function return_error($heading = 'Error!', $string)
{
global $language, $STYLEPATH, $page, $STYLEURL;
$THIS_BASEPATH = "..";
require "{$THIS_BASEPATH}/btemplate/bTemplate.php";
// just in case not found the language
if (!$language['BACK']) {
$language['BACK'] = 'Back';
}
$err_tpl = new bTemplate();
$err_tpl->set('error_title', $heading);
$err_tpl->set('error_message', $string);
$err_tpl->set('error_image', $STYLEURL . '/images/error.gif');
$err_tpl->set('language', $language);
$err_tpl->set('error_footer', '<a href="javascript: history.go(-1);">' . $language['BACK'] . '</a>');
return $err_tpl->fetch(load_template('error.tpl'));
}
} else {
if ($sr >= 0.25) {
$s = "images/smilies/sad.gif";
} else {
$s = "images/smilies/thumbsdown.gif";
}
}
}
}
}
$ratio = number_format($sr, 2) . " <img src=\"{$s}\" alt=\"\" />";
} else {
$ratio = '∞';
}
$utorrents = intval($CURUSER["torrentsperpage"]);
$userdetailtpl = new bTemplate();
$userdetailtpl->set("language", $language);
$userdetailtpl->set("userdetail_username", unesc($row["username"]));
// just current username viewing the page - start
$userdetailtpl->set("current_username", unesc($CURUSER["username"]));
// just current username viewing the page - end
//$userdetailtpl-> set("userdetail_no_guest", $CURUSER["uid"]>1, TRUE);
if ($CURUSER["uid"] > 1 && $id != $CURUSER["uid"]) {
$userdetailtpl->set("userdetail_send_pm", " <a href=\"index.php?page=usercp&do=pm&action=edit&uid=" . $CURUSER["uid"] . "&what=new&to=" . urlencode(unesc($row["username"])) . "\">" . image_or_link("{$STYLEPATH}/images/pm.png", "", $language["PM"]) . "</a>");
}
if ($CURUSER["edit_users"] == "yes" && $id != $CURUSER["uid"]) {
$userdetailtpl->set("userdetail_edit", "  <a href=\"index.php?page=admin&user="******"uid"] . "&code=" . $CURUSER["random"] . "&do=users&action=edit&uid={$id}&returnto=index.php?page=userdetails&id={$id}\">" . image_or_link("{$STYLEPATH}/images/edit.png", "", $language["EDIT"]) . "</a>");
}
if ($CURUSER["delete_users"] == "yes" && $id != $CURUSER["uid"]) {
$userdetailtpl->set("userdetail_delete", "  <a onclick=\"return confirm('" . AddSlashes($language["DELETE_CONFIRM"]) . "')\" href=index.php?page=admin&user="******"uid"] . "&code=" . $CURUSER["random"] . "&do=users&action=delete&uid={$id}&smf_fid=" . $row["smf_fid"] . "&returnto=" . urlencode("index.php?page=users") . ">" . image_or_link("{$STYLEPATH}/images/delete.png", "", $language["DELETE"]) . "</a>");
}
$res = get_result("SELECT size FROM {$TABLE_PREFIX}files WHERE info_hash='{$id}'", true);
if ($res) {
$row = $res[0];
if ($row) {
$tsize = 0 + $row["size"];
}
} else {
die("Error ID");
}
if ($XBTT_USE) {
$res = get_result("SELECT x.uid,x.completed, x.downloaded, x.uploaded, x.left as bytes, IF(x.left=0,'seeder','leecher') as status, x.mtime as lastupdate, u.username, u.flag, c.flagpic, c.name FROM xbt_files_users x LEFT JOIN xbt_files ON x.fid=xbt_files.fid LEFT JOIN {$TABLE_PREFIX}files f ON f.bin_hash=xbt_files.info_hash LEFT JOIN {$TABLE_PREFIX}users u ON u.id=x.uid LEFT JOIN {$TABLE_PREFIX}countries c ON u.flag=c.id WHERE f.info_hash='{$id}' AND active=1 ORDER BY status DESC, lastupdate DESC", true, $btit_settings['cache_duration']);
} else {
$res = get_result("SELECT * FROM {$TABLE_PREFIX}peers p LEFT JOIN {$TABLE_PREFIX}countries c ON p.dns=c.domain WHERE infohash='{$id}' ORDER BY bytes ASC, status DESC, lastupdate DESC", true, $btit_settings['cache_duration']);
}
require load_language("lang_peers.php");
$peerstpl = new bTemplate();
$peerstpl->set("language", $language);
$peerstpl->set("peers_script", "index.php");
if (count($res) == 0) {
$peerstpl->set("NOPEERS", TRUE, TRUE);
} else {
$peerstpl->set("NOPEERS", FALSE, TRUE);
foreach ($res as $id => $row) {
// for user name instead of peer
if ($XBTT_USE) {
$resu = TRUE;
} elseif ($PRIVATE_ANNOUNCE) {
$resu = get_result("SELECT u.username,u.id,c.flagpic,c.name FROM {$TABLE_PREFIX}users u LEFT JOIN {$TABLE_PREFIX}countries c ON c.id=u.flag WHERE u.pid='" . $row["pid"] . "' LIMIT 1", true, $btit_settings['cache_duration']);
} else {
$resu = get_result("SELECT u.username,u.id,c.flagpic,c.name FROM {$TABLE_PREFIX}users u LEFT JOIN {$TABLE_PREFIX}countries c ON c.id=u.flag WHERE u.cip='" . $row["ip"] . "' LIMIT 1", true, $btit_settings['cache_duration']);
}
//
////////////////////////////////////////////////////////////////////////////////////
if (!defined("IN_BTIT")) {
die("non direct access!");
}
// load language file
require load_language("lang_lottery.php");
function get_value($what, $table, $area, $id)
{
global $TABLE_PREFIX;
$query = do_sqlquery("SELECT {$what} FROM {$TABLE_PREFIX}{$table} WHERE {$area}={$id}", true);
$object_to_array = mysql_fetch_array($query) or sql_err(__FILE__, __LINE__);
return $object_to_array[$what];
}
$query = do_sqlquery("SELECT * FROM `{$TABLE_PREFIX}lottery_winners`", true);
$ticketstpl = new bTemplate();
$ticketstpl->set("language", $language);
if (mysql_num_rows($query) == 0) {
$ticketstpl->set("are_winners", false, true);
} else {
$ticketstpl->set("are_winners", true, true);
$won = array();
$x = 0;
while ($users = mysql_fetch_assoc($query)) {
$won[$x]["winner"] = $users["win_user"];
$won[$x]["date"] = $users["windate"];
$won[$x]["price"] = makesize($users["price"]);
$x++;
$ticketstpl->set("winner", $won);
}
}
// MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
// IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
// SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
// TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
// PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
// LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
// NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
// EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
//
////////////////////////////////////////////////////////////////////////////////////
if (!defined("IN_BTIT")) {
die("non direct access!");
}
global $TABLE_PREFIX, $CURUSER;
