/**
 * calculate creature health, mana and armor
 * 
 * kinda crappy way, but works
 * 
 * if $type is used:
 * 1 -> returns health
 * 2 -> returns mana
 * 3 -> returns armor
 * 0 -> returns array(health,mana,armor)      
 */
function get_additional_data($entryid, $type = 0)
{
    global $world_db, $realm_id;
    if (!is_numeric($entryid)) {
        return array(0, 0, 0);
    }
    $sqlw = new SQL();
    $sqlw->connect($world_db[$realm_id]['addr'], $world_db[$realm_id]['user'], $world_db[$realm_id]['pass'], $world_db[$realm_id]['name']);
    $q = $sqlw->query("\n\t\tSELECT \n\t\t\t(SELECT unit_class \n\t\t\tFROM creature_template \n\t\t\tWHERE entry = " . $entryid . ") AS class, \n\t\t\t\t(SELECT FLOOR(minlevel + (RAND() * (maxlevel - minlevel + 1))) \n\t\t\t\tFROM creature_template \n\t\t\t\tWHERE entry = " . $entryid . ") AS level, \n\t\t\t\t(SELECT exp \n\t\t\t\tFROM creature_template \n\t\t\t\tWHERE entry = " . $entryid . ") AS exp;");
    $data = $sqlw->fetch_assoc($q);
    if ($sqlw->num_rows($q) == 0) {
        return array(0, 0, 0);
    }
    $q = "\n\t\t\tSELECT \n\t\t\t\t((SELECT Health_Mod \n\t\t\t\tFROM creature_template \n\t\t\t\tWHERE entry = " . $entryid . ")\n\t\t\t\t\t*(SELECT basehp" . $data['exp'] . " \n\t\t\t\t\tFROM creature_classlevelstats \n\t\t\t\t\tWHERE level = " . $data['level'] . " AND class = " . $data['class'] . ")+0.5), \n\t\t\t\t((SELECT Mana_Mod \n\t\t\t\tFROM creature_template \n\t\t\t\tWHERE entry = " . $entryid . ")\n\t\t\t\t\t*(SELECT basemana \n\t\t\t\t\tFROM creature_classlevelstats \n\t\t\t\t\tWHERE level = " . $data['level'] . " AND class = " . $data['class'] . ")+0.5),\n\t\t\t\t((SELECT Armor_Mod \n\t\t\t\tFROM creature_template \n\t\t\t\tWHERE entry = " . $entryid . ")\n\t\t\t\t*(SELECT basearmor \n\t\t\t\tFROM creature_classlevelstats \n\t\t\t\tWHERE level = " . $data['level'] . " AND class = " . $data['class'] . ")+0.5);";
    if ($type == 1) {
        $q = "\n\t\t\tSELECT \n\t\t\t\t((SELECT Health_Mod \n\t\t\t\tFROM creature_template \n\t\t\t\tWHERE entry = " . $entryid . ")\n\t\t\t\t\t*(SELECT basehp" . $data['exp'] . " \n\t\t\t\t\tFROM creature_classlevelstats \n\t\t\t\t\tWHERE level = " . $data['level'] . " AND class = " . $data['class'] . ")+0.5);";
    }
    if ($type == 2) {
        $q = "\n\t\t\tSELECT \n\t\t\t\t((SELECT Mana_Mod \n\t\t\t\tFROM creature_template \n\t\t\t\tWHERE entry = " . $entryid . ")\n\t\t\t\t\t*(SELECT basemana \n\t\t\t\t\tFROM creature_classlevelstats \n\t\t\t\t\tWHERE level = " . $data['level'] . " AND class = " . $data['class'] . ")+0.5);";
    }
    if ($type == 3) {
        $q = "\n\t\t\tSELECT \n\t\t\t\t((SELECT Armor_Mod \n\t\t\t\tFROM creature_template \n\t\t\t\tWHERE entry = " . $entryid . ")\n\t\t\t\t\t*(SELECT basearmor \n\t\t\t\t\tFROM creature_classlevelstats \n\t\t\t\t\tWHERE level = " . $data['level'] . " AND class = " . $data['class'] . ")+0.5);";
    }
    $query = $sqlw->query($q);
    $result = $sqlw->fetch_row($query);
    $sqlw->close();
    unset($sql);
    if ($type == 2 && $result[0] == 0.5) {
        return 0;
    }
    if ($type == 0 && $result[1] == 0.5) {
        return array($result[0], 0, $result[2]);
    }
    return $type > 0 ? $result[0] : $result;
}
function print_commands_form()
{
    global $output, $lang_command, $realm_id, $world_db, $action_permission, $user_lvl, $gm_level_arr;
    $levels = $gm_level_arr;
    $sqlw = new SQL();
    $sqlw->connect($world_db[$realm_id]['addr'], $world_db[$realm_id]['user'], $world_db[$realm_id]['pass'], $world_db[$realm_id]['name']);
    $query = $sqlw->query('SELECT name, help, security FROM command WHERE security <= ' . $user_lvl . '');
    while ($data = $sqlw->fetch_assoc($query)) {
        $comm = explode("\r\n", $data['help'], 2);
        $levels[$data['security']][3] .= '
                <tr>
                  ' . ($user_lvl >= $action_permission['update'] ? '<td><input type="checkbox" name="check[' . $data['name'] . ']" value="' . $data['security'] . '" /></td>' : '<td></td>') . '
                  <td align="left">' . $data['name'] . '</td>
                  <td>' . htmlentities(ereg_replace("[a-zA-Z ]+:* *\\.", ".", $comm[0])) . '</td>
                  <td>' . (isset($comm[1]) ? str_replace("\r\n", "<br />", str_replace("\r\n\r\n", "<br />", htmlentities($comm[1]))) : '') . '</td>
                </tr>';
    }
    unset($comm);
    unset($data);
    unset($query);
    $output .= '
          <center>
            <form method="get" action="command.php" name="form">
              <input type="hidden" name="action" value="update" />';
    for ($i = 0; $i <= $user_lvl; ++$i) {
        $output .= '
              <table style="width: 720px; text-align: left;" class="lined">
                <tr>
                  <th>
                    <div id="div' . $levels[$i][1] . '" onclick="expand(\'' . $levels[$i][1] . '\', this, \'' . $levels[$i][1] . '\');">[+] ' . $levels[$i][1] . ' :</div>
                  </th>
                </tr>
              </table>
              <table id="' . $levels[$i][1] . '" class="lined" style="width: 720px; text-align: left; display: none">
                <tr style="text-align: center;">
                  <th width="2%"></th>
                  <th width="13%">' . $lang_command['command'] . '</th>
                  <th width="20%">' . $lang_command['syntax'] . '</th>
                  <th width="65%">' . $lang_command['description'] . '</th>
                </tr>' . $levels[$i][3];
        if ($user_lvl >= $action_permission['update']) {
            $output .= '
              </table>
              <br />
              <table class="hidden" style="width: 720px;">
                <tr>
                  <td>';
            makebutton($lang_command['change_level'], 'javascript:do_submit()', 280);
            $output .= '
                  </td>
                </tr>';
        }
        $output .= '
              </table>
              <br />';
    }
    $output .= '
            </form>
          </center>';
}
function populate_requestbox()
{
    $db = new SQL(DB_SERVER, DB_USERNAME, DB_PASSWORD, DB_NAME, false);
    $db->query("SELECT COUNT(id) FROM ip_requests");
    $total_request = implode($db->fetch_assoc());
    $db->query("SELECT COUNT(id) FROM ip_reply");
    $total_reply = implode($db->fetch_assoc());
    $db->close();
    echo '<div class="alert alert-info">This is <strong>User\'s Request</strong> section (currently contained <strong>' . $total_request . '</strong> request shouts and <strong>' . $total_reply . '</strong> replies). Just use <code>!request</code> code in your shout to make them appear here. Please note that not all your requests will be replied. Lucky if you have!</div>';
    echo '<div id="containerx">';
    echo '<div class="data"></div>';
    echo '<div class="pagination"></div>';
    echo '</div>';
    echo '
    <script>
    var replyID;
    
    $(document).ready(function () { // START DOCUMENT.READY
    
    $(".tip-top").tooltip();
    
    function loadData(page){
      $("#containerx").html("<div class=\\"loader\\" style=\\"margin-top:10px\\"></div>").fadeIn("fast");
      $.ajax({
        type: "GET",
        url: "subfiles/requestbox_more.php?page="+page,
        success: function(msg){
          $("#containerx").html(msg);
        }
      });
    }
    loadData(1);  // For first time page load default results
    $("#containerx .pagination li.enx").live("click",function(e){
      e.preventDefault();
      var page = $(this).attr("p");
      loadData(page);
    });
    
    }); // END DCOUMENT.READY
    
    </script>
    ';
}
Example #4
0
function del_acc($acc_id)
{
    global $characters_db, $realm_db, $user_lvl, $user_id, $tab_del_user_realmd, $tab_del_user_char, $tab_del_user_characters, $tab_del_pet;
    $del_char = 0;
    $sqlc = new SQL();
    $sqlr = new SQL();
    $sqlr->connect($realm_db['addr'], $realm_db['user'], $realm_db['pass'], $realm_db['name']);
    $query = $sqlr->query('SELECT `account`.`online`, `account_access`.`gmlevel` FROM `account` LEFT JOIN `account_access` ON `account`.`id`=`account_access`.`id` WHERE `account`.`id` = ' . $acc_id . '');
    $gmlevel = $sqlr->result($query, 0, 'gmlevel');
    if ($user_lvl > $gmlevel || $acc_id == $user_id) {
        if ($sqlr->result($query, 0, 'online')) {
        } else {
            foreach ($characters_db as $db) {
                $sqlc->connect($db['addr'], $db['user'], $db['pass'], $db['name']);
                $result = $sqlc->query('SELECT guid 
                                        FROM characters 
                                        WHERE account = ' . $acc_id . '');
                while ($row = $sqlc->fetch_assoc($result)) {
                    //Delete pet aura ,spells and cooldowns
                    foreach ($tab_del_pet as $value) {
                        $sqlc->query('DELETE 
                                    FROM ' . $value[0] . ' 
                                    WHERE ' . $value[1] . ' IN
                                (SELECT id 
                                    FROM character_pet 
                                    WHERE owner IN
                                (SELECT guid 
                                    FROM characters 
                                    WHERE guid = ' . $row['guid'] . '))');
                    }
                    foreach ($tab_del_user_characters as $value) {
                        $sqlc->query('DELETE 
                                    FROM ' . $value[0] . ' 
                                    WHERE ' . $value[1] . ' = ' . $row['guid'] . '');
                    }
                    $del_char++;
                }
                $sqlc->query('DELETE 
                            FROM account_data 
                            WHERE account = ' . $acc_id . '');
            }
            foreach ($tab_del_user_realmd as $value) {
                $sqlr->query('DELETE 
                            FROM ' . $value[0] . ' 
                            WHERE ' . $value[1] . ' = ' . $acc_id . '');
            }
            if ($sqlr->affected_rows()) {
                return array(true, $del_char);
            }
        }
    }
    return array(false, $del_char);
}
function servers()
{
    global $output, $corem_db, $get_icon_type, $get_timezone_type, $core;
    // we need $core to be set
    if ($core == 0) {
        $core = detectcore();
    }
    $sqlm = new SQL();
    $sqlm->connect($corem_db["addr"], $corem_db["user"], $corem_db["pass"], $corem_db["name"], $corem_db["encoding"]);
    $result = $sqlm->query("SELECT * FROM config_servers");
    $server_action = 0;
    if (isset($_GET["editserver"])) {
        $server_action = "edit";
    }
    if (isset($_GET["delserver"])) {
        $server_action = "del";
    }
    if (isset($_GET["addserver"])) {
        $server_action = "add";
    }
    if (!$server_action) {
        $output .= '
        <div style="text-align: center;">
          <span style="color:red">' . lang("admin", "server_warn") . '</span>
        </div>
        <form action="admin.php" method="get" id="form">
          <div>
            <input type="hidden" name="section" value="servers" />
          </div>
          <table class="simple" id="admin_servers">
            <tr>
              <th style="width: 5%;">' . lang("admin", "edit") . '</th>
              <th style="width: 5%;">' . lang("admin", "remove") . '</th>
              <th style="width: 10%;">' . lang("admin", "realm") . '</th>
              <th style="width: 10%;">' . lang("admin", "name") . '</th>
              <th style="width: 20%;">' . lang("admin", "hosti") . '</th>
              <th style="width: 20%;">' . lang("admin", "hostp") . '</th>
              <th style="width: 1%;">' . lang("admin", "port") . '</th>
              <th style="width: 10%;">' . lang("admin", "icon") . '</th>
              <th style="width: 10%;">' . lang("admin", "timezone") . '</th>
              <th style="width: 10%;">' . lang("admin", "bothfactions") . '</th>';
        if ($core == 1) {
            $output .= '
              <th width="40%">' . lang("admin", "statsxml") . '</th>';
        }
        $output .= '
            </tr>';
        $color = "#EEEEEE";
        while ($server = $sqlm->fetch_assoc($result)) {
            $output .= '
            <tr>
              <td style="background-color:' . $color . '; text-align: center;">
                <span>
                  <a href="admin.php?section=servers&amp;sel_server=' . $server["Index"] . '&amp;editserver=editserver">
                    <img src="img/edit.png" alt="" />
                  </a>
                </span>
              </td>
              <td style="background-color:' . $color . '; text-align: center;">
                <span>
                  <a href="admin.php?section=servers&amp;sel_server=' . $server["Index"] . '&amp;delserver=deleteserver">
                    <img src="img/aff_cross.png" alt="" />
                  </a>
                </span>
              </td>
              <td style="background-color:' . $color . '; text-align: center;">
                <span>' . $server["Index"] . '</span>
              </td>
              <td style="background-color:' . $color . '; text-align: center;">
                <span>' . $server["Name"] . '</span>
              </td>
              <td style="background-color:' . $color . '; text-align: center;">
                <span>' . $server["Address"] . '</span>
              </td>
              <td style="background-color:' . $color . '; text-align: center;">
                <span>' . $server["External_Address"] . '</span>
              </td>
              <td style="background-color:' . $color . '; text-align: center;">
                <span>' . $server["Port"] . '</span>
              </td>';
            $icon = $get_icon_type[$server["Icon"]];
            $timezone = $get_timezone_type[$server["Timezone"]];
            $output .= '
              <td style="background-color:' . $color . '; text-align: center;">
                <span>' . lang("realm", $icon[1]) . '</span>
              </td>
              <td style="background-color:' . $color . '; text-align: center;">
                <span>' . lang("realm", $timezone[1]) . '</span>
              </td>
              <td style="background-color:' . $color . '; text-align: center;">
                <span>' . ($server["Both_Factions"] ? lang("global", "yes_low") : lang("global", "no_low")) . '</span>
              </td>';
            if ($core == 1) {
                $output .= '
              <td style="background-color:' . $color . '; text-align: center;">
                <span>' . $server["Stats_XML"] . '</span>
              </td>';
            }
            $output .= '
            </tr>';
            $color = $color == "#EEEEEE" ? "#FFFFFF" : "#EEEEEE";
        }
        $output .= '
            <tr>
              <td style="background-color:' . $color . '">
                <a href="admin.php?section=servers&amp;addserver=addserver">
                  <img src="img/add.png" alt="" />
                </a>
              </td>
              <td style="background-color:' . $color . '" colspan="' . ($core == 1 ? '10' : '9') . '">
                <a href="admin.php?section=servers&amp;addserver=addserver">' . lang("admin", "addserver") . '</a>
              </td>
            </tr>
          </table>
        </form>';
    } else {
        if ($server_action == "edit") {
            $server_id = $sqlm->quote_smart($_GET["sel_server"]);
            if (is_numeric($server_id)) {
                $server = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_servers WHERE `Index`='" . $server_id . "'"));
                $output .= '
        <div id="admin_edit_server">
          <form action="admin.php" method="get" id="form">
            <fieldset>
              <div>
                <input type="hidden" name="section" value="servers" />
                <input type="hidden" name="action" value="saveserver" />
                <input type="hidden" name="index" value="' . $server["Index"] . '" />
              </div>
              <table class="center">
                <tr>
                  <td style="width: 45%;">' . lang("admin", "realm") . ': </td>
                  <td>
                    <input type="text" name="new_index" value="' . $server["Index"] . '" />
                  </td>
                </tr>
                <tr>
                  <td style="width: 45%;">' . lang("admin", "name") . ': </td>
                  <td>
                    <input type="text" name="server_name" value="' . $server["Name"] . '" />
                  </td>
                </tr>
                <tr>
                  <td style="width: 45%;" class="help">
                    <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "hosti_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "hosti") . '</a>:
                  </td>
                  <td>
                    <input type="text" name="server_hosti" value="' . $server["Address"] . '" />
                  </td>
                </tr>
                <tr>
                  <td style="width: 45%;" class="help">
                    <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "hostp_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "hostp") . '</a>:
                  </td>
                  <td>
                    <input type="text" name="server_hostp" value="' . $server["External_Address"] . '" />
                  </td>
                </tr>
                <tr>
                  <td>' . lang("admin", "port") . ': </td>
                  <td>
                    <input type="text" name="server_port" value="' . $server["Port"] . '" />
                  </td>
                </tr>';
                if ($core != 1) {
                    $output .= '
                <tr>
                  <td>' . lang("admin", "telnetport_tip") . ':</td>
                  <td>
                    <input type="text" name="server_telnet_port" value="' . $server["Telnet_Port"] . '" />
                  </td>
                </tr>
                <tr>
                  <td>' . lang("admin", "telnetuser_tip") . ':</td>
                  <td>
                    <input type="text" name="server_telnet_user" value="' . $server["Telnet_User"] . '" />
                  </td>
                </tr>
                <tr>
                  <td>' . lang("admin", "telnetpass_tip") . ':</td>
                  <td>
                    <input type="text" name="server_telnet_pass" value="' . $server["Telnet_Pass"] . '" />
                  </td>
                </tr>';
                } else {
                    $output .= '
                <tr>
                  <td style="display: none;">
                    <input type="hidden" name="server_telnet_port" value="' . $server["Telnet_Port"] . '" />
                    <input type="hidden" name="server_telnet_user" value="' . $server["Telnet_User"] . '" />
                    <input type="hidden" name="server_telnet_pass" value="' . $server["Telnet_Pass"] . '" />
                  </td>
                </tr>';
                }
                $output .= '
                <tr>
                  <td>' . lang("admin", "icon") . ': </td>
                  <td>
                    <select name="server_type">';
                foreach ($get_icon_type as $type) {
                    $output .= '
                        <option value="' . $type[0] . '" ' . ($server["Icon"] == $type[0] ? 'selected="selected"' : '') . '>' . lang("realm", $type[1]) . '</option>';
                }
                $output .= '
                    </select>
                  </td>
                </tr>
                <tr>
                  <td>' . lang("admin", "color") . ': </td>
                  <td>
                    <input type="text" name="server_color" value="' . $server["Color"] . '" />
                  </td>
                </tr>
                <tr>
                  <td>' . lang("admin", "timezone") . ': </td>
                  <td>
                    <select name="server_timezone">';
                foreach ($get_timezone_type as $zone) {
                    $output .= '
                      <option value="' . $zone[0] . '" ' . ($server["Timezone"] == $zone[0] ? 'selected="selected"' : '') . '>' . lang("realm", $zone[1]) . '</option>';
                }
                $output .= '
                    </select>
                  </td>
                </tr>
                <tr>
                  <td class="help">
                    <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "bothfactions_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "bothfactions") . '</a>:
                  </td>
                  <td>
                    <input type="checkbox" name="server_both" value="1" ' . ($server["Both_Factions"] ? 'checked="checked"' : '') . ' />
                  </td>
                </tr>';
                if ($core == 1) {
                    $output .= '
                <tr>
                  <td class="help">
                    <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "statsxml_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "statsxml") . '</a>:
                  </td>
                  <td>
                    <input type="text" name="server_stats" value="' . $server["Stats_XML"] . '" />
                  </td>
                </tr>';
                }
                $output .= '
              </table>
            </fieldset>
            <div>
              <input type="submit" name="saveserver" value="' . lang("admin", "save") . '" />
            </div>
          </form>
        </div>';
            } else {
                redirect("admin.php?section=servers&error=1");
            }
        } elseif ($server_action == "del") {
            $server_id = $sqlm->quote_smart($_GET["sel_server"]);
            if (is_numeric($server_id)) {
                $result = $sqlm->query("DELETE FROM config_servers WHERE `Index`='" . $server_id . "'");
                redirect("admin.php?section=servers");
            } else {
                redirect("admin.php?section=servers&error=1");
            }
        } else {
            switch ($core) {
                case 1:
                    $name = "ArcEmu";
                    $port = "8129";
                    break;
                case 2:
                    $name = "MaNGOS";
                    $port = "8085";
                    break;
                case 3:
                    $name = "Trinity";
                    $port = "8085";
                    break;
            }
            // get highest server index
            $i_query = "SELECT IFNULL(MAX(`Index`), 0) AS MaxID FROM config_servers";
            $i_result = $sqlm->query($i_query);
            $i_result = $sqlm->fetch_assoc($i_result);
            $max_index = $i_result["MaxID"];
            $result = $sqlm->query("INSERT INTO config_servers (`Index`, Port, Name, Both_Factions, Telnet_Port, Address) VALUES ('" . ($max_index + 1) . "', '" . $port . "', '" . $name . "', 1, 0, '127.0.0.1')");
            redirect("admin.php?section=servers");
        }
    }
}
Example #6
0
 if ($allow_anony && empty($_SESSION['logged_in'])) {
     $lang_login = lang_login();
     $output .= '
                         <li><a href="#">' . $lang_header['account'] . '</a></li>
                         <li><a href="register.php">' . $lang_login['not_registrated'] . '</a></li>
                         <li><a href="login.php">' . $lang_login['login'] . '</a></li>';
     unset($lang_login);
 } else {
     $result = $sqlc->query('SELECT guid, name, race, class, level, gender
                         FROM characters 
                         WHERE account = ' . $user_id . '');
     // this puts links to user characters of active realm in "My Account" menu
     if ($sqlc->num_rows($result)) {
         $output .= '
                         <li><a href="#">' . $lang_header['my_characters'] . '</a></li>';
         while ($char = $sqlc->fetch_assoc($result)) {
             $output .= '
                         <li>
                             <a href="char.php?id=' . $char['guid'] . '">
                             <img src="img/c_icons/' . $char['race'] . '-' . $char['gender'] . '.gif" alt="" /><img src="img/c_icons/' . $char['class'] . '.gif" alt="" />' . $char['name'] . '
                             </a>
                         </li>';
         }
         unset($char);
     }
     $output .= '
                         <li><a href="#">' . $lang_header['account'] . '</a></li>
                         <li><a href="edit.php">' . $lang_header['edit_my_acc'] . '</a></li>
                         <li><a href="logout.php">' . $lang_header['logout'] . '</a></li>';
 }
 unset($result);
Example #7
0
//          please restore <code>\'scripts/config.dist.php\'</code></center>');
require_once 'scripts/config.php';
//}
//else
//  exit('<center><br><code>\'scripts/config.php\'</code> not found,<br>
//        please copy <code>\'scripts/config.dist.php\'</code> to
//        <code>\'scripts/config.php\'</code> and make appropriate changes.');
require_once 'libs/db_lib.php';
require_once 'libs/global_lib.php';
require_once 'libs/spell_lib.php';
//header('Expires: Tue, 01 Jan 2000 00:00:00 GMT');
//header('Last-Modified: '.gmdate('D, d M Y H:i:s').' GMT');
//header('Cache-Control: no-store, no-cache, must-revalidate, max-age=0');
//header('Cache-Control: post-check=0, pre-check=0', false);
//header('Pragma: no-cache');
//wowhead_tt();
//echo $output;
$sqlm = new SQL();
$sqlm->connect($mmfpm_db['addr'], $mmfpm_db['user'], $mmfpm_db['pass'], $mmfpm_db['name']);
$result = $sqlm->query('select spellID from dbc_spell order by spellID ASC');
$i = 0;
while ($entry = $sqlm->fetch_assoc($result)) {
    if (spell_get_icon($entry['spellID'], $sqlm) == 'img/INV/INV_blank_32.gif') {
        //echo '<a href="'.$spell_datasite.$entry['spellID'].'"><img src="'.spell_get_icon($entry['spellID'], $sqlm).'" /></a>';
        spell_get_icon($entry['spellID'], $sqlm);
        echo $entry['spellID'] . ' ';
    } else {
        ++$i;
    }
}
echo $i;
        $url = $sls['sharerurl'];
        $removehttp = str_replace('http://', '', $url);
        $removeslash = rtrim($removehttp, '/');
        if (strpos($removeslash, ':') !== false) {
            list($ip, $port) = explode(":", $removeslash);
        } else {
            $ip = $removeslash;
            $port = 80;
        }
    }
    if (fsockopen($ip, $port, $errno, $errstr, 5) !== false) {
        echo '1';
        $dbsls->query("UPDATE ip_sharerlinks SET status='1' WHERE id='{$sharerLinkID}'");
    } else {
        echo '0';
        $dbsls->query("UPDATE ip_sharerlinks SET status='0' WHERE id='{$sharerLinkID}'");
    }
    $dbsls->close();
} else {
    if (isset($_GET['state'])) {
        $dbcs = new SQL(DB_SERVER, DB_USERNAME, DB_PASSWORD, DB_NAME, false);
        $dbcs->query("SELECT * FROM ip_sharerlinks ORDER BY status");
        while ($getr = $dbcs->fetch_assoc()) {
            $state = $getr['status'];
            echo $state;
        }
        $dbcs->close();
    } else {
        echo '404';
    }
}
function del_acc($acc_id)
{
    global $characters_db, $logon_db, $corem_db, $realm_id, $user_lvl, $user_id, $tab_del_user_realmd, $tab_del_user_char, $tab_del_user_characters, $sql, $core;
    $del_char = 0;
    // get username name to delete from account table
    if ($core == 1) {
        $query = $sql["logon"]->query("SELECT login AS username FROM accounts WHERE acct='" . $acc_id . "'");
    } else {
        $query = $sql["logon"]->query("SELECT username FROM account WHERE id='" . $acc_id . "'");
    }
    $acct_name = $sql["logon"]->result($query, 0, "username");
    // get the account's owner's SecurityLevel (not 100% perfect since we don't use the core gm)
    $query = $sql["mgr"]->query("SELECT SecurityLevel FROM config_accounts WHERE Login='******'");
    $gmlevel = $sql["mgr"]->result($query, 0, "SecurityLevel");
    if ($user_lvl >= gmlevel($gmlevel) || $acc_id == $user_id) {
        if ($core == 1) {
            $char_count_query = "SELECT COUNT(*) FROM characters WHERE acct='" . $acct_id . "'";
        } else {
            $char_count_query = "SELECT COUNT(*) FROM characters WHERE account='" . $acct_id . "'";
        }
        $online = $sql["char"]->result($sql["char"]->query($char_count_query), 0);
        if (!$online > 0) {
            foreach ($characters_db as $db) {
                $sqlx = new SQL();
                $sqlx->connect($db["addr"], $db["user"], $db["pass"], $db["name"], $db["encoding"]);
                if ($core == 1) {
                    $result = $sqlx->query("SELECT guid FROM characters WHERE acct='" . $acc_id . "'");
                } else {
                    $result = $sqlx->query("SELECT guid FROM characters WHERE account='" . $acc_id . "'");
                }
                while ($row = $sqlx->fetch_assoc($result)) {
                    $temp = del_char($row["guid"], $db["id"]);
                    $del_char++;
                }
                // MaNGOS: Delete character_tutorial
                if ($core == 2) {
                    $sqlx->query("DELETE FROM character_tutorial WHERE account='" . $owner_acc_id . "'");
                }
                // Trinity: Delete account_tutorial
                if ($core == 3) {
                    $sqlx->query("DELETE FROM account_tutorial WHERE accountId='" . $owner_acc_id . "'");
                }
                // ArcEmu: Delete account_data for this user
                if ($core == 1) {
                    $sqlx->query("DELETE FROM account_data WHERE acct='" . $owner_acc_id . "'");
                }
            }
            if ($core == 1) {
                $sql["logon"]->query("DELETE FROM accounts WHERE acct='" . $acc_id . "'");
            } else {
                $sql["logon"]->query("DELETE FROM account WHERE id='" . $acc_id . "'");
            }
            $sql["mgr"]->query("DELETE FROM point_system_invites WHERE PlayersAccount='" . $acc_id . "'");
            $sql["mgr"]->query("DELETE FROM config_accounts WHERE Login='******'");
            if ($sql["logon"]->affected_rows()) {
                return array(true, $del_char);
            }
        }
    }
    return array(false, $del_char);
}
Example #10
0
function do_update()
{
    global $world_db, $realm_id, $action_permission, $user_lvl;
    valid_login($action_permission['update']);
    if (!isset($_POST['type']) || $_POST['type'] === '') {
        redirect("item.php?error=1");
    }
    if (!isset($_POST['entry']) || $_POST['entry'] === '') {
        redirect("item.php?error=1");
    }
    $sql = new SQL();
    $sql->connect($world_db[$realm_id]['addr'], $world_db[$realm_id]['user'], $world_db[$realm_id]['pass'], $world_db[$realm_id]['name']);
    $entry = $sql->quote_smart($_POST['entry']);
    if (isset($_POST['class']) && $_POST['class'] != '') {
        $class = $sql->quote_smart($_POST['class']);
    } else {
        $class = 0;
    }
    if (isset($_POST['subclass']) && $_POST['subclass'] != '') {
        $subclass = $sql->quote_smart($_POST['subclass']);
    } else {
        $subclass = 0;
    }
    if (isset($_POST['name']) && $_POST['name'] != '') {
        $name = $sql->quote_smart($_POST['name']);
    } else {
        $name = 0;
    }
    if (isset($_POST['displayid']) && $_POST['displayid'] != '') {
        $displayid = $sql->quote_smart($_POST['displayid']);
    } else {
        $displayid = 0;
    }
    if (isset($_POST['Quality']) && $_POST['Quality'] != '') {
        $Quality = $sql->quote_smart($_POST['Quality']);
    } else {
        $Quality = 0;
    }
    if (isset($_POST['Flags']) && $_POST['Flags'] != '') {
        $Flags = $sql->quote_smart($_POST['Flags']);
    } else {
        $Flags = 0;
    }
    if (isset($_POST['BuyCount']) && $_POST['BuyCount'] != '') {
        $BuyCount = $sql->quote_smart($_POST['BuyCount']);
    } else {
        $BuyCount = 0;
    }
    if (isset($_POST['BuyPrice']) && $_POST['BuyPrice'] != '') {
        $BuyPrice = $sql->quote_smart($_POST['BuyPrice']);
    } else {
        $BuyPrice = 0;
    }
    if (isset($_POST['SellPrice']) && $_POST['SellPrice'] != '') {
        $SellPrice = $sql->quote_smart($_POST['SellPrice']);
    } else {
        $SellPrice = 0;
    }
    if (isset($_POST['InventoryType']) && $_POST['InventoryType'] != '') {
        $InventoryType = $sql->quote_smart($_POST['InventoryType']);
    } else {
        $AllowableClass = 0;
    }
    if (isset($_POST['AllowableClass'])) {
        $AllowableClass = $sql->quote_smart($_POST['AllowableClass']);
    } else {
        $AllowableClass = -1;
    }
    if (isset($_POST['AllowableRace'])) {
        $AllowableRace = $sql->quote_smart($_POST['AllowableRace']);
    } else {
        $AllowableRace = -1;
    }
    if (isset($_POST['ItemLevel']) && $_POST['ItemLevel'] != '') {
        $ItemLevel = $sql->quote_smart($_POST['ItemLevel']);
    } else {
        $ItemLevel = 1;
    }
    if (isset($_POST['RequiredLevel']) && $_POST['RequiredLevel'] != '') {
        $RequiredLevel = $sql->quote_smart($_POST['RequiredLevel']);
    } else {
        $RequiredLevel = 0;
    }
    if (isset($_POST['RequiredSkill']) && $_POST['RequiredSkill'] != '') {
        $RequiredSkill = $sql->quote_smart($_POST['RequiredSkill']);
    } else {
        $RequiredSkill = 0;
    }
    if (isset($_POST['RequiredSkillRank']) && $_POST['RequiredSkillRank'] != '') {
        $RequiredSkillRank = $sql->quote_smart($_POST['RequiredSkillRank']);
    } else {
        $RequiredSkillRank = 0;
    }
    if (isset($_POST['requiredspell']) && $_POST['requiredspell'] != '') {
        $requiredspell = $sql->quote_smart($_POST['requiredspell']);
    } else {
        $requiredspell = 0;
    }
    if (isset($_POST['requiredhonorrank']) && $_POST['requiredhonorrank'] != '') {
        $requiredhonorrank = $sql->quote_smart($_POST['requiredhonorrank']);
    } else {
        $requiredhonorrank = 0;
    }
    if (isset($_POST['RequiredCityRank']) && $_POST['RequiredCityRank'] != '') {
        $RequiredCityRank = $sql->quote_smart($_POST['RequiredCityRank']);
    } else {
        $RequiredCityRank = 0;
    }
    if (isset($_POST['RequiredReputationFaction']) && $_POST['RequiredReputationFaction'] != '') {
        $RequiredReputationFaction = $sql->quote_smart($_POST['RequiredReputationFaction']);
    } else {
        $RequiredReputationFaction = 0;
    }
    if (isset($_POST['RequiredReputationRank']) && $_POST['RequiredReputationRank'] != '') {
        $RequiredReputationRank = $sql->quote_smart($_POST['RequiredReputationRank']);
    } else {
        $RequiredReputationRank = 0;
    }
    if (isset($_POST['maxcount']) && $_POST['maxcount'] != '') {
        $maxcount = $sql->quote_smart($_POST['maxcount']);
    } else {
        $maxcount = 0;
    }
    if (isset($_POST['stackable']) && $_POST['stackable'] != '') {
        $stackable = $sql->quote_smart($_POST['stackable']);
    } else {
        $description = 0;
    }
    if (isset($_POST['ContainerSlots']) && $_POST['ContainerSlots'] != '') {
        $ContainerSlots = $sql->quote_smart($_POST['ContainerSlots']);
    } else {
        $ContainerSlots = 0;
    }
    if (isset($_POST['stat_type1']) && $_POST['stat_type1'] != '') {
        $stat_type1 = $sql->quote_smart($_POST['stat_type1']);
    } else {
        $stat_type1 = 0;
    }
    if (isset($_POST['stat_value1']) && $_POST['stat_value1'] != '') {
        $stat_value1 = $sql->quote_smart($_POST['stat_value1']);
    } else {
        $stat_value1 = 0;
    }
    if (isset($_POST['stat_type2']) && $_POST['stat_type2'] != '') {
        $stat_type2 = $sql->quote_smart($_POST['stat_type2']);
    } else {
        $stat_type2 = 0;
    }
    if (isset($_POST['stat_value2']) && $_POST['stat_value2'] != '') {
        $stat_value2 = $sql->quote_smart($_POST['stat_value2']);
    } else {
        $stat_value2 = 0;
    }
    if (isset($_POST['stat_type3']) && $_POST['stat_type3'] != '') {
        $stat_type3 = $sql->quote_smart($_POST['stat_type3']);
    } else {
        $stat_type3 = 0;
    }
    if (isset($_POST['stat_value3']) && $_POST['stat_value3'] != '') {
        $stat_value3 = $sql->quote_smart($_POST['stat_value3']);
    } else {
        $stat_value3 = 0;
    }
    if (isset($_POST['stat_type4']) && $_POST['stat_type4'] != '') {
        $stat_type4 = $sql->quote_smart($_POST['stat_type4']);
    } else {
        $stat_type4 = 0;
    }
    if (isset($_POST['stat_value4']) && $_POST['stat_value4'] != '') {
        $stat_value4 = $sql->quote_smart($_POST['stat_value4']);
    } else {
        $stat_value4 = 0;
    }
    if (isset($_POST['stat_type5']) && $_POST['stat_type5'] != '') {
        $stat_type5 = $sql->quote_smart($_POST['stat_type5']);
    } else {
        $stat_type5 = 0;
    }
    if (isset($_POST['stat_value5']) && $_POST['stat_value5'] != '') {
        $stat_value5 = $sql->quote_smart($_POST['stat_value5']);
    } else {
        $stat_value5 = 0;
    }
    if (isset($_POST['stat_type6']) && $_POST['stat_type6'] != '') {
        $stat_type6 = $sql->quote_smart($_POST['stat_type6']);
    } else {
        $stat_type6 = 0;
    }
    if (isset($_POST['stat_value6']) && $_POST['stat_value6'] != '') {
        $stat_value6 = $sql->quote_smart($_POST['stat_value6']);
    } else {
        $stat_value6 = 0;
    }
    if (isset($_POST['stat_type7']) && $_POST['stat_type7'] != '') {
        $stat_type7 = $sql->quote_smart($_POST['stat_type7']);
    } else {
        $stat_type7 = 0;
    }
    if (isset($_POST['stat_value7']) && $_POST['stat_value7'] != '') {
        $stat_value7 = $sql->quote_smart($_POST['stat_value7']);
    } else {
        $stat_value7 = 0;
    }
    if (isset($_POST['stat_type8']) && $_POST['stat_type8'] != '') {
        $stat_type8 = $sql->quote_smart($_POST['stat_type8']);
    } else {
        $stat_type8 = 0;
    }
    if (isset($_POST['stat_value8']) && $_POST['stat_value8'] != '') {
        $stat_value8 = $sql->quote_smart($_POST['stat_value8']);
    } else {
        $stat_value8 = 0;
    }
    if (isset($_POST['stat_type9']) && $_POST['stat_type9'] != '') {
        $stat_type9 = $sql->quote_smart($_POST['stat_type9']);
    } else {
        $stat_type9 = 0;
    }
    if (isset($_POST['stat_value9']) && $_POST['stat_value9'] != '') {
        $stat_value9 = $sql->quote_smart($_POST['stat_value9']);
    } else {
        $stat_value9 = 0;
    }
    if (isset($_POST['stat_type10']) && $_POST['stat_type10'] != '') {
        $stat_type10 = $sql->quote_smart($_POST['stat_type10']);
    } else {
        $stat_type10 = 0;
    }
    if (isset($_POST['stat_value10']) && $_POST['stat_value10'] != '') {
        $stat_value10 = $sql->quote_smart($_POST['stat_value10']);
    } else {
        $stat_value10 = 0;
    }
    if (isset($_POST['dmg_min1']) && $_POST['dmg_min1'] != '') {
        $dmg_min1 = $sql->quote_smart($_POST['dmg_min1']);
    } else {
        $dmg_min1 = 0;
    }
    if (isset($_POST['dmg_max1']) && $_POST['dmg_max1'] != '') {
        $dmg_max1 = $sql->quote_smart($_POST['dmg_max1']);
    } else {
        $dmg_max1 = 0;
    }
    if (isset($_POST['dmg_type1']) && $_POST['dmg_type1'] != '') {
        $dmg_type1 = $sql->quote_smart($_POST['dmg_type1']);
    } else {
        $dmg_type1 = 0;
    }
    if (isset($_POST['dmg_min2']) && $_POST['dmg_min2'] != '') {
        $dmg_min2 = $sql->quote_smart($_POST['dmg_min2']);
    } else {
        $dmg_min2 = 0;
    }
    if (isset($_POST['dmg_max2']) && $_POST['dmg_max2'] != '') {
        $dmg_max2 = $sql->quote_smart($_POST['dmg_max2']);
    } else {
        $dmg_max2 = 0;
    }
    if (isset($_POST['dmg_type2']) && $_POST['dmg_type2'] != '') {
        $dmg_type2 = $sql->quote_smart($_POST['dmg_type2']);
    } else {
        $dmg_type2 = 0;
    }
    if (isset($_POST['armor']) && $_POST['armor'] != '') {
        $armor = $sql->quote_smart($_POST['armor']);
    } else {
        $armor = 0;
    }
    if (isset($_POST['holy_res']) && $_POST['holy_res'] != '') {
        $holy_res = $sql->quote_smart($_POST['holy_res']);
    } else {
        $holy_res = 0;
    }
    if (isset($_POST['fire_res']) && $_POST['fire_res'] != '') {
        $fire_res = $sql->quote_smart($_POST['fire_res']);
    } else {
        $fire_res = 0;
    }
    if (isset($_POST['nature_res']) && $_POST['nature_res'] != '') {
        $nature_res = $sql->quote_smart($_POST['nature_res']);
    } else {
        $nature_res = 0;
    }
    if (isset($_POST['frost_res']) && $_POST['frost_res'] != '') {
        $frost_res = $sql->quote_smart($_POST['frost_res']);
    } else {
        $frost_res = 0;
    }
    if (isset($_POST['shadow_res']) && $_POST['shadow_res'] != '') {
        $shadow_res = $sql->quote_smart($_POST['shadow_res']);
    } else {
        $shadow_res = 0;
    }
    if (isset($_POST['arcane_res']) && $_POST['arcane_res'] != '') {
        $arcane_res = $sql->quote_smart($_POST['arcane_res']);
    } else {
        $arcane_res = 0;
    }
    if (isset($_POST['delay']) && $_POST['delay'] != '') {
        $delay = $sql->quote_smart($_POST['delay']);
    } else {
        $delay = 0;
    }
    if (isset($_POST['ammo_type']) && $_POST['ammo_type'] != '') {
        $ammo_type = $sql->quote_smart($_POST['ammo_type']);
    } else {
        $ammo_type = 0;
    }
    if (isset($_POST['RangedModRange']) && $_POST['RangedModRange'] != '') {
        $RangedModRange = $sql->quote_smart($_POST['RangedModRange']);
    } else {
        $RangedModRange = 0;
    }
    if (isset($_POST['spellid_1']) && $_POST['spellid_1'] != '') {
        $spellid_1 = $sql->quote_smart($_POST['spellid_1']);
    } else {
        $spellid_1 = 0;
    }
    if (isset($_POST['spelltrigger_1']) && $_POST['spelltrigger_1'] != '') {
        $spelltrigger_1 = $sql->quote_smart($_POST['spelltrigger_1']);
    } else {
        $spelltrigger_1 = 0;
    }
    if (isset($_POST['spellcharges_1']) && $_POST['spellcharges_1'] != '') {
        $spellcharges_1 = $sql->quote_smart($_POST['spellcharges_1']);
    } else {
        $spellcharges_1 = 0;
    }
    if (isset($_POST['spellcooldown_1']) && $_POST['spellcooldown_1'] != '') {
        $spellcooldown_1 = $sql->quote_smart($_POST['spellcooldown_1']);
    } else {
        $spellcooldown_1 = -1;
    }
    if (isset($_POST['spellcategory_1']) && $_POST['spellcategory_1'] != '') {
        $spellcategory_1 = $sql->quote_smart($_POST['spellcategory_1']);
    } else {
        $spellcategory_1 = 0;
    }
    if (isset($_POST['spellcategorycooldown_1']) && $_POST['spellcategorycooldown_1'] != '') {
        $spellcategorycooldown_1 = $sql->quote_smart($_POST['spellcategorycooldown_1']);
    } else {
        $spellcategorycooldown_1 = -1;
    }
    if (isset($_POST['spellppmRate_1']) && $_POST['spellppmRate_1'] != '') {
        $spellppmRate_1 = $sql->quote_smart($_POST['spellppmRate_1']);
    } else {
        $spellppmRate_1 = 0;
    }
    if (isset($_POST['spellid_2']) && $_POST['spellid_2'] != '') {
        $spellid_2 = $sql->quote_smart($_POST['spellid_2']);
    } else {
        $spellid_2 = 0;
    }
    if (isset($_POST['spelltrigger_2']) && $_POST['spelltrigger_2'] != '') {
        $spelltrigger_2 = $sql->quote_smart($_POST['spelltrigger_2']);
    } else {
        $spelltrigger_2 = 0;
    }
    if (isset($_POST['spellcharges_2']) && $_POST['spellcharges_2'] != '') {
        $spellcharges_2 = $sql->quote_smart($_POST['spellcharges_2']);
    } else {
        $spellcharges_2 = 0;
    }
    if (isset($_POST['spellcooldown_2']) && $_POST['spellcooldown_2'] != '') {
        $spellcooldown_2 = $sql->quote_smart($_POST['spellcooldown_2']);
    } else {
        $spellcooldown_2 = -1;
    }
    if (isset($_POST['spellcategory_2']) && $_POST['spellcategory_2'] != '') {
        $spellcategory_2 = $sql->quote_smart($_POST['spellcategory_2']);
    } else {
        $spellcategory_2 = 0;
    }
    if (isset($_POST['spellcategorycooldown_2']) && $_POST['spellcategorycooldown_2'] != '') {
        $spellcategorycooldown_2 = $sql->quote_smart($_POST['spellcategorycooldown_2']);
    } else {
        $spellcategorycooldown_2 = -1;
    }
    if (isset($_POST['spellppmRate_2']) && $_POST['spellppmRate_2'] != '') {
        $spellppmRate_2 = $sql->quote_smart($_POST['spellppmRate_2']);
    } else {
        $spellppmRate_2 = 0;
    }
    if (isset($_POST['spellid_3']) && $_POST['spellid_3'] != '') {
        $spellid_3 = $sql->quote_smart($_POST['spellid_3']);
    } else {
        $spellid_3 = 0;
    }
    if (isset($_POST['spelltrigger_3']) && $_POST['spelltrigger_3'] != '') {
        $spelltrigger_3 = $sql->quote_smart($_POST['spelltrigger_3']);
    } else {
        $spelltrigger_3 = 0;
    }
    if (isset($_POST['spellcharges_3']) && $_POST['spellcharges_3'] != '') {
        $spellcharges_3 = $sql->quote_smart($_POST['spellcharges_3']);
    } else {
        $spellcharges_3 = 0;
    }
    if (isset($_POST['spellcooldown_3']) && $_POST['spellcooldown_3'] != '') {
        $spellcooldown_3 = $sql->quote_smart($_POST['spellcooldown_3']);
    } else {
        $spellcooldown_3 = -1;
    }
    if (isset($_POST['spellcategory_3']) && $_POST['spellcategory_3'] != '') {
        $spellcategory_3 = $sql->quote_smart($_POST['spellcategory_3']);
    } else {
        $description = 0;
    }
    if (isset($_POST['spellcategorycooldown_3']) && $_POST['spellcategorycooldown_3'] != '') {
        $spellcategorycooldown_3 = $sql->quote_smart($_POST['spellcategorycooldown_3']);
    } else {
        $spellcategorycooldown_3 = -1;
    }
    if (isset($_POST['spellppmRate_3']) && $_POST['spellppmRate_3'] != '') {
        $spellppmRate_3 = $sql->quote_smart($_POST['spellppmRate_3']);
    } else {
        $spellppmRate_3 = 0;
    }
    if (isset($_POST['spellid_4']) && $_POST['spellid_4'] != '') {
        $spellid_4 = $sql->quote_smart($_POST['spellid_4']);
    } else {
        $spellid_4 = 0;
    }
    if (isset($_POST['spelltrigger_4']) && $_POST['spelltrigger_4'] != '') {
        $spelltrigger_4 = $sql->quote_smart($_POST['spelltrigger_4']);
    } else {
        $spelltrigger_4 = 0;
    }
    if (isset($_POST['spellcharges_4']) && $_POST['spellcharges_4'] != '') {
        $spellcharges_4 = $sql->quote_smart($_POST['spellcharges_4']);
    } else {
        $spellcharges_4 = 0;
    }
    if (isset($_POST['spellcooldown_4']) && $_POST['spellcooldown_4'] != '') {
        $spellcooldown_4 = $sql->quote_smart($_POST['spellcooldown_4']);
    } else {
        $spellcooldown_4 = -1;
    }
    if (isset($_POST['spellcategory_4']) && $_POST['spellcategory_4'] != '') {
        $spellcategory_4 = $sql->quote_smart($_POST['spellcategory_4']);
    } else {
        $spellcategory_4 = 0;
    }
    if (isset($_POST['spellcategorycooldown_4']) && $_POST['spellcategorycooldown_4'] != '') {
        $spellcategorycooldown_4 = $sql->quote_smart($_POST['spellcategorycooldown_4']);
    } else {
        $spellcategorycooldown_4 = -1;
    }
    if (isset($_POST['spellppmRate_4']) && $_POST['spellppmRate_4'] != '') {
        $spellppmRate_4 = $sql->quote_smart($_POST['spellppmRate_4']);
    } else {
        $spellppmRate_4 = 0;
    }
    if (isset($_POST['spellid_5']) && $_POST['spellid_5'] != '') {
        $spellid_5 = $sql->quote_smart($_POST['spellid_5']);
    } else {
        $spellid_5 = 0;
    }
    if (isset($_POST['spelltrigger_5']) && $_POST['spelltrigger_5'] != '') {
        $spelltrigger_5 = $sql->quote_smart($_POST['spelltrigger_5']);
    } else {
        $spelltrigger_5 = 0;
    }
    if (isset($_POST['spellcharges_5']) && $_POST['spellcharges_5'] != '') {
        $spellcharges_5 = $sql->quote_smart($_POST['spellcharges_5']);
    } else {
        $spellcharges_5 = 0;
    }
    if (isset($_POST['spellcooldown_5']) && $_POST['spellcooldown_5'] != '') {
        $spellcooldown_5 = $sql->quote_smart($_POST['spellcooldown_5']);
    } else {
        $spellcooldown_5 = -1;
    }
    if (isset($_POST['spellcategory_5']) && $_POST['spellcategory_5'] != '') {
        $spellcategory_5 = $sql->quote_smart($_POST['spellcategory_5']);
    } else {
        $spellcategory_5 = 0;
    }
    if (isset($_POST['spellcategorycooldown_5']) && $_POST['spellcategorycooldown_5'] != '') {
        $spellcategorycooldown_5 = $sql->quote_smart($_POST['spellcategorycooldown_5']);
    } else {
        $spellcategorycooldown_5 = -1;
    }
    if (isset($_POST['spellppmRate_5']) && $_POST['spellppmRate_5'] != '') {
        $spellppmRate_5 = $sql->quote_smart($_POST['spellppmRate_5']);
    } else {
        $spellppmRate_5 = 0;
    }
    if (isset($_POST['bonding']) && $_POST['bonding'] != '') {
        $bonding = $sql->quote_smart($_POST['bonding']);
    } else {
        $bonding = 0;
    }
    if (isset($_POST['description']) && $_POST['description'] != '') {
        $description = $sql->quote_smart($_POST['description']);
    } else {
        $description = "";
    }
    if (isset($_POST['PageText']) && $_POST['PageText'] != '') {
        $PageText = $sql->quote_smart($_POST['PageText']);
    } else {
        $PageText = 0;
    }
    if (isset($_POST['LanguageID']) && $_POST['LanguageID'] != '') {
        $LanguageID = $sql->quote_smart($_POST['LanguageID']);
    } else {
        $LanguageID = 0;
    }
    if (isset($_POST['PageMaterial']) && $_POST['PageMaterial'] != '') {
        $PageMaterial = $sql->quote_smart($_POST['PageMaterial']);
    } else {
        $PageMaterial = 0;
    }
    if (isset($_POST['startquest']) && $_POST['startquest'] != '') {
        $startquest = $sql->quote_smart($_POST['startquest']);
    } else {
        $startquest = 0;
    }
    if (isset($_POST['lockid']) && $_POST['lockid'] != '') {
        $lockid = $sql->quote_smart($_POST['lockid']);
    } else {
        $lockid = 0;
    }
