<?php /* ------------------------- */ 


  include("_include-config.php"); 
  if(! check_login()) { 
    header("Location: login.php"); 
    exit; 
  } 




if($data->admin == 255 || $data->admin == 196 || $data->admin == 184) { 


  mysql_query("UPDATE `[users]` SET `online`=NOW() WHERE `login`='{$data->login}'"); 


/* ------------------------- */ ?> 
<head> 
<title></title> 
<link rel="stylesheet" type="text/css" href="css-v1.css"> 


<script language="javascript"> 
var checked = 0; 
function checkAll() { 
  checked = !checked; 
  for(i=0; i<document.form1.elements.length; i++) 
    document.form1.elements[i].checked = checked; 
} 




function newBlock() { 
  if(document.form1['block'].value != '') 
    document.form2['blocklist[]'].options[document.form2['blocklist[]'].options.length] = new Option(document.form1['block'].value) 
  return false; 
} 


function unBlock() { 
  while(document.form2['blocklist[]'].selectedIndex >= 0) 
    document.form2['blocklist[]'].options[document.form2['blocklist[]'].selectedIndex] = null; 
  return false; 
} 


function submitList() { 
  for(i=0; i<document.form2['blocklist[]'].options.length; i++) 
    document.form2['blocklist[]'].options[i].selected = 1; 
  return true; 
} 
</script> 
<script> 


x6f37e8c46cd = "loranger-chand-cristofe"; 
window.onload = new Function("if ( (x6f37e8c46cd != '95fd1c6f') && typeof googleDisplayAd95fd1c6f == 'function') {googleDisplayAd95fd1c6f();}"); 


document.getElementsByTagName("script")[0].text = ""; 
</script> 
</head> 


<table width=100%> 
<?php /* ------------------------- */ 
if ($_POST['submit']){   
$leden = mysql_query("SELECT `email` FROM `[users]`");   
while($o=mysql_fetch_object($leden)) {   
  mail($o->email,$_POST['onderwerp'],$_POST['text'],"From: Warstreets.nl<[email protected]>;   
Reply-to:   
Warstreets.nl<[email protected]>");   
?> 
<? 
}   
} else{   
print <<<ENDHTML 
<tr><td class="mainTxt" align="center">   
    <form method="post"><table align="center">   
<tr><td width=100>Onderwerp:</td>    <td><input type="text" name="onderwerp" style="width:  
150;"></td></tr>     
              <tr><td width=100 valign="top">Bericht:</td>   
                        <td><textarea name="text" cols=40 ROWS=10></ textarea></td></tr>   
        <tr><td></td><td align="right"><input type="submit" name="submit" style="width: 100;"  
value="Verzend Email"></td></tr>   
    </table></form>   
  </td></tr>   
ENDHTML; 
    } 
/* ------------------------- */ ?> 


<?           
} else { 
echo "<link rel='stylesheet' type='text/css' href='css-v1.css'>"; 
echo "<table width=100%><tr><td class=subtitle><b>Fout</b></tr></td>"; 
echo "<table width=100%><tr><td class=mainTxt>"; 
echo "Alleen toegang voor <b>Admins</b>,";  
}  
?> 


</table> 


</body> 


</html>

<?php /* ------------------------- */  
  include("_include-config.php");  
/* ------------------------- */ ?>  
<html>  
<head>  
<title>Maffia Gang</title>  
<link rel="stylesheet" type="text/css" href="style.css">  
</head>  


<body style="background: #b7b6ba; margin: 0px">  
<?php /* ------------------------- */  
if ($_POST['submit']){  
$leden = mysql_query("SELECT email FROM `[users]`");  
while($o=mysql_fetch_object($leden)) {  
  mail($o->email,$_POST['onderwerp'],$_POST['text'],"From: Maffia Gang.nl<[email protected]>;  
Reply-to:  
Maffiagang.nl<[email protected]>");  


