View file wapirate/xhtml/modxproc.php

File size: 25.45Kb
<?php



include("head.php");

$sta = getstatusname($uid);

if(!isstatus7(getuid_sid($sid)))

  {

     echo "<head>";

    echo "<title>Error!!!</title>";

    echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"themes$bgi.php\">";

    echo "</head>";

    echo "<body>";

     echo "<div><br/>Doh!<br/></div>";  

      echo "<p align=\"center\">";

      echo "You are not an $status7<br/>";

      echo "<br/>";

      echo "<a href=\"index.php\">Home</a>";

      echo "</p>";

    echo "<div>$addy</div>";

    echo "</body>";

    echo "</html>";

      exit();

}

    addonline(getuid_sid($sid),"Main Page","");





///////////////////////////////////spam block

if($action=="addspam"){

$smlcde = $_POST["smlcde"];

$smlsrc = $_POST["smlsrc"];

echo "<div><br/>Add Spam Block<br/></div>";

echo "<p align=\"center\">";

echo "<br/>";

$res = mysql_query("INSERT INTO ibwf_spam SET scode='".$smlcde."', imgsrc='".$smlsrc."', hidden='0'");

if($res){

echo "<img src=\"images$folder/ok.gif\" alt=\"O\"/>Spam Block added successfully";

}else{

echo "<img src=\"images$folder/notok.gif\" alt=\"X\"/>Error adding Spam Block ";

}

echo "<br/><br/><a href=\"admincp.php?action=addspam\">";

echo "Add Another Spam Block</a><br/>";

echo "<a href=\"lists.php?action=spam\">Spam Block List</a><br/>";

echo "<a href=\"modxcp.php?action=modxcp\"><img src=\"images$folder/admn.gif\" alt=\"*\"/>";

echo "$sta CP</a><br/>";

echo getfoot($sid,$folder);

exit(); 

}



//////////////////////////////////////delete spam block

else if($action=="delspam"){

$smid = $_GET["smid"];

echo "<div><br/>Delete Spam Block<br/></div>";

echo "<p align=\"center\">";

echo "<br/>";

$res = mysql_query("DELETE FROM ibwf_spam WHERE id='".$smid."'");

if($res){

echo "<img src=\"images$folder/ok.gif\" alt=\"O\"/>Spam Block deleted successfully";

}else{

echo "<img src=\"images$folder/notok.gif\" alt=\"X\"/>Error deleting Spam Block ";

}

echo "<br/><a href=\"lists.php?action=spam\">Spam Block List</a><br/>";

echo "<br/><br/><a href=\"modxcp.php?action=modxcp\"><img src=\"images$folder/admn.gif\" alt=\"*\"/>";

echo "$sta CP</a><br/>";

echo getfoot($sid,$folder);

exit(); 

}



///////////////////////////////////bb code

if($action=="addbb"){

$smlcde = $_POST["smlcde"];

$smlsrc = $_POST["smlsrc"];

echo "<div><br/>Add BB Code<br/></div>";

echo "<p align=\"center\">";

echo "<br/>";

$res = mysql_query("INSERT INTO ibwf_bbcode SET scode='".$smlcde."', imgsrc='".$smlsrc."', hidden='0'");

if($res){

echo "<img src=\"images$folder/ok.gif\" alt=\"O\"/>BB Code added successfully";

}else{

echo "<img src=\"images$folder/notok.gif\" alt=\"X\"/>Error adding BB Code";

}

echo "<br/><br/><a href=\"admincp.php?action=addbb\">";

echo "Add Another BB Code</a><br/>";

echo "<a href=\"lists.php?action=bbs\">BB Code List</a><br/>";

echo "<a href=\"modxcp.php?action=modxcp\"><img src=\"images$folder/admn.gif\" alt=\"*\"/>";

echo "$sta CP</a><br/>";

echo getfoot($sid,$folder);

exit(); 

