Kan iemand plz helpen?

  • Ik heb hier mijn forum script...
    Volgens mij dot hij het niet helemaal zoals het hoort.
    Ik heb wel wat sql tables enzo toegevoegd in men database, maar ben er niet zeker van of het zo goed zit..
    hier is de forum script:
    [code=php]<?php


    include 'includes/config.php';


    include("ubb.php");





    if(isset($_GET['sub'])){
    $_GET['sub']=htmlspecialchars(addslashes($_GET['sub']));
    }
    if(isset($_GET['p'])){
    $_GET['p']=htmlspecialchars(addslashes($_GET['p']));
    }
    if(isset($_GET['topic'])){
    $_GET['topic']=htmlspecialchars(addslashes($_GET['topic']));
    }
    if(isset($_GET['slotje'])){
    $_GET['slotje']=htmlspecialchars(addslashes($_GET['slotje']));
    }
    if(isset($_GET['delreply'])){
    $_GET['delreply']=htmlspecialchars(addslashes($_GET['delreply']));
    }
    if(isset($_GET['verplaats'])){
    $_GET['verplaats']=htmlspecialchars(addslashes($_GET['verplaats']));
    }
    if(isset($_POST['forum'] )){
    $_POST['forum'] =htmlspecialchars(addslashes($_POST['forum'] ));
    }
    if(isset($_GET['reageer'])){
    $_GET['reageer']=htmlspecialchars(addslashes($_GET['reageer']));
    }
    if(isset($_GET['quote'])){
    $_GET['quote']=htmlspecialchars(addslashes($_GET['quote']));
    }
    if(isset($_GET['edittopic'])){
    $_GET['edittopic']=htmlspecialchars(addslashes($_GET['edittopic']));
    }
    if(isset($_GET['editreply'])){
    $_GET['editreply']=htmlspecialchars(addslashes($_GET['editreply']));
    }
    if(isset($_GET['delreply'])){
    $_GET['delreply']=htmlspecialchars(addslashes($_GET['delreply']));
    }
    if(isset($_GET['sub'])){
    $_GET['sub']=htmlspecialchars(addslashes($_GET['sub']));
    }
    if(isset($_GET['sub'])){
    $_GET['sub']=htmlspecialchars(addslashes($_GET['sub']));
    }
    if(isset($_GET['sub'])){
    $_GET['sub']=htmlspecialchars(addslashes($_GET['sub']));
    }
    if(isset($_GET['sub'])){
    $_GET['sub']=htmlspecialchars(addslashes($_GET['sub']));
    }


    if(! $_GET['p']) {
    $begin = 0;
    }
    else {
    $begin = $_GET['p'];
    }

    /* ------------------------- */ ?>
    <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
    <html>
    <head>
    <script language="javascript">
    function icon(theicon) {
    document.form3.info.value += ""+theicon;
    document.form3.info.focus();
    }


    function setsmilie(which){
    document.form3.info.value = document.form3.info.value + which;
    }


    </script>
    <title>GamesCrime - Forum</title>
    <link rel="stylesheet" type="text/css" href="css-v1.css">
    <body style="background: #4B3D32; margin: 0px;">




    <?
    if($_GET['sub']) {
    $query2 = mysql_query("SELECT * FROM `[forum_sub]` WHERE `id`={$_GET['sub']}");
    $sub = mysql_fetch_object($query2);
    if($sub->mods == "") {
    $mods = "Geen";
    } else {
    $mods = $sub->mods;
    }
    if($data->forumstatus == "gwsp2") {
    }
    elseif($data->forumstatus == "gwsp1") {
    }
    else {
    if($_GET['sub'] == 12 && $data->type != 1) {
    print " <table width=\"75%\" cellspacing=0><tr><td class=\"subTitle\"><b>Forum</b></td></tr><tr><td class=\"mainTxt\"><table width=\"75%\" align=\"center\"><tr><td>Dit forum is alleen voor gangsters.</td></tr></table></td></tr></table>\n";
    exit;
    }
    if($_GET['sub'] == 13 && $data->type != 2) {
    print " <table width=\"75%\" cellspacing=0><tr><td class=\"subTitle\"><b>Forum</b></td></tr><tr><td class=\"mainTxt\"><table width=\"75%\" align=\"center\"><tr><td>Dit forum is alleen voor terroristen.</td></tr></table></td></tr></table>\n";
    exit;
    }
    if($_GET['sub'] == 14 && $data->type != 3 ) {
    print " <table width=\"75%\" cellspacing=0><tr><td class=\"subTitle\"><b>Forum</b></td></tr><tr><td class=\"mainTxt\"><table width=\"75%\" align=\"center\"><tr><td>Dit forum is alleen voor agenten.</td></tr></table></td></tr></table>\n";
    exit;
    }
    }


