Beispiel #1
0
Etano
===============================================================================
File:                       photo_view.php
$Revision$
Software by:                DateMill (http://www.datemill.com)
Copyright by:               DateMill (http://www.datemill.com)
Support at:                 http://www.datemill.com/forum
*******************************************************************************
* See the "docs/licenses/etano.txt" file for license.                         *
******************************************************************************/
//define('CACHE_LIMITER','private');
require 'includes/common.inc.php';
require _BASEPATH_ . '/includes/user_functions.inc.php';
require _BASEPATH_ . '/skins_site/' . get_my_skin() . '/lang/photos.inc.php';
require _BASEPATH_ . '/includes/network_functions.inc.php';
check_login_member('view_photo');
$tpl = new phemplate(_BASEPATH_ . '/skins_site/' . get_my_skin() . '/', 'remove_nonjs');
$photo_id = sanitize_and_format_gpc($_GET, 'photo_id', TYPE_INT, 0, 0);
$output = array();
$output['pic_width'] = get_site_option('pic_width', 'core_photo');
$loop_comments = array();
if (!empty($photo_id)) {
    $query = "SELECT `photo_id`,`is_private`,`photo`,`caption`,`fk_user_id`,`_user` as `user`,`status`,`allow_comments`,`allow_rating`,`stat_votes`,`stat_votes_total` FROM `{$dbtable_prefix}user_photos` WHERE `photo_id`={$photo_id}";
    if (!($res = @mysql_query($query))) {
        trigger_error(mysql_error(), E_USER_ERROR);
    }
    if (mysql_num_rows($res)) {
        $output = array_merge($output, mysql_fetch_assoc($res));
        $is_friend = false;
        if (!empty($_SESSION[_LICENSE_KEY_]['user']['user_id'])) {
            $is_friend = is_network_member($output['fk_user_id'], $_SESSION[_LICENSE_KEY_]['user']['user_id'], NET_FRIENDS);
Beispiel #2
0
/******************************************************************************
Etano
===============================================================================
File:                       home.php
$Revision$
Software by:                DateMill (http://www.datemill.com)
Copyright by:               DateMill (http://www.datemill.com)
Support at:                 http://www.datemill.com/forum
*******************************************************************************
* See the "docs/licenses/etano.txt" file for license.                         *
******************************************************************************/
require 'includes/common.inc.php';
require _BASEPATH_ . '/includes/user_functions.inc.php';
require _BASEPATH_ . '/skins_site/' . get_my_skin() . '/lang/home.php';
check_login_member('auth');
$tpl = new phemplate(_BASEPATH_ . '/skins_site/' . get_my_skin() . '/', 'remove_nonjs');
$output = array();
$query = "SELECT `_photo` as `photo`,UNIX_TIMESTAMP(`date_added`) as `date_added` FROM `{$dbtable_prefix}user_profiles` WHERE `fk_user_id`='" . $_SESSION[_LICENSE_KEY_]['user']['user_id'] . "'";
if (!($res = @mysql_query($query))) {
    trigger_error(mysql_error(), E_USER_ERROR);
}
if (mysql_num_rows($res)) {
    $output = mysql_fetch_assoc($res);
    $output['date_added'] = strftime($_SESSION[_LICENSE_KEY_]['user']['prefs']['date_format'], $output['date_added'] + $_SESSION[_LICENSE_KEY_]['user']['prefs']['time_offset']);
}
if (empty($output['photo'])) {
    $output['photo'] = 'no_photo.gif';
}
$query = "SELECT b.`m_name`,UNIX_TIMESTAMP(a.`paid_until`) as `paid_until` FROM `{$dbtable_prefix}payments` a,`{$dbtable_prefix}memberships` b WHERE a.`m_value_to`=b.`m_value` AND a.`fk_user_id`='" . $_SESSION[_LICENSE_KEY_]['user']['user_id'] . "' AND a.`paid_until`>'" . gmdate('Ymd') . "' AND a.`refunded`=0 AND a.`is_active`=1 ORDER BY a.`paid_until` DESC LIMIT 1";
if (!($res = @mysql_query($query))) {
Beispiel #3
0
/******************************************************************************
Etano
===============================================================================
File:                       processors/search_delete.php
$Revision$
Software by:                DateMill (http://www.datemill.com)
Copyright by:               DateMill (http://www.datemill.com)
