<?php
//error_reporting(0);
include_once('global.php');
?>
<?php
if (isset($_POST['account']) && isset($_POST['pasword']) && isset($_POST['usersn'])) {

	$au = new DB($db_host, $db_user, $db_pwd, $AU_db, $pconnect);
	$itembuy = new DB($db_host, $db_user, $db_pwd, $AUitem_db, $pconnect);
	unset($db_host, $db_user, $db_pwd, $AUlogin_db, $AU_db, $pconnect);
	
	$account = $_POST['account'];
	$pasword = $_POST['pasword'];
	$usersn  = $_POST['usersn'];


	if (!(ValidData($account) && ValidData($pasword))) {
		ErrorPurchase("帳號(hào)或密碼不合法");
	} else {
		$query ="
					SELECT UserSN, UserID, UserGender, Password
					FROM audition.userinfo 
					WHERE UserID = '$account'
				";
		$check = $au->query($query);
		$count = $au->num_rows($check);
		if ($count != 1) {
			ErrorPurchase("帳號(hào)或密碼不合法");
		} else {
			$result = $au->fetch_array($check);
			if ($account != $result['UserID'] || $pasword != $result['Password'] || $usersn != $result['UserSN']) {
				ErrorPurchase("帳號(hào)或密碼不合法");
			} else {

/* 檢查購(gòu)買婚禮券的人物性別 */
$query = "
		SELECT UserSN, UserID, UserGender 
		FROM audition.userinfo 
		WHERE UserSN = '$usersn' and UserGender = 'F'
	";
$check = $au->query($query);
$count = $au->num_rows($check);

if ($count >= 1 && $upower=='2721') {
	EndOfPage('您是女的，婚禮券僅限男性使用,謝謝合作<br />請(qǐng)選擇其他功能道具<br />如果你一定要買婚禮卷，那你先變性了再來購(gòu)買！');
}

/* 檢查VIP房間卡是否使用情況 */
$query = "
		SELECT RecvSN, ItemID 
		FROM present_list 
		WHERE RecvSN = '$usersn' and ItemID = '$upower' and RecvDate='0000-00-00 00:00:00'
	";
$check = $itembuy->query($query);
$count = $itembuy->num_rows($check);
if ($count >= 1 && $upower=='3043') {
	EndOfPage('對(duì)不起，您的VIP房間卡還未使用。<br />不可以重復(fù)購(gòu)買，請(qǐng)到期了再來買吧<br />請(qǐng)選擇其他功能道具！');
}

/* 檢查VIP房間卡使用到期情況 */
$query = "
		SELECT UserSN, ItemID 
		FROM avatar_inventory_items 
		WHERE UserSN = '$usersn' and ItemID = '$upower'
	";
$check = $itembuy->query($query);
$count = $itembuy->num_rows($check);
if ($count >= 1 && $upower=='3043') {
	EndOfPage('對(duì)不起，您的VIP房間卡還沒過期。<br />不可以重復(fù)購(gòu)買，請(qǐng)過期了再來買吧<br />請(qǐng)選擇其他功能道具！');
}

/* 檢查道具是否使用情況 */
$query = "
		SELECT ItemID 
		FROM present_list 
		WHERE RecvSN = '$usersn' and ItemID = '$upower' and RecvDate='0000-00-00 00:00:00'
	";
$check = $itembuy->query($query);
$count = $itembuy->num_rows($check);
if ($count >= 1) {
	EndOfPage('你要購(gòu)買的道具已經(jīng)買過并且還沒使用。<br />請(qǐng)使用后再來買吧！<br />請(qǐng)選擇其他功能道具！');
}

/* 檢查特殊道具購(gòu)買次數(shù)限制 */
$query = "
		SELECT ItemID 
		FROM present_list 
		WHERE RecvSN = '$usersn' and ItemID = '$upower'
	";
$check = $itembuy->query($query);
$count = $itembuy->num_rows($check);
if ($count > $itemdj) {
	EndOfPage('朋友，你已經(jīng)買了5次這個(gè)道具了。<br />本服務(wù)器禁止刷道具，謝謝合作！<br />請(qǐng)選擇其他功能道具！');
}


