<title>勁舞團 - 購買道具</title>
<link href="images/eng_css.css" tppabs="images/eng_css.css" rel="stylesheet" type="text/css">
<?php
//error_reporting(0);
include_once('include/global.php');
?>
<?php

if (isset($_POST['account']) && isset($_POST['pasword']) && isset($_POST['usersn'])) {

	$au = new DB($db_host, $db_user, $db_pwd, $AU_db, $pconnect);
	$itembuy = new DB($db_host, $db_user, $db_pwd, $AUitem_db, $pconnect);
	unset($db_host, $db_user, $db_pwd, $AUlogin_db, $AU_db, $pconnect);
	
	$account = $_POST['account'];
	$pasword = $_POST['pasword'];
	$usersn  = $_POST['usersn'];

	if (!(ValidData($account) && ValidData($pasword))) {
		ErrorPurchase("帳號或密碼不合法");
	} else {
		$query ="
					SELECT UserSN, UserID, Password, Cash, Money 
					FROM audition.userinfo 
					WHERE UserID = '$account'
				";
		$check = $au->query($query);
		$count = $au->num_rows($check);
		if ($count != 1) {
			ErrorPurchase("帳號或密碼不合法");
		} else {
			$result = $au->fetch_array($check);
			if ($account != $result['UserID'] || $pasword != $result['Password'] || $usersn != $result['UserSN']) {
				ErrorPurchase("帳號或密碼不合法");
			} else {

				// 取得玩家所擁有的CASH
				$query ="
						SELECT UserSN, Cash 
						FROM itemdb.usercash 
						WHERE UserSN = '$result[UserSN]'
					";
				$check = $itembuy->query($query);
				$count = $itembuy->num_rows($check);
				$result = $itembuy->fetch_array($check);
				$Cash = $result['Cash'];
                                $upower  = $_POST['upower'];

				$query ="
						SELECT Cash
						FROM item_web
						WHERE ItemID = '$upower'

					";
				$check = $itembuy->query($query);
				$count = $itembuy->num_rows($check);
				$result = $itembuy->fetch_array($check);
				
				if ($Cash < $result['Cash']) {
					ErrorPurchase("您擁有的CASH不夠");
				} else {
					$Cash = $Cash - $result['Cash'];
					$date = date('Y-m-d H:i:s');
					$upower  = $_POST['upower'];
                                        $query ="
							INSERT INTO `present_list`
                                                        (`OrderID`, `SendSN` , `SendNick` , `RecvSN` , `RecvNick` , `ItemID` , `Period` , `UseCount` , `Msg`, `SendDate` , `RecvDate`) 
							SELECT DISTINCT '1','0','瘋神',uwc.UserSN,ui.UserNick,'$upower','365','50','瘋神領域歡迎您!','$date','0000-00-00 00:00:00'
							FROM usercash uwc  
							LEFT JOIN audition.userinfo ui
							ON ui.UserSN = uwc.UserSN
							WHERE uwc.UserSN = '$usersn'
						";
					$result = $itembuy->query($query);
					
					
					$query ="
							UPDATE usercash ui
							SET ui.cash = '$Cash'
							WHERE UserSN = '$usersn'
						";
					$result = $itembuy->query($query);

					
					$query ="
							SELECT UserSN, UserID, Password, UserNick 
							FROM audition.userinfo 
							WHERE UserSN = '$usersn'
						";
					$check = $au->query($query);
					$result = $au->fetch_array($check);

					echo '<div><table border="1" cellspacing="0" cellpadding="1">';

				  echo '<tr align="center"> 
              <td width="center" colspan="6"><B>人物資料列表</B></td>
              </tr>';
        echo '<tr align="center"> 
              <td width="15%"><font color="#000000"><B>玩家帳號</B></font></td>
              <td width="15%"><B>'.$result['UserID'].'</B></td>
              <td width="15%"><font color="#000000"><B>玩家昵稱</B></font></td>
              <td width="15%"><B>'.$result['UserNick'].'</B></td>
              </tr>';

                 mysql_close();
        echo '<tr align="center"><td colspan="6"><BR><b><font color="#f00000">購買道具成功！祝您游戲愉快！警告:切勿連續刷新此頁否則后果自負!!</font></b><BR>認證碼：<img src="getcode.php"></td></tr>';  

					echo '<tr align="center"><td colspan="6"><a href="#" onclick="javascript:window.close()">關閉窗口</a></td></tr>';
					echo '</table></div>';
				}
			}
		}
	}
}
else {
EndOfPage('您遞交的驗證碼錯誤!!!!!!!!<br />請返回后重新填寫');
}
function EndOfPage($ErrMsg)
{
	ErrorBox($ErrMsg);
	die(0);
}

?>
<Script Language="JavaScript"> 
function document.onkeydown(){ 
if(window.event.keyCode=='116'){ 
window.alert('不允許按F5狂刷新：）'); 
window.event.keyCode=0; 
window.event.returnValue=false; 
} 
} 
</Script>