Bravo List - [Mod Request] Details in browse.php

Can anyone help me with this mod? Tooltip details or what is it called :-s
Code:



include "ctracker.php";

//---------------------------------

//---- Max. Sysops v0.2

//---------------------------------

function maxsysop () {

global $CURUSER;

// Check Staff Names

//$lmaxclass  = 15;

//$lsysopnames = array("FaTaL"); // Case sensitive. Change this (YOUR SYSOP-ADMIN NAMES GOES HERE) (example: array("adminname1","adminname2","adminname3","adminname4","so far")

//        if ($CURUSER["class"] >= $lmaxclass)

//                if (!in_array($CURUSER["username"], $lsysopnames, true)) { // true for strict comparison

//                        $msg = "Fake Account Detected: Username: ".$CURUSER["username"]." - UserID: ".$CURUSER["id"]." - UserIP : ".getip();

//                        write_log($msg);

//                        stderr("Access Denied!","We come to believe you are using a fake account, therefore we've logged this action!");

//                }

// Check Staff IDS

//define ('UC_STAFF', 4); // Minumum Staff Level (4= UC_MODERATOR)

//if ($CURUSER['class'] >= UC_STAFF) {

//        $allowed_ID = array(1,2,3,122,20,849,984,1425,1523,1533,1561); // Change this (YOUR SYSOP-ADMIN IDS GOES HERE) (example: array(1,2,3,4,5))

//                if (!in_array((int)$CURUSER['id'], $allowed_ID, true)) { // true for strict comparison

//                        $msg = "Fake Account Detected: Username: ".$CURUSER["username"]." - UserID: ".$CURUSER["id"]." - UserIP : ".getip();

//                        write_log($msg);

//                        stderr("Access Denied!","We come to believe you are using a fake account, therefore we've logged this action!");

//                }

//        }

}

//---------------------------------

//---- Max. Sysops v0.2

//---------------------------------

// Ajout des protections injection SQL

    $x = str_replace("--", '--', $x);

    $x = str_replace("UPDATE", '', $x);

    $x = str_replace("DELETE", '', $x);

    $x = str_replace("DROP", '', $x);

    $x = str_replace("INSERT", '', $x);

    $x = str_replace("$mysql_", '', $x);

    $x = str_replace("java script:", '', $x);

    //

// PHP5 with register_long_arrays off?

if (!isset($HTTP_POST_VARS) && isset($_POST))

{

$HTTP_POST_VARS = $_POST;

$HTTP_GET_VARS = $_GET;

$HTTP_SERVER_VARS = $_SERVER;

$HTTP_COOKIE_VARS = $_COOKIE;

$HTTP_ENV_VARS = $_ENV;

$HTTP_POST_FILES = $_FILES;

}



function strip_magic_quotes($arr)

{

foreach ($arr as $k => $v)

{

if (is_array($v))

{ $arr[$k] = strip_magic_quotes($v); }

else

{ $arr[$k] = stripslashes($v); }

}



return $arr;

}



if (get_magic_quotes_gpc())

{

if (!empty($_GET)) { $_GET = strip_magic_quotes($_GET); }

if (!empty($_POST)) { $_POST = strip_magic_quotes($_POST); }

if (!empty($_COOKIE)) { $_COOKIE = strip_magic_quotes($_COOKIE); }

}





// addslashes to vars if magic_quotes_gpc is off

// this is a security precaution to prevent someone

// trying to break out of a SQL statement.

//



if( !get_magic_quotes_gpc() )

{

if( is_array($HTTP_GET_VARS) )

{

while( list($k, $v) = each($HTTP_GET_VARS) )

{

if( is_array($HTTP_GET_VARS[$k]) )

{

while( list($k2, $v2) = each($HTTP_GET_VARS[$k]) )

{

$HTTP_GET_VARS[$k][$k2] = addslashes($v2);

}

@reset($HTTP_GET_VARS[$k]);

}

else

{

$HTTP_GET_VARS[$k] = addslashes($v);

}

}

@reset($HTTP_GET_VARS);

}



if( is_array($HTTP_POST_VARS) )

{

while( list($k, $v) = each($HTTP_POST_VARS) )

{

if( is_array($HTTP_POST_VARS[$k]) )

{

while( list($k2, $v2) = each($HTTP_POST_VARS[$k]) )

{

$HTTP_POST_VARS[$k][$k2] = addslashes($v2);

}

@reset($HTTP_POST_VARS[$k]);

}

else

{

$HTTP_POST_VARS[$k] = addslashes($v);

}

}

@reset($HTTP_POST_VARS);

}



if( is_array($HTTP_COOKIE_VARS) )

{

while( list($k, $v) = each($HTTP_COOKIE_VARS) )

