<?php
/*
########################################################################
# #
# Version 4 / / / #
# -----------__---/__---__------__----__---/---/- #
# | /| / /___) / ) (_ ` / ) /___) / / #
# _|/_|/__(___ _(___/_(__)___/___/_(___ _/___/___ #
# Free Content / Management System #
# / #
# #
# #
# Copyright 2005-2006 by webspell.org #
# #
# visit webSPELL.org, webspell.info to get webSPELL for free #
# - Script runs under the GNU GENERAL PUBLIC LICENSE #
# - It's NOT allowed to remove this copyright-tag #
# -- http://www.fsf.org/licensing/licenses/gpl.html #
# #
# Code based on WebSPELL Clanpackage (Michael Gruber - webspell.at), #
# Far Development by Development Team - webspell.org #
# #
# visit webspell.org #
# #
########################################################################
*/
//set variable against bad boys
$userID = '';
//login sessions
systeminc('session');
//get IP
systeminc('ip');
//installed?
if(file_exists('install/index.php')) system_error('Please remove the install-folder first.',0);
//webSPELL functions
if(!function_exists('file_get_contents')) {
function file_get_contents($filename)
{
$fd = fopen("$filename", "rb");
$content = fread($fd, filesize($filename));
fclose($fd);
return $content;
}
}
if(!function_exists('str_split')){
function str_split($str,$split_length=1){
$cnt = strlen($str);
for ($i=0;$i<$cnt;$i+=$split_length)
$result[]= substr($str,$i,$split_length);
return $result;
}
}
function gettemplate($template,$endung="html") {
$templatefolder = "templates";
return str_replace("\"","\\\"",implode("",file($templatefolder."/".$template.".".$endung)));
}
function sql_quote($value) {
if( get_magic_quotes_gpc() ) {
$value = stripslashes( $value );
}
if( function_exists( "mysql_real_escape_string" ) ) {
$value = mysql_real_escape_string( $value );
}
else
{
$value = addslashes( $value );
}
return $value;
}
function percent($sub, $total, $dec) {
if ($sub) {
$perc = $sub / $total * 100;
$perc = round($perc, $dec);
return $perc;
}
else return 0;
}
function showlock($reason, $time) {
eval ("\$lock = \"".gettemplate("lock")."\";");
die($lock);
}
function checkenv($systemvar,$checkfor) {
return eregi($checkfor, ini_get($systemvar));
}
function createkey($length) {
$key='';
for($i=0;$i<$length;$i++) {
switch(rand(1,3)) {
case 1: $key.=chr(rand(48,57));break;
case 2: $key.=chr(rand(65,90));break;
case 3: $key.=chr(rand(97,122));break;
}
}
return md5($key);
}
// -- FILESYSTEM -- //
systeminc('func/filesystem');
// -- USER INFORMATION -- //
systeminc('func/user');
// -- ACCESS INFORMATION -- //
systeminc('func/useraccess');
// -- MESSENGER INFORMATION -- //
systeminc('func/messenger');
// -- NEWS INFORMATION -- //
systeminc('func/news');
// -- GAME INFORMATION -- //
systeminc('func/game');
// -- BOARD INFORMATION -- //
systeminc('func/board');
// -- CAPTCHA -- //
systeminc('func/captcha');
// -- VARIOUS -- //
function makepagelink($link, $page, $pages) {
$page_link = '<img src="images/icons/multipage.gif" width="10" height="12"> <span class="small">';
if($page!=1) $page_link .= " <a href=\"$link&page=1\">«</a> <a href=\"$link&page=".($page-1)."\">‹</a>";
if($page>=6) $page_link .= " <a href=\"$link&page=".($page-5)."\">...</a>";
if($page+4>=$pages) $pagex=$pages;
else $pagex=$page+4;
for($i=$page-4 ; $i<=$pagex ; $i++) {
if($i<=0) $i=1;
if($i==$page) $page_link .= " <b><u>$i</u></b>";
else $page_link .= " <a href=\"$link&page=$i\">$i</a>";
}
if(($pages-$page)>=5) $page_link .= " <a href=\"$link&page=".($page+5)."\">...</a>";
if($page!=$pages) $page_link .= " <a href=\"$link&page=".($page+1)."\">›</a> <a href=\"$link&page=".$pages."\">»</a>";
$page_link .= "</span>";
return $page_link;
}
function str_break($str, $maxlen) {
$nobr = 0;
$len = strlen($str);
for ($i = 0; $i<$len; $i++) {
// Überprüfen ob ein das Zeichen ein möglicher Zeilenubruch ist
if (($str[$i]!=' ') && ($str[$i]!='-') && ($str[$i]!="\n")) $nobr++;
else {
$nobr = 0; // Zeichen ist Trennzeichen - Zähler zurücksetzen
if($maxlen+$i>$len) {
// Ist der Rest kürzer als $maxlen, muss er nicht mehr überprüft werden
$str_br .= substr($str, $i);
break;
}
}
// Wenn die Zeichenkette ohne Trennzeichen länger als zulässig ist
// wird ein Trennzeichen eingefügt und der Zähler zurückgesetzt
if ($nobr>$maxlen) {
$str_br .= '-'.$str[$i];
$nobr = 1;
} else $str_br .= $str[$i];
}
return $str_br;
}
// -- BB CODE -- //
systeminc('func/bbcode');
function cleartext($text,$bbcode=true) {
$text=getinput($text);
$text=strip_tags($text);
$text=smileys($text,1);
$text=insertlinks($text);
