<?php
/*
##########################################################################
# #
# Version 4 / / / #
# -----------__---/__---__------__----__---/---/- #
# | /| / /___) / ) (_ ` / ) /___) / / #
# _|/_|/__(___ _(___/_(__)___/___/_(___ _/___/___ #
# Free Content / Management System #
# / #
# #
# #
# Copyright 2005-2011 by webspell.org #
# #
# visit webSPELL.org, webspell.info to get webSPELL for free #
# - Script runs under the GNU GENERAL PUBLIC LICENSE #
# - It's NOT allowed to remove this copyright-tag #
# -- http://www.fsf.org/licensing/licenses/gpl.html #
# #
# Code based on WebSPELL Clanpackage (Michael Gruber - webspell.at), #
# Far Development by Development Team - webspell.org #
# #
# visit webspell.org #
# #
##########################################################################
*/

if(isset($_POST['board'])) $board = (int)$_POST['board'];
elseif(isset($_GET['board'])) $board = (int)$_GET['board'];
else $board = null;

if(!isset($_GET['page'])) $page = '';
else $page = (int)$_GET['page'];
if(!isset($_GET['action'])) $action = '';
else $action = $_GET['action'];

function forum_stats() {
$pagebg=PAGEBG;
$border=BORDER;
$bghead=BGHEAD;
$bgcat=BGCAT;
$bg1=BG_1;
global $wincolor;
global $loosecolor;
global $drawcolor;
global $_language;

$_language->read_module('forum');

// TODAY birthdays
$ergebnis=safe_query("SELECT nickname, userID, YEAR(CURRENT_DATE()) -YEAR(birthday) 'age' FROM ".PREFIX."user WHERE DATE_FORMAT(`birthday`, '%m%d') = DATE_FORMAT(NOW(), '%m%d')");
$n=0;
while($db=mysql_fetch_array($ergebnis)) {
$n++;
$years=$db['age'];
if($n>1) $birthdays.=', <a href="index.php?site=profile&amp;id='.$db['userID'].'"><b>'.$db['nickname'].'</b></a> ('.$years.')';
else $birthdays='<a href="index.php?site=profile&amp;id='.$db['userID'].'"><b>'.$db['nickname'].'</b></a> ('.$years.')';
}
if(!$n) $birthdays=$_language->module['n_a'];


// WEEK birthdays
$ergebnis=safe_query("SELECT nickname, userID, DATE_FORMAT(FROM_DAYS(TO_DAYS(NOW()) - TO_DAYS(birthday)), '%y') + 1 AS age FROM ".PREFIX."user WHERE IF(DAYOFYEAR(NOW())<=358,((DAYOFYEAR(birthday)>DAYOFYEAR(NOW())) AND (DAYOFYEAR(birthday)<=DAYOFYEAR(DATE_ADD(NOW(), INTERVAL 7 DAY)))),(DAYOFYEAR(BIRTHDAY)>DAYOFYEAR(NOW()) OR DAYOFYEAR(birthday)<=DAYOFYEAR(DATE_ADD(NOW(), INTERVAL 7 DAY)))) AND birthday !='0000-00-00 00:00:00' ORDER BY `birthday` ASC");
$n=0;
while($db=mysql_fetch_array($ergebnis)) {
$n++;
$years=$db['age'];
if($n>1) $birthweek.=', <a href="index.php?site=profile&amp;id='.$db['userID'].'"><b>'.$db['nickname'].'</b></a> ('.$years.')';
else $birthweek='<a href="index.php?site=profile&amp;id='.$db['userID'].'"><b>'.$db['nickname'].'</b></a> ('.$years.')';
}
if(!$n) $birthweek=$_language->module['n_a'];

// WHOISONLINE
$guests = mysql_num_rows(safe_query("SELECT ip FROM ".PREFIX."whoisonline WHERE userID=''"));
$user = mysql_num_rows(safe_query("SELECT userID FROM ".PREFIX."whoisonline WHERE ip=''"));
$useronline = $guests + $user;

if($user==1) $user_on=$_language->module['registered_user'];
else $user_on=$user.' '.$_language->module['registered_users'];

if($guests==1) $guests_on=$_language->module['guest'];
else $guests_on= $guests.' '.$_language->module['guests'];

$ergebnis = safe_query("SELECT w.*, u.nickname FROM ".PREFIX."whoisonline w LEFT JOIN ".PREFIX."user u ON u.userID = w.userID WHERE w.ip='' ORDER BY u.nickname");
$user_names = "";
if($user) {
$n=1;
while($ds=mysql_fetch_array($ergebnis)) {
if(isforumadmin($ds['userID'])) $nickname = '<span style="color:'.$loosecolor.'">'.$ds['nickname'].'</span>';
elseif(isanymoderator($ds['userID'])) $nickname = '<span style="color:'.$drawcolor.'">'.$ds['nickname'].'</span>';
elseif(isclanmember($ds['userID'])) $nickname = '<span style="color:'.$wincolor.'">'.$ds['nickname'].'</span>';
else $nickname = $ds['nickname'];
if($n>1) $user_names .= ', <a href="index.php?site=profile&amp;id='.$ds['userID'].'"><b>'.$nickname.'</b></a>';
else $user_names = '<a href="index.php?site=profile&amp;id='.$ds['userID'].'"><b>'.$nickname.'</b></a>';
$n++;
}
}

$dt=mysql_fetch_array(safe_query("SELECT sum(topics), sum(posts) FROM ".PREFIX."forum_boards"));
$topics=$dt[0];
$posts=$dt[1];
$dt=mysql_fetch_array(safe_query("SELECT count(userID) FROM ".PREFIX."user WHERE activated='1'"));
$registered=$dt[0];
$newestuser=safe_query("SELECT userID, nickname FROM ".PREFIX."user WHERE activated='1' ORDER BY registerdate DESC LIMIT 0,1");
$dn=mysql_fetch_array($newestuser);
$dm=mysql_fetch_array(safe_query("SELECT maxonline FROM ".PREFIX."counter"));
$maxonline=$dm['maxonline'];

$newestmember='<a href="index.php?site=profile&amp;id='.$dn['userID'].'"><b>'.$dn['nickname'].'</b></a>';
eval ("\$forum_stats = \"".gettemplate("forum_stats")."\";");
echo $forum_stats;
}

function boardmain() {
global $maxposts;
global $userID;
global $action;
global $loggedin;
global $_language;
global $maxtopics;

$_language->read_module('forum');

$pagebg=PAGEBG;
$border=BORDER;
$bghead=BGHEAD;
$bgcat=BGCAT;

eval ("\$title_messageboard = \"".gettemplate("title_messageboard")."\";");
echo $title_messageboard;

if($action=="markall") {
safe_query("UPDATE ".PREFIX."user SET topics='|' WHERE userID='$userID'");
}

eval ("\$forum_main_head = \"".gettemplate("forum_main_head")."\";");
echo $forum_main_head;

// KATEGORIEN
$sql_where = '';
if(isset($_GET['cat'])){
if(is_numeric($_GET['cat'])){
$sql_where = " WHERE catID='".$_GET['cat']."'";
}
}
$kath=safe_query("SELECT catID, name, info, readgrps FROM ".PREFIX."forum_categories".$sql_where." ORDER BY sort");
while($dk=mysql_fetch_array($kath)) {
$kathname = "<a href='index.php?site=forum&amp;cat=".$dk['catID']."'>".$dk['name']."</a>";
if($dk['info']) $info=$dk['info'];
else $info='';

if($dk['readgrps'] != "") {
$usergrp = 0;
$readgrps = explode(";", $dk['readgrps']);
foreach($readgrps as $value) {
if(isinusergrp($value, $userID)) {
$usergrp = 1;
break;
}
}

if(!$usergrp) continue;
}
eval ("\$forum_main_kath = \"".gettemplate("forum_main_kath")."\";");
echo $forum_main_kath;

// BOARDS MIT KATEGORIE
$boards=safe_query("SELECT * FROM ".PREFIX."forum_boards WHERE category='".$dk['catID']."' ORDER BY sort");
$i=1;

while($db=mysql_fetch_array($boards)) {

if($i%2) {
$bg1=BG_1;
$bg2=BG_2;
}
else {
$bg1=BG_3;
$bg2=BG_4;
}

$ismod = ismoderator($userID, $db['boardID']);
$usergrp = 0;
$writer = 'ro-';
if($db['writegrps'] != "" and !$ismod) {
$writegrps = explode(";", $db['writegrps']);
foreach($writegrps as $value) {
if(isinusergrp($value, $userID)) {
$usergrp = 1;
$writer = '';
break;
}
}
}
else $writer = '';
if($db['readgrps'] != "" and !$usergrp and !$ismod) {
$readgrps = explode(";", $db['readgrps']);
foreach($readgrps as $value) {
if(isinusergrp($value, $userID)) {
$usergrp = 1;
break;
}
}
if(!$usergrp) continue;
}

$board=$db['boardID'];
$anztopics=$db['topics'];
$anzposts=$db['posts'];
$boardname = $db['name'];
$boardname ='&#8226; <a href="index.php?site=forum&amp;board='.$board.'"><b>'.$boardname.'</b></a>';

if($db['info']) $boardinfo=$db['info'];
else $boardinfo='';
$moderators=getmoderators($db['boardID']);
if($moderators) $moderators=$_language->module['moderated_by'].': '.$moderators;

$postlink='';
$date='';
$time='';
$poster='';
$member='';

$q = safe_query("SELECT topicID, lastdate, lastposter, replys FROM ".PREFIX."forum_topics WHERE boardID='".$db['boardID']."' AND moveID='0' ORDER BY lastdate DESC LIMIT 0,".$maxtopics);
$n=1;
$board_topics = Array();
while($lp = mysql_fetch_assoc($q)) {

if($n == 1) {

$date=date("d.m.Y", $lp['lastdate']);
$today=date("d.m.Y", time());
$yesterday = date("d.m.Y", time()-3600*24);

if($date==$today) $date=$_language->module['today'];
elseif($date==$yesterday && $date<$today) $date=$_language->module['yesterday'];
else $date=$date;

