<?php

/************************************************************************/
/* PHP-NUKE: Web Portal System                                          */
/* ===========================                                          */
/*                                                                      */
/* Copyright (c) 2005 by Francisco Burzi                                */
/* http://phpnuke.org                                                   */
/*                                                                      */
/* This program is free software. You can redistribute it and/or modify */
/* it under the terms of the GNU General Public License as published by */
/* the Free Software Foundation; either version 2 of the License.       */
/************************************************************************/

if (!defined('ADMIN_FILE')) {
	die ("Access Denied");
}

global $prefix, $db, $admin_file;
$aid = substr("$aid", 0,25);
$row = $db->sql_fetchrow($db->sql_query("SELECT name, radminsuper FROM " . $prefix . "_authors WHERE aid='$aid'"));
if (($row['radminsuper'] == 1) && ($row['name'] == 'God')) {

	/*********************************************************/
	/* Admin/Authors Functions                               */
	/*********************************************************/

	function displayadmins() {
		global $admin, $prefix, $db, $language, $multilingual, $admin_file, $bgcolor2;
		if (is_admin($admin)) {
		include("header.php");
		GraphicAdmin();
		OpenTable();
		echo "<center><font class=\"title\"><b>" . _AUTHORSADMIN . "</b></font></center>";
		CloseTable();
		echo "<br>";
		OpenTable();
		echo "<center><font class=\"option\"><b>" . _EDITADMINS . "</b></font></center><br>"
		."<table border=\"1\" align=\"center\">"
		."<tr><td bgcolor=\"$bgcolor2\">&nbsp;<b>"._ADMINID."</b>&nbsp;</td><td bgcolor=\"$bgcolor2\">&nbsp;<b>"._LANGUAGES."</b>&nbsp;</td><td bgcolor=\"$bgcolor2\">&nbsp;<b>"._FUNCTIONS."</b>&nbsp;</td></tr>";
		$result = $db->sql_query("SELECT aid, name, admlanguage from " . $prefix . "_authors");
		while ($row = $db->sql_fetchrow($result)) {
			$a_aid = filter($row['aid'], "nohtml");
			$name = filter($row['name'], "nohtml");
			$admlanguage = $row['admlanguage'];
			$a_aid = strtolower(substr("$a_aid", 0,25));
			$name = substr("$name", 0,50);
			if ($name == "God") {
				echo "<tr><td>&nbsp;$a_aid <i>("._MAINACCOUNT.")</i>&nbsp;</td>";
			} else {
				echo "<tr><td>&nbsp;$a_aid&nbsp;</td>";
			}
			if (empty($admlanguage)) {
				$admlanguage = "" . _ALL . "";
			}
			echo "<td align=\"center\">$admlanguage</td>";
			echo "<td align=\"center\"><a href=\"".$admin_file.".php?op=modifyadmin&amp;chng_aid=$a_aid\"><img src=\"images/edit.gif\" alt=\""._MODIFYINFO."\" title=\""._MODIFYINFO."\" border=\"0\" width=\"17\" height=\"17\"></a>";
			if($name == "God") {
				echo "<img src=\"images/delete_x.gif\" alt=\""._MAINACCOUNT."\" title=\""._MAINACCOUNT."\" border=\"0\" width=\"17\" height=\"17\"></a></td></tr>";
			} else {
				echo "<a href=\"".$admin_file.".php?op=deladmin&amp;del_aid=$a_aid\"><img src=\"images/delete.gif\" alt=\""._DELAUTHOR."\" title=\""._DELAUTHOR."\" border=\"0\" width=\"17\" height=\"17\"></a></td></tr>";
			}
		}
		echo "</table><br><center><font class=\"tiny\">" . _GODNOTDEL . "</font></center>";
		CloseTable();
		echo "<br>";
		OpenTable();
		echo "<center><font class=\"option\"><b>" . _ADDAUTHOR . "</b></font></center>"
