shops.php

<?php

session_start();
require "global_func.php";
if ($_SESSION['loggedin'] == 0)
{
    header("Location: login.php");
    exit;
}
$userid = $_SESSION['userid'];
require "header.php";
$h = new headers;
$h->startheaders();
include "mysql.php";
global $c;
$is =
        mysql_query(
                "SELECT u.*,us.* FROM users u LEFT JOIN userstats us ON u.userid=us.userid WHERE u.userid=$userid",
                $c) or die(mysql_error());
$ir = mysql_fetch_array($is);
check_level();
$fm = money_formatter($ir['money']);
$cm = money_formatter($ir['crystals'], '');
$lv = date('F j, Y, g:i a', $ir['laston']);
$h->userdata($ir, $lv, $fm, $cm);
$h->menuarea();
$_GET['shop'] = abs((int) $_GET['shop']);
if (!$_GET['shop'])
{
    print "You begin looking through town and you see a few shops.<br />";
    $q =
            mysql_query(
                    "SELECT * FROM shops WHERE shopLOCATION={$ir['location']}",
                    $c);
    print
            "<table width=85%><tr style='background: gray;'><th>Shop</th><th>Description</th></tr>";
    while ($r = mysql_fetch_array($q))
    {
        print
                "<tr><td><a href='shops.php?shop={$r['shopID']}'>{$r['shopNAME']}</a></td><td>{$r['shopDESCRIPTION']}</td></tr>";
    }
    print "</table>";
}
else
{
    $sd = mysql_query("SELECT * FROM shops WHERE shopID={$_GET['shop']}", $c);
    if (mysql_num_rows($sd))
    {
        $shopdata = mysql_fetch_array($sd);
        if ($shopdata['shopLOCATION'] == $ir['location'])
        {
            print
                    "Browsing items at <b>{$shopdata['shopNAME']}...</b><br />
<table><tr style='background: gray;'><th>Item</th><th>Description</th><th>Price</th><th>Sell Price</th><th>Buy</th></tr>";
            $qtwo =
                    mysql_query(
                            "SELECT si.*,i.*,it.* FROM shopitems si LEFT JOIN items i ON si.sitemITEMID=i.itmid LEFT JOIN itemtypes it ON i.itmtype=it.itmtypeid WHERE si.sitemSHOP={$_GET['shop']} ORDER BY i.itmtype ASC, i.itmbuyprice ASC, i.itmname ASC",
                            $c) or die(mysql_error());
            $lt = "";
            while ($r = mysql_fetch_array($qtwo))
            {
                if ($lt != $r['itmtypename'])
                {
                    $lt = $r['itmtypename'];
                    print
                            "\n<tr style='background: gray;'><th colspan=5>{$lt}</th></tr>";
                }
                print
                        "\n<tr><td>{$r['itmname']}</td><td>{$r['itmdesc']}</td><td>\${$r['itmbuyprice']}</td><td>\${$r['itmsellprice']}</td><td><form action='itembuy.php?ID={$r['itmid']}' method='post'>Qty: <input type='text' name='qty' value='1' /><input type='submit' value='Buy' /></form></td></tr>";
            }
            print "</table>";
        }
        else
        {
            print "You are trying to access a shop in another city!";
        }
    }
    else
    {
        print "You are trying to access an invalid shop!";
    }
}
$h->endpage();