inc/events.php

   1 <?php
   2 /*
   3     This program is free software; you can redistribute it and/or modify
   4     it under the terms of the Revised BSD License.
   5
   6     This program is distributed in the hope that it will be useful,
   7     but WITHOUT ANY WARRANTY; without even the implied warranty of
   8     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   9     Revised BSD License for more details.
  10
  11     Copyright 2004-2011 iDB Support - http://idb.berlios.de/
  12     Copyright 2004-2011 Game Maker 2k - http://gamemaker2k.org/
  13
  14     $FileInfo: events.php - Last Update: 07/14/2011 SVN 717 - Author: cooldude2k $
  15 */
  16 $File3Name = basename($_SERVER['SCRIPT_NAME']);
  17 if ($File3Name=="events.php"||$File3Name=="/events.php") {
  18         require('index.php');
  19         exit(); }
  20 if(!is_numeric($_GET['id'])) { $_GET['id'] = null; }
  21 if($_GET['act']=="view"||$_GET['act']==null) {
  22 $query = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."events\" WHERE \"id\"=%i LIMIT 1", array($_GET['id']));
  23 $result=sql_query($query,$SQLStat);
  24 $num=sql_num_rows($result);
  25 $is=0;
  26 if($num==0) { redirect("location",$rbasedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false)); sql_free_result($result);
  27 ob_clean(); header("Content-Type: text/plain; charset=".$Settings['charset']); $urlstatus = 302;
  28 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); session_write_close(); die(); }
  29 ?>
  30 <div class="NavLinks"><?php echo $ThemeSet['NavLinkIcon']; ?><a href="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>"><?php echo $Settings['board_name']; ?></a><?php echo $ThemeSet['NavLinkDivider']; ?><a href="<?php echo url_maker($exfile['event'],$Settings['file_ext'],"act=view&id=".$_GET['id'],$Settings['qstr'],$Settings['qsep'],$prexqstr['event'],$exqstr['event']); ?>">Viewing Event</a></div>
  31 <div class="DivNavLinks">&nbsp;</div>
  32 <?php
  33 while ($is < $num) {
  34 $EventID=sql_result($result,$is,"id");
  35 $EventIP=sql_result($result,$is,"IP");
  36 $EventUser=sql_result($result,$is,"UserID");
  37 $EventGuest=sql_result($result,$is,"GuestName");
  38 $EventName=sql_result($result,$is,"EventName");
  39 $EventText=sql_result($result,$is,"EventText");
  40 $EventStart=sql_result($result,$is,"TimeStamp");
  41 $EventEnd=sql_result($result,$is,"TimeStampEnd");
  42 $EventStart = GMTimeChange("M. j Y",$EventStart,null);
  43 $EventEnd = GMTimeChange("M. j Y",$EventEnd,null);
  44 $ipshow = "two";
  45 $_SESSION['ViewingPage'] = url_maker(null,"no+ext","act=view&id=".$_GET['id'],"&","=",$prexqstr['event'],$exqstr['event']);
  46 if($Settings['file_ext']!="no+ext"&&$Settings['file_ext']!="no ext") {
  47 $_SESSION['ViewingFile'] = $exfile['event'].$Settings['file_ext']; }
  48 if($Settings['file_ext']=="no+ext"||$Settings['file_ext']=="no ext") {
  49 $_SESSION['ViewingFile'] = $exfile['event']; }
  50 $_SESSION['PreViewingTitle'] = "Viewing Event:";
  51 $_SESSION['ViewingTitle'] = $EventName;
  52 $requery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."members\" WHERE \"id\"=%i LIMIT 1", array($EventUser));
  53 $reresult=sql_query($requery,$SQLStat);
  54 $renum=sql_num_rows($reresult);
  55 if($renum<1) { $EventUser = -1;
  56 $requery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."members\" WHERE \"id\"=%i LIMIT 1", array($EventUser));
  57 $reresult=sql_query($requery,$SQLStat);
  58 $renum=sql_num_rows($reresult); }
  59 $memrequery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."mempermissions\" WHERE \"id\"=%i LIMIT 1", array($EventUser));
  60 $memreresult=sql_query($memrequery,$SQLStat);
  61 $memrenum=sql_num_rows($memreresult);
  62 $rei=0;
  63 $User1ID=$EventUser;
  64 $User1Name=sql_result($reresult,$rei,"Name");
  65 $User1IP=sql_result($reresult,$rei,"IP");
  66 if($User1IP==$EventIP) { $ipshow = "one"; }
  67 $User1Email=sql_result($reresult,$rei,"Email");
  68 $User1Title=sql_result($reresult,$rei,"Title");
  69 $PreUserCanExecPHP=sql_result($memreresult,$rei,"CanExecPHP");
  70 if($PreUserCanExecPHP!="yes"&&$PreUserCanExecPHP!="no"&&$PreUserCanExecPHP!="group") {
  71         $PreUserCanExecPHP = "no"; }
  72 $PreUserCanDoHTML=sql_result($memreresult,$rei,"CanDoHTML");
  73 if($PreUserCanDoHTML!="yes"&&$PreUserCanDoHTML!="no"&&$PreUserCanDoHTML!="group") {
  74         $PreUserCanDoHTML = "no"; }
  75 $PreUserCanUseBBags=sql_result($memreresult,$rei,"CanUseBBags");
  76 if($PreUserCanUseBBags!="yes"&&$PreUserCanUseBBags!="no"&&$PreUserCanUseBBags!="group") {
  77         $PreUserCanUseBBags = "no"; }
  78 sql_free_result($memreresult);
  79 $User1Joined=sql_result($reresult,$rei,"Joined");
  80 $User1Joined=GMTimeChange("F j Y",$User1Joined,$_SESSION['UserTimeZone'],0,$_SESSION['UserDST']);
  81 $User1GroupID=sql_result($reresult,$rei,"GroupID");
  82 $gquery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."groups\" WHERE \"id\"=%i LIMIT 1", array($User1GroupID));
  83 $gresult=sql_query($gquery,$SQLStat);
  84 $User1Hidden=sql_result($reresult,$rei,"HiddenMember");
  85 $User1Group=sql_result($gresult,0,"Name");
  86 $User1CanExecPHP = $PreUserCanExecPHP;