		."<form action=\"".$admin_file.".php\" method=\"post\">"
		."<table border=\"0\">"
		."<tr><td>" . _NAME . ":</td>"
		."<td colspan=\"3\"><input type=\"text\" name=\"add_name\" size=\"30\" maxlength=\"50\"> <font class=\"tiny\">" . _REQUIREDNOCHANGE . "</font></td></tr>"
		."<tr><td>" . _NICKNAME . ":</td>"
		."<td colspan=\"3\"><input type=\"text\" name=\"add_aid\" size=\"30\" maxlength=\"25\"> <font class=\"tiny\">" . _REQUIRED . "</font></td></tr>"
		."<tr><td>" . _EMAIL . ":</td>"
		."<td colspan=\"3\"><input type=\"text\" name=\"add_email\" size=\"30\" maxlength=\"60\"> <font class=\"tiny\">" . _REQUIRED . "</font></td></tr>"
		."<tr><td>" . _URL . ":</td>"
		."<td colspan=\"3\"><input type=\"text\" name=\"add_url\" size=\"30\" maxlength=\"60\"></td></tr>";
		if ($multilingual == 1) {
			echo "<tr><td>" . _LANGUAGE . ":</td><td colspan=\"3\">"
			."<select name=\"add_admlanguage\">";
			$handle=opendir('language');
			while ($file = readdir($handle)) {
				if (preg_match("/^lang\-(.+)\.php/", $file, $matches)) {
					$langFound = $matches[1];
					$languageslist .= "$langFound ";
				}
			}
			closedir($handle);
			$languageslist = explode(" ", $languageslist);
			sort($languageslist);
			for ($i=0; $i < sizeof($languageslist); $i++) {
				if(!empty($languageslist[$i])) {
					echo "<option value=\"$languageslist[$i]\" ";
					if($languageslist[$i]==$language) echo "selected";
					echo ">".ucfirst($languageslist[$i])."</option>\n";
				}
			}
			echo "<option value=\"\">" . _ALL . "</option></select></td></tr>";
		} else {
			echo "<input type=\"hidden\" name=\"add_admlanguage\" value=\"\">";
		}
		echo "<tr><td>" . _PERMISSIONS . ":</td>";
		$result = $db->sql_query("SELECT mid, title FROM ".$prefix."_modules ORDER BY title ASC");
		$a = 0;
		while ($row = $db->sql_fetchrow($result)) {
			$title = filter($title, "nohtml");
			$title = ereg_replace("_", " ", $row['title']);
			if (file_exists("modules/".$row['title']."/admin/index.php") AND file_exists("modules/".$row['title']."/admin/links.php") AND file_exists("modules/".$row['title']."/admin/case.php")) {
				echo "<td><input type=\"checkbox\" name=\"auth_modules[]\" value=\"".intval($row['mid'])."\"> $title</td>";
				if ($a == 2) {
					echo "</tr><tr><td>&nbsp;</td>";
					$a = 0;
				} else {
					$a++;
				}
			}
		}
		echo "</tr><tr><td>&nbsp;</td>"
		."<td><input type=\"checkbox\" name=\"add_radminsuper\" value=\"1\"> <b>" . _SUPERUSER . "</b></td>"
		."</tr>"
		."<tr><td>&nbsp;</td><td colspan=\"3\"><font class=\"tiny\"><i>" . _SUPERWARNING . "</i></font></td></tr>"
		."<tr><td>" . _PASSWORD . "</td>"
		."<td colspan=\"3\"><input type=\"password\" name=\"add_pwd\" size=\"12\" maxlength=\"40\"> <font class=\"tiny\">" . _REQUIRED . "</font></td></tr>"
		."<input type=\"hidden\" name=\"op\" value=\"AddAuthor\">"
		."<tr><td colspan=\"4\">&nbsp;</td></tr>"
		."<tr><td>&nbsp;</td><td colspan=\"3\"><input type=\"submit\" value=\"" . _ADDAUTHOR2 . "\"></td></tr>"
		."</table></form>";
    CloseTable();
    include("footer.php");
    } else {
	include("header.php");
	GraphicAdmin();
	OpenTable();
	echo "<center><font class=\"title\"><b>Authors Admin</b></font></center>";
	CloseTable();
	echo "<br>";
	OpenTable();
	echo "<center><b>Not Authorized</b><br><br>"
	    ."Unauthorized editing of authors detected<br><br>"
	    .""._GOBACK."";
	CloseTable();
	include("footer.php");
    }
}