Support at:                 http://www.datemill.com/forum
*******************************************************************************
* See the "docs/licenses/etano.txt" file for license.                         *
******************************************************************************/
require '../includes/common.inc.php';
require _BASEPATH_ . '/includes/user_functions.inc.php';
require _BASEPATH_ . '/skins_site/' . get_my_skin() . '/lang/my_searches.inc.php';
check_login_member('save_searches');
$topass = array();
$search_id = isset($_GET['sid']) ? (int) $_GET['sid'] : 0;
$query = "DELETE FROM `{$dbtable_prefix}user_searches` WHERE `search_id`={$search_id} AND `fk_user_id`='" . $_SESSION[_LICENSE_KEY_]['user']['user_id'] . "'";
if (!($res = @mysql_query($query))) {
    trigger_error(mysql_error(), E_USER_ERROR);
}
$topass['message']['type'] = MESSAGE_INFO;
$topass['message']['text'] = $GLOBALS['_lang'][101];
$nextpage = 'my_searches.php';
if (!empty($_GET['return'])) {
    $input['return'] = sanitize_and_format_gpc($_GET, 'return', TYPE_STRING, $__field2format[FIELD_TEXTFIELD], '');
    $nextpage = $input['return'];
}
$nextpage = _BASEURL_ . '/' . $nextpage;
redirect2page($nextpage, $topass, '', true);
Beispiel #4
0
/******************************************************************************
Etano
===============================================================================
File:                       search_more.php
$Revision$
Software by:                DateMill (http://www.datemill.com)
Copyright by:               DateMill (http://www.datemill.com)
Support at:                 http://www.datemill.com/forum
*******************************************************************************
* See the "docs/licenses/etano.txt" file for license.                         *
******************************************************************************/
//define('CACHE_LIMITER','private');
require 'includes/common.inc.php';
require _BASEPATH_ . '/includes/user_functions.inc.php';
check_login_member('search_advanced');
$tpl = new phemplate(_BASEPATH_ . '/skins_site/' . get_my_skin() . '/', 'remove_nonjs');
$search_fields = array();
foreach ($_pcats as $pcat_id => $pcat) {
    if ((int) $pcat['access_level'] & (int) $_SESSION[_LICENSE_KEY_]['user']['membership']) {
        for ($i = 0; isset($pcat['fields'][$i]); ++$i) {
            if (isset($_pfields[$pcat['fields'][$i]]->config['searchable'])) {
                $search_fields[] = $pcat['fields'][$i];
            }
        }
    }
}
sort($search_fields, SORT_NUMERIC);
$search_loop = create_search_form($search_fields);
$tpl->set_file('content', 'search_more.html');
$tpl->set_loop('search', $search_loop);
Beispiel #5
0
/******************************************************************************
Etano
===============================================================================
File:                       profile.php
$Revision$
Software by:                DateMill (http://www.datemill.com)
Copyright by:               DateMill (http://www.datemill.com)
Support at:                 http://www.datemill.com/forum
*******************************************************************************
* See the "docs/licenses/etano.txt" file for license.                         *
******************************************************************************/
//define('CACHE_LIMITER','private');
require_once 'includes/common.inc.php';
require_once 'includes/user_functions.inc.php';
require_once 'includes/network_functions.inc.php';
check_login_member('profile_view');
$tpl = new phemplate(_BASEPATH_ . '/skins_site/' . get_my_skin() . '/', 'remove_nonjs');
$uid = 0;
if (!empty($_GET['uid'])) {
    $uid = (string) (int) $_GET['uid'];
} elseif (isset($_GET['user'])) {
    $user = sanitize_and_format($_GET['user'], TYPE_STRING, $__field2format[FIELD_TEXTFIELD]);
    $uid = get_userid_by_user($user);
} elseif (!empty($_SESSION[_LICENSE_KEY_]['user']['user_id'])) {
    $uid = (string) $_SESSION[_LICENSE_KEY_]['user']['user_id'];
} else {
    redirect2page('index.php');
}
if (!empty($_SESSION[_LICENSE_KEY_]['user']['user_id']) && $_SESSION[_LICENSE_KEY_]['user']['user_id'] == $uid) {