$text=flags($text);
$text=replacement($text, $bbcode);
$text=nl2br($text);
return $text;
}
function htmloutput($text) {
$text=smileys($text);
$text=insertlinks($text);
$text=flags($text);
$text=replacement($text);
$text=stripslashes($text);
$text=nl2br($text);
return $text;
}
function clearfromtags($text) {
$text=getinput($text);
$text=strip_tags($text);
$text=nl2br($text);
return $text;
}
function getinput($text) {
$text=stripslashes($text);
$text=htmlspecialchars($text);
return $text;
}
function isonline($userID) {
$ergebnis=safe_query("SELECT site FROM ".PREFIX."whoisonline WHERE userID='$userID'");
$anz=mysql_num_rows($ergebnis);
if($anz) {
$ds=mysql_fetch_array($ergebnis);
return '<b>online</b> @ <a href="index.php?site='.$ds[site].'">'.$ds[site].'</a>';
}
else return 'offline';
}
// -- GALLERY -- //
systeminc('func/gallery');
// LOGIN
$login_per_cookie = false;
if(isset($_COOKIE['ws_auth']) AND !isset($_SESSION['ws_auth'])) {
$login_per_cookie = true;
$_SESSION['ws_auth'] = $_COOKIE['ws_auth'];
}
systeminc('login');
if($login_per_cookie) {
$ll=mysql_fetch_array(safe_query("SELECT lastlogin FROM ".PREFIX."user WHERE userID='$userID'"));
$_SESSION['ws_lastlogin'] = $ll[lastlogin];
}
// BANNED
$banned=safe_query("SELECT userID, banned FROM ".PREFIX."user WHERE userID='$userID' OR ip='$ip'");
while($db=mysql_fetch_array($banned)) {
if($db[banned]) system_error('You have been banished.',0);
}
// WHO IS - WAS ONLINE
$timeout=5; // 1 sekunde
$deltime = time()-($timeout*60); // IS 1m
$wasdeltime = time()-(60*60*24); // WAS 24h
safe_query("UPDATE ".PREFIX."user SET ip='$ip' WHERE userID='$userID'");
safe_query("DELETE FROM ".PREFIX."whoisonline WHERE time < '$deltime'"); // IS ONLINE
safe_query("DELETE FROM ".PREFIX."whowasonline WHERE time < '$wasdeltime'"); // WAS ONLINE
// SITE VARIABLE
$site = $_GET['site'];
if($closed AND !isanyadmin($userID)) {
$dl=mysql_fetch_array(safe_query("SELECT * FROM `".PREFIX."lock` LIMIT 0,1"));
$reason = $dl[reason];
$time = $dl[time];
showlock($reason, $time);
}
//HELP MODE
systeminc('help');
//WHOISONLINE
if($userID!='') {
// IS ONLINE
if(mysql_num_rows(safe_query("SELECT userID FROM ".PREFIX."whoisonline WHERE userID='$userID'"))) {
safe_query("UPDATE ".PREFIX."whoisonline SET time='".time()."', site='$site' WHERE userID='$userID'");
safe_query("UPDATE ".PREFIX."user SET lastlogin='".time()."' WHERE userID='$userID'");
}
else safe_query("INSERT INTO ".PREFIX."whoisonline (time, userID, nickname, site) VALUES ('".time()."', '$userID', '".mysql_escape_string(getnickname($userID))."', '$site')");
// WAS ONLINE
if(mysql_num_rows(safe_query("SELECT userID FROM ".PREFIX."whowasonline WHERE userID='$userID'")))
safe_query("UPDATE ".PREFIX."whowasonline SET time='".time()."', site='$site' WHERE userID='$userID'");
else safe_query("INSERT INTO ".PREFIX."whowasonline (time, userID, nickname, site) VALUES ('".time()."', '$userID', '".mysql_escape_string(getnickname($userID))."', '$site')");
}
else {
$anz = mysql_num_rows(safe_query("SELECT ip FROM ".PREFIX."whoisonline WHERE ip='$ip'"));
if($anz) safe_query("UPDATE ".PREFIX."whoisonline SET time='".time()."', site='$site' WHERE ip='$ip'");
else safe_query("INSERT INTO ".PREFIX."whoisonline (time, ip, site) VALUES ('".time()."','$ip', '$site')");
}
// COUNTER
$time = time();
$date = date("d.m.Y", $time);
$deltime = $time-(3600*24);
safe_query("DELETE FROM ".PREFIX."counter_iplist WHERE del<".$deltime);
$anz=mysql_num_rows(safe_query("SELECT ip FROM ".PREFIX."counter_iplist WHERE ip='".$ip."'"));
if(!$anz) {
safe_query("UPDATE ".PREFIX."counter SET hits=hits+1");
safe_query("INSERT INTO ".PREFIX."counter_iplist (dates, del, ip) VALUES ('".$date."', '".$time."', '".$ip."')");
$anz2=mysql_num_rows(safe_query("SELECT dates FROM ".PREFIX."counter_stats WHERE dates='".$date."'"));
if(!$anz2) safe_query("INSERT INTO `".PREFIX."counter_stats` (`dates`, `count`) VALUES ('".$date."', '1')");
else safe_query("UPDATE ".PREFIX."counter_stats SET count=count+1 WHERE dates='".$date."'");
}
$cur=mysql_fetch_array(safe_query("SELECT count(*) FROM ".PREFIX."whoisonline"));
$max=mysql_fetch_array(safe_query("SELECT maxonline FROM ".PREFIX."counter LIMIT 0,1"));
if($cur[0] > $max['maxonline']) safe_query("UPDATE ".PREFIX."counter SET maxonline='".$cur[0]."'");
//Country list
unset($countries);
$ergebnis = safe_query("SELECT * FROM `".PREFIX."countries` ORDER BY country");
while($ds = mysql_fetch_array($ergebnis)) {
$countries .= '<option value="'.$ds[short].'">'.$ds[country].'</option>';
}
?>
