Example #1
0
        } else {
            $school = strpos($arr["ip"], ':') ? school_ip_location($arr["ip"], false) : '';
            $userip = str_replace(':', '', $arr['ip']);
            $guestid = substr($userip, strlen($userip) - 8);
            $username = "******" . $school . "'>游客" . $guestid . "</b>";
            $arr2["username"] = "******" . $guestid;
        }
        if ($CURUSER['timetype'] != 'timealive') {
            $time = strftime("%m.%d %H:%M", $arr["date"]);
        } else {
            $time = get_elapsed_time($arr["date"]) . $lang_shoutbox['text_ago'];
        }
        $messtext = $arr["text"];
        $messtext = str_replace("[@" . $CURUSER['username'] . "]", "[color=Red][b]@" . $CURUSER['username'] . "[/b][/color]", $messtext);
        //将回复给自己的名字染红
        // 		print("<tr><td class=\"shoutrow\"><span class='date'>[".$time."]</span> ".
        // $del ." <span onclick=\"retuser('".$arr2["username"]."');\" style=\"cursor:pointer;\">[@]</span> ". $username." " . format_comment($messtext,1,true,true,600,true,false)."
        // </td></tr>\n");
        // 		$i++;
        // 	}
        // 	print("</table>");
        // }
        print "<div class=\"shoutrow\"> <img class=\"shoutbox_avatar\" src=" . ($arr2["avatar"] ? "'{$arr2['avatar']}'" : "'" . get_protocol_prefix() . $BASEURL . "/pic/default_avatar.png'") . " ><h3 class=\"shoutbox_main\">  <span class=\"shoutbox_del\"> " . $del . " </span>  " . $username . " : <span class=\"shoutbox_content\"> " . format_comment($messtext, true, false, true, true, 600, true, false) . " </span><br> <span class='date'>[" . $time . "]</span> <span class=\"shoutbox_reply\" > <a onclick=\"retuser('" . $arr2["username"] . "');\" style=\"cursor:pointer;\" >[@]</a></span></h3></div>\n";
        $i++;
    }
    print "</table>";
}
?>
</body>
</html>
Example #2
0
$showaudiocodec = $allowtorrents && get_searchbox_value($brsectiontype, 'showaudiocodec') || $allowspecial && get_searchbox_value($spsectiontype, 'showaudiocodec');
//whether show languages or not
stdhead($lang_upload['head_upload']);
?>
	<form id="compose" enctype="multipart/form-data" action="takeupload.php" method="post" name="upload">
			<?php 
print "<p align=\"center\">" . $lang_upload['text_red_star_required'] . "</p>";
?>
			<table border="1" cellspacing="0" cellpadding="5" width="940">
				<tr>
					<td class='colhead' colspan='2' align='center'>
						<?php 
echo $lang_upload['text_tracker_url'];
?>
: &nbsp;&nbsp;&nbsp;&nbsp;<b><?php 
echo get_protocol_prefix() . $announce_urls[0];
?>
</b>
						<?php 
if (!is_writable($torrent_dir)) {
    print "<br /><br /><b>ATTENTION</b>: Torrent directory isn't writable. Please contact the administrator about this problem!";
}
if (!$max_torrent_size) {
    print "<br /><br /><b>ATTENTION</b>: Max. Torrent Size not set. Please contact the administrator about this problem!";
}
?>
					</td>
				</tr>
				<?php 
tr($lang_upload['row_torrent_file'] . "<font color=\"red\">*</font>", "<input type=\"file\" class=\"file\" id=\"torrent\" name=\"file\" onchange=\"getname()\" />\n", 1);
if ($altname_main == 'yes') {
Example #3
0
    } elseif ($user['enabled'] == 'no' || $user['parked'] == 'yes') {
        die("account disabed or parked");
    }
    $oldip = $user['ip'];
    $user['ip'] = getip();
    $CURUSER = $user;
} else {
    loggedinorreturn();
    parked();
    $letdown = $_GET['letdown'];
    if (!$letdown && $CURUSER['showdlnotice'] == 1) {
        header("Location: " . get_protocol_prefix() . "{$BASEURL}/downloadnotice.php?torrentid=" . $id . "&type=firsttime");
    } elseif (!$letdown && $CURUSER['showclienterror'] == 'yes') {
        header("Location: " . get_protocol_prefix() . "{$BASEURL}/downloadnotice.php?torrentid=" . $id . "&type=client");
    } elseif (!$letdown && $CURUSER['leechwarn'] == 'yes') {
        header("Location: " . get_protocol_prefix() . "{$BASEURL}/downloadnotice.php?torrentid=" . $id . "&type=ratio");
    }
}
//User may choose to download torrent from RSS. So log ip changes when downloading torrents.
if ($iplog1 == "yes") {
    if ($oldip != $CURUSER["ip"] && $CURUSER["ip"]) {
        sql_query("INSERT INTO iplog (ip, userid, access) VALUES (" . sqlesc($CURUSER['ip']) . ", " . $CURUSER['id'] . ", '" . $CURUSER['last_access'] . "')");
    }
}
//User may choose to download torrent from RSS. So update his last_access and ip when downloading torrents.
sql_query("UPDATE users SET last_access = " . sqlesc(date("Y-m-d H:i:s")) . ", ip = " . sqlesc($CURUSER['ip']) . "  WHERE id = " . sqlesc($CURUSER['id']));
/*
@ini_set('zlib.output_compression', 'Off');
@set_time_limit(0);

if (@ini_get('output_handler') == 'ob_gzhandler' AND @ob_get_length() !== false)
Example #4
0
{$lang_takeupload_target[$langfolder_array[$i]]['mail_hi']}

{$lang_takeupload_target[$langfolder_array[$i]]['mail_new_torrent']}

{$lang_takeupload_target[$langfolder_array[$i]]['mail_torrent_name']}{$torrent}
{$lang_takeupload_target[$langfolder_array[$i]]['mail_torrent_size']}{$size}
{$lang_takeupload_target[$langfolder_array[$i]]['mail_torrent_category']}{$cat}
{$lang_takeupload_target[$langfolder_array[$i]]['mail_torrent_uppedby']}{$uploader}

{$lang_takeupload_target[$langfolder_array[$i]]['mail_torrent_description']}
-------------------------------------------------------------------------------------------------------------------------
{$description}
-------------------------------------------------------------------------------------------------------------------------

{$lang_takeupload_target[$langfolder_array[$i]]['mail_torrent']}<b><a href="javascript:void(null)" onclick="window.open('http://{$BASEURL}/details.php?id={$id}&hit=1')">{$lang_takeupload_target[$langfolder_array[$i]]['mail_here']}</a></b><br />
http://{$BASEURL}/details.php?id={$id}&hit=1

------{$lang_takeupload_target[$langfolder_array[$i]]['mail_yours']}
{$lang_takeupload_target[$langfolder_array[$i]]['mail_team']}
EOD;
        $body_arr[$langfolder_array[$i]] = str_replace("<br />", "<br />", nl2br($body_arr[$langfolder_array[$i]]));
        $i++;
    }
    while ($arr = mysql_fetch_array($res)) {
        $current_lang = $arr["lang"];
        $to = $arr["email"];
