yourgang.php

<?php
session_start();
class bbcode {
var $engine="";
function bbcode()
{
require "bbcode_engine.php";
$this->engine= new bbcode_engine;
$this->engine->cust_tag("/</","&lt;");
$this->engine->cust_tag("/>/","&gt;");
$this->engine->cust_tag("/\n/","&nbrlb;");
$this->engine->simple_bbcode_tag("b");
$this->engine->simple_bbcode_tag("i");
$this->engine->simple_bbcode_tag("u");
$this->engine->simple_bbcode_tag("s");
$this->engine->simple_bbcode_tag("sub");
$this->engine->simple_bbcode_tag("sup");
$this->engine->simple_bbcode_tag("big");
$this->engine->simple_bbcode_tag("small");
$this->engine->adv_bbcode_tag("list","ul");
$this->engine->adv_bbcode_tag("olist","ol");
$this->engine->adv_bbcode_tag("item","li");
$this->engine->adv_option_tag("font","font","family");
$this->engine->adv_option_tag("size","font","size");
$this->engine->adv_option_tag("url","a","href");
$this->engine->adv_option_tag("color","font","color");
$this->engine->adv_option_tag("style","span","style");
$this->engine->simp_option_notext("img","src");
$this->engine->simp_bbcode_att("img","src");
$this->engine->cust_tag("/\(c\)/","&copy;");
$this->engine->cust_tag("/\(tm\)/","?");
$this->engine->cust_tag("/\(r\)/","&reg;");
$this->engine->adv_option_tag_em("email","a","href");
$this->engine->adv_bbcode_att_em("email","a","href");
$this->engine->cust_tag("/\[left\](.+?)\[\/left\]/","<div align='left'>\\1</div>");
$this->engine->cust_tag("/\[center\](.+?)\[\/center\]/","<div align='center'>\\1</div>");
$this->engine->cust_tag("/\[right\](.+?)\[\/right\]/","<div align='right'>\\1</div>");
$this->engine->cust_tag("/\[quote=(.+?)\](.+?)\[\/quote\]/","<div class='quotetop'>QUOTE(\\1)</div><div class='quotemain'>\\2</div>");
$this->engine->cust_tag("/\[quote\](.+?)\[\/quote\]/","<div class='quotetop'>QUOTE</div><div class='quotemain'>\\1</div>");
$this->engine->cust_tag("/\[code\](.+?)\[\/code\]/","<div class='codetop'>CODE</div><div class='codemain'><code>\\1</code></div>");
$this->engine->cust_tag("/&nbrlb;/","
\n");
}
function bbcode_parse($html)
{
return $this->engine->parse_bbcode($html);
}

}
function strip_html_tags($text)
{
return preg_replace("/<(.+?)>/is","", $text);
}
include "globals.php";
$bbc = new bbcode;
if(!$ir['gang'])
{
print "You're not in a gang.<br><br><a href='gangcentral.php'><b>Gang List</b></a>";
}
else
{
$gq=$db->query("SELECT g.*,oc.* FROM gangs g LEFT JOIN orgcrimes oc ON g.gangCRIME=oc.ocID WHERE g.gangID={$ir['gang']}");
$gangdata=$db->fetch_row($gq);
echo "
	<h3>Your Gang - {$gangdata['gangNAME']}</h3>
   	";
    if($gangdata['gangPIC'])
    {
    echo "<hr width=65%/><img src='gangpics/{$gangdata['gangPIC']}' alt='Gang Picture' width='468' height='60' /><hr width=65%/><br /><hr width=85%/>";
    }
    else
    {
    echo "<hr width=65%/><img src='default.jpg' alt='No Gang Picture' width='468' height='60' /><hr width=65%/><br /><hr width=85%/>";
    }
$wq=$db->query("SELECT * FROM gangwars where warDECLARER={$ir['gang']} or warDECLARED={$ir['gang']}");
if($db->num_rows($wq) > 0)
{
print "<h3><a href='yourgang.php?action=warview'><font color=red>Your gang is currently in ".$db->num_rows($wq)." war(s).</font></a></h3>";
}
switch($_GET['action'])
{
case "idx":
gang_index();
break;

case "summary":
gang_summary();
break;

case "members":
gang_memberlist();
break;

case "kick":
gang_staff_kick();
break;

case "forums":
gang_forums();
break;

case "donate":
gang_donate();
break;

case "donate2":
gang_donate2();
break;

case "crimevents":
cr_events();
break;

case "warview":
gang_warview();
break;


case "staff":
gang_staff();
break;

case "leave":
gang_leave();
break;

case "atklogs":
gang_atklogs();
break;

case "crimes":
gang_crimes();
break;

case "crimes2":
gang_startcrimes();
break;

case "crew":
gang_recruit();
break;

case "allylist":
allies_list_view();
break;

default:
gang_index();
break;
}
}
function gang_index()
{
    global $db, $ir, $c, $userid, $gangdata;
    echo "
    <table cellspacing=1 class='table' width=85%>
    		<tr><th colspan=2>Actions</th></tr><tr>
    			<td><a href='yourgang.php?action=summary'>Summary</a></td>
    			<td><a href='yourgang.php?action=donate'>Donate</a></td>
    		</tr>
    		<tr>
    			<td><a href='yourgang.php?action=members'>Members</a></td>
    			<td><a href='yourgang.php?action=crimes'>Crimes</a></td>
    		</tr>
    		<tr>
    			<td><a href='yourgang.php?action=forums'>Forums</a></td>
    			<td><a href='yourgang.php?action=leave'>Leave</a></td>
    		</tr>
			<tr>
    			<td><a href='yourgang.php?action=crimes2'>Start Crime</a></td>
    			<td><a href='yourgang.php?action=crew'>Invite Member</a></td>
    		</tr>
    		<tr>
    			<td><a href='yourgang.php?action=atklogs'>Attack Logs</a></td>
    			<td>
       ";
    if ($gangdata['gangPRESIDENT'] == $userid
            || $gangdata['gangVICEPRES'] == $userid)
    {
        echo "<a href='yourgang.php?action=staff&amp;act2=idx'>Staff Room</a>";
    }
    else
    {
        echo "&nbsp;";
    }
    echo "
				</td>
			</tr>
	</td></tr></table><br />

<table cellspacing=1 class='table'><tr style='background:gray;'><td align=center class='h'>Gang Announcement</td></tr>
<tr><td bgcolor='#DDDDDD'>{$gangdata['gangAMENT']}</td></tr></table><br />
<b>Last 10 Gang Events</b><br />";
$q=$db->query("SELECT * FROM gangevents WHERE gevGANG={$ir['gang']} ORDER BY gevTIME DESC LIMIT 10");
print "<table width=75% cellspacing=1 class='table'><tr style='background:gray;'><th>Time</th><th>Event</th></tr>";
while($r=$db->fetch_row($q))
{
print "<tr><td>".date('F j Y, g:i:s a',$r['gevTIME'])."</td><td>{$r['gevTEXT']}</td></tr>";
}
print "</table>";
}
function gang_startcrimes()
{
global $db,$ir,$c,$userid,$gangdata;
$_POST['crime'] = abs((int) $_POST['crime']);
if($_POST['crime'])
{
if($gangdata['gangCRIME'] != 0)
{
print "Your gang is already doing a crime!<br><a href='yourgang.php'>Go Back</a>";
}

else
{
$randtime= rand(1,5);

$db->query("UPDATE gangs SET gangCRIME={$_POST['crime']},gangCHOURS=$randtime WHERE gangID={$ir['gang']}");
print "You have started a Gang Crime.<br> It will take $randtime hours.";

}
}
else
{
print "<table class='table'><tr><th>Gang Crimes</th></tr><tr><td>
<form action='yourgang.php?action=crimes2' method='post'>Choose a crime that your gang should commit.

<select name='crime' type='dropdown'>";

$cnt=$db->query("SELECT username FROM users WHERE gang={$gangdata['gangID']}");
$membs=$db->num_rows($cnt);
$q=$db->query("SELECT * FROM orgcrimes WHERE ocUSERS <= $membs");
while($r=$db->fetch_row($q))
{
print "<option value='{$r['ocID']}'>{$r['ocNAME']} ({$r['ocUSERS']} members needed)</option>";
}
print "</select>

<center><input type='submit' value='Commit' /></form></td></tr></table>";
}
}
function gang_recruit()
{
global $db,$ir,$c,$userid,$gangdata;
if(isset($_POST['subm']))
{
$q=$db->query("SELECT * FROM users WHERE userid={$_POST['rec']} AND gang={$ir['gang']}");
if($db->num_rows($q) > 1) { die("Invalid user or the user is already in your gang."); }
$memb=$db->fetch_row($q);
$db->query("INSERT INTO gangevents VALUES ('',{$gangdata['gangID']},unix_timestamp(),\"A recruitment message to ID {$_POST['rec']} was sent\");");
print "A recruitment message was sent to ID: {$_POST['rec']}";
event_add($_POST['rec'],"You have been invited to join {$gangdata['gangNAME']} <br>Go send a Application to {$gangdata['gangNAME']} ",$c);
}
else
{
print "<form action='yourgang.php?action=crew' method='post'>
Enter the ID of the recruitment message to go to.

