| zerobytes |
| Valuable expert |
 |
|
| Joined: Aug 30, 2008 |
| Posts: 199 |
|
|
|
 |
|
 |
|
| Code: |
<?php
# Start the session and gz-handler
session_start();
ob_start("ob_gzhandler");
error_reporting(E_ALL);
define('default_language','dutch');
# Register globals hack
unset($GLOBALS);
# Magic Quotes OFF hack
if(get_magic_quotes_gpc()){
foreach($_POST as $key => $value){
if(is_array($value)){
$_POST[$key] = $value;
}else{
$_POST[$key] = stripslashes($value);
}
}
foreach($_GET as $key => $value){
$_GET[$key] = stripslashes($value);
}
}
# Include some files
include_once("./includes/config.php");
include_once("./includes/functions.php");
# Check if the blacklist is in the config.php (backwords compatibility)
$config_content = file_get_contents("./includes/config.php");
if(strpos($config_content,"define('config_blacklist',") === false){
$config_content = file("./includes/config.php");
array_pop($config_content);
$config_content[] = "\tdefine('config_blacklist','');\n?>";
file_put_contents("./includes/config.php",implode('',$config_content));
}
# Check the license key on the remote server
function check_license_key($license_key, $url){
if(ereg("^(MTGP1-[0123456789]{5}-[0123456789]{5}-[0123456789]{5}-[0123456789]{5})$", $license_key)){
$host = "www.invender.com";
$script = "/mtgp.php";
$port = 80;
srand((double)microtime()*1000000);
$boundary = "---------------------".substr(md5(rand(0,32000)),0,10);
// Build the header
$header = "POST " . $script . " HTTP/1.0\r\n";
$header .= "Host: " . $host . "\r\n";
$header .= "Content-type: multipart/form-data, boundary=" . $boundary . "\r\n";
// attach URL vars
$data ="--" . $boundary . "\r\n";
$data .= "Content-Disposition: form-data; name=\"url\"\r\n";
$data .= "\r\n" . $url . "\r\n";
$data .="--" . $boundary . "\r\n";
// attach License Key vars
$data .="--" . $boundary . "\r\n";
$data .= "Content-Disposition: form-data; name=\"license_key\"\r\n";
$data .= "\r\n" . $license_key . "\r\n";
$data .="--" . $boundary . "\r\n";
$header .= "Content-length: " . strlen($data) . "\r\n\r\n";
// Open the connection
$fp = @fsockopen($host, $port);
if(!$fp){
return "valid";
}else{
// then just write to the server
fputs($fp, $header . $data);
# get and echo the response
$response = "";
while(!feof($fp)){
$response .= fgets($fp, 128);
}
fclose($fp);
$error_msg = "HTTP/1.1 404";
if(substr($response,0,strlen($error_msg)) == $error_msg || substr($response, strrpos($response,"\n")+1) == ""){
return "valid";
}else{
# Last word
$response = substr($response, strrpos($response,"\n")+1);
return $response;
}
}
}else{
return "invalid";
