Re: [mccode] Advanced Warning System
Wow this is a first... Someone made a mistake and I know how to fix it =)
include 'globals.php';
$is=$db->query("SELECT u.*,us.* FROM users u LEFT JOIN userstats us ON u.userid=us.userid WHERE u.userid=$userid") or die(mysql_error());
$ir=mysql_fetch_array($is);
if($ir['user_level'] < 2)
{
die("Staff Only!");
}
switch($_GET['action'])
{
case 'add': addwarning(); break;
case 'addsub': addwarning2(); break;
case 'del': deletewarning(); break;
case 'edit': editwarning(); break;
case 'edit2': editwarning2(); break;
default: index(); break;
}
function index()
{
global $ir,$h,$db,$userid;
print "<h3>Viewing Warnings For ID: <a href=viewuser.php?u={$_GET['user']}>{$_GET['user']}</a></h3>
";
$q=$db->query("SELECT w.*,u.* FROM warnings w LEFT JOIN users u ON w.warner=u.userid WHERE w.user={$_GET['user']} ORDER BY w.time DESC");
print "<center><font color=red><h4>Total Warnings: ".mysql_num_arrays($q)."
</h4>
[<a href=warnings.php?action=add&userid={$_GET['user']}>Add Warning</a>]
<table width=90% border=1 align=center><tr><tr style='background: gray'><td>Warned By:</td><td width=40%>Reason</td><td>Date</td><td>Links</td></tr>";
while($r=mysql_fetch_array($q))
{
$warned=date('F j, Y, g:i:s a',$r['time']);
print "<tr><td><a href=viewuser.php?u={$r['userid']}>{$r['username']}</a></td><td>{$r['warnedfor']}</td><td>$warned</td><td>";
if($ir['userid'] == 1)
{
print "[<a href=warnings.php?action=del&ID={$r['id']}>Remove</a>] ";
}
if($ir['warner'] == $userid || $userid == 1)
{
print "[<a href=warnings.php?action=edit&ID={$r['id']}>Edit</a>]";
}
print "</td></tr>";
}}
function addwarning()
{
global $ir,$h,$db,$userid;
print "<form action=warnings.php?action=addsub method=post>
<input style='visibility: hidden' name=user value={$_GET['userid']}>
Reason:
<textarea rows=7 cols=30 name=reason></textarea>
<input type=submit value='Add warning'></form>";
}
function addwarning2()
{
global $ir,$h,$db,$userid;
$_POST['user']=($_POST['user']);
$_POST['reason']=($_POST['reason']);
$db->query("INSERT INTO warnings VALUES ('','{$_POST['user']}','{$_POST['reason']}','$userid',unix_timestamp())");
$checkfed=$db->query("SELECT * FROM warnings WHERE user='{$_POST['user']}'");
if(mysql_num_arrays($checkfed) > 5)
{
$db->query("UPDATE users SET fedjail=1 WHERE userid='{$_POST['user']}'");
$db->query("INSERT INTO fedjail VALUES('','{$_POST['user']}','300','$userid','Reached 6 warnings in game. Account jailed.')");
}
print "Warning Added!
[*]<a href=viewuser.php?u={$_POST['user']}>Back to users profile</a>";
}
function deletewarning()
{
global $ir,$h,$db,$userid;
if($ir['userid'] != 1)
{
die("Owner Only");}
$db->query("DELETE FROM warnings WHERE id={$_GET['ID']}");
print "Warning Deleted";
}
function editwarning()
{
global $ir,$h,$db,$userid;
$target=$_GET['ID'];
$edit=$db->query("SELECT * FROM warnings WHERE id='$target'");
while($r=mysql_fetch_array($edit))
{
if($r['warner'] != $userid || $userid != 1)
{
die("You never set this warning, therefore cannot edit it");
}
print "<h3>Edit Warning</h3>
<form action=warnings.php?action=edit2 method=post>
<input style='visibility: hidden;' name=id value=$target>
<textarea rows=7 cols=30 name=reason>{$r['warnedfor']}</textarea>
<input type=submit value='Edit Warning'></form>";
}
}
function editwarning2()
{
global $ir,$h,$db,$userid;
$db->query("UPDATE warnings SET warnedfor={$_POST['reason']} WHERE id={$_POST['id']}");
print "Warning Updated.
