<?php

/**
 * paneladmina.php
 *
 * @version 1.0s - Security checked for SQL-injection by Gorlum for http://supernova.ws
 * @version 1.0
 * @copyright 2008 by ??????? for XNova
 */

define('INSIDE'  , true);
define('INSTALL' , false);
define('IN_ADMIN', true);

require('../common.' . substr(strrchr(__FILE__, '.'), 1));

if($user['authlevel'] < 3)
{
  AdminMessage($lang['adm_err_denied']);
}

$GET_action = sys_get_param_str('action');
$GET_result = sys_get_param_str('result');
$Pattern    = sys_get_param_str('player');
$NewLvl     = intval($_GET['authlvl']);
$ip         = sys_get_param_str('ip');

$PanelMainTPL = gettemplate('admin/admin_panel_main');

$parse                  = $lang;
$parse['adm_sub_form1'] = "";
$parse['adm_sub_form2'] = "";
$parse['adm_sub_form3'] = "";

// Afficher les templates
if (isset($GET_result)) {
  switch ($GET_result){
    case 'usr_search':
      $SelUser = doquery("SELECT * FROM {{users}} WHERE `username` LIKE '%". $Pattern ."%' LIMIT 1;", '', true);
      $UsrMain = doquery("SELECT `name` FROM {{planets}} WHERE `id` = '". $SelUser['id_planet'] ."';", '', true);

      $bloc                   = $lang;
      $bloc['answer1']        = $SelUser['id'];
      $bloc['answer2']        = $SelUser['username'];
      $bloc['answer3']        = $SelUser['user_lastip'];
      $bloc['answer4']        = $SelUser['email'];
      $bloc['answer5']        = $lang['adm_usr_level'][ $SelUser['authlevel'] ];
      $bloc['answer6']        = $lang['adm_usr_genre'][ $SelUser['sex'] ];
      $bloc['answer7']        = "[".$SelUser['id_planet']."] ".$UsrMain['name'];
      $bloc['answer8']        = "[".$SelUser['galaxy'].":".$SelUser['system'].":".$SelUser['planet']."] ";
      $bloc['qst_quest_complete'] = get_quest_amount_complete($SelUser['id']);
      $bloc['user_id'] = $SelUser['id'];
      $SubPanelTPL            = gettemplate('admin/admin_panel_asw1');
      $parse['adm_sub_form2'] = parsetemplate( $SubPanelTPL, $bloc );
      break;

    case 'usr_data':
      $SelUser = doquery("SELECT * FROM {{users}} WHERE `username` LIKE '%". $Pattern ."%' LIMIT 1;", '', true);
      $UsrMain = doquery("SELECT `name` FROM {{planets}} WHERE `id` = '". $SelUser['id_planet'] ."';", '', true);

      $bloc                    = $lang;
      $bloc['answer1']         = $SelUser['id'];
      $bloc['answer2']         = $SelUser['username'];
      $bloc['answer3']         = $SelUser['user_lastip'];
      $bloc['answer4']         = $SelUser['email'];
      $bloc['answer5']         = $lang['adm_usr_level'][ $SelUser['authlevel'] ];
      $bloc['answer6']         = $lang['adm_usr_genre'][ $SelUser['sex'] ];
      $bloc['answer7']         = "[".$SelUser['id_planet']."] ".$UsrMain['name'];
      $bloc['answer8']         = "[".$SelUser['galaxy'].":".$SelUser['system'].":".$SelUser['planet']."] ";
      $bloc['qst_quest_complete'] = get_quest_amount_complete($SelUser['id']);
      $bloc['user_id'] = $SelUser['id'];
      $SubPanelTPL             = gettemplate('admin/admin_panel_asw1');
      $parse['adm_sub_form1']  = parsetemplate( $SubPanelTPL, $bloc );