<input type='hidden' name='subm' value='submit' />
ID: <input type='text' name='rec' value='' maxlength='7' width='7' />

<input type='submit' value='Change' /></form>";
}
}
function allies_list_view()
{
global $ir,$c,$userid,$gangdata;
$q=mysql_query("SELECT * FROM gangaffliates WHERE ga_accept=1 AND (ga_to={$gangdata['gangID']} OR ga_from={$gangdata['gangID']})",$c);
if(mysql_num_rows($q) == 0)
{
print "<b>Your gang doesn't currently have any allies.</b>";
} else {
print "<table width=90% border=0><tr><th>Gang Name</th><th>Respect</th><th>War Status</th><th>Allied for</th></tr>
";
while($r=mysql_fetch_array($q))
{
if($gangdata['gangID'] == $r['ga_to']) { $them=$r['ga_from']; } else  { $them=$r['ga_to']; }
$q2=mysql_query("SELECT * FROM gangs WHERE gangID=".$them,$c);
$wq=mysql_query("SELECT * FROM gangwars where warDECLARER={$them} or warDECLARED={$them}",$c);
$tr=mysql_fetch_array($q2);
print "<tr><td><a href='gangs.php?action=view&ID=$them'>{$tr['gangNAME']}</a></td><td>{$tr['gangRESPECT']}</td><td>";
if(mysql_num_rows($wq) > 0)
{
print "<font color=red>They are at war!</font>";
} else {
print "They are not in war";
}
print "</td><td>
{$r['ga_days']} days</td></tr>";
}
print "</table>";
}
}
function gang_summary()
{
global $db,$ir,$c,$userid,$gangdata;
print "<b>General</b><br />";
$pq=$db->query("SELECT * FROM users WHERE userid={$gangdata['gangPRESIDENT']}");
$ldr=$db->fetch_row($pq);
$vpq=$db->query("SELECT * FROM users WHERE userid={$gangdata['gangVICEPRES']}");
$coldr=$db->fetch_row($vpq);
print "Gang Boss: <a href='viewuser.php?u={$ldr['userid']}'>{$ldr['username']}</a><br />
Gang Under-Boss: <a href='viewuser.php?u={$coldr['userid']}'>{$coldr['username']}</a><br />";
$cnt=$db->query("SELECT username FROM users WHERE gang={$gangdata['gangID']}");
print "Gang Members: ".$db->num_rows($cnt)."<br />
Gang Size: {$gangdata['gangCAPACITY']}<br />
Gang Respect: {$gangdata['gangRESPECT']}<hr />
<b>Financial:</b><br />
Money in vault: \${$gangdata['gangMONEY']}<br />
Points in vault: {$gangdata['gangCRYSTALS']}";
}
function gang_memberlist() {
	global $db,$ir,$c,$userid,$gangdata;
   echo "
<table cellspacing=1 class='table'>
		<tr style='background: gray;'>
	<th>User</th>
	<th>Level</th>
	<th>Days In Gang</th>
	<th>&nbsp;</th>
		</tr>
   ";
	$q = $db->query("SELECT * FROM `users` WHERE `gang` = {$gangdata['gangID']} ORDER BY `daysingang` DESC, `level` DESC");
     while ( $r = $db->fetch_row($q) ) {
	 /* See if their username is an image. - sniko */
$get = $db->query("SELECT `imagepath` FROM `user_imageusername` WHERE `userid`={$r['userid']}");
if( $db->num_rows($get) ) {
   $r_image = $db->fetch_row($get);
   $txt_username = $r['username'];
   $r['username'] = "<img src=\"images/username/{$r_image['imagepath']}\" alt=\"{$txt_username}\" width='98px' height='28' />";
}
   echo "
		<tr>
	<td><a href='viewuser.php?u={$r['userid']}'>{$r['username']}</a></td>
	<td>{$r['level']}</td>
	<td>{$r['daysingang']}</td>
	<td>
   ";
     if ( $gangdata['gangPRESIDENT'] == $userid OR $gangdata['gangVICEPRES'] == $userid ) {
   echo "<a href='yourgang.php?action=kick&ID={$r['userid']}'>Kick</a> ";
     } else {
   echo "&nbsp;";
     }
   echo "
	</td>
		</tr>
   ";
}
   echo "
</table>
<br />
&gt; <a href='yourgang.php'>Go Back</a>
   ";
}

function gang_staff_kick() {
	global $db,$ir,$c,$userid,$gangdata;
       if ( $gangdata['gangPRESIDENT'] == $userid OR $gangdata['gangVICEPRES'] == $userid ) {
		$_GET['ID'] = ( isset($_GET['ID'])&&is_numeric($_GET['ID']) )?abs(intval($_GET['ID'])):'';
		$who = $_GET['ID'];
      if ( $who == $gangdata['gangPRESIDENT'] ) {
echo "The gang president cannot be kicked.";
      } else if ( $who == $userid ) {
echo "You cannot kick yourself, if you wish to leave transfer your powers to someone else and then leave like normal.";
      } else {
	$q = $db->query("SELECT * FROM `users` WHERE `userid` = $who AND `gang` = {$gangdata['gangID']}");
     if ( $db->num_rows($q) ) {
	$kdata = $db->fetch_row($q);
	$db->query("UPDATE `users` SET `gang` = 0,`daysingang` = 0 WHERE `userid` = $who");
   echo "<b>{$kdata['username']}</b> was kicked from the Gang.";
		event_add($who,"You were kicked out of {$gangdata['gangNAME']} by <a href='viewuser.php?u=$userid'>{$ir['username']}</a>",$c);
	$db->query("INSERT INTO `gangevents` VALUES('',{$gangdata['gangID']},unix_timestamp(),'<a href=''viewuser.php?u=$who''>{$kdata['username']}</a> was kicked out of the Gang');");
     } else {
   echo "Trying to kick nonexistant user";
     }
      }
       } else {
   echo "You do not have permission to perform this action.";
       }
}
function gang_forums() {
	global $db,$ir,$c,$userid,$gangdata;
	$q = $db->query("SELECT * FROM `forum_forums` WHERE `ff_auth` = 'gang' AND `ff_owner` = {$ir['gang']}");
       if ( $db->num_rows($q) == 0 ) {
		$gangdata['gangNAME'] = $db->escape($gangdata['gangNAME']);
	$db->query("INSERT INTO `forum_forums` VALUES('', '{$gangdata['gangNAME']}', '', 0, 0, 0, 0, 'N/A', 0, 'N/A', 'gang', {$ir['gang']})");
		$r['ff_id'] = $db->insert_id();
       } else {
$r = $db->fetch_row($q);
     if ( $r['ff_name'] != $gangdata['gangNAME'] ) {
		$gangdata['gangNAME'] = $db->escape($gangdata['gangNAME']);
	$db->query("UPDATE `forum_forums` SET `ff_name` = '{$gangdata['gangNAME']}' WHERE `ff_id` = {$r['ff_id']}");
     }
       }
		header("Location: forums.php?viewforum={$r['ff_id']}");
	exit;
}
function gang_donate() {
	global $db,$ir,$c,$userid,$gangdata;
   echo "
<b>Enter the amounts you wish to donate.</b>
<br />
You have \${$ir['money']} money and {$ir['crystals']} crystals.
<br />
<form action='yourgang.php?action=donate2' method='post'>
<table height=300  cellspacing=1 class='table'>
		<tr>
	<td><b>Money:</b><br /><input type='text' name='money' value='0'/></td>
	<td><b>Crystals:</b><br /><input type='text' name='crystals' value='0' /></td>
		</tr>
		<tr>
	<td colspan=2 align=center><input type='submit' value='Donate' /></td>
		</tr>
</table>
</form>
   ";
}
function gang_donate2() {
	global $db,$ir,$c,$userid,$gangdata,$h;
		$_POST['money'] = ( isset($_POST['money'])&&is_numeric($_POST['money']) )?abs(intval($_POST['money'])):0;
		$_POST['crystals'] = ( isset($_POST['crystals'])&&is_numeric($_POST['crystals']) )?abs(intval($_POST['crystals'])):0;
       if ( empty($_POST['money']) && empty($_POST['crystals']) ) {
   echo 'Invalid ammout, please go back and try again.<br />&gt; <a href="yourgang.php?action=donate">Back</a>';
   die($h->endpage());
       }
     if($_POST['money'] > $ir['money']) {
   echo 'You can\'t donate more money than you have, please go back and try again.<br />&gt; <a href="yourgang.php?action=donate">Back</a>';
     } else if($_POST['crystals'] > $ir['crystals']) {
   echo 'You can\'t donate more crystals than you have, please go back and try again.<br />&gt; <a href="yourgang.php?action=donate">Back</a>';
     } else {
	$db->query("UPDATE `users` SET `money` = `money` - {$_POST['money']},`crystals` = `crystals` - {$_POST['crystals']} WHERE `userid` = $userid");
	$db->query("UPDATE `gangs` SET `gangMONEY` = `gangMONEY` + {$_POST['money']},`gangCRYSTALS` = `gangCRYSTALS` + {$_POST['crystals']} WHERE `gangID` = {$gangdata['gangID']}");
	$db->query("INSERT INTO `gangevents` VALUES('',{$gangdata['gangID']},unix_timestamp(),\"userid [{$ir['userid']}] Donated \${$_POST['money']} and/or {$_POST['crystals']} Points into the Gang.\");");
   echo "You donated \${$_POST['money']} and/or {$_POST['crystals']} crystals to the Gang.<br />&gt; <a href='index.php'>Go Home</a>";
     }
}
function cr_events()
{
global $db,$ir,$c,$userid,$gangdata;
print "<table cellspacing=1 class='table' width=50%><tr><td  style='background-color:#000000;' width=70%><a href='yourgang.php?action=summary'>>Summary</a></td><td  style='background-color:#000000;' width =50%><a href='yourgang.php?action=donate'>Donate<</a></td></tr><tr><td  style='background-color:#000000;'><a href='yourgang.php?action=members'>>Members</a></td><td  style='background-color:#000000;' width =50%><a href='yourgang.php?action=crimes'>Crimes<</a></td></tr><tr><td  style='background-color:#000000;'><a href='yourgang.php?action=forums'>>Forums</a></td><td  style='background-color:#000000;' width =50%><a href='yourgang.php?action=leave'>Leave<</a></td></tr>
<tr><td  style='background-color:#000000;'><a href='yourgang.php?action=atklogs'>>Attack Logs</a></td><td  style='background-color:#000000;'><a href='yourgang.php?action=crimevents'>Crime Logs<</a></td><td  style='background-color:#000000;'></td>";

