Urgent Forum Error; Help Please

[Oo-Savage-oO]

this is cronus's advanced secured forums from cronwerks but it has a prob plz help me fix it

 

<?php
session_start();
include "globals.php";
$forums=1;
print"<center><font size=5>Forums</font></center>
";
class bbcode {
var $engine="";
function bbcode()
{
require "bbcode_engine.php";
$this->engine= new bbcode_engine;
$this->engine->cust_tag("/</","<");
$this->engine->cust_tag("/>/",">");
//Since \n and 
screw up preg, convert them out.
$this->engine->cust_tag("/\n/","&nbrlb;");
$this->engine->simple_bbcode_tag("b");
$this->engine->simple_bbcode_tag("i");  
$this->engine->simple_bbcode_tag("u");  
$this->engine->simple_bbcode_tag("s");
$this->engine->simple_bbcode_tag("sub");  
$this->engine->simple_bbcode_tag("sup");
$this->engine->simple_bbcode_tag("big");
$this->engine->simple_bbcode_tag("small"); 
$this->engine->adv_bbcode_tag("list","ul");
$this->engine->adv_bbcode_tag("olist","ol");
$this->engine->adv_bbcode_tag("item","li");
$this->engine->adv_option_tag("font","font","family");
$this->engine->adv_option_tag("size","font","size"); 
$this->engine->adv_option_tag("url","a","href");
$this->engine->adv_option_tag("color","font","color");
$this->engine->adv_option_tag("style","span","style");
$this->engine->simp_option_notext("img","src");
$this->engine->simp_bbcode_att("img","src");
$this->engine->cust_tag("/\(c\)/","©");
$this->engine->cust_tag("/\(tm\)/","?");
$this->engine->cust_tag("/\(r\)/","®");
$this->engine->adv_option_tag_em("email","a","href");
$this->engine->adv_bbcode_att_em("email","a","href");
$this->engine->cust_tag("/\[left\](.+?)\[\/left\]/","<div align='left'>\\1</div>");
$this->engine->cust_tag("/\[center\](.+?)\[\/center\]/","<div align='center'>\\1</div>");
$this->engine->cust_tag("/\[right\](.+?)\[\/right\]/","<div align='right'>\\1</div>");
$this->engine->cust_tag("/\[quote name='(.+?)\'](.+?)\[\/quote\]/","<font color=red>[b]Quoting \\1[/b]</font>
<blockquote>\\2</blockquote>");
$this->engine->cust_tag("/\[quote\](.+?)\[\/quote\]/","<font color=red>[b]Quote:[/b]</font><table width=100%><tr><td><blockquote>\\1</blockquote><td></tr></table>");
$this->engine->cust_tag("/\[code\](.+?)\[\/code\]/","<div class='codetop'>CODE</div><div class='codemain'><code>\\1</code></div>");
$this->engine->cust_tag("/\[codebox\](.+?)\[\/codebox\]/","<div class='codetop'>CODE</div><div class='codemain' style='height:200px;white-space:pre;overflow:auto'>\\1</div>");
$this->engine->cust_tag("/&nbrlb;/","
\n"); 
}
function bbcode_parse($html)
{
return $this->engine->parse_bbcode($html);
}
}
function strip_html_tags($text)
{
return preg_replace("/<(.+?)>/is","", $text);
}
function forums_rank($tp)
{
if ( $tp < 3 ) { return "#12 Forum Newbie"; }
else if ( $tp < 10 ) { return "#11 Active Member"; }
else if ( $tp < 25 ) { return "#10 Beginning Poster"; }
else if ( $tp < 50 ) { return "#9 Average Poster"; }
else if ( $tp < 100 ) { return "#8 Good Poster"; }
else if ( $tp < 250 ) { return "#7 Very Good Poster"; }
else if ( $tp < 500 ) { return "#6 Experienced Poster"; }
else if ( $tp< 750 ) { return "#5 Honored Poster"; }
else if ( $tp < 1000 ) { return "#4 Posting Champion"; }
else if ( $tp < 1500 ) { return "#3 Posting King"; }
else if ( $tp < 2500 ) { return "#2 Posting God"; }
else if ( $tp < 5000 ) { return "#1 Forum Guru"; }
}
$bbc = new bbcode;
if($ir['forumban'])
{
echo "<font color=red><h3>! ERROR</h3>
You have been forum banned for {$ir['forumban']} days.



