de hele admin.php
Spoiler tonen
if($team == 1){
if(isset($_GET[deleteshout])){
$sQuery = mysql_query("SELECT * FROM shout WHERE id = " . mysql_real_escape_string($_GET[deleteshout]) . "") or die(mysql_error());
if(mysql_num_rows($sQuery) == 0){
echo
Die shout bestaat niet!
;
}else{
mysql_query("DELETE FROM shout WHERE id = " . mysql_real_escape_string($_GET[deleteshout]) . "") or die(mysql_error());
echo
;
}
}elseif(isset($_GET[deletemessage])){
$mQuery = mysql_query("SELECT * FROM forumreactions WHERE id = " . mysql_real_escape_string($_GET[deletemessage]) . "") or die(mysql_error());
$mFetch = mysql_fetch_assoc($mQuery);
if(mysql_num_rows($mQuery) == 0){
echo Bericht bestaat niet;
}else{
mysql_query("UPDATE forumreactions SET type = 0 WHERE id = " . mysql_real_escape_string($_GET[deletemessage]) . "") or die(mysql_error());
echo Reactie verwijderd;
}
}elseif(isset($_GET[sticky])){
$tQuery = mysql_query("SELECT * FROM topics WHERE id = " . mysql_real_escape_string($_GET[sticky]) . "") or die(mysql_error());
$tFetch = mysql_fetch_assoc($tQuery);
if(mysql_num_rows($tQuery) == 0){
echo
Dit topic bestaat niet!
;
}else{
mysql_query("UPDATE topics SET type = 3 WHERE id = " . mysql_real_escape_string($_GET[sticky]) . "") or die(mysql_error());
echo
Er staat nu een sticky op dit topic!
Klik hier;
}
}elseif(isset($_GET[ads_add])){
if(isset($_POST[submit])){
$redir = htmlspecialchars($_POST[redirect_url]);
$how = htmlspecialchars($_POST[how]);
if(strlen($redir) < 5){
echo
;
die();
}
if(!strstr($redir, .) or !strstr($redir, http://)){
echo
Doorstuur URL is verkeerd. Maak zeker dat er http:// in je url zit.
Klik hier;
die();
}
if($how == 0){
$horizontal = 1;
$vertical = 0;
}elseif($how == 1){
$horizontal = 0;
$vertical = 1;
}else{
die(Verticaal of horizontaal verkeerd ingevoerd.);
}
if($_FILES[banner][name] != ){
$filename = htmlspecialchars($_FILES[banner][name]);
$extension = getExtension($filename);
$extension = strtolower($extension);
if (($extension != "jpg") && ($extension != "jpeg") && ($extension != "png") && ($extension != "gif")) {
echo
Banner extentie mag enkel JPG, PNG of GIF zijn. Banner niet toegevoegd.
Klik hier;
die();
}else{
$size = filesize($_FILES[banner][tmp_name]);
if ($size > MAX_SIZE*1024)
{
echo
Je afbeelding is te groot. De banner is niet toegevoegd.
Klik hier;
die();
}
$bQuery = mysql_query("SELECT * FROM ads ORDER BY id DESC LIMIT 1");
$bFetch = mysql_fetch_assoc($bQuery);
$newid = $bFetch[id] + 1;
$image_name=$newid...$extension;
$newname="img/ads/".$image_name;
$copied = copy($_FILES[banner][tmp_name], $newname) or die("Error: banner couldnt upload...
");
if (!$copied)
{
echo
Er ging wat mis bij het uploaden. Als dit probleem blijft aanhouden, contacteer de beheerder. De banner is niet toegevoegd.
Klik hier;
die();
}
mysql_query("INSERT INTO ads VALUES (
NULL,
" . mysql_real_escape_string($redir) . ",
" . mysql_real_escape_string($extension) . ",
0,
" . mysql_real_escape_string($horizontal) . ",
" . mysql_real_escape_string($vertical) . "
);
")or die(mysql_error());
echo
De banner is toegevoegd.
;
}
}else{
echo
Je hebt geen banner plaatje ingegeven!
;
}
}else{
?>
Advertentie toevoegen
}
}elseif(isset($_GET[lock])){
$tQuery = mysql_query("SELECT * FROM topics WHERE id = " . mysql_real_escape_string($_GET[lock]) . "") or die(mysql_error());
$tFetch = mysql_fetch_assoc($tQuery);
if(mysql_num_rows($tQuery) == 0){
echo
Dit topic bestaat niet!
;
}else{
mysql_query("UPDATE topics SET type = 2 WHERE id = " . mysql_real_escape_string($_GET[lock]) . "") or die(mysql_error());
echo
Er staat nu een slotje op dit topic!
Klik hier;
}
}elseif(isset($_GET[normal])){
$tQuery = mysql_query("SELECT * FROM topics WHERE id = " . mysql_real_escape_string($_GET[normal]) . "") or die(mysql_error());
$tFetch = mysql_fetch_assoc($tQuery);
if(mysql_num_rows($tQuery) == 0){
echo
Dit topic bestaat niet!
