common.inc.php 11292016-0617

<?php
// starts session for all function(s)
session_start();

// connects to users database
function dbConnect(){
    require 'core/config.php';
    try{
        // for users table
        $conn = new pdo("mysql:host=$server_name;dbname=$db_name;", $dbuser, $dbpw);
        $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
        return $conn;

    }   catch(PDOException $e){
        echo 'ERROR', $e->getMessage();
    }
}

// module for users to log in to profile
function checkLogin() {
  // originally header.php

  // if user is logged in
  if(isset($_SESSION['username'])) {
    $username = $_SESSION['username'];

    // run query to get users avatar
    $getAvatar = dbConnect()->prepare("SELECT avatar FROM users WHERE username = :username");
    $getAvatar->bindParam(':username', $username);
    // execute query
    $getAvatar->execute();
    // set each column as row
    $row = $getAvatar->fetch(PDO::FETCH_ASSOC);
    // set $avatar as users set avatar
    $avatar = $row['avatar'];

    // echo avatar, certain nav elements!!
    echo '
    <div class="navbar-right">
       <!-- icons -->
       <img src="http://i.imgur.com/HD6W7XJ.png" class="icon-search" alt="search-icon" />

       <a class="p1" href="#p1">
         <img src="http://i.imgur.com/iHfwTS1.png" class="teamspeak-icon" alt="teamspeak icon" />
       </a>

        <div class="page" id="p1-page">
          <div id="shell">
              <a class="btn-register">X</a>
    ';
                // Don't report any php errors.
                error_reporting(0);

                // load framework files
                require_once("includes/libraries/TeamSpeak3/TeamSpeak3.php");

                // connect to server, authenticate and spawn an object for the virtual server on port xxxx
                $ts3_VirtualServer = TeamSpeak3::factory("serverquery://serverquerylogin:ATJ75oPF@63.251.20.99:14012/?server_port=14010&use_offline_as_virtual=1&no_query_clients=1");

                // build and display HTML treeview using custom image paths (remote icons will be embedded using data URI sheme)
                echo $ts3_VirtualServer->getViewer(new TeamSpeak3_Viewer_Html("includes/images/viewer/", "", "data:image"));

                // Report all php errors again.
                error_reporting(-1);
    echo '
              <a href="ts3server://ts3.heartfx.org/?port=4010&nickname=WebGuest"><button class="btn-connect">Connect</button></a>
          </div>
        </div>
    ';

    // if user doesn't have avatar set:
    if (empty($avatar)) {
      echo '
      <a class="p1" href="#p2">
        <!-- default avatar -->
        <img src="http://i.imgur.com/QFxs0nX.png" class="user_avatar" alt="default avatar" />
      </a>
      ';

    // if user has set an avatar:
    } else {

      echo '
      <a class="p1" href="#p2">
        <!-- set avatar -->
        <img src="includes/uploads/avatars/' .$avatar. '" class="user_avatar" alt="' .$username. ' avatar" />
      </a>
      ';

    }

    echo '
    <div class="page" id="p2-page">
      <div id="shell">
        <a class="btn-register">X</a>

        <div class="top_user_cp">
          <!-- link to $username profile -->
          <a href="#">
            <img src="http://i.imgur.com/sgmU8mb.png" class="member_icon" alt="member icon" />
            <p class="username">' .$username. '</p>
          </a>

          <!-- link to preferences where user can change password, avatar, etc. -->
          <a href="action.php?action=edit_account">
            <img src="http://i.imgur.com/P7gStLu.png" class="preferences" alt="preferences" />
          </a>
        </div>

    ';

        // get id from users table to use in query below
        $sql = "SELECT id, level FROM users WHERE username = :username";
        $get_id_from_user = dbConnect()->prepare($sql);
        $get_id_from_user->bindParam(':username', $username);
        $get_id_from_user->execute();
        $id_from_user = $get_id_from_user->fetchAll();
        foreach($id_from_user as $row) {$id = $row['id'];$level=$row['level'];}

        // get more details about user
        $sql = "SELECT * FROM user_details WHERE id = :id";
        $get_user_details = dbConnect()->prepare($sql);
        $get_user_details->bindParam(':id', $id);
        $get_user_details->execute();
        $user_details = $get_user_details->fetchAll();
        foreach($user_details as $row) {
          $id = $row['id'];
          $first_name = $row['first_name'];
          $last_name = $row['last_name'];
          $birthday = $row['birthday'];
          $steam = $row['steam_profile'];
        }