  87 if($PreUserCanExecPHP=="group") {
  88 $User1CanExecPHP=sql_result($gresult,0,"CanExecPHP"); }
  89 if($User1CanExecPHP!="yes"&&$User1CanExecPHP!="no") {
  90         $User1CanExecPHP = "no"; }
  91 $User1CanDoHTML = $PreUserCanDoHTML;
  92 if($PreUserCanDoHTML=="group") {
  93 $User1CanDoHTML=sql_result($gresult,0,"CanDoHTML"); }
  94 if($User1CanDoHTML!="yes"&&$User1CanDoHTML!="no") {
  95         $User1CanDoHTML = "no"; }
  96 $User1CanUseBBags = $PreUserCanUseBBags;
  97 if($User1CanUseBBags=="group") {
  98 $User1CanUseBBags=sql_result($gresult,0,"CanUseBBags"); }
  99 if($User1CanUseBBags!="yes"&&$User1CanUseBBags!="no") {
 100         $User1CanUseBBags = "no"; }
 101 $GroupNamePrefix=sql_result($gresult,0,"NamePrefix");
 102 $GroupNameSuffix=sql_result($gresult,0,"NameSuffix");
 103 sql_free_result($gresult);
 104 if($User1Title=="") { $User1Title = $User1Group; }
 105 $User1Signature=sql_result($reresult,$rei,"Signature");
 106 $User1Signature = preg_replace("/\<br\>/", "<br />", nl2br($User1Signature));
 107 $User1Avatar=sql_result($reresult,$rei,"Avatar");
 108 $User1AvatarSize=sql_result($reresult,$rei,"AvatarSize");
 109 if ($User1Avatar=="http://"||$User1Avatar==null||
 110         strtolower($User1Avatar)=="noavatar") {
 111 $User1Avatar=$ThemeSet['NoAvatar'];
 112 $User1AvatarSize=$ThemeSet['NoAvatarSize']; }
 113 $AvatarSize1=explode("x", $User1AvatarSize);
 114 $AvatarSize1W=$AvatarSize1[0]; $AvatarSize1H=$AvatarSize1[1];
 115 $User1Website=sql_result($reresult,$rei,"Website");
 116 $User1Website = urlcheck($User1Website);
 117 $BoardWWWChCk = parse_url($Settings['idburl']);
 118 $User1WWWChCk = parse_url($User1Website);
 119 $opennew = " onclick=\"window.open(this.href);return false;\"";
 120 if($BoardWWWChCk['host']==$User1WWWChCk['host']) {
 121         $opennew = null; }
 122 $User1PostCount=sql_result($reresult,$rei,"PostCount");
 123 $User1IP=sql_result($reresult,$rei,"IP");
 124 sql_free_result($reresult);
 125 ++$is; } sql_free_result($result);
 126 if($User1Name=="Guest") { $User1Name=$EventGuest;
 127 if($User1Name==null) { $User1Name="Guest"; } }
 128 if(isset($GroupNamePrefix)&&$GroupNamePrefix!=null) {
 129         $User1Name = $GroupNamePrefix.$User1Name; }
 130 if(isset($GroupNameSuffix)&&$GroupNameSuffix!=null) {
 131         $User1Name = $User1Name.$GroupNameSuffix; }
 132 if($User1CanUseBBags=="yes") { $EventText = bbcode_parser($EventText); }
 133 if($User1CanExecPHP=="no") {
 134 $EventText = preg_replace("/\[ExecPHP\](.*?)\[\/ExecPHP\]/is","<span style=\"color: red; font-weight: bold;\">ERROR:</span> cannot execute php code.",$EventText); }
 135 if($User1CanExecPHP=="yes") { $EventText = php_execute($EventText); }
 136 if($User1CanDoHTML=="no") {
 137 $EventText = preg_replace("/\[DoHTML\](.*?)\[\/DoHTML\]/is","<span style=\"color: red; font-weight: bold;\">ERROR:</span> cannot execute html.",$EventText); }
 138 if($User1CanDoHTML=="yes") { $EventText = do_html_bbcode($EventText); }
 139 $EventText = text2icons($EventText,$Settings['sqltable'],$SQLStat);
 140 $EventText = preg_replace("/\<br\>/", "<br />", nl2br($EventText));
 141 $EventText = url2link($EventText);
 142 if($User1CanUseBBags=="yes") { $User1Signature = bbcode_parser($User1Signature); }
 143 if($User1CanExecPHP=="no") {
 144 $User1Signature = preg_replace("/\[ExecPHP\](.*?)\[\/ExecPHP\]/is","<span style=\"color: red; font-weight: bold;\">ERROR:</span> cannot execute php code.",$User1Signature); }
 145 if($User1CanExecPHP=="yes") { $User1Signature = php_execute($User1Signature); }
 146 if($User1CanDoHTML=="no") {
 147 $User1Signature = preg_replace("/\[DoHTML\](.*?)\[\/DoHTML\]/is","<span style=\"color: red; font-weight: bold;\">ERROR:</span> cannot execute html.",$User1Signature); }
 148 if($User1CanDoHTML=="yes") { $User1Signature = do_html_bbcode($User1Signature); }
 149 $User1Signature = text2icons($User1Signature,$Settings['sqltable'],$SQLStat);
 150 $User1Signature = preg_replace("/\<br\>/", "<br />", nl2br($User1Signature));
 151 $User1Signature = url2link($User1Signature);
 152 ?>
 153 <div class="TableInfo1Border">
 154 <?php if($ThemeSet['TableStyle']=="div") { ?>
 155 <div class="TableInfoRow1">
 156 <span style="font-weight: bold; text-align: left;"><?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['event'],$Settings['file_ext'],"act=view&id=".$_GET['id'],$Settings['qstr'],$Settings['qsep'],$prexqstr['event'],$exqstr['event']); ?>"><?php echo $EventName; ?></a></span></div>
 157 <?php } ?>
 158 <table class="TableInfo1">
 159 <?php if($ThemeSet['TableStyle']=="table") { ?>
 160 <tr class="TableInfoRow1">
 161 <td class="TableInfoColumn1" colspan="2"><span style="font-weight: bold; text-align: left;"><?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['event'],$Settings['file_ext'],"act=view&id=".$_GET['id'],$Settings['qstr'],$Settings['qsep'],$prexqstr['event'],$exqstr['event']); ?>"><?php echo $EventName; ?></a></span>
 162 </td>
 163 </tr><?php } ?>
 164 <tr class="TableInfoRow2">
 165 <td class="TableInfoColumn2" style="vertical-align: middle; width: 160px;">
 166 &nbsp;<?php
 167 if($User1ID>0&&$User1Hidden=="no") {
