MIREN LO QUE PASA CUANDO SUBO MI PHPNUKE AL ESPACIO WEB:
sql_numrows($db->sql_query("SELECT * FROM ".$prefix."_authors"); if ($first == 0) { $pwd = md5($pwd); $the_adm = "God"; $db->sql_query("INSERT INTO ".$prefix."_authors VALUES ('$name', '$the_adm', '$url', '$email', '$pwd', '0', '1', '')" if ($user_new == 1) { $user_regdate = date("M d, Y" $user_avatar = "gallery/blank.gif"; $commentlimit = 4096; if ($url == "http://" { $url = ""; } $db->sql_query("INSERT INTO ".$user_prefix."_users (user_id, username, user_email, user_website, user_avatar, user_regdate, user_password, theme, commentmax, user_level, user_lang, user_dateformat) VALUES (NULL,'$name','$email','$url','$user_avatar','$user_regdate','$pwd','$Default_Theme','$commentlimit', '2', 'english','D M d, Y g:i a')" } login(); } } global $admin_file; $the_first = $db->sql_numrows($db->sql_query("SELECT * FROM ".$prefix."_authors"); if ($the_first == 0) { if (!$name) { include("header.php" title("$sitename: "._ADMINISTRATION."" OpenTable(); echo "
"._NOADMINYET."
" ."
" ."" ."" ."" ."" ."" ."" ."
"._NICKNAME.":
"._HOMEPAGE.":
"._EMAIL.":
"._PASSWORD.":
"._CREATEUSERDATA." "._YES." "._NO."
" ."" ."
"; CloseTable(); include("footer.php" } switch($fop) { case "create_first": create_first($name, $url, $email, $pwd, $user_new); break; } die(); } if (ereg("[^a-zA-Z0-9_-]",trim($aid))) { die("Begone" } $aid = substr("$aid", 0,25); $pwd = substr("$pwd", 0,18); if ((isset($aid)) && (isset($pwd)) && ($op == "login") { $datekey = date("F j" $rcode = hexdec(md5($_SERVER[HTTP_USER_AGENT] . $sitekey . $_POST[random_num] . $datekey)); $code = substr($rcode, 2, 6); if (extension_loaded("gd" AND $code != $_POST[gfx_check] AND ($gfx_chk == 1 OR $gfx_chk == 5 OR $gfx_chk == 6 OR $gfx_chk == 7)) { Header("Location: ".$admin_file.".php" die(); } if($aid!="" AND $pwd!="" { $pwd = md5($pwd); $result = $db->sql_query("SELECT pwd, admlanguage FROM ".$prefix."_authors WHERE aid='$aid'" $row = $db->sql_fetchrow($result); $admlanguage = addslashes($row['admlanguage']); $rpwd = $row['pwd']; if($rpwd == $pwd) { $admin = base64_encode("$aid:$pwd:$admlanguage" setcookie("admin","$admin",time()+2592000); unset($op); } } } $admintest = 0; if(isset($admin) && $admin != "" { $admin = addslashes(base64_decode($admin)); $admin = explode(":", $admin); $aid = addslashes($admin[0]); $pwd = "$admin[1]"; $admlanguage = "$admin[2]"; if ($aid=="" || $pwd=="" { $admintest=0; echo "\n"; echo "\n"; echo "\n\n
\n\n"; echo "
\n"; echo "Get Out!
\n"; echo "\n"; echo "\n"; exit; } $aid = substr("$aid", 0,25); $result2 = $db->sql_query("SELECT pwd FROM ".$prefix."_authors WHERE aid='$aid'" if (!$result2) { echo "Selection from database failed!"; exit; } else { $row2 = $db->sql_fetchrow($result2); $rpwd = $row2['pwd']; if($rpwd == $pwd && $rpwd != "" { $admintest = 1; } } } if(!isset($op)) { $op = "adminMain"; } $pagetitle = "- "._ADMINMENU.""; /*********************************************************/ /* Login Function */ /*********************************************************/ function login() { global $gfx_chk, $admin_file; include ("header.php" mt_srand ((double)microtime()*1000000); $maxran = 1000000; $random_num = mt_rand(0, $maxran); OpenTable(); echo "
"._ADMINLOGIN."
