Example #1
0
 function admin_texte()
 {
     global $db, $countries;
     if (isset($_POST['submit'])) {
         foreach ($_POST as $key => $value) {
             if (strpos($key, '_h_')) {
                 $lang = substr($key, 0, strpos($key, '_'));
                 $name = substr($key, strpos($key, '_') + 3);
                 $sql = sprintf('UPDATE ' . DB_PRE . 'ecp_texte SET content = \'%s\', content2 = \'%s\' WHERE name= \'%s\' AND lang = \'%s\';', strsave($_POST[$lang . '_' . $name]), strsave($value), strsave($name), strsave($lang));
                 $db->query($sql);
             }
         }
         header('Location: ?section=admin&site=texte');
     } else {
         $tpl = new smarty();
         $lang = get_languages();
         $db->query('SELECT * FROM ' . DB_PRE . 'ecp_texte ORDER BY lang ASC');
         while ($row = $db->fetch_assoc()) {
             foreach ($lang as $key => $value) {
                 if ($value['lang'] == $row['lang']) {
                     $lang[$key]['data'][$row['name']] = htmlspecialchars($row['content']);
                     $lang[$key]['headline'][$row['name']] = htmlspecialchars($row['content2']);
                 }
             }
         }
         $tpl->assign('lang', $lang);
         ob_start();
         $tpl->display(DESIGN . '/tpl/admin/texte.html');
         $content = ob_get_contents();
         ob_end_clean();
         main_content(TEXTE, $content, '', 1);
     }
 }
Example #2
0
function get_server()
{
    global $db;
    if (!isset($_SESSION['rights']['admin']['server']) and !isset($_SESSION['rights']['superadmin'])) {
        echo NO_ADMIN_RIGHTS;
    } else {
        $tpl = new smarty();
        if (@$_GET['ajax']) {
            ob_end_clean();
        }
        $server = array();
        $result = $db->query('SELECT `serverID`, `gamename`, response, `gametype`, `aktiv`, `displaymenu`, `ip`, `port`, `queryport`, `stat` FROM ' . DB_PRE . 'ecp_server ORDER BY posi ASC');
        while ($row = mysql_fetch_assoc($result)) {
            $data = unserialize($row['response']);
            $row['path'] = 'images/server/maps/' . $row['gametype'] . '/' . $data['s']['game'] . '/' . $data['s']['map'] . '.jpg';
            $server[] = $row;
        }
        $tpl->assign('server', $server);
        ob_start();
        $tpl->display(DESIGN . '/tpl/admin/server_overview.html');
        $content = ob_get_contents();
        ob_end_clean();
        if (@$_GET['ajax']) {
            echo html_ajax_convert($content);
            die;
        }
        main_content(OVERVIEW, '<div id="server_overview">' . $content . '</div>', '', 1);
    }
}
Example #3
0
function get_links()
{
    global $db;
    if (!isset($_SESSION['rights']['admin']['links']) and !isset($_SESSION['rights']['superadmin'])) {
        echo NO_ADMIN_RIGHTS;
    } else {
        $tpl = new smarty();
        if (@$_GET['ajax']) {
            ob_end_clean();
        }
        $links = array();
        $result = $db->query('SELECT `linkID`, `name`, `url`, `bannerurl`, `beschreibung`, `hits` FROM ' . DB_PRE . 'ecp_links ORDER BY name ASC');
        while ($row = mysql_fetch_assoc($result)) {
            $links[] = $row;
        }
        $tpl->assign('links', $links);
        ob_start();
        $tpl->display(DESIGN . '/tpl/admin/links_overview.html');
        $content = ob_get_contents();
        ob_end_clean();
        if (@$_GET['ajax']) {
            echo html_ajax_convert($content);
            die;
        }
        main_content(OVERVIEW, '<div id="links_overview">' . $content . '</div>', '', 1);
    }
}
Example #4
0
function shoutbox()
{
    global $db, $countries;
    $tpl = new smarty();
    $anzahl = $db->result(DB_PRE . 'ecp_comments', 'COUNT(comID)', 'bereich="shoutbox"');
    if ($anzahl) {
        $limits = get_sql_limit($anzahl, LIMIT_SHOUTBOX);
        $shouts = array();
        $db->query('SELECT comID, country, username, userID, author, datum, beitrag FROM ' . DB_PRE . 'ecp_comments LEFT JOIN ' . DB_PRE . 'ecp_user ON userID = ID WHERE bereich="shoutbox" ORDER BY datum DESC LIMIT ' . $limits[1] . ',' . LIMIT_SHOUTBOX);
        $anzahl -= $limits[1];
        while ($row = $db->fetch_assoc()) {
            $row['nr'] = format_nr($anzahl--, 0);
            $row['countryname'] = @$countries[$row['country']];
            $row['datum'] = date(LONG_DATE, $row['datum']);
            $shouts[] = $row;
        }
        $tpl->assign('shoutbox', $shouts);
        if ($limits[0] > 1) {
            $tpl->assign('seiten', makepagelink_ajax('?section=shoutbox', 'return load_shout_page({nr});', @$_GET['page'], $limits[0]));
        }
        ob_start();
        $tpl->display(DESIGN . '/tpl/shoutbox/shoutbox.html');
        $content = ob_get_contents();
        ob_end_clean();
        main_content(SHOUTBOX, '<div id="shout_overview">' . $content . '</div>', '', 1);
    } else {
        table(INFO, NO_ENTRIES);
    }
}
Example #5
0
function admin_joinus()
{
    global $db, $countries;
    $tpl = new smarty();
    $db->query('SELECT tname, `joinID`, `name`, b.username, b.email, b.icq, b.msn, `age`, b.country, `teamID`, `comment`, `IP`, `datum`, `closed`, `closedby`, a.username as closedby_username FROM ' . DB_PRE . 'ecp_joinus as b LEFT JOIN ' . DB_PRE . 'ecp_teams ON (teamID = tID) LEFT JOIN ' . DB_PRE . 'ecp_user as a ON (ID=closedby) ORDER BY closed ASC, datum ASC');
    $joinus = array();
    while ($row = $db->fetch_assoc()) {
        $row['datum'] = date(SHORT_DATE, $row['datum']);
        if ($row['joinID'] == (int) @$_GET['id']) {
            $spe = $row;
        }
        $joinus[] = $row;
    }
    if (@$spe) {
        ob_start();
        $tpl1 = new Smarty();
        foreach ($spe as $key => $value) {
            $tpl1->assign($key, $value);
        }
        $tpl1->assign('countryname', $countries[$spe['country']]);
        $tpl1->assign('id', $row['joinID']);
        $tpl1->display(DESIGN . '/tpl/admin/joinus_view.html');
        $tpl->assign('details', ob_get_contents());
        ob_end_clean();
    }
    $tpl->assign('joinus', $joinus);
    ob_start();
    $tpl->display(DESIGN . '/tpl/admin/joinus.html');
    $content = ob_get_contents();
    ob_end_clean();
    main_content(JOINUS, $content, '', 1);
}
Example #6
0
function get_teams()
