function init($dir = null)
 {
     if ($dir != null) {
         $this->setdir($dir);
     }
     $this->group('settings');
     $this->group('global');
     $this->group('modules');
     $this->group('custom');
     @ini_set('default_charset', '');
     if (!headers_sent()) {
         viscacha_header('Content-type: text/html; charset=' . $this->phrase('charset'));
     }
     global $slog;
     if (isset($slog) && is_object($slog) && method_exists($slog, 'setlang')) {
         $slog->setlang($this->phrase('fallback_no_username'), $this->phrase('timezone_summer'));
     }
     global $config, $breadcrumb;
     if (isset($breadcrumb)) {
         $isforum = array('addreply', 'attachments', 'edit', 'forum', 'manageforum', 'managetopic', 'misc', 'newtopic', 'pdf', 'search', 'showforum', 'showtopic');
         if ($config['indexpage'] != 'forum' && in_array(SCRIPTNAME, $isforum)) {
             $breadcrumb->Add($this->phrase('forumname'), iif(SCRIPTNAME != 'forum', 'forum.php'));
         }
     }
 }

 function Out($skip = 1)
 {
     global $breadcrumb, $config, $mymodules;
     $this->sid = SID2URL;
     $Contents = ob_get_contents();
     ob_end_clean();
     $Contents = $this->AddSid($Contents);
     if (isset($mymodules)) {
         extract($mymodules->load('docout_parse', get_defined_vars()), EXTR_SKIP);
     }
     if ($this->enc != FALSE && $skip == 1 && $this->cfg == 1) {
         viscacha_header("Content-Encoding: " . $this->enc);
         print "‹";
         $Size = strlen($Contents);
         $Crc = crc32($Contents);
         $Contents = gzcompress($Contents, $this->level);
         $Contents = substr($Contents, 0, strlen($Contents) - 4);
         print $Contents;
         print pack('V', $Crc);
         print pack('V', $Size);
         exit;
     } else {
         print $Contents;
         exit;
     }
 }

 function get_image()
 {
     $mime = get_mimetype($this->path);
     viscacha_header('Content-Type: ' . $mime['mime']);
     readfile($this->path);
     exit;
 }

 function initAdmin($dir = null)
 {
     if ($dir != null) {
         $this->setdir($dir);
     }
     $this->group('settings');
     $this->group('admin/global');
     $this->group('modules');
     $this->group('custom');
     @ini_set('default_charset', '');
     if (!headers_sent()) {
         viscacha_header('Content-type: text/html; charset=' . $this->phrase('charset'));
     }
 }

 function initAdmin($dir = null)
 {
     global $admconfig, $my;
     if (!empty($my->settings['default_language'])) {
         $dir = $my->settings['default_language'];
     } elseif (is_id($admconfig['default_language'])) {
         $dir = $admconfig['default_language'];
     }
     if ($dir != null) {
         $this->setdir($dir);
     }
     $this->group('settings');
     $this->group('admin/global');
     $this->group('modules');
     $this->group('custom');
     @ini_set('default_charset', '');
     if (!headers_sent()) {
         viscacha_header('Content-type: text/html; charset=' . $this->charset());
     }
 }

 function Out($skip = 1)
 {
     global $breadcrumb, $config, $plugins;
     $this->sid = SID2URL;
     $Contents = ob_get_contents();
     ob_end_clean();
     $Contents = $this->AddSid($Contents);
     ($code = $plugins->load('docout_parse')) ? eval($code) : null;
     if ($this->enc != FALSE && $skip == 1 && $this->cfg == 1) {
         viscacha_header("Content-Encoding: " . $this->enc);
         print "‹";
         $Size = strlen($Contents);
         $Crc = crc32($Contents);
         $Contents = gzcompress($Contents, $this->level);
         $Contents = substr($Contents, 0, strlen($Contents) - 4);
         print $Contents;
         print pack('V', $Crc);
         print pack('V', $Size);
     } else {
         print $Contents;
     }
 }

	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
	GNU General Public License for more details.

