<?
require ("config.php");
include("functions.php");
if(!isset($cmd))$cmd=1;
switch($cmd)
{
	case 1:$file="mainpage.php";
				if(!empty($vote)&&(!empty($photoid)))
				{
						$id=$photoid;
						if(isset($ratingcookie))
					   {
						if(!(strpos($ratingcookie,"*$id*")===false))
						{
							$msg="Ai votat deja aceasta poza!";
						}
					   }
					
						if(isset($vote))
						{
							if(isset($ratingcookie))
							{
								$ratingcookie=$ratingcookie."*$id*";
								setcookie("ratingcookie",$ratingcookie);
							}
							else
							{
								$ratingcookie="*$id*";
								setcookie("ratingcookie",$ratingcookie);
							}
							submitRating($id,$vote);
							$msg="Votul a fost inregistrat!";
						}
						$username="";

				}
				break;
	case 2:$file="signup.php";
			   if(isset($username))
			   {
			   		$validcode="";
			   		$sql="select * from members where username='$username'";
					$res=mysql_query($sql);
					if(mysql_num_rows($res))
					{
						$err=true;
					}
					else
					{
						$act=getSetting("AUTOSIGNUP");
						if($act=="Y")
						{
							$active=1;
						}
						else 
						{
							$active=0;
							$validcode=generateCode();
						}
						$sql="insert into members(username,password,email,age,gender,about,city,country,msn,active,aol,yahoo,icq,fname,lname,commentemail,messageemail,validcode,joindate) values('$username','$password','$email',$age,'$gender','$about','$city','$country','$msn',$active,'$aol','$yahoo','$icq','$fname','$lname','$commentemail','$messageemail','$validcode',now())";
						$res=mysql_query($sql);
						$uniqid=mysql_insert_id();
						if($act=="Y")
						{
							$template=getTemplate("NEWMEMBER");
							$template=str_replace("%username%",$username,$template);
							$template=str_replace("%password%",$password,$template);							
							sendHTMLmail($adminemail,$email,"Bine ati venit pe $urldomain",$template);
							$newmember=true;
							$file="login.php";
						}
						else 
						{
							$template=getTemplate("EMAILVALIDATION");
							$template=str_replace("%username%",$username,$template);
							$template=str_replace("%password%",$password,$template);							
							$template=str_replace("%validcode%",$validcode,$template);														
							sendHTMLmail($adminemail,$email,"Validation Code from $urldomain",$template);
							$file="validcode.php";
						}
					}
			   }	
				break;
	case 3:$file="login.php";
				 if(isset($username))
				 {
 	  							$sql="select password,active from members where username='$username'";
								$result=mysql_query($sql);
								while($row=mysql_fetch_array($result))
								{
									$dbpass=$row[0];
									$active=$row[1];
								}
								if($dbpass==$password)
								{
								   if($active==2)
								   {
   									$error="wu";
									$file="login.php";
								   }
								   else if($active==0) 
								   {
   									$file="validcode.php";
								   }
								   else
								   {
										session_start();
										$ses_username=$username;
										session_register("ses_username");
										if(empty($repusername)&&empty($rphid))
										{
										$username="";
										$file="mainpage.php";
										}
										else if(!empty($repusername))
										{
											$username=$repusername;
											$file="sendmessage.php";
										}
										else if(!empty($rphid))
										{
											$phid=$rphid;
											$file="postcomment.php";
										}
									}
								}
								else
								{
									$error="wu";
									$file="login.php";
								}
				 }			 	
				break;
	case 4:$file="validcode.php";
				 if(isset($username))
				 {
 	  							$sql="select * from members where username='$username' and password='$password' and validcode='$validcode'";
								$result=mysql_query($sql);
								if(mysql_num_rows($result))
								{
									$sql="update members set active=1 where username='$username'";
									$updated=true;
									mysql_query($sql);
									session_start();
										$ses_username=$username;
										session_register("ses_username");
										$username="";
										$file="myphotos.php";
								}
								else
								{
									$error="wu";
								}
				 }			 	
				break;
		case 5:$file="editprofile.php";
				include("checksession.php");
				if(isset($password))
				{
					if($commentemail=="")$commentemail="N";
					if($messageemail=="")$messageemail="N";
					$sql="update members set password='$password',email='$email',age=$age,gender='$gender',about='$about',city='$city',country='$country',msn='$msn',aol='$aol',yahoo='$yahoo',icq='$icq',fname='$fname',lname='$lname',commentemail='$commentemail',messageemail='$messageemail' where username='$ses_username'";
					$updated=true;
					mysql_query($sql);
				}
				break;
		case 6:$file="myphotos.php";
				//include("checksession.php");
				if(isset($addpic))
				{
						$approved=getSetting("APPROVEPIC");
						if(!empty($url))
						{
								$sql="insert into photos(url,filename,username,upldate,approved) values('$url','$filename','$ses_username',now(),'$approved')";
								$res=mysql_query($sql);
						}
						else if(!empty($uppic_name))
						{
							$allowable=getSetting("ALLOWEDFORMATS");
							$allowablearr=split(",",$allowable);
							$allowedType=0;
							$ext=strchr($uppic_name,".");
							
