<?php
    include("config.php");
    session_start();

    $name = $_SESSION['name'];
    $id = $_POST['fallid'];
    $suspect = $_POST['suspected'];
    $answer = $_POST['beschreibung'];
    $selecttyp = $_POST['selecttyp'];
    $selectend = $_POST['selectend'];
    $reason = $_POST['reason'];
    $txtammo = $_POST['txtammo'];

    if(isset($selecttyp))
    {
        if(isset($selectend))
        {
            $query = "SELECT * FROM `ucp_accounts` WHERE `name`='$suspect'";
            $check = mysql_query($query) or die("ERROR(AMK): ". mysql_error());
            $row = mysql_fetch_assoc($check);

            echo $ammo = $txtammo + $row["$selecttyp"];

            $query = "UPDATE `ucp_accounts` SET `$selecttyp`='$ammo' WHERE `name`='$suspect'";
            $check = mysql_query($query) or die("ERROR(ACC): ". mysql_error());

            $query = "UPDATE `ucp_beschwerden` SET `status`='$selectend', `answer`='$answer', `admin`='$name' WHERE `id`='$id'";
            $check = mysql_query($query);

            $timestamp = time();
            $datum = date("d/m/Y - H:i", $timestamp);
            $query = "INSERT INTO `log_sanktion` (`target`,`admin`,`typ`,`ammo`,`reason`,`date`) VALUES ('$suspect','$name','$selecttyp','$ammo','$reason','$datum')";
            $check = mysql_query($query) or die("ERROR(LOG): ". mysql_error());
            //header("Location: http://00348.stprof.eu/opencomplaint.php");
                ?> <br /> <?php echo"Mein Name ist: ". $name;
                ?> <br /> <?php echo"FALL ID: ". $id;
                ?> <br /> <?php echo"Der Angeklagte: ". $suspect;
                ?> <br /> <?php echo"Meine Antwort: ". $answer;
                ?> <br /> <?php echo"Strafe: ". $selecttyp;
                ?> <br /> <?php echo"Schließen?: ". $selectend;
                ?> <br /> <?php echo"GRUND: ". $reason;
                ?> <br /> <?php echo"Höhe der Strafe: ". $txtammo;
        }
    }

?>