<?
include_once "includes/dbConnNew.php"; 
include_once "includes/loggedOn.php";

//********************
//* get friend's name
///*******************

$friend_id = $_REQUEST["friend"];
$ACCEPT = $_REQUEST["ACCEPT"];
$msg_id = $_REQUEST["msg"];

$SQL1 = "select * from users where ID = '$friend_id' ";
$result1 = mysql_query($SQL1) or die(mysql_error());
if($myrow1=MySQL_fetch_array($result1)){
  $fname = $myrow1["First_Name"];
}

//* end of get friend's name


if($ACCEPT == "ACCEPT"){
	
   // check if invited
   $sqlupdate = "Select * from invitations  where (USER_ID = '$friend_id' and EMAIL = '" . $_SESSION["sessionEmail"]. "')";
   $result = mysql_query($sqlupdate) or die(mysql_error());
	$num_rows = mysql_num_rows($result);
	if($num_rows > "0"){
	
	   $sqlupdate = "UPDATE  invitations   SET Accepted = 'Y' WHERE (USER_ID = '$friend_id' and EMAIL = '" . $_SESSION["sessionEmail"]. "')";
	   $result = mysql_query($sqlupdate) or die(mysql_error());
		
	   $sqlupdate3 = "delete from messages WHERE (ID ='$msg_id')";
	   $result3 = mysql_query($sqlupdate3) or die(mysql_error());
	
	$SQL = "select users.ID,users.First_Name, users.Last_Name from privacy,users where (privacy.deleted = 0) AND ((privacy.friend_id = users.ID) and (privacy.user_id = '" . $_SESSION["sessionUserID"] . "') and (privacy.friend_id = '" . $_REQUEST["friend"]. "'))"; 
	$result1 = mysql_query($SQL) or die(mysql_error());
	 if($myrow=MySQL_fetch_array($result1)){
		$friend_network = "exists" ;
	} else {
	
	    
		$sql = "select * from privacy where user_id = '" . $_SESSION["sessionUserID"] . "' and  friend_id = '$friend_id' ";
		$result1 = mysql_query($sql) or die(mysql_error());
	 if($myrow=MySQL_fetch_array($result1)){
		$friend_network = "exists" ;
	}
		
		if($friend_network == "exists"){
		//do update
		    $sql = "UPDATE privacy SET deleted = '0' where  (privacy.user_id = '" . $_SESSION["sessionUserID"] . "') and (privacy.friend_id = '$friend_id')";
			$result1 = mysql_query($sql) or die(mysql_error());
			
			$sql = "UPDATE privacy SET deleted = '0' where  (privacy.friend_id = '" . $_SESSION["sessionUserID"] . "') and (privacy.user_id = '$friend_id')";
			$result1 = mysql_query($sql) or die(mysql_error());
		
		}else{
	
			$sql = "INSERT INTO privacy (user_id, friend_id,show_profile_page,photo,cookbook, grocery, blog, contacts)" ;
			$sql = $sql . " VALUES ('" . $_SESSION["sessionUserID"] . "','$friend_id','Y','Y','Y','Y','Y','Y')" ;
			$result1 = mysql_query($sql) or die(mysql_error());
		
			$sql1 = "INSERT INTO privacy (friend_id, user_id,show_profile_page,photo,cookbook, grocery, blog, contacts)" ;
			$sql1 = $sql1 . " VALUES ('" . $_SESSION["sessionUserID"] . "','$friend_id','Y','Y','Y','Y','Y','Y')" ;
			$result4 = mysql_query($sql1) or die(mysql_error());
        }

		
		$dateSent=date("Y-m-d") ;
		$timeSent = date("H:i") ;
		$message = $_SESSION["sessionFname"] . " has accepted your invitation and has joined your network!" ;
		$msgTitle = "Joined Network" ;
		$sqlInsert = "INSERT INTO messages (From_ID, To_ID, Date_Sent, Time_Sent, Mark_As_Read, The_Text,msg_title)" ;
		$sqlInsert = $sqlInsert . " VALUES ('" . $_SESSION["sessionUserID"] . "','$friend_id','$dateSent','$timeSent','N','$message','$msgTitle')" ;
		$result2 = mysql_query($sqlInsert) or die(mysql_error());
	   $replyID =  mysql_insert_id() ;
	   
