Forum Permissions .php Modification

I'm having a bit of trouble modifiying a hack that I'm using (it's not made by me, I'm just trying to improve it via this way to make it more useful on the forums I work at). The hack is a Top 5 Stats table, it displays on the forum homepage the Top 5 Posters, Top 5 Newest Registrations, Top 5 Last Thread Replies, and most popular and most rated threads. Unfortunatly it for instance in the Topic related stats the forum permissions are not taken into account. Anyone can see any topic even if they can't go to the topic itself since it's in a private forum, it does get annoying after a while. How do you think I could go about making it permissions-friendly? The hack involves modified the root/index.php file and then one template addition. Here's the index.php additions:

PHP Code:

// Top 5 Statistics
// Top 5 Posters
$posts5 = $DB_site->query('SELECT userid,username,posts FROM user ORDER BY posts DESC LIMIT 5');
while ($posts5top = mysql_fetch_array($posts5)):
    ++$posts5topnbsp;
    $posts5name .= "? <a href=member.php?s=$session[sessionhash]&action=getinfo&userid=$posts5top[userid]>$posts5top[username]</a><br>";
    $posts5post .= "$posts5top[posts] ?<br>";

endwhile;
// Top 5 Posters
// Top 5 New Members
$user = $DB_site->query('SELECT userid,posts,username,joindate FROM user ORDER BY joindate DESC LIMIT 5');
while ($usertop = mysql_fetch_array($user)):
    ++$usertopnbsp;
    $username .= "<a href=member.php?s=$session[sessionhash]&action=getinfo&userid=$usertop[userid]>$usertop[username]</a><br>";
    $userposts .= "$usertop[posts]<br>";

endwhile;
// Top 5 New Members
// Top 5 Thread Replys
$pop = $DB_site->query('SELECT title,threadid,lastpost,lastposter,views FROM thread ORDER BY lastpost DESC LIMIT 5');
while ($poptop = mysql_fetch_array($pop)):
    ++$poptopnbsp;
    $popthread .= "<a href=showthread.php?s=$session[sessionhash]&threadid=$poptop[threadid]&goto=newpost>$poptop[title]</a><br>";
    $poplastposter .= "$poptop[lastposter]<br>";
    $popviews .= "$poptop[views]<br>";

endwhile;
// Top 5 Thread Replys
// Top 1 Most Popular Thread
$pop1 = $DB_site->query('SELECT title,threadid,views FROM thread ORDER BY views DESC LIMIT 1');
while ($pop1top = mysql_fetch_array($pop1)):
    ++$pop1topnbsp;
    $pop1title .= "<a href=showthread.php?s=$session[sessionhash]&threadid=$pop1top[threadid]>$pop1top[title]</a>";
    $pop1views .= "$pop1top[views]";

endwhile;
// Top 1 Most Popular Thread
// Top 1 Most Rated Thread
$rated = $DB_site->query('SELECT title,threadid,votenum FROM thread ORDER BY votenum DESC LIMIT 1');
while ($ratedtop = mysql_fetch_array($rated)):
    ++$ratedtopnbsp;
    $ratedtitle .= "<a href=showthread.php?s=$session[sessionhash]&threadid=$ratedtop[threadid]>$ratedtop[title]</a>";
    $ratedrating .= "$ratedtop[votenum]";

endwhile;
// Top 1 Most Rated Thread
eval("\$top5threadstats = \"".gettemplate("n_statistics")."\";");
// End - Top 5 Statistics 


And I doubt the solution is in the templates... Although I could be wrong. Can anyone help? I'm still not sure who created the hack, as the person who gave it to me installed the hack on his own boards and then gave it to me, and he didn't know either.

Deepest thanks to anyone who can help.