							if(in_array($ext,$allowablearr))$allowedType=1;
							if($allowedType==1)
							{
							$fileid=generateShortCode();
							$filename=$ses_username.$fileid.$ext;
							
							$copytofile="pics/$filename";
							copy($uppic,$copytofile);
							@unlink($uppic);
							
								$sql="insert into photos(url,filename,username,upldate,approved) values('$url','$filename','$ses_username',now(),'$approved')";
								$res=mysql_query($sql);
							}
							else
							{
								@unlink($uppic);
								$uperror="Formatul pozei nu este aprobat!";
							}
						}
						if($approved=="Y")
						{
							$error="Imaginea a fost adaugata.";	
						}
						else if($error=="")
						{
							$error="Imaginea este pe lista de asteptare pentru a fi aprobata.";
						}
				}
				break;
				
		case 7:$file="inbox.php";
				include("checksession.php");
				if(isset($rowcount))
				{
							for($i=0;$i<$rowcount;$i++)
							 { 
								if(isset($chk[$i]))
								 {
									$sql="delete from messages where messagesid=$chk[$i]";
									mysql_query($sql);	 	
								 }
							 }
				}
				break;
		case 8:$file="viewmessage.php";
				if(isset($delid))
				{
					$sql="delete from messages where messagesid=$delid";
					mysql_query($sql);
					$cnarr=getPrevNextMessages($delid);
					$nextid=$cnarr[1];
					if($nextid==0)
					{
						$file="inbox.php";
					}
					else
					{
						$msgid=$nextid;
					}
				}
				include("checksession.php");
				break;
		case 9:$file="replymessage.php";
				include("checksession.php");
				if(isset($tousername))
				{
						$sql="insert into messages(message,fromusername,tousername,upldate,subject) values('$message','$ses_username','$tousername',now(),'$subject')";
						newMessageSent($ses_username,$tousername);
						$res=mysql_query($sql);
						$mheading="Mesaj expediat";
						$mmessage="Mesajul a fost trimis la $tousername";
						$file="displaymessage.php";
				}
				break;
		case 10:$file="viewpics.php";
				break;
		case 11:$file="searchresults.php";
				break;					
		case 12:$file="postcomment.php";
				$rphid=$phid;
				include("checksession.php");
				if(isset($comment))
				{
					$approved=getSetting("APPROVECOMMENTS");
					$sql="insert into comments(comment,photosid,byusername,approved,postdate) values('$comment',$phid,'$ses_username','$approved',now())";
					newCommentPosted($ses_username,$phid);
					$res=mysql_query($sql);
						$mheading="Comentarii salvate";
						$mmessage="Comentariile au fost salvate!";
						$file="displaymessage.php";					
				}
				break;					
		case 19:$file="sendmessage.php";
					$repusername=$username;
					include("checksession.php");
					break;				
		case 20:$file="viewprofile.php";
		            break;				
		case 21:$file="myphotos.php";
				include("checksession.php");
				$sql="select * from photos,ratings where photos.photosid=$id and ratings.photosid=$id";
				$res=mysql_query($sql);
				while($obj=mysql_fetch_object($res))
				{
					if($obj->filename!="")@unlink("pics/$obj->filename");
				}
				$sql="delete from photos where photosid=$id";
				$sqa="delete from ratings where photosid=$id";
				$res=mysql_query($sql);
				$resa=mysql_query($sqa);
				break;				
		case 22:
				session_destroy();
				$ses_username="";
			$username="";
				$file="mainpage.php";
				break;

