
	$db->connect();
	if($_SESSION["username"]==$_POST["username"])
	{
		echo "<script language=javascript>opener.showNotice('不允許對自己進行管理操作。');window.close()</script>";
		exit;
	}
	if($_SESSION["userrank"]<getConfig("enable_forbid"))
	{
		echo "<script language=javascript>opener.showNotice('您的級別無法完成此操作。');window.close()</script>";
		exit;
	}
	if(!$db->result($db->query("select count(*) from `members` where `username` = '{$_POST["username"]}'"),0,"count(*)"))
	{
		echo "<script language=javascript>opener.showNotice('系統找不到該用戶。');window.close()</script>";
		exit;
	}
	if($_SESSION["userrank"]<=$db->result($db->query("select `rank` from `members` where `username` = '{$_POST["username"]}'"),0,"rank"))
	{
		echo "<script language=javascript>opener.showNotice('對方級別不比你底。');window.close()</script>";
		exit;
	}
	$db->query("update `members` set `forbid` = 1 where `username` = '{$_POST["username"]}'");
	$db->query("insert into `logs` set `type` = '".logtype_names."',`action` = ".msg_forbid.",`user` = '{$_POST["username"]}',`manager` = '{$_SESSION["username"]}',`time` = '".date("Y-m-d H:i:s")."',`why` = '".addslashes($_POST["why"])."'");
	$db->close();
	echo "<script language=javascript>opener.showNotice('禁用用戶 <font color=\"blue\">{$_POST["username"]}</font> 成功！');window.close()</script>";
	exit;
}
if($_GET["mode"]==msg_ungrade)
{
	$db = new db_query;
	$db->connect();
	if($_SESSION["username"]==$_POST["username"])
	{
		echo "<script language=javascript>opener.showNotice('不允許對自己進行管理操作。');window.close()</script>";
		exit;
	}
	if($_SESSION["userrank"]<getConfig("enable_unauto_grade"))
	{
		echo "<script language=javascript>opener.showNotice('您的級別無法完成此操作。');window.close()</script>";
		exit;
	}
	if(!$db->result($db->query("select count(*) from `members` where `username` = '{$_POST["username"]}'"),0,"count(*)"))
	{
		echo "<script language=javascript>opener.showNotice('系統找不到該用戶。');window.close()</script>";
		exit;
	}
	if($_SESSION["userrank"]<=$db->result($db->query("select `rank` from `members` where `username` = '{$_POST["username"]}'"),0,"rank"))
	{
		echo "<script language=javascript>opener.showNotice('對方級別不比你底。');window.close()</script>";
		exit;