$time=date("- H:i", $lp['lastdate']);
$poster='<a href="index.php?site=profile&amp;id='.$lp['lastposter'].'">'.getnickname($lp['lastposter']).'</a>';
if(isclanmember($lp['lastposter'])) $member=' <img src="images/icons/member.gif" alt="'.$_language->module['clanmember'].'" />';
else $member='';
$topic=$lp['topicID'];
$postlink='index.php?site=forum_topic&amp;topic='.$topic.'&amp;type=ASC&amp;page='.ceil(($lp['replys']+1)/$maxposts);

}
if($userID) $board_topics[] = $lp['topicID'];
else break;
$n++;
}

// get unviewed topics

$found = false;

if($userID) {

$gv=mysql_fetch_array(safe_query("SELECT topics FROM ".PREFIX."user WHERE userID='$userID'"));
$array=explode("|", $gv['topics']);

foreach($array as $split) {

if($split != "" AND in_array($split, $board_topics)) {
$found=true;
break;
}
}
}

if($found) $icon='<img src="images/icons/boardicons/'.$writer.'on.gif" alt="'.$_language->module['new_posts'].'" />';
else $icon='<img src="images/icons/boardicons/'.$writer.'off.gif" alt="'.$_language->module['no_new_posts'].'" />';


eval ("\$forum_main_board = \"".gettemplate("forum_main_board")."\";");
echo $forum_main_board;

$i++;
}
}

// BOARDS OHNE KATEGORIE
$boards=safe_query("SELECT * FROM ".PREFIX."forum_boards WHERE category='0' ORDER BY sort");
$i=1;
while($db=mysql_fetch_array($boards)) {

if($i%2) {
$bg1=BG_1;
$bg2=BG_2;
}
else {
$bg1=BG_3;
$bg2=BG_4;
}

$usergrp = 0;
$writer = 'ro-';
$ismod = ismoderator($userID, $db['boardID']);
if($db['writegrps'] != "" and !$ismod) {
$writegrps = explode(";", $db['writegrps']);
foreach($writegrps as $value) {
if(isinusergrp($value, $userID)) {
$usergrp = 1;
$writer = '';
break;
}
}
}
else $writer = '';
if($db['readgrps'] != "" and !$usergrp and !$ismod) {
$readgrps = explode(";", $db['readgrps']);
foreach($readgrps as $value) {
if(isinusergrp($value, $userID)) {
$usergrp = 1;
break;
}
}
if(!$usergrp) continue;
}

$board=$db['boardID'];
$anztopics=$db['topics'];
$anzposts=$db['posts'];

$boardname = $db['name'];
$boardname='&#8226; <a href="index.php?site=forum&amp;board='.$db['boardID'].'"><b>'.$boardname.'</b></a>';

$boardinfo='';
if($db['info']) $boardinfo=$db['info'];
$moderators=getmoderators($db['boardID']);
if($moderators) $moderators=$_language->module['moderated_by'].': '.$moderators;

$q = safe_query("SELECT topicID, lastdate, lastposter, replys FROM ".PREFIX."forum_topics WHERE boardID='".$db['boardID']."' AND moveID='0' ORDER BY lastdate DESC LIMIT 0,".$maxtopics);
$n=1;
$board_topics = Array();
while($lp = mysql_fetch_assoc($q)) {

if($n == 1) {

$date=date("d.m.Y", $lp['lastdate']);
$today=date("d.m.Y", time());
$yesterday = date("d.m.Y", time()-3600*24);

if($date==$today) $date=$_language->module['today'];
elseif($date==$yesterday && $date<$today) $date=$_language->module['yesterday'];
else $date=$date;

$time=date("- H:i", $lp['lastdate']);
$poster='<a href="index.php?site=profile&amp;id='.$lp['lastposter'].'">'.getnickname($lp['lastposter']).'</a>';
if(isclanmember($lp['lastposter'])) $member=' <img src="images/icons/member.gif" alt="'.$_language->module['clanmember'].'" />';
else $member='';
$topic=$lp['topicID'];
$postlink='index.php?site=forum_topic&amp;topic='.$topic.'&amp;type=ASC&amp;page='.ceil(($lp['replys']+1)/$maxposts);

}
if($userID) $board_topics[] = $ds['topicID'];
else break;
$n++;
}

// get unviewed topics

$found = false;

if($userID) {

$gv=mysql_fetch_array(safe_query("SELECT topics FROM ".PREFIX."user WHERE userID='$userID'"));
$array=explode("|", $gv['topics']);

foreach($array as $split) {

if($split != "" AND in_array($split, $board_topics)) {
$found=true;
break;
}
}
}

if($found) $icon='<img src="images/icons/boardicons/'.$writer.'on.gif" alt="'.$_language->module['new_posts'].'" />';
else $icon='<img src="images/icons/boardicons/'.$writer.'off.gif" alt="'.$_language->module['no_new_posts'].'" />';

eval ("\$forum_main_board = \"".gettemplate("forum_main_board")."\";");
echo $forum_main_board;

$i++;
}

eval ("\$forum_main_foot = \"".gettemplate("forum_main_foot")."\";");
echo $forum_main_foot;

if($loggedin) {
eval ("\$forum_main_legend = \"".gettemplate("forum_main_legend")."\";");
echo $forum_main_legend;
}


forum_stats();
}

function showboard($board) {
global $userID;
global $loggedin;
global $maxtopics;
global $maxposts;
global $page;
global $action;
global $_language;

$_language->read_module('forum');

$pagebg=PAGEBG;
$border=BORDER;
$bghead=BGHEAD;
$bgcat=BGCAT;

eval ("\$title_messageboard = \"".gettemplate("title_messageboard")."\";");
echo $title_messageboard;

$alle = safe_query("SELECT topicID FROM ".PREFIX."forum_topics WHERE boardID='$board'");
$gesamt=mysql_num_rows($alle);

if($action=="markall" AND $userID) {
$gv=mysql_fetch_array(safe_query("SELECT topics FROM ".PREFIX."user WHERE userID='$userID'"));

$board_topics = Array();
while($ds=mysql_fetch_array($alle)) $board_topics[] = $ds['topicID'];

$array=explode("|", $gv['topics']);
$new='|';

foreach($array as $split) {
if($split != "" AND !in_array($split, $board_topics)) $new .= $split.'|';
}

safe_query("UPDATE ".PREFIX."user SET topics='".$new."' WHERE userID='$userID'");
}

if(!isset($page) || $page=='') $page=1;
$max=$maxtopics;
$pages=ceil($gesamt/$max);

$page_link = '';
if($pages>1) $page_link = makepagelink("index.php?site=forum&amp;board=$board", $page, $pages);

if($page==1) $start=0;
if($page>1) $start=$page*$max-$max;

$db = mysql_fetch_array(safe_query("SELECT * FROM ".PREFIX."forum_boards WHERE boardID='".$board."' "));
$boardname = $db['name'];

$usergrp = 0;
$writer = 0;

$ismod=false;
if(ismoderator($userID, $board) OR isforumadmin($userID)) $ismod = true;

if($db['writegrps'] != "" and !$ismod) {
$writegrps = explode(";", $db['writegrps']);
foreach($writegrps as $value) {
if(isinusergrp($value, $userID)) {
$usergrp = 1;
$writer = 1;
break;
}
}
}
else $writer = 1;
if($db['readgrps'] != "" and !$usergrp and !$ismod) {
$readgrps = explode(";", $db['readgrps']);
foreach($readgrps as $value) {
if(isinusergrp($value, $userID)) {
$usergrp = 1;
break;
}
}
if(!$usergrp){
echo $_language->module['no_permission'];
redirect('index.php?site=forum','',2);
return;
}
}

$moderators=getmoderators($board);
if($moderators) $moderators='('.$_language->module['moderated_by'].': '.$moderators.')';

$actions='<a href="index.php?site=search">'.$_language->module['search_image'].'</a>';
if($loggedin) {
$mark='&#8226; <a href="index.php?site=forum&amp;board='.$board.'&amp;action=markall">'.$_language->module['mark_topics_read'].'</a>';
if($writer) $actions.=' <a href="index.php?site=forum&amp;addtopic=true&amp;board='.$board.'">'.$_language->module['newtopic_image'].'</a>';
} else $mark='';

$cat = $db['category'];
$kathname = getcategoryname($cat);
eval ("\$forum_head = \"".gettemplate("forum_head")."\";");
echo $forum_head;

// TOPICS


$topics = safe_query("SELECT * FROM ".PREFIX."forum_topics WHERE boardID='$board' ORDER BY sticky DESC, lastdate DESC LIMIT $start,$max");
$anztopics = mysql_num_rows(safe_query("SELECT boardID FROM ".PREFIX."forum_topics WHERE boardID='$board'"));

$i=1;
unset($link);
if($anztopics) {
eval ("\$forum_topics_head = \"".gettemplate("forum_topics_head")."\";");
echo $forum_topics_head;
while($dt=mysql_fetch_array($topics)) {
if($i%2) {
$bg1=BG_1;
$bg2=BG_2;
}
else {
$bg1=BG_3;
$bg2=BG_4;
}

if($dt['moveID']) $gesamt=0;
else $gesamt=$dt['replys']+1;

$topicpages=1;
$topicpages=ceil($gesamt/$maxposts);

$topicpage_link = '';
if($topicpages>1) $topicpage_link = makepagelink("index.php?site=forum_topic&amp;topic=".$dt['topicID'], 1, $topicpages);

if($dt['icon']) $icon='<img src="images/icons/topicicons/'.$dt['icon'].'" alt="" />';
else $icon='';

