<?php
/*************************************************************************
    This file is part of SourceBans++

    Copyright © 2014-2016 SourceBans++ Dev Team <https://github.com/sbpp>

    SourceBans++ is licensed under a
    Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Unported License.

    You should have received a copy of the license along with this
    work.  If not, see <http://creativecommons.org/licenses/by-nc-sa/3.0/>.

    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
    THE SOFTWARE.

    This program is based off work covered by the following copyright(s):
        SourceBans 1.4.11
        Copyright © 2007-2014 SourceBans Team - Part of GameConnect
        Licensed under CC BY-NC-SA 3.0
        Page: <http://www.sourcebans.net/> - <http://www.gameconnect.net/>
*************************************************************************/

require_once('xajax.inc.php');
include_once('system-functions.php');
include_once('user-functions.php');
$xajax = new xajax();
//$xajax->debugOn();
$xajax->setRequestURI(XAJAX_REQUEST_URI);
global $userbank;

if(isset($_COOKIE['aid'], $_COOKIE['password']) && $userbank->CheckLogin($_COOKIE['password'], $_COOKIE['aid']))
{
    $xajax->registerFunction("AddMod");
    $xajax->registerFunction("RemoveMod");
    $xajax->registerFunction("AddGroup");
    $xajax->registerFunction("RemoveGroup");
    $xajax->registerFunction("RemoveAdmin");
    $xajax->registerFunction("RemoveSubmission");
    $xajax->registerFunction("RemoveServer");
    $xajax->registerFunction("UpdateGroupPermissions");
    $xajax->registerFunction("UpdateAdminPermissions");
    $xajax->registerFunction("AddAdmin");
    $xajax->registerFunction("SetupEditServer");
    $xajax->registerFunction("AddServerGroupName");
    $xajax->registerFunction("AddServer");
    $xajax->registerFunction("AddBan");
    $xajax->registerFunction("EditGroup");
    $xajax->registerFunction("RemoveProtest");
    $xajax->registerFunction("SendRcon");
    $xajax->registerFunction("EditAdminPerms");
    $xajax->registerFunction("SelTheme");
    $xajax->registerFunction("ApplyTheme");
    $xajax->registerFunction("AddComment");
    $xajax->registerFunction("EditComment");
    $xajax->registerFunction("RemoveComment");
    $xajax->registerFunction("PrepareReban");
    $xajax->registerFunction("ClearCache");
    $xajax->registerFunction("KickPlayer");
    $xajax->registerFunction("PasteBan");
    $xajax->registerFunction("RehashAdmins");
    $xajax->registerFunction("GroupBan");
    $xajax->registerFunction("BanMemberOfGroup");
    $xajax->registerFunction("GetGroups");
    $xajax->registerFunction("BanFriends");
    $xajax->registerFunction("SendMessage");
    $xajax->registerFunction("ViewCommunityProfile");
    $xajax->registerFunction("SetupBan");
    $xajax->registerFunction("CheckPassword");
    $xajax->registerFunction("ChangePassword");
    $xajax->registerFunction("CheckSrvPassword");
    $xajax->registerFunction("ChangeSrvPassword");
    $xajax->registerFunction("ChangeEmail");
    $xajax->registerFunction("CheckVersion");
    $xajax->registerFunction("SendMail");
    $xajax->registerFunction("AddBlock");
    $xajax->registerFunction("PrepareReblock");
    $xajax->registerFunction("PrepareBlockFromBan");
    $xajax->registerFunction("PasteBlock");
}

$xajax->registerFunction("Plogin");
$xajax->registerFunction("ServerHostPlayers");
$xajax->registerFunction("ServerHostProperty");
$xajax->registerFunction("ServerHostPlayers_list");
$xajax->registerFunction("ServerPlayers");
$xajax->registerFunction("LostPassword");
$xajax->registerFunction("RefreshServer");

global $userbank;
$username = $userbank->GetProperty("user");


function Plogin($username, $password, $remember, $redirect, $nopass)
{
    global $userbank;
    $objResponse = new xajaxResponse();
    $q = $GLOBALS['db']->GetRow("SELECT `aid`, `password` FROM `" . DB_PREFIX . "_admins` WHERE `user` = ?", array($username));
    if($q)
        $aid = $q[0];
    if($q && (strlen($q[1]) == 0 || $q[1] == $userbank->encrypt_password('') || $q[1] == $userbank->hash('')) && count($q) != 0)
    {
        $lostpassword_url = SB_WP_URL . '/index.php?p=lostpassword';
        $objResponse->addScript(<<<JS
            ShowBox(
                'Information',
                'You are unable to login because your account have an empty password set.<br />' +
                'Please <a href="$lostpassword_url">restore your password</a> or ask an admin to do that for you.<br />' +
                'Do note that you are required to have a non empty password set event if you sign in through Steam.',
                'blue', '', true
            );
JS
        );
        return $objResponse;
    }

    if (!$q || !$userbank->login($aid, $password, $remember)) {
        if($nopass!=1)
            $objResponse->addScript('ShowBox("Login Failed", "The username or password you supplied was incorrect.<br \> If you have forgotten your password, use the <a href=\"index.php?p=lostpassword\" title=\"Lost password\">Lost Password</a> link.", "red", "", true);');
        return $objResponse;
    } else {
        $objResponse->addScript("$('msg-red').setStyle('display', 'none');");
    }

    if(strstr($redirect, "validation") || empty($redirect))
        $objResponse->addRedirect("?",  0);
    else
        $objResponse->addRedirect("?" . $redirect, 0);
    return $objResponse;
}

function LostPassword($email)
{
    $objResponse = new xajaxResponse();
    $q = $GLOBALS['db']->GetRow("SELECT * FROM `" . DB_PREFIX . "_admins` WHERE `email` = ?", array($email));

    if(!$q[0])
    {
        $objResponse->addScript("ShowBox('Error', 'The email address you supplied is not registered on the system', 'red', '');");
            return $objResponse;
    }
    else {
        $objResponse->addScript("$('msg-red').setStyle('display', 'none');");
    }

    $validation = md5(generate_salt(20).generate_salt(20)).md5(generate_salt(20).generate_salt(20));
    $query = $GLOBALS['db']->Execute("UPDATE `" . DB_PREFIX . "_admins` SET `validate` = ? WHERE `email` = ?", array($validation, $email));
    $message = "";
    $message .= "Hello " . $q['user'] . "\n";
    $message .= "You have requested to have your password reset for your SourceBans account.\n";
    $message .= "To complete this process, please click the following link.\n";
    $message .= "NOTE: If you didnt request this reset, then simply ignore this email.\n\n";

    $message .= "http://" . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'] . "?p=lostpassword&email=". RemoveCode($email) . "&validation=" . $validation;

    $headers = 'From: ' . $GLOBALS['sb-email'] . "\n" .
    'X-Mailer: PHP/' . phpversion();
    $m = mail($email, "SourceBans Password Reset", $message, $headers);

    $objResponse->addScript("ShowBox('Check E-Mail', 'Please check your email inbox (and spam) for a link which will help you reset your password.', 'blue', '');");
    return $objResponse;
}

function CheckSrvPassword($aid, $srv_pass)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    $aid = (int)$aid;
    if(!$userbank->is_logged_in() || $aid != $userbank->GetAid())
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to check ".$userbank->GetProperty('user', $aid)."'s server password, but doesn't have access.");
        return $objResponse;
    }
    $res = $GLOBALS['db']->Execute("SELECT `srv_password` FROM `".DB_PREFIX."_admins` WHERE `aid` = '".$aid."'");
    if($res->fields['srv_password'] != NULL && $res->fields['srv_password'] != $srv_pass)
    {
        $objResponse->addScript("$('scurrent.msg').setStyle('display', 'block');");
        $objResponse->addScript("$('scurrent.msg').setHTML('Incorrect password.');");
        $objResponse->addScript("set_error(1);");

    }
    else
    {
        $objResponse->addScript("$('scurrent.msg').setStyle('display', 'none');");
        $objResponse->addScript("set_error(0);");
    }
    return $objResponse;
}

function ChangeSrvPassword($aid, $srv_pass)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    $aid = (int)$aid;
    if(!$userbank->is_logged_in() || $aid != $userbank->GetAid())
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to change ".$userbank->GetProperty('user', $aid)."'s server password, but doesn't have access.");
        return $objResponse;
    }

    if($srv_pass == "NULL")
        $GLOBALS['db']->Execute("UPDATE `".DB_PREFIX."_admins` SET `srv_password` = NULL WHERE `aid` = '".$aid."'");
    else
        $GLOBALS['db']->Execute("UPDATE `".DB_PREFIX."_admins` SET `srv_password` = ? WHERE `aid` = ?", array($srv_pass, $aid));
    $objResponse->addScript("ShowBox('Server Password changed', 'Your server password has been changed successfully.', 'green', 'index.php?p=account', true);");
    $log = new CSystemLog("m", "Srv Password Changed", "Password changed for admin (".$aid.")");
    return $objResponse;
}

function ChangeEmail($aid, $email, $password)
{
    global $userbank, $username;
    $objResponse = new xajaxResponse();
    $aid = (int)$aid;

    if(!$userbank->is_logged_in() || $aid != $userbank->GetAid())
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to change ".$userbank->GetProperty('user', $aid)."'s email, but doesn't have access.");
        return $objResponse;
    }

    if($userbank->encrypt_password($password) != $userbank->getProperty('password'))
    {
        $objResponse->addScript("$('emailpw.msg').setStyle('display', 'block');");
        $objResponse->addScript("$('emailpw.msg').setHTML('The password you supplied is wrong.');");
        $objResponse->addScript("set_error(1);");
        return $objResponse;
    } else {
        $objResponse->addScript("$('emailpw.msg').setStyle('display', 'none');");
        $objResponse->addScript("set_error(0);");
    }

    if(!check_email($email)) {
        $objResponse->addScript("$('email1.msg').setStyle('display', 'block');");
        $objResponse->addScript("$('email1.msg').setHTML('You must type a valid email address.');");
        $objResponse->addScript("set_error(1);");
        return $objResponse;
    } else {
        $objResponse->addScript("$('email1.msg').setStyle('display', 'none');");
        $objResponse->addScript("set_error(0);");
    }

    $GLOBALS['db']->Execute("UPDATE `".DB_PREFIX."_admins` SET `email` = ? WHERE `aid` = ?", array($email, $aid));
    $objResponse->addScript("ShowBox('E-mail address changed', 'Your E-mail address has been changed successfully.', 'green', 'index.php?p=account', true);");
    $log = new CSystemLog("m", "E-mail Changed", "E-mail changed for admin (".$aid.")");
    return $objResponse;
}

function AddGroup($name, $type, $bitmask, $srvflags)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_ADD_GROUP))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to Add a new group, but doesnt have access.");
        return $objResponse;
    }

    $error = 0;
    $query = $GLOBALS['db']->GetRow("SELECT `gid` FROM `" . DB_PREFIX . "_groups` WHERE `name` = ?", array($name));
    $query2 = $GLOBALS['db']->GetRow("SELECT `id` FROM `" . DB_PREFIX . "_srvgroups` WHERE `name` = ?", array($name));
    if(strlen($name) == 0 || count($query) > 0 || count($query2) > 0)
    {
        if(strlen($name) == 0)
        {
            $objResponse->addScript("$('name.msg').setStyle('display', 'block');");
            $objResponse->addScript("$('name.msg').setHTML('Please enter a name for this group.');");
            $error++;
        }
        else if(strstr($name, ',')) {
            $objResponse->addScript("$('name.msg').setStyle('display', 'block');");
            $objResponse->addScript("$('name.msg').setHTML('You cannot have a comma \',\' in a group name.');");
            $error++;
        }
        else if(count($query) > 0 || count($query2) > 0){
            $objResponse->addScript("$('name.msg').setStyle('display', 'block');");
            $objResponse->addScript("$('name.msg').setHTML('A group is already named \'" . $name . "\'');");
            $error++;
        }
        else {
            $objResponse->addScript("$('name.msg').setStyle('display', 'none');");
            $objResponse->addScript("$('name.msg').setHTML('');");
        }
    }
    if($type == "0")
    {
        $objResponse->addScript("$('type.msg').setStyle('display', 'block');");
        $objResponse->addScript("$('type.msg').setHTML('Please choose a type for the group.');");
        $error++;
    }
    else {
        $objResponse->addScript("$('type.msg').setStyle('display', 'none');");
        $objResponse->addScript("$('type.msg').setHTML('');");
    }
    if($error > 0)
        return $objResponse;

    $query = $GLOBALS['db']->GetRow("SELECT MAX(gid) AS next_gid FROM `" . DB_PREFIX . "_groups`");
    if($type == "1")
    {
        // add the web group
        $query1 = $GLOBALS['db']->Execute("INSERT INTO `" . DB_PREFIX . "_groups` (`gid`, `type`, `name`, `flags`) VALUES (". (int)($query['next_gid']+1) .", '" . (int)$type . "', ?, '" . (int)$bitmask . "')", array($name));
    }
    elseif($type == "2")
    {
        if(strstr($srvflags, "#"))
        {
            $immunity = "0";
            $immunity = substr($srvflags, strpos($srvflags, "#")+1);
            $srvflags = substr($srvflags, 0, strlen($srvflags) - strlen($immunity)-1);
        }
        $immunity = (isset($immunity) && $immunity>0) ? $immunity : 0;
        $add_group = $GLOBALS['db']->Prepare("INSERT INTO ".DB_PREFIX."_srvgroups(immunity,flags,name,groups_immune)
                    VALUES (?,?,?,?)");
        $GLOBALS['db']->Execute($add_group,array($immunity, $srvflags, $name, " "));
    }
    elseif($type == "3")
    {
        // We need to add the server into the table
        $query1 = $GLOBALS['db']->Execute("INSERT INTO `" . DB_PREFIX . "_groups` (`gid`, `type`, `name`, `flags`) VALUES (". ($query['next_gid']+1) .", '3', ?, '0')", array($name));
    }

    $log = new CSystemLog("m", "Group Created", "A new group was created ($name)");
    $objResponse->addScript("ShowBox('Group Created', 'Your group has been successfully created.', 'green', 'index.php?p=admin&c=groups', true);");
    $objResponse->addScript("TabToReload();");
    return $objResponse;
}

function RemoveGroup($gid, $type)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_DELETE_GROUPS))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to remove a group, but doesnt have access.");
        return $objResponse;
    }

    $gid = (int)$gid;


    if($type == "web") {
        $query2 = $GLOBALS['db']->Execute("UPDATE `" . DB_PREFIX . "_admins` SET gid = -1 WHERE gid = $gid");
        $query1 = $GLOBALS['db']->Execute("DELETE FROM `" . DB_PREFIX . "_groups` WHERE gid = $gid");
    }
    else if($type == "server") {
        $query2 = $GLOBALS['db']->Execute("DELETE FROM `" . DB_PREFIX . "_servers_groups` WHERE group_id = $gid");
        $query1 = $GLOBALS['db']->Execute("DELETE FROM `" . DB_PREFIX . "_groups` WHERE gid = $gid");
    }
    else {
        $query2 = $GLOBALS['db']->Execute("UPDATE `" . DB_PREFIX . "_admins` SET srv_group = NULL WHERE srv_group = (SELECT name FROM `" . DB_PREFIX . "_srvgroups` WHERE id = $gid)");
        $query1 = $GLOBALS['db']->Execute("DELETE FROM `" . DB_PREFIX . "_srvgroups` WHERE id = $gid");
        $query0 = $GLOBALS['db']->Execute("DELETE FROM `" . DB_PREFIX . "_srvgroups_overrides` WHERE group_id = $gid");
    }

    if(isset($GLOBALS['config']['config.enableadminrehashing']) && $GLOBALS['config']['config.enableadminrehashing'] == 1)
    {
        // rehash the settings out of the database on all servers
        $serveraccessq = $GLOBALS['db']->GetAll("SELECT sid FROM ".DB_PREFIX."_servers WHERE enabled = 1;");
        $allservers = array();
        foreach($serveraccessq as $access) {
            if(!in_array($access['sid'], $allservers)) {
                $allservers[] = $access['sid'];
            }
        }
        $rehashing = true;
    }

    $objResponse->addScript("SlideUp('gid_$gid');");
    if($query1)
    {
        if(isset($rehashing))
            $objResponse->addScript("ShowRehashBox('".implode(",", $allservers)."', 'Group Deleted', 'The selected group has been deleted from the database', 'green', 'index.php?p=admin&c=groups', true);");
        else
            $objResponse->addScript("ShowBox('Group Deleted', 'The selected group has been deleted from the database', 'green', 'index.php?p=admin&c=groups', true);");
        $log = new CSystemLog("m", "Group Deleted", "Group (" . $gid . ") has been deleted");
    }
    else
        $objResponse->addScript("ShowBox('Error', 'There was a problem deleting the group from the database. Check the logs for more info', 'red', 'index.php?p=admin&c=groups', true);");

    return $objResponse;
}

function RemoveSubmission($sid, $archiv)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_BAN_SUBMISSIONS))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to remove a submission, but doesnt have access.");
        return $objResponse;
    }
    $sid = (int)$sid;
    if($archiv == "1") { // move submission to archiv
        $query1 = $GLOBALS['db']->Execute("UPDATE `" . DB_PREFIX . "_submissions` SET archiv = '1', archivedby = '".$userbank->GetAid()."' WHERE subid = $sid");
        $query = $GLOBALS['db']->GetRow("SELECT count(subid) AS cnt FROM `" . DB_PREFIX . "_submissions` WHERE archiv = '0'");
        $objResponse->addScript("$('subcount').setHTML('" . $query['cnt'] . "');");

