View file components/options.php

<?php
if(!defined('DRK'))die('Hacking attempt...');

$uid=IdFromSes($ses);

/////ADMIN LIST/////
if($mode=="adminlist")
{
$time=time();
$admins=num_rows("id",users,"admin='Y' AND adminlevel>=20");
$type.="admin(s):<br/>";
$query=query("*",users,"admin='Y' AND adminlevel>=20 ORDER BY LOWER(username)");
if(mysql_num_rows($query)>0){
while($row=mysql_fetch_array($query)){
$online=num_rows("id",users,"id='$row[id]' AND $time-lastseen<=$offlinetime");
if($online>0){$style="style=\"font-size:10px;color:#009900;\"";$status="online!!";}
else {$style="style=\"font-size:10px;color:#FF0000;\"";$status="offline!!";}
if(profiles_table("sex",$row['id'])=="M")$sex=" style=\"color:#0000FF;\"";
else if(profiles_table("sex",$row['id'])=="F")$sex=" style=\"color:#FF0066;\"";
$adminlist.=GetLevelSymbol($row['id'])."<a href=\"".$action."messages".$mod."writemessage&amp;to=$row[username]&amp;return=1".$session."\"$sex>$row[username]</a> - <span $style>$status</span><br/>\n";
}
}
else $adminlist="<img src=\"./images/point.gif\" alt=\"[!]\"/>no admin at the moment!!";
$what=Array("sitename","username","admins","adminlist","type");
$with=Array($sitename,users_table("username",$uid),$admins,$adminlist,$type);
Template($what,$with,"adminlist");
exit;
}

//////MEMBERS LIST//////
else if($mode=="members")
{
$page=get_var("page");
if(empty($page))$page=1;
$query=query("*",users,"banned='N' ORDER BY LOWER(username) LIMIT ".($page-1)*$usersperpage.",$usersperpage");
if(mysql_num_rows($query)>0){
while($row=mysql_fetch_array($query)){
if(profiles_table("sex",$row['id'])=="M")$color=" style=\"color:#0000FF;\"";
else if(profiles_table("sex",$row['id'])=="F")$color=" style=\"color:#FF0066;\"";
$age=profiles_table("age",$row['id']);
$sex=profiles_table("sex",$row['id']);
$location=profiles_table("location",$row['id']);
$userlist.="<a href=\"".$action."options".$mod."profile&amp;user=$row[username]".$session."\"$color>$row[username]</a> - <small>$age/$sex/$location</small><br/>\n";
}
}
$regmembers=num_rows("id",users,"banned='N'");
if($page>1)$controls.="<a href=\"".$action."options".$mod."members&amp;page=".($page-1).$session."\">-1 page</a>";
if($page>1&&$regmembers>=$page*$usersperpage)$controls.=" | ";
if($regmembers>=$page*$usersperpage)$controls.="<a href=\"".$action."options".$mod."members&amp;page=".($page+1).$session."\">+1 page</a>";
if($page>1||$regmembers>=($page+1)*$usersperpage)$controls.="<br/>\n";
if($page>2)$controls.="<a href=\"".$action."options".$mod."members&amp;page=".($page-2).$session."\">-2 pages</a>";
if($page>2&&$regmembers>=($page+1)*$usersperpage)$controls.=" | ";
if($regmembers>=($page+1)*$usersperpage)$controls.="<a href=\"".$action."options".$mod."members&amp;page=".($page+2).$session."\">+2 pages</a>";
if($page>2||$regmembers>=($page+1)*$usersperpage)$controls.="<br/>\n";
if($page>5)$controls.="<a href=\"".$action."options".$mod."members&amp;page=".($page-5).$session."\">-5 pages</a>";
if($page>5&&$regmembers>=($page+4)*$usersperpage)$controls.=" | ";
if($regmembers>=($page+4)*$usersperpage)$controls.="<a href=\"".$action."options".$mod."members&amp;page=".($page+5).$session."\">+5 pages</a>";
if($page>5||$regmembers>=($page+4)*$usersperpage)$controls.="<br/>\n";
if($page>10)$controls.="<a href=\"".$action."options".$mod."members&amp;page=".($page-10).$session."\">-10 pages</a>";
if($page>10&&$regmembers>=($page+9)*$usersperpage)$controls.=" | ";
if($regmembers>=($page+9)*$usersperpage)$controls.="<a href=\"".$action."options".$mod."members&amp;page=".($page+10).$session."\">+10 pages</a>";
if($page>10||$regmembers>=($page+9)*$usersperpage)$controls.="<br/>\n";
$what=Array("sitename","username","members","userlist","controls");
$with=Array($sitename,users_table("username",$uid),$regmembers,$userlist,$controls);
Template($what,$with,"allusers");
exit;
}