        sent_mail($to, $SITENAME, $SITEEMAIL, change_email_encode(validlang($current_lang), $lang_takeupload_target[validlang($current_lang)]['mail_title'] . $torrent), change_email_encode(validlang($current_lang), $body_arr[validlang($current_lang)]), "torrent upload", false, false, '', get_email_encode(validlang($current_lang)), "eYou");
    }
}
header("Location: " . get_protocol_prefix() . "{$BASEURL}/details.php?id=" . htmlspecialchars($id) . "&uploaded=1");
Example #5
0
require_once "include/bittorrent.php";
if (!preg_match(':^/(\\d{1,10})/([\\w]{32})/(.+)$:', $_SERVER["PATH_INFO"], $matches)) {
    httperr();
}
$id = 0 + $matches[1];
$md5 = $matches[2];
$email = urldecode($matches[3]);
//print($email);
//die();
if (!$id) {
    httperr();
}
dbconn();
$res = sql_query("SELECT editsecret FROM users WHERE id = {$id}");
$row = mysql_fetch_array($res);
if (!$row) {
    httperr();
}
$sec = hash_pad($row["editsecret"]);
if (preg_match('/^ *$/s', $sec)) {
    httperr();
}
if ($md5 != md5($sec . $email . $sec)) {
    httperr();
}
sql_query("UPDATE users SET editsecret='', email=" . sqlesc($email) . " WHERE id={$id} AND editsecret=" . sqlesc($row["editsecret"]));
if (!mysql_affected_rows()) {
    httperr();
}
header("Refresh: 0; url=" . get_protocol_prefix() . "{$BASEURL}/usercp.php?action=security&type=saved");
Example #6
0
</div>
</div>
<?php 
}
$action = $_GET['action'];
if ($action == 'del') {
    $id = 0 + $_GET['id'];
    if (!$id) {
        stderr($lang_admanage['std_error'], $lang_admanage['std_invalid_id']);
    }
    $res = sql_query("SELECT * FROM advertisements WHERE id = " . sqlesc($id) . " LIMIT 1");
    if ($row = mysql_fetch_array($res)) {
        sql_query("DELETE FROM advertisements WHERE id = " . sqlesc($row['id'])) or sqlerr(__FILE__, __LINE__);
    }
    $Cache->delete_value('current_ad_array', false);
    header("Location: " . get_protocol_prefix() . $BASEURL . "/admanage.php");
    die;
} elseif ($action == 'edit') {
    $id = 0 + $_GET['id'];
    if (!$id) {
        stderr($lang_admanage['std_error'], $lang_admanage['std_invalid_id']);
    } else {
        $res = sql_query("SELECT * FROM advertisements WHERE id = " . sqlesc($id) . " LIMIT 1");
        if (!($row = mysql_fetch_array($res))) {
            stderr($lang_admanage['std_error'], $lang_admanage['std_invalid_id']);
        } else {
            $position = $row['position'];
            stdhead($lang_admanage['head_edit_ad']);
            print "<form method=\"post\" action=\"?action=submit&amp;position=" . $position . "\">";
            print "<input type=\"hidden\" name=\"isedit\" value=\"1\" />";
            print "<input type=\"hidden\" name=\"id\" value=\"" . $id . "\" />";
Example #7
0
    $usern = $arr["username"];
    $id = $arr["id"];
    $title = $SITENAME . $lang_confirm_resend['mail_title'];
    $body = <<<EOD
{$lang_confirm_resend['mail_one']}{$usern}{$lang_confirm_resend['mail_two']}({$email}){$lang_confirm_resend['mail_three']}{$ip}{$lang_confirm_resend['mail_four']}
<b><a href="javascript:void(null)" onclick="window.open('http://{$BASEURL}/confirm.php?id={$id}&secret={$psecret}')">
{$lang_confirm_resend['mail_this_link']} </a></b><br />
http://{$BASEURL}/confirm.php?id={$id}&secret={$psecret}
{$lang_confirm_resend['mail_four_1']}
<b><a href="javascript:void(null)" onclick="window.open('http://{$BASEURL}/confirm_resend.php')">{$lang_confirm_resend['mail_here']}</a></b><br />
http://{$BASEURL}/confirm_resend.php
<br />
{$lang_confirm_resend['mail_five']}
EOD;
    sent_mail($email, $SITENAME, $SITEEMAIL, change_email_encode(get_langfolder_cookie(), $title), change_email_encode(get_langfolder_cookie(), $body), "signup", false, false, '', get_email_encode(get_langfolder_cookie()));
    header("Location: " . get_protocol_prefix() . "{$BASEURL}/ok.php?type=signup&email=" . rawurlencode($email));
} else {
    stdhead();
    $s = "<select name=\"sitelanguage\" onchange='submit()'>\n";
    $langs = langlist("site_lang");
    foreach ($langs as $row) {
        if ($row["site_lang_folder"] == get_langfolder_cookie()) {
            $se = " selected=\"selected\"";
        } else {
            $se = "";
        }
        $s .= "<option value=\"" . $row["id"] . "\" " . $se . ">" . htmlspecialchars($row["lang_name"]) . "</option>\n";
    }
    $s .= "\n</select>";
    ?>
	<form method="get" action="<?php 
}
//move_uploaded_file($tmpname, "$torrent_dir/$id.torrent");
$fp = fopen("{$torrent_dir}/{$id}.torrent", "w");
if ($fp) {
    @fwrite($fp, benc($dict), strlen(benc($dict)));
    fclose($fp);
}
//===add karma
KPS("+", $uploadtorrent_bonus, $CURUSER["id"]);
//===end
write_log("Torrent {$id} ({$torrent}) was uploaded by {$anon} , by autotransfer");
//===notify people who voted on offer thanks CoLdFuSiOn :)
if ($is_offer) {
    $res = sql_query("SELECT `userid` FROM `offervotes` WHERE `userid` != " . $CURUSER["id"] . " AND `offerid` = " . sqlesc($offerid) . " AND `vote` = 'yeah'") or sqlerr(__FILE__, __LINE__);
    while ($row = mysql_fetch_assoc($res)) {
        $pn_msg = $lang_takeupload_target[get_user_lang($row["userid"])]['msg_offer_you_voted'] . $torrent . $lang_takeupload_target[get_user_lang($row["userid"])]['msg_was_uploaded_by'] . $CURUSER["username"] . $lang_takeupload_target[get_user_lang($row["userid"])]['msg_you_can_download'] . "[url=" . get_protocol_prefix() . "{$BASEURL}/details.php?id={$id}&hit=1]" . $lang_takeupload_target[get_user_lang($row["userid"])]['msg_here'] . "[/url]";
        //=== use this if you DO have subject in your PMs
        $subject = $lang_takeupload_target[get_user_lang($row["userid"])]['msg_offer'] . $torrent . $lang_takeupload_target[get_user_lang($row["userid"])]['msg_was_just_uploaded'];
        //=== use this if you DO NOT have subject in your PMs
        //$some_variable .= "(0, $row[userid], '" . date("Y-m-d H:i:s") . "', " . sqlesc($pn_msg) . ")";
        //=== use this if you DO have subject in your PMs
        sql_query("INSERT INTO messages (sender, subject, receiver, added, msg) VALUES (0, " . sqlesc($subject) . ", {$row['userid']}, " . sqlesc(date("Y-m-d H:i:s")) . ", " . sqlesc($pn_msg) . ")") or sqlerr(__FILE__, __LINE__);
        //=== use this if you do NOT have subject in your PMs