        $objResponse->addScript("SlideUp('sid_$sid');");
        $objResponse->addScript("SlideUp('sid_" . $sid . "a');");

        if($query1)
        {
            $objResponse->addScript("ShowBox('Submission Archived', 'The selected submission has been moved to the archive!', 'green', 'index.php?p=admin&c=bans', true);");
            $log = new CSystemLog("m", "Submission Archived", "Submission (" . $sid . ") has been moved to the archive");
        }
        else
            $objResponse->addScript("ShowBox('Error', 'There was a problem moving the submission to the archive. Check the logs for more info', 'red', 'index.php?p=admin&c=bans', true);");
    } else if($archiv == "0") { // delete submission
        $query1 = $GLOBALS['db']->Execute("DELETE FROM `" . DB_PREFIX . "_submissions` WHERE subid = $sid");
        $query2 = $GLOBALS['db']->Execute("DELETE FROM `" . DB_PREFIX . "_demos` WHERE demid = '".$sid."' AND demtype = 'S'");
        $query = $GLOBALS['db']->GetRow("SELECT count(subid) AS cnt FROM `" . DB_PREFIX . "_submissions` WHERE archiv = '1'");
        $objResponse->addScript("$('subcountarchiv').setHTML('" . $query['cnt'] . "');");

        $objResponse->addScript("SlideUp('asid_$sid');");
        $objResponse->addScript("SlideUp('asid_" . $sid . "a');");

        if($query1)
        {
            $objResponse->addScript("ShowBox('Submission Deleted', 'The selected submission has been deleted from the database', 'green', 'index.php?p=admin&c=bans', true);");
            $log = new CSystemLog("m", "Submission Deleted", "Submission (" . $sid . ") has been deleted");
        }
        else
            $objResponse->addScript("ShowBox('Error', 'There was a problem deleting the submission from the database. Check the logs for more info', 'red', 'index.php?p=admin&c=bans', true);");
    } else if($archiv == "2") { // restore the submission
        $query1 = $GLOBALS['db']->Execute("UPDATE `" . DB_PREFIX . "_submissions` SET archiv = '0', archivedby = NULL WHERE subid = $sid");
        $query = $GLOBALS['db']->GetRow("SELECT count(subid) AS cnt FROM `" . DB_PREFIX . "_submissions` WHERE archiv = '0'");
        $objResponse->addScript("$('subcountarchiv').setHTML('" . $query['cnt'] . "');");

        $objResponse->addScript("SlideUp('asid_$sid');");
        $objResponse->addScript("SlideUp('asid_" . $sid . "a');");

        if($query1)
        {
            $objResponse->addScript("ShowBox('Submission Restored', 'The selected submission has been restored from the archive!', 'green', 'index.php?p=admin&c=bans', true);");
            $log = new CSystemLog("m", "Submission Restored", "Submission (" . $sid . ") has been restored from the archive");
        }
        else
            $objResponse->addScript("ShowBox('Error', 'There was a problem restoring the submission from the archive. Check the logs for more info', 'red', 'index.php?p=admin&c=bans', true);");
    }
    return $objResponse;
}

function RemoveProtest($pid, $archiv)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_BAN_PROTESTS))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to remove a protest, but doesnt have access.");
        return $objResponse;
    }
    $pid = (int)$pid;
    if($archiv == '0') { // delete protest
        $query1 = $GLOBALS['db']->Execute("DELETE FROM `" . DB_PREFIX . "_protests` WHERE pid = $pid");
        $query2 = $GLOBALS['db']->Execute("DELETE FROM `" . DB_PREFIX . "_comments` WHERE type = 'P' AND bid = $pid;");
        $query = $GLOBALS['db']->GetRow("SELECT count(pid) AS cnt FROM `" . DB_PREFIX . "_protests` WHERE archiv = '1'");
        $objResponse->addScript("$('protcountarchiv').setHTML('" . $query['cnt'] . "');");
        $objResponse->addScript("SlideUp('apid_$pid');");
        $objResponse->addScript("SlideUp('apid_" . $pid . "a');");

        if($query1)
        {
            $objResponse->addScript("ShowBox('Protest Deleted', 'The selected protest has been deleted from the database', 'green', 'index.php?p=admin&c=bans', true);");
            $log = new CSystemLog("m", "Protest Deleted", "Protest (" . $pid . ") has been deleted");
        }
        else
            $objResponse->addScript("ShowBox('Error', 'There was a problem deleting the protest from the database. Check the logs for more info', 'red', 'index.php?p=admin&c=bans', true);");
    } else if($archiv == '1') { // move protest to archiv
        $query1 = $GLOBALS['db']->Execute("UPDATE `" . DB_PREFIX . "_protests` SET archiv = '1', archivedby = '".$userbank->GetAid()."' WHERE pid = $pid");
        $query = $GLOBALS['db']->GetRow("SELECT count(pid) AS cnt FROM `" . DB_PREFIX . "_protests` WHERE archiv = '0'");
        $objResponse->addScript("$('protcount').setHTML('" . $query['cnt'] . "');");
        $objResponse->addScript("SlideUp('pid_$pid');");
        $objResponse->addScript("SlideUp('pid_" . $pid . "a');");

        if($query1)
        {
            $objResponse->addScript("ShowBox('Protest Archived', 'The selected protest has been moved to the archive.', 'green', 'index.php?p=admin&c=bans', true);");
            $log = new CSystemLog("m", "Protest Archived", "Protest (" . $pid . ") has been moved to the archive.");
        }
        else
            $objResponse->addScript("ShowBox('Error', 'There was a problem moving the protest to the archive. Check the logs for more info', 'red', 'index.php?p=admin&c=bans', true);");
    } else if($archiv == '2') { // restore protest
        $query1 = $GLOBALS['db']->Execute("UPDATE `" . DB_PREFIX . "_protests` SET archiv = '0', archivedby = NULL WHERE pid = $pid");
        $query = $GLOBALS['db']->GetRow("SELECT count(pid) AS cnt FROM `" . DB_PREFIX . "_protests` WHERE archiv = '1'");
        $objResponse->addScript("$('protcountarchiv').setHTML('" . $query['cnt'] . "');");
        $objResponse->addScript("SlideUp('apid_$pid');");
        $objResponse->addScript("SlideUp('apid_" . $pid . "a');");

        if($query1)
        {
            $objResponse->addScript("ShowBox('Protest Restored', 'The selected protest has been restored from the archive.', 'green', 'index.php?p=admin&c=bans', true);");
            $log = new CSystemLog("m", "Protest Deleted", "Protest (" . $pid . ") has been restored from the archive.");
        }
        else
            $objResponse->addScript("ShowBox('Error', 'There was a problem restoring the protest from the archive. Check the logs for more info', 'red', 'index.php?p=admin&c=bans', true);");
    }
    return $objResponse;
}

function RemoveServer($sid)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_DELETE_SERVERS))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to remove a server, but doesnt have access.");
        return $objResponse;
    }
    $sid = (int)$sid;
    $objResponse->addScript("SlideUp('sid_$sid');");
    $servinfo = $GLOBALS['db']->GetRow("SELECT ip, port FROM `" . DB_PREFIX . "_servers` WHERE sid = $sid");
    $query1 = $GLOBALS['db']->Execute("DELETE FROM `" . DB_PREFIX . "_servers` WHERE sid = $sid");
    $query2 = $GLOBALS['db']->Execute("DELETE FROM `" . DB_PREFIX . "_servers_groups` WHERE server_id = $sid");
    $query3 = $GLOBALS['db']->Execute("UPDATE `" . DB_PREFIX . "_admins_servers_groups` SET server_id = -1 WHERE server_id = $sid");

    $query = $GLOBALS['db']->GetRow("SELECT count(sid) AS cnt FROM `" . DB_PREFIX . "_servers`");
    $objResponse->addScript("$('srvcount').setHTML('" . $query['cnt'] . "');");


    if($query1)
    {
        $objResponse->addScript("ShowBox('Server Deleted', 'The selected server has been deleted from the database', 'green', 'index.php?p=admin&c=servers', true);");
        $log = new CSystemLog("m", "Server Deleted", "Server (" . $servinfo['ip'] . ":" . $servinfo['port'] . ") has been deleted");
    }
    else
        $objResponse->addScript("ShowBox('Error', 'There was a problem deleting the server from the database. Check the logs for more info', 'red', 'index.php?p=admin&c=servers', true);");
    return $objResponse;
}

function RemoveMod($mid)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_DELETE_MODS))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to remove a mod, but doesnt have access.");
        return $objResponse;
    }
    $mid = (int)$mid;
    $objResponse->addScript("SlideUp('mid_$mid');");

    $modicon = $GLOBALS['db']->GetRow("SELECT icon, name FROM `" . DB_PREFIX . "_mods` WHERE mid = '" . $mid . "';");
    @unlink(SB_ICONS."/".$modicon['icon']);

    $query1 = $GLOBALS['db']->Execute("DELETE FROM `" . DB_PREFIX . "_mods` WHERE mid = '" . $mid . "'");

    if($query1)
    {
        $objResponse->addScript("ShowBox('MOD Deleted', 'The selected MOD has been deleted from the database', 'green', 'index.php?p=admin&c=mods', true);");
        $log = new CSystemLog("m", "MOD Deleted", "MOD (" . $modicon['name'] . ") has been deleted");
    }
    else
        $objResponse->addScript("ShowBox('Error', 'There was a problem deleting the MOD from the database. Check the logs for more info', 'red', 'index.php?p=admin&c=mods', true);");
    return $objResponse;
}

function RemoveAdmin($aid)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_DELETE_ADMINS))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to remove an admin, but doesnt have access.");
        return $objResponse;
    }
    $aid = (int)$aid;
    $gid = $GLOBALS['db']->GetRow("SELECT gid, authid, extraflags, user FROM `" . DB_PREFIX . "_admins` WHERE aid = $aid");
    if((intval($gid[2]) & ADMIN_OWNER) != 0)
    {
        $objResponse->addAlert("Error: You cannot delete the owner.");
        return $objResponse;
    }

    $delquery = $GLOBALS['db']->Execute(sprintf("DELETE FROM `%s_admins` WHERE aid = %d LIMIT 1", DB_PREFIX, $aid));
    if($delquery) {
        if(isset($GLOBALS['config']['config.enableadminrehashing']) && $GLOBALS['config']['config.enableadminrehashing'] == 1)
        {
            // rehash the admins for the servers where this admin was on
            $serveraccessq = $GLOBALS['db']->GetAll("SELECT s.sid FROM `".DB_PREFIX."_servers` s
                                                LEFT JOIN `".DB_PREFIX."_admins_servers_groups` asg ON asg.admin_id = '".(int)$aid."'
                                                LEFT JOIN `".DB_PREFIX."_servers_groups` sg ON sg.group_id = asg.srv_group_id
                                                WHERE ((asg.server_id != '-1' AND asg.srv_group_id = '-1')
                                                OR (asg.srv_group_id != '-1' AND asg.server_id = '-1'))
                                                AND (s.sid IN(asg.server_id) OR s.sid IN(sg.server_id)) AND s.enabled = 1");
            $allservers = array();
            foreach($serveraccessq as $access) {
                if(!in_array($access['sid'], $allservers)) {
                    $allservers[] = $access['sid'];
                }
            }
            $rehashing = true;
        }

        $GLOBALS['db']->Execute(sprintf("DELETE FROM `%s_admins_servers_groups` WHERE admin_id = %d", DB_PREFIX, $aid));
    }

    $query = $GLOBALS['db']->GetRow("SELECT count(aid) AS cnt FROM `" . DB_PREFIX . "_admins`");
    $objResponse->addScript("SlideUp('aid_$aid');");
    $objResponse->addScript("$('admincount').setHTML('" . $query['cnt'] . "');");
    if($delquery)
    {
        if(isset($rehashing))
            $objResponse->addScript("ShowRehashBox('".implode(",", $allservers)."', 'Admin Deleted', 'The selected admin has been deleted from the database', 'green', 'index.php?p=admin&c=admins', true);");
        else
            $objResponse->addScript("ShowBox('Admin Deleted', 'The selected admin has been deleted from the database', 'green', 'index.php?p=admin&c=admins', true);");
        $log = new CSystemLog("m", "Admin Deleted", "Admin (" . $gid['user'] . ") has been deleted");
    }
    else
        $objResponse->addScript("ShowBox('Error', 'There was an error removing the admin from the database, please check the logs', 'red', 'index.php?p=admin&c=admins', true);");
    return $objResponse;
}

function AddServer($ip, $port, $rcon, $rcon2, $mod, $enabled, $group, $group_name)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_ADD_SERVER))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to add a server, but doesnt have access.");
        return $objResponse;
    }
    $ip = RemoveCode($ip);
    $group_name = RemoveCode($group_name);

    $error = 0;
    // ip
    if((empty($ip)))
    {
        $error++;
        $objResponse->addAssign("address.msg", "innerHTML", "You must type the server address.");
        $objResponse->addScript("$('address.msg').setStyle('display', 'block');");
    }
    else
    {
        $objResponse->addAssign("address.msg", "innerHTML", "");
        if(!validate_ip($ip) && !is_string($ip))
        {
            $error++;
            $objResponse->addAssign("address.msg", "innerHTML", "You must type a valid IP.");
            $objResponse->addScript("$('address.msg').setStyle('display', 'block');");
        }
        else
            $objResponse->addAssign("address.msg", "innerHTML", "");
    }
    // Port
    if((empty($port)))
    {
        $error++;
        $objResponse->addAssign("port.msg", "innerHTML", "You must type the server port.");
        $objResponse->addScript("$('port.msg').setStyle('display', 'block');");
    }
    else
    {
        $objResponse->addAssign("port.msg", "innerHTML", "");
        if(!is_numeric($port))
        {
            $error++;
            $objResponse->addAssign("port.msg", "innerHTML", "You must type a valid port <b>number</b>.");
            $objResponse->addScript("$('port.msg').setStyle('display', 'block');");
        }
        else
        {
            $objResponse->addScript("$('port.msg').setStyle('display', 'none');");
            $objResponse->addAssign("port.msg", "innerHTML", "");
        }
    }
    // rcon
    if(!empty($rcon) && $rcon != $rcon2)
    {
        $error++;
        $objResponse->addAssign("rcon2.msg", "innerHTML", "The passwords don't match.");
        $objResponse->addScript("$('rcon2.msg').setStyle('display', 'block');");
    }
    else
        $objResponse->addAssign("rcon2.msg", "innerHTML", "");

    // Please Select
    if($mod == -2)
    {
        $error++;
        $objResponse->addAssign("mod.msg", "innerHTML", "You must select the mod your server runs.");
        $objResponse->addScript("$('mod.msg').setStyle('display', 'block');");
    }
    else
        $objResponse->addAssign("mod.msg", "innerHTML", "");

    if($group == -2)
    {
        $error++;
        $objResponse->addAssign("group.msg", "innerHTML", "You must select an option.");
        $objResponse->addScript("$('group.msg').setStyle('display', 'block');");
    }
    else
        $objResponse->addAssign("group.msg", "innerHTML", "");

    if($error)
        return $objResponse;

    // Check for dublicates afterwards
    $chk = $GLOBALS['db']->GetRow('SELECT sid FROM `'.DB_PREFIX.'_servers` WHERE ip = ? AND port = ?;', array($ip, (int)$port));
    if($chk)
    {
        $objResponse->addScript("ShowBox('Error', 'There already is a server with that IP:Port combination.', 'red');");
        return $objResponse;
    }

    // ##############################################################
    // ##                     Start adding to DB                   ##
    // ##############################################################
    //they wanna make a new group
    $gid = -1;
    $sid = nextSid();

    $enable = ($enabled=="true"?1:0);

    // Add the server
    $addserver = $GLOBALS['db']->Prepare("INSERT INTO ".DB_PREFIX."_servers (`sid`, `ip`, `port`, `rcon`, `modid`, `enabled`)
                                          VALUES (?,?,?,?,?,?)");
    $GLOBALS['db']->Execute($addserver,array($sid, $ip, (int)$port, $rcon, $mod, $enable));

    // Add server to each group specified
    $groups = explode(",", $group);
    $addtogrp = $GLOBALS['db']->Prepare("INSERT INTO ".DB_PREFIX."_servers_groups (`server_id`, `group_id`) VALUES (?,?)");
    foreach($groups AS $g)
    {
        if($g)
            $GLOBALS['db']->Execute($addtogrp,array($sid, $g));
    }


    $objResponse->addScript("ShowBox('Server Added', 'Your server has been successfully created.', 'green', 'index.php?p=admin&c=servers');");
    $objResponse->addScript("TabToReload();");
    $log = new CSystemLog("m", "Server Added", "Server (" . $ip . ":" . $port . ") has been added");
    return $objResponse;
}


function UpdateGroupPermissions($gid)
{
    $objResponse = new xajaxResponse();
    global $userbank;
    $gid = (int)$gid;
    if($gid == 1)
    {
        $permissions = @file_get_contents(TEMPLATES_PATH . "/groups.web.perm.php");
        $permissions = str_replace("{title}", "Web Admin Permissions", $permissions);
    }
    elseif($gid == 2)
    {
        $permissions = @file_get_contents(TEMPLATES_PATH . "/groups.server.perm.php");
        $permissions = str_replace("{title}", "Server Admin Permissions", $permissions);
    }
    elseif($gid == 3)
        $permissions = "";

