[uploa]

זה המון אבל איך שתרצה..

<?php
// Function to load all content from games to categories to the login form
function load_content(){
echo '<div align=center>';
include ('config.php');
if(!isset($_GET['page'])){
$page = 1;
} else {
$page = $_GET['page'];
}
// Get the task and required include
if ($_GET[task] == 'login') {
include ('login.php');
}
else if($_GET[task] == 'register') {
include ('register.php');
}
else if($_GET[task] == 'view') {
include ('view.php');
}
else if($_GET[task] == 'add_comment') {
include ('add_comment.php');
}
else if($_GET[task] == 'edit_profile') {
include ('edit_profile.php');
}
else if($_GET[task] == 'profile') {
include ('profile.php');
}
else if($_GET[task] == 'view_page') {
include ('view_page.php');
}
else if($_GET[task] == 'member_list') {
include ('member_list.php');
}
else if($_GET[task] == 'lost_pass') {
include ('pwchangemail.php');
}
else if($_GET[task] == 'links') {
include ('links.php');
}
else if($_GET[task] == 'sendtofriend') {
include ('sendtofriend.php');
}
else {
if ($_GET[cat_id]) {
$safe_page = addslashes(trim($_GET['cat_id']));
$abcd3 = str_replace (" ", "NOSPACES", $safe_page);
$total_results = mysql_result(mysql_query("SELECT COUNT(*) as Num FROM ava_games WHERE catergory_id='".$abcd3."' AND published=1"),0);}
else {
$total_results = mysql_result(mysql_query("SELECT COUNT(*) as Num FROM ava_games WHERE published=1"),0);}
if ($total_results <= 0) {
echo '<br>There are no games in this section!<br><br>';}
else {

$from = (($page * $max_results) - $max_results);

if ($_GET[cat_id]) {
$sql = mysql_query("SELECT * FROM ava_games WHERE catergory_id=".$abcd3." AND published=1 ORDER BY id DESC LIMIT $from, $max_results");
}
elseif ($_GET[task] == search){
$var = $_POST['q'] ;
$trimmed = trim($var);

function is_alphanum($str) {
if(ctype_alnum($str)) {
return true;
} else {
return false;
}
}
if(is_alphanum($trimmed)) {
$total_results_search = mysql_result(mysql_query("SELECT COUNT(*) as Num FROM ava_games WHERE description like \"%$trimmed%\" OR name like \"%$trimmed%\" AND published=1"),0);
if ($trimmed == "")
{echo '<br><strong>You did not say what you wanted to search for</strong><br><br>';}
elseif ($total_results_search >= 50)
{echo '<br><strong>Too many results, please extend your search</strong><br><br>';}
elseif ($total_results_search == 0)
{echo '<br><strong>Sorry, no results</strong><br><br>';}
else {
$sql = mysql_query("select * from ava_games WHERE description like \"%$trimmed%\" OR name like \"%$trimmed%\" AND published=1
order by id DESC");}

} else {
echo "<strong><br>Please use only letters and numbers in your search<br><br></strong>";
}}


echo '<table border="0" width="98%">
<tr>';
// gamenumber is used for table columns
$gamenumber="1";
while($row = mysql_fetch_array($sql)){
if (strlen($row['description']) > 60) {
$description = substr($row['description'], 0, 60)."...";}
else {
$description = $row['description'];
}
if (strlen($row['name']) > 23) {
$name = substr($row['name'], 0, 23)."...";}
else {
$name = $row['name'];
}
// this is what is output when viewing a cat
$abcd= $row['name'];
$abcd = str_replace (" ", "-", $abcd);

