[Resolvido] Shop System Points

[ryukicho 105]

Não achei olha como é 

[IagoNp 50]

Vá na pasta htdocs/modern/gifts e copie e cole o arquivo gifts.php para fazer um backup, feito isso abra o original e adicione isto dentro:

  Mostrar conteúdo oculto

<script type="text/javascript">
	$(function() {
		$("#accordion").accordion({
			autoHeight: false,
			navigation: true
		});
	});
</script>
<?PHP
//Product Types
//Categories :
//
//[ 1 - Account Modifications ]
//1 - Premium
//2 - Remove Skull (ANY)
//3 - UnBan Account
//4 - Change Name
//
//[ 2 - Items ]
//5 - Items
//
//[ 3 - Container Fully of Items ]
//6 - Bag of Items
//7 - Backpack of Items
//
//[ 4 - Addons Items ]
//8 - Addon Items
//
//HOWTO PUT IMAGES FOR TYPES 1-4 [ Account Modifications ]
//Go to public/images/ folder and create a GIF image (Or put)
//With the ID of the type [See at the top of the script]
//Ex. Type (1) - Premium Account (public/images/1.gif)


//Variables
require("config.php");
include("config/functions.php");
require("config/config.php");
$this->load->helper("url");
$ots = POT::getInstance();
$ots->connect(POT::DB_MYSQL, connection());
$SQL = $ots->getDBHandle();
$SHOP = new shop;
$ide = new IDE;
$action = $this->uri->segment(4);
$categories = array(1 => 'Account Modifications', 2 => 'Items', 3 => 'Containers with Items', 4 => 'Addon Items');
if ($_SESSION['logged'] == 1) {
	if ($SHOP->isInstalled()) {
	if ($action == '') {
		if($ide->isAdmin()) {
					echo "<div class='toolbar' align='center'>";
					echo "<a href='".WEBSITE."/index.php/p/v/gifts/admin'>Shop Admin Panel</a>";
					echo "</div>";
		}
		alert("<b>REMEMBER:</b><br><br>All categories, <b>except for 'Containers with Items'</b>:<br><br>Receiver need to have space on his/her <b>BACKPACK</b> to receive item.");
		echo '<div id="accordion">';
		$i = 0;
			foreach($categories as $key=>$value) {
					echo '<h3><a href="#">'.$categories[$key].'</a></h3>
					<div>';
					 if($SQL->query('SELECT * FROM shop_offer WHERE category = '.$key.'')->fetch()) {
						echo '<table border="0" cellspacing="1" cellpadding="4" width="100%">
						 <tr>
						  <td width="20%" class="white" style="text-align: center; font-weight: bold;">Picture</td>
						  <td width="40%" class="white" style="text-align: center; font-weight: bold;">Product</td>
						  <td width="20%" class="white" style="text-align: center; font-weight: bold;">Points</td>
						  <td width="20%" class="white" style="text-align: center; font-weight: bold;">Action</td>
						 </tr>';
						 foreach($SQL->query('SELECT * FROM shop_offer WHERE category = '.$key.'') as $item) {
							if (is_int($i / 2))
								$bgcolor = "#ececec";
							else
								$bgcolor = "#ffffff";
							$i++;
							echo '<tr class="highlight" bgcolor="'.$bgcolor.'" style="text-align: center;">
							<td>';
							if($item['category'] == '1')
							$image = 'public/images/'.$item['type'].'.gif';
							else
							$image = 'public/images/items/'.$item['item'].'.gif';
								  if(!file_exists($image))
									echo 'NO IMAGE';
								  else
									echo '<img height="32px" width="32px" src="'.WEBSITE.'/'.$image.'"/>';
								echo '</td>
								<td><b>'.$item['name'].'</b><br>'.$item['description'].'</td>
								<td>'.$item['points'].'</td>
								<td><button type="submit" onClick="window.location.href=\''.WEBSITE.'/index.php/p/v/gifts/buy/'.$item['id'].'\';" class="ide_button">Buy Product</button></td>
								</tr>';
						 }
						 echo '</table></div>';
					}
					else {
						alert("This category doesn't have products.");
						echo '</div>';
					}
			}
		echo '</div>';
		echo '<br><center><font style="color: #4F82CB; font-weight: bold; font-size: 12px">You have: <font color="#4EBF37">'.$SHOP->points($_SESSION['name']).'</font> premium points.</font></center>';
	}
	elseif ($action == 'buy') {
		$product = $this->uri->segment(5);
		$productact = $this->uri->segment(6);
		if (!$product) {
			alert("You didn't have selected a product.");
			echo '<div align="right"><a href="'.WEBSITE.'/index.php/p/v/gifts">Go Back to Gift Shop</a></div>';
		}
		else {
			if($SQL->query('SELECT * FROM shop_offer WHERE id = '.$product.'')->fetch()) {
				$info = $SQL->query('SELECT * FROM shop_offer WHERE id = '.$product.'')->fetch();
				if($productact == '' || !$productact) {
						if ($SHOP->points($_SESSION['name']) < $info['points']) {
							alert("You don't have enough points to buy this product (<b>".$info['points']."</b>)");
			echo '<div align="right"><a href="'.WEBSITE.'/index.php/p/v/gifts">Go Back to Gift Shop</a></div>';
						}
						else {
							echo '<div id="accordion">';
							echo '<h3><a href="#">Product Selected</a></h3>
							<div>';
						echo '<table border="0" cellspacing="1" cellpadding="4" width="100%">
						 <tr>
						  <td width="25%" class="white" style="text-align: center; font-weight: bold;">Picture</td>
						  <td width="50%" class="white" style="text-align: center; font-weight: bold;">Product</td>
						  <td width="25%" class="white" style="text-align: center; font-weight: bold;">Points</td>
						 </tr>';
							echo '<tr class="highlight" style="text-align: center">
							<td>';
							if($info['category'] == '1')
							$image = 'public/images/'.$info['type'].'.gif';
							else
							$image = 'public/images/items/'.$info['item'].'.gif';
								  if(!file_exists($image))
									echo 'NO IMAGE';
								  else
									echo '<img height="32px" width="32px" src="'.WEBSITE.'/'.$image.'"/>';
								echo '</td>
								<td><b>'.$info['name'].'</b><br>'.$info['description'].'</td>
								<td>'.$info['points'].'</td>
								</tr>';
						 echo '</table></div>
								<h3><a href="#">Player Selection</a></h3>
								<div>
								<center><table border="0" cellspacing="7" cellpadding="4" width="50%">
								<tr>
								<td><form method="post" action="'.WEBSITE.'/index.php/p/v/gifts/buy/'.$info['id'].'/send">';
								if($info['type'] == '4') 
									echo 'Character to Change Name:';
								else
									echo 'Give item to player:';
								echo '</td>
								<td><select name="my_char">';
								foreach($SHOP->CharacterList($_SESSION['name']) as $row)
									echo '<option>'.$row['name'].'</option>';
								echo '</select></td>
								</tr>
								<tr>
								<td>';
								if($info['type'] == '4') 
									echo 'New Name:';
								else
									echo 'Or another player:';
								echo '</td>
								<td><input type="text" name="other_char" size="10"/></td>
								</tr>
								<tr>
								<td></td>
								<td><button type="submit" name="submit" value="true" class="ide_button">Buy Product</td>
								</tr></table></center></div></div>';
								echo '<div align="right"><a href="'.WEBSITE.'/index.php/p/v/gifts/">Go Back to Gift Shop</a></div>';
						}
				}
				elseif ($productact == 'send') {
					if(!$_POST['submit'])
						header("Location: ".WEBSITE."/index.php/p/v/gifts");
					else {
					if($info['type'] != '4') {
						if($_POST['other_char']) {
							if($SQL->query('SELECT * FROM players WHERE name = "'.$_POST['other_char'].'"')->fetch()) {
								$destination = $_POST['other_char'];
								$send = true;
							} else {
								alert('<b>'.$_POST['other_char'].'</b> doesn\'t exists.');
								echo '<div align="right"><a href="'.WEBSITE.'/index.php/p/v/gifts/buy/'.$info['id'].'">Go Back to Gift Shop</a></div>';
								$send = false;
							}
						}
						else {
							$destination = $_POST['my_char'];
							$send = true;
						}
					}
					else {
						$destination = $_POST['my_char'];
						$send = true;
					}
						