    $objResponse->addAssign("perms", "innerHTML", $permissions);
    if(!$userbank->HasAccess(ADMIN_OWNER))
        $objResponse->addScript('if($("wrootcheckbox")) {
                                    $("wrootcheckbox").setStyle("display", "none");
                                }
                                if($("srootcheckbox")) {
                                    $("srootcheckbox").setStyle("display", "none");
                                }');
    $objResponse->addScript("$('type.msg').setHTML('');");
    $objResponse->addScript("$('type.msg').setStyle('display', 'none');");
    return $objResponse;
}

function UpdateAdminPermissions($type, $value)
{
    $objResponse = new xajaxResponse();
    global $userbank;
    $type = (int)$type;
    if($type == 1)
    {
        $id = "web";
        if($value == "c")
        {
            $permissions = @file_get_contents(TEMPLATES_PATH . "/groups.web.perm.php");
            $permissions = str_replace("{title}", "Web Admin Permissions", $permissions);
        }
        elseif($value == "n")
        {
            $permissions = @file_get_contents(TEMPLATES_PATH . "/group.name.php") . @file_get_contents(TEMPLATES_PATH . "/groups.web.perm.php");
            $permissions = str_replace("{name}", "webname", $permissions);
            $permissions = str_replace("{title}", "New Group Permissions", $permissions);
        }
        else
            $permissions = "";
    }
    if($type == 2)
    {
        $id = "server";
        if($value == "c")
        {
            $permissions = file_get_contents(TEMPLATES_PATH . "/groups.server.perm.php");
            $permissions = str_replace("{title}", "Server Admin Permissions", $permissions);
        }
        elseif($value == "n")
        {
            $permissions = @file_get_contents(TEMPLATES_PATH . "/group.name.php") . @file_get_contents(TEMPLATES_PATH . "/groups.server.perm.php");
            $permissions = str_replace("{name}", "servername", $permissions);
            $permissions = str_replace("{title}", "New Group Permissions", $permissions);
        }
        else
            $permissions = "";
    }

    $objResponse->addAssign($id."perm", "innerHTML", $permissions);
    if(!$userbank->HasAccess(ADMIN_OWNER))
        $objResponse->addScript('if($("wrootcheckbox")) {
                                    $("wrootcheckbox").setStyle("display", "none");
                                }
                                if($("srootcheckbox")) {
                                    $("srootcheckbox").setStyle("display", "none");
                                }');
    $objResponse->addAssign($id.".msg", "innerHTML", "");
    return $objResponse;

}

function AddServerGroupName()
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_EDIT_GROUPS))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to edit group name, but doesnt have access.");
        return $objResponse;
    }
    $inject = '<td valign="top"><div class="rowdesc">' . HelpIcon("Server Group Name", "Please type the name of the new group you wish to create.") . 'Group Name </div></td>';
    $inject .= '<td><div align="left">
        <input type="text" style="border: 1px solid #000000; width: 105px; font-size: 14px; background-color: rgb(215, 215, 215);width: 200px;" id="sgroup" name="sgroup" />
      </div>
        <div id="group_name.msg" style="color:#CC0000;width:195px;display:none;"></div></td>
  ';
    $objResponse->addAssign("nsgroup", "innerHTML", $inject);
    $objResponse->addAssign("group.msg", "innerHTML", "");
    return $objResponse;

}

function AddAdmin($mask, $srv_mask, $a_name, $a_steam, $a_email, $a_password, $a_password2, $a_sg, $a_wg, $a_serverpass, $a_webname, $a_servername, $server, $singlesrv)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_ADD_ADMINS))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to add an admin, but doesnt have access.");
        return $objResponse;
    }
    $a_name = RemoveCode($a_name);
    $a_steam = RemoveCode($a_steam);
    $a_email = RemoveCode($a_email);
    $a_servername = ($a_servername=="0" ? null : RemoveCode($a_servername));
    $a_webname = RemoveCode($a_webname);
    $mask = (int)$mask;

    $error=0;

    //No name
    if(empty($a_name))
    {
        $error++;
        $objResponse->addAssign("name.msg", "innerHTML", "You must type a name for the admin.");
        $objResponse->addScript("$('name.msg').setStyle('display', 'block');");
    }
    else{
        if(strstr($a_name, "'"))
        {
            $error++;
            $objResponse->addAssign("name.msg", "innerHTML", "An admin name can not contain a \" ' \".");
            $objResponse->addScript("$('name.msg').setStyle('display', 'block');");
        }
        else
        {
            if(is_taken("admins", "user", $a_name))
            {
                    $error++;
                    $objResponse->addAssign("name.msg", "innerHTML", "An admin with this name already exists");
                    $objResponse->addScript("$('name.msg').setStyle('display', 'block');");
            }
            else
            {
                    $objResponse->addAssign("name.msg", "innerHTML", "");
                    $objResponse->addScript("$('name.msg').setStyle('display', 'none');");
            }
        }
    }
    // If they didnt type a steamid
    if((empty($a_steam) || strlen($a_steam) < 10))
    {
        $error++;
        $objResponse->addAssign("steam.msg", "innerHTML", "You must type a Steam ID or Community ID for the admin.");
        $objResponse->addScript("$('steam.msg').setStyle('display', 'block');");
    }
    else
    {
        // Validate the steamid or fetch it from the community id
        if((!is_numeric($a_steam)
        && !validate_steam($a_steam))
        || (is_numeric($a_steam)
        && (strlen($a_steam) < 15
        || !validate_steam($a_steam = FriendIDToSteamID($a_steam)))))
        {
            $error++;
            $objResponse->addAssign("steam.msg", "innerHTML", "Please enter a valid Steam ID or Community ID.");
            $objResponse->addScript("$('steam.msg').setStyle('display', 'block');");
        }
        else
        {
            if(is_taken("admins", "authid", $a_steam))
            {
                $admins = $userbank->GetAllAdmins();
                foreach($admins as $admin)
                {
                    if($admin['authid'] == $a_steam)
                    {
                        $name = $admin['user'];
                        break;
                    }
                }
                $error++;
                $objResponse->addAssign("steam.msg", "innerHTML", "Admin ".htmlspecialchars(addslashes($name))." already uses this Steam ID.");
                $objResponse->addScript("$('steam.msg').setStyle('display', 'block');");
            }
            else
            {
                $objResponse->addAssign("steam.msg", "innerHTML", "");
                $objResponse->addScript("$('steam.msg').setStyle('display', 'none');");
            }
        }
    }

    // No email
    if(empty($a_email))
    {
        // An E-Mail address is only required for users with web permissions.
        if($mask != 0)
        {
            $error++;
            $objResponse->addAssign("email.msg", "innerHTML", "You must type an e-mail address.");
            $objResponse->addScript("$('email.msg').setStyle('display', 'block');");
        }
    }
    else{
        // Is an other admin already registred with that email address?
        if(is_taken("admins", "email", $a_email))
        {
            $admins = $userbank->GetAllAdmins();
            foreach($admins as $admin)
            {
                if($admin['email'] == $a_email)
                {
                    $name = $admin['user'];
                    break;
                }
            }
            $error++;
            $objResponse->addAssign("email.msg", "innerHTML", "This email address is already being used by ".htmlspecialchars(addslashes($name)).".");
            $objResponse->addScript("$('email.msg').setStyle('display', 'block');");
        }
        else
        {
            $objResponse->addAssign("email.msg", "innerHTML", "");
            $objResponse->addScript("$('email.msg').setStyle('display', 'none');");
        /*  if(!validate_email($a_email))
            {
                $error++;
                $objResponse->addAssign("email.msg", "innerHTML", "Please enter a valid email address.");
                $objResponse->addScript("$('email.msg').setStyle('display', 'block');");
            }
            else
            {
                $objResponse->addAssign("email.msg", "innerHTML", "");
                $objResponse->addScript("$('email.msg').setStyle('display', 'none');");

            }*/
        }
    }

    // no pass
    if(empty($a_password))
    {
        // A password is only required for users with web permissions.
        if($mask != 0)
        {
            $error++;
            $objResponse->addAssign("password.msg", "innerHTML", "You must type a password.");
            $objResponse->addScript("$('password.msg').setStyle('display', 'block');");
        }
    }
    // Password too short?
    else if(strlen($a_password) < MIN_PASS_LENGTH)
    {
        $error++;
        $objResponse->addAssign("password.msg", "innerHTML", "Your password must be at-least " . MIN_PASS_LENGTH . " characters long.");
        $objResponse->addScript("$('password.msg').setStyle('display', 'block');");
    }
    else
    {
        $objResponse->addAssign("password.msg", "innerHTML", "");
        $objResponse->addScript("$('password.msg').setStyle('display', 'none');");

        // No confirmation typed
        if(empty($a_password2))
        {
            $error++;
            $objResponse->addAssign("password2.msg", "innerHTML", "You must confirm the password");
            $objResponse->addScript("$('password2.msg').setStyle('display', 'block');");
        }
        // Passwords match?
        else if($a_password != $a_password2)
        {
            $error++;
            $objResponse->addAssign("password2.msg", "innerHTML", "Your passwords don't match");
            $objResponse->addScript("$('password2.msg').setStyle('display', 'block');");
        }
        else
        {
            $objResponse->addAssign("password2.msg", "innerHTML", "");
            $objResponse->addScript("$('password2.msg').setStyle('display', 'none');");
        }
    }

    // Choose to use a server password
    if($a_serverpass != "-1")
    {
        // No password given?
        if(empty($a_serverpass))
        {
            $error++;
            $objResponse->addAssign("a_serverpass.msg", "innerHTML", "You must type a server password or uncheck the box.");
            $objResponse->addScript("$('a_serverpass.msg').setStyle('display', 'block');");
        }
        // Password too short?
        else if(strlen($a_serverpass) < MIN_PASS_LENGTH)
        {
            $error++;
            $objResponse->addAssign("a_serverpass.msg", "innerHTML", "Your password must be at-least " . MIN_PASS_LENGTH . " characters long.");
            $objResponse->addScript("$('a_serverpass.msg').setStyle('display', 'block');");
        }
        else
        {
            $objResponse->addAssign("a_serverpass.msg", "innerHTML", "");
            $objResponse->addScript("$('a_serverpass.msg').setStyle('display', 'none');");
        }
    }
    else
    {
        $objResponse->addAssign("a_serverpass.msg", "innerHTML", "");
        $objResponse->addScript("$('a_serverpass.msg').setStyle('display', 'none');");
        // Don't set "-1" as password ;)
        $a_serverpass = "";
    }

    // didn't choose a server group
    if($a_sg == "-2")
    {
        $error++;
        $objResponse->addAssign("server.msg", "innerHTML", "You must choose a group.");
        $objResponse->addScript("$('server.msg').setStyle('display', 'block');");
    }
    else
    {
        $objResponse->addAssign("server.msg", "innerHTML", "");
        $objResponse->addScript("$('server.msg').setStyle('display', 'none');");
    }

    // chose to create a new server group
    if($a_sg == 'n')
    {
        // didn't type a name
        if(empty($a_servername))
        {
            $error++;
            $objResponse->addAssign("servername_err", "innerHTML", "You need to type a name for the new group.");
            $objResponse->addScript("$('servername_err').setStyle('display', 'block');");
        }
        // Group names can't contain ,
        else if(strstr($a_servername, ','))
        {
            $error++;
            $objResponse->addAssign("servername_err", "innerHTML", "Group name cannot contain a ','");
            $objResponse->addScript("$('servername_err').setStyle('display', 'block');");
        }
        else
        {
            $objResponse->addAssign("servername_err", "innerHTML", "");
            $objResponse->addScript("$('servername_err').setStyle('display', 'none');");
        }
    }

    // didn't choose a web group
    if($a_wg == "-2")
    {
        $error++;
        $objResponse->addAssign("web.msg", "innerHTML", "You must choose a group.");
        $objResponse->addScript("$('web.msg').setStyle('display', 'block');");
    }
    else
    {
        $objResponse->addAssign("web.msg", "innerHTML", "");
        $objResponse->addScript("$('web.msg').setStyle('display', 'none');");
    }

    // Choose to create a new webgroup
    if($a_wg == 'n')
    {
        // But didn't type a name
        if(empty($a_webname))
        {
            $error++;
            $objResponse->addAssign("webname_err", "innerHTML", "You need to type a name for the new group.");
            $objResponse->addScript("$('webname_err').setStyle('display', 'block');");
        }
        // Group names can't contain ,
        else if(strstr($a_webname, ','))
        {
            $error++;
            $objResponse->addAssign("webname_err", "innerHTML", "Group name cannot contain a ','");
            $objResponse->addScript("$('webname_err').setStyle('display', 'block');");
        }
        else
        {
            $objResponse->addAssign("webname_err", "innerHTML", "");
            $objResponse->addScript("$('webname_err').setStyle('display', 'none');");
        }
    }

    // Ohnoes! something went wrong, stop and show errs
    if($error)
    {
        ShowBox_ajx("Error", "There are some errors in your input. Please correct them.", "red", "", true, $objResponse);
        return $objResponse;
    }

// ##############################################################
// ##                     Start adding to DB                   ##
// ##############################################################

    $gid = 0;
    $groupID = 0;
    $inGroup = false;
    $wgid = NextAid();
    $immunity = 0;

    // Extract immunity from server mask string
    if(strstr($srv_mask, "#"))
    {
        $immunity = "0";
        $immunity = substr($srv_mask, strpos($srv_mask, "#")+1);
        $srv_mask = substr($srv_mask, 0, strlen($srv_mask) - strlen($immunity)-1);
    }

    // Avoid negative immunity
    $immunity = ($immunity>0) ? $immunity : 0;

    // Handle Webpermissions
    // Chose to create a new webgroup
    if($a_wg == 'n')
    {
        $add_webgroup = $GLOBALS['db']->Execute("INSERT INTO ".DB_PREFIX."_groups(type, name, flags)
                                        VALUES (?,?,?)", array(1, $a_webname, $mask));
        $web_group = (int)$GLOBALS['db']->Insert_ID();

        // We added those permissons to the group, so don't add them as custom permissions again
        $mask = 0;
    }
    // Chose an existing group
    else if($a_wg != 'c' && $a_wg > 0)
    {
        $web_group = (int)$a_wg;
    }
    // Custom permissions -> no group
    else
    {
        $web_group = -1;
    }

    // Handle Serverpermissions
    // Chose to create a new server admin group
    if($a_sg == 'n')
    {
        $add_servergroup = $GLOBALS['db']->Execute("INSERT INTO ".DB_PREFIX."_srvgroups(immunity, flags, name, groups_immune)
                    VALUES (?,?,?,?)", array($immunity, $srv_mask, $a_servername, " "));

        $server_admin_group = $a_servername;
        $server_admin_group_int = (int)$GLOBALS['db']->Insert_ID();

        // We added those permissons to the group, so don't add them as custom permissions again
        $srv_mask = "";
    }
    // Chose an existing group
    else if($a_sg != 'c' && $a_sg > 0)
    {
        $server_admin_group = $GLOBALS['db']->GetOne("SELECT `name` FROM ".DB_PREFIX."_srvgroups WHERE id = '" . (int)$a_sg . "'");
        $server_admin_group_int = (int)$a_sg;
    }
    // Custom permissions -> no group
    else
    {
        $server_admin_group = "";
        $server_admin_group_int = -1;
    }

    // Add the admin
    $aid = $userbank->AddAdmin($a_name, $a_steam, $a_password, $a_email, $web_group, $mask, $server_admin_group, $srv_mask, $immunity, $a_serverpass);

    if($aid > -1)
    {
        // Grant permissions to the selected server groups
        $srv_groups = explode(",", $server);
        $addtosrvgrp = $GLOBALS['db']->Prepare("INSERT INTO ".DB_PREFIX."_admins_servers_groups(admin_id,group_id,srv_group_id,server_id) VALUES (?,?,?,?)");
        foreach($srv_groups AS $srv_group)
        {
            if(!empty($srv_group))
                $GLOBALS['db']->Execute($addtosrvgrp,array($aid, $server_admin_group_int, substr($srv_group, 1), '-1'));
        }

        // Grant permissions to individual servers
        $srv_arr = explode(",", $singlesrv);
        $addtosrv = $GLOBALS['db']->Prepare("INSERT INTO ".DB_PREFIX."_admins_servers_groups(admin_id,group_id,srv_group_id,server_id) VALUES (?,?,?,?)");
        foreach($srv_arr AS $server)
        {
            if(!empty($server))
                $GLOBALS['db']->Execute($addtosrv,array($aid, $server_admin_group_int, '-1', substr($server, 1)));
        }
        if(isset($GLOBALS['config']['config.enableadminrehashing']) && $GLOBALS['config']['config.enableadminrehashing'] == 1)
        {
            // rehash the admins on the servers
            $serveraccessq = $GLOBALS['db']->GetAll("SELECT s.sid FROM `".DB_PREFIX."_servers` s
                                                LEFT JOIN `".DB_PREFIX."_admins_servers_groups` asg ON asg.admin_id = '".(int)$aid."'
                                                LEFT JOIN `".DB_PREFIX."_servers_groups` sg ON sg.group_id = asg.srv_group_id
                                                WHERE ((asg.server_id != '-1' AND asg.srv_group_id = '-1')
                                                OR (asg.srv_group_id != '-1' AND asg.server_id = '-1'))
                                                AND (s.sid IN(asg.server_id) OR s.sid IN(sg.server_id)) AND s.enabled = 1");
            $allservers = array();
            foreach($serveraccessq as $access) {
                if(!in_array($access['sid'], $allservers)) {
                    $allservers[] = $access['sid'];
                }
            }
            $objResponse->addScript("ShowRehashBox('".implode(",", $allservers)."','Admin Added', 'The admin has been added successfully', 'green', 'index.php?p=admin&c=admins');TabToReload();");
        } else
            $objResponse->addScript("ShowBox('Admin Added', 'The admin has been added successfully', 'green', 'index.php?p=admin&c=admins');TabToReload();");

        $log = new CSystemLog("m", "Admin added", "Admin (" . $a_name . ") has been added");
        return $objResponse;
    }
    else
    {
        $objResponse->addScript("ShowBox('User NOT Added', 'The admin failed to be added to the database. Check the logs for any SQL errors.', 'red', 'index.php?p=admin&c=admins');");
    }
}

function ServerHostPlayers($sid, $type="servers", $obId="", $tplsid="", $open="", $inHome=false, $trunchostname=48)
{
    $objResponse = new xajaxResponse();
    global $userbank;
    require INCLUDES_PATH.'/CServerInfo.php';

    $sid = (int)$sid;