    if (isset($_POST['Material']) && $_POST['Material'] != '') {
        $Material = $sql->quote_smart($_POST['Material']);
    } else {
        $Material = 0;
    }
    if (isset($_POST['sheath']) && $_POST['sheath'] != '') {
        $sheath = $sql->quote_smart($_POST['sheath']);
    } else {
        $sheath = 0;
    }
    if (isset($_POST['RandomProperty']) && $_POST['RandomProperty'] != '') {
        $RandomProperty = $sql->quote_smart($_POST['RandomProperty']);
    } else {
        $RandomProperty = 0;
    }
    if (isset($_POST['block ']) && $_POST['block '] != '') {
        $block = $sql->quote_smart($_POST['block']);
    } else {
        $block = 0;
    }
    if (isset($_POST['itemset']) && $_POST['itemset'] != '') {
        $itemset = $sql->quote_smart($_POST['itemset']);
    } else {
        $itemset = 0;
    }
    if (isset($_POST['MaxDurability']) && $_POST['MaxDurability'] != '') {
        $MaxDurability = $sql->quote_smart($_POST['MaxDurability']);
    } else {
        $MaxDurability = 0;
    }
    if (isset($_POST['area']) && $_POST['area'] != '') {
        $area = $sql->quote_smart($_POST['area']);
    } else {
        $area = 0;
    }
    if (isset($_POST['BagFamily']) && $_POST['BagFamily'] != '') {
        $BagFamily = $sql->quote_smart($_POST['BagFamily']);
    } else {
        $BagFamily = 0;
    }
    if (isset($_POST['Map']) && $_POST['Map'] != '') {
        $Map = $sql->quote_smart($_POST['Map']);
    } else {
        $Map = 0;
    }
    if (isset($_POST['ScriptName']) && $_POST['ScriptName'] != '') {
        $ScriptName = $sql->quote_smart($_POST['ScriptName']);
    } else {
        $ScriptName = 0;
    }
    if (isset($_POST['DisenchantID']) && $_POST['DisenchantID'] != '') {
        $DisenchantID = $sql->quote_smart($_POST['DisenchantID']);
    } else {
        $DisenchantID = 0;
    }
    if (isset($_POST['RequiredDisenchantSkill']) && $_POST['RequiredDisenchantSkill'] != '') {
        $RequiredDisenchantSkill = $sql->quote_smart($_POST['RequiredDisenchantSkill']);
    } else {
        $RequiredDisenchantSkill = -1;
    }
    if (isset($_POST['unk0']) && $_POST['unk0'] != '') {
        $unk0 = $sql->quote_smart($_POST['unk0']);
    } else {
        $unk0 = -1;
    }
    if (isset($_POST['RandomSuffix']) && $_POST['RandomSuffix'] != '') {
        $RandomSuffix = $sql->quote_smart($_POST['RandomSuffix']);
    } else {
        $RandomSuffix = 0;
    }
    if (isset($_POST['TotemCategory']) && $_POST['TotemCategory'] != '') {
        $TotemCategory = $sql->quote_smart($_POST['TotemCategory']);
    } else {
        $TotemCategory = 0;
    }
    if (isset($_POST['socketColor_1']) && $_POST['socketColor_1'] != '') {
        $socketColor_1 = $sql->quote_smart($_POST['socketColor_1']);
    } else {
        $socketColor_1 = 0;
    }
    if (isset($_POST['socketContent_1']) && $_POST['socketContent_1'] != '') {
        $socketContent_1 = $sql->quote_smart($_POST['socketContent_1']);
    } else {
        $socketContent_1 = 0;
    }
    if (isset($_POST['socketColor_2']) && $_POST['socketColor_2'] != '') {
        $socketColor_2 = $sql->quote_smart($_POST['socketColor_2']);
    } else {
        $socketColor_2 = 0;
    }
    if (isset($_POST['socketContent_2']) && $_POST['socketContent_2'] != '') {
        $socketContent_2 = $sql->quote_smart($_POST['socketContent_2']);
    } else {
        $socketContent_2 = 0;
    }
    if (isset($_POST['socketColor_3']) && $_POST['socketColor_3'] != '') {
        $socketColor_3 = $sql->quote_smart($_POST['socketColor_3']);
    } else {
        $socketColor_3 = 0;
    }
    if (isset($_POST['socketContent_3']) && $_POST['socketContent_3'] != '') {
        $socketContent_3 = $sql->quote_smart($_POST['socketContent_3']);
    } else {
        $socketContent_3 = 0;
    }
    if (isset($_POST['socketBonus']) && $_POST['socketBonus'] != '') {
        $socketBonus = $sql->quote_smart($_POST['socketBonus']);
    } else {
        $socketBonus = 0;
    }
    if (isset($_POST['GemProperties']) && $_POST['GemProperties'] != '') {
        $GemProperties = $sql->quote_smart($_POST['GemProperties']);
    } else {
        $GemProperties = 0;
    }
    if (isset($_POST['ArmorDamageModifier']) && $_POST['ArmorDamageModifier'] != '') {
        $ArmorDamageModifier = $sql->quote_smart($_POST['ArmorDamageModifier']);
    } else {
        $ArmorDamageModifier = 0;
    }
    if (isset($_POST['de_ChanceOrQuestChance']) && $_POST['de_ChanceOrQuestChance'] != '') {
        $de_ChanceOrQuestChance = $sql->quote_smart($_POST['de_ChanceOrQuestChance']);
    } else {
        $de_ChanceOrQuestChance = 0;
    }
    if (isset($_POST['de_groupid']) && $_POST['de_groupid'] != '') {
        $de_groupid = $sql->quote_smart($_POST['de_groupid']);
    } else {
        $de_groupid = 0;
    }
    if (isset($_POST['de_mincountOrRef']) && $_POST['de_mincountOrRef'] != '') {
        $de_mincountOrRef = $sql->quote_smart($_POST['de_mincountOrRef']);
    } else {
        $de_mincountOrRef = 0;
    }
    if (isset($_POST['de_maxcount']) && $_POST['de_maxcount'] != '') {
        $de_maxcount = $sql->quote_smart($_POST['de_maxcount']);
    } else {
        $de_maxcount = 0;
    }
    if (isset($_POST['de_lootcondition']) && $_POST['de_lootcondition'] != '') {
        $de_lootcondition = $sql->quote_smart($_POST['de_lootcondition']);
    } else {
        $de_lootcondition = 0;
    }
    if (isset($_POST['de_condition_value1']) && $_POST['de_condition_value1'] != '') {
        $de_condition_value1 = $sql->quote_smart($_POST['de_condition_value1']);
    } else {
        $de_condition_value1 = 0;
    }
    if (isset($_POST['de_condition_value2']) && $_POST['de_condition_value2'] != '') {
        $de_condition_value2 = $sql->quote_smart($_POST['de_condition_value2']);
    } else {
        $de_condition_value2 = 0;
    }
    if (isset($_POST['de_item']) && $_POST['de_item'] != '') {
        $de_item = $sql->quote_smart($_POST['de_item']);
    } else {
        $de_item = 0;
    }
    if (isset($_POST['del_de_items']) && $_POST['del_de_items'] != '') {
        $del_de_items = $sql->quote_smart($_POST['del_de_items']);
    } else {
        $del_de_items = NULL;
    }
    $tmp = 0;
    if ($AllowableClass[0] != -1) {
        for ($t = 0; $t < count($AllowableClass); $t++) {
            if ($AllowableClass[$t] & 1) {
                $tmp = $tmp + 1;
            }
            if ($AllowableClass[$t] & 2) {
                $tmp = $tmp + 2;
            }
            if ($AllowableClass[$t] & 4) {
                $tmp = $tmp + 4;
            }
            if ($AllowableClass[$t] & 8) {
                $tmp = $tmp + 8;
            }
            if ($AllowableClass[$t] & 16) {
                $tmp = $tmp + 16;
            }
            if ($AllowableClass[$t] & 32) {
                $tmp = $tmp + 32;
            }
            if ($AllowableClass[$t] & 64) {
                $tmp = $tmp + 64;
            }
            if ($AllowableClass[$t] & 128) {
                $tmp = $tmp + 128;
            }
            if ($AllowableClass[$t] & 256) {
                $tmp = $tmp + 256;
            }
            if ($AllowableClass[$t] & 512) {
                $tmp = $tmp + 512;
            }
            if ($AllowableClass[$t] & 1024) {
                $tmp = $tmp + 1024;
            }
        }
    }
    if ($tmp) {
        $AllowableClass = $tmp;
    } else {
        $AllowableClass = -1;
    }
    $tmp = 0;
    if ($AllowableRace[0] != -1) {
        for ($t = 0; $t < count($AllowableRace); $t++) {
            if ($AllowableRace[$t] & 1) {
                $tmp = $tmp + 1;
            }
            if ($AllowableRace[$t] & 2) {
                $tmp = $tmp + 2;
            }
            if ($AllowableRace[$t] & 4) {
                $tmp = $tmp + 4;
            }
            if ($AllowableRace[$t] & 8) {
                $tmp = $tmp + 8;
            }
            if ($AllowableRace[$t] & 16) {
                $tmp = $tmp + 16;
            }
            if ($AllowableRace[$t] & 32) {
                $tmp = $tmp + 32;
            }
            if ($AllowableRace[$t] & 64) {
                $tmp = $tmp + 64;
            }
            if ($AllowableRace[$t] & 128) {
                $tmp = $tmp + 128;
            }
            if ($AllowableRace[$t] & 256) {
                $tmp = $tmp + 256;
            }
            if ($AllowableRace[$t] & 512) {
                $tmp = $tmp + 512;
            }
        }
    }
    if ($tmp) {
        $AllowableRace = $tmp;
    } else {
        $AllowableRace = -1;
    }
    if ($_POST['type'] == "add_new") {
        $sql_query = "INSERT INTO item_template (entry, class, subclass, name,displayid, Quality, Flags, BuyCount, BuyPrice, SellPrice, InventoryType, AllowableClass, AllowableRace, ItemLevel,\n  RequiredLevel, RequiredSkill, RequiredSkillRank, requiredspell, requiredhonorrank, RequiredCityRank, RequiredReputationFaction, RequiredReputationRank, maxcount, stackable, ContainerSlots, stat_type1,\n  stat_value1, stat_type2, stat_value2, stat_type3, stat_value3, stat_type4, stat_value4, stat_type5, stat_value5, stat_type6, stat_value6, stat_type7, stat_value7, stat_type8, stat_value8, stat_type9,\n  stat_value9, stat_type10, stat_value10, dmg_min1, dmg_max1, dmg_type1, dmg_min2, dmg_max2, dmg_type2, armor, holy_res, fire_res, nature_res, frost_res, shadow_res, arcane_res, delay, ammo_type,\n  RangedModRange, spellid_1, spelltrigger_1, spellcharges_1, spellppmRate_1, spellcooldown_1, spellcategory_1, spellcategorycooldown_1,\n  spellid_2, spelltrigger_2, spellcharges_2, spellppmRate_2, spellcooldown_2, spellcategory_2, spellcategorycooldown_2, spellid_3, spelltrigger_3, spellcharges_3, spellppmRate_3, spellcooldown_3, spellcategory_3, spellcategorycooldown_3,\n  spellid_4, spelltrigger_4, spellcharges_4, spellppmRate_4, spellcooldown_4, spellcategory_4, spellcategorycooldown_4, spellid_5, spelltrigger_5, spellcharges_5, spellppmRate_5, spellcooldown_5, spellcategory_5, spellcategorycooldown_5,\n  bonding, description, PageText, LanguageID, PageMaterial, startquest, lockid, Material, sheath, RandomProperty, block, itemset, MaxDurability, area, BagFamily, Map, ScriptName, DisenchantID,RequiredDisenchantSkill,\n  ArmorDamageModifier,unk0,RandomSuffix,TotemCategory, socketColor_1, socketContent_1, socketColor_2, socketContent_2, socketColor_3, socketContent_3, socketBonus, GemProperties)\n  VALUES ('{$entry}', '{$class}', '{$subclass}', '{$name}','{$displayid}', '{$Quality}', '{$Flags}', '{$BuyCount}', '{$BuyPrice}', '{$SellPrice}', '{$InventoryType}', '{$AllowableClass}', '{$AllowableRace}', '{$ItemLevel}', '{$RequiredLevel}',\n  '{$RequiredSkill}', '{$RequiredSkillRank}', '{$requiredspell}', '{$requiredhonorrank}', '{$RequiredCityRank}', '{$RequiredReputationFaction}', '{$RequiredReputationRank}', '{$maxcount}', '{$stackable}', '{$ContainerSlots}', '{$stat_type1}',\n  '{$stat_value1}', '{$stat_type2}', '{$stat_value2}', '{$stat_type3}', '{$stat_value3}', '{$stat_type4}', '{$stat_value4}', '{$stat_type5}', '{$stat_value5}', '{$stat_type6}', '{$stat_value6}', '{$stat_type7}', '{$stat_value7}', '{$stat_type8}', '{$stat_value8}',\n  '{$stat_type9}', '{$stat_value9}', '{$stat_type10}', '{$stat_value10}', '{$dmg_min1}', '{$dmg_max1}', '{$dmg_type1}', '{$dmg_min2}', '{$dmg_max2}', '{$dmg_type2}', '{$armor}', '{$holy_res}', '{$fire_res}', '{$nature_res}', '{$frost_res}', '{$shadow_res}', '{$arcane_res}', '{$delay}', '{$ammo_type}', '{$RangedModRange}', '{$spellid_1}', '{$spelltrigger_1}', '{$spellcharges_1}', '{$spellppmRate_1}', '{$spellcooldown_1}',\n  '{$spellcategory_1}', '{$spellcategorycooldown_1}', '{$spellid_2}', '{$spelltrigger_2}', '{$spellcharges_2}', '{$spellppmRate_2}', '{$spellcooldown_2}', '{$spellcategory_2}', '{$spellcategorycooldown_2}', '{$spellid_3}', '{$spelltrigger_3}', '{$spellcharges_3}', '{$spellppmRate_3}',\n  '{$spellcooldown_3}', '{$spellcategory_3}', '{$spellcategorycooldown_3}', '{$spellid_4}', '{$spelltrigger_4}', '{$spellcharges_4}', '{$spellppmRate_4}', '{$spellcooldown_4}', '{$spellcategory_4}', '{$spellcategorycooldown_4}', '{$spellid_5}', '{$spelltrigger_5}',\n  '{$spellcharges_5}', '{$spellppmRate_5}', '{$spellcooldown_5}', '{$spellcategory_5}', '{$spellcategorycooldown_5}', '{$bonding}', '{$description}', '{$PageText}', '{$LanguageID}', '{$PageMaterial}', '{$startquest}', '{$lockid}', '{$Material}', '{$sheath}', '{$RandomProperty}', '{$block}',\n  '{$itemset}', '{$MaxDurability}', '{$area}', '{$BagFamily}', '{$Map}', '{$ScriptName}', '{$DisenchantID}', '{$RequiredDisenchantSkill}','{$ArmorDamageModifier}','{$unk0}','{$RandomSuffix}', '{$TotemCategory}', '{$socketColor_1}', '{$socketContent_1}', '{$socketColor_2}',\n  '{$socketContent_2}', '{$socketColor_3}', '{$socketContent_3}', '{$socketBonus}', '{$GemProperties}')";
    } elseif ($_POST['type'] == "edit") {
        $sql_query = "UPDATE item_template SET  ";
        $result = $sql->query("SELECT `item_template`.`entry`,`class`,`subclass`,`unk0`,IFNULL(" . ($deplang != 0 ? "name_loc{$deplang}" : "NULL") . ",`name`) as name,`displayid`,`Quality`,`Flags`,`BuyCount`,`BuyPrice`,`SellPrice`,`InventoryType`,`AllowableClass`,`AllowableRace`,`ItemLevel`,`RequiredLevel`,`RequiredSkill`,`RequiredSkillRank`,`requiredspell`,`requiredhonorrank`,`RequiredCityRank`,`RequiredReputationFaction`,`RequiredReputationRank`,`maxcount`,`stackable`,`ContainerSlots`,`stat_type1`,`stat_value1`,`stat_type2`,`stat_value2`,`stat_type3`,`stat_value3`,`stat_type4`,`stat_value4`,`stat_type5`,`stat_value5`,`stat_type6`,`stat_value6`,`stat_type7`,`stat_value7`,`stat_type8`,`stat_value8`,`stat_type9`,`stat_value9`,`stat_type10`,`stat_value10`,`dmg_min1`,`dmg_max1`,`dmg_type1`,`dmg_min2`,`dmg_max2`,`dmg_type2`,`armor`,`holy_res`,`fire_res`,`nature_res`,`frost_res`,`shadow_res`,`arcane_res`,`delay`,`ammo_type`,`RangedModRange`,`spellid_1`,`spelltrigger_1`,`spellcharges_1`,`spellppmRate_1`,`spellcooldown_1`,`spellcategory_1`,`spellcategorycooldown_1`,`spellid_2`,`spelltrigger_2`,`spellcharges_2`,`spellppmRate_2`,`spellcooldown_2`,`spellcategory_2`,`spellcategorycooldown_2`,`spellid_3`,`spelltrigger_3`,`spellcharges_3`,`spellppmRate_3`,`spellcooldown_3`,`spellcategory_3`,`spellcategorycooldown_3`,`spellid_4`,`spelltrigger_4`,`spellcharges_4`,`spellppmRate_4`,`spellcooldown_4`,`spellcategory_4`,`spellcategorycooldown_4`,`spellid_5`,`spelltrigger_5`,`spellcharges_5`,`spellppmRate_5`,`spellcooldown_5`,`spellcategory_5`,`spellcategorycooldown_5`,`bonding`,`description`,`PageText`,`LanguageID`,`PageMaterial`,`startquest`,`lockid`,`Material`,`sheath`,`RandomProperty`,`RandomSuffix`,`block`,`itemset`,`MaxDurability`,`area`,`Map`,`BagFamily`,`TotemCategory`,`socketColor_1`,`socketContent_1`,`socketColor_2`,`socketContent_2`,`socketColor_3`,`socketContent_3`,`socketBonus`,`GemProperties`,`RequiredDisenchantSkill`,`ArmorDamageModifier`,`ScriptName`,`DisenchantID`,`FoodType`,`minMoneyLoot`,`maxMoneyLoot` FROM item_template LEFT JOIN locales_item ON item_template.entry = locales_item.entry WHERE item_template.entry = '{$entry}'");
        if ($item_templ = $sql->fetch_assoc($result)) {
            if ($item_templ['class'] != $class) {
                $sql_query .= "class='{$class}',";
            }
            if ($item_templ['subclass'] != $subclass) {
                $sql_query .= "subclass='{$subclass}',";
            }
            if ($item_templ['name'] != $name) {
                $sql_query .= "name='{$name}',";
            }
            if ($item_templ['displayid'] != $displayid) {
                $sql_query .= "displayid='{$displayid}',";
            }
            if ($item_templ['Quality'] != $Quality) {
                $sql_query .= "Quality='{$Quality}',";
            }
            if ($item_templ['Flags'] != $Flags) {
                $sql_query .= "Flags='{$Flags}',";
            }
            if ($item_templ['BuyCount'] != $BuyCount) {
                $sql_query .= "BuyCount='{$BuyCount}',";
            }
            if ($item_templ['BuyPrice'] != $BuyPrice) {
                $sql_query .= "BuyPrice='{$BuyPrice}',";
            }
            if ($item_templ['SellPrice'] != $SellPrice) {
                $sql_query .= "SellPrice='{$SellPrice}',";
            }
            if ($item_templ['InventoryType'] != $InventoryType) {
                $sql_query .= "InventoryType='{$InventoryType}',";
            }
            if ($item_templ['AllowableClass'] != $AllowableClass) {
                $sql_query .= "AllowableClass='{$AllowableClass}',";
            }
            if ($item_templ['AllowableRace'] != $AllowableRace) {
                $sql_query .= "AllowableRace='{$AllowableRace}',";
            }
            if ($item_templ['ItemLevel'] != $ItemLevel) {
                $sql_query .= "ItemLevel='{$ItemLevel}',";
            }
            if ($item_templ['RequiredLevel'] != $RequiredLevel) {
                $sql_query .= "RequiredLevel='{$RequiredLevel}',";
            }
            if ($item_templ['RequiredSkill'] != $RequiredSkill) {
                $sql_query .= "RequiredSkill='{$RequiredSkill}',";
            }
            if ($item_templ['RequiredSkillRank'] != $RequiredSkillRank) {
                $sql_query .= "RequiredSkillRank='{$RequiredSkillRank}',";
            }
            if ($item_templ['requiredspell'] != $requiredspell) {
                $sql_query .= "requiredspell='{$requiredspell}',";
            }
            if ($item_templ['requiredhonorrank'] != $requiredhonorrank) {
                $sql_query .= "requiredhonorrank='{$requiredhonorrank}',";
            }
            if ($item_templ['RequiredCityRank'] != $RequiredCityRank) {
                $sql_query .= "RequiredCityRank='{$RequiredCityRank}',";
            }
            if ($item_templ['RequiredReputationFaction'] != $RequiredReputationFaction) {
                $sql_query .= "RequiredReputationFaction='{$RequiredReputationFaction}',";
            }
            if ($item_templ['RequiredReputationRank'] != $RequiredReputationRank) {
                $sql_query .= "RequiredReputationRank='{$RequiredReputationRank}',";
            }
            if ($item_templ['maxcount'] != $maxcount) {
                $sql_query .= "maxcount='{$maxcount}',";
            }
            if ($item_templ['stackable'] != $stackable) {
                $sql_query .= "stackable='{$stackable}',";
            }
            if ($item_templ['ContainerSlots'] != $ContainerSlots) {
                $sql_query .= "ContainerSlots='{$ContainerSlots}',";
            }
            if ($item_templ['stat_type1'] != $stat_type1) {
                $sql_query .= "stat_type1='{$stat_type1}',";
            }
            if ($item_templ['stat_value1'] != $stat_value1) {
                $sql_query .= "stat_value1='{$stat_value1}',";
            }
            if ($item_templ['stat_type2'] != $stat_type2) {
                $sql_query .= "stat_type2='{$stat_type2}',";
            }
            if ($item_templ['stat_value2'] != $stat_value2) {
                $sql_query .= "stat_value2='{$stat_value2}',";
            }
            if ($item_templ['stat_type3'] != $stat_type3) {
                $sql_query .= "stat_type3='{$stat_type3}',";
            }
            if ($item_templ['stat_value3'] != $stat_value3) {
                $sql_query .= "stat_value3='{$stat_value3}',";
            }
            if ($item_templ['stat_type4'] != $stat_type4) {
                $sql_query .= "stat_type4='{$stat_type4}',";
            }
            if ($item_templ['stat_value4'] != $stat_value4) {
                $sql_query .= "stat_value4='{$stat_value4}',";
            }
            if ($item_templ['stat_type5'] != $stat_type5) {
                $sql_query .= "stat_type5='{$stat_type5}',";
            }
            if ($item_templ['stat_value5'] != $stat_value5) {
                $sql_query .= "stat_value5='{$stat_value5}',";
            }
            if ($item_templ['stat_type6'] != $stat_type6) {
                $sql_query .= "stat_type6='{$stat_type6}',";
            }
            if ($item_templ['stat_value6'] != $stat_value6) {
                $sql_query .= "stat_value6='{$stat_value6}',";
            }
            if ($item_templ['stat_type7'] != $stat_type7) {
                $sql_query .= "stat_type7='{$stat_type7}',";
            }
            if ($item_templ['stat_value7'] != $stat_value7) {
                $sql_query .= "stat_value7='{$stat_value7}',";
            }
            if ($item_templ['stat_type8'] != $stat_type8) {
                $sql_query .= "stat_type8='{$stat_type8}',";
            }
            if ($item_templ['stat_value8'] != $stat_value8) {
                $sql_query .= "stat_value8='{$stat_value8}',";
            }
            if ($item_templ['stat_type9'] != $stat_type9) {
                $sql_query .= "stat_type9='{$stat_type9}',";
            }
            if ($item_templ['stat_value9'] != $stat_value9) {
                $sql_query .= "stat_value9='{$stat_value9}',";
            }
            if ($item_templ['stat_type10'] != $stat_type10) {
                $sql_query .= "stat_type10='{$stat_type10}',";
            }
            if ($item_templ['stat_value10'] != $stat_value10) {
                $sql_query .= "stat_value10='{$stat_value10}',";
            }
            if ($item_templ['dmg_min1'] != $dmg_min1) {
                $sql_query .= "dmg_min1='{$dmg_min1}',";
            }
            if ($item_templ['dmg_max1'] != $dmg_max1) {
                $sql_query .= "dmg_max1='{$dmg_max1}',";
            }
            if ($item_templ['dmg_type1'] != $dmg_type1) {
                $sql_query .= "dmg_type1='{$dmg_type1}',";
            }
            if ($item_templ['dmg_min2'] != $dmg_min2) {
                $sql_query .= "dmg_min2='{$dmg_min2}',";
            }
            if ($item_templ['dmg_max2'] != $dmg_max2) {
                $sql_query .= "dmg_max2='{$dmg_max2}',";
            }
            if ($item_templ['dmg_type2'] != $dmg_type2) {
                $sql_query .= "dmg_type2='{$dmg_type2}',";
            }
            if ($item_templ['armor'] != $armor) {
                $sql_query .= "armor='{$armor}',";
            }
            if ($item_templ['holy_res'] != $holy_res) {
                $sql_query .= "holy_res='{$holy_res}',";
            }
            if ($item_templ['fire_res'] != $fire_res) {
                $sql_query .= "fire_res='{$fire_res}',";
            }
            if ($item_templ['nature_res'] != $nature_res) {
                $sql_query .= "nature_res='{$nature_res}',";
            }
            if ($item_templ['frost_res'] != $frost_res) {
                $sql_query .= "frost_res='{$frost_res}',";
            }
            if ($item_templ['shadow_res'] != $shadow_res) {
                $sql_query .= "shadow_res='{$shadow_res}',";
            }
            if ($item_templ['arcane_res'] != $arcane_res) {
                $sql_query .= "arcane_res='{$arcane_res}',";
            }
            if ($item_templ['delay'] != $delay) {
                $sql_query .= "delay='{$delay}',";
            }
            if ($item_templ['ammo_type'] != $ammo_type) {
                $sql_query .= "ammo_type='{$ammo_type}',";
            }
            if ($item_templ['RangedModRange'] != $RangedModRange) {
                $sql_query .= "RangedModRange='{$RangedModRange}',";
            }
            if ($item_templ['spellid_1'] != $spellid_1) {
                $sql_query .= "spellid_1='{$spellid_1}',";
            }
            if ($item_templ['spelltrigger_1'] != $spelltrigger_1) {
                $sql_query .= "spelltrigger_1='{$spelltrigger_1}',";
            }
            if ($item_templ['spellcharges_1'] != $spellcharges_1) {
                $sql_query .= "spellcharges_1='{$spellcharges_1}',";
            }
            if ($item_templ['spellppmRate_1'] != $spellppmRate_1) {
                $sql_query .= "spellppmRate_1='{$spellppmRate_1}',";
            }
            if ($item_templ['spellcooldown_1'] != $spellcooldown_1) {
                $sql_query .= "spellcooldown_1='{$spellcooldown_1}',";
            }
            if ($item_templ['spellcategory_1'] != $spellcategory_1) {
                $sql_query .= "spellcategory_1='{$spellcategory_1}',";
            }
            if ($item_templ['spellcategorycooldown_1'] != $spellcategorycooldown_1) {
                $sql_query .= "spellcategorycooldown_1='{$spellcategorycooldown_1}',";
            }
            if ($item_templ['spellid_2'] != $spellid_2) {
                $sql_query .= "spellid_2='{$spellid_2}',";
            }
            if ($item_templ['spelltrigger_2'] != $spelltrigger_2) {
                $sql_query .= "spelltrigger_2='{$spelltrigger_2}',";
            }
            if ($item_templ['spellcharges_2'] != $spellcharges_2) {
                $sql_query .= "spellcharges_2='{$spellcharges_2}',";
            }
            if ($item_templ['spellppmRate_2'] != $spellppmRate_2) {
                $sql_query .= "spellppmRate_2='{$spellppmRate_2}',";
            }
            if ($item_templ['spellcooldown_2'] != $spellcooldown_2) {
                $sql_query .= "spellcooldown_2='{$spellcooldown_2}',";
            }
            if ($item_templ['spellcategory_2'] != $spellcategory_2) {
                $sql_query .= "spellcategory_2='{$spellcategory_2}',";
            }
            if ($item_templ['spellcategorycooldown_2'] != $spellcategorycooldown_2) {
                $sql_query .= "spellcategorycooldown_2='{$spellcategorycooldown_2}',";
            }
            if ($item_templ['spellid_3'] != $spellid_3) {
                $sql_query .= "spellid_3='{$spellid_3}',";
            }
            if ($item_templ['spelltrigger_3'] != $spelltrigger_3) {
                $sql_query .= "spelltrigger_3='{$spelltrigger_3}',";
            }
            if ($item_templ['spellcharges_3'] != $spellcharges_3) {
                $sql_query .= "spellcharges_3='{$spellcharges_3}',";
            }
            if ($item_templ['spellppmRate_3'] != $spellppmRate_3) {
                $sql_query .= "spellppmRate_3='{$spellppmRate_3}',";
            }
            if ($item_templ['spellcooldown_3'] != $spellcooldown_3) {
                $sql_query .= "spellcooldown_3='{$spellcooldown_3}',";
            }
            if ($item_templ['spellcategory_3'] != $spellcategory_3) {
                $sql_query .= "spellcategory_3='{$spellcategory_3}',";
            }
            if ($item_templ['spellcategorycooldown_3'] != $spellcategorycooldown_3) {
                $sql_query .= "spellcategorycooldown_3='{$spellcategorycooldown_3}',";
            }
            if ($item_templ['spellid_4'] != $spellid_4) {
                $sql_query .= "spellid_4='{$spellid_4}',";
            }
            if ($item_templ['spelltrigger_4'] != $spelltrigger_4) {
                $sql_query .= "spelltrigger_4='{$spelltrigger_4}',";
            }
            if ($item_templ['spellcharges_4'] != $spellcharges_4) {
                $sql_query .= "spellcharges_4='{$spellcharges_4}',";
            }
            if ($item_templ['spellppmRate_4'] != $spellppmRate_4) {
                $sql_query .= "spellppmRate_4='{$spellppmRate_4}',";
            }
            if ($item_templ['spellcooldown_4'] != $spellcooldown_4) {
                $sql_query .= "spellcooldown_4='{$spellcooldown_4}',";
            }
            if ($item_templ['spellcategory_4'] != $spellcategory_4) {
                $sql_query .= "spellcategory_4='{$spellcategory_4}',";
            }
            if ($item_templ['spellcategorycooldown_4'] != $spellcategorycooldown_4) {
                $sql_query .= "spellcategorycooldown_4='{$spellcategorycooldown_4}', ";
            }
            if ($item_templ['spellid_5'] != $spellid_5) {
                $sql_query .= "spellid_5='{$spellid_5}',";
            }
            if ($item_templ['spelltrigger_5'] != $spelltrigger_5) {
                $sql_query .= "spelltrigger_5='{$spelltrigger_5}',";
            }
            if ($item_templ['spellcharges_5'] != $spellcharges_5) {
                $sql_query .= "spellcharges_5='{$spellcharges_5}',";
            }
            if ($item_templ['spellppmRate_5'] != $spellppmRate_5) {
                $sql_query .= "spellppmRate_5='{$spellppmRate_5}',";
            }
            if ($item_templ['spellcooldown_5'] != $spellcooldown_5) {
                $sql_query .= "spellcooldown_5='{$spellcooldown_5}',";
            }
            if ($item_templ['spellcategory_5'] != $spellcategory_5) {
                $sql_query .= "spellcategory_5='{$spellcategory_5}',";
            }
            if ($item_templ['spellcategorycooldown_5'] != $spellcategorycooldown_5) {
                $sql_query .= "spellcategorycooldown_5='{$spellcategorycooldown_5}',";
            }
            if ($item_templ['bonding'] != $bonding) {
                $sql_query .= "bonding='{$bonding}',";
            }
            if ($item_templ['description'] != $description) {
                $sql_query .= "description='{$description}',";
            }
            if ($item_templ['PageText'] != $PageText) {
                $sql_query .= "PageText='{$PageText}',";
            }
            if ($item_templ['LanguageID'] != $LanguageID) {
                $sql_query .= "LanguageID='{$LanguageID}',";
            }
            if ($item_templ['PageMaterial'] != $PageMaterial) {
                $sql_query .= "PageMaterial='{$PageMaterial}',";
            }
            if ($item_templ['startquest'] != $startquest) {
                $sql_query .= "startquest='{$startquest}',";
            }
            if ($item_templ['lockid'] != $lockid) {
                $sql_query .= "lockid='{$lockid}',";
            }
            if ($item_templ['Material'] != $Material) {
                $sql_query .= "Material='{$Material}',";
            }
            if ($item_templ['sheath'] != $sheath) {
                $sql_query .= "sheath='{$sheath}',";
            }
            if ($item_templ['RandomProperty'] != $RandomProperty) {
                $sql_query .= "RandomProperty='{$RandomProperty}',";
            }
            if ($item_templ['block'] != $block) {
                $sql_query .= "block='{$block}',";
            }
            if ($item_templ['itemset'] != $itemset) {
                $sql_query .= "itemset='{$itemset}',";
            }
            if ($item_templ['MaxDurability'] != $MaxDurability) {
                $sql_query .= "MaxDurability='{$MaxDurability}',";
            }
            if ($item_templ['area'] != $area) {
                $sql_query .= "area='{$area}',";
            }
            if ($item_templ['BagFamily'] != $BagFamily) {
                $sql_query .= "BagFamily='{$BagFamily}',";
            }
            if ($item_templ['Map'] != $Map) {
                $sql_query .= "Map='{$Map}',";
            }
            if ($item_templ['ScriptName'] != $ScriptName) {
                $sql_query .= "ScriptName='{$ScriptName}',";
            }
            if ($item_templ['DisenchantID'] != $DisenchantID) {
                $sql_query .= "DisenchantID='{$DisenchantID}',";
            }
            if ($item_templ['RequiredDisenchantSkill'] != $RequiredDisenchantSkill) {
                $sql_query .= "RequiredDisenchantSkill='{$RequiredDisenchantSkill}',";
            }
            if ($item_templ['ArmorDamageModifier'] != $ArmorDamageModifier) {
                $sql_query .= "ArmorDamageModifier='{$ArmorDamageModifier}',";
            }
            if ($item_templ['unk0'] != $unk0) {
                $sql_query .= "unk0='{$unk0}',";
            }
            if ($item_templ['RandomSuffix'] != $RandomSuffix) {
                $sql_query .= "RandomSuffix='{$RandomSuffix}',";
            }
            if ($item_templ['TotemCategory'] != $TotemCategory) {
                $sql_query .= "TotemCategory='{$TotemCategory}',";
            }
            if ($item_templ['socketColor_1'] != $socketColor_1) {
                $sql_query .= "socketColor_1='{$socketColor_1}',";
            }
            if ($item_templ['socketContent_1'] != $socketContent_1) {
                $sql_query .= "socketContent_1='{$socketContent_1}',";
            }
            if ($item_templ['socketColor_2'] != $socketColor_2) {
                $sql_query .= "socketColor_2='{$socketColor_2}',";
            }
            if ($item_templ['socketContent_2'] != $socketContent_2) {
                $sql_query .= "socketContent_2='{$socketContent_2}',";
            }
            if ($item_templ['socketColor_3'] != $socketColor_3) {
                $sql_query .= "socketColor_3='{$socketColor_3}',";
            }
            if ($item_templ['socketContent_3'] != $socketContent_3) {
                $sql_query .= "socketContent_3='{$socketContent_3}',";
            }
            if ($item_templ['socketBonus'] != $socketBonus) {
                $sql_query .= "socketBonus='{$socketBonus}',";
            }
            if ($item_templ['GemProperties'] != $GemProperties) {
                $sql_query .= "GemProperties='{$GemProperties}',";
            }
            $sql->free_result($result);
            unset($item_templ);
            if ($sql_query == "UPDATE item_template SET  " && !$de_item && !$del_de_items) {
                $sql->close();
                redirect("item.php?action=edit&entry={$entry}&error=6");
            } else {
                if ($sql_query != "UPDATE item_template SET  ") {
                    $sql_query[strlen($sql_query) - 1] = " ";
                    $sql_query .= " WHERE entry = '{$entry}';\n";
                } else {
                    $sql_query = "";
                }
            }
            if ($de_item) {
                $sql_query .= "INSERT INTO disenchant_loot_template (entry, item, ChanceOrQuestChance, `groupid`, mincountOrRef, maxcount, lootcondition, condition_value1, condition_value2)\n          VALUES ({$DisenchantID},{$de_item},'{$de_ChanceOrQuestChance}', '{$de_groupid}' ,{$de_mincountOrRef} ,{$de_maxcount} ,{$de_lootcondition} ,{$de_condition_value1} ,{$de_condition_value2});\n";
            }
            if ($del_de_items) {
                foreach ($del_de_items as $item_id) {
                    $sql_query .= "DELETE FROM disenchant_loot_template WHERE entry = {$DisenchantID} AND item = {$item_id};\n";
                }
            }
        } else {
            $sql->close();
            redirect("item.php?error=5");
        }
    } else {
        $sql->close();
        redirect("item.php?error=5");
    }
    if (isset($_POST['backup_op']) && $_POST['backup_op'] == 1) {
        $sql->close();
        Header("Content-type: application/octet-stream");
        Header("Content-Disposition: attachment; filename=itemid_{$entry}.sql");
        echo $sql_query;
        exit;
    } else {
        $sql_query = explode(';', $sql_query);
        foreach ($sql_query as $tmp_query) {
            if ($tmp_query && $tmp_query != "\n") {
                $result = $sql->query($tmp_query);
            }
        }
        $sql->close();
    }
    if ($result) {
        redirect("item.php?action=edit&entry={$entry}&error=4");
    } else {
        redirect("item.php");
    }
}
Example #11
0
<?php

// page header, and any additional required libraries
require_once 'header.php';
require_once 'config/forum.conf.php';
require_once 'libs/forum_lib.php';
require_once 'libs/bbcode_lib.php';
// minimum permission to view page
valid_login($action_permission['read']);
$sqlm = new SQL();
$sqlm->connect($mmfpm_db['addr'], $mmfpm_db['user'], $mmfpm_db['pass'], $mmfpm_db['name']);
$cid = $sqlm->query('
	SELECT category, name, description, side_access, level_post_topic, level_read, level_post
	FROM mm_forum_categories');
while ($category = $sqlm->fetch_assoc($cid)) {
    if (!isset($category['level_read'])) {
        $category['level_read'] = 0;
    }
    if (!isset($category['level_post'])) {
        $category['level_post'] = 0;
    }
    if (!isset($category['level_post_topic'])) {
        $category['level_post_topic'] = 0;
    }
    if (!isset($category['side_access'])) {
        $category['side_access'] = 'ALL';
    }
    $fid = $sqlm->query('
		SELECT forum, category, name, description, side_access, level_post_topic, level_read, level_post
		FROM mm_forum_forums
		WHERE category = ' . $category['category'] . '');
Example #12
0
function instances()
{
    global $output, $lang_instances, $realm_id, $world_db, $mmfpm_db, $itemperpage;
    $sqlw = new SQL();
    $sqlw->connect($world_db[$realm_id]['addr'], $world_db[$realm_id]['user'], $world_db[$realm_id]['pass'], $world_db[$realm_id]['name']);
    //-------------------SQL Injection Prevention--------------------------------
    // this page has multipage support and field ordering, so we need these
    $start = isset($_GET['start']) ? $sqlw->quote_smart($_GET['start']) : 0;
    if (is_numeric($start)) {
    } else {
        $start = 0;
    }
    $order_by = isset($_GET['order_by']) ? $sqlw->quote_smart($_GET['order_by']) : 'levelMin';
    if (preg_match('/^[_[:lower:]]{1,11}$/', $order_by)) {
    } else {
        $order_by = 'levelMin';
    }
    $dir = isset($_GET['dir']) ? $sqlw->quote_smart($_GET['dir']) : 1;
    if (preg_match('/^[01]{1}$/', $dir)) {
    } else {
        $dir = 1;
    }
    $order_dir = $dir ? 'ASC' : 'DESC';
    $dir = $dir ? 0 : 1;
    //-------------------SQL Injection Prevention--------------------------------
    // for multipage support
    $all_record = $sqlw->result($sqlw->query('SELECT count(*) FROM instance_template'), 0);
    // main data that we need for this page, instances
    $result = $sqlw->query('
		SELECT map, levelMin, levelMax
		FROM instance_template
		ORDER BY ' . $order_by . ' ' . $order_dir . ' LIMIT ' . $start . ', ' . $itemperpage . ';');
    //---------------Page Specific Data Starts Here--------------------------
    $output .= '
<center>
<table class="top_hidden">
	<tr>
		<td width="25%" align="right">';
    // multi page links
    $output .= $lang_instances['total'] . ' : ' . $all_record . '<br /><br />' . generate_pagination('instances.php?order_by=' . $order_by . '&amp;dir=' . ($dir ? 0 : 1), $all_record, $itemperpage, $start);
    // column headers, with links for sorting
    $output .= '
		</td>
	</tr>
</table>
<table class="lined">
	<tr>
		<th width="20%"><a href="instances.php?order_by=map&amp;start=' . $start . '&amp;dir=' . $dir . '"' . ($order_by === 'map' ? ' class="' . $order_dir . '"' : '') . '>' . $lang_instances['map'] . '</a></th>
		<th width="5%"><a href="instances.php?order_by=levelMin&amp;start=' . $start . '&amp;dir=' . $dir . '"' . ($order_by === 'levelMin' ? ' class="' . $order_dir . '"' : '') . '>' . $lang_instances['level_min'] . '</a></th>
		<th width="5%"><a href="instances.php?order_by=levelMax&amp;start=' . $start . '&amp;dir=' . $dir . '"' . ($order_by === 'levelMax' ? ' class="' . $order_dir . '"' : '') . '>' . $lang_instances['level_max'] . '</a></th>
		<th width="20%">' . $lang_instances['area'] . '</th>
		<th width="10%">' . $lang_instances['type'] . '</th>
		<th width="5%">' . $lang_instances['expansion'] . '</th>
		<th width="5%">' . $lang_instances['ppl'] . '</th>
	</tr>';
    $sqlm = new SQL();
    $sqlm->connect($mmfpm_db['addr'], $mmfpm_db['user'], $mmfpm_db['pass'], $mmfpm_db['name']);
    while ($instances = $sqlw->fetch_assoc($result)) {
        $output .= '
	<tr valign="top">
		<td>' . get_map_name($instances['map'], $sqlm) . '</td>
		<td>' . char_get_level_color($instances['levelMin']) . '</td>
		<td>' . char_get_level_color($instances['levelMax']) . '</td>
		<td>' . get_map_zone($instances['map'], $sqlm) . '</td>
		<td>' . get_map_type($instances['map'], $sqlm) . '</td>
		<td>' . get_map_exp($instances['map'], $sqlm) . '</td>
		<td>' . get_map_ppl($instances['map'], $sqlm) . '</td>
	</tr>';
    }
    unset($reset);
    unset($hours);
    unset($days);
    unset($instances);
    unset($result);
    $output .= '
</table>
<table class="top_hidden">
	<tr>
		<td width="25%" align="right">';
    // multi page links
    $output .= $lang_instances['total'] . ' : ' . $all_record . '<br /><br />' . generate_pagination('instances.php?order_by=' . $order_by . '&amp;dir=' . ($dir ? 0 : 1), $all_record, $itemperpage, $start);
    unset($start);
    $output .= '
		</td>
	</tr>
</table>
</center>';
}
Example #13
0
function do_update()
{
    global $world_db, $realm_id;
    if (!isset($_POST['opp_type']) || $_POST['opp_type'] === '') {
        redirect("game_object.php?error=1");
    }
    if (!isset($_POST['entry']) || $_POST['entry'] === '') {
        redirect("game_object.php?error=1");
    }
    $sql = new SQL();
    $sql->connect($world_db[$realm_id]['addr'], $world_db[$realm_id]['user'], $world_db[$realm_id]['pass'], $world_db[$realm_id]['name']);
    $entry = $sql->quote_smart($_POST['entry']);
    if (isset($_POST['type']) && $_POST['type'] != '') {
        $type = $sql->quote_smart($_POST['type']);
    } else {
        $type = 0;
    }
    if (isset($_POST['displayId']) && $_POST['displayId'] != '') {
        $displayId = $sql->quote_smart($_POST['displayId']);
    } else {
        $displayId = 0;
    }
    if (isset($_POST['name']) && $_POST['name'] != '') {
        $name = $sql->quote_smart($_POST['name']);
    } else {
        $name = "";
    }
    if (isset($_POST['faction']) && $_POST['faction'] != '') {
        $faction = $sql->quote_smart($_POST['faction']);
    } else {
        $faction = 0;
    }
    if (isset($_POST['flags']) && $_POST['flags'] != '') {
        $flags = $sql->quote_smart($_POST['flags']);
    } else {
        $flags = 0;
    }
    if (isset($_POST['size']) && $_POST['size'] != '') {
        $size = $sql->quote_smart($_POST['size']);
    } else {
        $size = 0;
    }
    if (isset($_POST['ScriptName']) && $_POST['ScriptName'] != '') {
        $ScriptName = $sql->quote_smart($_POST['ScriptName']);
    } else {
        $ScriptName = "";
    }
    if (isset($_POST['data0']) && $_POST['data0'] != '') {
        $data0 = $sql->quote_smart($_POST['data0']);
    } else {
        $data0 = 0;
    }
    if (isset($_POST['data1']) && $_POST['data1'] != '') {
        $data1 = $sql->quote_smart($_POST['data1']);
    } else {
        $data1 = 0;
    }
    if (isset($_POST['data2']) && $_POST['data2'] != '') {
        $data2 = $sql->quote_smart($_POST['data2']);
    } else {
        $data2 = 0;
    }
    if (isset($_POST['data3']) && $_POST['data3'] != '') {
        $data3 = $sql->quote_smart($_POST['data3']);
    } else {
        $data3 = 0;
    }
    if (isset($_POST['data4']) && $_POST['data4'] != '') {
        $data4 = $sql->quote_smart($_POST['data4']);
    } else {
        $data4 = 0;
    }
    if (isset($_POST['data5']) && $_POST['data5'] != '') {
        $data5 = $sql->quote_smart($_POST['data5']);
    } else {
        $data5 = 0;
    }
    if (isset($_POST['data6']) && $_POST['data6'] != '') {
        $data6 = $sql->quote_smart($_POST['data6']);
    } else {
        $data6 = 0;
    }
    if (isset($_POST['data7']) && $_POST['data7'] != '') {
        $data7 = $sql->quote_smart($_POST['data7']);
    } else {
        $data7 = 0;
    }
    if (isset($_POST['data8']) && $_POST['data8'] != '') {
        $data8 = $sql->quote_smart($_POST['data8']);
    } else {
        $data8 = 0;
    }
    if (isset($_POST['data9']) && $_POST['data9'] != '') {
        $data9 = $sql->quote_smart($_POST['data9']);
    } else {
        $data9 = 0;
    }
    if (isset($_POST['data10']) && $_POST['data10'] != '') {
        $data10 = $sql->quote_smart($_POST['data10']);
    } else {
        $data10 = 0;
    }
    if (isset($_POST['data11']) && $_POST['data11'] != '') {
        $data11 = $sql->quote_smart($_POST['data11']);
    } else {
        $data11 = 0;
    }
    if (isset($_POST['data12']) && $_POST['data12'] != '') {
        $data12 = $sql->quote_smart($_POST['data12']);
    } else {
        $data12 = 0;
    }
    if (isset($_POST['data13']) && $_POST['data13'] != '') {
        $data13 = $sql->quote_smart($_POST['data13']);
    } else {
        $data13 = 0;
    }
    if (isset($_POST['data14']) && $_POST['data14'] != '') {
        $data14 = $sql->quote_smart($_POST['data14']);
    } else {
        $data14 = 0;
    }
    if (isset($_POST['data15']) && $_POST['data15'] != '') {
        $data15 = $sql->quote_smart($_POST['data15']);
    } else {
        $data15 = 0;
    }
    if (isset($_POST['data16']) && $_POST['data16'] != '') {
        $data16 = $sql->quote_smart($_POST['data16']);
    } else {
        $data16 = 0;
    }
    if (isset($_POST['data17']) && $_POST['data17'] != '') {
        $data17 = $sql->quote_smart($_POST['data17']);
    } else {
        $data17 = 0;
    }
    if (isset($_POST['data18']) && $_POST['data18'] != '') {
        $data18 = $sql->quote_smart($_POST['data18']);
    } else {
        $data18 = 0;
    }
    if (isset($_POST['data19']) && $_POST['data19'] != '') {
        $data19 = $sql->quote_smart($_POST['data19']);
    } else {
        $data19 = 0;
    }
    if (isset($_POST['data20']) && $_POST['data20'] != '') {
        $data20 = $sql->quote_smart($_POST['data20']);
    } else {
        $data20 = 0;
    }
    if (isset($_POST['data21']) && $_POST['data21'] != '') {
        $data21 = $sql->quote_smart($_POST['data21']);
    } else {
        $data21 = 0;
    }
    if (isset($_POST['data22']) && $_POST['data22'] != '') {
        $data22 = $sql->quote_smart($_POST['data22']);
    } else {
        $data22 = 0;
    }
    if (isset($_POST['data23']) && $_POST['data23'] != '') {
        $data23 = $sql->quote_smart($_POST['data23']);
    } else {
        $data23 = 0;
    }
    if (isset($_POST['ChanceOrQuestChance']) && $_POST['ChanceOrQuestChance'] != '') {
        $ChanceOrQuestChance = $sql->quote_smart($_POST['ChanceOrQuestChance']);
    } else {
        $ChanceOrQuestChance = 0;
    }
    if (isset($_POST['groupid']) && $_POST['groupid'] != '') {
        $groupid = $sql->quote_smart($_POST['groupid']);
    } else {
        $groupid = 0;
    }
    if (isset($_POST['mincountOrRef']) && $_POST['mincountOrRef'] != '') {
        $mincountOrRef = $sql->quote_smart($_POST['mincountOrRef']);
    } else {
        $mincountOrRef = 0;
    }
    if (isset($_POST['maxcount']) && $_POST['maxcount'] != '') {
        $maxcount = $sql->quote_smart($_POST['maxcount']);
    } else {
        $maxcount = 0;
    }
    if (isset($_POST['lootcondition']) && $_POST['lootcondition'] != '') {
        $lootcondition = $sql->quote_smart($_POST['lootcondition']);
    } else {
        $lootcondition = 0;
    }
    if (isset($_POST['condition_value1']) && $_POST['condition_value1'] != '') {
        $condition_value1 = $sql->quote_smart($_POST['condition_value1']);
    } else {
        $condition_value1 = 0;
    }
    if (isset($_POST['condition_value2']) && $_POST['condition_value2'] != '') {
        $condition_value2 = $sql->quote_smart($_POST['condition_value2']);
    } else {
        $condition_value2 = 0;
    }
    if (isset($_POST['item']) && $_POST['item'] != '') {
        $item = $sql->quote_smart($_POST['item']);
    } else {
        $item = 0;
    }
    if (isset($_POST['del_loot_items']) && $_POST['del_loot_items'] != '') {
        $del_loot_items = $sql->quote_smart($_POST['del_loot_items']);
    } else {
        $del_loot_items = NULL;
    }
    if (isset($_POST['involvedrelation']) && $_POST['involvedrelation'] != '') {
        $involvedrelation = $sql->quote_smart($_POST['involvedrelation']);
    } else {
        $involvedrelation = 0;
    }
    if (isset($_POST['del_involvedrelation']) && $_POST['del_involvedrelation'] != '') {
        $del_involvedrelation = $sql->quote_smart($_POST['del_involvedrelation']);
    } else {
        $del_involvedrelation = NULL;
    }
    if (isset($_POST['questrelation']) && $_POST['questrelation'] != '') {
        $questrelation = $sql->quote_smart($_POST['questrelation']);
    } else {
        $questrelation = 0;
    }
    if (isset($_POST['del_questrelation']) && $_POST['del_questrelation'] != '') {
        $del_questrelation = $sql->quote_smart($_POST['del_questrelation']);
    } else {
        $del_questrelation = NULL;
    }
    if ($_POST['opp_type'] == "add_new") {
        $sql_query = "INSERT INTO gameobject_template ( entry, type, displayId, name, faction, flags, size, data0, data1,\r\n  data2, data3, data4, data5, data6, data7, data8, data9, data10, data11, data12, data13,\r\n  data14, data15, data16, data17, data18, data19, data20, data21, data22, data23, ScriptName )\r\n  VALUES ( '{$entry}', '{$type}', '{$displayId}', '{$name}', '{$faction}', '{$flags}', '{$size}', '{$data0}', '{$data1}',\r\n  '{$data2}', '{$data3}', '{$data4}', '{$data5}', '{$data6}', '{$data7}', '{$data8}', '{$data9}', '{$data10}', '{$data11}',\r\n  '{$data12}', '{$data13}', '{$data14}', '{$data15}', '{$data16}', '{$data17}', '{$data18}', '{$data19}', '{$data20}',\r\n  '{$data21}', '{$data22}', '{$data23}', '{$ScriptName}' )";
    } elseif ($_POST['opp_type'] == "edit") {
        $sql_query = "UPDATE gameobject_template SET ";
        $result = $sql->query("SELECT gameobject_template.`entry`,`type`,`displayId`,IFNULL(" . ($deplang != 0 ? "name_loc{$deplang}" : "NULL") . ",`name`) as name,`faction`,`flags`,`size`,`data0`,`data1`,`data2`,`data3`,`data4`,`data5`,`data6`,`data7`,`data8`,`data9`,`data10`,`data11`,`data12`,`data13`,`data14`,`data15`,`data16`,`data17`,`data18`,`data19`,`data20`,`data21`,`data22`,`data23`,`ScriptName` FROM gameobject_template LEFT JOIN locales_gameobject ON gameobject_template.entry = locales_gameobject.entry WHERE gameobject_template.entry = '{$entry}'");
        if ($go_templ = $sql->fetch_assoc($result)) {
            if ($go_templ['type'] != $type) {
                $sql_query .= "type='{$type}',";
            }
            if ($go_templ['displayId'] != $displayId) {