						if($send == true) {
							$errors = '';
							$processed = 0;
							if ($info['type'] == '1') {
								$processed = 1;
								$finish = true;
								$SHOP->AddPremium($destination,$info['count']);
							}
							elseif ($info['type'] == '2') {
								$skulltime = $SQL->query('SELECT skull,skulltime FROM players WHERE name = "'.$destination.'"')->fetch();
								if ($SHOP->isOnline($destination) == 1) {
									$errors .= 'Sorry, but <b>'.$destination.'</b> is On-Line right now.<br>';
									$finish = false;
								}
								elseif ($skulltime['skull'] == '0' && $skulltime['skulltime'] == '0') {
									$errors .= 'Sorry, but <b>'.$destination.'</b> doesn\'t have any skull.<br>';
									$finish = false;
								}
								else {
									$processed = 1;
									$finish = true;
									$SQL->query('UPDATE players SET skull = 0, skulltime = 0 WHERE name = "'.$destination.'"');
								}
							}
							elseif ($info['type'] == '3') {
								if ($SHOP->isOnline($destination) == 1) {
									$errors .= 'Sorry, but <b>'.$destination.'</b> is On-Line right now.<br>';
									$finish = false;
								}
								else {
									if ($SHOP->isBanned($destination)->fetch()) {
										$processed = 1;
										$finish = true;
										$SHOP->UnBan($destination);
									}
									else {
										$errors .= 'Sorry, but <b>'.$destination.'</b>\'s Account isn\'t banned at the moment.<br>';
										$finish = false;
									}
								}
							}
							elseif ($info['type'] == '4') {
								if ($SHOP->isOnline($destination) == 1) {
									$errors .= 'Sorry, but <b>'.$destination.'</b> is On-Line right now.<br>';
									$finish = false;
								}
								else {
									if ($SQL->query('SELECT * FROM players WHERE name = "'.$_POST['other_char'].'"')->fetch()) {
										$finish = false;
										$errors .= 'Sorry, but <b>'.$_POST['other_char'].'</b> already exists.<br>';
									}
									else {
										if(!$_POST['other_char']) {
											$finish = false;
											$errors .= 'Sorry, but you didn\'t put a new name for your character.<br>';
										}
										else {
											if (!preg_match('/[^A-Za-z]/', $_POST['other_char'])) {
												$processed = 1;
												$finish = true;
												$SQL->query('UPDATE players SET name = "'.$_POST['other_char'].'" WHERE name = "'.$destination.'"');
											}
											else {
												$finish = false;
												$errors .= 'Sorry, but <b>'.$_POST['other_char'].'</b> contains invalid characters (Use only: A-Z, a-z).<br>';
											}
										}
									}
								}
							}
							else {
								$finish = true;
							}
							if ($finish == true) {
							echo '<div style="text-align: center; font-size: 15px; color: #4EBF37; font-weight: bold;">Transaction Succesfull</div><br>';
							if($info['type'] == '4')
							echo '<center>You have changed the name of <b>'.$destination.'</b> to <b>'.$_POST['other_char'].'</b>.</center>';
							elseif($info['type'] == '3')
							echo '<center>You have UnBanned <b>'.$destination.'</b>\'s Account.</center>';
							else
							echo '<center>You have bought <b>'.$info['name'].'</b> and gave to <b>'.$destination.'</b>.</center>';
							echo '<div align="right"><a href="'.WEBSITE.'/index.php/p/v/gifts">Go Back to Gift Shop</a></div>';
							$SQL->query('UPDATE accounts SET premium_points = '.($SHOP->points($_SESSION['name']) - $info['points']).' WHERE name = "'.$_SESSION['name'].'"');
							$SQL->query('INSERT INTO shop_history (`id`, `product`, `session`, `player`, `date`, `processed`) VALUES (NULL, \''.$info['id'].'\',\''.$_SESSION['name'].'\', \''.$destination.'\', \''.time().'\',\''.$processed.'\')');;
							}
							else {
							alert($errors);
							echo '<div align="right"><a href="'.WEBSITE.'/index.php/p/v/gifts/buy/'.$info['id'].'">Go Back to Gift Shop</a></div>';
							}
						}
					}
				}
			}
			else {
				header("Location: ".WEBSITE."/index.php/p/v/gifts");
			}
			echo '<br><center><font style="color: #4F82CB; font-weight: bold; font-size: 12px">You have: <font color="#4EBF37">'.$SHOP->points($_SESSION['name']).'</font> premium points.</font></center>';
		}
	}
