Jump to content
MakeWebGames

Urgent Forum Error; Help Please

Oo-Savage-oO

By Oo-Savage-oO
in Modification Support

 Share

Recommended Posts

Oo-Savage-oO Newbie

Oo-Savage-oO

Posted
Posted

this is cronus's advanced secured forums from cronwerks but it has a prob plz help me fix it

 

<?php
session_start();
include "globals.php";
$forums=1;
print"<center><font size=5>Forums</font></center>
";
class bbcode {
var $engine="";
function bbcode()
{
require "bbcode_engine.php";
$this->engine= new bbcode_engine;
$this->engine->cust_tag("/</","<");
$this->engine->cust_tag("/>/",">");
//Since \n and 
screw up preg, convert them out.
$this->engine->cust_tag("/\n/","&nbrlb;");
$this->engine->simple_bbcode_tag("b");
$this->engine->simple_bbcode_tag("i");  
$this->engine->simple_bbcode_tag("u");  
$this->engine->simple_bbcode_tag("s");
$this->engine->simple_bbcode_tag("sub");  
$this->engine->simple_bbcode_tag("sup");
$this->engine->simple_bbcode_tag("big");
$this->engine->simple_bbcode_tag("small"); 
$this->engine->adv_bbcode_tag("list","ul");
$this->engine->adv_bbcode_tag("olist","ol");
$this->engine->adv_bbcode_tag("item","li");
$this->engine->adv_option_tag("font","font","family");
$this->engine->adv_option_tag("size","font","size"); 
$this->engine->adv_option_tag("url","a","href");
$this->engine->adv_option_tag("color","font","color");
$this->engine->adv_option_tag("style","span","style");
$this->engine->simp_option_notext("img","src");
$this->engine->simp_bbcode_att("img","src");
$this->engine->cust_tag("/\(c\)/","©");
$this->engine->cust_tag("/\(tm\)/","?");
$this->engine->cust_tag("/\(r\)/","®");
$this->engine->adv_option_tag_em("email","a","href");
$this->engine->adv_bbcode_att_em("email","a","href");
$this->engine->cust_tag("/\[left\](.+?)\[\/left\]/","<div align='left'>\\1</div>");
$this->engine->cust_tag("/\[center\](.+?)\[\/center\]/","<div align='center'>\\1</div>");
$this->engine->cust_tag("/\[right\](.+?)\[\/right\]/","<div align='right'>\\1</div>");
$this->engine->cust_tag("/\[quote name='(.+?)\'](.+?)\[\/quote\]/","<font color=red>[b]Quoting \\1[/b]</font>
<blockquote>\\2</blockquote>");
$this->engine->cust_tag("/\[quote\](.+?)\[\/quote\]/","<font color=red>[b]Quote:[/b]</font><table width=100%><tr><td><blockquote>\\1</blockquote><td></tr></table>");
$this->engine->cust_tag("/\[code\](.+?)\[\/code\]/","<div class='codetop'>CODE</div><div class='codemain'><code>\\1</code></div>");
$this->engine->cust_tag("/\[codebox\](.+?)\[\/codebox\]/","<div class='codetop'>CODE</div><div class='codemain' style='height:200px;white-space:pre;overflow:auto'>\\1</div>");
$this->engine->cust_tag("/&nbrlb;/","
\n"); 
}
function bbcode_parse($html)
{
return $this->engine->parse_bbcode($html);
}
}
function strip_html_tags($text)
{
return preg_replace("/<(.+?)>/is","", $text);
}
function forums_rank($tp)
{
if ( $tp < 3 ) { return "#12 Forum Newbie"; }
else if ( $tp < 10 ) { return "#11 Active Member"; }
else if ( $tp < 25 ) { return "#10 Beginning Poster"; }
else if ( $tp < 50 ) { return "#9 Average Poster"; }
else if ( $tp < 100 ) { return "#8 Good Poster"; }
else if ( $tp < 250 ) { return "#7 Very Good Poster"; }
else if ( $tp < 500 ) { return "#6 Experienced Poster"; }
else if ( $tp< 750 ) { return "#5 Honored Poster"; }
else if ( $tp < 1000 ) { return "#4 Posting Champion"; }
else if ( $tp < 1500 ) { return "#3 Posting King"; }
else if ( $tp < 2500 ) { return "#2 Posting God"; }
else if ( $tp < 5000 ) { return "#1 Forum Guru"; }
}
$bbc = new bbcode;
if($ir['forumban'])
{
echo "<font color=red><h3>! ERROR</h3>
You have been forum banned for {$ir['forumban']} days.



