1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:
132:
133:
134:
135:
136:
137:
138:
139:
140:
141:
142:
143:
144:
145:
146:
147:
148:
149:

<?

require_once "config.php";
connect ($dbhost, $dbuser, $dbpass, $database);


// Check if a comment was posted
if ($_POST['submitted'] == '')
{

// The details query
$result = mysql_query("SELECT * FROM torrents LEFT JOIN categories ON torrents.subcat = categories.subid WHERE torrents.id ='".strip_tags(trim($_GET['id']))."'") or die (mysql_error());
$count = mysql_num_rows($result);
if ($count == 0)
{
stheader('Torrent Not Found');
echo '<br /><h1>Torrent nicht gefunden</h1>';
footer();
die;
}

// extract data from sql
while ($row = mysql_fetch_array($result))
{
extract($row);

stheader('Torrentdetails  für: '.htmlentities($torrentname));

?>
<script type="text/javascript">
function expandcontract(tbodyid,dis) {
  document.getElementById(tbodyid).style.display = dis;
}
</script>
<?
$tracker = parse_url($tracker);

// Display upload description
if ($description == 1)
{

$result_desc = mysql_query("SELECT descr FROM description where id = '".strip_tags(trim($_GET['id']))."' LIMIT 1");
while ($row = mysql_fetch_array($result_desc))
{
extract($row);
$description = '<tr><td colspan="2"><center><br /><h1>Description</h1><div id="desc">'.nl2br(str_replace('  ','&nbsp;&nbsp;',$descr)).'</div></center><br /></td></tr>';
}
}
else
{
$description = '';
}

echo '<div class="location"><a href="/index.php">Home</a> :: <a href="/cat.php?id='.$maincat.'">'.$name.'</a> :: <a href="/subcat.php?id='.$subid.'">'.$subname.'</a> :: <a href="/details.php?id='.$id.'">'.htmlentities($torrentname).'</a></div>';
// Display torrent details
echo '<h1>'.htmlentities($torrentname).'</h1>';
echo '<table class="det" cellpadding="0" cellspacing="0" border="0">';
echo '<tr><td width="15%">Download</td><td>: <a href="/download.php?id='.htmlentities($hash).'">'.htmlentities($torrentname).'</a> &raquo; (<a href="magnet:?xt=urn:btih:'. strtoupper(base32_encode(pack("H*", $hash))).'">Magnet Link</a>)</td></tr>';
echo '<tr><td>Kategorie</td><td>: <a href="/cat.php?id='.$maincat.'">'.$name.'</a> &raquo; <a href="/subcat.php?id='.$subid.'">'.$subname.'</a></td></tr>';
echo '<tr><td>Grösse</td><td>: '.torsize($size).'</td></tr>';
echo '<tr><td>Seeder</td><td>: '.getpeer($seeds).'</td></tr>';
echo '<tr><td>Peers</td><td>: '.getpeer($peers).'</td></tr>';
echo '<tr><td>Tracker</td><td>: http://'.htmlentities($tracker['host']).' ('.detreg($registration).')</td></tr>';
echo '<tr><td>Hinzugefügt</td><td>: '.$added.'</td></tr>';
echo '<tr><td>Updated</td><td>: '.$updated.'</td></tr>';
echo '<tr><td>Hash</td><td>: '.htmlentities($hash).'</td></tr>';
echo '<tr><td>Alternative</td><td>: The file <em>'.htmlentities($torrentname).'</em>  might also be available on UseNeXT <strong><a href="http://www.usenext.de/index.cfm?TD=377528">Click here to download the UseneXT client</strong></a></td></tr>'.$description;
echo '</table>';

// Display toggle files link
echo '<br /><a href="#det" onclick="expandcontract(\'files\',\'\')">Alle Files anzeigen</a> :: <a href="#" onclick="expandcontract(\'files\',\'none\')">Alle Files verstecken</a><br /><br />';

// Display internal files
echo '<a name="det"></a>';
echo '<table class="det" cellpadding="0" cellspacing="0" border="0">';
echo '<tbody id="files" style="display:none">';
@showfiles($hash);
echo '</tbody></table>';

// Fetch comments from sql
$result = mysql_query("SELECT * FROM comments WHERE id ='".strip_tags(trim($_GET['id']))."'");
$comment_count = mysql_num_rows($result);

