Guthaben Hack Grundversion

BlackDragon_

hier ich hänge auch noch die user.php dran vielleicht brachst die auch ^^
Usercp

code:

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:
132:
133:
134:
135:
136:
137:
138:
139:
140:
141:
142:
143:
144:
145:
146:
147:
148:
149:
150:
151:
152:
153:
154:
155:
156:
157:
158:
159:
160:
161:
162:
163:
164:
165:
166:
167:
168:
169:
170:
171:
172:
173:
174:
175:
176:
177:
178:
179:
180:
181:
182:
183:
184:
185:
186:
187:
188:
189:
190:
191:
192:
193:
194:
195:
196:
197:
198:
199:
200:
201:
202:
203:
204:
205:
206:
207:
208:
209:
210:
211:
212:
213:
214:
215:
216:
217:
218:
219:
220:
221:
222:
223:
224:
225:
226:
227:
228:
229:
230:
231:
232:
233:
234:
235:
236:
237:
238:
239:
240:
241:
242:
243:
244:
245:
246:
247:
248:
249:
250:
251:
252:
253:
254:
255:
256:
257:
258:
259:
260:
261:
262:
263:
264:
265:
266:
267:
268:
269:
270:
271:
272:
273:
274:
275:
276:
277:
278:
279:
280:
281:
282:
283:
284:
285:
286:
287:
288:
289:
290:
291:
292:
293:
294:
295:
296:
297:
298:
299:
300:
301:
302:
303:
304:
305:
306:
307:
308:
309:
310:
311:
312:
313:
314:
315:
316:
317:
318:
319:
320:
321:
322:
323:
324:
325:
326:
327:
328:
329:
330:
331:
332:
333:
334:
335:
336:
337:
338:
339:
340:
341:
342:
343:
344:
345:
346:
347:
348:
349:
350:
351:
352:
353:
354:
355:
356:
357:
358:
359:
360:
361:
362:
363:
364:
365:
366:
367:
368:
369:
370:
371:
372:
373:
374:
375:
376:
377:
378:
379:
380:
381:
382:
383:
384:
385:
386:
387:
388:
389:
390:
391:
392:
393:
394:
395:
396:
397:
398:
399:
400:
401:
402:
403:
404:
405:
406:
407:
408:
409:
410:
411:
412:
413:
414:
415:
416:
417:
418:
419:
420:
421:
422:
423:
424:
425:
426:
427:
428:
429:
430:
431:
432:
433:
434:
435:
436:
437:
438:
439:
440:
441:
442:
443:
444:
445:
446:
447:
448:
449:
450:
451:
452:
453:
454:
455:
456:
457:
458:
459:
460:
461:
462:
463:
464:
465:
466:
467:
468:
469:
470:
471:
472:
473:
474:
475:
476:
477:
478:
479:
480:
481:
482:
483:
484:
485:
486:
487:
488:
489:
490:
491:
492:
493:
494:
495:
496:
497:
498:
499:
500:
501:
502:
503:
504:
505:
506:
507:
508:
509:
510:
511:
512:
513:
514:
515:
516:
517:
518:
519:
520:
521:
522:
523:
524:
525:
526:
527:
528:
529:
530:
531:
532:
533:
534:
535:
536:
537:
538:
539:
540:
541:
542:
543:
544:
545:
546:
547:
548:
549:
550:
551:
552:
553:
554:
555:
556:
557:
558:
559:
560:
561:
562:
563:
564:
565:
566:
567:
568:
569:
570:
571:
572:
573:
574:
575:
576:
577:
578:
579:
580:
581:
582:
583:
584:
585:
586:
587:
588:
589:
590:
591:
592:
593:
594:
595:
596:
597:
598:
599:
600:
601:
602:
603:
604:
605:
606:
607:
608:
609:
610:
611:
612:
613:
614:
615:
616:
617:
618:
619:
620:
621:
622:
623:
624:
625:
626:
627:
628:
629:
630:
631:
632:
633:
634:
635:
636:
637:
638:
639:
640:
641:
642:
643:
644:
645:
646:
647:
648:
649:
650:
651:
652:
653:
654:
655:
656:
657:
658:
659:
660:
661:
662:
663:
664:
665:
666:
667:
668:
669:
670:
671:
672:
673:
674:
675:
676:
677:
678:
679:
680:
681:
682:
683:
684:
685:
686:
687:
688:
689:
690:
691:
692:
693:
694:
695:
696:
697:
698:
699:
700:
701:
702:
703:
704:
705:
706:
707:
708:
709:
710:
711:
712:
713:
714:
715:
716:
717:
718:
719:
720:
721:
722:
723:
724:
725:
726:
727:
728:
729:
730:
731:
732:
733:
734:
735:
736:
737:
738:
739:
740:
741:
742:
743:
744:
745:
746:
747:
748:
749:
750:
751:
752:
753:
754:
755:
756:
757:
758:
759:
760:
761:
762:
763:
764:
765:
766:
767:
768:
769:
770:
771:
772:
773:
774:
775:
776:
777:
778:
779:
780:
781:
782:
783:
784:
785:
786:
787:
788:
789:
790:
791:
792:
793:
794:
795:
796:
797:
798:
799:
800:
801:
802:
803:
804:
805:
806:
807:
808:
809:
810:
811:
812:
813:
814:
815:
816:
817:
818:
819:
820:
821:
822:
823:
824:
825:
826:
827:
828:
829:
830:
831:
832:
833:
834:
835:
836:
837:
838:
839:
840:
841:
842:
843:
844:
845:

<?php
$filename="usercp.php";

require ("./global.php");

if(!$wbbuserdata['userid']) access_error();

if(isset($_REQUEST['action'])) $action=$_REQUEST['action'];
else $action="";

if(!$action) eval("\$tpl->output(\"".$tpl->get("usercp")."\");");

if($action=="profile_edit") {
 if(isset($_POST['send'])) {
  if(is_array($_POST['field'])) $field=trim_array($_POST['field']);
  if(isset($_POST['r_email'])) $r_email = trim($_POST['r_email']);
  if(isset($_POST['r_homepage'])) $r_homepage = trim($_POST['r_homepage']);
  if(isset($_POST['r_icq'])) $r_icq = trim($_POST['r_icq']);
  if(isset($_POST['r_aim'])) $r_aim = trim($_POST['r_aim']);
  if(isset($_POST['r_yim'])) $r_yim = trim($_POST['r_yim']);
  if(isset($_POST['r_msn'])) $r_msn = trim($_POST['r_msn']);
  if(isset($_POST['r_day'])) $r_day = trim($_POST['r_day']);
  if(isset($_POST['r_month'])) $r_month = trim($_POST['r_month']);
  if(isset($_POST['r_year'])) $r_year = trim($_POST['r_year']);
  if(isset($_POST['r_gender'])) $r_gender = trim($_POST['r_gender']);
  if(isset($_POST['r_usertext'])) $r_usertext = trim($_POST['r_usertext']);

  $error="";
  $userfield_error=0;
  $fieldvalues="";

  $result = $db->query("SELECT profilefieldid, required FROM bb".$n."_profilefields ORDER BY profilefieldid ASC");
  while($row=$db->fetch_array($result)) {
   if($row['required']==1 && !$field[$row['profilefieldid']]) {
    $userfield_error=1;
    break;
   }
   if($fieldvalues) $fieldvalues.=", field$row[profilefieldid] = '".addslashes(htmlspecialchars($field[$row['profilefieldid']]))."'";
   else $fieldvalues="field$row[profilefieldid] = '".addslashes(htmlspecialchars($field[$row['profilefieldid']]))."'";
  }

  if($userfield_error==1 || !$r_email) eval ("\$error .= \"".$tpl->get("register_error1")."\";");
  if($r_email != $wbbuserdata['email'] && !verify_email($r_email)) eval ("\$error .= \"".$tpl->get("register_error4")."\";");
  if(strlen($r_usertext)>$wbbuserdata['maxusertextlength']) eval ("\$error .= \"".$tpl->get("register_error7")."\";");
  if($error) eval ("\$usercp_error .= \"".$tpl->get("usercp_error")."\";");
  else {
   if($r_homepage && !preg_match("/[a-zA-Z]:\/\//si", $r_homepage)) $r_homepage = "http://".$r_homepage;
   if($r_day && $r_month) $birthday=ifelse(strlen($r_year)==4,$r_year,ifelse(strlen($r_year)==2,"19$r_year","0000"))."-".ifelse($r_month<10,"0$r_month",$r_month)."-".ifelse($r_day<10,"0$r_day",$r_day);
   else $birthday = "0000-00-00";

   list($rankid)=$db->query_first("SELECT rankid FROM bb".$n."_ranks WHERE groupid IN ('0','$wbbuserdata[groupid]') AND needposts<='$wbbuserdata[userposts]' AND gender IN ('0','".intval($r_gender)."') ORDER BY needposts DESC, gender DESC",1);