/////ONLINE USERS/////
else if($mode=="online")
{
$time=time();
$page=get_var("page");
if(empty($page))$page=1;
$guests=num_rows("sesid",sessions,"username='guest'");
$visible=num_rows("id",users,"$time-lastseen<=$offlinetime AND hidden='N'");
$online=num_rows("id",users,"$time-lastseen<=$offlinetime");
if($uid==$admin_id||IsAdmin($uid)){
$invisiblelist="invisible users:<br/>\n";
$query=query("*",users,"$time-lastseen<=$offlinetime AND hidden='Y' ORDER BY LOWER(username)");
if(mysql_num_rows($query)>0){
while($row=mysql_fetch_array($query)){
$usl=user_string($row['id']);
if(profiles_table("sex",$row['id'])=="M")$color=" style=\"color:#0000FF;\"";
else if(profiles_table("sex",$row['id'])=="F")$color=" style=\"color:#FF0066;\"";
$invisiblelist.="<a href=\"".$action."options".$mod."profile&amp;user=$row[username]&amp;return=1".$session."\"$color>".GetLevelSymbol($row[id])."$row[username]</a><small> $usl</small><br/>\n";
}
}
else $invisiblelist.="<img src=\"./images/point.gif\" alt=\"[!]\"/><small>no invisible users at the moment!!</small><br/>";
$visiblelist="visible users:<br/>\n";
}
$query=query("*",users,"$time-lastseen<=$offlinetime AND hidden='N' ORDER BY LOWER(username) LIMIT ".($page-1)*$usersperpage.",$usersperpage");
if(mysql_num_rows($query)>0){
while($row=mysql_fetch_array($query)){
$usl=user_string($row['id']);
if(profiles_table("sex",$row['id'])=="M")$color=" style=\"color:#0000FF;\"";
else if(profiles_table("sex",$row['id'])=="F")$color=" style=\"color:#FF0066;\"";
$visiblelist.="<a href=\"".$action."options".$mod."profile&amp;user=$row[username]&amp;return=1".$session."\"$color>".GetLevelSymbol($row[id])."$row[username]</a><small> $usl</small><br/>\n";
}
}
else $visiblelist.="<img src=\"./images/point.gif\" alt=\"[!]\"/><small>no visible users at the moment!!</small><br/>";
if($page>1)$controls.="<a href=\"".$action."options".$mod."online&amp;page=".($page-1).$session."\">&lt;- prev</a>";
if($page>1&&$visible>$page*$usersperpage)$controls.="\n | ";
if($visible>$page*$usersperpage)$controls.="<a href=\"".$action."options".$mod."online&amp;page=".($page+1).$session."\">next -&gt;</a>";
if($page>1||$visible>$page*$usersperpage)$controls.="<br/>";
$what=Array("sitename","username","guests","visible","online","invisiblelist","visiblelist","controls","history");
$with=Array($sitename,users_table("username",$uid),$guests,$visible,$online,$invisiblelist,$visiblelist,$controls,'');
Template($what,$with,"onlineusers");
exit;
}

