session_start();
include("functions.inc.php");
if(!$logged_in){ header("Location: login.html"); }
header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT");
header("Cache-Control: no-store, no-cache, must-revalidate");
header("Cache-Control: post-check=0, pre-check=0", false);
header("Pragma: no-cache");
$user = $_SESSION['username'];
$rowconn = mysql_query("SELECT * FROM users WHERE user = '$user'");
$row = mysql_fetch_array($rowconn);
if(!$row['rank']=="admin"){ header("Location: homes.html"); }
?>
Admin Panel :-)
if($_GET['mode']=="addsticker"){ ?>
//print_r($_POST);
if($_POST["action"])
{
unset($imagename);
if(!isset($_FILES) && isset($HTTP_POST_FILES))
$_FILES = $HTTP_POST_FILES;
if(!isset($_FILES['image_file']))
$error["image_file"] = "An image was not found.";
$imagename = basename($_FILES['image_file']['name']);
//echo $imagename;
if(empty($imagename))
$error["imagename"] = "The name of the image was not found.";
if(empty($error))
{
$newimage = "images/" . $imagename;
$result = move_uploaded_file($_FILES['image_file']['tmp_name'], $newimage);
mysql_query("INSERT INTO custom VALUES ('" . $_POST['class'] . "','$newimage')");
if($_POST['cat']=="yes"){
mysql_query("INSERT INTO cat_stickers VALUES ('" . $_POST['class'] . "')");
}
echo "Done.
";
}
if(empty($result))
$error["result"] = "There was an error moving the uploaded file.";
}
else{ ?>
} }
elseif($_GET['mode']=="addbg"){
//print_r($_POST);
if($_POST["action"])
{
unset($imagename);
if(!isset($_FILES) && isset($HTTP_POST_FILES))
$_FILES = $HTTP_POST_FILES;
if(!isset($_FILES['image_file']))
$error["image_file"] = "An image was not found.";
$imagename = basename($_FILES['image_file']['name']);
//echo $imagename;
if(empty($imagename))
$error["imagename"] = "The name of the image was not found.";
if(empty($error))
{
$newimage = "images/" . $imagename;
$result = move_uploaded_file($_FILES['image_file']['tmp_name'], $newimage);
mysql_query("INSERT INTO custom VALUES ('bg_" . $_POST['class'] . "','$newimage')");
mysql_query("INSERT INTO cat_bgs VALUES ('bg_" . $_POST['class'] . "')");
echo "Done.
";
}
if(empty($result))
$error["result"] = "There was an error moving the uploaded file.";
}
else{ ?>
} }
elseif($_GET['mode']=="addprofile"){
if($_POST['submit']){
mysql_query("INSERT INTO stickers VALUES ('','" . $_POST['sprite'] . "','" . $_POST['user'] . "','0','0','0','','')");
echo "Done.";
} else {
?>
} }
elseif($_GET['mode']=="edituser"){
$user = $_POST['user'];
if($_POST['view']){
$row_conn = mysql_query("SELECT * FROM users WHERE user = '$user'");
$row = mysql_fetch_array($row_conn);
?>
}
elseif($_POST['profilesave']){
mysql_query("UPDATE users SET habbo = '" . htmlspecialchars($_POST['habbo_name']) . "' WHERE user = '$user'");
mysql_query("UPDATE users SET age = '" . htmlspecialchars($_POST['age']) . "' WHERE user = '$user'");
mysql_query("UPDATE users SET location = '" . htmlspecialchars($_POST['location']) . "' WHERE user = '$user'");
mysql_query("UPDATE users SET sex = '" . htmlspecialchars($_POST['sex']) . "' WHERE user = '$user'");
mysql_query("UPDATE users SET orientation = '" . htmlspecialchars($_POST['orientation']) . "' WHERE user = '$user'");
mysql_query("UPDATE users SET status = '" . htmlspecialchars($_POST['status']) . "' WHERE user = '$user'");
