<?
$page = "members.php";
include "header.php";
if($group_info[allow_members] != "1") { exit(); }
if(isset($_POST['task'])) { $task = $_POST['task']; } elseif(isset($_GET['task'])) { $task = $_GET['task']; } else { $task = "main"; }



if($task == "doadd") {
$new_username = $_POST['new_username'];
$result = "";

if(mysql_num_rows(mysql_query("SELECT u_id FROM bhost_users WHERE username='$new_username'")) == 0) { $result = "<h2>$members28</h2>$members1"; }
if(str_replace(" ", "", $new_username) == "") { $result = "<h2>$members28</h2>$members2"; }
if($new_username == $user_info[username]) { $result = "<h2>$members28</h2>$members3"; }
$member_info = mysql_fetch_assoc(mysql_query("SELECT u_id FROM bhost_users WHERE username='$new_username'"));
if(mysql_num_rows(mysql_query("SELECT m_id FROM bhost_members WHERE u_id='$user_info[u_id]' AND member_u_id='$member_info[u_id]'")) != 0) { $result = "<h2>$members28</h2>$members4"; }

if($result == "") {
mysql_query("INSERT INTO bhost_members (u_id, member_u_id) VALUES ('$user_info[u_id]', '$member_info[u_id]')");
$result = "<h2>$members27</h2><b>$new_username</b> $members5";
}

echo $head;
echo "
$result
<br><br>
<form action='members.php' method='POST'>
<input type='submit' class='button' value='$members26'>
</form>
";
echo $foot;
exit();
}







if($task == "add") {
$member_u_id = $_GET['u_id'];
if($member_u_id == "" OR $member_u_id == "$user_info[u_id]") { exit(); }
$newfriend_rows = mysql_num_rows(mysql_query("SELECT * FROM bhost_users WHERE u_id='$member_u_id'"));
$lookfordupe = mysql_num_rows(mysql_query("SELECT * FROM bhost_members WHERE u_id='$user_info[u_id]' AND member_u_id='$member_u_id'"));
if($newfriend_rows != 1 OR $lookfordupe > 0) { exit(); }
mysql_query("INSERT INTO bhost_members (u_id, member_u_id) VALUES ('$user_info[u_id]', '$member_u_id')");
}






if($task == "delete") {
$m_id = $_GET['m_id'];
mysql_query("DELETE FROM bhost_members WHERE u_id='$user_info[u_id]' AND m_id='$m_id'");
}



if($task == "dodelete") {
$members = mysql_query("SELECT m_id FROM bhost_members WHERE u_id='$user_info[u_id]'");

while($member = mysql_fetch_assoc($members)) {
$var = "delete_".$member[m_id];
$delete = $_POST[$var];
if($delete == "yes") {
mysql_query("DELETE FROM bhost_members WHERE u_id='$user_info[u_id]' AND m_id='$member[m_id]'");
}}
}





echo $head;
echo "
<h2>$members6</h2>
$members7
<br><br>

<table cellpadding='0' cellspacing='0'>
<tr>
<form name='addusername' action='members.php' method='POST'>
<td style='padding-left: 20px;'><b>$members8</b>&nbsp;</td>
<td>
<input type='text' name='new_username' class='text'>
<input type='submit' class='sbutton' value='$members9' style='margin-bottom: 2px;'>
<input type='hidden' name='task' value='doadd'>
</td>
</tr>
</table>
</form>


<script language='JavaScript'> 
<!--
var checkboxcount = 1;
function doCheckAll() {
if(checkboxcount == 0) {
with (document.list) {
for (var i=0; i < elements.length; i++) {
if (elements[i].type == 'checkbox') {
elements[i].checked = false;
}}
checkboxcount = checkboxcount + 1;
window.document.list.check.alt='$members11';
}
} else
with (document.list) {
for (var i=0; i < elements.length; i++) {
if (elements[i].type == 'checkbox') {
elements[i].checked = true;
}}
checkboxcount = checkboxcount - 1;
window.document.list.check.alt='$members12';
}}

function changeAlt(imgObj,newAlt){
imgObj.alt = newAlt;
}
// -->
</SCRIPT>
";







// FELLOW FRIENDS
$fellowfriends = mysql_query("SELECT bhost_members.u_id, bhost_members.m_id, bhost_members.member_u_id, bhost_users.username, bhost_users.gender FROM bhost_members LEFT JOIN bhost_users ON bhost_members.u_id=bhost_users.u_id WHERE bhost_members.member_u_id='$user_info[u_id]' ORDER BY bhost_users.username");
$totalfellowfriends = mysql_num_rows($fellowfriends);

