function ListMod($modstring)
{
global $db, $SNAME;
$matr = explode("%", $modstring);
for ($counter = 0, $tmp = count($matr); $counter < $tmp; $counter++) {
if (!$nick[$matr[$counter]]) {
$modhash = mysql_escape_string(pack("H*", $matr[$counter]));
if ($modhash) {
$modnick = $db->get_var("SELECT AUTORE FROM {$SNAME}_membri WHERE HASH='{$modhash}';");
}
$nick[$matr[$counter]] = $modnick;
}
if ($counter > 0 && $counter != $tmp - 1) {
$modlist .= ", ";
}
if ($matr[$counter]) {
$modlist .= '<a href="showmember.php?MEM_ID=' . $matr[$counter] . '"><font color="#808080">' . secure_v($nick[$matr[$counter]]) . "</font></a>";
}
}
return $modlist;
}
if ($users) {
$result = '<br />Auguri a: ';
foreach ($users as $id => $nick) {
$result .= "<a href='showmember.php?MEM_ID={$id}'>{$nick}</a>, ";
}
$result = substr($result, 0, -2);
echo $result;
}
break;
case 'last_user':
$query = "\r\n\t\tSELECT {$SNAME}_membri.hash , {$SNAME}_membri.autore as nick\r\n\t\tfrom {$SNAME}_membri\r\n\t\twhere {$SNAME}_membri.is_auth = '1'\r\n\t\torder by date desc\r\n\t\tlimit 1";
$result = $db->get_results($query);
if ($result) {
foreach ($result as $user) {
list($asd, $id) = unpack('H*', $user->hash);
$nick = secure_v($user->nick);
$users[$id] = $nick;
}
}
if ($users) {
$result = '<br />L\'ultimo arrivato: ';
foreach ($users as $id => $nick) {
$result .= "<a href='showmember.php?MEM_ID={$id}'>{$nick}</a>, ";
}
$result = substr($result, 0, -2);
echo $result;
}
default:
break;
}
unset($users, $result);
</td>
<!-- Profile -->
<td width="50%" valign="top" style="padding-right: 0;">
<table cellspacing="1" class="borderwrap" width='100%'>
<tr>
<td align="center" colspan="2" class="maintitle">
<?php
echo $lang['shmbr_otherinfo'];
?>
</td>
</tr>
<!-- Extraz -->
<?php
if ($user['extra']) {
foreach ($user['extra'] as $key => $value) {
echo "\r\n\t\t\t\t<tr>\r\n\t\t\t\t\t<td class='row2' valign='top' width='1%'><b>" . ucfirst($key) . ":</b></td>\r\n\t\t\t\t\t<td class='row1'>" . convert(secure_v($value)) . "</td>\r\n\t\t\t\t</tr>";
}
} else {
echo "\r\n\t\t\t\t<tr>\r\n\t\t\t\t\t<td class='row2' valign='top'><i>{$lang['shmbr_noinfo']}</i></td>\r\n\t\t\t\t</tr>";
}
?>
</table>
</td>
</tr>
</table>
<br />
<div class="borderwrap">
<table cellspacing="1" width='100%'>
<tr>
<td class="maintitle"><?php
echo " " . $lang['shmbr_sign'] . " ";
</div>
<table cellspacing="1">
<tR><?php
echo titoli($titoli_array);
?>
</tR>
<?php
# 2 Scambio nodi
# 1 passivo
# 3 manuale
$str_trovato = array('1' => $lang['gestip_passive'], $lang['gestip_nodeexc'], $lang['gestip_usrsource'], $lang['gestip_httpsource']);
if ($risultato) {
foreach ($risultato as $ris) {
$count++;
echo "\t<tr>\n\t<td class=row2>" . Num2Ip($ris->IP) . "</td>\n\t<td class=row1>{$ris->TCP_PORT}</td>\n\t<td class=row2>{$ris->CLIENT_NAME}</td>\n\t<td class=row1>{$ris->CLIENT_VER}</td>\n\t<td class=row2>" . secure_v($ris->DESC) . "</td>\n\t<tD class=row1>{$ris->FALLIMENTI}</tD>\n";
unset($chec);
$how = $str_trovato[$ris->TROVATO];
echo "\t<tD class=row2>{$how}</td>\n\t<td class=row1>";
$chec[$ris->STATIC]['start'] = "<b>";
$chec[$ris->STATIC]['end'] = "</b>";
//echo "<INPUT type=CHECKBOX name=STATIC[$count] value='1' $chec></td>\n";
echo "{$chec[1]['start']}y{$chec[1]['end']}<input type=\"radio\" value=1 name=static[{$count}] >{$chec[0]['start']}n{$chec[0]['end']}<input type=\"radio\" name=static[{$count}] value=0>";
echo "\t<tD class=row2><INPUT type=CHECKBOX name=delete[{$count}] value='1'><input type=hidden name=ip[{$count}] value='{$ris->IP}'></td>\n" . "\t</tR>\n";
}
}
echo "</table></div>\n<input type=hidden name=action value=update>\n<div align=right><input type=submit value=update></div>\n<br><br><br><br>";
echo "</form>";
?>
<form method='post' action=''>
?>
&THR_ID=<?php