"; CloseTable(); echo "
"; OpenTable(); echo "
" ."" ."" ."" ."" .""; if (extension_loaded("gd" AND ($gfx_chk == 1 OR $gfx_chk == 5 OR $gfx_chk == 6 OR $gfx_chk == 7)) { echo "" .""; } echo "
"._ADMINID."
"._PASSWORD."
"._SECURITYCODE.": "._SECURITYCODE."
"._TYPESECCODE.":
" ."" ."" ."" ."
" ."
"; CloseTable(); include ("footer.php" } function deleteNotice($id) { global $prefix, $db, $admin_file; $id = intval($id); $db->sql_query("DELETE FROM ".$prefix."_reviews_add WHERE id = '$id'" Header("Location: ".$admin_file.".php?op=reviews" } /*********************************************************/ /* Administration Menu Function */ /*********************************************************/ function adminmenu($url, $title, $image) { global $counter, $admingraphic, $Default_Theme; $ThemeSel = get_theme(); if (file_exists("themes/$ThemeSel/images/admin/$image") { $image = "themes/$ThemeSel/images/admin/$image"; } else { $image = "images/admin/$image"; } if ($admingraphic == 1) { $img = "\"$title\"
"; $close = ""; } else { $img = ""; $close = ""; } echo "$img$title$close
"; if ($counter == 5) { echo ""; $counter = 0; } else { $counter++; } } function GraphicAdmin() { global $aid, $admingraphic, $language, $admin, $prefix, $db, $counter, $admin_file; $newsubs = $db->sql_numrows($db->sql_query("SELECT qid FROM ".$prefix."_queue"); $row = $db->sql_fetchrow($db->sql_query("SELECT radminsuper FROM ".$prefix."_authors WHERE aid='$aid'"); $radminsuper = intval($row['radminsuper']); if ($radminsuper == 1) { OpenTable(); echo "
"._ADMINMENU.""; echo "
"; echo""; $linksdir = dir("admin/links" while($func=$linksdir->read()) { if(substr($func, 0, 6) == "links." { $menulist .= "$func "; } } closedir($linksdir->handle); $menulist = explode(" ", $menulist); sort($menulist); for ($i=0; $i < sizeof($menulist); $i++) { if($menulist[$i]!="" { $sucounter = 0; include($linksdir->path."/$menulist[$i]" } } adminmenu("".$admin_file.".php?op=logout", ""._ADMINLOGOUT."", "logout.gif" echo"
"; $counter = ""; CloseTable(); echo "
"; } OpenTable(); echo "
"._MODULESADMIN.""; echo "
"; echo""; $handle=opendir('modules'); while ($file = readdir($handle)) { if ( (!ereg("[.]",$file)) ) { $modlist .= "$file "; } } closedir($handle); $modlist = explode(" ", $modlist); sort($modlist); for ($i=0; $i < sizeof($modlist); $i++) { if($modlist[$i] != "" { $row = $db->sql_fetchrow($db->sql_query("SELECT mid from " . $prefix . "_modules where title='$modlist[$i]'"); $mid = intval($row['mid']); if ($mid == "" { $db->sql_query("insert into " . $prefix . "_modules values (NULL, '$modlist[$i]', '$modlist[$i]', '0', '0', '1', '0', '')" } } } $result = $db->sql_query("SELECT title, admins FROM ".$prefix."_modules ORDER BY title ASC" $row2 = $db->sql_fetchrow($db->sql_query("SELECT name FROM ".$prefix."_authors WHERE aid='$aid'"); while ($row = $db->sql_fetchrow($result)) { $admins = explode(",", $row[admins]); $auth_user = 0; for ($i=0; $i < sizeof($admins); $i++) { if ($row2[name] == "$admins[$i]" { $auth_user = 1; } } if ($radminsuper == 1 || $auth_user == 1) { if (file_exists("modules/$row[title]/admin/index.php" AND file_exists("modules/$row[title]/admin/links.php" AND file_exists("modules/$row[title]/admin/case.php") { include("modules/$row[title]/admin/links.php" } } } adminmenu("".$admin_file.".php?op=logout", ""._ADMINLOGOUT."", "logout.gif" echo"
