<?php

    if(file_exists('handler/stay.php') == TRUE) {

        require('handler/stay.php');

        }else{

        echo '<p class="red_span" align="center">Error - Fehler</p>';
        exit;
        }

?>

<?php define('INCLUDE_CHECK',1); define('MYSQL_CHECK',1); ?>

<?php require('../framework/config.php'); ?>
<?php require('../framework/mysql.php'); ?>
<?php require('../framework/constants.php'); ?>
<?php require('../framework/class/cache_class.php'); no_cache(); ?>
<?php require('../framework/security.php'); ?>
<?php require('handler/language.php'); ?>

<?php require('structure/header.inc.php'); ?>

    <div class="menu">
        <div class="menu_left">
            <ul id="admin_navi">
                <li class="active"><a href="index.php"><?php echo $lang['blank_admin_area']; ?></a></li>
                <li><a href="members.php"><?php echo $lang['admin_members']; ?></a></li>
                <li><a href="discussions.php"><?php echo $lang['discussions']; ?></a></li>
                <li><a href="topics.php"><?php echo $lang['blank_topics']; ?></a></li>
                <li><a href="news.php"><?php echo $lang['news']; ?></a></li>
                <li><a href="events.php"><?php echo $lang['events']; ?></a></li>
                <li><a href="newsletter.php"><?php echo $lang['newsletter']; ?></a></li>
                <li><a href="statistic.php"><?php echo $lang['statistic']; ?></a></li>
            </ul>
        </div>
        <div class="menu_right">
            <?php

            if(isset($_SESSION['admin']) && $_SESSION['admin'] == TRUE) {

            echo '<div class="admin_settings">
            <a class="admin_account"><span>' . $lang['blank_navigation'] . '</span></a>
            <div class="admin_submenu" style="display: none;">
                <ul class="root">
                    <li><a href="' . $url . '" target="_blank">' . $lang['goto_network'] . '</a></li>
                    <li><a href="signout.php">' . $lang['signout'] . '</a></li>
                </ul>
            </div>
            </div>';
            }

            ?>
        </div>
    </div>
</div>

<div class="clear"></div>

<div id="content_wrapper">
    <div class="content">

    <?php

        echo '<h1 class="p_space">' . $lang['badwords'] . '</h1>';

        if($_SERVER['REQUEST_METHOD'] != 'POST') {

        echo '<form action="" method="post" name="badword">
        <p><input type="text" name="word" id="word" size="40" required class="textfields"> ' . $lang['new_badword'] . '</p>
        <p><input type="submit" name="' . $lang['add_badword'] . '" id="' . $lang['add_badword'] . '" value="' . $lang['add_badword'] . '" class="buttons"></p>
        </form>';

        }else{

        $sql = "INSERT INTO `badwords` (`word`) VALUES('" . mysql_real_escape_string($_POST['word']) . "')";

        mysql_query($sql) OR die(mysql_error());

        if(mysql_affected_rows() == 1) {

        echo '<p class="success">' . $lang['badword_success'] . '</p>
        <p><a href="badwords.php">' . $lang['go_on'] . '</a></p>';

            }else{

            echo '<p class="false">' . $lang['badword_failed'] . '</p>
            <p><a href="badwords.php">' . $lang['back'] . '</a></p>';
            }
        }

        echo '<div id="pr_line"></div>';

        $query = "SELECT * FROM badwords";
        $result = mysql_query($query) OR die(mysql_error());

        if(!$result) {

		echo '<p class="false">' . $lang['no_badwords_available'] . '</p>' . mysql_error();

			}else{

			if(intval(mysql_num_rows($result)) == 0) {

			echo '<p class="false">' . $lang['no_badwords_available'] . '</p>';

		}else{

        $count_words = mysql_query("SELECT id FROM badwords") OR die(mysql_error());
        $sum_words = mysql_num_rows($count_words);

        echo '<h1 class="p_space">' . (int)$sum_words . ' ' . $lang['words_on_blacklist'] . '</h1>';

        echo '<table width="100%" class="tables">
        <tr>
        <td width="5%"><strong>ID</strong></td>
        <td width="85%"><strong>' . $lang['badwords'] . '</strong></td>
        <td width="10%" align="center"><strong>' . $lang['admin_delete'] . '</strong></td>
        </tr>';

        while($row = mysql_fetch_assoc($result)) {

            echo '<tr>
            <td width="5%">' . (int)$row['id'] . '</td>
            <td width="85%">' . htmlentities($row['word'], ENT_QUOTES) . '</td>
            <td width="10%" align="center"><a href="detach.php?id=' . (int)$row['id'] . '"><img src="../style/icons/delete.png" alt="' . $lang['admin_delete'] . '" title="' . $lang['admin_delete'] . '" border="0"></a></td>
            </tr>';
            }

        echo '</table>';
        }
        }

        echo '<div class="clear"></div>';

    ?>

<?php require('structure/footer.inc.php'); ?>