messagelist.php

   1 <?
   2 session_start();
   3 ?>
   4 <html>
   5 <?
   6 include("con.inc");
   7 include("colors.inc");
   8 include("top.inc");
   9 if (!$board)
  10 {
  11 echo "Invalid boardID.";
  12 exit;
  13 }
  14 if (!$topic)
  15 {
  16 Echo "Invalid topicID.";
  17 exit;
  18 }
  19 function clancheck($bdnum,$username)
  20 {
  21 $sql="SELECT * FROM users WHERE username='$username'";
  22 $result=mysql_query($sql);
  23 $myrow=mysql_fetch_array($result);
  24 $clan2=$myrow["faction"];
  25 $sql="SELECT * FROM boards WHERE boardid='$bdnum'";
  26 $result=mysql_query($sql);
  27 $myrow=mysql_fetch_array($result);
  28 if ($clan2==$myrow["clan"])
  29 {
  30 return 1;
  31 } else {
  32 return 0;
  33 }
  34 }
  35 function checkl($topicid)
  36 {
  37 $sql="SELECT * FROM topics WHERE topicid='$topicid'";
  38 $result=mysql_query($sql);
  39 $myrow=mysql_fetch_array($result);
  40 if ($myrow["active"]==0) return 0;
  41 if ($myrow["active"]==1) return 1;
  42 }
  43 function check2($board) {
  44 $sql="SELECT * FROM boards WHERE boardid='$board'";
  45 $result=mysql_query($sql);
  46 $myrow=mysql_fetch_array($result);
  47 return $myrow["boardlevel"];
  48 }
  49 function check3($board, $topic)
  50 {
  51 $sql="SELECT * FROM messages WHERE topic='$topic' AND mesboard='$board'";
  52 $result=mysql_query($sql);
  53 if(!mysql_num_rows($result))
  54 {
  55 return 0;
  56 } else {
  57 return 1;
  58 }}
  59 function howsugs()
  60 {
  61 $sql="SELECT * FROM suggest WHERE active=1";
  62 $result=mysql_query($sql);
  63 $suggests=mysql_num_rows($result);
  64 return $suggests;
  65 }
  66 function howmarks()
  67 {
  68 $sql="SELECT * FROM marked WHERE active=1";
  69 $result=mysql_query($sql);
  70 $marks=mysql_num_rows($result);
  71 return $marks;
  72 }
  73 function getlevel($username)
  74 {
  75 $sql="SELECT * FROM users WHERE username='$username'";
  76 $result=mysql_query($sql);
  77 $myrow=mysql_fetch_array($result);
  78 return $myrow["level"];
  79 }
  80 function useid($usename)
  81 {
  82 $sql="SELECT * FROM users WHERE username='$usename'";
  83 $result=mysql_query($sql);
  84 $myrow=mysql_fetch_array($result);
  85 return $myrow["userid"];
  86 }
  87 function useid2($usename)
  88 {
  89 $sql="SELECT * FROM users WHERE username='$usename'";
  90 $result=mysql_query($sql);
  91 $myrow=mysql_fetch_array($result);
  92 return $myrow["username"];
  93 }
  94 function auth($userid, $password) {
  95 $sql="SELECT username FROM users WHERE username='$userid' AND userpass='$password'";
  96 $result=mysql_query($sql);
  97 if(!mysql_num_rows($result)) return 0;
  98 else {
  99 $query_data=mysql_fetch_row($result);
 100 return $query_data[0];
 101 }
 102 }
 103 $username=auth($uname,$pword);
 104 $sql="SELECT * FROM users WHERE username='$uname'";
 105 $result=mysql_query($sql);
 106 $myrow=mysql_fetch_array($result);
 107 $userlevel=$myrow["level"];
 108 $sql="SELECT * FROM boards WHERE boardid='$board'";
 109 $result=mysql_query($sql);
 110 $myrow=mysql_fetch_array($result);
 111 $boardname=$myrow["boardname"];
 112 $clanvalue=$myrow["clan"];
 113 if (!$username)
 114 {
 115 echo "<font color=black>You cannot view this board.</font>";
 116 exit;
 117 }
 118 if ($username)
 119 {
 120 $clan=clancheck($board,$uname);
 121 if ($clanvalue!=0 AND $userlevel!=60)
 122 {
 123 if ($clan==0)
 124 {
 125 echo "<font color=black>You cannot view this board.</font>";
 126 exit;
 127 }
 128 }
 129 $sql="SELECT * FROM topics WHERE topicid='$topic'";
 130 $result=mysql_query($sql);
 131 $myrow=mysql_fetch_array($result);
 132 $topicname=$myrow["topicname"];
 133 $topicname=stripslashes($topicname);
 134 $sql="SELECT * FROM users WHERE username='$uname'";
 135 $result=mysql_query($sql);
 136 $myrow=mysql_fetch_array($result);