}
}
# Check if the software is installed
if(trim(config_license_key) == ""){
# The software is not yet installed!
$page = "install";
if($_POST){
# Load the selected language
if(file_exists('./languages/' . $_POST['language'] . '.php')){
include('./languages/' . $_POST['language'] . '.php');
}elseif(file_exists('./languages/' . default_language . '.php')){
include('./languages/' . default_language . '.php');
}else{
die(sprintf("The language file <strong>%s</strong> couldn't be found!",'./languages/' . config_language . '.php'));
}
# Connect to MySQL
mysql_connect($_POST['mysql_host'],$_POST['mysql_username'],$_POST['mysql_password']) or die (mysql_error());
mysql_select_db($_POST['mysql_database']) or die (mysql_error());
# Security
update_config('license_key',trim($_POST['license_key']));
update_config('security_string',md5(rand(100,999)));
# Settings
if(substr($_POST['path'],-1) != "/"){
$_POST['path'] .= "/";
}
if(substr($_POST['url'],-1) != "/"){
$_POST['url'] .= "/";
}
update_config('path',trim($_POST['path']));
update_config('url',trim($_POST['url']));
update_config('subdir',trim($_POST['subdir']));
update_config('language',$_POST['language']);
# MySQL
update_config('mysql_host',$_POST['mysql_host']);
update_config('mysql_username',$_POST['mysql_username']);
update_config('mysql_password',$_POST['mysql_password']);
update_config('mysql_database',$_POST['mysql_database']);
update_config('mysql_table_prefix',$_POST['mysql_table_prefix']);
# Email
update_config('email_from_name',lang_my_company);
update_config('email_from_email',lang_info_at_my_company);
# Drop the existing tables
$query = "DROP TABLE IF EXISTS `" . $_POST["mysql_table_prefix"] . "group`";
$result = mysql_query($query);
$query = "DROP TABLE IF EXISTS `" . $_POST["mysql_table_prefix"] . "history`";
$result = mysql_query($query);
$query = "DROP TABLE IF EXISTS `" . $_POST["mysql_table_prefix"] . "link_tracking`";
$result = mysql_query($query);
$query = "DROP TABLE IF EXISTS `" . $_POST["mysql_table_prefix"] . "stats`";
$result = mysql_query($query);
$query = "DROP TABLE IF EXISTS `" . $_POST["mysql_table_prefix"] . "subscriber`";
$result = mysql_query($query);
$query = "DROP TABLE IF EXISTS `" . $_POST["mysql_table_prefix"] . "template`";
$result = mysql_query($query);
$query = "DROP TABLE IF EXISTS `" . $_POST["mysql_table_prefix"] . "user`";
$result = mysql_query($query);
# Create the tables
$query = " CREATE TABLE `" . $_POST["mysql_table_prefix"] . "group` (
`id` int(3) NOT NULL auto_increment,
`name` varchar(30) NOT NULL default '',
PRIMARY KEY (`id`),
UNIQUE KEY `name` (`name`)
)";
$result = mysql_query($query);
$query = " CREATE TABLE `" . $_POST["mysql_table_prefix"] . "history` (
`id` int(6) NOT NULL auto_increment,
`group_id` int(3) NOT NULL default '0',
`user_id` int(3) NOT NULL,
`total` int(3) NOT NULL,
`email` varchar(50) NOT NULL default '',
`date` varchar(10) NOT NULL default '',
`subject` varchar(255) NOT NULL default '',
`message` longtext NOT NULL,
`from_name` varchar(255) NOT NULL,
`from_email` varchar(255) NOT NULL,
PRIMARY KEY (`id`)
)";
$result = mysql_query($query);
$query = " CREATE TABLE `" . $_POST["mysql_table_prefix"] . "link_tracking` (
`id` int(3) NOT NULL auto_increment,
`history_id` int(3) NOT NULL,
`url` varchar(255) NOT NULL,