        //sql_query("INSERT INTO messages (sender, receiver, added, msg) VALUES ".$some_variable."") or sqlerr(__FILE__, __LINE__);
        //===end
    }
    //=== delete all offer stuff
    sql_query("DELETE FROM offers WHERE id = " . $offerid);
    sql_query("DELETE FROM offervotes WHERE offerid = " . $offerid);
    sql_query("DELETE FROM comments WHERE offer = " . $offerid);
}
Example #9
0
$count = $row[0];
$perpage = 10;
list($pagertop, $pagerbottom, $limit) = pager($perpage, $count, $_SERVER["PHP_SELF"] . "?out=" . $_GET["out"] . "&");
print "<h1>BitBucket Log</h1>\n";
print "Total Images Stored: {$count}";
echo $pagertop;
$res = sql_query("SELECT * FROM bitbucket ORDER BY added DESC {$limit}") or sqlerr(__FILE__, __LINE__);
if (mysql_num_rows($res) == 0) {
    print "<b>BitBucket Log is empty</b>\n";
} else {
    print "<table align='center' border='0' cellspacing='0' cellpadding='5'>\n";
    while ($arr = mysql_fetch_assoc($res)) {
        $date = substr($arr['added'], 0, strpos($arr['added'], " "));
        $time = substr($arr['added'], strpos($arr['added'], " ") + 1);
        $name = $arr["name"];
        list($width, $height, $type, $attr) = getimagesize("" . get_protocol_prefix() . "{$BASEURL}/{$bitbucket}/{$name}");
        $url = str_replace(" ", "%20", htmlspecialchars("{$bitbucket}/{$name}"));
        print "<tr>";
        print "<td><center><a href={$url}><img src=\"" . $url . "\" border=0 onLoad='SetSize(this, 400)'></a></center>";
        print "Uploaded by:  " . get_username($arr[owner]) . "<br />";
        print "(#{$arr['id']}) Filename: {$name} ({$width}&nbsp;x&nbsp;{$height})";
        if (get_user_class() >= UC_MODERATOR) {
            print " <b><a href=?delete={$arr['id']}>[Delete]</a></b><br />";
        }
        print "Added: {$date} {$time}";
        print "</tr>";
    }
    print "</table>";
}
echo $pagerbottom;
stdfoot();
Example #10
0
    ?>
<p><?php 
    echo $lang_login['p_forget_pass_recover'];
    ?>
</p>
<p><?php 
    echo $lang_login['p_resend_confirm'];
    ?>
</p>
<?php 
}
if ($showhelpbox_main != 'no') {
    ?>
<table width="700" class="main" border="0" cellspacing="0" cellpadding="0"><tr><td class="embedded">
<h2><?php 
    echo $lang_login['text_helpbox'];
    ?>
<font class="small"> - <?php 
    echo $lang_login['text_helpbox_note'];
    ?>
<font id= "waittime" color="red"></font></h2>
<?php 
    print "<table width='100%' border='1' cellspacing='0' cellpadding='1'><tr><td class=\"text\">\n";
    print "<iframe src='" . get_protocol_prefix() . $BASEURL . "/shoutbox.php?type=helpbox' width='650' height='180' frameborder='0' name='sbox' marginwidth='0' marginheight='0'></iframe><br /><br />\n";
    print "<form action='" . get_protocol_prefix() . $BASEURL . "/shoutbox.php' id='helpbox' method='get' target='sbox' name='shbox'>\n";
    print $lang_login['text_message'] . "<input type='text' id=\"hbtext\" name='shbox_text' autocomplete='off' style='width: 500px; border: 1px solid gray' ><input type='submit' id='hbsubmit' class='btn' name='shout' value=\"" . $lang_login['sumbit_shout'] . "\" /><input type='reset' class='btn' value=" . $lang_login['submit_clear'] . " /> <input type='hidden' name='sent' value='yes'><input type='hidden' name='type' value='helpbox' />\n";
    print "<div id=sbword style=\"display: none\">" . $lang_login['sumbit_shout'] . "</div>";
    print smile_row("shbox", "shbox_text");
    print "</td></tr></table></form></td></tr></table>";
}
stdfoot();
Example #11
0
<?php

$lang_linksmanage = array('head_apply_for_links' => "링크 신청하기", 'text_apply_for_links' => "링크 신청하기", 'text_rules' => "링크 교환에 대한 규칙:", 'text_rule_one' => "1. 먼저 우리 사이트의 링크 <a href=\"" . get_protocol_prefix() . $BASEURL . "\" title=\"{$SLOGAN}\" target=\"_blank\">{$SITENAME}</a> 를 님의 사이트에 올려주세요.", 'text_rule_two' => "2. 당신의 사이트는<strong>불법적인 곳이 아니어야 합니다</strong>. {$SITENAME} 사이트의 관리자는 당신의 사이트에 대한 어떤 책임도 없습니다.", 'text_rule_three' => "3. 우리 {$SITENAME} 의 모든 링크는 텍스트로만 가능합니다.", 'text_rule_four' => "4. 당신의 사이트는 하루 50명 이상 방문, 최수 200명 이상의 회원이 있어야만 합니다.", 'text_rule_five' => "5. 우리는 {$SITENAME}  의 링크를 <strong>사전 통지없이 수정, 삭제할 수 있습니다.</strong>", 'text_rule_six' => "6. 위와 같은 규정을 확인하셨다면 언제든지 {$SITENAME} 와의 링크 교환을 신청해주세요. 그렇지만 우리가 모든 요청을 받아들일 수 있을지는 모르겠습니다.", 'text_red_star_required' => "<p >빨간 별표 (<font color=red>*</font>) 로 표시된 필드는 반드시 입력하셔야 합니다.</p>\n", 'text_site_name' => "사이트 이름", 'text_url' => "URL", 'text_title' => "제목", 'text_title_note' => "이것은 링크에 대한 풍선도움말(툴팁)을 표시하는데 사용됩니다. 예. <a href='http://www.nexusphp.com' title='The Ultimate File Sharing Solution' target='_blank'><b>NexusPHP</b></a>", 'text_administrator' => "사이트 관리자", 'text_administrator_note' => "우리는 사이트 관리자의 <b>본명</b>을 알아야만 합니다.", 'text_email' => "이메일", 'text_reason' => "이유", 'submit_okay' => "확인", 'submit_reset' => "취소", 'std_error' => "에러", 'std_no_sitename' => "사이트 이름은 꼭 쓰셔야 합니다.", 'std_no_url' => "URL 은 꼭 쓰셔야 합니다.", 'std_no_admin' => "관리자는 꼭 쓰셔야 합니다. 우린 관리자의 이름을 알고 싶습니다.", 'std_no_email' => "이메일 주소도 꼭 쓰셔야 합니다.", 'std_invalid_email' => "이메일 주소가 잘못 되었습니다.", 'std_no_reason' => "입력하실 수 없는 항목이 있따면 저희에게 이유를 알려주세요.", 'std_reason_too_short' => "이유가 너무 짧네요. 좀더 자세히 얘기해주세요.", 'std_success' => "성공", 'std_success_note' => "요청하신 내용이 보내졌습니다. 이제 대답을 기다려주세요.", 'text_sitename_note' => "요청하신 사이트의 이름. 예. <i>NexusPHP</i>", 'text_url_note' => "e.g. <i>http://www.nexusphp.com</i>", 'text_email_note' => "관리자 이메일 주소", 'std_missing_form_data' => "Missing form data.", 'std_unable_creating_new_link' => "Unable to create new link.", 'std_links_manage' => "Links Manage", 'text_add_link' => "Add Link", 'text_manage_links' => "Manage Links", 'text_modify' => "Modify", 'text_edit' => "Edit", 'text_delete' => "Delete", 'text_no_links_found' => "Sorry, no links were found!", 'text_edit_link' => "Edit Link", 'js_sure_to_delete_link' => "Are you sure you want to delete this link?");
Example #12
0
function loggedinorreturn($mainpage = false)
{
    global $CURUSER, $BASEURL;
    if (!$CURUSER) {
        if ($mainpage) {
            header("Location: " . get_protocol_prefix() . "{$BASEURL}/login.php");
        } else {
            $to = $_SERVER["REQUEST_URI"];
            $to = basename($to);
            header("Location: " . get_protocol_prefix() . "{$BASEURL}/login.php?returnto=" . rawurlencode($to));
        }
