<?php
define('IN_PHPBB', true);
$phpbb_root_path = './';
include($phpbb_root_path . 'extension.inc');
include($phpbb_root_path . 'common.'.$phpEx);
include($phpbb_root_path . 'includes/functions_database.'.$phpEx);
include($phpbb_root_path . 'includes/bbcode.'.$phpEx);
include($phpbb_root_path . 'includes/functions_post.'.$phpEx);
include($phpbb_root_path . 'language/lang_' . $board_config['default_lang'] . '/lang_database.' . $phpEx);
$userdata = session_pagestart($user_ip, PAGE_DATABASE);
init_userprefs($userdata);
$page_title = $lang['Databases'];
if ($mode == 'upload')
{
$gen_simple_header = TRUE;
}
include($phpbb_root_path . 'includes/page_header.'.$phpEx);
$dir_id = ( isset($HTTP_POST_VARS['dir_id']) ) ? $HTTP_POST_VARS['dir_id'] : $HTTP_GET_VARS['dir_id'];
if( isset($HTTP_POST_VARS['mode']) || isset($HTTP_GET_VARS['mode']) )
{
$mode = ( isset($HTTP_POST_VARS['mode']) ) ? $HTTP_POST_VARS['mode'] : $HTTP_GET_VARS['mode'];
}
else
{
$mode = "";
}
if( isset($HTTP_POST_VARS['add']) )
{
$mode = 'add';
}
$auth_add = $userdata['user_level'] == $database_config['allow_add'] || $userdata['user_level'] == ADMIN || ($database_config['allow_add'] == all && $userdata['user_id'] != ANONYMOUS);
$auth_edit = $userdata['user_level'] == $database_config['allow_edit'] || $userdata['user_level'] == ADMIN || ($database_config['allow_edit'] == all && $userdata['user_id'] != ANONYMOUS);
$auth_report = $userdata['user_level'] == $database_config['allow_report'] || $userdata['user_level'] == ADMIN || ($database_config['allow_report'] == all && $userdata['user_id'] != ANONYMOUS);
$auth_report_edit = $userdata['user_level'] == $database_config['allow_report_edit'] || $userdata['user_level'] == ADMIN || ($database_config['allow_report_edit'] == all && $userdata['user_id'] != ANONYMOUS);
$auth_rate = $userdata['user_level'] == $database_config['allow_rate'] || $userdata['user_level'] == ADMIN || ($database_config['allow_rate'] == all && $userdata['user_id'] != ANONYMOUS);
$auth_upload = $userdata['user_level'] == $database_config['allow_upload'] || $userdata['user_level'] == ADMIN || ($database_config['allow_upload'] == all && $userdata['user_id'] != ANONYMOUS);
if ( ($mode == 'add' && !$auth_add) || (($mode == 'edit' || $mode == 'delete') && !$auth_edit) || (( $mode == 'reports' || $mode == 'report' || $mode == 'report_delete' || $mode == 'report_edit' ) && $database_config['disable_reports']) || ( $mode == 'report' && !$auth_report ) || (( $mode == 'report_edit' || $mode == 'report_delete' ) && !$auth_report_edit ) || ( $mode == 'rate' && $database_config['disable_rates']) || ( $mode == 'rate' && !$auth_rate ) || ( $mode == 'upload' && $database_config['disable_uploads']) || ( $mode == 'upload' && !$auth_upload ) )
{
message_die(GENERAL_MESSAGE, $lang['Not_authorized']);
}
if ($mode == 'delete' || $mode == 'modify' || $mode == 'create' || $mode == 'report' || $mode == 'reports' || $mode == 'report_edit' || $mode == 'report_delete' )
{
$row = get_dir($dir_id);
$dir_name = $row['dir_name'];
}
if ($mode == 'report' || $mode == 'reports' || $mode == 'modify' || $mode == 'delete' || $mode == 'report_delete' )
{
$row = get_entry('entry', $entry_id);
$entry_name = $row['field1'];
}
if( !empty($mode) )
{
switch($mode)
{
case 'rate':
rate_entry($userdata['user_id'], $entry_id, $rating);
break;
case 'reports':
$template->set_filenames(array(
"body" => "database_reports_body.tpl",
));
reports_display($entry_id);
$template->assign_vars(array(
'L_VIEW_REPORTS' => $lang['View_reports'],
'L_DIRECTORIES' => $lang['Directories'],
'U_DIRECTORIES' => append_sid("database_dir.$phpEx"),
'DATABASE' => $dir_name,
'U_DATABASE' => append_sid("database.$phpEx?dir_id=$dir_id"),
'ENTRY' => $entry_name,
'U_ENTRY' => append_sid("database.$phpEx?dir_id=$dir_id&mode=display&id=$entry_id"),
'L_REPORT' => ( $auth_report ) ? $lang['Write_report'] : '',
'U_REPORT' => append_sid("database.$phpEx?dir_id=$dir_id&mode=report&id=$entry_id"),
'L_NO_ENTRIES' => $lang['No_entries'],
));
$template->pparse("body");
break;
case 'report':
case 'report_edit':
$template->set_filenames(array(
"body" => "database_report_body.tpl",
));
if ( $mode == 'report_edit' || $mode == 'report_delete' )
