PageRenderTime 76ms CodeModel.GetById 31ms RepoModel.GetById 1ms app.codeStats 0ms

/inc/admin/admin.forums.php

https://bitbucket.org/wopkevries/blizzlike-313-website
PHP | 765 lines | 685 code | 80 blank | 0 comment | 86 complexity | 9e6135b7a5777a807d5bd480791943d1 MD5 | raw file
Possible License(s): LGPL-2.1
  1. <?php
  2. if (INCLUDED!==true) { include('index.htm'); exit; }
  3. ?>
  4. <style>
  5. select.icon-menu option {
  6. background-repeat: no-repeat;
  7. background-position: center left;
  8. padding-left: 40px;
  9. padding-bottom: 30px;
  10. }
  11. </style>
  12. <?php
  13. $USER_LEVEL['-1'] = 'Any User';
  14. $USER_LEVEL['4'] = 'Owner';
  15. $forceshow=true;
  16. if ($_POST['update']=='settings') {
  17. $query=mysql_query("UPDATE web_settings SET value='".$_POST['wenableforums']."' WHERE setting='forum_enabled'");
  18. $query=mysql_query("UPDATE web_settings SET value='".$_POST['wusereditownposts']."' WHERE setting='user_edit_own_posts'");
  19. $query=mysql_query("UPDATE web_settings SET value='".$_POST['wuserremoveownposts']."' WHERE setting='user_remove_own_posts'");
  20. if ($query) {
  21. goodborder($_LANG['SUCCESS']['ADMIN_SET']);
  22. $forceshow=false;
  23. } else {
  24. $haserrors .= mysql_error();
  25. }
  26. } else if ($_POST['update']=='add') {
  27. if ($_POST['viewlevel'] > $_POST['postlevel']) { $_POST['postlevel'] = $_POST['viewlevel']; }
  28. $rowi = mysql_fetch_array(mysql_query('SELECT `ordenation` FROM forums ORDER BY `ordenation` DESC LIMIT 0, 1'));
  29. $query = mysql_query('INSERT INTO forums(title,postlevel,viewlevel,description,`group`,image,ordenation,categorized) VALUES(
  30. "'.$_POST['wtitle'].'","'.$_POST['postlevel'].'","'.$_POST['viewlevel'].'","'.$_POST['wdescription'].'", "'.$_POST['fgroup'].'",
  31. "'.$_POST['newicon'].'", "'.($rowi['ordenation']+1).'", "'.$_POST['fcat'].'")')or die (mysql_error());
  32. if($query) {
  33. goodborder("Forum Successfuly Added!<META HTTP-EQUIV=REFRESH CONTENT='2; URL=index.php?n=admin.forums&t=manage'>");
  34. $forceshow=false;
  35. } else {
  36. $haserrors .= 'Cannot save the settings!';
  37. }
  38. } else if ($_POST['update']=='edit') {
  39. if ($_POST['viewlevel'] > $_POST['postlevel']) { $_POST['postlevel'] = $_POST['viewlevel']; }
  40. $query = mysql_query('UPDATE forums SET title="'.$_POST['wtitle'].'",postlevel="'.$_POST['postlevel'].'",
  41. viewlevel="'.$_POST['viewlevel'].'",description="'.$_POST['wdescription'].'", `group`="'.$_POST['fgroup'].'",
  42. image="'.$_POST['newicon'].'",categorized="'.$_POST['fcat'].'" WHERE id_forum="'.$_REQUEST['id'].'" AND postlevel <= "'.$userlevel.'"')or die (mysql_error());
  43. if($query) {
  44. goodborder("Forum Successfuly Edited!<META HTTP-EQUIV=REFRESH CONTENT='2; URL=index.php?n=admin.forums&t=manage'>");
  45. $forceshow=false;
  46. } else {
  47. $haserrors .= 'Cannot Update It!';
  48. }
  49. } else if ($_POST['update']=='remove') {
  50. if (mysql_num_rows(mysql_query('SELECT postlevel FROM forums WHERE id_forum="'.$_REQUEST['id'].'" AND postlevel <= "'.$userlevel.'"'))==1) {
  51. if ($_POST['wtopicsdo']=="0" or $_POST['wtopicsdo']=="") {
  52. $query = mysql_query('DELETE FROM forum_topics WHERE id_forum="'.$_REQUEST['id'].'" AND postlevel <= "'.$userlevel.'"')or die (mysql_error());
  53. $query = mysql_query('DELETE FROM forum_posts WHERE id_topic NOT IN (SELECT id_topic FROM `forum_topics`)')or die (mysql_error());
  54. } else {
  55. $query = mysql_query('UPDATE forum_topics SET id_forum="'.$_POST['wtopicsdo'].'" WHERE id_forum="'.$_REQUEST['id'].'" AND postlevel <= "'.$userlevel.'"')or die (mysql_error());
  56. }
  57. if(!$query) {
  58. $haserrors .= 'Couldn\'t remove the selected Forum!';
  59. }
  60. $query = mysql_query('DELETE FROM `forums` WHERE id_forum="'.$_REQUEST['id'].'" AND postlevel <= "'.$userlevel.'"')or die (mysql_error());
  61. if($query) {
  62. goodborder("Forum Successfuly Removed!<META HTTP-EQUIV=REFRESH CONTENT='2; URL=index.php?n=admin.forums&t=manage'>");
  63. $forceshow=false;
  64. } else {
  65. $haserrors .= 'Couldn\'t remove the selected Forum!';
  66. }
  67. } else {
  68. errborder($_LANG['ERROR']['ACESS']);
  69. $forceshow=false;
  70. }
  71. }
  72. if ($forceshow==true) {
  73. switch ($_REQUEST['t']) {
  74. case 'smiles':
  75. if( $_SERVER['REQUEST_METHOD']=='POST') {
  76. for($i=0;$i<count($_POST['smiletag']);$i++) {
  77. $smileconf .= $_POST['smilepath'][$i]. '|' . $_POST['smiletag'][$i];
  78. }
  79. }
  80. subtitle('Manage Smiles:');
  81. ?>
  82. <form method=post action="index.php?n=admin.forums&t=smiles" name="siteadmin" onsubmit="fas_valid()">
  83. <?