                $sql_query .= "displayId='{$displayId}',";
            }
            if ($go_templ['name'] != $name) {
                $sql_query .= "name='{$name}',";
            }
            if ($go_templ['faction'] != $faction) {
                $sql_query .= "faction='{$faction}',";
            }
            if ($go_templ['flags'] != $flags) {
                $sql_query .= "flags='{$flags}',";
            }
            if ($go_templ['size'] != $size) {
                $sql_query .= "size='{$size}',";
            }
            if ($go_templ['data0'] != $data0) {
                $sql_query .= "data0='{$data0}',";
            }
            if ($go_templ['data1'] != $data1) {
                $sql_query .= "data1='{$data1}',";
            }
            if ($go_templ['data2'] != $data2) {
                $sql_query .= "data2='{$data2}',";
            }
            if ($go_templ['data3'] != $data3) {
                $sql_query .= "data3='{$data3}',";
            }
            if ($go_templ['data4'] != $data4) {
                $sql_query .= "data4='{$data4}',";
            }
            if ($go_templ['data5'] != $data5) {
                $sql_query .= "data5='{$data5}',";
            }
            if ($go_templ['data6'] != $data6) {
                $sql_query .= "data6='{$data6}',";
            }
            if ($go_templ['data7'] != $data7) {
                $sql_query .= "data7='{$data7}',";
            }
            if ($go_templ['data8'] != $data8) {
                $sql_query .= "data8='{$data8}',";
            }
            if ($go_templ['data9'] != $data9) {
                $sql_query .= "data9='{$data9}',";
            }
            if ($go_templ['data10'] != $data10) {
                $sql_query .= "data10='{$data10}',";
            }
            if ($go_templ['data11'] != $data11) {
                $sql_query .= "data11='{$data11}',";
            }
            if ($go_templ['data12'] != $data12) {
                $sql_query .= "data12='{$data12}',";
            }
            if ($go_templ['data13'] != $data13) {
                $sql_query .= "data13='{$data13}',";
            }
            if ($go_templ['data14'] != $data14) {
                $sql_query .= "data14='{$data14}',";
            }
            if ($go_templ['data15'] != $data15) {
                $sql_query .= "data15='{$data15}',";
            }
            if ($go_templ['data16'] != $data16) {
                $sql_query .= "data16='{$data16}',";
            }
            if ($go_templ['data17'] != $data17) {
                $sql_query .= "data17='{$data17}',";
            }
            if ($go_templ['data18'] != $data18) {
                $sql_query .= "data18='{$data18}',";
            }
            if ($go_templ['data19'] != $data19) {
                $sql_query .= "data19='{$data19}',";
            }
            if ($go_templ['data20'] != $data20) {
                $sql_query .= "data20='{$data20}',";
            }
            if ($go_templ['data21'] != $data21) {
                $sql_query .= "data21='{$data21}',";
            }
            if ($go_templ['data22'] != $data22) {
                $sql_query .= "data22='{$data22}',";
            }
            if ($go_templ['data23'] != $data23) {
                $sql_query .= "data23='{$data23}',";
            }
            if ($go_templ['ScriptName'] != $ScriptName) {
                $sql_query .= "ScriptName='{$ScriptName}',";
            }
            $sql->free_result($result);
            unset($go_templ);
            if ($sql_query == "UPDATE gameobject_template SET " && !$item && !$del_loot_items && !$del_questrelation && !$questrelation && !$del_involvedrelation && !$involvedrelation) {
                $sql->close();
                redirect("game_object.php?action=edit&entry={$entry}&error=6");
            } else {
                if ($sql_query != "UPDATE gameobject_template SET ") {
                    $sql_query[strlen($sql_query) - 1] = " ";
                    $sql_query .= " WHERE entry = '{$entry}';\n";
                } else {
                    $sql_query = "";
                }
            }
            if ($item) {
                $sql_query .= "INSERT INTO gameobject_loot_template (entry, item, ChanceOrQuestChance, `groupid`, mincountOrRef, maxcount, lootcondition, condition_value1, condition_value2)\r\n      VALUES ({$data1},{$item},'{$ChanceOrQuestChance}', '{$groupid}' ,{$mincountOrRef} ,{$maxcount} ,{$lootcondition} ,{$condition_value1} ,{$condition_value2});\n";
            }
            if ($del_loot_items) {
                foreach ($del_loot_items as $item_id) {
                    $sql_query .= "DELETE FROM gameobject_loot_template WHERE entry = {$data1} AND item = {$item_id};\n";
                }
            }
            if ($questrelation) {
                $sql_query .= "INSERT INTO gameobject_questrelation (id, quest) VALUES ({$entry},{$questrelation});\n";
            }
            if ($involvedrelation) {
                $sql_query .= "INSERT INTO gameobject_involvedrelation (id, quest) VALUES ({$entry},{$involvedrelation});\n";
            }
            if ($del_questrelation) {
                foreach ($del_questrelation as $quest_id) {
                    $sql_query .= "DELETE FROM gameobject_questrelation WHERE id = {$entry} AND quest = {$quest_id};\n";
                }
            }
            if ($del_involvedrelation) {
                foreach ($del_involvedrelation as $quest_id) {
                    $sql_query .= "DELETE FROM gameobject_involvedrelation WHERE id = {$entry} AND quest = {$quest_id};\n";
                }
            }
        } else {
            $sql->close();
            redirect("game_object.php?error=5");
        }
    } else {
        $sql->close();
        redirect("game_object.php?error=5");
    }
    if (isset($_POST['backup_op']) && $_POST['backup_op'] == 1) {
        $sql->close();
        Header("Content-type: application/octet-stream");
        Header("Content-Disposition: attachment; filename=goid_{$entry}.sql");
        echo $sql_query;
        exit;
        redirect("game_object.php?action=edit&entry={$entry}&error=4");
    } else {
        $sql_query = explode(';', $sql_query);
        foreach ($sql_query as $tmp_query) {
            if ($tmp_query && $tmp_query != "\n") {
                $result = $sql->query($tmp_query);
            }
        }
        $sql->close();
    }
    if ($result) {
        redirect("game_object.php?action=edit&entry={$entry}&error=4");
    } else {
        redirect("game_object.php");
    }
}
Example #14
0
function general()
{
    global $output, $corem_db, $world_db, $core;
    // we need $core to be set
    if ($core == 0) {
        $core = detectcore();
    }
    $sqlm = new SQL();
    $sqlm->connect($corem_db["addr"], $corem_db["user"], $corem_db["pass"], $corem_db["name"], $corem_db["encoding"]);
    $sqlw = new SQL();
    $sqlw->connect($world_db[1]["addr"], $world_db[1]["user"], $world_db[1]["pass"], $world_db[1]["name"], $world_db[1]["encoding"]);
    $subsection = isset($_GET["subsection"]) ? $sqlm->quote_smart($_GET["subsection"]) : 1;
    $output .= '
        <table id="sidebar">
          <tr>
            <td ' . ($subsection == "more" ? 'class="current"' : '') . '>
              <a href="admin.php?section=general&amp;subsection=more">' . lang("admin", "more") . '</a>
            </td>
          </tr>
          <tr>
            <td ' . ($subsection == "version" ? 'class="current"' : '') . '>
              <a href="admin.php?section=general&amp;subsection=version">' . lang("admin", "version") . '</a>
            </td>
          </tr>
          <tr>
            <td ' . ($subsection == "mail" ? 'class="current"' : '') . '>
              <a href="admin.php?section=general&amp;subsection=mail">' . lang("admin", "mail") . '</a>
            </td>
          </tr>
          <tr>
            <td ' . ($subsection == "irc" ? 'class="current"' : '') . '>
              <a href="admin.php?section=general&amp;subsection=irc">' . lang("admin", "irc") . '</a>
            </td>
          </tr>
          <tr>
            <td ' . ($subsection == "proxy" ? 'class="current"' : '') . '>
              <a href="admin.php?section=general&amp;subsection=proxy">' . lang("admin", "proxy") . '</a>
            </td>
          </tr>
          <tr>
            <td ' . ($subsection == "datasite" ? 'class="current"' : '') . '>
              <a href="admin.php?section=general&amp;subsection=datasite">' . lang("admin", "datasite") . '</a>
            </td>
          </tr>
          <tr>
            <td ' . ($subsection == "acctcreation" ? 'class="current"' : '') . '>
              <a href="admin.php?section=general&amp;subsection=acctcreation">' . lang("admin", "acct_creation") . '</a>
            </td>
          </tr>
          <tr>
            <td ' . ($subsection == "guests" ? 'class="current"' : '') . '>
              <a href="admin.php?section=general&amp;subsection=guests">' . lang("admin", "guests") . '</a>
            </td>
          </tr>
          <tr>
            <td ' . ($subsection == "extratools" ? 'class="current"' : '') . '>
              <a href="admin.php?section=general&amp;subsection=extratools">' . lang("admin", "extra_tools") . '</a>
            </td>
          </tr>
          <tr>
            <td ' . ($subsection == "internalmap" ? 'class="current"' : '') . '>
              <a href="admin.php?section=general&amp;subsection=internalmap">' . lang("admin", "internal_map") . '</a>
            </td>
          </tr>
          <tr>
            <td ' . ($subsection == "validip" ? 'class="current"' : '') . '>
              <a href="admin.php?section=general&amp;subsection=validip">' . lang("admin", "validip") . '</a>
            </td>
          </tr>
          <tr>
            <td ' . ($subsection == "ads" ? 'class="current"' : '') . '>
              <a href="admin.php?section=general&amp;subsection=ads">' . lang("admin", "ads") . '</a>
            </td>
          </tr>
          <tr>
            <td ' . ($subsection == "gmlevels" ? 'class="current"' : '') . '>
              <a href="admin.php?section=general&amp;subsection=gmlevels">' . lang("admin", "gm_levels") . '</a>
            </td>
          </tr>
        </table>';
    if (isset($_GET["error"])) {
        $output .= '
      <div id="misc_error">';
    } else {
        $output .= '
      <div id="misc">';
    }
    $sub_action = isset($_GET["subaction"]) ? $_GET["subaction"] : '';
    switch ($subsection) {
        case "version":
            if (!$sub_action) {
                $show_version_show = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Show_Version_Show'"));
                $show_version_version = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Show_Version_Version'"));
                $show_version_version_lvl = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Show_Version_Version_Lvl'"));
                $show_version_revision = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Show_Version_SVNRev'"));
                $show_version_revision_lvl = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Show_Version_SVNRev_Lvl'"));
                $output .= '
        <form action="admin.php" method="get" id="form">
          <div>
            <input type="hidden" name="section" value="general" />
            <input type="hidden" name="subaction" value="saveversion" />
            <input type="hidden" name="subsection" value="version" />
          </div>
          <table class="simple">
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "show_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "show") . '</a>:
              </td>
              <td>
                <select name="showversion" id="admin_showversion_field">
                  <option value="0" ' . ($show_version_show["Value"] == 0 ? 'selected="selected"' : '') . '>' . lang("admin", "dontshow") . '</option>
                  <option value="1" ' . ($show_version_show["Value"] == 1 ? 'selected="selected"' : '') . 'disabled="disabled">' . lang("admin", "version") . '</option>
                  <option value="2"' . ($show_version_show["Value"] == 2 ? 'selected="selected"' : '') . '>' . lang("admin", "verrev") . '</option>
                </select>
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "version_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "version") . '</a>:
              </td>
              <td>
                <input type="text" name="version" value="' . $show_version_version["Value"] . '" readonly="readonly" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "versionlvl_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "versionlvl") . '</a>:
              </td>
              <td>
                <input type="text" name="versionlvl" value="' . $show_version_version_lvl["Value"] . '" readonly="readonly" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "revision_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "revision") . '</a>:
              </td>
              <td>
                <input type="text" name="revision" value="' . $show_version_revision["Value"] . '" readonly="readonly" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "revisionlvl_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "revisionlvl") . '</a>:
              </td>
              <td>
                <input type="text" name="revisionlvl" value="' . $show_version_revision_lvl["Value"] . '" />
              </td>
            </tr>
          </table>
          <div>
            <input type="submit" name="save" value="' . lang("admin", "save") . '" />
          </div>
        </form>';
            } else {
                $show_version = $sqlm->quote_smart($_GET["showversion"]);
                $version = $sqlm->quote_smart($_GET["version"]);
                $version_lvl = $sqlm->quote_smart($_GET["versionlvl"]);
                $revision = $sqlm->quote_smart($_GET["revision"]);
                $revision_lvl = $sqlm->quote_smart($_GET["revisionlvl"]);
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $show_version . "' WHERE `Key`='Show_Version_Show'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $version . "' WHERE `Key`='Show_Version_Version'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $version_lvl . "' WHERE `Key`='Show_Version_Version_Lvl'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $revision . "' WHERE `Key`='Show_Version_SVNRev'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $revision_lvl . "' WHERE `Key`='Show_Version_SVNRev_Lvl'");
                redirect("admin.php?section=general&subsection=version");
            }
            break;
        case "mail":
            if (!$sub_action) {
                $mail_admin_email = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Mail_Admin_Email'"));
                $mail_mailer_type = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Mail_Mailer_Type'"));
                $mail_from_email = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Mail_From_Email'"));
                $mail_gmailsender = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Mail_GMailSender'"));
                $format_mail_html = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Format_Mail_HTML'"));
                $smtp_host = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='SMTP_Host'"));
                $smtp_port = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='SMTP_Port'"));
                $smtp_user = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='SMTP_User'"));
                $smtp_pass = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='SMTP_Pass'"));
                $pm_from_char = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='PM_From_Char'"));
                $pm_stationary = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='PM_Stationary'"));
                $url_path = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='URL_Path'"));
                $output .= '
        <form action="admin.php" method="get" id="form">
          <div>
            <input type="hidden" name="section" value="general" />
            <input type="hidden" name="subaction" value="savemail" />
            <input type="hidden" name="subsection" value="mail" />
          </div>
          <table class="simple">
            <tr>
              <td colspan="2"><b>' . lang("admin", "email") . '</b></td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "adminemail_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "adminemail") . '</a>:
              </td>
              <td>
                <input type="text" name="adminemail" value="' . $mail_admin_email["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "mailertype_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "mailertype") . '</a>:
              </td>
              <td>
                <select name="mailertype" id="admin_mailertype_field">
                  <option value="mail" ' . ($mail_mailer_type["Value"] == "mail" ? 'selected="selected" ' : '') . '>' . lang("admin", "mail") . '</option>
                  <option value="sendmail" ' . ($mail_mailer_type["Value"] == "sendmail" ? 'selected="selected" ' : '') . '>' . lang("admin", "sendmail") . '</option>
                  <option value="smtp"' . ($mail_mailer_type["Value"] == "smtp" ? 'selected="selected" ' : '') . '>' . lang("admin", "smtp") . '</option>
                  <option value="gmailsmtp"' . ($mail_gmailsender["Value"] == 1 ? 'selected="selected" ' : '') . '>' . lang("admin", "gmailsmtp") . '</option>
                </select>
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "fromemail_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "fromemail") . '</a>:
              </td>
              <td>
                <input type="text" name="fromemail" value="' . $mail_from_email["Value"] . '" />
              </td>
            </tr>
            <!-- tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "usegmail_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "usegmail") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="gmail" ' . ($mail_gmailsender["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr -->
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "formathtml_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "formathtml") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="usehtml" ' . ($format_mail_html["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "urlpath_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "urlpath") . '</a>:
              </td>
              <td>
                <input type="text" name="urlpath" value="' . $url_path["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td colspan="2">
                <b>' . lang("admin", "smtp") . '</b>
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "smtphost_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "smtphost") . '</a>:
              </td>
              <td>
                <input type="text" name="smtphost" value="' . $smtp_host["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "smtpport_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "smtpport") . '</a>:
              </td>
              <td>
                <input type="text" name="smtpport" value="' . $smtp_port["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "smtpuser_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "smtpuser") . '</a>:
              </td>
              <td>
                <input type="text" name="smtpuser" value="' . $smtp_user["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "smtppass_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "smtppass") . '</a>:
              </td>
              <td>
                <input type="text" name="smtppass" value="' . $smtp_pass["Value"] . '" />
              </td>
            </tr>';
                if ($core == 1) {
                    $output .= '
            <tr>
              <td colspan="2">
                <b>' . lang("admin", "pm") . '</b>
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "pmfrom_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "pmfrom") . '</a>:
              </td>
              <td>
                <input type="text" name="fromchar" value="' . $pm_from_char["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "pmstation_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "pmstation") . '</a>:
              </td>
              <td>
                <input type="text" name="stationary" value="' . $pm_stationary["Value"] . '" />
              </td>
            </tr>';
                }
                $output .= '
          </table>
          <div>
            <input type="submit" name="save" value="' . lang("admin", "save") . '" />
          </div>
        </form>';
            } else {
                $mail_admin_email = $sqlm->quote_smart($_GET["adminemail"]);
                $mail_mailer_type = $sqlm->quote_smart($_GET["mailertype"]);
                $mail_from_email = $sqlm->quote_smart($_GET["fromemail"]);
                if ($mail_mailer_type == "gmailsmtp") {
                    $mail_gmailsender = 1;
                } else {
                    $mail_gmailsender = 0;
                }
                $format_mail_html = isset($_GET["usehtml"]) ? 1 : 0;
                $smtp_host = $sqlm->quote_smart($_GET["smtphost"]);
                $smtp_port = $sqlm->quote_smart($_GET["smtpport"]);
                $smtp_user = $sqlm->quote_smart($_GET["smtpuser"]);
                $smtp_pass = $sqlm->quote_smart($_GET["smtppass"]);
                $pm_from_char = isset($_GET["fromchar"]) ? $sqlm->quote_smart($_GET["fromchar"]) : 1;
                $pm_stationary = isset($_GET["stationary"]) ? $sqlm->quote_smart($_GET["stationary"]) : 41;
                $url_path = $sqlm->quote_smart($_GET["urlpath"]);
                // clean up $url_path in case user can't read
                if ($url_path != "" && $url_path[0] != "/") {
                    $url_path = "/" . $url_path;
                }
                if ($url_path == "/") {
                    $url_path = "";
                }
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $mail_admin_email . "' WHERE `Key`='Mail_Admin_Email'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $mail_mailer_type . "' WHERE `Key`='Mail_Mailer_Type'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $mail_from_email . "' WHERE `Key`='Mail_From_Email'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $mail_gmailsender . "' WHERE `Key`='Mail_GMailSender'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $format_mail_html . "' WHERE `Key`='Format_Mail_HTML'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $smtp_host . "' WHERE `Key`='SMTP_Host'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $smtp_port . "' WHERE `Key`='SMTP_Port'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $smtp_user . "' WHERE `Key`='SMTP_User'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $smtp_pass . "' WHERE `Key`='SMTP_Pass'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $pm_from_char . "' WHERE `Key`='PM_From_Char'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $pm_stationary . "' WHERE `Key`='PM_Stationary'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $url_path . "' WHERE `Key`='URL_Path'");
                redirect("admin.php?section=general&subsection=mail");
            }
            break;
        case "irc":
            if (!$sub_action) {
                $irc_host = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='IRC_Server'"));
                $irc_port = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='IRC_Port'"));
                $irc_channel = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='IRC_Channel'"));
                $irc_helppage = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='IRC_HelpPage'"));
                $output .= '
        <form action="admin.php" method="get" id="form">
          <div>
            <input type="hidden" name="section" value="general" />
            <input type="hidden" name="subaction" value="saveirc" />
            <input type="hidden" name="subsection" value="irc" />
          </div>
          <table class="simple">
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "irchost_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "irchost") . '</a>:
              </td>
              <td>
                <input type="text" name="irchost" value="' . $irc_host["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "ircport_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "ircport") . '</a>:
              </td>
              <td>
                <input type="text" name="ircport" value="' . $irc_port["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "ircchannel_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "ircchannel") . '</a>:
              </td>
              <td>
                <input type="text" name="ircchannel" value="' . $irc_channel["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "irchelppage_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "irchelppage") . '</a>:
              </td>
              <td>
                <input type="text" name="irchelppage" value="' . $irc_helppage["Value"] . '" readonly="readonly" />
              </td>
            </tr>
          </table>
          <div>
            <input type="submit" name="save" value="' . lang("admin", "save") . '" />
          </div>
        </form>';
            } else {
                $irc_host = $sqlm->quote_smart($_GET["irchost"]);
                $irc_port = $sqlm->quote_smart($_GET["ircport"]);
                $irc_channel = $sqlm->quote_smart($_GET["ircchannel"]);
                $irc_helppage = $sqlm->quote_smart($_GET["irchelppage"]);
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $irc_host . "' WHERE `Key`='IRC_Server'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $irc_port . "' WHERE `Key`='IRC_Port'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $irc_channel . "' WHERE `Key`='IRC_Channel'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $irc_helppage . "' WHERE `Key`='IRC_HelpPage'");
                redirect("admin.php?section=general&subsection=irc");
            }
            break;
        case "proxy":
            if (!$sub_action) {
                $proxy_host = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Proxy_Addr'"));
                $proxy_port = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Proxy_Port'"));
                $proxy_user = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Proxy_User'"));
                $proxy_pass = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Proxy_Pass'"));
                $output .= '
        <form action="admin.php" method="get" id="form">
          <div>
            <input type="hidden" name="section" value="general" />
            <input type="hidden" name="subaction" value="saveproxy" />
            <input type="hidden" name="subsection" value="proxy" />
          </div>
          <table class="simple">
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "proxyhost_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "proxyhost") . '</a>:
              </td>
              <td>
                <input type="text" name="proxyhost" value="' . $proxy_host["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "proxyport_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "proxyport") . '</a>:
              </td>
              <td>
                <input type="text" name="proxyport" value="' . $proxy_port["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "proxyuser_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "proxyuser") . '</a>:
              </td>
              <td>
                <input type="text" name="proxyuser" value="' . $proxy_user["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "proxypass_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "proxypass") . '</a>:
              </td>
              <td>
                <input type="text" name="proxypass" value="' . $proxy_pass["Value"] . '" />
              </td>
            </tr>
          </table>
          <div>
            <input type="submit" name="save" value="' . lang("admin", "save") . '" />
          </div>
        </form>';
            } else {
                $proxy_host = $sqlm->quote_smart($_GET["proxyhost"]);
                $proxy_port = $sqlm->quote_smart($_GET["proxyport"]);
                $proxy_user = $sqlm->quote_smart($_GET["proxyuser"]);
                $proxy_pass = $sqlm->quote_smart($_GET["proxypass"]);
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $proxy_host . "' WHERE `Key`='Proxy_Addr'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $proxy_port . "' WHERE `Key`='Proxy_Port'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $proxy_user . "' WHERE `Key`='Proxy_User'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $proxy_pass . "' WHERE `Key`='Proxy_Pass'");
                redirect("admin.php?section=general&subsection=proxy");
            }
            break;
        case "datasite":
            if (!$sub_action) {
                $datasite_tooltip_script_src = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Tooltip_Script_Src'"));
                $datasite_base = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Datasite_Base'"));
                $datasite_name = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Datasite_Name'"));
                $datasite_item = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Datasite_Item'"));
                $datasite_quest = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Datasite_Quest'"));
                $datasite_creature = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Datasite_Creature'"));
                $datasite_spell = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Datasite_Spell'"));
                $datasite_skill = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Datasite_Skill'"));
                $datasite_go = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Datasite_GO'"));
                $datasite_achieve = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Datasite_Achievement'"));
                $output .= '
        <form action="admin.php" method="get" id="form">
          <div>
            <input type="hidden" name="section" value="general" />
            <input type="hidden" name="subaction" value="savedatasite" />
            <input type="hidden" name="subsection" value="datasite" />
          </div>
          <table class="simple" id="admin_datasite">
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "datasitetooltipscriptsrc_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "datasitetooltipscriptsrc") . '</a>:
              </td>
              <td>
                <input type="text" name="datasitetooltipscriptsrc" value="' . $datasite_tooltip_script_src["Value"] . '" size="50" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "datasitebase_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "datasitebase") . '</a>:
              </td>
              <td>
                <input type="text" name="datasitebase" value="' . $datasite_base["Value"] . '" size="50" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "datasitename_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "datasitename") . '</a>:
              </td>
              <td>
                <input type="text" name="datasitename" value="' . $datasite_name["Value"] . '" size="50" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "datasiteitem_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "datasiteitem") . '</a>:
              </td>
              <td>
                <input type="text" name="datasiteitem" value="' . $datasite_item["Value"] . '" size="50" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "datasitequest_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "datasitequest") . '</a>:
              </td>
              <td>
                <input type="text" name="datasitequest" value="' . $datasite_quest["Value"] . '" size="50" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "datasitecreature_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "datasitecreature") . '</a>:
              </td>
              <td>
                <input type="text" name="datasitecreature" value="' . $datasite_creature["Value"] . '" size="50" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "datasitespell_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "datasitespell") . '</a>:
              </td>
              <td>
                <input type="text" name="datasitespell" value="' . $datasite_spell["Value"] . '" size="50" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "datasiteskill_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "datasiteskill") . '</a>:
              </td>
              <td>
                <input type="text" name="datasiteskill" value="' . $datasite_skill["Value"] . '" size="50" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "datasitego_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "datasitego") . '</a>:
              </td>
              <td>
                <input type="text" name="datasitego" value="' . $datasite_go["Value"] . '" size="50" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "datasiteachieve_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "datasiteachieve") . '</a>:
              </td>
              <td>
                <input type="text" name="datasiteachieve" value="' . $datasite_achieve["Value"] . '" size="50" />
              </td>
            </tr>
          </table>
          <div>
            <input type="submit" name="save" value="' . lang("admin", "save") . '" />
          </div>
        </form>';
            } else {
                $datasite_tooltip_script_src = $sqlm->quote_smart($_GET["datasitetooltipscriptsrc"]);
                $datasite_base = $sqlm->quote_smart($_GET["datasitebase"]);
                $datasite_name = $sqlm->quote_smart($_GET["datasitename"]);
                $datasite_item = $sqlm->quote_smart($_GET["datasiteitem"]);
                $datasite_quest = $sqlm->quote_smart($_GET["datasitequest"]);
                $datasite_creature = $sqlm->quote_smart($_GET["datasitecreature"]);
                $datasite_spell = $sqlm->quote_smart($_GET["datasitespell"]);
                $datasite_skill = $sqlm->quote_smart($_GET["datasiteskill"]);
                $datasite_go = $sqlm->quote_smart($_GET["datasitego"]);
                $datasite_achieve = $sqlm->quote_smart($_GET["datasiteachieve"]);
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $datasite_tooltip_script_src . "' WHERE `Key`='Tooltip_Script_Src'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $datasite_base . "' WHERE `Key`='Datasite_Base'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $datasite_name . "' WHERE `Key`='Datasite_Name'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $datasite_item . "' WHERE `Key`='Datasite_Item'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $datasite_quest . "' WHERE `Key`='Datasite_Quest'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $datasite_creature . "' WHERE `Key`='Datasite_Creature'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $datasite_spell . "' WHERE `Key`='Datasite_Spell'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $datasite_skill . "' WHERE `Key`='Datasite_Skill'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $datasite_go . "' WHERE `Key`='Datasite_GO'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $datasite_achieve . "' WHERE `Key`='Datasite_Achievement'");
                redirect("admin.php?section=general&subsection=datasite");
            }
            break;
        case "acctcreation":
            if (!$sub_action) {
                $disable_acc_creation = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Disable_Acc_Creation'"));
                $invite_only = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Invitation_Only'"));
                $disable_reg_invite = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Disable_Invitation'"));
                $expansion_select = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Expansion_Select'"));
                $default_expansion = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Default_Expansion'"));
                $enabled_captcha = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Enabled_Captcha'"));
                $using_recaptcha = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Use_Recaptcha'"));
                $publickey = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Recaptcha_Public_Key'"));
                $privatekey = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Recaptcha_Private_Key'"));
                $send_mail_on_creation = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Send_Mail_On_Creation'"));
                $send_confirmation_mail_on_creation = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Send_Confirmation_Mail_On_Creation'"));
                $validate_mail_host = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Validate_Mail_Host'"));
                $limit_acc_per_ip = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Limit_Acc_Per_IP'"));
                $output .= '
        <form action="admin.php" method="get" id="form">
          <div>
            <input type="hidden" name="section" value="general" />
            <input type="hidden" name="subaction" value="saveacctcreation" />
            <input type="hidden" name="subsection" value="acctcreation" />
          </div>
          <table class="simple" id="admin_acct_creation">
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "disableacccreation_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "disableacccreation") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="disableacccreation" ' . ($disable_acc_creation["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "inviteonly_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "inviteonly") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="inviteonly" ' . ($invite_only["Value"] == 1 ? 'checked="checked"' : '') . ' ' . ($disable_acc_creation["Value"] == 1 ? '' : 'disabled="disabled"') . ' />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "disablereginvite_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "disablereginvite") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="disablereginvite" ' . ($disable_reg_invite["Value"] == 1 ? 'checked="checked"' : '') . ' ' . ($invite_only["Value"] == 0 ? '' : 'disabled="disabled"') . ' />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "expansionselect_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "expansionselect") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="expansionselect" ' . ($expansion_select["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "defaultexpansion_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "defaultexpansion") . '</a>:
              </td>
              <td>
                <select name="defaultexpansion">';
                if ($core == 1) {
                    $output .= '
                  <option value="0" ' . ($default_expansion["Value"] == 0 ? 'selected="selected"' : '') . '>Classic</option>
                  <option value="8" ' . ($default_expansion["Value"] == 8 ? 'selected="selected"' : '') . '>BC</option>
                  <option value="16" ' . ($default_expansion["Value"] == 16 ? 'selected="selected"' : '') . '>WotLK</option>
                  <option value="24" ' . ($default_expansion["Value"] == 24 ? 'selected="selected"' : '') . '>WotLK+BC</option>';
                } else {
                    $output .= '
                  <option value="0" ' . ($default_expansion["Value"] == 0 ? 'selected="selected"' : '') . '>Classic</option>
                  <option value="1" ' . ($default_expansion["Value"] == 1 ? 'selected="selected"' : '') . '>BC</option>
                  <option value="2" ' . ($default_expansion["Value"] == 2 ? 'selected="selected"' : '') . '>WotLK+BC</option>';
                }
                $output .= '
                </select>
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "enabledcaptcha_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "enabledcaptcha") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="enabledcaptcha" ' . ($enabled_captcha["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "userecaptcha_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "userecaptcha") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="userecaptcha" ' . ($using_recaptcha["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "publickey_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "publickey") . '</a>:
              </td>
              <td>
                <input type="text" name="publickey" value="' . $publickey["Value"] . '" size="52" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "privatekey_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "privatekey") . '</a>:
              </td>
              <td>
                <input type="text" name="privatekey" value="' . $privatekey["Value"] . '" size="52" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "sendmailoncreation_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "sendmailoncreation") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="sendmailoncreation" ' . ($send_mail_on_creation["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "sendconfirmmailoncreation_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "sendconfirmmailoncreation") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="sendconfirmmailoncreation" ' . ($send_confirmation_mail_on_creation["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "validatemailhost_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "validatemailhost") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="validatemailhost" ' . ($validate_mail_host["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "limitaccperip_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "limitaccperip") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="limitaccperip" ' . ($limit_acc_per_ip["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
          </table>
          <div>
            <input type="submit" name="save" value="' . lang("admin", "save") . '" />
          </div>
        </form>';
            } else {
                $disable_acc_creation = isset($_GET["disableacccreation"]) ? 1 : 0;
                $invite_only = isset($_GET["inviteonly"]) ? 1 : 0;
                $disable_reg_invite = isset($_GET["disablereginvite"]) ? 1 : 0;
                $expansion_select = isset($_GET["expansionselect"]) ? 1 : 0;
                $default_expansion = $sqlm->quote_smart($_GET["defaultexpansion"]);
                $enabled_captcha = isset($_GET["enabledcaptcha"]) ? 1 : 0;
                $using_recaptcha = isset($_GET["userecaptcha"]) ? 1 : 0;
                $publickey = $sqlm->quote_smart($_GET["publickey"]);
                $privatekey = $sqlm->quote_smart($_GET["privatekey"]);
                $send_mail_on_creation = isset($_GET["sendmailoncreation"]) ? 1 : 0;
                $send_confirmation_mail_on_creation = isset($_GET["sendconfirmmailoncreation"]) ? 1 : 0;
                $validate_mail_host = isset($_GET["validatemailhost"]) ? 1 : 0;
                $limit_acc_per_ip = isset($_GET["limitaccperip"]) ? 1 : 0;
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $disable_acc_creation . "' WHERE `Key`='Disable_Acc_Creation'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $invite_only . "' WHERE `Key`='Invitation_Only'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $disable_reg_invite . "' WHERE `Key`='Disable_Invitation'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $expansion_select . "' WHERE `Key`='Expansion_Select'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $default_expansion . "' WHERE `Key`='Default_Expansion'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $enabled_captcha . "' WHERE `Key`='Enabled_Captcha'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $using_recaptcha . "' WHERE `Key`='Use_Recaptcha'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $publickey . "' WHERE `Key`='Recaptcha_Public_Key'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $privatekey . "' WHERE `Key`='Recaptcha_Private_Key'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $send_mail_on_creation . "' WHERE `Key`='Send_Mail_On_Creation'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $send_confirmation_mail_on_creation . "' WHERE `Key`='Send_Confirmation_Mail_On_Creation'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $validate_mail_host . "' WHERE `Key`='Validate_Mail_Host'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $limit_acc_per_ip . "' WHERE `Key`='Limit_Acc_Per_IP'");
                redirect("admin.php?section=general&subsection=acctcreation");
            }
            break;
        case "guests":
            if (!$sub_action) {
                $acp_allow_anony = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Allow_Anony'"));
                $acp_anony_name = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Anony_Name'"));
                $acp_anony_realm_id = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Anony_Realm_ID'"));
                $output .= '
        <form action="admin.php" method="get" id="form">
          <div>
            <input type="hidden" name="section" value="general" />
            <input type="hidden" name="subaction" value="saveguests" />
            <input type="hidden" name="subsection" value="guests" />
          </div>
          <table class="simple">
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "allowanony_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "allowanony") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="allowanony" ' . ($acp_allow_anony["Value"] == 1 ? 'checked="checked"' : '') . ' disabled="disabled" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "anonyname_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "anonyname") . '</a>:
              </td>
              <td>
                <input type="text" name="anonyname" value="' . $acp_anony_name["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "anonyrealmid_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "anonyrealmid") . '</a>:
              </td>
              <td>
                <input type="text" name="anonyrealmid" value="' . $acp_anony_realm_id["Value"] . '" />
              </td>
            </tr>
          </table>
          <div>
            <input type="submit" name="save" value="' . lang("admin", "save") . '" />
          </div>
        </form>';
            } else {
                // Allow Anonymous is disabled but must stay checked
                $acp_allow_anony = 1;
                $acp_anony_name = $sqlm->quote_smart($_GET["anonyname"]);
                $acp_anony_realm_id = $sqlm->quote_smart($_GET["anonyrealmid"]);
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $acp_allow_anony . "' WHERE `Key`='Allow_Anony'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $acp_anony_name . "' WHERE `Key`='Anony_Name'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $acp_anony_realm_id . "' WHERE `Key`='Anony_Realm_ID'");
                redirect("admin.php?section=general&subsection=guests");
            }
            break;
        case "extratools":
            if (!$sub_action) {
                if (isset($_GET["newdisable"])) {
                    $query = "INSERT IGNORE INTO ultravendor_disables VALUE ('" . $_GET["newdisable"] . "')";
                    $result = $sqlm->query($query);
                }
                if (isset($_GET["delete"])) {
                    $query = "DELETE FROM ultravendor_disables WHERE itemid='" . $_GET["delete"] . "'";
                    $result = $sqlm->query($query);
                }
                $quest_item_vendor_level_mul = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Quest_Item_Vendor_Level_Mul'"));
                $quest_item_vendor_rew_mul = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Quest_Item_Vendor_Rew_Mul'"));
                $ultra_vendor_mult_0 = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Ultra_Vendor_Mult_0'"));
                $ultra_vendor_mult_1 = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Ultra_Vendor_Mult_1'"));
                $ultra_vendor_mult_2 = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Ultra_Vendor_Mult_2'"));
                $ultra_vendor_mult_3 = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Ultra_Vendor_Mult_3'"));
                $ultra_vendor_mult_4 = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Ultra_Vendor_Mult_4'"));
                $ultra_vendor_mult_5 = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Ultra_Vendor_Mult_5'"));
                $ultra_vendor_mult_6 = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Ultra_Vendor_Mult_6'"));
                $ultra_vendor_mult_7 = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Ultra_Vendor_Mult_7'"));
                $ultra_vendor_base = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Ultra_Vendor_Base'"));
                $ultra_vendor_max_item_level = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Ultra_Vendor_Max_Item_Level'"));
                $ultra_vendor_max_item_req_level = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Ultra_Vendor_Max_Item_Req_Level'"));
                $dis_query = "SELECT * FROM ultravendor_disables";
                $dis_result = $sqlm->query($dis_query);
                $output .= '
        <form action="admin.php" method="get" id="form">
          <div>
            <input type="hidden" name="section" value="general" />
            <input type="hidden" name="subaction" value="saveextratools" />