echo $iden['hex'];
?>
&pag=last#end_page">
<?php
echo $lang['topic_last'];
?>
</a>:
<b>
<a href='showmember.php?MEM_ID=<?php
echo $dnickhash['alfa'];
?>
'>
<?php
echo secure_v($riga->dnick);
?>
</a>
</b>
</small>
</tD>
</tr>
<?php
}
}
echo "</table></div>";
echo "</td></tr>";
PageSelect();
}
// FI - Forum di categoria
} else {
<div class="navstrip">
<img src="img/3.gif" alt="" /> <a href="index.php"><?php
echo $lang['navstrp_findex'];
?>
</a>
<?php
$seznum = 0;
if ($SEZ_DATA->ID) {
$notlastid = $SEZ_DATA->ID;
$seznum = 1;
while ($notlastid) {
$querysez = "SELECT ID, SEZ_NAME, FIGLIO FROM {$SNAME}_sez WHERE ID='{$notlastid}';";
$notlast = $db->get_row($querysez);
$notlastid = $notlast->ID;
$sezvet[$seznum] = "<img src='img/3.gif' alt=''> <a href='sezioni.php?SEZID=" . $notlastid . "'>" . secure_v($notlast->SEZ_NAME) . "</a>\n";
$notlastid = $notlast->FIGLIO;
$seznum++;
}
$seznum2 = $seznum;
while ($seznum2) {
echo $sezvet[$seznum2];
$seznum2--;
}
}
if ($title) {
if ($title1->subtitle) {
$title = $title . ", " . $title1->subtitle;
}
echo " <img src=\"img/3.gif\" alt=\"\" /> " . $title . "\n";
}
if ($subsez) {
foreach ($subsez as $subsezval) {
if ($notfirst) {
$subsections = $subsections . ", <b><a href='sezioni.php?SEZID={$subsezval->ID}'>" . secure_v($subsezval->SEZ_NAME) . "</a></b>";
} else {
$subsections = "<br><i>" . $lang['subforums'] . "</i><b><a href='sezioni.php?SEZID=" . $subsezval->ID . "'>" . secure_v($subsezval->SEZ_NAME) . "</a></b>";
}
$notfirst = 1;
}
}
$moderators = $std->ListMod($sezval->MOD);
echo '
<tr>
<td class="row4" width="5%" align="center"><img src="img/bf_new.gif" alt=""></td>
<td class="row4"><b><a href="sezioni.php?SEZID=' . $sezval->ID . '">' . secure_v($sezval->SEZ_NAME) . '</a></b><br /><span class="desc">' . secure_v($sezval->SEZ_DESC) . $subsections . '<br /><font color="#808080"><i>' . $lang['col_moderators'] . ":" . $moderators . '</i></font><br /></span></td>
<td class="row2" align="center">' . $sezval->THR_NUM . '</td>
<td class="row2" align="center">' . $sezval->REPLY_NUM . '</td>
<td class="row2" nowrap="nowrap">' . $lang['last_in'] . '<a href="showmsg.php?SEZID=' . $MSG->SEZID . '&THR_ID=' . $hash['alfa'] . '&pag=last#end_page">' . secure_v($msg) . '</a><br>' . $lang['last_data'] . $write_date . '<br>' . $lang['last_from'] . '<a href="showmember.php?MEM_ID=' . $nickhash['alfa'] . '">' . secure_v($MSG->nick) . '</a></td>';
$totmsg = $totmsg + $sezval->THR_NUM + $sezval->REPLY_NUM;
}
}
echo "<tr> \r\n <td class='darkrow2' colspan=5> </td>\r\n </tr></table></div><br>";
}
}
?>
</td>
</tr>
<?php
include "end.php";
";
opener.location= "showmsg.php?SEZID=" + sid + "&THR_ID=" + tid;
self.close();
}
window.setTimeout("ReimpostaDimensioni('<?php
echo count($users);
?>
')", 20);
-->
</script>
<div class="borderwrap">
<div class="maintitle" align="center"><?php
echo $lang['who_reply'];
?>
: <?php
echo secure_v($thr_name);
?>
</div>
<table cellspacing="1" width="100%">
<tr>
<th width="70%" valign="middle"><?php
echo $lang['who_user'];
?>
</th>
<th width="30%" align="center" valign="middle"><?php
echo $lang['who_posts'];
?>
</th>
</tr>
<?php
if ($users) {
$extvar[UpdateMyAvatar][firma] = get_sign($user_id);
$mreq['TYPE'] = '4';
$mreq['BODY'] = 'Madifico il mio avatar :wacko:';
$mreq['_PRIVATE'] = base64_decode($userdata->PASSWORD);
$mreq['_PWD'] = $KEY_DECRYPT;
$mreq['EXTVAR'] = $core->Var2BinDump($extvar);
$risp = $core->AddMsg($mreq);
if (empty($risp['ERRORE'])) {
Success_Page("Successo!", "Modifiche apportate con successo", "options_avatar.php?MEM_ID={$user_id}", 1);
}
$is_post_back = 1;
}
}
$current_avatar = stripslashes(get_avatar($mem_id));
//Processing data
$current_avatar_nobb = convert(secure_v($current_avatar));
//OUTPUT
if (!$is_post_back) {
