exec("INSERT INTO `$dbname`.`csrf_token` (`token`,`timestamp`,`sessionid`) VALUES ('$csrf_token','".time()."','".session_id()."')") === false) {
$err_msg = print_r($mysqlcon->errorInfo(), true);
$err_lvl = 3;
}
if (($db_csrf = $mysqlcon->query("SELECT * FROM `$dbname`.`csrf_token` WHERE `sessionid`='".session_id()."'")->fetchALL(PDO::FETCH_UNIQUE|PDO::FETCH_ASSOC)) === false) {
$err_msg = print_r($mysqlcon->errorInfo(), true);
$err_lvl = 3;
}
if(($channellist = $mysqlcon->query("SELECT * FROM `$dbname`.`channel` ORDER BY `pid`,`channel_order`,`channel_name` ASC")->fetchAll(PDO::FETCH_UNIQUE|PDO::FETCH_ASSOC)) === false) {
$err_msg = print_r($mysqlcon->errorInfo(), true);
$err_lvl = 3;
}
if (isset($_POST['update']) && isset($db_csrf[$_POST['csrf_token']])) {
if(is_array($_POST['channelid'])) $_POST['channelid'] = $_POST['channelid'][0];
$old_nav = $cfg['stats_show_site_navigation_switch'];
if (isset($_POST['stats_show_site_navigation_switch'])) $cfg['stats_show_site_navigation_switch'] = 1; else $cfg['stats_show_site_navigation_switch'] = 0;
if (isset($_POST['teamspeak_verification_channel_id'])) $cfg['teamspeak_verification_channel_id'] = $_POST['teamspeak_verification_channel_id']; else $cfg['teamspeak_verification_channel_id'] = 0;
$cfg['stats_show_maxclientsline_switch'] = $_POST['stats_show_maxclientsline_switch'];
$cfg['stats_time_bronze'] = $_POST['stats_time_bronze'];
$cfg['stats_time_silver'] = $_POST['stats_time_silver'];
$cfg['stats_time_gold'] = $_POST['stats_time_gold'];
$cfg['stats_time_legend'] = $_POST['stats_time_legend'];
$cfg['stats_connects_bronze'] = $_POST['stats_connects_bronze'];
$cfg['stats_connects_silver'] = $_POST['stats_connects_silver'];
$cfg['stats_connects_gold'] = $_POST['stats_connects_gold'];
$cfg['stats_connects_legend'] = $_POST['stats_connects_legend'];
$cfg['stats_server_news'] = addslashes($_POST['stats_server_news']);
$cfg['teamspeak_verification_channel_id'] = $_POST['channelid'];
if ($mysqlcon->exec("INSERT INTO `$dbname`.`cfg_params` (`param`,`value`) VALUES ('stats_show_site_navigation_switch','{$cfg['stats_show_site_navigation_switch']}'),('stats_show_maxclientsline_switch','{$cfg['stats_show_maxclientsline_switch']}'),('stats_time_bronze','{$cfg['stats_time_bronze']}'),('stats_time_silver','{$cfg['stats_time_silver']}'),('stats_time_gold','{$cfg['stats_time_gold']}'),('stats_time_legend','{$cfg['stats_time_legend']}'),('stats_connects_bronze','{$cfg['stats_connects_bronze']}'),('stats_connects_silver','{$cfg['stats_connects_silver']}'),('stats_connects_gold','{$cfg['stats_connects_gold']}'),('stats_connects_legend','{$cfg['stats_connects_legend']}'),('teamspeak_verification_channel_id','{$cfg['teamspeak_verification_channel_id']}'),('stats_server_news','{$cfg['stats_server_news']}') ON DUPLICATE KEY UPDATE `value`=VALUES(`value`); DELETE FROM `$dbname`.`csrf_token` WHERE `token`='{$_POST['csrf_token']}'") === false) {
$err_msg = print_r($mysqlcon->errorInfo(), true);
$err_lvl = 3;
} else {
$err_msg = $lang['wisvsuc'];
$err_lvl = 0;
$url = 'https://github.com/Newcomer1989/TSN-Ranksystem/wiki/FAQ#embed-the-statistic-page-with-an-iframe';
if($old_nav != $cfg['stats_show_site_navigation_switch'] && $old_nav == 1) {
$err_msg .= '#####'.$lang['winav14'].'
'.$url.'';
$err_lvl .= "#1";
}
}
$cfg['stats_server_news'] = $_POST['stats_server_news'];
} elseif(isset($_POST['update'])) {
echo '