<?php
  session_start();
  require_once 'conn.php';
  require_once 'http.php';
  
  if (isset($\_REQUEST[\text{'}action\text{'}]))\; \{\; switch\; ($_REQUEST['action']) {
      case 'Add Forum':
        if (isset($\_POST[\text{'}forumname\text{'}])\; and$_POST['forumname'] != ""
            and isset($\_POST[\text{'}forumdesc\text{'}])\; and$_POST['forumdesc'] != "") {
          $sql\; =\; "INSERT\; IGNORE\; INTO\; forum\_forum\; "\; .\; "VALUES\; (NULL,\; \text{'}"\; .\; htmlspecialchars($_POST['forumname'], ENT_QUOTES) .
                 "', '" .
                 htmlspecialchars($\_POST[\text{'}forumdesc\text{'}],\; ENT\_QUOTES)\; .\; "\text{'},\; "\; .$_POST['forummod'][0] . ")";
          mysql_query($sql)\; or\; die(mysql\_error());\; \}\; redirect(\text{'}admin.php?option=forums\text{'});\; break;\; case\; \text{'}Edit\; Forum\text{'}:\; if\; (isset($_POST['forumname'])
            and $\_POST[\text{'}forumname\text{'}]\; !=\; ""\; and\; isset($_POST['forumdesc'])
            and $\_POST[\text{'}forumdesc\text{'}]\; !=\; "")\; \{$sql = "UPDATE forum_forum " .
                 "SET forum_name = '" . $\_POST[\text{'}forumname\text{'}]\; .\; "\text{'},\; forum\_desc\; =\; \text{'}"\; .$_POST['forumdesc'] .
                 "', forum_moderator = " . $\_POST[\text{'}forummod\text{'}][0]\; .\; "\; WHERE\; id\; =\; "\; .$_POST['forum_id'];
          mysql_query($sql)\; or\; die(mysql\_error());\; \}\; redirect(\text{'}admin.php?option=forums\text{'});\; break;\; case\; \text{'}Modify\; User\text{'}:\; redirect("useraccount.php?user="\; .$_POST['userlist'][0]);
        break;
  
      case 'Update':
        foreach ($\_POST\; as$key => $value)\; \{\; if\; ($key != 'action') {
            $sql\; =\; "UPDATE\; forum\_admin\; SET\; value=\text{'}$value' " .
                   "WHERE constant = '$key\text{'}";\; mysql\_query($sql) 
              or die(mysql_error());
          }
        }
        redirect('admin.php');
        break;
  
      case "deleteForum":
        $sql\; =\; "DELETE\; FROM\; forum\_forum\; WHERE\; id="\; .$_GET['f'];
        mysql_query($sql)\; or\; die(mysql\_error());$sql = "DELETE FROM forum_posts WHERE forum_id=" . $\_GET[\text{'}f\text{'}];\; mysql\_query($sql) 
          or die(mysql_error());
        redirect('admin.php?option=forums');
        break;
  
      case "Add New":
        $sql\; =\; "INSERT\; INTO\; forum\_bbcode\; "\; .\; "VALUES\; (NULL,\text{'}"\; .\; htmlentities($_POST['bbcode-tnew'],ENT_QUOTES) . "','" .
               htmlentities($\_POST[\text{'}bbcode-rnew\text{'}],ENT\_QUOTES)\; .\; "\text{'})";\; mysql\_query($sql) 
          or die(mysql_error() . "<br>" . $sql);\; redirect(\text{'}admin.php?option=bbcode\text{'});\; break;\; case\; "deleteBBCode":\; if\; (isset($_GET['b'])) {
          $bbcodeid\; =$_GET['b'];
          $sql\; =\; "DELETE\; FROM\; forum\_bbcode\; WHERE\; id="\; .$bbcodeid;
          mysql_query($sql)\; or\; die(mysql\_error());\; \}\; redirect(\text{'}admin.php?option=bbcode\text{'});\; break;\; case\; \text{'}Update\; BBCodes\text{'}:\; foreach($_POST as $key\; =>$value) {
          if (substr($key,0,7)\; ==\; \text{'}bbcode\_\text{'})\; \{$bbid = str_replace("bbcode_", "", $key);\; if\; (substr($bbid,0,1) == 't') {
              $col\; =\; "template";\; \}\; else\; \{$col = "replacement";
            }
            $id\; =\; substr($bbid,1);
            $sql\; =\; "UPDATE\; forum\_bbcode\; SET$col='" . 
                   htmlentities($value,ENT\_QUOTES)\; .\; "\text{'}\; "\; .\; "WHERE\; id=$id";
            mysql_query($sql)\; or\; die(mysql\_error());\; \}\; \}\; redirect(\text{'}admin.php?option=bbcode\text{'});\; break;\; default:\; redirect(\text{'}index.php\text{'});\; \}\; \}\; else\; \{\; redirect(\text{'}index.php\text{'});\; \}\; ?>$