PHP wd函数代码示例

$design->header();
if (!is_admin()) {
    echo 'Dieser Bereich ist nicht fuer dich...';
    $design->footer(1);
}
if (isset($_GET['m']) and $_GET['m'] == 'm') {
    if (isset($_POST['sub'])) {
        # immer alle loeschen und dann alle eintragen fals gewuenscht hort sich doch
        # logisch an und ist es auch.
        $mid = escape($_POST['md'], 'integer');
        $gr = escape($_POST['gr'], 'integer');
        db_query("DELETE FROM prefix_modulerights USING prefix_modulerights, prefix_user WHERE prefix_user.id = prefix_modulerights.uid AND prefix_modulerights.mid = " . $mid . " AND prefix_user.recht = " . $gr);
        if ($_POST['ak'] == 1) {
            db_query("INSERT INTO prefix_modulerights (mid,uid) SELECT " . $mid . " as mid, id as uid FROM prefix_user WHERE recht = " . $gr);
        }
        wd(array('Grundrechten' => 'admin.php?grundrechte', 'Userverwalten' => 'admin.php?user', 'zurück zu Modulrechte' => 'admin.php?grundrechte=0&m=m'), 'Die geünschte Operation wurde ausgeführt... Bitte überprüfen!!', 66);
        $design->footer(1);
    }
    $grl = dblistee('', "SELECT id, name FROM prefix_grundrechte ORDER BY id ASC");
    $mdl = dblistee('', "SELECT id, name FROM prefix_modules ORDER BY name");
    ?>

  <form action="admin.php?grundrechte=0&amp;m=m" method="POST">
  <table cellpadding="2" cellspacing="0" border="0">
    <tr>
      <td>Allen</td>
      <td><select name="gr"><?php 
    echo $grl;
    ?>
</select></td>
      <td>das Modulrecht</td>

    $text = edit_text(stripslashes($text), true);
    $a = substr($akl, 0, 1);
    #$e = substr ( $akl, 1 );
    #if ( $e != 'neu' ) {
    #  unlink ( 'include/contents/selfbp/self'.$a.'/'.$e );
    #}
    if (!empty($_POST['exfilename']) and $_POST['exfilename'] != $_POST['filename']) {
        $exfilename = escape($_POST['exfilename'], 'string');
        @unlink('include/contents/selfbp/self' . $a . '/' . $exfilename);
    }
    $filename = get_nametosave($_POST['filename']);
    $fname = 'include/contents/selfbp/self' . $a . '/' . $filename;
    save_file_to($fname, $text);
    if ($_POST['toggle'] == 0) {
        $design->header();
        wd('admin.php?selfbp=0&akl=' . $a . $filename, 'Ihre Aenderungen wurden gespeichert...', 13);
        $design->footer(1);
    }
}
#anzeigen
$design->header();
$tpl = new tpl('selfbp', 1);
$akl = '';
if (isset($_REQUEST['akl'])) {
    $akl = $_REQUEST['akl'];
}
#löschen
if (isset($_REQUEST['del'])) {
    $del = $_REQUEST['del'];
    $a = substr($del, 0, 1);
    $e = substr($del, 1);

        }
        $design->footer();
        break;
    case 'refuse':
        $title = $allgAr['title'] . ' :: Users :: Freundschaftsanfrage abgelehnt';
        $hmenu = $extented_forum_menu . '<a class="smalfont" href="?user">Users</a><b> &raquo; </b> Freundschaftsanfrage abgelehnt';
        $design = new design($title, $hmenu, 1);
        $design->header();
        if (loggedin() and is_numeric($fid)) {
            db_query("DELETE FROM prefix_friendscheck WHERE uid = " . $fid . " AND fid = " . $uid);
            wd('?user-fcheck-' . $uid, 'Du hast die Freundschaftsanfrage abgelehnt.');
        } else {
            wd('?user-fcheck-' . $uid, 'Es ist ein Fehler aufgetreten');
        }
        $design->footer();
        break;
    case 'del':
        $title = $allgAr['title'] . ' :: Users :: Freund entfernen';
        $hmenu = $extented_forum_menu . '<a class="smalfont" href="?user">Users</a><b> &raquo; </b> Freund entfernen';
        $design = new design($title, $hmenu, 1);
        $design->header();
        if (loggedin() and is_numeric($fid)) {
            db_query("DELETE FROM prefix_friends WHERE uid = " . $uid . " AND fid = " . $fid);
            db_query("DELETE FROM prefix_friends WHERE uid = " . $fid . " AND fid = " . $uid);
            wd('?user-details-' . $fid, 'Freund wurde entfernt.');
        } else {
            wd('?user-details-' . $fid, 'Es ist ein Fehler aufgetreten');
        }
        $design->footer();
        break;
}

