Added Permissions and Category Permissions for Groups.

git-svn-id: svn://svn.code.sf.net/p/intdb/svn/trunk@44 2b68903e-0b30-0410-9a39-a2e4f3c5be39

diff --git a/inc/categories.php b/inc/categories.php
index 08f83cd..16fcfc4 100644 (file)
--- a/inc/categories.php
+++ b/inc/categories.php
@@ -11,7 +11,7 @@
     Copyright 2004-2007 Cool Dude 2k - http://intdb.sourceforge.net/
     Copyright 2004-2007 Game Maker 2k - http://upload.idb.s1.jcink.com/
 
-    $FileInfo: categories.php - Last Update: 07/14/2007 SVN 43 - Author: cooldude2k $
+    $FileInfo: categories.php - Last Update: 07/15/2007 SVN 44 - Author: cooldude2k $
 */
 $File3Name = basename($_SERVER['SCRIPT_NAME']);
 if ($File3Name=="categories.php"||$File3Name=="/categories.php") {
@@ -30,11 +30,19 @@ $CategoryType=mysql_result($preresult,$prei,"CategoryType");
 $SubShowForums=mysql_result($preresult,$prei,"SubShowForums");
 $CategoryDescription=mysql_result($preresult,$prei,"Description");
 $CategoryType = strtolower($CategoryType); $SubShowForums = strtolower($SubShowForums);
+if(!isset($CatPermissionInfo['CanViewCategory'][$CategoryID])) {
+       $CatPermissionInfo['CanViewCategory'][$CategoryID] = "no"; }
+if($CatPermissionInfo['CanViewCategory'][$CategoryID]=="no"||
+       $CatPermissionInfo['CanViewCategory'][$CategoryID]!="yes") {
+redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
+ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
+if($CatPermissionInfo['CanViewCategory'][$CategoryID]=="yes") {
 if($CatCheck!="skip") {
 if($CategoryType=="subcategory") {
 redirect("location",$basedir.url_maker($exfile['subcategory'],$Settings['file_ext'],"act=".$_GET['act']."&id=".$_GET['id'],$Settings['qstr'],$Settings['qsep'],$prexqstr['subcategory'],$exqstr['subcategory'],FALSE));
 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); } }
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); } }
 $query = query("select * from `".$Settings['sqltable']."forums` where `ShowForum`='yes' and `CategoryID`=%i and `InSubForum`=0 ORDER BY `id`", array($CategoryID));
 $result=mysql_query($query);
 $num=mysql_num_rows($result);
@@ -45,7 +53,7 @@ if($num>=1) {
 <table id="Cat<?php echo $CategoryID; ?>" class="Table1">
 <tr id="CatStart<?php echo $CategoryID; ?>" class="TableRow1">
 <td class="TableRow1" colspan="5"><span style="float: left;">
-<?php echo $ThemeSet['TitleIcon'] ?><a href="<?php echo url_maker($exfile[$CategoryType],$Settings['file_ext'],"act=view&id=".$CategoryID,$Settings['qstr'],$Settings['qsep'],$prexqstr[$CategoryType],$exqstr[$CategoryType]); ?>""><?php echo $CategoryName; ?></a></span>
+<?php echo $ThemeSet['TitleIcon'] ?><a href="<?php echo url_maker($exfile[$CategoryType],$Settings['file_ext'],"act=view&id=".$CategoryID,$Settings['qstr'],$Settings['qsep'],$prexqstr[$CategoryType],$exqstr[$CategoryType]); ?>"><?php echo $CategoryName; ?></a></span>
 <?php echo "<span style=\"float: right;\">&nbsp;</span>"; ?></td>
 </tr>
 <tr id="ForumStatRow<?php echo $CategoryID; ?>" class="TableRow2">
@@ -64,6 +72,8 @@ $ForumType=mysql_result($result,$i,"ForumType");
 $NumTopics=mysql_result($result,$i,"NumTopics");
 $NumPosts=mysql_result($result,$i,"NumPosts");
 $ForumDescription=mysql_result($result,$i,"Description");
+if(isset($PermissionInfo['CanViewForum'][$ForumID])&&
+       $PermissionInfo['CanViewForum'][$ForumID]=="yes") {
 unset($LastTopic);
 $gltquery = query("select * from `".$Settings['sqltable']."topics` where `CategoryID`=%i and `ForumID`=%i ORDER BY `LastUpdate` DESC", array($CategoryID,$ForumID));
 $gltresult=mysql_query($gltquery);
@@ -105,13 +115,12 @@ if ($ForumType=="redirect") { $PreForum=$ThemeSet['RedirectIcon']; }
 <td class="TableRow3" style="text-align: center;"><?php echo $NumPosts; ?></td>
 <td class="TableRow3"><?php echo $LastTopic; ?></td>
 </tr>
-<?php
-++$i; } @mysql_free_result($result);
+<?php } ++$i; } @mysql_free_result($result);
 if($num>=1) { ?>
 <tr id="CatEnd<?php echo $CategoryID; ?>" class="TableRow4">
 <td class="TableRow4" colspan="5">&nbsp;</td>
 </tr>
 </table></div>
 <div>&nbsp;</div>
-<?php } ++$prei; }
+<?php } } ++$prei; }
 @mysql_free_result($preresult); ?>

diff --git a/inc/events.php b/inc/events.php
index a082522..d0e7301 100644 (file)
--- a/inc/events.php
+++ b/inc/events.php
@@ -11,7 +11,7 @@
     Copyright 2004-2007 Cool Dude 2k - http://intdb.sourceforge.net/
     Copyright 2004-2007 Game Maker 2k - http://upload.idb.s1.jcink.com/
 
-    $FileInfo: events.php - Last Update: 07/14/2007 SVN 43 - Author: cooldude2k $
+    $FileInfo: events.php - Last Update: 07/15/2007 SVN 44 - Author: cooldude2k $
 */
 $File3Name = basename($_SERVER['SCRIPT_NAME']);
 if ($File3Name=="events.php"||$File3Name=="/events.php") {
@@ -24,7 +24,7 @@ $num=mysql_num_rows($result);
 $is=0;
 if($num==0) { redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); }
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
 ?>
 <div class="Table1Border">
 <table class="Table1">

diff --git a/inc/filename.php b/inc/filename.php
index 1011971..0c1f454 100644 (file)
--- a/inc/filename.php
+++ b/inc/filename.php
@@ -11,7 +11,7 @@
     Copyright 2004-2007 Cool Dude 2k - http://intdb.sourceforge.net/
     Copyright 2004-2007 Game Maker 2k - http://upload.idb.s1.jcink.com/
 
-    $FileInfo: filename.php - Last Update: 07/14/2007 SVN 43 - Author: cooldude2k $
+    $FileInfo: filename.php - Last Update: 07/15/2007 SVN 44 - Author: cooldude2k $
 */
 $File3Name = basename($_SERVER['SCRIPT_NAME']);
 if ($File3Name=="filename.php"||$File3Name=="/filename.php") {
@@ -49,8 +49,8 @@ function version_info($proname,$subver,$ver,$supver,$reltype,$svnver,$showsvn) {
        return $return_var; }
 // Version number and date stuff. :P
 $VER1[0] = 0; $VER1[1] = 1; $VER1[2] = 5; $VERFull[1] = $VER1[0].".".$VER1[1].".".$VER1[2];
-$VER2[0] = "Pre-Alpha"; $VER2[1] = "PA"; $VER2[2] = "SVN"; $SubVerN = 43; $RName = "iDB"; $SFName = "IntDB";
-$SVNDay[0] = 07; $SVNDay[1] = 14; $SVNDay[2] = 2007; $SVNDay[3] = $SVNDay[0]."/".$SVNDay[1]."/".$SVNDay[2];
+$VER2[0] = "Pre-Alpha"; $VER2[1] = "PA"; $VER2[2] = "SVN"; $SubVerN = 44; $RName = "iDB"; $SFName = "IntDB";
+$SVNDay[0] = 07; $SVNDay[1] = 15; $SVNDay[2] = 2007; $SVNDay[3] = $SVNDay[0]."/".$SVNDay[1]."/".$SVNDay[2];
 $VerInfo['iDB_Ver'] = version_info($RName,$VER1[0],$VER1[1],$VER1[2],$VER2[1],$SubVerN,false);
 $VerInfo['iDB_Ver_SVN'] = version_info($RName,$VER1[0],$VER1[1],$VER1[2],$VER2[1],$SubVerN,true);
 $VerInfo['iDB_Full_Ver'] = version_info($RName,$VER1[0],$VER1[1],$VER1[2],$VER2[0],$SubVerN,false);

diff --git a/inc/forums.php b/inc/forums.php
index cfc24f9..be4b7b6 100644 (file)
--- a/inc/forums.php
+++ b/inc/forums.php
@@ -11,7 +11,7 @@
     Copyright 2004-2007 Cool Dude 2k - http://intdb.sourceforge.net/
     Copyright 2004-2007 Game Maker 2k - http://upload.idb.s1.jcink.com/
 