{

if( is_array($HTTP_COOKIE_VARS[$k]) )

{

while( list($k2, $v2) = each($HTTP_COOKIE_VARS[$k]) )

{

$HTTP_COOKIE_VARS[$k][$k2] = addslashes($v2);

}

@reset($HTTP_COOKIE_VARS[$k]);

}

else

{

$HTTP_COOKIE_VARS[$k] = addslashes($v);

}

}

@reset($HTTP_COOKIE_VARS);

}

}





function local_user()

{

  return $_SERVER["SERVER_ADDR"] == $_SERVER["REMOTE_ADDR"];

}



$FUNDS = "$0";



$SITE_ONLINE = true;

//$SITE_ONLINE = local_user();

//$SITE_ONLINE = false;



$max_torrent_size = 1000000;

$announce_interval = 60 * 60;

$signup_timeout = 86400 * 3;

$minvotes = 1;

$invite_timeout = 86400 * 3;

$invites = 3000;

$max_dead_torrent_time = 6 * 3600;



// Max users on site

$maxusers = 10000;



//Directory for subs

$SUBSPATH = "subs"; # local path to subs dir, chmod 777



// ONLY USE ONE OF THE FOLLOWING DEPENDING ON YOUR O/S!!!

$torrent_dir = "torrents";    # FOR UNIX ONLY - must be writable for httpd user

//$torrent_dir = "torrents";    # FOR WINDOWS ONLY - must be writable for httpd user



# the first one will be displayed on the pages

$announce_urls = array();

$announce_urls[] = "http://network.fnatic.ro/announce.php";



if ($_SERVER["HTTP_HOST"] == "")

  $_SERVER["HTTP_HOST"] = $_SERVER["SERVER_NAME"];

$BASEURL = "http://" . $_SERVER["HTTP_HOST"];



// Set this to your site URL... No ending slash!

$DEFAULTBASEURL = "http://network.fnatic.ro";



//set this to true to make this a tracker that only registered users may use

$MEMBERSONLY = true;



//maximum number of peers (seeders+leechers) allowed before torrents starts to be deleted to make room...

//set this to something high if you don't require this feature

$PEERLIMIT = 50000;



// Email for sender/return path.

$SITEEMAIL = "    noreply@fnatic.ro";



$SITENAME = "The Network";



$autoclean_interval = 900;

$pic_base_url = "/pic/";

$imgdir = "/pic/";



// Maximum size of files uploaded into the BitBucket in bytes

$GLOBALS["MAX_UPLOAD_FILESIZE"] = 1024 * 1024;



// Maximum size of the BitBucket per user in bytes

$GLOBALS["MAX_BITBUCKET_SIZE_USER"] = 1024 * 1024;



// Maximum size of the BitBucket for uploaders in bytes

$GLOBALS["MAX_BITBUCKET_SIZE_UPLOADER"] = 5 * 1024 * 1024;



// Path where all Bit-Bucket files are stored. These are:

// User's files, torrent and NFO images

// This path MUST be a subdir of the tracker root, and MUST be

// publicly available, optionally with referrer check

// Webserver MUST have write permission on this directory!

// No trailing slash.

$GLOBALS["BITBUCKET_DIR"] = "bitbucket";



// Relative or absolute URL where all images for the interface are stored.

// MUST include a trailing slash!

$GLOBALS["PIC_BASE_URL"] = "pic/";



require_once("secrets.php");

require_once("cleanup.php");



//Do not modify -- versioning system

//This will help identify code for support issues at tbdev.net

define ('TBVERSION','TBDEV.NET-12-09-05');



/**** validip/getip courtesy of manolete  ****/



// IP Validation

function validip($ip)

{

        if (!empty($ip) && $ip == long2ip(ip2long($ip)))

        {

                // reserved IANA IPv4 addresses

                // http://www.iana.org/assignments/ipv4-address-space

                $reserved_ips = array (

                                array('0.0.0.0','2.255.255.255'),

                                array('10.0.0.0','10.255.255.255'),

                                array('127.0.0.0','127.255.255.255'),

                                array('169.254.0.0','169.254.255.255'),

                                array('172.16.0.0','172.31.255.255'),

                                array('192.0.2.0','192.0.2.255'),

                                array('192.168.0.0','192.168.255.255'),

                                array('255.255.255.0','255.255.255.255')

                );



                foreach ($reserved_ips as $r)

                {

                                $min = ip2long($r[0]);

                                $max = ip2long($r[1]);

                                if ((ip2long($ip) >= $min) && (ip2long($ip) <= $max)) return false;

                }

                return true;

        }

        else return false;

