Exemplo n.º 1
0
function sigControl()
{
    global $pref, $board_time;
    $r_log = db_query("SELECT\n         user_ismod,\n         user_isadmin,\n         ad_sig,\n         ad_time\n     FROM " . $pref . "user WHERE user_id='{$_SESSION['userid']}'");
    if (db_rows($r_log) != 1) {
        return 0;
    } else {
        $a_log = db_result($r_log);
        $ismod = 0;
        if ($a_log['user_ismod'] == 1 || $a_log['user_isadmin'] == 1) {
            $ismod = 1;
        }
        $sigok = 0;
        if ($a_log['ad_sig'] == $_SESSION['adsig']) {
            $sigok = 1;
        }
        $timeok = 0;
        if ($a_log['ad_time'] > $board_time - 600) {
            $timeok = 1;
        }
        if ($ismod == 1 && $sigok == 1 && $timeok == 1) {
            return 1;
        } else {
            return 0;
        }
    }
}
Exemplo n.º 2
0
function annoncForm($announc, $action, $boards)
{
    global $pref;
    $boards[] = 'a';
    $back = '<form action="announc.php" method="post">
      <table cellpadding="4" cellspacing="0" border="0">
       <tr>
        <td style="width:200px"><b>Bezeichener</b><br /><font size="1">(Wenn Du das Feld leer l&auml;sst<br />ist der Bezeichner <b>Ank&uuml;ndigung</b>)</font></td>
        <td>&nbsp;</td>
        <td style="vertical-align:top">
         <input type="text" maxlength="50" name="announc[word]" value="' . (isset($announc['newsword']) ? decode(addslashes($announc['newsword'])) : '') . '" id="border-tab" />
        </td>
       </tr>
       <tr>
        <td><b>Topic</b></td>
        <td>&nbsp;</td>
        <td><input type="text" size="50" maxlength="255" name="announc[topic]" value="' . (isset($announc['newstopic']) ? decode(addslashes($announc['newstopic'])) : '') . '" id="border-tab" /></td>
       </tr>
       <tr>
        <td style="vertical-align:top"><b>Text</b></td>
        <td>&nbsp;</td>
        <td><textarea cols="50" rows="6" name="announc[text]" id="border-tab">' . (isset($announc['newstext']) ? decode(addslashes($announc['newstext'])) : '') . '</textarea></td>
       </tr>
       <tr>
        <td><b>Index</b></td>
        <td>&nbsp;</td>
        <td>
         <input type="checkbox" name="announc[index]" value="1"' . (in_array('0', $boards) === FALSE ? '' : ' checked') . ' />
         <font size="1">Auch auf der Indexseite anzeigen.</font>
        </td>
       </tr>
       <tr>
        <td style="vertical-align:top"><b>Boards</b></td>
        <td>&nbsp;</td>
        <td>';
    $back .= '<select name="boardids[]" size="5" id="border-tab" multiple>';
    $r_boards = db_query("SELECT\n         board_id,\n         board_name\n     FROM " . $pref . "board");
    if (db_rows($r_boards) == 0) {
        $back .= 'Noch keine Boards angelegt.';
    } else {
        while ($a_boards = db_result($r_boards)) {
            $back .= '<option value="' . $a_boards['board_id'] . '"' . (in_array($a_boards['board_id'], $boards) === FALSE ? '' : ' selected') . '>' . $a_boards['board_name'] . '</option>';
        }
    }
    $back .= '</select>
        </td>
       </tr>
      </table>
      <br />
      <center>
       <input type="hidden" name="action" value="' . $action . '" />
       <input type="hidden" name="announc[id]" value="' . (isset($announc['newsid']) ? $announc['newsid'] : '') . '" />
       <input type="submit" value=" Senden " id="border-tab" />
      </center>
     </form>';
    return $back;
}
Exemplo n.º 3
0
    if (U_ID != 0) {
        $r_board = db_query("SELECT\n             board_id\n         FROM " . $pref . "board WHERE category!='0' AND disabled!='1'");
        if (db_rows($r_board) > 0) {
            while ($a_board = db_result($r_board)) {
                $session_var_name = 'b' . $a_board['board_id'];
                $r_post_id = db_query("SELECT\n                     MAX(post_id)\n                 FROM " . $pref . "post WHERE board_id='{$a_board['board_id']}'");
                if (db_rows($r_post_id) == 0) {
                    $_SESSION[$session_var_name] = 0;
                } else {
                    $a_post_id = db_result($r_post_id);
                    list(, $poid) = each($a_post_id);
                    $_SESSION[$session_var_name] = $poid;
                }
            }
        }
    }
    message_redirect('Alle Foren wurden als gelesen makiert, bitte warten ...', 'index.php');
} else {
    if (U_ID != 0) {
        $session_var_name = 'b' . $boardid;
        $r_post_id = db_query("SELECT\n             MAX(post_id)\n         FROM " . $pref . "post WHERE board_id='{$boardid}'");
        if (db_rows($r_post_id) == 0) {
            $_SESSION[$session_var_name] = 0;
        } else {
            $a_post_id = db_result($r_post_id);
            list(, $poid) = each($a_post_id);
            $_SESSION[$session_var_name] = $poid;
        }
    }
    message_redirect('Board wurde als gelesen makiert, bitte warten ...', 'board.php?boardid=' . $boardid);
}
Exemplo n.º 4
0
function board_nav($boardid, $threadid, $nav_path)
{
    global $TBoard, $pref;
    // thread --
    $r_thread = db_query("SELECT\n         thread_id,\n\t     thread_topic\n     FROM " . $pref . "thread WHERE thread_id='{$threadid}' AND board_id='{$boardid}'");
    if (db_rows($r_thread) != 1) {
        message('Sorry! Fehlerhafter Link.', 'Fehler', 0);
    } else {
        $thread = db_result($r_thread);
    }
    // board --
    $r_board = db_query("SELECT \n\t     board_id,\n\t\t board_name,\n\t\t category\n\t FROM " . $pref . "board WHERE board_id='{$boardid}'");
    $board = db_result($r_board);
    // category --
    $r_category = db_query("SELECT\n\t     category_id,\n\t\t category_name\n\t FROM " . $pref . "category WHERE category_id='{$board['category']}'");
    $category = db_result($r_category);
    $nav_path .= '&nbsp;&gt;&gt;&nbsp;<a href="category.php?catid=' . $category['category_id'] . '" 
     class="bg">' . (strlen($category['category_name']) > 30 ? substr($category['category_name'], 0, 27) . '...' : $category['category_name']) . '</a>';
    $nav_path .= '&nbsp;&gt;&gt;&nbsp;<a href="board.php?boardid=' . $board['board_id'] . '" 
     class="bg">' . (strlen($board['board_name']) > 50 ? substr($board['board_name'], 0, 47) . '...' : $board['board_name']) . '</a>';
    $nav_path .= '&nbsp;&gt;&gt;&nbsp;<a href="showtopic.php?boardid=' . $board['board_id'] . '&threadid=' . $thread['thread_id'] . '" 
     class="bg">' . $thread['thread_topic'] . '</a>';
    mysql_free_result($r_thread);
    mysql_free_result($r_board);
    mysql_free_result($r_category);
    return $nav_path;
}
Exemplo n.º 5
0
 if (!isset($_SESSION['openclose'])) {
     // openclose schon erzeugt ?