            $txt = 'Dein Thema "' . $top . '" wurde von dem Forum "' . $fal . '" in das neue Forum "' . $fne . '" verschoben... ';
            $txt .= "\n\n- [url=http://" . $page . "?forum-showposts-" . $k . "]Link zum Thema[/url]";
            $txt .= "\n- [url=http://" . $page . "?forum-showtopics-" . $_POST['nfid'] . "]Link zum neuen Forum[/url]";
            $txt .= "\n- [url=http://" . $page . "?forum-showtopics-" . $_POST['afid'] . "]Link zum alten Forum[/url]";
            sendpm($_SESSION['authid'], $uid, 'Thema verschoben', $txt);
        }
    }
    $pmin = $pmin + $tmin;
    $apid = db_result(db_query("SELECT MAX(id) FROM prefix_posts WHERE fid = " . $_POST['afid']), 0);
    $npid = db_result(db_query("SELECT MAX(id) FROM prefix_posts WHERE fid = " . $_POST['nfid']), 0);
    if (empty($apid)) {
        $apid = 0;
    }
    db_query("UPDATE `prefix_forums` SET last_post_id = " . $apid . ", `posts` = `posts` - " . $pmin . ", `topics` = `topics` - " . $tmin . " WHERE id = " . $_POST['afid']);
    db_query("UPDATE `prefix_forums` SET last_post_id = " . $npid . ", `posts` = `posts` + " . $pmin . ", `topics` = `topics` + " . $tmin . " WHERE id = " . $_POST['nfid']);
    wd(array('neue Themen Übersicht' => 'index.php?forum-showtopics-' . $_POST['nfid'], 'alte Themen Übersicht' => 'index.php?forum-showtopics-' . $_POST['afid']), 'Thema erfolgreich verschoben', 3);
} elseif ($csrfCheck and (isset($_POST['del']) or isset($_POST['shift']))) {
    echo '<form action="index.php?forum-editforum-' . $fid . '" method="POST">';
    foreach ($_POST['in'] as $k => $v) {
        echo '<input type="hidden" name="in[' . $k . ']" value="' . $v . '" />';
    }
    if (isset($_POST['del'])) {
        echo '<input type="hidden" name="dely" value="yes" />';
        echo 'Sicher die ausgewahlten Themen loeschen? <input type="submit" value="' . $lang['yes'] . '" name="del" />';
    } elseif (isset($_POST['shift']) and $_POST['nfid'] != 'cat') {
        echo '<input type="hidden" name="afid" value="' . $fid . '">neues Forum ausw&auml;hlen<br />';
        echo '<select name="nfid">';
        function stufe($anz, $t = 'f')
        {
            $z = $t == 'f' ? '&nbsp;&nbsp;' : '&raquo;';
            for ($i = 0; $i < $anz; $i++) {

		  <td class="Cmite">Deine eMail</td>
			<td class="Cnorm"><input type="text" name="email" value="<?php 
    echo $_POST['email'];
    ?>
"></td>
		</tr><tr class="Cnorm">
		  <td class="Cmite" v>Nachricht</td>
		  <td class="Cnorm"><textarea cols="40" rows="10" name="txt"><?php 
    echo $_POST['txt'];
    ?>
</textarea></td>
		</tr><tr class="Cdark">
		  <td></td>
			<td><input type="submit" name="send" value="<?php 
    echo $lang['formsub'];
    ?>
"></td>
    </tr>
  </table></form>
  <?php 
} else {
    $_SESSION['klicktime'] = time();
    if (1 == $row['opt_mail']) {
        icmail($row['email'], strip_tags($_POST['bet']), strip_tags($_POST['txt']), 'SeitenKontakt <' . escape_for_email($_POST['email']) . '>');
        wd('index.php?forum', 'Die eMail wurde erfolgreich versendet');
    } else {
        header('location: index.php?' . $allAr['smodul']);
        exit;
    }
}
$design->footer();

