VegasKiller

Hello I am trying to protect my login sequence from sql injections but am getting an error. I have changed this: if ($_POST['username'] == "" || $_POST['password'] == "") {   To This: if mysql_real_escape_string($_POST['username'] == "")) || mysql_real_escape_string($_POST['password'] == "")) {   and m getting this error: Parse error: syntax error, unexpected T_STRING, expecting '(' in /verify.php on line 3 Can someone please help me with this, Line 3 is the long line.

Yes Instant exsists. I have it on my game. You will need to set up the IN so Paypal can talk to your server and know what to give the user. But as illusions said above. Anyone can opt out of their payment leaving you screwed whilst they get the benefit they did not pay for.

OK so I have deleted the lines, and have downloaded the nbbc. I uploaded the folder to my public html folder. do i leave the php file in its original folder, or do i place it into the pub html folder? as i am currently getting this error. Parse error: syntax error, unexpected '}' in /home/ab1074/public_html/forums.php on line 5

Sorry I am a total NOOB. What part am I taking out Could you be more specific as to what lines. Thank you.

Ok, Thats the entire script. It was free.

if(!$topic['ft_locked']) { $u=$ir['username']; if($ir['ul_color']) { $uname="<font color='{$ir['ul_color']}'>"; if($ir['ul_isbold']) { $uname.="[b]"; } $uname.=$ir['username']; if($ir['ul_isbold']) { $uname.="[/b]"; } $uname.="</font>"; $u=$uname; } else if($ir['donatordays']) { $u = "<font color=red>{$ir['username']}</font>"; } $u=mysql_escape($u); $db->query("INSERT INTO forum_posts VALUES('', {$_GET['reply']}, {$forum['ff_id']}, $userid, '$u', unix_timestamp(), '{$_POST['fp_subject']}', '{$_POST['fp_text']}', 0, '', 0, 0)") or die(mysql_error()); $db->query("UPDATE forum_topics SET ft_last_id=$userid, ft_last_name='$u', ft_last_time=unix_timestamp(), ft_posts=ft_posts+1 WHERE ft_id={$_GET['reply']}"); $db->query("UPDATE forum_forums SET ff_lp_time=unix_timestamp(), ff_posts=ff_posts+1, ff_lp_poster_id=$userid, ff_lp_poster_name='$u', ff_lp_t_id={$_GET['reply']}, ff_lp_t_name='{$topic['ft_name']}' WHERE ff_id={$forum['ff_id']}"); $db->query("UPDATE users SET posts=posts+1 WHERE userid=$userid"); print "[b]Reply Posted![/b]<hr /> "; $_GET['lastpost']=1; $_GET['viewtopic']=$_GET['reply']; viewtopic(); } else { print " [i]This topic has been locked, you cannot reply to it.[/i] [url='forums.php?viewtopic={$_GET[']Back[/url]"; } } function newtopicform() { global $ir, $c, $userid, $h, $bbc, $db; $q=$db->query("SELECT * FROM forum_forums WHERE ff_id={$_GET['forum']}"); $r=$db->fetch_row($q); if(($r['ff_auth']=='gang' AND $ir['gang'] != $r['ff_owner']) OR ($r['ff_auth'] == 'staff' AND $ir['user_level'] < 2)) { print "You have no permission to view this forum. > [url='forums.php']Back[/url]"; $h->endpage(); exit; } print <<<EOF <big>[url='forums.php']Forums Home[/url] >> [url='forums.php?viewforum={$_GET[']{$r['ff_name']}[/url] >> New Topic Form</big> <form action='forums.php?act=newtopic&forum={$_GET['forum']}' method='post'> <table cellspacing='1' class='table' width='80%' border='1'> <tr> <td align=right>Topic Name:</td> <td align=left><input type='text' name='ft_name' value='' /></td> </tr> <tr> <td align=right>Topic Description:</td> <td align=left><input type='text' name='ft_desc' value='' /></td> </tr> <tr> <td align=right>Topic Text:</td> <td align=left><textarea rows='8' cols='45' name='fp_text'></textarea></td> </tr> <tr> <th