if ($seo_on == 0) {$url = ''.$site_url.'/index.php?task=view&id='.$row['id'].'';}
else {$url = ''.$site_url.'/view/'.$row['id'].'/'.$abcd.'.htm';}
echo ' <td width="33%" valign="top">
<table width="95%" border="0" cellspacing="0" cellpadding="0" class="back">
<tr>
<td class="td3" width="1%"><div align="center"><a href="'.$url.'">';
if ($row['import'] == 1) {
echo '<img src="'.$site_url.'/games/images/'.$row['url'].'.png" width="'.$image_width.'" height="'.$image_height.'" alt="" />';}
else {
echo '<img src="'.$row['image'].'" width="'.$image_width.'" height="'.$image_height.'" alt="" />';}
echo '</a></div></td>
<td valign="top"><table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="td1">&nbsp;<a href="'.$url.'">'.$name.'</a></td>
</tr>
<tr>
<td width="70%" valign="top" class="td5">'.$description.'</td>';
$link = $row['id'];
$total_results = mysql_result(mysql_query("SELECT COUNT(*) as Num FROM ava_comments WHERE link_id='$link'"),0);
echo ' <tr>
<td class="td2">Times Played: '.$row['hits'].' |<a href="'.$url.'">Comments ('.$total_results.')</a>';

if(isset($_COOKIE["ava_username"])){
$sqlaa = mysql_query("SELECT * FROM ava_users WHERE id=".$_COOKIE['ava_userid']."");
$rowaa = mysql_fetch_array($sqlaa);
if ($rowaa['admin'] == 1) {
echo " |<a href=".$site_url."/admin/?action=edit_game&id=".$row['id'].">Edit</a>";
}}
echo '</td>
</tr>
</table></td>
</tr>
</tr>
</table>
</td>';
if ($gamenumber == '2') {
echo "</tr>";
$gamenumber = "0";
}
$gamenumber++;}
echo '</tr></table>';
$safe_page = addslashes(trim($_GET['cat_id']));
$abcd3 = str_replace (" ", "NOSPACES", $safe_page);
$total_results = mysql_result(mysql_query("SELECT COUNT(*) as Num FROM ava_games WHERE catergory_id='".$abcd3."' AND published=1"),0);

$total_pages = ceil($total_results / $max_results);
if ($_GET[cat_id]) {
echo "<center><br>Select a Page<br /><div class=style1>";}

if($page > 1){
$prev = ($page - 1);
if ($seo_on == 0) {echo "<a href=\"".$_SERVER['PHP_SELF']."?page=$prev&cat_id=".$abcd3."\">&lt;&ltrevious </a> ";}
else
{echo '<a href="'.$site_url.'/cat/'.$abcd3.'/'.$abcd.'/p'.$prev.'.htm">&lt;&ltrevious</a> ';}
}

for($i = 1; $i <= $total_pages; $i++){
if(($page) == $i){
echo "<b><a href=#>$i</a></b> ";
} else {
if ($seo_on == 0) {
echo "<a href=\"".$_SERVER['PHP_SELF']."?page=$i&cat_id=".$abcd3."\">$i</a> ";}
else {echo '<a href="'.$site_url.'/cat/'.$abcd3.'/'.$abcd.'/p'.$i.'.htm">'.$i.'</a> ';}
}
}

if($page < $total_pages){
$next = ($page + 1);
if ($seo_on == 0) {
echo "<a href=\"".$_SERVER['PHP_SELF']."?page=$next&cat_id=".$abcd3."\">Next>></a>";}
else {echo '<a href="'.$site_url.'/cat/'.$abcd3.'/'.$abcd.'/p'.$next.'.htm">Next>></a> ';}
}else {
if(!$_GET[task]) {
if(!$_GET[cat_id]) {
// HOMEPAGE
include ('html/message.php');
$sql = mysql_query("SELECT * FROM ava_cats ORDER BY name");
while($row = mysql_fetch_array($sql)) {
echo '<div class="style3" id=itemheader>'.$row['name'].'</div>';
$sql2 = mysql_query("SELECT * FROM ava_games WHERE catergory_id=".$row['id']." AND published=1 ORDER BY rand() LIMIT 4");
echo '<table border="0" width="98%">
<tr>';
// gamenumber is used for table columns
$gamenumber="1";
while($row2 = mysql_fetch_array($sql2)) {
if (strlen($row2['description']) > 60) {
$description = substr($row2['description'], 0, 60)."...";}
else {
$description = $row2['description'];
}
if (strlen($row2['name']) > 23) {
$name = substr($row2['name'], 0, 23)."...";}
else {
$name = $row2['name'];
}
// this is what is output when viewing a cat
$abcd= $row2['name'];
$abcd = str_replace (" ", "-", $abcd);

