monorail.php

<?php

session_start();
require "global_func.php";
if ($_SESSION['loggedin'] == 0)
{
    header("Location: login.php");
    exit;
}
$userid = $_SESSION['userid'];
require "header.php";
$h = new headers;
$h->startheaders();
include "mysql.php";
global $c;
$is =
        mysql_query(
                "SELECT u.*,us.* FROM users u LEFT JOIN userstats us ON u.userid=us.userid WHERE u.userid=$userid",
                $c) or die(mysql_error());
$ir = mysql_fetch_array($is);
check_level();
$fm = money_formatter($ir['money']);
$cm = money_formatter($ir['crystals'], '');
$lv = date('F j, Y, g:i a', $ir['laston']);
$h->userdata($ir, $lv, $fm, $cm);
$h->menuarea();
$_GET['to'] = abs((int) $_GET['to']);
if (!$_GET['to'])
{
    print
            "Welcome to the Monorail Station. It costs \$1000 for a ticket.<br />
Where would you like to travel today?<br />";
    $q =
            mysql_query(
                    "SELECT * FROM cities WHERE cityid != {$ir['location']} AND cityminlevel <= {$ir['level']}",
                    $c);
    print
            "<table width=75%><tr style='background:gray'><th>Name</th><th>Description</th><th>Min Level</th><th>&nbsp;</th></tr>";
    while ($r = mysql_fetch_array($q))
    {
        print
                "<tr><td>{$r['cityname']}</td><td>{$r['citydesc']}</td><td>{$r['cityminlevel']}</td><td><a href='monorail.php?to={$r['cityid']}'>Go</a></td></tr>";
    }
    print "</table>";
}
else
{
    if ($ir['money'] < 1000)
    {
        print "You don't have enough money.";
    }
    else if (((int) $_GET['to']) != $_GET['to'])
    {
        print "Invalid city ID";
    }
    else
    {
        $q =
                mysql_query(
                        "SELECT * FROM cities WHERE cityid = {$_GET['to']} AND cityminlevel <= {$ir['level']}",
                        $c);
        if (!mysql_num_rows($q))
        {
            print
                    "Error, this city either does not exist or you cannot go there.";
        }
        else
        {
            mysql_query(
                    "UPDATE users SET money=money-1000,location={$_GET['to']} WHERE userid=$userid",
                    $c);
            $r = mysql_fetch_array($q);
            print
                    "Congratulations, you paid \$1000 and travelled to {$r['cityname']} on the monorail!";
        }
    }
}
$h->endpage();