From 09515348107d9aab7823a12d31b082a2ebb75555 Mon Sep 17 00:00:00 2001
From: Arun Persaud <arun@nubati.net>
Date: Sat, 26 Apr 2008 11:52:49 -0700
Subject: CLEANUP: make index.php very short and move everything in separate
 files

created an include dir and almost everything that was in index.php is now in separate
files and gets only included in index.php... makes index.php look a lot nicer ;)

Signed-off-by: Arun Persaud <arun@nubati.net>
---
 include/cancelgame.php   |   53 ++
 include/db.php           | 1064 ++++++++++++++++++++++++++++
 include/functions.php    |  895 +++++++++++++++++++++++
 include/game.php         | 1763 ++++++++++++++++++++++++++++++++++++++++++++++
 include/logout.php       |   15 +
 include/newgame.php      |   22 +
 include/newgameready.php |  175 +++++
 include/output.php       |  435 ++++++++++++
 include/reminder.php     |   60 ++
 include/user.php         |  272 +++++++
 include/welcome.php      |   26 +
 11 files changed, 4780 insertions(+)
 create mode 100644 include/cancelgame.php
 create mode 100644 include/db.php
 create mode 100644 include/functions.php
 create mode 100644 include/game.php
 create mode 100644 include/logout.php
 create mode 100644 include/newgame.php
 create mode 100644 include/newgameready.php
 create mode 100644 include/output.php
 create mode 100644 include/reminder.php
 create mode 100644 include/user.php
 create mode 100644 include/welcome.php

(limited to 'include')

diff --git a/include/cancelgame.php b/include/cancelgame.php
new file mode 100644
index 0000000..9f86142
--- /dev/null
+++ b/include/cancelgame.php
@@ -0,0 +1,53 @@
+<?php
+/* make sure that we are not called from outside the scripts, 
+ * use a variable defined in config.php to check this
+ */
+if(!isset($HOST))
+  exit;
+
+output_status();
+
+$me = $_REQUEST["me"];
+
+/* test for valid ID */
+$myid = DB_get_userid('hash',$me);
+if(!$myid)
+  {
+    echo "Can't find you in the database, please check the url.<br />\n";
+    echo "perhaps the game has been canceled, check by login in <a href=\"$INDEX\">here</a>.";
+    output_footer();
+    DB_close();
+    exit();
+  }
+
+DB_update_user_timestamp($myid);
+
+/* get some information from the DB */
+$gameid   = DB_get_gameid_by_hash($me);
+$myname   = DB_get_name('hash',$me);
+
+/* check if game really is old enough to be canceled */
+$result = mysql_query("SELECT mod_date from Game WHERE id='$gameid' " );
+$r = mysql_fetch_array($result,MYSQL_NUM);
+if(time()-strtotime($r[0]) > 60*60*24*30) /* = 1 month */
+  {
+    $message = "Hello, \n\n".
+      "Game ".DB_format_gameid($gameid).
+      " has been canceled since nothing happend for a while and $myname requested it.\n";
+
+    $userids = DB_get_all_userid_by_gameid($gameid);
+    foreach($userids as $user)
+      {
+	$To = DB_get_email('userid',$user);
+	mymail($To,$EmailName."game ".DB_format_gameid($gameid)." canceled (timed out)",$message);
+      }
+
+    /* delete everything from the dB */
+    DB_cancel_game($me);
+
+    echo "<p style=\"background-color:red\";>Game ".DB_format_gameid($gameid).
+      " has been canceled.<br /><br /></p>";
+  }
+ else
+   echo "<p>You need to wait longer before you can cancel a game...</p>\n";
+?>
\ No newline at end of file
diff --git a/include/db.php b/include/db.php
new file mode 100644
index 0000000..42d2bef
--- /dev/null
+++ b/include/db.php
@@ -0,0 +1,1064 @@
+<?php
+/* make sure that we are not called from outside the scripts, 
+ * use a variable defined in config.php to check this
+ */
+if(!isset($HOST))
+  exit;
+
+/*
+ * open database
+ */
+
+function DB_open()
+{
+  global $DB,$DB_user,$DB_host,$DB_database,$DB_password;
+  $DB = @mysql_connect($DB_host,$DB_user, $DB_password);
+  if ( $DB )
+    {
+      mysql_select_db($DB_database) or die('Could not select database');
+    }
+  else
+    return -1;
+
+  return 0;
+}
+
+function DB_close()
+{
+  global $DB;
+  mysql_close($DB);
+  return;
+}
+
+function DB_quote_smart($value)
+{
+    /* Stripslashes */
+    if (get_magic_quotes_gpc()) {
+        $value = stripslashes($value);
+    }
+    /* Quote if not a number or a numeric string */
+    if (!is_numeric($value)) {
+        $value = "'" . mysql_real_escape_string($value) . "'";
+    }
+    return $value;
+}
+
+function DB_test()
+{
+  $result = mysql_query("SELECT * FROM User");
+  while($r = mysql_fetch_array($result,MYSQL_NUM))
+    {
+      foreach($r as $thing)
+	echo "  $thing ";
+      echo "<br />\n";
+    }
+  return;
+}
+
+function DB_get_passwd_by_name($name)
+{
+  $result = mysql_query("SELECT password FROM User WHERE fullname=".DB_quote_smart($name)."");
+  $r      = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0];
+  else
+    return "";
+}
+
+function DB_check_recovery_passwords($password,$email)
+{
+  $result = mysql_query("SELECT User.id FROM User".
+			" LEFT JOIN Recovery ON User.id=Recovery.user_id".
+			" WHERE email=".DB_quote_smart($email).
+			" AND Recovery.password=".DB_quote_smart($password).
+			" AND DATE_SUB(CURDATE(),INTERVAL 1 DAY) <= Recovery.create_date");
+  $r      = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return 1;
+  else
+    return 0;
+}
+
+function DB_get_handid($type,$var1='',$var2='')
+{
+  switch($type)
+    {
+    case 'hash':
+      $result = mysql_query("SELECT id FROM Hand WHERE hash=".DB_quote_smart($var1));
+      break;
+    case 'gameid-position':
+      $result = mysql_query("SELECT id FROM Hand WHERE game_id=".
+			    DB_quote_smart($var1)." AND position=".
+			    DB_quote_smart($var2));
+      break;
+    case 'gameid-userid':
+      $result = mysql_query("SELECT id FROM Hand WHERE game_id=".
+			    DB_quote_smart($var1)." AND user_id=".
+			    DB_quote_smart($var2));
+      break;
+    }
+
+  $r = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0];
+  else
+    return 0;
+}
+
+function DB_get_pos_by_hash($hash)
+{
+  $result = mysql_query("SELECT position FROM Hand WHERE hash=".DB_quote_smart($hash));
+  $r      = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0];
+  else
+    return 0;
+}
+
+function DB_get_status_by_hash($hash)
+{
+  $result = mysql_query("SELECT status FROM Hand WHERE hash=".DB_quote_smart($hash));
+  $r      = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0];
+  else
+    return 0;
+}
+
+function DB_set_game_status_by_gameid($id,$status)
+{
+  mysql_query("UPDATE Game SET status='".$status."' WHERE id=".DB_quote_smart($id));
+  return;
+}
+
+function DB_set_sickness_by_gameid($id,$status)
+{
+  mysql_query("UPDATE Game SET sickness='".$status."' WHERE id=".DB_quote_smart($id));
+  return;
+}
+function DB_get_sickness_by_gameid($id)
+{
+  $result = mysql_query("SELECT sickness FROM Game WHERE id=".DB_quote_smart($id));
+  $r      = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0];
+  else
+    return NULL;
+}
+
+function DB_get_game_status_by_gameid($id)
+{
+  $result = mysql_query("SELECT status FROM Game WHERE id=".DB_quote_smart($id));
+  $r      = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0];
+  else
+    return NULL;
+}
+
+function DB_set_hand_status_by_hash($hash,$status)
+{
+  mysql_query("UPDATE Hand SET status='".$status."' WHERE hash=".DB_quote_smart($hash));
+  return;
+}
+
+function DB_get_hand_status_by_userid_and_gameid($uid,$gid)
+{
+  $result = mysql_query("SELECT status FROM Hand WHERE user_id=".DB_quote_smart($uid).
+			" AND game_id=".DB_quote_smart($gid));
+  $r      = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0];
+  else
+    return 0;
+}
+
+function DB_get_sickness_by_userid_and_gameid($uid,$gid)
+{
+  $result = mysql_query("SELECT sickness FROM Hand WHERE user_id=".DB_quote_smart($uid).
+			" AND game_id=".DB_quote_smart($gid));
+  $r      = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0];
+  else
+    return 0;
+}
+
+function DB_get_sickness_by_pos_and_gameid($pos,$gid)
+{
+  $result = mysql_query("SELECT sickness FROM Hand WHERE position=".DB_quote_smart($pos).
+			" AND game_id=".DB_quote_smart($gid));
+  $r      = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0];
+  else
+    return 0;
+}
+
+function DB_get_gameid_by_hash($hash)
+{
+  $result = mysql_query("SELECT game_id FROM Hand WHERE hash=".DB_quote_smart($hash));
+  $r      = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0];
+  else
+    return 0;
+}
+
+function DB_cancel_game($hash)
+{
+  $gameid = DB_get_gameid_by_hash($hash);
+
+  if(!$gameid)
+    return;
+
+  /* get the IDs of all players */
+  $result = mysql_query("SELECT id FROM Hand WHERE game_id=".DB_quote_smart($gameid));
+  while($r = mysql_fetch_array($result,MYSQL_NUM))
+    {
+      $id = $r[0];
+
+      $tmp = mysql_query("SELECT id  FROM Hand_Card WHERE hand_id=".DB_quote_smart($id));
+      $tmp = mysql_fetch_array($tmp,MYSQL_NUM);
+      mysql_query("DELETE FROM Play WHERE hand_card_id=".DB_quote_smart($tmp[0]));
+
+
+      mysql_query("DELETE FROM Hand_Card WHERE hand_id=".DB_quote_smart($id));
+      mysql_query("DELETE FROM Hand WHERE id=".DB_quote_smart($id));
+    }
+
+  /* delete game */
+  mysql_query("DELETE FROM User_Game_Prefs WHERE game_id=".DB_quote_smart($gameid));
+  mysql_query("DELETE FROM Trick WHERE game_id=".DB_quote_smart($gameid));
+  mysql_query("DELETE FROM Game WHERE id=".DB_quote_smart($gameid));
+
+  return;
+}
+
+function DB_get_hand($me)
+{
+  $cards = array();
+
+  $handid = DB_get_handid('hash',$me);
+
+  $result = mysql_query("SELECT card_id FROM Hand_Card WHERE hand_id=".DB_quote_smart($handid)." and played='false' ");
+  while($r = mysql_fetch_array($result,MYSQL_NUM))
+    $cards[]=$r[0];
+
+  return $cards;
+}
+
+function DB_get_all_hand($me)
+{
+  $cards = array();
+
+  $handid = DB_get_handid('hash',$me);
+
+  $result = mysql_query("SELECT card_id FROM Hand_Card WHERE hand_id=".DB_quote_smart($handid));
+  while($r = mysql_fetch_array($result,MYSQL_NUM))
+    $cards[]=$r[0];
+
+  return $cards;
+}
+
+function DB_get_cards_by_trick($id)
+{
+  $cards = array();
+  $i     = 1;
+
+  $result = mysql_query("SELECT card_id,position FROM Play LEFT JOIN Hand_Card ON Hand_Card.id=Play.hand_card_id ".
+			"LEFT JOIN Hand ON Hand.id=Hand_Card.hand_id ".
+			"WHERE trick_id=".
+			DB_quote_smart($id)." ORDER BY sequence ASC");
+  while($r = mysql_fetch_array($result,MYSQL_NUM))
+    {
+      $cards[$i]=array("card"=>$r[0],"pos"=>$r[1]);
+      $i++;
+    }
+
+  return $cards;
+}
+
+
+function DB_set_solo_by_hash($hash,$solo)
+{
+  mysql_query("UPDATE Hand SET solo=".DB_quote_smart($solo)." WHERE hash=".DB_quote_smart($hash));
+  return;
+}
+
+function DB_set_solo_by_gameid($id,$solo)
+{
+  mysql_query("UPDATE Game SET solo=".DB_quote_smart($solo)." WHERE id=".DB_quote_smart($id));
+  return;
+}
+
+function DB_set_sickness_by_hash($hash,$sickness)
+{
+  mysql_query("UPDATE Hand SET sickness=".DB_quote_smart($sickness)." WHERE hash=".DB_quote_smart($hash));
+  return;
+}
+
+function DB_get_current_trickid($gameid)
+{
+  $trickid  = NULL;
+  $sequence = NULL;
+  $number   = 0;
+
+  $result = mysql_query("SELECT Trick.id,MAX(Play.sequence) FROM Play ".
+			"LEFT JOIN Trick ON Play.trick_id=Trick.id ".
+			"WHERE Trick.game_id=".DB_quote_smart($gameid)." ".
+			"GROUP BY Trick.id");
+  while( $r = mysql_fetch_array($result,MYSQL_NUM) )
+    {
+      $trickid  = $r[0];
+      $sequence = $r[1];
+      $number++;
+    };
+
+  if(!$sequence || $sequence==4)
+    {
+      mysql_query("INSERT INTO Trick VALUES (NULL,NULL,NULL, ".DB_quote_smart($gameid).",NULL)");
+      $trickid  = mysql_insert_id();
+      $sequence = 1;
+      $number++;
+    }
+  else
+    {
+      $sequence++;
+    }
+
+  return array($trickid,$sequence,$number);
+}
+
+function DB_get_max_trickid($gameid)
+{
+  $result = mysql_query("SELECT MAX(id) FROM Trick WHERE game_id=".DB_quote_smart($gameid));
+  $r = mysql_fetch_array($result,MYSQL_NUM) ;
+
+  return ($r?$r[0]:NULL);
+}
+
+function DB_play_card($trickid,$handcardid,$sequence)
+{
+  mysql_query("INSERT INTO Play VALUES(NULL,NULL,NULL,".DB_quote_smart($trickid).
+	      ",".DB_quote_smart($handcardid).",".DB_quote_smart($sequence).")");
+
+  $playid = mysql_insert_id();
+  return $playid;
+}
+
+function DB_get_all_names_by_gameid($id)
+{
+  $names = array();
+
+  $result = mysql_query("SELECT fullname FROM Hand LEFT JOIN User ON Hand.user_id=User.id WHERE game_id=".
+			DB_quote_smart($id)." ORDER BY position ASC");
+  while($r = mysql_fetch_array($result,MYSQL_NUM))
+    $names[] = $r[0];
+
+  return $names;
+}
+
+function DB_get_all_userid_by_gameid($id)
+{
+  $names = array();
+
+  $result = mysql_query("SELECT user_id FROM Hand WHERE game_id=".
+			DB_quote_smart($id)." ORDER BY position ");
+  while($r = mysql_fetch_array($result,MYSQL_NUM))
+    $names[] = $r[0];
+
+  return $names;
+}
+
+function DB_get_hash_from_game_and_pos($id,$pos)
+{
+  $result = mysql_query("SELECT hash FROM Hand WHERE game_id=".DB_quote_smart($id)." and position=".DB_quote_smart($pos));
+  $r      = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0];
+  else
+    return "";
+}
+
+function DB_get_hash_from_gameid_and_userid($id,$user)
+{
+  $result = mysql_query("SELECT hash FROM Hand WHERE game_id=".DB_quote_smart($id)." and user_id=".DB_quote_smart($user));
+  $r      = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0];
+  else
+    return "";
+}
+
+function DB_get_all_names()
+{
+  $names  = array();
+
+  $result = mysql_query("SELECT fullname FROM User");
+  while($r = mysql_fetch_array($result,MYSQL_NUM))
+    $names[] = $r[0];
+
+  return $names;
+}
+
+function DB_get_names_of_last_logins($N)
+{
+  $names  = array();
+
+  $result = mysql_query("SELECT fullname FROM User ORDER BY last_login DESC LIMIT $N");
+  while($r = mysql_fetch_array($result,MYSQL_NUM))
+    $names[] = $r[0];
+
+  return $names;
+}
+
+function DB_get_names_of_new_logins($N)
+{
+  $names  = array();
+
+  $result = mysql_query("SELECT fullname FROM User ORDER BY create_date DESC, id DESC LIMIT $N");
+  while($r = mysql_fetch_array($result,MYSQL_NUM))
+    $names[] = $r[0];
+
+  return $names;
+}
+
+function DB_update_game_timestamp($gameid)
+{
+  mysql_query("UPDATE Game SET mod_date = CURRENT_TIMESTAMP WHERE id=".DB_quote_smart($gameid));
+  return;
+}
+
+
+function DB_update_user_timestamp($userid)
+{
+  mysql_query("UPDATE User SET last_login = CURRENT_TIMESTAMP WHERE id=".DB_quote_smart($userid));
+  return;
+}
+
+function DB_get_user_timestamp($userid)
+{
+  $result = mysql_query("SELECT last_login FROM User WHERE id=".DB_quote_smart($userid));
+  $r      = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0];
+  else
+    return NULL;
+}
+function DB_get_user_timezone($userid)
+{
+  $result = mysql_query("SELECT timezone FROM User WHERE id=".DB_quote_smart($userid));
+  $r      = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0];
+  else
+    return "Europe/London";
+}
+
+function DB_insert_comment($comment,$playid,$userid)
+{
+  mysql_query("INSERT INTO Comment VALUES (NULL,NULL,NULL,$userid,$playid, ".DB_quote_smart($comment).")");
+
+  return;
+}
+
+function DB_insert_note($comment,$gameid,$userid)
+{
+  mysql_query("INSERT INTO Notes VALUES (NULL,NULL,NULL,$userid,$gameid, ".DB_quote_smart($comment).")");
+
+  return;
+}
+
+function DB_get_notes_by_userid_and_gameid($userid,$gameid)
+{
+  $notes = array();
+
+  $result = mysql_query("SELECT comment FROM Notes WHERE user_id=".DB_quote_smart($userid) .
+			" AND game_id=".DB_quote_smart($gameid));
+
+  while($r = mysql_fetch_array($result,MYSQL_NUM))
+    $notes[] = $r[0];
+
+  return $notes;
+}
+
+
+function DB_get_gametype_by_gameid($id)
+{
+  $result = mysql_query("SELECT type FROM Game WHERE id=".DB_quote_smart($id));
+  $r      = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0]."";
+  else
+    return "";
+}
+
+function DB_set_gametype_by_gameid($id,$p)
+{
+  mysql_query("UPDATE Game SET type='".$p."' WHERE id=".DB_quote_smart($id));
+  return;
+}
+
+function DB_get_solo_by_gameid($id)
+{
+  $result = mysql_query("SELECT solo FROM Game WHERE id=".DB_quote_smart($id));
+  $r      = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0]."";
+  else
+    return "";
+}
+
+
+function DB_get_startplayer_by_gameid($id)
+{
+  $result = mysql_query("SELECT startplayer FROM Game WHERE id=".DB_quote_smart($id));
+  $r      = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0];
+  else
+    return 0;
+}
+
+function DB_set_startplayer_by_gameid($id,$p)
+{
+  mysql_query("UPDATE Game SET startplayer='".$p."' WHERE id=".DB_quote_smart($id));
+  return;
+}
+
+function DB_get_player_by_gameid($id)
+{
+  $result = mysql_query("SELECT player FROM Game WHERE id=".DB_quote_smart($id));
+  $r      = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0];
+  else
+    return 0;
+}
+function DB_set_player_by_gameid($id,$p)
+{
+  mysql_query("UPDATE Game SET player='".DB_quote_smart($p)."' WHERE id=".DB_quote_smart($id));
+  return;
+}
+
+
+
+function DB_get_ruleset_by_gameid($id)
+{
+  $result = mysql_query("SELECT ruleset FROM Game WHERE id=".DB_quote_smart($id));
+  $r      = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0];
+  else
+    return NULL;
+}
+
+function DB_get_session_by_gameid($id)
+{
+  $result = mysql_query("SELECT session FROM Game WHERE id=".DB_quote_smart($id));
+  $r      = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0];
+  else
+    return NULL;
+}
+
+function DB_get_max_session()
+{
+  $result = mysql_query("SELECT MAX(session) FROM Game");
+  $r      = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0];
+  else
+    return 0;
+}
+
+function DB_get_hashes_by_session($session,$user)
+{
+  $r = array();
+
+  $result = mysql_query("SELECT Hand.hash FROM Hand".
+			" LEFT JOIN Game ON Game.id=Hand.game_id ".
+			" WHERE Game.session=".DB_quote_smart($session).
+			" AND Hand.user_id=".DB_quote_smart($user).
+			" ORDER BY Game.create_date ASC");
+  while($t = mysql_fetch_array($result,MYSQL_NUM))
+    $r[] = $t[0];
+
+  return $r;
+}
+
+function DB_get_ruleset($dullen,$schweinchen,$call)
+{
+  $r = array();
+
+  $result = mysql_query("SELECT id FROM Rulesets WHERE".
+			" dullen=".DB_quote_smart($dullen)." AND ".
+			" call=".DB_quote_smart($call)." AND ".
+			" schweinchen=".DB_quote_smart($schweinchen));
+  if($result)
+    $r    = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0]; /* found ruleset */
+  else
+    {
+      /* create new one */
+      $result = mysql_query("INSERT INTO Rulesets VALUES (NULL, NULL, ".
+			    DB_quote_smart($dullen).",".
+			    DB_quote_smart($schweinchen).",".
+			    DB_quote_smart($call).
+			    ", NULL)");
+      if($result)
+	return mysql_insert_id();
+    };
+
+  return -1; /* something went wrong */
+}
+
+function DB_get_party_by_hash($hash)
+{
+  $result = mysql_query("SELECT party FROM Hand WHERE hash=".DB_quote_smart($hash));
+  $r      = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0];
+  else
+    return NULL;
+}
+
+function DB_get_party_by_gameid_and_userid($gameid,$userid)
+{
+  $result = mysql_query("SELECT party FROM Hand".
+			" WHERE game_id=".DB_quote_smart($gameid).