    $res = $GLOBALS['db']->GetRow("SELECT sid, ip, port FROM ".DB_PREFIX."_servers WHERE sid = $sid");
    if(empty($res[1]) || empty($res[2]))
        return $objResponse;
    $info = array();
    $sinfo = new CServerInfo($res[1],$res[2]);
    $info = $sinfo->getInfo();
    if($type == "servers")
    {
        if(!empty($info['hostname']))
        {
            $objResponse->addAssign("host_$sid", "innerHTML", trunc($info['hostname'], $trunchostname, false));
            $objResponse->addAssign("players_$sid", "innerHTML", $info['numplayers'] . "/" . $info['maxplayers']);
            $objResponse->addAssign("os_$sid", "innerHTML", "<img src='images/" . (!empty($info['os'])?$info['os']:'server_small') . ".png'>");
            if( $info['secure'] == 1 )
            {
                $objResponse->addAssign("vac_$sid", "innerHTML", "<img src='images/shield.png'>");
            }
            $objResponse->addAssign("map_$sid", "innerHTML", basename($info['map'])); // Strip Steam Workshop folder
            if(!$inHome) {
                $objResponse->addScript("$('mapimg_$sid').setProperty('src', '".GetMapImage($info['map'])."').setProperty('alt', '".$info['map']."').setProperty('title', '".basename($info['map'])."');");
                if($info['numplayers'] == 0 || empty($info['numplayers']))
                {
                    $objResponse->addScript("$('sinfo_$sid').setStyle('display', 'none');");
                    $objResponse->addScript("$('noplayer_$sid').setStyle('display', 'block');");
                    $objResponse->addScript("$('serverwindow_$sid').setStyle('height', '64px');");
                } else {
                    $objResponse->addScript("$('sinfo_$sid').setStyle('display', 'block');");
                    $objResponse->addScript("$('noplayer_$sid').setStyle('display', 'none');");
                    if(!defined('IN_HOME')) {
                        $players = $sinfo->getPlayers();
                        // remove childnodes
                        $objResponse->addScript('var toempty = document.getElementById("playerlist_'.$sid.'");
                        var empty = toempty.cloneNode(false);
                        toempty.parentNode.replaceChild(empty,toempty);');
                        //draw table headlines
                        $objResponse->addScript('var e = document.getElementById("playerlist_'.$sid.'");
                        var tr = e.insertRow("-1");
                            // Name Top TD
                            var td = tr.insertCell("-1");
                                td.setAttribute("width","45%");
                                td.setAttribute("height","16");
                                td.className = "listtable_top";
                                    var b = document.createElement("b");
                                    var txt = document.createTextNode("Name");
                                    b.appendChild(txt);
                                td.appendChild(b);
                            // Score Top TD
                            var td = tr.insertCell("-1");
                                td.setAttribute("width","10%");
                                td.setAttribute("height","16");
                                td.className = "listtable_top";
                                    var b = document.createElement("b");
                                    var txt = document.createTextNode("Score");
                                    b.appendChild(txt);
                                td.appendChild(b);
                            // Time Top TD
                            var td = tr.insertCell("-1");
                                td.setAttribute("height","16");
                                td.className = "listtable_top";
                                    var b = document.createElement("b");
                                    var txt = document.createTextNode("Time");
                                    b.appendChild(txt);
                                td.appendChild(b);');
                        // add players
                        $playercount = 0;
                        foreach($players AS $player) {
                            $objResponse->addScript('var e = document.getElementById("playerlist_'.$sid.'");
                                                    var tr = e.insertRow("-1");
                                                    tr.className="tbl_out";
                                                    tr.onmouseout = function(){this.className="tbl_out"};
                                                    tr.onmouseover = function(){this.className="tbl_hover"};
                                                    tr.id = "player_s'.$sid.'p'.$player["index"].'";
                                                        // Name TD
                                                        var td = tr.insertCell("-1");
                                                            td.className = "listtable_1";
                                                            var txt = document.createTextNode("'.str_replace('"', '\"', $player["name"]).'");
                                                            td.appendChild(txt);
                                                        // Score TD
                                                        var td = tr.insertCell("-1");
                                                            td.className = "listtable_1";
                                                            var txt = document.createTextNode("'.$player["kills"].'");
                                                            td.appendChild(txt);
                                                        // Time TD
                                                        var td = tr.insertCell("-1");
                                                            td.className = "listtable_1";
                                                            var txt = document.createTextNode("'.$player["time"].'");
                                                            td.appendChild(txt);
                                                        ');
                            if($userbank->HasAccess(ADMIN_OWNER|ADMIN_ADD_BAN)) {
                                $objResponse->addScript('AddContextMenu("#player_s'.$sid.'p'.$player["index"].'", "contextmenu", true, "Player Commands", [
                                                        {name: "Kick", callback: function(){KickPlayerConfirm('.$sid.', "'.str_replace('"', '\"', $player["name"]).'", 0);}},
                                                        {name: "Block Comms", callback: function(){window.location = "index.php?p=admin&c=comms&action=pasteBan&sid='.$sid.'&pName='.str_replace('"', '\"', $player["name"]).'"}},
                                                        {name: "Ban", callback: function(){window.location = "index.php?p=admin&c=bans&action=pasteBan&sid='.$sid.'&pName='.str_replace('"', '\"', $player["name"]).'"}},
                                                        {separator: true},
                                                        '.(ini_get('safe_mode')==0 ? '{name: "View Profile", callback: function(){ViewCommunityProfile('.$sid.', "'.str_replace('"', '\"', $player["name"]).'")}},':'').'
                                                        {name: "Send Message", callback: function(){OpenMessageBox('.$sid.', "'.str_replace('"', '\"', $player["name"]).'", 1)}}
                                                        ]);');
                            }
                            $playercount++;
                        }
                    }
                    if($playercount>15)
                        $height = 329 + 16 * ($playercount-15) + 4 * ($playercount-15) . "px";
                    else
                        $height = 329 . "px";
                    $objResponse->addScript("$('serverwindow_$sid').setStyle('height', '".$height."');");
                }
            }
        }else{
            if($userbank->HasAccess(ADMIN_OWNER))
                $objResponse->addAssign("host_$sid", "innerHTML", "<b>Error connecting</b> (<i>" . $res[1] . ":" . $res[2]. "</i>) <small><a href=\"https://sbpp.github.io/faq/\" title=\"Which ports does the SourceBans webpanel require to be open?\">Help</a></small>");
            else
                $objResponse->addAssign("host_$sid", "innerHTML", "<b>Error connecting</b> (<i>" . $res[1] . ":" . $res[2]. "</i>)");
            $objResponse->addAssign("players_$sid", "innerHTML", "N/A");
            $objResponse->addAssign("os_$sid", "innerHTML", "N/A");
            $objResponse->addAssign("vac_$sid", "innerHTML", "N/A");
            $objResponse->addAssign("map_$sid", "innerHTML", "N/A");
            if(!$inHome) {
                $connect = "onclick = \"document.location = 'steam://connect/" .  $res['ip'] . ":" . $res['port'] . "'\"";
                $objResponse->addScript("$('sinfo_$sid').setStyle('display', 'none');");
                $objResponse->addScript("$('noplayer_$sid').setStyle('display', 'block');");
                $objResponse->addScript("$('serverwindow_$sid').setStyle('height', '64px');");
                $objResponse->addScript("if($('sid_$sid'))$('sid_$sid').setStyle('color', '#adadad');");
            }
        }
        if($tplsid != "" && $open != "" && $tplsid==$open)
            $objResponse->addScript("InitAccordion('tr.opener', 'div.opener', 'mainwrapper', '".$open."');");
        $objResponse->addScript("$('dialog-control').setStyle('display', 'block');");
        $objResponse->addScript("$('dialog-placement').setStyle('display', 'none');");
    }
    elseif($type=="id")
    {
        if(!empty($info['hostname']))
        {
            $objResponse->addAssign("$obId", "innerHTML", trunc($info['hostname'], $trunchostname, false));
        }else{
            $objResponse->addAssign("$obId", "innerHTML", "<b>Error connecting</b> (<i>" . $res[1] . ":" . $res[2]. "</i>)");
        }
    }
    else
    {
        if(!empty($info['hostname']))
        {
            $objResponse->addAssign("ban_server_$type", "innerHTML", trunc($info['hostname'], $trunchostname, false));
        }else{
            $objResponse->addAssign("ban_server_$type", "innerHTML", "<b>Error connecting</b> (<i>" . $res[1] . ":" . $res[2]. "</i>)");
        }
    }
    return $objResponse;
}

function ServerHostProperty($sid, $obId, $obProp, $trunchostname)
{
    $objResponse = new xajaxResponse();
    global $userbank;
    require INCLUDES_PATH.'/CServerInfo.php';

    $sid = (int)$sid;
    $obId = htmlspecialchars($obId);
    $obProp = htmlspecialchars($obProp);
    $trunchostname = (int)$trunchostname;

    $res = $GLOBALS['db']->GetRow("SELECT ip, port FROM ".DB_PREFIX."_servers WHERE sid = $sid");
    if(empty($res[0]) || empty($res[1]))
        return $objResponse;
    $info = array();
    $sinfo = new CServerInfo($res[0],$res[1]);
    $info = $sinfo->getInfo();

    if(!empty($info['hostname'])) {
        $objResponse->addAssign("$obId", "$obProp", addslashes(trunc($info['hostname'], $trunchostname, false)));
    } else {
        $objResponse->addAssign("$obId", "$obProp", "Error connecting (" . $res[0] . ":" . $res[1]. ")");
    }
    return $objResponse;
}

function ServerHostPlayers_list($sid, $type="servers", $obId="")
{
    $objResponse = new xajaxResponse();
    require INCLUDES_PATH.'/CServerInfo.php';

    $sids = explode(";", $sid, -1);
    if(count($sids) < 1)
        return $objResponse;

    $ret = "";
    for($i=0;$i<count($sids);$i++)
    {
        $sid = (int)$sids[$i];

        $res = $GLOBALS['db']->GetRow("SELECT sid, ip, port FROM ".DB_PREFIX."_servers WHERE sid = $sid");
        if(empty($res[1]) || empty($res[2]))
            return $objResponse;
        $info = array();
        $sinfo = new CServerInfo($res[1],$res[2]);
        $info = $sinfo->getInfo();

        if(!empty($info['hostname']))
        {
            $ret .= trunc($info['hostname'], 48, false) . "<br />";
        }else{
            $ret .= "<b>Error connecting</b> (<i>" . $res[1] . ":" . $res[2]. "</i>)<br />";
        }
    }

    if($type=="id")
    {
        $objResponse->addAssign("$obId", "innerHTML", $ret);
    }
    else
    {
        $objResponse->addAssign("ban_server_$type", "innerHTML", $ret);
    }

    return $objResponse;
}


function ServerPlayers($sid)
{
    $objResponse = new xajaxResponse();
    require INCLUDES_PATH.'/CServerInfo.php';


    $sid = (int)$sid;

    $res = $GLOBALS['db']->GetRow("SELECT sid, ip, port FROM ".DB_PREFIX."_servers WHERE sid = $sid");
    if(empty($res[1]) || empty($res[2]))
    {
        $objResponse->addAlert('IP or Port not set :o');
        return $objResponse;
    }
    $info = array();
    $sinfo = new CServerInfo($res[1],$res[2]);
    $info = $sinfo->getPlayers();

    $html = "";
    if(empty($info))
        return $objResponse;
    foreach($info AS $player)
    {
        $html .= '<tr> <td class="listtable_1">'.htmlentities($player['name']).'</td>
                        <td class="listtable_1">'.(int)$player['kills'].'</td>
                        <td class="listtable_1">'.$player['time'].'</td>
                  </tr>';
    }
    $objResponse->addAssign("player_detail_$sid", "innerHTML", $html);
    //$objResponse->addScript("document.getElementById('player_detail_$sid').innerHTML = 'hi';");
    $objResponse->addScript("setTimeout('xajax_ServerPlayers($sid)', 5000);");
    $objResponse->addScript("$('opener_$sid').setProperty('onclick', '');");
    return $objResponse;
}

function KickPlayer($sid, $name)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    $sid = (int)$sid;

    $objResponse->addScript("$('dialog-control').setStyle('display', 'block');");

    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_ADD_BAN))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to kick ".htmlspecialchars($name).", but doesn't have access.");
        return $objResponse;
    }

    require INCLUDES_PATH.'/CServerRcon.php';
    //get the server data
    $data = $GLOBALS['db']->GetRow("SELECT ip, port, rcon FROM ".DB_PREFIX."_servers WHERE sid = '".$sid."';");
    if(empty($data['rcon'])) {
        $objResponse->addScript("ShowBox('Error', 'Can\'t kick ".addslashes(htmlspecialchars($name)).". No RCON password!', 'red', '', true);");
        return $objResponse;
    }
    $r = new CServerRcon($data['ip'], $data['port'], $data['rcon']);

    if(!$r->Auth())
    {
        $GLOBALS['db']->Execute("UPDATE ".DB_PREFIX."_servers SET rcon = '' WHERE sid = '".$sid."';");
        $objResponse->addScript("ShowBox('Error', 'Can\'t kick ".addslashes(htmlspecialchars($name)).". Wrong RCON password!', 'red', '', true);");
        return $objResponse;
    }
    // search for the playername
    $ret = $r->rconCommand("status");
    $search = preg_match_all(STATUS_PARSE,$ret,$matches,PREG_PATTERN_ORDER);
    $i = 0;
    $found = false;
    $index = -1;
    foreach($matches[2] AS $match) {
        if($match == $name) {
            $found = true;
            $index = $i;
            break;
        }
        $i++;
    }
    if($found) {
        $steam = $matches[3][$index];
        $steam2 = $steam;
        // Hack to support steam3 [U:1:X] representation.
        if(strpos($steam, "[U:") === 0) {
            $steam2 = renderSteam2(getAccountId($steam), 0);
        }
        // check for immunity
        $admin = $GLOBALS['db']->GetRow("SELECT a.immunity AS pimmune, g.immunity AS gimmune FROM `".DB_PREFIX."_admins` AS a LEFT JOIN `".DB_PREFIX."_srvgroups` AS g ON g.name = a.srv_group WHERE authid = '".$steam2."' LIMIT 1;");
        if($admin && $admin['gimmune']>$admin['pimmune'])
            $immune = $admin['gimmune'];
        elseif($admin)
            $immune = $admin['pimmune'];
        else
            $immune = 0;

        if($immune <= $userbank->GetProperty('srv_immunity')) {
            $requri = substr($_SERVER['REQUEST_URI'], 0, strrpos($_SERVER['REQUEST_URI'], ".php")+4);

            if(strpos($steam, "[U:") === 0) {
                $kick = $r->sendCommand("kickid \"".$steam."\" \"You have been banned by this server, check http://" . $_SERVER['HTTP_HOST'].$requri." for more info.\"");
            } else {
                $kick = $r->sendCommand("kickid ".$steam." \"You have been banned by this server, check http://" . $_SERVER['HTTP_HOST'].$requri." for more info.\"");
            }

            $log = new CSystemLog("m", "Player kicked", $username . " kicked player '".htmlspecialchars($name)."' (".$steam.") from ".$data['ip'].":".$data['port'].".", true, true);
            $objResponse->addScript("ShowBox('Player kicked', 'Player \'".addslashes(htmlspecialchars($name))."\' has been kicked from the server.', 'green', 'index.php?p=servers');");
        } else {
            $objResponse->addScript("ShowBox('Error', 'Can\'t kick ".addslashes(htmlspecialchars($name)).". Player is immune!', 'red', '', true);");
        }
    } else {
        $objResponse->addScript("ShowBox('Error', 'Can\'t kick ".addslashes(htmlspecialchars($name)).". Player not on the server anymore!', 'red', '', true);");
    }
    return $objResponse;
}

function PasteBan($sid, $name, $type=0)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;

    $sid = (int)$sid;
    $type = (int)$type;
    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_ADD_BAN))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried paste a ban, but doesn't have access.");
        return $objResponse;
    }
    require INCLUDES_PATH.'/CServerRcon.php';
    //get the server data
    $data = $GLOBALS['db']->GetRow("SELECT ip, port, rcon FROM ".DB_PREFIX."_servers WHERE sid = ?;", array($sid));
    if(empty($data['rcon'])) {
        $objResponse->addScript("$('dialog-control').setStyle('display', 'block');");
        $objResponse->addScript("ShowBox('Error', 'No RCON password for server ".$data['ip'].":".$data['port']."!', 'red', '', true);");
        return $objResponse;
    }

    $r = new CServerRcon($data['ip'], $data['port'], $data['rcon']);
    if(!$r->Auth())
    {
        $GLOBALS['db']->Execute("UPDATE ".DB_PREFIX."_servers SET rcon = '' WHERE sid = ?;", array($sid));
        $objResponse->addScript("$('dialog-control').setStyle('display', 'block');");
        $objResponse->addScript("ShowBox('Error', 'Wrong RCON password for server ".$data['ip'].":".$data['port']."!', 'red', '', true);");
        return $objResponse;
    }

