<?
//
// H-Tracker v0.2
// http://h-tracker.org
// Based on TorrentTrader (http://www.torrenttrader.org)
//
//
require_once ("backend/functions.php");
require_once ("backend/bbcode.php");
dbconn(false);
loggedinonly();
if (!$CURUSER || $CURUSER["control_panel"]!="yes"){
show_error_msg("Error","Sorry you do not have the rights to access this page!",1);
}
foreach($_POST as $key=>$value) $$key=$value;
foreach($_GET as $key=>$value) $$key=$value;
$sure = $_GET['sure'];
$del = $_GET['del'];
$team = htmlspecialchars($_GET['team']);
$edited = (int)$_GET['edited'];
$id = (int)$_GET['id'];
$team_name = $_GET['team_name'];
$team_info = $_GET['team_info'];
$team_image = $_GET['team_image'];
$team_description = $_GET['team_description'];
$teamownername = $_GET['team_owner'];
$editid = $_GET['editid'];
$editmembers = $_GET['editmembers'];
$name = $_GET['name'];
$image = $_GET['image'];
$owner = $_GET['owner'];
$info = $_GET['info'];
$add = $_GET['add'];
stdhead("Teams");
begin_frame("Teams Management");
//Delete Team
if($sure == "yes") {
$query = "UPDATE users SET team=0 WHERE team=" .sqlesc($del) . "";
$sql = mysql_query($query);
$query = "DELETE FROM teams WHERE id=" .sqlesc($del) . " LIMIT 1";
$sql = mysql_query($query);
echo("Team Successfully Deleted![<a href='teams-create.php'>Back</a>]");
write_log($CURUSER['username']." has deleted team id:$del");
end_frame();
stdfoot();
die();
}
if($del > 0) {
echo("You and in the truth wish to delete team? ($team) ( <b><a href='teams-create.php?del=$del&team=$team&sure=yes'>Yes!</a></b> / <b><a href='teams-create.php'>No!</a></b> )");
end_frame();
stdfoot();
die();
}
//Edit Team
if($edited == 1) {
$aa = mysql_query("SELECT class, id FROM users WHERE username='$teamownername'");
$ar = mysql_fetch_assoc($aa);
$team_owner = $ar["id"];
$query = "UPDATE teams SET name = '$team_name', info = '$team_info', owner = '$team_owner', image = '$team_image' WHERE id=".sqlesc($id);
$sql = mysql_query($query);
mysql_query("UPDATE users SET team = '$id' WHERE id= '$team_owner'");
if($sql) {
echo("<table class=main cellspacing=0 cellpadding=5 width=50%>");
echo("<tr><td><div align='center'><b>Successfully Edited</b>[<a href='teams-create.php'>Back</a>]</div></tr>");
echo("</table>");
write_log($CURUSER['username']." has edited team ($team_name)");
end_frame();
stdfoot();
die();
}
}
if($editid > 0) {
echo("<form name='smolf3d' method='get' action='teams-create.php'>");
echo("<CENTER><table cellspacing=0 cellpadding=5 width=50%>");
echo("<div align='center'><input type='hidden' name='edited' value='1'></div>");
echo("<br>");
echo("<input type='hidden' name='id' value='$editid'<table class=main cellspacing=0 cellpadding=5 width=50%>");
echo("<tr><td>Team Name: </td><td align='right'><input type='text' size=50 name='team_name' value='$name'></td></tr>");
echo("<tr><td>Team Logo URL: </td><td align='right'><input type='text' size=50 name='team_image' value='$image'></td></tr>");
echo("<tr><td>Owner Name: </td><td align='right'><input type='text' size=50 name='team_owner' value='$owner'></td></tr>");
echo("<tr><td valign=top>Description: </td><td align='right'><textarea name=team_info cols=35 rows=5>$info</textarea><BR>(BBCode is allowed)</td></tr>");
echo("<tr><td></td><td><div align='right'><input type='Submit' value=Update></div></td></tr>");
echo("</table></CENTER></form>");
end_frame();
stdfoot();
die();
}
//View Members
if($editmembers > 0) {
echo("<CENTER><table class=table_table cellspacing=0 cellpadding=3>");
