Gazelle/sections/store/capture_user.php

<?
if (isset($_POST['target']) && isset($_POST['amount'])) {

  $TargetID = abs(intval($_POST['target']));
  $Amount = abs(intval($_POST['amount']));

  $UserID = $LoggedUser['ID'];

  $DB->query("
    SELECT u.BonusPoints, p.Level
    FROM users_main AS u
    LEFT JOIN permissions AS p ON u.PermissionID=p.ID
    WHERE u.ID = $UserID");
  if ($DB->has_results()) {
    list($Points, $PLevel) = $DB->next_record();

    if ($Points < $Amount) {
      error('Not enough points!'); }
    if ($UserID == $TargetID) {
      error("You can't capture yourself!"); }
    if ($PLevel < 200) {
      error('Insufficient class'); }
    $DB->query("SELECT COUNT(*) FROM slaves WHERE OwnerID = $UserID");
    if ($DB->next_record()[0] >= 6) {
      error('You own too many users already'); }

    // Logic for capture success
    $DB->query("
      SELECT u.Uploaded,
             u.Downloaded,
             u.BonusPoints,
             COUNT(t.UserID)
      FROM users_main AS u
      LEFT JOIN torrents AS t ON u.ID=t.UserID
      WHERE u.ID = $TargetID");
    if (!$DB->has_results()) {
      error('User does not exist');
    }
    list($Upload, $Download, $Points, $Uploads) = $DB->next_record();
    $AdjLevel = intval(((($Uploads**0.35)*1.5)+1) * max(($Upload+($Points*1000000)-$Download)/(1024**3), 1) * 1000);
    if ($Amount <= $AdjLevel) {
      error('You need to spend more points to have any chance of catching this user!');
    }
    $Captured = (rand(0, $Amount) >= $AdjLevel);

    $DB->query("
      UPDATE users_main
      SET BonusPoints = BonusPoints - $Amount
      WHERE ID = $UserID");
    $Cache->delete_value('user_info_heavy_'.$UserID);

    if ($Captured) {
      $DB->query("
        INSERT INTO slaves
        (UserID, OwnerID)
        Values($TargetID, $UserID)");
    }
  }

  View::show_header('Store'); ?>
  <div class="thin">
    <h2 id="general">Capture <?=($Captured?'Successful':'Failed')?></h2>
    <div class="box pad" style="padding: 10px 10px 10px 20px;">
      <p><?=($Captured?'You successfully captured your target':'Your target eluded capture')?></p>
      <p><a href="/store.php">Back to Store</a> | <a href="/user.php?id=<?=$TargetID?>">Back to Profile</a></p>
    </div>
  </div>
  <? View::show_footer();

} else {

  View::show_header('Store'); ?>
  <div class="thin">
    <div class="box pad" style="padding: 10px 10px 10px 20px; text-align: center;">
      <form action="store.php" method="POST">
        <input type="hidden" name="item" value="capture_user">
        <strong>
        Enter the name of the user you want to capture and the <?=BONUS_POINTS?> you want to spend
        </strong>
        <br>
        <input type="text" name="target_name" placeholder="Username">
        <input type="text" name="amount" placeholder="<?=BONUS_POINTS?>">
        <input type="submit">
      </form>
      <p><a href="/store.php">Back to Store</a></p>
    </div>
  </div>
  <? View::show_footer();
}
?>