// viewed topics

if($dt['sticky']) {
$onicon = '<img src="images/icons/foldericons/newsticky.gif" alt="'.$_language->module['sticky'].'" />';
$officon = '<img src="images/icons/foldericons/sticky.gif" alt="'.$_language->module['sticky'].'" />';
$onhoticon = '<img src="images/icons/foldericons/newsticky.gif" alt="'.$_language->module['sticky'].'" />';
$offhoticon = '<img src="images/icons/foldericons/sticky.gif" alt="'.$_language->module['sticky'].'" />';
}
else {
$onicon = '<img src="images/icons/foldericons/newfolder.gif" alt="'.$_language->module['new_posts'].'" />';
$officon = '<img src="images/icons/foldericons/folder.gif" alt="no '.$_language->module['new_posts'].'" />';
$onhoticon = '<img src="images/icons/foldericons/newhotfolder.gif" alt="'.$_language->module['new_posts'].' ['.$_language->module['popular'].']" />';
$offhoticon = '<img src="images/icons/foldericons/hotfolder.gif" alt="no '.$_language->module['new_posts'].' ['.$_language->module['popular'].']" />';
}

if($dt['closed']) $folder='<img src="images/icons/foldericons/lockfolder.gif" alt="'.$_language->module['closed'].'" />';
elseif($dt['moveID']) $folder='<img src="images/icons/topicicons/pfeil.gif" alt="'.$_language->module['moved'].'" />';
elseif($userID) {

$is_unread = mysql_num_rows(safe_query("SELECT userID FROM ".PREFIX."user WHERE topics LIKE '%|".$dt['topicID']."|%' AND userID='".$userID."'"));

if($is_unread) {
if($dt['replys']>15 || $dt['views']>150) $folder=$onhoticon;
else $folder=$onicon;
}
else {
if($dt['replys']>15 || $dt['views']>150) $folder=$offhoticon;
else $folder=$officon;
}
}
else {
if($gesamt>15) $folder=$offhoticon;
else $folder=$officon;
}
// end viewed topics

$topictitle=getinput($dt['topic']);
$topictitle=str_break($topictitle, 40);

$poster='<a href="index.php?site=profile&amp;id='.$dt['userID'].'">'.getnickname($dt['userID']).'</a>';
if(isset($posterID) and isclanmember($posterID)) $member1=' <img src="images/icons/member.gif" alt="'.$_language->module['clanmember'].'" />';
else $member1='';

$replys='0';
$views='0';

if($dt['moveID']) { // MOVED TOPIC
$move=safe_query("SELECT * FROM ".PREFIX."forum_topics WHERE topicID='".$dt['moveID']."'");
$dm=mysql_fetch_array($move);

if($dm['replys']) $replys=$dm['replys'];
if($dm['views']) $views=$dm['views'];

$date=date("d.m.y", $dm['lastdate']);
$time=date("H:i", $dm['lastdate']);
$today=date("d.m.y", time());
$yesterday = date("d.m.y", time()-3600*24);
if($date==$today) $date=$_language->module['today'].", ".$time;
elseif($date==$yesterday && $date<$today) $date=$_language->module['yesterday'].", ".$time;
else $date=$date.", ".$time;
$lastposter='<a href="index.php?site=profile&amp;id='.$dm['lastposter'].'">'.getnickname($dm['lastposter']).'</a>';
if(isclanmember($dm['lastposter'])) $member=' <img src="images/icons/member.gif" alt="'.$_language->module['clanmember'].'" />';
else $member='';
$link='<a href="index.php?site=forum_topic&amp;topic='.$dt['moveID'].'"><b>'.$_language->module['moved'].': '.$topictitle.'</b></a>';

}
else { // NO MOVED TOPIC
if($dt['replys']) $replys=$dt['replys'];
if($dt['views']) $views=$dt['views'];

$date=date("d.m.y", $dt['lastdate']);
$time=date("H:i", $dt['lastdate']);
$today=date("d.m.y", time());
$yesterday = date("d.m.y", time()-3600*24);
if($date==$today) $date=$_language->module['today'].", ".$time;
elseif($date==$yesterday && $date<$today) $date=$_language->module['yesterday'].", ".$time;
else $date=$date.", ".$time;
$lastposter='<a href="index.php?site=profile&amp;id='.$dt['lastposter'].'">'.getnickname($dt['lastposter']).'</a>';
if(isclanmember($dt['lastposter'])) $member=' <img src="images/icons/member.gif" alt="'.$_language->module['clanmember'].'" />';
else $member='';
$link='<a href="index.php?site=forum_topic&amp;topic='.$dt['topicID'].'"><b>'.$topictitle.'</b></a>';
}

eval ("\$forum_topics_content = \"".gettemplate("forum_topics_content")."\";");
echo $forum_topics_content;
$i++;
unset($topicpage_link);
unset($lastposter);
unset($member);
unset($member1);
unset($date);
unset($time);
unset($link);

}
eval ("\$forum_topics_foot = \"".gettemplate("forum_topics_foot")."\";");
echo $forum_topics_foot;

}

eval ("\$forum_actions = \"".gettemplate("forum_actions")."\";");
echo $forum_actions;

if($loggedin) {
eval ("\$forum_topics_legend = \"".gettemplate("forum_topics_legend")."\";");
echo $forum_topics_legend;
}

if(!$loggedin) echo $_language->module['not_logged_msg'];

unset($page_link);
}

if(isset($_POST['submit']) || isset($_POST['movetopic']) || isset($_GET['addtopic']) || isset($_POST['addtopic']) || (isset($_GET['action']) and $_GET['action'] == "admin-action") || isset($_POST['admaction'])) {

if(!isset($_POST['admaction'])) $_POST['admaction'] = '';

if($_POST['admaction']=="closetopic") {
include("_mysql.php");
include("_settings.php");
include('_functions.php');
$_language->read_module('forum');

$topicID = (int)$_POST['topicID'];
$board = (int)$_POST['board'];

if(!isforumadmin($userID) and !ismoderator($userID, $board)) die($_language->module['no_access']);

safe_query("UPDATE ".PREFIX."forum_topics SET closed='1' WHERE topicID='$topicID' ");
header("Location: index.php?site=forum&board=$board");
}
elseif($_POST['admaction']=="opentopic") {
include("_mysql.php");
include("_settings.php");
include('_functions.php');
$_language->read_module('forum');

$topicID = (int)$_POST['topicID'];
$board = (int)$_POST['board'];

if(!isforumadmin($userID) and !ismoderator($userID, $board)) die($_language->module['no_access']);

safe_query("UPDATE ".PREFIX."forum_topics SET closed='0' WHERE topicID='$topicID' ");
header("Location: index.php?site=forum&board=$board");
}
elseif($_POST['admaction']=="deletetopic") {
include("_mysql.php");
include("_settings.php");
include('_functions.php');
$_language->read_module('forum');

$topicID = (int)$_POST['topicID'];
$board = (int)$_POST['board'];

if(!isforumadmin($userID) and !ismoderator($userID, $board)) die($_language->module['no_access']);

$numposts = mysql_num_rows(safe_query("SELECT postID FROM ".PREFIX."forum_posts WHERE topicID='".$topicID."'"));
$numposts --;

safe_query("UPDATE ".PREFIX."forum_boards SET topics=topics-1, posts=posts-".$numposts." WHERE boardID='".$board."' ");
safe_query("DELETE FROM ".PREFIX."forum_topics WHERE topicID='$topicID' ");
safe_query("DELETE FROM ".PREFIX."forum_topics WHERE moveID='$topicID' ");
safe_query("DELETE FROM ".PREFIX."forum_posts WHERE topicID='$topicID' ");
header("Location: index.php?site=forum&board=$board");
}
elseif($_POST['admaction']=="stickytopic") {
include("_mysql.php");
include("_settings.php");
include('_functions.php');
$_language->read_module('forum');

$topicID = (int)$_POST['topicID'];
$board = (int)$_POST['board'];

if(!isforumadmin($userID) and !ismoderator($userID, $board)) die($_language->module['no_access']);

safe_query("UPDATE ".PREFIX."forum_topics SET sticky='1' WHERE topicID='$topicID' ");
header("Location: index.php?site=forum&board=$board");
}
elseif($_POST['admaction']=="unstickytopic") {
include("_mysql.php");
include("_settings.php");
include('_functions.php');
$_language->read_module('forum');

$topicID = (int)$_POST['topicID'];
$board = (int)$_POST['board'];

if(!isforumadmin($userID) and !ismoderator($userID, $board)) die($_language->module['no_access']);

safe_query("UPDATE ".PREFIX."forum_topics SET sticky='0' WHERE topicID='$topicID' ");
header("Location: index.php?site=forum&board=$board");
}
elseif($_POST['admaction']=="delposts") {
include("_mysql.php");
include("_settings.php");
include('_functions.php');
$_language->read_module('forum');

$topicID = (int)$_POST['topicID'];
if(isset($_POST['postID']))$postID = $_POST['postID'];
else $postID = array();
$board = (int)$_POST['board'];

if(!isforumadmin($userID) and !ismoderator($userID, $board)) die($_language->module['no_access']);
$last = safe_query("SELECT * FROM ".PREFIX."forum_posts WHERE topicID = '$topicID' ");
$anz = mysql_num_rows($last);
$deleted = false;
foreach($postID as $id) {
if($anz > 1) {
safe_query("DELETE FROM ".PREFIX."forum_posts WHERE postID='".(int)$id."' ");
safe_query("UPDATE ".PREFIX."forum_boards SET posts=posts-1 WHERE boardID='".$board."' ");
$last = safe_query("SELECT * FROM ".PREFIX."forum_posts WHERE topicID = '$topicID' ORDER BY date DESC LIMIT 0,1 ");
$dl = mysql_fetch_array($last);
safe_query("UPDATE ".PREFIX."forum_topics SET lastdate='".$dl['date']."', lastposter='".$dl['poster']."', lastpostID='".$ds['postID']."', replys=replys-1 WHERE topicID='$topicID' ");
$deleted=false;
}
else {
safe_query("DELETE FROM ".PREFIX."forum_posts WHERE postID='".(int)$id."' ");
safe_query("DELETE FROM ".PREFIX."forum_topics WHERE topicID='$topicID' OR moveID='$topicID'");
safe_query("UPDATE ".PREFIX."forum_boards SET topics=topics-1 WHERE boardID='".$board."' ");
$deleted=true;
}
}
if($deleted) header("Location: index.php?site=forum&board=$board");
else header("Location: index.php?site=forum_topic&topic=$topicID");
}
elseif(isset($_POST['movetopic'])) {
include("_mysql.php");
include("_settings.php");
include('_functions.php');
$_language->read_module('forum');

