@@ -212,7 +212,7 @@ if($current == "viewstory"){

 		$squery = dbquery("SELECT sid, inorder FROM ".TABLEPREFIX."fanfiction_chapters WHERE chapid = ".$chapid." LIMIT 1");

 		list($sid, $chapter) = dbrow($squery);

 	}

-	$titlequery = dbquery("SELECT story.title, story.coauthors, "._PENNAMEFIELD." as penname, story.summary FROM ".TABLEPREFIX."fanfiction_stories as story, "._AUTHORTABLE." WHERE sid = '$sid' AND "._UIDFIELD." = story.uid LIMIT 1");

+	$titlequery = dbquery("SELECT story.title, story.coauthors, "._PENNAMEFIELD." as penname, story.summary FROM ".TABLEPREFIX."fanfiction_stories as story, "._AUTHORTABLE." WHERE sid = '".(($sid) ?? null)."' AND "._UIDFIELD." = story.uid LIMIT 1");

 	if($story = dbassoc($titlequery)) { 

 			$authlink[] = $story['penname'];

 		if($story['coauthors']) {

@@ -258,10 +258,14 @@ if (!isset($_GET['action']) || $_GET['action'] != "printable")

 {

 	if (!empty($tinyMCE))

 	{

-		if($tinyMCE == 4) {

+		if($tinyMCE == 5) {

 			echo "<script src=\"" . _BASEDIR . "tinymce/6/js/tinymce/tinymce.min.js\"></script>";

 			include(_BASEDIR . "tinymce/6/init.php");

 		}

+		else if($tinyMCE == 4) {

+			echo "<script src=\"" . _BASEDIR . "tinymce/5/js/tinymce/tinymce.min.js\"></script>";

+			include(_BASEDIR . "tinymce/5/init.php");

+		}

 		else if($tinyMCE == 3) {

 			echo "<script src=\"" . _BASEDIR . "tinymce/4/js/tinymce/tinymce.min.js\"></script>";

 			include(_BASEDIR . "tinymce/4/init.php");

@@ -29,7 +29,7 @@ if(isset($_GET['benchmark'])) {

 }

 $headerSent = false;

-// Defines the character set for your language/location

+// Defines the character set for the header - preferably at UTF-8

 define ("_HEADERCHARSET", "utf-8");

 //default values to avoid ajax issue when notice error are on

@@ -30,7 +30,7 @@ if(isset($_GET['benchmark'])) {

 $headerSent = false;

 // Defines the character set for your language/location

-define ("_CHARSET", "utf-8");

+define ("_HEADERCHARSET", "utf-8");

 //default values to avoid ajax issue when notice error are on

 $allowed_tags = '';

@@ -62,7 +62,7 @@ if(ini_get('register_globals')) {

 Header('Cache-Control: private, no-cache, must-revalidate, max_age=0, post-check=0, pre-check=0');

 header ("Pragma: no-cache"); 

 header ("Expires: 0"); 

-header("Content-Type: text/html; charset="._CHARSET);

+header("Content-Type: text/html; charset="._HEADERCHARSET);

 // Locate config.php and set the basedir path

 $folder_level = "";

@@ -72,7 +72,6 @@ if(!defined("_BASEDIR")) define("_BASEDIR", $folder_level);

 if (file_exists(_BASEDIR . "config.php"))

 {

 	include_once(_BASEDIR . "config.php");

-	include_once(_BASEDIR . "includes/dbfunctions.php");

 }

 if(empty($sitekey)) {

@@ -259,7 +259,11 @@ if (!isset($_GET['action']) || $_GET['action'] != "printable")

 {

 	if (!empty($tinyMCE))

 	{

-		if($tinyMCE == 3) {

+		if($tinyMCE == 4) {

+			echo "<script src=\"" . _BASEDIR . "tinymce/6/js/tinymce/tinymce.min.js\"></script>";

+			include(_BASEDIR . "tinymce/6/init.php");

+		}

+		else if($tinyMCE == 3) {

 			echo "<script src=\"" . _BASEDIR . "tinymce/4/js/tinymce/tinymce.min.js\"></script>";

 			include(_BASEDIR . "tinymce/4/init.php");

 		}

@@ -271,10 +275,6 @@ if (!isset($_GET['action']) || $_GET['action'] != "printable")

 			echo "<script src=\"" . _BASEDIR . "tinymce/2/jscripts/tiny_mce/tiny_mce.js\"></script>";

 			include(_BASEDIR . "tinymce/2/init.php");

 		}

-		else {

-			echo "<script src=\"" . _BASEDIR . "tinymce/6/js/tinymce/tinymce.min.js\"></script>";

