<?php
/*===================================================+
|| # Woodpecker Housekeeping
|+====================================================+
|| # Copyright © 2008 SuperFun. All rights reserved.
|| # http://www.superfunn.nl/
|+===================================================+
|| # Notice: This is free software.
|+===================================================+
|| # Versions.
|| # Housekeeping version: V3.5
|| # Version of this file: V1.2 (credits.php)
|+===================================================+
||
|| # Usage of this page:
|| # Credits & Vouchers management
||
|+===================================================*/

include('inc/header.php');
if($_GET['do'] == "givecredits"){
	if(min_fuse('housekeeping_credits_management', $my_id)){
		if($_POST['submit']){
		$aa = mysql_query("SELECT * FROM users WHERE username = '".beveilig($_POST['name'])."'");
			if(mysql_num_rows($aa) < 1){
				echo 'Deze gebruiker bestaat niet!';
			}elseif(empty($_POST['credits'])){
				echo 'Vul een aantal in.';
			}elseif(!is_numeric($_POST['credits'])){
				echo 'Credits zijn nummers';
			}else{
				$cc = mysql_fetch_array($aa);
				mysql_query("INSERT INTO users_creditlog (userid, moment, type, activity) VALUES ('".beveilig($cc['id'])."', NOW(), 'refunds', '".beveilig($add.$_POST['credits'])."')");
				$expiry = time() - 100;
				mysql_query("UPDATE users SET credits = credits + ".beveilig($_POST['credits'])." WHERE id = '".beveilig($cc['id'])."'");
				if(useronline($cc['id'])){
					SendData("53".chr('1').$cc['id'], true, 1);
				}
				echo 'Done!  '.$add.$_POST['credits'].' credits given to '.$_POST['name'];
				logboek("gaf ".$_POST['credits']." credits aan ".$_POST['name'], "lol");
			}
		}else{
		echo '<form method="post" action="./credits.php?do=givecredits">';
		echo 'User: <input type="text" name="name"><br>';
		echo 'Credit amount <input type="text" name="credits"><br>';
		echo '<input type="submit" name="submit" value="Give credits">';
		echo '</form>';
		}
	}else{
		echo $acc_denied;
	}
}elseif($_GET['do'] == "voucher"){
	if(min_fuse('housekeeping_credits_management', $my_id)){
		if($_POST['submit']){
			if(empty($_POST['code'])){
				echo 'Code veld is leegelaten';
			}elseif(empty($_POST['value'])){
				echo 'Aaantal veld is leegelaten';
			}elseif($_POST['type'] == "credits" AND !is_numeric($_POST['value'])){
				echo 'Credits zijn nummers';
			}elseif(mysql_num_rows(mysql_query("SELECT * FROM users_vouchers WHERE code = '".beveilig($_POST['code'])."'")) > 0){
				echo 'Deze credit code bestaat al.';
			}else{
				mysql_query("INSERT INTO users_vouchers (code, type, value, redeemer_userid) VALUES ('".beveilig($_POST['code'])."', '".beveilig($_POST['type'])."', '".beveilig($_POST['value'])."', '')");
				echo 'De credit code is toegevoegd.';
				logboek("heeft de creditscode ".$_POST['code']." toegevoegd", "lol");
			}
		}else{
			echo '<form method="post" action="./credits.php?do=voucher">';
			echo 'Code: <input type="text" name="code"><br>';
			echo 'Credits: <input type="radio" name="type" value="credits" CHECKED><br>';
			echo 'Item: <input type="radio" name="type" value="item"><br>';
			echo 'Value: <input type="text" name="value"><br>';
			echo '<input type="submit" name="submit" value="Make code">';
		}
	}else{
		echo $acc_denied;
	}
}elseif($_GET['do'] == "pendingvoucher"){
	if(min_fuse('housekeeping_credits_management', $my_id)){
		if($_GET['delete']){
		$lol1 = mysql_query("SELECT * FROM users_vouchers WHERE code = '".beveilig($_GET['delete'])."'");
		$lol2 = mysql_num_rows($lol1);
		$lol3 = mysql_fetch_array($lol1);
			if($lol2 < 1){
				echo 'Deze code bestaat niet!';
			}elseif(!empty($lol3['redeemer_userid'])){
				echo 'Deze code bestaat niet!';
			}else{
				mysql_query("DELETE FROM users_vouchers WHERE code = '".beveilig($_GET['delete'])."'");
				echo 'De creditcode: '.$_GET['delete'].' is verwijderd.';
				logboek("heeft creditcode ".beveilig($_GET['delete'])." verwijderd", "lol");
			}
		}else{
			echo '<table border="1">';
			echo '<tr>';
			echo '<td><b>Code</b></td>';
			echo '<td><b>Type</b></td>';
			echo '<td><b>Value</b></td>';
			echo '<td><b>Redeemed?</b></td>';
			echo '<td><b>Redeemed by</b></td>';
			echo '<td><b>Voucher Code</b></td>';
			echo '</tr>';
			$aa = mysql_query("SELECT * FROM users_vouchers ORDER BY redeemer_userid");
				while($bb = mysql_fetch_array($aa)){
				$lol = mysql_fetch_array(mysql_query("SELECT * FROM users WHERE id = '".$bb['redeemer_userid']."' LIMIT 1"));
				echo '<tr>';
				echo '<td>'.$bb['code'].'</td>';
				echo '<td>'.ucwords($bb['type']).'</td>';
				echo '<td>'.$bb['value'].'</td>';
					if(empty($bb['redeemer_userid'])){
					echo '<td>Nee</td>';
					}else{
					echo '<td>Ja</td>';
					}
					echo '<td>'.$lol['username'].'</td>';
				if(empty($bb['redeemer_userid'])){
					echo '<td><a href="./credits.php?do=pendingvoucher&delete='.$bb['code'].'" target="_self"><img src="images/delete.gif" border="0"></a></td>';
				}else{
					echo '<td><img src="images/delete_done.gif" border="0"></td>';
				}
					echo '</tr>';
				}
			echo '</table>';
		}
	}else{
		echo $acc_denied;
	}
}else{
	echo $acc_denied;
}
include('inc/footer.php');
?>