// div colors
$color1 = 'class="light"';
$color2 = 'class="dark"';
$row_count = 0; 

echo '<br /><h1>Kommentare ('.$comment_count.')</h1>';
if (!$comment_count == 0)
{
echo '<div class="commentwrapper">';
while ($row = mysql_fetch_array($result))

{
extract($row);
$row_color = ($row_count % 2) ? $color1 : $color2; 
echo '<div '.$row_color.'><strong>'.htmlentities($name).'</strong> On <strong>'.$date.'</strong><br /><br />'.nl2br(htmlentities($post)).'</div><br /><br />';
$row_count++;
}
}

$result = mysql_query("SELECT * FROM ban WHERE ip = '$REMOTE_ADDR'");
if (mysql_num_rows($result) == 1)
{
echo '<br /><h1>You cant add any comments!</h1>You cant add any comments because you where banned for some reason.';
footer();
die;
}
echo '<br /><form id="comment" action="/details.php?id='.strip_tags(trim($_GET['id'])).'" method="post">';
echo '<input name="user" value="name" onclick=\'value=""\' /><br /><br />';
echo '<textarea name="comment" cols="50" rows="7"></textarea><br />';
echo '<input type="submit" name="submitted" value="submit" /></form></div>';
}

footer();
}

// Handle posted comment
else
{
$result = mysql_query("SELECT * FROM ban WHERE ip = '$REMOTE_ADDR'");
if (mysql_num_rows($result) == 1)
{
stheader('You have been banned from this section!');
echo '<h1>Banned!</h1>You have been banned from this section of the site for a very very very good reason, if you think a mistake has been made feel free to contact one of the admins';
footer();
die;
}

$commentid = strip_tags(trim($_GET['id']));
$name = trim($_POST['user']);
$comment = trim($_POST['comment']);
$ip= $REMOTE_ADDR;
$date = date('YmdHis');
if ($comment == '' || $name = '')
{
stheader('Comment failed!');
echo '<h1>Please fill out the entire form!</h1>';
footer();
die;
}
stheader('Comment submitted');
mysql_query("INSERT INTO comments (id,ip,date,name,post) VALUES ('$commentid','$ip','$date','$name','$comment')");
echo '<center><h1>Comment posted! Thanks.</h1><a href="/details.php?id='.strip_tags($_GET['id']).'">Click here to view your posting</a></center>';
footer();
}
?>

1:

echo '<tr><td>Poster</td><td><center><img src=\"".$row["poster"]."\"></center></td></tr>';

1:
2:
3:
4:
5:
6:
7:
8:

if(!$row["poster"])
{
echo '<tr><td>Poster</td><td><center><img src=\"poster.jpg\"></center></td></tr>'; 
}
else
{
echo '<tr><td>Poster</td><td><center><img src=\"".$row["poster"]."\"></center></td></tr>';
}

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:
132:
133:
134:
135:
136:
137:
138:
139:
140:
141:
142:
143:
144:
145:
146:
147:
148:
149:
150:
151:
152:
153:
154:
155:
156:
157:
158:
159:
160:

<?

require_once "config.php";
connect ($dbhost, $dbuser, $dbpass, $database);


// Check if a comment was posted
if ($_POST['submitted'] == '')
{

// The details query
$result = mysql_query("SELECT * FROM torrents LEFT JOIN categories ON torrents.subcat = categories.subid WHERE torrents.id ='".strip_tags(trim($_GET['id']))."'") or die (mysql_error());
 $count = mysql_num_rows($result);
if ($count == 0)
{
stheader('Torrent Not Found');
echo '<br /><h1>Torrent nicht gefunden</h1>';
footer();
die;
}

// extract data from sql
while ($row = mysql_fetch_array($result))
{
extract($row);

stheader('Torrentdetails  für: '.htmlentities($torrentname));
	
?>
<script type="text/javascript">
function expandcontract(tbodyid,dis) {
  document.getElementById(tbodyid).style.display = dis;
}
</script>
<?
$tracker = parse_url($tracker);

