function perfom_mail()
{
global $txt, $x7c, $x7s, $print, $db, $prefix, $x7p;
$sys_msg = "";
$body = "";
include_once "./lib/message.php";
if (isset($_GET['ok'])) {
$body = "<div id=\"sysmsg\">Messaggio inviato</div>";
} elseif (isset($_POST['to']) && isset($_POST['subject']) && isset($_POST['body'])) {
// Make sure the subject isn't null
if ($_POST['subject'] == "") {
$_POST['subject'] = $txt[173];
}
// Send the msg
$_POST['body'] = eregi_replace("\n", "<Br>", $_POST['body']);
if (!isset($_POST['group'])) {
$query = $db->DoQuery("SELECT * FROM {$prefix}users WHERE username='******'to']}'");
$row = $db->Do_Fetch_Row($query);
if ($row[0] == "") {
$person_error = true;
} else {
$person_error = false;
}
} else {
$person_error = false;
}
//Group send
if (isset($_POST['group'])) {
if (!checkIfMaster() && !in_array($_POST['to'], $x7p->profile['usergroup'])) {
$body = "<div id=\"sysmsg\">Non sei autorizzato a inviare a questo gruppo</div>";
$_POST['msg'] = $_POST['body'];
} else {
if (!checkIfMaster() && $_POST['to'] == "all") {
$body = "<div id=\"sysmsg\">Non sei autorizzato a inviare a questo gruppo</div>";
$_POST['msg'] = $_POST['body'];
} else {
if ($_POST['to'] == "all") {
$query = "SELECT username FROM {$prefix}users WHERE sheet_ok = 1";
} else {
$query = "SELECT username FROM {$prefix}groups WHERE usergroup = '{$_POST['to']}'";
}
$result = $db->DoQuery($query);
//Do the real send
while ($row = $db->Do_Fetch_Assoc($result)) {
send_offline_msg($row['username'], $_POST['subject'], $_POST['body']);
}
// Reset values
$_POST['subject'] = "";
$_POST['to'] = "";
$_GET['ok'] = 1;
header("Location: index.php?act=mail&ok=1");
}
}
} elseif (count_offline($_POST['to']) >= $x7c->settings['max_offline_msgs'] && $x7c->settings['max_offline_msgs'] != 0) {
$body = "<div id=\"sysmsg\">" . $txt[184] . "</div>";
$_POST['msg'] = $_POST['body'];
} elseif ($person_error) {
// Person doesn't exist
$body = "<div id=\"sysmsg\">" . $txt[610] . "</div>";
$_POST['msg'] = $_POST['body'];
} else {
send_offline_msg($_POST['to'], $_POST['subject'], $_POST['body']);
// Reset values
$_POST['subject'] = "";
$_POST['to'] = "";
$_GET['ok'] = 1;
header("Location: index.php?act=mail&ok=1");
}
if (isset($_POST['msg'])) {
$_POST['msg'] = eregi_replace("<Br>", "\n", $_POST['msg']);
}
} elseif (isset($_POST['delete_group'])) {
$body = "<div id=\"sysmsg\">Messaggio cancellato</div>";
foreach ($_POST['delete_group'] as $delete) {
offline_delete($delete);
}
} elseif (isset($_GET['delete'])) {
$body = "<div id=\"sysmsg\">Messaggio cancellato</div>";
offline_delete($_GET['delete']);
} else {
$body = "";
}
$msgs = get_offline_msgs();
if (isset($_GET['read'])) {
// Print an individual message
offline_markasread($_GET['read']);
$mid = $_GET['read'];
$author = @$msgs[$mid][1];
$nb = offline_msg_split(@$msgs[$mid][2]);
$msgbody = $nb[0];
$subject = $nb[1];
$time = $nb[2];
// Set default values for reply form
$_POST['to'] = $author;
$_POST['subject'] = $subject;
$replybody = $msgbody;
$replybody = eregi_replace("<br>", "\n", $replybody);
$_POST['msg'] = " \n\n{$txt['174']}\n\n" . $replybody;
$fwd = "Fwd: ";
$rply = "Re: ";
if (preg_match("/^Re:/", $subject)) {
$rply = "";
} elseif (preg_match("/^Fwd: /", $subject)) {
$fwd = "";
}
$body .= "\n\t\t\t\t\t\t<div> \n\t\t\t\t\t\t<table class=\"inside_table\" width=\"98%\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\">\n\t\t\t\t\t\t<Tr>\n\t\t\t\t\t\t\t<td class=\"dark_row\"><B>Mittente:</b> {$author}</td>\n\t\t\t\t\t\t</tr>\n\t\t\t\t\t\t<Tr>\n\t\t\t\t\t\t\t<td class=\"dark_row\"><b>Oggetto:</b> {$subject}</td>\n\t\t\t\t\t\t</tr>\n\t\t\t\t\t\t<Tr>\n\t\t\t\t\t\t\t<td class=\"dark_row\"><b>Data ricezione:</b> {$time}<hr></td>\n\t\t\t\t\t\t</tr>\n\t\t\t\t\t\t</table>\n\t\t\t\t\t\t</div>\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t<div id=\"msg_body\">\n\t\t\t\t\t\t<table class=\"inside_table\" width=\"98%\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\">\n\t\t\t\t\t\t<Tr>\n\t\t\t\t\t\t\t<td class=\"msg_txt\">{$msgbody}</td>\n\t\t\t\t\t\t</tr>\n\t\t\t\t\t\t</table>\n\t\t\t\t\t\t</div>\n\t\t\t\t\t\t\n\t\t\t\t\t\t<br>\n\t\t\t\t\t\t<div id=\"menu\">\n\t\t\t\t\t\t<a href=\"./index.php?act=mail&delete={$mid}\">[{$txt['175']}]</a>\n\t\t\t\t\t\t<a href=\"index.php?act=mail&write&back={$_GET['read']}&subject={$rply}{$_POST['subject']}&to={$_POST['to']}\">[Rispondi]</a>\n\t\t\t\t\t\t<a href=\"index.php?act=mail&write&back={$_GET['read']}&subject={$fwd}{$_POST['subject']}\">[Inoltra]</a>\n\t\t\t\t\t\n\t\t\t\t\t<Br><Br><div align=\"center\">\n\t\t\t\t\t<div align=\"left\">\n\t\t\t\t\t<a href=\"index.php?act=mail\">[Elenco]</a>\n\t\t\t\t\t</div>\n\t\t\t\t\t\n\t\t\t\t\t</div>";
} else {
if (!isset($_GET['write'])) {
// Display a table of all messages
//jingjing add here
$body .= "\n\t\t\t\t\t<script>\n\t\t\t\t\tfunction do_delete_all(){\n\t\t\t\t\t\turl = './index.php?act=mail&delete=_all_';\n\t\t\t\t\t\tif(!confirm('vuoi davvero cancellare tutti i messaggi?'))\n\t\t\t\t\t\t\treturn;\n\t\t\t\t\t\twindow.location.href=url;\n\t\t\t\t\t}\n\t\t\t\t\tfunction do_delete(){\n\t\t\t\t\t\tdocument.forms['message_form'].submit();\n\t\t\t\t\t}\n\t\t\t\t</script>";
$body .= "<form action='index.php?act=mail' method='POST' name='message_form'>\n <div id=\"message_tbl\">\n\t\t\t\t\t\t<table width=\"100%\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\" class=\"inside_table\">\n\t\t\t\t\t\t<tr>\n\t\t\t\t\t\t\t<th> </th>\n\t\t\t\t\t\t\t<th> </th>\n\t\t\t\t\t\t\t<th>{$txt['178']}</th>\n\t\t\t\t\t\t\t<th>{$txt['179']}</th>\n\t\t\t\t\t\t\t<th>Data</th>\n\t\t\t\t\t\t</tr>\n\n\t\t\t\t\t\t";
foreach ($msgs as $id => $val) {
$mid = $id;
$author = $val[1];
$nb = offline_msg_split($val[2]);
$msgbody = $nb[0];
$subject = $nb[1];
$time = $nb[2];
if ($val[3] == 0) {
$img = "<img src=\"{$print->image_path}new_mail.gif\">";
} else {
$img = "<img src=\"{$print->image_path}old_mail.gif\">";
}
$body .= "<tr>\n\t\t\t\t\t\t <td class=\"dark_row\"><input type=\"checkbox\" \n\t\t\t\t\t\t\t\tname=\"delete_group[]\" value=\"{$mid}\"></td>\n\t\t\t\t\t\t\t\t<td class=\"dark_row\">{$img}</td>\n\t\t\t\t\t\t\t\t<td class=\"dark_row\"><a href=\"./index.php?act=mail&read={$mid}\">{$subject}</a></td>\n\t\t\t\t\t\t\t\t<td class=\"dark_row\">{$author}</td>\n\t\t\t\t\t\t\t\t<td class=\"dark_row\">{$time}</td>\n\t\t\t\t\t\t\t\t</tr>";
}
$body .= "</table>\n\t\t\t\t\t</div>";
// Display Inbox totals
if ($x7c->settings['max_offline_msgs'] != 0) {
$number = count_offline($x7s->username);
$percentage = $number / $x7c->settings['max_offline_msgs'] * 100;
$percentage .= "%";
$number = $x7c->settings['max_offline_msgs'] - $number;
$txt[185] = eregi_replace("_p", $percentage, $txt[185]);
$txt[185] = eregi_replace("_n", "{$number}", $txt[185]);
$body .= "<Br><br>{$txt['185']}";
}
$body .= '<div id="menu"><a href="./index.php?act=mail&write">[Scrivi]</a>';
if (checkIfMaster() || $x7s->user_group != $x7c->settings['usergroup_default']) {
$body .= '<a href="./index.php?act=mail&write&group">[Mail di gruppo]</a>';
} else {
$body .= '[Mail di gruppo]';
}
$body .= "<a href='#' onClick=\"do_delete()\">[Cancella]</a>";
$body .= '<a href="#" onClick="do_delete_all()">[Cancella tutti]</a>';
$body .= "\n</div>";
$body .= "</form>";
}
}
// DO send form
if (isset($_GET['write'])) {
// These three isset() things are checking for default field values
if (!isset($_GET['subject'])) {
$_GET['subject'] = "";
}
if (!isset($_GET['to'])) {
$_GET['to'] = "";
}
if (!isset($_POST['msg'])) {
$_POST['msg'] = "";
}
$back = '';
$replybody = '';
if (isset($_GET['back'])) {
$back = "&read=" . $_GET['back'];
$nb = offline_msg_split(@$msgs[$_GET['back']][2]);
$msgbody = $nb[0];
$subject = $nb[1];
$replybody = $msgbody;
$replybody = eregi_replace("<br>", "\n", $replybody);
$replybody = " \n\n{$txt['174']}\n\n" . $replybody;
}
$to = "<p style=\"text-align: center\">\n\t\t\t\t\t<input type=\"hidden\" name=\"act\" value=\"mail\">\n\t\t\t\t\t{$txt['182']}: \n\t\t\t\t\t<br><input class=\"wickEnabled\" type=\"text\" name=\"to\" autocomplete=\"off\" value=\"{$_GET['to']}\">\n\t\t\t\t\t<br>";
if (isset($_GET['group'])) {
$elenco = '';
if (checkIfMaster()) {
$elenco = '<option value="all">Tutti</option>';
$query = "SELECT DISTINCT usergroup FROM {$prefix}groups";
$result = $db->DoQuery($query);
while ($row = $db->Do_Fetch_Assoc($result)) {
$elenco .= "<option value=\"{$row['usergroup']}\"> {$row['usergroup']} </option>\n";
}
} else {
if ($x7s->user_group != '' && $x7s->user_group != $x7c->settings['usergroup_default']) {
$elenco .= "<option value=\"{$x7s->user_group}\"> {$x7s->user_group} </option>\n";
}
}
$to = "<p style=\"text-align: center\">\n\t\t\t\t\t<input type=\"hidden\" name=\"act\" value=\"mail\">\n\t\t\t\t\t<input type=\"hidden\" name=\"group\">\n\t\t\t\t\t{$txt['182']}: \n\t\t\t\t\t<br><select class=\"text_input\" name=\"to\" style=\"background: white;\">\n\t\t\t\t\t\t{$elenco}\t\n\t\t\t\t\t</select>\n\t\t\t\t\t<br>";
}
$accounts = '';
$query = "SELECT username FROM {$prefix}users WHERE sheet_ok = 1";
$result = $db->DoQuery($query);
while ($row = $db->Do_Fetch_Assoc($result)) {
$accounts .= "'{$row['username']}',";
}
$accounts .= "''";
$body .= "\n\t\t\t\t\t<script type=\"text/javascript\" language=\"JavaScript\">\n\t\t\t\t\tcollection =\n\t\t\t\t\t[" . $accounts . "\n\t\t\t\t\t];\n\t\t\t\t\t</script>\n\t\t\t\t\t<script type=\"text/javascript\" language=\"JavaScript\" src=\"./lib/wick.js\"></script>\n\t\t\t\t\t\n\t\t\t\t\t<div align=\"center\">\n\t\t\t\t\t<form action=\"./index.php?act=mail\" method=\"post\">\n\t\t\t\t\t\n\t\t\t\t\t{$to}\n\t\t\t\t\t\n\t\t\t\t\t{$txt['183']}: \n\t\t\t\t\t<br><input class=\"text_input\" type=\"text\" name=\"subject\" value=\"{$_GET['subject']}\">\n\t\t\t\t\t</p>\n\t\t\t\t\t\n\t\t\t\t\t<textarea htmlconv=yes name=\"body\" class=\"text_input\" cols=\"40\" rows=\"15\">{$replybody}</textarea><Br>\n\t\t\t\t\t<input type=\"submit\" value=\"{$txt['181']}\" class=\"button\">\n\t\t\t\t\t</form></div>\n\t\t\t\t\t<p style=\"text-align: center\">\n\t\t\t\t\t<a href=\"./index.php?act=mail\">[Elenco]</a>\n\t\t\t\t\t</p>\n\t\t\t\t\t";
}
return $body;
}
function cleanup_inactive_users()
{
global $db, $prefix, $x7c;
$warn_list = '';
$del_list = '';
$del_day = '';
$time = time();
// We do this check once per day
$now = date("d/m/Y");
// We reset at 5 in the morning
$before = date("d/m/Y", $x7c->settings['last_cleanup'] + 5 * 3600);
if ($now == $before) {
return;
}
update_daily_statistics();
$db->DoQuery("UPDATE {$prefix}settings SET setting = '{$time}' WHERE variable = 'last_cleanup'");
// Reset daily counters
$db->DoQuery("UPDATE {$prefix}users SET daily_post = 0, daily_lotus = 0");
$db->DoQuery("UPDATE {$prefix}rooms SET daily_post = 0");
$db->DoQuery("UPDATE {$prefix}objects SET daily_use = 0");
//First we send wanring to old pg
$exptime = time() - $x7c->settings['pg_expire_warn'];
$query = $db->DoQuery("SELECT username, email FROM {$prefix}users WHERE exp_warn='0' AND time<'{$exptime}' AND frozen = 0 ORDER BY username");
while ($row = $db->Do_Fetch_Assoc($query)) {
include_once './lib/message.php';
$db->DoQuery("UPDATE {$prefix}users SET exp_warn='1' WHERE username='******'username']}'");
$warn_list .= $row['username'] . "\n";
$warn_day = $x7c->settings['pg_expire_warn'] / (24 * 3600);
$del_day = ($x7c->settings['pg_expire'] - $x7c->settings['pg_expire_warn']) / (24 * 3600);
$obj = "Avviso imminente cancellazione account";
$body = "Attenzione, l\\'account {$row['username']} risulta inativo da {$warn_day} giorni. Se non to colleghi entro {$del_day} giorni sara\\' cancellato senza ulteriore avviso";
mail($row['email'], $obj, "{$body}\r\n", "From: {$x7c->settings['site_name']} <{$x7c->settings['admin_email']}>\r\n" . "Reply-To: {$x7c->settings['admin_email']}\r\n" . "X-Mailer: PHP/" . phpversion());
$body = parse_message($body);
}
//First we send wanring to old pg
$exptime = time() - $x7c->settings['pg_expire'];
$query = $db->DoQuery("SELECT username, email FROM {$prefix}users WHERE time<'{$exptime}' AND frozen = 0 ORDER BY username");
while ($row = $db->Do_Fetch_Assoc($query)) {
delete_user($row['username']);
$del_list .= $row['username'] . "\n";
}
if ($warn_list != '' || $del_list != '') {
$admin = $x7c->settings['usergroup_admin'];
$query = $db->DoQuery("SELECT username FROM {$prefix}groups WHERE usergroup='{$admin}'");
include_once './lib/message.php';
$obj = "Avviso cancellazione pg";
$body = '';
if ($warn_list != '') {
$body .= "I seguenti account saranno automaticamente rimossi tra {$del_day} giorni\n" . $warn_list . "\n\n";
}
if ($del_list != '') {
$body .= "I seguenti account sono stati automaticamente rimossi\n" . $del_list . "\n\n";
}
$body = parse_message($body);
while ($row = $db->Do_Fetch_Assoc($query)) {
send_offline_msg($row['username'], $obj, $body, "Buio");
}
}
}
function admincp_master()
{
global $X7CHATVERSION, $x7p, $x7s, $print, $db, $txt, $x7c, $prefix, $X7CHAT_CONFIG, $g_default_settings;
$head = $txt[37];
$body = "<h2 style=\"text-align: center;\">Pannello di amministrazione</h2>";
// Set these so it doesn't complain, all admins have access to these pages
$x7c->permissions["admin_main"] = 1;
$x7c->permissions["admin_news"] = 1;
$x7c->permissions["admin_help"] = 1;
// Look for the CP page we are on, if not set then make it main
if (!isset($_GET['cp_page'])) {
$_GET['cp_page'] = "main";
}
// Check permissions
$check_page = $_GET['cp_page'];
if ($check_page == "groupmanager") {
$check_page = "groups";
}
if ($x7c->permissions["admin_{$check_page}"] == 0) {
$_GET['cp_page'] = "ad2";
}
if ($x7c->permissions['admin_access'] == 0) {
$_GET['cp_page'] = "ad";
}
// Figure out which page this is
if ($_GET['cp_page'] == "settings") {
$head = $txt[139];
if (isset($_GET['update_settings'])) {
// Update the settings for some section
$txt[343] = eregi_replace("<a>", "<a href=\"./index.php?act=adminpanel&cp_page=settings\">", $txt[343]);
if ($_GET['settings_page'] == "general") {
// Update the settings page for the general settings
// Check for unset values (this is a bug in some browers)
if (!isset($_POST['disable_chat'])) {
$_POST['disable_chat'] = 0;
}
if (!isset($_POST['allow_reg'])) {
$_POST['allow_reg'] = 0;
}
if (!isset($_POST['allow_guests'])) {
$_POST['allow_guests'] = 0;
}
if (!isset($_POST['disable_sounds'])) {
$_POST['disable_sounds'] = 0;
}
if (!isset($_POST['log_bandwidth'])) {
$_POST['log_bandwidth'] = 0;
}
if (!isset($_POST['req_activation'])) {
$_POST['req_activation'] = 0;
}
// Preparse these to cuz we need to convert seconds to miliseconds
$_POST['min_refresh'] = $_POST['min_refresh'] * 1000;
$_POST['max_refresh'] = $_POST['max_refresh'] * 1000;
// Check for problems with the submitted data
if ($_POST['min_refresh'] > $_POST['max_refresh']) {
$error = $txt[344];
}
if (!isset($error)) {
// Do the actual updates right now, when I say now I mean NOW
// Yes this section wrecks hell on your MySql server but hopefully you don't need to update your settings to often
update_setting("disable_chat", $_POST['disable_chat']);
update_setting("allow_reg", $_POST['allow_reg']);
update_setting("allow_guests", $_POST['allow_guests']);
update_setting("disable_sounds", $_POST['disable_sounds']);
update_setting("site_name", $_POST['site_name']);
update_setting("admin_email", $_POST['admin_email']);
update_setting("logout_page", $_POST['logout_page']);
update_setting("default_lang", $_POST['default_lang']);
update_setting("default_skin", $_POST['default_skin']);
update_setting("maxchars_status", $_POST['maxchars_status']);
update_setting("maxchars_msg", $_POST['maxchars_msg']);
update_setting("max_offline_msgs", $_POST['max_offline_msgs']);
update_setting("min_refresh", $_POST['min_refresh']);
update_setting("max_refresh", $_POST['max_refresh']);
update_setting("cookie_time", $_POST['cookie_time']);
update_setting("log_bandwidth", $_POST['log_bandwidth']);
update_setting("maxchars_username", $_POST['maxchars_username']);
update_setting("banner_link", $_POST['banner_link']);
update_setting("single_room_mode", $_POST['single_room_mode']);
update_setting("req_activation", $_POST['req_activation']);
// Check activation stuff
if ($_POST['req_activation'] == 0) {
// Update existing accounts so they do not require activation
$db->doQuery("UPDATE {$prefix}users SET activated='1'");
}
$body = $txt[343];
} else {
$body = $error . "<Br><Br><div align=\"center\"><a href=\"javascript: history.back()\">{$txt['77']}</a></div>";
}
} elseif ($_GET['settings_page'] == "logs") {
// Convert these values from Kilobytes to bytes
$_POST['max_log_user'] *= 1024;
$_POST['max_log_room'] *= 1024;
if (!isset($_POST['enable_logging'])) {
$_POST['enable_logging'] = 0;
}
// Update the settings
update_setting("max_log_user", $_POST['max_log_user']);
update_setting("max_log_room", $_POST['max_log_room']);
update_setting("logs_path", $_POST['logs_path']);
update_setting("enable_logging", $_POST['enable_logging']);
$body = $txt[343];
} elseif ($_GET['settings_page'] == "user_agreement") {
// Update the user agreement
$_POST['user_agreement'] = eregi_replace("\n", "<Br>", $_POST['user_agreement']);
$_POST['user_agreement'] = eregi_replace("<", "<", $_POST['user_agreement']);
$_POST['user_agreement'] = eregi_replace(">", ">", $_POST['user_agreement']);
$_POST['user_agreement'] = eregi_replace(""", "\"", $_POST['user_agreement']);
update_setting("user_agreement", $_POST['user_agreement']);
$body = $txt[343];
} elseif ($_GET['settings_page'] == "timedate") {
// Update the settings
update_setting("date_format", $_POST['date_format']);
update_setting("date_format_full", $_POST['date_format_full']);
update_setting("date_format_date", $_POST['date_format_date']);
update_setting("time_offset_hours", $_POST['time_offset_hours']);
update_setting("time_offset_mins", $_POST['time_offset_mins']);
$body = $txt[343];
} elseif ($_GET['settings_page'] == "exptime") {
// Pre-parse, convert these times from hours to seconds
$_POST['expire_messages'] = round($_POST['expire_messages'] * 60, 0);
$_POST['expire_rooms'] = round($_POST['expire_rooms'] * 60, 0);
$_POST['expire_guests'] = round($_POST['expire_guests'] * 60, 0);
if ($_POST['online_time'] <= 0) {
$_POST['online_time'] = 30;
}
update_setting("online_time", $_POST['online_time']);
update_setting("expire_messages", $_POST['expire_messages']);
update_setting("expire_rooms", $_POST['expire_rooms']);
update_setting("expire_guests", $_POST['expire_guests']);
$body = $txt[343];
} elseif ($_GET['settings_page'] == "styles") {
// uncheck these checkboxs if not checked
if (!isset($_POST['enable_roombgs'])) {
$_POST['enable_roombgs'] = 0;
}
if (!isset($_POST['enable_roomlogo'])) {
$_POST['enable_roomlogo'] = 0;
}
if (!isset($_POST['disable_smiles'])) {
$_POST['disable_smiles'] = 0;
}
if (!isset($_POST['disable_styles'])) {
$_POST['disable_styles'] = 0;
}
if (!isset($_POST['disable_autolinking'])) {
$_POST['disable_autolinking'] = 0;
}
// parse comma spaces
$_POST['style_allowed_fonts'] = eregi_replace(" ,", ",", $_POST['style_allowed_fonts']);
$_POST['style_allowed_fonts'] = eregi_replace(", ", ",", $_POST['style_allowed_fonts']);
// Update the styles section
update_setting("banner_url", $_POST['banner_url']);
update_setting("background_image", $_POST['background_image']);
update_setting("enable_roombgs", $_POST['enable_roombgs']);
update_setting("enable_roomlogo", $_POST['enable_roomlogo']);
update_setting("default_font", $_POST['default_font']);
update_setting("default_color", $_POST['default_color']);
update_setting("default_size", $_POST['default_size']);
update_setting("style_min_size", $_POST['style_min_size']);
update_setting("style_max_size", $_POST['style_max_size']);
update_setting("disable_smiles", $_POST['disable_smiles']);
update_setting("disable_styles", $_POST['disable_styles']);
update_setting("disable_autolinking", $_POST['disable_autolinking']);
update_setting("system_message_color", $_POST['system_message_color']);
update_setting("style_allowed_fonts", $_POST['style_allowed_fonts']);
$body = $txt[343];
} elseif ($_GET['settings_page'] == "avatars") {
// Convert from kilobytes to bytes
$_POST['avatar_max_size'] *= 1024;