        exit;
    }
}
Example #13
0
        ?>
.png" /></a></div><div style="padding-top: 10px"><?php 
        echo $lang_promotionlink['text_bbcode_userbar_note'];
        ?>
</div></td></tr>
<tr><td class="colfollow"><?php 
        echo $lang_promotionlink['row_bbcode_userbar_alt'];
        ?>
</td><td class="colfollow"><textarea cols="50" rows="4"><?php 
        echo htmlspecialchars("[url=" . $yourlink . "][img]" . get_protocol_prefix() . $BASEURL . "/cc98bar.php/id" . $CURUSER['id'] . ".png[/img][/url]");
        ?>
</textarea></td><td class="colfollow"><div><a href="<?php 
        echo $yourlink;
        ?>
"><img src="<?php 
        echo get_protocol_prefix() . $BASEURL;
        ?>
/cc98bar.php/id<?php 
        echo $CURUSER['id'];
        ?>
.png" /></a></div><div style="padding-top: 10px"><?php 
        echo $lang_promotionlink['text_bbcode_userbar_alt_note'];
        ?>
</div></td></tr>
<?php 
    }
    ?>
</table>
</div>
<?php 
    end_frame();
Example #14
0
            sql_query("INSERT INTO messages (sender, receiver, subject, msg, added) VALUES (0, {$userid}, {$subject}, {$msg}, {$added})") or sqlerr(__FILE__, __LINE__);
        } else {
            $modcomment = date("Y-m-d") . " - Upload disabled by " . $CURUSER['username'] . ".\n" . $modcomment;
            $subject = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_upload_rights_removed']);
            $msg = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_your_upload_rights_removed'] . $CURUSER['username'] . $lang_modtask_target[get_user_lang($userid)]['msg_probably_reason_two']);
            $added = sqlesc(date("Y-m-d H:i:s"));
            sql_query("INSERT INTO messages (sender, receiver, subject, msg, added) VALUES (0, {$userid}, {$subject}, {$msg}, {$added})") or sqlerr(__FILE__, __LINE__);
        }
    }
    if ($downloadpos != $curdownloadpos) {
        if ($downloadpos == 'yes') {
            $modcomment = date("Y-m-d") . " - Download enabled by " . $CURUSER['username'] . ".\n" . $modcomment;
            $subject = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_download_rights_restored']);
            $msg = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_your_download_rights_restored'] . $CURUSER['username'] . $lang_modtask_target[get_user_lang($userid)]['msg_you_can_download']);
            $added = sqlesc(date("Y-m-d H:i:s"));
            sql_query("INSERT INTO messages (sender, receiver, subject, msg, added) VALUES (0, {$userid}, {$subject}, {$msg}, {$added})") or sqlerr(__FILE__, __LINE__);
        } else {
            $modcomment = date("Y-m-d") . " - Download disabled by " . $CURUSER['username'] . ".\n" . $modcomment;
            $subject = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_download_rights_removed']);
            $msg = sqlesc($lang_modtask_target[get_user_lang($userid)]['msg_your_download_rights_removed'] . $CURUSER['username'] . $lang_modtask_target[get_user_lang($userid)]['msg_probably_reason_three']);
            $added = sqlesc(date("Y-m-d H:i:s"));
            sql_query("INSERT INTO messages (sender, receiver, subject, msg, added) VALUES (0, {$userid}, {$subject}, {$msg}, {$added})") or sqlerr(__FILE__, __LINE__);
        }
    }
    $updateset[] = "modcomment = " . sqlesc($modcomment);
    sql_query("UPDATE users SET  " . implode(", ", $updateset) . " WHERE id={$userid}") or sqlerr(__FILE__, __LINE__);
    $returnto = htmlspecialchars($_POST["returnto"]);
    header("Location: " . get_protocol_prefix() . "{$BASEURL}/{$returnto}");
    die;
}
puke();
Example #15
0
                if ($userid == $useridgift) {
                    stdmsg($lang_mybonus['text_huh'], $lang_mybonus['text_karma_self_giving_warning'], 0);
                    stdfoot();
                    die;
                }
                if (!$useridgift) {
                    stdmsg($lang_mybonus['text_error'], $lang_mybonus['text_receiver_not_exists'], 0);
                    stdfoot();
                    die;
                }
                sql_query("UPDATE users SET seedbonus = seedbonus - {$points}, bonuscomment = " . sqlesc($bonuscomment) . " WHERE id = " . sqlesc($userid)) or sqlerr(__FILE__, __LINE__);
                sql_query("UPDATE users SET seedbonus = seedbonus + {$aftertaxpoint}, bonuscomment = " . sqlesc($newreceiverbonuscomment) . " WHERE id = " . sqlesc($useridgift));
                //===send message
                $subject = sqlesc($lang_mybonus_target[get_user_lang($useridgift)]['msg_someone_loves_you']);
                $added = sqlesc(date("Y-m-d H:i:s"));
                $msg = $lang_mybonus_target[get_user_lang($useridgift)]['msg_you_have_been_given'] . $points2 . $lang_mybonus_target[get_user_lang($useridgift)]['msg_after_tax'] . $points2receiver . $lang_mybonus_target[get_user_lang($useridgift)]['msg_karma_points_by'] . $CURUSER['username'];
                if ($message) {
                    $msg .= "\n" . $lang_mybonus_target[get_user_lang($useridgift)]['msg_personal_message_from'] . $CURUSER['username'] . $lang_mybonus_target[get_user_lang($useridgift)]['msg_colon'] . $message;
                }
                $msg = sqlesc($msg);
                sql_query("INSERT INTO messages (sender, subject, receiver, msg, added) VALUES(0, {$subject}, {$useridgift}, {$msg}, {$added})") or sqlerr(__FILE__, __LINE__);
                $usernamegift = unesc($_POST["username"]);
                redirect("" . get_protocol_prefix() . "{$BASEURL}/mybonus.php?do=transfer");
            } else {
                print "<table width=\"940\"><tr><td class=\"colhead\" align=\"left\" colspan=\"2\"><h1>" . $lang_mybonus['text_oups'] . "</h1></td></tr>";
                print "<tr><td align=\"left\"></td><td align=\"left\">" . $lang_mybonus['text_not_enough_karma'] . "<br /><br /></td></tr></table>";
            }
        }
    }
}
stdfoot();
Example #16
0
<?php