{
    global $db;
    $tpl = new smarty();
    if (@$_GET['ajax']) {
        ob_end_clean();
    }
    $teams = array();
    $result = $db->query('SELECT tname, tID, info FROM ' . DB_PRE . 'ecp_teams ORDER BY posi ASC');
    while ($row = mysql_fetch_assoc($result)) {
        $members = array();
        $subresult = $db->query('SELECT `username`, `mID`, `userID`, `name`, `aufgabe`, `aktiv`, country FROM ' . DB_PRE . 'ecp_members LEFT JOIN ' . DB_PRE . 'ecp_user ON (ID = userID) WHERE teamID = ' . $row['tID'] . ' ORDER BY posi ASC');
        while ($subrow = mysql_fetch_assoc($subresult)) {
            $subrow['aktiv'] ? $subrow['aktiv'] = '<span class="member_aktiv" style="cursor:pointer" onclick="member_switch_status(' . $row['tID'] . ', ' . $subrow['userID'] . ');">' . AKTIV . '</span>' : ($subrow['aktiv'] = '<span style="cursor:pointer" class="member_inaktiv" onclick="member_switch_status(' . $row['tID'] . ', ' . $subrow['userID'] . ');">' . INAKTIV . '</span>');
            if ($subrow['name'] != '') {
                $subrow['username'] = $subrow['name'];
            }
            $members[] = $subrow;
        }
        $row['members'] = $members;
        $teams[] = $row;
    }
    $tpl->assign('teams', $teams);
    ob_start();
    $tpl->display(DESIGN . '/tpl/admin/teams_overview.html');
    $content = ob_get_contents();
    ob_end_clean();
    if (@$_GET['ajax']) {
        echo html_ajax_convert($content);
        die;
    }
    main_content(OVERVIEW, '<div id="teams_overview">' . $content . '</div>', '', 1);
}
Example #7
0
function admin_server()
{
    global $db;
    $tpl = new smarty();
    $db->query('SELECT `ID`, `verwendung`, `intervall`, `betrag`, `nextbuch` FROM ' . DB_PRE . 'ecp_clankasse_auto');
    $auto = array();
    while ($row = $db->fetch_assoc()) {
        $row['nextbuch'] = date(LONG_DATE, $row['nextbuch']);
        $row['betrag'] = number_format($row['betrag'], 2, ',', '.');
        $auto[] = $row;
    }
    $tpl->assign('auto', $auto);
    ob_start();
    $tpl->display(DESIGN . '/tpl/admin/clankasse_auto_overview.html');
    $content = ob_get_contents();
    ob_end_clean();
    $tpl->assign('overview', $content);
    $db->query('SELECT a.*, b.username FROM ' . DB_PRE . 'ecp_clankasse_transaktion as a LEFT JOIN ' . DB_PRE . 'ecp_user as b ON b.ID = vonuser ORDER BY datum DESC');
    $buchung = array();
    while ($row = $db->fetch_assoc()) {
        $row['datum'] = date(LONG_DATE, $row['datum']);
        if ($row['vonuser']) {
            $row['verwendung'] .= ' ' . FROM . ' ' . $row['username'];
        }
        $row['geld'] = number_format($row['geld'], 2, ',', '.');
        $buchung[] = $row;
    }
    $tpl->assign('buchung', $buchung);
    ob_start();
    $tpl->display(DESIGN . '/tpl/admin/clankasse_trans_overview.html');
    $content = ob_get_contents();
    ob_end_clean();
    $tpl->assign('buch_overview', $content);
    $db->query('SELECT username, userID, verwendung, monatgeld FROM ' . DB_PRE . 'ecp_clankasse_member LEFT JOIN ' . DB_PRE . 'ecp_user ON userID = ID ORDER BY username ASC');
    $user = array();
    while ($row = $db->fetch_assoc()) {
        $row['geld'] = number_format($row['monatgeld'], 2, ',', '.');
        $user[] = $row;
    }
    $tpl->assign('user', $user);
    ob_start();
    $tpl->display(DESIGN . '/tpl/admin/clankasse_user_overview.html');
    $content = ob_get_contents();
    ob_end_clean();
    $tpl->assign('user_trans', $content);
    $konto = $db->fetch_assoc('SELECT * FROM ' . DB_PRE . 'ecp_clankasse');
    $konto['kontostand'] = number_format($konto['kontostand'], 2, ',', '');
    foreach ($konto as $key => $value) {
        $tpl->assign($key, $value);
    }
    $tpl->assign('options', get_options(date('m'), date('Y')));
    ob_start();
    $tpl->display(DESIGN . '/tpl/admin/clankasse.html');
    $content = ob_get_contents();
    ob_end_clean();
    main_content(FINANCES, $content, '', 1);
}
Example #8
0
function admin_matchtype()
{
    $tpl = new smarty();
    $tpl->assign('matchtype', get_matchtypes());
    ob_start();
    $tpl->display(DESIGN . '/tpl/admin/matchtype.html');
    $content = ob_get_contents();
    ob_end_clean();
    main_content(MATCHTYPE, $content, '', 1);
}
Example #9
0
function admin_calendar()
{
    global $db, $countries;
    $tpl = new smarty();
    $tpl->assign('events', get_events());
    $tpl->assign('lang', get_languages());
    $tpl->assign('rights', get_form_rights());
    ob_start();
    $tpl->display(DESIGN . '/tpl/admin/calendar.html');
    $content = ob_get_contents();
    ob_end_clean();
    main_content(CALENDAR, $content, '', 1);
}
Example #10
0
function admin_cms()
{
    global $db;
    $tpl = new Smarty();
    $tpl->assign('cms', get_cms());
    $tpl->assign('lang', get_languages());
    $tpl->assign('rights', get_form_rights(@$_POST['rights']));
    ob_start();
    $tpl->display(DESIGN . '/tpl/admin/cms.html');
    $content = ob_get_contents();
    ob_end_clean();
    main_content(OWN_SITES, $content, '', 1);
}
Example #11
0
 function admin_settings()
 {
     global $db, $countries;
     if (isset($_POST['submit'])) {
         unset($_POST['submit']);
         $_POST['SITE_URL'] = strrpos($_POST['SITE_URL'], '/') !== strlen($_POST['SITE_URL']) - 1 ? check_url($_POST['SITE_URL'] . '/') : check_url($_POST['SITE_URL']);
         $sql = 'UPDATE ' . DB_PRE . 'ecp_settings SET ';
         foreach ($_POST as $key => $value) {
             $sql .= $key . ' = "' . strsave($value) . '", ';
         }
         $sql = substr($sql, 0, strlen($sql) - 2);
         if ($db->query($sql)) {
             header('Location: ?section=admin&site=settings');
         }
     } else {
         $dir = scan_dir('templates', true);
         $designs = '';
         foreach ($dir as $value) {
             if (is_dir('templates/' . $value)) {
                 $designs .= '<option ' . ($value == DESIGN ? 'selected="selected"' : '') . ' value="' . $value . '">' . $value . '</option>';
             }
         }
         $tpl = new smarty();
         $tpl->assign('designs', $designs);
         $tpl->assign('langs', get_languages());
         $dir = scan_dir('module', true);
         $start = '';
         foreach ($dir as $value) {
             if (is_dir('module/' . $value)) {