[b]Reason: {$ir['fb_reason']}</font>[/b]";
$h->endpage();
exit;
}
$_GET['viewforum']=(int) $_GET['viewforum'];
if(is_numeric($_GET['viewtopic']) and $_GET['act'] != 'quote') { $_GET['act']='viewtopic'; }
if($_GET['viewforum']) { $_GET['act']='viewforum'; }
if($_GET['reply']) { $_GET['act']='reply'; }
if($_GET['empty']==1 && $_GET['code']=='kill' && $_SESSION['owner'])
{
emptyallforums();
}
switch($_GET['act'])
{
case 'viewforum':
viewforum();
break;
case 'viewtopic':
viewtopic();
break;
case 'reply':
reply();
break;
case 'newtopicform':
newtopicform();
break;
case 'newtopic':
newtopic();
break;
case 'quote':
quote();
break;
case 'edit':
edit();
break;
case 'move':
move();
break;
case 'editsub':
editsub();
break;
case 'lock':
lock();
break;
case 'delepost':
delepost();
break;
case 'deletopic':
deletopic();
break;
case 'pin':
pin();
break;
case 'recache':
recache_forum($_GET['forum']);
break;
default:
idx();
break;
}
function idx() {
global $ir, $c, $userid;
$q=mysql_query("SELECT * FROM forum_forums WHERE ff_auth='public' ORDER BY ff_id ASC",$c) or die(mysql_error());
print "
<table style='border-style:solid;border-width:1px;border-color:#303030;' width='100%' cellpadding='5'>
<tr bgcolor='#606060'><th width=40%>Forum</th> <th width=10%>Posts</th> <th width=10%>Topics</th> <th width=40%>Last Post</th> </tr>";
while($r=mysql_fetch_array($q))
{
$t=date('F j Y, g:i:s a',$r['ff_lp_time']);
$pstr=mysql_query("SELECT * FROM users WHERE userid={$r['ff_lp_poster_id']}",$c);
$poster=mysql_fetch_array($pstr);
$mycolor="";
if($poster['user_level'] == 2)
{
$mycolor="blue";
}
if($poster['user_level'] == 1 && $poster['donatordays'] == 0)
{
$mycolor="";
}
if($poster['user_level'] == 1 && $poster['donatordays'] > 0)
{
$mycolor="lightblue";
}
if($poster['user_level'] == 4)
{
$mycolor="purple";
}
if($poster['user_level'] == 3)
{
$mycolor="green";
}
if($poster['user_level'] == 5)
{
$mycolor="orange";
}
$posts=number_format($r['ff_posts']);
print "<tr bgcolor='#404040'> 
<td align='center'>[url='forums.php?viewforum={$r[']{$r['ff_name']}[/url]
[size="1"]{$r['ff_desc']}[/size]</td> <td align='center'>$posts</td> <td align='center'>{$r['ff_topics']}</td> <td align='center'>$t

In: [url='forums.php?viewtopic={$r[']{$r['ff_lp_t_name']}[/url]

