<?php

/*-------------------------------------------------------+

| PHP-Fusion Content Management System

| Copyright (C) 2002 - 2009 Nick Jones

| http://www.php-fusion.co.uk/

+--------------------------------------------------------+

| Filename: shoutbox_panel.php

| Author: Nick Jones (Digitanium)

+--------------------------------------------------------+

| Modified to: DeLuxe ShoutBox Panel v1.0

| Author: Smokeman

| Website: PHPFusion-Tips.dk

| URL: http://www.phpfusion-tips.dk/

+--------------------------------------------------------+

| This program is released as free software under the

| Affero GPL license. You can redistribute it and/or

| modify it under the terms of this license which you

| can read by viewing the included agpl.txt or online

| at www.gnu.org/licenses/agpl.html. Removal of this

| copyright header is strictly prohibited without

| written permission from the original author(s).

+--------------------------------------------------------*/

if (!defined("IN_FUSION")) { die("Access Denied"); }



if (file_exists(INFUSIONS."shoutbox_panel/locale/".$settings['locale'].".php")) {

   include INFUSIONS."shoutbox_panel/locale/".$settings['locale'].".php";

} else {

   include INFUSIONS."shoutbox_panel/locale/German.php";

}



include LOCALE.LOCALESET."view_profile.php";

include LOCALE.LOCALESET."user_fields.php";

include LOCALE.LOCALESET."user_fields/user_shouts-stat.php";



echo "<script type='text/javascript' language='JavaScript' src='".INFUSIONS."shoutbox_panel/includes/sb_boxover.js'></script>";



$link = FUSION_SELF.(FUSION_QUERY ? "?".FUSION_QUERY : "");

$link = preg_replace("^(&amp;|\?)s_action=(edit|delete)&amp;shout_id=\d*^", "", $link);

$sep = stristr($link, "?") ? "&amp;" : "?";



if (iMEMBER && (isset($_GET['s_action']) && $_GET['s_action'] == "delete") && (isset($_GET['shout_id']) && isnum($_GET['shout_id']))) {

   if ((iADMIN && checkrights("S")) || (iMEMBER && dbcount("(shout_id)", DB_SHOUTBOX, "shout_id='".$_GET['shout_id']."' AND shout_name='".$userdata['user_id']."'"))) {

      $result = dbquery("DELETE FROM ".DB_SHOUTBOX." WHERE shout_id='".$_GET['shout_id']."'".(iADMIN ? "" : " AND shout_name='".$userdata['user_id']."'"));

   }

   redirect($link);

}



function sbwrap($text) {

   

   $i = 0; $tags = 0; $chars = 0; $res = "";

   

   $str_len = strlen($text);

   

   for ($i = 0; $i < $str_len; $i++) {

      $chr = substr($text, $i, 1);

      if ($chr == "<") {

         if (substr($text, ($i + 1), 6) == "a href" || substr($text, ($i + 1), 3) == "img") {

            $chr = " ".$chr;

            $chars = 0;

         }

         $tags++;

      } elseif ($chr == "&") {

         if (substr($text, ($i + 1), 5) == "quot;") {

            $chars = $chars - 5;

         } elseif (substr($text, ($i + 1), 4) == "amp;" || substr($text, ($i + 1), 4) == "#39;" || substr($text, ($i + 1), 4) == "#92;") {

            $chars = $chars - 4;

         } elseif (substr($text, ($i + 1), 3) == "lt;" || substr($text, ($i + 1), 3) == "gt;") {

            $chars = $chars - 3;

         }

      } elseif ($chr == ">") {

         $tags--;

      } elseif ($chr == " ") {

         $chars = 0;

      } elseif (!$tags) {

         $chars++;

      }

      

      if (!$tags && $chars == 18) {

         $chr .= "<br />";

         $chars = 0;

      }

      $res .= $chr;

   }

   

   return $res;

}



openside($locale['global_150']);

if (iMEMBER || $settings['guestposts'] == "1") {

   include_once INCLUDES."bbcode_include.php";

   if (isset($_POST['post_shout'])) {

      $flood = false;

      if (iMEMBER) {

         $shout_name = $userdata['user_id'];

      } elseif ($settings['guestposts'] == "1") {

         $shout_name = trim(stripinput($_POST['shout_name']));

         $shout_name = preg_replace("(^[0-9]*)", "", $shout_name);

         if (isnum($shout_name)) { $shout_name = ""; }

         include_once INCLUDES."securimage/securimage.php";