-			include(_BASEDIR . "tinymce/6/init.php");

-		}

 	}

 }

 if(isset($displayform) && $displayform == 1) {

@@ -259,7 +259,11 @@ if (!isset($_GET['action']) || $_GET['action'] != "printable")

 {

 	if (!empty($tinyMCE))

 	{

-		if($tinyMCE == 2) {

+		if($tinyMCE == 3) {

+			echo "<script src=\"" . _BASEDIR . "tinymce/4/js/tinymce/tinymce.min.js\"></script>";

+			include(_BASEDIR . "tinymce/4/init.php");

+		}

+		else if($tinyMCE == 2) {

 			echo "<script src=\"" . _BASEDIR . "tinymce/3/jscripts/tiny_mce/tiny_mce.js\"></script>";

 			include(_BASEDIR . "tinymce/3/init.php");

 		}

@@ -268,8 +272,8 @@ if (!isset($_GET['action']) || $_GET['action'] != "printable")

 			include(_BASEDIR . "tinymce/2/init.php");

 		}

 		else {

-			echo "<script src=\"" . _BASEDIR . "tinymce/4/js/tinymce/tinymce.min.js\"></script>";

-			include(_BASEDIR . "tinymce/4/init.php");

+			echo "<script src=\"" . _BASEDIR . "tinymce/6/js/tinymce/tinymce.min.js\"></script>";

+			include(_BASEDIR . "tinymce/6/init.php");

 		}

 	}

 }

@@ -260,16 +260,16 @@ if (!isset($_GET['action']) || $_GET['action'] != "printable")

 	if (!empty($tinyMCE))

 	{

 		if($tinyMCE == 2) {

-			echo "<script src=\"" . _BASEDIR . "tinymce3/jscripts/tiny_mce/tiny_mce.js\"></script>";

-			include(_BASEDIR . "tinymce2/init.php");

+			echo "<script src=\"" . _BASEDIR . "tinymce/3/jscripts/tiny_mce/tiny_mce.js\"></script>";

+			include(_BASEDIR . "tinymce/3/init.php");

 		}

 		else if($tinyMCE == 1) {

-			echo "<script src=\"" . _BASEDIR . "tinymce2/jscripts/tiny_mce/tiny_mce.js\"></script>";

-			include(_BASEDIR . "tinymce3/init.php");

+			echo "<script src=\"" . _BASEDIR . "tinymce/2/jscripts/tiny_mce/tiny_mce.js\"></script>";

+			include(_BASEDIR . "tinymce/2/init.php");

 		}

 		else {

-			echo "<script src=\"" . _BASEDIR . "tinymce4/js/tinymce/tinymce.min.js\"></script>";

-			include(_BASEDIR . "tinymce4/init.php");		

+			echo "<script src=\"" . _BASEDIR . "tinymce/4/js/tinymce/tinymce.min.js\"></script>";

+			include(_BASEDIR . "tinymce/4/init.php");

 		}

 	}

 }

@@ -259,9 +259,13 @@ if (!isset($_GET['action']) || $_GET['action'] != "printable")

 {

 	if (!empty($tinyMCE))

 	{

-		if($tinyMCE == 1) {

-			echo "<script src=\"" . _BASEDIR . "tinymce/jscripts/tiny_mce/tiny_mce.js\"></script>";

-			include(_BASEDIR . "tinymce/init.php");

+		if($tinyMCE == 2) {

+			echo "<script src=\"" . _BASEDIR . "tinymce3/jscripts/tiny_mce/tiny_mce.js\"></script>";

+			include(_BASEDIR . "tinymce2/init.php");

+		}

+		else if($tinyMCE == 1) {

+			echo "<script src=\"" . _BASEDIR . "tinymce2/jscripts/tiny_mce/tiny_mce.js\"></script>";

+			include(_BASEDIR . "tinymce3/init.php");

 		}

 		else {

 			echo "<script src=\"" . _BASEDIR . "tinymce4/js/tinymce/tinymce.min.js\"></script>";

@@ -137,7 +137,7 @@ if(isset($_SERVER['PHP_SELF'])) $_SERVER['PHP_SELF'] = htmlspecialchars(descript

 if(isset($PHP_SELF)) $PHP_SELF = htmlspecialchars(descript($PHP_SELF), ENT_QUOTES);

 // Set these variables to start.