	function modifyadmin($chng_aid) {
	global $admin, $prefix, $db, $multilingual, $admin_file;
	if (is_admin($admin)) {
		include("header.php");
		GraphicAdmin();
		OpenTable();
		echo "<center><font class=\"title\"><b>" . _AUTHORSADMIN . "</b></font></center>";
		CloseTable();
		echo "<br>";
		OpenTable();
		echo "<center><font class=\"option\"><b>" . _MODIFYINFO . "</b></font></center><br><br>";
		$adm_aid = filter($chng_aid, "nohtml");
		$adm_aid = trim($adm_aid);
		$row = $db->sql_fetchrow($db->sql_query("SELECT aid, name, url, email, pwd, radminsuper, admlanguage from " . $prefix . "_authors where aid='$chng_aid'"));
		$chng_aid = filter($row['aid'], "nohtml");
		$chng_name = filter($row['name'], "nohtml");
		$chng_url = filter($row['url'], "nohtml");
		$chng_email = filter($row['email'], "nohtml");
		$chng_pwd = filter($row['pwd'], "nohtml");
		$chng_radminsuper = intval($row['radminsuper']);
		$chng_admlanguage = $row['admlanguage'];
		$chng_aid = strtolower(substr("$chng_aid", 0,25));
		$aid = $chng_aid;
		echo "<form action=\"".$admin_file.".php\" method=\"post\">"
		."<table border=\"0\">"
		."<tr><td>" . _NAME . ":</td>"
		."<td colspan=\"3\"><b>$chng_name</b> <input type=\"hidden\" name=\"chng_name\" value=\"$chng_name\"></td></tr>"
		."<tr><td>" . _NICKNAME . ":</td>"
		."<td colspan=\"3\"><input type=\"text\" name=\"chng_aid\" value=\"$chng_aid\" size=\"30\" maxlength=\"25\"> <font class=\"tiny\">" . _REQUIRED . "</font></td></tr>"
		."<tr><td>" . _EMAIL . ":</td>"
		."<td colspan=\"3\"><input type=\"text\" name=\"chng_email\" value=\"$chng_email\" size=\"30\" maxlength=\"60\"> <font class=\"tiny\">" . _REQUIRED . "</font></td></tr>"
		."<tr><td>" . _URL . ":</td>"
		."<td colspan=\"3\"><input type=\"text\" name=\"chng_url\" value=\"$chng_url\" size=\"30\" maxlength=\"60\"></td></tr>";
		if ($multilingual == 1) {
			echo "<tr><td>" . _LANGUAGE . ":</td><td colspan=\"3\">"
			."<select name=\"chng_admlanguage\">";
			$handle=opendir('language');
			while ($file = readdir($handle)) {
				if (preg_match("/^lang\-(.+)\.php/", $file, $matches)) {
					$langFound = $matches[1];
					$languageslist .= "$langFound ";
				}
			}
			closedir($handle);
			$languageslist = explode(" ", $languageslist);
			sort($languageslist);
			for ($i=0; $i < sizeof($languageslist); $i++) {
				if(!empty($languageslist[$i])) {
					echo "<option value=\"$languageslist[$i]\" ";
					if($languageslist[$i]==$chng_admlanguage) echo "selected";
					echo ">".ucfirst($languageslist[$i])."</option>\n";
				}
			}
			if (empty($chng_admlanguage)) {
				$allsel = "selected";
			} else {
				$allsel = "";
			}
			echo "<option value=\"\" $allsel>" . _ALL . "</option></select></td></tr>";
		} else {
			echo "<input type=\"hidden\" name=\"chng_admlanguage\" value=\"\">";
		}
		echo "<tr><td>" . _PERMISSIONS . ":</td>";
		if ($row['name'] != "God") {
			$result = $db->sql_query("SELECT mid, title, admins FROM ".$prefix."_modules ORDER BY title ASC");
			while ($row = $db->sql_fetchrow($result)) {
				$title = ereg_replace("_", " ", $row['title']);
				if (file_exists("modules/".$row['title']."/admin/index.php") AND file_exists("modules/".$row['title']."/admin/links.php") AND file_exists("modules/".$row['title']."/admin/case.php")) {
					$admins = explode(",", $row['admins']);
					$sel = "";
					for ($i=0; $i < sizeof($admins); $i++) {
						if ($chng_name == "$admins[$i]") {
							$sel = "checked";
						}
					}
					echo "<td><input type=\"checkbox\" name=\"auth_modules[]\" value=\"".intval($row['mid'])."\" $sel> $title</td>";
					$sel = "";
					if ($a == 2) {
						echo "</tr><tr><td>&nbsp;</td>";
						$a = 0;
					} else {
						$a++;
					}
				}
			}
			if ($chng_radminsuper == 1) {
				$sel1 = "checked";
			}
			echo "</tr><tr><td>&nbsp;</td>";
		} else {
			echo "<input type=\"hidden\" name=\"auth_modules[]\" value=\"\">";
			$sel1 = "checked";
		}
		echo "<td><input type=\"checkbox\" name=\"chng_radminsuper\" value=\"1\" $sel1> <b>" . _SUPERUSER . "</b></td>"
		."</tr><tr><td>&nbsp;</td>"
		."<td colspan=\"3\"><font class=\"tiny\"><i>" . _SUPERWARNING . "</i></font></td></tr>"
		."<tr><td>" . _PASSWORD . ":</td>"
	    	."<td colspan=\"3\"><input type=\"password\" name=\"chng_pwd\" size=\"12\" maxlength=\"40\"></td></tr>"
		."<tr><td>" . _RETYPEPASSWD . ":</td>"
		."<td colspan=\"3\"><input type=\"password\" name=\"chng_pwd2\" size=\"12\" maxlength=\"40\"> <font class=\"tiny\">" . _FORCHANGES . "</font></td></tr>"
		."<input type=\"hidden\" name=\"adm_aid\" value=\"$adm_aid\">"
		."<input type=\"hidden\" name=\"op\" value=\"UpdateAuthor\">"
		."<tr><td><input type=\"submit\" value=\"" . _SAVE . "\"> " . _GOBACK . ""
		."</td></tr></table></form>";
    CloseTable();
    include("footer.php");
    } else {
	include ('header.php');
	GraphicAdmin();
	OpenTable();
	echo "<center><font class=\"title\"><b>Authors Admin</b></font></center>";
	CloseTable();
	echo "<br>";
	OpenTable();
	echo "<center><b>Not Authorized</b><br><br>"
	    ."Unauthorized editing of authors detected<br><br>"
	    .""._GOBACK."";
	CloseTable();
	include("footer.php");
    }
	}

