$whatdo $to

0) { $im = imagecreatefromjpeg($dest); $imwidth = imagesx($im); $imheight = imagesy($im); $txtpl = ($imwidth-7.5*strlen($string))/2; $tag = imagecreatefromjpeg("./tag.jpg"); imagefilledrectangle ($im, 0, ($imheight-$logoh), $imwidth, $imheight, 0); if ($addwhat==1) ImageCopy ($im, $tag, $txtpl, ($imheight-$logoh), 0, 0, 126, $logoh); else ImageString($im,5,$txtpl,($imheight-($logoh-5)),$string,1); ImageJpeg($im, $dest, 95); } } if (!isset($go)) require ("config.php"); langprocess(); langlogin(); languser(); langmail(); langindex(); langmod(); langprofile(); langtop(); mysql_connect($host,$user,$pass); @mysql_select_db($database) or die( "Unable to select database"); if (isset($logged)) $userresult = @mysql_query("SELECT * from $usertable where name = '$logged'"); elseif (isset($un)) $userresult = @mysql_query("SELECT * from $usertable where name = '$un'"); if (isset($userresult)) { $userin = 0; $user_id = mysql_fetch_array($userresult); } function is_uploaded_fil($filename) { if (!$tmp_file = get_cfg_var('upload_tmp_dir')) { $tmp_file = dirname(tempnam('', '')); } $tmp_file .= '/' . basename($filename); return (ereg_replace('/+', '/', $tmp_file) == $filename); } function dispatch_vcode($username,$vcodemail,$vcodesubject) { global $usertable,$sitename,$admin; $result = mysql_query("SELECT email, validate from $usertable where name = '$username'"); $email = mysql_result($result,0,"email"); $vcode = mysql_result($result,0,"validate"); $vcodemail = ereg_replace ("VCODE", $vcode, $vcodemail); $vcodemail = ereg_replace ("USERNAME", $username, $vcodemail); $recipient .= "$username <$email>"; $headers .= "From: $sitename <$admin>\n"; if ($email != "" && $email != "null@null") mail($recipient, $vcodesubject, $vcodemail, $headers); } function logout() { header ("Set-Cookie: logged=$user_id; expires=Wed, 2-Jan-1987 00:00:00 GMT; path=/;"); } if (isset($aself)) errormsg("
"); $cookieinfo = $HTTP_COOKIE_VARS[logged]; if ($action == "vm") { if ($svc == $user_id["validate"]) { @mysql_query("UPDATE $usertable set validate = 'ok' where name = '$logged'"); $user_id["validate"] = "ok"; $letknown = ACCTVALD; } else $letknown = "Incorrect validation code."; } if ($action == "resendval" || isset($resendval)) { if (strlen($un) < 1) $letknown = NOUSERNAME; else { dispatch_vcode($un,$vcodemail,$vcodesubject); $letknown = VALCODESENT; } if ($then=="e") { print "\n"; print "\n"; print "$whatdo $to\n"; print "\n"; print "\n"; print "\n"; print "\n"; print "\n"; print " \n"; print " "; print "

\n"; print " \n"; print " \n"; print " \n"; print " \n"; print "

\n"; print "

\n"; print $letknown; print "

"; print "

\n"; print "

\n"; print "\n"; print "\n"; exit; } } // e-mail validation required if ($user_id["validate"] != "ok" && $validate != "no" && isset($logged)) { if (!isset($go)) { ?>

".IMGREMOVED."
"; } if ($action == "updatepic") { // update image $result=mysql_query("SELECT url FROM $imagetable where id = '$submitid'") or die(mysql_error()); $delurl=mysql_result($result,0,"url"); if ($submiturl != $delurl) { $file = basename($delurl); $delurl=parse_url($delurl); $serverurl=parse_url($uploadurl); if (($serverurl[host]) == ($delurl[host])) {$letknown = "".CANTCHANGE."

