<?php
session_start();
include('core.php');

$id = $_SESSION['id'];
$user = $_SESSION['name'];
$exp = $_SESSION['exp'];
$lvl = $_SESSION['lvl'];
$acc = $_SESSION['act'];
$cash = $_SESSION['cash'];
$ban = $_SESSION['ban'];
$sban = $_SESSION['sban'];
$last = $_SESSION['last'];
setlocale(LC_MONETARY,"en_US");
$money = number_format($cash);
$pass = $_SESSION['pass'];
$email = $_SESSION['email'];
$bio = $_SESSION['bio'];
$uid = $_SESSSION['uid'];

function userInfo() {

include('core.php');

$user = $_SESSION['name'];
$link = mysqli_connect($dbh, $dbu, $dbp, $dbn);

if (mysqli_connect_errno()) {
	printf("Connect failed: %s\n", mysqli_connect_error());
	exit();
}

$query = "SELECT * FROM users WHERE username='$user'";
$result = $link->query($query) or die($mysqli->error.__LINE__);

if($result->num_rows > 0) {
	while($row = $result->fetch_assoc()) {
	$msg = $row['msg'];
	$exp = $row['exp'];
	$level = $row['level'];
	$cash = $row['cash'];
	$job = $row['job'];
	}
}

$_SESSION['cash'] = $cash;
$_SESSION['jobt'] = $job;

$clevel = pow(2,$level);
$tlevel = $clevel;
if($exp > $tlevel) {
$level = $level + 1;
$_SESSION['lvl'] = $level;
}

$query = "UPDATE users SET msg='$msg', exp='$exp' , level='$level' , cash='$cash' WHERE username='$user'";
mysqli_query($link, $query);
if($msg > 0) {
	$_SESSION['msg'] = "<span style='color:red'>".$msg."</span>";
}else {
$_SESSION['msg'] = $msg;
}
mysqli_close($link);
}

userInfo();
$msg = $_SESSION['msg'];

if($acc == 2) {
	$acc = "Administrator";
	$alink = '<div class="navbox">
		<div class="navhead">Administration</div>
		<div class="navbody">
			<div class="navlinks">
				<ul>
				</ul>
			</div>
		</div>
		<div class="navfooter"></div></div>';
}else if($acc == 1) {
	$acc = "Moderator";
}else if($acc == 0) {
	$acc = "User";
}

if($ban == 0) {
	$stat = "Active";
}else {
	$stat = "Banned";
}


if(isset($_SESSION['logged']) && $ban != 1) {
	$uHead = "User Stats";
	$clevel = pow(2,$lvl) + 1;
	$xlevel = ($exp / $clevel) * 100;
	$perc = floor($xlevel);
	$uli = "<li>Username: ".$user."</li>
	<li>Level: ".$lvl."</li>
	<li>Experience: ".$exp."</li>
	<li>Next Level: ".$perc."%</li>
	<li>Money: $".$money."</li>
	<li>Account: ".$acc."</li>
	<li>Status: ".$stat."</li>
	<li>Time: <span id='servertime'></span></li>";

	$tme = date('h:i:s');
	$job = $_SESSION['jobt'];
if($job <= $tme) {
	$li = "<li>:. <a href='index.php'>Home</a></li>
	<li>:. <a href='?p=profile'>Profile</a></li>
	<li>:. <a href='?p=inbox'>Inbox</a> (".$msg.")</li>
	<li>:. <a href='?p=bank'>Bank</a></li>
    	<li>:. <a href='?p=search'>Search</a></li>
	<li>:. <a href='?p=jobs'>Jobs</a></li>
	<li>:. <a href='?p=logout'>Logout</a></li>";
}else {
	$li = "<li>:. <a href='index.php'>Home</a></li>
	<li>:. <a href='?p=profile'>Profile</a></li>
	<li>:. <a href='?p=inbox'>Inbox</a> (".$msg.")</li>
	<li>:. <a href='?p=bank'>Bank</a></li>
	<li>:. <a href='?p=search'>Search</a></li>
	<li>:. <a href='?p=logout'>Logout</a></li>";
}
$tme = date('h:i:s');
$job = $_SESSION['jobt'];
if($job <= $tme) {
	$jobo = '<span style="color:#00FF00;">Available</span>';
}else {
	$jobo = '<span style="color:#ff2414">Restricted</span> - Available at: '.$job.'';
}
	$land = "Welcome to Central Command, ".$user."<br />
	<br />
	 Job Status: ".$jobo."";
}else if(isset($_SESSION['logged']) && $ban == 1) {
	$uHead = "Banned!";
	$stat = "Banned";
    $head = "Banned!";
    $land = "You have been banned from the system. All access privileges have been revoked!";
    $uli = " <center>Access Denied!</center>";
    $li = " <li>:. <a href='?p=logout'>Logout</a></li>";
	}else {$uHead = "Welcome";
	$head = "Cyber Warfare";
	$uli = "<center>There is a war being fought! Dont just stand there!</center>";
	$li = "<li>:. <a href='?p=login'>Login</a></li>
	<li>:. <a href='?p=register'>Register</a></li>";