}



// Patched function to detect REAL IP address if it's valid

function getip() {

   if (isset($_SERVER)) {

     if (isset($_SERVER['HTTP_X_FORWARDED_FOR']) && validip($_SERVER['HTTP_X_FORWARDED_FOR'])) {

       $ip = $_SERVER['HTTP_X_FORWARDED_FOR'];

     } elseif (isset($_SERVER['HTTP_CLIENT_IP']) && validip($_SERVER['HTTP_CLIENT_IP'])) {

       $ip = $_SERVER['HTTP_CLIENT_IP'];

     } else {

       $ip = $_SERVER['REMOTE_ADDR'];

     }

   } else {

     if (getenv('HTTP_X_FORWARDED_FOR') && validip(getenv('HTTP_X_FORWARDED_FOR'))) {

       $ip = getenv('HTTP_X_FORWARDED_FOR');

     } elseif (getenv('HTTP_CLIENT_IP') && validip(getenv('HTTP_CLIENT_IP'))) {

       $ip = getenv('HTTP_CLIENT_IP');

     } else {

       $ip = getenv('REMOTE_ADDR');

     }

   }



   return $ip;

 }

function latestforumposts()

{

/// FIRST WE MAKE THE HEADER (NON-LOOPED) ///

print("".

"".

"".

"".

"".

"".

"");



/// HERE GOES THE QUERY TO RETRIEVE DATA FROM THE DATABASE AND WE START LOOPING ///

$for = mysql_query("SELECT * FROM topics ORDER BY lastpost DESC LIMIT 5");


while ($topicarr = mysql_fetch_assoc($for))

{

$topicid = $topicarr["id"];

$topic_title = $topicarr["subject"];

$topic_userid = $topicarr["userid"];

$topic_views = $topicarr["views"];

$views = number_format($topic_views);


/// GETTING TOTAL NUMBER OF POSTS ///

$res = mysql_query("SELECT COUNT(*) FROM posts WHERE topicid=$topicid") or sqlerr(__FILE__, __LINE__);

$arr = mysql_fetch_row($res);

$posts = $arr[0];

$replies = max(0, $posts - 1);


/// GETTING USERID AND DATE OF LAST POST ///  

$res = mysql_query("SELECT * FROM posts WHERE topicid=$topicid ORDER BY id DESC LIMIT 1") or sqlerr(__FILE__, __LINE__);

$arr = mysql_fetch_assoc($res);

$postid = 0 + $arr["id"];

$userid = 0 + $arr["userid"];

$added = "" . $arr["added"] . "";


/// GET NAME OF LAST POSTER ///

$res = mysql_query("SELECT id, username FROM users WHERE id=$userid") or sqlerr(__FILE__, __LINE__);

if (mysql_num_rows($res) == 1) {

$arr = mysql_fetch_assoc($res);

$username = "$arr[username]";

}

else

$username = "Unknown[$topic_userid]";


/// GET NAME OF THE AUTHOR ///

$res = mysql_query("SELECT username FROM users WHERE id=$topic_userid") or sqlerr(__FILE__, __LINE__);

if (mysql_num_rows($res) == 1) {

$arr = mysql_fetch_assoc($res);

$author = "$arr[username]";

}

else

$author = "Unknown[$topic_userid]";


/// GETTING THE LAST INFO AND MAKE THE TABLE ROWS ///

$r = mysql_query("SELECT lastpostread FROM readposts WHERE userid=$userid AND topicid=$topicid") or sqlerr(__FILE__, __LINE__);

$a = mysql_fetch_row($r);

$new = !$a || $postid > $a[0];

$subject = "" . encodehtml($topicarr["subject"]) . "";


print("".

"" .

"".

"" .

"");


print("");

} // while


print("Topic Title Replies Views Author Last Post








$subject $replies $views $author $addedby $username

");

} // end function



function dbconn($autoclean = false)

{

    global $mysql_host, $mysql_user, $mysql_pass, $mysql_db;



    if (!@mysql_connect($mysql_host, $mysql_user, $mysql_pass))

    {

          switch (mysql_errno())

          {

                case 1040:

                case 2002:

                        if ($_SERVER[REQUEST_METHOD] == "GET")

                                die("



The server load is very high at the moment. Retrying, please wait...