By: [url='viewuser.php?u={$r[']<font color=$mycolor>{$r['ff_lp_poster_name']}</font>[/url] </td> </tr>";
}
print "</table>";
if($ir['user_level'] == 5 || $ir['user_level'] == 2 || $ir['user_level'] == 3)
{
print "<hr /><a name='staff'><h3>Staff-Only Forums</h3></a><hr />";
$q=mysql_query("SELECT * FROM forum_forums WHERE ff_auth='staff' ORDER BY ff_id ASC",$c) or die(mysql_error());
print "
<table style='border-style:solid;border-width:1px;border-color:#303030;' width='100%' cellpadding='5'>
<tr bgcolor='#606060'><th>Forum</th> <th>Posts</th> <th>Topics</th> <th>Last Post</th> </tr>";
while($r=mysql_fetch_array($q))
{
$t=date('F j Y, g:i:s a',$r['ff_lp_time']);
$pstr=mysql_query("SELECT * FROM users WHERE userid={$r['ff_lp_poster_id']}",$c);
$poster=mysql_fetch_array($pstr);
$mycolor="";
if($poster['user_level'] == 2)
{
$mycolor="blue";
}
if($poster['user_level'] == 1 && $poster['donatordays'] == 0)
{
$mycolor="";
}
if($poster['user_level'] == 1 && $poster['donatordays'] > 0)
{
$mycolor="lightblue";
}
if($poster['user_level'] == 4)
{
$mycolor="purple";
}
if($poster['user_level'] == 3)
{
$mycolor="green";
}
if($poster['user_level'] == 5)
{
$mycolor="orange";
}
$posts=number_format($r['ff_posts']);
print "<tr bgcolor='#404040'> <td align='center'>[url='forums.php?viewforum={$r[']{$r['ff_name']}[/url]
[size="1"]{$r['ff_desc']}[/size]</td> <td align='center'>$posts</td> <td align='center'>{$r['ff_topics']}</td> <td align='center'>$t

In: [url='forums.php?viewtopic={$r[']{$r['ff_lp_t_name']}[/url]

By: [url='viewuser.php?u={$r[']<font color=$mycolor>{$r['ff_lp_poster_name']}</font>[/url] </td> </tr>";
}
print "</table>";
}
}
function viewforum()
{
global $ir, $c, $userid, $h, $bbc, $db;
$q=mysql_query("SELECT * FROM forum_forums WHERE ff_id={$_GET['viewforum']}",$c);
$r=mysql_fetch_array($q);
if(($r['ff_auth']=='gang' AND $ir['gang'] != $r['ff_owner'] AND $ir["user_level"] < 2) OR ($r['ff_auth'] == 'staff' AND $ir['user_level'] == 1 || $r['ff_auth'] == 'staff' AND $ir['user_level'] == 4))
{
print "You have no permission to view this forum.

> [url='forums.php']Back[/url]";
$h->endpage();
exit;
}
if($_GET['viewforum'] <> 1 OR $ir['user_level']==2)
{
$ntl="[[url='forums.php?act=newtopicform&forum={$_GET[']New Topic[/url]]";
}
else
{
$ntl="";
}
print "<big>[url='forums.php']Forums Home[/url] >> [url='forums.php?viewforum={$_GET[']{$r['ff_name']}[/url]$ntl</big>


<table style='border-style:solid;border-width:1px;border-color:#303030;' width='100%' cellpadding='5'>
<tr bgcolor='#606060'> <th width=40%>Topic</th> <th width=10%>Posts</th> <th width=25%>Started</th> <th width=25%>Last Post</th></tr>";
$q=mysql_query("SELECT * FROM forum_topics WHERE ft_forum_id={$_GET['viewforum']} ORDER BY ft_pinned DESC, ft_last_time DESC",$c) or die(mysql_error());
while($r2=mysql_fetch_array($q))
{
$pstr=mysql_query("SELECT * FROM users WHERE userid={$r2['ft_owner_id']}",$c);
$poster=mysql_fetch_array($pstr);
$mycolor="";
if($poster['user_level'] == 2)
{
$mycolor="blue";
}
if($poster['user_level'] == 1 && $poster['donatordays'] == 0)
{
$mycolor="";
}
if($poster['user_level'] == 1 && $poster['donatordays'] > 0)
{
$mycolor="lightblue";
}
if($poster['user_level'] == 4)
{
$mycolor="purple";
}
if($poster['user_level'] == 3)
{
$mycolor="green";
}
if($poster['user_level'] == 5)
{
$mycolor="orange";
}
$lst=mysql_query("SELECT * FROM users WHERE userid={$r2['ft_last_id']}",$c);
$last=mysql_fetch_array($lst);
$bycolor="";
if($last['user_level'] == 2)
{
$bycolor="blue";
}
if($last['user_level'] == 1 && $last['donatordays'] == 0)
{
$bycolor="";
}
if($last['user_level'] == 1 && $last['donatordays'] > 0)
{
$bycolor="lightblue";
}
if($last['user_level'] == 4)
{
$bycolor="purple";
}
if($last['user_level'] == 3)
{
$bycolor="green";
}
if($last['user_level'] == 5)
{
$bycolor="orange";
}
$t1=date('F j Y, g:i:s a',$r2['ft_start_time']);
$t2=date('F j Y, g:i:s a',$r2['ft_last_time']);
if($r2['ft_pinned']) { $pt="[b]Pinned:[/b]"; } else { $pt=""; }
if($r2['ft_locked']) { $lt="[b](Locked)[/b]"; } else { $lt=""; }
$posts=number_format($r2['ft_posts']);
print "<tr bgcolor='#404040'> <td align='center'>$pt[url='forums.php?viewtopic={$r2[']{$r2['ft_name']}[/url]$lt