            <input type="hidden" name="subsection" value="extratools" />
          </div>
          <table class="simple">
            <tr>
              <td colspan="2">
                <b>' . lang("admin", "questitemvendor") . '</b>
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "questitemvendorlevelmul_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "questitemvendorlevelmul") . '</a>:
              </td>
              <td>
                <input type="text" name="questitemvendorlevelmul" value="' . $quest_item_vendor_level_mul["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "questitemvendorrewmul_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "questitemvendorrewmul") . '</a>:
              </td>
              <td>
                <input type="text" name="questitemvendorrewmul" value="' . $quest_item_vendor_rew_mul["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td colspan="2">
                <b>' . lang("admin", "ultravendor") . '</b>
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "ultravendormult0_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "ultravendormult0") . '</a>:
              </td>
              <td>
                <input type="text" name="ultravendormult0" value="' . $ultra_vendor_mult_0["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "ultravendormult1_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "ultravendormult1") . '</a>:
              </td>
              <td>
                <input type="text" name="ultravendormult1" value="' . $ultra_vendor_mult_1["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "ultravendormult2_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "ultravendormult2") . '</a>:
              </td>
              <td>
                <input type="text" name="ultravendormult2" value="' . $ultra_vendor_mult_2["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "ultravendormult3_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "ultravendormult3") . '</a>:
              </td>
              <td>
                <input type="text" name="ultravendormult3" value="' . $ultra_vendor_mult_3["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "ultravendormult4_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "ultravendormult4") . '</a>:
              </td>
              <td>
                <input type="text" name="ultravendormult4" value="' . $ultra_vendor_mult_4["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "ultravendormult5_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "ultravendormult5") . '</a>:
              </td>
              <td>
                <input type="text" name="ultravendormult5" value="' . $ultra_vendor_mult_5["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "ultravendormult6_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "ultravendormult6") . '</a>:
              </td>
              <td>
                <input type="text" name="ultravendormult6" value="' . $ultra_vendor_mult_6["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "ultravendormult7_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "ultravendormult7") . '</a>:
              </td>
              <td>
                <input type="text" name="ultravendormult7" value="' . $ultra_vendor_mult_7["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "ultravendorbase_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "ultravendorbase") . '</a>:
              </td>
              <td>
                <input type="text" name="ultravendorbase" value="' . $ultra_vendor_base["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "ultravendormaxitemlevel_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "ultravendormaxitemlevel") . '</a>:
              </td>
              <td>
                <input type="text" name="ultravendormaxitemlevel" value="' . $ultra_vendor_max_item_level["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "ultravendormaxitemreqlevel_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "ultravendormaxitemreqlevel") . '</a>:
              </td>
              <td>
                <input type="text" name="ultravendormaxitemreqlevel" value="' . $ultra_vendor_max_item_req_level["Value"] . '" />
              </td>
            </tr>
          </table>
          <div>
            <input type="submit" name="save" value="' . lang("admin", "save") . '" />
          </div>
        </form>
        <br />
        <div>
          <span>' . lang("admin", "disabledinfo") . ':</span>
          <table class="simple">
            <tr>
              <th class="disabled_remove_item_th">&nbsp;</th>
              <th class="disabled_item_th">' . lang("admin", "disableditem") . '</th>
              <th>&nbsp;</th>
            </tr>';
                while ($row = $sqlm->fetch_assoc($dis_result)) {
                    if ($core == 1) {
                        $item_query = "SELECT name1, name FROM items\r\n                             LEFT JOIN itemnames ON itemnames.entry=items.entry\r\n                           WHERE entry='" . $row["itemid"] . "'";
                    } else {
                        $item_query = "SELECT 0 AS name1, name FROM item_template\r\n                           WHERE entry='" . $row["itemid"] . "'";
                    }
                    $item_result = $sqlw->query($item_query);
                    $item_result = $sqlw->fetch_assoc($item_result);
                    // Trinity and MaNGOS will always follow the else
                    // (at least until we add locales_item support here)
                    if ($item_result["name1"] != 0) {
                        $item_name = $item_result["name1"];
                    } else {
                        $item_name = $item_result["name"];
                    }
                    $output .= '
            <tr>
              <td class="disabled_item_id_td">
                <a href="admin.php?section=general&subsection=extratools&delete=' . $row["itemid"] . '">
                  <img src="img/aff_cross.png" alt="" />
                </a>
              </td>
              <td class="disabled_item_id_td">' . $row["itemid"] . '</td>
              <td>' . $item_name . '</td>
            </tr>';
                }
                $output .= '
            <tr>
              <td colspan="2">
                <a id="link" href="#" onclick="admin_extratools_disable()">
                  <img src="img/add.png" alt="" />
                  <span>' . lang("admin", "disabledadd") . ':</span>
                </a>
              </td>
              <td>
                <input type="text" id="new_dis" />
              </td>
            </tr>
          </table>
        </div>';
            } else {
                $quest_item_vendor_level_mul = $sqlm->quote_smart($_GET["questitemvendorlevelmul"]);
                $quest_item_vendor_rew_mul = $sqlm->quote_smart($_GET["questitemvendorrewmul"]);
                $ultra_vendor_mult_0 = $sqlm->quote_smart($_GET["ultravendormult0"]);
                $ultra_vendor_mult_1 = $sqlm->quote_smart($_GET["ultravendormult1"]);
                $ultra_vendor_mult_2 = $sqlm->quote_smart($_GET["ultravendormult2"]);
                $ultra_vendor_mult_3 = $sqlm->quote_smart($_GET["ultravendormult3"]);
                $ultra_vendor_mult_4 = $sqlm->quote_smart($_GET["ultravendormult4"]);
                $ultra_vendor_mult_5 = $sqlm->quote_smart($_GET["ultravendormult5"]);
                $ultra_vendor_mult_6 = $sqlm->quote_smart($_GET["ultravendormult6"]);
                $ultra_vendor_mult_7 = $sqlm->quote_smart($_GET["ultravendormult7"]);
                $ultra_vendor_base = $sqlm->quote_smart($_GET["ultravendorbase"]);
                $ultra_vendor_max_item_level = $sqlm->quote_smart($_GET["ultravendormaxitemlevel"]);
                $ultra_vendor_max_item_req_level = $sqlm->quote_smart($_GET["ultravendormaxitemreqlevel"]);
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $quest_item_vendor_level_mul . "' WHERE `Key`='Quest_Item_Vendor_Level_Mul'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $quest_item_vendor_rew_mul . "' WHERE `Key`='Quest_Item_Vendor_Rew_Mul'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $ultra_vendor_mult_0 . "' WHERE `Key`='Ultra_Vendor_Mult_0'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $ultra_vendor_mult_1 . "' WHERE `Key`='Ultra_Vendor_Mult_1'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $ultra_vendor_mult_2 . "' WHERE `Key`='Ultra_Vendor_Mult_2'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $ultra_vendor_mult_3 . "' WHERE `Key`='Ultra_Vendor_Mult_3'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $ultra_vendor_mult_4 . "' WHERE `Key`='Ultra_Vendor_Mult_4'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $ultra_vendor_mult_5 . "' WHERE `Key`='Ultra_Vendor_Mult_5'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $ultra_vendor_mult_6 . "' WHERE `Key`='Ultra_Vendor_Mult_6'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $ultra_vendor_mult_7 . "' WHERE `Key`='Ultra_Vendor_Mult_7'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $ultra_vendor_base . "' WHERE `Key`='Ultra_Vendor_Base'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $ultra_vendor_max_item_level . "' WHERE `Key`='Ultra_Vendor_Max_Item_Level'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $ultra_vendor_max_item_req_level . "' WHERE `Key`='Ultra_Vendor_Max_Item_Req_Level'");
                redirect("admin.php?section=general&subsection=extratools");
            }
            break;
        case "internalmap":
            if (!$sub_action) {
                $map_gm_show_online_only_gmoff = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Map_GM_Show_Online_Only_GMOff'"));
                $map_gm_show_online_only_gmvisible = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Map_GM_Show_Online_Only_GMVisible'"));
                $map_gm_add_suffix = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Map_GM_Add_Suffix'"));
                $map_status_gm_include_all = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Map_Status_GM_Include_All'"));
                $map_show_status = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Map_Show_Status'"));
                $map_show_timer = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Map_Show_Timer'"));
                $map_timer = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Map_Timer'"));
                $map_show_online = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Map_Show_Online'"));
                $map_time_to_show_uptime = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Map_Time_To_Show_Uptime'"));
                $map_time_to_show_maxonline = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Map_Time_To_Show_MaxOnline'"));
                $map_time_to_show_gmonline = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Map_Time_To_Show_GMOnline'"));
                $output .= '
        <form action="admin.php" method="get" id="form">
          <div>
            <input type="hidden" name="section" value="general" />
            <input type="hidden" name="subaction" value="saveinternalmap" />
            <input type="hidden" name="subsection" value="internalmap" />
          </div>
          <table class="simple">
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "statusgmincludeall_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "statusgmincludeall") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="statusgmincludeall" ' . ($map_status_gm_include_all["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
            <!-- tr>
              <td class="help"><a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "gmshowonlineonlygmoff_tip") . '\',\'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "gmshowonlineonlygmoff") . '</a>: </td>
              <td><input type="checkbox" name="gmshowonlineonlygmoff" ' . ($map_gm_show_online_only_gmoff["Value"] == 1 ? 'checked="checked"' : '') . ' /></td>
            </tr>
            <tr>
              <td class="help"><a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "gmshowonlineonlygmvisible_tip") . '\',\'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "gmshowonlineonlygmvisible") . '</a>: </td>
              <td><input type="checkbox" name="gmshowonlineonlygmvisible" ' . ($map_gm_show_online_only_gmvisible["Value"] == 1 ? 'checked="checked"' : '') . ' disabled="disabled" /></td>
            </tr -->
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "gmaddsuffix_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "gmaddsuffix") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="gmaddsuffix" ' . ($map_gm_add_suffix["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
          </table>
          <div>
            <input type="submit" name="save" value="' . lang("admin", "save") . '" />
          </div>
        </form>';
            } else {
                $map_gm_show_online_only_gmoff = isset($_GET["gmshowonlineonlygmoff"]) ? 1 : 0;
                $map_gm_show_online_only_gmvisible = isset($_GET["gmshowonlineonlygmvisible"]) ? 1 : 0;
                $map_gm_add_suffix = isset($_GET["gmaddsuffix"]) ? 1 : 0;
                $map_status_gm_include_all = isset($_GET["statusgmincludeall"]) ? 1 : 0;
                $map_show_status = isset($_GET["showstatus"]) ? 1 : 0;
                $map_show_timer = isset($_GET["showtimer"]) ? 1 : 0;
                $map_timer = $sqlm->quote_smart($_GET["timer"]);
                $map_show_online = isset($_GET["showonline"]) ? 1 : 0;
                $map_time_to_show_uptime = $sqlm->quote_smart($_GET["timetoshowuptime"]);
                $map_time_to_show_maxonline = $sqlm->quote_smart($_GET["timetoshowmaxonline"]);
                $map_time_to_show_gmonline = $sqlm->quote_smart($_GET["timetoshowgmonline"]);
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $map_gm_show_online_only_gmoff . "' WHERE `Key`='Map_GM_Show_Online_Only_GMOff'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $map_gm_show_online_only_gmvisible . "' WHERE `Key`='Map_GM_Show_Online_Only_GMVisible'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $map_gm_add_suffix . "' WHERE `Key`='Map_GM_Add_Suffix'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $map_status_gm_include_all . "' WHERE `Key`='Map_Status_GM_Include_All'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $map_show_status . "' WHERE `Key`='Map_Show_Status'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $map_gm_add_suffix . "' WHERE `Key`='Map_Show_Timer'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $map_timer . "' WHERE `Key`='Map_Timer'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $map_show_online . "' WHERE `Key`='Map_Show_Online'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $map_time_to_show_uptime . "' WHERE `Key`='Map_Time_To_Show_Uptime'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $map_time_to_show_maxonline . "' WHERE `Key`='Map_Time_To_Show_MaxOnline'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $map_time_to_show_gmonline . "' WHERE `Key`='Map_Time_To_Show_GMOnline'");
                redirect("admin.php?section=general&subsection=internalmap");
            }
            break;
        case "validip":
            if (!$sub_action) {
                $masks_query = $sqlm->query("SELECT * FROM config_valid_ip_mask");
                $output .= '
        <form action="admin.php" method="get" id="form">
          <div>
            <input type="hidden" name="section" value="general" />
            <input type="hidden" name="subaction" value="editvalidip" />
            <input type="hidden" name="subsection" value="validip" />
          </div>
          <table class="simple">
            <tr>
              <th style="width: 10%;">&nbsp;</th>
              <th style="width: 20%;">
                <span style="text-align: center;">' . lang("admin", "index") . '</span>
              </th>
              <th>' . lang("admin", "validipmask") . '</th>
            </tr>';
                while ($mask = $sqlm->fetch_assoc($masks_query)) {
                    $output .= '
            <tr>
              <td>
                <input type="radio" name="index" value="' . $mask["Index"] . '" />
              </td>
              <td>
                <center>' . $mask["Index"] . '</center>
              </td>
              <td>' . $mask["ValidIPMask"] . '</td>
            </tr>';
                }
                $output .= '
          </table>
          <div>
            <input type="submit" name="edit" value="' . lang("admin", "editipmask") . '" />
            <input type="submit" name="add" value="' . lang("admin", "addipmask") . '" />
            <input type="submit" name="delete" value="' . lang("admin", "deleteipmask") . '" />
          </div>
        </form>';
            } elseif ($sub_action == "editvalidip") {
                if (isset($_GET["add"])) {
                    $lim = $sqlm->fetch_assoc($sqlm->query("SELECT MAX(`Index`) FROM config_valid_ip_mask"));
                    $lim = $lim["MAX(`Index`)"] + 1;
                    $sqlm->query("INSERT INTO config_valid_ip_mask SET `Index`='" . $lim . "', ValidIPMask=''");
                    redirect("admin.php?section=general&subsection=validip");
                } elseif (isset($_GET["delete"])) {
                    $index = $sqlm->quote_smart($_GET["index"]);
                    if (!is_numeric($index)) {
                        redirect("admin.php?section=general&subsection=validip&error=1");
                    }
                    $result = $sqlm->query("DELETE FROM config_valid_ip_mask WHERE `Index`='" . $index . "'");
                    redirect("admin.php?section=general&subsection=validip");
                } else {
                    $index = $sqlm->quote_smart($_GET["index"]);
                    if (!is_numeric($index)) {
                        redirect("admin.php?section=general&subsection=validip&error=1");
                    }
                    $mask = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_valid_ip_mask WHERE `Index`='" . $index . "'"));
                    $output .= '
        <form action="admin.php" method="get" id="form">
          <div>
            <input type="hidden" name="section" value="general" />
            <input type="hidden" name="subaction" value="savevalidip" />
            <input type="hidden" name="subsection" value="validip" />
            <input type="hidden" name="index" value="' . $mask["Index"] . '" />
          </div>
          <table class="simple">
            <tr>
              <th width="20%">
                <center>' . lang("admin", "index") . '</center>
              </th>
              <th class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "validipmask_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "validipmask") . '</a>
              </th>
            </tr>
            <tr>
              <td>
                <center>' . $mask["Index"] . '</center>
              </td>
              <td>
                <input type="text" name="mask" value="' . $mask["ValidIPMask"] . '" />
              </td>
            </tr>
          </table>
          <div>
            <input type="submit" name="save" value="' . lang("admin", "save") . '" />
          </div>
        </form>';
                }
            } else {
                $index = $sqlm->quote_smart($_GET["index"]);
                $mask = $sqlm->quote_smart($_GET["mask"]);
                $result = $sqlm->query("UPDATE config_valid_ip_mask SET ValidIPMask='" . $mask . "' WHERE `Index`='" . $index . "'");
                redirect("admin.php?section=general&subsection=validip");
            }
            break;
        case "ads":
            if (!$sub_action) {
                $enable_bottom_ad = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Enable_Page_Bottom_Ad'"));
                $bottom_ad_content = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Page_Bottom_Ad_Content'"));
                $output .= '
        <form action="admin.php" method="get" id="form">
          <div>
            <input type="hidden" name="section" value="general" />
            <input type="hidden" name="subaction" value="saveads" />
            <input type="hidden" name="subsection" value="ads" />
          </div>
          <table class="simple" id="admin_more">
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "enablebottomad_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "enablebottomad") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="enablebottomad" ' . ($enable_bottom_ad["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "bottomadcontent_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "bottomadcontent") . '</a>:
              </td>
              <td>
                <textarea name="bottomadcontent" rows="5" cols="40">' . $bottom_ad_content["Value"] . '</textarea>
              </td>
            </tr>
          </table>
          <div>
            <input type="submit" name="save" value="' . lang("admin", "save") . '" />
          </div>
        </form>';
            } else {
                $page_bottom_ad = isset($_GET["enablebottomad"]) ? 1 : 0;
                $page_bottom_ad_content = $sqlm->quote_smart($_GET["bottomadcontent"]);
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $page_bottom_ad . "' WHERE `Key`='Enable_Page_Bottom_Ad'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $page_bottom_ad_content . "' WHERE `Key`='Page_Bottom_Ad_Content'");
                redirect("admin.php?section=general&subsection=ads");
            }
            break;
        case "more":
            if (!$sub_action) {
                $sql_search_limit = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='SQL_Search_Limit'"));
                $item_icons = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Item_Icons'"));
                $remember_me_checked = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Remember_Me_Checked'"));
                $site_title = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Site_Title'"));
                $item_per_page = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Item_Per_Page'"));
                $show_country_flags = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Show_Country_Flags'"));
                $default_theme = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Default_Theme'"));
                $default_language = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Default_Language'"));
                $timezone = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Timezone'"));
                $timezone_offset = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Timezone_Offset'"));
                $player_online = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Player_Online'"));
                $gm_online = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='GM_Online'"));
                $gm_online_count = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='GM_Online_Count'"));
                $hide_uptime = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Hide_Uptime'"));
                $hide_max_players = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Hide_Max_Players'"));
                $hide_avg_latency = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Hide_Avg_Latency'"));
                $hide_server_mem = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Hide_Server_Mem'"));
                $hide_plr_latency = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Hide_Plr_Latency'"));
                $hide_coupons = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Hide_Coupons_Main_Page'"));
                $backup_dir = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Backup_Dir'"));
                $debug = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Debug'"));
                $test_mode = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Test_Mode'"));
                $multi_realm = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Multi_Realm'"));
                $show_emblem = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Show_Guild_Emblem'"));
                $language_locales_search_option = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Language_Locales_Search_Option'"));
                $language_site_encoding = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Language_Site_Encoding'"));
                $show_newest_user = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Show_Newest_User'"));
                $send_on_email = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Send_Mail_On_Email_Change'"));
                $use_custom_logo = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Use_Custom_Logo'"));
                $custom_logo = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Custom_Logo'"));
                $allow_caching = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Allow_Logo_Caching'"));
                $index_show_realms = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_misc WHERE `Key`='Index_Show_Realms'"));
                $custom_logos_result = $sqlm->query("SELECT * FROM custom_logos");
                $custom_logo_count = $sqlm->num_rows($custom_logos_result);
                $custom_logos = array();
                while ($row = $sqlm->fetch_assoc($custom_logos_result)) {
                    $custom_logos[] = $row;
                }
                $output .= '
        <form action="admin.php" method="get" enctype="multipart/form-data" id="form">
          <div>
            <input type="hidden" name="section" value="general" />
            <input type="hidden" name="subaction" value="savemore" />
            <input type="hidden" name="subsection" value="more" />
          </div>
          <table class="simple" id="admin_more">
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "sqlsearchlimit_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "sqlsearchlimit") . '</a>:
              </td>
              <td>
                <input type="text" name="sqlsearchlimit" value="' . $sql_search_limit["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "itemicons_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "itemicons") . '</a>:
              </td>
              <td>
                <input type="text" name="itemicons" value="' . $item_icons["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "remembermechecked_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "remembermechecked") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="remembermechecked" ' . ($remember_me_checked["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "sitetitle_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "sitetitle") . '</a>:
              </td>
              <td>
                <input type="text" name="sitetitle" value="' . $site_title["Value"] . '" size="50"/>
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "itemperpage_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "itemperpage") . '</a>:
              </td>
              <td>
                <input type="text" name="itemperpage" value="' . $item_per_page["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "showcountryflags_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "showcountryflags") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="showcountryflags" ' . ($show_country_flags["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "defaulttheme_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "defaulttheme") . '</a>:
              </td>
              <td>
                <input type="text" name="defaulttheme" value="' . $default_theme["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "defaultlanguage_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "defaultlanguage") . '</a>:
              </td>
              <td>
                <select name="defaultlanguage">';
                if (is_dir("./lang")) {
                    if ($dh = opendir("./lang")) {
                        while (($file = readdir($dh)) == true) {
                            $lang_temp = explode(".", $file);
                            if (isset($lang_temp[1]) && $lang_temp[1] == "php") {
                                $output .= '
                      <option value="' . $lang_temp[0] . '"' . ($default_language["Value"] == $lang_temp[0] ? ' selected="selected" ' : '') . '>' . lang("edit", $lang_temp[0]) . '</option>';
                            }
                        }
                        closedir($dh);
                    }
                }
                $output .= '
                </select>
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "timezone_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "timezone") . '</a>:
              </td>
              <td>
                <select name="timezone">
                  <option value="-12.0" ' . ($timezone["Value"] == "-12.0" ? 'selected="selected"' : '') . '>(UTC -12:00) Eniwetok, Kwajalein</option>
                  <option value="-11.0" ' . ($timezone["Value"] == "-11.0" ? 'selected="selected"' : '') . '>(UTC -11:00) Midway Island, Samoa</option>
                  <option value="-10.0" ' . ($timezone["Value"] == "-10.0" ? 'selected="selected"' : '') . '>(UTC -10:00) Hawaii</option>
                  <option value="-9.0" ' . ($timezone["Value"] == "-9.0" ? 'selected="selected"' : '') . '>(UTC -9:00) Alaska</option>
                  <option value="-8.0" ' . ($timezone["Value"] == "-8.0" ? 'selected="selected"' : '') . '>(UTC -8:00) Pacific Time (US &amp; Canada)</option>
                  <option value="-7.0" ' . ($timezone["Value"] == "-7.0" ? 'selected="selected"' : '') . '>(UTC -7:00) Mountain Time (US &amp; Canada)</option>
                  <option value="-6.0" ' . ($timezone["Value"] == "-6.0" ? 'selected="selected"' : '') . '>(UTC -6:00) Central Time (US &amp; Canada), Mexico City</option>
                  <option value="-5.0" ' . ($timezone["Value"] == "-5.0" ? 'selected="selected"' : '') . '>(UTC -5:00) Eastern Time (US &amp; Canada), Bogota, Lima</option>
                  <option value="-4.5" ' . ($timezone["Value"] == "-4.5" ? 'selected="selected"' : '') . '>(UTC -4:30) Caracas</option>
                  <option value="-4.0" ' . ($timezone["Value"] == "-4.0" ? 'selected="selected"' : '') . '>(UTC -4:00) Atlantic Time (Canada), La Paz</option>
                  <option value="-3.5" ' . ($timezone["Value"] == "-3.5" ? 'selected="selected"' : '') . '>(UTC -3:30) Newfoundland</option>
                  <option value="-3.0" ' . ($timezone["Value"] == "-3.0" ? 'selected="selected"' : '') . '>(UTC -3:00) Brazil, Buenos Aires, Georgetown</option>
                  <option value="-2.0" ' . ($timezone["Value"] == "-2.0" ? 'selected="selected"' : '') . '>(UTC -2:00) Mid-Atlantic</option>
                  <option value="-1.0" ' . ($timezone["Value"] == "-1.0" ? 'selected="selected"' : '') . '>(UTC -1:00) Azores, Cape Verde Islands</option>
                  <option value="0.0" ' . ($timezone["Value"] == "0.0" ? 'selected="selected"' : '') . '>(UTC) Western Europe Time, London, Lisbon, Casablanca</option>
                  <option value="1.0" ' . ($timezone["Value"] == "1.0" ? 'selected="selected"' : '') . '>(UTC +1:00) Brussels, Copenhagen, Madrid, Paris</option>
                  <option value="2.0" ' . ($timezone["Value"] == "2.0" ? 'selected="selected"' : '') . '>(UTC +2:00) Kaliningrad, South Africa</option>
                  <option value="3.0" ' . ($timezone["Value"] == "3.0" ? 'selected="selected"' : '') . '>(UTC +3:00) Baghdad, Riyadh, Moscow, St. Petersburg</option>
                  <option value="3.5" ' . ($timezone["Value"] == "3.5" ? 'selected="selected"' : '') . '>(UTC +3:30) Tehran</option>
                  <option value="4.0" ' . ($timezone["Value"] == "4.0" ? 'selected="selected"' : '') . '>(UTC +4:00) Abu Dhabi, Muscat, Baku, Tbilisi</option>
                  <option value="4.5" ' . ($timezone["Value"] == "4.5" ? 'selected="selected"' : '') . '>(UTC +4:30) Kabul</option>
                  <option value="5.0" ' . ($timezone["Value"] == "5.0" ? 'selected="selected"' : '') . '>(UTC +5:00) Ekaterinburg, Islamabad, Karachi, Tashkent</option>
                  <option value="5.5" ' . ($timezone["Value"] == "5.5" ? 'selected="selected"' : '') . '>(UTC +5:30) Bombay, Calcutta, Madras, New Delhi</option>
                  <option value="5.75" ' . ($timezone["Value"] == "5.75" ? 'selected="selected"' : '') . '>(UTC +5:45) Kathmandu</option>
                  <option value="6.0" ' . ($timezone["Value"] == "6.0" ? 'selected="selected"' : '') . '>(UTC +6:00) Almaty, Dhaka, Colombo</option>
                  <option value="7.0" ' . ($timezone["Value"] == "7.0" ? 'selected="selected"' : '') . '>(UTC +7:00) Bangkok, Hanoi, Jakarta</option>
                  <option value="8.0" ' . ($timezone["Value"] == "8.0" ? 'selected="selected"' : '') . '>(UTC +8:00) Beijing, Perth, Singapore, Hong Kong</option>
                  <option value="9.0" ' . ($timezone["Value"] == "9.0" ? 'selected="selected"' : '') . '>(UTC +9:00) Tokyo, Seoul, Osaka, Sapporo, Yakutsk</option>
                  <option value="9.5" ' . ($timezone["Value"] == "9.5" ? 'selected="selected"' : '') . '>(UTC +9:30) Adelaide, Darwin</option>
                  <option value="10.0" ' . ($timezone["Value"] == "10.0" ? 'selected="selected"' : '') . '>(UTC +10:00) Eastern Australia, Guam, Vladivostok</option>
                  <option value="11.0" ' . ($timezone["Value"] == "11.0" ? 'selected="selected"' : '') . '>(UTC +11:00) Magadan, Solomon Islands, New Caledonia</option>
                  <option value="12.0" ' . ($timezone["Value"] == "12.0" ? 'selected="selected"' : '') . '>(UTC +12:00) Auckland, Wellington, Fiji, Kamchatka</option>
                </select>
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "timezone_offset_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "timezone_offset") . '</a>:
              </td>
              <td>
                <input type="text" name="timezone_offset" value="' . $timezone_offset["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "playeronline_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "playeronline") . '</a>:
              </td>
              <td>
                <select name="playeronline">';
                $sl_query = "SELECT * FROM config_gm_level_names";
                $sl_result = $sqlm->query($sl_query);
                while ($row = $sqlm->fetch_assoc($sl_result)) {
                    $output .= '
                          <option value="' . $row["Security_Level"] . '" ' . ($player_online["Value"] == $row["Security_Level"] ? 'selected="selected"' : '') . '>' . $row["Full_Name"] . ' (' . $row["Security_Level"] . ')</option>';
                }
                $output .= '
                </select>
                <!-- input type="checkbox" name="playeronline" ' . ($player_online["Value"] == 1 ? 'checked="checked"' : '') . ' / -->
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "gmonline_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "gmonline") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="gmonline" ' . ($gm_online["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "gmonlinecount_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "gmonlinecount") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="gmonlinecount" ' . ($gm_online_count["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "hideuptime_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "hideuptime") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="hideuptime" ' . ($hide_uptime["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "hidemaxplayers_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "hidemaxplayers") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="hidemaxplayers" ' . ($hide_max_players["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "hideavglatency_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "hideavglatency") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="hideavglatency" ' . ($hide_avg_latency["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>';
                if ($core == 1) {
                    $output .= '
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "hideservermem_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "hideservermem") . '</a>:
              </td>
              <td>
                <select name="hideservermem">
                  <option value="0" ' . ($hide_server_mem["Value"] == 0 ? 'selected="selected"' : '') . '>' . lang("admin", "hide") . '</option>
                  <option value="1" ' . ($hide_server_mem["Value"] == 1 ? 'selected="selected"' : '') . '>' . lang("admin", "showtogmsonly") . '</option>
                  <option value="2" ' . ($hide_server_mem["Value"] == 2 ? 'selected="selected"' : '') . '>' . lang("admin", "showall") . '</option>
                </select>
              </td>
            </tr>';
                }
                $output .= '
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "hideplrlatency_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "hideplrlatency") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="hideplrlatency" ' . ($hide_plr_latency["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "hidecoupons_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "hidecoupons") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="hidecoupons" ' . ($hide_coupons["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "backupdir_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "backupdir") . '</a>:
              </td>
              <td>
                <input type="text" name="backupdir" value="' . $backup_dir["Value"] . '" readonly="readonly" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "debug_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "debug") . '</a>:
              </td>
              <td>
                <input type="text" name="debug" value="' . $debug["Value"] . '" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "testmode_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "testmode") . '</a>:
              </td>
              <td>
                <input type="text" name="testmode" value="' . $test_mode["Value"] . '" readonly="readonly" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "multirealm_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "multirealm") . '</a>:
              </td>
              <td>
                <input type="text" name="multirealm" value="' . $multi_realm["Value"] . '" readonly="readonly" />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "showemblem_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "showemblem") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="showemblem" ' . ($show_emblem["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "shownewuser_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "shownewuser") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="shownewuser" ' . ($show_newest_user["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "sendonemail_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "sendonemail") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="sendonemail" ' . ($send_on_email["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "indexshowrealms_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "indexshowrealms") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="indexshowrealms" ' . ($index_show_realms["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
            <tr>
              <td colspan="2">
                <b>' . lang("admin", "customlogos") . '</b>
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "usecustomlogo_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "usecustomlogo") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="usecustomlogo" ' . ($use_custom_logo["Value"] == 1 ? 'checked="checked"' : '') . ' ' . ($custom_logo_count > 0 ? '' : 'disabled="disabled"') . ' />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "customlogo_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "customlogo") . '</a>:
              </td>
              <td>
                <select name="customlogo" ' . ($custom_logo_count > 0 ? '' : 'disabled="disabled"') . '>';
                foreach ($custom_logos as $row) {
                    $output .= '
                      <option value="' . $row["id"] . '" ' . ($row["id"] == $custom_logo["Value"] ? 'selected="selected"' : '') . '>' . $row["filename"] . '</option>';
                }
                $output .= '
                </select>
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "deleteselectedlogo_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "deleteselectedlogo") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="deleteselectedlogo" ' . ($custom_logo_count > 0 ? '' : 'disabled="disabled"') . ' />
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "uploadlogo_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "uploadlogo") . '</a>:
              </td>
              <td>
                <a href="admin.php?section=general&amp;subsection=upload_logo">' . lang("admin", "upload") . '</a>
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "allowcaching_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "allowcaching") . '</a>:
              </td>
              <td>
                <input type="checkbox" name="allowcaching" ' . ($allow_caching["Value"] == 1 ? 'checked="checked"' : '') . ' />
              </td>
            </tr>
            <tr>
              <td colspan="2">
                <b>' . lang("admin", "language") . '</b>
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "languagelocalessearchoption_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "languagelocalessearchoption") . '</a>:
              </td>
              <td>
                <select name="languagelocalessearchoption">
                  <option value="0" ' . ($language_locales_search_option["Value"] == 0 ? 'selected="selected" ' : '') . '>' . lang("global", "language_0") . '</option>
                  <option value="1" ' . ($language_locales_search_option["Value"] == 1 ? 'selected="selected" ' : '') . '>' . lang("global", "language_1") . '</option>
                  <option value="2" ' . ($language_locales_search_option["Value"] == 2 ? 'selected="selected" ' : '') . '>' . lang("global", "language_2") . '</option>
                  <option value="3" ' . ($language_locales_search_option["Value"] == 3 ? 'selected="selected" ' : '') . '>' . lang("global", "language_3") . '</option>
                  <option value="4" ' . ($language_locales_search_option["Value"] == 4 ? 'selected="selected" ' : '') . '>' . lang("global", "language_4") . '</option>
                  <option value="5" ' . ($language_locales_search_option["Value"] == 5 ? 'selected="selected" ' : '') . '>' . lang("global", "language_5") . '</option>
                  <option value="6" ' . ($language_locales_search_option["Value"] == 6 ? 'selected="selected" ' : '') . '>' . lang("global", "language_6") . '</option>
                  <option value="7" ' . ($language_locales_search_option["Value"] == 7 ? 'selected="selected" ' : '') . '>' . lang("global", "language_7") . '</option>
                  <option value="8" ' . ($language_locales_search_option["Value"] == 8 ? 'selected="selected" ' : '') . '>' . lang("global", "language_8") . '</option>
                </select>
              </td>
            </tr>
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "languagesiteencoding_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "languagesiteencoding") . '</a>:
              </td>
              <td>
                <input type="text" name="languagesiteencoding" value="' . $language_site_encoding["Value"] . '" />
              </td>
            </tr>
          </table>
          <div>
            <input type="submit" name="save" value="' . lang("admin", "save") . '" />
          </div>
        </form>';
            } else {
                $sql_search_limit = $sqlm->quote_smart($_GET["sqlsearchlimit"]);
                $item_icons = $sqlm->quote_smart($_GET["itemicons"]);
                $remember_me_checked = isset($_GET["remembermechecked"]) ? 1 : 0;
                $site_title = $sqlm->quote_smart($_GET["sitetitle"]);
                $item_per_page = $sqlm->quote_smart($_GET["itemperpage"]);
                $show_country_flags = isset($_GET["showcountryflags"]) ? 1 : 0;
                $default_theme = $sqlm->quote_smart($_GET["defaulttheme"]);
                $default_language = $sqlm->quote_smart($_GET["defaultlanguage"]);
                $timezone = $sqlm->quote_smart($_GET["timezone"]);
                $timezone_offset = $sqlm->quote_smart($_GET["timezone_offset"]);
                $player_online = $sqlm->quote_smart($_GET["playeronline"]);
                $gm_online = isset($_GET["gmonline"]) ? 1 : 0;
                $gm_online_count = isset($_GET["gmonlinecount"]) ? 1 : 0;
                $hide_uptime = isset($_GET["hideuptime"]) ? 1 : 0;
                $hide_max_players = isset($_GET["hidemaxplayers"]) ? 1 : 0;
                $hide_avg_latency = isset($_GET["hideavglatency"]) ? 1 : 0;
                $hide_plr_latency = isset($_GET["hideplrlatency"]) ? 1 : 0;
                $hide_coupons = isset($_GET["hidecoupons"]) ? 1 : 0;
                $backup_dir = $sqlm->quote_smart($_GET["backupdir"]);
                $debug = $sqlm->quote_smart($_GET["debug"]);
                $test_mode = $sqlm->quote_smart($_GET["testmode"]);
                $multi_realm = $sqlm->quote_smart($_GET["multirealm"]);
                $show_emblem = isset($_GET["showemblem"]) ? 1 : 0;
                $language_locales_search_option = $sqlm->quote_smart($_GET["languagelocalessearchoption"]);
                $language_site_encoding = $sqlm->quote_smart($_GET["languagesiteencoding"]);
                $hide_server_mem = $sqlm->quote_smart($_GET["hideservermem"]);
                $show_newest_user = isset($_GET["shownewuser"]) ? 1 : 0;
                $send_on_email = isset($_GET["sendonemail"]) ? 1 : 0;
                $index_show_realms = isset($_GET["indexshowrealms"]) ? 1 : 0;
                $use_custom_logo = isset($_GET["usecustomlogo"]) ? 1 : 0;
                $custom_logo = isset($_GET["customlogo"]) ? $sqlm->quote_smart($_GET["customlogo"]) : NULL;
                $delete_selected = isset($_GET["deleteselectedlogo"]) ? 1 : 0;
                $allow_caching = isset($_GET["allowcaching"]) ? 1 : 0;
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $sql_search_limit . "' WHERE `Key`='SQL_Search_Limit'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $item_icons . "' WHERE `Key`='Item_Icons'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $remember_me_checked . "' WHERE `Key`='Remember_Me_Checked'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $site_title . "' WHERE `Key`='Site_Title'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $item_per_page . "' WHERE `Key`='Item_Per_Page'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $show_country_flags . "' WHERE `Key`='Show_Country_Flags'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $default_theme . "' WHERE `Key`='Default_Theme'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $default_language . "' WHERE `Key`='Default_Language'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $timezone . "' WHERE `Key`='Timezone'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $timezone_offset . "' WHERE `Key`='Timezone_Offset'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $player_online . "' WHERE `Key`='Player_Online'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $gm_online . "' WHERE `Key`='GM_Online'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $gm_online_count . "' WHERE `Key`='GM_Online_Count'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $hide_uptime . "' WHERE `Key`='Hide_Uptime'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $hide_max_players . "' WHERE `Key`='Hide_Max_Players'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $hide_avg_latency . "' WHERE `Key`='Hide_Avg_Latency'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $hide_server_mem . "' WHERE `Key`='Hide_Server_Mem'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $hide_plr_latency . "' WHERE `Key`='Hide_Plr_Latency'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $hide_coupons . "' WHERE `Key`='Hide_Coupons_Main_Page'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $backup_dir . "' WHERE `Key`='Backup_Dir'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $debug . "' WHERE `Key`='Debug'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $test_mode . "' WHERE `Key`='Test_Mode'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $multi_realm . "' WHERE `Key`='Multi_Realm'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $show_emblem . "' WHERE `Key`='Show_Guild_Emblem'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $language_locales_search_option . "' WHERE `Key`='Language_Locales_Search_Option'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $language_site_encoding . "' WHERE `Key`='Language_Site_Encoding'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $show_newest_user . "' WHERE `Key`='Show_Newest_User'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $send_on_email . "' WHERE `Key`='Send_Mail_On_Email_Change'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $index_show_realms . "' WHERE `Key`='Index_Show_Realms'");
                if ($delete_selected) {
                    $result = $sqlm->query("DELETE FROM custom_logos WHERE id='" . $custom_logo . "'");
                    // if we have no more logos, then we don't want Use Custom Logos checked.