{
$sql = "SELECT r.report_text, r.user_id, e.id, e.field1
FROM ". DATABASE_REPORTS_TABLE ." r, ". DATABASE_TABLE ." e
WHERE r.report_id = $report_id AND r.id = e.id";
if( !$result = $db->sql_query($sql) )
{
message_die(GENERAL_ERROR, "Couldn't obtain report_text.", "", __LINE__, __FILE__, $sql);
}
$row = $db->sql_fetchrow($result);
if ($database_config['allow_report_edit'] == all && $userdata['user_id'] != $row['user_id'] && $userdata['user_level'] != ADMIN )
{
message_die(GENERAL_MESSAGE, $lang['Not_own']);
}
}
generate_smilies('inline', PAGE_DATABASE);
$entry_id = $row['id'];
$entry_name = $row['field1'];
$template->assign_vars(array(
'REPORT_TEXT' => $row['report_text'],
'L_EMPTY_REPORT' => $lang['Empty_report'],
'L_PREVIEW' => $lang['Preview'],
'L_SUBMIT' => $lang['Submit'],
'L_CANCEL' => $lang['Cancel'],
'L_FONT_COLOR' => $lang['Font_color'],
'L_COLOR_DEFAULT' => $lang['color_default'],
'L_COLOR_DARK_RED' => $lang['color_dark_red'],
'L_COLOR_RED' => $lang['color_red'],
'L_COLOR_ORANGE' => $lang['color_orange'],
'L_COLOR_BROWN' => $lang['color_brown'],
'L_COLOR_YELLOW' => $lang['color_yellow'],
'L_COLOR_GREEN' => $lang['color_green'],
'L_COLOR_OLIVE' => $lang['color_olive'],
'L_COLOR_CYAN' => $lang['color_cyan'],
'L_COLOR_BLUE' => $lang['color_blue'],
'L_COLOR_DARK_BLUE' => $lang['color_dark_blue'],
'L_COLOR_INDIGO' => $lang['color_indigo'],
'L_COLOR_VIOLET' => $lang['color_violet'],
'L_COLOR_WHITE' => $lang['color_white'],
'L_COLOR_BLACK' => $lang['color_black'],
'L_FONT_SIZE' => $lang['Font_size'],
'L_FONT_TINY' => $lang['font_tiny'],
'L_FONT_SMALL' => $lang['font_small'],
'L_FONT_NORMAL' => $lang['font_normal'],
'L_FONT_LARGE' => $lang['font_large'],
'L_FONT_HUGE' => $lang['font_huge'],
'L_REPORT' => ($mode == 'report' ) ? $lang['Add_report'] : $lang['Edit_report'],
'L_DIRECTORIES' => $lang['Directories'],
'U_DIRECTORIES' => append_sid("database_dir.$phpEx"),
'DATABASE' => $dir_name,
'U_DATABASE' => append_sid("database.$phpEx?dir_id=$dir_id"),
'ENTRY' => $entry_name,
'U_ENTRY' => append_sid("database.$phpEx?dir_id=$dir_id&mode=display&id=$entry_id"),
'L_REPORTS' => $lang['Return_reports'],
'U_REPORTS' => append_sid("database.$phpEx?dir_id=$dir_id&mode=reports&id=$entry_id"),
'S_REPORT_ACTION' => ($mode == 'report' ) ? append_sid("database.$phpEx?dir_id=$dir_id&mode=report&id=$entry_id") : append_sid("database.$phpEx?dir_id=$dir_id&mode=report_edit&report_id=$report_id"),
'S_HIDDEN_FIELDS' => $s_hidden_fields,
));
$entry_id = intval($HTTP_GET_VARS[id]);
if ($submit)
{
$bbcode_html = $board_config['allow_html'];
$bbcode_on = $board_config['allow_bbcode'];
$smilies_on = $board_config['allow_smilies'];
$report = ( isset($HTTP_POST_VARS['report']) ) ? trim(strip_tags($HTTP_POST_VARS['report'])) : '';
$report_bbcode_uid = ( $bbcode_on ) ? make_bbcode_uid() : '';
$report = prepare_message(trim($report), $html_on, $bbcode_on, $smilies_on, $report_bbcode_uid);
$current_time = time();
if ( $mode == 'report' )
{
$sql = "INSERT INTO ". DATABASE_REPORTS_TABLE ." (id, user_id, report_text, report_bbcode_uid, report_time)
VALUES ($entry_id, " . $userdata['user_id'] . ", '$report', '" . str_replace("\'", "''", $report_bbcode_uid) . "', $current_time)";
if( !$result = $db->sql_query($sql) )
{
message_die(GENERAL_ERROR, 'Couldn\'t add report.', '', __LINE__, __FILE__, $sql);
}
$message = $lang['Report_added'].'<br /><br />[ <a href="'. append_sid("database.$phpEx?dir_id=$dir_id&mode=reports&id=$row[id]") .'" class="gensmall">'.$lang['Return_reports'].'</a> ] <br />[ <a href="'. append_sid("database.$phpEx?dir_id=$dir_id&mode=report&id=$entry_id") .'" class="gensmall">'.$lang['Write_report'].'</a> ]<br /><br />[ <a href="'. append_sid("database.$phpEx?dir_id=$dir_id&mode=display&id=$entry_id") .'" class="gensmall">'.sprintf($lang['Return'], $entry_name).'</a> ]<br />[ <a href="'. append_sid("database.$phpEx?dir_id=$dir_id") .'" class="gensmall">'.sprintf($lang['Return'], $dir_name).'</a> ]<br />[ <a href="'. append_sid("database_dir.$phpEx") .'" class="gensmall">'.$lang['Dir_return'].'</a> ]';
message_die(GENERAL_MESSAGE, $message);
}
else if ( $mode == 'report_edit' )
{
$sql = "UPDATE ". DATABASE_REPORTS_TABLE ."