}



//////////////////////////////////////delete bb code

else if($action=="delbb"){

$smid = $_GET["smid"];

echo "<div><br/>Delete BB Code<br/></div>";

echo "<p align=\"center\">";

echo "<br/>";

$res = mysql_query("DELETE FROM ibwf_bbcode WHERE id='".$smid."'");

if($res){

echo "<img src=\"images$folder/ok.gif\" alt=\"O\"/>BB Code Deleted Successfully";

}else{

echo "<img src=\"images$folder/notok.gif\" alt=\"X\"/>Error deleting BB Code";

}

echo "<br/><a href=\"lists.php?action=bbs\">BB Code List</a><br/>";

echo "<br/><br/><a href=\"modxcp.php?action=modxcp\"><img src=\"images$folder/admn.gif\" alt=\"*\"/>";

echo "$sta CP</a><br/>";

echo getfoot($sid,$folder);

exit(); 

}



//////////////////////////////////////////Update profile



else if($action=="uprof"){

$who = $_GET["who"];

$unick = getnick_uid($who);

$savat = $_POST["savat"];

$semail = $_POST["semail"];

$ubday = $_POST["ubday"];

$uloc = $_POST["uloc"];

$usig = $_POST["usig"];

$usex = $_POST["usex"];

echo "<div><br/>$unick's Profile<br/></div>";

echo "<p align=\"center\">";

if(isstatus9(getuid_sid($sid))){

$perm = $_POST["perm"];

$test = getperm($who);

if($perm>4){

$res = mysql_query("UPDATE ibwf_users SET  hidemyperm='0' WHERE id='".$uid."'");

mysql_query("INSERT INTO ibwf_mlog SET action='hacks', details='<b>".getnick_uid(getuid_sid($sid))."</b> Attempted To Hack a Higher status', actdt='".time()."'");

}else{

if($test<5){

$res = mysql_query("UPDATE ibwf_users SET avatar='".$savat."', email='".$semail."', birthday='".$ubday."', location='".$uloc."', signature='".$usig."', sex='".$usex."', hidemyperm='".$perm."' WHERE id='".$who."'");

}else{

$res = mysql_query("UPDATE ibwf_users SET avatar='".$savat."', email='".$semail."', birthday='".$ubday."', location='".$uloc."', signature='".$usig."', sex='".$usex."' WHERE id='".$who."'");

}

}

}else{

$res = mysql_query("UPDATE ibwf_users SET avatar='".$savat."', email='".$semail."', birthday='".$ubday."', location='".$uloc."', signature='".$usig."', sex='".$usex."' WHERE id='".$who."'");

}

if($res){

echo "<img src=\"images$folder/ok.gif\" alt=\"o\"/>$unick's profile was updated successfully<br/>";

}else{

echo "<img src=\"images$folder/notok.gif\" alt=\"x\"/>Error updating $unick's profile<br/>";

}

echo "<br/><a href=\"modxcp.php?action=chuinfo\">";

echo "Users Info</a><br/>";

echo "<a href=\"modxcp.php?action=modxcp\"><img src=\"images$folder/admn.gif\" alt=\"*\"/>";

echo "$sta CP</a><br/>";

echo getfoot($sid,$folder);

exit(); 

}

/////////////////////////////////////////////////

if(!isstatus8(getuid_sid($sid)))

  {

     echo "<head>";

    echo "<title>Error!!!</title>";

    echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"themes$bgi.php\">";

    echo "</head>";

    echo "<body>";

     echo "<div><br/>Doh!<br/></div>";  

      echo "<p align=\"center\">";

      echo "You are not an $status8<br/>";

      echo "<br/>";

      echo "<a href=\"index.php\">Home</a>";

      echo "</p>";

    echo "<div>$addy</div>";

    echo "</body>";

    echo "</html>";

      exit();

}



//////////////////////////add blocked site//////////////////////////

if($action=="addsite")

{

echo "<div><br/>That Will Stop The Idiots! lol<br/></div>";

  echo "<p align=\"center\">";

  $site = $_POST["site"];