	function updateadmin($chng_aid, $chng_name, $chng_email, $chng_url, $chng_radminsuper, $chng_pwd, $chng_pwd2, $chng_admlanguage, $adm_aid, $auth_modules) {
		global $admin, $prefix, $db, $admin_file;
		if (is_admin($admin)) {
		$chng_aid = trim($chng_aid);
		if (!($chng_aid && $chng_name && $chng_email)) {
			Header("Location: ".$admin_file.".php?op=mod_authors");
		}
		if (!empty($chng_pwd2)) {
			if($chng_pwd != $chng_pwd2) {
				include("header.php");
				GraphicAdmin();
				OpenTable();
				echo "" . _PASSWDNOMATCH . "<br><br>"
				."<center>" . _GOBACK . "</center>";
				CloseTable();
				include("footer.php");
				exit;
			}
			$chng_pwd = md5($chng_pwd);
			$chng_aid = strtolower(substr("$chng_aid", 0,25));
			if ($chng_radminsuper == 1) {
				$result = $db->sql_query("SELECT mid, admins FROM ".$prefix."_modules");
				while ($row = $db->sql_fetchrow($result)) {
					$admins = explode(",", $row['admins']);
					$adm = "";
					for ($a=0; $a < sizeof($admins); $a++) {
						if ($admins[$a] != "$chng_name" AND !empty($admins[$a])) {
							$adm .= "$admins[$a],";
						}
					}
					$db->sql_query("UPDATE ".$prefix."_modules SET admins='$adm' WHERE mid='".intval($row['mid'])."'");
				}
				$db->sql_query("update " . $prefix . "_authors set aid='$chng_aid', email='$chng_email', url='$chng_url', radminsuper='$chng_radminsuper', pwd='$chng_pwd', admlanguage='$chng_admlanguage' where name='$chng_name' AND aid='$adm_aid'");
				Header("Location: ".$admin_file.".php?op=mod_authors");
			} else {
				if ($chng_name != "God" AND $chng_radminsuper != 0) {
				$db->sql_query("update " . $prefix . "_authors set aid='$chng_aid', email='$chng_email', url='$chng_url', radminsuper='0', pwd='$chng_pwd', admlanguage='$chng_admlanguage' where name='$chng_name' AND aid='$adm_aid'");
				}
				$result = $db->sql_query("SELECT mid, admins FROM ".$prefix."_modules");
				while ($row = $db->sql_fetchrow($result)) {
					$admins = explode(",", $row['admins']);
					$adm = "";
					for ($a=0; $a < sizeof($admins); $a++) {
						if ($admins[$a] != "$chng_name" AND !empty($admins[$a])) {
							$adm .= "$admins[$a],";
						}
					}
					$db->sql_query("UPDATE ".$prefix."_authors SET radminsuper='$chng_radminsuper' WHERE name='$chng_name' AND aid='$adm_aid'");
					$db->sql_query("UPDATE ".$prefix."_modules SET admins='$adm' WHERE mid='".intval($row['mid'])."'");
				}
				for ($i=0; $i < sizeof($auth_modules); $i++) {
					$row = $db->sql_fetchrow($db->sql_query("SELECT admins FROM ".$prefix."_modules WHERE mid='".intval($auth_modules[$i])."'"));
					$admins = explode(",", $row['admins']);
					for ($a=0; $a < sizeof($admins); $a++) {
						if ($admins[$a] == "$chng_name") {
							$dummy = 1;
						}
					}
					if ($dummy != 1) {
						$adm = $row['admins'] . $chng_name;
						$db->sql_query("UPDATE ".$prefix."_modules SET admins='$adm,' WHERE mid='".intval($auth_modules[$i])."'");
					}
					$dummy = "";
				}
				Header("Location: ".$admin_file.".php?op=mod_authors");
			}
		} else {
			if ($chng_radminsuper == 1) {
				$result = $db->sql_query("SELECT mid, admins FROM ".$prefix."_modules");
