View file user/index.php

<?php
include('../includes/connect.php');
include('../includes/lang2.php');
if(!$userid) go($url);
$queryUser = mysql_query("SELECT password,disk,username FROM users WHERE id = '$userid'") or die ( mysql_error());
$info = mysql_fetch_assoc($queryUser);
mysql_free_result($queryUser);
if($rights>0) {

// change password
if(isset($_GET['password'])){
include_once('../includes/lang2.php');
$title = $lang["changepass"];
include('../includes/header.php');
echo '<div class="title"><img src="'.$url.'/images/key.png" alt="*"> '.$lang["changepass"].'</div>';
if(isset($_POST['change'])){
$old = md5(input($_POST['old']));
$new = md5(input($_POST['new']));
$verify_new = md5(input($_POST['verify_new']));
$new2 = $_POST['new'];
if($old != $info['password']){
echo '<div class="news">'.$lang["e-oldpass"].'<br>
<a href="javascript:history.go(-1)">'.$lang["back"].'</a></div>';
} elseif ( $new != $verify_new )
{ echo '<div class="news">'.$lang["e-mismatch"].'<br>
<a href="javascript:history.go(-1)">'.$lang["back"].'</a></div>';
}
else {
mysql_query("UPDATE users SET password = '$new' WHERE id = '$userid'");
echo '<div class="menu">'.$lang["changepass-ok"].'<br>'.$lang["newpass"].': '.$new2.'</div>';
}
}
echo '<div class="list">
<form method="POST">'.$lang["oldpass"].':<br>
<input type="password" name="old" size="15" />
<br>'.$lang["newpass"].':<br/>
<input type="text" name="new" value="" size="15"/>
<br>'.$lang["repassword"].':<br/>
<input type="text" name="verify_new" value="" size="15"/><br/>
<input type="submit" name="change" value="'.$lang["btn-change"].'"/>
<br/><form></div>';
include '../includes/footer.php';
die();
}

// User Files
if(isset($_GET['files'])){
if(isset($_GET['user'])){
$userfile = intval($_GET['user']); } else
{ $userfile = $userid; }
include_once('../includes/lang2.php');
$title = $lang["allfiles"].'&nbsp;'.username($userfile);
include('../includes/header.php');
echo '<div class="title"><img src="'.$url.'/images/comp.png" alt="*"> '.$lang["allfiles"].'&nbsp;'.username($userfile).'</div>';
$queryFiles = mysql_query('select id,name,size from files where userid = '.$userfile.' order by `time` desc limit '.$j.', 10');
$queryNum = mysql_query('select id from files where userid = '.$userfile.'');
if(mysql_num_rows($queryNum)>0){
$all = mysql_num_rows($queryNum);
while($ufile=mysql_fetch_assoc($queryFiles)){
$img = fileExt($ufile['name']);
if($img == jar) { $fimg = ''.$url.'/icon.php?id='.$ufile['id'].''; }
elseif(file_exists("images/$img.png")) { $fimg = ''.$url.'/images/'.$img.'.png'; }
else{ $fimg = ''.$url.'/images/file.png'; }
$Filetag = fileExt($ufile['name']);
$name = $ufile['name'];
$name = str_replace(".$Filetag","",$name);
    echo '<div class="list">
	<img src="'.$fimg.'" height="16" width="16"/> <a href="'.$url.'/load/file/'.$ufile['id'].'/'.hdm_converturl($name).'.html">'.$name.'</a> ('.size($ufile['size']).').</div>';
}
mysql_free_result($queryFiles);
mysql_free_result($queryNum);
paging($all,$page,10,$url.'/user/?files&user='.$userfile.'&');
} else {
    echo '<div class="news">'.$lang["usr-upload-empty"].'<br>
	<a href="upload.php">'.$lang["upload-here"].'</a></div>';
}
include '../includes/footer.php';
die();
}


// Default
include_once('../includes/lang2.php');
$title = $lang["mycp"];
include('../includes/header.php');
echo '<div class="title"><img src="'.$url.'/images/comp.png" alt="*"> '.$lang["mycp"].'</div>';
$free = $set['upmax']-$info['disk'];
echo '<div class="list">';
echo $lang["space-total"].': '.$set['upmax'].' MB<br>';
echo $lang["space-used"].': '.$info['disk'].' MB <br>';
echo $lang["space-free"].': '.$free.' MB </div>';

echo '<div class="list"><img src="../images/upl.png" alt="*"> <a href="upload.php?upload">'.$lang["upload"].'</a></div>
<div class="list"><img src="../images/imprt.png" alt="*"> <a href="upload.php?import">'.$lang["import"].'</a></div>
<div class="list"><img src="../images/flz.png" alt="*"> <a href="?files">'.$lang["myfile"].'</a> ('.mysql_result(mysql_query('SELECT COUNT(id) FROM files WHERE userid = '.$userid.''),0).')</div>
<div class="list"><img src="../images/cat.png" alt="*"> <a href="../category.php">'.$lang["filecat"].'</a> ('.mysql_result(mysql_query('SELECT COUNT(id) FROM file_cat'),0).')</div>
<div class="list"><img src="../images/ads.png" alt="*"> <a href="my_ads.php">'.$lang["manage-ads"].'</a></div>
<div class="list"><img src="../images/pwd.png" alt="*"> <a href="?password">'.$lang["changepass"].'</a></div>
<div class="list"><img src="../images/guide.png" alt="*"> <a href="../guide.php">'.$lang["guide"].'</a> ('.mysql_result(mysql_query('SELECT COUNT(id) FROM guide'),0).')</div>
<div class="list"><img src="../images/lout.png" alt="*"> <a href="../logout.php">'.$lang["logout"].'</a></div><div>';
}
else 
{ 
// Banned Users
include_once('../includes/lang2.php');
$title = $lang["ban-title"];
include('../includes/header.php');
echo '<div class="title"><img src="'.$url.'/images/ban.png" alt="*"> '.$lang["ban-title"].'</div>
<div class="news">'.$lang["ban-msg"].'</div>';
}
include('../includes/footer.php');
?>