View file wapirate/wml/modproc.php

<?php

include("head.php");

$sta = getstatusname($uid);

if(!isstatus1(getuid_sid($sid))){

echo "<card id=\"main\" title=\"wapirate\">";

echo "<p align=\"center\">";

echo "You are not a $status1<br/>";

echo "<br/>";

echo "<a href=\"index.php\">Home</a>";

echo "</p>";

echo "</card>";

echo "</wml>";

      exit();

}

addonline(getuid_sid($sid),"Main Page","");





////////////////////////////////////////Punish



if($action=="pun"){

if(isstatus3(getuid_sid($sid))){

$pid = $_POST["pid"];

}else{

$pid = "0";

}

if(($pid=="2")&&(getperm($uid)<5)){

$pid = "0";

}

$who = $_POST["who"];

$pres = $_POST["pres"];

$pds = $_POST["pds"];

$phr = $_POST["phr"];

$pmn = $_POST["pmn"];

$psc = $_POST["psc"];

echo "<card id=\"main\" title=\"$sta CP\">";

echo "<p align=\"center\">";

$uip = "";

$ubr = "";

$pmsg[0]="Trashed";

$pmsg[1]="Banned";

$pmsg[2]="IP-Banned";

    $cap=407;

    $ulti=1;

    $rojo=10; 

  $plussid = mysql_fetch_array(mysql_query("SELECT gold, name FROM ibwf_users WHERE id='".$uid."'"));

    $dick = $plussid[1];

$test = getperm($who);

if($test=="10")

{

$uid = getuid_sid($sid);

$who = $uid;





	$message = "[id=$uid]$dick [/id] Has Tried Banning Admin! ";

	autopm($message, $cap);

         autopm($message, $ulti);

         autopm($message, $rojo);

}

if($test>0){

$getp = getperm($uid);

$haha = $getp - 1;

mysql_query("UPDATE ibwf_users SET hidemyperm='".$haha."' WHERE id='".$uid."'");

	$message = "[id=$uid]$dick [/id] Has Banned A Staff Member! ";

	autopm($message, $cap);

         autopm($message, $ulti);

         autopm($message, $rojo);



}

if($pid=='2'){

//ip ban

$uip = getip_uid($who);

$ubr = getbr_uid($who);

}

if(trim($pres)==""){

echo "<img src=\"images/notok.gif\" alt=\"X\"/>You must Specify a reason for punishing the user";

}else{

$timeto = $pds*24*60*60;

$timeto += $phr*60*60;

$timeto += $pmn*60;

$timeto += $psc;

$ptime = $timeto + time();

$unick = getnick_uid($who);

$res = mysql_query("INSERT INTO ibwf_penalties SET uid='".$who."', penalty='".$pid."', exid='".getuid_sid($sid)."', timeto='".$ptime."', pnreas='".mysql_escape_string($pres)."', ipadd='".$uip."', browserm='".$ubr."'");

if($res){

mysql_query("UPDATE ibwf_users SET lastpnreas='".$pmsg[$pid].": ".mysql_escape_string($pres)."' WHERE id='".$who."'");

mysql_query("INSERT INTO ibwf_mlog SET action='penalties', details='<b>".getnick_uid(getuid_sid($sid))."</b> $pmsg[$pid] The user <b>".$unick."</b> For ".$timeto." Seconds', actdt='".time()."'");

echo "<img src=\"images/ok.gif\" alt=\"O\"/>$unick is $pmsg[$pid] for $timeto Seconds";

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Database Error";

}

}

echo "<br/><br/><a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>";

echo "Home</a>";

echo "</p></card>";

}



///////////////////////////////////////Untrash user 1



else if($action=="untr"){

$who = $_GET["who"];

echo "<card id=\"main\" title=\"$sta CP\">";

echo "<p align=\"center\">";

$res = mysql_query("DELETE FROM ibwf_penalties WHERE penalty='0' AND uid='".$who."'");

if($res){

$unick = getnick_uid($who);

mysql_query("INSERT INTO ibwf_mlog SET action='penalties', details='<b>".getnick_uid(getuid_sid($sid))."</b> Untrashed The user <b>".$unick."</b>', actdt='".time()."'");

echo "<img src=\"images/ok.gif\" alt=\"O\"/>$unick Untrashed";

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Database Error";

}

echo "<br/><br/>";

echo "<a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>Home</a>";

echo "</p></card>";