    redirect2page('my_profile.php');
}
Beispiel #6
0
    $output['_user_other'] = get_user_by_userid($output['fk_user_id']);
    $_GET['ft'] = $output['ft'];
} elseif (!empty($_GET['to_id'])) {
    $output['fk_user_id'] = (int) $_GET['to_id'];
    $output['_user_other'] = get_user_by_userid($output['fk_user_id']);
} else {
    trigger_error($GLOBALS['_lang'][120], E_USER_ERROR);
}
if (!isset($output['return']) && isset($_GET['return'])) {
    $output['return'] = sanitize_and_format_gpc($_GET, 'return', TYPE_STRING, $__field2format[FIELD_TEXTFIELD] | FORMAT_RUENCODE, '');
}
$flirt_type = sanitize_and_format_gpc($_GET, 'ft', TYPE_INT, 0, 0);
if ($flirt_type == FLIRT_INIT) {
    check_login_member('flirt_send');
} else {
    check_login_member('flirt_reply');
}
$flirts = array();
$query = "SELECT `flirt_id`,`flirt_text` FROM `{$dbtable_prefix}flirts` WHERE `flirt_type`={$flirt_type}";
if (!($res = @mysql_query($query))) {
    trigger_error(mysql_error(), E_USER_ERROR);
}
while ($rsrow = mysql_fetch_row($res)) {
    $flirts[$rsrow[0]] = $rsrow[1];
}
$tpl->set_file('content', 'flirt_send.html');
$tpl->set_var('flirts', vector2radios($flirts, 'flirt_id', 0, array(), 'class="flirts_list"'));
$tpl->set_var('output', $output);
$tpl->process('content', 'content');
$tplvars['title'] = $GLOBALS['_lang'][121];
$tplvars['page_title'] = $GLOBALS['_lang'][121];
Beispiel #7
0
    $output = $_SESSION['topass']['input'];
    $output['_user_other'] = get_user_by_userid($output['fk_user_id']);
    unset($_SESSION['topass']['input']);
    $temp = 'message_write';
    if (isset($_SESSION[_LICENSE_KEY_]['user'][$output['refnum']])) {
        $temp = $_SESSION[_LICENSE_KEY_]['user'][$output['refnum']];
    }
    check_login_member($temp);
} elseif (!empty($_GET['to_id'])) {
    $output['fk_user_id'] = (int) $_GET['to_id'];
    $output['_user_other'] = get_user_by_userid($output['fk_user_id']);
    check_login_member('message_write');
} elseif (!empty($_GET['mail_id'])) {
    $output['refnum'] = mt_rand(10000, 99999);
    $_SESSION[_LICENSE_KEY_]['user'][$output['refnum']] = 'message_reply';
    check_login_member('message_reply');
    $mail_id = (int) $_GET['mail_id'];
    $query = "SELECT `mail_id`,`fk_user_id_other` as `fk_user_id`,`subject`,`message_body`,`_user_other`,`message_type` FROM `{$dbtable_prefix}user_inbox` WHERE `mail_id`={$mail_id} AND `fk_user_id`='" . $_SESSION[_LICENSE_KEY_]['user']['user_id'] . "'";
    if (!($res = @mysql_query($query))) {
        trigger_error(mysql_error(), E_USER_ERROR);
    }
    if (mysql_num_rows($res)) {
        $output = array_merge($output, mysql_fetch_assoc($res));
        $output['subject'] = substr($output['subject'], 0, 3) == 'Re:' ? $output['subject'] : 'Re: ' . $output['subject'];
        if ($output['message_type'] == MESS_MESS) {
            $output['message_body'] = "\n\n[quote]" . $output['message_body'] . '[/quote]';
        } else {
            $output['message_body'] = '';
        }
    }
    if (isset($_GET['gettpl'])) {
Beispiel #8
0
/******************************************************************************
Etano
===============================================================================
File:                       index.php
$Revision$
Software by:                DateMill (http://www.datemill.com)
Copyright by:               DateMill (http://www.datemill.com)
Support at:                 http://www.datemill.com/forum
*******************************************************************************
* See the "docs/licenses/etano.txt" file for license.                         *
******************************************************************************/
//define('CACHE_LIMITER','private');
require 'includes/common.inc.php';
require _BASEPATH_ . '/includes/user_functions.inc.php';
check_login_member('all');
$tpl = new phemplate(_BASEPATH_ . '/skins_site/' . get_my_skin() . '/', 'remove_nonjs');
$tpl->set_file('content', 'index.html');
sort($basic_search_fields, SORT_NUMERIC);
$search_loop = create_search_form($basic_search_fields);
$tplvars['title'] = $tplvars['sitename'];
$tpl->set_loop('search', $search_loop);