if($gangdata['gangPRESIDENT'] == $userid || $gangdata['gangVICEPRES'] == $userid )
{
print "<tr><td  style='background-color:#000000;'><a href='yourgang.php?action=staff&act2=idx'>>Staff Room</a></td><td  style='background-color:#000000;' width =50%><a href='yourgang.php?action=staff&act2=crimes'>Organise a crime<</a>
";
}
else
{
print "";
}
print "</td></tr></table>
";
print "
<table cellspacing=1 class='table' width=75%><tr style='background:gray;'><td align=center class='h'>Gang Crime Failed Events</td></tr>
<tr></td></tr></table>
";
global $db,$ir,$c,$userid,$gangdata;
$q=$db->query("SELECT * FROM gangcrimefailevents WHERE gevGANG={$ir['gang']} ORDER BY gevTIME DESC LIMIT 10");
print "<table width=75% cellspacing=1 class='table'><tr style='background:gray;'><th>Time</th><th>Event</th></tr>";
while($r=$db->fetch_row($q))
{
print "<tr><td>".date('F j Y, g:i:s a',$r['gevTIME'])."</td><td>{$r['gevTEXT']}</td></tr>";
}
print "</table>
";
$q=$db->query("SELECT * FROM gangcrimesucevents WHERE gevGANG={$ir['gang']} ORDER BY gevTIME DESC LIMIT 10");
print "
<table cellspacing=1 class='table' width=75%><tr style='background:gray;'><td align=center class='h'>Gang Crime Success Events</td></tr>
<tr></td></tr></table>
";
//$q=$db->query("SELECT * FROM gangcrimesucevents WHERE gevGANG={$ir['gang']} ORDER BY gevTIME DESC LIMIT 10");
print "<table width=75% cellspacing=1 class='table'><tr style='background:gray;'><th>Time</th><th>Event</th></tr>";
while($r=$db->fetch_row($q))
{
print "<tr><td>".date('F j Y, g:i:s a',$r['gevTIME'])."</td><td>{$r['gevTEXT']}</td></tr>";
}
print "</table>";
}
function gang_staff_recruit()
{
global $db,$ir,$c,$userid,$gangdata;
if(isset($_POST['subm']))
{
$q=$db->query("SELECT * FROM users WHERE userid={$_POST['rec']} AND gang={$ir['gang']}");
if($db->num_rows($q) > 1) { die("Invalid user or the user is already in your gang."); }
$memb=$db->fetch_row($q);
$db->query("INSERT INTO gangevents VALUES ('',{$gangdata['gangID']},unix_timestamp(),\"The VP/ President has sent a recruitment message to ID {$_POST['rec']}\");");
print "A recruitment message was sent to ID: {$_POST['rec']}";
event_add($_POST['rec'],"You have been invited to join {$gangdata['gangNAME']} <br>Go send a Application to {$gangdata['gangNAME']} ",$c);
}
else
{
print "<form action='yourgang.php?action=staff&act2=recruit' method='post'>
Enter the ID of the recruitment message to go to.

<input type='hidden' name='subm' value='submit' />
ID: <input type='text' name='rec' value='' maxlength='7' width='7' />

<input type='submit' value='Change' /></form>";
}
}
function gang_staff() {
	global $db,$ir,$c,$userid,$gangdata,$h;
          if ( $gangdata['gangPRESIDENT'] == $userid OR $gangdata['gangVICEPRES'] == $userid ) {
	switch($_GET['act2']) {
		case "idx":
gang_staff_idx();
break;

case "apps":
gang_staff_apps();
break;

case "vault":
gang_staff_vault();
break;

case "vicepres":
gang_staff_vicepres();
break;
case "pres":
gang_staff_pres();
break;

case "upgrade":
gang_staff_upgrades();
break;

case "declare":
gang_staff_wardeclare();
break;

case "surrender":
gang_staff_surrender();
break;

case "viewsurrenders":
gang_staff_viewsurrenders();
break;

case "crimes":
gang_staff_orgcrimes();
break;

case "recruit":
gang_staff_recruit();
break;

case "massmailer":
gang_staff_massmailer();
break;

case "outsidemailer":
gang_staff_pvmassmailer();
break;

case "desc":
gang_staff_desc();
break;

case "wmsg":
gang_staff_wmsg();
break;

case "ament":
gang_staff_ament();
break;

case "name":
gang_staff_name();
break;

case "tag":
gang_staff_tag();
break;

case "pic":
gang_staff_pic();
break;

case "alliances":
alliance_manager();
break;

case "masspayment":
gang_staff_masspayment();
break;