                 $start .= '<option ' . ('modul|' . $value == STARTSEITE ? 'selected="selected"' : '') . ' value="modul|' . $value . '">' . $value . '</option>';
             }
         }
         $start .= '<option value="">-----' . OWN_SITES . '----</option>';
         $db->query('SELECT headline, cmsID FROM ' . DB_PRE . 'ecp_cms ORDER BY headline ASC');
         while ($row = $db->fetch_assoc()) {
             $title = json_decode($row['headline'], true);
             isset($title[LANGUAGE]) ? $title = $title[LANGUAGE] : ($title = $title[DEFAULT_LANG]);
             $start .= '<option ' . ('cms|' . $row['cmsID'] == STARTSEITE ? 'selected="selected"' : '') . ' value="cms|' . $row['cmsID'] . '">' . $title . '</option>';
         }
         $tpl->assign('startseite', $start);
         ob_start();
         $tpl->display(DESIGN . '/tpl/admin/settings.html');
         $content = ob_get_contents();
         ob_end_clean();
         main_content(SETTINGS, $content, '', 1);
     }
 }
Example #12
0
function admin_topics()
{
    global $db;
    $topics = array();
    $db->query('SELECT `tID`, `topicname`, `beschreibung`, `topicbild` FROM ' . DB_PRE . 'ecp_topics ORDER BY topicname ASC');
    while ($row = $db->fetch_assoc()) {
        $topics[] = $row;
    }
    $tpl = new Smarty();
    $tpl->assign('topics', $topics);
    $tpl->assign('pics', get_topic_pics());
    ob_start();
    $tpl->display(DESIGN . '/tpl/admin/topics.html');
    $content = ob_get_contents();
    ob_end_clean();
    main_content(TOPICS, $content, '', 1);
}
Example #13
0
function admin_fightus()
{
    global $db;
    $tpl = new smarty();
    $db->query('SELECT tname, gamename, icon, matchtypename, a.homepage, `fightusID`, a.clanname, `wardatum`, `bearbeitet`, `vonID`, username FROM ' . DB_PRE . 'ecp_fightus as a LEFT JOIN ' . DB_PRE . 'ecp_teams ON (teamID = tID) LEFT JOIN ' . DB_PRE . 'ecp_wars_games ON (gID=gameID) LEFT JOIN ' . DB_PRE . 'ecp_wars_matchtype ON (mID= matchtypeID) LEFT JOIN ' . DB_PRE . 'ecp_user ON (ID=vonID) ORDER BY bearbeitet ASC, wardatum ASC');
    $fightus = array();
    while ($row = $db->fetch_assoc()) {
        $row['wardatum'] = date(SHORT_DATE, $row['wardatum']);
        $fightus[] = $row;
    }
    $tpl->assign('fightus', $fightus);
    ob_start();
    $tpl->display(DESIGN . '/tpl/admin/fightus.html');
    $content = ob_get_contents();
    ob_end_clean();
    main_content(FIGHTUS, $content, '', 1);
}
Example #14
0
function admin_survey()
{
    global $db, $groups;
    $anzahl = $db->result(DB_PRE . 'ecp_survey', 'COUNT(surveyID)', '1');
    if ($anzahl) {
        $limits = get_sql_limit($anzahl, LIMIT_SURVEY);
        $db->query('SELECT `surveyID`, `start`, `ende`, `frage` FROM `' . DB_PRE . 'ecp_survey` ORDER BY ende DESC LIMIT ' . $limits[1] . ', ' . LIMIT_SURVEY);
        $umfrage = array();
        while ($row = $db->fetch_assoc()) {
            if ($row['start'] > time()) {
                $row['status'] = PLANNED;
                $row['closed'] = 1;
            } elseif ($row['ende'] < time()) {
                $row['status'] = CLOSED;
                $row['closed'] = 1;
            } else {
                $row['status'] = RUN;
            }
            $row['start'] = date(LONG_DATE, $row['start']);
            $row['ende'] = date(LONG_DATE, $row['ende']);
            $umfrage[] = $row;
        }
    }
    $tpl = new smarty();
    $db->query('SELECT groupID, name FROM ' . DB_PRE . 'ecp_groups ORDER by name ASC');
    $rights = '<option value="all" selected="selected">' . ALL . '</option>';
    while ($row = $db->fetch_assoc()) {
        if (isset($groups[$row['name']])) {
            $row['name'] = $groups[$row['name']];
        }
        $rights .= '<option value="' . $row['groupID'] . '">' . $row['name'] . '</option>';
    }
    $tpl->assign('rights', $rights);
    $tpl->assign('anzahl', $anzahl);
    $tpl->assign('umfrage', @$umfrage);
    $tpl->assign('pages', @$limits[0]);
    ob_start();
    $tpl->display(DESIGN . '/tpl/admin/survey.html');
    $tpl->display(DESIGN . '/tpl/admin/survey_overview.html');
    $content = ob_get_contents();
    ob_end_clean();
    main_content(SURVEY, $content, '', 1);
}
Example #15
0
function admin_awards()
{
    global $db;
    $awards = array();
    $db->query('SELECT `awardID`, `eventname`, `eventdatum`, `url`, `platz` FROM ' . DB_PRE . 'ecp_awards ORDER BY eventdatum DESC');
    while ($row = $db->fetch_assoc()) {
        $row['eventdatum'] = date('d.m.Y', $row['eventdatum']);
        $awards[] = $row;
    }
    $tpl = new Smarty();
    $tpl->assign('awards', $awards);
    $tpl->assign('teams', get_teams_form());
    $tpl->assign('games', get_games_form());
    $tpl->assign('lang', get_languages());
    ob_start();
    $tpl->display(DESIGN . '/tpl/admin/awards.html');
    $content = ob_get_contents();
    ob_end_clean();
    main_content(AWARDS, $content, '', 1);
}
Example #16
0
function admin_downloads()
{
    global $db;
    $tpl = new smarty();
    $tpl->assign('lang', get_languages());
    $tpl->assign('rights', get_form_rights(@$_POST['rights']));
    $tpl->assign('kate', download_get_cate(@$_POST['subID']));
    $db->query('SELECT name, dID FROM ' . DB_PRE . 'ecp_downloads ORDER BY name ASC');
    $dl = '<option value="0">' . CHOOSE . '</option>';
    while ($row = $db->fetch_assoc()) {
        $dl .= '<option value="' . $row['dID'] . '">' . $row['name'] . '</option>';
    }
    $tpl->assign('dls', $dl);
    //foreach($_POST AS $key=>$value) $tpl->assign($key, $value);
    ob_start();
    $tpl->display(DESIGN . '/tpl/admin/downloads.html');
    $content = ob_get_contents();
    ob_end_clean();
    main_content(DOWNLOADS, $content, '', 1);
}
Example #17
0
function admin_smilies_add()
{
    global $db;
    if (!isset($_SESSION['rights']['admin']['smilies']['add']) and !isset($_SESSION['rights']['superadmin'])) {
        echo NO_ADMIN_RIGHTS;
    } else {
        if (@$_FILES['smilie']['tmp_name'] == '') {
            table(ERROR, NOT_NEED_ALL_INPUTS);
            $tpl = new smarty();
            ob_start();
            $tpl->display(DESIGN . '/tpl/admin/smilies.html');
            $content = ob_get_contents();
            ob_end_clean();
            main_content(SMILIES, $content, '', 1);
            get_smilies();