     $_SESSION['openclose'] = '0';
 }
 $boards = '';
 while ($a_category = db_result($r_category)) {
     $new_cat = 0;
     $session_cat = 'c' . $a_category['category_id'];
     // openclose Variable
     if ($_SESSION['openclose'] == 0) {
         $_SESSION[$session_cat] = $a_category['category_is_open'];
         // SESSION_vars für openclose setzen
     }
     $board_count = 0;
     $r_boards = db_query("SELECT\n\t         board_id,\n\t\t     board_name,\n\t\t\t board_under,\n\t\t\t last_act_time,\n\t\t\t last_post_id,\n\t\t\t last_act_user, \n\t\t\t last_thread_id, \n\t\t\t last_act_thread,\n\t\t\t threads,\n\t\t\t posts,\n\t\t\t threads_del,\n\t\t\t posts_del\n\t     FROM " . $pref . "board WHERE disabled='0' AND category='" . $a_category['category_id'] . "' ORDER BY board_order ASC");
     if (db_rows($r_boards) > 0) {
         $category = '';
         while ($board = db_result($r_boards)) {
             $P = boardPermissions(U_GROUPIDS, $board['board_id']);
             if ($P[0] == 1) {
                 $board_count++;
                 $session_var = 'b' . $board['board_id'];
                 $new_topic = 0;
                 $gif = '';
                 if (U_ID != 0) {
                     if ($board['last_post_id'] > $_SESSION[$session_var] && $board['last_post_id'] != 0) {
                         $gif = '_new';
                         $new_topic = 1;
                         $new_cat = 1;
                     }
                 }
Exemplo n.º 6
0
    $user = db_result($r_user);
    $r_pm = db_query("SELECT\n\t     COUNT(pm_id)\n\t FROM " . $pref . "pm WHERE pm_empf='" . U_NAME . "'");
    $pm = db_result($r_pm);
    list(, $pm_count) = each($pm);
    $r_pm = db_query("SELECT\n\t     COUNT(pm_id)\n\t FROM " . $pref . "pm WHERE pm_empf='" . U_NAME . "' AND pm_gelesen='0'");
    $pm = db_result($r_pm);
    list(, $pm_noread) = each($pm);
    db_query("UPDATE " . $pref . "user SET\n\t     pm_count='{$pm_count}',\n\t\t pm_overflow='" . ($pm_count <= $config['max_pm_count'] ? 0 : 1) . "',\n\t\t pm_new='" . ($pm_noread == 0 ? 0 : 1) . "'\n\t WHERE user_id='" . U_ID . "'");
    if ($no_delete == 1) {
        message('<form action="pm.php" method="post" name="weiter">
		  Mindestens eine der gew&auml;lten PM wurde durch Dich gesch&uuml;tzt.</form>', 'Gesch&uuml;tzte PM gefunden', 2);
    }
    message_redirect('PM gel&ouml;scht, bitte warten ...', 'pm.php');
} elseif ($action == 'save') {
    $r_pm = db_query("SELECT\n\t     pm_saved\n\t FROM " . $pref . "pm WHERE pm_empf='" . U_NAME . "' AND pm_id='{$pmid}'");
    if (db_rows($r_pm) == 1) {
        $pm = db_result($r_pm);
        $save = 0;
        if ($pm['pm_saved'] == 0) {
            $save = 1;
        }
        $r_pm = db_query("SELECT\n\t\t     COUNT(pm_id)\n\t\t FROM " . $pref . "pm WHERE pm_empf='" . U_NAME . "' AND pm_saved='1'");
        $pm = db_result($r_pm);
        list(, $saved_pms) = each($pm);
        if ($saved_pms >= $config['max_pm_saved'] && $save == 1) {
            message('Du kannst maximal ' . $config['max_pm_saved'] . ' PMs sch&uuml;tzen.', 'Maximum erreicht', 0);
        }
        db_query("UPDATE " . $pref . "pm SET\n\t\t     pm_saved='{$save}'\n\t\t WHERE pm_id='{$pmid}'");
    }
    message_redirect('PM-Sicherung bearbeitet, bitte warten ...', 'pm.php');
} else {
Exemplo n.º 7
0
                        case 2:
                            $endtime = $ban['time'] * 60;
                    }
                    $endtime = $board_time + $endtime;
                }
                // banedby aus header.inc übernehmen #############################################################
                db_query("INSERT INTO " . $pref . "ban SET\n                     bantime='{$board_time}',\n                     banreason='" . addslashes($ban['reason']) . "',\n                     bannote='" . addslashes($ban['note']) . "',\n                     banedby='0',\n                     baned_name='" . addslashes($ban['user_name']) . "',\n                     baned_id='" . $user['user_id'] . "',\n                     timetoend='{$endtime}'");
                $data['work'] = 'User: <b>' . $ban['user_name'] . '</b> ist gebannt.';
            }
        }
    }
}
// banlist ----------------------------------------------------------
if ($action == 'banlist') {
    $r_ban = db_query("SELECT\n         *\n     FROM " . $pref . "ban ORDER BY baned_name");
    if (db_rows($r_ban) == 0) {
        $data['work'] = 'Es sind keine User in der Bannliste';
    } else {
        $data['work'] = '<b>Bannliste</b><br />
          <table width="100%" cellpadding="4" cellspacing="0" border="0">
           <tr>
            <td id="blank"><i>Username</i></td>
            <td id="blank"><i>Bannbeginn</i></td>