 168 echo "<a href=\"";
 169 echo url_maker($exfile['member'],$Settings['file_ext'],"act=view&id=".$User1ID,$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']);
 170 echo "\">".$User1Name."</a>"; }
 171 if($User1ID<=0||$User1Hidden=="yes") {
 172 echo "<span>".$User1Name."</span>"; }
 173 ?></td>
 174 <td class="TableInfoColumn2" style="vertical-align: middle;">
 175 <div style="float: left; text-align: left;">
 176 <span style="font-weight: bold;">Event Start: </span><?php echo $EventStart; ?><?php echo $ThemeSet['LineDividerTopic']; ?><span style="font-weight: bold;">Event End: </span><?php echo $EventEnd; ?>
 177 </div>
 178 <div style="text-align: right;">&nbsp;</div>
 179 </td>
 180 </tr>
 181 <tr class="TableInfoRow3">
 182 <td class="TableInfoColumn3" style="vertical-align: top; width: 180px;">
 183 <?php  // Avatar Table Thanks For SeanJ's Help at http://seanj.jcink.com/
 184  ?>
 185  <table class="AvatarTable" style="width: 100px; height: 100px; text-align: center;">
 186         <tr class="AvatarRow" style="width: 100%; height: 100%;">
 187                 <td class="AvatarRow" style="width: 100%; height: 100%; text-align: center; vertical-align: middle;">
 188                 <img src="<?php echo $User1Avatar; ?>" alt="<?php echo $User1Name; ?>'s Avatar" title="<?php echo $User1Name; ?>'s Avatar" style="border: 0px; width: <?php echo $AvatarSize1W; ?>px; height: <?php echo $AvatarSize1H; ?>px;" />
 189                 </td>
 190         </tr>
 191  </table><br />
 192 <?php echo $User1Title; ?><br />
 193 Group: <?php echo $User1Group; ?><br />
 194 Member: <?php
 195 if($User1ID>0&&$User1Hidden=="no") { echo $User1ID; }
 196 if($User1ID<=0||$User1Hidden=="yes") { echo 0; }
 197 ?><br />
 198 Posts: <?php echo $User1PostCount; ?><br />
 199 Joined: <?php echo $User1Joined; ?><br />
 200 <?php if($GroupInfo['HasAdminCP']=="yes") { ?>
 201 User IP: <a onclick="window.open(this.href);return false;" href="<?php echo sprintf($IPCheckURL,$User1IP); ?>">
 202 <?php echo $User1IP; ?></a><br />
 203 <?php if($ipshow=="two") { ?>
 204 Event IP: <a onclick="window.open(this.href);return false;" href="<?php echo sprintf($IPCheckURL,$EventIP); ?>">
 205 <?php echo $EventIP; ?></a><br />
 206 <?php } } ?><br />
 207 </td>
 208 <td class="TableInfoColumn3" style="vertical-align: middle;">
 209 <div class="eventpost"><?php echo $EventText; ?></div>
 210 <?php if(isset($User1Signature)&&$User1Signature!="") { ?> <br />--------------------
 211 <div class="signature"><?php echo $User1Signature; ?></div><?php } ?>
 212 </td>
 213 </tr>
 214 <tr class="TableInfoRow4">
 215 <td class="TableInfoColumn4" colspan="2">
 216 <span style="text-align: left;">&nbsp;<a href="<?php
 217 if($User1ID>0&&$User1Hidden=="no"&&isset($ThemeSet['Profile'])&&$ThemeSet['Profile']!=null) {
 218 echo url_maker($exfile['member'],$Settings['file_ext'],"act=view&id=".$User1ID,$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); }
 219 if(($User1ID<=0||$User1Hidden=="yes")&&isset($ThemeSet['Profile'])&&$ThemeSet['Profile']!=null) {
 220 echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); }
 221 ?>"><?php echo $ThemeSet['Profile']; ?></a>
 222 <?php if(isset($ThemeSet['WWW'])&&$ThemeSet['WWW']!=null) {
 223 echo $ThemeSet['LineDividerTopic']; ?><a href="<?php echo $User1Website; ?>"<?php echo $opennew; ?>><?php echo $ThemeSet['WWW']; ?></a><?php } echo $ThemeSet['LineDividerTopic']; ?><a href="<?php
 224 if($User1ID>0&&$User1Hidden=="no"&&isset($ThemeSet['PM'])&&$ThemeSet['PM']!=null) {
 225 echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=create&id=".$User1ID,$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); }
 226 if(($User1ID<=0||$User1Hidden=="yes")&&isset($ThemeSet['PM'])&&$ThemeSet['PM']!=null) {
 227 echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); }
 228 ?>"><?php echo $ThemeSet['PM']; ?></a></span>
 229 </td>
 230 </tr>
 231 </table></div>
 232 <?php } if($_GET['act']=="create") {
 233 if($GroupInfo['CanAddEvents']=="no") { redirect("location",$rbasedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 234 ob_clean(); header("Content-Type: text/plain; charset=".$Settings['charset']); $urlstatus = 302;
 235 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); session_write_close(); die(); }
 236 $UFID = rand_uuid("rand");
 237 $_SESSION['UserFormID'] = $UFID;
 238 ?>
 239 <div class="NavLinks"><?php echo $ThemeSet['NavLinkIcon']; ?><a href="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>"><?php echo $Settings['board_name']; ?></a><?php echo $ThemeSet['NavLinkDivider']; ?><a href="<?php echo url_maker($exfile['event'],$Settings['file_ext'],"act=create",$Settings['qstr'],$Settings['qsep'],$prexqstr['event'],$exqstr['event']); ?>">Making a Event</a></div>
 240 <div class="DivNavLinks">&nbsp;</div>
 241 <div class="Table1Border">
 242 <?php if($ThemeSet['TableStyle']=="div") { ?>
 243 <div class="TableRow1">
 244 <span style="text-align: left;">
 245 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['calendar'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['calendar'],$exqstr['calendar']); ?>">Making a Event</a></span></div>
 246 <?php } ?>
