lottery.php

<?php

include(__DIR__.'/globals.php');

if($lottoconfig['pagedisable'] == 'Yes' && $ir['user_level'] != 2)
{
    echo "<span style='color:red'>Sorry but admins have disbaled the lottery system.</span>";
    $h->endpage();
    exit;
}

$_GET['action'] = isset($_GET['action']) && ctype_alpha($_GET['action']) ? strtolower(trim($_GET['action'])) : '';
switch($_GET['action'])
{
    case 'buy': buy_tickets(); break;
    default: lotto(); break;
}

function lotto()
{
    global $db,$ir,$set,$h,$lottoconfig,$allowed;
    $count = $db->query("SELECT COUNT(`user`) FROM `lottery_players`");
    $amt = $db->fetch_single($count);
    echo "<h4>{$set['game_name']} Lottery</h4>
        <div style='background:#ececec; width: 400px; padding: 7px; border: 1px solid gray;'>
            <img src='http://4e7221.medialib.glogster.com/media/89879e031a5dbed8d1bf0e877ee49cb2a02e02f15f87bde3408ccfcc30c163b1/dollar-sign.png'
                width='200px' height='100px' /><br /><br />
            <span>Welcome to the lottery</span>
            <span>Each ticket costs <strong>".money_formatter($lottoconfig['ticketprice'])."</strong></span><br />
            <span>Maximum of <strong>".money_formatter($lottoconfig['maxtickets'], '')."</strong> tickets per person</span>
            <hr width='75%' align='center'>
            <strong>Loto Info</strong><br /><br />
            <span>Jackpot: ".money_formatter($lottoconfig['ticketprice'] * $amt)."</span><br />
            <span>Tickets Purchased: ".money_formatter($amt, '')."</span><br />
            <span>Your Tickets: ".money_formatter($ir['tickets'], '')."</span><br /><br />
            <form method='post' action='lottery.php?action=buy'>
                Buy Tickets: <input style='background: #BCC6CC;' type='text' name='amount' value='1' maxlength='2' />
                <button style='background: #BCC6CC; width: 100px; padding: 5px;'>Buy</button>
            </form>";
            if($ir['user_level'] == 2)
            {
                if(isset($_POST['updatesettings']))
                {
                    $_POST['tp'] = isset($_POST['tp']) && ctype_digit($_POST['tp']) ? abs(intval($_POST['tp'])) : 0;
                    $_POST['mut'] = isset($_POST['mut']) && ctype_digit($_POST['mut']) ? abs(intval($_POST['mut'])) : 0;

                    if(empty($_POST['tp']) || empty($_POST['mut']))
                    {
                        echo "You have missed a required field.";
                        $h->endpage();
                        exit;
                    }

                    $check = $db->query("SELECT `ticketprice`,`maxtickets` FROM `lottery_config`");
                    if($db->num_rows($check))
                        $db->query("UPDATE `lottery_config` SET `ticketprice` = {$_POST['tp']}, `maxtickets` = {$_POST['mut']}");
                    else
                        $db->query("INSERT INTO `lottery_config` VALUES('{$_POST['tp']}','{$_POST['mut']}')");
                    echo "Info has been updated.";
                }
                else if(isset($_GET['disable']))
                {
                    $select = $db->query("SELECT `pagedisable` FROM `lottery_config`");
                    if($db->fetch_single($select) == 'Yes')
                    {
                        $db->query("UPDATE `lottery_config` SET `pagedisable` = 'No' WHERE `pagedisable` = 'Yes'");
                        echo "You have enabled the page again users can access the lottery.";
                    }
                    else
                    {
                        $db->query("UPDATE `lottery_config` SET `pagedisable` = 'Yes' WHERE `pagedisable` = 'No'");
                        echo "You have disabled the page users can't access the lottery.";
                    }
                }
                else
                {
                    echo "<br /><br /><hr width='50%' align='center'>
                    <h3>Lottery Admin Panel</h3>
                    <p>Fill out the form below to create / update the price and max tickets.</p><br />
                    <form method='post'>
                        Cost Per Ticket: $<input type='text' name='tp' value='1' /><br /><br />
                        Max Tickets Per User: <input type='text' name='mut' value='1' /><br /><br />
                        <input type='submit' name='updatesettings' value='Update Lottery Settings' />
                    </form><br /><br />
                    <a href='lottery.php?disable'>[Turn On/Off Lottery Page]</a>";
                }
            }
        echo "</div>";
$h->endpage();
}

function buy_tickets()
{
    global $db,$ir,$h,$lottoconfig;
    $_POST['amount'] = isset($_POST['amount']) && ctype_digit($_POST['amount']) ? abs(intval($_POST['amount'])) : 0;
    if(empty($_POST['amount']))
    {
        echo "Invalid Format.";
        $h->endpage();
        exit;
    }
    $deficit = $lottoconfig['maxtickets'] - $ir['tickets'];
    if($ir['tickets'] + $_POST['amount'] > $lottoconfig['maxtickets'])
    {
        echo "The max tickets is ".number_format($lottoconfig['maxtickets']).".
        This means you can only buy ".number_format($lottoconfig['maxtickets'] - $ir['tickets'])." more ticket".($deficit == 1 ? '' : 's');
        $h->endpage();
        exit;
    }
    if($_POST['amount'] > $lottoconfig['maxtickets'])
    {
        echo "You can't purchase this amount of tickets..";
        $h->endpage();
        exit;
    }
    if($ir['money'] < $lottoconfig['ticketprice'] * $_POST['amount'])
    {
        echo "You don't have enough you need ".money_formatter($lottoconfig['ticketprice'] * $_POST['amount'] - $ir['money']) ." more.";
        $h->endpage();
        exit;
    }
    if($ir['money'] >= $lottoconfig['ticketprice'] * $_POST['amount'] && $_POST['amount'] <= $lottoconfig['maxtickets'])
    {
        $ir['money'] -= $lottoconfig['ticketprice'] * $_POST['amount'];
        $ir['tickets'] += $_POST['amount'];
        for($i = 1; $i <= $_POST['amount']; $i++)
            $db->query("INSERT INTO `lottery_players` VALUES('{$ir['userid']}')");
        $db->query("UPDATE `users` SET `money` = {$ir['money']}, `tickets` = {$ir['tickets']} WHERE `userid` = {$ir['userid']}");
        echo "You have purchased ".money_formatter($_POST['amount'], '')." tickets for ".money_formatter($lottoconfig['ticketprice'] * $_POST['amount']);
    }
$h->endpage();
}