if( !empty($setmodules) )

{

{

return;

}

//

// Do we have ban permissions?

//

{

return;

}

$ban_list = array_unique(explode("\n", $HTTP_POST_VARS['ban']));

$ban_list_log = implode(', ', $ban_list);

{

if ( $HTTP_POST_VARS['banlength'] != -1 || empty($HTTP_POST_VARS['banlengthother']) )

{

}

}

WHERE username IN (" . implode(', ', $banlist_tmp) . ")";

$result = $db->sql_query($sql);

break;

}

WHERE $type <> ''";

$result = $db->sql_query($sql);

$banlist = array_unique(array_diff($banlist, $banlist_tmp));

unset($banlist_tmp);

if ( sizeof($banlist) )

{

for($i = 0; $i < count($banlist); $i++)

{

VALUES (" . $banlist[$i] . ", $current_time, $ban_end, '$ban_reason')";

$db->sql_query($sql);

}

break;

case 'email':

WHERE user_email IN (" . implode(', ', $banlist) . ")";

$result = $db->sql_query($sql);

if ( $sql != '' )

{

$sql";

$db->sql_query($sql);

}

if ( $unban_sql != '' )

{

WHERE ban_id IN ($unban_sql)";

$db->sql_query($sql);

//

// Remove timed out bans

//

AND ban_end <> 0";

$db->sql_query($sql);

case 'user':

$sql = "SELECT b.*, u.user_id, u.username

FROM " . BANLIST_TABLE . " b, " . USERS_TABLE . " u

OR b.ban_end = 0 )

AND u.user_id = b.ban_userid

AND b.ban_userid <> 0

case 'ip':

AND ban_ip <> ''";

$result = $db->sql_query($sql);

case 'email':

AND ban_email <> ''";

$result = $db->sql_query($sql);

<p><?php echo $l_ban_explain; ?></p>

<script language="Javascript" type="text/javascript">

var ban_length = new Array(<?php echo $banned_length; ?>);

var ban_reasons = new Array(<?php echo $banned_reasons; ?>);

//-->

</script>

<form method="post" action="<?php echo "admin_ban.$phpEx$SID&amp;mode=$mode"; ?>"><table class="bg" width="80%" cellspacing="1" cellpadding="4" border="0" align="center">

<th colspan="2"><?php echo $l_ban_title; ?></th>

</tr>

<td class="row1" width="45%"><?php echo $l_ban_cell; ?>: </td>

<td class="row1"><textarea cols="40" rows="3" name="ban"></textarea></td>

</tr>

<td class="row2" width="45%"><?php echo $lang['Ban_reason']; ?>:</td>

<td class="row2"><input type="text" name="banreason" maxlength="255" size="40" /></td>

</tr>

<td class="cat" colspan="2" align="center"> <input type="submit" name="bansubmit" value="<?php echo $lang['Submit']; ?>" class="mainoption" />&nbsp; <input type="reset" value="<?php echo $lang['Reset']; ?>" class="liteoption" />&nbsp; <?php echo $s_submit_extra; ?></td>

</tr>

</table>

<p><?php echo $l_unban_explain; ?></p>

<table class="bg" width="80%" cellspacing="1" cellpadding="4" border="0" align="center">

<th colspan="2"><?php echo $l_unban_title; ?></th>

</tr>

<td class="row1" width="45%"><?php echo $l_ban_cell; ?>: <br /></td>

<td class="row1"> <?php if ( $banned_options != '' ) { ?><select name="unban[]" multiple="multiple" size="5"><?php echo $banned_options; ?></select><?php } else { echo $l_no_ban_cell; } ?></td>

</tr>

<td class="cat" colspan="2" align="center"><input type="submit" name="unbansubmit" value="<?php echo $lang['Submit']; ?>" class="mainoption" /></td>

</tr>

</table></form>

if ( !empty($setmodules) )

{

{

return;

}

require($phpbb_root_path . 'extension.inc');

require('pagestart.' . $phpEx);

{

message_die(MESSAGE, $lang['No_admin']);

}

$activation_admin = ( $new['require_activation'] == USER_ACTIVATION_ADMIN ) ? 'checked="checked"' : '';

$activation_disable = ( $new['require_activation'] == USER_ACTIVATION_DISABLE ) ? 'checked="checked"' : '';

$privmsg_on = ( !$new['privmsg_disable'] ) ? 'checked="checked"' : '';

$privmsg_off = ( $new['privmsg_disable'] ) ? 'checked="checked"' : '';

<td class="row2"><input type="radio" name="board_disable" value="1" <?php echo $disable_board_yes; ?> /> <?php echo $lang['Yes']; ?>&nbsp;&nbsp;<input type="radio" name="board_disable" value="0" <?php echo $disable_board_no; ?> /> <?php echo $lang['No']; ?><br /><input type="text" name="board_disable_msg" maxlength="255" size="40" value="<?php echo $new['board_disable_msg']; ?>" /></td>

</tr>

<tr>

<td class="row1"><?php echo $lang['Enable_prune']; ?>: </td>

<td class="row2"><input type="radio" name="prune_enable" value="1" <?php echo $prune_yes; ?> /> <?php echo $lang['Yes']; ?>&nbsp;&nbsp;<input type="radio" name="prune_enable" value="0" <?php echo $prune_no; ?> /> <?php echo $lang['No']; ?></td>

</tr>

<td class="row2"><input type="text" size="3" maxlength="3" name="max_search_chars" value="<?php echo $new['max_search_chars']; ?>" /></td>

</tr>

<tr>

<td class="row1"><?php echo $lang['Topics_per_page']; ?>: </td>

<td class="row2"><input type="text" name="topics_per_page" size="3" maxlength="4" value="<?php echo $new['topics_per_page']; ?>" /></td>

</tr>

case 'server':

?>

<tr>

<td class="row1"><?php echo $lang['Server_name']; ?>: <br /><span class="gensmall"><?php echo $lang['Server_name_explain']; ?></span></td>

<td class="row1"><?php echo $lang['Script_path']; ?>: <br /><span class="gensmall"><?php echo $lang['Script_path_explain']; ?></span></td>

<td class="row2"><input type="text" maxlength="255" name="script_path" value="<?php echo $new['script_path']; ?>" /></td>

</tr>

<?php

break;

$dp = opendir($phpbb_root_path . 'includes/auth');

while ( $file = readdir($dp) )

{

{

$auth_plugins[] = preg_replace('/^auth_(.*?)\.' . $phpEx . '$/', '\1', $file);

}

<td class="row2"><select name="auth_method"><?php echo $auth_select; ?></select></td>

</tr>

<?php

foreach ( $auth_plugins as $method )

{

if ( $method && file_exists($phpbb_root_path . 'includes/auth/auth_' . $method . '.' . $phpEx) )

{

if ( !isset($board_config[$field]) )

{

VALUES ('$field', '')";

$db->sql_query($sql);

}

<?php

/***************************************************************************

* -------------------

* begin : Thu May 31, 2001

* copyright : (C) 2001 The phpBB Group

* (at your option) any later version.

