Pastoid

<?php
define('IN_PHPBB', true);
$phpbb_root_path = (defined('PHPBB_ROOT_PATH')) ? PHPBB_ROOT_PATH : './';
$phpEx = substr(strrchr(__FILE__, '.'), 1);
include($phpbb_root_path . 'common.' . $phpEx);
 
// Start session management
$user->session_begin();
$auth->acl($user->data);
$user->setup();
 
// Exclude Bots
if ($user->data['is_bot'])
{
	redirect(append_sid("{$phpbb_root_path}index.$phpEx"));
}
 
/*
//Check permissions
if (!$auth->acl_get('u_tickets'))
{
    trigger_error('NOT_AUTHORISED');
}
*/
 
include($phpbb_root_path . 'includes/Tickets/data.' . $phpEx);
include($phpbb_root_path . 'includes/Tickets/Ticket.' . $phpEx);
include($phpbb_root_path . 'includes/Tickets/Bet.' . $phpEx);
 
$mode = request_var('mode', '');
$ticketID = request_var('t', 0);
$betID = request_var('b', 0);
 
switch ($mode)
{
case 'setResult':
	$ticket = Ticket::load($ticketID);
 
	if (!$ticket || ($ticket->owner != $user->data['user_id']))
		die('Incorrect ticket ID.');
 
	foreach ($ticket->bets as $bet)
	{
		if ($bet->ID == $betID)
			break;
	}
 
	if ($bet->ID != $betID)
		die('Incorrect bet ID.');
 
	if ($bet->result)
		die('Result already stored.');
 
	$bet->setResult(request_var('team1', 0), request_var('team2', 0));
 
	$noResult = false;
	foreach ($ticket->bets as $bet)
	{
		if (!$bet->result)
		{
			$noResult = true;
			break;
		}
	}
 
	if (!$noResult)
	{
		$data = array(
			'user_money' => $user->data['user_money'] + $ticket->prize(),
		);
 
		$sql = 'UPDATE ' . USERS_TABLE . '
	             SET ' . $db->sql_build_array('UPDATE', $data) . '
	             WHERE user_id = ' . $user->data['user_id'];
		$db->sql_query($sql);
	}
 
	if ($bet->won())
		die('W');
	else
		die('L');
break;
}
 
foreach ($bookmakers as $bookmaker)
{
	$template->assign_block_vars('bookmaker', array(
		'ID'   => $bookmaker,
		'NAME' => $bookmaker,
	));
}
 
foreach ($sports as $ID => $name)
{
	$template->assign_block_vars('sport', array(
		'ID'   => $ID,
		'NAME' => $name,
	));
}
 
foreach ($bets as $ID => $name)
{
	$template->assign_block_vars('bet', array(
		'ID'   => $ID,
		'NAME' => $name,
	));
}
 
if (isset($_POST['create']))
{
	$money = request_var('money', 0);
 
	if ($money > $user->data['user_money'])
		trigger_error('NOT_ENOUGH_MONEY');
 
	$ticket = Ticket::create(request_var('bookmaker', ''), $money);
	$ticket->setTemplate();
 
	$data = array(
		'user_money' => $user->data['user_money'] - $money,
	);
 
	$sql = 'UPDATE ' . USERS_TABLE . '
	         SET ' . $db->sql_build_array('UPDATE', $data) . '
	         WHERE user_id = ' . $user->data['user_id'];
	$db->sql_query($sql);
}
 
if (isset($_POST['add']))
{
	$ticket = Ticket::load(request_var('id', 0));
 
	$bet = new Bet($ticket);
	$bet->sport = request_var('sport', '');
	$bet->team1 = request_var('team1', '');
	$bet->team2 = request_var('team2', '');
	$bet->exchange = request_var('exchange', 0.0) * 100;
	$bet->prediction = request_var('prediction', 0) % 101;
	$bet->bet = request_var('bet', '');
	$bet->datetime = new DateTime();
	$bet->datetime->setDate(request_var('dateY', 0), request_var('dateM', 0), request_var('dateD', 0));
	$bet->datetime->setTime(request_var('timeH', 0), request_var('timeM', 0), 0);
	$bet->desc = request_var('desc', '');
 
	$bet->store();
 
	$ticket->setTemplate();
}
 
// output the display
$template->assign_vars(array(
	'USER_MONEY' => $user->data['user_money'],
	'DATE_D'     => date('d'),
	'DATE_M'     => date('m'),
	'DATE_Y'     => date('Y'),
));
 
page_header('Dodaj kupon');
 
$template->set_filenames(array(
	'body' => 'tickets_body.html',
));
 
page_footer();