Beiträge von Peter

<?php
// ************************************************************************************//
// * WoltLab Burning Board 2
// ************************************************************************************//
// * Copyright (c) 2001-2004 WoltLab GmbH
// * Web           http://www.woltlab.de/
// * License       http://www.woltlab.de/products/burning_board/license_en.php
// *               http://www.woltlab.de/products/burning_board/license.php
// ************************************************************************************//
// * WoltLab Burning Board 2 is NOT free software.
// * You may not redistribute this package or any of it's files.
// ************************************************************************************//
// * $Date: 2004-10-20 13:24:57 +0200 (Wed, 20 Oct 2004) $
// * $Author: Burntime $
// * $Rev: 1453 $
// ************************************************************************************//




define('WBB_ACP_LOGIN', true);
require('./global.php');


if (isset($_REQUEST['url'])) $url = htmlconverter($_REQUEST['url']);
else $url = '';


if (!$wbbuserdata['a_can_use_acp']) {
        if (isset($_COOKIE[$cookieprefix.'userid'])) {
                list($l_username) = $db->query_first("SELECT username FROM bb".$n."_users WHERE userid='".intval($_COOKIE[$cookieprefix.'userid'])."'");
                $l_username = htmlconverter($l_username);
        }
        else $l_username = '';


        if ($allowloginencryption == 1) {
                $authentificationcode = makeAuthentificationcode(0);
                $adminsession = new adminsession();
                $adminsession->create($result['userid'], $REMOTE_ADDR, $HTTP_USER_AGENT, $authentificationcode);
                $session['hash'] = $adminsession->hash;
        }


      if($securityconfig[acp_security_login]) {
        eval("\$tpl->output(\"".$tpl->get("security_login", 1)."\",1);");
      } else {
        eval("\$tpl->output(\"".$tpl->get("login", 1)."\",1);");
      }
        exit();
}


eval("\$tpl->output(\"".$tpl->get("frameset", 1)."\",1);");
?>

<?php
eval("print(\"".$hm_boxhead_tpl."\");");
$filename = 'box_who_last.php';


$tops = mysql_query("SELECT * FROM bb1_users ORDER BY lastactivity DESC LIMIT 0 , 5");
$lastbit = '';
$tbl = 'a';


//Ausgabeschleife
while($row = mysql_fetch_object($tops))
	{
	// Datum umwandeln \\
	$m = date("m", $row->lastactivity);	// Monat
	$d = date("d", $row->lastactivity);	// Tag
	$y = date("y", $row->lastactivity);	// Jahr
	$h = date("g", $row->lastactivity);	// Stunden
	$i = date("i", $row->lastactivity);	// Minuten 
	$pa = date("a", $row->lastactivity); // AM/PM 


	$datum = "$d.$m.$y";
	if($pa=='pm' && $h<12)  { $h = $h +12; }
  if($pa=='am' && $h==12)  { $h = 0; }
	$zeit = "$h:$i";
	if($tbl=='a')
	{
	 $c = '{tablecolora}';
	 $cid = 'tablea';
	 $tbl = 'b';
	}
	else
	{
	 $c = '{tablecolorb}';
	 $cid = 'tableb';
	 $tbl = 'a';
	}
	$lastbit = $lastbit . "<tr><td id=\"$cid\" bgcolor=\"$c\" align=\"left\"><smallfont><a href=\"profile.php?userid=$row->userid\">$row->username</a></td><td id=\"$cid\" bgcolor=\"$c\" align=\"right\"><smallfont>($datum, $zeit)</td></tr>";
	$i++;
    }
eval("\$tpl->output(\"".$tpl->get("box_who_last")."\");");
eval("print(\"".$hm_boxtail_tpl."\");");
?>

if($_POST[send] == "forgot_password") { 
        if($_POST[customerid] != "") {
                   if($query) $query .= " AND customerid = '".$_POST[customerid]."'";
                     else $query = "WHERE customerid = '".$_POST[customerid]."'";
            $options += 1;
        }
        if($_POST[company] != "") {
                   if($query) $query .= " AND company = '".$_POST[company]."'";
                     else $query = "WHERE company = '".$_POST[company]."'";
            $options += 1;
        }
        if($_POST[firstname] != "") {
                   if($query) $query .= " AND firstname = '".$_POST[firstname]."'";
                     else $query = "WHERE firstname = '".$_POST[firstname]."'";
            $options += 1;
        }
        if($_POST[name] != "") {
                   if($query) $query .= " AND name = '".$_POST[name]."'";
                     else $query = "WHERE name = '".$_POST[name]."'";
            $options += 1;
        }
        if($_POST[email] != "") {
                   if($query) $query .= " AND email = '".$_POST[email]."'";
                     else $query = "WHERE email = '".$_POST[email]."'";
            $options += 1;
        }
        if($_POST[address] != "") {
                   if($query) $query .= " AND address = '".$_POST[address]."'";
                     else $query = "WHERE address = '".$_POST[address]."'";
            $options += 1;
        }
        if($_POST[zipcode] != "") {
                   if($query) $query .= " AND zipcode = '".$_POST[zipcode]."'";
                     else $query = "WHERE zipcode = '".$_POST[zipcode]."'";
            $options += 1;
        }
        if($_POST[city] != "") {
                   if($query) $query .= " AND city = '".$_POST[city]."'";
                     else $query = "WHERE city = '".$_POST[city]."'";
            $options += 1;
        }

if($_POST['send'] == "forgot_password") {                                                 /* Bugfix 17/09/2006 | possible SQL-INJECTION */
        $query = "";
        if($_POST['customerid'] != "") {
                   if($query) $query .= " AND customerid = '".intval($_POST['customerid'])."'";
                     else $query = "WHERE customerid = '".intval($_POST['customerid'])."'";
            $options += 1;
        }
        if($_POST['company'] != "") {
                   if($query) $query .= " AND company = '".addslashes($_POST['company'])."'";
                     else $query = "WHERE company = '".addslashes($_POST['company'])."'";
            $options += 1;
        }
        if($_POST['firstname'] != "") {
                   if($query) $query .= " AND firstname = '".addslashes($_POST['firstname'])."'";
                     else $query = "WHERE firstname = '".addslashes($_POST['firstname'])."'";
            $options += 1;
        }
        if($_POST['name'] != "") {
                   if($query) $query .= " AND name = '".addslashes($_POST['name'])."'";
                     else $query = "WHERE name = '".addslashes($_POST['name'])."'";
            $options += 1;
        }
        if($_POST['email'] != "") {
                   if($query) $query .= " AND email = '".addslashes($_POST['email'])."'";
                     else $query = "WHERE email = '".addslashes($_POST['email'])."'";
            $options += 1;
        }
        if($_POST['address'] != "") {
                   if($query) $query .= " AND address = '".addslashes($_POST['address'])."'";
                     else $query = "WHERE address = '".addslashes($_POST['address'])."'";
            $options += 1;
        }
        if($_POST['zipcode'] != "") {
                   if($query) $query .= " AND zipcode = '".addslashes($_POST['zipcode'])."'";
                     else $query = "WHERE zipcode = '".addslashes($_POST['zipcode'])."'";
            $options += 1;
        }
        if($_POST['city'] != "") {
                   if($query) $query .= " AND city = '".addslashes($_POST['city'])."'";
                     else $query = "WHERE city = '".addslashes($_POST['city'])."'";
            $options += 1;
        }