rendered paste body<?php
OB_Start();
require("config.php");
echo("
<script language='javascript'>
function deleteAllMessages()
{
if(confirm('Are you sure you want to delete all of your messages? This is irreversable!')){location.href = 'http://www.flashnetworkonline.net/rush/index.php?page=deleteallpm'; }
}
function deleteComic(comicid)
{
if(confirm('Are you sure you want to delete this comic? This is irreversable!')){location.href = 'http://www.flashnetworkonline.net/rush/index.php?page=admindeletecomic&id=' + comicid;}
}
</script>
");
$page = $_GET['page'];
if (empty($_GET['page'])){
$page = "idx";
}
?>
<title>
<?php
if ($page == "idx"){
echo("Rush Animations | Home");
}
if ($page == "register"){
echo("Rush Animations | Register");
}
if ($page == "profile"){
echo("Rush Animations | $_SESSION[rush_username]'s Profile");
}
if ($page == "uploadcomic"){
echo("Rush Animations | Upload Comic");
}
if ($page == "comics"){
echo("Rush Animations | Comics");
}
if ($page == "viewcomic"){
echo("Rush Animations | Comic Viewer");
}
if ($page == "pm"){
echo("Rush Animations | $_SESSION[rush_username]'s Inbox");
}
if ($page == "writepm"){
echo("Rush Animations | Write Private Message");
}
if ($page == "viewpm"){
echo("Rush Animations | Private Message Viewer");
}
?>
</title>
<link rel='stylesheet' type='text/css' href='layout/style.css'>
<div align='center'>
<table align='center' cellspacing='1' bgcolor='black'>
<td height='147' width='650' background='images/gradient.png' valign='center'>
<p align='right'>
<font size='8' color='white'>
Rush Animations (Replace)
</font>
</p>
</td>
<tr>
<td>
<div class='fw-nav-menu'>
<ul>
<a class='section' href='index.php?page=idx'>Home</a>
<?php
if (!isset($_SESSION['rush_username'])){
echo("
<a class='section' href='index.php?page=register'>Register</a> <a href='index.php?page=login'>Login</a>
");
}
if (isset($_SESSION['rush_username'])){
echo("
<a class='section' href='index.php?page=profile'>Profile</a>
");
}
echo("<a class='section' href='index.php?page=comics'>Comics</a>");
echo("
</ul>
</div>
</td>
<tr>
<td width='650'>
<div class='fw-content'>
<div class='fw-text'>
<div class='fw-paragraph'>
<font size='2'>
");
if ($page == "idx"){
$gethome = mysql_query("SELECT * FROM rush_pages WHERE id = '1'")or die("Home: ".mysql_error());
$home = mysql_fetch_array($gethome);
$home[body] = str_replace("\n", "<br>", $home[body]);
echo $home[body];
}
if ($page == "register"){
if ($_POST['reg']){
$user = $_POST['user'];
$user = trim($user);
$user = htmlspecialchars($user);
$pass = $_POST['pass'];
$pass = trim($pass);
$pass = htmlspecialchars($pass);
$cpass = $_POST['cpass'];
$cpass = trim($cpass);
$cpass = htmlspecialchars($cpass);
$email = $_POST['email'];
$email = trim($email);
$email = htmlspecialchars($email);
$cemail = $_POST['cemail'];
$cemail = trim($cemail);
$cemail = htmlspecialchars($cemail);
$ip = $_SERVER['REMOTE_ADDR'];
$hash = md5($pass);
$showemail = $_POST['showemail'];
$rand = rand("1, 100");
$add = "dfsdfsdfdsf";
$gen = $rand.$add;
$val = sha1($gen);
if (empty($user)){die("You must provide a username!");}
if (empty($pass)){die("You must provide a password!");}
if (empty($cpass)){die("You must confirm your password!");}
if (empty($email)){die("You must provide a email!");}
if (empty($cemail)){die("You must confirm your email!");}
if ($pass != $cpass){die("Your passwords do not match!");}
if ($email != $cemail){die("Your emails do not match!");}
$subject = "Rush Animations Signup";
$date = date("m/d/y, g:i a");
$message =
"
Thanks for signing up at Rush Animations! Your registeration is almost complete, one final step will be to click the link we provide. Your information:\n
Username: $user\n
Password: $pass\n
To finish, visit this URL: http://www.flashnetworkonline.net/rush/index.php?page=validate&val=$val\n
<i>Note! This is an automated message!</i>
";
mail($email, $subject, $message);
$getusertbl = mysql_query("SELECT * FROM rush_users");
$getlegit = mysql_query("SELECT * FROM rush_users WHERE username = '$user'")or die("Legit: ".mysql_error());
