rendered paste body<?phpsession_start();include('mysql_u.php');if (!session_id()) {?><meta http-equiv="refresh" content="0;url=login.php"><?} else {$sql = "SELECT * FROM `up_sessions` WHERE `session` = '" . session_id() . "' LIMIT 0, 1";$result = mysql_query($sql) or die(mysql_error());while ($row = mysql_fetch_array($result)) { $fid = $row['id'];$sess = $row['session'];}if ($sess != session_id()) {?> <meta http-equiv="refresh" content="0;url=login.php"> <?} else {$sql = "SELECT * FROM `up_users` WHERE `id` = '" . $fid . "' LIMIT 0, 1";$result = mysql_query($sql) or die(mysql_error());while ($row = mysql_fetch_array($result)) { $name = $row['name'];$level = $row['level'];$signature = $row['signature'];}if ($level > 49) {$sqlv = "SELECT * FROM `up_users` WHERE `verified` = 0";$resultv = mysql_query($sqlv) or die(mysql_error());$waiting = mysql_num_rows($resultv);if ($waiting == 1) {$anoun = "person";} else {$anoun = "people";}if ($waiting > 0) {?><div class="controlbar"><a class="controlbar" href="admin.php"><?php echo("$waiting $anoun"); ?> waiting for confirmation</a></div><?}}$sqlol = "SELECT * FROM `up_priv` WHERE `to` = '" . $fid . "' AND `viewed` = 0";$resultol = mysql_query($sqlol) or die(mysql_error());$pm_count = mysql_num_rows($resultol);?><? include('topbar.php'); ?><p><div class="title">Post Message</div><br><div class="controlbar"><a class="controlbar" href="profile.php?user=<?php echo($fid); ?>"><?php echo($name); ?> (<?php echo($level); ?>)</a><? if ($pm_count > 0) { echo(" | <a class=\"controlbar\" href=\"priv.php\">Private Messages ($pm_count)</a>"); } ?></div><?if (!$_GET['topic']) {if ($_POST['rpost'] and $_POST['rtitle'] and $_GET['take'] == 1) {$daet = date("m/d/Y h:i:s A");$sqlu = "INSERT INTO `up_topics` (`id`, `title`, `text`, `uid`, `date`, `time`, `closed`, `board`, `daet`) VALUES ('', '" . substr(strip_tags($_POST['rtitle']), 0, 80) . "', '" . strip_tags($_POST['rpost'],'<b>, <u>, <i>, <br>') . "', '" . $fid . "', '" . $daet . "', '" . time() . "', '0', '" . $_GET['board'] . "', '" . $daet . "')";mysql_query($sqlu);$sqlne = "UPDATE `up_topics` SET `time` = '" . time() . "' WHERE `id` = '" . $_GET['topic'] . "'";mysql_query($sqlne);$daet = date("m/d/Y h:i:s A");$sqlee = "UPDATE `up_topics` SET `daet` = '" . $daet . "' WHERE `id` = '" . $_GET['topic'] . "'";mysql_query($sqlee);?><meta http-equiv="refresh" content="0;url=showtopics.php?board=<?php echo($_GET['board']); ?>"><?}if ($_POST['topicf'] or $_POST['message']) {//$fark = strip_tags($_POST['message']),'<b>, <u>, <i>')$fark = nl2br(strip_tags(htmlentities($_POST['message'], ENT_QUOTES)));?><div class="messagetop"><b>Topic Title:</b> <?php echo(stripslashes(htmlspecialchars(strip_tags(substr($_POST['topicf'], 0 ,80))))); ?></div><div class="message"><?php echo(stripslashes($fark)); ?></div><br><form name="o" method="POST" action="postmsg.php?board=<?php echo($_GET['board']); ?>&take=1"><input type="hidden" name="rpost" value="<?php echo($fark); ?>"><input type="hidden" name="rtitle" value="<?php echo(stripslashes(htmlspecialchars(strip_tags(substr($_POST['topicf'], 0 ,80))))); ?>"><input type="hidden" name="yes" value="1"><input type="submit" value="Post Message"></form><br><br><?}$sqlb = "SELECT * FROM `up_boards` WHERE `id` = '" . $_GET['board'] . "'";$resultb = mysql_query($sqlb) or die(mysql_error());while ($row = mysql_fetch_array($resultb)) { $bid = $row['id'];}if ($bid != $_GET['board']) {?