require load_language("lang_shoutcast.php");
$djtpl = new bTemplate();
$djtpl->set("language", $language);
$pages = explode(",", $language['pages']);
if (!in_array($_GET['do'], $pages)) {
stderr($language['ERROR'], $language['strange']);
}
if ($_GET['do'] == 'manage') {
$query = do_sqlquery('SELECT activedays, activetime, genre FROM ' . $TABLE_PREFIX . 'shoutcastdj WHERE active = \'1\' AND uid = \'' . $CURUSER['uid'] . '\'', true);
if (mysqli_num_rows($query) == 0) {
stderr($language['ERROR'], $language['hey']);
}
if (strtoupper($_SERVER['REQUEST_METHOD']) == 'POST') {
$availabledays = array(1 => 'Mon', 2 => 'Tue', 3 => 'Wed', 4 => 'Thu', 5 => 'Fri', 6 => 'Sat', 7 => 'Sun');
$activedays = $_POST['activedays'];
$activetime = trim($_POST['activetime']);
$genre = trim($_POST['genre']);
// IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
// SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
// TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
// PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
// LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
// NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
// EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
//
////////////////////////////////////////////////////////////////////////////////////
if (!defined("IN_BTIT")) {
die("non direct access!");
}
require_once "include/functions.php";
require_once "include/config.php";
dbconn();
$expectedtpl = new bTemplate();
$expectedtpl->set("language", $language);
$expectedtpl->set("ex2", "<br>\n");
$where = "WHERE userid = " . $CURUSER["uid"] . "";
$res2 = mysqli_query($GLOBALS["___mysqli_ston"], "SELECT * FROM {$TABLE_PREFIX}expected {$where}") or sqlerr();
$num2 = mysqli_num_rows($res2);
$expectedtpl->set("ex4", "<table border=0 width=100% cellspacing=0 cellpadding=3>");
$expectedtpl->set("ex6", "<tr><td class=colhead align=center><center>" . $language["SEARCH"] . " " . $language["TORRENT"] . "</center></td></tr>");
$expectedtpl->set("ex8", "<tr><td align=center><form method=get action=index.php><input type=hidden name=page value=torrents />");
$expectedtpl->set("ex10", "<input type=text name=search size=40 value={$searchstr} >");
$expectedtpl->set("ex12", "in");
$expectedtpl->set("ex14", "<select name=category>");
$expectedtpl->set("ex16", "<option value=0>" . $language["ALL"] . "</option>");
$cats = genrelist();
$catdropdown = "";
foreach ($cats as $cat) {
// SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
// TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
// PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
// LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
// NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
// EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
//
////////////////////////////////////////////////////////////////////////////////////
//by CobraCRK 21.07.2006 - www.extremeshare.org - cobracrk@yahoo.com
//converted to xbtit by cooly
if (!defined("IN_BTIT")) {
die("non direct access!");
}
global $CURUSER;
require "include/sanitize.php";
$subsedittpl = new bTemplate();
require load_language("lang_subs.php");
if ($CURUSER["can_upload"] == "no") {
err_msg(ERROR, NOT_AUTH_VIEW_NEWS);
stdfoot();
exit;
}
$action = $_GET["action"];
if ($action == "edit") {
$id = $_GET["id"];
$res = mysqli_query($GLOBALS["___mysqli_ston"], "SELECT * FROM {$TABLE_PREFIX}subtitles WHERE id=" . $_GET['id']) or sqlerr();
if (mysqli_num_rows($res) != 1) {
stderr("Error", "No message with ID {$id}.");
}
$arr = mysqli_fetch_assoc($res);
if ($CURUSER["uid"] != $arr["uploader"] or $CURUSER["edit_torrents"] != "yes") {
$status = 1;
}
// Announce new Uploaded torrents in ShoutBoX start
global $BASEURL;
do_sqlquery("INSERT INTO {$TABLE_PREFIX}chat (uid, time, name, text) VALUES (0," . time() . ", 'System','[color=red]NEW TORRENT[/color]: [url={$BASEURL}/index.php?page=torrent-details&id={$hash}]" . $filename . "[/url]')");
// Announce new Uploaded torrents in ShoutBoX ends
} else {
err_msg($language["ERROR"], $language["ERR_ALREADY_EXIST"]);
unlink($_FILES["torrent"]["tmp_name"]);
stdfoot();
die;
}
} else {
$status = 0;
}
$uploadtpl = new bTemplate();
/*
Mod by losmi -sticky torrent
*/
$query = "SELECT * FROM {$TABLE_PREFIX}sticky";
$rez = do_sqlquery($query, true);
$rez = mysql_fetch_assoc($rez);
$rez_level = $rez['level'];
$current_level = getLevel($CURUSER['id_level']);
$level_ok = false;
if ($CURUSER["uid"] > 1 && $current_level >= $rez_level && $CURUSER['can_upload'] == 'yes') {
$uploadtpl->set("LEVEL_OK", true, FALSE);
} else {
$uploadtpl->set("LEVEL_OK", false, TRUE);
}
unset($rez);
}
}
#
############################ #
$scriptname = htmlspecialchars($_SERVER["PHP_SELF"] . "?page=users");
$res = get_result("select COUNT(*) as tu FROM {$TABLE_PREFIX}users u INNER JOIN {$TABLE_PREFIX}users_level ul ON u.id_level=ul.id WHERE u.id>1 {$where}", true, $btit_settings['cache_duration']);
$count = $res[0]['tu'];
list($pagertop, $pagerbottom, $limit) = pager(20, $count, $scriptname . "&" . $addparams . (strlen($addparam) > 0 ? "&" : "") . "order={$order_param}&by={$by_param}&");
if ($by == "ASC") {
$mark = " ↑";
} else {
$mark = " ↓";
}
// load language file
require load_language("lang_users.php");
$userstpl = new bTemplate();
$userstpl->set("language", $language);
$userstpl->set("users_search", $search);
if ($btit_settings["slon"] == true && $CURUSER["delete_users"] == "yes") {
$userstpl->set("shli", "Shitlist");
} else {
$userstpl->set("shli", "");
}
# Search by ip, email, pid # 2 # last
#'
$userstpl->set("smail", $searchmail);
$userstpl->set("sip", $searchip);
$userstpl->set("pid", $getpid);
#
################################# End
$userstpl->set("users_search_level", $level == 0 ? " selected=\"selected\" " : "");
// 3. The name of the author may not be used to endorse or promote products
// derived from this software without specific prior written permission.