	elseif ($action == 'history') {
		if ($SQL->query('SELECT * FROM shop_history WHERE session = "'.$_SESSION['name'].'" ORDER BY date DESC LIMIT 30')->fetch()) {
			echo '<div style="text-align: center; font-weight: bold;">Latest 30 Transactions</div>
			<table border="0" cellspacing="1" cellpadding="4" width="100%">
			 <tr>
			  <td class="white" style="text-align: center; font-weight: bold;">Picture</td>
			  <td class="white" style="text-align: center; font-weight: bold;">Product</td>
			  <td class="white" style="text-align: center; font-weight: bold;">To</td>
			  <td class="white" style="text-align: center; font-weight: bold;">Date</td>
			  <td class="white" style="text-align: center; font-weight: bold;">Processed</td>
			 </tr>';
			 foreach($SQL->query('SELECT `z`.`player` AS `destination`, `z`.`date` AS `date`, `z`.`processed` AS `processed`, `o`.`category` AS `category`,`o`.`type` AS `type`,`o`.`item` AS `item`,`o`.`name` AS `name` FROM `shop_history` z LEFT JOIN `shop_offer` o ON `z`.`product` = `o`.`id` WHERE `z`.`session` = \''.$_SESSION['name'].'\' ORDER BY `z`.`date` DESC LIMIT 30') as $hist) {
				echo '<tr class="highlight" style="text-align: center"><td>';
				if($hist['category'] == '1')
				$image = 'public/images/'.$hist['type'].'.gif';
				else
				$image = 'public/images/items/'.$hist['item'].'.gif';
					  if(!file_exists($image))
						echo 'NO IMAGE';
					  else
						echo '<img height="32px" width="32px" src="'.WEBSITE.'/'.$image.'"/>';
					echo '</td>
					<td>'.$hist['name'].'</td>
					<td>'.$hist['destination'].'</td>
					<td>'.date("d-m-Y - H:i a", $hist["date"]).'</td>';
						if ($hist['processed'] == '1')
							echo '<td><img src="'.WEBSITE.'/public/images/true.gif"/></td>';
						else
							echo '<td><img src="'.WEBSITE.'/public/images/false.gif"/></td>';
					echo '</tr>';
			 }
			 echo '</table>';
		}
		else {
			alert('You didn\'t made any transactions');
		}
	}
	elseif ($action == 'donate') {
		$show = $this->uri->segment(5);
			if ($show == 'history') {
				if ($SQL->query('SELECT * FROM shop_donation_history WHERE buyer = "'.$_SESSION['name'].'" ORDER BY date DESC LIMIT 30')->fetch()) {
			echo '<div style="text-align: center; font-weight: bold;">Latest 30 Donations</div>
			<table border="0" cellspacing="1" cellpadding="4" width="100%">
			 <tr>
			  <td class="white" style="text-align: center; font-weight: bold;">Method</td>
			  <td class="white" style="text-align: center; font-weight: bold;">ID/Mail</td>
			  <td class="white" style="text-align: center; font-weight: bold;">To Account</td>
			  <td class="white" style="text-align: center; font-weight: bold;">Points Added</td>
			  <td class="white" style="text-align: center; font-weight: bold;">Date</td>
			 </tr>';
			 foreach($SQL->query('SELECT * FROM shop_donation_history WHERE buyer = "'.$_SESSION['name'].'" ORDER BY date DESC LIMIT 30') as $hist) {
				echo '<tr class="highlight" style="text-align: center">
				<td>'; echo ($hist['method'] == 'PayPal')?'<img src="https://www.paypal.com/en_US/i/logo/paypal_logo.gif" height="50px" width="100px">':($hist['method'] == 'PagSeguro')?'<img src="http://www.contenidopago.com/img/logo_ft.jpg" height="50px" width="100px">':''; echo '</td>
				<td>'.$hist['receiver'].'</td>
				<td>'.$hist['account'].'</td>
				<td>'.$hist['points'].'</td>
				<td>'.date("d-m-Y - H:i a", $hist["date"]).'</td>
				</tr>';
			 }
			 echo '</table>';
		}
		else {
			alert('You didn\'t donated');
		}
			}
			elseif (!$show || $show == '') {
				echo '<div id="accordion">';
					foreach ($config['donations']['methods'] as $method => $active) {
						if ($active == true) {
							echo '<h3><a href="#">'.$method.'</a></h3>
				<div>';
					if ($method == 'Depósito') {
						alert("Depósito em conta bancária<br><br>
	");
						if(!isset($_POST['mysubmit'])) {
						echo '';
						}
						else {
							$codigo=$_POST['codigo'];
							$name=$_POST['name'];
							$QueryString  = "LinkUrl=http://".urlencode($_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI']);
							$QueryString .= "&codigo=" .urlencode($codigo);
							$QueryString .= "&idservicio=" .$config['donations']['contenidopago']['Product'];


