<?php

// The Kabal Invasion - A web-based 4X space game

// Copyright © 2014 The Kabal Invasion development team, Ron Harwood, and the BNT development team

//

// This program is free software: you can redistribute it and/or modify

// it under the terms of the GNU Affero General Public License as

// published by the Free Software Foundation, either version 3 of the

// License, or (at your option) any later version.

//

// This program is distributed in the hope that it will be useful,

// but WITHOUT ANY WARRANTY; without even the implied warranty of

// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

// GNU Affero General Public License for more details.

//

// You should have received a copy of the GNU Affero General Public License

// along with this program. If not, see <http://www.gnu.org/licenses/>.

//

// File: bounty.php

require_once './common.php';

Tki\Login::checkLogin($pdo_db, $lang, $tkireg, $template);

// Database driven language entries

$langvars = Tki\Translate::load($pdo_db, $lang, array('bounty', 'port', 'common',

'global_includes', 'global_funcs', 'combat',

'footer', 'news'));

$title = $langvars['l_by_title'];

$header = new Tki\Header;

$header->display($pdo_db, $lang, $template, $title);

// Detect if this variable exists, and filter it. Returns false if anything wasn't right

$response = null;

$response = filter_input(INPUT_POST, 'response', FILTER_SANITIZE_STRING);

if (mb_strlen(trim($response)) === 0)

{

$response = false;

}

if (array_key_exists('response', $_GET))

{

$response = filter_input(INPUT_GET, 'response', FILTER_SANITIZE_STRING);

}

// Detect if this variable exists, and filter it. Returns false if anything wasn't right

$bounty_on = null;

$bounty_on = (int) filter_input(INPUT_POST, 'bounty_on', FILTER_SANITIZE_NUMBER_INT);

if (mb_strlen(trim($bounty_on)) === 0)

{

$bounty_on = false;

}

if (array_key_exists('bounty_on', $_GET))

{

$bounty_on = filter_input(INPUT_GET, 'bounty_on', FILTER_SANITIZE_NUMBER_INT);

}

// Detect if this variable exists, and filter it. Returns false if anything wasn't right

$bid = null;

$bid = (int) filter_input(INPUT_POST, 'bid', FILTER_SANITIZE_NUMBER_INT);

if (mb_strlen(trim($bid)) === 0)

{

$bid = false;

}

// Detect if this variable exists, and filter it. Returns false if anything wasn't right

$amount = null;

$amount = (int) filter_input(INPUT_POST, 'amount', FILTER_SANITIZE_NUMBER_INT);

if (mb_strlen(trim($amount)) === 0)

{

$amount = false;

}

// Get playerinfo from database

$sql = "SELECT * FROM ::prefix::ships WHERE email=:email LIMIT 1";

$stmt = $pdo_db->prepare($sql);

$stmt->bindParam(':email', $_SESSION['username'], PDO::PARAM_STR);

$stmt->execute();

$playerinfo = $stmt->fetch(PDO::FETCH_ASSOC);

switch ($response) {

case 'display':

echo "<h1>" . $title . "</h1>\n";

$res5 = $db->Execute("SELECT * FROM {$db->prefix}ships, {$db->prefix}bounty WHERE bounty_on = ship_id AND bounty_on = ?;", array($bounty_on));

Tki\Db::logDbErrors($pdo_db, $res5, __LINE__, __FILE__);

$j = 0;

if ($res5)

{

while (!$res5->EOF)

{

$bounty_details[$j] = $res5->fields;

$j++;

$res5->MoveNext();

}

}

$num_details = $j;

if ($num_details < 1)

{

echo $langvars['l_by_nobounties'] . "<br>";