  $res = mysql_query("INSERT INTO ibwf_blockedsite SET site='".$site."'");

  if($res)

  {

  echo mysql_error();

  echo "<img src=\"../images$folder/ok.gif\" alt=\"O\"/>Site $site Added Successfully to Blocked List<br/>";

  }else{

  echo "<img src=\"../images$folder/notok.gif\" alt=\"X\"/>Error Adding Site<br/>";

  }

  echo "<br/>";

  echo "<a href=\"modxcp.php?action=blocksites\">Blocked Sites List</a><br/>";

  echo "<a href=\"modxcp.php?action=modxcp\"><img src=\"../images$folder/admn.gif\" alt=\"\"/>$sta CP</a><br/>";

echo getfoot($sid,$folder);

exit();

  }



//////////////////////////delete blocked site//////////////////////////

else if($action=="delsite")

{

echo "<div><br/>Delete Blocked Site<br/></div>";

  echo "<p align=\"center\">";

  $id=$_GET["id"];

  $sitena = mysql_query("SELECT site FROM ibwf_blockedsite WHERE id='".$id."'");

  $site = mysql_fetch_array($sitena);

  $site=$site[0];

  $res = mysql_query("DELETE FROM ibwf_blockedsite WHERE id='".$id."'");

  if($res)

  {

  echo "<img src=\"../images$folder/ok.gif\" alt=\"O\"/>Site $site Removed Successfully from Blocked List<br/>";

  }else{

  echo "<img src=\"../images$folder/notok.gif\" alt=\"X\"/>Error Removing $site <br/>";

  }

  echo "<br/>";

  echo "<a href=\"modxcp.php?action=blocksites\">Blocked Sites List</a><br/>";

  echo "<a href=\"modxcp.php?action=modxcp\"><img src=\"../images$folder/admn.gif\" alt=\"\"/>$sta CP</a><br/>";

echo getfoot($sid,$folder);

exit();

}



/////////////////////////////8

else if($action=="addnews"){

$news = $_POST["news"];

$title = $_POST["title"];

$date = "".date("D d M y ")."";

   echo "<div><br/>Add News<br/></div>";

echo "<p align=\"center\">";

echo "<br/>";

$res = mysql_query("INSERT INTO ibwf_news SET news='".$news."', date='".$date."', scode='".$title."'");

if($res){

echo "<img src=\"images$folder/ok.gif\" alt=\"O\"/>News added successfully";

}else{

echo "<img src=\"images$folder/notok.gif\" alt=\"X\"/>Error adding News ";

}

echo "<br/><br/><a href=\"modxcp.php?action=addnews\">Add More News</a><br/>";

echo "<br/><br/><a href=\"modxcp.php?action=modxcp\"><img src=\"../images$folder/admn.gif\" alt=\"\"/>$sta CP</a><br/>";

echo getfoot($sid,$folder);

exit();

}



////////////////////////////////8

else if($action=="delnews"){

$newsid = $_GET["newsid"];

   echo "<div><br/>Delete News<br/></div>";

echo "<p align=\"center\">";

echo "<br/>";

$res = mysql_query("DELETE FROM ibwf_news WHERE id='".$newsid."'");

if($res){

echo "<img src=\"images$folder/ok.gif\" alt=\"O\"/>News deleted successfully";

}else{

echo "<img src=\"images$folder/notok.gif\" alt=\"X\"/>Error deleting News ";

}

echo "<br/><br/><a href=\"modxcp.php?action=modxcp\"><img src=\"../images$folder/admn.gif\" alt=\"\"/>$sta CP</a><br/>";

echo getfoot($sid,$folder);

exit();

}



//////////////////////////////////////////Edit News  8

else if($action=="editnews"){

$newsid = $_GET["newsid"];

$title = $_POST["title"];

$news = $_POST["news"];

$date = $_POST["date"];

    echo "<div><br/>Edit News<br/></div>";

echo "<p align=\"center\">";