        } elseif ($_FILES['smilie']['type'] != 'image/jpg' and $_FILES['smilie']['type'] != 'image/gif' and $_FILES['smilie']['type'] != 'image/png' and $_FILES['smilie']['type'] != 'image/jpeg') {
            table(ERROR, WRONG_FILE_TYPE);
            $tpl = new smarty();
            ob_start();
            $tpl->display(DESIGN . '/tpl/admin/smilies.html');
            $content = ob_get_contents();
            ob_end_clean();
            main_content(SMILIES, $content, '', 1);
            get_smilies();
        } else {
            ajax_convert_array($_POST);
            ajax_convert_array($_FILES);
            if (move_uploaded_file($_FILES['smilie']['tmp_name'], 'images/smilies/' . str_replace(' ', '_', $_FILES['smilie']['name']))) {
                umask(0);
                chmod('images/smilies/' . str_replace(' ', '_', $_FILES['smilie']['name']), CHMOD);
                $sql = sprintf('INSERT INTO ' . DB_PRE . 'ecp_smilies (`bedeutung`, `filename`) 
								VALUES (\'%s\', \'%s\')', strsave($_POST['bedeutung']), strsave(str_replace(' ', '_', $_FILES['smilie']['name'])));
                if ($db->query($sql)) {
                    header1('?section=admin&site=smilies');
                }
            }
        }
    }
}
Example #18
0
function awards_view($id)
{
    global $db;
    $row = $db->fetch_assoc('SELECT `awardID`, `eventname`, `eventdatum`, `url`, `platz`, `teamID`, `gID`, `preis`, spieler, bericht, tname, icon, gamename FROM `' . DB_PRE . 'ecp_awards` LEFT JOIN ' . DB_PRE . 'ecp_teams ON tID = teamID LEFT JOIN ' . DB_PRE . 'ecp_wars_games ON gameID = gID WHERE awardID = ' . $id);
    if (@$row['eventname']) {
        $tpl = new smarty();
        $row['eventdatum'] = date('d.m.Y', $row['eventdatum']);
        $report = json_decode($row['bericht'], true);
        $spieler = explode(',', $row['spieler']);
        $row['preis'] = htmlentities($row['preis'], ENT_QUOTES, "UTF-8");
        $row['eventname'] = htmlentities($row['eventname'], ENT_QUOTES, "UTF-8");
        foreach ($spieler as $value) {
            if ((int) $value) {
                @($ids .= ' OR ID = ' . $value);
            }
        }
        $db->query('SELECT username, ID FROM ' . DB_PRE . 'ecp_user WHERE ID = 0' . @$ids);
        while ($sub = $db->fetch_assoc()) {
            @($players .= ', <a href="?section=user&id=' . $sub['ID'] . '" >' . $sub['username'] . '</a>');
        }
        $tpl->assign('players', substr(@$players, 2));
        if (isset($report[LANGUAGE])) {
            $row['bericht'] = $report[LANGUAGE];
        } else {
            $row['bericht'] = @$report['de'];
        }
        foreach ($row as $key => $value) {
            $tpl->assign($key, $value);
        }
        ob_start();
        $tpl->display(DESIGN . '/tpl/awards/view.html');
        $content = ob_get_contents();
        ob_end_clean();
        main_content(AWARDS, $content, '', 1);
    } else {
        table(ERROR, NO_ENTRIES_ID);
    }
}
Example #19
0
function admin_ranks_add()
{
    global $db;
    if (!isset($_SESSION['rights']['admin']['ranks']['add']) and !isset($_SESSION['rights']['superadmin'])) {
        echo NO_ADMIN_RIGHTS;
    } else {
        if (@$_FILES['rank']['tmp_name'] == '' or $_POST['rankname'] == '') {
            table(ERROR, NOT_NEED_ALL_INPUTS);
            $tpl = new smarty();
            ob_start();
            $tpl->display(DESIGN . '/tpl/admin/ranks.html');
            $content = ob_get_contents();
            ob_end_clean();
            main_content(RANGS, $content, '', 1);
            get_ranks();
        } elseif ($_FILES['rank']['type'] != 'image/jpg' and $_FILES['rank']['type'] != 'image/gif' and $_FILES['rank']['type'] != 'image/png' and $_FILES['rank']['type'] != 'image/jpeg') {
            table(ERROR, WRONG_FILE_TYPE);
            $tpl = new smarty();
            ob_start();
            $tpl->display(DESIGN . '/tpl/admin/ranks.html');
            $content = ob_get_contents();
            ob_end_clean();
            main_content(RANGS, $content, '', 1);
            get_ranks();
        } else {
            if (move_uploaded_file($_FILES['rank']['tmp_name'], 'images/ranks/' . str_replace(' ', '_', $_FILES['rank']['name']))) {
                umask(0);
                chmod('images/ranks/' . str_replace(' ', '_', $_FILES['rank']['name']), CHMOD);
                $sql = sprintf('INSERT INTO ' . DB_PRE . 'ecp_ranks (`rankname`, `iconname`, abposts, fest, money) 
								VALUES (\'%s\', \'%s\', %d, %d, %f)', strsave($_POST['rankname']), strsave(str_replace(' ', '_', $_FILES['rank']['name'])), (int) @$_POST['abposts'], (int) @$_POST['fest'], (double) str_replace(',', '.', @$_POST['money']));
                if ($db->query($sql)) {
                    header1('?section=admin&site=ranks');
                }
            }
        }
    }
}
Example #20
0
<?php
	include_once('ressources/class.templates.inc');
	include_once('ressources/class.ldap.inc');
	include_once('ressources/class.users.menus.inc');
	include_once('ressources/class.maincf.multi.inc');
	include_once('ressources/class.rtmm.tools.inc');
	if(isset($_GET["org"])){$_GET["ou"]=$_GET["org"];}
	
	if(!PostFixMultiVerifyRights()){
		$tpl=new templates();
		echo "alert('". $tpl->javascript_parse_text("{ERROR_NO_PRIVS}")."');";
		die();exit();
	}	
	
	if(isset($_GET["in-front-ajax"])){popup_js_front();exit;}
	if(isset($_GET["content"])){main_content();exit;}
	if(isset($_GET["left-menus"])){left_menus();exit;}
	if(isset($_GET["add-server"])){add_server_popup();exit;}
	if(isset($_GET["inet_interfaces"])){add_server_save();exit;}
	if(isset($_GET["servers-list"])){server_list();exit;}
	if(isset($_GET["rttm-logs"])){rttm_logs();exit;}
	popup();
			
	
function popup_js_front(){
	$tpl=new templates();
	$page=CurrentPageName();
	if(isset($_GET["encoded"])){
		$ou=base64_decode($_GET["ou"]);
	}
	$html="
Example #21
0
function survey_view($id)
{
    global $db;
    $anzahl = $db->result(DB_PRE . 'ecp_survey', 'COUNT(surveyID)', 'start <= ' . time() . ' AND (access = "" OR ' . $_SESSION['access_search'] . ') AND surveyID = ' . $id);
    if ($anzahl) {
        $limits = get_sql_limit($anzahl, LIMIT_SURVEY);