+			"  AND user_id=".DB_quote_smart($userid));
+  $r      = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0];
+  else
+    return NULL;
+}
+
+function DB_set_party_by_hash($hash,$party)
+{
+  mysql_query("UPDATE Hand SET party=".DB_quote_smart($party)." WHERE hash=".DB_quote_smart($hash));
+  return;
+}
+
+function DB_get_PREF($myid)
+{
+  global $PREF;
+
+  /* Cardset */
+  $result = mysql_query("SELECT value from User_Prefs".
+			" WHERE user_id='$myid' AND pref_key='cardset'" );
+  $r = mysql_fetch_array($result,MYSQL_NUM);
+  if($r)
+    {
+      if($r[0]=="germancards" && (time()-strtotime( "2009-12-31 23:59:59")<0) ) /* licence only valid until then */
+	$PREF["cardset"]="altenburg";
+      else
+	$PREF["cardset"]="english";
+    }
+  else
+    $PREF["cardset"]="english";
+
+  /* Email */
+  $result = mysql_query("SELECT value FROM User_Prefs".
+			" WHERE user_id='$myid' AND pref_key='email'" );
+  $r = mysql_fetch_array($result,MYSQL_NUM);
+  if($r)
+    {
+      if($r[0]=="emailaddict")
+	$PREF["email"]="emailaddict";
+      else
+	$PREF["email"]="emailnonaddict";
+    }
+  else
+    $PREF["email"]="emailnonaddict";
+
+  return;
+}
+
+function DB_get_email_pref_by_hash($hash)
+{
+  $result = mysql_query("SELECT value FROM Hand".
+			" LEFT JOIN User_Prefs ON Hand.user_id=User_Prefs.user_id".
+			" WHERE hash='$hash' AND pref_key='email'" );
+  $r = mysql_fetch_array($result,MYSQL_NUM);
+  if($r)
+    {
+      if($r[0]=="emailaddict")
+	return "emailaddict";
+      else
+	return "emailnonaddict";
+    }
+  else
+    return "emailnonaddict";
+}
+
+function DB_get_email_pref_by_uid($uid)
+{
+  $result = mysql_query("SELECT value FROM User_Prefs ".
+			" WHERE user_id='$uid' AND pref_key='email'" );
+  $r = mysql_fetch_array($result,MYSQL_NUM);
+  if($r)
+    {
+      if($r[0]=="emailaddict")
+	return "emailaddict";
+      else
+	return "emailnonaddict";
+    }
+  else
+    return "emailnonaddict";
+}
+
+function DB_get_unused_randomnumbers($userstr)
+{
+  $queryresult = mysql_query(" SELECT randomnumbers FROM Game".
+			     "   WHERE randomnumbers NOT IN".
+			     "           (SELECT randomnumbers FROM Game".
+			     "                LEFT JOIN Hand ON Game.id=Hand.game_id".
+			     "                WHERE user_id IN  (". $userstr .")".
+			     "                GROUP BY randomnumbers".
+			     "           )");
+
+
+  $r = mysql_fetch_array($queryresult,MYSQL_NUM);
+  if($r)
+    return $r[0];
+  else
+    return "";
+}
+
+function DB_get_number_of_passwords_recovery($user)
+{
+  $queryresult = mysql_query("SELECT COUNT(*) FROM Recovery ".
+			     "  WHERE user_id=$user ".
+			     "  AND DATE_SUB(CURDATE(),INTERVAL 1 DAY) <= create_date".
+			     "  GROUP BY user_id " );
+
+  $r = mysql_fetch_array($queryresult,MYSQL_NUM);
+  if($r)
+    return $r[0];
+  else
+    return 0;
+}
+
+function DB_set_recovery_password($user,$newpw)
+{
+  mysql_query("INSERT INTO Recovery VALUES(NULL,".DB_quote_smart($user).
+	      ",".DB_quote_smart($newpw).",NULL)");
+
+  return;
+}
+
+function DB_get_card_name($card)
+{
+  $queryresult = mysql_query("SELECT strength,suite FROM Card WHERE id='$card'");
+
+  $r = mysql_fetch_array($queryresult,MYSQL_NUM);
+  if($r)
+    return $r[0]." of ".$r[1];
+  else
+    return "Error during get_card_name ".$card;
+}
+
+function DB_get_current_playid($gameid)
+{
+  $trick = DB_get_max_trickid($gameid);
+
+  if(!$trick) return NULL;
+
+  $queryresult = mysql_query("SELECT id FROM Play WHERE trick_id='$trick' ORDER BY create_date DESC LIMIT 1");
+
+  $r = mysql_fetch_array($queryresult,MYSQL_NUM);
+  if($r)
+    return $r[0];
+
+  return "";
+}
+
+function DB_get_call_by_hash($hash)
+{
+  $queryresult = mysql_query("SELECT point_call FROM Hand WHERE hash='$hash'");
+
+  $r = mysql_fetch_array($queryresult,MYSQL_NUM);
+  if($r)
+    return $r[0];
+
+  return NULL;
+}
+
+function DB_get_partner_call_by_hash($hash)
+{
+  $partner = DB_get_partner_hash_by_hash($hash);
+
+  if($partner)
+    {
+      $queryresult = mysql_query("SELECT point_call FROM Hand WHERE hash='$partner'");
+
+      $r = mysql_fetch_array($queryresult,MYSQL_NUM);
+      if($r)
+	return $r[0];
+    }
+
+  return NULL;
+}
+
+function DB_get_partner_hash_by_hash($hash)
+{
+  $gameid = DB_get_gameid_by_hash($hash);
+  $party  = DB_get_party_by_hash($hash);
+
+  $queryresult = mysql_query("SELECT hash FROM Hand WHERE game_id='$gameid' AND party='$party' AND hash<>'$hash'");
+
+  $r = mysql_fetch_array($queryresult,MYSQL_NUM);
+  if($r)
+    return $r[0];
+
+  return NULL;
+}
+
+function DB_format_gameid($gameid)
+{
+  $session = DB_get_session_by_gameid($gameid);
+
+  /* get number of game */
+  $result = mysql_query("SELECT COUNT(*),create_date FROM Game".
+			" WHERE session='$session' ".
+			" AND TIMEDIFF(create_date, (SELECT create_date FROM Game WHERE id='$gameid'))<=0 ".
+			" GROUP by session");
+  $r = mysql_fetch_array($result,MYSQL_NUM);
+
+  return $session.".".$r[0];
+}
+
+function DB_get_reminder($user,$gameid)
+{
+  $queryresult = mysql_query("SELECT COUNT(*) FROM Reminder ".
+			     "  WHERE user_id=$user ".
+			     "  AND game_id=$gameid ".
+			     "  AND DATE_SUB(CURDATE(),INTERVAL 1 DAY) <= create_date".
+			     "  GROUP BY user_id " );
+
+  $r = mysql_fetch_array($queryresult,MYSQL_NUM);
+  if($r)
+    return $r[0];
+  else
+    return 0;
+}
+
+function DB_set_reminder($user,$gameid)
+{
+  mysql_query("INSERT INTO Reminder ".
+	      "  VALUES(NULL, ".DB_quote_smart($user).", ".DB_quote_smart($gameid).
+              ", NULL) ");
+  return 0;
+}
+
+function DB_is_session_active($session)
+{
+  $queryresult = mysql_query("SELECT COUNT(*) FROM Game ".
+			     "  WHERE session=$session ".
+			     "  AND status<>'gameover' ");
+
+  $r = mysql_fetch_array($queryresult,MYSQL_NUM);
+  if($r)
+    return $r[0];
+  else
+    return -1;
+}
+
+function DB_get_score_by_gameid($gameid)
+{
+  /* returns the points of a game from the point of the re parth (<0 if they lost) */
+  $queryresult = mysql_query("SELECT COUNT(*),party FROM Score ".
+			     "  WHERE game_id=$gameid ".
+			     "  GROUP BY party ");
+
+  $re     = 0;
+  $contra = 0;
+
+  while($r = mysql_fetch_array($queryresult,MYSQL_NUM) )
+    {
+      if($r[1] == "re")
+	$re += $r[0];
+      else if ($r[1] == "contra")
+	$contra += $r[0];
+    };
+
+  return ($re - $contra);
+}
+
+function DB_get_gameids_of_finished_games_by_session($session)
+{
+  $ids = array ();
+
+  $queryresult = mysql_query("SELECT id FROM Game ".
+			     "  WHERE session=$session ".
+			     "   AND status='gameover' ".
+			     " ORDER BY create_date ASC");
+
+  $i=0;
+  while($r = mysql_fetch_array($queryresult,MYSQL_NUM) )
+    {
+      $ids[$i] = $r[0];
+      $i++;
+    }
+
+  return $ids;
+}
+
+function DB_get_card_value_by_cardid($id)
+{
+  $queryresult = mysql_query("SELECT points FROM Card ".
+			     "  WHERE id=$id ");
+
+  $r = mysql_fetch_array($queryresult,MYSQL_NUM);
+  if($r)
+    return $r[0];
+  else
+    return NULL;
+}
+
+function DB_get_userid($type,$var1="",$var2="")
+{
+  /* get the userid of a user
+   * this can be done several ways, which are all handled below
+   * if a email/password combination is given and it doesn't work, we also
+   * need to check the recovery table for additional passwords
+   */
+
+  $r = NULL;
+  
+  switch($type)
+    {
+    case 'name':
+      $result = mysql_query("SELECT id FROM User WHERE fullname=".DB_quote_smart($var1));
+      break;
+    case 'hash':
+      $result = mysql_query("SELECT user_id FROM Hand WHERE hash=".DB_quote_smart($var1));
+      break;
+    case 'password':
+      $result = mysql_query("SELECT id FROM User WHERE password=".DB_quote_smart($var1));
+      break;
+    case 'email':
+      $result = mysql_query("SELECT id FROM User WHERE email=".DB_quote_smart($var1));
+      break;
+    case 'email-password':
+      $result = mysql_query("SELECT id FROM User WHERE email=".DB_quote_smart($var1)." AND password=".DB_quote_smart($var2));
+      $r = mysql_fetch_array($result,MYSQL_NUM);
+      /* test if a recovery password has been set */
+      if(!$r)
+	{
+	  echo "testing alternative password";
+	  $result = mysql_query("SELECT User.id FROM User".
+				" LEFT JOIN Recovery ON User.id=Recovery.user_id".
+				" WHERE email=".DB_quote_smart($var1).
+				" AND Recovery.password=".DB_quote_smart($var2).
+				" AND DATE_SUB(CURDATE(),INTERVAL 1 DAY) <= Recovery.create_date");
+	}
+      break;
+    case 'gameid-position':
+      $result = mysql_query("SELECT user_id FROM Hand WHERE game_id=".
+			    DB_quote_smart($var1)." AND position=".
+			    DB_quote_smart($var2));
+      break;
+    }
+
+  if(!$r)
+    $r = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0];
+  else
+    return 0;
+}
+
+function DB_get_email($type,$var1='',$var2='')
+{
+  /* return the email of a user
+   * this is used for sending out emails, but also for
+   * testing the login for example
+   */
+  switch($type)
+    {
+    case 'name':
+      $result = mysql_query("SELECT email FROM User WHERE fullname=".DB_quote_smart($var1)."");
+      break;
+    case 'userid':
+      $result = mysql_query("SELECT email FROM User WHERE id=".DB_quote_smart($var1)."");
+      break;
+    case 'hash':
+      $result = mysql_query("SELECT User.email FROM User ".
+			    "LEFT JOIN Hand ON Hand.user_id=User.id ".
+			    "WHERE Hand.hash=".DB_quote_smart($var1)."");
+      break;
+    case 'position-gameid':
+      $result = mysql_query("SELECT email FROM User ".
+			    "LEFT JOIN Hand ON User.id=Hand.user_id ".
+			    "LEFT JOIN Game ON Game.id=Hand.game_id ".
+			    "WHERE Game.id=".DB_quote_smart($var2)." ".
+			    "AND Hand.position=".DB_quote_smart($var1)."");
+      break;
+    }
+
+  $r = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0];
+  else
+    return "";
+}
+
+function DB_get_name($type,$var1='')
+{
+  /* get the full name of a user
+   * a user can be uniquely identified several ways
+   */
+  switch($type)
+    {
+    case 'hash':
+      $result = mysql_query("SELECT fullname FROM Hand LEFT JOIN User ON Hand.user_id=User.id WHERE hash=".DB_quote_smart($var1));
+      break;
+    case 'email':
+      $result = mysql_query("SELECT fullname FROM User WHERE email=".DB_quote_smart($var1));
+      break;
+    case 'userid':
+      $result = mysql_query("SELECT fullname FROM User  WHERE id=".DB_quote_smart($var1));
+    }
+
+  $r = mysql_fetch_array($result,MYSQL_NUM);
+
+  if($r)
+    return $r[0];
+  else
+    return "";
+}
+
+?>
\ No newline at end of file
diff --git a/include/functions.php b/include/functions.php
new file mode 100644
index 0000000..991d53d
--- /dev/null
+++ b/include/functions.php
@@ -0,0 +1,895 @@
+<?php
+/* make sure that we are not called from outside the scripts, 
+ * use a variable defined in config.php to check this
+ */
+if(!isset($HOST))
+  exit;
+
+function config_check()
+{
+  global $EmailName,$EMAIL_REPLY,$ADMIN_NAME,$ADMIN_EMAIL,$DB_work;
+
+  /* check if some variables are set in the config file, else set defaults */
+  if(!isset($EmailName))
+    $EmailName="[DoKo] ";
+  if(isset($EMAIL_REPLY))
+    {
+      ini_set("sendmail_from",$EMAIL_REPLY);
+    }
+  if(!isset($ADMIN_NAME))
+    {
+      output_header();
+      echo "<h1>Setup not completed</h1>";
+      echo "You need to set \$ADMIN_NAME in config.php.";
+      output_footer();
+      exit();
+    }
+  if(!isset($ADMIN_EMAIL))
+    {
+      output_header();
+      echo "<h1>Setup not completed</h1>";
+      echo "You need to set \$ADMIN_EMAIL in config.php. ".
+	"If something goes wrong an email will be send to this address.";
+      output_footer();
+      exit();
+    }
+  if(!isset($DB_work))
+    {
+      output_header();
+      echo "<h1>Setup not completed</h1>";
+      echo "You need to set \$DB_work in config.php. ".
+	"If this is set to 1, the game will be suspended and one can work safely on the database.".
+	"The default should be 0 for the game to work.";
+      output_footer();
+      exit();
+    }
+  if($DB_work)
+    {
+      output_header();
+      echo "Working on the database...please check back later.";
+      output_footer();
+      exit();
+    }
+
+  return;
+}
+
+function mymail($To,$Subject,$message,$header="")
+{
+  global $debug,$EMAIL_REPLY;
+
+  if(isset($EMAIL_REPLY))
+    $header .= "From: e-DoKo daemon <$EMAIL_REPLY>\r\n";
+
+  if($debug)
+    {
+      /* display email on screen,
+       * change txt -> html
+       */
+      $message = str_replace("\n","<br />\n",$message);
+      $message = ereg_replace("[[:alpha:]]+://[^<>[:space:]]+[[:alnum:]/]",
+                     "<a href=\"\\0\">\\0</a>", $message);
+
+      echo "<br />To: $To<br />";
+      if($header != "")
+	echo $header."<br />";
+      echo "Subject: $Subject <br />$message<br />\n";
+    }
+  else
+    if($header != "")
+      mail($To,$Subject,$message,$header);
+    else
+      mail($To,$Subject,$message);
+  return;
+}
+
+function myisset()
+{
+  /* returns 1 if all names passed as args are defined by a GET or POST statement,
+   * else return 0
+   */
+
+  $ok   = 1;
+  $args = func_get_args();
+
+  foreach($args as $arg)
+    {
+      $ok = $ok * isset($_REQUEST[$arg]);
+      /*echo "$arg: ok = $ok <br />";
+       */
+    }
+  return $ok;
+}
+
+function myerror($message)
+{
+  echo "<span class=\"error\">".htmlspecialchars($message)."</span>\n";
+  mymail($ADMIN_EMAIL,$EmailName." Error in Code",$message);
+  return;
+}
+
+function pos_array($c,$arr)
+{
+  $ret = 0;
+
+  $i   = 0;
+  foreach($arr as $a)
+    {
+      $i++;
+      if($a == $c)
+	{
+	  $ret = $i;
+	  break;
+	}
+    }
+  return $ret;
+}
+
+function is_trump($c)
+{
+  global $CARDS;
+
+  if(in_array($c,$CARDS["trump"]))
+    return 1;
+  else
+    return 0;
+}
+
+function is_same_suite($c1,$c2)
+{
+  global $CARDS;
+
+  if(in_array($c1,$CARDS["trump"]   ) && in_array($c2,$CARDS["trump"]   ) ) return 1;
+  if(in_array($c1,$CARDS["clubs"]   ) && in_array($c2,$CARDS["clubs"]   ) ) return 1;
+  if(in_array($c1,$CARDS["hearts"]  ) && in_array($c2,$CARDS["hearts"]  ) ) return 1;
+  if(in_array($c1,$CARDS["spades"]  ) && in_array($c2,$CARDS["spades"]  ) ) return 1;
+  if(in_array($c1,$CARDS["diamonds"]) && in_array($c2,$CARDS["diamonds"]) ) return 1;
+
+  return 0;
+}
+
+function compare_cards($a,$b,$game)
+{
+  /* if "a" is higher than "b" return 1, else 0, "a" being the card first played */
+
+  global $CARDS;
+  global $RULES;
+  global $GAME;
+
+  /* first map all cards to the odd number,
+   * this insure that the first card wins the trick
+   * if they are the same card
+   */
+  if( $a/2 - (int)($a/2) != 0.5)
+    $a--;
+  if( $b/2 - (int)($b/2) != 0.5)
+    $b--;
+
+  /* check for schweinchen and ten of hearts*/
+  switch($game)
+    {
+    case "normal":
+    case "silent":
+    case "trump":
+      if($RULES["schweinchen"]=="both" && $GAME["schweinchen"])
+	{
+	  if($a == 19 || $a == 20 )
+	    return 1;
+	  if($b == 19 || $b == 20 )
+	    return 0;
+	};
+      if($RULES["schweinchen"]=="second" && $GAME["schweinchen"]==3)
+	{
+	  if($a == 19 || $a == 20 )
+	    return 1;
+	  if($b == 19 || $b == 20 )
+	    return 0;
+	};
+    case "heart":
+    case "spade":
+    case "club":
+      /* check for ten of hearts rule */
+      if($RULES["dullen"]=="secondwins")
+	if($a==1 && $b==1) /* both 10 of hearts */
+	  return 0;        /* second one wins.*/
+    case "trumpless":
+    case "jack":
+    case "queen":
+      /* no special cases here */
+    }
+
+  /* normal case */
+  if(is_trump($a) && is_trump($b) && $a<=$b)
+    return 1;
+  else if(is_trump($a) && is_trump($b) )
+    return 0;
+  else
+    { /*$a is not a trump */
+      if(is_trump($b))
+	return 0;
+      else
+	{ /* both no trump */
+
+	  /* both clubs? */
+	  $posA = pos_array($a,$CARDS["clubs"]);
+	  $posB = pos_array($b,$CARDS["clubs"]);
+	  if($posA && $posB)
+	    if($posA <= $posB)
+	      return 1;
+	    else
+	      return 0;
+
+	  /* both spades? */
+	  $posA = pos_array($a,$CARDS["spades"]);
+	  $posB = pos_array($b,$CARDS["spades"]);
+	  if($posA && $posB)
+	    if($posA <= $posB)
+	      return 1;
+	    else
+	      return 0;
+
+	  /* both hearts? */
+	  $posA = pos_array($a,$CARDS["hearts"]);
+	  $posB = pos_array($b,$CARDS["hearts"]);
+	  if($posA && $posB)
+	    if($posA <= $posB)
+	      return 1;
+	    else
+	      return 0;
+
+	  /* both diamonds? */
+	  $posA = pos_array($a,$CARDS["diamonds"]);
+	  $posB = pos_array($b,$CARDS["diamonds"]);
+	  if($posA && $posB)
+	    if($posA <= $posB)
+	      return 1;
+	    else
+	      return 0;
+
+	  /* not the same suit and no trump: a wins */
+	  return 1;
+	}
+    }
+}
+
+function get_winner($p,$mode)
+{
+  /* get all 4 cards played in a trick, in the order they are played */
+  $tmp = $p[1];
+  $c1    = $tmp["card"];
+  $c1pos = $tmp["pos"];
+
+  $tmp = $p[2];
+  $c2    = $tmp["card"];
+  $c2pos = $tmp["pos"];
+
+  $tmp = $p[3];
+  $c3    = $tmp["card"];
+  $c3pos = $tmp["pos"];
+
+  $tmp = $p[4];
+  $c4    = $tmp["card"];
+  $c4pos = $tmp["pos"];
+
+  /* first card is better than all the rest */
+  if( compare_cards($c1,$c2,$mode) && compare_cards($c1,$c3,$mode) && compare_cards($c1,$c4,$mode) )
+    return $c1pos;
+
+  /* second card is better than first and better than the rest */
+  if( !compare_cards($c1,$c2,$mode) &&  compare_cards($c2,$c3,$mode) && compare_cards($c2,$c4,$mode) )
+    return $c2pos;
+
+  /* third card is better than first card and better than last */
+  if( !compare_cards($c1,$c3,$mode) &&  compare_cards($c3,$c4,$mode) )
+    /* if second card is better than first, third card needs to be even better */
+    if( !compare_cards($c1,$c2,$mode) && !compare_cards($c2,$c3,$mode) )
+      return $c3pos;
+    /* second is worse than first, e.g. not following suite */
+    else if (compare_cards($c1,$c2,$mode) )
+      return $c3pos;
+
+  /* non of the above */
+  return $c4pos;
+}
+