if ($seo_on == 0) {$url = ''.$site_url.'/index.php?task=view&id='.$row2['id'].'';}
else {$url = ''.$site_url.'/view/'.$row2['id'].'/'.$abcd.'.htm';}
echo ' <td width="33%" valign="top">
<table width="95%" border="0" cellspacing="0" cellpadding="0" class="back">
<tr>
<td class="td3" width="1%"><div align="center"><a href="'.$url.'">';
if ($row2['import'] == 1) {
echo '<img src="'.$site_url.'/games/images/'.$row2['url'].'.png" width="'.$image_width.'" height="'.$image_height.'" alt="" />';}else {echo '<img src="'.$row2['image'].'" width="'.$image_width.'" height="'.$image_height.'" alt="" />';}
echo '</a></div></td>
<td valign="top"><table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td class="td1">&nbsp;<a href="'.$url.'">'.$name.'</a></td>
</tr>
<tr>
<td width="70%" valign="top" class="td5">'.$description.'</td>';
$link = $row2['id'];
$total_results = mysql_result(mysql_query("SELECT COUNT(*) as Num FROM ava_comments WHERE link_id='$link'"),0);
echo ' <tr>
<td class="td2">Times Played: '.$row2['hits'].' |<a href="'.$url.'">Comments ('.$total_results.')</a>';

if(isset($_COOKIE["ava_username"])){
$sqlaa = mysql_query("SELECT * FROM ava_users WHERE id=".$_COOKIE['ava_userid']."");
$rowaa = mysql_fetch_array($sqlaa);
if ($rowaa['admin'] == 1) {
echo " |<a href=".$site_url."/admin/?action=edit_game&id=".$row2['id'].">Edit</a>";
}}
echo '</td>
</tr>
</table></td>
</tr>
</tr>
</table>
</td>';
if ($gamenumber == '2') {
echo "</tr>";
$gamenumber = "0";
}
$gamenumber++;
echo '</tr></table>';
$abcd= $row['name'];
$abcd = str_replace (" ", "-", $abcd);
if ($seo_on == 1)
{
$cat_url = ''.$site_url.'/cat/'.$row['id'].'/'.$abcd.'/p1.htm';
}
else
{
$cat_url = ''.$site_url.'/index.php?cat_id='.$row['id'].'';
}

echo '<a href="'.$cat_url.'"><strong>Play more '.$row['name'].' games</strong></a>';
echo "</center></div>";


// Function for loading the menu
function load_menu()
{include ('config.php');
$sql = mysql_query("SELECT * FROM ava_cats ORDER BY name");

while($row = mysql_fetch_array($sql))
{
if($seo_on == 0)
{
echo '&nbsp;<a href="'.$site_url.'/index.php?cat_id='.$row['id'].'">'.$row['name'].'</a> ';
}
else {
$abcd= $row['name'];
$abcd = str_replace (" ", "-", $abcd);
echo '&nbsp;<a href="'.$site_url.'/cat/'.$row['id'].'/'.$abcd.'/p1.htm">'.$row['name'].'</a> ';
}
if ($cat_numbers == 1) {
$cat_numb = mysql_result(mysql_query("SELECT COUNT(*) as Num FROM ava_games WHERE catergory_id=".$row['id'].""),0);
echo '<em>('.$cat_numb.')</em>';}
echo '<br>';
}}