$res = mysql_query("UPDATE ibwf_news SET scode='".$title."', news='".$news."', date='".$date."' WHERE id='".$newsid."'");

if($res){

echo "<img src=\"images$folder/ok.gif\" alt=\"o\"/>News Edited successfully<br/>";

}else{

echo "<img src=\"images$folder/notok.gif\" alt=\"x\"/>Error Editing News<br/>";

}

echo "<br/><a href=\"lists2.php?action=news\">";

echo "News</a><br/>";

echo "<br/><br/><a href=\"modxcp.php?action=modxcp\"><img src=\"../images$folder/admn.gif\" alt=\"\"/>$sta CP</a><br/>";

echo getfoot($sid,$folder);

exit();

}



////////////////////////////////////////8

else if($action=="addfaqs"){

$question = $_POST["question"];

$answer = $_POST["answer"];

echo "<div><br/>Add Faqs<br/></div>";

echo "<p align=\"center\">";

echo "<br/>";

$res = mysql_query("INSERT INTO ibwf_faqs SET question='".$question."', answer='".$answer."'");

if($res){

echo "<img src=\"images$folder/ok.gif\" alt=\"o\"/>Faq Added Successfully<br/>";

}else{

echo "<img src=\"images$folder/notok.gif\" alt=\"x\"/>Error Adding Faq<br/>";

}

echo "<br/><br/><a href=\"modxcp.php?action=modxcp\"><img src=\"../images$folder/admn.gif\" alt=\"\"/>$sta CP</a><br/>";

echo getfoot($sid,$folder);

exit();

}

////////////////////////////////////////Delete Faq 8

else if($action=="delfaqs"){

$faqid = $_GET["faqid"];

echo "<div><br/>Delete Faq<br/></div>";

echo "<p align=\"center\">";

echo "<br/>";

$res = mysql_query("DELETE FROM ibwf_faqs WHERE id='".$faqid."'");

if($res){

echo "<img src=\"images$folder/ok.gif\" alt=\"O\"/>Faq Deleted Successfully<br/>";

}else{

echo "<img src=\"images$folder/notok.gif\" alt=\"X\"/>Error Deleting Faq<br/>";

}

echo "<br/><br/><a href=\"modxcp.php?action=modxcp\"><img src=\"../images$folder/admn.gif\" alt=\"\"/>$sta CP</a><br/>";

echo getfoot($sid,$folder);

exit();

}





//////////////////////////delete background image 8

else if($action=="delbgi")

{

echo "<div><br/>Delete Font<br/></div>";

  echo "<p align=\"center\">";

  $bgid=$_POST["bgid"];



  $res = mysql_query("DELETE FROM background_images WHERE id='".$bgid."'");

  if($res)

  {

  echo "<img src=\"../images$folder/ok.gif\" alt=\"O\"/>Image Deleted Successfully<br/>";

  }else{

  echo "<img src=\"../images$folder/notok.gif\" alt=\"X\"/>Error Deleting Image<br/>";

  }

echo "<br/><br/><a href=\"modxcp.php?action=modxcp\"><img src=\"../images$folder/admn.gif\" alt=\"\"/>$sta CP</a><br/>";

echo getfoot($sid,$folder);

exit();

}



////////////////////////////////////////background image 8///uploader needed

///////////////////////////add profile pic

else if($action=="addppic")

{

  addonline(getuid_sid($sid),"Uploading Profile Pic","");

   echo "<div><br/>Add Profile Pic!<br/></div>"; 

      echo "<p align=\"center\">";



////////////here

$size_bytes=1204800;

$kb = $size_bytes / 1024;

$extlimit="yes";

$limitedext=array(".jpg",".jpeg",".gif",".png");

$ext=strtolower(strrchr($_FILES['filetoupload'][name],'.'));

$file_type=$_FILES['filetoupload']['type'];

$file_name=$_FILES['filetoupload']['name'];

$file_size=$_FILES['filetoupload']['size'];

$file_tmp=$_FILES['filetoupload']['tmp_name'];