  84. metalborderup();
  85. ?>
  86. <table cellpadding='3' cellspacing='0' width=420>
  87. <tbody>
  88. <tr>
  89. <td class='rankingHeader' align='left' nowrap='nowrap'>&nbsp;</td>
  90. <td class='rankingHeader' align='left' nowrap='nowrap' width=30%>Tag</td>
  91. <td class='rankingHeader' align='center' nowrap='nowrap'>File Name</td>
  92. <td class='rankingHeader' align='left' nowrap='nowrap'><a onmouseover='ddrivetip("Remove")' onmouseout='hideddrivetip()'><img src='new-hp/images/v2/remove.gif'></a></td>
  93. </tr>
  94. <tr>
  95. <td colspan='8' background='shared/wow-com/images/borders/metalborder/shadow.gif' height=8>
  96. </td>
  97. </tr>
  98. <?php
  99. $querysm = mysql_query('SELECT * FROM `forum_smiles`');
  100. $res_color=2;
  101. $i=0;
  102. while ($row = mysql_fetch_array($querysm)) {
  103. if($res_color==1) { $res_color=2; } else { $res_color=1; }
  104. echo "<tr>
  105. <td class='serverStatus".$res_color."' align='center'><img name='preimg[]' src='".$row['path']."'></td>
  106. <td class='serverStatus".$res_color."' align='center'><input type=text name='smiletag[]' value='".$row['id_smile']."'></td>
  107. <td class='serverStatus".$res_color."' align='center'><input type=text onchange='javascript:document.siteadmin.preimg[".$i."].src=this.value;' name='smilepath[]' value='".$row['path']."'></td>
  108. <td class='serverStatus".$res_color."' align='center'><input type=checkbox name='smileremove[]'></td>
  109. </tr>";
  110. $i++;
  111. }
  112. ?>
  113. </tbody>
  114. </table>
  115. <?php
  116. metalborderdown();
  117. ?><br>
  118. <div align=center><input type=image SRC="shared/wow-com/images/buttons/update-button.gif" name="Submit" alt="Update" Width="174" Height="46" Border=0 class="button"></div>
  119. <?
  120. break;
  121. case 'remove':
  122. $query = mysql_query('SELECT * FROM `forums` ft WHERE id_forum="'.$_REQUEST['id'].'"');
  123. remslashall();
  124. if (mysql_num_rows($query)==1) {
  125. while ($row=mysql_fetch_array($query)) {
  126. ?>
  127. <form method=post action="index.php?n=admin.forums&t=remove&id=<?php echo $_REQUEST['id']; ?>" name="siteadmin" onsubmit="fas_valid()">
  128. <script language="javascript">
  129. function fas_valid() {
  130. void(document.siteadmin.update.value="remove");
  131. return true;
  132. }
  133. </script>
  134. <input type=hidden name="update">
  135. <?php if ($haserrors!="") { errborder($haserrors) .'<br>';} ?>
  136. <table cellspacing = "0" cellpadding = "0" border = "0" width = "95%">
  137. <tr>
  138. <td width = "24"><img src = "shared/wow-com/images/headers/subheader/subheader-left-sword.gif" width = "24" height = "20"></td>
  139. <td width = "100%" bgcolor = "#05374A"><b class = "white">Remove Forum:</b></td>
  140. <td width = "10"><img src = "shared/wow-com/images/headers/subheader/subheader-right.gif" width = "10" height = "20"></td>
  141. </tr>
  142. </table>
  143. <table width = 95% style = "border-width: 1px; border-style: dotted; border-color: #928058;"><tr><td>
  144. <table width = 100% style = "border-width: 1px; border-style: solid; border-color: black; background-image: url('new-hp/images/layout/parch-light2.jpg');"><tr><td>
  145. <table border=0 cellspacing=0 cellpadding=4>
  146. <tr>
  147. <td width=40% align=right>
  148. <font face="arial,helvetica" size=-1><span><b>
  149. Title:</span></b></font> </td>
  150. <td align=left><table border=0 cellspacing=0 cellpadding=0><tr><td>
  151. <?php echo $row['title']; ?>
  152. </td><td valign = "top">
  153. </td></tr></table></td>
  154. </tr>
  155. <tr>
  156. <td width=40% align=right>
  157. <font face="arial,helvetica" size=-1><span><b>
  158. Description:</span></b></font> </td>
  159. <td align=left><table border=0 cellspacing=0 cellpadding=0><tr><td>
  160. <?php echo $row['description']; ?>
  161. </td><td valign = "top">
  162. </td></tr></table></td>
  163. </tr>
  164. <?php
  165. $queryb = mysql_query('SELECT id_topic FROM `forum_topics` WHERE id_forum="'.$_REQUEST['id'].'"');
  166. if (mysql_num_rows($queryb)>0) {
  167. ?>
  168. <tr>
  169. <td width=40% align=right>