//
// THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR IMPLIED
// WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
// MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
// IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
// SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
// TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
// PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
// LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
// NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
// EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
//
////////////////////////////////////////////////////////////////////////////////////
require_once "include/functions.php";
require_once "include/config.php";
dbconn(true);
global $SITENAME, $btit_settings;
$agreetpl = new bTemplate();
$agreetpl->set("language", $language);
$agreetpl->set("ua1", "<table width=95% cellspacing=0 cellpadding=5 border=0 align=center>");
$agreetpl->set("ua2", "<tr>");
$agreetpl->set("ua3", "<td valign=top width=63%>");
$agreetpl->set("ua4", $btit_settings["oa_one_text"]);
$agreetpl->set("ua5", $btit_settings["oa_two_text"]);
$agreetpl->set("ua8", $btit_settings["oa_three_text"]);
$agreetpl->set("ua9", $btit_settings["oa_four_text"]);
$date = date("j.M.Y H:i l");
$agreetpl->set("ua6", $date);
$agreetpl->set("ua7", $SITENAME);
} else {
$seedbox[$i]["sw27"] = "<td align=\"center\" class=\"lista\" style=\"text-align: center;\">---</td>";
}
}
} else {
// linkcolor
$seedbox[$i]["sw28"] = "<td align=\"center\" class=\"" . linkcolor($data["seeds"]) . "\" style=\"text-align: center;\">" . $data["seeds"] . "</td>";
$seedbox[$i]["sw29"] = "<td align=\"center\" class=\"" . linkcolor($data["leechers"]) . "\" style=\"text-align: center;\">" . $data["leechers"] . "</td>";
if ($data["finished"] > 0) {
$seedbox[$i]["sw30"] = "<td align=\"center\" class=\"lista\" style=\"text-align: center;\">" . $data["finished"] . "</td>";
} else {
$seedbox[$i]["sw30"] = "<td align=\"center\" class=\"lista\" style=\"text-align: center;\">---</td>";
}
}
$seedbox[$i]["sw34"] = "</tr>\n";
}
}
$i++;
$seedboxtpl->set("seedbox", $seedbox);
}
} else {
$seedboxtpl->set("sw35", "<tr><td class=\"lista\" colspan=\"9\" align=\"center\" style=\"text-align: center;\">" . $language["NO_TORRENTS"] . "</td></tr>");
}
$seedboxtpl->set("sw36", "</table>");
} else {
$seedboxtpl = new bTemplate();
$seedboxtpl->set("language", $language);
$seedboxtpl->set("sw37", "<table class=\"lista\" cellpadding=\"0\" cellspacing=\"0\" width=\"100%\" align=\"center\"><tr><td><div align=\"center\" style=\"text-align: center;\">" . $language["NO_TORRENTS"] . "</div></td></tr></table>");
}
}
// end if user can view
exit;
}
global $language, $newstpl;
$newstpl = new bTemplate();
$newstpl->set("language", $language);
$newstpl->set("ADD_EDIT", true, true);
$tplnews = array();
$tplnews["action"] = "index.php?page=news&act=confirm";
$tplnews["hidden_action"] = $action;
$tplnews["hidden_id"] = $_GET["id"];
$tplnews["news_title"] = $title;
$tplnews["bbcode"] = textbbcode("news", "news", $news);
$newstpl->set("news", $tplnews);
} elseif ($action == "add") {
global $news, $title, $CURUSER, $language, $newstpl;
$newstpl = new bTemplate();
$newstpl->set("language", $language);
$newstpl->set("ADD_EDIT", true, true);
$tplnews = array();
$tplnews["action"] = "index.php?page=news&act=confirm";
$tplnews["hidden_action"] = $action;
$tplnews["hidden_id"] = $_GET["id"];
$tplnews["news_title"] = $title;
$tplnews["bbcode"] = textbbcode("news", "news", $news);
$newstpl->set("news", $tplnews);
} elseif ($action == "confirm") {
if (!isset($_POST["conferma"])) {
} elseif ($_POST["conferma"] == $language["FRM_CONFIRM"]) {
if (isset($_POST["news"]) && isset($_POST["title"])) {
$news = $_POST["news"];
$uid = $CURUSER["uid"];
}
$last = "<tr><td colspan=\"2\" class=\"header\" align=\"center\">You have <span style=\"color:#FF6666\">" . $logins_left . "</span> remaining login attempt" . $ss . ".</td></tr>";
$logintpl->set("last", $last);
}
//Invalid Login System Hack stop
$login["create"] = "index.php?page=signup";
$login["recover"] = "index.php?page=recover";
$logintpl->set("login", $login);
if ($btit_settings["site_offline"]) {
$logintpl->set("SITE_OFFLINE", true, true);
$logintpl->set("offline_msg", $btit_settings["offline_msg"]);
} else {
$logintpl->set("SITE_OFFLINE", false, true);
}
}
$logintpl = new bTemplate();
if ($btit_settings["fbon"] == true) {
$logintpl->set("FB", true, true);
} else {
$logintpl->set("FB", false, true);
}
if (!$CURUSER || $CURUSER["uid"] == 1) {
if (isset($_POST["uid"]) && $_POST["uid"]) {
$user = $_POST["uid"];
} else {
$user = "";
}
if (isset($_POST["pwd"]) && $_POST["pwd"]) {
$pwd = $_POST["pwd"];
} else {
$pwd = "";
// TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
// PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
// LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
// NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
// EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
//
//
////////////////////////////////////////////////////////////////////////////////////
if (!defined("IN_BTIT")) {
die("non direct access!");
}
if (!defined("IN_ACP")) {
die("non direct access!");
}
global $THIS_BASEPATH, $language, $THE_BASEPATH;
$admintpl = new bTemplate();
$admintpl->set("frm_action", "index.php?page=admin&user="******"uid"] . "&code=" . $CURUSER["random"] . "&do=featured&action=save&mode=new");
/* Admin tool for the Featured Torrent*/
// include language file
include load_language("lang_featured.php");
switch ($action) {
case 'save':
if ($_POST["id"]) {
$tor_id = $_POST["id"];
do_sqlquery("INSERT INTO {$TABLE_PREFIX}featured (fid,torrent_id) VALUES ('','{$_POST['id']}')");
}
case 'read':
default:
if ($btit_settings["imdbbl"] == true) {
$query = mysqli_query($GLOBALS["___mysqli_ston"], "SELECT info_hash, filename from {$TABLE_PREFIX}files where imdb!='' ORDER BY data DESC limit 15");
} else {
$tseeds = "f.seeds as seeds";
$tleechs = "f.leechers as leechers";
$tcompletes = "f.finished as finished";
$ttables = "{$TABLE_PREFIX}files f";
}
$query = "SELECT f.multiplier,f.team,f.language,f.tag,f.youtube_video, f.imdb, f.staff_comment, f.gold, f.image, f.screen1, f.screen2, f.screen3, f.vip_torrent, f.info_hash, f.filename,f.sticky, f.url, UNIX_TIMESTAMP(f.data) as data, f.size, f.comment, f.category as cat_name, {$tseeds}, {$tleechs}, {$tcompletes}, f.speed, f.uploader FROM {$ttables} WHERE f.info_hash ='" . AddSlashes($_GET["info_hash"]) . "'";
$res = do_sqlquery($query, true);
$results = mysqli_fetch_assoc($res);
if (!$results || mysqli_num_rows($res) == 0) {
err_msg($language["ERROR"], $language["TORRENT_EDIT_ERROR"]);
} else {
if (!$CURUSER || $CURUSER["uid"] < 2 || $CURUSER["edit_torrents"] == "no" && $CURUSER["uid"] != $results["uploader"]) {
stderr($language["ERROR"], $language["CANT_EDIT_TORR"]);
}
$moder_status = getmoderstatusbyhash(AddSlashes($_GET["info_hash"]));
$torrenttpl = new bTemplate();
$torrenttpl->set("language", $language);
// $row=$res[0];
$torrenttpl->set("imageon", $GLOBALS["imageon"] == "true", TRUE);
$torrenttpl->set("screenon", $GLOBALS["screenon"] == "true", TRUE);
if ($btit_settings["imgsw"] == true) {
$torrenttpl->set("uplink", false, TRUE);
$torrenttpl->set("uplinkk", false, TRUE);
$torrenttpl->set("uplo", true, FALSE);
$torrenttpl->set("uplok", true, FALSE);
} else {
$torrenttpl->set("uplink", true, FALSE);
$torrenttpl->set("uplinkk", true, FALSE);
$torrenttpl->set("uplo", false, TRUE);
$torrenttpl->set("uplok", false, TRUE);
}
function textbbcode($form, $name, $content = '')
{
$tpl_bbcode = new bTemplate();
$tpl_bbcode->set('form_name', $form);
$tpl_bbcode->set('object_name', $name);
$tpl_bbcode->set('content', $content);
$tbbcode = '<table width="100%" cellpadding="1" cellspacing="1">';
global $smilies, $STYLEPATH, $language;
$count = 0;
reset($smilies);
$tbbcode .= '<tr>';
while ((list($code, $url) = each($smilies)) && $count < 16) {
$tbbcode .= "\n<td><a href=\"javascript: SmileIT('" . str_replace("'", "\\'", $code) . "',document.forms.{$form}.{$name});\"><img border=\"0\" src=\"images/smilies/{$url}\" alt=\"{$url}\" /></a></td>";
$count++;
}
$tbbcode .= "\n</tr>\n</table>";
$tpl_bbcode->set('smilies_table', $tbbcode);
$tpl_bbcode->set('language', $language);
return $tpl_bbcode->fetch(load_template('txtbbcode.tpl'));
}
}
do_sqlquery("UPDATE `{$TABLE_PREFIX}users` SET `trophy`='0' WHERE `id`=" . $loser . "", true);
do_sqlquery("UPDATE `{$TABLE_PREFIX}users` SET `trophy`='1' WHERE `id`=" . $user . "", true);
$al = mysqli_query($GLOBALS["___mysqli_ston"], "SELECT * FROM {$TABLE_PREFIX}chat ORDER BY id DESC LIMIT 1");
$rw = mysqli_fetch_assoc($al);
$ct = $rw["count"] + 1;
do_sqlquery("INSERT INTO {$TABLE_PREFIX}chat (uid, time, name, text,count) VALUES (0," . time() . ", 'System','[color=red]NEW HIGHSCORE FOR[/color]: [img]{$BASEURL}/flash/trappedinawell1.gif[/img] Score: " . $score . " By " . $arcadeuser . " Award: " . $arte . "'," . $ct . ")");
}
}
mysqli_query($GLOBALS["___mysqli_ston"], "INSERT INTO `{$TABLE_PREFIX}flashscores` ( `ID` , `game` , `user` , `level` , `score` ,`date` ) VALUES ( '', '" . $game . "', '" . $user . "', '" . $level . "', '" . $score . "',NOW());") or die(is_object($GLOBALS["___mysqli_ston"]) ? mysqli_error($GLOBALS["___mysqli_ston"]) : (($___mysqli_res = mysqli_connect_error()) ? $___mysqli_res : false));
redirect("index.php?page=arcadex");
}
}
}
///////////////////////END ARCADE//////////////////////
$tpl = new bTemplate();
$tpl->set("main_title", $btit_settings["name"] . " .::. " . "Index");
// is language right to left?