							if(intval(get_cfg_var('allow_url_fopen')) && function_exists('file_get_contents')) {
								$result=@file_get_contents("http://contenidopago.com/codigoval.php?".$QueryString); 
							}
							elseif(intval(get_cfg_var('allow_url_fopen')) && function_exists('file')) {
								if($content = @file("http://contenidopago.com/codigoval.php?".$QueryString)) 
								  $result=@join('', $content);
							}
							elseif(function_exists('curl_init')) {
								$ch = curl_init ("http://contenidopago.com/codigoval.php?".$QueryString);
								curl_setopt ($ch, CURLOPT_HEADER, 0);
								curl_exec ($ch);

								if(curl_error($ch))
									alert("Error processing request");

								curl_close ($ch);
							}
							else {
								alert("It appears that your web host has disabled all functions for handling remote pages and as a result the BackLinks software will not function on your web page. Please contact your web host for more information.");
							}

							if ($result =='ok')
							{

							if(!(empty($name)))
							{
								if(!$SQL->query("SELECT * FROM accounts WHERE name = '".$name."'")->fetch())
								{
									alert('This username does not exist: <font color="blue">'.$name.'</font>');	
								}
								else {
								$SQL->query("UPDATE accounts SET premium_points = premium_points + ".$config['donations']['contenidopago']['Points']." WHERE name = '".$name."'");
								alert("Codigo : $codigo validado, puntos sumados correctamente");
								$SQL->query("INSERT INTO shop_donation_history (`id`, `method`, `receiver`, `buyer`, `account`, `points`, `date`) VALUES (NULL, 'ContenidoPago', '".$config['donations']['contenidopago']['Product']."', '".$_SESSION['name']."', '".$name."', '".$config['donations']['contenidopago']['Points']."', '".time()."');");	
								}
							}
							else {

							  alert('You did not set the user!'); 
							 } 
									
							}

							if ($result =='no')
							{
							alert('El codigo no es valido o ya esta usado');
							}
						}
						echo '';
					}

					elseif ($method == 'PagSeguro') {
						alert("Em andamento");
						if(!isset($_POST['mysubmit'])) {
						echo '<center><!-- INICIO FORMULARIO BOTAO PAGSEGURO -->
<form target="pagseguro" action="https://pagseguro.uol.com.br/checkout/doacao.jhtml" method="post">
<input type="hidden" name="email_cobranca" value="" />
<input type="hidden" name="moeda" value="BRL" />
<input type="image" src="https://p.simg.uol.com.br/out/pagseguro/i/botoes/doacoes/95x45-doar.gif" name="submit" alt="Pague com PagSeguro - é rápido, grátis e seguro!" />
</form>
<!-- FINAL FORMULARIO BOTAO PAGSEGURO --></center>';
						}
						else {
							$codigo=$_POST['codigo'];
							$name=$_POST['name'];
							$QueryString  = "LinkUrl=http://".urlencode($_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI']);
							$QueryString .= "&codigo=" .urlencode($codigo);
							$QueryString .= "&idservicio=" .$config['donations']['contenidopago']['Product'];