-    $FileInfo: forums.php - Last Update: 07/13/2007 SVN 42 - Author: cooldude2k $
+    $FileInfo: forums.php - Last Update: 07/15/2007 SVN 44 - Author: cooldude2k $
 */
 $File3Name = basename($_SERVER['SCRIPT_NAME']);
 if ($File3Name=="forums.php"||$File3Name=="/forums.php") {
@@ -29,6 +29,8 @@ $CategoryType=mysql_result($preresult,$prei,"CategoryType");
 $SubShowForums=mysql_result($preresult,$prei,"SubShowForums");
 $CategoryDescription=mysql_result($preresult,$prei,"Description");
 $CategoryType = strtolower($CategoryType); $SubShowForums = strtolower($SubShowForums);
+if(isset($CatPermissionInfo['CanViewCategory'][$CategoryID])&&
+       $CatPermissionInfo['CanViewCategory'][$CategoryID]=="yes") {
 $query = query("select * from `".$Settings['sqltable']."forums` where `ShowForum`='yes' and `CategoryID`=%i and `InSubForum`=0 ORDER BY `id`", array($CategoryID));
 $result=mysql_query($query);
 $num=mysql_num_rows($result);
@@ -59,6 +61,8 @@ $NumTopics=mysql_result($result,$i,"NumTopics");
 $NumPosts=mysql_result($result,$i,"NumPosts");
 $ForumDescription=mysql_result($result,$i,"Description");
 $ForumType = strtolower($ForumType);
+if(isset($PermissionInfo['CanViewForum'][$ForumID])&&
+       $PermissionInfo['CanViewForum'][$ForumID]=="yes") {
 unset($LastTopic);
 $gltquery = query("select * from `".$Settings['sqltable']."topics` where `CategoryID`=%i and `ForumID`=%i ORDER BY `LastUpdate` DESC", array($CategoryID,$ForumID));
 $gltresult=mysql_query($gltquery);
@@ -100,8 +104,7 @@ if ($ForumType=="redirect") { $PreForum=$ThemeSet['RedirectIcon']; }
 <td class="TableRow3" style="text-align: center;"><?php echo $NumPosts; ?></td>
 <td class="TableRow3"><?php echo $LastTopic; ?></td>
 </tr>
-<?php
-++$i; } @mysql_free_result($result);
+<?php } ++$i; } @mysql_free_result($result);
 if($num>=1) {
 ?>
 <tr id="CatEnd<?php echo $CategoryID; ?>" class="TableRow4">
@@ -109,5 +112,5 @@ if($num>=1) {
 </tr>
 </table></div>
 <div>&nbsp;</div>
-<?php } ++$prei; }
+<?php } } ++$prei; }
 @mysql_free_result($preresult); ?>