$tpl->set_var('tplvars', $tplvars);
$tpl->process('content', 'content', TPL_OPTIONAL | TPL_LOOP);
if (!empty($GLOBALS['page_last_modified_time'])) {
    //	header('Expires: '. gmdate('D,d M Y H:i:s',time()+1209600).' GMT',true);	// +14 days
    //	header('Expires: -1',true);
    header('Cache-Control: private, max-age=0', true);
    header('Last-Modified: ' . date('D,d M Y H:i:s', $GLOBALS['page_last_modified_time']) . ' GMT', true);
}
echo $tpl->process('content', 'content', TPL_FINISH | TPL_INCLUDE);
Beispiel #9
0
/******************************************************************************
Etano
===============================================================================
File:                       contact.php
$Revision$
Software by:                DateMill (http://www.datemill.com)
Copyright by:               DateMill (http://www.datemill.com)
Support at:                 http://www.datemill.com/forum
*******************************************************************************
* See the "docs/licenses/etano.txt" file for license.                         *
******************************************************************************/
require 'includes/common.inc.php';
require _BASEPATH_ . '/includes/user_functions.inc.php';
require _BASEPATH_ . '/skins_site/' . get_my_skin() . '/lang/contact.inc.php';
check_login_member('contact');
$tpl = new phemplate(_BASEPATH_ . '/skins_site/' . get_my_skin() . '/', 'remove_nonjs');
$config = get_site_option(array('use_captcha'), 'core');
$output = array();
if (isset($_SESSION['topass']['input'])) {
    $output = $_SESSION['topass']['input'];
}
if (empty($_SESSION[_LICENSE_KEY_]['user']['user_id'])) {
    if ($config['use_captcha']) {
        require _BASEPATH_ . '/includes/classes/sco_captcha.class.php';
        $c = new sco_captcha(_BASEPATH_ . '/includes/fonts', 4);
        $_SESSION['captcha_word'] = $c->gen_rnd_string(4);
        $output['rand'] = make_seed();
        $output['use_captcha'] = true;
    }
}
Beispiel #10
0
     trigger_error(mysql_error(), E_USER_ERROR);
 }
 if (mysql_num_rows($res)) {
     $output = array_merge($output, mysql_fetch_assoc($res));
     $output['date_sent'] = strftime($_SESSION[_LICENSE_KEY_]['user']['prefs']['datetime_format'], $output['date_sent'] + $_SESSION[_LICENSE_KEY_]['user']['prefs']['time_offset']);
     // it was saved sanitized so no need to resanitize here
     //		$output['subject']=sanitize_and_format($output['subject'],TYPE_STRING,$__field2format[TEXT_DB2DISPLAY]);
     switch ($output['message_type']) {
         case MESS_MESS:
             // it was saved sanitized so no need to resanitize here
             //				$output['message_body']=sanitize_and_format($output['message_body'],TYPE_STRING,$__field2format[TEXT_DB2DISPLAY]);
             check_login_member('message_read');
             $output['message_body'] = nl2br($output['message_body']);
             break;
         case MESS_FLIRT:
             check_login_member('flirt_read');
             break;
         case MESS_SYSTEM:
             // check_login_member('auth'); this check was made at the begining
             if (empty($output['_user_other'])) {
                 $output['_user_other'] = $GLOBALS['_lang'][135];
             }
             $tpl->set_var('spam_controls', false);
             break;
     }
     $output['message_body'] = text2smilies(bbcode2html($output['message_body']));
     if (empty($output['photo'])) {
         $output['photo'] = 'no_photo.gif';
     }
     if (empty($output['other_id'])) {
         unset($output['other_id']);
Beispiel #11
0
     $topass['message']['type'] = MESSAGE_ERROR;
     $topass['message']['text'] = $GLOBALS['_lang'][48];
 }
 if (!$error) {
     $query = "SELECT `flirt_text` as `message_body`,`flirt_type` FROM `{$dbtable_prefix}flirts` WHERE `flirt_id`=" . $input['flirt_id'];
     if (!($res = @mysql_query($query))) {
         trigger_error(mysql_error(), E_USER_ERROR);
     }
     if (mysql_num_rows($res)) {
         $input = array_merge($input, mysql_fetch_assoc($res));
         if ($input['flirt_type'] == FLIRT_INIT) {
             $input['ft'] = 'flirt_send';
         } else {
