<?php
############################################
### Top-XL V.1.24 Free  -  Seach User search.php 
############################################
/// 1. You are NOT entiteld to rent, lease, transfer, reproduce or distribute this Software.
/// 2. You are entiteld to adapt, and modify the Software to your need.
/// 3. You can use this Script on all of YOUR Domains.
/// 4. Any modification or removal to the links in the footer and member area shall terminate this license immediately .
/// 5. The Script has been tested on different Servers and found free of any notable errors by the author. The Author shall not in any case be liable for any special, incidental indirect or other similar damages arising from the use of this Script.
/// 6. Author: Simon Zehender - Contact: http://www.derwebgestalter.de or http://www.paddelberg.de
////////////////////////////////////////////
////////////////////////////////////////////
if ($scriptpath!=$_SERVER['DOCUMENT_ROOT'])
	{echo "Are you looking for something?";exit;}
$fromsite = "search";
if ($do == "search")
	{
	if ($action == "lockchange")
		{
		$searched = safety($_GET["searched"]);
		$ids = safety($_POST["ids"]);
		$ids = substr($ids, 0, -1);
		$ids = explode(",",$ids);
		$max = (count($ids));
		for ($i= 0; $i<=$max; $i++) 
			{
			$status = $_POST["$ids[$i]"];
			if ($status == "no") /// freischalten
				{
				$checknew = mysql_query("SELECT newentry FROM $topxl_user_table WHERE id=$ids[$i]") or die (mysql_error());
				$checknewrow = @mysql_fetch_array($checknew);
				$validationdate = time();
				if ($checknewrow["newentry"]=="yes")
					{mysql_query("Update $topxl_user_table SET active='yes',newentry='no',validationdate='$validationdate' WHERE id=$ids[$i]") or die (mysql_error());}
				else
					{mysql_query("Update $topxl_user_table SET active='yes' WHERE id=$ids[$i]") or die (mysql_error());}
				}
			elseif ($status == "yes")
				{mysql_query("Update $topxl_user_table SET active='no' WHERE id=$ids[$i]") or die (mysql_error());}
			}
		header ("Location: index.php?do=search&$searched");
		exit;
		}
		
	if ($_POST["id"])
		{$id = safety($_POST["id"]);}
	elseif ($_GET["id"])
		{$id = safety($_GET["id"]);}
	if ($_POST["title"])
		{$title = safety($_POST["title"]);}
	elseif ($_GET["title"])
		{$title=safety($_GET["title"]);}
	if ($_POST["url"])
		{$url = safety($_POST["url"]);}
	elseif ($_GET["url"])
		{$url = safety($_GET["url"]);}
	if ($_POST["email"])
		{$email = safety($_POST["email"]);}
	elseif ($_GET["email"])
		{$email = safety($_GET["email"]);}
	if ($_POST["name"])
		{$name = safety($_POST["name"]);}
	elseif ($_GET["name"])
		{$name = safety($_GET["name"]);}
	if ($id != "")
		{$sqlholder = "WHERE id LIKE '%$id%'";$searched = "id=$id";}
	if ($title != "")
		{$sqlholder = "WHERE title LIKE '%$title%'";$searched .= "title=$title";}
	if ($url != "")
		{$sqlholder = "WHERE url LIKE '%$url%'";$searched .= "url=$url";}
	if ($email != "")
		{$sqlholder = "WHERE email LIKE '%$email%'";$searched .= "email=$email";}
	if ($name != "")
		{$sqlholder = "WHERE name LIKE '%$name%'";$searched .= "name=$name";}
	$rowmarker = 0;
	$main_content = "
	<table width=\"874\" border=\"0\" cellpadding=\"0\" cellspacing=\"1\" bgcolor=\"#CCCCCC\">
		<tr>
			<td height=\"35\" colspan=\"8\" bgcolor=\"#FFFFFF\" class=\"top\"><strong class=\"heading\">".$text_searchaccount."</strong></td>
		</tr>
		<form name=\"form1\" method=\"post\" action=\"index.php?do=search&action=lockchange&searched=".$searched."\">
		<tr>
			<td width=\"56\"  bgcolor=\"#E4E4E4\" align=\"right\">".$text_id."</td>
			<td width=\"50\"  bgcolor=\"#E4E4E4\" align=\"center\">".$text_url."</td>
			<td width=\"59\"  bgcolor=\"#E4E4E4\" align=\"right\">".$text_in."</td>
			<td width=\"59\"  bgcolor=\"#E4E4E4\" align=\"right\">".$text_out."</td>
			<td width=\"50\"  bgcolor=\"#E4E4E4\" align=\"right\">".$text_active."</td>
			<td width=\"60\"  bgcolor=\"#E4E4E4\" align=\"right\">".$text_email."</td>
			<td width=\"40\"  bgcolor=\"#E4E4E4\" align=\"right\"><a href=\"index.php?do=validate\">".$text_status."</a></td>
			<td width=\"40\"  bgcolor=\"#E4E4E4\" align=\"right\">".$text_edit."</td>
		</tr>";		
	$searchget = mysql_query("SELECT * FROM $topxl_user_table $sqlholder") or die (mysql_error());
	while ($searchgetrows = @mysql_fetch_array($searchget))
		{