*

***************************************************************************/

if ( !empty($setmodules) )

{

{

return;

}

$filename = basename(__FILE__);

$module['DB']['DB_Backup'] = $filename . "$SID&amp;mode=backup";

include($phpbb_root_path . 'includes/functions_admin.'.$phpEx);

//

//

{

message_die(MESSAGE, $lang['No_admin']);

}

//

@set_time_limit(1200);

//

// Begin program proper

//

{

{

}

?>

<td class="row2"><input type="text" name="store" size="40" /></td>

</tr>

<?php

?>

<tr>

<td class="row1"><?php echo $lang['Compress_file']; ?>: </td>

<td class="row2"><input type="radio" name="compress" value="none" checked="checked" /> <?php echo $lang['None']; ?><?php

?>&nbsp;&nbsp;<input type="radio" name="compress" value="gzip" />.gz&nbsp;&nbsp;<input type="radio" name="compress" value="zip" />.zip<?php

?>&nbsp;&nbsp;<input type="radio" name="compress" value="bzip" />.bz2<?php

?></td>

</tr>

<?php

?>

<tr>

<?php

{

}

{

}

{

{

}

}

{

}

{

{

{

}

}

}

?>

<th colspan="2"><?php echo $lang['Select_file']; ?></th>

</tr>

<tr>

?></span></td>

<td class="row2"><input type="file" name="backup_file" /></td>

<?php

}

page_footer();

// Zip creation class from phpMyAdmin 2.3.0 (c) Tobias Ratschiller, Olivier Müller, Loïc Chapeaux, Marc Delisle

// http://www.phpmyadmin.net/

//

// Official ZIP file format: http://www.pkware.com/appnote.txt

//

class zipfile

pack('V', strlen($ctrldir)) . // size of central dir

pack('V', strlen($data)) . // offset to start of central dir

"\x00\x00"; // .zip file comment length

}

if( !empty($setmodules) )

{

{

return;

}

//

// Do we have user admin permissions?

//

{

return;

}

}

else

{

VALUES('" . str_replace("\'", "''", $disallowed_user) . "')";

$result = $db->sql_query( $sql );

else if( isset($HTTP_POST_VARS['delete_name']) )

{

$disallowed_id = ( isset($HTTP_POST_VARS['disallowed_id']) ) ? intval( $HTTP_POST_VARS['disallowed_id'] ) : intval( $HTTP_GET_VARS['disallowed_id'] );

WHERE disallow_id = $disallowed_id";

$db->sql_query($sql);

//

// Grab the current list of disallowed usernames...

//

FROM " . DISALLOW_TABLE;

$result = $db->sql_query($sql);

<p><?php echo $lang['Disallow_explain']; ?></p>

<form method="post" action="<?php echo "admin_disallow.$phpEx$SID"; ?>"><table class="bg" width="80%" cellspacing="1" cellpadding="4" border="0" align="center">

<th colspan="2"><?php echo $lang['Add_disallow_title']; ?></th>

</tr>

<td class="row1"><?php echo $lang['Username']; ?><br /><span class="gensmall"><?php echo $lang['Add_disallow_explain']; ?></span></td>

<td class="row2"><input type="text" name="disallowed_user" size="30" />&nbsp;<input type="submit" name="add_name" value="<?php echo $lang['Add_disallow']; ?>" class="mainoption" /></td>

</tr>

<th colspan="2"><?php echo $lang['Delete_disallow_title']; ?></th>

</tr>

<td class="row1"><?php echo $lang['Username']; ?><br /><span class="gensmall"><?php echo $lang['Delete_disallow_explain']; ?></span></td>

<td class="row2"><?php if ( $disallow_select != '' ) { ?><select name="disallowed_id"><?php echo $disallow_select; ?></select>&nbsp;<input type="submit" name="delete_name" value="<?php echo $lang['Delete']; ?>" class="liteoption" /><?php } else { echo $lang['No_disallowed']; } ?></td>

</tr>

if ( !empty($setmodules) )

{

{

return;

}

$filename = basename(__FILE__);

$module['General']['Mass_Email'] = $filename . $SID;

return;

}

//

// Do we have general admin permissions?

//

{

return;

}

//

// Set some vars

$message = '';

$subject = '';

$subject = stripslashes($HTTP_POST_VARS['subject']);

$message = stripslashes($HTTP_POST_VARS['message']);

//

// Error checking needs to go here ... if no subject and/or

// no message then skip over the send and return to the form

$board_config['smtp_host'] = get_cfg_var('SMTP');

}

$emailer = new emailer($board_config['smtp_delivery']);

$email_headers = 'From: ' . $board_config['board_email'] . "\n";

$bcc_list = '';

$bcc_list .= ( ( $bcc_list != '' ) ? ', ' : '' ) . $email_list[$i]['user_email'];

}

$email_headers .= "Bcc: $bcc_list\n";

$email_headers .= 'Return-Path: ' . $userdata['board_email'] . "\n";

$email_headers .= 'X-AntiAbuse: Board servername - ' . $server_name . "\n";

$email_headers .= 'X-AntiAbuse: User_id - ' . $userdata['user_id'] . "\n";

$emailer->extra_headers($email_headers);

$emailer->assign_vars(array(

'MESSAGE' => $message)

);

message_die(MESSAGE, $lang['Email_sent']);

}

//

// Initial selection

//

FROM ".GROUPS_TABLE;