				while ($row = $db->sql_fetchrow($result)) {
					$admins = explode(",", $row['admins']);
					$adm = "";
					for ($a=0; $a < sizeof($admins); $a++) {
						if ($admins[$a] != "$chng_name" AND !empty($admins[$a])) {
							$adm .= "$admins[$a],";
						}
					}
					$db->sql_query("UPDATE ".$prefix."_modules SET admins='$adm' WHERE mid='".intval($row['mid'])."'");
				}
				$db->sql_query("update " . $prefix . "_authors set aid='$chng_aid', email='$chng_email', url='$chng_url', radminsuper='$chng_radminsuper', admlanguage='$chng_admlanguage' where name='$chng_name' AND aid='$adm_aid'");
				Header("Location: ".$admin_file.".php?op=mod_authors");
			} else {
				if ($chng_name != "God" AND $chng_radminsuper != 0) {
		    		$db->sql_query("update " . $prefix . "_authors set aid='$chng_aid', email='$chng_email', url='$chng_url', radminsuper='0', admlanguage='$chng_admlanguage' where name='$chng_name' AND aid='$adm_aid'");
				}
				$result = $db->sql_query("SELECT mid, admins FROM ".$prefix."_modules");
				while ($row = $db->sql_fetchrow($result)) {
					$admins = explode(",", $row['admins']);
					$adm = "";
					for ($a=0; $a < sizeof($admins); $a++) {
						if ($admins[$a] != "$chng_name" AND !empty($admins[$a])) {
							$adm .= "$admins[$a],";
						}
					}
					$db->sql_query("UPDATE ".$prefix."_authors SET radminsuper='$chng_radminsuper' WHERE name='$chng_name' AND aid='$adm_aid'");
					$db->sql_query("UPDATE ".$prefix."_modules SET admins='$adm' WHERE mid='".intval($row['mid'])."'");
				}
				for ($i=0; $i < sizeof($auth_modules); $i++) {
					$row = $db->sql_fetchrow($db->sql_query("SELECT admins FROM ".$prefix."_modules WHERE mid='".intval($auth_modules[$i])."'"));
					$admins = explode(",", $row['admins']);
					for ($a=0; $a < sizeof($admins); $a++) {
						if ($admins[$a] == "$chng_name") {
							$dummy = 1;
						}
					}
					if ($dummy != 1) {
						$adm = $row['admins'] . $chng_name;
						$db->sql_query("UPDATE ".$prefix."_modules SET admins='$adm,' WHERE mid='".intval($auth_modules[$i])."'");
					}
					$dummy = "";
				}
				Header("Location: ".$admin_file.".php?op=mod_authors");
			}
		}
		if ($adm_aid != $chng_aid) {
			$result2 = $db->sql_query("SELECT sid, aid, informant from " . $prefix . "_stories where aid='$adm_aid'");
			while ($row2 = $db->sql_fetchrow($result2)) {
				$sid = intval($row2['sid']);
				$old_aid = $row2['aid'];
				$old_aid = strtolower(substr("$old_aid", 0,25));
				$informant = $row2['informant'];
				$informant = substr("$informant", 0,25);
				if ($old_aid == $informant) {
					$db->sql_query("update " . $prefix . "_stories set informant='$chng_aid' where sid='$sid'");
				}
				$db->sql_query("update " . $prefix . "_stories set aid='$chng_aid' WHERE sid='$sid'");
			}
		}
    } else {
	include ('header.php');
	GraphicAdmin();
	OpenTable();
	echo "<center><font class=\"title\"><b>Authors Admin</b></font></center>";
	CloseTable();
	echo "<br>";
	OpenTable();
	echo "<center><b>Not Authorized</b><br><br>"
	    ."Unauthorized editing of authors detected<br><br>"
	    .""._GOBACK."";
	CloseTable();
	include("footer.php");
    }
}

