<?php

if( strtolower($HTTP_GET_VARS['Ajax']) == 'si' && empty($_COOKIE['ajax'])  && defined('ON_INDEX') ) {
	    setcookie('ajax', 1,  0);
		redirect();
}
else if( strtolower($HTTP_GET_VARS['Ajax']) == 'no' && !empty($_COOKIE['ajax']) && defined('ON_INDEX') ) {
	    setcookie('ajax', '', -1);
		redirect();
}
	
if( !defined('AX_DIR') ) {
   define('AX_DIR', './');
	  
   require_once(AX_DIR . "includes/init.php");
}
   
 if( $config['gzip_compress'] ) 
 {
	 $phpver = phpversion();

	 $useragent = (isset($HTTP_SERVER_VARS['HTTP_USER_AGENT'])) ? $HTTP_SERVER_VARS['HTTP_USER_AGENT'] : getenv('HTTP_USER_AGENT');

	 if ( $phpver >= '4.0.4pl1' && ( strstr($useragent,'compatible') || strstr($useragent,'Gecko') ) )
	 {
		if ( extension_loaded('zlib') )
		{
			ob_start('ob_gzhandler');
		}
	 }
	 else if ( $phpver > '4.0' )
	 {
		 if ( strstr($HTTP_SERVER_VARS['HTTP_ACCEPT_ENCODING'], 'gzip') )
		 {
			 if ( extension_loaded('zlib') )
			 {
				 $do_gzip_compress = TRUE;
				 ob_start();
				 ob_implicit_flush(0);

			 	 header('Content-Encoding: gzip');
			 }
		 }
	 } 
 }

 if (!empty($HTTP_SERVER_VARS['SERVER_SOFTWARE']) && strstr($HTTP_SERVER_VARS['SERVER_SOFTWARE'], 'Apache/2'))
 {
	    header ('Cache-Control: no-cache, pre-check=0, post-check=0');
 }
 else
 {
	    header ('Cache-Control: private, pre-check=0, post-check=0, max-age=0');
 }
		
        header ('Expires: 0');
        header ('Pragma: no-cache');
		
        header('Content-Type: text/html; charset=utf-8');
 if($HTTP_GET_VARS['users_online'] == 'true')
 {
             $time_limit = time() - 350;
             $db->set_query("DELETE FROM " . _PREFIX_ . "online WHERE time<" . $time_limit, __LINE__, __FILE__) ;
             $result = $db->set_query("SELECT time FROM " . _PREFIX_ . "online WHERE  ip='" . $user_ip . "'", __LINE__, __FILE__);
		     $query = ($db->num_rows($result) == 0 ) ? "INSERT INTO " . _PREFIX_ . "online (time, ip, user) VALUES ('" . time() . "', '" . $user_ip . "', '" . $user['id'] . "')" : "UPDATE " . _PREFIX_ . "online SET time='" . time() . "', user='" . $user['id'] . "' WHERE ip='" . $user_ip . "'";
		     $db->set_query($query, __LINE__, __FILE__);
		     $db->free_result($result);
		
		     $result = $db->set_query("SELECT e.ip, e.user, u.id, u.username FROM " . _PREFIX_ . "online e, " . _PREFIX_ . "users u WHERE u.id = e.user ORDER BY u.id ASC, e.ip ASC", __LINE__, __FILE__);
		     $guests = $regs = 0;
		 
		     $users_list = '';
		     while($row = $db->fetchrow($result))
		     {
		        if( $row['user'] != 0 )
		        {
		           if($row['id'] != $prev_id)
			       {
		               $users_list .= ( $users_list != '' ) ? ", " . $row['username'] : $row['username'];
				       $regs++;
			       }
			       
				   $prev_id = $row['id'];  
		         }
		         else
		         {
		           if($row['ip'] != $prev_ip)
			       {
		              $guests++;
			       }
			       
				   $prev_ip = $row['ip'];
		         }
		     }
		     $db->free_result($result);
		     
			 $guests = ($guests == 0 && $regs == 0) ? 1 : $guests;
		     $total_users = $guests + $regs;
		
		     if( empty($users_list) )
		     {
		         $users_list = $lang['None'];
		     }

             die(sprintf($lang['Users_online'], $total_users, $guests, $regs, $users_list));
 }
 else if( $HTTP_GET_VARS['show_smilies']  )
 {
	        gen_smilies(true, 50, 5);
 }  
 else if( isset($_REQUEST['deleteItemBox']) || isset($_REQUEST['addItemBox']) )
 {
     $GLOBALS['music']->action_box();
 }

