X-Git-Url: https://git.nubati.net/cgi-bin/gitweb.cgi?p=e-DoKo.git;a=blobdiff_plain;f=include%2Fgame.php;h=377d0aa017dba09776f81d21718274fc7c1f8769;hp=3ed94973ab4ede24e6e4a8437cf1ae84e5a026d7;hb=193099c75801f128beb8f3bb9541a3cb70f24002;hpb=d26d08d532e38dcd42a159cfd295b0f87d82d9a2

diff --git a/include/game.php b/include/game.php
index 3ed9497..377d0aa 100644
--- a/include/game.php
+++ b/include/game.php
@@ -25,7 +25,8 @@ if(!$myid)
 global $GAME,$RULES,$CARDS;
 
 /* the user has done something, update the timestamp */
-DB_update_user_timestamp($myid);
+if(isset($_SESSION['id']))
+  DB_update_user_timestamp($_SESSION['id']);
 
 /* get some information from the DB */
 $gameid   = DB_get_gameid_by_hash($me);
@@ -33,10 +34,11 @@ $myname   = DB_get_name('hash',$me);
 $mystatus = DB_get_status_by_hash($me);
 $mypos    = DB_get_pos_by_hash($me);
 $myhand   = DB_get_handid('hash',$me);
+$myparty  = DB_get_party_by_hash($me);
 $session  = DB_get_session_by_gameid($gameid);
 
 /* get prefs and save them in a variable*/
-$PREF = DB_get_PREF($myid);
+$PREF = DB_get_PREF(isset($_SESSION['id'])?$_SESSION['id']:$myid);
 
 /* get rule set for this game */
 $RULES = DB_get_RULES($gameid);
@@ -65,7 +67,7 @@ if( $gamestatus == 'pre' )
 else
   {
     /* in a game Schweinchen is not valid in all types of games */
-    if( $gametype == 'normal' || $gametype == 'silent' || $gametype=='trump' )
+    if( $gametype == 'normal' || $gametype == 'silent' || $gametype=='trump' || $gametype=='wedding')
       if( in_array($RULES['schweinchen'],array('both','second','secondaftercall')) )
 	$ok=1;
   }
@@ -108,35 +110,123 @@ if( $mystatus!='gameover'  )
       if($note != '')
 	DB_insert_note($note,$gameid,$myid);
     };
-output_user_notes($myid,$gameid,$mystatus);
 
-/* handle calls */
+/* make sure that we don't show the notes to the wrong person
+ * (e.g. other people looking at an old game)
+ */
+if( $mystatus != 'gameover' ||
+    (  $mystatus == 'gameover' &&
+       isset($_SESSION['id'])  &&
+       $myid == $_SESSION['id']))
+  output_user_notes($myid,$gameid,$mystatus);
+
+/* handle calls, output a comment to show when the call was made */
+/* initialize comments */
+$comment  =  '';
+
+/* check for calls, set comment */
 if(myisset('call')  && $_REQUEST['call']  == '120' && can_call(120,$me))
-  $result = DB_query("UPDATE Hand SET point_call='120' WHERE hash='$me' ");
+  {
+    $result = DB_query("UPDATE Hand SET point_call='120' WHERE hash='$me' ");
+    if($myparty=='re')
+      $comment .= "Re";
+    else if($myparty=='contra')
+      $comment .= "Contra";
+  }
 if(myisset('call')  && $_REQUEST['call']  == '90' && can_call(90,$me))
-  $result = DB_query("UPDATE Hand SET point_call='90'  WHERE hash='$me' ");
+  {
+    $result = DB_query("UPDATE Hand SET point_call='90'  WHERE hash='$me' ");
+    $comment .= "No 90";
+  }
 if(myisset('call')  && $_REQUEST['call']  == '60' && can_call(60,$me))
-  $result = DB_query("UPDATE Hand SET point_call='60'  WHERE hash='$me' ");
+  {
+    $result = DB_query("UPDATE Hand SET point_call='60'  WHERE hash='$me' ");
+    $comment .= "No 60";
+  }
 if(myisset('call')  && $_REQUEST['call']  == '30' && can_call(30,$me))
-  $result = DB_query("UPDATE Hand SET point_call='30'  WHERE hash='$me' ");
+  {
+    $result = DB_query("UPDATE Hand SET point_call='30'  WHERE hash='$me' ");
+    $comment .= "No 30";
+  }
 if(myisset('call')  && $_REQUEST['call']  == '0' && can_call(0,$me))
-  $result = DB_query("UPDATE Hand SET point_call='0'   WHERE hash='$me' ");
+  {
+    $result = DB_query("UPDATE Hand SET point_call='0'   WHERE hash='$me' ");
+    $comment .= "Zero";
+  }
+
+/* get information needed to submit comment */
+$playid = DB_get_current_playid($gameid);
+
+/* set comment */
+if($comment != '')
+  DB_insert_comment($comment,$playid,$myid);
+/* clear up */
+unset($comment);
+/* end check for calls */
+
 