    print " <table width=\"100%\" cellspacing=0><tr><td class=\"subTitle\"><b>Forum</b></td></tr><tr><td class=\"mainTxt\"><table width=\"75%\" align=\"center\"><tr><td><div align=\"left\"><a href=\"forum.php?newtopic={$_GET['sub']}\"><b>Nieuw Onderwerp</b></a></div><div align=\"right\">\n";
    print " </div></td></tr><tr><td align=\"left\">Moderator(s): <font color=red><b>$mods</b></font></td></tr><tr><td><table align=\"center\" width=\"100%\"><tr><td width=\"5%\" align=\"center\" class=\"subTitle\" style=\"letter-spacing: normal;\">&nbsp;</td><td align=\"center\" class=\"subTitle\" style=\"letter-spacing: normal;\" width=\"45%\"><b>Topic</b></td><td align=\"center\" class=\"subTitle\" style=\"letter-spacing: normal;\" width=\"10%\"><b>Door</b></td><td align=\"center\" class=\"subTitle\" style=\"letter-spacing: normal;\" width=\"10%\"><b>Reacties</b></td><td align=\"center\" class=\"subTitle\" style=\"letter-spacing: normal;\" width=\"30%\"><b>Laatste reactie</b></td></tr>\n";
    $query = mysql_query("SELECT * FROM `[forum_topics]` WHERE `subid`={$_GET['sub']} ORDER BY `date` DESC");
    while($forum = mysql_fetch_object($query)) {
    $forum->title = eregi_replace("kanker", "<img src=\"images/smilies/icon_censored.gif\">", $forum->title );
    $forum->title = eregi_replace("kut", "<img src=\"images/smilies/icon_censored.gif\">", $forum->title );
    $forum->title = eregi_replace("kloten", "<img src=\"images/smilies/icon_censored.gif\">", $forum->title );
    $forum->title = eregi_replace("pik", "<img src=\"images/smilies/icon_censored.gif\">", $forum->title );
    $forum->title = eregi_replace("penis", "<img src=\"images/smilies/icon_censored.gif\">", $forum->title );
    $forum->title = eregi_replace("vagina", "<img src=\"images/smilies/icon_censored.gif\">", $forum->title );
    $forum->title = eregi_replace("lul", "<img src=\"images/smilies/icon_censored.gif\">", $forum->title );
    $forum->title = eregi_replace("kanker", "<img src=\"images/smilies/icon_censored.gif\">", $forum->title );
    $forum->title = eregi_replace("cancer", "<img src=\"images/smilies/icon_censored.gif\">", $forum->title );
    $forum->title = eregi_replace("leier", "<img src=\"images/smilies/icon_censored.gif\">", $forum->title );
    $forum->title = eregi_replace("fuck", "<img src=\"images/smilies/icon_censored.gif\">", $forum->title );
    $forum->title = eregi_replace("fuck", "<img src=\"images/smilies/icon_censored.gif\">", $forum->title );
    $forum->title = eregi_replace("fuck", "<img src=\"images/smilies/icon_censored.gif\">", $forum->title );
    $forum->title = eregi_replace("fuck", "<img src=\"images/smilies/icon_censored.gif\">", $forum->title );
    $forum->title = eregi_replace("neuk", "<img src=\"images/smilies/icon_censored.gif\">", $forum->title );
    $forum->title = eregi_replace("anaal", "<img src=\"images/smilies/icon_censored.gif\">", $forum->title );
    if($forum->slotje == 0) {
    $image = "opentopic.gif";
    }
    else {
    $image = "closed.gif";
    }
    if($forum->datum == "") {
    $forum->datum = "Geen";
    }
    if($forum->title == "") {
    $forum->title = "Geen";
    }
    print " <tr><td width=\"5%\"><a href=\"forum.php?verplaats={$forum->id}\"><img src=\"images/icons/{$image}\" border=0></a></td><td width=\"45%\"><a href=\"forum.php?topic={$forum->id}\"><b>$forum->title</b></a></td><td align=\"center\" width=\"10%\"><a href=\"profile.php?x={$forum->login}\">$forum->login</a></td><td align=\"center\" width=\"10%\">$forum->replys</td><td width=\"30%\">$forum->datum</td></tr><tr>\n";
    }
    print " </table></tr></td></table></td></tr></table>\n";
    }
    elseif($_GET['topic']) {
    if(isset($_POST['add'])) {
    $id = $_GET['topic'];
    $bericht = $_POST['message'];
    $datum = date("d-m-Y H:i");
    $query = mysql_query("SELECT * FROM `[forum_topics]` WHERE `id`={$_GET['topic']}");
    $lol = mysql_fetch_object($query);
    print " <table width=\"100%\" cellspacing=0><tr><td class=\"subTitle\"><b>Forum</b></td></tr><tr><td class=\"mainTxt\"><table width=\"100%\" align=\"center\"><tr><td align=\"center\">Je bericht is geplaatst.<BR><BR><a href=\"forum.php?topic={$_GET['topic']}\">Terug</a></td></tr></table></td></tr></table>\n";
    mysql_query("INSERT INTO `[foum_replys]`(topicid,subid,datum,login,title,text,date) values($id,'{$lol->subid}','$datum','$data->login','RE:','$bericht',NOW())") or die("er is een fout opgetreden. Ging het volgende mis: <br>\n".mysql_error()."<br>Extra informatie:".mysql_errno());
    mysql_query("UPDATE `[forum_topics]` SET `replys`=`replys`+1,`datum`='$datum',`date1`=NOW() WHERE `id`={$_GET['topic']}") or die("er is een fout opgetreden. Ging het volgende mis: <br>\n".mysql_error()."<br>Extra informatie:".mysql_errno());
    mysql_query("UPDATE `[forum_sub]` SET `replys`=`replys`+1 WHERE `id`={$lol->subid}") or die("er is een fout opgetreden. Ging het volgende mis: <br>\n".mysql_error()."<br>Extra informatie:".mysql_errno());
    mysql_query("UPDATE `[users]` SET `forumposts`=`forumposts`+1 WHERE `login`='{$data->login}'") or die("er is een fout opgetreden. Ging het volgende mis: <br>\n".mysql_error()."<br>Extra informatie:".mysql_errno());
    }
    else {
    $query = mysql_query("SELECT * FROM `[forum_topics]` WHERE `id`={$_GET['topic']}");
    $topic = mysql_fetch_object($query);
    $user_query2 = mysql_query("SELECT UNIX_TIMESTAMP(`online`) AS `online`,`forumstatus`,`login`,`forumposts`,`avatar` FROM `[users]` WHERE `login`='{$topic->login}'");
    $user2 = mysql_fetch_object($user_query2);