                    $result = $sqlm->query("SELECT * FROM custom_logos");
                    $logo_count = $sqlm->num_rows($result);
                    if ($logo_count == 0) {
                        $use_custom_logo = 0;
                    } else {
                        // we don't want the Custom_Logo field set to the one we just deleted
                        // so we'll set it to the first one on the list
                        $temp = $sqlm->fetch_assoc($result);
                        $custom_logo = $temp["id"];
                    }
                }
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $use_custom_logo . "' WHERE `Key`='Use_Custom_Logo'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $custom_logo . "' WHERE `Key`='Custom_Logo'");
                $result = $sqlm->query("UPDATE config_misc SET Value='" . $allow_caching . "' WHERE `Key`='Allow_Logo_Caching'");
                redirect("admin.php?section=general&subsection=more");
            }
            break;
        case "upload_logo":
            if (!$sub_action) {
                $upload_err = isset($_GET["up_err"]) ? $_GET["up_err"] : NULL;
                $output .= '
        <form action="admin.php?section=general&subsection=upload_logo&subaction=upload" method="post" enctype="multipart/form-data" id="form">
          <table class="simple" id="admin_more">';
                if (isset($upload_err)) {
                    $msg = lang("admin", "uploaderror" . abs($upload_err));
                    $output .= '
            <td colspan="2">
              <span class="error" style="display: block; width: 100%; text-align: center;">' . $msg . '</span>
            </td>';
                }
                $output .= '
            <tr>
              <td class="help">
                <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "uploadlogo_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "uploadlogo") . '</a>:
              </td>
              <td>
                <input type="file" name="image" />
              </td>
            </tr>
          </table>
          <div>
            <input type="submit" name="save" value="' . lang("admin", "save") . '" />
            <input type="button" name="cancel" value="' . lang("admin", "cancel") . '" onclick="window.location=\'admin.php?section=general&subsection=more\'"/>
          </div>
        </form>';
            } else {
                if (!array_key_exists("image", $_FILES)) {
                    redirect("admin.php?section=general&subsection=upload_logo&error=1");
                }
                $image = $_FILES["image"];
                $err = checkValidUpload($image["error"]);
                if ($err < 0) {
                    redirect("admin.php?section=general&subsection=upload_logo&up_err=" . $err);
                } else {
                    if (!is_uploaded_file($image["tmp_name"])) {
                        redirect("admin.php?section=general&subsection=upload_logo&up_err=-8");
                    }
                    $info = getImageSize($image["tmp_name"]);
                    if (!$info) {
                        redirect("admin.php?section=general&subsection=upload_logo&up_err=-9");
                    }
                    $name = $sqlm->quote_smart($image["name"]);
                    $mime = $sqlm->quote_smart($info["mime"]);
                    $data = $sqlm->quote_smart(file_get_contents($image["tmp_name"]));
                    $upload_query = "INSERT INTO custom_logos (filename, mime_type, file_size, file_data) VALUES ('" . $name . "', '" . $mime . "', '" . $image['size'] . "', '" . $data . "')";
                    $sqlm->query($upload_query);
                    redirect("admin.php?section=general&subsection=more");
                }
            }
            break;
        case "gmlevels":
            if (!$sub_action) {
                $gm_lvls = $sqlm->query("SELECT * FROM config_gm_level_names");
                if (!isset($_GET["edit_btn"])) {
                    $output .= '
        <form action="admin.php" method="get" id="form">
          <div>
            <input type="hidden" name="section" value="general" />
            <input type="hidden" name="subsection" value="gmlevels" />
            <input type="hidden" name="edit_btn" value="edit" />
          </div>
          <table class="simple">
            <tr>
              <th>' . lang("admin", "edit") . '</th>
              <th>' . lang("admin", "remove") . '</th>
              <th>' . lang("admin", "seclvl") . '</th>
              <th>' . lang("admin", "fullname") . '</th>
              <th>' . lang("admin", "shortname") . '</th>
            </tr>';
                    $color = "#EEEEEE";
                    while ($gm_lvl = $sqlm->fetch_assoc($gm_lvls)) {
                        $output .= '
            <tr>
              <td style="background-color:' . $color . '; text-align: center;">
                <a href="admin.php?section=general&amp;subsection=gmlevels&amp;edit=' . $gm_lvl["Index"] . '&amp;edit_btn=Edit">
                  <img src="img/edit.png" alt="" />
                </a>
              </td>
              <td style="background-color:' . $color . '; text-align: center;">
                <a href="admin.php?section=general&amp;subsection=gmlevels&amp;delrow=deleterow&amp;edit=' . $gm_lvl["Index"] . '&amp;edit_btn=Edit">
                  <img src="img/aff_cross.png" alt="" />
                </a>
              </td>
              <td style="background-color:' . $color . '">' . $gm_lvl["Security_Level"] . '</td>
              <td style="background-color:' . $color . '">' . $gm_lvl["Full_Name"] . '</td>
              <td style="background-color:' . $color . '">' . $gm_lvl["Short_Name"] . '</td>
            </tr>';
                        if ($color == "#EEEEEE") {
                            $color = "#FFFFFF";
                        } else {
                            $color = "#EEEEEE";
                        }
                    }
                    $output .= '
            <tr>
              <td style="background-color:' . $color . '; text-align: center;">
                <a href="admin.php?section=general&amp;subsection=gmlevels&amp;edit_btn=Edit&amp;addrow=addrow">
                  <img src="img/add.png" alt="" />
                </a>
              </td>
              <td style="background-color:' . $color . ';" colspan="4">
                <a href="admin.php?section=general&amp;subsection=gmlevels&amp;edit_btn=Edit&amp;addrow=addrow">' . lang("admin", "addrow") . '</a>
              </td>
            </tr>';
                    $output .= '
          </table>
        </form>';
                } else {
                    if (!isset($_GET["edit"])) {
                        if (!isset($_GET["addrow"])) {
                            redirect("admin.php?section=general&subsection=gmlevels");
                        }
                    }
                    $del_row = isset($_GET["delrow"]) ? $_GET["delrow"] : "";
                    $add_row = isset($_GET["addrow"]) ? $_GET["addrow"] : "";
                    $edit_row = $sqlm->quote_smart($_GET["edit"]);
                    if ($add_row) {
                        $add_result = $sqlm->query("INSERT INTO config_gm_level_names (Security_Level) VALUES ('-1')");
                        redirect("admin.php?section=general&subsection=gmlevels");
                    }
                    if ($del_row) {
                        $del_result = $sqlm->query("DELETE FROM config_gm_level_names WHERE `Index`='" . $edit_row . "'");
                        redirect("admin.php?section=general&subsection=gmlevels");
                    }
                    $gm_level = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_gm_level_names WHERE `Index`='" . $edit_row . "'"));
                    $output .= '
        <form action="admin.php" method="get" id="form">
          <div>
            <input type="hidden" name="section" value="general" />
            <input type="hidden" name="subsection" value="gmlevels" />
            <input type="hidden" name="subaction" value="savegms" />
            <input type="hidden" name="index" value="' . $gm_level["Index"] . '" />
          </div>
          <fieldset id="admin_gm_level">
            <table class="center">
              <tr>
                <td class="help">
                  <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "seclvl_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "seclvl") . '</a>:
                </td>
                <td>
                  <input type="text" name="seclvl" value="' . $gm_level["Security_Level"] . '" />
                </td>
              </tr>
              <tr>
                <td>' . lang("admin", "fullname") . ': </td>
                <td>
                  <input type="text" name="fullname" value="' . $gm_level["Full_Name"] . '" />
                </td>
              </tr>
              <tr>
                <td>' . lang("admin", "shortname") . ': </td>
                <td>
                  <input type="text" name="shortname" value="' . $gm_level["Short_Name"] . '" />
                </td>
              </tr>
            </table>
          </fieldset>
          <div>
            <input type="submit" name="save" value="' . lang("admin", "save") . '" />
          </div>
        </form>';
                }
            } else {
                $index = $sqlm->quote_smart($_GET["index"]);
                $sec_lvl = $sqlm->quote_smart($_GET["seclvl"]);
                $full_name = $sqlm->quote_smart($_GET["fullname"]);
                $short_name = $sqlm->quote_smart($_GET["shortname"]);
                $result = $sqlm->query("UPDATE config_gm_level_names SET Security_Level='" . $sec_lvl . "', Full_Name='" . $full_name . "', Short_Name='" . $short_name . "' WHERE `Index`='" . $index . "'");
                redirect("admin.php?section=general&subsection=gmlevels");
            }
            break;
    }
    $output .= '
      </div>';
}
Example #15
0
function do_purchase()
{
    global $output, $characters_db, $raffle_id, $user_name, $user_id, $sql, $core;
    // make sure the money character (if provided) is not an injection
    if (isset($_GET["money_character"])) {
        $money_character = explode("-", $_GET["money_character"]);
        $char_choice = $money_character[1];
        $char_choice = isset($_GET["money_character"]) ? $char_choice : NULL;
        $char_choice = is_numeric($char_choice) ? $char_choice : 0;
        $char_realm = $money_character[0];
        $char_realm = is_numeric($char_realm) ? $char_realm : 0;
        // check that the realm id is at least a number
        if ($char_realm == 0) {
            error(lang("global", "err_invalid_input"));
        }
    }
    // get our raffle
    $query = "SELECT * FROM point_system_raffles WHERE entry='" . $raffle_id . "'";
    $result = $sql["mgr"]->query($query);
    $raffle = $sql["mgr"]->fetch_assoc($result);
    // get our usage
    $query = "SELECT * FROM point_system_raffle_tickets WHERE raffle='" . $coupon_id . "' AND user='******'";
    $result = $sql["mgr"]->query($query);
    $my_usage = $sql["mgr"]->num_rows($result);
    // get overall usage
    $query = "SELECT * FROM point_system_raffle_tickets WHERE raffle='" . $coupon_id . "'";
    $result = $sql["mgr"]->query($query);
    $usage = $sql["mgr"]->num_rows($result);
    // check whether this raffle is available for us to use
    if ($raffle["tickets_per_iser"] != -1 && $raffle["tickets_per_user"] <= $my_usage || $raffle["ticket_limit"] != -1 && $raffle["ticket_limit"] <= $usage) {
        redirect("point_system.php?action=view_raffle&raffle_id=" . $raffle_id . "&error=3");
    }
    // if the raffle requires payment in credits, deduct those
    if ($raffle["cost_credits"] != 0) {
        // get our credit balance
        $query = "SELECT credits FROM config_accounts WHERE Login='******'";
        $result = $sql["mgr"]->query($query);
        $result = $sql["mgr"]->fetch_assoc($result);
        $credits = $result["credits"];
        // first, we check whether we have normal credits and less than required
        if ($credits > -1) {
            if ($credits < $raffle["cost_credits"]) {
                redirect("point_system.php?action=view_raffle&raffle_id=" . $raffle_id . "&error=4");
            } else {
                // deduct the credits from our account
                $query = "UPDATE config_accounts SET credits=credits-'" . $raffle["cost_credits"] . "' WHERE Login='******'";
                $result = $sql["mgr"]->query($query);
            }
        }
    }
    // if the raffle requires payment in monies, deduct those
    if ($raffle["cost_money"] != 0) {
        $sqlt = new SQL();
        $sqlt->connect($characters_db[$char_realm]["addr"], $characters_db[$char_realm]["user"], $characters_db[$char_realm]["pass"], $characters_db[$char_realm]["name"], $characters_db[$char_realm]["encoding"]);
        // the selected character's money
        if ($core == 1) {
            $char_query = "SELECT gold AS money, online FROM characters WHERE guid='" . $char_choice . "'";
        } else {
            $char_query = "SELECT money, online FROM characters WHERE guid='" . $char_choice . "'";
        }
        $char_result = $sqlt->query($char_query);
        $char = $sqlt->fetch_assoc($char_result);
        // make sure the character has enough money and is offline
        if ($char["money"] <= $raffle["cost_money"]) {
            redirect("point_system.php?action=view_raffle&raffle_id=" . $raffle_id . "&error=5");
        }
        if ($char["online"]) {
            redirect("point_system.php?action=view_raffle&raffle_id=" . $raffle_id . "&error=6");
        }
        // deduct the required money from the character's gold
        if ($core == 1) {
            $query = "UPDATE characters SET gold=gold-'" . $raffle["cost_money"] . "' WHERE guid='" . $char_choice . "'";
        } else {
            $query = "UPDATE characters SET money=money-'" . $raffle["cost_money"] . "' WHERE guid='" . $char_choice . "'";
        }
        $result = $sqlt->query($query);
    }
    // make an entry for our usage
    $query = "INSERT INTO point_system_raffle_tickets (raffle, user, date_purchased) VALUES ('" . $raffle_id . "', '" . $user_id . "', NOW())";
    $result = $sql["mgr"]->query($query);
    redirect("point_system.php?action=view_raffle&purchased=1");
}
Example #16
0
function do_insert_update($do_insert)
{
    global $lang_global, $lang_creature, $output, $world_db, $realm_id, $creature_datasite, $item_datasite, $quest_datasite, $lang_id_tab, $spell_datasite, $lang_item, $language, $action_permission, $user_lvl, $locales_search_option;
    wowhead_tt();
    require_once "./scripts/get_lib.php";
    require_once 'libs/item_lib.php';
    $sql = new SQL();
    $sql->connect($world_db[$realm_id]['addr'], $world_db[$realm_id]['user'], $world_db[$realm_id]['pass'], $world_db[$realm_id]['name']);
    // entry only needed on update
    if (!$do_insert) {
        if (!isset($_GET['entry'])) {
            redirect("creature.php?error=1");
        }
        $entry = is_numeric($_GET['entry']) ? $sql->quote_smart($_GET['entry']) : redirect("creature.php?error=8");
        $result = $sql->query("SELECT `entry`, `difficulty_entry_1`, `KillCredit1`, `KillCredit2`, `modelid1`, `modelid2`, `modelid3`, `modelid4`, `name`,`subname`, `IconName`, `minlevel`, `maxlevel`, `faction_A`, `faction_H`, `npcflag`, `speed_walk`, `speed_run`, `scale`, `rank`, `mindmg`, `maxdmg`, `dmgschool`, `attackpower`, `baseattacktime`, `rangeattacktime`, `unit_flags`,`dynamicflags`, `family`, `trainer_type`, `trainer_spell`, `trainer_class`,`trainer_race`,`minrangedmg`, `maxrangedmg`, `rangedattackpower`, `type`,`type_flags`,`lootid`, `pickpocketloot`, `skinloot`, `resistance1`, `resistance2`, `resistance3`, `resistance4`, `resistance5`, `resistance6`, `spell1`, `spell2`, `spell3`, `spell4`, `PetSpellDataId`, `mingold`, `maxgold`, `AIName`, `MovementType`, `InhabitType`, `RacialLeader`, `RegenHealth`, `equipment_id`, `mechanic_immune_mask`, `flags_extra`, `ScriptName` FROM creature_template WHERE entry = '{$entry}'");
    } else {
        // get new free id
        $result = $sql->query("SELECT max(entry)+1 as newentry from creature_template");
        $entry = $sql->result($result, 0, 'newentry');
        $result = $sql->query("SELECT {$entry} as `entry`, 0 as `difficulty_entry_1`, 0 as `KillCredit1`, 0 as `KillCredit2`, 0 as `modelid1`, 0 as `modelid2`, 0 as `modelid3`, 0 as `modelid4`, 'new creature' as `name`,'' as `subname`, '' as `IconName`, 1 as `minlevel`, 1 as `maxlevel`, 0 as `faction_A`, 0 as `faction_H`, 0 as `npcflag`, 1 as `speed`, 1 as `scale`,0 as `rank`, 1 as `mindmg`, 1 as `maxdmg`, 0 as `dmgschool`, 0 as `attackpower`, 2000 as `baseattacktime`, 0 as `rangeattacktime`, 0 as `unit_flags`,0 as `dynamicflags`, 0 as `family`, 0 as `trainer_type`, 0 as `trainer_spell`, 0 as `trainer_class`,0 as `trainer_race`,0 as `minrangedmg`, 0 as `maxrangedmg`, 0 as `rangedattackpower`, 0 as `type`,0 as `type_flags`,0 as `lootid`, 0 as `pickpocketloot`, 0 as `skinloot`, 0 as `resistance1`, 0 as `resistance2`, 0 as `resistance3`, 0 as `resistance4`, 0 as `resistance5`, 0 as `resistance6`, 0 as`spell1`, 0 as`spell2`, 0 as `spell3`, 0 as `spell4`, 0 as `PetSpellDataId`, 100 as `mingold`, 250 as `maxgold`, '' as `AIName`, 0 as `MovementType`, 1 as `InhabitType`, 0 as `RacialLeader`, 1 as `RegenHealth`, 0 as `equipment_id`, 0 as `mechanic_immune_mask`, 0 as `flags_extra`, '' as `ScriptName`");
        // use id for new creature_template
    }
    if ($mob = $sql->fetch_assoc($result)) {
        $output .= "\r\n                <script type=\"text/javascript\" src=\"libs/js/tab.js\"></script>\r\n                <center>\r\n                <br /><br /><br />\r\n                    <form method=\"post\" action=\"creature.php?action=do_update\" name=\"form1\">\r\n                        <input type=\"hidden\" name=\"backup_op\" value=\"0\"/>\r\n                        <input type=\"hidden\" name=\"entry\" value=\"{$entry}\"/>\r\n                        <input type=\"hidden\" name=\"insert\" value=\"{$do_insert}\"/>\r\n                        <div class=\"jtab-container\" id=\"container\">\r\n                            <ul class=\"jtabs\">\r\n                                <li><a href=\"#\" onclick=\"return showPane('pane1', this)\" id=\"tab1\">{$lang_creature['general']}</a></li>\r\n                                <li><a href=\"#\" onclick=\"return showPane('pane3', this)\">{$lang_creature['stats']}</a></li>\r\n                                <li><a href=\"#\" onclick=\"return showPane('pane4', this)\">{$lang_creature['models']}</a></li>\r\n                                <li><a href=\"#\" onclick=\"return showPane('pane2', this)\">{$lang_creature['additional']}</a></li>";
        $quest_flag = 0;
        $vendor_flag = 0;
        $trainer_flag = 0;
        if (!$mob['npcflag']) {
            $output .= "";
        } else {
            if ($mob['npcflag'] & 1) {
                $output .= "";
            }
            //gossip
            if ($mob['npcflag'] & 2) {
                $quest_flag = 1;
                $output .= "\r\n                                <li><a href=\"#\" onclick=\"return showPane('pane6', this)\">{$lang_creature['quests']}</a></li>";
            }
            if ($mob['npcflag'] & 4) {
                $vendor_flag = 1;
                $output .= "\r\n                                <li><a href=\"#\" onclick=\"return showPane('pane7', this)\">{$lang_creature['vendor']}</a></li>";
            }
            if ($mob['npcflag'] & 16) {
                $trainer_flag = 1;
                $output .= "\r\n                                <li><a href=\"#\" onclick=\"return showPane('pane8', this)\">{$lang_creature['trainer']}</a></li>";
            }
        }
        if ($mob['npcflag'] & 128) {
            $vendor_flag = 1;
            $output .= "\r\n                                <li><a href=\"#\" onclick=\"return showPane('pane7', this)\">{$lang_creature['vendor']}</a></li>";
        }
        if ($mob['npcflag'] & 16384) {
            $vendor_flag = 1;
            $output .= "\r\n                                <li><a href=\"#\" onclick=\"return showPane('pane7', this)\">{$lang_creature['vendor']}</a></li>";
        }
        if ($mob['lootid']) {
            $output .= "\r\n                                <li><a href=\"#\" onclick=\"return showPane('pane5', this)\">{$lang_creature['loot']}</a></li>";
        }
        if ($mob['skinloot']) {
            $output .= "\r\n                                <li><a href=\"#\" onclick=\"return showPane('pane9', this)\">{$lang_creature['skin_loot']}</a></li>";
        }
        if ($mob['pickpocketloot']) {
            $output .= "\r\n                                <li><a href=\"#\" onclick=\"return showPane('pane10', this)\">{$lang_creature['pickpocket_loot']}</a></li>";
        }
        if ($locales_search_option != 0) {
            $output .= "\r\n                                <li><a href=\"#\" onclick=\"return showPane('pane11', this)\">{$lang_creature['locales']}</a></li>";
        }
        $output .= "\r\n                            </ul>\r\n                            <div class=\"jtab-panes\">\r\n                                <div id=\"pane1\">\r\n                                    <br /><br />\r\n                                    <table class=\"lined\" style=\"width: 720px;\">\r\n                                        <tr class=\"large_bold\"><td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_creature['general']}:</td></tr>\r\n                                        <tr>\r\n                                            <td>" . makeinfocell($lang_creature['entry'], $lang_creature['entry_desc']) . "</td>\r\n                                            <td>\r\n                                                <a href=\"{$creature_datasite}{$entry}\" target=\"_blank\">{$entry}</a>\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['name'], $lang_creature['name_desc']) . "</td>\r\n                                            <td colspan=\"3\">\r\n                                                <input type=\"text\" name=\"name\" size=\"50\" maxlength=\"100\" value=\"{$mob['name']}\" />\r\n                                            </td>\r\n                                        </tr>\r\n                                        <tr>\r\n                                            <td>" . makeinfocell($lang_creature['sub_name'], $lang_creature['sub_name_desc']) . "</td>\r\n                                            <td colspan=\"2\">\r\n                                                <input type=\"text\" name=\"subname\" size=\"25\" maxlength=\"100\" value=\"{$mob['subname']}\" />\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['script_name'], $lang_creature['script_name_desc']) . "</td>\r\n                                            <td colspan=\"2\">\r\n                                                <input type=\"text\" name=\"ScriptName\" size=\"25\" maxlength=\"128\" value=\"{$mob['ScriptName']}\" />\r\n                                            </td>\r\n                                        </tr>\r\n                                        <tr class=\"large_bold\">\r\n                                            <td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_creature['basic_status']}:</td>\r\n                                        </tr>\r\n                                        <tr>\r\n                                            <td>" . makeinfocell($lang_creature['heroic'], $lang_creature['heroic_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"difficulty_entry_1\" size=\"8\" maxlength=\"3\" value=\"{$mob['difficulty_entry_1']}\" />\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['min_level'], $lang_creature['min_level_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"minlevel\" size=\"8\" maxlength=\"3\" value=\"{$mob['minlevel']}\" />\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['max_level'], $lang_creature['max_level_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"maxlevel\" size=\"8\" maxlength=\"3\" value=\"{$mob['maxlevel']}\" />\r\n                                            </td>\r\n                                        </tr>\r\n                                        <tr>\r\n                                            <td>&nbsp;</td>\r\n                                            <td>\r\n                                                &nbsp;\r\n                                            </td>\r\n                                            <td>&nbsp;</td>\r\n                                            <td>\r\n                                                &nbsp;\r\n                                            </td>";
        if ($mob['RegenHealth']) {
            $RegenHealth = "checked";
        } else {
            $RegenHealth = "";
        }
        $output .= "\r\n                                            <td>" . makeinfocell($lang_creature['RegenHealth'], $lang_creature['RegenHealth']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"checkbox\" name=\"RegenHealth\" value=\"1\" {$RegenHealth} />\r\n                                            </td>\r\n                                        </tr>\r\n                                        <tr>\r\n                                            <td>" . makeinfocell($lang_creature['faction_A'], $lang_creature['faction_A_desc']) . "</td>\r\n                                            <td colspan=\"2\">\r\n                                                <input type=\"text\" name=\"faction_A\" size=\"14\" maxlength=\"10\" value=\"{$mob['faction_A']}\" />\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['faction_H'], $lang_creature['faction_H_desc']) . "</td>\r\n                                            <td colspan=\"2\">\r\n                                                <input type=\"text\" name=\"faction_H\" size=\"14\" maxlength=\"10\" value=\"{$mob['faction_H']}\" />\r\n                                            </td>\r\n                                        </tr>\r\n                                        <tr>";
        $rank = array(0 => "", 1 => "", 3 => "", 2 => "", 4 => "");
        $rank[$mob['rank']] = " selected=\"selected\" ";
        $output .= "\r\n                                            <td >" . makeinfocell($lang_creature['rank'], $lang_creature['rank_desc']) . "</td>\r\n                                            <td>\r\n                                                <select name=\"rank\">\r\n                                                    <option value=\"0\" {$rank[0]}>0 - {$lang_creature['normal']}</option>\r\n                                                    <option value=\"1\" {$rank[1]}>1 - {$lang_creature['elite']}</option>\r\n                                                    <option value=\"2\" {$rank[2]}>2 - {$lang_creature['rare_elite']}</option>\r\n                                                    <option value=\"3\" {$rank[3]}>3 - {$lang_creature['world_boss']}</option>\r\n                                                    <option value=\"4\" {$rank[4]}>4 - {$lang_creature['rare']}</option>\r\n                                                </select>\r\n                                            </td>";
        unset($rank);
        $type = array(0 => "", 1 => "", 2 => "", 3 => "", 4 => "", 5 => "", 6 => "", 7 => "", 8 => "", 9 => "", 10 => "");
        $type[$mob['type']] = " selected=\"selected\" ";
        $output .= "\r\n                                            <td colspan=\"2\">" . makeinfocell($lang_creature['type'], $lang_creature['type_desc']) . "</td>\r\n                                            <td colspan=\"2\">\r\n                                                <select name=\"type\">\r\n                                                    <option value=\"0\" {$type[0]}>0 - {$lang_creature['other']}</option>\r\n                                                    <option value=\"1\" {$type[1]}>1 - {$lang_creature['beast']}</option>\r\n                                                    <option value=\"2\" {$type[2]}>2 - {$lang_creature['dragonkin']}</option>\r\n                                                    <option value=\"3\" {$type[3]}>3 - {$lang_creature['demon']}</option>\r\n                                                    <option value=\"4\" {$type[4]}>4 - {$lang_creature['elemental']}</option>\r\n                                                    <option value=\"5\" {$type[5]}>5 - {$lang_creature['giant']}</option>\r\n                                                    <option value=\"6\" {$type[6]}>6 - {$lang_creature['undead']}</option>\r\n                                                    <option value=\"7\" {$type[7]}>7 - {$lang_creature['humanoid']}</option>\r\n                                                    <option value=\"8\" {$type[8]}>8 - {$lang_creature['critter']}</option>\r\n                                                    <option value=\"9\" {$type[9]}>9 - {$lang_creature['mechanical']}</option>\r\n                                                    <option value=\"10\" {$type[10]}>10 - {$lang_creature['not_specified']}</option>\r\n                                                </select>\r\n                                            </td>\r\n                                        </tr>\r\n                                        <tr>";
        unset($type);
        $npcflag = array(0 => "", 1 => "", 2 => "", 4 => "", 8 => "", 16 => "", 32 => "", 64 => "", 128 => "", 256 => "", 512 => "", 1024 => "", 2048 => "", 4096 => "", 8192 => "", 16384 => "", 65536 => "", 131072 => "", 262144 => "", 524288 => "", 1048576 => "", 2097152 => "", 4194304 => "", 268435456 => "");
        if ($mob['npcflag'] == 0) {
            $npcflag[0] = " selected=\"selected\" ";
        } else {
            if ($mob['npcflag'] & 1) {
                $npcflag[1] = " selected=\"selected\" ";
            }
            if ($mob['npcflag'] & 2) {
                $npcflag[2] = " selected=\"selected\" ";
            }
            if ($mob['npcflag'] & 4) {
                $npcflag[4] = " selected=\"selected\" ";
            }
            if ($mob['npcflag'] & 8) {
                $npcflag[8] = " selected=\"selected\" ";
            }
            if ($mob['npcflag'] & 16) {
                $npcflag[16] = " selected=\"selected\" ";
            }
            if ($mob['npcflag'] & 32) {
                $npcflag[32] = " selected=\"selected\" ";
            }
            if ($mob['npcflag'] & 64) {
                $npcflag[64] = " selected=\"selected\" ";
            }
            if ($mob['npcflag'] & 128) {
                $npcflag[128] = " selected=\"selected\" ";
            }
            if ($mob['npcflag'] & 256) {
                $npcflag[256] = " selected=\"selected\" ";
            }
            if ($mob['npcflag'] & 512) {
                $npcflag[512] = " selected=\"selected\" ";
            }
            if ($mob['npcflag'] & 1024) {
                $npcflag[1024] = " selected=\"selected\" ";
            }
            if ($mob['npcflag'] & 2048) {
                $npcflag[2048] = " selected=\"selected\" ";
            }
            if ($mob['npcflag'] & 4096) {
                $npcflag[4096] = " selected=\"selected\" ";
            }
            if ($mob['npcflag'] & 8192) {
                $npcflag[8192] = " selected=\"selected\" ";
            }
            if ($mob['npcflag'] & 16384) {
                $npcflag[16384] = " selected=\"selected\" ";
            }
            if ($mob['npcflag'] & 65536) {
                $npcflag[65536] = " selected=\"selected\" ";
            }
            if ($mob['npcflag'] & 131072) {
                $npcflag[131072] = " selected=\"selected\" ";
            }
            if ($mob['npcflag'] & 262144) {
                $npcflag[262144] = " selected=\"selected\" ";
            }
            if ($mob['npcflag'] & 524288) {
                $npcflag[524288] = " selected=\"selected\" ";
            }
            if ($mob['npcflag'] & 1048576) {
                $npcflag[1048576] = " selected=\"selected\" ";
            }
            if ($mob['npcflag'] & 2097152) {
                $npcflag[2097152] = " selected=\"selected\" ";
            }
            if ($mob['npcflag'] & 4194304) {
                $npcflag[4194304] = " selected=\"selected\" ";
            }
            if ($mob['npcflag'] & 268435456) {
                $npcflag[268435456] = " selected=\"selected\" ";
            }
        }
        $output .= "\r\n                                            <td rowspan=\"2\">" . makeinfocell($lang_creature['npc_flag'], $lang_creature['npc_flag_desc']) . "</td>\r\n                                            <td colspan=\"2\" rowspan=\"2\">\r\n                                                <select multiple=\"multiple\" name=\"npcflag[]\" size=\"3\">\r\n                                                    <option value=\"0\" {$npcflag[0]}>{$lang_creature['none']}</option>\r\n                                                    <option value=\"1\" {$npcflag[1]}>{$lang_creature['gossip']}</option>\r\n                                                    <option value=\"2\" {$npcflag[2]}>{$lang_creature['quest_giver']}</option>\r\n                                                    <option value=\"4\" {$npcflag[4]}>{$lang_creature['vendor']}</option>\r\n                                                    <option value=\"8\" {$npcflag[8]}>{$lang_creature['taxi']}</option>\r\n                                                    <option value=\"16\" {$npcflag[16]}>{$lang_creature['trainer']}</option>\r\n                                                    <option value=\"32\" {$npcflag[32]}>{$lang_creature['spirit_healer']}</option>\r\n                                                    <option value=\"64\" {$npcflag[64]}>{$lang_creature['guard']}</option>\r\n                                                    <option value=\"128\" {$npcflag[128]}>{$lang_creature['inn_keeper']}</option>\r\n                                                    <option value=\"256\" {$npcflag[256]}>{$lang_creature['banker']}</option>\r\n                                                    <option value=\"512\" {$npcflag[512]}>{$lang_creature['retitioner']}</option>\r\n                                                    <option value=\"1024\" {$npcflag[1024]}>{$lang_creature['tabard_vendor']}</option>\r\n                                                    <option value=\"2048\" {$npcflag[2048]}>{$lang_creature['battlemaster']}</option>\r\n                                                    <option value=\"4096\" {$npcflag[4096]}>{$lang_creature['auctioneer']}</option>\r\n                                                    <option value=\"8192\" {$npcflag[8192]}>{$lang_creature['stable_master']}</option>\r\n                                                    <option value=\"16384\" {$npcflag[16384]}>{$lang_creature['armorer']}</option>\r\n                                                </select>\r\n                                            </td>";
        unset($npcflag);
        $trainer_type = array(0 => "", 1 => "", 2 => "", 3 => "");
        $trainer_type[$mob['trainer_type']] = " selected=\"selected\" ";
        $output .= "\r\n                                            <td>" . makeinfocell($lang_creature['trainer_type'], $lang_creature['trainer_type_desc']) . "</td>\r\n                                            <td colspan=\"2\">\r\n                                                <select name=\"trainer_type\">\r\n                                                    <option value=\"0\" {$trainer_type[0]}>0 - {$lang_creature['class']}</option>\r\n                                                    <option value=\"1\" {$trainer_type[1]}>1 - {$lang_creature['mounts']}</option>\r\n                                                    <option value=\"2\" {$trainer_type[2]}>2 - {$lang_creature['trade_skill']}</option>\r\n                                                    <option value=\"3\" {$trainer_type[3]}>3 - {$lang_creature['pets']}</option>\r\n                                                </select>\r\n                                            </td>\r\n                                        </tr>\r\n                                        <tr>";
        unset($trainer_type);
        $family = array(0 => "", 1 => "", 2 => "", 3 => "", 4 => "", 5 => "", 6 => "", 7 => "", 8 => "", 9 => "", 11 => "", 12 => "", 13 => "", 14 => "", 15 => "", 16 => "", 17 => "", 18 => "", 19 => "", 20 => "", 21 => "", 22 => "", 23 => "", 24 => "", 25 => "", 26 => "", 27 => "");
        $family[$mob['family']] = " selected=\"selected\" ";
        $output .= "\r\n                                            <td>" . makeinfocell($lang_creature['family'], $lang_creature['family_desc']) . "</td>\r\n                                            <td colspan=\"2\">\r\n                                                <select name=\"family\">\r\n                                                    <option value=\"0\" {$family[0]}>0 - {$lang_creature['other']}</option>\r\n                                                    <option value=\"1\" {$family[1]}>1 - {$lang_creature['wolf']}</option>\r\n                                                    <option value=\"2\" {$family[2]}>2 - {$lang_creature['cat']}</option>\r\n                                                    <option value=\"3\" {$family[3]}>3 - {$lang_creature['spider']}</option>\r\n                                                    <option value=\"4\" {$family[4]}>4 - {$lang_creature['bear']}</option>\r\n                                                    <option value=\"5\" {$family[5]}>5 - {$lang_creature['boar']}</option>\r\n                                                    <option value=\"6\" {$family[6]}>6 - {$lang_creature['crocolisk']}</option>\r\n                                                    <option value=\"7\" {$family[7]}>7 - {$lang_creature['carrion_bird']}</option>\r\n                                                    <option value=\"8\" {$family[8]}>8 - {$lang_creature['crab']}</option>\r\n                                                    <option value=\"9\" {$family[9]}>9 - {$lang_creature['gorilla']}</option>\r\n                                                    <option value=\"11\" {$family[11]}>11 - {$lang_creature['raptor']}</option>\r\n                                                    <option value=\"12\" {$family[12]}>12 - {$lang_creature['tallstrider']}</option>\r\n                                                    <option value=\"13\" {$family[13]}>13 - {$lang_creature['other']}</option>\r\n                                                    <option value=\"14\" {$family[14]}>14 - {$lang_creature['other']}</option>\r\n                                                    <option value=\"15\" {$family[15]}>15 - {$lang_creature['felhunter']}</option>\r\n                                                    <option value=\"16\" {$family[16]}>16 - {$lang_creature['voidwalker']}</option>\r\n                                                    <option value=\"17\" {$family[17]}>17 - {$lang_creature['succubus']}</option>\r\n                                                    <option value=\"18\" {$family[18]}>18 - {$lang_creature['other']}</option>\r\n                                                    <option value=\"19\" {$family[19]}>19 - {$lang_creature['doomguard']}</option>\r\n                                                    <option value=\"20\" {$family[20]}>20 - {$lang_creature['scorpid']}</option>\r\n                                                    <option value=\"21\" {$family[21]}>21 - {$lang_creature['turtle']}</option>\r\n                                                    <option value=\"22\" {$family[22]}>22 - {$lang_creature['scorpid']}</option>\r\n                                                    <option value=\"23\" {$family[23]}>23 - {$lang_creature['imp']}</option>\r\n                                                    <option value=\"24\" {$family[24]}>24 - {$lang_creature['bat']}</option>\r\n                                                    <option value=\"25\" {$family[25]}>25 - {$lang_creature['hyena']}</option>\r\n                                                    <option value=\"26\" {$family[26]}>26 - {$lang_creature['owl']}</option>\r\n                                                    <option value=\"27\" {$family[27]}>27 - {$lang_creature['wind_serpent']}</option>\r\n                                                </select>\r\n                                            </td>\r\n                                        </tr>\r\n                                        <tr class=\"large_bold\">\r\n                                            <td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_creature['loot']}:</td>\r\n                                        </tr>\r\n                                        <tr>\r\n                                            <td>" . makeinfocell($lang_creature['loot_id'], $lang_creature['loot_id_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"lootid\" size=\"10\" maxlength=\"10\" value=\"{$mob['lootid']}\" />\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['skin_loot'], $lang_creature['skin_loot_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"skinloot\" size=\"10\" maxlength=\"10\" value=\"{$mob['skinloot']}\" />\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['pickpocket_loot'], $lang_creature['pickpocket_loot_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"pickpocketloot\" size=\"10\" maxlength=\"10\" value=\"{$mob['pickpocketloot']}\" />\r\n                                            </td>\r\n                                        </tr>\r\n                                        <tr>\r\n                                            <td>" . makeinfocell($lang_creature['min_gold'], $lang_creature['min_gold_desc']) . "</td>\r\n                                            <td colspan=\"2\">\r\n                                                <input type=\"text\" name=\"mingold\" size=\"14\" maxlength=\"30\" value=\"{$mob['mingold']}\" />\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['max_gold'], $lang_creature['max_gold_desc']) . "</td>\r\n                                            <td colspan=\"2\">\r\n                                                <input type=\"text\" name=\"maxgold\" size=\"14\" maxlength=\"30\" value=\"{$mob['maxgold']}\" />\r\n                                            </td>\r\n                                        </tr>";
        unset($family);
        $result1 = $sql->query("SELECT COUNT(*) FROM creature WHERE id = '{$mob['entry']}'");
        $output .= "\r\n                                        <tr>\r\n                                            <td colspan=\"6\">{$lang_creature['creature_swapned']} : " . $sql->result($result1, 0) . " {$lang_creature['times']}.</td>\r\n                                        </tr>\r\n                                    </table>\r\n                                    <br /><br />\r\n                                </div>\r\n                                <div id=\"pane3\">\r\n                                    <br /><br />\r\n                                    <table class=\"lined\" style=\"width: 720px;\">\r\n                                        <tr class=\"large_bold\">\r\n                                            <td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_creature['basic_status']}:</td>\r\n                                        </tr>\r\n                                        <tr>\r\n                                            <td>&nbsp;</td>\r\n                                            <td colspan=\"2\">\r\n                                                &nbsp;\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['speed'], $lang_creature['speed_desc']) . "</td>\r\n                                            <td colspan=\"2\">\r\n                                                <input type=\"text\" name=\"speed_walk\" size=\"8\" maxlength=\"45\" value=\"{$mob['speed_walk']}\" />\r\n                                            </td>\r\n                                        </tr>\r\n                                        <tr class=\"large_bold\">\r\n                                            <td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_creature['damage']}:</td>\r\n                                        </tr>\r\n                                        <tr>\r\n                                            <td>" . makeinfocell($lang_creature['min_damage'], $lang_creature['min_damage_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"mindmg\" size=\"8\" maxlength=\"45\" value=\"{$mob['mindmg']}\" />\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['max_damage'], $lang_creature['max_damage_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"maxdmg\" size=\"8\" maxlength=\"45\" value=\"{$mob['maxdmg']}\" />\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['attack_power'], $lang_creature['attack_power_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"attackpower\" size=\"8\" maxlength=\"10\" value=\"{$mob['attackpower']}\" />\r\n                                            </td>\r\n                                        </tr>\r\n                                        <tr>\r\n                                            <td>" . makeinfocell($lang_creature['min_range_dmg'], $lang_creature['min_range_dmg_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"minrangedmg\" size=\"8\" maxlength=\"45\" value=\"{$mob['minrangedmg']}\" />\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['max_range_dmg'], $lang_creature['max_range_dmg_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"maxrangedmg\" size=\"8\" maxlength=\"45\" value=\"{$mob['maxrangedmg']}\" />\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['ranged_attack_power'], $lang_creature['ranged_attack_power_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"rangedattackpower\" size=\"8\" maxlength=\"10\" value=\"{$mob['rangedattackpower']}\" />\r\n                                            </td>\r\n                                        </tr>\r\n                                        <tr>\r\n                                            <td>" . makeinfocell($lang_creature['attack_time'], $lang_creature['attack_time_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"baseattacktime\" size=\"8\" maxlength=\"4\" value=\"{$mob['baseattacktime']}\" />\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['range_attack_time'], $lang_creature['range_attack_time_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"rangeattacktime\" size=\"8\" maxlength=\"4\" value=\"{$mob['rangeattacktime']}\" />\r\n                                            </td>\r\n                                            <td></td>\r\n                                            <td></td>\r\n                                        </tr>\r\n                                        <tr>\r\n                                            <td></td>\r\n                                            <td colspan=\"2\"></td>";
        $dmgschool = array(0 => "", 1 => "", 2 => "", 3 => "", 4 => "", 5 => "", 6 => "");
        $dmgschool[$mob['dmgschool']] = " selected=\"selected\" ";
        $output .= "\r\n                                            <td>" . makeinfocell($lang_creature['dmgschool'], $lang_creature['dmgschool_desc']) . "</td>\r\n                                            <td colspan=\"2\">\r\n                                                <select name=\"dmgschool\">\r\n                                                    <option value=\"0\" {$dmgschool[0]}>0: {$lang_item['physical_dmg']}</option>\r\n                                                    <option value=\"1\" {$dmgschool[1]}>1: {$lang_item['holy_dmg']}</option>\r\n                                                    <option value=\"2\" {$dmgschool[2]}>2: {$lang_item['fire_dmg']}</option>\r\n                                                    <option value=\"3\" {$dmgschool[3]}>3: {$lang_item['nature_dmg']}</option>\r\n                                                    <option value=\"4\" {$dmgschool[4]}>4: {$lang_item['frost_dmg']}</option>\r\n                                                    <option value=\"5\" {$dmgschool[5]}>5: {$lang_item['shadow_dmg']}</option>\r\n                                                    <option value=\"6\" {$dmgschool[6]}>6: {$lang_item['arcane_dmg']}</option>\r\n                                                </select>\r\n                                            </td>";
        unset($dmgschool);