$toboard = (int)$_POST['toboard'];
$topicID = (int)$_POST['topicID'];

if(!isanyadmin($userID) and !ismoderator($userID, getboardid($topicID))) die($_language->module['no_access']);

$di=mysql_fetch_array(safe_query("SELECT writegrps, readgrps FROM ".PREFIX."forum_boards WHERE boardID='$toboard'"));

$ergebnis=safe_query("SELECT * FROM ".PREFIX."forum_topics WHERE topicID='$topicID'");
$ds=mysql_fetch_array($ergebnis);

if(isset($_POST['movelink']) and $ds['boardID'] != $toboard) safe_query("INSERT INTO ".PREFIX."forum_topics (boardID, icon, userID, date, topic, lastdate, lastposter, replys, views, closed, moveID) values ('".$ds['boardID']."', '', '".$ds['userID']."', '".$ds['date']."', '".addslashes($ds['topic'])."', '".$ds['lastdate']."', '', '', '', '', '$topicID') ");

safe_query("UPDATE ".PREFIX."forum_topics SET boardID='$toboard', readgrps='".$di['readgrps']."', writegrps='".$di['writegrps']."' WHERE topicID='$topicID'");
safe_query("UPDATE ".PREFIX."forum_posts SET boardID='$toboard' WHERE topicID='$topicID'");
$post_num = mysql_affected_rows()-1;
safe_query("UPDATE ".PREFIX."forum_boards SET topics=topics+1 WHERE boardID='$toboard'");
safe_query("UPDATE ".PREFIX."forum_boards SET topics=topics-1 WHERE boardID='".$ds['boardID']."'");
safe_query("UPDATE ".PREFIX."forum_boards SET posts=posts+".$post_num." WHERE boardID='".$toboard."'");
safe_query("UPDATE ".PREFIX."forum_boards SET posts=posts-".$post_num." WHERE boardID='".$ds['boardID']."'");

header("Location: index.php?site=forum&board=$toboard");
}
elseif($_POST['admaction']=="movetopic") {
include("_mysql.php");
include("_settings.php");
include('_functions.php');
$_language->read_module('forum');
if(!isanyadmin($userID) and !ismoderator($userID, getboardid($_POST['topicID']))) die($_language->module['no_access']);

$boards='';
$kath=safe_query("SELECT * FROM ".PREFIX."forum_categories ORDER BY sort");
while($dk=mysql_fetch_array($kath)) {
$ergebnis=safe_query("SELECT * FROM ".PREFIX."forum_boards WHERE category='$dk[catID]' ORDER BY sort");
while($db=mysql_fetch_array($ergebnis)) {
$boards.='<option value="'.$db['boardID'].'">'.$dk['name'].' - '.$db['name'].'</option>';
}
}

$ergebnis=safe_query("SELECT * FROM ".PREFIX."forum_boards WHERE category='0' ORDER BY sort");
while($ds=mysql_fetch_array($ergebnis)) {
$boards.='<option value="'.$ds['boardID'].'">'.$ds['name'].'</option>';
}

$pagetitle = PAGETITLE;
$pagebg = PAGEBG;
$border = BORDER;
$bghead = BGHEAD;
$bg1 = BG_1;

eval ("\$forum_move_topic = \"".gettemplate("forum_move_topic")."\";");
echo $forum_move_topic;
}
elseif(isset($_POST['newtopic']) && !isset($_POST['preview'])) {
include("_mysql.php");
include("_settings.php");
include('_functions.php');
$_language->read_module('forum');
$_language->read_module('bbcode', true);

if(!$userID) die($_language->module['not_logged']);

$board = (int)$_POST['board'];
if(boardexists($board)){
if(isset($_POST['icon'])){
$icon = $_POST['icon'];
if(file_exists("images/icons/topicicons/".$icon)) $icon = $icon;
else $icon = "";
}
else $icon = '';
$topicname = $_POST['topicname']; if(!$topicname) $topicname = $_language->module['default_topic_title'];
$message = $_POST['message'];
$topic_sticky = (isset($_POST['sticky'])) ? '1' : '0';
$notify = (isset($_POST['notify'])) ? '1' : '0';

$ds=mysql_fetch_array(safe_query("SELECT readgrps, writegrps FROM ".PREFIX."forum_boards WHERE boardID='$board'"));

$writer = 0;
if($ds['writegrps'] != "") {
$writegrps = explode(";", $ds['writegrps']);
foreach($writegrps as $value) {
if(isinusergrp($value, $userID)) {
$writer = 1;
break;
}
}
if(ismoderator($userID, $board)) $writer = 1;
}
else $writer = 1;
if(!$writer) die($_language->module['no_access_write']);

$date=time();
safe_query("INSERT INTO ".PREFIX."forum_topics ( boardID, readgrps, writegrps, userID, date, icon, topic, lastdate, lastposter, replys, views, closed, sticky ) values ( '$board', '".$ds['readgrps']."', '".$ds['writegrps']."', '$userID', '$date', '".$icon."', '".$topicname."', '$date', '$userID', '0', '0', '0', '$topic_sticky' ) ");
$id=mysql_insert_id();
safe_query("UPDATE ".PREFIX."forum_boards SET topics=topics+1 WHERE boardID='".$board."'");
safe_query("INSERT INTO ".PREFIX."forum_posts ( boardID, topicID, date, poster, message ) values( '$board', '$id', '$date', '$userID', '".$message."' ) ");

// check if there are more than 1000 unread topics => delete oldest one
$dv = safe_query("SELECT topics FROM ".PREFIX."user WHERE userID='".$userID."'");
$array = explode('|', $dv['topics']);
if(count($array)>=1000) safe_query("UPDATE ".PREFIX."user SET topics='|".implode('|', array_slice($array, 2))."' WHERE userID='".$userID."'");
unset($array);

safe_query("UPDATE ".PREFIX."user SET topics=CONCAT(topics, '".$id."|')"); // update unread topics, format: |oldstring| => |oldstring|topicID|

if($notify) safe_query("INSERT INTO ".PREFIX."forum_notify (topicID, userID) VALUES ('$id', '$userID') ");
header("Location: index.php?site=forum&board=".$board."");
}
else{
header("Location: index.php?site=forum");
}
}
elseif(isset($_REQUEST['addtopic'])) {
$_language->read_module('forum');
$_language->read_module('bbcode', true);

eval ("\$title_messageboard = \"".gettemplate("title_messageboard")."\";");
echo $title_messageboard;

$ergebnis = safe_query("SELECT * FROM ".PREFIX."forum_boards WHERE boardID='$board' ");
$db = mysql_fetch_array($ergebnis);
$boardname = $db['name'];

$writer = 0;
if($db['writegrps'] != "") {
$writegrps = explode(";", $db['writegrps']);
foreach($writegrps as $value) {
if(isinusergrp($value, $userID)) {
$writer = 1;
break;
}
}
if(ismoderator($userID, $board)) $writer = 1;
}
else $writer = 1;
if(!$writer) die($_language->module['no_access_write']);

$moderators='';
$cat = $db['category'];
$kathname = getcategoryname($cat);

eval ("\$forum_head = \"".gettemplate("forum_head")."\";");
echo $forum_head;

$bg1=BG_1;

$message = '';

if($loggedin) {
if(isset($_POST['preview'])) {

$bg1=BG_1;
$bg2=BG_2;


$time=date("H:i", time());
$date="today";
$message = cleartext(stripslashes(str_replace(array('\r\n', '\n'),array("\n","\n" ), $_POST['message'])));
$message = toggle($message, 'xx');
$username='<a href="index.php?site=profile&amp;id='.$userID.'"><b>'.getnickname($userID).'</b></a>';

$board = (int)$_POST['board'];
$topicname = stripslashes($_POST['topicname']);
if(!isset($postID)) $postID = '';

if(isclanmember($userID)) $member=' <img src="images/icons/member.gif" alt="'.$_language->module['clanmember'].'" />';
else $member='';
if(getavatar($userID)) $avatar='<img src="images/avatars/'.getavatar($userID).'" alt="" />';
else $avatar='';
if(getsignatur($userID)) $signatur=cleartext(getsignatur($userID));
else $signatur='';
if(getemail($userID) and !getemailhide($userID)) $email = '<a href="mailto:'.mail_protect(getemail($userID)).'"><img src="images/icons/email.gif" border="0" alt="email" /></a>';
else $email='';

$pm='';
$buddy='';
$statuspic='<img src="images/icons/online.gif" width="7" height="7" alt="online" />';

if(!validate_url(gethomepage($userID))) $hp='';
else $hp='<a href="'.gethomepage($userID).'" target="_blank"><img src="images/icons/hp.gif" border="0" width="14" height="14" alt="'.$_language->module['homepage'].'" /></a>';

$registered = getregistered($userID);
$posts = getuserforumposts($userID);
if(isforumadmin($userID) || ismoderator($userID, $board)) {
if(ismoderator($userID, $board)) {
$usertype=$_language->module['moderator'];
$rang='<img src="images/icons/ranks/moderator.gif" alt="" />';
if(isset($_POST['sticky'])){
$_sticky = 'checked="checked"';
}
}
if(isforumadmin($userID)) {
$usertype="Administrator";
$rang='<img src="images/icons/ranks/admin.gif" alt="" />';
if(isset($_POST['sticky'])){
$_sticky = 'checked="checked"';
}
}
}
else {
$ergebnis=safe_query("SELECT * FROM ".PREFIX."forum_ranks WHERE $posts >= postmin AND $posts <= postmax");
$ds=mysql_fetch_array($ergebnis);
$usertype=$ds['rank'];
$rang='<img src="images/icons/ranks/'.$ds['pic'].'" alt="" />';
}
$actions = '';
$quote = '';

echo'<table width="100%" cellspacing="1" cellpadding="2" bgcolor="'.BORDER.'">
<tr bgcolor="'.BGHEAD.'">
<td colspan="2" class="title" align="center">'.cleartext($topicname).'</td>
</tr>
<tr bgcolor="'.PAGEBG.'"><td colspan="2"></td></tr>';

eval ("\$forum_topic_content = \"".gettemplate("forum_topic_content")."\";");
echo $forum_topic_content;

echo'</table>';


