Przedszkolak
Postów: 74
Pomógł: 2
Data rejestracji: 27.02.2008 18:09
|
Dodałem w 3 miejscach, ale nie wiem czy dobrze i czy tylko w tych 3 miejscach trzeba:|
if ($stage == "2" && $t == "f") {
if (isset($_POST['publish'])) {
$data = dbarray(dbquery(
"SELECT ts.*, user_id,user_name FROM ".$db_prefix."submissions ts
LEFT JOIN ".$db_prefix."users tu ON ts.submit_user=tu.user_id
WHERE submit_id='$submit_id'"
));
$submit_criteria = unserialize($data['submit_criteria']);
$download_title = stripinput($_POST['download_title']);
$download_description = addslash($_POST['download_description']);
$download_cat = isNum($_POST['download_cat']) ? $_POST['download_cat'] : "0";
$download_license = stripinput($_POST['download_license']);
$download_os = stripinput($_POST['download_os']);
$download_version = stripinput($_POST['download_version']);
$download_folder = (stripinput($_POST['download_folder'])=="downloads"?"":stripinput($_POST['download_folder']))."/";
$download_file = stripinput($_POST['download_file']);
$download_filesize = stripinput($_POST['download_filesize']);
$download_url = BASEDIR."[b]http://uploadelvis92.za.pl[/b]/downloads/".$download_folder.$download_file;
copy(BASEDIR."[b]http://uploadelvis92.za.pl[/b]/downloads/submissions/".$download_file, $download_url);
chmod($download_url, 0644);
unlink(BASEDIR."[b]http://uploadelvis92.za.pl[/b]/downloads/submissions/".$download_file);
jak Coś to mój plik administration/submissions.php.
<?php
//OS:mFusionME
//version:4.02
//type:CORE
/*---------------------------------------------------+
| PHP-Fusion 6 Content Management System
+----------------------------------------------------+
| Copyright © 2002 - 2006 Nick Jones
| http://www.php-fusion.co.uk/
+----------------------------------------------------+
| Released under the terms & conditions of v2 of the
| GNU General Public License. For details refer to
| the included gpl.txt file or visit http://gnu.org
+----------------------------------------------------*/
require_once "../maincore.php";
require_once ADMIN."subheader.php";
require_once ADMIN."navigation.php";
include LOCALE.LOCALESET."admin/submissions.php";
include INCLUDES."bbcodes_buttons_include.php";
if (!checkrights("SU") || !defined("iAUTH") || $aid != iAUTH) fallback("../index.php");
if (isset($submit_id) && !isNum($submit_id)) fallback(FUSION_SELF.$aidlink);
if (!isset($stage)) $stage = "";
if (!@ini_get("safe_mode")) { define("SAFEMODE", false); } else { define("SAFEMODE", true); }
$links = ""; $news = ""; $articles = ""; $photos = ""; $files = "";
if ($stage == "" || $stage == "1") {
if (isset($delete)) {
opentable($locale['400']);
$result = dbquery("SELECT * FROM ".$db_prefix."submissions WHERE submit_id='$delete'");
$data = dbarray($result);
$submit_criteria = @unserialize($data['submit_criteria']);
if ($submit_criteria['photo_file']!="") {
@unlink (PHOTOS."submissions/".$submit_criteria['photo_file']);
}
if ($submit_criteria['download_file']!="") {
@unlink (BASEDIR."downloads/submissions/".$submit_criteria['download_file']);
}
$result = dbquery("DELETE FROM ".$db_prefix."submissions WHERE submit_id='$delete'");
echo "<br><div align='center'>".$locale['401']."<br><br>
<a href='".FUSION_SELF.$aidlink."'>".$locale['402']."</a><br><br>
<a href='index.php".$aidlink."'>".$locale['403']."</a></div><br>\n";
closetable();
} else {
$result = dbquery("SELECT * FROM ".$db_prefix."submissions WHERE submit_type='l'".(multilang_table("WL")?" AND submit_language='".LANGUAGE."'":"")." ORDER BY submit_datestamp DESC");
if (dbrows($result) != "0") {
while ($data = dbarray($result)) {
$submit_criteria = unserialize($data['submit_criteria']);
$links .= "<tr>\n<td class='tbl1'>".$submit_criteria['link_name']."</td>
<td align='right' width='1%' class='tbl1' style='white-space:nowrap'><span class='small'><a href='".FUSION_SELF.$aidlink."&stage=2&t=l&submit_id=".$data['submit_id']."'>".$locale['417']."</a></span> |
<span class='small'><a href='".FUSION_SELF.$aidlink."&delete=".$data['submit_id']."'>".$locale['418']."</a></span></td>\n</tr>\n";
}
} else {
$links = "<tr>\n<td colspan='2' class='tbl1'>".$locale['414']."</td>\n</tr>\n";
}
$result = dbquery("SELECT * FROM ".$db_prefix."submissions WHERE submit_type='n'".(multilang_table("N")?" AND submit_language='".LANGUAGE."'":"")." ORDER BY submit_datestamp DESC");
if (dbrows($result) != "0") {