							if(intval(get_cfg_var('allow_url_fopen')) && function_exists('file_get_contents')) {
								$result=@file_get_contents("http://contenidopago.com/codigoval.php?".$QueryString); 
							}
							elseif(intval(get_cfg_var('allow_url_fopen')) && function_exists('file')) {
								if($content = @file("http://contenidopago.com/codigoval.php?".$QueryString)) 
								  $result=@join('', $content);
							}
							elseif(function_exists('curl_init')) {
								$ch = curl_init ("http://contenidopago.com/codigoval.php?".$QueryString);
								curl_setopt ($ch, CURLOPT_HEADER, 0);
								curl_exec ($ch);

								if(curl_error($ch))
									alert("Error processing request");

								curl_close ($ch);
							}
							else {
								alert("It appears that your web host has disabled all functions for handling remote pages and as a result the BackLinks software will not function on your web page. Please contact your web host for more information.");
							}

							if ($result =='ok')
							{

							if(!(empty($name)))
							{
								if(!$SQL->query("SELECT * FROM accounts WHERE name = '".$name."'")->fetch())
								{
									alert('This username does not exist: <font color="blue">'.$name.'</font>');	
								}
								else {
								$SQL->query("UPDATE accounts SET premium_points = premium_points + ".$config['donations']['contenidopago']['Points']." WHERE name = '".$name."'");
								alert("Codigo : $codigo validado, puntos sumados correctamente");
								$SQL->query("INSERT INTO shop_donation_history (`id`, `method`, `receiver`, `buyer`, `account`, `points`, `date`) VALUES (NULL, 'ContenidoPago', '".$config['donations']['contenidopago']['Product']."', '".$_SESSION['name']."', '".$name."', '".$config['donations']['contenidopago']['Points']."', '".time()."');");	
								}
							}
							else {

							  alert('You did not set the user!'); 
							 } 
									
							}

							if ($result =='no')
							{
							alert('El codigo no es valido o ya esta usado');
							}
						}
						echo '';
					}
					elseif ($method == 'PayPal') {
						alert("Em andamento.");
						echo '<center><form TARGET="_blank" action="https://www.paypal.com/cgi-bin/webscr" method="post">
<input type="hidden" name="cmd" value="_donations">
<input type="hidden" name="business" value="">
<input type="hidden" name="lc" value="BR">
<input type="hidden" name="item_name" value="Gameria Servers">
<input type="hidden" name="no_note" value="0">
<input type="hidden" name="currency_code" value="BRL">
<input type="hidden" name="bn" value="PP-DonationsBF:btn_donateCC_LG.gif:NonHostedGuest">
<input type="image" src="https://www.paypalobjects.com/pt_BR/BR/i/btn/btn_donateCC_LG.gif" border="0" name="submit" alt="PayPal - A maneira mais fácil e segura de efetuar pagamentos online!">
<img alt="" border="0" src="https://www.paypalobjects.com/pt_BR/i/scr/pixel.gif" width="1" height="1">
</form>
</center>';
					}
		echo '</div>';
				}
			}
		echo '</div>';
			}
			else {
				header("Location: ".WEBSITE."/index.php/p/v/gifts/donate");
			}
	}
	elseif ($action == 'admin') {
			if($ide->isAdmin()) {
				$manage = $this->uri->segment(5);
					echo "<div class='toolbar' align='center'>";
					echo "<a href='".WEBSITE."/index.php/p/v/gifts/admin/add/1'>Add new Product</a> | ";
					echo "<a href='".WEBSITE."/index.php/p/v/gifts/admin/delete'>Delete Existing Product</a> | ";
					echo "<a href='".WEBSITE."/index.php/p/v/gifts/admin/points'>Add/Remove Points to Player</a>";
					echo "</div>";
					