// Check for unchecked checkboxes
if (!isset($_POST['enable_avatar_uploads'])) {
$_POST['enable_avatar_uploads'] = 0;
}
if (!isset($_POST['resize_smaller_avatars'])) {
$_POST['resize_smaller_avatars'] = 0;
}
update_setting("enable_avatar_uploads", $_POST['enable_avatar_uploads']);
update_setting("resize_smaller_avatars", $_POST['resize_smaller_avatars']);
update_setting("avatar_max_size", $_POST['avatar_max_size']);
update_setting("avatar_size_px", $_POST['avatar_size_px']);
update_setting("uploads_path", $_POST['uploads_path']);
update_setting("uploads_url", $_POST['uploads_url']);
$body = $txt[343];
} elseif ($_GET['settings_page'] == "loginpage") {
// Check Check boxes
if (!isset($_POST['enable_passreminder'])) {
$_POST['enable_passreminder'] = 0;
}
// Adjust this wierd little setting again
// Update settings
update_setting("news", $_POST['news']);
update_setting("floating_text", $_POST['floating_text']);
$body = $txt[343];
} elseif ($_GET['settings_page'] == "advanced") {
if (!isset($_POST['disable_gd'])) {
$_POST['disable_gd'] = 0;
}
update_setting("disable_gd", $_POST['disable_gd']);
$body = $txt[343];
} elseif ($_GET['settings_page'] == "support") {
// Clean up the values a little
$_POST['support_personel'] = eregi_replace("; ", ";", $_POST['support_personel']);
$_POST['support_personel'] = eregi_replace(" ;", ";", $_POST['support_personel']);
update_setting("support_personel", $_POST['support_personel']);
update_setting("support_image_online", $_POST['support_image_online']);
update_setting("support_image_offline", $_POST['support_image_offline']);
update_setting("support_message", $_POST['support_message']);
$body = $txt[343];
}
} elseif (isset($_GET['settings_page'])) {
// Display the settings form
// Get default values for settings
// The reason we have to do this here is because values for this admin and the system default may be different
$query = $db->DoQuery("SELECT * FROM {$prefix}settings");
while ($row = $db->Do_Fetch_Row($query)) {
$def_settings[$row[1]] = $row[2];
}
if ($_GET['settings_page'] == "general") {
// Get the default values for check boxes
$checkboxs[] = "disable_chat";
$checkboxs[] = "allow_reg";
$checkboxs[] = "allow_guests";
$checkboxs[] = "disable_sounds";
$checkboxs[] = "log_bandwidth";
foreach ($checkboxs as $key => $val) {
if ($def_settings[$val] == 1) {
$def[$val] = " CHECKED=\"true\"";
} else {
$def[$val] = "";
}
}
// Get defaults for lang and skin
$lng_dir = dir("./lang");
$skin_dir = dir("./themes");
$def['default_lang'] = "";
$def['default_skin'] = "";
while ($option = $lng_dir->read()) {
if ($option != "." && $option != ".." && $option != "index.html") {
$option = eregi_replace("\\.php", "", $option);
if ($option == $def_settings['default_lang']) {
$slcted = " SELECTED=\"true\"";
} else {
$slcted = "";
}
$def['default_lang'] .= "<option value=\"{$option}\"{$slcted}>{$option}</option>";
}
}
while ($option = $skin_dir->read()) {
if ($option != "." && $option != ".." && @is_file("./themes/{$option}/theme.info")) {
if ($option == $def_settings['default_skin']) {
$slcted = " SELECTED=\"true\"";
} else {
$slcted = "";
}
include "./themes/{$option}/theme.info";
$def['default_skin'] .= "<option value=\"{$option}\"{$slcted}>{$name}</option>";
}
}
if ($def_settings['single_room_mode'] == "") {
$def['single_room_mode'] = "<option value=\"\" SELECTED>{$txt['591']}</option>";
} else {
$def['single_room_mode'] = "<option value=\"\">{$txt['591']}</option>";
}
$query = $db->DoQuery("SELECT * FROM {$prefix}rooms");
while ($row = $db->Do_Fetch_Row($query)) {
if ($def_settings['single_room_mode'] == $row[1]) {
$def['single_room_mode'] .= "<option value=\"{$row['1']}\" SELECTED>{$row['1']}</option>";
} else {
$def['single_room_mode'] .= "<option value=\"{$row['1']}\">{$row['1']}</option>";
}
}
// Default values for these two fields since we need to convert milisconds to seconds
$def['min_refresh'] = $def_settings['min_refresh'] / 1000;
$def['max_refresh'] = $def_settings['max_refresh'] / 1000;
if ($def_settings['req_activation'] == 1) {
$def['req_activation'] = " checked=\"true\"";
} else {
$def['req_activation'] = "";
}
$body = "<Br>\n\t\t\t\t\t<form action=\"./index.php?act=adminpanel&cp_page=settings&settings_page=general&update_settings=1\" method=\"POST\">\n\t\t\t\t\t<table align=\"center\" border=\"0\" cellspacing=\"0\" cellpadding=\"4\">\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['329']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"checkbox\" name=\"disable_chat\"{$def['disable_chat']} value=\"1\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['330']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"checkbox\" name=\"allow_reg\"{$def['allow_reg']} value=\"1\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['331']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"checkbox\" name=\"allow_guests\"{$def['allow_guests']} value=\"1\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['468']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"checkbox\" name=\"log_bandwidth\"{$def['log_bandwidth']} value=\"1\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['207']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"checkbox\" name=\"disable_sounds\"{$def['disable_sounds']} value=\"1\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['332']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"site_name\" value=\"{$def_settings['site_name']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['333']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"admin_email\" value=\"{$def_settings['admin_email']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['334']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"logout_page\" value=\"{$def_settings['logout_page']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['335']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"maxchars_status\" value=\"{$def_settings['maxchars_status']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['551']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"banner_link\" value=\"{$def_settings['banner_link']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['515']}*: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"maxchars_username\" value=\"{$def_settings['maxchars_username']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['336']}*: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"maxchars_msg\" value=\"{$def_settings['maxchars_msg']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['337']}*: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"max_offline_msgs\" value=\"{$def_settings['max_offline_msgs']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['338']}* ({$txt['351']}): </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"min_refresh\" value=\"{$def['min_refresh']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['339']}* ({$txt['351']}): </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"max_refresh\" value=\"{$def['max_refresh']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['341']}: </td>\n\t\t\t\t\t<td width=\"100\">\n\t\t\t\t\t<select name=\"default_lang\" class=\"text_input\">\n\t\t\t\t\t{$def['default_lang']}\n\t\t\t\t\t</select>\n\t\t\t\t\t</td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['342']}: </td>\n\t\t\t\t\t<td width=\"100\">\n\t\t\t\t\t<select name=\"default_skin\" class=\"text_input\">\n\t\t\t\t\t{$def['default_skin']}\n\t\t\t\t\t</select>\n\t\t\t\t\t</td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['357']} ({$txt['351']}): </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"cookie_time\" value=\"{$def_settings['cookie_time']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['590']}<b>**</b>: </td>\n\t\t\t\t\t<td width=\"100\"><select class=\"text_input\" name=\"single_room_mode\">{$def['single_room_mode']}</select></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['616']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"checkbox\" class=\"text_input\" value=\"1\" name=\"req_activation\"{$def['req_activation']}></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"200\" colspan=\"2\"><div align=\"center\"><input type=\"submit\" class=\"button\" value=\"{$txt['187']}\"></div></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"200\" colspan=\"2\"><b>* {$txt['340']}</b><Br><Br><b>** {$txt['593']}</b></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t</table>\n\t\t\t\t\t</form>";
} elseif ($_GET['settings_page'] == "user_agreement") {
// The user agreement page
$agreement = eregi_replace("<br>", "\n", $x7c->settings['user_agreement']);
$body = "<Br><div align=\"center\">{$txt['518']}<Br><Br>\n\t\t\t\t\t<form action=\"./index.php?act=adminpanel&cp_page=settings&settings_page=user_agreement&update_settings=1\" method=\"POST\">\n\t\t\t\t\t<textarea cols=\"35\" rows=\"15\" name=\"user_agreement\" class=\"text_input\">{$agreement}</textarea>\n\t\t\t\t\t<br>\n\t\t\t\t\t<input type=\"submit\" value=\"{$txt['187']}\" class=\"button\">\n\t\t\t\t\t</form></div>";
} elseif ($_GET['settings_page'] == "logs") {
// Get defaults
if ($def_settings['enable_logging'] == 1) {
$def['enable_logging'] = "checked=\"true\"";
} else {
$def['enable_logging'] = "";
}
// Convert these from bytes to kilobytes
$def['max_log_user'] = $def_settings['max_log_user'] / 1024;
$def['max_log_room'] = $def_settings['max_log_room'] / 1024;
$body = "<Br>\n\t\t\t\t\t<form action=\"./index.php?act=adminpanel&cp_page=settings&settings_page=logs&update_settings=1\" method=\"POST\">\n\t\t\t\t\t<table align=\"center\" border=\"0\" cellspacing=\"0\" cellpadding=\"4\">\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['244']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"checkbox\" name=\"enable_logging\"{$def['enable_logging']} value=\"1\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['345']}**: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"logs_path\" value=\"{$def_settings['logs_path']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['346']}*: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"max_log_room\" value=\"{$def['max_log_room']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['347']}*: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"max_log_user\" value=\"{$def['max_log_user']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"200\" colspan=\"2\"><div align=\"center\"><input type=\"submit\" class=\"button\" value=\"{$txt['187']}\"></div></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"200\" colspan=\"2\"><b>* {$txt['340']}</b><Br><b>** {$txt['522']}</b></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t</table>\n\t\t\t\t\t</form>";
} elseif ($_GET['settings_page'] == "timedate") {
$thelp = $print->help_button("time_date");
$body = "<Br>\n\t\t\t\t\t<form action=\"./index.php?act=adminpanel&cp_page=settings&settings_page=timedate&update_settings=1\" method=\"POST\">\n\t\t\t\t\t<table align=\"center\" border=\"0\" cellspacing=\"0\" cellpadding=\"4\">\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['348']}: {$thelp}</td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"date_format\" value=\"{$def_settings['date_format']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['349']}: {$thelp}</td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"date_format_date\" value=\"{$def_settings['date_format_date']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['350']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"date_format_full\" value=\"{$def_settings['date_format_full']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['201']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"time_offset_hours\" value=\"{$def_settings['time_offset_hours']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['202']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"time_offset_mins\" value=\"{$def_settings['time_offset_mins']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"200\" colspan=\"2\"><div align=\"center\"><input type=\"submit\" class=\"button\" value=\"{$txt['187']}\"></div></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t</table>\n\t\t\t\t\t</form>";
} elseif ($_GET['settings_page'] == "exptime") {
// Convert default values from miliseconds to second
$def['expire_messages'] = $def_settings['expire_messages'] / 60;
$def['expire_rooms'] = $def_settings['expire_rooms'] / 60;
$def['expire_guests'] = $def_settings['expire_guests'] / 60;
$body = "<Br>\n\t\t\t\t\t<form action=\"./index.php?act=adminpanel&cp_page=settings&settings_page=exptime&update_settings=1\" method=\"POST\">\n\t\t\t\t\t<table align=\"center\" border=\"0\" cellspacing=\"0\" cellpadding=\"4\">\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['352']} ({$txt['351']}): </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"online_time\" value=\"{$def_settings['online_time']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['353']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"expire_messages\" value=\"{$def['expire_messages']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['354']}* ({$txt['356']}): </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"expire_rooms\" value=\"{$def['expire_rooms']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['355']}* ({$txt['356']}): </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"expire_guests\" value=\"{$def['expire_guests']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"200\" colspan=\"2\"><div align=\"center\"><input type=\"submit\" class=\"button\" value=\"{$txt['187']}\"></div></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"200\" colspan=\"2\"><b>* {$txt['340']}</b></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t</table>\n\t\t\t\t\t</form>";
} elseif ($_GET['settings_page'] == "styles") {
// Calculate default check box values
$checkboxs[] = "enable_roombgs";
$checkboxs[] = "enable_roomlogo";
$checkboxs[] = "disable_smiles";
$checkboxs[] = "disable_styles";
$checkboxs[] = "disable_autolinking";
foreach ($checkboxs as $key => $val) {
if ($def_settings[$val] == 1) {
$def[$val] = " CHECKED=\"true\"";
} else {
$def[$val] = "";
}
}
$body = "<Br>\n\t\t\t\t\t<form action=\"./index.php?act=adminpanel&cp_page=settings&settings_page=styles&update_settings=1\" name=\"settings_form\" method=\"POST\">\n\t\t\t\t\t<table align=\"center\" border=\"0\" cellspacing=\"0\" cellpadding=\"4\">\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['324']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"banner_url\" value=\"{$def_settings['banner_url']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['358']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"background_image\" value=\"{$def_settings['background_image']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['359']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"checkbox\" name=\"enable_roombgs\"{$def['enable_roombgs']} value=\"1\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['360']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"checkbox\" name=\"enable_roomlogo\"{$def['enable_roomlogo']} value=\"1\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['361']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"default_font\" style=\"font-family: {$def_settings['default_font']};\" value=\"{$def_settings['default_font']}\" onChange=\"this.style.fontFamily=this.value\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['362']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"default_size\" value=\"{$def_settings['default_size']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['363']}: <img src=\"./colors.png\" width=\"15\" height=\"15\" onClick=\"javascript: window.open('./index.php?act=sm_window&page=colors&toform=settings_form&tofield=default_color','','location=no,menubar=no,resizable=no,status=no,toolbar=no,scrollbars=yes,width={$x7c->settings['tweak_window_small_width']},height={$x7c->settings['tweak_window_small_height']}');\"></td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"default_color\" value=\"{$def_settings['default_color']}\" style=\"color: {$def_settings['default_color']};\" onChange=\"this.style.color=this.value\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['364']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"style_min_size\" value=\"{$def_settings['style_min_size']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['365']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"style_max_size\" value=\"{$def_settings['style_max_size']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['366']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"checkbox\" name=\"disable_smiles\"{$def['disable_smiles']} value=\"1\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['367']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"checkbox\" name=\"disable_styles\"{$def['disable_styles']} value=\"1\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['368']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"checkbox\" name=\"disable_autolinking\"{$def['disable_autolinking']} value=\"1\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['369']}: <img src=\"./colors.png\" width=\"15\" height=\"15\" onClick=\"javascript: window.open('./index.php?act=sm_window&page=colors&toform=settings_form&tofield=system_message_color','','location=no,menubar=no,resizable=no,status=no,toolbar=no,scrollbars=yes,width={$x7c->settings['tweak_window_small_width']},height={$x7c->settings['tweak_window_small_height']}');\"></td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"system_message_color\" value=\"{$def_settings['system_message_color']}\" style=\"color: {$def_settings['system_message_color']};\" onChange=\"this.style.color=this.value\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['370']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"style_allowed_fonts\" value=\"{$def_settings['style_allowed_fonts']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"200\" colspan=\"2\"><div align=\"center\"><input type=\"submit\" class=\"button\" value=\"{$txt['187']}\"></div></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"200\" colspan=\"2\"><b>* {$txt['371']}</b></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t</table>\n\t\t\t\t\t</form>";
} elseif ($_GET['settings_page'] == "avatars") {
// Get Default checkbox values
if ($def_settings['enable_avatar_uploads'] == 1) {
$def['enable_avatar_uploads'] = " checked=\"true\"";
} else {
$def['enable_avatar_uploads'] = "";
}
if ($def_settings['resize_smaller_avatars'] == 1) {
$def['resize_smaller_avatars'] = " checked=\"true\"";
} else {
$def['resize_smaller_avatars'] = "";
}
// Convert from bytes to kilobytes
$def['avatar_max_size'] = $def_settings['avatar_max_size'] / 1024;
$body = "<Br>\n\t\t\t\t\t<form action=\"./index.php?act=adminpanel&cp_page=settings&settings_page=avatars&update_settings=1\" method=\"POST\">\n\t\t\t\t\t<table align=\"center\" border=\"0\" cellspacing=\"0\" cellpadding=\"4\">\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['372']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"checkbox\" name=\"enable_avatar_uploads\"{$def['enable_avatar_uploads']} value=\"1\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['373']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"checkbox\" name=\"resize_smaller_avatars\"{$def['resize_smaller_avatars']} value=\"1\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['374']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"avatar_max_size\" value=\"{$def['avatar_max_size']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['375']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"avatar_size_px\" value=\"{$def_settings['avatar_size_px']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['376']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"uploads_path\" value=\"{$def_settings['uploads_path']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['377']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"uploads_url\" value=\"{$def_settings['uploads_url']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"200\" colspan=\"2\"><div align=\"center\"><input type=\"submit\" class=\"button\" value=\"{$txt['187']}\"></div></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t</table>\n\t\t\t\t\t</form>";