SET user_id = ". $userdata['user_id'] .", report_text = '$report', report_bbcode_uid = '" . str_replace("\'", "''", $report_bbcode_uid) . "', report_time = $current_time
WHERE report_id = $report_id";
if( !$result = $db->sql_query($sql) )
{
message_die(GENERAL_ERROR, 'Couldn\'t update report.', '', __LINE__, __FILE__, $sql);
}
$message = $lang['Report_updated'].'<br /><br />[ <a href="'. append_sid("database.$phpEx?dir_id=$dir_id&mode=reports&id=$row[id]") .'" class="gensmall">'.$lang['Return_reports'].'</a> ]<br /><br />[ <a href="'. append_sid("database.$phpEx?dir_id=$dir_id&mode=display&id=$row[id]") .'" class="gensmall">'.sprintf($lang['Return'], $entry_name).'</a> ]<br />[ <a href="'. append_sid("database.$phpEx?dir_id=$dir_id") .'" class="gensmall">'.sprintf($lang['Return'], $dir_name).'</a> ]<br />[ <a href="'. append_sid("database_dir.$phpEx") .'" class="gensmall">'.$lang['Dir_return'].'</a> ]';
message_die(GENERAL_MESSAGE, $message);
}
}
else if ( $preview )
{
$bbcode_on = ( !$board_config['allow_bbcode'] ) ? 0 : ( $submit || $refresh ) ? ( ( !empty($HTTP_POST_VARS['disable_bbcode']) ) ? 0 : TRUE ) : ( ( $userdata['user_id'] == ANONYMOUS ) ? $board_config['allow_bbcode'] : $userdata['user_allowbbcode'] );
$smilies_on = ( !$board_config['allow_smilies'] ) ? 0 : ( $submit || $refresh ) ? ( ( !empty($HTTP_POST_VARS['disable_smilies']) ) ? 0 : TRUE ) : ( ( $userdata['user_id'] == ANONYMOUS ) ? $board_config['allow_smilies'] : $userdata['user_allowsmile'] );
$report_text = ( isset($HTTP_POST_VARS['report']) ) ? trim(strip_tags($HTTP_POST_VARS['report'])) : '';
$orig_word = array();
$replacement_word = array();
obtain_word_list($orig_word, $replacement_word);
$bbcode_uid = ( $bbcode_on ) ? make_bbcode_uid() : '';
$preview_report = stripslashes(prepare_message(addslashes(unprepare_message($report_text)), $html_on, $bbcode_on, $smilies_on, $bbcode_uid));
$preview_report = ( $bbcode_on ) ? bbencode_second_pass($preview_report, $bbcode_uid) : '';
$preview_report = ( !empty($preview_report) ) ? preg_replace($orig_word, $replacement_word, $preview_report) : '';
$preview_report = make_clickable($preview_report);
$preview_report = ( $smilies_on ) ? smilies_pass($preview_report) : '';
$preview_report = str_replace("\n", "\n<br />\n", $preview_report);
$report_time = create_date($board_config['default_dateformat'], time(), $board_config['board_timezone']);
$template->assign_vars(array(
'L_PREVIEW_REPORT' => $lang['Preview'],
'USER' => sprintf($lang['Writes'], $userdata['username'], $report_time),
'TEXT' => $preview_report,
'REPORT_TEXT' => $report_text,
));
$template->assign_block_vars('switch_preview_report', array());
}
$template->pparse("body");
break;
case 'report_delete':
$sql = "DELETE FROM ". DATABASE_REPORTS_TABLE ." WHERE report_id = $report_id";
if( !$result = $db->sql_query($sql) )
{
message_die(GENERAL_ERROR, "Couldn't delete report.", "", __LINE__, __FILE__, $sql);
}
$message = $lang['Report_deleted'].'<br /><br />[ <a href="'. append_sid("database.$phpEx?dir_id=$dir_id&mode=reports&id=$entry_id") .'" class="gensmall">'.$lang['Return_reports'].'</a> ]<br /><br />[ <a href="'. append_sid("database.$phpEx?dir_id=$dir_id&mode=display&id=$entry_id") .'" class="gensmall">'.sprintf($lang['Return'], $entry_name).'</a> ]<br />[ <a href="'. append_sid("database.$phpEx?dir_id=$dir_id") .'" class="gensmall">'.sprintf($lang['Return'], $dir_name).'</a> ]<br />[ <a href="'. append_sid("database_dir.$phpEx") .'" class="gensmall">'.$lang['Dir_return'].'</a> ]';
message_die(GENERAL_MESSAGE, $message);
break;
case 'upload':
$template->set_filenames(array(
"body" => "database_upload_body.tpl")
);
$s_hidden_fields = '<input type="hidden" name="submit" value="true" />';
$apath = ereg_replace ("\\\\","/",__FILE__);
$apath = dirname ($apath);
$apath = trim($apath);
$path = $apath.'/'.$database_config['upload_dir'];
$size_limit = $database_config['size_limit'];
$size = $database_config['size_limits'];
if ( $submit )
{
$result = '';
if( $file_name == '' )
{
$result .= $lang['No_file'];
}
else
{
if( file_exists("$path/$file_name") )
{
$result .= sprintf($lang['File_exists'], $file_name);
}
else
{
$extension = $file_type;
if ( strstr($extension,"jpeg") || strstr($extension,"gif") || strstr($extension,"html") || strstr($extension,"avi"))
{
$extension = $database_config['filetypes'];
}
else
{
$result .= sprintf($lang['File_type_disallowed'], $file_type);
}