function load_menu_pages() {
include ('config.php');
$total_results = mysql_result(mysql_query("SELECT COUNT(*) as Num FROM ava_pages"),0);
if ($total_results >= 1) {
$sql = mysql_query("SELECT * FROM ava_pages ORDER BY id");
while($row = mysql_fetch_array($sql))
if ($seo_on == 0) {
echo '&nbsp;<a href='.$site_url.'/index.php?task=view_page&id='.$row['id'].'>'.$row['name'].'</a><br>';}
else { $abcd= $row['name'];
$abcd = str_replace (" ", "-", $abcd);
echo '&nbsp;<a href='.$site_url.'/page/'.$row['id'].'/'.$abcd.'.htm>'.$row['name'].'</a><br>';}
if ($seo_on == 0) {
echo '&nbsp;<a href="'.$site_url.'/index.php?task=member_list">Member List</a><br>&nbsp;<a href="'.$site_url.'/index.php?task=links">Links</a>';}
else {echo '&nbsp;<a href="'.$site_url.'/task/members/">Member List</a><br>&nbsp;<a href="'.$site_url.'/task/links/">Links</a>';}}}

// function for getting page titel
function titel() {
include ('config.php');

if($_GET[task] == 'login') {
echo 'Login';}
else if($_GET[task] == 'register') {
echo 'Register';}
else if($_GET[task] == 'search') {
echo 'Search results for '.$_POST[q].'';}
else if($_GET[task] == 'profile') {
echo 'Viewing profile';}
else if($_GET[task] == 'edit_profile') {
echo 'Editing profile';}
else if($_GET[task] == 'lost_pass') {
echo 'Forgotten password';}
else if($_GET[task] == 'add_game') {
echo 'Add a link';}
else if($_GET[task] == 'sendtofriend') {
echo 'Send a game to a friend';}
else if($_GET[task] == 'links') {
echo 'Links';}
else if($_GET[task] == 'member_list') {
echo 'Site Members';}
else if($_GET[task] == 'view_page'){
$safe_page = addslashes(trim($_GET['id']));
$abcd2 = str_replace (" ", "NOSPACES", $safe_page);
$sql = mysql_query("SELECT * FROM ava_pages WHERE id=".$abcd2."");
while($row = mysql_fetch_array($sql)){
echo ''.$row['name'].'';}}

else if($_GET[task] == 'view'){
$safe_page = addslashes(trim($_GET['id']));
$abcd = str_replace (" ", "NOSPACES", $safe_page);
$sql = mysql_query("SELECT * FROM ava_games WHERE id=".$abcd."");
if (!$sql) {echo 'Page not found'; exit;}
while($row = mysql_fetch_array($sql)){
echo ''.$row['name'].'';}}

else if(!isset($_GET['cat_id'])){
echo 'Homepage - Welcome to '.$site_name.'';
} else {
$total_results = mysql_result(mysql_query("SELECT COUNT(*) as Num FROM ava_cats WHERE id='".$_GET['cat_id']."'"),0);
if ($total_results <= 0) {
echo 'This category does not exist';}
else {

$safe_cat = addslashes(trim($_GET['cat_id']));
$abcd = str_replace (" ", "NOSPACES", $safe_cat);
$sql = mysql_query("SELECT * FROM ava_cats WHERE id=".$abcd."");
if (!$sql) {echo 'Page not found'; exit;}
while($row = mysql_fetch_array($sql)){
echo ''.$row['name'].''; }

}}}

// checks for legit cookie
function cookiecheck() {
include ('config.php');

$sql = mysql_query("SELECT * FROM ava_cats ORDER BY id");
if(isset($_COOKIE["ava_username"])){
$user = $_COOKIE['ava_username'];
$code = $_COOKIE['ava_code'];
$sql = mysql_query("SELECT * FROM ava_users WHERE username='$user' AND password='$code'");
$login_check = mysql_num_rows($sql);

if($login_check <= 0){
echo 'Your cookie is not valid, please <a href='.$site_url.'/login.php?action=logout>logout</a>';
exit();
} else {}
} else {}}

// function for the user menu
function usermenu() {
include ('config.php');

