PHP Security::textFilter方法代码示例

                    $look = $userdata['look'];
                    $vip = $userdata['vip'];
                    $rank = $userdata['rank'];
                } else {
                    $working = $_POST['working'];
                    $secretcode = $_POST['secretcode'];
                    $vip_points = $_POST['vip_points'];
                    $online = $_POST['online'];
                    $look = $_POST['look'];
                    if ($_POST['vip'] == "true") {
                        $vip = "1";
                    } else {
                        $vip = "0";
                    }
                }
                Transaction::query("UPDATE users SET real_name = '" . Security::textFilter($_POST['real_name']) . "', motto = '" . Security::textFilter($_POST['motto']) . "', look = '" . Security::textFilter($look) . "', gender = '" . Security::textFilter($_POST['gender']) . "', mail = '" . Security::textFilter($_POST['mail']) . "', credits = '" . Security::textFilter($_POST['credits']) . "', activity_points = '" . Security::textFilter($_POST['activity_points']) . "', birth = '" . Security::textFilter($_POST['birth']) . "', ip_last = '" . Security::textFilter($_POST['ip_last']) . "', ip_reg = '" . Security::textFilter($_POST['ip_reg']) . "', working = '" . $working . "', secretcode = '" . $secretcode . "', vip_points = '" . $vip_points . "', online = '" . $online . "', vip = '" . $vip . "' WHERE id = '" . $userdata['id'] . "'");
                $msg = "<div class='rounded rounded-green'><center>" . $userdata['username'] . " (ID: " . $userdata['id'] . ") Alteraes salvas! <img src=\"./w/images/check.gif\"></center></div>";
                $query = Transaction::query("SELECT * FROM users WHERE id = '" . $key . "' LIMIT 1");
                $userdata = Transaction::fetch($query);
            } else {
                $msg = "<div class='rounded rounded-red'><center>No foi possvel encontrar este usurio! <img src=\"./w/images/del.gif\"></center></div>";
            }
        } else {
            $msg = "<div class='rounded rounded-red'><center>Cheque todos os campos! <img src=\"./w/images/del.gif\"></center></div>";
        }
    }
    $check_bann = Transaction::query("SELECT * FROM bans WHERE value = '" . $userdata['username'] . "' AND bantype = 'user'");
    @(include 'subheader.php');
    if (isset($msg)) {
        ?>
<p><strong><?php 

    die;
}
if ($user_rank > 5) {
    if ($hkzone !== true) {
        header("Location: index.php?throwBack=true");
        exit;
    }
    if (!mobbo::session_is_registered(acp)) {
        header("Location: index.php?p=login");
        exit;
    }
    $pagename = "Cdigo de Moedas";
    $pageid = "vouchers";
    if (isset($_POST['submit'])) {
        if (!empty($_POST['voucher']) && !empty($_POST['credits'])) {
            Transaction::query("INSERT INTO credit_vouchers (code,value) VALUES ('" . Security::textFilter($_POST['voucher']) . "','" . Security::textFilter($_POST['credits']) . "')");
            $msg = "<div class='rounded rounded-green'><center>Cdigo criado corretamente! <img src=\"./w/images/check.gif\"></center></div>";
        } else {
            $msg = "<div class='rounded rounded-red'><center>Preencha todos os campos!. <img src=\"./w/images/del.gif\"></center></div>";
        }
    }
    function randomVoucher($code)
    {
        $characters = "1234567890abdefghijklmnopqrstuvwxyz1234567890ABCDEFGHIJKLMNOPQRSTUVWXYZ";
        $key = $characters[rand(0, 71)];
        for ($i = 1; $i < $code; $i++) {
            $key .= $characters[rand(0, 71)];
        }
        return $key;
    }
    $get_vouchers = Transaction::query("SELECT * FROM credit_vouchers");

