KPRC2 Update 1

[Curtis]

Ahhh does anyone have this as the original d/l link doesnt work!

i need it to fix the request line.

error message for normal djs:

 Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/twomedia/public_html/radio/requests.php on line 121

requests.php:

<?php
if(!defined("kristall"))
{
  session_start();
 include("functions.php");
 loginerror();
 exit;
}
else
{
 login();
}
?>
<?php
echo("
  <span class=\"title\">Request Line</span><br />Welcome to the request line, here you can view your requests and delete messages with the option to delete multiple messages at once!
  <form action=\"?view=requests&act=delete\" method=\"post\">
  <br />
  <input type=\"submit\" name=\"submit\" value=\"Delete selected requests\">
  <hr size=\"1\">
  <a href=\"?view=requests&type=Song Request\">Requests</a> | <a href=\"?view=requests&type=Listener Shoutout\">Shoutouts</a> | <a href=\"?view=requests&type=Competition Entry\">Comps</a> | <a href=\"?view=requests&type=Joke Submission\">Jokes</a> | <a href=\"?view=requests&type=Other Submission\">Other</a> | <a href=\"?view=requests&type=all\">All</a>
  <hr size=\"1\">");
switch($_GET["act"])
{
 case "delete":
  foreach($HTTP_POST_VARS as $key => $value)
  {
   if(!is_numeric($value))
   {}
   else
   {
    $sql = mysql_query("SELECT `dj` FROM `requests` WHERE `id` = '$value'");
    if(mysql_num_rows($sql) == "1")
    {
    $fetch = mysql_fetch_array($sql);
    if($fetch["dj"] == $_SESSION["kristall_username"] || $_SESSION["kristall_level"] == "Senior DJ" || $_SESSION["kristall_level"] == "Administrator" || $_SESSION["kristall_level"] == "Super Administrator")
    {
     mysql_query("DELETE FROM `requests` WHERE `id` = '$value'");
    }
    else
    {
     notice("Requests not deleted.");
     echo("One or more requests have not been deleted due do you not being the rightful owner of them<br />
     You are now being taken back to the main request line, if you'd prefer not to wait, please click <a href=\"?view=requests\">here</a><meta http-equiv=\"refresh\" content=\"2;url=?view=requests\">");
     endnotice();
    }
    }
   }
  }
  notice("Requests deleted.");
  echo("The requests you selected have been deleted<br />
  You are now being taken back to the main request line, if you'd prefer not to wait, please click <a href=\"?view=requests\">here</a><meta http-equiv=\"refresh\" content=\"8;url=?view=requests\">");
  endnotice();
 break;
 
 case "reportform":
  $id = clean($_GET["id"]);
  $fetch = mysql_fetch_array(mysql_query("SELECT `dj` FROM `requests` WHERE `id` = '$id'"));
  if($fetch["dj"] == $_SESSION["kristall_username"] || $_SESSION["kristall_username"] == "Administrator" || $_SESSION["kristall_level"] == "Super Administrator")
  {
   notice("Are You Sure?");
   echo("Are you sure you wish to report this Request?<br /><br />
   <a href=\"?view=requests&act=report&id=$id\">I'm Sure, Report the Request</a><br />
   <a href=\"?view=requests&act=viewform\">I'm Not Sure, Take me Back</a>");
   endnotice();
  }
  else 
  {
   notice("That isn't your request");
   echo("That isn't your request to view. You are now being taken back to the Request System.<br /><br />
   If you'd prefer not to wait, please click <a href=\"?view=requests\">here</a><meta http-equiv=\"refresh\" content=\"8;url=?view=requests\">");
   endnotice();
  }
 break;
 
 case "report":
  $id = clean($_GET["id"]);
  $fetch = mysql_fetch_array(mysql_query("SELECT `dj` FROM `requests` WHERE `id` = '$id'"));
  if($fetch["dj"] == $_SESSION["kristall_username"] || $_SESSION["kristall_username"] == "Administrator" || $_SESSION["kristall_level"] == "Super Administrator")
  {
   mysql_query("UPDATE `requests` SET `reported` = '1' WHERE `id` = '$id'");
   notice("Private Message Reported");
   echo("The Request you selected, with id tag $id, has been successfully reported. An Administrator will view this Request and take action accordingly. You are now being taken back to the Request system.<br /><br />
   If you'd prefer not to wait, please click <a href=\"?view=requests\">here</a><meta http-equiv=\"refresh\" content=\"8;url=?view=requests\">");
   endnotice();
  }
  else 
  {
   notice("That isn't your request");
   echo("That isn't your request to view. You are now being taken back to the Request System.<br /><br />
   If you'd prefer not to wait, please click <a href=\"?view=requests\">here</a><meta http-equiv=\"refresh\" content=\"8;url=?view=requests\">");
   endnotice();
  }
 break;
 