[*]<a href=index.php>Home</a>";
}
?>
Should be:
<?php
include 'globals.php';
$is=$db->query("SELECT u.*,us.* FROM users u LEFT JOIN userstats us ON u.userid=us.userid WHERE u.userid=$userid") or die(mysql_error());
$ir=mysql_fetch_array($is);
if($ir['user_level'] < 2)
{
die("Staff Only!");
}
switch($_GET['action'])
{
case 'add': addwarning(); break;
case 'addsub': addwarning2(); break;
case 'del': deletewarning(); break;
case 'edit': editwarning(); break;
case 'edit2': editwarning2(); break;
default: index(); break;
}
function index()
{
global $ir,$h,$db,$userid;
print "<h3>Viewing Warnings For ID: <a href=viewuser.php?u={$_GET['user']}>{$_GET['user']}</a></h3>
";
$q=$db->query("SELECT w.*,u.* FROM warnings w LEFT JOIN users u ON w.warner=u.userid WHERE w.user={$_GET['user']} ORDER BY w.time DESC");
print "<center><font color=red><h4>Total Warnings: ".mysql_num_arrays($q)."
</h4>
[<a href=warnings.php?action=add&userid={$_GET['user']}>Add Warning</a>]
<table width=90% border=1 align=center><tr><tr style='background: gray'><td>Warned By:</td><td width=40%>Reason</td><td>Date</td><td>Links</td></tr>";
while($r=mysql_fetch_array($q))
{
$warned=date('F j, Y, g:i:s a',$r['time']);
print "<tr><td><a href=viewuser.php?u={$r['userid']}>{$r['username']}</a></td><td>{$r['warnedfor']}</td><td>$warned</td><td>";
if($ir['userid'] == 1)
{
print "[<a href=warnings.php?action=del&ID={$r['id']}>Remove</a>] ";
}
if($ir['warner'] == $userid || $userid == 1)
{
print "[<a href=warnings.php?action=edit&ID={$r['id']}>Edit</a>]";
}
print "</td></tr>";
}}
function addwarning()
{
global $ir,$h,$db,$userid;
print "<form action=warnings.php?action=addsub method=post>
<input style='visibility: hidden' name=user value={$_GET['userid']}>
Reason:
<textarea rows=7 cols=30 name=reason></textarea>
<input type=submit value='Add warning'></form>";
}
function addwarning2()
{
global $ir,$h,$db,$userid;
$_POST['user']=($_POST['user']);
$_POST['reason']=($_POST['reason']);
$db->query("INSERT INTO warnings VALUES ('','{$_POST['user']}','{$_POST['reason']}','$userid',unix_timestamp())");
$checkfed=$db->query("SELECT * FROM warnings WHERE user='{$_POST['user']}'");
if(mysql_num_arrays($checkfed) > 5)
{
$db->query("UPDATE users SET fedjail=1 WHERE userid='{$_POST['user']}'");
$db->query("INSERT INTO fedjail VALUES('','{$_POST['user']}','300','$userid','Reached 6 warnings in game. Account jailed.')");
}
print "Warning Added!
[*]<a href=viewuser.php?u={$_POST['user']}>Back to users profile</a>";
}
function deletewarning()
{
global $ir,$h,$db,$userid;
if($ir['userid'] != 1)
{
die("Owner Only");}
$db->query("DELETE FROM warnings WHERE id={$_GET['ID']}");
print "Warning Deleted";
}
function editwarning()
{
global $ir,$h,$db,$userid;
$target=$_GET['ID'];
$edit=$db->query("SELECT * FROM warnings WHERE id='$target'");
while($r=mysql_fetch_array($edit))
{
if($r['warner'] != $userid || $userid != 1)
{
die("You never set this warning, therefore cannot edit it");
}
print "<h3>Edit Warning</h3>
<form action=warnings.php?action=edit2 method=post>
<input style='visibility: hidden;' name=id value=$target>
<textarea rows=7 cols=30 name=reason>{$r['warnedfor']}</textarea>
<input type=submit value='Edit Warning'></form>";
}
}
function editwarning2()
{
global $ir,$h,$db,$userid;
$db->query("UPDATE warnings SET warnedfor={$_POST['reason']} WHERE id={$_POST['id']}");
print "Warning Updated.
[*]<a href=index.php>Home</a>";
}
?>