$abcd= $_COOKIE["ava_username"];
$abcd = str_replace (" ", "-", $abcd);

if ($seo_on == 0) {$url = 'index.php?task=profile&id='.$_COOKIE['ava_userid'].'';}
else {$url = 'profile/'.$_COOKIE['ava_userid'].'/'.$abcd.'.htm';}

if(isset($_COOKIE["ava_username"])){
echo '&nbsp;<b>'.$_COOKIE['ava_username'].' logged in</b><br>&nbsp;<a href='.$site_url.'/login.php?action=logout>Logout</a><br>&nbsp;<a href='.$site_url.'/'.$url.'>Profile</a>';
include ('config.php');
$sql = mysql_query("SELECT * FROM ava_users WHERE id=".$_COOKIE['ava_userid']."");
while($row = mysql_fetch_array($sql)){
if ($row['admin'] == 1) {
echo "<br>&nbsp;<a href=".$site_url."/admin/>Administration</a>";
}}}
else {
echo '<div align="center">';
include ('includes/login.php'); echo ' </div>';}echo '</div>';}

// function for stats
function stats()
{
include ('config.php');
$total_links = mysql_result(mysql_query("SELECT COUNT(*) as Num FROM ava_games"),0);
$total_users = mysql_result(mysql_query("SELECT COUNT(*) as Num FROM ava_users"),0);
$total_comments = mysql_result(mysql_query("SELECT COUNT(*) as Num FROM ava_comments"),0);
$total_cats = mysql_result(mysql_query("SELECT COUNT(*) as Num FROM ava_cats"),0);
$total_plays1 = mysql_query("SELECT sum(hits) AS total_plays FROM ava_games");
$total_plays2 = mysql_fetch_array($total_plays1);
echo "&nbsp;Total games: ".$total_links."<br>&nbsp;Total categories: ".$total_cats."<br>&nbsp;Total users: ".$total_users."<br>&nbsp;Total comments: ".$total_comments."<br>&nbsp;Total game plays: ".$total_plays2['total_plays']."";
}
// function for popular games
function popular()
{
include ('config.php');
$sql = mysql_query("SELECT * FROM ava_games WHERE published=1 ORDER BY hits desc LIMIT 10");
while($row = mysql_fetch_array($sql)){
$abcd= $row['name'];
$abcd = str_replace (" ", "-", $abcd);
if ($seo_on == 0) {$url = 'index.php?task=view&id='.$row['id'].'';}
else {$url = 'view/'.$row['id'].'/'.$abcd.'.htm';}
echo '&nbsp;<a href="'.$site_url.'/'.$url.'">'.$row['name'].'</a><br>';
}}

function newest() {
include ('config.php');
$sql = mysql_query("SELECT * FROM ava_games WHERE published=1 ORDER BY id desc LIMIT 10");
while($row = mysql_fetch_array($sql)){
$abcd= $row['name'];
$abcd = str_replace (" ", "-", $abcd);
if ($seo_on == 0) {$url = 'index.php?task=view&id='.$row['id'].'';}
else {$url = 'view/'.$row['id'].'/'.$abcd.'.htm';}
echo '&nbsp;<a href="'.$site_url.'/'.$url.'">'.$row['name'].'</a><br>';
}}

function players() {
include ('config.php');
$sql = mysql_query("SELECT * FROM ava_users ORDER BY plays desc LIMIT 10");
while($row = mysql_fetch_array($sql)){
$abcd= $row['username'];
$abcd = str_replace (" ", "-", $abcd);
if ($seo_on == 0) {$url = 'index.php?task=profile&id='.$row['id'].'';}
else {$url = 'profile/'.$row['id'].'/'.$abcd.'.htm';}
echo '&nbsp;<a href="'.$site_url.'/'.$url.'">'.$row['username'].'</a> ('.$row['plays'].')<br>';}}

function links()
{
global $seo_on;
include ('config.php');
$sql = mysql_query("SELECT * FROM ava_links WHERE sitewide=1 AND published=1 ORDER BY id desc LIMIT 10");

while($row = mysql_fetch_array($sql))
{
echo '&nbsp;<a href="'.$row['url'].'" target="_blank">'.$row['name'].'</a><br>';
}

if ($seo_on == 0)
{
echo '&nbsp;<a href="'.$site_url.'/index.php?task=links">More links...</a>';
}
else
{
echo '&nbsp;<a href="'.$site_url.'/task/links/">More links...</a>';
}
}