<?
session_start();
include("config.php");
include("header.php");
$menu_type = "normal";
include("menu.php");
?>
<?
$query = mysql_query("SELECT * FROM groups WHERE owner='".$_SESSION['name']."'") or die(mysql_error());
$num = mysql_num_rows($query);
if ($num == 1){
	$row = mysql_fetch_assoc($query);
	$groupID = $row['id'];
	$groupBadge = $row['badge'];
?>

<?
if(isset($_POST['code'])) {
	mysql_query("UPDATE groups SET badge='".$_POST['code']."' WHERE id='".$_POST['groupId']."'");
	
	$query = mysql_query("SELECT * FROM groups WHERE owner='".$_SESSION['name']."'") or die(mysql_error());
	$num = mysql_num_rows($query);
	if ($num == 1){
		$row = mysql_fetch_assoc($query);
		$groupID = $row['id'];
		$groupBadge = $row['badge'];
	}
	echo "Changes saved.";
	
}
?>
<div class="groupInfo">
	<form method="POST">
		<div class="div_container">
			<div class="div_box">
				Name:
			</div>
			<div class="div_box">
				<input type="text" name="groupName" value="" class="textfield">
			</div>			
			<div class="div_box">
				Description:
			</div>
			<div class="div_box">
				<input type="text" name="groupDesc" value="" class="textfield">
			</div>			
			<div class="div_box">
				<input type="submit" name="saveGroup" value="Save" class="submit">
			</div>
		</div>		
	</form>
</div>

<div id="groupBadge" class="groupBadge">You need Flash Player to use this feature.</div>
	<script type="text/javascript" language="JavaScript">
		var swfobj = new SWFObject("http://<? echo IPfix(); ?>BadgeEditor.swf", "habbobadge", "280", "400", "7");
		swfobj.addParam("base", "http://<? echo IPfix(); ?>");
		swfobj.addVariable("post_url", "http://<? echo IPfix(); ?>groupBadge.php?");
		swfobj.addVariable("xml_url", "http://<? echo IPfix(); ?>conf.xml");
		swfobj.addVariable("localization_url", "http://<? echo IPfix(); ?>badge_editor.xml");
		swfobj.addVariable("groupId", "<? echo $groupID; ?>");
		swfobj.addVariable("badge_data", "<? echo $groupBadge; ?>");
		swfobj.write("groupBadge");
	</script>
</div>


</body>
</html>
<?
}else{
	if(isset($_POST['buyGroup'])){
		$query = mysql_query("SELECT * FROM users WHERE name='".$_SESSION['name']."'");
		$list = mysql_fetch_assoc($query) or die(mysql_error());
		if($list['credits'] >= "10"){
			mysql_query("INSERT INTO groups (owner,name,`desc`,badge,members) VALUES ('".$_SESSION['name']."','','','b1301Xs09114s05015s05013',';')") or die(mysql_error());
			mysql_query("UPDATE users SET credits = credits-10 WHERE name = '".$_SESSION['name']."'") or die(mysql_error());
			echo "You bought a group!";
		}else{
			echo "You don't have enough credits.";
		}
	}else{
		echo "You are not a owner of a group.";		
?>
		<form method="POST">
			A user group - 10 credits<br>
			<input type="hidden" value="true" name="buyGroup">
			<input type="submit" value="Buy a group" class="submit"><br><br>
		</form>

<?}?>
<?}?>