<?php
  include("config.php");
$dbres = mysql_query("SELECT *,UNIX_TIMESTAMP(`pc`) AS `pc`,UNIX_TIMESTAMP(`transport`) AS `transport`,UNIX_TIMESTAMP(`bc`) AS `bc`,UNIX_TIMESTAMP(`slaap`) AS `slaap`,UNIX_TIMESTAMP(`kc`) AS `kc`,UNIX_TIMESTAMP(`start`) AS `start`,UNIX_TIMESTAMP(`crime`) AS `crime`,UNIX_TIMESTAMP(`ac`) AS `ac` FROM `users` WHERE `login`='{$_SESSION['login']}'");  
$data    = mysql_fetch_object($dbres);
  if(! check_login()) {
    header('Location: login.php');
    exit;
    }
?>
<head>
<title>Vendetta</title>
<link href="style.css" rel="stylesheet" type="text/css" />
</head>
<?php
if ($_POST['donate'] && $_POST['waar'] == persoon && $data->famrang >=3 && $data->famrang != 4) {
$_POST['obedrag']= str_replace(",","",$_POST['obedrag']);
$famillie = mysql_fetch_object(mysql_query("SELECT * FROM `famillie` WHERE `name`='{$data->famillie}'"));
$query = mysql_query("SELECT * FROM `users` WHERE `login`='{$_POST['naar']}'");
$res = mysql_fetch_object($query);
$naar = strtolower($_POST['naar']);
$van = strtolower($famillie->name);
if(!preg_match('/^[0-9]+$/',$_POST['obedrag'])){echo"Ongeldig bedrag.";}
elseif ($famillie->bank < $_POST['obedrag']) { print "Zoveel kogels staan niet op de familiebank."; }
elseif ($_POST['obedrag'] <= 0) { print "Zoveel kogels staan niet op de familie kogelbank."; } 
elseif (!$res->login) { print "Deze gebruiker bestaat niet."; } 
elseif ($res->status == dood) { print "Deze gebruiker is dood."; } 
elseif ($van == $naar) { print "Je kan niet aan je eigen familie doneren."; } 
else {
mysql_query("INSERT INTO `logs`(`time`,`login`,`person`,`code`,`area`,`com`) values(NOW(),'{$_POST['naar']}','{$van}','-{$_POST['obedrag']}','cdonate','{$_POST['com']}')");
mysql_query("UPDATE `famillie` SET `kogelbank`=`kogelbank`-{$_POST['obedrag']} WHERE `name`='{$data->famillie}'");
mysql_query("UPDATE `users` SET `kogels`=`kogels`+{$_POST['obedrag']} WHERE `login`='{$res->login}'");
print"De kogels zijn verzonden.";
}
}
elseif ($_POST['donate'] && $_POST['waar'] == fam) {
$_POST['obedrag']= str_replace(",","",$_POST['obedrag']);
$famillie = mysql_fetch_object(mysql_query("SELECT * FROM `famillie` WHERE `name`='{$data->famillie}'"));
$bedrag = $_POST['obedrag'];
$naar = $_POST['naar'];
$van = strtolower($famillie->name);
$query = mysql_query("SELECT * FROM `famillie` WHERE `name`='$naar'");
$res = mysql_fetch_object($query);
if(!preg_match('/^[0-9]+$/',$_POST['obedrag'])){echo"Ongeldig kogelaantal.";}
elseif ($famillie->bank < $_POST['obedrag']) { print "Zoveel kogels staan er niet op de familie kogelbank."; }
elseif ($_POST['obedrag'] <= 0) { print "Zoveel kogels staan er niet op de familie kogelbank."; } 
elseif (!$res->name) { print "Deze familie bestaat niet."; } 
else {
mysql_query("INSERT INTO `logs`(`time`,`login`,`person`,`code`,`area`,`com`) values(NOW(),'{$famillie->name}','{$res->name}','{$bedrag}','cdonate','{$_POST['com']}')");
mysql_query("INSERT INTO `logs`(`time`,`login`,`person`,`code`,`area`,`com`) values(NOW(),'{$naar}','{$famillie->name}','-{$_POST['obedrag']}','cdonate','{$_POST['com']}')");
mysql_query("UPDATE `famillie` SET `kogelbank`=`kogelbank`+$bedrag WHERE `name`='{$naar}'");
mysql_query("UPDATE `famillie` SET `kogelbank`=`kogelbank`-{$_POST['obedrag']} WHERE `name`='{$van}'");
print"Het geld is verzonden.";
  } 
  }
$bank = number_format($famillie->kogelbank);
if ($data->famrang == 5) 
    print <<<ENDHTML
<tr> 
    <td class=subTitle><b>Familiebank</b></td>
  </tr>
  <tr><td>&nbsp;&nbsp;</td></tr>
  <tr> 
    <td class=mainTxt>
	<table width=50% align=center><tr><td width=50% align=right>In familie kogelbank:</td><td align=left>{$bank} kogels!!</td></tr>
	<form method="post"><table align="center">
	  <tr><td align="right">Naar:<input type="text" name="naar" maxlength="16"></td></tr>
	  <br><tr><td align="right">Kogels in kogelbank:<input type=text name="obedrag" value=""  maxlength=9></td></tr>
	  <tr><td align="right">Beschrijving:<input type=text name="com" value=""></td></tr>
	  <br><tr><td align="right"><input type=radio name=waar value=persoon checked>Persoon&nbsp;&nbsp;<input type=radio name=waar value=fam>Familie</td></tr>
  	  <tr><td>&nbsp;</td></tr>
	  <tr><td align="center"><input type=submit name=donate value=Ok></td></tr>
	</table></form>
  </td></tr>
</table></td></tr>
ENDHTML;
?>