// Display upload description
if ($description == 1)
{

$result_desc = mysql_query("SELECT descr FROM description where id = '".strip_tags(trim($_GET['id']))."' LIMIT 1");
while ($row = mysql_fetch_array($result_desc))
{
extract($row);
$description = '<tr><td colspan="2"><center><br /><h1>Description</h1><div id="desc">'.nl2br(str_replace('  ','&nbsp;&nbsp;',$descr)).'</div></center><br /></td></tr>';
}
}
else
{
$description = '';
}

echo '<div class="location"><a href="/index.php">Home</a> :: <a href="/cat.php?id='.$maincat.'">'.$name.'</a> :: <a href="/subcat.php?id='.$subid.'">'.$subname.'</a> :: <a href="/details.php?id='.$id.'">'.htmlentities($torrentname).'</a></div>';
// Display torrent details
echo '<h1>'.htmlentities($torrentname).'</h1>';
echo '<table class="det" cellpadding="0" cellspacing="0" border="0">';
if(!$row["poster"])
echo '<tr><td>Poster</td><td><center><img src=\"".$row["poster"]."\"></center></td></tr>';
echo '<tr><td width="15%">Download</td><td>: <a href="/download.php?id='.htmlentities($hash).'">'.htmlentities($torrentname).'</a> &raquo; (<a href="magnet:?xt=urn:btih:'. strtoupper(base32_encode(pack("H*", $hash))).'">Magnet Link</a>)</td></tr>';
echo '<tr><td>Kategorie</td><td>: <a href="/cat.php?id='.$maincat.'">'.$name.'</a> &raquo; <a href="/subcat.php?id='.$subid.'">'.$subname.'</a></td></tr>';
echo '<tr><td>Grösse</td><td>: '.torsize($size).'</td></tr>';
echo '<tr><td>Seeder</td><td>: '.getpeer($seeds).'</td></tr>';
echo '<tr><td>Peers</td><td>: '.getpeer($peers).'</td></tr>';
echo '<tr><td>Tracker</td><td>: http://'.htmlentities($tracker['host']).' ('.detreg($registration).')</td></tr>';
echo '<tr><td>Hinzugefügt</td><td>: '.$added.'</td></tr>';
echo '<tr><td>Updated</td><td>: '.$updated.'</td></tr>';
echo '<tr><td>Hash</td><td>: '.htmlentities($hash).'</td></tr>';
echo '<tr><td>Alternative</td><td>: The file <em>'.htmlentities($torrentname).'</em>  might also be available on UseNeXT <strong><a href="http://www.usenext.de/index.cfm?TD=377528">Click here to download the UseneXT client</strong></a></td></tr>'.$description;
echo '</table>';




// Display toggle files link
echo '<br /><a href="#det" onclick="expandcontract(\'files\',\'\')">Alle Files anzeigen</a> :: <a href="#" onclick="expandcontract(\'files\',\'none\')">Alle Files verstecken</a><br /><br />';


// Display internal files
echo '<a name="det"></a>';
echo '<table class="det" cellpadding="0" cellspacing="0" border="0">';
echo '<tbody id="files" style="display:none">';
@showfiles($hash);
echo '</tbody></table>';

// Fetch comments from sql
$result = mysql_query("SELECT * FROM comments WHERE id ='".strip_tags(trim($_GET['id']))."'");
$comment_count = mysql_num_rows($result);

// div colors
$color1 = 'class="light"';
$color2 = 'class="dark"';
$row_count = 0; 

echo '<br /><h1>Kommentare ('.$comment_count.')</h1>';
if (!$comment_count == 0)
{
echo '<div class="commentwrapper">';
while ($row = mysql_fetch_array($result))

{
extract($row);
$row_color = ($row_count % 2) ? $color1 : $color2; 
echo '<div '.$row_color.'><strong>'.htmlentities($name).'</strong> On <strong>'.$date.'</strong><br /><br />'.nl2br(htmlentities($post)).'</div><br /><br />';
$row_count++;
}
}


$result = mysql_query("SELECT * FROM ban WHERE ip = '$REMOTE_ADDR'");
if (mysql_num_rows($result) == 1)
{
echo '<br /><h1>You cant add any comments!</h1>You cant add any comments because you where banned for some reason.';
footer();
die;
}
echo '<br /><form id="comment" action="/details.php?id='.strip_tags(trim($_GET['id'])).'" method="post">';
echo '<input name="user" value="name" onclick=\'value=""\' /><br /><br />';
echo '<textarea name="comment" cols="50" rows="7"></textarea><br />';
echo '<input type="submit" name="submitted" value="submit" /></form></div>';
}


footer();
}


// Handle posted comment
else
{
$result = mysql_query("SELECT * FROM ban WHERE ip = '$REMOTE_ADDR'");
if (mysql_num_rows($result) == 1)
{
stheader('You have been banned from this section!');
echo '<h1>Banned!</h1>You have been banned from this section of the site for a very very very good reason, if you think a mistake has been made feel free to contact one of the admins';
footer();
die;
}