+function count_nines($cards)
+{
+  $nines = 0;
+
+  foreach($cards as $c)
+    {
+      if($c == "25" || $c == "26") $nines++;
+      else if($c == "33" || $c == "34") $nines++;
+      else if($c == "41" || $c == "42") $nines++;
+      else if($c == "47" || $c == "48") $nines++;
+    }
+
+  return $nines;
+}
+
+function check_wedding($cards)
+{
+
+  if( in_array("3",$cards) && in_array("4",$cards) )
+    return 1;
+
+  return 0;
+}
+
+function count_trump($cards)
+{
+  global $RULES;
+
+  $trump = 0;
+
+  /* count each trump, including the foxes */
+  foreach($cards as $c)
+    if( (int)($c) <27)
+      $trump++;
+
+  /* normally foxes don't count as trump, so we substract them here
+   * in case someone has schweinchen, one or two of them should count as trump 
+   * though, so we need to add one trump for those cases */
+  
+  /* subtract foxes */
+  if( in_array("19",$cards))
+    $trump--;
+  if( in_array("20",$cards) )
+    $trump--;
+
+  /* handle case where player has schweinchen */
+  if( in_array("19",$cards) && in_array("20",$cards) )
+    switch($RULES["schweinchen"])
+      {
+      case "both":
+	/* add two, in case the player has both foxes (schweinchen) */
+	$trump++;
+	$trump++;
+	break;
+      case "second":
+      case "secondaftercall":
+	/* add one, in case the player has both foxes (schweinchen) */
+	$trump++;
+	break;
+      case "none":
+	break;
+      }
+
+  return $trump;
+}
+
+function  create_array_of_random_numbers($useridA,$useridB,$useridC,$useridD)
+{
+  global $debug;
+
+  $r = array();
+
+  if($debug)
+    {
+      $r[ 0]=1;     $r[12]=47;   $r[24]=13;       $r[36]=37;
+      $r[ 1]=2;     $r[13]=48;   $r[25]=14;	  $r[37]=38;
+      $r[ 2]=3;     $r[14]=27;   $r[26]=15;	  $r[38]=39;
+      $r[ 3]=4;     $r[15]=16;   $r[27]=28;	  $r[39]=40;
+      $r[ 4]=5;     $r[16]=17;   $r[28]=29;	  $r[40]=41;
+      $r[ 5]=18;    $r[17]=6;    $r[29]=30;	  $r[41]=42;
+      $r[ 6]=19;    $r[18]=7;    $r[30]=31;	  $r[42]=43;
+      $r[ 7]=20;    $r[19]=8;    $r[31]=32;	  $r[43]=44;
+      $r[ 8]=45;    $r[20]=9;    $r[32]=21;	  $r[44]=33;
+      $r[ 9]=46;    $r[21]=10;   $r[33]=22;	  $r[45]=34;
+      $r[10]=35;    $r[22]=11;   $r[34]=23;	  $r[46]=25;
+      $r[11]=36;    $r[23]=12;   $r[35]=24;	  $r[47]=26;
+    }
+  else
+    {
+      /* check if we can find a game were non of the player was involved and return
+       * cards insted
+       */
+      $userstr = "'".implode("','",array($useridA,$useridB,$useridC,$useridD))."'";
+      $randomnumbers = DB_get_unused_randomnumbers($userstr);
+      $randomnumbers = explode(":",$randomnumbers);
+
+      if(sizeof($randomnumbers)==48)
+	return $randomnumbers;
+
+      /* need to create new numbers */
+      for($i=0;$i<48;$i++)
+	$r[$i]=$i+1;
+
+      /* shuffle using a better random generator than the standard one */
+      for ($i = 0; $i <48; $i++)
+	{
+	  $j = @mt_rand(0, $i);
+	  $tmp = $r[$i];
+	  $r[$i] = $r[$j];
+	  $r[$j] = $tmp;
+	}
+    };
+
+  return $r;
+}
+
+function display_cards($me,$myturn)
+{
+  return;
+}
+
+function have_suit($cards,$c)
+{
+  global $CARDS;
+  $suite = array();
+
+  if(in_array($c,$CARDS["trump"]))
+    $suite = $CARDS["trump"];
+  else if(in_array($c,$CARDS["clubs"]))
+    $suite = $CARDS["clubs"];
+  else if(in_array($c,$CARDS["spades"]))
+    $suite = $CARDS["spades"];
+  else if(in_array($c,$CARDS["hearts"]))
+    $suite = $CARDS["hearts"];
+  else if(in_array($c,$CARDS["diamonds"]))
+    $suite = $CARDS["diamonds"];
+
+  foreach($cards as $card)
+    {
+      if(in_array($card,$suite))
+	return 1;
+    }
+
+  return 0;
+}
+
+function same_type($card,$c)
+{
+  global $CARDS;
+  $suite = "";
+
+  /* figure out what kind of card c is */
+  if(in_array($c,$CARDS["trump"]))
+    $suite = $CARDS["trump"];
+  else if(in_array($c,$CARDS["clubs"]))
+    $suite = $CARDS["clubs"];
+  else if(in_array($c,$CARDS["spades"]))
+    $suite = $CARDS["spades"];
+  else if(in_array($c,$CARDS["hearts"]))
+    $suite = $CARDS["hearts"];
+  else if(in_array($c,$CARDS["diamonds"]))
+    $suite = $CARDS["diamonds"];
+
+  /* card is the same suid return 1 */
+  if(in_array($card,$suite))
+    return 1;
+
+  return 0;
+}
+
+function set_gametype($gametype)
+{
+  global $CARDS;
+  global $RULES;
+
+  switch($gametype)
+    {
+    case "normal":
+    case "wedding":
+    case "poverty":
+    case "dpoverty":
+    case "trump":
+    case "silent":
+      $CARDS["trump"]    = array('1','2','3','4','5','6','7','8','9','10','11','12','13','14','15','16',
+				 '17','18','19','20','21','22','23','24','25','26');
+      $CARDS["diamonds"] = array();
+      $CARDS["clubs"]    = array('27','28','29','30','31','32','33','34');
+      $CARDS["spades"]   = array('35','36','37','38','39','40','41','42');
+      $CARDS["hearts"]   = array('43','44','45','46','47','48');
+      $CARDS["foxes"]    = array('19','20');
+      if($RULES["dullen"]=='none')
+	{
+	  $CARDS["trump"]    = array('3','4','5','6','7','8','9','10','11','12','13','14','15','16',
+				     '17','18','19','20','21','22','23','24','25','26');
+	  $CARDS["hearts"]   = array('43','44','1','2','45','46','47','48');
+	}
+      break;
+    case "queen":
+      $CARDS["trump"]    = array('3','4','5','6','7','8','9','10');
+      $CARDS["clubs"]    = array('27','28','29','30','31','32','11','12','33','34');
+      $CARDS["spades"]   = array('35','36','37','38','39','40','13','14','41','42');
+      $CARDS["hearts"]   = array('43','44', '1', '2','45','46','15','16','47','48');
+      $CARDS["diamonds"] = array('19','20','21','22','23','24','17','18','25','26');
+      $CARDS["foxes"]    = array();
+      break;
+    case "jack":
+      $CARDS["trump"]    = array('11','12','13','14','15','16','17','18');
+      $CARDS["clubs"]    = array('27','28','29','30','31','32','3', '4','33','34');
+      $CARDS["spades"]   = array('35','36','37','38','39','40','5', '6','41','42');
+      $CARDS["hearts"]   = array('43','44', '1', '2','45','46','7', '8','47','48');
+      $CARDS["diamonds"] = array('19','20','21','22','23','24','9','10','25','26');
+      $CARDS["foxes"]    = array();
+      break;
+    case "trumpless":
+      $CARDS["trump"]    = array();
+      $CARDS["clubs"]    = array('27','28','29','30','31','32','3', '4','11','12','33','34');
+      $CARDS["spades"]   = array('35','36','37','38','39','40','5', '6','13','14','41','42');
+      $CARDS["hearts"]   = array('43','44', '1', '2','45','46','7', '8','15','16','47','48');
+      $CARDS["diamonds"] = array('19','20','21','22','23','24','9','10','17','18','25','26');
+      $CARDS["foxes"]    = array();
+      break;
+    case "club":
+      $CARDS["trump"]    = array('1','2','3','4','5','6','7','8','9','10','11','12','13','14','15','16',
+				 '17','18','27','28','29','30','31','32','33','34');
+      $CARDS["clubs"]    = array();
+      $CARDS["spades"]   = array('35','36','37','38','39','40','41','42');
+      $CARDS["hearts"]   = array('43','44','45','46','47','48');
+      $CARDS["diamonds"] = array('19','20','21','22','23','24','25','26');
+      $CARDS["foxes"]    = array();
+      if($RULES["dullen"]=='none')
+	{
+	  $CARDS["trump"]    = array('3','4','5','6','7','8','9','10','11','12','13','14','15','16',
+				     '17','18','27','28','29','30','31','32','33','34');
+	  $CARDS["hearts"]   = array('43','44','1','2','45','46','47','48');
+	}
+      break;
+    case "spade":
+      $CARDS["trump"]    = array('1','2','3','4','5','6','7','8','9','10','11','12','13','14','15','16',
+				 '17','18','35','36','37','38','39','40','41','42');
+      $CARDS["clubs"]    = array('27','28','29','30','31','32','33','34');
+      $CARDS["spades"]   = array();
+      $CARDS["hearts"]   = array('43','44','45','46','47','48');
+      $CARDS["diamonds"] = array('19','20','21','22','23','24','25','26');
+      $CARDS["foxes"]    = array();
+      if($RULES["dullen"]=='none')
+	{
+	  $CARDS["trump"]    = array('3','4','5','6','7','8','9','10','11','12','13','14','15','16',
+				     '17','18','35','36','37','38','39','40','41','42');
+	  $CARDS["hearts"]   = array('43','44','1','2','45','46','47','48');
+	}
+      break;
+    case "heart":
+      $CARDS["trump"]    = array('1','2','3','4','5','6','7','8','9','10','11','12','13','14','15','16',
+				 '17','18','43','44','45','46','47','48');
+      $CARDS["clubs"]    = array('27','28','29','30','31','32','33','34');
+      $CARDS["spades"]   = array('35','36','37','38','39','40','41','42');
+      $CARDS["hearts"]   = array();
+      $CARDS["diamonds"] = array('19','20','21','22','23','24','25','26');
+      $CARDS["foxes"]    = array();
+      if($RULES["dullen"]=='none')
+	{
+	  $CARDS["trump"]    = array('3','4','5','6','7','8','9','10','11','12','13','14','15','16',
+			    '17','18','43','44','1','2','45','46','47','48');
+	}
+      break;
+    }
+}
+
+function mysort($cards,$gametype)
+{
+  usort ( $cards, "sort_comp" );
+  return $cards;
+}
+
+function sort_comp($a,$b)
+{
+  global $CARDS;
+
+  $ALL = array();
+  $ALL = array_merge($CARDS["trump"],$CARDS["diamonds"],$CARDS["clubs"],
+		     $CARDS["hearts"],$CARDS["spades"],$CARDS["diamonds"]);
+
+  return pos_array($a,$ALL)-pos_array($b,$ALL);
+}
+
+function can_call($what,$hash)
+{
+  global $RULES;
+
+  $gameid   = DB_get_gameid_by_hash($hash);
+  $gametype = DB_get_gametype_by_gameid($gameid);
+  $oldcall  = DB_get_call_by_hash($hash);
+  $pcall    = DB_get_partner_call_by_hash($hash);
+
+  if( ($pcall!=NULL && $what >= $pcall) ||
+      ($oldcall!=NULL && $what >=$oldcall) )
+    {
+      return 0;
+    }
+
+  $NRcards  = count(DB_get_hand($hash));
+
+  $NRallcards = 0;
+  for ($i=1;$i<5;$i++)
+    {
+      $user         = DB_get_hash_from_game_and_pos($gameid,$i);
+      $NRallcards  += count(DB_get_hand($user));
+    };
+
+  /* in case of a wedding, everything will be delayed by an offset */
+  $offset = 0;
+  if($gametype=="wedding")
+    {
+      $offset = DB_get_sickness_by_gameid($gameid);
+      if ($offset <0) /* not resolved */
+	return 0;
+    };
+
+  switch ($RULES["call"])
+    {
+    case "1st-own-card":
+      if( 4-($what/30) >= 12 - ($NRcards + $offset))
+	return 1;
+      break;
+    case "5th-card":
+      if( 27+4*($what/30) <= $NRallcards + $offset*4)
+	return 1;
+      break;
+    case "9-cards":
+
+      if($oldcall!=NULL && $pcall!=NULL)
+	$mincall = ($oldcall>$pcall) ? $pcall : $oldcall;
+      else if($oldcall!=NULL)
+	$mincall = $oldcall;
+      else if ($pcall!=NULL)
+	$mincall = $pcall;
+      else
+	$mincall = -1;
+
+      if( 12 <= ($NRcards + $offset))
+	{
+	  return 1;
+	}
+      else if ( 9 <= ($NRcards + $offset))
+	{
+	  if( ($mincall>=0 && $mincall==120) )
+	    return 1;
+	}
+      else if ( 6 <= ($NRcards + $offset))
+	{
+	  if( ($mincall>=0 && $mincall<=90 && $what<=60 ) )
+	    return 1;
+	}
+      else if ( 3 <= ($NRcards + $offset))
+	{
+	  if( ($mincall>=0 && $mincall<=60 && $what<=30 ) )
+	    return 1;
+	}
+      else if ( 0 <= ($NRcards + $offset))
+	{
+	  if( ($mincall>=0 && $mincall<=30 && $what==0 ) )
+	    return 1;
+	};
+      break;
+    }
+
+  return 0;
+}
+
+function display_table ()
+{
+  global $gameid, $GT, $debug,$INDEX,$defaulttimezone;
+
+  $result = mysql_query("SELECT  User.fullname as name,".
+			"        Hand.position as position, ".
+			"        User.id, ".
+			"        Hand.party as party, ".
+			"        Hand.sickness as sickness, ".
+			"        Hand.point_call, ".
+			"        User.last_login, ".
+			"        Hand.hash,       ".
+			"        User.timezone    ".
+			"FROM Hand ".
+			"LEFT JOIN User ON User.id=Hand.user_id ".
+			"WHERE Hand.game_id='".$gameid."' ".
+			"ORDER BY position ASC");
+
+  echo "<div class=\"table\">\n".
+    "  <img class=\"table\" src=\"pics/table.png\" alt=\"table\" />\n";
+  while($r = mysql_fetch_array($result,MYSQL_NUM))
+    {
+      $name  = $r[0];
+      $pos   = $r[1];
+      $user  = $r[2];
+      $party = $r[3];
+      $sickness  = $r[4];
+      $call      = $r[5];
+      $hash      = $r[7];
+      $timezone  = $r[8];
+      date_default_timezone_set($defaulttimezone);
+      $lastlogin = strtotime($r[6]);
+      date_default_timezone_set($timezone);
+      $timenow   = strtotime(date("Y-m-d H:i:s"));
+
+      echo "  <div class=\"table".($pos-1)."\">\n";
+      if(!$debug)
+	echo "   $name \n";
+      else
+	echo "   <a href=\"".$INDEX."?me=".$hash."\">$name</a>\n";
+
+      /* add hints for poverty, wedding, solo, etc */
+      if($GT=="poverty" && $party=="re")
+	if($sickness=="poverty")
+	  {
+	    $userhash = DB_get_hash_from_gameid_and_userid($gameid,$user);
+	    $cards    = DB_get_all_hand($userhash);
+	    $trumpNR  = count_trump($cards);
+	    if($trumpNR)
+	      echo "   <img src=\"pics/button/poverty_trump_button.png\" class=\"button\" alt=\"poverty < trump back\" />";
+	    else
+	      echo "   <img src=\"pics/button/poverty_notrump_button.png\" class=\"button\" alt=\"poverty <\" />";
+	  }
+	else
+	  echo "   <img src=\"pics/button/poverty_partner_button.png\" class=\"button\" alt=\"poverty >\" />";
+
+      if($GT=="dpoverty")
+	if($party=="re")
+	  if($sickness=="poverty")
+	    {
+	      $userhash = DB_get_hash_from_gameid_and_userid($gameid,$user);
+	      $cards    = DB_get_all_hand($userhash);
+	      $trumpNR  = count_trump($cards);
+	      if($trumpNR)
+		echo "   <img src=\"pics/button/poverty_trump_button.png\" class=\"button\" alt=\"poverty < trump back\" />";
+	      else
+		echo "   <img src=\"pics/button/poverty_notrump_button.png\" class=\"button\" alt=\"poverty <\" />";
+	    }
+	  else
+	    echo "   <img src=\"pics/button/poverty_partner_button.png\" class=\"button\" alt=\"poverty >\" />";
+	else
+	  if($sickness=="poverty")
+	    {
+	      $userhash = DB_get_hash_from_gameid_and_userid($gameid,$user);
+	      $cards    = DB_get_all_hand($userhash);
+	      $trumpNR  = count_trump($cards);
+	      if($trumpNR)
+		echo "   <img src=\"pics/button/poverty2_trump_button.png\" class=\"button\" alt=\"poverty2 < trump back\" />";
+	      else
+		echo "   <img src=\"pics/button/poverty2_notrump_button.png\" class=\"button\" alt=\"poverty2 <\" />";
+	    }
+	  else
+	    echo "   <img src=\"pics/button/poverty2_partner_button.png\" class=\"button\" alt=\"poverty2 >\" />";
+
+      if($GT=="wedding" && $party=="re")
+	if($sickness=="wedding")
+	  echo "   <img src=\"pics/button/wedding_button.png\" class=\"button\" alt=\"wedding\" />";
+	else
+	  echo "   <img src=\"pics/button/wedding_partner_button.png\" class=\"button\" alt=\"wedding partner\" />";
+
+      if(ereg("solo",$GT) && $party=="re")
+	{
+	  if(ereg("queen",$GT))
+	    echo "   <img src=\"pics/button/queensolo_button.png\" class=\"button\" alt=\"$GT\" />";
+	  else if(ereg("jack",$GT))
+	    echo "   <img src=\"pics/button/jacksolo_button.png\" class=\"button\" alt=\"$GT\" />";
+	  else if(ereg("club",$GT))
+	    echo "   <img src=\"pics/button/clubsolo_button.png\" class=\"button\" alt=\"$GT\" />";
+	  else if(ereg("spade",$GT))
+	    echo "   <img src=\"pics/button/spadesolo_button.png\" class=\"button\" alt=\"$GT\" />";
+	  else if(ereg("heart",$GT))
+	    echo "   <img src=\"pics/button/heartsolo_button.png\" class=\"button\" alt=\"$GT\" />";
+	  else if(ereg("trumpless",$GT))
+	    echo "   <img src=\"pics/button/notrumpsolo_button.png\" class=\"button\" alt=\"$GT\" />";
+	  else if(ereg("trump",$GT))
+	    echo "   <img src=\"pics/button/trumpsolo_button.png\" class=\"button\" alt=\"$GT\" />";
+	}
+
+      /* add point calls */
+      if($call!=NULL)
+	{
+	  if($party=="re")
+	    echo "  <img src=\"pics/button/re_button.png\" class=\"button\" alt=\"re\" />";
+	  else
+	    echo "  <img src=\"pics/button/contra_button.png\" class=\"button\" alt=\"contra\" />";
+	  switch($call)
+	    {
+	    case "0":
+	      echo "   <img src=\"pics/button/0_button.png\" class=\"button\" alt=\"0\" />";
+	      break;
+	    case "30":
+	      echo "   <img src=\"pics/button/30_button.png\" class=\"button\" alt=\"30\" />";
+	      break;
+	    case "60":
+	      echo "   <img src=\"pics/button/60_button.png\" class=\"button\" alt=\"60\" />";
+	      break;
+	    case "90":
+	      echo "   <img src=\"pics/button/90_button.png\" class=\"button\" alt=\"90\" />";
+	      break;
+	    }
+	}
+
+      echo "    <br />\n";
+      echo "    <span title=\"".date("Y-m-d H:i:s",$timenow).  "\">local time</span>\n";
+      echo "    <span title=\"".date("Y-m-d H:i:s",$lastlogin)."\">last login</span>\n";
+      echo "   </div>\n";
+
+    }
+  echo  "</div>\n"; /* end output table */
+
+
+  return;
+}
+
+
+function display_user_menu()
+{
+  global $WIKI,$myid,$INDEX,$STATS;
+  echo "<div class=\"usermenu\">\n".
+    "<a href=\"".$INDEX."\"> Go to my user page </a>";
+
+  $result = mysql_query("SELECT Hand.hash,Hand.game_id,Game.player from Hand".
+			" LEFT JOIN Game On Hand.game_id=Game.id".
+			" WHERE Hand.user_id='$myid'".
+			" AND Game.player='$myid'".
+			" AND Game.status<>'gameover'".
+			" ORDER BY Game.session" );
+  if(mysql_num_rows($result))
+      echo "<hr />It's your turn in these games:<br />\n";
+
+  while( $r = mysql_fetch_array($result,MYSQL_NUM))
+    {
+      echo "<a href=\"".$INDEX."?me=".$r[0]."\">game ".DB_format_gameid($r[1])." </a><br />\n";
+    }
+
+  echo "<hr /> <a href=\"".$INDEX."?new\">Start a new game</a>\n";
+
+  echo "<hr /> <a href=\"".$STATS."\">Statistics</a>\n";
+
+  echo
+    "<hr />Report bugs in the <a href=\"".$WIKI."\">wiki</a>\n";
+  echo  "</div>\n";
+  return;
+}
+
+function generate_score_table($session)
+{
+
+  /* get all ids */
+  $gameids = DB_get_gameids_of_finished_games_by_session($session);
+
+  if($gameids == NULL)
+    return "";
+
+  $output = "<div class=\"scoretable\">\n<table class=\"score\">\n <tr>\n";
+
+
+  /* get player id, names... from the first game */
+  $player = array();
+  $result = mysql_query("SELECT User.id, User.fullname from Hand".
+			" LEFT JOIN User On Hand.user_id=User.id".