/////SMILEY LIST/////
else if($mode=="smileys")
{
$page=get_var("page");
if(empty($page))$page=1;
$smileys=num_rows("id",smileys);
$query=query("*",smileys,"id>0 ORDER BY id,code LIMIT ".($page-1)*$smileysperpage.",$smileysperpage");
if(mysql_num_rows($query)>0){
while($row=mysql_fetch_array($query)){
$smileylist.="<img src=\"$row[path]\" alt=\"$row[code]\"/> - $row[code]<br/>\n";
}
}
else $smileylist.="<img src=\"./images/point.gif\" alt=\"[!]\"/><small>no smileys at the moment!!</small><br/>";
if($page>1)$controls.="<a href=\"".$action."options".$mod."smileys&amp;page=".($page-1).$session."\">&lt;- prev</a>";
if($page>1&&$smileys>$page*$smileysperpage)$controls.="\n | ";
if($smileys>$page*$smileysperpage)$controls.="<a href=\"".$action."options".$mod."smileys&amp;page=".($page+1).$session."\">next -&gt;</a>";
if($page>1||$smileys>$page*$smileysperpage)$controls.="<br/>";
$what=Array("sitename","username","smileys","smileylist","controls");
$with=Array($sitename,users_table("username",$uid),$smileys,$smileylist,$controls);
Template($what,$with,"smileys");
exit;
}

/////PROFILES/////
else if($mode=="profiles")
{
$what=Array("sitename","username");
$with=Array($sitename,users_table("username",$uid));
Template($what,$with,"profiles");
exit;
}

/////UPDATE USER PROFILES/////
else if($mode=="updateprofile")
{
$save=get_var("save");
$name=profiles_table("name",$uid);
$age=profiles_table("age",$uid);
$sex=profiles_table("sex",$uid);
if($sex=="F")$fslctd=" selected=\"selected\"";
else $sslctd="";
$location=profiles_table("location",$uid);
$maritalstatus=profiles_table("maritalstatus",$uid);
if($maritalstatus=="R")$rslctd=" selected=\"selected\"";
else $rslctd="";
if($maritalstatus=="P")$pslctd=" selected=\"selected\"";
else $pslctd="";
$likes=profiles_table("likes",$uid);
$hates=profiles_table("hates",$uid);
$photo=profiles_table("photo",$uid);
if($save==1){
$name=get_var("name");
$age=get_var("age");
$sex=get_var("sex");
$location=get_var("location");
$maritalstatus=get_var("maritalstatus");
$likes=get_var("likes");
$hates=get_var("hates");
$photo=get_var("photo");
if(empty($age)||$age<=0||empty($sex)||empty($location))$msg="<img src=\"./images/error.gif\" alt=\"[x]\"/><small>age, sex and location must not be blank!!</small><br/>";
else if(update(userprofiles,"name='$name',age=$age,sex='$sex',location='$location',maritalstatus='$maritalstatus',likes='$likes',hates='$hates',photo='$photo'","uid=$uid"))Location("act=options");
else $msg="<img src=\"./images/error.gif\" alt=\"[x]\"/><small>unable to update profile!!</small><br/>";
}
$what=Array("sitename","username","msg","name","age","sex","fslctd","location","maritalstatus","rslctd","pslctd","likes","hates","photo");
$with=Array($sitename,users_table("username",$uid),$msg,$name,$age,$sex,$fslctd,$location,$maritalstatus,$rslctd,$pslctd,$likes,$hates,$photo);
Template($what,$with,"updateprofile");
exit;
}