}
else{
$topicname = "";
}

eval ("\$addbbcode = \"".gettemplate("addbbcode")."\";");

if(isforumadmin($userID) || ismoderator($userID, $board)) {
if(isset($_sticky)){
$chk_sticky = '<br />'."\n".' <input class="input" type="checkbox" name="sticky" value="1" '.$_sticky.' /> '.$_language->module['make_sticky'];
}
else {
$chk_sticky = '<br />'."\n".' <input class="input" type="checkbox" name="sticky" value="1" /> '.$_language->module['make_sticky'];
}
}
else {
$chk_sticky = '';
}
if(isset($_POST['notify'])){
$notify = ' checked="checked"';
}
else {
$notify = '';
}
if(isset($_POST['topicname'])){
$topicname=getforminput($_POST['topicname']);
}
if(isset($_POST['message'])){
$message = getforminput($_POST['message']);
}
eval ("\$forum_newtopic = \"".gettemplate("forum_newtopic")."\";");
echo $forum_newtopic;
}
else {
echo $_language->module['not_logged_msg'];
}
}
elseif(!$_POST['admaction']) {
header("Location: index.php?site=forum");
}

}
elseif(!isset($board)) {
boardmain();
}
else showboard($board);

?>

<?php
/*
##########################################################################
# #
# Version 4 / / / #
# -----------__---/__---__------__----__---/---/- #
# | /| / /___) / ) (_ ` / ) /___) / / #
# _|/_|/__(___ _(___/_(__)___/___/_(___ _/___/___ #
# Free Content / Management System #
# / #
# #
# #
# Copyright 2005-2010 by webspell.org #
# #
# visit webSPELL.org, webspell.info to get webSPELL for free #
# - Script runs under the GNU GENERAL PUBLIC LICENSE #
# - It's NOT allowed to remove this copyright-tag #
# -- http://www.fsf.org/licensing/licenses/gpl.html #
# #
# Code based on WebSPELL Clanpackage (Michael Gruber - webspell.at), #
# Far Development by Development Team - webspell.org #
# #
# visit webspell.org #
# #
##########################################################################
*/

if(isset($_GET['page'])) $page = (int)$_GET['page'];
if(isset($_GET['delete'])) $delete = (bool)$_GET['delete']; else $delete='';
if(isset($_GET['edit'])) $edit = (bool)$_GET['edit']; else $edit='';
if(isset($_REQUEST['topic'])) $topic = (int)$_REQUEST['topic']; else $topic='';
if(isset($_REQUEST['addreply'])) $addreply = (bool)$_REQUEST['addreply']; else $addreply='';
if(isset($_GET['type'])) $type = (($_GET['type']=='ASC') || ($_GET['type']=='DESC')) ? $_GET['type']: ''; else $type='';
if(isset($_GET['quoteID'])) $quoteID = (int)$_GET['quoteID']; else $quoteID='';
$do_sticky = (isset($_POST['sticky'])) ? true : false;

// THX ADDON START 1/4

if(isset($_GET['thx'])) {
$_language->read_module('thx_addon');

$thxID = (int)$_GET['thx'];

$ds = mysql_fetch_array(safe_query("SELECT poster FROM ".PREFIX."forum_posts WHERE postID='$thxID'"));
$poster = $ds['poster'];

$date=time();
$thx_type='fo';

if ($userID == $poster) {
$showerror = $_language->module['own_post'];
$check_poster = 0;
}
else $check_poster = 1;

if ($userID == 0) {
$showerror = $_language->module['not_logged_in'];
$check_userid = 0;
}
else $check_userid = 1;

$check=mysql_num_rows(safe_query("SELECT thx_give FROM ".PREFIX."thx_addon WHERE thx_give='".$userID."' AND thx_topic='".$thxID."' AND thx_type='".$thx_type."'"));
if($check){
$showerror = $_language->module['already_thx'];
$check_give = 0;
}
else $check_give = 1;

if($check_userid == 1 AND $check_poster == 1 AND $check_give == 1){
safe_query("INSERT INTO ".PREFIX."thx_addon ( thx_get, thx_give, thx_time, thx_type, thx_topic ) VALUES( '$poster', '$userID', '$date', '$thx_type', '$thxID' ) ");
}
else {
echo '<div class="errorbox"><b>'.$_language->module['error_there'].':</b><br /><br />&#8226; '.$showerror.'</div>';
}
}

// THX ADDON END 1/4

if(isset($_POST['newreply']) && !isset($_POST['preview'])) {
include("_mysql.php");
include("_settings.php");
include("_functions.php");
$_language->read_module('forum');

if(!$userID) die($_language->module['not_logged']);

$message = $_POST['message'];
$topic = (int)$_POST['topic'];
$page = (int)$_POST['page'];

if(!(mb_strlen(trim($message)))) die($_language->module['forgot_message']);
$ds=mysql_fetch_array(safe_query("SELECT closed, writegrps, boardID FROM ".PREFIX."forum_topics WHERE topicID='".$topic."'"));
if($ds['closed']) die($_language->module['topic_closed']);

$writer = 0;
if($ds['writegrps'] != "") {
$writegrps = explode(";", $ds['writegrps']);
foreach($writegrps as $value) {
if(isinusergrp($value, $userID)) {
$writer = 1;
break;
}
}
if(ismoderator($userID, $ds['boardID'])) $writer = 1;
}
else $writer = 1;
if(!$writer) die($_language->module['no_access_write']);
$do_sticky = '';
if(isforumadmin($userID) OR isanymoderator($userID, $ds['boardID'])) {
$do_sticky = (isset($_POST['sticky'])) ? ', sticky=1' : ', sticky=0';
}

$date=time();
safe_query("INSERT INTO ".PREFIX."forum_posts ( boardID, topicID, date, poster, message ) VALUES( '".$_REQUEST['board']."', '$topic', '$date', '$userID', '".$message."' ) ");
$lastpostID = mysql_insert_id();
safe_query("UPDATE ".PREFIX."forum_boards SET posts=posts+1 WHERE boardID='".$_REQUEST['board']."' ");
safe_query("UPDATE ".PREFIX."forum_topics SET lastdate='".$date."', lastposter='".$userID."', lastpostID='".$lastpostID."', replys=replys+1 $do_sticky WHERE topicID='$topic' ");

// check if there are more than 1000 unread topics => delete oldest one
$dv = safe_query("SELECT topics FROM ".PREFIX."user WHERE userID='".$userID."'");
$array = explode('|', $dv['topics']);
if(count($array)>=1000) safe_query("UPDATE ".PREFIX."user SET topics='|".implode('|', array_slice($array, 2))."' WHERE userID='".$userID."'");
unset($array);

// add this topic to unread
safe_query("UPDATE ".PREFIX."user SET topics=CONCAT(topics, '".$topic."|') WHERE topics NOT LIKE '%|".$topic."|%'"); // update unread topics, format: |oldstring| => |oldstring|topicID|

$emails=array();
$ergebnis=safe_query("SELECT f.userID, u.email, u.language FROM ".PREFIX."forum_notify f JOIN ".PREFIX."user u ON u.userID=f.userID WHERE f.topicID=$topic");
while($ds=mysql_fetch_array($ergebnis)) {
$emails[] = Array('mail'=>$ds['email'], 'lang'=>$ds['language']);
}
safe_query("DELETE FROM ".PREFIX."forum_notify WHERE topicID='$topic'");

if(count($emails)) {

$de=mysql_fetch_array(safe_query("SELECT nickname FROM ".PREFIX."user WHERE userID='$userID'"));
$poster=$de['nickname'];
$de=mysql_fetch_array(safe_query("SELECT topic FROM ".PREFIX."forum_topics WHERE topicID='$topic'"));
$topicname=getinput($de['topic']);

$link="http://".$hp_url."/index.php?site=forum_topic&topic=".$topic;
$maillanguage = new Language;
$maillanguage->set_language($default_language);

foreach($emails as $email) {
$maillanguage->set_language($email['lang']);
$maillanguage->read_module('forum');
$forum_topic_notify = str_replace(Array('%poster%', '%topic_link%', '%pagetitle%', '%hpurl%'), Array(html_entity_decode($poster), $link, $hp_title, 'http://'.$hp_url), $maillanguage->module['notify_mail']);
$header = "From:".$admin_email."\nContent-type: text/plain; charset=utf-8\n";
@mail($email['mail'], $maillanguage->module['new_reply'].' ('.$hp_title.')', $forum_topic_notify, $header);
}
}

if(isset($_POST['notify']) and (bool)$_POST['notify']) {
safe_query("INSERT INTO ".PREFIX."forum_notify (topicID, userID) values('".$topic."', '".$userID."') ");
}
header("Location: index.php?site=forum_topic&topic=".$topic."&page=".$page);
exit();
}
elseif(isset($_POST['editreply']) and (bool)$_POST['editreply']) {
include("_mysql.php");
include("_settings.php");
include("_functions.php");
$_language->read_module('forum');

if(!isforumposter($userID,$_POST['id']) and !isforumadmin($userID) and !ismoderator($userID,$_GET['board'])) die($_language->module['no_accses']);