             $input['ft'] = 'flirt_reply';
         }
         check_login_member($input['ft']);
         $input['message_body'] = sanitize_and_format($input['message_body'], TYPE_STRING, $__field2format[TEXT_DB2DB]);
     } else {
         $error = true;
         $topass['message']['type'] = MESSAGE_ERROR;
         $topass['message']['text'] = $GLOBALS['_lang'][49];
     }
 }
 if (!$error) {
     $input['fk_user_id_other'] = $_SESSION[_LICENSE_KEY_]['user']['user_id'];
     $input['_user_other'] = $_SESSION[_LICENSE_KEY_]['user']['user'];
     $input['subject'] = sprintf($GLOBALS['_lang'][216], $_SESSION[_LICENSE_KEY_]['user']['user']);
     $input['message_type'] = MESS_FLIRT;
     if (isset($_on_before_insert)) {
         for ($i = 0; isset($_on_before_insert[$i]); ++$i) {
             call_user_func($_on_before_insert[$i]);
Beispiel #12
0
 // get the input we need and sanitize it
 unset($queue_message_default['types']['mail_id']);
 // no id cause we're not editing anything
 foreach ($queue_message_default['types'] as $k => $v) {
     $input[$k] = sanitize_and_format_gpc($_POST, $k, $__field2type[$v], $__field2format[$v] | FORMAT_HTML2TEXT_FULL, $queue_message_default['defaults'][$k]);
 }
 if (!empty($_POST['return'])) {
     $input['return'] = sanitize_and_format_gpc($_POST, 'return', TYPE_STRING, $__field2format[FIELD_TEXTFIELD] | FORMAT_RUDECODE, '');
     $nextpage = $input['return'];
 }
 if (!empty($_POST['refnum']) && isset($_SESSION[_LICENSE_KEY_]['user'][$_POST['refnum']])) {
     $input['refnum'] = $_SESSION[_LICENSE_KEY_]['user'][$_POST['refnum']];
 } else {
     $input['refnum'] = 'message_write';
 }
 check_login_member($input['refnum']);
 // check for input errors
 if (empty($input['fk_user_id'])) {
     $error = true;
     $topass['message']['type'] = MESSAGE_ERROR;
     $topass['message']['text'] = $GLOBALS['_lang'][75];
 }
 if (empty($input['subject'])) {
     $error = true;
     $topass['message']['type'] = MESSAGE_ERROR;
     $topass['message']['text'] = $GLOBALS['_lang'][196];
 }
 if (empty($input['message_body'])) {
     $error = true;
     $topass['message']['type'] = MESSAGE_ERROR;
     $topass['message']['text'] = $GLOBALS['_lang'][197];
Beispiel #13
0
/******************************************************************************
Etano
===============================================================================
File:                       processors/comment_addedit.php
$Revision$
Software by:                DateMill (http://www.datemill.com)
Copyright by:               DateMill (http://www.datemill.com)
Support at:                 http://www.datemill.com/forum
*******************************************************************************
* See the "docs/licenses/etano.txt" file for license.                         *
******************************************************************************/
require '../includes/common.inc.php';
require _BASEPATH_ . '/includes/user_functions.inc.php';
require _BASEPATH_ . '/skins_site/' . get_my_skin() . '/lang/comments.inc.php';
check_login_member('write_comments');
if (is_file(_BASEPATH_ . '/events/processors/comment_addedit.php')) {
    include _BASEPATH_ . '/events/processors/comment_addedit.php';
}
$error = false;
$qs = '';
$qs_sep = '';
$topass = array();
$nextpage = '';
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    $input = array();
    $input['comment_type'] = sanitize_and_format_gpc($_POST, 'comment_type', TYPE_STRING, $__field2format[FIELD_TEXTFIELD], '');
    switch ($input['comment_type']) {
        case 'blog':
            require _BASEPATH_ . '/includes/tables/comments_blog.inc.php';
            $item_default =& $comments_blog_default;
Beispiel #14
0
/******************************************************************************
Etano
===============================================================================
File:                       blog_addedit.php
$Revision$
Software by:                DateMill (http://www.datemill.com)
Copyright by:               DateMill (http://www.datemill.com)
Support at:                 http://www.datemill.com/forum