	$land = "The year is 3012. You are a 10 year survivor of a nuclear war that killed billions of people, flattened almost every city in the world, and left every person affected. Due to the explosions triggering volcanic activity, new land masses have formed, and old lands have now merged to form new territory. Survivors have managed to begin rebuilding due to one fact: of all that was lost, electricity survived. Now, equiped with your own AI technology, you must join the fight for control of the new world, and crush any opposing faction along the way!";
}

if($_GET['p'] == 'logout') {
	unset($_COOKIE['user']);
include('core.php');

$mysqli = new mysqli($dbh, $dbu, $dbp, $dbn);

if (mysqli_connect_errno()) {
	printf("Connect failed: %s\n", mysqli_connect_error());
	exit();
}
	$msg = 0;
$query = "UPDATE users SET msg='$msg' WHERE username='$user'";
mysqli_query($mysqli, $query);

mysqli_close($mysqli);

    session_destroy();
	header('Location: index.php');
}else if($_GET['p'] == 'login') {
	$head = "Login";
    $land = "<form action='login.php' method='post'>
	Email: <input type='text' name='email' required/><br />
	Password: <input type='password' name='pass' required/><br />
	<input type='submit' value='Login' name='log'/>
	</form>";
}else if($_GET['p'] == 'register') {
	$head = "Register";
    $land = "<form action='register.php' method='post'>
	Username: <input type='text' name='name' required/><br />
	Password: <input type='text' name='pass' required/><br />
	Email:: <input type='email' name='email' required/><br />
	<input type='submit' value='Register' name='reg' />
	</form>";
}else if($_GET['p'] == 'regsuc') {
	$head = "Registration Successful - You may now login.";
    $land = "<form action='login.php' method='post'>
	Email: <input type='text' name='email' required/><br />
	Password: <input type='password' name='pass'required/><br />
	<input type='submit' value='Login'  name='log'/>
	</form>";
}else if($_GET['p'] == 'logfail') {
	$error = "Invalid Email / Password";
	$head = "".$error."";
	$land = "<form action='login.php' method='post'>
	Email: <input type='text' name='email' required/><br />
	Password: <input type='password' name='pass' required/><br />
	<input type='submit' value='Login' name='log' />
	</form>";
}else if($_GET['p'] == 'regfail') {
	$error = "Username or Password already exists! Try again.";
	$head = "".$error."";
    $land = "<form action='register.php' method='post'>
	Username: <input type='text' name='name' required/><br />
	Password: <input type='text' name='pass' required/><br />
	Email: <input type='email' name='email' required/><br />
	<input type='submit' value='Register' name='reg' />
	</form>";
}else if($_GET['p'] == 'profile' && isset($_SESSION['logged'])) {
	$clevel = pow(2,$lvl) + 1;
	$xlevel = ($exp / $clevel) * 100;
	$perc = floor($xlevel);
	$land = "<center>
	<li>Username: ".$user."</li>
	<li>Level: ".$lvl."</li>
	<li>Experience: ".$exp."</li>
	<li>Next Level: ".$perc."%</li>
	<li>Next Level (Exp): ".$clevel."</li>
	<li>Money: $".$money."</li>
	<li>Account: ".$acc."</li>
	<li>Status: ".$stat."</li>
	</center>";

}else if($_GET['p'] == 'jobs' && isset($_SESSION['logged'])) {
	$tme = date('h:i:s');
	$job = $_SESSION['jobt'];


	if($job > $tme)  {
		header('Location: index.php');
	}
	$land = "<center><form action='jobs.php' method='post'>
	<table width='75%' padding='1'>
<tr>
<td width='5px'>1.</td>
<td><center>Steal a $10 from the local merchant</center></td>
<td><center><input type='radio' name='job' value='1' checked/></center></td>
</tr>
<tr>
<td width='5px'>2.</td>
<td><center>Hold up a jewelry store</center></td>
<td><center><input type='radio' name='job' value='2'/></center></td>
</tr>
</table>
	 <br /><input type='submit' value='Attempt' name='jobs' />
	</form>
	</center>";
}else if($_GET['p'] == 'jfail') {
	$link = mysqli_connect($dbh, $dbu, $dbp, $dbn);

        if (mysqli_connect_errno()) {
            printf("Connect failed: %s\n", mysqli_connect_error());
            exit();
          }