/////SHOW PROFILE/////
else if($mode=="profile")
{
$time=time();
$user=get_var("user");
$rid=get_var("rid");
$tid=get_var("tid");
$page=get_var("page");
$return=get_var("return");
if($return==1)$return="options&amp;mode=online";
else if($return==2&&!empty($rid))$return="chat&amp;mode=chat&amp;rid=$rid&amp;rand=$time";
else if($return==3&&!empty($fid))$return="forums&amp;mode=viewtopic&amp;page=$page&amp;tid=$tid";
else if($return==4)$return="findfriends&amp;mode=searchprofiles";
else if(empty($return))$return="home";
if(!SignupChars($user))$msg="<img src=\"./images/error.gif\" alt=\"[x]\"/><small>illegal chars used!!</small>";
else if(num_rows("id",users,"LOWER(username) = LOWER('$user')")==0){
$msg="<img src=\"./images/error.gif\" alt=\"[x]\"/><small>unknown username!!</small>";
}
else{
if(num_rows("uid",userprofiles,"uid='".IdFromUser($user)."'")==0){
$msg="<img src=\"./images/error.gif\" alt=\"[x]\"/><small>user does not have a profile!!</small>";
$what=Array("sitename","username","msg","user");
$with=Array($sitename,users_table("username",$uid),$msg,$user);
Template($what,$with,"searchprofile");
exit;
}
else{
$row_users=fetch_array("*",users,"id='".IdFromUser($user)."'");
$row_userprofiles=fetch_array("*",userprofiles,"uid='".IdFromUser($user)."'");
$row_sessions=fetch_array("*",sessions,"username='$user'");
$row_friends=fetch_array("*",friends,"uid='$uid' AND friendid='".IdFromUser($user)."'");
$lastseen=$row_users['lastseen'];
$onlinetime=TimeMsg($row_users['onlinetime']);
$idle=TimeMsg(time()-$lastseen);
$lastseen=date("g:ia D-jS/M/y",$lastseen);
$joined=date("D-jS/M/y",$row_users['regdate']);
$name=$row_userprofiles['name'];
$age=$row_userprofiles['age'];
$sex=$row_userprofiles['sex'];
if($sex=="M")$color="#0000FF";
else if($sex=="F")$color="#FF0066";
$nick="<span style=\"color:$color;\">$user</span>";
$s="<span style=\"color:$color;\">s</span>";
$location=$row_userprofiles['location'];
$maritalstatus=$row_userprofiles['maritalstatus'];
if($maritalstatus=="S")$maritalstatus="single";
else if($maritalstatus=="R")$maritalstatus="in relationship";
else if($maritalstatus=="M")$maritalstatus="married";
else $maritalstatus="unknown";
if(num_rows("id",chapel,"accepted='Y' AND (uid='".IdFromUser($user)."' OR fromid='".IdFromUser($user)."')")>0){
if(num_rows("id",chapel,"uid='".IdFromUser($user)."'")>0)$wap_nick=UserFromId(fetch_array("fromid",chapel,"uid='".IdFromUser($user)."'"));
else if(num_rows("id",chapel,"fromid='".IdFromUser($user)."'")>0)$wap_nick=UserFromId(fetch_array("uid",chapel,"fromid='".IdFromUser($user)."'"));
if(profiles_table("sex",IdFromUser($wap_nick))=="M")$color=" style=\"color:#0000FF;\"";
else if(profiles_table("sex",IdFromUser($wap_nick))=="F")$color=" style=\"color:#FF0066;\"";
$wappied="<br/>\n";
$wappied.="wappied to: <small><span$color>$wap_nick</span></small>";
}
$likes=$row_userprofiles['likes'];
$hates=$row_userprofiles['hates'];
$photo=$row_userprofiles['photo'];
if(empty($photo))$photo="";
else $photo="<img src=\"/phpThumb/phpThumb.php?src=$photo&amp;w=128&amp;f=png\" alt=\"user photo\"/><br/>\n<a href=\"$photo\">save as</a><br/>";
if(num_rows("sesid",sessions,"LOWER(username)=LOWER('$user')")==0)$device="unknown";
else {
$device=browser($row_sessions['browser']);
if($admin_id==$uid||IsAdmin($uid)){
$device.="<br/>\n".$row_sessions['ipaddress'];
}
}
$asl="$age/$sex/$location";
$status=GetLevelName(IdFromUser($user));
$friend=$row_friends['id'];
if(empty($friend)){
$toggletype="add friend";
$togglefriend="friends&amp;mode=add&amp;user=$user";
}
else{
$toggletype="remove friend";
$togglefriend="friends&amp;mode=del&amp;user=$user";
}
$what=Array("sitename","username","nick","s","msg","photo","status","name","asl","joined","lastseen","onlinetime","maritalstatus","wappied","likes","hates","idle","togglefriend","toggletype","device","user","return");
$with=Array($sitename,users_table("username",$uid),$nick,$s,$msg,$photo,$status,$name,$asl,$joined,$lastseen,$onlinetime,$maritalstatus,$wappied,$likes,$hates,$idle,$togglefriend,$toggletype,$device,$user,$return);
Template($what,$with,"showprofile");
exit;
}
}
$what=Array("sitename","username","msg","user");
$with=Array($sitename,users_table("username",$uid),$msg,$user);
Template($what,$with,"searchprofile");
exit;
}