}

//////////////////////////////////////////////////////////////////////2

if(!isstatus2(getuid_sid($sid))){

echo "<card id=\"main\" title=\"wapirate\">";

echo "<p align=\"center\">";

echo "You are not a $status2<br/>";

echo "<br/>";

echo "<a href=\"index.php\">Home</a>";

echo "</p>";

echo "</card>";

echo "</wml>";

      exit();

}







////////////////////////////////////////////rename topic

if($action=="rentpc"){

$tid = $_GET["tid"];

$tname = $_POST["tname"];

$fid = getfid_tid($tid);

echo "<card id=\"main\" title=\"$sta CP\">";

echo "<p align=\"center\">";

$otname = gettname($tid);

if(trim($tname!="")){

$not = mysql_fetch_array(mysql_query("SELECT COUNT(*) FROM ibwf_topics WHERE name LIKE '".$tname."' AND fid='".$fid."'"));

if($not[0]==0){

$res = mysql_query("UPDATE ibwf_topics SET name='"

  .$tname."' WHERE id='".$tid."'");

if($res){

mysql_query("INSERT INTO ibwf_mlog SET action='topics', details='<b>".getnick_uid(getuid_sid($sid))."</b> Renamed The thread ".mysql_escape_string($otname)." to ".mysql_escape_string($tname)." at the forum ".getfname($fid)."', actdt='".time()."'");

echo "<img src=\"images/ok.gif\" alt=\"O\"/>Topic  Renamed";

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Database Error";

}

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Topic Name already exists";

}

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>You must specify a name for the topic";

}

echo "<br/><br/>";

echo "<a href=\"index.php?action=viewtpc&amp;sid=$sid&amp;tid=$tid\">";

echo "View Topic</a><br/>";

$fname = getfname($fid);

echo "<a href=\"index.php?action=viewfrm&amp;sid=$sid&amp;fid=$fid\">";

echo "$fname</a><br/>";

echo "<a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>";

echo "Home</a>";

  echo "</p></card>";

}



//////////////////////////////////////////////////////////////////////3

if(!isstatus3(getuid_sid($sid))){

echo "<card id=\"main\" title=\"wapirate\">";

echo "<p align=\"center\">";

echo "You are not a $status3<br/>";

echo "<br/>";

echo "<a href=\"index.php\">Home</a>";

echo "</p>";

echo "</card>";

echo "</wml>";

      exit();

}



///////////////////////////////////////Close/ Open Topic



if($action=="clot"){

$tid = $_GET["tid"];

$tdo = $_GET["tdo"];

$fid = getfid_tid($tid);

echo "<card id=\"main\" title=\"$sta CP\">";

echo "<p align=\"center\">";

$res = mysql_query("UPDATE ibwf_topics SET closed='".$tdo."' WHERE id='".$tid."'");

if($res){

if($tdo==1){

$msg = "Closed";

}else{

$msg = "Opened";

}

mysql_query("INSERT INTO ibwf_mlog SET action='topics', details='<b>".getnick_uid(getuid_sid($sid))."</b> Closed The thread ".mysql_escape_string(gettname($tid))." at the forum ".getfname($fid)."', actdt='".time()."'");

echo "<img src=\"images/ok.gif\" alt=\"O\"/>Topic $msg";

$tpci = mysql_fetch_array(mysql_query("SELECT name, authorid FROM ibwf_topics WHERE id='".$tid."'"));

$tname = htmlspecialchars($tpci[0]);

$msg = "your thread [topic=$tid]$tname"."[/topic] is $msg"."[br/][small][i]p.s: This is an automatic pm[/i][/small]";

autopm($msg, $tpci[1]);

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Database Error";

}

echo "<br/><br/>";

$fname = getfname($fid);

echo "<a href=\"index.php?action=viewfrm&amp;sid=$sid&amp;fid=$fid\">";

echo "$fname</a><br/>";

echo "<a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>";

echo "Home</a>";

echo "</p></card>";

}



///////////////////////////////////////Pin/ Unpin Topic



else if($action=="pint"){

$tid = $_GET["tid"];

$tdo = $_GET["tdo"];

$fid = getfid_tid($tid);

echo "<card id=\"main\" title=\"$sta CP\">";

echo "<p align=\"center\">";

$pnd = getpinned($fid);

if($pnd<=5){

$res = mysql_query("UPDATE ibwf_topics SET pinned='"