       $now = date('h:i:s', strtotime("+1 min"));

        $query = "UPDATE users SET job='$now' WHERE username='$name'";
        $result = mysqli_query($link, $query);
        mysqli_kill($link,$result);

	$land = 'Job Result: Failure!';
}else if($_GET['p'] == 'jwin') {
	$rew = $_SESSION['reward'];
	$land = 'Job Result: Success! - Reward: '.$rew.'';
}else if ($_GET['p'] == 'search' && isset($_SESSION['logged'])) {
	$land ='<form action="profile.php" method="post">
	Username: <input type="text" name="sname" /><br /><br />
	<input type="submit" value="Search" />
	</form>';
}else if ($_GET['p'] == 'sprofile' && isset($_GET['id'])) {
	$name = $_SESSION['sname'];
       $sexp =  $_SESSION['sexp'];
        $slevel = $_SESSION['slevel'];
       $sac = $_SESSION['sac'];
       $sban = $_SESSION['sban'];
       $sbio = $_SESSION['sbio'];

if($sban == 0) {
	$stat = "Active";
}else {
	$stat = "Banned";
}


       if($sac == 0) {
		   $sac = "User";
	   }else if($sac == 1) {
		   $sac = "Moderator";
	   }else if($sac == 2) {
		   $sac = "Administrator";
	   }
       $land = "<center>
	<li>Username: ".$name."</li>
	<li>Level: ".$slevel."</li>
	<li>Experience: ".$sexp."</li>
	<li>Account: ".$sac."</li>
	<li>Status: ".$stat."</li>
	</center>";
}else if($_GET['p'] == 'sfail') {
	$land = 'Sorry! No user exist by that name in the database. Please Try again!<br /><br />
	<form action="profile.php" method="post">
	Username: <input type="text" name="sname" /><br /><br />
	<input type="submit" value="Search" />
	</form>';
}else if($_GET['p'] == 'send') {
	$land = "<form method='post' action='test.php'>
	To: <input type='text' name='who' /><br />
	Subject: <input type='text' name='sub' value='No Subject'/><br />
    <textarea name='message' srows='4' cols='50'></textarea><br /><br />
    <input type='submit' value='send' name='send' />
	</form>";
}else if($_GET['p'] == 'msuc') {
	$land = 'Message has been sucsessfully sent!';
}else if($_GET['p'] == 'bank'){
$land = "Bank - Send Money to Other Players<br /><br /><form method='post' action='bank.php'>
	Transfer to: <input type='text' name='to' /><br />
	Amount Out: <input type='number' name='trns' /><br /><br />
    <input type='submit' value='Transfer' name='send' />
	</form>";
}else if($_GET['p'] == 'mfail') {
	$merr = $_SESSION['merr'];
	$land = 'Error: '.$merr.'';
}else if($_GET['p'] == 'd' && isset($_GET['id'])) {
include('core.php');

$id = $_GET['id'];

$mysqli = new mysqli($dbh, $dbu, $dbp, $dbn);

if (mysqli_connect_errno()) {
	printf("Connect failed: %s\n", mysqli_connect_error());
	exit();
}

$query = "DELETE FROM messages WHERE id='$id'";
$result = mysqli_query($mysqli, $query);

mysqli_close($mysqli);
header('Location: index.php?p=inbox');
}else if($_GET['p'] == 'bdone'){
$land = 'Money has been successfully transfered!';
}else if($_GET['p'] == 'bfail'){
	$berr = $_SESSION['berr'];
$land = 'Error: '.$berr.'';
}


?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">

<head>
<meta content="text/html; charset=windows-1252" http-equiv="Content-Type" />
<title>Cyber Warfare</title>
<link href="darkmech.css" rel="stylesheet" type="text/css" />
<link rel="icon" href="link.ico" />