 247 <table class="Table1" id="MakeEvent">
 248 <?php if($ThemeSet['TableStyle']=="table") { ?>
 249 <tr class="TableRow1" id="EventStart">
 250 <td class="TableColumn1" colspan="2"><span style="text-align: left;">
 251 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['calendar'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['calendar'],$exqstr['calendar']); ?>">Making a Event</a></span>
 252 </td>
 253 </tr><?php } ?>
 254 <tr id="MakeEventRow" class="TableRow2">
 255 <td class="TableColumn2" colspan="2" style="width: 100%;">Making a Event</td>
 256 </tr>
 257 <tr class="TableRow3" id="MkEvent">
 258 <td class="TableColumn3" style="width: 15%; vertical-align: middle; text-align: center;">
 259 <div style="width: 100%; height: 160px; overflow: auto;">
 260 <table style="width: 100%; text-align: center;"><?php
 261 $renee_query=sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."smileys\" WHERE \"Display\"='yes'", array(null));
 262 $renee_result=sql_query($renee_query,$SQLStat);
 263 $renee_num=sql_num_rows($renee_result);
 264 $renee_s=0; $SmileRow=0; $SmileCRow=0;
 265 while ($renee_s < $renee_num) { ++$SmileRow;
 266 $FileName=sql_result($renee_result,$renee_s,"FileName");
 267 $SmileName=sql_result($renee_result,$renee_s,"SmileName");
 268 $SmileText=sql_result($renee_result,$renee_s,"SmileText");
 269 $SmileDirectory=sql_result($renee_result,$renee_s,"Directory");
 270 $ShowSmile=sql_result($renee_result,$renee_s,"Display");
 271 $ReplaceType=sql_result($renee_result,$renee_s,"ReplaceCI");
 272 if($SmileRow==1) { ?><tr>
 273         <?php } if($SmileRow<5) { ++$SmileCRow; ?>
 274         <td><img src="<?php echo $SmileDirectory."".$FileName; ?>" style="vertical-align: middle; border: 0px; cursor: pointer;" title="<?php echo $SmileName; ?>" alt="<?php echo $SmileName; ?>" onclick="addsmiley('EventText','&nbsp;<?php echo htmlspecialchars($SmileText, ENT_QUOTES, $Settings['charset']); ?>&nbsp;')" /></td>
 275         <?php } if($SmileRow==5) { ++$SmileCRow; ?>
 276         <td><img src="<?php echo $SmileDirectory."".$FileName; ?>" style="vertical-align: middle; border: 0px; cursor: pointer;" title="<?php echo $SmileName; ?>" alt="<?php echo $SmileName; ?>" onclick="addsmiley('EventText','&nbsp;<?php echo htmlspecialchars($SmileText, ENT_QUOTES, $Settings['charset']); ?>&nbsp;')" /></td></tr>
 277         <?php $SmileCRow=0; $SmileRow=0; }
 278 ++$renee_s; }
 279 if($SmileCRow<5&&$SmileCRow!=0) {
 280 $SmileCRowL = 5 - $SmileCRow;
 281 echo "<td colspan=\"".$SmileCRowL."\">&nbsp;</td></tr>"; }
 282 echo "</table>";
 283 sql_free_result($renee_result);
 284 ?></div></td>
 285 <td class="TableColumn3" style="width: 85%;">
 286 <form style="display: inline;" method="post" id="MkEventForm" action="<?php echo url_maker($exfile['event'],$Settings['file_ext'],"act=makeevent",$Settings['qstr'],$Settings['qsep'],$prexqstr['event'],$exqstr['event']); ?>">
 287 <table style="text-align: left;">
 288 <tr style="text-align: left;">
 289         <td style="width: 50%;"><label class="TextBoxLabel" for="EventName">Insert Event Name:</label></td>
 290         <td style="width: 50%;"><input maxlength="30" type="text" name="EventName" class="TextBox" id="EventName" size="20" /></td>
 291 </tr><?php if($_SESSION['UserGroup']==$Settings['GuestGroup']) { ?><tr style="text-align: left;">
 292         <td style="width: 50%;"><label class="TextBoxLabel" for="GuestName">Insert Guest Name:</label></td>
 293         <?php if(!isset($_SESSION['GuestName'])) { ?>
 294         <td style="width: 50%;"><input maxlength="25" type="text" name="GuestName" class="TextBox" id="GuestName" size="20" /></td>
 295         <?php } if(isset($_SESSION['GuestName'])) { ?>
 296         <td style="width: 50%;"><input maxlength="25" type="text" name="GuestName" class="TextBox" id="GuestName" size="20" value="<?php echo $_SESSION['GuestName']; ?>" /></td>
 297 <?php } ?></tr><?php } ?><tr style="text-align: left;">
 298         <td style="width: 50%;"><label class="TextBoxLabel" for="EventStart">Insert Event Start:</label></td>
 299         <td style="width: 50%;"><input maxlength="10" type="text" name="EventStart" class="TextBox" id="EventStart" size="20" value="MM/DD/YYYY" /></td>
 300 </tr><tr style="text-align: left;">
 301         <td style="width: 50%;"><label class="TextBoxLabel" for="EventEnd">Insert Event End:</label></td>
 302         <td style="width: 50%;"><input maxlength="10" type="text" name="EventEnd" class="TextBox" id="EventEnd" size="20" value="MM/DD/YYYY" /></td>
 303 </tr>
 304 </table>
 305 <table style="text-align: left;">
 306 <tr style="text-align: left;">
 307 <td style="width: 100%;">
 308 <label class="TextBoxLabel" for="EventText">Insert Event Text:</label><br />
 309 <textarea rows="10" name="EventText" id="EventText" cols="40" class="TextBox"></textarea><br />
 310 <?php if($_SESSION['UserGroup']==$Settings['GuestGroup']&&$Settings['captcha_guest']=="on") { ?>
 311 <label class="TextBoxLabel" for="signcode"><img src="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=MkCaptcha",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>" alt="CAPTCHA Code" title="CAPTCHA Code" /></label><br />