;
}else{
mysql_query("UPDATE topics SET type = 1 WHERE id = " . mysql_real_escape_string($_GET[normal]) . "") or die(mysql_error());
echo
Dit topic is nu weer een gewoon topic.
Klik hier;
}
}elseif(isset($_GET[deletetopic])){
$tQuery = mysql_query("SELECT * FROM topics WHERE id = " . mysql_real_escape_string($_GET[deletetopic]) . "") or die(mysql_error());
$tFetch = mysql_fetch_assoc($tQuery);
if(mysql_num_rows($tQuery) == 0){
echo
Dit topic bestaat niet!
;
}else{
mysql_query("UPDATE topics SET type = 4 WHERE id = " . mysql_real_escape_string($_GET[deletetopic]) . "") or die(mysql_error());
echo
;
}
}elseif(isset($_GET[deleteuser])){
if(isset($_POST[submit])){
$uQuery = mysql_query("SELECT * FROM users WHERE username = " . mysql_real_escape_string($_POST[username]) . "") or die(mysql_error());
$uFetch = mysql_fetch_assoc($uQuery);
if(mysql_num_rows($uQuery) == 0){
echo
Dit lid bestaat niet!
;
}else{
mysql_query("UPDATE users SET type = 4 WHERE id = " . mysql_real_escape_string($uFetch[id]) . "") or die(mysql_error());
echo
;
}
}else{
?>
Geef hieronder de gebruikersnaam in van de gebruik die je wilt verwijderen.
}
}elseif(isset($_GET[delete_ad])){
$aQuery = mysql_query("SELECT * FROM ads WHERE id = " . mysql_real_escape_string($_GET[delete_ad]) . "") or die(mysql_error());
$aFetch = mysql_fetch_assoc($aQuery);
if(mysql_num_rows($aQuery) == 0){
echo
Advertentie werd niet gevonden
;
}else{
/*
unlink(img/ads/ . mysql_real_escape_string($aFetch[id]) . . . mysql_real_escape_string($aFetch[filetype])) or die(Niet genoeg rechten of bestand niet gevonden.);
mysql_query("DELETE FROM ads WHERE id = " . mysql_real_escape_string($_GET[delete_ad]) . "") or die(mysql_error());
*/
echo
Advertenties verwijderen is even niet mogelijk.
Klik hier;
}
}elseif(isset($_GET[factuurdel])){
if(isset($_POST[submit])){
$uQuery = mysql_query("SELECT * FROM users WHERE username = " . mysql_real_escape_string($_POST[username]) . "") or die(mysql_error());
$uFetch = mysql_fetch_assoc($uQuery);
if(mysql_num_rows($uQuery) == 0){
echo
Dit lid bestaat niet!
;
}else{
mysql_query("DELETE FROM factuur WHERE id = " . mysql_real_escape_string($_POST[fid]) . "") or die(mysql_error());
echo
;
}
}else{
?>
Geef hieronder de gebruikersnaam in van de gebruik die je wilt verwijderen.
}elseif(isset($_GET[factuur])){
ini_set(display_errors, On);
error_reporting(E_ALL);
if(isset($_POST[submit]))
{
{
mysql_query("INSERT INTO factuur (bericht, bedrag, waarom, member_id) VALUES (" . $_POST[bericht] . ", " . $_POST[bedrag] . ", " . $_POST[waarom] . ", " . $_POST[member_id] . ")");
echo
;
}
}
?>
Geef hieronder de gebruikersnaam in van de gebruiker die je wilt ranken.
}elseif(isset($_GET[ban])){
if(isset($_POST[submit])){
$uQuery = mysql_query("SELECT * FROM users WHERE username = " . mysql_real_escape_string($_POST[username]) . "") or die(mysql_error());
$uFetch = mysql_fetch_assoc($uQuery);
if(mysql_num_rows($uQuery) == 0){
echo
Dit lid bestaat niet!
;
}else{
mysql_query("UPDATE users SET banned_until = " . mysql_real_escape_string($_POST[ban_until]) . ", ban_reason = " . mysql_real_escape_string($_POST[reason]) . " WHERE id = " . mysql_real_escape_string($uFetch[id]) . "") or die(mysql_error());
echo
;
}
}else{
?>
Geef hieronder de gebruikersnaam in van de gebruik die je wilt bannen.
}
}elseif(isset($_GET[unban])){
if(isset($_POST[submit])){
$uQuery = mysql_query("SELECT * FROM users WHERE username = " . mysql_real_escape_string($_POST[username]) . "") or die(mysql_error());
$uFetch = mysql_fetch_assoc($uQuery);
if(mysql_num_rows($uQuery) == 0){
echo
Dit lid bestaat niet!
;
}else{
mysql_query("UPDATE users SET banned_until = WHERE id = " . mysql_real_escape_string($uFetch[id]) . "") or die(mysql_error());
echo
;
}
}else{
?>
Geef hieronder de gebruikersnaam in van de gebruik die je wilt unbannen.
}
}else{
?>
Beheer
}
}else{
echo
Je hebt geen rechten om deze pagina te bekijken
;
}
?>
...