	You should have received a copy of the GNU General Public License
	along with this program; if not, write to the Free Software
	Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
*/
error_reporting(E_ALL);
define('SCRIPTNAME', 'ajax');
define('VISCACHA_CORE', '1');
define('TEMPSHOWLOG', 1);
include "data/config.inc.php";
include "classes/function.viscacha_frontend.php";
$my->p = $slog->Permissions();
$action = $gpc->get('action', str);
viscacha_header("Content-type: text/plain");
send_nocache_header();
($code = $plugins->load('ajax_start')) ? eval($code) : null;
// Schliesst oder oeffnet einen Beitrag mittels AJAX
if ($action == 'openclosethread') {
    $result = $db->query("SELECT status, board FROM {$db->pre}topics WHERE id = '{$_GET['id']}'", __LINE__, __FILE__);
    $row = $db->fetch_assoc($result);
    $my->p = $slog->Permissions($row['board']);
    $my->mp = $slog->ModPermissions($row['board']);
    $request = 1;
    if ($my->p['admin'] == 1 || $my->p['gmod'] == 1 || $my->mp[0] == 1) {
        if ($row['status'] == 0) {
            $db->query("UPDATE {$db->pre}topics SET status = '1' WHERE id = '{$_GET['id']}'", __LINE__, __FILE__);
            if ($db->affected_rows() == 1) {
                $request = 3;
            }

     include 'admin/designs.php';
 } elseif ($action == 'packages') {
     include 'admin/packages.php';
 } elseif ($action == 'profilefield') {
     include 'admin/profilefield.php';
 } elseif ($action == 'posts') {
     include 'admin/posts.php';
 } elseif ($action == 'logout') {
     $slog->sid_logout();
     echo head();
     ok('admin.php', $lang->phrase('admin_successfully_logged_off'));
 } elseif ($action == 'locate') {
     $url = $gpc->get('url', none);
     if (!empty($url)) {
         $db->close();
         viscacha_header('Location: ' . $url);
         exit;
     } else {
         echo head();
         if (!empty($_SERVER['HTTP_REFERER']) && strpos($_SERVER['HTTP_REFERER'], 'action=locate') === false) {
             $url = htmlspecialchars($_SERVER['HTTP_REFERER']);
         } else {
             $url = 'javascript:history.back(-1);';
         }
         error($url, $lang->phrase('admin_choose_valid_location_option'));
     }
 } else {
     if (strlen($action) == 0) {
         include 'admin/frames.php';
     } else {
         $error = true;

    }
    $db->query('UPDATE ' . $db->pre . 'menu SET active = "' . $pos . '" WHERE id = ' . $id);
    $plug = $gpc->get('plug', int);
    if ($plug > 0) {
        $result = $db->query("SELECT position FROM {$db->pre}plugins WHERE id = '{$plug}'");
        if ($db->num_rows($result) > 0) {
            $module_sql = ", module = '{$plug}'";
            $row = $db->fetch_assoc($result);
            $filesystem->unlink('cache/modules/' . $plugins->_group($row['position']) . '.php');
            // Do not do that anymore, because it may be required
            // $db->query("UPDATE {$db->pre}plugins SET active = '{$pos}' WHERE id = '{$plug}' LIMIT 1");
        }
    }
    $delobj = $scache->load('modules_navigation');
    $delobj->delete();
    viscacha_header('Location: admin.php?action=cms&job=nav');
} elseif ($job == 'nav_addplugin') {
    echo head();
    $id = $gpc->get('id', int);
    $sort = $db->query("SELECT id, name, position FROM {$db->pre}menu WHERE sub = '0' ORDER BY position, ordering, id");
    $plugs = $db->query("SELECT id, name FROM {$db->pre}plugins WHERE position = 'navigation' ORDER BY ordering");
    $groups = $db->query("SELECT id, name FROM {$db->pre}groups");
    $pos = parseNavPosSetting();
    ?>
<form name="form" method="post" action="admin.php?action=cms&amp;job=nav_addplugin2">
 <table class="border" border="0" cellspacing="0" cellpadding="4" align="center">
  <tr>
   <td class="obox" colspan="2"><?php 
    echo $lang->phrase('admin_cms_nav_add_plugin');
    ?>
</td>