    if($user2->forumstatus == "gwsp1") {
    $status = "<font color=green><b>Moderator</b></font>";
    }
    elseif($user2->forumstatus == "gwsp2") {
    $status = "<font color=red><b>Webmaster</b></font>";
    }
    elseif($user2->forumposts <= 50) {
    $status = "Forum Beginner";
    }
    elseif($user2->forumposts <= 150) {
    $status = "Forum Freak";
    }
    elseif($user2->forumposts > 150) {
    $status = "Forum God";
    }
    elseif($user2->forumposts > 750) {
    $status = "Forum Piraat";
    }
    else {
    $status = "Normaal";
    }
    if(time() - $user2->online < 300) {
    $online2 = "<img src=\"images/icons/online.gif\"> <font color=green><b>Online</b></font>";
    }
    else {
    $online2 = "<img src=\"images/icons/offline.gif\"> <font color=red><b>Offline</b></font>";
    }
    $topic->text = htmlspecialchars($topic->text);
    $topic->text = nl2br($topic->text);
    $topic->text = str_replace("", "<b>",$topic->text);
    $topic->text = str_replace("
    ", "</b>",$topic->text);
    $topic->text = str_replace("", "<i>",$topic->text);
    $topic->text = str_replace("
    ", "</i>",$topic->text);
    $topic->text = str_replace("", "<u>",$topic->text);
    $topic->text = str_replace("
    ", "</u>",$topic->text);
    $topic->text = eregi_replace("\\[color=([^\\[]*)\\]([^\\[]*)\\[/color\\]","<font color=\"\\1\">\\2</font>",$topic->text);
    $topic->text = eregi_replace("\\[email=([^\\[]*)\\]([^\\[]*)\\[/email\\]", "<a href=\"mailto:\\1\">\\2</a>",$topic->text);
    $topic->text = eregi_replace("\\[url=([^\\[]*)\\]([^\\[]*)\\[/url\\]","<a href=\"\\1\" target=_blank>\\2</a>",$topic->text);
    $topic->text = eregi_replace("\\[img]([^\\[]*)\\[/img\\]","<img src=\"\\1\">",$topic->text);
    $topic->text = eregi_replace("\\