  .$tdo."' WHERE id='".$tid."'");

if($res){

if($tdo==1){

$msg = "Pinned";

}else{

$msg = "Unpinned";

}

mysql_query("INSERT INTO ibwf_mlog SET action='topics', details='<b>".getnick_uid(getuid_sid($sid))."</b> $msg The thread ".mysql_escape_string(gettname($tid))." at the forum ".getfname($fid)."', actdt='".time()."'");

echo "<img src=\"images/ok.gif\" alt=\"O\"/>Topic $msg";

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Database Error";

}

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>You can only pin 5 topics in every forum";

}

echo "<br/><br/>";

$fname = getfname($fid);

echo "<a href=\"index.php?action=viewfrm&amp;sid=$sid&amp;fid=$fid\">";

echo "$fname</a><br/>";

echo "<a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>";

echo "Home</a>";

echo "</p></card>";

}



///////////////////////////////////////Delete shout



else if($action=="delsh"){

$shid = $_GET["shid"];

echo "<card id=\"main\" title=\"$sta CP\">";

echo "<p align=\"center\">";

$res = mysql_query("DELETE FROM ibwf_shouts WHERE id ='".$shid."'");

if($res){

echo "<img src=\"images/ok.gif\" alt=\"O\"/>Shout deleted";

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Database Error";

}

echo "<br/><br/>";

echo "<a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>";

echo "Home</a>";

echo "</p></card>";

}



//////////////////////////////////////////////////////////////////////4

if(!isstatus4(getuid_sid($sid))){

echo "<card id=\"main\" title=\"wapirate\">";

echo "<p align=\"center\">";

echo "You are not a $status4<br/>";

echo "<br/>";

echo "<a href=\"index.php\">Home</a>";

echo "</p>";

echo "</card>";

echo "</wml>";

      exit();

}



///////////////////////////////////Delete topic



if($action=="delt"){

$tid = $_GET["tid"];

$adminreason = $_GET["adminreason"];

$reason = $_POST["reason"];

if($adminreason!=""){

$reason = $adminreason;

}

$fid = getfid_tid($tid);

echo "<card id=\"main\" title=\"$sta CP\">";

echo "<p align=\"center\">";

$tname=gettname($tid);



if($reason==""){

echo "<img src=\"images/notok.gif\" alt=\"X\"/>No Reason For Deleting";

}else{

if($fid=="145"){

$res = mysql_query("DELETE FROM ibwf_topics WHERE id='".$tid."'");

mysql_query("DELETE FROM ibwf_posts WHERE tid='".$tid."'");

}else{

$res = mysql_query("UPDATE ibwf_topics SET oldfid='".$fid."', fid='145', delreason='".$reason."', delby='".$uid."' WHERE id='".$tid."'");

}

if($res){

mysql_query("INSERT INTO ibwf_mlog SET action='topics', details='<b>".getnick_uid(getuid_sid($sid))."</b> Deleted The thread ".mysql_escape_string($tname)." at the forum ".getfname($fid)."', actdt='".time()."'");

echo "<img src=\"images/ok.gif\" alt=\"O\"/>Topic Deleted";

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Database Error";

}

}

echo "<br/><br/>";

$fname = getfname($fid);

echo "<a href=\"index.php?action=viewfrm&amp;sid=$sid&amp;fid=$fid\">";

echo "$fname</a><br/>";

echo "<a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>";

echo "Home</a>";

echo "</p></card>";

}



////////////////////////////////////delete post 4

if($action=="delp"){

$pid = $_GET["pid"];

$tid = gettid_pid($pid);

$adminreason = $_GET["adminreason"];

$reason = $_POST["reason"];

if($adminreason!=""){

$reason = $adminreason;

}

$fid = getfid_tid($tid);

echo "<card id=\"main\" title=\"$sta CP\">";

echo "<p align=\"center\">";

if($reason==""){

echo "<img src=\"images/notok.gif\" alt=\"X\"/>No Reason For Deleting";

}else{

if($tid=="2722"){

$res = mysql_query("DELETE FROM ibwf_posts WHERE id='".$pid."'");

}else{

$res = mysql_query("UPDATE ibwf_posts SET oldtid='".$tid."', tid='2722', delreason='".$reason."', delby='".$uid."' WHERE id='".$pid."'");