} elseif ($_GET['settings_page'] == "loginpage") {
// Calculate default check box values
$body = "<Br>\n\t\t\t\t\t<form action=\"./index.php?act=adminpanel&cp_page=settings&settings_page=loginpage&update_settings=1\" method=\"POST\">\n\t\t\t\t\t<table align=\"center\" border=\"0\" cellspacing=\"0\" cellpadding=\"4\">\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['262']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"news\" value=\"{$def_settings['news']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">Testo in mappa: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"floating_text\" value=\"{$def_settings['floating_text']}\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['380']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"checkbox\" name=\"enable_passreminder\"{$def['enable_passreminder']} value=\"1\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"200\" colspan=\"2\"><div align=\"center\"><input type=\"submit\" class=\"button\" value=\"{$txt['187']}\"></div></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t</table>\n\t\t\t\t\t</form>";
} elseif ($_GET['settings_page'] == "advanced") {
// Default values
if ($def_settings['disable_gd'] == 1) {
$def['disable_gd'] = " checked=\"true\"";
} else {
$def['disable_gd'] = "";
}
$body = "<Br>{$txt['385']}<Br><Br>\n\t\t\t\t\t<form action=\"./index.php?act=adminpanel&cp_page=settings&settings_page=advanced&update_settings=1\" method=\"POST\">\n\t\t\t\t\t<table align=\"center\" border=\"0\" cellspacing=\"0\" cellpadding=\"4\">\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"100\">{$txt['384']}: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"checkbox\" name=\"disable_gd\"{$def['disable_gd']} value=\"1\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"200\" colspan=\"2\"><div align=\"center\"><input type=\"submit\" class=\"button\" value=\"{$txt['187']}\"></div></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t</table>\n\t\t\t\t\t</form>";
}
} else {
// Display the many catagories of settings
$body = "\n\t\t\t\t<div align=\"center\">{$txt['321']}\n\t\t\t\t<br><Br>\n\t\t\t\t<a href=\"./index.php?act=adminpanel&cp_page=settings&settings_page=general\">[{$txt['218']}]</a><br><br>\n\t\t\t\t<a href=\"./index.php?act=adminpanel&cp_page=settings&settings_page=logs\">[{$txt['240']}]</a><br><br>\n\t\t\t\t<a href=\"./index.php?act=adminpanel&cp_page=settings&settings_page=timedate\">[{$txt['322']}]</a><br><br>\n\t\t\t\t<a href=\"./index.php?act=adminpanel&cp_page=settings&settings_page=exptime\">[{$txt['323']}]</a><br><br>\n\t\t\t\t<a href=\"./index.php?act=adminpanel&cp_page=settings&settings_page=styles\">[{$txt['325']}]</a><br><br>\n\t\t\t\t<a href=\"./index.php?act=adminpanel&cp_page=settings&settings_page=avatars\">[{$txt['326']}]</a><br><br>\n\t\t\t\t<a href=\"./index.php?act=adminpanel&cp_page=settings&settings_page=loginpage\">[{$txt['327']}]</a><br><br>\n\t\t\t\t<a href=\"./index.php?act=adminpanel&cp_page=settings&settings_page=user_agreement\">[{$txt['517']}]</a><br><br>\n\t\t\t\t<a href=\"./index.php?act=adminpanel&cp_page=settings&settings_page=support\">[{$txt['599']}]</a><br><br>\n\t\t\t\t<a href=\"./index.php?act=adminpanel&cp_page=settings&settings_page=advanced\">[{$txt['328']}]</a><br><br>\n\t\t\t\t</div>";
}
} elseif ($_GET['cp_page'] == "groupmanager") {
// This is the user group control page
$head = $txt[309];
$body = "";
if (isset($_POST['create'])) {
// Create a group
if ($_POST['create'] != "") {
$db->DoQuery("INSERT INTO {$prefix}permissions (id,usergroup) VALUES('0','{$_POST['create']}')");
// Edit the settings for this group
$_GET['edit'] = $_POST['create'];
}
}
if (isset($_GET['edit'])) {
// Edit a groups permissions
// Get defaults
$query = $db->DoQuery("SELECT * FROM {$prefix}permissions WHERE usergroup='{$_GET['edit']}'");
$row = $db->Do_Fetch_Row($query);
$row[2] == 1 ? $def['make_rooms'] = " checked=\"true\"" : ($def['make_rooms'] = "");
$row[3] == 1 ? $def['make_proom'] = " checked=\"true\"" : ($def['make_proom'] = "");
$row[4] == 1 ? $def['make_nexp'] = " checked=\"true\"" : ($def['make_nexp'] = "");
$row[5] == 1 ? $def['make_mod'] = " checked=\"true\"" : ($def['make_mod'] = "");
$row[6] == 1 ? $def['viewip'] = " checked=\"true\"" : ($def['viewip'] = "");
$row[7] == 1 ? $def['kick'] = " checked=\"true\"" : ($def['kick'] = "");
$row[8] == 1 ? $def['ban_kick_imm'] = " checked=\"true\"" : ($def['ban_kick_imm'] = "");
$row[9] == 1 ? $def['AOP_all'] = " checked=\"true\"" : ($def['AOP_all'] = "");
$row[10] == 1 ? $def['AV_all'] = " checked=\"true\"" : ($def['AV_all'] = "");
$row[11] == 1 ? $def['view_hidden_emails'] = " checked=\"true\"" : ($def['view_hidden_emails'] = "");
$row[12] == 1 ? $def['use_keywords'] = " checked=\"true\"" : ($def['use_keywords'] = "");
$row[13] == 1 ? $def['access_room_logs'] = " checked=\"true\"" : ($def['access_room_logs'] = "");
$row[14] == 1 ? $def['log_pms'] = " checked=\"true\"" : ($def['log_pms'] = "");
$row[15] == 1 ? $def['set_background'] = " checked=\"true\"" : ($def['set_background'] = "");
$row[16] == 1 ? $def['set_logo'] = " checked=\"true\"" : ($def['set_logo'] = "");
$row[17] == 1 ? $def['make_admins'] = " checked=\"true\"" : ($def['make_admins'] = "");
$row[18] == 1 ? $def['server_msg'] = " checked=\"true\"" : ($def['server_msg'] = "");
$row[19] == 1 ? $def['can_mdeop'] = " checked=\"true\"" : ($def['can_mdeop'] = "");
$row[20] == 1 ? $def['can_mkick'] = " checked=\"true\"" : ($def['can_mkick'] = "");
$row[21] == 1 ? $def['admin_settings'] = " checked=\"true\"" : ($def['admin_settings'] = "");
$row[22] == 1 ? $def['admin_themes'] = " checked=\"true\"" : ($def['admin_themes'] = "");
$row[23] == 1 ? $def['admin_filter'] = " checked=\"true\"" : ($def['admin_filter'] = "");
$row[24] == 1 ? $def['admin_groups'] = " checked=\"true\"" : ($def['admin_groups'] = "");
$row[25] == 1 ? $def['admin_users'] = " checked=\"true\"" : ($def['admin_users'] = "");
$row[26] == 1 ? $def['admin_ban'] = " checked=\"true\"" : ($def['admin_ban'] = "");
$row[27] == 1 ? $def['admin_bandwidth'] = " checked=\"true\"" : ($def['admin_bandwidth'] = "");
$row[28] == 1 ? $def['admin_logs'] = " checked=\"true\"" : ($def['admin_logs'] = "");
$row[29] == 1 ? $def['admin_events'] = " checked=\"true\"" : ($def['admin_events'] = "");
$row[30] == 1 ? $def['admin_mail'] = " checked=\"true\"" : ($def['admin_mail'] = "");
$row[31] == 1 ? $def['admin_mods'] = " checked=\"true\"" : ($def['admin_mods'] = "");
$row[32] == 1 ? $def['admin_smilies'] = " checked=\"true\"" : ($def['admin_smilies'] = "");
$row[33] == 1 ? $def['admin_rooms'] = " checked=\"true\"" : ($def['admin_rooms'] = "");
$row[34] == 1 ? $def['access_disabled'] = " checked=\"true\"" : ($def['access_disabled'] = "");
$row[35] == 1 ? $def['b_invisible'] = " checked=\"true\"" : ($def['b_invisible'] = "");
$row[36] == 1 ? $def['c_invisible'] = " checked=\"true\"" : ($def['c_invisible'] = "");
$row[37] == 1 ? $def['admin_keywords'] = " checked=\"true\"" : ($def['admin_keywords'] = "");
$row[38] == 1 ? $def['access_pw_rooms'] = " checked=\"true\"" : ($def['access_pw_rooms'] = "");
$row[39] == 1 ? $def['admin_panic'] = " checked=\"true\"" : ($def['admin_panic'] = "");
$row[40] == 1 ? $def['admin_alarms'] = " checked=\"true\"" : ($def['admin_alarms'] = "");
$row[41] == 1 ? $def['admin_objects'] = " checked=\"true\"" : ($def['admin_objects'] = "");
$row[43] == 1 ? $def['sheet_modify'] = " checked=\"true\"" : ($def['sheet_modify'] = "");
$row[44] == 1 ? $def['write_master'] = " checked=\"true\"" : ($def['write_master'] = "");
$row[45] == 1 ? $def['gremios'] = " checked=\"true\"" : ($def['gremios'] = "");
$row[46] == 1 ? $def['admin_abilities'] = " checked=\"true\"" : ($def['admin_abilities'] = "");
$row[47] == 1 ? $def['admin_money'] = " checked=\"true\"" : ($def['admin_money'] = "");
$row[48] == 1 ? $def['admin_hints'] = " checked=\"true\"" : ($def['admin_hints'] = "");
$body = "{$txt['424']}<Br><Br><table border=\"0\" cellspacing=\"0\" cellpadding=\"4\" align=\"center\">\n\t\t\t\t<form action=\"index.php?act=adminpanel&cp_page=groupmanager&update={$_GET['edit']}\" method=\"post\">\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['422']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"make_rooms\" value=\"1\"{$def['make_rooms']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['423']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"make_proom\" value=\"1\"{$def['make_proom']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['425']}*</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"make_nexp\" value=\"1\"{$def['make_nexp']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['426']}*</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"make_mod\" value=\"1\"{$def['make_mod']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['427']}*</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"viewip\" value=\"1\"{$def['viewip']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['428']}*</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"kick\" value=\"1\"{$def['kick']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['429']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"ban_kick_imm\" value=\"1\"{$def['ban_kick_imm']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['430']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"AOP_all\" value=\"1\"{$def['AOP_all']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['431']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"AV_all\" value=\"1\"{$def['AV_all']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['432']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"view_hidden_emails\" value=\"1\"{$def['view_hidden_emails']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['433']}*</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"use_keywords\" value=\"1\"{$def['use_keywords']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['434']}*</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"access_room_logs\" value=\"1\"{$def['access_room_logs']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['435']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"log_pms\" value=\"1\"{$def['log_pms']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['436']}**</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"set_background\" value=\"1\"{$def['set_background']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['437']}**</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"set_logo\" value=\"1\"{$def['set_logo']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['438']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"make_admins\" value=\"1\"{$def['make_admins']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['439']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"server_msg\" value=\"1\"{$def['server_msg']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['440']}*</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"can_mdeop\" value=\"1\"{$def['can_mdeop']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['441']}*</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"can_mkick\" value=\"1\"{$def['can_mkick']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['442']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"admin_settings\" value=\"1\"{$def['admin_settings']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['443']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"admin_themes\" value=\"1\"{$def['admin_themes']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['444']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"admin_filter\" value=\"1\"{$def['admin_filter']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['445']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"admin_groups\" value=\"1\"{$def['admin_groups']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['446']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"admin_users\" value=\"1\"{$def['admin_users']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['447']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"admin_ban\" value=\"1\"{$def['admin_ban']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['448']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"admin_bandwidth\" value=\"1\"{$def['admin_bandwidth']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['449']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"admin_logs\" value=\"1\"{$def['admin_logs']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['457']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"admin_events\" value=\"1\"{$def['admin_events']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['450']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"admin_mail\" value=\"1\"{$def['admin_mail']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['451']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"admin_mods\" value=\"1\"{$def['admin_mods']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['452']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"admin_smilies\" value=\"1\"{$def['admin_smilies']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['453']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"admin_rooms\" value=\"1\"{$def['admin_rooms']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['577']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"admin_keywords\" value=\"1\"{$def['admin_keywords']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['454']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"access_disabled\" value=\"1\"{$def['access_disabled']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['505']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"b_invisible\" value=\"1\"{$def['b_invisible']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['506']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"c_invisible\" value=\"1\"{$def['c_invisible']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">{$txt['602']}</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"access_pw_rooms\" value=\"1\"{$def['access_pw_rooms']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">Amministra l'oscurità</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"admin_panic\" value=\"1\"{$def['admin_panic']}></td>\n\t\t\t\t</tr>\t\t\t\t\t\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">Amministra gli allarmi</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"admin_alarms\" value=\"1\"{$def['admin_alarms']}></td>\n\t\t\t\t</tr>\t\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">Amministra gli oggetti</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"admin_objects\" value=\"1\"{$def['admin_objects']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">Amministra i soldi</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"admin_money\" value=\"1\"{$def['admin_money']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">Puo' modificare le schede</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"sheet_modify\" value=\"1\"{$def['sheet_modify']}></td>\n\t\t\t\t</tr>\t\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">Puo' scrivere in modo master</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"write_master\" value=\"1\"{$def['write_master']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">Amministra le abilità</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"admin_abilities\" value=\"1\"{$def['admin_abilities']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">Amministra gli hint del master</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"admin_hints\" value=\"1\"{$def['admin_hints']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">E' una gremios?</td>\n\t\t\t\t<td width=\"50\"><input type=\"checkbox\" name=\"gremios\" value=\"1\"{$def['gremios']}></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"120\">Logo</td>\n\t\t\t\t<td width=\"50\"><input type=\"text\" name=\"logo\" value=\"{$row['42']}\"></td>\n\t\t\t\t</tr>\n\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"170\" colspan=\"2\"><div align=\"center\"><input type=\"submit\" class=\"button\" value=\"{$txt['187']}\"></div></td>\n\t\t\t\t</tr>\n\t\t\t\t</table><Br><Br>\n\t\t\t\t<b>*</b>: {$txt['455']}<br><Br>\n\t\t\t\t<b>**</b>: {$txt['456']}<br><Br>";
} elseif (isset($_GET['view'])) {
// View members in a group
// Get defaults for changing it
$query = $db->DoQuery("SELECT usergroup FROM {$prefix}permissions");
$change_ops = "";
while ($row = $db->Do_Fetch_Row($query)) {
$change_ops .= "<option value=\"{$row['0']}\">{$row['0']}</option>";
}
$query = $db->DoQuery("SELECT username FROM {$prefix}groups WHERE usergroup='{$_GET['view']}'");
// This is the javascript for the check all uncheck all boxes
$body .= "{$txt['418']}<Br><br>";
while ($row = $db->Do_Fetch_Row($query)) {
$body .= " <b>{$row['0']}</b><Br>";
}
$body .= "<br><a href=\"index.php?act=adminpanel&cp_page=groupmanager\">{$txt['77']}</a></div>";
} else {
if (isset($_GET['update'])) {
// Update a group
// Check for checkboxs
!isset($_POST['make_rooms']) ? $_POST['make_rooms'] = 0 : "";
!isset($_POST['make_proom']) ? $_POST['make_proom'] = 0 : "";
!isset($_POST['make_nexp']) ? $_POST['make_nexp'] = 0 : "";
!isset($_POST['make_mod']) ? $_POST['make_mod'] = 0 : "";
!isset($_POST['viewip']) ? $_POST['viewip'] = 0 : "";
!isset($_POST['kick']) ? $_POST['kick'] = 0 : "";
!isset($_POST['ban_kick_imm']) ? $_POST['ban_kick_imm'] = 0 : "";
!isset($_POST['AOP_all']) ? $_POST['AOP_all'] = 0 : "";
!isset($_POST['AV_all']) ? $_POST['AV_all'] = 0 : "";
!isset($_POST['view_hidden_emails']) ? $_POST['view_hidden_emails'] = 0 : "";
!isset($_POST['use_keywords']) ? $_POST['use_keywords'] = 0 : "";
!isset($_POST['access_room_logs']) ? $_POST['access_room_logs'] = 0 : "";
!isset($_POST['log_pms']) ? $_POST['log_pms'] = 0 : "";
!isset($_POST['set_background']) ? $_POST['set_background'] = 0 : "";
!isset($_POST['set_logo']) ? $_POST['set_logo'] = 0 : "";
!isset($_POST['make_admins']) ? $_POST['make_admins'] = 0 : "";
!isset($_POST['server_msg']) ? $_POST['server_msg'] = 0 : "";
!isset($_POST['can_mdeop']) ? $_POST['can_mdeop'] = 0 : "";
!isset($_POST['can_mkick']) ? $_POST['can_mkick'] = 0 : "";
!isset($_POST['admin_settings']) ? $_POST['admin_settings'] = 0 : "";
!isset($_POST['admin_themes']) ? $_POST['admin_themes'] = 0 : "";
!isset($_POST['admin_filter']) ? $_POST['admin_filter'] = 0 : "";
!isset($_POST['admin_groups']) ? $_POST['admin_groups'] = 0 : "";
!isset($_POST['admin_users']) ? $_POST['admin_users'] = 0 : "";
!isset($_POST['admin_ban']) ? $_POST['admin_ban'] = 0 : "";
!isset($_POST['admin_bandwidth']) ? $_POST['admin_bandwidth'] = 0 : "";
!isset($_POST['admin_logs']) ? $_POST['admin_logs'] = 0 : "";
!isset($_POST['admin_events']) ? $_POST['admin_events'] = 0 : "";
!isset($_POST['admin_mail']) ? $_POST['admin_mail'] = 0 : "";
!isset($_POST['admin_mods']) ? $_POST['admin_mods'] = 0 : "";
!isset($_POST['admin_smilies']) ? $_POST['admin_smilies'] = 0 : "";
!isset($_POST['admin_rooms']) ? $_POST['admin_rooms'] = 0 : "";
!isset($_POST['access_disabled']) ? $_POST['access_disabled'] = 0 : "";
!isset($_POST['b_invisible']) ? $_POST['b_invisible'] = 0 : "";
!isset($_POST['c_invisible']) ? $_POST['c_invisible'] = 0 : "";
!isset($_POST['admin_keywords']) ? $_POST['admin_keywords'] = 0 : "";
!isset($_POST['access_pw_rooms']) ? $_POST['access_pw_rooms'] = 0 : "";
!isset($_POST['admin_panic']) ? $_POST['admin_panic'] = 0 : "";
!isset($_POST['admin_alarms']) ? $_POST['admin_alarms'] = 0 : "";
!isset($_POST['admin_objects']) ? $_POST['admin_objects'] = 0 : "";
!isset($_POST['admin_money']) ? $_POST['admin_money'] = 0 : "";
!isset($_POST['sheet_modify']) ? $_POST['sheet_modify'] = 0 : "";
!isset($_POST['logo']) ? $_POST['logo'] = 0 : "";
!isset($_POST['write_master']) ? $_POST['write_master'] = 0 : "";
!isset($_POST['gremios']) ? $_POST['gremios'] = 0 : "";
!isset($_POST['admin_abilities']) ? $_POST['admin_abilities'] = 0 : "";