"; CloseTable(); echo "
"; } /*********************************************************/ /* Administration Main Function */ /*********************************************************/ function adminMain() { global $language, $admin, $aid, $prefix, $file, $db, $sitename, $user_prefix, $admin_file; include ("header.php" $dummy = 0; $Today = getdate(); $month = $Today['month']; $mday = $Today['mday']; $year = $Today['year']; $pmonth = $Today['month']; $pmday = $Today['mday']; $pmday = $mday-1; $pyear = $Today['year']; if ($pmonth=="January" { $pmonth=1; } else if ($pmonth=="February" { $pmonth=2; } else if ($pmonth=="March" { $pmonth=3; } else if ($pmonth=="April" { $pmonth=4; } else if ($pmonth=="May" { $pmonth=5; } else if ($pmonth=="June" { $pmonth=6; } else if ($pmonth=="July" { $pmonth=7; } else if ($pmonth=="August" { $pmonth=8; } else if ($pmonth=="September" { $pmonth=9; } else if ($pmonth=="October" { $pmonth=10; } else if ($pmonth=="November" { $pmonth=11; } else if ($pmonth=="December" { $pmonth=12; }; $test = mktime (0,0,0,$pmonth,$pmday,$pyear,1); $curDate2 = "%".$month[0].$month[1].$month[2]."%".$mday."%".$year."%"; $preday = strftime ("%d",$test); $premonth = strftime ("%B",$test); $preyear = strftime ("%Y",$test); $curDateP = "%".$premonth[0].$premonth[1].$premonth[2]."%".$preday."%".$preyear."%"; GraphicAdmin(); $aid = substr("$aid", 0,25); $row = $db->sql_fetchrow($db->sql_query("SELECT radminsuper, admlanguage FROM ".$prefix."_authors WHERE aid='$aid'"); $radminsuper = intval($row['radminsuper']); $admlanguage = $row['admlanguage']; $result = $db->sql_query("SELECT admins FROM ".$prefix."_modules WHERE title='News'" $row2 = $db->sql_fetchrow($db->sql_query("SELECT name FROM ".$prefix."_authors WHERE aid='$aid'"); while ($row = $db->sql_fetchrow($result)) { $admins = explode(",", $row[admins]); $auth_user = 0; for ($i=0; $i < sizeof($admins); $i++) { if ($row2[name] == "$admins[$i]" { $auth_user = 1; } } if ($auth_user == 1) { $radminarticle = 1; } } if ($admlanguage != "" ) { $queryalang = "WHERE alanguage='$admlanguage' "; } else { $queryalang = ""; } $row3 = $db->sql_fetchrow($db->sql_query("SELECT main_module from ".$prefix."_main"); $main_module = $row3['main_module']; OpenTable(); echo "
$sitename: "._DEFHOMEMODULE."
" .""._MODULEINHOME." $main_module
[ "._CHANGE." ]
"; CloseTable(); echo "
"; OpenTable(); $guest_online_num = $db->sql_numrows($db->sql_query("SELECT uname FROM ".$prefix."_session WHERE guest='1'"); $member_online_num = $db->sql_numrows($db->sql_query("SELECT uname FROM ".$prefix."_session WHERE guest='0'"); $who_online_num = $guest_online_num + $member_online_num; $who_online = "
"._WHOSONLINE."
"._CURRENTLY." $guest_online_num "._GUESTS." $member_online_num "._MEMBERS."
"; $row3 = $db->sql_fetchrow($db->sql_query("SELECT COUNT(user_id) AS userCount from $user_prefix"._users." WHERE user_regdate LIKE '$curDate2'"); $userCount = $row3['userCount']; $row4 = $db->sql_fetchrow($db->sql_query("SELECT COUNT(user_id) AS userCount FROM $user_prefix"._users." WHERE user_regdate LIKE '$curDateP'"); $userCount2 = $row4['userCount']; echo "
$who_online
" .""._BTD.": $userCount - "._BYD.": $userCount2
"; CloseTable(); echo "
"; OpenTable(); echo "
"._AUTOMATEDARTICLES."