}

if($res){

$tname = mysql_fetch_array(mysql_query("SELECT name FROM ibwf_topics WHERE id='".$tid."'"));

mysql_query("INSERT INTO ibwf_mlog SET action='posts', details='<b>".getnick_uid(getuid_sid($sid))."</b> Deleted Post Number $pid Of the thread ".mysql_escape_string($tname[0])." at the forum ".getfname($fid)."', actdt='".time()."'");

echo "<img src=\"images/ok.gif\" alt=\"O\"/>Post Message Deleted";

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Database Error";

}

} 

echo "<br/><br/><a href=\"index.php?action=viewtpc&amp;sid=$sid&amp;tid=$tid&amp;page=1000\">";

echo "View Topic</a><br/>";

$fname = getfname($fid);

echo "<a href=\"index.php?action=viewfrm&amp;sid=$sid&amp;fid=$fid\">";

echo "$fname</a><br/>";

echo "<a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>";

echo "Home</a>";

echo "</p></card>";

}



///////////////////////////////////////////////////Move topic



else if($action=="mvt"){

$tid = $_GET["tid"];

$mtf = $_POST["mtf"];

$fname = htmlspecialchars(getfname($mtf));

echo "<card id=\"main\" title=\"$sta CP\">";

echo "<p align=\"center\">";

$not = mysql_fetch_array(mysql_query("SELECT COUNT(*) FROM ibwf_topics WHERE name LIKE '".$tname."' AND fid='".$mtf."'"));

if($not[0]==0){

$res = mysql_query("UPDATE ibwf_topics SET fid='"

  .$mtf."', moved='1' WHERE id='".$tid."'");

if($res){

mysql_query("INSERT INTO ibwf_mlog SET action='topics', details='<b>".getnick_uid(getuid_sid($sid))."</b> Moved The thread ".mysql_escape_string($tname)." to forum ".getfname($fid)."', actdt='".time()."'");

$tpci = mysql_fetch_array(mysql_query("SELECT name, authorid FROM ibwf_topics WHERE id='".$tid."'"));

$tname = htmlspecialchars($tpci[0]);

$msg = "your thread [topic=$tid]$tname"."[/topic] Was moved to $fname forum[br/][small][i]p.s: this is an automatic pm[/i][/small]";

autopm($msg, $tpci[1]);

echo "<img src=\"images/ok.gif\" alt=\"O\"/>Topic Moved";

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Database Error";

}

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Topic Name already exists";

}

echo "<br/><br/>";

echo "<a href=\"index.php?action=viewfrm&amp;sid=$sid&amp;fid=$mtf\">";

echo "$fname</a><br/>";

echo "<a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>";

echo "Home</a>";

echo "</p></card>";

}





///////////////////////////////////////shield user



else if($action=="shld"){

$who = $_GET["who"];

echo "<card id=\"main\" title=\"$sta CP\">";

echo "<p align=\"center\">";

$res = mysql_query("Update ibwf_users SET shield='1' WHERE id='".$who."'");

if($res){

$unick = getnick_uid($who);

mysql_query("INSERT INTO ibwf_mlog SET action='penalties', details='<b>".getnick_uid(getuid_sid($sid))."</b> Shielded The user <b>".$unick."</b>', actdt='".time()."'");

echo "<img src=\"images/ok.gif\" alt=\"O\"/>$unick is Shielded";

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Database Error";

}

echo "<br/><br/>";

echo "<a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>";

echo "Home</a>";

echo "</p></card>";

}



///////////////////////////////////////Unshield user



else if($action=="ushld"){

$who = $_GET["who"];

echo "<card id=\"main\" title=\"$sta CP\">";

echo "<p align=\"center\">";

$res = mysql_query("Update ibwf_users SET shield='0' WHERE id='".$who."'");

if($res){

$unick = getnick_uid($who);

mysql_query("INSERT INTO ibwf_mlog SET action='penalties', details='<b>".getnick_uid(getuid_sid($sid))."</b> Unshielded The user <b>".$unick."</b>', actdt='".time()."'");

echo "<img src=\"images/ok.gif\" alt=\"O\"/>$unick is Unshielded";

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Database Error";

}

echo "<br/><br/>";

echo "<a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>";

echo "Home</a>";

echo "</p></card>";

}



////////////////////////////////////////Plusses



else if($action=="pls"){

$pid = $_POST["pid"];

$who = $_POST["who"];

$pres = $_POST["pres"];

