rendered paste body<?php
define('PUN_ROOT', './');
require PUN_ROOT.'include/common.php';
require PUN_ROOT.'lang/'.$pun_user['language'].'/cash.php';
if ($pun_user['is_guest'])
message($lang_common['No view']);
$page_title = pun_htmlspecialchars($pun_config['o_board_title'].' - '.$lang_common['Shop']);
define('PUN_ALLOW_INDEX', 1);
require PUN_ROOT.'header.php';
$action = isset($_GET['action']) ? $_GET['action'] : 'main';
$userid = isset($_GET['userid']) ? intval($_GET['userid']) : 0;
switch($action)
{
case 'do_donate':
$amount = abs(intval($_POST['amount']));
if($pun_user['cm_cash'] < $amount)
message("Sorry, you don't have enough cash.");
$db->query("UPDATE ".$db->prefix."users SET cm_cash = cm_cash - ".$amount." WHERE id = ".$pun_user['id']) or error('Unable to update user information', __FILE__, __LINE__, $db->error());
$db->query("UPDATE ".$db->prefix."users SET cm_cash = cm_cash + ".$amount." WHERE id = ".$userid) or error('Unable to update user information', __FILE__, __LINE__, $db->error());
message("The cash has been transferred to the selected user.");
break;
case 'do_buy_title':
$title = $db->escape($_POST['new_title']);
if($pun_user['cm_cash'] < 1000)
message("Sorry, you don't have enough cash.");
$db->query("UPDATE ".$db->prefix."users SET title = '".$title."', cm_cash = cm_cash - 1000 WHERE id = ".$pun_user['id']) or error('Unable to update user information', __FILE__, __LINE__, $db->error());
message("Your user title has been changed");
break;
case 'do_buy_title2':
$title = $db->escape($_POST['new_title']);
if($pun_user['cm_cash'] < 10000)
message("Sorry, you don't have enough cash.");
$db->query("UPDATE ".$db->prefix."users SET cm_cash = cm_cash - 10000 WHERE id = ".$pun_user['id']) or error('Unable to update user information', __FILE__, __LINE__, $db->error());
$db->query("UPDATE ".$db->prefix."users SET title = '".$title."' WHERE id = ".$userid) or error('Unable to update user information', __FILE__, __LINE__, $db->error());
message("The title of the user you selected has been changed.");
break;
case 'do_buy_postcount':
$title = $db->escape($_POST['submit']);
if($pun_user['cm_cash'] < 5000)
message("Sorry, you don't have enough cash.");
$db->query("UPDATE ".$db->prefix."users SET cm_cash = cm_cash - 5000 WHERE id = ".$pun_user['id']) or error('Unable to update user infomation', __FILE__, __LINE__, $db->error());
$db->query("UPDATE ".$db->prefix."users SET num_posts = num_posts + 15 WHERE id =".$pun_user['id']) or error('Unable to update user information', __FILE__, __LINE__, $db->error());
message("Your post count had been changed.");
break;
case 'do_buy_vip':
$title = $db->escape($_POST['submit']);
if($pun_user['cm_cash'] < 50000)
message("Sorry, you don't have enough cash.");
$db->query("UPDATE ".$db->prefix."users SET cm_cash = cm_cash - 50000 WHERE id = ".$pun_user['id']) or error('Unable to update user information....', __FILE__, __LINE__, $db->error());
$db->query("UPDATE ".$db->prefix."users SET group_id = 5 WHERE id = ".$userid) or error('Unable to update user information', __FILE__, __LINE__, $db->error());
message("Your user group has been changed to VIP.");
break;
case 'main':
default:
?>
<div id="bank" class="blockform">
<h2 class="block2"><span>Donate</span></h2>
<div class="box">
<form id="bank" method="post" action="shop.php?action=do_donate">
<div class="inform">
<fieldset>
<legend><?php echo $lang_cash['Select_user_amount']; ?></legend>
<div class="infldset">
<label><?php echo $lang_common['Username']; ?>:<br />