            <td id="blank"><i>Bannende</i></td>
            <td id="blank"><i>Optionen</i></td>
           </tr>';
        $i = 0;
        while ($a_ban = db_result($r_ban)) {
            $data['work'] .= '<tr bgcolor="' . ($i % 2 == 0 ? '#DADADA' : '') . '">
               <td id="blank">' . $a_ban['baned_name'] . '</td>
               <td id="blank">' . date("d.m.Y H:i", $a_ban['bantime']) . '</td>';
Exemplo n.º 8
0
	    		 </form>';
                message($mess, 'Fehler', 1);
            } else {
                db_query("UPDATE " . $pref . "post SET\n\t\t\t\t     post_text='" . addslashes($text) . "',\n\t\t\t\t\t guest_name='" . addslashes($new['autor']) . "',\n\t\t\t\t\t post_smilies='" . (isset($do_smilies) ? 1 : '') . "',\n\t\t\t\t\t last_edit_by='" . addslashes(U_NAME) . "',\n\t\t\t\t\t last_edit_time='{$board_time}',\n\t\t\t\t\t last_edit_ip='" . getenv('REMOTE_ADDR') . "',\n\t\t\t\t\t edit_count='" . ($post['edit_count'] + 1) . "',\n\t\t\t\t\t bcode='" . (isset($b_code) ? 1 : '') . "',\n\t\t\t\t\t sendmail='" . (isset($abbo) ? 1 : '') . "'\n\t\t\t\t WHERE post_id='{$postid}'");
                if (P_EDITTOPIC == 1) {
                    db_query("UPDATE " . $pref . "thread SET\n\t\t\t\t\t     thread_topic='" . addslashes($new['topic']) . "'\n\t\t\t\t\t WHERE thread_id='{$threadid}'");
                }
                message_redirect('Der Beitrag wurde editiert, bitte warten ...', 'showtopic.php?boardid=' . $boardid . '&threadid=' . $threadid . '&page=' . $page . '#p' . $postid);
            }
        }
    } else {
        message('Sorry! Du bist nich berechtigt dieses Posting zu editierten.', 'Rechte', 0);
    }
} elseif ($action == 'delete') {
    $r_post = db_query("SELECT\n\t     deleted,\n\t\t user_id\n\t FROM " . $pref . "post WHERE thread_id='{$threadid}' AND post_id='{$postid}'");
    if (db_rows($r_post) != 1) {
        message('Sorry! Fehlerhafter Link', 'Fehler', 0);
    }
    $post = db_result($r_post);
    if ($post['deleted'] == 1) {
        message('Dieses Posting ist bereits als gel&ouml;scht makiert.<br />
		           Echtes l&ouml;schen ist nur im Mod,- oder Admincenter durch Administratoren m&ouml;glich.', 'Fehler', 0);
    }
    $del_thread = 0;
    $r_post = db_query("SELECT\n\t     MIN(post_id)\n\t FROM " . $pref . "post WHERE thread_id='{$threadid}'");
    $post = db_result($r_post);
    list(, $min_id) = each($post);
    if ($min_id == $postid) {
        $del_thread = 1;
    }
    $r_post = db_query("SELECT\n\t     count(post_id)\n\t FROM " . $pref . "post WHERE thread_id='{$threadid}' AND deleted='0'");
Exemplo n.º 9
0
     $th_count += $board['threads_del'];
 }
 $data['thread_nav'] = check_pages($th_count, $config['thread_rows'], $page, 0, 'board.php?boardid=' . $board['board_id']);
 // define LIMIT
 if ($page == 'last') {
     $page = $a_board['threads'];
 }
 $page = intval($page);
 if ($page < 1) {
     $page = 1;
 }
 $start = ($page - 1) * $config['thread_rows'];
 $limit = $start . ', ' . $config['thread_rows'];
 // threadrows--------------------------------
 $r_thread = db_query("SELECT\n             thread_id,\n\t\t\t board_id,\n             replies,\n             thread_autor,\n             thread_topic,\n             last_act_time,\n             last_post_id,\n             last_act_user,\n             thread_icon,\n             thread_views,\n\t\t\t thread_closed,\n             sticky,\n             deleted,\n             replies_del,\n             link\n         FROM " . $pref . "thread WHERE board_id='" . $board['board_id'] . "' OR link='" . $board['board_id'] . "' ORDER BY sticky DESC,last_act_time DESC LIMIT " . $limit . " ");
 if (db_rows($r_thread) < 1) {
     $data['threads'] = '<tr><td class="cellb" colspan="6"><center><font color="[color_err]">Noch keine Threads angelegt.</font></center></td></tr>';
 } else {
     $data['threads'] = '';
     while ($thread = db_result($r_thread)) {
         if ($thread['deleted'] == 1 && P_SHOWDELETED != 1) {
             continue;
         } else {
             $session_var = 'b' . $board['board_id'];
             // icon
             $iconadd = '';
             $pic = 'icon/' . $thread['thread_icon'];
             if ($thread['thread_closed'] == 1) {
                 $pic = 'closed';
             }
             if (U_ID != 0) {
Exemplo n.º 10
0
     $qlink = $_POST['qlink'];
     if (!$qlink['link'] || !$qlink['name']) {
         $data['work'] .= 'Du mu&szlig;t wenigstens URL und Name angeben.';
     } else {
         if (substr($qlink['link'], 0, 7) != "http://") {
             $qlink['link'] = "http://" . $qlink['link'];
         }
