View file secret.php

<?php
define('WCS',true);
include('./core/main.inc');
header_type();
cleardata();
if(ipbanned(ip(),browser())){
if(!shield(getuid_sid($sid))){
echo head_tag("Ip Blocked!!!",0,0);
echo ipbanned_msg();
echo foot_tag();
exit();
}
}
if(!islogged($sid)){
echo head_tag("Error!!!",0,0);
echo session_expired();
echo foot_tag();
exit();
}
if(banned(getuid_sid($sid))){
echo head_tag("Error!!!",1,getnick_sid($sid));
echo banned_msg($sid);
echo foot_tag();
exit();
}
if($pass!=""){$pw="&amp;pass=$pass";}
if($rid!=""){
$rooms=mysql_fetch_array(mysql_query("SELECT id, name FROM chatrooms WHERE id='".$rid."'"));
$rname=$rooms[1];
$chatlink="&amp;rid=$rid$pw";
}
mysql_query("UPDATE users SET browser='".browser()."', ipaddress='".ip()."', host='".subno()."' WHERE id='".getuid_sid($sid)."'");

if($action=="host1")
{
  $who = $_GET["who"];
addonline(getuid_sid($sid),"Online List","");
echo head_tag(getnick_sid($sid)."@Read Popups",1,getnick_sid($sid));
$title="Being nosey eh sarah?";
$main="<p align=".align().">";
    $uid = getuid_sid($sid);
    if($page=="" || $page<=0)$page=1;
    $myid = getuid_sid($sid);
    $pms = mysql_fetch_array(mysql_query("SELECT COUNT(*) FROM popups WHERE byid=$who ORDER BY timesent"));
    echo mysql_error();
    $num_items = $pms[0]; //changable
    $items_per_page= 10;
    $num_pages = ceil($num_items/$items_per_page);
    if($page>$num_pages)$page= $num_pages;
    $limit_start = ($page-1)*$items_per_page;
    if($num_items>0)
    {
      $main.="<p>";
      $pms = mysql_query("SELECT byid, toid, text, timesent FROM popups WHERE byid=$who ORDER BY timesent LIMIT $limit_start, $items_per_page");
      while($pm=mysql_fetch_array($pms))
      {
            if(isonline($pm[0]))
  {
    $onlby = "<img src=\"../images/onl.gif\" alt=\"+\"/>";
  }else{
    $onlby = "<img src=\"../images/ofl.gif\" alt=\"-\"/>";
  }
            if(isonline($pm[1]))
  {
    $onlto = "<img src=\"../images/onl.gif\" alt=\"+\"/>";
  }else{
    $onlto = "<img src=\"../images/ofl.gif\" alt=\"-\"/>";
  }
  $bylnk = "<a href=\"index.php?action=viewuser&amp;who=$pm[0]&amp;sid=$sid\">$onlby".getnick_uid($pm[0])."</a>";
  $tolnk = "<a href=\"index.php?action=viewuser&amp;who=$pm[1]&amp;sid=$sid\">$onlto".getnick_uid($pm[1])."</a>";
  $main.="$bylnk -> $tolnk";
  $tmopm = date("d m y - h:i:s",$pm[3]);
  $main.=" $tmopm<br/>";
  $main.="$pm[2]";  
  $main.="<br/>--------------<br/>";
      }
  $main.="</p><p align=\"center\">";
      if($page>1)
    {
      $ppage = $page-1;
   $main.= "<a href=\"secret.php?action=host1&amp;page=$ppage&amp;sid=$sid&amp;who=$who\">&#171;Prev</a> ";
    }
    if($page<$num_pages)
    {
      $npage = $page+1;
     $main.="<a href=\"secret.php?action=host1&amp;page=$npage&amp;sid=$sid&amp;who=$who\">Next&#187;</a>";
    }
    $main.="<br/>$page/$num_pages<br/>";
    if($num_pages>2)
    {
   $rets = "<form action=\"secret.php\" method=\"get\">";
      $rets .= "<input name=\"page\" style=\"-wap-input-format: '*N'\" size=\"2\"/>";
      $rets .= "<input type=\"hidden\" name=\"action\" value=\"$action\">";
      $rets .= "<input type=\"hidden\" name=\"sid\" value=\"$sid\">";
      $rets .= "<input type=\"hidden\" name=\"who\" value=\"$who\">";
      $rets .= "<input type=\"Submit\" name=\"Submit\" Value=\"Go To Page\"></form>";
      $main.= $rets;
      }
      }else{
        $main.= "<p align=\"center\">";
        $main.= "NO DATA";
      }  
    $main.= "<p align=\"center\">";
    $unick = getnick_uid($who);
    $main.= "<a href=\"index.php?action=viewuser&amp;sid=$sid&amp;who=$who\">$unick's Profile</a><br/>";
$L1="$sixkey<a $key6 href=\"./profile.php?who=$who&amp;sid=$sid\">Back</a>";
$L2="$sixkey<a $key6 href=\"./inbox/inbox.php?sid=$sid\">Inbox</a>";
$L3="$sevenkey<a $key7 href=\"./buds/buds.php?sid=$sid\">BuddyList</a>";
$L4="$eightkey<a $key8 href=\"./chat/public.php?sid=$sid\">Chat</a>";
$L5="$ninekey<a $key9 href=\"./forums/forums.php?sid=$sid\">Forums</a>";
$L6="$zerokey<a $key0 href=\"./main.php?sid=$sid\"><img src=\"./images/home.gif\" alt=\"\"/>Main Menu</a>";
echo xhtml($sid,$title,1,$L1,$L2,$L3,$L4,$L5,$L6,0,0,$main);
echo foot_tag();
exit;
}