$commentid = strip_tags(trim($_GET['id']));
$name = trim($_POST['user']);
$comment = trim($_POST['comment']);
$ip= $REMOTE_ADDR;
$date = date('YmdHis');
if ($comment == '' || $name = '')
{
stheader('Comment failed!');
echo '<h1>Please fill out the entire form!</h1>';
footer();
die;
}
stheader('Comment submitted');
mysql_query("INSERT INTO comments (id,ip,date,name,post) VALUES ('$commentid','$ip','$date','$name','$comment')");
echo '<center><h1>Comment posted! Thanks.</h1><a href="/details.php?id='.strip_tags($_GET['id']).'">Click here to view your posting</a></center>';
footer();
}
?>

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:
132:
133:
134:
135:
136:
137:
138:
139:
140:
141:
142:
143:
144:
145:
146:
147:
148:
149:
150:
151:
152:
153:
154:
155:
156:
157:
158:
159:
160:
161:
162:
163:
164:

<?

require_once "config.php";
connect ($dbhost, $dbuser, $dbpass, $database);


// Check if a comment was posted
if ($_POST['submitted'] == '')
{

// The details query
$result = mysql_query("SELECT * FROM torrents LEFT JOIN categories ON torrents.subcat = categories.subid WHERE torrents.id ='".strip_tags(trim($_GET['id']))."'") or die (mysql_error());
 $count = mysql_num_rows($result);
if ($count == 0)
{
stheader('Torrent Not Found');
echo '<br /><h1>Torrent nicht gefunden</h1>';
footer();
die;
}

// extract data from sql
while ($row = mysql_fetch_array($result))
{
extract($row);

stheader('Torrentdetails  für: '.htmlentities($torrentname));
	
?>
<script type="text/javascript">
function expandcontract(tbodyid,dis) {
  document.getElementById(tbodyid).style.display = dis;
}
</script>
<?
$tracker = parse_url($tracker);

$res = mysql_query("SELECT torrents.poster WHERE torrents.id ='".strip_tags(trim($_GET['id']))."'") 
	or sqlerr();
$row = mysql_fetch_array($res);

// Display upload description
if ($description == 1)
{

$result_desc = mysql_query("SELECT descr FROM description where id = '".strip_tags(trim($_GET['id']))."' LIMIT 1");
while ($row = mysql_fetch_array($result_desc))
{
extract($row);
$description = '<tr><td colspan="2"><center><br /><h1>Description</h1><div id="desc">'.nl2br(str_replace('  ','&nbsp;&nbsp;',$descr)).'</div></center><br /></td></tr>';
}
}
else
{
$description = '';
}

echo '<div class="location"><a href="/index.php">Home</a> :: <a href="/cat.php?id='.$maincat.'">'.$name.'</a> :: <a href="/subcat.php?id='.$subid.'">'.$subname.'</a> :: <a href="/details.php?id='.$id.'">'.htmlentities($torrentname).'</a></div>';
// Display torrent details
echo '<h1>'.htmlentities($torrentname).'</h1>';
echo '<table class="det" cellpadding="0" cellspacing="0" border="0">';
if(!$row["poster"])
echo '<tr><td>Poster</td><td><center><img src=\"".$row["poster"]."\"></center></td></tr>';
echo '<tr><td width="15%">Download</td><td>: <a href="/download.php?id='.htmlentities($hash).'">'.htmlentities($torrentname).'</a> &raquo; (<a href="magnet:?xt=urn:btih:'. strtoupper(base32_encode(pack("H*", $hash))).'">Magnet Link</a>)</td></tr>';
echo '<tr><td>Kategorie</td><td>: <a href="/cat.php?id='.$maincat.'">'.$name.'</a> &raquo; <a href="/subcat.php?id='.$subid.'">'.$subname.'</a></td></tr>';
echo '<tr><td>Grösse</td><td>: '.torsize($size).'</td></tr>';
echo '<tr><td>Seeder</td><td>: '.getpeer($seeds).'</td></tr>';
echo '<tr><td>Peers</td><td>: '.getpeer($peers).'</td></tr>';
echo '<tr><td>Tracker</td><td>: http://'.htmlentities($tracker['host']).' ('.detreg($registration).')</td></tr>';
echo '<tr><td>Hinzugefügt</td><td>: '.$added.'</td></tr>';
echo '<tr><td>Updated</td><td>: '.$updated.'</td></tr>';
echo '<tr><td>Hash</td><td>: '.htmlentities($hash).'</td></tr>';
echo '<tr><td>Alternative</td><td>: The file <em>'.htmlentities($torrentname).'</em>  might also be available on UseNeXT <strong><a href="http://www.usenext.de/index.cfm?TD=377528">Click here to download the UseneXT client</strong></a></td></tr>'.$description;
echo '</table>';