$legit = mysql_num_rows($getlegit);
if ($legit>0){die("Sorry, but that username is already in our database!");}
mysql_query("INSERT INTO rush_users (`username`, `password`, `email`, `showemail`, `validate`, `ip`, `date`) VALUES('$user', '$hash', '$email', '$showemail', '$val', '$ip', '$date')");
echo("You have sucessfully registered! The final step will be to check your emails for the validation email. Remember, if you do not see it in your inbox, check your spam/junk mail folders!");
}
if (!$_POST['reg']){
echo("
<form name='reg' method='post'>
<strong>Desired Username</strong><br>
<input type='text' name='user'><br>
<strong>Password</strong><br>
<input type='password' name='pass'><br>
<strong>Confirm Password</strong><br>
<input type='password' name='cpass'><br>
<strong>Email</strong> This must be valid to use your account!<br>
<input type='text' name='email'><br>
<strong>Confrim Email</strong><br>
<input type='text' name='cemail'><br>
<strong>Show your email to the public?</strong><br>
<select name='showemail'>
<option value='yes'>Yes</option>
<option value='no'>No</option>
</select><br>
By clicking \"Register,\" you agree to our <a href='index.php?page=terms'>Terms and Conditions</a>.<br>
<input type='submit' name='reg' value='Register'>
</form>
");
}
}
if ($page == "validate"){
$getval = mysql_query("SELECT * FROM rush_users WHERE `validate` = '$_GET[val]'")or die("GetValidationLol". mysql_error());
$valnum = mysql_num_rows($getval);
$addval = addslashes($_GET['val']);
if ($valnum == 0){die("Error! THere is no validation url with that in our database!");}
$update = mysql_query("UPDATE rush_users SET validated = 'yes' WHERE validate = '$addval'")or die("Update:". mysql_error());
echo("You have sucessfully validated your account! You can now login.");
}
if ($page == "login"){
if ($_POST['login']){
$user = $_POST['user'];
$user = htmlspecialchars($user);
$pass = $_POST['pass'];
$pass = md5($pass);
$pass = htmlspecialchars($pass);
$infoisreal = mysql_query("SELECT * FROM rush_users WHERE username = '$user' && password = '$pass'");
$info = mysql_num_rows($infoisreal);
$userstat = mysql_fetch_array($infoisreal);
$userstat = mysql_escape_string($userstat);
if ($info == 0){
die("Sorry, but that information is incorrect! Please try again.");}
if ($userstate['validated'] == "no"){die("Sorry, but your account is not validated! You must first validate it before you can use it.");}
$_SESSION['rush_username'] = $user;
$_SESSION['rush_password'] = $pass;
setcookie("PHPSESSID", session_id(),time()+(60*60*24*5), "/", "");
echo("You have sucessfully logged in!");
}
if (!$_POST['login']){
echo("
<form name='login' method='post'>
<strong>Username</strong><br>
<input type='text' name='user'><br>
<strong>Password</strong><br>
<input type='password' name='pass'><br>
<input type='submit' name='login' value='Login!'>
</form>
");
}
}
if ($page == "profile"){
if (isset($_SESSION['rush_username'])){
$logged = $_SESSION['rush_username'];
$no = "no";
$getnew = mysql_query("SELECT * FROM `rush_pm` WHERE `to` = '$logged' && `read` = '$no'")or die("PM: ".mysql_error());
$new = mysql_num_rows($getnew);
echo("
Welcome, <strong>$_SESSION[rush_username]</strong>!<br><br>
<a href='index.php?page=editprofile'>Edit Profile</a><br>
<a href='index.php?page=portalsubmits'>Portal Submitions</a><br>
<a href='index.php?page=pm'>Private Messages ($new New)</a><br>
<a href='index.php?page=logout'>Logout</a><br><br>
");
$getisadmin = mysql_query("SELECT * FROM rush_users WHERE username = '$_SESSION[rush_username]'")or die("Admin: ".mysql_error());
$isadmin = mysql_fetch_array($getisadmin);
if ($isadmin[group] == 4){
echo("
[Admin Only Options]<br>
<a href='index.php?page=admin'>Admin CP</a><br>
<a href='index.php?page=uploadcomic'>Upload Comic</a><br>
<a href='index.php?page=admincomics'>Edit/Delete Comics</a><br>
//More to come
");
}
}
if (!isset($_SESSION['rush_username'])){
echo("
Please, <a href='index.php?page=login'>Login</a> first! You must have an account for profile options!