  170. <font face="arial,helvetica" size=-1><span><b>
  171. Topics And Posts:</span></b></font> </td>
  172. <td align=left><table border=0 cellspacing=0 cellpadding=0><tr><td>
  173. <select name="wtopicsdo">
  174. <optgroup label="Remove:">
  175. <option value=0>Remove All
  176. <?php
  177. $queryb = mysql_query('SELECT id_forum, title FROM `forums` WHERE id_forum!="'.$_REQUEST['id'].'"');
  178. if (mysql_num_rows($queryb)>0) {
  179. ?>
  180. <optgroup label="Move to Forum:">
  181. <?php
  182. while ($rowa=mysql_fetch_array($queryb)) {
  183. echo '<option value="'.$rowa['id_forum'].'">'.$rowa['title'];
  184. }
  185. }
  186. ?>
  187. </select>
  188. </td><td valign = "top">
  189. </td></tr></table></td>
  190. </tr>
  191. <?php
  192. }
  193. ?>
  194. </table>
  195. </td></tr></table>
  196. </td></tr></table><br>
  197. <div align=center><a href="index.php?n=admin.forums&t=manage"><img SRC="shared/wow-com/images/buttons/button-back.gif"></a><input type=image SRC="shared/wow-com/images/buttons/button-continue.gif" name="Submit" alt="Update" Width="174" Height="46" Border=0 class="button" taborder=7 ></div>
  198. </form>
  199. <?php
  200. break;
  201. }
  202. } else {
  203. errborder($_LANG['ERROR']['DEFAULT']);
  204. }
  205. break;
  206. case 'edit':
  207. $query = mysql_query('SELECT * FROM `forums` ft WHERE id_forum="'.$_REQUEST['id'].'" AND postlevel <= "'.$userlevel.'"') OR DIE(mysql_error());
  208. remslashall();
  209. if (mysql_num_rows($query)==1) {
  210. while ($row=mysql_fetch_array($query)) {
  211. ?>
  212. <form method=post action="index.php?n=admin.forums&t=edit&id=<?php echo $_REQUEST['id']; ?>" name="siteadmin" onsubmit="fas_valid()">
  213. <script language="javascript">
  214. function fas_valid() {
  215. void();
  216. return true;
  217. }
  218. </script>
  219. <input type=hidden name="update">
  220. <?php if ($haserrors!="") { errborder($haserrors) .'<br>';} ?>
  221. <table cellspacing = "0" cellpadding = "0" border = "0" width = "95%">
  222. <tr>
  223. <td width = "24"><img src = "shared/wow-com/images/headers/subheader/subheader-left-sword.gif" width = "24" height = "20"></td>
  224. <td width = "100%" bgcolor = "#05374A"><b class = "white">Edit Forum:</b></td>
  225. <td width = "10"><img src = "shared/wow-com/images/headers/subheader/subheader-right.gif" width = "10" height = "20"></td>
  226. </tr>
  227. </table>
  228. <table width = 95% style = "border-width: 1px; border-style: dotted; border-color: #928058;"><tr><td>
  229. <table width = 100% style = "border-width: 1px; border-style: solid; border-color: black; background-image: url('new-hp/images/layout/parch-light2.jpg');"><tr><td>
  230. <table border=0 cellspacing=0 cellpadding=4>
  231. <tr>
  232. <td width=40% align=right>
  233. <font face="arial,helvetica" size=-1><span><b>
  234. Name: </span></b></font> </td>
  235. <td align=left><table border=0 cellspacing=0 cellpadding=0><tr><td>
  236. <input type=text name='wtitle' value='<?php echo $row['title']; ?>' maxlength=200 size=30>
  237. </td><td valign = "top">
  238. </td></tr></table></td>
  239. </tr>
  240. <tr>
  241. <td width=40% align=right>
  242. <font face="arial,helvetica" size=-1><span><b>
  243. View Level: </span></b></font> </td>
  244. <td align=left><table border=0 cellspacing=0 cellpadding=0><tr><td>
  245. <select name="viewlevel" onchange='document.siteadmin.update.value="viewlevel"; document.siteadmin.submit();'>
  246. <?php
  247. if (verifylevel($_SESSION['userid']) > 3) { $ulvl = 3; } else { $ulvl=verifylevel($_SESSION['userid']); }
  248. for ($i=-1;$i<=$ulvl;$i++) {
  249. echo '<option value="'.$i.'">'.$USER_LEVEL[$i];
  250. }
  251. ?>
  252. </select>
  253. </td><td valign = "top">
  254. </td></tr></table></td>
  255. </tr>
  256. <tr>
  257. <td width=40% align=right>
  258. <font face="arial,helvetica" size=-1><span><b>
  259. Post Level: </span></b></font> </td>
  260. <td align=left><table border=0 cellspacing=0 cellpadding=0><tr><td>
  261. <select name="postlevel">
  262. <?php