$nop = substr_count($file_name,"php");

$now = substr_count($file_name,"wml");

$noh = substr_count($file_name,"htm");



if(!is_uploaded_file($_FILES['filetoupload']['tmp_name'])){

echo "<img src=\"../images$folder/notok.gif\" alt=\"[x]\"/>No file selected!<br/>";

}

else if($extlimit=="yes" && !in_array($ext,$limitedext)){

echo "<img src=\"../images$folder/notok.gif\" alt=\"[x]\"/>Invalid file type!<br/>";

mysql_query("INSERT INTO ibwf_mlog SET action='Dodgy', details='<b>".getnick_uid(getuid_sid($sid))."</b> Attempted to upload a $ext file in Profile!', actdt='".time()."'");

}



//////////////////////////////////////anti hack

else if($nop>0||$now>0||$noh>0){

echo "<img src=\"../images$folder/notok.gif\" alt=\"[x]\"/>Invalid file type!<br/>";

mysql_query("INSERT INTO ibwf_mlog SET action='Dodgy', details='<b>".getnick_uid(getuid_sid($sid))."</b> Attempted to upload $file_name in Profile!', actdt='".time()."'");

}

////////////////



else if($file_size>$size_bytes){

echo "<img src=\"../images$folder/notok.gif\" alt=\"[x]\"/>Exceeded File size limit! Maximum <b>$kb</b> Kb.<br/>";

}

else if($file_size){

$file_name2=str_replace(" ","",$file_name);

$filename=explode(".",$file_name);

$size = $file_size/1024;







//mysql_query("INSERT INTO download_topic SET filename='".$file_name2."', path='http://".$_SERVER['SERVER_NAME']."/xhtml/topics/".$file_name2."', tid='".$tid[0]."', size='".$size."'");

 

$test = move_uploaded_file($file_tmp, "../gallery/".getnick_uid(getuid_sid($sid)).".".$filename[1]."");

if($test){

  $res = mysql_query("UPDATE ibwf_users SET avatar='/gallery/".getnick_uid(getuid_sid($sid)).".".$filename[1]."' WHERE id='".$uid."'");

}

}

else{

echo "<img src=\"../images$folder/notok.gif\" alt=\"[x]\"/>Unknown error! Pls try again...<br/>";

}

if($res){

echo "<img src=\"images$folder/ok.gif\" alt=\"O\"/>Profile Pic  Added Successfully";

}else{

echo "<img src=\"images$folder/notok.gif\" alt=\"X\"/>Error adding Pic ";

}

echo "<br/><br/>";

echo getfoot($sid,$folder);

exit(); 

}

///////////////////////////background

else if($action=="bgi")

{

$bname = $_POST["bname"];

echo "<div><br/>Background Images<br/></div>";



      echo "<p align=\"center\">";



////////////here

$size_bytes=102400;

$kb = $size_bytes / 1024;

$extlimit="yes";

$limitedext=array(".jpg",".jpeg",".gif",".png");

$ext=strtolower(strrchr($_FILES['filetoupload'][name],'.'));

$file_type=$_FILES['filetoupload']['type'];

$file_name=$_FILES['filetoupload']['name'];

$file_size=$_FILES['filetoupload']['size'];

$file_tmp=$_FILES['filetoupload']['tmp_name'];



$nop = substr_count($file_name,"php");

$now = substr_count($file_name,"wml");

$noh = substr_count($file_name,"htm");



if(!is_uploaded_file($_FILES['filetoupload']['tmp_name'])){

echo "<img src=\"../images$folder/notok.gif\" alt=\"[x]\"/>No file selected!<br/>";

}

else if($extlimit=="yes" && !in_array($ext,$limitedext)){

echo "<img src=\"../images$folder/notok.gif\" alt=\"[x]\"/>Invalid file type!<br/>";

mysql_query("INSERT INTO ibwf_mlog SET action='Dodgy', details='<b>".getnick_uid(getuid_sid($sid))."</b> Attempted to upload a $ext file in Background image modx!', actdt='".time()."'");