diff --git a/inc/groupsetup.php b/inc/groupsetup.php
new file mode 100644 (file)
index 0000000..1cbacc0
--- /dev/null
+++ b/inc/groupsetup.php
@@ -0,0 +1,158 @@
+<?php
+/*
+    This program is free software; you can redistribute it and/or modify
+    it under the terms of the Revised BSD License.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    Revised BSD License for more details.
+
+    Copyright 2004-2007 Cool Dude 2k - http://intdb.sourceforge.net/
+    Copyright 2004-2007 Game Maker 2k - http://upload.idb.s1.jcink.com/
+
+    $FileInfo: groupsetup.php - Last Update: 07/15/2007 SVN 44 - Author: cooldude2k $
+*/
+$File3Name = basename($_SERVER['SCRIPT_NAME']);
+if ($File3Name=="groupsetup.php"||$File3Name=="/groupsetup.php") {
+       require('index.php');
+       exit(); }
+// Member Group Setup
+if(!isset($_SESSION['UserGroup'])) { $_SESSION['UserGroup'] = null; }
+if($_SESSION['UserGroup']==null) { 
+$_SESSION['UserGroup']=$Settings['GuestGroup']; } $GruError = null;
+$gruquery = query("select * from `".$Settings['sqltable']."groups` where `Name`='%s'", array($_SESSION['UserGroup']));
+$gruresult=mysql_query($gruquery);
+$grunum=mysql_num_rows($gruresult);
+if($grunum<=0) { $GruError = true; @mysql_free_result($gruresult);
+@header("Content-Type: text/plain; charset=".$Settings['charset']); 
+ob_clean(); echo "Sorry could not find group data in database.\nContact the board admin about error."; 
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
+if($grunum>=1) {
+$GroupInfo['ID']=mysql_result($gruresult,0,"id");
+if(!is_numeric($GroupInfo['ID'])) { $GruError = true; }
+$GroupInfo['Name']=mysql_result($gruresult,0,"Name");
+$GroupInfo['PermissionID']=mysql_result($gruresult,0,"PermissionID");
+if(!is_numeric($GroupInfo['PermissionID'])) { $GruError = true; }
+$GroupInfo['NamePrefix']=mysql_result($gruresult,0,"NamePrefix");
+$GroupInfo['NameSuffix']=mysql_result($gruresult,0,"NameSuffix");
+$GroupInfo['CanViewBoard']=mysql_result($gruresult,0,"CanViewBoard");
+if($GroupInfo['CanViewBoard']!="yes"&&$GroupInfo['CanViewBoard']!="no") {
+               $GruError = true; }
+$GroupInfo['CanEditProfile']=mysql_result($gruresult,0,"CanEditProfile");
+if($GroupInfo['CanEditProfile']!="yes"&&$GroupInfo['CanEditProfile']!="no") {
+               $GruError = true; }
+$GroupInfo['CanAddEvents']=mysql_result($gruresult,0,"CanAddEvents");
+if($GroupInfo['CanAddEvents']!="yes"&&$GroupInfo['CanAddEvents']!="no") {
+               $GruError = true; }
+$GroupInfo['CanPM']=mysql_result($gruresult,0,"CanPM");
+if($GroupInfo['CanPM']!="yes"&&$GroupInfo['CanPM']!="no") {
+               $GruError = true; }
+$GroupInfo['CanSearch']=mysql_result($gruresult,0,"CanSearch");
+if($GroupInfo['CanSearch']!="yes"&&$GroupInfo['CanSearch']!="no") {
+               $GruError = true; }
+$GroupInfo['PromoteTo']=mysql_result($gruresult,0,"PromoteTo");
+$GroupInfo['PromotePosts']=mysql_result($gruresult,0,"PromotePosts");
+if(!is_numeric($GroupInfo['PromotePosts'])) { 
+       $GroupInfo['PromotePosts'] = 0; $GroupInfo['PromoteTo'] = "none"; }
+$GroupInfo['HasModCP']=mysql_result($gruresult,0,"HasModCP");
+if($GroupInfo['HasModCP']!="yes"&&$GroupInfo['HasModCP']!="no") {
+       $GroupInfo['HasModCP'] = "no"; }
+$GroupInfo['HasAdminCP']=mysql_result($gruresult,0,"HasAdminCP");
+if($GroupInfo['HasAdminCP']!="yes"&&$GroupInfo['HasAdminCP']!="no") {
+       $GroupInfo['HasAdminCP'] = "no"; }
+$GroupInfo['ViewDBInfo']=mysql_result($gruresult,0,"ViewDBInfo"); 
+if($GroupInfo['ViewDBInfo']!="yes"&&$GroupInfo['ViewDBInfo']!="no") {
+       $GroupInfo['ViewDBInfo'] = "no"; }
+if($GruError==true) {
+@header("Content-Type: text/plain; charset=".$Settings['charset']); @mysql_free_result($gruresult);
+ob_clean(); echo "Sorry could not load all group data in database.\nContact the board admin about error."; 
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); } }
+@mysql_free_result($gruresult);
+if($GroupInfo['CanViewBoard']=="no") { 
+@header("Content-Type: text/plain; charset=".$Settings['charset']); 
+ob_clean(); echo "Sorry you can not view the board."; 
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
+// Member Group Permissions Setup
+$perquery = query("select * from `".$Settings['sqltable']."permissions` where `id`=%i ORDER BY `ForumID` ASC", array($GroupInfo['PermissionID']));
+$peresult=mysql_query($perquery);
+$pernum=mysql_num_rows($peresult);
+$peri=0; $PerError = null;
+if($pernum<=0) { $PerError = true; @mysql_free_result($peresult);
+@header("Content-Type: text/plain; charset=".$Settings['charset']); 
+ob_clean(); echo "Sorry could not find permission data in database.\nContact the board admin about error."; 
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
+if($pernum>=1) { while ($peri < $pernum) {
+$PerForumID=mysql_result($peresult,$peri,"ForumID");
+if(!is_numeric($PerForumID)) { $PerError = true; }
+$PermissionInfo['ID'][$PerForumID]=mysql_result($peresult,$peri,"ID");
+if(!is_numeric($PermissionInfo['ID'][$PerForumID])) { $PerError = true; }
+$PermissionInfo['PermissionID'][$PerForumID]=mysql_result($peresult,$peri,"PermissionID");
+if(!is_numeric($PermissionInfo['PermissionID'][$PerForumID])) { $PerError = true; }
+$PermissionInfo['Name'][$PerForumID]=mysql_result($peresult,$peri,"Name");
+$PermissionInfo['ForumID'][$PerForumID]=mysql_result($peresult,$peri,"ForumID");
+if(!is_numeric($PermissionInfo['ForumID'][$PerForumID])) { $PerError = true; }
+$PermissionInfo['CanViewForum'][$PerForumID]=mysql_result($peresult,$peri,"CanViewForum");
+if($PermissionInfo['CanViewForum'][$PerForumID]!="yes"&&$PermissionInfo['CanViewForum'][$PerForumID]!="no") {
+               $PerError = true; }
+$PermissionInfo['CanMakeTopics'][$PerForumID]=mysql_result($peresult,$peri,"CanMakeTopics");
+if($PermissionInfo['CanMakeTopics'][$PerForumID]!="yes"&&$PermissionInfo['CanMakeTopics'][$PerForumID]!="no") {
+               $PerError = true; }
+$PermissionInfo['CanMakeReplys'][$PerForumID]=mysql_result($peresult,$peri,"CanMakeReplys");
+if($PermissionInfo['CanMakeReplys'][$PerForumID]!="yes"&&$PermissionInfo['CanMakeReplys'][$PerForumID]!="no") {
+               $PerError = true; }
+$PermissionInfo['CanEditTopics'][$PerForumID]=mysql_result($peresult,$peri,"CanEditTopics");
+if($PermissionInfo['CanEditTopics'][$PerForumID]!="yes"&&$PermissionInfo['CanEditTopics'][$PerForumID]!="no") {
+       $PermissionInfo['CanEditTopics'][$PerForumID] = "no"; }
+$PermissionInfo['CanEditReplys'][$PerForumID]=mysql_result($peresult,$peri,"CanEditReplys");
+if($PermissionInfo['CanEditReplys'][$PerForumID]!="yes"&&$PermissionInfo['CanEditReplys'][$PerForumID]!="no") {
+       $PermissionInfo['CanEditReplys'][$PerForumID] = "no"; }
+$PermissionInfo['CanDeleteTopics'][$PerForumID]=mysql_result($peresult,$peri,"CanDeleteTopics");
+if($PermissionInfo['CanDeleteTopics'][$PerForumID]!="yes"&&$PermissionInfo['CanDeleteTopics'][$PerForumID]!="no") {
+       $PermissionInfo['CanDeleteTopics'][$PerForumID] = "no"; }
+$PermissionInfo['CanDeleteReplys'][$PerForumID]=mysql_result($peresult,$peri,"CanDeleteReplys");
+if($PermissionInfo['CanDeleteReplys'][$PerForumID]!="yes"&&$PermissionInfo['CanDeleteReplys'][$PerForumID]!="no") {
+       $PermissionInfo['CanDeleteReplys'][$PerForumID] = "no"; }
+$PermissionInfo['CanDohtml'][$PerForumID]=mysql_result($peresult,$peri,"CanDohtml");
+if($PermissionInfo['CanDohtml'][$PerForumID]!="yes"&&$PermissionInfo['CanDohtml'][$PerForumID]!="no") {
+       $PermissionInfo['CanDohtml'][$PerForumID] = "no"; }
+$PermissionInfo['CanUseBBags'][$PerForumID]=mysql_result($peresult,$peri,"CanUseBBags");
+if($PermissionInfo['CanUseBBags'][$PerForumID]!="yes"&&$PermissionInfo['CanUseBBags'][$PerForumID]!="no") {
+       $PermissionInfo['CanUseBBags'][$PerForumID] = "no"; }
+$PermissionInfo['CanModForum'][$PerForumID]=mysql_result($peresult,$peri,"CanModForum");
+if($PermissionInfo['CanModForum'][$PerForumID]!="yes"&&$PermissionInfo['CanModForum'][$PerForumID]!="no") {
+       $PermissionInfo['CanModForum'][$PerForumID] = "no"; }
+if($PerError==true) { $peri = $pernum; }
+++$peri; } if($PerError==true) {
+@header("Content-Type: text/plain; charset=".$Settings['charset']); @mysql_free_result($peresult);
+ob_clean(); echo "Sorry could not load all permission data in database.\nContact the board admin about error."; 
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); } }
+@mysql_free_result($peresult);
+$per2query = query("select * from `".$Settings['sqltable']."catpermissions` where `PermissionID`=%i ORDER BY `CategoryID` ASC", array($GroupInfo['PermissionID']));
+$per2esult=mysql_query($per2query);
+$per2num=mysql_num_rows($per2esult);
+$per2i=0; $Per2Error = null;
+if($per2num<=0) { $Per2Error = true; @mysql_free_result($per2esult);
+@header("Content-Type: text/plain; charset=".$Settings['charset']); 
+ob_clean(); echo "Sorry could not find permission data in database.\nContact the board admin about error."; 
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
+if($per2num>=1) { while ($per2i < $per2num) {
+$PerCatID=mysql_result($per2esult,$per2i,"CategoryID");
+if(!is_numeric($PerCatID)) { $Per2Error = true; }
+$CatPermissionInfo['ID'][$PerCatID]=mysql_result($per2esult,$per2i,"id");
+if(!is_numeric($CatPermissionInfo['ID'][$PerCatID])) { $Per2Error = true; }
+$CatPermissionInfo['PermissionID'][$PerCatID]=mysql_result($per2esult,$per2i,"PermissionID");
+if(!is_numeric($CatPermissionInfo['PermissionID'][$PerCatID])) { $Per2Error = true; }
+$CatPermissionInfo['Name'][$PerCatID]=mysql_result($per2esult,$per2i,"Name");
+$CatPermissionInfo['CategoryID'][$PerCatID]=mysql_result($per2esult,$per2i,"CategoryID");
+if(!is_numeric($CatPermissionInfo['CategoryID'][$PerCatID])) { $Per2Error = true; }
+$CatPermissionInfo['CanViewCategory'][$PerCatID]=mysql_result($per2esult,$per2i,"CanViewCategory");
+if($CatPermissionInfo['CanViewCategory'][$PerCatID]!="yes"&&$CatPermissionInfo['CanViewCategory'][$PerCatID]!="no") {
+               $Per2Error = true; }
+if($Per2Error==true) { $per2i = $per2num; }
+++$per2i; } if($Per2Error==true) {
+@header("Content-Type: text/plain; charset=".$Settings['charset']); @mysql_free_result($per2esult);
+ob_clean(); echo "Sorry could not load all permission data in database.\nContact the board admin about error."; 
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); } }
+@mysql_free_result($per2esult);
+?>
\ No newline at end of file