$listhtml = "";
$count = 0;
$rows = 0;
while($member = mysql_fetch_assoc($fellowfriends)) {
$count++;
$mut = mysql_num_rows(mysql_query("SELECT * FROM bhost_members WHERE u_id='$user_info[u_id]' AND member_u_id='$member[u_id]'"));
if($mut == 0) {
$rows++;
if($rows % 2) { $c = "2"; } else { $c = "1"; }
if($member[gender] == "Female") { $icon = "../images/user_female.gif"; } elseif($member[gender] == "Male") { $icon = "../images/user_male.gif"; } else { $icon = "../images/user_nogender.gif"; }
$icon = "<a href='".url("profile", "$member[username]")."' target='_blank'><img src='$icon' border='0' style='vertical-align: middle'></a>";
$listhtml .= "
<tr>
<td class='list"."$c"."a' NOWRAP>$icon <a href='".url("profile", "$member[username]")."' target='_blank'>$member[username]</a></td>
<td class='list"."$c"."b' align='right' NOWRAP><a href='".url("index", "$member[username]")."' target='_blank'>$members19</a> <font class='gray'>|</font> <a href='members.php?task=add&u_id=$member[u_id]'>$members24</a></td>
</tr>
";
}
}

$listhtml = "
<table cellpadding='0' cellspacing='0'>
<tr>
<td class='header2' width='280'>$members22 ($rows)</td>
<td class='header' NOWRAP>$members15</td>
</tr>
$listhtml
";

if($rows > 0) {
echo "
<h2>$members22</h2>
$members23
<br><br>
$listhtml
</table>
<br>
";
}











// SHOW FRIENDS
echo "
<h2>$members13 <font class='url'>( <a href='".url("friends", "$user_info[username]")."' target='_blank'>".url("friends", "$user_info[username]")."</a> )</font></h2>
$members25
<br><br>

<form name='list' action='members.php' method='POST'>
<table cellpadding='0' cellspacing='0'>
<tr>
";

// MY FRIENDS
$members = mysql_query("SELECT m_id, member_u_id FROM bhost_members WHERE u_id='$user_info[u_id]'");
$totalmembers = mysql_num_rows($members);


if($totalmembers == "0") {
echo "
<td colspan='3' class='header' NOWRAP>$members13</td>
";
} else {
echo "
<td width='1' class='header2'><a href='javascript:doCheckAll()'><img src='../images/check.gif' id='check' border='0' alt='$members11'></a></td>
<td class='header2' width='200'>$members13 ($totalmembers)</td>
<td class='header2' width='50' align='center'>$members14</td>
<td class='header' width='50'>$members15</td>
";
}

echo "
</tr>
";

if(mysql_num_rows($members) == "0") {
echo "<td colspan='3' class='list'>$members16</td>";
}

$count = 0;
while($member = mysql_fetch_assoc($members)) {
$mut = 0;
$count++;
if($count % 2) { $c = "2"; } else { $c = "1"; }
$member_info = mysql_fetch_assoc(mysql_query("SELECT u_id, username, gender FROM bhost_users WHERE u_id='$member[member_u_id]'"));
$mut = mysql_num_rows(mysql_query("SELECT * FROM bhost_members WHERE u_id='$member_info[u_id]' AND member_u_id='$user_info[u_id]'"));
if($mut > 0) { $mutual = "$members17"; } else { $mutual = "$members18"; }
if($member_info[gender] == "Female") { $icon = "../images/user_female.gif"; } elseif($member_info[gender] == "Male") { $icon = "../images/user_male.gif"; } else { $icon = "../images/user_nogender.gif"; }
$icon = "<a href='".url("profile", "$member_info[username]")."' target='_blank'><img src='$icon' border='0' style='vertical-align: middle'></a>";
echo "
<tr>
<td class='list"."$c"."a' style='padding: 3px;'><input type='checkbox' name='delete_$member[m_id]' value='yes'></td>
<td class='list"."$c"."a' NOWRAP>$icon <a href='".url("profile", "$member_info[username]")."' target='_blank'>$member_info[username]</a></td>
<td class='list"."$c"."a' NOWRAP align='center'>$mutual</td>
<td class='list"."$c"."b' align='right' NOWRAP><a href='".url("index", "$member_info[username]")."' target='_blank'>$members19</a> <font class='gray'>|</font> <a href='members.php?task=delete&m_id=$member[m_id]'>$members20</a></td>
</tr>
";
}

echo "
</table>

<br>
<input type='hidden' name='task' value='dodelete'>
<input type='submit' class='button' value='$members21'>
</form>

<script language='JavaScript'>
<!-- 
appendEvent = function(el, evname, func) {
 if (el.attachEvent) { // IE
   el.attachEvent('on' + evname, func);
 } else if (el.addEventListener) { // Gecko / W3C
   el.addEventListener(evname, func, true);
 } else {
   el['on' + evname] = func;
 }
};
appendEvent(window, 'load', windowonload);

function windowonload() { window.document.addusername.new_username.focus(); } 
// -->
</script>
";






echo $foot;










?>