SS Yorum

<?php

function session_vars( $var )
{
global $user_info;
return $user_info[$var];
}

include( "include/generalsettings.secinc.php" );
include( "include/theswitch.secinc.php" );
include( "language/joy19_turkish.php" );
include( "include/replacerepeat.secinc.php" );
session_exists( $session_logged );
if ( $act == "buddy" )
{
if ( $type == "delete" )
{
mysql_query( "Delete from joy19_buddies where buddy_username = “".$user_info["username"]."” and buddy_buddy = “".$_GET["other"]."”" );
mysql_query( "Delete from joy19_buddies where buddy_username = “".$_GET["other"]."” and buddy_buddy = “".$user_info["username"]."”" );
header( "………………………………….: home.php?mode=buddy&action=deleted_buddies" );
exit( );
}
if ( $type == "add" )
{
$check = mysql_query( "Select user_id from profiles where user_id = “".$buddyID."”" );
$check2 = mysql_query( "Select id from user_buddy_list where user_id = “".$buddyID."” and buddy_id = “".session_vars( "id" )."”" );
$check3 = mysql_query( "Select * from user_ignore_list where ignore_id = “".$buddyID."” and user_id = “".session_vars( "id" )."”" );
$check4 = mysql_query( "Select * from user_ignore_list where ignore_id = “".session_vars( "id" )."” and user_id = “".$buddyID."”" );
if ( $buddyID == session_vars( "id" ) )
{
header( "………………………………….: index.php?page=friend_requests&error=21" );
exit( );
}
if ( mysql_num_rows( $check ) < 1 )
{
header( "………………………………….: index.php?page=friend_requests&error=15" );
exit( );
}
if ( 0 < mysql_num_rows( $sql ) )
{
header( "………………………………….: index.php?page=friend_requests&error=20" );
exit( );
}
if ( 0 < mysql_num_rows( $check2 ) )
{
header( "………………………………….: index.php?page=friend_requests&error=30" );
exit( );
}
if ( 0 < mysql_num_rows( $check3 ) )
{
header( "………………………………….: index.php?page=ignore_list&error=33" );
exit( );
}
if ( 0 < mysql_num_rows( $check4 ) )
{
header( "………………………………….: index.php?page=ignore_list&error=34" );
exit( );
}
mysql_query( "Insert into user_buddy_list (user_id,buddy_id,date,status,offer_by) VALUES (”".session_vars( "id" )."”,”".$buddyID."”,”".times( )."”,”no”,”".session_vars( "id" )."”)" );
header( "………………………………….: index.php?page=friend_requests&success=12" );
exit( );
}
if ( $type == "approve" )
{
mysql_query( "Update joy19_buddies set status = “yes” where buddy_id = “".$id."” and buddy_buddy = “".$user_info["username"]."”" );
mysql_query( "Insert into joy19_buddies VALUES (”",”".$user_info["username"]."”,”".$user."”,”yes”)" );
header( "………………………………….: home.php?mode=buddy&action=buddy_approved" );
exit( );
}
if ( $type == "reject" )
{
mysql_query( "Update joy19_buddies set status = “yes” where buddy_id = “".$id."” and buddy_buddy = “".$user_info["username"]."”" );
mysql_query( "Delete from joy19_buddies where buddy_id = “".$id."” and buddy_buddy = “".$user_info["username"]."”" );
header( "………………………………….: home.php?mode=buddy&action=buddy_rejected" );
exit( );
}
header( "………………………………….: index.php?page=buddy_list" );
exit( );
}
if ( $act == "tarz" )
{
if ( !@mysql_result( @mysql_query( @"Select name from tarz where id = “".$id."”" ), 0 ) )
{
exit( header( "………………………………….: home.php?mode=tarz&action=not_found" ) );
}
if ( $type == "add" )
{
mysql_query( "Update joy19_users set tarz = “".$id."” where username = “".$user_info["username"]."”" );
header( "………………………………….: home.php?mode=tarz&action=added" );
exit( );
}
if ( $type == "remove" )
{
mysql_query( "Update joy19_users set tarz = “0″ where username = “".$user_info["username"]."”" );
header( "………………………………….: home.php?mode=tarz&action=removed" );
exit( );
}
}
if ( $act == "kampus" )
{
if ( !@mysql_result( @mysql_query( @"Select name from kampus where id = “".$id."”" ), 0 ) )
{
exit( header( "………………………………….: home.php?mode=kampus&action=not_found" ) );
}
if ( $type == "add" )
{
mysql_query( "Update joy19_users set kampus = “".$id."” where username = “".$user_info["username"]."”" );
header( "………………………………….: home.php?mode=kampus&action=added" );
exit( );
}
if ( $type == "remove" )
{
mysql_query( "Update joy19_users set kampus = “0″ where username = “".$user_info["username"]."”" );
header( "………………………………….: home.php?mode=kampus&action=removed" );
exit( );
}
}
if ( $act == "fan" )
{
if ( !@mysql_result( @mysql_query( @"Select name from fan_club where id = “".$id."”" ), 0 ) )
{
exit( header( "………………………………….: home.php?mode=fan&action=not_found" ) );
}
if ( $type == "add" )
{
mysql_query( "Update joy19_users set fan = “".$id."” where username = “".$user_info["username"]."”" );
header( "………………………………….: home.php?mode=fan&action=added" );
exit( );
}
if ( $type == "remove" )
{
mysql_query( "Update joy19_users set fan = “0″ where username = “".$user_info["username"]."”" );
header( "………………………………….: home.php?mode=fan&action=removed" );
exit( );
}
}
if ( $act == "ignore" )
{
if ( $type == "remove" )
{
mysql_query( "Delete from joy19_ignores where ignore_id = “".$id."” and ignore_username = “".$user_info["username"]."”" );
header( "………………………………….: home.php?mode=ignore&action=ignore_deleted" );
exit( );
}
}
if ( $act == "mood" )
{
mysql_query( "Update joy19_users set mood = “".$_POST["mood"]."” where username = “".$user_info["username"]."”" );
header( "………………………………….: home.php" );
exit( );
}
if ( $act == "activity" )
{
if ( $type == "add" )
{
$check = mysql_query( "Select * from activities_users where activity_id = “".$_POST["activity_id"]."” and user_id = “".session_vars( "id" )."”" );
if ( 0 < mysql_num_rows( $check ) )
{
header( "………………………………….: ".$_SERVER["HTTP_REFERER"]."&error=1" );
exit( );
}
mysql_query( "Insert into activities_users values(”".$_POST["activity_id"]."”,”".session_vars( "id" ).( "”,”".$_POST["ppl"]."”)" ) );
header( "………………………………….: ".$_SERVER["HTTP_REFERER"]."&success=1" );
exit( );
}
if ( $type == "delete" )
{
$check = mysql_query( "Delete from activities_users where activity_id = “".$_POST["activity_id"]."” and user_id = “".session_vars( "id" )."”" );
header( "………………………………….: ".$_SERVER["HTTP_REFERER"]."&success=2" );
exit( );
}
}
header( "………………………………….: ".$_SERVER["HTTP_REFERER"]."" );
exit( );
?>