colspan=2><input type='submit' value='Post Topic' /></th> </tr> </table> EOF; } function newtopic() { global $ir, $c, $userid, $h, $bbc, $db; $q=$db->query("SELECT * FROM forum_forums WHERE ff_id={$_GET['forum']}"); $r=$db->fetch_row($q); if(($r['ff_auth']=='gang' AND $ir['gang'] != $r['ff_owner']) OR ($r['ff_auth'] == 'staff' AND $ir['user_level'] < 2)) { print "You have no permission to view this forum. > [url='forums.php']Back[/url]"; $h->endpage(); exit; } $u=$ir['username']; if($ir['ul_color']) { $uname="<font color='{$ir['ul_color']}'>"; if($ir['ul_isbold']) { $uname.="[b]"; } $uname.=$ir['username']; if($ir['ul_isbold']) { $uname.="[/b]"; } $uname.="</font>"; $u=$uname; } else if($ir['donatordays']) { $u = "<font color=red>{$ir['username']}</font>"; } $u=mysql_escape($u); $db->query("INSERT INTO forum_topics VALUES('', {$_GET['forum']}, '{$_POST['ft_name']}', '{$_POST['ft_desc']}', 0, $userid, '$u', unix_timestamp(), 0, '', 0, 0, 0)"); $i=$db->insert_id(); $db->query("INSERT INTO forum_posts VALUES('', {$i}, {$r['ff_id']}, $userid, '$u', unix_timestamp(), '{$_POST['ft_desc']}', '{$_POST['fp_text']}', 0, '', 0, 0)") or die(mysql_error()); $db->query("UPDATE forum_topics SET ft_last_id=$userid, ft_last_name='$u', ft_last_time=unix_timestamp(), ft_posts=ft_posts+1 WHERE ft_id={$i}"); $db->query("UPDATE forum_forums SET ff_lp_time=unix_timestamp(), ff_posts=ff_posts+1, ff_topics=ff_topics+1, ff_lp_poster_id=$userid, ff_lp_poster_name='$u', ff_lp_t_id={$i}, ff_lp_t_name='{$_POST['ft_name']}' WHERE ff_id={$r['ff_id']}"); $db->query("UPDATE users SET posts=posts+1 WHERE userid=$userid"); print "[b]Topic Posted![/b]<hr /> "; $_GET['viewtopic']=$i; viewtopic(); } function emptyallforums() { global $ir, $c, $userid, $h, $bbc, $db; $db->query("update forum_forums set ff_lp_time=0, ff_lp_poster_id=0, ff_lp_poster_name='N/A', ff_lp_t_id=0, ff_lp_t_name='N/A',ff_posts=0, ff_topics=0"); $db->query("truncate forum_topics"); $db->query("truncate forum_posts"); } function quote() { global $ir, $c, $userid, $h, $bbc, $db; $q=$db->query("SELECT * FROM forum_topics WHERE ft_id={$_GET['viewtopic']}"); $topic=$db->fetch_row($q); $q2=$db->query("SELECT * FROM forum_forums WHERE ff_id={$topic['ft_forum_id']}"); $forum=$db->fetch_row($q2); if(($forum['ff_auth']=='gang' AND $ir['gang'] != $forum['ff_owner']) OR ($forum['ff_auth'] == 'staff' AND $ir['user_level'] < 2)) { print "You have no permission to reply to this topic. > [url='forums.php']Back[/url]"; $h->endpage(); exit; } print "<big>[url='forums.php']Forums Home[/url] >> [url='forums.php?viewforum={$forum[']{$forum['ff_name']}[/url] >> [url='forums.php?viewtopic={$_GET[']{$topic['ft_name']}[/url] >> Quoting a Post</big> "; if(!$topic['ft_locked']) { print <<<EOF [b]Post a reply to this topic:[/b] <form action='forums.php?reply={$topic['ft_id']}' method='post'> <table cellspacing='1' class='table' width='80%' border='1'> <tr> <td align='right'>Subject:</td> <td align='left'><input type='text' name='fp_subject' /></td> </tr> <tr> <td align='right'>Post:</td> <td align='left'><textarea rows='7' cols='40' name='fp_text'> </textarea></td> </tr> <tr> <th colspan='2'><input type='submit' value='Post Reply'></th> </tr> </table> </form> EOF; } else { print " [i]This topic has been locked, you cannot reply to it.