$lang_linksmanage = array('head_apply_for_links' => "申請鏈接", 'text_apply_for_links' => "申請鏈接", 'text_rules' => "交換鏈接規則:", 'text_rule_one' => "1.申請人員請先將本站的鏈接<a href=\"" . get_protocol_prefix() . $BASEURL . "\" title=\"{$SLOGAN}\">" . $SITENAME . "</a>放置在其網站,然后再向我們提出申請。 ", 'text_rule_two' => "2.申請鏈接的網站<strong>不得</strong>涉及任何違法內容。" . $SITENAME . "的管理員不對申請網站的任何行為責任。", 'text_rule_three' => "3.本站所做鏈接均為文字鏈接。", 'text_rule_four' => "4.申請網站至少要有200名注冊用戶,或者平均日訪問人數不少于50。", 'text_rule_five' => "5.本站" . $SITENAME . "保留可不經過任何通知,自由<strong>修改或刪除</strong>本站上的鏈接的權力。", 'text_rule_six' => "6.如果你的網站符合以上條款,歡迎向我們" . $SITENAME . "提出交換鏈接的申請。然而,我們不保證接受所有申請。", 'text_red_star_required' => "紅星號(<font color='red'>*</font>)標記的區域必須填寫", 'text_site_name' => "網站名", 'text_url' => "鏈接地址", 'text_title' => "標語", 'text_title_note' => "標語將顯示在鏈接的提示上,如<a href='http://www.nexusphp.com' title='終極檔案共用解決方案' target='_blank'><b>NexusPHP</b></a>", 'text_administrator' => "管理員", 'text_administrator_note' => "要求填寫管理員的<b>真實姓名</b>", 'text_email' => "郵箱", 'text_reason' => "理由", 'submit_okay' => "確定", 'submit_reset' => "清空", 'std_error' => "錯誤", 'std_no_sitename' => "網站名不能為空。", 'std_no_url' => "鏈接地址不能為空。", 'std_no_admin' => "管理員不能為空。請填寫管理員的姓名。", 'std_no_email' => "郵箱地址不能為空。", 'std_invalid_email' => "郵箱地址無效。", 'std_no_reason' => "理由不能為空。請填寫申請理由。", 'std_reason_too_short' => "理由過短。請詳細填寫。", 'std_success' => "成功", 'std_success_note' => "你的申請已成功提交。請等待我們的回復。", 'text_sitename_note' => "申請網站的名字,如<i>NexusPHP</i>", 'text_url_note' => "如<i>http://www.nexusphp.com</i>", 'text_email_note' => "請填寫申請網站的管理員的郵箱地址,便于我們聯系", 'js_sure_to_delete_link' => "你確定要刪除此鏈接?");
?>

Example #17
0
<?php

require "include/bittorrent.php";
dbconn();
if (!$CURUSER) {
    Header("Location: " . get_protocol_prefix() . "{$BASEURL}/");
    die;
}
$filename = $_GET["subid"];
$dirname = $_GET["torrentid"];
if (!$filename || !$dirname) {
    die("File name missing\n");
}
$filename = 0 + $filename;
$dirname = 0 + $dirname;
$res = sql_query("SELECT * FROM subs WHERE id={$filename}") or sqlerr(__FILE__, __LINE__);
$arr = mysql_fetch_assoc($res);
if (!$arr) {
    die("Not found\n");
}
sql_query("UPDATE subs SET hits=hits+1 WHERE id={$filename}") or sqlerr(__FILE__, __LINE__);
$file = "{$SUBSPATH}/{$dirname}/{$filename}.{$arr['ext']}";
if (!is_file($file)) {
    die("File not found\n");
}
$f = fopen($file, "rb");
if (!$f) {
    die("Cannot open file\n");
}
header("Content-Length: " . filesize($file));
header("Content-Type: application/octet-stream");
Example #18
0
    }
}
get_where("categories", "category", "cat");
get_where("sources", "source", "sou");
get_where("media", "medium", "med");
get_where("codecs", "codec", "cod");
get_where("standards", "standard", "sta");
get_where("processings", "processing", "pro");
get_where("teams", "team", "tea");
get_where("audiocodecs", "audiocodec", "aud");
if ($where) {
    $where = "WHERE " . $where;
}
$query = "SELECT torrents.id, torrents.category, torrents.name, torrents.small_descr, torrents.descr, torrents.info_hash, torrents.size, torrents.added, torrents.anonymous, users.username AS username, categories.id AS cat_id, categories.name AS cat_name FROM torrents LEFT JOIN categories ON category = categories.id LEFT JOIN users ON torrents.owner = users.id {$where} ORDER BY torrents.added DESC LIMIT {$limit}";
$res = sql_query($query) or die(mysql_error());
$url = get_protocol_prefix() . $BASEURL;
$year = substr($datefounded, 0, 4);
$yearfounded = $year ? $year : 2007;
$copyright = "Copyright (c) " . $SITENAME . " " . (date("Y") != $yearfounded ? $yearfounded . "-" : "") . date("Y") . ", all rights reserved";
header("Content-type: text/xml");
print "<?xml version=\"1.0\" encoding=\"utf-8\"?>";
//The commented version passed feed validator at http://www.feedvalidator.org
/*print('
<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom">');*/
print '
<rss version="2.0">';
print '
	<channel>
		<title>' . addslashes($SITENAME . ' Torrents') . '</title>
		<link><![CDATA[' . $url . ']]></link>
		<description><![CDATA[' . addslashes('Latest torrents from ' . $SITENAME . ' - ' . htmlspecialchars($SLOGAN)) . ']]></description>
Example #19
0
    // update forum
    $forumid = get_single_value("topics", "forumid", "WHERE id=" . sqlesc($topicid));
    if (!$forumid) {
        die;
    } else {
        sql_query("UPDATE forums SET postcount=postcount-1 WHERE id=" . sqlesc($forumid));
    }
    $forum_last_replied_topic_row = $Cache->get_value('forum_' . $forumid . '_last_replied_topic_content');
    if ($forum_last_replied_topic_row && $forum_last_replied_topic_row['lastpost'] == $postid) {
        $Cache->delete_value('forum_' . $forumid . '_last_replied_topic_content');
    }
    //------- Update topic
    update_topic_last_post($topicid);
    //===remove karma
    KPS("-", $makepost_bonus, $userid);
    header("Location: " . get_protocol_prefix() . "{$BASEURL}/forums.php?action=viewtopic&topicid={$topicid}{$redirtopost}");
    die;
}
//-------- Action: Set locked on/off
if ($action == "setlocked") {
    $topicid = 0 + $_POST["topicid"];
    $ismod = is_forum_moderator($topicid, 'topic');
    if (!$topicid || get_user_class() < $postmanage_class && !$ismod) {
        permissiondenied();
    }
    $locked = sqlesc($_POST["locked"]);
    sql_query("UPDATE topics SET locked={$locked} WHERE id={$topicid}") or sqlerr(__FILE__, __LINE__);
    header("Location: {$_POST['returnto']}");
    die;
}
if ($action == 'hltopic') {
Example #20
0
             if ($offeruptimeout_main) {
                 $timeouthour = floor($offeruptimeout_main / 3600);
                 $timeoutnote = $lang_offers_target[get_user_lang($arr["userid"])]['msg_you_must_upload_in'] . $timeouthour . $lang_offers_target[get_user_lang($arr["userid"])]['msg_hours_otherwise'];
             } else {
                 $timeoutnote = "";
             }
             sql_query("UPDATE offers SET allowed='allowed', allowedtime=" . sqlesc($finishtime) . " WHERE id=" . sqlesc($offerid)) or sqlerr(__FILE__, __LINE__);
             $msg = $lang_offers_target[get_user_lang($arr['userid'])]['msg_offer_voted_on'] . "[b][url=" . get_protocol_prefix() . $BASEURL . "/offers.php?id={$offerid}&off_details=1]" . $arr[name] . "[/url][/b]." . $lang_offers_target[get_user_lang($arr['userid'])]['msg_find_offer_option'] . $timeoutnote;
             $subject = $lang_offers_target[get_user_lang($arr['userid'])]['msg_your_offer_allowed'];
             sql_query("INSERT INTO messages (sender, receiver, added, msg, subject) VALUES(0, {$arr['userid']}, " . sqlesc(date("Y-m-d H:i:s")) . ", " . sqlesc($msg) . ", " . sqlesc($subject) . ")") or sqlerr(__FILE__, __LINE__);