</head>
<body>
	<script type="text/javascript">

var currenttime = '<? print date("F d, Y h:i:s", time())?>'

var serverdate=new Date(currenttime)

function padlength(what){
var output=(what.toString().length==1)? "0"+what : what
return output
}

function displaytime(){
serverdate.setSeconds(serverdate.getSeconds()+1)
var timestring=padlength(serverdate.getHours())+":"+padlength(serverdate.getMinutes())+":"+padlength(serverdate.getSeconds())
document.getElementById("servertime").innerHTML=timestring
}

window.onload=function(){
setInterval("displaytime()", 1000)
}

</script>

<div id="wrapper">

<img src="logo.png" width="990px" height="175px"/>


<div id="bodytop"></div>
<div id="bodyfill">
<div id="content">



<div id="COL-left">


	<div class="navbox">
		<div class="navhead">Navigation</div>
		<div class="navbody">
			<div class="navlinks">
				<ul>
					<?php echo $li; ?>
				</ul>
			</div>
		</div>
		<div class="navfooter"></div>
	</div>

<?php echo $alink; ?>

</div>




<div id="COL-right">


	<div class="navbox">
		<div class="navhead"><?php echo $uHead; ?></div>
		<div class="navbody">
			<div class="navlinks">
				<ul>
					<?php echo $uli; ?>
				</ul>
			</div>
		</div>
		<div class="navfooter"></div>
	</div>



</div>




<div id="COL-center">


	<div class="menubox">
	<div class="menutop"></div>
	<div class="menufill">
		<div class="menutitle"><?php echo $head; ?></div>
		<div class="menuinfoC">

			<?php
			if(isset($_GET['u']) && isset($_GET['id'])) {
				echo "Conversation: (Last 10 Messages)<hr />";

	include('core.php');

$name = $_SESSION['name'];
$who2 = $_GET['u'];
$read = $_GET['id'];
$sub = $_SESSION['sub'];
$_SESSION['to'] = $read;
$_SESSION['who2'] = $who2;
	$mysqli = new mysqli($dbh, $dbu, $dbp, $dbn);

if (mysqli_connect_errno()) {
	printf("Connect failed: %s\n", mysqli_connect_error());
	exit();
}
$var = $msg;
$pmsg = $msg - $var;
$_SESSION['msg'] = $pmsg;
$query = "UPDATE users SET msg='$pmsg' WHERE username='$name'";
$result = mysqli_query($mysqli, $query);

$query = "SELECT * FROM messages WHERE target='$name' AND id='$read' ORDER BY id DESC LIMIT 10";
$result = $mysqli->query($query) or die($mysqli->error.__LINE__);

while ( $row = $result->fetch_object() ) {
if ($result->num_rows >0) {
echo "<div id='msgs'><span style='text-align:left;'><hr /> &spades; - From: <b>{$row->who}</b> - <b>Sent On</b>: {$row->date}<br /><b>Subject</b>: {$row->sub} <br /><b>Message</b>: <i>{$row->message}</i></span><br /><br /></div>";
mysqli_close($mysqli);
}
}
mysqli_close($mysqli);
echo "<hr /> Compose / Quick Reply:<br /><form method='post' action='test.php'>
    <textarea name='message' srows='4' cols='50'></textarea><br /><br />
    <input type='submit' value='Send' />
	</form>";
}else if($_GET['p'] == 'inbox') {
				echo "Inbox - Ordered By: Most Recent<hr />";
	include('core.php');

$name = $_SESSION['name'];

	$mysqli = new mysqli($dbh, $dbu, $dbp, $dbn);

if (mysqli_connect_errno()) {
	printf("Connect failed: %s\n", mysqli_connect_error());
	exit();
}

$query = "SELECT sub,date,who,id FROM messages WHERE target='$name' ORDER BY id DESC LIMIT 10";
$result = $mysqli->query($query) or die($mysqli->error.__LINE__);

while ( $row = $result->fetch_object() ) {

if ($result->num_rows >0) {
echo "<div id='msgs'><span style='text-align:left;'><hr /><b>From</b>: {$row->who} - <b>Sent on</b>: {$row->date}</span> - <a href='index.php?u={$row->who}&id={$row->id}' ><span style='color:#ff2414;'>Read</span></a> - <a href='index.php?p=d&id={$row->id}'><span style='color:#ff2414;'>Delete</span></a><br /><br /></div>";
mysqli_close($mysqli);
}
}
mysqli_close($mysqli);
echo "<hr /><a href='index.php?p=send'><span style='color:white;'>Compose</span></a>";
}else {


	echo $land;
}

?>
<br />
		</div>
	</div>
	<div class="menufoot"></div>
	</div>

</div>





<div class="clearB"></div>
</div>


</div>


<div id="bodybottom"><center><span style="font-size:12px; color:white;">Chris Maciote - 2013 - Version: 1.0.1</span></center></div>


</div>
</div>




</body>
</html>