      $parse['adm_sub_form2']  = "<table><tbody>";
      $parse['adm_sub_form2'] .= "<tr><td colspan=\"4\" class=\"c\">".$lang['adm_colony']."</td></tr>";
      $UsrColo = doquery("SELECT * FROM {{planets}} WHERE `id_owner` = '". $SelUser['id'] ." ORDER BY `galaxy` ASC, `planet` ASC, `system` ASC, `planet_type` ASC';");
      while ( $Colo = mysql_fetch_assoc($UsrColo) ) {
        if ($Colo['id'] != $SelUser['id_planet']) {
          $parse['adm_sub_form2'] .= "<tr><th>".$Colo['id']."</th>";
          $parse['adm_sub_form2'] .= "<th>". (($Colo['planet_type'] == 1) ? $lang['adm_planet'] : $lang['adm_moon'] ) ."</th>";
          $parse['adm_sub_form2'] .= "<th>[".$Colo['galaxy'].":".$Colo['system'].":".$Colo['planet']."]</th>";
          $parse['adm_sub_form2'] .= "<th>".$Colo['name']."</th></tr>";
        }
      }
      $parse['adm_sub_form2'] .= "</tbody></table>";

      $parse['adm_sub_form3']  = "<table><tbody>";
      $parse['adm_sub_form3'] .= "<tr><td colspan=\"4\" class=\"c\">".$lang['adm_technos']."</td></tr>";
      foreach($sn_data['groups']['tech'] as $Item)
      {
        $parse['adm_sub_form3'] .= "<tr><th>".$lang['tech'][$Item]."</th>";
        $parse['adm_sub_form3'] .= "<th>".$SelUser[$sn_data[$Item]['name']]."</th></tr>";
      }
      $parse['adm_sub_form3'] .= "</tbody></table>";
      break;

    case 'usr_level':

      # only for admins
      if ($user['authlevel'] < 3 || $NewLevel >= $user['authlevel'])
      {
        message($lang['sys_noalloaw'], $lang['sys_noaccess']);
        die();
      }

      $QryUpdate  = doquery("UPDATE {{users}} SET `authlevel` = '".$NewLvl."' WHERE `username` = '".$Pattern."';");
      $Message    = $lang['adm_mess_lvl1']. " ". $Pattern ." ".$lang['adm_mess_lvl2'];
      $Message   .= "<font color=\"red\">".$lang['adm_usr_level'][ $NewLvl ]."</font>!";

      AdminMessage ( $Message, $lang['adm_mod_level'] );
      break;

    case 'ip_search':
      $SelUser    = doquery("SELECT * FROM {{users}} WHERE `user_lastip` = '". $ip ."' LIMIT 10;");
      $bloc                   = $lang;
      $bloc['adm_this_ip']    = $ip;
      while ( $Usr = mysql_fetch_assoc($SelUser) ) {
        $UsrMain = doquery("SELECT `name` FROM {{planets}} WHERE `id` = '". $Usr['id_planet'] ."';", '', true);
        $bloc['adm_plyer_lst'] .= "<tr><th>".$Usr['username']."</th><th>[".$Usr['galaxy'].":".$Usr['system'].":".$Usr['planet']."] ".$UsrMain['name']."</th></tr>";
      }
      $SubPanelTPL            = gettemplate('admin/admin_panel_asw2');
      $parse['adm_sub_form2'] = parsetemplate( $SubPanelTPL, $bloc );
      break;
    default:
      break;
  }
}

// Traiter les reponses aux formulaires
if (isset($GET_action)) {
  $bloc                   = $lang;
  switch ($GET_action){
    case 'usr_search':
      $SubPanelTPL            = gettemplate('admin/admin_panel_frm1');
      break;

    case 'usr_data':
      $SubPanelTPL            = gettemplate('admin/admin_panel_frm4');
      break;

    case 'usr_level':
      # only for admins
      if ($user['authlevel'] != 3)
      {
        message($lang['sys_noalloaw'], $lang['sys_noaccess']);
        die();
      }


      for ($Lvl = 0; $Lvl < 4; $Lvl++) {
        $bloc['adm_level_lst'] .= "<option value=\"". $Lvl ."\">". $lang['adm_usr_level'][ $Lvl ] ."</option>";
      }
      $SubPanelTPL            = gettemplate('admin/admin_panel_frm3');
      break;

    case 'ip_search':
      $SubPanelTPL            = gettemplate('admin/admin_panel_frm2');
      break;

    default:
      break;
  }
  $parse['adm_sub_form2'] = parsetemplate( $SubPanelTPL, $bloc );
}

$page = parsetemplate( $PanelMainTPL, $parse );
display( $page, $lang['panel_mainttl'], false, '', true );
?>