   $db->query("UPDATE bb".$n."_users SET email='".addslashes(htmlspecialchars($r_email))."', usertext='".addslashes(htmlspecialchars($r_usertext))."', icq='".intval($r_icq)."', aim='".addslashes(htmlspecialchars($r_aim))."', yim='".addslashes(htmlspecialchars($r_yim))."', msn='".addslashes(htmlspecialchars($r_msn))."', homepage='".addslashes(htmlspecialchars($r_homepage))."', birthday='".addslashes(htmlspecialchars($birthday))."', gender='".intval($r_gender)."'".ifelse($rankid!=$wbbuserdata['rankid'],", rankid='$rankid'","")." WHERE userid = '$wbbuserdata[userid]'");
   if($fieldvalues) $db->query("UPDATE bb".$n."_userfields SET $fieldvalues WHERE userid = '$wbbuserdata[userid]'");

   if($r_email != $wbbuserdata['email'] && $emailverifymode!=0) {
    if($emailverifymode==3) {
     $r_password=password_generate();
     $db->query("UPDATE bb".$n."_users SET password='".md5($r_password)."' WHERE userid = '$wbbuserdata[userid]'");
     $db->query("UPDATE bb".$n."_sessions SET userid=0 WHERE hash='$sid'");

     eval ("\$subject = \"".$tpl->get("ms_emailchange3")."\";");
     eval ("\$content = \"".$tpl->get("mt_emailchange3")."\";");
     mailer($r_email,$subject,$content);

     eval("redirect(\"".$tpl->get("redirect_emailchange3")."\",\"index.php?sid=$session[hash]\",20);");
    }
    if($emailverifymode==1 || $emailverifymode==2) {
     $activation=code_generate();
     $db->query("UPDATE bb".$n."_users SET activation='$activation' WHERE userid = '$wbbuserdata[userid]'");

     if($emailverifymode==1) {
      eval ("\$subject = \"".$tpl->get("ms_emailchange1")."\";");
      eval ("\$content = \"".$tpl->get("mt_emailchange1")."\";");
      mailer($r_email,$subject,$content);

      eval("redirect(\"".$tpl->get("redirect_emailchange1")."\",\"index.php?sid=$session[hash]\",20);");
     }
     else eval("redirect(\"".$tpl->get("redirect_emailchange2")."\",\"index.php?sid=$session[hash]\",20);");
    }
    exit();
   }
   else {
    header("Location: usercp.php?action=profile_edit&sid=$session[hash]");
    exit();
   }
  }
 }
 else {
  $r_email = $wbbuserdata['email'];
  $r_homepage = $wbbuserdata['homepage'];
  $r_icq = $wbbuserdata['icq'];
  $r_aim = $wbbuserdata['aim'];
  $r_yim = $wbbuserdata['yim'];
  $r_msn = $wbbuserdata['msn'];
  $birthday=explode("-",$wbbuserdata['birthday']);
  $r_day = $birthday[2];
  $r_month = $birthday[1];
  $r_year = ifelse($birthday[0],$birthday[0],"");
  $r_gender = $wbbuserdata['gender'];
  $r_usertext = $wbbuserdata['usertext'];
  $userfields = $db->query_first("SELECT * FROM bb".$n."_userfields WHERE userid='$wbbuserdata[userid]'");
 }

 for($i=1;$i<=31;$i++) $day_options.=makeoption($i,$i,$r_day);
 for($i=1;$i<=12;$i++) $month_options.=makeoption($i,getmonth($i),$r_month);

 if(isset($r_gender)) $gender[$r_gender]=" selected";

 $z=0;
 $y=1;
 $result=$db->query("SELECT * FROM bb".$n."_profilefields ORDER BY fieldorder ASC");
 while($row=$db->fetch_array($result)) {
  if(isset($_POST['send'])) $field_value=$field[$row['profilefieldid']];
  else $field_value=$userfields["field".$row['profilefieldid']];

  if($row['required']==1) {
   $tdbgcolor=getone($y,"{tablecolora}","{tablecolorb}");
   $tdid=getone($y,"tablea","tableb");

   eval ("\$profilefields_required .= \"".$tpl->get("register_userfield")."\";");
   $y++;
  }
  else {
   $tdbgcolor=getone($z,"{tablecolora}","{tablecolorb}");
   $tdid=getone($z,"tablea","tableb");

   eval ("\$profilefields .= \"".$tpl->get("register_userfield")."\";");
   $z++;
  }
 }

 if(!$r_icq) $r_icq="";
 if($r_year=="0000") $r_year="";

 eval("\$tpl->output(\"".$tpl->get("usercp_profile_edit")."\");");
}

if($action=="signature_edit") {
 require("./acp/lib/class_parse.php");

 if(isset($_POST['send'])) {
  $message=trim($_POST['message']);

  if(!$_POST['preview']) {
   $error="";
   if(strlen($message)>$wbbuserdata['maxsiglength']) eval ("\$error .= \"".$tpl->get("register_error5")."\";");
   if($wbbuserdata['maxsigimage']!=-1 && substr_count(strtolower($message),"[img]")>$wbbuserdata['maxsigimage']) eval ("\$error .= \"".$tpl->get("register_error6")."\";");
   if($error) eval ("\$usercp_error = \"".$tpl->get("usercp_error")."\";");
   else {
    $db->query("UPDATE bb".$n."_users SET signature='".addslashes($message)."' WHERE userid='$wbbuserdata[userid]'");
    header("Location: usercp.php?action=signature_edit&sid=$session[hash]");
    exit();
   }
  }
  else {
   $parse = new parse($docensor,75,$allowsigsmilies,$allowsigbbcode,$wbbuserdata['showimages'],$usecode);
   $preview_signature=$parse->doparse($message,$allowsigsmilies,$allowsightml,$allowsigbbcode,$maxsigimage);
   eval ("\$usercp_signature_edit_preview = \"".$tpl->get("usercp_signature_edit_preview")."\";");
  }
 }
 else $message=$wbbuserdata['signature'];

 if($wbbuserdata['signature']) {
  if(!$parse) $parse = new parse($docensor,75,$allowsigsmilies,$allowsigbbcode,$wbbuserdata['showimages'],$usecode);
  $old_signature=$parse->doparse($wbbuserdata['signature'],$allowsigsmilies,$allowsightml,$allowsigbbcode,$maxsigimage);
  eval ("\$usercp_signature_edit_old = \"".$tpl->get("usercp_signature_edit_old")."\";");
 }

 if($allowsigbbcode==1) $bbcode_buttons = getcodebuttons();
 if($allowsigsmilies==1) $bbcode_smilies = getclickysmilies($smilie_table_cols,$smilie_table_rows);

 eval ("\$note .= \"".$tpl->get("note_html_".ifelse($allowsightml==0,"not_")."allow")."\";");
 eval ("\$note .= \"".$tpl->get("note_bbcode_".ifelse($allowsigbbcode==0,"not_")."allow")."\";");
 eval ("\$note .= \"".$tpl->get("note_smilies_".ifelse($allowsigsmilies==0,"not_")."allow")."\";");
 eval ("\$note .= \"".$tpl->get("note_images_".ifelse($maxsigimage==0,"not_")."allow")."\";");

 if(isset($message)) $message=parse::convertHTML($message);

 eval("\$tpl->output(\"".$tpl->get("usercp_signature_edit")."\");");
}

if($action=="options_change") {
 if(isset($_POST['send'])) {

  if(isset($_POST['r_invisible'])) $r_invisible = trim($_POST['r_invisible']);
  if(isset($_POST['r_nosessionhash'])) $r_nosessionhash = trim($_POST['r_nosessionhash']);
  if(isset($_POST['r_usecookies'])) $r_usecookies = trim($_POST['r_usecookies']);
  if(isset($_POST['r_admincanemail'])) $r_admincanemail = trim($_POST['r_admincanemail']);
  if(isset($_POST['r_showemail'])) $r_showemail = trim($_POST['r_showemail']);
  if(isset($_POST['r_usercanemail'])) $r_usercanemail = trim($_POST['r_usercanemail']);
  if(isset($_POST['r_emailnotify'])) $r_emailnotify = trim($_POST['r_emailnotify']);
  if(isset($_POST['r_receivepm'])) $r_receivepm = trim($_POST['r_receivepm']);
  if(isset($_POST['r_emailonpm'])) $r_emailonpm = trim($_POST['r_emailonpm']);
  if(isset($_POST['r_pmpopup'])) $r_pmpopup = trim($_POST['r_pmpopup']);
  if(isset($_POST['r_showsignatures'])) $r_showsignatures = trim($_POST['r_showsignatures']);
  if(isset($_POST['r_showavatars'])) $r_showavatars = trim($_POST['r_showavatars']);
  if(isset($_POST['r_showimages'])) $r_showimages = trim($_POST['r_showimages']);
  if(isset($_POST['r_daysprune'])) $r_daysprune = trim($_POST['r_daysprune']);
  if(isset($_POST['r_umaxposts'])) $r_umaxposts = trim($_POST['r_umaxposts']);
  if(isset($_POST['r_styleid'])) $r_styleid = trim($_POST['r_styleid']);