[/i] [url='forums.php?viewtopic={$_GET[']Back[/url]"; } } function edit() { global $ir, $c, $userid, $h, $bbc, $db; $q=$db->query("SELECT * FROM forum_topics WHERE ft_id={$_GET['topic']}"); $topic=$db->fetch_row($q); $q2=$db->query("SELECT * FROM forum_forums WHERE ff_id={$topic['ft_forum_id']}"); $forum=$db->fetch_row($q2); if(($forum['ff_auth']=='gang' AND $ir['gang'] != $forum['ff_owner']) OR ($forum['ff_auth'] == 'staff' AND $ir['user_level'] < 2)) { print "You have no permission to view this forum. > [url='forums.php']Back[/url]"; $h->endpage(); exit; } $q3=$db->query("SELECT * FROM forum_posts WHERE fp_id={$_GET['post']}"); $post=$db->fetch_row($q3); if(!($ir['user_level'] > 1 || $ir['userid']==$post['fp_poster_id'])) { print "You have no permission to edit this post. > [url='forums.php']Back[/url]"; $h->endpage(); exit; } print "<big>[url='forums.php']Forums Home[/url] >> [url='forums.php?viewforum={$forum[']{$forum['ff_name']}[/url] >> [url='forums.php?viewtopic={$_GET[']{$topic['ft_name']}[/url] >> Editing a Post</big> "; print <<<EOF <form action='forums.php?act=editsub&topic={$topic['ft_id']}&post={$_GET['post']}' method='post'> <table cellspacing='1' class='table' width='80%' border='1'> <tr> <td align='right'>Subject:</td> <td align='left'><input type='text' name='fp_subject' value='{$post['fp_subject']}' /></td> </tr> <tr> <td align='right'>Post:</td> <td align='left'><textarea rows='7' cols='40' name='fp_text'>{$post['fp_text']} </textarea></td> </tr> <tr> <th colspan='2'><input type='submit' value='Edit Post'></th> </tr> </table> </form> EOF; } function editsub() { global $ir, $c, $userid, $h, $bbc, $db; $q=$db->query("SELECT * FROM forum_topics WHERE ft_id={$_GET['topic']}"); $topic=$db->fetch_row($q); $q2=$db->query("SELECT * FROM forum_forums WHERE ff_id={$topic['ft_forum_id']}"); $forum=$db->fetch_row($q2); if(($forum['ff_auth']=='gang' AND $ir['gang'] != $forum['ff_owner']) OR ($forum['ff_auth'] == 'staff' AND $ir['user_level'] < 2)) { print "You have no permission to view this forum. > [url='forums.php']Back[/url]"; $h->endpage(); exit; } $q3=$db->query("SELECT * FROM forum_posts WHERE fp_id={$_GET['post']}"); $post=$db->fetch_row($q3); if(!($ir['user_level'] > 1 || $ir['userid']==$post['fp_poster_id'])) { print "You have no permission to edit this post. > [url='forums.php']Back[/url]"; $h->endpage(); exit; } $db->query("UPDATE forum_posts SET fp_subject='{$_POST['fp_subject']}', fp_text='{$_POST['fp_text']}', fp_editor_id=$userid, fp_editor_name='{$ir['username']}', fp_editor_time=unix_timestamp(), fp_edit_count=fp_edit_count+1 WHERE fp_id={$_GET['post']}"); print "[b]Post Edited![/b]<hr /> "; $_GET['viewtopic']=$_GET['topic']; viewtopic(); } function recache_forum($forum) { global $ir, $c, $userid, $h, $bbc, $db; print "Recaching forum ID $forum ... "; $q=$db->query("SELECT p.*,t.* FROM forum_posts p LEFT JOIN forum_topics t ON p.fp_topic_id=t.ft_id WHERE p.fp_forum_id=$forum ORDER BY p.fp_time DESC LIMIT 1"); if(!$db->num_rows($q)) { $db->query("update forum_forums set ff_lp_time=0, ff_lp_poster_id=0, ff_lp_poster_name='N/A', ff_lp_t_id=0, ff_lp_t_name='N/A',ff_posts=0, ff_topics=0 where ff_id={$forum}"); print " ... Done"; } else { $r=$db->fetch_row($q); $tn=mysql_escape($r['ft_name']); $pn=mysql_escape($r['fp_poster_name']); $posts=$db->num_rows($db->query("SELECT fp_id FROM forum_posts WHERE fp_forum_id=$forum")); $topics=$db->num_rows($db->query("SELECT ft_id FROM forum_topics WHERE ft_forum_id=$forum")); $db->query("update forum_forums set ff_lp_time={$r['fp_time']}, ff_lp_poster_id={$r['fp_poster_id']}, ff_lp_poster_name='$pn', ff_lp_t_id={$r['ft_id']}, ff_lp_t_name='$tn',ff_posts=$posts, ff_topics=$topics where ff_id={$forum}"); print " ... Done "; } } function recache_topic($forum) { global $ir, $c, $userid, $h, $bbc, $db; print "Recaching topic ID $forum ... "; $q=$db->query("SELECT p.