 /* output extra division in case this game is part of a session */
 if($session)
   {
     echo "<div class=\"session\">\n";
-    echo "  <div class=\"sessionrules\">Rules (+icons for rules) \n";
-    echo "    <div>\n";
+    echo "  <div class=\"sessionrules\">Rules: ";
+    switch($RULES['dullen'])
+      {
+      case 'none':
+	echo "  <img class=\"rulesicon\" alt=\"not ten of hearts\" src=\"pics/button/no-ten-of-hearts.png\"/>\n"; break;
+      case 'firstwins':
+	echo "  <img class=\"rulesicon\" alt=\"ten of hearts\" src=\"pics/button/ten-of-hearts.png\"/>\n"; break;
+      case 'secondwins':
+	echo "  <img class=\"rulesicon\" alt=\"second ten of hearts\" src=\"pics/button/second-ten-of-hearts.png\"/>\n"; break;
+      }
+    switch($RULES['schweinchen'])
+      {
+      case 'none':
+	echo "  <img class=\"rulesicon\" alt=\"no schweinchen\" ".
+	  "src=\"pics/button/no-schweinchen.png\"/>\n"; break;
+      case 'both':
+	echo "  <img class=\"rulesicon\" alt=\"two schweinchen \" ".
+	  "src=\"pics/button/two-schweinchen.png\"/>\n"; break;
+      case 'second':
+	echo "  <img class=\"rulesicon\" alt=\"second schweinchen\" ".
+	  "src=\"pics/button/second-schweinchen.png\"/>\n"; break;
+      case 'secondaftercall':
+	echo "  <img class=\"rulesicon\" alt=\"second schweinchen after call\" ".
+	  "src=\"pics/button/second-schweinchen-after-call.png\"/>\n"; break;
+      }
+    switch($RULES['call'])
+      {
+      case '1st-own-card':
+	echo "  <img class=\"rulesicon\" alt=\"1st-own-card\" src=\"pics/button/1st-own-card.png\"/>\n"; break;
+      case '5th-card':
+	echo "  <img class=\"rulesicon\" alt=\"5th-card\" src=\"pics/button/5th-card.png\"/>\n"; break;
+      case '9-cards':
+	echo "  <img class=\"rulesicon\" alt=\"9-cards\" src=\"pics/button/9-cards.png\"/>\n"; break;
+      }
+    echo "  <div>\n";
     echo "       10ofhearts : {$RULES['dullen']}      <br />\n";
     echo "       schweinchen: {$RULES['schweinchen']} <br />\n";
     echo "       call:        {$RULES['call']}        <br />\n";
-    echo "    </div>\n  </div>\n";
-    echo "  <div class=\"sessionscore\">Score \n";
+    echo "  </div>\n  </div>\n";
+
+    /* show score */
     $score   = generate_score_table($session);
+    $tmpscore= $score;
+    $finalscore = array_pop($tmpscore);
+    $finalscore = $finalscore['players'];
+
+    echo "  <div class=\"sessionscore\">Score: \n";
+    foreach($finalscore as $user=>$value)
+      {
+	$name = DB_get_name('userid',$user);
+	echo " ".substr($name,0,2).": $value ";
+      }
     echo format_score_table_html($score,$myid);
     echo "  </div>\n";
+
+    /* figure out which game in a session we are in and link to the previous and next game if possible */
     $hashes = DB_get_hashes_by_session($session,$myid);
+    $next     = NULL;
     $i = 1;
     foreach($hashes as $hash)
       {
@@ -146,8 +236,27 @@ if($session)
 	$lasthash=$hash;
       }
     $i--;
-    echo "This is game number $j of <a href=\"{$INDEX}?action=game&amp;me=$lasthash\">$i</a> in session $session.";
-    echo "</div>\n";
+
+    if($j>1)
+      $previous = $hashes[$j-2];
+    else
+      $previous = NULL;
+    if($j<$i)
+      $next = $hashes[$j];
+    else
+      $next = NULL;
+
+    if(isset($_SESSION['id']) && $_SESSION['id']==$myid)
+      {
+	if($previous)
+	  echo "<a href=\"{$INDEX}?action=game&amp;me=$previous\">previous game</a>&nbsp;&nbsp;&nbsp; \n";
+	echo "This is game number $j of <a href=\"{$INDEX}?action=game&amp;me=$lasthash\">$i</a> in session $session.\n";
+	if($next)
+	  echo "&nbsp;&nbsp;&nbsp;<a href=\"{$INDEX}?action=game&amp;me=$next\">next game</a> \n";
+      }
+    else
+      echo "This is game number $j of $i in session $session.";
+    echo "\n</div>\n";
   }
 