  $db->query("UPDATE bb".$n."_users SET showemail='".intval($r_showemail)."', admincanemail='".intval($r_admincanemail)."', usercanemail='".intval($r_usercanemail)."', invisible='".intval($r_invisible)."', usecookies='".intval($r_usecookies)."', styleid='".intval($r_styleid)."', daysprune='".intval($r_daysprune)."', timezoneoffset='".addslashes(htmlspecialchars($default_timezoneoffset))."', dateformat='".addslashes(htmlspecialchars($dateformat))."', timeformat='".addslashes(htmlspecialchars($timeformat))."', emailnotify='".intval($r_emailnotify)."', receivepm='".intval($r_receivepm)."', emailonpm='".intval($r_emailonpm)."', pmpopup='".intval($r_pmpopup)."', umaxposts='".intval($r_umaxposts)."', showsignatures='".intval($r_showsignatures)."', showavatars='".intval($r_showavatars)."', showimages='".intval($r_showimages)."', nosessionhash='".intval($r_nosessionhash)."' WHERE userid = '$wbbuserdata[userid]'");
  if($r_styleid!=$session['styleid']) $db->unbuffered_query("UPDATE bb".$n."_sessions SET styleid='".intval($r_styleid)."' WHERE hash='$sid'",1);
  header("Location: usercp.php?action=options_change&sid=$session[hash]");
  exit();
 }
 else {
  $r_invisible = $wbbuserdata['invisible'];
  $r_nosessionhash = $wbbuserdata['nosessionhash'];
  $r_usecookies = $wbbuserdata['usecookies'];
  $r_admincanemail = $wbbuserdata['admincanemail'];
  $r_showemail = $wbbuserdata['showemail'];
  $r_usercanemail = $wbbuserdata['usercanemail'];
  $r_emailnotify = $wbbuserdata['emailnotify'];
  $r_receivepm = $wbbuserdata['receivepm'];
  $r_emailonpm = $wbbuserdata['emailonpm'];
  $r_pmpopup = $wbbuserdata['pmpopup'];
  $r_showsignatures = $wbbuserdata['showsignatures'];
  $r_showavatars = $wbbuserdata['showavatars'];
  $r_showimages = $wbbuserdata['showimages'];
  $r_daysprune = $wbbuserdata['daysprune'];
  $r_umaxposts = $wbbuserdata['umaxposts'];
  $r_styleid = $wbbuserdata['styleid'];
 }

 if(isset($r_invisible)) $invisible[$r_invisible]=" selected";
 if(isset($r_nosessionhash)) $nosessionhash[$r_nosessionhash]=" selected";
 if(isset($r_usecookies)) $usecookies[$r_usecookies]=" selected";
 if(isset($r_admincanemail)) $admincanemail[$r_admincanemail]=" selected";
 if(isset($r_showemail)) $showemail[$r_showemail]=" selected";
 if(isset($r_usercanemail)) $usercanemail[$r_usercanemail]=" selected";
 if(isset($r_emailnotify)) $emailnotify[$r_emailnotify]=" selected";
 if(isset($r_receivepm)) $receivepm[$r_receivepm]=" selected";
 if(isset($r_emailonpm)) $emailonpm[$r_emailonpm]=" selected";
 if(isset($r_pmpopup)) $spmpopup[$r_pmpopup]=" selected";
 if(isset($r_showsignatures)) $showsignatures[$r_showsignatures]=" selected";
 if(isset($r_showavatars)) $showavatars[$r_showavatars]=" selected";
 if(isset($r_showimages)) $showimages[$r_showimages]=" selected";
 if(isset($r_daysprune)) $sdaysprune[$r_daysprune]=" selected";
 if(isset($r_umaxposts)) $sumaxposts[$r_umaxposts]=" selected";

 $timezones = explode("\n", $tpl->get("timezones"));
 for($i=0;$i<count($timezones);$i++) {
  $parts = explode("|", trim($timezones[$i]));
  $timezone_options .= makeoption($parts[0],"(GMT".ifelse($parts[1]," ".$parts[1],"").") $parts[2]",$default_timezoneoffset);
 }

 $result = $db->query("SELECT styleid, stylename FROM bb".$n."_styles WHERE default_style = 0 ORDER BY stylename ASC");
 while($row=$db->fetch_array($result)) $style_options.=makeoption($row['styleid'],$row['stylename'],$r_styleid);

 eval("\$tpl->output(\"".$tpl->get("usercp_options_change")."\");");
}

if($action=="password_change") {
 if($_POST['send']=="send") {
  $old_password=$_POST['old_password'];
  $new_password=$_POST['new_password'];
  $confirm_new_password=$_POST['confirm_new_password'];

  if(!$old_password || !$new_password || !$confirm_new_password) eval("error(\"".$tpl->get("error_emptyfields")."\");");
  elseif($new_password!=$confirm_new_password) eval("error(\"".$tpl->get("error_pwnotidentical")."\");");
  elseif(md5($old_password)!=$wbbuserdata[password]) eval("error(\"".$tpl->get("error_falsepassword")."\");");
  else {
   $new_password=md5($new_password);
   $db->query("UPDATE bb".$n."_users SET password='".$new_password."' WHERE userid='$wbbuserdata[userid]'");
   if($wbbuserdata[usecookies]==1) bbcookie("wbb_userpassword","$new_password",time()+3600*24*365);
   header("Location: usercp.php?sid=$session[hash]");
   exit();
  }
 }

 eval("\$tpl->output(\"".$tpl->get("usercp_password_change")."\");");
}
#Guthaben überweisen im Profil START
if($action=="guthaben_send_x") {
if(!$wbbuserdata['userid']) access_error();
switch($_REQUEST['action']){
default:
	$guthaben_move=intval($_POST['Betrag']);
	//überweisen
	$control=$db->query_first("SELECT userid FROM bb".$n."_users WHERE userid='".$_POST['user']."'");
	If (isset($_POST['send'])){
		if($guthaben_send_x>$wbbuserdata['guthaben'] OR $guthaben_send_x<0 OR $wbbuserdata[userid]==$_POST['user'] OR $control==""){
			eval("\$tpl->output(\"".$tpl->get("usercp_guthaben_send_error1")."\");");
			exit;
		}
		$db->query("UPDATE bb".$n."_users SET guthaben=guthaben-".$guthaben_move." WHERE userid='".$wbbuserdata['userid']."'");
		$db->query("UPDATE bb".$n."_users SET guthaben=guthaben+".$guthaben_move." WHERE userid='".$_POST['user']."'");
		header("Location: usercp.php?sid=$session[hash]");
   		exit();
	}
	$user=$db->query("SELECT userid, username FROM bb".$n."_users WHERE userid=".$userid);
	while($row=$db->fetch_array($user)){
		$user_options.=makeoption($row[userid],$row[username],"",0);
	}
	 
	eval("\$tpl->output(\"".$tpl->get("usercp_guthaben_send")."\");");
break;
}
}
#Guthaben überweisen im Profil ENDE
if($action=="shop") {
eval("\$tpl->output(\"".$tpl->get("usercp_shop")."\");");
}

if ($action=="shop_info"){
$result = $db->query("SELECT * FROM bb".$n."_guthaben_config");
while($guthaben = mysql_fetch_array($result)) {
If ($guthaben['namen_aendern_onoff']==1){
$name = "Ja";
} else {
$name = "Nein";
}
If ($guthaben['benutzerrang_aendern_onoff']==1){
$benutzerrang = "Ja";
} else {
$benutzerrang = "Nein";
}
eval("\$tpl->output(\"".$tpl->get("usercp_shop_info")."\");");
}
}

if($action=="shop_name_edit") {
        $user=$db->query("SELECT * FROM bb".$n."_guthaben_config");
        while($row=$db->fetch_array($user)){
        $control = $row[namen_aendern_onoff];
        $wieviel = $row[namen_aendern_kosten];
        }
if($control=="1") {
        if (isset($_POST['send'])){
                        if($wieviel>$wbbuserdata['guthaben']){
                        eval("\$tpl->output(\"".$tpl->get("usercp_shop_error1")."\");");
                        exit;
                            }
   $db->query("INSERT INTO bb".$n."_guthaben_konto (userid,begruendung,wieviel,date) VALUES ($wbbuserdata[userid], 'Shop: Änderung des Namens', '-$wieviel','".time()."')");
                        $db->query("UPDATE bb".$n."_users SET guthaben=guthaben-$wieviel WHERE userid='".$wbbuserdata['userid']."'");
                        $db->query("UPDATE bb".$n."_users SET username='$name' WHERE userid='".$wbbuserdata['userid']."'");
                        header("Location: usercp.php?action=shop&sid=$session[hash]");
                           exit();
        }
        eval("\$tpl->output(\"".$tpl->get("usercp_shop_name")."\");");
        } else {
        eval("\$tpl->output(\"".$tpl->get("usercp_shop_deaktiviert")."\");");
}
}


if($action=="kontoauszuege") {
	if($konto=="zusammenfassen") {
		$gesamt=$db->query_first("SELECT * FROM bb".$n."_users WHERE userid='".$wbbuserdata['userid']."'");
		$gesamt=$gesamt['guthaben'];
 		$db->query("DELETE FROM bb".$n."_guthaben_konto WHERE userid='".$wbbuserdata['userid']."'");
   		$db->query("INSERT INTO bb".$n."_guthaben_konto (userid,begruendung,wieviel,date) VALUES ($wbbuserdata[userid], 'Zusammenfassung alter Kontoauszüge', '$gesamt','".time()."')");
		
	}
	$konto=$db->query("SELECT * FROM bb".$n."_guthaben_konto WHERE userid='".$wbbuserdata['userid']."'");
		while($row=$db->fetch_array($konto)){
		$postdate=formatdate($dateformat,$row['date'],1);
		$posttime=formatdate($timeformat,$row['date']);
		$date = "$postdate  $posttime Uhr";
		eval ("\$kontoauszuegebit .= \" ".$tpl->get("usercp_shop_kontoauszuege_bit")."\";");
	}