/////APPEARANCE/////
else if($mode=="appearance")
{
$update=get_var("update");
$title="appear online/offline";
$m=$mod.$mode;
$return="options&mode=online";
$msg="<img src=\"./images/point.gif\" alt=\"[!]\"/><small>select yes to appear online or no to appear offline!!</small><br/>";
$var=users_table("hidden",$uid);
if($var=="N")$selected=" selected=\"selected\"";
else $selected="";
$input="<select name=\"var\">\n<option value=\"Y\">no</option>\n<option value=\"N\"$selected>yes</option>\n</select>";
if($update==1){
$var=get_var("var");
if(update(users,"hidden='$var'","id=$uid"))Location("act=$return");
else $msg="<img src=\"./images/error.gif\" alt=\"[x]\"/><small>unable to update appearance!!</small><br/>";
}
$what=Array("sitename","username","msg","title","length","m","input","var","return");
$with=Array($sitename,users_table("username",$uid),$msg,$title,$length,$m,$input,$var,$return);
Template($what,$with,"optiondialog");
exit;
}

/////CHANGE PASSWORD/////
else if($mode=="password")
{
$update=get_var("update");
$title="change password";
$length=10;
$m=$mod.$mode;
$return="options";
$msg="<img src=\"./images/point.gif\" alt=\"[!]\"/><small>enter new password, please make this harder for hackers to get into your account!!</small><br/>";
$var=users_table("password",$uid);
$input="<input type=\"text\" name=\"var\" maxlength=\"$length\" size=\"$length\" value=\"$var\"/>";
if($update==1){
$var=get_var("var");
if(IllegalChars($var))$msg="<img src=\"./images/error.gif\" alt=\"[x]\"/><small>Illegal chars found!!</small><br/>";
else if(empty($var))$msg="<img src=\"./images/error.gif\" alt=\"[x]\"/><small>password must not be blank!!</small><br/>";
else{
if(update(users,"password='$var'","id=$uid"))Location("act=logout");
else $msg="<img src=\"./images/error.gif\" alt=\"[x]\"/><small>unable to update password!!</small><br/>";
}
}
$what=Array("sitename","username","msg","title","length","m","input","var","return");
$with=Array($sitename,users_table("username",$uid),$msg,$title,$length,$m,$input,$var,$return);
Template($what,$with,"optiondialog");
exit;
}

/////USERNAME ADJUST/////
else if($mode=="nickadjust")
{
$update=get_var("update");
$title="username adjust";
$length=12;
$m=$mod.$mode;
$return="options";
$msg="<img src=\"./images/point.gif\" alt=\"[!]\"/><small>adjust the case content of your username, username could become UsErNaMe or USERNAME!!</small><br/>";
$var=UserFromId($uid);
$input="<input type=\"text\" name=\"var\" maxlength=\"$length\" size=\"$length\" value=\"$var\"/>";
if($update==1){
$var=get_var("var");
if(!SignupChars($var))$msg="<img src=\"./images/error.gif\" alt=\"[x]\"/><small>Illegal chars found!!</small><br/>";
else if(strtolower(UserFromId($uid))!=strtolower($var))$msg="<img src=\"./images/error.gif\" alt=\"[x]\"/><small>you cannot change your username!!</small><br/>";
else{
if(update(users,"username='$var'","id=$uid"))Location("act=options");
else $msg="<img src=\"./images/error.gif\" alt=\"[x]\"/><small>unable to update username!!</small><br/>";
}
}
$what=Array("sitename","username","msg","title","length","m","input","var","return");
$with=Array($sitename,users_table("username",$uid),$msg,$title,$length,$m,$input,$var,$return);
Template($what,$with,"optiondialog");
exit;
}

/////SITE STATISTICS/////
else if($mode=="statistics")
{
$what=Array("sitename","username");
$with=Array($sitename,users_table("username",$uid));
Template($what,$with,"statistics");
exit;
}