diff --git a/inc/members.php b/inc/members.php
index 340285f..b554688 100644 (file)
--- a/inc/members.php
+++ b/inc/members.php
@@ -11,7 +11,7 @@
     Copyright 2004-2007 Cool Dude 2k - http://intdb.sourceforge.net/
     Copyright 2004-2007 Game Maker 2k - http://upload.idb.s1.jcink.com/
 
-    $FileInfo: members.php - Last Update: 07/14/2007 SVN 43 - Author: cooldude2k $
+    $FileInfo: members.php - Last Update: 07/15/2007 SVN 44 - Author: cooldude2k $
 */
 $File3Name = basename($_SERVER['SCRIPT_NAME']);
 if ($File3Name=="members.php"||$File3Name=="/members.php") {
@@ -141,7 +141,7 @@ $num=mysql_num_rows($result);
 $i=0;
 if($num==0||$_GET['id']=="-1") { redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); }
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
 $ViewMem['ID']=mysql_result($result,$i,"id");
 $ViewMem['Name']=mysql_result($result,$i,"Name");
 $ViewMem['Signature']=mysql_result($result,$i,"Signature");
@@ -241,7 +241,7 @@ $_SESSION = array();
 @session_destroy();
 @redirect("location",$basedir.url_maker($exfile['member'],$Settings['file_ext'],"act=login",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'],false));
 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); }
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
 
 if($_GET['act']=="login")
 {

diff --git a/inc/pm.php b/inc/pm.php
index 3919121..85c2b9f 100644 (file)
--- a/inc/pm.php
+++ b/inc/pm.php
@@ -11,7 +11,7 @@
     Copyright 2004-2007 Cool Dude 2k - http://intdb.sourceforge.net/
     Copyright 2004-2007 Game Maker 2k - http://upload.idb.s1.jcink.com/
 
-    $FileInfo: pm.php - Last Update: 07/14/2007 SVN 43 - Author: cooldude2k $
+    $FileInfo: pm.php - Last Update: 07/15/2007 SVN 44 - Author: cooldude2k $
 */
 $File3Name = basename($_SERVER['SCRIPT_NAME']);
 if ($File3Name=="pm.php"||$File3Name=="/pm.php") {
@@ -21,7 +21,7 @@ if ($File3Name=="pm.php"||$File3Name=="/pm.php") {
 if($_SESSION['UserGroup']==$Settings['GuestGroup']||$GroupInfo['CanPM']=="no") {
 redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); }
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
 ?>
 <table class="Table3">
 <tr style="width: 100%; vertical-align: top;">
@@ -173,7 +173,7 @@ $num=mysql_num_rows($result);
 $is=0;
 if($num==0) { redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); }
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
 while ($is < $num) {
 $PMID=mysql_result($result,$is,"id");
 $SenderID=mysql_result($result,$is,"SenderID");
@@ -194,7 +194,7 @@ if($_SESSION['UserID']!=$SentToID&&
        $_SESSION['UserID']!=$SenderID) {
 redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); }
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
 while ($rei < $renum) {
 $User1ID=$SenderID;
 $User1Name=mysql_result($reresult,$rei,"Name");

diff --git a/inc/prelogin.php b/inc/prelogin.php
index 6e78013..68f6d48 100644 (file)
--- a/inc/prelogin.php
+++ b/inc/prelogin.php
@@ -11,7 +11,7 @@
     Copyright 2004-2007 Cool Dude 2k - http://intdb.sourceforge.net/
     Copyright 2004-2007 Game Maker 2k - http://upload.idb.s1.jcink.com/
 
-    $FileInfo: prelogin.php - Last Update: 07/14/2007 SVN 43 - Author: cooldude2k $
+    $FileInfo: prelogin.php - Last Update: 07/15/2007 SVN 44 - Author: cooldude2k $
 */
 $File3Name = basename($_SERVER['SCRIPT_NAME']);
 if ($File3Name=="prelogin.php"||$File3Name=="/prelogin.php") {
@@ -48,6 +48,6 @@ setcookie("SessPass", $YourPassAM, time() + (7 * 86400), $basedir);
 } if($numlog2<=0) {
 redirect("location",$basedir.url_maker($exfile['member'],$Settings['file_ext'],"act=logout",$Settings['qstr'],$Settings['qsep'],$prexqstr['member'],$exqstr['member'],FALSE));
 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); }
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
 @mysql_free_result($resultlog2);
 ?>

diff --git a/inc/profilemain.php b/inc/profilemain.php
index af0de11..e5e500e 100644 (file)
--- a/inc/profilemain.php
+++ b/inc/profilemain.php
@@ -11,7 +11,7 @@
     Copyright 2004-2007 Cool Dude 2k - http://intdb.sourceforge.net/
     Copyright 2004-2007 Game Maker 2k - http://upload.idb.s1.jcink.com/
 
-    $FileInfo: profilemain.php - Last Update: 07/14/2007 SVN 43 - Author: cooldude2k $
+    $FileInfo: profilemain.php - Last Update: 07/15/2007 SVN 44 - Author: cooldude2k $
 */
 $File3Name = basename($_SERVER['SCRIPT_NAME']);
 if ($File3Name=="profilemain.php"||$File3Name=="/profilemain.php") {
@@ -22,7 +22,7 @@ if ($File3Name=="profilemain.php"||$File3Name=="/profilemain.php") {
 if($_SESSION['UserGroup']==$Settings['GuestGroup']||$GroupInfo['CanEditProfile']=="no") {
 redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); }
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
 if(!isset($_POST['update'])) { $_POST['update'] = null; }
 ?>
 <table class="Table3">

diff --git a/inc/replys.php b/inc/replys.php
index f748169..b04fbe7 100644 (file)
--- a/inc/replys.php
+++ b/inc/replys.php
@@ -11,7 +11,7 @@
     Copyright 2004-2007 Cool Dude 2k - http://intdb.sourceforge.net/
     Copyright 2004-2007 Game Maker 2k - http://upload.idb.s1.jcink.com/
 
