<?php
$mssql_host = "127.0.0.1";
$mssql_user = "sa";
$mssql_password = "pass";
/*
 * SRO_VT_SHARD_INIT
 * dbo._Char
 * dbo._User
 * SRO_VT_ACCOUNT
 * dbo.TB_User
 * dbo._BlockedUser
 *
 * Ban users by character name, insert bans by account name
 * Serial to use: 2114
 */

if($_SERVER['REQUEST_METHOD'] == "POST"){
    $con = mssql_connect($mssql_host, $mssql_user, $mssql_password) or die("Failed to connect to MSSQL.");
    $charactername = addslashes($_POST['charactername']);
    $sql = "SELECT CharID FROM SRO_VT_SHARD_INIT.dbo._Char WHERE CharName16 = '$charactername';";
    $res = mssql_query($sql, $con);
    $r = mssql_fetch_array($res);
    $charid = $r['CharID'];
    $sql = "SELECT UserJID FROM SRO_VT_SHARD_INIT.dbo._User WHERE CharID = '$charid';";
    $res = mssql_query($sql, $con);
    $r = mssql_fetch_array($res);
    $jid = $r['UserJID'];
    $sql = "SELECT StrUserID FROM SRO_VT_ACCOUNT WHERE JID = '$jid';";
    $res = mssql_query($sql, $con);
    $r = mssql_fetch_array($res);
    $account = $r['StrUserID'];
    // $charid = Character ID
    // $jid = .... JID
    // $account = Account name
    $sql = "DELETE FROM SRO_VT_ACCOUNT.dbo._BlockedUser WHERE UserID = '$account';";
    $res = mssql_query($sql, $con);
    $sql = "INSERT INTO SRO_VT_ACCOUNT.dbo._BlockedUser (UserJID, UserID, Type, SerialNo, timeBegin, timeEnd)
        VALUES
        ('$jid', '$account', 1, 2114, '2012-02-10 22:02:00.000', '2012-02-20 22:02:00.000');";
    $res = mssql_query($sql, $con);
    if(!$res){
        echo "Error banning account.";
    } else {
        echo "Success";
    }
}

?>

<form action="ban.php" method="post">
    <table>
        <tr>
            <td>Character Name</td>
            <td><input type="text" name="charactername"/></td>
        </tr>
        <tr>
            <td></td>
            <td><input type="submit" name="submit" value="Ban user"/></td>
        </tr>
    </table>
</form>