  263. if ( alphanum($_POST['viewlevel'],true, false)==false OR $_POST['viewlevel'] < 0 OR $_POST['viewlevel'] == '' ) {
  264. $postlvl=0;
  265. } else {
  266. $postlvl = $_POST['viewlevel'];
  267. }
  268. for ($i=$postlvl;$i<=verifylevel($_SESSION['userid']);$i++) {
  269. echo '<option value="'.$i.'">'.$USER_LEVEL[$i];
  270. }
  271. ?>
  272. </select>
  273. </td><td valign = "top">
  274. </td></tr></table></td>
  275. </tr>
  276. <tr>
  277. <td width=40% align=right>
  278. <font face="arial,helvetica" size=-1><span><b>
  279. Description: </span></b></font> </td>
  280. <td align=left><table border=0 cellspacing=0 cellpadding=0><tr><td>
  281. <textarea name="wdescription" maxlength=200 cols=35 rows=2><?php echo $row['description']; ?></textarea>
  282. </td><td valign = "top">
  283. </td></tr></table></td>
  284. </tr>
  285. <tr>
  286. <td width=40% align=right>
  287. <font face="arial,helvetica" size=-1><span><b>
  288. Icon: </span></b></font> </td>
  289. <td align=left><table border=0 cellspacing=0 cellpadding=0><tr><td>
  290. <select name='newicon' style="height:20px;" class="icon-menu" OnChange='javascript:void(document.siteadmin.newiconex.src="new-hp/images/forum/forumbullets/"
  291. + document.siteadmin.newicon.value)'>
  292. <?php
  293. foreach (glob('new-hp/images/forum/forumbullets/*.gif') as $tempname) {
  294. $tempname = str_replace(dirname($tempname).'/','',$tempname);
  295. echo '<option value="'.$tempname.'" style="background-image: url(new-hp/images/forum/forumbullets/'.$tempname.');">'.$tempname;
  296. }
  297. ?>
  298. </select>
  299. </td><td valign = "top">&nbsp;<img name='newiconex' src='new-hp/images/forum/forumbullets/bullet.gif'>
  300. </td></tr></table></td>
  301. </tr>
  302. <tr>
  303. <td width=40% align=right>
  304. <font face="arial,helvetica" size=-1><span><b>
  305. Group:</span></b></font> </td>
  306. <td align=left><table border=0 cellspacing=0 cellpadding=0><tr><td>
  307. <select name="fgroup">
  308. <?php
  309. for($i=0;$i<count($FORUM_GROUP);$i++) {
  310. echo '<option value="'.$i.'">'.$FORUM_GROUP[$i].'</option>';
  311. }
  312. ?>
  313. </select>
  314. </td><td valign = "top">
  315. </td></tr></table></td>
  316. </tr>
  317. <tr>
  318. <td width=40% align=right>
  319. <font face="arial,helvetica" size=-1><span><b>
  320. Is Categorized:</span></b></font> </td>
  321. <td align=left><table border=0 cellspacing=0 cellpadding=0><tr><td>
  322. <select name="fcat">
  323. <option value="1">Yes
  324. <option value="0" SELECTED>No
  325. </select>
  326. </td><td valign = "top">
  327. </td></tr></table></td>
  328. </tr>
  329. </table>
  330. </td></tr></table>
  331. </td></tr></table><br>
  332. <script language="javascript">
  333. void(document.siteadmin.newicon.value='<?php echo $row['image']; ?>');
  334. void(document.siteadmin.fgroup.value='<?php echo $row['group']; ?>');
  335. void(document.siteadmin.fcat.value='<?php echo $row['categorized']; ?>');
  336. void(document.siteadmin.newiconex.src='new-hp/images/forum/forumbullets/<?php echo $row['image']; ?>');
  337. document.siteadmin.viewlevel.value = '<?php if ($_POST['viewlevel']!='') { echo $_POST['viewlevel']; } else { echo $row['viewlevel']; } ?>';
  338. document.siteadmin.postlevel.value = '<?php if ($_POST['viewlevel']!='') { echo $_POST['postlevel']; } else { echo $row['postlevel']; } ?>';
  339. void(document.siteadmin.wisblocked.value='<?php echo $row['isblocked'];?>');
  340. </script>
  341. <div align=center><a href="index.php?n=admin.forums&t=manage"><img SRC="shared/wow-com/images/buttons/button-back.gif"></a><input onclick="document.siteadmin.update.value='edit'" type=image SRC="shared/wow-com/images/buttons/update-button.gif" name="Submit" alt="Update" Width="174" Height="46" Border=0 class="button" taborder=7 ></div>
  342. </form>
  343. <?php
  344. break;
  345. }
  346. } else {
  347. errborder('Forum non-existent or you require higher priviledges to access it.');
  348. }
  349. break;
  350. case "settings":
  351. ?>
  352. <form method=post action="index.php?n=admin.forums&t=settings" name="siteadmin" onsubmit="fas_valid()">
  353. <script language="javascript">