+			" WHERE Hand.game_id=".$gameids[0]);
+  while( $r = mysql_fetch_array($result,MYSQL_NUM))
+    {
+      $player[] = array( 'id' => $r[0], 'points' => 0 );
+      $output.= "  <td> ".substr($r[1],0,2)." </td>\n";
+    }
+  $output.="  <td>P</td>\n </tr>\n";
+
+  /* get points and generate table */
+  foreach($gameids as $gameid)
+    {
+      $output.=" <tr>\n";
+
+      $re_score = DB_get_score_by_gameid($gameid);
+      foreach($player as $key=>$pl)
+	{
+	  $party = DB_get_party_by_gameid_and_userid($gameid,$pl['id']);
+	  if($party == "re")
+	    if(DB_get_gametype_by_gameid($gameid)=="solo")
+	      $player[$key]['points'] += 3*$re_score;
+	    else
+	      $player[$key]['points'] += $re_score;
+	  else if ($party == "contra")
+	    $player[$key]['points'] -= $re_score;
+
+	  $output.="  <td>".$player[$key]['points']."</td>\n";
+	}
+      $output.="  <td>".abs($re_score);
+
+      /* check for solo */
+      if(DB_get_gametype_by_gameid($gameid)=="solo")
+	$output.= " S";
+      $output.="</td>\n </tr>\n";
+    }
+
+  $output.="</table></div>\n";
+
+  return $output;
+}
+
+?>
diff --git a/include/game.php b/include/game.php
new file mode 100644
index 0000000..0e16292
--- /dev/null
+++ b/include/game.php
@@ -0,0 +1,1763 @@
+<?php
+/* make sure that we are not called from outside the scripts, 
+ * use a variable defined in config.php to check this
+ */
+if(!isset($HOST))
+  exit;
+
+$me = $_REQUEST["me"];
+
+/* test for valid ID */
+$myid = DB_get_userid('hash',$me);
+if(!$myid)
+  {
+    echo "Can't find you in the database, please check the url.<br />\n";
+    echo "perhaps the game has been canceled, check by login in <a href=\"$INDEX\">here</a>.";
+    output_footer();
+    DB_close();
+    exit();
+  }
+    
+/* user might get here by clicking on the link in an email, so session might not be set */
+if(isset($_SESSION["name"]))
+  output_status($_SESSION["name"]);
+
+/* the user had done something, update the timestamp */
+DB_update_user_timestamp($myid);
+
+/* get some information from the DB */
+$gameid   = DB_get_gameid_by_hash($me);
+$myname   = DB_get_name('hash',$me);
+$mystatus = DB_get_status_by_hash($me);
+$mypos    = DB_get_pos_by_hash($me);
+$myhand   = DB_get_handid('hash',$me);
+$session  = DB_get_session_by_gameid($gameid);
+
+/* get prefs and save them */
+DB_get_PREF($myid);
+
+/* get rule set for this game */
+$result = mysql_query("SELECT * FROM Rulesets".
+		      " LEFT JOIN Game ON Game.ruleset=Rulesets.id ".
+		      " WHERE Game.id='$gameid'" );
+$r      = mysql_fetch_array($result,MYSQL_NUM);
+
+$RULES["dullen"]      = $r[2];
+$RULES["schweinchen"] = $r[3];
+$RULES["call"]        = $r[4];
+
+/* get some infos about the game */
+$gametype   = DB_get_gametype_by_gameid($gameid);
+$gamestatus = DB_get_game_status_by_gameid($gameid);
+$GT         = $gametype;
+if($gametype=="solo")
+  {
+    $gametype = DB_get_solo_by_gameid($gameid);
+    $GT  = $gametype." ".$GT;
+  }
+
+/* does anyone have both foxes */
+$GAME["schweinchen"]=0;
+for($i=1;$i<5;$i++)
+  {
+    $hash  = DB_get_hash_from_game_and_pos($gameid,$i);
+    $cards = DB_get_all_hand($hash);
+    if( in_array("19",$cards) && in_array("20",$cards) )
+      {
+	$GAME["schweinchen"]=1;
+	$GAME["schweinchen-who"]=$hash;
+      }
+  };
+
+/* put everyting in a form */
+echo "<form action=\"index.php?me=$me\" method=\"post\">\n";
+
+/* output game */
+
+/* output extra division in case this game is part of a session */
+if($session)
+  {
+    echo "<div class=\"session\">\n".
+      "This game is part of session $session: \n";
+    $hashes = DB_get_hashes_by_session($session,$myid);
+    $i = 1;
+    foreach($hashes as $hash)
+      {
+	if($hash == $me)
+	  echo "$i \n";
+	else
+	  echo "<a href=\"".$INDEX."?me=".$hash."\">$i</a> \n";
+	$i++;
+      }
+    echo "</div>\n";
+  }
+
+/* display the table and the names */
+display_table();
+
+/* mystatus gets the player through the different stages of a game.
+ * start:    does the player want to play?
+ * init:     check for sickness
+ * check:    check for return values from init
+ * poverty:  handle poverty, wait here until all player have reached this state
+ *           display sickness and move on to game
+ * play:     game in progress
+ * gameover: are we revisiting a game
+ */
+switch($mystatus)
+  {
+  case 'start':
+    if( !myisset("in") )
+      {
+	/* asks the player, if he wants to join the game */
+	output_check_want_to_play($me);
+	break;
+      }
+    else
+      {
+	/* check the result, if player wants to join, got next stage, else cancel game */
+	if($_REQUEST["in"] == "no")
+	  {
+	    /* cancel the game */
+	    $message = "Hello, \n\n".
+	      "the game has been canceled due to the request of one of the players.\n";
+
+	    $userids = DB_get_all_userid_by_gameid($gameid);
+	    foreach($userids as $user)
+	      {
+		$To = DB_get_email('userid',$user);
+		mymail($To,$EmailName."game ".DB_format_gameid($gameid)." canceled",$message);
+	      }
+
+	    /* delete everything from the dB */
+	    DB_cancel_game($me);
+	    break;
+	  }
+	else
+	  {
+	    /* user wants to join the game */
+
+	    /* move on to the next stage,
+	     * no break statement to immediately go to the next stage
+	     */
+
+	    DB_set_hand_status_by_hash($me,'init');
+
+	    /* check if everyone has reached this stage, send out email */
+	    $userids = DB_get_all_userid_by_gameid($gameid);
+	    $ok = 1;
+	    foreach($userids as $user)
+	      {
+		$userstat = DB_get_hand_status_by_userid_and_gameid($user,$gameid);
+		if($userstat!='init')
+		  {
+		    /* whos turn is it? */
+		    DB_set_player_by_gameid($gameid,$user);
+		    $ok = 0;
+		  }
+	      };
+	    if($ok)
+	      {
+		/* all done, send out email unless this player is the startplayer */
+		$startplayer = DB_get_startplayer_by_gameid($gameid);
+		if($mypos == $startplayer)
+		  {
+		    /* do nothing, go to next stage */
+		  }
+		else
+		  {
+		    /* email startplayer */
+		    /*
+		     $email       = DB_get_email('position-gameid',$startplayer,$gameid);
+		     $hash        = DB_get_hash_from_game_and_pos($gameid,$startplayer);
+		     $who         = DB_get_userid('email',$email);
+		     DB_set_player_by_gameid($gameid,$who);
+
+		     $message = "It's your turn now in game ".DB_format_gameid($gameid).".\n".
+		     "Use this link to go the game: ".$HOST.$INDEX."?me=".$hash."\n\n" ;
+		     mymail($email,$EmailName."ready, set, go... (game ".DB_format_gameid($gameid).") ",$message);
+		    */
+		  }
+	      }
+	  }
+      }
+  case 'init':
+
+    $mycards = DB_get_hand($me);
+    sort($mycards);
+
+    output_check_for_sickness($me,$mycards);
+
+    echo "<p class=\"mycards\">Your cards are: <br />\n";
+    foreach($mycards as $card)
+      display_card($card,$PREF["cardset"]);
+    echo "</p>\n";
+
+    /* move on to the next stage*/
+    DB_set_hand_status_by_hash($me,'check');
+    break;
+
+  case 'check':
+    /* ok, user is in the game, saw his cards and selected his vorbehalt
+     * so first we check what he selected
+     */
+    if(!myisset("solo","wedding","poverty","nines") )
+      {
+	/* all these variables have a pre-selected default,
+	 * so we should never get here,
+	 * unless a user tries to cheat ;)
+	 * can also happen if user reloads the page!
+	 */
+	echo "<p class=\"message\"> You need to answer the <a href=\"$INDEX?me=$me&in=yes\">questions</a>.</p>";
+	DB_set_hand_status_by_hash($me,'init');
+      }
+    else
+      {
+	/* check if someone selected more than one vorbehalt */
+	$Nvorbehalt = 0;
+	if($_REQUEST["solo"]!="No")       $Nvorbehalt++;
+	if($_REQUEST["wedding"] == "yes") $Nvorbehalt++;
+	if($_REQUEST["poverty"] == "yes") $Nvorbehalt++;
+	if($_REQUEST["nines"] == "yes")   $Nvorbehalt++;
+
+	if($Nvorbehalt>1)
+	  {
+	    echo "<p class=\"message\"> You selected more than one vorbehalt, please go back ".
+	      "and answer the <a href=\"$INDEX?me=$me&in=yes\">question</a> again.</p>";
+	    DB_set_hand_status_by_hash($me,'init');
+	  }
+	else
+	  {
+	    echo "<p class=\"message\">Processing what you selected in the last step...";
+
+	    /* check if this sickness needs to be handled first */
+	    $gametype    = DB_get_gametype_by_gameid($gameid);
+	    $startplayer = DB_get_startplayer_by_gameid($gameid);
+
+	    if( $_REQUEST["solo"]!="No")
+	      {
+		/* user wants to play a solo */
+
+		/* store the info in the user's hand info */
+		DB_set_solo_by_hash($me,$_REQUEST["solo"]);
+		DB_set_sickness_by_hash($me,"solo");
+
+		echo "<br />Seems like you want to play a ".$_REQUEST["solo"]." solo. Got it.<br />\n";
+
+		if($gametype == "solo" && $startplayer<$mypos)
+		  {}/* do nothing, since someone else already is playing solo */
+		else
+		  {
+		    /* this solo comes first
+		     * store info in game table
+		     */
+		    DB_set_gametype_by_gameid($gameid,"solo");
+		    DB_set_startplayer_by_gameid($gameid,$mypos);
+		    DB_set_solo_by_gameid($gameid,$_REQUEST["solo"]);
+		  };
+	      }
+	    else if($_REQUEST["wedding"] == "yes")
+	      {
+		/* TODO: add silent solo somewhere*/
+		echo "Ok, you don't want to play a silent solo...wedding was chosen.<br />\n";
+		DB_set_sickness_by_hash($me,"wedding");
+	      }
+	    else if($_REQUEST["poverty"] == "yes")
+	      {
+		echo "Don't think you can win with just a few trump...? ok, poverty chosen <br />\n";
+		DB_set_sickness_by_hash($me,"poverty");
+	      }
+	    else if($_REQUEST["nines"] == "yes")
+	      {
+		echo "What? You just don't want to play a game because you have a few nines? Well, if no one".
+		  " is playing solo, this game will be canceled.<br />\n";
+		DB_set_sickness_by_hash($me,"nines");
+	      }
+
+	    echo " Ok, done with checking, please go to the <a href=\"$INDEX?me=$me\">next step of the setup</a>.</p>";
+
+	    /* move on to the next stage*/
+	    DB_set_hand_status_by_hash($me,'poverty');
+
+	    /* check if everyone has reached this stage, send out email */
+	    $userids = DB_get_all_userid_by_gameid($gameid);
+	    $ok = 1;
+	    foreach($userids as $user)
+	      {
+		$userstat = DB_get_hand_status_by_userid_and_gameid($user,$gameid);
+		if($userstat!='poverty' && $userstat!='play')
+		  {
+		    $ok = 0;
+		    DB_set_player_by_gameid($gameid,$user);
+		  }
+	      };
+	    if($ok)
+	      {
+		/* reset player = everyone has to do something now */
+		DB_set_player_by_gameid($gameid,NULL);
+
+		foreach($userids as $user)
+		  {
+		    $To       = DB_get_email('userid',$user);
+		    $userhash = DB_get_hash_from_gameid_and_userid($gameid,$user);
+		    if($userhash != $me)
+		      {
+			$message = "Everyone finish the questionary in game ".DB_format_gameid($gameid).", ".
+			  "please visit this link now to continue: \n".
+			  " ".$HOST.$INDEX."?me=".$userhash."\n\n" ;
+			mymail($To,$EmailName." finished setup in game ".DB_format_gameid($gameid),$message);
+		      }
+		  };
+	      };
+	  };
+      };
+    break;
+
+  case 'poverty':
+    /* here we need to check if there is a solo or some other form of sickness.
+     * If so, which one is the most important one
+     * set that one in the Game table
+     * tell people about it.
+     */
+    echo "<div class=\"message\">\n";
+    echo "<p> Checking if someone else selected solo, nines, wedding or poverty.</p>";
+
+    /* check if everyone has reached this stage */
+    $userids = DB_get_all_userid_by_gameid($gameid);
+    $ok = 1;
+    foreach($userids as $user)
+      {
+	$userstat = DB_get_hand_status_by_userid_and_gameid($user,$gameid);
+	if($userstat!='poverty' && $userstat!='play')
+	  $ok = 0;
+      };
+
+    if(!$ok)
+      {
+	echo "This step can only be handled after everyone finished the last step. ".
+	  "Seems like this is not the case, so you need to wait a bit... ".
+	  "you will get an email once that is the case, please use the link in ".
+	  "that email to continue the game.<br />";
+      }
+    else
+      {
+	echo "Everyone has finished checking their cards, let's see what they said...<br />";
+
+	/* check what kind of game we are playing,  in case there are any solos this already
+	 *will have the correct information in it */
+	$gametype    = DB_get_gametype_by_gameid($gameid);
+	$startplayer = DB_get_startplayer_by_gameid($gameid);
+
+	/* check for different sickness and just output a general info */
+	$nines   = 0;
+	$poverty = 0;
+	$wedding = 0;
+	$solo    = 0;
+	foreach($userids as $user)
+	  {
+	    $name     = DB_get_name('userid',$user);
+	    $usersick = DB_get_sickness_by_userid_and_gameid($user,$gameid);
+	    if($usersick == 'nines')
+	      {
+		$nines = $user;
+		echo "$name has a Vorbehalt. <br />";
+		break;
+	      }
+	    else if($usersick == 'poverty')
+	      {
+		$poverty++;
+		echo "$name has a Vorbehalt. <br />";
+	      }
+	    else if($usersick == 'wedding')
+	      {
+		$wedding=$user;
+		echo "$name has a Vorbehalt. <br />"  ;
+	      }
+	    else if($usersick == 'solo')
+	      {
+		$solo++;
+		echo "$name has a Vorbehalt. <br />"  ;
+	      }
+	  }
+
+	/* now check which sickness comes first and set the gametype to it */
+
+	if($gametype == "solo")
+	  {
+	    /* do nothing */
+	  }
+	else if($nines)
+	  {
+	    /* cancel game */
+	    /* TODO: should we keep statistics of this? */
+	    $message = "Hello, \n\n".
+	      " the game has been canceled because ".DB_get_name('userid',$nines).
+	      " has five or more nines and nobody is playing solo.\n\n".
+	      " To redeal either start a new game or, in case the game was part of a tournament, \n".
+	      " go to the last game and use the link at the bottom of the page to redeal.";
+
+	    $userids = DB_get_all_userid_by_gameid($gameid);
+	    foreach($userids as $user)
+	      {
+		$To = DB_get_email('userid',$user);
+		mymail($To,$EmailName."game ".DB_format_gameid($gameid)." canceled",$message);
+	      }
+
+	    /* delete everything from the dB */
+	    DB_cancel_game($me);
+
+	    echo "The game has been canceled because ".DB_get_name('userid',$nines).
+	      " has five or more nines and nobody is playing solo.\n";
+	    output_footer();
+	    DB_close();
+	    exit();
+	  }
+	else if($poverty==1) /* one person has poverty */
+	  {
+	    DB_set_gametype_by_gameid($gameid,"poverty");
+	    $gametype = "poverty";
+	    $who      = DB_get_sickness_by_gameid($gameid);
+	    if(!$who)
+	      {
+		$firstsick = DB_get_sickness_by_pos_and_gameid(1,$gameid);
+		if($firstsick == "poverty")
+		  DB_set_sickness_by_gameid($gameid,2); /* who needs to be asked first */
+		else
+		  DB_set_sickness_by_gameid($gameid,1); /* who needs to be asked first */
+	      }
+	  }
+	else if($poverty==2) /* two people have poverty */
+	  {
+	    DB_set_gametype_by_gameid($gameid,"dpoverty");
+	    $gametype = "dpoverty";
+	    $who      = DB_get_sickness_by_gameid($gameid);
+	    if(!$who)
+	      {
+		$firstsick = DB_get_sickness_by_pos_and_gameid(1,$gameid);
+		if($firstsick == "poverty")
+		  {
+		    $seconsick = DB_get_sickness_by_pos_and_gameid(1,$gameid);
+		    if($secondsick == "poverty")
+		      DB_set_sickness_by_gameid($gameid,30); /* who needs to be asked first */
+		    else
+		      DB_set_sickness_by_gameid($gameid,20); /* who needs to be asked first */
+		  }
+		else
+		  DB_set_sickness_by_gameid($gameid,10); /* who needs to be asked first */
+	      }
+	  }
+	else if($wedding> 0)
+	  {
+	    DB_set_gametype_by_gameid($gameid,"wedding");
+	    DB_set_sickness_by_gameid($gameid,'-1'); /* wedding not resolved yet */
+	    $gametype = "wedding";
+	  };
+
+	echo "<br />\n";
+
+	/* now the gametype is set correctly (shouldn't matter that this is calculated for every user)
+	 * output what kind of game we have */
+
+	$poverty = 0;
+	foreach($userids as $user)
+	  {
+	    /* userids are sorted by position...
+	     * so output whatever the first one has, then whatever the next one has
+	     * stop when the sickness is the same as the gametype
+	     */
+
+	    $name     = DB_get_name('userid',$user);
+	    $usersick = DB_get_sickness_by_userid_and_gameid($user,$gameid);
+
+	    if($usersick)
+	      echo "$name has $usersick. <br />"; /*TODO: perhaps save this in a string and store in Game? */
+
+	    if($usersick=="poverty")
+	      $poverty++;
+	    if($usersick == "wedding" && $gametype =="wedding")
+	      break;
+	    if($usersick == "poverty" && $gametype =="poverty")
+	      break;
+	    if($usersick == "poverty" && $gametype =="dpoverty" && $poverty==2)
+	      break;
+	    if($usersick == "solo" && $gametype =="solo")
+	      break;
+	  };
+
+	/* output Schweinchen in case the rules need it */
+	if( $gametype != "solo")
+	  if($GAME["schweinchen"] && $RULES["schweinchen"]=="both" )
+	    echo DB_get_name('hash',$GAME["schweinchen-who"])." has Schweinchen. <br />";
+
+	echo "<br />\n";
+
+	/* finished the setup, set re/contra parties if possible, go to next stage unless there is a case of poverty*/
+	switch($gametype)
+	  {
+	  case "solo":
+	    /* are we the solo player? set us to re, else set us to contra */
+	    $pos = DB_get_pos_by_hash($me);
+	    if($pos == $startplayer)
+	      DB_set_party_by_hash($me,"re");
+	    else
+	      DB_set_party_by_hash($me,"contra");
+	    DB_set_hand_status_by_hash($me,'play');
+	    break;
+
+	  case "wedding":
+	    /* set person with the wedding to re, do the rest during the game */
+	    $usersick = DB_get_sickness_by_userid_and_gameid($myid,$gameid);
+	    if($usersick == "wedding")
+	      DB_set_party_by_hash($me,"re");
+	    else
+	      DB_set_party_by_hash($me,"contra");
+
+	    echo "Whoever will make the first trick will be on the re team. <br />\n";
+	    echo " Ok, the game can start now, please finish <a href=\"$INDEX?me=$me\">the setup</a>.<br />";
+	    DB_set_hand_status_by_hash($me,'play');
+	    break;
+
+	  case "normal":
+	    $hand = DB_get_all_hand($me);
+
+	    if(in_array('3',$hand)||in_array('4',$hand))
+	      DB_set_party_by_hash($me,"re");
+	    else
+	      DB_set_party_by_hash($me,"contra");
+	    DB_set_hand_status_by_hash($me,'play');
+	    break;
+	  case "poverty":
+	  case "dpoverty":
+	    /* check if poverty resolved (e.g. DB.Game who set to NULL)
+	     *   yes? =>trump was taken, start game; break;
+	     */
+	    $who = DB_get_sickness_by_gameid($gameid);
+	    if($who<0)
+	      { /* trump has been taken */
+		DB_set_hand_status_by_hash($me,'play');
+		break;
+	      };
+
+	    if($who>9) /*= two people still have trump on the table*/
+	      $add = 10;
+	    else
+	      $add = 1;
+
+	    /* check if we are being asked now
+	     *    no? display wait message, e.g. player X is asked at the moment
+	     */
+	    $usersick = DB_get_sickness_by_userid_and_gameid($myid,$gameid);
+	    if(myisset("trump") && $_REQUEST["trump"]=="no" && ($who==$mypos || $who==$mypos*10))
+	      {
+		/* user doesn't want to take trump */
+		/* set next player who needs to be asked */
+		$firstsick  = (string) DB_get_sickness_by_pos_and_gameid($mypos+1,$gameid);
+		$secondsick = (string) DB_get_sickness_by_pos_and_gameid($mypos+2,$gameid);
+
+		if($firstsick=="poverty")
+		  {
+		    if($secondsick=="poverty")
+		      DB_set_sickness_by_gameid($gameid,$who+$add*3);
+		    else
+		      DB_set_sickness_by_gameid($gameid,$who+$add*2);
+		  }
+		else
+		  DB_set_sickness_by_gameid($gameid,$who+$add);
+
+		/* email next player */
+		$who = DB_get_sickness_by_gameid($gameid);
+		if($who>9) $who = $who/10;
+
+		if($who<=4)
+		  {
+		    $To       = DB_get_email('position-gameid',$who,$gameid);
+		    $userhash = DB_get_hash_from_game_and_pos($gameid,$who);
+		    $userid   = DB_get_userid('email',$To);
+		    DB_set_player_by_gameid($gameid,$userid);
+
+		    $message = "Someone has poverty, it's your turn to decide, if you want to take the trump. Please visit:".