						if ($manage == '' || !$manage) {
							echo '<center>Welcome to Shop Admin Panel</center>';
						}
						elseif ($manage == 'add') {
						$types[1] = array(1 => 'Premium Account', 2 => 'Remove Skull', 3 => 'UnBan Account', 4 => 'Change Name');
						$types[2] = array(5 => 'Item');
						$types[3] = array(6 => 'Bag with Items', 7 => 'Backpack with Items');
						$types[4] = array(8 => 'Addon Items');
						$step = $this->uri->segment(6);
							if ($step == '1') {
								echo '<form method="post" action="'.WEBSITE.'/index.php/p/v/gifts/admin/add/2">Select Category: <select name="category">';
								foreach($categories as $key=>$value) {
									echo '<option value="'.$key.'">'.$categories[$key].'</option>';
								}
								echo '</select> <button type="submit" class="ide_button">Select Category</form>';
							}
							elseif ($step == '2' && $_POST['category']) {
								echo '<form method="post" action="'.WEBSITE.'/index.php/p/v/gifts/admin/add/3">
								<input type="hidden" name="category" value="'.$_POST['category'].'"/>
								Select Type: <select name="type">';
								foreach($types[$_POST['category']] as $key=>$value) {
									echo '<option value="'.$key.'">'.$types[$_POST['category']][$key].'</option>';
								}
								echo '</select> <button type="submit" class="ide_button">Select Type</form>';
							}
							elseif ($step == '3' && $_POST['category'] && $_POST['type']) {
									echo '<form method="post" action="'.WEBSITE.'/index.php/p/v/gifts/admin/add/4">
									<input type="hidden" name="category" value="'.$_POST['category'].'"/>
									<input type="hidden" name="type" value="'.$_POST['type'].'"/>
									<table border="0" cellspacing="1" cellpadding="4" width="100%">
										<tr>
										<td width="25%">Product Name:</td>
										<td width="25%"><input name="name" type="text" size="18" maxlength="256" /></td>
										<td width="50%" style="font-size: 9px; color: red; font-weight: bold;">The name of the product</td>
										</tr>
										<tr>
										<td width="25%">Point Cost:</td>
										<td width="25%"><input name="points" type="text" value="0" size="10" maxlength="11" /></td>
										<td width="50%" style="font-size: 9px; color: red; font-weight: bold;">Cost of the Product (Points)</td>
										</tr>';
									if ($_POST['type'] == '1') {
										echo '<tr>
										<td width="25%">Premium Days:</td>
										<td width="25%"><input name="count" type="text" value="0" size="1" maxlength="3" /></td>
										<td width="50%" style="font-size: 9px; color: red; font-weight: bold;">Days of Premium Account</td>
										</tr>';
									}
									elseif ($_POST['type'] == '5' || $_POST['type'] == '6' || $_POST['type'] == '7' || $_POST['type'] == '8') {
										echo '<tr>
										<td width="25%">Item ID:</td>
										<td width="25%"><input name="item" type="text" value="0" size="3" maxlength="5" /></td>
										<td width="50%" style="font-size: 9px; color: red; font-weight: bold;">ID of item to give</td>
										</tr>
										<tr>
										<td width="25%">Count:</td>
										<td width="25%"><input name="count" type="text" value="0" size="1" maxlength="3" /></td>
										<td width="50%" style="font-size: 9px; color: red; font-weight: bold;">Count of item (max. 100) (When selecting \'Backpack of Items\' or \'Bag of Items\' type, the ITEM with that count will fill the container!)</td>
										</tr>';
									}
									echo '<tr>
										<td width="25%">Product Description:</td>
										<td width="25%"><textarea style="width: 120px; height: 80px;" name="description"></textarea></td>
										<td width="50%" style="font-size: 9px; color: red; font-weight: bold;">Description (Shown of \'Gifts\' Page)</td>
										</tr>
										</table>
										<br><center><button type="submit" name="done" value="true" class="ide_button">Add Product</form></center>';
							}
							elseif ($step == '4' && $_POST['done'] == 'true') {
							$errors = '';
								if ($_POST['points'] || $_POST['item'] || $_POST['count']) {
									if($_POST['points']) {
										if (!(!preg_match('/[^0-9]/', $_POST['points'])))
											$errors .= '1';
									}
									elseif($_POST['item']) {
										if (!(!preg_match('/[^0-9]/', $_POST['item'])))
											$errors .= '2';
									}
									elseif($_POST['count']) {
										if (!(!preg_match('/[^0-9]/', $_POST['count'])))
											$errors .= '3';
									}
								}
								if ($errors == '') {
									echo '<div style="text-align: center; font-size: 15px; color: #4EBF37; font-weight: bold;">Product Added!</div><br>
										<table border="0" cellspacing="1" cellpadding="4" width="100%">
										<tr class="highlight">
										<td style="font-weight: bold;" width="50%">Product Name:</td>
										<td width="50%">'.$_POST['name'].'</td>
										</tr>
										<tr class="highlight">
										<td style="font-weight: bold;" width="50%">Category:</td>
										<td width="50%">'.$categories[$_POST['category']].'</td>
										</tr>
										<tr class="highlight">
										<td style="font-weight: bold;" width="50%">Type:</td>
										<td width="50%">'.$types[$_POST['category']][$_POST['type']].'</td>
										</tr>
										<tr class="highlight">
										<td style="font-weight: bold;" width="50%">Point Cost:</td>
										<td width="50%">'.$_POST['points'].'</td>
										</tr>';
										if($_POST['type'] == '1') {
											echo '<tr class="highlight"><td style="font-weight: bold;" width="50%">Premium Days:</td>
											<td width="50%">'.$_POST['count'].'</td>
											</tr>';
										}
										elseif ($_POST['type'] == '5' || $_POST['type'] == '6' || $_POST['type'] == '7' || $_POST['type'] == '8') {
											echo '<tr class="highlight"><td style="font-weight: bold;" width="50%">Item ID:</td>
											<td width="50%">'.$_POST['item'].'</td>
											</tr>
											<tr class="highlight"><td style="font-weight: bold;" width="50%">Count:</td>
											<td width="50%">'.$_POST['count'].'</td>
											</tr>';
										}
										echo '<tr class="highlight"><td style="font-weight: bold;" width="50%">Description:</td>
											<td width="50%">'.$_POST['description'].'</td>
											</tr></table>';
										$PostItem = (!isset($_POST['item']))?'0':$_POST['item'];