             write_log("System allowed offer {$arr['name']}", 'normal');
         }
         //denied and send offer voted off message
         if ($against - $yeah >= $minoffervotes && $ya_arr['allowed'] != "denied") {
             sql_query("UPDATE offers SET allowed='denied' WHERE id=" . sqlesc($offerid)) or sqlerr(__FILE__, __LINE__);
             $msg = $lang_offers_target[get_user_lang($arr['userid'])]['msg_offer_voted_off'] . "[b][url=" . get_protocol_prefix() . $BASEURL . "/offers.php?id={$offid}&off_details=1]" . $arr[name] . "[/url][/b]." . $lang_offers_target[get_user_lang($arr['userid'])]['msg_offer_deleted'];
             $subject = $lang_offers_target[get_user_lang($arr['userid'])]['msg_offer_deleted'];
             sql_query("INSERT INTO messages (sender, receiver, added, msg, subject) VALUES(0, {$arr['userid']}, " . sqlesc(date("Y-m-d H:i:s")) . ", " . sqlesc($msg) . ", " . sqlesc($subject) . ")") or sqlerr(__FILE__, __LINE__);
             write_log("System denied offer {$arr['name']}", 'normal');
         }
         sql_query("INSERT INTO offervotes (offerid, userid, vote) VALUES({$offerid}, {$userid}, " . sqlesc($vote) . ")") or sqlerr(__FILE__, __LINE__);
         KPS("+", $offervote_bonus, $CURUSER["id"]);
         stdhead($lang_offers['head_vote_for_offer']);
         print "<h1 align=center>" . $lang_offers['std_vote_accepted'] . "</h1>";
         print $lang_offers['std_vote_accepted_note'] . "<a  href=offers.php?id={$offerid}&off_details=1>" . $lang_offers['std_back_to_offer_detail'];
         stdfoot();
         die;
     }
 } else {
     stderr($lang_offers['std_error'], $lang_offers['std_smell_rat']);
 }
Example #21
0
        }
        if ($row = mysql_fetch_array($result)) {
            //IP
            log_ip($row['id']);
            //密码正确保存cookie
            makecookie($row['id'], isset($_POST['remember']));
            //做跳转
            header('Location: ' . get_protocol_prefix() . "{$BASEURL}/pannel.php");
        } else {
            $err_msg = '抱歉!发生了我们认为不可能发生的错误,请与客服联系!';
            break;
        }
    } while (false);
} else {
    if (checklogin(False) == True) {
        header('Location: ' . get_protocol_prefix() . "{$BASEURL}/pannel.php");
    }
}
?>



<html lang="en">
<head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <meta name="description" content="">
    <meta name="author" content="">
    <link rel="icon" href="./favicon.ico">
    <title>MakeDieSS</title>
Example #22
0
			$res = sql_query("SELECT * FROM polls ORDER BY added DESC LIMIT 1") or sqlerr(__FILE__, __LINE__);
			$arr = mysql_fetch_assoc($res) or die($lang_index['std_no_poll']);
			$pollid = $arr["id"];

			$hasvoted = get_row_count("pollanswers","WHERE pollid=".sqlesc($pollid)." && userid=".sqlesc($CURUSER["id"]));
			if ($hasvoted)
				stderr($lang_index['std_error'],$lang_index['std_duplicate_votes_denied']);
			sql_query("INSERT INTO pollanswers VALUES(0, ".sqlesc($pollid).", ".sqlesc($CURUSER["id"]).", ".sqlesc($choice).")") or sqlerr(__FILE__, __LINE__);
			$Cache->delete_value('current_poll_content');
			$Cache->delete_value('current_poll_result', true);
			if (mysql_affected_rows() != 1)
			stderr($lang_index['std_error'], $lang_index['std_vote_not_counted']);
			//add karma
			KPS("+",$pollvote_bonus,$userid);

			header("Location: " . get_protocol_prefix() . "$BASEURL/");
			die;
		}
		else
		stderr($lang_index['std_error'], $lang_index['std_option_unselected']);
	}
}
require ('header.php');
exit;
stdhead($lang_index['head_home']);
begin_main_frame();
function ipv6ip($ip)
{
        if (!ip2long($ip)) //IPv6
	{return true;}
        if (!empty($ip) && $ip == long2ip(ip2long($ip)))
Example #23
0
     if (get_user_class() < $chrmanage_class) {
         stderr($lang_log['std_error'], $lang_log['std_permission_denied']);
     }
     int_check($pollid, true);
     $sure = $_GET["sure"];
     if (!$sure) {
         stderr($lang_log['std_delete_poll'], $lang_log['std_delete_poll_confirmation'] . "<a href=?action=poll&do=delete&pollid={$pollid}&returnto={$returnto}&sure=1>" . $lang_log['std_here_if_sure'], false);
     }
     sql_query("DELETE FROM pollanswers WHERE pollid = {$pollid}") or sqlerr();
     sql_query("DELETE FROM polls WHERE id = {$pollid}") or sqlerr();
     $Cache->delete_value('current_poll_content');
     $Cache->delete_value('current_poll_result', true);
     if ($returnto == "main") {
         header("Location: " . get_protocol_prefix() . "{$BASEURL}");
     } else {
         header("Location: " . get_protocol_prefix() . "{$BASEURL}/log.php?action=poll&deleted=1");
     }
     die;
 }
 $rows = sql_query("SELECT COUNT(*) FROM polls") or sqlerr();
 $row = mysql_fetch_row($rows);
 $pollcount = $row[0];
 if ($pollcount == 0) {
     stderr($lang_log['std_sorry'], $lang_log['std_no_polls']);
 }
 $polls = sql_query("SELECT * FROM polls ORDER BY id DESC LIMIT 1," . ($pollcount - 1)) or sqlerr();
 stdhead($lang_log['head_previous_polls']);
 logmenu("poll");
 print "<table border=1 cellspacing=0 width=940 cellpadding=5>\n";
 //print("<tr><td class=colhead align=center>".$lang_log['text_previous_polls']."</td></tr>\n");
 function srt($a, $b)
Example #24
0
    }
    if ($_SERVER['REQUEST_METHOD'] == 'POST') {
        $body = $_POST['body'];
        if ($body == "") {
            stderr($lang_fun['std_error'], $lang_fun['std_body_is_empty']);
        }
        $title = htmlspecialchars($_POST['subject']);
        if ($title == "") {
            stderr($lang_fun['std_error'], $lang_fun['std_title_is_empty']);
        }
        $body = sqlesc($body);
        $title = sqlesc($title);
        sql_query("UPDATE fun SET body={$body}, title={$title} WHERE id=" . sqlesc($id)) or sqlerr(__FILE__, __LINE__);
        $Cache->delete_value('current_fun_content');
        $Cache->delete_value('current_fun', true);
        header("Location: " . get_protocol_prefix() . "{$BASEURL}/index.php");
    } else {
        stdhead($lang_fun['head_edit_fun']);
        begin_main_frame();
        $title = $lang_fun['text_edit_fun'];
        print "<form id=compose method=post name=\"compose\" action=?action=edit&id=" . $id . ">\n";
