$title = 'Online game and RPG banner exchange';
include('header.php');
$bannerpath = '/hsphere/local/home/lordsof/rpgtoplist.com/banners/';
$bannerurl = 'http://www.rpgtoplist.com/banners/';
if(($_COOKIE['rpgtoplist'] || $_SESSION['rpgtoplist']) && $email == $info['email'] && $info['access'] >= 2)
{
switch($_GET['step'])
{
case 'view':
case 'site':
if($_GET['id'])
{
$id = clean($_GET['id']);
$site = mysql_fetch_array(mysql_query("SELECT * FROM `sites` WHERE `id` = '$id' AND `owner` = '{$info['id']}'"));
if($site)
{
$main = $main . '
|
';
//<object data="' . $_SERVER['HTTP_HOST'] . 'banner.php?id=' . $info['id'] . '" style="width:468px;height:60px" marginwidth="0" marginheight="0" scrolling="no" />
}
}
break;
case 'banners':
if($info['access'] > 3)
{
$main = $main . '| Banner | Link | Site | |
';
if($_GET['action'] == 'submit')
{
$id = clean($_POST['id']);
mysql_query("UPDATE `banners` SET `approved` = 'Y' WHERE `id` = '$id'") or die(mysql_error());
echo('| Banner has been approved. |
');
}
}
break;
break;
case 'approve':
if($info['access'] > 3)
{
if($_GET['approve'] == 'sites')
{
$main = $main . '| Name | Url | | | ';
if($_GET['action'] == 'submit')
{
$id = clean($_GET['id']);
mysql_query("UPDATE `sites` SET `approved` = 'Y' WHERE `id` = '$id'") or die(mysql_error());
$main = $main . '| Site has been approved. | ';
}
$approve = mysql_query("SELECT * FROM `sites` WHERE `approved` = 'N'");
while($val = mysql_fetch_array($approve))
{
$main = $main . '| ' . $val['name'] . ' | ' . $val['url'] . ' | View banners | Approve | ';
}
$main = $main . '
|
';
}
else
{
$main = $main . '| Banner | Site | | ';
if($_GET['action'] == 'submit')
{
$id = clean($_GET['id']);
mysql_query("UPDATE `banners` SET `approved` = 'Y' WHERE `id` = '$id'") or die(mysql_error());
$main = $main . '| Banner has been approved. | ';
}
$approve = mysql_query("SELECT * FROM `banners` WHERE `approved` = 'N'");
while($val = mysql_fetch_array($approve))
{
$site = mysql_fetch_array(mysql_query("SELECT * FROM `sites` WHERE `id` = '{$val['site']}'"));
$main = $main . ' | ' . $site['url'] . ' | View banners | Approve | ';
}
$main = $main . '
|
';
}
}
break;
case 'add':
switch($_GET['add'])
{
case 'banner':
if($_REQUEST['site'] && is_numeric($_REQUEST['site']))
{
switch($_GET['action'])
{
case 'submit':
if($_FILES['banner']['tmp_name'] || $_POST['banner'])
{
if($_FILES['banner']['name'])
{
$ban = $_FILES['banner']['tmp_name'];
$ban2 = $_FILES['banner']['name'];
}
else
{
$ban = clean($_POST['banner']);
$ban2 = clean($_POST['banner']);
}
$filext = explode('.', $ban2);
$i = count($filext) - 1;
$filext[$i] = strtolower($filext[$i]);
if($filext[$i] == 'png' || $filext[$i] == 'jpg' || $filext[$i] == 'gif')
{
switch($filext[$i])
{
case 'png':
$image = imagecreatefrompng($ban);
break;
case 'jpg':
$image = imagecreatefromjpeg($ban);
break;
case 'gif':
$image = imagecreatefromgif($ban);
break;
}
if(imagesx($image) > 0 && imagesy($image) > 0)
{
$banner = imagecreatetruecolor(468, 60);
imagecopyresized($banner, $image, 0 , 0, 0, 0, 468, 60, imagesx($image), imagesy($image));
$site = clean($_POST['site']);
$dir = opendir($bannerpath);
$num = 0;
while($files = readdir($dir))
{
$file = explode('-', $files);
if($file[0] == $site)
{
$num ++;
}
}
$num++;
imagepng($banner, $bannerpath . $site . '-' . $num . '.png');
imagedestroy($image);
imagedestroy($banner);