 /* display the table and the names */
@@ -264,7 +373,7 @@ switch($mystatus)
 	    $userstatus = DB_get_hand_status_by_userid_and_gameid($userid,$gameid);
 
 	    if($userstatus=='start' || $userstatus=='init')
-	      echo " <div class=\"vorbehalt".($pos-1)."\"> still needs to decide </div>\n"; /* show this to everyone */
+	      echo " <div class=\"vorbehalt".($pos-1)."\"> still needs <br/ > to decide </div>\n"; /* show this to everyone */
 	    else
 	      if($usersick!=NULL && $pos<=$mypos ) /* only show this for people sitting before the player */
 		echo " <div class=\"vorbehalt".($pos-1)."\"> sick </div>\n";
@@ -381,7 +490,7 @@ switch($mystatus)
 	$userstatus = DB_get_hand_status_by_userid_and_gameid($userid,$gameid);
 
 	if($userstatus=='start' || $userstatus=='init')
-	  echo " <div class=\"vorbehalt".($pos-1)."\"> still needs to decide </div>\n"; /* show this to everyone */
+	  echo " <div class=\"vorbehalt".($pos-1)."\"> still needs <br />to decide </div>\n"; /* show this to everyone */
 	else
 	  if($usersick!=NULL) /* in the init-phase we only showed players with $pos<$mypos, now we can show all */
 	    echo " <div class=\"vorbehalt".($pos-1)."\"> sick </div>\n";
@@ -673,9 +782,6 @@ switch($mystatus)
      * it is easier to check B) first
      */
 
-    /* output pre game in case user reloads */
-
-
     set_gametype($gametype); /* this sets the $CARDS variable */
     $myparty = DB_get_party_by_hash($me);
 
@@ -693,6 +799,7 @@ switch($mystatus)
 	  {
 	    $result = DB_query("UPDATE Hand_Card SET hand_id='$partnerhand'".
 			       " WHERE hand_id='$myhand' AND card_id=".DB_quote_smart($exchange));
+	    DB_add_exchanged_card(DB_quote_smart($exchange),$myhand,$partnerhand);
 	  };
       }
 
@@ -700,6 +807,25 @@ switch($mystatus)
     $mycards = DB_get_hand($me);
     $mycards = mysort($mycards,$gametype);
 
+    /* output pre-game trick in case user reloads,
+     * only needs to be done when a team has been formed */
+    if($myparty=='re' || $myparty=='contra')
+      {
+	echo "\n<ul class=\"tricks\">\n";
+	echo "  <li class=\"nohighlight\"> Game ".DB_format_gameid($gameid).": </li>\n";
+
+	$mygametype =  DB_get_gametype_by_gameid($gameid);
+
+	echo "  <li onclick=\"hl('0');\" class=\"current\"><a href=\"#\">Pre</a>\n".
+	  "    <div class=\"trick\" id=\"trick0\">\n";
+
+	/* get information so show the cards that have been handed over in a poverty game */
+	output_exchanged_cards();
+
+	echo "    </div>\n  </li>\n";  /* end div trick, end li trick */
+      }
+    /* end output pre-game trick */
+
     /* check if user need to give more cards back */
     if( ($myparty=='re' || $myparty=='contra') && count($mycards)>12)
       {
@@ -831,7 +957,7 @@ switch($mystatus)
 		DB_set_hand_status_by_hash($userhash,'poverty');
 