$result = $db->sql_query($sql);

<p><?php echo $lang['Mass_email_explain']; ?></p>

<form method="post" action="<?php echo "admin_mass_email.$phpEx$SID"; ?>"><table cellspacing="1" cellpadding="4" border="0" align="center" bgcolor="#98AAB1">

<th colspan="2"><?php echo $lang['Compose']; ?></th>

</tr>

<td class="row1" align="right"><b><?php echo $lang['Recipients']; ?></b></td>

<td class="row2" align="left"><?php echo $select_list; ?></td>

</tr>

<td class="row1" align="right"><b><?php echo $lang['Subject']; ?></b></td>

<td class="row2"><span class="gen"><input type="text" name="subject" size="45" maxlength="100" tabindex="2" class="post" value="<?php echo $subject; ?>" /></span></td>

</tr>

</tr>

<td class="cat" colspan="2" align="center"><input type="submit" value="<?php echo $lang['Email']; ?>" name="submit" class="mainoption" /></td>

</tr>

</table></form>

if (!empty($setmodules))

{

{

return;

}

//

// Do we have forum admin permissions?

//

{

message_die(MESSAGE, $lang['No_admin']);

}

</tr>

</table>

</form>

<br clear="all" />

<?php

<form action="admin_forums.<?php echo $phpEx . $SID ?>&mode=remove&f=<?php echo $forum_id ?>" method="post">

<table cellpadding="4" cellspacing="1" border="0" class="forumline" align="center">

<th colspan="2" class="thHead"><?php echo $lang['Forum_delete'] ?></th>

</tr>

<td class="row1"><?php echo ($forum_status == ITEM_CATEGORY) ? $lang['Category_name'] : $lang['Forum_name'] ?></td>

<td class="row1"><span class="row1"><?php echo $forum_name ?></span></td>

</tr>

if ($forum_status != ITEM_CATEGORY)

{

?>

<td class="row1"><?php echo $lang['Action'] ?></td>

<td class="row1"><input type="radio" name="action_posts" value="delete" checked="checked" /> <?php echo $lang['Delete_all_posts'] ?></td>

</tr>

<td class="row1"></td>

<td class="row1"><input type="radio" name="action_posts" value="move" /> <?php echo $lang['Move_posts_to'] ?> <select name="posts_to_id" ?><option value="0"></option><?php echo $move_posts_list ?></select></td>

</tr>

if ($right_id - $left_id > 1)

{

?>

<td class="row1"><?php echo $lang['Action'] ?></td>

<td class="row1"><input type="radio" name="action_subforums" value="delete" checked="checked" /> <?php echo $lang['Delete_subforums'] ?></td>

</tr>

<td class="row1"></td>

<td class="row1"><input type="radio" name="action_subforums" value="move" /> <?php echo $lang['Move_subforums_to'] ?> <select name="subforums_to_id" ?><option value="0"></option><?php echo $forums_list ?></select></td>

</tr>

<?php

}

?>

<td class="cat" colspan="2" align="center"><input type="submit" name="submit" value="<?php echo $lang['Move_and_Delete'] ?>" class="mainoption" /></td>

</tr>

</table>

$forum_title = htmlspecialchars($sub_row['forum_name']);

$forum_desc = htmlspecialchars($sub_row['forum_desc']);

$subforums = ($sub_row['right_id'] - $sub_row['left_id'] - 1) / 2;

if ($sub_row['forum_status'] != ITEM_CATEGORY)

{

$colspan = '';

*

***************************************************************************/

if( !empty($setmodules) )

{

$filename = basename(__FILE__);

$module['Groups']['Create'] = $filename . "$SID&amp;mode=create";

$module['Groups']['Delete'] = $filename . "$SID&amp;mode=delete";

return;

}

//

//

require($phpbb_root_path . 'extension.inc');

require('pagestart.' . $phpEx);

if( isset($HTTP_POST_VARS[POST_GROUPS_URL]) || isset($HTTP_GET_VARS[POST_GROUPS_URL]) )

{

$group_id = ( isset($HTTP_POST_VARS[POST_GROUPS_URL]) ) ? intval($HTTP_POST_VARS[POST_GROUPS_URL]) : intval($HTTP_GET_VARS[POST_GROUPS_URL]);

}

else

{

}

//

for($i = 0; $i < count($user_list); $i++)

{

{

$group_moderator = $user_list[$i]['username'];

}

$template->assign_vars(array(

"GROUP_NAME" => $group_info['group_name'],

"L_GROUP_TITLE" => $lang['Group_administration'],

"L_GROUP_NAME" => $lang['group_name'],

"L_GROUP_DESCRIPTION" => $lang['group_description'],

"L_GROUP_STATUS" => $lang['group_status'],

"L_GROUP_OPEN" => $lang['group_open'],

"L_GROUP_CLOSED" => $lang['group_closed'],

"L_DELETE_MODERATOR_EXPLAIN" => $lang['delete_moderator_explain'],

"L_YES" => $lang['Yes'],

"S_GROUP_OPEN_TYPE" => GROUP_OPEN,

"S_GROUP_CLOSED_TYPE" => GROUP_CLOSED,

{

message_die(GENERAL_MESSAGE, $lang['No_group_moderator']);

}

$this_userdata = get_userdata($group_moderator);

$group_moderator = $this_userdata['user_id'];

{

message_die(GENERAL_MESSAGE, $lang['No_group_moderator']);

}

if( $mode == "editgroup" )

{

$sql = "SELECT *

{

message_die(GENERAL_MESSAGE, $lang['Group_not_exist']);

}

if ( $group_info['group_moderator'] != $group_moderator )

{

if ( $delete_old_moderator != "" )

{

$sql = "DELETE FROM " . USER_GROUP_TABLE . "

AND group_id = " . $group_id;

if ( !$result = $db->sql_query($sql) )

{

}

}

$sql = "UPDATE " . GROUPS_TABLE . "

WHERE group_id = $group_id";

if ( !$result = $db->sql_query($sql) )

{

message_die(GENERAL_ERROR, "Couldn't update group", "", __LINE__, __FILE__, $sql);