         $securimage = new Securimage();

         if (!isset($_POST['sb_captcha_code']) || $securimage->check($_POST['sb_captcha_code']) == false) { redirect($link); }

      }

      $shout_message = str_replace("\n", " ", $_POST['shout_message']);

      $shout_message = preg_replace("/^(.{400}).*$/", "$1", $shout_message);

      $shout_message = trim(stripinput(censorwords($shout_message)));

      if (iMEMBER && (isset($_GET['s_action']) && $_GET['s_action'] == "edit") && (isset($_GET['shout_id']) && isnum($_GET['shout_id']))) {

         $comment_updated = false;

         if ((iADMIN && checkrights("S")) || (iMEMBER && dbcount("(shout_id)", DB_SHOUTBOX, "shout_id='".$_GET['shout_id']."' AND shout_name='".$userdata['user_id']."'"))) {

            if ($shout_message) {

               $result = dbquery("UPDATE ".DB_SHOUTBOX." SET shout_message='$shout_message' WHERE shout_id='".$_GET['shout_id']."'".(iADMIN ? "" : " AND shout_name='".$userdata['user_id']."'"));

            }

         }

         redirect($link);

      } elseif ($shout_name && $shout_message) {

         require_once INCLUDES."flood_include.php";

         if (!flood_control("shout_datestamp", DB_SHOUTBOX, "shout_ip='".USER_IP."'")) {

            $result = dbquery("INSERT INTO ".DB_SHOUTBOX." (shout_name, shout_message, shout_datestamp, shout_ip) VALUES ('$shout_name', '$shout_message', '".time()."', '".USER_IP."')");

            score_positive("SHBOX");

         }

      }

      redirect($link);

   }

   if (iMEMBER && (isset($_GET['s_action']) && $_GET['s_action'] == "edit") && (isset($_GET['shout_id']) && isnum($_GET['shout_id']))) {

      $esresult = dbquery(

         "SELECT ts.*, tu.user_id, tu.user_name FROM ".DB_SHOUTBOX." ts

         LEFT JOIN ".DB_USERS." tu ON ts.shout_name=tu.user_id

         WHERE ts.shout_id='".$_GET['shout_id']."'"

      );

      if (dbrows($esresult)) {

         $esdata = dbarray($esresult);

         if ((iADMIN && checkrights("S")) || (iMEMBER && $esdata['shout_name'] == $userdata['user_id'] && isset($esdata['user_name']))) {

            if ((isset($_GET['s_action']) && $_GET['s_action'] == "edit") && (isset($_GET['shout_id']) && isnum($_GET['shout_id']))) {

               $edit_url = $sep."s_action=edit&amp;shout_id=".$esdata['shout_id'];

            } else {

               $edit_url = "";

            }

            $shout_link = $link.$edit_url;

            $shout_message = $esdata['shout_message'];

         }

      } else {

         $shout_link = $link;

         $shout_message = "";

      }

   } else {

      $shout_link = $link;

      $shout_message = "";

   }





   ?>

   <script type="text/javascript">

function textCounter(textarea, counterID, maxLen) {

cnt = document.getElementById(counterID);

if (textarea.value.length > maxLen)

{

textarea.value = textarea.value.substring(0,maxLen);

}

cnt.innerHTML = maxLen - textarea.value.length;

}

</script>

   <?php





   echo "<a id='edit_shout' name='edit_shout'></a>\n";



   echo "<form name='shout_form' method='post' action='".$shout_link."'>\n";

   if (iGUEST) {

      echo $locale['global_151']."<br />\n";

      echo "<input type='text' name='shout_name' value='' class='textbox' maxlength='30' style='width:140px;' /><br />\n";

      echo $locale['global_152']."<br />\n";

   }

   echo "<div align='center' valign='middle'>".$locale['dsp007']."<span id='count_display' style='padding : 1px 3px 1px 3px; border:1px solid;'><strong>400</strong></span><br /><br /><textarea class='textbox' name='shout_message' rows='4' cols='20' style=\"width:165px; background: transparent url(".INFUSIONS."shoutbox_panel/images/sb_background.png) no-repeat scroll 0% 0%; width: 140px; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial;\" onfocus=\"if(this.value=='')this.value='';\" onblur=\"if(this.value=='')this.value=='';\" onKeyDown=\"textCounter(this,'count_display',400);\" onKeyUp=\"textCounter(this,'count_display',400);\">".$shout_message.(empty($shout_message)?"":"")."</textarea>\n</div>\n";

   echo display_bbcodes("165px;", "shout_message", "shout_form", "smiley|b|u|url|color")."\n";