while ($data = dbarray($result)) {
$submit_criteria = unserialize($data['submit_criteria']);
$news .= "<tr>\n<td class='tbl1'>".$submit_criteria['news_subject']."</td>
<td align='right' width='1%' class='tbl1' style='white-space:nowrap'><span class='small'><a href='".FUSION_SELF.$aidlink."&stage=2&t=n&submit_id=".$data['submit_id']."'>".$locale['417']."</a></span> |
<span class='small'><a href='".FUSION_SELF.$aidlink."&delete=".$data['submit_id']."'>".$locale['418']."</a></span></td>\n</tr>\n";
}
} else {
$news = "<tr>\n<td colspan='2' class='tbl1'>".$locale['415']."</td>\n</tr>\n";
}
$result = dbquery("SELECT * FROM ".$db_prefix."submissions WHERE submit_type='a'".(multilang_table("A")?" AND submit_language='".LANGUAGE."'":"")." ORDER BY submit_datestamp DESC");
if (dbrows($result) != "0") {
while ($data = dbarray($result)) {
$submit_criteria = unserialize($data['submit_criteria']);
$articles .= "<tr>\n<td class='tbl1'>".$submit_criteria['article_subject']."</td>
<td align='right' width='1%' class='tbl1' style='white-space:nowrap'><span class='small'><a href='".FUSION_SELF.$aidlink."&stage=2&t=a&submit_id=".$data['submit_id']."'>".$locale['417']."</a></span> |
<span class='small'><a href='".FUSION_SELF.$aidlink."&delete=".$data['submit_id']."'>".$locale['418']."</a></span></td>\n</tr>\n";
}
} else {
$articles = "<tr>\n<td colspan='2' class='tbl1'>".$locale['416']."</td>\n</tr>\n";
}
$result = dbquery("SELECT * FROM ".$db_prefix."submissions WHERE submit_type='p'".(multilang_table("PA")?" AND submit_language='".LANGUAGE."'":"")." ORDER BY submit_datestamp DESC");
if (dbrows($result) != "0") {
while ($data = dbarray($result)) {
$submit_criteria = unserialize($data['submit_criteria']);
$photos .= "<tr>\n<td class='tbl1'>".$submit_criteria['photo_title']."</td>
<td align='right' width='1%' class='tbl1' style='white-space:nowrap'><span class='small'><a href='".FUSION_SELF.$aidlink."&stage=2&t=p&submit_id=".$data['submit_id']."'>".$locale['417']."</a></span> |
<span class='small'><a href='".FUSION_SELF.$aidlink."&delete=".$data['submit_id']."'>".$locale['418']."</a></span></td>\n</tr>\n";
}
} else {
$photos = "<tr>\n<td colspan='2' class='tbl1'>".$locale['420']."</td>\n</tr>\n";
}
$result = dbquery("SELECT * FROM ".$db_prefix."submissions WHERE submit_type='f'".(multilang_table("D")?" AND submit_language='".LANGUAGE."'":"")." ORDER BY submit_datestamp DESC");
if (dbrows($result) != "0") {
while ($data = dbarray($result)) {
$submit_criteria = unserialize($data['submit_criteria']);
$files .= "<tr>\n<td class='tbl1'>".$submit_criteria['download_title']."</td>
<td align='right' width='1%' class='tbl1' style='white-space:nowrap'><span class='small'><a href='".FUSION_SELF.$aidlink."&stage=2&t=f&submit_id=".$data['submit_id']."'>".$locale['417']."</a></span> |
<span class='small'><a href='".FUSION_SELF.$aidlink."&delete=".$data['submit_id']."'>".$locale['418']."</a></span></td>\n</tr>\n";
}
} else {
$files = "<tr>\n<td colspan='2' class='tbl1'>".$locale['422']."</td>\n</tr>\n";
}
opentable($locale['410']);
echo "<table align='center' width='400' cellpadding='0' cellspacing='1' class='tbl-border'>
<tr>
<td colspan='2' class='tbl2'>".$locale['411']."</td>
</tr>
$links<tr>
<td colspan='2' class='tbl2'>".$locale['412']."</td>
</tr>
$news<tr>
<td colspan='2' class='tbl2'>".$locale['413']."</td>
</tr>
$articles<tr>
<td colspan='2' class='tbl2'>".$locale['419']."</td>
</tr>
$photos<tr>
<td colspan='2' class='tbl2'>".$locale['421']."</td>
</tr>
$files
</table>\n";
closetable();
}
}
if ($stage == "2" && $t == "l") {
if (isset($_POST['add'])) {
$link_name = stripinput($_POST['link_name']);
$link_url = stripinput($_POST['link_url']);
$link_description = stripinput($_POST['link_description']);
$result = dbquery("INSERT INTO ".$db_prefix."weblinks (weblink_name, weblink_description, weblink_url, weblink_cat, weblink_datestamp, weblink_count) VALUES ('$link_name', '$link_description', '$link_url', '".$_POST['link_category']."', '".time()."', '0')");
$result = dbquery("DELETE FROM ".$db_prefix."submissions WHERE submit_id='$submit_id'");
opentable($locale['430']);
echo "<br><div align='center'>".$locale['431']."<br><br>
<a href='".FUSION_SELF.$aidlink."'>".$locale['402']."</a><br><br>
<a href='index.php".$aidlink."'>".$locale['403']."</a></div><br>\n";
closetable();
} else if (isset($_POST['delete'])) {