[b]Reason: {$ir['fb_reason']}</font>[/b]";
$h->endpage();
exit;
}
$_GET['viewforum']=(int) $_GET['viewforum'];
if(is_numeric($_GET['viewtopic']) and $_GET['act'] != 'quote') { $_GET['act']='viewtopic'; }
if($_GET['viewforum']) { $_GET['act']='viewforum'; }
if($_GET['reply']) { $_GET['act']='reply'; }
if($_GET['empty']==1 && $_GET['code']=='kill' && $_SESSION['owner'])
{
emptyallforums();
}
switch($_GET['act'])
{
case 'viewforum':
viewforum();
break;
case 'viewtopic':
viewtopic();
break;
case 'reply':
reply();
break;
case 'newtopicform':
newtopicform();
break;
case 'newtopic':
newtopic();
break;
case 'quote':
quote();
break;
case 'edit':
edit();
break;
case 'move':
move();
break;
case 'editsub':
editsub();
break;
case 'lock':
lock();
break;
case 'delepost':
delepost();
break;
case 'deletopic':
deletopic();
break;
case 'pin':
pin();
break;
case 'recache':
recache_forum($_GET['forum']);
break;
default:
idx();
break;
}
function idx() {
global $ir, $c, $userid;
$q=mysql_query("SELECT * FROM forum_forums WHERE ff_auth='public' ORDER BY ff_id ASC",$c) or die(mysql_error());
print "
<table style='border-style:solid;border-width:1px;border-color:#303030;' width='100%' cellpadding='5'>
<tr bgcolor='#606060'><th width=40%>Forum</th> <th width=10%>Posts</th> <th width=10%>Topics</th> <th width=40%>Last Post</th> </tr>";
while($r=mysql_fetch_array($q))
{
$t=date('F j Y, g:i:s a',$r['ff_lp_time']);
$pstr=mysql_query("SELECT * FROM users WHERE userid={$r['ff_lp_poster_id']}",$c);
$poster=mysql_fetch_array($pstr);
$mycolor="";
if($poster['user_level'] == 2)
{
$mycolor="blue";
}
if($poster['user_level'] == 1 && $poster['donatordays'] == 0)
{
$mycolor="";
}
if($poster['user_level'] == 1 && $poster['donatordays'] > 0)
{
$mycolor="lightblue";
}
if($poster['user_level'] == 4)
{
$mycolor="purple";
}
if($poster['user_level'] == 3)
{
$mycolor="green";
}
if($poster['user_level'] == 5)
{
$mycolor="orange";
}
$posts=number_format($r['ff_posts']);
print "<tr bgcolor='#404040'> 
<td align='center'>[url='forums.php?viewforum={$r[']{$r['ff_name']}[/url]
[size="1"]{$r['ff_desc']}[/size]</td> <td align='center'>$posts</td> <td align='center'>{$r['ff_topics']}</td> <td align='center'>$t

In: [url='forums.php?viewtopic={$r[']{$r['ff_lp_t_name']}[/url]