}

$message = $lang['Updated_group'] . "<br /><br />" . sprintf($lang['Click_return_groupsadmin'], "<a href=\"" . append_sid("admin_groups.$phpEx") . "\">", "</a>") . "<br /><br />" . sprintf($lang['Click_return_admin_index'], "<a href=\"" . append_sid("index.$phpEx?pane=right") . "\">", "</a>");;

message_die(GENERAL_MESSAGE, $message);

}

else if( $mode == "newgroup" )

{

FROM " . GROUPS_TABLE;

if ( !$result = $db->sql_query($sql) )

{

$new_group_id = $row['new_group_id'] + 1;

VALUES ($new_group_id, $group_type, '" . str_replace("\'", "''", $group_name) . "', '" . str_replace("\'", "''", $group_description) . "', $group_moderator, '0')";

if ( !$result = $db->sql_query($sql) )

{

{

message_die(GENERAL_ERROR, "Couldn't insert new user-group info", "", __LINE__, __FILE__, $sql);

}

$message = $lang['Added_new_group'] . "<br /><br />" . sprintf($lang['Click_return_groupsadmin'], "<a href=\"" . append_sid("admin_groups.$phpEx") . "\">", "</a>") . "<br /><br />" . sprintf($lang['Click_return_admin_index'], "<a href=\"" . append_sid("index.$phpEx?pane=right") . "\">", "</a>");;

message_die(GENERAL_MESSAGE, $message);

}

}

}

$sql = "SELECT group_id, group_name

FROM " . GROUPS_TABLE . "

ORDER BY group_name";

{

}

{

}

?>

if ( !empty($setmodules) )

{

{

return;

}

//

// Do we have forum admin permissions?

//

{

message_die(MESSAGE, $lang['No_admin']);

}

break;

}

if ( isset($HTTP_POST_VARS['update']) )

{

switch ( $HTTP_POST_VARS['type'] )

foreach ( $HTTP_POST_VARS['entries'] as $id )

{

}

message_die(MESSAGE, 'Permissions updated successfully');

foreach ( $HTTP_POST_VARS['entries'] as $id )

{

}

message_die(MESSAGE, 'Permissions updated successfully');

else

{

$sql = "SELECT auth_option_id, auth_value

FROM " . ACL_OPTIONS_TABLE . "

$result = $db->sql_query($sql);

$auth_options = array();

if ( !empty($setmodules) )

{

{

return;

}

$filename = basename(__FILE__);

$module['Forums']['Prune'] = $filename . $SID . '&amp;mode=forums';

$phpbb_root_path = '../';

require($phpbb_root_path . 'extension.inc');

require('pagestart.' . $phpEx);

//

// Do we have forum admin permissions?

//

{

message_die(MESSAGE, $lang['No_admin']);

}

{

$p_result = prune($forum_rows[$i]['forum_id'], $prunedate);

sync('forum', $forum_rows[$i]['forum_id']);

$template->assign_block_vars('prune_results', array(

'FORUM_NAME' => $forum_rows[$i]['forum_name'],

'FORUM_TOPICS' => $p_result['topics'],

'FORUM_POSTS' => $p_result['posts'])

{

$forum_name = ( $forum_id == -1 ) ? $lang['All_Forums'] : $forum_rows[0]['forum_name'];

$prune_data .= '<input type="text" name="prunedays" size="4"> ' . $lang['Days'];

$s_hidden_fields = '<input type="hidden" name="f" value="' . $forum_id . '">';

<h2><?php echo $lang['Forum'] . ': ' . $forum_name; ?></h2>

<form method="post" action="<?php echo "admin_prune.$phpEx$SID"; ?>"><table class="bg" cellspacing="1" cellpadding="4" border="0" align="center">

<th class="th"><?php echo $lang['Forum_Prune']; ?></th>

</tr>

<tr>

<td class="row1"><?php echo $prune_data; ?></td>

</tr>

<td class="cat" align="center"><?php echo $s_hidden_fields; ?><input type="submit" name="doprune" value="<?php echo $lang['Do_Prune']; ?>" class="mainoption"></td>

</tr>

</table></form>

if ( !empty($setmodules) )

{

{

return;

}

//

// Do we have forum admin permissions?

//

{

return;

}

{

$l_message .= ( !empty($HTTP_POST_VARS[$field]) ) ? '<input type="hidden" name="' . $field . '" value="' . urlencode($HTTP_POST_VARS[$field]) . '" />' : '';

}

$l_message .= '</form>';

page_header($lang['Prune_users']);

page_message($lang['Confirm'], $l_message, false);

page_footer();

}

else if ( isset($HTTP_POST_VARS['confirm']) )

{

$where_sql .= ( $active ) ? " AND user_lastvisit " . $key_match[$active_select] . " " . gmmktime(0, 0, 0, $active[1], intval($active[2]), intval($active[0])) : '';

}

$where_sql";

$result = $db->sql_query($sql);

for($i = 0; $i < sizeof($user_ids); $i++)

{

WHERE user_id = " . $userids[$i];

// $db->sql_query($sql);

}

$sql = "UPDATE " . USERS_TABLE . " SET user_active = 0";

}

$where_sql";

// $db->sql_query($sql);

<p><?php echo $lang['Prune_users_explain']; ?></p>

<form method="post" name="post" action="<?php echo "admin_prune_users.$phpEx$SID"; ?>"><table class="bg" width="80%" cellspacing="1" cellpadding="4" border="0" align="center">

<th colspan="2"><?php echo $lang['Prune_users']; ?></th>

</tr>

<td class="row1"><?php echo $lang['Username']; ?>: </td>

<td class="row2"><input class="post" type="text" name="username" /></td>

</tr>

<td class="row1"><?php echo $lang['Email']; ?>: </td>

<td class="row2"><input class="post" type="text" name="email" /></td>

</tr>

<td class="row1"><?php echo $lang['Joined']; ?>: <br /><span class="gensmall"><?php echo $lang['Joined_explain']; ?></span></td>

<td class="row2"><select name="joined_select"><?php echo $s_find_join_time; ?></select> <input class="post" type="text" name="joined" maxlength="10" size="10" /></td>

</tr>

<td class="row1"><?php echo $lang['Last_active']; ?>: <br /><span class="gensmall"><?php echo $lang['Last_active_explain']; ?></span></td>

<td class="row2"><select name="active_select"><?php echo $s_find_active_time; ?></select> <input class="post" type="text" name="active" maxlength="10" size="10" /></td>

</tr>

<td class="row1"><?php echo $lang['Posts']; ?>: </td>

<td class="row2"><select name="count_select"><?php echo $s_find_count; ?></select> <input class="post" type="text" name="count" /></td>

</tr>

if( !empty($setmodules) )

{

{

return;

}

//

//

//

{

return;

}

{

$mode = ( isset($HTTP_POST_VARS['mode']) ) ? $HTTP_POST_VARS['mode'] : $HTTP_GET_VARS['mode'];

}

{

//

// These could be entered via a form button

// They want to add a new rank, show the form.

