<?php

session_start();
session_register(SESSION);

// Check for login 

if ((!isset($_SESSION['user_id'])) || ($_SESSION['access'] < 2)) {
	if (!isset($_SESSION['user_id'])) {
		$_SESSION['redirect_page'] = "http://" . $_SERVER['SERVER_NAME'] . $_SERVER['SCRIPT_NAME'] . "?" . $_SERVER['QUERY_STRING'];
	} else {
		$_SESSION['error_msg'] = "You do not have the right access level to access this page.";	
	}
	header("Location: http://" . $_SERVER['SERVER_NAME'] . "/login.php");
}

// read querystrings

parse_str($HTTP_SERVER_VARS["QUERY_STRING"]);

// read form data from POST method

while (list($key,$val)=each($HTTP_POST_VARS)) {
	        $$key = checkInput($val);
}

$connect = mysql_connect("localhost", "apache", "mesuna") or die ("Could not connect to database! Alert system administrator."  . mysql_error());
if ($_SERVER['SERVER_NAME'] == "test.voodoochild.org") {
	mysql_select_db("test_voodoochild");	
} else {
	mysql_select_db("voodoochild");	
}


if ($submit == "yes") {
	if (count($bettee_id) > 0) {
		foreach($bettee_id as $i => $bettee) {
			if ($private == '') {
				$private = '0';	
			}
			
			if ($infinite_sub == 'yes') { 
				$num_subway = -99;
			}
			if ($infinite_cook == 'yes') { 
				$num_cookie = -99;
			}
			if ($double_meat == 'yes') {
				$meat = '1';
			} else {
				$meat = '0';	
			}
			if ($num_subway == '') {
				$num_subway = 0;
			}
			if ($num_cookie == '') {
				$num_cookie = 0;
			}
			
			$now = "SELECT NOW()";
			$result = mysql_query($now);
			list($date) = mysql_fetch_row($result);
	
			$insert_sql = "INSERT INTO bets (better_id, bettee_id, description, subways, cookies, double_meat, status, timestamp, private) VALUES (" . $_SESSION['user_id'] . ", " . $bettee . ", '" . $description . "', " . $num_subway . ", " . $num_cookie . ", '" . $meat . "', 1, '" . $date ."', '" . $private . "')";
			$result = mysql_query($insert_sql) or die ('error adding bet'  . mysql_error());
			
			$bet_sql = "SELECT bet_id FROM bets WHERE timestamp = '" . $date . "' AND better_id = " . $_SESSION['user_id'] . " AND bettee_id = " . $bettee;
			$bet_result = mysql_query($bet_sql) or die ('error finding bet'  . mysql_error());
			
			$better_sql = "SELECT userName, email FROM users WHERE user_id = " . $_SESSION['user_id'];
			$better_result = mysql_query($better_sql) or die ('error getting better info'  . mysql_error());
			
			$bettee_sql = "SELECT firstname, email FROM users WHERE user_id = " . $bettee;
			$bettee_result = mysql_query($bettee_sql) or die ('error getting bettee info'  . mysql_error());
			
			list($firstName, $bettee_email) = mysql_fetch_row($bettee_result);
			list($userName, $better_email) = mysql_fetch_row($better_result);
			list($bet_id) = mysql_fetch_row($bet_result);
			
			$msg = "Dear " . $firstName . ",\n\n" . $userName . " has proposed a bet.  The bet is: \n\n" . html_entity_decode($description) . "\n\n...you would owe: ";
			if ($num_subway <> 0) {
				if ($num_subway == -99) {
					$msg = $msg . " INFINITE subways";	
				} else {
					$msg = $msg . $num_subway . " subways";	
				}
			}		
			
			if ($meat == '1') {
				$msg = $msg . "(double the meat)";
			}
			if ($num_cookie <> 0) {
				if ($num_cookie == -99) {
					$msg = $msg . " and INFINITE cookies";	
				} else {
					$msg = $msg . " and " . $num_cookie . " cookies";	
				}
			}
			$msg = $msg . ".";
			$msg = $msg . "\n\nTo ACCEPT this bet as is, go to:\n\nhttp://" . $_SERVER['SERVER_NAME'] . "/subway/bet.php?bet_id=" . $bet_id . "&action=Accept&submit=yes\n";
			$msg = $msg . "\nTo REJECT this bet, go to:\n\nhttp://" . $_SERVER['SERVER_NAME'] . "/subway/bet.php?bet_id=" . $bet_id . "&action=Reject&submit=yes\n";
			$msg = $msg . "\nTo NEGOTIATE and make a counteroffer for this bet, go to:\n\nhttp://" . $_SERVER['SERVER_NAME'] . "/subway/bet.php?bet_id=" . $bet_id . "&action=Negotiate\n";
					