 		$message = "Someone has poverty, it's your turn to decide, if you want to take the trump. Please visit:".
-		  " ".$HOST.$INDEX."?action=game&amp;me=".$userhash."\n\n" ;
+		  " ".$HOST.$INDEX."?action=game&me=".$userhash."\n\n" ;
 		mymail($To,$EmailName." poverty (game ".DB_format_gameid($gameid).")",$message);
 	      }
 	  }
@@ -844,6 +970,12 @@ switch($mystatus)
 	    $userhand = DB_get_handid('gameid-userid',$gameid,$trump);
 	    $userhash = DB_get_hash_from_gameid_and_userid($gameid,$trump);
 
+	    /* remember which cards were handed over*/
+	    $partnerhand = DB_get_all_hand($userhash);
+	    foreach ($partnerhand as $card)
+	      if($card<27)
+		DB_add_exchanged_card($card,$userhand,$myhand);
+
 	    /* copy trump from player A to B */
 	    $result = DB_query("UPDATE Hand_Card SET hand_id='$myhand' WHERE hand_id='$userhand' AND card_id<'27'" );
 
@@ -1017,6 +1149,7 @@ switch($mystatus)
 		* only  play a card after everyone is ready to play */
       }
 
+
     /* get time from the last action of the game */
     $r = DB_query_array("SELECT mod_date from Game WHERE id='$gameid' " );
     $gameend = time() - strtotime($r[0]);
@@ -1067,21 +1200,10 @@ switch($mystatus)
       {
 	echo "  <li onclick=\"hl('0');\" class=\"current\"><a href=\"#\">Pre</a>\n".
 	     "    <div class=\"trick\" id=\"trick0\">\n";
-	$show = 1;
-	for($mypos=1;$mypos<5;$mypos++)
-	  {
-	    $usersick = DB_get_sickness_by_pos_and_gameid($mypos,$gameid);
-	    if($usersick!=NULL)
-	      {
-		echo "      <div class=\"vorbehalt".($mypos-1)."\"> Vorbehalt <br />";
-		if($show)
-		  echo " $usersick <br />";
-		echo  " </div>\n";
 
-		if($mygametype == $usersick)
-		  $show = 0;
-	      }
-	  }
+	/* get information so show the cards that have been handed over in a poverty game */
+	output_exchanged_cards();
+
 	echo "    </div>\n  </li>\n";  /* end div trick, end li trick */
       }
 
@@ -1208,7 +1330,11 @@ switch($mystatus)
 		else
 		  $GAME['schweinchen-second'] = 1; /* this must be the second fox */
 
-		if( ($GAME['schweinchen-second']==1 && $RULES['schweinchen']=='second') || $RULES['schweinchen']=='both')
+		if( $RULES['schweinchen']=='both' ||
+		    ($RULES['schweinchen']=='second' && $GAME['schweinchen-second']==1 )||
+		    ($RULES['schweinchen']=='secondaftercall' && $GAME['schweinchen-second']==1 &&
+		     (DB_get_call_by_hash($GAME['schweinchen-who']) || DB_get_partner_call_by_hash($GAME['schweinchen-who']) ))
+		  )
 		  {
 		    DB_insert_comment('Schweinchen! ',$playid,$myid);
 		    $commentSchweinchen = 'Schweinchen! ';
@@ -1478,7 +1604,7 @@ switch($mystatus)
 			  {
 			    if($call_contra==NULL)
 			      $call_contra = $call;
-			    else if( $call < $call_re)
+			    else if( $call < $call_contra)
 			      $call_contra = $call;
 			  }
 		      }
@@ -1639,27 +1765,26 @@ switch($mystatus)
 
 		  $message .= "Score Table:\n";
 		  $message .= format_score_table_ascii($score);
+		  $message .= "\nUse these links to have a look at game ".DB_format_gameid($gameid).": \n";
 
 		  /* send out final email */
 		  $all = array();
 
-		  foreach($userids as $user)
-		    $all[] = DB_get_email('userid',$user);
-		  $To = implode(",",$all);
-
-		  $help = "\n\n (you can use reply all on this email to reach all the players.)\n";
-		  mymail($To,$EmailName."game over (game ".DB_format_gameid($gameid).") part 1(2)",$message.$help);
-
 		  foreach($userids as $user)
 		    {
-		      $To   = DB_get_email('userid',$user);
+		      $all[] = DB_get_email('userid',$user);
+
+		      /* add links for all players */
 		      $hash = DB_get_hash_from_gameid_and_userid($gameid,$user);
+		      $name = DB_get_name('userid',$user);
 
