startheaders();
include "mysql.php";
global $c;
$is =
mysql_query(
"SELECT u.*,us.* FROM users u LEFT JOIN userstats us ON u.userid=us.userid WHERE u.userid=$userid",
$c) or die(mysql_error());
$ir = mysql_fetch_array($is);
check_level();
$fm = money_formatter($ir['money']);
$cm = money_formatter($ir['crystals'], '');
$lv = date('F j, Y, g:i a', $ir['laston']);
$h->userdata($ir, $lv, $fm, $cm);
$h->menuarea();
if ($ir['donatordays'] == 0)
{
die("This feature is for donators only.");
}
print "Friends List
";
switch ($_GET['action'])
{
case "add":
add_friend();
break;
case "remove":
remove_friend();
break;
case "ccomment":
change_comment();
break;
default:
friends_list();
break;
}
function friends_list()
{
global $ir, $c, $userid;
print
"> Add a Friend
These are the people on your friends list. ";
$q_y =
mysql_query("SELECT * FROM friendslist WHERE fl_ADDED=$userid", $c);
print
mysql_num_rows($q_y)
. " people have added you to their list.
Most liked: [";
$q2r =
mysql_query(
"SELECT u.username,count( * ) as cnt,fl.fl_ADDED FROM friendslist fl LEFT JOIN users u on fl.fl_ADDED=u.userid GROUP BY fl.fl_ADDED ORDER BY cnt DESC LIMIT 5",
$c) or die(mysql_error());
$r = 0;
while ($r2r = mysql_fetch_array($q2r))
{
$r++;
if ($r > 1)
{
print " | ";
}
print
"{$r2r['username']}";
}
print
"]
| ID | Name | Mail | Send Cash | Remove | Comment | Change Comment | Online? |
";
$q =
mysql_query(
"SELECT fl.*,u.* FROM friendslist fl LEFT JOIN users u ON fl.fl_ADDED=u.userid WHERE fl.fl_ADDER=$userid ORDER BY u.username ASC",
$c);
while ($r = mysql_fetch_array($q))
{
if ($r['laston'] >= time() - 15 * 60)
{
$on = "Online";
}
else
{
$on = "Offline";
}
$d = "";
if ($r['donatordays'])
{
$r['username'] = "{$r['username']}";
$d =
"
";
}
if (!$r['fl_COMMENT'])
{
$r['fl_COMMENT'] = "N/A";
}
print
" | {$r['userid']} | {$r['username']} $d | Mail | Send Cash | Remove | {$r['fl_COMMENT']} | Change | $on |
";
}
}
function add_friend()
{
global $ir, $c, $userid;
$_POST['ID'] = abs((int) $_POST['ID']);
$_POST['comment'] =
mysql_real_escape_string(
nl2br(
htmlentities(stripslashes($_POST['comment']),
ENT_QUOTES, 'ISO-8859-1')), $c);
if ($_POST['ID'])
{
$qc =
mysql_query(
"SELECT * FROM friendslist WHERE fl_ADDER=$userid AND fl_ADDED={$_POST['ID']}",
$c);
$q =
mysql_query(
"SELECT * FROM users WHERE userid={$_POST['ID']}", $c);
if (mysql_num_rows($qc))
{
print "You cannot add the same person twice.";
}
else if ($userid == $_POST['ID'])
{
print
"You cannot be so lonely that you have to try and add yourself.";
}
else if (mysql_num_rows($q) == 0)
{
print "Oh no, you're trying to add a ghost.";
}
else
{
mysql_query(
"INSERT INTO friendslist VALUES(NULL, $userid, {$_POST['ID']}, '{$_POST['comment']}')",
$c) or die(mysql_error());
$r = mysql_fetch_array($q);
print
"{$r['username']} was added to your friends list.
> Back";
}
}
else
{
$_GET['ID'] =
(isset($_GET['ID']) && is_numeric($_GET['ID']))
? abs(intval($_GET['ID'])) : '';
print
"Adding a friend!";
}
}
function remove_friend()
{
global $ir, $c, $userid;
mysql_query(
"DELETE FROM friendslist WHERE fl_ID={$_GET['f']} AND fl_ADDER=$userid",
$c);
print
"Friends list entry removed!
> Back";
}
function change_comment()
{
global $ir, $c, $userid;
$_POST['f'] = abs((int) $_POST['f']);
$_POST['comment'] =
mysql_real_escape_string(
nl2br(
htmlentities(stripslashes($_POST['comment']),
ENT_QUOTES, 'ISO-8859-1')), $c);
if ($_POST['comment'])
{
mysql_query(
"UPDATE friendslist SET fl_COMMENT='{$_POST['comment']}' WHERE fl_ID={$_POST['f']} AND fl_ADDER=$userid",
$c);
print
"Comment for friend changed!
> Back";
}
else
{
$_GET['f'] = abs((int) $_GET['f']);
$q =
mysql_query(
"SELECT * FROM friendslist WHERE fl_ID={$_GET['f']} AND fl_ADDER=$userid",
$c);
if (mysql_num_rows($q))
{
$r = mysql_fetch_array($q);
$comment = str_replace('
', "\n", $r['fl_COMMENT']);
print
"Changing a comment.";
}
else
{
print "Stop trying to edit comments that aren't yours.";
}
}
}
$h->endpage();