!isset($_POST['admin_hints']) ? $_POST['admin_hints'] = 0 : "";
// Save the settings
$db->DoQuery("UPDATE {$prefix}permissions \n\t\t\t\t\t\tSET make_rooms='{$_POST['make_rooms']}',\n\t\t\t\t\t\tmake_proom='{$_POST['make_proom']}',\n\t\t\t\t\t\tmake_nexp='{$_POST['make_nexp']}',\n\t\t\t\t\t\tmake_mod='{$_POST['make_mod']}',\n\t\t\t\t\t\tviewip='{$_POST['viewip']}',\n\t\t\t\t\t\tkick='{$_POST['kick']}',\n\t\t\t\t\t\tban_kick_imm='{$_POST['ban_kick_imm']}',\n\t\t\t\t\t\tAOP_all='{$_POST['AOP_all']}',\n\t\t\t\t\t\tAV_all='{$_POST['AV_all']}',\n\t\t\t\t\t\tview_hidden_emails='{$_POST['view_hidden_emails']}',\n\t\t\t\t\t\tuse_keywords='{$_POST['use_keywords']}',\n\t\t\t\t\t\taccess_room_logs='{$_POST['access_room_logs']}',\n\t\t\t\t\t\tlog_pms='{$_POST['log_pms']}',\n\t\t\t\t\t\tset_background='{$_POST['set_background']}',\n\t\t\t\t\t\tset_logo='{$_POST['set_logo']}',\n\t\t\t\t\t\tmake_admins='{$_POST['make_admins']}',\n\t\t\t\t\t\tserver_msg='{$_POST['server_msg']}',can_mdeop='{$_POST['can_mdeop']}',\n\t\t\t\t\t\tcan_mkick='{$_POST['can_mkick']}',\n\t\t\t\t\t\tadmin_settings='{$_POST['admin_settings']}',\n\t\t\t\t\t\tadmin_themes='{$_POST['admin_themes']}',\n\t\t\t\t\t\tadmin_filter='{$_POST['admin_filter']}',\n\t\t\t\t\t\tadmin_groups='{$_POST['admin_groups']}',\n\t\t\t\t\t\tadmin_users='{$_POST['admin_users']}',\n\t\t\t\t\t\tadmin_ban='{$_POST['admin_ban']}',\n\t\t\t\t\t\tadmin_bandwidth='{$_POST['admin_bandwidth']}',\n\t\t\t\t\t\tadmin_logs='{$_POST['admin_logs']}',\n\t\t\t\t\t\tadmin_events='{$_POST['admin_events']}',\n\t\t\t\t\t\tadmin_mail='{$_POST['admin_mail']}',\n\t\t\t\t\t\tadmin_mods='{$_POST['admin_mods']}',\n\t\t\t\t\t\tadmin_smilies='{$_POST['admin_smilies']}',\n\t\t\t\t\t\tadmin_rooms='{$_POST['admin_rooms']}',\n\t\t\t\t\t\taccess_disabled='{$_POST['access_disabled']}',\n\t\t\t\t\t\tb_invisible='{$_POST['b_invisible']}',\n\t\t\t\t\t\tc_invisible={$_POST['c_invisible']},\n\t\t\t\t\t\tadmin_keywords='{$_POST['admin_keywords']}',\n\t\t\t\t\t\taccess_pw_rooms='{$_POST['access_pw_rooms']}', \n\t\t\t\t\t\tadmin_panic='{$_POST['admin_panic']}', \n\t\t\t\t\t\tadmin_alarms='{$_POST['admin_alarms']}', \n\t\t\t\t\t\tadmin_objects='{$_POST['admin_objects']}', \n\t\t\t\t\t\tlogo='{$_POST['logo']}', \n\t\t\t\t\t\tsheet_modify='{$_POST['sheet_modify']}', \n\t\t\t\t\t\twrite_master='{$_POST['write_master']}', \n\t\t\t\t\t\tgremios='{$_POST['gremios']}', \n\t\t\t\t\t\tadmin_abilities='{$_POST['admin_abilities']}', \n\t\t\t\t\t\tadmin_hints='{$_POST['admin_hints']}', \n\t\t\t\t\t\tadmin_money='{$_POST['admin_money']}' \n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tWHERE usergroup='{$_GET['update']}'");
// Tell user they have been updated
$body .= "{$txt['458']}<Br><br>";
} elseif (isset($_GET['delete'])) {
// Delete a group
// Make sure the group is empty
$query = $db->DoQuery("SELECT * FROM {$prefix}groups WHERE usergroup='{$_GET['delete']}'");
$row = $db->Do_Fetch_Row($query);
$query = $db->DoQuery("SELECT * FROM {$prefix}ability WHERE corp='{$_GET['delete']}'");
$row2 = $db->Do_Fetch_Row($query);
if ($row[0] != "") {
$body .= "{$txt['420']}<Br><Br>";
} elseif ($row2[0] != "") {
$body .= "Rimuovere tutte le abilita' di gremios prima di cancellare<Br><Br>";
} else {
$db->DoQuery("DELETE FROM {$prefix}permissions WHERE usergroup='{$_GET['delete']}'");
$body .= "{$txt['421']}<Br><Br>";
}
} elseif (isset($_POST['new_g'])) {
// Change user's groups
$body .= "{$txt['415']}<Br><Br>";
foreach ($_POST as $key => $val) {
if (eregi("^ug_", $key) && $val == 1) {
$key = eregi_replace("^ug_", "", $key);
$gif_query = $db->DoQuery("SELECT logo FROM {$prefix}permissions WHERE usergroup='{$_POST['new_g']}'");
$row = $db->Do_Fetch_Assoc($gif_query);
$gif = $row['logo'];
include_once './lib/sheet_lib.php';
join_corp($key, $_POST['new_g']);
}
}
} elseif (isset($_GET['defaults'])) {
// Edit the default groups
// Update the database
update_setting("usergroup_admin", $_POST['admin']);
update_setting("usergroup_guest", $_POST['guest']);
update_setting("usergroup_default", $_POST['member']);
$body .= "{$txt['412']}<Br><Br>";
// Update member accounts so their user groups are correct
//$db->DoQuery("UPDATE {$prefix}users SET user_group='_1' WHERE user_group='{$x7c->settings['usergroup_admin']}' WHERE username<>'$x7s->username'");
//$db->DoQuery("UPDATE {$prefix}users SET user_group='_2' WHERE user_group='{$x7c->settings['usergroup_guest']}' WHERE username<>'$x7s->username'");
//$db->DoQuery("UPDATE {$prefix}users SET user_group='_3' WHERE user_group='{$x7c->settings['usergroup_default']}' WHERE username<>'$x7s->username'");
//$db->DoQuery("UPDATE {$prefix}users SET user_group='{$_POST['admin']}' WHERE user_group='_1' WHERE username<>'$x7s->username'");
//$db->DoQuery("UPDATE {$prefix}users SET user_group='{$_POST['guest']}' WHERE user_group='_2' WHERE username<>'$x7s->username'");
//$db->DoQuery("UPDATE {$prefix}users SET user_group='{$_POST['member']}' WHERE user_group='_3' WHERE username<>'$x7s->username'");
// Update these values quickly so that the change is shown
$x7c->settings['usergroup_admin'] = $_POST['admin'];
$x7c->settings['usergroup_guest'] = $_POST['guest'];
$x7c->settings['usergroup_default'] = $_POST['member'];
}
// Get default group values
$query = $db->DoQuery("SELECT usergroup FROM {$prefix}permissions");
$group_options['admin'] = "";
$group_options['member'] = "";
$group_options['guest'] = "";
while ($row = $db->Do_Fetch_Row($query)) {
if ($x7c->settings['usergroup_admin'] == $row[0]) {
$group_options['admin'] .= "<option value=\"{$row['0']}\" selected=\"true\">{$row['0']}</option>";
} else {
$group_options['admin'] .= "<option value=\"{$row['0']}\">{$row['0']}</option>";
}
if ($x7c->settings['usergroup_guest'] == $row[0]) {
$group_options['guest'] .= "<option value=\"{$row['0']}\" selected=\"true\">{$row['0']}</option>";
} else {
$group_options['guest'] .= "<option value=\"{$row['0']}\">{$row['0']}</option>";
}
if ($x7c->settings['usergroup_default'] == $row[0]) {
$group_options['member'] .= "<option value=\"{$row['0']}\" selected=\"true\">{$row['0']}</option>";
} else {
$group_options['member'] .= "<option value=\"{$row['0']}\">{$row['0']}</option>";
}
$groups[] = $row[0];
}
// Display groups and settings edit form
/*$body .= "<div align=\"center\">
<b>$txt[408]</b><br>
<form action=\"index.php?act=adminpanel&cp_page=groupmanager&defaults=1\" method=\"post\">
<table border=\"0\" cellspacing=\"0\" cellpadding=\"0\">
<tr>
<td width=\"100\">$txt[409]: </td>
<td width=\"100\"><select name=\"member\" class=\"text_input\">{$group_options['member']}</select></td>
</tr>
<tr>
<td width=\"100\">$txt[410]: </td>
<td width=\"100\"><select name=\"guest\" class=\"text_input\">{$group_options['guest']}</select></td>
</tr>
<tr>
<td width=\"100\">$txt[411]: </td>
<td width=\"100\"><select name=\"admin\" class=\"text_input\">{$group_options['admin']}</select></td>
</tr>
<tr>
<td width=\"200\" colspan=\"2\"><div align=\"center\"><input type=\"submit\" class=\"button\" value=\"$txt[187]\"></div></td>
</tr>
</table>
</form><Br><Br>
<table width=\"95%\" align=\"center\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\" class=\"col_header\">
<tr>
<td height=\"25\"> $txt[123]</td>
<td width=\"33%\" height=\"25\">$txt[86]</td>
</tr>
</table>
<table width=\"95%\" align=\"center\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\" class=\"inside_table\">";
*/
$body .= "<div align=\"center\">\n\t\t\t\t<table width=\"95%\" align=\"center\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\" class=\"col_header\">\n\t\t\t\t<tr>\n\t\t\t\t<td height=\"25\"> {$txt['123']}</td>\n\t\t\t\t<td width=\"33%\" height=\"25\">{$txt['86']}</td>\n\t\t\t\t</tr>\n\t\t\t\t</table>\n\t\t\t\t<table width=\"95%\" align=\"center\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\" class=\"inside_table\">";
// Display a table of groups with actions
foreach ($groups as $key => $group) {
$body .= "<Tr>\n\t\t\t\t\t<td> {$group}</td>\n\t\t\t\t\t<td width=\"33%\">\n\t\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=groupmanager&view={$group}\">[{$txt['413']}]</a>\n\t\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=groupmanager&delete={$group}\">[{$txt['175']}]</a>\n\t\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=groupmanager&edit={$group}\">[{$txt['139']}]</a>\n\t\t\t\t\t</td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr><td colspan=\"2\"><hr></tr>\n\t\t\t\t\t";
}
$body .= "</table><Br><br>\n\t\t\t\t<form action=\"index.php?act=adminpanel&cp_page=groupmanager\" method=\"post\">\n\t\t\t\t{$txt['414']}: <input type=\"text\" class=\"text_input\" name=\"create\">\n\t\t\t\t<input type=\"submit\" class=\"button\" value=\"{$txt['63']}\">\n\t\t\t\t</form></div>";
}
} elseif ($_GET['cp_page'] == "objects") {
include_once './lib/shop_lib.php';
global $shopper, $money_name;
$head = "Amministrazione oggetti";
$navigator = '';
$body = '';
$error = '';
if (isset($_GET['sell'])) {
if ($_POST['sell_copies'] < 0) {
$error = "Errore: il numero di copie deve essere positivo";
} else {
if (!$x7c->permissions["admin_panic"]) {
// Only masters can change the shop
$error = "Errore: operazione non permessa";
} else {
get_obj_name_and_uses($_POST['id'], $obj_name, $dummy);
$cur_avail = get_obj_availability($obj_name);
$delta_avail = $_POST['sell_copies'] - $cur_avail;
$value = calculate_obj_value($_POST['id'], $shopper);
if ($value <= 0 || $obj_name == $money_name) {
$error = "Errore: l'oggetto non ha valore";
} else {
if ($delta_avail < 0) {
$delta_avail = -$delta_avail;
$db->DoQuery("DELETE FROM {$prefix}objects\n\t\t\t\t\t\t\t\tWHERE name = '{$obj_name}'\n\t\t\t\t\t\t\t\tAND owner = '{$shopper}'\n\t\t\t\t\t\t\t\tLIMIT {$delta_avail}");
} else {
if ($delta_avail > 0) {
$query = $db->DoQuery("SELECT * \n\t\t\t\t\t\t\t\tFROM {$prefix}objects WHERE id='{$_POST['id']}'");
$row = $db->Do_Fetch_Assoc($query);
if (!$row || $row['id'] == '') {
$error = "Oggetto non esistente";
} else {
for ($i = 0; $i < $delta_avail; $i++) {
$db->DoQuery("INSERT INTO {$prefix}objects\n\t\t\t\t\t\t\t\t\t\t(name,description,uses,\n\t\t\t\t\t\t\t\t\t\t image_url,owner,equipped,size,category,base_value,\n\t\t\t\t\t\t\t\t\t\t visible_uses, expire_span, shop_return,random_img)\n\t\t\t\t\t\t\t\t\t\tVALUES('{$row['name']}','{$row['description']}','{$row['uses']}',\n\t\t\t\t\t\t\t\t\t\t\t'{$row['image_url']}','{$shopper}','1','{$row['size']}',\n\t\t\t\t\t\t\t\t\t\t\t'{$row['category']}',{$row['base_value']},'{$row['visible_uses']}',\n\t\t\t\t\t\t\t\t\t\t\t'{$row['expire_span']}','{$row['shop_return']}',\n\t\t\t\t\t\t\t\t\t\t\t'{$row['random_img']}')");
}
}
}
}
$error = "Nuove copie in vendita: {$_POST['sell_copies']}";
}
}
}
}
if (isset($_GET['assign'])) {
if (!isset($_POST['owner']) || !isset($_POST['id']) || !isset($_POST['qty'])) {
die("Bad form");
}
if (!is_numeric($_POST['qty'])) {
$error = "Quantita' da assegnare non valida";
}
get_obj_name_and_uses($_POST['id'], $obj_name, $dummy);
if ($obj_name == $money_name) {
$error = "Non puoi assegnare soldi da questo pannello";
}
include_once './lib/sheet_lib.php';
if ($error == '') {
for ($i = 0; $i < $_POST['qty']; $i++) {
$error .= assign_object($_POST['id'], $_POST['owner'], true);
}
}
}
if (isset($_GET['modify'])) {
if (!isset($_POST['name']) || !isset($_POST['id']) || !isset($_POST['description']) || !isset($_POST['uses']) || !isset($_POST['image_url']) || !isset($_POST['size']) || !isset($_POST['base_value']) || !isset($_POST['category']) || !isset($_POST['expire_span'])) {
die("Bad form");
}
$_POST['name'] = trim($_POST['name']);
$visible_uses = false;
if (isset($_POST['visible_uses'])) {
$visible_uses = true;
}
$shop_return = false;
if (isset($_POST['shop_return'])) {
$shop_return = true;
}
$category = $_POST['category'];
if ($_POST['category'] == "_new_" && isset($_POST['new_category'])) {
$category = $_POST['new_category'];
}
if ($_POST['id'] != -1) {
$old_name = '';
get_obj_name_and_uses($_POST['id'], $old_name, $uses);
$query_old_size = $db->DoQuery("SELECT size FROM {$prefix}objects\n\t\t\t\t\t\tWHERE id='{$_POST['id']}'");
$row_old_size = $db->Do_Fetch_Assoc($query_old_size);
$db->DoQuery("UPDATE {$prefix}objects \n\t\t\t\t\t\tSET name='{$_POST['name']}',\n\t\t\t\t\t\t\tdescription='{$_POST['description']}',\n\t\t\t\t\t\t\tuses='{$_POST['uses']}',\n\t\t\t\t\t\t\timage_url='{$_POST['image_url']}',\n\t\t\t\t\t\t\tsize='{$_POST['size']}',\n\t\t\t\t\t\t\tbase_value='{$_POST['base_value']}',\n\t\t\t\t\t\t\tcategory='{$category}',\n\t\t\t\t\t\t\tvisible_uses='{$visible_uses}',\n\t\t\t\t\t\t\texpire_span='{$_POST['expire_span']}',\n\t\t\t\t\t\t\tshop_return = '{$shop_return}',\n\t\t\t\t\t\t\trandom_img = '{$_POST['random_img']}'\n\t\t\t\t\t\tWHERE id='{$_POST['id']}'");
// Update not sold copies
$db->DoQuery("UPDATE {$prefix}objects \n\t\t\t\t\t\tSET name='{$_POST['name']}',\n\t\t\t\t\t\t\tdescription='{$_POST['description']}',\n\t\t\t\t\t\t\tuses='{$_POST['uses']}',\n\t\t\t\t\t\t\timage_url='{$_POST['image_url']}',\n\t\t\t\t\t\t\tsize='{$_POST['size']}',\n\t\t\t\t\t\t\tbase_value='{$_POST['base_value']}',\n\t\t\t\t\t\t\tcategory='{$category}',\n\t\t\t\t\t\t\tvisible_uses='{$visible_uses}',\n\t\t\t\t\t\t\texpire_span='{$_POST['expire_span']}',\n\t\t\t\t\t\t\tshop_return = '{$shop_return}',\n\t\t\t\t\t\t\trandom_img = '{$_POST['random_img']}'\n\t\t\t\t\t\tWHERE name='{$old_name}' AND owner='{$shopper}'");
// Sync existing objects
// we do not sync uses
if (isset($_POST['sync']) && $_POST['sync'] == 1) {
$db->DoQuery("UPDATE {$prefix}objects \n\t\t\t\t\t\t\tSET name = '{$_POST['name']}',\n\t\t\t\t\t\t\t\tdescription='{$_POST['description']}',\n\t\t\t\t\t\t\t\timage_url='{$_POST['image_url']}',\n\t\t\t\t\t\t\t\tsize='{$_POST['size']}',\n\t\t\t\t\t\t\t\tbase_value='{$_POST['base_value']}',\n\t\t\t\t\t\t\t\tcategory='{$category}',\n\t\t\t\t\t\t\t\tvisible_uses='{$visible_uses}',\n\t\t\t\t\t\t\t\texpire_span='{$_POST['expire_span']}',\n\t\t\t\t\t\t\t\tshop_return = '{$shop_return}',\n\t\t\t\t\t\t\t\trandom_img = '{$_POST['random_img']}'\n\t\t\t\t\t\t\tWHERE name='{$old_name}'");
$query_count_obj = $db->DoQuery("SELECT count(*) AS cnt\n\t\t\t\t\t\t\tFROM {$prefix}objects\n\t\t\t\t\t\t\tWHERE name='{$_POST['name']}'");
$row_count_obj = $db->Do_Fetch_Assoc($query_count_obj);
$error = "Modifica eseguita e sincronizzati {$row_count_obj['cnt']}\n\t\t\t\t\t\toggetti esistenti.";
if ($row_old_size && $row_old_size['size'] != $_POST['size']) {
if ($row_old_size['size'] >= 0) {
// Disequip the object if it had a positive value
$query_user_sync = $db->DoQuery("SELECT count(*) AS total\n\t\t\t\t\t\t\t\t\tFROM {$prefix}objects \n\t\t\t\t\t\t\t\t\tWHERE name='{$_POST['name']}'\n\t\t\t\t\t\t\t\t\tAND equipped = 1\n\t\t\t\t\t\t\t\t\tAND owner <> ''\n\t\t\t\t\t\t\t\t\tAND owner <> '{$shopper}'");
$db->DoQuery("UPDATE {$prefix}objects \n\t\t\t\t\t\t\t\t\tSET equipped = 0\n\t\t\t\t\t\t\t\t\tWHERE name='{$_POST['name']}'\n\t\t\t\t\t\t\t\t\tAND equipped = 1\n\t\t\t\t\t\t\t\t\tAND owner <> ''\n\t\t\t\t\t\t\t\t\tAND owner <> '{$shopper}'");
$row_user_sync = $db->Do_Fetch_Assoc($query_user_sync);
$error .= "<br>A {$row_user_sync['total']} utenti e' stato \n\t\t\t\t\t\t\t\tdisequipaggiato\tl'oggetto.";
} else {
// Disequip everything if the object had a negative value
$query_user_sync = $db->DoQuery("SELECT owner\n\t\t\t\t\t\t\t\t\tFROM {$prefix}objects \n\t\t\t\t\t\t\t\t\tWHERE equipped = 1\n\t\t\t\t\t\t\t\t\tAND name='{$_POST['name']}'\n\t\t\t\t\t\t\t\t\tAND owner <> ''\n\t\t\t\t\t\t\t\t\tAND owner <> '{$shopper}'");
$disequipped = 0;
while ($row_user_sync = $db->Do_Fetch_Assoc($query_user_sync)) {
if ($row_user_sync['owner'] != "" && $row_user_sync['owner'] != $shopper) {
$db->DoQuery("UPDATE {$prefix}objects \n\t\t\t\t\t\t\t\t\t\t\tSET equipped = 0\n\t\t\t\t\t\t\t\t\t\t\tWHERE owner = '{$row_user_sync['owner']}'");
$disequipped++;
}
}
$error .= "<br>A {$row_user_sync['total']} utenti e' stato \n\t\t\t\t\t\t\t\tdisequipaggiato tutto";
}
}
}
} else {
$query_duplicate = $db->DoQuery("\n\t\t\t\t\tSELECT count(*) AS cnt FROM {$prefix}objects\n\t\t\t\t\t\tWHERE name='{$_POST['name']}' AND owner = ''");
$row = $db->Do_Fetch_Assoc($query_duplicate);
if ($row['cnt'] > 0) {
$error = "Oggetto gia' esistente";
} else {
$db->DoQuery("INSERT INTO {$prefix}objects \n\t\t\t\t\t\t(name, description, uses, image_url,\n\t\t\t\t\t\t equipped, size, base_value, category, visible_uses, expire_span, \n\t\t\t\t\t\t shop_return,random_img)\n\t\t\t\t\t\tVALUES(\n\t\t\t\t\t\t\t'{$_POST['name']}',\t'{$_POST['description']}',\n\t\t\t\t\t\t\t'{$_POST['uses']}',\t'{$_POST['image_url']}',\n\t\t\t\t\t\t\t'1','{$_POST['size']}', '{$_POST['base_value']}', '{$category}', \n\t\t\t\t\t\t\t'{$visible_uses}', '{$_POST['expire_span']}', '{$shop_return}',\n\t\t\t\t\t\t\t'{$_POST['random_img']}'\n\t\t\t\t\t\t\t)");
}
}
if (!isset($error) || $error == "") {
$error = "Modifica eseguita con successo";
}
}
if (isset($_GET['delete'])) {
$name = '';
get_obj_name_and_uses($_GET['delete'], $name, $uses);
$db->DoQuery("DELETE FROM {$prefix}objects WHERE id='{$_GET['delete']}'");
$db->DoQuery("DELETE FROM {$prefix}objects WHERE name='{$name}'\n\t\t\t\t\tAND owner='{$shopper}'");
$error = "Oggetto eliminato";
}
if (isset($_GET['proom'])) {
if (isset($_POST['owner']) && $_POST['owner'] != '') {
$query = $db->DoQuery("SELECT username \n\t\t\t\t\t\tFROM {$prefix}users WHERE username='******'owner']}'");
$row = $db->Do_Fetch_Assoc($query);
if ($row == null || $row['username'] != $_POST['owner']) {
$body .= "Errore, utente {$_POST['owner']} non esistente";
} else {
$query_rooms = $db->DoQuery("SELECT count(*) AS cnt\n\t\t\t\t\t\t\tFROM {$prefix}rooms WHERE name='{$_POST['owner']}'");
$query_obj_master = $db->DoQuery("SELECT count(*) AS cnt\n\t\t\t\t\t\t\tFROM {$prefix}objects WHERE name='masterkey_{$_POST['owner']}' \n\t\t\t\t\t\t\tAND owner=''");
$query_obj_user = $db->DoQuery("SELECT count(*) AS cnt\n\t\t\t\t\t\t\tFROM {$prefix}objects \n\t\t\t\t\t\t\tWHERE name='masterkey_{$_POST['owner']}' AND owner='{$_POST['owner']}'");
$row_rooms = $db->Do_Fetch_Assoc($query_rooms);
$row_obj_master = $db->Do_Fetch_Assoc($query_obj_master);
$row_obj_user = $db->Do_Fetch_Assoc($query_obj_user);
if ($row_rooms['cnt'] == 0) {
//Room creation
$db->DoQuery("INSERT INTO {$prefix}rooms\n\t\t\t\t\t\t\t\t(name, type, maxusers, logged, logo, long_name)\n\t\t\t\t\t\t\t\tVALUES ('{$_POST['owner']}', '2', '1000', '1',\n\t\t\t\t\t\t\t\t\t'./graphic/private_room.jpg','Stanza di {$_POST['owner']}')");
$body .= "Stanza creata con successo<br>";
} else {
$body .= "Stanza già presente<br>";
}
if ($row_obj_master['cnt'] == 0) {
//Copy of the key for the master
$db->DoQuery("INSERT INTO {$prefix}objects\n\t\t\t\t\t\t\t\t(name, description, uses, image_url, equipped, size, \n\t\t\t\t\t\t\t\t visible_uses)\n\t\t\t\t\t\t\t\tVALUES ('masterkey_{$_POST['owner']}',\n\t\t\t\t\t\t\t\t\t'Chiave della stanza di {$_POST['owner']}', '-1',\n\t\t\t\t\t\t\t\t\t'./graphic/private_key.jpg','1','0','1')");
$body .= "Copia master della chiave creata con successo<br>";
} else {
$body .= "Copia master della chiave già presente<br>";
}
if ($row_obj_user['cnt'] == 0) {
//Cooy of the key for the owner
$db->DoQuery("INSERT INTO {$prefix}objects\n\t\t\t\t\t\t\t\t(name, description, uses, image_url, owner, equipped, size,\n\t\t\t\t\t\t\t\t visible_uses)\n\t\t\t\t\t\t\t\tVALUES ('masterkey_{$_POST['owner']}',\n\t\t\t\t\t\t\t\t\t'Chiave della stanza di {$_POST['owner']}', '-1',\n\t\t\t\t\t\t\t\t\t'./graphic/private_key.jpg','{$_POST['owner']}','1','0', '1')");
$body .= "Copia utente della chiave creata con successo<br>";
include_once './lib/alarms.php';
object_assignement($_POST['owner'], "Chiave della stanza di {$_POST['owner']}");
} else {
$body .= "Copia utente della chiave master già presente<br>";
}
}
$body .= "<br><br><a href=\"index.php?act=adminpanel&cp_page=objects\">\n\t\t\t\t\t[Torna agli oggetti]</a>";
} else {
