<?php

/*-------------------------------------------------------+

| PHP-Fusion Content Management System

| Copyright (C) 2002 - 2008 Nick Jones

| http://www.php-fusion.co.uk/

+--------------------------------------------------------+

| Filename: shoutbox_panel.php

| Author: Nick Jones (Digitanium)

+--------------------------------------------------------+

| This program is released as free software under the

| Affero GPL license. You can redistribute it and/or

| modify it under the terms of this license which you

| can read by viewing the included agpl.txt or online

| at www.gnu.org/licenses/agpl.html. Removal of this

| copyright header is strictly prohibited without

| written permission from the original author(s).

+--------------------------------------------------------*/

if (!defined("IN_FUSION")) { die("Access Denied"); }

include INFUSIONS."pd_warning/warning.inc.php";

if(file_exists(INFUSIONS."shoutbox_panel/locale/".$settings['locale'].".php"))

 {

  include INFUSIONS."shoutbox_panel/locale/".$settings['locale'].".php";

 }

else

 {

  include INFUSIONS."shoutbox_panel/locale/Czech.php";

 }

echo "<script type='text/javascript' src='".INFUSIONS."shoutbox_panel/inc/functions.js'></script>";



add_to_head('<script type="text/javascript" src="'.INFUSIONS.'shoutbox_panel/inc/profil.js"></script>');



$link = FUSION_SELF.(FUSION_QUERY ? "?".FUSION_QUERY : "");

$link = preg_replace("^(&amp;|\?)s_action=(edit|delete)&amp;shout_id=\d*^", "", $link);

$sep = stristr($link, "?") ? "&amp;" : "?";



if (iMEMBER && (isset($_GET['s_action']) && $_GET['s_action'] == "delete") && (isset($_GET['shout_id']) && isnum($_GET['shout_id']))) {

   if ((iADMIN && checkrights("S")) || (iMEMBER && dbcount("(shout_id)", DB_SHOUTBOX, "shout_id='".$_GET['shout_id']."' AND shout_name='".$userdata['user_id']."'"))) {

      $result = dbquery("DELETE FROM ".DB_SHOUTBOX." WHERE shout_id='".$_GET['shout_id']."'".(iADMIN ? "" : " AND shout_name='".$userdata['user_id']."'"));

   }

   redirect($link);

}



function sbwrap($text) {

   

   $i = 0; $tags = 0; $chars = 0; $res = "";

   

   $str_len = strlen($text);

   

   for ($i = 0; $i < $str_len; $i++) {

      $chr = substr($text, $i, 1);

      if ($chr == "<") {

         if (substr($text, ($i + 1), 6) == "a href" || substr($text, ($i + 1), 3) == "img") {

            $chr = " ".$chr;

            $chars = 0;

         }

         $tags++;

      } elseif ($chr == "&") {

         if (substr($text, ($i + 1), 5) == "quot;") {

            $chars = $chars - 5;

         } elseif (substr($text, ($i + 1), 4) == "amp;" || substr($text, ($i + 1), 4) == "#39;" || substr($text, ($i + 1), 4) == "#92;") {

            $chars = $chars - 4;

         } elseif (substr($text, ($i + 1), 3) == "lt;" || substr($text, ($i + 1), 3) == "gt;") {

            $chars = $chars - 3;

         }

      } elseif ($chr == ">") {

         $tags--;

      } elseif ($chr == " ") {

         $chars = 0;

      } elseif (!$tags) {

         $chars++;

      }

      

      if (!$tags && $chars == 18) {

         $chr .= "<br />";

         $chars = 0;

      }

      $res .= $chr;

   }

   

   return $res;

}

$vip = dbarray(dbquery("SELECT * FROM ".DB_VIP_SETTINGS));

openside($locale['global_150']);



if (iMEMBER || $settings['guestposts'] == "1") {

   include_once INCLUDES."bbcode_include.php";

   if (isset($_POST['post_shout'])) {

      $flood = false;

      if (iMEMBER) {

         $shout_name = $userdata['user_id'];

      } elseif ($settings['guestposts'] == "1") {

         $shout_name = trim(stripinput($_POST['shout_name']));

         $shout_name = preg_replace("(^[0-9]*)", "", $shout_name);

         if (isnum($shout_name)) { $shout_name = ""; }

         include_once INCLUDES."securimage/securimage.php";

         $securimage = new Securimage();

         if (!isset($_POST['sb_captcha_code']) || $securimage->check($_POST['sb_captcha_code']) == false) { redirect($link); }

      }

      $shout_message = str_replace("\n", " ", $_POST['shout_message']);

      $shout_message = preg_replace("/^(.{999}).*$/", "$1", $shout_message);

      $shout_message = trim(stripinput(censorwords($shout_message)));

      if (iMEMBER && (isset($_GET['s_action']) && $_GET['s_action'] == "edit") && (isset($_GET['shout_id']) && isnum($_GET['shout_id']))) {