	$gesamt=$db->query_first("SELECT * FROM bb".$n."_users WHERE userid='".$wbbuserdata['userid']."'");
	eval("\$tpl->output(\"".$tpl->get("usercp_shop_kontoauszuege")."\");");
}
if($action=="guthaben_delete") {
	if (isset($_POST['send'])){
                $db->query("UPDATE bb".$n."_users SET guthaben=0 WHERE userid='".$wbbuserdata['userid']."'");
	header("Location: usercp.php?action=shop&sid=$session[hash]");
	}
	eval("\$tpl->output(\"".$tpl->get("usercp_shop_bestaetigung")."\");");
}



if($action=="benutzerrang_kaufen") {
        $user=$db->query("SELECT * FROM bb".$n."_guthaben_config");
        while($row=$db->fetch_array($user)){
        $control = $row[benutzerrang_aendern_onoff];
        $wieviel = $row[benutzerrang_aendern_kosten];
        }
if($control=="1") {
        if (isset($_POST['send'])){
                        if($wieviel>$wbbuserdata['guthaben']){
                        eval("\$tpl->output(\"".$tpl->get("usercp_shop_error1")."\");");
                        exit;
                            }
   $db->query("INSERT INTO bb".$n."_guthaben_konto (userid,begruendung,wieviel,date) VALUES ($wbbuserdata[userid], 'Shop: Änderung des Benutzerranges', '-$wieviel','".time()."')");
                        $db->query("UPDATE bb".$n."_users SET guthaben=guthaben-$wieviel WHERE userid='".$wbbuserdata['userid']."'");
                        $db->query("UPDATE bb".$n."_users SET title='$title' WHERE userid='".$wbbuserdata['userid']."'");
                        header("Location: usercp.php?action=shop&sid=$session[hash]");
                           exit();
        }
        eval("\$tpl->output(\"".$tpl->get("usercp_shop_title")."\");");
        } else {
        eval("\$tpl->output(\"".$tpl->get("usercp_shop_deaktiviert")."\");");
}
}

if($action=="guthaben_send") {
if(!$wbbuserdata['userid']) access_error();
switch($_REQUEST['action']){
default:
        $guthaben_move=intval($_POST['Betrag']);
        //überweisen
        $control=$db->query_first("SELECT userid FROM bb".$n."_users WHERE userid='".$_POST['user']."'");
        If (isset($_POST['send'])){
                if($guthaben_send>$wbbuserdata['guthaben'] OR $guthaben_send<0 OR $wbbuserdata[userid]==$_POST['user'] OR $control==""){
                        eval("\$tpl->output(\"".$tpl->get("usercp_guthaben_send_error1")."\");");
                        exit;
                }
$name=$db->query_first("SELECT userid,username FROM bb".$n."_users WHERE userid='".$_POST['user']."'");
$db->query("INSERT INTO bb".$n."_guthaben_konto (userid,begruendung,wieviel,date) VALUES ($wbbuserdata[userid], 'Guthaben für $name[username]', '-$guthaben_move','".time()."')");
$db->query("INSERT INTO bb".$n."_guthaben_konto (userid,begruendung,wieviel,date) VALUES (".$_POST['user'].", 'Guthaben von $wbbuserdata[username]', '+$guthaben_move','".time()."')");
                $db->query("UPDATE bb".$n."_users SET guthaben=guthaben-".$guthaben_move." WHERE userid='".$wbbuserdata['userid']."'");
                $db->query("UPDATE bb".$n."_users SET guthaben=guthaben+".$guthaben_move." WHERE userid='".$_POST['user']."'");
                header("Location: usercp.php?sid=$session[hash]");
                   exit();
        }
        $user=$db->query("SELECT userid, username FROM bb".$n."_users");
        while($row=$db->fetch_array($user)){
                $user_options.=makeoption($row[userid],$row[username],"",0);
        }

        eval("\$tpl->output(\"".$tpl->get("usercp_guthaben_send")."\");");
break;
}
}


if($action=="buddy_list") {
 if($_POST['send']=="send") {
  list($userid)=$db->query_first("SELECT userid FROM bb".$n."_users WHERE username='".addslashes(htmlspecialchars(trim($_POST['addtolist'])))."'");
  if(!$userid) eval("error(\"".$tpl->get("error_usernotexist")."\");");
  elseif($userid==$wbbuserdata[userid]) eval("error(\"".$tpl->get("error_cantaddyourself")."\");");
  else {
   $buddylist=add2list($wbbuserdata['buddylist'],$userid);
   if($buddylist!=-1) $db->query("UPDATE bb".$n."_users SET buddylist='$buddylist' WHERE userid='$wbbuserdata[userid]'");
   header("Location: usercp.php?action=buddy_list&sid=$session[hash]");
   exit();
  }
 }

 $listbit="";
 if($wbbuserdata['buddylist']!="") {
  $result = $db->query("SELECT u.userid, u.username, IF(s.lastactivity>=".(time()-$useronlinetimeout*60).ifelse($wbbuserdata['canuseacp']==1,""," AND u.invisible=0").",1,0) AS online FROM bb".$n."_users u
  LEFT JOIN bb".$n."_sessions s USING (userid)
  WHERE u.userid IN ('".str_replace(" ","','",$wbbuserdata[buddylist])."') ORDER BY online DESC, u.username ASC");
  while($row=$db->fetch_array($result)) {
   $posts['username']=$row['username'];
   if($row['online']) eval ("\$user_online = \"".$tpl->get("thread_user_online")."\";");
   else eval ("\$user_online = \"".$tpl->get("thread_user_offline")."\";");
   eval ("\$listbit .= \"".$tpl->get("usercp_buddy_listbit")."\";");
  }
 }

 eval("\$tpl->output(\"".$tpl->get("usercp_buddy_list")."\");");
}

if($action=="ignore_list") {
 if($_POST['send']=="send") {
  $result=$db->query_first("SELECT userid, ismod+issupermod+canuseacp AS status FROM bb".$n."_users LEFT JOIN bb".$n."_groups USING (groupid) WHERE username='".addslashes(htmlspecialchars(trim($_POST['addtolist'])))."'");
  if(!$result[userid]) eval("error(\"".$tpl->get("error_usernotexist")."\");");
  elseif($result[userid]==$wbbuserdata[userid]) eval("error(\"".$tpl->get("error_cantaddyourself")."\");");
  elseif($result[status]!=0) eval("error(\"".$tpl->get("error_cantaddmods")."\");");
  else {
   $ignorelist=add2list($wbbuserdata['ignorelist'],$result['userid']);
   if($ignorelist!=-1) $db->query("UPDATE bb".$n."_users SET ignorelist='$ignorelist' WHERE userid='$wbbuserdata[userid]'");
   header("Location: usercp.php?action=ignore_list&sid=$session[hash]");
   exit();
  }
 }

 $listbit="";
 if($wbbuserdata['ignorelist']!="") {
  $result = $db->query("SELECT userid, username FROM bb".$n."_users WHERE userid IN ('".str_replace(" ","','",$wbbuserdata['ignorelist'])."') ORDER BY username ASC");
  while($row=$db->fetch_array($result)) eval ("\$listbit .= \"".$tpl->get("usercp_ignore_listbit")."\";");
 }

 eval("\$tpl->output(\"".$tpl->get("usercp_ignore_list")."\");");
}

if($action=="buddy") {
 if($_GET['remove']) {
  list($userid)=$db->query_first("SELECT userid FROM bb".$n."_users WHERE userid='".intval($_GET['remove'])."'");
  if(!$userid) eval("error(\"".$tpl->get("error_usernotexist")."\");");
  else {
   $buddylist=removeFromlist($wbbuserdata['buddylist'],$userid);
   if($buddylist!=-1) $db->query("UPDATE bb".$n."_users SET buddylist='$buddylist' WHERE userid='$wbbuserdata[userid]'");
   header("Location: usercp.php?action=buddy_list&sid=$session[hash]");
   exit();
  }
 }
 if($_GET['add']) {
  list($userid)=$db->query_first("SELECT userid FROM bb".$n."_users WHERE userid='".intval($_GET['add'])."'");
  if(!$userid) eval("error(\"".$tpl->get("error_usernotexist")."\");");
  elseif($userid==$wbbuserdata['userid']) eval("error(\"".$tpl->get("error_cantaddyourself")."\");");
  else {
   $buddylist=add2list($wbbuserdata['buddylist'],$userid);
   if($buddylist!=-1) $db->query("UPDATE bb".$n."_users SET buddylist='$buddylist' WHERE userid='$wbbuserdata[userid]'");
   header("Location: usercp.php?action=buddy_list&sid=$session[hash]");
   exit();
  }
 }
}