//

$rank_id = ( isset($HTTP_GET_VARS['id']) ) ? intval($HTTP_GET_VARS['id']) : 0;

$s_hidden_fields = '<input type="hidden" name="mode" value="save" />';

if ( $mode == 'edit' )

{

if ( empty($rank_id) )

$sql = "SELECT * FROM " . RANKS_TABLE . "

WHERE rank_id = $rank_id";

$result = $db->sql_query($sql);

$rank_info = $db->sql_fetchrow($result);

$s_hidden_fields .= '<input type="hidden" name="id" value="' . $rank_id . '" />';

//

// Ok, they sent us our info, let's update it.

//

$rank_id = ( isset($HTTP_POST_VARS['id']) ) ? intval($HTTP_POST_VARS['id']) : 0;

$rank_title = ( isset($HTTP_POST_VARS['title']) ) ? trim($HTTP_POST_VARS['title']) : '';

$special_rank = ( $HTTP_POST_VARS['special_rank'] == 1 ) ? TRUE : 0;

$message = $lang['Rank_added'];

}

$db->sql_query($sql);

$message .= '<br /><br />' . sprintf($lang['Click_return_rankadmin'], '<a href="' . "admin_ranks.$phpEx$SID" . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_admin_index'], '<a href="' . "index.$phpEx$SID&amp;pane=right" . '">', '</a>');

//

// Ok, they want to delete their rank

//

if ( isset($HTTP_POST_VARS['id']) || isset($HTTP_GET_VARS['id']) )

{

$rank_id = ( isset($HTTP_POST_VARS['id']) ) ? intval($HTTP_POST_VARS['id']) : intval($HTTP_GET_VARS['id']);

{

$rank_id = 0;

}

if ( $rank_id )

{

$sql = "DELETE FROM " . RANKS_TABLE . "

WHERE rank_id = $rank_id";

$db->sql_query($sql);

WHERE user_rank = $rank_id";

$db->sql_query($sql);

/***************************************************************************

* admin_search.php

* -------------------

if ( !empty($setmodules) )

{

{

return;

}

//

// Do we have forum admin permissions?

//

{

message_die(MESSAGE, $lang['No_admin']);

}

//

// Take board offline

//

WHERE config_name = 'board_disable'";

$db->sql_query($sql);

//

// Fetch a batch of posts_text entries

//

FROM " . POSTS_TEXT_TABLE;

$result = $db->sql_query($sql);

$db->sql_freeresult($result);

AND $batchend";

$result = $db->sql_query($sql);

if ( $row = $db->sql_fetchrow($result) )

{

do

{

$search_raw_words = array();

$search_raw_words['text'] = split_words(clean_words('post', $row['post_text'], $stopword_array, $synonym_array));

if ( !empty($search_matches) )

{

for ($i = 0; $i < count($search_matches); $i++)

$search_matches[$i] = trim($search_matches[$i]);

{

$word[] = $search_matches[$i];

$word_insert_sql[$word_in] .= ( $word_insert_sql[$word_in] != '' ) ? ", '" . $search_matches[$i] . "'" : "'" . $search_matches[$i] . "'";

}

}

}

case 'mssql-odbc':

case 'oracle':

case 'db2':

WHERE word_text IN ($word_text_sql)";

$result = $db->sql_query($sql);

$value_sql = '';

$match_word = array();

for ($i = 0; $i < count($word); $i++)

$new_match = true;

if ( isset($check_words[$word[$i]]) )

{

$value_sql .= ( ( $value_sql != '' ) ? ' UNION ALL ' : '' ) . "SELECT '" . $word[$i] . "'";

break;

default:

$db->sql_query($sql);

break;

}

{

case 'mysql':

case 'mysql4':

break;

case 'mssql':

break;

}

if ( $match_sql != '' )

{

$db->sql_query($sql);

}

}

}

else

{

WHERE config_name = 'board_disable'";

$db->sql_query($sql);

}

else if ( isset($HTTP_POST_VARS['cancel']) )

{

WHERE config_name = 'board_disable'";

$db->sql_query($sql);

if ( !empty($setmodules) )

{

{

return;

}

//

// Do we have general permissions?

//

{

message_die(MESSAGE, $lang['No_admin']);

}

$smilies_images[] = $file;

}

elseif (preg_match('/\.pak$/i', $file))

$smilies_paks[] = $file;

}

}

}

}

}

else

{

<p><?php echo $lang['Import_smilies_explain'] ?></p>

<tr>

<th class="thHead" colspan="2"><?php echo $lang['Smilies_import'] ?></th>

</tr>

</td>

</tr>

<tr>

</tr>

</table></form>

<?php

//-->

</script>

<tr>

<th class="thHead" colspan="2"><?php echo $lang['smile_config'] ?></th>

</tr>

<td class="row2"><input type="text" name="smile_emotion" /></td>

</tr>

<tr>

</tr>

</table></form>

<?php

//-->

</script>

<tr>

</tr>

<tr>

<td class="row2"><?php echo $lang['Smile_code'] ?></td>

<td class="row2"><select name="smile_order"><?php echo $order_list ?></select></td>

</tr>

<tr>

</tr>

</table></form>

<?php

'emoticon' => stripslashes($HTTP_POST_VARS['smile_emotion']),

'smile_on_posting' => (!empty($HTTP_POST_VARS['smile_on_posting'])) ? 1 : 0

);

$smile_id = $HTTP_POST_VARS['smile_id'];

$smile_order = $HTTP_POST_VARS['smile_order'];

if ( !empty($setmodules) )

{

{

return;

}

//

// Do we have styles admin permissions?

