<?php
/*===================================================+
|| # Woodpecker Housekeeping
|+====================================================+
|| # Copyright © 2008 SuperFun. All rights reserved.
|| # http://www.superfunn.nl/
|+===================================================+
|| # Notice: This is free software.
|+===================================================+
|| # Versions.
|| # Housekeeping version: V3.5
|| # Version of this file: V1.3.2 (badges.php)
|+===================================================+
||
|| # Usage of this page:
|| # Badge management
||
|+===================================================*/

include('inc/header.php');
if($_GET['do'] == "show"){
	if(min_fuse('housekeeping_badges_management', $my_id)){
		if($_GET['type'] == "rank"){
			echo 'Rank badges:<br>';
			echo '<b>'.role('7').'</b><br>';
			$a = mysql_query("SELECT * FROM users_roles_badges WHERE minrole = 7");
			if(mysql_num_rows($a) < 1){
				echo 'Deze rank heeft geen badges.';
			}else{
				$i = 1;
				echo '<table border="1">';
				echo '<tr>';
				while($aa = mysql_fetch_array($a)){
					echo '<td><img src="'.loader('c_images').'Badges/'.$aa['badge'].'.gif"><br><b>'.$aa['badge'].'</b></td>';
					if($i == "10"){
						echo '</tr>';
						echo '<tr>';
					}
				$i++;
				}
				echo '</tr>';
				echo '</table>';
			}
			echo '<br><br>';
			echo '<b>'.role('6').'</b><br>';
			$a = mysql_query("SELECT * FROM users_roles_badges WHERE minrole = 6");
			if(mysql_num_rows($a) < 1){
				echo 'Deze rank heeft geen badges.';
			}else{
				$i = 1;
				echo '<table border="1">';
				echo '<tr>';
				while($aa = mysql_fetch_array($a)){
					echo '<td><img src="'.loader('c_images').'Badges/'.$aa['badge'].'.gif"><br><b>'.$aa['badge'].'</b></td>';
					if($i == "10"){
						echo '</tr>';
						echo '<tr>';
					}
				$i++;
				}
				echo '</tr>';
				echo '</table>';
			}
			echo '<br><br>';
			echo '<b>'.role('5').'</b><br>';
			$a = mysql_query("SELECT * FROM users_roles_badges WHERE minrole = 5");
			if(mysql_num_rows($a) < 1){
				echo 'Deze rank heeft geen badges.';
			}else{
				$i = 1;
				echo '<table border="1">';
				echo '<tr>';
				while($aa = mysql_fetch_array($a)){
					echo '<td><img src="'.loader('c_images').'Badges/'.$aa['badge'].'.gif"><br><b>'.$aa['badge'].'</b></td>';
					if($i == "10"){
						echo '</tr>';
						echo '<tr>';
					}
				$i++;
				}
				echo '</tr>';
				echo '</table>';
			}
			echo '<br><br>';
			echo '<b>'.role('4').'</b><br>';
			$a = mysql_query("SELECT * FROM users_roles_badges WHERE minrole = 4");
			if(mysql_num_rows($a) < 1){
				echo 'Deze rank heeft geen badges.';
			}else{
				$i = 1;
				echo '<table border="1">';
				echo '<tr>';
				while($aa = mysql_fetch_array($a)){
					echo '<td><img src="'.loader('c_images').'Badges/'.$aa['badge'].'.gif"><br><b>'.$aa['badge'].'</b></td>';
					if($i == "10"){
						echo '</tr>';
						echo '<tr>';
					}
				$i++;
				}
				echo '</tr>';
				echo '</table>';
			}
			echo '<br><br>';
			echo '<b>'.role('3').'</b><br>';
			$a = mysql_query("SELECT * FROM users_roles_badges WHERE minrole = 3");
			if(mysql_num_rows($a) < 1){
				echo 'Deze rank heeft geen badges.';
			}else{
				$i = 1;
				echo '<table border="1">';
				echo '<tr>';
				while($aa = mysql_fetch_array($a)){
					echo '<td><img src="'.loader('c_images').'Badges/'.$aa['badge'].'.gif"><br><b>'.$aa['badge'].'</b></td>';
					if($i == "10"){
						echo '</tr>';
						echo '<tr>';
					}
