<?php
	$web_title = "Merge Page";
	require_once "header.html";
?>
	<div class="left-column-full">
		<h2>King-PK Account Claiming</h2>
<?php
	if($pun_user['is_guest']){
		echo 'You must be logged in to use this page!';
	} else {
		echo '
			Here you can enter your previous username and password you\'ve used on King-PK to transfer
			over to RSCShadow\'s database.<br />If you wish to use a new username, please fill in the required field
			or else leave it blank.<br /><br />
			<form method="post">
				King-PK Username: <br />
				<input type="text" name="username" maxlength="12" /><br />
				New Username (Optional): <br />
				<input type="text" name="newusername" maxlength="10" /><br />
				If you would like a new username for your King-PK account, enter one here.<br />
				However this is completley optional and <strong>cannot be already in use in RSCShadow</strong>. <br /><br />
				King-PK Password: <br />
				<input type="password" name="password" maxlength="25" /><br />
				<input type="submit" name="submit" value="Claim" />
			</form><br />
		';
		if(isset($_POST['submit'])){
			$skill_array = array('attack', 'defense', 'strength', 'hits', 'ranged',	'prayer', 'magic', 'cooking', 'woodcut', 'fletching', 'fishing', 'firemaking', 'crafting', 'smithing', 'mining', 'herblaw', 'agility', 'thieving');
			$player_array = array('combat', 'skill_total', 'pass', 'creation_date', 'creation_ip', 'login_date', 'login_ip');
			$username = isset($_POST['username']) ? $_POST['username'] : null;
			$password = isset($_POST['password']) ? $_POST['password'] : null;
			$newusername = strlen($_POST['newusername']) > 0 ? $_POST['newusername'] : $_POST['username'];
			if($username == null || $password == null){
				echo "Please fill in all required fields!";
			} else if(strlen($newusername) > 10 || strlen($password) > 25 || strlen($username) > 12) {
				echo "Your new username may only be up to 10 characters. Please write a new username in the box provided.<br /> You will keep the account, it will just be renamed.";
			} else if(!preg_match("/^[a-zA-Z0-9\s]+?$/i", $username)){
				echo "Invalid username.";
			} else if(!preg_match("/^[a-zA-Z0-9\s]+?$/i", $newusername)){
				echo "Invalid characters in new username.";
			} else {
				$user_select = $db->fetch_assoc($db->query("
				SELECT
					k.user AS 'puser', k.username, k.combat, k.pass, k.skill_total, k.creation_date, k.creation_ip, k.login_date, k.login_ip,
					ke.*, kc.*
				FROM
					king_players AS k JOIN king_experience AS ke ON k.user = ke.user JOIN king_curstats AS kc ON kc.user = k.user
				WHERE
					username = '" . $db->escape($username) . "' AND pass = '" . md5($password) . "'"));
				if(isset($user_select['puser'])){
					$double_user_check = $db->fetch_assoc($db->query("SELECT id FROM rscd_players WHERE username = '" . $newusername . "'"));
					$user_count = $db->num_rows($db->query("SELECT user FROM rscd_players WHERE owner = " . $pun_user['id']));
					if(isset($double_user_check)){
						echo "Username taken on RSCShadow. Please fill in a different 'New Username'";
					} else if($user_count >= 10){
						echo "You already have the maximum amount of characters allowed on a forum account!";
					} else if(strlen($newusername) > 10) {
						echo "New username is too long!";
					} else {
						echo "Character " . $newusername . " claimed under forum account " . $pun_user['username'] . "<br />You may now login, or <a href='charmanage.html'>manage your characters</a>";
						for($skill = 0; $skill < count($skill_array); $skill++){
							$exp_str .= "exp_" . $skill_array[$skill] . ", ";
							$u_exp_str .= $user_select["exp_" . $skill_array[$skill]] . "', '";
							$curstat_str .= "cur_" . $skill_array[$skill] . ", ";
							$u_curstat_str .= $user_select["cur_" . $skill_array[$skill]] . "', '";
						}
						for($player = 0; $player < count($player_array); $player++){
							$player_str .= $player_array[$player] . ", ";
							$u_player_str .= $user_select[$player_array[$player]] . "', '";
						}
						$db->query("
						INSERT INTO rscd_experience (user, " . substr($exp_str, 0, -2) . ")
						VALUES ('" . encode_username($newusername) . "', '" . substr($u_exp_str, 0, -3) . ");");
						$db->query("DELETE FROM king_experience WHERE user = '" . $user_select['puser'] . "'");
						$db->query("
						INSERT INTO rscd_curstats (user, " . substr($curstat_str, 0, -2) . ")
						VALUES ('" . encode_username($newusername) . "', '" . substr($u_curstat_str, 0, -3) . ");");
						$db->query("DELETE FROM king_curstats WHERE user = '" . $user_select['puser'] . "'");
						$db->query("
						INSERT INTO rscd_players (user, username, " . substr($player_str, 0, -2) . ", owner)
						VALUES ('" . encode_username($newusername) . "', '" . $db->escape($newusername) . "', '" . substr($u_player_str, 0, -3) . ", " . $pun_user['id'] . ");");
						$db->query("DELETE FROM king_players WHERE user = '" . $user_select['puser'] . "'");
						//Item adding - defaults
						$db->query("INSERT INTO rscd_invitems (user,id,amount,slot) VALUES ('" . $user_select['puser'] . "','1006','1','0'), ('" . $user_select['puser'] . "','316','1','1'), ('" . $user_select['puser'] . "','77','1','2'), ('" . $user_select['puser'] . "','1263','1','3');");
						if($user_select['combat'] >= 45){
							//Level 45's or over would get a R2H and 50k GP
							$db->query("INSERT INTO rscd_invitems (user,id,amount,slot) VALUES ('" . encode_username($newusername) . "','81','1','4'), ('" . encode_username($newusername) . "','10','50000','5');");
						}
						if($user_select['combat'] >= 70){
							//Level 70's or over would get Rune Set, a R2H and 25k GP Over Level 45's items
							$db->query("INSERT INTO rscd_invitems (user,id,amount,slot) VALUES ('" . encode_username($newusername) . "','81','1','6'), ('" . encode_username($newusername) . "','112','1','7'), ('" . encode_username($newusername). "','401','1','8'), ('" . encode_username($newusername) . "','402','1','9'), ('" . $user_select['puser'] . "','10','25000','10') ;");
						}
					}
				} else {
					echo "Invalid username or password";
				}
			}
		}
	}
?>
	</div>
<?php
	require_once "footer.html";
?>