By: [url='viewuser.php?u={$r[']<font color=$mycolor>{$r['ff_lp_poster_name']}</font>[/url] </td> </tr>";
}
print "</table>";
if($ir['user_level'] == 5 || $ir['user_level'] == 2 || $ir['user_level'] == 3)
{
print "<hr /><a name='staff'><h3>Staff-Only Forums</h3></a><hr />";
$q=mysql_query("SELECT * FROM forum_forums WHERE ff_auth='staff' ORDER BY ff_id ASC",$c) or die(mysql_error());
print "
<table style='border-style:solid;border-width:1px;border-color:#303030;' width='100%' cellpadding='5'>
<tr bgcolor='#606060'><th>Forum</th> <th>Posts</th> <th>Topics</th> <th>Last Post</th> </tr>";
while($r=mysql_fetch_array($q))
{
$t=date('F j Y, g:i:s a',$r['ff_lp_time']);
$pstr=mysql_query("SELECT * FROM users WHERE userid={$r['ff_lp_poster_id']}",$c);
$poster=mysql_fetch_array($pstr);
$mycolor="";
if($poster['user_level'] == 2)
{
$mycolor="blue";
}
if($poster['user_level'] == 1 && $poster['donatordays'] == 0)
{
$mycolor="";
}
if($poster['user_level'] == 1 && $poster['donatordays'] > 0)
{
$mycolor="lightblue";
}
if($poster['user_level'] == 4)
{
$mycolor="purple";
}
if($poster['user_level'] == 3)
{
$mycolor="green";
}
if($poster['user_level'] == 5)
{
$mycolor="orange";
}
$posts=number_format($r['ff_posts']);
print "<tr bgcolor='#404040'> <td align='center'>[url='forums.php?viewforum={$r[']{$r['ff_name']}[/url]
[size="1"]{$r['ff_desc']}[/size]</td> <td align='center'>$posts</td> <td align='center'>{$r['ff_topics']}</td> <td align='center'>$t

In: [url='forums.php?viewtopic={$r[']{$r['ff_lp_t_name']}[/url]

By: [url='viewuser.php?u={$r[']<font color=$mycolor>{$r['ff_lp_poster_name']}</font>[/url] </td> </tr>";
}
print "</table>";
}
}
function viewforum()
{
global $ir, $c, $userid, $h, $bbc, $db;
$q=mysql_query("SELECT * FROM forum_forums WHERE ff_id={$_GET['viewforum']}",$c);
$r=mysql_fetch_array($q);
if(($r['ff_auth']=='gang' AND $ir['gang'] != $r['ff_owner'] AND $ir["user_level"] < 2) OR ($r['ff_auth'] == 'staff' AND $ir['user_level'] == 1 || $r['ff_auth'] == 'staff' AND $ir['user_level'] == 4))
{
print "You have no permission to view this forum.

> [url='forums.php']Back[/url]";
$h->endpage();
exit;
}
if($_GET['viewforum'] <> 1 OR $ir['user_level']==2)
{
$ntl="[[url='forums.php?act=newtopicform&forum={$_GET[']New Topic[/url]]";
}
else
{
$ntl="";
}
print "<big>[url='forums.php']Forums Home[/url] >> [url='forums.php?viewforum={$_GET[']{$r['ff_name']}[/url]$ntl</big>


<table style='border-style:solid;border-width:1px;border-color:#303030;' width='100%' cellpadding='5'>
<tr bgcolor='#606060'> <th width=40%>Topic</th> <th width=10%>Posts</th> <th width=25%>Started</th> <th width=25%>Last Post</th></tr>";
$q=mysql_query("SELECT * FROM forum_topics WHERE ft_forum_id={$_GET['viewforum']} ORDER BY ft_pinned DESC, ft_last_time DESC",$c) or die(mysql_error());
while($r2=mysql_fetch_array($q))
{
$pstr=mysql_query("SELECT * FROM users WHERE userid={$r2['ft_owner_id']}",$c);
$poster=mysql_fetch_array($pstr);
$mycolor="";
if($poster['user_level'] == 2)
{
$mycolor="blue";
}
if($poster['user_level'] == 1 && $poster['donatordays'] == 0)
{
$mycolor="";
}
if($poster['user_level'] == 1 && $poster['donatordays'] > 0)
{
$mycolor="lightblue";
}
if($poster['user_level'] == 4)
{
$mycolor="purple";
}
if($poster['user_level'] == 3)
{
$mycolor="green";
}
if($poster['user_level'] == 5)
{
$mycolor="orange";
}
$lst=mysql_query("SELECT * FROM users WHERE userid={$r2['ft_last_id']}",$c);
$last=mysql_fetch_array($lst);
$bycolor="";
if($last['user_level'] == 2)
{
$bycolor="blue";
}
if($last['user_level'] == 1 && $last['donatordays'] == 0)
{
$bycolor="";
}
if($last['user_level'] == 1 && $last['donatordays'] > 0)
{
$bycolor="lightblue";
}
if($last['user_level'] == 4)
{
$bycolor="purple";
}
if($last['user_level'] == 3)
{
$bycolor="green";
}
if($last['user_level'] == 5)
{
$bycolor="orange";
}
$t1=date('F j Y, g:i:s a',$r2['ft_start_time']);
$t2=date('F j Y, g:i:s a',$r2['ft_last_time']);
if($r2['ft_pinned']) { $pt="[b]Pinned:[/b]"; } else { $pt=""; }
if($r2['ft_locked']) { $lt="[b](Locked)[/b]"; } else { $lt=""; }
$posts=number_format($r2['ft_posts']);
print "<tr bgcolor='#404040'> <td align='center'>$pt[url='forums.php?viewtopic={$r2[']{$r2['ft_name']}[/url]$lt