         db_query("INSERT INTO " . $pref . "qlink SET\n                 linkname='" . addslashes($qlink['name']) . "',\n                 linklink='" . addslashes($qlink['link']) . "',\n                 linkcount='" . intval($qlink['count']) . "',\n                 linkart='" . intval($qlink['art']) . "',\n                 linkalt='" . addslashes($qlink['alt']) . "',\n                 linkstatus='{$qlink['status']}'");
         $data['work'] .= 'Link gespeichert.';
         $action = '';
     }
 }
 // list qlinks -------------------------------------------
 if ($action == '') {
     $r_qlink = db_query("SELECT\n             *\n         FROM " . $pref . "qlink");
     if (db_rows($r_qlink) == 0) {
         $data['work'] .= 'Keine quicklinks gespeichert.';
     } else {
         $data['work'] .= '<table width="100%" cellpadding="4" cellspacing="0" border="0">
          <tr>
           <td><i>Link</i></td>
           <td>&nbsp;</td>
           <td><i>Name</i></td>
           <td>&nbsp;</td>
           <td><i>Optionen</i></td>
          </tr>';
         $i = 0;
         while ($a_qlink = db_result($r_qlink)) {
             $data['work'] .= '<tr bgcolor="' . ($i % 2 == 0 ? '#DADADA' : '') . '">
               <td><a href="' . $a_qlink['linklink'] . '">' . $a_qlink['linklink'] . '</a></td>
               <td>&nbsp;</td>
Exemplo n.º 11
0
 function num_rows($query)
 {
     $query = db_rows($query);
     return $query;
 }
Exemplo n.º 12
0
       ==============================================
*/
include 'inc/header.inc.php';
// nav_path ------------------------------------------
$data['nav_path'] .= '&nbsp;&gt;&gt;&nbsp;Teampage';
// global Templates ----------------------------------
$TBoard = Get_Template('templates/' . $style['styletemplate'] . '/board.html');
$TTeam = Get_Template('templates/' . $style['styletemplate'] . '/team.html');
$TTeamrow = Get_Template('templates/' . $style['styletemplate'] . '/teamrow.html');
if (U_ID < 1 && $config['guest_team'] == 0) {
    message('Die Teampage ist wurde vom Administrator f&uuml;r G&auml;ste gesperrt.', 'Rechte', 0);
}
$r_team = db_query("SELECT\n     user_name,\n\t user_mail,\n\t user_ismod,\n\t user_isadmin,\n\t user_lastacttime\n FROM " . $pref . "user WHERE user_team='1' ORDER BY user_name");
$teamrows = '';
if (db_rows($r_team) > 0) {
    $i = 0;
    while ($team = db_result($r_team)) {
        $level = '&nbsp;';
        if ($team['user_ismod'] == 1) {
            $level = 'Moderator';
        }
        if ($team['user_isadmin'] == 1) {
            $level = 'Administrator';
        }
        $onlinetime = $board_time - 600;
        $row = $TTeamrow;
        $row = str_replace('[rowcolor]', $i % 2 == 0 ? '[CellA]' : '[CellB]', $row);
        $row = str_replace('[level]', $level, $row);
        $row = str_replace('[name]', $team['user_name'], $row);
        $row = str_replace('[mail]', '<a href="mailto:' . $team['user_mail'] . '">' . $team['user_mail'] . '</a>', $row);
Exemplo n.º 13
0
$board = db_result($r_board);
if ($board['category'] == 0) {
    message('Sorry! Dieses Board gibt es nicht.', 'Fehler', 0);
}
// category
$r_category = db_query("SELECT\n     category_id,\n\t category_name\n FROM " . $pref . "category WHERE category_id='{$board['category']}'");
$category = db_result($r_category);
// nav_path
$data['nav_path'] .= '&nbsp;&gt;&gt;&nbsp;<a href="category.php?catid=' . $category['category_id'] . '" 
 class="bg">' . (strlen($category['category_name']) > 30 ? substr($category['category_name'], 0, 27) . '...' : $category['category_name']) . '</a>';
$data['nav_path'] .= '&nbsp;&gt;&gt;&nbsp;<a href="board.php?boardid=' . $boardid . '" 
 class="bg">' . (strlen($board['board_name']) > 50 ? substr($board['board_name'], 0, 47) . '...' : $board['board_name']) . '</a>';
// thread
if ($action != 'new') {
    $r_thread = db_query("SELECT\n         thread_id,\n\t     thread_topic,\n\t\t thread_closed,\n\t\t replies\n     FROM " . $pref . "thread WHERE thread_id='{$threadid}' AND board_id='{$boardid}'");
    if (db_rows($r_thread) != 1) {
        message('Sorry! Fehlerhafter Link.', 'Fehler', 0);
    }
    $thread = db_result($r_thread);
    $new['topic'] = $thread['thread_topic'];
    $data['nav_path'] .= '&nbsp;&gt;&gt;&nbsp;<a href="showtopic.php?boardid=' . $boardid . '&threadid=' . $threadid . '" 
     class="bg">' . $thread['thread_topic'] . '</a>';
}
// actions ----------------------------
// new Thread
if ($action == 'new') {
    $data['nav_path'] .= '&nbsp;&gt;&gt;&nbsp;Neuen Thread anlegen';
    if (!P_POSTNEW) {
        message('Sorry! Du bist nicht berechtigt hier neue Threads anzulegen.', 'Fehler', 0);
    }
    if (!isset($send)) {
Exemplo n.º 14
0
         $post_num_string = '0' . $post_num_string;
     }
 }
 $post_num++;
 // ip
 $ip = '';
 if (P_IP == 1) {
     $ip = 'IP:&nbsp;' . $post['post_ip'];
 }
 // gast? user?
