Изкарване на аватарите от phpbb3 forum в код

if ($_POST['submit']) {
$user_avatar = htmlspecialchars($user->data['user_avatar']);
$avtor = htmlspecialchars($user->data['username']);
$komentar = htmlspecialchars($_POST['komentar']);
$self = $_SERVER['PHP_SELF'];
$user_group_comment = $user->data['group_id'];
$comment = $_POST['text']; 
$komentar = preg_replace('/(\r\n|\n|\r)/','<br />',$komentar);
$komentar=preg_replace("/\[b\](.+?)\[\/b\]/s", '<b>$1</b>',$komentar);
$komentar=preg_replace("/\[i\](.+?)\[\/i\]/s", '<i>$1</i>',$komentar);
$komentar=preg_replace("/\[u\](.+?)\[\/u\]/s", '<u>$1</u>',$komentar);
$komentar=preg_replace("/\[s\](.+?)\[\/s\]/s", '<s>$1</s>',$komentar);
$komentar=preg_replace("/\[m\](.+?)\[\/m\]/s", '<marquee  onmouseout="this.start()" onmouseover="this.stop()" loop="-1" scrollamount="3" width="30%">$1</marquee>',$komentar);
$komentar=preg_replace("/\[quote\](.+?)\[\/quote\]/s", '<table cellspacing="1" width="100%" border="0"><tr><td>Цитат:</td></tr><tr><td width="100%" style="background-color:#C7C7C7;border:solid 1px black">$1</td></tr></table>',$komentar);
$komentar=preg_replace("/\[quote\=(.+?)](.+?)\[\/quote\]/s", '<table cellspacing="1" width="100%" border="0"><tr><td>$1 каза:</td></tr><tr><td width="100%" style="background-color:#C7C7C7;border:solid 1px black">$2</td></tr></table>',$komentar);
$komentar=preg_replace("/\[url\](.+?)\[\/url\]/s", '<a href="$1" target="_blank" class="url">$1</a>',$komentar);
$komentar=preg_replace("/\[url\=(.+?)\](.+?)\[\/url\]/s", '<a href="$1" target="_blank" class="url">$2</a>',$komentar);
$komentar=preg_replace("/\[img\](.+?)\[\/img\]/s", '<img src="$1" />',$komentar);
$komentar=preg_replace("/\[img\=(.+?)](.+?)\[\/img\]/s", '<a href="$1" target="_blank">$2 - Изображение</a>',$komentar);
$komentar=preg_replace("/\[color\=(.+?)\](.+?)\[\/color\]/s", '<span style="color:$1">$2</span>',$komentar);
$komentar=preg_replace("/\[size\=(.+?)\](.+?)\[\/size\]/s", '<span style="font-size:$1">$2</span>',$komentar);
$komentar=preg_replace("/\[code\](.+?)\[\/code\]/s", '<div style="-moz-border-radius: 5px;-webkit-border-radius: 5px;background: #FFF; padding: 5px; border: 1px solid #DDD; color: teal;"><code>$1</code></div>', $komentar);
$komentar = str_replace(":)",'<img src="emoticons/smile.gif" style="margin-left: 2px;margin-right: 2px">',$komentar);
$komentar = str_replace(":P",'<img src="emoticons/tong.gif" style="margin-left: 2px;margin-right: 2px">',$komentar);
$komentar = str_replace(":D",'<img src="emoticons/bigsmile.gif" style="margin-left: 2px;margin-right: 2px">',$komentar);
$komentar = str_replace(":*",'<img src="emoticons/kiss.gif" style="margin-left: 2px;margin-right: 2px">',$komentar);
$komentar = str_replace(";(",'<img src="emoticons/crying.gif" style="margin-left: 2px;margin-right: 2px">',$komentar);
$komentar = str_replace(";)",'<img src="emoticons/wink.gif" style="margin-left: 2px;margin-right: 2px">',$komentar);
$komentar = str_replace("(wave)",'<img src="emoticons/hi.gif" style="margin-left: 2px;margin-right: 2px">',$komentar);
$komentar = str_replace("(nod)",'<img src="emoticons/nod.gif" style="margin-left: 2px;margin-right: 2px">',$komentar);
$komentar = str_replace("(finger)",'<img src="emoticons/finger.gif" style="margin-left: 2px;margin-right: 2px">',$komentar);
$komentar = str_replace("(mooning)",'<img src="emoticons/mooning.gif" style="margin-left: 2px;margin-right: 2px">',$komentar);
$komentar = str_replace("(wondering)",'<img src="emoticons/wondering.gif" style="margin-left: 2px;margin-right: 2px">',$komentar);
$komentar = str_replace("(yes)",'<img src="emoticons/yes.gif" style="margin-left: 2px;margin-right: 2px">',$komentar);
$komentar = str_replace("(no)",'<img src="emoticons/no.gif" style="margin-left: 2px;margin-right: 2px">',$komentar);
$komentar = str_replace("(party)",'<img src="emoticons/party.gif" style="margin-left: 2px;margin-right: 2px">',$komentar);
$date = date("d.M.Y, H:i");
	if($komentar == NULL){
		echo "<div class='notification error png_bg'>
				<a href='#' class='close'><img src='images/icons/cross_grey_small.png' title='Close this notification' alt='close' /></a>
				<div><b>Всички полета са задължителни!!!</b></div></div>";
	}
	else
	{
$sql = "INSERT INTO com_news (`novina`, `user_avatar`, `avtor`, `date`, `komentar`, `user_group_comment`) VALUES ('$id', '$user_avatar', '$avtor', '$date', '$komentar','$user_group_comment')";
mysql_query($sql) or die (mysql_error());
echo "<meta http-equiv='refresh' content='0;url=$self?id=$data[id]'>";
echo "<div class='notification success png_bg'>
				<a href='#' class='close'><img src='images/icons/cross_grey_small.png' title='Close this notification' alt='close' /></a>
				<div>Коментара е добавен успешно.</div></div>";
}
}

$sql = "SELECT * FROM com_news WHERE novina='$id' ORDER BY id DESC";
$result = mysql_query($sql) or die (mysql_error());
while($com = mysql_fetch_assoc($result)) 
{
echo "<table><center><tr> ";
if (($com[user_group_comment]) == 5){
echo"<font color='#AA0000'>";
}
if (($com[user_group_comment]) == 9){
echo"<font color='#00CCFF'>";
}
if (($com[user_group_comment]) == 4){
echo"<font color='#00AA00'>";
}
if (($com[user_group_comment]) == 10){
echo"<font color='#FF00FF'>";
}
if (($com[user_group_comment]) == 8){
echo"<font color='#0000FF'>";
}
if (($com[user_group_comment]) == 33){
echo"<font color='#FF6600'>";
}
if (($com[user_group_comment]) == 13){
echo"<font color='#CC00FF'>";
}
if (($com[user_group_comment]) == 300){
echo"<font color='#FF6600'>";
}
else{
echo"<div class='wmcomments'>
	<div class='binner'>
		<div class='comments'>
			<div class='dleft'>
				<div class='avatarbox'><img src=\"$phpbb_root_path/download/file.php?avatar=".$com['user_avatar']."\" alt=\"Твоят аватар\"/></b></div>
			</div>
			<div class='dright'>
				<h3 class='nickname'>$com[avtor]";
}
echo"
</font></h3>
				<span class='date'>$com[date]</span>
				<div class='maincont'>
				  $com[komentar]
				<div class='clr'></div>
				</div>
			</div>
			<div class='clr'></div>
		</div>
	</div>
</div></td></tr></center></table>"; 
}

$user_avatar = htmlspecialchars($user->data['user_avatar']);