    public static function show($actions = array())
    {
        $action = htmlspecialchars($actions);
        switch ($action) {
            case "login":
                if (isset($_POST['username'])) {
                    if (isset($_POST['password'])) {
                        $email = Security::textFilter($_POST['username']);
                        $password = md5(Security::textFilter($_POST['password']));
                        $find_user2 = Transaction::query("SELECT * FROM `users` WHERE `username` = '" . $email . "'");
                        $user_info2 = Transaction::fetch($find_user2);
                        $find_user = Transaction::query("SELECT * FROM `users` WHERE `mail` = '" . $email . "'");
                        $user_info = Transaction::fetch($find_user);
                        if ($user_info['password'] == $password or $user_info2['password'] == $password) {
                            $queryban = Transaction::query("SELECT * FROM `bans` WHERE `value` = '" . $user_info['username'] . "' OR `value` =  '" . $user_info2['username'] . "' LIMIT 1");
                            if (Transaction::num_rows($queryban) > 0) {
                                $fetchban = Transaction::fetch($queryban);
                                header("location: ../index.php?ban=" . $fetchban['value'] . "&reason=" . $fetchban['reason'] . "&time=" . $fetchban['expire'] . "&true=1");
                                exit;
                            }
                            if (!empty($user_info)) {
                                $_SESSION['id'] = $user_info['id'];
                                $_SESSION['userid'] = $user_info['id'];
                                $rawhotel = md5($user_info['id'] + $user_info['username'] + $user_info['password'] + Security::getUserIP());
                                setcookie('rawsessionhotel', $rawhotel);
                            } elseif (!empty($user_info2)) {
                                $_SESSION['id'] = $user_info2['id'];
                                $_SESSION['userid'] = $user_info2['id'];
                                $rawhotel = md5($user_info2['id'] + $user_info2['username'] + $user_info2['password'] + Security::getUserIP());
                                setcookie('rawsessionhotel', $rawhotel);
                            }
                            header("location: me");
                            if ($_SESSION['login_try'] > 0) {
                                $_SESSION['login_try'] = 0;
                            }
                            exit;
                        } else {
                            $_SESSION['login_try'] = $_SESSION['login_try'] + 1;
                            header("location: ../index.php?erroro=" . $_POST['username'] . "&type=1");
                            exit;
                        }
                    } else {
                        $_SESSION['login_try'] = $_SESSION['login_try'] + 1;
                        header("location: ../index.php?erroro=" . $_POST['username'] . "&type=1");
                        exit;
                    }
                } else {
                    $_SESSION['login_try'] = $_SESSION['login_try'] + 1;
                    header("location: ../index.php?erroro=" . $_POST['username'] . "&type=2");
                    exit;
                }
                break;
            case "logout":
                session_destroy();
                setcookie('rawsessionhotel', '0');
                header("location: ../index.php");
                break;
            case "404":
                $ok = <<<PAGE
                    <html>
    <title>404</title>
\t   <meta charset="utf-8">
    <link type="text/css" rel="stylesheet" href="../web-gallery/css/marketing.css">
</head>
  <body style="">
<section id="oops" style="width: 100%;">
<div class="row">
  <div class="large-9 medium-9 small-12 columns small-centered">
    <h5>404: Página não Encontrada</h5>
    <h1 class="oversized">Esta página não existe...</h1>
    <p class="lead bottom40">Você pode tentar recarregar a página indo na <a href="./">homepage.</a></p>   
  </div>
</div>
</section>
        <a class="exit-off-canvas"></a>
      </div>      
    </div>
</body></html> 
PAGE;
                echo $ok;
                break;
            case "405":
                $maintenance_text = mobbo::mobbo_settings('maintenance_text');
                $ok = <<<PAGE
                    <html>
\t\t\t\t\t   <meta charset="utf-8">
    <title>405</title>
    <link type="text/css" rel="stylesheet" href="../web-gallery/css/marketing.css">
</head>
  <body style="">
<section id="oops" style="width: 100%;">
<div class="row">
  <div class="large-9 medium-9 small-12 columns small-centered">
    <h5>405: Estamos em Manutencao</h5>
    <h1 class="oversized">Opa! Manutencao.</h1>
    <p class="lead bottom40"><b>Motivo:</b> {$maintenance_text}   <a href="/">Voltar a Home Page</a></p>   
  </div>
</div>
</section>
        <a class="exit-off-canvas"></a>
//.........这里部分代码省略.........