opentable($locale['432']);
$result = dbquery("DELETE FROM ".$db_prefix."submissions WHERE submit_id='$submit_id'");
echo "<br><div align='center'>".$locale['433']."<br><br>
<a href='".FUSION_SELF.$aidlink."'>".$locale['402']."</a><br><br>
<a href='index.php".$aidlink."'>".$locale['403']."</a></div><br>\n";
closetable();
} else {
$opts = "";
$result = dbquery("SELECT * FROM ".$db_prefix."weblink_cats".(multilang_table("WL")?" WHERE weblink_cat_language='".LANGUAGE."'":"")." ORDER BY weblink_cat_name");
if (dbrows($result) != 0) {
while($data = dbarray($result)) $opts .= "<option value='".$data['weblink_cat_id']."'>".$data['weblink_cat_name']."</option>\n";
} else {
$opts .= "<option value='0'>".$locale['434']."</option>\n";
}
$data = dbarray(dbquery(
"SELECT ts.*, user_id,user_name FROM ".$db_prefix."submissions ts
LEFT JOIN ".$db_prefix."users tu ON ts.submit_user=tu.user_id
WHERE submit_id='$submit_id'"
));
$submit_criteria = unserialize($data['submit_criteria']);
$posted = showdate("longdate", $data['submit_datestamp']);
opentable($locale['440']);
echo "<form name='publish' method='post' action='".FUSION_SELF.$aidlink."&stage=2&t=l&submit_id=$submit_id'>
<table align='center' cellpadding='0' cellspacing='0'>
<tr>
<td style='text-align:center;' class='tbl'>".$locale['441']."<a href='".BASEDIR."profile.php?lookup=".$data['user_id']."'>".$data['user_name']."</a>".$locale['442']."$posted</td>
</tr>
<tr>
<td style='text-align:center;' class='tbl'><a href='".$submit_criteria['link_url']."' target='_blank'>".$submit_criteria['link_name']."</a> - ".$submit_criteria['link_url']."</td>
</tr>
<tr>
<td style='text-align:center;' class='tbl'><span class='alt'>".$locale['443']."</span> ".$submit_criteria['link_category']."</td>
</tr>
</table>
<table align='center'>
<tr>
<td>".$locale['443']."</td>
<td><select name='link_category' class='textbox'>
$opts</select></td>
</tr>
<tr>
<td>".$locale['444']."</td>
<td><input type='text' name='link_name' value='".$submit_criteria['link_name']."' class='textbox' style='width:300px'></td>
</tr>
<tr>
<td>".$locale['445']."</td>
<td><input type='text' name='link_url' value='".$submit_criteria['link_url']."' class='textbox' style='width:300px'></td>
</tr>
<tr>
<td>".$locale['446']."</td>
<td><input type='text' name='link_description' value='".$submit_criteria['link_description']."' class='textbox' style='width:300px'></td>
</tr>
</table>
<center><br>
".$locale['447']."<br>
<input type='submit' name='add' value='".$locale['448']."' class='button'>
<input type='submit' name='delete' value='".$locale['449']."' class='button'></center>
</form>\n";
closetable();
}
}
if ($stage == "2" && $t == "n") {
if (isset($_POST['publish'])) {
$data = dbarray(dbquery(
"SELECT ts.*, user_id,user_name FROM ".$db_prefix."submissions ts
LEFT JOIN ".$db_prefix."users tu ON ts.submit_user=tu.user_id
WHERE submit_id='$submit_id'"
));
$news_subject = stripinput($_POST['news_subject']);
$news_cat = isNum($_POST['news_cat']) ? $_POST['news_cat'] : "0";
$news_body = addslash($_POST['news_body']);
$news_breaks = ($_POST['news_breaks'] == "y") ? "y" : "n";
$result = dbquery("INSERT INTO ".$db_prefix."news (news_subject, news_cat, news_news, news_extended, news_breaks, news_name, news_datestamp, news_start, news_end, news_visibility, news_reads, news_allow_comments, news_allow_ratings, news_language) VALUES ('$news_subject', '$news_cat', '$news_body', '', '$news_breaks', '".$data['user_id']."', '".time()."', '0', '0', '0', '0', '1', '1', '".(multilang_table("N")?LANGUAGE:$settings['locale'])."')");
$result = dbquery("DELETE FROM ".$db_prefix."submissions WHERE submit_id='$submit_id'");
opentable($locale['490']);
echo "<br><div align='center'>".$locale['491']."<br><br>
<a href='".FUSION_SELF.$aidlink."'>".$locale['402']."</a><br><br>
<a href='index.php".$aidlink."'>".$locale['403']."</a></div><br>\n";
closetable();
} else if (isset($_POST['delete'])) {
opentable($locale['492']);
$result = dbquery("DELETE FROM ".$db_prefix."submissions WHERE submit_id='$submit_id'");
echo "<br><div align='center'>".$locale['493']."<br><br>
<a href='".FUSION_SELF.$aidlink."'>".$locale['402']."</a><br><br>
<a href='index.php".$aidlink."'>".$locale['403']."</a></div><br>\n";
closetable();
} else {
if ($settings['tinymce_enabled'] == 1) echo "<script type='text/javascript'>advanced();</script>\n";