 312 <input maxlength="25" type="text" class="TextBox" name="signcode" size="20" id="signcode" value="Enter SignCode" /><br />
 313 <?php } ?>
 314 <input type="hidden" name="act" value="makeevents" style="display: none;" />
 315 <input type="hidden" style="display: none;" name="fid" value="<?php echo $UFID; ?>" />
 316 <?php if($_SESSION['UserGroup']!=$Settings['GuestGroup']) { ?>
 317 <input type="hidden" name="GuestName" value="null" style="display: none;" />
 318 <?php } ?>
 319 <input type="submit" class="Button" value="Make Event" name="make_event" />
 320 <input type="reset" value="Reset Form" class="Button" name="Reset_Form" />
 321 </td></tr></table>
 322 </form></td></tr>
 323 <tr id="MkEventEnd" class="TableRow4">
 324 <td class="TableColumn4" colspan="2">&nbsp;</td>
 325 </tr>
 326 </table></div>
 327 <?php }  if($_GET['act']=="makeevent"&&$_POST['act']=="makeevents") {
 328 if($GroupInfo['CanAddEvents']=="no") { redirect("location",$rbasedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 329 ob_clean(); header("Content-Type: text/plain; charset=".$Settings['charset']); $urlstatus = 302;
 330 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); session_write_close(); die(); }
 331 $MyUserID = $_SESSION['UserID']; if($MyUserID=="0"||$MyUserID==null) { $MyUserID = -1; }
 332 $_SESSION['ViewingPage'] = url_maker(null,"no+ext","act=view","&","=",$prexqstr['index'],$exqstr['index']);
 333 if($Settings['file_ext']!="no+ext"&&$Settings['file_ext']!="no ext") {
 334 $_SESSION['ViewingFile'] = $exfile['index'].$Settings['file_ext']; }
 335 if($Settings['file_ext']=="no+ext"||$Settings['file_ext']=="no ext") {
 336 $_SESSION['ViewingFile'] = $exfile['index']; }
 337 $_SESSION['PreViewingTitle'] = "Making";
 338 $_SESSION['ViewingTitle'] = "Event";
 339 $REFERERurl = parse_url($_SERVER['HTTP_REFERER']);
 340 $URL['REFERER'] = $REFERERurl['host'];
 341 $URL['HOST'] = $_SERVER["SERVER_NAME"];
 342 $REFERERurl = null;
 343 if(!isset($_POST['EventName'])) { $_POST['EventName'] = null; }
 344 if(!isset($_POST['EventStart'])) { $_POST['EventStart'] = null; }
 345 if(!isset($_POST['EventEnd'])) { $_POST['EventEnd'] = null; }
 346 if(!isset($_POST['EventText'])) { $_POST['EventText'] = null; }
 347 if(!isset($_POST['GuestName'])) { $_POST['GuestName'] = null; }
 348 $TimeIn = explode("/",$_POST['EventStart']);
 349 $TimeOut = explode("/",$_POST['EventEnd']);
 350 if($_SESSION['UserGroup']==$Settings['GuestGroup']&&
 351         $Settings['captcha_guest']=="on") {
 352 require($SettDir['inc']."captcha.php"); }
 353 ?>
 354 <div class="Table1Border">
 355 <?php if($ThemeSet['TableStyle']=="div") { ?>
 356 <div class="TableRow1">
 357 <span style="text-align: left;">
 358 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['calendar'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['calendar'],$exqstr['calendar']); ?>">Making a Event</a></span></div>
 359 <?php } ?>
 360 <table class="Table1">
 361 <?php if($ThemeSet['TableStyle']=="table") { ?>
 362 <tr class="TableRow1">
 363 <td class="TableColumn1"><span style="text-align: left;">
 364 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['calendar'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['calendar'],$exqstr['calendar']); ?>">Making a Event</a></span>
 365 </td>
 366 </tr><?php } ?>
 367 <tr class="TableRow2">
 368 <th class="TableColumn2" style="width: 100%; text-align: left;">&nbsp;Make Event Message: </th>
 369 </tr>
 370 <tr class="TableRow3">
 371 <td class="TableColumn3">
 372 <table style="width: 100%; height: 25%; text-align: center;">
 373 <?php if (pre_strlen($_POST['EventName'])>="30") { $Error="Yes";  ?>
 374 <tr>
 375         <td><span class="TableMessage">
 376         <br />Your Event Name is too big.<br />
 377         </span>&nbsp;</td>
 378 </tr>
 379 <?php } if($_POST['fid']!=$_SESSION['UserFormID']) { $Error="Yes";  ?>
 380 <tr>
 381         <td><span class="TableMessage">
 382         <br />Sorry the referering url dose not match our host name.<br />
 383         </span>&nbsp;</td>
 384 </tr>
 385 <?php } if($_SESSION['UserGroup']==$Settings['GuestGroup']&&
 386         $Settings['captcha_guest']=="on") {
 387 if (PhpCaptcha::Validate($_POST['signcode'])) {
 388 //echo 'Valid code entered';
 389 } else { $Error="Yes"; ?>
 390 <tr>
 391         <td><span class="TableMessage">
 392         <br />Invalid code entered<br />
 393         </span>&nbsp;</td>
 394 </tr>
 395 <?php } } if (pre_strlen($TimeIn[0])<"2") { $Error="Yes";  ?>
 396 <tr>
 397         <td><span class="TableMessage">
 398         <br />Event Start Month is too small.<br />
 399         </span>&nbsp;</td>
 400 </tr>
 401 <?php } if (pre_strlen($TimeIn[0])>"2") { $Error="Yes";  ?>
 402 <tr>
 403         <td><span class="TableMessage">
 404         <br />Event Start Month is too big.<br />
 405         </span>&nbsp;</td>
 406 </tr>
 407 <?php } if (pre_strlen($TimeIn[1])<"2") { $Error="Yes";  ?>
 408 <tr>
 409         <td><span class="TableMessage">
 410         <br />Event Start Day is too small.<br />
 411         </span>&nbsp;</td>
 412 </tr>
 413 <?php } if (pre_strlen($TimeIn[1])>"2") { $Error="Yes";  ?>
 414 <tr>