* FROM forum_posts p WHERE p.fp_topic_id=$forum ORDER BY p.fp_time DESC LIMIT 1"); if(!$db->num_rows($q)) { $db->query("update forum_topics set ft_last_id=0, ft_last_time=0, ft_last_name='N/A',ft_posts=0 where ft_id={$forum}"); print " ... Done"; } else { $r=$db->fetch_row($q); $pn=mysql_escape($r['fp_poster_name']); $posts=$db->num_rows($db->query("SELECT fp_id FROM forum_posts WHERE fp_topic_id=$forum")); $db->query("update forum_topics set ft_last_id={$r['fp_poster_id']}, ft_last_time={$r['fp_time']}, ft_last_name='$pn',ft_posts=$posts where ft_id={$forum}"); print " ... Done "; } } function move() { global $ir, $c, $userid, $h, $bbc, $db; if($ir['user_level'] < 2) { die(""); } $q=$db->query("SELECT * FROM forum_topics WHERE ft_id={$_GET['topic']}"); $topic=$db->fetch_row($q); $q2=$db->query("SELECT * FROM forum_forums WHERE ff_id={$_POST['forum']}"); $forum=$db->fetch_row($q2); $db->query("UPDATE forum_topics SET ft_forum_id={$_POST['forum']} WHERE ft_id={$_GET['topic']}"); $db->query("UPDATE forum_posts SET fp_forum_id={$_POST['forum']} WHERE fp_topic_id={$_GET['topic']}"); print "Topic moved... "; stafflog_add("Moved Topic {$topic['ft_name']} to {$forum['ff_name']}"); recache_forum($topic['ft_forum_id']); recache_forum($_POST['forum']); } function lock() { global $ir, $c, $userid, $h, $bbc, $db; if($ir['user_level'] < 2) { die(""); } $db->query("UPDATE forum_topics SET ft_locked=-ft_locked+1 WHERE ft_id={$_GET['topic']}"); $q=$db->query("SELECT * FROM forum_topics WHERE ft_id={$_GET['topic']}"); $r=$db->fetch_row($q); print "[b]{$r['ft_name']}[/b]'s lock status changed, if it was unlocked, it will now be locked, otherwise, it will be unlocked."; if($r['ft_locked']==0) { stafflog_add("Unlocked Topic {$r['ft_name']}"); } else { stafflog_add("Locked Topic {$r['ft_name']}"); } } function pin() { global $ir, $c, $userid, $h, $bbc, $db; if($ir['user_level'] < 2) { die(""); } $db->query("UPDATE forum_topics SET ft_pinned=-ft_pinned+1 WHERE ft_id={$_GET['topic']}"); $q=$db->query("SELECT * FROM forum_topics WHERE ft_id={$_GET['topic']}"); $r=$db->fetch_row($q); print "[b]{$r['ft_name']}[/b]'s pin status changed, if it was unpinned, it will now be pinned, otherwise, it will be unpinned."; if($r['ft_pinned']==0) { stafflog_add("Unpinned Topic {$r['ft_name']}"); } else { stafflog_add("Pinned Topic {$r['ft_name']}"); } } function delepost() { global $ir, $c, $userid, $h, $bbc, $db; if($ir['user_level'] < 2) { die(""); } $q3=$db->query("SELECT * FROM forum_posts WHERE fp_id={$_GET['post']}"); $post=$db->fetch_row($q3); $q=$db->query("SELECT * FROM forum_topics WHERE ft_id={$post['fp_topic_id']}"); $topic=$db->fetch_row($q); $u=mysql_escape($post['fp_poster_name']); $db->query("DELETE FROM forum_posts WHERE fp_id={$post['fp_id']}"); print "Post deleted... "; recache_topic($post['fp_topic_id']); recache_forum($post['fp_forum_id']); stafflog_add("Deleted post ({$post['fp_subject']}) in {$topic['ft_name']}"); } function deletopic() { global $db; $q=$db->query("SELECT * FROM forum_topics WHERE ft_id={$_GET['topic']}"); $topic=$db->fetch_row($q); $db->query("DELETE FROM forum_topics WHERE ft_id={$_GET['topic']}"); $db->query("DELETE FROM forum_posts WHERE fp_topic_id={$_GET['topic']}"); print "Deleting topic... Done "; recache_forum($topic['ft_forum_id']); stafflog_add("Deleted topic {$topic['ft_name']}"); } $h->endpage(); ?>