";} else mysql_query("UPDATE $imagetable SET url = '$submiturl' where id = '$submitid'") or die(mysql_error()); } mysql_query("UPDATE $imagetable SET category = '$updatecat',description = '$submitdescription', notifypub = '$submitnotifypub', status = 'waiting', reason = 'updated' where id = '$submitid'") or die(mysql_error()); $letknown .= INFOUPDATED; } if ($action == "dm") { // delete all mail mysql_query("delete from $mailtable where name = '$logged'") or die(mysql_error()); } if ($action == "updateinfo") { if(!$submitemail == "" && (!strstr($submitemail,"@") || !strstr($submitemail,"."))) $letknown .= "".ENTEREMAIL."
"; else { mysql_query("UPDATE $usertable SET age = '$submitage', homepage = '$submithomepage', email = '$submitemail', notifypriv = '$submitnotifypriv' where name = '$cookieinfo'") or die(mysql_error()); if (($submitemail != $user_id["email"]) && $validate == "yes") { srand ((double) microtime() * 1000000); $newcode = "";$i=0; while($i<8) { $newcode .= chr((rand()%26)+97); $i++; } @mysql_query("UPDATE $usertable SET validate = '$newcode' where name = '$cookieinfo'"); dispatch_vcode($cookieinfo,$vcodemail,$vcodesubject); $letknown .= VALCODESENT."
"; } for ($i=1; $i < 21; $i++) { $marker = "info".$i; $markdat = $$marker; if (strlen($markdat) > 1) mysql_query("UPDATE $usertable SET $marker = '$markdat' where name = '$cookieinfo'") or die(mysql_error()); } $letknown .= INFOUPDATED;} } // get user info $result=mysql_query("SELECT * FROM $usertable WHERE name='$cookieinfo' limit 1"); $rows = mysql_num_rows($result); if ($rows < 1) errormsg(INVALIDUSER); $user_id=mysql_fetch_array($result); $username=$user_id["name"]; $pw=$user_id["password"]; $name=$user_id["name"]; $email=$user_id["email"]; if ($email == "null@null") $email = ""; $age=$user_id["age"]; $category=$user_id["category"]; $homepage=$user_id["homepage"]; $self=$user_id["self"]; $currentpw=$user_id["password"]; $notifypriv=$user_id["notifypriv"]; foreach ( $extras as $marker ) { // display values $extra[$marker][value]=$user_id["$marker"]; } // get mails for user $mailresult=mysql_query("SELECT * FROM $mailtable WHERE name='$cookieinfo'"); $nomail = mysql_num_rows($mailresult); // get image infos $imgresult=mysql_query("SELECT * FROM $imagetable WHERE name='$cookieinfo'"); $numimages = mysql_num_rows($imgresult); if ($action == "addpic") { if ($numimages >= $maximages && $admin != $email) $message .= MAXIMGS; // if ($numimages >= 5) $message .= MAXIMGS; if (strlen($newurl) <= 8) { // begin file upload routine $source = $HTTP_POST_FILES['userpic']['tmp_name']; $dest = ''; if ( ($source != 'none') && ($source != '' )) { $newfile = uniqid('img').''; $dest = $uploadpath.$newfile; if (ereg( "[4-9]\.[0-9]\.[3-9].*", phpversion() ) || ereg( "[4-9]\.[1-9]\.[0-9].*", phpversion() )) { if ( $dest != '' ) { if ( move_uploaded_file( $source, $dest ) ) {$url = $uploadurl.$newfile;} else $message .= FILENOTSTORED."
"; if (isset($chmod)) chmod ($dest, 0755); // some servers will require this line } } else {if ( $dest != '' ) { if (is_uploaded_fil($source)) { copy($source, $dest); $url = $uploadurl.$newfile;} if (isset($chmod)) chmod ($dest, 0755); // some servers will require this line }} } else $message = FILETOOBIG; $imagesize = getimagesize($dest); switch ( $imagesize[2] ) { case 1: rename($dest, $dest.".gif"); $url.= ".gif"; break; case 2: rename($dest, $dest.".jpg"); $url.= ".jpg"; $dest .= ".jpg"; addlogo(); $jpg = 1; break; case 3: rename($dest, $dest.".png"); $url.= ".png"; break; default: $message = INVALIDIMG; @unlink($dest); break; } if ( $imagesize[0] > $imgsize) $resize = "yes"; if ( $source_size > ($uploadsize * 1124) ) $message .= FILETOOBIG; if ( filesize($dest) > ($uploadsize * 1024) ) { unlink($dest); $message .= FILETOOBIG; } $newurl=$url; } // end file upload routine $query = mysql_query("select url from $imagetable where url='$newurl'"); $rows = mysql_num_rows($query); if ($rows > 0) $message .= IMGEXISTS."
"; if((strlen($newurl) <= 8) && !$userpic) $message .= NOURL."
"; if(!$newdescribe) $message .= NODESCRIP."
"; if ($message) { errormsg ($message); exit; } if (isset($newself)) { $total = 1; $rate = $newself;} else {$total = 0; $rate = 0;} $resize = "no"; $average = $rate; $status = WAITING; mysql_query("INSERT INTO $imagetable (name, url, category, description, notifypub, self, one, two, three, four, five, six, seven, eight, nine, ten, total, rate, average, resize, status, reason) VALUES('$cookieinfo','$newurl','$newcat','$newdescribe','$newnotifypub','$newself','0','0','0','0','0','0','0','0','0','0','$total','$rate','$average','$resize','$status','new')") or die(mysql_error()); $newid = mysql_insert_id(); if (!isset($go)) { print "\n"; print "\n"; print "$sitetitle\n"; print "\n"; print "\n"; print "
\n"; print "\n"; print " \n"; print " \n"; print " \n"; print " \n"; print "