  354. function fas_valid() {
  355. void(document.siteadmin.update.value="settings");
  356. return true;
  357. }
  358. </script>
  359. <input type=hidden name="update">
  360. <?php if ($haserrors!="") { errborder($haserrors) .'<br>';} ?>
  361. <table cellspacing = "0" cellpadding = "0" border = "0" width = "95%">
  362. <tr>
  363. <td width = "24"><img src = "shared/wow-com/images/headers/subheader/subheader-left-sword.gif" width = "24" height = "20"></td>
  364. <td width = "100%" bgcolor = "#05374A"><b class = "white">Forums Settings:</b></td>
  365. <td width = "10"><img src = "shared/wow-com/images/headers/subheader/subheader-right.gif" width = "10" height = "20"></td>
  366. </tr>
  367. </table>
  368. <table width = 95% style = "border-width: 1px; border-style: dotted; border-color: #928058;"><tr><td>
  369. <table width = 100% style = "border-width: 1px; border-style: solid; border-color: black; background-image: url('new-hp/images/layout/parch-light2.jpg');"><tr><td>
  370. <table border=0 cellspacing=0 cellpadding=4>
  371. <tr>
  372. <td width=45% align=right>
  373. <font face="arial,helvetica" size=-1><span><b>
  374. Enable Forums: </span></b></font> </td>
  375. <td align=left><table border=0 cellspacing=0 cellpadding=0><tr><td>
  376. <select name="wenableforums"><option value=1>Yes<option value=0>No</select>
  377. </td><td valign = "top">
  378. </td></tr></table></td>
  379. </tr>
  380. <tr>
  381. <td align=right>
  382. <font face="arial,helvetica" size=-1><span><b>
  383. Edit Own Forum Posts: </span></b></font> </td>
  384. <td align=left><table border=0 cellspacing=0 cellpadding=0><tr><td>
  385. <select name="wusereditownposts"><option value=0>No<option value=1 SELECTED>Yes<option value=2 >Only Last Replies
  386. </td><td valign = "top"><small>&nbsp;(Only for Normal Users)
  387. </td></tr></table></td>
  388. </tr>
  389. <tr>
  390. <td align=right>
  391. <font face="arial,helvetica" size=-1><span><b>
  392. Remove Own Forum Posts: </span></b></font> </td>
  393. <td align=left><table border=0 cellspacing=0 cellpadding=0><tr><td>
  394. <select name="wuserremoveownposts"><option value=0>No<option value=1 SELECTED>Yes<option value=2 >Only Last Replies
  395. </td><td valign = "top"><small>&nbsp;(Only for Normal Users)
  396. </td></tr></table></td>
  397. </tr>
  398. </table>
  399. <script language="javascript">
  400. void(document.siteadmin.wenableforums.value='<?php echo $SETTING['FORUM_ENABLED'];?>');
  401. void(document.siteadmin.wusereditownposts.value='<?php echo $SETTING['FORUM_EDIT_OWN_POSTS'];?>');
  402. void(document.siteadmin.wuserremoveownposts.value='<?php echo $SETTING['FORUM_REMOVE_OWN_POSTS'];?>');
  403. void(document.siteadmin.wenablepm.value='<?php echo $SETTING['FORUM_ENABLE_PM'];?>');
  404. void(document.siteadmin.wenableusersig.value='<?php echo $SETTING['FORUM_ENABLE_SIGNATURE'];?>');
  405. void(document.siteadmin.needlogin.value='<?php echo $SETTING['FORUM_NEED_LOGIN'];?>');
  406. </script>
  407. </td></tr></table>
  408. </td></tr></table><br>
  409. <div align=center><input type=image SRC="shared/wow-com/images/buttons/update-button.gif" name="Submit" alt="Update" Width="174" Height="46" Border=0 class="button" taborder=7 ></div>
  410. </form>
  411. <?php
  412. break;
  413. case "add":
  414. remslashall(); ?>
  415. <form method=post action="index.php?n=admin.forums&t=add" name="siteadmin" onsubmit="fas_valid()">
  416. <script language="javascript">
  417. function fas_valid() {
  418. void(document.siteadmin.update.value="add");
  419. return true;
  420. }
  421. </script>
  422. <input type=hidden name="update">
  423. <?php if ($haserrors!="") { errborder($haserrors) .'<br>';} ?>
  424. <table cellspacing = "0" cellpadding = "0" border = "0" width = "95%">
  425. <tr>
  426. <td width = "24"><img src = "shared/wow-com/images/headers/subheader/subheader-left-sword.gif" width = "24" height = "20"></td>
  427. <td width = "100%" bgcolor = "#05374A"><b class = "white">Add Forum:</b></td>
  428. <td width = "10"><img src = "shared/wow-com/images/headers/subheader/subheader-right.gif" width = "10" height = "20"></td>