	   $sqlupdate = "Update messages Set Reply_ID='$replyID' where ID='$replyID'";
	   $result2 = mysql_query($sqlupdate) or die(mysql_error());


//*************NOW SEE IF THE USER SHOULD PLUG INTO SOMEONE ELSE'S PREMIUM ACCOUNT IF THEY HAVE AVAIL SLOTS


//FIRST SEE IF THE INVITEE HAS ANY AVAILABLE SLOTS
$SQLS = "select * from users_purchased_slots, users where (users.ID = '$friend_id') and (Prem_Ind = 'Y') and (users.ID = users_purchased_slots.USER_ID)";
$resultS = mysql_query($SQLS) or die(mysql_error());
if($myrowS=MySQL_fetch_array($resultS)){
  $friend_slots_left = $myrowS["NUMBER_LEFT"];
  $friend_slots_used = $myrowS["NUMBER_USED"];
  $friend_date_purchased = $myrowS["DATE_PURCHASED"];
}

//NOW SEE IF THE PERSON ACCEPTING THE INVITE HAS ANY AVAILABLE SLOTS
$selfID = $_SESSION["sessionUserID"];
$SQLS = "select * from users_purchased_slots, users where (users.ID = '$selfID') and (Prem_Ind = 'Y') and (users.ID = users_purchased_slots.USER_ID)";
$resultS = mysql_query($SQLS) or die(mysql_error());
if($myrowS=MySQL_fetch_array($resultS)){
  $self_slots_left = $myrowS["NUMBER_LEFT"];
  $self_slots_used = $myrowS["NUMBER_USED"];
  $self_date_purchased = $myrowS["DATE_PURCHASED"];
}

//NOW PIGGY BACK A USER IF POSSIBLE
  //FIRST CASE IS IF INVITEE HAS SLOTS OPEN AND A LATER PURCHASE DATE
  if(  ($friend_slots_left > 0) && ($friend_date_purchased > $self_date_purchased)   ){
     //give Accepter The Invitee's Slot 
	 $sql = "update users set Prem_Ind = 'Y', MASTER_ACCOUNT = '$friend_id'  where ID = '$selfID' ";
	 $result = mysql_query($sql) or die(mysql_error());
	 //now decrement the invitees slots
	 $friend_slots_left = $friend_slots_left - 1;
	 $friend_slots_used = $friend_slots_used + 1;
	 $sql = "update users_purchased_slots set NUMBER_LEFT = '$friend_slots_left', NUMBER_USED = '$friend_slots_used' where USER_ID = '$friend_id' ";
	 $result = mysql_query($sql) or die(mysql_error());
  }else{
    //see if we should give the invitee one of the accepter's slots
    if(  ($self_slots_left > 0) && ($self_date_purchased > $friend_date_purchased)   ){
	    //give Invitee The Accepter's Slot  
		 $sql = "update users set Prem_Ind = 'Y', MASTER_ACCOUNT = '$selfID'  where ID = '$friend_id' ";
		 $result = mysql_query($sql) or die(mysql_error());
		 //now decrement the invitees slots
		 $self_slots_left = $self_slots_left - 1;
		 $self_slots_used = $self_slots_used + 1;
		 $sql = "update users_purchased_slots set NUMBER_LEFT = '$self_slots_left', NUMBER_USED = '$self_slots_used' where USER_ID = '$selfID' ";
		 $result = mysql_query($sql) or die(mysql_error());
	}
  }


//**********END OF PREMIUM PIGGY BACK


	}
		
   $msg ="y" ;
   } else {
   header("Location: inbox.php");
   }
}

if($ACCEPT == "REJECT" && $msg_id > " "){

        $sqlupdate = "UPDATE  invitations   SET Accepted = 'Y' WHERE (USER_ID = '$friend_id' and EMAIL = '" . $_SESSION["sessionEmail"]. "')";
		$result = mysql_query($sqlupdate) or die(mysql_error());
		