            } else {
                $Fnch = 'checked';
                $Fjch = '';
            }
            $Frid = $row->id;
            $Fakt = 'change';
        }
        $tpl = new tpl('range', 1);
        $ar = array('SUB' => $Fsub, 'BEZ' => $Fbez, 'MIN' => $Fmin, 'JCH' => $Fjch, 'NCH' => $Fnch, 'RID' => $Frid, 'AKT' => $Fakt);
        $tpl->set_ar_out($ar, 3);
    } else {
        $_POST['bez'] = escape($_POST['bez'], 'string');
        $_POST['min'] = escape($_POST['min'], 'integer');
        $_POST['spez'] = escape($_POST['spez'], 'integer');
        $_POST['rid'] = escape($_POST['rid'], 'integer');
        if (empty($_POST['rid'])) {
            if ($_POST['spez'] == 1) {
                $_POST['min'] = '0';
            }
            db_query('INSERT INTO `prefix_ranks` (`bez`,`min`,`spez`) VALUES ( "' . $_POST['bez'] . '","' . $_POST['min'] . '","' . $_POST['spez'] . '" ) ');
            wd('admin.php?range', 'Erfolgreich eingetragen', 1);
        } else {
            if ($_POST['spez'] == 1) {
                $_POST['min'] = '0';
            }
            db_query('UPDATE `prefix_ranks` SET bez = "' . $_POST['bez'] . '", min = "' . $_POST['min'] . '", spez = "' . $_POST['spez'] . '" WHERE id = "' . $_POST['rid'] . '"');
            wd('admin.php?range', 'Erfolgreich geändert', 1);
        }
    }
}
$design->footer();

     $ar = array('uname' => $_SESSION['authname'], 'SMILIES' => getsmilies(), 'ANTISPAM' => get_antispam('gbook', 1), 'TXTL' => $allgAr['Gtxtl']);
     $tpl->set_ar_out($ar, 3);
     if (!isset($_SESSION['klicktime_gbook'])) {
         $_SESSION['klicktime_gbook'] = 0;
     }
     break;
 case 2:
     $dppk_time = time();
     if ($_SESSION['klicktime_gbook'] + $timeSperre < $dppk_time and isset($_POST['name']) and isset($_POST['txt']) and trim($_POST['name']) != "" and trim($_POST['txt']) != "" and chk_antispam('gbook') and strlen($_POST['txt']) <= $allgAr['Gtxtl']) {
         $txt = escape($_POST['txt'], 'textarea');
         $name = escape($_POST['name'], 'string');
         $mail = escape($_POST['mail'], 'string');
         $page = escape($_POST['page'], 'string');
         db_query("INSERT INTO prefix_gbook (`name`,`mail`,`page`,`time`,`ip`,`txt`) VALUES ('" . $name . "', '" . $mail . "', '" . $page . "', '" . time() . "', '" . getip() . "', '" . $txt . "')");
         $_SESSION['klicktime_gbook'] = $dppk_time;
         wd('index.php?gbook', $lang['insertsuccessful']);
     } else {
         echo '- ' . $lang['donotpostsofast'];
         echo '<br />- ' . sprintf($lang['gbooktexttolong'], $allgAr['Gtxtl']);
         echo '<br />- ' . $lang['plsfilloutallfields'];
     }
     break;
 case 'show':
     if ($allgAr['gbook_koms_for_inserts'] == 1) {
         $id = escape($menu->get(2), 'integer');
         if (chk_antispam('gbookkom') and isset($_POST['name']) and isset($_POST['text'])) {
             $name = escape($_POST['name'], 'string');
             $text = escape($_POST['text'], 'string');
             db_query("INSERT INTO prefix_koms (name,text,uid,cat) VALUES ('" . $name . "', '" . $text . "', " . $id . ", 'GBOOK')");
         }
         if ($menu->getA(3) == 'd' and is_numeric($menu->getE(3)) and has_right(-7, 'gbook')) {