if($action=="ignore") {
 if($_GET['remove']) {
  list($userid)=$db->query_first("SELECT userid FROM bb".$n."_users WHERE userid='".intval($_GET['remove'])."'");
  if(!$userid) eval("error(\"".$tpl->get("error_usernotexist")."\");");
  else {
   $ignorelist=removeFromlist($wbbuserdata['ignorelist'],$userid);
   if($ignorelist!=-1) $db->query("UPDATE bb".$n."_users SET ignorelist='$ignorelist' WHERE userid='$wbbuserdata[userid]'");
   header("Location: usercp.php?action=ignore_list&sid=$session[hash]");
   exit();
  }
 }
 if($_GET['add']) {
  $result=$db->query_first("SELECT userid, ismod+issupermod+canuseacp AS status FROM bb".$n."_users LEFT JOIN bb".$n."_groups USING (groupid) WHERE userid='".intval($_GET['add'])."'");
  if(!$result['userid']) eval("error(\"".$tpl->get("error_usernotexist")."\");");
  elseif($result['userid']==$wbbuserdata['userid']) eval("error(\"".$tpl->get("error_cantaddyourself")."\");");
  elseif($result['status']!=0) eval("error(\"".$tpl->get("error_cantaddmods")."\");");
  else {
   $ignorelist=add2list($wbbuserdata['ignorelist'],$result['userid']);
   if($ignorelist!=-1) $db->query("UPDATE bb".$n."_users SET ignorelist='$ignorelist' WHERE userid='$wbbuserdata[userid]'");
   header("Location: usercp.php?action=ignore_list&sid=$session[hash]");
   exit();
  }
 }
}

if($action=="avatars") {
 if(isset($_POST['send'])) {
  if($_POST['avatarid']!="useown") {
   $oldavatar = $db->query_first("SELECT avatarid, avatarextension FROM bb".$n."_avatars WHERE userid = '$wbbuserdata[userid]'");
   if($oldavatar['avatarid']) {
    @unlink("./images/avatars/avatar-".$oldavatar['avatarid'].".".$oldavatar['avatarextension']);
    $db->query("DELETE FROM bb".$n."_avatars WHERE avatarid = '$oldavatar[avatarid]'");
   }
   $db->query("UPDATE bb".$n."_users SET avatarid = '".intval($_POST['avatarid'])."' WHERE userid = '$wbbuserdata[userid]'");
   header("Location: usercp.php?action=avatars&sid=$session[hash]&page=$_POST[page]");
   exit();
  }
  else {
   $uploaderror=0;
   if($_FILES['avatar_file']['tmp_name'] && $_FILES['avatar_file']['tmp_name']!="none") {
    $badavatar=0;
    $avatar_file_extension = strtolower(substr(strrchr($_FILES['avatar_file']['name'],"."),1));
    $avatar_file_name2 = substr($_FILES['avatar_file']['name'],0,(intval(strlen($avatar_file_extension))+1)*-1);
    $allowedavatarextensions=explode("\n",$wbbuserdata['allowedavatarextensions']);

    if(in_array($avatar_file_extension,$allowedavatarextensions) && $_FILES['avatar_file']['size']<=$wbbuserdata['maxavatarsize']) { /*  &&  */
     $db->query("INSERT INTO bb".$n."_avatars (avatarname,avatarextension,userid) VALUES ('".addslashes(htmlspecialchars($avatar_file_name2))."','".addslashes(htmlspecialchars($avatar_file_extension))."','$wbbuserdata[userid]')");
     $avatarid=$db->insert_id("bb".$n."_avatars","avatarid");

     if(move_uploaded_file($_FILES['avatar_file']['tmp_name'],"./images/avatars/avatar-".$avatarid.".".$avatar_file_extension)) {
      @chmod ("./images/avatars/avatar-".$avatarid.".".$avatar_file_extension,0777);

      $imgsize=@getimagesize("./images/avatars/avatar-".$avatarid.".".$avatar_file_extension);
      $width=$imgsize[0];
      $height=$imgsize[1];
      if($avatar_file_extension=="swf") {
       if($width>$wbbuserdata['maxavatarwidth']) $width=$wbbuserdata['maxavatarwidth'];
       if($height>$wbbuserdata['maxavatarheight']) $height=$wbbuserdata['maxavatarheight'];
      }

      if($width>$wbbuserdata['maxavatarwidth'] || $height>$wbbuserdata['maxavatarheight']) $badavatar=2;

      if($badavatar==0) {
       $oldavatar = $db->query_first("SELECT avatarid, avatarextension FROM bb".$n."_avatars WHERE userid = '$wbbuserdata[userid]' AND avatarid='$wbbuserdata[avatarid]'");
       if($oldavatar['avatarid']) {
        @unlink("./images/avatars/avatar-".$oldavatar['avatarid'].".".$oldavatar['avatarextension']);
        $db->unbuffered_query("DELETE FROM bb".$n."_avatars WHERE avatarid = '$oldavatar[avatarid]'",1);
       }
       $db->unbuffered_query("UPDATE bb".$n."_users SET avatarid='$avatarid' WHERE userid='$wbbuserdata[userid]'",1);
       $db->unbuffered_query("UPDATE bb".$n."_avatars SET width='$width', height='$height' WHERE avatarid='$avatarid'",1);
       header("Location: usercp.php?action=avatars&sid=$session[hash]&page=$page");
       exit();
      }
     }
     else $badavatar=1;
     if($badavatar!=0) {
      if($badavatar==2) @unlink("./images/avatars/avatar-".$avatarid.".".$avatar_file_extension);
      $db->query("DELETE FROM bb".$n."_avatars WHERE avatarid='$avatarid'");
      $uploaderror=1;
     }
    }
    else $uploaderror=1;
    if($uploaderror==1) eval("error(\"".$tpl->get("error_falseavatar")."\");");
   }
   elseif(!$havatarid) eval("error(\"".$tpl->get("error_falseavatar")."\");");
  }
 }

 if($wbbuserdata['avatarid']==0 || ($wbbuserdata['canuseavatar']==0 && $wbbuserdata['canuploadavatar']==0)) $noavatar_checked = " CHECKED";
 if($wbbuserdata['canuseavatar']==1) {
  list($avatarcount) = $db->query_first("SELECT COUNT(*) FROM bb".$n."_avatars WHERE (groupid = '$wbbuserdata[groupid]' OR groupid = 0) AND needposts <= '$wbbuserdata[userposts]' AND userid = 0 ORDER BY needposts DESC");
  if($avatarcount) {
   if(isset($_GET['page'])) {
    $page=intval($_GET['page']);
    if($page==0) $page=1;
   }
   else $page=1;
   $pages=ceil($avatarcount/$avatarsperpage);
   $result = $db->query("SELECT avatarid, avatarextension, width, height FROM bb".$n."_avatars WHERE (groupid = '$wbbuserdata[groupid]' OR groupid = 0) AND needposts <= '$wbbuserdata[userposts]' AND userid = 0 ORDER BY needposts DESC",$avatarsperpage,$avatarsperpage*($page-1));
   while($row = $db->fetch_array($result)) {
    $avatarname="images/avatars/avatar-$row[avatarid].$row[avatarextension]";
    $avatarwidth=$row['width'];
    $avatarheight=$row['height'];
    if($row['avatarextension']=="swf") eval ("\$avatarchoice = \"".$tpl->get("avatar_flash")."\";");
    else eval ("\$avatarchoice = \"".$tpl->get("avatar_image")."\";");

    if($row['avatarid']==$wbbuserdata['avatarid']) $checked=" checked";
    else $checked="";
    eval ("\$avatarArray[] = \"".$tpl->get("usercp_avatarbit")."\";");
   }

   $tableRows = ceil(count($avatarArray)/5);
   $count = 0;
   for ($i=0; $i<$tableRows; $i++) {
    unset($avatarbit_td);
    for ($j=0; $j<5; $j++) {
     eval ("\$avatarbit_td .= \"".$tpl->get("usercp_avatarbit_td")."\";");
     $count++;
    }
    eval ("\$avatarbit_tr .= \"".$tpl->get("usercp_avatarbit_tr")."\";");
   }

   $countfrom = 1+$avatarsperpage*($page-1);
   $countto = $avatarsperpage*$page;
   if($countto > $avatarcount) $countto = $avatarcount;

   if($pages>1) $pagelink=makepagelink("usercp.php?action=avatars&sid=$session[hash]",$page,$pages,$showpagelinks-1);

   eval ("\$avatar_choice = \"".$tpl->get("usercp_avatar_choice")."\";");
  }
 }
 if($wbbuserdata['canuploadavatar']==1) {
  $ownavatar = $db->query_first("SELECT avatarid, avatarextension, width, height FROM bb".$n."_avatars WHERE userid = '$wbbuserdata[userid]'");
  if($ownavatar['avatarid']) {
   $avatarname="images/avatars/avatar-$ownavatar[avatarid].$ownavatar[avatarextension]";
   $avatarwidth=$ownavatar['width'];
   $avatarheight=$ownavatar['height'];
   $havatar = "<input type=\"hidden\" name=\"havatarid\" value=\"$ownavatar[avatarid]\">";

   if($ownavatar['avatarextension']=="swf") eval ("\$ownavatar = \"".$tpl->get("avatar_flash")."\";");
   else eval ("\$ownavatar = \"".$tpl->get("avatar_image")."\";");