-		      $link = "Use this link to have a look at game ".DB_format_gameid($gameid).": ".
-			$HOST.$INDEX."?action=game&me=".$hash."\n\n" ;
-		      if( DB_get_email_pref_by_uid($user) != 'emailaddict' )
-			mymail($To,$EmailName."game over (game ".DB_format_gameid($gameid).") part 2(2)",$link);
+		      $link = "$name: ".$HOST.$INDEX."?action=game&me=".$hash."\n" ;
+		      $message .= $link;
 		    }
+		  $To = implode(",",$all);
+
+		  $message .= "\n\n (you can use reply all on this email to reach all the players.)\n";
+		  mymail($To,$EmailName."Game over (game ".DB_format_gameid($gameid).") ",$message);
 	      }
 	  }
 	else
@@ -1696,6 +1821,42 @@ switch($mystatus)
 	    "        <div class=\"score\">".$r[2]."<br /> ".$r[1]."</div>\n".
 	    "      </div>\n";
 
+	/* display totals */
+	$result = DB_query("SELECT Hand.party, IFNULL(SUM(Card.points),0) FROM Hand".
+			   " LEFT JOIN Trick ON Trick.winner=Hand.position AND Trick.game_id=Hand.game_id".
+			   " LEFT JOIN User ON User.id=Hand.user_id".
+			   " LEFT JOIN Play ON Trick.id=Play.trick_id".
+			   " LEFT JOIN Hand_Card ON Hand_Card.id=Play.hand_card_id".
+			   " LEFT JOIN Card ON Card.id=Hand_Card.card_id".
+			   " WHERE Hand.game_id='$gameid'".
+			   " GROUP BY Hand.party" );
+	echo "<div class=\"total\">\n  Totals:<br />\n";
+	while( $r = DB_fetch_array($result))
+	  echo "  ".$r[0]." ".$r[1]."<br />\n";
+
+	$queryresult = DB_query("SELECT timediff(mod_date,create_date) ".
+				" FROM Game WHERE id='$gameid'");
+	$r = DB_fetch_array($queryresult);
+	echo "  <p>This game took ".$r[0]." hours.</p>\n";
+
+	echo "  <div class=\"re\">\n   Points Re: <br />\n";
+	$queryresult = DB_query("SELECT score FROM Score ".
+				"  WHERE game_id=$gameid AND party='re'".
+				" ");
+	while($r = DB_fetch_array($queryresult) )
+	  echo "   ".$r[0]."<br />\n";
+	echo "  </div>\n";
+
+	echo "  <div class=\"contra\">\n   Points Contra: <br />\n";
+	$queryresult = DB_query("SELECT score FROM Score ".
+				"  WHERE game_id=$gameid AND party='contra'".
+				" ");
+	while($r = DB_fetch_array($queryresult) )
+	  echo "   ".$r[0]."<br />\n";
+	echo "  </div>\n";
+
+	echo "</div>\n";
+
 	echo "    </div>\n  </li>\n";  /* end div trick, end li trick */
       }
 
@@ -1719,9 +1880,15 @@ switch($mystatus)
 