    $pageid = "cloner";
    if (isset($_POST['query']) && $_POST['type']) {
        if ($_POST['query']) {
            if ($_POST['type'] == "name") {
                $get_users_a = Transaction::query("SELECT * FROM users WHERE username = '" . Security::textFilter($_POST['query']) . "' ORDER BY username");
                $check_a = Transaction::num_rows($get_users_a);
                if ($check_a > 0) {
                    $userdata_a = Transaction::fetch($get_users_a);
                    $get_users = Transaction::query("SELECT * FROM users WHERE ip_last = '" . $userdata_a['ip_last'] . "' or ip_reg = '" . $userdata_a['ip_reg'] . "' ORDER BY username");
                    $check = Transaction::num_rows($get_users);
                    $msg = "<div class='rounded rounded-green'><center><b>Foram encontrados os seguintes usurios com esse mesmo IP:</b> <img src=\"./w/images/check.gif\"></center></div>";
                } else {
                    $msg = "<div class='rounded rounded-red'><center><b>No foi possvel encontrar este usurio</b> <img src=\"./w/images/del.gif\"></center></div>";
                }
            } else {
                $get_users = Transaction::query("SELECT * FROM users WHERE ip_last = '" . Security::textFilter($_POST['query']) . "' ORDER BY username");
                $check = Transaction::num_rows($get_users);
                if ($check > 0) {
                    $msg = "<div class='rounded rounded-green'><center><b>Foram encontrados os seguintes usurios com esse IP:</b> <img src=\"./w/images/check.gif\"></center></div>";
                } else {
                    $msg = "<div class='rounded rounded-red'><center><b>IP no encontrado!</b> <img src=\"./w/images/del.gif\"></center></div>";
                }
            }
        } else {
            $msg = "<div class='rounded rounded-red'><center><b>Coloque o IP ou Nome do usurio!</b> <img src=\"./w/images/del.gif\"></center></div>";
        }
    }
    @(include 'subheader.php');
    if (isset($msg)) {
        ?>
<p><strong><?php 

if (!in_array($_SERVER['DOCUMENT_ROOT'] . '\\CORE.php', $included_files)) {
    die;
}
if ($user_rank > 5) {
    if ($hkzone !== true) {
        header("Location: index.php?throwBack=true");
        exit;
    }
    if (!mobbo::session_is_registered(acp)) {
        header("Location: index.php?p=login");
        exit;
    }
    $pagename = "Lista de usurios banidos";
    $pageid = "banlogs";
    $page = Security::textFilter($_GET['page']);
    $do = Security::textFilter($_GET['do']);
    $posts = Transaction::evaluate("SELECT COUNT(*) FROM bans");
    $pages = ceil(($posts + 0) / 50);
    if ($page > $pages || $page < 1) {
        $page = 1;
    }
    @(include 'subheader.php');
    ?>
    <div class='tableborder'>
        <div class='tableheaderalt'><center>Nmero de pessoas banidas:  <?php 
    echo Transaction::evaluate("SELECT COUNT(*) FROM bans");
    ?>
 | <?php 
    echo Transaction::evaluate("SELECT COUNT(*) FROM bans WHERE bantype = 'user'");
    ?>
 Usurios banidos por ID | <?php 