if( ($size_limit == 1 ) && ($file_size > $size) )
{
$result .= $lang['File_too_big'];
}
else
{
if ( is_integer($file_size) )
{
if( $file_size >= 1048576 )
{
$file_size = sprintf("%.2f MB", ( $file_size / 1048576 ));
}
else if( $file_size >= 1024 )
{
$file_size = sprintf("%.2f KB", ( $file_size / 1024 ));
}
else
{
$file_size = $file_size .' Bytes';
}
}
@copy($file, "$path/$file_name") || $result .= sprintf($lang['No_upload'], $database_config['upload_dir']);
if( file_exists("$path/$file_name") )
{
$name = '<a href="javascript:filename(\''.$file_name.'\')">'.$file_name.'</a>';
$type = '<a href="javascript:filetype(\''.$file_type.'\')">'.$file_type.'</a>';
$result .= sprintf($lang['Yes_upload'], $name, $file_size, $type);
}
}
}
}
$template->assign_vars(array(
'UPLOAD_RESULT' => $result,
));
}
$size = ( $database_config['size_limits'] >= 1048576 ) ? sprintf("%.2f MB", ( $database_config['size_limits'] / 1048576 )) : ( $database_config['size_limits'] >= 1024 ) ? sprintf("%.2f KB", ( $database_config['size_limits'] / 1024 )) : sprintf("%.2f Bytes", $database_config['size_limits']);
$template->assign_vars(array(
'L_UPLOAD' => $lang['Upload'],
'L_UPLOAD_EXPLAIN' => sprintf($lang['Upload_explain'], $size, $database_config['filetypes']),
'L_SUBMIT' => $lang['Uploading'],
'L_CLOSE' => $lang['Close_window'],
'S_HIDDEN_FIELDS' => $s_hidden_fields,
'S_UPLOAD_ACTION' => append_sid("database.$phpEx?dir_id=$dir_id&mode=upload"),
));
$template->pparse("body");
break;
case 'add':
case 'display':
case 'edit':
if ($mode == 'edit' || $mode == 'display' )
{
$newmode = 'modify';
$action = ( $mode == 'display' ) ? $lang['Viewing_entry'] : $lang['Editing_entry'];
$buttonvalue = $lang['Update'];
$entry_id = intval($HTTP_GET_VARS[id]);
$row = get_entry('entry', $entry_id);
$field1 = $row['field1'];
$field1a = $row['field1a'];
$field2 = $row['field2'];
$field2a = $row['field2a'];
if ( $mode == 'display' || $mode == '' )
{
if ( strtolower(substr($field1a, 0, 7)) != 'http://' )
{
$field1a = 'http://'. $field1a;
}
else
{
$field1a = $field1a;
}
$field1 = ( !empty($row['field1a']) ) ? '<a href="'. $field1a . '" target="new">'. $row['field1'] .'</a>' : $row['field1'];
if ( strtolower(substr($field2a, 0, 7)) != 'http://' )
{
$field2a = 'http://'. $field2a;
}
else
{
$fielda = $field2a;
}
$field2 = ( !empty($row['field2a']) && $mode == 'display' ) ? '<a href="'. $field2a . '" target="new">'. $row['field2'] .'</a>' : $row['field2'];
}
$field3 = $row['field3'];
$field4 = $row['field4'];
$field5 = $row['field5'];
$field5 = $row['field5'];
$field6 = $row['field6'];
$field7 = $row['field7'];
$field8 = ( $mode == 'display' ) ? str_replace("\n", "\n<br />\n", $row['field8']) : $row['field8'];
$field9 = ( $mode == 'display' ) ? str_replace("\n", "\n<br />\n", $row['field9']) : $row['field9'];
$filetype = $row['filetype'];
if ($filetype == 'video/avi')
{
$file = '<embed src="'.$phpbb_root_path.$database_config['upload_dir'].'/'.$row['filename'].'"></embed>';
}
else if ($filetype == 'image/gif' || $filetype == 'image/jpeg')
{
$file = '<img src="'.$phpbb_root_path.$database_config['upload_dir'].'/'.$row['filename'].'">';
}
$filename = $row['filename'];
if ( !empty($row['filename']) && $mode == 'display' )
{
$template->assign_block_vars('switch_file_exists', array());
}
$added_updated = ( $row['edit_count'] == 0 ) ? sprintf($lang['Added'], create_date($board_config['default_dateformat'], $row['added_updated'], $board_config['default_timezone'])) : sprintf($lang['Updated'], create_date($board_config['default_dateformat'], $row['added_updated'], $board_config['default_timezone']));
$user = sprintf($lang['By'], '<a href="' . append_sid("profile.$phpEx?mode=viewprofile&" . POST_USERS_URL . "=" . $row['user_id']) . '">' . $row['username'] . '</a>');
$row = get_dir($dir_id);
$dir_name = $row['dir_name'];
}
else
{
$newmode = 'create';
$action = $lang['Adding_entry'];
$buttonvalue = $lang['Add'];
$row = get_dir($dir_id);
$dir_name = $row['dir_name'];
}
if ($mode == 'edit' || $mode == 'add' )
{
$template->set_filenames(array(
"body" => "database_edit_body.tpl")
);
}
else
{
$template->set_filenames(array(
"body" => "database_display_body.tpl")
);
rate_entries();
}
$s_hidden_fields = '<input type="hidden" name="mode" value="' . $newmode .'" /><input type="hidden" name="' . id . '" value="' . $entry_id . '" />';
if ($mode == 'display' )
{
$sql = "SELECT COUNT(report_id) AS total
FROM ". DATABASE_REPORTS_TABLE ."
