Hi,
required for the following file: ../shoutbox/sendshout.php
Find it:
PHP Code:
function execcommand_prune ($Data)
{
$Data = trim ($Data[0][1]);
if (empty ($Data))
{
(mysql_query ('delete from shoutbox') OR sqlerr (__FILE__, 284));
execcommand_message ();
}
else
{
$query = mysql_query ('SELECT id FROM users WHERE username = ' . sqlesc ($Data));
if (0 < mysql_num_rows ($query))
{
$Userid = mysql_result ($query, 0, 'id');
(mysql_query ('delete from shoutbox where userid = ' . sqlesc ($Userid)) OR sqlerr (__FILE__, 293));
execcommand_message ();
}
}
return true;
}
function execcommand_message ($message = '<div style="background: #FFECCE; border: 1px solid #EA5F00; padding-left: 5px;"><font color=black>Parancs végrehajtva. (Következő frissítéskor már látszik!)</font></div>', $forcemessage = false)
{
if ((mysql_affected_rows () OR $forcemessage))
{
echo $message;
}
}
and change to:
PHP Code:
function execcommand_prune ($Data)
{
global $CURUSER;
$Data = trim ($Data[0][1]);
if (empty ($Data))
{
(mysql_query ('delete from shoutbox') OR sqlerr (__FILE__, 284));
$userid = $CURUSER['id'];
$uzifaluritbOT = "{systemnotice} The content is deleted! User: - ".$CURUSER['username']." -";
$uzifalurit_sql = "INSERT INTO shoutbox (userid, namestyle, date, content)
VALUES (".sqlesc('999999999').", ".sqlesc('{username}').", '".TIMENOW."', ".sqlesc($uzifaluritbOT).")" or sqlerr(__FILE__, __LINE__);
mysql_query($uzifalurit_sql) or sqlerr(__FILE__, __LINE__);
write_log ("The content is deleted!");
}
else
{
$query = mysql_query ('SELECT id FROM users WHERE username = ' . sqlesc ($Data));
if (0 < mysql_num_rows ($query))
{
$Userid = mysql_result ($query, 0, 'id');
(mysql_query ('delete from shoutbox where userid = ' . sqlesc ($Userid)) OR sqlerr (__FILE__, 293));
}
}
return true;
}