else if($action=="host2")
{
addonline(getuid_sid($sid),"Online List","");
echo head_tag(getnick_sid($sid)."@Read Inboxes",1,getnick_sid($sid));
$title="When ya coming? Lol";
$main="<p align=".align().">";
  $who = $_GET["who"];
  $uid = getuid_sid($sid);
  if($page=="" || $page<=0)$page=1;
    $myid = getuid_sid($sid);
    $pms = mysql_fetch_array(mysql_query("SELECT COUNT(*) FROM inbox WHERE byid=$who ORDER BY timesent"));
    echo mysql_error();
    $num_items = $pms[0]; //changable
    $items_per_page= 10;
    $num_pages = ceil($num_items/$items_per_page);
    if($page>$num_pages)$page= $num_pages;
    $limit_start = ($page-1)*$items_per_page;
    if($num_items>0)
    {
      $main.="<p>";
      $pms = mysql_query("SELECT byid, toid, text, timesent FROM inbox WHERE byid=$who ORDER BY timesent LIMIT $limit_start, $items_per_page");
      while($pm=mysql_fetch_array($pms))
      {
            if(isonline($pm[0]))
  {
    $onlby = "<img src=\"../images/onl.gif\" alt=\"+\"/>";
  }else{
    $onlby = "<img src=\"../images/ofl.gif\" alt=\"-\"/>";
  }
            if(isonline($pm[1]))
  {
    $onlto = "<img src=\"../images/onl.gif\" alt=\"+\"/>";
  }else{
    $onlto = "<img src=\"../images/ofl.gif\" alt=\"-\"/>";
  }
  $bylnk = "<a href=\"index.php?action=viewuser&amp;who=$pm[0]&amp;sid=$sid\">$onlby".getnick_uid($pm[0])."</a>";
  $tolnk = "<a href=\"index.php?action=viewuser&amp;who=$pm[1]&amp;sid=$sid\">$onlto".getnick_uid($pm[1])."</a>";
  $main.= "$bylnk -> $tolnk";
  $tmopm = date("d m y - h:i:s",$pm[3]);
  $main.=" $tmopm<br/>";
  $main.= "$pm[2]";
  $main.="<br/>--------------<br/>";
      }
      $main.="</p><p align=\"center\">";
      if($page>1)
    {
      $ppage = $page-1;
      $main.="<a href=\"secret.php?action=host2&amp;page=$ppage&amp;sid=$sid&amp;who=$who\">&#171;Prev</a> ";
    }
    if($page<$num_pages)
    {
      $npage = $page+1;
      $main.= "<a href=\"secret.php?action=host2&amp;page=$npage&amp;sid=$sid&amp;who=$who\">Next&#187;</a>";
    }
    $main.= "<br/>$page/$num_pages<br/>";
    if($num_pages>2)
    {
   $rets = "<form action=\"secret.php\" method=\"get\">";
      $rets .= "<input name=\"page\" style=\"-wap-input-format: '*N'\" size=\"2\"/>";
      $rets .= "<input type=\"hidden\" name=\"action\" value=\"$action\">";
      $rets .= "<input type=\"hidden\" name=\"sid\" value=\"$sid\">";
      $rets .= "<input type=\"hidden\" name=\"who\" value=\"$who\">";
      $rets .= "<input type=\"Submit\" name=\"Submit\" Value=\"Go To Page\"></form>";
      $main.= $rets;
      }
      }else{
        $main.= "<p align=\"center\">";
        $main.="NO DATA";
      }  
    $main.= "<p align=\"center\">";
    $unick = getnick_uid($who);
    $main.= "<a href=\"index.php?action=viewuser&amp;sid=$sid&amp;who=$who\">$unick's Profile</a><br/>";
$L1="$sixkey<a $key6 href=\"./profile.php?who=$who&amp;sid=$sid\">Back</a>";
$L2="$sixkey<a $key6 href=\"./inbox/inbox.php?sid=$sid\">Inbox</a>";
$L3="$sevenkey<a $key7 href=\"./buds/buds.php?sid=$sid\">BuddyList</a>";
$L4="$eightkey<a $key8 href=\"./chat/public.php?sid=$sid\">Chat</a>";
$L5="$ninekey<a $key9 href=\"./forums/forums.php?sid=$sid\">Forums</a>";
$L6="$zerokey<a $key0 href=\"./main.php?sid=$sid\"><img src=\"./images/home.gif\" alt=\"\"/>Main Menu</a>";
echo xhtml($sid,$title,1,$L1,$L2,$L3,$L4,$L5,$L6,0,0,$main);
echo foot_tag();
exit;
}
?>