Initial commit

[2ch-be.git] / transfer.php

<?php
include('encrypt.php');

$email = Decrypt($_COOKIE['DMDM'],KEY);
$email = filter_var($email, FILTER_SANITIZE_EMAIL);
if (!filter_var($email, FILTER_VALIDATE_EMAIL)) {
  header("Location: index.php");
  exit;
}
// print_r($_POST);
if(isset($_POST['transfer']) && !empty($_POST['transfer']) || isset($_POST['pTransfer']) ) {

        if($_POST['pTransfer']){
                $pageHeader = $livesitePath.'test/p.php?i='.$_POST['recipient'];
                $sessionVar = 'alert';
        }else{
                $pageHeader = 'transfer.php'; 
                $sessionVar = 'error';
        }

        if(is_numeric($_POST['points'])){
                $error = "ƒGƒ‰�[�A‚à‚¤ˆê“xŽŽ‚µ‚Ä‚­‚¾‚³‚¢";
                foreach($_POST as $index=>$value){
                        if(empty($value)){
                                switch ($index) {
                                        case 'points':
                                                $emptyVar .= "<br>ƒ�ƒ�ƒ“ƒ|ƒCƒ“ƒg";
                                                break;
                                        
                                        case 'recipient':
                                                $emptyVar .= "<br>Žó—eŽÒ";
                                                break;
                                }
                                
                        }
                }

                if(!isset($emptyVar)){
                        $pts        = addslashes(strip_tags(trim($_POST['points'])));
                        $pts        = abs(round($pts));
                        $id         = addslashes(strip_tags(trim($_POST['recipient'])));
                        $fuser      = new Message;
                        $recipient  = $fuser->FindUser($id,$id_mail_path);
                        $sender         = trim($fuser->GetID($_COOKIE['DMDM'],$id_mail_path));
                        $trimmedPts = trim(file_get_contents("http://tpol27.nttec.com/melon.php?email=".strtolower($email)));
                        if($recipient){
                                if($trimmedPts < $pts) {
                                        $_SESSION[$sessionVar] = ($sessionVar=='error') ?  "‚ ‚È‚½‚Í‚Ì�\•ª‚ȃ|ƒCƒ“ƒg‚ðŽ�‚Á‚Ä‚¢‚È‚¢" : "<div class=\"alert alert-danger\">‚ ‚È‚½‚Í‚Ì�\•ª‚ȃ|ƒCƒ“ƒg‚ðŽ�‚Á‚Ä‚¢‚È‚¢</div>";
                                        header("Location: ".$pageHeader);
                                        exit;
                                } else {
                                        $points = file_get_contents("http://tpol27.nttec.com/melon.php?conv=".$pts."&usr=".strtolower($email)."&ip=".$_SERVER['REMOTE_ADDR']."&trans=sent&puid=".$id);
                                        //echo $points;
                                        if($points){
                                                $animal            = '';
                                                $points            = file_get_contents("http://tpol27.nttec.com/melon.php?uname=".$recipient."&pts=".$pts."&ip=".$_SERVER['REMOTE_ADDR']."&animal=".$animal."&trans=receive&puid=".$sender);
                                                $_SESSION[$sessionVar] = ($sessionVar=='error') ? "“]‘—‚Ì�¬Œ÷ƒ|ƒCƒ“ƒg" : "<div class=\"alert alert-success\">“]‘—‚Ì�¬Œ÷ƒ|ƒCƒ“ƒg</div>";
                                                if(abs($pts) >= 100)
                                                        file_get_contents("http://207.29.229.25/tmail.php?usname=".trim($recipient)."&tkn=gokp5WATBYOovz2S4LKo");
                                                

                                                header("Location: ".$pageHeader);
                                                exit;
                                                