$message = $_POST['message'];
$id = (int)$_POST['id'];
$check=mysql_num_rows(safe_query("SELECT postID FROM ".PREFIX."forum_posts WHERE postID='".$id."' AND poster='".$userID."'"));
if(($check or isforumadmin($userID) or ismoderator($userID,(int)$_GET['board'])) and mb_strlen(trim($message))) {

if(isforumadmin($userID) OR isanymoderator($userID, $ds['boardID'])) {
$do_sticky = (isset($_POST['sticky'])) ? 'sticky=1' : 'sticky=0';
safe_query("UPDATE ".PREFIX."forum_topics SET $do_sticky WHERE topicID='".(int)$_GET['topic']."'");
}

$date=date("d.m.Y - H:i", time());
safe_query("UPDATE ".PREFIX."forum_posts SET message = '".$message."' WHERE postID='$id' ");
safe_query("DELETE FROM ".PREFIX."forum_notify WHERE userID='$userID' AND topicID='".(int)$_GET['topic']."'");
if(isset($_POST['notify'])) if((bool)$_POST['notify']) safe_query("INSERT INTO ".PREFIX."forum_notify (`notifyID`, `topicID`, `userID`) VALUES ('', '$userID', '".(int)$_GET['topic']."')");
}
header("Location: index.php?site=forum_topic&topic=".(int)$_GET['topic']."&page=".(int)$_GET['page']);
}
elseif(isset($_POST['saveedittopic']) and (bool)$_POST['saveedittopic']) {
include("_mysql.php");
include("_settings.php");
include("_functions.php");
$_language->read_module('forum');

if(!isforumadmin($userID) and !isforumposter($userID,$_POST['post']) and !ismoderator($userID,$_GET['board'])) die($_language->module['no_accses']);

$board = (int)$_GET['board'];
$topic = (int)$_GET['topic'];
$post = $_POST['post'];
if(isset($_POST['notify']))$notify = (bool)$_POST['notify'];
else $notify = false;
$topicname = $_POST['topicname'];
if(!$topicname) $topicname = $_language->module['default_topic_title'];
$message = $_POST['message'];
if(mb_strlen($message)){
if(isset($_POST['icon'])) $icon = $_POST['icon'];
else $icon = '';
$do_sticky = (isset($_POST['sticky'])) ? true : false;
if($do_sticky AND (isforumadmin($userID) OR isanymoderator($userID, $board))) $do_sticky=true;
else $do_sticky=false;

safe_query("UPDATE ".PREFIX."forum_posts SET message='".$message."' WHERE postID='".$post."'");
safe_query("UPDATE ".PREFIX."forum_topics SET topic='".$topicname."', icon='".$icon."', sticky='".$do_sticky."' WHERE topicID='".$topic."'");

if($notify==1) {
$notified = safe_query("SELECT * FROM ".PREFIX."forum_notify WHERE topicID='".$topic."' AND userID='".$userID."'");
if(mysql_num_rows($notified)!=1) {
safe_query("INSERT INTO ".PREFIX."forum_notify (notifyID, topicID, userID) VALUES ('', '$topic', '$userID')");
}
} else {
safe_query("DELETE FROM ".PREFIX."forum_notify WHERE topicID='".$topic."' AND userID='".$userID."'");
}
}
header("Location: index.php?site=forum_topic&topic=".$topic);
}
function showtopic($topic, $edit, $addreply, $quoteID, $type) {
global $userID;
global $loggedin;
global $page;
global $maxposts;
global $preview;
global $message;
global $picsize_l;
global $_language;

$_language->read_module('forum');
$_language->read_module('bbcode', true);
// THX ADDON START 2/4
$_language->read_module('thx_addon',true);
// THX ADDON END 2/4

$pagebg=PAGEBG;
$border=BORDER;
$bghead=BGHEAD;
$bgcat=BGCAT;

$thread = safe_query("SELECT * FROM ".PREFIX."forum_topics WHERE topicID='$topic' ");
$dt = mysql_fetch_array($thread);

$usergrp = 0;
$writer = 0;
$ismod = ismoderator($userID, $dt['boardID']);
if($dt['writegrps'] != "" and !$ismod) {
$writegrps = explode(";", $dt['writegrps']);
foreach($writegrps as $value) {
if(isinusergrp($value, $userID)) {
$usergrp = 1;
$writer = 1;
break;
}
}
}
else $writer = 1;
if($dt['readgrps'] != "" and !$usergrp and !$ismod) {
$readgrps = explode(";", $dt['readgrps']);
foreach($readgrps as $value) {
if(isinusergrp($value, $userID)) {
$usergrp = 1;
break;
}
}
if(!$usergrp){
echo $_language->module['no_permission'];
redirect('index.php?site=forum',$_language->module['no_permission'],2);
return;
}
}
$gesamt = mysql_num_rows(safe_query("SELECT topicID FROM ".PREFIX."forum_posts WHERE topicID='$topic'"));
if($gesamt==0) die($_language->module['topic_not_found']." <a href=\"javascript:history.back()\">back</a>");
$pages=1;
if(!isset($page) || $site='') $page=1;
if(isset($type)){
if(!(($type=='ASC') || ($type=='DESC'))) $type="ASC";
}
else{
$type="ASC";
}
$max=$maxposts;
$pages=ceil($gesamt/$maxposts);

$page_link = '';
if($pages>1) $page_link = makepagelink("index.php?site=forum_topic&amp;topic=$topic&amp;type=$type", $page, $pages);
if($type=="ASC") {
$sorter='<a href="index.php?site=forum_topic&amp;topic='.$topic.'&amp;page='.$page.'&amp;type=DESC">'.$_language->module['sort'].':</a> <img src="images/icons/asc.gif" alt="" />';
}
else {
$sorter='<a href="index.php?site=forum_topic&amp;topic='.$topic.'&amp;page='.$page.'&amp;type=ASC">'.$_language->module['sort'].':</a> <img src="images/icons/desc.gif" alt="" />';
}

$start=0;
if($page>1) $start=$page*$max-$max;

safe_query("UPDATE ".PREFIX."forum_topics SET views=views+1 WHERE topicID='$topic' ");

// viewed topics

if(mysql_num_rows(safe_query("SELECT userID FROM ".PREFIX."user WHERE topics LIKE '%|".$topic."|%'"))) {

$gv=mysql_fetch_array(safe_query("SELECT topics FROM ".PREFIX."user WHERE userID='$userID'"));
$array=explode("|", $gv['topics']);
$new='|';

foreach($array as $split) {
if($split != "" AND $split!=$topic) $new = $new.$split.'|';
}

safe_query("UPDATE ".PREFIX."user SET topics='".$new."' WHERE userID='$userID'");
}

// end viewed topics

$topicname=getinput($dt['topic']);

$ergebnis = safe_query("SELECT * FROM ".PREFIX."forum_boards WHERE boardID='".$dt['boardID']."' ");
$db = mysql_fetch_array($ergebnis);
$boardname = $db['name'];

$moderators=getmoderators($dt['boardID']);

$topicactions='<a href="printview.php?board='.$dt['boardID'].'&amp;topic='.$topic.'" target="_blank"><img src="images/icons/printview.gif" border="0" alt="printview" /></a> ';
if($loggedin and $writer) $topicactions.='<a href="index.php?site=forum&amp;addtopic=true&amp;action=newtopic&amp;board='.$dt['boardID'].'">'.$_language->module['newtopic_image'].'</a> <a href="index.php?site=forum_topic&amp;topic='.$topic.'&amp;addreply=true&amp;page='.$pages.'&amp;type='.$type.'">'.$_language->module['newreply_image'].'</a>';
if($dt['closed']) $closed=$_language->module['closed_image'];
else $closed='';
$posttype='topic';

$kathname = getcategoryname($db['category']);
eval ("\$forum_topics_title = \"".gettemplate("forum_topics_title")."\";");
echo $forum_topics_title;

eval ("\$forum_topics_actions = \"".gettemplate("forum_topics_actions")."\";");
echo $forum_topics_actions;

if($dt['closed']) {
echo'<br /><br />'.$_language->module['closed_image'].'<br /><br />';
}

if($edit && !$dt['closed']) {

$id = $_GET['id'];
$dr = mysql_fetch_array(safe_query("SELECT * FROM ".PREFIX."forum_posts WHERE postID='".$id."'"));
$topic = $_GET['topic'];
$bg1=BG_1;
$_sticky = ($dt['sticky'] == '1') ? 'checked="checked"' : '';

$anz = mysql_num_rows(safe_query("SELECT * FROM ".PREFIX."forum_posts WHERE topicID='".$dt['topicID']."' AND postID='".$id."' AND poster='".$userID."' ORDER BY date ASC LIMIT 0,1"));
if($anz OR isforumadmin($userID) OR ismoderator($userID,$dt['boardID'])) {
if(istopicpost($dt['topicID'], $id)) {
$bg1=BG_1;

// topicmessage
$message = getinput($dr['message']);
$post = $id;
$board = $dt['boardID'];

// notification check
$notifyqry = safe_query("SELECT * FROM ".PREFIX."forum_notify WHERE topicID='".$topic."' AND userID='".$userID."'");
if(mysql_num_rows($notifyqry)) {
$notify = '<input class="input" type="checkbox" name="notify" value="1" checked="checked" /> '.$_language->module['notify_reply'].'<br />';
} else {
$notify = '<input class="input" type="checkbox" name="notify" value="1" /> '.$_language->module['notify_reply'].'<br />';
}
//STICKY
if(isforumadmin($userID) || ismoderator($userID, $board)) {
$chk_sticky = '<br />'."\n".' <input class="input" type="checkbox" name="sticky" value="1" '.$_sticky.' /> '.$_language->module['make_sticky'];
}
else {
$chk_sticky = '';
}