$body .= "\n\t\t\t\t\t<form action=\"index.php?act=adminpanel&cp_page=objects&proom=1\"\n\t\t\t\t\tmethod=\"post\">\n\t\t\t\t\t<table border=\"0\" cellspacing=\"0\" cellpadding=\"0\">\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td>Nome del proprietario:</td>\n\t\t\t\t\t<td><input type=\"text\" name=\"owner\" class=\"text_input\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td><input type=\"submit\" class=\"button\" value=\"Vai\"></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t</table>\n\t\t\t\t\t</form>\n\t\t\t\t\t";
}
}
if (isset($_GET['edit'])) {
$new_object = true;
if ($_GET['edit'] != -1) {
$new_object = false;
$query = $db->DoQuery("SELECT * FROM {$prefix}objects \n\t\t\t\t\t\tWHERE id='{$_GET['edit']}'");
$row = $db->Do_Fetch_Assoc($query);
if (!$row) {
die("Error; should not die here");
}
if ($row['owner'] == $shopper) {
$query = $db->DoQuery("SELECT * FROM {$prefix}objects \n\t\t\t\t\t\t\tWHERE name='{$row['name']}' AND owner = ''");
$row = $db->Do_Fetch_Assoc($query);
if (!$row) {
die("Error; should not die here");
}
}
} else {
$row['name'] = '';
$row['owner'] = '';
$row['description'] = '';
$row['uses'] = -1;
$row['image_url'] = '';
$row['id'] = -1;
$row['size'] = 0;
$row['base_value'] = -1;
$row['category'] = '';
$row['visible_uses'] = '';
$row['expire_span'] = '-1';
$row['shop_return'] = '0';
$row['random_img'] = '';
}
$minuscolo = "";
$piccolo = "";
$c_piccolo = "";
$medio = "";
$c_medio = "";
$grande = "";
$c_grande = "";
$visible_uses_checked = '';
$shop_return_checked = '';
if ($row['visible_uses']) {
$visible_uses_checked = "checked";
}
if ($row['shop_return']) {
$shop_return_checked = "checked";
}
switch ($row['size']) {
case 0:
$minuscolo = "selected";
break;
case 1:
$piccolo = "selected";
break;
case 2:
$medio = "selected";
break;
case 5:
$grande = "selected";
break;
case -1:
$c_piccolo = "selected";
break;
case -2:
$c_medio = "selected";
break;
case -5:
$c_grande = "selected";
break;
}
$query_cat = $db->DoQuery("SELECT DISTINCT category \n\t\t\t\t\tFROM {$prefix}objects\n\t\t\t\t\tORDER BY category");
$category_form = '<select class="button" name="category"
onChange="javascript: category_select(this);">
<option value="">Seleziona la categoria</option>';
while ($row_category = $db->Do_Fetch_Assoc($query_cat)) {
if ($row_category['category']) {
$selected = "";
if ($row_category['category'] == $row['category']) {
$selected = "selected";
}
$category_form .= '<option value="' . $row_category['category'] . '"
' . $selected . '>' . $row_category['category'] . '</option>';
}
}
$category_form .= '<option value="_new_">-Crea nuova categoria-</option>
</select>';
$name_type = "text";
if ($row['name'] == $money_name) {
$name_type = "hidden";
}
$submit_value = "Crea oggetto";
$sync_button = '';
if (!$new_object) {
$submit_value = "Modifica oggetto";
$sync_button = "<td><input type=\"button\" class=\"button\" \n\t\t\t\tvalue=\"Modifica e sincronizza\" onClick=\"sync_request();\"></td></tr>\n\t\t\t\t<tr><td> </td><td>\n\t\t\t\t<br>Con questo tasto le modifiche dell'oggetto vengono \n\t\t\t\t<br>riflesse anche alle copie gia' assegnate.\n\t\t\t\t<br>Gli usi rimanenti non vengono mai riassegnati.\n\t\t\t\t<br>Tutti gli oggetti modificati vengono disequipaggiati.</td>\n\t\t\t\t</td>";
}
$body .= "\n\t\t\t\t<script language=\"javascript\" type=\"text/javascript\">\n\t\t\t\t function sync_request() {\n\t\t\t\t\t\tdocument.getElementById('sync_field').value = 1;\n\t\t\t\t\t\tdocument.forms.main_form.submit();\n\t\t\t\t\t}\n\t\t\t\t\tfunction category_select(elem) {\n\t\t\t\t\t\tif (elem.options[elem.selectedIndex].value == '_new_'){\n\t\t\t\t\t\t\tdocument.getElementById('new_category').style.visibility = \n\t\t\t\t\t\t\t\t'visible';\n\t\t\t\t\t\t}\n\t\t\t\t\t\telse {\n\t\t\t\t\t\t\tdocument.getElementById('new_category').style.visibility =\n\t\t\t\t\t\t\t\t'hidden';\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t</script>\n\t\t\t\t<form action=\"index.php?act=adminpanel&cp_page=objects&modify=1\"\n\t\t\t\tmethod=\"post\" name=\"main_form\">\n\t\t\t\t<table border=\"0\" cellspacing=\"0\" cellpadding=\"0\">\n\t\t\t\t<input type=\"hidden\" name=\"id\" value=\"{$row['id']}\">\n\t\t\t\t<tr>\n\t\t\t\t<td>Nome:</td>\n\t\t\t\t<td><input type=\"{$name_type}\" name=\"name\" class=\"text_input\"\n\t\t\t\tvalue=\"{$row['name']}\"></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td>Descrizione:</td>\n\t\t\t\t<td><textarea cols=\"30\" rows=\"10\" type=\"text\" name=\"description\"\n\t\t\t\tclass=\"text_input\">{$row['description']}</textarea></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td>\n\t\t\t Cartella per immagine random:\n\t\t\t\t</td>\n\t\t\t\t<td>\n\t\t\t\t<input type=\"text\" name=\"random_img\" class=\"text_input\"\n\t\t\t\tvalue=\"{$row['random_img']}\">\n\t\t\t\t</td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td>Usi (-1 per usi infiniti):</td>\n\t\t\t\t<td><input type=\"text\" name=\"uses\" class=\"text_input\"\n\t\t\t\tvalue=\"{$row['uses']}\"></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td>Gli usi rimasti sono visibili?\n\t\t\t\t</td>\n\t\t\t\t<td><input type=\"checkbox\" class=\"text_input\" name=\"visible_uses\" {$visible_uses_checked}>\n\t\t\t\t</td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td>Scadenza in minuti (-1: no scadenza)\n\t\t\t\t</td>\n\t\t\t\t<td><input type=\"text\" class=\"text_input\" name=\"expire_span\" \n\t\t\t\tvalue=\"{$row['expire_span']}\">\n\t\t\t\t</td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td>Torna in vendita dopo la scadenza?\n\t\t\t\t</td>\n\t\t\t\t<td><input type=\"checkbox\" class=\"text_input\" name=\"shop_return\" {$shop_return_checked}>\n\t\t\t\t</td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td>URL immagine:</td>\n\t\t\t\t<td><input type=\"text\" name=\"image_url\" class=\"text_input\"\n\t\t\t\tvalue=\"{$row['image_url']}\"\n\t\t\t\tonChange=\"javascript: document.getElementById('objImg').src=this.value;\"></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td>Preview:</td>\n\t\t\t\t<td><img id=\"objImg\" src=\"{$row['image_url']}\"></td>\n\t\t\t\t</tr>\n\t\t\t\t<tr><td><a onClick=\"" . popup_open($x7c->settings['tweak_window_large_width'], $x7c->settings['tweak_window_large_height'], 'index.php?act=images', 'Images', "yes") . ";\">[Carica immagine]</a></td></tr>\n\t\t\t\t<tr>\n\t\t\t\t<td>Dimesione:</td>\n\t\t\t\t<td><select class=\"button\" name=\"size\">\n\t\t\t\t<option value=\"0\" {$minuscolo}>Minuscolo</option>\n\t\t\t\t<option value=\"1\" {$piccolo}>Piccolo</option>\n\t\t\t\t<option value=\"2\" {$medio}>Medio</option>\n\t\t\t\t<option value=\"5\" {$grande}>Grande</option>\n\t\t\t\t<option value=\"-1\" {$c_piccolo}>Capienza Piccola</option>\n\t\t\t\t<option value=\"-2\" {$c_medio}>Capienza Media</option>\n\t\t\t\t<option value=\"-5\" {$c_grande}>Capienza Grande</option>\n\t\t\t\t</select>\n\t\t\t\t</td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td>\n\t\t\t\tValore base di vendita:\n\t\t\t\t</td>\n\t\t\t\t<td>\n\t\t\t\t<input type=\"text\" name=\"base_value\" class=\"text_input\"\n\t\t\t\tvalue=\"{$row['base_value']}\">\n\t\t\t\t</td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<td>Categoria</td>\n\t\t\t\t<td>{$category_form}</td>\n\t\t\t\t</tr>\n\t\t\t\t<tr id=\"new_category\" style=\"visibility: hidden;\">\n\t\t\t\t<td>Nuova categoria:</td>\n\t\t\t\t<td><input type=\"text\" class=\"text_input\" name=\"new_category\">\n\t\t\t\t</td>\n\t\t\t\t</tr>\n\t\t\t\t<tr>\n\t\t\t\t<input id=\"sync_field\" type=\"hidden\" name=\"sync\" value=\"0\">\n\t\t\t\t<td><input type=\"submit\" class=\"button\" value=\"{$submit_value}\"></td>\n\t\t\t\t{$sync_button}\n\t\t\t\t</tr>\n\t\t\t\t</table>\n\t\t\t\t";
$body .= "</form>";
if ($_GET['edit'] != -1) {
if ($row['name'] != $money_name) {
$body .= "\n\t\t\t\t\t\t<form action=\"index.php?act=adminpanel&cp_page=objects&assign=1\"\n\t\t\t\t\t\tmethod=\"post\">\n\t\t\t\t\t\t<table border=\"0\" cellspacing=\"0\" cellpadding=\"0\">\n\t\t\t\t\t\t<input type=\"hidden\" name=\"id\" value=\"{$row['id']}\">\n\t\t\t\t\t\t<tr>\n\t\t\t\t\t\t<hr>\n\t\t\t\t\t\t<td>Assegna a:</td>\n\t\t\t\t\t\t<td><input type=\"text\" name=\"owner\" class=\"text_input\"></td>\n\t\t\t\t\t\t<td>Quantita'</td>\n\t\t\t\t\t\t<td><input type=\"text\" size=\"5\" name=\"qty\"\n\t\t\t\t\t\t class=\"text_input\" value=\"1\"></td>\n\t\t\t\t\t\t<td><input type=\"submit\" class=\"button\" value=\"Assegna\"></div>\n\t\t\t\t\t\t</td>\n\t\t\t\t\t\t</tr>\n\t\n\t\t\t\t\t\t</table>\n\t\t\t\t\t</form>";
$availability = get_obj_availability($row['name']);
if ($x7c->permissions["admin_panic"]) {
$body .= "<form action=\"index.php?act=adminpanel&cp_page=objects&sell=1\"\n\t\t\t\t\t\t\tmethod=\"post\">\n\t\t\t\t\t\t\t<table border=\"0\" cellspacing=\"0\" cellpadding=\"0\">\n\t\t\t\t\t\t\t<input type=\"hidden\" name=\"id\" value=\"{$row['id']}\">\n\t\t\t\t\t\t\t<tr>\n\t\t\t\t\t\t\t<hr>\n\t\t\t\t\t\t\t<td>Copie in negozio:</td>\n\t\t\t\t\t\t\t<td><input type=\"text\" name=\"sell_copies\" class=\"text_input\"\n\t\t\t\t\t\t\tvalue=\"{$availability}\"></td>\n\t\t\t\t\t\t\t<td><input type=\"submit\" class=\"button\"\n\t\t\t\t\t\t\tvalue=\"Metti in vendita\"></div></td>\n\t\t\t\t\t\t\t</tr>\n\t\n\t\t\t\t\t\t\t</table>\n\t\t\t\t\t\t\t</form>";
}
}
}
} else {
if (!isset($_GET['proom'])) {
$letter = 'AND name LIKE \'a%\'';
if (isset($_GET['letter'])) {
$letter = "AND name LIKE '" . $_GET['letter'] . "%'";
}
if (isset($_POST['letter'])) {
$letter = "AND name LIKE '%" . $_POST['letter'] . "%'";
}
if (isset($_GET['category'])) {
$letter = "AND category LIKE '{$_GET['category']}'";
}
if (!isset($_POST['selling'])) {
$query = $db->DoQuery("SELECT * FROM {$prefix}objects \n\t\t\t\t\t\tWHERE owner='' {$letter} ORDER BY category, name");
} else {
$query = $db->DoQuery("SELECT * FROM {$prefix}objects \n\t\t\t\t\t\tWHERE owner='{$shopper}' {$letter}\n\t\t\t\t\t\tAND name <> '{$money_name}'\n\t\t\t\t\t\tGROUP BY name\n\t\t\t\t\t\tORDER BY category, name");
}
$body = "<b style=\"color: orange;\">{$error}</b><br><br>";
$body .= "<div align=\"center\"><input type=\"submit\"\n\t\t\t\tvalue=\"Crea nuovo oggetto\" class=\"button\"\n\t\t\t\tonClick=\"javascript: window.location.href='index.php?act=adminpanel&cp_page=objects&edit=-1'\"> \n\t\t\t\t<input type=\"submit\" value=\"Crea stanza privata\" class=\"button\"\n\t\t\t\tonClick=\"javascript: window.location.href='index.php?act=adminpanel&cp_page=objects&proom=1'\"></div>";
$sell_checked = isset($_POST['selling']) ? "checked" : "";
$body .= "<div align=\"center\"><br><b>Cerca oggetto</b></div><Br>\n\t\t\t\t<form action=\"index.php?act=adminpanel&cp_page=objects\"\n\t\t\t\tmethod=\"post\" name=\"quicke\">\n\t\t\t\t<table align=\"center\" border=\"0\" cellspacing=\"0\"\n\t\t\t\tcellpadding=\"0\">\n\t\t\t\t<tr>\n\t\t\t\t<td>Nome oggetto:</td>\n\t\t\t\t<td><input type=\"text\" name=\"letter\" class=\"text_input\"></td>\n\t\t\t\t<td><div align=\"center\"><input type=\"submit\" value=\"Cerca\"\n\t\t\t\tclass=\"button\"></div></td>\n\t\t\t\t<td>\n\t\t\t\t<input type=\"checkbox\" name=\"selling\" {$sell_checked}>\n\t\t\t\tOggetti in vendita</input>\n\t\t\t\t</td>\n\t\t\t\t</tr>\n\t\t\t\t</table>\n\t\t\t\t</form>";
$body .= " <p style=\"text-align: center;\">\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=a\">[a]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=b\">[b]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=c\">[c]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=d\">[d]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=e\">[e]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=f\">[f]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=g\">[g]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=h\">[h]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=i\">[i]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=j\">[j]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=k\">[k]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=l\">[l]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=m\">[m]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=n\">[n]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=o\">[o]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=p\">[p]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=q\">[q]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=r\">[r]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=s\">[s]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=t\">[t]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=u\">[u]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=v\">[v]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=w\">[w]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=x\">[x]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=y\">[y]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&letter=z\">[z]</a>\n\t\t\t\t</p>\n\t\t\t\t";
$query_category = $db->DoQuery("SELECT DISTINCT category\n\t\t\t\t\tFROM {$prefix}objects ORDER BY category");
$body .= " <p style=\"text-align: center;\">";
$count = 0;
while ($row_category = $db->Do_Fetch_Assoc($query_category)) {
$count++;
$long_name = $row_category['category'];
if (!$row_category['category']) {
$long_name = "Senza categoria";
}
$body .= "<a href=\"index.php?act=adminpanel&cp_page=objects&category=" . $row_category['category'] . "\">[{$long_name}]</a>";
if ($count % 5 == 0) {
$body .= "<br>";
}
}
$body .= "</p>";
$body .= '<table width="100%">
<tr><td><b>Nome oggetto:</b></td><td style="width=10%"><b>Azioni</b>
</td></tr>
<tr><td colspan=2><hr></td></tr>';
if (isset($_GET['letter']) || isset($_POST['letter']) || isset($_GET['category'])) {
while ($row = $db->Do_Fetch_Assoc($query)) {
$size = "";
switch ($row['size']) {
case 0:
$size = "(minuscolo)";
break;
case 1:
$size = "(piccolo)";
break;
case 2:
$size = "(medio)";
break;
case 5:
$size = "(grande)";
break;
case -1:
$size = "(capienza piccola)";
break;
case -2:
$size = "(capienza media)";
break;
case -5:
$size = "(capienza grande)";
break;
default:
$size = "(IMPOSSIBLE SIZE)";
}
$category = '';
if ($row['category']) {
$category = $row['category'] . ": ";
}
$body .= "<tr><td>\n\t\t\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&edit={$row['id']}\">\n\t\t\t\t\t\t{$category}{$row['name']}</a> {$size}</td>";
if ($row['name'] != $money_name) {
$body .= "<td style=\"width=10%\">\n\t\t\t\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=objects&delete={$row['id']}\">\n\t\t\t\t\t\t\t[Cancella]</a></td>";
}
$body .= "</tr><tr><td colspan=2><hr></td></tr>";
}
}
$body .= '</table>';
}
}
} elseif ($_GET['cp_page'] == "money") {
include_once './lib/shop_lib.php';
global $shopper, $base_money;
$head = "Gestione economia";
$body = "";
$error = "";
if (isset($_GET['emit']) && isset($_POST['amount'])) {
if ($_POST['amount'] < 0) {
$emit_value = -$_POST['amount'];
$shopper_money = get_total_user_money($shopper);
if ($shopper_money < $emit_value) {
$error = "Non puoi ritirare piu' moneta delle attuali riserve";
} else {
remove_money($emit_value, $shopper);
$error = "Moneta ritirata con successo: {$emit_value}";
}
} else {
assign_money($_POST['amount'], $shopper);
$error = "Moneta emessa con successo: {$_POST['amount']}";
}
}
if (isset($_GET['pay']) && isset($_POST['amount'])) {
$amount = $_POST['amount'];
if ($amount < 0) {
$error = "Valore negativo non permesso";
}
if (isset($_POST['username']) && $_POST['username']) {
if ($_POST['username'] == '__all__') {
$recent = time() - 3600 * 24 * 60;
# Two months
$query = $db->DoQuery("SELECT username FROM {$prefix}users\n\t\t\t\t\t\t\tWHERE time > {$recent} ORDER BY username");
$error = '';
while ($row = $db->Do_Fetch_Assoc($query)) {
$error .= $row['username'] . '<br>';
pay($amount, $shopper, $row['username']);
}
} else {
$query = $db->DoQuery("SELECT username FROM {$prefix}users\n\t\t\t\t\t\t\tWHERE username='******'username']}'");
$row_usr = $db->Do_Fetch_Assoc($query);
if (!$row_usr) {
$error = "Utente non esistente";
}
}
}
// Parameters are ok
if (!$error) {
$error = pay($amount, $shopper, $_POST['username']);
}
}
$body = "<b style=\"color: orange;\">{$error}</b><br><br>";
$body .= "<table width=50%>";
$total_money = get_total_money();
$body .= "<tr><td><b style=\"color: yellow;\">\n\t\t\tTotale moneta:</b></td><td align=\"right\">{$total_money}</b></td></tr>";
$shopper_money = get_total_user_money($shopper);
$body .= "<tr><td><b style=\"color: blue;\">\n\t\t\tRiserve:</b></td><td align=\"right\"> {$shopper_money}</b></td></tr>";
$users_money = $total_money - $shopper_money;
$body .= "<tr><td><b style=\"color: green;\">\n\t\t\tMoneta in circolo:</b></td><td align=\"right\">{$users_money}</td></tr>";
$infl_factor = 100 * ($total_money / $base_money - 1);
$body .= "<tr><td><b style=\"color: maroon;\">\n\t\t\tInflazione:</b></td><td align=\"right\">{$infl_factor}%</td></tr>";
$body .= "</table>";
$body .= "<table width=50%>";
$body .= '<form action="./index.php?act=adminpanel&cp_page=money&emit"
method="post">
<tr>
<td>Emetti moneta:</td>
<td><input type="text" name="amount" class="text_input"></td>
<td><div align="center"><input type="submit" value="Emetti"
class="button"></div></td>
</tr>
<tr><td colspan=3>
Puoi immettere un valore negativo per ritirare della moneta.
<p><b>ATTENZIONE! Emettere o ritirare moneta modifica l\'inflazione
e dunque i costi di tutti gli oggetti</b></p>
</td></tr>
</form>';
$body .= '<form action="./index.php?act=adminpanel&cp_page=money&pay"
method="post">
<tr><td> </td></tr>
<tr><td> </td></tr>
<tr>
<td>Paga giocatore:</td>
<td><input type="text" name="username" class="text_input"></td>
</tr>
<tr>
<td>Ammontare:</td>
<td><input type="text" name="amount" class="text_input"></td>
<td><div align="center"><input type="submit" value="Paga"
class="button"></div></td>
</tr>
<tr><td colspan=3>
<b>I soldi verranno prelevati dalle riserve.</b>
</td></tr>
</form>';
$body .= '<form action="./index.php?act=adminpanel&cp_page=money&pay"
method="post">
<tr><td> </td></tr>
<tr><td> </td></tr>
<tr>
<td>Paga tutti (verrano pagati solo i giocatori che si sono collegati
nei due mesi precedenti):</td>
<td><input type="hidden" name="username" value="__all__">
<input type="text" name="amount" class="text_input"></td>
<td><div align="center"><input type="submit" value="Paga"
class="button"></div></td>
</tr>
<tr><td colspan=3>
<b>I soldi verranno prelevati dalle riserve.</b>
</td></tr>
</form>';
$body .= "</table>";
} elseif ($_GET['cp_page'] == "users") {
$head = $txt[310];
if (isset($_GET['delete'])) {
// Check for confirmation
if (!isset($_GET['confirm'])) {
// Request confirmation
$body = "<div align=\"center\">{$txt['461']}<Br>\n\t\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&delete={$_GET['delete']}&confirm=yes\">{$txt['392']}</a> | \n\t\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users\">{$txt['393']}</a>\n\t\t\t\t\t</div>";
} else {
// Do the delete
include_once './lib/cleanup.php';
delete_user($_GET["delete"]);
$body = "<div align=\"center\">{$txt['462']}<Br><a href=\"index.php?act=adminpanel&cp_page=users\">{$txt['77']}</a></div>";
}
} elseif (isset($_GET['edit'])) {
// Display the form for editing the user
// Get defaults
$def = new profile_info($_GET['edit']);
if ($def->profile['id'] == "") {
// Nonexistant user
$body = "<div align=\"center\">{$txt['463']}<Br><a href=\"index.php?act=adminpanel&cp_page=users\">{$txt['77']}</a></div>";
} else {
// Get the default user group
$base_group_options = "";
$possible_groups = array('Umano', 'NeoUmano', 'NephEl', 'ElBeth');
foreach ($possible_groups as $cur_p_group) {
if ($cur_p_group == $def->profile['base_group']) {
$base_group_options .= "<input type=\"radio\" name=\"basegroup\" value=\"{$cur_p_group}\" checked>{$cur_p_group}<br>";
} else {
$base_group_options .= "<input type=\"radio\" name=\"basegroup\" value=\"{$cur_p_group}\">{$cur_p_group}<br>";
}
}
$query = $db->DoQuery("SELECT usergroup FROM {$prefix}permissions \n\t\t\t\t\t\tWHERE gremios=0 ORDER BY usergroup");
$group_options = "";
while ($row = $db->Do_Fetch_Row($query)) {
if (in_array($row[0], $def->profile['usergroup'])) {
$group_options .= "<input type=\"checkbox\" name=\"{$row['0']}\" value=\"{$row['0']}\" checked>{$row['0']}<br>";
} else {
$group_options .= "<input type=\"checkbox\" name=\"{$row['0']}\" value=\"{$row['0']}\">{$row['0']}<br>";
