<?php
    if (!empty($_POST['mc_gross']) && is_numeric($_POST['mc_gross']) && ($_POST['payment_status'] == "Completed")) {
        $gmodDB = "garrysmod";
        $zmDB = "servers";
        $user = "root";
        $pass = "IHaveRoot";
        if (strtolower(substr($_POST['item_name'], 0, 9)) == "garrysmod") {
            echo 'Garrysmod detected as item! Attempting to open DB<br />';
            $db = mysql_connect("localhost", $user, $pass) or die(mysql_error());
            mysql_select_db($gmodDB) or die(mysql_error());
            echo 'DB apparently opened<br />';
            if ($_POST['mc_gross'] >= 3) {
                echo 'Passed amount check, is indeed over 3 bucks<br />';
                    $existcheck = mysql_query(sprintf('SELECT *, TIME_TO_SEC(TIMEDIFF(expiredate, NOW())) as timeleft FROM assmod_rankings WHERE steam = "%s" LIMIT 1',
                    mysql_real_escape_string($_POST['custom']))) or die(mysql_error());
                if (mysql_num_rows($existcheck) == 1) {
                    echo 'Searched for steamID and found one person!<br />';
                    $data = mysql_fetch_assoc($existcheck);
                    if (($data["rank"] >= 3) && ($_POST['item_name'] == "Garrysmod Super admin")) {
                        echo 'Saved rank is superadmin or above, item ordered super admin. Setting values...<br />';
                        $days = $_POST['mc_gross'] * 6;
                        $rank = 3;
                    }

                    elseif (($data["rank"] >= 2) && ($_POST['item_name'] == "Garrysmod admin")) {
                        echo 'Saved rank is admin or above, item ordered admin. Setting values...<br />';
                        $days = $_POST['mc_gross'] * 10;
                        $rank = 2;
                    }
                }

                if (empty($days) || (empty($rank))) {
                    echo '$days or $rank not set, attemtping to set now<br />';
                    if ($_POST['item_name'] == "Garrysmod Super admin") {
                        echo 'Valid item of Garrysmod Super admin detected, setting values...<br />';
                        $days = ($_POST['mc_gross']-5) * 6;
                        $rank = 3;
                    }

                    elseif ($_POSt['item_name'] == "Garrysmod admin") {
                        echo 'Valid item of Garrysmod admin detected, setting values...<br />';
                        $days = ($_POST['mc_gross']-2) * 10;
                        $rank = 2;
                    }
                }

                if (!empty($days) && (!empty($rank))) {
                    echo 'both $days and $rank has been set. Proceeding to checkout...<br />';
                    if (!empty($existcheck) && $existcheck['timeleft'] >= 0) {
                        echo 'Admin still active on user. Adding days to existing expiration date<br />';
                        $dateadd = "DATE_ADD(expiredate, INTERVAL '" . $days . "' DAY)";
                    }

                    else {
                        echo 'Expired or no previous expiration date found, setting expiration date from today<br />';
                        $dateadd = "DATE_ADD(NOW(), INTERVAL '" . $days . "' DAY)";
                    }

                    if (mysql_num_rows($existcheck) == 0) {
                        echo 'Since user was not found, we\'re doing an insert query...<br />';
                        echo 'Running following query: '."INSERT INTO assmod_rankings VALUES(".mysql_real_escape_string($_POST['custom']).", 'Missing name', ".$rank.", NULL, ".$dateadd.", 1)<br />";
                        mysql_query("INSERT INTO assmod_rankings VALUES(".mysql_real_escape_string($_POST['custom']).", 'Missing name', ".$rank.", NULL, ".$dateadd.", 1)") or die(mysql_error());
                        echo 'Query run without incident.<br />';
                    }

                    else {
                        if ($data['statusflag'] == 2) {
                            $statusflag = 3;
                        }

                        elseif (($data['statusflag'] == 4) && ($data['rank']) <= 2) {
                            $statusflag = 1;
                        }

                        else {
                            $statusflag = $data['statusflag'];
                        }

                        if ($data['rank'] >= 4 ) {
                            $rank = $data['rank'];
                        }
                        echo 'Since user was found, we\'re doing an update query...<br />';
                        echo 'Running following query: '.'UPDATE assmod_rankings SET rank = ' . $rank . ', expiredate = ' . $dateadd . ', statusflag = ' . $statusflag . ' WHERE steam = "' . mysql_real_escape_string($_POST['custom']) . '"';
                        mysql_query('UPDATE assmod_rankings SET rank = ' . $rank . ', expiredate = ' . $dateadd . ', statusflag = ' . $statusflag . ' WHERE steam = "' . mysql_real_escape_string($_POST['custom']) . '"') or die(mysql_error());
                        echo 'Query run without incident.<br />';
                    }
                }
            }
        }

        elseif (strtolower(substr($_POST['item_name'], 0, 2)) == "zm") {
            mysql_connect("localhost", $user, $pass, $zmDB);
            if ($_POST['mc_gross'] >= 5) {
                mysql_query('UPDATE upgrades SET vip = 1 WHERE  steamid = "' . mysql_real_escape_string($_POST['custom']) . '"');
            }
        }

        else {
            echo 'No valid item detected!<br />';
        }
    }

    else {
        echo 'First check failed. Here are the values submitted: <br />';
        echo $_POST['payment_status']."<br />";
        echo $_POST['mc_gross']."<br />";
        echo 'is mc_gross numeric? '.is_numeric($_POST['mc_gross'])."<br />";
        echo 'is payment_status == Completed? '.$_POST['payment_status'] == "Completed";
    }
?>