  429. </tr>
  430. </table>
  431. <table width = 95% style = "border-width: 1px; border-style: dotted; border-color: #928058;"><tr><td>
  432. <table width = 100% style = "border-width: 1px; border-style: solid; border-color: black; background-image: url('new-hp/images/layout/parch-light2.jpg');"><tr><td>
  433. <table border=0 cellspacing=0 cellpadding=4>
  434. <tr>
  435. <td width=40% align=right>
  436. <font face="arial,helvetica" size=-1><span><b>
  437. Name: </span></b></font> </td>
  438. <td align=left><table border=0 cellspacing=0 cellpadding=0><tr><td>
  439. <input type=text name='wtitle' maxlength=200 size=30 value="<? echo $_POST['wtitle'] ?>">
  440. </td><td valign = "top">
  441. </td></tr></table></td>
  442. </tr>
  443. <tr>
  444. <td width=40% align=right>
  445. <font face="arial,helvetica" size=-1><span><b>
  446. View Level: </span></b></font> </td>
  447. <td align=left><table border=0 cellspacing=0 cellpadding=0><tr><td>
  448. <select name="viewlevel" onchange='document.siteadmin.update.value="viewlevel"; document.siteadmin.submit();'>
  449. <?php
  450. if (verifylevel($_SESSION['userid']) > 3) { $ulvl = 3; } else { $ulvl=verifylevel($_SESSION['userid']); }
  451. for ($i=-1;$i<=$ulvl;$i++) {
  452. echo '<option value="'.$i.'">'.$USER_LEVEL[$i];
  453. }
  454. ?>
  455. </select>
  456. </td><td valign = "top">
  457. </td></tr></table></td>
  458. </tr>
  459. <tr>
  460. <td width=40% align=right>
  461. <font face="arial,helvetica" size=-1><span><b>
  462. Post Level: </span></b></font> </td>
  463. <td align=left><table border=0 cellspacing=0 cellpadding=0><tr><td>
  464. <select name="postlevel">
  465. <?php
  466. if ( alphanum($_POST['viewlevel'],true, false)==false OR $_POST['viewlevel'] < 0 OR $_POST['viewlevel'] == '' ) {
  467. $postlvl=0;
  468. } else {
  469. $postlvl = $_POST['viewlevel'];
  470. }
  471. for ($i=$postlvl;$i<=verifylevel($_SESSION['userid']);$i++) {
  472. echo '<option value="'.$i.'">'.$USER_LEVEL[$i];
  473. }
  474. ?>
  475. </select>
  476. </td><td valign = "top">
  477. </td></tr></table></td>
  478. </tr>
  479. <tr>
  480. <td width=40% align=right>
  481. <font face="arial,helvetica" size=-1><span><b>
  482. Description: </span></b></font> </td>
  483. <td align=left><table border=0 cellspacing=0 cellpadding=0><tr><td>
  484. <textarea name="wdescription" maxlength=200 cols=35 rows=2><? echo $_POST['wdescription']; ?></textarea>
  485. </td><td valign = "top">
  486. </td></tr></table></td>
  487. </tr>
  488. <tr>
  489. <td width=40% align=right>
  490. <font face="arial,helvetica" size=-1><span><b>
  491. Icon: </span></b></font> </td>
  492. <td align=left><table border=0 cellspacing=0 cellpadding=0><tr><td>
  493. <select name='newicon' style="height:20px;" class="icon-menu" OnChange='javascript:void(document.siteadmin.newiconex.src="new-hp/images/forum/forumbullets/"
  494. + document.siteadmin.newicon.value)'>
  495. <?php
  496. foreach (glob('new-hp/images/forum/forumbullets/*.gif') as $tempname) {
  497. $tempname = str_replace(dirname($tempname).'/','',$tempname);
  498. echo '<option value="'.$tempname.'" style="background-image: url(new-hp/images/forum/forumbullets/'.$tempname.');">'.$tempname;
  499. }
  500. ?>
  501. </select>
  502. </td><td valign = "top">&nbsp;<img name='newiconex' src='new-hp/images/forum/forumbullets/bullet.gif'>
  503. </td></tr></table></td>
  504. </tr>
  505. <tr>
  506. <td width=40% align=right>
  507. <font face="arial,helvetica" size=-1><span><b>
  508. Group:</span></b></font> </td>
  509. <td align=left><table border=0 cellspacing=0 cellpadding=0><tr><td>
  510. <select name="fgroup">
  511. <?php
  512. for($i=0;$i<count($FORUM_GROUP);$i++) {
  513. echo '<option value="'.$i.'">'.$FORUM_GROUP[$i].'</option>';
  514. }
  515. ?>
  516. </select>
  517. </td><td valign = "top">
  518. </td></tr></table></td>
  519. </tr>
  520. <tr>
  521. <td width=40% align=right>
  522. <font face="arial,helvetica" size=-1><span><b>
  523. Is Categorized:</span></b></font> </td>