case "killgang":
gang_staff_killgang();
break;
default: gang_staff_idx();
break;
	}
          } else {
   echo 'Are you lost?.<br />&gt; <a href="index.php">Go Home</a>';
   die($h->endpage());
          }
}
function gang_staff_idx() {
	global $db,$ir,$c,$userid,$gangdata;
   echo "
<hr /><h3><b>Under-Boss Links</b></h3><hr />
<table width=75% cellspacing=0 class='table2' border='5'>
<th>
<a href='yourgang.php?action=staff&act2=vault'>Vault Management</a>
</th>
<th>
<a href='yourgang.php?action=staff&act2=ament'>Gang Announcement</a>
</th>
<th>
<a href='yourgang.php?action=staff&act2=apps'>Application Management</a>
<th><a href='yourgang.php?action=staff&act2=vicepres'>Change Vice-President</a></th>
<th>
<a href='yourgang.php?action=staff&act2=upgrade'>Upgrade Gang</a></th>
<th>
<a href='yourgang.php?action=staff&act2=crimes'>Organised Crimes</a></th>
<th>
<a href='yourgang.php?action=staff&act2=masspayment'>Mass Payment</a></th>
<th><a href='yourgang.php?action=staff&act2=recruit'>Invite Member</a></th>
<th><a href='yourgang.php'>Go Back</a></th></table><hr />
   ";
    if ( $gangdata['gangPRESIDENT'] == $userid ) {
   echo "
   <hr /><h3><b>Leader Links</b></h3><hr />
<table width=75% cellspacing=0 class='table2' border='5'><hr /><th>
<a href='yourgang.php?action=staff&act2=pres'>Change President</a>
</th>
<th><a href='yourgang.php?action=staff&act2=declare'>Declare War</a></th>
<th><a href='yourgang.php?action=staff&act2=surrender'>Surrender</a></th>
<th><a href='yourgang.php?action=staff&act2=viewsurrenders'>View or Accept Surrenders</a></th>
<th><a href='yourgang.php?action=staff&act2=massmailer'>Mass Mail Gang</a></th>
<th><a href='yourgang.php?action=staff&act2=name'>Change Gang Name</a></th>
<th><a href='yourgang.php?action=staff&act2=desc'>Change Gang Desc.</a></th>
<th><a href='yourgang.php?action=staff&act2=tag'>Change Gang Tag</a></th>
<th><a href='yourgang.php?action=staff&act2=pic'>Change Gang Picture</a></th>
<th><a href='yourgang.php?action=staff&act2=wmsg'>Welcome Message</a></th>
<th><a href='yourgang.php?action=staff&act2=outsidemailer'>Mail Other Gang Leaders</a></th>
<th><a href='yourgang.php?action=staff&act2=alliances'>Alliance Manager</a></th>
<th><a href='yourgang.php?action=staff&act2=killgang'>Delete Gang Tag</a></th>
<th><a href='yourgang.php?action=staff&act2=recruit'>Invite Member</a></th>
<th><a href='yourgang.php'>Go Back</a></th></table><hr />
   ";
     }
}

function gang_staff_apps()
{
global $db,$ir,$c,$userid,$gangdata,$h;
$_GET['app'] = abs((int) $_GET['app']);
if($_GET['app'])
{
$aq=$db->query("SELECT a.*,u.* FROM applications a LEFT JOIN users u ON a.appUSER=u.userid WHERE a.appID={$_GET['app']} AND a.appGANG={$gangdata['gangID']}");
if ($db->num_rows($aq))
{
$appdata=$db->fetch_row($aq);
if($_GET['what'] == 'decline')
{
$db->query("DELETE FROM applications WHERE appID={$_GET['app']}");
event_add($appdata['appUSER'],"Your application to join the {$gangdata['gangNAME']} gang was declined",$c);
$db->query("INSERT INTO gangevents VALUES('',{$gangdata['gangID']},unix_timestamp(),\"{$data['username']} was Declined from the Gang.\")");
print "Declined {$data['username']} Gang Application.";
}
else
{
$cnt=$db->query("SELECT username FROM users WHERE gang={$gangdata['gangID']}");
if($gangdata['gangCAPACITY'] == $db->num_rows($cnt))
{
print "Your gang is full, you must upgrade it to hold more before you can accept another user!";
$h->endpage();
exit;
}
else if ($appdata['gang'] != 0)
{
print "That person is already in a gang.";
$h->endpage();
exit;
}
$db->query("DELETE FROM applications WHERE appID={$_GET['app']}");
event_add($appdata['appUSER'],"{$gangdata['gangWMSG']}",$c);
$db->query("INSERT INTO gangevents VALUES ('',{$gangdata['gangID']},unix_timestamp(),\"A new gang Application was Accepted.\");");
$db->query("UPDATE users SET gang={$gangdata['gangID']},daysingang=0 WHERE userid={$appdata['userid']}");
print "You have accepted the application by {$appdata['username']}.<br />
<a href='yourgang.php?action=staff&act2=apps'>&gt; Back</a>";
}
}
}
else
{
print "<b>Applications</b><br />
<table width=85% cellspacing=1 class='table'><tr style='background:gray;'><th>User</th><th>Level</th><th>Money</th><th>Reason</th>
<th>&nbsp;</th></tr>";
$q=$db->query("SELECT a.*,u.* FROM applications a LEFT JOIN users u ON a.appUSER=u.userid WHERE a.appGANG={$gangdata['gangID']}");
while($r=$db->fetch_row($q))
{
print "<tr><td><a href='viewuser.php?u={$r['userid']}'>{$r['username']} [{$r['userid']}]</a></td><td>{$r['level']}</td><td>\${$r['money']}</td>
<td>{$r['appTEXT']}</td><td><a href='yourgang.php?action=staff&act2=apps&app={$r['appID']}&what=accept'>
Accept</a> | <a href='yourgang.php?action=staff&act2=apps&app={$r['appID']}&what=decline'>
Decline</a></td></tr>";
}
print "</table>";
}
}

function gang_staff_vault() {
	global $db,$ir,$c,$userid,$gangdata;
$_POST['who'] = abs((int) $_POST['who']);
       if ( $_POST['who'] ) {
$_POST['crystals']=abs($_POST['crystals']);
$_POST['money']=abs($_POST['money']);
     if($_POST['crystals'] > $gangdata['gangCRYSTALS']) {
echo "The vault does not have that many crystals!";
     } else if($_POST['money'] > $gangdata['gangMONEY']) {
echo "The vault does not have that much money!";
     } else if ( empty($_POST['money']) OR !empty($_POST['crystals']) ) {
   echo "You cannot give 0 away.";
     } else {
$who=(int) $_POST['who'];
$md=$db->query("SELECT * FROM users WHERE userid=$who");
$data=$db->fetch_row($md);
$money=(int) $_POST['money'];
$crys=(int) $_POST['crystals'];
$db->query("UPDATE users SET money=money+$money,crystals=crystals+$crys WHERE userid=$who");
$db->query("UPDATE gangs SET gangMONEY=gangMONEY-$money,gangCRYSTALS=gangCRYSTALS-$crys WHERE gangID={$gangdata['gangID']}");
event_add($who,"You were given \$$money and/or $crys crystals from your Gang.",$c);
$db->query("INSERT INTO gangevents VALUES('',{$gangdata['gangID']},unix_timestamp(),\"<a href='viewuser.php?u=$who'>{$data['username']}</a> was given \$$money and/or $crys crystals from the Gang.\")");
echo "<a href='viewuser.php?u=$who'>{$data['username']}</a> was given \$$money and/or $crys crystals from the Gang.";
     }
       } else {
echo "The vault has \${$gangdata['gangMONEY']} and {$gangdata['gangCRYSTALS']} crystals.<br />
<form action='yourgang.php?action=staff&act2=vault' method='post'>
Give \$<input type='text' name='money' /> and <input type='text' name='crystals' /> crystals<br />
To: <select name='who' type='dropdown'>";
$q=$db->query("SELECT userid,username FROM users WHERE gang={$gangdata['gangID']}");
     while($r=$db->fetch_row($q)) {
echo "\n<option value='{$r['userid']}'>{$r['username']}</option>";
     }
echo "</select><br />
<input type='submit' value='Give' /></form>";
       }
}
function gang_staff_vicepres()
{
global $db,$ir,$c,$userid,$gangdata;
if(isset($_POST['subm']))
{
  $_POST['vp'] = abs((int) $_POST['vp']);
$q=$db->query("SELECT * FROM users WHERE userid={$_POST['vp']} AND gang={$ir['gang']}");
if($db->num_rows($q) < 1) { die("Invalid user or user not in your gang."); }
$memb=$db->fetch_row($q);
$db->query("UPDATE gangs SET gangVICEPRES={$_POST['vp']} WHERE gangID={$gangdata['gangID']}");
event_add($memb['userid'],"You were transferred vice-presidency of {$gangdata['gangNAME']}.",$c);
echo "Vice-Presidency was transferred to {$memb['username']}";
}
else
{
echo "<form action='yourgang.php?action=staff&act2=vicepres' method='post'>
Enter the ID of the new vice-president.<br />
<input type='hidden' name='subm' value='submit' />
ID: <input type='text' name='vp' value='{$gangdata['gangVICEPRES']}' maxlength='7' width='7' /><br />
<input type='submit' value='Change' /></form>";
}
}
function gang_staff_wardeclare()
{
global $db,$ir,$c,$userid,$gangdata;
if(isset($_POST['subm']))
{
$_POST['gang'] = abs((int) $_POST['gang']);
$db->query("INSERT INTO gangwars VALUES('',{$ir['gang']},{$_POST['gang']},unix_timestamp())");
$ggq=$db->query("SELECT * FROM gangs WHERE gangID={$_POST['gang']}");
$them=$db->fetch_row($ggq);
$event=str_replace("'","''","<a href='gangs.php?action=view&ID={$ir['gang']}'>{$gangdata['gangNAME']}</a> declared war on <a href='gangs.php?action=view&ID={$_POST['gang']}'>{$them['gangNAME']}</a>");
$db->query("INSERT INTO gangevents VALUES('',{$ir['gang']},unix_timestamp(),'$event') , ('',{$_POST['gang']},unix_timestamp(),'$event')");
echo "You have declared war!";
}
else
{
echo "<form action='yourgang.php?action=staff&act2=declare' method='post'>
Choose who to declare war on.<br />
<input type='hidden' name='subm' value='submit' />
Gang: <select name='gang' type='dropdown'>";
$q=$db->query("SELECT * FROM gangs WHERE gangID != {$ir['gang']}");
while($r=$db->fetch_row($q))
{
echo "<option value='{$r['gangID']}'>{$r['gangNAME']}</option>\n";
}
echo "</select><br />
<input type='submit' value='Declare' /></form>";
}
}
function gang_staff_surrender()
{
global $db,$ir,$c,$userid,$gangdata;
if(!isset($_POST['subm']))
{
echo "<form action='yourgang.php?action=staff&act2=surrender' method='post'>
Choose who to surrender to.<br />
<input type='hidden' name='subm' value='submit' />
Gang: <select name='war' type='dropdown'>";
$wq=$db->query("SELECT * FROM gangwars where warDECLARER={$ir['gang']} or warDECLARED={$ir['gang']}");