        begin_compose($title, 'edit', $arr['body'], true, $arr['title']);
        end_compose();
        end_main_frame();
    }
    stdfoot();
}
if ($action == 'ban') {
    if (get_user_class() < $funmanage_class) {
        permissiondenied();
    }
Example #25
0
$res = sql_query("SELECT COUNT(*) FROM locations " . $wherea);
$row = mysql_fetch_array($res);
$count = $row[0];
$perpage = 50;
list($pagertop, $pagerbottom, $limit) = pager($perpage, $count, "location.php?");
$query = "SELECT * FROM locations " . $wherea . " ORDER BY name ASC, start_ip ASC " . $limit;
$sql = sql_query($query);
$maxlen_sub_location = 40;
while ($row = mysql_fetch_array($sql)) {
    $id = $row['id'];
    $name = $row['name'];
    $flagpic = $row['flagpic'];
    $location_main = $row['location_main'];
    $location_sub = $row['location_sub'];
    $start_ip = $row['start_ip'];
    $end_ip = $row['end_ip'];
    $theory_upspeed = $row['theory_upspeed'];
    $practical_upspeed = $row['practical_upspeed'];
    $theory_downspeed = $row['theory_downspeed'];
    $practical_downspeed = $row['practical_downspeed'];
    $count_location_sub = strlen($location_sub);
    if ($count_location_sub > $maxlen_sub_location) {
        $location_sub = substr($location_sub, 0, $maxlen_sub_location) . "..";
    }
    echo "<tr><td class=rowfollow align=center><strong>{$id}</strong></td>" . "<td class=rowfollow align=left><strong>{$name}</strong></td>" . "<td class=rowfollow align=center>" . ($flagpic != "" ? "<img src='" . get_protocol_prefix() . "{$BASEURL}/pic/location/{$flagpic}' border='0' />" : "-") . "</td>" . "<td class=rowfollow align=left>{$location_main}</td>" . "<td class=rowfollow align=left>{$location_sub}</td>" . "<td class=rowfollow align=left>" . $start_ip . "</td>" . "<td class=rowfollow align=left>" . $end_ip . "</td>" . "<td class=rowfollow align=left>{$theory_upspeed}</td>" . "<td class=rowfollow align=left>{$practical_upspeed}</td>" . "<td class=rowfollow align=left>{$theory_downspeed}</td>" . "<td class=rowfollow align=left>{$practical_downspeed}</td>" . "<td class=rowfollow align=center><a href='" . $_SERVER['PHP_SELF'] . "?editid={$id}'>Edit</a></td>" . "<td class=rowfollow align=center><a href='" . $_SERVER['PHP_SELF'] . "?delid={$id}'>Remove</a></td>" . "</tr>";
}
print "</table>";
echo $pagerbottom;
end_frame();
end_frame();
stdfoot();
Example #26
0
    $newwidth = floor($width / $scale);
    $newheight = floor($height / $scale);
    if ($it == 1) {
        $orig = @imagecreatefromgif($file["tmp_name"]);
    } elseif ($it == 2) {
        $orig = @imagecreatefromjpeg($file["tmp_name"]);
    } else {
        $orig = @imagecreatefrompng($file["tmp_name"]);
    }
    if (!$orig) {
        stderr($lang_bitbucketupload['std_image_processing_failed'], $lang_bitbucketupload['std_sorry_the_uploaded'] . "{$imgtypes[$it]}" . $lang_bitbucketupload['std_failed_processing']);
    }
    $thumb = imagecreatetruecolor($newwidth, $newheight);
    imagecopyresized($thumb, $orig, 0, 0, 0, 0, $newwidth, $newheight, $width, $height);
    $ret = $it == 1 ? imagegif($thumb, $tgtfile) : $it == 2 ? imagejpeg($thumb, $tgtfile) : imagepng($thumb, $tgtfile);
    $url = str_replace(" ", "%20", htmlspecialchars(get_protocol_prefix() . "{$BASEURL}/bitbucket/{$filename}"));
    $name = sqlesc($filename);
    $added = sqlesc(date("Y-m-d H:i:s"));
    sql_query("INSERT INTO bitbucket (owner, name, added, public) VALUES ({$CURUSER['id']}, {$name}, {$added}, {$public})") or sqlerr(__FILE__, __LINE__);
    sql_query("UPDATE users SET avatar = " . sqlesc($url) . " WHERE id = {$CURUSER['id']}") or sqlerr(__FILE__, __LINE__);
    stderr($lang_bitbucketupload['std_success'], $lang_bitbucketupload['std_use_following_url'] . "<br /><b><a href=\"{$url}\">{$url}</a></b><p><a href=bitbucket-upload.php>" . $lang_bitbucketupload['std_upload_another_file'] . "</a>.<br /><br /><img src=\"{$url}\" border=0><br /><br />" . $lang_bitbucketupload['std_image'] . ($width = $newwidth && $height == $newheight ? $lang_bitbucketupload['std_need_not_rescaling'] : $lang_bitbucketupload['std_rescaled_from'] . "{$height} x {$width}" . $lang_bitbucketupload['std_to'] . "{$newheight} x {$newwidth}") . $lang_bitbucketupload['std_profile_updated'], false);
}
stdhead($lang_bitbucketupload['head_avatar_upload']);
?>
<h1><?php 
echo $lang_bitbucketupload['text_avatar_upload'];
?>
</h1>
<form method="post" action=bitbucket-upload.php enctype="multipart/form-data">
<table border=1 cellspacing=0 cellpadding=5>
<?php 
Example #27
0
    $email = sqlesc($_POST["email"]);
    $res = sql_query("SELECT id FROM users WHERE email={$email}");
    $arr = mysql_fetch_row($res);
    if ($arr) {
        stderr("Error", "The e-mail address is already in use.");
    }
    $secret = mksecret();
    $passhash = sqlesc(md5($secret . $password . $secret));
    $secret = sqlesc($secret);
    sql_query("INSERT INTO users (added, last_access, secret, username, passhash, status, stylesheet, class,email) VALUES(NOW(), NOW(), {$secret}, {$username}, {$passhash}, 'confirmed', " . $defcss . "," . $defaultclass_class . ",{$email})") or sqlerr(__FILE__, __LINE__);
    $res = sql_query("SELECT id FROM users WHERE username={$username}");
    $arr = mysql_fetch_row($res);
    if (!$arr) {
        stderr("Error", "Unable to create the account. The user name is possibly already taken.");
    }
    header("Location: " . get_protocol_prefix() . "{$BASEURL}/userdetails.php?id=" . htmlspecialchars($arr[0]));
    die;
}
stdhead("Add user");
?>
<h1><?php 
echo $lang_adduser['head_adduser'];
?>
</h1>
<form method=post action=adduser.php>
<table border=1 cellspacing=0 cellpadding=5>
<tr><td class=rowhead><?php 
echo $lang_adduser['text_username'];
?>
</td><td><input type=text name=username size=40></td></tr>
<tr><td class=rowhead><?php 
Example #28
0
        $standards = searchbox_item_list("standards");
    }
    if ($showprocessing) {
        $processings = searchbox_item_list("processings");
    }
    if ($showteam) {
        $teams = searchbox_item_list("teams");
    }
    if ($showaudiocodec) {
        $audiocodecs = searchbox_item_list("audiocodecs");
    }
}
stdhead($lang_getrss['head_rss_feeds']);
if ($_SERVER['REQUEST_METHOD'] == "POST") {