WHERE id = $entry_id";
if ( !$result = $db->sql_query($sql) )
{
message_die(GENERAL_ERROR, 'Could not retrieve total reports.', '', __LINE__, __FILE__, $sql);
}
$row = $db->sql_fetchrow($result);
$reports = ( $row['total'] == 1 ) ? sprintf($lang['Read_report'], $row['total']) : sprintf($lang['Read_reports'], $row['total']);
$template->assign_vars(array(
'L_REPORTS' => ( $row['total'] != 0 && $database_config['display_reports'] != 0 ) ? ( ( $row['total'] == 1 ) ? ( ( $row['total'] <= $database_config['display_reports'] ) ? sprintf($lang['Report'], $row['total']) : sprintf($lang['Report'], $database_config['display_reports']) ) : ( ( $row['total'] <= $database_config['display_reports'] ) ? sprintf($lang['Reports'], $row['total']) : sprintf($lang['Reports'], $database_config['display_reports']) ) ) : '',
'L_VIEW_REPORTS' => ( $row['total'] != 0 ) ? $reports : '',
'U_VIEW_REPORTS' => append_sid("database.$phpEx?dir_id=$dir_id&mode=reports&id=$entry_id"),
'L_REPORT' => ( $auth_report ) ? $lang['Write_report'] : '',
'U_REPORT' => append_sid("database.$phpEx?dir_id=$dir_id&mode=report&id=$entry_id"),
'L_DIRECTORIES' => $lang['Directories'],
'U_DIRECTORIES' => append_sid("database_dir.$phpEx"),
'DATABASE' => $dir_name,
'U_DATABASE' => append_sid("database.$phpEx?dir_id=$dir_id"),
'L_ENTRY' => get_entry('field1',$entry_id),
'U_ENTRY' => append_sid("database.$phpEx?dir_id=$dir_id&mode=display&id=$entry_id"),
));
if ( $database_config['disable_reports'] == 0 && $auth_report )
{
reports_display($entry_id);
$template->assign_block_vars('switch_disable_reports', array());
}
}
if ( $auth_upload && $database_config['disable_uploads'] == 0 )
{
$template->assign_block_vars('switch_disable_uploads', array());
}
$template->assign_vars(array(
'S_ENTRY_ACTION' => append_sid("database.$phpEx?dir_id=$dir_id"),
'S_HIDDEN_FIELDS' => $s_hidden_fields,
'S_SUBMIT_VALUE' => $buttonvalue,
'L_EMPTY_FIELD1' => $lang['No_title'],
'L_ACTION' => $action,
'L_CANCEL' => $lang['Cancel'],
'L_UPLOAD' => $lang['Upload'],
'U_UPLOAD' => append_sid("database.$phpEx?dir_id=$dir_id&mode=upload"),
'L_FILENAME' => $lang['Filename'],
'L_FILETYPE' => $lang['Filetype'],
'FILENAME' => $filename,
'FILETYPE' => $filetype,
'FILE' => $file,
'L_FIELD1' => $database_config['field1'],
'L_FIELD1a' => $database_config['field1a'],
'L_FIELD2' => $database_config['field2'],
'L_FIELD2a' => $database_config['field2a'],
'L_FIELD3' => $database_config['field3'],
'L_FIELD4' => $database_config['field4'],
'L_FIELD5' => $database_config['field5'],
'L_FIELD6' => $database_config['field6'],
'L_FIELD7' => $database_config['field7'],
'L_FIELD8' => $database_config['field8'],
'L_FIELD9' => $database_config['field9'],
'L_DIRECTORIES' => $lang['Directories'],
'U_DIRECTORIES' => append_sid("database_dir.$phpEx"),
'DATABASE' => $dir_name,
'U_DATABASE' => append_sid("database.$phpEx?dir_id=$dir_id"),
'L_ADDED_UPDATED' => $added_updated,
'USER' => $user,
'FIELD1' => $field1,
'FIELD1a' => $field1a,
'FIELD2' => $field2,
'FIELD2a' => $field2a,
'FIELD3' => $field3,
'FIELD4' => $field4,
'FIELD5' => $field5,
'FIELD6' => $field6,
'FIELD7' => $field7,
'FIELD8' => $field8,
'FIELD9' => $field9,
'WIDTH_FIELD1' => $database_config['width1'],
'WIDTH_FIELD1a' => $database_config['width1a'],
'WIDTH_FIELD2' => $database_config['width2'],
'WIDTH_FIELD2a' => $database_config['width2a'],
'WIDTH_FIELD3' => $database_config['width3'],
'WIDTH_FIELD4' => $database_config['width4'],
'WIDTH_FIELD5' => $database_config['width5'],
'WIDTH_FIELD6' => $database_config['width6'],
'WIDTH_FIELD7' => $database_config['width7'],
'WIDTH_FIELD8' => $database_config['width8'],
'WIDTH_FIELD9' => $database_config['width9'],
));
$template->pparse("body");
break;
case 'create':
if( trim($HTTP_POST_VARS['field1']) == '' )
{
message_die(GENERAL_ERROR, $lang['No_title']);
}
$current_time = time();
$sql = "INSERT INTO ". DATABASE_TABLE ." (dir_id, user_id, field1, field1a, field2, field2a, field3, field4, field5, field6, field7, field8, field9, filename, filetype, added_updated )
VALUES ('" . $dir_id . "', '" . $userdata['user_id'] . "', '" . str_replace("\'", "''", $HTTP_POST_VARS['field1']) . "', '" . str_replace("\'", "''", $HTTP_POST_VARS['field1a']) . "', '" . str_replace("\'", "''", $HTTP_POST_VARS['field2']) . "', '" . str_replace("\'", "''", $HTTP_POST_VARS['field2a']) . "', '" . str_replace("\'", "''", $HTTP_POST_VARS['field3']) . "', '" . str_replace("\'", "''", $HTTP_POST_VARS['field4']) . "', '" . str_replace("\'", "''", $HTTP_POST_VARS['field5']) . "', '" . str_replace("\'", "''", $HTTP_POST_VARS['field6']) . "', '" . str_replace("\'", "''", $HTTP_POST_VARS['field7']) . "', '" . str_replace("\'", "''", $HTTP_POST_VARS['field8']) . "', '" . str_replace("\'", "''", $HTTP_POST_VARS['field9']) . "', '" . str_replace("\'", "''", $HTTP_POST_VARS['filename']) . "', '" . str_replace("\'", "''", $HTTP_POST_VARS['filetype']) . "', $current_time)";
if( !$result = $db->sql_query($sql) )
{
message_die(GENERAL_ERROR, "Couldn't insert entry.", "", __LINE__, __FILE__, $sql);
}
$message = $lang['Added_entry'].'<br /><br />[ <a href="'. append_sid("database.$phpEx?dir_id=$dir_id&mode=add") .'" class="gensmall">'.$lang['Add'].'</a> ]<br /><br />[ <a href="'. append_sid("database.$phpEx?dir_id=$dir_id") .'" class="gensmall">'.sprintf($lang['Return'], $dir_name).'</a> ]<br />[ <a href="'. append_sid("database_dir.$phpEx") .'" class="gensmall">'.$lang['Dir_return'].'</a> ]';
message_die(GENERAL_MESSAGE, $message);
break;
case 'modify':
if( trim($HTTP_POST_VARS['field1']) == '' )
{
message_die(GENERAL_ERROR, $lang['No_title']);
}
$current_time = time();
$edit = edit_count + 1;
$sql = "UPDATE ". DATABASE_TABLE ."