?>
<tr><td>
<table cellspacing="0" width="100%">
<tr>
<td valign="top" class="nopad" width="24%"><?php
echo show_menu();
?>
</td>
<td class="nopad" width="1%"><!-- --></td>
<!-- Start main CP area -->
<td valign="top" class="nopad" width="75%">
<div id="ucpcontent">
<div class="maintitle"><?php
// carico la lingua per l'edit
$lang += $std->load_lang('lang_ednewmsg', $blanguage);
if (!$_SESSION[$SNAME]['sess_auth']) {
$url = "login.php?SEZID=" . $_REQUEST["SEZID"] . "&THR_ID=" . $_REQUEST["EDIT_OF"] . "&pag=" . $_REQUEST["pag"];
echo "<tr><td><center>" . $lang['edmsg_login'] . "<br>";
echo "" . $lang['edmsg_loginred'] . "</center></td></tr><script language=\"javascript\">setTimeout('delayer()', 1500);\nfunction delayer(){ window.location='{$url}';}</script>";
include "end.php";
exit(0);
}
$EDITID = mysql_real_escape_string(pack("H*", $_REQUEST["EDIT_OF"]));
$query = "SELECT title,subtitle,body from {$SNAME}_newmsg as msg where EDIT_OF='{$EDITID}' and visibile='1';";
$riga = $db->get_row($query);
if ($riga) {
$Testo = htmlspecialchars(stripslashes($riga->body));
$Titolo = secure_v($riga->title);
$SubTitolo = secure_v($riga->subtitle);
} else {
$Testo = "";
$Titolo = "";
}
if ($userdata->LEVEL > 0) {
$Pinned = "";
$Fixed = "";
$Home = "";
$Lock = "";
$query = "SELECT PINNED, FIXED, HOME, block_date from {$SNAME}_msghe WHERE HASH='{$EDITID}';";
$riga = $db->get_row($query);
if ($riga) {
$Pinned = $riga->PINNED;
$Fixed = $riga->FIXED;
$Home = $riga->HOME;
if ($result) {
foreach ($result as $row) {
$board_conf[$row->SUBKEY] = $row->value;
}
}
$to_show[] = array('num' => $i + 1, 'nome' => $board[$i]['nome'], 'bind' => $bind, 'porta' => $config['WEBSERVER'][$board[$i]['nome']]['PORTA'], 'pkey' => $board[$i]['pkey'], 'conf' => $board_conf);
}
}
}
if ($to_show) {
foreach ($to_show as $key => $array) {
$nota_estesa = secure_v($array['conf']['NOTE']);
if (strlen($nota_estesa) > 100) {
$nota_taglio = html_substr($nota_estesa, 70);
}
echo "\r\n\t<tr>\r\n\t<td class='row1' align='center'>{$array['num']}</td>\r\n\t<td class='row2' align='left'><a target='_blank' href='http://{$array['bind']}:{$array['porta']}'>{$array['nome']}</a></td>\r\n\t<!-- <td class='row2' align='center'>{$bind}</td>\r\n\t<td class='row2' align='center'>{$array['porta']}</td>-->\r\n\t<td class='row2' align='center'>{$array['conf']['NAME']}</td>\r\n\t<td class='row2' align='center'>{$array['conf']['ADMIN_NAME']}</td>\r\n\t<td class='row2' >" . convert(secure_v($array['conf']['DESCRIZIONE'])) . "</td>\t\r\n\t<td class='row2' ><p title='{$nota_estesa}'>{$nota_taglio}...</td>\t\t\r\n\t<!-- Problemi di layout: <td class='row2' >\r\n\t\t<textarea name='chiave' cols='1' rows='3' readonly class='row2' style='width:100%;border: none;overflow:auto;'>{$array['pkey']}</textarea></td>\n--> \r\n\t</tr>";
}
}
?>
</table>
</div>
<?php
PageSelect();
?>
</td>
</tr>
<?php
include "end.php";
//FUNZIONI
}
} else {
if ($_REQUEST['nonvalidati']) {
$risultato = $db->get_results("SELECT HASH,AUTORE, DATE, is_auth, msg_num FROM {$SNAME}_membri WHERE is_auth='0' ORDER BY " . $order_by . $order . " LIMIT " . $CurrPag * $UserXPage . ",{$UserXPage};");
} else {
$risultato = $db->get_results("SELECT HASH,AUTORE, DATE, is_auth, msg_num FROM {$SNAME}_membri WHERE is_auth='2' ORDER BY " . $order_by . $order . " LIMIT " . $CurrPag * $UserXPage . ",{$UserXPage};");
}
}
# 2 Scambio nodi
# 1 passivo
# 3 manuale
$i = $CurrPag * $UserXPage;
if ($risultato) {
foreach ($risultato as $ris) {
$userhash = unpack("H32hex", $ris->HASH);
echo "\r\n <tr>\r\n\t<td class='row1' align='right'>" . ++$i . "</td>\r\n\t<td class='row2' align='left'> <a href='showmember.php?MEM_ID={$userhash['hex']}'>" . secure_v($ris->AUTORE) . "</a></td>\r\n\t<td class='row2' align='center'>" . $userhash['hex'] . "</td>\r\n\t<td class='row1' align='center'>" . strftime("%d/%m/%y - %H:%M:%S", $ris->DATE) . "</td>\r\n\t<td class='row1' align='right'>" . $ris->msg_num . "</td>\r\n\t<td class='row2' align='center'>";