        $output .= "\r\n                                        </tr>\r\n                                        <tr class=\"large_bold\">\r\n                                            <td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_creature['spells']}:</td>\r\n                                        </tr>\r\n                                        <tr>\r\n                                            <td>" . makeinfocell($lang_creature['spell'] . " 1", $lang_creature['spell_desc']) . "</td>\r\n                                            <td colspan=\"2\">\r\n                                                <input type=\"text\" name=\"spell1\" size=\"14\" maxlength=\"11\" value=\"{$mob['spell1']}\" />\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['spell'] . " 2", $lang_creature['spell_desc']) . "</td>\r\n                                            <td colspan=\"2\">\r\n                                                <input type=\"text\" name=\"spell2\" size=\"14\" maxlength=\"11\" value=\"{$mob['spell2']}\" />\r\n                                            </td>\r\n                                        </tr>\r\n                                        <tr>\r\n                                            <td>" . makeinfocell($lang_creature['spell'] . " 3", $lang_creature['spell_desc']) . "</td>\r\n                                            <td colspan=\"2\">\r\n                                                <input type=\"text\" name=\"spell3\" size=\"14\" maxlength=\"11\" value=\"{$mob['spell3']}\" />\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['spell'] . " 4", $lang_creature['spell_desc']) . "</td>\r\n                                            <td colspan=\"2\">\r\n                                                <input type=\"text\" name=\"spell4\" size=\"14\" maxlength=\"11\" value=\"{$mob['spell4']}\" />\r\n                                            </td>\r\n                                        </tr>\r\n                                        <tr class=\"large_bold\">\r\n                                            <td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_creature['resistances']}:</td>\r\n                                        </tr>\r\n                                        <tr>\r\n                                            <td>" . makeinfocell($lang_creature['resis_holy'], $lang_creature['resis_holy_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"resistance1\" size=\"8\" maxlength=\"10\" value=\"{$mob['resistance1']}\" />\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['resis_fire'], $lang_creature['resis_fire_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"resistance2\" size=\"8\" maxlength=\"10\" value=\"{$mob['resistance2']}\" />\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['resis_nature'], $lang_creature['resis_nature_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"resistance3\" size=\"8\" maxlength=\"10\" value=\"{$mob['resistance3']}\" />\r\n                                            </td>\r\n                                        </tr>\r\n                                        <tr>\r\n                                            <td>" . makeinfocell($lang_creature['resis_frost'], $lang_creature['resis_frost_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"resistance4\" size=\"8\" maxlength=\"10\" value=\"{$mob['resistance4']}\" />\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['resis_shadow'], $lang_creature['resis_shadow_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"resistance5\" size=\"8\" maxlength=\"10\" value=\"{$mob['resistance5']}\" />\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['resis_arcane'], $lang_creature['resis_arcane_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"resistance6\" size=\"8\" maxlength=\"10\" value=\"{$mob['resistance6']}\" />\r\n                                            </td>\r\n                                        </tr>\r\n                                    </table>\r\n                                    <br /><br />\r\n                                </div>\r\n                                <div id=\"pane4\">\r\n                                    <br /><br />\r\n                                    <table class=\"lined\" style=\"width: 720px;\">\r\n                                        <tr class=\"large_bold\">\r\n                                            <td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_creature['models']}:</td>\r\n                                        </tr>\r\n                                        <tr>\r\n                                            <td colspan=\"2\">" . makeinfocell($lang_creature['modelid_A'], $lang_creature['modelid_A_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"modelid1\" size=\"8\" maxlength=\"11\" value=\"{$mob['modelid1']}\" />\r\n                                            </td>\r\n                                            <td colspan=\"2\">" . makeinfocell($lang_creature['modelid_A2'], $lang_creature['modelid_A2_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"modelid2\" size=\"8\" maxlength=\"11\" value=\"{$mob['modelid2']}\" />\r\n                                            </td>\r\n                                        </tr>\r\n                                        <tr>\r\n                                            <td colspan=\"2\">" . makeinfocell($lang_creature['modelid_H'], $lang_creature['modelid_H_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"modelid3\" size=\"8\" maxlength=\"11\" value=\"{$mob['modelid3']}\" />\r\n                                            </td>\r\n                                            <td colspan=\"2\">" . makeinfocell($lang_creature['modelid_H2'], $lang_creature['modelid_H2_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"modelid4\" size=\"8\" maxlength=\"11\" value=\"{$mob['modelid4']}\" />\r\n                                            </td>\r\n                                        </tr>\r\n                                    </table>\r\n                                    <br /><br />";
        $result1 = $sql->query("SELECT * FROM creature_equip_template WHERE entry = '{$mob['equipment_id']}'");
        if ($mobequip = $sql->fetch_assoc($result1)) {
            $output .= "\r\n                                    <br /><br />\r\n                                    <table class=\"lined\" style=\"width: 720px;\">\r\n                                        <tr class=\"large_bold\">\r\n                                            <td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_creature['equipment']}:</td>\r\n                                        </tr>\r\n                                        <tr>\r\n                                            <td>" . makeinfocell($lang_creature['equip_slot'] . " 1", $lang_creature['equip_slot1_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"equipslot1\" size=\"8\" maxlength=\"10\" value=\"{$mobequip['equipentry1']}\" />\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['equip_slot'] . " 2", $lang_creature['equip_slot2_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"equipslot2\" size=\"8\" maxlength=\"10\" value=\"{$mobequip['equipentry2']}\" />\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['equip_slot'] . " 3", $lang_creature['equip_slot3_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"equipslot3\" size=\"8\" maxlength=\"10\" value=\"{$mobequip['equipentry3']}\" />\r\n                                            </td>\r\n                                        </tr>\r\n                                    </table>\r\n                                    <br /><br />\r\n                                </div>";
        } else {
            $output .= "\r\n                                    <br /><br />\r\n                                    <table class=\"lined\" style=\"width: 720px;\">\r\n                                        <tr class=\"large_bold\"><td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_creature['equipment']}:</td></tr>\r\n                                    </table>\r\n                                    <br /><br />\r\n                                </div>";
        }
        $output .= "\r\n                                <div id=\"pane2\">\r\n                                <br /><br />\r\n                                    <table class=\"lined\" style=\"width: 720px;\">\r\n                                        <tr class=\"large_bold\">\r\n                                            <td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_creature['scripts']}:</td>\r\n                                        </tr>\r\n                                        <tr>\r\n                                            <td>" . makeinfocell($lang_creature['ai_name'], $lang_creature['ai_name_desc']) . "</td>\r\n                                            <td colspan=\"2\">\r\n                                                <input type=\"text\" name=\"AIName\" size=\"14\" maxlength=\"128\" value=\"{$mob['AIName']}\" />\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['movement_type'], $lang_creature['movement_type_desc']) . "</td>\r\n                                            <td colspan=\"2\">\r\n                                                <input type=\"text\" name=\"MovementType\" size=\"14\" maxlength=\"24\" value=\"{$mob['MovementType']}\" />\r\n                                            </td>\r\n                                        </tr>\r\n                                        <tr class=\"large_bold\">\r\n                                            <td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_creature['other']}:</td>\r\n                                        </tr>";
        $trainer_class = array(0 => "", 1 => "", 2 => "", 3 => "", 4 => "", 5 => "", 7 => "", 8 => "", 9 => "", 11 => "");
        $trainer_class[$mob['trainer_class']] = " selected=\"selected\" ";
        $output .= "\r\n                                            <td>" . makeinfocell($lang_creature['class'], $lang_creature['class_desc']) . "</td>\r\n                                            <td>\r\n                                                <select name=\"class\">\r\n                                                    <option value=\"0\" {$trainer_class[0]}>0 - {$lang_creature['none']}</option>\r\n                                                    <option value=\"1\" {$trainer_class[1]}>1 - {$lang_id_tab['warrior']}</option>\r\n                                                    <option value=\"2\" {$trainer_class[2]}>2 - {$lang_id_tab['paladin']}</option>\r\n                                                    <option value=\"3\" {$trainer_class[3]}>3 - {$lang_id_tab['hunter']}</option>\r\n                                                    <option value=\"4\" {$trainer_class[4]}>4 - {$lang_id_tab['rogue']}</option>\r\n                                                    <option value=\"5\" {$trainer_class[5]}>5 - {$lang_id_tab['priest']}</option>\r\n                                                    <option value=\"7\" {$trainer_class[7]}>7 - {$lang_id_tab['shaman']}</option>\r\n                                                    <option value=\"8\" {$trainer_class[8]}>8 - {$lang_id_tab['mage']}</option>\r\n                                                    <option value=\"9\" {$trainer_class[9]}>9 - {$lang_id_tab['warlock']}</option>\r\n                                                    <option value=\"11\" {$trainer_class[11]}>11 - {$lang_id_tab['druid']}</option>\r\n                                                </select>\r\n                                            </td>";
        unset($trainer_class);
        $trainer_race = array(0 => "", 1 => "", 2 => "", 3 => "", 4 => "", 5 => "", 6 => "", 7 => "", 8 => "", 10 => "", 11 => "");
        $trainer_race[$mob['trainer_race']] = " selected=\"selected\" ";
        $output .= "\r\n                                            <td>" . makeinfocell($lang_creature['race'], $lang_creature['race_desc']) . "</td>\r\n                                            <td>\r\n                                                <select name=\"race\">\r\n                                                    <option value=\"0\" {$trainer_race[0]}>0 - {$lang_creature['none']}</option>\r\n                                                    <option value=\"1\" {$trainer_race[1]}>1 - {$lang_id_tab['human']}</option>\r\n                                                    <option value=\"2\" {$trainer_race[2]}>2 - {$lang_id_tab['orc']}</option>\r\n                                                    <option value=\"3\" {$trainer_race[3]}>3 - {$lang_id_tab['dwarf']}</option>\r\n                                                    <option value=\"4\" {$trainer_race[4]}>4 - {$lang_id_tab['nightelf']}</option>\r\n                                                    <option value=\"5\" {$trainer_race[5]}>5 - {$lang_id_tab['undead']}</option>\r\n                                                    <option value=\"6\" {$trainer_race[6]}>6 - {$lang_id_tab['tauren']}</option>\r\n                                                    <option value=\"7\" {$trainer_race[7]}>7 - {$lang_id_tab['gnome']}</option>\r\n                                                    <option value=\"8\" {$trainer_race[8]}>8 - {$lang_id_tab['troll']}</option>\r\n                                                    <option value=\"10\" {$trainer_race[10]}>10 - {$lang_id_tab['bloodelf']}</option>\r\n                                                    <option value=\"11\" {$trainer_race[11]}>11 - {$lang_id_tab['draenei']}</option>\r\n                                                </select>\r\n                                            </td>";
        if ($mob['RacialLeader']) {
            $RacialLeader = "checked";
        } else {
            $RacialLeader = "";
        }
        $output .= "\r\n                                            <td>" . makeinfocell($lang_creature['RacialLeader'], $lang_creature['RacialLeader_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"checkbox\" name=\"RacialLeader\" value=\"1\" {$RacialLeader} />\r\n                                            </td>\r\n                                        </tr>\r\n                                        <tr>\r\n                                            <td>" . makeinfocell($lang_creature['trainer_spell'], $lang_creature['trainer_spell_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"trainer_spell\" size=\"14\" maxlength=\"11\" value=\"{$mob['trainer_spell']}\" />\r\n                                            </td>";
        unset($trainer_race);
        $InhabitType = array(0 => "", 1 => "", 2 => "", 3 => "");
        $InhabitType[$mob['InhabitType']] = " selected=\"selected\" ";
        $output .= "\r\n                                            <td>" . makeinfocell($lang_creature['inhabit_type'], $lang_creature['inhabit_type_desc']) . "</td>\r\n                                            <td>\r\n                                                <select name=\"InhabitType\">\r\n                                                    <option value=\"0\" {$InhabitType[0]}>0 - {$lang_creature['none']}</option>\r\n                                                    <option value=\"1\" {$InhabitType[1]}>1 - {$lang_creature['walk']}</option>\r\n                                                    <option value=\"2\" {$InhabitType[2]}>2 - {$lang_creature['swim']}</option>\r\n                                                    <option value=\"3\" {$InhabitType[3]}>3 - {$lang_creature['both']}</option>\r\n                                                </select>\r\n                                            </td>";
        unset($InhabitType);
        $output .= "\r\n                                            <td>" . makeinfocell($lang_creature['flags_extra'], $lang_creature['flags_extra_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"flags_extra\" size=\"8\" maxlength=\"11\" value=\"{$mob['flags_extra']}\" />\r\n                                            </td>\r\n                                        </tr>\r\n                                        <tr>\r\n                                            <td>" . makeinfocell($lang_creature['unit_flags'], $lang_creature['flags_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"unit_flags\" size=\"8\" maxlength=\"11\" value=\"{$mob['unit_flags']}\" />\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['dynamic_flags'], $lang_creature['dynamic_flags_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"dynamicflags\" size=\"8\" maxlength=\"11\" value=\"{$mob['dynamicflags']}\" />\r\n                                            </td>\r\n                                            <td>" . makeinfocell($lang_creature['flag_1'], $lang_creature['flag_1_desc']) . "</td>\r\n                                            <td>\r\n                                                <input type=\"text\" name=\"type_flags\" size=\"8\" maxlength=\"11\" value=\"{$mob['type_flags']}\" />\r\n                                            </td>\r\n                                        </tr>\r\n                                        </table>\r\n                                        <br /><br />\r\n                                    </div>";
        /*****************
           /  LOCALES
           *****************/
        if ($locales_search_option != 0) {
            if ($do_insert) {
                $result_loc = $sql->query("SELECT '' as `name_loc1`, '' as `name_loc2`, '' as `name_loc3`, '' as `name_loc4`, '' as `name_loc5`, '' as `name_loc6`, '' as `name_loc7`, '' as `name_loc8`, '' as `subname_loc1`, '' as `subname_loc2`, '' as `subname_loc3`, '' as `subname_loc4`, '' as `subname_loc5`, '' as `subname_loc6`, '' as `subname_loc7`, '' as `subname_loc8`");
            } else {
                // update
                $result_loc = $sql->query("SELECT `name_loc1`, `name_loc2`, `name_loc3`, `name_loc4`, `name_loc5`, `name_loc6`, `name_loc7`, `name_loc8`, `subname_loc1`, `subname_loc2`, `subname_loc3`, `subname_loc4`, `subname_loc5`, `subname_loc6`, `subname_loc7`, `subname_loc8` FROM `locales_creature` WHERE `entry` = '{$entry}'");
            }
            $loc = $sql->fetch_assoc($result_loc);
            $output .= "\r\n                                    <div id=\"pane11\">\r\n                                        <br /><br />\r\n                                        <table class=\"lined\" style=\"width: 720px;\">\r\n                                            <tr class=\"large_bold\">\r\n                                                <td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_global['language_1']}:</td>\r\n                                            </tr>\r\n                                            <tr>\r\n                                                <td>" . makeinfocell($lang_creature['name'], $lang_creature['name_desc']) . "</td>\r\n                                                <td colspan=\"2\">\r\n                                                    <input type=\"text\" name=\"name_loc1\" size=\"24\" maxlength=\"128\" value=\"{$loc['name_loc1']}\" />\r\n                                                </td>\r\n                                                <td>" . makeinfocell($lang_creature['sub_name'], $lang_creature['sub_name_desc']) . "</td>\r\n                                                <td colspan=\"2\">\r\n                                                    <input type=\"text\" name=\"subname_loc1\" size=\"24\" maxlength=\"64\" value=\"{$loc['subname_loc1']}\" />\r\n                                                </td>\r\n                                            </tr>\r\n                                            <tr class=\"large_bold\">\r\n                                                <td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_global['language_2']}:</td>\r\n                                            </tr>\r\n                                            <tr>\r\n                                                <td>" . makeinfocell($lang_creature['name'], $lang_creature['name_desc']) . "</td>\r\n                                                <td colspan=\"2\">\r\n                                                    <input type=\"text\" name=\"name_loc2\" size=\"24\" maxlength=\"64\" value=\"{$loc['name_loc2']}\" />\r\n                                                </td>\r\n                                                <td>" . makeinfocell($lang_creature['sub_name'], $lang_creature['sub_name_desc']) . "</td>\r\n                                                <td colspan=\"2\">\r\n                                                    <input type=\"text\" name=\"subname_loc2\" size=\"24\" maxlength=\"64\" value=\"{$loc['subname_loc2']}\" />\r\n                                                </td>\r\n                                            </tr>\r\n                                            <tr class=\"large_bold\">\r\n                                                <td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_global['language_3']}:</td>\r\n                                            </tr>\r\n                                            <tr>\r\n                                                <td>" . makeinfocell($lang_creature['name'], $lang_creature['name_desc']) . "</td>\r\n                                                <td colspan=\"2\">\r\n                                                    <input type=\"text\" name=\"name_loc3\" size=\"24\" maxlength=\"64\" value=\"{$loc['name_loc3']}\" />\r\n                                                </td>\r\n                                                <td>" . makeinfocell($lang_creature['sub_name'], $lang_creature['sub_name_desc']) . "</td>\r\n                                                <td colspan=\"2\">\r\n                                                    <input type=\"text\" name=\"subname_loc3\" size=\"24\" maxlength=\"64\" value=\"{$loc['subname_loc3']}\" />\r\n                                                </td>\r\n                                            </tr>\r\n                                            <tr class=\"large_bold\">\r\n                                                <td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_global['language_4']}:</td>\r\n                                            </tr>\r\n                                            <tr>\r\n                                                <td>" . makeinfocell($lang_creature['name'], $lang_creature['name_desc']) . "</td>\r\n                                                <td colspan=\"2\">\r\n                                                    <input type=\"text\" name=\"name_loc4\" size=\"24\" maxlength=\"64\" value=\"{$loc['name_loc4']}\" />\r\n                                                </td>\r\n                                                <td>" . makeinfocell($lang_creature['sub_name'], $lang_creature['sub_name_desc']) . "</td>\r\n                                                <td colspan=\"2\">\r\n                                                    <input type=\"text\" name=\"subname_loc4\" size=\"24\" maxlength=\"64\" value=\"{$loc['subname_loc4']}\" />\r\n                                                </td>\r\n                                            </tr>\r\n                                            <tr class=\"large_bold\">\r\n                                                <td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_global['language_5']}:</td>\r\n                                            </tr>\r\n                                            <tr>\r\n                                                <td>" . makeinfocell($lang_creature['name'], $lang_creature['name_desc']) . "</td>\r\n                                                <td colspan=\"2\">\r\n                                                    <input type=\"text\" name=\"name_loc5\" size=\"24\" maxlength=\"64\" value=\"{$loc['name_loc5']}\" />\r\n                                                </td>\r\n                                                <td>" . makeinfocell($lang_creature['sub_name'], $lang_creature['sub_name_desc']) . "</td>\r\n                                                <td colspan=\"2\">\r\n                                                    <input type=\"text\" name=\"subname_loc5\" size=\"24\" maxlength=\"64\" value=\"{$loc['subname_loc5']}\" />\r\n                                                </td>\r\n                                            </tr>\r\n                                            <tr class=\"large_bold\">\r\n                                                <td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_global['language_6']}:</td>\r\n                                            </tr>\r\n                                            <tr>\r\n                                                <td>" . makeinfocell($lang_creature['name'], $lang_creature['name_desc']) . "</td>\r\n                                                <td colspan=\"2\">\r\n                                                    <input type=\"text\" name=\"name_loc6\" size=\"24\" maxlength=\"64\" value=\"{$loc['name_loc6']}\" />\r\n                                                </td>\r\n                                                <td>" . makeinfocell($lang_creature['sub_name'], $lang_creature['sub_name_desc']) . "</td>\r\n                                                <td colspan=\"2\">\r\n                                                    <input type=\"text\" name=\"subname_loc6\" size=\"24\" maxlength=\"64\" value=\"{$loc['subname_loc6']}\" />\r\n                                                </td>\r\n                                            </tr>\r\n                                            <tr class=\"large_bold\">\r\n                                                <td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_global['language_7']}:</td>\r\n                                            </tr>\r\n                                            <tr>\r\n                                                <td>" . makeinfocell($lang_creature['name'], $lang_creature['name_desc']) . "</td>\r\n                                                <td colspan=\"2\">\r\n                                                    <input type=\"text\" name=\"name_loc7\" size=\"24\" maxlength=\"64\" value=\"{$loc['name_loc7']}\" />\r\n                                                </td>\r\n                                                <td>" . makeinfocell($lang_creature['sub_name'], $lang_creature['sub_name_desc']) . "</td>\r\n                                                <td colspan=\"2\">\r\n                                                    <input type=\"text\" name=\"subname_loc7\" size=\"24\" maxlength=\"64\" value=\"{$loc['subname_loc7']}\" />\r\n                                                </td>\r\n                                            </tr>\r\n                                            <tr class=\"large_bold\">\r\n                                                <td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_global['language_8']}:</td>\r\n                                            </tr>\r\n                                            <tr>\r\n                                                <td>" . makeinfocell($lang_creature['name'], $lang_creature['name_desc']) . "</td>\r\n                                                <td colspan=\"2\">\r\n                                                    <input type=\"text\" name=\"name_loc8\" size=\"24\" maxlength=\"64\" value=\"{$loc['name_loc8']}\" />\r\n                                                </td>\r\n                                                <td>" . makeinfocell($lang_creature['sub_name'], $lang_creature['sub_name_desc']) . "</td>\r\n                                                <td colspan=\"2\">\r\n                                                    <input type=\"text\" name=\"subname_loc8\" size=\"24\" maxlength=\"64\" value=\"{$loc['subname_loc8']}\" />\r\n                                                </td>\r\n                                            </tr>\r\n                                        </table>\r\n                                        <br /><br />\r\n                                    </div>";
        }
        if ($mob['lootid']) {
            $output .= "\r\n                                    <div id=\"pane5\">\r\n                                        <br /><br />\r\n                                        <table class=\"lined\" style=\"width: 720px;\">\r\n                                            <tr class=\"large_bold\">\r\n                                                <td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_creature['loot_tmpl_id']}: {$mob['lootid']}</td>\r\n                                            </tr>\r\n                                            <tr>\r\n                                                <td colspan=\"6\">";
            $cel_counter = 0;
            $row_flag = 0;
            $output .= "\r\n                                                    <table class=\"hidden\" align=\"center\">\r\n                                                        <tr>";
            $result1 = $sql->query("SELECT item,ChanceOrQuestChance,`groupid`,mincountOrRef,maxcount, lootcondition, condition_value1,condition_value2 FROM creature_loot_template WHERE entry = {$mob['lootid']} ORDER BY ChanceOrQuestChance DESC");
            while ($item = $sql->fetch_row($result1)) {
                $cel_counter++;
                $tooltip = get_item_name($item[0]) . " ({$item['0']})<br />{$lang_creature['drop_chance']}: {$item['1']}%<br />{$lang_creature['quest_drop_chance']}: {$item['2']}%<br />{$lang_creature['drop_chance']}: {$item['3']}-{$item['4']}<br />{$lang_creature['lootcondition']}: {$item['5']}<br />{$lang_creature['condition_value1']}: {$item['6']}<br />{$lang_creature['condition_value2']}: {$item['7']}";
                $output .= "\r\n                                                            <td>";
                $output .= maketooltip("<img src=\"" . get_item_icon($item[0]) . "\" class=\"icon_border\" alt=\"\" />", "{$item_datasite}{$item['0']}", $tooltip, "item_tooltip");
                $output .= "\r\n                                                                <br /><input type=\"checkbox\" name=\"del_loot_items[]\" value=\"{$item['0']}\" />\r\n                                                            </td>";
                if ($cel_counter >= 14) {
                    $cel_counter = 0;
                    $output .= "\r\n                                                        </tr>\r\n                                                        <tr>";
                    $row_flag++;
                }
            }
            if ($row_flag) {
                $output .= "\r\n                                                            <td colspan=\"" . (16 - $cel_counter) . "\"></td>";
            }
            $output .= "\r\n                                                        </tr>\r\n                                                    </table>\r\n                                                </td>\r\n                                            </tr>\r\n                                            <tr class=\"large_bold\">\r\n                                                <td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_creature['add_items_to_templ']}:</td>\r\n                                            </tr>\r\n                                            <tr>\r\n                                                <td>" . makeinfocell($lang_creature['loot_item_id'], $lang_creature['loot_item_id_desc']) . "</td>\r\n                                                <td>\r\n                                                    <input type=\"text\" name=\"item\" size=\"8\" maxlength=\"10\" value=\"\" />\r\n                                                </td>\r\n                                                <td>" . makeinfocell($lang_creature['loot_drop_chance'], $lang_creature['loot_drop_chance_desc']) . "</td>\r\n                                                <td>\r\n                                                    <input type=\"text\" name=\"ChanceOrQuestChance\" size=\"8\" maxlength=\"11\" value=\"0\" />\r\n                                                </td>\r\n                                                <td>" . makeinfocell($lang_creature['loot_quest_drop_chance'], $lang_creature['loot_quest_drop_chance_desc']) . "</td>\r\n                                                <td>\r\n                                                    <input type=\"text\" name=\"groupid\" size=\"8\" maxlength=\"10\" value=\"0\" />\r\n                                                </td>\r\n                                            </tr>\r\n                                            <tr>\r\n                                                <td>" . makeinfocell($lang_creature['min_count'], $lang_creature['min_count_desc']) . "</td>\r\n                                                <td>\r\n                                                    <input type=\"text\" name=\"mincountOrRef\" size=\"8\" maxlength=\"3\" value=\"1\" />\r\n                                                </td>\r\n                                                <td>" . makeinfocell($lang_creature['max_count'], $lang_creature['max_count_desc']) . "</td>\r\n                                                <td>\r\n                                                    <input type=\"text\" name=\"maxcount\" size=\"8\" maxlength=\"3\" value=\"1\" />\r\n                                                </td>\r\n                                            </tr>\r\n                                            <tr>\r\n                                                <td>" . makeinfocell($lang_creature['lootcondition'], $lang_creature['lootcondition_desc']) . "</td>\r\n                                                <td>\r\n                                                    <input type=\"text\" name=\"lootcondition\" size=\"8\" maxlength=\"3\" value=\"0\" />\r\n                                                </td>\r\n                                                <td>" . makeinfocell($lang_creature['condition_value1'], $lang_creature['condition_value1_desc']) . "</td>\r\n                                                <td>\r\n                                                    <input type=\"text\" name=\"condition_value1\" size=\"8\" maxlength=\"3\" value=\"0\" />\r\n                                                </td>\r\n                                                <td>" . makeinfocell($lang_creature['condition_value2'], $lang_creature['condition_value2_desc']) . "</td>\r\n                                                <td>\r\n                                                    <input type=\"text\" name=\"condition_value2\" size=\"8\" maxlength=\"3\" value=\"0\" />\r\n                                                </td>\r\n                                            </tr>\r\n                                        </table>\r\n                                        <br />{$lang_creature['check_to_delete']}<br /><br />\r\n                                    </div>";
        }
        if ($quest_flag) {
            $output .= "\r\n                                    <div id=\"pane6\">\r\n                                        <br /><br />\r\n                                        <table class=\"lined\" style=\"width: 720px;\">\r\n                                            <tr class=\"large_bold\">\r\n                                                <td colspan=\"2\" class=\"hidden\" align=\"left\">{$lang_creature['start_quests']}:</td>\r\n                                            </tr>";
            $deplang = get_lang_id();
            $result1 = $sql->query("SELECT quest FROM creature_questrelation WHERE id = {$mob['entry']}");
            while ($quest = $sql->fetch_row($result1)) {
                $query1 = $sql->query("SELECT QuestLevel,IFNULL(" . ($deplang != 0 ? "title_loc{$deplang}" : "NULL") . ",`title`) as title FROM quest_template LEFT JOIN locales_quest ON quest_template.entry = locales_quest.entry WHERE quest_template.entry ='{$quest['0']}'");
                $quest_templ = $sql->fetch_row($query1);
                $output .= "\r\n                                            <tr>\r\n                                                <td width=\"5%\">\r\n                                                    <input type=\"checkbox\" name=\"del_questrelation[]\" value=\"{$quest['0']}\" />\r\n                                                </td>\r\n                                                <td width=\"95%\" align=\"left\">\r\n                                                    <a class=\"tooltip\" href=\"{$quest_datasite}{$quest['0']}\" target=\"_blank\">({$quest_templ[0]}) {$quest_templ['1']}</a>\r\n                                                </td>\r\n                                            </tr>";
            }
            $output .= "\r\n                                            <tr class=\"large_bold\" align=\"left\">\r\n                                                <td colspan=\"2\" class=\"hidden\">{$lang_creature['add_starts_quests']}:</td>\r\n                                            </tr>\r\n                                            <tr>\r\n                                                <td colspan=\"2\" align=\"left\">" . makeinfocell($lang_creature['quest_id'], $lang_creature['quest_id_desc']) . " :\r\n                                                    <input type=\"text\" name=\"questrelation\" size=\"8\" maxlength=\"8\" value=\"\" />\r\n                                                </td>\r\n                                            </tr>\r\n                                            <tr class=\"large_bold\">\r\n                                                <td colspan=\"2\" class=\"hidden\" align=\"left\">{$lang_creature['ends_quests']}:</td>\r\n                                            </tr>";
            $result1 = $sql->query("SELECT quest FROM creature_involvedrelation WHERE id = {$mob['entry']}");
            while ($quest = $sql->fetch_row($result1)) {
                $query1 = $sql->query("SELECT QuestLevel,IFNULL(" . ($deplang != 0 ? "title_loc{$deplang}" : "NULL") . ",`title`) as title FROM quest_template LEFT JOIN locales_quest ON quest_template.entry = locales_quest.entry WHERE quest_template.entry ='{$quest['0']}'");
                $quest_templ = $sql->fetch_row($query1);
                $output .= "\r\n                                            <tr>\r\n                                                <td width=\"5%\">\r\n                                                    <input type=\"checkbox\" name=\"del_involvedrelation[]\" value=\"{$quest['0']}\" />\r\n                                                </td>\r\n                                                <td width=\"95%\" align=\"left\">\r\n                                                    <a class=\"tooltip\" href=\"{$quest_datasite}{$quest['0']}\" target=\"_blank\">({$quest_templ[0]}) {$quest_templ['1']}</a>\r\n                                                </td>\r\n                                            </tr>";
            }
            $output .= "\r\n                                            <tr class=\"large_bold\" align=\"left\">\r\n                                                <td colspan=\"2\" class=\"hidden\">{$lang_creature['add_ends_quests']}:</td>\r\n                                            </tr>\r\n                                            <tr>\r\n                                                <td colspan=\"2\" align=\"left\">" . makeinfocell($lang_creature['quest_id'], $lang_creature['quest_id_desc']) . " :\r\n                                                    <input type=\"text\" name=\"involvedrelation\" size=\"8\" maxlength=\"8\" value=\"\" />\r\n                                                </td>\r\n                                            </tr>\r\n                                            </table>\r\n                                            <br />{$lang_creature['check_to_delete']}<br /><br />\r\n                                        </div>";
        }
        if ($vendor_flag) {
            $output .= "\r\n                                        <div id=\"pane7\">\r\n                                            <br /><br />\r\n                                            <table class=\"lined\" style=\"width: 720px;\">\r\n                                                <tr class=\"large_bold\">\r\n                                                    <td colspan=\"8\" class=\"hidden\" align=\"left\">{$lang_creature['sells']}:</td>\r\n                                                </tr>\r\n                                                <tr>\r\n                                                </tr>\r\n                                                    <td colspan=\"8\">";
            $cel_counter = 0;
            $row_flag = 0;
            $output .= "\r\n                                                        <table class=\"hidden\" align=\"center\">\r\n                                                            <tr>";
            $result1 = $sql->query("SELECT item, maxcount, incrtime, ExtendedCost FROM npc_vendor WHERE entry = {$mob['entry']}");
            while ($item = $sql->fetch_row($result1)) {
                $cel_counter++;
                if (!$item[1]) {
                    $count = "{$lang_creature['unlimited']}";
                } else {
                    $count = $item[1];
                }
                $tooltip = get_item_name($item[0]) . "<br />{$lang_creature['count']} : {$count}<br />{$lang_creature['vendor_incrtime']} : {$item['2']}";
                $output .= "\r\n                                                                <td>";
                $output .= maketooltip("<img src=\"" . get_item_icon($item[0]) . "\" class=\"icon_border\" alt=\"\" />", "{$item_datasite}{$item['0']}", $tooltip, "item_tooltip");
                $output .= "\r\n                                                                    <br />\r\n                                                                    <input type=\"checkbox\" name=\"del_vendor_item[]\" value=\"{$item['0']}\" />\r\n                                                                </td>";
                if ($cel_counter >= 14) {
                    $cel_counter = 0;
                    $output .= "\r\n                                                            </tr>\r\n                                                            <tr>";
                    $row_flag++;
                }
            }
            if ($row_flag) {
                $output .= "<td colspan=\"" . (16 - $cel_counter) . "\"></td>";
            }
            $output .= "\r\n                                                            </tr>\r\n                                                        </table>\r\n                                                    </td>\r\n                                                </tr>\r\n                                                <tr class=\"large_bold\"><td colspan=\"8\" class=\"hidden\" align=\"left\">{$lang_creature['add_items_to_vendor']}:</td></tr>\r\n                                                <tr>\r\n                                                    <td>" . makeinfocell($lang_creature['vendor_item_id'], $lang_creature['vendor_item_id_desc']) . "</td>\r\n                                                    <td>\r\n                                                        <input type=\"text\" name=\"vendor_item\" size=\"8\" maxlength=\"10\" value=\"\" />\r\n                                                    </td>\r\n                                                    <td>" . makeinfocell($lang_creature['vendor_max_count'], $lang_creature['vendor_max_count_desc']) . "</td>\r\n                                                    <td>\r\n                                                        <input type=\"text\" name=\"vendor_maxcount\" size=\"8\" maxlength=\"3\" value=\"0\" />\r\n                                                    </td>\r\n                                                    <td>" . makeinfocell($lang_creature['vendor_incrtime'], $lang_creature['vendor_incrtime_desc']) . "</td>\r\n                                                    <td>\r\n                                                        <input type=\"text\" name=\"vendor_incrtime\" size=\"8\" maxlength=\"10\" value=\"0\" />\r\n                                                    </td>\r\n                                                    <td>" . makeinfocell($lang_creature['vendor_extended_cost'], $lang_creature['vendor_extended_cost_desc']) . "</td>\r\n                                                    <td>\r\n                                                        <input type=\"text\" name=\"vendor_extended_cost\" size=\"8\" maxlength=\"10\" value=\"0\" />\r\n                                                    </td>\r\n                                                </tr>\r\n                                            </table><br />{$lang_creature['check_to_delete']}<br /><br />\r\n                                        </div>";
        }
        if ($trainer_flag) {
            $output .= "\r\n                                        <div id=\"pane8\">\r\n                                            <br /><br />\r\n                                            <table class=\"lined\" style=\"width: 720px;\">\r\n                                                <tr class=\"large_bold\">\r\n                                                    <td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_creature['trains']}:</td>\r\n                                                </tr>\r\n                                                <tr>\r\n                                                    <td colspan=\"6\">";
            $cel_counter = 0;
            $row_flag = 0;
            $output .= "\r\n                                                        <table class=\"hidden\" align=\"center\">\r\n                                                            <tr>";
            $result1 = $sql->query("SELECT spell, spellcost, reqskill, reqskillvalue, reqlevel FROM npc_trainer WHERE entry = {$mob['entry']} ORDER BY reqlevel");
            while ($spell = $sql->fetch_row($result1)) {
                $cel_counter++;
                $tooltip = "{$lang_creature['spell_id']} : {$spell['0']}<br />{$lang_creature['cost']} :  {$spell['1']}(c)<br />{$lang_creature['req_skill']} : {$spell['2']}<br />{$lang_creature['req_skill_lvl']} :  {$spell['3']}<br />{$lang_creature['req_level']} {$spell['4']}";
                $output .= "\r\n                                                                <td>";
                $output .= maketooltip($spell[0], "{$spell_datasite}{$spell['0']}", $tooltip, "info_tooltip");
                $output .= "\r\n                                                                    <br /><input type=\"checkbox\" name=\"del_trainer_spell[]\" value=\"{$spell['0']}\" />\r\n                                                                </td>";
                if ($cel_counter >= 16) {
                    $cel_counter = 0;
                    $output .= "\r\n                                                            </tr>\r\n                                                            <tr>";
                    $row_flag++;
                }
            }
            if ($row_flag) {
                $output .= "\r\n                                                                <td colspan=\"" . (16 - $cel_counter) . "\"></td>";
            }
            $output .= "\r\n                                                            </tr>\r\n                                                        </table>\r\n                                                    </td>\r\n                                                </tr>\r\n                                                <tr class=\"large_bold\"><td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_creature['add_spell_to_trainer']}:</td></tr>\r\n                                                <tr>\r\n                                                    <td>" . makeinfocell($lang_creature['train_spell_id'], $lang_creature['train_spell_id_desc']) . "</td>\r\n                                                    <td colspan=\"3\">\r\n                                                        <input type=\"text\" name=\"trainer_spell\" size=\"40\" maxlength=\"10\" value=\"\" />\r\n                                                    </td>\r\n                                                    <td>" . makeinfocell($lang_creature['train_cost'], $lang_creature['train_cost_desc']) . "</td>\r\n                                                    <td>\r\n                                                        <input type=\"text\" name=\"spellcost\" size=\"8\" maxlength=\"10\" value=\"0\" />\r\n                                                    </td>\r\n                                                </tr>\r\n                                                <tr>\r\n                                                    <td>" . makeinfocell($lang_creature['req_skill'], $lang_creature['req_skill_desc']) . "</td>\r\n                                                    <td>\r\n                                                        <input type=\"text\" name=\"reqskill\" size=\"8\" maxlength=\"10\" value=\"0\" />\r\n                                                    </td>\r\n                                                    <td>" . makeinfocell($lang_creature['req_skill_value'], $lang_creature['req_skill_value_desc']) . "</td>\r\n                                                    <td>\r\n                                                        <input type=\"text\" name=\"reqskillvalue\" size=\"8\" maxlength=\"10\" value=\"0\" />\r\n                                                    </td>\r\n                                                    <td>" . makeinfocell($lang_creature['req_level'], $lang_creature['req_level_desc']) . "</td>\r\n                                                    <td>\r\n                                                        <input type=\"text\" name=\"reqlevel\" size=\"8\" maxlength=\"10\" value=\"0\" />\r\n                                                    </td>\r\n                                                </tr>\r\n                                            </table>\r\n                                            <br />{$lang_creature['check_to_delete']}<br /><br />\r\n                                        </div>";