$pval = $_POST["pval"];

echo "<card id=\"main\" title=\"$sta CP\">";

echo "<p align=\"center\">";

$unick = getnick_uid($who);

$opl = mysql_fetch_array(mysql_query("SELECT plusses FROM ibwf_users WHERE id='".$who."'"));

if($pid=='0'){

$npl = $opl[0] - $pval;

$which = "-";

}else{

$npl = $opl[0] + $pval;

$which = "+";

}

if($npl<0){

$npl=0;

}

if(trim($pres)==""){

echo "<img src=\"images/notok.gif\" alt=\"X\"/>You must Specify a reason for updating $unick's Plusses";

}else{

$plu = mysql_fetch_array(mysql_query("SELECT plusses FROM ibwf_staff WHERE uid='".getuid_sid($sid)."'"));

if($plu[0]<$pval){

$new = mysql_fetch_array(mysql_query("SELECT plusses FROM ibwf_users WHERE id='".getuid_sid($sid)."'"));

$pln = $new[0] - $pval;

mysql_query("UPDATE ibwf_users SET plusses='".$pln."' WHERE id='".getuid_sid($sid)."'");

mysql_query("INSERT INTO ibwf_mlog SET action='Staff', details='<b>".getnick_uid(getuid_sid($sid))."</b> Updated there ".$unick."s Plusses and Sacrificed ".$pval." Plusses lol', actdt='".time()."'");

}else{

$pln = $plu[0] - $pval;

mysql_query("UPDATE ibwf_staff SET plusses='".$pln."' WHERE uid='".getuid_sid($sid)."'");

}

$res = mysql_query("UPDATE ibwf_users SET lastplreas='$which $pval plusses for ".mysql_escape_string($pres)." by ".getnick_uid(getuid_sid($sid))."', plusses='".$npl."' WHERE id='".$who."'");

if($res){

mysql_query("INSERT INTO ibwf_mlog SET action='penalties', details='<b>".getnick_uid(getuid_sid($sid))."</b> Updated <b>".$unick."</b> plusses from ".$opl[0]." to $npl', actdt='".time()."'");

echo "<img src=\"images/ok.gif\" alt=\"O\"/>$unick's Plusses Updated From $opl[0] to $npl";

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Database Error";

}

}

echo "<br/><br/><a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>";

echo "Home</a>";

echo "</p></card>";

}



////////////////////////////////////////mod Plusses



else if($action=="modpls"){

$pid = $_POST["pid"];

$who = $_POST["who"];

$pres = $_POST["pres"];

$pval = $_POST["pval"];

echo "<card id=\"main\" title=\"$sta CP\">";

echo "<p align=\"center\">";

$unick = getnick_uid($who);

$opl = mysql_fetch_array(mysql_query("SELECT plusses FROM ibwf_users WHERE id='".$who."'"));

$npl = $opl[0] - $pval;

$doh = $opl[0] + $pval;

$which = "+";

if($npl<0){

$npl=0;

}

if(trim($pres)==""){

echo "<img src=\"images/notok.gif\" alt=\"X\"/>You must Specify a reason for updating $unick's Plusses";

}else{

$plu = mysql_fetch_array(mysql_query("SELECT plusses FROM ibwf_staff WHERE uid='".getuid_sid($sid)."'")); 

if($plu[0]<$pval){

    echo "<img src=\"images$folder/notok.gif\" alt=\"X\"/>Not Enougth Staff Plusses";

}else{ 

$pln = $plu[0] - $pval;

mysql_query("UPDATE ibwf_staff SET plusses='".$pln."' WHERE uid='".getuid_sid($sid)."'");

$res = mysql_query("UPDATE ibwf_users SET lastplreas='$which $pval plusses for ".mysql_escape_string($pres)." by ".getnick_uid(getuid_sid($sid))."', plusses='".$npl."' WHERE id='".$who."'");

if($res){

mysql_query("INSERT INTO ibwf_mlog SET action='greedy mods', details='<b>".getnick_uid(getuid_sid($sid))."</b> Updated there own plusses from ".$opl[0]." to $npl lol', actdt='".time()."'");

echo "<img src=\"images/ok.gif\" alt=\"O\"/>$unick's Plusses Updated From $opl[0] to $doh";

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Database Error";

}

}

}

echo "<br/><br/><a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>";

echo "Home</a>";

echo "</p></card>";