$data = dbarray(dbquery(
"SELECT ts.*, user_id,user_name FROM ".$db_prefix."submissions ts
LEFT JOIN ".$db_prefix."users tu ON ts.submit_user=tu.user_id
WHERE submit_id='$submit_id'"
));
$submit_criteria = unserialize($data['submit_criteria']);
$news_subject = $submit_criteria['news_subject'];
$news_cat = $submit_criteria['news_cat'];
$news_body = phpentities(stripslashes($submit_criteria['news_body']));
$news_breaks = $submit_criteria['news_breaks'];
$news_cat_opts = ""; $sel = "";
$result2 = dbquery("SELECT * FROM ".$db_prefix."news_cats".(multilang_table("N")?" WHERE news_cat_language='".LANGUAGE."'":"")." ORDER BY news_cat_name");
if (dbrows($result2)) {
while ($data2 = dbarray($result2)) {
if (isset($news_cat)) $sel = ($news_cat == $data2['news_cat_id'] ? " selected" : "");
$news_cat_opts .= "<option value='".$data2['news_cat_id']."'$sel>".$data2['news_cat_name']."</option>\n";
}
}
opentable($locale['500']);
echo "<form name='publish' method='post' action='".FUSION_SELF.$aidlink."x34;=submissions&stage=2&t=n&submit_id=$submit_id'>
<table align='center' cellpadding='0' cellspacing='0'>
<tr>
<td width='100' class='tbl'>".$locale['505']."</td>
<td width='80%' class='tbl'><input type='text' name='news_subject' value='$news_subject' class='textbox' style='width: 250px'></td>
</tr>
<tr>
<td width='100' class='tbl'>".$locale['506']."</td>
<td width='80%' class='tbl'><select name='news_cat' class='textbox'>
<option value='0'>".$locale['507']."</option>
$news_cat_opts</select>
</td>
</tr>
<tr>
<td valign='top' width='100' class='tbl'>".$locale['508']."</td>
<td width='80%' class='tbl'><textarea name='news_body' cols='65' rows='10' class='textbox'>$news_body</textarea>".($settings['tinymce_enabled']!=1?display_bbcodes("news_body", "publish"):"")."</td>
</tr>
<tr>
<td align='center' colspan='2' class='tbl1'><br>
".$locale['501']."<a href='".BASEDIR."profile.php?lookup=".$data['user_id']."'>".$data['user_name']."</a><br><br>
".$locale['502']."<br>
<input type='hidden' name='news_breaks' value='$news_breaks'>
<input type='submit' name='publish' value='".$locale['503']."' class='button'>
<input type='submit' name='delete' value='".$locale['504']."' class='button'>
</td>
</tr>
</table>
</form>\n";
closetable();
}
}
if ($stage == "2" && $t == "a") {
if (isset($_POST['publish'])) {
$data = dbarray(dbquery(
"SELECT ts.*, user_id,user_name FROM ".$db_prefix."submissions ts
LEFT JOIN ".$db_prefix."users tu ON ts.submit_user=tu.user_id
WHERE submit_id='$submit_id'"
));
$submit_criteria = unserialize($data['submit_criteria']);
$article_cat = $_POST['article_cat'];
$article_subject = $_POST['article_subject'];
$article_snippet = addslash($_POST['article_snippet']);
$article_body = addslash($_POST['article_body']);
$article_breaks = ($_POST['article_breaks'] == "y") ? "y" : "n";
$result = dbquery("INSERT INTO ".$db_prefix."articles (article_cat, article_subject, article_snippet, article_article, article_breaks, article_name, article_datestamp, article_reads, article_allow_comments, article_allow_ratings) VALUES ('$article_cat', '$article_subject', '$article_snippet', '$article_body', '$article_breaks', '".$data['user_id']."', '".time()."', '0', '1', '1')");
$result = dbquery("DELETE FROM ".$db_prefix."submissions WHERE submit_id='$submit_id'");
opentable($locale['530']);
echo "<br><div align='center'>".$locale['531']."<br><br>
<a href='".FUSION_SELF.$aidlink."'>".$locale['402']."</a><br><br>
<a href='index.php".$aidlink."'>".$locale['403']."</a></div><br>\n";
closetable();
} else if (isset($_POST['delete'])) {
opentable($locale['532']);
$result = dbquery("DELETE FROM ".$db_prefix."submissions WHERE submit_id='$submit_id'");
echo "<br><div align='center'>".$locale['533']."<br><br>
<a href='".FUSION_SELF.$aidlink."'>".$locale['402']."</a><br><br>
<a href='index.php".$aidlink."'>".$locale['403']."</a></div><br>\n";
closetable();
} else {
if ($settings['tinymce_enabled'] == 1) echo "<script type='text/javascript'>advanced();</script>\n";
$data = dbarray(dbquery(
"SELECT ts.*, user_id,user_name FROM ".$db_prefix."submissions ts
LEFT JOIN ".$db_prefix."users tu ON ts.submit_user=tu.user_id
WHERE submit_id='$submit_id'"
));
$submit_criteria = unserialize($data['submit_criteria']);
$article_cat = $submit_criteria['article_cat'];
$article_subject = $submit_criteria['article_subject'];