        // get users level

    echo '
        <p class="welcome_back">Welcome back, ' .$first_name. '</p>
        <a href="action.php?action=edit_account"><p class="edit_profile">edit preferences</p></a>

        <div class="bottom_user_cp">
          <a href="action.php?action=logout">
            <img src="http://image.flaticon.com/icons/svg/25/25376.svg" class="signout_icon" alt="sign out of user account ' .$username. '" />
            <p class="signout">sign out </p>
          </a>
        </div>
      </div>
    </div>

    <!-- closing tag to div.navbar-right -->
    </div>';

  // if user is not logged in ..
    } else {

  // echo sign-up and log-in btns
    echo '
    <div class="navbar-right">
       <!-- sign up / log in buttons -->
       <a href="action.php?action=register_account"><button type="button" class="sign-up">Sign Up</button></a>
       <a href="action.php?action=sign_in"><button type="button" class="log-in">Log In</button></a>

       <!-- icons -->
       <img src="http://i.imgur.com/HD6W7XJ.png" class="icon-search" alt="search-icon" />

       <!--
       <span class="icon-bars-button">
          <span class="icon-bar"></span>
          <span class="icon-bar"></span>
          <span class="icon-bar"></span>
       </span>
       -->

        <a class="p1" href="#p1">
         <!-- teamspeak icon -->
         <img src="http://i.imgur.com/iHfwTS1.png" class="teamspeak-icon" alt="teamspeak icon" />
        </a>

        <div class="page" id="p1-page">
          <div id="shell">
            <a class="btn-register">X</a>
    ';

            error_reporting(0);

            // load framework files
            require_once("includes/libraries/TeamSpeak3/TeamSpeak3.php");

            // connect to server, authenticate and spawn an object for the virtual server on port xxxx
            $ts3_VirtualServer = TeamSpeak3::factory("serverquery://serverquerylogin:ATJ75oPF@63.251.20.99:14012/?server_port=14010&use_offline_as_virtual=1&no_query_clients=1");

            // build and display HTML treeview using custom image paths (remote icons will be embedded using data URI sheme)
            echo $ts3_VirtualServer->getViewer(new TeamSpeak3_Viewer_Html("includes/images/viewer/", "", "data:image"));

    echo '
            <a href="ts3server://ts3.heartfx.org/?port=4010&nickname=WebGuest"><button class="btn-connect">Connect</button></a>
          </div>
        </div>

    </div>
    ';
  }
  // check for errors logging in...
  //checkLoginErrors();
}

// display all header stuff at beginning of page(s)
function showHeader($title) {
  echo '
  <html lang="en">
    <head>
      <meta charset="utf-8">
      <meta http-equiv="X-UA-Compatible" content="IE=edge">
      <meta name="viewport" content="width=device-width, initial-scale=1">
      <meta name="google-signin-client_id" content="618381226281-f3ht6d47jl818rjmr0p3rh3idftoaka7.apps.googleusercontent.com">
      <link rel="stylesheet" href="includes/css.css" type="text/css">
      <link href="https://fonts.googleapis.com/css?family=Roboto:100,300,400,500,700" rel="stylesheet">
      <link href="https://fonts.googleapis.com/css?family=Open+Sans" rel="stylesheet" type="text/css">
      <link href="https://fonts.googleapis.com/css?family=Oxygen:400,300,700" rel="stylesheet" type="text/css">
      <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.1.0/jquery.min.js"></script>
      <script src="includes/js.js"></script>
      <script src="https://www.google.com/recaptcha/api.js"></script>
      <script src="https://apis.google.com/js/platform.js" async defer></script>
      <title>'.$title.'</title>
    </head>

    <body>
    <header>
       <nav>
          <div class="navbar-left">
             <a href="index.php">
                <img src="http://i.imgur.com/IGvg5kM.png" alt="heart[fx] logo" width="100px" />
             </a>
          </div>
  ';

          checkLogin();

  echo '
       <!-- closing tag for nav.navbar -->
       </nav>
    </header>
  ';
}

// display footer of closing tags
function showFooter() {
  echo '
    </body>
  </html>
  ';
}