");
}
}
if ($page == "logout"){
unset($_SESSION['rush_username']);
unset($_SESSION['rush_password']);
session_destroy();
echo("You have sucessfully logged out.");
}
if ($page == "pm"){
if (!isset($_SESSION[rush_username])){die("You must be logged in to view your pms!");}
echo("
<a href='index.php?page=writepm'>Write PM</a> | <a href='javascript:deleteAllMessages()'>Delete All Messages</a><br><br>
");
$getpm = mysql_query("SELECT * FROM rush_pm WHERE `to` = '$_SESSION[rush_username]' ORDER BY id DESC")or die("PM: ".mysql_error());
$pmnum = mysql_num_rows($getpm);
if ($pmnum == "0"){echo("Error! You have no PM's in your inbox!");}
while($pm = mysql_fetch_array($getpm)){
$n++;
echo("
$n. <a href='index.php?page=viewpm&id=$pm[id]'>$pm[name]</a>, by <a href='index.php?page=profiles&id=$pm[bid]'>$pm[by]</a>"); if ($pm[read] == "no"){echo(" (Unread)");}echo("<br>
");
}
}
if ($page == "viewpm"){
$getpm = mysql_query("SELECT * FROM rush_pm WHERE id = '$_GET[id]'")or die("Get: ".mysql_error());
$pmnum = mysql_num_rows($getpm);
if ($getpm == "o"){die("Error! There is no pm with this in our database!");}
$pm = mysql_fetch_array($getpm);
$to1 = strtolower($pm[to]);
$to2 = strtolower($_SESSION[rush_username]);
if ($to1 != $to2){die("This pm was not sent to you!");}
$dropline = "\n";
$pm[body] = str_replace($dropline, "<br>", $pm[body]);
$read = mysql_query("UPDATE `rush_pm` SET `read` = 'yes' WHERE `id` = '$_GET[id]'")or die("Update: ".mysql_error());
if ($pm[type] == "reply"){
$reply = "[reply]";
$replystart = "";
$pm[body] = str_replace($reply, $replystart, $pm[body]);
echo("
<strong>Reply-</strong><br>
$pm[body]<br><br>
<strong>From $pm[by], on $pm[date]</strong><br><br>
<a href='index.php?page=replypm&id=$pm[id]'>Reply?</a> | <a href='index.php?page=reportpm&id=$pm[id]'>Report?</a>
");
}
if ($pm[type] == "msg"){
echo("
<strong>Message-</strong><br>
$pm[body]<br><br>
<strong>From $pm[by], on $pm[date]</strong><br><br>
<a href='index.php?page=replypm&id=$pm[id]'>Reply?</a> | <a href='index.php?page=reportpm&id=$pm[id]'>Report?</a>
");
}
}
if ($page == "writepm"){
if ($loggedin == false){
echo("Error! You must be logged in to write a pm!");
}
if ($loggedin == true){
$sendto = $_GET['to'];
if ($_POST['write']){
$name = $_POST['subject'];
$by = $_POST['by'];
$body = $_POST['body'];
$type = "msg";
$date = date("m/d/y, g:i a");
$ip = $_SERVER['REMOTE_ADDR'];
$to = $_POST['to'];
$no = "no";
if (empty($name)){die("Error! Please enter something for the subject!");}
if (empty($body)){die("Error! Please enter a message!");}
if (empty($to)){die("Error! Please enter someone's name to send to!");}