`hits` int(4) NOT NULL,
PRIMARY KEY (`id`)
)";
$result = mysql_query($query);
$query = " CREATE TABLE `" . $_POST["mysql_table_prefix"] . "stats` (
`id` int(11) NOT NULL auto_increment,
`history_id` int(3) NOT NULL,
`random` varchar(4) NOT NULL,
PRIMARY KEY (`id`)
)";
$result = mysql_query($query);
$query = " CREATE TABLE `" . $_POST["mysql_table_prefix"] . "subscriber` (
`id` int(6) NOT NULL auto_increment,
`email` varchar(255) NOT NULL default '',
`name` varchar(50) NOT NULL default '',
`ip` varchar(15) NOT NULL default '',
`date` varchar(10) NOT NULL default '',
`group_id` int(3) NOT NULL default '0',
PRIMARY KEY (`id`),
UNIQUE KEY `email` (`email`,`group_id`)
)";
$result = mysql_query($query);
$query = " CREATE TABLE `" . $_POST["mysql_table_prefix"] . "template` (
`id` int(3) NOT NULL auto_increment,
`name` varchar(40) NOT NULL,
`content` longtext NOT NULL,
PRIMARY KEY (`id`)
)";
$result = mysql_query($query);
$query = " CREATE TABLE `" . $_POST["mysql_table_prefix"] . "user` (
`id` int(3) NOT NULL auto_increment,
`username` varchar(40) NOT NULL,
`password` varchar(40) NOT NULL,
`subscribers` enum('0','1') NOT NULL,
`add_subscriber` enum('0','1') NOT NULL,
`edit_subscriber` enum('0','1') NOT NULL,
`delete_subscriber` enum('0','1') NOT NULL,
`groups` enum('0','1') NOT NULL,
`add_group` enum('0','1') NOT NULL,
`edit_group` enum('0','1') NOT NULL,
`delete_group` enum('0','1') NOT NULL,
`send` enum('0','1') NOT NULL,
`settings` enum('0','1') NOT NULL,
`history` enum('0','1') NOT NULL,
`delete_history` enum('0','1') NOT NULL,
`stats_history` enum('0','1') NOT NULL,
`templates` enum('0','1') NOT NULL,
PRIMARY KEY (`id`),
UNIQUE KEY `username` (`username`)
)";
$result = mysql_query($query);
# Add the admin user
$query = 'INSERT INTO `' . $_POST["mysql_table_prefix"] . 'user` (`id`, `username`, `password`) VALUES ("1", "' . strip_quotes($_POST['username']) . '", "' . sha1($_POST['password']) . '")';
$result = mysql_query($query);
# Make sure that the admin user has ID 0
$query = 'UPDATE `' . $_POST["mysql_table_prefix"] . 'user` SET `id` = "0" WHERE `id` = "1"';
$result = mysql_query($query);
# Add the default group
$query = 'INSERT INTO `' . $_POST["mysql_table_prefix"] . 'group` (`id`, `name`) VALUES ("1", "Invender")';
$result = mysql_query($query);
# Add the default subscriber
$query = 'INSERT INTO `' . $_POST["mysql_table_prefix"] . 'subscriber` (`email`, `name`, `date`, `ip`, `group_id`) VALUES ("' . lang_info_at_my_company . '", "' . lang_my_company . '", "' . time() . '","' . $_SERVER["REMOTE_ADDR"] . '", "1")';
$result = mysql_query($query);
# Add all the templates
$template_dir = "./images/templates/";
$handle = opendir($template_dir);
while(false!==($file = readdir($handle))){
if($file != "." && $file != ".." && substr($file,-5) == ".html"){
$template_id = substr($file,0,-5);
$template_name = lang_template . " " . $template_id;
$html = file_get_contents($template_dir . $file);
$html = str_replace('[url]',$_POST['url'],$html);
$query = 'INSERT INTO `' . $_POST["mysql_table_prefix"] . 'template` (`id`, `name`, `content`) VALUES ("' . $template_id . '","' . $template_name . '","' . mysql_real_escape_string($html) . '")';
$result = mysql_query($query);
}
}
closedir($handle);
header("Location: ./index.php");
exit;
}else{