   if (iGUEST) {

      echo $locale['global_158']."<br />\n";

      echo "<img id='sb_captcha' src='".INCLUDES."securimage/securimage_show.php' alt='' /><br />\n";

    echo "<a href='".INCLUDES."securimage/securimage_play.php'><img src='".INCLUDES."securimage/images/audio_icon.gif' alt='' class='tbl-border' style='margin-bottom:1px' /></a>\n";

    echo "<a href='#' onclick=\"document.getElementById('sb_captcha').src = '".INCLUDES."securimage/securimage_show.php?sid=' + Math.random(); return false\"><img src='".INCLUDES."securimage/images/refresh.gif' alt='' class='tbl-border' /></a><br />\n";

      echo $locale['global_159']."<br />\n<input type='text' name='sb_captcha_code' class='textbox' style='width:100px' /><br />\n";

   }

   echo "<br /><input type='submit' name='post_shout' value='".$locale['global_153']."' class='button' /> <input alt='".$locale['dsp008']."' title='".$locale['dsp008']."' type='reset' name='reset' value='".$locale['dsp008']."' class='button' />\n\n";

   echo "</form>\n";

echo "<br />\n";

} else {

   echo "<div style='text-align:center'>".$locale['global_154']."</div><br />\n";

}

$numrows = dbcount("(shout_id)", DB_SHOUTBOX);

$result = dbquery(

   "SELECT ts.*, tu.*, tu.user_id, tu.user_name FROM ".DB_SHOUTBOX." ts

   LEFT JOIN ".DB_USERS." tu ON ts.shout_name=tu.user_id

   ORDER BY ts.shout_datestamp DESC LIMIT 0,".$settings['numofshouts']

);



if (dbrows($result)) {

   $i = 0;



echo "<div id='myContent'>";

echo "<br />";

   

   while ($data = dbarray($result)) {

$titel = "fade=[on] fadespeed=[0.06]";

$headr = "<img src='".INFUSIONS."shoutbox_panel/images/profile_icon.png' align='absmiddle' alt='' />&nbsp;&nbsp; <big>".$data['user_name']."</big>";

$headrinfo = "<img src='".INFUSIONS."shoutbox_panel/images/info.png' align='absmiddle' alt='' />&nbsp;&nbsp; <big>".$data['user_name']."</big>";

$headrdel = "<img src='".INFUSIONS."shoutbox_panel/images/info.png' align='absmiddle' alt='' />&nbsp;&nbsp;".$locale['global_157'];

$headredit = "<img src='".INFUSIONS."shoutbox_panel/images/info.png' align='absmiddle' alt='' />&nbsp;&nbsp;".$locale['global_076'];

$headrarchiv = "<img src='".INFUSIONS."shoutbox_panel/images/info.png' align='absmiddle' alt='' />&nbsp;&nbsp;".$locale['global_155'];

$shoutcount = dbcount("(shout_id)", DB_SHOUTBOX, "shout_name='".$data['user_id']."'");



$lastseen = time() - $data['user_lastvisit'];

      if ($lastseen < 60) {

         $lastseensmall = "<img border='0' alt='".$locale['dsp016']."' src='".INFUSIONS."shoutbox_panel/images/online.gif' title=\"".$titel." header=[".$headrinfo."] body=[".phpentities("".$data['user_name']." ".$locale['dsp001']."")."] delay=[0] fade=[on]\" />";

//         $lastseen = "<blink><strong><font color='green'>".strtoupper($locale['dsp016'])."</font></strong></blink>";

         $lastseen = " <img border='0' alt='".$locale['dsp016']."' src='".INFUSIONS."shoutbox_panel/images/online1.gif' title='' />";

      } elseif ($lastseen < 300)  {

         $lastseensmall = "<img border='0' alt='".$locale['dsp017']."' src='".INFUSIONS."shoutbox_panel/images/recent-online.gif' title=\"".$titel." header=[".$headrinfo."] body=[".phpentities("".$data['user_name']." ".$locale['dsp019'].$locale['dsp017']."")."] delay=[0] fade=[on]\" />";

         $lastseen = "<blink><strong><font color='#FFD800'>".strtoupper($locale['dsp017'])."</font></strong></blink>";

      } else {

         $lastseensmall = "<img border='0' alt='".$locale['dsp018']."' src='".INFUSIONS."shoutbox_panel/images/offline.gif' title=\"".$titel." header=[".$headrinfo."] body=[".phpentities("".$data['user_name']." ".$locale['dsp002']."")."] delay=[0] fade=[on]\" />";