if($_GET['viewtopic'] and $_GET['act'] != 'quote') { $_GET['act']='viewtopic'; } if($_GET['viewforum']) { $_GET['act']='viewforum'; } if($_GET['reply']) { $_GET['act']='reply'; } if($_GET['empty']==1 && $_GET['code']=='kill' && $_SESSION['owner']) { emptyallforums(); } switch($_GET['act']) { case 'viewforum': viewforum(); break; case 'viewtopic': viewtopic(); break; case 'reply': reply(); break; case 'newtopicform': newtopicform(); break; case 'newtopic': newtopic(); break; case 'quote': quote(); break; case 'edit': edit(); break; case 'move': move(); break; case 'editsub': editsub(); break; case 'lock': lock(); break; case 'delepost': delepost(); break; case 'deletopic': deletopic(); break; case 'pin': pin(); break; case 'recache': recache_forum($_GET['forum']); break; default: idx(); break; } function idx() { global $ir, $c, $userid, $h, $bbc, $db; $q=$db->query("SELECT * FROM forum_forums WHERE ff_auth='public' ORDER BY ff_id ASC") or die(mysql_error()); print "<table class='table' width='100%' border='1' cellspacing='1'> <tr><th>Forum</th> <th>Posts</th> <th>Topics</th> <th>Last Post</th> </tr>\n"; while($r=$db->fetch_row($q)) { $t=date('F j Y, g:i:s a',$r['ff_lp_time']); print "<tr> <td align='center'>[url='forums.php?viewforum={$r[']{$r['ff_name']}[/url] [size="1"]{$r['ff_desc']}[/size]</td> <td align='center'>{$r['ff_posts']}</td> <td align='center'>{$r['ff_topics']}</td> <td align='center'>$t In: [url='forums.php?viewtopic={$r[']{$r['ff_lp_t_name']}[/url] By: [url='viewuser.php?u={$r[']{$r['ff_lp_poster_name']}[/url] </td> </tr>\n"; } print "\n</table>"; if($ir['user_level'] <> 1) { print "<hr /><a name='staff'><h3>Staff-Only Forums</h3></a><hr />"; $q=$db->query("SELECT * FROM forum_forums WHERE ff_auth='staff' ORDER BY ff_id ASC") or die(mysql_error()); print "<table cellspacing='1' class='table' width='100%' border='1'> <tr><th>Forum</th> <th>Posts</th> <th>Topics</th> <th>Last Post</th> </tr>\n"; while($r=$db->fetch_row($q)) { $t=date('F j Y, g:i:s a',$r['ff_lp_time']); print "<tr> <td align='center'>[url='forums.php?viewforum={$r[']{$r['ff_name']}[/url] [size="1"]{$r['ff_desc']}[/size]</td> <td align='center'>{$r['ff_posts']}</td> <td align='center'>{$r['ff_topics']}</td> <td align='center'>$t In: [url='forums.php?viewtopic={$r[']{$r['ff_lp_t_name']}[/url] By: [url='viewuser.php?u={$r[']{$r['ff_lp_poster_name']}[/url] </td> </tr>\n"; } print "\n</table>"; } } function viewforum() { global $ir, $c, $userid, $h, $bbc, $db; $q=$db->query("SELECT * FROM forum_forums WHERE ff_id={$_GET['viewforum']}"); $r=$db->fetch_row($q); if(($r['ff_auth']=='gang' AND $ir['gang'] != $r['ff_owner'] AND $ir["user_level"] < 2) OR ($r['ff_auth'] == 'staff' AND $ir['user_level'] < 2)) { print "You have no permission to view this forum. > [url='forums.php']Back[/url]"; $h->endpage(); exit; } if($_GET['viewforum'] <> 1 OR $ir['user_level']==2) { $ntl=" [[url='forums.php?act=newtopicform&forum={$_GET[']New Topic[/url]]"; } else { $ntl=""; } print "<big>[url='forums.php']Forums Home[/url] >> [url='forums.php?viewforum={$_GET[']{$r['ff_name']}[/url]$ntl</big> <table cellspacing='1' class='table' width='100%' border='1'> <tr> <th>Topic</th> <th>Posts</th> <th>Started</th> <th>Last Post</th></tr>\n"; $q=$db->query("SELECT * FROM forum_topics WHERE ft_forum_id={$_GET['viewforum']} ORDER BY ft_pinned DESC, ft_last_time DESC") or die(mysql_error()); while($r2=$db->fetch_row($q)) { $t1=date('F j Y, g:i:s a',$r2['ft_start_time']); $t2=date('F j Y, g:i:s a',$r2['ft_last_time']); if($r2['ft_pinned']) { $pt="[b]Pinned:[/b] "; } else { $pt=""; } if($r2['ft_locked']) { $lt=" [b](Locked)[/b]"; } else { $lt=""; } print "<tr> <td align='center'>$pt[url='forums.php?viewtopic={$r2[']{$r2['ft_name']}[/url]$lt [size="1"]{$r2['ft_desc']}[/size]</td> <td align='center'>{$r2['ft_posts']}</td> <td align='center'>$t1 By: [url='viewuser.php?u={$r2[']{$r2['ft_owner_name']}[/url]</td> <td align='center'>$t2 By: [url='viewuser.php?u={$r2[']{$r2['ft_last_name']}[/url]</td> </tr>\n"; } print "</table>"; } function viewtopic() { global $ir, $c, $userid, $h, $bbc, $db; $precache=array(); $q=$db->query("SELECT * FROM forum_topics WHERE ft_id={$_GET['viewtopic']}"); $topic=$db->fetch_row($q); $q2=$db->query("SELECT * FROM forum_forums WHERE ff_id={$topic['ft_forum_id']}"); $forum=$db->fetch_row($q2); if(($forum['ff_auth']=='gang' AND $ir['gang'] != $forum['ff_owner'] and $ir["user_level"] < 2) OR ($forum['ff_auth'] == 'staff' AND $ir['user_level'] < 2)) { print "You have no permission to view this forum. > [url='forums.php']Back[/url]"; $h->endpage(); exit; } print "<big>[url='forums.php']Forums Home[/url] >> [url='forums.php?viewforum={$forum[']{$forum['ff_name']}[/url] >> [url='forums.php?viewtopic={$_GET[']{$topic['ft_name']}[/url]</big> "; $posts_per_page=20; $posts_topic=$topic['ft_posts']; $pages=ceil($posts_topic/$posts_per_page); $st= ($_GET['st']) ? $_GET['st'] : 0; if($_GET['lastpost']) { $st=($pages-1)*20; } $pst=-20; print "Pages: "; for($i=1;$i<=$pages;$i++) { $pst+=20; print "<a href='forums.php?viewtopic={$topic['ft_id']}&st=$pst'>"; if($pst == $st) { print "[b]"; } print $i; if($pst == $st) { print "[/b]"; } print "</a> "; if($i % 25 == 0) { print " "; } } print " "; if($ir['user_level'] > 1) { print " <form action='forums.php?act=move&topic={$_GET['viewtopic']}' method='post'>[b]Move topic to:[/b] ".forum_dropdown($c, 'forum', -1)."<input type='submit' value='Move' /></form> [url='forums.php?act=pin&topic={$_GET['][img=sticky.jpg][/url][url='forums.php?act=lock&topic={$_GET['][img=lock.jpg][/url][url='forums.php?act=deletopic&topic={$_GET['][img=delete.gif][/url] "; } print " <table cellspacing='1' class='table' width='100%' border='1'>\n"; $q3=$db->query("SELECT * FROM forum_posts WHERE fp_topic_id={$topic['ft_id']} ORDER BY fp_time ASC LIMIT $st, 20"); $no=$st; while($r=$db->fetch_row($q3)) { $qlink="[[url='forums.php?act=quote&viewtopic={$_GET[']Quote Post[/url]]"; if($ir['user_level'] > 1 || $ir['userid']==$r['fp_poster_id']) { $elink="[[url='forums.php?act=edit&post={$r[']Edit Post[/url]]"; } else { $elink=""; } $no++; if($no > 1 and $ir['user_level'] > 1) { $dlink="[[url='forums.php?act=delepost&post={$r[']Delete Post[/url]]"; } else { $dlink=""; } $t=date('F j Y, g:i:s a',$r['fp_time']); if($r['fp_edit_count'] > 0) { $edittext="\n [i]Last edited by [url='viewuser.php?u={$r[']{$r['fp_editor_name']}[/url] at ".date('F j Y, g:i:s a',$r['fp_editor_time']).", edited [b]{$r['fp_edit_count']}[/b] times in total.[/i]"; } else { $edittext=""; } if(!$precache[$r['fp_poster_id']]['userid']) { $membq=$db->query("SELECT * FROM users WHERE userid={$r['fp_poster_id']}"); $memb=$db->fetch_row($membq); $precache[$memb['userid']]=$memb; } else { $memb=$precache[$r['fp_poster_id']]; } $rank=forums_rank($memb['posts']); if($memb['forums_avatar']) { $av="[img={$memb[]"; } else { $av="[img=noav.gif]"; } if(!$memb['forums_signature']) { $memb['forums_signature']="No Signature"; } else {$memb['forums_signature']=$bbc->bbcode_parse($memb['forums_signature']); } $r['fp_text']=$bbc->bbcode_parse($r['fp_text']); print "<tr> <th align='center'>Post #{$no}</th> <th align='center'>Subject: {$r['fp_subject']} Posted at: $t $qlink$elink$dlink</th> </tr> <tr> <td valign=top>[url='viewuser.php?u={$r[']{$r['fp_poster_name']}[/url] [{$r['fp_poster_id']}] $av Level: {$memb['level']}</td> <td valign=top>{$r['fp_text']} {$edittext} ------------------- {$memb['forums_signature']}</td> </tr>"; } print "</table>"; $pst=-20; print "Pages: "; for($i=1;$i<=$pages;$i++) { $pst+=20; print "<a href='forums.php?viewtopic={$topic['ft_id']}&st=$pst'>"; if($pst == $st) { print "[b]"; } print $i; if($pst == $st) { print "[/b]"; } print "</a> "; if($i % 25 == 0) { print " "; } } if(!$topic['ft_locked']) { print <<<EOF [b]Post a reply to this topic:[/b] <form action='forums.php?reply={$topic['ft_id']}' method='post'> <table cellspacing='1' class='table' width='80%' border='1'> <tr> <td align='right'>Subject:</td> <td align='left'><input type='text' name='fp_subject' /></td> </tr> <tr> <td align='right'>Post:</td> <td align='left'><textarea rows='7' cols='40' name='fp_text'></textarea></td> </tr> <tr> <th colspan='2'><input type='submit' value='Post Reply'></th> </tr> </table> </form> EOF; } else { print " [i]This topic has been locked, you cannot reply to it.[/i]"; } } function reply() { global $ir, $c, $userid, $h, $bbc, $db; $q=$db->query("SELECT * FROM forum_topics WHERE ft_id={$_GET['reply']}"); $topic=$db->fetch_row($q); $q2=$db->query("SELECT * FROM forum_forums WHERE ff_id={$topic['ft_forum_id']}"); $forum=$db->fetch_row($q2); if(($forum['ff_auth']=='gang' AND $ir['gang'] != $forum['ff_owner']) OR ($forum['ff_auth'] == 'staff' AND $ir['user_level'] < 2)) { print "You have no permission to reply to this topic. > [url='forums.php']Back[/url]"; $h->endpage(); exit; }