[size="1"]{$r2['ft_desc']}[/size]</td> <td align='center'>$posts</td> <td align='center'><font size=1>$t1

By: [url='viewuser.php?u={$r2[']<font color=$mycolor>{$r2['ft_owner_name']}</font>[/url]</font></td> <td align='center'><font size=1>$t2

By: [url='viewuser.php?u={$r2[']<font color=$bycolor>{$r2['ft_last_name']}</font>[/url]</font></td> </tr>";
}
print "</table>";
}
function viewtopic()
{
global $ir, $c, $userid, $h, $bbc, $db;
$precache=array();
$q=mysql_query("SELECT * FROM forum_topics WHERE ft_id={$_GET['viewtopic']}",$c);
$topic=mysql_fetch_array($q);
$q2=mysql_query("SELECT * FROM forum_forums WHERE ff_id={$topic['ft_forum_id']}",$c);
$forum=mysql_fetch_array($q2);
if(($forum['ff_auth']=='gang' AND $ir['gang'] != $forum['ff_owner'] and $ir["user_level"] < 2) OR ($forum['ff_auth'] == 'staff' AND $ir['user_level'] < 2))
{
print "You have no permission to view this forum.

> [url='forums.php']Back[/url]";
$h->endpage();
exit;
}
print "<big>[url='forums.php']Forums Home[/url] >> [url='forums.php?viewforum={$forum[']{$forum['ff_name']}[/url] >> [url='forums.php?viewtopic={$_GET[']{$topic['ft_name']}[/url]</big>

";
$posts_per_page=20;
$posts_topic=$topic['ft_posts'];
$pages=ceil($posts_topic/$posts_per_page);
$st= ($_GET['st']) ? $_GET['st'] : 0;
if($_GET['lastpost']) { $st=($pages-1)*20; }
$pst=-20;
print "Pages: ";
for($i=1;$i<=$pages;$i++)
{
$pst+=20;
print "<a href='forums.php?viewtopic={$topic['ft_id']}&st=$pst'>";
if($pst == $st) { print "[b]"; }
print $i;
if($pst == $st) { print "[/b]"; }
print "</a>";
if($i % 25 == 0) { print "
"; }
}
print "
";
if($ir['user_level'] == 2 || $ir['user_level'] == 4)
{
print "
<form action='forums.php?act=move&topic={$_GET['viewtopic']}' method='post'>[b]Move topic to:[/b] ".forum_dropdown($c, 'forum', -1)."<input type='submit' value='Move' /></form>