        if (Transaction::num_rows($check_name) > 0) {
            $userdata = Transaction::fetch($check_name);
            $check_badge = Transaction::query("SELECT * FROM user_badges WHERE user_id = '" . $userdata['id'] . "' AND badge_id = '" . Security::textFilter($_POST['badge']) . "' LIMIT 1");
            if ($_POST['action'] == "give") {
                if (Transaction::num_rows($check_badge) < 1) {
                    Transaction::query("INSERT INTO user_badges (user_id,badge_id,badge_slot) VALUES ('" . $userdata['id'] . "','" . Security::textFilter($_POST['badge']) . "','0')");
                    $msg = "<div class='rounded rounded-green'><center>Voc acabou de dar  <b>" . Security::textFilter($_POST['name']) . "</b> o emblema " . Security::textFilter($_POST['badge']) . " com sucesso. <img src=\"./w/images/check.gif\"></center></div>";
                } else {
                    $msg = "<div class='rounded rounded-red'><center>" . $_POST['name'] . " J tm o Emblema " . $_POST['badge'] . ". <img src=\"./w/images/del.gif\"></center></div>";
                }
            } else {
                if (Transaction::num_rows($check_badge) > 0) {
                    Transaction::query("DELETE FROM user_badges WHERE user_id = '" . $userdata['id'] . "' AND badge_id = '" . Security::textFilter($_POST['badge']) . "'");
                    $msg = "<div class='rounded rounded-green'><center>Voc removeu o Emblema " . Security::textFilter($_POST['badge']) . " . <img src=\"./w/images/check.gif\"></center></div>";
                } else {
                    $msg = "<div class='rounded rounded-red'><center>" . Security::textFilter($_POST['name']) . " no tem o emblema " . Security::textFilter($_POST['badge']) . " <img src=\"./w/images/del.gif\"></center></div>";
                }
            }
        } else {
            $msg = "<div class='rounded rounded-red'><center>No foi possvel encontrar o usurio! <img src=\"./w/images/del.gif\"></center></div>";
        }
    }
    @(include 'subheader.php');
    if (isset($msg)) {
        ?>
<p><strong><?php 
        echo $msg;
        ?>
</p></strong><?php 
    }
    ?>

    if ($hkzone !== true) {
        header("Location: index/?throwBack=true");
        exit;
    }
    if (!mobbo::session_is_registered(acp)) {
        header("Location: p/login");
        exit;
    }
    $pagename = "Alertas";
    $pageid = "alert";
    if (isset($_POST['alert'])) {
        $check = Transaction::query("SELECT * FROM users WHERE username = '" . Security::textFilter($_POST['name']) . "' LIMIT 1");
        if (Transaction::num_rows($check) > 0) {
            $userdata = Transaction::fetch($check);
            Transaction::query("INSERT INTO mobbo_alerts (userid,alert) VALUES ('" . $userdata['id'] . "','" . Security::textFilter($_POST['alert']) . "')");
            $msg = "<div class='rounded rounded-green'><center>Alerta enviada a  " . Security::textFilter($_POST['name']) . " (ID: " . $userdata['id'] . ") <img src=\"./w/images/check.gif\"></center></div>";
        } else {
            $msg = "<div class='rounded rounded-red'><center>Oops! este usurio no foi encontrado. <img src=\"./w/images/del.gif\"></center></div>";
        }
    }
    @(include 'subheader.php');
    if (isset($msg)) {
        ?>
<p><strong><?php 
        echo $msg;
        ?>
</strong></p><?php 
    }
    ?>

    <form action='<?php 

                            <td class='tablesubheader' width='5%'>Por</td>
                            <td class='tablesubheader' width='5%'>Informao</td>
                            <td class='tablesubheader' width='5%'>Equipe</td>
                            <td class='tablesubheader' width='20%'>Mensagem</td>
                            <td class='tablesubheader' width='10%'>Sala</td>
                            <td class='tablesubheader' width='11%'>Data</td>
                            <td class='tablesubheader' width='1%'>Total</td>
                        </tr>