			$success = imap_mail($bettee_email, "You have a new Subway bet!", $msg, "From: " . $better_email) or die("problem sending email");
			
			mysql_free_result($bet_result);
			mysql_free_result($better_result);
			mysql_free_result($bettee_result);
			
			$error = true;
			$error_msg = "Your bet has been recorded and your betting partner(s) have been emailed.";
	
		}
	} else {
		$error = true;
		$error_msg = "You must select at least one betting partner!";
	}
}

?>

<!DOCTYPE HTML PUBLIC "-//w3c//dtd html 4.0 transitional//en">
<html>
<head>
  <link rel="STYLESHEET" href="/styles-site.css" />
  <title>
    voodoochild.org
  </title>
  <script language="JavaScript">
function checkForm() {
   		var form_ok = true;
		var msg = '';
		
		if (document.newbet.description.value == "") {
			form_ok = false;
			msg = msg + 'Please enter some text for the description of the bet.\n';
		}
		
		if (document.newbet.description.value.length > 8000) {
			form_ok = false;
			msg = msg + 'The description of bet some text for the description of the bet.\n';
		}

		if (isNaN(document.newbet.num_subway.value)) {
			form_ok = false;
			msg = msg + 'You must enter only numbers in the Enter # Subways field.\n';
		} else {
			if (document.newbet.num_subway.value > 2147483648) {
				form_ok = false;
				msg = msg + 'You can not bet more than 2,147,483,648 subway.  If you want to bet more, use infinite subway.\n';
			}
			
			if (document.newbet.num_subway.value < 0) {
				form_ok = false;
				msg = msg + 'You can not bet less than 0 subway.\n';
			}
		}
		
		if (isNaN(document.newbet.num_cookie.value)) {
			form_ok = false;
			msg = msg + 'You must enter only numbers in the Enter # Cookies field.\n';
		} else {
			if (document.newbet.num_cookie.value > 2147483648) {
				form_ok = false;
				msg = msg + 'You can not bet more than 2,147,483,648 cookies.  If you want to bet more, use infinite cookies.\n';
			}		

			if (document.newbet.num_cookie.value < 0) {
				form_ok = false;
				msg = msg + 'You can not bet less than 0 cookies.\n';
			}
	
		}
		
		if ((!isNaN(document.newbet.num_cookie.value)) && (!isNaN(document.newbet.num_subway.value))) {
	
			if ((document.newbet.num_subway.value == 0) && (document.newbet.num_cookie.value == 0) && (!document.newbet.infinite_sub.checked) && (!document.newbet.infinite_cook.checked)) {
				form_ok = false;
				msg = msg + 'You must enter how many subways or cookies will be wagered.\n';
			}
	
			if ((document.newbet.num_subway.value != '') && (document.newbet.infinite_sub.checked)) {
				form_ok = false;
				msg = msg + 'You have checked the box for INFINITE subways, but also entered a number.  Pick one!\n';
			}
	
			if ((document.newbet.num_subway.value != '') && (document.newbet.infinite_sub.checked)) {
				form_ok = false;
				msg = msg + 'You have checked the box for INFINITE cookies, but also entered a number.  Pick one!\n';
			}
		}
		
		if (!form_ok) {
			alert(msg);
		} 
		
		return form_ok;

    }
  </script>
</head>
<body>
    <table width="100%" border="0">
      <tr>
        <td colspan="2" align="center">
          <h1>
            voodoochild.org
          </h1>
        </td>
      </tr>
      <tr>
        <td align="center" colspan="2">
        </td>
      </tr>
      <tr>
        <td valign="top" style="width: 20%">
			<?php include "../menu.html"; ?>         
		</td>
        <td valign="top">
        
        	<form name="newbet" action="/subway/newbet.php" method="POST" onSubmit="return checkForm();">
        	<table border="0" width="80%">
        		<tr><td colspan="4"><h2>subway betting zone - new bet</h2></td></tr>
        		<tr><td colspan="4"><hr></td></tr>
		        <tr>
		        		<td>&nbsp;</td>
		        </tr>
		    <? 