-$agecontsent = false; $viewed = array(); 

+$ageconsent = false; $viewed = array();

 require_once("includes/get_session_vars.php");

@@ -69,7 +69,12 @@ $folder_level = "";

 while (!file_exists($folder_level."header.php")) { $folder_level .= "../"; }

 if(!defined("_BASEDIR")) define("_BASEDIR", $folder_level);

-@ include_once(_BASEDIR."config.php");

+if (file_exists(_BASEDIR . "config.php"))

+{

+	include_once(_BASEDIR . "config.php");

+	include_once(_BASEDIR . "includes/dbfunctions.php");

+}

+

 if(empty($sitekey)) {

 	header("Location: install/install.php");

 	exit( );

@@ -132,7 +132,7 @@ if(isset($_SERVER['PHP_SELF'])) $_SERVER['PHP_SELF'] = htmlspecialchars(descript

 if(isset($PHP_SELF)) $PHP_SELF = htmlspecialchars(descript($PHP_SELF), ENT_QUOTES);

 // Set these variables to start.

-$agecontsent = false; $viewed = false; 

+$agecontsent = false; $viewed = array(); 

 require_once("includes/get_session_vars.php");

@@ -32,6 +32,9 @@ $headerSent = false;

 // Defines the character set for your language/location

 define ("_CHARSET", "utf-8");

+//default values to avoid ajax issue when notice error are on

+$allowed_tags = '';

+

 // Prevent possible XSS attacks via $_GET.

 foreach ($_GET as $v) {

 	if(preg_match('@<script[^>]*?>.*?</script>@si', $v) ||

@@ -101,10 +104,10 @@ if(isset($globalskin)) $skin = $globalskin;

 if(isset($_GET['action'])) $action = strip_tags($_GET['action']);

 else $action = false;

-

+ 

 if(file_exists(_BASEDIR."languages/{$language}.php")) include (_BASEDIR."languages/{$language}.php");

 else include (_BASEDIR."languages/en.php");

-

+ 

 include_once(_BASEDIR."includes/queries.php");

 include_once(_BASEDIR."includes/corefunctions.php");

@@ -189,8 +192,7 @@ if(isset($_SESSION[SITEKEY."_viewed"])) $viewed = $_SESSION[SITEKEY."_viewed"];

 if(isset($_GET['ageconsent'])) $_SESSION[SITEKEY."_ageconsent"] = 1;

 if(isset($_GET['warning'])) $_SESSION[SITEKEY."_warned"][$_GET['warning']] = 1;

-if(file_exists("languages/{$language}.php")) require_once ("languages/{$language}.php");

-else require_once ("languages/en.php");

+

 if(is_dir(_BASEDIR."skins/$siteskin")) $skindir = _BASEDIR."skins/$siteskin";

 else if(is_dir(_BASEDIR."skins/".$settings['skin'])) $skindir = _BASEDIR."skins/".$defaultskin;

 else $skindir = _BASEDIR."default_tpls";

@@ -228,7 +230,7 @@ if($current == "viewuser" && isNumber($uid)) {

 	list($penname) = dbrow($author);

 	$titleinfo = "$sitename :: $penname";

 }

-echo _DOCTYPE."<html><head>";

+echo _DOCTYPE."<html lang={$language}><head>";

 echo "<meta charset='utf-8' />";

 if(!isset($titleinfo)) $titleinfo = "$sitename :: $slogan";

 if(isset($metaDesc)) echo "<meta name='description' content='$metaDesc'>";

@@ -240,10 +242,11 @@ if (file_exists(_BASEDIR."favicon.ico"))

 	echo "<link rel='icon' href='"._BASEDIR."favicon.ico' type='image/x-icon' />\n<link rel='shortcut icon' href='"._BASEDIR."favicon.ico' type='image/xicon' />\n";

 }

-echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset="._CHARSET."\">";

+//A document must not include both a “meta” element with an “http-equiv” attribute whose value is “content-type”, and a “meta” element with a “charset” attribute.

+//echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset="._CHARSET."\">";

 if (!isset($_GET['action']) || $_GET['action'] != "printable")

 {

-	echo "<script language=\"javascript\" type=\"text/javascript\" src=\"" . _BASEDIR . "includes/javascript.js\"></script>

+	echo "<script  src=\"" . _BASEDIR . "includes/javascript.js\"></script>

 <link rel=\"alternate\" type=\"application/rss+xml\" title=\"$sitename RSS Feed\" href=\"" . _BASEDIR . "rss.php\">";

 }

@@ -252,18 +255,18 @@ if (!isset($_GET['action']) || $_GET['action'] != "printable")

 	if (!empty($tinyMCE))

 	{

 		if($tinyMCE == 1) {

-			echo "<script language=\"javascript\" type=\"text/javascript\" src=\"" . _BASEDIR . "tinymce/jscripts/tiny_mce/tiny_mce.js\"></script>";

