rendered paste body<?php
/***************************************************************************
* eupkapp.php
* -------------------
* begin : Saturday, April 19, 2007
* copyright : (C) 2007 Sheppard, Jonas, Rodik
* email : matthias.oltmann@gmail.com, jonas@europk.org
*
*
*
***************************************************************************/
define('IN_PHPBB', true);
$phpbb_root_path = './';
include($phpbb_root_path . 'extension.inc');
include($phpbb_root_path . 'common.'.$phpEx);
include($phpbb_root_path . 'includes/bbcode.'.$phpEx);
include($phpbb_root_path . 'includes/functions_search.'.$phpEx);
include "src_sql.php";
//
// Start session management
//
$userdata = session_pagestart($user_ip, PAGE_SEARCH);
init_userprefs($userdata);
$o_acc = $_GET['a']; // Opfer-Name ; Getöteter Charakter
$realm = $_GET['r']; // Der Realm (Europe, USA, etc.)
$page_title = $lang['EuroPK Application List'];
include($phpbb_root_path . 'includes/page_header.'.$phpEx);
$template->set_filenames(array(
'body' => 'eupkapp_body.tpl')
);
if($_GET['action'] == "" || $_GET['action'] == "Accept") {
if( $_GET['password'] == 'wigger') {
$template->pparse('body');
?>
<font color="White"><strong><center>New Applications:
<?
if($_GET['action']=="Accept") {
$pkliste_result = mysql_query ( "SELECT * FROM applications" );
while ( $pkliste = mysql_fetch_array ( $pkliste_result ) ) {
$tehid = $pkliste[ID];
if ($_GET[$tehid] == "Accept") { mysql_query ( "UPDATE applications SET ANSWER='Accepted' , ADMIN='$userdata[username]' WHERE ID='$tehid';"); }
if ($_GET[$tehid] == "Deny") { mysql_query ( "UPDATE applications SET ANSWER='Denied', ADMIN='$userdata[username]' WHERE ID='$tehid';"); }
}
}
$pkliste_result = mysql_query ( "SELECT * FROM applications WHERE ANSWER='Received'" );
echo "<table width=100% cellpadding=3 cellspacing=0 border=0>";
echo "<tr><th><center><b>#</td><th><center><b>Date</td><th><center><b>Name</td><th><center><b>Email<center><b></td><th>Account</td><th>Pker</td><th>Age</td><th>Ref</td><th>Message</td><th>Status</td><th>Action</td></tr>";
?>
<form action="eupkapp.php" method="get">
<input type="hidden" name="password" value="wigger">
<input type="hidden" name="action" value="Accept">
<?
echo "<form action=\"eupkapp.php\" method=\"get\">";
while ( $pkliste = mysql_fetch_array ( $pkliste_result ) ) {
echo "<tr><font color=#FFFFFF><td><font color=#FFFFFF><center>$pkliste[ID]</td><td><font color=#FFFFFF><center>$pkliste[DATE]</td><td><font color=#FFFFFF><center>$pkliste[NAME]<br>($pkliste[host])<td><font color=#FFFFFF><center>$pkliste[email]</td><td><font color=#FFFFFF><center>$pkliste[ACCOUNT]</td><td><font color=#FFFFFF><center>$pkliste[PKER]</td><td><font color=#FFFFFF><center>$pkliste[AGE]</td><td><font color=#FFFFFF><center>$pkliste[REF]</td><td><font color=#FFFFFF><center>$pkliste[MSG]</td><td><font color=yellow><center>$pkliste[ANSWER]<td>";
?>
<center><input type="submit" STYLE="background: #232323" name="<? echo "$pkliste[ID]"; ?>" value="Accept">
<input type="submit" STYLE="background: #232323" name="<? echo "$pkliste[ID]"; ?>" value="Deny">
<?
echo "<td><font color=red>$pkliste[ADMIN]</tr></font>";
}
echo "</table>";
?>
<font color="White"><strong><center>Old Applications:
<?
