Jonge, ervaren webdeveloper! | Deadline: NVT

<?php
if(!defined("USER_IN"))
{
	header("Location: ../../index.php");
	die;
}
final class Shop
{
	private $productTypes;
	private $productTypeWords;


	public function __construct()
	{
		$this->productTypes =     array("book", "defence",     "attack", "quest",   "food",    "quidditch", "special");
		$this->productTypeWords = array("Boek", "Bescherming", "Wapen",  "Queeste", "Voedsel", "Zwerkbal",  "Overige");
	}


	private function stockList($shop)
	{
		$stock = gotosql("query", "SELECT * FROM stock WHERE shop = '" . $shop . "'")->fetchAll(PDO::FETCH_ASSOC);
		$GLOBALS['tpl']->define("STOCK", "categories/subcategories/general/tables/diagonalley_stocklist.tpl");
		$stocklist = false;
		foreach($stock as $shop)
		{
			$product = gotosql("query", "SELECT name, description, price, attack, defence, type, heal, level FROM products WHERE id = '" . $shop['product'] . "'")->fetch(PDO::FETCH_ASSOC);
			$product['type'] = str_replace($this->productTypes, $this->productTypeWords, $product['type']);
			$GLOBALS['tpl']->assign("{PRODUCT_NAME}", htmlspecialchars($product['name']));
			$GLOBALS['tpl']->assign("{STOCK}", $shop['stock_current']);
			$GLOBALS['tpl']->assign("{PRODUCT_DESC}", htmlspecialchars($product['description']));
			$GLOBALS['tpl']->assign("{PRICE}", currency_show($product['price']));
			$GLOBALS['tpl']->assign("{ATTACK}", $product['attack']);
			$GLOBALS['tpl']->assign("{DEFENCE}", $product['defence']);
			$GLOBALS['tpl']->assign("{TYPE}", $product['type']);
			$GLOBALS['tpl']->assign("{HEALING}", $product['heal']);
			$GLOBALS['tpl']->assign("{LEVEL}", $product['level']);
			$GLOBALS['tpl']->assign("{PRODUCT_ID}", $shop['id']);
			$stocklist .= "\r\n" . $GLOBALS['tpl']->parse("STOCK");
		}
		return $stocklist;
	}


	private function getShopProperties($shop)
	{
		return gotosql("query", "SELECT * FROM shops WHERE id = '" . $shop . "'")->fetch(PDO::FETCH_ASSOC);
	}


	private function verifyBuy($product)
	{
		if(empty($_POST['number']) || !ctype_digit($_POST['number']) || floor($_POST['number']) != $_POST['number'] || $_POST['number'] < 0)
		{
			throw new Exception("Er is geen geldig aantal opgegeven.");
		}


		if($product['price'] * $_POST['number'] > $GLOBALS['profile']['money'])
		{
			throw new Exception("Je hebt niet genoeg geld voor deze aankoop!");
		}


		if($product['stock'] - $_POST['number'] < 0)
		{
			throw new Exception("Zo veel heeft de winkel niet meer op voorraad!");
		}


		if($product['level'] > $GLOBALS['profile']['level'])
		{
			throw new Exception("Je moet minstens level " . $product['level'] . " zijn voor deze aanschaf!");
		}
	}


	public function buy($product, $shop)
	{
		$product = gotosql("query", "SELECT products.id, products.price, products.level, products.type, products.special_effect, stock.stock_current AS stock FROM products JOIN stock ON (stock.product = products.id) WHERE stock.id = '" . $product . "' AND stock.shop = '" . $shop . "'")->fetch(PDO::FETCH_ASSOC);
		try
		{
			$this->verifyBuy($product);
			if($product['type'] == "special")
				eval($product['special_effect']);
			else
			{
				gotosql("query", str_repeat("INSERT INTO items (product, owner) VALUES('" . $product['id'] . "', '" . $GLOBALS['profile']['id'] . "');", $_POST['number']));
			}


			gotosql("exec", "UPDATE users SET money = money - '" . ($product['price'] * $_POST['number']) . "' WHERE id = '" . $GLOBALS['profile']['id'] . "'");
			gotosql("exec", "UPDATE stock SET stock_current = stock_current - '" . $_POST['number'] . "' WHERE id = '" . $shop . "'");


			$GLOBALS['tpl']->assign("{MONEY}", currency_show($GLOBALS['profile']['money'] - $product['price'] * $_POST['number'], false));
			$GLOBALS['tpl']->assign("{MESSAGE}", '{MESSAGE="Je hebt het product gekocht. Het heeft je ' . currency_show($product['price'] * $_POST['number'], false) . ' gekost!"}');
		}
		catch(Exception $e)
		{
			$GLOBALS['tpl']->assign("{MESSAGE}", '{ERROR="' . $e->getmessage() . '"}');
		}
	}


	public function getShops()
	{
		return gotosql("query", "SELECT * FROM shops")->fetchAll(PDO::FETCH_ASSOC);
	}


	public function shopTable($shops)
	{
		$GLOBALS['tpl']->define("SHOP", "categories/subcategories/general/tables/diagonalley.tpl");
		$diagonalley = false;
		foreach($shops as $shop)
		{
			$GLOBALS['tpl']->assign("{IMAGE}", $shop['image']);
			$GLOBALS['tpl']->assign("{NAME}", htmlspecialchars($shop['name']));
			$GLOBALS['tpl']->assign("{SHOPID}", $shop['id']);
			$GLOBALS['tpl']->assign("{DESC}", htmlspecialchars($shop['description']));
			$diagonalley .= "\r\n" . $GLOBALS['tpl']->parse("SHOP");
		}
		return $diagonalley;
	}


	public function visitShop($shop)
	{
		$shop = $this->getShopProperties($shop);
		if($shop)
		{
			$GLOBALS['tpl']->define("SHOPS", "categories/diagonalley/shop.tpl");
			$GLOBALS['tpl']->assign("{SHOP_NAME}", htmlspecialchars($shop['name']));
			$GLOBALS['tpl']->assign("{SHOP_DESCRIPTION}", htmlspecialchars($shop['description']));
			$GLOBALS['tpl']->assign("{SHOP_PRODUCTS}", $this->stockList($shop['id']));
			return $GLOBALS['tpl']->parse("SHOPS");
		}
		else
			return false;
	}
}