if(file_exists('./languages/' . default_language . '.php')){
include('./languages/' . default_language . '.php');
}else{
die(sprintf("The language file <strong>%s</strong> couldn't be found!",'./languages/' . default_language . '.php'));
}
}
}else{
# The software is allready installed, load extra includes
include_once("./includes/mysql.php");
include_once("./includes/reader.php");
# Load the selected language
if(file_exists('./languages/' . config_language . '.php')){
include('./languages/' . config_language . '.php');
}elseif(file_exists('./languages/' . default_language . '.php')){
include('./languages/' . default_language . '.php');
}else{
die(sprintf("The language file <strong>%s</strong> couldn't be found!",'./languages/' . config_language . '.php'));
}
# Check if there is a page in the URL
if(isset($_GET["page"]) && $_GET["page"] != ""){
$page = $_GET["page"];
}else{
$page = "unknown";
}
# License check when the current page is login
if($page == "login"){
$allow = false;
$check = check_license_key(config_license_key, config_url);
if($check == "invalid"){
$page = "license_check";
}
}
# Logout
if($page == "logout"){
session_unset();
header("location: index.php");
exit;
}
# Check if a user is logged in
if($page != "login" && $page != "license_check"){
if(!isset($_SESSION["login_user_id"]) || $_SESSION["login_user_id"] < 0 || !isset($_SESSION["login_security"]) || $_SESSION["login_security"] != sha1(config_security_string)){
# Not logged in
session_unset();
header("Location: index.php?page=login");
exit;
}else{
# User is logged in, define privileges and user_id/user_name
$query = 'SELECT * FROM `' . config_mysql_table_prefix . 'user` WHERE id = "' . $_SESSION["login_user_id"] . '"';
$result = mysql_query($query);
if(mysql_num_rows($result) == 1){
# User found
define('user_id', $_SESSION["login_user_id"]);
# Admin has always all the rights
if(user_id == 0){
define('user_subscribers', 1);
define('user_add_subscriber', 1);
define('user_edit_subscriber', 1);
define('user_delete_subscriber', 1);
define('user_groups', 1);
define('user_add_group', 1);
define('user_edit_group', 1);
define('user_delete_group', 1);
define('user_send', 1);
define('user_settings', 1);
define('user_history', 1);
define('user_delete_history', 1);
define('user_stats_history', 1);
define('user_templates', 1);
define('user_box_wizard', 1);
}else{
define('user_subscribers', mysql_result($result,0,'subscribers'));
define('user_add_subscriber', mysql_result($result,0,'add_subscriber'));
define('user_edit_subscriber', mysql_result($result,0,'edit_subscriber'));
define('user_delete_subscriber', mysql_result($result,0,'delete_subscriber'));
define('user_groups', mysql_result($result,0,'groups'));
define('user_add_group', mysql_result($result,0,'add_group'));
define('user_edit_group', mysql_result($result,0,'edit_group'));
define('user_delete_group', mysql_result($result,0,'delete_group'));
define('user_send', mysql_result($result,0,'send'));
define('user_settings', mysql_result($result,0,'settings'));
define('user_history', mysql_result($result,0,'history'));
define('user_delete_history', mysql_result($result,0,'delete_history'));
define('user_stats_history', mysql_result($result,0,'stats_history'));
define('user_templates', mysql_result($result,0,'templates'));
define('user_box_wizard', 0);