<?php session_start(); $forums=1; class bbcode { var $engine=""; function bbcode() { require "bbcode_engine.php"; $this->engine= new bbcode_engine; $this->engine->cust_tag("/</","<"); $this->engine->cust_tag("/>/",">"); //Since \n and screw up preg, convert them out. $this->engine->cust_tag("/\n/","&nbrlb;"); $this->engine->simple_bbcode_tag("b"); $this->engine->simple_bbcode_tag("i"); $this->engine->simple_bbcode_tag("u"); $this->engine->simple_bbcode_tag("s"); $this->engine->simple_bbcode_tag("sub"); $this->engine->simple_bbcode_tag("sup"); $this->engine->simple_bbcode_tag("big"); $this->engine->simple_bbcode_tag("small"); $this->engine->adv_bbcode_tag("list","ul"); $this->engine->adv_bbcode_tag("olist","ol"); $this->engine->adv_bbcode_tag("item","li"); $this->engine->adv_option_tag("font","font","family"); $this->engine->adv_option_tag("size","font","size"); $this->engine->adv_option_tag("url","a","href"); $this->engine->adv_option_tag("color","font","color"); $this->engine->adv_option_tag("style","span","style"); $this->engine->simp_option_notext("img","src"); $this->engine->simp_bbcode_att("img","src"); $this->engine->cust_tag("/\(c\)/","©"); $this->engine->cust_tag("/\(tm\)/","?"); $this->engine->cust_tag("/\(r\)/","®"); $this->engine->adv_option_tag_em("email","a","href"); $this->engine->adv_bbcode_att_em("email","a","href"); $this->engine->cust_tag("/\[left\](.+?)\[\/left\]/","<div align='left'>\\1</div>"); $this->engine->cust_tag("/\[center\](.+?)\[\/center\]/","<div align='center'>\\1</div>"); $this->engine->cust_tag("/\[right\](.+?)\[\/right\]/","<div align='right'>\\1</div>"); $this->engine->cust_tag("/\(.+?)\[\/quote\]/','<div class='quotetop'>QUOTE(\\1)</div><div class='quotemain'>\\2</div>"); $this->engine->cust_tag("/\[quote\](.+?)\[\/quote\]/","<div class='quotetop'>QUOTE</div><div class='quotemain'>\\1</div>"); $this->engine->cust_tag("/\[code\](.+?)\[\/code\]/","<div class='codetop'>CODE</div><div class='codemain'><code>\\1</code></div>"); $this->engine->cust_tag("/\[codebox\](.+?)\[\/codebox\]/","<div class='codetop'>CODE</div><div class='codemain' style='height:200px;white-space:pre;overflow:auto'>\\1</div>"); $this->engine->cust_tag("/&nbrlb;/"," \n"); } function bbcode_parse($html) { return $this->engine->parse_bbcode($html); } } function strip_html_tags($text) { return preg_replace("/<(.+?)>/is","", $text); } function forums_rank($tp) { if ( $tp < 3 ) { return "#1 Absolute Newbie"; } else if ( $tp < 7 ) { return "#2 Newbie"; } else if ( $tp < 12 ) { return "#3 Beginner"; } else if ( $tp < 18 ) { return "#4 Not Experienced"; } else if ( $tp < 25 ) { return "#5 Rookie"; } else if ( $tp < 50 ) { return "#6 Average"; } else if ( $tp < 100 ) { return "#7 Good"; } else if ( $tp< 200 ) { return "#8 Very Good"; } else if ( $tp < 350 ) { return "#9 Greater Than Average"; } else if ( $tp < 500 ) { return "#10 Experienced"; } else if ( $tp < 750 ) { return "#11 Highly Experienced"; } else if ( $tp < 1200 ) { return "#12 Honoured"; } else if ( $tp < 1800 ) { return "#13 Highly Hounoured"; } else if ( $tp < 2500 ) { return "#14 Respect King"; } else if ( $tp < 5000) { return "#15 True Champion"; } } require "global_func.php"; $bbc = new bbcode; print "<h3>Forums</h3><hr />"; if($ir['forumban']) { die("<font color=red><h3>! ERROR</h3> You have been forum banned for {$ir['forumban']} days. [b]Reason: {$ir['fb_reason']}</font>[/b]"); } $_GET['viewforum']=(int) $_GET['viewforum'];

