<?php
/************************************************************************
 * MXChange v0.2.1                                    Start: 11/23/2003 *
 * ===============                              Last change: 09/23/2004 *
 *                                                                      *
 * -------------------------------------------------------------------- *
 * File              : what-add_points.php                              *
 * -------------------------------------------------------------------- *
 * Short description : Add manually points to a user                    *
 * -------------------------------------------------------------------- *
 * Kurzbeschreibung  : Manuell einem Mitglied Punkte gutschreiben       *
 * -------------------------------------------------------------------- *
 *                                                                      *
 * -------------------------------------------------------------------- *
 * Copyright (c) 2003 - 2008 by Roland Haeder                           *
 * For more information visit: http://www.mxchange.org                  *
 *                                                                      *
 * This program is free software; you can redistribute it and/or modify *
 * it under the terms of the GNU General Public License as published by *
 * the Free Software Foundation; either version 2 of the License, or    *
 * (at your option) any later version.                                  *
 *                                                                      *
 * This program is distributed in the hope that it will be useful,      *
 * but WITHOUT ANY WARRANTY; without even the implied warranty of       *
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the        *
 * GNU General Public License for more details.                         *
 *                                                                      *
 * You should have received a copy of the GNU General Public License    *
 * along with this program; if not, write to the Free Software          *
 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston,               *
 * MA  02110-1301  USA                                                  *
 ************************************************************************/

// Some security stuff...
if ((!defined('__SECURITY')) || (!IS_ADMIN())) {
	$INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
	require($INC);
}

// Add description as navigation point
ADD_DESCR("admin", __FILE__);

// Fix a notice
if (!isset($_GET['u_id'])) $_GET['u_id'] = "";

if ($_GET['u_id'] == "all") {
	// Add points to all accounts
	if ((isset($_POST['ok'])) && ($_POST['points'] > 0)) {
		define('__POINTS_VALUE', $_POST['points']);
		$result_main = SQL_QUERY("SELECT userid FROM "._MYSQL_PREFIX."_user_data WHERE status='CONFIRMED' ORDER BY userid", __FILE__, __LINE__);
		while (list($uid) = SQL_FETCHROW($result_main)) {
			// User ID found in URL so we use this give him some credits
			$result = SQL_QUERY_ESC("SELECT surname, family, email FROM "._MYSQL_PREFIX."_user_data WHERE userid=%s AND status='CONFIRMED' LIMIT 1",
			 array(bigintval($uid)), __FILE__, __LINE__);
			if (SQL_NUMROWS($result) == 1) {
				// Selected user does exist
				list($sname, $fname, $email) = SQL_FETCHROW($result);
				SQL_FREERESULT($result);

				if ((isset($_POST['ok'])) && (!empty($_POST['points']))) {
					global $DEPTH;
					// Remove depth to prevent booking errors. This is a bad coding
					// practice, thats also why we need to write this project from
					// scratch...
					unset($DEPTH);

					// Ok, add points and send an email to him...
					ADD_POINTS_REFSYSTEM("admin_all", $uid, bigintval($_POST['points']), false, "0", false, "direct");

					// Prepare content
					$content = array(
						'text'   => SQL_ESCAPE($_POST['reason']),
						'points' => bigintval($_POST['points'])
					);

					// Load email template and send email away
					$msg = LOAD_EMAIL_TEMPLATE("add-points", $content, bigintval($uid));
					SEND_EMAIL(bigintval($uid), ADMIN_ADD_SUBJ, $msg);
				}
			}
		}

		// Free memory
		SQL_FREERESULT($result_main);

		// Output message
		LOAD_TEMPLATE("admin_settings_saved", false, ADMIN_ALL_POINTS_ADDED);
	} else {
		// Display form add points
		LOAD_TEMPLATE("admin_add_points_all");
	}
} elseif (!empty($_GET['u_id'])) {
	// User ID found in URL so we use this give him some credits
	$result = SQL_QUERY_ESC("SELECT surname, family, email FROM "._MYSQL_PREFIX."_user_data WHERE userid=%s AND status='CONFIRMED' LIMIT 1",
	 array(bigintval($_GET['u_id'])), __FILE__, __LINE__);
	if (SQL_NUMROWS($result) == 1) {
		// Selected user does exist
		list($sname, $fname, $email) = SQL_FETCHROW($result);
		SQL_FREERESULT($result);

		if ((isset($_POST['ok'])) && (!empty($_POST['points']))) {
			global $DEPTH;
			// Remove depth to prevent booking errors. This is a bad coding
			// practice, thats also why we need to write this project from
			// scratch...
			unset($DEPTH);

			// Ok, add points and send an email to him...
			ADD_POINTS_REFSYSTEM("admin_single", bigintval($_GET['u_id']), bigintval($_POST['points']), false, "0", false, "direct");

			// Prepare content
			$content = array(
				'text'   => SQL_ESCAPE($_POST['reason']),
				'points' => bigintval($_POST['points'])
			);

			// Message laden
			$msg = LOAD_EMAIL_TEMPLATE("add-points", $content, bigintval($_GET['u_id']));

			SEND_EMAIL(bigintval($_GET['u_id']), ADMIN_ADD_SUBJ, $msg);
			LOAD_TEMPLATE("admin_settings_saved", false, ADMIN_POINTS_ADDED);
		} else {
			// Opps, missing form here
			define('__USER_VALUE', "<A href=\"".CREATE_EMAIL_LINK($email, "user_data")."\">".$sname." ".$fname."</A>");
			define('__UID'       , bigintval($_GET['u_id']));
			LOAD_TEMPLATE("admin_add_points");
		}
	} else {
		// User not found!
		OUTPUT_HTML("<STRONG class=\"admin_failed\">".ADMIN_MEMBER_404_1.$_GET['u_id'].ADMIN_MEMBER_404_2."</STRONG>");
	}
} else {
	// Output selection form with all confirmed user accounts listed
	ADD_MEMBER_SELECTION_BOX("0", true);
}

//
?>