-    $FileInfo: replys.php - Last Update: 07/14/2007 SVN 43 - Author: cooldude2k $
+    $FileInfo: replys.php - Last Update: 07/15/2007 SVN 44 - Author: cooldude2k $
 */
 $File3Name = basename($_SERVER['SCRIPT_NAME']);
 if ($File3Name=="replys.php"||$File3Name=="/replys.php") {
@@ -23,8 +23,25 @@ $prenum=mysql_num_rows($preresult);
 $prei=0;
 while ($prei < $prenum) {
 $TopicName=mysql_result($preresult,$prei,"TopicName");
+$TopicForumID=mysql_result($preresult,$prei,"ForumID");
+$TopicCatID=mysql_result($preresult,$prei,"CategoryID");
 $ViewTimes=mysql_result($preresult,$prei,"NumViews");
-++$prei; } @mysql_free_result($preresult);
+if(!isset($CatPermissionInfo['CanViewCategory'][$TopicCatID])) {
+       $CatPermissionInfo['CanViewCategory'][$TopicCatID] = "no"; }
+if($CatPermissionInfo['CanViewCategory'][$TopicCatID]=="no"||
+       $CatPermissionInfo['CanViewCategory'][$TopicCatID]!="yes") {
+redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
+ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
+if(!isset($PermissionInfo['CanViewForum'][$TopicForumID])) {
+       $PermissionInfo['CanViewForum'][$TopicForumID] = "no"; }
+if($PermissionInfo['CanViewForum'][$TopicForumID]=="no"||
+       $PermissionInfo['CanViewForum'][$TopicForumID]!="yes") {
+redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
+ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
+if($CatPermissionInfo['CanViewCategory'][$TopicCatID]=="yes"&&
+       $PermissionInfo['CanViewForum'][$TopicForumID]=="yes") {
 ?>
 <table style="width: 100%;" class="Table2">
 <tr>
@@ -53,7 +70,7 @@ if($_GET['page']<=1) { $backpage = 1; }
 $i=0;
 if($num==0) { redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); }
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
 if($num!=0) { 
 if($ViewTimes==0||$ViewTimes==null) { $NewViewTimes = 1; }
 if($ViewTimes!=0&&$ViewTimes!=null) { $NewViewTimes = $ViewTimes + 1; }
@@ -186,3 +203,6 @@ echo url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr
 </tr>
 </table>
 <div>&nbsp;</div>
+<?php } ++$prei; } 
+@mysql_free_result($preresult);
+?>
\ No newline at end of file

diff --git a/inc/rssfeed.php b/inc/rssfeed.php
index 50f2e58..92630ab 100644 (file)
--- a/inc/rssfeed.php
+++ b/inc/rssfeed.php
@@ -11,7 +11,7 @@
     Copyright 2004-2007 Cool Dude 2k - http://intdb.sourceforge.net/
     Copyright 2004-2007 Game Maker 2k - http://upload.idb.s1.jcink.com/
 
-    $FileInfo: rss2.php - Last Update: 07/13/2007 SVN 42 - Author: cooldude2k $
+    $FileInfo: rss2.php - Last Update: 07/15/2007 SVN 44 - Author: cooldude2k $
 */
 $File3Name = basename($_SERVER['SCRIPT_NAME']);
 if ($File3Name=="rssfeed.php"||$File3Name=="/rssfeed.php") {
@@ -73,6 +73,7 @@ $num=mysql_num_rows($result);
 $Atom = null; $RSS = null; $i=0;
 while ($i < $num) {
 $TopicID=mysql_result($result,$i,"id");
+$ForumID=mysql_result($result,$i,"ForumID");
 $CategoryID=mysql_result($result,$i,"CategoryID");
 $UsersID=mysql_result($result,$i,"UserID");
 $GuestName=mysql_result($result,$i,"GuestName");
@@ -80,8 +81,12 @@ $TheTime=mysql_result($result,$i,"TimeStamp");
 $TheTime=GMTimeChange("D, j M Y G:i:s \G\M\T",$TheTime,0);
 $TopicName=mysql_result($result,$i,"TopicName");
 $ForumDescription=mysql_result($result,$i,"Description");
+if(isset($PermissionInfo['CanViewForum'][$ForumID])&&
+       $PermissionInfo['CanViewForum'][$ForumID]=="yes"&&
+       isset($CatPermissionInfo['CanViewCategory'][$CategoryID])&&
+       $CatPermissionInfo['CanViewCategory'][$CategoryID]=="yes") {
 $Atom .= '<entry>'."\n".'<title>'.htmlentities($TopicName).'</title>'."\n".'<summary>'.htmlentities($ForumDescription).'</summary>'."\n".'<link rel="alternate" href="'.$BoardURL.url_maker($exfilerss['topic'],$Settings['file_ext'],"act=view&id=".$TopicID,$Settings['qstr'],$Settings['qsep'],$prexqstrrss['topic'],$exqstrrss['topic']).'" />'."\n".'<id>'.$BoardURL.url_maker($exfilerss['topic'],$Settings['file_ext'],"act=view&id=".$TopicID,$Settings['qstr'],$Settings['qsep'],$prexqstrrss['topic'],$exqstrrss['topic']).'</id>'."\n".'<author>'."\n".'<name>'.$SettInfo['Author'].'</name>'."\n".'</author>'."\n".'<updated>'.gmdate("Y-m-d\TH:i:s\Z").'</updated>'."\n".'</entry>'."\n";
-$RSS .= '<item>'."\n".'<title>'.htmlentities($TopicName).'</title>'."\n".'<description>'.htmlentities($ForumDescription).'</description>'."\n".'<link>'.$BoardURL.url_maker($exfilerss['topic'],$Settings['file_ext'],"act=view&id=".$TopicID,$Settings['qstr'],$Settings['qsep'],$prexqstrrss['topic'],$exqstrrss['topic']).'</link>'."\n".'<guid>'.$BoardURL.url_maker($exfilerss['topic'],$Settings['file_ext'],"act=view&id=".$TopicID,$Settings['qstr'],$Settings['qsep'],$prexqstrrss['topic'],$exqstrrss['topic']).'</guid>'."\n".'</item>'."\n";
+$RSS .= '<item>'."\n".'<title>'.htmlentities($TopicName).'</title>'."\n".'<description>'.htmlentities($ForumDescription).'</description>'."\n".'<link>'.$BoardURL.url_maker($exfilerss['topic'],$Settings['file_ext'],"act=view&id=".$TopicID,$Settings['qstr'],$Settings['qsep'],$prexqstrrss['topic'],$exqstrrss['topic']).'</link>'."\n".'<guid>'.$BoardURL.url_maker($exfilerss['topic'],$Settings['file_ext'],"act=view&id=".$TopicID,$Settings['qstr'],$Settings['qsep'],$prexqstrrss['topic'],$exqstrrss['topic']).'</guid>'."\n".'</item>'."\n"; }
 ++$i; } @mysql_free_result($result);
 xml_doc_start("1.0",$Settings['charset']);
 if($Settings['showverinfo']==true) { ?>

diff --git a/inc/searchs.php b/inc/searchs.php
index 1e85b8b..1490516 100644 (file)
--- a/inc/searchs.php
+++ b/inc/searchs.php
@@ -11,7 +11,7 @@
     Copyright 2004-2007 Cool Dude 2k - http://intdb.sourceforge.net/
     Copyright 2004-2007 Game Maker 2k - http://upload.idb.s1.jcink.com/
 