}



//////////////////////////////////////anti hack

else if($nop>0||$now>0||$noh>0){

echo "<img src=\"../images$folder/notok.gif\" alt=\"[x]\"/>Invalid file type!<br/>";

mysql_query("INSERT INTO ibwf_mlog SET action='Dodgy', details='<b>".getnick_uid(getuid_sid($sid))."</b> Attempted to upload $file_name in Background image modx!', actdt='".time()."'");

}

////////////////



else if($file_size>$size_bytes){

echo "<img src=\"../images$folder/notok.gif\" alt=\"[x]\"/>Exceeded File size limit! Maximum <b>$kb</b> Kb.<br/>";

}

else if($file_size){

$file_name2=str_replace(" ","",$file_name);

$filename=explode(".",$file_name);

$size = $file_size/1024;

 

$test = move_uploaded_file($file_tmp, "../backgroundimage/".$bname.".".$filename[1]."");

if($test){

  $res = mysql_query("INSERT INTO background_images SET url='/backgroundimage/".$bname.".".$filename[1]."', name='".$bname."'");

}

}

else{

echo "<img src=\"../images$folder/notok.gif\" alt=\"[x]\"/>Unknown error! Pls try again...<br/>";

}

if($res){

echo "<img src=\"images$folder/ok.gif\" alt=\"O\"/>Background Image  Added Successfully";

}else{

echo "<img src=\"images$folder/notok.gif\" alt=\"X\"/>Error adding Pic ";

}

echo "<br/><br/><a href=\"modxcp.php?action=modxcp\"><img src=\"../images$folder/admn.gif\" alt=\"\"/>$sta CP</a><br/>";

echo getfoot($sid,$folder);

exit(); 

}





///////////////////////////add profile pic

else if($action=="addavt")

{

$bname = $_POST["bname"];

      echo "<div><br/>Add Avatar<br/></div>";



      echo "<p align=\"center\">";



////////////here

$size_bytes=102400;

$kb = $size_bytes / 1024;

$extlimit="yes";

$limitedext=array(".jpg",".jpeg",".gif",".png");

$ext=strtolower(strrchr($_FILES['filetoupload'][name],'.'));

$file_type=$_FILES['filetoupload']['type'];

$file_name=$_FILES['filetoupload']['name'];

$file_size=$_FILES['filetoupload']['size'];

$file_tmp=$_FILES['filetoupload']['tmp_name'];



$nop = substr_count($file_name,"php");

$now = substr_count($file_name,"wml");

$noh = substr_count($file_name,"htm");



if(!is_uploaded_file($_FILES['filetoupload']['tmp_name'])){

echo "<img src=\"../images$folder/notok.gif\" alt=\"[x]\"/>No file selected!<br/>";

}

else if($extlimit=="yes" && !in_array($ext,$limitedext)){

echo "<img src=\"../images$folder/notok.gif\" alt=\"[x]\"/>Invalid file type!<br/>";

mysql_query("INSERT INTO ibwf_mlog SET action='Dodgy', details='<b>".getnick_uid(getuid_sid($sid))."</b> Attempted to upload a $ext file in Background image modx!', actdt='".time()."'");

}



//////////////////////////////////////anti hack

else if($nop>0||$now>0||$noh>0){

echo "<img src=\"../images$folder/notok.gif\" alt=\"[x]\"/>Invalid file type!<br/>";

mysql_query("INSERT INTO ibwf_mlog SET action='Dodgy', details='<b>".getnick_uid(getuid_sid($sid))."</b> Attempted to upload $file_name in Avatar modx!', actdt='".time()."'");

}

////////////////



else if($file_size>$size_bytes){

echo "<img src=\"../images$folder/notok.gif\" alt=\"[x]\"/>Exceeded File size limit! Maximum <b>$kb</b> Kb.<br/>";

}

else if($file_size){

$file_name2=str_replace(" ","",$file_name);

