<?
include('../config.php');
function sums($val, $proc) {
  $r = 0;
  $flor = (int)$val/100;
  $pl = $flor*$proc;
  $r += $pl;
  return $r;
}

if($_POST['item']) {
  if($_POST['user']) {
    if($_POST['hash']) {
      $uid = (int)$_POST['user'];
      $arr = array(
        8 => array('cost' => 1500, 'ghp' => 8, 'stat' => 1, 'bron' => 1, 'mf' => 7, 'mindur' => 30, 'minu' => 1, 'maxu' => 1),
        9 => array('cost' => 3500, 'ghp' => 10, 'stat' => 1, 'bron' => 1, 'mf' => 10, 'mindur' => 40, 'minu' => 2, 'maxu' => 2),
        10 => array('cost' => 5000, 'ghp' => 12, 'stat' => 1, 'bron' => 1, 'mf' => 13, 'mindur' => 50, 'minu' => 3, 'maxu' => 3),
        11 => array('cost' => 7500, 'ghp' => 14, 'stat' => 1, 'bron' => 1, 'mf' => 16, 'mindur' => 60, 'minu' => 4, 'maxu' => 4),
        12 => array('cost' => 9000, 'ghp' => 16, 'stat' => 1, 'bron' => 1, 'mf' => 19, 'mindur' => 70, 'minu' => 5, 'maxu' => 5),
        13 => array('cost' => 18000, 'ghp' => 18, 'stat' => 1, 'bron' => 1, 'mf' => 22, 'mindur' => 80, 'minu' => 6, 'maxu' => 6)
      );
      $user = mysql_fetch_array(mysql_query('SELECT `id`, `login`, `doblest` FROM `users` WHERE `id` = "'.mysql_real_escape_string($uid).'" LIMIT 1'));
      $salt = md5($user['login'].'|'.$user['id']);
      if(isset($user['id'])) {
        if($_POST['hash'] == $salt) {
          $it = (int)$_POST['item'];
          $item = mysql_fetch_array(mysql_query('SELECT * FROM `inventory` WHERE `owner` = "'.$user['id'].'" AND `id` = "'.mysql_real_escape_string($it).'" AND `point` > 0 AND `dressed` = 0 LIMIT 1'));
          if(isset($item['id']) && ($item['nlevel'] >= 7 && $item['nlevel'] <= 13)) {
            $level = $item['nlevel']+1;
            if($user['doblest'] >= $arr[$level]['cost']) {
              $user['doblest'] -= $arr[$level]['cost'];
              mysql_query('UPDATE `users` SET `doblest` = "'.$user['doblest'].'" WHERE `id` = "'.$user['id'].'" LIMIT 1');
              
              if($item['type'] != 3) {
                $item['ghp'] += $arr[$level]['ghp'];
                if($item['bron1'] > 0) { $item['bron1'] += 1; }
                if($item['bron2'] > 0) { $item['bron2'] += 1; }
                if($item['bron3'] > 0) { $item['bron3'] += 1; }
                if($item['bron4'] > 0) { $item['bron4'] += 1; }
                if($item['mfkrit'] > 0) { $item['mfkrit'] += sums($item['mfkrit'], $arr[$level]['mf']); }
                if($item['mfakrit'] > 0) { $item['mfakrit'] += sums($item['mfakrit'], $arr[$level]['mf']); }
                if($item['mfuvorot'] > 0) { $item['mfuvorot'] += sums($item['mfuvorot'], $arr[$level]['mf']); }
                if($item['mfauvorot'] > 0) { $item['mfauvorot'] += sums($item['mfauvorot'], $arr[$level]['mf']); }
                if($item['gsila'] > 0) { $item['gsila'] += $arr[$level]['stat']; }
                if($item['glovk'] > 0) { $item['glovk'] += $arr[$level]['stat']; }
                if($item['ginta'] > 0) { $item['ginta'] += $arr[$level]['stat']; }
                if($item['gintel'] > 0) { $item['gintel'] += $arr[$level]['stat']; }
              }

              if($item['type'] == 3) {
                $item['minu'] += $arr[$level]['minu']; $item['maxu'] += $arr[$level]['minu'];
              }
              
              $item['nlevel'] += 1;

              if($item['nsila'] > 0) { $item['nsila'] += 1; }
              if($item['nlovk'] > 0) { $item['nlovk'] += 1; }
              if($item['ninta'] > 0) { $item['ninta'] += 1; }
              if($item['nvinos'] > 0) { $item['nvinos'] += 1; }
              if($item['nintel'] > 0) { $item['nintel'] += 1; }
              if($item['nnoj'] > 0) { $item['nnoj'] += 1; }
              if($item['ntopor'] > 0) { $item['ntopor'] += 1; }
              if($item['ndubina'] > 0) { $item['ndubina'] += 1; }
              if($item['nmech'] > 0) { $item['nmech'] += 1; }
              if($item['maxdur'] < $arr[$level]['mindur']) { $item['maxdur'] = $arr[$level]['mindur']; $item['duration'] = 0; }
              mysql_query('UPDATE `inventory` SET `nlevel` = "'.$item['nlevel'].'", `ghp` = "'.$item['ghp'].'", `bron1` = "'.$item['bron1'].'", `bron2` = "'.$item['bron2'].'", `bron3` = "'.$item['bron3'].'", `bron4` = "'.$item['bron4'].'", `mfkrit` = "'.$item['mfkrit'].'", `mfakrit` = "'.$item['mfakrit'].'", `mfuvorot` = "'.$item['mfuvorot'].'", `mfauvorot` = "'.$item['mfauvorot'].'", `gsila` = "'.$item['gsila'].'", `glovk` = "'.$item['glovk'].'", `ginta` = "'.$item['ginta'].'", `gintel` = "'.$item['gintel'].'", `minu` = "'.$item['minu'].'", `maxu` = "'.$item['maxu'].'", `nsila` = "'.$item['nsila'].'", `nlovk` = "'.$item['nlovk'].'", `ninta` = "'.$item['ninta'].'", `nvinos` = "'.$item['nvinos'].'", `nintel` = "'.$item['nintel'].'", `nnoj` = "'.$item['nnoj'].'", `ntopor` = "'.$item['ntopor'].'", `ndubina` = "'.$item['ndubina'].'", `nmech` = "'.$item['nmech'].'", `maxdur` = "'.$item['maxdur'].'", `duration` = "'.$item['duration'].'" WHERE `id` = "'.$item['id'].'" LIMIT 1');
              
              ###
              mysql_query("INSERT INTO `delo` (`author`, `pers`, `text`, `type`, `date`) VALUES ('0', '{$user['id']}', '\"".$user['login']."\" улучшил предмет: \"".$item['name']."\" id:(".$item['id'].") [$item[duration]/".$item['maxdur']."] за ".$arr[$level]['cost']." реп, до уровня  $item[nlevel].', 1, '".time()."')");
              ###
              
              echo 'success';
            } else {
              echo 'Недостаточно репутации для операции ...';
            }
          } else {
            echo 'Предмет не найден ...';
          }
        } else {
          echo 'Утеря параметров. Код ошибки: 1001001.';
        }
      } else {
        echo 'А вы кто ???';
      }
    } else {
      echo 'Утерян параметр #hash# ...';
    }
  } else {
    echo 'А вы кто ???';
  }
} else {
  echo 'Выберите предмет!';
}
?>