View file wapirate/xhtml/mblog.php

World Fastest and Cheapest Hosting
Buy Cheapest Web Domains
File size: 15.56Kb 
<?php
include("head.php");
$bid = $_GET["bid"];
$item = $_GET["item"];
$nopl = mysql_fetch_array(mysql_query("SELECT birthday, gold, box FROM ibwf_users WHERE id='".$uid."'"));
$uage = getage($nopl[0]);
///////////////////////////////////////
if($action=="main")
{
addonline(getuid_sid($sid),"Media Blogs","");
echo "<div><br/>Media Blogs<br/></div>";
echo "<p align=\"center\">";
if($nopl[1]>100){
echo "<a href=\"mblog.php?action=create\">Create Media Blog</a><br/>";
}else{
echo "You Need Over 100 Gold To Add A Media Blog!<br/>";
}
echo "</p>";
    if($page=="" || $page<=0)$page=1;

if($uage>17){
 $noi = mysql_fetch_array(mysql_query("SELECT COUNT(*) FROM media_blog"));
}else{
 $noi = mysql_fetch_array(mysql_query("SELECT COUNT(*) FROM media_blog WHERE adult='0'"));
}
    $num_items = $noi[0]; //changable
$items_per_page= 5;
    $num_pages = ceil($num_items/$items_per_page);
    if($page>$num_pages)$page= $num_pages;
    $limit_start = ($page-1)*$items_per_page;
if($num_items>0)
    {

    //changable sql
if($uage>17){
$sql = "SELECT id, name, description, uid, anonymous FROM media_blog ORDER BY id DESC LIMIT $limit_start, $items_per_page";
}else{
$sql = "SELECT id, name, description, uid, anonymous FROM media_blog WHERE adult='0' ORDER BY id DESC LIMIT $limit_start, $items_per_page";
}
    echo "<p>";
    $items = mysql_query($sql);
    echo mysql_error();
    while ($item = mysql_fetch_array($items))
    {
$des = parsepm($item[2], $sid,left,$item[3]);

if($item[4]==0){
$nick = getnick_uid($item[3]);
$name = "<a href=\"index.php?action=viewuser&amp;who=$item[3]\">$nick</a>";
}else{
if((isstatus10(getuid_sid($sid)))&&($uid!=3944)){
$nick = getnick_uid($item[3]);
$adm = "(<a href=\"index.php?action=viewuser&amp;who=$item[3]\">$nick</a>) ";
}
$name = "$adm Anonymous!";
}
$text = htmlspecialchars($item[1]);
$text = getspam($text);
if(isstatus10(getuid_sid($sid))||$uid==$item[3]){
$del = "<a href=\"mblog.php?action=delall&amp;bid=$item[0]\">[x]</a>";
}else{
$del = "";
}
echo "<a href=\"mblog.php?action=blog&amp;bid=$item[0]\">$text</a> By $name $del<br/>Description: $des<br/><br/>";
}
    echo "</p>";
    echo "<p align=\"center\">";

if($page > 1){ 
    $prev = ($page - 1);
    echo "<a href=\"mblog.php?action=$action&amp;page=$prev\">Previous</a> ";
}


if($page < $num_pages){ 
    $next = ($page + 1); 
    echo "<a href=\"mblog.php?action=$action&amp;page=$next\">Next</a><br/>"; 
}
echo "<br/>$page/$num_pages<br/>"; 

    if($num_pages>2)
    {
      echo "</p>";
      echo "<center>";
      $rets = "<form action=\"mblog.php\" method=\"get\">";
      $rets .= "<input name=\"page\" style=\"-wap-input-format: '*N'\" size=\"2\"/>";
      $rets .= "<input type=\"hidden\" name=\"action\" value=\"$action\"/>";
      $rets .= "<input type=\"Submit\" name=\"Submit\" Value=\"Go To Page\"></form>";
      echo $rets;
      echo "</center>";
      echo "<p align=\"center\">";
    }


}else{
echo "<p align=\"center\">";
echo "<b>No Blogs At Preset Time!</b><br/>";
}
echo getfoot($sid,$folder);
exit();
}