 $gast = 0;
 if ($post['user_id'] == 0) {
     $gast = 1;
 } else {
     $r_user = db_query("SELECT \n\t\t\t     user_name,\n\t\t\t\t user_title,\n\t\t\t\t user_avatar,\n\t\t\t\t user_ismod,\n\t\t\t\t user_isadmin,\n\t\t\t\t user_hp,\n\t\t\t\t user_join,\n\t\t\t\t signatur,\n\t\t\t\t post_count,\n\t\t\t\t show_sig\n\t\t\t FROM " . $pref . "user WHERE user_id='" . $post['user_id'] . "'");
     if (db_rows($r_user) != 1) {
         $gast = 1;
     } else {
         $user = db_result($r_user);
         mysql_free_result($r_user);
     }
 }
 $threadautor = '';
 // user exist
 if ($gast == 0) {
     // user_name
     $user_name = $user['user_name'];
     // title
     $user_title = '';
     if ($user['user_ismod'] == 1) {
         $user_title = 'Moderator';
Exemplo n.º 15
0
				<input type="checkbox" name="link" value="1" />&nbsp;Link in jetzigem Forum hinterlassen.<br /><br />
			   </td>
			  </tr>
			  <tr>
			   <td class="header" style="text-align:center">
			    <input type="submit" value=" Weiter &gt;&gt; " id="border-tab" />
			   </td>
			  </tr>
			  </form>
			 </table>';
            $data['nav_path'] .= '&nbsp;&gt;&gt;&nbsp;' . $thread['thread_topic'] . '&nbsp;&gt;&gt;&nbsp;Verschieben';
            echo Output(Template($TBoard));
            exit;
        } else {
            $r_board = db_query("SELECT\n\t\t\t     category\n\t\t\t FROM " . $pref . "board WHERE board_id='{$new_board}'");
            if (db_rows($r_board) != 1) {
                message('Dieses gew&auml;hlte Board existiert nicht!', 'Fehler', 0);
            } else {
                // zugriff auf Adminboards verhindern
                $board = db_result($r_board);
                if ($board['category'] == 0) {
                    message('Dieses gew&auml;hlte Board existiert nicht!', 'Fehler', 0);
                }
            }
            // threaddaten ändern
            $more = '';
            if (isset($link)) {
                $more = ", link='" . $boardid . "'";
            }
            db_query("UPDATE " . $pref . "thread SET\n\t\t\t     board_id='{$new_board}'\n\t\t\t\t " . $more . "\n\t\t\t WHERE thread_id='{$threadid}'");
            // postdaten ändern
Exemplo n.º 16
0
<?php

/* $Id: login.php,v 1.3 2003/06/16 18:08:20 master_mario Exp $ */
include 'inc/header.inc.php';
$r_login = db_query("SELECT\n     user_id,\n     user_pw,\n     user_lastacttime\n FROM " . $pref . "user WHERE user_name='" . addslashes($login['name']) . "'");
if (db_rows($r_login) == 1) {
    $a_login = db_result($r_login);
    if (md5(addslashes($login['pw'])) == $a_login['user_pw']) {
        // login --------------------------
        db_query("UPDATE " . $pref . "user SET\n             user_session='" . $sid . "',\n             user_oldsavet='" . $a_login['user_lastacttime'] . "'\n         WHERE user_id='" . $a_login['user_id'] . "'");
        // gast l�schen -------------------
        db_query("DELETE FROM " . $pref . "guest WHERE session_id='{$sid}'");
        db_query("OPTIMIZE TABLE " . $pref . "guest");
        setNewposts($a_login['user_lastacttime']);
        // Weiterleitung ------------------
        message_redirect('Du hast Dich erfolgreich eingeloggt, bitte warten ...', $loginscript);
    } else {
        $TBoard = Get_Template('templates/' . $style['styletemplate'] . '/board.html');
        message('Das Passwort ist falsch.', 'Fehler', 0);
    }
} else {
    $TBoard = Get_Template('templates/' . $style['styletemplate'] . '/board.html');
    message('Es ist kein User mit diesem Namen registriert.', 'Fehler', 0);
}
Exemplo n.º 17
0
        $q[] = "stamp < " . date2stamp($in['date_end']);
    }
    if ($in['username']) {
        $q[] = "( from_user LIKE '%" . $in['username'] . "%' OR from_nick LIKE '%" . $in['username'] . "%' )";
    }
    if ($in['mode']) {
        $q[] = "mode = 1";
    }
    if ($in['keyword']) {
        $q[] = "message LIKE '%" . $in['keyword'] . "%'";
    }
    if ($in['roomname']) {
        $q[] = "roomname LIKE '%" . $in['roomname'] . "%'";
    }
    $conds = null;
    if ($q) {
        $conds = " WHERE " . implode(' AND ', $q);
    }
    $result = $db->query("SELECT COUNT(*) as cnt FROM chat_log {$conds}");
    $row = $result->fetch_assoc();
    $total_post = $row['cnt'];
    if (!($no_of_post = $in['no_of_posts'])) {
        $no_of_post = 30;
    }
    if (empty($in['page_no'])) {
        $in['page_no'] = 1;
    }
    $start = $in['page_no'] - 1;
    $query = "SELECT * FROM chat_log {$conds} ORDER BY stamp DESC LIMIT {$start},{$no_of_post}";
    $rows = db_rows($query);
}
Exemplo n.º 18
0
         $data['calendar'] .= '<b>' . $days . '</b>';
         // time index -------------------------
         $start = mktime(23, 59, 59, $m, $days - 1, $y);
         $end = mktime(0, 0, 0, $m, $days + 1, $y);
         // event ------------------------------