[url='forums.php?act=pin&topic={$_GET['][img=sticky.jpg][/url] | [url='forums.php?act=lock&topic={$_GET['][img=lock.jpg][/url] | [url='forums.php?act=deletopic&topic={$_GET['][img=delete.gif][/url]
";
}
print "
<table style='border-style:solid;border-width:1px;border-color:#303030;' width='100%' cellpadding='5'>";
$q3=mysql_query("SELECT * FROM forum_posts WHERE fp_topic_id={$topic['ft_id']} ORDER BY fp_time ASC LIMIT $st, 20",$c);
$no=$st;
while($r=mysql_fetch_array($q3))
{
$qlink="[[url='forums.php?act=quote&viewtopic={$_GET[']Quote Post[/url]]";
if($ir['user_level'] > 1 || $ir['userid']==$r['fp_poster_id'])
{
$elink="[[url='forums.php?act=edit&post={$r[']Edit Post[/url]]";
}
else { $elink=""; }
$no++;
if($ir['user_level'] != 1)
{
$slink="[[url='forumsig.php?ID={$r[']Delete Sig[/url]]";
}
if($no > 1 && $ir['user_level'] != 1)
{
$dlink="[[url='forums.php?act=delepost&post={$r[']Delete Post[/url]]";
}
else { $dlink=""; }
$t=date('F j Y, g:i:s a',$r['fp_time']);
if($r['fp_edit_count'] > 0) { $edittext="\n
[i]Last edited by [url='viewuser.php?u={$r[']{$r['fp_editor_name']}[/url] at ".date('F j Y, g:i:s a',$r['fp_editor_time']).", edited [b]{$r['fp_edit_count']}[/b] times in total.[/i]"; } else { $edittext=""; }
if(!$precache[$r['fp_poster_id']]['userid'])
{
$membq=mysql_query("SELECT * FROM users WHERE userid={$r['fp_poster_id']}",$c);
$memb=mysql_fetch_array($membq);
$precache[$memb['userid']]=$memb;
}
else
{
$memb=$precache[$r['fp_poster_id']];
}
$rank=forums_rank($memb['posts']);
$msg="{$memb['forums_avatar']}";
$msg=strip_tags($msg);
if($memb['forums_avatar']) { $av="[img=$msg]"; } else { $av="[img=noav.gif]"; }
if(!$memb['forums_signature']) { $memb['forums_signature']="No Signature"; } else {$memb['forums_signature']=$bbc->bbcode_parse($memb['forums_signature']); }
$r['fp_text']=$bbc->bbcode_parse($r['fp_text']);
print "<tr bgcolor='#404040'>
<th align='center' width=20%>Post #{$no}</th> <th align='center'>Subject: {$r['fp_subject']}

$t $qlink$slink$elink$dlink</th>
</tr>
<tr bgcolor='#404040'>";
$mycolor="";
if($memb['user_level'] == 2)
{
$mycolor="blue";
}
if($memb['user_level'] == 1 && $memb['donatordays'] == 0)
{
$mycolor="gray";
}
if($memb['user_level'] == 1 && $memb['donatordays'] > 0)
{
$mycolor="lightblue";
}
if($memb['user_level'] == 4)
{
$mycolor="purple";
}
if($memb['user_level'] == 3)
{
$mycolor="green";
}
if($memb['user_level'] == 5)
{
$mycolor="orange";
}
print"<td valign=top><center>[url='viewuser.php?u={$r[']<font color='$mycolor'>{$r['fp_poster_name']}</font>[/url] [{$r['fp_poster_id']}]
Level: {$memb['level']}</br>Posts: {$memb['posts']}</br></br></br>
$av

</br></br>
Rank:</br><font color=red>$rank</font></center></td>
<td valign=top>{$r['fp_text']}
{$edittext}

-------------------

{$memb['forums_signature']}</td>
</tr>";
}
print "</table>";
$pst=-20;
print "Pages: ";
for($i=1;$i<=$pages;$i++)
{
$pst+=20;
print "<a href='forums.php?viewtopic={$topic['ft_id']}&st=$pst'>";
if($pst == $st) { print "[b]"; }
print $i;
if($pst == $st) { print "[/b]"; }
print "</a>";
if($i % 25 == 0) { print "
"; }
}
if(!$topic['ft_locked'])
{
print <<<EOF



[b]Post a reply to this topic:[/b]