$article_snippet = phpentities(stripslashes($submit_criteria['article_snippet']));
$article_body = phpentities(stripslashes($submit_criteria['article_body']));
$article_breaks = $submit_criteria['article_breaks'];
$result2 = dbquery("SELECT * FROM ".$db_prefix."article_cats".(multilang_table("A")?" WHERE article_cat_language='".LANGUAGE."'":"")." ORDER BY article_cat_name DESC");
$article_cat_opts = ""; $sel = "";
while ($data2 = dbarray($result2)) {
if (isset($article_cat)) $sel = ($article_cat == $data2['article_cat_id'] ? " selected" : "");
$article_cat_opts .= "<option value='".$data2['article_cat_id']."'$sel>".$data2['article_cat_name']."</option>\n";
}
opentable($locale['540']);
echo "<form name='publish' method='post' action='".FUSION_SELF.$aidlink."x34;=submissions&stage=2&t=a&submit_id=$submit_id'>
<table align='center' cellpadding='0' cellspacing='0'>
<tr>
<td width='100' class='tbl'>".$locale['506']."</td>
<td width='80%' class='tbl'><select name='article_cat' class='textbox'>
$article_cat_opts</select></td>
</tr>
<tr>
<td width='100' class='tbl'>".$locale['505']."</td>
<td width='80%' class='tbl'><input type='text' name='article_subject' value='$article_subject' class='textbox' style='width: 250px'></td>
</tr>
<tr>
<td valign='top' width='100' class='tbl'>".$locale['547']."</td>
<td width='80%' class='tbl'><textarea name='article_snippet' cols='65' rows='5' class='textbox'>$article_snippet</textarea>".($settings['tinymce_enabled']!=1?display_bbcodes("article_snippet", "publish"):"")."</td>
</tr>
<tr>
<td valign='top' width='100' class='tbl'>".$locale['548']."</td>
<td width='80%' class='tbl'><textarea name='article_body' cols='65' rows='10' class='textbox'>$article_body</textarea>".($settings['tinymce_enabled']!=1?display_bbcodes("article_body", "publish"):"")."</td>
</tr>
<tr>
<td align='center' colspan='2' class='tbl1'><br>
".$locale['541']."<a href='".BASEDIR."profile.php?lookup=".$data['user_id']."'>".$data['user_name']."</a><br><br>
".$locale['542']."<br>
<input type='hidden' name='article_breaks' value='$article_breaks'>
<input type='submit' name='publish' value='".$locale['543']."' class='button'>
<input type='submit' name='delete' value='".$locale['544']."' class='button'>
</td>
</tr>
</table>
</form>\n";
closetable();
}
}
if ($stage == "2" && $t == "p") {
if (isset($_POST['publish'])) {
require_once INCLUDES."photo_functions_include.php";
$photo_file = ""; $photo_thumb1 = ""; $photo_thumb2 = "";
$data = dbarray(dbquery(
"SELECT ts.*, user_id,user_name,user_avatar FROM ".$db_prefix."submissions ts
LEFT JOIN ".$db_prefix."users tu ON ts.submit_user=tu.user_id
WHERE submit_id='$submit_id'"
));
$submit_criteria = unserialize($data['submit_criteria']);
$photo_title = stripinput($_POST['photo_title']);
$photo_description = stripinput($_POST['photo_description']);
if ($settings['user_photogallery']==1) {
$album_id = isNum($_POST['album_id']) ? $_POST['album_id'] : "UPA";
} else {
$album_id = isNum($_POST['album_id']) ? $_POST['album_id'] : "0";
}
$photo_name = strtolower(substr($submit_criteria['photo_file'], 0, strrpos($submit_criteria['photo_file'], ".")));
$photo_ext = strtolower(strrchr($submit_criteria['photo_file'],"."));
//if users can create image in own album
if ($settings['user_photogallery']==1) {
//if user want to create image in own album
if ($album_id=="UPA") {
//check that user album exists
$uresult = dbquery("SELECT album_id FROM ".$db_prefix."photo_albums WHERE album_user=".$data['user_id']." LIMIT 1");
$urows = dbrows($uresult);
//if user album not exists
if ($urows==0) {
//get user avatar for gallery thumbnail
if ($data['user_avatar']!='' && file_exists(IMAGES."avatars/".$data['user_avatar'])) {
$album_thumb = $data['user_avatar'];
$album_file = image_exists(PHOTOS, $album_thumb);
$albumfile = @getimagesize(IMAGES."avatars/".$album_thumb);
//make thumb for album
//createthumbnail($filetype, $origfile, $thumbfile, $new_w, $new_h)
createthumbnail($albumfile[2], IMAGES."avatars/".$album_thumb, PHOTOS.$album_file, $settings['thumb_w'], $settings['thumb_h']);
} else {
$album_thumb = "imagenotfound.jpg";
$album_file = image_exists(PHOTOS, $album_thumb);
$albumfile = @getimagesize(IMAGES.$album_thumb);
//make unknown thumb for album
//createthumbnail($filetype, $origfile, $thumbfile, $new_w, $new_h)
createthumbnail($albumfile[2], IMAGES.$album_thumb, PHOTOS.$album_file, $settings['thumb_w'], $settings['thumb_h']);