");

                        else

                                die("Too many users. Please press the Refresh button in your browser to retry.");

        default:

                die("[" . mysql_errno() . "] dbconn: mysql_connect: " . mysql_error());

      }

    }

    mysql_select_db($mysql_db)

        or die('dbconn: mysql_select_db: ' + mysql_error());



    userlogin();



    if ($autoclean)

        register_shutdown_function("autoclean");

}





function userlogin() {

    global $SITE_ONLINE;

    unset($GLOBALS["CURUSER"]);



    $ip = getip();

        $nip = ip2long($ip);

    $res = mysql_query("SELECT * FROM bans WHERE $nip >= first AND $nip <= last") or sqlerr(__FILE__, __LINE__);

    if (mysql_num_rows($res) > 0)

    {

      header("HTTP/1.0 403 Forbidden");

      print("403 Forbidden
Unauthorized IP address.\n");

      die;

    }



    if (!$SITE_ONLINE || empty($_COOKIE["uid"]) || empty($_COOKIE["pass"]))

        return;

    $id = 0 + $_COOKIE["uid"];

    if (!$id || strlen($_COOKIE["pass"]) != 32)

        return;

    $res = mysql_query("SELECT * FROM users WHERE id = $id AND enabled='yes' AND status = 'confirmed'");// or die(mysql_error());

    $row = mysql_fetch_array($res);

    if (!$row)

        return;

    $sec = hash_pad($row["secret"]);

    if ($_COOKIE["pass"] !== md5($row["passhash"].$_SERVER["REMOTE_ADDR"]))

        return;

    mysql_query("UPDATE users SET last_access='" . get_date_time() . "', ip=".sqlesc($ip)." WHERE id=" . $row["id"]);// or die(mysql_error());

    $row['ip'] = $ip;

    $GLOBALS["CURUSER"] = $row;

}



function autoclean() {

    global $autoclean_interval;



    $now = time();

    $docleanup = 0;



    $res = mysql_query("SELECT value_u FROM avps WHERE arg = 'lastcleantime'");

    $row = mysql_fetch_array($res);

    if (!$row) {

        mysql_query("INSERT INTO avps (arg, value_u) VALUES ('lastcleantime',$now)");

        return;

    }

    $ts = $row[0];

    if ($ts + $autoclean_interval > $now)

        return;

    mysql_query("UPDATE avps SET value_u=$now WHERE arg='lastcleantime' AND value_u = $ts");

    if (!mysql_affected_rows())

        return;



    docleanup();

}



function unesc($x) {

    if (get_magic_quotes_gpc())

        return stripslashes($x);

    return $x;

}



function mksize($bytes)

{

        if ($bytes < 1000 * 1024)

                return number_format($bytes / 1024, 2) . " kB";

        elseif ($bytes < 1000 * 1048576)

                return number_format($bytes / 1048576, 2) . " MB";

        elseif ($bytes < 1000 * 1073741824)

                return number_format($bytes / 1073741824, 2) . " GB";

        else

                return number_format($bytes / 1099511627776, 2) . " TB";

}



function mksizeint($bytes)

{

        $bytes = max(0, $bytes);

        if ($bytes < 1000)

                return floor($bytes) . " B";

        elseif ($bytes < 1000 * 1024)

                return floor($bytes / 1024) . " kB";

        elseif ($bytes < 1000 * 1048576)

                return floor($bytes / 1048576) . " MB";

        elseif ($bytes < 1000 * 1073741824)

                return floor($bytes / 1073741824) . " GB";

        else

                return floor($bytes / 1099511627776) . " TB";

}



function deadtime() {

    global $announce_interval;

    return time() - floor($announce_interval * 1.3);

}



function mkprettytime($s) {

    if ($s < 0)

        $s = 0;

    $t = array();

    foreach (array("60:sec","60:min","24:hour","0:day") as $x) {

        $y = explode(":", $x);

        if ($y[0] > 1) {

            $v = $s % $y[0];

            $s = floor($s / $y[0]);

        }

        else

            $v = $s;

        $t[$y[1]] = $v;

    }



    if ($t["day"])

        return $t["day"] . "d " . sprintf("%02d:%02d:%02d", $t["hour"], $t["min"], $t["sec"]);

    if ($t["hour"])

        return sprintf("%d:%02d:%02d", $t["hour"], $t["min"], $t["sec"]);

//    if ($t["min"])

        return sprintf("%d:%02d", $t["min"], $t["sec"]);

//    return $t["sec"] . " secs";

}



function mkglobal($vars) {

    if (!is_array($vars))

        $vars = explode(":", $vars);

    foreach ($vars as $v) {

        if (isset($_GET[$v]))

            $GLOBALS[$v] = unesc($_GET[$v]);

        elseif (isset($_POST[$v]))

            $GLOBALS[$v] = unesc($_POST[$v]);

        else

            return 0;

    }

    return 1;

}



function tr($x,$y,$noesc=0) {

    if ($noesc)

        $a = $y;

    else {

        $a = htmlspecialchars($y);

        $a = str_replace("\n", "\n", $a);

    }

    print("
" . htmlspecialchars($y) . "

Not Found

The server load is very high at the moment. Retrying, please wait...

403 Forbidden

Attention

You will need to have POSTER MOD to work!