<select name="userid">
<?php
$result = $db->query("SELECT id, username FROM ".$db->prefix."users WHERE group_id != ".PUN_UNVERIFIED." AND group_id != ".PUN_GUEST) or error('Unable to fetch user information', __FILE__, __LINE__, $db->error());;
while($row = mysql_fetch_assoc($result))
echo '<option value="'.$row['id'].'">'.$row['username']."</option>\n";
?>
</select></label><br />
<label>Amount:<br />
<input type="text" name="amount" /></label><br />
<input type="submit" name="submit" value="<?php echo $lang_common['Donate']; ?>" />
</div>
</fieldset>
</div>
</form>
</div>
</div>
<div id="bank" class="blockform">
<h2 class="block2"><span>Buy a new title</span></h2>
<div class="box">
<form id="bank" method="post" action="shop.php?action=do_buy_title">
<div class="inform">
<fieldset>
<legend>Enter a new title</legend>
<div class="infldset">
<?php
echo ucwords($pun_config['cm_cur_name']).': '.number_format($pun_user['cm_cash'])."<br />\n";
echo 'Cost: 1,000 '.ucwords($pun_config['cm_cur_name'])."<br />\n";
?>
<label>New title:<br />
<input type="text" name="new_title" /></label><br />
<input type="submit" name="submit" value="Buy" />
</div>
</fieldset>
</div>
</form>
</div>
</div>
<div id="bank" class="blockform">
<h2 class="block2"><span>Buy another user a new title</span></h2>
<div class="box">
<form id="bank" method="post" action="shop.php?action=do_buy_title2">
<div class="inform">
<fieldset>
<legend>Enter a new title</legend>
<div class="infldset">
<?php
echo ucwords($pun_config['cm_cur_name']).': '.number_format($pun_user['cm_cash'])."<br />\n";
echo 'Cost: 10,000 '.ucwords($pun_config['cm_cur_name'])."<br />\n";
?>
<label>Who's title to change:<br />
<select name="userid">
<?php
$result = $db->query("SELECT id, username FROM ".$db->prefix."users WHERE group_id != ".PUN_UNVERIFIED." AND group_id != ".PUN_GUEST." AND id != ".$pun_user['id']) or error('Unable to fetch user information', __FILE__, __LINE__, $db->error());
while($row = mysql_fetch_assoc($result))
echo '<option value="'.$row['id'].'">'.$row['username']."</option>\n";
?>
</select></label><br />
<label>New title:<br />
<input type="text" name="new_title" /></label><br />
<input type="submit" name="submit" value="Buy" />
</div>
</fieldset>
</div>
</form>
</div>
</div>
<div id="bank" class="blockform">
<h2 class="block2"><span>Increase post count by 15</span></h2>
<div class="box">
<form id="bank" method="post" action="shop.php?action=do_buy_postcount">
<div class="inform">
<fieldset>
<legend>Increase Post count</legend>
<div class="infldset">
<?php
echo ucwords($pun_config['cm_cur_name']).': '.number_format($pun_user['cm_cash'])."<br />\n";
echo 'Cost: 5,000 '.ucwords($pun_config['cm_cur_name'])."<br />\n";
?>
<label>Increase post count by 15<br />
<input type="submit" name="submit" value="Buy" />
</div>
</fieldset>
</div>
</form>
</div>
</div>
<div id="bank" class="blockform">
<h2 class="block2"><span>Change to VIP user group</span></h2>
<div class="box">
<form id="bank" method="post" action="shop.php?action=do_buy_vip">
<div class="inform">
<fieldset>
<legend>Change to a VIP</legend>
<div class="infldset">
<?php
echo ucwords($pun_config['cm_cur_name']).': '.number_format($pun_user['cm_cash'])."<br />\n";
echo 'Cost: 50,000 '.ucwords($pun_config['cm_cur_name'])."<br />\n";
?>
<label>Change to a VIP<br />
<input type="submit" name="submit" value="Buy" />
</div>
</fieldset>
</div>
</form>
</div>
</div>
<?php
break;
}
require PUN_ROOT.'footer.php';
?>