}
}else{
# User not found, logout!
session_unset();
header('Location: index.php?page=login');
exit();
}
# Define wich pages and popups the user can load
$popup_pages = array();
$allowed_pages = array("login","license_check","about","manual","my_invender");
if(user_subscribers == 1){
$allowed_pages[] = "subscribers";
$popup_pages[] = "search";
if(user_add_subscriber == 1){
$popup_pages[] = "import";
$popup_pages[] = "add_subscriber";
}
if(user_edit_subscriber == 1){
$popup_pages[] = "edit_subscriber";
}
}
if(user_groups == 1){
$allowed_pages[] = "groups";
$popup_pages[] = "search";
if(user_add_group == 1){
$popup_pages[] = "add_group";
}
if(user_edit_group == 1){
$popup_pages[] = "edit_group";
}
}
if(user_send == 1){
$allowed_pages[] = "send";
}
if(user_settings == 1){
$allowed_pages[] = "settings_general";
$allowed_pages[] = "settings_database";
$allowed_pages[] = "settings_email";
$allowed_pages[] = "settings_mailserver";
}
if(user_history == 1){
$allowed_pages[] = "history";
}
if(user_stats_history == 1){
$popup_pages[] = "stats";
}
if(user_templates == 1){
$allowed_pages[] = "templates";
$popup_pages[] = "add_template";
$popup_pages[] = "upload_template";
$popup_pages[] = "edit_template";
}
if(user_box_wizard == 1){
$allowed_pages[] = "box_wizard";
}
# Only the admin
if(user_id == 0){
$allowed_pages[] = "settings_users";
$popup_pages[] = "add_user";
$popup_pages[] = "edit_user";
$popup_pages[] = "delete_user";
$popup_pages[] = "show_user";
}
if($page == "unknown"){
if(count($allowed_pages) > 5){
$page = $allowed_pages[5];
}else{
$page = $allowed_pages[1];
}
}
}
}
# Login attempt
if($page == "login" && $_POST){
$query = 'SELECT * FROM `' . config_mysql_table_prefix . 'user` WHERE username = "' . $_POST["username"] . '" AND password = "' . sha1($_POST["password"]) . '" LIMIT 1';
$result = mysql_query($query);
if(mysql_num_rows($result) == 1){
$_SESSION["login_user_id"] = mysql_result($result,0,'id');
$_SESSION["login_username"] = $_POST["username"];
$_SESSION["login_security"] = sha1(config_security_string);
header("Location: index.php");
exit;
}
}
# Export
if($page == "export" && user_subscribers == 1 && isset($_GET["group_id"]) && is_numeric($_GET["group_id"])){
# Headers
header("Content-Type: application/vnd.ms-excel");
header("Content-Type: application/force-download");
header("Content-Disposition: attachment; filename=export_" . date("Y-m-d") . ".xls");
# Content
if($_GET["group_id"] < 0){
if(isset($_GET["search"]) && $_GET["search"] != ""){
$query = 'SELECT * FROM `' . config_mysql_table_prefix . 'subscriber` WHERE name like "' . str_replace("*","%",$_GET["search"]) . '" OR email like "' . str_replace("*","%",$_GET["search"]) . '" ORDER BY date DESC';
$result = mysql_query($query);
}else{
$query = 'SELECT * FROM `' . config_mysql_table_prefix . 'subscriber` ORDER BY date DESC';
$result = mysql_query($query);
}
}else{
if(isset($_GET["search"]) && $_GET["search"] != ""){
$query = 'SELECT * FROM `' . config_mysql_table_prefix . 'subscriber` WHERE group_id = "' . $_GET["group_id"] . '" AND (name like "' . str_replace("*","%",$_GET["search"]) . '" OR email like "' . str_replace("*","%",$_GET["search"]) . '") ORDER BY date DESC';
$result = mysql_query($query);
}else{
$query = 'SELECT * FROM `' . config_mysql_table_prefix . 'subscriber` WHERE group_id = "' . $_GET["group_id"] . '" ORDER BY date DESC';
$result = mysql_query($query);
}
}
while($subscriber = mysql_fetch_object($result)){
echo $subscriber->name . ";" . $subscriber->email . "\n";
}
exit;
}
# Delete user
if($page == "delete_user" && user_id == 0){
if(isset($_GET["user_id"]) && is_numeric($_GET["user_id"])){