         $r_event = db_query("SELECT \n\t\t\t      calid,\n\t\t\t\t  caltime,\n\t\t\t\t  caltopic\n\t\t\t  FROM " . $pref . "calendar WHERE caltime>'{$start}' AND caltime<'{$end}' AND aktiv='1'");
         if (db_rows($r_event) > 0) {
             while ($event = db_result($r_event)) {
                 $data['calendar'] .= "<br />[smallfont][ <a href=# onclick=\"window.open('event.php?event={$event['calid']}','show_event','width=400,height=500,scrollbars=yes,menubar=no,toolbar=no,statusbar=no')\">" . $event['caltopic'] . "</a> ][smallfontend]";
             }
         }
         // user -------------------------------
         if (U_ID > 0 || U_ID < 1 && $config['guest_memberlist'] == 1) {
             $r_user = db_query("SELECT \n\t\t\t      user_name,\n\t\t\t\t  user_bday,\n\t\t\t\t  user_bday_year\n\t\t\t  FROM " . $pref . "user WHERE user_bday='" . ($days < 10 ? '0' . $days : $days) . '-' . ($m < 10 ? '0' . $m : $m) . "'");
         }
         if (db_rows($r_user) > 0) {
             while ($user = db_result($r_user)) {
                 $dat = explode('-', $user['user_bday']);
                 $bday = mktime(0, 0, 0, $dat[1], $dat[0], $user['user_bday_year']);
                 $t = mktime(0, 0, 0, $m, $days, $y) - $bday;
                 $t = @bcdiv($t, 31547600, 0);
                 $data['calendar'] .= '<br />[smallfont]<a href="s_profile.php?username='******'user_name'] . '" target="_blank">' . $user['user_name'] . '</a> (' . $t . ')[smallfontend]';
             }
         }
     }
     $data['calendar'] .= '</td>';
     if ($days >= $last) {
         $lastrow = 1;
     }
 }
 $data['calendar'] .= '</tr>';
Exemplo n.º 19
0
 }
 // list events -------------------------------------------------------
 if ($action == '') {
     $r_events = db_query("SELECT\n             calid,\n             caltime,\n             caltopic,\n             calautor\n         FROM " . $pref . "calendar ORDER BY caltime ASC");
     $data['work'] .= '<table width="100%" cellpadding="4" cellspacing="0" border="0">
       <tr>
        <td><i>Event</i></td>
        <td>&nbsp;</td>
        <td>&nbsp;</td>
        <td>&nbsp;</td>
        <td><i>Von</i></td>
        <td>&nbsp;</td>
        <td><i>Optionen</i></td>
       </tr>
      ';
     if (db_rows($r_events) > 0) {
         $i = 0;
         while ($a_events = db_result($r_events)) {
             $data['work'] .= '<tr bgcolor="' . ($i % 2 == 0 ? '#DADADA' : '') . '">
               <td>' . date("d.m.Y H:i\\U\\h\\r", $a_events['caltime']) . ($a_events['caltime'] < $board_time ? ' <font color="[color_err]" size="1">(alt)</font>' : '') . '</td>
               <td>&nbsp;</td>
               <td>' . $a_events['caltopic'] . '</td>
               <td>&nbsp;</td>
               <td>' . $a_events['calautor'] . '</td>
               <td>&nbsp;</td>
               <td>
                <a href="calendar.php?action=editEvent&calid=' . $a_events['calid'] . '">Editieren</a> |
                <a href="calendar.php?action=deleEvent&calid=' . $a_events['calid'] . '">L&ouml;schen</a>
               </td>
              </tr>';
             $i++;
Exemplo n.º 20
0
       ==============================================
*/
include 'inc/header.inc.php';
include 'inc/bcode.inc.php';
$TBoard = Get_Template('templates/' . $style['styletemplate'] . '/board.html');
$TReport = Get_Template('templates/' . $style['styletemplate'] . '/report.html');
$data['nav_path'] = board_nav($boardid, $threadid, $data['nav_path']) . '&nbsp;&gt;&gt;&nbsp;Melden';
if ($config['report'] == 0) {
    message('Meldungen sind vom Administrator deaktiviert.', 'Rechte', 0);
}
if (U_ID == 0) {
    message('Meldungen k&ouml;nnen nur von registrierten Usern gemacht werden.', 'Rechte', 0);
}
$r_report = db_query("SELECT\n     report_id\n FROM " . $pref . "report WHERE user_id='" . U_ID . "' AND post_id='{$postid}'");
if (db_rows($r_report) > 0) {
    message('Du hast dieses Posting bereits gemeldet.', 'Fehler', 0);
}
$form = 'form';
$textarea = 'text';
$laenge = $config['report_max_len'];
if ($laenge > 1500) {
    $laenge = 1500;
}
$data['javascript'] = "\n function textlen ()\n {\n     textarea = window.document.forms['{$form}'].elements['{$textarea}'];\n     alert(textarea.value.length + ' Zeichen (Maximal erlaubte Länge {$laenge} Zeichen)');\n }";
if (!isset($send)) {
    $r_post = db_query("SELECT\n\t     post_text,\n\t\t bcode,\n\t\t post_smilies\n\t FROM " . $pref . "post WHERE post_id='{$postid}'");
    $post = db_result($r_post);
    $data['post'] = parse_code(stripslashes($post['post_text']), 1, 1, $post['bcode'], $post['post_smilies']);
    $data['inputs'] = '<input type="hidden" name="boardid" value="' . $boardid . '" />
	     <input type="hidden" name="threadid" value="' . $threadid . '" />
Exemplo n.º 21
0
        $data['work'] = 'Sorry, you cannot delete this group (Are you trying to delete the default or guest group?).';