        $result = $db->query('SELECT `surveyID`, `start`, `ende`, `frage`, sperre, antworten as maxvotes, COUNT(comID) as comments FROM `' . DB_PRE . 'ecp_survey` LEFT JOIN ' . DB_PRE . 'ecp_comments ON (subID = surveyID AND bereich="survey") WHERE surveyID = ' . $id . ' GROUP BY surveyID ORDER BY ende DESC LIMIT ' . $limits[1] . ', ' . LIMIT_SURVEY);
        $umfrage = array();
        while ($row = mysql_fetch_assoc($result)) {
            $antworten = array();
            if (isset($_COOKIE['surveys'][$row['surveyID']]) and $_COOKIE['surveys'][$row['surveyID']]) {
                if ($_COOKIE['surveys'][$row['surveyID']] + $row['sperre'] > time()) {
                    $row['abstimmen'] = false;
                } else {
                    $row['abstimmen'] = true;
                }
            } elseif (isset($_SESSION['userID'])) {
                $zeit = @$db->result(DB_PRE . 'ecp_survey_votes', 'votedatum', 'userID = ' . $_SESSION['userID'] . ' AND surID = ' . $row['surveyID'] . ' ORDER BY votedatum DESC');
                if ((int) $zeit + $row['sperre'] > time()) {
                    $row['abstimmen'] = false;
                } else {
                    $row['abstimmen'] = true;
                }
            } else {
                $zeit = $db->result(DB_PRE . 'ecp_survey_votes', 'votedatum', 'IP = \'' . $_SERVER['REMOTE_ADDR'] . '\' ORDER BY votedatum DESC');
                if ((int) $zeit + $row['sperre'] > time()) {
                    $row['abstimmen'] = false;
                } else {
                    $row['abstimmen'] = true;
                }
            }
            $db->query('SELECT `answerID`, `answer`, `votes` FROM `' . DB_PRE . 'ecp_survey_answers` WHERE sID = ' . $row['surveyID'] . ' ORDER BY answerID ASC');
            $gesamt = 0;
            while ($sub = $db->fetch_assoc()) {
                $gesamt += $sub['votes'];
                $antworten[] = $sub;
            }
            foreach ($antworten as $key => $value) {
                if ($gesamt) {
                    $antworten[$key]['prozent'] = round($value['votes'] / $gesamt * 100, 1);
                } else {
                    $antworten[$key]['prozent'] = 0;
                }
                $antworten[$key]['votes'] = number_format($value['votes'], 0, '', '.');
            }
            $row['gesamt'] = number_format($gesamt, 0, '', '.');
            $row['antworten'] = $antworten;
            if ($row['start'] > time() or $row['ende'] < time()) {
                $row['abstimmen'] = false;
            }
            $row['start'] = date(LONG_DATE, $row['start']);
            $row['ende'] = date(LONG_DATE, $row['ende']);
            $umfrage[] = $row;
        }
        $tpl = new Smarty();
        $tpl->assign('survey', $umfrage);
        ob_start();
        $tpl->display(DESIGN . '/tpl/survey/overview.html');
        $content = ob_get_contents();
        ob_end_clean();
        main_content(SURVEY, $content, '', 1);
    } else {
        table(INFO, NO_ENTRIES_ID);
    }
}
Example #22
0
function account_stats()
{
    global $db, $countries;
    $tpl = new smarty();
    $user = $db->fetch_assoc('SELECT `registerdate`, rankname, `clicks`, `logins`, `comments`, a.money, iconname, `msg_s`, `msg_r`, `profilhits`, `scheine`, `2er`, `3er`, `4er`, COUNT(b.scheinID) as scheine FROM ' . DB_PRE . 'ecp_user LEFT JOIN ' . DB_PRE . 'ecp_user_stats as a ON (a.userID = ID) LEFT JOIN ' . DB_PRE . 'ecp_ranks ON (rID = rankID) LEFT JOIN ' . DB_PRE . 'ecp_lotto_scheine as b ON (b.userID = ID) WHERE ID = ' . $_SESSION['userID'] . ' GROUP BY ID');
    $db->query('SELECT SUM(gewinn) as gewinn, art FROM ' . DB_PRE . 'ecp_lotto_gewinner WHERE userID = ' . $_SESSION['userID'] . ' GROUP BY art');
    $user['wonmoney'] = 0;
    $user['2ermoney'] = 0;
    $user['3ermoney'] = 0;
    $user['4ermoney'] = 0;
    while ($row = $db->fetch_assoc()) {
        $user['wonmoney'] += $row['gewinn'];
        $user[$row['art'] . 'ermoney'] = $row['gewinn'];
    }
    $user['runden'] = $db->result(DB_PRE . 'ecp_lotto_scheine', 'COUNT(DISTINCT(rundenID)) as runden', 'userID = ' . $_SESSION['userID']);
    $user['gesamtrunden'] = mysql_result($db->query('SHOW TABLE STATUS LIKE "' . DB_PRE . 'ecp_lotto_runden"'), 0, 'Auto_increment') - 1;
    $user['tage'] = ceil((time() - $user['registerdate']) / 86400);
    $user['teilqoute'] = format_nr($user['runden'] / ($user['gesamtrunden'] == 0 ? 1 : $user['gesamtrunden']) * 100, 2);
    $user['scheinrunde'] = format_nr($user['scheine'] / ($user['runden'] == 0 ? 1 : $user['runden']), 2);
    $user['winscheine'] = format_nr($user['2er'] + $user['3er'] + $user['4er']);
    $user['winqoute'] = format_nr($user['winscheine'] / ($user['scheine'] == 0 ? 1 : $user['scheine']) * 100, 2);
    $user['registerdate'] = date(LONG_DATE, $user['registerdate']);
    $user['2erpro'] = format_nr($user['2er'] / ($user['winscheine'] == 0 ? 1 : $user['winscheine']) * 100, 2);
    $user['3erpro'] = format_nr($user['3er'] / ($user['winscheine'] == 0 ? 1 : $user['winscheine']) * 100, 2);
    $user['4erpro'] = format_nr($user['4er'] / ($user['winscheine'] == 0 ? 1 : $user['winscheine']) * 100, 2);
    $user['2ermpro'] = format_nr($user['2ermoney'] / ($user['wonmoney'] == 0 ? 1 : $user['wonmoney']) * 100, 2);
    $user['3ermpro'] = format_nr($user['3ermoney'] / ($user['wonmoney'] == 0 ? 1 : $user['wonmoney']) * 100, 2);
    $user['4ermpro'] = format_nr($user['4ermoney'] / ($user['wonmoney'] == 0 ? 1 : $user['wonmoney']) * 100, 2);
    foreach ($user as $key => $value) {
        if ($key == 'clicks' or $key == 'comments' or $key == 'gesamtrunden' or $key == 'runden' or $key == 'msg_s' or $key == 'msg_r' or $key == 'profilhits' or $key == 'scheine' or $key == '2er' or $key == '3er' or $key == '4er') {
            $value = format_nr($value);
        }
        if ($key == 'money' or $key == 'wonmoney' or $key == '2ermoney' or $key == '3ermoney' or $key == '4ermoney') {
            $value = format_nr($value, 2);
        }
        $tpl->assign($key, $value);
    }
    $db->query('SELECT `awardID`, `eventname`, `eventdatum`, `url`, `platz`, `teamID`, `gID`, `preis`, tname, icon, gamename, COUNT(comID) as comments FROM `' . DB_PRE . 'ecp_awards` LEFT JOIN ' . DB_PRE . 'ecp_teams ON tID = teamID LEFT JOIN ' . DB_PRE . 'ecp_wars_games ON gameID = gID LEFT JOIN ' . DB_PRE . 'ecp_comments ON (bereich = "awards" AND subID = awardID) WHERE spieler LIKE "%,' . $_SESSION['userID'] . ',%" GROUP BY awardID ORDER BY eventdatum DESC');