//         $lastseen = "<blink><strong><font color='red'>".strtoupper($locale['dsp018'])."</font></strong></blink>";

         $lastseen = "<img border='0' alt='".$locale['dsp018']."' src='".INFUSIONS."shoutbox_panel/images/offline1.gif' title='' />";

      }

if (iMEMBER) {

   $wohnort = $data['user_location'];

   $user_birthdate = explode("-", $data['user_birthdate']);

   $user_month = number_format($user_birthdate['1']);

   $user_day = number_format($user_birthdate['2']);

   $user_year = $user_birthdate['0'];

   $bdate = $user_day.".".$user_month.".".$user_year;

   if ($data['user_id'] != 0) {

   $sql = mysql_query("SELECT DATEDIFF(curdate(),user_birthdate) as 'age' FROM ".DB_PREFIX."users WHERE user_id='".$data['user_id']."'");

      $alter1 = mysql_result($sql,'age');

      $alter2 = $alter1 / 365.24;

      $alter3 = number_format(floor($alter2),0,'.',',');

      }

   } else {

      $bdate = $locale['dsp015'];

      $alter3 = $locale['dsp015'];

      $wohnort = $locale['dsp015'];

   }

      echo "<div class='shoutboxname'>";



      if ($data['user_name']) {

         if ( $data['user_level'] == 103 )

           {

            $ucolor = "#D90000'";

         } elseif ( $data['user_level'] == 102 )

           {

            $ucolor = "#00137F'";

         } elseif ( $data['user_level'] == 101 )

           {

            $ucolor = "#007F0E'";

         }



            if ($data['user_avatar'] != "") {

            $avatar = "<img src='".IMAGES."avatars/".$data['user_avatar']."' border='0' alt='' />"; 

            $avatar1 = "<img src='".IMAGES."avatars/".$data['user_avatar']."' width='20px' height='20px' border='0' alt='' />"; 

            }

            else {

            $avatar = "<img src='".INFUSIONS."shoutbox_panel/images/noav.gif' border='0' alt='' />";

            $avatar1 = "<img src='".INFUSIONS."shoutbox_panel/images/noav.gif' width='20px' height='20px' border='0' alt='' />";

            }

            echo "<a href='".BASEDIR."profile.php?lookup=".$data['shout_name']."' class='side' title=\"".$titel." header=[".$headr."] body=[".$locale['dsp013'].$data['user_name'].$locale['dsp026']."] delay=[0]\">".$avatar1."</a>";

            echo "<span class='small' title=\"".$titel." header=[".$headr."] body=[".rawurlencode("<center>$avatar</center>")."".phpentities("</span><hr />

<span class='small'><b><font color='#743921'>".$locale['global_101'].":</font> <font color='#B58A34'>".$data['user_name']."</font></b><br /><br />

<b><font color='#743921'>".$locale['dsp020'].":</font> <font color='#B58A34'>".$lastseen."</font></b><br /><br />

<b><font color='#743921'>".$locale['dsp010'].":</font> <font color='#B58A34'>".$wohnort."</font></b><br /><br />

<b><font color='#743921'>".$locale['dsp011'].":</font> <font color='#B58A34'>".$bdate."</font></b><br /><br />

<b><font color='#743921'>".$locale['dsp012'].":</font> <font color='#B58A34'>".$alter3."</font></b> <br /><br />

<b><font color='#743921'>".$locale['uf_shouts-stat'].":</font> <font color='#B58A34'>$shoutcount</font></b><br /><br />

<b><font color='#743921'>".$locale['dsp009'].":</font> <font color='".$ucolor."'>".getuserlevel($data['user_level'])."</font></b><br /><br />

<b><font color='#743921'>".$locale['u040'].":</font> <font color='#B58A34'>".showdate("%d.%m.%y %H:%M", $data['user_joined'])."</font></b><br /><br />

<b><font color='#743921'>".$locale['u041'].":</font> <font color='#B58A34'>".showdate("%d.%m.%y %H:%M", $data['user_lastvisit'])."</font></b> ")."] delay=[0]\">