+			echo "<script src=\"" . _BASEDIR . "tinymce/jscripts/tiny_mce/tiny_mce.js\"></script>";

 			include(_BASEDIR . "tinymce/init.php");

 		}

 		else {

-			echo "<script language=\"javascript\" type=\"text/javascript\" src=\"" . _BASEDIR . "tinymce4/js/tinymce/tinymce.min.js\"></script>";

+			echo "<script src=\"" . _BASEDIR . "tinymce4/js/tinymce/tinymce.min.js\"></script>";

 			include(_BASEDIR . "tinymce4/init.php");		

 		}

 	}

 }

 if(isset($displayform) && $displayform == 1) {

-echo "<script language=\"javascript\" type=\"text/javascript\" src=\""._BASEDIR."includes/xmlhttp.js\"></script>";

-echo "<script language=\"javascript\" type=\"text/javascript\">

+echo "<script src=\""._BASEDIR."includes/xmlhttp.js\"></script>";

+echo "<script>

 lang = new Array( );

 lang['Back2Cats'] = '"._BACK2CATS."';

@@ -301,9 +304,9 @@ if(file_exists("$skindir/extra_header.php")) include_once("$skindir/extra_header

 if(!$displaycolumns) $displaycolumns = 1;

 $colwidth = floor(100/$displaycolumns);

 if(!empty($_GET['action']) && $_GET['action'] == "printable") {

-	if(file_exists("$skindir/printable.css")) echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"$skindir/printable.css\">";

-	else echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"default_tpls/printable.css\">";

-	echo "<script type='text/javascript'>

+	if(file_exists("$skindir/printable.css")) echo "<link rel=\"stylesheet\"  href=\"$skindir/printable.css\">";

+	else echo "<link rel=\"stylesheet\"  href=\"default_tpls/printable.css\">";

+	echo "<script>

 <!--

 if (window.print) {

     window.print() ;  

@@ -316,7 +319,7 @@ document.body.insertAdjacentHTML('beforeEnd', WebBrowser);

 </script>";

 }

 else {

-echo "<style type=\"text/css\">

+echo "<style>

 #columncontainer { margin: 1em auto; width: auto; padding: 5%;}

 #browseblock, #memberblock { width: 100%; padding: 0; margin: 0; float: left; border: 0px solid transparent; }

 .column { float: left; width: ".($colwidth - 1)."%; }

new file mode 100644

@@ -0,0 +1,405 @@

+<?php

+// ----------------------------------------------------------------------

+// Copyright (c) 2007 by Tammy Keefer

+// Based on eFiction 1.1

+// Copyright (C) 2003 by Rebecca Smallwood.

+// http://efiction.sourceforge.net/

+// ----------------------------------------------------------------------

+// LICENSE

+//

+// This program is free software; you can redistribute it and/or

+// modify it under the terms of the GNU General Public License (GPL)

+// as published by the Free Software Foundation; either version 2

+// of the License, or (at your option) any later version.

+//

+// This program is distributed in the hope that it will be useful,

+// but WITHOUT ANY WARRANTY; without even the implied warranty of

+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

+// GNU General Public License for more details.

+//

+// To read the license please visit http://www.gnu.org/copyleft/gpl.html

+// ----------------------------------------------------------------------

+

+// Force the argument separator to be standards compliant

+@ ini_set('arg_separator.output','&'); 

+if(isset($_GET['debug'])) @ error_reporting(E_ALL);

+if(isset($_GET['benchmark'])) {

+	list($usec, $sec) = explode(" ", microtime());

+	$start = ((float)$usec + (float)$sec);

+}

+$headerSent = false;

+

+// Defines the character set for your language/location

+define ("_CHARSET", "utf-8");

+

+// Prevent possible XSS attacks via $_GET.

+foreach ($_GET as $v) {

+	if(preg_match('@<script[^>]*?>.*?</script>@si', $v) ||

+		preg_match("'@<iframe[^>]*?>.*?</script>@si'", $v) ||

+		preg_match("'@<applet[^>]*?>.*?</script>@si'", $v) ||

+		preg_match("'@<meta[^>]*?>.*?</script>@si'", $v) ||

+		preg_match('@<[\/\!]*?[^<>]*?>@si', $v) ||

+		preg_match('@<style[^>]*?>.*?</style>@siU', $v) ||

+		preg_match('@<![\s\S]*?--[ \t\n\r]*>@', $v)) {

+		include("languages/en.php"); // no language set yet, so default to English.	

+		die (_POSSIBLEHACK);

+	}

+}

+unset($v);

+

+if(!isset($_SESSION)) session_start();

+// clear the global variables if register globals is on.