SET user_id = '" . $userdata['user_id'] . "', field1 = '" . str_replace("\'", "''", $HTTP_POST_VARS['field1']) . "', field1a = '" . str_replace("\'", "''", $HTTP_POST_VARS['field1a']) . "', field2 = '" . str_replace("\'", "''", $HTTP_POST_VARS['field2']) . "', field2a = '" . str_replace("\'", "''", $HTTP_POST_VARS['field2a']) . "', field3 = '" . str_replace("\'", "''", $HTTP_POST_VARS['field3']) . "', field4 = '" . str_replace("\'", "''", $HTTP_POST_VARS['field4']) . "', field5 = '" . str_replace("\'", "''", $HTTP_POST_VARS['field5']) . "', field6 = '" . str_replace("\'", "''", $HTTP_POST_VARS['field6']) . "', field7 = '" . str_replace("\'", "''", $HTTP_POST_VARS['field7']) . "', field8 = '" . str_replace("\'", "''", $HTTP_POST_VARS['field8']) . "', field9 = '" . str_replace("\'", "''", $HTTP_POST_VARS['field9']) . "', filename = '" . str_replace("\'", "''", $HTTP_POST_VARS['filename']) . "', filetype = '" . str_replace("\'", "''", $HTTP_POST_VARS['filetype']) . "', added_updated = $current_time, edit_count = $edit
WHERE id = " . intval($HTTP_POST_VARS[id]);
if( !$result = $db->sql_query($sql) )
{
message_die(GENERAL_ERROR, "Couldn't update entry.", "", __LINE__, __FILE__, $sql);
}
$message = $lang['Updated_entry'].'<br /><br />[ <a href="'. append_sid("database.$phpEx?dir_id=$dir_id&mode=edit&id=$entry_id") .'" class="gensmall">'.$lang['Edit'].'</a> ]<br /><br />[ <a href="'. append_sid("database.$phpEx?dir_id=$dir_id&mode=display&id=$entry_id") .'" class="gensmall">'.sprintf($lang['Return'], $entry_name).'</a> ]<br />[ <a href="'. append_sid("database.$phpEx?dir_id=$dir_id") .'" class="gensmall">'.sprintf($lang['Return'], $dir_name).'</a> ]<br />[ <a href="'. append_sid("database_dir.$phpEx") .'" class="gensmall">'.$lang['Dir_return'].'</a> ]';
message_die(GENERAL_MESSAGE, $message);
break;
case 'delete':
if ( $mode == 'delete' && !$confirm )
{
$s_hidden_fields = '<input type="hidden" name="sid" value="' . $userdata['session_id'] . '" /><input type="hidden" name="id" value="' . $entry_id . '" />';
$s_hidden_fields .= '<input type="hidden" name="mode" value="delete" /><input type="hidden" name="cancel" value="cancel" />';
$template->set_filenames(array(
'delete_body' => 'admin/database_dir_delete_body.tpl')
);
$template->assign_block_vars('switch_entry_delete', array());
$template->assign_vars(array(
'L_DELETE' => $lang['Delete'],
'L_TEXT' => sprintf($lang['Entry_delete'], $entry_name),
'L_YES' => $lang['Yes'],
'L_NO' => $lang['No'],
'S_DELETE_ACTION' => append_sid("database.$phpEx?dir_id=$dir_id&id=$entry_id"),
'S_HIDDEN_FIELDS' => $s_hidden_fields,
));
$template->pparse('delete_body');
include($phpbb_root_path . 'includes/page_tail.'.$phpEx);
}
$entry_id = intval($HTTP_GET_VARS[id]);
$sql = "DELETE FROM ". DATABASE_TABLE ." WHERE id = $entry_id";
if( !$result = $db->sql_query($sql) )
{
message_die(GENERAL_ERROR, "Couldn't delete entry.", "", __LINE__, __FILE__, $sql);
}
if (!empty($row['filename']))
{
$apath = ereg_replace ("\\\\","/",__FILE__);
$apath = dirname ($apath);
$apath = trim($apath);
$file = '/'.$row['filename'];
$upload_dir = '/'.$database_config['upload_dir'];
@unlink("$apath$upload_dir$file");
}
$sql = "DELETE FROM ". DATABASE_REPORTS_TABLE ." WHERE id = $entry_id";
if( !$result = $db->sql_query($sql) )
{
message_die(GENERAL_ERROR, "Couldn't delete reports of entry.", "", __LINE__, __FILE__, $sql);
}
$sql = "DELETE FROM ". DATABASE_RATE_TABLE ." WHERE id = $entry_id";
if( !$result = $db->sql_query($sql) )
{
message_die(GENERAL_ERROR, "Couldn't delete rates of entry.", "", __LINE__, __FILE__, $sql);
}
$message = $lang['Deleted_entry'].'<br /><br />[ <a href="'. append_sid("database.$phpEx?dir_id=$dir_id") .'" class="gensmall">'.sprintf($lang['Return'], $dir_name).'</a> ]<br />[ <a href="'. append_sid("database_dir.$phpEx") .'" class="gensmall">'.$lang['Dir_return'].'</a> ]';
message_die(GENERAL_MESSAGE, $message);
break;
default:
message_die(GENERAL_MESSAGE, $lang['No_mode']);
break;
}
include($phpbb_root_path . 'includes/page_tail.'.$phpEx);
exit;
}
$template->set_filenames(array(
"body" => "database_body.tpl")
);
$selected_1 = ( $search_type == 'field1' || $search_type == '' ) ? 'selected' : '';
$selected_2 = ( $search_type == 'field2' ) ? 'selected' : '';
$selected_3 = ( $search_type == 'field3' ) ? 'selected' : '';
$selected_4 = ( $search_type == 'field4' ) ? 'selected' : '';