    ";
    }
    print " <table width=\"100%\" cellspacing=0><tr><td class=\"subTitle\"><b>Forum</b></td></tr><tr><td class=\"mainTxt\"><table width=\"100%\" align=\"center\"><tr><td align=\"center\" class=\"subTitle\"><B>Reageren</b></td></tr><form method=\"post\"><tr><td align=\"center\" class=\"mainTxt\"><textarea rows=\"6\" name=\"message\" cols=\"60\" maxlength=\"10000\">{$quote}</textarea><BR><input type=\"submit\" name=\"add\" value=\" Toevoegen \">&nbsp;<input type=\"button\" value=\" Omhoog \" onclick=\"window.location=('#top')\"></td></tr></form></table></tr></td></table>\n";
    }
    }
    }
    elseif($_GET['newtopic']) {
    if(isset($_POST['add'])) {
    $id = htmlspecialchars(addslashes($_GET['newtopic']));
    $titel = htmlspecialchars(addslashes($_POST['title']));
    $bericht = htmlspecialchars(addslashes($_POST['message']));
    $datum = date("d-m-Y H:i");
    print " <table width=\"100%\" cellspacing=0><tr><td class=\"mainTxt\"><table width=\"100%\" align=\"center\"><tr><td class=\"subTitle\" align=\"left\"><b><img src=\"images/icons/blokje.jpg\"> Forum</b></td></tr><tr><td align=\"center\">Je bericht is geplaatst.</tr></td></table></td></tr></table>\n";
    mysql_query("INSERT INTO `[forum_topics]`(subid,datum1,login,title,text,date,date1) values($id,'$datum','$data->login','$titel','$bericht',NOW(),NOW())") or die("er is een fout opgetreden. Ging het volgende mis: <br>\n".mysql_error()."<br>Extra informatie:".mysql_errno());
    mysql_query("UPDATE `[forum_sub]` SET `topics`=`topics`+1 WHERE `id`={$id}") or die("er is een fout opgetreden. Ging het volgende mis: <br>\n".mysql_error()."<br>Extra informatie:".mysql_errno());
    mysql_query("UPDATE `[users]` SET `forumposts`=`forumposts`+1 WHERE `login`='{$data->login}'") or die("er is een fout opgetreden. Ging het volgende mis: <br>\n".mysql_error()."<br>Extra informatie:".mysql_errno());
    }
    else {
    print <<<ENDHTML
    <script language="javascript">
    function icon(theicon) {
    document.form3.info.value += ""+theicon;
    document.form3.info.focus();
    }


    function setsmilie(which){
    document.form3.info.value = document.form3.info.value + which;
    }