if (!empty($language["rtl"])) {
$tpl->set("main_rtl", " dir=\"" . $language["rtl"] . "\"");
} else {
$tpl->set("main_rtl", "");
}
if (!empty($language["charset"])) {
$GLOBALS["charset"] = $language["charset"];
$btit_settings["default_charset"] = $language["charset"];
}
$tpl->set("main_charset", $GLOBALS["charset"]);
$tpl->set("main_css", "{$style_css}");
require_once "{$THIS_BASEPATH}/include/blocks.php";
// no collapse for guests
$pagerbottom = str_replace("change_page", "change_page1", $pager) . "\n";
} else {
$pagertop = "{$pager}\n</form>";
$pagerbottom = str_replace("change_page", "change_page1", $pagertop) . "\n";
}
$start = ($page - 1) * $rpp;
if ($pages < 2) {
// only 1 page??? don't need pager ;)
$pagertop = "";
$pagerbottom = "";
}
return array($pagertop, $pagerbottom, "LIMIT {$start},{$rpp}");
}
$FORUM_PATH = dirname(__FILE__);
include load_language("lang_forum.php");
$forumtpl = new bTemplate();
$forumtpl->set("language", $language);
switch ($action) {
case 'editpost':
include "{$FORUM_PATH}/forum.post.php";
$tpl->set("main_content", set_block($block_title, "center", $forumtpl->fetch(load_template("forum.editpost.tpl"))));
break;
case 'catchup':
case 'deletetopic':
case 'movetopic':
case 'setsticky':
case 'rename':
case 'setlocked':
case 'deletepost':
include "{$FORUM_PATH}/forum.actions.php";
break;
// IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
// SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
// TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
// PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
// LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
// NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
// EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
//
////////////////////////////////////////////////////////////////////////////////////
if (!defined("IN_BTIT")) {
die("non direct access!");
}
require_once "include/functions.php";
dbconn();
$friend_id = (int) $_GET["frid"];
$friendstpl = new bTemplate();
$friendstpl->set("language", $language);
// username
$name = mysqli_query($GLOBALS["___mysqli_ston"], "SELECT username FROM {$TABLE_PREFIX}users WHERE id=" . $friend_id);
$nam = mysqli_fetch_array($name);
$friendstpl->set("un", $nam["username"]);
//end username
$qryf = mysqli_query($GLOBALS["___mysqli_ston"], "SELECT * FROM {$TABLE_PREFIX}friendlist WHERE rejected='no' AND confirmed='yes' AND (user_id = " . $friend_id . " OR friend_id = " . $friend_id . ")");
$counf = mysqli_num_rows($qryf);
$friend = array();
$i = 0;
if ($counf == 0) {
$friend[$i]["avatar"] = "<center><font color = red>there</font></center>";
$friend[$i]["name"] = "<center><font color = red>are</font></center>";
$friend[$i]["level"] = "<center><font color = red>no</font></center>";
$friend[$i]["acces"] = "<center><font color = red>friends</font></center>";
@mysql_query("DELETE FROM {$TABLE_PREFIX}comments WHERE info_hash=\"{$hash}\"");
@mysql_query("DELETE FROM {$TABLE_PREFIX}ratings WHERE infohash=\"{$hash}\"");
@mysql_query("DELETE FROM {$TABLE_PREFIX}peers WHERE infohash=\"{$hash}\"");
@mysql_query("DELETE FROM {$TABLE_PREFIX}history WHERE infohash=\"{$hash}\"");
if ($XBTT_USE) {
mysql_query("UPDATE xbt_files SET flags=1 WHERE info_hash=UNHEX('{$hash}')") or die(mysql_error());
}
unlink($TORRENTSDIR . "/{$hash}.btf");
redirect($link);
exit;
} else {
redirect($link);
exit;
}
}
$torrenttpl = new bTemplate();
$torrenttpl->set("language", $language);
$torrent = array();
$torrent["filename"] = $row["filename"];
$torrent["info_hash"] = $row["info_hash"];
$torrent["description"] = format_comment($row["comment"]);
$torrent["catname"] = $row["cat_name"];
$torrent["size"] = makesize($row["size"]);
include dirname(__FILE__) . "/include/offset.php";
$torrent["date"] = date("d/m/Y", $row["data"] - $offset);
if (!$XBT_USE) {
if ($row["speed"] < 0) {
$speed = "N/D";
} else {
if ($row["speed"] > 2097152) {
$speed = round($row["speed"] / 1048576, 2) . " MB/sec";
}
require_once "include/functions.php";
require_once "include/config.php";
dbconn();
global $CURUSER;
if (!$CURUSER || $CURUSER["view_torrents"] == "no") {
// do nothing
} else {
if ($btit_settings["req_onoff"] == true) {
$maxallowed = $btit_settings["req_max"];
$res3 = mysql_query("SELECT * FROM {$TABLE_PREFIX}requests as reqcount WHERE userid={$CURUSER['uid']}") or mysql_error();
$arr3 = mysql_num_rows($res3);
$numreqs = $arr3;
$reqrem = $maxallowed - $numreqs;
$reward = makesize($btit_settings["req_mb"]);
$viewrequeststpl = new bTemplate();
$viewrequeststpl->set("language", $language);
if ($btit_settings["req_maxon"] == true) {
$viewrequeststpl->set("vr0", "<br><div align=center ><font color=steelblue>Available Requests for <b>{$CURUSER['username']}: {$maxallowed}</b> | Posted Requests: <b>{$arr3}</b> | Remaining: <b>{$reqrem}</b></font></div><br>");
}
if ($btit_settings["req_rwon"] == true) {
if ($btit_settings["req_sbmb"] == true) {
$viewrequeststpl->set("vr01", "<br><div align=center ><font color=steelblue>If you furfill a request , you will recieve <b>{$reward}</b></font></div><br>");
//mysql_query("UPDATE {$TABLE_PREFIX}users SET uploaded = uploaded + $btit_settings[req_mb] WHERE id=$CURUSER[uid]");
}
if ($btit_settings["req_sbmb"] == false) {
$viewrequeststpl->set("vr01", "<br><div align=center ><font color=steelblue>If you furfill a request , you will recieve <b>{$btit_settings['req_sb']}</b> seedbonus points</font></div><br>");