    $ret = $r->rconCommand("status");
    $search = preg_match_all(STATUS_PARSE,$ret,$matches,PREG_PATTERN_ORDER);
    $i = 0;
    $found = false;
    $index = -1;
    foreach($matches[2] AS $match) {
        if($match == $name) {
            $found = true;
            $index = $i;
            break;
        }
        $i++;
    }
    if($found) {
        $steam = $matches[3][$index];
        // Hack to support steam3 [U:1:X] representation.
        if(strpos($steam, "[U:") === 0) {
            $steam = renderSteam2(getAccountId($steam), 0);
        }
        $name = $matches[2][$index];
        $ip = explode(":", $matches[8][$index]);
        $ip = $ip[0];
        $objResponse->addScript("$('nickname').value = '" . addslashes($name) . "'");
        if($type==1)
            $objResponse->addScript("$('type').options[1].selected = true");
        $objResponse->addScript("$('steam').value = '" . $steam . "'");
        $objResponse->addScript("$('ip').value = '" . $ip . "'");
    } else {
        $objResponse->addScript("ShowBox('Error', 'Can\'t get player info for ".addslashes(htmlspecialchars($name)).". Player is not on the server (".$data['ip'].":".$data['port'].") anymore!', 'red', '', true);");
        $objResponse->addScript("$('dialog-control').setStyle('display', 'block');");
        return $objResponse;
    }
    $objResponse->addScript("SwapPane(0);");
    $objResponse->addScript("$('dialog-control').setStyle('display', 'block');");
    $objResponse->addScript("$('dialog-placement').setStyle('display', 'none');");
    return $objResponse;
}

function AddBan($nickname, $type, $steam, $ip, $length, $dfile, $dname, $reason, $fromsub)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_ADD_BAN))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to add a ban, but doesnt have access.");
        return $objResponse;
    }

    $steam = trim($steam);

    $error = 0;
    // If they didnt type a steamid
    if(empty($steam) && $type == 0)
    {
        $error++;
        $objResponse->addAssign("steam.msg", "innerHTML", "You must type a Steam ID or Community ID");
        $objResponse->addScript("$('steam.msg').setStyle('display', 'block');");
    }
    else if(($type == 0
    && !is_numeric($steam)
    && !validate_steam($steam))
    || (is_numeric($steam)
    && (strlen($steam) < 15
    || !validate_steam($steam = FriendIDToSteamID($steam)))))
    {
        $error++;
        $objResponse->addAssign("steam.msg", "innerHTML", "Please enter a valid Steam ID or Community ID");
        $objResponse->addScript("$('steam.msg').setStyle('display', 'block');");
    }
    else if (empty($ip) && $type == 1)
    {
        $error++;
        $objResponse->addAssign("ip.msg", "innerHTML", "You must type an IP");
        $objResponse->addScript("$('ip.msg').setStyle('display', 'block');");
    }
    else if($type == 1 && !validate_ip($ip))
    {
        $error++;
        $objResponse->addAssign("ip.msg", "innerHTML", "You must type a valid IP");
        $objResponse->addScript("$('ip.msg').setStyle('display', 'block');");
    }
    else
    {
        $objResponse->addAssign("steam.msg", "innerHTML", "");
        $objResponse->addScript("$('steam.msg').setStyle('display', 'none');");
        $objResponse->addAssign("ip.msg", "innerHTML", "");
        $objResponse->addScript("$('ip.msg').setStyle('display', 'none');");
    }

    if($error > 0)
        return $objResponse;

    $nickname = RemoveCode($nickname);
    $ip = preg_replace('#[^\d\.]#', '', $ip);//strip ip of all but numbers and dots
    $dname = RemoveCode($dname);
    $reason = RemoveCode($reason);
    if(!$length)
        $len = 0;
    else
        $len = $length*60;

    // prune any old bans
    PruneBans();
    if((int)$type==0) {
        // Check if the new steamid is already banned
        $chk = $GLOBALS['db']->GetRow("SELECT count(bid) AS count FROM ".DB_PREFIX."_bans WHERE authid = ? AND (length = 0 OR ends > UNIX_TIMESTAMP()) AND RemovedBy IS NULL AND type = '0'", array($steam));

        if(intval($chk[0]) > 0)
        {
            $objResponse->addScript("ShowBox('Error', 'SteamID: $steam is already banned.', 'red', '');");
            return $objResponse;
        }

        // Check if player is immune
        $admchk = $userbank->GetAllAdmins();
        foreach($admchk as $admin)
            if($admin['authid'] == $steam && $userbank->GetProperty('srv_immunity') < $admin['srv_immunity'])
            {
                $objResponse->addScript("ShowBox('Error', 'SteamID: Admin ".$admin['user']." ($steam) is immune.', 'red', '');");
                return $objResponse;
            }
    }
    if((int)$type==1) {
        $chk = $GLOBALS['db']->GetRow("SELECT count(bid) AS count FROM ".DB_PREFIX."_bans WHERE ip = ? AND (length = 0 OR ends > UNIX_TIMESTAMP()) AND RemovedBy IS NULL AND type = '1'", array($ip));

        if(intval($chk[0]) > 0)
        {
            $objResponse->addScript("ShowBox('Error', 'IP: $ip is already banned.', 'red', '');");
            return $objResponse;
        }
    }

    $pre = $GLOBALS['db']->Prepare("INSERT INTO ".DB_PREFIX."_bans(created,type,ip,authid,name,ends,length,reason,aid,adminIp ) VALUES
                                    (UNIX_TIMESTAMP(),?,?,?,?,(UNIX_TIMESTAMP() + ?),?,?,?,?)");
    $GLOBALS['db']->Execute($pre,array($type,
                                       $ip,
                                       $steam,
                                       $nickname,
                                       $length*60,
                                       $len,
                                       $reason,
                                       $userbank->GetAid(),
                                       $_SERVER['REMOTE_ADDR']));
    $subid = $GLOBALS['db']->Insert_ID();

    if($dname && $dfile && preg_match('/^[a-z0-9]*$/i', $dfile))
    //Thanks jsifuentes: http://jacobsifuentes.com/sourcebans-1-4-lfi-exploit/
    //Official Fix: https://code.google.com/p/sourcebans/source/detail?r=165
    {
        $GLOBALS['db']->Execute("INSERT INTO ".DB_PREFIX."_demos(demid,demtype,filename,origname)
                             VALUES(?,'B', ?, ?)", array((int)$subid, $dfile, $dname));
    }
    if($fromsub) {
        $submail = $GLOBALS['db']->Execute("SELECT name, email FROM ".DB_PREFIX."_submissions WHERE subid = '" . (int)$fromsub . "'");
        // Send an email when ban is accepted
        $requri = substr($_SERVER['REQUEST_URI'], 0, strrpos($_SERVER['REQUEST_URI'], ".php")+4);
        $headers = 'From: submission@' . $_SERVER['HTTP_HOST'] . "\n" .
        'X-Mailer: PHP/' . phpversion();

        $message = "Hello,\n";
        $message .= "Your ban submission was accepted by our admins.\nThank you for your support!\nClick the link below to view the current ban list.\n\nhttp://" . $_SERVER['HTTP_HOST'] . $requri . "?p=banlist";

        mail($submail->fields['email'], "[SourceBans] Ban Added", $message, $headers);
        $GLOBALS['db']->Execute("UPDATE `" . DB_PREFIX . "_submissions` SET archiv = '2', archivedby = '".$userbank->GetAid()."' WHERE subid = '" . (int)$fromsub . "'");
    }

    $GLOBALS['db']->Execute("UPDATE `".DB_PREFIX."_submissions` SET archiv = '3', archivedby = '".$userbank->GetAid()."' WHERE SteamId = ?;", array($steam));

    $kickit = isset($GLOBALS['config']['config.enablekickit']) && $GLOBALS['config']['config.enablekickit'] == "1";
    if ($kickit)
        $objResponse->addScript("ShowKickBox('".((int)$type==0?$steam:$ip)."', '".(int)$type."');");
    else
        $objResponse->addScript("ShowBox('Ban Added', 'The ban has been successfully added', 'green', 'index.php?p=admin&c=bans');");

    $objResponse->addScript("TabToReload();");
    $log = new CSystemLog("m", "Ban Added", "Ban against (" . ((int)$type==0?$steam:$ip) . ") has been added, reason: $reason, length: $length", true, $kickit);
    return $objResponse;
}

function SetupBan($subid)
{
    $objResponse = new xajaxResponse();
    $subid = (int)$subid;

    $ban = $GLOBALS['db']->GetRow("SELECT * FROM ".DB_PREFIX."_submissions WHERE subid = $subid");
    $demo = $GLOBALS['db']->GetRow("SELECT * FROM ".DB_PREFIX."_demos WHERE demid = $subid AND demtype = \"S\"");
    // clear any old stuff
    $objResponse->addScript("$('nickname').value = ''");
    $objResponse->addScript("$('fromsub').value = ''");
    $objResponse->addScript("$('steam').value = ''");
    $objResponse->addScript("$('ip').value = ''");
    $objResponse->addScript("$('txtReason').value = ''");
    $objResponse->addAssign("demo.msg", "innerHTML",  "");
    // add new stuff
    $objResponse->addScript("$('nickname').value = '" . $ban['name'] . "'");
    $objResponse->addScript("$('steam').value = '" . $ban['SteamId']. "'");
    $objResponse->addScript("$('ip').value = '" . $ban['sip'] . "'");
    if(trim($ban['SteamId']) == "")
        $type = "1";
    else
        $type = "0";
    $objResponse->addScriptCall("selectLengthTypeReason", "0", $type, addslashes($ban['reason']));

    $objResponse->addScript("$('fromsub').value = '$subid'");
    if($demo)
    {
        $objResponse->addAssign("demo.msg", "innerHTML",  $demo['origname']);
        $objResponse->addScript("demo('" . $demo['filename'] . "', '" . $demo['origname'] . "');");
    }
    $objResponse->addScript("SwapPane(0);");
    return $objResponse;
}

function PrepareReban($bid)
{
    $objResponse = new xajaxResponse();
    $bid = (int)$bid;

    $ban = $GLOBALS['db']->GetRow("SELECT type, ip, authid, name, length, reason FROM ".DB_PREFIX."_bans WHERE bid = '".$bid."';");
    $demo = $GLOBALS['db']->GetRow("SELECT * FROM ".DB_PREFIX."_demos WHERE demid = '".$bid."' AND demtype = \"B\";");
    // clear any old stuff
    $objResponse->addScript("$('nickname').value = ''");
    $objResponse->addScript("$('ip').value = ''");
    $objResponse->addScript("$('fromsub').value = ''");
    $objResponse->addScript("$('steam').value = ''");
    $objResponse->addScript("$('txtReason').value = ''");
    $objResponse->addAssign("demo.msg", "innerHTML",  "");
    $objResponse->addAssign("txtReason", "innerHTML",  "");

    // add new stuff
    $objResponse->addScript("$('nickname').value = '" . $ban['name'] . "'");
    $objResponse->addScript("$('steam').value = '" . $ban['authid']. "'");
    $objResponse->addScript("$('ip').value = '" . $ban['ip']. "'");
    $objResponse->addScriptCall("selectLengthTypeReason", $ban['length'], $ban['type'], addslashes($ban['reason']));

    if($demo)
    {
        $objResponse->addAssign("demo.msg", "innerHTML",  $demo['origname']);
        $objResponse->addScript("demo('" . $demo['filename'] . "', '" . $demo['origname'] . "');");
    }
    $objResponse->addScript("SwapPane(0);");
    return $objResponse;
}

function SetupEditServer($sid)
{
    $objResponse = new xajaxResponse();
    $sid = (int)$sid;
    $server = $GLOBALS['db']->GetRow("SELECT * FROM ".DB_PREFIX."_servers WHERE sid = $sid");

    // clear any old stuff
    $objResponse->addScript("$('address').value = ''");
    $objResponse->addScript("$('port').value = ''");
    $objResponse->addScript("$('rcon').value = ''");
    $objResponse->addScript("$('rcon2').value = ''");
    $objResponse->addScript("$('mod').value = '0'");
    $objResponse->addScript("$('serverg').value = '0'");


    // add new stuff
    $objResponse->addScript("$('address').value = '" . $server['ip']. "'");
    $objResponse->addScript("$('port').value =  '" . $server['port']. "'");
    $objResponse->addScript("$('rcon').value =  '" . $server['rcon']. "'");
    $objResponse->addScript("$('rcon2').value =  '" . $server['rcon']. "'");
    $objResponse->addScript("$('mod').value =  " . $server['modid']);
    $objResponse->addScript("$('serverg').value =  " . $server['gid']);

    $objResponse->addScript("$('insert_type').value =  " . $server['sid']);
    $objResponse->addScript("SwapPane(1);");
    return $objResponse;
}

function CheckPassword($aid, $pass)
{
    $objResponse = new xajaxResponse();
    global $userbank;
    $aid = (int)$aid;
    if(!$userbank->CheckLogin($userbank->encrypt_password($pass), $aid))
    {
        $objResponse->addScript("$('current.msg').setStyle('display', 'block');");
        $objResponse->addScript("$('current.msg').setHTML('Incorrect password.');");
        $objResponse->addScript("set_error(1);");

    }
    else
    {
        $objResponse->addScript("$('current.msg').setStyle('display', 'none');");
        $objResponse->addScript("set_error(0);");
    }
    return $objResponse;
}
function ChangePassword($aid, $pass)
{
    global $userbank;
    $objResponse = new xajaxResponse();
    $aid = (int)$aid;

    if($aid != $userbank->GetAid() && !$userbank->HasAccess(ADMIN_OWNER|ADMIN_EDIT_ADMINS))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $_SERVER["REMOTE_ADDR"] . " tried to change a password that doesn't have permissions.");
        return $objResponse;
    }

    $GLOBALS['db']->Execute("UPDATE `".DB_PREFIX."_admins` SET `password` = '" . $userbank->encrypt_password($pass) . "' WHERE `aid` = $aid");
    $admname = $GLOBALS['db']->GetRow("SELECT user FROM `".DB_PREFIX."_admins` WHERE aid = ?", array((int)$aid));
    $objResponse->addAlert("Password changed successfully");
    $objResponse->addRedirect("index.php?p=login", 0);
    $log = new CSystemLog("m", "Password Changed", "Password changed for admin (".$admname['user'].")");
    return $objResponse;
}

function AddMod($name, $folder, $icon, $steam_universe, $enabled)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_ADD_MODS))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to add a mod, but doesnt have access.");
        return $objResponse;
    }
    $name = htmlspecialchars(strip_tags($name));//don't want to addslashes because execute will automatically do it
    $icon = htmlspecialchars(strip_tags($icon));
    $folder = htmlspecialchars(strip_tags($folder));
    $steam_universe = (int)$steam_universe;
    $enabled = (int)$enabled;

    // Already there?
    $check = $GLOBALS['db']->GetRow("SELECT * FROM `" . DB_PREFIX . "_mods` WHERE modfolder = ? OR name = ?;", array($folder, $name));
    if(!empty($check))
    {
        $objResponse->addScript("ShowBox('Error adding mod', 'A mod using that folder or name already exists.', 'red');");
        return $objResponse;
    }

    $pre = $GLOBALS['db']->Prepare("INSERT INTO ".DB_PREFIX."_mods(name,icon,modfolder,steam_universe,enabled) VALUES (?,?,?,?,?)");
    $GLOBALS['db']->Execute($pre,array($name, $icon, $folder, $steam_universe, $enabled));

    $objResponse->addScript("ShowBox('Mod Added', 'The game mod has been successfully added', 'green', 'index.php?p=admin&c=mods');");
    $objResponse->addScript("TabToReload();");
    $log = new CSystemLog("m", "Mod Added", "Mod ($name) has been added");
    return $objResponse;
}

function EditAdminPerms($aid, $web_flags, $srv_flags)
{
    if(empty($aid))
        return;
    $aid = (int)$aid;
    $web_flags = (int)$web_flags;

    $objResponse = new xajaxResponse();
    global $userbank, $username;
    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_EDIT_ADMINS))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to edit admin permissions, but doesnt have access.");
        return $objResponse;
    }

    if(!$userbank->HasAccess(ADMIN_OWNER) && (int)$web_flags & ADMIN_OWNER )
    {
            $objResponse->redirect("index.php?p=login&m=no_access", 0);
            $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to gain OWNER admin permissions, but doesnt have access.");
            return $objResponse;
    }

    // Users require a password and email to have web permissions
    $password = $GLOBALS['userbank']->GetProperty('password', $aid);
    $email = $GLOBALS['userbank']->GetProperty('email', $aid);
    if($web_flags > 0 && (empty($password) || empty($email)))
    {
        $objResponse->addScript("ShowBox('Error', 'Admins have to have a password and email set in order to get web permissions.<br /><a href=\"index.php?p=admin&c=admins&o=editdetails&id=" . $aid . "\" title=\"Edit Admin Details\">Set the details</a> first and try again.', 'red', '');");
        return $objResponse;
    }

    // Update web stuff
    $GLOBALS['db']->Execute("UPDATE `".DB_PREFIX."_admins` SET `extraflags` = $web_flags WHERE `aid` = $aid");


    if(strstr($srv_flags, "#"))
    {
        $immunity = "0";
        $immunity = substr($srv_flags, strpos($srv_flags, "#")+1);
        $srv_flags = substr($srv_flags, 0, strlen($srv_flags) - strlen($immunity)-1);
    }
    $immunity = ($immunity>0) ? $immunity : 0;
    // Update server stuff
    $GLOBALS['db']->Execute("UPDATE `".DB_PREFIX."_admins` SET `srv_flags` = ?, `immunity` = ? WHERE `aid` = $aid", array($srv_flags, $immunity));

    if(isset($GLOBALS['config']['config.enableadminrehashing']) && $GLOBALS['config']['config.enableadminrehashing'] == 1)
    {
        // rehash the admins on the servers
        $serveraccessq = $GLOBALS['db']->GetAll("SELECT s.sid FROM `".DB_PREFIX."_servers` s
                                                LEFT JOIN `".DB_PREFIX."_admins_servers_groups` asg ON asg.admin_id = '".(int)$aid."'
                                                LEFT JOIN `".DB_PREFIX."_servers_groups` sg ON sg.group_id = asg.srv_group_id
                                                WHERE ((asg.server_id != '-1' AND asg.srv_group_id = '-1')
                                                OR (asg.srv_group_id != '-1' AND asg.server_id = '-1'))
                                                AND (s.sid IN(asg.server_id) OR s.sid IN(sg.server_id)) AND s.enabled = 1");
        $allservers = array();
        foreach($serveraccessq as $access) {
            if(!in_array($access['sid'], $allservers)) {
                $allservers[] = $access['sid'];
            }
        }
        $objResponse->addScript("ShowRehashBox('".implode(",", $allservers)."', 'Permissions updated', 'The user`s permissions have been updated successfully', 'green', 'index.php?p=admin&c=admins');TabToReload();");
    } else
        $objResponse->addScript("ShowBox('Permissions updated', 'The user`s permissions have been updated successfully', 'green', 'index.php?p=admin&c=admins');TabToReload();");
    $admname = $GLOBALS['db']->GetRow("SELECT user FROM `".DB_PREFIX."_admins` WHERE aid = ?", array((int)$aid));
    $log = new CSystemLog("m", "Permissions Changed", "Permissions have been changed for (".$admname['user'].")");
    return $objResponse;
}

function EditGroup($gid, $web_flags, $srv_flags, $type, $name, $overrides, $newOverride)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_EDIT_GROUPS))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to edit group details, but doesnt have access.");
        return $objResponse;
    }

    if(empty($name))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to set group's name to nothing. This isn't possible with the normal form.");
        return $objResponse;
    }

