HEX
Server: Apache
System: Linux www3.pit.tblive.com 5.14.0-687.38.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Aug 12 17:19:12 EDT 2026 x86_64
User: awaldron (1020)
PHP: 8.1.34
Disabled: exec,passthru,shell_exec,system
Upload Files
File: //proc/thread-self/root/home/awaldron/public_html/archive/demo/admin/boards_add.php
<?php
session_start();
include("../_functions.php");
dbconnect();
if (!is_logged()) auto_login();

if ((isset($_GET["a"])) && ($_GET["a"] == "edit")) $edit = TRUE;
if ((isset($_GET["a"])) && ($_GET["a"] == "add")) $edit = FALSE;

echo "<html>\n";
echo "<head>\n";
echo "<title>".COMPANY_NAME." : ".($edit?"Edit":"Add a ")." Noticeboard</title>\n";
echo "</head>\n";
echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"../default.css\">\n";
echo "<body style=\"margin:15px;\">\n";


if (!admin_panel($_SESSION["auth_user"])) {
	echo "<br><br><br><br>".error("You must be logged in to access the administration panel!");
} else {
	
	if (isset($_POST["edit"]) || isset($_POST["add"])) {
		if (isset($_POST["add"])) {
			// Create New pGroup:
			$pg = "INSERT INTO tbl_pgroup (pgroup_name,pgroup_mod,pgroup_desc,pgroup_status,pgroup_edit) VALUES ";
			$pg .= "('Board Admins: ".$_POST["notice_type_name"]."','".$_SESSION["auth_user"]."','Administrators of the ".$_POST["notice_type_name"]." notice board.',0,1)";
			quickUPDATE($pg);
			$sql = "INSERT INTO tbl_notice_types SET ";
		}
		if (isset($_POST["edit"])) $sql = "UPDATE tbl_notice_types SET ";
		$sql .= "notice_type_name='".$_POST["notice_type_name"]."', ";
		$sql .= "forum_view=".$_POST["forum_view"].", ";
		$sql .= "notice_type_discuss=".$_POST["notice_type_discuss"].", ";
		$sql .= "notice_type_desc='".$_POST["notice_type_desc"]."', ";
		$sql .= "parent_id=".$_POST["parent_id"].", ";
		$sql .= "notice_type_active=".$_POST["notice_type_active"];
		if (isset($_POST["add"])) $sql .= ", board_admins=".quickSQL("SELECT MAX(pgroup_id) FROM tbl_pgroup");
		if (isset($_POST["edit"])) $sql .= " WHERE notice_type_id=".$_POST["notice_type_id"];
	
		quickUPDATE($sql);
		$ok = TRUE;
		if (isset($_POST["add"])) {
			$_GET["id"] = quickSQL("SELECT MAX(notice_type_id) FROM tbl_notice_types");
			$_GET["a"] = "edit";
			$edit = TRUE;
		}	
	}
	
	echo "<P><img src=\"/gui/icons/cog.gif\" align=\"left\">\n";
	echo "<div class=\"headline\">".($edit?"Edit":"Add a ")." Noticeboard</div>\n";
	echo "<P>Use this form to ".($edit?"edit this":"create a new")." Noticeboard or Discussion Forum.\n";
	echo "<br><br><br>\n";
	
	if ($edit) {
		$sql = "SELECT * FROM tbl_notice_types WHERE notice_type_id=".$_GET["id"];
		$res = mysql_query($sql);
		extract(mysql_fetch_array($res));
	}
	
	echo "<center>\n";
	if ($ok) {
		if (isset($_POST["edit"])) echo notice("The board has been updated successfully.");
		if (isset($_POST["add"])) echo notice("Your board has been added successfully.");
	}
	echo "<form action=\"boards_add.php?a=".$_GET["a"].(isset($_GET["id"])?"&id=".$_GET["id"]:"")."\" method=\"post\">\n";
	if ($edit) echo "<input type=\"hidden\" name=\"notice_type_id\" value=\"".$notice_type_id."\">\n";
	echo "<table class=\"textdn\" border=0 cellspacing=0 cellpadding=5>\n";	
		echo "<tr><td><b>Board Name:</b></td><td><input type=\"text\" name=\"notice_type_name\" value=\"".$notice_type_name."\" size=50 MAXLENGTH=255></td></tr>\n";
		echo "<tr><td><b>Board Type:</b></td><td><SELECT name=\"forum_view\"><option value=0".($forum_view==0?" SELECTED":"").">Noticeboard</option><option value=1".($forum_view==1?" SELECTED":"").">Discussion Forum</option></SELECT></td></tr>\n";
		echo "<tr><td><b>Allow Replies?</b></td><td><SELECT name=\"notice_type_discuss\"><option value=1".($notice_type_discuss==1?" SELECTED":"").">Yes</option><option value=0".($notice_type_discuss==0?" SELECTED":"").">No</option></SELECT></td></tr>\n";
		echo "<tr><td valign=\"top\">Board Description:<br>(optional)</td><td><textarea name=\"notice_type_desc\" rows=7 cols=80>".$notice_type_desc."</textarea></td></tr>\n";
		echo "<tr><td><b>Parent Page:</b></td><td><SELECT name=\"parent_id\">";
			page_select(0,0,(isset($parent_id)?$parent_id:1));
		echo "</SELECT></td></tr>\n";
		echo "<tr><td colspan=2><b>Display a link to this board on Parent Page?</b> <SELECT name=\"notice_type_active\"><option value=1".($notice_type_active==1?" SELECTED":"").">Yes</option><option value=0".($notice_type_active==0?" SELECTED":"").">No</option></SELECT></td></tr>\n";
	echo "</table>\n";
	echo "<P><input type=\"submit\" name=\"".$_GET["a"]."\" value=\" ".ucfirst($_GET["a"])." Board \">\n";
	echo "</form></center>\n";
	
	echo "<br><br><br><center><a href=\"boards_manage.php\">Back to Noticeboard Manager</a></center>\n";

	echo "<br><br><br><br>\n";
	echo "<center>Powered by <a href=\"http://www.intrabreeze.com\">IntraBreeze</a> &copy; 2005 IntraBreeze, LLC</center>\n";
}

echo "</body>\n</html>\n";
?>