    echo foot();
} elseif ($job == "captcha_noises_delete") {
    echo head();
    $delete = $gpc->get('delete', arr_str);
    $deleted = 0;
    foreach ($delete as $filename) {
        $filesystem->unlink('classes/graphic/noises/' . $filename . '.jpg');
        if (!file_exists('classes/graphic/noises/' . $filename . '.jpg')) {
            $deleted++;
        }
    }
    ok('admin.php?action=misc&job=captcha_noises', $deleted . ' Background pictures have been deleted.');
} elseif ($job == "captcha_noises_view") {
    $file = $gpc->get('file', str);
    viscacha_header('Content-Type: image/jpeg');
    viscacha_header('Content-Disposition: inline; filename="' . $file . '.jpg"');
    readfile('classes/graphic/noises/' . $file . '.jpg');
} elseif ($job == "captcha_noises") {
    $fonts = array();
    $dir = 'classes/graphic/noises/';
    if ($dh = opendir($dir)) {
        while (($file = readdir($dh)) !== false) {
            if (get_extension($file) == 'jpg') {
                $fonts[] = $dir . $file;
            }
        }
        closedir($dh);
    }
    echo head();
    ?>
<form action="admin.php?action=misc&job=captcha_noises_delete" name="form2" method="post">

             error($inserterrors, 'attachments.php?type=' . $_GET['type'] . '&id=' . $_GET['id'] . SID2URL_x);
         }
         if ($_GET['type'] == 'edit' && ($my->mp[0] == 1 || $upinfo['name'] == $my->id)) {
             $upper = $upinfo['name'];
             $tid = $upinfo['id'];
         } else {
             $upper = $my->id;
             $tid = 0;
         }
         if (count($insertuploads) > 0 && count($insertuploads) <= $config['tpcmaxuploads']) {
             foreach ($insertuploads as $up) {
                 $up = trim($up);
                 $db->query("INSERT INTO {$db->pre}uploads (file,tid,mid,topic_id) VALUES ('{$up}','{$tid}','{$upper}','{$upinfo['topic_id']}')", __LINE__, __FILE__);
             }
         }
         viscacha_header('Location: attachments.php?type=' . $_GET['type'] . '&id=' . $_GET['id'] . SID2URL_JS_x);
     }
 } else {
     echo $tpl->parse("popup/header");
     $filetypes = implode($lang->phrase('listspacer'), explode('|', $config['tpcfiletypes']));
     $filesize = formatFilesize($config['tpcfilesize']);
     if ($_GET['type'] == 'edit' && ($my->mp[0] == 1 || $upinfo['name'] == $my->id)) {
         $result = $db->query('SELECT id, file FROM ' . $db->pre . 'uploads WHERE mid = "' . $upinfo['name'] . '" AND tid = "' . $upinfo['id'] . '"', __LINE__, __FILE__);
     } else {
         $result = $db->query('SELECT id, file FROM ' . $db->pre . 'uploads WHERE mid = "' . $my->id . '" AND topic_id = "' . $upinfo['id'] . '" AND tid = "0"', __LINE__, __FILE__);
     }
     $free = $config['tpcmaxuploads'] - $db->num_rows($result);
     if ($free < 1) {
         $free = 0;
     }
     $uploads = array();