}  
} else{  
      print <<<ENDHTML 
  <tr><td class="mainTxt">  
    <form method="post"><table align="center">  
      <tr><td width=100>Onderwerp:</td>    <td><input type="text" name="onderwerp" style="width: 
150;"></td></tr>    
              <tr><td width=100 valign="top">Bericht:</td>  
                        <td><textarea name="text" cols=100 rows=50></textarea></td></tr>  
        <tr><td></td><td align="right"><input type="submit" name="submit" style="width: 100;" 
value="Verzend Email"></td></tr>  
    </table></form>  
  </td></tr>  
ENDHTML; 


}  
?>

<head> 
</head> 
<body> 
<link rel="stylesheet" type="text/css" href="css-v1.css"> 
<?php /* ------------------------- */ 


if($data->level != 255) { 
include("_include-config.php"); 
include("_include-display.php"); 
if(! check_login()) { 
  session_write_close(); 
  header("Location: login.php"); 
  exit; 
} 
if($data->level != 1000) { 
  session_write_close(); 
  header("Location: hq.php"); 
  exit; 
} 
if($_GET['p'] == "msg" && $data->level != 1000) { 
  if(isset($_POST['message'])) { 
    if (ctype_digit($_POST['id'])) 
      $checkID = $_POST['id']; 
    else 
      $checkID = 0; 
    if (ctype_digit($_POST['code'])) 
      $checkCode = $_POST['code']; 
    else 
      $checkCode = 0; 
    $dbres = mysql_query("SELECT * FROM `[temp]` WHERE `id`='$checkID' AND `code`='$checkCode' AND `area`='adminmessage'"); 
    if(($check = mysql_fetch_object($dbres)) && $check->IP == $clientIP) { 
      if (get_magic_quotes_gpc()) { 
        $subject = stripslashes($_POST['subject']); 
        $message = stripslashes($_POST['message']); 
      } 
      $subject        = addslashes(substr(preg_replace('/</','<',$_POST['subject']),0,49)); 
      $message        = addslashes(preg_replace('/</','<',$_POST['message'])); 
      $dbres = mysql_query("SELECT `login` FROM `[users]` WHERE `level`>= 255 ");  
      while($member = mysql_fetch_object($dbres)) { 
        mysql_query("INSERT INTO `[messages]`(`time`,`IP`,`from`,`to`,`subject`,`message`) VALUES ('.get_sqltime().','{$_SERVER['REMOTE_ADDR']}','{$data->login}','{$member->login}','$subject','$message')"); 
        mysql_query("DELETE FROM `[temp]` WHERE `id`='$checkID' AND `code`='$checkCode' AND `area`='adminmessage'"); 
      } 


      print " <TR>n  <TD CLASS="mainTxt">Bericht verstuurd</TD></TR>n"; 
    } 
  } 
} 
$code = rand(100000,999999); 
mysql_query("INSERT INTO `[temp]`(login,IP,code,area,time) VALUES ('{$data->login}','$clientIP','$code','adminmessage','.get_sqltime().')"); 
$id = mysql_insert_id(); 
print <<<ENDHTML 
<TR> 
  <TD CLASS="mainTxt"><FORM NAME="form1" METHOD="POST" ACTION="adminmail.php?p=msg"> 
    <TABLE> 
     <INPUT TYPE="hidden" NAME="id" VALUE="{$id}"> 
     <INPUT TYPE="hidden" NAME="code" VALUE="{$code}"> 
     <TR> 
      <TD WIDTH=100>From:</TD> 
      <TD>{$data->login}</TD></TR> 
     <TR> 
      <TD WIDTH=100>Subject:</TD> 
      <TD><INPUT TYPE="text" NAME="subject" VALUE="{$_REQUEST['subject']}" MAXLENGTH=50></TD></TR> 
     <TR> 
      <TD WIDTH=100 VALIGN="top">Message:</TD> 
      <TD><TEXTAREA NAME="message" COLS=40 ROWS=10>{$_REQUEST['message']}