if($_GET['action']=="Accept") {
$pkliste_result = mysql_query ( "SELECT * FROM applications" );
while ( $pkliste = mysql_fetch_array ( $pkliste_result ) ) {
$tehid = $pkliste[ID];
if ($_GET[$tehid] == "Accept") { mysql_query ( "UPDATE applications SET ANSWER='Accepted' , ADMIN='$userdata[username]' WHERE ID='$tehid';"); }
if ($_GET[$tehid] == "Denied") { mysql_query ( "UPDATE applications SET ANSWER='Denied', ADMIN='$userdata[username]' WHERE ID='$tehid';"); }
}
}
$pkliste_result = mysql_query ( "SELECT * FROM applications WHERE ANSWER='Accepted' OR ANSWER='Denied'" );
echo "<table width=100% cellpadding=3 cellspacing=0 border=0>";
echo "<tr><th><center><b>#</td><th><center><b>Date</td><th><center><b>Name</td><th><center><b>Email<center><b></td><th>Account</td><th>Pker</td><th>Age</td><th>Ref</td><th>Message</td><th>Status</td><th>By</td></tr>";
?>
<?
echo "<form action=\"eupkapp.php\" method=\"get\">";
while ( $pkliste = mysql_fetch_array ( $pkliste_result ) ) {
if ($pkliste['ANSWER'] == "Denied") $colorZ = 'red';
elseif ($pkliste['ANSWER'] == "Accepted") $colorZ = 'green';
else $colorZ = 'yellow';
echo "<tr><font color=#FFFFFF><td><font color=#FFFFFF><center>$pkliste[ID]</td><td><font color=#FFFFFF><center>$pkliste[DATE]</td><td><font color=#FFFFFF><center>$pkliste[NAME]<td><font color=#FFFFFF><center>$pkliste[email]</td><td><font color=#FFFFFF><center>$pkliste[ACCOUNT]</td><td><font color=#FFFFFF><center>$pkliste[PKER]</td><td><font color=#FFFFFF><center>$pkliste[AGE]</td><td><font color=#FFFFFF><center>$pkliste[REF]</td><td><font color=#FFFFFF><center>$pkliste[MSG]</td><td></font><font color='$colorZ'><center>$pkliste[ANSWER]";
?>
<?
echo "<td><font color=red><center>$pkliste[ADMIN]</font></tr>";
}
echo "</table>";
?>
<?
$template->assign_vars(array(
'USERNAME' => $profiledata['username']));
}
else {
$template->pparse('body');
?>
<form action="eupkapp.php" method="get"><font color=#FFFFFF><strong>
Password <input name="password" type="text" STYLE="background: #232323"></strong>
<input type="submit" value="Login" STYLE="background: #232323">
</form>
<?
}
}
function GetForumName($PkAcc,$Realm) {
// Connection to AuthList Mysql database :p
# MySQL-Verbindung herstellen
$dbhost = "localhost"; // Datenbank-Server
$dbuser = "eupk"; // Benutername
$dbpass = "*******"; // Passwort
$dbtab = "eupk"; // Datenbank
$db = mysql_connect ( "$dbhost" , "$dbuser" , "$dbpass" );
mysql_select_db ( "$dbtab", $db );
$pkliste_result = mysql_query ( "SELECT * FROM yapklist ORDER BY id DESC" );
while ( $pkliste = mysql_fetch_array ( $pkliste_result ) ) {
$forumacc = GetNameByID($pkliste['user_id']);
if(strcasecmp($pkliste[o_acc],$PkAcc)==0 && strcasecmp($pkliste[realm],$Realm)==0)
return $forumacc;
// echo "<tr><td><center>$pkliste[acc]</td><td><center>$pkliste[forumacc]</td><td><center>$pkliste[o_chr]</td><td><center>$pkliste[realm]</td><td><center>";
}
}
?>