}
//get max album order
$album_order = dbresult(dbquery("SELECT MAX(album_order) FROM ".$db_prefix."photo_albums".(multilang_table("PA")?" WHERE album_language='".LANGUAGE."'":"")), 0) + 1;
$result = dbquery("INSERT INTO ".$db_prefix."photo_albums (album_id, album_title, album_description, album_thumb, album_user, album_access, album_order, album_datestamp, album_language) VALUES ('', '".$data['user_name']."', '".addslashes(sprintf($locale['599'], $data['user_name']))."', '".$album_file."', '".$data['user_id']."', '".$submit_criteria['album_visibility']."', '".$album_order."', '".time()."', '".(multilang_table("PA")?$data['submit_language']:$settings['locale'])."')");
$album_id = mysql_insert_id();
if (!SAFEMODE) @mkdir(PHOTOS."album_".$album_id, 0755);
//if user album exists
} else {
$udata = dbarray($uresult);
$album_id = $udata['album_id'];
}
}
}
define("PHOTODIR", PHOTOS.(!SAFEMODE ? "album_".$album_id."/" : ""));
$photo_dest = PHOTODIR;
$photo_file = image_exists($photo_dest, $photo_name.$photo_ext);
@copy(PHOTOS."submissions/".$submit_criteria['photo_file'], $photo_dest.$photo_file);
@chmod($photo_dest.$photo_file, 0644);
@unlink(PHOTOS."submissions/".$submit_criteria['photo_file']);
$imagefile = @getimagesize($photo_dest.$photo_file);
$photo_thumb1 = image_exists($photo_dest, $photo_name."_t1".$photo_ext);
createthumbnail($imagefile[2], $photo_dest.$photo_file, $photo_dest.$photo_thumb1, $settings['thumb_w'], $settings['thumb_h']);
if ($imagefile[0] > $settings['photo_w'] || $imagefile[1] > $settings['photo_h']) {
$photo_thumb2 = image_exists($photo_dest, $photo_name."_t2".$photo_ext);
createthumbnail($imagefile[2], $photo_dest.$photo_file, $photo_dest.$photo_thumb2, $settings['photo_w'], $settings['photo_h']);
}
$photo_order = dbresult(dbquery("SELECT MAX(photo_order) FROM ".$db_prefix."photos WHERE album_id='$album_id'"), 0) + 1;
$result = dbquery("INSERT INTO ".$db_prefix."photos (album_id, photo_title, photo_description, photo_filename, photo_thumb1, photo_thumb2, photo_datestamp, photo_user, photo_views, photo_order, photo_allow_comments, photo_allow_ratings) VALUES ('$album_id', '$photo_title', '$photo_description', '$photo_file', '$photo_thumb1', '$photo_thumb2', '".time()."', '".$data['submit_user']."', '0', '$photo_order', '1', '1')");
$result = dbquery("DELETE FROM ".$db_prefix."submissions WHERE submit_id='$submit_id'");
opentable($locale['580']);
echo "<br><div align='center'>".$locale['581']."<br><br>
<a href='".FUSION_SELF.$aidlink."'>".$locale['402']."</a><br><br>
<a href='index.php".$aidlink."'>".$locale['403']."</a></div><br>\n";
closetable();
} else if (isset($_POST['delete'])) {
opentable($locale['582']);
$result = dbquery("SELECT * FROM ".$db_prefix."submissions WHERE submit_id='$submit_id'");
$data = dbarray($result);
$submit_criteria = unserialize($data['submit_criteria']);
if ($submit_criteria['photo_file']!="") {
@unlink (PHOTOS."submissions/".$submit_criteria['photo_file']);
}
$result = dbquery("DELETE FROM ".$db_prefix."submissions WHERE submit_id='$submit_id'");
echo "<br><div align='center'>".$locale['583']."<br><br>
<a href='".FUSION_SELF.$aidlink."'>".$locale['402']."</a><br><br>
<a href='index.php".$aidlink."'>".$locale['403']."</a></div><br>\n";
closetable();
} else {
$data = dbarray(dbquery(
"SELECT ts.*, user_id,user_name FROM ".$db_prefix."submissions ts
LEFT JOIN ".$db_prefix."users tu ON ts.submit_user=tu.user_id
WHERE submit_id='$submit_id'"
));
$submit_criteria = unserialize($data['submit_criteria']);
$photo_title = $submit_criteria['photo_title'];
$photo_description = $submit_criteria['photo_description'];
$photo_file = $submit_criteria['photo_file'];
$album_id = $submit_criteria['album_id'];
$photo_albums = ""; $sel = "";
$result2 = dbquery("SELECT * FROM ".$db_prefix."photo_albums".(multilang_table("PA")?" WHERE album_language='".LANGUAGE."'":"")." ORDER BY album_title");
if (dbrows($result2)) {
while ($data2 = dbarray($result2)) {
if (isset($album_id)) $sel = ($album_id == $data2['album_id'] ? " selected" : "");
$photo_albums .= "<option value='".$data2['album_id']."'$sel>".$data2['album_title']."</option>\n";
}
}
if ($settings['user_photogallery']==1) {
if (isset($album_id)) $sel = ($album_id == "UPA" ? " selected" : "");