        }
        if ($mob['skinloot']) {
            $output .= "\r\n                                        <div id=\"pane9\">\r\n                                            <br /><br />\r\n                                            <table class=\"lined\" style=\"width: 720px;\">\r\n                                                <tr class=\"large_bold\">\r\n                                                    <td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_creature['skinning_loot_tmpl_id']}: {$mob['skinloot']}</td>\r\n                                                </tr>\r\n                                                <tr>\r\n                                                    <td colspan=\"6\">";
            $cel_counter = 0;
            $row_flag = 0;
            $output .= "\r\n                                                        <table class=\"hidden\" align=\"center\">\r\n                                                            <tr>";
            $result1 = $sql->query("SELECT item,ChanceOrQuestChance,`groupid`,mincountOrRef,maxcount, lootcondition, condition_value1, condition_value2 FROM skinning_loot_template WHERE entry = {$mob['skinloot']} ORDER BY ChanceOrQuestChance DESC");
            while ($item = $sql->fetch_row($result1)) {
                $cel_counter++;
                $tooltip = get_item_name($item[0]) . " ({$item['0']})<br />{$lang_creature['drop_chance']}: {$item['1']}%<br />{$lang_creature['quest_drop_chance']}: {$item['2']}%<br />{$lang_creature['drop_chance']}: {$item['3']}-{$item['4']}<br />{$lang_creature['lootcondition']}: {$item['5']}<br />{$lang_creature['condition_value1']}: {$item['6']}<br />{$lang_creature['condition_value2']}: {$item['7']}";
                $output .= "\r\n                                                                <td>";
                $output .= maketooltip("<img src=\"" . get_item_icon($item[0]) . "\" class=\"icon_border\" alt=\"\" />", "{$item_datasite}{$item['0']}", $tooltip, "item_tooltip");
                $output .= "\r\n                                                                    <br /><input type=\"checkbox\" name=\"del_skin_items[]\" value=\"{$item['0']}\" />\r\n                                                                </td>";
                if ($cel_counter >= 16) {
                    $cel_counter = 0;
                    $output .= "\r\n                                                            </tr>\r\n                                                            <tr>";
                    $row_flag++;
                }
            }
            if ($row_flag) {
                $output .= "\r\n                                                                <td colspan=\"" . (16 - $cel_counter) . "\"></td>";
            }
            $output .= "\r\n                                                            </tr>\r\n                                                        </table>\r\n                                                    </td>\r\n                                                </tr>\r\n                                                <tr class=\"large_bold\"><td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_creature['add_items_to_templ']}:</td></tr>\r\n                                                <tr>\r\n                                                    <td>" . makeinfocell($lang_creature['loot_item_id'], $lang_creature['loot_item_id_desc']) . "</td>\r\n                                                    <td>\r\n                                                        <input type=\"text\" name=\"skin_item\" size=\"8\" maxlength=\"10\" value=\"\" />\r\n                                                    </td>\r\n                                                    <td>" . makeinfocell($lang_creature['loot_drop_chance'], $lang_creature['loot_drop_chance_desc']) . "</td>\r\n                                                    <td>\r\n                                                        <input type=\"text\" name=\"skin_ChanceOrQuestChance\" size=\"8\" maxlength=\"11\" value=\"0\" />\r\n                                                    </td>\r\n                                                    <td>" . makeinfocell($lang_creature['loot_quest_drop_chance'], $lang_creature['loot_quest_drop_chance_desc']) . "</td>\r\n                                                    <td>\r\n                                                        <input type=\"text\" name=\"skin_groupid\" size=\"8\" maxlength=\"10\" value=\"0\" />\r\n                                                    </td>\r\n                                                </tr>\r\n                                                <tr>\r\n                                                    <td>" . makeinfocell($lang_creature['min_count'], $lang_creature['min_count_desc']) . "</td>\r\n                                                    <td>\r\n                                                        <input type=\"text\" name=\"skin_mincountOrRef\" size=\"8\" maxlength=\"3\" value=\"1\" />\r\n                                                    </td>\r\n                                                    <td>" . makeinfocell($lang_creature['max_count'], $lang_creature['max_count_desc']) . "</td>\r\n                                                    <td>\r\n                                                        <input type=\"text\" name=\"skin_maxcount\" size=\"8\" maxlength=\"3\" value=\"1\" />\r\n                                                    </td>\r\n                                                </tr>\r\n                                                <tr>\r\n                                                    <td>" . makeinfocell($lang_creature['lootcondition'], $lang_creature['lootcondition_desc']) . "</td>\r\n                                                    <td>\r\n                                                        <input type=\"text\" name=\"skin_lootcondition\" size=\"8\" maxlength=\"3\" value=\"0\" />\r\n                                                    </td>\r\n                                                    <td>" . makeinfocell($lang_creature['condition_value1'], $lang_creature['condition_value1_desc']) . "</td>\r\n                                                    <td>\r\n                                                        <input type=\"text\" name=\"skin_condition_value1\" size=\"8\" maxlength=\"3\" value=\"0\" />\r\n                                                    </td>\r\n                                                    <td>" . makeinfocell($lang_creature['condition_value2'], $lang_creature['condition_value2_desc']) . "</td>\r\n                                                    <td>\r\n                                                        <input type=\"text\" name=\"skin_condition_value2\" size=\"8\" maxlength=\"3\" value=\"0\" />\r\n                                                    </td>\r\n                                                </tr>\r\n                                            </table>\r\n                                            <br />{$lang_creature['check_to_delete']}<br /><br />\r\n                                        </div>";
        }
        if ($mob['pickpocketloot']) {
            $output .= "\r\n                                        <div id=\"pane10\">\r\n                                            <br /><br />\r\n                                            <table class=\"lined\" style=\"width: 720px;\">\r\n                                                <tr class=\"large_bold\">\r\n                                                    <td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_creature['pickpocketloot_tmpl_id']}: {$mob['pickpocketloot']}</td>\r\n                                                </tr>\r\n                                                <tr>\r\n                                                    <td colspan=\"6\">";
            $cel_counter = 0;
            $row_flag = 0;
            $output .= "\r\n                                                        <table class=\"hidden\" align=\"center\">\r\n                                                            <tr>";
            $result1 = $sql->query("SELECT item,ChanceOrQuestChance,`groupid`,mincountOrRef,maxcount, lootcondition, condition_value1, condition_value2 FROM pickpocketing_loot_template WHERE entry = {$mob['pickpocketloot']} ORDER BY ChanceOrQuestChance DESC");
            while ($item = $sql->fetch_row($result1)) {
                $cel_counter++;
                $tooltip = get_item_name($item[0]) . " ({$item['0']})<br />{$lang_creature['drop_chance']}: {$item['1']}%<br />{$lang_creature['quest_drop_chance']}: {$item['2']}%<br />{$lang_creature['drop_chance']}: {$item['3']}-{$item['4']}<br />{$lang_creature['lootcondition']}: {$item['5']}<br />{$lang_creature['condition_value1']}: {$item['6']}<br />{$lang_creature['condition_value2']}: {$item['7']}";
                $output .= "\r\n                                                                <td>";
                $output .= maketooltip("<img src=\"" . get_item_icon($item[0]) . "\" class=\"icon_border\" alt=\"\" />", "{$item_datasite}{$item['0']}", $tooltip, "item_tooltip");
                $output .= "\r\n                                                                    <br /><input type=\"checkbox\" name=\"del_pp_items[]\" value=\"{$item['0']}\" />\r\n                                                                </td>";
                if ($cel_counter >= 16) {
                    $cel_counter = 0;
                    $output .= "\r\n                                                            </tr>\r\n                                                            <tr>";
                    $row_flag++;
                }
            }
            if ($row_flag) {
                $output .= "<td colspan=\"" . (16 - $cel_counter) . "\"></td>";
            }
            $output .= "\r\n                                                            </tr>\r\n                                                        </table>\r\n                                                    </td>\r\n                                                </tr>\r\n                                                <tr class=\"large_bold\"><td colspan=\"6\" class=\"hidden\" align=\"left\">{$lang_creature['add_items_to_templ']}:</td></tr>\r\n                                                <tr>\r\n                                                    <td>" . makeinfocell($lang_creature['loot_item_id'], $lang_creature['loot_item_id_desc']) . "</td>\r\n                                                    <td>\r\n                                                        <input type=\"text\" name=\"pp_item\" size=\"8\" maxlength=\"10\" value=\"\" />\r\n                                                    </td>\r\n                                                    <td>" . makeinfocell($lang_creature['loot_drop_chance'], $lang_creature['loot_drop_chance_desc']) . "</td>\r\n                                                    <td>\r\n                                                        <input type=\"text\" name=\"pp_ChanceOrQuestChance\" size=\"8\" maxlength=\"11\" value=\"0\" />\r\n                                                    </td>\r\n                                                    <td>" . makeinfocell($lang_creature['loot_quest_drop_chance'], $lang_creature['loot_quest_drop_chance_desc']) . "</td>\r\n                                                    <td>\r\n                                                        <input type=\"text\" name=\"pp_groupid\" size=\"8\" maxlength=\"10\" value=\"0\" />\r\n                                                    </td>\r\n                                                </tr>\r\n                                                <tr>\r\n                                                    <td>" . makeinfocell($lang_creature['min_count'], $lang_creature['min_count_desc']) . "</td>\r\n                                                    <td>\r\n                                                        <input type=\"text\" name=\"pp_mincountOrRef\" size=\"8\" maxlength=\"3\" value=\"1\" />\r\n                                                    </td>\r\n                                                    <td>" . makeinfocell($lang_creature['max_count'], $lang_creature['max_count_desc']) . "</td>\r\n                                                    <td>\r\n                                                        <input type=\"text\" name=\"pp_maxcount\" size=\"8\" maxlength=\"3\" value=\"1\" />\r\n                                                    </td>\r\n                                                </tr>\r\n                                                <tr>\r\n                                                    <td>" . makeinfocell($lang_creature['lootcondition'], $lang_creature['lootcondition_desc']) . "</td>\r\n                                                    <td>\r\n                                                        <input type=\"text\" name=\"pp_lootcondition\" size=\"8\" maxlength=\"3\" value=\"0\" />\r\n                                                    </td>\r\n                                                    <td>" . makeinfocell($lang_creature['condition_value1'], $lang_creature['condition_value1_desc']) . "</td>\r\n                                                    <td>\r\n                                                        <input type=\"text\" name=\"pp_condition_value1\" size=\"8\" maxlength=\"3\" value=\"0\" />\r\n                                                    </td>\r\n                                                    <td>" . makeinfocell($lang_creature['condition_value2'], $lang_creature['condition_value2_desc']) . "</td>\r\n                                                    <td>\r\n                                                        <input type=\"text\" name=\"pp_condition_value2\" size=\"8\" maxlength=\"3\" value=\"0\" />\r\n                                                    </td>\r\n                                                </tr>\r\n                                            </table>\r\n                                            <br />{$lang_creature['check_to_delete']}<br /><br />\r\n                                        </div>";
        }
        $output .= "\r\n                                    </div>\r\n                                    </div>\r\n                                    <br />\r\n                                </form>\r\n                                <script type=\"text/javascript\">setupPanes(\"container\", \"tab1\")</script>\r\n                                <table class=\"hidden\">\r\n                                    <tr>\r\n                                        <td>";
        if ($do_insert) {
            if ($user_lvl >= $action_permission['insert'] && $do_insert) {
                makebutton($lang_creature['save_to_db'], "javascript:do_submit('form1',0)", 180);
            }
        } else {
            if ($user_lvl >= $action_permission['insert']) {
                makebutton($lang_creature['save_to_db'], "javascript:do_submit('form1',0)", 180);
            }
            if ($user_lvl >= $action_permission['delete']) {
                makebutton($lang_creature['del_creature'], "creature.php?action=delete&amp;entry={$entry}", 180);
            }
            if ($user_lvl >= $action_permission['delete']) {
                makebutton($lang_creature['del_spawns'], "creature.php?action=delete_spwn&amp;entry={$entry}", 180);
            }
        }
        // scripts/export should be okay without permission check
        makebutton($lang_creature['save_to_script'], "javascript:do_submit('form1',1)", 180);
        $output .= "\r\n                                        </td>\r\n                                    </tr>\r\n                                    <tr>\r\n                                        <td>";
        makebutton($lang_creature['lookup_creature'], "creature.php", 760);
        $output .= "\r\n                                        </td>\r\n                                    </tr>\r\n                                </table>\r\n                            </center>";
        $sql->close();
        unset($sql);
    } else {
        $sql->close();
        unset($sql);
        error($lang_creature['item_not_found']);
        exit;
    }
}
function save()
{
    global $corem_db;
    $sqlm = new SQL();
    $sqlm->connect($corem_db["addr"], $corem_db["user"], $corem_db["pass"], $corem_db["name"], $corem_db["encoding"]);
    // then we get the config data
    // General Database Settings
    if ($_GET["host"] != "") {
        $host = $sqlm->quote_smart($_GET["host"]);
    } else {
        redirect("setup.php?error=1");
    }
    if ($_GET["port"] != "") {
        $port = $sqlm->quote_smart($_GET["port"]);
    } else {
        redirect("setup.php?error=1");
    }
    if ($_GET["user"] != "") {
        $user = $sqlm->quote_smart($_GET["user"]);
    } else {
        redirect("setup.php?error=1");
    }
    if ($_GET["pass"] != "") {
        $pass = $sqlm->quote_smart($_GET["pass"]);
    } else {
        redirect("setup.php?error=1");
    }
    // Authentication DB Name
    if ($_GET["name"] != "") {
        $name = $sqlm->quote_smart($_GET["name"]);
    } else {
        redirect("setup.php?error=1");
    }
    // DBC DB Name
    if ($_GET["dbcname"] != "") {
        $dbcname = $sqlm->quote_smart($_GET["dbcname"]);
    } else {
        redirect("setup.php?error=1");
    }
    if ($_GET["acctname"] != "") {
        $acctname = $sqlm->quote_smart($_GET["acctname"]);
    } else {
        redirect("setup.php?error=1");
    }
    if ($_GET["screenname"] != "") {
        $screenname = $sqlm->quote_smart($_GET["screenname"]);
    } else {
        redirect("setup.php?error=1");
    }
    // first, we import databases
    import_db($host, $port, $user, $pass, $dbcname);
    // save logon database configs
    $logon_count = $sqlm->fetch_assoc($sqlm->query("SELECT COUNT(*) FROM config_logon_database"));
    if ($logon_count["COUNT(*)"] == 1) {
        $logon_upper = $sqlm->fetch_assoc($sqlm->query("SELECT MAX(`Index`) FROM config_logon_database"));
        $result = $sqlm->query("UPDATE config_logon_database SET Address='" . $host . "', Port='" . $port . "', Name='" . $name . "', User='******', Password='******', Encoding='utf8' WHERE `Index`='" . $logon_upper["MAX(`Index`)"] . "'");
    } elseif ($logon_count["COUNT(*)"] > 1) {
        $result = $sqlm->query("TRUNCATE TABLE config_logon_database");
        $result = $sqlm->query("INSERT INTO config_logon_database (Address, Port, User, Name, Password, Encoding) VALUES ('" . $host . "', '" . $port . "', '" . $user . "', '" . $name . "', '" . $pass . "', 'utf8')");
    } else {
        $result = $sqlm->query("INSERT INTO config_logon_database (Address, Port, User, Name, Password, Encoding) VALUES ('" . $host . "', '" . $port . "', '" . $user . "', '" . $name . "', '" . $pass . "', 'utf8')");
    }
    // save dbc database configs
    $dbc_count = $sqlm->fetch_assoc($sqlm->query("SELECT COUNT(*) FROM config_dbc_database"));
    if ($dbc_count["COUNT(*)"] == 1) {
        $dbc_upper = $sqlm->fetch_assoc($sqlm->query("SELECT MAX(`Index`) FROM config_dbc_database"));
        $result = $sqlm->query("UPDATE config_dbc_database SET Address='" . $host . "', Port='" . $port . "', Name='" . $dbcname . "', User='******', Password='******', Encoding='utf8' WHERE `Index`='" . $dbc_upper["MAX(`Index`)"] . "'");
    } elseif ($dbc_count["COUNT(*)"] > 1) {
        $result = $sqlm->query("TRUNCATE TABLE config_dbc_database");
        $result = $sqlm->query("INSERT INTO config_dbc_database (Address, Port, User, Name, Password, Encoding) VALUES ('" . $host . "', '" . $port . "', '" . $user . "', '" . $dbcname . "', '" . $pass . "', 'utf8')");
    } else {
        $result = $sqlm->query("INSERT INTO config_dbc_database (Address, Port, User, Name, Password, Encoding) VALUES ('" . $host . "', '" . $port . "', '" . $user . "', '" . $dbcname . "', '" . $pass . "', 'utf8')");
    }
    // set up web admin account
    $account = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_accounts WHERE Login='******'"));
    if ($account["Login"] != '') {
        $result = $sqlm->query("UPDATE config_accounts SET ScreenName='" . $screenname . "', SecurityLevel=(4+1073741824) WHERE Login='******'");
    } else {
        $result = $sqlm->query("INSERT INTO config_accounts (Login, ScreenName, SecurityLevel) VALUES (UPPER('" . $acctname . "'), '" . $screenname . "', (4+1073741824))");
    }
    $result = $sqlm->query("UPDATE config_misc SET Value='1' WHERE `Key`='Installed'");
    redirect("admin.php");
}
Example #18
0
$t_users = $db->num($db->query("SELECT id FROM forum_users")) - 1;
$t_shouts = $db->num($db->query("SELECT id FROM ip_shouts"));
$t_updates = $db->num($db->query("SELECT id FROM ip_updates"));
$t_requests = $db->num($db->query("SELECT id FROM ip_requests"));
$t_reply = $db->num($db->query("SELECT id FROM ip_reply"));
$t_sharerlinks = $db->num($db->query("SELECT id FROM ip_sharerlinks"));
echo 'Total of registered users: <strong>' . $t_users . ' usernames</strong><br/>';
echo 'Total of current shouts: <strong>' . $t_shouts . ' messages</strong><br/>';
echo 'Total of <code>!update</code> shouts: <strong>' . $t_updates . ' messages</strong><br/>';
echo 'Total of <code>!request</code> shouts: <strong>' . $t_requests . ' messages</strong><br/>';
echo 'Total of replies: <strong>' . $t_reply . ' messages</strong><br/>';
echo 'Total of sharerlinks: <strong>' . $t_sharerlinks . ' links</strong><br/>';
$top5 = $db->query("SELECT user_id, COUNT(user_id) AS top5 FROM ip_shouts GROUP BY user_id ORDER BY top5 DESC LIMIT 5");
$rank = 1;
echo 'Top 5 Shouters:<br/>';
while ($row = $db->fetch_assoc($top5)) {
    $userID = $row['user_id'];
    $username = implode($db->fetch_assoc($db->query("SELECT username FROM forum_users WHERE id='{$userID}'")));
    $shoutno = $db->num($db->query("SELECT shout_msg FROM ip_shouts WHERE user_id='{$userID}'"));
    echo '<span class="label label-inverse tip-top" title="' . $shoutno . ' shouts"><span class="icon-red">' . $rank . '</span> ' . $username . '</span> ';
    $rank++;
}
echo '<br/>';
$top3 = $db->query("SELECT sharer_id, COUNT(sharer_id) AS top3 FROM ip_shlikes GROUP BY sharer_id ORDER BY top3 DESC LIMIT 3");
$srank = 1;
echo 'Top 3 Most-liked Sharerlinks:<br/>';
while ($row = $db->fetch_assoc($top3)) {
    $sharerID = $row['sharer_id'];
    $sharername = implode($db->fetch_assoc($db->query("SELECT sharername FROM ip_sharerlinks WHERE id='{$sharerID}'")));
    $shlikes = $db->num($db->query("SELECT id FROM ip_shlikes WHERE sharer_id='{$sharerID}'"));
    echo '<span class="label label-inverse tip-top" title="' . $shlikes . ' likes"><span class="icon-red">' . $srank . '</span> ' . $sharername . '</span> ';
Example #19
0
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation, either version 3 of the License, or
    (at your option) any later version.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License
    along with this program.  If not, see <http://www.gnu.org/licenses/>.
*/
require_once "db_lib.php";
$sqlm = new SQL();
$sqlm->connect($corem_db["addr"], $corem_db["user"], $corem_db["pass"], $corem_db["name"], $corem_db["encoding"]);
$temp = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_dbc_database"));
$dbc_db["addr"] = $temp["Address"] . ":" . $temp["Port"];
$dbc_db["user"] = $temp["User"];
$dbc_db["pass"] = $temp["Password"];
$dbc_db["name"] = $temp["Name"];
$dbc_db["encoding"] = $temp["Encoding"];
$temp = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_logon_database"));
$logon_db["addr"] = $temp["Address"] . ":" . $temp["Port"];
$logon_db["user"] = $temp["User"];
$logon_db["pass"] = $temp["Password"];
$logon_db["name"] = $temp["Name"];
$logon_db["encoding"] = $temp["Encoding"];
$temp = $sqlm->query("SELECT * FROM config_world_databases");
while ($world = $sqlm->fetch_assoc($temp)) {
    $world_db[$world["Index"]]["id"] = $world["Index"];
    $world_db[$world["Index"]]["addr"] = $world["Address"] . ":" . $world["Port"];
Example #20
0
     } else {
         $output .= '
           <td>
             <img src="img/down.gif" alt="" />
           </td>';
     }
     $sqlt = new SQL();
     $sqlt->connect($characters_db[$row["Index"]]["addr"], $characters_db[$row["Index"]]["user"], $characters_db[$row["Index"]]["pass"], $characters_db[$row["Index"]]["name"], $characters_db[$row["Index"]]["encoding"]);
     // get max characters for this realm
     if ($core == 1) {
         $c_query = "SELECT COUNT(*) FROM characters";
     } else {
         $c_query = "SELECT COUNT(*) FROM characters";
     }
     $c_result = $sqlt->query($c_query);
     $c_fields = $sqlt->fetch_assoc($c_result);
     $c_count = $c_fields["COUNT(*)"];
     // get online characters for this realm
     if ($core == 1) {
         $o_query = "SELECT COUNT(*) FROM characters WHERE online<>0";
     } else {
         $o_query = "SELECT COUNT(*) FROM characters WHERE online<>0";
     }
     $o_result = $sqlt->query($o_query);
     $o_fields = $sqlt->fetch_assoc($o_result);
     $o_count = $o_fields["COUNT(*)"];
     $output .= '
           <td>' . $o_count . '/' . $c_count . '</td>
         </tr>';
     unset($sqlt);
 }
Example #21
0
function char_talent(&$sqlr, &$sqlc)
{
    global $output, $lang_global, $lang_char, $realm_id, $realm_db, $characters_db, $mmfpm_db, $server, $action_permission, $user_lvl, $user_name, $spell_datasite;
    // this page uses wowhead tooltops
    wowhead_tt();
    //==========================$_GET and SECURE=================================
    // id and multi realm security to prevent sql injection
    require_once './include/char/include/char_multi_realm_security.php';
    //==========================$_GET and SECURE end=============================
    // getting character data from database
    $result = $sqlc->query('
		SELECT account, name, race, class, level, gender, 
			specCount AS talent_points
			FROM characters WHERE guid = ' . $id . '
			LIMIT 1');
    // no point going further if character does not exist
    if ($sqlc->num_rows($result)) {
        $char = $sqlc->fetch_assoc($result);
        // we get user permissions first
        $owner_acc_id = $sqlc->result($result, 0, 'account');
        $result = $sqlr->query('
			SELECT gmlevel, username 
			FROM account 
			WHERE id = ' . $char['account'] . '');
        $owner_gmlvl = $sqlr->result($result, 0, 'gmlevel');
        $owner_name = $sqlr->result($result, 0, 'username');
        // check user permission
        if ($user_lvl > $owner_gmlvl || $owner_name === $user_name) {
            // character sub header
            $output .= '
<center>
<div id="tab_content">
	<h1>' . $lang_char['talents'] . '</h1>
	<br />';
            // character menu tab
            require_once './include/char/include/char_header.php';
            // character info
            require_once './include/char/include/char_info.php';
            //---------------Page Specific Data Starts Here--------------------------
            $output .= '
<div id="tab_content2">
	<table class="lined" style="width: 550px;">
		<tr valign="top" align="center">';
            $result = $sqlc->query('
				SELECT spell 
				FROM character_spell 
				WHERE guid = ' . $id . ' AND active = 1 AND disabled = 0 
				ORDER BY spell DESC');
            if ($sqlc->num_rows($result)) {
                $talent_rate = isset($server[$realmid]['talent_rate']) ? $server[$realmid]['talent_rate'] : 1;
                $talent_points = ($char['level'] - 9) * $talent_rate;
                $talent_points_left = $char['talent_points'];
                $talent_points_used = $talent_points - $talent_points_left;
                $sqlm = new SQL();
                $sqlm->connect($mmfpm_db['addr'], $mmfpm_db['user'], $mmfpm_db['pass'], $mmfpm_db['name']);
                $tabs = array();
                $l = 0;
                while (($talent = $sqlc->fetch_assoc($result)) && $l < $talent_points_used) {
                    if ($tab = $sqlm->fetch_assoc($sqlm->query('
						SELECT field_1, field_2, field_3, field_13, field_16
						FROM dbc_talent
						WHERE field_8 = ' . $talent['spell'] . ' 
						LIMIT 1'))) {
                        if (isset($tabs[$tab['field_1']][$tab['field_2']][$tab['field_3']])) {
                            $l -= $tabs[$tab['field_1']][$tab['field_2']][$tab['field_3']][1];
                        }
                        $tabs[$tab['field_1']][$tab['field_2']][$tab['field_3']] = array($talent['spell'], '5', '5');
                        $l += 5;
                        if ($tab['field_13']) {
                            talent_dependencies($tabs, $tab, $l, $sqlm);
                        }
                    } elseif ($tab = $sqlm->fetch_assoc($sqlm->query('
						SELECT field_1, field_2, field_3, field_13, field_16, field_8
						FROM dbc_talent
						WHERE field_7 = ' . $talent['spell'] . '
						LIMIT 1'))) {
                        if (isset($tabs[$tab['field_1']][$tab['field_2']][$tab['field_3']])) {
                            $l -= $tabs[$tab['field_1']][$tab['field_2']][$tab['field_3']][1];
                        }
                        $tabs[$tab['field_1']][$tab['field_2']][$tab['field_3']] = array($talent['spell'], '4', $tab['field_8'] ? '2' : '5');
                        $l += 4;
                        if ($tab['field_13']) {
                            talent_dependencies($tabs, $tab, $l, $sqlm);
                        }
                    } elseif ($tab = $sqlm->fetch_assoc($sqlm->query('
							SELECT field_1, field_2, field_3, field_13, field_16, field_7
							FROM dbc_talent
							WHERE field_6 = ' . $talent['spell'] . '
							LIMIT 1'))) {
                        if (isset($tabs[$tab['field_1']][$tab['field_2']][$tab['field_3']])) {
                            $l -= $tabs[$tab['field_1']][$tab['field_2']][$tab['field_3']][1];
                        }
                        $tabs[$tab['field_1']][$tab['field_2']][$tab['field_3']] = array($talent['spell'], '3', $tab['field_7'] ? '2' : '5');
                        $l += 3;
                        if ($tab['field_13']) {
                            talent_dependencies($tabs, $tab, $l, $sqlm);
                        }
                    } elseif ($tab = $sqlm->fetch_assoc($sqlm->query('
							SELECT field_1, field_2, field_3, field_13, field_16, field_6
							FROM dbc_talent
							WHERE field_5 = ' . $talent['spell'] . '
							LIMIT 1'))) {
                        if (isset($tabs[$tab['field_1']][$tab['field_2']][$tab['field_3']])) {
                            $l -= $tabs[$tab['field_1']][$tab['field_2']][$tab['field_3']][1];
                        }
                        $tabs[$tab['field_1']][$tab['field_2']][$tab['field_3']] = array($talent['spell'], '2', $tab['field_6'] ? '2' : '5');
                        $l += 2;
                        if ($tab['field_13']) {
                            talent_dependencies($tabs, $tab, $l, $sqlm);
                        }
                    } elseif ($tab = $sqlm->fetch_assoc($sqlm->query('
							SELECT field_1, field_2, field_3, field_13, field_16, field_5
							FROM dbc_talent
							WHERE field_4 = ' . $talent['spell'] . '
							LIMIT 1'))) {
                        if (isset($tabs[$tab['field_1']][$tab['field_2']][$tab['field_3']])) {
                            $l -= $tabs[$tab['field_1']][$tab['field_2']][$tab['field_3']][1];
                        }
                        $tabs[$tab['field_1']][$tab['field_2']][$tab['field_3']] = array($talent['spell'], '1', $tab['field_5'] ? '2' : '5');
                        $l += 1;
                        if ($tab['field_13']) {
                            talent_dependencies($tabs, $tab, $l, $sqlm);
                        }
                    }
                }
                unset($tab);
                unset($talent);
                foreach ($tabs as $k => $data) {
                    $points = 0;
                    $output .= '
			<td>
				<table class="hidden" style="width: 0px;">
					<tr>
						<td colspan="6" style="border-bottom-width: 0px;">
						</td>
					</tr>
					<tr>';
                    for ($i = 0; $i < 11; ++$i) {
                        for ($j = 0; $j < 4; ++$j) {
                            if (isset($data[$i][$j])) {
                                $output .= '
						<td valign="bottom" align="center" style="border-top-width: 0px;border-bottom-width: 0px;">
							<a href="' . $spell_datasite . $data[$i][$j][0] . '" target="_blank">
								<img src="' . spell_get_icon($data[$i][$j][0], $sqlm) . '" width="36" height="36" class="icon_border_' . $data[$i][$j][2] . '" alt="" />
							</a>
							<div style="width:0px;margin:-14px 0px 0px 30px;font-size:14px;color:black">
								' . $data[$i][$j][1] . '
							</div>
							<div style="width:0px;margin:-14px 0px 0px 29px;font-size:14px;color:white">
								' . $data[$i][$j][1] . '
							</div>
						</td>';
                                $points += $data[$i][$j][1];
                            } else {
                                $output .= '
						<td valign="bottom" align="center" style="border-top-width: 0px;border-bottom-width: 0px;">
							<img src="img/blank.gif" width="44" height="44" alt="" />
						</td>';
                            }
                        }
                        $output .= '
					</tr>
					<tr>';
                    }
                    $output .= '
						<td colspan="6" style="border-top-width: 0px;border-bottom-width: 0px;"></td>
					</tr>
					<tr>
						<td colspan="6" valign="bottom" align="left">
							' . $sqlm->result($sqlm->query('SELECT field_1 FROM dbc_talenttab WHERE id = ' . $k . ''), 0, 'field_1') . ': ' . $points . '
						</td>
					</tr>
				</table>
			</td>';
                }
                unset($data);
                unset($k);
                unset($tabs);
                $output .= '
		</tr>
	</table>
	<br />
	<table>
		<tr>
			<td align="left">
				' . $lang_char['talent_rate'] . ': <br />
				' . $lang_char['talent_points'] . ': <br />
				' . $lang_char['talent_points_used'] . ': <br />
				' . $lang_char['talent_points_shown'] . ': <br />
				' . $lang_char['talent_points_left'] . ':
			</td>
			<td align="left">
				' . $talent_rate . '<br />
				' . $talent_points . '<br />
				' . $talent_points_used . '<br />
				' . $l . '<br />
				' . $talent_points_left . '
			</td>
			<td width="64">
			</td>
			<td align="right">';
                unset($l);
                unset($talent_rate);
                unset($talent_points);
                unset($talent_points_used);
                unset($talent_points_left);
                $result = $sqlc->query('
					SELECT spec, slot, glyph
					FROM character_glyphs
					WHERE guid = ' . $id . '');
                while ($glyphs = $sqlc->fetch_assoc($result)) {
                    if ($glyphs['glyph']) {
                        $glyph = $sqlm->result($sqlm->query('
							SELECT field_1
							FROM dbc_glyphproperties
							WHERE id = ' . $glyphs['glyph'] . ''), 0);
                        $output .= '
				<a href="' . $spell_datasite . $glyph . '" target="_blank">
					<img src="' . spell_get_icon($glyph, $sqlm) . '" width="36" height="36" class="icon_border_0" alt="" />
				</a>';
                    }
                }
                unset($glyphs);
                $output .= '
			</td>';
            }
            $output .= '
		</tr>
	</table>';
            $output .= '
</div>
<br />';
            //---------------Page Specific Data Ends here----------------------------
            // character sub footer
            require_once './include/char/include/char_ footer.php';
            $output .= '
<br />
</center>';
        } else {
            error($lang_char['no_permission']);
        }
    } else {
        error($lang_char['no_char_found']);
    }
}
function menus()
{
    global $output, $corem_db;
    $sqlm = new SQL();
    $sqlm->connect($corem_db["addr"], $corem_db["user"], $corem_db["pass"], $corem_db["name"], $corem_db["encoding"]);
    $menu_action = "start";
    if (isset($_GET["editmenu"])) {
        $menu_action = "edit";
    }
    if (isset($_GET["delmenu"])) {
        $menu_action = "delmenu";
    }
    if (isset($_GET["addmenu"])) {
        $menu_action = "addmenu";
    }
    if (isset($_GET["editmenu_item"])) {
        $menu_action = "edititem";
    }
    if (isset($_GET["delmenu_item"])) {
        $menu_action = "delitem";
    }
    if (isset($_GET["addmenu_item"])) {
        $menu_action = "additem";
    }
    if (isset($_GET["savemenu"])) {
        $menu_action = "savemenu";
    }
    switch ($menu_action) {
        case "start":
            $top_menus = $sqlm->query("SELECT * FROM config_top_menus");
            $output .= '
        <form action="admin.php" method="get" id="form">
          <div>
            <input type="hidden" name="section" value="menus" />
          </div>
          <table class="simple" id="admin_top_menus">
            <tr>
              <th>' . lang("admin", "edit") . '</th>
              <th>' . lang("admin", "remove") . '</th>
              <th>' . lang("admin", "internalname") . '</th>
              <th>' . lang("admin", "action") . '</th>
              <th>' . lang("admin", "enabled") . '</th>
            </tr>';
            $color = "#EEEEEE";
            while ($top_menu = $sqlm->fetch_assoc($top_menus)) {
                $output .= '
            <tr>
              <td style="background-color:' . $color . '; text-align: center;">
                <span>
                  <a href="admin.php?section=menus&amp;top_menu=' . $top_menu["Index"] . '&amp;editmenu=editmenu">
                    <img src="img/edit.png" alt="" />
                  </a>
                </span>
              </td>
              <td style="background-color:' . $color . '; text-align: center;">
                <span>
                  <a href="admin.php?section=menus&amp;top_menu=' . $top_menu["Index"] . '&amp;delmenu=delmenu">
                    <img src="img/aff_cross.png" alt="" />
                  </a>
                </span>
              </td>
              <td style="background-color:' . $color . '; text-align: center;">
                <span>' . $top_menu["Name"] . '</span>
              </td>
              <td style="background-color:' . $color . '; text-align: center;">
                <span>' . $top_menu["Action"] . '</span>
              </td>
              <td style="background-color:' . $color . '; text-align: center;">
                <span><img src="img/' . ($top_menu["Enabled"] ? 'up' : 'down') . '.gif" alt="" /></span>
              </td>
            </tr>';
                $color = $color == "#EEEEEE" ? "#FFFFFF" : "#EEEEEE";
            }
            $output .= '
            <tr>
              <td style="background-color:' . $color . '; text-align: center;">
                <span>
                  <a href="admin.php?section=menus&amp;addmenu=addmenu">
                    <img src="img/add.png" alt="" />
                  </a>
                </span>
              </td>
              <td style="background-color:' . $color . ';" colspan="4">
                <a href="admin.php?section=menus&amp;addmenu=addmenu">' . lang("admin", "addmenu") . '</a>
              </td>
            </tr>
          </table>
        </form>';
            break;
        case "edit":
            $top_menu = $sqlm->quote_smart($_GET["top_menu"]);
            $top = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_top_menus WHERE `Index`='" . $top_menu . "'"));
            $output .= '
        <div class="center" id="admin_edit_menu_wrap">
          <form action="admin.php" method="get" id="form">
            <div>
              <input type="hidden" name="section" value="menus" />
              <input type="hidden" name="top_index" value="' . $top_menu . '" />';
            if ($top["Name"] == "main" || $top["Name"] == "invisible") {
                $output .= '
              <input type="hidden" name="enabled" value="1" />';
            }
            $output .= '
            </div>
            <table class="simple" id="admin_edit_top_menu_nameaction">
              <tr>
                <th colspan="2">' . lang("admin", "top_menu") . '</th>
              </tr>
              <tr>
                <td>' . lang("admin", "internalname2") . ': </td>
                <td>
                  <input type="text" name="top_name" value="' . $top["Name"] . '" class="admin_edit_top_menu_action" />
                </td>
              </tr>
              <tr>
                <td>' . lang("admin", "action") . ': </td>
                <td>
                  <textarea name="menu_action" class="admin_edit_top_menu_action" rows="2" cols="32">' . $top["Action"] . '</textarea>
                </td>
              </tr>
              <tr>
                <td>' . lang("admin", "enabled") . ': </td>
                <td>';
            if ($top["Name"] != "main" && $top["Name"] != "invisible") {
                $output .= '
                  <input type="checkbox" name="enabled"' . ($top["Enabled"] ? ' checked="checked"' : '') . ' />';
            } else {
                $output .= '<img src="img/lock.png" alt="" /> (' . lang("admin", "nodisable") . ')';
            }
            $output .= '
                </td>
              </tr>
            </table>
            <table class="simple" id="admin_edit_top_menu_submenus">
              <tr>
                <th>' . lang("admin", "edit") . '</th>
                <th>' . lang("admin", "remove") . '</th>
                <th>' . lang("admin", "order") . '</th>
                <th style="width: 15%;">' . lang("admin", "internalname") . '</th>
                <th style="width: 25%;">' . lang("admin", "action") . '</th>
                <th>' . lang("admin", "view") . '</th>
                <th>' . lang("admin", "insert") . '</th>
                <th>' . lang("admin", "update") . '</th>
                <th>' . lang("admin", "delete") . '</th>
                <th>' . lang("admin", "enabled") . '</th>
              </tr>';
            $menus = $sqlm->query("SELECT * FROM config_menus WHERE Menu='" . $top_menu . "'");
            $color = "#EEEEEE";
            while ($menu = $sqlm->fetch_assoc($menus)) {
                $output .= '
              <tr>
                <td style="background-color:' . $color . '; text-align: center;">
                  <span>
                    <a href="admin.php?section=menus&amp;top_index=' . $top_menu . '&amp;menu_item=' . $menu["Index"] . '&amp;editmenu_item=editmenuitem">
                      <img src="img/edit.png" alt="" />
                    </a>
                  </span>
                </td>
                <td style="background-color:' . $color . '; text-align: center;">
                  <span>
                    <a href="admin.php?section=menus&amp;top_index=' . $top_menu . '&amp;menu_item=' . $menu["Index"] . '&amp;delmenu_item=delmenuitem">
                      <img src="img/aff_cross.png" alt="" />
                    </a>
                  </span>
                </td>
                <td style="background-color:' . $color . '; text-align: center;">
                  <span>' . $menu["Order"] . '</span>
                </td>
                <td style="background-color:' . $color . '; text-align: center;">
                  <span>' . $menu["Name"] . '</span>
                </td>
                <td style="background-color:' . $color . '; text-align: center;">
                  <span>' . $menu["Action"] . '</span>
                </td>
                <td style="background-color:' . $color . '; text-align: center;">
                  <span>' . sec_level_name($menu["View"]) . ' (' . $menu["View"] . ')' . '</span>
                </td>
                <td style="background-color:' . $color . '; text-align: center;">
                  <span>' . sec_level_name($menu["Insert"]) . ' (' . $menu["Insert"] . ')' . '</span>
                </td>
                <td style="background-color:' . $color . '; text-align: center;">
                  <span>' . sec_level_name($menu["Update"]) . ' (' . $menu["Update"] . ')' . '</span>
                </td>
                <td style="background-color:' . $color . '; text-align: center;">
                  <span>' . sec_level_name($menu["Delete"]) . ' (' . $menu["Delete"] . ')' . '</span>
                </td>
                <td style="background-color:' . $color . '; text-align: center;">
                  <span>
                    <img src="img/' . ($menu["Enabled"] ? 'up' : 'down') . '.gif" alt="" />
                  </span>
                </td>
              </tr>';
                $color = $color == "#EEEEEE" ? "#FFFFFF" : "#EEEEEE";
            }
            $output .= '
              <tr>
                <td style="background-color:' . $color . '; text-align: center;">
                  <span>
                    <a href="admin.php?section=menus&amp;top_index=' . $top_menu . '&amp;addmenu_item=addmenuitem">
                      <img src="img/add.png" alt="" />
                    </a>
                  </span>
                </td>
                <td style="background-color:' . $color . '" colspan="8">
                  <a href="admin.php?section=menus&amp;top_index=' . $top_menu . '&amp;addmenu_item=addmenuitem">' . lang("admin", "addmenu_item") . '</a>
                </td>
              </tr>
            </table>
            <div>
              <input type="submit" name="savemenu" value="' . lang("admin", "save") . '" />
            </div>
          </form>
        </div>';
            break;
        case "edititem":
            $menu_item = $sqlm->quote_smart($_GET["menu_item"]);
            $menu = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_menus WHERE `Index`='" . $menu_item . "'"));
            $sec_list = sec_level_list();
            $top_menu_query = "SELECT * FROM config_top_menus";
            $top_menu_result = $sqlm->query($top_menu_query);
            $output .= '
        <div id="admin_edit_menu_field">
          <form action="admin.php" method="get" id="form">
            <div>
              <input type="hidden" name="section" value="menus" />
              <input type="hidden" name="action" value="savemenu" />
              <input type="hidden" name="menu_item" value="' . $menu_item . '" />
            </div>
            <fieldset>
              <table class="help" id="admin_edit_menu">
                <tr>
                  <td>
                    <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "menu_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "menu") . '</a>:
                  </td>
                  <td>
                    <select name="menu">';
            //<input type="text" name="menu" value="'.$menu["Menu"].'" id="admin_edit_menu_fields">
            while ($row = $sqlm->fetch_assoc($top_menu_result)) {
                $output .= '
                      <option value="' . $row["Index"] . '" ' . ($row["Index"] == $menu["Menu"] ? 'selected="selected"' : '') . ' class="admin_edit_menu_fields">' . $row["Name"] . '</option>';
            }
            $output .= '
                    </select>
                  </td>
                </tr>
                <tr>
                  <td>
                    <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "order_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "order") . '</a>:
                  </td>
                  <td>
                    <input type="text" name="order" value="' . $menu["Order"] . '" class="admin_edit_menu_fields" />
                  </td>
                </tr>
                <tr>
                  <td>
                    <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "menuname_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "internalname2") . '</a>:
                  </td>
                  <td>
                    <input type="text" name="name" value="' . $menu["Name"] . '" class="admin_edit_menu_fields" />
                  </td>
                </tr>
                <tr>
                  <td>
                    <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "action_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "action") . '</a>:
                  </td>
                  <td>
                    <textarea name="menu_action" style="width:260px" rows="2" cols="32">' . $menu["Action"] . '</textarea>
                  </td>
                </tr>
                <tr>
                  <td>
                    <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "view_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "view") . '</a>:
                  </td>
                  <td>
                    <select name="view">';
            foreach ($sec_list as $row) {
                $output .= '
                      <option value="' . $row["Sec"] . '" ' . ($row["Sec"] == $menu["View"] ? 'selected="selected"' : '') . '>' . $row["Name"] . ' (' . $row["Sec"] . ')</option>';
            }
            $output .= '
                    </select>
                  </td>
                </tr>
                <tr>
                  <td>
                    <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "insert") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "insert") . '</a>:
                  </td>
                  <td>
                    <select name="insert">';
            foreach ($sec_list as $row) {
                $output .= '
