}
        $db->update("UPDATE pw_cnalbum SET " . pwSqlSingle(array('aname' => $aname, 'aintro' => $aintro, 'private' => $private, 'albumpwd' => $pwd)) . ' WHERE aid=' . pwEscape($aid));
        refreshto("{$basename}a=own", 'operate_success');
    }
} elseif ($a == 'viewalbum') {
    define('AJAX', 1);
    define('F_M', true);
    InitGP(array('aid'));
    $aid = (int) $aid;
    empty($aid) && Showmsg('data_error');
    require_once PrintEot('m_ajax');
    ajax_footer();
} elseif ($a == 'createajax') {
    define('AJAX', 1);
    define('F_M', true);
    banUser();
    InitGP(array('job'));
    require_once PrintEot('m_ajax');
    ajax_footer();
} elseif ($a == 'getallowflash') {
    define('AJAX', 1);
    define('F_M', true);
    InitGP(array('aid'));
    $aid = (int) $aid;
    if ($aid) {
        $photonums = $db->get_value("SELECT photonum FROM pw_cnalbum WHERE atype='0' AND aid=" . pwEscape($aid));
        $o_maxphotonum && $photonums >= $o_maxphotonum && Showmsg('colony_photofull');
        if ($o_maxphotonum) {
            $allowmutinum = $o_maxphotonum - $photonums;
        } else {
            $allowmutinum = 'infinite';

function showBanForm($banid)
{
    global $DB;
    $unme = $DB->selectCell("SELECT username FROM account WHERE id='" . $banid . "'");
    echo "\r\n\t\t<div class=\"content\">\t\r\n\t\t\t<div class=\"content-header\">\r\n\t\t\t\t<h4><a href=\"?p=admin\">Main Menu</a> / <a href=\"?p=admin&sub=users\">Manage Users</a> / " . $unme . " / Ban</h4>\r\n\t\t\t</div> <!-- .content-header -->\t\t\t\t\r\n\t\t\t<div class=\"main-content\">\r\n\t";
    if (isset($_POST['ban_user'])) {
        banUser($_POST['ban_user'], $_POST['ban_reason']);
    }
    echo "\r\n\t\t<form method=\"POST\" action=\"?p=admin&sub=users&id=" . $banid . "&action=ban\" name=\"adminform\" class=\"form label-inline\">\r\n\t\t\t<input type='hidden' name='ban_user'  value='" . $banid . "' />\r\n\t\t\t<table>\r\n\t\t\t\t<thead>\r\n\t\t\t\t\t<th><center><b>Ban Account #" . $banid . " (" . $unme . ")</b></center></th>\r\n\t\t\t\t</thead>\r\n\t\t\t</table>\r\n\t\t\t<br />\r\n\t\t\t<div class='field'>\r\n\t\t\t\t<label for='Username'>Ban Reason: </label>\r\n\t\t\t\t<input id='Username' name='ban_reason' size='20' type='text' class='large' />\r\n\t\t\t</div>\r\n\t\t\t\r\n\t\t\t<div class=\"buttonrow-border\">\t\t\t\t\t\t\t\t\r\n\t\t\t\t<center><button><span>Ban User</span></button></center>\t\t\t\r\n\t\t\t</div>\r\n\r\n\t\t</form>\r\n\t</div>\r\n\t";
}

	case "reportUser":
	case "reportuser":
	$oldignoreuserabort = ignore_user_abort(true);
	reportUser($option,$form,$uid);
	break;

	case "processReports":
	case "processreports":
	$oldignoreuserabort = ignore_user_abort(true);
	processReports();
	break;

	case "banProfile":
	case "banprofile":
	$oldignoreuserabort = ignore_user_abort(true);
	banUser($option,$uid,$form,$act);
	break;

	case "viewReports":
	case "viewreports":
	viewReports($option,$uid,$act);
	break;

	case "emailUser":
	case "emailuser":
	emailUser($option,$uid);
	break;

	case "pendingApprovalUser":
	case "pendingapprovaluser":
	pendingApprovalUsers($option);

<?php

ob_start();
require_once "functions.php";
if (!$isLoggedIn && !isAdmin) {
    header("Location:index.php");
    exit;
}
$ban = isset($_GET['ban']) ? $_GET['ban'] : false;
$userID = isset($_GET['id']) ? $_GET['id'] : false;
if ($userID) {
    if ($ban) {
        banUser($userID);
    } else {
        unbanUser($userID);
    }
}

<?php

include "../util/DbUtil.php";
session_start();
$userid = $_POST['userid'];
$response = "";
$db_conn = getConnectedDb();
if (is_null($db_conn)) {
    $response = "Error connecting to database. Try again later.";
} elseif (isUserBanned($db_conn, $userid)) {
    $response = "User already banned.";
} elseif (!banUser($db_conn, $userid)) {
    $response = "Error banning user";
} else {
    $response = "Success";
}
echo $response;

        postMedia($_GET['sid']);
        header("Location: mod.php");
    } elseif ($_GET['type'] == "1") {
        rejectImage($_GET['sid']);
        header("Location: mod.php");
    } elseif ($_GET['type'] == "2") {
        reportImage($_GET['sid']);
        header("Location: mod.php");
    } elseif ($_GET['type'] == "-1") {
        if (is_admin(mod_id())) {
            banUser($_GET['sid'], 0);
        }
        header("Location: mod.php");
    } elseif ($_GET['type'] == "-2") {
        if (is_admin(mod_id())) {
            banUser($_GET['sid'], 1);
        }
        header("Location: reports.php");
    } elseif ($_GET['type'] == "-3") {
        if (is_admin(mod_id())) {
            removeReport($_GET['sid']);
        }
        header("Location: reports.php");
    }
}
if ($_GET['type'] == "register") {
    if (!is_mod(mod_id())) {
        addModerator(mod_id());
        header("Location: mod.php");
    } else {
        header("Location: mod.php");