//mysql_query("UPDATE {$TABLE_PREFIX}users SET seedbonus = seedbonus + $btit_settings[req_sb] WHERE id=$CURUSER[uid]");
}
}
$viewrequeststpl->set("vr1", "<div align=right><a href=index.php?page=requests>Add New Request</a> | <a href=index.php?page=viewrequests&requestorid={$CURUSER['uid']}>View my requests</a> ");
if (!defined("IN_BTIT")) {
die("non direct access!");
}
$requestid = (int) $_GET[requestid];
$res2 = mysql_query("select count(addedrequests.id) from {$TABLE_PREFIX}addedrequests addedrequests inner join {$TABLE_PREFIX}users users on addedrequests.userid = users.id inner join {$TABLE_PREFIX}requests requests on addedrequests.requestid = requests.id WHERE addedrequests.requestid ={$requestid}") or die(mysql_error());
$row = mysql_fetch_array($res2);
$count = $row[0];
$home = 'index.php?page=votesview';
$perpage = 20;
list($pagertop, $pagerbottom, $limit) = pager($perpage, $count, $home . "&");
$res = mysql_query("select users.id as userid,users.username, users.downloaded,users.uploaded, requests.id as requestid, requests.request from {$TABLE_PREFIX}addedrequests addedrequests inner join {$TABLE_PREFIX}users users on addedrequests.userid = users.id inner join {$TABLE_PREFIX}requests requests on addedrequests.requestid = requests.id WHERE addedrequests.requestid ={$requestid} {$limit}") or sqlerr();
$res2 = mysql_query("select request from {$TABLE_PREFIX}requests where id={$requestid}");
$req = array();
$i = 0;
$arr2 = mysql_fetch_assoc($res2);
$votesviewtpl = new bTemplate();
$votesviewtpl->set("language", $language);
$votesviewtpl->set("vv1", "<p align=center>Vote For This <a href=index.php?page=addrequest&id={$requestid}><b>Request</b></a></p>");
//echo $pagertop;
if (mysql_num_rows($res) == 0) {
$votesviewtpl->set("vv2", "<p align=center><b>Nothing Found</b></p>\n");
} else {
$votesviewtpl->set("vv3", "<center><table width=99% class=lista align=center cellpadding=3>\n");
$votesviewtpl->set("vv4", "<tr><td class=header>Username</td><td class=header>Uploaded</td><td class=header>Downloaded</td>" . "<td class=header>Ratio</td>\n");
while ($arr = mysql_fetch_assoc($res)) {
if ($arr["downloaded"] > 0) {
$ratio = number_format($arr["uploaded"] / $arr["downloaded"], 3);
//$ratio = "<font color=" . get_ratio_color($ratio) . ">$ratio</font>";
} else {
if ($arr["uploaded"] > 0) {
$ratio = "Inf.";
<?php
if ($CURUSER["moderate_trusted"] == "yes" || $CURUSER["edit_torrents"] == "yes") {
$check4 = TRUE;
}
if (!defined("IN_BTIT")) {
die("non direct access!");
}
if ($CURUSER["moderate_trusted"] || $CURUSER["edit_torrents"] == "yes") {
$torrenttpl = new bTemplate();
$full = "SELECT f.moder as moder, f.filename, f.info_hash, f.uploader as upname, u.username as uploader, c.image, c.name as cname, f.category as catid FROM {$TABLE_PREFIX}files f LEFT JOIN {$TABLE_PREFIX}users u ON u.id = f.uploader LEFT JOIN {$TABLE_PREFIX}categories c ON c.id = f.category";
if ($_GET["hash"]) {
$sql = $full . " WHERE info_hash='" . $_GET["hash"] . "'";
$row = do_sqlquery($sql, true);
if (mysql_num_rows($row) == 1) {
while ($data = mysql_fetch_array($row)) {
$torrenttpl->set("filename", $data['filename']);
$torrenttpl->set("uploader", "<a href=\"index.php?page=userdetails&id=" . $data['upname'] . "\">" . $data['uploader'] . "</a>");
$torrenttpl->set("info_hash", $data['info_hash']);
$link = "index.php?page=moder&hash=" . $data['info_hash'] . "";
$torrenttpl->set("link", $link);
if (!empty($_POST["msg"])) {
$torrent = "[url=" . $btit_settings['url'] . "/index.php?page=torrent-details&id=" . $data['info_hash'] . "]" . $data['filename'] . "[/url]";
$msg = "Sorry " . $data[uploader] . ", but {$torrent} has been removed for this reason: [b]" . mysql_escape_string(htmlspecialchars($_POST["msg"] . $_POST['moderate_reasons'])) . "[/b]\r\nDo not reply, this is an automatic message.";
do_sqlquery("INSERT INTO `{$TABLE_PREFIX}messages` (`sender`, `receiver`, `added`, `subject`, `msg`) VALUES ('" . $CURUSER["uid"] . "', '" . $data['upname'] . "', UNIX_TIMESTAMP(), '" . $data['filename'] . "', '" . $msg . "')");
//send to smf
/*do_sqlquery("INSERT INTO `smf_personal_messages` (`ID_MEMBER_FROM`, `fromName`, `msgtime`, `subject`, `body`) VALUES ('1', 'System', UNIX_TIMESTAMP(), '".$subject."', '".$body."')");
$pm_id=mysql_insert_id();
do_sqlquery("INSERT INTO `smf_pm_recipients` (`ID_PM`, `ID_MEMBER`) VALUES ($pm_id, $smf_fid)");
do_sqlquery("UPDATE smf_members SET instantMessages=instantMessages+1, unreadMessages=unreadMessages+1 WHERE ID_MEMBER=$smf_fid");*/
$sended = "Your message has been sended.";
$res = mysqli_query($GLOBALS["___mysqli_ston"], "SELECT * FROM {$TABLE_PREFIX}betgames WHERE active = 1 ORDER BY endtime ASC") or sqlerr(__FILE__, __LINE__);
if (mysqli_num_rows($res) == 0) {
$HTMLOUT .= "<i>Unfortunately, there is no active bets right now. Come back later! :)</i>";
}
while ($a = mysqli_fetch_assoc($res)) {
if ($a['sort'] == 0) {
$sort = "odds ASC";
} elseif ($a['sort'] == 1) {
$sort = "id ASC";
}
$res2 = mysqli_query($GLOBALS["___mysqli_ston"], "SELECT * from {$TABLE_PREFIX}betoptions where gameid =" . sqlesc($a["id"]) . " ORDER BY {$sort}") or sqlerr(__FILE__, __LINE__);
$HTMLOUT .= "<table width='40%' cellpadding='5'>\n<tr>\n<td colspan='3' class='colhead'>" . htmlspecialchars($a["heading"]) . "<br /><i>" . htmlspecialchars($a["undertext"]) . "</i>";
$HTMLOUT .= "</td></tr>";
