<?php

/************************************************************************/
/* PHP-NUKE: Advanced Content Management System                         */
/* ============================================                         */
/*                                                                      */
/* Copyright (c) 2002 by Francisco Burzi                                */
/* http://phpnuke.org                                                   */
/*                                                                      */
/* This program is free software. You can redistribute it and/or modify */
/* it under the terms of the GNU General Public License as published by */
/* the Free Software Foundation; either version 2 of the License.       */
/************************************************************************/

require_once("mainfile.php");
$module = 1;

    $name = trim($name);
if (isset($name)) {
    global $nukeuser;
    $nukeuser = base64_decode($user);
    $sql = "SELECT active, view FROM ".$prefix."_modules WHERE title='$name'";
    $result = $db->sql_query($sql);
    $row = $db->sql_fetchrow($result);
    $mod_active = $row[active];
    $mod_active = intval(trim($mod_active));
    $view = $row[view];
    if (($mod_active == 1) OR ($mod_active == 0 AND is_admin($admin))) {
   if (!isset($mop)) { $mop="modload"; }
   if (!isset($file)) { $file="index"; }
   if (ereg("\.\.",$name) || ereg("\.\.",$file) || ereg("\.\.",$mop)) {
       echo "You are so cool...";
   } else {
       $ThemeSel = get_theme();
       if (file_exists("themes/$ThemeSel/modules/$name/$file.php")) {
      $modpath = "themes/$ThemeSel/";
       } else {
      $modpath = "";
       }
       if ($view == 0) {
      $modpath .= "modules/$name/$file.php";
          if (file_exists($modpath)) {
          include($modpath);
          } else {
          die ("Sorry, such file doesn't exist...");
      }
       }
       if ($view == 1 AND is_user($user) AND is_group($user, $name) OR is_admin($admin)) {
      $modpath .= "modules/$name/$file.php";
          if (file_exists($modpath)) {
          include($modpath);
          } else {
          die ("Sorry, such file doesn't exist...");
      }
       } elseif ($view == 1 AND !is_user($user) || !is_admin($admin)) {
      $pagetitle = "- "._ACCESSDENIED."";
      include("header.php");
      title("$sitename: "._ACCESSDENIED."");
      OpenTable();
      echo "<center><b>"._RESTRICTEDAREA."</b><br><br>"
          .""._MODULEUSERS."";
      $sql = "SELECT mod_group FROM ".$prefix."_modules WHERE title='$name'";
      $result = $db->sql_query($sql);
      $row = $db->sql_fetchrow($result);
      if ($row[mod_group != 0]) {
          $sql = "SELECT name FROM ".$prefix."_groups WHERE id='$row[mod_group]'";
          $result = $db->sql_query($sql);
          $row = $db->sql_fetchrow($result);
          echo ""._ADDITIONALYGRP.": <b>$row[name]</b><br><br>";
      }
      echo ""._GOBACK."";
      CloseTable();
      include("footer.php");
      die();
       }
       if ($view == 2 AND is_admin($admin)) {
      $modpath .= "modules/$name/$file.php";
          if (file_exists($modpath)) {
          include($modpath);
          } else {
          die ("Sorry, such file doesn't exist...");
      }
       } elseif ($view == 2 AND !is_admin($admin)) {
      $pagetitle = "- "._ACCESSDENIED."";
      include("header.php");
      title("$sitename: "._ACCESSDENIED."");
      OpenTable();
      echo "<center><b>"._RESTRICTEDAREA."</b><br><br>"
          .""._MODULESADMINS.""
          .""._GOBACK."";
      CloseTable();
      include("footer.php");
      die();
       }
   }
    } else {
   include("header.php");
   OpenTable();
   echo "<center>"._MODULENOTACTIVE."<br><br>"
       .""._GOBACK."</center>";
   CloseTable();
   include("footer.php");
    }
} else {
    die ("Sorry, you can't access this file directly...");
}

?>