$selected_5 = ( $search_type == 'field5' ) ? 'selected' : '';
$max_results = ( !$max_results ) ? '15' : $max_results;
$results_15 = ( $max_results == '15' || $max_results == '' ) ? 'selected' : '';
$results_50 = ( $max_results == '50' ) ? 'selected' : '';
$results_100 = ( $max_results == '100' ) ? 'selected' : '';
$results_200 = ( $max_results == '200' ) ? 'selected' : '';
$results_all = ( (strtolower($max_results) == 'all') ) ? 'selected' : '';
$template->assign_vars(array(
'SELECTED_1' => $selected_1,
'SELECTED_2' => $selected_2,
'SELECTED_3' => $selected_3,
'SELECTED_4' => $selected_4,
'SELECTED_5' => $selected_5,
'RESULTS_15' => $results_15,
'RESULTS_50' => $results_50,
'RESULTS_100' => $results_100,
'RESULTS_200' => $results_200,
'RESULTS_ALL' => $results_all,
'L_ALL' => $lang['All'],
'L_SEARCH_BY' => $lang['Search_by'],
'L_RESULTS_PER_PAGE' => $lang['Results_per_page'],
'L_GO' => $lang['Go'],
'L_ADD' => ( $auth_add ) ? $lang['Add'] : '',
'SEARCH' => $search,
'U_ADD' => append_sid("database.$phpEx?dir_id=$dir_id&mode=add"),
));
switch ( strtolower($sort) )
{
case 'field2': $sort_string = 'field2, field1'; break;
case 'field3': $sort_string = 'field3, field1'; break;
case 'field4': $sort_string = 'field4, field1'; break;
case 'field5': $sort_string = 'field5, field1'; break;
case 'field1_desc': $sort_string = 'field1 DESC'; break;
case 'field2_desc': $sort_string = 'field2 DESC, field1'; break;
case 'field3_desc': $sort_string = 'field3 DESC, field1'; break;
case 'field4_desc': $sort_string = 'field4 DESC, field1'; break;
case 'field5_desc':$sort_string = 'field5 DESC, field1'; break;
default: $sort_string = field1;
}
$search_string = ( $search != '' ) ? " WHERE dir_id = $dir_id AND ". $search_type ." like '%". $search ."%'" : " WHERE dir_id = $dir_id";
$search_maximum = ( strtolower($max_results) == 'all' ) ? 99999 : $max_results;
$sql = "SELECT count(*) AS total FROM ". DATABASE_TABLE .$search_string;
if ( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, 'Could not query total entries.', '', __LINE__, __FILE__, $sql);
}
if ( $total = $db->sql_fetchrow($result) )
{
$total[0] = $total['total'];
$title_sort = "database.$phpEx?dir_id=$dir_id&search=". $search ."&search_type=". $search_type ."&max_results=". $max_results;
$pages = ceil($total[0] / $search_maximum);
if ( $page != '' && $page >= 1 && $page <= $pages )
{
$search_results = ( ( $total[0] - ( $total[0] - ( $page * $search_maximum ) ) ) - $search_maximum );
$current_page = $page;
}
else if ( $page != '' && $page > $pages )
{
$search_results = ( ( $total[0] - ( $total[0] - ( $pages * $search_maximum ) ) ) - $search_maximum );
$current_page = $pages;
}
else if ( $page != '' && $page < 1 )
{
$search_results = ( ( $total[0] - ( $total[0] - ( 1 * $search_maximum ) ) ) - $search_maximum );
$current_page = 1;
}
else
{
$current_page = 1 + ( ( $total[0] - ($total[0] - $search_results) ) / $search_maximum );
}
$u_field1 = ( $sort == 'field1' OR $sort == "" ) ? 'field1_desc' : 'field1';
$u_field2 = ( $sort == 'field2' ) ? 'field2_desc' : 'field2';
$u_field3 = ( $sort == 'field3' ) ? 'field3_desc' : 'field3';
$u_field4 = ( $sort == 'field4' ) ? 'field4_desc' : 'field4';
$u_field5 = ( $sort == 'field5' ) ? 'field5_desc' : 'field5';
if ($search_results > 0)
{
$previous_page_results = $search_results - $search_maximum;
$previous_page = '<a href="'. $title_sort .'&sort='. $sort .'&search_results='. $previous_page_results . '">'. $lang['Previous'] .'</a>';
}
else
{
$previous_page = $lang['Previous'];
}
if ($search_results + $search_maximum < $total[0])
{
$next_page_results = $search_results + $search_maximum;
$next_page = '<a href="'. $title_sort .'&sort='. $sort .'&search_results='. $next_page_results . '">'. $lang['Next'] .'</a>';
}
else
{
$next_page = $lang['Next'];
}
$sql = "SELECT d.id, d.field1, d.added_updated
FROM ". DATABASE_TABLE . " d, ". DATABASE_DIR_TABLE . " dir
WHERE d.dir_id = dir.dir_id ORDER BY d.added_updated DESC LIMIT 1";
if ( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, 'Could not query last update.', '', __LINE__, __FILE__, $sql);
}
$row = $db->sql_fetchrow($result);
$u_last_update = '<a href="'. append_sid("database.$phpEx?dir_id=$dir_id&mode=display&id=". $row['id'] ."") . '">'. $row['field1'] .'</a>';