Rasheeds did, Sorry Blade :). Can this thread please be deleted as the error is now fixed.

Thank you, All fixed.

I tried it with ;, Still getting the line 137 error.

Nah still getting the same error as before.

No it i still not updating to the adapps table.

Thank you again, Error gone, Now I am getting an error I have never seen in 3 years of working with PHP. Error: Fatal error: Cannot break/continue 1 level in /home/ab1074/public_html/bbcode_engine.php on line 137   break; case 'deletopic': deletopic(); break; case 'pin': pin(); break; Line 137: case 'recache': recache_forum($_GET['forum']); break; default: idx(); break; } function idx() {

Ty, I updated it to your fix :)

<td align='left'><input type='text' name='fp_subject' /></td> </tr> <tr> <td align='right'>Post:</td> line 488 : <td align='left'><textarea rows='7' cols='40' name='fp_text'>[8={$_GET['quotename']}]{$_GET['quotetext']}[/8] </textarea></td> </tr> <tr> <th colspan='2'><input type='submit' value='Post Reply'></th> </tr> </table> </form>

Thank you the error is gone, Now i am getting this error: Error: Parse error: syntax error, unexpected '"', expecting ']' in /home/ab1074/public_html/forums.php on line 488 Line 488: <td align='left'><textarea rows='7' cols='40' name='fp_text'>[*={$_GET['quotename']}]{$_GET['quotetext']}[/8]

Hi I have made an ad application process for my ads and when the user clicks submit, it is not updating adapps table in my database. Please help.

I have an error on Line 42 in my forums script, Can someone help me please. Line 42 $this->engine->cust_tag("/\

Forum Update Error   I am getting the same error. Fix anyone?

It's Getting There Hi Illusions. I updated your code to the script. This is what we are getting . The options starting at friendly to district should come down on the right side of the function stuff. like the left side menu. then the bottom stuff lik the sig and staff notes should stay on the bottom but in the table above the footer. also when i click any of the wall, info, videos etc, i get a invalid use of file error. When we click any of thm, we want their respective page to show under the wall, video, etc link buttons. pls hlp, we almost have this working :)

Did what you said Illusions, now have this error.   Fatal error: Call to undefined function start_new_func() on line 325   default: start_new_func(); break; } 325 is the start new func line

Dude, I am new to this forum, There is like 1000 sections, I dont know where the hell to post anything, you guys need to lower the amount of areas and make it more organized.

I add a } before the end pag at the bottom and the error is gone but i get a new error. Fatal error: Call to undefined function start_new_func() in /home/ab1074/public_html/viewuser.php on line 324 323 default: 324 start_new_func(); 325 break;

Ok took it out, now getting this error. Yes i am a noob. Parse error: syntax error, unexpected $end in /home/ab1074/public_html/viewuser.php on line 452 which is last line of the page.