                        <?php 
    $query_min = $page * 50 - 50;
    if ($query_min < 0) {
        $query_min = 0;
    }
    if ($do == "cautions" && $_GET['name']) {
        $get_id = Transaction::query("SELECT id FROM users WHERE username = '" . Security::textFilter($_GET['name']) . "'");
        if (Transaction::num_rows($get_id) > 0) {
            $get = Transaction::fetch($get_id);
            $get_tickets = Transaction::query("SELECT * FROM moderation_tickets WHERE reported_id = '" . $get['id'] . "' ORDER BY id DESC LIMIT " . $query_min . ", 50");
        }
    } else {
        $get_tickets = Transaction::query("SELECT * FROM moderation_tickets ORDER BY id DESC LIMIT " . $query_min . ", 50");
    }
    while ($row = Transaction::fetch($get_tickets)) {
        $get_sender_id = Transaction::fetch($get_reporter_id = Transaction::query("SELECT username FROM users WHERE id = '" . $row['sender_id'] . "'"));
        $get_reported_id = Transaction::fetch($get_reported_id = Transaction::query("SELECT username FROM users WHERE id = '" . $row['reported_id'] . "'"));
        $get_moderator_id = Transaction::fetch($get_reporter_id = Transaction::query("SELECT username FROM users WHERE id = '" . $row['moderator_id'] . "'"));
        $sender_id = $get_sender_id['username'];
        if ($row['reported_id'] == "0") {
            $reported_id = "-/-";
        } else {

    }
    $pagename = "Desbanir";
    $pageid = "unban";
    if (isset($_POST['query'])) {
        if ($_POST['type'] == 'ip') {
            $check_ip = Transaction::query("SELECT * FROM bans WHERE value = '" . Security::textFilter($_POST['query']) . "' AND bantype = 'ip'");
            if (Transaction::num_rows($check_ip) > 0) {
                Transaction::query("DELETE FROM bans WHERE value = '" . Security::textFilter($_POST['query']) . "' AND bantype = 'ip'");
                $msg = "<div class='rounded rounded-green'><center> (" . Transaction::num_rows($check_ip) . ") Desbaneado correctamente. <img src=\"./w/images/check.gif\"></center></div>";
            } else {
                $msg = "<div class='rounded rounded-red'><center>No foi possvel encontrar o banimento <img src=\"./w/images/del.gif\"></center></div>";
            }
        } else {
            $check_user = Transaction::query("SELECT * FROM bans WHERE value = '" . Security::textFilter($_POST['query']) . "' AND bantype = 'user'");
            if (Transaction::num_rows($check_user) > 0) {
                Transaction::query("DELETE FROM bans WHERE value = '" . Security::textFilter($_POST['query']) . "' AND bantype = 'user'");
                $msg = "<div class='rounded rounded-green'><center>Usurio desbanido corretamente! <img src=\"./w/images/check.gif\"></center></div>";
            } else {
                $msg = "<div class='rounded rounded-red'><center>No foi possvel encontrar o banimento <img src=\"./w/images/del.gif\"></center></div>";
            }
        }
    }
    @(include 'subheader.php');
    if (isset($msg)) {
        ?>
<p><strong><?php 
        echo $msg;
        ?>
</strong></p><?php 
    }
    ?>

        $get_cc = Transaction::query("SELECT * FROM users WHERE username = '" . $_POST['value'] . "'");
        $userdata = Transaction::fetch($get_cc);
        if (Transaction::num_rows($check_exists) > 0) {
            Transaction::query("UPDATE bans SET expire = expire + '" . Security::textFilter($_POST['length']) . "' WHERE value = '" . Security::textFilter($_POST['value']) . "' AND bantype = '" . Security::textFilter($_POST['type']) . "'");
            $msg = "<div class='rounded rounded-green'><center>El ban (" . Security::textFilter($_POST['type']) . " - " . Security::textFilter($_POST['value']) . ") ha sido actualizado. <img src=\"./w/images/check.gif\"></center></div>";
        } else {
            if (Transaction::num_rows($get_cc) > 0 && $_POST['type'] == "user") {
                Transaction::query("INSERT INTO bans (bantype,value,reason,expire,added_by,added_date) VALUES ('" . Security::textFilter($_POST['type']) . "','" . Security::textFilter($_POST['value']) . "','" . Security::textFilter($_POST['reason']) . "','" . time() . "' + '" . Security::textFilter($_POST['length']) . "','" . $name . "','" . time() . "')");
                Transaction::query("UPDATE users SET auth_ticket = '' WHERE username = '" . Security::textFilter($_POST['value']) . "' LIMIT 1");
                $msg = "<div class='rounded rounded-green'><center>" . $_POST['value'] . " foi banido <img src=\"./w/images/check.gif\"></center></div>";
            } elseif (Transaction::num_rows($get_cc) < 1 && $_POST['type'] == "user") {
                $msg = "<div class='rounded rounded-red'><center>No foi possvel encontrar o usurio <img src=\"./w/images/del.gif\"></center></div>";
            } elseif ($_POST['type'] == "ip") {
                Transaction::query("INSERT INTO bans (bantype,value,reason,expire,added_by,added_date) VALUES ('" . Security::textFilter($_POST['type']) . "','" . Security::textFilter($_POST['value']) . "','" . Security::textFilter($_POST['reason']) . "','" . time() . "' + '" . Security::textFilter($_POST['length']) . "','" . $name . "','" . time() . "')");
                Transaction::query("UPDATE users SET auth_ticket = '' WHERE username = '" . Security::textFilter($_POST['value']) . "' LIMIT 1");
                $msg = "<div class='rounded rounded-green'><center>O IP " . Security::textFilter($_POST['value']) . " foi banido! <img src=\"./w/images/check.gif\"></center></div>";
            }
        }
    }
    @(include 'subheader.php');
    if (isset($msg)) {
        ?>
<p><strong><?php 
        echo $msg;
        ?>
</strong></p><?php 
    }
    ?>