    $gid = (int)$gid;
    $name = RemoveCode($name);
    $web_flags = (int)$web_flags;
    if($type == "web" || $type == "server" )
    // Update web stuff
    $GLOBALS['db']->Execute("UPDATE `".DB_PREFIX."_groups` SET `flags` = ?, `name` = ? WHERE `gid` = $gid", array($web_flags, $name));

    if($type == "srv")
    {
        $gname = $GLOBALS['db']->GetRow("SELECT name FROM ".DB_PREFIX."_srvgroups WHERE id = $gid");

        if(strstr($srv_flags, "#"))
        {
            $immunity = 0;
            $immunity = substr($srv_flags, strpos($srv_flags, "#")+1);
            $srv_flags = substr($srv_flags, 0, strlen($srv_flags) - strlen($immunity)-1);
        }
        $immunity = ($immunity>0) ? $immunity : 0;

        // Update server stuff
        $GLOBALS['db']->Execute("UPDATE `".DB_PREFIX."_srvgroups` SET `flags` = ?, `name` = ?, `immunity` = ? WHERE `id` = $gid", array($srv_flags, $name, $immunity));

        $oldname = $GLOBALS['db']->GetAll("SELECT aid FROM ".DB_PREFIX."_admins WHERE srv_group = ?", array($gname['name']));
        foreach($oldname as $o)
        {
            $GLOBALS['db']->Execute("UPDATE `".DB_PREFIX."_admins` SET `srv_group` = ? WHERE `aid` = '" . (int)$o['aid'] . "'", array($name));
        }

        // Update group overrides
        if(!empty($overrides))
        {
            foreach($overrides as $override)
            {
                // Skip invalid stuff?!
                if($override['type'] != "command" && $override['type'] != "group")
                    continue;

                $id = (int)$override['id'];
                // Wants to delete this override?
                if(empty($override['name']))
                {
                    $GLOBALS['db']->Execute("DELETE FROM `" . DB_PREFIX . "_srvgroups_overrides` WHERE id = ?;", array($id));
                    continue;
                }

                // Check for duplicates
                $chk = $GLOBALS['db']->GetAll("SELECT * FROM `" . DB_PREFIX . "_srvgroups_overrides` WHERE name = ? AND type = ? AND group_id = ? AND id != ?", array($override['name'], $override['type'], $gid, $id));
                if(!empty($chk))
                {
                    $objResponse->addScript("ShowBox('Error', 'There already is an override with name \\\"" . htmlspecialchars(addslashes($override['name'])) . "\\\" from the selected type..', 'red', '', true);");
                    return $objResponse;
                }

                // Edit the override
                $GLOBALS['db']->Execute("UPDATE `" . DB_PREFIX . "_srvgroups_overrides` SET name = ?, type = ?, access = ? WHERE id = ?;", array($override['name'], $override['type'], $override['access'], $id));
            }
        }

        // Add a new override
        if(!empty($newOverride))
        {
            if(($newOverride['type'] == "command" || $newOverride['type'] == "group") && !empty($newOverride['name']))
            {
                // Check for duplicates
                $chk = $GLOBALS['db']->GetAll("SELECT * FROM `" . DB_PREFIX . "_srvgroups_overrides` WHERE name = ? AND type = ? AND group_id = ?", array($newOverride['name'], $newOverride['type'], $gid));
                if(!empty($chk))
                {
                    $objResponse->addScript("ShowBox('Error', 'There already is an override with name \\\"" . htmlspecialchars(addslashes($newOverride['name'])) . "\\\" from the selected type..', 'red', '', true);");
                    return $objResponse;
                }

                // Insert the new override
                $GLOBALS['db']->Execute("INSERT INTO `" . DB_PREFIX . "_srvgroups_overrides` (group_id, type, name, access) VALUES (?, ?, ?, ?);", array($gid, $newOverride['type'], $newOverride['name'], $newOverride['access']));
            }
        }

        if(isset($GLOBALS['config']['config.enableadminrehashing']) && $GLOBALS['config']['config.enableadminrehashing'] == 1)
        {
            // rehash the settings out of the database on all servers
            $serveraccessq = $GLOBALS['db']->GetAll("SELECT sid FROM ".DB_PREFIX."_servers WHERE enabled = 1;");
            $allservers = array();
            foreach($serveraccessq as $access) {
                if(!in_array($access['sid'], $allservers)) {
                    $allservers[] = $access['sid'];
                }
            }
            $objResponse->addScript("ShowRehashBox('".implode(",", $allservers)."', 'Group updated', 'The group has been updated successfully', 'green', 'index.php?p=admin&c=groups');TabToReload();");
        } else
            $objResponse->addScript("ShowBox('Group updated', 'The group has been updated successfully', 'green', 'index.php?p=admin&c=groups');TabToReload();");
        $log = new CSystemLog("m", "Group Updated", "Group ($name) has been updated");
        return $objResponse;
    }

    $objResponse->addScript("ShowBox('Group updated', 'The group has been updated successfully', 'green', 'index.php?p=admin&c=groups');TabToReload();");
    $log = new CSystemLog("m", "Group Updated", "Group ($name) has been updated");
    return $objResponse;
}


function SendRcon($sid, $command, $output)
{
    global $userbank, $username;
    $objResponse = new xajaxResponse();
    if(!$userbank->HasAccess(SM_RCON . SM_ROOT))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to send an rcon command, but doesnt have access.");
        return $objResponse;
    }
    if(empty($command))
    {
        $objResponse->addScript("$('cmd').value=''; $('cmd').disabled='';$('rcon_btn').disabled=''");
        return $objResponse;
    }
    if($command == "clr")
    {
        $objResponse->addAssign("rcon_con", "innerHTML",  "");
        $objResponse->addScript("scroll.toBottom(); $('cmd').value=''; $('cmd').disabled='';$('rcon_btn').disabled=''");
        return $objResponse;
    }

    if(stripos($command, "rcon_password") !== false)
    {
        $objResponse->addAppend("rcon_con", "innerHTML",  "> Error: You have to use this console. Don't try to cheat the rcon password!<br />");
        $objResponse->addScript("scroll.toBottom(); $('cmd').value=''; $('cmd').disabled='';$('rcon_btn').disabled=''");
        return $objResponse;
    }

    $sid = (int)$sid;

    $rcon = $GLOBALS['db']->GetRow("SELECT ip, port, rcon FROM `".DB_PREFIX."_servers` WHERE sid = ".$sid." LIMIT 1");
    if(empty($rcon['rcon']))
    {
        $objResponse->addAppend("rcon_con", "innerHTML",  "> Error: No RCON password!<br />You have to add the RCON password for this server in the 'edit server' <br />page to use this console!<br />");
        $objResponse->addScript("scroll.toBottom(); $('cmd').value='Add RCON password.'; $('cmd').disabled=true; $('rcon_btn').disabled=true");
        return $objResponse;
    }
    if(!$test = @fsockopen($rcon['ip'], $rcon['port'], $errno, $errstr, 2))
    {
        @fclose($test);
        $objResponse->addAppend("rcon_con", "innerHTML",  "> Error: Can't connect to server!<br />");
        $objResponse->addScript("scroll.toBottom(); $('cmd').value=''; $('cmd').disabled='';$('rcon_btn').disabled=''");
        return $objResponse;
    }
    @fclose($test);
    include(INCLUDES_PATH . "/CServerRcon.php");
    $r = new CServerRcon($rcon['ip'], $rcon['port'], $rcon['rcon']);
    if(!$r->Auth())
    {
        $GLOBALS['db']->Execute("UPDATE ".DB_PREFIX."_servers SET rcon = '' WHERE sid = '".$sid."';");
        $objResponse->addAppend("rcon_con", "innerHTML",  "> Error: Wrong RCON password!<br />You MUST change the RCON password for this server in the 'edit server' <br />page. If you continue to use this console with the wrong password, <br />the server will block the connection!<br />");
        $objResponse->addScript("scroll.toBottom(); $('cmd').value='Change RCON password.'; $('cmd').disabled=true; $('rcon_btn').disabled=true");
        return $objResponse;
    }
    $ret = $r->rconCommand($command);


    $ret = str_replace("\n", "<br />", $ret);
    if(empty($ret))
    {
        if($output)
        {
            $objResponse->addAppend("rcon_con", "innerHTML",  "-> $command<br />");
            $objResponse->addAppend("rcon_con", "innerHTML",  "Command Executed.<br />");
        }
    }
    else
    {
        if($output)
        {
            $objResponse->addAppend("rcon_con", "innerHTML",  "-> $command<br />");
            $objResponse->addAppend("rcon_con", "innerHTML",  "$ret<br />");
        }
    }
    $objResponse->addScript("scroll.toBottom(); $('cmd').value=''; $('cmd').disabled=''; $('rcon_btn').disabled=''");
    $log = new CSystemLog("m", "RCON Sent", "RCON Command was sent to server (".$rcon['ip'].":".$rcon['port']."): $command", true, true);
    return $objResponse;
}


function SendMail($subject, $message, $type, $id)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;

    $id = (int)$id;

    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_BAN_PROTESTS|ADMIN_BAN_SUBMISSIONS))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to send an email, but doesnt have access.");
        return $objResponse;
    }

    // Don't mind wrong types
    if($type != 's' && $type != 'p')
    {
        return $objResponse;
    }

    // Submission
    $email = "";
    if($type == 's')
    {
        $email = $GLOBALS['db']->GetOne('SELECT email FROM `'.DB_PREFIX.'_submissions` WHERE subid = ?', array($id));
    }
    // Protest
    else if($type == 'p')
    {
        $email = $GLOBALS['db']->GetOne('SELECT email FROM `'.DB_PREFIX.'_protests` WHERE pid = ?', array($id));
    }

    if(empty($email))
    {
        $objResponse->addScript("ShowBox('Error', 'There is no email to send to supplied.', 'red', 'index.php?p=admin&c=bans');");
        return $objResponse;
    }

    $headers = "From: noreply@" . $_SERVER['HTTP_HOST'] . "\n" . 'X-Mailer: PHP/' . phpversion();
    $m = @mail($email, '[SourceBans] ' . $subject, $message, $headers);


    if($m)
    {
        $objResponse->addScript("ShowBox('Email Sent', 'The email has been sent to the user.', 'green', 'index.php?p=admin&c=bans');");
        $log = new CSystemLog("m", "Email Sent", $username . " send an email to ".htmlspecialchars($email).".<br />Subject: '[SourceBans] " . htmlspecialchars($subject) . "'<br />Message: '" . nl2br(htmlspecialchars($message)) . "'");
    }
    else
        $objResponse->addScript("ShowBox('Error', 'Failed to send the email to the user.', 'red', '');");

    return $objResponse;
}

function CheckVersion()
{
    $objResponse = new xajaxResponse();
    $relver = @file_get_contents("https://sbpp.sarabveer.me/rel/");

    if(defined('SB_GIT'))
        $relgit = @file_get_contents("https://sbpp.sarabveer.me/dev/");

    if(version_compare($relver, SB_VERSION) > 0)
        $versmsg = "<span style='color:#aa0000;'><strong>A new release is available.</strong></span>";
    else
        $versmsg = "<span style='color:#00aa00;'><strong>You have the latest release.</strong></span>";

    $msg = $versmsg;
    if(strlen($relver)>8 || $relver=="") {
        $relver = "<span style='color:#aa0000;'>Error</span>";
        $msg = "<span style='color:#aa0000;'><strong>Error retrieving latest release.</strong></span>";
    }
    $objResponse->addAssign("relver", "innerHTML",  $relver);

    if(defined('SB_GIT'))
    {
        if(intval($relgit) > GetGITRev())
            $svnmsg = "<span style='color:#aa0000;'><strong>A new Dev release is available.</strong></span>";
        else
            $svnmsg = "<span style='color:#00aa00;'><strong>You have the latest Dev release.</strong></span>";

        if(strlen($relgit)>8 || $relgit=="") {
            $relgit = "<span style='color:#aa0000;'>Error</span>";
            $svnmsg = "<span style='color:#aa0000;'><strong>Error retrieving latest Git Commit.</strong></span>";
        }
        $msg .= "<br />" . $svnmsg;
        $objResponse->addAssign("svnrev", "innerHTML",  $relgit);
    }

    $objResponse->addAssign("versionmsg", "innerHTML", $msg);
    return $objResponse;
}

function SelTheme($theme)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_WEB_SETTINGS))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to execute SelTheme() function, but doesnt have access.");
        return $objResponse;
    }

    $theme = rawurldecode($theme);
    $theme = str_replace(array('../', '..\\', chr(0)), '', $theme);
    $theme = basename($theme);

    if($theme[0] == '.' || !in_array($theme, scandir(SB_THEMES)) || !is_dir(SB_THEMES . $theme) || !file_exists(SB_THEMES . $theme . "/theme.conf.php"))
    {
        $objResponse->addAlert('Invalid theme selected.');
        return $objResponse;
    }

    include(SB_THEMES . $theme . "/theme.conf.php");

    if(!defined('theme_screenshot'))
    {
        $objResponse->addAlert('Bad theme selected.');
        return $objResponse;
    }

    $objResponse->addAssign("current-theme-screenshot", "innerHTML", '<img width="250px" height="170px" src="themes/'.$theme.'/'.strip_tags(theme_screenshot).'">');
    $objResponse->addAssign("theme.name", "innerHTML",  theme_name);
    $objResponse->addAssign("theme.auth", "innerHTML",  theme_author);
    $objResponse->addAssign("theme.vers", "innerHTML",  theme_version);
    $objResponse->addAssign("theme.link", "innerHTML",  '<a href="'.theme_link.'" target="_new">'.theme_link.'</a>');
    $objResponse->addAssign("theme.apply", "innerHTML",  "<input type='button' onclick=\"javascript:xajax_ApplyTheme('" .$theme."')\" name='btnapply' class='btn ok' onmouseover='ButtonOver(\"btnapply\")' onmouseout='ButtonOver(\"btnapply\")' id='btnapply' value='Apply Theme' />");

    return $objResponse;
}

function ApplyTheme($theme)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_WEB_SETTINGS))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to change the theme to ".htmlspecialchars(addslashes($theme)).", but doesnt have access.");
        return $objResponse;
    }

    $theme = rawurldecode($theme);
    $theme = str_replace(array('../', '..\\', chr(0)), '', $theme);
    $theme = basename($theme);

    if($theme[0] == '.' || !in_array($theme, scandir(SB_THEMES)) || !is_dir(SB_THEMES . $theme) || !file_exists(SB_THEMES . $theme . "/theme.conf.php"))
    {
        $objResponse->addAlert('Invalid theme selected.');
        return $objResponse;
    }

    include(SB_THEMES . $theme . "/theme.conf.php");

    if(!defined('theme_screenshot'))
    {
        $objResponse->addAlert('Bad theme selected.');
        return $objResponse;
    }

    $query = $GLOBALS['db']->Execute("UPDATE `" . DB_PREFIX . "_settings` SET `value` = ? WHERE `setting` = 'config.theme'", array($theme));
    $objResponse->addScript('window.location.reload( false );');
    return $objResponse;
}

function AddComment($bid, $ctype, $ctext, $page)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    if(!$userbank->is_admin())
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to add a comment, but doesnt have access.");
        return $objResponse;
    }

    $bid = (int)$bid;
    $page = (int)$page;

    $pagelink = "";
    if($page != -1)
        $pagelink = "&page=".$page;

    if($ctype=="B")
        $redir = "?p=banlist".$pagelink;
    elseif($ctype=="C")
        $redir = "?p=commslist".$pagelink;
    elseif($ctype=="S")
        $redir = "?p=admin&c=bans#^2";
    elseif($ctype=="P")
        $redir = "?p=admin&c=bans#^1";
    else
    {
        $objResponse->addScript("ShowBox('Error', 'Bad comment type.', 'red');");
        return $objResponse;
    }

    $ctext = trim($ctext);

    $pre = $GLOBALS['db']->Prepare("INSERT INTO ".DB_PREFIX."_comments(bid,type,aid,commenttxt,added) VALUES (?,?,?,?,UNIX_TIMESTAMP())");
    $GLOBALS['db']->Execute($pre,array($bid,
                                       $ctype,
                                       $userbank->GetAid(),
                                       $ctext));

    $objResponse->addScript("ShowBox('Comment Added', 'The comment has been successfully published', 'green', 'index.php$redir');");
    $objResponse->addScript("TabToReload();");
    $log = new CSystemLog("m", "Comment Added", $username." added a comment for ban #".$bid);
    return $objResponse;
}

function EditComment($cid, $ctype, $ctext, $page)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    if(!$userbank->is_admin())
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to edit a comment, but doesnt have access.");
        return $objResponse;
    }

    $cid = (int)$cid;
    $page = (int)$page;