// ACCOUNT STATISTICS //
else if($mode=="accountstats")
{
$time=time();
$registeredusers=num_rows("id",users,"banned='N'");
$onlineusers=num_rows("id",users,"$time-lastseen<=$offlinetime");
$recentusedusers=num_rows("id",users,"$time-lastseen<=86400");
$bannedusers=num_rows("id",users,"banned='Y'");
$admins=num_rows("id",users,"admin='Y'");
$topuser=fetch_array("username",users,"id>0 ORDER BY onlinetime DESC LIMIT 1");
$what=Array("sitename","username","registeredusers","onlineusers","recentusedusers","bannedusers","admins","topuser");
$with=Array($sitename,users_table("username",$uid),$registeredusers,$onlineusers,$recentusedusers,$bannedusers,$admins,$topuser);
Template($what,$with,"accountstats");
exit;
}

// MESSAGE STATISTICS //
else if($mode=="messagestats")
{
$total=num_rows("id",messages);
$unread=num_rows("id",messages,"unread='Y'");
$fromu=num_rows("id",messages,"fromid=$uid");
$tou=num_rows("id",messages,"uid=$uid");
$what=Array("sitename","username","total","unread","fromu","tou");
$with=Array($sitename,users_table("username",$uid),$total,$unread,$fromu,$tou);
Template($what,$with,"messagestats");
exit;
}

/////UPDATE THEME/////
else if($mode=="theme")
{
$colors=array("990000","ff0000","ff6633","ff9900","ff9966","ffff00","339933","33cc33","00ff00","99ff99","000066","0000cc","3366ff","6699ff","00ffff","3399ff","990099","ff0099","ff9999","ffcccc","993300","cccc99","666666","000000","ffffff");
foreach($colors as $hexcolor)$bgcolors.="<a href=\"".$action."options".$mod."theme&amp;update=1&amp;bgcolor=$hexcolor".$session."\"><img src=\"/images/hex/".$hexcolor.".gif\" alt=\"[$hexcolor]\"/></a>\n";
foreach($colors as $hexcolor)$txtcolors.="<a href=\"".$action."options".$mod."theme&amp;update=1&amp;txtcolor=$hexcolor".$session."\"><img src=\"/images/hex/".$hexcolor.".gif\" alt=\"[$hexcolor]\"/></a>\n";
foreach($colors as $hexcolor)$linkcolors.="<a href=\"".$action."options".$mod."theme&amp;update=1&amp;linkcolor=$hexcolor".$session."\"><img src=\"/images/hex/".$hexcolor.".gif\" alt=\"[$hexcolor]\"/></a>\n";
foreach($colors as $hexcolor)$navcolors.="<a href=\"".$action."options".$mod."theme&amp;update=1&amp;navcolor=$hexcolor".$session."\"><img src=\"/images/hex/".$hexcolor.".gif\" alt=\"[$hexcolor]\"/></a>\n";
$bgcolor=get_var("bgcolor");
if(empty($bgcolor))$bgcolor=users_table("bgcolor",$uid);
$txtcolor=get_var("txtcolor");
if(empty($txtcolor))$txtcolor=users_table("txtcolor",$uid);
$linkcolor=get_var("linkcolor");
if(empty($linkcolor))$linkcolor=users_table("linkcolor",$uid);
$navcolor=get_var("navcolor");
if(empty($navcolor))$navcolor=users_table("navcolor",$uid);
$font=get_var("font");
if(empty($font))$font=users_table("font",$uid);
$update=get_var("update");
if($update==1){
if(update(users,"bgcolor='$bgcolor',txtcolor='$txtcolor',linkcolor='$linkcolor',navcolor='$navcolor',font='$font'","id=$uid"))$msg="<img src=\"/images/ok.gif\" alt=\"[ok]\"/><small>theme updated successfully!!</small><br/>";
else $msg="<img src=\"/images/error.gif\" alt=\"[x]\"/><small>could not update theme!!</small><br/>";
}
$what=Array("sitename","username","msg","bgcolors","txtcolors","linkcolors","navcolors");
$with=Array($sitename,users_table("username",$uid),$msg,$bgcolors,$txtcolors,$linkcolors,$navcolors);
Template($what,$with,"theme");
exit;
}

/////OPTIONS/////

?>