         $comment_updated = false;

         if ((iADMIN && checkrights("S")) || (iMEMBER && dbcount("(shout_id)", DB_SHOUTBOX, "shout_id='".$_GET['shout_id']."' AND shout_name='".$userdata['user_id']."'"))) {

            if ($shout_message) {

               $result = dbquery("UPDATE ".DB_SHOUTBOX." SET shout_message='$shout_message' WHERE shout_id='".$_GET['shout_id']."'".(iADMIN ? "" : " AND shout_name='".$userdata['user_id']."'"));

            }

         }

         redirect($link);

      } elseif ($shout_name && $shout_message) {

         require_once INCLUDES."flood_include.php";

         if (!flood_control("shout_datestamp", DB_SHOUTBOX, "shout_ip='".USER_IP."'")) {

            $result = dbquery("INSERT INTO ".DB_SHOUTBOX." (shout_name, shout_message, shout_datestamp, shout_ip) VALUES ('$shout_name', '$shout_message', '".time()."', '".USER_IP."')");

         }

      }

      redirect($link);

   }

   if (iMEMBER && (isset($_GET['s_action']) && $_GET['s_action'] == "edit") && (isset($_GET['shout_id']) && isnum($_GET['shout_id']))) {

      $esresult = dbquery(

         "SELECT ts.*, tu.user_id, tu.user_name FROM ".DB_SHOUTBOX." ts

         LEFT JOIN ".DB_USERS." tu ON ts.shout_name=tu.user_id

         WHERE ts.shout_id='".$_GET['shout_id']."'"

      );

      if (dbrows($esresult)) {

         $esdata = dbarray($esresult);

         if ((iADMIN && checkrights("S")) || (iMEMBER && $esdata['shout_name'] == $userdata['user_id'] && isset($esdata['user_name']))) {

            if ((isset($_GET['s_action']) && $_GET['s_action'] == "edit") && (isset($_GET['shout_id']) && isnum($_GET['shout_id']))) {

               $edit_url = $sep."s_action=edit&amp;shout_id=".$esdata['shout_id'];

            } else {

               $edit_url = "";

            }

            $shout_link = $link.$edit_url;

            $shout_message = $esdata['shout_message'];

         }

      } else {

         $shout_link = $link;

         $shout_message = "";

      }

   } else {

      $shout_link = $link;

      $shout_message = "";

   }

   



   echo "<form name='chatform' method='post' action='".$shout_link."'>\n";

   if (iGUEST) {

      echo "<center>\n";

      echo $locale['global_151']."<br />\n";

      echo "<input type='text' name='shout_name' value='' class='textbox' maxlength='30' style='width:140px' /><br />\n";

      echo $locale['global_152']."<br />\n";

      echo "</center>\n";

   }



if ((iADMIN) || (checkgroup("".$vip['vip_id'].""))) {

echo "<div align='center'>Shoutbox Zeichen:<input type='text' name='commentlen' value='".$vip['vip_characters']."' maxlength='3' size='3' style='margin-top:5px; margin-bottom:2px; text-align:center;' class='textbox' readonly></div>\n";

echo "<center><textarea id='shout_message' name='shout_message' onKeyDown=\"textCounter(this.form.shout_message, this.form.commentlen, ".$vip['vip_characters'].");\" onKeyUp=\"textCounter(this.form.shout_message, this.form.commentlen, ".$vip['vip_characters'].");\" onFocus=\"textCounter(this.form.shout_message, this.form.commentlen, ".$vip['vip_characters'].");\" rows='4' cols='20' style='width:140px;' class='textbox'>".$shout_message."</textarea><br />\n";



   } else {

echo "<div align='center'>Shoutbox Zeichen :<input type='text' name='commentlen' value='".$vip['member_characters']."' maxlength='3' size='3' style='margin-top:5px; margin-bottom:2px; text-align:center;' class='textbox' readonly><br />(Vip:".$vip['vip_characters'].")</div>\n";

echo "<center><textarea id='shout_message' name='shout_message' onKeyDown=\"textCounter(this.form.shout_message, this.form.commentlen, ".$vip['member_characters'].");\" onKeyUp=\"textCounter(this.form.shout_message, this.form.commentlen, ".$vip['member_characters'].");\" onFocus=\"textCounter(this.form.shout_message, this.form.commentlen, ".$vip['member_characters'].");\" rows='4' cols='20' style='width:140px;' class='textbox'>".$shout_message."</textarea><br />\n";





  }

   echo display_bbcodes("150px;", "shout_message", "chatform", "smiley|b|u|url|color")."\n";

   if (iGUEST) {

      echo $locale['global_158']."<br />\n";

      echo "<img id='sb_captcha' src='".INCLUDES."securimage/securimage_show.php' alt='' /><br />\n";

    echo "<a href='".INCLUDES."securimage/securimage_play.php'><img src='".INCLUDES."securimage/images/audio_icon.gif' alt='' class='tbl-border' style='margin-bottom:1px' /></a>\n";

    echo "<a href='#' onclick=\"document.getElementById('sb_captcha').src = '".INCLUDES."securimage/securimage_show.php?sid=' + Math.random(); return false\"><img src='".INCLUDES."securimage/images/refresh.gif' alt='' class='tbl-border' /></a><br />\n";

      echo $locale['global_159']."<br />\n<input type='text' name='sb_captcha_code' class='textbox' style='width:100px' /><br />\n";

