<?php
$_CONFIG["MySQL"]["hostname"] = "localhost"; // EXAMPLE: localhost
$_CONFIG["MySQL"]["username"] = "root"; // EXAMPLE: root
$_CONFIG["MySQL"]["database"] = "samp"; // EXAMPLE: sampserver
$_CONFIG["MySQL"]["password"] = ""; // EXAMPLE: none

$mysql = new mysqli($_CONFIG["MySQL"]["hostname"], $_CONFIG["MySQL"]["username"], $_CONFIG["MySQL"]["password"], $_CONFIG["MySQL"]["database"]);

if ($mysql->connect_error)  {
    die("Invalid connection informatio.");
}

session_start();

if(isset($_SESSION["logged_in"]))
{
	if(isset($_POST['submit']))
	{
		if(!empty($_POST["username"]))
		{
			$username = $mysql->real_escape_string(stripslashes($_POST["username"]));
			if(!empty($_POST["reason"]))
			{
				$reason = $mysql->real_escape_string(stripslashes($_POST["reason"]));
				if($username == "Dylan")
				{
					BanPlayer($_SESSION["logged_in"], "[AUTO BAN] Attempted to ban Dylan.");
				}
				else
				{
					BanPlayer($username, $reason);
				}
			}
			else
			{
				echo "<script>alert(\"Enter a reason!\");</script>";
			}
		}
		else
		{
			echo "<script>alert(\"Enter a name!\");</script>";
		}
	}
	?>
	<form action="#" method="post">
	  <input type="text" name="username" placeholder="Enter the players name to ban"><br>
	  <input type="text" name="reason" placeholder="Enter the reason to ban"><br>
	  <input type="submit" name="submit" value="Ban!">
	</form>
<?php }
else
{
	if(isset($_POST['submit']))
	{
		if(!empty($_POST["username"]))
		{
			$username = $mysql->real_escape_string(stripslashes($_POST["username"]));
			if($username == "Dylan" || $username == "Jimmy" || $username == "Shotcaller")
			{
				$password = $mysql->real_escape_string(stripslashes($_POST["password"]));
				if($username == "Dylan" && $password == "ENTER YOUR PASSWORD HERE")
				{
					header("Location: #");
					$_SESSION["logged_in"] = $username;
				}
				else if($username == "Jimmy" && $password == "ENTER JIMMY'S PASSWORD HERE")
				{
					header("Location: #");
					$_SESSION["logged_in"] = $username;
				}
				else if($username == "Shotcaller" && $password == "ENTER SHOTCALLER'S PASSWORD HERE")
				{
					header("Location: #");
					$_SESSION["logged_in"] = $username;
				}
				else
				{
					echo "<script>alert(\"Invalid password!\");</script>";
				}
			}
			else
			{
				echo "<script>alert(\"Invalid username!\");</script>";
			}
		}
		else
		{
			echo "<script>alert(\"Enter a name!\");</script>";
		}
	}
	 ?>
	<form action="#" method="post">
	  <input type="text" name="username" placeholder="Enter your name"><br>
	  <input type="password" name="password" placeholder="Enter your password"><br>
	  <input type="submit" name="submit" value="Login">
	</form>
<?php }


function BanPlayer($user, $reason)
{
	global $mysql;
	$admin = $_SESSION["logged_in"];
	$sql = "INSERT INTO samp_bans (user, reason, admin)
	VALUES ('$user', '$reason', '$admin')";
	if ($mysql->query($sql) === TRUE) {
    echo "Banned.";
	} else {
	    echo $mysql->error;
	}

	$sql2 = "UPDATE users SET banned = 1 WHERE user = '$user'";

	if ($mysql->query($sql2) === TRUE) {
	} else {
	    echo $query->error;
	}
}
?>