				$i++;
				}
				echo '</tr>';
				echo '</table>';
			}
			echo '<br><br>';
			echo '<b>'.role('2').'</b><br>';
			$a = mysql_query("SELECT * FROM users_roles_badges WHERE minrole = 2");
			if(mysql_num_rows($a) < 1){
				echo 'Deze rank heeft geen badges.';
			}else{
				$i = 1;
				echo '<table border="1">';
				echo '<tr>';
				while($aa = mysql_fetch_array($a)){
					echo '<td><img src="'.loader('c_images').'Badges/'.$aa['badge'].'.gif"><br><b>'.$aa['badge'].'</b></td>';
					if($i == "10"){
						echo '</tr>';
						echo '<tr>';
					}
				$i++;
				}
				echo '</tr>';
				echo '</table>';
			}
			echo '<br><br>';
			echo '<b>'.role('1').'</b><br>';
			$a = mysql_query("SELECT * FROM users_roles_badges WHERE minrole = 1");
			if(mysql_num_rows($a) < 1){
				echo 'Deze rank heeft geen badges.';
			}else{
				$i = 1;
				echo '<table border="1">';
				echo '<tr>';
				while($aa = mysql_fetch_array($a)){
					echo '<td><img src="'.loader('c_images').'Badges/'.$aa['badge'].'.gif"><br><b>'.$aa['badge'].'</b></td>';
					if($i == "10"){
						echo '</tr>';
						echo '<tr>';
					}
				$i++;
				}
				echo '</tr>';
				echo '</table>';
			}
			echo '<br><br>';
			echo '<b>'.role('0').'</b><br>';
			$a = mysql_query("SELECT * FROM users_roles_badges WHERE minrole = 0");
			if(mysql_num_rows($a) < 1){
				echo 'Deze rank heeft geen badges.';
			}else{
				$i = 1;
				echo '<table border="1">';
				echo '<tr>';
				while($aa = mysql_fetch_array($a)){
					echo '<td><img src="'.loader('c_images').'Badges/'.$aa['badge'].'.gif"><br><b>'.$aa['badge'].'</b></td>';
					if($i == "10"){
						echo '</tr>';
						echo '<tr>';
					}
				$i++;
				}
				echo '</tr>';
				echo '</table>';
			}
		}elseif($_GET['type'] == "user"){
			echo '<b>Gebruiker Badges</b>:<br>';
			$a = mysql_query("SELECT * FROM users_badges ORDER BY userid");
			if(mysql_num_rows($a) < 1){
				echo 'Er zijn geen gebruiker badges.';
			}else{
				$i = 1;
				echo '<table border="1">';
				echo '<tr>';
				$oudid = '';
				while($aa = mysql_fetch_array($a)){
					echo '<td><img src="'.loader('c_images').'Badges/'.$aa['badge'].'.gif"><br><b>'.$aa['badge'].'</b><br>'.gebruiker($aa['userid']).'</td>';
					if($oudid == ''){
						$oudid = $aa['userid'];
					}else{
						if($oudid != $aa['userid']){
							echo '</tr>';
							echo '<tr>';
							$oudid = $aa['userid'];
						}else{
							$oudid = $aa['userid'];
						}
					}
					$i++;
				}
				echo '</tr>';
				echo '</table>';
			}
		}else{
			echo '<a href="./badges.php?do=show&type=rank" target="_self">Rank badges</a><br>';
			echo '<a href="./badges.php?do=show&type=user" target="_self">Gebruiker badges</a>';
		}
	}else{
		echo $acc_denied;
	}
}elseif($_GET['do'] == "give"){
	if(min_fuse('housekeeping_badges_management', $my_id)){
		if($_POST['submit']){
			$aaa = mysql_query("SELECT * FROM users WHERE username = '".beveilig($_POST['username'])."' LIMIT 1");
			if(mysql_num_rows($aaa) < 1){
				echo 'Deze gebruiker bestaat niet';
			}elseif(empty($_POST['badgeid'])){
				echo 'Vul een badge ID in...';
			}elseif(strlen($_POST['badgeid']) > 3){
				echo 'Dit is niet een badge ID...';
			}else{
				$aac = mysql_fetch_array($aaa);
				$aab = mysql_query("SELECT * FROM users_badges WHERE badge = '".$_POST['bagdeid']."'");
				if(mysql_num_rows($aab) > 0){
					echo 'Deze gebruiker heeft deze badge al!';
				}else{
					mysql_query("INSERT INTO users_badges (userid, badge) VALUES ('".beveilig($aac['id'])."', '".beveilig($_POST['badgeid'])."')");