[size="1"]{$r2['ft_desc']}[/size]</td> <td align='center'>$posts</td> <td align='center'><font size=1>$t1

By: [url='viewuser.php?u={$r2[']<font color=$mycolor>{$r2['ft_owner_name']}</font>[/url]</font></td> <td align='center'><font size=1>$t2

By: [url='viewuser.php?u={$r2[']<font color=$bycolor>{$r2['ft_last_name']}</font>[/url]</font></td> </tr>";
}
print "</table>";
}
function viewtopic()
{
global $ir, $c, $userid, $h, $bbc, $db;
$precache=array();
$q=mysql_query("SELECT * FROM forum_topics WHERE ft_id={$_GET['viewtopic']}",$c);
$topic=mysql_fetch_array($q);
$q2=mysql_query("SELECT * FROM forum_forums WHERE ff_id={$topic['ft_forum_id']}",$c);
$forum=mysql_fetch_array($q2);
if(($forum['ff_auth']=='gang' AND $ir['gang'] != $forum['ff_owner'] and $ir["user_level"] < 2) OR ($forum['ff_auth'] == 'staff' AND $ir['user_level'] < 2))
{
print "You have no permission to view this forum.

> [url='forums.php']Back[/url]";
$h->endpage();
exit;
}
print "<big>[url='forums.php']Forums Home[/url] >> [url='forums.php?viewforum={$forum[']{$forum['ff_name']}[/url] >> [url='forums.php?viewtopic={$_GET[']{$topic['ft_name']}[/url]</big>

";
$posts_per_page=20;
$posts_topic=$topic['ft_posts'];
$pages=ceil($posts_topic/$posts_per_page);
$st= ($_GET['st']) ? $_GET['st'] : 0;
if($_GET['lastpost']) { $st=($pages-1)*20; }
$pst=-20;
print "Pages: ";
for($i=1;$i<=$pages;$i++)
{
$pst+=20;
print "<a href='forums.php?viewtopic={$topic['ft_id']}&st=$pst'>";
if($pst == $st) { print "[b]"; }
print $i;
if($pst == $st) { print "[/b]"; }
print "</a>";
if($i % 25 == 0) { print "
"; }
}
print "
";
if($ir['user_level'] == 2 || $ir['user_level'] == 4)
{
print "
<form action='forums.php?act=move&topic={$_GET['viewtopic']}' method='post'>[b]Move topic to:[/b] ".forum_dropdown($c, 'forum', -1)."<input type='submit' value='Move' /></form>

