<?php
show_header("Exchanged");
$DB->query("SELECT BonusPoints FROM users_info WHERE UserID={$LoggedUser['ID']}");
list($LoggedUser['BonusPoints']) = $DB->next_record();
$points=$_GET['points'];
$credit=$BonusPointsSystem[$points];
if ($credit==0) {
	error('Bad points','Bad points');
}

if ($LoggedUser['BonusPoints']<$points) {
	error('You dont have enough points.','You dont have enough points.');
} else {
	$DB->query("UPDATE users_info SET BonusPoints=BonusPoints-{$points} WHERE UserID={$LoggedUser['ID']}");
	$DB->query("UPDATE users_main SET Uploaded=Uploaded+{$credit} WHERE ID={$LoggedUser['ID']}");
	$DB->query("INSERT INTO bonus_points (id,uid,UploadBonus,RecID,PointsUsed) VALUES (NULL,{$LoggedUser['ID']},$credit,NULL,{$points})");
}
update_user_data();
?>
<div class="thin">
        <h3 id="general">Bonus Points</h3>
        <div class="box pad" style="padding:10px 10px 10px 20px;">
        You've added <strong><?php echo $credit; ?> bytes</strong> to your upload which deducted <strong><?php echo $points; ?></strong> points.
	</div>
        <!-- END General Rules -->
</div>
<?php
show_footer();
?>