 	foreach($mycards as $card)
 	  {
+	    /* display only cards that the player is allowed to play as links, the rest just display normal
+	     * also check if we have both schweinchen, in that case only display on of them as playable
+	     */
 	    if( ($followsuit && !same_type($card,$firstcard)) ||
-		( (int)($card)==19 && ($RULES['schweinchen']=='second'||$RULES['schweinchen']=='secondaftercall')
-		  && $GAME['schweinchen-who']==$me && !$GAME['schweinchen-first'] )
+		( (int)($card)==19 && !$GAME['schweinchen-first'] &&
+		  ($RULES['schweinchen']=='second'||
+		   ( $RULES['schweinchen']=='secondaftercall' &&
+		     (DB_get_call_by_hash($GAME['schweinchen-who']) || DB_get_partner_call_by_hash($GAME['schweinchen-who']) )))
+		  && $GAME['schweinchen-who']==$me  )
 		)
 	      display_card($card,$PREF['cardset']);
 	    else
@@ -1771,61 +1938,38 @@ switch($mystatus)
     if(DB_get_game_status_by_gameid($gameid)=='play')
       {
 	echo "The game is over for you.. other people still need to play though";
-      }
-    else
-      {
-	$result = DB_query("SELECT Hand.party, IFNULL(SUM(Card.points),0) FROM Hand".
-			   " LEFT JOIN Trick ON Trick.winner=Hand.position AND Trick.game_id=Hand.game_id".
-			   " LEFT JOIN User ON User.id=Hand.user_id".
-			   " LEFT JOIN Play ON Trick.id=Play.trick_id".
-			   " LEFT JOIN Hand_Card ON Hand_Card.id=Play.hand_card_id".
-			   " LEFT JOIN Card ON Card.id=Hand_Card.card_id".
-			   " WHERE Hand.game_id='$gameid'".
-			   " GROUP BY Hand.party" );
-	echo "<div class=\"total\"> Totals:<br />\n";
-	while( $r = DB_fetch_array($result))
-	  echo "  ".$r[0]." ".$r[1]."<br />\n";
-
-	$queryresult = DB_query("SELECT timediff(mod_date,create_date) ".
-				" FROM Game WHERE id='$gameid'");
-	$r = DB_fetch_array($queryresult);
-	echo "<p>This game took ".$r[0]." hours.</p>";
-
-	echo "<div class=\"re\">\n Points Re: <br />\n";
-	$queryresult = DB_query("SELECT score FROM Score ".
-				"  WHERE game_id=$gameid AND party='re'".
-				" ");
-	while($r = DB_fetch_array($queryresult) )
-	  echo "   ".$r[0]."<br />\n";
-	echo "</div>\n";
-
-	echo "<div class=\"contra\">\n Points Contra: <br />\n";
-	$queryresult = DB_query("SELECT score FROM Score ".
-				"  WHERE game_id=$gameid AND party='contra'".
-				" ");
-	while($r = DB_fetch_array($queryresult) )
-	  echo "   ".$r[0]."<br />\n";
-	echo "</div>\n";
-
-	echo "</div>\n";
-
-
       }
     break;
   default:
     myerror("error in testing the status");
   }
-/* output left menu */
-display_user_menu();
 
-/* output right menu */
+/* output other games where it is the users turn
+ * make sure that the people looking at old games don't see the wrong games here
+ */
+if( $mystatus != 'gameover' )
+  display_user_menu($myid);
+else if(  $mystatus == 'gameover' &&
+       isset($_SESSION['id']) )
+  {
+    display_user_menu($_SESSION['id']);
+  }
+else
+  {
+    echo "<div class=\"usermenu\">\n";
+    echo "It's your turn in these games:<br />\n";
+    echo "Please log in to see this information.\n";
+    echo "</div>\n";
+  }
 
 /* display rule set for this game */
 echo "<div class=\"gameinfo\">\n";
 
 if($gamestatus == 'play' )
-  output_form_calls($me);
-
+  {
+    $myparty = DB_get_party_by_hash($me);
+    output_form_calls($me,$myparty);
+  }
 /* get time from the last action of the game */
 $r = DB_query_array("SELECT mod_date from Game WHERE id='$gameid' " );
 $gameend = time() - strtotime($r[0]);
@@ -1837,11 +1981,26 @@ if($gamestatus == 'play' || $gameend < 60*60*24*7)
 
 echo "<input type=\"submit\" value=\"submit\" />\n";
 
+/* has this hand been played by others? */
+$other_game_ids = DB_played_by_others($gameid);
+if(sizeof($other_game_ids)>0 && $mystatus=='gameover')
+  {
+    $mypos = DB_get_pos_by_hash($me);
+    echo "<p>See how other played the same hand: <br />\n";
+    foreach($other_game_ids as $id)
+      {
+	$otherhash = DB_get_hash_from_game_and_pos($id,$mypos);
+	$othername = DB_get_name('hash',$otherhash);
+	echo "<a href=\"$INDEX?action=game&amp;me=$otherhash\">$othername</a><br />";
+      }
+    echo "</p>\n";
+  }
+
 echo "</div>\n";
 
 echo "</form>\n";
 
-if($mystatus=='gameover' && DB_get_game_status_by_gameid($gameid)=='gameover' )
+if($mystatus=='gameover' && DB_get_game_status_by_gameid($gameid)=='gameover' && isset($_SESSION['id']) && $_SESSION['id']==$myid)
   {
     $session = DB_get_session_by_gameid($gameid);
     $result  = DB_query("SELECT id,create_date FROM Game".