 415         <td><span class="TableMessage">
 416         <br />Event Start Day is too big.<br />
 417         </span>&nbsp;</td>
 418 </tr>
 419 <?php } if (pre_strlen($TimeIn[2])<"4") { $Error="Yes";  ?>
 420 <tr>
 421         <td><span class="TableMessage">
 422         <br />Event Start Year is too small.<br />
 423         </span>&nbsp;</td>
 424 </tr>
 425 <?php } if (pre_strlen($TimeIn[2])>"4") { $Error="Yes";  ?>
 426 <tr>
 427         <td><span class="TableMessage">
 428         <br />Event Start Year is too big.<br />
 429         </span>&nbsp;</td>
 430 </tr>
 431 <?php } if (pre_strlen($TimeOut[0])<"2") { $Error="Yes";  ?>
 432 <tr>
 433         <td><span class="TableMessage">
 434         <br />Event End Month is too small.<br />
 435         </span>&nbsp;</td>
 436 </tr>
 437 <?php } if (pre_strlen($TimeOut[0])>"2") { $Error="Yes";  ?>
 438 <tr>
 439         <td><span class="TableMessage">
 440         <br />Event End Month is too big.<br />
 441         </span>&nbsp;</td>
 442 </tr>
 443 <?php } if (pre_strlen($TimeOut[1])<"2") { $Error="Yes";  ?>
 444 <tr>
 445         <td><span class="TableMessage">
 446         <br />Event End Day is too small.<br />
 447         </span>&nbsp;</td>
 448 </tr>
 449 <?php } if (pre_strlen($TimeOut[1])>"2") { $Error="Yes";  ?>
 450 <tr>
 451         <td><span class="TableMessage">
 452         <br />Event End Day is too big.<br />
 453         </span>&nbsp;</td>
 454 </tr>
 455 <?php } if (pre_strlen($TimeOut[2])<"4") { $Error="Yes";  ?>
 456 <tr>
 457         <td><span class="TableMessage">
 458         <br />Event End Year is too small.<br />
 459         </span>&nbsp;</td>
 460 </tr>
 461 <?php } if (pre_strlen($TimeOut[2])>"4") { $Error="Yes";  ?>
 462 <tr>
 463         <td><span class="TableMessage">
 464         <br />Event End Year is too big.<br />
 465         </span>&nbsp;</td>
 466 </tr>
 467 <?php } if (checkdate($TimeIn[0],$TimeIn[1],$TimeIn[2])===false) { $Error="Yes";  ?>
 468 <tr>
 469         <td><span class="TableMessage">
 470         <br />Sorry the event start date is not valid.<br />
 471         </span>&nbsp;</td>
 472 </tr>
 473 <?php } if (checkdate($TimeOut[0],$TimeOut[1],$TimeOut[2])===false) { $Error="Yes";  ?>
 474 <tr>
 475         <td><span class="TableMessage">
 476         <br />Sorry the event end date is not valid.<br />
 477         </span>&nbsp;</td>
 478 </tr>
 479 <?php } if($_SESSION['UserGroup']==$Settings['GuestGroup']&&
 480         pre_strlen($_POST['GuestName'])>="25") { $Error="Yes"; ?>
 481 <tr>
 482         <td><span class="TableMessage">
 483         <br />You Guest Name is too big.<br />
 484         </span>&nbsp;</td>
 485 </tr>
 486 <?php } if ($Settings['TestReferer']===true) {
 487         if ($URL['HOST']!=$URL['REFERER']) { $Error="Yes";  ?>
 488 <tr>
 489         <td><span class="TableMessage">
 490         <br />Sorry the referering url dose not match our host name.<br />
 491         </span>&nbsp;</td>
 492 </tr>
 493 <?php } }
 494 $_POST['EventName'] = stripcslashes(htmlspecialchars($_POST['EventName'], ENT_QUOTES, $Settings['charset']));
 495 //$_POST['EventName'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_POST['EventName']);
 496 $_POST['EventName'] = remove_spaces($_POST['EventName']);
 497 $_POST['GuestName'] = stripcslashes(htmlspecialchars($_POST['GuestName'], ENT_QUOTES, $Settings['charset']));
 498 //$_POST['GuestName'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_POST['GuestName']);
 499 $_POST['GuestName'] = remove_spaces($_POST['GuestName']);
 500 $_POST['EventText'] = stripcslashes(htmlspecialchars($_POST['EventText'], ENT_QUOTES, $Settings['charset']));
 501 //$_POST['EventText'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_POST['EventText']);
 502 $_POST['EventText'] = remove_bad_entities($_POST['EventText']);
 503 //$_POST['EventText'] = remove_spaces($_POST['EventText']);
 504 if($_SESSION['UserGroup']==$Settings['GuestGroup']) {
 505 if(isset($_POST['GuestName'])&&$_POST['GuestName']!=null) {
 506 if($cookieDomain==null) {
 507 setcookie("GuestName", $_POST['GuestName'], time() + (7 * 86400), $cbasedir); }
 508 if($cookieDomain!=null) {
 509 if($cookieSecure===true) {
 510 setcookie("GuestName", $_POST['GuestName'], time() + (7 * 86400), $cbasedir, $cookieDomain, 1); }
 511 if($cookieSecure===false) {
 512 setcookie("GuestName", $_POST['GuestName'], time() + (7 * 86400), $cbasedir, $cookieDomain); } }
 513 $_SESSION['GuestName']=$_POST['GuestName']; } }
 514 /*    <_<  iWordFilter  >_>
 515    by Kazuki Przyborowski - Cool Dude 2k */
 516 $katarzynaqy=sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."wordfilter\"", array(null));
 517 $katarzynart=sql_query($katarzynaqy,$SQLStat);
 518 $katarzynanm=sql_num_rows($katarzynart);
 519 $katarzynas=0;
 520 while ($katarzynas < $katarzynanm) {
 521 $Filter=sql_result($katarzynart,$katarzynas,"FilterWord");
 522 $Replace=sql_result($katarzynart,$katarzynas,"Replacement");
 523 $CaseInsensitive=sql_result($katarzynart,$katarzynas,"CaseInsensitive");
 524 if($CaseInsensitive=="on") { $CaseInsensitive = "yes"; }
 525 if($CaseInsensitive=="off") { $CaseInsensitive = "no"; }