[url='forums.php?act=pin&topic={$_GET['][img=sticky.jpg][/url] | [url='forums.php?act=lock&topic={$_GET['][img=lock.jpg][/url] | [url='forums.php?act=deletopic&topic={$_GET['][img=delete.gif][/url]
";
}
print "
<table style='border-style:solid;border-width:1px;border-color:#303030;' width='100%' cellpadding='5'>";
$q3=mysql_query("SELECT * FROM forum_posts WHERE fp_topic_id={$topic['ft_id']} ORDER BY fp_time ASC LIMIT $st, 20",$c);
$no=$st;
while($r=mysql_fetch_array($q3))
{
$qlink="[[url='forums.php?act=quote&viewtopic={$_GET[']Quote Post[/url]]";
if($ir['user_level'] > 1 || $ir['userid']==$r['fp_poster_id'])
{
$elink="[[url='forums.php?act=edit&post={$r[']Edit Post[/url]]";
}
else { $elink=""; }
$no++;
if($ir['user_level'] != 1)
{
$slink="[[url='forumsig.php?ID={$r[']Delete Sig[/url]]";
}
if($no > 1 && $ir['user_level'] != 1)
{
$dlink="[[url='forums.php?act=delepost&post={$r[']Delete Post[/url]]";
}
else { $dlink=""; }
$t=date('F j Y, g:i:s a',$r['fp_time']);
if($r['fp_edit_count'] > 0) { $edittext="\n
[i]Last edited by [url='viewuser.php?u={$r[']{$r['fp_editor_name']}[/url] at ".date('F j Y, g:i:s a',$r['fp_editor_time']).", edited [b]{$r['fp_edit_count']}[/b] times in total.[/i]"; } else { $edittext=""; }
if(!$precache[$r['fp_poster_id']]['userid'])
{
$membq=mysql_query("SELECT * FROM users WHERE userid={$r['fp_poster_id']}",$c);
$memb=mysql_fetch_array($membq);
$precache[$memb['userid']]=$memb;
}
else
{
$memb=$precache[$r['fp_poster_id']];
}
$rank=forums_rank($memb['posts']);
$msg="{$memb['forums_avatar']}";
$msg=strip_tags($msg);
if($memb['forums_avatar']) { $av="[img=$msg]"; } else { $av="[img=noav.gif]"; }
if(!$memb['forums_signature']) { $memb['forums_signature']="No Signature"; } else {$memb['forums_signature']=$bbc->bbcode_parse($memb['forums_signature']); }
$r['fp_text']=$bbc->bbcode_parse($r['fp_text']);
print "<tr bgcolor='#404040'>
<th align='center' width=20%>Post #{$no}</th> <th align='center'>Subject: {$r['fp_subject']}

$t $qlink$slink$elink$dlink</th>
</tr>
<tr bgcolor='#404040'>";
$mycolor="";
if($memb['user_level'] == 2)
{
$mycolor="blue";
}
if($memb['user_level'] == 1 && $memb['donatordays'] == 0)
{
$mycolor="gray";
}
if($memb['user_level'] == 1 && $memb['donatordays'] > 0)
{
$mycolor="lightblue";
}
if($memb['user_level'] == 4)
{
$mycolor="purple";
}
if($memb['user_level'] == 3)
{
$mycolor="green";
}
if($memb['user_level'] == 5)
{
$mycolor="orange";
}
print"<td valign=top><center>[url='viewuser.php?u={$r[']<font color='$mycolor'>{$r['fp_poster_name']}</font>[/url] [{$r['fp_poster_id']}]
Level: {$memb['level']}</br>Posts: {$memb['posts']}</br></br></br>
$av

</br></br>
Rank:</br><font color=red>$rank</font></center></td>
<td valign=top>{$r['fp_text']}
{$edittext}

-------------------

{$memb['forums_signature']}</td>
</tr>";
}
print "</table>";
$pst=-20;
print "Pages: ";
for($i=1;$i<=$pages;$i++)
{
$pst+=20;
print "<a href='forums.php?viewtopic={$topic['ft_id']}&st=$pst'>";
if($pst == $st) { print "[b]"; }
print $i;
if($pst == $st) { print "[/b]"; }
print "</a>";
if($i % 25 == 0) { print "
"; }
}
if(!$topic['ft_locked'])
{
print <<<EOF



[b]Post a reply to this topic:[/b]