    $awards = array();
    while ($row = $db->fetch_assoc()) {
        $row['eventdatum'] = date('d.m.Y', $row['eventdatum']);
        $awards[] = $row;
    }
    $tpl->assign('awards', $awards);
    $tpl->assign('award', count($awards));
    $db->query('SELECT `warID`, ' . DB_PRE . 'ecp_wars.datum, `result`, `resultscore`, `tname`, `oppname`, `country`, ' . DB_PRE . 'ecp_wars_opp.homepage, `icon`, `gamename`, `matchtypename`, COUNT(comID) as comments 
					FROM ' . DB_PRE . 'ecp_wars 
					LEFT JOIN ' . DB_PRE . 'ecp_teams ON ' . DB_PRE . 'ecp_teams.tID = ' . DB_PRE . 'ecp_wars.tID 
					LEFT JOIN ' . DB_PRE . 'ecp_wars_games ON gID = gameID 
					LEFT JOIN ' . DB_PRE . 'ecp_wars_opp ON oID = oppID 
					LEFT JOIN ' . DB_PRE . 'ecp_wars_matchtype ON mID = matchtypeID 
					LEFT JOIN ' . DB_PRE . 'ecp_comments ON (subID = warID AND bereich = "clanwars") 
					WHERE status = 1 AND ownplayers LIKE "%,' . $_SESSION['userID'] . ',%"
					GROUP BY warID
					ORDER BY datum DESC');
    $clanwars = array();
    while ($row = $db->fetch_assoc()) {
        $row['datum'] = date('d.m.y', $row['datum']);
        $row['countryname'] = $countries[$row['country']];
        $clanwars[] = $row;
    }
    $tpl->assign('clanwars', $clanwars);
    $tpl->assign('clanwar', count($clanwars));
    ob_start();
    $tpl->display(DESIGN . '/tpl/user/user_stats.html');
    $content = ob_get_contents();
    ob_end_clean();
    main_content(STATS, $content, '', 1);
}
Example #23
0
function comments_edit($bereich, $subid, $id, $conditions, $session = '', $admin = '')
{
    global $db;
    $com = $db->fetch_assoc('SELECT `subID`, `bereich`, `userID`, `author`, `beitrag`, `email`, `homepage`, `datum`, `editdatum`, `editby`, `edits`, `IP` FROM ' . DB_PRE . 'ecp_comments WHERE subID = ' . $subid . ' AND bereich = "' . strsave($bereich) . '" AND comID = ' . $id);
    if (isset($com['subID'])) {
        if (isset($_SESSION['userID']) and (@$_SESSION['rights']['public'][$session ? $session : $bereich]['com_edit'] and $_SESSION['userID'] == $com['userID'] and $com['userID'] != 0 or @$_SESSION['rights']['admin'][$bereich][$admin ? $admin : 'com_edit'] or @$_SESSION['rights']['superadmin'])) {
            if (isset($_POST['submit'])) {
                if ($_POST['commentstext'] == '') {
                    table(ERROR, NO_INPUT);
                    $tplc = new smarty();
                    $tplc->assign('section', $conditions['section'] ? $conditions['section'] : $bereich);
                    $tplc->assign('action', $conditions['action']);
                    $tplc->assign('id', $id);
                    $tplc->assign('edit', 1);
                    $tplc->assign('userID', $com['userID']);
                    $tplc->assign('sub', '&subid=' . $subid);
                    foreach ($_POST as $key => $value) {
                        $tplc->assign($key, $value);
                    }
                    ob_start();
                    $tplc->display(DESIGN . '/tpl/comment_add_edit.html');
                    $content = ob_get_contents();
                    ob_end_clean();
                    main_content(EDIT_COMMENT, $content, '', 1);
                } else {
                    if ($com['userID'] == 0) {
                        if ($_POST['author'] == '') {
                            table(ERROR, NOT_NEED_ALL_INPUTS);
                            $tplc = new smarty();
                            $tplc->assign('section', $conditions['section'] ? $conditions['section'] : $bereich);
                            $tplc->assign('action', $conditions['action']);
                            $tplc->assign('id', $id);
                            $tplc->assign('edit', 1);
                            $tplc->assign('userID', $com['userID']);
                            $tplc->assign('sub', '&subid=' . $subid);
                            foreach ($_POST as $key => $value) {
                                $tplc->assign($key, $value);
                            }
                            ob_start();
                            $tplc->display(DESIGN . '/tpl/comment_add_edit.html');
                            $content = ob_get_contents();
                            ob_end_clean();
                            main_content(EDIT_COMMENT, $content, '', 1);
                        } else {
                            $sql = sprintf('UPDATE
												' . DB_PRE . 'ecp_comments SET
												`author` = \'%s\', `beitrag` = \'%s\', `email` = \'%s\', `homepage` = \'%s\', `editdatum` = %d, `editby` = %d, `edits` = edits + 1 
											WHERE comID = %d', strsave(htmlspecialchars($_POST['author'])), strsave(comment_save($_POST['commentstext'])), strsave(htmlspecialchars($_POST['email'])), strsave(htmlspecialchars(check_url($_POST['homepage']))), time(), $_SESSION['userID'], $id);
                            if ($db->query($sql)) {
                                $anzahl = $db->result(DB_PRE . 'ecp_comments', 'COUNT(comID)', 'subID = ' . $subid . ' AND bereich = "' . $bereich . '" AND comID ' . ($conditions['ORDER'] == "ASC" ? '<' : '>') . ' ' . $id);
                                $seiten = ceil($anzahl / $conditions['LIMIT']);
                                header1($conditions['link'] . '&page=' . $seiten . '#com_' . $id);
                            }
                        }
                    } else {
                        $sql = sprintf('UPDATE 
											' . DB_PRE . 'ecp_comments SET 
											`beitrag` = \'%s\', `editdatum` = %d, `editby` = %d, `edits` = edits + 1  
										WHERE comID = %d', strsave(comment_save($_POST['commentstext'])), time(), $_SESSION['userID'], $id);
                        if ($db->query($sql)) {
                            $anzahl = $db->result(DB_PRE . 'ecp_comments', 'COUNT(comID)', 'subID = ' . $subid . ' AND bereich = "' . $bereich . '" AND comID ' . ($conditions['ORDER'] == "ASC" ? '<=' : '>=') . ' ' . $id);
                            $seiten = ceil($anzahl / $conditions['LIMIT']);
                            header1($conditions['link'] . '&page=' . $seiten . '#com_' . $id);
                        }
                    }
