<?php
/*##### ##### ##### ##### #####
#
# NPoints v1.5
# 08.01.2007
# PragmaMX Username: Nouvelle
#
##### ##### ##### ##### #####*/


if (!defined("mxAdminFileLoaded")) die("Access Denied");

if (!mxGetAdminPref('radminsuper')) {
    mxErrorScreen("Access Denied");
    die();
}

/*##### ##### ##### ##### #####*/
function NPoints($page, $plus, $uid, $npoints, $error, $module, $betreff)
	{
	global $prefix;
	if ($page=="go")
		{
		$error="";
		if ($uid==0)
			{
			$error.="<li><font color=\"#FF0000\"><b>Bitte einen User auswählen!</b></font><br>";
			}
		if ($npoints==0)
			{
			$error.="<li><font color=\"#FF0000\"><b>Der Punktewert darf nicht NULL sein!</b></font><br>";
			}				
		if ($error=="" AND $uid>1)
			{			
			sql_query("UPDATE ".$prefix."_users SET npoints=npoints".$plus."".$npoints." WHERE uid='".$uid."'");
			sql_query("INSERT INTO ".$prefix."_buchungen SET id='', user_id='".$uid."', zeit='".time()."', betrag='".$plus."".$npoints."', module='".$module."', betreff='".$betreff."'");	
			$error.="<li><font color=\"#009900\"><b>Dem User wurde Erfogreich ".$plus."".$npoints." Punkten vergeben!</b></font><br>";
			}
		if ($error=="" AND $uid==1)
			{
			$num=0;
			$np_u_lesen = sql_query("SELECT uid FROM ".$prefix."_users WHERE uid>1");
			while (list($np_u_uid) = sql_fetch_row($np_u_lesen))
				{
				$num++;
				sql_query("UPDATE ".$prefix."_users SET npoints=npoints".$plus."".$npoints." WHERE uid='".$np_u_uid."'");
				sql_query("INSERT INTO ".$prefix."_buchungen SET id='', user_id='".$np_u_uid."', zeit='".time()."', betrag='".$plus."".$npoints."', module='".$module."', betreff='".$betreff."'");
				}
			$error.="<li><font color=\"#009900\"><b>".$num." User Erfogreich ".$plus."".$npoints." Punkte vergeben!</b></font><br>";
			}
		}
	include("header.php");
	GraphicAdmin();
	title("NPoints - Administration");
	OpenTable();
	if ($error!="")
		{
		OpenTable();
		echo $error;
		CloseTable();
		}
	echo"<form action=\"admin.php\" method=\"post\">";
	echo"<input type=\"hidden\" name=\"op\" value=\"NPoints\">";
	echo"<table border=\"0\" cellspacing=\"0\" cellpadding=\"3\" width=\"100%\">
	<tr>
	<td colspan=\"5\"><b>- Bitte nur ganze Zahlen, und kein Komma benutzten!<br>
	- Der Betreff kann leer sein.</b></td>
	</tr>
	<tr>
	<td colspan=\"5\"><hr></td>
	</tr>
	<tr>
	<td><b>User</b></td>
	<td><b>Modul</b></td>
	<td><b>Punkte</b></td>
	<td><b>Betreff</b></td>
	<td>&nbsp;</td>
	</tr>
	<tr>";
	## User
	echo"<td><select name=\"uid\">
	<option value=\"0\">-User-</option>
	<option value=\"1\"";
	if ($uid==1)
		{
		echo" selected";
		}
	echo">-ALLE USER-</option>";
	$npoints_lesen = sql_query("SELECT uid, uname FROM ".$prefix."_users WHERE uid>1 ORDER BY uname");
	while (list($users_uid, $users_uname) = sql_fetch_row($npoints_lesen))
		{
		echo"<option value=\"".$users_uid."\"";
		if ($uid==$users_uid)
			{
			echo" selected";
			}
		echo">".$users_uname."</option>";
		}
	echo"</select></td>";
	## Modules