///////////////////////////////////////
else if($action=="blog")
{
addonline(getuid_sid($sid),"Media Blogs","");
$blog = mysql_fetch_array(mysql_query("SELECT uid, name, description, adult, anonymous, items, pic FROM media_blog WHERE id='".$bid."'"));

echo "<div><br/>$blog[1]<br/></div>";
echo "<p align=\"center\">";
    if($page=="" || $page<=0)$page=1;
if($blog[6]!=""||ceil(filesize($blog[6])/1024)>1){
echo "<a href=\"full.php?image=$blog[6]\"><img src=\"thumb.php?image=$blog[6]\" alt=\"$blog[1]\"/></a><br/>";
}

if($blog[0]==$uid||isstatus10(getuid_sid($sid))){
echo "<a href=\"mblog.php?action=add&amp;bid=$bid\">Add Item</a><br/>";
echo "<a href=\"mblog.php?action=create&amp;bid=$bid\">Edit Blog</a><br/>";
}

if($page==1){
$des = parsepm($item[1], $sid,left,$item[3]);
echo "$des<br/><br/>";
}

 $noi = mysql_fetch_array(mysql_query("SELECT COUNT(*) FROM media_items WHERE pid='".$bid."'"));
if($noi[0]<1){
echo "This Blog Is Under Construction!<br/>";
}
echo "</p>";
    $num_items = $noi[0]; //changable
$items_per_page= $blog[5]; //default 5
    $num_pages = ceil($num_items/$items_per_page);
    if($page>$num_pages)$page= $num_pages;
    $limit_start = ($page-1)*$items_per_page;
if($num_items>0)
    {


$sql = "SELECT id, name, url FROM media_items  WHERE pid='".$bid."' ORDER BY id DESC LIMIT $limit_start, $items_per_page";

    echo "<p>";
    $items = mysql_query($sql);
    echo mysql_error();
    while ($item = mysql_fetch_array($items))
    {
$text = htmlspecialchars($item[1]);
$text = getspam($text);
      $ext = getext($item[2]);
        $ime = getextimg($ext);

echo "<a href=\"mblog.php?action=view&amp;bid=$bid&amp;item=$item[0]\">$ime $text</a>.$ext<br/><br/>";

}
    echo "</p>";
    echo "<p align=\"center\">";

if($page > 1){ 
    $prev = ($page - 1);
    echo "<a href=\"mblog.php?action=$action&amp;page=$prev&amp;bid=$bid\">Previous</a> ";
}


if($page < $num_pages){ 
    $next = ($page + 1); 
    echo "<a href=\"mblog.php?action=$action&amp;page=$next&amp;bid=$bid\">Next</a><br/>"; 
}
echo "<br/>$page/$num_pages<br/>"; 

    if($num_pages>2)
    {
      echo "</p>";
      echo "<center>";
      $rets = "<form action=\"mblog.php\" method=\"get\">";
      $rets .= "<input name=\"page\" style=\"-wap-input-format: '*N'\" size=\"2\"/>";
      $rets .= "<input type=\"hidden\" name=\"action\" value=\"$action\"/>";
      $rets .= "<input type=\"hidden\" name=\"bid\" value=\"$bid\"/>";
      $rets .= "<input type=\"Submit\" name=\"Submit\" Value=\"Go To Page\"></form>";
      echo $rets;
      echo "</center>";
      echo "<p align=\"center\">";
    }


}else{
echo "<p align=\"center\">";
echo "<b>No Blog Items At Preset Time!</b><br/>";
}
echo "<a href=\"mblog.php?action=main\">Media Blogs</a><br/>";
echo "BB Code For Blog:<input name=\"BBcode\" value=\"[mblog=$bid]$blog[1][/mblog]\"/><br/>";
echo getfoot($sid,$folder);
exit();
}
//////////////////////////////
else if($action=="view")
{
$item = $_GET["item"];
$itemi = mysql_fetch_array(mysql_query("SELECT name, url, description FROM media_items WHERE id='".$item."'"));

$user = mysql_fetch_array(mysql_query("SELECT uid FROM media_blog WHERE id='".$bid."'"));