while($r=$db->fetch_row($wq))
{
if($gangdata['gangID'] == $r['warDECLARER']) { $w="You";$f="warDECLARED"; } else { $w="Them";$f="warDECLARER"; }
$d=date('F j, Y, g:i:s a',$r['warTIME']);
$ggq=$db->query("SELECT * FROM gangs WHERE gangID=".$r[$f]);
$them=$db->fetch_row($ggq);
echo "<option value='{$r['warID']}'>{$them['gangNAME']}</option>";
}
echo "</select><br />
Message: <input type='text' name='msg' /><br />
<input type='submit' value='Surrender' /></form>";
}
else
{
$_POST['war'] = abs((int) $_POST['war']);
$wq=$db->query("SELECT * FROM gangwars where warID={$_POST['war']}");
$r=$db->fetch_row($wq);
if($gangdata['gangID'] == $r['warDECLARER']) { $w="You";$f="warDECLARED"; } else { $w="Them";$f="warDECLARER"; }
$db->query("INSERT INTO surrenders VALUES('',{$_POST['war']},{$ir['gang']},".$r[$f].",'{$_POST['msg']}')");
$ggq=$db->query("SELECT * FROM gangs WHERE gangID=".$r[$f]);
$them=$db->fetch_row($ggq);
$event=str_replace("'","''","<a href='gangs.php?action=view&ID={$ir['gang']}'>{$gangdata['gangNAME']}</a> have asked to surrender the war against <a href='gangs.php?action=view&ID={$them['gangID']}'>{$them['gangNAME']}</a>");
$db->query("INSERT INTO gangevents VALUES('',{$ir['gang']},unix_timestamp(),'$event') , ('',".$r[$f].",unix_timestamp(),'$event')");
echo "You have asked to surrender.";
}
}
function gang_staff_viewsurrenders()
{
global $db,$ir,$c,$userid,$gangdata;
if(!isset($_POST['subm']))
{
echo "<form action='yourgang.php?action=staff&act2=viewsurrenders' method='post'>
Choose who to accept the surrender from.<br />
<input type='hidden' name='subm' value='submit' />
Gang: <select name='sur' type='dropdown'>";
$wq=$db->query("SELECT s.*,w.* FROM surrenders s LEFT JOIN gangwars w ON s.surWAR=w.warID WHERE surTO={$ir['gang']}");

while($r=$db->fetch_row($wq))
{
if($gangdata['gangID'] == $r['warDECLARER']) { $w="You";$f="warDECLARED"; } else { $w="Them";$f="warDECLARER"; }
$ggq=$db->query("SELECT * FROM gangs WHERE gangID=".$r[$f]);
$them=$db->fetch_row($ggq);
echo "<option value='{$r['surID']}'>War vs. {$them['gangNAME']} (Msg: {$r['surMSG']})</option>";
}
echo "</select><br /><input type='submit' value='Accept Surrender' /></form>";
}
else
{
$_POST['sur'] = abs((int) $_POST['sur']);
$q=$db->query("SELECT surWAR FROM surrenders WHERE surID={$_POST['sur']}");
list($_POST['war']) = $db->fetch_row($q);
$wq=$db->query("SELECT * FROM gangwars where warID={$_POST['war']}");
$r=$db->fetch_row($wq);
if($gangdata['gangID'] == $r['warDECLARER']) { $w="You";$f="warDECLARED"; } else { $w="Them";$f="warDECLARER"; }
$db->query("DELETE FROM surrenders WHERE surID={$_POST['sur']}");
$db->query("DELETE FROM gangwars WHERE warID={$_POST['war']}");
$ggq=$db->query("SELECT * FROM gangs WHERE gangID=".$r[$f]);
$them=$db->fetch_row($ggq);
$event=str_replace("'","''","<a href='gangs.php?action=view&ID={$ir['gang']}'>{$gangdata['gangNAME']}</a> have accepted the surrender from <a href='gangs.php?action=view&ID={$them['gangID']}'>{$them['gangNAME']}</a>, the war is over!");
$db->query("INSERT INTO gangevents VALUES('',{$ir['gang']},unix_timestamp(),'$event') , ('',".$r[$f].",unix_timestamp(),'$event')");
echo "You have accepted surrender, the war is over.";
}
}
function gang_staff_orgcrimes()
{
global $db,$ir,$c,$userid,$gangdata;
$_POST['crime'] = abs((int) $_POST['crime']);
if($_POST['crime'])
{
if($gangdata['gangCRIME'] != 0)
{
print "Your gang is already doing a crime!";
}
else
{
$db->query("UPDATE gangs SET gangCRIME={$_POST['crime']},gangCHOURS=24 WHERE gangID={$ir['gang']}");
print "You have started to plan this crime. It will take 24 hours.";
}
}
else
{
print "<h3>Organised Crimes</h3>
<form action='yourgang.php?action=staff&act2=crimes' method='post'>Choose a crime that your gang should commit.<br />
<select name='crime' type='dropdown'>";
$cnt=$db->query("SELECT username FROM users WHERE gang={$gangdata['gangID']}");
$membs=$db->num_rows($cnt);
$q=$db->query("SELECT * FROM orgcrimes WHERE ocUSERS <= $membs");
while($r=$db->fetch_row($q))
{
print "<option value='{$r['ocID']}'>{$r['ocNAME']} ({$r['ocUSERS']} members needed)</option>";
}
print "</select><br /><input type='submit' value='Commit' /></form>";