    </script>
    <table width="100%" cellspacing=0>
    <tr><td class="subTitle"><b>Forum</b></td></tr>
    <tr><td class="mainTxt">
    <table width="100%" align="center">
    <tr><td class="mainTxt">
    <table align="center" width="100%">
    <form method="post" name="form1">
    <tr><td class="subTitle" colspan=3><b>Nieuw Onderwerp</b></td><td width=\"100%"></td></tr>
    <tr>
    <td>Titel:</td>
    <td><input type="text" size="20" name="title"></td><td width="100%"></td>
    </tr>
    <tr>
    <td>Bericht:</td>
    <td>
    <textarea rows="15" name="message" cols="50" maxlength="10000"></textarea></td><td width="100%"></td>
    </tr>
    <tr><td></td><td align="right"><input type="submit" name="add" value="Toevoegen"></td><td width="100%"></td><td width="100%"></td></tr>
    </form>
    </table>
    </tr></td>
    </table>
    </td></tr>
    </table>
    ENDHTML;
    }
    }
    elseif($_GET['edittopic']) {
    $query = mysql_query("SELECT * FROM `[forum_topics]` WHERE `id`={$_GET['edittopic']} AND `login`='{$data->login}'");
    $num = mysql_num_rows($query);
    $topic = mysql_fetch_object($query);
    if($num == 1) {
    if(isset($_POST['change'])) {
    $titel = htmlspecialchars(addslashes($_POST['title']));
    $bericht = htmlspecialchars(addslashes($_POST['message']));
    $id = htmlspecialchars(addslashes($_GET['edittopic']));
    print " <table width=\"100%\" cellspacing=0><tr><td class=\"subTitle\"><b>Forum</b></td></tr><tr><td class=\"mainTxt\"><table width=\"100%\" align=\"center\"><tr><td align=\"center\">Je bericht is gewijzigt.</tr></td></table></td></tr></table>\n";
    mysql_query("UPDATE `[forum_topics]` SET `title`='{$titel}',`text`='{$bericht}' WHERE `id`={$id}") or die("er is een fout opgetreden. Ging het volgende mis: <br>\n".mysql_error()."<br>Extra informatie:".mysql_errno());
    }
    else {
    print " <table width=\"100%\" cellspacing=0>\n";
    print " <tr><td class=\"subTitle\"><b>Forum</b></td></tr>\n";
    print " <tr><td class=\"mainTxt\">\n";
    print " <table width=\"100%\" align=\"center\">\n";
    print " <tr><td class=\"mainTxt\">\n";
    print " <table align=\"center\" width=\"100%\"><form method=\"post\">\n";
    print " <tr><td class=\"mainTxt\" colspan=3>Topic bewerken</td></tr>\n";
    print " <tr><td>Titel:</td><td><input type=\"text\" value=\"$topic->title\" size=\"20\" name=\"title\"></td><td width=\"100%\"></td></tr>\n";
    print " <tr><td>Bericht:</td><td><textarea name=\"message\" cols=40 rows=10>$topic->text</textarea></td><td width=\"100%\"></td></tr>\n";
    print " <tr><td></td><td align=\"right\"><input type=\"submit\" name=\"change\" value=\"Verander\"></td><td width=\"100%\"></td></tr>\n";
    print " </form</table>\n";
    print " </tr></td>\n";
    print " </table>\n";
    print " </td></tr>\n";
    print " </table>\n";
    }
    }
    else {
    print " <table width=\"100%\" cellspacing=0>\n";
    print " <tr><td class=\"subTitle\"><b>Forum</b></td></tr>\n";
    print " <tr><td class=\"mainTxt\">\n";
    print " <table width=\"100%\" align=\"center\">\n";
    print " <tr><td align=\"center\">\n";
    print " Error!\n";
    print " </tr></td>\n";
    print " </table>\n";
    print " </td></tr>\n";
    print " </table>\n";
    }
    }
    elseif($_GET['editreply']) {
    $query = mysql_query("SELECT * FROM `[foum_replys]` WHERE `id`={$_GET['editreply']} AND `login`='{$data->login}'");
    $num = mysql_num_rows($query);
    $topic = mysql_fetch_object($query);
    if($num == 1) {
    if(isset($_POST['change'])) {
    $titel = htmlspecialchars(addslashes($_POST['title']));
    $bericht = htmlspecialchars(addslashes($_POST['message']));
    $id = htmlspecialchars(addslashes($_GET['editreply']));
    print " <table width=\"100%\" cellspacing=0><tr><td class=\"subTitle\"><b>Forum</b></td></tr><tr><td class=\"mainTxt\"><table width=\"100%\" align=\"center\"><tr><td align=\"center\">Je bericht is gewijzigt.</tr></td></table></td></tr></table>\n";
    mysql_query("UPDATE `[foum_replys]` SET `text`='{$bericht}' WHERE `id`={$id}") or die("er is een fout opgetreden. Ging het volgende mis: <br>\n".mysql_error()."<br>Extra informatie:".mysql_errno());