//

{

message_die(MESSAGE, $lang['No_admin']);

}

if ( isset($HTTP_POST_VARS['img_root']) )

{

WHERE imageset_path LIKE '" . $HTTP_POST_VARS['imgroot'] . "'";

$result = $db->sql_query($sql);

$imageset = array('imageset_path', 'post_new', 'post_locked', 'post_pm', 'reply_new', 'reply_pm', 'reply_locked', 'icon_profile', 'icon_pm', 'icon_delete', 'icon_ip', 'icon_quote', 'icon_search', 'icon_edit', 'icon_email', 'icon_www', 'icon_icq', 'icon_aim', 'icon_yim', 'icon_msnm', 'icon_no_email', 'icon_no_www', 'icon_no_icq', 'icon_no_aim', 'icon_no_yim', 'icon_no_msnm', 'goto_post', 'goto_post_new', 'goto_post_latest', 'goto_post_newest', 'forum', 'forum_new', 'forum_locked', 'folder', 'folder_new', 'folder_hot', 'folder_hot_new', 'folder_locked', 'folder_locked_new', 'folder_sticky', 'folder_sticky_new', 'folder_announce', 'folder_announce_new', 'topic_watch', 'topic_unwatch', 'poll_left', 'poll_center', 'poll_right', 'rating');

$sql = "SELECT imageset_name, imageset_path

ORDER BY imageset_name";

$result = $db->sql_query($sql);

echo '<tr>';

echo '<th height="25">Image</th><th>Source</th><th>Width</th><th>Height</th><th>Border</th><th>&nbsp;</th>';

echo '</tr>';

for($i = 0; $i < count($imageset); $i++)

{

$class = ( !($i%2) ) ? 'row1' : 'row2';

if ( isset($HTTP_POST_VARS['update']) )

{

WHERE theme_id = $theme_id";

$result = $db->sql_query($sql);

$css_data = ( !empty($HTTP_POST_VARS['css_data']) ) ? htmlentities($HTTP_POST_VARS['css_data']) : '';

$css_external = ( !empty($HTTP_POST_VARS['css_data']) ) ? $HTTP_POST_VARS['css_data'] : '';

WHERE theme_id = $theme_id";

$db->sql_query($sql);

page_header($lang['Edit_theme']);

FROM " . STYLES_CSS_TABLE;

$result = $db->sql_query($sql);

$css_external = '';

if ( $theme_id )

{

FROM " . STYLES_CSS_TABLE . "

WHERE theme_id = $theme_id";

$result = $db->sql_query($sql);

global $db;

$sql = "SELECT template_name, template_path

ORDER BY template_name";

$result = $db->sql_query($sql);

$selected = ( $tplroot == $row['template_path'] ) ? ' selected="selected"' : '';

$tplroot_options .= '<option value="' . $row['template_path'] . '"' . $selected . '>' . $row['template_path'] . '</option>';

}

return $tplroot_options;

}

if ( !empty($setmodules) )

{

{

return;

}

//

// Do we have forum admin permissions?

//

{

return;

}

$user_avatar_filetype = ( !empty($HTTP_POST_FILES['avatar']['type']) ) ? $HTTP_POST_FILES['avatar']['type'] : '';

$user_avatar = ( empty($user_avatar_loc) ) ? $this_userdata['user_avatar'] : '';

$user_status = ( !empty($HTTP_POST_VARS['user_status']) ) ? intval( $HTTP_POST_VARS['user_status'] ) : 0;

$user_allowpm = ( !empty($HTTP_POST_VARS['user_allowpm']) ) ? intval( $HTTP_POST_VARS['user_allowpm'] ) : 0;

$user_lang = stripslashes($user_lang);

$user_dateformat = stripslashes($user_dateformat);

{

$user_avatar = $user_avatar_local;

$user_avatar_type = USER_AVATAR_GALLERY;

if( $user_status == 0 )

{

// User is (made) inactive. Delete all their sessions.

WHERE session_user_id = $user_id";

$db->sql_query($sql);

}

$signature = prepare_message($signature, $allowhtml, $allowbbcode, $allowsmilies, $signature_bbcode_uid);

if ( strlen($sig_length_check) > $board_config['max_sig_chars'] )

$error = TRUE;

$error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . $lang['Signature_too_long'];

}

if( preg_match("/Content-Length\: ([0-9]+)[^\/ ][\s]+/i", $avatar_data, $file_data1) && preg_match("/Content-Type\: image\/[x\-]*([a-z]+)[\s]+/i", $avatar_data, $file_data2) )

{

$file_type = $file_data2[1];

switch( $file_type )

{

$avatar_sql = ", user_avatar = '" . str_replace("\'", "''", $user_avatar_local) . "', user_avatar_type = " . USER_AVATAR_GALLERY;

}

//

// Update entry in DB

//

{

if( $HTTP_POST_VARS['deleteuser'] )

{

AND g.group_single_user = 1";

$result = $db->sql_query($sql);

$db->sql_transaction();

$sql = "UPDATE " . POSTS_TABLE . "

WHERE poster_id = $user_id";

$db->sql_query($sql);

$sql = "UPDATE " . TOPICS_TABLE . "

WHERE topic_poster = $user_id";

$db->sql_query($sql);

$user_lang = $this_userdata['user_lang'];

$user_timezone = $this_userdata['user_timezone'];

$user_dateformat = $this_userdata['user_dateformat'];

$user_status = $this_userdata['user_active'];

$user_allowavatar = $this_userdata['user_allowavatar'];

$user_allowpm = $this_userdata['user_allow_pm'];

$COPPA = false;

$html_status = ($this_userdata['user_allowhtml'] ) ? $lang['HTML_is_ON'] : $lang['HTML_is_OFF'];

}

}

}

@closedir($dir);

if( isset($HTTP_POST_VARS['avatarcategory']) )

$s_hidden_fields .= '<input type="hidden" name="allowbbcode" value="' . $allowbbcode . '" />';

$s_hidden_fields .= '<input type="hidden" name="allowsmilies" value="' . $allowsmilies . '" />';

$s_hidden_fields .= '<input type="hidden" name="hideonline" value="' . !$allowviewonline . '" />';