			if ($error) { 
			
			?>
		        <tr>
                		<td colspan="2" class="error"><? echo $error_msg ?></td>
		        </tr>
		        <tr>
		        		<td>&nbsp;</td>
		        </tr>
		    <? } ?>
			<input type="hidden" name="submit" value="yes">
				<tr>
					<td colspan="4" width=100% valign="top" >
						<table border="1" cellpadding="0" cellspacing="0" >
							<tr>
								<td valign="top" width="50%">
									<table>
										<tr>
										<td valign="top" ><b>Select a user</b>.<p>This is the person that will owe you if they accept the bet and the conditions become true.<p>Multiple users can be selected by holding down CTRL while clicking.</td>
										<td valign="top" align="right"><select name="bettee_id[]" MULTIPLE SIZE=10>
					<? 
						$user_sql = "SELECT user_id, username FROM users WHERE user_id != " . $_SESSION['user_id'] . " AND access >= 2";
						$result = mysql_query($user_sql) or die ("Error: Could not get user list");
						while ($row = mysql_fetch_assoc($result)) {
								echo "<option value=" . $row['user_id'] . ">" . $row['username'] . "\n";
						}
		
						
					?>
										</select>		
										</td>
										</tr>
									</table>
								</td>
								<td valign="top">
									<table>
										<tr>
											<td valign="top"><b>Make this bet private?</b>&nbsp;<input type="checkbox" name="private" value="1"><p>If checked, this will not allow anyone besides you and your betting partner to see this bet while viewing your profile.</td>
										</tr>
									</table>
								</td>
							</tr>

						</table>
				</tr>
				<tr><td>&nbsp;</td></tr>
				<tr>
					<td colspan="4" width=100% valign="top">
						<table border="1" cellpadding="0" cellspacing="0" width=100%>
							<tr>
								<td valign="top" width=100%>
									<table>
										<tr>
											<td><b>Enter the conditions of the bet: </b></td>
										</tr>
										<tr><td colspan="4"><textarea name="description" rows=5 cols=70></textarea></td></tr>
									</table>
								</td>
							</tr>
						</table>
					</td>
				</tr>
				<tr><td>&nbsp;</td></tr>
				<tr>
					<td width="100%" colspan="4">
						<table border="1" cellpadding="0" cellspacing="0" width=100%>
							<tr>
								<td valign="top" width=100%>
									<table width=100%>
										<tr>
											<td valign="top" width=40%><b>Enter # Subways:</b></td>
											<td valign="top" width=10%><input type="text" maxlength="10" size="5" name="num_subway"></td>
											<td valign="top" width=25%><b>Double the meat?</b></td>
											<td valign="top" width=25%><input type="checkbox" name="double_meat" value="yes"></td>
										</tr>
										<tr>
											<td valign="top" width=40%>Or, click here for <B>INFINITE</B> subways: </td>
											<td valign="top" width=10%><input type="checkbox" name="infinite_sub" value="yes"></td>
											<td width=25%>&nbsp;</td>
											<td width=25%>&nbsp;</td>
										</tr>
										<tr><td>&nbsp;</td></tr>
										<tr><td valign="top"><b>Enter # Cookies:</b></td><td valign="top"><input type="text" maxlength="10" size="5" name="num_cookie"></td></tr>
										<tr><td valign="top">Or, click here for <B>INFINITE</B> cookies: </td><td valign="top"><input type="checkbox" name="infinite_cook" value="yes"></td></tr>
									</table>
								</td>
							</tr>
						</table>
					</td>
				</tr>
					
			<tr><td>&nbsp;</td></tr>
			<tr><td><input type="submit" value="Submit bet"></td></tr>
        	</table>
        	</form>
        </td>
      </tr>
    </table>
</body>
</html>

<? 

function checkInput($str)
{
if (is_array($str))
{
while(list($key, $val) = each($str))
{
if (is_array($val))
{
$str[$key] = SpecialChars($val);
}
else
{
$str[$key] = htmlspecialchars(stripslashes($val), ENT_QUOTES);
}
}
}
else
{
$str = htmlspecialchars(stripslashes($str), ENT_QUOTES);
}

return $str;
}

?>