blacklist.php

<?php
/*---------------------------------------------------+
| PHP-Fusion 6 Content Management System
+----------------------------------------------------+
| Copyright © 2002 - 2006 Nick Jones
| http://www.php-fusion.co.uk/
+----------------------------------------------------+
| Released under the terms & conditions of v2 of the
| GNU General Public License. For details refer to
| the included gpl.txt file or visit http://gnu.org
+----------------------------------------------------*/
require_once "../maincore.php";
require_once SIDES."subheader.php";
require_once ADMIN."navigation.php";
include LOCALE.LOCALESET."admin/blacklist.php";

if (!checkrights("B") || !defined("iAUTH") || $aid != iAUTH) fallback("../index.php");
if (isset($blacklist_id) && !isNum($blacklist_id)) fallback("index.php");
if (!isset($step)) $step = "";

if (isset($status)) {
	if ($status == "del") {
		$title = $locale['400'];
		$message = "<b>".$locale['401']."</b>";
	}
	opentable($title);
	echo "<div align='center'>".$message."</div>\n";
	closetable();
	tablebreak();
}

if ($step == "delete") {
	$result = dbquery("DELETE FROM ".$db_prefix."blacklist WHERE blacklist_id='$blacklist_id'");
	redirect(FUSION_SELF.$aidlink."&status=del");
} else {
	if (isset($_POST['blacklist_user'])) {
		$blacklist_ip = stripinput($_POST['blacklist_ip']);
		$blacklist_email = stripinput($_POST['blacklist_email']);
		$blacklist_reason = stripinput($_POST['blacklist_reason']);
		if($_POST['blacklist_time'] == "0" || $_POST['blacklist_time'] == "") {
		$blacklist_time = "0";
		} else {
		$blacklist_time = time() + $_POST['blacklist_time'] * 60;
		}
		if ($blacklist_ip || $blacklist_email) {
			if ($step == "edit") {
				$result = dbquery("UPDATE ".$db_prefix."blacklist SET blacklist_ip='$blacklist_ip', blacklist_email='$blacklist_email', blacklist_time='$blacklist_time', blacklist_reason='$blacklist_reason' WHERE blacklist_id='$blacklist_id'");
			} else {
					$result = dbquery("INSERT INTO ".$db_prefix."blacklist (blacklist_ip, blacklist_email, blacklist_time, blacklist_reason) VALUES ('$blacklist_ip', '$blacklist_email', '$blacklist_time', '$blacklist_reason')");
			}
		}
		redirect(FUSION_SELF.$aidlink);
	}
	if ($step == "edit") {
		$data = dbarray(dbquery("SELECT * FROM ".$db_prefix."blacklist WHERE blacklist_id='$blacklist_id'"));
		$blacklist_ip = $data['blacklist_ip'];
		$blacklist_email = $data['blacklist_email'];
		$blacklist_reason = $data['blacklist_reason'];
		if( $data['blacklist_time'] != "0") {
		$blacklist_time = $data['blacklist_time'] - time();
		} else {
		$blacklist_time = "0";
		}
		$form_title = $locale['421'];
		$form_action = FUSION_SELF.$aidlink."&amp;step=edit&amp;blacklist_id=".$data['blacklist_id'];
	} else {
		$blacklist_ip = "";
		$blacklist_email = "";
		$blacklist_reason = "";
		$blacklist_time = "";
		$form_title = $locale['420'];
		$form_action = FUSION_SELF.$aidlink;
	}
	opentable($form_title);
	echo "<table align='center' cellpadding='0' cellspacing='0' width='450'>
<tr>
<td colspan='2' class='tbl'>".$locale['440']."
<hr></td>
</tr>
</table>
<form name='blacklist_form' method='post' action='$form_action'>
<table align='center' width='450' cellpadding='0' cellspacing='0'>
<tr>
<td class='tbl'>".$locale['441']."</td>
<td class='tbl'><input type='text' name='blacklist_ip' value='$blacklist_ip' class='textbox' style='width:150px'></td>
</tr>
<tr>
<td class='tbl'>".$locale['442']."</td>
<td class='tbl'><input type='text' name='blacklist_email' value='$blacklist_email' class='textbox' style='width:250px'></td>
</tr>
<tr>
<td valign='top' class='tbl'>".$locale['443']."</td>
<td class='tbl'><textarea name='blacklist_reason' cols='46' rows='3' class='textbox'>$blacklist_reason</textarea></td>
</tr>
<tr>
<td valign='top' class='tbl'>".$locale['445']."</td>
<td class='tbl'><input name='blacklist_time' type='text' class='textbox' style='width:150px' value='$blacklist_time'></td>
</tr>
<tr>
<td align='center' colspan='2' class='tbl'><br>
<input type='submit' name='blacklist_user' value='Uþdrausti' class='button'></td>
</tr>
</table>
</form>";
	closetable();
	tablebreak();
	opentable($locale['460']);
	$result = dbquery("SELECT * FROM ".$db_prefix."blacklist");
	if (dbrows($result) != 0) {
		$i = 0;
		echo "<table align='center' cellpadding='0' cellspacing='1' width='400' class='tbl-border'>
<tr>
<td class='tbl2'>".$locale['461']."</td>
<td align='center' width='1%' class='tbl2' style='white-space:nowrap'>".$locale['462']."</td>
</tr>\n";
		while ($data = dbarray($result)) {
			$row_color = ($i % 2 == 0 ? "tbl1" : "tbl2");
			echo "<tr>
<td class='$row_color'>".($data['blacklist_ip'] ? $data['blacklist_ip'] : $data['blacklist_email'])."<br>
<span class='small2'>".$data['blacklist_reason']."</span></td>
<td align='center' width='1%' class='$row_color' style='white-space:nowrap'><a href='".FUSION_SELF.$aidlink."&amp;step=edit&amp;blacklist_id=".$data['blacklist_id']."'>".$locale['463']."</a> -
<a href='".FUSION_SELF.$aidlink."&amp;step=delete&amp;blacklist_id=".$data['blacklist_id']."'>".$locale['464']."</a></td>
</tr>\n";
		}
		echo "</table>\n";
	} else {
		echo "<center><br>\n".$locale['465']."<br><br>\n</center>\n";
	}
	closetable();
}