} elseif ($job == 'cat_move' || $job == 'forum_move') {
    $id = $gpc->get('id', int);
    $move = $gpc->get('move', int);
    if (!is_id($id)) {
        echo head();
        error('admin.php?action=forums&job=manage', 'Forum or Category was not found on account of an invalid ID.');
    }
    $table = iif($job == 'cat_move', "{$db->pre}categories", "{$db->pre}forums");
    $cache = iif($job == 'cat_move', "categories", "cat_bid");
    $op = iif($move == 1, "+", "-");
    $db->query("UPDATE {$table} SET position = position{$op}1 WHERE id = '{$id}' LIMIT 1", __LINE__, __FILE__);
    $delobj = $scache->load('forumtree');
    $delobj->delete();
    $delobj = $scache->load($cache);
    $delobj->delete();
    viscacha_header('Location: admin.php?action=forums&job=manage');
} elseif ($job == 'rights') {
    echo head();
    $id = $gpc->get('id', int);
    if ($id == 0) {
        error('admin.pgp?action=forums&job=manage', 'Forum not found');
    }
    $result = $db->query("SELECT f.*, g.name, g.title, g.guest, g.core FROM {$db->pre}fgroups AS f LEFT JOIN {$db->pre}groups AS g ON g.id = f.gid WHERE f.bid = '{$id}' ORDER BY f.gid", __LINE__, __FILE__);
    $cache = array();
    $colspan = count($glk_forums) + 2;
    ?>
<form name="form" method="post" action="admin.php?action=forums&job=rights_delete&id=<?php 
    echo $id;
    ?>
">
 <table class="border">

    }
    ?>
  <tr>
   <td class="ubox" colspan="2" align="center"><input type="submit" name="Submit" value="<?php 
    echo $lang->phrase('admin_lang_form_save');
    ?>
" /></td>
  </tr>
 </table>
</form>
	<?php 
    echo foot();
} elseif ($job == 'phrase_add2') {
    echo head();
    $varname = $gpc->get('varname', none);
    $text = $gpc->get('text', none);
    $file = base64_decode($gpc->get('file', none));
    $language = $gpc->get('langt', none);
    $c = new manageconfig();
    foreach ($language as $id => $t) {
        if (empty($t)) {
            $t = $text;
        }
        $c->getdata("language/{$id}/{$file}", 'lang');
        $c->updateconfig($varname, str, $t);
        $c->savedata();
    }
    ok('admin.php?action=language&job=phrase_file&file=' . urlencode(base64_encode($file)));
} else {
    viscacha_header('Location: admin.php?action=language&job=manage');
}

        error('admin.php?action=groups&job=add', 'Die Gruppe konnte nicht eingefügt werden!');
    }
} elseif ($job == 'delete') {
    $del = $gpc->get('delete', arr_int);
    $edit = $gpc->get('edit', int);
    if (isset($_POST['submit_delete']) && count($del) > 0) {
        $db->query("DELETE FROM {$db->pre}groups WHERE id IN (" . implode(',', $del) . ")");
        $anz = $db->affected_rows();
        $scache = new scache('group_status');
        $scache->deletedata();
        echo head();
        ok('admin.php?action=groups&job=manage', $anz . ' Einträge gelöscht');
    } elseif (isset($_POST['submit_edit']) && $edit > 0) {
        viscacha_header('Location: admin.php?action=groups&job=edit&id=' . $edit);
    } else {
        viscacha_header('Location: admin.php?action=groups&job=manage');
    }
} elseif ($job == 'edit') {
    $id = $gpc->get('id', int);
    echo head();
    $result = $db->query("SELECT * FROM {$db->pre}groups WHERE id = '{$id}' LIMIT 1", __LINE__, __FILE__);
    if ($db->num_rows($result) != 1) {
        error('admin.php?action=groups&job=manage', 'Keine gültige ID angegeben');
    }
    $data = $db->fetch_assoc($result);
    ?>
<form name="form" method="post" action="admin.php?action=groups&amp;job=edit2&amp;id=<?php 
    echo $id;
    ?>
">
 <table class="border">

 /**
  * @since 1.4
  * @access private
  */
 function _redirect($filename, $op = true)
 {
     if ($op) {
         $a = 'inline';
     } else {
         $a = 'attachment';
     }
     viscacha_header("Content-Type: " . $this->contentType . "; charset=" . $this->encoding);
     viscacha_header("Content-Disposition: " . $a . "; filename=" . basename($filename));
     readfile($filename, "r");
     die;
 }