$photo_albums .= "<option value='UPA'$sel>".sprintf($locale['599'], $data['user_name'])."</option>\n";
}
opentable($locale['590']);
echo "<form name='publish' method='post' action='".FUSION_SELF.$aidlink."x34;=submissions&stage=2&t=p&submit_id=$submit_id'>
<table align='center' cellpadding='0' cellspacing='0'>
<tr>
<td width='100' class='tbl'>".$locale['596']."</td>
<td width='80%' class='tbl'><input type='text' name='photo_title' value='$photo_title' class='textbox' style='width: 250px'></td>
</tr>
<tr>
<td width='100' class='tbl'>".$locale['597']."</td>
<td width='80%' class='tbl'><input type='text' name='photo_description' value='$photo_description' class='textbox' style='width: 250px'></td>
</tr>
<tr>
<td width='100' class='tbl'>".$locale['598']."</td>
<td width='80%' class='tbl'><select name='album_id' class='textbox'>
<option value='0'>".$locale['507']."</option>
$photo_albums</select>
</td>
</tr>
<tr>
<td align='center' colspan='2' class='tbl1'><br>";
$imgsize = @getimagesize(PHOTOS."submissions/".$photo_file);
echo "<a href='javascript:void(0);' onClick=\"window.open('".PHOTOS."submissions/".$photo_file."','Submitted Photo','scrollbars=yes,toolbar=no,status=no,resizable=yes,width=".$imgsize[0].",height=".$imgsize[1]."')\">".$locale['591']."</a>
<br><br>
".$locale['592']."<a href='".BASEDIR."profile.php?lookup=".$data['user_id']."'>".$data['user_name']."</a><br><br>
".$locale['593']."<br>
<input type='submit' name='publish' value='".$locale['594']."' class='button'>
<input type='submit' name='delete' value='".$locale['595']."' class='button'>
</td>
</tr>
</table>
</form>\n";
closetable();
}
}
if ($stage == "2" && $t == "f") {
if (isset($_POST['publish'])) {
$data = dbarray(dbquery(
"SELECT ts.*, user_id,user_name FROM ".$db_prefix."submissions ts
LEFT JOIN ".$db_prefix."users tu ON ts.submit_user=tu.user_id
WHERE submit_id='$submit_id'"
));
$submit_criteria = unserialize($data['submit_criteria']);
$download_title = stripinput($_POST['download_title']);
$download_description = addslash($_POST['download_description']);
$download_cat = isNum($_POST['download_cat']) ? $_POST['download_cat'] : "0";
$download_license = stripinput($_POST['download_license']);
$download_os = stripinput($_POST['download_os']);
$download_version = stripinput($_POST['download_version']);
$download_folder = (stripinput($_POST['download_folder'])=="downloads"?"":stripinput($_POST['download_folder']))."/";
$download_file = stripinput($_POST['download_file']);
$download_filesize = stripinput($_POST['download_filesize']);
$download_url = BASEDIR."http://uploadelvis92.za.pl/downloads/".$download_folder.$download_file;
copy(BASEDIR."http://uploadelvis92.za.pl/downloads/submissions/".$download_file, $download_url);
chmod($download_url, 0644);
unlink(BASEDIR."http://uploadelvis92.za.pl/downloads/submissions/".$download_file);
$result = dbquery("INSERT INTO ".$db_prefix."downloads (download_title, download_description, download_url, download_image, download_cat, download_license, download_os, download_version, download_filesize, download_datestamp, download_count) VALUES ('$download_title', '$download_description', '$download_url', '', '$download_cat', '$download_license', '$download_os', '$download_version', '$download_filesize', '".time()."', '0')");
$result = dbquery("DELETE FROM ".$db_prefix."submissions WHERE submit_id='$submit_id'");
opentable($locale['650']);
echo "<br><div align='center'>".$locale['651']."<br><br>
<a href='".FUSION_SELF.$aidlink."'>".$locale['402']."</a><br><br>
<a href='index.php".$aidlink."'>".$locale['403']."</a></div><br>\n";
closetable();
} else if (isset($_POST['delete'])) {
opentable($locale['652']);
$result = dbquery("SELECT * FROM ".$db_prefix."submissions WHERE submit_id='$submit_id'");
$data = dbarray($result);
$submit_criteria = unserialize($data['submit_criteria']);
if ($submit_criteria['download_file']!="") {
@unlink (BASEDIR."downloads/submissions/".$submit_criteria['download_file']);
}
$result = dbquery("DELETE FROM ".$db_prefix."submissions WHERE submit_id='$submit_id'");
echo "<br><div align='center'>".$locale['653']."<br><br>
<a href='".FUSION_SELF.$aidlink."'>".$locale['402']."</a><br><br>
<a href='index.php".$aidlink."'>".$locale['403']."</a></div><br>\n";
closetable();
} else {
if ($settings['tinymce_enabled'] == 1) echo "<script type='text/javascript'>advanced();</script>\n";
$data = dbarray(dbquery(