										$PostCount = (!isset($_POST['count']))?'0':$_POST['count'];
										$SQL->query("INSERT INTO shop_offer (`id`, `points`, `category`, `type`, `item`, `count`, `description`, `name`) VALUES (NULL, '".$_POST['points']."', '".$_POST['category']."', '".$_POST['type']."', '".$PostItem."', '".$PostCount."', '".$_POST['description']."', '".$_POST['name']."')");
									echo '<div align="right"><a href="'.WEBSITE.'/index.php/p/v/gifts/admin">Go Back to Shop Admin</a></div>';
								}
								else {
									alert('Sorry but 1 or more spaces contains invalid characters.');
									echo '<div align="right"><a href="'.WEBSITE.'/index.php/p/v/gifts/admin">Go Back to Shop Admin</a></div>';
								}
							}
							else {
								header("Location: ".WEBSITE."/index.php/p/v/gifts/admin/add/1");
							}
						}
						elseif ($manage == 'delete') {
							$product = $this->uri->segment(6);
							if (!$product) {
								echo '<div id="accordion">';
			$i = 0;
			foreach($categories as $key=>$value) {
					echo '<h3><a href="#">'.$categories[$key].'</a></h3>
					<div>';
					 if($SQL->query('SELECT * FROM shop_offer WHERE category = '.$key.'')->fetch()) {
						echo '<table border="0" cellspacing="1" cellpadding="4" width="100%">
						 <tr>
						  <td width="20%" class="white" style="text-align: center; font-weight: bold;">Picture</td>
						  <td width="40%" class="white" style="text-align: center; font-weight: bold;">Product</td>
						  <td width="20%" class="white" style="text-align: center; font-weight: bold;">Points</td>
						  <td width="20%" class="white" style="text-align: center; font-weight: bold;">Action</td>
						 </tr>';
						 foreach($SQL->query('SELECT * FROM shop_offer WHERE category = '.$key.'') as $item) {
							if (is_int($i / 2))
								$bgcolor = "#ececec";
							else
								$bgcolor = "#ffffff";
							$i++;
							echo '<tr class="highlight" bgcolor="'.$bgcolor.'" style="text-align: center;">
							<td>';
							if($item['category'] == '1')
							$image = 'public/images/'.$item['type'].'.gif';
							else
							$image = 'public/images/items/'.$item['item'].'.gif';
								  if(!file_exists($image))
									echo 'NO IMAGE';
								  else
									echo '<img height="32px" width="32px" src="'.WEBSITE.'/'.$image.'"/>';
								echo '</td>
								<td><b>'.$item['name'].'</b><br>'.$item['description'].'</td>
								<td>'.$item['points'].'</td>
								<td><button type="submit" onClick="window.location.href=\''.WEBSITE.'/index.php/p/v/gifts/admin/delete/'.$item['id'].'\';" class="ide_button">Delete Offer</button></td>
								</tr>';
						 }
						 echo '</table></div>';
					}
					else {
						alert("This category doesn't have products.");
						echo '</div>';
					}
			}
		echo '</div>';
							}
							else {
								if($SQL->query('SELECT * FROM shop_offer WHERE id = '.$product.'')->fetch()) {
									$SQL->query('DELETE FROM shop_offer WHERE id = '.$product.'');
									$SQL->query('DELETE FROM shop_history WHERE product = '.$product.'');
									echo '<div style="text-align: center; font-size: 15px; color: #4EBF37; font-weight: bold;">Product Deleted!</div><br>
									<center>The product ID <b>'.$product.'</b> has been deleted from DataBase.</center>';
									echo '<div align="right"><a href="'.WEBSITE.'/index.php/p/v/gifts/admin">Go Back to Shop Admin</a></div>';
								}
								else {
									header("Location: ".WEBSITE."/index.php/p/v/gifts/admin/delete");
								}
							}
						}
						elseif ($manage == 'points') {
							if (!isset($_POST['submit'])) {
								echo '<div id="accordion">
								<h3><a href="#">Add Points</a></h3>
								<div>
								<table border="0" cellspacing="1" cellpadding="4" width="100%">
								<tr>
										<form method="post" action="'.$_SERVER['PHP_SELF'].'">
										<td>Select Player:</td>
										<td><select name="player">';
										foreach($SQL->query('SELECT * FROM players ORDER BY name DESC') as $player) {
											echo '<option value="'.$player['id'].'">'.$player['name'].'</option>';
										}
										echo '</select></td>
										</tr><tr>
										<td>Or Type a Name:</td>
										<td><input type="text" name="other_char" size="10"/></td>
										</tr><tr>
										<td>Points to Add:</td>
										<td><input type="text" name="points" size="10"/></td>
										</tr><tr>
										<td></td>
										<td><button type="submit" name="submit" value="add" class="ide_button"><button class="ide_button">Add Points</button></td>
										</tr>
										</table></form>
								</div>
								<h3><a href="#">Remove Points</a></h3>
								<div>
								<table border="0" cellspacing="1" cellpadding="4" width="100%">
								<tr>
										<form method="post" action="'.$_SERVER['PHP_SELF'].'">
										<td>Select Player:</td>
										<td><select name="player">';
										foreach($SQL->query('SELECT * FROM players ORDER BY name DESC') as $player) {
											echo '<option value="'.$player['id'].'">'.$player['name'].'</option>';
										}
										echo '</select></td>
										</tr><tr>
										<td>Or Type a Name:</td>
										<td><input type="text" name="other_char" size="10"/></td>
										</tr><tr>
										<td>Points to Remove:</td>
										<td><input type="text" name="points" size="10"/></td>
										</tr><tr>
										<td></td>
										<td><button type="submit" name="submit" value="remove" class="ide_button"><button class="ide_button">Remove Points</button></td>
										</tr>
										</table></form>
								</div>
								</div>';
							}
							else {
							$errors = "";
								if(!isset($_POST['other_char']) || $_POST['other_char'] == '') {
									$destination = $_POST['player'];
								}
								else {
									$ID = $SQL->query('SELECT id FROM players WHERE name = "'.$_POST['other_char'].'"')->fetch();
										if($ID)
											$destination = $ID['id'];
										else
											$errors .= "Player <b>".$_POST['other_char']."</b> doesn't exists.<br>";
								}
								if($_POST['points'] == '0' || $_POST['points'] < '0')
									$errors .= "Points quantity must be higher than 0!<br>";
								elseif (!(!preg_match('/[^0-9]/', $_POST['points'])))
									$errors .= "Point quantity must be a <b>numeric value</b>!";
									