    $allowed_showrows = array('10', '20', '30', '40', '50');
    $link = get_protocol_prefix() . $BASEURL . "/torrentrss.php";
    if (isset($_POST['showrows']) && in_array($_POST['showrows'], $allowed_showrows, 1)) {
        $query[] = "rows=" . (int) $_POST['showrows'];
    } else {
        stdmsg($lang_getrss['std_error'], $lang_getrss['std_no_row']);
        stdfoot();
        die;
    }
    foreach ($brcats as $cat) {
        if ($_POST["cat{$cat['id']}"]) {
            $query[] = "cat{$cat['id']}=1";
        }
    }
    if ($enablespecial == 'yes') {
        foreach ($spcats as $cat) {
            if ($_POST["cat{$cat['id']}"]) {
Example #29
0
     form("personal");
     tr_small($lang_usercp['row_account_parked'], "<input type=checkbox name=parked" . ($CURUSER["parked"] == "yes" ? " checked" : "") . " value=yes>" . $lang_usercp['checkbox_pack_my_account'] . "<br /><font class=small size=1>" . $lang_usercp['text_account_pack_note'] . "</font>", 1);
     tr_small($lang_usercp['row_pms'], $lang_usercp['text_accept_pms'] . "<input type=radio name=acceptpms" . ($CURUSER["acceptpms"] == "yes" ? " checked" : "") . " value=yes>" . $lang_usercp['radio_all_except_blocks'] . "<input type=radio name=acceptpms" . ($CURUSER["acceptpms"] == "friends" ? " checked" : "") . " value=friends>" . $lang_usercp['radio_friends_only'] . "<input type=radio name=acceptpms" . ($CURUSER["acceptpms"] == "no" ? " checked" : "") . " value=no>" . $lang_usercp['radio_staff_only'] . "<br /><input type=checkbox name=deletepms" . ($CURUSER["deletepms"] == "yes" ? " checked" : "") . "> " . $lang_usercp['checkbox_delete_pms'] . "<br /><input type=checkbox name=savepms" . ($CURUSER["savepms"] == "yes" ? " checked" : "") . "> " . $lang_usercp['checkbox_save_pms'] . "<br /><input type=checkbox name=commentpm" . ($CURUSER["commentpm"] == "yes" ? " checked" : "") . " value=yes> " . $lang_usercp['checkbox_pm_on_comments'], 1);
     tr_small($lang_usercp['row_gender'], "<input type=radio name=gender" . ($CURUSER["gender"] == "N/A" ? " checked" : "") . " value=N/A>" . $lang_usercp['radio_not_available'] . "\n<input type=radio name=gender" . ($CURUSER["gender"] == "Male" ? " checked" : "") . " value=Male>" . $lang_usercp['radio_male'] . "<input type=radio name=gender" . ($CURUSER["gender"] == "Female" ? " checked" : "") . " value=Female>" . $lang_usercp['radio_female'], 1);
     tr_small($lang_usercp['row_country'], "<select name=country>\n{$countries}\n</select>", 1);
     //School select
     if ($showschool == 'yes') {
         $schools = "<option value=35>---- " . $lang_usercp['select_none_selected'] . " ----</option>n";
         $sc_r = sql_query("SELECT id,name FROM schools ORDER BY name") or die;
         while ($sc_a = mysql_fetch_array($sc_r)) {
             $schools .= "<option value={$sc_a['id']}" . ($sc_a['id'] == $CURUSER['school'] ? " selected" : "") . ">{$sc_a['name']}</option>n";
         }
         tr($lang_usercp['row_school'], "<select name=school>{$schools}</select>", 1);
     }
     tr_small($lang_usercp['row_network_bandwidth'], "<b>" . $lang_usercp['text_downstream_rate'] . "</b>: <select name=download>" . $downloadspeed . "</select>&nbsp;&nbsp;<b>" . $lang_usercp['text_upstream_rate'] . "</b>: <select name=upload>" . $uploadspeed . "</select>&nbsp;&nbsp;<b>" . $lang_usercp['text_isp'] . "</b>: <select name=isp>" . $isplist . "</select>", 1);
     tr_small($lang_usercp['row_avatar_url'], "<img src=" . ($CURUSER["avatar"] ? "'{$CURUSER['avatar']}'" : "'" . get_protocol_prefix() . $BASEURL . "/pic/default_avatar.png'") . " name='avatarimg'><br />\n  <select name=savatar OnChange=\"document.forms[0].avatarimg.src=this.value;this.form.avatar.value=this.value;\">\n  <option value='{$CURUSER['avatar']}'>" . $lang_usercp['select_choose_avatar'] . "</option>\n  <option value='" . get_protocol_prefix() . $BASEURL . "/pic/default_avatar.png'>" . $lang_usercp['select_nothing'] . "</option>\n  {$text}\n  </select><input type=text name=avatar style=\"width: 400px\" value=\"" . htmlspecialchars($CURUSER["avatar"]) . "\"><br />\n" . $lang_usercp['text_avatar_note'] . ($enablebitbucket_main == 'yes' ? $lang_usercp['text_bitbucket_note'] : ""), 1);
     tr($lang_usercp['row_info'], "<textarea name=\"info\" style=\"width:700px\" rows=\"10\" >" . htmlspecialchars($CURUSER["info"]) . "</textarea><br />" . $lang_usercp['text_info_note'], 1);
     if (get_user_class() >= UC_VIP) {
         tr_small($lang_usercp['row_showonline'], "<input type=radio name=showonline" . ($CURUSER["showonline"] == "yes" ? " checked" : "") . " value=yes>" . $lang_usercp['radio_yes'] . "<input type=radio name=showonline" . ($CURUSER["showonline"] == "no" ? " checked" : "") . " value=no>" . $lang_usercp['radio_no'], 1);
     }
     submit();
     print "</table>";
     stdfoot();
     die;
     break;
 case "tracker":
     $showaddisabled = true;
     if ($enablead_advertisement == 'yes') {
         if (get_user_class() >= $noad_advertisement || $enablebonusnoad_advertisement == 'yes' && strtotime($CURUSER['noaduntil']) >= TIMENOW) {
             $showaddisabled = false;
         }
Example #30
0
    $lang_folder = validlang($langid);
    if (get_langfolder_cookie() != $lang_folder) {
        set_langfolder_cookie($lang_folder);
        header("Location: " . $_SERVER['PHP_SELF']);
    }
}
require_once get_langfile_path("", false, $CURLANGDIR);
failedloginscheck();
cur_user_check();
unset($returnto);
if (!empty($_GET["returnto"])) {
    $returnto = $_GET["returnto"];
    if (!$_GET["nowarn"]) {
        print "<h1>" . $lang_login['h1_not_logged_in'] . "</h1>\n";
        print "<p><b>" . $lang_login['p_error'] . "</b> " . $lang_login['p_after_logged_in'] . "</p>\n";
    }
}
//show_image_code ();
//stdhead($lang_login['head_login']);
$select = 'login';
$smarty->assign("select", $select);
$smarty->assign("show", 'no');
$signuplist = $smarty->fetch(MTPTTEMPLATES . '/signuplist.html');
$smarty->assign("signuplist", $signuplist);
$smarty->assign("returnto", $returnto);
$smarty->assign("showhelpbox_main", $showhelpbox_main);
$smarty->assign("BASEURL", $BASEURL);
$smarty->assign("prefix", get_protocol_prefix());
$smarty->assign("smtptype", $smtptype);
$smarty->display(MTPTTEMPLATES . '/login.html');
stdfoot();