echo("<td class=table_head>Username</td><td class=table_head>Uploaded</td><td class=table_head>Downloaded</td></tr>");
$query = "SELECT id,username,uploaded,downloaded FROM users WHERE team=$editmembers";
$sql = mysql_query($query);
while ($row = mysql_fetch_array($sql)) {
$username = htmlspecialchars($row['username']);
$uploaded = mksize($row['uploaded']);
$downloaded = mksize($row['downloaded']);
echo("<tr><td class=table_col1><a href=account-details.php?id=$row[id]>$username</a></td><td class=table_col2>$uploaded</td><td class=table_col1>$downloaded</td></tr>");
}
echo "</table></CENTER>";
end_frame();
stdfoot();
die();
}
//Add Team
if($add == 'true') {
$aa = mysql_query("SELECT id FROM users WHERE username='$teamownername'");
$ar = mysql_fetch_assoc($aa);
$team_owner = $ar["id"];
$query = "INSERT INTO teams SET name = '$team_name', owner = '$team_owner' ,info = '$team_description', image = '$team_image'";
$sql = mysql_query($query);
$tid = mysql_insert_id();
mysql_query("UPDATE users SET team = '$tid' WHERE id= '$team_owner'");
if($sql) {
write_log($CURUSER['username']." has created new team ($team_name)");
$success = TRUE;
}else{
$success = FALSE;
}
}
print("<b>Add new team:</b>");
print("<br>");
print("<br>");
echo("<form name='smolf3d' method='get' action='teams-create.php'>");
echo("<CENTER><table cellspacing=0 cellpadding=5 width=50%>");
echo("<tr><td>Team: </td><td align='left'><input type='text' size=50 name='team_name'></td></tr>");
echo("<tr><td>Owner Name: </td><td align='left'><input type='text' size=50 name='team_owner'></td></tr>");
echo("<tr><td valign=top>Description: </td><td align='left'><textarea name=team_description cols=35 rows=5></textarea><BR>(BBCode is allowed)</td></tr>");
echo("<tr><td>Teams Logo URL: </td><td align='left'><input type='text' size=50 name='team_image'><input type='hidden' name='add' value='true'></td></tr>");
echo("<tr><td></td><td><div align='left'><input value='Create Team' type='Submit'></div></td></tr>");
echo("</table></CENTER>");
if($success == TRUE) {
print("<b>team successfully added!</b>");
}
echo("<br>");
echo("</form>");
//ELSE Display Teams
print("<b>Current Teams:</b>");
print("<br>");
print("<br>");
echo("<CENTER><table class=table_table cellspacing=0 cellpadding=3>");
echo("<td class=table_head>ID</td><td class=table_head>Logo</td><td class=table_head>Name</td><td class=table_head>Owner</td><td class=table_head>Description</td><td class=table_head>Other</td>");
$query = "SELECT * FROM teams";
$sql = mysql_query($query);
while ($row = mysql_fetch_array($sql)) {
$id = (int)$row['id'];
$name = htmlspecialchars($row['name']);
$image = htmlspecialchars($row['image']);
$owner = (int)$row['owner'];
$info = format_comment($row['info']);
$OWNERNAME1 = mysql_query("SELECT username, class FROM users WHERE id=$owner");
$OWNERNAME2 = mysql_fetch_array($OWNERNAME1);
$OWNERNAME = $OWNERNAME2['username'];
echo("<tr><td class=table_col1><b>$id</b> </td> <td class=table_col2 align=center><img src='$image'></td> <td class=table_col1><b>$name</b></td><td class=table_col2><a href=account-details.php?id=$owner>$OWNERNAME</a></td><td class=table_col1>$info</td><td class=table_col2><a href=teams-create.php?editmembers=$id>[Members]</a><br><a href='teams-create.php?editid=$id&name=$name&image=$image&info=$info&owner=$OWNERNAME'>[Edit]</a><br><a href='teams-create.php?del=$id&team=$name'>[Delete]</a></td></tr>");
}
echo "</table></CENTER>";
end_frame();
stdfoot();
?>