Help Tool
  
 
 

enter your username and password

Username:


Password:



Error: That username doesn't exist!"); } elseif(isset($_SESSION["admin_username"]) && $_SESSION["admin_level"] == "admin" && $_GET["error"] == "empty") { echo("

Error: Please fill in all the forms."); } elseif(isset($_SESSION["admin_username"]) && $_SESSION["admin_level"] == "admin" && $_GET["error"] == "wrong_pass") { echo("

Error: That password is incorrect!"); } else { } ?>

Administration Panel

Welcome to the Administration Panel !

- Logout
- Change password
- Add an account
- Delete an account


Note:
You currently have 0 messages!"); } while($r = mysql_fetch_array($query)) { echo("Habbo Name: ". $r["username"] ."
Email Address: ". $r["email"] ."

Read Message


"); } ?>

Administration Panel

Welcome to the Administration Panel !


Habbo Name:
". $r["username"] ."

Email Address:
". $r["email"] ."

Message:
". ($r["message"]) ."

Go Back | Delete Message | Reply


"); } ?>
Error: A message with that id (".$id.") doesn't exist sorry!"); } else { echo("Note:
Are you sure you want to delete this message? (ID: ".$id.")

No | Yes"); } } elseif(isset($_SESSION["admin_username"]) && $_SESSION["admin_level"] == "admin" && $_GET["action"] == "do_delete") { $id = $_GET["id"]; $id = clean($id, "sql"); $query = mysql_query("DELETE FROM `help_tool` WHERE `id` = '".$id."'") or die("Could not perform SQL Action, error: ".mysql_error()); echo("Thank you!

The message with the ID of ".$id." has been successfully deleted!

Go back"); } elseif(isset($_SESSION["admin_username"]) && $_SESSION["admin_level"] == "admin" && $_GET["action"] == "change_pword") { echo('
Current Password:


New Password:


'); } elseif(isset($_SESSION["admin_username"]) && $_SESSION["admin_level"] == "admin" && $_GET["action"] == "do_pword" && $_POST["curpass"] && $_POST["newpass"]) { $old_pass = encrypt($_POST["curpass"], "sql"); $new_pass = encrypt($_POST["newpass"], "sql"); $query = mysql_query("SELECT * FROM `users` WHERE `username` = '".$_SESSION["admin_username"]."'") or die("Could not perform SQL Action, error: ".mysql_error()); while($r = mysql_fetch_array($query)) { $real_pass = $r["password"]; } if($old_pass != $real_pass) { echo("Error:
The old password you entered does not match your password, please go back and correct this.

Go back echo ".$old_pass." - ".$real_pass.""); } else { /* Password matches, w000t!!! */ $query = mysql_query("UPDATE `users` SET `password` = '".$new_pass."'") or die("Could not perform SQL Action, error: ".mysql_error()); echo("Thank you!

Your password has been successfully changed!

Go back"); } } elseif(isset($_SESSION["admin_username"]) && $_SESSION["admin_level"] == "admin" && $_GET["action"] == "reply" && !empty($_GET["id"])) { $id = $_GET["id"]; $id = clean($id, "sql"); $query = mysql_query("SELECT * FROM `help_tool` WHERE `id` = '".$id."'") or die("Could not perform SQL Action, error: ".mysql_error()); if(mysql_num_rows($query) <= "0") { echo("Error: A message with that id (".$id.") doesn't exist sorry!"); } else { while($r = mysql_fetch_array($query)) { ?>

Reply to a message

Fill in the form below and hit "Reply" to reply to the message.
Upon replying, the message will be deleted!


Message:
"); } } } elseif(isset($_SESSION["admin_username"]) && $_SESSION["admin_level"] == "admin" && $_GET["action"] == "do_reply" && $_POST["message"] && $_POST["email"] && $_POST["id"]) { $to = $_POST["email"]; $subject = "Reply to your ".$site_name." support request"; $message = $_POST["message"]; $message= nl2br($message); $message = str_replace("\r", "", $message); $message = str_replace("\n", "", $message); $message = str_replace("
", "\n", $message); $message = wordwrap($message, 70); $headers = 'From: '.$from_email.'' . "\r\n" . 'Reply-To: '.$from_email.'' . "\r\n" . 'X-Mailer: PHP/' . phpversion(); mail($to, $subject, $message, $headers); $id = clean($_POST["id"], "sql"); $query = mysql_query("DELETE FROM `help_tool` WHERE `id` = '".$id."'") or die("Could not perform SQL Action, error: ".mysql_error()); echo("Thank you!

Your reply has been sent (and the message has been deleted (ID ".$id."))!

Go back"); } elseif(isset($_SESSION["admin_username"]) && $_SESSION["admin_level"] == "admin" && $_GET["action"] == "add_acc") { ?>

Create an account

Fill in the forms below and hit "Create" to create an account!


Username:


Password:


Error:
One or more fields were left blank!

Please go back and fix this."); } else { $query = mysql_query("SELECT * FROM `users` WHERE `username` = '".$username."'"); if(mysql_num_rows($query) >= "1") { echo("Error:
An account with that username already exists!

Please go back and fix this."); } else { $password = encrypt($password); $query = mysql_query("INSERT INTO `users` (`username`, `password`) VALUES ('".$username."', '".$password."')") or die("Could not perform SQL Action, error: ".mysql_error()); echo("Thanks!

The account with the username ".$username." has been created successfully!

Go back"); } } } elseif(isset($_SESSION["admin_username"]) && $_SESSION["admin_level"] == "admin" && $_GET["action"] == "del_acc") { ?>

Delete an account

From the list of users below, to delete a user just click "Delete" below their username!


Username:
".$r["username"]."

Action:
Delete


"); } ?>
Error:
An account with that id doesn't exist!

Please go back and fix this."); } else { $query = mysql_query("SELECT * FROM `users` WHERE `username` = '".$root_user."'") or die("Could not perform SQL Action, error: ".mysql_error()); while($lol = mysql_fetch_array($query)) { $root_id = $lol["id"]; } if($id == $root_id) { echo("Error:
You can't delete the root administrator's account!

Please go back and fix this."); } else { $query = mysql_query("DELETE FROM `users` WHERE id = '".$id."'") or die("Could not perform SQL Action, error: ".mysql_error()); echo("Thanks!

The account with the id ".$id." has been successfully deleted!

Go back"); } } } ?>

Home

Powered by the Mini-I Help Tool