$query = 'DELETE FROM `' . config_mysql_table_prefix . 'user` WHERE id = "' . $_GET["user_id"] . '" LIMIT 1';
$result = mysql_query($query);
}
$page = "settings_users";
header('Location: index.php?page=' . $page);
exit();
}
# Delete subscriber
if($page == "delete_subscriber" && user_delete_subscriber == 1){
if(isset($_GET["subscriber_id"]) && is_numeric($_GET["subscriber_id"])){
$query = 'DELETE FROM `' . config_mysql_table_prefix . 'subscriber` WHERE id = "' . $_GET["subscriber_id"] . '" LIMIT 1';
$result = mysql_query($query);
}
header('Location: ' . $_GET["redirect"]);
exit();
}
# Delete bounced subscribers
if($page == "delete_bounced" && user_delete_subscriber == 1){
if(isset($_POST["subscriber_id"]) && is_array($_POST["subscriber_id"])){
foreach($_POST["subscriber_id"] as $subscriber_id){
$query = 'DELETE FROM `' . config_mysql_table_prefix . 'subscriber` WHERE id = "' . $subscriber_id . '" LIMIT 1';
$result = mysql_query($query);
}
}
header('Location: index.php');
exit();
}
# Delete group
if($page == "delete_group" && user_delete_group == 1){
if(isset($_GET["group_id"]) && is_numeric($_GET["group_id"])){
$query = 'DELETE FROM `' . config_mysql_table_prefix . 'subscriber` WHERE group_id = "' . $_GET["group_id"] . '"';
$result = mysql_query($query);
$query = 'DELETE FROM `' . config_mysql_table_prefix . 'group` WHERE id = "' . $_GET["group_id"] . '" LIMIT 1';
$result = mysql_query($query);
}
$page = "groups";
header('Location: index.php?page=' . $page);
exit();
}
# Delete history
if($page == "delete_history" && user_delete_history == 1){
if(isset($_GET["history_id"]) && is_numeric($_GET["history_id"])){
$query = 'DELETE FROM `' . config_mysql_table_prefix . 'history` WHERE id = "' . $_GET["history_id"] . '" LIMIT 1';
$result = mysql_query($query);
$query = 'DELETE FROM `' . config_mysql_table_prefix . 'stats` WHERE history_id = "' . $_GET["history_id"] . '"';
$result = mysql_query($query);
$query = 'DELETE FROM `' . config_mysql_table_prefix . 'link_tracking` WHERE history_id = "' . $_GET["history_id"] . '"';
$result = mysql_query($query);
}
$page = "history";
header('Location: index.php?page=' . $page);
exit();
}
# Delete template
if($page == "delete_template" && user_templates == 1){
if(isset($_GET["template_id"]) && is_numeric($_GET["template_id"])){
$query = 'DELETE FROM `' . config_mysql_table_prefix . 'template` WHERE id = "' . $_GET["template_id"] . '" LIMIT 1';
$result = mysql_query($query);
@unlink("./images/templates/" . $_GET["template_id"] . ".jpg");
}
$page = "templates";
header('Location: index.php?page=' . $page);
exit();
}
# Manual
if($page == "manual"){
header('Location: http://www.invender.nl/mailtogopro/help.pdf');
exit();
}
# My Invender
if($page == "my_invender"){
header('Location: https://www.invender.nl/userpage.php');
exit();
}
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
<title>Mail to Go Pro</title>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1" />
<link rel="stylesheet" href="includes/style.css" type="text/css" />
<script type="text/javascript" language="JavaScript" src="includes/javascript.js"></script>
<!--[if IE]>
<link rel="stylesheet" type="text/css" href="includes/ie.css" />
<![endif]-->
<!-- inline-popups -->
<script type="text/javascript" src="includes/prototype.js"> </script>
<script type="text/javascript" src="includes/window.js"> </script>
<script type="text/javascript" src="includes/picker.js"> </script>
<link href="includes/default.css" rel="stylesheet" type="text/css"></link>
<?php
if($page == "send" || $page == "add_template" || $page == "edit_template"){
?>
<!-- Editor -->
