<?php
/*
	DCMS - DeeKeiD'z Content Managment System
	This file is protected by the intelectual property law
	Code by : DeeKeiD
*/
/* View function */
if($_GET['action']=="view")
{
	$s_id	=	(int)$_GET['id'];
	$res	=	mysql_query("SELECT * FROM `services` WHERE `id` = '". $s_id ."'");
	$row	=	mysql_fetch_assoc($res);
/* html form */
?>
<script type="text/javascript" language="javascript"> 
var req = Create(); 

function ge(id) 
{ 
    return document.getElementById(id); 
} 

function Create(){  
if(navigator.appName == "Microsoft Internet Explorer"){  
req = new ActiveXObject("Microsoft.XMLHTTP");  
}else{  
req = new XMLHttpRequest();  
}  
return req;  
}  

function Request(query) 
{ 
req.open('post', '/services/order/' , true ); 
req.onreadystatechange = Refresh; 
req.setRequestHeader("Content-Type", "application/x-www-form-urlencoded; charset=utf-8");
req.send(query);  
}  

function Refresh() 
{ 
    if( req.readyState == 4 ) 
    ge('ajax').innerHTML = req.responseText; 
    else 
    ge('ajax').innerHTML = '<img src="prel.gif" />'; 

} 
function Pusk() 
{  
var query;  

    query ='price='+encodeURIComponent(ge('myid').value); 

Request(query); 
} 
</script>
<?php
	echo	'<div id="ajax"></div>';
	echo	'<table width="100%" class="head1">';
	echo	'<tr>';
	echo	'<td align="center">'. $row['name'] .'</td>';
	echo	'</tr>';
	echo	'</table>';
	echo	'<table width="100%" class="body1">';
	echo	'<tr>';
	echo	'<td>'. $row['description'] .'</td>';
	echo	'</tr>';
	echo	'<tr>';
	echo	'<td align="center"><input type="button" value="ТЫРЦ" onClick="Pusk()"></td>';
	echo	'</tr>';
	echo	'</table>';
	echo	'<input type="hidden" name="price" value="'. $row['cost'] .'" id="myid">';
}
elseif($_GET['action']=="order")
{
/* Getting form data */
$price	=	(int)$_POST['price'];
	/* checking enough money */
	if($user['money'] < $price)
	{
		sleep(3);
		echo 'error';
	}
	else
	{
		mysql_query("UPDATE `users` SET `money` = `money` - '". $price ."' WHERE `login` = '". $loggedin ."'");
		sleep(3);
		echo 'success';
	}
}
else
{
/* Services list */
	echo	'<table width="100%" class="head1">';
	echo	'<tr>';
	echo	'<td align="center">services</td>';
	echo	'</tr>';
	echo	'</table>';
	echo	'<table width="100%" class="body1">';
	echo	'<tr>';
	echo	'<td width="10%" align="center"><b>#</b></td>';
	echo	'<td width="20%"><b>Service</b></td>';
	echo	'<td width="45%"><b>Description</b></td>';
	echo	'<td width="10%" align="center"><b>Cost</b></td>';
	echo	'<td width="15%" align="center"><b>Options</b></td>';
	echo	'</tr>';
	echo	'</table>';
	$res	=	mysql_query("SELECT * FROM `services` ORDER BY `id` DESC");
	while($row = mysql_fetch_assoc($res))
	{
	echo	'<table width="100%" class="body1">';
	echo	'<tr>';
	echo	'<td width="10%"><img src="/images/services/'.$row['img'].'"></td>';
	echo	'<td width="20%">'.$row['name'].'</td>';
	echo	'<td width="45%">'.$row['description'].'</td>';
	echo	'<td width="10%" align="center">'.$row['cost'].'</td>';
	echo	'<td width="15%" align="center">';
	echo	'<a href="#">Подробней</a><br>';
	echo	'<a href="#">Заказать</a>';
	echo	'</td>';
	echo	'</tr>';
	echo	'</table>';
	}
}