if ($ris->is_auth) {
echo $lang['usrlist_member'] . "</td>\n<td class='row2'>";
} else {
echo $lang['usrlist_validated'];
// Validator or Admin only
if ($userdata->LEVEL > 8) {
echo "</td>\n\t<td class='row2'><input type=\"checkbox\" name=\"toauth[{$i}]\" value=\"{$userhash['hex']}\" />Auth";
$displaysubmit = 1;
} else {
echo "</td>\n<td class='row2'>";
}
}
echo "</td>\n</tr>";
}
}
function printmsg($MSG, $postlink)
{
global $GLOBALS;
global $blanguage;
global $lang;
global $std;
global $userdata;
global $db;
global $member_titles;
global $closed;
global $SNAME;
$query = "SELECT VALORE as 'is_mod'\r\n \tFROM {$SNAME}_permessi\r\n \tWHERE AUTORE='" . mysql_real_escape_string($MSG->memhash) . "'\r\n \tAND {$SNAME}_permessi.chiave_a = '{$_GET['SEZID']}'\r\n \tAND {$SNAME}_permessi.chiave_b ='IS_MOD'\r\n \tORDER BY DATE DESC;";
$riga = $db->get_row($query);
$MSG->is_mod = $riga->is_mod;
$usercolor = $std->GetUserColor($MSG->memhash);
$mio_nick = $_SESSION[$SNAME]['sess_nick'];
if ($MSG->date) {
$write_date = strftime("%d/%m/%y - %H:%M:%S", $MSG->date);
}
$hash = unpack("H32hex", $MSG->hash);
if (eregi("http:\\/\\/", secure_v($MSG->avatar))) {
if (!$userdata->HIDEAVATAR) {
$avatar = "<img src='" . $MSG->avatar . "'alt=''><br />";
}
}
if ($MSG->regdate) {
$register_date = strftime("%d/%m/%y", $MSG->regdate);
}
if ($MSG->gruppo) {
$gruppo = $MSG->gruppo;
} else {
$gruppo = "membri";
}
if ($MSG->is_mod) {
$Is_mod = "<span style='color:#FF0000'>Moderatore</span><br />";
} else {
$Is_mod = '';
}
if ($MSG->memhash) {
$tmp = unpack("H32hash", $MSG->memhash);
$autore = "<a href='showmember.php?MEM_ID=" . $tmp['hash'] . "'>" . secure_v($MSG->autore) . "</a>";
if ($MSG->is_auth) {
$auth = "<b>YES</b>";
} else {
$auth = "<a href='admin.pl?action=AuthMem&HASH=" . $tmp['hash'] . "'>NO</a>";
}
} else {
$autore = secure_v($MSG->autore);
if ($MSG->is_auth) {
$auth = "<b>YES</b>";
} else {
$auth = "NO";
}
}
if ($userdata->LEVEL or $MSG->autore == $mio_nick) {
if ($MSG->repof) {
$tmp = unpack("H32repof/H32mshash", $MSG->repof . $MSG->hash);
$EDITER = "<a href='edreply.php?REP_OF=" . $tmp['repof'] . "&EDIT_OF=" . $tmp['mshash'] . "&SEZID=" . $_REQUEST["SEZID"] . "'><img src=\"img/buttons/" . $blanguage . "/p_edit.gif\" border=\"0\" alt=\"Edit\" ></a>";
} elseif ($MSG->SEZ) {
$tmp = unpack("H32mshash", $MSG->edit_of);
$EDITER = "<a href='ednewmsg.php?EDIT_OF=" . $tmp['mshash'] . "&SEZID={$MSG->SEZ}'><img src=\"img/buttons/" . $blanguage . "/p_edit.gif\" border=\"0\" alt=\"Edit\" ></a>";
}
}
if ($MSG->edit_of != $MSG->hash) {
$queryaut = "SELECT AUTORE FROM `" . $_SERVER["sesname"] . "_membri` WHERE HASH='" . mysql_real_escape_string($MSG->real_autore) . "' LIMIT 1;";
$realautore = $db->get_var($queryaut);
$MSG->body = $MSG->body . "\n\n\n\n [SIZE=1][COLOR=blue]" . $lang['shmsg_modby'] . " " . secure_v($realautore) . " " . $lang['shmsg_on'] . " " . strftime("%d/%m/%y - %H:%M:%S", $MSG->real_date) . "[/COLOR][/SIZE]";
}
if ($MSG->real_hash and $MSG->edit_of != $MSG->real_hash) {
$queryaut = "SELECT AUTORE FROM `" . $_SERVER["sesname"] . "_membri` WHERE HASH='" . mysql_real_escape_string($MSG->real_autore) . "' LIMIT 1;";
$realautore = $db->get_var($queryaut);
$MSG->body = $MSG->body . "\n\n\n\n [SIZE=1][COLOR=blue]" . $lang['shmsg_modby'] . " " . secure_v($realautore) . " " . $lang['shmsg_on'] . " " . strftime("%d/%m/%y - %H:%M:%S", $MSG->real_date) . "[/COLOR][/SIZE]";
}
list($asd, $postid) = unpack('H*', $MSG->hash);
$MSG->body = secure_v($MSG->body);
// visualizzo le firme ?