$filename=explode(".",$file_name);

$size = $file_size/1024;

 

$test = move_uploaded_file($file_tmp, "../avatars/".$filename[0].".".$filename[1]."");

if($test){

  $res = mysql_query("INSERT INTO ibwf_avatars SET url='/avatars/".$filename[0].".".$filename[1]."', name='".$bname."'");

}

}

else{

echo "<img src=\"../images$folder/notok.gif\" alt=\"[x]\"/>Unknown error! Pls try again...<br/>";

}

if($res){

echo "<img src=\"images$folder/ok.gif\" alt=\"O\"/>Avatar Added Successfully";

}else{

echo "<img src=\"images$folder/notok.gif\" alt=\"X\"/>Error adding Pic ";

}

      echo "<br/><br/><a href=\"modxcp.php?action=addavt\">";

  echo "Add Another Avatar</a><br/>";

echo "<br/><br/><a href=\"modxcp.php?action=modxcp\"><img src=\"../images$folder/admn.gif\" alt=\"\"/>$sta CP</a><br/>";

echo getfoot($sid,$folder);

exit(); 

}





//////////////////////////////////////topic background 8

else if($action=="topicbg")

{

  $tid = $_GET["tid"];

  $tbg = $_POST["tbg"];

   echo "<div><br/>Topic Background<br/></div>";

  echo "<p align=\"center\">";



    $res = mysql_query("UPDATE ibwf_topics SET background='".$tbg."' WHERE id='".$tid."'");

    if($res)

        {



          echo "<img src=\"../images/ok.gif\" alt=\"o\"/>Background Updated Successfully<br/>";

        }else{

          echo "<img src=\"../images/notok.gif\" alt=\"x\"/>Database Error!<br/>";

        }



  echo "<br/><br/><a href=\"index.php?action=viewtpc&amp;tid=$tid&amp;page=1\">Back to Topic</a><br/>";

  echo "<a href=\"modxcp.php?action=modxcp\"><img src=\"../images$folder/admn.gif\" alt=\"\"/>$sta Tools</a><br/>";

echo getfoot($sid,$folder);

exit();

}

//////////////////////////////////////topic pic 8

else if($action=="topicpic")

{

  $tid = $_GET["tid"];

  $tpic = $_POST["tpic"];

   echo "<div><br/>Topic Pic<br/></div>";

  echo "<p align=\"center\">";



    $res = mysql_query("UPDATE ibwf_topics SET pic='".$tpic."' WHERE id='".$tid."'");

    if($res)

        {



          echo "<img src=\"../images/ok.gif\" alt=\"o\"/>Pic Updated Successfully<br/>";

        }else{

          echo "<img src=\"../images/notok.gif\" alt=\"x\"/>Database Error!<br/>";

        }



  echo "<br/><br/><a href=\"index.php?action=viewtpc&amp;tid=$tid&amp;page=1\">Back to Topic</a><br/>";

  echo "<a href=\"modxcp.php?action=modxcp\"><img src=\"../images$folder/admn.gif\" alt=\"\"/>$sta Tools</a><br/>";

echo getfoot($sid,$folder);

exit();

}



//////////////////////////////////////////bump

else if($action=="bump")

{

  $tid = $_GET["tid"];

  $fid = getfid($tid);

  $fname = getfname($fid);

  $crdate = time(); 

  echo "<div><br/>Bump Topic<br/></div>"; 

  echo "<p align=\"center\">";



    $res = mysql_query("UPDATE ibwf_topics SET lastpost='".$crdate."' WHERE id='".$tid."'");

    if($res)

        {

          echo "<img src=\"../images/ok.gif\" alt=\"o\"/>Topic Bumped Successfully<br/>";

        }else{

          echo "<img src=\"../images/notok.gif\" alt=\"x\"/>Database Error!<br/>";