    $var2 = escape($_POST['id'], 'string');
    $var3 = escape($_POST['url'], 'string');
    if ($var2 == '0') {
        db_query("UPDATE `prefix_shbox4config`\n        SET\n                `{$var1}`   = '1'\n        WHERE\n                `id` = '1'\n        ") or die('Probleme mit der Datenbank');
        wd('?shbox4admin-' . $var3, '', 0);
    } elseif ($var2 == '1') {
        db_query("UPDATE `prefix_shbox4config`\n        SET\n                `{$var1}`   = '0'\n        WHERE\n                `id` = '1'\n        ") or die('Probleme mit der Datenbank');
        wd('?shbox4admin-' . $var3, '', 0);
    }
}
if (escape($menu->get(1), 'string') == 'updates') {
    $var1 = escape($menu->get(2), 'string');
    $var2 = escape($_POST[$var1], 'string');
    $var3 = escape($_POST['url'], 'string');
    db_query("UPDATE `prefix_shbox4config`\n              SET\n                 `{$var1}`   = '" . $var2 . "'\n              WHERE\n                `id` = '1'\n             ") or die('Probleme mit der Datenbank');
    wd('?shbox4admin-' . $var3, '', 0);
}
if (escape($menu->get(1), 'string') == 'show') {
    if (escape($menu->get(2), 'string') == 'send') {
        db_query("UPDATE `prefix_shbox4`\n        SET `txt` = '" . escape($_POST['edittxt'], 'string') . "'\n                WHERE `id` = '" . escape($menu->get(3), 'string') . "'\n        ") or die('Probleme mit der Datenbank');
    } elseif (escape($menu->get(2), 'string') == 'del') {
        db_query("DELETE FROM `prefix_shbox4` WHERE `id` = '" . escape($menu->get(3), 'string') . "'") or die('Probleme mit der Datenbank');
    }
}
if (escape($menu->get(1), 'string') == 'allg') {
    $erg = db_query('SELECT * FROM `prefix_shbox4config` WHERE id = "1"');
    $row = db_fetch_assoc($erg);
    $url = 'allg';
    $ar = array('AKTIV' => $var->check_var('aktiv', 'Aktiv', $row['aktiv'], $url), 'GAST' => $var->check_var('gast', 'Gast', $row['gast'], $url), 'RELOAD' => $var->check_var('reload', 'Reload', $row['reload'], $url), 'DATUM' => $var->check_var('datum', 'Datum', $row['datum'], $url), 'FARBEN' => $var->check_var('farbe', 'Farben', $row['farbe'], $url), 'SPAM' => $var->check_var('spam', 'SPAM', $row['spam'], $url), 'SMILIES' => $var->check_var('smilies', 'Smilies & BBcode', $row['smilies'], $url), 'RTIME' => $row['time'], 'DBN1' => 'time', 'AKTIVTEXT' => $row['aktivtext'], 'DBN11' => 'aktivtext', 'AUSGABE' => $row['ausgabe'], 'DBN2' => 'ausgabe', 'DATUMF' => $row['format'], 'DBN3' => 'format', 'SIZE' => $row['size'], 'DBN4' => 'size', 'MTEXT' => $row['mtext'], 'DBN5' => 'mtext', 'BBFETT' => $var->shcheckbox($var->shconfig('smilies'), $var->shconfig('bbfett'), 'bbfett', 'Fett', $row['bbfett'], $url, 'bold'), 'BBKURSIV' => $var->shcheckbox($var->shconfig('smilies'), $var->shconfig('bbkursiv'), 'bbkursiv', 'Kursiv', $row['bbkursiv'], $url, 'italic'), 'BBUNTER' => $var->shcheckbox($var->shconfig('smilies'), $var->shconfig('bbunter'), 'bbunter', 'Unterstrich', $row['bbunter'], $url, 'underline'), 'BBLINK' => $var->shcheckbox($var->shconfig('smilies'), $var->shconfig('bblink'), 'bblink', 'Link', $row['bblink'], $url, 'link'));
    $tpl->set_ar_out($ar, 1);
}