}
}

function gang_staff_pres()
{
global $db,$ir,$c,$userid,$gangdata;
if($gangdata['gangPRESIDENT'] == $userid)
{
if(isset($_POST['subm']))
{
  $_POST['vp'] = abs((int) $_POST['vp']);
$q=$db->query("SELECT * FROM users WHERE userid={$_POST['vp']} AND gang={$ir['gang']}", $c);
if($db->num_rows($q) < 1) { die("Invalid user or user not in your gang."); }
$memb=$db->fetch_row($q);
$db->query("UPDATE gangs SET gangPRESIDENT={$_POST['vp']} WHERE gangID={$gangdata['gangID']}");
$db->query("INSERT INTO gangevents VALUES('',{$ir['gang']},unix_timestamp(), '{$gangdata['gangNAME']} Boss was changed.')");
event_add($memb['userid'],"You were transferred presidency of {$gangdata['gangNAME']}.",$c);
echo "Presidency was transferred to {$memb['username']}";
}
else
{
echo "<form action='yourgang.php?action=staff&act2=pres' method='post'>
Enter the ID of the new president.<br />
<input type='hidden' name='subm' value='submit' />
ID: <input type='dropdown' name='vp' value='{$memb['username']}' maxlength='7' width='7' /><br />
<input type='submit' value='Change' /></form>";
}
}
}
function gang_staff_upgrades()
{
global $db,$ir,$c,$userid,$gangdata;
if(isset($_POST['membs']))
{
$_POST['membs']=abs($_POST['membs']);
if($_POST['membs']*100000 > $gangdata['gangMONEY'])
{
echo "Your gang does not have enough money to upgrade that much capacity.";
}
else
{
$cost=$_POST['membs']*100000;
$db->query("UPDATE gangs SET gangCAPACITY=gangCAPACITY+{$_POST['membs']},gangMONEY=gangMONEY-$cost WHERE gangID={$ir['gang']}");
echo "You paid \$$cost to add {$_POST['membs']} capacity to your gang.";
}
}
else
{
echo "<b><u>Capacity</u></b><br />
Current Capacity: {$gangdata['gangCAPACITY']}<br />
<form action='yourgang.php?action=staff&act2=upgrade' method='post'>Enter the amount of extra capacity you need. Each extra member slot costs \$100,000.<br />
<input type='text' name='membs' /><br />
<input type='submit' value='Buy' /></form>";
}
}
function gang_leave()
{
global $db,$ir,$c,$userid,$gangdata;
if($gangdata['gangPRESIDENT'] == $userid || $gangdata['gangVICEPRES'] == $userid)
{
echo "You cannot leave while you are still president or vice-president of your gang.";
}
else
{
$db->query("UPDATE users SET gang=0,daysingang=0 WHERE userid=$userid");
$db->query("INSERT INTO gangevents VALUES ('',{$ir['gang']},unix_timestamp(),'<a href=''viewuser.php?u=$userid''>{$ir['username']}</a> left the gang.');");
echo "You left your gang.";
}
}
function gang_atklogs()
{
global $db,$ir,$c,$userid,$gangdata;
$atks=$db->query("SELECT a.*,u1.username as attackern,u1.gang as attacker_gang, u2.username as attackedn,u2.gang as attacked_gang FROM attacklogs a LEFT JOIN users u1 ON a.attacker=u1.userid LEFT JOIN users u2 ON a.attacked=u2.userid WHERE (u1.gang={$ir['gang']} OR u2.gang={$ir['gang']}) AND result='won' ORDER BY time DESC LIMIT 50");
echo "<b>Attack Logs - The last 50 attacks involving someone in your gang</b><br />
<table width=75%  cellspacing=1 class='table'><tr style='background:gray'><th>Time</th><th>Attack</th></tr>";
while($r=$db->fetch_row($atks))
{
/* See if their username is an image. - sniko */
$get = $db->query("SELECT `imagepath` FROM `user_imageusername` WHERE `userid`={$r['attacker']}");
if( $db->num_rows($get) ) {
   $r_image = $db->fetch_row($get);
   $txt_username = $r['attackern'];
   $r['attackern'] = "<img src=\"images/username/{$r_image['imagepath']}\" alt=\"{$txt_username}\" />";
}
if($r['attacker_gang'] == $ir['gang']) { $color="green"; } else { $color="red"; }
$d=date('F j, Y, g:i:s a',$r['time']);
echo "<tr><td>$d</td><td><a href='viewuser.php?u={$r['attacker']}'>{$r['attackern']}</a> <font color='$color'>attacked</font> <a href='viewuser.php?u={$r['attacked']}'>{$r['attackedn']}</a></td></tr>";
}
echo "</table>";
}
function gang_crimes()
{
global $db,$ir,$c,$userid,$gangdata;
if($gangdata['gangCRIME'])
{
echo "This is the crime your gang is planning at the moment.<br />
<b>Crime:</b> {$gangdata['ocNAME']}<br />
<b>Hours Left:</b> {$gangdata['gangCHOURS']}";
}
else
{
echo "Your gang is not currently planning a crime.";
}
}
function gang_staff_massmailer() {
	global $db,$ir,$c,$userid,$gangdata;
		$_POST['text'] = ( isset($_POST['text'])&&strlen($_POST['text'])<500 )?strip_tags($db->escape($_POST['text'])):'';
          if ( $_POST['text'] ) {
		$subj = "This is a mass mail from your gang";
	$q = $db->query("SELECT `username`,`userid` FROM `users` WHERE `gang` = {$ir['gang']}");
	$q=$db->query("SELECT * FROM users WHERE gang={$ir['gang']}");
     while ( $r = $db->fetch_row($q) ) {
     event_add($r['userid'],"You have a unread Gang mass mail from {$gangdata['gangNAME']} View Message by clicking the following link <a href='mailbox.php'>Open Mail</a>",$c);
	 $db->query("INSERT INTO gangevents VALUES ('',{$ir['gang']},unix_timestamp(),'A Gang mass mail was sent.');");
	$db->query("INSERT INTO mail VALUES('', 0, {$ir['userid']}, {$r['userid']}, unix_timestamp(),'$subj','{$_POST['text']}')");
   echo "Mass mail sent to {$r['username']}.<br />";
     }
   echo "
Mass mail sending complete!
<br />
&gt; <a href='yourgang.php?action=staff'>Go Back</a>
   ";
          } else {
   echo "
<b>Mass Mailer</b>
<br />
<form action='yourgang.php?action=staff&act2=massmailer' method='post'> Text:
<br />
<textarea name='text' rows='7' cols='40'></textarea>
<br />
<input type='submit' value='Send' />
</form>
   ";
          }
}
function gang_staff_masspayment()
{
global $db,$ir,$c,$userid,$gangdata;
$_POST['amnt']=abs((int) $_POST['amnt']);
if($_POST['amnt'])
{
$q=$db->query("SELECT * FROM users WHERE gang={$ir['gang']}");
while($r=$db->fetch_row($q))
{
/* See if their username is an image. - sniko */
$get = $db->query("SELECT `imagepath` FROM `user_imageusername` WHERE `userid`={$r['userid']}");
if( $db->num_rows($get) ) {
   $r_image = $db->fetch_row($get);
   $txt_username = $r['username'];
   $r['username'] = "<img src=\"images/username/{$r_image['imagepath']}\" alt=\"{$txt_username}\" width='98px' height='28' />";
}
if($gangdata['gangMONEY'] >= $_POST['amnt'])
{
event_add($r['userid'],"You were given \${$_POST['amnt']} from your gang.",$c);
$db->query("UPDATE users SET money=money+{$_POST['amnt']} WHERE userid={$r['userid']}", $c);
$gangdata['gangMONEY']-=$_POST['amnt'];
echo "Money sent to {$r['username']}.<br />";
}
else
{
echo "Not enough in the vault to pay {$r['username']}!<br />";
}
}
$db->query("UPDATE gangs SET gangMONEY={$gangdata['gangMONEY']} WHERE gangID={$ir['gang']}", $c);
$db->query("INSERT INTO gangevents VALUES('',{$ir['gang']},unix_timestamp(), 'A mass payment of \${$_POST['amnt']} was sent to the members of the Gang.')");
echo "Mass payment sending complete!<br />
<a href='yourgang.php?action=staff'>&gt; Back</a>";
}
else
{
echo "<b>Mass Payment</b><br />
<form action='yourgang.php?action=staff&act2=masspayment' method='post'> Amount: <input type='text' name='amnt' />
<input type='submit' value='Send' /></form>";
}
}
function gang_staff_desc()
{
global $db,$ir,$c,$userid,$gangdata;
if($gangdata['gangPRESIDENT'] == $userid  )
{
if(isset($_POST['subm']))
{
$_POST['vp']=str_replace(array("<", ">", "\n"), array("&lt;", "&gt;", "<br />"), $_POST['vp']);
$db->query("UPDATE gangs SET gangDESC='{$_POST['vp']}' WHERE gangID={$gangdata['gangID']}");
$db->query("INSERT INTO gangevents VALUES('',{$ir['gang']},unix_timestamp(), 'Gang Description Updated.')");
echo "Gang description changed!<br />
<a href='yourgang.php?action=staff'>&gt; Back</a>";
}
else
{
echo "Current Description: <br />
{$gangdata['gangDESC']} <form action='yourgang.php?action=staff&act2=desc' method='post'>
Enter the new description.<br />
<input type='hidden' name='subm' value='submit' />
Desc: <br />
<textarea name='vp' cols='40' rows='7'></textarea><br />
<input type='submit' value='Change' /></form>";
}
}
}
function gang_staff_ament() {
	global $db,$ir,$c,$userid,$gangdata,$h;
if ( isset($_POST['subm']) ) {
     if ( (strlen($_POST['vp'])>255) ) {
   echo 'You can only submit a max of 255 characters.<br />&gt; <a href="yourgang.php?action=staff&act2=ament">Go Back</a>';
   die($h->endpage());
     }
$_POST['vp']=str_replace(array("<", ">", "\n"), array("&lt;", "&gt;", "<br />"), $_POST['vp']);
$db->query("UPDATE gangs SET gangAMENT='{$_POST['vp']}' WHERE gangID={$gangdata['gangID']}");
$db->query("INSERT INTO gangevents VALUES('',{$ir['gang']},unix_timestamp(), 'Gang Announcement Updated.')");