*******************************************************************************
* See the "docs/licenses/etano.txt" file for license.                         *
******************************************************************************/
require 'includes/common.inc.php';
require _BASEPATH_ . '/includes/user_functions.inc.php';
require _BASEPATH_ . '/includes/tables/user_blogs.inc.php';
require _BASEPATH_ . '/skins_site/' . get_my_skin() . '/lang/blogs.inc.php';
check_login_member('write_blogs');
$tpl = new phemplate(_BASEPATH_ . '/skins_site/' . get_my_skin() . '/', 'remove_nonjs');
$output = $user_blogs_default['defaults'];
if (isset($_SESSION['topass']['input'])) {
    $output = $_SESSION['topass']['input'];
    // our 'return' here was decoded in the processor
    $output['return2'] = $output['return'];
    $output['return'] = rawurlencode($output['return']);
} elseif (!empty($_GET['bid'])) {
    $blog_id = (int) $_GET['bid'];
    $query = "SELECT `blog_id`,`blog_name`,`blog_diz` FROM `{$dbtable_prefix}user_blogs` WHERE `blog_id`={$blog_id} AND `fk_user_id`='" . $_SESSION[_LICENSE_KEY_]['user']['user_id'] . "'";
    if (!($res = @mysql_query($query))) {
        trigger_error(mysql_error(), E_USER_ERROR);
    }
    if (mysql_num_rows($res)) {
        $output = mysql_fetch_assoc($res);
Beispiel #15
0
/******************************************************************************
Etano
===============================================================================
File:                       blog_view.php
$Revision$
Software by:                DateMill (http://www.datemill.com)
Copyright by:               DateMill (http://www.datemill.com)
Support at:                 http://www.datemill.com/forum
*******************************************************************************
* See the "docs/licenses/etano.txt" file for license.                         *
******************************************************************************/
//define('CACHE_LIMITER','private');
require 'includes/common.inc.php';
require _BASEPATH_ . '/includes/user_functions.inc.php';
require _BASEPATH_ . '/skins_site/' . get_my_skin() . '/lang/blogs.inc.php';
check_login_member('read_blogs');
$tpl = new phemplate(_BASEPATH_ . '/skins_site/' . get_my_skin() . '/', 'remove_nonjs');
$blog = array();
$output = array();
$loop = array();
$blog_id = '';
if (!empty($_GET['bid'])) {
    $blog_id = (string) (int) $_GET['bid'];
    if (is_file(_CACHEPATH_ . '/blogs/' . $blog_id[0] . '/' . $blog_id . '/blog.inc.php')) {
        include _CACHEPATH_ . '/blogs/' . $blog_id[0] . '/' . $blog_id . '/blog.inc.php';
    }
    $output = $blog;
    $year = sanitize_and_format_gpc($_GET, 'y', TYPE_INT, 0, 0);
    $month = sanitize_and_format_gpc($_GET, 'm', TYPE_INT, 0, 0);
    if (empty($year)) {
        $query = "SELECT YEAR(`date_posted`),MONTH(`date_posted`) FROM `{$dbtable_prefix}blog_posts` WHERE `fk_blog_id`={$blog_id} ORDER BY `date_posted` DESC LIMIT 1";
Beispiel #16
0
             // remove extra spaces and words with less than 3 chars
             $input['tags'] = trim(preg_replace(array("/\\s\\s+/", "/\\b[^\\s]{1,3}\\b/"), array(' ', ''), $input['tags']));
             $input['tags'] = sanitize_and_format($input['tags'], TYPE_STRING, $__field2format[FIELD_TEXTFIELD]);
             if (!empty($input['tags'])) {
                 $select .= ",MATCH (a.`title`,a.`post_content`) AGAINST ('" . $input['tags'] . "' IN BOOLEAN MODE) as `match_score`";
                 $where .= " AND MATCH (a.`title`,a.`post_content`) AGAINST ('" . $input['tags'] . "' IN BOOLEAN MODE)";
                 $orderby = "`match_score` DESC";
             } else {
                 $error = true;
             }
             break;
         default:
             break;
     }
 }
 check_login_member($input['acclevel_code']);
 if (!$error) {
     $query = "SELECT {$select} FROM {$from} WHERE {$where} ORDER BY {$orderby}";
     //print $query;
     //die;
     if (!($res = @mysql_query($query))) {
         trigger_error(mysql_error(), E_USER_ERROR);
     }
     for ($i = 0; $i < mysql_num_rows($res); ++$i) {
         $post_ids[] = mysql_result($res, $i, 0);
     }
