<?php
//error_reporting(0);
include_once('global.php');
?>
<?php

if (isset($_POST['account']) && isset($_POST['pasword']) && isset($_POST['usersn'])) {
	$au = new DB($db_host, $db_user, $db_pwd, $AU_db, $pconnect);
	$itembuy = new DB($db_host, $db_user, $db_pwd, $AUitem_db, $pconnect);
	unset($db_host, $db_user, $db_pwd, $AU_db, $AUlogin_db, $AUitem_db, $pconnect);
	
	$account = $_POST['account'];
	$pasword = $_POST['pasword'];
	$usersn  = $_POST['usersn'];
	
	if (!(ValidData($account) && ValidData($pasword))) {
		ErrorPurchase("帳號或密碼不合法");
	} else {
		$query ="
					SELECT UserSN, UserID, Password 
					FROM audition.userinfo 
					WHERE UserID = '$account'
				";
		$check = $itembuy->query($query);
		$count = $itembuy->num_rows($check);
		if ($count != 1) {
			ErrorPurchase("帳號或密碼不合法");
		} else {
			$result = $itembuy->fetch_array($check);
			if ($account != $result['UserID'] || $pasword != $result['Password'] || $usersn != $result['UserSN']) {
				ErrorPurchase("帳號或密碼不合法");
			} else {
				// 取得玩家所擁有的CASH
				$query ="
						SELECT UserSN, Cash 
						FROM itemdb.usercash 
						WHERE UserSN = '$result[UserSN]'
					";
				$check = $itembuy->query($query);
				$count = $itembuy->num_rows($check);
				$result = $itembuy->fetch_array($check);
				$Cash = $result['Cash'];
				$query ="
						SELECT usersn Cash
						FROM basket uwc  
						LEFT JOIN avatarbuylist al 
						ON al.ItemID = uwc.ItemID
						WHERE uwc.UserSN = '$result[UserSN]'
						GROUP BY uwc.UserSN
						ORDER BY uwc.BasketID
					";
				$check = $itembuy->query($query);
				$count = $itembuy->num_rows($check);
				$result = $itembuy->fetch_array($check);
				
				if ($Cash < $result['Cash']) {
					ErrorPurchase("您擁有的CASH不夠");
				} else {
					$Cash = $Cash - $result['Cash'];
					$date = date('Y-m-d H:i:s');
					
					$query ="
							INSERT INTO `present_list`
                                                        (`OrderID`, `SendSN` , `SendNick` , `RecvSN` , `RecvNick` , `ItemID` , `Period` , `UseCount` , `Msg`, `SendDate` , `RecvDate`) 
							SELECT DISTINCT '1','0','瘋神',uwc.UserSN,ui.UserNick,uwc.ItemID,'365','0','瘋神領域歡迎您!','$date','0000-00-00 00:00:00'
							FROM basket uwc  
							LEFT JOIN audition.userinfo ui
							ON ui.UserSN = uwc.UserSN
							WHERE uwc.UserSN = '$usersn'
						";
					$result = $itembuy->query($query);
					
					$query ="
							DELETE
							FROM basket
							WHERE UserSN = '$usersn'
						";
					$result = $itembuy->query($query);

					$query ="
							SELECT UserSN, UserID, Password, UserNick 
							FROM audition.userinfo 
							WHERE UserSN = '$usersn'
						";
					$check = $au->query($query);
					$result = $au->fetch_array($check);
					echo '<div><table border="1" cellspacing="0" cellpadding="1">';
					echo '<tr align="center"><td colspan="3"><b>人物資料列表</b></td></tr>';
					echo '<tr align="center"><td><b>玩家昵稱</b></td><td width="310px" colspan="2"><b>'.$result['UserNick'].'</b></td></tr>';
                                        echo '<tr align="center"><td colspan="3"><b>購買成功請到游戲中查收！繼續購買物品請到游戲商品區選購，祝您游戲愉快！</b></td></tr>';
                                        echo '<tr align="center"><td colspan="3"><B>購物車收藏物品(已全部清空)<B></td></tr>';
                                        echo '<tr align="center"><td colspan="3"><B>所購買物品時限為30天<B></td></tr>';
					
					
					echo '<tr align="center"><td colspan="3"><a href="#" onclick="javascript:window.close()">關閉窗口</a></td></tr>';
					echo '</table></div>';
				}
			}
		}
	}
}
?>