    $pagelink = "";
    if($page != -1)
        $pagelink = "&page=".$page;

    if($ctype=="B")
        $redir = "?p=banlist".$pagelink;
    elseif($ctype=="C")
        $redir = "?p=commslist".$pagelink;
    elseif($ctype=="S")
        $redir = "?p=admin&c=bans#^2";
    elseif($ctype=="P")
        $redir = "?p=admin&c=bans#^1";
    else
    {
        $objResponse->addScript("ShowBox('Error', 'Bad comment type.', 'red');");
        return $objResponse;
    }

    $ctext = trim($ctext);

    $pre = $GLOBALS['db']->Prepare("UPDATE ".DB_PREFIX."_comments SET `commenttxt` = ?, `editaid` = ?, `edittime`= UNIX_TIMESTAMP() WHERE cid = ?");
    $GLOBALS['db']->Execute($pre,array($ctext,
                                       $userbank->GetAid(),
                                       $cid));

    $objResponse->addScript("ShowBox('Comment Edited', 'The comment #".$cid." has been successfully edited', 'green', 'index.php$redir');");
    $objResponse->addScript("TabToReload();");
    $log = new CSystemLog("m", "Comment Edited", $username." edited comment #".$cid);
    return $objResponse;
}

function RemoveComment($cid, $ctype, $page)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    if (!$userbank->HasAccess(ADMIN_OWNER))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to remove a comment, but doesnt have access.");
        return $objResponse;
    }

    $cid = (int)$cid;
    $page = (int)$page;

    $pagelink = "";
    if($page != -1)
        $pagelink = "&page=".$page;

    $res = $GLOBALS['db']->Execute("DELETE FROM `".DB_PREFIX."_comments` WHERE `cid` = ?",
                                array( $cid ));
    if($ctype=="B")
        $redir = "?p=banlist".$pagelink;
    elseif($ctype=="C")
        $redir = "?p=commslist".$pagelink;
    else
        $redir = "?p=admin&c=bans";
    if($res)
    {
        $objResponse->addScript("ShowBox('Comment Deleted', 'The selected comment has been deleted from the database', 'green', 'index.php$redir', true);");
        $log = new CSystemLog("m", "Comment Deleted", $username." deleted comment #".$cid);
    }
    else
        $objResponse->addScript("ShowBox('Error', 'There was a problem deleting the comment from the database. Check the logs for more info', 'red', 'index.php$redir', true);");
    return $objResponse;
}

function ClearCache()
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    if (!$userbank->HasAccess(ADMIN_OWNER|ADMIN_WEB_SETTINGS))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to clear the cache, but doesnt have access.");
        return $objResponse;
    }

    $cachedir = dir(SB_THEMES_COMPILE);
    while (($entry = $cachedir->read()) !== false) {
        if (is_file($cachedir->path.$entry)) {
            unlink($cachedir->path.$entry);
        }
    }
    $cachedir->close();

    $objResponse->addScript("$('clearcache.msg').innerHTML = '<font color=\"green\" size=\"1\">Cache cleared.</font>';");

    return $objResponse;
}

function RefreshServer($sid)
{
    $objResponse = new xajaxResponse();
    $sid = (int)$sid;
    session_start();
    $data = $GLOBALS['db']->GetRow("SELECT ip, port FROM `".DB_PREFIX."_servers` WHERE sid = ?;", array($sid));
    if (isset($_SESSION['getInfo.' . $data['ip'] . '.' . $data['port']]) && is_array($_SESSION['getInfo.' . $data['ip'] . '.' . $data['port']]))
        unset($_SESSION['getInfo.' . $data['ip'] . '.' . $data['port']]);
    $objResponse->addScript("xajax_ServerHostPlayers('".$sid."');");
    return $objResponse;
}

function RehashAdmins($server, $do=0)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    $do = (int)$do;
    if (!$userbank->HasAccess(ADMIN_OWNER|ADMIN_EDIT_ADMINS|ADMIN_EDIT_GROUPS|ADMIN_ADD_ADMINS))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to rehash admins, but doesnt have access.");
        return $objResponse;
    }
    $servers = explode(",",$server);
    if(sizeof($servers)>0) {
        if(sizeof($servers)-1 > $do)
            $objResponse->addScriptCall("xajax_RehashAdmins", $server, $do+1);

        $serv = $GLOBALS['db']->GetRow("SELECT ip, port, rcon FROM ".DB_PREFIX."_servers WHERE sid = '".(int)$servers[$do]."';");
        if(empty($serv['rcon'])) {
            $objResponse->addAppend("rehashDiv", "innerHTML", "".$serv['ip'].":".$serv['port']." (".($do+1)."/".sizeof($servers).") <font color='red'>failed: No rcon password set</font>.<br />");
            if($do >= sizeof($servers)-1) {
                $objResponse->addAppend("rehashDiv", "innerHTML", "<b>Done</b>");
                $objResponse->addScript("$('dialog-control').setStyle('display', 'block');");
            }
            return $objResponse;
        }

        $test = @fsockopen($serv['ip'], $serv['port'], $errno, $errstr, 2);
        if(!$test) {
            $objResponse->addAppend("rehashDiv", "innerHTML", "".$serv['ip'].":".$serv['port']." (".($do+1)."/".sizeof($servers).") <font color='red'>failed: Can't connect</font>.<br />");
            if($do >= sizeof($servers)-1) {
                $objResponse->addAppend("rehashDiv", "innerHTML", "<b>Done</b>");
                $objResponse->addScript("$('dialog-control').setStyle('display', 'block');");
            }
            return $objResponse;
        }

        require INCLUDES_PATH.'/CServerRcon.php';
        $r = new CServerRcon($serv['ip'], $serv['port'], $serv['rcon']);
        if(!$r->Auth())
        {
            $GLOBALS['db']->Execute("UPDATE ".DB_PREFIX."_servers SET rcon = '' WHERE sid = '".$serv['sid']."';");
            $objResponse->addAppend("rehashDiv", "innerHTML", "".$serv['ip'].":".$serv['port']." (".($do+1)."/".sizeof($servers).") <font color='red'>failed: Wrong rcon password</font>.<br />");
            if($do >= sizeof($servers)-1) {
                $objResponse->addAppend("rehashDiv", "innerHTML", "<b>Done</b>");
                $objResponse->addScript("$('dialog-control').setStyle('display', 'block');");
            }
            return $objResponse;
        }
        $ret = $r->rconCommand("sm_rehash");

        $objResponse->addAppend("rehashDiv", "innerHTML", "".$serv['ip'].":".$serv['port']." (".($do+1)."/".sizeof($servers).") <font color='green'>successful</font>.<br />");
        if($do >= sizeof($servers)-1) {
            $objResponse->addAppend("rehashDiv", "innerHTML", "<b>Done</b>");
            $objResponse->addScript("$('dialog-control').setStyle('display', 'block');");
        }
    } else {
        $objResponse->addAppend("rehashDiv", "innerHTML", "No servers to check.");
        $objResponse->addScript("$('dialog-control').setStyle('display', 'block');");
    }
    return $objResponse;
}

function GroupBan($groupuri, $isgrpurl="no", $queue="no", $reason="", $last="")
{
    $objResponse = new xajaxResponse();
    if($GLOBALS['config']['config.enablegroupbanning']==0)
        return $objResponse;
    global $userbank, $username;
    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_ADD_BAN))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to initiate a groupban '".htmlspecialchars(addslashes(trim($groupuri)))."', but doesnt have access.");
        return $objResponse;
    }
    if($isgrpurl=="yes")
        $grpname = $groupuri;
    else {
        $url = parse_url($groupuri, PHP_URL_PATH);
        $url = explode("/", $url);
        $grpname = $url[2];
    }
    if(empty($grpname)) {
        $objResponse->addAssign("groupurl.msg", "innerHTML", "Error parsing the group url.");
        $objResponse->addScript("$('groupurl.msg').setStyle('display', 'block');");
        return $objResponse;
    }
    else {
        $objResponse->addScript("$('groupurl.msg').setStyle('display', 'none');");
    }

    if($queue=="yes")
        $objResponse->addScript("ShowBox('Please Wait...', 'Banning all members of the selected groups... <br>Please Wait...<br>Notice: This can last 15mins or longer, depending on the amount of members of the groups!', 'info', '', true);");
    else
        $objResponse->addScript("ShowBox('Please Wait...', 'Banning all members of ".$grpname."...<br>Please Wait...<br>Notice: This can last 15mins or longer, depending on the amount of members of the group!', 'info', '', true);");
    $objResponse->addScript("$('dialog-control').setStyle('display', 'none');");
    $objResponse->addScriptCall("xajax_BanMemberOfGroup", $grpname, $queue, htmlspecialchars(addslashes($reason)), $last);
    return $objResponse;

}

function BanMemberOfGroup($grpurl, $queue, $reason, $last)
{
    set_time_limit(0);
    $objResponse = new xajaxResponse();
    if($GLOBALS['config']['config.enablegroupbanning']==0)
        return $objResponse;
    global $userbank, $username;
    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_ADD_BAN))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to ban group '".$grpurl."', but doesnt have access.");
        return $objResponse;
    }
    $bans = $GLOBALS['db']->GetAll("SELECT CAST(MID(authid, 9, 1) AS UNSIGNED) + CAST('76561197960265728' AS UNSIGNED) + CAST(MID(authid, 11, 10) * 2 AS UNSIGNED) AS community_id FROM ".DB_PREFIX."_bans WHERE RemoveType IS NULL;");
    foreach($bans as $ban) {
        $already[] = $ban["community_id"];
    }
    $doc = new DOMDocument();
    // This could be changed to use the memberlistxml
    // https://partner.steamgames.com/documentation/community_data
    // http://steamcommunity.com/groups/<GroupName>/memberslistxml/?xml=1
    // but we'd need to open every single profile of every member to get the name..
    $raw = file_get_contents("http://steamcommunity.com/groups/".$grpurl."/members"); // get the members page
    @$doc->loadHTML($raw); // load it into a handy object so we can maintain it
    // the memberlist is paginated, so we need to check the number of pages
    $pagetag = $doc->getElementsByTagName('div');
    foreach($pagetag as $pageclass) {
        if($pageclass->getAttribute('class') == "pageLinks") { //search for the pageLinks div
            $pageclasselmt = $pageclass;
            break;
        }
    }
    $pagelinks = $pageclasselmt->getElementsByTagName('a'); // get all page links
    $pagenumbers = array();
    $pagenumbers[] = 1; // add at least one page for the loop. if the group doesn't have 50 members -> no paginating
    foreach($pagelinks as $pagelink) {
        $pagenumber = str_replace("?p=", "", $pagelink->childNodes->item(0)->nodeValue); // remove the get variable stuff so we only have the pagenumber
        if(strpos($pagenumber, ">") === false) // don't want the "next" button ;)
            $pagenumbers[] = $pagenumber;
    }
    $members = array();
    $total = 0;
    $bannedbefore = 0;
    $error = 0;
    for($i=1;$i<=max($pagenumbers);$i++) { // loop through all the pages
        if($i!=1) { // if we are on page 1 we don't need to reget the content as we did above already.
            $raw = file_get_contents("http://steamcommunity.com/groups/".$grpurl."/members?p=".$i); // open the memberpage
            @$doc->loadHTML($raw);
        }
        $tags = $doc->getElementsByTagName('a');
        foreach ($tags as $tag) {
            // search for the member profile links
            if((strstr($tag->getAttribute('href'), "http://steamcommunity.com/id/") || strstr($tag->getAttribute('href'), "http://steamcommunity.com/profiles/")) && $tag->hasChildNodes() && $tag->childNodes->length == 1 && $tag->childNodes->item(0)->nodeValue != "") {
                $total++;
                $url = parse_url($tag->getAttribute('href'), PHP_URL_PATH);
                $url = explode("/", $url);
                if(in_array($url[2], $already)) {
                    $bannedbefore++;
                    continue;
                }
                if(strstr($tag->getAttribute('href'), "http://steamcommunity.com/id/")) {
                    // we don't have the friendid as this player is using a custom id :S need to get the friendid
                    if($tfriend = GetFriendIDFromCommunityID($url[2])) {
                        if(in_array($tfriend, $already)) {
                            $bannedbefore++;
                            continue;
                        }
                        $cust = $url[2];
                        $steamid = FriendIDToSteamID($tfriend);
                        $urltag = $tfriend;
                    } else {
                        $error++;
                        continue;
                    }
                } else {
                    // just a normal friendid profile =)
                    $cust = NULL;
                    $steamid = FriendIDToSteamID($url[2]);
                    $urltag = $url[2];
                }
                $pre = $GLOBALS['db']->Prepare("INSERT INTO ".DB_PREFIX."_bans(created,type,ip,authid,name,ends,length,reason,aid,adminIp ) VALUES
                                    (UNIX_TIMESTAMP(),?,?,?,?,UNIX_TIMESTAMP(),?,?,?,?)");
                $GLOBALS['db']->Execute($pre,array(0,
                                                   "",
                                                   $steamid,
                                                   utf8_decode($tag->childNodes->item(0)->nodeValue),
                                                   0,
                                                   "Steam Community Group Ban (".$grpurl.") ".$reason,
                                                   $userbank->GetAid(),
                                                   $_SERVER['REMOTE_ADDR']));
            }
        }
    }
    if($queue=="yes") {
        $objResponse->addAppend("steamGroupStatus", "innerHTML", "<p>Banned ".($total-$bannedbefore-$error)."/".$total." players of group '".$grpurl."'. | ".$bannedbefore." were banned already. | ".$error." failed.</p>");
        if($grpurl==$last) {
            $objResponse->addScript("ShowBox('Groups banned successfully', 'The selected Groups were banned successfully. For detailed info check below.', 'green', '', true);");
            $objResponse->addScript("$('dialog-control').setStyle('display', 'block');");
        }
    } else {
        $objResponse->addScript("ShowBox('Group banned successfully', 'Banned ".($total-$bannedbefore-$error)."/".$total." players of group \'".$grpurl."\'.<br>".$bannedbefore." were banned already.<br>".$error." failed.', 'green', '', true);");
        $objResponse->addScript("$('dialog-control').setStyle('display', 'block');");
    }
    $log = new CSystemLog("m", "Group Banned", "Banned ".($total-$bannedbefore-$error)."/".$total." players of group \'".$grpurl."\'.<br>".$bannedbefore." were banned already.<br>".$error." failed.");
    return $objResponse;
}

function GetGroups($friendid)
{
    set_time_limit(0);
    $objResponse = new xajaxResponse();
    if($GLOBALS['config']['config.enablegroupbanning']==0 || !is_numeric($friendid))
        return $objResponse;
    global $userbank, $username;
    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_ADD_BAN))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to list groups of '".$friendid."', but doesnt have access.");
        return $objResponse;
    }
    // check if we're getting redirected, if so there is $result["Location"] (the player uses custom id)  else just use the friendid. !We can't get the xml with the friendid url if the player has a custom one!
    $result = get_headers("http://steamcommunity.com/profiles/".$friendid."/", 1);
    $raw = file_get_contents((!empty($result["Location"])?$result["Location"]:"http://steamcommunity.com/profiles/".$friendid."/")."?xml=1");
    preg_match("/<privacyState>([^\]]*)<\/privacyState>/", $raw, $status);
    if(($status && $status[1] != "public") || strstr($raw, "<groups>")) {
        $raw = str_replace("&", "", $raw);
        $raw = strip_31_ascii($raw);
        $raw = utf8_encode($raw);
        $xml = simplexml_load_string($raw); // parse xml
        $result = $xml->xpath('/profile/groups/group'); // go to the group nodes
        $i = 0;
        while(list( , $node) = each($result)) {
            // Steam only provides the details of the first 3 groups of a players profile. We need to fetch the individual groups seperately to get the correct information.
            if(empty($node->groupName)) {
                $memberlistxml = file_get_contents("http://steamcommunity.com/gid/".$node->groupID64."/memberslistxml/?xml=1");
                $memberlistxml = str_replace("&", "", $memberlistxml);
                $memberlistxml = strip_31_ascii($memberlistxml);
                $memberlistxml = utf8_encode($memberlistxml);
                $groupxml = simplexml_load_string($memberlistxml); // parse xml
                $node = $groupxml->xpath('/memberList/groupDetails');
                $node = $node[0];
            }