<script type="text/javascript" src="./editor/scripts/language/<?php echo config_language ?>/editor_lang.js"></script>
<script type="text/javascript" src="./editor/scripts/innovaeditor.js"></script>
<?php
}
?>
</head>
<body>
<?php
if($page == "login"){
# Load the login screen because the admin is not logged in
?>
<div id="login">
<img src="images/logo_login.jpg" alt="Mail to Go Pro" />
<form name="login" action="<?php echo config_url; ?>index.php?page=login" method="post">
<?php echo lang_username; ?><br />
<input type="text" name="username" /><br /><br />
<?php echo lang_password; ?><br />
<input type="password" name="password" /><br />
<input type="submit" name="submit" id="submit" value="<?php echo lang_login; ?>" />
</form>
</div>
<?php
}elseif($page == "license_check"){
# Load this page to display a license_check error
?>
<div id="login">
<img src="images/logo_login.jpg" alt="Mail to Go Pro" />
<div id="license_check">
<?php echo lang_invalid_license_key; ?><br /><br />
<?php echo config_license_key; ?><br /><br />
<?php echo config_url; ?><br />
<br /><br />
<?php printf(lang_contact_us,"https://www.invender.nl/userpage.php","Invender"); ?>
</div>
</div>
<?php
}elseif($page == "install"){
# Load the installation
$site_subdir = dirname($_SERVER["SCRIPT_NAME"]);
if(substr($site_subdir,-1) == "/"){
$site_subdir = substr($site_subdir,0,-1);
}
$website = "http://" . $_SERVER["SERVER_NAME"] . $site_subdir . "/";
if(isset($_SERVER["SCRIPT_FILENAME"]) && $_SERVER["SCRIPT_FILENAME"] != ""){
$root_directory = $_SERVER["SCRIPT_FILENAME"];
}else{
$root_directory = $_SERVER["PATH_TRANSLATED"];
}
$root_directory = str_replace("//","/",str_replace("\\","/",$root_directory));
$root_directory = dirname($root_directory);
if(substr($root_directory,-1) != "/"){
$root_directory = $root_directory . "/";
}
?>
<div id="install">
<img src="images/logo_install.jpg" alt="Mail to Go Pro" />
<form name="form" action="index.php?page=install" method="post" onSubmit="if(document.form.valid.value == 1){ return true; }else if((document.form.username.value == '') || (document.form.password.value == '') || (document.form.license_key.value == '') || (document.form.url.value == '') || (document.form.path.value == '') || (document.form.mysql_host.value == '') || (document.form.mysql_username.value == '') || (document.form.mysql_database.value == '')){alert('<?php echo addslashes(lang_required_fields_failed); ?>'); return false;}else{install_check(document.form); return false;}">
<input type="hidden" name="subdir" value="<?php echo $site_subdir; ?>" />
<input type="hidden" name="valid" id="valid" value="0" />
<div id="section_left">
<h1>Mail to go Pro</h1>
<?php echo lang_preferred_username; ?> *<br />
<input type="text" name="username" value="<?php echo lang_admin; ?>" /><br /><br />
<?php echo lang_preferred_password; ?> *<br />
<input type="text" name="password" value="<?php echo rand(1000,9999); ?>" /><br /><br /><br />
<?php echo lang_license_key; ?> *<br />
<input type="text" name="license_key" /><br /><br />
<?php echo lang_url; ?> *<br />
<input type="text" name="url" value="<?php echo $website; ?>" /><br /><br />
<?php echo lang_path; ?> *<br />
<input type="text" name="path" value="<?php echo $root_directory; ?>" /><br /><br />
<?php echo lang_language; ?> *<br />
<select name="language">
<?php
$handle = opendir("./languages/");
while(false !== ($file = readdir($handle))){
if($file != "." && $file != ".." && substr($file,-4) == ".php"){
echo '<option value="' . substr($file,0,-4) . '"' . (substr($file,0,-4) == default_language ? ' selected="selected"' : '' ) . '>' . ucfirst(substr($file,0,-4)) . '</option>';
}
}
closedir($handle);
?>
</select><br />
</div>