	function deladmin2($del_aid) {
		global $admin, $prefix, $db, $admin_file;
		if (is_admin($admin)) {
		$del_aid = substr("$del_aid", 0,25);
		$result = $db->sql_query("SELECT admins FROM ".$prefix."_modules WHERE title='News'");
		$row2 = $db->sql_fetchrow($db->sql_query("SELECT name FROM ".$prefix."_authors WHERE aid='$del_aid'"));
		while ($row = $db->sql_fetchrow($result)) {
			$admins = explode(",", $row['admins']);
			$auth_user = 0;
			for ($i=0; $i < sizeof($admins); $i++) {
				if ($row2['name'] == "$admins[$i]") {
					$auth_user = 1;
				}
			}
			if ($auth_user == 1) {
				$radminarticle = 1;
			}
		}
		if ($radminarticle == 1) {
			$row2 = $db->sql_fetchrow($db->sql_query("SELECT sid from " . $prefix . "_stories where aid='$del_aid'"));
			$sid = intval($row2['sid']);
			if ($sid != "") {
				include("header.php");
				GraphicAdmin();
				OpenTable();
				echo "<center><font class=\"title\"><b>" . _AUTHORSADMIN . "</b></font></center>";
				CloseTable();
				echo "<br>";
				OpenTable();
				echo "<center><font class=\"option\"><b>" . _PUBLISHEDSTORIES . "</b></font><br><br>"
				."" . _SELECTNEWADMIN . ":<br><br>";
				$result3 = $db->sql_query("SELECT aid from " . $prefix . "_authors where aid!='$del_aid'");
				echo "<form action=\"".$admin_file.".php\" method=\"post\"><select name=\"newaid\">";
				while ($row3 = $db->sql_fetchrow($result3)) {
					$oaid = filter($row3['aid'], "nohtml");
					$oaid = substr("$oaid", 0,25);
					echo "<option name=\"newaid\" value=\"$oaid\">$oaid</option>";
				}
				echo "</select><input type=\"hidden\" name=\"del_aid\" value=\"$del_aid\">"
				."<input type=\"hidden\" name=\"op\" value=\"assignstories\">"
				."<input type=\"submit\" value=\"" . _OK . "\">"
				."</form>";
				CloseTable();
				include("footer.php");
				return;
			}
		}
		Header("Location: ".$admin_file.".php?op=deladminconf&del_aid=$del_aid");
    } else {
	include ('header.php');
	GraphicAdmin();
	OpenTable();
	echo "<center><font class=\"title\"><b>Authors Admin</b></font></center>";
	CloseTable();
	echo "<br>";
	OpenTable();
	echo "<center><b>Not Authorized</b><br><br>"
	    ."Unauthorized editing of authors detected<br><br>"
	    .""._GOBACK."";
	CloseTable();
	include("footer.php");
    }
}