$ext = getext($itemi[1]);
$ext = strtolower($ext);
if(($ext=="jpg")||($ext=="jpeg")||($ext=="png")||($ext=="bmp")){
$download = "<a href=\"full.php?image=$itemi[1]$col\"><img src=\"thumb.php?image=$itemi[1]$col\" alt=\"$itemi[0]\"/><br/>Download</a><br/>";
}else if($ext=="gif"){
$download = "<a href=\"$itemi[1]\"><img src=\"thumb.php?image=$itemi[1]\" alt=\"$itemi[0]\"/><br/>Download</a><br/>";
}else{
$download = "<a href=\"$itemi[1]\">Download </a><br/>";
}
$text = htmlspecialchars($itemi[0]);
$text = getspam($text);

if($uid!=$itemi[4]){
mysql_query("UPDATE ibwf_users SET rep=rep+1 WHERE id='".$itemi[4]."'");
}
?>
<div><br/><?=$text?>!<br/></div>
<p align="center">
<?
$des = parsepm($itemi[2], $sid,$nothing,$user[0]);
echo "$des<br/><br/>";
echo $download;
echo "<br/><br/>";
?>
<?

if((isstatus10(getuid_sid($sid)))&&($uid!=3944)){
$nick = getnick_uid($user[0]);
echo "Posted by <a href=\"index.php?action=viewuser&amp;who=$user[0]\">$nick</a><br/>";
}
if(isstatus10(getuid_sid($sid))||$uid==$user[0]){
echo "<a href=\"mblog.php?action=add&amp;item=$item&amp;bid=$bid\">Edit</a><br/>";
echo "<a href=\"mblog.php?action=del&amp;item=$item&amp;bid=$bid\">Delete</a><br/>";
}
echo "<a href=\"mblog.php?action=blog&amp;bid=$bid\">Back</a><br/>";
echo "<a href=\"mblog.php?action=main\">Media Blogs</a><br/>";
echo getfoot($sid,$folder);
exit();
}


//////////////////////////////
else if($action=="add")
{
addonline(getuid_sid($sid),"Media blogs","");
$rad = mysql_fetch_array(mysql_query("SELECT name, url, description, id, pid FROM media_items WHERE pid='".$item."'"));
$user = mysql_fetch_array(mysql_query("SELECT uid FROM media_blog WHERE id='".$rad[4]."'"));
$button = "Add";
if($item!=""){
$item = "&amp;item=$item";
$button = "Edit";
}

