coins.php

<?php
/////////////////////////////////////////////////////////////////////////////////////
// xbtit - Bittorrent tracker/frontend
//
// Copyright (C) 2004 - 2014  Btiteam
//
//    This file is part of xbtit DT FM.
//
// Redistribution and use in source and binary forms, with or without modification,
// are permitted provided that the following conditions are met:
//
//   1. Redistributions of source code must retain the above copyright notice,
//      this list of conditions and the following disclaimer.
//   2. Redistributions in binary form must reproduce the above copyright notice,
//      this list of conditions and the following disclaimer in the documentation
//      and/or other materials provided with the distribution.
//   3. The name of the author may not be used to endorse or promote products
//      derived from this software without specific prior written permission.
//
// THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR IMPLIED
// WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
// MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
// IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
// SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
// TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
// PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
// LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
// NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
// EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
//
////////////////////////////////////////////////////////////////////////////////////
require_once("include/functions.php");
global $CURUSER ;
dbconn();

///== Mod by dokty - Tbdev.net

$id = 0 + $_GET["id"];
$points = 0 + $_GET["points"];
$poi = 0 + $_GET["ix"];
$infohash=sql_esc($_GET["id"]);

$pointscangive = array("10", "20", "50", "100", "200", "500", "1000");
if (!in_array($points, $pointscangive))
stderr("Error", "You can't give that amount of points!!!");

$sdsa = do_sqlquery("SELECT 1 FROM  {$TABLE_PREFIX}coins WHERE info_hash='$infohash' AND userid ='".$CURUSER['uid']."'") or sqlerr(__FILE__, __LINE__);
$asdd = $sdsa->fetch_array();
if ($asdd)
stderr("Error", "You already gave points to this torrent.");

$res = do_sqlquery("SELECT * FROM  {$TABLE_PREFIX}files WHERE info_hash =" . sqlesc($infohash) . " ")or sqlerr(__FILE__, __LINE__);
$row = $res->fetch_assoc() or stderr("Error", "Torrent was not found");
$userid = $row["uploader"];


if ($row["uploader"] == $CURUSER["uid"])
stderr("Error", "You can't give points to your self !");

if ($CURUSER["seedbonus"] < $points)
stderr("Error", "You don't have enough points");

quickQuery("INSERT INTO  {$TABLE_PREFIX}coins (userid,info_hash,points) VALUES ($poi, " . sqlesc($infohash) . "," . sqlesc($points) . ")") or sqlerr(__FILE__, __LINE__);
quickQuery("UPDATE  {$TABLE_PREFIX}users SET seedbonus=seedbonus+" . $points . " WHERE id=$userid") or sqlerr(__FILE__, __LINE__);
quickQuery("UPDATE  {$TABLE_PREFIX}users SET seedbonus=seedbonus-" . $points . " WHERE id=$poi") or sqlerr(__FILE__, __LINE__);
quickQuery("UPDATE  {$TABLE_PREFIX}files SET points=points+" . $points . " WHERE info_hash=" . sqlesc($infohash) . "") or sqlerr(__FILE__, __LINE__);
$msg = sql_esc("You have been given " . $points . " points by ".$CURUSER["username"]." for torrent [url=$BASEURL/index.php?page=torrent-details&id=".$infohash."]".$row["filename"]."[/url].");
send_pm(0,$userid,sqlesc('You have been given a gift'),sqlesc($msg));
stderr("Done", "Successfully gave points to this torrent.");

?>