		$message = $_SESSION["sessionFname"] . " has declined to join your network!" ;
		
		$dateSent=date("Y-m-d") ;
		$timeSent = date("H:i") ;
		$msgTitle = "Your Network" ;
		$sqlInsert = "INSERT INTO messages (From_ID, To_ID, Date_Sent, Time_Sent, Mark_As_Read, The_Text,msg_title)" ;
		$sqlInsert = $sqlInsert . " VALUES ('" . $_SESSION["sessionUserID"] . "','$friend_id','$dateSent','$timeSent','N','$message','$msgTitle')" ;
		$result2 = mysql_query($sqlInsert) or die(mysql_error());
	   $replyID =  mysql_insert_id() ;
	   
	   $sqlupdate = "Update messages Set Reply_ID='$replyID' where ID='$replyID'";
	   $result2 = mysql_query($sqlupdate) or die(mysql_error());
		
		$sqlupdate3 = "delete from messages WHERE (ID ='$msg_id')";
		$result3 = mysql_query($sqlupdate3) or die(mysql_error());
		$msg ="n" ;
 
}

?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>yada home</title>
<link href="myfridge.css" rel="stylesheet" type="text/css" />
<style type="text/css">
<!--
.style13 {
	font-size: 12px;
	color: #CD004B;
}
-->
</style>

<? include 'beforeEndHead.php'; ?></head>

<body  >
<table width="730" border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td width="388"><img src="images/messagesHeadline.jpg" width="340" height="42" /></td>
    <td width="23" align="right">&nbsp;</td>
    <td width="335" align="center">&nbsp;
	
    </td>
    <td width="3" align="left">&nbsp;</td>
  </tr>
  <tr>
    <td colspan="4"><table width="100%" border="0" cellspacing="0" cellpadding="8">
    <? if($msg == "y"){?>
        <tr>
        <td colspan="4" align="center" valign="top">&nbsp;</p>
                &nbsp;
            <p class="style13">Thank you. Your have accepted an invitation to join <?= $fname ?>'s network. </p>
          <p>&nbsp;</p></td>
        </tr>
      <tr>
        <td colspan="4" align="center" valign="top"><a href="inbox.php">Go Back To your Messages</a></td>
        </tr>
    <? } else if($msg == "n"){?>
        <tr>
        <td colspan="4" align="center" valign="top">&nbsp;</p>
                &nbsp;
            <p class="style13">You have rejected a request to join <?= $fname ?>'s network. </p>
          <p>&nbsp;</p></td>
        </tr>
      <tr>
        <td colspan="4" align="center" valign="top"><a href="inbox.php">Go Back To your Messages</a></td>
        </tr>

    <? } else {?>
      <form action="myMsgConfirmJoinNetwork.php" method="post" name="form1">
       <input type="hidden" name="friend" value="<?= $_REQUEST["friend"] ?>">
       <input type="hidden" name="msg" value="<?= $_REQUEST["msg"] ?>">
      <tr>
        <td colspan="4" align="center" valign="top">&nbsp;</p>
                &nbsp;
                <p class="style13">By clicking  &quot;accept&quot; below, you are accepting an invitation to join <?= $fname ?>'s network.<br />
                <br />
                <br />
              </p>          </td>
        </tr>
      <tr>
        <td width="41%" valign="top">&nbsp;</td>
        <td width="11%" valign="top" ><input name="ACCEPT" type="submit" class="Submit" value="ACCEPT" /></td>
        <td width="14%" valign="middle"><input name="ACCEPT" type="submit" class="Submit" value="REJECT" />
        </td>
        <td width="34%" valign="top">&nbsp;</td>
      </tr></form>
      <? }?>
    </table>
      <div style="border : solid 0px #ffffff; background : #ffffff; padding : 4px; width : 720px; height : 345px; overflow : auto; "></div>
      <br />
  </td>
  </tr>
</table>
<? include "googAna.php"; ?></body>
</html>