-    $FileInfo: searchs.php - Last Update: 07/14/2007 SVN 43 - Author: cooldude2k $
+    $FileInfo: searchs.php - Last Update: 07/15/2007 SVN 44 - Author: cooldude2k $
 */
 $File3Name = basename($_SERVER['SCRIPT_NAME']);
 if ($File3Name=="searchs.php"||$File3Name=="/searchs.php") {
@@ -21,7 +21,7 @@ if($Settings['enable_search']==false||
        $GroupInfo['CanSearch']=="no") {
 redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); }
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
 if($Settings['enable_search']==true||
        $GroupInfo['CanSearch']=="yes") {
 if($_GET['act']=="topics") {
@@ -105,6 +105,7 @@ $i=0;
 while ($i < $num) {
 $TopicID=mysql_result($result,$i,"id");
 $ForumID=mysql_result($result,$i,"ForumID");
+$CategoryID=mysql_result($result,$i,"CategoryID");
 $UsersID=mysql_result($result,$i,"UserID");
 $GuestName=mysql_result($result,$i,"GuestName");
 $TheTime=mysql_result($result,$i,"TimeStamp");
@@ -117,6 +118,10 @@ $TopicStat=mysql_result($result,$i,"Closed");
 $UsersName = GetUserName($UsersID,$Settings['sqltable']);
 if($UsersName=="Guest") { $UsersName=$GuestName;
 if($UsersName==null) { $UsersName="Guest"; } }
+if(isset($PermissionInfo['CanViewForum'][$ForumID])&&
+       $PermissionInfo['CanViewForum'][$ForumID]=="yes"&&
+       isset($CatPermissionInfo['CanViewCategory'][$CategoryID])&&
+       $CatPermissionInfo['CanViewCategory'][$CategoryID]=="yes") {
 $glrquery = query("select * from `".$Settings['sqltable']."posts` where `ForumID`=%i and `TopicID`=%i ORDER BY `TimeStamp` DESC", array($ForumID,$TopicID));
 $glrresult=mysql_query($glrquery);
 $glrnum=mysql_num_rows($glrresult);
@@ -180,7 +185,7 @@ echo "<span>".$UsersName."</span>"; }
 <td class="TableRow3" style="text-align: center;"><?php echo $NumReply; ?></td>
 <td class="TableRow3"><?php echo $LastReply; ?></td>
 </tr>
-<?php ++$i; }
+<?php } ++$i; }
 ?>
 <tr id="SearchEnd" class="TableRow4">
 <td class="TableRow4" colspan="6">&nbsp;</td>

diff --git a/inc/subcategories.php b/inc/subcategories.php
index f6903bf..2b871df 100644 (file)
--- a/inc/subcategories.php
+++ b/inc/subcategories.php
@@ -11,7 +11,7 @@
     Copyright 2004-2007 Cool Dude 2k - http://intdb.sourceforge.net/
     Copyright 2004-2007 Game Maker 2k - http://upload.idb.s1.jcink.com/
 
-    $FileInfo: subcategories.php - Last Update: 07/14/2007 SVN 43 - Author: cooldude2k $
+    $FileInfo: subcategories.php - Last Update: 07/15/2007 SVN 44 - Author: cooldude2k $
 */
 $File3Name = basename($_SERVER['SCRIPT_NAME']);
 if ($File3Name=="subcategories.php"||$File3Name=="/subcategories.php") {
@@ -21,9 +21,9 @@ $checkquery = query("select * from `".$Settings['sqltable']."categories` where `
 $checkresult=mysql_query($checkquery);
 $checknum=mysql_num_rows($checkresult);
 $checki=0;
-if($checknum===0) { redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
+if($checknum==0) { redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); }
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
 $CategoryID=mysql_result($checkresult,$checki,"id");
 $CategoryName=mysql_result($checkresult,$checki,"Name");
 $CategoryShow=mysql_result($checkresult,$checki,"ShowCategory");
@@ -31,10 +31,18 @@ $CategoryType=mysql_result($checkresult,$checki,"CategoryType");
 $SubShowForums=mysql_result($checkresult,$checki,"SubShowForums");
 $CategoryType = strtolower($CategoryType); $SubShowForums = strtolower($SubShowForums);
 $SCategoryName = $CategoryName;
+if(!isset($CatPermissionInfo['CanViewCategory'][$CategoryID])) {
+       $CatPermissionInfo['CanViewCategory'][$CategoryID] = "no"; }
+if($CatPermissionInfo['CanViewCategory'][$CategoryID]=="no"||
+       $CatPermissionInfo['CanViewCategory'][$CategoryID]!="yes") {
+redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
+ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
+if($CatPermissionInfo['CanViewCategory'][$CategoryID]=="yes") {
 if($CategoryType=="category") {
 redirect("location",$basedir.url_maker($exfile['category'],$Settings['file_ext'],"act=".$_GET['act']."&id=".$_GET['id'],$Settings['qstr'],$Settings['qsep'],$prexqstr['category'],$exqstr['category'],FALSE));
 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); }
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
 @mysql_free_result($checkresult);
 $prequery = query("select * from `".$Settings['sqltable']."categories` where `ShowCategory`='yes' and `InSubCategory`=%i", array($_GET['id']));
 $preresult=mysql_query($prequery);
@@ -48,6 +56,8 @@ $CategoryType=mysql_result($preresult,$prei,"CategoryType");
 $SSubShowForums=mysql_result($preresult,$prei,"SubShowForums");
 $CategoryDescription=mysql_result($preresult,$prei,"Description");
 $CategoryType = strtolower($CategoryType); $SubShowForums = strtolower($SubShowForums);
+if(isset($CatPermissionInfo['CanViewCategory'][$CategoryID])&&
+       $CatPermissionInfo['CanViewCategory'][$CategoryID]=="yes") {
 $query = query("select * from `".$Settings['sqltable']."forums` where `ShowForum`='yes' and `CategoryID`=%i and `InSubForum`=0 ORDER BY `id`", array($CategoryID));
 $result=mysql_query($query);
 $num=mysql_num_rows($result);
@@ -78,6 +88,8 @@ $NumTopics=mysql_result($result,$i,"NumTopics");
 $NumPosts=mysql_result($result,$i,"NumPosts");
 $ForumDescription=mysql_result($result,$i,"Description");
 $ForumType = strtolower($ForumType);
+if(isset($PermissionInfo['CanViewForum'][$ForumID])&&
+       $PermissionInfo['CanViewForum'][$ForumID]=="yes") {
 unset($LastTopic);
 $gltquery = query("select * from `".$Settings['sqltable']."topics` where `CategoryID`=%i and `ForumID`=%i ORDER BY `LastUpdate` DESC", array($CategoryID,$ForumID));
 $gltresult=mysql_query($gltquery);
@@ -122,8 +134,7 @@ if ($ForumType=="redirect") {
 <td class="TableRow3" style="text-align: center;"><?php echo $NumPosts; ?></td>
 <td class="TableRow3"><?php echo $LastTopic; ?></td>
 </tr>
-<?php
-++$i; } @mysql_free_result($result);
+<?php } ++$i; } @mysql_free_result($result);
 if($num>=1) {
 ?>
 <tr id="SubCatEnd<?php echo $CategoryID; ?>" class="TableRow4">
@@ -131,7 +142,7 @@ if($num>=1) {
 </tr>
 </table></div>
 <div>&nbsp;</div>
-<?php } ++$prei; }
+<?php } } ++$prei; } }
 @mysql_free_result($preresult);
 $CatCheck = "skip";
 if($SubShowForums!="yes") { 

diff --git a/inc/subforums.php b/inc/subforums.php
index 0668411..31e81ba 100644 (file)
--- a/inc/subforums.php
+++ b/inc/subforums.php
@@ -11,7 +11,7 @@
     Copyright 2004-2007 Cool Dude 2k - http://intdb.sourceforge.net/
     Copyright 2004-2007 Game Maker 2k - http://upload.idb.s1.jcink.com/
 