    }
    # topic alert ausfuehren.
    $topic_alerts_abf = "SELECT\r\n      prefix_topics.name as topic,\r\n      prefix_user.email as email,\r\n      prefix_user.name as user,\r\n      prefix_user.id as uid\r\n    FROM prefix_topic_alerts\r\n      LEFT JOIN prefix_topics ON prefix_topics.id = prefix_topic_alerts.tid\r\n      LEFT JOIN prefix_user   ON prefix_user.id   = prefix_topic_alerts.uid\r\n    WHERE prefix_topic_alerts.tid = " . $tid;
    $topic_alerts_erg = db_query($topic_alerts_abf);
    while ($topic_alerts_row = db_fetch_assoc($topic_alerts_erg)) {
        if ($uid == $topic_alerts_row['uid']) {
            continue;
        }
        $page = $_SERVER["HTTP_HOST"] . $_SERVER["SCRIPT_NAME"];
        $text = sprintf($lang['topicalertmessage'], $topic_alerts_row['user'], $topic_alerts_row['topic'], $page, $tid);
        icmail($topic_alerts_row['email'], 'neue Antwort im Thema: "' . $topic_alerts_row['topic'] . '"', $text);
        debug($topic_alerts_row['email']);
    }
    db_query("DELETE FROM prefix_topic_alerts WHERE tid = " . $tid);
    # topic alert insert wenn gewaehlt.
    if (!empty($_POST['topic_alert']) and $_POST['topic_alert'] == 'yes' and loggedin()) {
        if (0 == db_result(db_query("SELECT COUNT(*) FROM prefix_topic_alerts WHERE uid = " . $_SESSION['authid'] . " AND tid = " . $tid), 0)) {
            db_query("INSERT INTO prefix_topic_alerts (tid,uid) VALUES (" . $tid . ", " . $_SESSION['authid'] . ")");
        }
    }
    # topic alert ende
    db_query("INSERT INTO `prefix_posts` (tid,fid,erst,erstid,time,txt) VALUES ( " . $tid . ", " . $fid . ", '" . $erst . "', " . $uid . ", " . $time . ", '" . $txt . "')");
    $pid = db_last_id();
    db_query("UPDATE `prefix_topics` SET last_post_id = " . $pid . ", rep = rep + 1 WHERE id = " . $tid);
    db_query("UPDATE `prefix_forums` SET posts = posts + 1, last_post_id = " . $pid . " WHERE id = " . $fid);
    $page = ceil(($aktTopicRow['rep'] + 2) / $allgAr['Fpanz']);
    # toipc als gelesen markieren
    $_SESSION['forumSEE'][$fid][$tid] = time();
    wd(array($lang['backtotopic'] => 'index.php?forum-showposts-' . $tid . '-p' . $page . '#' . $pid, $lang['backtotopicoverview'] => 'index.php?forum-showtopics-' . $fid), $lang['createpostsuccessful'], 3);
}
$design->footer();

         }
         if (isset($_POST['re']) and strpos($ar['BET'], 're') === false and strpos($ar['BET'], 'Re') === false and strpos($ar['BET'], 'RE') === false) {
             $ar['BET'] = 'Re(1): ' . $ar['BET'];
         } elseif (isset($_POST['re'])) {
             $x = preg_replace("/re\\((\\d+)\\):.*/i", "\\1", trim($ar['BET']));
             if (is_numeric($x)) {
                 $x = $x + 1;
                 $ar['BET'] = preg_replace("/(re)\\(\\d+\\):(.*)/i", "\\1(" . $x . "):\\2", $ar['BET']);
             }
         }
         $tpl = new tpl('forum/pm/new');
         $tpl->set_ar_out($ar, 0);
     } else {
         $eid = db_result(db_query("SELECT `id` FROM `prefix_user` WHERE `name` = BINARY '" . $name . "'"), 0);
         sendpm($_SESSION['authid'], $eid, $bet, $txt);
         wd('index.php?forum-privmsg', 'Die Nachricht wurde erfolgreich gesendet');
     }
     break;
 case 'showmsg':
     // message anzeigen lassen
     $pid = escape($menu->get(3), 'integer');
     $soeid = $menu->get(4) == 's' ? 'eid' : 'sid';
     $erg = db_query("SELECT `a`.`gelesen`, `a`.`eid`, `a`.`sid`, `a`.`id`, `b`.`name`, `a`.`titel`, `a`.`time`, `a`.`txt` FROM `prefix_pm` `a` LEFT JOIN `prefix_user` `b` ON `a`.`" . $soeid . "` = `b`.`id` WHERE `a`.`id` = " . $pid);
     $row = db_fetch_assoc($erg);
     if ($row['sid'] != $_SESSION['authid'] and $menu->get(4) == 's' or $row['eid'] != $_SESSION['authid'] and $menu->get(4) != 's') {
         $design->footer(1);
     }
     if ($row['gelesen'] == 0 and $menu->get(4) != 's') {
         db_query("UPDATE `prefix_pm` SET `gelesen` = 1 WHERE `id` = " . $pid);
     }
     $row['time'] = date('d M. Y - H:i', $row['time']);

