<?php
//error_reporting(0);
include_once('global.php');
?>
<?php
if (isset($_POST['account']) && isset($_POST['pasword']) && isset($_POST['usersn'])) {

	$au = new DB($db_host, $db_user, $db_pwd, $AU_db, $pconnect);
	$itembuy = new DB($db_host, $db_user, $db_pwd, $AUitem_db, $pconnect);
	unset($db_host, $db_user, $db_pwd, $AUlogin_db, $AU_db, $pconnect);

	
	$account = $_POST['account'];
	$pasword = $_POST['pasword'];
	$usersn  = $_POST['usersn'];


	if (!(ValidData($account) && ValidData($pasword))) {
		ErrorPurchase("帳號或密碼不合法");
	} else {
		$query ="
					SELECT UserSN, UserID, UserGender, Password
					FROM audition.userinfo 
					WHERE UserID = '$account'
				";
		$check = $au->query($query);
		$count = $au->num_rows($check);
		if ($count != 1) {
			ErrorPurchase("帳號或密碼不合法");
		} else {
			$result = $au->fetch_array($check);
			if ($account != $result['UserID'] || $pasword != $result['Password'] || $usersn != $result['UserSN']) {
				ErrorPurchase("帳號或密碼不合法");
			} else {

				// 取得玩家所擁有的DEN
				$query ="
				SELECT uc.Cash,ud.Den
				FROM itemdb.usercash uc
				LEFT JOIN itemdb.userden ud 
				ON ud.UserSN = uc.UserSN
				WHERE uc.UserSN = '$usersn'
				ORDER BY uc.UserSN
				";
				$check = $itembuy->query($query);
				$result = $itembuy->fetch_array($check);

				$Money = $result['Den'];
				$Cash = $result['Cash'];
                                $cash1 = $_POST['cash1'];

				if ($cash1 * $gbtomb > $result['Den']) {
					ErrorGtoM("您擁有的G幣不夠!您想蒙混過關呀!");
				} else {
					$Cash = $cash1 + $result['Cash'];
					$Money = $Money - $cash1 * $gbtomb;
					$query ="
							UPDATE itemdb.usercash ui
							SET ui.Cash = '$Cash', ui.UpdateTime = now()
							WHERE ui.UserSN = '$usersn'
						";
					$result = $itembuy->query($query);
					
					$query ="
							UPDATE itemdb.userden ui
							SET ui.Den = '$Money', ui.UpdateTime = now()
							WHERE ui.UserSN = '$usersn'
						";
					$result = $itembuy->query($query);

					$query ="
							SELECT  uc.Cash,ud.Den
							FROM itemdb.usercash uc
							LEFT JOIN itemdb.userden ud 
							ON ud.UserSN = uc.UserSN
							WHERE uc.UserSN = '$usersn'
							ORDER BY uc.UserSN
							";
					$check = $itembuy->query($query);
					$result = $itembuy->fetch_array($check);
					mysql_close();

					echo '<table border="1" cellspacing="0" cellpadding="1">';
					echo '<tr align="center"> <td width="center" colspan="4"><B>人物資料列表</B></td></tr>';
					echo '<tr align="center"> 
 					<td width="15%"><font color="#000000"><B>玩家剩余M幣</B></font></td>
					<td width="15%"><B>'.$result['Cash'].'</B></td>
					<td width="15%"><font color="#000000"><B>玩家剩余G幣</B></font></td>
					<td width="15%"><B>'.$result['Den'].'</B></td>
					</tr>';
					echo '<tr align="center"><td colspan="4"><BR><b>恭喜你，兌換M幣成功！你已經成功兌換了';
echo $cash1;
echo 'M幣！</b></td></tr>';
					echo '<tr align="center"><td colspan="4"><a href="#" onclick="javascript:window.close()">關閉窗口</a></td></tr>';
					echo '</table>';
				}
			}
		}
	}
}
function EndOfPage($ErrMsg)
{
	ErrorGtoM($ErrMsg);
	die(0);
}
?>