$checklegit = mysql_query("SELECT * FROM rush_users WHERE username = '$to'");
$legit = mysql_num_rows($checklegit);
if ($legit == "0"){die("Error. The user, $to, does not exist in our database!");}
$getid = mysql_query("SELECT * FROM rush_users WHERE username = '$_SESSION[rush_username]'")or die("id: ".mysql_error());
$id = mysql_fetch_array($getid);
$insert = mysql_query("INSERT INTO rush_pm (`name`, `by`, `to`, `bid`, `date`, `body`, `ip`, `type`) VALUES('$name', '$_SESSION[rush_username]', '$to', '$id[id]', '$date', '$body', '$ip', '$type')")or die("Send: ".mysql_error());
echo("You have sucessfully PMed $to!");
}
if (!$_POST['write']){
echo("
<form name='write' method='post'>
<strong>Message Subject</strong><br>
<input type='text' name='subject'><br>
<strong>To</strong><br>
<input type='text' name='to' value='$sendto'><br>
<strong>Message Body</strong><br>
<textarea name='body' cols='50' rows='10'></textarea><br>
<input type='submit' name='write' value='Post!'>
");
}
}
}
if ($page == "profiles"){
$getuser = mysql_query("SELECT * FROM rush_users WHERE id = '$_GET[id]'");
$user = mysql_fetch_array($getuser);
$getadmin = mysql_query("SELECT * FROM rush_users WHERE username = '$_SESSION[rush_username]'")or die("Adm: ".mysql_error());
$admin = mysql_fetch_array($getadmin);
echo("
<table height='22 width='400' cellspacing='1' bgcolor='black'>
<td bgcolor='grey'>
<strong>$user[username]</strong>
</td><tr>
<td bgcolor='white'>
Rank: $user[rank]<br>
MSN: $user[msn]<br>
AIM: $user[aim]
");
if ($admin[group] == 4){
echo("
<tr>
<td bgcolor='grey'>
<strong>Admin Options</strong>
</td><tr>
<td bgcolor='white'>
<a href='index.php?page=admin/editrank&id=$user[id]'>Edit Rank</a>
</td><tr>
<a href='index.php?page=admin/edituser&id=$user[id]'>
</td><tr>
<td bgcolor='white'>
<a href='javascript:ban($user[id])'>Ban $user[username]</a>
");
}
}
if ($page == "forget"){
$newpass = rand("1, 40");
$add = "dsad6asd6";
$add2 = rand("1,432432532432");
$almostfinal = $newpass + $add + add2;
$final = sha1($almostfinal);
if ($_POST['forget']){
$user = $_POST['username'];
$user = addslashes($user);
$getinforeal = mysql_query("SELECT * FROM rush_users WHERE username = '$user'")or die("User: ".mysql_error());
$inforeal = mysql_num_rows($getinforeal);
$info = mysql_fetch_array($getinforeal);
if ($inforeal == "0"){
echo("Error! That username does not exist in our database!");
}
if ($inforeal != "0"){
$message = "The forgoton password is $newpass for $info[username].";
$subject = "Rush - Forget Password";
mail($info[email], $subject, $message);
echo("
A email has been sent to you with information on how you reset your password!