// topic icon list
$iconlist = '<tr bgcolor="'.$bg1.'">
<td><input type="radio" class="input" name="icon" value="ausrufezeichen.gif" />
<img src="images/icons/topicicons/ausrufezeichen.gif" width="15" height="15" alt="" /></td>
<td><input type="radio" class="input" name="icon" value="biggrin.gif" />
<img src="images/icons/topicicons/biggrin.gif" width="15" height="15" alt="" /></td>
<td><input type="radio" class="input" name="icon" value="boese.gif" />
<img src="images/icons/topicicons/boese.gif" width="15" height="15" alt="" /></td>
<td><input type="radio" class="input" name="icon" value="bored.gif" />
<img src="images/icons/topicicons/bored.gif" width="15" height="15" alt="" /></td>
<td><input type="radio" class="input" name="icon" value="cool.gif" />
<img src="images/icons/topicicons/cool.gif" width="15" height="15" alt="" /></td>
<td><input type="radio" class="input" name="icon" value="eek.gif" />
<img src="images/icons/topicicons/eek.gif" width="15" height="15" alt="" /></td>
<td><input type="radio" class="input" name="icon" value="frage.gif" />
<img src="images/icons/topicicons/frage.gif" width="15" height="15" alt="" /></td>
<td><input type="radio" class="input" name="icon" value="frown.gif" />
<img src="images/icons/topicicons/frown.gif" width="15" height="15" alt="" /></td>
</tr>
<tr bgcolor="'.$bg1.'">
<td><input type="radio" class="input" name="icon" value="lampe.gif" />
<img src="images/icons/topicicons/lampe.gif" width="15" height="15" alt="" /></td>
<td><input type="radio" class="input" name="icon" value="mad.gif" />
<img src="images/icons/topicicons/mad.gif" width="15" height="15" alt="" /></td>
<td><input type="radio" class="input" name="icon" value="pfeil.gif" />
<img src="images/icons/topicicons/pfeil.gif" width="15" height="15" alt="" /></td>
<td><input type="radio" class="input" name="icon" value="smile.gif" />
<img src="images/icons/topicicons/smile.gif" width="15" height="15" alt="" /></td>
<td><input type="radio" class="input" name="icon" value="text.gif" />
<img src="images/icons/topicicons/text.gif" width="15" height="15" alt="" /></td>
<td><input type="radio" class="input" name="icon" value="thumb_down.gif" />
<img src="images/icons/topicicons/thumb_down.gif" width="15" height="15" alt="" /></td>
<td><input type="radio" class="input" name="icon" value="thumb_up.gif" />
<img src="images/icons/topicicons/thumb_up.gif" width="15" height="15" alt="" /></td>
<td><input type="radio" class="input" name="icon" value="wink.gif" />
<img src="images/icons/topicicons/wink.gif" width="15" height="15" alt="" /></td>
</tr>
<tr bgcolor="'.$bg1.'">
<td colspan="4"><input type="radio" class="input" name="icon" value="0" /> '.$_language->module['no_icon'].'</td>
</tr>';
if($dt['icon']) $iconlist = str_replace('value="'.$dt['icon'].'"', 'value="'.$dt['icon'].'" checked="checked"', $iconlist);
else $iconlist = str_replace('value="0"', 'value="0" checked="checked"', $iconlist);
eval ("\$addbbcode = \"".gettemplate("addbbcode")."\";");
eval ("\$forum_edittopic = \"".gettemplate("forum_edittopic")."\";");
echo $forum_edittopic;
}
else {
// notification check
$notifyqry = safe_query("SELECT * FROM ".PREFIX."forum_notify WHERE topicID='".$topic."' AND userID='".$userID."'");
if(mysql_num_rows($notifyqry)) {
$notify = '<input class="input" type="checkbox" name="notify" value="1" checked="checked" /> '.$_language->module['notify_reply'];
} else {
$notify = '<input class="input" type="checkbox" name="notify" value="1" /> '.$_language->module['notify_reply'];
}
//STICKY
if(isforumadmin($userID) || ismoderator($userID, $board)) {
$chk_sticky = '<br />'."\n".' <input class="input" type="checkbox" name="sticky" value="1" '.$_sticky.' /> '.$_language->module['make_sticky'];
}
else {
$chk_sticky = '';
}
$dr['message']=getinput($dr['message']);
eval ("\$addbbcode = \"".gettemplate("addbbcode")."\";");
eval ("\$forum_editpost = \"".gettemplate("forum_editpost")."\";");
echo $forum_editpost;
}
}
else {
echo $_language->module['permission_denied'].'<br /><br />';
}

$replys = safe_query("SELECT * FROM ".PREFIX."forum_posts WHERE topicID='$topic' ORDER BY date DESC LIMIT $start, $max");
}
elseif($addreply && !$dt['closed']) {
if($loggedin and $writer) {
if(isset($_POST['preview'])) {
$bg1=BG_1;
$bg2=BG_2;

$time=date("H:i", time());
$date=$_language->module['today'];

$message_preview = getforminput($_POST['message']);
$postID = 0;

$message = cleartext(getforminput($_POST['message']));

$message = toggle($message, 'xx');
$username='<a href="index.php?site=profile&amp;id='.$userID.'"><b>'.getnickname($userID).'</b></a>';

if(isclanmember($userID)) $member=' <img src="images/icons/member.gif" alt="'.$_language->module['clanmember'].'" />';
else $member='';
if($getavatar = getavatar($userID)) $avatar='<img src="images/avatars/'.$getavatar.'" alt="" />';
else $avatar='';
if($getsignatur = getsignatur($userID)) $signatur=cleartext($getsignatur);
else $signatur='';
if($getemail = getemail($userID) and !getemailhide($userID)) $email = '<a href="mailto:'.mail_protect($getemail).'"><img src="images/icons/email.gif" border="0" alt="email" /></a>';
else $email='';
if(isset($_POST['notify'])) $notify = 'checked="checked"';
else $notify = '';
$pm='';
$buddy='';
$statuspic='<img src="images/icons/online.gif" alt="online" />';
if(!validate_url(gethomepage($userID))) $hp='';
else $hp='<a href="'.gethomepage($userID).'" target="_blank"><img src="images/icons/hp.gif" border="0" alt="'.$_language->module['homepage'].'" /></a>';
$registered = getregistered($userID);
$posts = getuserforumposts($userID);
if(isset($_POST['sticky'])) $post_sticky = $_POST['sticky'];
else $post_sticky = null;
$_sticky = ($dt['sticky'] == '1' || $post_sticky == '1') ? 'checked="checked"' : '';

if(isforumadmin($userID)) {
$usertype=$_language->module['admin'];
$rang='<img src="images/icons/ranks/admin.gif" alt="" />';
}
elseif(isanymoderator($userID)) {
$usertype=$_language->module['moderator'];
$rang='<img src="images/icons/ranks/moderator.gif" alt="" />';
} else {
$ergebnis=safe_query("SELECT * FROM ".PREFIX."forum_ranks WHERE $posts >= postmin AND $posts <= postmax AND postmax >0");
$ds=mysql_fetch_array($ergebnis);
$usertype=$ds['rank'];
$rang='<img src="images/icons/ranks/'.$ds['pic'].'" alt="" />';
}

if(isforumadmin($userID)) $chk_sticky = '<br />'."\n".' <input class="input" type="checkbox" name="sticky" value="1" '.$_sticky.' /> '.$_language->module['make_sticky'];
elseif(isanymoderator($userID)) $chk_sticky = '<br />'."\n".' <input class="input" type="checkbox" name="sticky" value="1" '.$_sticky.' /> '.$_language->module['make_sticky'];
else $chk_sticky = '';
$quote = "";
$actions = "";
echo'<table width="100%" cellspacing="1" cellpadding="2" bgcolor="'.BORDER.'">
<tr bgcolor="'.BGHEAD.'">
<td colspan="2" class="title" align="center">'.$_language->module['preview'].'</td>
</tr>
<tr bgcolor="'.PAGEBG.'"><td colspan="2"></td></tr>';

eval ("\$forum_topic_content = \"".gettemplate("forum_topic_content")."\";");
echo $forum_topic_content;

echo'</table>';

$message = $message_preview;
}
else {
if($quoteID) {
$ergebnis=safe_query("SELECT poster,message FROM ".PREFIX."forum_posts WHERE postID='$quoteID'");
$ds=mysql_fetch_array($ergebnis);
$message='';
}
}
if(isset($_POST['sticky'])) $post_sticky = $_POST['sticky'];
else $post_sticky = null;
$_sticky = ($dt['sticky'] == '1' || $post_sticky == '1') ? 'checked="checked"' : '';
if(isforumadmin($userID) || ismoderator($userID, $dt['boardID'])) {
$chk_sticky = '<br />'."\n".' <input class="input" type="checkbox" name="sticky" value="1" '.$_sticky.' /> '.$_language->module['make_sticky'];
}
else {
$chk_sticky = '';
}

if(isset($_POST['notify'])) $post_notify = $_POST['notify'];
else $post_notify = null;
$mysql_notify = mysql_num_rows(safe_query("SELECT notifyID FROM ".PREFIX."forum_notify WHERE userID='".$userID."' AND topicID='".$topic."'"));
$notify = ($mysql_notify || $post_notify == '1') ? 'checked="checked"' : '';


$bg1=BG_1;
$board = $dt['boardID'];

eval ("\$addbbcode = \"".gettemplate("addbbcode")."\";");
eval ("\$forum_newreply = \"".gettemplate("forum_newreply")."\";");
echo $forum_newreply;
}
elseif($loggedin) {
echo'<br /><br />'.$_language->module['no_access_write'].'<br /><br />';
}
else {
echo $_language->module['not_logged_msg'];
}
$replys = safe_query("SELECT * FROM ".PREFIX."forum_posts WHERE topicID='$topic' ORDER BY date DESC LIMIT 0, ".$max."");
}
else $replys = safe_query("SELECT * FROM ".PREFIX."forum_posts WHERE topicID='$topic' ORDER BY date $type LIMIT ".$start.", ".$max."");

eval ("\$forum_topic_head = \"".gettemplate("forum_topic_head")."\";");
echo $forum_topic_head;

// THX ADDON START 3/4
$bg_space=BG_1;
// THX ADDON END 3/4

$i=1;
while($dr=mysql_fetch_array($replys)) {
if($i%2) {
$bg1=BG_1;
$bg2=BG_2;
}
else {
$bg1=BG_3;
$bg2=BG_4;
}