// display loginModule on login.php page
function loginModule() {
  echo '
  <center>
    <form method="post" class="login_module">
      <input type="text" class="login_module" name="username" placeholder="username*" /><br />
      <input type="password" class="login_module" name="password" placeholder="password*" /><br />

  ';

      // check for login errors...
      checkLoginErrors();

  echo '
      <div class="pull-left">
        <input type="checkbox" name="remember" /><span class="remember_me">remember me</span>
      </div>

      <div class="pull-right">
        <a class="login_module" href="#"><span class="forgot_your_password">forgot your password?</span></a>
      </div>

      <button type="submit" class="btn-login">Log In</button>
    </form>
  </center>
  ';
}

// check loginErrors before
function checkLoginErrors() {
  if (isset( $_SESSION['username'] )){
      $_SESSION["username"] = $_COOKIE["username"];
      redirect('index.php');
  }
  if(isset($_POST['username'], $_POST['password'])){
      $username = $_POST['username'];
      $password = $_POST['password'];
      // $hash = password_hash($password, PASSWORD_DEFAULT);
      $query = dbConnect()->prepare("SELECT password, activated FROM users WHERE username = :username");
      $query->bindParam(':username', $username);
      $query->execute();
      $result = $query->fetch( PDO::FETCH_ASSOC );

      if ( $result == null ) {
          echo "<p class='error'>username invalid</p>";
      } else if ( $result['activated'] != "1" ) {
          echo "<p class='info'>email not verified</p>";
      }

      else {
      $storedHash = $result["password"];
      if (password_verify($password, $storedHash)) {

          if (isset( $_POST['remember'] )) {
              setcookie("username", $username, time()+7889231); // 3 months
          }

          $_SESSION['username'] = $username;
          // notify user login was successful and exit();
          echo "
          <p class='success'>login successful</p>
          <p class='info'>If you are not redirected, try to <a href='index.php'>refresh</a> your page.</p>
          ";
          // after 3 secs... redirect them to homepage where they
          // will then appear logged in!
          redirect("index.php");
          } else {
              echo "<p class='error'>password invalid</p>";
          }
      }
  }
}

// protect pages from users logged in
function protect() {
  // If user is logged in remove user from page
  if(isset($_SESSION['username'])) {
    echo '<p class="error">You are already logged in, no need to be here...</p>';
    exit();
  }
}

// protect pages from users not logged in :?
function protect2() {
  if(!isset($_SESSION['username'])) {
    echo '<p class="info">You are not logged in, you do not need to be here...</p>';
    exit();
  }
}

// check for admin level & display module(s) for admins to post
function adminModules() {

  //protect module from users not logged in
  protect2();

  // variables for query below
  // gets username of user logged in...
  $username = $_SESSION['username'];

  // sets $author to username that is logged in
  $author = $username;

  // gets current date
  $current_date = date('F d, Y');


  // setup query to get get users admin level
  $getAdminLevel = dbConnect()->prepare("SELECT level FROM users WHERE username = :username");
  // sets :username parameter to the $_SESSION username!
  $getAdminLevel->bindParam(':username', $username);
  // Execute the query
  $getAdminLevel->execute();
  // define admin level of user logged in (fetchs level column from user that is logged in & sets it as $adminLevel)
  $adminLevel = $getAdminLevel->fetchColumn();


  // if user is not an admin, exit!
  if ($adminLevel == 0) {
    exit();

  // closes if($adminLevel == 0) statement
  // if user is not level 0 and is admin level, continue...
  } else {

    // display module for admin to create post (level 1 module)
    echo '

      <div class="container-fluid">

        <div class="row">

    <!-- stops echo that inserts div.container-fluid && div.row -->
    ';


          // if admin level == 1 : put in one lg-col-12 row
          // if admin level == 2 : put in two lg-col-6 row
          // if admin level == 3 : put in three lg-col-4 row

          // if user is level 1 admin : put in one lg-col-12 in row
          if($adminLevel == 1) {

          echo '

          <div class="col-lg-12">

          <!-- closes echo tag that inserts div.col-lg-12 into div.row -->
          ';

          // closes if($adminLevel == 1) statement
          }

          // if user is level 2 admin : make col-lg-6
          if($adminLevel == 2) {

          echo '

          <div class="col-lg-6">

          <!-- closes echo tag that inserts div.col-lg-6 into div.row -->
          ';