 function sid_new($fromload = FALSE)
 {
     global $config, $db, $gpc;
     if (!$fromload) {
         $load = $db->query('SELECT mid FROM ' . $db->pre . 'session WHERE mid = "' . $this->cookiedata[0] . '" LIMIT 1', __LINE__, __FILE__);
         if ($db->num_rows($load) == 1) {
             $my = $this->sid_load(TRUE);
             return $my;
         }
     }
     $result = $db->query('SELECT * FROM ' . $db->pre . 'user WHERE id = "' . $this->cookiedata[0] . '" AND pw = "' . $this->cookiedata[1] . '" LIMIT 1', __LINE__, __FILE__);
     $my = $gpc->prepare($db->fetch_object($result));
     if ($db->num_rows($result) == 1 && $my->confirm == '11') {
         $id =& $my->id;
         $lastvisit =& $my->lastvisit;
         $my->clv = $my->lastvisit;
         $my->vlogin = TRUE;
         makecookie($config['cookie_prefix'] . '_vdata', $my->id . "|" . $my->pw);
     } else {
         $id = 0;
         $lastvisit = $this->cookielastvisit;
         $my->clv = $this->cookielastvisit;
         $my->vlogin = FALSE;
         makecookie($config['cookie_prefix'] . '_vdata', "|");
     }
     makecookie($config['cookie_prefix'] . '_vlastvisit', $lastvisit);
     $this->sid = $this->construct_sid();
     $my->sid =& $this->sid;
     $my->mark = serialize(array());
     $my->pwfaccess = serialize(array());
     $my->settings = serialize(array());
     $action = $gpc->get('action', str);
     $qid = $gpc->get('id', int);
     $db->query("INSERT INTO {$db->pre}session \n\t(sid, mid, wiw_script, wiw_action, wiw_id, active, ip, remoteaddr, lastvisit, mark, pwfaccess, settings) VALUES\n\t('{$this->sid}', '{$id}','" . SCRIPTNAME . "','" . $action . "','" . $qid . "','" . time() . "','{$this->ip}','" . $gpc->save_str(htmlspecialchars($_SERVER['HTTP_USER_AGENT'])) . "','{$lastvisit}','{$my->mark}','{$my->pwfaccess}','{$my->settings}')", __LINE__, __FILE__);
     if (!$this->cookies && !$this->querysid) {
         $arr = parse_url($_SERVER['REQUEST_URI']);
         if (empty($arr['query'])) {
             $url = $_SERVER['REQUEST_URI'] . '?s=' . $this->sid;
         } else {
             $url = $_SERVER['REQUEST_URI'] . '&s=' . $this->sid;
         }
         viscacha_header('Location: ' . $url);
     }
     return $my;
 }

            $data['buttonimage'] = '';
        } else {
            $ext = get_extension($data['buttonimage']);
            if (!in_array($ext, $imagetype_extension)) {
                $data['buttonimage'] = '';
            } else {
                $data['button'] = base64_encode($button);
            }
        }
    } else {
        $data['buttonimage'] = '';
    }
    $content = serialize($data);
    viscacha_header('Content-Type: text/plain');
    viscacha_header('Content-Length: ' . strlen($content));
    viscacha_header('Content-Disposition: attachment; filename="' . $data['bbcodetag'] . '.bbc"');
    print $content;
} elseif ($job == 'custombb_import') {
    echo head();
    $file = $gpc->get('file', str);
    ?>
<form name="form2" method="post" enctype="multipart/form-data" action="admin.php?action=bbcodes&job=custombb_import2">
 <table class="border" cellpadding="4" cellspacing="0" border="0">
  <tr><td class="obox" colspan="2"><?php 
    echo $lang->phrase('admin_bbc_import_design');
    ?>
</td></tr>
  <tr><td class="mbox"><?php 
    echo $lang->phrase('admin_bbc_either_upload');
    ?>
<br /><span class="stext"><?php 