echo "<div><br/>$button Media Blog!<br/></div>";
echo "<center>";
?>
Need An Uploader? then <a href="http://wapirate.wen.ru/upload/x.html">Click Here</a><br/>
Note: After uploading just type the name of your file into the url box eg:<br/>
Url: <input value="funny.3gp"/><br/>
And Our System will sort the address out for you!<br/><br/>
<?
if($rad[3]>0&&$user[0]!=$uid&&!isstatus10(getuid_sid($sid))){
echo "This blog does not belong To You!<br/>";
}else{
echo "<form action=\"mblog.php?action=add2&amp;bid=$bid$item\" method=\"post\">";
echo "Name: <input name=\"name\" maxlength=\"50\" value=\"$rad[0]\"/><br/>";
echo "Url: <input name=\"url\" value=\"$rad[1]\"/><br/>";
if($nopl[2]==0){
echo "Description: <input name=\"des\"  maxlength=\"255\" value=\"$rad[2]\"/><br/><br/>";
}else{
 echo "Description: <textarea name=\"des\">$rad[2]</textarea><br/><br/>";
}
echo "<input type=\"submit\" value=\"$button\"/>";
echo "</form>"; 
}
echo "</center>";
echo "<p align=\"center\">";
echo "<a href=\"mblog.php?action=blog&amp;bid=$bid\">Back</a><br/>";
echo "<a href=\"mblog.php?action=main\">Media Blogs</a><br/>";
echo getfoot($sid,$folder);
exit();
}
/////////////////////////////////////////
else if($action=="add2")
{
addonline(getuid_sid($sid),"Media Blogs","");
echo "<div><br/>Add Media<br/></div>";
echo "<p align=\"center\">";
$name = $_POST["name"];
$url = $_POST["url"];
$des = $_POST["des"];
if(substr_count($url,"http://")<1){
$url = "http://ultijenx.wen.ru/files/$url";
}
$rad = mysql_fetch_array(mysql_query("SELECT  id, pid FROM media_items WHERE pid='".$item."'"));
$user = mysql_fetch_array(mysql_query("SELECT uid FROM media_blog WHERE id='".$rad[1]."'"));
if($rad[0]>0&&$user[0]!=$uid&&!isstatus10(getuid_sid($sid))){
echo "This blog does not belong To You!<br/>";
}else{
if($name==""){
echo "No Name<br/>";
}else{
if($item!=""){
$res = mysql_query("UPDATE media_items SET description='".$des."', url='".$url."', name='".$name."' WHERE pid='".$item."'");
$what = "Edited";
}else{
$res = mysql_query("INSERT INTO media_items SET description='".$des."', url='".$url."', name='".$name."', pid='".$bid."'");
$what = "Added";
}
if($res){
echo "<img src=\"images/ok.gif\" alt=\"0\"/><br/>";
      echo "<b>Media $what Successfully!</b><br/>";
}else{
echo "Fuck a Duck somethings wrong lol<br/>";
}
}
}
echo "<a href=\"mblog.php?action=blog&amp;bid=$bid\">Back</a><br/>";
echo "<a href=\"mblog.php?action=main\">Media Blogs</a><br/>";
echo getfoot($sid,$folder);
exit();
}

//////////////////////////////
else if($action=="create")
{
addonline(getuid_sid($sid),"Media blogs","");
$rad = mysql_fetch_array(mysql_query("SELECT name, description, pic, adult, anonymous, uid, id FROM media_blog WHERE id='".$bid."'"));
$button = "Create";
if($bid!=""){
$bid = "&amp;bid=$bid";
$button = "Edit";
}
echo "<div><br/>$button Media Blog!<br/></div>";
echo "<center>";
if($rad[6]>0&&$rad[5]!=$uid&&!isstatus10(getuid_sid($sid))){
echo "This blog does not belong To You!<br/>";
}else{
echo "<form action=\"mblog.php?action=create2$bid\" method=\"post\">";
echo "Name: <input name=\"name\" maxlength=\"50\" value=\"$rad[0]\"/><br/>";
echo "Description: <input name=\"des\"  maxlength=\"255\" value=\"$rad[1]\"/><br/>";
echo "(Can leave blank) Pic Url: <input name=\"pic\"  maxlength=\"255\" value=\"$rad[2]\"/><br/>";
if($uage>17){
echo "Adult: <select name=\"adult\">";
echo "<option value=\"0\">No</option>";
if($rad[3]=="1"){$selected=" selected=\"selected\"";}else{$selected="";}
echo "<option value=\"1\"$selected>Yes</option>";
echo "</select><br/>";
}
echo "Anonymous: <select name=\"anon\">";
echo "<option value=\"0\">No</option>";
if($rad[4]=="1"){$selected=" selected=\"selected\"";}else{$selected="";}
echo "<option value=\"1\"$selected>Yes</option>";
echo "</select><br/>";
echo "<input type=\"submit\" value=\"$button\"/>";
echo "</form>"; 
}
echo "</center>";
echo "<p align=\"center\">";
echo "<a href=\"mblog.php?action=main\">Media Blogs</a><br/>";
echo getfoot($sid,$folder);
exit();
}