\n"; } print " \n"; print " \n"; print " \n"; print " \n"; print "

\n"; print "

".PICSREV."\n"; print "

\n"; print " \n"; print "

\n"; print "

\n"; print "\n"; print " \n"; print " \n"; print " \n"; print " \n"; print "

".POWEREDBY." Image Vote
\n"; if (!isset($go)){ print "
\n"; print "

\n"; print "\n"; print "\n"; print "\n"; } exit; } // done with database? better close it mysql_close (); ?>

"; } ?>


:
:	"; print ""; while (list($key, $value) = each ($extra[$marker][type])) { if ($value != $extra[$marker][value]) print ""; } print ""; } print "

	>

"; print " "; print " "; print " "; print " "; print " "; $count++; } } ?>


$status	$fromuser	$subject	$datestamp

"> ">

"; else { $count=0; // if ($action != "remove") $numimages++; while ($count < $numimages) { $url=mysql_result($imgresult,$count,"url"); $id=mysql_result($imgresult,$count,"id"); $c=mysql_result($imgresult,$count,"category"); $description=mysql_result($imgresult,$count,"description"); $notifypub=mysql_result($imgresult,$count,"notifypub"); $average=mysql_result($imgresult,$count,"average"); $total=mysql_result($imgresult,$count,"total"); $status=mysql_result($imgresult,$count,"status"); print "\n"; print " \n"; print " \n"; print " \n"; print "

\n"; print "

\n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print "

\n"; print " \n"; print " \n"; print "	\n"; print " ".IMGID." \n"; print "	$id
\n"; print " ".STATUS." \n"; print "	$status
\n"; print " ".RATING." \n"; print "	$average ($total ".V.") Viewer Comments
".IMGURL." \n"; print " \n"; print " \n"; print " ".DESCRIBE." \n"; print " \n"; print " \n"; print CATEGORY." "; print " ".NOTIFYPUB." \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " ".MODNOTE." \n"; print "

\n"; print "

\n"; $count++; }} ?>

(ie: http://www.yourwebhost.com/yourdir/yourpic.jpg)

1 2 3 4 5 6 7 8 9 10