 526 if($CaseInsensitive!="yes"||$CaseInsensitive!="no") { $CaseInsensitive = "no"; }
 527 $WholeWord=sql_result($katarzynart,$katarzynas,"WholeWord");
 528 if($WholeWord=="on") { $WholeWord = "yes"; }
 529 if($WholeWord=="off") { $WholeWord = "no"; }
 530 if($WholeWord!="yes"&&$WholeWord!="no") { $WholeWord = "no"; }
 531 $Filter = preg_quote($Filter, "/");
 532 if($CaseInsensitive!="yes"&&$WholeWord=="yes") {
 533 $_POST['EventText'] = preg_replace("/\b(".$Filter.")\b/", $Replace, $_POST['EventText']); }
 534 if($CaseInsensitive=="yes"&&$WholeWord=="yes") {
 535 $_POST['EventText'] = preg_replace("/\b(".$Filter.")\b/i", $Replace, $_POST['EventText']); }
 536 if($CaseInsensitive!="yes"&&$WholeWord!="yes") {
 537 $_POST['EventText'] = preg_replace("/".$Filter."/", $Replace, $_POST['EventText']); }
 538 if($CaseInsensitive=="yes"&&$WholeWord!="yes") {
 539 $_POST['EventText'] = preg_replace("/".$Filter."/i", $Replace, $_POST['EventText']); }
 540 ++$katarzynas; } sql_free_result($katarzynart);
 541 $lonewolfqy=sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."restrictedwords\" WHERE \"RestrictedEventName\"='yes' or \"RestrictedUserName\"='yes'", array(null));
 542 $lonewolfrt=sql_query($lonewolfqy,$SQLStat);
 543 $lonewolfnm=sql_num_rows($lonewolfrt);
 544 $lonewolfs=0; $RMatches = null; $RGMatches = null;
 545 while ($lonewolfs < $lonewolfnm) {
 546 $RWord=sql_result($lonewolfrt,$lonewolfs,"Word");
 547 $RCaseInsensitive=sql_result($lonewolfrt,$lonewolfs,"CaseInsensitive");
 548 if($RCaseInsensitive=="on") { $RCaseInsensitive = "yes"; }
 549 if($RCaseInsensitive=="off") { $RCaseInsensitive = "no"; }
 550 if($RCaseInsensitive!="yes"||$RCaseInsensitive!="no") { $RCaseInsensitive = "no"; }
 551 $RWholeWord=sql_result($lonewolfrt,$lonewolfs,"WholeWord");
 552 if($RWholeWord=="on") { $RWholeWord = "yes"; }
 553 if($RWholeWord=="off") { $RWholeWord = "no"; }
 554 if($RWholeWord!="yes"||$RWholeWord!="no") { $RWholeWord = "no"; }
 555 $RestrictedEventName=sql_result($lonewolfrt,$lonewolfs,"RestrictedEventName");
 556 if($RestrictedEventName=="on") { $RestrictedEventName = "yes"; }
 557 if($RestrictedEventName=="off") { $RestrictedEventName = "no"; }
 558 if($RestrictedEventName!="yes"||$RestrictedEventName!="no") { $RestrictedEventName = "no"; }
 559 $RestrictedUserName=sql_result($lonewolfrt,$lonewolfs,"RestrictedUserName");
 560 if($RestrictedUserName=="on") { $RestrictedUserName = "yes"; }
 561 if($RestrictedUserName=="off") { $RestrictedUserName = "no"; }
 562 if($RestrictedUserName!="yes"||$RestrictedUserName!="no") { $RestrictedUserName = "no"; }
 563 $RWord = preg_quote($RWord, "/");
 564 if($RCaseInsensitive!="yes"&&$RWholeWord=="yes") {
 565 if($RestrictedEventName=="yes") {
 566 $RMatches = preg_match("/\b(".$RWord.")\b/", $_POST['EventName']);
 567         if($RMatches==true) { break 1; } }
 568 if($RestrictedUserName=="yes") {
 569 $RGMatches = preg_match("/\b(".$RWord.")\b/", $_POST['GuestName']);
 570         if($RGMatches==true) { break 1; } } }
 571 if($RCaseInsensitive=="yes"&&$RWholeWord=="yes") {
 572 if($RestrictedEventName=="yes") {
 573 $RMatches = preg_match("/\b(".$RWord.")\b/i", $_POST['EventName']);
 574         if($RMatches==true) { break 1; } }
 575 if($RestrictedUserName=="yes") {
 576 $RGMatches = preg_match("/\b(".$RWord.")\b/i", $_POST['GuestName']);
 577         if($RGMatches==true) { break 1; } } }
 578 if($RCaseInsensitive!="yes"&&$RWholeWord!="yes") {
 579 if($RestrictedEventName=="yes") {
 580 $RMatches = preg_match("/".$RWord."/", $_POST['EventName']);
 581         if($RMatches==true) { break 1; } }
 582 if($RestrictedUserName=="yes") {
 583 $RGMatches = preg_match("/".$RWord."/", $_POST['GuestName']);
 584         if($RGMatches==true) { break 1; } } }
 585 if($RCaseInsensitive=="yes"&&$RWholeWord!="yes") {
 586 if($RestrictedEventName=="yes") {
 587 $RMatches = preg_match("/".$RWord."/i", $_POST['EventName']);
 588         if($RMatches==true) { break 1; } }
 589 if($RestrictedUserName=="yes") {
 590 $RGMatches = preg_match("/".$RWord."/i", $_POST['GuestName']);
 591         if($RGMatches==true) { break 1; } } }
 592 ++$lonewolfs; } sql_free_result($lonewolfrt);
 593 if ($_POST['EventName']==null) { $Error="Yes"; ?>
 594 <tr>
 595         <td><span class="TableMessage">
 596         <br />You need to enter a Event Name.<br />
 597         </span>&nbsp;</td>
 598 </tr>
 599 <?php } if ($_POST['EventText']==null) { $Error="Yes"; ?>
 600 <tr>
 601         <td><span class="TableMessage">
 602         <br />You need to enter a Event Text.<br />
 603         </span>&nbsp;</td>
 604 </tr>
 605 <?php } if ($_POST['EventStart']==null) { $Error="Yes"; ?>
 606 <tr>
 607         <td><span class="TableMessage">
 608         <br />You need to enter date for event to start in MM/DD/YYYY format.<br />
 609         </span>&nbsp;</td>
 610 </tr>
 611 <?php } if ($_POST['EventEnd']==null) { $Error="Yes"; ?>
 612 <tr>
 613         <td><span class="TableMessage">
 614         <br />You need to enter date for event to end in MM/DD/YYYY format.<br />
 615         </span>&nbsp;</td>
 616 </tr>
 617 <?php } if (count($TimeIn)!="3") { $Error="Yes"; ?>
 618 <tr>
