} else {
$sql = "SELECT * FROM `up_sessions` WHERE `session` = '" . session_id() . "' LIMIT 0, 1";
$result = mysql_query($sql) or die(mysql_error());
while ($row = mysql_fetch_array($result))
{
$fid = $row['id'];
$sess = $row['session'];
}
if ($sess != session_id()) {
?>
} else {
$sql = "SELECT * FROM `up_users` WHERE `id` = '" . $fid . "' LIMIT 0, 1";
$result = mysql_query($sql) or die(mysql_error());
while ($row = mysql_fetch_array($result))
{
$name = $row['name'];
$level = $row['level'];
$signature = $row['signature'];
}
if ($level > 49) {
$sqlv = "SELECT * FROM `up_users` WHERE `verified` = 0";
$resultv = mysql_query($sqlv) or die(mysql_error());
$waiting = mysql_num_rows($resultv);
if ($waiting == 1) {
$anoun = "person";
} else {
$anoun = "people";
}
if ($waiting > 0) {
?>
}
}
$sqlol = "SELECT * FROM `up_priv` WHERE `to` = '" . $fid . "' AND `viewed` = 0";
$resultol = mysql_query($sqlol) or die(mysql_error());
$pm_count = mysql_num_rows($resultol);
?>
include('topbar.php'); ?>Post Message
if (!$_GET['topic']) {
if ($_POST['rpost'] and $_POST['rtitle'] and $_GET['take'] == 1) {
$daet = date("m/d/Y h:i:s A");
$sqlu = "INSERT INTO `up_topics` (`id`, `title`, `text`, `uid`, `date`, `time`, `closed`, `board`, `daet`) VALUES ('', '" . substr(strip_tags($_POST['rtitle']), 0, 80) . "', '" . strip_tags($_POST['rpost'],', , ,
') . "', '" . $fid . "', '" . $daet . "', '" . time() . "', '0', '" . $_GET['board'] . "', '" . $daet . "')";
mysql_query($sqlu);
$sqlne = "UPDATE `up_topics` SET `time` = '" . time() . "' WHERE `id` = '" . $_GET['topic'] . "'";
mysql_query($sqlne);
$daet = date("m/d/Y h:i:s A");
$sqlee = "UPDATE `up_topics` SET `daet` = '" . $daet . "' WHERE `id` = '" . $_GET['topic'] . "'";
mysql_query($sqlee);
?>
}
if ($_POST['topicf'] or $_POST['message']) {
//$fark = strip_tags($_POST['message']),', , ')
$fark = nl2br(strip_tags(htmlentities($_POST['message'], ENT_QUOTES)));
?>Topic Title:
}
$sqlb = "SELECT * FROM `up_boards` WHERE `id` = '" . $_GET['board'] . "'";
$resultb = mysql_query($sqlb) or die(mysql_error());
while ($row = mysql_fetch_array($resultb))
{
$bid = $row['id'];
}
if ($bid != $_GET['board']) {
?>
} else {
?>
TOS Stolen From Llamaguy: Don't be an asshat. I will ban
}
} else {
if ($_POST['rpost'] and $_GET['take'] == 1) {
$sqlb = "SELECT * FROM `up_topics` WHERE `id` = '" . $_GET['topic'] . "' AND `board` = '" . $_GET['board'] . "'";
$resultb = mysql_query($sqlb) or die(mysql_error());
while ($row = mysql_fetch_array($resultb))
{
$ttitle = $row['title'];
$tid = $row['id'];
$tboard = $row['board'];
$tclosed = $row['closed'];
}
if ($tid != $_GET['topic'] or $tclosed == 1) {
echo("rofl kenman stop haxing!!!!");
} else {
$daet = date("m/d/Y h:i:s A");
$sqlu = "INSERT INTO `up_posts` (`id`, `uid`, `topic`, `board`, `text`, `date`, `deleted`) VALUES ('', '" . $fid . "', '" . $_GET['topic'] . "', '" . $_GET['board'] . "', '" . strip_tags($_POST['rpost'],', , ,
') . "', '" . $daet . "', '0')";
mysql_query($sqlu);
$sqlne = "UPDATE `up_topics` SET `time` = '" . time() . "' WHERE `id` = '" . $_GET['topic'] . "'";
mysql_query($sqlne);
$daet = date("m/d/Y h:i:s A");
$sqlee = "UPDATE `up_topics` SET `daet` = '" . $daet . "' WHERE `id` = '" . $_GET['topic'] . "'";
mysql_query($sqlee);
?>
}
}
if ($_POST['message']) {
//$fark = strip_tags($_POST['message']),', , ')
$fark = nl2br(strip_tags(htmlentities($_POST['message'], ENT_QUOTES)));
?>, , ,
'))); ?>
}
$sqlb = "SELECT * FROM `up_topics` WHERE `id` = '" . $_GET['topic'] . "' AND `board` = '" . $_GET['board'] . "'";
$resultb = mysql_query($sqlb) or die(mysql_error());
while ($row = mysql_fetch_array($resultb))
{
$ttitle = $row['title'];
$tid = $row['id'];
$tboard = $row['board'];
$tclosed = $row['closed'];
}
if ($tid != $_GET['topic'] or $tboard != $_GET['board'] or $tclosed == 1) {
?>
} else {
?>
TOS Stolen From Llamaguy: Don't be an asshat. I will ban
Replying to:
}
}
}
}
?>