<form action='forums.php?reply={$topic['ft_id']}' method='post'>
<table style='border-style:solid;border-width:1px;border-color:#303030;' width='80%' cellpadding='5'>
<tr>
<td align='right' bgcolor='#606060'>Subject:</td>
<td align='left' bgcolor='#404040'><input type='text' name='fp_subject' /></td>
</tr>
<tr>
<td align='right' bgcolor='#606060'>Post:</td>
<td align='left' bgcolor='#404040'><textarea rows='7' cols='40' name='fp_text'></textarea></td>
</tr>
<tr bgcolor='#404040'>
<th colspan='2' bgcolor='#404040'><input type='submit' value='Post Reply'></th>
</tr>
</table>
</form>
EOF;
}
else
{
print "


[i]This topic has been locked, you cannot reply to it.[/i]";
}
}
function reply()
{
global $ir, $c, $userid, $h, $bbc, $db;
$q=mysql_query("SELECT * FROM forum_topics WHERE ft_id={$_GET['reply']}",$c);
$topic=mysql_fetch_array($q);
$q2=mysql_query("SELECT * FROM forum_forums WHERE ff_id={$topic['ft_forum_id']}",$c);
$forum=mysql_fetch_array($q2);
if(($forum['ff_auth']=='gang' AND $ir['gang'] != $forum['ff_owner']) OR ($forum['ff_auth'] == 'staff' AND $ir['user_level'] < 2))
{
print "You have no permission to reply to this topic.

> [url='forums.php']Back[/url]";
$h->endpage();
exit;
}
if(!$topic['ft_locked'])
{
$u=$ir['username'];
$u=mysql_escape($u);
$info=str_replace(array("'","\n"),array("'","
"),htmlentities($_GET['reply']));
$_GET['reply'] = mysql_real_escape_string($info);
$_GET['reply'] = mysql_real_escape_string($_GET['reply']);
$subject = mysql_real_escape_string($_POST['fp_subject']);
$text = mysql_real_escape_string($_POST['fp_text']);
mysql_query("INSERT INTO forum_posts VALUES('', {$_GET['reply']}, {$forum['ff_id']}, $userid, '$u', unix_timestamp(), '$subject', '$text', 0, '', 0, 0)",$c) or die(mysql_error());
mysql_query("UPDATE forum_topics SET ft_last_id=$userid, ft_last_name='$u', ft_last_time=unix_timestamp(), ft_posts=ft_posts+1 WHERE ft_id={$_GET['reply']}",$c);
mysql_query("UPDATE forum_forums SET ff_lp_time=unix_timestamp(), ff_posts=ff_posts+1, ff_lp_poster_id=$userid, ff_lp_poster_name='$u', ff_lp_t_id={$_GET['reply']}, ff_lp_t_name='{$topic['ft_name']}' WHERE ff_id={$forum['ff_id']}",$c);
if($forum['ff_id'] != 7 && $forum['ff_id'] != 8)
{
mysql_query("UPDATE users SET posts=posts+1 WHERE userid=$userid",$c);
}
print "[b]Your reply has been posted.
Redirecting back to [url='forums.php?viewtopic={$_GET[']the topic[/url]...[/b]<hr />
";
$_GET['lastpost']=1;
$_GET['viewtopic']=$_GET['reply'];
echo <<< EOF
<meta http-equiv="refresh" content="2;url=forums.php?viewtopic={$_GET['viewtopic']}" />
EOF;
}
else
{
print "
[i]This topic has been locked, you cannot reply to it.[/i]

[url='forums.php?viewtopic={$_GET[']Back[/url]";
}
}
function newtopicform() {
global $ir, $c, $userid, $h, $bbc, $db;
$q=mysql_query("SELECT * FROM forum_forums WHERE ff_id={$_GET['forum']}",$c);
$r=mysql_fetch_array($q);
if(($r['ff_auth']=='gang' AND $ir['gang'] != $r['ff_owner']) OR ($r['ff_auth'] == 'staff' AND $ir['user_level'] < 2))
{
print "You have no permission to view this forum.