     $serialized_input = sanitize_and_format(serialize($input), TYPE_STRING, $__field2format[FIELD_TEXTFIELD]);
     $output['search_md5'] = md5($serialized_input);
     $query = "INSERT IGNORE INTO `{$dbtable_prefix}site_searches` SET `search_md5`='" . $output['search_md5'] . "',`search_type`=" . SEARCH_BLOG . ",`search`='{$serialized_input}',`results`='" . join(',', $post_ids) . "'";
     if (!empty($_SESSION[_LICENSE_KEY_]['user']['user_id'])) {
         $query .= ",`fk_user_id`='" . $_SESSION[_LICENSE_KEY_]['user']['user_id'] . "'";
Beispiel #17
0
/******************************************************************************
Etano
===============================================================================
File:                       my_responses.php
$Revision$
Software by:                DateMill (http://www.datemill.com)
Copyright by:               DateMill (http://www.datemill.com)
Support at:                 http://www.datemill.com/forum
*******************************************************************************
* See the "docs/licenses/etano.txt" file for license.                         *
******************************************************************************/
require 'includes/common.inc.php';
require _BASEPATH_ . '/includes/user_functions.inc.php';
require _BASEPATH_ . '/includes/tables/user_mtpls.inc.php';
require _BASEPATH_ . '/skins_site/' . get_my_skin() . '/lang/mailbox.inc.php';
check_login_member('saved_messages');
$tpl = new phemplate(_BASEPATH_ . '/skins_site/' . get_my_skin() . '/', 'remove_nonjs');
$o = isset($_GET['o']) ? (int) $_GET['o'] : 0;
$r = !empty($_GET['r']) ? (int) $_GET['r'] : current($accepted_results_per_page);
$config['bbcode_message'] = get_site_option('bbcode_message', 'core');
$from = "`{$dbtable_prefix}user_mtpls`";
$where = "`fk_user_id`='" . $_SESSION[_LICENSE_KEY_]['user']['user_id'] . "'";
$query = "SELECT count(*) FROM {$from} WHERE {$where}";
if (!($res = @mysql_query($query))) {
    trigger_error(mysql_error(), E_USER_ERROR);
}
$totalrows = mysql_result($res, 0, 0);
$loop = array();
if (!empty($totalrows)) {
    if ($o >= $totalrows) {
        $o = $totalrows - $r;
Beispiel #18
0
/******************************************************************************
Etano
===============================================================================
File:                       processors/filters_addedit.php
$Revision$
Software by:                DateMill (http://www.datemill.com)
Copyright by:               DateMill (http://www.datemill.com)
Support at:                 http://www.datemill.com/forum
*******************************************************************************
* See the "docs/licenses/etano.txt" file for license.                         *
******************************************************************************/
require '../includes/common.inc.php';
require _BASEPATH_ . '/includes/user_functions.inc.php';
require _BASEPATH_ . '/includes/tables/message_filters.inc.php';
require _BASEPATH_ . '/skins_site/' . get_my_skin() . '/lang/mailbox.inc.php';
check_login_member('manage_folders');
if (is_file(_BASEPATH_ . '/events/processors/filters_addedit.php')) {
    include _BASEPATH_ . '/events/processors/filters_addedit.php';
}
$error = false;
$qs = '';
$qs_sep = '';
$topass = array();
$nextpage = 'filters.php';
$input = array();
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    // get the input we need and sanitize it
    foreach ($message_filters_default['types'] as $k => $v) {
        $input[$k] = sanitize_and_format_gpc($_POST, $k, $__field2type[$v], $__field2format[$v], $message_filters_default['defaults'][$k]);
    }
    $input['fk_user_id'] = $_SESSION[_LICENSE_KEY_]['user']['user_id'];
Beispiel #19
0
/******************************************************************************
Etano
===============================================================================
File:                       processors/net_deluser.php
$Revision$
Software by:                DateMill (http://www.datemill.com)
Copyright by:               DateMill (http://www.datemill.com)
Support at:                 http://www.datemill.com/forum
