if($_GET['action'] == "create") { // Check if user is a member of an other clan, or on a clan's Approve List! $sql = "SELECT name FROM ". CLANS_TABLE ." WHERE leader = '".$userdata['user_id']."' OR members LIKE '%ß".$userdata['user_id']."Þ%' OR approvelist LIKE '%ß".$userdata['user_id']."Þ%' "; if ( !($result = $db->sql_query($sql)) ) { message_die(GENERAL_ERROR, 'Error retrieving data', '', __LINE__, __FILE__, $sql); } while ( $row = $db->sql_fetchrow($result) ) { if(!empty($row['name'])) { // User already is in a clan, output message! $message = sprintf($lang['clans_cant_create'], ''.$row['name'].'').'
'.sprintf($lang['clans_please_leave'], ''.$row['name'].'').'

'.sprintf($lang['clans_click_here'], '',''); message_die(GENERAL_MESSAGE, $message); } } $this_title = $lang['clans_createnew']; $template->assign_vars(array( 'L_CREATENEW' => $lang['clans_createnew'], 'L_CREATE_TEXT' => $lang['clans_create_text'], 'L_NAME' => $lang['clans_name'], 'L_LEADER' => $lang['clans_leader'], 'L_DESCRIPTION' => $lang['clans_description'], 'L_URLLOGO' => $lang['clans_urllogo'], 'L_LOGO' => $lang['clans_logo'], 'L_APPROVING' => $lang['clans_approve_new'], 'L_REQ_POSTS' => $lang['clans_req_posts'], 'L_REQ_POINTS' => $lang['clans_req_points'], 'L_REQ_LEVEL' => $lang['clans_req_level'], 'L_JOIN_FEE' => $lang['clans_join_fee'], 'L_POINTS' => $points_name, 'L_CREATE' => $lang['clans_create'], 'L_BACKTOLIST' => sprintf($lang['clans_backtolist'],'',''), 'L_YES' => $lang['clans_yes'], 'L_NO' => $lang['clans_no'], 'FILE' => $file, 'USERNAME' => ''.$userdata['username'].'' )); $template->set_filenames(array('body' => 'clans_create_body.tpl')); } if($_GET['action'] == "docreate") { // Check if user is a member of an other clan, or on a clan's Approve List! $sql = "SELECT name FROM ". CLANS_TABLE ." WHERE leader = '".$userdata['user_id']."' OR members LIKE '%ß".$userdata['user_id']."Þ%' "; if ( !($result = $db->sql_query($sql)) ) { message_die(GENERAL_ERROR, 'Error retrieving data', '', __LINE__, __FILE__, $sql); } while ( $row = $db->sql_fetchrow($result) ) { if(!empty($row['name'])) { // User already is in a clan, output message! $message = sprintf($lang['clans_cant_create'], ''.$row['name'].'').'
'.sprintf($lang['clans_please_leave'], ''.$row['name'].'').'

'.sprintf($lang['clans_click_here'], '',''); message_die(GENERAL_MESSAGE, $message); } } $name = $_POST['name']; $desc = $_POST['description']; $leader = $userdata['user_id']; $founder = $userdata['user_id']; $logo = $_POST['logo']; $posts = $_POST['req_posts']; $level = $_POST['req_level']; $points = $_POST['req_points']; $fee = $_POST['join_fee']; if( ($name == "") OR ($desc == "") OR ($leader == "") OR ($founder == "") OR ($logo == "") OR ($logo == "http://") OR ($posts == "") OR ($level == "") OR ($points == "") OR ($fee == "") ) { message_die(GENERAL_MESSAGE, $lang['clans_not_all_fields'].'

'.sprintf($lang['clans_click_here'], '','')); } if(($level < 0) || (!is_numeric($level))) { message_die(GENERAL_MESSAGE, sprintf($lang['clans_clp_details_inv_level'],$level).'

'.sprintf($lang['clans_click_here'], '','')); } if(($posts < 0) || (!is_numeric($posts))) { message_die(GENERAL_MESSAGE, sprintf($lang['clans_clp_details_inv_posts'],$posts).'

'.sprintf($lang['clans_click_here'], '','')); } if(($fee < 0) || (!is_numeric($fee))) { message_die(GENERAL_MESSAGE, sprintf($lang['clans_clp_details_inv_fee'],$fee,$points_name).'

'.sprintf($lang['clans_click_here'], '','')); } if(($points < 0) || (!is_numeric($points))) { message_die(GENERAL_MESSAGE, sprintf($lang['clans_clp_details_inv_points'],$points_name,$points,$points_name).'

'.sprintf($lang['clans_click_here'], '','')); } // Check if logo is a jpg/jpeg/gif/png file. If not, output error! if ( !preg_match("#^((ht|f)tp://)([^ \?&=\#\"\n\r\t<]*?(\.(jpg|jpeg|gif|png))$)#is", $logo) ) { message_die(GENERAL_MESSAGE, sprintf($lang['clans_clp_details_invalid_logo'],''.$logo.'').'
'.$lang['clans_clp_details_invalid_logo2'].'

'.sprintf($lang['clans_click_here'], '','')); } // Check if Approving is a right value! (only 0 or 1!) $set_approving = $_POST['approving']; if(($set_approving < 0) || ($set_approving > 1) || (!is_numeric($set_approving))) { message_die(GENERAL_MESSAGE, sprintf($lang['clans_clp_details_inv_approving'],$set_approve).'

'.sprintf($lang['clans_click_here'], '','')); } // Check if there's a clan with the same name already! $sql = "SELECT name FROM ". CLANS_TABLE ." WHERE name = '".$name."' "; if ( !($result = $db->sql_query($sql)) ) { message_die(GENERAL_ERROR, 'Error retrieving data', '', __LINE__, __FILE__, $sql); } while ( $row = $db->sql_fetchrow($result) ) { if(!empty($row['name'])) { // Clan already exists!! $message = sprintf($lang['clans_couldnt_create'], ''.$name.'').'
'.$lang['clans_same_name'].'

'.sprintf($lang['clans_click_here'], '',''); message_die(GENERAL_MESSAGE, $message); } } $time = time(); // Get rid of all those nasty 's, "s and HTML codes $name = stripslashes($name); $name = addslashes($name); $name = htmlspecialchars($name); $desc = stripslashes($desc); $desc = addslashes($desc); $desc = htmlspecialchars($desc); $Nsql = "INSERT INTO ". CLANS_TABLE ." (name,leader,members,logo,description,approving,approvelist,approve_fee,req_posts,req_points,req_level,join_fee,founded,founder,news_orderby,news_order,news_amount) VALUES ('".$name."','".$leader."','','".$logo."','".$desc."','".$set_approving."','','','".$posts."','".$points."','".$level."','".$fee."','".$time."','".$founder."','date','0','10') "; if ( !$db->sql_query($Nsql) ) { message_die(GENERAL_ERROR, 'Error retrieving data', '', __LINE__, __FILE__, $Nsql); } message_die(GENERAL_MESSAGE, sprintf($lang['clans_created_succesfully'],''.$name.'').'

'.sprintf($lang['clans_click_here'], '','')); }