}

else

{

echo $langvars['l_by_bountyon'] . " " . $bounty_details[0]['character_name'];

echo '<table border=1 cellspacing=1 cellpadding=2 width="50%" align=center>';

echo "<tr bgcolor=\"$tkireg->color_header\">";

echo "<td><strong>" . $langvars['l_amount'] . "</td>";

echo "<td><strong>" . $langvars['l_by_placedby'] . "</td>";

echo "<td><strong>" . $langvars['l_by_action'] . "</td>";

echo "</tr>";

$color = $tkireg->color_line1;

for ($j = 0; $j < $num_details; $j++)

{

$sql = "SELECT character_name FROM ::prefix::ships WHERE ship_id=:ship_id LIMIT 1";

$stmt = $pdo_db->prepare($sql);

$stmt->bindParam(':ship_id', $bounty_details[$j]['placed_by'], PDO::PARAM_INT);

$stmt->execute();

$details = $stmt->fetch(PDO::FETCH_ASSOC);

echo "<tr bgcolor=\"$color\">";

echo "<td>" . $bounty_details[$j]['amount'] . "</td>";

if ($bounty_details[$j]['placed_by'] == 0)

{

echo "<td>" . $langvars['l_by_thefeds'] . "</td>";

}

else

{

echo "<td>" . $details['character_name'] . "</td>";

}

if ($bounty_details[$j]['placed_by'] == $playerinfo['ship_id'])

{

echo "<td><a href=bounty.php?bid=" . $bounty_details[$j]['bounty_id'] . "&response=cancel>" . $langvars['l_by_cancel'] . "</a></td>";

}

else

{

echo "<td>n/a</td>";

}

echo "</tr>";

if ($color == $tkireg->color_line1)

{

$color = $tkireg->color_line2;

}

else

{

$color = $tkireg->color_line1;

}

}

echo "</table>";

}

break;

case 'cancel':

echo "<h1>" . $title . "</h1>\n";

if ($playerinfo['turns'] < 1)

{

echo $langvars['l_by_noturn'] . "<br><br>";

Tki\Text::gotoMain($pdo_db, $lang);

$footer = new Tki\Footer;

$footer->display($pdo_db, $lang, $tkireg, $template);

die();

}

$res = $db->Execute("SELECT * FROM {$db->prefix}bounty WHERE bounty_id = ?;", array($bid));

Tki\Db::logDbErrors($pdo_db, $res, __LINE__, __FILE__);

if (!$res || $res->RowCount() == 0)

{

echo $langvars['l_by_nobounty'] . "<br><br>";

Tki\Text::gotoMain($pdo_db, $lang);

$footer = new Tki\Footer;

$footer->display($pdo_db, $lang, $tkireg, $template);

die();

}

$bty = $res->fields;

if ($bty['placed_by'] != $playerinfo['ship_id'])

{

echo $langvars['l_by_notyours'] . "<br><br>";

Tki\Text::gotoMain($pdo_db, $lang);

$footer = new Tki\Footer;

$footer->display($pdo_db, $lang, $tkireg, $template);

die();

}

$del = $db->Execute("DELETE FROM {$db->prefix}bounty WHERE bounty_id = ?;", array($bid));

Tki\Db::logDbErrors($pdo_db, $del, __LINE__, __FILE__);

$stamp = date("Y-m-d H:i:s");

$refund = $bty['amount'];

$sql = "UPDATE ::prefix::ships SET last_login=:stamp, turns=turns-1, turns_used=turns_used+1, credits=credits+:refund WHERE ship_id=:ship_id";

$stmt = $pdo_db->prepare($sql);

$stmt->bindParam(':stamp', $stamp, \PDO::PARAM_INT);

$stmt->bindParam(':refund', $refund, \PDO::PARAM_INT);

$stmt->bindParam(':ship_id', $playerinfo['ship_id'], \PDO::PARAM_INT);

$result = $stmt->execute();

Tki\Db::logDbErrors($pdo_db, $sql, __LINE__, __FILE__);

echo $langvars['l_by_canceled'] . "<br>";