								if(isset($destination)) {
									$player = $SQL->query('SELECT name FROM players WHERE id = "'.$destination.'"')->fetch();
									$account = $SHOP->getPlayerAccount($player['name'])->fetch();
										if ($_POST['submit'] == 'remove') {
											if ($SHOP->points($account['name']) == '0' || $SHOP->points($account['name']) < '0')
												$errors .= "Player <b>".$player['name']."</b> doesn't have any points.<br>";
										}
								}
								
												if ($errors == '') {
												$player = $SQL->query('SELECT name FROM players WHERE id = "'.$destination.'"')->fetch();
												$account = $SHOP->getPlayerAccount($player['name'])->fetch();
												echo '<div style="text-align: center; font-size: 15px; color: #4EBF37; font-weight: bold;">Points '; echo ($_POST['submit'] == 'add')?'added':'removed'; echo '!</div><br>
												<center>You have '; echo ($_POST['submit'] == 'add')?'added':'removed'; echo ' <b>'.$_POST['points'].'</b> points to <b>'.$player['name'].'</b>\'s Account.</center>';
												echo '<div align="right"><a href="'.WEBSITE.'/index.php/p/v/gifts/admin/points">Go Back to Points Manage</a></div>';
												if($_POST['submit'] == 'add')
													$SQL->query('UPDATE accounts SET premium_points = '.($SHOP->points($account['name']) + $_POST['points']).' WHERE name = "'.$account['name'].'"');
												elseif($_POST['submit'] == 'remove')
													$SQL->query('UPDATE accounts SET premium_points = '.($SHOP->points($account['name']) - $_POST['points']).' WHERE name = "'.$account['name'].'"');
												}
												else {
													alert($errors);
													echo '<div align="right"><a href="'.WEBSITE.'/index.php/p/v/gifts/admin/points">Go Back to Points Manage</a></div>';
												}
							}
						}
						else {
							header("Location: ".WEBSITE."/index.php/p/v/gifts/admin");
						}
			}
			else {
				header("Location: ".WEBSITE."/index.php");
			}
	}
	else {
		header("Location: ".WEBSITE."/index.php/p/v/gifts");
	}
	}
		elseif(!$SHOP->isInstalled()) {
		if($ide->isAdmin()) {
			$SHOP->install();
			echo '<div style="text-align: center; font-size: 15px; color: #4EBF37; font-weight: bold;">Shop System Succesfully Installed!</div><br>
				<center>Your shop system has been installed succesfully!! click <a href="'.WEBSITE.'/index.php/p/v/gifts">HERE</a> to see your shop</center>';
		}
		else {
			header("Location: ".WEBSITE."/index.php");
		}

		}
}
else {
	header("Location: ".WEBSITE."/index.php");
}
?>

Salve e veja se funcionou, qualquer problema delete e renomeie o Backup para o nome original que não vai prejudicar o seu site.

Editado Dezembro 4, 2013 por IagoNp (veja o histórico de edições)

[ryukicho 105]

Cara o problema mesmo era na Page_acess e confundi com group ehehehe mais tenho outra duvida como faço pra add vip e Coloca pontos no character tipo oque coloca na segunda oção ?

[IagoNp 50]

Ja respondi a sua dúvida, olhe sua caixa de Mensagem! ,

[ryukicho 105]

Sim ... A parti do Add premiun account ja resolveu ... e pra add os points o quecolo em  Or Type a Name: