inc/members.php

   1 <?php
   2 /*
   3     This program is free software; you can redistribute it and/or modify
   4     it under the terms of the Revised BSD License.
   5
   6     This program is distributed in the hope that it will be useful,
   7     but WITHOUT ANY WARRANTY; without even the implied warranty of
   8     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   9     Revised BSD License for more details.
  10
  11     Copyright 2004-2011 iDB Support - http://idb.berlios.de/
  12     Copyright 2004-2011 Game Maker 2k - http://gamemaker2k.org/
  13
  14     $FileInfo: members.php - Last Update: 07/18/2011 SVN 720 - Author: cooldude2k $
  15 */
  16 $File3Name = basename($_SERVER['SCRIPT_NAME']);
  17 if ($File3Name=="members.php"||$File3Name=="/members.php") {
  18         require('index.php');
  19         exit(); }
  20 $pagenum = null;
  21 if(!is_numeric($_GET['id'])) { $_GET['id'] = null; }
  22 if(!is_numeric($_GET['page'])) { $_GET['page'] = 1; }
  23 if($_GET['act']=="list") {
  24 $orderlist = null;
  25 $orderlist = "order by \"ID\" asc";
  26 if(!isset($_GET['list'])) { $_GET['list'] = "members"; }
  27 if(!isset($_GET['orderby'])) { $_GET['orderby'] = null; }
  28 if(!isset($_GET['sorttype'])) { $_GET['sorttype'] = null; }
  29 if(!isset($_GET['ordertype'])) { $_GET['ordertype'] = null; }
  30 if(!isset($_GET['orderby'])) { $_GET['orderby'] = null; }
  31 if(!isset($_GET['sortby'])) { $_GET['sortby'] = null; }
  32 if(!isset($_GET['gid'])) { $_GET['gid'] = null; }
  33 if(!isset($_GET['groupid'])) { $_GET['groupid'] = null; }
  34 if($_GET['orderby']==null) {
  35         if($_GET['sortby']!=null) {
  36                 $_GET['orderby'] = $_GET['sortby']; } }
  37 if($_GET['orderby']==null) { $_GET['orderby'] = "joined"; }
  38 if($_GET['orderby']!=null) {
  39 if($_GET['orderby']=="id") { $orderlist = "order by \"ID\""; }
  40 if($_GET['orderby']=="name") { $orderlist = "order by \"Name\""; }
  41 if($_GET['orderby']=="joined") { $orderlist = "order by \"Joined\""; }
  42 if($_GET['orderby']=="active") { $orderlist = "order by \"LastActive\""; }
  43 if($_GET['orderby']=="post") { $orderlist = "order by \"PostCount\""; }
  44 if($_GET['orderby']=="posts") { $orderlist = "order by \"PostCount\""; }
  45 if($_GET['orderby']=="karma") { $orderlist = "order by \"Karma\""; }
  46 if($_GET['orderby']=="offset") { $orderlist = "order by \"TimeZone\""; } }
  47 if($_GET['ordertype']==null) {
  48         if($_GET['sorttype']!=null) {
  49                 $_GET['ordertype'] = $_GET['sorttype']; } }
  50 if($_GET['ordertype']==null) { $_GET['ordertype'] = "asc"; }
  51 if($_GET['ordertype']!=null) {
  52 if($_GET['ordertype']=="ascending") { $orderlist .= " asc"; }
  53 if($_GET['ordertype']=="descending") { $orderlist .= " desc"; }
  54 if($_GET['ordertype']=="asc") { $orderlist .= " asc"; }
  55 if($_GET['ordertype']=="desc") { $orderlist .= " desc"; } }
  56 if(!is_numeric($_GET['gid'])) { $_GET['gid'] = null; }
  57 if($_GET['gid']!=null&&$_GET['groupid']==null) { $_GET['groupid'] = $_GET['gid']; }
  58 if(!is_numeric($_GET['groupid'])) { $_GET['groupid'] = null; }
  59 $ggquery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."groups\" WHERE \"Name\"='%s'", array($Settings['GuestGroup']));
  60 $ggresult=sql_query($ggquery,$SQLStat);
  61 $GGroup=sql_result($ggresult,0,"id");
  62 sql_free_result($ggresult);
  63 //Get SQL LIMIT Number
  64 $nums = $_GET['page'] * $Settings['max_memlist'];
  65 $PageLimit = $nums - $Settings['max_memlist'];
  66 if($PageLimit<0) { $PageLimit = 0; }
  67 $i=0;
  68 if($_GET['groupid']==null) {
  69 $query = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."members\" WHERE \"GroupID\"<>%i AND \"id\">=0 AND \"HiddenMember\"='no' ".$orderlist." ".$SQLimit, array($GGroup,$PageLimit,$Settings['max_memlist']));
  70 $rnquery = sql_pre_query("SELECT COUNT(*) FROM \"".$Settings['sqltable']."members\" WHERE \"GroupID\"<>%i AND \"id\">=0 AND \"HiddenMember\"='no'", array($GGroup)); }
  71 if($_GET['groupid']!=null) {
  72 $query = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."members\" WHERE \"GroupID\"=%i AND \"GroupID\"<>%i AND \"id\">=0 ".$orderlist." ".$SQLimit, array($_GET['groupid'],$GGroup,$PageLimit,$Settings['max_memlist']));
  73 $rnquery = sql_pre_query("SELECT COUNT(*) FROM \"".$Settings['sqltable']."members\" WHERE \"GroupID\"=%i AND \"GroupID\"<>%i AND \"id\">=0", array($_GET['groupid'],$GGroup)); }
  74 $result=sql_query($query,$SQLStat);
  75 $rnresult=sql_query($rnquery,$SQLStat);
  76 $NumberMembers = sql_result($rnresult,0);
  77 sql_free_result($rnresult);
  78 $_SESSION['ViewingPage'] = url_maker(null,"no+ext","act=list&orderby=".$_GET['orderby']."&ordertype=".$_GET['ordertype']."&page=".$_GET['page'],"&","=",$prexqstr['member'],$exqstr['member']);
  79 if($Settings['file_ext']!="no+ext"&&$Settings['file_ext']!="no ext") {
  80 $_SESSION['ViewingFile'] = $exfile['member'].$Settings['file_ext']; }
  81 if($Settings['file_ext']=="no+ext"||$Settings['file_ext']=="no ext") {
  82 $_SESSION['ViewingFile'] = $exfile['member']; }
  83 $_SESSION['PreViewingTitle'] = "Viewing";
  84 $_SESSION['ViewingTitle'] = "Member List";
  85 if($NumberMembers==null) {
  86         $NumberMembers = 0; }
  87 $num = $NumberMembers;
  88 //Start MemberList Page Code
  89 if(!isset($Settings['max_memlist'])) { $Settings['max_memlist'] = 10; }
  90 if($_GET['page']==null) { $_GET['page'] = 1; }
  91 if($_GET['page']<=0) { $_GET['page'] = 1; }
  92 $nums = $_GET['page'] * $Settings['max_memlist'];
  93 if($nums>$num) { $nums = $num; }
  94 $numz = $nums - $Settings['max_memlist'];
  95 if($numz<=0) { $numz = 0; }
  96 //$i=$numz;
  97 if($nums<$num) { $nextpage = $_GET['page'] + 1; }
  98 if($nums>=$num) { $nextpage = $_GET['page']; }
  99 if($numz>=$Settings['max_memlist']) { $backpage = $_GET['page'] - 1; }
 100 if($_GET['page']<=1) { $backpage = 1; }
 101 $pnum = $num; $l = 1; $Pages = null;
 102 while ($pnum>0) {
 103 if($pnum>=$Settings['max_memlist']) {
 104         $pnum = $pnum - $Settings['max_memlist'];
 105         $Pages[$l] = $l; ++$l; }
 106 if($pnum<$Settings['max_memlist']&&$pnum>0) {
 107         $pnum = $pnum - $pnum;
 108         $Pages[$l] = $l; ++$l; } }
 109 $nums = $_GET['page'] * $Settings['max_memlist'];
 110 //End MemberList Page Code
 111 $num=sql_num_rows($result);
 112 //List Page Number Code Start
 113 $pagenum=count($Pages);
 114 if($_GET['page']>$pagenum) {
 115         $_GET['page'] = $pagenum; }
 116 $pagei=0; $pstring = null;
 117 if($pagenum>1) {
 118 $pstring = "<div class=\"PageList\"><span class=\"pagelink\">".$pagenum." Pages:</span> "; }
 119 if($_GET['page']<4) { $Pagez[0] = null; }
 120 if($_GET['page']>=4) { $Pagez[0] = "First"; }
 121 if($_GET['page']>=3) {
 122 $Pagez[1] = $_GET['page'] - 2; }
 123 if($_GET['page']<3) {
 124 $Pagez[1] = null; }
 125 if($_GET['page']>=2) {
 126 $Pagez[2] = $_GET['page'] - 1; }
 127 if($_GET['page']<2) {
 128 $Pagez[2] = null; }
 129 $Pagez[3] = $_GET['page'];
 130 if($_GET['page']<$pagenum) {
 131 $Pagez[4] = $_GET['page'] + 1; }
 132 if($_GET['page']>=$pagenum) {
 133 $Pagez[4] = null; }
 134 $pagenext = $_GET['page'] + 1;
 135 if($pagenext<$pagenum) {
 136 $Pagez[5] = $_GET['page'] + 2; }
 137 if($pagenext>=$pagenum) {
 138 $Pagez[5] = null; }
 139 if($_GET['page']<$pagenum) { $Pagez[6] = "Last"; }
 140 if($_GET['page']>=$pagenum) { $Pagez[6] = null; }
 141 $pagenumi=count($Pagez);
 142 if($NumberMembers==0) {
 143 $pagenumi = 0;
 144 $pstring = null; }
 145 if($pagenum>1) {
 146 while ($pagei < $pagenumi) {
 147 if($_GET['page']!=1&&$pagei==1) {
 148 $Pback = $_GET['page'] - 1;
 149 $pstring = $pstring."<span class=\"pagelink\"><a href=\"".url_maker($exfile['member'],$Settings['file_ext'],"act=list&orderby=".$_GET['orderby']."&ordertype=".$_GET['ordertype']."&page=".$Pback,$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'])."\">&lt;</a></span> "; }
 150 if($Pagez[$pagei]!=null&&
 151    $Pagez[$pagei]!="First"&&
 152    $Pagez[$pagei]!="Last") {
 153 if($pagei!=3) {
 154 $pstring = $pstring."<span class=\"pagelink\"><a href=\"".url_maker($exfile['member'],$Settings['file_ext'],"act=list&orderby=".$_GET['orderby']."&ordertype=".$_GET['ordertype']."&page=".$Pagez[$pagei],$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'])."\">".$Pagez[$pagei]."</a></span> "; }
 155 if($pagei==3) {
 156 $pstring = $pstring."<span class=\"pagecurrent\"><a href=\"".url_maker($exfile['member'],$Settings['file_ext'],"act=list&orderby=".$_GET['orderby']."&ordertype=".$_GET['ordertype']."&page=".$Pagez[$pagei],$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'])."\">".$Pagez[$pagei]."</a></span> "; } }
 157 if($Pagez[$pagei]=="First") {
 158 $pstring = $pstring."<span class=\"pagelinklast\"><a href=\"".url_maker($exfile['member'],$Settings['file_ext'],"act=list&orderby=".$_GET['orderby']."&ordertype=".$_GET['ordertype']."&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'])."\">&laquo;</a></span> "; }
 159 if($Pagez[$pagei]=="Last") {
 160 $ptestnext = $pagenext + 1;
 161 $paget = $pagei - 1;
 162 $Pnext = $_GET['page'] + 1;
 163 $pstring = $pstring."<span class=\"pagelink\"><a href=\"".url_maker($exfile['member'],$Settings['file_ext'],"act=list&orderby=".$_GET['orderby']."&ordertype=".$_GET['ordertype']."&page=".$Pnext,$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'])."\">&gt;</a></span> ";
 164 if($ptestnext<$pagenum) {
 165 $pstring = $pstring."<span class=\"pagelinklast\"><a href=\"".url_maker($exfile['member'],$Settings['file_ext'],"act=list&orderby=".$_GET['orderby']."&ordertype=".$_GET['ordertype']."&page=".$pagenum,$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'])."\">&raquo;</a></span> "; } }
 166         ++$pagei; } $pstring = $pstring."</div>"; }
 167 ?>
 168 <div class="NavLinks"><?php echo $ThemeSet['NavLinkIcon']; ?><a href="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>"><?php echo $Settings['board_name']; ?></a><?php echo $ThemeSet['NavLinkDivider']; ?><a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=list&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">Member list</a></div>
 169 <div class="DivNavLinks">&nbsp;</div>
 170 <?php
 171 echo $pstring;
 172 //List Page Number Code end
 173 if($pagenum>1) {
 174 ?>
 175 <div class="DivPageLinks">&nbsp;</div>
 176 <?php } ?>
 177 <div class="Table1Border">
 178 <?php if($ThemeSet['TableStyle']=="div") { ?>
 179 <div class="TableRow1">
 180 <span style="text-align: left;">
 181 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=list&orderby=".$_GET['orderby']."&ordertype=".$_GET['ordertype']."&page=".$_GET['page'],$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">Member List</a>
 182 </span></div>
 183 <?php } ?>
 184 <table class="Table1">
 185 <?php if($ThemeSet['TableStyle']=="table") { ?>
 186 <tr class="TableRow1">
 187 <td class="TableColumn1" colspan="8"><span style="text-align: left;">
 188 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=list&orderby=".$_GET['orderby']."&ordertype=".$_GET['ordertype']."&page=".$_GET['page'],$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">Member List</a>
 189 </span></td>
 190 </tr><?php } ?>
 191 <tr id="Member" class="TableRow2">
 192 <th class="TableColumn2" style="width: 5%;">ID</th>
 193 <th class="TableColumn2" style="width: 28%;">Name</th>
 194 <th class="TableColumn2" style="width: 10%;">Group</th>
 195 <th class="TableColumn2" style="width: 5%;">Posts</th>
 196 <th class="TableColumn2" style="width: 5%;">Karma</th>
 197 <th class="TableColumn2" style="width: 20%;">Joined</th>
 198 <th class="TableColumn2" style="width: 20%;">Last Active</th>
 199 <th class="TableColumn2" style="width: 7%;">Website</th>
 200 </tr>
 201 <?php
 202 while ($i < $num) {
 203 $MemList['ID']=sql_result($result,$i,"id");
 204 $MemList['Name']=sql_result($result,$i,"Name");
 205 $MemList['Email']=sql_result($result,$i,"Email");
 206 $MemList['GroupID']=sql_result($result,$i,"GroupID");
 207 $MemList['WarnLevel']=sql_result($result,$i,"WarnLevel");
 208 $MemList['Interests']=sql_result($result,$i,"Interests");
 209 $MemList['Title']=sql_result($result,$i,"Title");
 210 $MemList['Joined']=sql_result($result,$i,"Joined");
 211 $MemList['Joined']=GMTimeChange("F j Y, ".$Settings['idb_time_format'],$MemList['Joined'],$_SESSION['UserTimeZone'],0,$_SESSION['UserDST']);
 212 $MemList['LastActive']=sql_result($result,$i,"LastActive");
 213 $MemList['LastActive']=GMTimeChange("F j Y, ".$Settings['idb_time_format'],$MemList['LastActive'],$_SESSION['UserTimeZone'],0,$_SESSION['UserDST']);
 214 $MemList['Website']=sql_result($result,$i,"Website");
 215 $MemList['Website'] = urlcheck($MemList['Website']);
 216 $BoardWWWChCk = parse_url($Settings['idburl']);
 217 $MemsWWWChCk = parse_url($MemList['Website']);
 218 $opennew = " onclick=\"window.open(this.href);return false;\"";
 219 if($BoardWWWChCk['host']==$MemsWWWChCk['host']) {
 220         $opennew = null; }
 221 $MemList['Gender']=sql_result($result,$i,"Gender");
 222 $MemList['PostCount']=sql_result($result,$i,"PostCount");
 223 $MemList['Karma']=sql_result($result,$i,"Karma");
 224 $MemList['TimeZone']=sql_result($result,$i,"TimeZone");
 225 $MemList['DST']=sql_result($result,$i,"DST");
 226 $MemList['IP']=sql_result($result,$i,"IP");
 227 $gquery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."groups\" WHERE \"id\"=%i LIMIT 1", array($MemList['GroupID']));
 228 $gresult=sql_query($gquery,$SQLStat);
 229 $MemList['Group']=sql_result($gresult,0,"Name");
 230 $GroupNamePrefix=sql_result($gresult,0,"NamePrefix");
 231 $GroupNameSuffix=sql_result($gresult,0,"NameSuffix");
 232 sql_free_result($gresult);
 233 if(isset($GroupNamePrefix)&&$GroupNamePrefix!=null) {
 234         $MemList['Name'] = $GroupNamePrefix.$MemList['Name']; }
 235 if(isset($GroupNameSuffix)&&$GroupNameSuffix!=null) {
 236         $MemList['Name'] = $MemList['Name'].$GroupNameSuffix; }
 237 $membertitle = " ".$ThemeSet['TitleDivider']." Member List";
 238 if($MemList['Group']!=$Settings['GuestGroup']) {
 239 ?>
 240 <tr class="TableRow3" id="Member<?php echo $MemList['ID']; ?>">
 241 <td class="TableColumn3" style="text-align: center;"><?php echo $MemList['ID']; ?></td>
 242 <td class="TableColumn3">&nbsp;<a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=view&id=".$MemList['ID'],$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>"><?php echo $MemList['Name']; ?></a></td>
 243 <td class="TableColumn3" style="text-align: center;"><a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=list&gid=".$MemList['GroupID']."&page=".$_GET['page'],$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>"><?php echo $MemList['Group']; ?></a></td>
 244 <td class="TableColumn3" style="text-align: center;"><?php echo $MemList['PostCount']; ?></td>
 245 <td class="TableColumn3" style="text-align: center;"><?php echo $MemList['Karma']; ?></td>
 246 <td class="TableColumn3" style="text-align: center;"><?php echo $MemList['Joined']; ?></td>
 247 <td class="TableColumn3" style="text-align: center;"><?php echo $MemList['LastActive']; ?></td>
 248 <td class="TableColumn3" style="text-align: center;"><a href="<?php echo $MemList['Website']; ?>"<?php echo $opennew; ?>>Website</a></td>
 249 </tr>
 250 <?php }
 251 ++$i; } sql_free_result($result);
 252 ?>
 253 <tr id="MemEnd" class="TableRow4">
 254 <td class="TableColumn4" colspan="8">&nbsp;</td>
 255 </tr>
 256 </table></div>
 257 <?php
 258 if($pagenum>1) {
 259 ?>
 260 <div class="DivMembers">&nbsp;</div>
 261 <?php }
 262 echo $pstring;
 263 //List Page Number Code end
 264 if($pagenum>1) {
 265 ?>
 266 <div class="DivPageLinks">&nbsp;</div>
 267 <?php } }
 268 if($_GET['act']=="online") {
 269 if($_GET['list']!="all"&&$_GET['list']!="members"&&$_GET['list']!="guests") {
 270         $_GET['list'] = "members"; }
 271 //Get SQL LIMIT Number
 272 $nums = $_GET['page'] * $Settings['max_memlist'];
 273 $PageLimit = $nums - $Settings['max_memlist'];
 274 if($PageLimit<0) { $PageLimit = 0; }
 275 $i=0;
 276 $uolcuttime = GMTimeStamp();
 277 $uoltime = $uolcuttime - ini_get("session.gc_maxlifetime");
 278 if($_GET['list']=="members") {
 279 $query = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."sessions\" WHERE \"expires\" >= %i AND \"session_data\" NOT LIKE '%s' ORDER BY \"expires\" DESC ".$SQLimit, array($uoltime,"%UserGroup|s:".strlen($Settings['GuestGroup']).":\"".$Settings['GuestGroup']."\";%",$PageLimit,$Settings['max_memlist']));
 280 $rnquery = sql_pre_query("SELECT COUNT(*) FROM \"".$Settings['sqltable']."sessions\" WHERE \"expires\" >= %i AND \"session_data\" NOT LIKE '%s'", array($uoltime,"%UserGroup|s:".strlen($Settings['GuestGroup']).":\"".$Settings['GuestGroup']."\";%")); }
 281 if($_GET['list']=="guests") {
 282 $query = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."sessions\" WHERE \"expires\" >= %i AND \"session_data\" LIKE '%s' ORDER BY \"expires\" DESC ".$SQLimit, array($uoltime,"%UserGroup|s:".strlen($Settings['GuestGroup']).":\"".$Settings['GuestGroup']."\";%",$PageLimit,$Settings['max_memlist']));
 283 $rnquery = sql_pre_query("SELECT COUNT(*) FROM \"".$Settings['sqltable']."sessions\" WHERE \"expires\" >= %i AND \"session_data\" LIKE '%s'", array($uoltime,"%UserGroup|s:".strlen($Settings['GuestGroup']).":\"".$Settings['GuestGroup']."\";%")); }
 284 if($_GET['list']=="all") {
 285 $query = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."sessions\" WHERE \"expires\" >= %i ORDER BY \"expires\" DESC ".$SQLimit, array($uoltime,$PageLimit,$Settings['max_memlist']));
 286 $rnquery = sql_pre_query("SELECT COUNT(*) FROM \"".$Settings['sqltable']."sessions\" WHERE \"expires\" >= %i", array($uoltime)); }
 287 $result=sql_query($query,$SQLStat);
 288 $rnresult=sql_query($rnquery,$SQLStat);
 289 $NumberMembers = sql_result($rnresult,0);
 290 sql_free_result($rnresult);
 291 $_SESSION['ViewingPage'] = url_maker(null,"no+ext","act=online&list=".$_GET['list']."&page=".$_GET['page'],"&","=",$prexqstr['member'],$exqstr['member']);
 292 if($Settings['file_ext']!="no+ext"&&$Settings['file_ext']!="no ext") {
 293 $_SESSION['ViewingFile'] = $exfile['member'].$Settings['file_ext']; }
 294 if($Settings['file_ext']=="no+ext"||$Settings['file_ext']=="no ext") {
 295 $_SESSION['ViewingFile'] = $exfile['member']; }
 296 $_SESSION['PreViewingTitle'] = "Viewing";
 297 $_SESSION['ViewingTitle'] = "Online Member List";
 298 if($NumberMembers==null) {
 299         $NumberMembers = 0; }
 300 $num = $NumberMembers;
 301 //Start MemberList Page Code
 302 if(!isset($Settings['max_memlist'])) { $Settings['max_memlist'] = 10; }
 303 if($_GET['page']==null) { $_GET['page'] = 1; }
 304 if($_GET['page']<=0) { $_GET['page'] = 1; }
 305 $nums = $_GET['page'] * $Settings['max_memlist'];
 306 if($nums>$num) { $nums = $num; }
 307 $numz = $nums - $Settings['max_memlist'];
 308 if($numz<=0) { $numz = 0; }
 309 //$i=$numz;
 310 if($nums<$num) { $nextpage = $_GET['page'] + 1; }
 311 if($nums>=$num) { $nextpage = $_GET['page']; }
 312 if($numz>=$Settings['max_memlist']) { $backpage = $_GET['page'] - 1; }
 313 if($_GET['page']<=1) { $backpage = 1; }
 314 $pnum = $num; $l = 1; $Pages = null;
 315 while ($pnum>0) {
 316 if($pnum>=$Settings['max_memlist']) {
 317         $pnum = $pnum - $Settings['max_memlist'];
 318         $Pages[$l] = $l; ++$l; }
 319 if($pnum<$Settings['max_memlist']&&$pnum>0) {
 320         $pnum = $pnum - $pnum;
 321         $Pages[$l] = $l; ++$l; } }
 322 $nums = $_GET['page'] * $Settings['max_memlist'];
 323 //End MemberList Page Code
 324 $num=sql_num_rows($result);
 325 //List Page Number Code Start
 326 $pagenum=count($Pages);
 327 if($_GET['page']>$pagenum) {
 328         $_GET['page'] = $pagenum; }
 329 $pagei=0; $pstring = null;
 330 if($pagenum>1) {
 331 $pstring = "<div class=\"PageList\"><span class=\"pagelink\">".$pagenum." Pages:</span> "; }
 332 if($_GET['page']<4) { $Pagez[0] = null; }
 333 if($_GET['page']>=4) { $Pagez[0] = "First"; }
 334 if($_GET['page']>=3) {
 335 $Pagez[1] = $_GET['page'] - 2; }
 336 if($_GET['page']<3) {
 337 $Pagez[1] = null; }
 338 if($_GET['page']>=2) {
 339 $Pagez[2] = $_GET['page'] - 1; }
 340 if($_GET['page']<2) {
 341 $Pagez[2] = null; }
 342 $Pagez[3] = $_GET['page'];
 343 if($_GET['page']<$pagenum) {
 344 $Pagez[4] = $_GET['page'] + 1; }
 345 if($_GET['page']>=$pagenum) {
 346 $Pagez[4] = null; }
 347 $pagenext = $_GET['page'] + 1;
 348 if($pagenext<$pagenum) {
 349 $Pagez[5] = $_GET['page'] + 2; }
 350 if($pagenext>=$pagenum) {
 351 $Pagez[5] = null; }
 352 if($_GET['page']<$pagenum) { $Pagez[6] = "Last"; }
 353 if($_GET['page']>=$pagenum) { $Pagez[6] = null; }
 354 $pagenumi=count($Pagez);
 355 if($NumberMembers==0) {
 356 $pagenumi = 0;
 357 $pstring = null; }
 358 if($pagenum>1) {
 359 while ($pagei < $pagenumi) {
 360 if($_GET['page']!=1&&$pagei==1) {
 361 $Pback = $_GET['page'] - 1;
 362 $pstring = $pstring."<span class=\"pagelink\"><a href=\"".url_maker($exfile['member'],$Settings['file_ext'],"act=online&list=".$_GET['list']."&page=".$Pback,$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'])."\">&lt;</a></span> "; }
 363 if($Pagez[$pagei]!=null&&
 364    $Pagez[$pagei]!="First"&&
 365    $Pagez[$pagei]!="Last") {
 366 if($pagei!=3) {
 367 $pstring = $pstring."<span class=\"pagelink\"><a href=\"".url_maker($exfile['member'],$Settings['file_ext'],"act=online&list=".$_GET['list']."&page=".$Pagez[$pagei],$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'])."\">".$Pagez[$pagei]."</a></span> "; }
 368 if($pagei==3) {
 369 $pstring = $pstring."<span class=\"pagecurrent\"><a href=\"".url_maker($exfile['member'],$Settings['file_ext'],"act=online&list=".$_GET['list']."&page=".$Pagez[$pagei],$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'])."\">".$Pagez[$pagei]."</a></span> "; } }
 370 if($Pagez[$pagei]=="First") {
 371 $pstring = $pstring."<span class=\"pagelinklast\"><a href=\"".url_maker($exfile['member'],$Settings['file_ext'],"act=online&list=".$_GET['list']."&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'])."\">&laquo;</a></span> "; }
 372 if($Pagez[$pagei]=="Last") {
 373 $ptestnext = $pagenext + 1;
 374 $paget = $pagei - 1;
 375 $Pnext = $_GET['page'] + 1;
 376 $pstring = $pstring."<span class=\"pagelink\"><a href=\"".url_maker($exfile['member'],$Settings['file_ext'],"act=online&list=".$_GET['list']."&page=".$Pnext,$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'])."\">&gt;</a></span> ";
 377 if($ptestnext<$pagenum) {
 378 $pstring = $pstring."<span class=\"pagelinklast\"><a href=\"".url_maker($exfile['member'],$Settings['file_ext'],"act=online&list=".$_GET['list']."&page=".$pagenum,$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'])."\">&raquo;</a></span> "; } }
 379         ++$pagei; } $pstring = $pstring."</div>"; }
 380 ?>
 381 <div class="NavLinks"><?php echo $ThemeSet['NavLinkIcon']; ?><a href="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>"><?php echo $Settings['board_name']; ?></a><?php echo $ThemeSet['NavLinkDivider']; ?><a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=online&list=all&page=1",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">Online Member List</a></div>
 382 <div class="DivNavLinks">&nbsp;</div>
 383 <?php
 384 echo $pstring;
 385 //List Page Number Code end
 386 if($pagenum>1) {
 387 ?>
 388 <div class="DivPageLinks">&nbsp;</div>
 389 <?php } ?>
 390 <div class="Table1Border">
 391 <?php if($ThemeSet['TableStyle']=="div") { ?>
 392 <div class="TableRow1">
 393 <span style="text-align: left;">
 394 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=online&list=".$_GET['list']."&page=".$_GET['page'],$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">Online Member List</a>
 395 </span></div>
 396 <?php } ?>
 397 <table class="Table1">
 398 <?php if($ThemeSet['TableStyle']=="table") { ?>
 399 <tr class="TableRow1">
 400 <td class="TableColumn1" colspan="8"><span style="text-align: left;">
 401 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=online&list=".$_GET['list']."&page=".$_GET['page'],$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">Online Member List</a>
 402 </span></td>
 403 </tr><?php } ?>
 404 <tr id="Member" class="TableRow2">
 405 <th class="TableColumn2" style="width: 5%;">ID</th>
 406 <th class="TableColumn2" style="width: 28%;">Member Name</th>
 407 <th class="TableColumn2" style="width: 15%;">Group Name</th>
 408 <th class="TableColumn2" style="width: 28%;">Location</th>
 409 <th class="TableColumn2" style="width: 24%;">Time</th>
 410 </tr>
 411 <?php
 412 while ($i < $num) {
 413 $AmIHiddenUser = "no";
 414 $session_data=sql_result($result,$i,"session_data");
 415 $session_user_agent=sql_result($result,$i,"user_agent");
 416 $session_ip_address=sql_result($result,$i,"ip_address");
 417 $session_expires=sql_result($result,$i,"expires");
 418 $session_expires = GMTimeChange("F j Y, ".$Settings['idb_time_format'],$session_expires,$_SESSION['UserTimeZone'],0,$_SESSION['UserDST']);
 419 if(isset($UserSessInfo)) { $UserSessInfo = null; }
 420 $UserSessInfo = unserialize_session($session_data);
 421 if(!isset($UserSessInfo['ShowActHidden'])) { $UserSessInfo['ShowActHidden'] = "no"; }
 422 if(!isset($UserSessInfo['UserGroup'])) {
 423         $UserSessInfo['UserGroup'] = $Settings['GuestGroup']; }
 424 if(!isset($session_ip_address)) {
 425         $session_ip_address = "127.0.0.1"; }
 426 if($UserSessInfo['UserGroup']!=$Settings['GuestGroup']) {
 427 $PreAmIHiddenUser = GetUserName($UserSessInfo['UserID'],$Settings['sqltable'],$SQLStat);
 428 $AmIHiddenUser = $PreAmIHiddenUser['Hidden']; }
 429 if(!isset($AmIHiddenUser)) { $AmIHiddenUser = "no"; }
 430 if($AmIHiddenUser===null) { $AmIHiddenUser = "no"; }
 431 if(!isset($UserSessInfo['ViewingPage'])) {
 432         $UserSessInfo['ViewingPage'] = url_maker(null,"no+ext","act=view","&","=",$prexqstr['index'],$exqstr['index']); }
 433 if(!isset($UserSessInfo['ViewingFile'])) {
 434         if($Settings['file_ext']!="no+ext"&&$Settings['file_ext']!="no ext") {
 435         $UserSessInfo['ViewingFile'] = $exfile['index'].$Settings['file_ext']; }
 436         if($Settings['file_ext']=="no+ext"||$Settings['file_ext']=="no ext") {
 437         $UserSessInfo['ViewingFile'] = $exfile['index']; } }
 438 if(!isset($UserSessInfo['PreViewingTitle'])) {
 439         $UserSessInfo['PreViewingTitle'] = "Viewing"; }
 440 if(!isset($UserSessInfo['ViewingTitle'])) {
 441         $UserSessInfo['ViewingTitle'] = "Board index"; }
 442 $PreExpPage = explode("?",$UserSessInfo['ViewingPage']);
 443 $PreFileName = $UserSessInfo['ViewingFile'];
 444 $qstr = htmlentities("&", ENT_QUOTES, $Settings['charset']);
 445 $qsep = htmlentities("=", ENT_QUOTES, $Settings['charset']);
 446 $PreExpPage = preg_replace("/^\?/","",$UserSessInfo['ViewingPage']);
 447 $PreExpPage = str_replace($qstr, "&", $PreExpPage);
 448 $PreExpPage = str_replace($qsep, "=", $PreExpPage);
 449 parse_str($PreExpPage,$ChkID);
 450 if($PreFileName==$exfile['topic'].$Settings['file_ext']) {
 451 if(isset($ChkID["id"])) { $ChkID = $ChkID["id"];
 452 $prequery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."topics\" WHERE \"id\"=%i LIMIT 1", array($ChkID));
 453 $preresult=sql_query($prequery,$SQLStat);
 454 $prenum=sql_num_rows($preresult);
 455 if($prenum>=1) {
 456 $TopicForumID=sql_result($preresult,0,"ForumID");
 457 $TopicCatID=sql_result($preresult,0,"CategoryID"); }
 458 if($prenum<1) {
 459 $TopicForumID=0;
 460 $TopicCatID=0; }
 461 if($CatPermissionInfo['CanViewCategory'][$TopicCatID]=="no"||
 462         $CatPermissionInfo['CanViewCategory'][$TopicCatID]!="yes") {
 463         $PreFileName = $exfile['index'].$Settings['file_ext'];
 464         $PreExpPage = "act=view";
 465         $UserSessInfo['ViewingPage'] = url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']);
 466         $UserSessInfo['PreViewingTitle'] = "Viewing";
 467         $UserSessInfo['ViewingTitle'] = "Board index"; }
 468 if($PermissionInfo['CanViewForum'][$TopicForumID]=="no"||
 469         $PermissionInfo['CanViewForum'][$TopicForumID]!="yes") {
 470         $PreFileName = $exfile['index'].$Settings['file_ext'];
 471         $PreExpPage = "act=view";
 472         $UserSessInfo['ViewingPage'] = url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']);
 473         $UserSessInfo['PreViewingTitle'] = "Viewing";
 474         $UserSessInfo['ViewingTitle'] = "Board index"; } } }
 475 if($PreFileName==$exfile['forum'].$Settings['file_ext']) {
 476 if(isset($ChkID["id"])) { $ChkID = $ChkID["id"];
 477 $prequery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."forums\" WHERE \"id\"=%i LIMIT 1", array($ChkID));
 478 $preresult=sql_query($prequery,$SQLStat);
 479 $prenum=sql_num_rows($preresult);
 480 $ForumCatID=sql_result($preresult,0,"CategoryID");
 481 sql_free_result($preresult);
 482 if($CatPermissionInfo['CanViewCategory'][$ForumCatID]=="no"||
 483         $CatPermissionInfo['CanViewCategory'][$ForumCatID]!="yes") {
 484         $PreFileName = $exfile['index'].$Settings['file_ext'];
 485         $PreExpPage = "act=view";
 486         $UserSessInfo['ViewingPage'] = url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']);
 487         $UserSessInfo['PreViewingTitle'] = "Viewing";
 488         $UserSessInfo['ViewingTitle'] = "Board index"; }
 489 if($PermissionInfo['CanViewForum'][$ChkID]=="no"||
 490         $PermissionInfo['CanViewForum'][$ChkID]!="yes") {
 491         $PreFileName = $exfile['index'].$Settings['file_ext'];
 492         $PreExpPage = "act=view";
 493         $UserSessInfo['ViewingPage'] = url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']);
 494         $UserSessInfo['PreViewingTitle'] = "Viewing";
 495         $UserSessInfo['ViewingTitle'] = "Board index"; } } }
 496 if($PreFileName==$exfile['subforum'].$Settings['file_ext']) {
 497 if(isset($ChkID["id"])) { $ChkID = $ChkID["id"];
 498 $prequery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."forums\" WHERE \"id\"=%i LIMIT 1", array($ChkID));
 499 $preresult=sql_query($prequery,$SQLStat);
 500 $prenum=sql_num_rows($preresult);
 501 $ForumCatID=sql_result($preresult,0,"CategoryID");
 502 sql_free_result($preresult);
 503 if($CatPermissionInfo['CanViewCategory'][$ForumCatID]=="no"||
 504         $CatPermissionInfo['CanViewCategory'][$ForumCatID]!="yes") {
 505         $PreFileName = $exfile['index'].$Settings['file_ext'];
 506         $PreExpPage = "act=view";
 507         $UserSessInfo['ViewingPage'] = url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']);
 508         $UserSessInfo['PreViewingTitle'] = "Viewing";
 509         $UserSessInfo['ViewingTitle'] = "Board index"; }
 510 if($PermissionInfo['CanViewForum'][$ChkID]=="no"||
 511         $PermissionInfo['CanViewForum'][$ChkID]!="yes") {
 512         $PreFileName = $exfile['index'].$Settings['file_ext'];
 513         $PreExpPage = "act=view";
 514         $UserSessInfo['ViewingPage'] = url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']);
 515         $UserSessInfo['PreViewingTitle'] = "Viewing";
 516         $UserSessInfo['ViewingTitle'] = "Board index"; } } }
 517 if($PreFileName==$exfile['category'].$Settings['file_ext']) {
 518 if(isset($ChkID["id"])) { $ChkID = $ChkID["id"];
 519 if($CatPermissionInfo['CanViewCategory'][$ChkID]=="no"||
 520         $CatPermissionInfo['CanViewCategory'][$ChkID]!="yes") {
 521         $PreFileName = $exfile['index'].$Settings['file_ext'];
 522         $PreExpPage = "act=view";
 523         $UserSessInfo['ViewingPage'] = url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']);
 524         $UserSessInfo['PreViewingTitle'] = "Viewing";
 525         $UserSessInfo['ViewingTitle'] = "Board index"; } } }
 526 if($PreFileName==$exfile['subcategory'].$Settings['file_ext']) {
 527 if(isset($ChkID["id"])) { $ChkID = $ChkID["id"];
 528 if($CatPermissionInfo['CanViewCategory'][$ChkID]=="no"||
 529         $CatPermissionInfo['CanViewCategory'][$ChkID]!="yes") {
 530         $PreFileName = $exfile['index'].$Settings['file_ext'];
 531         $PreExpPage = "act=view";
 532         $UserSessInfo['ViewingPage'] = url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']);
 533         $UserSessInfo['PreViewingTitle'] = "Viewing";
 534         $UserSessInfo['ViewingTitle'] = "Board index"; } } }
 535 if($GroupInfo['HasAdminCP']!="yes"&&$UserSessInfo['ShowActHidden']=="yes") {
 536         $PreFileName = $exfile['index'].$Settings['file_ext'];
 537         $PreExpPage = "act=view";
 538         $UserSessInfo['ViewingPage'] = url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); }
 539 if($_GET['list']=="all"||$_GET['list']=="members") {
 540 if($UserSessInfo['UserGroup']!=$Settings['GuestGroup']) {
 541 if($AmIHiddenUser=="no"&&$UserSessInfo['UserID']>0) {
 542 ?>
 543 <tr id="Member<?php echo $i; ?>" class="TableRow3">
 544 <td class="TableColumn3" style="text-align: center;"><?php echo $UserSessInfo['UserID']; ?></td>
 545 <td class="TableColumn3" style="text-align: center;"><a<?php if($GroupInfo['HasAdminCP']=="yes") { ?> title="<?php echo $session_user_agent; ?>"<?php } ?> href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=view&id=".$UserSessInfo['UserID'],$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>"><?php echo $UserSessInfo['MemberName']; ?></a>
 546 <?php if($GroupInfo['HasAdminCP']=="yes") { ?> ( <a title="<?php echo $session_ip_address; ?>" onclick="window.open(this.href);return false;" href="<?php echo sprintf($IPCheckURL,$session_ip_address); ?>"><?php echo $session_ip_address; ?></a> )<?php } ?></td>
 547 <td class="TableColumn3" style="text-align: center;"><?php echo $UserSessInfo['UserGroup']; ?></td>
 548 <td class="TableColumn3" style="text-align: center;"><a href="<?php echo url_maker($PreFileName,"no+ext",$PreExpPage,$Settings['qstr'],$Settings['qsep'],null,null); ?>"><?php echo $UserSessInfo['PreViewingTitle']; ?> <?php echo $UserSessInfo['ViewingTitle']; ?></a></td>
 549 <td class="TableColumn3" style="text-align: center;"><?php echo $session_expires; ?></td>
 550 </tr>
 551 <?php } } }
 552 if($UserSessInfo['UserGroup']==$Settings['GuestGroup']) {
 553 if(!isset($UserSessInfo['GuestName'])) {
 554         $UserSessInfo['GuestName'] = "Guest"; }
 555 if(!isset($UserSessInfo['UserID'])) {
 556         $UserSessInfo['UserID'] = "0"; }
 557 if($_GET['list']=="all"||$_GET['list']=="guests") {
 558 if(user_agent_check($session_user_agent)) {
 559         $UserSessInfo['GuestName'] = user_agent_check($session_user_agent); }
 560 ?>
 561 <tr id="Member<?php echo $i; ?>" class="TableRow3">
 562 <td class="TableColumn3" style="text-align: center;"><?php echo $UserSessInfo['UserID']; ?></td>
 563 <td class="TableColumn3" style="text-align: center;"><span<?php if($GroupInfo['HasAdminCP']=="yes") { ?> title="<?php echo $session_user_agent; ?>"<?php } ?>><?php echo $UserSessInfo['GuestName']; ?></span>
 564 <?php if($GroupInfo['HasAdminCP']=="yes") { ?> ( <a title="<?php echo $session_ip_address; ?>" onclick="window.open(this.href);return false;" href="<?php echo sprintf($IPCheckURL,$session_ip_address); ?>"><?php echo $session_ip_address; ?></a> )<?php } ?></td>
 565 <td class="TableColumn3" style="text-align: center;"><?php echo $UserSessInfo['UserGroup']; ?></td>
 566 <td class="TableColumn3" style="text-align: center;"><a href="<?php echo url_maker($PreFileName,"no+ext",$PreExpPage,$Settings['qstr'],$Settings['qsep'],null,null); ?>"><?php echo $UserSessInfo['PreViewingTitle']; ?> <?php echo $UserSessInfo['ViewingTitle']; ?></a></td>
 567 <td class="TableColumn3" style="text-align: center;"><?php echo $session_expires; ?></td>
 568 </tr>
 569 <?php } }
 570 ++$i; }
 571 ?>
 572 <tr id="MemEnd" class="TableRow4">
 573 <td class="TableColumn4" colspan="8">&nbsp;</td>
 574 </tr>
 575 </table></div>
 576 <?php
 577 if($pagenum>1) {
 578 ?>
 579 <div class="DivMembers">&nbsp;</div>
 580 <?php }
 581 echo $pstring;
 582 //List Page Number Code end
 583 if($pagenum>1) {
 584 ?>
 585 <div class="DivPageLinks">&nbsp;</div>
 586 <?php } }
 587 if($_GET['act']=="view") {
 588 $query = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."members\" WHERE \"id\"=%i LIMIT 1", array($_GET['id']));
 589 $result=sql_query($query,$SQLStat);
 590 $num=sql_num_rows($result);
 591 $i=0;
 592 if($num==0||$_GET['id']<=0) { redirect("location",$rbasedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 593 ob_clean(); header("Content-Type: text/plain; charset=".$Settings['charset']); $urlstatus = 302;
 594 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); session_write_close(); die(); }
 595 $ViewMem['ID']=sql_result($result,$i,"id");
 596 $ViewMem['Name']=sql_result($result,$i,"Name");
 597 $ViewMem['Signature']=sql_result($result,$i,"Signature");
 598 $ViewMem['Avatar']=sql_result($result,$i,"Avatar");
 599 $ViewMem['AvatarSize']=sql_result($result,$i,"AvatarSize");
 600 $ViewMem['Email']=sql_result($result,$i,"Email");
 601 $ViewMem['GroupID']=sql_result($result,$i,"GroupID");
 602 $ViewMem['HiddenMember']=sql_result($result,$i,"HiddenMember");
 603 $ViewMem['WarnLevel']=sql_result($result,$i,"WarnLevel");
 604 $ViewMem['Interests']=sql_result($result,$i,"Interests");
 605 $ViewMem['Title']=sql_result($result,$i,"Title");
 606 $ViewMem['Joined']=sql_result($result,$i,"Joined");
 607 $ViewMem['Joined']=GMTimeChange("M j Y, ".$Settings['idb_time_format'],$ViewMem['Joined'],$_SESSION['UserTimeZone'],0,$_SESSION['UserDST']);
 608 $ViewMem['LastActive']=sql_result($result,$i,"LastActive");
 609 $ViewMem['LastActive']=GMTimeChange("M j Y, ".$Settings['idb_time_format'],$ViewMem['LastActive'],$_SESSION['UserTimeZone'],0,$_SESSION['UserDST']);
 610 $ViewMem['Website']=sql_result($result,$i,"Website");
 611 $ViewMem['Website'] = urlcheck($ViewMem['Website']);
 612 $BoardWWWChCk = parse_url($Settings['idburl']);
 613 $MemsWWWChCk = parse_url($ViewMem['Website']);
 614 $opennew = " onclick=\"window.open(this.href);return false;\"";
 615 if($BoardWWWChCk['host']==$MemsWWWChCk['host']) {
 616         $opennew = null; }
 617 $ViewMem['Gender']=sql_result($result,$i,"Gender");
 618 $ViewMem['PostCount']=sql_result($result,$i,"PostCount");
 619 $ViewMem['Karma']=sql_result($result,$i,"Karma");
 620 $ViewMem['TimeZone']=sql_result($result,$i,"TimeZone");
 621 $ViewMem['DST']=sql_result($result,$i,"DST");
 622 $ViewMem['IP']=sql_result($result,$i,"IP");
 623 $gquery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."groups\" WHERE \"id\"=%i LIMIT 1", array($ViewMem['GroupID']));
 624 $gresult=sql_query($gquery,$SQLStat);
 625 $ViewMem['Group']=sql_result($gresult,0,"Name");
 626 /*
 627 $GroupNamePrefix=sql_result($gresult,0,"NamePrefix");
 628 $GroupNameSuffix=sql_result($gresult,0,"NameSuffix");
 629 */
 630 sql_free_result($gresult);
 631 if($ViewMem['Title']=="") { $ViewMem['Title'] = $ViewMem['Group']; }
 632 /*
 633 if(isset($GroupNamePrefix)&&$GroupNamePrefix!=null) {
 634         $ViewMem['Name'] = $GroupNamePrefix.$ViewMem['Name']; }
 635 if(isset($GroupNameSuffix)&&$GroupNameSuffix!=null) {
 636         $ViewMem['Name'] = $ViewMem['Name'].$GroupNameSuffix; }
 637 */
 638 if($ViewMem['HiddenMember']=="yes") { redirect("location",$rbasedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 639 ob_clean(); header("Content-Type: text/plain; charset=".$Settings['charset']); $urlstatus = 302;
 640 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); session_write_close(); die(); }
 641 $membertitle = " ".$ThemeSet['TitleDivider']." ".$ViewMem['Name'];
 642 if ($ViewMem['Avatar']=="http://"||$ViewMem['Avatar']==null||
 643         strtolower($ViewMem['Avatar'])=="noavatar") {
 644 $ViewMem['Avatar']=$ThemeSet['NoAvatar'];
 645 $ViewMem['AvatarSize']=$ThemeSet['NoAvatarSize']; }
 646 $AvatarSize1=explode("x", $ViewMem['AvatarSize']);
 647 $AvatarSize1W=$AvatarSize1[0]; $AvatarSize1H=$AvatarSize1[1];
 648 $ViewMem['Signature'] = text2icons($ViewMem['Signature'],$Settings['sqltable'],$SQLStat);
 649 $ViewMem['Signature'] = url2link($ViewMem['Signature']);
 650 if($_GET['view']==null) { $_GET['view'] = "profile"; }
 651 if($_GET['view']!="profile"&&$_GET['view']!="avatar"&&
 652         $_GET['view']!="website"&&$_GET['view']!="homepage") { $_GET['view'] = "profile"; }
 653 if($_GET['view']=="avatar") {
 654         session_write_close(); $urlstatus = 302;
 655         header("Location: ".$ViewMem['Avatar']);
 656         gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); }
 657 if($_GET['view']=="website"||$_GET['view']=="homepage") {
 658         if ($ViewMem['Website']!="http://"&&$ViewMem['Website']!=null) {
 659         session_write_close(); $urlstatus = 302;
 660         header("Location: ".$ViewMem['Website']);
 661         gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); }
 662         if ($ViewMem['Website']=="http://"||$ViewMem['Website']==null||
 663         strtolower($ViewMem['Avatar'])=="noavatar") {
 664         session_write_close(); $urlstatus = 302;
 665         header("Location: ".$BoardURL."index.php?act=view");
 666         gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); } }
 667 $_SESSION['ViewingPage'] = url_maker(null,"no+ext","act=view&id=".$_GET['id'],"&","=",$prexqstr['member'],$exqstr['member']);
 668 if($Settings['file_ext']!="no+ext"&&$Settings['file_ext']!="no ext") {
 669 $_SESSION['ViewingFile'] = $exfile['member'].$Settings['file_ext']; }
 670 if($Settings['file_ext']=="no+ext"||$Settings['file_ext']=="no ext") {
 671 $_SESSION['ViewingFile'] = $exfile['member']; }
 672 $_SESSION['PreViewingTitle'] = "Viewing Profile:";
 673 $_SESSION['ViewingTitle'] = $ViewMem['Name'];
 674 ?>
 675 <div class="NavLinks"><?php echo $ThemeSet['NavLinkIcon']; ?><a href="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>"><?php echo $Settings['board_name']; ?></a><?php echo $ThemeSet['NavLinkDivider']; ?><a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=view&id=".$_GET['id'],$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">Viewing profile</a></div>
 676 <div class="DivNavLinks">&nbsp;</div>
 677 <div class="Table1Border">
 678 <?php if($ThemeSet['TableStyle']=="div") { ?>
 679 <div class="TableRow1">
 680 <span style="text-align: left;">
 681 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=view&id=".$_GET['id'],$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">Viewing profile<?php echo $ThemeSet['NavLinkDivider']; ?><?php echo $ViewMem['Name']; ?></a>
 682 </span></div>
 683 <?php } ?>
 684 <table class="Table1">
 685 <?php if($ThemeSet['TableStyle']=="table") { ?>
 686 <tr class="TableRow1">
 687 <td class="TableColumn1" colspan="2"><span style="text-align: left;">
 688 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=view&id=".$_GET['id'],$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">Viewing profile<?php echo $ThemeSet['NavLinkDivider']; ?><?php echo $ViewMem['Name']; ?></a>
 689 </span></td>
 690 </tr><?php } ?>
 691 <tr id="Member" class="TableRow2">
 692 <th class="TableColumn2" style="width: 50%;">Avatar</th>
 693 <th class="TableColumn2" style="width: 50%;">User Info</th>
 694 </tr>
 695 <tr class="TableRow3" id="MemberProfile">
 696 <td class="TableColumn3">
 697 <?php  // Avatar Table Thanks For SeanJ's Help at http://seanj.jcink.com/
 698  ?>
 699  <table class="AvatarTable" style="width: 100%; height: 100px; text-align: center;">
 700         <tr class="AvatarRow" style="width: 100px; height: 100px;">
 701                 <td class="AvatarRow" style="width: 100%; height: 100%; text-align: center; vertical-align: middle;">
 702                 <img src="<?php echo $ViewMem['Avatar']; ?>" alt="<?php echo $ViewMem['Name']; ?>'s Avatar" title="<?php echo $ViewMem['Name']; ?>'s Avatar" style="border: 0px; width: <?php echo $AvatarSize1W; ?>px; height: <?php echo $AvatarSize1H; ?>px;" />
 703                 </td>
 704         </tr>
 705  </table>
 706 <div style="text-align: center;">
 707 Name: <?php echo $ViewMem['Name']; ?><br />
 708 Title: <?php echo $ViewMem['Title']; ?>
 709 <?php if($GroupInfo['HasAdminCP']=="yes") { ?>
 710 <br />User IP: <a onclick="window.open(this.href);return false;" href="<?php echo sprintf($IPCheckURL,$ViewMem['IP']); ?>">
 711 <?php echo $ViewMem['IP']; echo "</a>"; } ?></div>
 712 </td>
 713 <td class="TableColumn3">
 714 &nbsp;User Name: <?php echo $ViewMem['Name']; ?><br />
 715 &nbsp;User Title: <?php echo $ViewMem['Title']; ?><br />
 716 &nbsp;User Group: <?php echo $ViewMem['Group']; ?><br />
 717 &nbsp;User Joined: <?php echo $ViewMem['Joined']; ?><br />
 718 &nbsp;Last Active: <?php echo $ViewMem['LastActive']; ?><br />
 719 &nbsp;User Time: <?php echo GMTimeGet("M j Y, ".$Settings['idb_time_format'],$ViewMem['TimeZone'],0,$ViewMem['DST']); ?><br />
 720 &nbsp;User Website: <a href="<?php echo $ViewMem['Website']; ?>"<?php echo $opennew; ?>>Website</a><br />
 721 &nbsp;Post Count: <?php echo $ViewMem['PostCount']; ?><br />
 722 &nbsp;Karma: <?php echo $ViewMem['Karma']; ?><br />
 723 &nbsp;Interests: <?php echo $ViewMem['Interests']; ?><br />
 724 &nbsp;Topics: <?php if($Settings['enable_search']=="on"&&$GroupInfo['CanSearch']=="yes") { ?>
 725 <a href="<?php echo url_maker($exfile['search'],$Settings['file_ext'],"act=topics&search=%&type=wildcard&memid=".$ViewMem['ID'],$Settings['qstr'],$Settings['qsep'],$prexqstr['search'],$exqstr['search']); ?>">Find Topics</a>
 726 <?php } ?>
 727 </td>
 728 </tr>
 729 <tr class="TableRow4">
 730 <td class="TableColumn4" colspan="2">&nbsp;</td>
 731 </tr>
 732 </table></div>
 733 <?php sql_free_result($result); }
 734 if($_GET['act']=="logout") {
 735 session_unset();
 736 if($cookieDomain==null) {
 737 setcookie("MemberName", null, GMTimeStamp() - 3600, $cbasedir);
 738 setcookie("UserID", null, GMTimeStamp() - 3600, $cbasedir);
 739 setcookie("SessPass", null, GMTimeStamp() - 3600, $cbasedir);
 740 setcookie(session_name(), "", GMTimeStamp() - 3600, $cbasedir); }
 741 if($cookieDomain!=null) {
 742 if($cookieSecure===true) {
 743 setcookie("MemberName", null, GMTimeStamp() - 3600, $cbasedir, $cookieDomain, 1);
 744 setcookie("UserID", null, GMTimeStamp() - 3600, $cbasedir, $cookieDomain, 1);
 745 setcookie("SessPass", null, GMTimeStamp() - 3600, $cbasedir, $cookieDomain, 1);
 746 setcookie(session_name(), "", GMTimeStamp() - 3600, $cbasedir, $cookieDomain, 1); }
 747 if($cookieSecure===false) {
 748 setcookie("MemberName", null, GMTimeStamp() - 3600, $cbasedir, $cookieDomain);
 749 setcookie("UserID", null, GMTimeStamp() - 3600, $cbasedir, $cookieDomain);
 750 setcookie("SessPass", null, GMTimeStamp() - 3600, $cbasedir, $cookieDomain);
 751 setcookie(session_name(), "", GMTimeStamp() - 3600, $cbasedir, $cookieDomain); } }
 752 unset($_COOKIE[session_name()]);
 753 $_SESSION = array();
 754 //session_unset();
 755 //session_destroy();
 756 $temp_user_ip = $_SERVER['REMOTE_ADDR'];
 757 $exptime = GMTimeStamp() - ini_get("session.gc_maxlifetime");
 758 sql_query(sql_pre_query("DELETE FROM \"".$Settings['sqltable']."sessions\" WHERE \"expires\" < %i OR ip_address='%s'", array($exptime,$temp_user_ip)),$SQLStat);
 759 redirect("location",$rbasedir.url_maker($exfile['member'],$Settings['file_ext'],"act=login",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'],false));
 760 ob_clean(); header("Content-Type: text/plain; charset=".$Settings['charset']); $urlstatus = 302;
 761 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); session_write_close(); die(); }
 762 if($_GET['act']=="login") {
 763 if($_SESSION['UserID']!=0&&$_SESSION['UserID']!=null) {
 764 redirect("location",$rbasedir.url_maker($exfile['member'],$Settings['file_ext'],"act=logout",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'],false));
 765 ob_clean(); header("Content-Type: text/plain; charset=".$Settings['charset']); $urlstatus = 302;
 766 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); session_write_close(); die(); }
 767 if($_SESSION['UserID']==0||$_SESSION['UserID']==null) {
 768 $_SESSION['ViewingPage'] = url_maker(null,"no+ext","act=login","&","=",$prexqstr['member'],$exqstr['member']);
 769 if($Settings['file_ext']!="no+ext"&&$Settings['file_ext']!="no ext") {
 770 $_SESSION['ViewingFile'] = $exfile['member'].$Settings['file_ext']; }
 771 if($Settings['file_ext']=="no+ext"||$Settings['file_ext']=="no ext") {
 772 $_SESSION['ViewingFile'] = $exfile['member']; }
 773 $_SESSION['PreViewingTitle'] = "Act: ";
 774 $_SESSION['ViewingTitle'] = "Logging in";
 775 $membertitle = " ".$ThemeSet['TitleDivider']." Login";
 776 $UFID = rand_uuid("rand");
 777 $_SESSION['UserFormID'] = $UFID;
 778 ?>
 779 <div class="NavLinks"><?php echo $ThemeSet['NavLinkIcon']; ?><a href="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>"><?php echo $Settings['board_name']; ?></a><?php echo $ThemeSet['NavLinkDivider']; ?><a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=login",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">Login</a></div>
 780 <div class="DivNavLinks">&nbsp;</div>
 781 <div class="Table1Border">
 782 <?php if($ThemeSet['TableStyle']=="div") { ?>
 783 <div class="TableRow1">
 784 <span style="text-align: left;">
 785 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=login",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">Log in</a>
 786 </span></div>
 787 <?php } ?>
 788 <table class="Table1">
 789 <?php if($ThemeSet['TableStyle']=="table") { ?>
 790 <tr class="TableRow1">
 791 <td class="TableColumn1"><span style="text-align: left;">
 792 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=login",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">Log in</a>
 793 </span></td>
 794 </tr><?php } ?>
 795 <tr class="TableRow2">
 796 <th class="TableColumn2" style="width: 100%; text-align: left;">&nbsp;Inert your login info: </th>
 797 </tr>
 798 <tr class="TableRow3">
 799 <td class="TableColumn3">
 800 <form style="display: inline;" method="post" action="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=login_now",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">
 801 <table style="text-align: left;">
 802 <tr style="text-align: left;">
 803         <td style="width: 30%;"><label class="TextBoxLabel" for="username">Enter UserName: </label></td>
 804         <td style="width: 70%;"><input maxlength="256" class="TextBox" id="username" type="text" name="username" /></td>
 805 </tr><tr style="text-align: left;">
 806         <td style="width: 30%;"><label class="TextBoxLabel" for="userpass">Enter Password: </label></td>
 807         <td style="width: 70%;"><input maxlength="30" class="TextBox" id="userpass" type="password" name="userpass" /></td>
 808 </tr><tr style="text-align: left;">
 809         <td style="width: 30%;"><label class="TextBoxLabel" title="Store userinfo as a cookie so you dont need to login again." for="storecookie">Store as cookie?</label></td>
 810         <td style="width: 70%;"><select id="storecookie" name="storecookie" class="TextBox">
 811 <option value="true">Yes</option>
 812 <option value="false">No</option>
 813 </select></td>
 814 </tr><tr style="text-align: left;">
 815         <td style="width: 30%;"><label class="TextBoxLabel" title="Use your Email address for username." for="loginemail">Login by Email?</label></td>
 816         <td style="width: 70%;"><select id="loginemail" name="loginemail" class="TextBox">
 817 <option value="false">No</option>
 818 <option value="true">Yes</option>
 819 </select></td>
 820 </tr></table>
 821 <table style="text-align: left;">
 822 <tr style="text-align: left;">
 823 <td style="width: 100%;">
 824 <input type="hidden" name="act" value="loginmember" style="display: none;" />
 825 <input type="hidden" style="display: none;" name="fid" value="<?php echo $UFID; ?>" />
 826 <input class="Button" type="submit" value="Log in" />
 827 </td></tr></table>
 828 </form>
 829 </td>
 830 </tr>
 831 <tr class="TableRow4">
 832 <td class="TableColumn4">&nbsp;</td>
 833 </tr>
 834 </table></div>
 835 <?php } } if($_POST['act']=="loginmember"&&$_GET['act']=="login_now") {
 836 if($_SESSION['UserID']!=0&&$_SESSION['UserID']!=null) {
 837 redirect("location",$rbasedir.url_maker($exfile['member'],$Settings['file_ext'],"act=logout",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'],false));
 838 ob_clean(); header("Content-Type: text/plain; charset=".$Settings['charset']); $urlstatus = 302;
 839 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); session_write_close(); die(); }
 840 if($_SESSION['UserID']==0||$_SESSION['UserID']==null) {
 841 $_SESSION['ViewingPage'] = url_maker(null,"no+ext","act=login","&","=",$prexqstr['member'],$exqstr['member']);
 842 if($Settings['file_ext']!="no+ext"&&$Settings['file_ext']!="no ext") {
 843 $_SESSION['ViewingFile'] = $exfile['member'].$Settings['file_ext']; }
 844 if($Settings['file_ext']=="no+ext"||$Settings['file_ext']=="no ext") {
 845 $_SESSION['ViewingFile'] = $exfile['member']; }
 846 $_SESSION['PreViewingTitle'] = "Act: ";
 847 $_SESSION['ViewingTitle'] = "Logging in";
 848 $membertitle = " ".$ThemeSet['TitleDivider']." Login";
 849 $REFERERurl = parse_url($_SERVER['HTTP_REFERER']);
 850 $URL['REFERER'] = $REFERERurl['host'];
 851 $URL['HOST'] = $_SERVER["SERVER_NAME"];
 852 $REFERERurl = null;
 853 ?>
 854 <div class="NavLinks"><?php echo $ThemeSet['NavLinkIcon']; ?><a href="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>"><?php echo $Settings['board_name']; ?></a><?php echo $ThemeSet['NavLinkDivider']; ?><a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=login",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">Login</a></div>
 855 <div class="DivNavLinks">&nbsp;</div>
 856 <div class="Table1Border">
 857 <?php if($ThemeSet['TableStyle']=="div") { ?>
 858 <div class="TableRow1">
 859 <span style="text-align: left;">&nbsp;<a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=login",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">Log in</a></span>
 860 </div>
 861 <?php } ?>
 862 <table class="Table1">
 863 <?php if($ThemeSet['TableStyle']=="table") { ?>
 864 <tr class="TableRow1">
 865 <td class="TableColumn1">
 866 <span style="text-align: left;">&nbsp;<a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=login",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">Log in</a></span>
 867 </td>
 868 </tr><?php } ?>
 869 <tr class="TableRow2">
 870 <th class="TableColumn2" style="width: 100%; text-align: left;">&nbsp;Login Message: </th>
 871 </tr>
 872 <tr class="TableRow3">
 873 <td class="TableColumn3">
 874 <table style="width: 100%; height: 25%; text-align: center;">
 875 <?php
 876 if (pre_strlen($_POST['userpass'])>"60") { $Error="Yes";  ?>
 877 <tr>
 878         <td><span class="TableMessage">
 879         <br />Your password is too big.<br />
 880         </span>&nbsp;</td>
 881 </tr>
 882 <?php } if (pre_strlen($_POST['username'])>"30") { $Error="Yes";  ?>
 883 <tr>
 884         <td><span class="TableMessage">
 885         <br />Your user name is too big.<br />
 886         </span>&nbsp;</td>
 887 </tr>
 888 <?php } if($_POST['fid']!=$_SESSION['UserFormID']) { $Error="Yes";  ?>
 889 <tr>
 890         <td><span class="TableMessage">
 891         <br />Sorry the referering url dose not match our host name.<br />
 892         </span>&nbsp;</td>
 893 </tr>
 894 <?php } if ($Settings['TestReferer']=="on") {
 895         if ($URL['HOST']!=$URL['REFERER']) { $Error="Yes";  ?>
 896 <tr>
 897         <td><span class="TableMessage">
 898         <br />Sorry the referering url dose not match our host name.<br />
 899         </span>&nbsp;</td>
 900 </tr>
 901 <?php } } $BanError = null;
 902 if ($Error=="Yes") {
 903 redirect("refresh",$rbasedir.url_maker($exfile['member'],$Settings['file_ext'],"act=login",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'],false),"4"); }
 904 if($Error!="Yes"){
 905 $YourName = stripcslashes(htmlspecialchars($_POST['username'], ENT_QUOTES, $Settings['charset']));
 906 //$YourName = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $YourName);
 907 $YourName = remove_spaces($YourName);
 908 $passtype="ODFH";
 909 if(!isset($_POST['loginemail'])) { $_POST['loginemail'] = "false"; }
 910 if($_POST['loginemail']!="true") {
 911 $querylog = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."members\" WHERE \"Name\"='%s' LIMIT 1", array($YourName)); }
 912 if($_POST['loginemail']=="true") {
 913 $querylog = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."members\" WHERE \"Email\"='%s' LIMIT 1", array($YourName)); }
 914 $resultlog=sql_query($querylog,$SQLStat);
 915 $numlog=sql_num_rows($resultlog);
 916 if($numlog>=1) {
 917 $i=0;
 918 $YourName=sql_result($resultlog,$i,"Name");
 919 $YourPassTry=sql_result($resultlog,$i,"UserPassword");
 920 $HashType=sql_result($resultlog,$i,"HashType");
 921 $HashType=str_replace("IntDBH", "iDBH", $HashType);
 922 $JoinedPass=sql_result($resultlog,$i,"Joined");
 923 $HashSalt=sql_result($resultlog,$i,"Salt");
 924 $UpdateHash = false; $YourPassword = null;
 925 //Used if you forget your password will change on next login.
 926 if($HashType=="NoHash") { $YourPassword = $_POST['userpass']; }
 927 if($HashType=="NoHASH") { $YourPassword = $_POST['userpass']; }
 928 if($HashType=="PlainText") { $YourPassword = $_POST['userpass']; }
 929 //Used to not allow guest user number -1 to login.
 930 if($HashType=="NoPass") { $YourPassword = null; $UpdateHash = false; }
 931 if($HashType=="NoPassword") { $YourPassword = null; $UpdateHash = false; }
 932 if($HashType=="GuestPass") { $YourPassword = null; $UpdateHash = false; }
 933 if($HashType=="GuestPassword") { $YourPassword = null; $UpdateHash = false; }
 934 //iDB hashing system
 935 if($HashType=="ODFH") { $YourPassword = PassHash2x($_POST['userpass']); }
 936 if($HashType=="IPB2") { $YourPassword = hash2xkey($_POST['userpass'],$HashSalt); }
 937 if($HashType=="DF4H") { $YourPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$HashSalt,"sha1"); }
 938 if($HashType=="iDBH2") { $YourPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$HashSalt,"md2"); }
 939 if($HashType=="iDBH4") { $YourPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$HashSalt,"md4"); }
 940 if($HashType=="iDBH5") { $YourPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$HashSalt,"md5"); }
 941 if($HashType=="iDBH") { $YourPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$HashSalt,"sha1"); }
 942 if($HashType=="iDBH1") { $YourPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$HashSalt,"sha1"); }
 943 if($HashType=="iDBH224") { $YourPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$HashSalt,"sha224"); }
 944 if($HashType=="iDBH256") { $YourPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$HashSalt,"sha256"); }
 945 if($HashType=="iDBH384") { $YourPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$HashSalt,"sha384"); }
 946 if($HashType=="iDBH512") { $YourPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$HashSalt,"sha512"); }
 947 if($HashType=="iDBHRMD128") { $YourPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$HashSalt,"ripemd128"); }
 948 if($HashType=="iDBHRMD160") { $YourPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$HashSalt,"ripemd160"); }
 949 if($HashType=="iDBHRMD256") { $YourPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$HashSalt,"ripemd256"); }
 950 if($HashType=="iDBHRMD320") { $YourPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$HashSalt,"ripemd320"); }
 951 if($HashType=="iDBHSALSA10") { $YourPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$HashSalt,"salsa10"); }
 952 if($HashType=="iDBHSALSA20") { $YourPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$HashSalt,"salsa20"); }
 953 if($HashType=="iDBHSFRU") { $YourPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$HashSalt,"snefru"); }
 954 if($HashType=="iDBHSFRU256") { $YourPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$HashSalt,"snefru256"); }
 955 if($HashType=="iDBHGOST") { $YourPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$HashSalt,"gost"); }
 956 if($HashType=="NoPass") { $YourPassword = "iDB"; $YourPassTry = "IntDB"; }
 957 if($HashType=="NoPassword") { $YourPassword = "iDB"; $YourPassTry = "IntDB"; }
 958 if($HashType=="GuestPass") { $YourPassword = "iDB"; $YourPassTry = "IntDB"; }
 959 if($HashType=="GuestPassword") { $YourPassword = "iDB"; $YourPassTry = "IntDB"; }
 960 if($YourPassword!=$YourPassTry) { $passright = false; }
 961 if($YourPassword==$YourPassTry) { $passright = true;
 962 $YourIDM=sql_result($resultlog,$i,"id");
 963 $YourNameM=sql_result($resultlog,$i,"Name");
 964 $YourPassM=sql_result($resultlog,$i,"UserPassword");
 965 $PostCount=sql_result($resultlog,$i,"PostCount");
 966 $YourGroupM=sql_result($resultlog,$i,"GroupID");
 967 $YourGroupIDM=$YourGroupM;
 968 $YourLastPostTime=sql_result($resultlog,$i,"LastPostTime");
 969 $YourBanTime=sql_result($resultlog,$i,"BanTime");
 970 $CGMTime = GMTimeStamp();
 971 if($YourBanTime!=0&&$YourBanTime!=null) {
 972 if($YourBanTime>=$CGMTime) { $BanError = "yes"; }
 973 if($YourBanTime<0) { $BanError = "yes"; } }
 974 $gquery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."groups\" WHERE \"id\"=%i LIMIT 1", array($YourGroupM));
 975 $gresult=sql_query($gquery,$SQLStat);
 976 $YourGroupM=sql_result($gresult,0,"Name");
 977 sql_free_result($gresult);
 978 $YourTimeZoneM=sql_result($resultlog,$i,"TimeZone");
 979 $YourDSTM=sql_result($resultlog,$i,"DST");
 980 $JoinedDate=sql_result($resultlog,$i,"Joined");
 981 $UseTheme=sql_result($resultlog,$i,"UseTheme");
 982 $NewHashSalt = salt_hmac();
 983 if($Settings['use_hashtype']=="md2") { $iDBHash = "iDBH2";
 984 $NewPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$NewHashSalt,"md2"); }
 985 if($Settings['use_hashtype']=="md4") { $iDBHash = "iDBH4";
 986 $NewPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$NewHashSalt,"md4"); }
 987 if($Settings['use_hashtype']=="md5") { $iDBHash = "iDBH5";
 988 $NewPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$NewHashSalt,"md5"); }
 989 if($Settings['use_hashtype']=="sha1") { $iDBHash = "iDBH";
 990 $NewPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$NewHashSalt,"sha1"); }
 991 if($Settings['use_hashtype']=="sha224") { $iDBHash = "iDBH224";