                      <option value="' . $row["Sec"] . '" ' . ($row["Sec"] == $menu["Insert"] ? 'selected="selected"' : '') . '>' . $row["Name"] . ' (' . $row["Sec"] . ')</option>';
            }
            $output .= '
                    </select>
                  </td>
                </tr>
                <tr>
                  <td>
                    <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "update_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "update") . '</a>:
                  </td>
                  <td>
                    <select name="update">';
            foreach ($sec_list as $row) {
                $output .= '
                      <option value="' . $row["Sec"] . '" ' . ($row["Sec"] == $menu["Update"] ? 'selected="selected"' : '') . '>' . $row["Name"] . ' (' . $row["Sec"] . ')</option>';
            }
            $output .= '
                    </select>
                  </td>
                </tr>
                <tr>
                  <td>
                    <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "delete") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "delete") . '</a>:
                  </td>
                  <td>
                    <select name="delete">';
            foreach ($sec_list as $row) {
                $output .= '
                      <option value="' . $row["Sec"] . '" ' . ($row["Sec"] == $menu["Delete"] ? 'selected="selected"' : '') . '>' . $row["Name"] . ' (' . $row["Sec"] . ')</option>';
            }
            $output .= '
                    </select>
                  </td>
                </tr>';
            if ($menu_item != 8) {
                $output .= '
                <tr>
                  <td>
                    <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "enabled_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "enabled") . '</a>:
                  </td>
                  <td>
                    <input type="checkbox" name="enabled" ' . ($menu["Enabled"] ? 'checked="checked"' : '') . ' />
                  </td>
                </tr>';
            } else {
                $output .= '
                <tr>
                  <td>
                    <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "enabled_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "enabled") . '</a>:
                  </td>
                  <td>
                    <input type="checkbox" name="enabled" ' . ($menu["Enabled"] ? 'checked="checked' : '') . ' disabled="disabled" />
                  </td>
                </tr>';
            }
            $output .= '
              </table>
            </fieldset>
            <div>
              <input type="submit" name="save_menu_item" value="' . lang("admin", "save") . '" />
            </div>
          </form>
        </div>';
            break;
        case "addmenu":
            $max = $sqlm->fetch_assoc($sqlm->query("SELECT MAX(`Index`) FROM config_top_menus"));
            $max = $max["MAX(`Index`)"] + 1;
            $result = $sqlm->query("INSERT INTO config_top_menus (`Index`, Action, Name, Enabled) VALUES ('" . $max . "', '', '', '0')");
            redirect("admin.php?section=menus");
            break;
        case "delmenu":
            $top_menu = $sqlm->quote_smart($_GET["top_menu"]);
            if (is_numeric($top_menu)) {
                $result = $sqlm->query("DELETE FROM config_top_menus WHERE `Index`='" . $top_menu . "'");
                redirect("admin.php?section=menus");
            } else {
                redirect("admin.php?section=menus&error=1");
            }
            break;
        case "savemenu":
            $top_index = $sqlm->quote_smart($_GET["top_index"]);
            $top_name = $sqlm->quote_smart($_GET["top_name"]);
            $top_action = $sqlm->quote_smart($_GET["menu_action"]);
            $enabled = isset($_GET["enabled"]) ? 1 : 0;
            $result = $sqlm->query("UPDATE config_top_menus SET Name='" . $top_name . "', Action='" . $top_action . "', Enabled='" . $enabled . "' WHERE `Index`='" . $top_index . "'");
            redirect("admin.php?section=menus");
            break;
        case "additem":
            $top_index = $sqlm->quote_smart($_GET["top_index"]);
            $result = $sqlm->query("INSERT INTO config_menus (Menu, Action, Name) VALUES ('" . $top_index . "', '','')");
            redirect("admin.php?section=menus&top_menu=" . $top_index . "&editmenu=editmenu");
            break;
        case "delitem":
            $menu_item = $sqlm->quote_smart($_GET["menu_item"]);
            $top_index = $sqlm->quote_smart($_GET["top_index"]);
            if (is_numeric($menu_item)) {
                $result = $sqlm->query("DELETE FROM config_menus WHERE `Index`='" . $menu_item . "'");
                redirect("admin.php?section=menus&top_menu=" . $top_index . "&editmenu=editmenu");
            } else {
                redirect("admin.php?section=menus&error=1");
            }
            break;
        default:
            redirect("admin.php?section=menus&error=1");
            break;
    }
}
Example #23
0
function edit_user()
{
    global $lang_global, $lang_user, $output, $realm_db, $characters_db, $realm_id, $mmfpm_db, $user_lvl, $user_name, $gm_level_arr, $action_permission, $expansion_select, $developer_test_mode, $multi_realm_mode, $server;
    $active_realm_id_pq = "active_realm_id";
    if (empty($_GET['id'])) {
        redirect("user.php?error=10");
    }
    $sqlr = new SQL();
    $sqlr->connect($realm_db['addr'], $realm_db['user'], $realm_db['pass'], $realm_db['name']);
    $sqlm = new SQL();
    $sqlm->connect($mmfpm_db['addr'], $mmfpm_db['user'], $mmfpm_db['pass'], $mmfpm_db['name']);
    $sqlc = new SQL();
    $sqlc->connect($characters_db[$realm_id]['addr'], $characters_db[$realm_id]['user'], $characters_db[$realm_id]['pass'], $characters_db[$realm_id]['name']);
    $id = $sqlr->quote_smart($_GET['id']);
    $result = $sqlr->query("SELECT id,username,gmlevel,email,joindate,last_ip,failed_logins,locked,last_login,{$active_realm_id_pq},expansion FROM account WHERE id = '{$id}'");
    $data = $sqlr->fetch_assoc($result);
    $refguid = $sqlm->fetch_assoc($sqlm->query('SELECT InvitedBy FROM mm_point_system_invites WHERE PlayersAccount = ' . $data['id'] . ''));
    $refguid = $refguid['InveitedBy'];
    $referred_by = $sqlc->fetch_assoc($sqlc->query("SELECT name FROM characters WHERE guid = '{$refguid}'"));
    unset($refguid);
    $referred_by = $referred_by['name'];
    if ($sqlr->num_rows($result)) {
        $output .= '
        <center>
          <script type="text/javascript" src="libs/js/sha1.js"></script>
          <script type="text/javascript">
            // <![CDATA[
              function do_submit_data ()
              {
                if ((document.form.username.value != "' . $data['username'] . '") && (document.form.new_pass.value == "******"))
                {
                  alert("If you are changing Username, The password must be changed too.");
                  return;
                }
                else
                {
                  document.form.pass.value = hex_sha1(document.form.username.value.toUpperCase()+":"+document.form.new_pass.value.toUpperCase());
                  document.form.new_pass.value = "0";
                  do_submit();
                }
              }
            // ]]>
          </script>
          <fieldset style="width: 550px;">
            <legend>' . $lang_user['edit_acc'] . '</legend>
            <form method="post" action="user.php?action=doedit_user" name="form">
            <input type="hidden" name="pass" value="" maxlength="256" />
            <input type="hidden" name="id" value="' . $id . '" />
            <table class="flat">
              <tr>
                <td>' . $lang_user['id'] . '</td>
                <td>' . $data['id'] . '</td>
              </tr>
              <tr>
                <td>' . $lang_user['username'] . '</td>';
        if ($user_lvl >= $action_permission['update']) {
            $output .= '
                <td><input type="text" name="username" size="42" maxlength="15" value="' . $data['username'] . '" /></td>';
        } else {
            $output .= '
                <td>' . $data['username'] . '</td>';
        }
        $output .= '
              </tr>
              <tr>
                <td>' . $lang_user['password'] . '</td>';
        if ($user_lvl >= $action_permission['update']) {
            $output .= "\r\n                <td><input type=\"text\" name=\"new_pass\" size=\"42\" maxlength=\"40\" value=\"******\" /></td>";
        } else {
            $output .= "\r\n                <td>********</td>";
        }
        $output .= "\r\n              </tr>\r\n              <tr>\r\n                <td>{$lang_user['email']}</td>";
        if ($user_lvl >= $action_permission['update']) {
            $output .= '
                <td><input type="text" name="mail" size="42" maxlength="225" value="' . $data['email'] . '" /></td>';
        } else {
            $output .= "\r\n                <td>***@***.***</td>";
        }
        $output .= "\r\n              </tr>\r\n              <tr>\r\n                <td>{$lang_user['invited_by']}:</td>\r\n                <td>";
        if ($user_lvl >= $action_permission['update'] && !$referred_by != NULL) {
            $output .= "\r\n                  <input type=\"text\" name=\"referredby\" size=\"42\" maxlength=\"12\" value=\"{$referred_by}\" />";
        } else {
            $output .= "\r\n                  {$referred_by}";
        }
        $output .= "\r\n                </td>\r\n              </tr>\r\n              <tr>\r\n                <td>{$lang_user['gm_level_long']}</td>";
        if ($user_lvl >= $action_permission['update']) {
            $output .= "\r\n                <td>\r\n                  <select name=\"gmlevel\">";
            foreach ($gm_level_arr as $level) {
                if ($level[0] > -1 && $level[0] < $user_lvl) {
                    $output .= "\r\n                    <option value=\"{$level[0]}\" ";
                    if ($data['gmlevel'] == $level[0]) {
                        $output .= "selected=\"selected\" ";
                    }
                    $output .= ">{$level[1]}</option>";
                }
            }
            $output .= "\r\n                  </select>\r\n                </td>";
        } else {
            $output .= '
                <td>' . id_get_gm_level($data['gmlevel']) . ' ( ' . $data['gmlevel'] . ' )</td>';
        }
        $output .= '
              </tr>
              <tr>
                <td>' . $lang_user['join_date'] . '</td>
                <td>' . $data['joindate'] . '</td>
              </tr>
              <tr>
                <td>' . $lang_user['last_ip'] . '</td>';
        if ($user_lvl >= $action_permission['update']) {
            $output .= '
                <td>' . $data['last_ip'] . '<a href="banned.php?action=do_add_entry&amp;entry=' . $data['last_ip'] . '&amp;bantime=3600&amp;ban_type=ip_banned"> &lt;- ' . $lang_user['ban_this_ip'] . '</a></td>';
        } else {
            $output .= "\r\n                <td>***.***.***.***</td>";
        }
        $output .= "\r\n              </tr>\r\n              <tr>\r\n                <td>{$lang_user['banned']}</td>";
        $que = $sqlr->query("SELECT bandate, unbandate, bannedby, banreason FROM account_banned WHERE id = {$id}");
        if ($sqlr->num_rows($que)) {
            $banned = $sqlr->fetch_row($que);
            $ban_info = " From:" . date('d-m-Y G:i', $banned[0]) . " till:" . date('d-m-Y G:i', $banned[1]) . "<br />by {$banned['2']}";
            $ban_checked = " checked=\"checked\"";
        } else {
            $ban_checked = "";
            $ban_info = "";
            $banned[3] = "";
        }
        if ($user_lvl >= $action_permission['update']) {
            $output .= "\r\n                <td><input type=\"checkbox\" name=\"banned\" value=\"1\" {$ban_checked}/>{$ban_info}</td>";
        } else {
            $output .= "\r\n                <td>{$ban_info}</td>";
        }
        $output .= "\r\n              </tr>\r\n              <tr>\r\n                <td>{$lang_user['banned_reason']}</td>";
        if ($user_lvl >= $action_permission['update']) {
            $output .= "\r\n                <td><input type=\"text\" name=\"banreason\" size=\"42\" maxlength=\"255\" value=\"{$banned['3']}\" /></td>";
        } else {
            $output .= "\r\n                <td>{$banned['3']}</td>";
        }
        if ($expansion_select) {
            $output .= "\r\n              </tr>\r\n              <tr>";
            if ($user_lvl >= $action_permission['update']) {
                $output .= "\r\n                <td>{$lang_user['client_type']}</td>";
                $output .= "\r\n                <td>\r\n                  <select name=\"expansion\">";
                $output .= "\r\n                    <option value=\"0\">{$lang_user['classic']}</option>\r\n                    <option value=\"1\" ";
                if ($data['expansion'] == 1) {
                    $output .= "selected=\"selected\" ";
                }
                $output .= ">{$lang_user['tbc']}</option>\r\n                   <option value=\"2\" ";
                if ($data['expansion'] == 2) {
                    $output .= "selected=\"selected\" ";
                }
                $output .= ">{$lang_user['wotlk']}</option>\r\n                  </select>\r\n                </td>";
            } else {
                $output .= "\r\n                <td>{$lang_user['classic']}</td>";
            }
        }
        $output .= "\r\n              </tr>\r\n              <tr>\r\n                <td>{$lang_user['failed_logins_long']}</td>";
        if ($user_lvl >= $action_permission['update']) {
            $output .= '
                <td><input type="text" name="failed" size="42" maxlength="3" value="' . $data['failed_logins'] . '" /></td>';
        } else {
            $output .= '
                <td>' . $data['failed_logins'] . '</td>';
        }
        $output .= "\r\n              </tr>\r\n              <tr>\r\n                <td>{$lang_user['locked']}</td>";
        $lock_checked = $data['locked'] ? " checked=\"checked\"" : "";
        if ($user_lvl >= $action_permission['update']) {
            $output .= "\r\n                <td><input type=\"checkbox\" name=\"locked\" value=\"1\" {$lock_checked}/></td>";
        } else {
            $output .= "\r\n                <td></td>";
        }
        $output .= '
              </tr>
              <tr>
                <td>' . $lang_user['last_login'] . '</td>
                <td>' . $data['last_login'] . '</td>
              </tr>
              <tr>
                <td>' . $lang_user['online'] . '</td>';
        $output .= "\r\n                <td>" . ($data['active_realm_id'] ? $lang_global['yes'] : $lang_global['no']) . "</td>\r\n              </tr>";
        $query = $sqlr->query("SELECT SUM(numchars) FROM realmcharacters WHERE acctid = '{$id}'");
        $tot_chars = $sqlr->result($query, 0);
        $query = $sqlc->query("SELECT count(*) FROM `characters` WHERE account = {$id}");
        $chars_on_realm = $sqlc->result($query, 0);
        $output .= "\r\n              <tr>\r\n                <td>{$lang_user['tot_chars']}</td>\r\n                <td>{$tot_chars}</td>\r\n              </tr>";
        $realms = $sqlr->query("SELECT id, name FROM realmlist");
        if ($developer_test_mode && $multi_realm_mode && ($sqlr->num_rows($realms) > 1 && count($server) > 1 && count($characters_db) > 1)) {
            require_once "scripts/get_lib.php";
            while ($realm = $sqlr->fetch_array($realms)) {
                $sqlc->connect($characters_db[$realm[0]]['addr'], $characters_db[$realm[0]]['user'], $characters_db[$realm[0]]['pass'], $characters_db[$realm[0]]['name']);
                $query = $sqlc->query("SELECT count(*) FROM `characters` WHERE account = {$id}");
                $chars_on_realm = $sqlc->result($query, 0);
                $output .= "\r\n              <tr>\r\n                <td>{$lang_user['chars_on_realm']} " . get_realm_name($realm[0]) . "</td>\r\n                <td>{$chars_on_realm}</td>\r\n              </tr>";
                if ($chars_on_realm) {
                    $char_array = $sqlc->query("SELECT guid, name, race, class, level, gender\r\n          FROM `characters` WHERE account = {$id}");
                    while ($char = $sqlc->fetch_array($char_array)) {
                        $output .= "\r\n              <tr>\r\n                <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;'---></td>\r\n                <td>\r\n                      <a href=\"char.php?id={$char['0']}&amp;realm={$realm['0']}\">{$char['1']}  - <img src='img/c_icons/{$char[2]}-{$char[5]}.gif' onmousemove='toolTip(\"" . char_get_race_name($char[2]) . "\",\"item_tooltip\")' onmouseout='toolTip()' alt=\"\" />\r\n                      <img src='img/c_icons/{$char[3]}.gif' onmousemove='toolTip(\"" . char_get_class_name($char[3]) . "\",\"item_tooltip\")' onmouseout='toolTip()' alt=\"\"/> - lvl " . char_get_level_color($char[4]) . "</a>\r\n                </td>\r\n              </tr>";
                    }
                }
            }
        } else {
            $query = $sqlc->query("SELECT count(*) FROM `characters` WHERE account = {$id}");
            $chars_on_realm = $sqlc->result($query, 0);
            $output .= "\r\n              <tr>\r\n                <td>{$lang_user['chars_on_realm']}</td>\r\n                <td>{$chars_on_realm}</td>\r\n              </tr>";
            if ($chars_on_realm) {
                $char_array = $sqlc->query("SELECT guid,name,race,class, level, gender FROM `characters` WHERE account = {$id}");
                while ($char = $sqlc->fetch_array($char_array)) {
                    $output .= "\r\n                <tr>\r\n                  <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;'---></td>\r\n                  <td>\r\n                    <a href=\"char.php?id={$char['0']}\">{$char['1']}  - <img src='img/c_icons/{$char[2]}-{$char[5]}.gif' onmousemove='toolTip(\"" . char_get_race_name($char[2]) . "\",\"item_tooltip\")' onmouseout='toolTip()' alt=\"\" />\r\n                    <img src='img/c_icons/{$char[3]}.gif' onmousemove='toolTip(\"" . char_get_class_name($char[3]) . "\",\"item_tooltip\")' onmouseout='toolTip()' alt=\"\"/> - lvl " . char_get_level_color($char[4]) . "</a>\r\n                  </td>\r\n                </tr>";
                }
            }
        }
        $output .= "\r\n              <tr>\r\n                <td>";
        if ($user_lvl >= $action_permission['delete']) {
            makebutton($lang_user['del_acc'], "user.php?action=del_user&amp;check%5B%5D={$id}\" type=\"wrn", 130);
        }
        $output .= "\r\n                </td>\r\n                <td>";
        if ($user_lvl >= $action_permission['update']) {
            makebutton($lang_user['update_data'], "javascript:do_submit_data()", 130);
        }
        makebutton($lang_global['back'], "javascript:window.history.back()\" type=\"def", 130);
        $output .= "\r\n                </td>\r\n                </tr>\r\n              </table>\r\n            </form>\r\n          </fieldset>\r\n          <br /><br />\r\n        </center>\r\n";
    } else {
        error($lang_global['err_no_user']);
    }
}
Example #24
0
function get_item_icon($itemid)
{
    global $dbc_db, $world_db, $realm_id, $proxy_cfg, $item_icons, $sql, $core;
    $sqld = new SQL();
    $sqld->connect($dbc_db["addr"], $dbc_db["user"], $dbc_db["pass"], $dbc_db["name"], $dbc_db["encoding"]);
    $sqlw = new SQL();
    $sqlw->connect($world_db[1]["addr"], $world_db[1]["user"], $world_db[1]["pass"], $world_db[1]["name"], $world_db[1]["encoding"]);
    if ($core == 1) {
        $result = $sqlw->query("SELECT `displayid` FROM `items` WHERE `entry`='" . $itemid . "' LIMIT 1");
    } else {
        $result = $sqlw->query("SELECT `displayid` FROM `item_template` WHERE `entry`='" . $itemid . "' LIMIT 1");
    }
    $displayid_record = $sqlw->fetch_assoc($result);
    $displayid = $displayid_record["displayid"];
    $result = $sqld->query("SELECT `IconName` FROM itemdisplayinfo WHERE id='" . $displayid . "'");
    $icon_fields = $sqld->fetch_assoc($result);
    return $item_icons . "/" . $icon_fields["IconName"] . ".png";
}
Example #25
0
function events()
{
    global $output, $lang_events, $realm_id, $world_db, $itemperpage;
    $sqlw = new SQL();
    $sqlw->connect($world_db[$realm_id]['addr'], $world_db[$realm_id]['user'], $world_db[$realm_id]['pass'], $world_db[$realm_id]['name']);
    //==========================$_GET and SECURE========================
    // pagination and order by to prevent sql injection
    require_once './include/security.php';
    $order_dir = $dir ? 'DESC' : 'ASC';
    $dir = $dir ? 1 : 0;
    //==========================$_GET and SECURE end========================
    // for multipage support
    $all_record = $sqlw->result($sqlw->query('
		SELECT count(*) 
		FROM game_event 
		WHERE start_time <> end_time'), 0);
    // main data that we need for this page, game events
    $result = $sqlw->query('
		SELECT entry, description, start_time, occurence, length
		FROM game_event 
		WHERE start_time <> end_time 
		ORDER BY ' . $order_by . ' ' . $order_dir . ' 
		LIMIT ' . $start . ', ' . $itemperpage . '');
    //---------------Page Specific Data Starts Here--------------------------
    $output .= '
<center>
<table class="top_hidden">
	<tr>
		<td width="25%" align="right">';
    // multi page links
    $output .= $lang_events['total'] . ' : ' . $all_record . '<br /><br />' . generate_pagination('events.php?order_by=' . $order_by . '&amp;dir=' . ($dir ? 0 : 1), $all_record, $itemperpage, $start);
    // column headers, with links for sorting
    $output .= '
		</td>
	</tr>
</table>
<table class="lined">
	<tr>
		<th width="1%"><a href="events.php?order_by=entry&amp;start=' . $start . '&amp;dir=' . $dir . '"' . ($order_by === 'entry' ? ' class="' . $order_dir . '"' : '') . '>ID</a></th>
		<th width="34%"><a href="events.php?order_by=description&amp;start=' . $start . '&amp;dir=' . $dir . '"' . ($order_by === 'description' ? ' class="' . $order_dir . '"' : '') . '>' . $lang_events['descr'] . '</a></th>
		<th width="25%"><a href="events.php?order_by=start_time&amp;start=' . $start . '&amp;dir=' . $dir . '"' . ($order_by === 'start_time' ? ' class="' . $order_dir . '"' : '') . '>' . $lang_events['start'] . '</a></th>
		<th width="20%"><a href="events.php?order_by=occurence&amp;start=' . $start . '&amp;dir=' . $dir . '"' . ($order_by === 'occurence' ? ' class="' . $order_dir . '"' : '') . '>' . $lang_events['occur'] . '</a></th>
		<th width="20%"><a href="events.php?order_by=length&amp;start=' . $start . '&amp;dir=' . $dir . '"' . ($order_by === 'length' ? ' class="' . $order_dir . '"' : '') . '>' . $lang_events['length'] . '</a></th>
	</tr>';
    while ($events = $sqlw->fetch_assoc($result)) {
        $days = floor(round($events['occurence'] / 60) / 24);
        $hours = round($events['occurence'] / 60) - $days * 24;
        $event_occurance = '';
        if ($days) {
            $event_occurance .= $days . ' days ';
        }
        if ($hours) {
            $event_occurance .= $hours . ' hours';
        }
        $days = floor(round($events['length'] / 60) / 24);
        $hours = round($events['length'] / 60) - $days * 24;
        $event_duration = '';
        if ($days) {
            $event_duration .= $days . ' days ';
        }
        if ($hours) {
            $event_duration .= $hours . ' hours';
        }
        $output .= '
	<tr valign="top">
			<td>' . $events['entry'] . '</td>
			<td align="left">' . $events['description'] . '</td>
			<td>' . $events['start_time'] . '</td>
			<td>' . $event_occurance . '</td>
			<td>' . $event_duration . '</td>
		</tr>';
    }
    unset($event_duration);
    unset($event_occurance);
    unset($hours);
    unset($days);
    unset($events);
    unset($result);
    $output .= '
	<tr>
		<td colspan="4" class="hidden" align="right" width="25%">';
    // multi page links
    $output .= generate_pagination('events.php?order_by=' . $order_by . '&amp;dir=' . ($dir ? 0 : 1), $all_record, $itemperpage, $start);
    unset($start);
    $output .= '
		</td>
	</tr>
	<tr>
		<td colspan="4" class="hidden" align="right">' . $lang_events['total'] . ' : ' . $all_record . '</td>
	</tr>
</table>
</center>';
}
function accounts()
{
    global $output, $corem_db, $logon_db, $itemperpage, $core;
    // we need $core to be set
    if ($core == 0) {
        $core = detectcore();
    }
    $sqlm = new SQL();
    $sqlm->connect($corem_db["addr"], $corem_db["user"], $corem_db["pass"], $corem_db["name"], $corem_db["encoding"]);
    $sqll = new SQL();
    $sqll->connect($logon_db["addr"], $logon_db["user"], $logon_db["pass"], $logon_db["name"], $logon_db["encoding"]);
    $start = isset($_GET["start"]) ? $sqll->quote_smart($_GET["start"]) : 0;
    if (!is_numeric($start)) {
        $start = 0;
    }
    $order_by = isset($_GET["order_by"]) ? $sqll->quote_smart($_GET["order_by"]) : "acct";
    if ($order_by == "login") {
        if ($core == 1) {
            $order_by = "login";
        } else {
            $order_by = "username";
        }
    }
    $dir = isset($_GET["dir"]) ? $sqll->quote_smart($_GET["dir"]) : 1;
    if (!preg_match('/^[01]{1}$/', $dir)) {
        $dir = 1;
    }
    $accts_per_page = isset($_GET["perpage"]) ? $sqll->quote_smart($_GET["perpage"]) : $itemperpage;
    if (!is_numeric($accts_per_page)) {
        $accts_per_page = $itemperpage;
    }
    $order_dir = $dir ? "ASC" : "DESC";
    $dir = $dir ? 0 : 1;
    $search_value = isset($_GET["search_value"]) ? $sqll->quote_smart($_GET["search_value"]) : "";
    $search_by = isset($_GET["search_by"]) ? $sqll->quote_smart($_GET["search_by"]) : "";
    if ($core == 1) {
        $search_menu = array(array("login", "by_name"), array("acct", "by_id"), array("ScreenName", "by_sn"), array("SecurityLevel", "by_sl"), array("WebAdmin", "by_web"));
    } else {
        $search_menu = array(array("username", "by_name"), array("id", "by_id"), array("ScreenName", "by_sn"), array("SecurityLevel", "by_sl"), array("WebAdmin", "by_web"));
    }
    $search = "";
    if ($search_value != "" && $search_by != "") {
        if ($search_by == "WebAdmin") {
            $search = "WHERE SecurityLevel>='1073741824'";
        } else {
            $search = "WHERE " . $search_by . " LIKE '%" . $search_value . "%'";
        }
    }
    if ($core == 1) {
        $query = "SELECT *, (SecurityLevel & 1073741824) AS WebAdmin\n              FROM accounts\n                LEFT JOIN `" . $corem_db["name"] . "`.config_accounts ON accounts.login=`" . $corem_db["name"] . "`.config_accounts.Login COLLATE utf8_general_ci\n              " . $search . "\n              ORDER BY " . $order_by . " " . $order_dir . " LIMIT " . $start . ", " . $accts_per_page;
        $count_query = "SELECT COUNT(*) FROM accounts\n                      LEFT JOIN `" . $corem_db["name"] . "`.config_accounts ON accounts.login=`" . $corem_db["name"] . "`.config_accounts.Login COLLATE utf8_general_ci\n                    " . $search;
    } else {
        $query = "SELECT *, id AS acct, username AS login, (SecurityLevel & 1073741824) AS WebAdmin\n              FROM account\n                LEFT JOIN `" . $corem_db["name"] . "`.config_accounts ON account.username=`" . $corem_db["name"] . "`.config_accounts.Login\n              " . $search . "\n              ORDER BY " . $order_by . " " . $order_dir . " LIMIT " . $start . ", " . $accts_per_page;
        $count_query = "SELECT COUNT(*) FROM account\n                      LEFT JOIN `" . $corem_db["name"] . "`.config_accounts ON account.username=`" . $corem_db["name"] . "`.config_accounts.Login\n                    " . $search;
    }
    $result = $sqll->query($query);
    $count_result = $sqll->query($count_query);
    $all_record = $sqll->result($count_result, 0);
    $accounts_action = 0;
    if (isset($_GET["editacct"])) {
        $accounts_action = "edit";
    }
    if (!$accounts_action) {
        $output .= '
        <div class="center" id="admin_accounts_search">
          <form action="admin.php" method="get" id="form">
            <div>
              <input type="hidden" name="section" value="accounts" />
            </div>
            <table class="hidden" id="admin_accounts_search_table">
              <tr>
                <td>
                  <input type="text" size="24" maxlength="50" name="search_value" value="' . $search_value . '" />
                </td>
                <td>
                  <select name="search_by">';
        foreach ($search_menu as $row) {
            $output .= '
                    <option value="' . $row[0] . '"' . ($search_by === $row[0] ? ' selected="selected"' : '') . '>' . lang("admin", $row[1]) . '</option>';
        }
        $output .= '
                  </select>
                </td>
                <td>
                  <input type="submit" name="search" value="' . lang("global", "search") . '" />
                </td>
              </tr>
            </table>
          </form>';
        $output .= '
          <a href="admin.php?section=accounts&amp;order_by=' . $order_by . '&amp;start=' . $start . '&amp;dir=' . ($dir ? 0 : 1) . '&amp;perpage=' . $accts_per_page . '">' . lang("admin", "clearsearch") . '</a>
          <br />
          <br />';
        if ($order_by == "username") {
            $order_by = "login";
        }
        $output .= '
          <table class="hidden admin_accounts">
            <tr>
              <td colspan="2" align="left">
                ' . lang("admin", "per_page") . ': ';
        $per_page_choices = array(25, 50, 100, 200);
        for ($i = 0; $i < count($per_page_choices); $i++) {
            if ($accts_per_page != $per_page_choices[$i]) {
                $output .= '<a href="admin.php?section=accounts&amp;order_by=' . $order_by . '&amp;start=' . $start . '&amp;dir=' . ($dir ? 0 : 1) . ($search_value && $search_by ? '&amp;search_by=' . $search_by . '&amp;search_value=' . $search_value . '' : '') . '&amp;perpage=' . $per_page_choices[$i] . '">' . $per_page_choices[$i] . '</a>';
            } else {
                $output .= $per_page_choices[$i];
            }
            if ($i < count($per_page_choices) - 1) {
                $output .= ',&nbsp;';
            }
        }
        $output .= '
              </td>
            </tr>
            <tr>
              <td align="left">' . lang("admin", "total") . ': ' . $all_record . '</td>
              <td align="right">';
        $output .= generate_pagination('admin.php?section=accounts&amp;order_by=' . $order_by . '&amp;start=' . $start . '&amp;dir=' . ($dir ? 0 : 1) . ($search_value && $search_by ? '&amp;search_by=' . $search_by . '&amp;search_value=' . $search_value . '' : '') . '&amp;perpage=' . $accts_per_page, $all_record, $accts_per_page, $start);
        $output .= '
              </td>
            </tr>
          </table>
          <table class="simple admin_accounts">
            <tr>
              <th style="width: 10%;">' . lang("admin", "edit") . '</th>
              <th>
                <a href="admin.php?section=accounts&amp;order_by=acct&amp;start=' . $start . ($search_value && $search_by ? '&amp;search_by=' . $search_by . '&amp;search_value=' . $search_value . '' : '') . '&amp;dir=' . $dir . '&amp;perpage=' . $accts_per_page . '"' . ($order_by == 'acct' ? ' class="' . $order_dir . '"' : '') . '>' . lang("user", "acct") . '</a>
              </th>
              <th>
                <a href="admin.php?section=accounts&amp;order_by=login&amp;start=' . $start . ($search_value && $search_by ? '&amp;search_by=' . $search_by . '&amp;search_value=' . $search_value . '' : '') . '&amp;dir=' . $dir . '&amp;perpage=' . $accts_per_page . '"' . ($order_by == 'login' ? ' class="' . $order_dir . '"' : '') . '>' . lang("admin", "login") . '</a>
              </th>
              <th>
                <a href="admin.php?section=accounts&amp;order_by=ScreenName&amp;start=' . $start . ($search_value && $search_by ? '&amp;search_by=' . $search_by . '&amp;search_value=' . $search_value . '' : '') . '&amp;dir=' . $dir . '&amp;perpage=' . $accts_per_page . '"' . ($order_by == 'ScreenName' ? ' class="' . $order_dir . '"' : '') . '>' . lang("admin", "screenname") . '</a>
              </th>
              <th style="width: 20%;">
                <a href="admin.php?section=accounts&amp;order_by=SecurityLevel&amp;start=' . $start . ($search_value && $search_by ? '&amp;search_by=' . $search_by . '&amp;search_value=' . $search_value . '' : '') . '&amp;dir=' . $dir . '&amp;perpage=' . $accts_per_page . '"' . ($order_by == 'SecurityLevel' ? ' class="' . $order_dir . '"' : '') . '>' . lang("admin", "seclvl") . '</a>
              </th>
              <th style="width: 15%;">
                <a href="admin.php?section=accounts&amp;order_by=WebAdmin&amp;start=' . $start . ($search_value && $search_by ? '&amp;search_by=' . $search_by . '&amp;search_value=' . $search_value . '' : '') . '&amp;dir=' . $dir . '&amp;perpage=' . $accts_per_page . '"' . ($order_by == 'WebAdmin' ? ' class="' . $order_dir . '"' : '') . '>' . lang("admin", "acpaccess") . '</a>
              </th>
              <th style="width: 15%;">
                <a href="admin.php?section=accounts&amp;order_by=TempPassword&amp;start=' . $start . ($search_value && $search_by ? '&amp;search_by=' . $search_by . '&amp;search_value=' . $search_value . '' : '') . '&amp;dir=' . $dir . '&amp;perpage=' . $accts_per_page . '"' . ($order_by == 'TempPassword' ? ' class="' . $order_dir . '"' : '') . '>' . lang("admin", "confirm_account") . '</a>
              </th>
            </tr>';
        $color = "#EEEEEE";
        while ($acct = $sqll->fetch_assoc($result)) {
            $acct["SecurityLevel"] = isset($acct["SecurityLevel"]) ? $acct["SecurityLevel"] : 0;
            $acct["WebAdmin"] = isset($acct["WebAdmin"]) ? $acct["WebAdmin"] : 0;
            $acct["ScreenName"] = isset($acct["ScreenName"]) ? $acct["ScreenName"] : "";
            if ($acct["SecurityLevel"] >= 1073741824) {
                $acct["SecurityLevel"] -= 1073741824;
            }
            $sl_query = "SELECT * FROM config_gm_level_names WHERE Security_Level='" . $acct["SecurityLevel"] . "'";
            $sl_result = $sqlm->query($sl_query);
            $sl = $sqlm->fetch_assoc($sl_result);
            $output .= '
            <tr>
              <td style="background-color:' . $color . '; text-align: center;">
                <span>
                  <a href="admin.php?section=accounts&amp;acct=' . $acct["login"] . '&amp;editacct=editaccount">
                    <img src="img/edit.png" alt="" />
                  </a>
                </span>
              </td>
              <td style="background-color:' . $color . '; text-align: center;">
                <span>' . $acct["acct"] . '</span>
              </td>
              <td style="background-color:' . $color . '; text-align: center;">
                <span>' . strtolower($acct["login"]) . '</span>
              </td>
              <td style="background-color:' . $color . '; text-align: center;">
                <span>' . $acct["ScreenName"] . '</span>
              </td>
              <td style="background-color:' . $color . '; text-align: center;">
                <span>' . $sl["Full_Name"] . ' (' . $acct["SecurityLevel"] . ')</span>
              </td>
              <td style="background-color:' . $color . '; text-align: center;">
                <span>
                  <img src="img/' . ($acct["WebAdmin"] ? 'up' : 'down') . '.gif" alt="" />
                </span>
              </td>
              <td style="background-color:' . $color . '; text-align: center;">';
            if ($acct["TempPassword"] != "") {
                $output .= '
                <center>
                  <aspanhref="register.php?action=do_activate&amp;key=' . $acct["TempPassword"] . '&amp;redirect=1" onmouseover="oldtoolTip(\'' . lang("admin", "confirm_account_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">
                    <img src="img/aff_tick.png" alt="" />
                  </a>
                </span>';
            } else {
                $output .= '
                &nbsp;';
            }
            $output .= '
              </td>
            </tr>';
            $color = $color == "#EEEEEE" ? "#FFFFFF" : "#EEEEEE";
        }
        $output .= '
          </table>
        </div>';
    } else {
        if (isset($_GET["acct"])) {
            $acct = $sqlm->quote_smart($_GET["acct"]);
        } else {
            redirect("admin.php?section=accounts&error=1");
        }
        if ($core == 1) {
            $logon_acct = $sqll->fetch_assoc($sqll->query("SELECT * FROM accounts WHERE login='******'"));
        } else {
            $logon_acct = $sqll->fetch_assoc($sqll->query("SELECT *, username AS login FROM account WHERE username='******'"));
        }
        $sl_query = "SELECT * FROM config_gm_level_names";
        $sl_result = $sqlm->query($sl_query);
        $sn_acct = $sqlm->fetch_assoc($sqlm->query("SELECT * FROM config_accounts WHERE Login='******'"));
        $sec_level_only = $sn_acct["SecurityLevel"] ? $sn_acct["SecurityLevel"] : 0;
        if ($sec_level_only >= 1073741824) {
            $sec_level_only -= 1073741824;
        }
        $web_admin_only = $sn_acct["SecurityLevel"] & 1073741824;
        $output .= '
        <div id="admin_edit_account">
          <form action="admin.php" method="get" id="form">
            <div>
              <input type="hidden" name="section" value="accounts" />
              <input type="hidden" name="action" value="saveacct" />
            </div>
            <fieldset>
              <table>
                <tr>
                  <td style="width: 50%;">' . lang("admin", "login") . ': </td>
                  <td>
                    <input type="text" readonly="readonly" name="login" value="' . $logon_acct["login"] . '" />
                  </td>
                </tr>
                <tr>
                  <td>' . lang("admin", "screenname") . ': </td>
                  <td>
                    <input type="text" name="sn" value="' . $sn_acct["ScreenName"] . '" />
                  </td>
                </tr>
                <tr>
                  <td>' . lang("admin", "seclvl") . ': </td>
                  <td>
                    <select name="sec">';
        while ($row = $sqlm->fetch_assoc($sl_result)) {
            $output .= '
                      <option value="' . $row["Security_Level"] . '" ' . ($sec_level_only == $row["Security_Level"] ? 'selected="selected"' : '') . '>' . $row["Full_Name"] . ' (' . $row["Security_Level"] . ')</option>';
        }
        $output .= '
                    </select>
                  </td>
                </tr>
                <tr>
                  <td class="help">
                    <a href="#" onmouseover="oldtoolTip(\'' . lang("admin", "acpaccess_tip") . '\', \'info_tooltip\')" onmouseout="oldtoolTip()">' . lang("admin", "acpaccess") . '</a>:
                  </td>
                  <td>
                    <input type="checkbox" name="acp" ' . ($web_admin_only ? 'checked="checked"' : '') . ' />
                  </td>
                </tr>
              </table>
            </fieldset>
            <div>
              <input type="submit" name="saveacct" value="' . lang("admin", "save") . '" />
            </div>
          </form>
        </div>';
    }
}
Example #27
0
function edit_reward_item(&$sqlm)
{
    global $output, $lang_rewards, $lang_global, $mmfpm_db, $action_permission;
    valid_login($action_permission['update']);
    $sqlm = new SQL();
    $sqlm->connect($mmfpm_db['addr'], $mmfpm_db['user'], $mmfpm_db['pass'], $mmfpm_db['name']);
    if (empty($_GET['item'])) {
        redirect('rewards.php?error=1');
    }
    $item = $sqlm->quote_smart($_GET['item']);
    if (is_numeric($item)) {
    } else {
        redirect('rewards.php?error=1');
    }
    if ($item = $sqlm->fetch_assoc($sqlm->query('SELECT item, quantity, points FROM mm_reward_item WHERE item = ' . $item . ''))) {
        $output .= '
<center>
	<fieldset class="half_frame">
		<legend>EDIT ITEM</legend>
			<form action="rewards.php?action=do_edit_reward_item" method="post" name="form">
			<table class="flat">
				<tr>
					<td>item</td>
					<td><input type="text" name="item" size="40" maxlength="12" value="' . $item['item'] . '" /></td>
				</tr>
				<tr>
					<td>Quantity</td>
					<td><input type="text" name="quantity" size="40" maxlength="3" value="' . $item['quantity'] . '" /></td>
				</tr>
				<tr>
					<td>Points</td>
					<td><input type="text" name="points" size="40" maxlength="10" value="' . $item['points'] . '" /></td>
				</tr>';
        $output .= '
		<table class="hidden">
			<tr>
				<td>';
        makebutton('Submit', 'javascript:do_submit()', 130);
        $output .= '
				</td>				  
			</table>
			</form>
		</fieldset>
		<br /><br />';
    }
}
Example #28
0
    if ($avatar_ext == '2') {
        return FORUM_ROOT . 'img/avatars/' . $user_id . '.jpg?no_cache=' . random_keyx(8, TRUE);
    }
    if ($avatar_ext == '3') {
        return FORUM_ROOT . 'img/avatars/' . $user_id . '.png?no_cache=' . random_keyx(8, TRUE);
    }
    if ($avatar_ext == '0') {
        return SITE_ROOT . 'portal/assets/img/default-avatar.png';
    }
}
if (isset($_GET['lastid']) && !empty($_GET['lastid'])) {
    $db = new SQL(DB_SERVER, DB_USERNAME, DB_PASSWORD, DB_NAME, false);
    $lastid = $db->prot(htmlspecialchars($_GET['lastid']));
    $db->query("SELECT * FROM ip_shouts WHERE id<'{$lastid}' ORDER BY id DESC LIMIT 20");
    $count_shout_more = 0;
    while ($row = $db->fetch_assoc()) {
        $count_shout_more++;
        $get_shoutID = $row['id'];
        $get_userID = $row['user_id'];
        $get_shoutMsg = $row['shout_msg'];
        $get_sTime = $row['shout_time'];
        $dbf = new SQL(DB_SERVER, DB_USERNAME, DB_PASSWORD, DB_NAME, false);
        $dbf->query("SELECT * FROM forum_users WHERE id='{$get_userID}'");
        if ($rowf = $dbf->fetch_array()) {
            $get_groupID = $rowf['group_id'];
            $get_username = $rowf['username'];
            $get_realname = $rowf['realname'];
            $get_title = $rowf['title'];
            $get_location = $rowf['location'];
            $get_registered = $rowf['registered'];
            $get_url = $rowf['url'];
Example #29
0
function motd(&$sqlm)
{
    global $output, $lang_motd, $lang_global, $lang_index, $action_permission, $user_lvl, $user_id, $motd_display_poster, $realm_id, $mmfpm_db;
    // minimum permission to view page
    valid_login($action_permission['read']);
    //MOTD part
    $sqlm = new SQL();
    $sqlm->connect($mmfpm_db['addr'], $mmfpm_db['user'], $mmfpm_db['pass'], $mmfpm_db['name']);
    $start_m = isset($_GET['start_m']) ? $sqlm->quote_smart($_GET['start_m']) : 0;
    if (is_numeric($start_m)) {
    } else {
        $start_m = 0;
    }
    // get all entries, need to add total to page
    $all_record_m = $sqlm->result($sqlm->query('
		SELECT count(*) 
		FROM mm_motd'), 0);
    // to delete MOTD
    if ($user_lvl >= $action_permission['delete']) {
        $output .= '
<script type="text/javascript">
	// <![CDATA[
		answerbox.btn_ok="' . $lang_global['yes_low'] . '";
		answerbox.btn_cancel="' . $lang_global['no'] . '";
		var del_motd = "motd.php?action=delete_motd&amp;id=";
	// ]]>
</script>';
    }
    $output .= '
<center>
<table class="lined">
	<tr>
		<th align="center">';
    // to add new MOTD
    if ($user_lvl >= $action_permission['insert']) {
        $output .= '
			<font size="2"><a href="motd.php?action=add_motd&amp;error=4">' . $lang_index['add_motd'] . '</a></font>';
    } else {
        $output .= '
			<font size="2">' . $lang_index['motd'] . '</a></font>
		</th>
	</tr>';
    }
    // if is there any record
    if ($all_record_m) {
        // here we get MOTD content
        $result = $sqlm->query('
			SELECT id, realmid, type, content 
			FROM mm_motd 
			WHERE realmid = ' . $realm_id . ' 
			ORDER BY id DESC 
			LIMIT ' . $start_m . ', 10');
        while ($post = $sqlm->fetch_assoc($result)) {
            $output .= '
	<tr>
		<td align="left" class="large">
			<blockquote>' . bbcode_bbc2html($post['content']) . '</blockquote>
		</td>
	</tr>
	<tr>
		<td align="left">';
            $motd_display_poster ? $output .= $post['type'] : '';
            // to delete MOTD
            if ($user_lvl >= $action_permission['delete']) {
                $output .= '
			<img src="img/cross.png" width="12" height="12" onclick="answerBox(\'' . $lang_global['delete'] . ': &lt;font color=white&gt;' . $post['id'] . '&lt;/font&gt;&lt;br /&gt;' . $lang_global['are_you_sure'] . '\', del_motd + ' . $post['id'] . ');" style="cursor:pointer;" alt="" />';
            }
            // to edit MOTD
            if ($user_lvl >= $action_permission['update']) {
                $output .= '
			<a href="motd.php?action=edit_motd&amp;error=3&amp;id=' . $post['id'] . '">
				<img src="img/edit.png" width="14" height="14" alt="" />
			</a>';
            }
            $output .= '
		</td>
	</tr>
	<tr>
		<td class="hidden"></td>
	</tr>';
        }
        $output .= '
	<tr>
		<td align="right" class="hidden">' . generate_pagination('motd.php?start=0', $all_record_m, 10, $start_m, 'start_m') . '</td>
	</tr>';
    }
    $output .= '
</table>';
}
function char_companions(&$sqlr, &$sqlc, &$sqlw)
{
    global $output, $lang_global, $lang_char, $realm_id, $characters_db, $world_db, $action_permission, $user_lvl, $user_name, $item_datasite;
    // this page uses wowhead tooltops
    wowhead_tt();
    //==========================$_GET and SECURE=================================
    // id and multi realm security to prevent sql injection
    require_once './include/char/include/char_multi_realm_security.php';
    //==========================$_GET and SECURE end=============================
    // getting character data from database
    $result = $sqlc->query('
		SELECT account, name, race, class, gender, level
		FROM characters
		WHERE guid = ' . $id . ' 
		LIMIT 1');
    // no point going further if character does not exist
    if ($sqlc->num_rows($result)) {
        $char = $sqlc->fetch_assoc($result);
        // we get user permissions first
        $owner_acc_id = $sqlc->result($result, 0, 'account');
        $result = $sqlr->query('
			SELECT gmlevel, username 
			FROM account 
			WHERE id = ' . $char['account'] . '');
        $owner_gmlvl = $sqlr->result($result, 0, 'gmlevel');
        $owner_name = $sqlr->result($result, 0, 'username');
        // check user permission
        if ($user_lvl > $owner_gmlvl || $owner_name === $user_name) {
            // character sub header
            $output .= '
<center>
<div id="tab_content">
	<h1>' . $lang_char['extra'] . '</h1>
	<br />';
            // character menu tab
            require_once './include/char/include/char_header.php';
            // character info
            require_once './include/char/include/char_info.php';
            //---------------Page Specific Data Starts Here--------------------------
            $output .= '
	<h1>' . $lang_char['char_companions'] . '</h1>
	<br />';
            // character extra menu tab
            require_once './include/char/include/char_extra_header.php';
            $output .= '
	<div id="tab_content2">
		<table class="lined" style="width: 450px;">
			<tr>
				<th width="15%">' . $lang_char['icon'] . '</th>
				<th width="15%">' . $lang_char['quantity'] . '</th>
				<th width="70%">' . $lang_char['name'] . '</th>
			</tr>';
            $sqlw = new SQL();
            $sqlw->connect($world_db[$realm_id]['addr'], $world_db[$realm_id]['user'], $world_db[$realm_id]['pass'], $world_db[$realm_id]['name']);
            $item = $sqlw->query('
				SELECT entry, description
				FROM item_template
				WHERE BagFamily = 4096');
            while ($template = $sqlw->fetch_assoc($item)) {
                $character = $sqlc->query('
					SELECT item, item_template
					FROM character_inventory
					WHERE guid = ' . $id . ' AND item_template = ' . $template['entry'] . ' ');
                while ($inventory = $sqlc->fetch_assoc($character)) {
                    $instance = $sqlc->query('
						SELECT CAST(SUBSTRING_INDEX(SUBSTRING_INDEX(`data`, " ", 15), " ", -1) AS UNSIGNED) AS item
						FROM item_instance
						WHERE guid = ' . $inventory['item'] . ' ');
                    $output .= '
			<tr valign="center">
				<td >
					<a style="padding:2px;" href="' . $item_datasite . $inventory['item_template'] . '" target="_blank">
						<img src="' . get_item_icon($inventory['item_template'], $sqlm) . '" alt="' . $inventory['item_template'] . '" class="icon_border_0" />
					</a>
				</td>
				<td>
					' . $instance['item'] . '
				</td>
				<td>
					<span onmousemove="toolTip(\'' . $template['description'] . '\', \'item_tooltip\')" onmouseout="toolTip()">' . get_item_name($inventory['item_template'], $sqlw) . '</span>
				</td>
			</tr>';
                }
            }
            $output .= '
		</table>';
            unset($template);
            unset($inventory);
            unset($item);
            unset($character);
            unset($instance);
            //---------------Page Specific Data Ends Here--------------------------
            $output .= '
	</div>
</div>
<br />';
            require_once './include/char/include/char_ footer.php';
            $output .= '
<br />
</center>';
        } else {
            error($lang_char['no_permission']);
        }
    } else {
        error($lang_char['no_char_found']);
    }
}