   }

   echo "<br /><input type='submit' name='post_shout' value='".$locale['global_153']."' class='button' /></center>\n";

   echo "</form>\n<br />\n";

} else {

   echo "<div style='text-align:center'>".$locale['global_154']."</div><br />\n";

}





$numrows = dbcount("(shout_id)", DB_SHOUTBOX);

$result = dbquery(

   "SELECT ts.*, tu.user_id, tu.user_groups, tu.user_name FROM ".DB_SHOUTBOX." ts

   LEFT JOIN ".DB_USERS." tu ON ts.shout_name=tu.user_id

   ORDER BY ts.shout_datestamp DESC LIMIT 0,".$settings['numofshouts']

);



$rows = dbcount("(shout_id)", DB_SHOUTBOX);

if (!isset($_GET['rowstart']) || !isnum($_GET['rowstart'])) { $_GET['rowstart'] = 0; }

if ($rows != 0) {

   $result = dbquery(

      "SELECT * FROM ".DB_SHOUTBOX." LEFT JOIN ".DB_USERS."

      ON ".DB_SHOUTBOX.".shout_name=".DB_USERS.".user_id

     ORDER BY shout_datestamp DESC LIMIT 0,".$settings['numofshouts']

    );

    

   while ($data = dbarray($result)) {

      echo "<div class='shoutboxname'>\n";



      if ($data['user_name']) {

      

        $query = "SELECT user_name,user_id,user_lastvisit FROM ".DB_USERS."";

              $lastseen = time() - $data['user_lastvisit'];

      if ($lastseen < 60) {

         $lastseen = "<img src='".BASEDIR."images/online.png' style='vertical-align: middle;'><span style='color:#00FF00;font-weight:bold;'> Online</span>";

      } else {

         $lastseen = "<img src='".BASEDIR."images/offline.png' style='vertical-align: middle;'><span style='color:#ff0000;font-weight:bold;'> Offline</span>";

      }







      echo "<br /><a href='".BASEDIR."profile.php?lookup=".$data['shout_name']."' class='side'>".ColorName($data['shout_name'])."&nbsp;".panacik($data['user_groups'])."</a> \n";

    echo '<a title="header=[

    '.$locale['sbp_2'].ColorName($data["shout_name"]).'&nbsp;'.panacik($data["user_groups"]).'] 

    body=[

    <small>  

    <br />hodnost:'.getuserlevel($data["user_level"]).'

    <br />status:'.$lastseen.''."\n";

      echo"<br />pohlavi:".($data['user_gender'] == 1 ? $locale['sbp_7']  : ($data['user_gender'] == 2 ? $locale['sbp_6'] : $locale['sbp_8']));

    echo'<br /></small>'."\n";

    echo'] delay=[0] fade=[on]" href=\'\' title=\'\' style=\'text-decoration:underline;\'><img border="0" src="'.INFUSIONS.'shoutbox_panel/images/profil.png" alt="" title=""></a><br />'."\n";

   

    echo"</div></br>\n";

       if (iMEMBER && $userdata['user_id'] != $data['user_id']) {

    echo "<div style='text'>";

    echo '[<font size="1" style="font-family: Arial"><a href="#" onclick=\'addText("shout_message", "'.$data["user_name"].'»", "", "chatform"); return false;\'>'.$locale["sbp_9"].'</a></font>]</div>'."\n";       



   }

    

    



      } else {

         echo "".$data['shout_name']."\n";

      }





      echo "</div>\n";

      echo "<div class='shoutboxdate'>".showdate("shortdate", $data['shout_datestamp'])."</div>";

      echo "<div class='shoutbox'>".sbwrap(parseubb(parsesmileys($data['shout_message']), "b|i|u|url|color"))."</div>\n";

      if ((iADMIN && checkrights("S")) || (iMEMBER && $data['shout_name'] == $userdata['user_id'] && isset($data['user_name']))) {

         echo "[<a href='".$link.$sep."s_action=edit&amp;shout_id=".$data['shout_id']."#edit_shout"."' class='side'>".$locale['global_076']."</a>]\n";

         echo "[<a href='".$link.$sep."s_action=delete&amp;shout_id=".$data['shout_id']."' class='side'>".$locale['global_157']."</a>]<br />\n";

      }



      $i++;

      if ($i != $numrows) { echo "<br />\n"; }

   }





} else {

   echo "<div>".$locale['global_156']."</div>\n";

}



      echo "<br /><div style='text-align:center'>\n<a href='".INFUSIONS."shoutbox_panel/shoutbox_archive.php' class='side'>".$locale['global_155']."</a>\n</div>\n";



if ((iADMIN) || (checkgroup("".$vip['vip_id'].""))) {

      echo "<div style='text-align:center'>\n<a href='".INFUSIONS."shoutbox_panel/vip_shout.php' class='side'>".$locale['sbp_10']."</a>\n</div>\n";



}

closeside();

?>