          <a href='".BASEDIR."profile.php?lookup=".$data['shout_name']."' class='shoutboxname'><font color='".$ucolor."'><b>".$data['user_name']."</b></font></a></span> ".$lastseensmall."\n"; 

         if ((iMEMBER) && ($data['user_id'] != $userdata['user_id'])) {

            echo " <a href='".BASEDIR."messages.php?msg_send=".$data['user_id']."'> <img src='".INFUSIONS."shoutbox_panel/images/pm.gif' title=\"".$titel." header=[".$headrinfo."] body=[".phpentities("".$locale['dsp013'].$data['user_name'].$locale['dsp003']."")."] delay=[0]\" alt='' border='0' /></a>\n";

            if ($data['user_web']) {

               if (!strstr($data['user_web'], "http://")) { $urlprefix = "http://"; } else { $urlprefix = ""; }

               echo "<a href='".$urlprefix."".$data['user_web']."' target='_blank' title=\"".$titel." header=[".$headrinfo."] body=[".$locale['dsp013'].$data['user_name'].$locale['dsp014']."]delay=[0]\"><img alt='' src='".INFUSIONS."shoutbox_panel/images/web.gif' border='0' /></a>\n";

            }

            // Intern Messenger

            if (file_exists(BASEDIR."infusions/instant_messenger_panel/instantmessenger.php")) {

            $headrmsnon = "".$locale['dsp023'];

            $headrmsnoff = "".$locale['dsp024'];

            $on_off = time() - $data['user_lastvisit'];

               if ($on_off < 60) {

                  $on_off = "<img src='".BASEDIR."infusions/instant_messenger_panel/img/on.png' border='0' height='13' title=\"".$titel." header=[".$headrmsnon."] body=[".$locale['dsp025'].$data['user_name']."]delay=[0]\">";

               } else {

                  $on_off = "<img src='".BASEDIR."infusions/instant_messenger_panel/img/off.png' border='0' height='13' title=\"".$titel." header=[".$headrmsnoff."] body=[".$locale['dsp025'].$data['user_name']."]delay=[0]\">";

               }

            echo "<a target=\"popup\" onClick=\"window.open('', 'popup', 'width=450,height=650,scrollbars=no, toolbar=no,status=no, resizable=yes,menubar=no,location=no,directories=no,top=10,left=10')\"href=\"".BASEDIR."infusions/instant_messenger_panel/instantmessenger.php?c=".$data['user_id']."\">".$on_off."</a>";

            }

            // Intern Messenger

            }

      } else {

         echo $data['shout_name']."\n";

      }

   

      echo "</div>\n";



      echo "<div class='shoutboxdate'>".showdate("%d.%m.%Y %H:%M:%S", $data['shout_datestamp'])."</div>";

      echo "<div class='shoutbox'>".sbwrap(parseubb(parsesmileys($data['shout_message']), "b|u|url|color"))."</div>\n";

      if ((iADMIN && checkrights("S")) || (iMEMBER && $data['shout_name'] == $userdata['user_id'] && isset($data['user_name']))) {

         echo "[<a href='".$link.$sep."s_action=edit&amp;shout_id=".$data['shout_id']."#edit_shout"."' class='shoutboxedit' title=\"".$titel." header=[".$headredit."] body=[".phpentities("".$locale['dsp005']."")."] delay=[0] fade=[on]\">".$locale['global_076']."</a>]\n";

         echo "[<a href='".$link.$sep."s_action=delete&amp;shout_id=".$data['shout_id']."' class='shoutboxdel' title=\"".$titel." header=[".$headrdel."] body=[".phpentities("".$locale['dsp006']."")."] delay=[0] fade=[on]\">".$locale['global_157']."</a>]<br /><br />\n";

      }

      $i++;

      if ($i != $numrows) { echo "\n"; }

   }





echo "</div>";



   if ($numrows > $settings['numofshouts']) {

      echo "<div style='text-align:center'>\n<a href='".INFUSIONS."shoutbox_panel/shoutbox_archive.php' class='side' title=\"".$titel." header=[".$headrarchiv."] body=[".phpentities("".$locale['dsp004']."")."] delay=[0] fade=[on]\">".$locale['global_155']."</a>\n</div>\n";

   }

} else {

   echo "<div>".$locale['global_156']."</div>\n";

}

// Diese Zeile nicht löschen!!!

echo "<div style='text-align: right;'><a href='http://www.marcusg.de' target='_blank' title=\"cssbody=[tbl1] cssheader=[tbl2] fade=[on] fadespeed=[0.04] header=[<b>Shoutbox mit Boxover Deluxe V".$locale['dsp_version']."<br />&copy; 2009 by MarcusG</b>] body=[Diese Shoutbox wurde entwickelt von MarcusG.<br />Besuche meine Homepage!]\"><span class='small'>&copy;</span></a></div>";



closeside();

?>