mysql_query("INSERT INTO `banners` (`site`, `number`) VALUES ('$site', '$num')");
email('RPG Top List ', 'billing@lotdhosting.com', 'banner added', '', '');
$main = $main . '|
|
';
}
}
}
break;
case 'new':
$main = $main . '|
|
';
break;
case 'import':
$main = $main . '|
|
';
break;
default:
$main = $main . ' |
';
break;
}
}
break;
case 'site':
switch($_GET['action'])
{
case 'new':
if($_GET['do']== 'submit')
{
$name = clean($_POST['name']);
$url = clean($_POST['url']);
$site = mysql_num_rows(mysql_query("SELECT * FROM `sites` WHERE `owner` = '{$info['id']}'"));
$import = mysql_fetch_array(mysql_query("SELECT `id` FROM `sites` WHERE `url` = '{$game['url']}' AND `name` = '{$game['name']}'"));
if(!$site)
{
$allowance = 100;
}
else
{
$allowance = 0;
}
if(!$import && $name && $url)
{
mysql_query("INSERT INTO `sites` (`name`, `url`, `owner`, `allowance`) VALUES ('$name', '$url', '{$info['id']}', $allowance)");
email('RPG Top List ', 'billing@lotdhosting.com', 'site added', '', '');
$main = $main . 'Your site has been added. Please add your banners now then wait for approval. (Back) |
|
';
}
else
{
$main = $main . '| Site already seems to exist. |
|
';
}
}
else
{
$main = $main . ' |
';
}
break;
case 'import':
if($_GET['do']== 'submit')
{
$id = clean($_POST['id']);
$game = mysql_fetch_array(mysql_query("SELECT * FROM `games` WHERE `id` = '$id'"));
$import = mysql_fetch_array(mysql_query("SELECT `id` FROM `sites` WHERE `url` = '{$game['url']}' AND `name` = '{$game['name']}'"));
$site = mysql_query("SELECT * FROM `sites` WHERE `owner` = '{$info['id']}'");
if(!$site)
{
$allowance = 100;
}
else
{
$allowance = 0;
}
if(!$import)
{
mysql_query("INSERT INTO `sites` (`name`, `url`, `owner`, `allowance`) VALUES ('{$game['name']}', '{$game['url']}', '{$game['ownerid']}', $allowance)");
$main = $main . 'Your game has been imported. Please add your banners now then wait for approval. (Back) |
|
';
}
else
{
$main = $main . '| Game already seems imported. |
|
';
}
}
else
{
$main = $main . ' |
';
}
break;
default:
$main = $main . ' |
';
break;
}
break;
default:
header('location:' . $_SERVER['PHP_SELF']);
break;
}
break;
default:
if($_GET['id'] && $_GET['action'] == 'allowance' && is_numeric($_POST['allowance']))
{
$id = clean($_GET['id']);
$allowance = clean($_POST['allowance']);
mysql_query("UPDATE `sites` SET `allowance` = '$allowance' WHERE `id` = '$id' AND `owner` = '{$info['id']}'");
}
$main = $main . '| Sites | Credits | Credit Allowance (%) | Status | ';
$sites = mysql_query("SELECT * FROM `sites` WHERE `owner` = '{$info['id']}'");
while($site = mysql_fetch_array($sites))
{
if($site['approved'] == 'N')
{
$status = 'Awaiting approval, please make a sure a banner has been added.';
}
elseif(!$site['allowance'])
{
$status = 'Paused';
}
else
{
$status = 'Circulating';
}
$totall += $site['allowance'];
$main = $main . '| ' . $site['name'] . ' | ' . $info['credits'] * ($site['allowance']/100) . ' | | ' . $status . ' | ';
}
if($totall > 100 || $totall < 0)
{
$main = $main . '| Warning: Your total credit allowance needs to be between 0% and 100% to work, it is currently ' . $totall . '%. | ';
}
$main = $main . '| (Add site) | ';
if($info['access'] > 3)
{
$main = $main . '| (Approve banners) | (Approve sites) | ';
}
$main = $main . '
|
';
break;
}
}
else
{
$main = $main . 'Please get a developer account if you want to access our banner exchange.';
}
include('footer.php');
?>