+if(ini_get('register_globals')) {

+	$arrayList = array_merge($_SESSION, $_GET, $_POST, $_COOKIE);

+	foreach($arrayList as $k => $v) {

+		unset($GLOBALS[$k]);

+	}

+}                   

+ 

+Header('Cache-Control: private, no-cache, must-revalidate, max_age=0, post-check=0, pre-check=0');

+header ("Pragma: no-cache"); 

+header ("Expires: 0"); 

+header("Content-Type: text/html; charset="._CHARSET);

+

+// Locate config.php and set the basedir path

+$folder_level = "";

+while (!file_exists($folder_level."header.php")) { $folder_level .= "../"; }

+if(!defined("_BASEDIR")) define("_BASEDIR", $folder_level);

+

+@ include_once(_BASEDIR."config.php");

+if(empty($sitekey)) {

+	header("Location: install/install.php");

+	exit( );

+}

+if(isset($skin)) $globalskin = $skin; 

+$settingsresults = dbquery("SELECT * FROM ".$settingsprefix."fanfiction_settings WHERE sitekey = '".$sitekey."'");

+$settings = dbassoc($settingsresults);

+if(is_null($settings)) {

+	die(" <b>Your settings issue</b><br /> Please check your sitekey and then setting table. Your settings are empty. ");	

+}

+

+if(!defined("SITEKEY")) define("SITEKEY", $settings['sitekey']);

+unset($settings['sitekey']);

+if(!defined("TABLEPREFIX")) define("TABLEPREFIX", $settings['tableprefix']);

+unset($settings['tableprefix']);

+define("STORIESPATH", $settings['storiespath']);

+unset($settings['storiespath']);

+foreach($settings as $var => $val) {

+	if (is_NULL($val)) $val = '';

+	$$var = stripslashes($val);

+	$settings[$var] = htmlspecialchars($val);

+}

+

+if(isset($_GET['debug'])) $debug = 1;

+if(!$displaycolumns) $displaycolumns = 1; // shouldn't happen, but just in case.

+if($words) $words = explode(", ", $words);

+else $words = array( );

+// Fix for sites with 2.0 or 1.1 running as well as 3.0 with register_globals on.

+$defaultskin = $skin;

+

+if(isset($globalskin)) $skin = $globalskin;

+

+if(isset($_GET['action'])) $action = strip_tags($_GET['action']);

+else $action = false;

+

+if(file_exists(_BASEDIR."languages/{$language}.php")) include (_BASEDIR."languages/{$language}.php");

+else include (_BASEDIR."languages/en.php");

+

+include_once(_BASEDIR."includes/queries.php");

+include_once(_BASEDIR."includes/corefunctions.php");

+

+// Check and/or set some variables used at various points throughout the script

+if(isset($_GET['offset'])) $offset = $_GET['offset'];

+if(!isset($offset) || !isNumber($offset)) $offset = 0;

+if(isset($_REQUEST["sid"])) $sid = $_REQUEST["sid"];

+if(isset($sid) && !isNumber($sid)) unset($sid);

+if(isset($_REQUEST['seriesid'])) $seriesid = $_REQUEST["seriesid"];

+if(isset($seriesid) && !isNumber($seriesid)) unset($seriesid);

+if(isset($_REQUEST['uid'])) $uid = $_REQUEST["uid"];

+if(isset($uid) && !isNumber($uid)) unset($uid);

+if(isset($_REQUEST['chapid'])) $chapid = $_REQUEST["chapid"];

+if(isset($chapid) && !isNumber($chapid)) unset($chapid);

+$let = false;

+if(isset($_GET['let'])) $let = $_GET['let'];

+if(isset($let) && !in_array($let, $alphabet)) $let = false;

+$output = "";

+

+// Cleans these two variables of possible XSS attacks.

+if(isset($_SERVER['PHP_SELF'])) $_SERVER['PHP_SELF'] = htmlspecialchars(descript($_SERVER['PHP_SELF']), ENT_QUOTES);

+if(isset($PHP_SELF)) $PHP_SELF = htmlspecialchars(descript($PHP_SELF), ENT_QUOTES);

+

+// Set these variables to start.