 default:
  if(isset($_GET["type"]))
  {
   $type = clean($_GET["type"]);
  }
  else 
  {
   $type = "all";
  }
  if($_SESSION["kristall_level"] == "DJ" && $type != "all")
  {
   $sql = mysql_query("SELECT * FROM `requests` WHERE `dj` = {$_SESSION["kristall_username"]} AND `type` = '$type' AND `reported` = '0' ORDER BY `id` ASC");
  }
  elseif($_SESSION["kristall_level"] == "DJ" && $type == "all")
  {
   $sql = mysql_query("SELECT * FROM `requests` WHERE `dj` = {$_SESSION["kristall_username"]} AND `reported` = '0' ORDER BY `id` ASC");
  }
  elseif($_SESSION["kristall_level"] != "DJ" && $type != "all")
  {
   $sql = mysql_query("SELECT * FROM `requests` WHERE `type` = '$type' ORDER BY `id` ASC");
  }
  else 
  {
   $sql = mysql_query("SELECT * FROM `requests` ORDER BY `id` ASC");
  }
  while($fetch = mysql_fetch_array($sql))
  {
   if($_SESSION["kristall_level"] != "DJ")
   {
    $sentto = ("<b>To:</b> {$fetch["dj"]}");
    $ips = ("<b>IP:</b> {$fetch["ip"]}");
   }
   if($fetch["reported"] == "1")
   {
    if($_SESSION["kristall_level"] == "Administrator" || $_SESSION["kristall_level"] == "Super Administrator")
    {
     $colour = " background: #fff2f2;";
    }
    else 
    {
     $colour = "";
    }
   }
   else 
   {
    $colour = "";
   }
   echo('<table border="0" width="100%" cellpadding="3" style="border-collapse: collapse;'.$colour.'" cellspacing="2">
 <tr>
  <td width="2%" rowspan="2"><input type="checkbox" class="rofl" name="'.$fetch["id"].'" value="'.$fetch["id"].'"></td>
  <td colspan="2">
  <table cellpadding="0" cellspacing="0" width="100%">
   <tr>
    <td width="35%" valign="top"><b>From:</b> '.$fetch["sender"].'</td>
    <td width="35%" valign="top"><b>Type:</b> '.$fetch["type"].'</td>
    <td width="30%">
    '. $ips .'
    </td>
   </tr>
   <tr>
    <td width="35%" valign="top"><b>Date:</b> '.$fetch["date"].'</td>
    <td width="35%" valign="top"><b>Report:</b> <a href="?view=requests&act=reportform&id='.$fetch["id"].'">Click to Report</a></td>
    <td width="30%">
    '.$sentto.'
    </td>
   </tr>
  </table>
  </td>
 </tr>
 <tr>
  <td valign="top"><b>Message:</b></td>
  <td width="90%" valign="top">'.$fetch["message"].'</td>
 </tr>
</table><hr size="1">');
  }
  echo("</form>");
}
?>

many thanks
curtis

[Agnostic Bear]

replace lines 105 - 117 with this:

  if($_SESSION["kristall_level"] == "DJ" && $type != "all")
  {
   $sql = mysql_query("SELECT * FROM `requests` WHERE `dj` = '{$_SESSION["kristall_username"]}' AND `type` = '$type' AND `reported` = '0' ORDER BY `id` ASC");
  }
  elseif($_SESSION["kristall_level"] == "DJ" && $type == "all")
  {
   $sql = mysql_query("SELECT * FROM `requests` WHERE `dj` = '{$_SESSION["kristall_username"]}' AND `reported` = '0' ORDER BY `id` ASC");
  }
  elseif($_SESSION["kristall_level"] != "DJ" && $type != "all")
  {
   $sql = mysql_query("SELECT * FROM `requests` WHERE `type` = '$type' ORDER BY `id` ASC");
  }
  else 

[Curtis]

thanks ever so much!

i would rep but i dont have any rep power x[

[Agnostic Bear]

thanks ever so much!

i would rep but i dont have any rep power x[

No problem, if I can get in touch with Bahram I'll get him to upload a fixed version to Habboring.