    }
    ok('admin.php?action=designs&job=images', $lang->phrase('admin_design_images_successfully_imported'));
} elseif ($job == 'images_export') {
    $id = $gpc->get('id', int);
    $file = 'images' . $id . '.zip';
    $dir = "images/{$id}/";
    $tempdir = "temp/";
    require_once 'classes/class.zip.php';
    $archive = new PclZip($tempdir . $file);
    $v_list = $archive->create($dir, PCLZIP_OPT_REMOVE_PATH, $dir);
    if ($v_list == 0) {
        echo head();
        unset($archive);
        if ($del > 0) {
            $filesystem->unlink($tempdir . $file);
        }
        error('admin.php?action=designs&job=images', $archive->errorInfo(true));
    } else {
        viscacha_header('Content-Type: application/zip');
        viscacha_header('Content-Disposition: attachment; filename="' . $file . '"');
        viscacha_header('Content-Length: ' . filesize($tempdir . $file));
        readfile($tempdir . $file);
        unset($archive);
        if ($del > 0) {
            $filesystem->unlink($tempdir . $file);
        }
        $filesystem->unlink($tempdir . $file);
    }
} else {
    viscacha_header('Location: admin.php?action=designs&job=design&interface=1');
}

    if (empty($board) || !isset($fc[$board])) {
        error($lang->phrase('query_string_error'));
    }
    $row = $fc[$board];
    if ($row['opt'] == 'pw') {
        $my->p = $slog->Permissions($board);
        if ($row['optvalue'] == $_POST['pw']) {
            $my->pwfaccess[$board] = $row['optvalue'];
            ok($lang->phrase('goboardpw_success'), 'showforum.php?id=' . $board);
        } else {
            error($lang->phrase('goboardpw_wrong_password'));
        }
    } else {
        $slog->updatelogged();
        $db->close();
        viscacha_header('Location: showforum.php?id=' . $board . SID2URL_JS_x);
        exit;
    }
} elseif ($_GET['action'] == "report_post" || $_GET['action'] == "report_post2") {
    ($code = $plugins->load('showtopic_topic_query')) ? eval($code) : null;
    $result = $db->query("SELECT r.id, r.report, r.topic_id, r.tstart, r.topic AS title, t.topic, t.status, t.board, t.prefix FROM {$db->pre}replies AS r LEFT JOIN {$db->pre}topics AS t ON r.topic_id = t.id WHERE r.id = '{$_GET['id']}' LIMIT 1", __LINE__, __FILE__);
    $info = $gpc->prepare($db->fetch_assoc($result));
    $my->p = $slog->Permissions($info['board']);
    $error = array();
    if ($db->num_rows($result) < 1) {
        $error[] = $lang->phrase('query_string_error');
    }
    if ($my->p['forum'] == 0) {
        $error[] = $lang->phrase('not_allowed');
    }
    if (count($error) > 0) {

    }
} elseif ($_GET['action'] == "about2") {
    if ($my->p['useabout'] == 0) {
        errorLogin($lang->phrase('not_allowed'), "editprofile.php");
    }
    $error = array();
    if (strxlen($_POST['about']) > $config['maxaboutlength']) {
        $error[] = $lang->phrase('about_too_long');
    }
    ($code = $plugins->load('editprofile_about2_start')) ? eval($code) : null;
    if (count($error) > 0 || !empty($_POST['Preview'])) {
        $fid = save_error_data($_POST['about']);
        if (!empty($_POST['Preview'])) {
            $slog->updatelogged();
            $db->close();
            viscacha_header("Location: editprofile.php?action=about&job=preview&fid=" . $fid . SID2URL_JS_x);
            exit;
        } else {
            error($error, "editprofile.php?action=about&fid=" . $fid . SID2URL_x);
        }
    } else {
        ($code = $plugins->load('editprofile_about2_query')) ? eval($code) : null;
        $db->query("UPDATE {$db->pre}user SET about = '{$_POST['about']}' WHERE id = '{$my->id}'");
        ok($lang->phrase('data_success'), "editprofile.php?action=about" . SID2URL_x);
    }
} elseif ($_GET['action'] == "about") {
    if ($my->p['useabout'] == 0) {
        errorLogin($lang->phrase('not_allowed'), "editprofile.php");
    }
    $breadcrumb->Add($lang->phrase('editprofile_about'));
    echo $tpl->parse("header");