  524. <td align=left><table border=0 cellspacing=0 cellpadding=0><tr><td>
  525. <select name="fcat">
  526. <option value="1">Yes
  527. <option value="0" SELECTED>No
  528. </select>
  529. </td><td valign = "top">
  530. </td></tr></table></td>
  531. </tr>
  532. </table>
  533. <script language="javascript">
  534. <?php if ($_SERVER['REQUEST_METHOD']!='POST') { ?>
  535. void(document.siteadmin.newicon.value='bullet.gif');
  536. void(document.siteadmin.fgroup.value='0');
  537. void(document.siteadmin.newiconex.src='new-hp/images/forum/forumbullets/bullet.gif');
  538. <? } else { ?>
  539. void(document.siteadmin.newicon.value='<? echo $_POST['newicon']; ?>');
  540. void(document.siteadmin.fgroup.value='<? echo $_POST['fgroup']; ?>');
  541. void(document.siteadmin.newiconex.src='new-hp/images/forum/forumbullets/'+document.siteadmin.newicon.value);
  542. <? } ?>
  543. document.siteadmin.viewlevel.value = '<?php if ($_POST['viewlevel']!='') { echo $_POST['viewlevel']; } else { echo '-1'; } ?>';
  544. document.siteadmin.postlevel.value = '<?php if ($_POST['viewlevel']!='') { echo $_POST['postlevel']; } else { echo '0'; } ?>';
  545. </script>
  546. </td></tr></table>
  547. </td></tr></table><br>
  548. <div align=center><a href="index.php?n=admin.forums&t=manage"><img SRC="shared/wow-com/images/buttons/button-back.gif"></a><input type=image SRC="shared/wow-com/images/buttons/button-continue.gif" name="Submit" alt="Update" Width="174" Height="46" Border=0 class="button" taborder=7 ></div>
  549. </form>
  550. <?php
  551. break;
  552. case "reports":
  553. ?>
  554. <div style='cursor: auto;' id='dataElement'>
  555. <span>
  556. <?php
  557. subtitle('Forums Reports:');
  558. if ($_REQUEST['id']!='') { @mysql_query("DELETE FROM `forum_reports` WHERE id_report='".$_REQUEST['id']."'"); }
  559. $newquery = mysql_query("SELECT *, fp.id_topic as id_topic, a.username as id_account, fp.isreply as isreply FROM `forum_reports` fr
  560. INNER JOIN `account` a ON a.id = fr.id_account
  561. INNER JOIN `forum_posts` fp ON fr.id_post = fp.id_post") or die (mysql_error());
  562. if (mysql_num_rows($newquery)>0) {
  563. metalborderup();
  564. ?>
  565. <table cellpadding='3' cellspacing='0' width=450>
  566. <tbody>
  567. <tr>
  568. <td class='rankingHeader' align='left' nowrap='nowrap'>#</td>
  569. <td class='rankingHeader' align='center' nowrap='nowrap'>Post</td>
  570. <td class='rankingHeader' align='center' nowrap='nowrap'width=70%>Reason</td>
  571. <td class='rankingHeader' align='center' nowrap='nowrap'width=30%>By</td>
  572. <td class='rankingHeader' align='center' nowrap='nowrap'>&nbsp;</td>
  573. </tr>
  574. <tr>
  575. <td colspan='8' background='shared/wow-com/images/borders/metalborder/shadow.gif' height=8>
  576. </td>
  577. </tr>
  578. <?php
  579. $res_color=2;
  580. $i=0;
  581. while($rowa = mysql_fetch_array($newquery)) {
  582. $i++;
  583. if($res_color==1) { $res_color=2; } else { $res_color=1; }
  584. if ($rowa['isreply']=='0') { $type='topic'; } else { $type='post'; }
  585. echo "<tr>
  586. <td class='serverStatus".$res_color."' align='center'><span style='color: rgb(102, 13, 2);'>".$rowa['id_report']."</td>
  587. <td class='serverStatus".$res_color."' align='center'><span style='color: rgb(102, 13, 2);'><a href='?n=forums&t=".$rowa['id_topic']."&r=".$rowa['id_post']."&".$type."=edit' target='_blanc'>View</a></span>
  588. <td class='serverStatus".$res_color."' align='left'><span style='color: rgb(102, 13, 2);'>".$rowa['reason']."</span><br><span style='color: rgb(35, 67, 3);'>".$rowa['description']."</span></td>
  589. <td class='serverStatus".$res_color."' align='left'><span style='color: rgb(102, 13, 2);'>".$rowa['id_account']."</span>
  590. <td class='serverStatus".$res_color."' align='center'><a onmouseover='ddrivetip(\"Remove\")' onmouseout='hideddrivetip()' href='index.php?n=admin.forums&t=reports&id=".$rowa['id_report']."'><img src='new-hp/images/v2/remove.gif'></a></td>
  591. </tr>";
  592. }
  593. ?>
  594. </tbody>
  595. </table>
  596. <?php
  597. metalborderdown();
  598. ?>
  599. </span>
  600. </div>
  601. <?