+$agecontsent = false; $viewed = false; 

+

+require_once("includes/get_session_vars.php");

+

+if(isset($_GET['skin'])) {

+	$siteskin = $_GET['skin'];

+	$_SESSION[SITEKEY."_skin"] = $siteskin;

+}

+

+$v = explode(".", $version);

+include("version.php");

+$newV = explode(".", $version);

+//if($v[0] == $newV[0] && ($v[1] < $newV[1] || (isset($newV[2]) && $v[2] < $newV[2]))) {

+foreach($newV AS $k => $l) {

+	if($newV[$k] > $v[$k] || (!empty($newV[$k]) && empty($v[$k]))) {

+		if(isADMIN && basename($_SERVER['PHP_SELF']) != "update.php") {

+			header("Location: update.php");

+			exit( );

+		}

+		else if(!isADMIN && basename($_SERVER['PHP_SELF']) != "maintenance.php" && !(isset($_GET['action']) && $_GET['action'] == "login")) {

+			header("Location: maintenance.php");

+			exit( );

+		}

+	}

+}

+

+if(!empty($_SESSION[SITEKEY."_skin"])) $siteskin = $_SESSION[SITEKEY."_skin"];

+if($maintenance && !isADMIN && basename($_SERVER['PHP_SELF']) != "maintenance.php" && !(isset($_GET['action']) && $_GET['action'] == "login")) {

+	header("Location: maintenance.php");

+	exit( );

+}

+

+$blockquery = dbquery("SELECT * FROM " . TABLEPREFIX . "fanfiction_blocks");

+while ($block = dbassoc($blockquery))

+{

+

+	if (!empty($block['block_variables']))

+	{

+		

+		$block_vars = @unserialize($block['block_variables']);

+		if ($block_vars)

+		{

+			$blocks[$block['block_name']] = $block_vars;

+		}

+		else {

+		 	// print_r($block);

+		}

+	}

+	$blocks[$block['block_name']]['title'] = $block['block_title'];

+	$blocks[$block['block_name']]['file'] = $block['block_file'];

+	$blocks[$block['block_name']]['status'] = $block['block_status'];

+}

+ 

+

+// This session variable is used to track the story views

+if(isset($_SESSION[SITEKEY."_viewed"])) $viewed = $_SESSION[SITEKEY."_viewed"];

+

+if(isset($_GET['ageconsent'])) $_SESSION[SITEKEY."_ageconsent"] = 1;

+if(isset($_GET['warning'])) $_SESSION[SITEKEY."_warned"][$_GET['warning']] = 1;

+

+if(file_exists("languages/{$language}.php")) require_once ("languages/{$language}.php");

+else require_once ("languages/en.php");

+if(is_dir(_BASEDIR."skins/$siteskin")) $skindir = _BASEDIR."skins/$siteskin";

+else if(is_dir(_BASEDIR."skins/".$settings['skin'])) $skindir = _BASEDIR."skins/".$defaultskin;

+else $skindir = _BASEDIR."default_tpls";

+if(USERUID) {

+	$prefs = dbquery("SELECT sortby, storyindex, tinyMCE FROM ".TABLEPREFIX."fanfiction_authorprefs WHERE uid = '".USERUID."'");

+	if(dbnumrows($prefs)) list($defaultsort, $displayindex, $tinyMCEAuthor) = dbrow($prefs);

+	if(!$tinyMCEAuthor) $tinyMCE = 0;

+}

+if(isset($_REQUEST['sort'])) $defaultsort = $_REQUEST['sort'] == "update" ? 1 : 0;

+define("_ORDERBY", " ORDER BY ".($defaultsort == 1 ? "updated DESC" : "stories.title ASC"));

+if($current == "viewstory"){

+	if(isset($chapid)) {

+		$squery = dbquery("SELECT sid, inorder FROM ".TABLEPREFIX."fanfiction_chapters WHERE chapid = ".$chapid." LIMIT 1");

+		list($sid, $chapter) = dbrow($squery);

+	}

+	$titlequery = dbquery("SELECT story.title, story.coauthors, "._PENNAMEFIELD." as penname, story.summary FROM ".TABLEPREFIX."fanfiction_stories as story, "._AUTHORTABLE." WHERE sid = '$sid' AND "._UIDFIELD." = story.uid LIMIT 1");

+	if($story = dbassoc($titlequery)) { 

+			$authlink[] = $story['penname'];

+		if($story['coauthors']) {

+			$coquery = dbquery("SELECT "._PENNAMEFIELD." as penname FROM "._AUTHORTABLE." LEFT JOIN ".TABLEPREFIX."fanfiction_coauthors as ca ON "._UIDFIELD." = ca.uid WHERE ca.sid = '$sid'");

+			while($co = dbassoc($coquery)) {

+				$authlink[] = $co['penname'];

+			}

+		}

+		$titleinfo = stripslashes($story['title'])." "._BY." ".implode(", ", $authlink);

+		$metaDesc = htmlspecialchars(stripslashes($story['summary']));