if ($userdata->HIDESIG) {
$MSG->firma = "";
} else {
$MSG->firma = secure_v($MSG->firma);
}
// visualizzo lgli avatar
if ($userdata->HIDEAVATAR) {
$MSG->avatar = "";
}
// titolo utente e pips
$membertitle = $std->MemberTitle($member_titles, $MSG->msg_num);
$msg_link = "";
if ($postlink) {
$msg_link = "<span class='postdetails'>{$lang['shmsg_message']} <a title='{$lang['shmsg_msglnk']}' href='#' onclick='link_to_post(\"{$postid}\"); return false;'>#{$postlink}</a></span>";
}
echo <<<EOF
<a name='{$postlink}'></a>
<table width='100%' border='0' cellspacing='1' cellpadding='3'>
<tr>
<td valign='middle' class='row4' width='1%'><span class='normalname'><u>{$autore}</u></span>
<a id='post_{$postid}'></a>
</td>
<td class='row4' valign='top' width='99%'>
<div align='left' class='row4' style='float:left;padding-top:4px;padding-bottom:4px'>
<span class='postdetails'><b>{$lang['shmsg_sendon']}</b>{$write_date}</span>
</div>
<div align="right">
{$msg_link}
</div>
</td>
</tr>
<tr>
<td valign='top' class='post2'>
<span class='postdetails'><br />
{$avatar}
{$membertitle['title']}<br />
{$membertitle['pips']}<br />
{$Is_mod}
{$lang['shmsg_adminauth']}{$auth}<br />
{$lang['shmsg_group']}{$gruppo}<br />
{$lang['shmsg_messages']}{$MSG->msg_num}<br />
{$lang['shmsg_joined']}{$register_date}<br /><br />
</span><br />
<div align="center"><span
style="padding:2px;background:#{$usercolor['sx_color']};color:#{$usercolor['sx_color_i']};">{$usercolor['sx_color']}</span><span
style="padding:2px;background:#{$usercolor['dx_color']};color:#{$usercolor['dx_color_i']};">{$usercolor['dx_color']}</span>
</div>
<img src='img/spacer.gif' alt='' width='160' height='1' /><br />
</td>
<td width='100%' valign='top' class='post2'>
EOF;
$title = $MSG->title;
if ($MSG->subtitle) {
$title = $title . ", " . $MSG->subtitle;
}
if ($title) {
echo "<table border='1' bordercolor='#DEDEFF' cellspacing='0' cellpadding='0' width='100%' class='post_title'>\r\n \t\t<tr>\r\n\t\t\t<td bordercolor='#F0F0FF' class='postdetails'>\r\n\t\t\t\t<b>{$lang['shmsg_title']}</b>\r\n\t\t\t\t" . secure_v($title) . "\r\n\t\t\t</td>\r\n\t\t</tr>\r\n\t </table><br />";
}
$tmp = unpack("H32mshash", $MSG->edit_of);
echo "<div class='postcolor'> " . convert($MSG->body) . "</div>\r\n <br /><br />--------------------<br />\r\n <div class='signature'>" . convert($MSG->firma) . "</div>\r\n </td>\r\n</tr>\r\n<tr>\r\n <td class='darkrow3' align='left'><b> </b></td>\r\n <td class='darkrow3' nowrap='nowrap' align='left'>\r\n <!-- PM / EMAIL / WWW / MSGR / UP -->\r\n <div align='left' class='darkrow3' style='float:left;width:auto'>\r\n <a href='javascript:scroll(0,0);'><img src=\"img/buttons/" . $blanguage . "/p_up.gif\" border=\"0\" alt=''></a>\r\n </div>\r\n\r\n <!-- REPORT / UP -->\r\n <div align='right'>\r\n {$EDITER}";
if (!$closed) {
echo "<a href=\"reply.php?SEZID=" . $_REQUEST["SEZID"] . "&THR_ID=" . $_REQUEST["THR_ID"] . "&quote=" . $tmp['mshash'] . "\"><img src='img/buttons/" . $blanguage . "/p_quote.gif' alt='Quote' border='0'></a>";
}
echo "\r\n </div>\r\n </td>\r\n</tr>\r\n</table>\r\n<div class='darkrow1' style='height:5px'><!-- --></div>\r\n";
}
$query = "SELECT body,(reply.`date`+" . GMT_TIME . ") as data,membri.autore from {$SNAME}_reply as reply,{$SNAME}_membri as membri where reply.autore=membri.hash and reply.EDIT_OF='{$Quote}' and visibile='1';";
}
$riga = $db->get_row($query);
if ($riga) {
$quote_date = strftime("%d/%m/%y - %H:%M:%S", $riga->data);
$nquote = "[quote=" . secure_v($riga->autore) . " @ {$quote_date}]";
$box_text = $nquote . htmlspecialchars(stripslashes($riga->body)) . "[/quote]";
} else {
$box_text = "";
}
// Preview
if ($_REQUEST["preview"]) {
// Parser
include_once "lib/bbcode_parser.php";
$box_text = htmlspecialchars(stripslashes($_REQUEST["body"]));