}

include("header.php"); ?>


<tr>




								<td colspan="3">
									<table bgcolor="#ffffff" cellpadding="0" cellspacing="0" border="0" style="width:765px;">
										<tr>
											<td width="100%" style="padding-top:0px;"> 												<br style="line-height:1px;">
												
<!==================================================>
<table  border="0" cellspacing="0" cellpadding="0" style="width:100%;">
										<tr bgcolor="white">
											<td valign="top"><img src="images/lt_corn.gif" alt=""></td>
											<td valign="top" style="width:100%; background:URL(images/tall.gif) repeat-x top;"></td>
											<td valign="top"><img src="images/rt_corn.gif" alt=""></td>
										</tr>
										<tr bgcolor="white">
											<td valign="top" style="background:URL(images/tall.gif) repeat-y left  "></td>
											<td valign="top" style="width:100%; padding-left:0px; padding-top:2px;">  
<? include($file); ?>

<td valign="top" style="background:URL(images/tall.gif) repeat-y right  "></td>
										</tr>
										<tr bgcolor="white">
											<td valign="top"><img src="images/lb_corn.gif" alt=""></td>
											<td valign="top" style="width:100%; background:URL(images/tall.gif) repeat-x bottom"></td>
											<td valign="top"><img src="images/rb_corn.gif" alt=""></td>
										</tr>
</table>
<!==================================================>
											</td>
										</tr>

									</table>
								</td>


</tr>
							<!-- end of body -->
</table>
<table>
<tr>
		<!-- begin of footer -->
		<td width="766" height="100%">
			<table cellpadding="0" cellspacing="0" border="0" style="width:100%; height:100%;">
				<tr>
					<td width="100%" height="70" style="background:url(images/1f_back.gif) repeat-x top;">
						<table cellpadding="0" cellspacing="0" border="0" style="width:100%; height:100%;">
							<tr>
								<td width="13" height="100%"><img src="images/spacer.gif" alt="" width="14" height="1"><br>
								</td>
								<td width="245" height="100%" style="padding-top:24px;" class="footertxt"> Copyright &copy; 2009 Vl.Ro 



<script type="text/javascript">t_rid="vl";</script>       
<script type="text/javascript" src="http://storage.trafic.ro/js/trafic.js"></script>
<noscript><a href="http://www.trafic.ro/top/?rid=vl" target="_blank"><img border="0" alt="trafic ranking"
src="http://log.trafic.ro/cgi-bin/pl.dll?rid=vl"/></a> </noscript>





</td>

								<td width="30" height="100%"><img src="images/spacer.gif" alt="" width="30" height="1"><br>
								</td>

<td width="513" height="100%" style=" padding-top:24px;"> <a href="index.php" class="footerlink2">Acasa</a>&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;<a href="istoric.php" class="footerlink2">Istoric</a>&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;<a href="invatamant.php" class="footerlink2">Invatamant</a>&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;<a href="mass.php" class="footerlink2">Massmedia</a>&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;<a href="institutii.php" class="footerlink2">Institutii</a>&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;<a href="imagini.php" class="footerlink2">Imagini</a>&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;<a href="contact.php" class="footerlink2">Contact</a><br>
								</td>

							</tr>
						</table>
					</td>
				</tr>
			</table>
		</td>
</tr>
	<!-- end of footer -->
</table>
</body>
</html>















<? include("conclose.php"); ?>