	echo"<td><select name=\"module\">";
	$npoints_module_lesen = sql_query("SELECT title, custom_title FROM ".$prefix."_modules WHERE active='1' ORDER BY custom_title");
	while (list($modules_title, $modules_custom_title) = sql_fetch_row($npoints_module_lesen))
		{
		echo"<option value=\"".$modules_custom_title."\"";
		if ($module==$modules_custom_title)
			{
			echo" selected";
			}
		echo">".$modules_custom_title." (".$modules_title.")</option>";
		}
	echo"</select></td>";
	## Plus und Minus
	echo"<td><select name=\"plus\">
		<option value=\"+\"";
		if ($plus=="+")
			{
			echo" selected";
			}
		echo">Plus</option>
		<option value=\"-\"";
		if ($plus=="-")
			{
			echo" selected";
			}
		echo">Minus</option>
	</select>&nbsp;";
	## Punkte
	echo"<input type=\"text\" name=\"npoints\" size=\"10\" maxlength=\"10\" value=\"".$npoints."\"></td>";
	## Betreff
	echo"<td><input type=\"text\" name=\"betreff\" size=\"15\" maxlength=\"15\" value=\"".$betreff."\"></td>
	<td><input type=\"submit\" name=\"page\" value=\"go\"></td>
	</tr>
	</table>";
	echo"</form>";
	CloseTable();
	echo"<br>";
	## Buchungen
	OpenTable();
	echo"<table border=\"0\" cellspacing=\"0\" cellpadding=\"3\" width=\"100%\">
	<tr>
	<td colspan=\"6\"><b>Die letzten 200 Buchungen</b></td>
	</tr>
	<tr>
	<td align=\"center\"><b>ID</b></td>
	<td align=\"left\"><b>Username</b></td>	
	<td align=\"center\"><b>Zeit</b></td>
	<td align=\"right\"><b>Punkte</b></td>
	<td align=\"left\"><b>Modul</b></td>
	<td align=\"left\"><b>Betreff</b></td>
	</tr>";
	$np_b_lesen = sql_query("SELECT id, user_id, zeit, betrag, module, betreff FROM ".$prefix."_buchungen ORDER BY id DESC LIMIT 200");
	while (list($np_b_id, $np_b_user_id, $np_b_zeit, $np_b_betrag, $np_b_module, $np_b_betreff) = sql_fetch_row($np_b_lesen))
		{
		echo"<tr>
		<td align=\"center\">".$np_b_id."</td>";
		list($np_u_uname) = sql_fetch_row(sql_query("SELECT uname FROM ".$prefix."_users WHERE uid='".$np_b_user_id."'"));
		echo"<td align=\"left\">".$np_u_uname."</td>
		<td align=\"center\">".date("d.m.y - H:i:s", $np_b_zeit)."</td>
		<td align=\"right\">".number_format($np_b_betrag,0,",",".")."</td>
		<td align=\"left\">".$np_b_module."</td>
		<td align=\"left\">".$np_b_betreff."</td>
		</tr>";
		}
	echo"</table>";
	CloseTable();
	echo"<div align=\"right\"><small>NPoints v1.5 &copy; 2007 Nouvelle</small></div>";
	include ("footer.php");
	}

switch ($op)
	{
	case "NPoints":
	$page		= (isset($_POST['page']))		? ($_POST['page'])				: '1';
	$plus		= (isset($_POST['plus']))		? ($_POST['plus'])				: '+';
	$uid		= (isset($_POST['uid']))		? ($_POST['uid'])				: 0;
	$npoints	= (isset($_POST['npoints']))	? (round($_POST['npoints']))	: 0;
	$error		= (isset($_POST['error']))		? ($_POST['error'])				: '';
	$module		= (isset($_POST['module']))		? ($_POST['module'])			: 0;
	$betreff	= (isset($_POST['betreff']))	? ($_POST['betreff'])			: 0;
	NPoints($page, $plus, $uid, $npoints, $error, $module, $betreff);
	break;	
	} 

?>