$preview_text = "<div style=\"padding: 10px;width:95%\">{$lang['reply_preview']}:<br /><br />" . convert(secure_v($_REQUEST["body"])) . "</div><hr />";
}
echo <<<EOF
<script type="text/javascript">
<!--
function altezze(){
co1 = document.getElementById('colo-sx').offsetHeight;
co2 = document.getElementById('colo-dx').offsetHeight;
co3 = document.getElementById('centrale').offsetHeight;
altok = co1;
if (co2 > altok) altok = co2;
if (co3 > altok) altok = co3;
altokok = co1;
if (co2 < altokok) altokok = co2;
if (co3 < altokok) altokok = co3;
document.getElementById('colo-sx').style.height = altok + 'px';
function draw_forum($sez, $indice)
{
global $ris, $forum, $lang, $db, $SNAME, $hidesez, $sezcollector, $std, $mod, $userdata;
switch ($sez[level]) {
case 0:
if ($userdata->LEVEL >= 10) {
$sezeditor = "<a href='adminsez.php?SEZID={$sez['SEZ_ID']}'><img src='img/s_edit.gif' border='0' alt='Edit section' /></a>";
}
$divshow = in_array($sez['SEZ_ID'], $hidesez) ? 'none' : 'show';
$divhide = in_array($sez['SEZ_ID'], $hidesez) ? 'show' : 'none';
$sezcollector .= $sez['SEZ_ID'] . ",";
if ($sez['REDIRECT']) {
$link = "target='_blank' href='" . $sez['REDIRECT'];
} else {
$link = "href='sezioni.php?SEZID=" . $sez['SEZ_ID'];
}
echo "\r\n\t\t<div class='borderwrap' style='display:{$divhide}' id='divhide_{$sez['SEZ_ID']}'>\r\n\t\t <div class='maintitlecollapse'>\r\n\t\t <p class='expand'>{$sezeditor}<a href=\"javascript:ShowHideSection({$sez['SEZ_ID']},0,'{$SNAME}');\">\r\n\t\t <img src='img/exp_plus.gif' border='0' alt='Expand' /></a></p>\r\n\t\t <p>\r\n\t\t <a " . $link . "'>{$sez['SEZ_NAME']}</a></p>\r\n \t\t </div>\r\n\t\t</div>\r\n\t\t\r\n\t\t<div class='borderwrap' style='display:{$divshow}' id='divshow_{$sez['SEZ_ID']}'>\r\n\t\t <div class='maintitle' >\r\n\t\t <p class='expand'>{$sezeditor}<a href=\"javascript:ShowHideSection({$sez['SEZ_ID']},1,'{$SNAME}');\">\r\n\t\t <img src='img/exp_minus.gif' border='0' alt='Collapse' /></a></p>\r\n\t\t <p>\r\n\t\t <a " . $link . "'>{$sez['SEZ_NAME']}</a></p>\r\n \t\t</div>\r\n <table cellspacing=\"1\">\r\n <tr>\r\n <th align=\"left\" width=\"40%\" colspan=\"2\" class='titlemedium'>" . $lang['col_forum'] . "</th>\r\n <th align=\"center\" width=\"1%\" class='titlemedium'>" . $lang['col_topic'] . "</th>\r\n <th align=\"center\" width=\"1%\" class='titlemedium'>" . $lang['col_replies'] . "</th>\r\n <th align=\"left\" width=\"39%\" class='titlemedium'>" . $lang['col_lastpost'] . "</th>\r\n </tr>";
for ($i = 0; $i < $sez['num_figli']; $i++) {
$next_id = $ris[$indice + $i + 1];
$next_id = (int) $next_id['id'];
draw_forum($forum[$next_id], $indice + 1 + $i);
$num_sottofigli = sottofigli($forum[$next_id], $indice + 1);
$indice = $indice + $num_sottofigli;
}
echo "<tr><td class='darkrow2' colspan='5'> </td></tr></table></div><br>";
break;
case 1:
//Default value
$notfirst = 0;
$subsections = "";
for ($i = 0; $i < $sez['num_figli']; $i++) {
$next_id = $ris[$indice + $i + 1];
$next_id = (int) $next_id['id'];
if ($forum[$next_id]['REDIRECT']) {
$link = "target='_blank' href='" . $forum[$next_id]['REDIRECT'];
} else {
$link = "href='sezioni.php?SEZID=" . $forum[$next_id]['SEZ_ID'];
}
if ($notfirst) {
$subsections .= ", <b><a " . $link . "'>" . secure_v($forum[$next_id]['SEZ_NAME']) . "</a></b>";
} else {
$subsections = "<br><i>" . $lang['subforums'] . "</i><b><a " . $link . "'>" . secure_v($forum[$next_id][SEZ_NAME]) . "</a></b>";
}
$notfirst = 1;
}
//Ultimo messaggio
$sez['last_action'] = last_action($sez, $indice);
//Numero messaggi
list($num_sotto_reply, $num_sotto_thr) = get_reply_thr($sez, $indice);
$sez['REPLY_NUM'] = $num_sotto_reply;
$sez['THR_NUM'] = $num_sotto_thr;
if ($sez['last_action']['date'] !== NULL) {
//formattazione data;
$write_date = $std->PostDate($sez['last_action']['date']);
//Presenza e lunghezza Titolo
$msg = $sez['last_action']['title'];
if (!trim($msg)) {