-    $FileInfo: subforums.php - Last Update: 07/14/2007 SVN 43 - Author: cooldude2k $
+    $FileInfo: subforums.php - Last Update: 07/15/2007 SVN 44 - Author: cooldude2k $
 */
 $File3Name = basename($_SERVER['SCRIPT_NAME']);
 if ($File3Name=="subforums.php"||$File3Name=="/subforums.php") {
@@ -43,15 +43,15 @@ mysql_query($redirup);
 if($RedirectURL!="http://"&&$RedirectURL!="") {
 redirect("location",$RedirectURL,0,null,false); ob_clean();
 @header("Content-Type: text/plain; charset=".$Settings['charset']);
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); }
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
 if($RedirectURL=="http://"||$RedirectURL=="") {
 redirect("location",url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); } }
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); } }
 if($ForumType=="forum") {
 redirect("location",$basedir.url_maker($exfile['forum'],$Settings['file_ext'],"act=".$_GET['act']."&id=".$_GET['id'],$Settings['qstr'],$Settings['qsep'],$prexqstr['forum'],$exqstr['forum'],FALSE));
 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); }
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
 @mysql_free_result($checkresult);
 $prequery = query("select * from `".$Settings['sqltable']."categories` where `ShowCategory`='yes' and `id`=%i ORDER BY `id`", array($CategoryID));
 $preresult=mysql_query($prequery);
@@ -62,6 +62,14 @@ $CategoryID=mysql_result($preresult,$prei,"id");
 $CategoryName=mysql_result($preresult,$prei,"Name");
 $CategoryShow=mysql_result($preresult,$prei,"ShowCategory");
 $CategoryDescription=mysql_result($preresult,$prei,"Description");
+if(!isset($CatPermissionInfo['CanViewCategory'][$CategoryID])) {
+       $CatPermissionInfo['CanViewCategory'][$CategoryID] = "no"; }
+if($CatPermissionInfo['CanViewCategory'][$CategoryID]=="no"||
+       $CatPermissionInfo['CanViewCategory'][$CategoryID]!="yes") {
+redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
+ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
+if($CatPermissionInfo['CanViewCategory'][$CategoryID]=="yes") {
 $query = query("select * from `".$Settings['sqltable']."forums` where `ShowForum`='yes' and `CategoryID`=%i and `InSubForum`=%i ORDER BY `id`", array($CategoryID,$_GET['id']));
 $result=mysql_query($query);
 $num=mysql_num_rows($result);
@@ -90,6 +98,8 @@ $ForumType=mysql_result($result,$i,"ForumType");
 $NumTopics=mysql_result($result,$i,"NumTopics");
 $NumPosts=mysql_result($result,$i,"NumPosts");
 $ForumDescription=mysql_result($result,$i,"Description");
+if(isset($PermissionInfo['CanViewForum'][$ForumID])&&
+       $PermissionInfo['CanViewForum'][$ForumID]=="yes") {
 unset($LastTopic);
 $gltquery = query("select * from `".$Settings['sqltable']."topics` where `ForumID`=%i ORDER BY `LastUpdate` DESC", array($ForumID));
 $gltresult=mysql_query($gltquery);
@@ -130,16 +140,14 @@ if ($ForumType=="redirect") {
 <td class="TableRow3" style="text-align: center;"><?php echo $NumPosts; ?></td>
 <td class="TableRow3"><?php echo $LastTopic; ?></td>
 </tr>
-<?php
-++$i; } @mysql_free_result($result);
+<?php } ++$i; } @mysql_free_result($result);
 ?>
 <tr id="CatEnd<?php echo $CategoryID; ?>" class="TableRow4">
 <td class="TableRow4" colspan="5">&nbsp;</td>
 </tr>
 </table></div>
 <div>&nbsp;</div>
-<?php
-++$prei; } @mysql_free_result($preresult);
+<?php } ++$prei; } @mysql_free_result($preresult);
 $ForumCheck = "skip";
 if($CanHaveTopics!="yes") { 
        $ForumName = $SForumName; }

diff --git a/inc/topics.php b/inc/topics.php
index 425f636..e896b9f 100644 (file)
--- a/inc/topics.php
+++ b/inc/topics.php
@@ -11,7 +11,7 @@
     Copyright 2004-2007 Cool Dude 2k - http://intdb.sourceforge.net/
     Copyright 2004-2007 Game Maker 2k - http://upload.idb.s1.jcink.com/
 
-    $FileInfo: topics.php - Last Update: 07/14/2007 SVN 43 - Author: cooldude2k $
+    $FileInfo: topics.php - Last Update: 07/15/2007 SVN 44 - Author: cooldude2k $
 */
 $File3Name = basename($_SERVER['SCRIPT_NAME']);
 if ($File3Name=="topics.php"||$File3Name=="/topics.php") {
@@ -32,15 +32,32 @@ $prenum=mysql_num_rows($preresult);
 $prei=0;
 if($prenum==0) { redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); }
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
 while ($prei < $prenum) {
 $ForumID=mysql_result($preresult,$prei,"id");
+$ForumCatID=mysql_result($preresult,$prei,"CategoryID");
 $ForumName=mysql_result($preresult,$prei,"Name");
 $ForumType=mysql_result($preresult,$prei,"ForumType");
 $RedirectURL=mysql_result($preresult,$prei,"RedirectURL");
 $RedirectTimes=mysql_result($preresult,$prei,"Redirects");
 $NumberViews=mysql_result($preresult,$prei,"NumViews");
 $ForumType = strtolower($ForumType);
+if(!isset($CatPermissionInfo['CanViewCategory'][$ForumCatID])) {
+       $CatPermissionInfo['CanViewCategory'][$ForumCatID] = "no"; }
+if($CatPermissionInfo['CanViewCategory'][$ForumCatID]=="no"||
+       $CatPermissionInfo['CanViewCategory'][$ForumCatID]!="yes") { @mysql_free_result($preresult);
+redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
+ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
+if(!isset($PermissionInfo['CanViewForum'][$ForumID])) {
+       $PermissionInfo['CanViewForum'][$ForumID] = "no"; }
+if($PermissionInfo['CanViewForum'][$ForumID]=="no"||
+       $PermissionInfo['CanViewForum'][$ForumID]!="yes") { @mysql_free_result($preresult);
+redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
+ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
+if($CatPermissionInfo['CanViewCategory'][$ForumCatID]=="yes"&&
+       $PermissionInfo['CanViewForum'][$ForumID]=="yes") {
 if($ForumType!="redirect") {
 if($NumberViews==0||$NumberViews==null) { $NewNumberViews = 1; }
 if($NumberViews!=0&&$NumberViews!=null) { $NewNumberViews = $NumberViews + 1; }
@@ -54,16 +71,16 @@ mysql_query($redirup);
 if($RedirectURL!="http://"&&$RedirectURL!="") {
 redirect("location",$RedirectURL,0,null,false); ob_clean();
 @header("Content-Type: text/plain; charset=".$Settings['charset']);
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); }
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
 if($RedirectURL=="http://"||$RedirectURL=="") {
 redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); } }
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); } }
 if($ForumCheck!="skip") {
 if($ForumType=="subforum") {
 redirect("location",$basedir.url_maker($exfile['subforum'],$Settings['file_ext'],"act=".$_GET['act']."&id=".$_GET['id'],$Settings['qstr'],$Settings['qsep'],$prexqstr['subforum'],$exqstr['subforum'],FALSE));
 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); } }
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); } }
 $query = query("select * from `".$Settings['sqltable']."topics` where `ForumID`=%i ORDER BY `Pinned` DESC, `LastUpdate` DESC", array($_GET['id']));
 $result=mysql_query($query);
 $num=mysql_num_rows($result);
@@ -89,7 +106,6 @@ $i=0;
 <?php echo $ThemeSet['TitleIcon'] ?><a href="<?php echo url_maker($exfile['forum'],$Settings['file_ext'],"act=view&id=".$ForumID,$Settings['qstr'],$Settings['qsep'],$prexqstr['forum'],$exqstr['forum']); ?>#<?php echo $ForumID; ?>"><?php echo $ForumName; ?></a></span>
 <?php echo "<span style=\"float: right;\">&nbsp;</span>"; ?></td>
 </tr>
-<?php ++$prei; } @mysql_free_result($preresult); ?>
 <tr id="TopicStatRow<?php echo $ForumID; ?>" class="TableRow2">
 <th class="TableRow2" style="width: 4%;">State</th>
 <th class="TableRow2" style="width: 36%;">Topic Name</th>
@@ -175,7 +191,7 @@ echo "<span>".$UsersName."</span>"; }
 <td class="TableRow3" style="text-align: center;"><?php echo $NumReply; ?></td>
 <td class="TableRow3"><?php echo $LastReply; ?></td>
 </tr>
-<?php ++$i; }
+<?php ++$i; } 
 ?>
 <tr id="ForumEnd<?php echo $ForumID; ?>" class="TableRow4">
 <td class="TableRow4" colspan="6">&nbsp;</td>
@@ -192,3 +208,6 @@ echo "<span>".$UsersName."</span>"; }
 </tr>
 </table>
 <div>&nbsp;</div>
+<?php } ++$prei; } 
+@mysql_free_result($preresult);
+?>
\ No newline at end of file

diff --git a/messenger.php b/messenger.php
index ad35e49..591cbd0 100644 (file)
--- a/messenger.php
+++ b/messenger.php
@@ -11,7 +11,7 @@
     Copyright 2004-2007 Cool Dude 2k - http://intdb.sourceforge.net/
     Copyright 2004-2007 Game Maker 2k - http://upload.idb.s1.jcink.com/
 