> [url='forums.php']Back[/url]";
$h->endpage();
exit;
}
print <<<EOF
<big>[url='forums.php']Forums Home[/url] >> [url='forums.php?viewforum={$_GET[']{$r['ff_name']}[/url] >> New Topic Form</big>
<form action='forums.php?act=newtopic&forum={$_GET['forum']}' method='post'>
<table style='border-style:solid;border-width:1px;border-color:#303030;' width='80%' cellpadding='5'>
<tr>
<td align=right bgcolor='#606060'>Topic Name:</td>
<td align=left bgcolor='#404040'><input type='text' name='ft_name' value='' /></td>
</tr>
<tr>
<td align=right bgcolor='#606060'>Topic Description:</td>
<td align=left bgcolor='#404040'><input type='text' name='ft_desc' value='' /></td>
</tr>
<tr>
<td align=right bgcolor='#606060'>Topic Text:</td>
<td align=left bgcolor='#404040'><textarea rows='8' cols='45' name='fp_text'></textarea></td>
</tr>
<tr bgcolor='#404040'>
<th colspan=2 bgcolor='#404040'><input type='submit' value='Post Topic' /></th>
</tr>
</table>
EOF;
}
function newtopic()
{
global $ir, $c, $userid, $h, $bbc, $db;
$q=mysql_query("SELECT * FROM forum_forums WHERE ff_id={$_GET['forum']}",$c);
$r=mysql_fetch_array($q);
if(($r['ff_auth']=='gang' AND $ir['gang'] != $r['ff_owner']) OR ($r['ff_auth'] == 'staff' AND $ir['user_level'] < 2))
{
print "You have no permission to view this forum.

> [url='forums.php']Back[/url]";
$h->endpage();
exit;
}
if($r['ff_id']==1 AND $ir['user_level'] != 2)
{
print "You have no permission to view this forum.

> [url='forums.php']Back[/url]";
$h->endpage();
exit;
}
$u=$ir['username'];
$u=mysql_escape($u);
if(!$_POST['ft_name'])
{
print "You did not supply a topic name.

> [url='forums.php']Back[/url]";
$h->endpage();
exit;
}
$info=str_replace(array("'","\n"),array("'","
"),htmlentities($_GET['forum']));
$_GET['forum'] = mysql_real_escape_string($info);
$name = mysql_real_escape_string($_POST['ft_name']);
$desc = mysql_real_escape_string($_POST['ft_desc']);
mysql_query("INSERT INTO forum_topics VALUES('', {$_GET['forum']}, '$name', '$desc', 0, $userid, '$u', unix_timestamp(), 0, '', 0, 0, 0)",$c);
$i=mysql_insert_id();
$dercp = $_POST['fp_text'];
$dercp = mysql_real_escape_string($dercp);
mysql_query("INSERT INTO forum_posts VALUES('', '{$i}', '{$r['ff_id']}', '$userid', '$u', unix_timestamp(), '$desc', '$dercp', 0, '', 0, 0)",$c) or die(mysql_error());
mysql_query("UPDATE forum_topics SET ft_last_id=$userid, ft_last_name='$u', ft_last_time=unix_timestamp(), ft_posts=ft_posts+1 WHERE ft_id={$i}",$c);
mysql_query("UPDATE forum_forums SET ff_lp_time=unix_timestamp(), ff_posts=ff_posts+1, ff_topics=ff_topics+1, ff_lp_poster_id=$userid, ff_lp_poster_name='$u', ff_lp_t_id={$i}, ff_lp_t_name='$name' WHERE ff_id={$r['ff_id']}",$c);
if($r['ff_id'] != 7 && $r['ff_id'] != 8)
{
mysql_query("UPDATE users SET posts=posts+1 WHERE userid=$userid",$c);
}
print "[b]Topic Posted![/b]<hr />
";
$_GET['viewtopic']=$i;
viewtopic();
}
function emptyallforums()
{
global $ir, $c, $userid, $h, $bbc, $db;
mysql_query("update forum_forums set ff_lp_time=0, ff_lp_poster_id=0, ff_lp_poster_name='N/A', ff_lp_t_id=0, ff_lp_t_name='N/A',ff_posts=0, ff_topics=0",$c);
mysql_query("truncate forum_topics",$c);
mysql_query("truncate forum_posts",$c);
}
function quote()
{
global $ir, $c, $userid, $h, $bbc, $db;
$q=mysql_query("SELECT * FROM forum_topics WHERE ft_id={$_GET['viewtopic']}",$c);
$topic=mysql_fetch_array($q);
$q2=mysql_query("SELECT * FROM forum_forums WHERE ff_id={$topic['ft_forum_id']}",$c);
$forum=mysql_fetch_array($q2);
$q3=mysql_query("SELECT * FROM forum_posts WHERE fp_id={$_GET['post']}",$c);
$post=mysql_fetch_array($q3);
if(($forum['ff_auth']=='gang' AND $ir['gang'] != $forum['ff_owner']) OR ($forum['ff_auth'] == 'staff' AND $ir['user_level'] < 2))
{
print "You have no permission to reply to this topic.