$msg = "(untitled)";
}
if (strlen($msg) > 50) {
$msg = substr($msg, 0, 50) . "...";
}
} else {
$lang['last_in'] = '';
$lang['last_from'] = '';
$write_date = '';
}
$hash = @unpack("H32alfa", $sez['last_action']['thr_hash']);
$nickhash = @unpack("H32alfa", $sez['last_action']['autore_hash']);
if ($sez['last_action']['title'] !== NULL) {
}
$buffer = "";
foreach ($mod[$sez['SEZ_ID']] as $key => $value) {
if ($value["Hash"] != $buffer and $value["Value"]) {
$modhash = @unpack("H32alfa", $value["Hash"]);
$moderators .= "<a href='showmember.php?MEM_ID=" . $modhash["alfa"] . "'>" . $value["Nick"] . "</a>, ";
}
$buffer = $value["Hash"];
}
$moderators = substr($moderators, 0, -2);
if ($sez['REDIRECT']) {
$link = "target='_blank' href='" . $sez['REDIRECT'];
} else {
$link = "href='sezioni.php?SEZID=" . $sez['SEZ_ID'];
}
echo "\r\n\t\t\t<tr>\r\n\t\t\t<td class='row4' width='5%' align='center'><img src='img/bf_new.gif' alt=''></td>\r\n\t\t\t<td class='row4'><b><a " . $link . "'>" . secure_v($sez['SEZ_NAME']) . "</a></b><br /><span class='desc'>{$sez['SEZ_DESC']} {$subsections} <br /><font color='#808080'><i>{$lang['col_moderators']}: {$moderators}</i></font><br /></span></td>" . '
<td class="row2" align="center">' . $sez['THR_NUM'] . '</td>
<td class="row2" align="center">' . $sez['REPLY_NUM'] . '</td>
<td class="row2" nowrap="nowrap">' . $lang['last_in'] . '<a href="showmsg.php?SEZID=' . $sez['last_action']['sez_id'] . '&THR_ID=' . $hash['alfa'] . '&pag=last#end_page">' . secure_v($msg) . '</a><br>' . $lang['last_data'] . $write_date . '<br>' . $lang['last_from'] . '<a href="showmember.php?MEM_ID=' . $nickhash['alfa'] . '">' . secure_v($sez['last_action']['autore']) . '</a></td>';
break;
default:
break;
}
}
$PostStatImage = "f_fixed";
}
$rep = $riga->reply_num;
$i = 0;
$Pages = "";
if ($rep > $PostXPage) {
while ($rep > 0) {
if ($i <= $Section) {
$Pages = $Pages . "<td align='left' nowrap='nowrap'><span class='pagelink'><a href='showmsg.php?SEZID=" . $riga->sez . "&THR_ID=" . $iden['hex'] . "&pag={$i}'>" . ++$i . "</a></span></td>";
$rep = $rep - $PostXPage;
} else {
$Pages = $Pages . "<td align='left' nowrap='nowrap'><span class='pagelink'>..</span> <span class='pagelink'><a href='showmsg.php?SEZID=" . $riga->sez . "&THR_ID=" . $iden['hex'] . "&pag=last#end_page'>»</a></span></td>";
$rep = 0;
}
}
}
if (!trim($riga->title)) {
$riga->title = "(untitled)";
}
if (strlen($riga->title) > 100) {
$title = substr($riga->title, 0, 100) . "...";
} else {
$title = $riga->title;
}
echo "\r\n<tr>\r\n <td align='center' class='row2'><img src='img/{$PostStatImage}.gif' alt=''></td>\r\n <td align='center' class='row2'>{$post_icon}</td>\r\n <td align='left' class='row2'><table border='0' cellpadding='2px' cellspacing='0'><tbody><tr><td align='left' nowrap='nowrap'>" . $gotolu . "{$pinned_str}<a href='showmsg.php?SEZID=" . $riga->sez . "&THR_ID=" . $iden['hex'] . "' title='" . $lang['topic_start'] . " {$write_date}'>" . secure_v($title) . "</a>{$pinned_close}</td>" . $Pages . "</tr></tbody></table> " . secure_v($riga->subtitle) . "</td>\r\n <td align=center class='row4'><a href='sezioni.php?SEZID=" . $riga->sez . "'>" . $sezname[$riga->sez] . "</td>\r\n <td align=center class='row4'><a href=\"javascript:who_posted('{$iden['hex']}',{$riga->sez})\">" . $riga->reply_num . "</a></td>\r\n <td align=center class='row4'><small><u><a href='showmember.php?MEM_ID=" . $nickhash['alfa'] . "'>" . secure_v($riga->nick) . "</a></u></small></td>\r\n <tD align=left class='row4'><small>{$reply_date}<br><a href=\"showmsg.php?SEZID=" . $riga->sez . "&THR_ID=" . $iden['hex'] . "&pag=last#end_page\">" . $lang['topic_last'] . "</a>: <b><a href='showmember.php?MEM_ID=" . $dnickhash['alfa'] . "'>" . secure_v($riga->dnick) . "</a></b></small></tD>\r\n</tr>\n";
}
}
echo "</table></div>";
echo "</td></tr>";