$date=date("d.m.Y", $dr['date']);
$time=date("H:i", $dr['date']);

$today=date("d.m.Y", time());
$yesterday = date("d.m.Y", time()-3600*24);

if($date==$today) $date=$_language->module['today'];
elseif($date==$yesterday && $date<$today) $date=$_language->module['yesterday'];
else $date=$date;

$message = cleartext($dr['message']);
$message = toggle($message, $dr['postID']);
$postID = $dr['postID'];

// THX ADDON START 4/4

$cfg = mysql_fetch_array(safe_query("SELECT * FROM ".PREFIX."thx_addon_settings"));
$thx_forum_active = $cfg['thx_forum_active'];
$thx_forum_output = $cfg['thx_forum_output'];

if($thx_forum_active == '1'){

$ergebnis=mysql_num_rows(safe_query("SELECT thx_give FROM ".PREFIX."thx_addon WHERE thx_get='".$dr['poster']."' AND thx_give='".$userID."' AND thx_topic='".$postID."' "));
if($ergebnis or $userID == $dr['poster'] or !$userID) $thx=NULL;
else $thx = '<a href="index.php?site=forum_topic&amp;topic='.$topic.'&amp;type='.$type.'&amp;page='.$page.'&amp;thx='.$postID.'#'.$postID.'"><img src="images/icons/thanks.gif" border="0" alt="'.$_language->module['thanks'].'" /> </a>';

$ergebnis = safe_query("SELECT thx_give FROM ".PREFIX."thx_addon WHERE thx_topic='".$postID."' AND thx_type='fo'");
if(mysql_num_rows($ergebnis)){
$thx_list=NULL;
$n=1;
while($da=mysql_fetch_array($ergebnis)){
if($thx_forum_output == 'nickname'){
if($n == 1) {
$thx_list.='<a href="index.php?site=profile&amp;id='.$da['thx_give'].'">'.getnickname($da['thx_give']).'</a>';
}
else {
$thx_list.=', <a href="index.php?site=profile&amp;id='.$da['thx_give'].'">'.getnickname($da['thx_give']).'</a>';
}
}
else {
$thx_list.='<a href="index.php?site=profile&amp;id='.$da['thx_give'].'"><img src="images/avatars/'.getavatar($da['thx_give']).'" height="30" alt="'.getnickname($da['thx_give']).'" /></a> ';
}
$n++;
}
$thxs_count = mysql_num_rows($ergebnis);
$thx_output='<tr><td style="border-right:1px solid #999999; border-left:1px solid #999999; border-bottom:1px solid #999999; font-size: 14pt;" bgcolor="'.$bg1.'" align="center" valign="middle">'.$_language->module['thx'].'<br/><span style="font-size: 8pt;">'.$thxs_count.' '.$_language->module['user'].'</span></td><td style="border-right:1px solid #999999; border-bottom:1px solid #999999;" bgcolor="'.$bg2.'" align="left" valign="top"><div style="max-height:49px; overflow:auto;">'.$thx_list.'</div></td></tr>';
}
else {
$thxs_count = NULL;
$thx_output = NULL;
}
}
else {
$thx_output = NULL;
$thx=NULL;
}

// THX ADDON END 4/4

$username='<a href="index.php?site=profile&amp;id='.$dr['poster'].'"><b>'.stripslashes(getnickname($dr['poster'])).'</b></a>';

if(isclanmember($dr['poster'])) $member=' <img src="images/icons/member.gif" alt="'.$_language->module['clanmember'].'" />';
else $member='';

if($getavatar = getavatar($dr['poster'])) $avatar='<img src="images/avatars/'.$getavatar.'" alt="" />';
else $avatar='';

if($getsignatur = getsignatur($dr['poster'])) $signatur=cleartext($getsignatur);
else $signatur='';

if($getemail = getemail($dr['poster']) and !getemailhide($dr['poster'])) $email = '<a href="mailto:'.mail_protect($getemail).'"><img src="images/icons/email.gif" border="0" alt="email" /></a>';
else $email='';

$pm='';
$buddy='';
if($loggedin && $dr['poster']!=$userID) {
$pm='<a href="index.php?site=messenger&amp;action=touser&amp;touser='.$dr['poster'].'"><img src="images/icons/pm.gif" border="0" width="12" height="13" alt="'.$_language->module['messenger'].'" /></a>';
if(isignored($userID, $dr['poster'])) $buddy='<a href="buddys.php?action=readd&amp;id='.$dr['poster'].'&amp;userID='.$userID.'"><img src="images/icons/buddy_readd.gif" border="0" alt="'.$_language->module['back_buddy'].'" /></a>';
elseif(isbuddy($userID, $dr['poster'])) $buddy='<a href="buddys.php?action=ignore&amp;id='.$dr['poster'].'&amp;userID='.$userID.'"><img src="images/icons/buddy_ignore.gif" border="0" alt="'.$_language->module['ignore'].'" /></a>';
else $buddy='<a href="buddys.php?action=add&amp;id='.$dr['poster'].'&amp;userID='.$userID.'"><img src="images/icons/buddy_add.gif" border="0" alt="'.$_language->module['add_buddy'].'" /></a>';
}

if(isonline($dr['poster'])=="offline") $statuspic='<img src="images/icons/offline.gif" alt="offline" />';
else $statuspic='<img src="images/icons/online.gif" alt="online" />';

if(!validate_url(gethomepage($dr['poster']))) $hp='';
else $hp='<a href="'.gethomepage($dr['poster']).'" target="_blank"><img src="images/icons/hp.gif" border="0" alt="'.$_language->module['homepage'].'" /></a>';

if(!$dt['closed']) $quote='<a href="index.php?site=forum_topic&amp;addreply=true&amp;board='.$dt['boardID'].'&amp;topic='.$topic.'&amp;quoteID='.$dr['postID'].'&amp;page='.$page.'&amp;type='.$type.'"><img src="images/icons/quote.gif" border="0" alt="'.$_language->module['quote'].'" /></a>';
else $quote = "";

$registered = getregistered($dr['poster']);

$posts = getuserforumposts($dr['poster']);

if(isforumadmin($dr['poster'])) {
$usertype=$_language->module['admin'];
$rang='<img src="images/icons/ranks/admin.gif" alt="" />';
}
elseif(isanymoderator($dr['poster'])) {
$usertype=$_language->module['moderator'];
$rang='<img src="images/icons/ranks/moderator.gif" alt="" />';
} else {
$ergebnis=safe_query("SELECT * FROM ".PREFIX."forum_ranks WHERE $posts >= postmin AND $posts <= postmax AND postmax >0");
$ds=mysql_fetch_array($ergebnis);
$usertype=$ds['rank'];
$rang='<img src="images/icons/ranks/'.$ds['pic'].'" alt="" />';
}

$actions='';
if(($userID == $dr['poster'] OR isforumadmin($userID) OR ismoderator($userID,$dt['boardID']))&& !$dt['closed']) $actions=' <a href="index.php?site=forum_topic&amp;topic='.$topic.'&amp;edit=true&amp;id='.$dr['postID'].'&amp;page='.$page.'"><img src="images/icons/edit.gif" border="0" alt="'.$_language->module['edit'].'" /></a> ';
if(isforumadmin($userID) OR ismoderator($userID,$dt['boardID'])) $actions.='<input class="input" type="checkbox" name="postID[]" value="'.$dr['postID'].'" />';

eval ("\$forum_topic_content = \"".gettemplate("forum_topic_content")."\";");
echo $forum_topic_content;
unset($actions);
$i++;
}

$adminactions = "";
if(isforumadmin($userID) OR ismoderator($userID,$dt['boardID'])) {

if($dt['closed']) $close='<option value="opentopic">- '.$_language->module['reopen_topic'].'</option>';
else $close='<option value="closetopic">- '.$_language->module['close_topic'].'</option>';

$adminactions='<input class="input" type="checkbox" name="ALL" value="ALL" onclick="SelectAll(this.form);" /> '.$_language->module['select_all'].'
<select name="admaction">
<option value="0">'.$_language->module['admin_actions'].':</option>
<option value="delposts">- '.$_language->module['delete_posts'].'</option>
<option value="stickytopic">- '.$_language->module['make_topic_sticky'].'</option>
<option value="unstickytopic">- '.$_language->module['make_topic_unsticky'].'</option>
<option value="movetopic">- '.$_language->module['move_topic'].'</option>
'.$close.'
<option value="deletetopic">- '.$_language->module['delete_topic'].'</option>
</select>
<input type="hidden" name="topicID" value="'.$topic.'" />
<input type="hidden" name="board" value="'.$dt['boardID'].'" />
<input type="submit" name="submit" value="'.$_language->module['go'].'" />';

}

eval ("\$forum_topic_foot = \"".gettemplate("forum_topic_foot")."\";");
echo $forum_topic_foot;

eval ("\$forum_topics_actions = \"".gettemplate("forum_topics_actions")."\";");
echo $forum_topics_actions;

echo'<div align="right">'.$adminactions.'</div></form>';

if($dt['closed']) {
echo $_language->module['closed_image'];
}
else {
if(!$loggedin && !$edit) {
echo $_language->module['not_logged_msg'];
}
}
}
showtopic($topic, $edit, $addreply, $quoteID, $type);
?>

if($loggedin and $writer) $topicactions.='<input type="button" value="'.$_language->module['new_topic'].'" onclick="window.location=\'index.php?site=forum&amp;addtopic=true&amp;action=newtopic&amp;board='.$dt['boardID'].'\'" /> <input type="button" value="'.$_language->module['new_reply'].'" onclick="window.location=\'index.php?site=forum_topic&amp;topic='.$topic.'&amp;addreply=true&amp;page='.$pages.'&amp;type='.$type.'\'" />';
if($dt['closed']) $closed=$_language->module['closed_image'];
else $closed='';
$posttype='topic';