}
             error_reporting($old_err_level);
             if (isset($id) && $a_cert[$id]) {
                 $a_cert[$id] = $cert;
             } else {
                 $a_cert[] = $cert;
             }
             if (isset($a_user) && isset($userid)) {
                 $a_user[$userid]['cert'][] = $cert['refid'];
             }
         }
         if (!$input_errors) {
             write_config();
         }
         if ($userid) {
             post_redirect("system_usermanager.php", array('act' => 'edit', 'userid' => $userid));
             exit;
         }
     }
 }
 if ($_POST['save'] == gettext("Update")) {
     unset($input_errors);
     $pconfig = $_POST;
     /* input validation */
     $reqdfields = explode(" ", "descr cert");
     $reqdfieldsn = array(gettext("Descriptive name"), gettext("Final Certificate data"));
     do_input_validation($_POST, $reqdfields, $reqdfieldsn, $input_errors);
     if (preg_match("/[\\?\\>\\<\\&\\/\\\"\\']/", $_POST['descr'])) {
         array_push($input_errors, "The field 'Descriptive Name' contains invalid characters.");
     }
     //		old way

$_POST['message'] = str_replace(">", ">", $_POST['message']);
while (ereg('>>[0-9]+', $_POST['message'], $quote)) {
    $_POST['message'] = str_replace($quote[0], '<a href="../test/read.php?thread=' . $_POST['key'] . '&read=' . substr($quote[0], 8) . '">>>' . substr($quote[0], 8) . '</a>', $_POST['message']);
}
$_POST['message'] = str_replace("\r\n", "<br />", $_POST['message']);
$_POST['message'] = mysql_real_escape_string($_POST['message']);
$_POST['message'] = str_replace("\\r<br />", "<br />\n", $_POST['message']);
$_POST['message'] = stripslashes($_POST['message']);
$ip = md5(md5(getenv('REMOTE_ADDR') . mhash(MHASH_CRC32, getenv('REMOTE_ADDR'))) . mhash(MHASH_CRC32, getenv('REMOTE_ADDR') . crypt(getenv('REMOTE_ADDR'), getenv('REMOTE_ADDR') . md5(getenv('REMOTE_ADDR')))));
$ip = stripslashes($ip);
$ip = mysql_real_escape_string($ip);
if (mysql_query("INSERT INTO " . $db_prefix . "messages (`key`,bbs,`from`,tripcode,mail,message,`datetime`,ip) VALUES ('" . $_POST['key'] . "','" . $bbs['id'] . "','" . $_POST['from'] . "','" . $tripcode . "','" . $_POST['mail'] . "','" . $_POST['message'] . "',NOW(),'" . $ip . "')")) {
    if (!$thread and $_POST['mail'] != 'sage') {
        mysql_query("UPDATE " . $db_prefix . "threads SET last=NOW() WHERE id=" . $_POST['key']);
    }
    echo post_redirect($bbs['bbs']);
} else {
    echo "Your message has not been posted successfully.";
    exit;
}
if ($thread) {
    $m = mysql_fetch_array(mysql_query("SELECT id FROM " . $db_prefix . "messages WHERE `key`=" . $thread['id']));
    mysql_query("UPDATE " . $db_prefix . "threads SET id_first=" . $m['id'] . " WHERE id=" . $thread['id']);
}
$fp = fopen("../" . $bbs['bbs'] . "/index.html", 'w');
fwrite($fp, head($bbs_name, $bbs['title']));
fwrite($fp, index_display($bbs_name, $bbs['title'], $bbs['display']));
fwrite($fp, index_menu($bbs['id'], $db_prefix, $menu_n, $index_n));
fwrite($fp, index($bbs['id'], $db_prefix, $index_posts_n, $index_n, $bbs['postname'], $bbs['show_id']));
fwrite($fp, form($bbs['bbs']));
fwrite($fp, $foot);