$last_update = sprintf($lang['Last_update'], $u_last_update, create_date($board_config['default_dateformat'], $row['added_updated'], $board_config['default_timezone']));
$row = get_dir($dir_id);
$dir_name = $row['dir_name'];
$template->assign_vars(array(
'L_DIRECTORIES' => $lang['Directories'],
'U_DIRECTORIES' => append_sid("database_dir.$phpEx"),
'DATABASE' => $dir_name,
'U_DATABASE' => append_sid("database.$phpEx?dir_id=$dir_id"),
'PREVIOUS' => $previous_page,
'CURRENT_PAGE' => $current_page,
'PAGES' => sprintf($lang['of'], $pages),
'NEXT' => $next_page,
'L_PAGE' => $lang['Page'],
'L_TOTAL_RESULTS' => sprintf($lang['Total_results'], $total[0]),
'U_LAST_UPDATE' => $u_last_update,
'L_LAST_UPDATE' => $last_update,
'S_SORT' => $title_sort . "&sort=" . $sort,
'L_FIELD1' => $database_config['field1'],
'U_FIELD1' => $title_sort."&sort=".$u_field1."&search_results=".$search_results,
'L_FIELD2' => $database_config['field2'],
'U_FIELD2' => $title_sort."&sort=".$u_field2."&search_results=".$search_results,
'L_FIELD3' => $database_config['field3'],
'U_FIELD3' => $title_sort."&sort=".$u_field3."&search_results=".$search_results,
'L_FIELD4' => $database_config['field4'],
'U_FIELD4' => $title_sort."&sort=".$u_field4."&search_results=".$search_results,
'L_FIELD5' => $database_config['field5'],
'U_FIELD5' => $title_sort."&sort=".$u_field5."&search_results=".$search_results,
'L_RATE' => $lang['Rating'],
));
$limit_offset = ( $search_results != 0 ) ? $search_results : '0';
$limit_string = " LIMIT ". $limit_offset .",". $search_maximum;
$sql = "SELECT * FROM ". DATABASE_TABLE .$search_string ."
ORDER by ". $sort_string .$limit_string;
if ( !($result = $db->sql_query($sql)) )
{
message_die(GENERAL_ERROR, 'Could not query entries.', '', __LINE__, __FILE__, $sql);
}
while( $row = $db->sql_fetchrow($result) )
{
$entry_id = $row['id'];
$field1 = $row['field1'];
$u_field1 = $row['field1a'];
if ( strtolower(substr($u_field1, 0, 7)) != 'http://' )
{
$u_field1 = 'http://'. $u_field1;
}
else
{
$u_field1 = $u_field1;
}
$field1 = ( !empty($row['field1a']) ) ? '<a href="'. $u_field1 . '" target="new">'. $row['field1'] .'</a>' : $row['field1'];
$field2 = $row['field2'];
$u_field2 = $row['field2a'];
if ( strtolower(substr($u_field2, 0, 7)) != 'http://' )
{
$u_field2 = 'http://'. $u_field2;
}
else
{
$u_field2 = $u_field2;
}
$field2 = ( !empty($row['field2a']) ) ? '<a href="'. $u_field2 . '" target="new">'. $row['field2'] .'</a>' : $row['field2'];
$field3 = $row['field3'];
$field4 = $row['field4'];
$field5 = $row['field5'];
$row = rate_stats($entry_id);
$rate = ( $row['average'] == 0 ) ? '' : sprintf("ø %.2f", $row['average']);
$row_class = ( !($ctr1 % 2) ) ? $theme['td_class1'] : $theme['td_class2'];
$template->assign_block_vars('entries', array(
'ROW_CLASS' => $row_class,
'L_EDIT' => ( $auth_edit ) ? $lang['Edit'] : '',
'L_DELETE' => ( $auth_edit ) ? $lang['Delete'] : '',
'U_EDIT' => append_sid("database.$phpEx?dir_id=$dir_id&mode=edit&id=$entry_id"),
'U_DELETE' => append_sid("database.$phpEx?dir_id=$dir_id&mode=delete&id=$entry_id"),
'FIELD1' => $field1,
'FIELD2' => $field2,
'FIELD3' => $field3,
'FIELD4' => $field4,
'FIELD5' => $field5,
'RATE' => $rate,
'U_DISPLAY' => append_sid("database.$phpEx?dir_id=$dir_id&mode=display&" . id . "=$entry_id"),
));
$ctr1++;
}
$ctr1 = $ctr1 - 1;
$titles_displayed1 = $search_results + 1;
$titles_displayed2 = $titles_displayed1 + $ctr1;
$template->assign_vars(array(
'L_TITLES_DISPLAYED' => sprintf($lang['Titles_displayed'], $titles_displayed1, $titles_displayed2),
));
}
else
{
$row = get_dir($dir_id);
$dir_name = $row['dir_name'];
$template->assign_vars(array(
'L_DIRECTORIES' => $lang['Directories'],
'U_DIRECTORIES' => append_sid("database_dir.$phpEx"),
'DATABASE' => $dir_name,
'U_DATABASE' => append_sid("database.$phpEx?dir_id=$dir_id"),
'L_TOTAL_RESULTS' => sprintf($lang['Total_results'], $total[0]),
'L_TOTAL_RESULTS' => sprintf($lang['Total_results'], $total[0]),
'L_FIELD1' => $database_config['field1'],
'L_FIELD2' => $database_config['field2'],
'L_FIELD3' => $database_config['field3'],
'L_FIELD4' => $database_config['field4'],
'L_FIELD5' => $database_config['field5'],
'L_RATE' => $lang['Rating'],
'PREVIOUS' => $lang['Previous'],
'NEXT' => $lang['Next'],
'L_NO_ENTRIES' => $lang['No_entries'],
));
$template->assign_block_vars('no_entries', array());
}
$template->pparse("body");
include($phpbb_root_path . 'includes/page_tail.'.$phpEx);
?>