        }

 

   echo "<br/><br/><a href=\"index.php?action=viewtpc&amp;tid=$tid&amp;go=last\">View Topic</a>";

   echo "<br/><br/><a href=\"index.php?action=viewfrm&amp;fid=$fid\">$fname</a><br/>";

echo getfoot($sid,$folder);

exit();

}



///////////////////////////////////////////////////////////// 9

if(!isstatus9(getuid_sid($sid)))

  {

     echo "<head>";

    echo "<title>Error!!!</title>";

    echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"themes$bgi.php\">";

    echo "</head>";

    echo "<body>";

     echo "<div><br/>Doh!<br/></div>";  

      echo "<p align=\"center\">";

      echo "You are not an $status9<br/>";

      echo "<br/>";

      echo "<a href=\"index.php\">Home</a>";

      echo "</p>";

    echo "<div>$addy</div>";

    echo "</body>";

    echo "</html>";

      exit();

}



//////////////////////////delete external link 9

if($action=="delexlink")

{

echo "<div><br/>Delete External Link<br/></div>";

  echo "<p align=\"center\">";

  $lid=$_GET["lid"];



  $res = mysql_query("DELETE FROM external_links WHERE id='".$lid."'");

  if($res)

  {

  echo "<img src=\"../images$folder/ok.gif\" alt=\"O\"/>Link Deleted Successfully<br/>";

  }else{

  echo "<img src=\"../images$folder/notok.gif\" alt=\"X\"/>Error Deleting Link<br/>";

  }

  echo "<br/>";

  echo "<a href=\"lists2.php?action=exlinks\">External Links List</a><br/>";



  echo "<a href=\"modxcp.php?action=modxcp\"><img src=\"../images$folder/admn.gif\" alt=\"\"/>$sta CP</a><br/>";

echo getfoot($sid,$folder);

exit();

}

//////////////////////////////front page link 9

else if($action=="front"){

$title = $_POST["title"];

$link = $_POST["link"];

    echo "<div><br/>Front Page Link<br/></div>";

echo "<p align=\"center\">";

echo "<br/>";

$res = mysql_query("INSERT INTO front SET title='".$title."', link='".$link."'");

if($res){

echo "<img src=\"images$folder/ok.gif\" alt=\"O\"/>Link added successfully";

}else{

echo "<img src=\"images$folder/notok.gif\" alt=\"X\"/>Error adding Link";

}

echo "<br/><br/><a href=\"modxcp.php?action=front\">";

echo "Add Another Link?</a><br/>";

echo "<a href=\"lists2.php?action=front\">";

echo "Front Page Links</a><br/>";

  echo "<a href=\"modxcp.php?action=modxcp\"><img src=\"../images$folder/admn.gif\" alt=\"\"/>$sta CP</a><br/>";

echo getfoot($sid,$folder);

exit();

}

//////////////////////////////////////////Edit Front Page Link 9

else if($action=="editfront"){

$lid = $_GET["lid"];

$title = $_POST["title"];

$link = $_POST["link"];

   echo "<div><br/>Edit Front Page Link<br/></div>";

echo "<p align=\"center\">";

$res = mysql_query("UPDATE front SET title='".$title."', link='".$link."' WHERE id='".$lid."'");

if($res){

echo "<img src=\"images$folder/ok.gif\" alt=\"o\"/>Link Edited successfully<br/>";

}else{

echo "<img src=\"images$folder/notok.gif\" alt=\"x\"/>Error Editing Link<br/>";

}

echo "<br/><a href=\"lists2.php?action=front\">";

echo "front page links</a><br/>";

  echo "<a href=\"modxcp.php?action=modxcp\"><img src=\"../images$folder/admn.gif\" alt=\"\"/>$sta CP</a><br/>";

echo getfoot($sid,$folder);

exit();

}



///////////////////////////////////////////////////////////////////////

else{

    echo "<div><br/>Doh!<br/></div>";

echo "<p align=\"center\">";

echo "I don't know how you got in here, but there's nothing to show<br/><br/>";

echo getfoot($sid,$folder);

exit(); 

}



?>