 //
 // Ban control
 //
 preg_match('/(..)(..)(..)(..)/', $user_ip, $user_ip_parts);
 $user_id = ( !$user ) ? 0 : $user['id'];
 $sql = "SELECT ban_ip, ban_userid, ban_email 
	     	FROM " . _PREFIX_ . "banlist 
		    WHERE ban_ip IN ('" . $user_ip_parts[1] . $user_ip_parts[2] . $user_ip_parts[3] . $user_ip_parts[4] . "', '" . $user_ip_parts[1] . $user_ip_parts[2] . $user_ip_parts[3] . "ff', '" . $user_ip_parts[1] . $user_ip_parts[2] . "ffff', '" . $user_ip_parts[1] . "ffffff')
			   OR ban_userid = " . $user_id . " AND ban_userid<>0";
 if ( $user_id != 0 )
 {
	  $sql .= " OR ban_email LIKE '" . str_replace("\'", "''", $user['email']) . "' 
		OR ban_email LIKE '" . substr(str_replace("\'", "''", $user['email']), strpos(str_replace("\'", "''", $user['email']), "@")) . "'";
 }
		
 $result = $db->set_query($sql, __LINE__, __FILE__);

 if ( $ban_info = $db->fetchrow($result) )
 {
	   if ( $ban_info['ban_ip'] || $ban_info['ban_userid'] || $ban_info['ban_email'] )
	   {
           $style->datos_blk = array();
		   info(ERROR, 'You_been_banned');
	   }
 }
  
 if( $config['disable_portal'] && $user['level'] != ADMIN )
 {
     info(INFORMATION, $lang['Portal_disable_explain']);
 }
   
 $ax = preg_replace('/\W/', '', $_GET[AX]);

 if( !empty($ax) ) {
      $result = $db->set_query("SELECT  id, activate, name, content FROM " . _PREFIX_ . "modules WHERE LOWER(name)='" . strtolower($ax) . "'", __LINE__, __FILE__);

      $data = $db->fetchrow($result);
	  
	  $db->free_result($result);
 }
 
 if(empty($ax) || empty($data) ) 
 {
      if( $ax == 'profile' || $ax == 'members' || $ax == 'mps' || $ax == 'karma' || $ax == 'login' )
	  {
	     include(AX_DIR . "includes/" . $ax . ".php");
		
		 $app = new $ax;
	  }
	  else
	  { 
	     $pr_module = ( !empty($user['principal']) && file_exists(AX_DIR . "modules/" . $user['principal'] . "/index.php") ) ? $user['principal'] : $config['principal'];

         include(AX_DIR . "modules/" . $pr_module . "/index.php");
		 if( class_exists($pr_module) )
		 {
			 $app = new $pr_module;
		 }
	  }
 }
 else 
 {
	  if($data['activate'] == ALL || $data['activate'] == USER && !empty($user) || $data['activate'] == ADMIN && $user['level'] == ADMIN)
	  {
	     if( !file_exists(AX_DIR . "modules/" . $data['name'] . "/index.php") && $data['content'] == '') 
		 {
            info(ERROR, $lang['Inactive_module']);
		 }
	     else if( file_exists(AX_DIR . "modules/" . $data['name'] . "/index.php") )
		 {
	        include(AX_DIR . "modules/" . $data['name'] . "/index.php");
			if( class_exists($data['name']) )
			{
			   $app = new $data['name'];
			}
	     }
		 else
		 {
            $link_edit = "<br /><br />" . ( ($user['level'] == ADMIN) ? gen_link("Admin&amp;act=admmod&amp;mode=page&amp;page=" . $data['id'] . "#adminsec", $lang['Edit_page']) : "" );
 		    
			// Dinamic Module
		    if(defined('ON_INDEX')) 
			{
			   $style->asignar_var('MAIN_MODULE', stripslashes($data['content']) . $link_edit);
			} 
			else {
			   echo stripslashes($data['content']) . $link_edit;
			}
		  }
	   }
	   else if((file_exists(AX_DIR . "modules/" . $ax . "/index.php") || $data['content'] != '') && $data['activate'] == USER && empty($user))
	   {
	      info(INFORMATION, sprintf($lang['Only_users'], gen_link('registrar.html', $lang['Here'], 'main', false, true)));
	   }
       else
	   {
          info(ERROR, $lang['Inactive_module']);
	   }
 }  
	
 if( !defined('ON_INDEX') ) { 
        $db->close();
        ob_end();
 }
   
?>