            // Checkbox & Groupname table cols
            $objResponse->addScript('var e = document.getElementById("steamGroupsTable");
                                                    var tr = e.insertRow("-1");
                                                        var td = tr.insertCell("-1");
                                                            td.className = "listtable_1";
                                                            td.style.padding = "0px";
                                                            td.style.width = "3px";
                                                                var input = document.createElement("input");
                                                                input.setAttribute("type","checkbox");
                                                                input.setAttribute("id","chkb_'.$i.'");
                                                                input.setAttribute("value","'.$node->groupURL.'");
                                                            td.appendChild(input);
                                                        var td = tr.insertCell("-1");
                                                            td.className = "listtable_1";
                                                            var a = document.createElement("a");
                                                                a.href = "http://steamcommunity.com/groups/'.$node->groupURL.'";
                                                                a.setAttribute("target","_blank");
                                                                    var txt = document.createTextNode("'.utf8_decode($node->groupName).'");
                                                                a.appendChild(txt);
                                                            td.appendChild(a);
                                                                var txt = document.createTextNode(" (");
                                                            td.appendChild(txt);
                                                                var span = document.createElement("span");
                                                                span.setAttribute("id","membcnt_'.$i.'");
                                                                span.setAttribute("value","'.$node->memberCount.'");
                                                                    var txt3 = document.createTextNode("'.$node->memberCount.'");
                                                                span.appendChild(txt3);
                                                            td.appendChild(span);
                                                                var txt2 = document.createTextNode(" Members)");
                                                            td.appendChild(txt2);
                                                        ');
            $i++;
        }
    } else {
        $objResponse->addScript("ShowBox('Error', 'There was an error retrieving the group data. <br>Maybe the player isn\'t member of any group or his profile is private?<br><a href=\"http://steamcommunity.com/profiles/".$friendid."/\" title=\"Community profile\" target=\"_blank\">Community profile</a>', 'red', 'index.php?p=banlist', true);");
        $objResponse->addScript("$('steamGroupsText').innerHTML = '<i>No groups...</i>';");
        return $objResponse;
    }
    $objResponse->addScript("$('steamGroupsText').setStyle('display', 'none');");
    $objResponse->addScript("$('steamGroups').setStyle('display', 'block');");
    return $objResponse;
}

function BanFriends($friendid, $name)
{
    set_time_limit(0);
    $objResponse = new xajaxResponse();
    if($GLOBALS['config']['config.enablefriendsbanning']==0 || !is_numeric($friendid))
        return $objResponse;
    global $userbank, $username;
    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_ADD_BAN))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to ban friends of '".RemoveCode($friendid)."', but doesnt have access.");
        return $objResponse;
    }
    $bans = $GLOBALS['db']->GetAll("SELECT CAST(MID(authid, 9, 1) AS UNSIGNED) + CAST('76561197960265728' AS UNSIGNED) + CAST(MID(authid, 11, 10) * 2 AS UNSIGNED) AS community_id FROM ".DB_PREFIX."_bans WHERE RemoveType IS NULL;");
    foreach($bans as $ban) {
        $already[] = $ban["community_id"];
    }
    $doc = new DOMDocument();
    $result = get_headers("http://steamcommunity.com/profiles/".$friendid."/", 1);
    $raw = file_get_contents(($result["Location"]!=""?$result["Location"]:"http://steamcommunity.com/profiles/".$friendid."/")."friends"); // get the friends page
    @$doc->loadHTML($raw);
    $divs = $doc->getElementsByTagName('div');
    foreach($divs as $div) {
        if($div->getAttribute('id') == "memberList") {
            $memberdiv = $div;
            break;
        }
    }

    $total = 0;
    $bannedbefore = 0;
    $error = 0;
    $links = $memberdiv->getElementsByTagName('a');
    foreach ($links as $link) {
        if(strstr($link->getAttribute('href'), "http://steamcommunity.com/id/") || strstr($link->getAttribute('href'), "http://steamcommunity.com/profiles/"))
        {
            $total++;
            $url = parse_url($link->getAttribute('href'), PHP_URL_PATH);
            $url = explode("/", $url);
            if(in_array($url[2], $already)) {
                $bannedbefore++;
                continue;
            }
            if(strstr($link->getAttribute('href'), "http://steamcommunity.com/id/")) {
                // we don't have the friendid as this player is using a custom id :S need to get the friendid
                if($tfriend = GetFriendIDFromCommunityID($url[2])) {
                    if(in_array($tfriend, $already)) {
                        $bannedbefore++;
                        continue;
                    }
                    $cust = $url[2];
                    $steamid = FriendIDToSteamID($tfriend);
                    $urltag = $tfriend;
                } else {
                    $error++;
                    continue;
                }
            } else {
                // just a normal friendid profile =)
                $cust = NULL;
                $steamid = FriendIDToSteamID($url[2]);
                $urltag = $url[2];
            }

            // get the name
            $friendName = $link->parentNode->childNodes->item(5)->childNodes->item(0)->nodeValue;
            $friendName = str_replace("&#13;", "", $friendName);
            $friendName = trim($friendName);

            $pre = $GLOBALS['db']->Prepare("INSERT INTO ".DB_PREFIX."_bans(created,type,ip,authid,name,ends,length,reason,aid,adminIp ) VALUES
                                    (UNIX_TIMESTAMP(),?,?,?,?,UNIX_TIMESTAMP(),?,?,?,?)");
            $GLOBALS['db']->Execute($pre,array(0,
                                               "",
                                               $steamid,
                                               utf8_decode($friendName),
                                               0,
                                               "Steam Community Friend Ban (".htmlspecialchars($name).")",
                                               $userbank->GetAid(),
                                               $_SERVER['REMOTE_ADDR']));
        }
    }
    if($total==0) {
        $objResponse->addScript("ShowBox('Error retrieving friends', 'There was an error retrieving the friend list. Check if the profile isn\'t private or if he hasn\'t got any friends!', 'red', 'index.php?p=banlist', true);");
        $objResponse->addScript("$('dialog-control').setStyle('display', 'block');");
        return $objResponse;
    }
    $objResponse->addScript("ShowBox('Friends banned successfully', 'Banned ".($total-$bannedbefore-$error)."/".$total." friends of \'".htmlspecialchars($name)."\'.<br>".$bannedbefore." were banned already.<br>".$error." failed.', 'green', 'index.php?p=banlist', true);");
    $objResponse->addScript("$('dialog-control').setStyle('display', 'block');");
    $log = new CSystemLog("m", "Friends Banned", "Banned ".($total-$bannedbefore-$error)."/".$total." friends of \'".htmlspecialchars($name)."\'.<br>".$bannedbefore." were banned already.<br>".$error." failed.");
    return $objResponse;
}

function ViewCommunityProfile($sid, $name)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    if(!$userbank->is_admin())
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to view profile of '".htmlspecialchars($name)."', but doesnt have access.");
        return $objResponse;
    }
    $sid = (int)$sid;

    require INCLUDES_PATH.'/CServerRcon.php';
    //get the server data
    $data = $GLOBALS['db']->GetRow("SELECT ip, port, rcon FROM ".DB_PREFIX."_servers WHERE sid = '".$sid."';");
    if(empty($data['rcon'])) {
        $objResponse->addScript("ShowBox('Error', 'Can\'t get playerinfo for ".addslashes(htmlspecialchars($name)).". No RCON password!', 'red', '', true);");
        return $objResponse;
    }
    $r = new CServerRcon($data['ip'], $data['port'], $data['rcon']);

    if(!$r->Auth())
    {
        $GLOBALS['db']->Execute("UPDATE ".DB_PREFIX."_servers SET rcon = '' WHERE sid = '".$sid."';");
        $objResponse->addScript("ShowBox('Error', 'Can\'t get playerinfo for ".addslashes(htmlspecialchars($name)).". Wrong RCON password!', 'red', '', true);");
        return $objResponse;
    }
    // search for the playername
    $ret = $r->rconCommand("status");
    $search = preg_match_all(STATUS_PARSE,$ret,$matches,PREG_PATTERN_ORDER);
    $i = 0;
    $found = false;
    $index = -1;
    foreach($matches[2] AS $match) {
        if($match == $name) {
            $found = true;
            $index = $i;
            break;
        }
        $i++;
    }
    if($found) {
        $steam = $matches[3][$index];
        // Hack to support steam3 [U:1:X] representation.
        if(strpos($steam, "[U:") === 0) {
            $steam = renderSteam2(getAccountId($steam), 0);
        }
        $objResponse->addScript("$('dialog-control').setStyle('display', 'block');$('dialog-content-text').innerHTML = 'Generating Community Profile link for ".addslashes(htmlspecialchars($name)).", please wait...<br /><font color=\"green\">Done.</font><br /><br /><b>Watch the profile <a href=\"http://www.steamcommunity.com/profiles/".SteamIDToFriendID($steam)."/\" title=\"".addslashes(htmlspecialchars($name))."\'s Profile\" target=\"_blank\">here</a>.</b>';");
        $objResponse->addScript("window.open('http://www.steamcommunity.com/profiles/".SteamIDToFriendID($steam)."/', 'Community_".$steam."');");
    } else {
        $objResponse->addScript("ShowBox('Error', 'Can\'t get playerinfo for ".addslashes(htmlspecialchars($name)).". Player not on the server anymore!', 'red', '', true);");
    }
    return $objResponse;
}

function SendMessage($sid, $name, $message)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    if(!$userbank->is_admin())
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to send ingame message to '".addslashes(htmlspecialchars($name))."' (\"".RemoveCode($message)."\"), but doesnt have access.");
        return $objResponse;
    }
    $sid = (int)$sid;
    require INCLUDES_PATH.'/CServerRcon.php';
    //get the server data
    $data = $GLOBALS['db']->GetRow("SELECT ip, port, rcon FROM ".DB_PREFIX."_servers WHERE sid = '".$sid."';");
    if(empty($data['rcon'])) {
        $objResponse->addScript("ShowBox('Error', 'Can\'t send message to ".addslashes(htmlspecialchars($name)).". No RCON password!', 'red', '', true);");
        return $objResponse;
    }
    $r = new CServerRcon($data['ip'], $data['port'], $data['rcon']);
    if(!$r->Auth())
    {
        $GLOBALS['db']->Execute("UPDATE ".DB_PREFIX."_servers SET rcon = '' WHERE sid = '".$sid."';");
        $objResponse->addScript("ShowBox('Error', 'Can\'t send message to ".addslashes(htmlspecialchars($name)).". Wrong RCON password!', 'red', '', true);");
        return $objResponse;
    }
    $ret = $r->sendCommand('sm_psay "'.$name.'" "'.preg_replace('/[^A-Za-z0-9\ ]/', '', $message).'"');
  new CSystemLog("m", "Message sent to player", "The following message was sent to " . addslashes(htmlspecialchars($name)) . " on server " . $data['ip'] . ":" . $data['port'] . ": " . RemoveCode($message));
    $objResponse->addScript("ShowBox('Message Sent', 'The message has been sent to player \'".addslashes(htmlspecialchars($name))."\' successfully!', 'green', '', true);$('dialog-control').setStyle('display', 'block');");
    return $objResponse;
}
function AddBlock($nickname, $type, $steam, $length, $reason)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;
    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_ADD_BAN))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried to add a block, but doesnt have access.");
        return $objResponse;
    }

    $steam = trim($steam);

    $error = 0;
    // If they didnt type a steamid
    if(empty($steam))
    {
        $error++;
        $objResponse->addAssign("steam.msg", "innerHTML", "You must type a Steam ID or Community ID");
        $objResponse->addScript("$('steam.msg').setStyle('display', 'block');");
    }
    else if((!is_numeric($steam)
    && !validate_steam($steam))
    || (is_numeric($steam)
    && (strlen($steam) < 15
    || !validate_steam($steam = FriendIDToSteamID($steam)))))
    {
        $error++;
        $objResponse->addAssign("steam.msg", "innerHTML", "Please enter a valid Steam ID or Community ID");
        $objResponse->addScript("$('steam.msg').setStyle('display', 'block');");
    }
    else
    {
        $objResponse->addAssign("steam.msg", "innerHTML", "");
        $objResponse->addScript("$('steam.msg').setStyle('display', 'none');");
    }

    if($error > 0)
        return $objResponse;

    $nickname = RemoveCode($nickname);
    $reason = RemoveCode($reason);
    if(!$length)
        $len = 0;
    else
        $len = $length*60;

    // prune any old bans
    PruneComms();

    $typeW = "";
    switch ((int)$type)
    {
        case 1:
            $typeW = "type = 1";
            break;
        case 2:
            $typeW = "type = 2";
            break;
        case 3:
            $typeW = "(type = 1 OR type = 2)";
            break;
        default:
            $typeW = "";
            break;
    }

    // Check if the new steamid is already banned
    $chk = $GLOBALS['db']->GetRow("SELECT count(bid) AS count FROM ".DB_PREFIX."_comms WHERE authid = ? AND (length = 0 OR ends > UNIX_TIMESTAMP()) AND RemovedBy IS NULL AND ".$typeW, array($steam));

    if(intval($chk[0]) > 0)
    {
        $objResponse->addScript("ShowBox('Error', 'SteamID: $steam is already blocked.', 'red', '');");
        return $objResponse;
    }

    // Check if player is immune
    $admchk = $userbank->GetAllAdmins();
    foreach($admchk as $admin)
    if($admin['authid'] == $steam && $userbank->GetProperty('srv_immunity') < $admin['srv_immunity'])
        {
            $objResponse->addScript("ShowBox('Error', 'SteamID: Admin ".$admin['user']." ($steam) is immune.', 'red', '');");
            return $objResponse;
        }

    if((int)$type == 1 || (int)$type == 3)
    {
        $pre = $GLOBALS['db']->Prepare("INSERT INTO ".DB_PREFIX."_comms(created,type,authid,name,ends,length,reason,aid,adminIp ) VALUES
                                      (UNIX_TIMESTAMP(),1,?,?,(UNIX_TIMESTAMP() + ?),?,?,?,?)");
        $GLOBALS['db']->Execute($pre,array($steam,
                                           $nickname,
                                           $length*60,
                                           $len,
                                           $reason,
                                           $userbank->GetAid(),
                                           $_SERVER['REMOTE_ADDR']));
    }
    if ((int)$type == 2 || (int)$type ==3)
    {
        $pre = $GLOBALS['db']->Prepare("INSERT INTO ".DB_PREFIX."_comms(created,type,authid,name,ends,length,reason,aid,adminIp ) VALUES
                                      (UNIX_TIMESTAMP(),2,?,?,(UNIX_TIMESTAMP() + ?),?,?,?,?)");
        $GLOBALS['db']->Execute($pre,array($steam,
                                           $nickname,
                                           $length*60,
                                           $len,
                                           $reason,
                                           $userbank->GetAid(),
                                           $_SERVER['REMOTE_ADDR']));
    }

    $objResponse->addScript("ShowBlockBox('".$steam."', '".(int)$type."', '".(int)$len."');");
    $objResponse->addScript("TabToReload();");
    $log = new CSystemLog("m", "Block Added", "Block against (" . $steam . ") has been added, reason: $reason, length: $length", true, $kickit);
    return $objResponse;
}

function PrepareReblock($bid)
{
    $objResponse = new xajaxResponse();

    $ban = $GLOBALS['db']->GetRow("SELECT name, authid, type, length, reason FROM ".DB_PREFIX."_comms WHERE bid = '".$bid."';");

    // clear any old stuff
    $objResponse->addScript("$('nickname').value = ''");
    $objResponse->addScript("$('steam').value = ''");
    $objResponse->addScript("$('txtReason').value = ''");
    $objResponse->addAssign("txtReason", "innerHTML",  "");

    // add new stuff
    $objResponse->addScript("$('nickname').value = '" . $ban['name'] . "'");
    $objResponse->addScript("$('steam').value = '" . $ban['authid']. "'");
    $objResponse->addScriptCall("selectLengthTypeReason", $ban['length'], $ban['type']-1, addslashes($ban['reason']));

    $objResponse->addScript("SwapPane(0);");
    return $objResponse;
}

function PrepareBlockFromBan($bid)
{
    $objResponse = new xajaxResponse();

    // clear any old stuff
    $objResponse->addScript("$('nickname').value = ''");
    $objResponse->addScript("$('steam').value = ''");
    $objResponse->addScript("$('txtReason').value = ''");
    $objResponse->addAssign("txtReason", "innerHTML",  "");

    $ban = $GLOBALS['db']->GetRow("SELECT name, authid FROM ".DB_PREFIX."_bans WHERE bid = '".$bid."';");

    // add new stuff
    $objResponse->addScript("$('nickname').value = '" . $ban['name'] . "'");
    $objResponse->addScript("$('steam').value = '" . $ban['authid']. "'");

    $objResponse->addScript("SwapPane(0);");
    return $objResponse;
}

function PasteBlock($sid, $name)
{
    $objResponse = new xajaxResponse();
    global $userbank, $username;

    $sid = (int)$sid;
    if(!$userbank->HasAccess(ADMIN_OWNER|ADMIN_ADD_BAN))
    {
        $objResponse->redirect("index.php?p=login&m=no_access", 0);
        $log = new CSystemLog("w", "Hacking Attempt", $username . " tried paste a block, but doesn't have access.");
        return $objResponse;
    }
    require INCLUDES_PATH.'/CServerRcon.php';
    //get the server data
    $data = $GLOBALS['db']->GetRow("SELECT ip, port, rcon FROM ".DB_PREFIX."_servers WHERE sid = ?;", array($sid));
    if(empty($data['rcon'])) {
        $objResponse->addScript("$('dialog-control').setStyle('display', 'block');");
        $objResponse->addScript("ShowBox('Error', 'No RCON password for server ".$data['ip'].":".$data['port']."!', 'red', '', true);");
        return $objResponse;
    }

    $r = new CServerRcon($data['ip'], $data['port'], $data['rcon']);
    if(!$r->Auth())
    {
        $GLOBALS['db']->Execute("UPDATE ".DB_PREFIX."_servers SET rcon = '' WHERE sid = ?;", array($sid));
        $objResponse->addScript("$('dialog-control').setStyle('display', 'block');");
        $objResponse->addScript("ShowBox('Error', 'Wrong RCON password for server ".$data['ip'].":".$data['port']."!', 'red', '', true);");
        return $objResponse;
    }

    $ret = $r->rconCommand("status");
    $search = preg_match_all(STATUS_PARSE,$ret,$matches,PREG_PATTERN_ORDER);
    $i = 0;
    $found = false;
    $index = -1;
    foreach($matches[2] AS $match) {
        if($match == $name) {
            $found = true;
            $index = $i;
            break;
        }
        $i++;
    }
    if($found) {
        $steam = $matches[3][$index];
        $name = $matches[2][$index];
        $objResponse->addScript("$('nickname').value = '" . addslashes($name) . "'");
        $objResponse->addScript("$('steam').value = '" . $steam . "'");
    } else {
        $objResponse->addScript("ShowBox('Error', 'Can\'t get player info for ".addslashes(htmlspecialchars($name)).". Player is not on the server (".$data['ip'].":".$data['port'].") anymore!', 'red', '', true);");
        $objResponse->addScript("$('dialog-control').setStyle('display', 'block');");
        return $objResponse;
    }
    $objResponse->addScript("SwapPane(0);");
    $objResponse->addScript("$('dialog-control').setStyle('display', 'block');");
    $objResponse->addScript("$('dialog-placement').setStyle('display', 'none');");
    return $objResponse;
}
?>