"SELECT ts.*, user_id,user_name FROM ".$db_prefix."submissions ts
LEFT JOIN ".$db_prefix."users tu ON ts.submit_user=tu.user_id
WHERE submit_id='$submit_id'"
));
$submit_criteria = unserialize($data['submit_criteria']);
$download_title = phpentities(stripslashes($submit_criteria['download_title']));
$download_description = phpentities(stripslashes($submit_criteria['download_description']));
$download_cat = isNum($submit_criteria['download_cat']) ? $submit_criteria['download_cat'] : "0";
$download_license = phpentities(stripslashes($submit_criteria['download_license']));
$download_os = phpentities(stripslashes($submit_criteria['download_os']));
$download_version = phpentities(stripslashes($submit_criteria['download_version']));
$download_file = phpentities(stripslashes($submit_criteria['download_file']));
$download_filesize = parsebytesize(filesize(BASEDIR."downloads/submissions/".$submit_criteria['download_file']));
$download_cats = ""; $sel = "";
$result2 = dbquery("SELECT * FROM ".$db_prefix."download_cats".(multilang_table("D")?" WHERE download_cat_language='".LANGUAGE."'":"")." ORDER BY download_cat_name");
if (dbrows($result2)) {
while ($data2 = dbarray($result2)) {
if (isset($download_cat)) $sel = ($download_cat == $data2['download_cat_id'] ? " selected" : "");
$download_cats .= "<option value='".$data2['download_cat_id']."'$sel>".$data2['download_cat_name']."</option>\n";
}
}
$download_fld = makefilelist(BASEDIR."downloads/", ".|..|submissions", true, "folders");
$download_folders = "";
for ($i=0;$i<sizeof($download_fld);$i++) {
$download_folders .= "<option value='".$download_fld[$i]."'>".$download_fld[$i]."</option>\n";
}
opentable($locale['660']);
echo "<form name='publish' method='post' action='".FUSION_SELF.$aidlink."x34;=submissions&stage=2&t=f&submit_id=$submit_id'>
<table align='center' cellpadding='0' cellspacing='0'>
<tr>
<td width='100' class='tbl'>".$locale['666']."</td>
<td width='80%' class='tbl'>
<input type='text' name='download_title' value='$download_title' class='textbox' style='width: 250px'>
</td>
</tr>
<tr>
<td width='100' class='tbl'>".$locale['667']."</td>
<td width='80%' class='tbl'>
<textarea name='download_description' class='textbox' style='width: 250px; height: 100px'>$download_description</textarea>".($settings['tinymce_enabled']!=1?display_bbcodes("download_description", "publish"):"")."
</td>
</tr>
<tr>
<td width='100' class='tbl'>".$locale['668']."</td>
<td width='80%' class='tbl'><select name='download_cat' class='textbox'>
<option value='0'>".$locale['507']."</option>
$download_cats</select>
</td>
</tr>
<tr>
<td width='100' class='tbl'>".$locale['669']."</td>
<td width='80%' class='tbl'>
<input type='text' name='download_license' value='$download_license' class='textbox' style='width: 250px'>
</td>
</tr>
<tr>
<td width='100' class='tbl'>".$locale['670']."</td>
<td width='80%' class='tbl'>
<input type='text' name='download_os' value='$download_os' class='textbox' style='width: 250px'>
</td>
</tr>
<tr>
<td width='100' class='tbl'>".$locale['671']."</td>
<td width='80%' class='tbl'>
<input type='text' name='download_version' value='$download_version' class='textbox' style='width: 250px'>
</td>
</tr>
<tr>
<td width='100' class='tbl'>".$locale['672']."</td>
<td width='80%' class='tbl'>
<input type='text' name='download_filesize' value='$download_filesize' class='textbox' style='width: 250px'>
</td>
</tr>
<tr>
<td width='100' class='tbl'>".$locale['673']."</td>
<td width='80%' class='tbl'>
<select name='download_folder' class='textbox'>
<option value='downloads'>downloads</option>
$download_folders</select>
<input type='hidden' name='download_file' value='$download_file'>
</td>
</tr>
<tr>
<td align='center' colspan='2' class='tbl1'><br>
<a href='".BASEDIR."downloads/submissions/".$download_file."' target='_blank'>".$locale['661']."</a><br><br>".$locale['662']." <a href='".BASEDIR."profile.php?lookup=".$data['user_id']."'>".$data['user_name']."</a><br><br>
".$locale['663']."<br><br>
<input type='submit' name='publish' value='".$locale['664']."' class='button'>
<input type='submit' name='delete' value='".$locale['665']."' class='button'>
</td>
</tr>
</table>
</form>\n";
closetable();
}
}
echo "</td>\n";
require_once BASEDIR."footer.php";
?>
Edytowane przez Elvis92 dnia 20.04.2008 12:16:05
|
v7.02.03
Nie pomagam na komunikatorach oraz PW!
.