					SendData("52".chr('1').$cc['id'], false, 1);
					echo 'De badge: '.$_POST['badgeid'].' is gegeven aan: '.$aac['username'];
					logboek('badge: '.$_POST['badgeid'].' is gegeven aan: '.$aac['username'], 'lol');
				}
			}
		}else{
			echo '<form method="post" method="./badges.php?do=give">';
			echo 'Gebruiker: <input type="text" name="username"><br>';
			echo 'Badge ID: <input type="text" name="badgeid"><br>';
			echo '<input type="submit" name="submit" value="Geef badge">';
			echo '</form>';
		}
	}else{
		echo $acc_denied;
	}
}elseif($_GET['do'] == "delete"){
	if(min_fuse('housekeeping_badges_management', $my_id)){
		if($_GET['user']){
			if($_GET['delete']){
				$aaaa = mysql_query("SELECT * FROM users_badges WHERE userid = '".beveilig($_GET['user'])."' AND badge = '".beveilig($_GET['delete'])."' LIMIT 1");
				if(mysql_num_rows($aaaa) < 1){
					echo 'Deze gebruiker heeft deze badge niet!';
				}else{
					mysql_query("DELETE FROM users_badges WHERE userid = '".beveilig($_GET['user'])."' AND badge = '".beveilig($_GET['delete'])."' LIMIT 1");
					SendData("52".chr('1').$cc['id'], false, 1);
					logboek("badge ".$_GET['delete']." is verwijderd van ".gebruiker($_GET['user']), "lol");
					echo 'Je hebt de badge verwijderd van de gebruiker.';
				}
			}else{
				$aac = mysql_query("SELECT * FROM users WHERE id = '".beveilig($_GET['user'])."'");
				if(mysql_num_rows($aac) < 1){
					echo 'Deze gebruiker bestaat niet';
				}else{
					$aao = mysql_fetch_array($aac);
					echo '<b>De volgende badges zijn van: '.$aao['username'].'</b><br><br>';
					$a = mysql_query("SELECT * FROM users_badges WHERE userid = '".beveilig($_GET['user'])."'");
					echo '<table border="1">';
					echo '<tr>';
					echo '<td><b>Badge</b></td>';
					echo '<td><b>Verwijder</b></td>';
					echo '</tr>';
					while($b = mysql_fetch_assoc($a)){
						echo '<tr>';
						echo '<td><img src="'.loader('c_images').'Badges/'.$b['badge'].'.gif"><br><b>'.$b['badge'].'</td>';
						echo '<td><a href="./badges.php?do=delete&user='.$_GET['user'].'&delete='.$b['badge'].'" target="_self"><img src="images/delete.gif" border="0"></a></td>';
						echo '</tr>';
					}
				echo '</table>';
				}
			}
		}else{
			if($_GET['search']){
				if(!empty($_GET['search'])){
					echo 'Van wie wil je een badge verwijderen?<br><br>';
					//$a = mysql_query("SELECT * FROM users ORDER by id");
					$a = mysql_query("SELECT * FROM users WHERE username LIKE '%".beveilig($_GET['search'])."%' ORDER BY id");
					if(mysql_num_rows($a) < 1){
						echo 'Geen gebruiker gevonden';
					}else{
						echo '<table border="1">';
						echo '<tr>';
						echo '<td><b>Naam</b></td>';
						echo '<td><b>Bekijk badges</b></td>';
						echo '</tr>';
						while($b = mysql_fetch_assoc($a)){
							echo '<tr>';
							echo '<td>'.$b['username'].'</td>';
							echo '<td><a href="./badges.php?do=delete&user='.$b['id'].'" target="_self"><img src="images/edit.gif" border="0"></a></td>';
							echo '</tr>';
						}
					echo '</table>';
					}
				}else{
					echo 'Geef een naam op om te zoeken';
				}
			}else{
				echo '<form method="get" action="./badges.php">';
				echo '<input type="hidden" name="do" value="delete">';
				echo 'Zoek gebruiker: <input type="text" name="search">';
				echo '<input type="submit" value="Search">';
				echo '</form>';
			}
		}
	}else{
		echo $acc_denied;
	}
}else{
	echo $acc_denied;
}
include('inc/footer.php');
?>