+		      " ".$HOST.$INDEX."?me=".$userhash."\n\n" ;
+		    mymail($To,$EmailName." poverty (game ".DB_format_gameid($gameid).")",$message);
+		  }
+
+		/* this user is done */
+		DB_set_hand_status_by_hash($me,'play');
+		break;
+	      }
+	    else if(myisset("trump") && !myisset("exchange") && $_REQUEST["trump"]>0 && ($who==$mypos || $who==$mypos*10))
+	      {
+		/* user wants to take trump */
+		$trump = $_REQUEST["trump"];
+
+		/* get hand id for user $trump */
+		$userhand = DB_get_handid('gameid-userid',$gameid,$trump);
+		/* copy trump from player A to B */
+		$result = mysql_query("UPDATE Hand_Card SET hand_id='$myhand' WHERE hand_id='$userhand' AND card_id<'27'" );
+
+		/* add hidden button with trump in it to get to the next point */
+		echo "</div><div class=\"poverty\">\n";
+		echo "  <input type=\"hidden\" name=\"exchange\" value=\"-1\" />\n";
+		echo "  <input type=\"hidden\" name=\"trump\" value=\"".$trump."\" />\n";
+		echo "  <input type=\"submit\" class=\"submitbutton\" value=\"select cards to give back\" />\n";
+		echo "</div><div>\n";
+	      }
+	    else if(myisset("trump","exchange") && $_REQUEST["trump"]>0 && ($who==$mypos || $who==$mypos*10))
+	      {
+		$trump    = $_REQUEST["trump"];
+		$exchange = $_REQUEST["exchange"];
+		$userhand = DB_get_handid('gameid-userid',$gameid,$trump);
+
+		/* if exchange is set to a value>0, exchange that card back to user $trump */
+		if($exchange >0)
+		  {
+		    $result = mysql_query("UPDATE Hand_Card SET hand_id='$userhand'".
+					  " WHERE hand_id='$myhand' AND card_id='$exchange'" );
+		  };
+
+		/* if number of cards == 12, set status to play for both users */
+		$result = mysql_query("SELECT COUNT(*) FROM Hand_Card  WHERE hand_id='$myhand'" );
+		$r      = mysql_fetch_array($result,MYSQL_NUM);
+		if(!$r)
+		  {
+		    myerror("error in poverty");
+		    die();
+		  };
+		if($r[0]==12)
+		  {
+		    if($gametype=="poverty" || $who<9)
+		      {
+			DB_set_sickness_by_gameid($gameid,-1); /* done with poverty */
+		      }
+		    else /* reduce poverty count by one, that is go to single digits $who */
+		      {
+			$add = 1;
+			$who = $who/10;
+
+			/* whom to ask next */
+			$firstsick  = DB_get_sickness_by_pos_and_gameid($mypos+1,$gameid);
+			$secondsick = DB_get_sickness_by_pos_and_gameid($mypos+2,$gameid);
+
+			if($firstsick!="poverty")
+			  DB_set_sickness_by_gameid($gameid,$who+$add);
+			else
+			  {
+			    if($secondsick!="poverty")
+			      DB_set_sickness_by_gameid($gameid,$who+$add*2);
+			    else
+			      DB_set_sickness_by_gameid($gameid,$who+$add*3);
+			  };
+
+			/* email next player */
+			$who = DB_get_sickness_by_gameid($gameid);
+			if($who<=4)
+			  {
+			    $To       = DB_get_email('position-gameid',$who,$gameid);
+			    $userhash = DB_get_hash_from_game_and_pos($gameid,$who);
+			    $userid   = DB_get_userid('email',$To);
+			    DB_set_player_by_gameid($gameid,$userid);
+
+			    $message = "Someone has poverty, it's your turn to decide, ".
+			      "if you want to take the trump. Please visit:".
+			      " ".$HOST.$INDEX."?me=".$userhash."\n\n" ;
+			    mymail($To,$EmailName." poverty (game ".DB_format_gameid($gameid).")",$message);
+			  }
+		      }
+
+		    /* this user is done */
+		    DB_set_hand_status_by_hash($me,'play');
+		    /* and so is his partner */
+		    $hash = DB_get_hash_from_gameid_and_userid($gameid,$trump);
+		    DB_set_hand_status_by_hash($hash,'play');
+
+		    /* set party to re, unless we had dpoverty, in that case check if we need to set re/contra*/
+		    $re_set = 0;
+		    foreach($userids as $user)
+		      {
+			$userhash = DB_get_hash_from_gameid_and_userid($gameid,$user);
+			$party    = DB_get_party_by_hash($userhash);
+			if($party=="re")
+			  $re_set = 1;
+		      }
+		    if($re_set)
+		      {
+			DB_set_party_by_hash($me,"contra");
+			DB_set_party_by_hash($hash,"contra");
+		      }
+		    else
+		      {
+			foreach($userids as $user)
+			  {
+			    $userhash = DB_get_hash_from_gameid_and_userid($gameid,$user);
+			    if($userhash==$hash||$userhash==$me)
+			      DB_set_party_by_hash($userhash,"re");
+			    else
+			      DB_set_party_by_hash($userhash,"contra");
+			  }
+		      }
+
+
+		    break;
+		  }
+		else
+		  {
+		    /* else show all trump, have lowest card pre-selected, have hidden setting for */
+		    echo "</div><div class=\"poverty\"> you need to get rid of a few cards</div>\n";
+
+		    set_gametype($gametype); /* this sets the $CARDS variable */
+		    $mycards = DB_get_hand($me);
+		    $mycards = mysort($mycards,$gametype);
+
+		    $type="exchange";
+		    echo "<div class=\"mycards\">Your cards are: <br />\n";
+		    foreach($mycards as $card)
+		      display_link_card($card,$PREF["cardset"],$type);
+		    echo "  <input type=\"hidden\" name=\"trump\" value=\"".$trump."\" />\n";
+		    echo "  <input type=\"submit\" class=\"submitbutton\" value=\"select one card to give back\" />\n";
+		    echo "</div><div>\n";
+		  }
+	      }
+	    else if($who == $mypos || $who == $mypos*10)
+	      {
+		echo "</div><div class=\"poverty\">\n";
+		foreach($userids as $user)
+		  {
+		    $name     = DB_get_name('userid',$user);
+		    $usersick = DB_get_sickness_by_userid_and_gameid($user,$gameid);
+
+		    if($usersick=="poverty")
+		      {
+			$hash    = DB_get_hash_from_gameid_and_userid($gameid,$user);
+			$cards   = DB_get_hand($hash);
+			$nrtrump = count_trump($cards);
+			/* count trump */
+			if($nrtrump<4)
+			  echo "Player $name has $nrtrump trump. Do you want to take them?".
+			    "<a href=\"index.php?me=$me&amp;trump=$user\">yes</a> <br />\n";
+		      }
+		  }
+		echo "<a href=\"index.php?me=$me&amp;trump=no\">No,way I take those trump...</a> <br />\n";
+		echo "</div><div>\n";
+
+		echo "Your cards are: <br />\n";
+		$mycards = DB_get_hand($me);
+		sort($mycards);
+		echo "<p class=\"mycards\">Your cards are: <br />\n";
+		foreach($mycards as $card)
+		  display_card($card,$PREF["cardset"]);
+		echo "</p>\n";
+	      }
+	    else
+	      {
+		$mysick = DB_get_sickness_by_userid_and_gameid($myid,$gameid);
+		if($mysick=="poverty")
+		  echo "The others are asked if they want to take your trump, you have to wait (you'll get an email).";
+		else
+		  echo "it's not your turn yet to decide if you want to take the trump or not.";
+	      }
+	  };
+	/* check if no one wanted to take trump, in that case the gamesickness would be set to 5 or 50 */
+	$who = DB_get_sickness_by_gameid($gameid);
+	if($who==5 || $who==50)
+	  {
+	    $message = "Hello, \n\n".
+	      "Game ".DB_format_gameid($gameid)." has been canceled since nobody wanted to take the trump.\n";
+
+	    $userids = DB_get_all_userid_by_gameid($gameid);
+	    foreach($userids as $user)
+	      {
+		$To = DB_get_email('userid',$user);
+		mymail($To,$EmailName."game ".DB_format_gameid($gameid)." canceled (poverty not resolved)",$message);
+	      }
+
+	    /* delete everything from the dB */
+	    DB_cancel_game($me);
+
+	    echo "<p style=\"background-color:red\";>Game ".DB_format_gameid($gameid)." has been canceled.<br /><br /></p>";
+	    output_footer();
+	    DB_close();
+	    exit();
+	  }
+
+	/* check if all players are ready to play */
+	$ok = 1;
+	foreach($userids as $user)
+	  if(DB_get_hand_status_by_userid_and_gameid($user,$gameid)!='play')
+	    {
+	      $ok = 0;
+	      DB_set_player_by_gameid($gameid,$user);
+	    }
+
+	if($ok)
+	  {
+	    /* only set this after all poverty, etc. are handled*/
+	    DB_set_game_status_by_gameid($gameid,'play');
+
+	    /* email startplayer */
+	    $startplayer = DB_get_startplayer_by_gameid($gameid);
+	    $email       = DB_get_email('position-gameid',$startplayer,$gameid);
+	    $hash        = DB_get_hash_from_game_and_pos($gameid,$startplayer);
+	    $who         = DB_get_userid('email',$email);
+	    DB_set_player_by_gameid($gameid,$who);
+
+	    if($hash!=$me && DB_get_email_pref_by_hash($hash)!="emailaddict")
+	      {
+		/* email startplayer) */
+		$message = "It's your turn now in game ".DB_format_gameid($gameid).".\n".
+		  "Use this link to play a card: ".$HOST.$INDEX."?me=".$hash."\n\n" ;
+		mymail($email,$EmailName."ready, set, go... (game ".DB_format_gameid($gameid).") ",$message);
+	      }
+	    else
+	      echo " Please, <a href=\"$INDEX?me=$me\">start</a> the game.<br />";
+	  }
+	else
+	  echo "\n <br />";
+      }
+    echo "</div>\n";
+    break;
+  case 'play':
+  case 'gameover':
+    /* both entries here,  so that the tricks are visible for both.
+     * in case of 'play' there is a break later that skips the last part
+     */
+
+    /* figure out what kind of game we are playing,
+     * set the global variables $CARDS["trump"],$CARDS["diamonds"],$CARDS["hearts"],
+     * $CARDS["clubs"],$CARDS["spades"],$CARDS["foxes"]
+     * accordingly
+     */
+
+    $gametype = DB_get_gametype_by_gameid($gameid);
+    $GT       = $gametype;
+    if($gametype=="solo")
+      {
+	$gametype = DB_get_solo_by_gameid($gameid);
+	$GT       = $gametype." ".$GT;
+      }
+    else
+      $gametype = "normal";
+
+    set_gametype($gametype); /* this sets the $CARDS variable */
+
+    /* get some infos about the game */
+    $gamestatus = DB_get_game_status_by_gameid($gameid);
+
+    /* has the game started? No, then just wait here...*/
+    if($gamestatus == 'pre')
+      {
+	echo "<p class=\"message\"> You finished the setup, but not everyone else finished it... ".
+	  "You need to wait for the others. Just wait for an email. </p>";
+	break; /* not sure this works... the idea is that you can
+		* only  play a card after everyone is ready to play */
+      }
+
+    /* get time from the last action of the game */
+    $result  = mysql_query("SELECT mod_date from Game WHERE id='$gameid' " );
+    $r       = mysql_fetch_array($result,MYSQL_NUM);
+    $gameend = time() - strtotime($r[0]);
+
+    /* handel comments in case player didn't play a card, allow comments a week after the end of the game */
+    if( (!myisset("card") && $mystatus=='play') || ($mystatus=='gameover' && ($gameend < 60*60*24*7)) )
+      if(myisset("comment"))
+	{
+	  $comment = $_REQUEST["comment"];
+	  $playid = DB_get_current_playid($gameid);
+
+	  if($comment != "")
+	    DB_insert_comment($comment,$playid,$myid);
+	};
+
+    /* handle notes in case player didn't play a card, allow notes only during a game */
+    if( (!myisset("card") && $mystatus=='play')  )
+      if(myisset("note"))
+	{
+	  $note = $_REQUEST["note"];
+
+	  if($note != "")
+	    DB_insert_note($note,$gameid,$myid);
+	};
+
+    /* get everything relevant to display the tricks */
+    $result = mysql_query("SELECT Hand_Card.card_id as card,".
+			  "       Hand.position as position,".
+			  "       Play.sequence as sequence, ".
+			  "       Trick.id, ".
+			  "       GROUP_CONCAT(CONCAT('<span>',User.fullname,': ',Comment.comment,'</span>')".
+			  "                    SEPARATOR '\n' ), ".
+			  "       Play.create_date, ".
+			  "       Hand.user_id ".
+			  "FROM Trick ".
+			  "LEFT JOIN Play ON Trick.id=Play.trick_id ".
+			  "LEFT JOIN Hand_Card ON Play.hand_card_id=Hand_Card.id ".
+			  "LEFT JOIN Hand ON Hand_Card.hand_id=Hand.id ".
+			  "LEFT JOIN Comment ON Play.id=Comment.play_id ".
+			  "LEFT JOIN User On User.id=Comment.user_id ".
+			  "WHERE Trick.game_id='".$gameid."' ".
+			  "GROUP BY Trick.id, sequence ".
+			  "ORDER BY Trick.id, sequence  ASC");
+    $trickNR   = 1;
+    $lasttrick = DB_get_max_trickid($gameid);
+
+    $play = array(); /* needed to calculate winner later  */
+    $seq  = 1;
+    $pos  = DB_get_startplayer_by_gameid($gameid)-1;
+    $firstcard = ""; /* first card in a trick */
+
+    echo "\n<ul class=\"tricks\">\n";
+    echo "  <li class=\"nohighlight\"> Game ".DB_format_gameid($gameid).": </li>\n";
+
+    /* output vorbehalte */
+    $mygametype =  DB_get_gametype_by_gameid($gameid);
+    if($mygametype != "normal") /* only show when needed */
+      {
+	echo "  <li onclick=\"hl('0');\" class=\"current\"><a href=\"#\">Pre</a>\n".
+	  "    <div class=\"trick\" id=\"trick0\">\n";
+	$show = 1;
+	for($mypos=1;$mypos<5;$mypos++)
+	  {
+	    $usersick = DB_get_sickness_by_pos_and_gameid($mypos,$gameid);
+	    if($usersick!=NULL)
+	      {
+		echo "      <div class=\"vorbehalt".($mypos-1)."\"> Vorbehalt <br />";
+		if($show)
+		  echo " $usersick <br />";
+		echo  " </div>\n";
+
+		if($mygametype == $usersick)
+		  $show = 0;
+	      }
+	  }
+	echo "    </div>\n  </li>\n";  /* end div trick, end li trick */
+      }
+
+    /* output tricks */
+    while($r = mysql_fetch_array($result,MYSQL_NUM))
+      {
+	$pos     = $r[1];
+	$seq     = $r[2];
+	$trick   = $r[3];
+	$comment = $r[4];
+	$user    = $r[6];
+
+	/* check if first schweinchen has been played */
+	if( $GAME["schweinchen"] && ($r[0] == 19 || $r[0] == 20) )
+	  $GAME["schweinchen"]++;
+
+	/* save card to be able to find the winner of the trick later */
+	$play[$seq] = array("card"=>$r[0],"pos"=>$pos);
+
+	if($seq==1)
+	  {
+	    /* first card in a trick, output some html */
+	    if($trick!=$lasttrick)
+	      {
+		/* start of an old trick? */
+		echo "  <li onclick=\"hl('$trickNR');\" class=\"old\"><a href=\"#\">Trick $trickNR</a>\n".
+		  "    <div class=\"trick\" id=\"trick".$trickNR."\">\n".
+		  "      <img class=\"arrow\" src=\"pics/arrow".($pos-1).".png\" alt=\"table\" />\n";
+	      }
+	    else if($trick==$lasttrick)
+	      {
+		/* start of a last trick? */
+		echo "  <li onclick=\"hl('$trickNR');\" class=\"current\"><a href=\"#\">Trick $trickNR</a>\n".
+		  "    <div class=\"trick\" id=\"trick".$trickNR."\">\n".
+		  "      <img class=\"arrow\" src=\"pics/arrow".($pos-1).".png\" alt=\"table\" />\n";
+	      };
+
+	    /* remember first card, so that we are able to check, what cards can be played */
+	    $firstcard = $r[0];
+	  };
+
+	/* display card */
+	echo "      <div class=\"card".($pos-1)."\">\n";
+
+	/* display comments */
+	if($comment!="")
+	  echo "        <span class=\"comment\">".$comment."</span>\n";
+
+	echo "        ";
+	display_card($r[0],$PREF["cardset"]);
+
+	echo "      </div>\n"; /* end div card */
+
+	/* end of trick? */
+	if($seq==4)
+	  {
+	    $trickNR++;
+	    echo "    </div>\n  </li>\n";  /* end div trick, end li trick */
+	  }
+      }
+
+    /* whos turn is it? */
+    if($seq==4)
+      {
+	$winner    = get_winner($play,$gametype); /* returns the position */
+	$next      = $winner;
+	$firstcard = ""; /* new trick, no first card */
+      }
+    else
+      {
+	$next = $pos+1;
+	if($next==5) $next = 1;
+      }
+
+    /* my turn?, display cards as links, ask for comments*/
+    if(DB_get_pos_by_hash($me) == $next)
+      $myturn = 1;
+    else
+      $myturn = 0;
+
+    /* do we want to play a card? */
+    if(myisset("card") && $myturn)
+      {
+	$card   = $_REQUEST["card"];
+	$handid = DB_get_handid('hash',$me);
+
+	/* check if we have card and that we haven't played it yet*/
+	/* set played in hand_card to true where hand_id and card_id*/
+	$result = mysql_query("SELECT id FROM Hand_Card WHERE played='false' and ".
+			      "hand_id='$handid' AND card_id=".DB_quote_smart($card));
+	$r = mysql_fetch_array($result,MYSQL_NUM);
+	$handcardid = $r[0];
+
+	if($handcardid) /* everything ok, play card  */
+	  {
+	    /* update Game timestamp */
+	    DB_update_game_timestamp($gameid);
+
+	    /* check if a call was made, must do this before we set the card status to played */
+	    if(myisset("call")  && $_REQUEST["call"]  == "120" && can_call(120,$me))
+	      $result = mysql_query("UPDATE Hand SET point_call='120' WHERE hash='$me' ");
+	    if(myisset("call")  && $_REQUEST["call"]  == "90" && can_call(90,$me))
+	      $result = mysql_query("UPDATE Hand SET point_call='90'  WHERE hash='$me' ");
+	    if(myisset("call")  && $_REQUEST["call"]  == "60" && can_call(60,$me))
+	      $result = mysql_query("UPDATE Hand SET point_call='60'  WHERE hash='$me' ");
+	    if(myisset("call")  && $_REQUEST["call"]  == "30" && can_call(30,$me))
+	      $result = mysql_query("UPDATE Hand SET point_call='30'  WHERE hash='$me' ");
+	    if(myisset("call")  && $_REQUEST["call"]  == "0" && can_call(0,$me))
+	      $result = mysql_query("UPDATE Hand SET point_call='0'   WHERE hash='$me' ");
+
+	    /* mark card as played */
+	    mysql_query("UPDATE Hand_Card SET played='true' WHERE hand_id='$handid' AND card_id=".
+			DB_quote_smart($card));
+
+	    /* get trick id or start new trick */
+	    $a = DB_get_current_trickid($gameid);
+	    $trickid  = $a[0];
+	    $sequence = $a[1];
+	    $tricknr  = $a[2];
+
+	    $playid = DB_play_card($trickid,$handcardid,$sequence);
+
+	    /* check special output for schweinchen in case: 
+	     * schweinchen is in the rules, a fox has been played and the gametype is correct
+	     */
+	    if( $GAME["schweinchen"] && 
+		($card == 19 || $card == 20) && 
+		($gametype == "normal" || $gametype == "silent"|| $gametype=="trump"))
+	      {
+		$GAME["schweinchen"]++; // count how many have been played including this one
+		if($GAME["schweinchen"]==3 && $RULES["schweinchen"]=="second" )
+		  DB_insert_comment("Schweinchen! ",$playid,$myid);
+		if($RULES["schweinchen"]=="both" )
+		  DB_insert_comment("Schweinchen! ",$playid,$myid);
+		if ($debug)
+		  echo "schweinchen = ".$GAME["schweinchen"]." ---<br />";
+	      }
+
+	    /* if sequence == 4 check who one in case of wedding */
+	    if($sequence == 4 && $GT == "wedding")
+	      {
+		/* is wedding resolve */
+		$resolved = DB_get_sickness_by_gameid($gameid);
+		if($resolved<0)
+		  {
+		    /* who has wedding */
+		    $userids = DB_get_all_userid_by_gameid($gameid);
+		    foreach($userids as $user)
+		      {
+			$usersick = DB_get_sickness_by_userid_and_gameid($user,$gameid);
+			if($usersick == "wedding")
+			  $whosick = $user;
+		      }
+		    /* who won the trick */
+		    $play     = DB_get_cards_by_trick($trickid);
+		    $winner   = get_winner($play,$gametype); /* returns the position */
+		    $winnerid = DB_get_userid('gameid-position',$gameid,$winner);
+		    /* is tricknr <=3 */
+		    if($tricknr <=3 && $winnerid!=$whosick)
+		      {
+			/* set resolved at tricknr*/
+			$resolved = DB_set_sickness_by_gameid($gameid,$tricknr);
+			/* set partner */
+			$whash = DB_get_hash_from_gameid_and_userid($gameid,$winnerid);
+			DB_set_party_by_hash($whash,"re");
+		      }
+		    if($tricknr == 3 && $winnerid==$whosick)
+		      {
+			/* set resolved at tricknr*/
+			$resolved = DB_set_sickness_by_gameid($gameid,'3');
+		      }
+		  }
+	      }
+
+	    /* if sequence == 4, set winner of the trick, count points and set the next player */
+	    if($sequence==4)
+	      {
+		$play   = DB_get_cards_by_trick($trickid);
+		$winner = get_winner($play,$gametype); /* returns the position */
+
+		/* check if someone caught a fox */
+		/* first check if we should account for solos at all, 
+		 * since it doesn't make sense in some games
+		 */
+		$ok = 0; /* fox shouldn't be counted */
+		if(DB_get_gametype_by_gameid($gameid)=="solo")
+		  {
+		    $solo = DB_get_solo_by_gameid($gameid);
+		    if($solo == "trump" || $solo == "silent")
+		      $ok = 1; /* for trump solos and silent solos, foxes are ok */
+		  }
+		else
+		  $ok = 1; /* for all other games (not solos) foxes are ok too */
+		  
+		if($ok==1)
+		  foreach($play as $played)
+		    {
+		      if ( $played['card']==19 || $played['card']==20 )
+			if ($played['pos']!= $winner )
+			  {
+			    /* possible caught a fox, check party */
+			    $uid1 = DB_get_userid('gameid-position',$gameid,$winner);
+			    $uid2 = DB_get_userid('gameid-position',$gameid,$played['pos']);
+
+			    $party1 = DB_get_party_by_gameid_and_userid($gameid,$uid1);
+			    $party2 = DB_get_party_by_gameid_and_userid($gameid,$uid2);
+
+			    if($party1 != $party2)
+			      mysql_query("INSERT INTO Score".