mysql_query("UPDATE users SET job = '" . htmlspecialchars($_POST['job']) . "' WHERE user = '$user'");
mysql_query("UPDATE users SET cigarettes = '" . htmlspecialchars($_POST['cigs']) . "' WHERE user = '$user'");
mysql_query("UPDATE users SET alcohol = '" . htmlspecialchars($_POST['drink']) . "' WHERE user = '$user'");
mysql_query("UPDATE users SET drugs = '" . htmlspecialchars($_POST['drugs']) . "' WHERE user = '$user'");
mysql_query("UPDATE users SET interests = '" . htmlspecialchars($_POST['interests']) . "' WHERE user = '$user'");
mysql_query("UPDATE users SET favething = '" . htmlspecialchars($_POST['favething']) . "' WHERE user = '$user'");
mysql_query("UPDATE users SET favehabbo = '" . htmlspecialchars($_POST['favehabbo']) . "' WHERE user = '$user'");
mysql_query("UPDATE users SET favewebsite = '" . htmlspecialchars($_POST['favewebsite']) . "' WHERE user = '$user'");
mysql_query("UPDATE users SET favebook = '" . htmlspecialchars($_POST['favebook']) . "' WHERE user = '$user'");
mysql_query("UPDATE users SET faveplace = '" . htmlspecialchars($_POST['faveplace']) . "' WHERE user = '$user'");
mysql_query("UPDATE users SET favefilm = '" . htmlspecialchars($_POST['favefilm']) . "' WHERE user = '$user'");
mysql_query("UPDATE users SET favetv = '" . htmlspecialchars($_POST['favetv']) . "' WHERE user = '$user'");
mysql_query("UPDATE users SET favemusic = '" . htmlspecialchars($_POST['favemusic']) . "' WHERE user = '$user'");
mysql_query("UPDATE users SET favefood = '" . htmlspecialchars($_POST['favefood']) . "' WHERE user = '$user'");
?>
Done.
}
else{ ?>
I like to choose it choose it.
}
}
elseif($_GET['mode']=="ban"){
if($_POST['submit']){
mysql_query("UPDATE users SET ban = '1' WHERE user = '" . $_POST['user'] . "'");
echo "Done.";
}
else{?>
}
}
elseif($_GET['mode']=="unban"){
if($_POST['submit']){
mysql_query("UPDATE users SET ban = '0' WHERE user = '" . $_POST['user'] . "'");
echo "Done.";
}
else{?>
}
}
elseif($_GET['mode']=="catsticker"){
if($_POST['view']){
?>
echo $_POST['sprite']; ?>
}
elseif($_POST['add']){
mysql_query("INSERT INTO cat_stickers VALUES ('" . $_POST['sprite'] . "')");
echo "Added bbz.";
}
elseif($_POST['remove']){
mysql_query("DELETE FROM cat_stickers WHERE class='" . $_POST['sprite'] . "'");
echo "Removed bbz.";
}
else{
?>
} }
elseif($_GET['mode']=="badge"){
if($_POST['submit_code']){
mysql_query("UPDATE homes SET badge = '" . $_POST['badgecode'] . "' WHERE owner = '" . $_POST['user'] . "'");
echo "Done.";
}
else{
?>
Add a Badge to a User
Make a new badge
if($_POST["action"])
{
unset($imagename);
if(!isset($_FILES) && isset($HTTP_POST_FILES))
$_FILES = $HTTP_POST_FILES;
if(!isset($_FILES['image_file']))
$error["image_file"] = "An image was not found.";
$imagename = basename($_FILES['image_file']['name']);
//echo $imagename;
if(empty($imagename))
$error["imagename"] = "The name of the image was not found.";
if(empty($error))
{
$newimage = "images/badges/" . $imagename;
$result = move_uploaded_file($_FILES['image_file']['tmp_name'], $newimage);
mysql_query("INSERT INTO badges VALUES ('" . $_POST['code'] . "','$newimage')");
echo "Done.
";
}
if(empty($result))
$error["result"] = "There was an error moving the uploaded file.";
}
else{ ?>
} } }
if(!$_GET['mode']){ ?>
Llamas are well sexy (y)
} ?>