   $ownavatar_checked = " CHECKED";
  }
  eval ("\$avatar_choice .= \"".$tpl->get("usercp_avatar_useown")."\";");
 }
 eval("\$tpl->output(\"".$tpl->get("usercp_avatars")."\");");
}

if($_REQUEST['action']=="addsubscription") {
 if(isset($threadid)) {
  $db->query("INSERT IGNORE INTO bb".$n."_subscribethreads (userid,threadid,emailnotify) VALUES ('$wbbuserdata[userid]','$threadid','1')");
  header("Location: thread.php?threadid=$threadid&sid=$session[hash]");
 }
 elseif(isset($boardid)) {
  $db->query("INSERT IGNORE INTO bb".$n."_subscribeboards (userid,boardid,emailnotify) VALUES ('$wbbuserdata[userid]','$boardid','1')");
  header("Location: board.php?boardid=$boardid&sid=$session[hash]");
 }
 exit();
}

if($_REQUEST['action']=="removesubscription") {
 if(isset($threadid)) $db->query("DELETE FROM bb".$n."_subscribethreads WHERE userid='$wbbuserdata[userid]' AND threadid='$threadid'");
 elseif(isset($boardid)) $db->query("DELETE FROM bb".$n."_subscribeboards WHERE userid='$wbbuserdata[userid]' AND boardid='$boardid'");

 header("Location: usercp.php?action=favorites&sid=$session[hash]");
 exit();
}

if($_REQUEST['action']=="favorites") {
 require("./acp/lib/class_parse.php");
 /** update emailcount **/
 $db->query("UPDATE bb".$n."_subscribethreads SET countemails=0 WHERE userid='$wbbuserdata[userid]'");
 $db->query("UPDATE bb".$n."_subscribeboards SET countemails=0 WHERE userid='$wbbuserdata[userid]'");
 $boardvisit=decode_cookie($_COOKIE['boardvisit']);
 $threadvisit=decode_cookie($_COOKIE['threadvisit']);

 /** boards **/
 $result = $db->query("SELECT boardid, threadid, lastposttime FROM bb".$n."_threads WHERE visible = 1 AND lastposttime > '$wbbuserdata[lastvisit]'");
 while($row=$db->fetch_array($result)) $visitcache[$row['boardid']][$row['threadid']]=$row['lastposttime'];

 $result = $db->query("
 SELECT
 s.emailnotify, b.*".ifelse($showlastposttitle==1,", t.topic, i.*")."
 FROM bb".$n."_subscribeboards s
 LEFT JOIN bb".$n."_boards b USING(boardid)
 ".ifelse($showlastposttitle==1,"LEFT JOIN bb".$n."_threads t ON (t.threadid=b.lastthreadid)
 LEFT JOIN bb".$n."_icons i USING (iconid)")."
 WHERE s.userid='$wbbuserdata[userid]' AND b.isboard=1
 ORDER by b.title ASC");

 $boardbit="";
 while($boards=$db->fetch_array($result)) {
  if($boards['description']) eval ("\$boards['description'] = \"".$tpl->get("index_boarddescription")."\";");

  if($wbbuserdata['lastvisit'] > $boards['lastposttime'] || $boardvisit[$boards['boardid']] > $boards['lastposttime']) $onoff="off";
  else {
   $onoff="off";
   $tempids = explode(",","$boards[boardid],$boards[childlist]");
   for($j=0;$j<count($tempids);$j++) {
    if($tempids[$j]==0) continue;
    if(is_array($visitcache[$tempids[$j]]) && count($visitcache[$tempids[$j]])) {
     reset($visitcache[$tempids[$j]]);
     while(list($threadid,$lastposttime)=each($visitcache[$tempids[$j]])) {
      if($threadvisit[$threadid]<$lastposttime && $boardvisit[$tempids[$j]]<$lastposttime) {
       $onoff="on";
       break 2;
      } // end if
     } // end while
    } // end if
   } // end for
  } // end else

  if($boards['threadcount']) {
   $lastpostdate=formatdate($dateformat,$boards['lastposttime'],1);
   $lastposttime=formatdate($timeformat,$boards['lastposttime']);

   if($boards['lastposterid']) eval ("\$lastposter = \"".$tpl->get("index_lastposter")."\";");
   else eval ("\$lastposter = \"".$tpl->get("index_lastposter_guest")."\";");
   if($showlastposttitle==1) {
    if(strlen($boards['topic'])>30) $topic=cutTopic($boards['topic']);
    else $topic=$boards['topic'];
    eval ("\$lastposttitle = \"".$tpl->get("index_lastpost_title_show")."\";");

    if(isset($boards['iconid'])) $ViewPosticon=makeimgtag($boards['iconpath'],$boards['icontitle']);
    else $ViewPosticon=makeimgtag("{imagefolder}/icons/icon14.gif");
    eval ("\$lastpost = \"".$tpl->get("index_lastpost_title")."\";");
   }
   else eval ("\$lastpost = \"".$tpl->get("index_lastpost")."\";");
  }
  else eval ("\$lastpost = \"".$tpl->get("index_nolastpost")."\";");
  eval ("\$boardbit .= \"".$tpl->get("usercp_boardbit")."\";");
 }
 if($boardbit) eval ("\$boardheader = \"".$tpl->get("usercp_boardheader")."\";");
 else eval ("\$boardheader = \"".$tpl->get("usercp_noboards")."\";");


 /** threads **/
 if($wbbuserdata['umaxposts']) $postsperpage=$wbbuserdata['umaxposts'];
 elseif($board['postsperpage']) $postsperpage=$board['postsperpage'];
 else $postsperpage=$default_postsperpage;

 if($board['hotthread_reply']==0) $board['hotthread_reply']=$default_hotthread_reply;
 if($board['hotthread_view']==0) $board['hotthread_view']=$default_hotthread_view;

 if(isset($_GET['daysprune'])) $daysprune = intval($_GET['daysprune']);
 elseif($wbbuserdata['daysprune']!=0) $daysprune = $wbbuserdata['daysprune'];
 else $daysprune = $default_daysprune;
 $d_select[1]="";
 $d_select[2]="";
 $d_select[5]="";
 $d_select[10]="";
 $d_select[20]="";
 $d_select[30]="";
 $d_select[45]="";
 $d_select[60]="";
 $d_select[75]="";
 $d_select[100]="";
 $d_select[365]="";
 $d_select[$daysprune]="selected";
 if($daysprune!=1000) {
  if($daysprune==1500) $datecute = " AND lastposttime >= '".$wbbuserdata['lastvisit']."'";
  else {
   $tempdate=time()-($daysprune*86400);
   $datecute = " AND t.lastposttime >= '".$tempdate."'";
  }
 }
 else $datecute="";

 $ownuserid="";
 $ownjoin="";

 $threadids="";
 $result = $db->query("SELECT t.threadid FROM bb".$n."_subscribethreads s LEFT JOIN bb".$n."_threads t USING(threadid) WHERE s.userid='$wbbuserdata[userid]' AND t.visible = 1 $datecute ORDER BY t.lastposttime DESC");
 while($row=$db->fetch_array($result)) $threadids .= ",".$row['threadid'];

 $result = $db->query("SELECT
  $ownuserid
  t.*,
  IF(t.voted>0,t.votepoints/t.voted,0) AS vote,
  i.*
  FROM bb".$n."_threads t
  LEFT JOIN bb".$n."_icons i USING (iconid)
  $ownjoin
  WHERE t.threadid IN (0$threadids)
  ORDER BY t.lastposttime DESC");

 $threadbit="";
 while($threads=$db->fetch_array($result)) {
  $firstnew="";
  $multipages="";
  $prefix="";

  if(strlen($threads['topic'])>30) $threads['topic']=parse::textwrap($threads['topic'],30);

  if($threads['voted']) {
   $avarage=number_format($threads['votepoints']/$threads['voted'],2);
   eval ("\$threadrating = \"".$tpl->get("board_threadbit_rating")."\";");
   $threadrating=str_repeat($threadrating, round($avarage));
  }
  else $threadrating="&nbsp;";

  if($threads['pollid']!=0) eval ("\$prefix .= \"".$tpl->get("board_thread_poll")."\";");

  if($threads['pollid']!=0) $foldericon="poll";
  else $foldericon=ifelse($threads['userid'],"dot").ifelse($wbbuserdata['lastvisit']<$threads['lastposttime'] && $threadvisit[$threads['threadid']]<$threads['lastposttime'],"new").ifelse($threads['replycount']>=$board['hotthread_reply'] || $threads['views']>=$board['hotthread_view'],"hot").ifelse($threads['closed']!=0,"lock")."folder";
  if($wbbuserdata['lastvisit']<$threads['lastposttime'] && $threadvisit[$threads['threadid']]<$threads['lastposttime']) eval ("\$firstnew = \"".$tpl->get("board_threadbit_firstnew")."\";");
  if($threads['iconid']) $threadicon=makeimgtag($threads['iconpath'],$threads['icontitle']);
  else $threadicon="&nbsp;";
  if($threads['starterid']!=0) eval ("\$threads['starter'] = \"".$tpl->get("board_threadbit_starter")."\";");
  if($threads['lastposterid']!=0) eval ("\$threads['lastposter'] = \"".$tpl->get("board_threadbit_lastposter")."\";");

  $lastpostdate=formatdate($dateformat,$threads['lastposttime'],1);
  $lastposttime=formatdate($timeformat,$threads['lastposttime']);

  if($threads['replycount']+1>$postsperpage && $showmultipages!=0) {
   unset($multipage);
   unset($multipages_lastpage);
   $xpages=ceil(($threads['replycount']+1)/$postsperpage);
   if($xpages>$showmultipages) {
    eval ("\$multipages_lastpage = \"".$tpl->get("board_threadbit_multipages_lastpage")."\";");
    $xpages=$showmultipages;
   }
   for($i=1;$i<=$xpages;$i++) $multipage.=" ".makehreftag("thread.php?threadid=$threads[threadid]&page=$i&sid=$session[hash]",$i);
   eval ("\$multipages = \"".$tpl->get("board_threadbit_multipages")."\";");
  }

  eval ("\$threadbit .= \"".$tpl->get("usercp_threadbit")."\";");
 }
 if($threadbit) eval ("\$threadheader = \"".$tpl->get("usercp_threadheader")."\";");
 else eval ("\$threadheader = \"".$tpl->get("usercp_nothreads")."\";");

 eval("\$tpl->output(\"".$tpl->get("usercp_favorites")."\");");
}
?>

BlackDragon_

^^' wollt eigentlich beide reintun aber der upload tut nicht

code:

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:
132:
133:
134:
135:
136:
137:
138:
139:
140:
141:
142:
143:
144:
145:
146:
147:
148:
149:
150:
151:
152:
153:
154:
155:
156:
157:
158:
159:
160:
161:
162:
163:
164:
165:
166:
167:
168:
169:
170:
171:
172:
173:
174:
175:
176:
177:
178:
179:
180:
181:
182:
183:
184:
185:
186:
187:
188:
189:
190:
191:
192:
193:
194:
195:
196:
197:
198:
199:
200:
201:
202:
203:
204:
205:
206:
207:
208:
209:
210:
211:
212:
213:
214:
215:
216:
217:
218:
219:
220:
221:
222:
223:
224:
225:
226:
227:
228:
229:
230:
231:
232:
233:
234:
235:
236:
237:
238:
239:
240:
241:
242:
243:
244:
245:
246:

<?php
$filename="register.php";

require("./global.php");

if(isset($_REQUEST['action']) && $_REQUEST['action']=="activation") {
 if(isset($_REQUEST['usrid']) && isset($_REQUEST['a'])) {
  $result=$db->query_first("SELECT userid, activation FROM bb".$n."_users WHERE userid='".intval($_REQUEST['usrid'])."'");
  if(!$result['userid']) eval("error(\"".$tpl->get("error_usernotexist")."\");");
  if($result['activation']==1) eval("error(\"".$tpl->get("error_accountalreadyactive")."\");");
  if($result['activation']!=intval($_REQUEST['a'])) eval("error(\"".$tpl->get("error_falseactivationcode")."\");");
  $db->query("UPDATE bb".$n."_users SET activation=1 WHERE userid='$result[userid]'");
  eval("redirect(\"".$tpl->get("redirect_accountactive")."\",\"index.php?sid=$session[hash]\",10);");
 }
 else eval("\$tpl->output(\"".$tpl->get("register_activation")."\");");
 exit();
}

if($wbbuserdata['userid']!=0) access_error();
if($allowregister!=1) eval("error(\"".$tpl->get("error_register_disabled")."\");");
if($showdisclaimer==1 && $_POST['disclaimer']!="viewed") {
 eval("\$tpl->output(\"".$tpl->get("register_disclaimer")."\");");
 exit();
}
else {
 if(isset($_POST['disclaimer'])) $disclaimer = $_POST['disclaimer'];
 $group = $db->query_first("SELECT * FROM bb".$n."_groups WHERE default_group = 2");
 if(isset($_POST['send'])) {
  if(is_array($_POST['field'])) $field = trim_array($_POST['field']);
  if(isset($_POST['r_email'])) $r_email = trim($_POST['r_email']);
  if(isset($_POST['r_homepage'])) $r_homepage = trim($_POST['r_homepage']);
  if(isset($_POST['r_icq'])) $r_icq = trim($_POST['r_icq']);
  if(isset($_POST['r_aim'])) $r_aim = trim($_POST['r_aim']);
  if(isset($_POST['r_yim'])) $r_yim = trim($_POST['r_yim']);
  if(isset($_POST['r_msn'])) $r_msn = trim($_POST['r_msn']);
  if(isset($_POST['r_werber'])) $r_werber = trim($_POST['r_werber']);
  if(isset($_POST['r_day'])) $r_day = trim($_POST['r_day']);
  if(isset($_POST['r_month'])) $r_month = trim($_POST['r_month']);
  if(isset($_POST['r_year'])) $r_year = trim($_POST['r_year']);
  if(isset($_POST['r_gender'])) $r_gender = trim($_POST['r_gender']);
  if(isset($_POST['r_usertext'])) $r_usertext = trim($_POST['r_usertext']);
  if(isset($_POST['r_username'])) $r_username = trim($_POST['r_username']);
  if(isset($_POST['r_password'])) $r_password = trim($_POST['r_password']);
  if(isset($_POST['r_confirmpassword'])) $r_confirmpassword = trim($_POST['r_confirmpassword']);
  if(isset($_POST['r_signature'])) $r_signature = trim($_POST['r_signature']);

  if(isset($_POST['r_invisible'])) $r_invisible = $_POST['r_invisible'];
  if(isset($_POST['r_nosessionhash'])) $r_nosessionhash = $_POST['r_nosessionhash'];
  if(isset($_POST['r_usecookies'])) $r_usecookies = $_POST['r_usecookies'];
  if(isset($_POST['r_admincanemail'])) $r_admincanemail = $_POST['r_admincanemail'];
  if(isset($_POST['r_showemail'])) $r_showemail = $_POST['r_showemail'];
  if(isset($_POST['r_usercanemail'])) $r_usercanemail = $_POST['r_usercanemail'];
  if(isset($_POST['r_emailnotify'])) $r_emailnotify = $_POST['r_emailnotify'];
  if(isset($_POST['r_receivepm'])) $r_receivepm = $_POST['r_receivepm'];
  if(isset($_POST['r_emailonpm'])) $r_emailonpm = $_POST['r_emailonpm'];
  if(isset($_POST['r_pmpopup'])) $r_pmpopup = $_POST['r_pmpopup'];
  if(isset($_POST['r_showsignatures'])) $r_showsignatures = $_POST['r_showsignatures'];
  if(isset($_POST['r_showavatars'])) $r_showavatars = $_POST['r_showavatars'];
  if(isset($_POST['r_showimages'])) $r_showimages = $_POST['r_showimages'];
  if(isset($_POST['r_daysprune'])) $r_daysprune = $_POST['r_daysprune'];
  if(isset($_POST['r_umaxposts'])) $r_umaxposts = $_POST['r_umaxposts'];
  if(isset($_POST['r_styleid'])) $r_styleid = $_POST['r_styleid'];

  $r_username=preg_replace("/\s{2,}/"," ",$r_username);

  $error="";
  $userfield_error=0;
  $fieldvalues="";

  $result = $db->query("SELECT profilefieldid, required FROM bb".$n."_profilefields ORDER BY profilefieldid ASC");
  while($row=$db->fetch_array($result)) {
   if($row['required']==1 && !$field[$row['profilefieldid']]) {
    $userfield_error=1;
    break;
   }
   $fieldvalues.=",'".addslashes(htmlspecialchars($field[$row['profilefieldid']]))."'";
  }

  if($userfield_error==1 || !$r_username || !$r_email || ($emailverifymode!=3 && (!$r_password || !$r_confirmpassword))) eval ("\$error .= \"".$tpl->get("register_error1")."\";");
  if($emailverifymode!=3 && $r_password!=$r_confirmpassword) eval ("\$error .= \"".$tpl->get("register_error2")."\";");
  if(!verify_username($r_username)) eval ("\$error .= \"".$tpl->get("register_error3")."\";");
  if(!verify_email($r_email)) eval ("\$error .= \"".$tpl->get("register_error4")."\";");
  if(strlen($r_signature)>$group['maxsiglength']) eval ("\$error .= \"".$tpl->get("register_error5")."\";");
  if($group['maxsigimage']!=-1 && substr_count(strtolower($r_signature),"[img]")>$group['maxsigimage']) eval ("\$error .= \"".$tpl->get("register_error6")."\";");
  if(strlen($r_usertext)>$group['maxusertextlength']) eval ("\$error .= \"".$tpl->get("register_error7")."\";");
  if($error) eval ("\$register_error .= \"".$tpl->get("register_error")."\";");
  else {
   if($emailverifymode==3) $r_password=password_generate();
   if($emailverifymode==1 || $emailverifymode==2) $activation=code_generate();
   else $activation=1;

   if($r_homepage && !preg_match("/[a-zA-Z]:\/\//si", $r_homepage)) $r_homepage = "http://".$r_homepage;
   if($r_day && $r_month && $r_year) $birthday=ifelse(strlen($r_year)==4,$r_year,ifelse(strlen($r_year)==2,"19$r_year","0000"))."-".ifelse($r_month<10,"0$r_month",$r_month)."-".ifelse($r_day<10,"0$r_day",$r_day);
   else $birthday = "0000-00-00";

   $groupid = $group['groupid'];
   $rankid = $db->query_first("SELECT rankid FROM bb".$n."_ranks WHERE groupid IN ('0','$groupid') AND needposts='0' AND gender IN ('0','".intval($r_gender)."') ORDER BY gender DESC",1);

//Guthaben-Hack BEGIN
$guthaben_hack=$db->query_first("SELECT reg_onoff, reg_wert, werber_wert, werber_onoff FROM bb".$n."_guthaben_config");
If ($guthaben_hack['reg_onoff']==1){
        $reg_on=",guthaben";
        $reg_wert=", '".intval($guthaben_hack[reg_wert])."'";
}
//Guthaben Hack END