echo "</td>\n";
require_once SIDES."footer.php";
?>

buy_money.php

<?php
include "config.php";

$connect = mysql_connect($db_host, $db_user, $db_pass) or die  ('Error connecting to mysql');
$db_select = @mysql_select_db($db_name);
		$ex = explode(" ", $_GET[sms], 2);
		$ex[1] = strtolower($ex[1]);
		$your_pass = '97587548754874'; // Jûsø mokejimai.lt slaptaþodis

if ( TestTransaction( $_GET['transaction'], $your_pass, $_GET['id'] ) )	{
			$kodas = mysql_fetch_array(mysql_query("SELECT * FROM ".$db_prefix."users_money WHERE user_id = '".$ex[1]."'"));
			if ($kodas != '') 
			{
			if ($_GET[amount] > 2) {
			$kiek_duoda = "50"; // Kiek pinigø duos uþ SMS 
			$result = @mysql_query("UPDATE ".$db_prefix."users_money SET money=money+".$kiek_duoda." WHERE user_id='".$ex[1]."'"); 
					 echo "Jums sekmingai buvo prideta, ".$kiek_duoda." pinigu!";
					 }
					 else {
					 echo "Apmoketi nepavyko ;(";
					 }
			} else {
						echo "Jus ivedete bloga ID."; 
			}
	}
		else
			{
				echo "Ivyko klaida";
			}
function TestTransaction( $transaction, $userPassword, $ordeID, $test = 0, $status = 1 )
{
	return ( $transaction == md5("{$userPassword}|{$_SERVER['REMOTE_ADDR']}|{$ordeID}|{$test}|{$status}") );
}
	
	
?>