");
}
}if (!$_POST['forget']){
echo("
<form name='forget' method='post'>
<strong>Username</strong><br>
<input type='text' name='username'><br>
<input type='submit' name='forget' value='Reset Password!'>
");
}
}
if ($page == "replypm"){
$getpm = mysql_query("SELECT * FROM rush_pm WHERE id = '$_GET[id]'");
$reply = mysql_fetch_array($getpm);
if ($reply[to] != $_SESSION[rush_username]){die("This PM was not sent to you!");}
if (!isset($_SESSION[rush_username])){die("You must be logged in to access this feature!");}
if ($_POST['reply']){
$name = $_POST['name'];
$to = $reply[by];
$date = date("m/d/y, g:i a");
$ip = $_SERVER['REMOTE_ADDR'];
$body = $_POST['body'];
$type = "reply";
$getid = mysql_query("SELECT * FROM rush_users WHERE username = '$_SESSION[rush_username]'")or die("id: ".mysql_error());
$id = mysql_fetch_array($getid);
$insert = mysql_query("INSERT INTO rush_pm (`name`, `by`, `to`, `bid`, `date`, `body`, `ip`, `type`) VALUES('$name', '$_SESSION[rush_username]', '$to', '$id[id]', '$date', '$body', '$ip', '$type')")or die("Reply: ".mysql_error());
echo("You have sucessfully replied to that PM!");
}
if (!$_POST['reply']){
echo("
<form name='reply' method='post'>
<strong>Subject</strong><br>
<input type='text' name='name' value='Re: $reply[name]'><br>
<strong>To</strong><br>
$reply[by]<br>
<strong>Body</strong><br>
<textarea name='body' cols='50' rows='10'>[reply]\n$reply[body]\n[/reply]</textarea><br>
<input type='submit' name='reply' value='Reply!'>
</form>
");
}
}
if ($page == "fportal"){
echo("
<table align='center' height='22' width='140'>
<td background='images/portalbar.png'>
<strong><center>Most Recent</center></strong>
</td>
<tr>
<td bgcolor='lightgrey'>
");
$getrecent = mysql_query("SELECT * FROM rush_flashes ORDER BY id DESC");
while($recent = mysql_fetch_array($getrecent)){
$n++;
echo("
$n. $recent[name];
");
}
echo("</td></table>");
}
if ($page == "members"){
$getlist = mysql_query("SELECT * FROM rush_users ORDER BY id DESC");
//Lol
}
if ($page == "uploadcomic"){
$getisadmin = mysql_query("SELECT * FROM rush_users WHERE username = '$_SESSION[rush_username]'")or die("Admin: ".mysql_error());
$isadmin = mysql_fetch_array($getisadmin);
if ($isadmin['group'] != 4){die("Error! You must be an admin to upload a comic!");}
if ($_POST['upload']){
$date = date("m/d/y, g:i a");
$comic = $HTTP_POST_FILES['comic']['name'];
$name = $_POST['name'];
$by = $_POST['by'];
$fetch_last = mysql_query("SELECT * FROM rush_comics ORDER BY id DESC")or die("Last: ".mysql_error());
$last = mysql_fetch_array($fetch_last);
$lastid = $last['id'] + 1;
$newfile = $lastid."_".$comic;
$path = "comics/".$newfile;
$ip = $_SERVER['REMOTE_ADDR'];
if(copy($HTTP_POST_FILES['comic']['tmp_name'], $path))
{
$insert = mysql_query("INSERT INTO rush_comics (`name`, `date`, `by`, `ip`, `file`) VALUES('$name', '$date', '$by', '$ip', '$newfile')")or die("Comix: ".mysql_error());
echo("Comic uploaded sucessfully! Click <a href='viewcomic&id=$lastid'>here</a> to view $name!");
}else{
die("There was en error uploading the comic. Sorry for the inconvience :(.");
}
}
if (!$_POST['upload']){
echo("
Welcome, administrator $_SESSION[rush_username]! Fill out the information below to upload a comic!<br><br>
<form name='upload' method='post' enctype='multipart/form-data' id='upload'>
<strong>File</strong><br>
<input name='comic' type='file' id='comic' size='24'><br>
<strong>Comic Title</strong><br>
<input type='text' name='name'><br>
<strong>Author of the Comic</strong><br>
<input type='text' name='by'><br>
<input type='submit' name='upload' value='Submit!'>
</form>
");
}
}
if ($page == "viewcomic"){
