isConnected()) redirection($config->url_site.'/logout.php'); $tpl->assign('token',generer_token()); $tpl->assign('pagename','Home pages'); $tpl->assign('groups','index'); $sql = "select * from habbophp_home_images_list"; $rsd = mysql_query($sql); $count = mysql_num_rows($rsd); $pages = ceil($count/27); $pstickers=""; for($i=1; $i<=$pages; $i++) { $pstickers.='
'.$i.'
'; } $tpl->assign('pagesstickers',$pstickers); $sql = "select * from habbophp_home_backgrounds_list"; $rsd = mysql_query($sql); $count = mysql_num_rows($rsd); $pages = ceil($count/10); $pstickers=""; for($i=1; $i<=$pages; $i++) { $pstickers.='
'.$i.'
'; } $tpl->assign('pagesbg',$pstickers); if(isset($_GET['username']) AND !preg_match("#^[0-9a-zA-Z\-\:.!\#&@=]+$#i",$_GET['username'])) redirection($config->url_site.'/'); if(isset($_GET['id']) AND !preg_match("#^[0-9]+$#i",$_GET['id'])) redirection($config->url_site.'/'); if(isset($_GET['username'])) $reqV = mysql_query('SELECT id FROM users WHERE username="'.safe($_GET['username'],'SQL').'"'); $isBan = mysql_num_rows(mysql_query('SELECT id FROM bans WHERE value="'.safe($_GET['username'],'SQL').'"')); if($isBan >= 1){ $tpl->display('header.tpl'); $tpl->display('home-ban.tpl'); $tpl->display('footer.tpl'); exit ; } if(isset($_GET['id'])) $reqV = mysql_query('SELECT id FROM users WHERE id="'.safe($_GET['id'],'SQL').'"'); $count = mysql_num_rows($reqV); if($count == 0) redirection($config->url_site.'/me.php'); if(isset($_GET['id']) AND !empty($_GET['id']) AND $_GET['id']!=$user->id) { $idhome=(int) safe($_GET['id'],'SQL'); $a=mysql_query("SELECT * FROM users WHERE id=".mysql_real_escape_string($idhome)." LIMIT 1"); $b=mysql_fetch_array($a); $usernamehome=safe(safe($b['username'],'SQL'),'HTML'); $motto=safe(safe($b['motto'],'SQL'),'HTML'); $onlinehome=safe(safe($b['online'],'SQL'),'HTML'); $crehome=safe(safe($b['account_created'],'SQL'),'HTML'); $lookhome=safe(safe($b['look'],'SQL'),'HTML'); $tpl->assign('edit',''); } elseif(isset($_GET['username']) AND !empty($_GET['username']) AND $_GET['username']!=$user->username) { $usernamehome=safe(safe($_GET['username'],'SQL'),'HTML'); $a=mysql_query("SELECT * FROM users WHERE username='".mysql_real_escape_string($usernamehome)."' LIMIT 1"); $b=mysql_fetch_array($a); $idhome=(int) safe(safe($b['id'],'SQL'),'HTML'); $onlinehome=safe(safe($b['online'],'SQL'),'HTML'); $motto=safe(safe($b['motto'],'SQL'),'HTML'); $crehome=safe(safe($b['account_created'],'SQL'),'HTML'); $lookhome=safe(safe($b['look'],'SQL'),'HTML'); $tpl->assign('edit',''); } else { $idhome=$user->id; $usernamehome=$user->username; $onlinehome=$user->online; $crehome=$user->account_created; $motto=$user->motto; $lookhome=$user->look; $tpl->assign('edit',''.$tpl->getConfigVars('Edit').' '); } $tpl->assign('usernamep',$usernamehome); if($user->rank>=6 AND $idhome!=$user->id) $tpl->assign('edit',''.$tpl->getConfigVars('Edit').' '); $images=""; $query=mysql_query("SELECT * FROM habbophp_home_images WHERE userid=".safe($idhome,'SQL').""); while($row=mysql_fetch_array($query)) $images.='
'; $tpl->assign('images',$images); $notes=""; $query2=mysql_query("SELECT * FROM habbophp_home_notes WHERE userid=".safe($idhome,'SQL').""); while($row2=mysql_fetch_array($query2)) $notes.='

'.stripcslashes($row2['value']).'
'; $tpl->assign('notes',$notes); $badges=""; $badgesq=mysql_query("SELECT * FROM user_badges WHERE user_id=".safe($idhome,'SQL').""); while($badgesr=mysql_fetch_array($badgesq)) { $badges.='
  • '; } $rooms=""; $roomsq=mysql_query("SELECT * FROM rooms WHERE owner='".safe($usernamehome,'SQL')."'"); while($roomsr=mysql_fetch_array($roomsq)) { if($roomsr['state']) $close="Ouvert"; else $close="Fermé"; if($roomsr['state']) $close=''; else $close=''; $rooms.='
    '.$close.' '.safe($roomsr['caption'],'HTML').'
    Chez '.safe($roomsr['owner'],'HTML').'