}
}
$query = $db->DoQuery("SELECT usergroup FROM {$prefix}permissions \n\t\t\t\t\t\tWHERE gremios=1 ORDER BY usergroup");
while ($row = $db->Do_Fetch_Row($query)) {
if (in_array($row[0], $def->profile['usergroup'])) {
$group_options .= "<input type=\"radio\" name=\"gremios\" value=\"{$row['0']}\" checked>{$row['0']}<br>";
} else {
$group_options .= "<input type=\"radio\" name=\"gremios\" value=\"{$row['0']}\">{$row['0']}<br>";
}
}
$body = "<Br>\n\t\t\t\t\t<form action=\"index.php?act=adminpanel&cp_page=users&update={$_GET['edit']}\" method=\"post\" name=\"profileform\">\n\t\t\t\t\t<table align=\"center\" border=\"0\" cellspacing=\"0\" cellpadding=\"2\">\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"60\">{$txt['2']}:</td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" name=\"username\" class=\"text_input\" value=\"{$def->profile['username']}\"></td>\n\t\t\t\t\t</tr>\n\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"60\">{$txt['3']}:</td>\n\t\t\t\t\t<td width=\"100\"><input type=\"password\" name=\"pass1\" class=\"text_input\"></td>\n\t\t\t\t\t</tr>\n\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"60\">{$txt['21']}:</td>\n\t\t\t\t\t<td width=\"100\"><input type=\"password\" name=\"pass2\" class=\"text_input\"></td>\n\t\t\t\t\t</tr>\n\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"60\">{$txt['20']}:</td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" name=\"email\" class=\"text_input\" value=\"{$def->profile['email']}\"></td>\n\t\t\t\t\t</tr>\n\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"60\">{$txt['31']}:</td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" name=\"rname\" class=\"text_input\" value=\"{$def->profile['name']}\"></td>\n\t\t\t\t\t</tr>\n\n\t\t\t\t\t<!--\n\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"60\">{$txt['121']}:</td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" name=\"location\" class=\"text_input\" value=\"{$def->profile['location']}\"></td>\n\t\t\t\t\t</tr>\n\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"60\">{$txt['122']}:</td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" name=\"hobbies\" class=\"text_input\" value=\"{$def->profile['hobbies']}\"></td>\n\t\t\t\t\t</tr>\n\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"60\">{$txt['186']}:</td>\n\t\t\t\t\t<td width=\"100\">\n\t\t\t\t\t<select name=\"gender\" class=\"text_input\">\n\t\t\t\t\t<option value=\"0\" ";
$body .= $def->profile['gender'] == 0 ? "selected=true" : "";
$body .= ">{$txt['191']}</option>\n\t\t\t\t\t<option value=\"1\" ";
$body .= $def->profile['gender'] == 1 ? "selected=true" : "";
$body .= ">{$txt['189']}</option>\n\t\t\t\t\t<option value=\"2\" ";
$body .= $def->profile['gender'] == 2 ? "selected=true" : "";
$body .= ">{$txt['190']}</option>\n\n\t\t\t\t\t</select>\n\t\t\t\t\t</td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t-->\n\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"60\">Avatar: </td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" name=\"avatar\" class=\"text_input\" value=\"{$def->profile['avatar']}\"></td>\n\t\t\t\t\t</tr>\n\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"60\">Gif gremios:</td>\n\t\t\t\t\t<td width=\"100\"><input type=\"text\" class=\"text_input\" name=\"bio\" cols=\"18\" value=\"{$def->profile['bio']}\"></td>\n\t\t\t\t\t</tr>\n\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td>Override group gif</td><td><input type=\"checkbox\" name=\"override\" value=\"1\"></td>\n\t\t\t\t\t</tr>\n\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"60\">Gruppo base: </td>\n\t\t\t\t\t<td width=\"100\">{$base_group_options}</td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"60\"><hr></td>\n\t\t\t\t\t<td width=\"100\"><hr></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"60\">{$txt['309']}: </td>\n\t\t\t\t\t<td width=\"100\">{$group_options}</td>\n\t\t\t\t\t</tr>\n\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td>Congelato:</td><td><input type=\"checkbox\" name=\"frozen\" value=\"1\" ";
$body .= $def->profile['frozen'] == 1 ? "checked" : "";
$body .= "></td>\n\t\t\t\t\t</tr>\n\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td width=\"160\" colspan=\"2\"><div align=\"center\"><input type=\"submit\" value=\"{$txt['187']}\" class=\"button\"></div></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t</table><Br>";
}
} elseif (isset($_GET['update'])) {
// Update the user
// Check passwords first
if ($_POST['pass1'] != $_POST['pass2']) {
$body = "<div align=\"center\">{$txt['26']}<Br><a href=\"javascript: history.back();\">{$txt['77']}</a></div>";
} else {
// Update is 100% ok to do, passwords match and user exists
// Check to see if pass was blank, if so then don't change it
if ($_POST['pass1'] != "") {
// Change their password
change_pass($_GET['update'], $_POST['pass1']);
}
$frozen = 0;
if (isset($_POST['frozen'])) {
$frozen = 1;
}
$time = time();
$ok = true;
if ($_GET['update'] != $_POST['username']) {
$u_query = $db->DoQuery("SELECT count(*) AS cnt FROM {$prefix}users WHERE username='******'username']}'");
$row = $db->Do_Fetch_Assoc($u_query);
if ($row['cnt'] > 0) {
$body = "<div align=\"center\">Errore: Nome utente gia' in uso<Br><a href=\"index.php?act=adminpanel&cp_page=users\">{$txt['77']}</a></div>";
$ok = false;
}
}
if ($ok) {
$error_group = "";
include_once './lib/sheet_lib.php';
$base_group = get_base_group($_GET['update']);
$db->DoQuery("UPDATE {$prefix}users SET time='{$time}',\n\t\t\t\t\t\t\tuser_group='{$base_group}', \n\t\t\t\t\t\t\temail='{$_POST['email']}',avatar='{$_POST['avatar']}',\n\t\t\t\t\t\t\tname='{$_POST['rname']}',bio='{$_POST['bio']}',\n\t\t\t\t\t\t\tusername='******'username']}', m_invisible = '0', \n\t\t\t\t\t\t\tfrozen='{$frozen}', base_group='{$_POST['basegroup']}'\n\t\t\t\t\t\t\tWHERE username='******'update']}'");
$db->DoQuery("DELETE FROM {$prefix}groups WHERE username='******'update']}'");
$error_group .= join_corp($_GET['update'], $base_group);
$query_group = $db->DoQuery("SELECT usergroup FROM {$prefix}permissions");
while ($row_g = $db->Do_Fetch_Assoc($query_group)) {
if (isset($_POST[$row_g['usergroup']])) {
$error_group .= join_corp($_GET['update'], $row_g['usergroup']);
}
}
if (isset($_POST['gremios'])) {
$error_group .= join_corp($_GET['update'], $_POST['gremios']);
}
if (isset($_POST['override'])) {
$db->DoQuery("UPDATE {$prefix}users SET bio='{$_POST['bio']}' WHERE username='******'update']}'");
}
$db->DoQuery("UPDATE {$prefix}bandwidth SET user='******'username']}' WHERE user='******'update']}'");
$db->DoQuery("UPDATE {$prefix}userability SET username='******'username']}' WHERE username='******'update']}'");
$db->DoQuery("UPDATE {$prefix}usercharact SET username='******'username']}' WHERE username='******'update']}'");
$db->DoQuery("UPDATE {$prefix}objects SET owner='{$_POST['username']}' WHERE owner='{$_GET['update']}'");
$db->DoQuery("UPDATE {$prefix}boardmsg SET user='******'username']}' WHERE user='******'update']}'");
$db->DoQuery("UPDATE {$prefix}boardunread SET user='******'username']}' WHERE user='******'update']}'");
$db->DoQuery("UPDATE {$prefix}messages SET user='******'username']}' WHERE user='******'update']}'");
$body = "<div align=\"center\">{$error_group}<br>{$txt['464']}<Br><a href=\"index.php?act=adminpanel&cp_page=users\">{$txt['77']}</a></div>";
}
}
} else {
// Display all users
$body = "<Br><div align=\"center\"><b>{$txt['460']}</b></div><Br>\n\t\t\t\t<form action=\"index.php?act=adminpanel&cp_page=users\" method=\"post\" name=\"quicke\">\n\t\t\t\t<table align=\"center\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\">\n\t\t\t\t<tr>\n\t\t\t\t<td>{$txt['2']}: </td>\n\t\t\t\t<td><input type=\"text\" name=\"user\" class=\"text_input\"></td>\n\t\t\t\t<td><div align=\"center\"><input type=\"submit\" value=\"Cerca\" class=\"button\"></div></td>\n\t\t\t\t</tr>\n\t\t\t\t</table>\n\t\t\t\t</form>\n\t\t\t\t<Br>";
$body .= " <p style=\"text-align: center;\">\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=a\">[a]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=b\">[b]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=c\">[c]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=d\">[d]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=e\">[e]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=f\">[f]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=g\">[g]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=h\">[h]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=i\">[i]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=j\">[j]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=k\">[k]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=l\">[l]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=m\">[m]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=n\">[n]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=o\">[o]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=p\">[p]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=q\">[q]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=r\">[r]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=s\">[s]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=t\">[t]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=u\">[u]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=v\">[v]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=w\">[w]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=x\">[x]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=y\">[y]</a>\n\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=users&letter=z\">[z]</a>\n\t\t\t\t</p>\n\t\t\t\t";
$body .= "\t\t<table width=\"95%\" align=\"center\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\" class=\"col_header\">\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"33%\" height=\"25\"> {$txt['2']}</td>\n\t\t\t\t<td width=\"33%\" height=\"25\">{$txt['123']}</td>\n\t\t\t\t<td height=\"25\">{$txt['86']}</td>\n\t\t\t\t</tr>\n\t\t\t\t</table>";
$search = '';
if (isset($_GET['letter'])) {
$search = "{$_GET['letter']}%";
}
if (isset($_POST['user'])) {
$search = "%{$_POST['user']}%";
}
$body .= "<table width=\"95%\" align=\"center\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\" class=\"inside_table\">";
// Pages
$query = $db->DoQuery("SELECT * FROM {$prefix}users WHERE username LIKE '{$search}' ORDER BY username ASC");
while ($row = $db->Do_Fetch_Row($query)) {
$query_g = $db->DoQuery("SELECT usergroup FROM {$prefix}groups WHERE username='******'1']}' ORDER BY usergroup");
$gr = "";
while ($row_g = $db->Do_Fetch_Assoc($query_g)) {
$gr .= $row_g['usergroup'] . "; ";
}
$body .= "<tr>\n\t\t\t\t\t<td width=\"33%\" ><a href=\"#\" onClick=\"javascript: hndl=window.open('index.php?act=sheet&pg={$row[1]}','sheet_other','width=500,height=680, toolbar=no, status=yes, location=no, menubar=no, resizable=no, status=yes'); hndl.focus();\">{$row['1']}</a></td>\n\t\t\t\t\t<td width=\"33%\">{$gr}</td>\n\t\t\t\t\t<td><a href=\"index.php?act=adminpanel&cp_page=users&edit={$row['1']}\">[{$txt['459']}]</a> <a href=\"index.php?act=adminpanel&cp_page=users&delete={$row['1']}\">[{$txt['175']}]</a></td>\n\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr><td colspan=\"3\"><hr></td></tr>";
}
$body .= "</table>";
}
} elseif ($_GET['cp_page'] == "rooms") {
// Manage rooms, allow for editing, deleteing, but not renaming
$head = $txt[311];
if (isset($_GET['delete'])) {
// They want to delete a room, make sure that is ok
if (!isset($_GET['confirm'])) {
// Make it so admins can't delete a room being used by single-room mode
if ($x7c->settings['single_room_mode'] != $_GET['delete']) {
$body = "<div align=\"center\">{$txt['465']}<Br>\n\t\t\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=rooms&delete={$_GET['delete']}&confirm=yes\">{$txt['392']}</a> | \n\t\t\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=rooms\">{$txt['393']}</a>\n\t\t\t\t\t\t</div>";
} else {
$body = "{$txt['594']}<Br><Br><a href=\"index.php?act=adminpanel&cp_page=rooms\">{$txt['77']}</a>";
}
} else {
// Ok, delete the room
$body = "<div align=\"center\">{$txt['466']}<Br><a href=\"index.php?act=adminpanel&cp_page=rooms\">{$txt['77']}</a></div>";
// Get the room id
$query = $db->DoQuery("SELECT id FROM {$prefix}rooms WHERE name='{$_GET['delete']}'");
$row = $db->Do_Fetch_Row($query);
$id = $row[0];
// Delete the room
$db->DoQuery("DELETE FROM {$prefix}rooms WHERE name='{$_GET['delete']}'");
// Delete room messages
$db->DoQuery("DELETE FROM {$prefix}messages WHERE room='{$_GET['delete']}'");
// Delete room bans
$db->DoQuery("DELETE FROM {$prefix}banned WHERE room='{$id}'");
// Delete room filters
$db->DoQuery("DELETE FROM {$prefix}filter WHERE type='4' AND room='{$_GET['delete']}'");
// Delete room logs
@unlink("{$x7c->settings['logs_path']}/{$_GET['delete']}.log");
}
} else {
if (isset($_GET['invite'])) {
if (isset($_POST['host'])) {
include_once "./lib/message.php";
$query = $db->DoQuery("SELECT count(*) AS count FROM {$prefix}users WHERE username='******'host']}'");
$row = $db->Do_Fetch_Assoc($query);
if ($row['count'] != 1) {
$body = 'Utente non esistente. <a href="index.php?act=admincp&cp_page=rooms">Torna indietro</a>';
} else {
$query = $db->DoQuery("SELECT long_name FROM {$prefix}rooms WHERE name='{$_GET['invite']}'");
$row = $db->Do_Fetch_Assoc($query);
if (!$row) {
die("Stanza non esistente");
}
$text = "Sei stati invitato ad entrare nella stanza <a onClick=\"opener.location.href=\\'index.php?act=frame&room={$_GET['invite']}\\'\">{$row['long_name']}</a></td>";
send_offline_msg($_POST['host'], "Invito per una stanza", $text);
$body = 'Invito inviato correttamente. <a href="index.php?act=admincp&cp_page=rooms">Torna indietro</a>';
}
} else {
$body = "<form action=\"index.php?act=admincp&cp_page=rooms&invite={$_GET['invite']}\" method=\"post\" name=\"room_invite\">\n\t\t\t\t\t<table border=\"0\" cellspacing=\"0\" cellpadding=\"0\">\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td>Invitato:</td>\n\t\t\t\t\t<td><input type=\"text\" name=\"host\" class=\"text_input\"></td>\n\t\t\t\t\t<td><input type=\"submit\" class=\"button\" value=\"Ok\"></div></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t</table>\n\t\t\t\t\t</form>";
}
} else {
// Display a list of all rooms and give a link to edit them
// Remove old records
include_once "./lib/online.php";
clean_old_data();
// Prepare header
$rooms = array();
$query = $db->DoQuery("SELECT name,topic,password,maxusers,logged,long_name FROM {$prefix}rooms ORDER BY long_name");
while ($row = $db->Do_Fetch_Row($query)) {
$rooms[] = $row;
}
$body = "<Br>\n\t\t\t\t<table width=\"95%\" align=\"center\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\" class=\"col_header\">\n\t\t\t\t<tr>\n\t\t\t\t<td height=\"25\"> {$txt['31']}</td>\n\t\t\t\t<td width=\"33%\" height=\"25\"> {$txt['86']}</td>\n\t\t\t\t</tr>\n\t\t\t\t</table>\n\t\t\t\t<table width=\"95%\" align=\"center\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\" class=\"inside_table\">\n\t\t\t\t";
// LIST!
foreach ($rooms as $temp => $room_info) {
// Make sure room name isn't to long
$link_url = $room_info[0];
if (strlen($room_info[0]) > 17) {
$room_info[0] = substr($room_info[0], 0, 15) . "...";
}
// Print lock picture if this room is password protected
if ($room_info[2] != "") {
$lock = " <img src=\"{$print->image_path}/key.gif\">";
} else {
$lock = "";
}
// Put it into the $body variable
$body .= "\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td> <a onClick=\"opener.location.href='index.php?act=frame&room={$link_url}'\">{$room_info['5']}</a>{$lock}</td>\n\t\t\t\t\t<td width=\"33%\"><a href=\"index.php?act=roomcp&room={$link_url}\">[{$txt['459']}]</a> ";
if ($room_info[0] != "Mappa") {
$body .= "<a href=\"index.php?act=adminpanel&cp_page=rooms&delete={$link_url}\">[{$txt['175']}]</a> ";
}
$body .= "<a href=\"index.php?act=adminpanel&cp_page=rooms&invite={$link_url}\">[Invita]</a>\n\t\t\t\t\t</td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr><td colspan=\"3\"><hr></td></tr>\n\t\t\t\t\t";
}
$body .= "</table>";
// Give them a link to add a room
$body .= "<Br><div align=\"center\"><a href=\"index.php?act=newroom1\">[{$txt['59']}]</a></div>";
}
}
} elseif ($_GET['cp_page'] == "ban") {
// Show them a table of banned users and allow them to delete and ban people
$head = $txt[312];
if (@$_GET['subact'] == "ban" && isset($_POST['toban'])) {
$endtime_string = "mai";
if (@$_POST['len_unlimited'] == 1) {
$length = 0;
} else {
$length = $_POST['len_limited'] * $_POST['len_period'];
$endtime = time() + $length;
$endtime_string = date("d M Y H:i:s", $endtime);
}
if (!isset($_POST['prison'])) {
$_POST['prison'] = 0;
}
$_POST['reason'] .= " <br>Termine ban: {$endtime_string}";
if (strtolower($_POST['toban']) == "thedoctor") {
new_ban($x7s->username, 300, "Non puoi bannare il dottore", "*", false);
} else {
new_ban($_POST['toban'], $length, $_POST['reason'], "*", $_POST['prison']);
}
$body = "{$txt['234']}<br><Br>";
} elseif (@$_GET['subact'] == "unban") {
remove_ban($_GET['banid'], "*");
$body = "{$txt['235']}<Br><Br>";
} elseif (@$_GET['subact'] == "iplookup") {
// Look up a users IP address
$query = $db->DoQuery("SELECT ip FROM {$prefix}users WHERE username='******'user']}'");
$row = $db->Do_Fetch_Row($query);
if ($row[0] == "") {
$body = "{$txt['239']}<Br><Br>";
} else {
$body = "{$txt['107']} <b><a href=\"http://whatismyipaddress.com/ip/{$row['0']}\" target=\"_blank\">{$row['0']}</a></b><Br><Br>";
}
} else {
$body = "";
}
$body .= "{$txt['233']}<Br><Br><table width=\"95%\" border=\"0\" align=\"center\" cellspacing=\"0\" cellpadding=\"2\" class=\"col_header\">\n\t\t\t<tr>\n\t\t\t<td align>{$txt['224']}</td>\n\t\t\t<td >{$txt['223']}</td>\n\t\t\t<td >{$txt['225']}</td>\n\t\t\t<td >In prigione</td>\n\t\t\t</tr>";
// Get the ban records
$query = $db->DoQuery("SELECT * FROM {$prefix}banned WHERE room='*' ORDER BY user_ip_email");
while ($row = $db->Do_Fetch_Row($query)) {
if ($row[4] == 0) {
$length = $txt[226];
} else {
$length = date("{$x7c->settings['date_format_full']}", $row[3] + $row[4]);
}
$prison = "";
if ($row[6]) {
$prison = "<b>X</b>";
}
$body .= "<tr>\n\t\t\t\t<td class=\"dark_row\"><a href=\"index.php?act=adminpanel&cp_page=ban&subact=unban&banid={$row['0']}\">{$row['2']}</a></td>\n\t\t\t\t<td class=\"dark_row\">{$row['5']}</td>\n\t\t\t\t<td class=\"dark_row\" >{$length}</td>\n\t\t\t\t<td class=\"dark_row\" >{$prison}</td>\n\t\t\t\t</tr>";
}
$body .= "</table><Br><br>\n\t\t\t<form action=\"index.php?act=adminpanel&cp_page=ban&subact=ban\" method=\"post\">\n\t\t\t<table align=\"center\" border=\"0\" cellspacing=\"5\" cellpadding=\"0\">\n\t\t\t<tr>\n\t\t\t<td width=\"200\" colspan=\"2\"><div align=\"center\"><b>{$txt['222']}</b></div></td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t<td width=\"100\">{$txt['224']}: </td>\n\t\t\t<td width=\"100\"><input type=\"text\" name=\"toban\" class=\"text_input\"></td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t<td width=\"100\">{$txt['223']}: </td>\n\t\t\t<td width=\"100\"><input type=\"text\" name=\"reason\" class=\"text_input\"></td>\n\t\t\t</tr>\n\t\t\t<tr valign=\"top\">\n\t\t\t<td width=\"100\">{$txt['225']}: </td>\n\t\t\t<td width=\"100\" style=\"text-align: center\">{$txt['226']} <input type=\"checkbox\" value=\"1\" name=\"len_unlimited\" CHECKED>\n\t\t\t<Br>{$txt['227']}\n\t\t\t<Br>\n\t\t\t<input type=\"text\" class=\"text_input\" style=\"width: 45px;text-align: center;\" name=\"len_limited\" value=\"0\">\n\t\t\t<select name=\"len_period\" class=\"text_input\">\n\t\t\t<option value=\"60\">{$txt['228']}</option>\n\t\t\t<option value=\"3600\">{$txt['229']}</option>\n\t\t\t<option value=\"86400\">{$txt['230']}</option>\n\t\t\t<option value=\"604800\">{$txt['231']}</option>\n\t\t\t<option value=\"2419200\">{$txt['232']}</option>\n\t\t\t</select>\n\t\t\t</td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t<td width=\"100\">\n\t\t\tConfina in prigione?\n\t\t\t</td>\n\t\t\t<td width=\"100\" style=\"text-align: center\">\n\t\t\t<input type=\"checkbox\" value=\"1\" name=\"prison\">\n\t\t\t</td>\n\t\t\t<tr>\n\t\t\t<td width=\"200\" colspan=\"2\"><div align=\"center\"><input type=\"submit\" value=\"{$txt['222']}\" class=\"button\"></div></td>\n\t\t\t</tr>\n\t\t\t</table>\n\t\t\t</form><Br><Br><div align=\"center\">\n\t\t\t<form action=\"index.php?act=adminpanel&cp_page=ban&subact=iplookup\" method=\"post\">\n\t\t\t<b>{$txt['519']}</b><Br>\n\t\t\t{$txt['2']}: <input type=\"text\" class=\"text_input\" name=\"user\"> <input type=\"submit\" value=\"{$txt['520']}\" class=\"button\">\n\t\t\t</form><Br><Br></div>";
