<?php
$_CONFIG["MySQL"]["hostname"] = "localhost"; // EXAMPLE: localhost
$_CONFIG["MySQL"]["username"] = "root"; // EXAMPLE: root
$_CONFIG["MySQL"]["database"] = "samp"; // EXAMPLE: sampserver
$_CONFIG["MySQL"]["password"] = ""; // EXAMPLE: none

$mysql = new mysqli($_CONFIG["MySQL"]["hostname"], $_CONFIG["MySQL"]["username"], $_CONFIG["MySQL"]["password"], $_CONFIG["MySQL"]["database"]);

if ($mysql->connect_error)  {
    die("Invalid connection informatio.");
}

session_start();

if(isset($_SESSION["logged_in"]))
{
	if(isset($_POST['submit']))
	{
		if(!empty($_POST["username"]))
		{
			$username = $mysql->real_escape_string(stripslashes($_POST["username"]));
			if(!empty($_POST["reason"]))
			{
				$reason = $mysql->real_escape_string(stripslashes($_POST["reason"]));
				if($username == "Dylan")
				{
					BanPlayer($_SESSION["logged_in"], "[AUTO BAN] Attempted to ban Dylan.");
				}
				else
				{
					BanPlayer($username, $reason);
				}
			}
			else
			{
				echo "<script>alert(\"Enter a reason!\");</script>";
			}
		}
		else
		{
			echo "<script>alert(\"Enter a name!\");</script>";
		}
	}
	if(isset($_POST['submit2']))
	{
		if(!empty($_POST["username"]))
		{
			$username = $mysql->real_escape_string(stripslashes($_POST["username"]));
			UnbanPlayer($username);
		}
		else
		{
			echo "<script>alert(\"Enter a name!\");</script>";
		}
	}
	?>
	<h1>Ban Player</h1>
	<form action="#" method="post">
	  <input type="text" name="username" placeholder="Enter the players name to ban"><br>
	  <input type="text" name="reason" placeholder="Enter the reason to ban"><br>
	  <input type="submit" name="submit" value="Ban!">
	</form>

	<br>
	<br>
	<br>

	<h1>Unban Player</h1>
	<form action="#" method="post">
	  <input type="text" name="username" placeholder="Enter the players name to unban"><br>
	  <input type="submit" name="submit2" value="Unban">
	</form>

	<br>
	<br>
	<br>

	<h1>Logs</h1>
	<table border="1" style="width:auto">
		<?php
		$sql = "SELECT log FROM ban_logs ORDER BY id DESC";
		$result = $mysql->query($sql);
		if ($result->num_rows > 0)
		{
		    while($row = $result->fetch_assoc())
		    {
		        echo "<tr><td>" . $row["log"]. "</td></tr>";
		    }
		}
		else
		{
		    echo "<tr><td>No logs were found.</td></tr>";
		}
		?>
	</table>
<?php }
else
{
	if(isset($_POST['submit']))
	{
		if(!empty($_POST["username"]))
		{
			$username = $mysql->real_escape_string(stripslashes($_POST["username"]));
			if($username == "Dylan" || $username == "Jimmy" || $username == "Shotcaller")
			{
				$password = $mysql->real_escape_string(stripslashes($_POST["password"]));
				if($username == "Dylan" && $password == "ENTER YOUR PASSWORD HERE")
				{
					header("Location: #");
					$_SESSION["logged_in"] = $username;
				}
				else if($username == "Jimmy" && $password == "ENTER JIMMY'S PASSWORD HERE")
				{
					header("Location: #");
					$_SESSION["logged_in"] = $username;
				}
				else if($username == "Shotcaller" && $password == "ENTER SHOTCALLER'S PASSWORD HERE")
				{
					header("Location: #");
					$_SESSION["logged_in"] = $username;
				}
				else
				{
					echo "<script>alert(\"Invalid password!\");</script>";
				}
			}
			else
			{
				echo "<script>alert(\"Invalid username!\");</script>";
			}
		}
		else
		{
			echo "<script>alert(\"Enter a name!\");</script>";
		}
	}
	 ?>
	<form action="#" method="post">
	  <input type="text" name="username" placeholder="Enter your name"><br>
	  <input type="password" name="password" placeholder="Enter your password"><br>
	  <input type="submit" name="submit" value="Login">
	</form>
<?php }


function BanPlayer($user, $reason)
{
	global $mysql;
	$admin = $_SESSION["logged_in"];
	$sql = "INSERT INTO samp_bans (user, reason, admin)
	VALUES ('$user', '$reason', '$admin')";
	if ($mysql->query($sql) === TRUE) {
    echo "Banned.";
	} else {
	    echo $mysql->error;
	}

	$sql2 = "UPDATE users SET banned = 1 WHERE user = '$user'";

	if ($mysql->query($sql2) === TRUE) {
	} else {
	    echo $mysql->error;
	}

	$log = $admin . " banned player " . $user . " for " . $reason;

	$sql = "INSERT INTO ban_logs (log)
	VALUES ('$log')";
	if ($mysql->query($sql) === TRUE) {
	} else {
	    echo $mysql->error;
	}
}

function UnbanPlayer($user)
{
	global $mysql;
	$admin = $_SESSION["logged_in"];
	$sql = "DELETE FROM samp_bans WHERE user = '$user'";
	if ($mysql->query($sql) === TRUE) {
    echo "Unbanned.";
	} else {
	    echo $mysql->error;
	}

	$sql2 = "UPDATE users SET banned = 0 WHERE user = '$user'";

	if ($mysql->query($sql2) === TRUE) {
	} else {
	    echo $query->error;
	}

	$log = $admin . " unbanned player " . $user;

	$sql = "INSERT INTO ban_logs (log)
	VALUES ('$log')";
	if ($mysql->query($sql) === TRUE) {
	} else {
	    echo $mysql->error;
	}
}

$mysql->close();
?>