<form action='forums.php?reply={$topic['ft_id']}' method='post'>
<table style='border-style:solid;border-width:1px;border-color:#303030;' width='80%' cellpadding='5'>
<tr>
<td align='right' bgcolor='#606060'>Subject:</td>
<td align='left' bgcolor='#404040'><input type='text' name='fp_subject' /></td>
</tr>
<tr>
<td align='right' bgcolor='#606060'>Post:</td>
<td align='left' bgcolor='#404040'><textarea rows='7' cols='40' name='fp_text'></textarea></td>
</tr>
<tr bgcolor='#404040'>
<th colspan='2' bgcolor='#404040'><input type='submit' value='Post Reply'></th>
</tr>
</table>
</form>
EOF;
}
else
{
print "


[i]This topic has been locked, you cannot reply to it.[/i]";
}
}
function reply()
{
global $ir, $c, $userid, $h, $bbc, $db;
$q=mysql_query("SELECT * FROM forum_topics WHERE ft_id={$_GET['reply']}",$c);
$topic=mysql_fetch_array($q);
$q2=mysql_query("SELECT * FROM forum_forums WHERE ff_id={$topic['ft_forum_id']}",$c);
$forum=mysql_fetch_array($q2);
if(($forum['ff_auth']=='gang' AND $ir['gang'] != $forum['ff_owner']) OR ($forum['ff_auth'] == 'staff' AND $ir['user_level'] < 2))
{
print "You have no permission to reply to this topic.

> [url='forums.php']Back[/url]";
$h->endpage();
exit;
}
if(!$topic['ft_locked'])
{
$u=$ir['username'];
$u=mysql_escape($u);
$info=str_replace(array("'","\n"),array("'","
"),htmlentities($_GET['reply']));
$_GET['reply'] = mysql_real_escape_string($info);
$_GET['reply'] = mysql_real_escape_string($_GET['reply']);
$subject = mysql_real_escape_string($_POST['fp_subject']);
$text = mysql_real_escape_string($_POST['fp_text']);
mysql_query("INSERT INTO forum_posts VALUES('', {$_GET['reply']}, {$forum['ff_id']}, $userid, '$u', unix_timestamp(), '$subject', '$text', 0, '', 0, 0)",$c) or die(mysql_error());
mysql_query("UPDATE forum_topics SET ft_last_id=$userid, ft_last_name='$u', ft_last_time=unix_timestamp(), ft_posts=ft_posts+1 WHERE ft_id={$_GET['reply']}",$c);
mysql_query("UPDATE forum_forums SET ff_lp_time=unix_timestamp(), ff_posts=ff_posts+1, ff_lp_poster_id=$userid, ff_lp_poster_name='$u', ff_lp_t_id={$_GET['reply']}, ff_lp_t_name='{$topic['ft_name']}' WHERE ff_id={$forum['ff_id']}",$c);
if($forum['ff_id'] != 7 && $forum['ff_id'] != 8)
{
mysql_query("UPDATE users SET posts=posts+1 WHERE userid=$userid",$c);
}
print "[b]Your reply has been posted.
Redirecting back to [url='forums.php?viewtopic={$_GET[']the topic[/url]...[/b]<hr />
";
$_GET['lastpost']=1;
$_GET['viewtopic']=$_GET['reply'];
echo <<< EOF
<meta http-equiv="refresh" content="2;url=forums.php?viewtopic={$_GET['viewtopic']}" />
EOF;
}
else
{
print "
[i]This topic has been locked, you cannot reply to it.[/i]

[url='forums.php?viewtopic={$_GET[']Back[/url]";
}
}
function newtopicform() {
global $ir, $c, $userid, $h, $bbc, $db;
$q=mysql_query("SELECT * FROM forum_forums WHERE ff_id={$_GET['forum']}",$c);
$r=mysql_fetch_array($q);
if(($r['ff_auth']=='gang' AND $ir['gang'] != $r['ff_owner']) OR ($r['ff_auth'] == 'staff' AND $ir['user_level'] < 2))
{
print "You have no permission to view this forum.