    }
    else {
    print " <table width=\"100%\" cellspacing=0>\n";
    print " <tr><td class=\"subTitle\"><b>Forum</b></td></tr>\n";
    print " <tr><td class=\"mainTxt\">\n";
    print " <table width=\"100%\" align=\"center\">\n";
    print " <tr><td class=\"mainTxt\">\n";
    print " <table align=\"center\" width=\"100%\"><form method=\"post\">\n";
    print " <tr><td class=\"mainTxt\" colspan=3>Reactie bewerken</td></tr>\n";
    print " <tr><td>Bericht:</td><td><textarea name=\"message\" cols=40 rows=10>$topic->text</textarea></td><td width=\"100%\"></td></tr>\n";
    print " <tr><td></td><td align=\"right\"><input type=\"submit\" name=\"change\" value=\"Verander\"></td><td width=\"100%\"></td></tr>\n";
    print " </form</table>\n";
    print " </tr></td>\n";
    print " </table>\n";
    print " </td></tr>\n";
    print " </table>\n";
    }
    }
    elseif($data->forumstatus == "gwsp1" || $data->forumstatus == "gwsp2") {
    $query2 = mysql_query("SELECT * FROM `[foum_replys]` WHERE `id`={$_GET['editreply']}");
    $topic2 = mysql_fetch_object($query2);
    if(isset($_POST['change'])) {
    $titel = $_POST['title'];
    $bericht = $_POST['message'];
    $id = $_GET['editreply'];
    print " <table width=\"100%\" cellspacing=0><tr><td class=\"subTitle\"><b>Forum</b></td></tr><tr><td class=\"mainTxt\"><table width=\"100%\" align=\"center\"><tr><td align=\"center\">Je bericht is gewijzigt.</tr></td></table></td></tr></table>\n";
    mysql_query("UPDATE `[foum_replys]` SET `text`='{$bericht}' WHERE `id`={$id}") or die("er is een fout opgetreden. Ging het volgende mis: <br>\n".mysql_error()."<br>Extra informatie:".mysql_errno());


    }
    else {
    print " <table width=\"100%\" cellspacing=0>\n";
    print " <tr><td class=\"subTitle\"><b>Forum</b></td></tr>\n";
    print " <tr><td class=\"mainTxt\">\n";
    print " <table width=\"100%\" align=\"center\">\n";
    print " <tr><td class=\"mainTxt\">\n";
    print " <table align=\"center\" width=\"100%\"><form method=\"post\">\n";
    print " <tr><td class=\"mainTxt\" colspan=3>Reactie bewerken</td></tr>\n";
    print " <tr><td>Bericht:</td><td><textarea name=\"message\" cols=40 rows=10>$topic2->text</textarea></td><td width=\"100%\"></td></tr>\n";
    print " <tr><td></td><td align=\"right\"><input type=\"submit\" name=\"change\" value=\"Verander\"></td><td width=\"100%\"></td></tr>\n";
    print " </form</table>\n";
    print " </tr></td>\n";
    print " </table>\n";
    print " </td></tr>\n";
    print " </table>\n";
    }
    }
    else {
    print " <table width=\"100%\" cellspacing=0>\n";
    print " <tr><td class=\"subTitle\"><b>Forum</b></td></tr>\n";
    print " <tr><td class=\"mainTxt\">\n";
    print " <table width=\"100%\" align=\"center\">\n";
    print " <tr><td align=\"center\">\n";
    print " Error!\n";
    print " </tr></td>\n";
    print " </table>\n";
    print " </td></tr>\n";
    print " </table>\n";
    }
    }
    elseif($_GET['delreply']) {
    $query = mysql_query("SELECT * FROM `[foum_replys]` WHERE `id`={$_GET['delreply']} AND `login`='{$data->login}'");
    $num = mysql_num_rows($query);
    $topic = mysql_fetch_object($query);
    if($num == 1) {
    $query2 = mysql_query("SELECT * FROM `[foum_topics]` WHERE `id`={$topic->topicid}");
    $sub = mysql_fetch_object($query2);
    $id = $_GET['delreply'];
    print " <table width=\"100%\" cellspacing=0><tr><td class=\"subTitle\"><b>Forum&lt

Participate now!

Heb je nog geen account? Registreer je nu en word deel van onze community!