+		$filename = basename($titleinfo.".html");

+		$ie = strpos("msie", strtolower($_SERVER['HTTP_USER_AGENT'])) !== false ? true : false;

+		if ($ie) $filename = rawurlencode($filename);

+		//header("Content-Disposition: inline; filename=\"".$titleinfo."\"");

+ 	}

+}

+if($current == "viewuser" && isNumber($uid)) {

+	$author = dbquery("SELECT "._PENNAMEFIELD." as penname FROM "._AUTHORTABLE." WHERE "._UIDFIELD." = '".$uid."'");

+	list($penname) = dbrow($author);

+	$titleinfo = "$sitename :: $penname";

+}

+echo _DOCTYPE."<html><head>";

+echo "<meta charset='utf-8' />";

+if(!isset($titleinfo)) $titleinfo = "$sitename :: $slogan";

+if(isset($metaDesc)) echo "<meta name='description' content='$metaDesc'>";

+echo "<title>$titleinfo</title>";

+

+// ---------- Favicon ---------

+if (file_exists(_BASEDIR."favicon.ico")) 

+{

+	echo "<link rel='icon' href='"._BASEDIR."favicon.ico' type='image/x-icon' />\n<link rel='shortcut icon' href='"._BASEDIR."favicon.ico' type='image/xicon' />\n";

+}

+ 

+echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset="._CHARSET."\">";

+if (!isset($_GET['action']) || $_GET['action'] != "printable")

+{

+	echo "<script language=\"javascript\" type=\"text/javascript\" src=\"" . _BASEDIR . "includes/javascript.js\"></script>

+<link rel=\"alternate\" type=\"application/rss+xml\" title=\"$sitename RSS Feed\" href=\"" . _BASEDIR . "rss.php\">";

+}

+

+if (!isset($_GET['action']) || $_GET['action'] != "printable")

+{

+	if (!empty($tinyMCE))

+	{

+		if($tinyMCE == 1) {

+			echo "<script language=\"javascript\" type=\"text/javascript\" src=\"" . _BASEDIR . "tinymce/jscripts/tiny_mce/tiny_mce.js\"></script>";

+			include(_BASEDIR . "tinymce/init.php");

+		}

+		else {

+			echo "<script language=\"javascript\" type=\"text/javascript\" src=\"" . _BASEDIR . "tinymce4/js/tinymce/tinymce.min.js\"></script>";

+			include(_BASEDIR . "tinymce4/init.php");		

+		}

+	}

+}

+if(isset($displayform) && $displayform == 1) {

+echo "<script language=\"javascript\" type=\"text/javascript\" src=\""._BASEDIR."includes/xmlhttp.js\"></script>";

+echo "<script language=\"javascript\" type=\"text/javascript\">

+lang = new Array( );

+

+lang['Back2Cats'] = '"._BACK2CATS."';

+lang['ChooseCat'] = '"._CHOOSECAT."';

+lang['Categories'] = '"._CATEGORIES."';

+lang['Characters'] = '"._CHARACTERS."';

+lang['MoveTop'] = '"._MOVETOP."';

+lang['TopLevel'] = '"._TOPLEVEL."';

+lang['CatLocked'] = '"._CATLOCKED."';

+basedir = '"._BASEDIR."';

+

+categories = new Array( );

+characters = new Array( );

+\n";

+/*

+	$result = dbquery("SELECT * FROM ".TABLEPREFIX."fanfiction_categories ORDER BY leveldown, displayorder");

+$x = 0;

+	while($category = dbassoc($result)) {

+		echo "categories[$x] = new category(".$category['parentcatid'].", ".$category['catid'].", \"". str_replace('"', '\"', stripslashes($category['category']))."\", ".$category['locked'].", ".$category['displayorder'].");\r\n";

+		$catlist[$category['catid']] = array("name" => stripslashes($category['category']), "pid" => $category['parentcatid'], "locked" => (isADMIN ? 0 : $category['locked']), "order" => $category['displayorder'], "leveldown" => $category['leveldown']);

+		$x++;

+	}

+$x = 0;

+	$result = dbquery("SELECT charname, catid, charid FROM ".TABLEPREFIX."fanfiction_characters ORDER BY charname");

+	while($char = dbassoc($result)) {

+		echo "characters[$x] = new character(".$char['charid'].", ".$char['catid'].", \"".str_replace('"', '\"', stripslashes($char['charname']))."\");\r\n";

+		$charlist[$char['charid']] = array("name" => stripslashes($char['charname']), "catid" => $char['catid']);

+		$x++;

+	}

+*/

+echo "</script>";