	switch ($op) {

		case "mod_authors":
		displayadmins();
		break;

		case "modifyadmin":
		modifyadmin($chng_aid);
		break;

		case "UpdateAuthor":
		updateadmin($chng_aid, $chng_name, $chng_email, $chng_url, $chng_radminsuper, $chng_pwd, $chng_pwd2, $chng_admlanguage, $adm_aid, $auth_modules);
		break;

		case "AddAuthor":
		$add_aid = strtolower(substr("$add_aid", 0,25));
		$add_name = substr("$add_name", 0,25);
		if (!($add_aid && $add_name && $add_email && $add_pwd)) {
			include("header.php");
			GraphicAdmin();
			OpenTable();
			echo "<center><font class=\"title\"><b>" . _AUTHORSADMIN . "</b></font></center>";
			CloseTable();
			echo "<br>";
			OpenTable();
			echo "<center><font class=\"option\"><b>" . _CREATIONERROR . "</b></font><br><br>"
			."" . _COMPLETEFIELDS . "<br><br>"
			."" . _GOBACK . "</center>";
			CloseTable();
			include("footer.php");
			return;
		}
		$add_pwd = md5($add_pwd);
		for ($i=0; $i < sizeof($auth_modules); $i++) {
			$row = $db->sql_fetchrow($db->sql_query("SELECT admins FROM ".$prefix."_modules WHERE mid='".intval($auth_modules[$i])."'"));
			$adm = $row['admins'] . $add_name;
			$db->sql_query("UPDATE ".$prefix."_modules SET admins='$adm,' WHERE mid='".intval($auth_modules[$i])."'");
		}
		$result = $db->sql_query("insert into " . $prefix . "_authors values ('$add_aid', '$add_name', '$add_url', '$add_email', '$add_pwd', '0', '$add_radminsuper', '$add_admlanguage')");
		if (!$result) {
			return;
		}
		Header("Location: ".$admin_file.".php?op=mod_authors");
		break;

		case "deladmin":
		include("header.php");
		$del_aid = trim($del_aid);
		GraphicAdmin();
		OpenTable();
		echo "<center><font class=\"title\"><b>" . _AUTHORSADMIN . "</b></font></center>";
		CloseTable();
		echo "<br>";
		OpenTable();
		echo "<center><font class=\"option\"><b>" . _AUTHORDEL . "</b></font><br><br>"
		."" . _AUTHORDELSURE . " <i>$del_aid</i>?<br><br>";
		echo "[ <a href=\"".$admin_file.".php?op=deladmin2&amp;del_aid=$del_aid\">" . _YES . "</a> | <a href=\"".$admin_file.".php?op=mod_authors\">" . _NO . "</a> ]";
		CloseTable();
		include("footer.php");
		break;

		case "deladmin2":
		deladmin2($del_aid);
		break;

		case "assignstories":
		$del_aid = trim($del_aid);
		$result = $db->sql_query("SELECT sid from " . $prefix . "_stories where aid='$del_aid'");
		while ($row = $db->sql_fetchrow($result)) {
			$sid = intval($row['sid']);
			$db->sql_query("update " . $prefix . "_stories set aid='$newaid', informant='$newaid' where aid='$del_aid'");
			$db->sql_query("update " . $prefix . "_authors set counter=counter+1 where aid='$newaid'");
		}
		Header("Location: ".$admin_file.".php?op=deladminconf&del_aid=$del_aid");
		break;

		case "deladminconf":
		$del_aid = trim($del_aid);
		$db->sql_query("delete from " . $prefix . "_authors where aid='$del_aid' AND name!='God'");
		$result = $db->sql_query("SELECT mid, admins FROM ".$prefix."_modules");
		while ($row = $db->sql_fetchrow($result)) {
			$admins = explode(",", $row['admins']);
			$adm = "";
			for ($a=0; $a < sizeof($admins); $a++) {
				if ($admins[$a] != "$del_aid" AND !empty($admins[$a])) {
					$adm .= "$admins[$a],";
				}
			}
			$db->sql_query("UPDATE ".$prefix."_modules SET admins='$adm' WHERE mid='".intval($row['mid'])."'");
		}
		Header("Location: ".$admin_file.".php?op=mod_authors");
		break;

	}

} else {
	echo "Access Denied";
}

?>