"; $count = 0; $result5 = $db->sql_query("SELECT anid, aid, title, time, alanguage FROM ".$prefix."_autonews $queryalang ORDER BY time ASC" while ($row5 = $db->sql_fetchrow($result5)) { $anid = intval($row5['anid']); $aid = $row5['aid']; $said = substr("$aid", 0,25); $title = $row5['title']; $time = $row5['time']; $alanguage = $row5['alanguage']; if ($alanguage == "" { $alanguage = ""._ALL.""; } if ($anid != "" { if ($count == 0) { echo ""; $count = 1; } $time = ereg_replace(" ", "@", $time); if (($radminarticle==1) OR ($radminsuper==1)) { if (($radminarticle==1) AND ($aid == $said) OR ($radminsuper==1)) { echo ""; /* Multilingual Code : added column to display language */ } else { echo ""; /* Multilingual Code : added column to display language */ } } else { echo ""; /* Multilingual Code : added column to display language */ } } } if (($anid == "" AND ($count == 0)) { echo "
"._NOAUTOARTICLES."
"; } if ($count == 1) { echo "
("._EDIT."-"._DELETE." $title $alanguage $time
("._NOFUNCTIONS." $title $alanguage $time
$title $alanguage $time
"; } CloseTable(); echo "
"; OpenTable(); echo "
"._LAST." 20 "._ARTICLES."
"; $result6 = $db->sql_query("SELECT sid, aid, title, time, topic, informant, alanguage FROM ".$prefix."_stories $queryalang ORDER BY time DESC LIMIT 0,20" echo "
"; while ($row6 = $db->sql_fetchrow($result6)) { $sid = intval($row6['sid']); $aid = $row6['aid']; $said = substr("$aid", 0,25); $title = $row6['title']; $time = $row6['time']; $topic = $row6['topic']; $informant = $row6['informant']; $alanguage = $row6['alanguage']; $row7 = $db->sql_fetchrow($db->sql_query("SELECT topicname FROM ".$prefix."_topics WHERE topicid='$topic'"); $topicname = $row7['topicname']; if ($alanguage == "" { $alanguage = ""._ALL.""; } formatTimestamp($time); echo ""; } else { echo ""; } } else { echo ""; } } echo "
$sid" ." $title" ." $alanguage" ." $topicname"; if ($radminarticle == 1 OR $radminsuper == 1) { if (($radminarticle==1) AND ($aid == $said) OR ($radminsuper==1)) { echo " ("._EDIT."-"._DELETE."" ."
("._NOFUNCTIONS."" ."
"; if (($radminarticle==1) OR ($radminsuper==1)) { echo "
" ."
" .""._STORYID.": " ."" ."" ."
"; } CloseTable(); $row8 = $db->sql_fetchrow($db->sql_query("SELECT pollID, pollTitle FROM ".$prefix."_poll_desc WHERE artid='0' ORDER BY pollID DESC LIMIT 1"); $pollID = intval($row8['pollID']); $pollTitle = $row8['pollTitle']; echo "
"; OpenTable(); echo "
"._CURRENTPOLL.": $pollTitle [ "._EDIT." | "._ADD." ]
"; CloseTable(); include ("footer.php" } if($admintest) { switch($op) { case "do_gfx": do_gfx(); break; case "deleteNotice": deleteNotice($id); break; case "GraphicAdmin": GraphicAdmin(); break; case "adminMain": adminMain(); break; case "logout": setcookie("admin" $admin = ""; include("header.php" OpenTable(); echo "
"._YOUARELOGGEDOUT."
"; CloseTable(); echo ""; include("footer.php" break; case "login"; unset($op); default: if (!is_admin($admin)) { login(); } $casedir = dir("admin/case" while($func=$casedir->read()) { if(substr($func, 0, 5) == "case." { include($casedir->path."/$func" } } closedir($casedir->handle); $result = $db->sql_query("SELECT title FROM ".$prefix."_modules ORDER BY title ASC" while ($row = $db->sql_fetchrow($result)) { if (file_exists("modules/$row[title]/admin/index.php" AND file_exists("modules/$row[title]/admin/links.php" AND file_exists("modules/$row[title]/a
¿QUE OCURRE?