		$rowmarker++;
		if ($rowmarker == 2)
			{$tdbgcolor = "bgcolor=\"#F7F7F7\"";$rowmarker = 0;}
		else{$tdbgcolor = "bgcolor=\"#FFFFFF\"";}
		$now = time();
		$inactivetime1 = $now-($inactivetime);
		if($searchgetrows[lastactive]>$inactivetime1)
			{$aktivecheck=$text_yes;}
		else {$aktivecheck=$text_no;}
		$ids .= $searchgetrows[id].",";
		$main_content .= "
		<tr>
			<td ".$tdbgcolor." align=\"right\">".$searchgetrows[id]."</td>
			<td ".$tdbgcolor.">
			".$searchgetrows[name]."<br>
			".$searchgetrows[title]."<br>
			<a href=\"".$searchgetrows[url]."\" target=\"_blank\" class=\"titlelink\">".$searchgetrows[url]."</a><br>";
			if ($showbanner == "yes")
				{$main_content .= "<a href=\"".$searchgetrows[url]."\" target=\"_blank\"><img width=\"468\" height=\"60\" src=\"".$searchgetrows[bannerurl]."\" alt=\"".$searchgetrows[id]." ".$searchgetrows[title]."\" border=\"0\" class=\"banner\" vspace=\"4\" hspace=\"4\"></a>";}
			$main_content .= "
				<div align=\"justify\" class=\"description\">".$searchgetrows[description]."</div>
			</td>
			<td ".$tdbgcolor." align=\"right\">".$searchgetrows[hitin]."<br>".$searchgetrows[hitintotal]."</td>
			<td ".$tdbgcolor." align=\"right\">".$searchgetrows[hitout]."<br>".$searchgetrows[hitouttotal]."</td>
			<td ".$tdbgcolor." align=\"right\">".$aktivecheck."</td>
			<td ".$tdbgcolor." align=\"right\"><a href=\"mailto:".$searchgetrows[email]."\" target=\"_blank\">".$text_email."</a></td>
			<td ".$tdbgcolor." align=\"right\">
			<select name=\"".$searchgetrows[id]."\">
			<option value=\"no\"";
			if ($searchgetrows[active] == "yes")
				{$main_content .= "selected";}
			$main_content .= ">".$text_no."</option>
			<option value=\"yes\"";
			if ($searchgetrows[active] == "no")
				{$main_content .= "selected";}
			$main_content .= ">".$text_yes."</option>
			</select>
			</td>
			<td ".$tdbgcolor." align=\"center\"><a href=\"index.php?do=editaccount&id=".$searchgetrows[id]."&fromsite=".$fromsite."\">".$text_edit."</a><br><a href=\"".$topsiteurl."/members/index.php?do=main&id=".$searchgetrows[id]."\" target=\"_blank\">".$text_show."</a><br><a href=\"index.php?do=delete&id=".$searchgetrows[id]."&fromsite=".$fromsite."\">".$text_del."</a></td>
		</tr>";
		}
	$main_content .= "			
			<tr>
				<td height=\"42\" colspan=\"8\" bgcolor=\"#FFFFFF\" align=\"right\"><input type=\"hidden\" name=\"ids\" value=\"".$ids."\"><input name=\"Submit\" type=\"submit\" class=\"submitbuton\" value=\"".$text_submit."\"></td>
			</tr>
		</form>
	</table>";
	}
else
	{
	$main_content = "
	<table width=\"874\" border=\"0\" cellpadding=\"0\" cellspacing=\"1\" bgcolor=\"#CCCCCC\">
		<tr>
		<td height=\"35\" colspan=\"3\" bgcolor=\"#FFFFFF\" class=\"top\"><strong class=\"heading\">".$text_searchaccount."</strong></td>
	  </tr>
		<form name=\"form1\" method=\"post\" action=\"index.php?do=search\">
		<tr>
			<td width=\"100\" bgcolor=\"#FFFFFF\">".$text_id."</td>
			<td width=\"220\" bgcolor=\"#FFFFFF\"><input type=\"text\" name=\"id\" value=\"".$id."\"></td>
			<td width=\"550\" bgcolor=\"#FFFFFF\"></td>
		</tr>
		<tr>
			<td bgcolor=\"#FFFFFF\">".$text_title."</td>
			<td bgcolor=\"#FFFFFF\"><input type=\"text\" name=\"title\" value=\"".$title."\"></td>
			<td bgcolor=\"#FFFFFF\"></td>
		</tr>
		<tr>
			<td bgcolor=\"#FFFFFF\">".$text_url."</td>
			<td bgcolor=\"#FFFFFF\"><input type=\"text\" name=\"url\" value=\"".$url."\"></td>
			<td bgcolor=\"#FFFFFF\"></td>
		</tr>		
		<tr>
			<td bgcolor=\"#FFFFFF\">".$text_name."</td>
			<td bgcolor=\"#FFFFFF\"><input type=\"text\" name=\"name\" value=\"".$name."\"></td>
			<td bgcolor=\"#FFFFFF\"></td>
		</tr>
		<tr>
			<td bgcolor=\"#FFFFFF\">".$text_email."</td>
			<td bgcolor=\"#FFFFFF\"><input type=\"text\" name=\"email\" value=\"".$email."\"></td>
			<td bgcolor=\"#FFFFFF\"></td>
		</tr>
		<tr>
			<td bgcolor=\"#FFFFFF\"></td>
			<td bgcolor=\"#FFFFFF\"><input name=\"Submit\" type=\"submit\" class=\"submitbuton\" value=\"".$text_submit."\"> <input name=\"Reset\" type=\"reset\" class=\"submitbuton\" value=\"".$text_reset."\"></td>
			<td bgcolor=\"#FFFFFF\"></td>
		</tr>
	</table>";
	}
/// Template 
if(!file_exists($file))
	{echo "The template ".$file." does not exist."; exit;}
$fp1 = fopen($file,"r");  
$zeile = fread ($fp1, filesize ($file));
include("template.php");
echo $zeile;
exit;
?>