$getcomic = mysql_query("SELECT * FROM rush_comics WHERE id = '$_GET[id]'")or die("Comic: ".mysql_error());
$comicnum = mysql_num_rows($getcomic);
if ($comicnum == 0){die("Error! There is no comic with that id in our database!");}
$comic = mysql_fetch_array($getcomic);
$previous = $comic[id] - 1;
$next = $comic[id] + 1;
$getlast = mysql_query("SELECT * FROM rush_comics ORDER BY id DESC")or die("Last: ".mysql_error());
$last = mysql_fetch_array($getlast);
echo("
<center>
<a href='index.php?page=viewcomic&id=$previous'>Previous</a> | <a href='index.php?page=randomcomic'>Random Comic</a> | <a href='index.php?page=viewcomic&id=$next'>Next</a><br>
<strong>$comic[name]</strong>, by $comic[by]. The comic was uploaded on $comic[date].<br>
<img src='http://www.flashnetworkonline.net/rush/comics/$comic[file]'>
</center>
");
}
if ($page == "comics"){
$getcomic = mysql_query("SELECT * FROM rush_comics ORDER BY id DESC")or die("Comic: ".mysql_error());
echo("
<table align='center' cellspacing='1' bgcolor='black'>
<td background='images/nav.png'>
<strong>#</strong>
</td>
<td background='images/nav.png'>
<strong>Comic</strong>
</td>
<td background='images/nav.png'>
<strong>Author</strong>
</td>
<td background='images/nav.png'>
<strong>Date</strong>
</td>
<tr>
");
while($comic = mysql_fetch_array($getcomic)){
$n++;
echo("
<td background='images/nav.png'>
$n
</td>
<td background='images/nav.png'>
<a href='index.php?page=viewcomic&id=$comic[id]'>$comic[name]</a>
</td>
<td background='images/nav.png'>
$comic[by]
</td>
<td background='images/nav.png'>
$comic[date]
</td>
<tr>
");
}
echo("</table>");
}
if ($page == "admin"){
$getadmin = mysql_query("SELECT * FROM rush_users WHERE username = '$_SESSION[rush_username]'")or die("Adm: ".mysql_error());
$admin = mysql_fetch_array($getadmin);
if ($admin[group] != 4){die("You must be an admin to access the Admin CP!");}
echo("
<a href='index.php?page=admineditusers'>Users</a><br>
<a href='index.php?page=adminpages'>Pages</a><br>
<a href='index.php?page=uploadcomic'>Upload Comic</a><br>
<a href='index.php?page=admincomics'>Comics</a>
");
}
if ($page == "admincomics"){
$getadmin = mysql_query("SELECT * FROM rush_users WHERE username = '$_SESSION[rush_username]'")or die("Adm2: ".mysql_error());
$admin = mysql_fetch_array($getadmin);
if ($admin[group] != 4){die("You must be an admin to access the Admin CP!");}
$getcomic = mysql_query("SELECT * FROM rush_comics ORDER BY id DESC")or die("CMX: ".mysql_error());
echo("
<table align='center' height='22' cellspacing='1' bgcolor='black'>
<td background='images/nav.png'>
<strong>#</strong>
</td>
<td background='images/nav.png'>
<strong>Comic</strong>
</td>
<td background='images/nav.png'>
<strong>Author</strong>
</td>
<td background='images/nav.png'>
<strong>Date</strong>
</td>
<td background='images/nav.png'>
<strong>IP</strong>
</td>
<td background='images/nav.png'>
<strong>Edit</strong>
</td>
<td background='images/nav.png'>
<strong>Delete</strong>
</td>
");
while($comic = mysql_fetch_array($getcomic)){
$n++;
echo("
<tr>
<td bgcolor='white'>
$n
</td>
<td bgcolor='white'>
<a href='index.php?page=viewcomic&id=$comic[id]'>$comic[name]</a>
</td>
<td bgcolor='white'>
$comic[by]
</td>
<td bgcolor='white'>
$comic[date]
</td>
<td bgcolor='white'>
$comic[ip]
</td>
<td bgcolor='white'>
<a href='index.php?page=admineditcomic&id=$comic[id]'>[Edit $comic[name]]</a>
</td>
<td bgcolor='white'>
<a href='javascript:deleteComic($comic[id])'>[Delete $comic[name]]</a>
</td>
<tr>
");
}
echo("</table>");
}
if ($page == "admindeletecomic"){
$getadmin = mysql_query("SELECT * FROM rush_users WHERE username = '$_SESSION[rush_username]'")or die("Adm2: ".mysql_error());
