<?php

define('IN_PHPBB', true);
$phpbb_root_path = '../';

$phpEx = substr(strrchr(__FILE__, '.'), 1);
include($phpbb_root_path . 'config.' . $phpEx);
include($phpbb_root_path . 'includes/db/' . $dbms . '.' . $phpEx);
 
$db = new $sql_db();
 
$db->sql_connect($dbhost, $dbuser, $dbpasswd, $dbname, $dbport, false, false);
 
// We do not need this any longer, unset for safety purposes
unset($dbpasswd);

// just so we know it is broken
//error_reporting(E_ALL);
ini_set('display_errors', 0);
error_reporting(0);


$roleplayID = (int) @$_REQUEST['roleplay_id'];
$roleplayURL = $_REQUEST['roleplay_url'];

if (!empty($roleplayURL)) {
  $sql = 'SELECT id, title, description, url FROM rpg_roleplays WHERE url = "'.$db->sql_escape($roleplayURL).'"';
} else {
  $sql = 'SELECT id, title, description, url FROM rpg_roleplays WHERE id = '.(int) $roleplayID;
}

$result = $db->sql_query($sql);
$roleplay = $db->sql_fetchrow($result);
$db->sql_freeresult($result);

$roleplay_id = $roleplay['id'];


// some basic sanity checks
if(isset($roleplay_id) && is_numeric($roleplay_id)) {

	// get the image from the db
	$sql = "SELECT image,image_type FROM rpg_roleplays WHERE id = ".$db->sql_escape($roleplay_id);

	// the result of the query
	$result = $db->sql_query($sql);
	while ($row = $db->sql_fetchrow($result)) {
		header("Content-type: image/png");

		$expires = 60*60*24*14;
    header("Pragma: public");
    header("Cache-Control: public");
    header('Expires: ' . gmdate('D, d M Y H:i:s', time()+$expires) . ' GMT');
	
		if ($row['image']) {	
		
			$im = imagecreatefromstring($row['image']);
		} else {	
			$im = imagecreatefromgif('http://www.roleplaygateway.com/images/NoImage.gif');
		}
		$new = imagecreatetruecolor(100, 100);
		$x = imagesx($im);
		$y = imagesy($im);

		imagecopyresampled($new, $im, 0, 0, 0, 0, 100, 100, $x, $y);
		imagedestroy($im);
		
		imagesavealpha($new,true);
		
		imagepng($new);
	}

} else {
	echo 'Please use a real id number';
}
	
?>