          // closes if($adminLevel == 2) statement
          }

          // if user is level 3 admin : make col-lg-4
          if($adminLevel == 3) {

          echo '

          <div class="col-lg-4">

          <!-- closes echo tag that inserts div.col-lg-4 into div.row -->
          ';

          // closes if($adminLevel == 3) statement
          }

            ///////////////////////
            // start lines here //
            //                  //
            //                  //
            //                  //
            // start lines here //
            /////////////////////

            echo '

            <!-- heading here -->
            <h3>Admin Level 1 Panel</h3>
            <p>Use this module to create new posts</p>

            <!-- button for minimizing function -->
            <button class="btn btn-default hideshow">show/hide</button>

            <div class="content">

              <form method="post" enctype="multipart/form-data" class="admin_module">

                <input class="input2" type="text" name="title" placeholder="Headline" required /><br />

                <input class="input2" type="text" name="date" value="' .$current_date. '" readonly /><br />
                <input class="input2" type="text" name="author" value="' .$author. '" readonly /><br />

                <div class="input2">

                  <p>Select image to upload:</p>
                  <input style="padding:3px;" type="file" name="image" id="image" />

                <!-- closes div.input2 for upload image "input"-->
                </div>

                <textarea class="ta-summary input2" type="text" name="summary" placeholder="Summary" required></textarea><br />

                <button class="btn btn-default input2" type="submit" name="submit">Submit Post</button>

              <!-- closes form -->
              </form>

            <!-- closes echo that contains heading and form for level 1 module -->
            ';

            // checks to make sure image is valid && checks form for error(s)
            include "includes/uploadPost.php";

            echo '

            <!-- closes div.content -->
            </div>

          <!-- closes div.col-lg-? -->
          </div>

            <!-- closes echo that contains closing tags for div.col-lg-? && div.content -->
            ';









            /*
            THAT IS ALL FOR ADMIN LEVEL 1 PANEL
            */








          // if user is level 2 or greater...
          if($adminLevel > 1) {

            // if user is level 2 : use col-lg-6
            // if user is level 3 : use col-lg-4

            // if user is level 2
            if($adminLevel == 2) {

              // use col-lg-6
              echo '
              <div class="col-lg-6">
              ';

            // closing tag for if($adminLevel == 2) statement
            }

            // if user is level 3
            if($adminLevel == 3) {

              // use col-lg-4
              echo '
              <div class="col-lg-4">
              ';

            // closing tag for if($adminLevel == 3) statement
            }















            // start query to fetch all users that are not admins!
            $fetchNonAdmins = dbConnect()->prepare("SELECT * FROM users WHERE level < 1");
            // execute the query
            $fetchNonAdmins->execute();
            // select all columns from query
            $nonAdmins = $fetchNonAdmins->fetchAll();


            // echo users that aren't admins...
            echo '

            <!-- heading here -->
            <h3>Admin Level 2 Panel</h3>
            <p>Use this module to adjust regular user levels</p>


            <!-- button for minimize action in js.js -->
            <button class="btn btn-default hideshow2">show/hide</button>


            <div class="content2">

              <div class="admin_module">

                <table class="nonAdmins" border="1">

                  <tr>


                    <!-- header on the table to show which column is which -->
                    <td class="table_header">ID</td>
                    <td class="table_header">Username</td>
                    <td class="table_header">Level 1</td>
                    <td class="table_header">Level 2</td>


                  <!-- 1st closing tag for tr -->
                  </tr>

            ';

                // start to fetch users that are not admins
                foreach($nonAdmins as $row) {


                  // display content of table below (each users id, username, etc...)
                  echo '

                  <tr>

                    <!-- displays each users id from database -->
                    <td class="table_content">' .$row['id']. '</td>

                    <!-- displays each users username from database -->
                    <td class="table_content">' .$row['username']. '</td>


                    <td class="table_content">

                      <!-- displays button where it will change X user to level 1 admin level -->
                      <form method="post" class="table_content_form">

                        <button class="btn btn-default" type="submit" name="changeLevel">Change to level 1</button>
                        <input type="hidden" name="user_id" value="' .$row['id']. '" />
                        <input type="hidden" name="user_level" value="1" />

                      <!-- closing tag to form where it will displays button to update users level to "1" -->
                      </form>

