<h4>CREAZA ITEM</h4>

<?PHP

if(isset($_POST['submit']) && $_POST['submit']=="Creaza") {

if(is_numeric($_POST['aid'])) {
$sqlCmd = "SELECT COUNT(*) AS checkIn FROM account.account WHERE id='".$_POST['aid']."' LIMIT 1";
$cmd = mysql_query($sqlCmd) or die(mysql_error());
$getCount = mysql_fetch_object($cmd) ;
if($getCount->checkIn==1) {

if(!empty($_POST['window']) && is_numeric($_POST['position']) && !empty($_POST['itemtyp']) && is_numeric($_POST['stufe']) && is_numeric($_POST['stapelmenge'])) {
if(!empty($_POST['vnum']) && is_numeric($_POST['vnum'])) {
$avnum=$_POST['vnum'];
}
else {
if($_POST['itemtyp']>=11971 && $_POST['itemtyp']<=11974) {
$_POST['stufe']=0;
}
$avnum=$_POST['itemtyp']+$_POST['stufe'];
}
$luamid=mysql_query("select * from player.item where id=(SELECT MAX(id) FROM player.item)");
$idul = mysql_fetch_array($luamid);
$var_id=$idul['id']+1;
$ids = $_SESSION['user'];
$tsd = mysql_fetch_row(mysql_query("SELECT id,login from account.account where login='$ids'")) or die(mysql_error());
$sqlCmd="INSERT INTO player.item
(owner_id,window,pos,count,vnum,socket0,socket1,socket2,attrtype0,attrvalue0,attrtype1,attrvalue1,attrtype2,attrvalue2,attrtype3,attrvalue3,attrtype4,attrvalue4,attrtype5,attrvalue5,attrtype6,attrvalue6)
VALUES
('".$_POST['aid']."','".$_POST['window']."','".$_POST['position']."','".$_POST['stapelmenge']."','".$avnum."','".$_POST['socket0']."','".$_POST['socket1']."','".$_POST['socket2']."','".$_POST['boni0']."','".$_POST['boniv0']."','".$_POST['boni1']."','".$_POST['boniv1']."','".$_POST['boni2']."','".$_POST['boniv2']."','".$_POST['boni3']."','".$_POST['boniv3']."','".$_POST['boni4']."','".$_POST['boniv4']."','".$_POST['boni5']."','".$_POST['boniv5']."','".$_POST['boni6']."','".$_POST['boniv6']."')";
$sqlQry = mysql_query($sqlCmd) or die(mysql_error());


$ora = date("H:i");
$data = date("d.M.Y");
$sqlCmdLog="INSERT INTO web.ic_log
(autor,autorid,id,owner_id,window,pos,count,vnum,socket0,socket1,socket2,attrtype0,attrvalue0,attrtype1,attrvalue1,attrtype2,attrvalue2,attrtype3,attrvalue3,attrtype4,attrvalue4,attrtype5,attrvalue5,attrtype6,attrvalue6,ora,data)
VALUES
('$tsd[1]','$tsd[0]','$var_id','".$_POST['aid']."','".$_POST['window']."','".$_POST['position']."','".$_POST['stapelmenge']."','".$avnum."','".$_POST['socket0']."','".$_POST['socket1']."','".$_POST['socket2']."','".$_POST['boni0']."','".$_POST['boniv0']."','".$_POST['boni1']."','".$_POST['boniv1']."','".$_POST['boni2']."','".$_POST['boniv2']."','".$_POST['boni3']."','".$_POST['boniv3']."','".$_POST['boni4']."','".$_POST['boniv4']."','".$_POST['boni5']."','".$_POST['boniv5']."','".$_POST['boni6']."','".$_POST['boniv6']."','$ora','$data')"; // check !
$sqlQryLog = mysql_query($sqlCmdLog) or die('test');

if($sqlQry) {
echo succes("Itemul cu id ".$var_id." a fost creat cu succes!");

}
}
else { echo error("Itemul nu a putut fi creat pentru ca datele dvs sunt incorecte."); }
}
else { echo error("AccountID-ul este gresit"); }
}
else { echo error("Introduceti un accountID valid."); }

}