 992 $NewPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$NewHashSalt,"sha224"); }
 993 if($Settings['use_hashtype']=="sha256") { $iDBHash = "iDBH256";
 994 $NewPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$NewHashSalt,"sha256"); }
 995 if($Settings['use_hashtype']=="sha384") { $iDBHash = "iDBH384";
 996 $NewPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$NewHashSalt,"sha384"); }
 997 if($Settings['use_hashtype']=="sha512") { $iDBHash = "iDBH512";
 998 $NewPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$NewHashSalt,"sha512"); }
 999 if($Settings['use_hashtype']=="ripemd128") { $iDBHash = "iDBHRMD128";
1000 $NewPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$NewHashSalt,"ripemd128"); }
1001 if($Settings['use_hashtype']=="ripemd160") { $iDBHash = "iDBHRMD160";
1002 $NewPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$NewHashSalt,"ripemd160"); }
1003 if($Settings['use_hashtype']=="ripemd256") { $iDBHash = "iDBHRMD256";
1004 $NewPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$NewHashSalt,"ripemd256"); }
1005 if($Settings['use_hashtype']=="ripemd320") { $iDBHash = "iDBHRMD320";
1006 $NewPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$NewHashSalt,"ripemd320"); }
1007 if($Settings['use_hashtype']=="salsa10") { $iDBHash = "iDBHRMD320";
1008 $NewPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$NewHashSalt,"salsa10"); }
1009 if($Settings['use_hashtype']=="salsa20") { $iDBHash = "iDBHRMD320";
1010 $NewPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$NewHashSalt,"salsa20"); }
1011 if($Settings['use_hashtype']=="snefru") { $iDBHash = "iDBHSFRU";
1012 $NewPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$NewHashSalt,"snefru"); }
1013 if($Settings['use_hashtype']=="snefru256") { $iDBHash = "iDBHSFRU256";
1014 $NewPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$NewHashSalt,"snefru256"); }
1015 if($Settings['use_hashtype']=="gost") { $iDBHash = "iDBHGOST";
1016 $NewPassword = b64e_hmac($_POST['userpass'],$JoinedPass,$NewHashSalt,"gost"); }
1017 $NewDay=GMTimeStamp();
1018 $NewIP=$_SERVER['REMOTE_ADDR'];
1019 if($BanError!="yes") {
1020 $queryup = sql_pre_query("UPDATE \"".$Settings['sqltable']."members\" SET \"UserPassword\"='%s',\"HashType\"='%s',\"LastActive\"=%i,\"IP\"='%s',\"Salt\"='%s' WHERE \"id\"=%i", array($NewPassword,$iDBHash,$NewDay,$NewIP,$NewHashSalt,$YourIDM));
1021 sql_query($queryup,$SQLStat);
1022 sql_free_result($resultlog);
1023 //session_regenerate_id();
1024 $_SESSION['Theme']=$UseTheme;
1025 $_SESSION['MemberName']=$YourNameM;
1026 $_SESSION['UserID']=$YourIDM;
1027 $_SESSION['UserIP']=$_SERVER['REMOTE_ADDR'];
1028 $_SESSION['UserTimeZone']=$YourTimeZoneM;
1029 $_SESSION['UserGroup']=$YourGroupM;
1030 $_SESSION['UserGroupID']=$YourGroupIDM;
1031 $_SESSION['UserDST']=$YourDSTM;
1032 $_SESSION['UserPass']=$NewPassword;
1033 $_SESSION['LastPostTime'] = $YourLastPostTime;
1034 $_SESSION['DBName']=$Settings['sqldb'];
1035 if($_POST['storecookie']=="true") {
1036 if($cookieDomain==null) {
1037 setcookie("MemberName", $YourNameM, time() + (7 * 86400), $cbasedir);
1038 setcookie("UserID", $YourIDM, time() + (7 * 86400), $cbasedir);
1039 setcookie("SessPass", $NewPassword, time() + (7 * 86400), $cbasedir); }
1040 if($cookieDomain!=null) {
1041 if($cookieSecure===true) {
1042 setcookie("MemberName", $YourNameM, time() + (7 * 86400), $cbasedir, $cookieDomain, 1);
1043 setcookie("UserID", $YourIDM, time() + (7 * 86400), $cbasedir, $cookieDomain, 1);
1044 setcookie("SessPass", $NewPassword, time() + (7 * 86400), $cbasedir, $cookieDomain, 1); }
1045 if($cookieSecure===false) {
1046 setcookie("MemberName", $YourNameM, time() + (7 * 86400), $cbasedir, $cookieDomain);
1047 setcookie("UserID", $YourIDM, time() + (7 * 86400), $cbasedir, $cookieDomain);
1048 setcookie("SessPass", $NewPassword, time() + (7 * 86400), $cbasedir, $cookieDomain); } } } }
1049 } } if($numlog<=0) {
1050 //echo "Password was not right or user not found!! <_< ";
1051 } ?>
1052 <?php if($passright===true&&$BanError!="yes") {
1053 redirect("refresh",$rbasedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false),"3"); ?>
1054 <tr>
1055         <td><span class="TableMessage">
1056         <br />Welcome to the Board <?php echo $_SESSION['MemberName']; ?>. ^_^<br />
1057         Click <a href="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>">here</a> to continue to board.<br />&nbsp;
1058         </span><br /></td>
1059 </tr>
1060 <?php } if($passright===false||$BanError=="yes"||$numlog<=0) { ?>
1061 <tr>
1062         <td><span class="TableMessage">
1063         <br />Password was not right or user not found or user is banned!! &lt;_&lt;<br />
1064         Click <a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=login",$Settings['qstr'],$Settings['qsep'],$exqstr['member'],$prexqstr['member']); ?>">here</a> to try again.<br />&nbsp;
1065         </span><br /></td>
1066 </tr>
1067 <?php } } ?>
1068 </table>
1069 </td></tr>
1070 <tr class="TableRow4">
1071 <td class="TableColumn4">&nbsp;</td>
1072 </tr>
1073 </table></div>
1074 <?php } } if($_GET['act']=="signup") {
1075 $membertitle = " ".$ThemeSet['TitleDivider']." Signing up";
1076 if($_SESSION['UserID']!=0&&$_SESSION['UserID']!=null) {
1077 redirect("location",$rbasedir.url_maker($exfile['member'],$Settings['file_ext'],"act=logout",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'],false));
1078 ob_clean(); header("Content-Type: text/plain; charset=".$Settings['charset']); $urlstatus = 302;
1079 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); session_write_close(); die(); }
1080 if($_SESSION['UserID']==0||$_SESSION['UserID']==null) {
1081 $_SESSION['ViewingPage'] = url_maker(null,"no+ext","act=signup","&","=",$prexqstr['member'],$exqstr['member']);
1082 if($Settings['file_ext']!="no+ext"&&$Settings['file_ext']!="no ext") {
1083 $_SESSION['ViewingFile'] = $exfile['member'].$Settings['file_ext']; }
1084 if($Settings['file_ext']=="no+ext"||$Settings['file_ext']=="no ext") {
1085 $_SESSION['ViewingFile'] = $exfile['member']; }
1086 $_SESSION['PreViewingTitle'] = "Act: ";
1087 $_SESSION['ViewingTitle'] = "Signing up";
1088 $UFID = rand_uuid("rand");
1089 $_SESSION['UserFormID'] = $UFID;
1090 ?>
1091 <div class="NavLinks"><?php echo $ThemeSet['NavLinkIcon']; ?><a href="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>"><?php echo $Settings['board_name']; ?></a><?php echo $ThemeSet['NavLinkDivider']; ?><a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=signup",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">Signup</a></div>
1092 <div class="DivNavLinks">&nbsp;</div>
1093 <div class="Table1Border">
1094 <?php if($ThemeSet['TableStyle']=="div") { ?>
1095 <div class="TableRow1">
1096 <span style="text-align: left;">
1097 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=signup",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">Register</a>
1098 </span></div>
1099 <?php } ?>
1100 <table class="Table1">
1101 <?php if($ThemeSet['TableStyle']=="table") { ?>
1102 <tr class="TableRow1">
1103 <td class="TableColumn1"><span style="text-align: left;">
1104 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=signup",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">Register</a>
1105 </span></td>
1106 </tr><?php } ?>
1107 <tr class="TableRow2">
1108 <th class="TableColumn2" style="width: 100%; text-align: left;">&nbsp;Inert your user info: </th>
1109 </tr>
1110 <tr class="TableRow3">
1111 <td class="TableColumn3">
1112 <form style="display: inline;" method="post" action="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=makemember",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">
1113 <table style="text-align: left;">
1114 <tr style="text-align: left;">
1115         <td style="width: 30%;"><label class="TextBoxLabel" for="Name">Insert a UserName:</label></td>
1116         <?php if(!isset($_SESSION['GuestName'])) { ?>
1117         <td style="width: 70%;"><input maxlength="24" type="text" class="TextBox" name="Name" size="20" id="Name" /></td>
1118         <?php } if(isset($_SESSION['GuestName'])) { ?>
1119         <td style="width: 70%;"><input maxlength="24" type="text" class="TextBox" name="Name" size="20" id="Name" value="<?php echo $_SESSION['GuestName']; ?>" /></td>
1120         <?php } ?>
1121 </tr><tr>
1122         <td style="width: 30%;"><label class="TextBoxLabel" for="Password">Insert a Password:</label></td>
1123         <td style="width: 70%;"><input maxlength="30" type="password" class="TextBox" name="Password" size="20" id="Password" /></td>
1124 </tr><tr>
1125         <td style="width: 30%;"><label class="TextBoxLabel" for="RePassword">ReInsert a Password:</label></td>
1126         <td style="width: 70%;"><input maxlength="30" type="password" class="TextBox" name="RePassword" size="20" id="RePassword" /></td>
1127 </tr><tr>
1128         <td style="width: 30%;"><label class="TextBoxLabel" for="Email">Insert Your Email:</label></td>
1129         <td style="width: 70%;"><input type="text" class="TextBox" name="Email" size="20" id="Email" /></td>
1130 </tr><tr>
1131         <td style="width: 30%;"><label class="TextBoxLabel" for="YourOffSet">Your TimeZone:</label></td>
1132         <td style="width: 70%;"><select id="YourOffSet" name="YourOffSet" class="TextBox"><?php
1133 $tsa_mem = explode(":",$Settings['DefaultTimeZone']);
1134 $TimeZoneArray = array("offset" => $Settings['DefaultTimeZone'], "hour" => $tsa_mem[0], "minute" => $tsa_mem[1]);
1135 $plusi = 1; $minusi = 12;
1136 $plusnum = 15; $minusnum = 0;
1137 while ($minusi > $minusnum) {
1138 if($TimeZoneArray['hour']==-$minusi) {
1139 echo "<option selected=\"selected\" value=\"-".$minusi."\">UTC - ".$minusi.":00 hours</option>\n"; }
1140 if($TimeZoneArray['hour']!=-$minusi) {
1141 echo "<option value=\"-".$minusi."\">UTC - ".$minusi.":00 hours</option>\n"; }
1142 --$minusi; }
1143 if($TimeZoneArray['hour']==0) { ?>
1144 <option selected="selected" value="0">UTC +/- 0:00 hours</option>
1145 <?php } if($TimeZoneArray['hour']!=0) { ?>
1146 <option value="0">UTC +/- 0:00 hours</option>
1147 <?php }
1148 while ($plusi < $plusnum) {
1149 if($TimeZoneArray['hour']==$plusi) {
1150 echo "<option selected=\"selected\" value=\"".$plusi."\">UTC + ".$plusi.":00 hours</option>\n"; }
1151 if($TimeZoneArray['hour']!=$plusi) {
1152 echo "<option value=\"".$plusi."\">UTC + ".$plusi.":00 hours</option>\n"; }
1153 ++$plusi; }
1154 ?></select></td>
1155 </tr><tr>
1156         <td style="width: 50%;"><label class="TextBoxLabel" for="MinOffSet">Minute OffSet:</label></td>
1157         <td style="width: 50%;"><select id="MinOffSet" name="MinOffSet" class="TextBox"><?php
1158 $mini = 0; $minnum = 60;
1159 while ($mini < $minnum) {
1160 if(strlen($mini)==2) { $showmin = $mini; }
1161 if(strlen($mini)==1) { $showmin = "0".$mini; }
1162 if($mini==$TimeZoneArray['minute']) {
1163 echo "\n<option selected=\"selected\" value=\"".$showmin."\">0:".$showmin." minutes</option>\n"; }
1164 if($mini!=$TimeZoneArray['minute']) {
1165 echo "<option value=\"".$showmin."\">0:".$showmin." minutes</option>\n"; }
1166 ++$mini; }
1167 ?></select></td>
1168 </tr><tr>
1169         <td style="width: 30%;"><label class="TextBoxLabel" for="DST">Is <span title="Daylight Savings Time">DST</span> / <span title="Summer Time">ST</span> on or off:</label></td>
1170         <td style="width: 70%;"><select id="DST" name="DST" class="TextBox"><?php echo "\n" ?>
1171 <?php if($Settings['DefaultDST']=="off"||$Settings['DefaultDST']!="on") { ?>
1172 <option selected="selected" value="off">off</option><?php echo "\n" ?><option value="on">on</option>
1173 <?php } if($Settings['DefaultDST']=="on") { ?>
1174 <option selected="selected" value="on">on</option><?php echo "\n" ?><option value="off">off</option>
1175 <?php } echo "\n" ?></select></td>
1176 </tr><tr>
1177         <td style="width: 30%;"><label class="TextBoxLabel" for="YourGender">Your Gender:</label></td>
1178         <td style="width: 70%;"><select id="YourGender" name="YourGender" class="TextBox">
1179 <option value="Male">Male</option>
1180 <option value="Female">Female</option>
1181 <option value="Unknow">Unknown</option>
1182 </select></td>
1183 </tr><tr>
1184         <td style="width: 30%;"><label class="TextBoxLabel" for="Website">Insert your Website:</label></td>
1185         <td style="width: 70%;"><input type="text" class="TextBox" name="Website" size="20" value="http://" id="Website" /></td>
1186 </tr><tr>
1187         <td style="width: 30%;"><label class="TextBoxLabel" for="Avatar">Insert a URL for Avatar:</label></td>
1188         <td style="width: 70%;"><input type="text" class="TextBox" name="Avatar" size="20" value="http://" id="Avatar" /></td>
1189 </tr><tr>
1190         <td style="width: 30%;"><label class="TextBoxLabel" title="Store userinfo as a cookie so you dont need to login again." for="storecookie">Store as cookie?</label></td>
1191         <td style="width: 70%;"><select id="storecookie" name="storecookie" class="TextBox">
1192 <option value="true">Yes</option>
1193 <option value="false">No</option>
1194 </select></td>
1195 </tr>
1196 </table>
1197 <table style="text-align: left;">
1198 <tr style="text-align: left;">
1199 <td style="width: 100%;">
1200 <label class="TextBoxLabel" for="TOSBox">TOS - Please read fully and check 'I agree' box ONLY if you agree to terms</label><br />
1201 <textarea rows="10" cols="58" id="TOSBox" name="TOSBox" class="TextBox" readonly="readonly" accesskey="T"><?php
1202         echo file_get_contents("TOS");  ?></textarea><br />
1203 <input type="checkbox" class="TextBox" name="TOS" value="Agree" id="TOS" /><label class="TextBoxLabel" for="TOS">I Agree</label>
1204 <?php if($Settings['use_captcha']!="on") { ?><br />
1205 <?php } if($Settings['use_captcha']=="on") { ?>
1206 </td></tr>
1207 <tr style="text-align: left;">
1208 <td style="width: 100%;">
1209 <label class="TextBoxLabel" for="signcode"><img src="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=MkCaptcha",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>" alt="CAPTCHA Code" title="CAPTCHA Code" /></label><br />
1210 <input maxlength="25" type="text" class="TextBox" name="signcode" size="20" id="signcode" value="Enter SignCode" /><br /><?php } ?>
1211 <input type="hidden" style="display: none;" name="act" value="makemembers" />
1212 <input type="hidden" style="display: none;" name="fid" value="<?php echo $UFID; ?>" />
1213 <?php if(isset($_GET['referrerid'])&&is_numeric($_GET['referrerid'])) { ?>
1214 <input type="hidden" style="display: none;" name="referrerid" value="<?php echo $_GET['referrerid']; ?>" />
1215 <?php } ?>
1216 <input type="submit" class="Button" value="Sign UP" />
1217 </td></tr>
1218 </table>
1219 </form>
1220 </td>
1221 </tr>
1222 <tr class="TableRow4">
1223 <td class="TableColumn4">&nbsp;</td>
1224 </tr>
1225 </table></div>
1226 <?php } } if($_GET['act']=="makemember") {
1227         if($_POST['act']=="makemembers") {
1228 if($_SESSION['UserID']!=0&&$_SESSION['UserID']!=null) {
1229 redirect("location",$rbasedir.url_maker($exfile['member'],$Settings['file_ext'],"act=logout",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'],false));
1230 ob_clean(); header("Content-Type: text/plain; charset=".$Settings['charset']); $urlstatus = 302;
1231 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); session_write_close(); die(); }
1232 if($_SESSION['UserID']==0||$_SESSION['UserID']==null) {
1233 $_SESSION['ViewingPage'] = url_maker(null,"no+ext","act=signup","&","=",$prexqstr['member'],$exqstr['member']);
1234 if($Settings['file_ext']!="no+ext"&&$Settings['file_ext']!="no ext") {
1235 $_SESSION['ViewingFile'] = $exfile['member'].$Settings['file_ext']; }
1236 if($Settings['file_ext']=="no+ext"||$Settings['file_ext']=="no ext") {
1237 $_SESSION['ViewingFile'] = $exfile['member']; }
1238 $_SESSION['PreViewingTitle'] = "Act: ";
1239 $_SESSION['ViewingTitle'] = "Signing up";
1240 $membertitle = " ".$ThemeSet['TitleDivider']." Signing up";
1241 $REFERERurl = parse_url($_SERVER['HTTP_REFERER']);
1242 $URL['REFERER'] = $REFERERurl['host'];
1243 $URL['HOST'] = $_SERVER["SERVER_NAME"];
1244 $REFERERurl = null;
1245 if(!isset($_POST['username'])) { $_POST['username'] = null; }
1246 if(!isset($_POST['TOS'])) { $_POST['TOS'] = null; }
1247 if($Settings['use_captcha']=="on") {
1248 require($SettDir['inc']."captcha.php"); }
1249 ?>
1250 <div class="NavLinks"><?php echo $ThemeSet['NavLinkIcon']; ?><a href="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>"><?php echo $Settings['board_name']; ?></a><?php echo $ThemeSet['NavLinkDivider']; ?><a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=signup",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member']); ?>">Signup</a></div>
1251 <div class="DivNavLinks">&nbsp;</div>
1252 <div class="Table1Border">
1253 <?php if($ThemeSet['TableStyle']=="div") { ?>
1254 <div class="TableRow1">
1255 <span style="text-align: left;">
1256 &nbsp;<a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=signup",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">Register</a></span></div>
1257 <?php } ?>
1258 <table class="Table1">
1259 <?php if($ThemeSet['TableStyle']=="table") { ?>
1260 <tr class="TableRow1">
1261 <td class="TableColumn1"><span style="text-align: left;">
1262 &nbsp;<a href="<?php echo url_maker($exfile['messenger'],$Settings['file_ext'],"act=signup",$Settings['qstr'],$Settings['qsep'],$prexqstr['messenger'],$exqstr['messenger']); ?>">Register</a></span></td>
1263 </tr><?php } ?>
1264 <tr class="TableRow2">
1265 <th class="TableColumn2" style="width: 100%; text-align: left;">&nbsp;Signup Message: </th>
1266 </tr>
1267 <tr class="TableRow3">
1268 <td class="TableColumn3">
1269 <table style="width: 100%; height: 25%; text-align: center;">
1270 <?php if (pre_strlen($_POST['Password'])>"60") { $Error="Yes";  ?>
1271 <tr>
1272         <td><span class="TableMessage">
1273         <br />Your password is too big.<br />
1274         </span>&nbsp;</td>
1275 </tr>
1276 <?php } if($_POST['fid']!=$_SESSION['UserFormID']) { $Error="Yes";  ?>
1277 <tr>
1278         <td><span class="TableMessage">
1279         <br />Sorry the referering url dose not match our host name.<br />
1280         </span>&nbsp;</td>
1281 </tr>
1282 <?php } if (pre_strlen($_POST['username'])>"30") { $Error="Yes";  ?>
1283 <tr>
1284         <td><span class="TableMessage">
1285         <br />Your user name is too big.<br />
1286         </span>&nbsp;</td>
1287 </tr>
1288 <?php } if ($_POST['Password']!=$_POST['RePassword']) { $Error="Yes";  ?>
1289 <tr>
1290         <td><span class="TableMessage">
1291         <br />Your passwords did not match.<br />
1292         </span>&nbsp;</td>
1293 </tr>
1294 <?php } if($Settings['use_captcha']=="on") {
1295 if (PhpCaptcha::Validate($_POST['signcode'])) {
1296 //echo 'Valid code entered';
1297 } else { $Error="Yes"; ?>
1298 <tr>
1299         <td><span class="TableMessage">
1300         <br />Invalid code entered<br />
1301         </span>&nbsp;</td>
1302 </tr>
1303 <?php } } if ($Settings['TestReferer']=="on") {
1304         if ($URL['HOST']!=$URL['REFERER']) { $Error="Yes";  ?>
1305 <tr>
1306         <td><span class="TableMessage">
1307         <br />Sorry the referering url dose not match our host name.<br />
1308         </span>&nbsp;</td>
1309 </tr>
1310 <?php } }
1311 $Name = stripcslashes(htmlspecialchars($_POST['Name'], ENT_QUOTES, $Settings['charset']));
1312 //$Name = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $Name);
1313 $Name = remove_spaces($Name);
1314 $lonewolfqy=sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."restrictedwords\" WHERE \"RestrictedUserName\"='yes'", array(null));
1315 $lonewolfrt=sql_query($lonewolfqy,$SQLStat);
1316 $lonewolfnm=sql_num_rows($lonewolfrt);
1317 $lonewolfs=0; $RMatches = null;
1318 while ($lonewolfs < $lonewolfnm) {
1319 $RWord=sql_result($lonewolfrt,$lonewolfs,"Word");
1320 $RCaseInsensitive=sql_result($lonewolfrt,$lonewolfs,"CaseInsensitive");
1321 if($RCaseInsensitive=="on") { $RCaseInsensitive = "yes"; }
1322 if($RCaseInsensitive=="off") { $RCaseInsensitive = "no"; }
1323 if($RCaseInsensitive!="yes"||$RCaseInsensitive!="no") { $RCaseInsensitive = "no"; }
1324 $RWholeWord=sql_result($lonewolfrt,$lonewolfs,"WholeWord");
1325 if($RWholeWord=="on") { $RWholeWord = "yes"; }
1326 if($RWholeWord=="off") { $RWholeWord = "no"; }
1327 if($RWholeWord!="yes"||$RWholeWord!="no") { $RWholeWord = "no"; }
1328 $RWord = preg_quote($RWord, "/");
1329 if($RCaseInsensitive!="yes"&&$RWholeWord=="yes") {
1330 $RMatches = preg_match("/\b(".$RWord.")\b/", $Name);
1331         if($RMatches==true) { break 1; } }
1332 if($RCaseInsensitive=="yes"&&$RWholeWord=="yes") {
1333 $RMatches = preg_match("/\b(".$RWord.")\b/i", $Name);
1334         if($RMatches==true) { break 1; } }
1335 if($RCaseInsensitive!="yes"&&$RWholeWord!="yes") {
1336 $RMatches = preg_match("/".$RWord."/", $Name);
1337         if($RMatches==true) { break 1; } }
1338 if($RCaseInsensitive=="yes"&&$RWholeWord!="yes") {
1339 $RMatches = preg_match("/".$RWord."/i", $Name);
1340         if($RMatches==true) { break 1; } }
1341 ++$lonewolfs; } sql_free_result($lonewolfrt);
1342 $sql_email_check = sql_query(sql_pre_query("SELECT \"Email\" FROM \"".$Settings['sqltable']."members\" WHERE \"Email\"='%s'", array($_POST['Email'])),$SQLStat);
1343 $sql_username_check = sql_query(sql_pre_query("SELECT \"Name\" FROM \"".$Settings['sqltable']."members\" WHERE \"Name\"='%s'", array($Name)),$SQLStat);
1344 $email_check = sql_num_rows($sql_email_check);
1345 $username_check = sql_num_rows($sql_username_check);
1346 sql_free_result($sql_email_check); sql_free_result($sql_username_check);
1347 if ($_POST['TOS']!="Agree") { $Error="Yes";  ?>
1348 <tr>
1349         <td><span class="TableMessage">
1350         <br />You need to  agree to the tos.<br />
1351         </span>&nbsp;</td>
1352 </tr>
1353 <?php } if ($_POST['Name']==null) { $Error="Yes"; ?>
1354 <tr>
1355         <td><span class="TableMessage">
1356         <br />You need to enter a name.<br />
1357         </span>&nbsp;</td>
1358 </tr>
1359 <?php } if ($_POST['Name']=="ShowMe") { $Error="Yes"; ?>
1360 <tr>
1361         <td><span class="TableMessage">
1362         <br />You need to enter a name.<br />
1363         </span>&nbsp;</td>
1364 </tr>
1365 <?php } if ($_POST['Password']==null) { $Error="Yes"; ?>
1366 <tr>
1367         <td><span class="TableMessage">
1368         <br />You need to enter a password.<br />
1369         </span>&nbsp;</td>
1370 </tr>
1371 <?php } if ($_POST['Email']==null) { $Error="Yes"; ?>
1372 <tr>
1373         <td><span class="TableMessage">
1374         <br />You need to enter a email.<br />
1375         </span>&nbsp;</td>
1376 </tr>
1377 <?php } if($email_check > 0) { $Error="Yes"; ?>
1378 <tr>
1379         <td><span class="TableMessage">
1380         <br />Email address is already used.<br />
1381         </span>&nbsp;</td>
1382 </tr>
1383 <?php } if($username_check > 0) { $Error="Yes"; ?>
1384 <tr>
1385         <td><span class="TableMessage">
1386         <br />User Name is already used.<br />
1387         </span>&nbsp;</td>
1388 </tr>
1389 <?php } if($RMatches==true) { $Error="Yes"; ?>
1390 <tr>
1391         <td><span class="TableMessage">
1392         <br />This User Name is restricted to use.<br />
1393         </span>&nbsp;</td>
1394 </tr>
1395 <?php } if ($Error=="Yes") {
1396 redirect("refresh",$rbasedir.url_maker($exfile['member'],$Settings['file_ext'],"act=signup",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'],FALSE),"4"); ?>
1397 <tr>
1398         <td><span class="TableMessage">
1399         <br />Click <a href="<?php echo url_maker($exfile['member'],$Settings['file_ext'],"act=signup",$Settings['qstr'],$Settings['qsep'],$exqstr['member'],$prexqstr['member']); ?>">here</a> to try again.<br />&nbsp;
1400         </span><br /></td>
1401 </tr>
1402 <?php } if ($Error!="Yes") {
1403 $_POST['UserIP'] = $_SERVER['REMOTE_ADDR'];
1404 $_POST['Group'] = $Settings['MemberGroup'];
1405 $_POST['Joined'] = GMTimeStamp(); $_POST['LastActive'] = GMTimeStamp();
1406 $_POST['Signature'] = ""; $_POST['Interests'] = "";
1407 $_POST['Title'] = ""; $_POST['PostCount'] = "0";
1408 if(!isset($Settings['AdminValidate'])) { $Settings['AdminValidate'] = "off"; }
1409 if($Settings['AdminValidate']=="on"||$Settings['AdminValidate']!="off")
1410 { $ValidateStats="no"; $yourgroup=$Settings['ValidateGroup']; }
1411 if($Settings['AdminValidate']=="off"||$Settings['AdminValidate']!="on")
1412 { $ValidateStats="yes"; $yourgroup=$Settings['MemberGroup']; }
1413 $HideMe = "no"; $HashSalt = salt_hmac();
1414 if($Settings['use_hashtype']=="md2") { $iDBHash = "iDBH2";
1415 $NewPassword = b64e_hmac($_POST['Password'],$_POST['Joined'],$HashSalt,"md2"); }
1416 if($Settings['use_hashtype']=="md4") { $iDBHash = "iDBH4";
