Beispiel #1
0
<?php

// ________ TOOLS ________
session_start();
// $db = mysqli_connect('192.168.1.7', 'root', 'troiswa', 'ecommerce');
$db = new PDO("mysql:host=192.168.1.7;dbname=ecommerce", 'root', 'troiswa');
if ($db === false) {
    require 'apps/404.php';
}
spl_autoload_register(function ($class) {
    require 'models/' . $class . '.class.php';
});
if (isset($_SESSION['id'])) {
    $userManager = new UserManager($db);
    $currentUser = $userManager->getCurrent();
} else {
    $_SESSION['visiteur'] = true;
}
// Init constantes
require 'init_const.php';
// ________ HUB ________
// Pages
$access_public = array('404', 'home', 'category', 'sub_category', 'list-product', 'product', 'basket', 'register', 'login');
$access_user = array('404', 'home', 'category', 'sub_category', 'list-product', 'product', 'basket', 'profil', 'logout', 'edit_profil', 'edit_address');
$access_admin = array('404', 'home', 'create_category', 'category', 'create_sub_category', 'sub_category', 'create_product', 'list-product', 'product', 'basket', 'profil', 'logout', 'dashboard_user', 'dashboard_message', 'dashboard_order', 'edit_profil', 'edit_address');
// Traitements
$traitements_public = array('product' => 'product', 'basket' => 'basket', 'register' => 'user', 'login' => 'user');
$traitements_user = array('product' => 'product', 'product' => 'message', 'basket' => 'basket', 'profil' => 'user', 'logout' => 'user', 'edit_profil' => 'user', 'edit_address' => 'user');
$traitements_admin = array('create_category' => 'sections', 'create_sub_category' => 'sections', 'create_product' => 'product', 'product' => 'product', 'product' => 'message', 'basket' => 'basket', 'profil' => 'user', 'logout' => 'user', 'dashboard_user' => 'user', 'dashboard_message' => 'message', 'dashboard_order' => 'order', 'edit_profil' => 'user', 'edit_address' => 'user');
$page = 'home';
$errors = array();
<table class="commenttable">
<tbody>
<?php 
//I really don't know if I want to have this page serve json and have browsers turn the json into html
//or if I want to send an html table like this
//header("Content-Type: application/json");
//echo(json_encode(include(realpath(dirname(__DIR__) . "/private/json/getComments.php"))));
include_once realpath(dirname(__DIR__) . "/private/class/UserManager.php");
$response = (include realpath(dirname(__DIR__) . "/private/json/getPageCommentsWithUsers.php"));
$user = UserManager::getCurrent();
if (empty($response)) {
    echo "<tr style=\"vertical-align:top\">";
    echo "<td colspan=\"2\" style=\"text-align: center;\">";
    echo "Bad Request.";
    echo "</td></tr>";
} else {
    $users = $response['users'];
    $comments = $response['comments'];
    if ($user) {
        echo "<tr style=\"vertical-align:top\">";
        echo "<td>Leave a comment:</td>";
        echo "<td style=\"text-align:center\"><textarea name=\"comment\" style=\"font-size:0.6em;\"></textarea><input type=\"submit\" value=\"Post\">";
        echo "</td></tr>";
    }
    if (empty($comments)) {
        echo "<tr style=\"vertical-align:top\">";
        echo "<td colspan=\"2\" style=\"text-align: center;\">";
        echo "There are no comments here yet.";
        echo "</td></tr>";
    } else {
        foreach ($comments as $comment) {
<?php

session_start();
require_once realpath(dirname(__DIR__) . "/../private/class/AddonManager.php");
var_dump($_POST);
$userObject = UserManager::getCurrent();
if (!$userObject || !$userObject->inGroup("Reviewer")) {
    header('Location: /addons');
    return;
}
if (isset($_POST['action']) && is_object($userObject)) {
    if ($_POST['action'] == "Approve") {
        // approve
        AddonManager::approveAddon($_POST['aid'], $_POST['board'], $userObject->getBLID());
        header('Location: list.php');
    } else {
        if ($_POST['action'] == "Reject") {
            AddonManager::rejectAddon($_POST['aid'], $_POST['reason'], $userObject->getBLID());
            header('Location: list.php');
        }
    }
}
<?php