*******************************************************************************
* See the "docs/licenses/etano.txt" file for license.                         *
******************************************************************************/
require '../includes/common.inc.php';
require _BASEPATH_ . '/includes/user_functions.inc.php';
require _BASEPATH_ . '/includes/network_functions.inc.php';
require _BASEPATH_ . '/skins_site/' . get_my_skin() . '/lang/net.inc.php';
check_login_member('manage_networks');
if (is_file(_BASEPATH_ . '/events/processors/net_deluser.php')) {
    include _BASEPATH_ . '/events/processors/net_deluser.php';
}
$error = false;
$qs = '';
$qs_sep = '';
$topass = array();
$nextpage = 'home.php';
$input = array();
// get the input we need and sanitize it
$input['uid'] = sanitize_and_format_gpc($_GET, 'uid', TYPE_INT, 0, 0);
$input['net_id'] = sanitize_and_format_gpc($_GET, 'net_id', TYPE_INT, 0, 0);
if (!empty($_GET['return'])) {
    $input['return'] = sanitize_and_format_gpc($_GET, 'return', TYPE_STRING, $__field2format[FIELD_TEXTFIELD] | FORMAT_RUDECODE, '');
    $nextpage = $input['return'];
Beispiel #20
0
/******************************************************************************
Etano
===============================================================================
File:                       processors/photo_settings.php
$Revision$
Software by:                DateMill (http://www.datemill.com)
Copyright by:               DateMill (http://www.datemill.com)
Support at:                 http://www.datemill.com/forum
*******************************************************************************
* See the "docs/licenses/etano.txt" file for license.                         *
******************************************************************************/
require '../includes/common.inc.php';
require _BASEPATH_ . '/includes/user_functions.inc.php';
require _BASEPATH_ . '/includes/tables/user_photos.inc.php';
require _BASEPATH_ . '/skins_site/' . get_my_skin() . '/lang/photos.inc.php';
check_login_member('upload_photos');
if (is_file(_BASEPATH_ . '/events/processors/photo_settings.php')) {
    include _BASEPATH_ . '/events/processors/photo_settings.php';
}
$error = false;
$qs = '';
$qs_sep = '';
$topass = array();
$nextpage = 'my_photos.php';
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    $input = array();
    // get the input we need and sanitize it
    foreach ($user_photos_default['types'] as $k => $v) {
        $input[$k] = sanitize_and_format_gpc($_POST, $k, $__field2type[$v], $__field2format[$v], array());
    }
    if (empty($input['is_main'])) {
Beispiel #21
0
/******************************************************************************
Etano
===============================================================================
File:                       mailbox.php
$Revision$
Software by:                DateMill (http://www.datemill.com)
Copyright by:               DateMill (http://www.datemill.com)
Support at:                 http://www.datemill.com/forum
*******************************************************************************
* See the "docs/licenses/etano.txt" file for license.                         *
******************************************************************************/
require 'includes/common.inc.php';
require _BASEPATH_ . '/includes/user_functions.inc.php';
require _BASEPATH_ . '/includes/tables/user_inbox.inc.php';
require _BASEPATH_ . '/skins_site/' . get_my_skin() . '/lang/mailbox.inc.php';
check_login_member('inbox');
$message_types = array(MESS_MESS => 'mail', MESS_FLIRT => 'flirt', MESS_SYSTEM => 'system');
$tpl = new phemplate(_BASEPATH_ . '/skins_site/' . get_my_skin() . '/', 'remove_nonjs');
$o = isset($_GET['o']) ? (int) $_GET['o'] : 0;
$r = !empty($_GET['r']) ? (int) $_GET['r'] : current($accepted_results_per_page);
$ob = isset($_GET['ob']) ? (int) $_GET['ob'] : 7;
$od = isset($_GET['od']) ? (int) $_GET['od'] : 1;
$orderkeys = array_keys($user_inbox_default['defaults']);
$orderby = '';
if ($ob >= 0) {
    $orderby = 'ORDER BY `' . $orderkeys[$ob] . '`';
    if ($od == 0) {
        $orderby .= ' ASC';
    } else {
        $orderby .= ' DESC';
    }