echo "Gang announcement changed!<br />
<a href='yourgang.php?action=staff'>&gt; Back</a>";
}
else
{
$gd=str_replace(array("&lt;", "&gt;", "<br />"), array("<", ">", "\n"), $gangdata['gangAMENT']);
echo "Current Announcement: <br />
{$gangdata['gangAMENT']} <form action='yourgang.php?action=staff&act2=ament' method='post'>
Enter the new announcement.<br />
<input type='hidden' name='subm' value='submit' />
Desc: <br />
<textarea name='vp' cols='40' rows='7'>{$gd}</textarea><br />
<input type='submit' value='Change' /></form>";
}
}
function gang_staff_name()
{
global $db,$ir,$c,$userid,$gangdata;
if($gangdata['gangPRESIDENT'] == $userid )
{
if(isset($_POST['subm']))
{
$_POST['vp']=str_replace(array("<", ">", "\n"), array("&lt;", "&gt;", "<br />"), $_POST['vp']);
$db->query("UPDATE gangs SET gangNAME='{$_POST['vp']}' WHERE gangID={$gangdata['gangID']}");
$db->query("INSERT INTO gangevents VALUES('',{$ir['gang']},unix_timestamp(), 'Gang Name Changed/Updated.')");

echo "Gang name changed!<br />
<a href='yourgang.php?action=staff'>&gt; Back</a>";
}
else
{
echo "Current Name: <br />
{$gangdata['gangNAME']} <form action='yourgang.php?action=staff&act2=name' method='post'>
Enter the new name.<br />
<input type='hidden' name='subm' value='submit' />
Name: <input type='text' name='vp' value='' /><br />
<input type='submit' value='Change' /></form>";
}
}
}
function gang_staff_tag()
{
global $db,$ir,$c,$userid,$gangdata;
if($gangdata['gangPRESIDENT'] == $userid )
{
if(isset($_POST['subm']))
{
$_POST['vp']=str_replace(array("<", ">", "\n"), array("&lt;", "&gt;", "<br />"), $_POST['vp']);
$db->query("UPDATE gangs SET gangPREF='{$_POST['vp']}' WHERE gangID={$gangdata['gangID']}");
$db->query("INSERT INTO gangevents VALUES('',{$ir['gang']},unix_timestamp(), 'Gang Tag Updated.')");
echo "Gang tag changed!<br />
<a href='yourgang.php?action=staff'>&gt; Back</a>";
}
else
{
echo "Current Tag: <br />
{$gangdata['gangPREF']} <form action='yourgang.php?action=staff&act2=tag' method='post'>
Enter the new tag.<br />
<input type='hidden' name='subm' value='submit' />
tag: <input type='text' name='vp' value='' /><br />
<input type='submit' value='Change' /></form>";
}
}
}
function gang_staff_pvmassmailer()
{
global $db,$ir,$c,$userid,$gangdata;
if($_POST['text'])
{
$subj='This is a mass mail from a fellow/rival gang leader';
$q=$db->query('SELECT gangPRESIDENT, gangVICEPRES FROM gangs');
while ($r=$db->fetch_row($q))
{
$db->query("INSERT INTO mail VALUES('', 0, $userid, {$r['gangPRESIDENT']}, unix_timestamp(),'$subj','".addslashes($_POST['text'])."')");
$db->query("INSERT INTO mail VALUES('', 0, $userid, {$r['gangVICEPRES']}, unix_timestamp(),'$subj','".addslashes($_POST['text'])."')");
}
print 'Mass mail sending complete!

<a href="http://yourgang.php?action=staff" target="_blank">> Back</a>';
} else {
print "<b>Pres/Vice-pres Mass Mailer</b>

<form action='yourgang.php?action=staff&act2=outsidemailer' method='post'> Text:

<textarea name='text' rows='7' cols='40'></textarea>

<input type='submit' value='Send' /></form>";
}
}
function gang_staff_wmsg()
{
global $db,$ir,$c,$userid,$gangdata;
if($gangdata['gangPRESIDENT'] == $userid )
{
if(isset($_POST['subm']))
{
$_POST['vp']=str_replace(array("<", ">", "\n"), array("&lt;", "&gt;", "<br />"), $_POST['vp']);
$db->query("UPDATE gangs SET gangWMSG='{$_POST['vp']}' WHERE gangID={$gangdata['gangID']}");
$db->query("INSERT INTO gangevents VALUES('',{$ir['gang']},unix_timestamp(), 'Gang Welcome message Updated.')");
echo "Welcome message changed!<br />
<a href='yourgang.php?action=staff'>&gt; Back</a>";
}
else
{
echo "Current Message: <br />
{$gangdata['gangWMSG']} <form action='yourgang.php?action=staff&act2=wmsg' method='post'>
Enter the new Welcome message.<br />
<input type='hidden' name='subm' value='submit' />
Welcome Message: <input type='text' name='vp' value='' /><br />
<input type='submit' value='Change' /></form>";
}
}
}
function alliance_manager()
{
global $c,$ir,$gangdata,$h,$userid;
if($gangdata['gangPRESIDENT'] != $userid and $userid!=1)
{
die("Your not allowed here.");
} else {
if(!$_GET['act3'])
{
print "<b>Your alliance manager</b><br />
<a href='yourgang.php?action=staff&act2=alliances&act3=requests'>View Alliance Requests</a><br />
<a href='yourgang.php?action=staff&act2=alliances&act3=manage'>Manage Alliance Requests</a><br />
<a href='yourgang.php?action=staff&act2=alliances&act3=send'>Send Alliance Requests</a><br />
";
} elseif($_GET['act3'] == "send")
{
if($_POST['gang'] and $_POST['message'])
{
$q=mysql_query("SELECT * FROM gangaffliates WHERE (ga_to={$gangdata['gangID']} AND ga_from={$_POST['gang']}) OR (ga_to={$_POST['gang']} AND ga_from={$gangdata['gangID']})",$c);
if(mysql_num_rows($q))
{
die("You have already formed an alliance/request to this gang!");
}
mysql_query("INSERT INTO gangaffliates (ga_id,ga_from,ga_to,ga_message,ga_accept,ga_days) VALUES ('NULL', '{$gangdata['gangID']}', '{$_POST['gang']}', '{$_POST['message']}', '0', '0');",$c);
print "Gang alliance request sent!";
} else {
print "<b>Send a gang alliance request</b><br />
<form action='yourgang.php?action=staff&act2=alliances&act3=send' method='post'>
Gang: <select name='gang'>";
$q=mysql_query("SELECT * FROM gangs WHERE gangID!={$gangdata['gangID']} ORDER BY gangNAME DESC",$c);
while($r=mysql_fetch_array($q))
{
print "<option value='{$r['gangID']}'>{$r['gangNAME']}</option>";
}
print "</select><br />
Message: <textarea name='message' cols=30 rows=8></textarea><br />
<input type='submit' value='Submit'>
</form>";
}
}elseif($_GET['act3'] == "manage")
{
if($_GET['ID'])
{
$_GET['ID']=(int) $_GET['ID'];
$q=mysql_query("SELECT * FROM gangaffliates WHERE (ga_to={$gangdata['gangID']} OR ga_from={$gangdata['gangID']}) AND ga_id={$_GET['ID']}",$c);
if(mysql_num_rows($q) == 0)
{
die("Huh?");
} else {
mysql_query("DELETE FROM gangaffliates WHERE ga_id={$_GET['ID']}",$c);
print "Gang Alliance Removed";
}
} else {
$q=mysql_query("SELECT * FROM gangaffliates WHERE ga_to={$gangdata['gangID']} OR ga_from={$gangdata['gangID']}",$c);
if(mysql_num_rows($q) == 0)
{
print "<b>Your gang doesn't currently have any affliates.</b>";
} else {
print "<table width=90% border=5><tr><th>Gang Name</th><th>Alliance?</th><th>Respect</th><th>Allied for</th><th>Remove</th></tr>
";
while($r=mysql_fetch_array($q))
{
if($gangdata['gangID'] == $r['ga_to']) { $them=$r['ga_from']; } else  { $them=$r['ga_to']; }
$q2=mysql_query("SELECT * FROM gangs WHERE gangID=".$them,$c);
$tr=mysql_fetch_array($q2);
print "<tr><td><a href='gangs.php?action=view&ID=$them'>{$tr['gangNAME']}</a></td><td>";
if($r['ga_accept'] == 1)
{
print "Yes, accepted alliance";
} else {
print "<b>Not yet an alliance, no response!</b>";
}
print "</td><td>{$tr['gangRESPECT']}</td><td>".$r['ga_days']." days</td><td><a href='yourgang.php?action=staff&act2=alliances&act3=manage&ID={$r['ga_id']}'>Remove Alliance</a></td></tr>";
}
print "</table>";
}