        case 2:
            db_query("UPDATE prefix_user SET pass = '" . $row['pass'] . "' WHERE name = BINARY '" . $row['name'] . "'");
            echo $lang['confirmpassword'];
            break;
            # confirm new email
        # confirm new email
        case 3:
            list($id, $muell) = explode('||', $row['check']);
            db_query("UPDATE prefix_user SET email = '" . $row['email'] . "' WHERE id = " . escape($id, 'integer'));
            echo $lang['confirmemail'];
            break;
            # ak 4 wurde besetzt fuer joinus anfragen...
        # ak 4 wurde besetzt fuer joinus anfragen...
        case 4:
            break;
            # ak 5 remove account
        # ak 5 remove account
        case 5:
            list($id, $muell) = explode('-remove-', $row['check']);
            if ($id != $_SESSION['authid']) {
                break;
            }
            user_remove($id);
            wd('index.php', 'Dein Account wurde gelöscht. Du wirst nun auf die Startseite geleitet.', 7);
            break;
    }
    db_query("DELETE FROM prefix_usercheck WHERE `check` = '" . $row['check'] . "'");
} else {
    echo $lang['confirmfailure'];
}
$design->footer();

                $fromUser = $_SESSION["authid"];
            } else {
                $fromUser = 0;
            }
            $tpl->set("NAME", get_n($fromUser));
            $tpl->set("BEITRAG", get_topic_title($topicId));
            $tpl->set("PID", $postId);
            $tpl->set("TID", $topicId);
            sendpm($fromUser, 1, $tpl->get("pm_betreff"), $tpl->get("pm_content"), 0);
            // weiterleitung
            wd("index.php?forum-showposts-" . $topicId, $tpl->get("weiterleitung"));
        } else {
            // An die Mods schicken
            foreach ($getmodids as $userid) {
                if (isset($_SESSION["authid"])) {
                    $fromUser = $_SESSION["authid"];
                } else {
                    $fromUser = 0;
                }
                $tpl->set("NAME", get_n($fromUser));
                $tpl->set("BEITRAG", get_topic_title($topicId));
                $tpl->set("PID", $postId);
                $tpl->set("TID", $topicId);
                sendpm($fromUser, $userid, $tpl->get("pm_betreff"), $tpl->get("pm_content"), 0);
                // weiterleitung
                wd("index.php?forum-showposts-" . $topicId, $tpl->get("weiterleitung"));
            }
        }
    }
}
$design->footer();

		          `status` = "' . $status . '",
		          `sperre` = "' . $sperre . '",
		          `opt_mail` = "' . $opt_mail . '",
		          `opt_pm` = "' . $opt_pm . '",
		          `opt_pm_popup` = "' . $opt_pm_popup . '",
		          `gebdatum` = "' . $gebdatum . '",
		          `sig` = "' . $sig . '"
		          ' . $avatar_sql_update . '
				WHERE `id` = "' . $uid . '"');
            }
            if ($sperre == 1) {
                @db_query("DELETE FROM `prefix_online` WHERE uid = '" . $uid . "' ");
                $sperrinfo = ' und User wurde ausgeloggt';
            }
        }
        wd('admin.php?user-1-' . $uid, 'Das Profil wurde erfolgreich geändert' . $sperrinfo, 2);
        $design->footer();
        break;
        // mal kurz nen neuen user anlegen
    // mal kurz nen neuen user anlegen
    case 'createNewUser':
        $msg = '';
        if (!empty($_POST['name']) and !empty($_POST['pass']) and !empty($_POST['email']) and chk_antispam('adminuser_action', true)) {
            $_POST['name'] = escape($_POST['name'], 'string');
            $_POST['recht'] = escape($_POST['recht'], 'integer');
            $_POST['email'] = escape($_POST['email'], 'string');
            $erg = db_query("SELECT `id` FROM `prefix_user` WHERE `name_clean` = BINARY '" . get_lower($_POST['name']) . "'");
            if (db_num_rows($erg) > 0) {
                $msg = 'Der Name ist leider schon vorhanden!';
            } else {
                $new_pass = $_POST['pass'];