				// 取得玩家所擁有的CASH
				$query ="
						SELECT UserSN, Cash 
						FROM itemdb.usercash 
						WHERE UserSN = '$result[UserSN]'
					";
				$check = $itembuy->query($query);
				$count = $itembuy->num_rows($check);
				$result = $itembuy->fetch_array($check);
				$Cash = $result['Cash'];
				$upower  = $_POST['upower'];

				$query ="
						SELECT Cash
						FROM avatarlist
						WHERE ItemID = '$upower'

					";
				$check = $itembuy->query($query);
				$count = $itembuy->num_rows($check);
				$result = $itembuy->fetch_array($check);
				
				if ($Cash < $result['Cash']) {
					ErrorPurchase("您擁有的M幣不夠!您想蒙混過關(guān)呀!");
				} else {
					$Cash = $Cash - $result['Cash'];
					$date = date('Y-m-d H:i:s');
					$upower  = $_POST['upower'];

                                  $query ="
							INSERT INTO `present_list`
							(`SendSN`,  `SendNick`, `RecvSN`, `RecvNick`, `ItemID`, `Period`, `UseCount`, `SendDate`) 
							SELECT DISTINCT uwc.UserSN, ui.UserNick, uwc.UserSN, ui.UserNick, '$upower', 365, 60, now()
							FROM usercash uwc  
							LEFT JOIN audition.userinfo ui
							ON ui.UserSN = uwc.UserSN
							WHERE uwc.UserSN = '$usersn'
						";
					$result = $itembuy->query($query);
					
$PresentID = mysql_insert_id();
$query = "
		INSERT INTO `arrive_stat` 
		(`UserSN`,`PresentID`,`Type`,`UpdateTime`) 
		VALUES 
		('$usersn', '".$PresentID."', 6, now())
	";
$result = $itembuy->query($query);
					
					$query ="
							UPDATE usercash ui
							SET ui.cash = '$Cash'
							WHERE UserSN = '$usersn'
						";
					$result = $itembuy->query($query);

					
					$query ="
							SELECT UserSN, UserID, Password, UserNick, Exp, Level 
							FROM audition.userinfo 
							WHERE UserSN = '$usersn'
						";
					$check = $au->query($query);
					$result = $au->fetch_array($check);
					mysql_close();
					echo '<table border="1" cellspacing="0" cellpadding="1">';
					echo '<tr align="center"> <td width="center" colspan="4"><B>人物資料列表</B></td></tr>';
					echo '<tr align="center"> 
 					<td width="15%"><font color="#000000"><B>玩家?guī)ぬ?hào)</B></font></td>
					<td width="15%"><B>'.$result['UserID'].'</B></td>
					<td width="15%"><font color="#000000"><B>玩家經(jīng)驗(yàn)</B></font></td>
					<td width="15%"><B>'.$result['Exp'].'</B></td>
					</tr>';
					echo '<tr align="center"> 
					<td width="15%"><font color="#000000"><B>玩家昵稱</B></font></td>
					<td width="15%"><B>'.$result['UserNick'].'</B></td>
					<td width="15%"><font color="#000000"><B>玩家等級(jí)</B></font></td>
					<td width="15%"><B>'.$result['Level'].'</B></td>
					</tr>';	
					echo '<tr align="center"><td colspan="4"><BR><b>購(gòu)買道具成功！請(qǐng)到游戲禮品盒接收！</b></td></tr>';
					echo '<tr align="center"><td colspan="4"><a href="#" onclick="javascript:window.close()">關(guān)閉窗口</a></td></tr>';
					echo '</table>';
				}
			}
		}
	}
}
function EndOfPage($ErrMsg)
{
	ErrorPurchase($ErrMsg);
	die(0);
}
?>