                }
            } else {
                $tplc = new Smarty();
                $tplc->assign('section', $conditions['section'] ? $conditions['section'] : $bereich);
                $tplc->assign('action', $conditions['action']);
                $tplc->assign('id', $id);
                $tplc->assign('edit', 1);
                $tplc->assign('sub', '&subid=' . $subid);
                $tplc->assign('commentstext', htmlentities($com['beitrag']));
                $tplc->assign('userID', $com['userID']);
                $tplc->assign('author', $com['author']);
                $tplc->assign('homepage', $com['homepage']);
                $tplc->assign('email', $com['email']);
                ob_start();
                $tplc->display(DESIGN . '/tpl/comment_add_edit.html');
                $content = ob_get_contents();
                ob_end_clean();
                main_content(EDIT_COMMENT, $content, '', 1);
            }
        } else {
            table(ACCESS_DENIED, NO_ACCESS_RIGHTS);
        }
    } else {
        table(ERROR, NO_ENTRIES_ID);
    }
}
Example #24
0
function news_once($id)
{
    global $db;
    $anzahl = $db->result(DB_PRE . 'ecp_news', 'COUNT(newsID)', '(lang = "" OR lang LIKE ",%' . LANGUAGE . '%,") AND ' . DB_PRE . 'ecp_news.datum < ' . time() . ' AND (access = "" OR ' . $_SESSION['access_search'] . ') AND newsID = ' . $id);
    if (!isset($_SESSION['news'][(int) $_GET['id']])) {
        if ($db->query('UPDATE ' . DB_PRE . 'ecp_news SET hits = hits + 1 WHERE newsID = ' . (int) $_GET['id'])) {
            $_SESSION['news'][(int) $_GET['id']] = true;
        }
    }
    $sql = 'SELECT `newsID`, `' . DB_PRE . 'ecp_news`.`userID`, `topicID`, `' . DB_PRE . 'ecp_news`.`datum`, `headline`, `bodytext`, `extendtext`, `links`, `hits`,
							  `username`, `topicname`, `topicbild`, `beschreibung`
						FROM ' . DB_PRE . 'ecp_news 
						LEFT JOIN ' . DB_PRE . 'ecp_user ON (' . DB_PRE . 'ecp_news.userID = ID)  
						LEFT JOIN ' . DB_PRE . 'ecp_topics ON (topicID = tID) 
						WHERE (lang = "" OR lang LIKE ",%' . LANGUAGE . '%,") AND ' . DB_PRE . 'ecp_news.datum < ' . time() . ' AND (access = "" OR ' . $_SESSION['access_search'] . ') AND newsID = ' . $id . ' GROUP BY newsID';
    if ($anzahl) {
        $db->query($sql);
        while ($row = $db->fetch_assoc()) {
            $tpl = new smarty();
            $tpl->assign('comment', 1);
            $row['bodytext'] = bb_code($row['bodytext']);
            $row['extendtext'] = bb_code($row['extendtext']);
            $row['datum'] = date(LONG_DATE, $row['datum']);
            $row['links'] = news_links($row['links']);
            foreach ($row as $key => $value) {
                $tpl->assign($key, $value);
            }
            $tpl->assign('pic', file_exists('templates/' . DESIGN . '/images/topics/' . $row['topicbild']) ? 'templates/' . DESIGN . '/images/topics/' . $row['topicbild'] : 'images/topics/' . $row['topicbild']);
            ob_start();
            $tpl->display(DESIGN . '/tpl/news/news.html');
            $content = ob_get_contents();
            ob_end_clean();
            main_content('<a href="?section=news&amp;action=topic&amp;id=' . $row['topicID'] . '">' . $row['topicname'] . '</a>: ' . $row['headline'], $content, '', 0);
        }
    } else {
        table(INFO, NO_ENTRIES_ID);
    }
}
Example #25
0
function clankasse_buchungen($monat, $jahr)
{
    global $db;
    $monate = array();
    $tpl = new Smarty();
    if ($monat > 6) {
        $tpl->assign('vmonat', $monat - 6);
        $tpl->assign('vjahr', $jahr);
    } else {
        $diff = $monat - 6;
        $tpl->assign('vmonat', 12 + $diff);
        $tpl->assign('vjahr', $jahr - 1);
    }
    $tpl->assign('startm', $monat);
    $tpl->assign('startj', $jahr);
    for ($i = 0; $i < 6; $i++) {
        $monate[$jahr . '_' . $monat]['datum'] = $monat++ . '/' . $jahr;
        if ($monat == 13) {
            $monat = 1;
            $jahr++;
        }
    }
    $tpl->assign('nmonat', $monat);
    $tpl->assign('njahr', $jahr);
    $db->query('SELECT username, userID, verwendung, monatgeld FROM ' . DB_PRE . 'ecp_clankasse_member LEFT JOIN ' . DB_PRE . 'ecp_user ON userID = ID ORDER BY username ASC');
    $user = array();
    while ($row = $db->fetch_assoc()) {
        $row['geld'] = number_format($row['monatgeld'], 2, ',', '.');
        $user[] = $row;
    }
    $tpl->assign('user', $user);
    $db->query('SELECT geld, verwendung, vonuser FROM ' . DB_PRE . 'ecp_clankasse_transaktion WHERE vonuser != 0 AND verwendung LIKE "%/%"');
    while ($row = $db->fetch_assoc()) {
        $monat = explode('/', $row['verwendung']);
        if (isset($monate[$monat[0] . '_' . $monat[1]])) {
            $monate[$monat[0] . '_' . $monat[1]][$row['vonuser']]['geld'] = $row['geld'];
        }
    }
    $tpl->assign('user', $user);
    $tpl->assign('monate', $monate);
    ob_start();
    $tpl->display(DESIGN . '/tpl/clankasse/overview.html');
    $content = ob_get_contents();
    ob_end_clean();
    main_content(OVERVIEW, '<div id="clankasse_overview">' . $content . '</div>', '', 1);
}
Example #26
0
<?php

global $db;
if (isset($_GET['id'])) {
    $row = $db->fetch_assoc('SELECT headline, content FROM ' . DB_PRE . 'ecp_cms WHERE cmsID = ' . (int) $_GET['id'] . ' AND (access = "" OR ' . $_SESSION['access_search'] . ')');
    if (isset($row['headline'])) {
        $row['headline'] = json_decode($row['headline'], true);
        if (isset($row['headline'][LANGUAGE]) and $row['headline'][LANGUAGE] != '') {
            $row['headline'] = $row['headline'][LANGUAGE];
        } else {
            $row['headline'] = $row['headline'][DEFAULT_LANG];
        }
        $row['content'] = json_decode($row['content'], true);
        if (isset($row['content'][LANGUAGE]) and $row['content'][LANGUAGE] != '') {
            $row['content'] = $row['content'][LANGUAGE];
        } else {
            $row['content'] = $row['content'][DEFAULT_LANG];
        }
        if (!isset($_SESSION['cms'][(int) $_GET['id']])) {
            if ($db->query('UPDATE ' . DB_PRE . 'ecp_cms SET views = views + 1 WHERE cmsID = ' . (int) $_GET['id'])) {
                $_SESSION['cms'][(int) $_GET['id']] = true;
            }
        }
        main_content($row['headline'], $row['content'], '', 1);
