<?php
session_start();
require "global_func.php";
if($_SESSION['loggedin']==0) { header("Location: login.php");exit; }
$userid=$_SESSION['userid'];
require "header.php";
$h = new headers;
$h->startheaders();
include "mysql.php";
global $c;
$is=mysql_query("SELECT u.*,us.* FROM users u LEFT JOIN userstats us ON u.userid=us.userid WHERE u.userid=$userid",$c) or die(mysql_error());
$ir=mysql_fetch_array($is);
check_level();
$fm=money_formatter($ir['money']);
$cm=money_formatter($ir['credits'],'');
$lv=date('F j, Y, g:i a',$ir['laston']);
$h->userdata($ir,$lv,$fm,$cm);
$h->menuarea();
switch($_GET['action'])
{
case 'post':
wall_post();
break;
case 'dopost':
wall_dopost();
break;
case 'comments':
wall_comments();
break;
case 'addcomments':
wall_addcomments();
break;
case 'delete':
wall_delete();
break;
case 'addcommentsub':
wall_addcommentsub();
break;
default:
wall_home();
break;
}
function wall_home()
{
global $ir,$c,$userid,$h;
$wall=mysql_query("SELECT * FROM wall",$c) or die(mysql_error());
print "<table width=100% class=forumline>
<th colspan=4>The Wall</th><tr>
<td colspan=2 align=center><a href=thewall.php?action=post>Make A Post</a></td><tr>
<th width=30%>Poster</th><th width=70%>Post</th><th>Action</th><tr>";
while($wa=mysql_fetch_array($wall))
{
$user=mysql_query("SELECT * FROM users where userid={$wa['wallUSERID']}",$c) or die(mysql_error());
$wu=mysql_fetch_array($user);
$wazz=mysql_query("SELECT * FROM wallcomments WHERE wcWALL={$wa['wallID']}",$c) or die(mysql_error());
$num=mysql_num_rows($wazz);
print"<td><a href=viewuser.php?u={$wu['userid']}>{$wu['username']}</a></td>
<td>{$wa['wallTEXT']}</td><tr>";
print"<td></td><td><a href=thewall.php?action=comments&wallid={$wa['wallID']}>View Comments ($num)</a></td>";
if($wa['wallUSERID'] == $userid || $ir['user_level'] != 1)
{
print"<td width=40%><a href=thewall.php?action=delete&post={$wa['wallID']}>Delete Post</a></td>";
}
print"</tr>
<td><hr></td><td><hr></td><td><hr></td></tr>";
}
print"</table>";
}
function wall_post()
{
global $ir,$c,$userid,$h;
print"<table width=100% class=forumline>
<th>Making A Post</th><tr>
<td align=center>
<form action=thewall.php?action=dopost method=post>
<textarea name=post cols=40 rows=10></textarea><br>
<input type=submit value=Post></form></td></table>";
}
function wall_dopost()
{
global $ir,$c,$userid,$h;
print"<table width=100% class=forumline>
<th>Making A Post</th><tr>
<td align=center>
Your have Posted on the wall!</td></table>";
mysql_query("INSERT INTO wall VALUES('','$userid',unix_timestamp(),'{$_POST['post']}');",$c);
}
function wall_comments()
{
global $ir,$c,$userid,$h;
$wall=mysql_query("SELECT * FROM wall WHERE wallID={$_GET['wallid']}",$c);
$wa=mysql_fetch_array($wall);
$wac=mysql_query("SELECT * FROM wallcomments WHERE wcWALL={$_GET['wallid']}",$c);
print "<table width=100% class=forumline>";
$user=mysql_query("SELECT * FROM users where userid={$wa['wallUSERID']}",$c) or die(mysql_error());
$wu=mysql_fetch_array($user);
print"<th colspan=2><a href=viewuser.php?u={$wu['userid']}>{$wu['username']}'s</a> Wall Post</th><tr>
<td align=center colspan=2>{$wa['wallTEXT']}</td><tr>
<th colspan=2>The Wall Comments</th><tr>
<th colspan=2><a href=thewall.php?action=addcomments&wallid={$_GET['wallid']}>Add A Comment</a></th><tr>
<th width=30%>Poster</th><th width=70%>Post</th><tr>";
while($wc=mysql_fetch_array($wac))
{
$user=mysql_query("SELECT * FROM users where userid={$wc['wcUSERID']}",$c) or die(mysql_error());
$wu=mysql_fetch_array($user);
print"<td><a href=viewuser.php?u={$wu['userid']}>{$wu['username']}</a></td>
<td align=center>{$wc['wcTEXT']}</td><tr>
<td><hr></td><td><hr></td></tr>";
}
print"</table>";
}
function wall_addcomments()
{
global $ir,$c,$userid,$h;
print"<table width=100% class=forumline>
<th>Adding A Comment</th><tr>
<td align=center>
<form action=thewall.php?action=addcommentsub&wallid={$_GET['wallid']} method=post>
<textarea name=post cols=40 rows=10></textarea><br>
<input type=submit value=Post></form></td></table>";
}
function wall_addcommentsub()
{
global $ir,$c,$userid,$h;
print"<table width=100% class=forumline>
<th>Comment Added</th><tr>
<td align=center>
Your have a comment on the wall post!</td></table>";
$wall=mysql_query("SELECT * FROM wall WHERE wallID={$_GET['wallid']}",$c);
$wa=mysql_fetch_array($wall);
event_add($wa['wallUSERID'],"You have a new comment on your wall post!",$c,'wallpost');
mysql_query("INSERT INTO wallcomments VALUES('','{$_GET['wallid']}','$userid',unix_timestamp(),'{$_POST['post']}');",$c);
}
function wall_delete()
{
global $ir,$c,$userid,$h;
$wall=mysql_query("SELECT * FROM wall WHERE wallID={$_GET['post']}",$c);
$wa=mysql_fetch_array($wall);
if($wa['wallUSERID'] != $userid || $ir['user_level'] == 1)
{
die("This is not your post to delete!");
}
print"<table width=100% class=forumline>
<th>Delete Post</th><tr>
<td align=center>
Your have deleted the post!</td></table>";
mysql_query("DELETE FROM wall WHERE wallID={$_GET['post']}",$c);
mysql_query("DELETE FROM wallcomments WHERE wcWALL={$_GET['post']}",$c);
}
$h->endpage();
?>