<div id="section_right">
<h1><?php echo lang_settings_database; ?></h1>
<?php echo lang_settings_hostname; ?> *<br />
<input type="text" name="mysql_host" value="localhost" /><br /><br />
<?php echo lang_settings_database_username; ?> *<br />
<input type="text" name="mysql_username" /><br /><br />
<?php echo lang_settings_database_password; ?><br />
<input type="text" name="mysql_password" /><br /><br /><br />
<?php echo lang_settings_database_name; ?> *<br />
<input type="text" name="mysql_database" value="" /><br /><br />
<?php echo lang_settings_table_prefix; ?><br />
<input type="text" name="mysql_table_prefix" value="mtgp_" /><br />
</div>
<input type="submit" name="submit" id="submit" value="Installeren!" />
</form>
</div>
<?php
}else{
if(in_array($page,$popup_pages) && file_exists("./modules/" . $page . ".php")){
include("./modules/" . $page . ".php");
}else{
?>
<div id="container">
<div id="header"></div>
<div id="logout">
<a href="index.php?page=logout"><img src="images/logout.jpg" width="40px" height="18px" alt="<?php echo lang_logout; ?>" /></a>
<div id="username"><?php echo $_SESSION["login_username"]; ?></div>
</div>
<div id="menu">
<ul id="nav">
<?php
if(user_subscribers){
?>
<li><a href="index.php?page=subscribers"><?php echo lang_subscribers; ?></a></li>
<?php
}
if(user_groups){
?>
<li><a href="index.php?page=groups"><?php echo lang_groups; ?></a></li>
<?php
}
if(user_send){
?>
<li><a href="index.php?page=send"><?php echo lang_send; ?></a></li>
<?php
}
if(user_settings){
?>
<li><a href="#"><?php echo lang_settings; ?></a>
<ul>
<li><a href="index.php?page=settings_general"><img src="images/menu/btn_general.png" /><?php echo lang_general; ?></a></li>
<li><a href="index.php?page=settings_database"><img src="images/menu/btn_database.png" /><?php echo lang_database; ?></a></li>
<li><a href="index.php?page=settings_email"><img src="images/menu/btn_email.png" /><?php echo lang_email; ?></a></li>
<li><a href="index.php?page=settings_mailserver"><img src="images/menu/btn_mailserver.png" /><?php echo lang_mailserver; ?></a></li>
<?php
if(user_id == 0){
?>
<li><a href="index.php?page=settings_users"><img src="images/menu/btn_users.png" /><?php echo lang_users; ?></a></li>
<?php
}
?>
</ul>
</li>
<?php
}
if(user_history){
?>
<li><a href="index.php?page=history"><?php echo lang_history; ?></a></li>
<?php
}
if(user_templates || user_id == 0){
?>
<li><a href="#"><?php echo lang_others; ?></a>
<ul>
<?php
if(user_templates){
?>
<li><a href="index.php?page=templates"><img src="images/menu/btn_templates.png" /><?php echo lang_templates; ?></a></li>
<?php
}
if(user_id == 0){
?>
<li><a href="index.php?page=box_wizard"><img src="images/menu/btn_box_wizard.png" /><?php echo lang_box_wizard; ?></a></li>
<?php
}
?>
</ul>
</li>
<?php
}
?>
<li><a href="#"><?php echo lang_help; ?></a>
<ul>
<li><a href="index.php?page=manual" target="_blank"><img src="images/menu/btn_manual.gif" /><?php echo lang_manual; ?></a></li>
<li><a href="index.php?page=my_invender" target="_blank"><img src="images/menu/btn_my_invender.gif" /><?php echo lang_my_invender; ?></a></li>
<li><a href="index.php?page=about"><img src="images/menu/btn_about.gif" /><?php echo lang_about; ?></a></li>
</ul>
</li>
</ul>
</div>
<?php
# Load the current page if it's allowed to be loaded
if(in_array($page,$allowed_pages) && file_exists("./modules/" . $page . ".php")){
include("./modules/" . $page . ".php");
}else{
printf(lang_not_allowed_to_load_file,$page);
}
?>
</div>
<?php
}
}
?>
</body>
</html> |
ZeroBytes |
|
Discussions
Tools
Content
Info
Membership:
Latest: 
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 50
Members: 0
Total: 50