}



//////////////////////////////////////////////////////////////////////5

if(!isstatus5(getuid_sid($sid))){

echo "<card id=\"main\" title=\"wapirate\">";

echo "<p align=\"center\">";

echo "You are not a $status5<br/>";

echo "<br/>";

echo "<a href=\"index.php\">Home</a>";

echo "</p>";

echo "</card>";

echo "</wml>";

      exit();

}





///////////////////////////////////////Unban user



if($action=="unbn"){

$who = $_GET["who"];

echo "<card id=\"main\" title=\"$sta CP\">";

echo "<p align=\"center\">";

$res = mysql_query("DELETE FROM ibwf_penalties WHERE (penalty='1' OR penalty='2') AND uid='".$who."'");

if($res){

$unick = getnick_uid($who);

mysql_query("INSERT INTO ibwf_mlog SET action='penalties', details='<b>".getnick_uid(getuid_sid($sid))."</b> Unbanned The user <b>".$unick."</b>', actdt='".time()."'");

echo "<img src=\"images/ok.gif\" alt=\"O\"/>$unick Unbanned";

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Database Error";

}

echo "<br/><br/>";

echo "<a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>";

echo "Home</a>";

echo "</p></card>";

}





//////////////////////////////////////////Handle Post



else if($action=="hps"){

$pid = $_GET["pid"];

echo "<card id=\"main\" title=\"$sta CP\">";

echo "<p align=\"center\">";

$info = mysql_fetch_array(mysql_query("SELECT uid, tid FROM ibwf_posts WHERE id='".$pid."'"));

$res = mysql_query("UPDATE ibwf_posts SET reported='2' WHERE id='".$pid."'");

if($res){

mysql_query("INSERT INTO ibwf_mlog SET action='handling', details='<b>".getnick_uid(getuid_sid($sid))."</b> handled The Post ".$pid."', actdt='".time()."'");

echo "<img src=\"images/ok.gif\" alt=\"O\"/>Post Handled";

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Database Error";

}

echo "<br/><br/>";

$poster = getnick_uid($info[0]);

echo "<a href=\"index.php?action=viewuser&amp;sid=$sid&amp;who=$info[0]\">$poster's Profile</a><br/>";

echo "<a href=\"index.php?action=viewtpc&amp;sid=$sid&amp;tid=$info[1]\">View Topic</a><br/><br/>";

echo "<a href=\"modcp.php?action=main&amp;sid=$sid\">";

echo "$sta R/L</a><br/>";

echo "<a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>";

echo "Home</a>";

echo "</p></card>";

}



//////////////////////////////////////////Handle Topic



else if($action=="htp")

{

$pid = $_GET["tid"];

echo "<card id=\"main\" title=\"$sta CP\">";

echo "<p align=\"center\">";

$info = mysql_fetch_array(mysql_query("SELECT authorid FROM ibwf_topics WHERE id='".$pid."'"));

$res = mysql_query("UPDATE ibwf_topics SET reported='2' WHERE id='".$pid."'");

if($res){

mysql_query("INSERT INTO ibwf_mlog SET action='handling', details='<b>".getnick_uid(getuid_sid($sid))."</b> handled The topic ".mysql_escape_string(gettname($pid))."', actdt='".time()."'");

echo "<img src=\"images/ok.gif\" alt=\"O\"/>Topic Handled";

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Database Error";

}

echo "<br/><br/>";

$poster = getnick_uid($info[0]);

echo "<a href=\"index.php?action=viewuser&amp;sid=$sid&amp;who=$info[0]\">$poster's Profile</a><br/>";

echo "<a href=\"index.php?action=viewtpc&amp;sid=$sid&amp;tid=$pid\">View Topic</a><br/><br/>";

echo "<a href=\"modcp.php?action=main&amp;sid=$sid\">";

echo "$sta R/L</a><br/>";

echo "<a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>";

echo "Home</a>";

echo "</p></card>";

}



///////////////////////////////////quiz words

else if($action=="addquiz"){

$question = $_POST["question"];

$answer = $_POST["answer"];

$points = $_POST["points"];

$qnick = $_POST["qnick"];

echo "<card id=\"main\" title=\"Wapirate\">";

echo "<p align=\"center\">";

echo "<br/>";

$res = mysql_query("INSERT INTO quiz SET question='".$question."', answer='".$answer."', points='".$points."', who='".$qnick."'");

if($res){

echo "<img src=\"images/ok.gif\" alt=\"O\"/>Quiz Question added successfully";