Tki\Text::gotoMain($pdo_db, $lang);

die();

case 'place':

echo "<h1>" . $title . "</h1>\n";

$ex = $db->Execute("SELECT * FROM {$db->prefix}ships WHERE ship_id = ?;", array($bounty_on));

Tki\Db::logDbErrors($pdo_db, $ex, __LINE__, __FILE__);

if (!$ex)

{

echo $langvars['l_by_notexists'] . "<br><br>";

Tki\Text::gotoMain($pdo_db, $lang);

$footer = new Tki\Footer;

$footer->display($pdo_db, $lang, $tkireg, $template);

die();

}

$bty = $ex->fields;

if ($bty['ship_destroyed'] == "Y")

{

echo $langvars['l_by_destroyed'] . "<br><br>";

Tki\Text::gotoMain($pdo_db, $lang);

$footer = new Tki\Footer;

$footer->display($pdo_db, $lang, $tkireg, $template);

die();

}

if ($playerinfo['turns'] < 1)

{

echo $langvars['l_by_noturn'] . "<br><br>";

Tki\Text::gotoMain($pdo_db, $lang);

$footer = new Tki\Footer;

$footer->display($pdo_db, $lang, $tkireg, $template);

die();

}

if ($amount <= 0)

{

echo $langvars['l_by_zeroamount'] . "<br><br>";

Tki\Text::gotoMain($pdo_db, $lang);

$footer = new Tki\Footer;

$footer->display($pdo_db, $lang, $tkireg, $template);

die();

}

if ($bounty_on == $playerinfo['ship_id'])

{

echo $langvars['l_by_yourself'] . "<br><br>";

Tki\Text::gotoMain($pdo_db, $lang);

$footer = new Tki\Footer;

$footer->display($pdo_db, $lang, $tkireg, $template);

die();

}

if ($amount > $playerinfo['credits'])

{

echo $langvars['l_by_notenough'] . "<br><br>";

Tki\Text::gotoMain($pdo_db, $lang);

$footer = new Tki\Footer;

$footer->display($pdo_db, $lang, $tkireg, $template);

die();

}

if ($tkireg->max_bountyvalue != 0)

{

$percent = $tkireg->max_bountyvalue * 100;

$score = Tki\Score::updateScore($pdo_db, $playerinfo['ship_id'], $tkireg, $playerinfo);

$maxtrans = $score * $score * $tkireg->max_bountyvalue;

$previous_bounty = 0;

$pb = $db->Execute("SELECT SUM(amount) AS totalbounty FROM {$db->prefix}bounty WHERE bounty_on = ? AND placed_by = ?;", array($bounty_on, $playerinfo['ship_id']));

Tki\Db::logDbErrors($pdo_db, $pb, __LINE__, __FILE__);

if ($pb)

{

$prev = $pb->fields;

$previous_bounty = $prev['totalbounty'];

}

if ($amount + $previous_bounty > $maxtrans)

{

$langvars['l_by_toomuch'] = str_replace("[percent]", $percent, $langvars['l_by_toomuch']);

echo $langvars['l_by_toomuch'] . "<br><br>";

Tki\Text::gotoMain($pdo_db, $lang);

$footer = new Tki\Footer;

$footer->display($pdo_db, $lang, $tkireg, $template);

die();

}

}

$insert = $db->Execute("INSERT INTO {$db->prefix}bounty (bounty_on, placed_by, amount) values (?, ?, ?);", array($bounty_on, $playerinfo['ship_id'], $amount));

Tki\Db::logDbErrors($pdo_db, $insert, __LINE__, __FILE__);

$stamp = date("Y-m-d H:i:s");

$sql = "UPDATE ::prefix::ships SET last_login=:stamp, turns=turns-1, turns_used=turns_used+1, credits=credits-:amount WHERE ship_id=:ship_id";

$stmt = $pdo_db->prepare($sql);

$stmt->bindParam(':stamp', $stamp, \PDO::PARAM_INT);