                    <!-- closing tag to td that inserts form where button is displayed to update users to level 1 -->
                    </td>


                    <td class="table_content">

                      <form method="post" class="table_content_form">

                        <button class="btn btn-default" type="submit" name="changeLevel">Change to level 2</button>
                        <input type="hidden" name="user_id" value="' .$row['id']. '" />
                        <input type="hidden" name="user_level" value="2" />

                      <!-- closing tag to form -->
                      </form>

                    <!-- closing tag to td that contains button to change user level to 2 -->
                    </td>


                  </tr>

                  <!-- closing tag for echo that displays details of each user that is not an admin -->
                  ';


                // closing tag for foreach($nonAdmins as $row) statement
                }

            echo '

                <!-- closing tag for table -->
                </table>

            <!-- closing tag for echo that inserts closing tag for table -->
            ';


            // if user hits a change level 1/2 button
            if(isset($_POST['changeLevel'])) {


              // set variables for query below
              $userid = $_POST['user_id'];
              $newLevel = $_POST['user_level'];

              // update users new level in database
              $updateLevel = dbConnect()->prepare("UPDATE users SET level = :level WHERE id = :id");
              // bind some parameters
              $updateLevel->bindParam(':level', $newLevel);
              $updateLevel->bindParam(':id', $userid);
              // execute query
              $updateLevel->execute();

              // echo success messsage & redirect??
              echo '<p class="success">user with ID#' .$userid. ' has been updated to level ' .$newLevel. '! <a href="index.php">refresh</a> to update table(s)...</p>';


            // closing tag for if(isset($_POST['changeLevel'])) statement
            }


            echo '

              <!-- closing tag for div.admin_module -->
              </div>

            <!-- closing tag for div.content2 -->
            </div>

              <!-- closing tag for col-lg-> -->
              </div>

            <!-- closing tag for echo to insert closing tag for col-lg-? -->
            ';

          // closing tag for if($adminLevel > 1) statement
          }





          /* DONE WITH ADMIN LEVEL 2 PANEL HERE */
          /* DONE WITH ADMIN LEVEL 2 PANEL HERE */
          /* DONE WITH ADMIN LEVEL 2 PANEL HERE */




          // if users level is greater then 2
          if($adminLevel > 2) {

            echo '

            <div class="col-lg-4">


              <!-- heading here-->
              <h3>Admin Level 3 Panel</h3>
              <p>Use this module to demote admins that are at least level 2</p>


              <!-- button to minimize module -->
              <button class="btn btn-default hideshow3">show/hide</button>


              <div class="content3">

                <div class="admin_module">


                  <!-- content here -->


            ';


                  // setup query to get users that are level 2
                  $getLevel2Admins = dbConnect()->prepare("SELECT * FROM users WHERE LEVEL = 2");
                  $getLevel2Admins->execute();
                  $levelTwoAdmins = $getLevel2Admins->fetchAll();


                  // content below this line!!
                  echo '

                  <!-- this shows the top "titles" for the table -->
                  <table class="nonAdmins" border="1">

                    <tr>

                      <td class="table_header">ID</td>
                      <td class="table_header">Username</td>
                      <td class="table_header">Level 1</td>
                      <td class="table_header">Level 0</td>

                    <!-- closes tr tag -->
                    </tr>

                  <!-- closes echo tag -->
                  ';


                    // for each level 2 user as $row2 variable
                    foreach($levelTwoAdmins as $row2) {

                      echo '

                        <tr>

                          <!-- display each users id next to their name from database -->
                          <td class="table_content">' .$row2['id']. '</td>
                          <!-- display each users username -->
                          <td class="table_content">' .$row2['username']. '</td>


                          <td class="table_content">

                            <form method="post" class="table_content_form">


                              <!-- button that demotes selected users level down to 1 -->
                              <button class="btn btn-default" type="submit" name="demoteLevel">Demote to level 1</button>

                              <input type="hidden" name="user_id2" value="' .$row2['id']. '" />
                              <input type="hidden" name="user_level2" value="1" />


                            <!-- closes form -->
                            </form>

                          <!-- closing tag for td -->
                          </td>


                          <td class="table_content">

                            <form method="post" class="table_content_form">


                              <!-- button that demotes selected user to level 0 -->
                              <button class="btn btn-default" type="submit" name="demoteLevel">Demote to level 0</button>