    } else {
        $data['work'] = 'You are going to delete "' . $group['name'] . '". Are you sure? (Group members will be removed from group)<br><br><a href="groups.php?action=drop&groupid=' . $_GET['groupid'] . '">Yes</a>';
    }
} elseif ($action == 'edit') {
    $r_group = db_query("SELECT\n         groupid,\n         name,\n         accessmask,\n         title,\n         priority\n     FROM " . $pref . "group WHERE groupid='" . $_GET['groupid'] . "'");
    $group = db_result($r_group);
    $data['work'] = '<b>Edit group</b><br><br>';
    $data['work'] .= group_form($group, 'update');
} elseif ($action == 'editgroupboard') {
    $r_group = db_query("SELECT\n         groupid,\n         name,\n         accessmask\n     FROM " . $pref . "group WHERE groupid='{$_GET['groupid']}'");
    $group = db_result($r_group);
    $r_board = db_query("SELECT\n         board_id,\n         board_name\n     FROM " . $pref . "board WHERE board_id='{$_GET['boardid']}'");
    $board = db_result($r_board);
    $r_groupboard = db_query("SELECT\n         groupid,\n         accessmask\n     FROM " . $pref . "groupboard WHERE groupid='{$_GET['groupid']}' AND boardid='{$_GET['boardid']}'");
    if (db_rows($r_groupboard) > 0) {
        $groupboard = db_result($r_groupboard);
        $group['accessmask'] = $groupboard['accessmask'];
        $data['work'] = groupboard_form($groupboard, $board, false);
    } else {
        $data['work'] = groupboard_form($group, $board, false);
    }
} elseif ($action == 'drop') {
    /* put members into the default group */
    /*query("UPDATE $pref"."user SET groupid=$config[default_groupid] WHERE groupid='$groupid'");*/
    $r_user = db_query("SELECT\n         user_id,\n         groupids\n     FROM " . $pref . "user WHERE INSTR(groupids, ',{$_GET['groupid']},')>0");
    while ($user = db_result($r_user)) {
        $user['groupids'] = substr($user['groupids'], 1, strlen($user['groupids']) - 2);
        grouplist_remove($user['groupids'], $_GET['groupid']);
        $user['groupids'] = ',' . $user['groupids'] . ',';
        db_query("UPDATE " . $pref . "user SET\n             groupids='{$user['groupids']}'\n         WHERE userid={$user['user_id']}");
Exemplo n.º 22
0
 /**
  * Tests if a database lock is set
  *
  * @access public
  */
 function testLock()
 {
     $this->_debugMessage('testLock()');
     if ($lockID = $this->structureTableLock) {
         return $lockID;
     }
     $this->_lockGC();
     $tb = $this->lock_table;
     $stb = $this->node_table;
     $lockTTL = time() - $this->lockTTL;
     $sql = "SELECT lockID FROM {$tb} WHERE lockTable=" . $this->db->quote($stb);
     $res = $this->db->query($sql);
     $this->_testFatalAbort($res, __FILE__, __LINE__);
     //		if ($res->numRows()) {
     if (db_rows()) {
         return new PEAR_Error($this->_getMessage(NESE_ERROR_TBLOCKED), NESE_ERROR_TBLOCKED);
     }
     return false;
 }
Exemplo n.º 23
0
    define("U_PM_OVER", $a_user['pm_overflow']);
    define("U_PM_NEW", $a_user['pm_new']);
    define("U_PM_COUNT", $a_user['pm_count']);
    define("U_NO_PM", $a_user['noPM_message']);
    $data['login'] = '';
    db_query("UPDATE " . $pref . "user SET\n\t     user_lastacttime='{$board_time}' WHERE user_id='" . U_ID . "'");
} else {
    define("U_ID", '0');
    define("U_NAME", 'Gast');
    define("U_ISMOD", '0');
    define("U_ISADMIN", '0');
    define("U_ISURADMIN", '0');
    define("U_GROUPIDS", ',' . $config['guest_groupid'] . ',');
    define("U_STYLEID", '0');
    $r_guest = db_query("SELECT\n\t     last_act_time\n\t FROM " . $pref . "guest WHERE session_id='{$sid}'");
    if (db_rows($r_guest) == 1) {
        $a_guest = db_result($r_guest);
        define("U_LAST", $a_guest['last_act_time']);
        db_query("UPDATE " . $pref . "guest SET\n\t\t\t last_act_time='{$board_time}' WHERE session_id='{$sid}'");
    } else {
        define("U_LAST", 0);
        db_query("INSERT INTO " . $pref . "guest SET\n\t\t     session_id='{$sid}',\n\t\t\t last_act_time='{$board_time}'");
    }
}
// _groups lesen und Rechtestring erstellen
if (isset($boardid)) {
    $P = boardPermissions(U_GROUPIDS, $boardid);
    define('P_VIEW', $P[0]);
    define('P_REPLY', $P[1]);
    define('P_POSTNEW', $P[2]);
    define('P_CLOSE', $P[3]);
Exemplo n.º 24
0
       ==============================================
         (c) 2003 by
          Mario Pischel         <*****@*****.**>

         download the latest version:
         https://developer.berlios.de/projects/thwc/

         This  program is  free  software;  you can
         redistribute it and/or modify it under the
         terms of the GNU General Public License as
         published by the Free Software Foundation;
         either  version 2 of  the License,  or (at
         your option) any later version.