$s_hidden_fields .= '<input type="hidden" name="language" value="' . $user_lang . '" />';

$s_hidden_fields .= '<input type="hidden" name="timezone" value="' . $user_timezone . '" />';

$s_hidden_fields .= '<input type="hidden" name="dateformat" value="' . str_replace("\"", "&quot;", $user_dateformat) . '" />';

$template->assign_vars(array(

"L_USER_TITLE" => $lang['User_admin'],

"L_USER_EXPLAIN" => $lang['User_admin_explain'],

"L_GO" => $lang['Go'],

"S_HIDDEN_FIELDS" => $s_hidden_fields)

);

}

{

$rank = $row['rank_title'];

$rank_id = $row['rank_id'];

$selected = ( $this_userdata['user_rank'] == $rank_id ) ? ' selected="selected"' : '';

$rank_select_box .= '<option value="' . $rank_id . '"' . $selected . '>' . $rank . '</option>';

}

$signature = preg_replace('/\:[0-9a-z\:]*?\]/si', ']', $signature);

$template->set_filenames(array(

"body" => "admin/user_edit_body.tpl")

);

//

// Let's do an overall check for settings/versions which would prevent

// us from doing file uploads....

'ALLOW_AVATAR_YES' => ($user_allowavatar) ? 'checked="checked"' : '',

'ALLOW_AVATAR_NO' => (!$user_allowavatar) ? 'checked="checked"' : '',

'USER_ACTIVE_YES' => ($user_status) ? 'checked="checked"' : '',

'RANK_SELECT_BOX' => $rank_select_box,

'L_USER_TITLE' => $lang['User_admin'],

'L_USER_EXPLAIN' => $lang['User_admin_explain'],

'L_PASSWORD_IF_CHANGED' => $lang['password_if_changed'],

'L_CONFIRM_PASSWORD' => $lang['Confirm_password'],

'L_PASSWORD_CONFIRM_IF_CHANGED' => $lang['password_confirm_if_changed'],

'L_ALWAYS_ALLOW_HTML' => $lang['Always_html'],

'L_HIDE_USER' => $lang['Hide_user'],

'L_ALWAYS_ADD_SIGNATURE' => $lang['Always_add_sig'],

'L_SPECIAL' => $lang['User_special'],

'L_SPECIAL_EXPLAIN' => $lang['User_specail_explain'],

'L_USER_ACTIVE' => $lang['User_status'],

'L_ALLOW_PM' => $lang['User_allowpm'],

'L_ALLOW_AVATAR' => $lang['User_allowavatar'],

'L_AVATAR_PANEL' => $lang['Avatar_panel'],

'L_AVATAR_EXPLAIN' => $lang['Admin_avatar_explain'],

'L_DELETE_AVATAR' => $lang['Delete_Image'],

'S_FORM_ENCTYPE' => $form_enctype,

'HTML_STATUS' => $html_status,

'SMILIES_STATUS' => $smilies_status,

'L_DELETE_USER' => $lang['User_delete'],

if ( !empty($setmodules) )

{

{

return;

}

//

// Do we have styles admin permissions?

//

{

message_die(MESSAGE, $lang['No_admin']);

}

//

// Delete entries if requested and able

//

{

$where_sql = '';

if ( isset($HTTP_POST_VARS['delmarked']) && isset($HTTP_POST_VARS['mark']) )

$where_sql = "WHERE log_id IN ($where_sql)";

}

$where_sql";

$db->sql_query($sql);

if ( $mode == 'mod' )

{

$sql = "SELECT forum_id, forum_name

ORDER BY cat_id, forum_order";

$result = $db->sql_query($sql);

<tr>

<td class="cat" colspan="5" height="28" align="center"><span class="gensmall"><?php echo $lang['Display_log']; ?>: &nbsp;<select name="sort_days"><?php echo $sort_day_options; ?></select>&nbsp;<?php echo $lang['Sort_by']; ?> <select name="sort_key"><?php echo $sort_key_options; ?></select> <select name="sort_dir"><?php echo $sort_order_options; ?></select>&nbsp;<input class="liteoption" type="submit" value="<?php echo $lang['Go']; ?>" name="sort" /></span></td>

</tr>

<th width="15%" height="25" nowrap="nowrap"><?php echo $lang['Username']; ?></th>

<th width="15%" nowrap="nowrap"><?php echo $lang['IP']; ?></th>

<th width="20%" nowrap="nowrap"><?php echo $lang['Time']; ?></th>

for($i = 0; $i < sizeof($log_data); $i++)

{

$row_class = ( $row_class == 'row1' ) ? 'row2' : 'row1';

?>

<tr>

<td class="<?php echo $row_class; ?>" nowrap="nowrap"><?php echo $log_data[$i]['username']; ?></td>

}

{

?>

</table>

<table width="100%" cellspacing="2" cellpadding="2" border="0" align="center">

<td align="left" valign="top">&nbsp;<span class="nav"><?php echo on_page($log_count, $board_config['topics_per_page'], $start); ?></span></td>

{

?><b><span class="gensmall"><a href="javascript:marklist(true);" class="gensmall"><?php echo $lang['Mark_all']; ?></a> :: <a href="javascript:marklist(false);" class="gensmall"><?php echo $lang['Unmark_all']; ?></a></span></b>&nbsp;<br /><br /><?php

}

if ( !empty($setmodules) )

{

{

return;

}

//

// Do we have forum admin permissions?

//

{

return;

}

{

$mode = ( isset($HTTP_GET_VARS['mode']) ) ? $HTTP_GET_VARS['mode'] : $HTTP_POST_VARS['mode'];

}

{

//

// These could be entered via a form button

message_die(MESSAGE, $lang['No_word_selected']);

}

WHERE word_id = $word_id";

$result = $db->sql_query($sql);

message_die(MESSAGE, $lang['Must_specify_word']);

}

WHERE word_id = $word_id";

$db->sql_query($sql);

<?php

ORDER BY word";

$result = $db->sql_query($sql);

//

// Do we have any admin permissions at all?