1417 $NewPassword = b64e_hmac($_POST['Password'],$_POST['Joined'],$HashSalt,"md4"); }
1418 if($Settings['use_hashtype']=="md5") { $iDBHash = "iDBH5";
1419 $NewPassword = b64e_hmac($_POST['Password'],$_POST['Joined'],$HashSalt,"md5"); }
1420 if($Settings['use_hashtype']=="sha1") { $iDBHash = "iDBH";
1421 $NewPassword = b64e_hmac($_POST['Password'],$_POST['Joined'],$HashSalt,"sha1"); }
1422 if($Settings['use_hashtype']=="sha224") { $iDBHash = "iDBH224";
1423 $NewPassword = b64e_hmac($_POST['Password'],$_POST['Joined'],$HashSalt,"sha224"); }
1424 if($Settings['use_hashtype']=="sha256") { $iDBHash = "iDBH256";
1425 $NewPassword = b64e_hmac($_POST['Password'],$_POST['Joined'],$HashSalt,"sha256"); }
1426 if($Settings['use_hashtype']=="sha384") { $iDBHash = "iDBH384";
1427 $NewPassword = b64e_hmac($_POST['Password'],$_POST['Joined'],$HashSalt,"sha384"); }
1428 if($Settings['use_hashtype']=="sha512") { $iDBHash = "iDBH512";
1429 $NewPassword = b64e_hmac($_POST['Password'],$_POST['Joined'],$HashSalt,"sha512"); }
1430 if($Settings['use_hashtype']=="ripemd128") { $iDBHash = "iDBHRMD128";
1431 $NewPassword = b64e_hmac($_POST['Password'],$_POST['Joined'],$HashSalt,"ripemd128"); }
1432 if($Settings['use_hashtype']=="ripemd160") { $iDBHash = "iDBHRMD160";
1433 $NewPassword = b64e_hmac($_POST['Password'],$_POST['Joined'],$HashSalt,"ripemd160"); }
1434 if($Settings['use_hashtype']=="ripemd256") { $iDBHash = "iDBHRMD256";
1435 $NewPassword = b64e_hmac($_POST['Password'],$_POST['Joined'],$HashSalt,"ripemd256"); }
1436 if($Settings['use_hashtype']=="ripemd320") { $iDBHash = "iDBHRMD320";
1437 $NewPassword = b64e_hmac($_POST['Password'],$_POST['Joined'],$HashSalt,"ripemd320"); }
1438 if($Settings['use_hashtype']=="salsa10") { $iDBHash = "iDBHRMD320";
1439 $NewPassword = b64e_hmac($_POST['Password'],$_POST['Joined'],$HashSalt,"salsa10"); }
1440 if($Settings['use_hashtype']=="salsa20") { $iDBHash = "iDBHRMD320";
1441 $NewPassword = b64e_hmac($_POST['Password'],$_POST['Joined'],$HashSalt,"salsa20"); }
1442 if($Settings['use_hashtype']=="snefru") { $iDBHash = "iDBHSFRU";
1443 $NewPassword = b64e_hmac($_POST['Password'],$_POST['Joined'],$HashSalt,"snefru"); }
1444 if($Settings['use_hashtype']=="snefru256") { $iDBHash = "iDBHSFRU256";
1445 $NewPassword = b64e_hmac($_POST['Password'],$_POST['Joined'],$HashSalt,"snefru256"); }
1446 if($Settings['use_hashtype']=="gost") { $iDBHash = "iDBHGOST";
1447 $NewPassword = b64e_hmac($_POST['Password'],$_POST['Joined'],$HashSalt,"gost"); }
1448 $_GET['YourPost'] = $_POST['Signature'];
1449 //require( './'.$SettDir['misc'].'HTMLTags.php');
1450 $_GET['YourPost'] = htmlspecialchars($_GET['YourPost'], ENT_QUOTES, $Settings['charset']);
1451 //$_GET['YourPost'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_GET['YourPost']);
1452 $NewSignature = $_GET['YourPost'];
1453 $_GET['YourPost'] = preg_replace("/\t+/"," ",$_GET['YourPost']);
1454 $_GET['YourPost'] = preg_replace("/\s\s+/"," ",$_GET['YourPost']);
1455 $_GET['YourPost'] = remove_bad_entities($_GET['YourPost']);
1456 $Avatar = stripcslashes(htmlspecialchars($_POST['Avatar'], ENT_QUOTES, $Settings['charset']));
1457 //$Avatar = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $Avatar);
1458 $Avatar = remove_spaces($Avatar);
1459 $Website = stripcslashes(htmlspecialchars($_POST['Website'], ENT_QUOTES, $Settings['charset']));
1460 //$Website = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $Website);
1461 $Website = remove_spaces($Website);
1462 $gquerys = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."groups\" WHERE \"Name\"='%s' LIMIT 1", array($yourgroup));
1463 $gresults=sql_query($gquerys,$SQLStat);
1464 $yourgroup=sql_result($gresults,0,"id");
1465 $PreUserPer['CanViewBoard']=sql_result($gresults,0,"CanViewBoard");
1466 $PreUserPer['CanViewOffLine']=sql_result($gresults,0,"CanViewOffLine");
1467 $PreUserPer['CanEditProfile']=sql_result($gresults,0,"CanEditProfile");
1468 $PreUserPer['CanAddEvents']=sql_result($gresults,0,"CanAddEvents");
1469 $PreUserPer['CanPM']=sql_result($gresults,0,"CanPM");
1470 $PreUserPer['CanSearch']=sql_result($gresults,0,"CanSearch");
1471 $PreUserPer['CanExecPHP']=sql_result($gresults,0,"CanExecPHP");
1472 $PreUserPer['CanDoHTML']=sql_result($gresults,0,"CanDoHTML");
1473 $PreUserPer['CanUseBBags']=sql_result($gresults,0,"CanUseBBags");
1474 $PreUserPer['CanModForum']=sql_result($gresults,0,"CanModForum");
1475 $PreUserPer['FloodControl']=sql_result($gresults,0,"FloodControl");
1476 $PreUserPer['SearchFlood']=sql_result($gresults,0,"SearchFlood");
1477 $PreUserPer['HasModCP']=sql_result($gresults,0,"HasModCP");
1478 $PreUserPer['HasAdminCP']=sql_result($gresults,0,"HasAdminCP");
1479 $PreUserPer['ViewDBInfo']=sql_result($gresults,0,"ViewDBInfo");
1480 sql_free_result($gresults);
1481 $_POST['Interests'] = remove_spaces($_POST['Interests']);
1482 $_POST['Title'] = remove_spaces($_POST['Title']);
1483 $_POST['Email'] = remove_spaces($_POST['Email']);
1484 if(!is_numeric($_POST['YourOffSet'])) { $_POST['YourOffSet'] = "0"; }
1485 if($_POST['YourOffSet']>12) { $_POST['YourOffSet'] = "12"; }
1486 if($_POST['YourOffSet']<-12) { $_POST['YourOffSet'] = "-12"; }
1487 if(!is_numeric($_POST['MinOffSet'])) { $_POST['MinOffSet'] = "00"; }
1488 if($_POST['MinOffSet']>59) { $_POST['MinOffSet'] = "59"; }
1489 if($_POST['MinOffSet']<0) { $_POST['MinOffSet'] = "00"; }
1490 $_POST['YourOffSet'] = $_POST['YourOffSet'].":".$_POST['MinOffSet'];
1491 $query = sql_pre_query("INSERT INTO \"".$Settings['sqltable']."members\" (\"Name\", \"UserPassword\", \"HashType\", \"Email\", \"GroupID\", \"Validated\", \"HiddenMember\", \"WarnLevel\", \"Interests\", \"Title\", \"Joined\", \"LastActive\", \"LastPostTime\", \"BanTime\", \"BirthDay\", \"BirthMonth\", \"BirthYear\", \"Signature\", \"Notes\", \"Avatar\", \"AvatarSize\", \"Website\", \"Gender\", \"PostCount\", \"Karma\", \"KarmaUpdate\", \"RepliesPerPage\", \"TopicsPerPage\", \"MessagesPerPage\", \"TimeZone\", \"DST\", \"UseTheme\", \"IP\", \"Salt\") VALUES\n".
1492 "('%s', '%s', '%s', '%s', '%s', '%s', '%s', %i, '%s', '%s', %i, %i, '0', '0', '0', '0', '0', '%s', '%s', '%s', '%s', '%s', '%s', %i, 0, 0, 10, 10, 10, '%s', '%s', '%s', '%s', '%s')", array($Name,$NewPassword,$iDBHash,$_POST['Email'],$yourgroup,$ValidateStats,$HideMe,"0",$_POST['Interests'],$_POST['Title'],$_POST['Joined'],$_POST['LastActive'],$NewSignature,'Your Notes',$Avatar,"100x100",$Website,$_POST['YourGender'],$_POST['PostCount'],$_POST['YourOffSet'],$_POST['DST'],$Settings['DefaultTheme'],$_POST['UserIP'],$HashSalt));
1493 sql_query($query,$SQLStat);
1494 $yourid = sql_get_next_id($Settings['sqltable'],"members",$SQLStat);
1495 $idquery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."members\" WHERE \"Name\"='%s' AND \"UserPassword\"='%s' AND \"Email\"='%s' AND \"IP\"='%s' AND \"Salt\"='%s' LIMIT 1", array($Name,$NewPassword,$_POST['Email'],$_POST['UserIP'],$HashSalt));
1496 $idresult=sql_query($idquery,$SQLStat);
1497 $idnum=sql_num_rows($idresult);
1498 $idcheck = $yourid;
1499 if($idnum>=1) {
1500 $idncheck = sql_result($idresult,0,"id");
1501 $idncheck = intval($idncheck); }
1502 sql_free_result($idresult);
1503 if($yourid!=$idncheck) { $yourid = $idncheck; }
1504 $query = sql_pre_query("INSERT INTO \"".$Settings['sqltable']."mempermissions\" (\"id\", \"PermissionID\", \"CanViewBoard\", \"CanViewOffLine\", \"CanEditProfile\", \"CanAddEvents\", \"CanPM\", \"CanSearch\", \"CanExecPHP\", \"CanDoHTML\", \"CanUseBBags\", \"CanModForum\", \"FloodControl\", \"SearchFlood\", \"HasModCP\", \"HasAdminCP\", \"ViewDBInfo\") VALUES\n".
1505 "(%i, %i, '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', %i, %i, '%s', '%s', '%s')", array($yourid, 0, "group", "group", "group", "group", "group", "group", "group", "group", "group", "group", -1, -1, "group", "group", "group"));
1506 //"(%i, %i, '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s', %i, %i, '%s', '%s', '%s')", array($yourid, 0, $PreUserPer['CanViewBoard'], $PreUserPer['CanViewOffLine'], $PreUserPer['CanEditProfile'], $PreUserPer['CanAddEvents'], $PreUserPer['CanPM'], $PreUserPer['CanSearch'], $PreUserPer['CanExecPHP'], $PreUserPer['CanDoHTML'], $PreUserPer['CanUseBBags'], $PreUserPer['CanModForum'], $PreUserPer['FloodControl'], $PreUserPer['SearchFlood'], $PreUserPer['HasModCP'], $PreUserPer['HasAdminCP'], $PreUserPer['ViewDBInfo']));
1507 sql_query($query,$SQLStat);
1508 if(isset($_POST['referrerid'])&&is_numeric($_POST['referrerid'])) {
1509         $rfidquery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."members\" WHERE \"id\"=%i LIMIT 1", array($_POST['referrerid']));
1510         $rfidresult=sql_query($rfidquery,$SQLStat);
1511         $rfidnum=sql_num_rows($rfidresult);
1512         if($rfidnum>=1) {
1513                 $rfidKarma=sql_result($rfidresult,0,"Karma");
1514                 sql_free_result($rfidresult);
1515                 if(!is_numeric($rfidKarma)) { $rfidKarma = 0; }
1516                 $rfidKarma = $rfidKarma + 1;
1517                 $querykup = sql_pre_query("UPDATE \"".$Settings['sqltable']."members\" SET \"Karma\"=%i WHERE \"id\"=%i", array($rfidKarma,$_POST['referrerid']));
1518                 sql_query($querykup,$SQLStat); } }
1519 $querylogr = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."members\" WHERE \"Name\"='%s' AND \"UserPassword\"='%s' LIMIT 1", array($Name,$NewPassword));
1520 $resultlogr=sql_query($querylogr,$SQLStat);
1521 $numlogr=sql_num_rows($resultlogr);
1522 if($numlogr>=1) {
1523 $ir=0;
1524 $YourIDMr=sql_result($resultlogr,$ir,"id");
1525 $YourNameMr=sql_result($resultlogr,$ir,"Name");
1526 $YourGroupMr=sql_result($resultlogr,$ir,"GroupID");
1527 $YourGroupIDMr=$YourGroupMr;
1528 $gquery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."groups\" WHERE \"id\"=%i LIMIT 1", array($YourGroupMr));
1529 $gresult=sql_query($gquery,$SQLStat);
1530 $YourGroupMr=sql_result($gresult,0,"Name");
1531 sql_free_result($gresult);
1532 $YourTimeZoneMr=sql_result($resultlogr,$ir,"TimeZone");
1533 $YourDSTMr=sql_result($resultlogr,$ir,"DST"); }
1534 sql_free_result($resultlogr);
1535 session_regenerate_id(true);
1536 $_SESSION['Loggedin']=true;
1537 $_SESSION['MemberName']=$YourNameMr;
1538 $_SESSION['UserID']=$YourIDMr;
1539 $_SESSION['UserIP']=$_SERVER['REMOTE_ADDR'];
1540 $_SESSION['UserTimeZone']=$YourTimeZoneMr;
1541 $_SESSION['UserDST']=$YourDSTMr;
1542 $_SESSION['UserGroup']=$YourGroupMr;
1543 $_SESSION['UserGroupID']=$YourGroupIDMr;
1544 $_SESSION['UserPass']=$NewPassword;
1545 $_SESSION['DBName']=$Settings['sqldb'];
1546 if($_POST['storecookie']=="true") {
1547 if($cookieDomain==null) {
1548 setcookie("MemberName", $YourNameMr, time() + (7 * 86400), $cbasedir);
1549 setcookie("UserID", $YourIDMr, time() + (7 * 86400), $cbasedir);
1550 setcookie("SessPass", $NewPassword, time() + (7 * 86400), $cbasedir); }
1551 if($cookieDomain!=null) {
1552 if($cookieSecure===true) {
1553 setcookie("MemberName", $YourNameMr, time() + (7 * 86400), $cbasedir, $cookieDomain, 1);
1554 setcookie("UserID", $YourIDMr, time() + (7 * 86400), $cbasedir, $cookieDomain, 1);
1555 setcookie("SessPass", $NewPassword, time() + (7 * 86400), $cbasedir, $cookieDomain, 1); }
1556 if($cookieSecure===false) {
1557 setcookie("MemberName", $YourNameMr, time() + (7 * 86400), $cbasedir, $cookieDomain);
1558 setcookie("UserID", $YourIDMr, time() + (7 * 86400), $cbasedir, $cookieDomain);
1559 setcookie("SessPass", $NewPassword, time() + (7 * 86400), $cbasedir, $cookieDomain); } } }
1560 redirect("refresh",$rbasedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],FALSE),"3");
1561 ?>
1562 <tr>
1563         <td><span class="TableMessage">
1564         <br />Welcome to the Board <?php echo $_SESSION['MemberName']; ?>. ^_^<br />
1565         Click <a href="<?php echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index']); ?>">here</a> to continue to board.<?php echo "\n";
1566         if($Settings['AdminValidate']=="on"||$Settings['AdminValidate']!="off") {
1567         echo "<br />The admin has to validate your account befoure you can post.\n";
1568         echo "<br />The admin has been notified of your registration.\n"; } ?>
1569         <br />&nbsp;
1570         </span><br /></td>
1571 </tr>
1572 <?php } ?>
1573 </table>
1574 </td></tr>
1575 <tr class="TableRow4">
1576 <td class="TableColumn4">&nbsp;</td>
1577 </tr>
1578 </table></div>
1579 <?php } } }
1580 if($pagenum<=1) { ?>
1581 <div class="DivMembers">&nbsp;</div>
1582 <?php } ?>