/////////////////////////////////////////
else if($action=="create2")
{
addonline(getuid_sid($sid),"Media Blogs","");
echo "<div><br/>Add Media Blog<br/></div>";
echo "<p align=\"center\">";
$name = $_POST["name"];
$pic = $_POST["pic"];
$des = $_POST["des"];
$adult = $_POST["adult"];
$anon = $_POST["anon"];
if($adult==""){
$adult = 0;
}
if($pic==""){
$pic = "http://wapirate.net/images/logo.gif";
}
if(substr_count($pic,"http://")<1){
$pic = "http://ultijenx.wen.ru/files/$pic";
}
$rad = mysql_fetch_array(mysql_query("SELECT uid, id FROM media_blog WHERE id='".$bid."'"));
if($rad[1]>0&&$rad[0]!=$uid&&!isstatus10(getuid_sid($sid))){
echo "This blog does not belong To You!<br/>";
}else{
if($name==""){
echo "No Name<br/>";
}else{
if($bid!=""){
$res = mysql_query("UPDATE media_blog SET description='".$des."', pic='".$pic."', name='".$name."', adult='".$adult."', anonymous='".$anon."' WHERE id='".$bid."'");
$what = "Edited";
}else{
$res = mysql_query("INSERT INTO media_blog SET uid='".$uid."', description='".$des."', pic='".$pic."', name='".$name."', adult='".$adult."', anonymous='".$anon."'");
$what = "Added";
}
if($res){
echo "<img src=\"images/ok.gif\" alt=\"0\"/><br/>";
      echo "<b>Media $what Successfully!</b><br/>";
}else{
echo "Fuck a Duck somethings wrong lol<br/>";
}
}
}
echo "<a href=\"mblog.php?action=main\">Media Blogs</a><br/>";
echo getfoot($sid,$folder);
exit();
}

//////////////////////////////
else if($action=="del")
{
$itemi = mysql_fetch_array(mysql_query("SELECT pid FROM media_items WHERE pid='".$item."'"));

$user = mysql_fetch_array(mysql_query("SELECT uid FROM media_blog WHERE id='".$itemi[0]."'"));
$sure = $_GET["sure"];

?>
<div><br/>Delete!<br/></div>
<p align="center">
<?
if(isstatus10(getuid_sid($sid))||$uid==$user[0]){
if($sure==""){
echo "Are You Sure? <br/><a href=\"mblog.php?action=del&amp;item=$item&amp;sure=1\">Yes</a><br/><br/>";
}else{
$rad = mysql_query("DELETE FROM media_items WHERE id='".$item."'");
if($rad){
echo "<img src=\"images/ok.gif\" alt=\"0\"/><br/>";
      echo "<b>Media Deleted Successfully!</b><br/>";
}else{
echo "Fuck a Duck somethings wrong lol<br/>";
}
}
}else{
echo "This is Not Yours!<br/>";
}
echo "<a href=\"mblog.php?action=blog&amp;bid=$bid\">Back</a><br/>";
echo "<a href=\"mblog.php?action=main\">Media Blogs</a><br/>";
echo getfoot($sid,$folder);
exit();
}

//////////////////////////////
else if($action=="delall")
{

$user = mysql_fetch_array(mysql_query("SELECT uid FROM media_blog WHERE id='".$bid."'"));
$sure = $_GET["sure"];

?>
<div><br/>Delete!<br/></div>
<p align="center">
<?
if(isstatus10(getuid_sid($sid))||$uid==$user[0]){
if($sure==""){
echo "Are You Sure? <br/><a href=\"mblog.php?action=delall&amp;bid=$bid&amp;sure=1\">Yes</a><br/><br/>";
}else{
$rad = mysql_query("DELETE FROM media_items WHERE pid='".$bid."'");
$rad = mysql_query("DELETE FROM media_blog WHERE id='".$bid."'");
if($rad){
echo "<img src=\"images/ok.gif\" alt=\"0\"/><br/>";
      echo "<b>Blog Deleted Successfully!</b><br/>";
}else{
echo "Fuck a Duck somethings wrong lol<br/>";
}
}
}else{
echo "This is Not Yours!<br/>";
}
echo "<a href=\"mblog.php?action=main\">Media Blogs</a><br/>";
echo getfoot($sid,$folder);
exit();
}


/////////////////////////////////////////////////////////
else{
addonline(getuid_sid($sid),"Lost In Media blogs","");
echo "<div><br/>Doh!<br/></div>";
echo "<p align=\"center\">";
echo "Nothing To Show Here lol!<br/><br/>";
echo getfoot($sid,$folder);
exit();
}
?>