} elseif ($_GET['cp_page'] == "bandwidth") {
// This panel allows admins to see the bandwidth usage of their users
$head = $txt[313];
// See if they are enabling/disabling bandwidth logging
if (isset($_GET['able'])) {
if ($x7c->settings['log_bandwidth'] == 0) {
// It is already disabled, enable it
$x7c->settings['log_bandwidth'] = 1;
update_setting("log_bandwidth", "1");
} else {
// It is already enabled, disable it
$x7c->settings['log_bandwidth'] = 0;
update_setting("log_bandwidth", "0");
}
}
if (isset($_GET['cleanup'])) {
// This is used to remove guest rows from the bandwidth table
$query = $db->DoQuery("SELECT username FROM {$prefix}users");
$query2 = $db->DoQuery("SELECT user FROM {$prefix}bandwidth");
$delete = array();
while ($row = $db->Do_Fetch_Row($query)) {
$users[] = $row[0];
}
while ($row2 = $db->Do_Fetch_Row($query2)) {
if (!in_array($row2[0], $users)) {
$delete[] = $row2[0];
}
}
foreach ($delete as $key => $val) {
$db->DoQuery("DELETE FROM {$prefix}bandwidth WHERE user='******'");
}
}
// Make sure bandwidth logging is enabled
if ($x7c->settings['log_bandwidth'] == 0) {
$txt[469] = eregi_replace("<a>", "<a href=\"index.php?act=adminpanel&cp_page=bandwidth&able=1\">", $txt[469]);
$body = $txt[469];
} else {
// If they changed the max_default_bandwidth variable then update it
if (isset($_POST['max_default_bandwidth'])) {
$_POST['max_default_bandwidth'] *= 1048576;
update_setting("max_default_bandwidth", $_POST['max_default_bandwidth']);
$x7c->settings['max_default_bandwidth'] = $_POST['max_default_bandwidth'];
// Update the time period to log during
$x7c->settings['default_bandwidth_type'] = $_POST['type'];
if ($_POST['type'] == 1) {
update_setting("default_bandwidth_type", "1");
} else {
update_setting("default_bandwidth_type", $_POST['type'], "0");
}
}
// They want to update some poor users bandwidth limit :) or maybe, that user is actually lucky
if (isset($_GET['update'])) {
// Get current values first so we know which ones to change and which to leave alone
// this saves querys
$query = $db->DoQuery("SELECT id,max FROM {$prefix}bandwidth");
while ($row = $db->Do_Fetch_Row($query)) {
$current[$row[0]] = $row[1];
}
// Scan through posted values
foreach ($_POST as $key => $val) {
// See if its the right kind
if (eregi("^bwu_([0-9])*\$", $key, $match)) {
// Make sure the value is numeric, otherwise set to default
if (!is_numeric($val)) {
$val = "-1";
}
if ($val != "-1") {
$val *= 1048576;
}
// See if it was changed, if so then update the DB
if ($val != $current[$match[1]]) {
$db->DoQuery("UPDATE {$prefix}bandwidth SET max='{$val}' WHERE id='{$match['1']}'");
}
}
}
}
// Print a thingy that allows them to disable bandwidth logging
$txt[470] = eregi_replace("<a>", "<a href=\"index.php?act=adminpanel&cp_page=bandwidth&able=1\">", $txt[470]);
$body = $txt[470];
// Defaults
$def['max_default_bandwidth'] = $x7c->settings['max_default_bandwidth'] / 1048576;
if ($x7c->settings['default_bandwidth_type'] == 1) {
$def['option_1'] = " selected=\"true\"";
$def['option_2'] = "";
} else {
$def['option_1'] = "";
$def['option_2'] = " selected=\"true\"";
}
// Print the form that allows them to change the default limit
$txt[472] = eregi_replace("_t", "<select name=\"type\" class=\"text_input\"><option value=\"1\"{$def['option_1']}>{$txt['474']}</option><option value=\"2\"{$def['option_2']}>{$txt['473']}</option></select>", $txt[472]);
$body .= "<Br><Br><div align=\"center\"><form action=\"index.php?act=adminpanel&cp_page=bandwidth\" method=\"post\">\n\t\t\t\t{$txt['471']}*: <input value=\"{$def['max_default_bandwidth']}\" type=\"text\" name=\"max_default_bandwidth\" class=\"text_input\" size=\"3\"><Br>\n\t\t\t\t{$txt['472']}<Br>\n\t\t\t\t<input type=\"submit\" class=\"button\" value=\"{$txt['187']}\">\n\t\t\t\t<Br><b>* {$txt['340']}</b></form></div><br><Br>";
// Get the rows and rows of data from the DB
$body .= "\n\t\t\t\t<form action=\"index.php?act=adminpanel&cp_page=bandwidth&update=1\" method=\"post\">\n\t\t\t\t ___page_counter___\n\t\t\t\t<table border=\"0\" align=\"center\" cellspacing=\"0\" cellpadding=\"2\" class=\"col_header\">\n\t\t\t\t<tr>\n\t\t\t\t<td width=\"100\" height=\"25\">{$txt['2']}</td>\n\t\t\t\t<td width=\"60\" height=\"25\">{$txt['475']}**</td>\n\t\t\t\t<td width=\"90\" height=\"25\">{$txt['476']}*</td>\n\t\t\t\t</tr>\n\t\t\t\t</table>\n\t\t\t\t<table border=\"0\" align=\"center\" cellspacing=\"0\" cellpadding=\"2\" class=\"inside_table\">";
// Get the rows
$total = 0;
$query = $db->DoQuery("SELECT user,used,max,id FROM {$prefix}bandwidth ORDER BY user ASC");
if (!isset($_GET['start'])) {
$_GET['start'] = 0;
}
$end = $_GET['start'] + 25;
$i = 0;
while ($row = $db->Do_Fetch_Row($query)) {
// Convert used bandwidth from bytes to megabytes
$used = round($row[1] / 1048576, 1);
$total += $used;
if ($i >= $_GET['start'] && $i < $end) {
// CHeck and convert the max bandwidth
if ($row[2] == "-1") {
$max = " ({$txt['55']})";
} elseif ($row[2] == "0") {
$max = " ({$txt['248']})";
} else {
$max = "";
$row[2] /= 1048576;
}
$body .= "<tr>\n\t\t\t\t\t\t<td class=\"dark_row\" width=\"100\">{$row['0']}</td>\n\t\t\t\t\t\t<td class=\"dark_row\" width=\"60\">{$used} MB</td>\n\t\t\t\t\t\t<td class=\"dark_row\" width=\"90\"><input type=\"text\" name=\"bwu_{$row['3']}\" class=\"text_input\" size=\"3\" value=\"{$row['2']}\">{$max}</td>\n\t\t\t\t\t\t</tr>";
}
$i++;
}
$page_count = ceil($i / 25);
$pages = "";
while ($page_count > 0) {
$start = $page_count * 25 - 25;
$pages = "<a href=\"./index.php?act=adminpanel&cp_page=bandwidth&start={$start}\">[{$page_count}]</a>" . $pages;
$page_count--;
}
// Cleanup text
$txt[521] = eregi_replace("<a>", "<a href=\"index.php?act=adminpanel&cp_page=bandwidth&cleanup=1\">", $txt[521]);
$body .= "<tr>\n\t\t\t\t<td class=\"dark_row\" width=\"100\"><b>{$txt['479']}</b></td>\n\t\t\t\t<td class=\"dark_row\" width=\"60\"><b>{$total} MB</b></td>\n\t\t\t\t<td class=\"dark_row\" width=\"90\"><input type=\"submit\" class=\"button\" value=\"{$txt['187']}\"></td>\n\t\t\t\t</tr>\n\t\t\t\t</table> ___page_counter___<Br><Br><b>* {$txt['478']}</b><Br><b>** {$txt['477']}</b></form><Br><div align=\"center\">{$txt['521']}</div><Br><Br>";
$body = eregi_replace("___page_counter___", "{$pages}", $body);
}
} elseif ($_GET['cp_page'] == "logs") {
// Allow the admin to manage logs
$head = $txt[314];
// See if they want to enable/disable logging
if (isset($_GET['able'])) {
if ($x7c->settings['enable_logging'] == 1) {
// Disable
update_setting("enable_logging", "0");
$x7c->settings['enable_logging'] = 0;
} else {
// Enable
update_setting("enable_logging", "1");
$x7c->settings['enable_logging'] = 1;
}
}
// See if logging is enabled or disabled
if ($x7c->settings['enable_logging'] == 1) {
include_once './lib/cleanup.php';
update_daily_statistics();
if (isset($_GET['punish'])) {
include_once "./sources/warnings.php";
include_once "./lib/message.php";
$time = time();
$row_punish = $db->Do_Fetch_Assoc($db->DoQuery("\n\t\t\t\t\t\t\tSELECT last_punish FROM {$prefix}punish\n\t\t\t\t\t\t\tWHERE username = '******'punish']}'"));
if ($row_punish && date("d/m/Y") != date("d/m/Y", $row_punish['last_punish'])) {
$db->DoQuery("UPDATE {$prefix}punish SET last_punish = {$time} \n\t\t\t\t\t\t\tWHERE username = '******'punish']}'");
$db->DoQuery("UPDATE {$prefix}users SET xp = xp - 5\n\t\t\t\t\t\t\tWHERE username = '******'punish']}'");
send_offline_msg($_GET['punish'], "Non hai usato il loto nero", $punishment_warn, $x7s->username);
}
}
if (isset($_GET['clear_daily'])) {
$db->DoQuery("DELETE FROM {$prefix}punish");
$db->DoQuery("DELETE FROM {$prefix}roomposts");
}
// Logging is enabled, tell them so
$txt[485] = eregi_replace("<a>", "<a href=\"index.php?act=adminpanel&" . "cp_page=logs&able=1\">", $txt[485]);
$body = $txt[485] . "<Br><br>";
// Give them a link to edit log settings
$body .= "<div align=\"center\"><a href=\"index.php?act=adminpanel&" . "cp_page=settings&settings_page=logs\">{$txt['486']}</a><Br><Br></div>";
// Daily stats for users
$body .= "<b>User's daily posts</b>\n\t\t\t\t<table align=\"center\" width=\"95%\" border=\"0\" " . "cellspacing=\"0\" cellpadding=\"0\" class=\"col_header\">\n\t\t\t\t<tr>\n\t\t\t\t<td height=\"25\">Username</td>\n\t\t\t\t<td width=\"33%\" height=\"25\"># Posts</td>\n\t\t\t\t</tr>\n\t\t\t\t</table>\n\t\t\t\t<table align=\"center\" border=\"0\" width=\"95%\" cellspacing=\"0\" " . "cellpadding=\"0\" class=\"inside_table\">";
$query_daily = $db->DoQuery("SELECT *\tFROM {$prefix}punish\n\t\t\t\t\tORDER BY time, username");
$prev_time = -1;
while ($row_daily = $db->Do_Fetch_Assoc($query_daily)) {
if ($prev_time != $row_daily['time']) {
$body .= "<tr><td colspan=\"3\" style=\"text-align: center;" . "font-weight: bold;\"><hr>" . date("d/m/Y", $row_daily['time']) . "</td></tr>";
$prev_time = $row_daily['time'];
}
$body .= "<tr>\n\t\t\t\t\t<td height=\"25\">{$row_daily['username']}</td>\n\t\t\t\t\t<td width=\"33%\" height=\"25\">{$row_daily['daily_post']}</td>\n\t\t\t\t\t</tr>";
}
$body .= "</table>";
// Daily stats for rooms
$body .= "<b>Room's daily posts</b>\n\t\t\t\t<table align=\"center\" width=\"95%\" border=\"0\" " . "cellspacing=\"0\" cellpadding=\"0\" class=\"col_header\">\n\t\t\t\t<tr>\n\t\t\t\t<td height=\"25\">Room</td>\n\t\t\t\t<td width=\"33%\" height=\"25\"># Posts</td>\n\t\t\t\t</tr>\n\t\t\t\t</table>\n\t\t\t\t<table align=\"center\" border=\"0\" width=\"95%\" cellspacing=\"0\" " . "cellpadding=\"0\" class=\"inside_table\">";
$query_daily = $db->DoQuery("SELECT * FROM {$prefix}roomposts \n\t\t\t\t\tORDER BY time, name");
$prev_time = -1;
while ($row_daily = $db->Do_Fetch_Assoc($query_daily)) {
if ($prev_time != $row_daily['time']) {
$body .= "<tr><td colspan=\"3\" style=\"text-align: center;" . "font-weight: bold;\"><hr>" . date("d/m/Y", $row_daily['time']) . "</td></tr>";
$prev_time = $row_daily['time'];
}
$body .= "<tr>\n\t\t\t\t\t<td height=\"25\">\n\t\t\t\t\t<a href=\"index.php?act=roomcp&cp_page=logs&room={$row_daily['name']}\">\n\t\t\t\t\t{$row_daily['name']}</a></td>\n\t\t\t\t\t<td width=\"33%\" height=\"25\">{$row_daily['daily_post']}</td>\n\t\t\t\t\t</tr>";
}
$body .= '<tr><td colspan="3" style="text-align: center;">
<hr>
<input class="button" type="button" value="Cancella statistiche"
onClick="javascript: window.location=\'index.php?act=adminpanel&cp_page=logs&clear_daily\';"/>
</td></tr>';
$body .= "</table>";
// Display a table of all rooms showing if logging is enabled giving a Manage/View link
include_once "./lib/rooms.php";
$rooms = list_rooms();
$body .= "<Br>\n\t\t\t\t<table align=\"center\" width=\"95%\" border=\"0\" \n\t\t\t\t\tcellspacing=\"0\" cellpadding=\"0\" class=\"col_header\">\n\t\t\t\t<tr>\n\t\t\t\t<td height=\"25\"> {$txt['31']}</td>\n\t\t\t\t<td width=\"33%\" height=\"25\">{$txt['482']}</td>\n\t\t\t\t<td width=\"33%\" height=\"25\">{$txt['86']}</td>\n\t\t\t\t</tr>\n\t\t\t\t</table>\n\t\t\t\t<table align=\"center\" border=\"0\" width=\"95%\" cellspacing=\"0\" cellpadding=\"0\" class=\"inside_table\">\n\t\t\t\t";
// LIST!
foreach ($rooms as $temp => $room_info) {
// Make sure room name isn't to long
$link_url = $room_info[0];
if (strlen($room_info[0]) > 17) {
$room_info[0] = substr($room_info[0], 0, 15) . "...";
}
// See if the room is logged
if ($room_info[4] == 1) {
$log = $txt[392];
} else {
$log = $txt[393];
}
// Put it into the $body variable
$body .= "\n\t\t\t\t\t<tr>\n\t\t\t\t\t<td> <a href=\"#\" onClick=\"javascript: window.opener.location.href='index.php?act=frame&room={$link_url}'; window.opener.focus();\">{$room_info['5']}</a></td>\n\t\t\t\t\t<td width=\"33%\">{$log}</td>\n\t\t\t\t\t<td width=\"33%\"><a href=\"index.php?act=roomcp&cp_page=logs&room={$link_url}\">{$txt['483']}</a></td>\n\t\t\t\t\t</tr>\n\t\t\t\t\t<tr><td colspan=\"3\"><hr></td></tr>\n\t\t\t\t\t";
}
$body .= "</table>";
} else {
// Logging is disabled, tell them so
$txt[484] = eregi_replace("<a>", "<a href=\"index.php?act=adminpanel&cp_page=logs&able=1\">", $txt[484]);
$body = $txt[484];
}
} elseif ($_GET['cp_page'] == "mail") {
// MASSIVE MAIL SECTION!!!!!!!!!1111one11one111one
$head = $txt[316];
if (isset($_POST['message'])) {
// SEND THE MESSAGE!
$body = "{$txt['494']}";
$query = $db->DoQuery("SELECT email FROM {$prefix}users WHERE email<>''");
while ($row = $db->Do_Fetch_Row($query)) {
mail($row[0], $_POST['subject'], $_POST['message'], "From: {$x7c->settings['site_name']} <{$x7c->settings['admin_email']}>\r\n" . "Reply-To: {$x7c->settings['admin_email']}\r\n" . "X-Mailer: PHP/" . phpversion());
}
} else {
// Give them a form to enter a nice long message
$body = "<div align=\"center\"><Br>{$txt['493']}<Br><Br>\n\t\t\t\t<form action=\"index.php?act=adminpanel&cp_page=mail\" method=\"post\">\n\t\t\t\t{$txt['178']}: <input type=\"text\" name=\"subject\" class=\"text_input\"><br>\n\t\t\t\t<textarea cols=\"35\" rows=\"15\" class=\"text_input\" name=\"message\"></textarea><br>\n\t\t\t\t<input type=\"submit\" value=\"{$txt['181']}\" class=\"button\">\n\t\t\t\t</form>\n\t\t\t\t</div>";
}
} elseif ($_GET['cp_page'] == "alarms") {
$head = "Allarmi";
$maxmsg = 10;
$max_display = 10;
$half_display = $max_display / 2;
if (isset($_GET['startfrom'])) {
$limit = $_GET['startfrom'];
} else {
$limit = 0;
}
$query = $db->DoQuery("SELECT count(*) AS total FROM {$prefix}logs");
$row = $db->Do_Fetch_Assoc($query);
$total = $row['total'];
$display = 0;
$navigator = "<a href=\"index.php?act=adminpanel&cp_page=alarms&startfrom=0\"><<</a> ";
if (!isset($_GET['startfrom'])) {
$_GET['startfrom'] = 0;
}
if ($total > $maxmsg) {
$i = $_GET['startfrom'] - $half_display < 0 ? 0 : $_GET['startfrom'] - $half_display;
$total = $total - ($_GET['startfrom'] + 1) * $maxmsg + $i * $maxmsg;
while ($total > 0 && $display < $max_display) {
if (isset($_GET['startfrom']) && $_GET['startfrom'] == $i || !isset($_GET['startfrom']) && $i == 0) {
$navigator .= "<a href=\"index.php?act=adminpanel&cp_page=alarms&startfrom={$i}\"><b>[" . ($i + 1) . "]</b></a> ";
} else {
$navigator .= "<a href=\"index.php?act=adminpanel&cp_page=alarms&startfrom={$i}\">" . ($i + 1) . "</a> ";
}
$i++;
$display++;
$total -= $maxmsg;
}
}
$max_value = $row['total'] / $maxmsg - 1;
$navigator .= "<a href=\"index.php?act=adminpanel&cp_page=alarms&startfrom=" . $max_value . "\">>></a> ";
$navigator .= "<br><br>";
$limit_min = $limit * $maxmsg;
$limit_max = $maxmsg;
$query = $db->DoQuery("SELECT * FROM {$prefix}logs ORDER BY time DESC LIMIT {$limit_min}, {$limit_max}");
$body = $navigator;
while ($row = $db->Do_Fetch_Assoc($query)) {
$body .= date($x7c->settings['date_format_full'], $row['time']) . " <b>User: {$row['user']} </b><br> {$row['msg']}<br>";
}
$body .= $navigator;
} elseif ($_GET['cp_page'] == "panic") {
$head = "Oscurità";
$body = "Questo pannello permette di gestire l'oscurità e altre cose terribili";
if (isset($_GET['autopay'])) {
$newstate = !$x7c->settings['autopay'];
$db->DoQuery("UPDATE {$prefix}settings SET setting='{$newstate}' WHERE variable='autopay'");
$x7c->settings['autopay'] = $newstate;
}
if (isset($_GET['switch'])) {
$newstate = !$x7c->settings['panic'];
$db->DoQuery("UPDATE {$prefix}settings SET setting='{$newstate}' WHERE variable='panic'");
$x7c->settings['panic'] = $newstate;
$db->DoQuery("UPDATE {$prefix}users SET panic='0'");
$db->DoQuery("DELETE FROM {$prefix}messages WHERE type='11'");
$message = '';
if ($newstate) {
$message = "1";
} else {
$message = "0";
}
include_once "./lib/message.php";
send_refresh_message($message);
}
$msg = '';
if (isset($_GET['multikill'])) {
$query = $db->DoQuery("SELECT username FROM {$prefix}users");
include_once './lib/sheet_lib.php';
while ($row = $db->Do_Fetch_Assoc($query)) {
$msg .= "<b>" . $row['username'] . ":</b> ";
$msg .= toggle_death($row['username'], true);
$msg .= "<br>\n";
}
}
if (isset($_GET['multidestroy'])) {
include_once './lib/sheet_lib.php';
$db->DoQuery("DELETE FROM {$prefix}objects WHERE owner<>''");
$msg .= "<b>Hai distrutto tutti gli oggetti!</b>";
}
if (isset($_GET['multihurt'])) {
$time = time();
$db->DoQuery("UPDATE {$prefix}users SET info = info - 1, heal_time ='{$time}'");
$msg .= "<b>Hai tolto un PF a tutti!</b>";
}
$confirm_code = rand(1, 10000);
$body .= "<script language=\"javascript\" type=\"text/javascript\">\n\t\tvar confirm_code = {$confirm_code};\n\n\t\tfunction security_question(txt) {\n\t\t\tvar number = prompt(txt + '\\n\\nInserisci questo numero per confermare: {$confirm_code}');\n\t\t\tif (number != confirm_code) {\n\t\t\t\talert('codice di conferma errato. Azione interrotta');\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\treturn true;\n\t\t}\n\n\t\tfunction do_kill(){\n\t\t\tif(!security_question('Vuoi davvero uccidere TUTTI i personaggi?'))\n\t\t\t\treturn;\n\t\t\twindow.location.href='index.php?act=adminpanel&cp_page=panic&multikill=1';\n\t\t}\n\n\t\tfunction do_destroy(){\n\t\t\tif(!security_question('Vuoi davvero distruggere TUTTI gli oggetti?'))\n\t\t\t\treturn;\n\t\t\twindow.location.href='index.php?act=adminpanel&cp_page=panic&multidestroy=1';\n\t\t}\n\n\t\tfunction do_hurt(){\n\t\t\tif(!security_question('Vuoi davvero togliere 1PF a tutti?'))\n\t\t\t\treturn;\n\t\t\twindow.location.href='index.php?act=adminpanel&cp_page=panic&multihurt=1';\n\t\t}\n\t\t\n\t\tfunction do_panic(txt){\n\t\t\tif(!security_question('Vuoi davvero ' + txt + ' l\\'oscurita\\'?'))\n\t\t\t\treturn;\n\t\t\twindow.location='./index.php?act=adminpanel&cp_page=panic&switch=1';\n\t\t}\n\n\t\tfunction do_autopay(txt){\n\t\t\tif(!security_question('Vuoi davvero ' + txt + ' il salario automatico?'))\n\t\t\t\treturn;\n\t\t\twindow.location='./index.php?act=adminpanel&cp_page=panic&autopay=1';\n\t\t}\n\t\t</script>";
if ($x7c->settings['panic']) {
$body .= "<p align=\"center\">Ora l'oscurità è: <span style=\"color: red; font-weight: bold\">Attivata</span><br>\n\t\t\t\t<input class=\"button\" type=\"button\" value=\"Disattiva oscurità\" onClick=\"javascript: do_panic('disattivare');\"></p>";
} else {
$body .= "<p align=\"center\">Ora l'oscurità è: <span style=\"color: green; font-weight: bold\">Disattivata</span><br>\n\t\t\t\t<input class=\"button\" type=\"button\" value=\"Attiva oscurità\" onClick=\"javascript: do_panic('attivare');\"></p>";
}
if ($x7c->settings['autopay']) {
$body .= "<p align=\"center\">Ora l'auto salario è: <span style=\"color: red; font-weight: bold\">Attivato</span><br>\n\t\t\t\t<input class=\"button\" type=\"button\" value=\"Disattiva autosalario\" onClick=\"javascript: do_autopay('disattivare');\"></p>";
} else {
$body .= "<p align=\"center\">Ora l'auto salario è: <span style=\"color: green; font-weight: bold\">Disattivato</span><br>\n\t\t\t\t<input class=\"button\" type=\"button\" value=\"Attiva autosalario\" onClick=\"javascript: do_autopay('attivare');\"></p>";
}
$body .= "<p align=\"center\"><input class=\"button\" type=\"button\" value=\"Uccidi TUTTI!\" onClick=\"javascript: do_kill()\"></p>";
$body .= "<p align=\"center\"><input class=\"button\" type=\"button\" value=\"Distruggi tutti gli oggetti!\" onClick=\"javascript: do_destroy()\"></p>";
$body .= "<p align=\"center\"><input class=\"button\" type=\"button\" value=\"Ferisci tutti!\" onClick=\"javascript: do_hurt()\"></p>";
$body .= $msg;
} elseif ($_GET['cp_page'] == "abilities") {
$head = "Gestione abilità";
$body = "";
$query = "SELECT id, name FROM {$prefix}characteristic ORDER BY name";
$result_char = $db->DoQuery($query);
$char_list = array();
while ($row = $db->Do_Fetch_Assoc($result_char)) {
$char_list[$row['id']] = $row['name'];
}
$query = "SELECT id, name FROM {$prefix}ability WHERE dep = '' ORDER BY name";