//

{

message_die(MESSAGE, 'No_admin', '', true);

}

$cat = ( !empty($lang[$cat . '_cat']) ) ? $lang[$cat . '_cat'] : preg_replace('/_/', ' ', $cat);

?>

<th class="menu" height="25">&#0187; <?php echo $cat; ?></th>

</tr>

<?php

@ksort($action_ary);

{

$action = ( !empty($lang[$action]) ) ? $lang[$action] : preg_replace('/_/', ' ', $action);

$cell_bg = ( $cell_bg == 'row1' ) ? 'row2' : 'row1';

?>

<td class="<?php echo $cell_bg; ?>"><a class="genmed" href="<?php echo $file; ?>" target="main"><?php echo $action; ?></a></td>

</tr>

<?php

if ( isset($HTTP_POST_VARS['delete']) )

{

WHERE config_name = 'num_users'";

$db->sql_query($sql);

}

add_admin_log($log_action, sizeof($HTTP_POST_VARS['mark']));

}

}

if ( preg_match('/^mysql/', SQL_LAYER) )

{

$result = $db->sql_query('SELECT VERSION() AS mysql_version');

if ( $row = $db->sql_fetchrow($result) )

{

$version = $row['mysql_version'];

{

$db_name = ( preg_match('/^(3\.23\.[6-9])|(3\.23\.[1-9][1-9])|(4\.)/', $version) ) ? "`$dbname`" : $dbname;

FROM " . $db_name;

$result = $db->sql_query($sql);

$dbsize = 0;

while ( $row = $db->sql_fetchrow($result) )

{

}

else if ( preg_match('/^mssql/', SQL_LAYER) )

{

$result = $db->sql_query($sql);

$dbsize = ( $row = $db->sql_fetchrow($result) ) ? intval($row['dbsize']) : $lang['Not_available'];

}

else

<h1><?php echo $lang['Forum_stats']; ?></h1>

<table class="bg" width="100%" cellpadding="4" cellspacing="1" border="0">

<th width="25%" nowrap="nowrap" height="25"><?php echo $lang['Statistic']; ?></th>

<th width="25%"><?php echo $lang['Value']; ?></th>

<th width="25%" nowrap="nowrap"><?php echo $lang['Statistic']; ?></th>

<th width="25%"><?php echo $lang['Value']; ?></th>

</tr>

<td class="row1" nowrap="nowrap"><?php echo $lang['Number_posts']; ?>:</td>

<td class="row2"><b><?php echo $total_posts; ?></b></td>

<td class="row1" nowrap="nowrap"><?php echo $lang['Posts_per_day']; ?>:</td>

<td class="row2"><b><?php echo $posts_per_day; ?></b></td>

</tr>

<td class="row1" nowrap="nowrap"><?php echo $lang['Number_topics']; ?>:</td>

<td class="row2"><b><?php echo $total_topics; ?></b></td>

<td class="row1" nowrap="nowrap"><?php echo $lang['Topics_per_day']; ?>:</td>

<td class="row2"><b><?php echo $topics_per_day; ?></b></td>

</tr>

<td class="row1" nowrap="nowrap"><?php echo $lang['Number_users']; ?>:</td>

<td class="row2"><b><?php echo $total_users; ?></b></td>

<td class="row1" nowrap="nowrap"><?php echo $lang['Users_per_day']; ?>:</td>

<td class="row2"><b><?php echo $users_per_day; ?></b></td>

</tr>

<td class="row1" nowrap="nowrap"><?php echo $lang['Board_started']; ?>:</td>

<td class="row2"><b><?php echo $start_date; ?></b></td>

<td class="row1" nowrap="nowrap"><?php echo $lang['Avatar_dir_size']; ?>:</td>

<td class="row2"><b><?php echo $avatar_dir_size; ?></b></td>

</tr>

<td class="row1" nowrap="nowrap"><?php echo $lang['Database_size']; ?>:</td>

<td class="row2"><b><?php echo $dbsize; ?></b></td>

<td class="row1" nowrap="nowrap"><?php echo $lang['Gzip_compression']; ?>:</td>

<p><?php echo $lang['Admin_log_index_explain']; ?></p>

<table class="bg" width="100%" cellpadding="4" cellspacing="1" border="0">

<th width="15%" height="25" nowrap="nowrap"><?php echo $lang['Username']; ?></th>

<th width="15%"><?php echo $lang['IP']; ?></th>

<th width="20%"><?php echo $lang['Time']; ?></th>

for($i = 0; $i < sizeof($log_data); $i++)

{

$row_class = ( $row_class == 'row1' ) ? 'row2' : 'row1';

?>

<tr>

<td class="<?php echo $row_class; ?>"><?php echo $log_data[$i]['username']; ?></td>

<p><?php echo $lang['Inactive_users_explain']; ?></p>

<form method="post" name="inactive" action="<?php echo "index.$phpEx$SID&amp;pane=right"; ?>"><table class="bg" width="100%" cellpadding="4" cellspacing="1" border="0">

<th width="45%" height="25" nowrap="nowrap"><?php echo $lang['Username']; ?></th>

<th width="45%"><?php echo $lang['Joined']; ?></th>

<th width="5%" nowrap="nowrap"><?php echo $lang['Mark']; ?></th>

</tr>

<?php

ORDER BY user_regdate ASC";

$result = $db->sql_query($sql);

</table>

<table width="100%" cellspacing="1" cellpadding="4" border="0" align="center">

<td align="right" valign="top" nowrap="nowrap"><b><span class="gensmall"><a href="javascript:marklist(true);" class="gensmall"><?php echo $lang['Mark_all']; ?></a> :: <a href="javascript:marklist(false);" class="gensmall"><?php echo $lang['Unmark_all']; ?></a></span></b></td>

</tr>

</table></form>

<frameset rows="60, *" border="0" framespacing="0" frameborder="NO">

<frame src="<?php echo "index.$phpEx$SID&amp;pane=top"; ?>" name="title" noresize marginwidth="0" marginheight="0" scrolling="NO">

<frame src="<?php echo "index.$phpEx$SID&amp;pane=left"; ?>" name="nav" marginwidth="3" marginheight="3" scrolling="yes">

<frame src="<?php echo "index.$phpEx$SID&amp;pane=right"; ?>" name="main" marginwidth="0" marginheight="0" scrolling="auto">

</frameset>

// Start session management

//

$userdata = $session->start($update);

//

// End session management

//