> [url='forums.php']Back[/url]";
$h->endpage();
exit;
}
print <<<EOF
<big>[url='forums.php']Forums Home[/url] >> [url='forums.php?viewforum={$_GET[']{$r['ff_name']}[/url] >> New Topic Form</big>
<form action='forums.php?act=newtopic&forum={$_GET['forum']}' method='post'>
<table style='border-style:solid;border-width:1px;border-color:#303030;' width='80%' cellpadding='5'>
<tr>
<td align=right bgcolor='#606060'>Topic Name:</td>
<td align=left bgcolor='#404040'><input type='text' name='ft_name' value='' /></td>
</tr>
<tr>
<td align=right bgcolor='#606060'>Topic Description:</td>
<td align=left bgcolor='#404040'><input type='text' name='ft_desc' value='' /></td>
</tr>
<tr>
<td align=right bgcolor='#606060'>Topic Text:</td>
<td align=left bgcolor='#404040'><textarea rows='8' cols='45' name='fp_text'></textarea></td>
</tr>
<tr bgcolor='#404040'>
<th colspan=2 bgcolor='#404040'><input type='submit' value='Post Topic' /></th>
</tr>
</table>
EOF;
}
function newtopic()
{
global $ir, $c, $userid, $h, $bbc, $db;
$q=mysql_query("SELECT * FROM forum_forums WHERE ff_id={$_GET['forum']}",$c);
$r=mysql_fetch_array($q);
if(($r['ff_auth']=='gang' AND $ir['gang'] != $r['ff_owner']) OR ($r['ff_auth'] == 'staff' AND $ir['user_level'] < 2))
{
print "You have no permission to view this forum.

> [url='forums.php']Back[/url]";
$h->endpage();
exit;
}
if($r['ff_id']==1 AND $ir['user_level'] != 2)
{
print "You have no permission to view this forum.

> [url='forums.php']Back[/url]";
$h->endpage();
exit;
}
$u=$ir['username'];
$u=mysql_escape($u);
if(!$_POST['ft_name'])
{
print "You did not supply a topic name.

> [url='forums.php']Back[/url]";
$h->endpage();
exit;
}
$info=str_replace(array("'","\n"),array("'","
"),htmlentities($_GET['forum']));
$_GET['forum'] = mysql_real_escape_string($info);
$name = mysql_real_escape_string($_POST['ft_name']);
$desc = mysql_real_escape_string($_POST['ft_desc']);
mysql_query("INSERT INTO forum_topics VALUES('', {$_GET['forum']}, '$name', '$desc', 0, $userid, '$u', unix_timestamp(), 0, '', 0, 0, 0)",$c);
$i=mysql_insert_id();
$dercp = $_POST['fp_text'];
$dercp = mysql_real_escape_string($dercp);
mysql_query("INSERT INTO forum_posts VALUES('', '{$i}', '{$r['ff_id']}', '$userid', '$u', unix_timestamp(), '$desc', '$dercp', 0, '', 0, 0)",$c) or die(mysql_error());
mysql_query("UPDATE forum_topics SET ft_last_id=$userid, ft_last_name='$u', ft_last_time=unix_timestamp(), ft_posts=ft_posts+1 WHERE ft_id={$i}",$c);
mysql_query("UPDATE forum_forums SET ff_lp_time=unix_timestamp(), ff_posts=ff_posts+1, ff_topics=ff_topics+1, ff_lp_poster_id=$userid, ff_lp_poster_name='$u', ff_lp_t_id={$i}, ff_lp_t_name='$name' WHERE ff_id={$r['ff_id']}",$c);
if($r['ff_id'] != 7 && $r['ff_id'] != 8)
{
mysql_query("UPDATE users SET posts=posts+1 WHERE userid=$userid",$c);
}
print "[b]Topic Posted![/b]<hr />
";
$_GET['viewtopic']=$i;
viewtopic();
}
function emptyallforums()
{
global $ir, $c, $userid, $h, $bbc, $db;
mysql_query("update forum_forums set ff_lp_time=0, ff_lp_poster_id=0, ff_lp_poster_name='N/A', ff_lp_t_id=0, ff_lp_t_name='N/A',ff_posts=0, ff_topics=0",$c);
mysql_query("truncate forum_topics",$c);
mysql_query("truncate forum_posts",$c);
}
function quote()
{
global $ir, $c, $userid, $h, $bbc, $db;
$q=mysql_query("SELECT * FROM forum_topics WHERE ft_id={$_GET['viewtopic']}",$c);
$topic=mysql_fetch_array($q);
$q2=mysql_query("SELECT * FROM forum_forums WHERE ff_id={$topic['ft_forum_id']}",$c);
$forum=mysql_fetch_array($q2);
$q3=mysql_query("SELECT * FROM forum_posts WHERE fp_id={$_GET['post']}",$c);
$post=mysql_fetch_array($q3);
if(($forum['ff_auth']=='gang' AND $ir['gang'] != $forum['ff_owner']) OR ($forum['ff_auth'] == 'staff' AND $ir['user_level'] < 2))
{
print "You have no permission to reply to this topic.