 619         <td><span class="TableMessage">
 620         <br />You need to enter valid date for event to start in MM/DD/YYYY format.<br />
 621         </span>&nbsp;</td>
 622 </tr>
 623 <?php } if (count($TimeOut)!="3") { $Error="Yes"; ?>
 624 <tr>
 625         <td><span class="TableMessage">
 626         <br />You need to enter valid date for event to end in MM/DD/YYYY format.<br />
 627         </span>&nbsp;</td>
 628 </tr>
 629 <?php } if (!is_numeric($TimeIn[0])||!is_numeric($TimeIn[1])||!is_numeric($TimeIn[2])) { $Error="Yes"; ?>
 630 <tr>
 631         <td><span class="TableMessage">
 632         <br />You need to enter valid date for event to start in MM/DD/YYYY format.<br />
 633         </span>&nbsp;</td>
 634 </tr>
 635 <?php } if (!is_numeric($TimeOut[0])||!is_numeric($TimeOut[1])||!is_numeric($TimeOut[2])) { $Error="Yes"; ?>
 636 <tr>
 637         <td><span class="TableMessage">
 638         <br />You need to enter valid date for event to end in MM/DD/YYYY format.<br />
 639         </span>&nbsp;</td>
 640 </tr>
 641 <?php } if (!isset($TimeIn[0])||!isset($TimeIn[1])||!isset($TimeIn[2])) { $Error="Yes"; ?>
 642 <tr>
 643         <td><span class="TableMessage">
 644         <br />You need to enter valid date for event to start in MM/DD/YYYY format.<br />
 645         </span>&nbsp;</td>
 646 </tr>
 647 <?php } if (!isset($TimeOut[0])||!isset($TimeOut[1])||!isset($TimeOut[2])) { $Error="Yes"; ?>
 648 <tr>
 649         <td><span class="TableMessage">
 650         <br />You need to enter valid date for event to end in MM/DD/YYYY format.<br />
 651         </span>&nbsp;</td>
 652 </tr>
 653 <?php } if($_SESSION['UserGroup']==$Settings['GuestGroup']&&
 654         $_POST['GuestName']==null) { $Error="Yes"; ?>
 655 <tr>
 656         <td><span class="TableMessage">
 657         <br />You need to enter a Guest Name.<br />
 658         </span>&nbsp;</td>
 659 </tr>
 660 <?php } if($_SESSION['UserGroup']==$Settings['GuestGroup']&&
 661         $RGMatches==true) { $Error="Yes"; ?>
 662 <tr>
 663         <td><span class="TableMessage">
 664         <br />This Guest Name is restricted to use.<br />
 665         </span>&nbsp;</td>
 666 </tr>
 667 <?php } if($GroupInfo['CanAddEvents']=="no") { $Error="Yes"; ?>
 668 <tr>
 669         <td><span class="TableMessage">
 670         <br />You do not have permission to make a event here.<br />
 671         </span>&nbsp;</td>
 672 </tr>
 673 <?php } if($RMatches==true) { $Error="Yes"; ?>
 674 <tr>
 675         <td><span class="TableMessage">
 676         <br />This User Name is restricted to use.<br />
 677         </span>&nbsp;</td>
 678 </tr>
 679 <?php } if ($Error=="Yes") {
 680 redirect("refresh",$rbasedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false),"4"); ?>
 681 <tr>
 682         <td><span class="TableMessage">
 683         <br />Click <a href="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>">here</a> to goto index page.<br />&nbsp;
 684         </span><br /></td>
 685 </tr>
 686 <?php } if ($Error!="Yes") {
 687 $TimeSIn = mktime(0,0,0,$TimeIn[0],$TimeIn[1],$TimeIn[2]);
 688 $TimeSOut = mktime(23,59,59,$TimeOut[0],$TimeOut[1],$TimeOut[2]);
 689 $EventMonth=GMTimeChange("m",$TimeSIn,0,0,"off");
 690 $EventMonthEnd=GMTimeChange("m",$TimeSOut,0,0,"off");
 691 $EventDay=GMTimeChange("d",$TimeSIn,0,0,"off");
 692 $EventDayEnd=GMTimeChange("d",$TimeSOut,0,0,"off");
 693 $EventYear=GMTimeChange("Y",$TimeSIn,0,0,"off");
 694 $EventYearEnd=GMTimeChange("Y",$TimeSOut,0,0,"off");
 695 $User1ID=$MyUserID;
 696 $User1IP=$_SERVER['REMOTE_ADDR'];
 697 if($_SESSION['UserGroup']==$Settings['GuestGroup']) { $User1Name = $_POST['GuestName']; }
 698 if($_SESSION['UserGroup']!=$Settings['GuestGroup']) { $User1Name = $_SESSION['MemberName']; }
 699 $query = sql_pre_query("INSERT INTO ".$Settings['sqltable']."events (\"UserID\", \"GuestName\", \"EventName\", \"EventText\", \"TimeStamp\", \"TimeStampEnd\", \"EventMonth\", \"EventMonthEnd\", \"EventDay\", \"EventDayEnd\", \"EventYear\", \"EventYearEnd\", \"IP\") VALUES\n".
 700 "(%i, '%s', '%s', '%s', %i, %i, %i, %i, %i, %i, %i, %i, '%s')", array($User1ID,$User1Name,$_POST['EventName'],$_POST['EventText'],$TimeSIn,$TimeSOut,$EventMonth,$EventMonthEnd,$EventDay,$EventDayEnd,$EventYear,$EventYearEnd,$User1IP));
 701 sql_query($query,$SQLStat);
 702 $eventid = sql_get_next_id($Settings['sqltable'],"events",$SQLStat);
 703 redirect("refresh",$rbasedir.url_maker($exfile['event'],$Settings['file_ext'],"act=event&id=".$eventid,$Settings['qstr'],$Settings['qsep'],$prexqstr['event'],$exqstr['event'],FALSE),"3");
 704 ?><tr>
 705         <td><span class="TableMessage"><br />
 706         Event <?php echo $_POST['EventName']; ?> was started.<br />
 707         Click <a href="<?php echo url_maker($exfile['event'],$Settings['file_ext'],"act=event&id=".$eventid,$Settings['qstr'],$Settings['qsep'],$prexqstr['event'],$exqstr['event']); ?>">here</a> to continue to event.<br />&nbsp;
 708         </span><br /></td>
 709 </tr>
 710 <?php } ?>
 711 </table>
 712 </td></tr>
 713 <tr class="TableRow4">
 714 <td class="TableColumn4">&nbsp;</td>
 715 </tr>
 716 </table></div>
 717 <?php } ?>
 718 <div class="DivEvents">&nbsp;</div>