   $db->query("INSERT INTO bb".$n."_users (userid,username,password,email,groupid,rankid,regdate,lastvisit,lastactivity,usertext,signature,icq,aim,yim,msn,homepage,birthday,gender,showemail,admincanemail,usercanemail,invisible,usecookies,styleid,activation,daysprune,timezoneoffset,dateformat,timeformat,emailnotify,receivepm,emailonpm,pmpopup,umaxposts,showsignatures,showavatars,showimages,nosessionhash $reg_on)
    VALUES (NULL,'".addslashes(htmlspecialchars($r_username))."','".md5($r_password)."','".addslashes(htmlspecialchars($r_email))."','$groupid','$rankid[rankid]','".time()."','".time()."','".time()."','".addslashes(htmlspecialchars($r_usertext))."','".addslashes($r_signature)."','".intval($r_icq)."','".addslashes(htmlspecialchars($r_aim))."','".addslashes(htmlspecialchars($r_yim))."','".addslashes(htmlspecialchars($r_msn))."','".addslashes(htmlspecialchars($r_homepage))."','".addslashes(htmlspecialchars($birthday))."','".intval($r_gender)."','".intval($r_showemail)."','".intval($r_admincanemail)."','".intval($r_usercanemail)."','".intval($r_invisible)."','".intval($r_usecookies)."','".intval($r_styleid)."','".intval($activation)."','".intval($r_daysprune)."','".addslashes($default_timezoneoffset)."','".addslashes(htmlspecialchars($dateformat))."','".addslashes(htmlspecialchars($timeformat))."','".intval($r_emailnotify)."','".intval($r_receivepm)."','".intval($r_emailonpm)."','".intval($r_pmpopup)."','".intval($r_umaxposts)."','".intval($r_showsignatures)."','".intval($r_showavatars)."','".intval($r_showimages)."','".intval($r_nosessionhash)."'".$reg_wert.")");
   $insertid = $db->insert_id();
//Guthaben-Hack BEGIN
$guthaben_hack=$db->query_first("SELECT reg_onoff, reg_wert FROM bb".$n."_guthaben_config");
If ($guthaben_hack['reg_onoff']==1){
 	  $db->query("INSERT INTO bb".$n."_guthaben_konto (userid,begruendung,wieviel,date) VALUES ($insertid, 'Registrierung', '$guthaben_hack[reg_wert]','".time()."')");
}
	//Guthaben Hack END

   $db->query("INSERT INTO bb".$n."_userfields VALUES (".$insertid.$fieldvalues.")");

//Guthaben-Hack BEGIN
If (isset($r_werber){
   $db->query("INSERT INTO bb".$n."_guthaben_werber (werberid,userid) VALUES  ('".intval($r_werber)."',$insertid)");
   $db->query("UPDATE bb".$n."_users SET guthaben=guthaben+200 WHERE userid='$r_werber'");
}
//Guthaben Hack END

   if($regnotify==1) {
    eval ("\$subject = \"".$tpl->get("ms_regnotify")."\";");
    eval ("\$content = \"".$tpl->get("mt_regnotify")."\";");
    mailer($webmastermail,$subject,$content);
   }

   $r_username=htmlspecialchars($r_username);
   $r_email=htmlspecialchars($r_email);

   if($r_nosessionhash==1) $session['hash']="";
   if($emailverifymode==0) {
    if($r_usecookies==1) {
     bbcookie("wbb_userid","$insertid",time()+3600*24*365);
     bbcookie("wbb_userpassword",md5($r_password),time()+3600*24*365);
    }
    $db->query("UPDATE bb".$n."_sessions SET userid = '".$insertid."' WHERE hash = '$sid'");
    header("Location: index.php?sid=$session[hash]");
    exit();
   }
   if($emailverifymode==1) {
    eval ("\$subject = \"".$tpl->get("register_mail1_subject")."\";");
    eval ("\$content = \"".$tpl->get("register_mail1_content")."\";");
    mailer($r_email,$subject,$content);
    eval("redirect(\"".$tpl->get("redirect_register1")."\",\"index.php?sid=$session[hash]\",20);");
   }
   if($emailverifymode==2) {
    eval("redirect(\"".$tpl->get("redirect_register2")."\",\"index.php?sid=$session[hash]\",20);");
   }
   if($emailverifymode==3) {
    eval ("\$subject = \"".$tpl->get("register_mail3_subject")."\";");
    eval ("\$content = \"".$tpl->get("register_mail3_content")."\";");
    mailer($r_email,$subject,$content);
    eval("redirect(\"".$tpl->get("redirect_register3")."\",\"index.php?sid=$session[hash]\",20);");
   }
  }
 }
 else {
  $r_invisible=$default_register_invisible;
  $r_nosessionhash=$default_register_nosessionhash;
  $r_usecookies=$default_register_usecookies;
  $r_admincanemail=$default_register_admincanemail;
  $r_showemail=1-$default_register_showemail;
  $r_usercanemail=$default_register_usercanemail;
  $r_emailnotify=$default_register_emailnotify;
  $r_receivepm=$default_register_receivepm;
  $r_emailonpm=$default_register_emailonpm;
  $r_pmpopup=$default_register_pmpopup;
  $r_showsignatures=$default_register_showsignatures;
  $r_showavatars=$default_register_showavatars;
  $r_showimages=$default_register_showimages;
 }

 for($i=1;$i<=31;$i++) $day_options.=makeoption($i,$i,$r_day);
 for($i=1;$i<=12;$i++) $month_options.=makeoption($i,getmonth($i),$r_month);

 if(isset($r_gender)) $gender[$r_gender]=" selected";
 if(isset($r_invisible)) $invisible[$r_invisible]=" selected";
 if(isset($r_nosessionhash)) $nosessionhash[$r_nosessionhash]=" selected";
 if(isset($r_usecookies)) $usecookies[$r_usecookies]=" selected";
 if(isset($r_admincanemail)) $admincanemail[$r_admincanemail]=" selected";
 if(isset($r_showemail)) $showemail[$r_showemail]=" selected";
 if(isset($r_usercanemail)) $usercanemail[$r_usercanemail]=" selected";
 if(isset($r_emailnotify)) $emailnotify[$r_emailnotify]=" selected";
 if(isset($r_receivepm)) $receivepm[$r_receivepm]=" selected";
 if(isset($r_emailonpm)) $emailonpm[$r_emailonpm]=" selected";
 if(isset($r_pmpopup)) $spmpopup[$r_pmpopup]=" selected";
 if(isset($r_showsignatures)) $showsignatures[$r_showsignatures]=" selected";
 if(isset($r_showavatars)) $showavatars[$r_showavatars]=" selected";
 if(isset($r_showimages)) $showimages[$r_showimages]=" selected";
 if(isset($r_daysprune)) $sdaysprune[$r_daysprune]=" selected";
 if(isset($r_umaxposts)) $sumaxposts[$r_umaxposts]=" selected";

 $timezones = explode("\n", $tpl->get("timezones"));
 for($i=0;$i<count($timezones);$i++) {
  $parts = explode("|", trim($timezones[$i]));
  $timezone_options .= makeoption($parts[0],"(GMT".ifelse($parts[1]," ".$parts[1],"").") $parts[2]",$default_timezoneoffset);
 }
 $z=1;
 $y=ifelse($emailverifymode!=3,0,1);
 $result=$db->query("SELECT * FROM bb".$n."_profilefields ORDER BY fieldorder ASC");
 while($row=$db->fetch_array($result)) {
  $field_value=$field[$row['profilefieldid']];

  if($row[required]==1) {
   $tdbgcolor=getone($y,"{tablecolora}","{tablecolorb}");
   $tdid=getone($y,"tablea","tableb");

   eval ("\$profilefields_required .= \"".$tpl->get("register_userfield")."\";");
   $y++;
  }
  else {
   $tdbgcolor=getone($z,"{tablecolora}","{tablecolorb}");
   $tdid=getone($z,"tablea","tableb");

   eval ("\$profilefields .= \"".$tpl->get("register_userfield")."\";");
   $z++;
  }
 }

 $result = $db->query("SELECT styleid, stylename FROM bb".$n."_styles WHERE default_style = 0 ORDER BY stylename ASC");
 while($row=$db->fetch_array($result)) $style_options.=makeoption($row['styleid'],$row['stylename'],$r_styleid);

$guthaben=$db->query_first("SELECT werber_onoff FROM bb".$n."_guthaben_config");
If ($guthaben['werber_onoff']==1){
eval ("\$register_werbeid .= \"".$tpl->get("register_werber")."\";");
}

 if($emailverifymode!=3) eval ("\$register_password .= \"".$tpl->get("register_password")."\";");

 eval ("\$note .= \"".$tpl->get("note_html_".ifelse($allowsightml==0,"not_")."allow")."\";");
 eval ("\$note .= \"".$tpl->get("note_bbcode_".ifelse($allowsigbbcode==0,"not_")."allow")."\";");
 eval ("\$note .= \"".$tpl->get("note_smilies_".ifelse($allowsigsmilies==0,"not_")."allow")."\";");
 eval ("\$note .= \"".$tpl->get("note_images_".ifelse($maxsigimage==0,"not_")."allow")."\";");

 if(!$r_icq) $r_icq="";
 if($r_year=="0000") $r_year="";

 eval("\$tpl->output(\"".$tpl->get("register")."\");");
}
?>