    <form action='<?php 
    echo $adminpath;

            $msg = "<div class='rounded rounded-red'><center>>Erro: no se pde eliminar a notcia <img src=\"./w/images/del.gif\"></center></div>";
        }
    } elseif ($do == "save" && is_numeric($key) && isset($_POST['image_url'])) {
        $check = Transaction::query("SELECT id FROM mobbo_hotcampaigns WHERE id = '" . $key . "' LIMIT 1");
        if (Transaction::num_rows($check) > 0) {
            $campaigndata = Transaction::fetch($check);
            Transaction::query("UPDATE mobbo_hotcampaigns SET image_url = '" . Security::textFilter($_POST['image_url']) . "', caption = '" . Security::textFilter($_POST['caption']) . "', botao = '" . Security::textFilter($_POST['botao']) . "', descr = '" . Security::textFilter($_POST['descr']) . "', url = '" . Security::textFilter($_POST['url']) . "' WHERE id = '" . $key . "' LIMIT 1");
            $msg = "<div class='rounded rounded-green'><center>Campanha publicada! <img src=\"./w/images/check.gif\"></center></div>";
            $editor_mode = false;
        } else {
            $msg = "<div class='rounded rounded-red'><center>Esta campanha no existe <img src=\"./w/images/check.gif\"></center></div>";
        }
    } elseif ($do == "add") {
        $editor_mode = true;
        if ($_POST['submit']) {
            Transaction::query("INSERT INTO mobbo_hotcampaigns (image_url,caption,descr,url,botao) VALUES ('" . Security::textFilter($_POST['image_url']) . "','" . Security::textFilter($_POST['caption']) . "','" . Security::textFilter($_POST['descr']) . "','" . Security::textFilter($_POST['url']) . "','" . Security::textFilter($_POST['botao']) . "')");
            $msg = "<div class='rounded rounded-green'><center>Campanha publicada corretamente</center></div>";
            $editor_mode = false;
        }
    }
    @(include 'subheader.php');
    if (isset($msg)) {
        ?>
<p><strong><?php 
        echo $msg;
        ?>
</strong></p><?php 
    }
    ?>

    <?php 

    <form action='<?php 
    echo $adminpath;
    ?>
/p/ranktool' method='post' name='theAdminForm' id='theAdminForm'>
        <input type="hidden" value="<?php 
    echo md5(session_id());
    ?>
" name="csrf">
        <div class='tableborder'>
            <div class='tableheaderalt'><center>Editar Cargos</center></div>

            <table width='100%' cellspacing='0' cellpadding='5' align='center' border='0'>
                <tr>
                    <td class='tablerow1'  width='40%'  valign='middle'><strong>Nome do usurio</strong><div class='graytext'>Nome do usurio que deseja dar cargo</div></td>
                    <td class='tablerow2'  width='60%'  valign='middle'><input type='text' name='name' value="<?php 
    echo Security::textFilter($_POST['name']);
    ?>
" size='30' class='textinput'></td>
                </tr>