       ==============================================
*/
include 'inc/header.inc.php';
include 'inc/bcode.inc.php';
// global Template
$TEvent = Get_Template('templates/' . $style['styletemplate'] . '/event.html');
$r_event = db_query("SELECT\n     caltime,\n\t caltopic,\n\t calautor,\n\t caltext\n FROM " . $pref . "calendar WHERE calid='{$event}'");
if (db_rows($r_event) == 1) {
    $event = db_result($r_event);
    $data['datum'] = date("d.m.Y (H:i\\U\\h\\r)", $event['caltime']);
    $data['event'] = parse_code($event['caltopic'], 1, 0, 0, $config['eventcode']);
    $data['text'] = parse_code($event['caltext'], 1, 0, $config['eventcode'], $config['eventcode']);
    $data['autor'] = '<a href="s_profile.php?username='******'calautor'] . '" target="_blank">' . $event['calautor'] . '</a>';
} else {
    echo 'Fehler! Kein Event mit dieser ID gefunden.';
}
echo Output(Template($TEvent));
<?php
include_once 'admin_user_add.php';

$rows = db_rows("SELECT seq, username FROM admin ORDER BY seq DESC");
?>
<table id='chat-log-table' cellpadding=0 cellspacing=0 width='100%' border=0>
	<tr id='tr-header'>
		<td nowrap>번호</td>
		<td nowrap>아이디</td>
		<td>관리</td>
	</tr>
<?php
	foreach ( $rows as $row ) {
?>
	<tr>
		<td><?=$row['seq']?></td>
		<td><?=$row['username']?></td>
		<td>
			<a href='?option=admin_user_management&seq=<?=$row['seq']?>'>관리</a>
			<a href='admin_user_delete.php?seq=<?=$row['seq']?>' target='hiframe'>삭제</a>
		</td>
	</tr>
<?}?>	
</table>
Exemplo n.º 26
0
                 $mon = (int) substr($value, 3, 2);
                 $year = (int) substr($value, 6, 4);
                 $timestamp = mktime(0, 0, 0, $mon, $day, $year);
                 if ($lookhow[$key] == 'vor') {
                     $where .= " < {$timestamp}";
                 } else {
                     $where .= " > {$timestamp}";
                 }
         }
     }
 }
 $r_finduser = db_query("SELECT\n         user_id,\n         user_name,\n         user_mail\n     FROM " . $pref . "user " . $where . " ORDER BY user_name ASC");
 if (db_rows($r_finduser) < 1) {
     $data['work'] = '<b>Ergebnis:</b> Kein User gefunden.';
 } else {
     $data['work'] = '<b>Ergebnis:</b> ' . db_rows($r_finduser) . ' User gefunden.<br /><br />
       <form action="useredit.php" name="form" method="post">
       <table cellpadding="3" cellspacing="1" border="0">
       <tr>
        <td id="blank">&nbsp;</td>
        <td id="blank"><i>User ID</i></td>
        <td id="blank" style="width:150px"><i>Username</i></td>
        <td id="blank" style="width:250px"><i>Email-Adresse</i></td>
        <td id="blank"><i>Optionen</i></td>
       </tr>';
     $i = 0;
     while ($found = db_result($r_finduser)) {
         $data['work'] .= '
           <tr bgcolor="' . ($i % 2 == 0 ? '#DADADA' : '#E5E5E5') . '">
            <td id="blank"><input type="checkbox" name="userid[' . $found['user_id'] . ']" value="1" /></td>
            <td id="blank"><b>' . $found['user_id'] . '</b></td>
Exemplo n.º 27
0
if ($action == 'defaultStyle') {
    db_query("UPDATE " . $pref . "style SET styleisdefault='0'");
    db_query("UPDATE " . $pref . "style SET styleisdefault='1' WHERE styleid='{$styleid}'");
    $action = '';
}
// deleStyle ------------------------------------------------------
if ($action == 'deleStyle') {
    db_query("DELETE FROM " . $pref . "style WHERE styleid='{$styleid}'");
    // USER AUF DEFAULT SETZEN WENN SIE DIESEN BENUTZEN #############################################################
    db_query("OPTIMIZE TABLE " . $pref . "style");
    $action = '';
}
// list styles -------------------------------------------------------
if ($action == '') {
    $r_list = db_query("SELECT\n         styleid,\n         stylename,\n         styleispublic,\n         styleisdefault,\n         styletemplate\n     FROM " . $pref . "style");
    if (db_rows($r_list) < 1) {
        $data['work'] = '<font color="#990000">Kein Style angelegt.</font>';
    } else {
        $data['work'] .= '<a href="style.php?action=publicStyle&styleid=all">Alle als &ouml;ffendlich makieren</a> |
          <a href="style.php?action=publicStyle&styleid=no">Alle als nicht &ouml;ffendlich makieren</a><br /><br />
          <table cellpadding="3" cellspacing="0" border="0">';
        while ($list = db_result($r_list)) {
            $data['work'] .= '<tr>
              <td>' . $list['stylename'] . '</td>
              <td>&nbsp;</td>
              <td><font color="#FF0000">' . ($list['styleisdefault'] == 1 ? '*' : '&nbsp;') . '</font></td>
              <td><font color="#0000FF">' . ($list['styleispublic'] == 1 ? '*' : '&nbsp;') . '</font></td>
              <td>&nbsp;</td>
              <td>
               <a href="style.php?action=editStyle&styleid=' . $list['styleid'] . '">Editieren</a> |
               <a href="style.php?action=deleStyle&styleid=' . $list['styleid'] . '">L&ouml;schen</a> |
Exemplo n.º 28
0
}
if (count($onuser) > 0) {
    $onlinelist = implode(' ,', $onuser);
}
unset($onuser);
mysql_free_result($r_onuser);
$r_onguest = db_query("SELECT\n     COUNT(session_id)\n FROM " . $pref . "guest WHERE last_act_time>'{$onlinelimit}'");
$a_onguest = db_result($r_onguest);
list(, $guestcount) = each($a_onguest);
$onlinecount = $onlinecount + $guestcount;
mysql_free_result($r_onguest);
$onlinecount24 = 0;
$onuser24 = array();
$onlinelist24 = '';
$r_24user = db_query("SELECT\n     user_name,\n\t user_ishidden\n FROM " . $pref . "user WHERE user_lastacttime>'" . ($board_time - 86400) . "'");
if (db_rows($r_24user) > 0) {
    while ($a_24user = db_result($r_24user)) {
        if ($a_24user['user_ishidden'] == 0) {
            $onlinecount24++;
            $onuser24[] = '<a href="s_profile.php?username='******'user_name'] . '">' . $a_24user['user_name'] . '</a>';
        } else {
            if (P_CANSEEINVIS == 1) {
                $onlinecount24++;
                $onuser24[] = '<a href="s_profile.php?username='******'user_name'] . '">' . $a_24user['user_name'] . '</a>(Versteckt)';
            }
        }
    }
}
if (count($onuser24) > 0) {
    $onlinelist24 = implode(' ,', $onuser24);
}