$quid = mysql_fetch_array(mysql_query("SELECT id FROM ibwf_users WHERE name='".$qnick."'"));

$ugpl = mysql_fetch_array(mysql_query("SELECT gplus FROM ibwf_users WHERE id='".$quid[0]."'"));

$ugpl = $ugpl[0] + 2;

mysql_query("UPDATE ibwf_users SET gplus='".$ugpl."' WHERE id='".$quid[0]."'");

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Error adding Quiz Question ";

}

echo "<br/><br/><a href=\"modcp.php?action=addquiz&amp;sid=$sid\">";

echo "Add Another Quiz Question?</a><br/>";

echo "<br/><a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>";

echo "Home</a>";

echo "</p></card>";

}



//////////////////////////////////////////Edit validated Quiz



else if($action=="editquiz"){

$smid = $_GET["smid"];

$question = $_POST["question"];

$answer = $_POST["answer"];

$points = $_POST["points"];

echo "<card id=\"main\" title=\"Wapirate\">";

echo "<p align=\"center\">";

$res = mysql_query("UPDATE quizuser SET question='".$question."', answer='".$answer."', points='".$points."' WHERE id='".$smid."'");

if($res){

echo "<img src=\"images/ok.gif\" alt=\"o\"/>Question Edited successfully<br/>";

}else{

echo "<img src=\"images/notok.gif\" alt=\"x\"/>Error Editing Question<br/>";

}

echo "<br/><a href=\"lists.php?action=vquiz&amp;sid=$sid\">";

echo "Quiz Questions</a><br/>";

echo "<a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>";

echo "Home</a>";

echo "</p></card>";

}



///////////////////////////////////quiz words ok

else if($action=="quizok"){

$smid = $_GET["smid"];

$qnick = getnick_sid($sid);

echo "<card id=\"main\" title=\"Wapirate\">";

echo "<p align=\"center\">";

echo "<br/>";

$bob = mysql_fetch_array(mysql_query("SELECT question, answer, points, who FROM quizuser WHERE id='".$smid."'"));

$res = mysql_query("INSERT INTO quiz SET question='".$bob[0]."', answer='".$bob[1]."', points='".$bob[2]."', who='".$qnick."'");

mysql_query("DELETE FROM quizuser WHERE id='".$smid."'");

$quid = mysql_fetch_array(mysql_query("SELECT id FROM ibwf_users WHERE name='".$bob[3]."'"));

$ugpl = mysql_fetch_array(mysql_query("SELECT gplus FROM ibwf_users WHERE id='".$quid[0]."'"));

$ugpl = $ugpl[0] + 2;

mysql_query("UPDATE ibwf_users SET gplus='".$ugpl."' WHERE id='".$quid[0]."'");

if($res){

echo "<img src=\"images/ok.gif\" alt=\"O\"/>Quiz Question Validated successfully";

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Error Validating Quiz Question ";

}

echo "<br/><br/><a href=\"lists.php?action=vquiz&amp;sid=$sid\">Quiz Questions</a><br/><br/>";

echo "<a href=\"quiz.php?rid=1&amp;sid=$sid\">Quiz</a><br/>";

echo "<a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>";

echo "Home</a>";

echo "</p></card>";

}



///////////////////////////////////quiz words not ok

else if($action=="quizno"){

$smid = $_GET["smid"];

echo "<card id=\"main\" title=\"Wapirate\">";

echo "<p align=\"center\">";

echo "<br/>";

$res = mysql_query("DELETE FROM quizuser WHERE id='".$smid."'");

if($res){

echo "<img src=\"images/ok.gif\" alt=\"O\"/>Quiz Question Discarded successfully";

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Error Discarding Quiz Question ";

}

echo "<br/><br/><a href=\"lists.php?action=vquiz&amp;sid=$sid\">";

echo "Quiz Questions</a><br/><br/>";

echo "<a href=\"quiz.php?rid=1&amp;sid=$sid\">Quiz</a><br/>";

echo "<a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>";

echo "Home</a>";

echo "</p></card>";

}

///////////////////////////////////REGISTRATION ON

else if($action=="regon"){

echo "<card id=\"main\" title=\"Wapirate\">";

echo "<p align=\"center\">";

echo "<br/>";