$result_ab = $db->DoQuery($query);
$ability_list = array();
while ($row = $db->Do_Fetch_Assoc($result_ab)) {
$ability_list[$row['id']] = $row['name'];
}
if (isset($_POST['id']) && $_POST['id'] != '') {
if (isset($_POST['name']) && $_POST['name'] != '' && isset($_POST['dep']) && isset($_POST['char']) && $_POST['char'] != '' && isset($_POST['gremios']) && $_POST['gremios'] != '') {
$_GET['group'] = $_POST['gremios'];
if (preg_match("/[a-z]+/", $_POST['id'])) {
$query = $db->DoQuery("SELECT count(*) AS count FROM {$prefix}ability WHERE id='{$_POST['id']}'");
$result = $db->Do_Fetch_Assoc($query);
$personal = false;
if ($_POST['gremios'] == "_personal") {
$query_username = $db->DoQuery("SELECT count(*) AS count FROM {$prefix}users WHERE username='******'username']}'");
$result_username = $db->Do_Fetch_Assoc($query_username);
$personal = true;
}
if ($result['count'] == 0 && (!$personal || $result_username['count']) != 0) {
$gremios = $_POST['gremios'];
if ($_POST['gremios'] == $x7c->settings['usergroup_default']) {
$_POST['gremios'] = "";
$gremios = $x7c->settings['usergroup_default'];
}
$db->DoQuery("INSERT INTO {$prefix}ability \n\t\t\t\t\t\t\t\t(`id`, `name`, `dep`, `char`, `corp`) \n\t\t\t\t\t\t\t\tVALUES ('{$_POST['id']}', \n\t\t\t\t\t\t\t\t\t'{$_POST['name']}', \n\t\t\t\t\t\t\t\t\t'{$_POST['dep']}', \n\t\t\t\t\t\t\t\t\t'{$_POST['char']}',\n\t\t\t\t\t\t\t\t\t'{$_POST['gremios']}'\n\t\t\t\t\t\t\t\t\t)");
if (!$personal) {
$query = $db->DoQuery("SELECT DISTINCT username FROM {$prefix}groups WHERE usergroup='{$gremios}'");
while ($row = $db->Do_Fetch_Assoc($query)) {
$db->DoQuery("INSERT INTO {$prefix}userability (`ability_id`, `username`, `value`)\n\t\t\t\t\t\t\t\t\t\tVALUES ('{$_POST['id']}', '{$row['username']}', '0')");
}
} else {
$db->DoQuery("INSERT INTO {$prefix}userability (`ability_id`, `username`, `value`)\n\t\t\t\t\t\t\t\t\tVALUES ('{$_POST['id']}','{$_POST['username']}','0')");
}
$body .= "<h3 style=\"color: teal\">Abilità inserita correttamente</h3>";
} else {
if (!$personal) {
$body .= "<h3 style=\"color: red\">Errore: id già in uso</h3>";
} else {
$body .= "<h3 style=\"color: red\">Errore: utente non esistente</h3>";
}
}
} else {
$body .= "<h3 style=\"color: red\">Errore id non valido: deve contenere SOLO lettere minuscole</h3>";
}
} else {
$body .= "<h3 style=\"color: red\">Errore: parametri mancanti</h3>";
}
}
if (isset($_GET['delete'])) {
$query = "DELETE FROM {$prefix}ability WHERE id='{$_GET['delete']}'";
$db->DoQuery($query);
$query = "DELETE FROM {$prefix}ability WHERE dep='{$_GET['delete']}'";
$db->DoQuery($query);
$query = "DELETE FROM {$prefix}userability WHERE ability_id='{$_GET['delete']}'";
$db->DoQuery($query);
}
if (isset($_GET['del_feat'])) {
$db->DoQuery("DELETE FROM {$prefix}features WHERE id = '{$_GET['del_feat']}'");
$db->DoQuery("DELETE FROM {$prefix}user_feat WHERE feat_id = '{$_GET['del_feat']}'");
}
if (isset($_POST['new_feature_id'])) {
$first_lvl = isset($_POST['first_lvl']);
$cumulative = isset($_POST['cumulative']);
$query = $db->DoQuery("SELECT COUNT(*) AS cnt FROM {$prefix}features \n\t\t\t\t\tWHERE id = '{$_POST['new_feature_id']}'");
$row = $db->Do_Fetch_Assoc($query);
if ($row['cnt'] > 0) {
$db->DoQuery("UPDATE {$prefix}features SET \n\t\t\t\t\t\tdescr = '{$_POST['feature_desc']}',\n\t\t\t\t\t\tfirst_lvl = '{$first_lvl}',\n\t\t\t\t\t\tcumulative = '{$cumulative}'\n\t\t\t\t\t\tWHERE id = '{$_POST['new_feature_id']}'");
} else {
$db->DoQuery("INSERT INTO {$prefix}features \n\t\t\t\t\t\t(feat_id, descr, first_lvl, cumulative)\n\t\t\t\t\t\tVALUES ('{$_POST['new_feature_id']}', '{$_POST['feature_desc']}',\n\t\t\t\t\t\t\t'{$first_lvl}', '{$cumulative}')");
}
}
if (!isset($_GET['group'])) {
$_GET['group'] = $x7c->settings['usergroup_default'];
}
$body .= "<div style=\"text-align: center\">\n\t\t\t<form>Seleziona la gremios:\n\t\t\t<select onChange=\"location='index.php?act=adminpanel&cp_page=abilities&group='+this.options[this.selectedIndex].value\">\n";
$query = "SELECT usergroup FROM {$prefix}permissions WHERE gremios='1'\n\t\t\tORDER BY usergroup";
$result = $db->DoQuery($query);
$usergroup_list = array();
while ($row = $db->Do_Fetch_Assoc($result)) {
$usergroup_list[] = $row['usergroup'];
$selected = "";
if ($_GET['group'] == $row['usergroup']) {
$selected = "SELECTED";
}
$body .= "<option value=\"{$row['usergroup']}\" {$selected}>{$row['usergroup']}</option>\n";
}
$selected = "";
if ($_GET['group'] == "_personal") {
$selected = "SELECTED";
}
$body .= "<option value=\"_personal\" {$selected}>Ad personam</option>\n\t\t\t</select></form></div>";
$body .= '<script language="javascript" type="text/javascript">
function do_delete(id){
if(!confirm(\'Attenzione!!! Se cancelli una abilità tutti i PG la perderanno irreversibilmente.\\n Vuoi proseguire?\'))
return;
window.location.href=\'index.php?act=adminpanel&cp_page=abilities&group=' . $_GET['group'] . '&delete=\'+id;
}
function show_personal(value){
if(value=="_personal"){
document.getElementById("personal").style.visibility = "visible";
}
else{
document.getElementById("personal").style.visibility = "hidden";
}
}
function show_new_feat(value){
if(value!="_new"){
window.location.href=\'index.php?act=adminpanel&cp_page=abilities&mod_feat=\' + value;
}
else{
window.location.href=\'index.php?act=adminpanel&cp_page=abilities\';
}
}
</script>';
$corp = '';
if ($_GET['group'] != $x7c->settings['usergroup_default']) {
$corp = $_GET['group'];
}
$view_personal = $_GET['group'] == "_personal";
if (!$view_personal) {
$query = "SELECT * FROM {$prefix}ability WHERE corp='{$corp}'ORDER BY name";
} else {
$query = "SELECT * FROM {$prefix}ability ab,\n\t\t{$prefix}userability ua\n\t\tWHERE ab.id = ua.ability_id\n\t\t\tAND ab.corp = '{$corp}'\n\n\t\t\tORDER BY name";
}
$result = $db->DoQuery($query);
$personal_col = "";
if ($view_personal) {
$personal_col = "<td class=\"col_header\">Utente</td>";
}
$body .= "<table class=\"inner_table\" width=100%>\n\t\t\t<tr>\t<td class=\"col_header\">ID</td>\n\t\t\t<td class=\"col_header\">Nome</td>\n\t\t\t<td class=\"col_header\">Ab. primaria</td>\n\t\t\t<td class=\"col_header\">Car. associata</td>\n\t\t\t{$personal_col}\n\t\t\t<td></td></tr>";
while ($row = $db->Do_Fetch_Assoc($result)) {
$personal_col = "";
if ($view_personal) {
$personal_col = "<td class=\"dark_row\">{$row['username']}</td>";
}
$body .= "<tr>\n\t\t\t\t<td class=\"dark_row\">{$row['id']}</td>\n\t\t\t\t<td class=\"dark_row\">{$row['name']}</td>\n\t\t\t\t<td class=\"dark_row\">{$row['dep']}</td>\n\t\t\t\t<td class=\"dark_row\">{$row['char']}</td>\n\t\t\t\t{$personal_col}";
// It is too dangerous allowing deletion of default abilities
if ($_GET['group'] != $x7c->settings['usergroup_default']) {
$body .= "<td class=\"dark_row\">\n\t\t\t\t\t<a href=\"#\" onClick=\"javascript: do_delete('{$row['id']}');\">[Elimina]</a></td>";
}
$body .= "</tr>";
}
$body .= "</table>";
$body .= "<h3>Inserisci una nuova abilità</h3>\n\t\t\t<form action=\"index.php?act=adminpanel&cp_page=abilities\" method=\"post\">";
$body .= "<table>\n\t\t\t<tr>\n\t\t\t<td>ID (deve essere univoco <br>e di sole lettere)</td>\n\t\t\t<td><input type=\"text\" name=\"id\"></td>\n\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t<td>Nome abilita</td>\n\t\t\t<td><input type=\"text\" name=\"name\"></td>\n\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t<td>Caratteristica associata</td>\n\t\t\t<td><select name=\"char\">";
foreach ($char_list as $i => $name) {
$body .= "<option value=\"{$i}\">{$name}</option>\n";
}
$body .= "</select></td>\n\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t<td>Abilità primaria</td>\n\t\t\t<td><select name=\"dep\">\n\t\t\t<option value=\"\">Nessuna</option>";
foreach ($ability_list as $i => $name) {
$body .= "<option value=\"{$i}\">{$name}</option>\n";
}
$body .= "</select></td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t<td>Gremios</td>\n\t\t\t<td><select name=\"gremios\" onChange=\"show_personal(this.value)\">";
foreach ($usergroup_list as $i) {
$selected = "";
if ($_GET['group'] == $i) {
$selected = "SELECTED";
}
$body .= "<option value=\"{$i}\" {$selected}>{$i}</option>\n";
}
$selected = "";
$visibility = "hidden";
if ($_GET['group'] == "_personal") {
$selected = "SELECTED";
$visibility = "visible";
}
$body .= "<option value=\"_personal\" {$selected}>Ad personam</option>\n\t\t\t</select></td>\n\t\t\t</tr>\n\t\t\t<tr id=\"personal\" style=\"visibility: {$visibility};\">\n\t\t\t<td>Utente:</td>\n\t\t\t<td><input type=\"text\" name=\"username\"></td>\n\t\t\t</tr>\n\t\t\t<tr><td><input type=\"submit\" value=\"Inserisci\"></td></tr>";
$body .= "</table></form>";
$body .= "<h3>Inserisci modifica un talento</h3>\n\t\t\t<form action=\"index.php?act=adminpanel&cp_page=abilities\" method=\"post\">";
$body .= "<table>\n\t\t\t<tr>\n\t\t\t<td><select name=\"feature_id\" onChange=\"show_new_feat(this.value)\">\n\t\t <option value=\"_new\">Nuovo talento...</option>";
$query = $db->DoQuery("SELECT id,feat_id FROM {$prefix}features ORDER BY feat_id");
while ($row = $db->Do_Fetch_Assoc($query)) {
$selected = "";
if (isset($_GET['mod_feat']) && $_GET['mod_feat'] == $row['id']) {
$selected = "selected=\"selected\"";
}
$body .= "<option value=\"{$row['id']}\" {$selected}>{$row['feat_id']}</option>";
}
$new_feat_show = 'visible';
$desc = "";
$delete_act = "";
$first_lvl = "";
$cumulative = "";
if (isset($_GET['mod_feat'])) {
$new_feat_show = 'hidden';
$query_select = $db->DoQuery("SELECT descr, first_lvl, cumulative\n\t\t\t\t\tFROM {$prefix}features\n\t\t\t\t\tWHERE id = '{$_GET['mod_feat']}'");
$row_select = $db->Do_Fetch_Assoc($query_select);
$desc = $row_select['descr'];
if ($row_select['first_lvl']) {
$first_lvl = "checked";
}
if ($row_select['cumulative']) {
$cumulative = "checked";
}
$delete_act = "window.location.href='index.php?act=adminpanel&cp_page=abilities&del_feat=" . $_GET['mod_feat'] . "'";
} else {
$_GET['mod_feat'] = "";
}
$body .= "</select>\n </td>\n\t\t\t</tr>\n\n\t\t\t<tr><td>\n\t\t\t<input type=\"text\" name=\"new_feature_id\"\n\t\t\tstyle=\"visibility: {$new_feat_show}\" value=\"" . $_GET['mod_feat'] . "\"></td>\n\t\t\t</tr>\n\t\t\t<tr>\n\t\t\t<td>Descrizione:</td>\n\t\t\t<td><textarea name=\"feature_desc\" style=\"height: 200\">{$desc}</textarea></td>\n\t\t\t</tr>\n\t\t\t<tr><td>Primo livello:</td>\n\t\t\t<td><input type=\"checkbox\" name=\"first_lvl\" {$first_lvl}></td></tr>\n\t\t\t<tr><td>Cumulativo:</td>\n\t\t\t<td><input type=\"checkbox\" name=\"cumulative\" {$cumulative}></td></tr>\n\t\t\t<tr><td><input type=\"submit\" value=\"Inserisci/Modifica\"></td></tr>";
if ($delete_act) {
$body .= "<tr><td><input type=\"button\" value=\"Cancella\"\n\t\t\t\tonClick=\"{$delete_act}\"></td></tr>";
}
$body .= "</table></form>";
} elseif ($_GET['cp_page'] == "hints") {
$head = "Gestione hints del master";
$body = "";
$limit = 0;
if (isset($_GET['startfrom'])) {
$limit = $_GET['startfrom'];
}
if (isset($_GET['edit'])) {
if (isset($_POST['text'])) {
$query = $db->DoQuery("SELECT * FROM {$prefix}hints WHERE id='{$_GET['edit']}'");
$row = $db->Do_Fetch_Assoc($query);
$_POST['text'] = preg_replace("/\n/", "<br>", $_POST['text']);
$url_regexp = "/http(s)?:\\/\\/[^[:space:]]+/i";
$_POST['text'] = preg_replace($url_regexp, '<a href="\\0" target="_blank">\\0</a>', $_POST['text']);
if ($row) {
$db->DoQuery("UPDATE {$prefix}hints SET text='{$_POST['text']}',\n\t\t\t\t\t\t\ttype = '{$_POST['type']}'\n\t\t\t\t\t\t\tWHERE id='{$row['id']}'");
} else {
$db->DoQuery("INSERT INTO {$prefix}hints \n\t\t\t\t\t\t\t(text, type) VALUES ('{$_POST['text']}',\n\t\t\t\t\t\t\t\t'{$_POST['type']}')");
}
header("location: index.php?act=adminpanel&cp_page=hints&startfrom={$limit}");
}
$hint = "";
$query = $db->DoQuery("SELECT * FROM {$prefix}hints \n\t\t\t\t\tWHERE id={$_GET['edit']}");
$row = $db->Do_Fetch_Assoc($query);
if ($row) {
$hint = $row['text'];
}
$hint = preg_replace("/<br>/", "\n", $hint);
$url_regexp = "/<a[^>]*>|<\\/a>/i";
$hint = preg_replace($url_regexp, "", $hint);
$body .= '<form action="index.php?act=adminpanel&cp_page=hints&edit=' . $_GET['edit'] . '&startfrom=' . $limit . '" method="post">';
$body .= "<textarea name=\"text\" class=\"text_input\" \n\t\t\t\tcols=\"80\" rows=\"20\">{$hint}</textarea><br>";
$selected_aya = '';
$selected_player = '';
if ($row['type'] == 'aya') {
$selected_aya = 'selected';
}
if ($row['type'] == 'player') {
$selected_player = 'selected';
}
$body .= '<input type="submit" value="Invia" class="button">
<select name="type">
<option value="aya" ' . $selected_aya . '>Aya</option>
<option value="player" ' . $selected_player . '>Player</option>
</input>
</form>';
} else {
if (isset($_GET['delete'])) {
$db->DoQuery("DELETE FROM {$prefix}hints WHERE id='{$_GET['delete']}'");
header("location: index.php?act=adminpanel&cp_page=hints&startfrom={$limit}");
} else {
$maxmsg = 10;
$navigator = '';
$query = $db->DoQuery("SELECT count(*) AS total FROM {$prefix}hints");
$row = $db->Do_Fetch_Assoc($query);
$total = $row['total'];
if ($total > $maxmsg) {
$i = 0;
while ($total > 0) {
$navigator .= "<a href=\"index.php?act=adminpanel&cp_page=hints" . "&startfrom={$i}\">";
if (isset($_GET['startfrom']) && $_GET['startfrom'] == $i || !isset($_GET['startfrom']) && $i == 0) {
$navigator .= "<b>[" . ($i + 1) . "]</b>";
} else {
$navigator .= $i + 1;
}
$navigator .= "</a> ";
$i++;
$total -= $maxmsg;
}
}
$navigator .= "<br>";
$limit_min = $limit * $maxmsg;
$limit_max = $maxmsg;
$query = $db->DoQuery("SELECT *\tFROM {$prefix}hints\n\t\t\t\t\tORDER BY id LIMIT {$limit_min}, {$maxmsg}");
$body .= '<p style="text-align: center;"><a href="index.php?act=adminpanel&cp_page=hints&edit=-1">
Aggiungi nuovo</a><br>';
$body .= $navigator . "</p>";
$body .= '<table width="95%" align="center" border="0" cellspacing="0"' . ' cellpadding="0" class="col_header">
<tr>
<td width="5%">Id</td><td>Hint</td><td width="20%">Tipo</td><td width="20%">Azioni</td>
</tr>
</table>';
$body .= '<table width="95%" align="center" border="0" cellspacing="0"' . ' cellpadding="0" class="inside_table">';
while ($row = $db->Do_Fetch_Assoc($query)) {
$body .= "<tr>\n\t\t\t\t\t<td width=\"5%\">{$row['id']}</td>\n\t\t\t\t\t<td>{$row['text']}</td>\n\t\t\t\t\t<td width=\"20%\">\n\t\t\t\t\t{$row['type']}\n\t\t\t\t\t</td>\n\t\t\t\t\t<td width=\"20%\">\n\t\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=hints&edit={$row['id']}&startfrom={$limit}\">\n\t\t\t\t\t[Edit]\n\t\t\t\t\t</a>\n\t\t\t\t\t<a href=\"index.php?act=adminpanel&cp_page=hints&delete={$row['id']}&startfrom={$limit}\">\n\t\t\t\t\t[Delete]\n\t\t\t\t\t</a>\n\t\t\t\t\t</td>\n\t\t\t\t\t<tr><td colspan=\"3\"><hr></td></tr>\n\t\t\t\t\t</tr>";
}
$body .= '</table>';
$body .= "<p style=\"text-align: center;\">" . $navigator;
$body .= '<a href="index.php?act=adminpanel&cp_page=hints&edit=-1">
Aggiungi nuovo</a></p>';
}
}
} elseif ($_GET['cp_page'] == "ad") {
// A permission denied error occured, Don't show admin menu, only the error
$head = $txt[14];
$cbody = $txt[216];
$perm_error = 1;
} elseif ($_GET['cp_page'] == "ad2") {
// A permission denied error occured, but this user is an admin so show them the menu anyway
$head = $txt[14];
$body = $txt[216];
}
if (@$perm_error != 1) {
// THis mini-function helps by checking permissions and printing links
function printlink($id, $txt)
{
global $x7c;
// See if they have access to this section
$check_page = $id;
if ($check_page == "groupmanager") {
$check_page = "groups";
}
if ($x7c->permissions["admin_{$check_page}"] == 0) {
return "";
} else {
if ($_GET['cp_page'] == $id) {
return "<tr>\n\t\t\t\t\t\t<td class=\"ucp_sell\">{$txt}</td>\n\t\t\t\t\t\t</tr>";
} else {
return "<tr>\n\t\t\t\t\t\t<td class=\"ucp_cell\" onMouseOver=\"javascript: this.className='ucp_sell'\" onMouseOut=\"javascript: this.className='ucp_cell'\" onClick=\"javascript: window.location='./index.php?act=adminpanel&cp_page={$id}'\">{$txt}</td>\n\t\t\t\t\t\t</tr>";
}
}
}
// Add the menu to the body
$cbody = "<div align=\"center\">\n\t\t\t<table border=\"0\" width=\"95%\" class=\"ucp_table\" cellspacing=\"0\" cellpadding=\"0\">\n\t\t\t<tr valign=\"top\">\n\t\t\t<td width=\"20%\" height=\"100%\">\n\t\t\t<table width=\"100%\" class=\"ucp_table2\" height=\"100%\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\">\n\t\t\t" . printlink("main", $txt[137]) . "\n\t\t\t" . printlink("settings", "Settaggi server") . "\n\t\t\t" . printlink("abilities", "Abilità/Talenti") . "\n\t\t\t" . printlink("groupmanager", "Gruppi/Gremios") . "\n\t\t\t" . printlink("users", "Utenti") . "\n\t\t\t" . printlink("ban", "Ban") . "\n\t\t\t" . printlink("rooms", "Stanze") . "\n\t\t\t" . printlink("logs", "Registrazioni stanze") . "\n\t\t\t" . printlink("mail", $txt[316]) . "\n\t\t\t" . printlink("panic", "Oscurità, multi-kill") . "\n\t\t\t" . printlink("alarms", "Allarmi") . "\n\t\t\t" . printlink("objects", "Oggetti") . "\n\t\t\t" . printlink("money", "Soldi") . "\n\t\t\t" . printlink("hints", "Hint del master") . "\n\t\t\t<tr valign=\"top\">\n\t\t\t<td class=\"ucp_cell\" style=\"cursor: default;\" height=\"100%\"><Br><a href=\"#\" onClick=\"javascript: window.close();\">[{$txt['133']}]</a><Br><Br></td>\n\t\t\t</tr>\n\t\t\t</table>\n\t\t\t</td>\n\t\t\t<Td width=\"5\" class=\"ucp_divider\"> </td>\n\t\t\t<td class=\"ucp_bodycell\">{$body}</td>\n\t\t\t</tr>\n\t\t\t</table>\n\t\t\t</div>";
}
$print->normal_window($head, $print->ss_ucp . $cbody);
}
function object_moves($owner, $old, $obj)
{
global $x7s, $x7c, $prefix, $db;
$msg = "<b>SPOSTA OGGETTO</b>: l\\'utente <b>{$x7s->username} </b> assegna l\\'oggetto <b>{$obj}</b> dall\\'utente <b>{$old}</b> all\\'utente <b>{$owner}</b><br>";
$time = time();
$db->DoQuery("INSERT INTO {$prefix}logs (user, msg, time) VALUES ('{$x7s->username}','{$msg}','{$time}')");
include_once "./lib/message.php";
send_offline_msg($owner, "Hai ricevuto un oggetto", "Hai ricevuto l\\'oggetto: {$obj}");
}
function toggle_death($pg, $kill, $resurgo = true)
{
global $db, $prefix, $x7c;
$errore = '';
if ($kill) {
if ($resurgo) {
//Morto per 5 giorni
$death_day = $x7c->settings['death_days'];
$resurgo = time() + $death_day * 24 * 3600;
$db->DoQuery("UPDATE {$prefix}users SET talk='0', info='Morto', autoheal='0', resurgo='{$resurgo}' WHERE username='******'");
} else {
$db->DoQuery("UPDATE {$prefix}users SET talk='0', info='-11', autoheal='0' WHERE username='******'");
}
$query = $db->DoQuery("SELECT count(*) AS cnt FROM {$prefix}userability WHERE username='******' AND value>'0'");
$row = $db->Do_Fetch_Assoc($query);
$cnt = $row['cnt'];
if ($cnt > 0) {
$query = $db->DoQuery("SELECT * FROM {$prefix}userability u, {$prefix}ability a WHERE u.ability_id=a.id AND username='******' AND value>'0' ORDER BY ability_id");
srand(time() + microtime());
$roll = floor(rand(1, $cnt));
$i = 0;
$row = 0;
while ($i < $roll) {
$row = $db->Do_Fetch_Assoc($query);
$i++;
}
$new_value = $row['value'] - 1;
$db->DoQuery("UPDATE {$prefix}userability SET value='{$new_value}' WHERE ability_id='{$row['ability_id']}' AND username='******'");
$db->DoQuery("UPDATE {$prefix}users SET lvl=lvl-{$row['value']} WHERE username='******'");
include_once "./lib/message.php";
send_offline_msg($pg, "Morte", "Sei morto e hai perso un punto in {$row['name']}");
$errore = "Ucciso e perso un punto in {$row['name']}";
} else {
$errore = "Ucciso, ma non aveva punti abilita' residui";
}
} else {
$errore = "Resuscitato";
$db->DoQuery("UPDATE {$prefix}users u SET resurgo='0', autoheal='1', talk='1', info=(SELECT 2*value FROM {$prefix}usercharact uc WHERE uc.username='******' AND charact_id='rob') WHERE username='******'");
$query = $db->DoQuery("SELECT base_group FROM {$prefix}users \n\t\t\t\t\tWHERE username='******'");
$row_user = $db->Do_Fetch_Assoc($query);
if (!$row_user) {
die("User not in database: should not happen");
}
include_once "./lib/message.php";
if ($row_user['base_group'] == $x7c->settings['usergroup_default']) {
send_offline_msg($pg, "Resurrezione", $x7c->settings['citizen_death_mail']);
} else {
send_offline_msg($pg, "Resurrezione", $x7c->settings['uncitizen_death_mail']);
}
}
return $errore;
}