+}

+if(file_exists("extra_header.php")) include_once("extra_header.php");

+if(file_exists("$skindir/extra_header.php")) include_once("$skindir/extra_header.php");

+if(!$displaycolumns) $displaycolumns = 1;

+$colwidth = floor(100/$displaycolumns);

+if(!empty($_GET['action']) && $_GET['action'] == "printable") {

+	if(file_exists("$skindir/printable.css")) echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"$skindir/printable.css\">";

+	else echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"default_tpls/printable.css\">";

+	echo "<script type='text/javascript'>

+<!--

+if (window.print) {

+    window.print() ;  

+} else {

+    var WebBrowser = '<OBJECT ID=\"WebBrowser1\" WIDTH=0 HEIGHT=0 CLASSID=\"CLSID:8856F961-340A-11D0-A96B-00C04FD705A2\"></OBJECT>';

+document.body.insertAdjacentHTML('beforeEnd', WebBrowser);

+    WebBrowser1.ExecWB(6, 2);//Use a 1 vs. a 2 for a prompting dialog box    WebBrowser1.outerHTML = \"\";  

+}

+-->

+</script>";

+}

+else {

+echo "<style type=\"text/css\">

+#columncontainer { margin: 1em auto; width: auto; padding: 5%;}

+#browseblock, #memberblock { width: 100%; padding: 0; margin: 0; float: left; border: 0px solid transparent; }

+.column { float: left; width: ".($colwidth - 1)."%; }

+html>body .column { width: $colwidth%; }

+.cleaner { clear: both; height: 1px; font-size: 1px; margin: 0; padding: 0; background: transparent; }

+#settingsform { margin: 0; padding: 0; border: none; }

+#settingsform FORM { width: 100%; margin: 0 10%; }

+#settingsform LABEL { float: left; display: block; width: 30%; text-align: right; padding-right: 10px; clear: left; }

+#settingsform DIV { clear: both;}

+#settingsform .fieldset SPAN { float: left; display: block; width: 30%; text-align: right; padding-right: 10px; clear: left;}

+#settingsform .fieldset LABEL { float: none; width: auto; display: inline; text-align: left; clear: none; }

+#settingsform { float: left; margin: 1ex 10%; }

+#settingsform .tinytoggle { text-align: center; }

+#settingsform .tinytoggle LABEL { float: none; display: inline; width: auto; text-align: center; padding: 0; clear: none; }

+#settingsform #submitdiv { text-align: center; width: 100%;clear: both; height: 3em; }

+#settingsform #submitdiv #submit { position: absolute; z-index: 10001; margin: 1em; }

+a.pophelp{

+    position: relative; /* this is the key*/

+    vertical-align: super;

+}

+

+a.pophelp:hover{z-index:100; border: none; text-decoration: none;}

+

+a.pophelp span{display: none; position: absolute; top: -25em; left: 20em; }

+

+a.pophelp:hover span{ /*the span will display just on :hover state*/

+    display:block;

+    position: absolute;

+    top: -3em; left: 8em; width: 225px;

+    border:1px solid #000;

+    background-color:#CCC; color:#000;

+    text-decoration: none;

+    text-align: left;

+    padding: 5px;

+    font-weight: normal;

+    visibility: visible;

+}

+.required { color: red; }

+.shim {

+	position: absolute;

+	display: none;

+	height: 0;

+	width:0;

+	margin: 0;

+	padding: 0;

+	z-index: 100;

+}

+

+.ajaxOptList {

+	background: #CCC;

+	border: 1px solid #000;

+	margin: 0;

+	position: absolute;

+	padding: 0;

+	z-index: 1000;

+	text-align: left;

+}

+.ajaxListOptOver {

+	padding: 4px;

+	background: #CCC;

+	margin: 0;

+}

+.ajaxListOpt {

+	background: #EEE;

+	padding: 4px;

+	margin: 0;

+}

+.multiSelect {

+	width: 300px;

+}

+

+</style>

+<link rel='stylesheet' type='text/css' href='$skindir/style.css' /> \n

+<meta name='viewport' content='width=device-width, initial-scale=1.0' />

+";

+}

+echo "</head>";

+$headerSent = true;

+include (_BASEDIR."includes/class.TemplatePower.inc.php");

+if($debug == 1) {

+	@ error_reporting(E_ALL);

+	echo "\n<!-- \$_SESSION \n"; print_r($_SESSION); echo " -->";

+	echo "\n<!-- \$_COOKIE \n"; print_r($_COOKIE); echo " -->";

+	echo "\n<!-- \$_POST \n"; print_r($_POST); echo " -->";

+}

+?>