             $this_id = $getid;
             $outar['thumbwidth'] = 100;
             if (!empty($_FILES['editlogo']['tmp_name'])) {
                 $uploadname = $getid . '_' . $_FILES["editlogo"]["name"];
                 if ($getpicname != '.no-image-opponent.png' and $getpicname != 'thumb_.no-image-opponent.png') {
                     @unlink('include/images/opponents/' . $getpicname . '');
                     @unlink('include/images/opponents/thumb_' . $getpicname . '');
                 }
                 move_uploaded_file($_FILES["editlogo"]["tmp_name"], $updir . $uploadname);
                 create_thumb($updir . $uploadname, $updir . 'thumb_' . $uploadname, $outar['thumbwidth']);
             } else {
                 $uploadname = $getpicname;
             }
             // DB UPDATE
             db_query("UPDATE `prefix_opponents` SET\r\n\t\t\t\t\t\t\t\t\t\t\t\t\tname \t= '" . $editclanname . "',\r\n\t\t\t\t\t\t\t\t\t\t\t\t\ttag \t= '" . $editclantag . "',\r\n\t\t\t\t\t\t\t\t\t\t\t\t\tpage \t= '" . $editurl . "',\r\n\t\t\t\t\t\t\t\t\t\t\t\t\temail \t= '" . $editemail . "',\r\n\t\t\t\t\t\t\t\t\t\t\t\t\ticq \t= '" . $editicq . "',\r\n\t\t\t\t\t\t\t\t\t\t\t\t\tnation \t= '" . $editnation . "',\r\n\t\t\t\t\t\t\t\t\t\t\t\t\tlogo \t= '" . $uploadname . "'\r\n\t\t\t\t\t\t\t\t\t\t\t\tWHERE\r\n\t\t\t\t\t\t\t\t\t\t\t\t\tid = " . $getid . "");
             wd('admin.php?opponents', 'Daten gespeichert', 3);
             $design->footer(1);
         }
         $outar['ANTISPAM'] = get_antispam('adminuser_action', 0, true);
         $tpl->set_ar_out($outar, 1);
         $design->footer();
     }
     break;
 default:
     // Gegnerliste ausgeben
     $limit = 15;
     $page = $menu->getA(1) == 'p' ? $menu->getE(1) : 1;
     $anfang = ($page - 1) * $limit;
     if (isset($_POST['submit'])) {
         $suchstr = escape($_POST['suche'], 'string');
         $WHERE = "WHERE name LIKE '%" . $suchstr . "%' OR tag LIKE '%" . $suchstr . "%'";

          yahoo = "' . $yahoo . '",
          aim = "' . $aim . '",
          staat = "' . $staat . '",
          spezrank = "' . $spezrank . '",
          geschlecht = "' . $geschlecht . '",
          status = "' . $status . '",
          opt_mail = "' . $opt_mail . '",
          opt_pm = "' . $opt_pm . '",
          opt_pm_popup = "' . $opt_pm_popup . '",
          gebdatum = "' . $gebdatum . '",
          sig = "' . $sig . '"
          ' . $avatar_sql_update . '
				WHERE id = "' . $uid . '"');
            }
        }
        wd('admin.php?user-1-' . $uid, 'Das Profil wurde erfolgreich geaendert', 2);
        $design->footer();
        break;
        // mal kurz nen neuen user anlegen
    // mal kurz nen neuen user anlegen
    case 'createNewUser':
        $msg = '';
        if (!empty($_POST['name']) and !empty($_POST['pass']) and !empty($_POST['email']) and chk_antispam('adminuser_create', true)) {
            $_POST['name'] = escape($_POST['name'], 'string');
            $_POST['recht'] = escape($_POST['recht'], 'integer');
            $_POST['email'] = escape($_POST['email'], 'string');
            $erg = db_query("SELECT id FROM prefix_user WHERE name = BINARY '" . $_POST['name'] . "'");
            if (db_num_rows($erg) > 0) {
                $msg = 'Der Name ist leider schon vorhanden!';
            } else {
                $new_pass = $_POST['pass'];