}
} elseif($_GET['act3'] == "requests")
{
$_GET['ID']=(int) $_GET['ID'];
$_GET['ID2']=(int) $_GET['ID2'];
if($_GET['ID'] or $_GET['ID2'])
{
if($_GET['ID']) { $accept=2; $id=$_GET['ID']; } else { $accept=1; $id=$_GET['ID2']; }
$q=mysql_query("SELECT ga.*,g.* FROM gangaffliates ga LEFT JOIN gangs g ON ga.ga_from=g.gangID WHERE ga.ga_to={$gangdata['gangID']} AND ga.ga_accept=0 AND ga.ga_id={$id}",$c);
if(mysql_num_rows($q) == 0) { die("Huh?"); }
$r=mysql_fetch_array($q);
$thn=str_replace("'", "", $gangdata['gangNAME']);
if($accept == 1)
{
mysql_query("DELETE FROM gangaffliates WHERE ga_id={$_GET['ID']}",$c);
event_add($r['gangPRESIDENT'],"Your gang affliate request to $thn was declined.",$c);
print "Alliance Request Declined";
} else {
mysql_query("UPDATE gangaffliates SET ga_accept=1 WHERE ga_id={$_GET['ID']}",$c);
event_add($r['gangPRESIDENT'],"Your gang affliate request to $thn was accepted, Congrats!",$c);
print "Alliance Request Accepted";
}
 } else {
$q=mysql_query("SELECT ga.*,g.* FROM gangaffliates ga LEFT JOIN gangs g ON ga.ga_from=g.gangID WHERE ga.ga_to={$gangdata['gangID']} AND ga.ga_accept=0",$c);
if(mysql_num_rows($q) == 0)
{
print "<b>You have no current requests</b>";
} else {
print "<table width=90% border=5><tr><th>From</th><th>Message</th><th>Respect</th><th>Links</th></tr>";
while($r=mysql_fetch_array($q))
{
print "<tr><td><b>".$r['gangNAME']."</b></td><td>".$r['ga_message']."</td><td>".$r['gangRESPECT']."</td><td>
<a href='yourgang.php?action=staff&act2=alliances&act3=requests&ID={$r['ga_id']}'>Accept</a><br /><a href='yourgang.php?action=staff&act2=alliances&act3=requests&ID2={$r['ga_id']}'>Decline</a><br /></td></tr>";
}
print "</table>";
}
}
}
}
}
function gang_staff_killgang()
{
global $db,$ir,$c,$userid,$gangdata;
if($gangdata['gangPRESIDENT'] == $userid )
{
if(isset($_POST['subm']))
{
$db->query("DELETE FROM gangwars WHERE warDECLARER = {$ir['gang']} OR warDECLARED = {$ir['gang']}",$c);
$db->query("DELETE FROM gangs WHERE gangPRESIDENT = $userid",$c);
$db->query("DELETE FROM gangforums_topics WHERE gft_gangid = {$ir['gang']}",$c);
$db->query("DELETE FROM gangforums_replies WHERE gfr_gangid = {$ir['gang']}",$c);
$db->query("UPDATE users SET gang=0 WHERE userid={$ir['userid']}",$c);
$db->query("UPDATE users SET daysingang=0 WHERE userid={$ir['userid']}",$c);
print "Your gang has been deleted<br />
<a href='yourgang.php?action=staff'>&gt; Back</a>";
}
else
{
print "Delete Gang <br />
<form action='yourgang.php?action=staff&act2=killgang' method='post'>
<input type='hidden' name='subm' value='submit' />
<input type='submit' value='Delete' /></form><br />
<a href='yourgang.php?action=staff'>&gt; Back</a>";
}
}
}
function gang_staff_pic()
{
global $ir,$c,$userid,$gangdata;
if($gangdata['gangPRESIDENT'] == $userid)
{
if(isset($_POST['subm']))
{
$_POST['vp']=str_replace(array("<", ">", "\n","\'"), array("<", ">", "<br />","'"), $_POST['vp']);
mysql_query("UPDATE gangs SET gangPIC='{$_POST['vp']}' WHERE gangID={$gangdata['gangID']}",$c);
print "Gang Pic changed!<br />
<a href='yourgang.php?action=staff'>> Back</a>";
}
else
{
print "Current Picture: <br />
";
if($gangdata['gangPIC'])
{
print "<img src='gangpics/{$gangdata['gangPIC']}' alt='Gang Picture' width='200' height='120' />";
}
else
{
print "<b>{$gangdata['gangPIC']}</b>";
}
print"<hr /> <form action='yourgang.php?action=staff&act2=pic' method='post'>
Please note that the pic must be externally hosted, <a href='http://imageshack.us'>ImageShack</a> is our recommendation.<br />
Any pics that are not 468x60 will be automatically resized.<br /><hr /><h2>Upload Gang Picture</h2>
<li><a href='gangpic_uploader.php'>Upload Picture</a></li><hr />
<input type='hidden' name='subm' value='submit' />
Image Url: <input type='text' name='vp' value='' /><br />
<input type='submit' value='Change' /></form>";
}
}
}
function gang_warview()
{
global $ir,$c,$userid,$gangdata;
$wq=mysql_query("SELECT * FROM gangwars where warDECLARER={$ir['gang']} or warDECLARED={$ir['gang']}",$c);
print "<b>These are the wars your gang is involved in.</b><br />
<table width=100% border=2><tr class='headercolor'><th>Time Started</th><th>Versus</th><th>Who Declared</th><th>Respect</th></tr>";
$membcache="";
while($r=mysql_fetch_array($wq))
{
if($r['warDECLARER']==$ir['gang']) { $w="You";$f=$r['warDECLARED']; }
else { $w="Them";$f=$r['warDECLARER']; }
$d=date('F j, Y, g:i:s a',$r['warTIME']);
$ggq=mysql_query("SELECT * FROM gangs WHERE gangID=".$f,$c);
$them=mysql_fetch_array($ggq);
print "<tr><td>$d</td>
<td>
<a href='gangs.php?action=view&ID={$them['gangID']}'>
{$them['gangNAME']}</a></td>
<td>$w</td><td>{$them['gangRESPECT']}</td></tr>";
$membcache.="<table width=100% border=2><tr class='headercolor'><th colspan=11>At war with: {$them['gangNAME']}<br>List of members you can attack</th></tr><tr><th>Nr.</th> <th>ID</th> <th>Name</th><th>Level</th><th>Money</th> <th>Location</th> <th>Ready To Be Attacked</th> <th>Hospital</th> <th>Reason</th> <th>Mail</th> <th>Attack</th></tr>";
$q=mysql_query("SELECT u.*,c.* FROM users u LEFT JOIN cities c ON u.location=c.cityid WHERE gang=$f ORDER BY userid ASC");
$n=0;
while($r2=mysql_fetch_array($q))
{
if( $r2['hp'] >= 2 and (($r2['hospital'] == 0 and $ir['hospital']==0) || ($r2['hospital'] and $ir['hospital'])) and $r2['location'] == $ir['location']) { $color="green";$text="Yes"; } else
{ $color="red"; $text="No"; }
$n++;
if($r2['hospital']==0) { $r2['hospreason']=""; }
$membcache.="\n<tr><td>$n</td><td>{$r2['userid']}</td> <td><a href='viewuser.php?u={$r2['userid']}'>{$r2['username']}</a></td> <td>{$r2['level']}</td> <td>\${$r2['money']}</td> <td>{$r2['cityname']}</td> <td><span style='color:$color'>$text</span></td> <td>{$r2['hospital']} minute(s)</td> <td>{$r2['hospreason']}</td> <td>[<a href='mailbox.php?action=compose&ID={$r2['userid']}'>Send Mail</a>]</td> <td>[<a href='attack.php?ID={$r2['userid']}'>Attack</a>]</td></tr>";
}
$membcache.="</table><br />";

}
print "</table>";
print $membcache;
}
$h->endpage();
?>