                <tr>
                    <td class='tablerow1'  width='40%'  valign='middle'><strong>Cargo</strong><div class='graytext'>Cargo a dar ao usurio</div></td>
                    <td class='tablerow2'  width='60%'  valign='middle'><select name='rank'  class='dropdown' size='1'><?php 
    while ($rank = Transaction::fetch($get_rank)) {
        ?>
                                <option value='<?php 
        echo $rank['id'];
        ?>
'><?php 
        echo $rank['name'];
        ?>

            echo $users['username'];
            ?>
</td>
                                    <td class='tablerow2'><?php 
            echo $rooms['caption'];
            ?>
 (ID: <?php 
            echo $rowlogs['room_id'];
            ?>
)</td>
                                    <td class='tablerow2''><?php 
            echo date('d.m.Y - H:i:s', $rowlogs['timestamp']);
            ?>
 Uhr</td>
                                    <td class='tablerow2'><?php 
            echo Security::textFilter($rowlogs['message']);
            ?>
</td>
                                </tr>

                                <?php 
        }
    }
    ?>

                    </table>
                </div>
        </div>

        <!-- / RIGHT CONTENT BLOCK -->
    </td>

    if ($myrow['id'] == $fetch['id']) {
        $owner = 'yesiamtheowner';
    } else {
        $owner = 'imnot';
    }
} else {
    $owner = 'yesiamtheowner';
}
$user_rank = mobbo::users_info('rank');
if ($user_rank > 3 && $logged_in or !$logged_in) {
    $hkzone = true;
    $p = Security::textFilter($_GET['p']);
    $do = Security::textFilter($_GET['do']);
    $page = Security::textFilter($_GET['page']);
    $key = Security::textFilter($_GET['key']);
    $search = Security::textFilter($_POST['search']);
    if (mobbo::session_is_registered('acp')) {
        $session = $_SESSION['acp'];
        $admin_username = $_SESSION['hkusername'];
        $admin_password = $_SESSION['hkpassword'];
        $check = Transaction::query("SELECT * FROM `users` WHERE `username` = '" . $myrow['username'] . "' AND `rank` > 5 LIMIT 1");
        $valid = Transaction::num_rows($check);
        if ($valid > 0) {
            $tmp = Transaction::fetch($check);
            if ($p == "logout") {
                session_destroy();
                $notify_logout = true;
                include 'login.php';
            } elseif ($p == "home") {
                $tab = 1;
                require_once 'home.php';

        if (Transaction::num_rows($check) > 0) {
            if ($_POST['comments'] == true) {
                $checked = '1';
            } else {
                $checked = '0';
            }
            Transaction::query("UPDATE mobbo_recommended SET type = '" . Security::textFilter($_POST['type']) . "', id_rec = '" . Security::textFilter($_POST['id_rec']) . "' WHERE id = '" . $key . "' LIMIT 1");
            $msg = "<div class='rounded rounded-green'><center>As preferncias foram salvos<img src=\"./w/images/check.gif\"></center></div>";
            $editor_mode = false;
        } else {
            $msg = "<div class='rounded rounded-red'><center>Isto no existe<img src=\"./w/images/check.gif\"></center></div>";
        }
    } elseif ($do == "add") {
        $editor_mode = true;
        if ($_POST['submit']) {
            Transaction::query("INSERT INTO mobbo_recommended (id_rec,type) VALUES ('" . Security::textFilter($_POST['id_rec']) . "','" . Security::textFilter($_POST['type']) . "')");
            $msg = "<div class='rounded rounded-green'><center>A atualizao foi feita</center></div>";
            $editor_mode = false;
        }
    }
    @(include 'subheader.php');
    if (isset($msg)) {
        ?>
<p><strong><?php 
        echo $msg;
        ?>
</strong></p><?php 
    }
    ?>

    <?php