while ($b = mysqli_fetch_assoc($res2)) {
$odds = $b['odds'];
switch (strlen($odds)) {
case 1:
$odds = $odds . ".00";
break;
case 3:
$odds = $odds . "0";
break;
}
$HTMLOUT .= "<tr><td class='header' width='40%'>" . htmlspecialchars($b['text']) . "</td><td class='lista'><a href='{$BASEURL}/index.php?page=betodds&id=" . $b['id'] . "'>" . htmlspecialchars($odds) . "</a></td></tr>";
}
$HTMLOUT .= "<tr><td class='lista' colspan='2' width='40%'><font size='1'><center>This game closes to new odds: <b>" . date('l dS \\o\\f F Y h:i:s A', $a['endtime']) . "</b><br>Time left: <b>" . round(($a['endtime'] - time()) / 60) . " minutes</center></b></font></td></tr>";
$HTMLOUT .= "</table>";
}
$bettpl = new bTemplate();
$bettpl->set("language", $language);
$bettpl->set(bet, $HTMLOUT);
}
if ($now >= $expire || $enabled != 'yes') {
err_msg($language["ERROR"], $language["CANNOT_SELL_CLOSED"]);
stdfoot();
die;
}
if ($_POST['number'] > $purchaseable || $_POST['number'] < 1) {
err_msg($language["ERROR"], $language["LOTT_LIMIT_PURCHASE"] . " " . $purchaseable);
stdfoot();
die;
}
if ($_POST['number'] + $user_tickets > $limit_buy) {
err_msg($language["ERROR"], $language["LOTT_LIMIT_BUY"] . " " . $limit_buy);
stdfoot();
die;
}
$upload = $result["uploaded"] - $minupload * $_POST['number'];
do_sqlquery("UPDATE `{$TABLE_PREFIX}users` SET `uploaded`=" . $upload . " WHERE `id`=" . $CURUSER['uid'] . "", true);
$tickets = $_POST['number'];
for ($i = 0; $i < $tickets; $i++) {
do_sqlquery("INSERT INTO {$TABLE_PREFIX}lottery_tickets(user) VALUES(" . $CURUSER['uid'] . ")", true);
}
$me = mysqli_num_rows(do_sqlquery("SELECT * FROM `{$TABLE_PREFIX}lottery_tickets` WHERE user="******"", true));
// load language file
require load_language("lang_lottery.php");
$ticketstpl = new bTemplate();
$ticketstpl->set("language", $language);
$ticketstpl->set("nr_tickets", $tickets);
$ticketstpl->set("total_tickets", $me);
$ticketstpl->set("new_upload", makesize($upload));
header("Refresh: 5; URL=index.php?page=lottery_tickets");
$tseeds = "f.seeds as seeds";
$tleechs = "f.leechers as leechers";
$tcompletes = "f.finished as finished";
$ttables = "{$TABLE_PREFIX}files f";
}
$query = "SELECT f.gold, f.sticky, tag, f.image, f.screen1, f.screen2, f.screen3, f.info_hash, f.filename, f.visible, f.url, UNIX_TIMESTAMP(f.data) as data, f.size, f.comment, f.category as cat_name, {$tseeds}, {$tleechs}, {$tcompletes}, f.speed, f.uploader FROM {$ttables} WHERE f.info_hash ='" . AddSlashes($_GET["info_hash"]) . "'";
$res = do_sqlquery($query, true);
$results = mysql_fetch_assoc($res);
if (!$results || mysql_num_rows($res) == 0) {
err_msg($language["ERROR"], $language["TORRENT_EDIT_ERROR"]);
} else {
if (!$CURUSER || $CURUSER["uid"] < 2 || $CURUSER["edit_torrents"] == "no" && $CURUSER["uid"] != $results["uploader"]) {
stderr($language["ERROR"], $language["CANT_EDIT_TORR"]);
}
$moder_status = getmoderstatusbyhash(AddSlashes($_GET["info_hash"]));
$torrenttpl = new bTemplate();
$torrenttpl->set("language", $language);
$row = $res[0];
$torrenttpl->set("imageon", $GLOBALS["imageon"] == "true", TRUE);
$torrenttpl->set("screenon", $GLOBALS["screenon"] == "true", TRUE);
/*
$s = "<select name=\"type\">\n<option value=\"0\">(".$language["CHOOSE_ONE"].")</option>\n";
$cats = genrelist();
foreach ($cats as $row) {
$s .= "<option value=\"" . $row["id"] . "\"";
if ($row["id"] == $results["cat_name"])
$s .= " \"selected\"";
$s .= ">" . unesc($row["name"]) . "</option>\n";
}
$s .= "</select>\n";
// IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
// SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
// TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
// PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
// LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
// NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
// EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
//
////////////////////////////////////////////////////////////////////////////////////
if (!defined("IN_BTIT")) {
die("non direct access!");
}
if ($CURUSER["can_upload"] == "no") {
// do nothing
} else {
$reqfilledtpl = new bTemplate();
$reqfilledtpl->set("language", $language);
$reqfilledtpl->set("rf0", "<table align='center' width=550 class=lista><tr><td class=lista align=center width=100%>");
$filledurl = $_GET["filledurl"];
$requestid = $_GET["requestid"];
$filldate = date('Y-m-d H:i:s');
$res = mysql_query("SELECT users.username, requests.userid, requests.request FROM {$TABLE_PREFIX}requests requests inner join {$TABLE_PREFIX}users users on requests.userid = users.id where requests.id = {$requestid}") or sqlerr();
$arr = mysql_fetch_assoc($res);
$res2 = mysql_query("SELECT username FROM {$TABLE_PREFIX}users where id =" . $CURUSER[uid]) or sqlerr();
$arr2 = mysql_fetch_assoc($res2);
$msg = "" . REQUEST . ": [url={$BASEURL}/index.php?page=reqdetails&id=" . $requestid . "][b]" . $arr[request] . "[/b][/url], is filled by [url={$BASEURL}/index.php?page=userdetails&id=" . $CURUSER[uid] . "][b]" . $arr2[username] . "[/b][/url].\r\n\r\nThe torrent can be downloaded from the following link:\r\n[url=" . $filledurl . "][b]" . $filledurl . "[/b][/url]\r\n\r\nDo not forget to thank the uploader.\r\nIf for some reason this is not what you want, please reset this by clicking [url={$BASEURL}/index.php?page=reqreset&requestid=" . $requestid . "][b]HERE![/b][/url].\r\n\r\n[b]DO NOT[/b] click the link unless you are absolutly sure you want to reset the request.";