  602. } else {
  603. goodborder('No Report Exists.');
  604. }
  605. break;
  606. default:
  607. if ($_REQUEST['ord']!='' AND $_REQUEST['id']!='' AND alphanum($_REQUEST['id'],true,false)==true) {
  608. if ($_REQUEST['ord']=='up') {
  609. $row = mysql_fetch_array(mysql_query("SELECT ordenation FROM forums WHERE id_forum='".$_REQUEST['id']."'"));
  610. $qquery = mysql_query("SELECT id_forum FROM forums WHERE `ordenation`='".($row['ordenation']-1)."' ORDER BY `ordenation` DESC LIMIT 0, 1");
  611. if (mysql_num_rows ($qquery)>0) {
  612. $row = mysql_fetch_array($qquery);
  613. mysql_query("UPDATE forums SET `ordenation`=`ordenation`+1 WHERE id_forum='".$row['id_forum']."'");
  614. mysql_query("UPDATE forums SET `ordenation`=`ordenation`-1 WHERE id_forum='".$_REQUEST['id']."'");
  615. }
  616. } else if ($_REQUEST['ord']=='down') {
  617. $row = mysql_fetch_array(mysql_query("SELECT ordenation FROM forums WHERE id_forum='".$_REQUEST['id']."'"));
  618. $qquery = mysql_query("SELECT id_forum FROM forums WHERE `ordenation`='".($row['ordenation']+1)."' ORDER BY `ordenation` DESC LIMIT 0, 1");
  619. if (mysql_num_rows ($qquery)>0) {
  620. $row = mysql_fetch_array($qquery);
  621. mysql_query("UPDATE forums SET `ordenation`=`ordenation`-1 WHERE id_forum='".$row['id_forum']."'");
  622. mysql_query("UPDATE forums SET `ordenation`=`ordenation`+1 WHERE id_forum='".$_REQUEST['id']."'");
  623. }
  624. }
  625. }
  626. ?>
  627. <?php if ($haserrors!="") { errborder($haserrors) .'<br>';} ?>
  628. <div style='cursor: auto;' id='dataElement'>
  629. <span>
  630. <?php
  631. subtitle('Manage Forums:');
  632. metalborderup();
  633. ?>
  634. <table cellpadding='3' cellspacing='0' width=100%>
  635. <tbody>
  636. <tr>
  637. <td class='rankingHeader' align='left' nowrap='nowrap'>&nbsp;</td>
  638. <td class='rankingHeader' align='left' nowrap='nowrap' width=70%>Name</td>
  639. <td class='rankingHeader' align='center' nowrap='nowrap'>Group</td>
  640. <td class='rankingHeader' align='center' nowrap='nowrap'width=30%>Access Levels</td>
  641. <td class='rankingHeader' align='center' nowrap='nowrap'>Order</td>
  642. <td class='rankingHeader' align='left' nowrap='nowrap'>&nbsp;</td>
  643. <td class='rankingHeader' align='left' nowrap='nowrap'>&nbsp;</td>
  644. </tr>
  645. <tr>
  646. <td colspan='8' background='shared/wow-com/images/borders/metalborder/shadow.gif' height=8>
  647. </td>
  648. </tr>
  649. <?php
  650. $newquery = mysql_query("SELECT * FROM `forums` ft WHERE postlevel <= '".$userlevel."' ORDER BY `ordenation` ASC") or die (mysql_error());
  651. $res_color=2;
  652. $i=0;
  653. while($rowa = mysql_fetch_array($newquery)) {
  654. $i++;
  655. if($res_color==1) { $res_color=2; } else { $res_color=1; }
  656. if ($rowa['isblocked']==1) { $rowa['isblocked'] = "Yes"; } else { $rowa['isblocked'] = "No"; }
  657. echo "<tr>
  658. <td class='serverStatus".$res_color."' align='center'><img src='new-hp/images/forum/forumbullets/".$rowa['image']."'></td>
  659. <td class='serverStatus".$res_color."' align='left'><span style='color: rgb(102, 13, 2);'>".$rowa['title']."</span><br><span style='color: rgb(35, 67, 3);'>".$rowa['description']."</span></td>
  660. <td class='serverStatus".$res_color."' align='center'><span style='color: rgb(102, 13, 2);'>".$FORUM_GROUP[$rowa['group']];
  661. if ($rowa['categorized']=='1') { echo "<br>(Categorized)"; }
  662. echo"</small></td>
  663. <td class='serverStatus".$res_color."' align='left'><span style='color: rgb(102, 13, 2);'>View: ".$USER_LEVEL[$rowa['viewlevel']]."<br>Post: ".$USER_LEVEL[$rowa['postlevel']]."</span></td>
  664. <td class='serverStatus".$res_color."' align='center'><span style='color: rgb(102, 13, 2);'>";
  665. if ($i!=1) { echo "<a href='?n=admin.forums&ord=up&id=".$rowa['id_forum']."' onmouseover='ddrivetip(\"Move Up\")' onmouseout='hideddrivetip()'><img src='new-hp/images/forum/arrow-top.gif'></a>"; } else { echo '<img width=17 height=20 src="new-hp/images/pixel.gif">'; }
  666. echo "<br>";
  667. if ($i!=mysql_num_rows($newquery)) { echo "<a href='?n=admin.forums&ord=down&id=".$rowa['id_forum']."' onmouseover='ddrivetip(\"Move Down\")' onmouseout='hideddrivetip()'><img src='new-hp/images/forum/arrow-bottom.gif'></a>"; } else { echo '<img width=17 height=20 src="new-hp/images/pixel.gif">'; }
  668. echo "</span></td>
  669. <td class='serverStatus".$res_color."' align='center'><a onmouseover='ddrivetip(\"Edit\")' onmouseout='hideddrivetip()' href='index.php?n=admin.forums&t=edit&id=".$rowa['id_forum']."'><img src='new-hp/images/v2/edit.gif'></a></td>
  670. <td class='serverStatus".$res_color."' align='center'><a onmouseover='ddrivetip(\"Remove\")' onmouseout='hideddrivetip()' href='index.php?n=admin.forums&t=remove&id=".$rowa['id_forum']."'><img src='new-hp/images/v2/remove.gif'></a></td>
  671. </tr>";
  672. }
  673. ?>
  674. </tbody>
  675. </table>
  676. <?php
  677. metalborderdown();
  678. ?>
  679. </span>
  680. </div>
  681. <?php
  682. break;
  683. }
  684. }
  685. ?>