<?php

$host="localhost";
$user="root";
$pass="pw";
$realmd="realmd";
$chardb="characters";
    if (!empty($_POST))
    {

        $connect=@mysql_connect("$host" , "$user" , "$pass") or die("Hiba,nem lehett csatlakozzni az adatbázishoz");
        mysql_select_db($realmd) or die ("Database connected error!");

        $usr         =  mysql_real_escape_string(htmlspecialchars($_POST['usr']));
        $pw          =  mysql_real_escape_string(htmlspecialchars($_POST['pw']));
        $foracc      =  mysql_real_escape_string(htmlspecialchars($_POST['foraccount']));
        $transfchar  =  mysql_real_escape_string(htmlspecialchars($_POST['transfchar']));

        $result = mysql_fetch_row(mysql_query("SELECT `sha_pass_hash` FROM `account` WHERE `username` = '".$usr."' LIMIT 0,1")) or die(mysql_error());
        if(sha1(strtoupper($usr).':'.strtoupper($pw)) == $result[0])
        {

            $sql = "SELECT `id` FROM `account` WHERE username = '".$usr."'";
            $qry = mysql_query($sql) or die(error(mysql_error()));
            $data = mysql_fetch_array($qry);

                $id = $data['id'];

            $parancs = "SELECT `id` FROM `account` WHERE `username`='".$foracc."'";
            $lekerdez = mysql_query($parancs) or die ('Érvénytelen lekérdezés:' . mysql_error());
            $sor = mysql_fetch_assoc($lekerdez);

                $foraccid = $sor['id'];

            mysql_select_db($chardb) or die (" Database connected error!");

            $keres = "SELECT `account`, `name` FROM `characters` WHERE `account` = '".$id."' AND `name` = '".$transfchar."'";
            $eredmeny = mysql_query($keres) or die('Érvénytelen lekérdezés:' . mysql_error());
            $sor = mysql_fetch_assoc($eredmeny);

                $acc_id = $sor['account'];
                $char_name = $sor['name'];

                if ($acc_id == $id)
                {
                    $update = "UPDATE `characters` SET `account` = '".$foraccid."' WHERE `account` = '".$acc_id."' AND `name` = '".$char_name."' ";
                    $vegrehajt = mysql_query($update);

                    $message="A ":$transfchar." nevű karaktert áthelyezztük a ".$foracc." nevű account-ra!";

                }
                else
                {
                    exit("Ez nem a te karaktered!");
                }
        }
        else
        {
            exit("Hibás felhasználónév vagy jelszó!");
        }
        mysql_close($connect);
    }
?>
<form method="POST" action="<?php $_SERVER['PHP_SELF']; ?>">
    <legend class="logged">Karakter transzfer</legend>
    <table cellspacing="1" cellpadding="0" border="0" width="100%">
        <tbody>
            <tr>
                <td>Accountod: <input type="text" name="usr"></td>
            </tr>
           <tr>
                <td>Jelszavad: <input type="password" name="pw"></td>
            </tr>
            <tr>
                <td>Karakter: <input type="text" name="transfchar"></td>
            </tr>
            <tr>
                <td>Melyik accountra ? <input type="text" name="foraccount"></td>
            </tr>
            <tr>
                <td align="center"><input  type="submit" value="Áthelyezés"></td>
            </tr>
        </tbody>
    </table>
</form>