$admin = mysql_fetch_array($getadmin);
if ($admin[group] != 4){die("You must be an admin to access the Admin CP!");}
$getcomic = mysql_query("SELECT * FROM rush_comics WHERE id = '$_GET[id]'")or die("ComixLOL: ".mysql_error());
$comic = mysql_fetch_array($getcomic);
mysql_query("DELETE FROM rush_comics WHERE id='$_GET[id]'")or die("Delete: ".mysql_error());
echo("You have sucessfully deleted $comic[name]!");
}
if ($page == "admineditcomic"){
$getadmin = mysql_query("SELECT * FROM rush_users WHERE username = '$_SESSION[rush_username]'")or die("Adm2: ".mysql_error());
$admin = mysql_fetch_array($getadmin);
if ($admin[group] != 4){die("You must be an admin to access the Admin CP!");}
if ($_POST['editcomic']){
$getcomic = mysql_query("SELECT * FROM rush_comics WHERE id = '$_GET[id]'")or die("COMIC: ".mysql_error());
$comic = mysql_fetch_array($getcomic);
$name = $_POST['name'];
$by = $_POST['by'];
$by = $_POST['by'];
$newfile = $comic[id]."_".$comic;
$path = "comics/".$newfile;
$ip = $_SERVER['REMOTE_ADDR'];
$update = mysql_query("UPDATE rush_comics SET `name` = '$name', `date` = '$comic[date]', `by` = '$by', `ip` = '$comic[ip]' WHERE id = '$_GET[id]'")or die("Update: ".mysql_error());
echo("Comic sucessfully edited! Click <a href='index.php?page=viewcomic&id=$comic[id]'>here</a> to view $comic[name].");
}
if (!$_POST['editcomic']){
$getcomic = mysql_query("SELECT * FROM rush_comics WHERE id = '$_GET[id]'")or die("COMIC: ".mysql_error());
$comic = mysql_fetch_array($getcomic);
echo("
<form name='editcomic' method='post'>
<strong>File</strong><br>
Click <a href='index.php?page=adminuploadcomicfix&id=$comic[id]'>here</a> to change the actual comic<br>
<strong>Comic Title</strong><br>
<input type='text' name='name' value='$comic[name]'><br>
<strong>Author of the Comic</strong><br>
<input type='text' name='by' value='$comic[by]'><br>
<input type='submit' name='editcomic' value='Edit [$comic[name]]''>
</form>
");
}
}
if ($page == "admin/edithome"){
$getadmin = mysql_query("SELECT * FROM rush_users WHERE username = '$_SESSION[rush_username]'")or die("Adm2: ".mysql_error());
$admin = mysql_fetch_array($getadmin);
if ($admin[group] != 4){
echo("You must be an admin to edit the home!");
}
if ($admin[group] == 4){
$gethome = mysql_query("SELECT * FROM rush_pages WHERE id = '1'")or die("Home: ".mysql_error());
$home = mysql_fetch_array($gethome);
if ($_POST['edithome']){
$body = $_POST['body'];
$update = mysql_query("UPDATE rush_pages SET body='$body' WHERE id='1'")or die("Updte: ".mysql_error());
echo("Home has been updatted!");
}
if (!$_POST['edithome']){
echo("
<form name='edithome' method='post'>
<table height='22' width='400' cellspacing='1' bgcolor='black'>
<td bgcolor='white'>
<strong>Home Content</strong>
</td><tr>
<td bgcolor='grey'>
<textarea cols='80' rows='20' name='body'>$home[body]</textarea>
</td><tr>
<td bgcolor='white'>
<strong>Edit</strong>
</td><tr>
<td bgcolor='grey'>
<input type='submit' name='edithome' value='Done'>
</td></tr>
</table>
</form>
");
}
}
}
if ($page == "members"){
$getmembers = mysql_query("SELECT * FROM rush_users ORDER BY id DESC")or die("Mem: ".mysql_error());
while($mem = mysql_fetch_array($getmembers)){
$n++;
echo("$n. <a href='index.php?page=profiles&id=$mem[id]'>$mem[username]</a><br>");
}
}
if ($page == "forum"){
echo("
<table height='60' width='500' cellspacing='1' bgcolor='white'>
<td background='images/forum/grad.png'>
Test Catagory
</td>
</table>
");
}
?>
</div></div></div>
</td>
<tr>
<td height='22' width='650' background='images/nav.png'>
Copyright©, 2006-<?echo date("Y");?>. All rights reserved.
</font>
</div>
</td>
</tr>
</table>
</div>
</body>
</html>