// Display toggle files link
echo '<br /><a href="#det" onclick="expandcontract(\'files\',\'\')">Alle Files anzeigen</a> :: <a href="#" onclick="expandcontract(\'files\',\'none\')">Alle Files verstecken</a><br /><br />';


// Display internal files
echo '<a name="det"></a>';
echo '<table class="det" cellpadding="0" cellspacing="0" border="0">';
echo '<tbody id="files" style="display:none">';
@showfiles($hash);
echo '</tbody></table>';

// Fetch comments from sql
$result = mysql_query("SELECT * FROM comments WHERE id ='".strip_tags(trim($_GET['id']))."'");
$comment_count = mysql_num_rows($result);

// div colors
$color1 = 'class="light"';
$color2 = 'class="dark"';
$row_count = 0; 

echo '<br /><h1>Kommentare ('.$comment_count.')</h1>';
if (!$comment_count == 0)
{
echo '<div class="commentwrapper">';
while ($row = mysql_fetch_array($result))

{
extract($row);
$row_color = ($row_count % 2) ? $color1 : $color2; 
echo '<div '.$row_color.'><strong>'.htmlentities($name).'</strong> On <strong>'.$date.'</strong><br /><br />'.nl2br(htmlentities($post)).'</div><br /><br />';
$row_count++;
}
}


$result = mysql_query("SELECT * FROM ban WHERE ip = '$REMOTE_ADDR'");
if (mysql_num_rows($result) == 1)
{
echo '<br /><h1>You cant add any comments!</h1>You cant add any comments because you where banned for some reason.';
footer();
die;
}
echo '<br /><form id="comment" action="/details.php?id='.strip_tags(trim($_GET['id'])).'" method="post">';
echo '<input name="user" value="name" onclick=\'value=""\' /><br /><br />';
echo '<textarea name="comment" cols="50" rows="7"></textarea><br />';
echo '<input type="submit" name="submitted" value="submit" /></form></div>';
}


footer();
}


// Handle posted comment
else
{
$result = mysql_query("SELECT * FROM ban WHERE ip = '$REMOTE_ADDR'");
if (mysql_num_rows($result) == 1)
{
stheader('You have been banned from this section!');
echo '<h1>Banned!</h1>You have been banned from this section of the site for a very very very good reason, if you think a mistake has been made feel free to contact one of the admins';
footer();
die;
}


$commentid = strip_tags(trim($_GET['id']));
$name = trim($_POST['user']);
$comment = trim($_POST['comment']);
$ip= $REMOTE_ADDR;
$date = date('YmdHis');
if ($comment == '' || $name = '')
{
stheader('Comment failed!');
echo '<h1>Please fill out the entire form!</h1>';
footer();
die;
}
stheader('Comment submitted');
mysql_query("INSERT INTO comments (id,ip,date,name,post) VALUES ('$commentid','$ip','$date','$name','$comment')");
echo '<center><h1>Comment posted! Thanks.</h1><a href="/details.php?id='.strip_tags($_GET['id']).'">Click here to view your posting</a></center>';
footer();
}
?>

1:

$result = mysql_query("SELECT * FROM torrents LEFT JOIN categories ON torrents.subcat = categories.subid WHERE torrents.id ='".strip_tags(trim($_GET['id']))."'") or die (mysql_error());