+					  " VALUES( NULL,NULL,$gameid,'$party1',$uid1,$uid2,'fox')");
+			  }
+		    }
+		  
+		/* check for karlchen (jack of clubs in the last trick)*/
+		/* same as for foxes, karlchen doesn't always make sense
+		 * check what kind of game it is and set karlchen accordingly */
+		$ok = 1; /* default: karlchen should be accounted for */
+		if($tricknr != 12 )
+		  $ok = 0; /* Karlchen works only in the last trick */
+		if($ok && DB_get_gametype_by_gameid($gameid)=="solo" )
+		  {
+		    $solo = DB_get_solo_by_gameid($gameid);
+		    if($solo == "trumpless" || $solo == "jack" || $solo == "queen" )
+		      $ok = 0; /* no Karlchen in these solos */
+		  }
+		  
+		if($ok)
+		  foreach($play as $played)
+		    if ( $played['card']==11 || $played['card']==12 )
+		      if ($played['pos'] == $winner )
+			{
+			  /* possible caught a fox, check party */
+			  $uid1   = DB_get_userid('gameid-position',$gameid,$winner);
+			  $party1 = DB_get_party_by_gameid_and_userid($gameid,$uid1);
+
+			  mysql_query("INSERT INTO Score".
+				      " VALUES( NULL,NULL,$gameid,'$party1',$uid1,NULL,'karlchen')");
+			}
+		/* check for doppelopf (>40 points)*/
+		$points = 0;
+		foreach($play as $played)
+		  {
+		    $points += DB_get_card_value_by_cardid($played['card']);
+		  }
+		if($points > 39)
+		  {
+		    $uid1   = DB_get_userid('gameid-position',$gameid,$winner);
+		    $party1 = DB_get_party_by_gameid_and_userid($gameid,$uid1);
+
+		    mysql_query("INSERT INTO Score".
+				" VALUES( NULL,NULL,$gameid,'$party1',$uid1,NULL,'doko')");
+		  }
+
+		if($winner>0)
+		  mysql_query("UPDATE Trick SET winner='$winner' WHERE id='$trickid'");
+		else
+		  echo "ERROR during scoring";
+
+		if($debug)
+		  echo "DEBUG: position $winner won the trick <br />";
+
+		/* who is the next player? */
+		$next = $winner;
+	      }
+	    else
+	      {
+		$next = DB_get_pos_by_hash($me)+1;
+	      }
+	    if($next==5) $next=1;
+
+	    /* check for coment */
+	    if(myisset("comment"))
+	      {
+		$comment = $_REQUEST["comment"];
+		if($comment != "")
+		  DB_insert_comment($comment,$playid,$myid);
+	      };
+
+	    /* check for note */
+	    if(myisset("note"))
+	      {
+		$note = $_REQUEST["note"];
+		if($note != "")
+		  DB_insert_note($note,$gameid,$myid);
+	      };
+
+	    /* display played card */
+	    $pos = DB_get_pos_by_hash($me);
+	    if($sequence==1)
+	      {
+		echo "  <li onclick=\"hl('".($tricknr)."');\" class=\"current\"><a href=\"#\">Trick ".($tricknr)."</a>\n".
+		  "    <div class=\"trick\" id=\"trick".($tricknr)."\">\n".
+		  "      <img class=\"arrow\" src=\"pics/arrow".($pos-1).".png\" alt=\"table\" />\n";
+	      }
+
+	    echo "      <div class=\"card".($pos-1)."\">\n        ";
+
+	    /* display comments */
+	    display_card($card,$PREF["cardset"]);
+	    if($comment!="")
+	      echo "\n        <span class=\"comment\"> ".$comment."</span>\n";
+	    echo "      </div>\n";
+
+	    /*check if we still have cards left, else set status to gameover */
+	    if(sizeof(DB_get_hand($me))==0)
+	      {
+		DB_set_hand_status_by_hash($me,'gameover');
+		$mystatus = 'gameover';
+	      }
+
+	    /* if all players are done, set game status to game over,
+	     * get the points of the last trick and send out an email
+	     * to all players
+	     */
+	    $userids = DB_get_all_userid_by_gameid($gameid);
+
+	    $done=1;
+	    foreach($userids as $user)
+	      if(DB_get_hand_status_by_userid_and_gameid($user,$gameid)!='gameover')
+		$done=0;
+
+	    if($done)
+	      DB_set_game_status_by_gameid($gameid,"gameover");
+
+	    /* email next player, if game is still running */
+	    if(DB_get_game_status_by_gameid($gameid)=='play')
+	      {
+		$next_hash = DB_get_hash_from_game_and_pos($gameid,$next);
+		$email     = DB_get_email('hash',$next_hash);
+		$who       = DB_get_userid('email',$email);
+		DB_set_player_by_gameid($gameid,$who);
+
+		$message = "A card has been played in game ".DB_format_gameid($gameid).".\n\n".
+		  "It's your turn  now.\n".
+		  "Use this link to play a card: ".$HOST.$INDEX."?me=".$next_hash."\n\n" ;
+		if( DB_get_email_pref_by_uid($who)!="emailaddict" )
+		  mymail($email,$EmailName."a card has been played in game ".DB_format_gameid($gameid),$message);
+	      }
+	    else /* send out final email */
+	      {
+		/* individual score */
+		$result = mysql_query("SELECT User.fullname, IFNULL(SUM(Card.points),0), Hand.party FROM Hand".
+				      " LEFT JOIN Trick ON Trick.winner=Hand.position AND Trick.game_id=Hand.game_id".
+				      " LEFT JOIN User ON User.id=Hand.user_id".
+				      " LEFT JOIN Play ON Trick.id=Play.trick_id".
+				      " LEFT JOIN Hand_Card ON Hand_Card.id=Play.hand_card_id".
+				      " LEFT JOIN Card ON Card.id=Hand_Card.card_id".
+				      " WHERE Hand.game_id='$gameid'".
+				      " GROUP BY User.fullname" );
+		$message  = "The game is over. Thanks for playing :)\n";
+		$message .= "Final score:\n";
+		while( $r = mysql_fetch_array($result,MYSQL_NUM))
+		  $message .= "   ".$r[0]."(".$r[2].") ".$r[1]."\n";
+
+		$result = mysql_query("SELECT  Hand.party, IFNULL(SUM(Card.points),0) FROM Hand".
+				      " LEFT JOIN Trick ON Trick.winner=Hand.position AND Trick.game_id=Hand.game_id".
+				      " LEFT JOIN User ON User.id=Hand.user_id".
+				      " LEFT JOIN Play ON Trick.id=Play.trick_id".
+				      " LEFT JOIN Hand_Card ON Hand_Card.id=Play.hand_card_id".
+				      " LEFT JOIN Card ON Card.id=Hand_Card.card_id".
+				      " WHERE Hand.game_id='$gameid'".
+				      " GROUP BY Hand.party" );
+		$message .= "\nTotals:\n";
+		$re     = 0;
+		$contra = 0;
+		while( $r = mysql_fetch_array($result,MYSQL_NUM))
+		  {
+		    $message .= "    ".$r[0]." ".$r[1]."\n";
+		    if($r[0] == "re")
+		      $re = $r[1];
+		    else if($r[0] == "contra")
+		      $contra = $r[1];
+		  }
+
+		/*
+		 * save score in database
+		 *
+		 */
+
+		/* get calls from re/contra */
+		$call_re     = NULL;
+		$call_contra = NULL;
+		foreach($userids as $user)
+		  {
+		    $hash  = DB_get_hash_from_gameid_and_userid($gameid,$user);
+		    $call  = DB_get_call_by_hash($hash);
+		    $party = DB_get_party_by_hash($hash);
+
+		    if($call!=NULL)
+		      {
+			$call = (int) $call;
+
+			if($party=="re")
+			  {
+			    if($call_re==NULL)
+			      $call_re = $call;
+			    else if( $call < $call_re)
+			      $call_re = $call;
+			  }
+			else if($party=="contra")
+			  {
+			    if($call_contra==NULL)
+			      $call_contra = $call;
+			    else if( $call < $call_re)
+			      $call_contra = $call;
+			  }
+		      }
+		  }
+
+		/* figure out who one */
+		$winning_party = NULL;
+
+		if($call_re == NULL && $call_contra==NULL)
+		  if($re>120)
+		    $winning_party="re";
+		  else
+		    $winning_party="contra";
+		else
+		  {
+		    if($call_re)
+		      {
+			$offset = 120 - $call_re;
+			if($call_re == 0)
+			  $offset--; /* since we use a > in the next equation */
+
+			if($re > 120+$offset)
+			  $winning_party="re";
+			else if ( $call_contra == NULL )
+			  $winning_party="contra";
+		      }
+
+		    if($call_contra)
+		      {
+			$offset = 120 - $call_contra;
+			if($call_contra == 0)
+			  $offset--; /* since we use a > in the next equation */
+
+			if($contra > 120+$offset)
+			  $winning_party="contra";
+			else if ( $call_contra == NULL )
+			  $winning_party="re";
+		      }
+		  }
+
+		/* one point for each call of the other party in case the other party didn't win
+		 * and one point each in case the party made more than points than one of the calls
+		 */
+		if($winning_party!="contra" && $call_contra!=NULL)
+		  {
+		    for( $p=$call_contra;$p<=120; $p+=30 )
+		      {
+			  mysql_query("INSERT INTO Score".
+				      " VALUES( NULL,NULL,$gameid,'re',NULL,NULL,'against$p')");
+			}
+
+		      for( $p=$call_contra; $p<120; $p+=30)
+			{
+			  if( $re >= $p )
+			    mysql_query("INSERT INTO Score".
+					" VALUES( NULL,NULL,$gameid,'re',NULL,NULL,'made$p')");
+			}
+		    }
+		  if($winning_party!="re" and $call_re!=NULL)
+		    {
+		      for( $p=$call_re;$p<=120; $p+=30 )
+			{
+			  mysql_query("INSERT INTO Score".
+				      " VALUES( NULL,NULL,$gameid,'contra',NULL,NULL,'against$p')");
+			}
+
+		      for( $p=$call_re; $p<120; $p+=30)
+			{
+			  if( $contra>=$p )
+			    mysql_query("INSERT INTO Score".
+					" VALUES( NULL,NULL,$gameid,'contra',NULL,NULL,'made$p')");
+			}
+		    }
+
+		  /* point in case contra won */
+		  if($winning_party=="contra")
+		    {
+		      mysql_query("INSERT INTO Score".
+				  " VALUES( NULL,NULL,$gameid,'contra',NULL,NULL,'againstqueens')");
+		    }
+
+		  /* one point each for winning and each 30 points + calls */
+		  if($winning_party=="re")
+		    {
+		      foreach(array(120,150,180,210,240) as $p)
+			{
+			  $offset = 0;
+			  if($p==240 || $call_contra!=NULL)
+			    $offset = 1;
+
+			  if($re>$p-$offset)
+			    mysql_query("INSERT INTO Score".
+					" VALUES( NULL,NULL,$gameid,'re',NULL,NULL,'".(240-$p)."')");
+			}
+		      /* re called something and won */
+		      foreach(array(0,30,60,90,120) as $p)
+			{
+			  if($call_re!=NULL && $call_re<$p+1)
+			    mysql_query("INSERT INTO Score".
+					" VALUES( NULL,NULL,$gameid,'re',NULL,NULL,'call$p')");
+			}
+		    }
+		  else if( $winning_party=="contra")
+		    {
+		      foreach(array(120,150,180,210,240) as $p)
+			{
+			  $offset = 0;
+			  if($p==240 || $call_re!=NULL)
+			    $offset = 1;
+
+			  if($contra>$p-$offset)
+			    mysql_query("INSERT INTO Score".
+					" VALUES( NULL,NULL,$gameid,'contra',NULL,NULL,'".(240-$p)."')");
+			}
+		      /* re called something and won */
+		      foreach(array(0,30,60,90,120) as $p)
+			{
+			  if($call_contra!=NULL && $call_contra<$p+1)
+			    mysql_query("INSERT INTO Score".
+					" VALUES( NULL,NULL,$gameid,'contra',NULL,NULL,'call$p')");
+			}
+		    }
+
+
+		  /* add score points to email */
+		  $message .= "\n";
+		  $Tpoint = 0;
+		  $message .= " Points Re: \n";
+		  $queryresult = mysql_query("SELECT score FROM Score ".
+					     "  WHERE game_id=$gameid AND party='re'".
+					     " ");
+		  while($r = mysql_fetch_array($queryresult,MYSQL_NUM) )
+		    {
+		      $message .= "   ".$r[0]."\n";
+		      $Tpoint ++;
+		    }
+		  $message .= " Points Contra: \n";
+		  $queryresult = mysql_query("SELECT score FROM Score ".
+					     "  WHERE game_id=$gameid AND party='contra'".
+					     " ");
+		  while($r = mysql_fetch_array($queryresult,MYSQL_NUM) )
+		    {
+		      $message .= "   ".$r[0]."\n";
+		      $Tpoint --;
+		    }
+		  $message .= " Total Points (from the Re point of view): $Tpoint\n";
+		  $message .= "\n";
+
+		  $session = DB_get_session_by_gameid($gameid);
+		  $score = generate_score_table($session);
+		  /* convert html to ascii */
+		  $score = str_replace("<div class=\"scoretable\">\n<table class=\"score\">\n <tr>\n","",$score);
+		  $score = str_replace("</table></div>\n","",$score);
+		  $score = str_replace("\n","",$score);
+		  $score = str_replace(array("<tr>","</tr>","<td>","</td>"),array("","\n","","|"),$score);
+		  $score = explode("\n",$score);
+
+		  $header = array_slice($score,0,1);
+		  $header = explode("|",$header[0]);
+		  for($i=0;$i<sizeof($header);$i++)
+		    $header[$i]=str_pad($header[$i],6," ",STR_PAD_BOTH);
+		  $header = implode("|",$header);
+		  $header.= "\n------+------+------+------+------+\n";
+		  if(sizeof($score)>5) $header.=   "                ...   \n";
+
+		  if(sizeof($score)>5) $score = array_slice($score,-5,5);
+		  for($i=0;$i<sizeof($score);$i++)
+		    {
+		      $line = explode("|",$score[$i]);
+		      for($j=0;$j<sizeof($line);$j++)
+			$line[$j]=str_pad($line[$j],6," ",STR_PAD_LEFT);
+		      $score[$i] = implode("|",$line);
+		    }
+
+		  $score = implode("\n",$score);
+		  $score = $header.$score;
+		  
+		  $message .= "Score Table:\n";
+		  $message .= $score;
+
+		  /* send out final email */
+		  $all = array();
+
+		  foreach($userids as $user)
+		    $all[] = DB_get_email('userid',$user);
+		  $To = implode(",",$all);
+
+		  $help = "\n\n (you can use reply all on this email to reach all the players.)\n";
+		  mymail($To,$EmailName."game over (game ".DB_format_gameid($gameid).") part 1(2)",$message.$help);
+
+		  foreach($userids as $user)
+		    {
+		      $To   = DB_get_email('userid',$user);
+		      $hash = DB_get_hash_from_gameid_and_userid($gameid,$user);
+
+		      $link = "Use this link to have a look at game ".DB_format_gameid($gameid).": ".
+			$HOST.$INDEX."?me=".$hash."\n\n" ;
+		      if( DB_get_email_pref_by_uid($user) != "emailaddict" )
+			mymail($To,$EmailName."game over (game ".DB_format_gameid($gameid).") part 2(2)",$link);
+		    }
+		}
+	    }
+	  else
+	    {
+	      echo "can't find that card?! <br />\n";
+	    }
+	}
+      else if(myisset("card") && !$myturn )
+	{
+	  echo "please wait until it's your turn! <br />\n";
+	}
+
+      if($seq!=4 && $trickNR>1)
+	echo "    </div>\n  </li>\n";  /* end div trick, end li trick */
+
+      /* display points in case game is over */
+      if($mystatus=='gameover' && DB_get_game_status_by_gameid($gameid)=='gameover' )
+	{
+	  echo "  <li onclick=\"hl('13');\" class=\"current\"><a href=\"#\">Score</a>\n".
+	    "    <div class=\"trick\" id=\"trick13\">\n";
+	  /* add pic for re/contra
+	   "      <img class=\"arrow\" src=\"pics/arrow".($pos-1).".png\" alt=\"table\" />\n";*/
+
+	  $result = mysql_query("SELECT User.fullname, IFNULL(SUM(Card.points),0), Hand.party,Hand.position FROM Hand".
+				" LEFT JOIN Trick ON Trick.winner=Hand.position AND Trick.game_id=Hand.game_id".
+				" LEFT JOIN User ON User.id=Hand.user_id".
+				" LEFT JOIN Play ON Trick.id=Play.trick_id".
+				" LEFT JOIN Hand_Card ON Hand_Card.id=Play.hand_card_id".
+				" LEFT JOIN Card ON Card.id=Hand_Card.card_id".
+				" WHERE Hand.game_id='$gameid'".
+				" GROUP BY User.fullname" );
+	  while( $r = mysql_fetch_array($result,MYSQL_NUM))
+	    echo "      <div class=\"card".($r[3]-1)."\">\n".
+	         "        <div class=\"score\">".$r[2]."<br /> ".$r[1]."</div>\n".
+	         "      </div>\n";
+
+	  echo "    </div>\n  </li>\n";  /* end div trick, end li trick */
+	}
+
+
+      echo "</ul>\n"; /* end ul tricks*/
+
+      echo "<div class=\"notes\"> Personal notes: <br />\n";
+      $notes = DB_get_notes_by_userid_and_gameid($myid,$gameid);
+      foreach($notes as $note)
+	echo "$note <hr \>\n";
+      echo "Insert note:<input name=\"note\" type=\"text\" size=\"15\" maxlength=\"100\" />\n";
+      echo "</div> \n";
+      
+      $mycards = DB_get_hand($me);
+      $mycards = mysort($mycards,$gametype);
+      echo "<div class=\"mycards\">\n";
+
+      if($myturn && !myisset("card") && $mystatus=='play' )
+	{
+	  echo "Hello ".$myname.", it's your turn!  <br />\n";
+	  echo "Your cards are: <br />\n";
+
+	  /* do we have to follow suite? */
+	  $followsuit = 0;
+	  if(have_suit($mycards,$firstcard))
+	    $followsuit = 1;
+
+	  foreach($mycards as $card)
+	    {
+	      if($followsuit && !same_type($card,$firstcard))
+		display_card($card,$PREF["cardset"]);
+	      else
+		display_link_card($card,$PREF["cardset"]);
+	    }
+	}
+      else if($mystatus=='play' )
+	{
+	  echo "Your cards are: <br />\n";
+	  foreach($mycards as $card)
+	    display_card($card,$PREF["cardset"]);
+	}
+      else if($mystatus=='gameover')
+	{
+	  $oldcards = DB_get_all_hand($me);
+	  $oldcards = mysort($oldcards,$gametype);
+	  echo "Your cards were: <br />\n";
+	  foreach($oldcards as $card)
+	    display_card($card,$PREF["cardset"]);
+
+	  $userids = DB_get_all_userid_by_gameid($gameid);
+          foreach($userids as $user)
+            {
+              $userhash = DB_get_hash_from_gameid_and_userid($gameid,$user);
+
+              if($userhash!=$me)
+                {
+                  echo "<br />";
+
+                  $name = DB_get_name('userid',$user);
+                  $oldcards = DB_get_all_hand($userhash);
+                  $oldcards = mysort($oldcards,$gametype);
+                  echo "$name's cards were: <br />\n";
+                  foreach($oldcards as $card)
+                    display_card($card,$PREF["cardset"]);
+                }
+            };
+	}
+      echo "</div>\n";
+
+      /* if the game is over do some extra stuff, therefore exit the swtich statement if we are still playing*/
+      if($mystatus=='play')
+	break;
+
+      /* the following happens only when the gamestatus is 'gameover' */
+      /* check if game is over, display results */
+      if(DB_get_game_status_by_gameid($gameid)=='play')
+	{
+	  echo "The game is over for you.. other people still need to play though";
+	}
+      else
+	{
+	  $result = mysql_query("SELECT Hand.party, IFNULL(SUM(Card.points),0) FROM Hand".
+				" LEFT JOIN Trick ON Trick.winner=Hand.position AND Trick.game_id=Hand.game_id".
+				" LEFT JOIN User ON User.id=Hand.user_id".
+				" LEFT JOIN Play ON Trick.id=Play.trick_id".
+				" LEFT JOIN Hand_Card ON Hand_Card.id=Play.hand_card_id".
+				" LEFT JOIN Card ON Card.id=Hand_Card.card_id".
+				" WHERE Hand.game_id='$gameid'".
+				" GROUP BY Hand.party" );
+	  echo "<div class=\"total\"> Totals:<br />\n";
+	  while( $r = mysql_fetch_array($result,MYSQL_NUM))
+	    echo "  ".$r[0]." ".$r[1]."<br />\n";
+
+	  $queryresult = mysql_query("SELECT timediff(mod_date,create_date) ".
+				     " FROM Game WHERE id='$gameid'");
+	  $r = mysql_fetch_array($queryresult,MYSQL_NUM);
+	  echo "<p>This game took ".$r[0]." hours.</p>";
+
+	  echo "<div class=\"re\">\n Points Re: <br />\n";
+	  $queryresult = mysql_query("SELECT score FROM Score ".