 137 echo "<font size=6 face=arial color=black><b><center>".$boardname."</b><br></font><font size=3 face=arial color=black>".$topicname."</center></font>\n";
 138 echo "<table width=100%><tr align=center bgcolor=".$titlecolor."><td><font face=arial size=3><b><a href=user.php?board=".$board."&topic=".$topic.">".$myrow["username"]." (".$myrow["level"].")</a>: <a href=index.php>Board List</a> | <a href=topiclist.php?board=".$board.">Topic List</a> | <a href=postmes.php?board=".$board."&topic=".$topic.">Post a new message</a> | <a href=logout.php>Log Out</a></b> | <b><a href=faq.php>FAQ</a></b></td>\n</tr></font>\n";
 139 if ($userlevel>=50)
 140 {
 141 $marks=howmarks();
 142 $sugs=howsugs();
 143 echo "<tr><td bgcolor=".$titlecolor."><b><font face=arial>Marks:</b> <a href=modme.php>".$marks."</a> | <b>Suggests:</b> <a href=helpme.php>".$sugs."</a> | <a href=modresources.php>Moderator Resources</a></td></tr></font>\n";
 144 }
 145 echo "</table>";
 146 $talive=checkl($topic);
 147 if ($talive==0)
 148 {
 149 echo "<font color=black>This topic has been deleted.</font>";
 150 exit;
 151 }
 152 echo "<table width=100% cellpadding=0 cellspacing=2 border=0>";
 153 $pages=$page*50;
 154 $sql="SELECT * FROM messages WHERE topic='$topic' ORDER BY theorder ASC LIMIT ".$pages.",50";
 155 $result=mysql_query($sql);
 156 $boardlevel=check2($board);
 157 $uselevel=getlevel($uname);
 158 if ($boardlevel>$uselevel)
 159 {
 160 echo "<font color=black>You cannot view this.</font>";
 161 exit;
 162 }
 163 while ($myrow=mysql_fetch_array($result))
 164 {
 165 $alive=check3($board,$topic);
 166 if ($alive==0)
 167 {
 168 echo "<font color=black>Invalid link.</font>";
 169 exit;
 170 }
 171 $mes=stripslashes($myrow["messbody"]);
 172 $userid=useid($myrow["messby"]);
 173 echo "<tr><td bgcolor=".$secondcolor."><font face=arial><b>From: </b><a href=whois.php?user=".$userid."&board=".$board."&topic=".$topic.">".$myrow["messby"]."</a> | <b>Posted:</b> ".$myrow["postdate"]." | ";
 174 $useename=useid2($uname);
 175 if ($myrow["messby"]==$useename)
 176 {
 177 echo "<a href=delmessage.php?board=".$board."&topic=".$topic."&message=".$myrow["messageid"].">Delete</a> this message.";
 178 } else {
 179 echo "<a href=modnotice.php?board=".$board."&topic=".$topic."&message=".$myrow["messageid"].">Mark</a> for moderation</font>";
 180 }
 181 echo " <font face=arial>| <font face=arial><a href=suggestcook.php?board=".$board."&topic=".$topic."&message=".$myrow["messageid"].">Suggest</a> this person for aura.";
 182 if ($myrow["auraed"]==1)
 183 {
 184 echo "<img src=take.gif>";
 185 }
 186 if ($myrow["auraed"]==2)
 187 {
 188 echo "<img src=add.gif>";
 189 }
 190 echo "</td></tr><tr><td bgcolor=".$firstcolor."><font face=arial>".$mes."</font></td></tr>\n";
 191 }
 192 echo "\n</table>";
 193 $sql="SELECT * FROM messages WHERE topic='$topic'";
 194 $result=mysql_query($sql);
 195 if (mysql_num_rows($result)>=50)
 196 {
 197 $previouspage=$page+1;
 198 $nextpage=$page-1;
 199 $numberoftopics=mysql_num_rows($result);
 200 $numberoftopics=$numberoftopics/50;
 201 $count=0;
 202 echo "<table width=100% cellpadding=0 cellspacing=2 border=0 bgcolor=".$titlecolor.">\n<tr align=center>\n<td><b>Pages: ";
 203 while ($count<$numberoftopics)
 204 {
 205 $count=$count+1;
 206 echo "<a href=messagelist.php?board=".$board."&topic=".$topic."&page=".$count.">".$count."</a> ";
 207 }
 208 echo "</td></tr><tr><td>";
 209 if ($page<>0) echo "\n<center><a href=messagelist.php?board=".$board."&topic=".$topic."&page=".$nextpage.">Previous Page</a> | ";
 210 echo "<center><a href=messagelist.php?board=".$board."&topic=".$topic."&page=".$previouspage.">Next Page</a>\n</td>\n</tr>\n</table>";
 211 }
 212 echo "\n<center><font size=1 color=black>The fine print: I Neo (Chuck Sakoda) cannot be held responsible for any content the user's post";
 213 } else {
 214 echo "You cannot view this board.";
 215 }
 216 ?>