-    $FileInfo: messenger.php - Last Update: 07/14/2007 SVN 43 - Author: cooldude2k $
+    $FileInfo: messenger.php - Last Update: 07/15/2007 SVN 44 - Author: cooldude2k $
 */
 require('preindex.php');
 $usefileext = $Settings['file_ext'];
@@ -26,7 +26,7 @@ $filewpath = $exfile['messenger'].$usefileext.$_SERVER['PATH_INFO'];
 if($_SESSION['UserGroup']==$Settings['GuestGroup']||$GroupInfo['CanPM']=="no") {
 redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); }
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
 ?>
 
 <?php 

diff --git a/mysql.php b/mysql.php
index f41f91d..6fd2f64 100644 (file)
--- a/mysql.php
+++ b/mysql.php
@@ -11,7 +11,7 @@
     Copyright 2004-2007 Cool Dude 2k - http://intdb.sourceforge.net/
     Copyright 2004-2007 Game Maker 2k - http://upload.idb.s1.jcink.com/
 
-    $FileInfo: mysql.php - Last Update: 07/14/2007 SVN 43 - Author: cooldude2k $
+    $FileInfo: mysql.php - Last Update: 07/15/2007 SVN 44 - Author: cooldude2k $
 */
 @error_reporting(E_ALL ^ E_NOTICE);
 @ini_set('session.use_trans_sid', false);
@@ -109,7 +109,7 @@ if(stristr($_SERVER["HTTP_ACCEPT"],"application/x-javascript") ) {
 if(stristr($_SERVER["HTTP_ACCEPT"],"application/javascript") ) {
 @header("Content-Type: application/javascript; charset=".$Settings['charset']); } else {
 @header("Content-Type: text/javascript; charset=".$Settings['charset']); } }
-require("inc/javascript.php");
+require($SettDir['inc'].'javascript.php');
 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); }
 if(CheckFiles("install.php")!=true) {
        if($Settings['sqldb']==null) {
@@ -121,34 +121,8 @@ if(isset($_SESSION['CheckCookie'])) {
 if($_SESSION['CheckCookie']!="done") {
 if($_COOKIE['SessPass']!=null&&
 $_COOKIE['MemberName']!=null) {
-require('inc/prelogin.php'); } } }
-// Member Group Setup
-if(!isset($_SESSION['UserGroup'])) { $_SESSION['UserGroup'] = null; }
-if($_SESSION['UserGroup']==null) { 
-$_SESSION['UserGroup']=$Settings['GuestGroup']; }
-$gruquery = query("select * from `".$Settings['sqltable']."groups` where `Name`='%s'", array($_SESSION['UserGroup']));
-$gruresult=mysql_query($gruquery);
-$grunum=mysql_num_rows($gruresult);
-$GroupInfo['ID']=mysql_result($gruresult,0,"id");
-$GroupInfo['Name']=mysql_result($gruresult,0,"Name");
-$GroupInfo['PermissionID']=mysql_result($gruresult,0,"PermissionID");
-$GroupInfo['NamePrefix']=mysql_result($gruresult,0,"NamePrefix");
-$GroupInfo['NameSuffix']=mysql_result($gruresult,0,"NameSuffix");
-$GroupInfo['CanViewBoard']=mysql_result($gruresult,0,"CanViewBoard");
-$GroupInfo['CanEditProfile']=mysql_result($gruresult,0,"CanEditProfile");
-$GroupInfo['CanAddEvents']=mysql_result($gruresult,0,"CanAddEvents");
-$GroupInfo['CanPM']=mysql_result($gruresult,0,"CanPM");
-$GroupInfo['CanSearch']=mysql_result($gruresult,0,"CanSearch");
-$GroupInfo['PromoteTo']=mysql_result($gruresult,0,"PromoteTo");
-$GroupInfo['PromotePosts']=mysql_result($gruresult,0,"PromotePosts");
-$GroupInfo['HasModCP']=mysql_result($gruresult,0,"HasModCP");
-$GroupInfo['HasAdminCP']=mysql_result($gruresult,0,"HasAdminCP");
-$GroupInfo['ViewDBInfo']=mysql_result($gruresult,0,"ViewDBInfo");
-@mysql_free_result($gruresult);
-if($GroupInfo['CanViewBoard']=="no") { 
-@header("Content-Type: text/plain; charset=".$Settings['charset']); 
-ob_clean(); echo "Sorry you can not view the board."; 
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); }
+require($SettDir['inc'].'prelogin.php'); } } }
+require($SettDir['inc'].'groupsetup.php');
 //Time Zone Set
 if(!isset($_SESSION['UserTimeZone'])) { 
        if(isset($Settings['DefaultTimeZone'])) { 

diff --git a/profile.php b/profile.php
index 64df67c..30f1ef6 100644 (file)
--- a/profile.php
+++ b/profile.php
@@ -11,7 +11,7 @@
     Copyright 2004-2007 Cool Dude 2k - http://intdb.sourceforge.net/
     Copyright 2004-2007 Game Maker 2k - http://upload.idb.s1.jcink.com/
 
-    $FileInfo: profile.php - Last Update: 07/14/2007 SVN 43 - Author: cooldude2k $
+    $FileInfo: profile.php - Last Update: 07/15/2007 SVN 44 - Author: cooldude2k $
 */
 require('preindex.php');
 $usefileext = $Settings['file_ext'];
@@ -26,7 +26,7 @@ $filewpath = $exfile['profile'].$usefileext.$_SERVER['PATH_INFO'];
 if($_SESSION['UserGroup']==$Settings['GuestGroup']||$GroupInfo['CanEditProfile']=="no") {
 redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); }
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
 if($_SESSION['UserGroup']!=$Settings['GuestGroup']||
        $GroupInfo['CanEditProfile']=="yes") {
 if($_GET['act']==null||$_GET['act']=="notepad")

diff --git a/search.php b/search.php
index 2be904e..138d5f3 100644 (file)
--- a/search.php
+++ b/search.php
@@ -11,7 +11,7 @@
     Copyright 2004-2007 Cool Dude 2k - http://intdb.sourceforge.net/
     Copyright 2004-2007 Game Maker 2k - http://upload.idb.s1.jcink.com/
 
-    $FileInfo: search.php - Last Update: 07/14/2007 SVN 43 - Author: cooldude2k $
+    $FileInfo: search.php - Last Update: 07/15/2007 SVN 44 - Author: cooldude2k $
 */
 require('preindex.php');
 $usefileext = $Settings['file_ext'];
@@ -26,7 +26,7 @@ $filewpath = $exfile['search'].$usefileext.$_SERVER['PATH_INFO'];
 if($Settings['enable_search']==false||$GroupInfo['CanSearch']=="no") {
 redirect("location",$basedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
 ob_clean(); @header("Content-Type: text/plain; charset=".$Settings['charset']);
-gzip_page($Settings['use_gzip'],$GZipEncode['Type']); die(); }
+gzip_page($Settings['use_gzip'],$GZipEncode['Type']); @mysql_close(); die(); }
 if($Settings['enable_search']==true||$GroupInfo['CanSearch']=="yes") {
 if(!isset($_GET['search'])) { $_GET['search'] = null; }
 if(!isset($_POST['search'])) { $_POST['search'] = null; }