<?php
	include("config.php");
	session_start();
	if($_POST['bacceso'] == 'Acceder' && !empty($_POST['ipersonaje']))
	{
		$idPJ = strval($_POST['ipersonaje']);
		$conexion = mysqli_connect($host_pcu, $user_pcu, $password_pcu, $database_pcu);
		$sql = "SELECT * FROM players WHERE id = $idPJ AND Email = '".$_SESSION['email']."'";
		$result = mysqli_query($conexion, $sql);
		if($result == false)
		{
			mysqli_close($conexion);
			ob_end_clean();
			header("Location: personaje.php");
		}
		$row = mysqli_fetch_array($result);
		$_SESSION['id'] = $row['id'];
		$_SESSION['nombre'] = $row['Nombre'];
		$_SESSION['contraseña'] = $row['Password'];
		$_SESSION['seguro'] = $row['SeguroMedico'];
		$_SESSION['licencias'] = $row['Licencias'];
		$_SESSION['telefonos'] = $row['Telefonos'];
		$_SESSION['banco'] = $row['Banco'];
		$_SESSION['sexo'] = $row['Sexo'];
		$_SESSION['raza'] = $row['Raza'];
		$_SESSION['skin'] = $row['Skin'];
		$_SESSION['edad'] = $row['Edad'];
		$_SESSION['faccion'] = $row['Faccion'];
		$_SESSION['certificacion'] = $row['Certificacion'];
		$_SESSION['certificador'] = $row['Certificador'];
		$_SESSION['peliculas'] = $row['Peliculas'];
		$_SESSION['coches'] = $row['Coches'];
		switch($row['Certificacion'])
		{
			case 0:
				mysqli_close($conexion);
				ob_end_clean();
				header("Location: test.php");
				break;
			case 1:
				$_SESSION['user_logged_in'] = 2;
				mysqli_close($conexion);
				ob_end_clean();
				header("Location: estadisticas.php");
			break;
			default:
				$sql = "SELECT * FROM web_cert WHERE nombre = '".$_SESSION['nombre']."'";
				$result = mysqli_query($conexion, $sql);
				$row = mysqli_fetch_array($result);
				$id = $row['id'];
				if(mysqli_num_rows($result) == 0)
				{
					mysqli_close($conexion);
					ob_end_clean();
					header("Location: certificacion.php");
				}
				else
				{
					$sql= "SELECT * FROM web_cert WHERE id < $id";
					$resultado = mysqli_query($conexion, $sql);
					$certificaciones = mysqli_num_rows($resultado);
					mysqli_close($conexion);
					if($certificaciones == 0) echo "<script>alert('Todavía no te han certificado la cuenta, estás en primera posición.'); window.location = 'personaje.php';</script>";
					else echo "<script>alert('Todavía no te han certificado la cuenta, hay $certificaciones antes que la tuya.'); window.location = 'personaje.php';</script>";
				}
				break;
		}
	}
	else if($_POST['blogin'] == "Acceder" && !empty($_POST['logincuenta']) && !empty($_POST['loginpass']))
	{
		$conexion = mysqli_connect($host_foro, $user_foro, $password_foro, $database_foro);
		$usuario = mysqli_real_escape_string($conexion, $_POST['logincuenta']);
		$password = md5($_POST['loginpass']);
		$sql = "SELECT email FROM user WHERE username = '".$usuario."' AND password = '".$password."'";
		if($result = mysqli_query($conexion, $sql))
		{
			$row = mysqli_fetch_row($result);
			$_SESSION['user_logged_in'] = 1;
			$_SESSION['email'] = $row[0];
			$_SESSION['usuario'] = $usuario;
			mysqli_close($conexion);
			ob_end_clean();
			header("Location: personaje.php");
		}
		else
		{
			mysqli_close($conexion);
			ob_end_clean();
			header("Location: index.php");
		}
	}
	else
	{
		ob_end_clean();
		if($_SESSION['user_logged_in'] == 1) header("Location: personaje.php");
		else if($_SESSION['user_logged_in'] == 2) header("Location: estadisticas.php");
		else header("Location: index.php");
	}
?>