require_once realpath(dirname(__DIR__) . "/private/class/AddonManager.php");
$uo = UserManager::getCurrent();
if (isset($_REQUEST['aid']) && isset($_REQUEST['rating'])) {
    $aid = $_REQUEST['aid'];
    $rating = $_REQUEST['rating'];
    $blid = $uo->getBLID();
    $newAvg = AddonManager::submitRating($aid, $blid, $rating);
    echo $newAvg;
}
Beispiel #5
0
 public function create($idTopic, $content)
 {
     $post = new Post();
     $set = $post->setContent($content);
     if ($set === true) {
         $manager = new TopicManager($this->db);
         $topic = $manager->findById($idTopic);
         $set = $post->setIdTopic($topic);
         if ($set === true) {
             if (isset($_SESSION['id'])) {
                 $manager = new UserManager($this->db);
                 $user = $manager->getCurrent();
                 $set = $post->setIdAuthor($user);
                 if ($set === true) {
                     $idAuthor = intval($user->getId());
                     $idTopic = intval($post->getIdTopic());
                     $content = mysqli_real_escape_string($this->db, $post->getContent());
                     $query = "INSERT INTO post (id_author, id_topic, content) VALUES (" . $idAuthor . ", " . $idTopic . ", '" . $content . "')";
                     $result = mysqli_query($this->db, $query);
                     if ($result) {
                         $id = mysqli_insert_id($this->db);
                         if ($id) {
                             return $this->findById($id);
                         } else {
                             return "Erreur serveur.";
                         }
                     } else {
                         return mysqli_error();
                     }
                 } else {
                     return $set;
                 }
             } else {
                 return "Utilisateur déconnecté.";
             }
         } else {
             return $set;
         }
     } else {
         return $set;
     }
 }
</h1>
  <hr />
  You can reclaim your old RTB add-ons and have them automatically imported and updated, reclaiming your old users and issuing them the latest version.<br />
  <br />
  Name of Current Add-On on Glass: <input type="text" id="addon" />
  <form method="post" action="">
    <input type="hidden" name="action" value="reclaim" />
    <div id="options">

    </div>
  </form>
</div>
<script type="text/javascript">
$("#addon").keyup(function() {
  $.ajax({
    url: "/ajax/searchAddonNames.php?owner=<?php 
echo UserManager::getCurrent()->getBlid();
?>
&query=" + $("#addon").val()
  }).done(function(data) {
    res = JSON.parse(data);
    var html = "";
    for(i = 0; i < res.length; i++) {
      html = html + "<b>" + res[i].name + "</b> <button name=\"aid\" type=\"submit\" value=\"" + res[i].id + "\">Reclaim</button><br />";
    }
    $("#options").html(html);
  })
});
</script>
<?php 
include realpath(dirname(__DIR__) . "/../private/footer.php");
Beispiel #7
0
					$('#star' + (i+2)).attr("src","/img/icons32/draw_star.png");
				}
			});
		});
		<?php 
}
?>
	});
</script>
<div class="maincontainer">
	<?php 
echo "<span style=\"font-size: 0.8em; padding-left: 10px\"><a href=\"/addons/\">Add-Ons</a> >> ";
echo "<a href=\"/addons/boards.php\">Boards</a> >> ";
echo "<a href=\"board.php?id=" . $boardObject->getID() . "\">" . utf8_encode($boardObject->getName()) . "</a> >> ";
echo "<a href=\"#\">" . $addonObject->getName() . "</a></span>";
if ($current = UserManager::getCurrent()) {
    if ($current->inGroup("Moderator")) {
        echo "<div style=\"background-color: #aabbcc; padding: 10px; border-radius:10px; margin-top:10px; text-align:center\"><a href=\"moderate.php?id=" . $addonObject->getId() . "\">Moderator Settings</a></div>";
    }
}
echo '<div class="tile">';
echo "<h2 style=\"margin-bottom: 0px;\">" . $addonObject->getName() . "</h2>";
$authors = $addonObject->getAuthorInfo();
echo "Uploaded by ";
if (sizeof($authors) == 1) {
    //$uo = new UserHandler();
    //$uo->initFromId($authors[0]->id);
    $name = UserLog::getCurrentUsername($authors[0]->blid);
    echo "<a href=\"/user/view.php?blid=" . $authors[0]->blid . "\">" . utf8_encode($name) . "</a>";
} else {
    if (sizeof($authors) == 2) {