PageSelect();
include "end.php";
$extvar[UpdateMyAvatar][firma] = $_REQUEST['body'];
$mreq['TYPE'] = '4';
$mreq['BODY'] = 'Madifico la mia firma :wacko:';
$mreq['_PRIVATE'] = base64_decode($userdata->PASSWORD);
$mreq['_PWD'] = $KEY_DECRYPT;
$mreq['EXTVAR'] = $core->Var2BinDump($extvar);
$risp = $core->AddMsg($mreq);
if (empty($risp['ERRORE'])) {
Success_Page("Successo!", "Modifiche apportate con successo", "options_sign.php?MEM_ID={$user_id}", 1);
}
$is_post_back = 1;
}
}
$current_sign = stripslashes(get_sign($mem_id));
//Processing data
$current_sign_nobb = convert(secure_v($current_sign));
//OUTPUT
if (!$is_post_back) {
?>
<tr><td>
<table cellspacing="0" width="100%">
<tr>
<td valign="top" class="nopad" width="24%"><?php
echo show_menu();
?>
</td>
<td class="nopad" width="1%"><!-- --></td>
<!-- Start main CP area -->
<td valign="top" class="nopad" width="75%">
<div id="ucpcontent">
<?php
$rep = $riga["reply_num"];
$i = 0;
$Pages = "";
if ($rep > $PostXPage) {
while ($rep > 0) {
if ($i <= $Section) {
$Pages = $Pages . "<td align='left' nowrap='nowrap'><span class='pagelink'><a href='showmsg.php?SEZID={$SEZID}&THR_ID=" . $iden['hex'] . "&pag={$i}'>" . ++$i . "</a></span></td>";
$rep = $rep - $PostXPage;
} else {
$Pages = $Pages . "<td align='left' nowrap='nowrap'><span class='pagelink'>..</span> <span class='pagelink'><a href='showmsg.php?SEZID={$SEZID}&THR_ID=" . $iden['hex'] . "&pag=last#end_page'>»</a></span></td>";
$rep = 0;
}
}
}
if (strlen($riga["title"]) > 100) {
$title = substr($riga["title"], 0, 100) . "...";
} else {
$title = $riga["title"];
}
echo "\r\n<tr height='35'>\r\n <td align='center' class='row2'><img src='img/{$PostStatImage}.gif'></td>\r\n <td align='center' class='row2'> </td>\r\n <td align='left' class='row2'><table border='0' cellpadding='2px' cellspacing='0'><tbody><tr><td align='left' nowrap='nowrap'><a href='showmsg.php?SEZID={$SEZID}&THR_ID=" . $iden['hex'] . "' title='" . $lang['topic_start'] . " {$write_date}'>" . secure_v($title) . "</a></td>" . $Pages . "</tr></tbody></table> " . secure_v($riga["subtitle"]) . "</td>\r\n <td align=center class='row4'>" . $riga["reply_num"] . "</td>\r\n <td align=center class='row4'><u><small><a href='showmember.php?MEM_ID=" . $nickhash['alfa'] . "'>" . secure_v($riga["nick"]) . "</a></small></u></td>\r\n <td align=center class='row4'>" . $riga['read_num'] . "</td>\r\n <tD align=left class='row4'><small>{$reply_date}<br><a href=\"showmsg.php?SEZID={$SEZID}&THR_ID=" . $iden['hex'] . "&pag=last#end_page\">" . $lang['topic_last'] . "</a>: <b><a href='showmember.php?MEM_ID=" . $dnickhash['alfa'] . "'>" . secure_v($riga["dnick"]) . "</b></small></tD>\r\n</tr>\n";
}
}
?>
</table>
</div>
</td>
</tr>
<?php
include "end.php";
echo "<tr><td><center>" . $lang['edrep_login'] . "<br>";
echo "" . $lang['edrep_loginred'] . "</center></td></tr><script language=\"javascript\">setTimeout('delayer()', 1500);\nfunction delayer(){ window.location='{$url}';}</script>";
include "end.php";
exit(0);
}
if ($riga = $db->get_row($query)) {
echo "{$lang['edrep_info1']}<b>{$riga->autore}</b>{$lang['edrep_info2']}\"{$riga->title}\":<br>";
} else {
$std - Error($lang['edrep_notfound']);
exit;
}
$EDITID = mysql_real_escape_string(pack("H*", $_REQUEST["EDIT_OF"]));
$query = "SELECT title,body from {$SNAME}_reply as reply where EDIT_OF='{$EDITID}' and visibile='1';";
if ($riga = $db->get_row($query)) {
$Testo = htmlspecialchars(stripslashes($riga->body));
$Titolo = secure_v($riga->title);
} else {
$Testo = "";
$Titolo = "";
}
?>
<script type="text/javascript">
<!--
function altezze(){
co1 = document.getElementById('colo-sx').offsetHeight;
co2 = document.getElementById('colo-dx').offsetHeight;
co3 = document.getElementById('centrale').offsetHeight;
altok = co1;
if (co2 > altok) altok = co2;
if (co3 > altok) altok = co3;