> [url='forums.php']Back[/url]";
$h->endpage();
exit;
}
print "<big>[url='forums.php']Forums Home[/url] >> [url='forums.php?viewforum={$forum[']{$forum['ff_name']}[/url] >> [url='forums.php?viewtopic={$_GET[']{$topic['ft_name']}[/url] >> Quoting a Post</big>

";
if(!$topic['ft_locked'])
{
print"



[b]Post a reply to this topic:[/b]

<form action='forums.php?reply={$topic['ft_id']}' method='post'>
<table style='border-style:solid;border-width:1px;border-color:#303030;' width='80%' cellpadding='5'>
<tr>
<td align='right' bgcolor='#606060'>Subject:</td>
<td align='left' bgcolor='#404040'><input type='text' name='fp_subject' /></td>
</tr>
<tr>
<td align='right' bgcolor='#606060'>Post:</td>
<td align='left' bgcolor='#404040'><textarea rows='7' cols='40' name='fp_text'>";
if(eregi('/quote',$post['fp_text']))
{
$explode=explode('[/quote]',$post['fp_text']);
print"[quote name='{$post['fp_poster_name'']}]{$explode['1']}[/quote]";
}
else
{
print"[quote name='{$post['fp_poster_name'']}]{$post['fp_text']}[/quote]";
}
print"</textarea></td>
</tr>
<tr bgcolor='#404040'>
<th colspan='2' bgcolor='#404040'><input type='submit' value='Post Reply'></th>
</tr>
</table>
</form>
";
}
else
{
print "
[i]This topic has been locked, you cannot reply to it.[/i]

[url='forums.php?viewtopic={$_GET[']Back[/url]";
}
}
Oo-Savage-oO Newbie

Oo-Savage-oO

Posted
  • Author
Posted

the error is

 

Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/****/public_html/forums.php on line 325
Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/****/public_html/forums.php on line 362
Joshua Newbie

Joshua

Posted
Posted

Sounds like you don't have forum_forums database.

That or $topic variable is coming up empty which would also pitch an error.

All in all your problem is here

 

$q=mysql_query("SELECT * FROM forum_topics WHERE ft_id={$_GET['viewtopic']}",$c);
Paul Evans Newbie

Paul Evans

Posted
Posted

Advanced secured forum mod... sorry i had to laugh at that

$this->engine->simp_option_notext("img","src");
$this->engine->simp_bbcode_att("img","src");

Ownage right there

Also maybe take a look at quote system ;)

Advanced pile of crap more like

EDIT:

$_GET['viewforum']=(int) $_GET['viewforum'];
if(is_numeric($_GET['viewtopic']) and $_GET['act'] != 'quote') { $_GET['act']='viewtopic'; }
if($_GET['viewforum']) { $_GET['act']='viewforum'; }
if($_GET['reply']) { $_GET['act']='reply'; }

I'm really gunna cry im laughing so much (peed myself)

 

Note: on line 362 maybe change mysql_fetch_array to $db->fetch_row (just curious)

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
 Share
Go to topic listing
×
×
  • Create New...