+				     "  WHERE game_id=$gameid AND party='re'".
+				     " ");
+	  while($r = mysql_fetch_array($queryresult,MYSQL_NUM) )
+	    echo "   ".$r[0]."<br />\n";
+	  echo "</div>\n";
+
+	  echo "<div class=\"contra\">\n Points Contra: <br />\n";
+	  $queryresult = mysql_query("SELECT score FROM Score ".
+				     "  WHERE game_id=$gameid AND party='contra'".
+				     " ");
+	  while($r = mysql_fetch_array($queryresult,MYSQL_NUM) )
+	    echo "   ".$r[0]."<br />\n";
+	  echo "</div>\n";
+
+	  echo "</div>\n";
+
+
+	}
+      break;
+    default:
+      myerror("error in testing the status");
+    }
+    /* output left menu */
+    display_user_menu();
+
+    /* output right menu */
+
+      /* display rule set for this game */
+    echo "<div class=\"gameinfo\">\n";
+
+    if($gamestatus != 'pre')
+      echo " Gametype: $GT <br />\n";
+
+    echo "Rules: <br />\n";
+    echo "10ofhearts : ".$RULES["dullen"]      ."<br />\n";
+    echo "schweinchen: ".$RULES["schweinchen"] ."<br />\n";
+    echo "call:        ".$RULES["call"]        ."<br />\n";
+
+    echo "<hr />\n";
+    if($gamestatus == 'play' )
+      output_form_calls($me);
+
+    /* get time from the last action of the game */
+    $result  = mysql_query("SELECT mod_date from Game WHERE id='$gameid' " );
+    $r       = mysql_fetch_array($result,MYSQL_NUM);
+    $gameend = time() - strtotime($r[0]);
+
+    if($gamestatus == 'play' || $gameend < 60*60*24*7)
+      {
+	echo "<br />\nA short comment:<input name=\"comment\" type=\"text\" size=\"15\" maxlength=\"100\" />\n";
+	echo "<hr />";
+      }
+
+    echo "<input type=\"submit\" value=\"submit\" />\n";
+
+
+    if($mystatus=='gameover' && DB_get_game_status_by_gameid($gameid)=='gameover' )
+      {
+	echo "<hr />\n";
+
+	$session = DB_get_session_by_gameid($gameid);
+	$result  = mysql_query("SELECT id,create_date FROM Game".
+			       " WHERE session=$session".
+			       " ORDER BY create_date DESC".
+			       " LIMIT 1");
+	$r = -1;
+	if($result)
+	  $r = mysql_fetch_array($result,MYSQL_NUM);
+
+	if(!$session || $gameid==$r[0])
+	  {
+	    /* suggest a new game with the same people in it, just rotated once (unless last game was solo) */
+	    $names = DB_get_all_names_by_gameid($gameid);
+	    $type  = DB_get_gametype_by_gameid($gameid);
+
+	    if($type=="solo")
+	      output_ask_for_new_game($names[0],$names[1],$names[2],$names[3],$gameid);
+	    else
+	      output_ask_for_new_game($names[1],$names[2],$names[3],$names[0],$gameid);
+	  }
+      }
+
+    $session = DB_get_session_by_gameid($gameid);
+    $score = generate_score_table($session);
+
+    //  if(size_of($score)>30)
+      echo $score;
+
+    echo "</div>\n";
+
+    echo "</form>\n";
+    output_footer();
+    DB_close();
+    exit();
+?>
\ No newline at end of file
diff --git a/include/logout.php b/include/logout.php
new file mode 100644
index 0000000..d74f091
--- /dev/null
+++ b/include/logout.php
@@ -0,0 +1,15 @@
+<?php
+/* make sure that we are not called from outside the scripts, 
+ * use a variable defined in config.php to check this
+ */
+if(!isset($HOST))
+  exit;
+
+/* distroy the session */
+session_unset();
+session_destroy();
+$_SESSION = array();
+    
+echo "<div class=\"message\"><span class=\"bigger\">You are now logged out!</span><br />\n".
+"(<a href=\"$INDEX\">This will take you back to the home-page</a>)</div>";
+?>
\ No newline at end of file
diff --git a/include/newgame.php b/include/newgame.php
new file mode 100644
index 0000000..5764568
--- /dev/null
+++ b/include/newgame.php
@@ -0,0 +1,22 @@
+<?php
+/* make sure that we are not called from outside the scripts, 
+ * use a variable defined in config.php to check this
+ */
+if(!isset($HOST))
+  exit;
+
+output_status();
+/* user needs to be logged in to do this */
+if( isset($_SESSION["name"]) )
+  {
+    $names = DB_get_all_names();
+    echo "<div class=\"user\">\n";
+    output_form_for_new_game($names);
+    echo "</div>\n";
+    display_user_menu();
+  }
+ else
+   {
+     echo "<div class=\"message\">Please <a href=\"$INDEX\">log in</a>.</div>";
+   }
+?>
\ No newline at end of file
diff --git a/include/newgameready.php b/include/newgameready.php
new file mode 100644
index 0000000..6d74af0
--- /dev/null
+++ b/include/newgameready.php
@@ -0,0 +1,175 @@
+<?php
+/* make sure that we are not called from outside the scripts, 
+ * use a variable defined in config.php to check this
+ */
+if(!isset($HOST))
+  exit;
+
+output_status();
+/* user needs to be logged in */
+if( !isset($_SESSION["name"]) )
+  {
+    echo "<div class=\"message\">Please <a href=\"$INDEX\">log in</a>.</div>";
+  }
+ else
+   {
+     /* get my name */
+     $name = $_SESSION["name"];
+
+     /* the names of the four players */
+     $PlayerA = $_REQUEST["PlayerA"];
+     $PlayerB = $_REQUEST["PlayerB"];
+     $PlayerC = $_REQUEST["PlayerC"];
+     $PlayerD = $_REQUEST["PlayerD"];
+
+     /* the person who sets up the game has to be one of the players */
+     if(!in_array($name,array($PlayerA,$PlayerB,$PlayerC,$PlayerD)))
+       {
+	 echo "<div class=\"message\">You need to be one of the players to start a <a href=\"$INDEX?new\">new game</a>.</div>";
+	 output_footer();
+	 DB_close();
+	 exit();
+       }
+	
+     /* what rules were selected */
+     $dullen      = $_REQUEST["dullen"];
+     $schweinchen = $_REQUEST["schweinchen"];
+     $call        = $_REQUEST["callrule"];
+
+     /* get the emails addresses of the players */
+     $EmailA  = DB_get_email('name',$PlayerA);
+     $EmailB  = DB_get_email('name',$PlayerB);
+     $EmailC  = DB_get_email('name',$PlayerC);
+     $EmailD  = DB_get_email('name',$PlayerD);
+
+     /* this is used to check if the player names are all ok */
+     if($EmailA=="" || $EmailB=="" || $EmailC=="" || $EmailD=="")
+       {
+	 echo "couldn't find one of the names, please start a new game";
+	 output_footer();
+	 DB_close();
+	 exit();
+       }
+
+     /* get user ids */
+     $useridA  = DB_get_userid('name',$PlayerA);
+     $useridB  = DB_get_userid('name',$PlayerB);
+     $useridC  = DB_get_userid('name',$PlayerC);
+     $useridD  = DB_get_userid('name',$PlayerD);
+
+     /* create random numbers */
+     $randomNR       = create_array_of_random_numbers($useridA,$useridB,$useridC,$useridD);
+     $randomNRstring = join(":",$randomNR);
+
+     /* create game */
+     $followup = NULL;
+     /* is this game a follow up in an already started session? */
+     if(myisset("followup") )
+       {
+	 $followup= $_REQUEST["followup"];
+	 $session = DB_get_session_by_gameid($followup);
+	 $ruleset = DB_get_ruleset_by_gameid($followup); /* just copy ruleset from old game,
+							  this way no manipulation is possible */
+
+	 /* check if there is a game in pre or play mode, in that case do nothing */
+	 if( DB_is_session_active($session) > 0 )
+	   {
+	     echo "<p class=\"message\"> There is already a game going on in session $session, you can't start a new one</p>";
+	     output_footer();
+	     DB_close();
+	     exit();
+	   }
+	 else if ( DB_is_session_active($session) < 0 )
+	   {
+	     echo "<p class=\"message\"> ERROR: status of session $session couldn't be determined.</p>";
+	     output_footer();
+	     DB_close();
+	     exit();
+	   }
+
+	 if($session)
+	   mysql_query("INSERT INTO Game VALUES (NULL, NULL, '$randomNRstring', 'normal', NULL,NULL,'1',NULL,'pre',".
+		       "'$ruleset','$session' ,NULL)");
+	 else
+	   {
+	     /* get max session and start a new one */
+	     $max = DB_get_max_session();
+	     $max++;
+	     mysql_query("UPDATE Game SET session='".$max."' WHERE id=".DB_quote_smart($followup));
+	     mysql_query("INSERT INTO Game VALUES (NULL, NULL, '$randomNRstring', 'normal', NULL,NULL,'1',NULL,'pre',".
+			 "'$ruleset','$max' ,NULL)");
+	   }
+       }
+     else /* no follow up, start a new session */
+       {
+	 /* get ruleset information or create new one */
+	 $ruleset = DB_get_ruleset($dullen,$schweinchen,$call);
+	 if($ruleset <0)
+	   {
+	     myerror("Error defining ruleset: $ruleset");
+	     output_footer();
+	     DB_close();
+	     exit();
+	   };
+	 /* get max session */
+	 $max = DB_get_max_session();
+	 $max++;
+
+	 mysql_query("INSERT INTO Game VALUES (NULL, NULL, '$randomNRstring', 'normal', NULL,NULL,'1',NULL,'pre', ".
+		     "'$ruleset','$max' ,NULL)");
+       }
+     $game_id = mysql_insert_id();
+
+     /* create hash */
+     $TIME  = (string) time(); /* to avoid collisions */
+     $hashA = md5("AGameOfDoko".$game_id.$PlayerA.$EmailA.$TIME);
+     $hashB = md5("AGameOfDoko".$game_id.$PlayerB.$EmailB.$TIME);
+     $hashC = md5("AGameOfDoko".$game_id.$PlayerC.$EmailC.$TIME);
+     $hashD = md5("AGameOfDoko".$game_id.$PlayerD.$EmailD.$TIME);
+
+     /* create hands */
+     mysql_query("INSERT INTO Hand VALUES (NULL,".DB_quote_smart($game_id).",".DB_quote_smart($useridA).
+		 ", ".DB_quote_smart($hashA).", 'start','1',NULL,NULL,NULL,NULL)");
+     $hand_idA = mysql_insert_id();
+     mysql_query("INSERT INTO Hand VALUES (NULL,".DB_quote_smart($game_id).",".DB_quote_smart($useridB).
+		 ", ".DB_quote_smart($hashB).", 'start','2',NULL,NULL,NULL,NULL)");
+     $hand_idB = mysql_insert_id();
+     mysql_query("INSERT INTO Hand VALUES (NULL,".DB_quote_smart($game_id).",".DB_quote_smart($useridC).
+		 ", ".DB_quote_smart($hashC).", 'start','3',NULL,NULL,NULL,NULL)");
+     $hand_idC = mysql_insert_id();
+     mysql_query("INSERT INTO Hand VALUES (NULL,".DB_quote_smart($game_id).",".DB_quote_smart($useridD).
+		 ", ".DB_quote_smart($hashD).", 'start','4',NULL,NULL,NULL,NULL)");
+     $hand_idD = mysql_insert_id();
+
+     /* save cards */
+     for($i=0;$i<12;$i++)
+       mysql_query("INSERT INTO Hand_Card VALUES (NULL, '$hand_idA', '".$randomNR[$i]."', 'false')");
+     for($i=12;$i<24;$i++)
+       mysql_query("INSERT INTO Hand_Card VALUES (NULL, '$hand_idB', '".$randomNR[$i]."', 'false')");
+     for($i=24;$i<36;$i++)
+       mysql_query("INSERT INTO Hand_Card VALUES (NULL, '$hand_idC', '".$randomNR[$i]."', 'false')");
+     for($i=36;$i<48;$i++)
+       mysql_query("INSERT INTO Hand_Card VALUES (NULL, '$hand_idD', '".$randomNR[$i]."', 'false')");
+
+     /* send out email, TODO: check for error with email */
+     $message = "\n".
+       "you are invited to play a game of DoKo (that is to debug the program ;).\n".
+       "Place comments and bug reports here:\n".
+       "http://wiki.nubati.net/index.php?title=EmailDoko\n\n".
+       "The whole round would consist of the following players:\n".
+       "$PlayerA\n".
+       "$PlayerB\n".
+       "$PlayerC\n".
+       "$PlayerD\n\n".
+       "If you want to join this game, please follow this link:\n\n".
+       "".$HOST.$INDEX."?me=";
+
+     mymail($EmailA,"You are invited to a game of DoKo","Hello $PlayerA,\n".$message.$hashA);
+     mymail($EmailB,"You are invited to a game of DoKo","Hello $PlayerB,\n".$message.$hashB);
+     mymail($EmailC,"You are invited to a game of DoKo","Hello $PlayerC,\n".$message.$hashC);
+     mymail($EmailD,"You are invited to a game of DoKo","Hello $PlayerD,\n".$message.$hashD);
+
+     echo "<div class=\"message\">You started a new game. The emails have been sent out!</div>\n";
+   }
+/* end set up a new game */
+?>
\ No newline at end of file
diff --git a/include/output.php b/include/output.php
new file mode 100644
index 0000000..1637603
--- /dev/null
+++ b/include/output.php
@@ -0,0 +1,435 @@
+<?php
+/* make sure that we are not called from outside the scripts, 
+ * use a variable defined in config.php to check this
+ */
+if(!isset($HOST))
+  exit;
+
+/* functions which only ouput html  */
+
+function output_user_settings()
+{
+  global $PREF;
+
+  echo "<div class=\"useroptions\">\n";
+  echo "<h4> Settings </h4>\n";
+  echo "<a href=\"index.php?passwd=ask\">Change password</a><br />";
+
+  echo "<h5> Card set </h5>\n";
+  if( $PREF["cardset"] == "english" )
+    echo "<a href=\"index.php?setpref=germancards\">Change to German cards</a><br />";
+  else
+    echo "<a href=\"index.php?setpref=englishcards\">Change to English cards</a> <br />";
+
+  echo "<h5> Email </h5>\n";
+  if( $PREF["email"] == "emailaddict" )
+    echo "<a href=\"index.php?setpref=emailnonaddict\">Change to non-addicted mode (emails for each move)</a><br />";
+  else
+    echo "<a href=\"index.php?setpref=emailaddict\">Change to addicted mode (minimal amount of emails)</a> <br />";
+
+  echo "</div>\n";
+
+  return;
+}
+
+function output_ask_for_new_game($playerA,$playerB,$playerC,$playerD,$oldgameid)
+{
+  global $RULES;
+
+  echo "Do you want to continue playing?(This will start a new game, with the next person as dealer.)\n";
+  echo "  <input type=\"hidden\" name=\"PlayerA\" value=\"$playerA\" />\n";
+  echo "  <input type=\"hidden\" name=\"PlayerB\" value=\"$playerB\" />\n";
+  echo "  <input type=\"hidden\" name=\"PlayerC\" value=\"$playerC\" />\n";
+  echo "  <input type=\"hidden\" name=\"PlayerD\" value=\"$playerD\" />\n";
+  echo "  <input type=\"hidden\" name=\"dullen\"  value=\"".$RULES["dullen"]."\" />\n";
+  echo "  <input type=\"hidden\" name=\"schweinchen\" value=\"".$RULES["schweinchen"]."\" />\n";
+  echo "  <input type=\"hidden\" name=\"callrule\" value=\"".$RULES["call"]."\" />\n";
+  echo "  <input type=\"hidden\" name=\"followup\" value=\"$oldgameid\" />\n";
+  echo "  <input type=\"submit\" value=\"keep playing\" />\n";
+
+  return;
+}
+
+function output_form_for_new_game($names)
+{
+?>
+    <h2> Players </h2>
+    <p>Please select four players (or use the randomly pre-selected names)</p>
+    <p>Remember: you need to be one of the players ;) </p>
+       <form action="index.php" method="post">
+
+   <div class="table">
+     <img src="pics/table.png" alt="table" />
+<?php
+    /* ask for player names */
+    $i=0;
+  foreach( array("PlayerA","PlayerB","PlayerC","PlayerD") as $player)
+    {
+      srand((float) microtime() * 10000000);
+      $randkey = array_rand($names);
+      $rand = $names[$randkey];
+      echo  "<div class=\"table".$i."\">\n";
+      $i++;
+      echo "    Name:  \n  <select name=\"$player\" size=\"1\" />  \n";
+      foreach($names as $name)
+	{
+	  if($name==$rand)
+	    {
+	      echo "     <option selected=\"selected\">$name</option>\n";
+	    }
+	  else
+	    echo "     <option>$name</option>\n";
+	}
+      echo "  </select>\n</div>\n";
+    }
+?>
+    </div>
+   <h2 class="rules"> Rules </h2>
+      <p> Some areas are grayed out which means that the rule is not implemented yet and therefore cannot be selected </p>
+      <p> Ten of hearts:
+         <ul>
+         <li> <input type="radio" name="dullen" value="none" /> just normal non-trump  </li>
+         <li> <input type="radio" name="dullen" value="firstwins" /> first ten of hearts wins the trick </li>
+         <li> <input type="radio" name="dullen" value="secondwins" checked="checked" /> second ten of hearts wins the trick </li>
+         </ul>
+      </p>
+      <p> Schweinchen (both foxes), only in normal games or silent solos:
+        <ul>
+        <li> <input type="radio" name="schweinchen" value="none" checked="checked" /> none </li>
+        <li> <input type="radio" name="schweinchen" value="both" />
+              both become highest trump (automatic call at beginning of the game)
+        </li>
+        <li> <input type="radio" name="schweinchen" value="second" />
+              first one normal, second one becomes highest (call during the game) </li>
+        <li> <input type="radio" name="schweinchen" value="secondaftercall"  disabled="disabled" />
+      second one become highest only in case re/contra was announced (not working yet)
+        </li>
+        </ul>
+      </p>
+      <p> Call Re/Contra, etc.:
+        <ul>
+           <li><input type="radio" name="callrule" value="1st-own-card" checked="checked" />
+                Can call re/contra on the first <strong>own</strong> card played, 90 on the second, etc.</li>
+           <li><input type="radio" name="callrule" value="5th-card" />
+                Can call re/contra until 5th card is played, 90 until 9th card is played, etc.</li>
+           <li><input type="radio" name="callrule" value="9-cards"  />
+                Can call re/contra until 5th card is played, 90 if player still has 9 cards, etc.</li>
+        </ul>
+      </p>
+   <input type="submit" value="start game" />
+ </form>
+<?php
+}
+
+function display_card($card,$dir="english")
+{
+  /* cards are only availabl for the odd values, e.g. 1.png, 3.png, ...
+   * convert even cards to the matching odd value */
+
+  if( $card/2 - (int)($card/2) == 0.5)
+    echo "<img src=\"cards/".$dir."/".$card.".png\"  alt=\"".DB_get_card_name($card)."\" />\n";
+  else
+    echo "<img src=\"cards/".$dir."/".($card-1).".png\"  alt=\"".DB_get_card_name($card-1)."\" />\n";
+
+  return;
+}
+
+function display_link_card($card,$dir="english",$type="card")
+{
+  if( $card/2 - (int)($card/2) == 0.5)
+    echo "<div class=\"cardinput\"><input type=\"radio\" name=\"".$type."\" value=\"".$card."\" /><img src=\"cards/".$dir."/".$card.".png\" alt=\"".DB_get_card_name($card)."\" /></div>\n";
+  else
+    echo "<div class=\"cardinput\" ><input type=\"radio\" name=\"".$type."\" value=\"".$card."\" /><img src=\"cards/".$dir."/".($card-1).".png\" alt=\"".DB_get_card_name($card-1)."\" /></div>\n";
+  return;
+}
+
+function output_check_for_sickness($me,$mycards)
+{
+ ?>
+  <div class="sickness"> Thanks for joining the game...<br />
+
+    do you want to play solo?
+    <select name="solo" size="1">
+      <option selected="selected">No</option>
+      <option>trumpless</option>
+      <option>trump</option>
+      <option>queen</option>
+      <option>jack</option>
+      <option>club</option>
+      <option>spade</option>
+      <option>heart</option>
+    </select>
+    <br />
+
+ <?php
+
+  echo "Wedding?";
+  if(check_wedding($mycards))
+     {
+       echo " yes<input type=\"radio\" name=\"wedding\" value=\"yes\" checked=\"checked\" />";
+       echo " no <input type=\"radio\" name=\"wedding\" value=\"no\" /> <br />\n";
+     }
+   else
+     {
+       echo " no <input type=\"hidden\" name=\"wedding\" value=\"no\" /> <br />\n";
+     };
+
+  echo "Do you have poverty?";
+  if(count_trump($mycards)<4)
+    {
+      echo " yes<input type=\"radio\" name=\"poverty\" value=\"yes\" checked=\"checked\" />";
+      echo " no <input type=\"radio\" name=\"poverty\" value=\"no\" /> <br />\n";
+    }
+  else
+    {
+      echo " no <input type=\"hidden\" name=\"poverty\" value=\"no\" /> <br />\n";
+    };
+
+   echo "Do you have too many nines?";
+  if(count_nines($mycards)>4)
+     {
+       echo " yes<input type=\"radio\" name=\"nines\" value=\"yes\" checked=\"checked\" />";
+       echo " no <input type=\"radio\" name=\"nines\" value=\"no\" /> <br />\n";
+     }
+   else
+     {
+       echo " no <input type=\"hidden\" name=\"nines\" value=\"no\" /> <br />\n";
+     };
+
+   echo "<input type=\"hidden\" name=\"me\" value=\"$me\" />\n";
+   echo "<input type=\"submit\" value=\"count me in\" />\n";
+
+   echo "</div>\n";
+
+  return;
+}
+
+function output_form_calls($me)
+{
+  if( can_call(120,$me) )
+    echo " re/contra (120):".