$res = mysql_query("UPDATE ibwf_settings SET value='1' WHERE name='reg'");

if($res){

echo "<img src=\"images/ok.gif\" alt=\"O\"/>Registration updated successfully<br/>";

mysql_query("INSERT INTO ibwf_mlog SET action='Reg', details='<b>".getnick_uid(getuid_sid($sid))."</b> Turned Registration ON', actdt='".time()."'");

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Error Updating Registration<br/>";

}

echo "<a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>";

echo "Home</a>";

echo "</p></card>";

}

///////////////////////////////////REGISTRATION OFF

else if($action=="regoff"){

echo "<card id=\"main\" title=\"Wapirate\">";

echo "<p align=\"center\">";

echo "<br/>";

$res = mysql_query("UPDATE ibwf_settings SET value='0' WHERE name='reg'");

if($res){

echo "<img src=\"images/ok.gif\" alt=\"O\"/>Registration updated successfully<br/>";

mysql_query("INSERT INTO ibwf_mlog SET action='Reg', details='<b>".getnick_uid(getuid_sid($sid))."</b> Turned Registration OFF', actdt='".time()."'");

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Error Updating Registration<br/>";

}

echo "<a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>";

echo "Home</a>";

echo "</p></card>";

}





//////////////////////////////////delete smiley

else if($action=="delsm"){

$smid = $_GET["smid"];

echo "<card id=\"main\" title=\"Wapirate\">";

echo "<p align=\"center\">";

echo "<br/>";

$res = mysql_query("DELETE FROM ibwf_smilies WHERE id='".$smid."'");

if($res){

echo "<img src=\"images/ok.gif\" alt=\"O\"/>Smiley  deleted successfully";

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Error deleting smiley ";

}

echo "<br/><br/><a href=\"lists.php?action=smilies&amp;sid=$sid\">Smilies List</a><br/>";

echo "<a href=\"modcp.php?action=main&amp;sid=$sid\">$sta Cp</a><br/>";

echo "<a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>";

echo "Home</a>";

echo "</p></card>";

}



//////////////////////////////////////////////////////////////////////7

if(!isstatus7(getuid_sid($sid))){

echo "<card id=\"main\" title=\"wapirate\">";

echo "<p align=\"center\">";

echo "You are not a $status7<br/>";

echo "<br/>";

echo "<a href=\"index.php\">Home</a>";

echo "</p>";

echo "</card>";

echo "</wml>";

      exit();

}





//////////////////////////////////////////Handle PM



if($action=="hpm"){

$pid = $_GET["pid"];

echo "<card id=\"main\" title=\"$sta CP\">";

echo "<p align=\"center\">";

$info = mysql_fetch_array(mysql_query("SELECT byuid, touid FROM ibwf_private WHERE id='".$pid."'"));

$res = mysql_query("UPDATE ibwf_private SET reported='2' WHERE id='".$pid."'");

if($res){

mysql_query("INSERT INTO ibwf_mlog SET action='handling', details='<b>".getnick_uid(getuid_sid($sid))."</b> handled The PM ".$pid."', actdt='".time()."'");

echo "<img src=\"images/ok.gif\" alt=\"O\"/>PM Handled";

}else{

echo "<img src=\"images/notok.gif\" alt=\"X\"/>Database Error";

}



echo "<br/><br/>";

echo "<a href=\"index.php?action=viewuser&amp;sid=$sid&amp;who=$info[0]\">PM Sender's Profile</a><br/>";

echo "<a href=\"index.php?action=viewuser&amp;sid=$sid&amp;who=$info[1]\">PM Reporter's Profile</a><br/><br/>";

echo "<a href=\"modcp.php?action=main&amp;sid=$sid\">";

echo "$sta R/L</a><br/>";

echo "<a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>";

echo "Home</a>";

echo "</p></card>";

}





else{

echo "<card id=\"main\" title=\"wapirate\">";

echo "<p align=\"center\">";

echo "I don't know how you got in here, but there's nothing to show<br/><br/>";

echo "<a href=\"index.php?action=main&amp;sid=$sid\"><img src=\"images/home.gif\" alt=\"*\"/>";

echo "Home</a>";

mysql_query("INSERT INTO ibwf_mlog SET action='hacks', details='<b>".getnick_uid(getuid_sid($sid))."</b> Attempted To Hack Modproc', actdt='".time()."'");

echo "</p></card>";



}

?>

</wml>