<?php
//error_reporting(0);
include_once('global.php');
echo '<table style="text-align:center;">';

/* 檢查提交方式 */
if (strtoupper($_SERVER['REQUEST_METHOD'])!= "POST") {
	EndOfPage('提交的數據錯誤');
}

/* 獲得提交數據 */
$account = $_POST['account'];
$pasword = $_POST['pasword'];
$picmama = $_POST['picma'];
$piccard = $_COOKIE['authnum'];
/* 檢查提交的數據是否為空 */
if (   $account  == '' 
	|| $pasword  == '' 
  || $picmama  == '' ) {
	EndOfPage('您要使用的帳號或密碼含有非法數據<br />請返回后重新填寫');
}


/* 檢查數據長度 */
if (strlen($account) < 4 || strlen($account) > 12) {
	EndOfPage('您要使用的帳號長度不符合規定<br />請返回后重新填寫');
}


if (strlen($pasword) < 6 || strlen($account) > 20) {
	EndOfPage('您要使用的密碼長度不符合規定<br />請返回后重新填寫');
}


/* 檢查帳號密碼數據是否含有非法數據 */
if (!ValidData($account) || !ValidData($pasword)) {
	EndOfPage('您要使用的帳號或密碼含有非法數據<br />請返回后重新填寫');
}

/* 檢查提交的驗證碼 */
if (   $picmama  == $piccard )
{
	
/* 實例化DB類 操作audition庫 */
	$db = new DB($db_host, $db_user, $db_pwd, $AU_db, $pconnect);
	//$itembuy = new DB($db_host, $db_user, $db_pwd, $AUitem_db, $pconnect);
	//unset($db_host, $db_user, $db_pwd, $AUlogin_db, $AU_db, $pconnect);


echo '<form name="register" id="register" method="post" action="usershop.php" onSubmit="return checkdata()">';
echo '<table class="register" border="1" cellspacing="0" cellpadding="1">';

		$query ="
				SELECT UserSN, UserID, Password, UserNick, Level, Exp 
				FROM userinfo 
				WHERE UserID = '$account'
			";
		$check = $db->query($query);
		$count = $db->num_rows($check);
		$wannabuy = 0;
		
		if ($count != 1) {
			ErrorLogin("帳號或密碼不合法");
		} else {
			$result = $db->fetch_array($check);
			if ($account != $result['UserID'] || $pasword != $result['Password']) {
				ErrorLogin("帳號或密碼不合法");
			} else {
				$usersn = $result['UserSN'];
				
				echo '<input type="hidden" name="usersn" value="'.$usersn.'"></input>';
				echo '<input type="hidden" name="account" value="'.$account.'"></input>';
				echo '<input type="hidden" name="pasword" value="'.$pasword.'"></input>';
				echo '<tr align="center"> 
              <td width="center" colspan="4"><B>人物資料列表</B></td>
              </tr>';
        echo '<tr align="center"> 
              <td width="15%"><font color="#000000"><B>玩家帳號</B></font></td>
              <td width="15%"><B>'.$result['UserID'].'</B></td>
              <td width="15%"><font color="#000000"><B>玩家經驗</B></font></td>
              <td width="15%"><B>'.$result['Exp'].'</B></td>
              </tr>';
				echo '<tr align="center"> 
              <td width="15%"><font color="#000000"><B>玩家昵稱</B></font></td>
              <td width="15%"><B>'.$result['UserNick'].'</B></td>
              <td width="15%"><font color="#000000"><B>玩家等級</B></font></td>
              <td width="15%"><B>'.$result['Level'].'</B></td>
              </tr>';								
$audition = new DB($db_host, $db_user, $db_pwd, $item_db, $pconnect);
				
				$query ="
					SELECT uwc.ItemID, al.ItemName , al.Cash
					FROM basket uwc  
					LEFT JOIN avatarlist al 
					ON al.ItemID = uwc.ItemID
					WHERE uwc.UserSN = '$usersn'
					ORDER BY uwc.BasketID
					";
				$check = $db->query($query);
				$count = $db->num_rows($check);
				if ($count > 0 ) {
					$wannabuy = 1;
					echo '<tr align="center"><td colspan="6"><B>預購物品列表</B></td></tr>';
					$index = 1;
					echo '<tr align="center"><td colspan="1"><B>購物車位置</B></td><td colspan="2"><B>物品名稱</B></td><td colspan="1"><B>出售價格</B></td></tr>';
					while($result = $db->fetch_array($check)) {
						echo '<tr align="center"><td colspan="1"><B>'.$index.'</B></td><td colspan="2"><b>'.$result['ItemName'].'[永久]</b></td><td colspan="1"><B>'.$result['Cash'].'</B></td></tr>';
						$itemidxs = $result['ItemIdx'];
						$result = $db->query($query);
						$index += 1;
                }				
				}
						$query ="
						SELECT uwc.ItemID, al.ItemName
						FROM basket uwc
						LEFT JOIN avatarlist al 
						ON al.ItemID = uwc.ItemID
						WHERE uwc.UserSN = '$usersn'
						ORDER BY uwc.BasketID
					";
				$check = $db->query($query);
				$count = $db->num_rows($check);

					if ($wannabuy == 1) {
					mysql_close();
						echo '<tr align="center"><td colspan="6"><B>購買物品后將會減去相應的M幣,如果你已經購買過購物車里的服裝,那么購買將不能被提交。<B><BR></td></tr>';
						echo '<tr align="center"><td colspan="6"><input type="submit" class="button" name="submit" id="submit" value="提交購買"></input></td></tr>';
					}else{
                                              echo '<tr align="center"><td colspan="6"><B>您尚未在游戲中選購任何物品，請在游戲中將物品放到購物車上再到商城結帳！<B></td></tr>';
                                              echo '<tr align="center"><td colspan="6" class="prompt"><img src="getcode.php"></td></tr>';
                                              echo '<tr align="center"><td colspan="6"><a href="#" onclick="javascript:window.close()">關閉窗口</a></td></tr>';
                                              mysql_close();
 					     }
				echo '</table>';
			}
		}
/* 檢查提交的驗證碼 */
}
else {
ErrorLogin('您遞交的驗證碼錯誤!!!!!!!!<br />請返回后重新填寫');
}
/* 檢查帳號密碼數據是否含有非法數據 */
/* 檢查ACCOUNT數據長度 */
/* 檢查PASSWORD數據長度 */
/* 檢查提交的數據是否為空 */
/* 第一個判斷 */

function EndOfPage($ErrMsg)
{
	ErrorLogin($ErrMsg);
	die(0);
}
?>