> [url='forums.php']Back[/url]";
$h->endpage();
exit;
}
print "<big>[url='forums.php']Forums Home[/url] >> [url='forums.php?viewforum={$forum[']{$forum['ff_name']}[/url] >> [url='forums.php?viewtopic={$_GET[']{$topic['ft_name']}[/url] >> Quoting a Post</big>

";
if(!$topic['ft_locked'])
{
print"



[b]Post a reply to this topic:[/b]

<form action='forums.php?reply={$topic['ft_id']}' method='post'>
<table style='border-style:solid;border-width:1px;border-color:#303030;' width='80%' cellpadding='5'>
<tr>
<td align='right' bgcolor='#606060'>Subject:</td>
<td align='left' bgcolor='#404040'><input type='text' name='fp_subject' /></td>
</tr>
<tr>
<td align='right' bgcolor='#606060'>Post:</td>
<td align='left' bgcolor='#404040'><textarea rows='7' cols='40' name='fp_text'>";
if(eregi('/quote',$post['fp_text']))
{
$explode=explode('[/quote]',$post['fp_text']);
print"[quote name='{$post['fp_poster_name'']}]{$explode['1']}[/quote]";
}
else
{
print"[quote name='{$post['fp_poster_name'']}]{$post['fp_text']}[/quote]";
}
print"</textarea></td>
</tr>
<tr bgcolor='#404040'>
<th colspan='2' bgcolor='#404040'><input type='submit' value='Post Reply'></th>
</tr>
</table>
</form>
";
}
else
{
print "
[i]This topic has been locked, you cannot reply to it.[/i]

[url='forums.php?viewtopic={$_GET[']Back[/url]";
}
}

[Oo-Savage-oO]

the error is

 

Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/****/public_html/forums.php on line 325
Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/****/public_html/forums.php on line 362

[Joshua]

Sounds like you don't have forum_forums database.

That or $topic variable is coming up empty which would also pitch an error.

All in all your problem is here

 

$q=mysql_query("SELECT * FROM forum_topics WHERE ft_id={$_GET['viewtopic']}",$c);

[Paul Evans]

Advanced secured forum mod... sorry i had to laugh at that

$this->engine->simp_option_notext("img","src");
$this->engine->simp_bbcode_att("img","src");

Ownage right there

Also maybe take a look at quote system ;)

Advanced pile of crap more like

EDIT:

$_GET['viewforum']=(int) $_GET['viewforum'];
if(is_numeric($_GET['viewtopic']) and $_GET['act'] != 'quote') { $_GET['act']='viewtopic'; }
if($_GET['viewforum']) { $_GET['act']='viewforum'; }
if($_GET['reply']) { $_GET['act']='reply'; }

I'm really gunna cry im laughing so much (peed myself)

 

Note: on line 362 maybe change mysql_fetch_array to $db->fetch_row (just curious)