                                        }else{

                                                $_SESSION[$sessionVar] = ($sessionVar=='error') ? "ƒGƒ‰�[�A‚à‚¤ˆê“xŽŽ‚µ‚Ä‚­‚¾‚³‚¢" :  "<div class=\"alert alert-danger\">ƒGƒ‰�[�A‚à‚¤ˆê“xŽŽ‚µ‚Ä‚­‚¾‚³‚¢</div>";
                                                header("Location: ".$pageHeader);
                                                exit;
                                        }
                                }
                        }else{
                                $_SESSION[$sessionVar] = ($sessionVar=='error') ? "ƒ†�[ƒU�[‚Í‘¶�Ý‚µ‚Ü‚¹‚ñ" :  "<div class=\"alert alert-danger\">ƒ†�[ƒU�[‚Í‘¶�Ý‚µ‚Ü‚¹‚ñ</div>";
                                header("Location: ".$pageHeader);
                                exit;
                        }
                }else{
                        $_SESSION[$sessionVar] = ($sessionVar=='error') ? "–³Œø‚ȃ|ƒCƒ“ƒg" :  "<div class=\"alert alert-danger\">–³Œø‚ȃ|ƒCƒ“ƒg</div>";
                        header("Location: ".$pageHeader);
                        exit;

                }


        }else{
                $_SESSION[$sessionVar] = ($sessionVar=='error') ? "–³Œø‚ȃ|ƒCƒ“ƒg" :  "<div class=\"alert alert-danger\">–³Œø‚ȃ|ƒCƒ“ƒg</div>";
                header("Location: ".$pageHeader);
                exit;
        }
}
?>
<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="Shift_JIS">
    <title>“]‘—ƒ|ƒCƒ“ƒg</title>
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <meta name="description" content="">
    <meta name="author" content="">
    <link rel="stylesheet" type="text/css" href="<?php echo $livesitePath ?>css/style.css"/>
    <style>
        span.green{
                color: green;
                font-weight: bold;
        }
    </style>
  </head>
  <body>
        <?php
                $varMessage = $_SESSION['error'];
                // echo $varMessage.'xx';
                //if(!empty($varMessage)){
                //      echo $varMessage;
                //      $_SESSION['error'] = "";
                //}
        ?>
  <div class="containerz">
    <div class="navbar-collapse">
      <ul class="nav navbar-nav">
      </ul>          
    </div>
  </div>

  <div class="container">
    <center>
      <div class="form-signin" style = "font-size: 1.2em;text-align:right;">
        <?php
        if($_SERVER['SERVER_NAME'] == "be.2ch.net") {
        ?>
                <a href="http://www.2ch.net/" target="_BLANK">
                <img src="<?php echo $livesitePath ?>css/img/2ch_logo.gif">
                </a>
        <?php
        } elseif ($_SERVER['SERVER_NAME'] == "be.bbspink.com") {
        ?>
                <a href="http://www.bbspink.com/" target="_BLANK">
                <img src="<?php echo $livesitePath ?>css/img/pink.png">
                </a>
        <?php
        }
        ?>
                <br>
                BE 2.0 
              </div>
            </center>
          </div>
          <div class="container">
            <center>
                    <form class="form-signin" method="post">
                                <?php
                                        $cpts = file_get_contents("http://tpol27.nttec.com/melon.php?email=".strtolower($email));
                                        echo "ƒ�ƒ�ƒ“‚̃|ƒCƒ“ƒg: <span class='green'>".$cpts."</span></b><br><br>";
                                ?>
            
                                <input type="text" name="points" placeholder="‘¡‚éƒ|ƒCƒ“ƒg‚Ì�”"><br>
                                <?php
                                        if(isset($_POST['pmelon']) && !empty($_POST['pmelon'])) {
                                                $_SESSION['pmelon'] = addslashes(strip_tags(trim($_POST['pmelon'])));
                                                $_SESSION['vmelon'] = TRUE;
                                                header("Location: transfer.php");
                        exit;

                                        } elseif($_SESSION['pmelon'] && $_SESSION['vmelon']) {
                                                echo "<input type=\"text\" value=\"".addslashes(strip_tags(trim($_SESSION['pmelon'])))."\" disabled>
                              <input type=\"hidden\" name=\"recipient\" value=\"".addslashes(strip_tags(trim($_SESSION['pmelon'])))."\"><br>";

                                        } else {
                                                echo "<input type=\"text\" name=\"recipient\" placeholder=\"ŽóŽæ�l‚ÌID\"><br>";
                                        }
                                ?>
                                <input type="submit" name="transfer" value="‘—�M"><br>
                                <?php
                                        if(!empty($varMessage)){
                                        echo "<div style=\"padding:5px; margin-top:8px;  background-color:#D6D6D6;  \">". $varMessage . "</div>";
                                        $_SESSION['error'] = "";
                                }?>     
                                </form>
                        </center>
                </div>
        </body>
</html>