$cmd=$_GET['cmd']; $event=$_GET['event']; $pawn_id=$_GET['pawn_id']; $authorized = "Y"; if ($link): if ( $event == "save"): $error_flag = "N"; if ($cmd != "upload_image" && $cmd != "remove_image" ): $pawn_name=trim($_POST["pawn_name"]); $pawn_vocation=$_POST["pawn_vocation"]; $psn_name=trim($_POST["psn_name"]); $pawn_id=$_POST["pawn_id"]; $pawn_level=$_POST["pawn_level"]; $pawn_inclination1=$_POST["pawn_inclination1"]; $pawn_inclination2=$_POST["pawn_inclination2"]; $top_need=$_POST["top_need"]; $pawn_description=trim($_POST["pawn_description"]); $other_information=trim($_POST["other_information"]); $activity_status=$_POST["activity_status"]; $show_image_flag = $_POST["show_image_flag"]; $pawn_rank=$_POST["pawn_rank"]; $gender=$_POST["gender"]; $platform=$_POST["platform"]; $steam_profile=$_POST["steam_profile"]; if ( strlen($pawn_description) > 4999 ) { $pawn_description = substr($pawn_description,0,4999); } if ( strlen($other_information) > 4999 ) { $other_information = substr($other_information,0,4999); } if ($pawn_rank == ""): $pawn_rank = 0; else: settype($pawn_rank, "int"); endif; if ($pawn_level == ""): $pawn_level = 1; else: settype($pawn_level, "int"); if ($pawn_level == 0): $pawn_level = 1; endif; endif; $db_pawn_name = addslashes($pawn_name); $db_psn_name = addslashes($psn_name); $db_pawn_description = addslashes($pawn_description); $db_other_information = addslashes($other_information); $db_steam_profile = addslashes($steam_profile); if ($psn_name == ""): $error_flag = "Y"; $error_message = "You must enter your PSN name"; elseif ($pawn_name == ""): $error_flag = "Y"; $error_message = "You must enter your pawn name"; elseif ($pawn_level < 1 || $pawn_level > 200 ): $error_flag = "Y"; $error_message = "Pawn level must be between 1 and 200"; elseif ($pawn_rank < 0 || $pawn_rank > 9999999 ): $error_flag = "Y"; $error_message = "Pawn rank must be between 0 and 9999999"; endif; endif; if ( $cmd == "add" && $error_flag == "N"): $result = mysqli_query($link, "select count(*) from pawn where psn_name='$psn_name' and platform='$platform'"); $row = mysqli_fetch_row($result); if ( $row[0] == 0 ): $sql = "insert into pawn (member_id, psn_name, pawn_name, pawn_vocation, inclination1, inclination2, pawn_level, pawn_description, other_information, creation_date, activity_status, show_image_flag, top_need, pawn_rank, gender, instance_name, platform, steam_profile) values ($login_id, '$db_psn_name', '$db_pawn_name', '$pawn_vocation', '$pawn_inclination1', '$pawn_inclination2', $pawn_level, '$db_pawn_description','$db_other_information', CURDATE(), '$activity_status', 'N', '$top_need', $pawn_rank, '$gender','$instance_name', '$platform', '$db_steam_profile' )"; $result = mysqli_query($link, $sql ); if(!$result): $error_flag = "Y"; $error_message="Insert failed due " . mysqli_error($link); else: $result = mysqli_query($link,"select pawn_id from pawn where member_id='$login_id' and psn_name='$psn_name'"); $row = mysqli_fetch_row($result); $pawn_id=$row[0]; $cmd = "edit"; $success_message = "Your new pawn " . stripslashes($pawn_name) . " was successfully added."; endif; else: $error_flag = "Y"; $error_message = "Pawn already exists for this network ID and platform!"; endif; elseif ( $cmd == "edit" && $error_flag == "N"): $sql = "update pawn set psn_name = '$db_psn_name', pawn_name = '$db_pawn_name', pawn_vocation = '$pawn_vocation', pawn_level = $pawn_level, inclination1 = '$pawn_inclination1', inclination2 = '$pawn_inclination2', pawn_description = '$db_pawn_description', other_information = '$db_other_information', activity_status='$activity_status', last_update_date=CURDATE(), platform = '$platform'"; $sql = $sql . " ,top_need = '$top_need', pawn_rank = $pawn_rank, gender = '$gender', steam_profile='$db_steam_profile' where pawn_id=$pawn_id"; $result = mysqli_query($link, $sql ); if(!$result): $error_flag = "Y"; $error_message="Update failed due " . mysqli_error($link); else: $success_message = "Changes made to your pawn " . stripslashes($pawn_name) . " were successfully updated."; endif; endif; elseif ( $cmd == "edit"): if ( $pawn_id != "" ): $sql = "select psn_name, pawn_name, pawn_vocation, pawn_level, inclination1, inclination2, pawn_description, other_information, activity_status, member_id, image_name, show_image_flag, top_need, pawn_rank, internal_image_name, gender, platform, steam_profile from pawn where pawn_id=$pawn_id"; $result = mysqli_query($link, $sql ); $row = mysqli_fetch_row($result); if ($row[9] != $login_id): $error_flag = "Y"; $error_message = "You cannot edit a pawn which is not yours!"; $authorized = "N"; else: $psn_name = trim($row[0]); $pawn_name = trim($row[1]); $pawn_vocation = $row[2]; $pawn_level = $row[3]; $pawn_inclination1 = $row[4]; $pawn_inclination2 = $row[5]; $pawn_description = trim($row[6]); $other_information = trim($row[7]); $activity_status = $row[8]; $image_name=$row[10]; $top_need=$row[12]; $pawn_rank=$row[13]; $internal_image_name=$row[14]; $gender=$row[15]; $platform=$row[16]; $steam_profile=$row[17]; endif; endif; endif; endif; ?>