> <meta http-equiv="refresh" content="0;url=index.php"> <?} else {?>TOS Stolen From Llamaguy: Don't be an asshat. I will ban<br><form name="t" method="POST" action="postmsg.php?board=<?php echo($_GET['board']); ?>&take=0"><b>Create New Topic:</b><br>Limit is 80 characters.<br><input type="text" name="topicf" value="" maxlength="80" size="60"><br><br><b>Your Message</b><br><textarea cols=60 rows=20 name="message" WRAP="virtual">---<?php echo($signature); ?></textarea><br><br><input type="hidden" name="yes" value="0"><input type="submit" value="Preview Message"></form><?}} else {if ($_POST['rpost'] and $_GET['take'] == 1) {$sqlb = "SELECT * FROM `up_topics` WHERE `id` = '" . $_GET['topic'] . "' AND `board` = '" . $_GET['board'] . "'";$resultb = mysql_query($sqlb) or die(mysql_error());while ($row = mysql_fetch_array($resultb)) { $ttitle = $row['title'];$tid = $row['id'];$tboard = $row['board'];$tclosed = $row['closed'];}if ($tid != $_GET['topic'] or $tclosed == 1) {echo("rofl kenman stop haxing!!!!");} else {$daet = date("m/d/Y h:i:s A");$sqlu = "INSERT INTO `up_posts` (`id`, `uid`, `topic`, `board`, `text`, `date`, `deleted`) VALUES ('', '" . $fid . "', '" . $_GET['topic'] . "', '" . $_GET['board'] . "', '" . strip_tags($_POST['rpost'],'<b>, <u>, <i>, <br>') . "', '" . $daet . "', '0')";mysql_query($sqlu);$sqlne = "UPDATE `up_topics` SET `time` = '" . time() . "' WHERE `id` = '" . $_GET['topic'] . "'";mysql_query($sqlne);$daet = date("m/d/Y h:i:s A");$sqlee = "UPDATE `up_topics` SET `daet` = '" . $daet . "' WHERE `id` = '" . $_GET['topic'] . "'";mysql_query($sqlee);?><meta http-equiv="refresh" content="0;url=showmessages.php?board=<?php echo($_GET['board']); ?>&topic=<?php echo($_GET['topic']); ?>"><?}}if ($_POST['message']) {//$fark = strip_tags($_POST['message']),'<b>, <u>, <i>')$fark = nl2br(strip_tags(htmlentities($_POST['message'], ENT_QUOTES)));?><div class="message"><?php echo(stripslashes(strip_tags($fark,'<b>, <u>, <i>, <br>'))); ?></div><br><form name="o" method="POST" action="postmsg.php?board=<?php echo($_GET['board']); ?>&topic=<?php echo($_GET['topic']); ?>&take=1"><input type="hidden" name="rpost" value="<?php echo($fark); ?>"><input type="hidden" name="yes" value="1"><input type="submit" value="Post Message"></form><br><br><?}$sqlb = "SELECT * FROM `up_topics` WHERE `id` = '" . $_GET['topic'] . "' AND `board` = '" . $_GET['board'] . "'";$resultb = mysql_query($sqlb) or die(mysql_error());while ($row = mysql_fetch_array($resultb)) { $ttitle = $row['title'];$tid = $row['id'];$tboard = $row['board'];$tclosed = $row['closed'];}if ($tid != $_GET['topic'] or $tboard != $_GET['board'] or $tclosed == 1) {?> <meta http-equiv="refresh" content="0;url=index.php"> <?} else {?>TOS Stolen From Llamaguy: Don't be an asshat. I will ban<br>Replying to: <a href="showmessages.php?board=<?php echo($_GET['board']); ?>&topic=<?php echo($_GET['topic']); ?>"><?php echo($ttitle); ?></a><form name="t" method="POST" action="postmsg.php?board=<?php echo($_GET['board']); ?>&topic=<?php echo($_GET['topic']); ?>&take=0"><br><br><b>Your Message</b><br><textarea cols=60 rows=20 name="message" WRAP="virtual">---<?php echo($signature); ?></textarea><br><br><input type="hidden" name="yes" value="0"><input type="submit" value="Preview Message"></form><?}}}}?>