    '; } $i=0; if(EMULATOR == 'phoenix') $queryw=mysql_query("SELECT * FROM habbophp_home_backgrounds WHERE uid=".safe($idhome,'SQL').""); elseif(EMULATOR == 'butterfly') $queryw=mysql_query("SELECT * FROM messenger_friendships WHERE sender=".safe($idhome,'SQL')." OR receiver=".safe($idhome,'SQL').""); while($roww=mysql_fetch_array($queryw)) { $tpl->assign('cbg',"BG_".safe($roww['class'],'HTML')); $i++; } if($i==0) { $tpl->assign('cbg',''); } $friendslistw=""; $ifriends=0; if(EMULATOR == 'phoenix') $query=mysql_query("SELECT * FROM messenger_friendships WHERE user_one_id=".$idhome.""); elseif(EMULATOR == 'butterfly') $query=mysql_query("SELECT * FROM habbophp_home_books WHERE toid=".safe($idhome,'SQL')." ORDER BY id DESC"); while($row=mysql_fetch_array($query)) { if($row['receiver']==$idhome) $lenid=$row['sender']; else $lenid=$row['receiver']; $ifriends++; $queryin=mysql_query("SELECT * FROM users WHERE id=".safe($lenid,'SQL').""); $rowin=mysql_fetch_array($queryin); $friendslistw.='

  • '.safe($rowin['username'],'HTML').'

    '.safe($rowin['motto'],'HTML').'

    • '; } $bookslist=""; $ibooks=0; $querydd=mysql_query("SELECT * FROM habbophp_home_books WHERE toid=".safe($idhome,'SQL')." ORDER BY id DESC") or die(mysql_error()); while($rowe=mysql_fetch_array($querydd)) { $ibooks++; $queryin=mysql_query("SELECT * FROM users WHERE id=".$rowe['fromid'].""); if($rowe['toid']==$user->id) $delete='
    '.$tpl->getConfigVars('Delete').''; else $delete=""; $rowin=mysql_fetch_array($queryin); $bookslist.='
  • '.safe($rowin['username'],'HTML').'

    '.safe($rowe['message'],'HTML').$delete.'

     
    • '; } $i=0; $queryw=mysql_query("SELECT * FROM habbophp_home_widget WHERE userid=".safe($idhome,'SQL').""); while($roww=mysql_fetch_array($queryw)) { if($onlinehome==1) $status='offline'; else $status='offline'; if($roww['badges']==1)$tpl->assign('WbadgesS','opacity:0.5'); else $tpl->assign('WbadgesS','opacity:1'); if($roww['player']==1)$tpl->assign('WplayerS','opacity:0.5'); else $tpl->assign('WplayerS','opacity:1'); if($roww['rooms']==1)$tpl->assign('WroomsS','opacity:0.5'); else $tpl->assign('WroomsS','opacity:1'); if($roww['books']==1)$tpl->assign('WbooksS','opacity:0.5'); else $tpl->assign('WbooksS','opacity:1'); if($roww['rooms']==1)$tpl->assign('WroomsS','opacity:0.5'); else $tpl->assign('WroomsS','opacity:1'); if($roww['friends']==1)$tpl->assign('WfriendsS','opacity:0.5'); else $tpl->assign('WfriendsS','opacity:1'); $widgets='

     '.$tpl->getConfigVars('MyProfil').' 

    '.safe($usernamehome,'SQL').'

    '.$status.'
    '.$tpl->getConfigVars('HabboCreated').'
    '.$crehome.'

    '.$motto.'

    La limite est de 20 tags! Tag invalide.

     '.$tpl->getConfigVars('Badges').' & WIN-WIN 

      '.$badges.'

     '.$tpl->getConfigVars('Traxplayer').' 

     '.$tpl->getConfigVars('MyRooms').' 

    '.$rooms.'

     '.$tpl->getConfigVars('Book').'('.$ibooks.') myhabbo.guestbook.unknown.private 

      '.$bookslist.'

     '.$tpl->getConfigVars('MyFriends').' ('.$ifriends.') 


      '.$friendslistw.'
    '; $i++; $tpl->assign('widgets',$widgets); $tpl->assign('homeid',$roww['id']); } if(isset($_GET['username']) == $user->username){ $req = mysql_query('SELECT id FROM habbophp_home_widget WHERE userid="'.safe($user->id,'SQL').'"'); $num = mysql_num_rows($req); if($num == 0 && $i == 0){ mysql_query("INSERT INTO habbophp_home_widget VALUES ('',".$idhome.",'','w_skin_goldenskin',10,10,1,1,'w_skin_goldenskin',350,100,1,1,'','w_skin_goldenskin',10,500,1,1,'w_skin_goldenskin',350,420,1,1,'w_skin_goldenskin',10,600,1,1,'w_skin_goldenskin',400,600,1,1,'w_skin_goldenskin',400,800,1)") or die(mysql_error()); $tpl->assign('widgets',""); redirection('home.php?username='.safe($_GET['username'],'HTML')); } if($i==0 AND isset($_GET['username']) OR isset($_GET['id'])){ $tpl->assign('widgets',""); } } $tpl->display('header.tpl'); $tpl->display('home.tpl'); $tpl->display('footer.tpl'); ?>