$subject = "Your torrent request is filled !";
mysql_query("UPDATE {$TABLE_PREFIX}requests SET filled = '{$filledurl}', fulfilled= '{$filldate}', filledby = {$CURUSER['uid']} WHERE id = {$requestid}") or sqlerr();
if ($btit_settings["req_rwon"] == true) {
if ($btit_settings["req_sbmb"] == true) {
mysql_query("UPDATE {$TABLE_PREFIX}users SET uploaded = uploaded + {$btit_settings['req_mb']} WHERE id={$CURUSER['uid']}");
// PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
// LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
// NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
// EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
//
////////////////////////////////////////////////////////////////////////////////////
if (!defined("IN_BTIT")) {
die("non direct access!");
}
if ($limit > 0) {
$limitqry = "LIMIT {$limit}";
}
$res = do_sqlquery("SELECT r.text AS text, r.sort_index AS sort_index, r.id AS id ,rg.title AS cat_title, rg.id AS cat_id, rg.sort_index AS g_sort_index \n FROM {$TABLE_PREFIX}rules r \n INNER JOIN {$TABLE_PREFIX}rules_group rg on r.cat_id=rg.id \n WHERE r.active = '1' AND rg.active = '1' GROUP BY r.sort_index ORDER BY rg.sort_index,r.sort_index ASC {$limitqry}");
// load language file
//require(load_language("lang_viewrules.php"));
$rulestpl = new bTemplate();
$rulestpl->set("language", $language);
$rules = array();
$i = 0;
$rulestpl->set("rules_exists", mysqli_num_rows($res) > 0, TRUE);
$id = '';
$j = 1;
$k = 1;
while ($rows = mysqli_fetch_array($res)) {
if ($id != $rows['cat_id']) {
$rules[$i]["rules_group_title"] = unesc('<br/>' . $rows["cat_title"] . '<br/>');
$rules[$i]["rules_text"] = format_comment(unesc($rows["sort_index"] . '. ' . $rows["text"]));
$id = $rows['cat_id'];
$j++;
} else {
$rules[$i]["rules_text"] = format_comment(unesc($rows["sort_index"] . '. ' . $rows["text"]));
<?php
if (!defined("IN_BTIT")) {
die("non direct access!");
}
require load_language("lang_staff.php");
$stafftpl = new bTemplate();
$stafftpl->set("language", $language);
if ($CURUSER["view_users"] == "no") {
err_msg($language["ERROR"], $language["NOT_AUTHORIZED"] . " " . strtolower($language["STAFF"]) . "!");
stdfoot();
exit;
} else {
$query = "SELECT u.id, u.username, u.avatar, UNIX_TIMESTAMP(u.joined) joined, ";
$query .= "UNIX_TIMESTAMP(u.lastconnect) lastconnect, ul.level, ul.prefixcolor, ";
$query .= "ul.suffixcolor, c.name country, c.flagpic, o.lastaction ";
$query .= "FROM {$TABLE_PREFIX}users u ";
$query .= "LEFT JOIN {$TABLE_PREFIX}users_level ul ON u.id_level = ul.id ";
$query .= "LEFT JOIN {$TABLE_PREFIX}countries c ON u.flag = c.id ";
$query .= "LEFT JOIN {$TABLE_PREFIX}online o ON u.id = o.user_id ";
$query .= "WHERE u.id_level >=6 ";
$query .= "AND u.id_level <=8 ";
$query .= "ORDER BY u.id_level DESC, u.id ASC";
$res = do_sqlquery($query);
$i = 0;
while ($row = mysql_fetch_assoc($res)) {
is_null($row["avatar"]) || $row["avatar"] == "" ? $avatar = "<img src='{$STYLEURL}/images/default_avatar.gif' height=80 width=80>" : ($avatar = "<img src='" . $row["avatar"] . "' height=80 width=80>");
is_null($row["lastaction"]) ? $lastseen = $row["lastconnect"] : ($lastseen = $row["lastaction"]);
time() - $lastseen > 900 ? $status = "<img src='images/offline.gif' border='0' alt='" . $language["OFFLINE"] . "'>" : ($status = "<img src='images/online.gif' border='0' alt='" . $language["ONLINE"] . "'>");
if (is_null($row["flagpic"])) {
$row["flagpic"] = "unknown.gif";
die("non direct access!");
}
if ($CURUSER["view_news"] == "no") {
err_msg($language["ERROR"], $language["NOT_AUTHORIZED"] . "!");
stdfoot();
exit;
}
// global $CURUSER, $limitqry, $adm_menu, $CURRENTPATH, $TABLE_PREFIX;
// $output="";
if ($limit > 0) {
$limitqry = "LIMIT {$limit}";
}
$res = get_result("SELECT n.id, n.title, n.news,UNIX_TIMESTAMP(n.date) as news_date, u.username FROM {$TABLE_PREFIX}news n INNER JOIN {$TABLE_PREFIX}users u on u.id=n.user_id ORDER BY date DESC {$limitqry}", true, $btit_settings['cache_duration']);
// load language file
require load_language("lang_viewnews.php");
$viewnewstpl = new bTemplate();
$viewnewstpl->set("language", $language);
$viewnewstpl->set("can_edit_news", $CURUSER["edit_news"] == "yes", TRUE);
$viewnewstpl->set("can_edit_news_1", $CURUSER["edit_news"] == "yes", TRUE);
$viewnewstpl->set("can_delete_news", $CURUSER["delete_news"] == "yes", TRUE);
$viewnews = array();
$i = 0;
$viewnewstpl->set("news_exists", count($res) > 0, TRUE);
$viewnewstpl->set("insert_news_link", count($res) == 0 ? "<a href=\"index.php?page=news&act=add\"><img border=\"0\" alt=\"" . $language["ADD"] . "\" src=\"{$BASEURL}/images/new.gif\" /></a>" : "");
include "{$THIS_BASEPATH}/include/offset.php";
foreach ($res as $rows) {
$viewnews[$i]["add_edit_news"] = "<a href=\"index.php?page=news&act=add\">" . $language["ADD"] . "</a> <a href=\"index.php?page=news&act=edit&id=" . $rows["id"] . "\">" . $language["EDIT"] . "</a>";
$viewnews[$i]["delete_news"] = " <a onclick=\"return confirm('" . str_replace("'", "\\'", DELETE_CONFIRM) . "')\" href=\"index.php?page=news&act=del&id=" . $rows["id"] . "\">" . $language["DELETE"] . "</a>";
$viewnews[$i]["user_posted"] = unesc($rows["username"]);
$viewnews[$i]["posted_date"] = date("d/m/Y H:i", $rows["news_date"] - $offset);
$viewnews[$i]["news_title"] = unesc($rows["title"]);