+      " <input type=\"radio\" name=\"call\" value=\"120\" /> <br />";
+  if( can_call(90,$me) )
+    echo " 90:".
+      " <input type=\"radio\" name=\"call\" value=\"90\" /> <br />";
+  if( can_call(60,$me) )
+    echo " 60:".
+      " <input type=\"radio\" name=\"call\" value=\"60\" /> <br />";
+  if( can_call(30,$me) )
+    echo " 30:".
+      " <input type=\"radio\" name=\"call\" value=\"30\" /> <br />";
+  if( can_call(0,$me) )
+    echo " 0:".
+      " <input type=\"radio\" name=\"call\" value=\"0\" /> <br />".
+      " no call:".
+      " <input type=\"radio\" name=\"call\" value=\"no\" /> <br />";
+}
+
+
+function output_check_want_to_play($me)
+{
+   ?>
+ <div class="joingame">
+   Do you want to play a game of DoKo? <br />
+   yes<input type="radio" name="in" value="yes" />
+   no<input type="radio" name="in" value="no" /> <br />
+<?php
+  echo "<input type=\"hidden\" name=\"me\" value=\"$me\" />\n";
+  echo "\n";
+  echo "<input type=\"submit\" value=\"submit\" />\n";
+  echo " </div>\n";
+
+  return;
+}
+
+function output_home_page($pre,$game,$done,$avgtime)
+{
+  global $WIKI;
+  
+  echo"<p> If you want to play a game of Doppelkopf, you found the right place ;)".
+    " For more information please visit our <a href=\"$WIKI\">wiki</a>. </p>";
+  
+  if($pre == 0)
+    echo "<p> At the moment there are no games that are being started ";
+  else if($pre==1)
+    echo "<p> At the moment there is one games that is being started ";
+  else
+    echo "<p> At the moment there are $pre games that are being started ";
+  
+  echo "and ";
+  
+  if($game==0)
+    echo "zero games that are ongoing. ";
+  else if($game==1)
+    echo "one game that is ongoing. ";
+  else
+    echo "$game games that are ongoing. ";
+  
+  echo "<br />\n";
+  
+  if($done==0)
+    echo "No game has been completed on this server. </p>";
+  else if($done==1)
+    echo "One game has been completed on this server. </p>";
+  else
+    echo "$done games have been completed on this server. Average time of a game: $avgtime days</p>";
+?>
+
+    <p> Please <a href="./register.php">register</a>, in case you have not done that yet  <br />
+        or login with you email-address or name and password here:
+    </p>
+        <form action="index.php" method="post">
+          <fieldset>
+            <legend>Login</legend>
+             <table>
+              <tr>
+                 <td><label for="email">Email:</label></td>
+                 <td><input type="text" id="email" name="email" size="20" maxlength="30" /> </td>
+              </tr><tr>
+                 <td><label for="password">Password:</label></td>
+                 <td><input type="password" id="password" name="password" size="20" maxlength="30" /></td>
+              </tr><tr>
+                <td> <input type="submit" class="submitbutton" name="login" value="login" /></td>
+                <td> <input type="submit" class="submitbutton" name="forgot" value="Forgot your password?" /></td>
+              </tr>
+             </table>
+          </fieldset>
+        </form>
+
+<?php
+ return;
+}
+
+function output_header()
+{
+   global $REV;
+?>
+<!DOCTYPE html PUBLIC
+    "-//W3C//DTD XHTML 1.1 plus MathML 2.0 plus SVG 1.1//EN"
+    "http://www.w3.org/2002/04/xhtml-math-svg/xhtml-math-svg.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en">
+  <head>
+     <title>e-Doko</title>
+     <meta content="text/html; charset=ISO-8859-1" http-equiv="content-type" />
+     <link rel="shortcut icon" type="image/x-icon" href="pics/edoko-favicon.png" />
+     <link rel="stylesheet" type="text/css" href="css/standard.css" />
+     <script type="text/javascript">
+       function hl(num) {
+         if(document.getElementById){
+	   var i;
+	   for(i=1;i<14;i++){
+	     if(document.getElementById("trick"+i))
+	       document.getElementById("trick"+i).style.display = 'none';
+	   }
+	   document.getElementById("trick"+num).style.display = 'block';
+	 }
+       }
+       function high_last(){
+	 if(document.getElementById){
+	   var i;
+	   for(i=13;i>0;i--) {
+	     if(document.getElementById("trick"+i))
+	       {
+		 hl(i);
+		 break;
+	       }
+	   }
+	 }
+       }
+     </script>
+  </head>
+<body onload="high_last();">
+<div class="header">
+<h1> Welcome to E-Doko <sup style="color:#888;">(beta)</sup> </h1>
+</div>
+<?php
+
+  echo "<div class=\"main\">";
+  return;
+}
+
+function output_footer()
+{
+  global $REV,$PREF;
+
+  echo "</div>\n\n";
+  echo "<div class=\"footer\">\n";
+  echo "  <p class=\"left\"> copyright 2006-2008 Arun Persaud, Lance Thornton <br />\n".
+    "  Verwendung der [deutschen] Kartenbilder mit Genehmigung <br />der Spielkartenfabrik Altenburg GmbH,(c) ASS Altenburger <br />\n".
+    "  - ASS Altenburger Spielkarten - Spielkartenfabrik Altenburg GmbH <br />\n".
+    "  a Carta Mundi Company Email: info@spielkarten.com Internet: www.spielkarten.com</p>\n";
+ echo "  <p class=\"right\"> See the latest changes <a href=\"http://nubati.net/cgi-bin/gitweb.cgi?p=e-DoKo.git;a=summary\">\n".
+    "  via git </a> <br />or download the source via <br />\n'git clone http://nubati.net/git/e-DoKo.git' <br />\n".
+    "  <a href=\"http://www.dreamhost.com/green.cgi\">\n".
+    "  <img  border=\"0\" alt=\"Green Web Hosting! This site hosted by DreamHost.\"".
+    "src=\"https://secure.newdream.net/green1.gif\" height=\"32\" width=\"100\" /></a>\n".
+    "  </p> \n";
+  echo "\n";
+  echo "</div>\n";
+
+  echo "</body>\n";
+  echo "</html>\n";
+
+  return;
+}
+
+function output_status()
+{
+  global $defaulttimezone;
+   if(isset($_SESSION["name"]))
+     {
+       $name = $_SESSION["name"];
+
+       /* logout info */
+       echo "\n<div class=\"status\">";
+       echo $name;
+       echo " <a href=\"index.php?logout=1\">logout</a>";
+       echo "</div>\n";
+
+       /* last logon time */
+       $myid  = DB_get_userid("name",$name);
+       $zone  = DB_get_user_timezone($myid);
+
+       $time     = DB_get_user_timestamp($myid);
+       date_default_timezone_set($defaulttimezone);
+       $unixtime = strtotime($time);
+       date_default_timezone_set($zone);
+
+       echo "<div class=\"lastlogin\">last login: ".date("r",$unixtime)."</div>\n";
+     };
+  return;
+}
+
+
+function output_password_recovery($email,$password)
+{
+?>
+   <form action="index.php" method="post">
+<?php
+  echo "  <input type=\"hidden\" name=\"email\" value=\"".$email."\" />\n";
+  echo "  <input type=\"hidden\" name=\"password\" value=\"".$password."\" />\n";
+  echo "  <input type=\"hidden\" name=\"passwd\"  value=\"set\" />\n";
+?>
+     <fieldset>
+       <legend>Password recovery</legend>
+        <table>
+         <tr>
+            <td><label for="email">Old password:</label></td>
+            <td><input type="password" id="password0" name="password0" size="20" maxlength="30" /> </td>
+         </tr><tr>
+            <td><label for="password">New password:</label></td>
+            <td><input type="password" id="password1" name="password1" size="20" maxlength="30" /></td>
+         </tr><tr>
+            <td><label for="password">Retype:</label></td>
+            <td><input type="password" id="password2" name="password2" size="20" maxlength="30" /></td>
+         </tr><tr>
+           <td></td>
+           <td> <input type="submit" class="submitbutton" name="passwd" value="set" /></td>
+         </tr>
+        </table>
+     </fieldset>
+   </form>
+
+<?php
+}
+?>
\ No newline at end of file
diff --git a/include/reminder.php b/include/reminder.php
new file mode 100644
index 0000000..1e3135c
--- /dev/null
+++ b/include/reminder.php
@@ -0,0 +1,60 @@
+<?php
+/* make sure that we are not called from outside the scripts, 
+ * use a variable defined in config.php to check this
+ */
+if(!isset($HOST))
+  exit;
+
+output_status();
+
+$me = $_REQUEST["me"];
+
+/* test for valid ID */
+$myid = DB_get_userid('hash',$me);
+if(!$myid)
+  {
+    echo "Can't find you in the database, please check the url.<br />\n";
+    echo "perhaps the game has been canceled, check by login in <a href=\"$INDEX\">here</a>.";
+    output_footer();
+    DB_close();
+    exit();
+  }
+
+DB_update_user_timestamp($myid);
+
+/* get some information from the DB */
+$gameid   = DB_get_gameid_by_hash($me);
+$myname   = DB_get_name('hash',$me);
+
+/* check if player hasn't done anything in a while */
+$result = mysql_query("SELECT mod_date,player,status from Game WHERE id='$gameid' " );
+$r = mysql_fetch_array($result,MYSQL_NUM);
+if( (time()-strtotime($r[0]) > 60*60*24*7)  && ($r[2]!='gameover') ) /* = 1 week */
+  {
+    $name = DB_get_name('userid',$r[1]);
+    $To   = DB_get_email('userid',$r[1]);
+    $userhash = DB_get_hash_from_gameid_and_userid($gameid,$r[1]);
+
+    $message = "Hello $name, \n\n".
+      "It's your turn in game ".DB_format_gameid($gameid)." \n".
+      "Actually everyone else is waiting for you for more than a week now ;)\n\n".
+      "Please visit this link now to continue: \n".
+      " ".$HOST.$INDEX."?me=".$userhash."\n\n" ;
+
+    /* make sure we don't send too  many reminders to one person */
+    if(DB_get_reminder($r[1],$gameid)>0)
+      {
+	echo "<p>An email has already been sent out.</p>\n";
+      }
+    else
+      {
+	DB_set_reminder($r[1],$gameid);
+	mymail($To,$EmailName."Reminder: game ".DB_format_gameid($gameid)." it's your turn",$message);
+
+	echo "<p style=\"background-color:red\";>Game ".DB_format_gameid($gameid).
+	  ": an email has been sent out.<br /><br /></p>";
+      }
+  }
+ else
+   echo "<p>You need to wait longer before you can send out a reminder...</p>\n";
+?>
\ No newline at end of file
diff --git a/include/user.php b/include/user.php
new file mode 100644
index 0000000..0f67a68
--- /dev/null
+++ b/include/user.php
@@ -0,0 +1,272 @@
+<?php
+/* make sure that we are not called from outside the scripts, 
+ * use a variable defined in config.php to check this
+ */
+if(!isset($HOST))
+  exit;
+
+/* test id and password, should really be done in one step */
+if(!isset($_SESSION["name"]))
+  {
+    $email     = $_REQUEST["email"];
+    $password  = $_REQUEST["password"];
+  }
+ else
+   {
+     $name = $_SESSION["name"];
+     $email     = DB_get_email('name',$name);
+     $password  = DB_get_passwd_by_name($name);
+   };
+
+/* user has forgotten his password */
+if(myisset("forgot"))
+  {
+    /* check if player is in the database */
+    $ok = 1;
+
+    $myid = DB_get_userid('email',$email);
+    if(!$myid)
+      $ok = 0;
+
+    if($ok)
+      {
+	/* check how many entries in recovery table */
+	$number = DB_get_number_of_passwords_recovery($myid);
+
+	/* if less than N recent ones, add a new one and send out email */
+	if( $number < 5 )
+	  {
+	    echo "Ok, I send you a new password. <br />";
+	    if($number >1)
+	      echo "N.B. You tried this already $number times during the last day and it will only work ".
+		" 5 times during a day.<br />";
+	    echo "The new password will be valid for one day, make sure you reset it to something else.<br />";
+	    echo "Back to the  <a href=\"$INDEX\">main page</a>.";
+
+	    /* create temporary password, use the fist 8 letters of a md5 hash */
+	    $TIME  = (string) time(); /* to avoid collisions */
+	    $hash  = md5("Anewpassword".$email.$TIME);
+	    $newpw = substr($hash,1,8);
+
+	    $message = "Someone (hopefully you) requested a new password. \n".
+	      "You can use this email and the following password: \n".
+	      "   $newpw    \n".
+	      "to log into the server. The new password is valid for 24h, so make\n".
+	      "sure you reset your password to something new. Your old password will\n".
+	      " also still be valid until you set a new one\n";
+	    mymail($email,$EmailName."recovery ",$message);
+
+	    /* we save these in the database */
+	    DB_set_recovery_password($myid,md5($newpw));
+	  }
+	else
+	  {
+	    /* make it so that people (or a robot) can request thousands of passwords within a short time
+	     * and spam a user this way */
+	    echo "Sorry you already tried 5 times during the last 24h.<br />".
+	      "You need to use one of those passwords or wait to get a new one.<br />";
+	    echo "Back to the <a href=\"$INDEX\">main page</a>.";
+	  }
+      }
+    else
+      {/* can't find user id in the database */
+	     
+	/* no email given? */
+	if($email=="")
+	  echo "You need to give me an email address! <br />".
+	    "Please try <a href=\"$INDEX\">again</a>.";
+	else /* default error message */
+	  echo "Couldn't find a player with this email! <br />".
+	    "Please contact Arun, if you think this is a mistake <br />".
+	    "or else try <a href=\"$INDEX\">again</a>.";
+      }
+  }
+ else 
+   { /* normal user page */
+
+
+     /* verify password and email */
+     if(strlen($password)!=32)
+       $password = md5($password);
+
+     $ok  = 1;
+     $myid = DB_get_userid('email-password',$email,$password);
+     if(!$myid)
+       $ok = 0;
+
+     if($ok)
+       {
+	 /* user information is ok */
+	 $myname = DB_get_name('email',$email);
+	 $_SESSION["name"] = $myname;
+	 output_status();
+    
+	 DB_get_PREF($myid);
+    
+	 /* does the user want to change some preferences? */
+	 if(myisset("setpref"))
+	   {
+	     $setpref=$_REQUEST["setpref"];
+	     switch($setpref)
+	       {
+	       case "germancards":
+	       case "englishcards":
+		 $result = mysql_query("SELECT * from User_Prefs".
+				       " WHERE user_id='$myid' AND pref_key='cardset'" );
+		 if( mysql_fetch_array($result,MYSQL_NUM))
+		   $result = mysql_query("UPDATE User_Prefs SET value=".DB_quote_smart($setpref).
+					 " WHERE user_id='$myid' AND pref_key='cardset'" );
+		 else
+		   $result = mysql_query("INSERT INTO User_Prefs VALUES(NULL,'$myid','cardset',".
+					 DB_quote_smart($setpref).")");
+		 echo "Ok, changed you preferences for the cards.\n";
+		 break;
+	       case "emailaddict":
+	       case "emailnonaddict":
+		 $result = mysql_query("SELECT * from User_Prefs".
+				       " WHERE user_id='$myid' AND pref_key='email'" );
+		 if( mysql_fetch_array($result,MYSQL_NUM))
+		   $result = mysql_query("UPDATE User_Prefs SET value=".DB_quote_smart($setpref).
+					 " WHERE user_id='$myid' AND pref_key='email'" );
+		 else
+		   $result = mysql_query("INSERT INTO User_Prefs VALUES(NULL,'$myid','email',".
+					 DB_quote_smart($setpref).")");
+		 echo "Ok, changed you preferences for sending out emails.\n";
+		 break;
+	       }
+	   }
+	 /* user wants to change his password or request a temporary one */
+	 else if(myisset("passwd"))
+	   {
+	     if( $_REQUEST["passwd"]=="ask" )
+	       {
+		 /* reset password form*/
+		 output_password_recovery($email,$password);
+	       }
+	     else if($_REQUEST["passwd"]=="set")
+	       {
+		 /* reset password */
+		 $ok = 1;
+
+		 /* check if old password matches */
+		 $oldpasswd = md5($_REQUEST["password0"]);
+		 if(!( ($password == $oldpasswd) || DB_check_recovery_passwords($oldpasswd,$email) ))
+		   $ok = -1;
+		 /* check if new passwords are types the same twice */
+		 if($_REQUEST["password1"] != $_REQUEST["password2"] )
+		   $ok = -2;
+
+		 switch($ok)
+		   {
+		   case '-2':
+		     echo "The new passwords don't match. <br />";
+		     break;
+		   case '-1':
+		     echo "The old password is not correct. <br />";
+		     break;
+		   case '1':
+		     echo "Changed the password.<br />";
+		     mysql_query("UPDATE User SET password='".md5($_REQUEST["password1"]).
+				 "' WHERE id=".DB_quote_smart($myid));
+		     break;
+		   }
+		 /* set password */
+	       }
+	   }
+	 else /* output default user page */
+	   {
+	     /* display links to settings */
+	     output_user_settings();
+
+	     DB_update_user_timestamp($myid);
+
+	     display_user_menu();
+
+	     /* display all games the user has played */
+	     echo "<div class=\"user\">";
+	     echo "<h4>These are all your games:</h4>\n";
+	     echo "<p>Session: <br />\n";
+	     echo "<span class=\"gamestatuspre\"> p </span> =  pre-game phase ";
+	     echo "<span class=\"gamestatusplay\">P </span> =  game in progess ";
+	     echo "<span class=\"gamestatusover\">F </span> =  game finished <br />";
+	     echo "</p>\n";
+
+	     $output = array();
+	     $result = mysql_query("SELECT Hand.hash,Hand.game_id,Game.mod_date,Game.player,Game.status from Hand".
+				   " LEFT JOIN Game ON Game.id=Hand.game_id".
+				   " WHERE user_id='$myid'".
+				   " ORDER BY Game.session,Game.create_date" );
+	     $gamenrold = -1;
+	     echo "<table>\n <tr><td>\n";
+	     while( $r = mysql_fetch_array($result,MYSQL_NUM))
+	       {
+		 $game = DB_format_gameid($r[1]);
+		 $gamenr = (int) $game;
+		 if($gamenrold < $gamenr)
+		   {
+		     if($gamenrold!=-1)
+		       echo "</td></tr>\n <tr> <td>$gamenr:</td><td> ";
+		     else
+		       echo "$gamenr:</td><td> ";
+		     $gamenrold = $gamenr;
+		   }
+		 if($r[4]=='pre')
+		   {
+		     echo "\n   <span class=\"gamestatuspre\"><a href=\"".$INDEX."?me=".$r[0]."\">p </a></span> ";
+
+		   }
+		 else if ($r[4]=='gameover')
+		   echo "\n   <span class=\"gamestatusover\"><a href=\"".$INDEX."?me=".$r[0]."\">F </a></span> ";
+		 else
+		   {
+		     echo "\n   <span class=\"gamestatusplay\"><a href=\"".$INDEX."?me=".$r[0]."\">P </a></span> ";
+		   }
+		 if($r[4] != 'gameover')
+		   {
+		     echo "</td><td>\n    ";
+		     if($r[3]==$myid || !$r[3])
+		       echo "(it's <strong>your</strong> turn)\n";
+		     else
+		       {
+			 $name = DB_get_name('userid',$r[3]);
+			 $gameid = $r[1];
+			 if(DB_get_reminder($r[3],$gameid)==0)
+			   if(time()-strtotime($r[2]) > 60*60*24*7)
+			     echo "".
+			       "<a href=\"$INDEX?remind=1&amp;me=".$r[0]."\">Send a reminder.</a>";
+			 echo "(it's $name's turn)\n";
+		       };
+		     if(time()-strtotime($r[2]) > 60*60*24*30)
+		       echo "".
+			 "<a href=\"$INDEX?cancel=1&amp;me=".$r[0]."\">Cancel?</a>".
+			 " (clicking here is final and can't be restored)";
+
+		   }
+	       }
+	     echo "</td></tr>\n</table>\n";
+
+	     /* display last 5 users that have signed up to e-DoKo */
+	     $names = DB_get_names_of_new_logins(5);
+	     echo "<h4>New Players:</h4>\n<p>\n";
+	     echo implode(", ",$names).",...\n";
+	     echo "</p>\n";
+
+	     /* display last 5 users that logged on */
+	     $names = DB_get_names_of_last_logins(5);
+	     echo "<h4>Players last logged in:</h4>\n<p>\n";
+	     echo implode(", ",$names).",...\n";
+	     echo "</p>\n";
+	       
+	     echo "</div>\n";
+	   }
+       }
+     else
+       {
+	 echo "<div class=\"message\">Sorry email and password don't match. Please <a href=\"$INDEX\">try again</a>. </div>";
+       }
+   };
+output_footer();
+DB_close();
+exit();
+
+?>
\ No newline at end of file
diff --git a/include/welcome.php b/include/welcome.php
new file mode 100644
index 0000000..7aeaf78
--- /dev/null
+++ b/include/welcome.php
@@ -0,0 +1,26 @@
+<?php
+/* make sure that we are not called from outside the scripts, 
+ * use a variable defined in config.php to check this
+ */
+if(!isset($HOST))
+  exit;
+
+/* this outputs the default home page with some extra statistics on it */
+
+$pre[0]=0;$game[0]=0;$done[0]=0;
+$r=mysql_query("SELECT COUNT(id) FROM Game GROUP BY status");
+if($r) {
+  $pre  = mysql_fetch_array($r,MYSQL_NUM);
+  $game = mysql_fetch_array($r,MYSQL_NUM);
+  $done = mysql_fetch_array($r,MYSQL_NUM);
+ }
+
+$r=mysql_query("SELECT AVG(datediff(mod_date,create_date)) FROM Game where status='gameover' ");
+if($r)
+  $avgage= mysql_fetch_array($r,MYSQL_NUM);
+ else
+   $avgage[0]=0;
+
+output_home_page($pre[0],$game[0],$done[0],$avgage[0]);
+
+?>
\ No newline at end of file
-- 
cgit v1.2.3-18-g5258