    } else {
        table(ERROR, ACCESS_DENIED);
    }
} else {
}
Example #27
0
            header('Location: ' . $link);
        } else {
            table(ERROR, NO_ENTRIES_ID);
        }
    } else {
        $tpl = new smarty();
        $anzahl = $db->result(DB_PRE . 'ecp_links', 'COUNT(linkID)', '1');
        if ($anzahl) {
            $limits = get_sql_limit($anzahl, LIMIT_LINKS);
            $links = array();
            $db->query('SELECT * FROM ' . DB_PRE . 'ecp_links ORDER BY name ASC LIMIT ' . $limits[1] . ',' . LIMIT_LINKS);
            while ($row = $db->fetch_assoc()) {
                $row['hits'] = format_nr($row['hits'], 0);
                $links[] = $row;
            }
            $tpl->assign('links', $links);
            if ($limits[0] > 1) {
                $tpl->assign('seiten', makepagelink_ajax('?section=links', 'return load_links({nr});', @$_GET['page'], $limits[0]));
            }
            ob_start();
            $tpl->display(DESIGN . '/tpl/links/links.html');
            $content = ob_get_contents();
            ob_end_clean();
            main_content(LINKS, '<div id="weblinks">' . $content . '</div>', '', 1);
        } else {
            table(INFO, NO_ENTRIES);
        }
    }
} else {
    echo table(ACCESS_DENIED, NO_ACCESS_RIGHTS);
}
Example #28
0
function gallery_viewpic($id)
{
    global $db;
    $image = $db->fetch_assoc('SELECT gID, katename, b.access as kateacces, a.access as access, name, images, cID, folder, filename, uploaded, c.beschreibung, klicks, c.userID, username FROM ' . DB_PRE . 'ecp_gallery_images AS c LEFT JOIN ' . DB_PRE . 'ecp_gallery as a ON (gID = galleryID) LEFT JOIN ' . DB_PRE . 'ecp_user ON ID=c.userID LEFT JOIN ' . DB_PRE . 'ecp_gallery_kate as b ON (cID = kateID) WHERE imageID = ' . $id);
    if (isset($image['uploaded']) and find_access($image['access']) and find_access($image['kateacces'])) {
        if (!isset($_SESSION['gallery'][$id])) {
            $db->query('UPDATE ' . DB_PRE . 'ecp_gallery_images SET klicks=klicks+1 WHERE imageID = ' . $id);
            $_SESSION['gallery'][$id] = true;
        }
        $tpl = new smarty();
        $image['uploaded'] = date(LONG_DATE, $image['uploaded']);
        $tpl->assign('pfad', '<a href="?section=gallery">' . GALLERY . '</a> <img src="templates/' . DESIGN . '/images/pfeil_o.gif" alt="" /> <a href="?section=gallery&action=kate&id=' . $image['cID'] . '">' . $image['katename'] . '</a> <img src="templates/' . DESIGN . '/images/pfeil_o.gif" alt="" /> <a href="?section=gallery&action=gallery&id=' . $image['gID'] . '">' . $image['name'] . '</a>');
        $tpl->assign('vorID', @$db->result(DB_PRE . 'ecp_gallery_images', 'imageID', 'gID = ' . $image['gID'] . ' AND imageID < ' . $id . ' ORDER BY imageID DESC LIMIT 1'));
        $tpl->assign('nachID', @$db->result(DB_PRE . 'ecp_gallery_images', 'imageID', 'gID = ' . $image['gID'] . ' AND imageID > ' . $id . ' ORDER BY imageID ASC LIMIT 1'));
        foreach ($image as $key => $value) {
            $tpl->assign($key, $value);
        }
        ob_start();
        $tpl->display(DESIGN . '/tpl/gallery/view_pic.html');
        $content = ob_get_contents();
        ob_end_clean();
        main_content(GALLERY, '<div id="display_pic">' . $content . '</div>', '', 1);
    } else {
        table(ERROR, NO_ENTRIES_ID);
    }
}
include_once 'ressources/class.rtmm.tools.inc';
if (isset($_GET["org"])) {
    $_GET["ou"] = $_GET["org"];
}
if (!PostFixMultiVerifyRights()) {
    $tpl = new templates();
    echo "alert('" . $tpl->javascript_parse_text("{ERROR_NO_PRIVS}") . "');";
    die;
    exit;
}
if (isset($_GET["in-front-ajax"])) {
    popup_js_front();
    exit;
}
if (isset($_GET["content"])) {
    main_content();
    exit;
}
if (isset($_GET["left-menus"])) {
    left_menus();
    exit;
}
if (isset($_GET["add-server"])) {
    add_server_popup();
    exit;
}
if (isset($_GET["inet_interfaces"])) {
    add_server_save();
    exit;
}
if (isset($_GET["servers-list"])) {
Example #30
0
    $tpl->assign('tage', floor($tage));
    $tpl->assign('visits', format_nr($row['visits']));
    $tpl->assign('hits', format_nr($row['hits']));
    $tpl->assign('messages', format_nr(mysql_result($db->query('SHOW TABLE STATUS LIKE "%ecp_messages"'), 0, 'Auto_increment') - 1));
    $tpl->assign('awards', $db->result(DB_PRE . 'ecp_awards', 'COUNT(awardID)', '1'));
    $tpl->assign('news', format_nr($db->result(DB_PRE . 'ecp_news', 'COUNT(newsID)', '1')));
    $tpl->assign('surveys', format_nr($db->result(DB_PRE . 'ecp_survey', 'COUNT(surveyID)', '1')));
    $tpl->assign('clanwars', format_nr($db->result(DB_PRE . 'ecp_wars', 'COUNT(warID)', '1')));
    $tpl->assign('comments', format_nr($db->result(DB_PRE . 'ecp_comments', 'COUNT(comID)', 'bereich != "guestbook"')));
    $tpl->assign('members', format_nr($db->result(DB_PRE . 'ecp_user', 'COUNT(ID)', '1')));
    $row = $db->fetch_assoc('SELECT username, ID, registerdate FROM ' . DB_PRE . 'ecp_user ORDER BY registerdate DESC LIMIT 1');
    $tpl->assign('lastmember', '<a href="?section=user&id=' . $row['ID'] . '">' . $row['username'] . '</a> (' . date('d.m.Y', $row['registerdate']) . ')');
    $row = $db->fetch_assoc('SELECT SUM(traffic) as traffic, COUNT(*) as anzahl FROM ' . DB_PRE . 'ecp_downloads');
    $tpl->assign('downloads', format_nr($row['anzahl']));
    $tpl->assign('traffic', goodsize($row['traffic']));
    $tpl->assign('money', format_nr($db->result(DB_PRE . 'ecp_user_stats', 'SUM(money)', '1')));
    $tpl->assign('members', format_nr($db->result(DB_PRE . 'ecp_user', 'COUNT(ID)', '1')));
    $row = $db->fetch_assoc('SELECT SUM(images) as images, COUNT(*) as gallery FROM ' . DB_PRE . 'ecp_gallery');
    $tpl->assign('images', format_nr($row['images']));
    $tpl->assign('galleries', format_nr($row['gallery']));
    $row = $db->fetch_assoc('SELECT SUM(threads) as threads, SUM(posts) AS posts FROM ' . DB_PRE . 'ecp_forum_boards');
    $tpl->assign('threads', format_nr($row['threads']));
    $tpl->assign('posts', format_nr($row['posts']));
    ob_start();
    $tpl->display(DESIGN . '/tpl/stats/overview.html');
    $content = ob_get_contents();
    ob_end_clean();
    main_content(STATS, $content, '', 1);
} else {
    table(ACCESS_DENIED, NO_ACCESS_RIGHTS);
}