$stmt->bindParam(':amount', $amount, \PDO::PARAM_INT);

$stmt->bindParam(':ship_id', $playerinfo['ship_id'], \PDO::PARAM_INT);

$result = $stmt->execute();

Tki\Db::logDbErrors($pdo_db, $sql, __LINE__, __FILE__);

echo $langvars['l_by_placed'] . "<br>";

Tki\Text::gotoMain($pdo_db, $lang);

die();

default:

echo "<h1>" . $title . "</h1>\n";

$res = $db->Execute("SELECT * FROM {$db->prefix}ships WHERE ship_destroyed = 'N' AND ship_id <> ? ORDER BY character_name ASC;", array($playerinfo['ship_id']));

Tki\Db::logDbErrors($pdo_db, $res, __LINE__, __FILE__);

echo "<form accept-charset='utf-8' action=bounty.php method=post>";

echo "<table>";

echo "<tr><td>" . $langvars['l_by_bountyon'] . "</td><td><select name=bounty_on>";

while (!$res->EOF)

{

if ($bounty_on !== null && $bounty_on == $res->fields['ship_id'])

{

$selected = "selected";

}

else

{

$selected = null;

}

$charname = $res->fields['character_name'];

$ship_id = $res->fields['ship_id'];

echo "<option value=$ship_id $selected>$charname</option>";

$res->MoveNext();

}

echo "</select></td></tr>";

echo "<tr><td>" . $langvars['l_by_amount'] . ":</td><td><input type=text name=amount size=20 maxlength=20></td></tr>";

echo "<tr><td></td><td><input type=submit value=" . $langvars['l_by_place'] . "><input type=reset value=Clear></td>";

echo "</table>";

echo "<input type=hidden name=response value=place>";

echo "</form>";

$result3 = $db->Execute("SELECT bounty_on, SUM(amount) as total_bounty FROM {$db->prefix}bounty GROUP BY bounty_on;");

Tki\Db::logDbErrors($pdo_db, $result3, __LINE__, __FILE__);

$i = 0;

if ($result3)

{

while (!$result3->EOF)

{

$bounties[$i] = $result3->fields;

$i++;

$result3->MoveNext();

}

}

$num_bounties = $i;

if ($num_bounties < 1)

{

echo $langvars['l_by_nobounties'] . "<br>";

}

else

{

echo $langvars['l_by_moredetails'] . "<br><br>";

echo "<table width=\"100%\" border=0 cellspacing=0 cellpadding=2>";

echo "<tr bgcolor=\"$tkireg->color_header\">";

echo "<td><strong>" . $langvars['l_by_bountyon'] . "</strong></td>";

echo "<td><strong>" . $langvars['l_amount'] . "</td>";

echo "</tr>";

$color = $tkireg->color_line1;

for ($i = 0; $i < $num_bounties; $i++)

{

$sql = "SELECT character_name FROM ::prefix::ships WHERE ship_id=:ship_id LIMIT 1";

$stmt = $pdo_db->prepare($sql);

$stmt->bindParam(':ship_id', $bounties[$i]['bounty_on'], PDO::PARAM_INT);

$stmt->execute();

$details = $stmt->fetch(PDO::FETCH_ASSOC);

echo "<tr bgcolor=\"$color\">";

echo "<td><a href=bounty.php?bounty_on=" . $bounties[$i]['bounty_on'] . "&response=display>". $details['character_name'] . "</a></td>";

echo "<td>" . $bounties[$i]['total_bounty'] . "</td>";

echo "</tr>";

if ($color == $tkireg->color_line1)

{

$color = $tkireg->color_line2;

}

else

{

$color = $tkireg->color_line1;

}

}

echo "</table>";

}

echo "<br><br>";

break;

}

Tki\Text::gotoMain($pdo_db, $lang);

$footer = new Tki\Footer;

$footer->display($pdo_db, $lang, $tkireg, $template);