                              <input type="hidden" name="user_id2" value=" '.$row2['id'].' " />
                              <input type="hidden" name="user_level2" value="0" />


                            <!-- closes form -->
                            </form>

                          <!-- closing td tag -->
                          </td>


                        <!-- closes tr tag that contains details of each user that is level 2 -->
                        </tr>

                      <!-- closes echo tag -->
                      ';

                    // closes foreach($levelTwoAdmins as $row2) statement
                    }


                    // if user hits demote level button
                    if(isset($_POST['demoteLevel'])) {


                      // set variables
                      $userid2 = $_POST['user_id2'];
                      $newLevel2 = $_POST['user_level2'];

                      // setup query to update user in that row to level accordingly
                      $demoteLevel = dbConnect()->prepare("UPDATE users SET level = :level2 WHERE id = :id2");
                      // bind parameters
                      $demoteLevel->bindParam(':id2', $userid2);
                      $demoteLevel->bindParam(':level2', $newLevel2);
                      // execute query
                      $demoteLevel->execute();

                      // echo success message and redirect...
                      echo '<p class="success">user with ID#' .$userid2. ' has been demoted to level ' .$newLevel2. '! <a href="index.php">Refresh</a> to update table...</p>';


                    // closing tag for if(isset($_POST['demoteLevel'])) statement
                    }



                  echo '
                  <!-- closes table -->
                  </table>


                  <!-- closes echo tag that contains content!! -->
                  ';


            echo '


                <!-- closes div.admin_module -->
                </div>

              <!-- closes div.content3 -->
              </div>


            <!-- closes div.col-lg-4 -->
            </div>

            <!-- closing tag for echo that displays admin level 3 panel -->
            ';

          // closing bracket for if($adminLevel > 2) statement
          }


    echo '

        <!-- closes div.row -->
        </div>

      <!-- closes div.container-fluid -->
      </div>

    <!-- closes echo tag that closes div.row && div.container-fluid -->
    ';

  // closes else tag directly below if($adminLevel == 0) statement
  // that determines what to do if user IS ADMIN!
  }


  // closes adminModule function
}

// show posts here...
function showPosts() {

  // run query to get everything from posts table in database.
  $sql = "SELECT * FROM posts";
  $get_posts = dbConnect()->prepare($sql);
  $get_posts->execute();
  $posts = $get_posts->fetchAll();

  // start table here
  echo '
  <table class="posts">
    <tr class="heading">
      <th class="heading">Topic</th>
      <th class="heading">Published</th>
      <th class="heading">Views</th>
      <th class="heading">Author</th>
    </tr>
  ';

    foreach($posts as $row) {

      require 'core/config.php';

      $id = $row['id'];
      $image = $row['image'];
      $title = $row['title'];
      $date = $row['date'];
      $summary = $row['summary'];
      $author = $row['author'];

      $random_integer = rand(514651661,3513216335121);

  echo '
    <tr class="content">
      <th class="posts_topic">
        <img src="' .$posts_images_directory. '/' .$image. '" alt="posts_image" class="posts_image" />
        <p class="posts_title">' .$title. '</p>

        <p class="posts_short_summary">
          <!-- echos only first 200 characters of $summary -->
          ' .substr($summary, 0, 50). '...
        </p>

        <p class="read_more">
          <!-- link to page where it shows entire post. -->
          <a href="post.php?post=' .$id. '&?rand=' .$random_integer. '">read more</a>
        </p>
      </th>

      <th>
        <p class="posts_date">' .$date. '</p>
      </th>

      <th>
        <!-- views -->
        <p class="posts_views">451,251</p>
      </th>

      <th>
        <!-- author -->
        <p class="posts_author">' .$author. '</p>
      </th>
    </tr>
  ';

  // closes foreach $post as $row statement
  }

  echo '
  </table>
  ';

  // closing tag for showPosts() function
}

// function to redirect multiple times on one page
function redirect($url) {
  if (!headers_sent()) {
    header('refresh:3;url='.$url);
    exit;
  } else {
    echo '
    <script type="text/javascript">
      window.setTimeout(function () {
        window.location.href="' .$url. '";
      }, 3000);
    </script>

    <noscript>
      <meta http-equiv="refresh" content="0;url='.$url.'" />
    </noscript>
    '; exit;
  }
}
?>