$sql="select * from groupe";
$link=query($sql);
while($tbl_result=fetch($link)){
$sql="select * from droits where droitarbre=1";
$link_droits=query($sql);
while($tbl_result_droits=fetch($link_droits)){
$sql="insert into groupe_arbre (arbre_id,droits_id,groupe_id) values (".$arbre_id.",".$tbl_result_droits["droits_id"].",".$tbl_result["groupe_id"].")";
query($sql);
}
}
*/
}
$sql = "select * from " . __racinebd__ . "langue where active=1";
$link = query($sql);
while ($tbl_result = fetch($link)) {
$name = $_GET["pere"] == "" || $_GET["pere"] == "0" ? $_POST["titre1"] : makename($_POST["titre1"]);
if ($tbl_result["langue_id"] == $_GET["langue_id"]) {
$sql = "insert into " . __racinebd__ . "contenu (arbre_id,langue_id,nom,translate) values (" . $arbre_id . "," . $tbl_result["langue_id"] . ",'" . $name . "',1)";
query($sql);
$contenu_id = insert_id();
} else {
$sql = "insert into " . __racinebd__ . "contenu (arbre_id,langue_id,nom,translate) values (" . $arbre_id . "," . $tbl_result["langue_id"] . ",'" . $name . "',0)";
query($sql);
}
}
$szQuery = "insert into {$table} (titre1,titre2,titre3,titre4,titre5,abstract,contenu,date_actu,date_fin,ext,version_id,contenu_id,ext2,note,abstract2,abstract3,abstract4,abstract5,ext3,ext4,twitter,tva_id,fournisseur_id,note1,note2,note3,note4,archive,envoye,titleseo,abstractseo,robotseo,ext5)\r\n values ('" . addquote($_POST["titre1"]) . "','" . addquote($_POST["titre2"]) . "','" . addquote($_POST["titre3"]) . "','" . addquote($_POST["titre4"]) . "','" . addquote($_POST["titre5"]) . "','" . addquote($_POST["abstract"]) . "',\r\n '" . addquote($_POST["contenu"]) . "','" . datetimebdd($_POST["date_actu"]) . "','" . datetimebdd($_POST["date_fin"]) . "',{$myext}," . $_POST["version_id"] . "," . $contenu_id . ",{$myext2},'" . $_POST["note"] . "','" . addquote($_POST["abstract2"]) . "','" . addquote($_POST["abstract3"]) . "',\r\n '" . addquote($_POST["abstract4"]) . "','" . addquote($_POST["abstract5"]) . "',{$myext3},{$myext4},'" . addquote($_POST["twitter"]) . "','" . addquote($_POST["tva_id"]) . "','" . addquote($_POST["fournisseur_id"]) . "','" . addquote($_POST["note1"]) . "',\r\n '" . addquote($_POST["note2"]) . "','" . addquote($_POST["note3"]) . "','" . addquote($_POST["note4"]) . "','" . addquote($_POST["archive"]) . "','" . addquote($_POST["envoye"]) . "','" . addquote($_POST["titleseo"]) . "','" . addquote($_POST["abstractseo"]) . "','" . addquote($_POST["robotseo"]) . "',{$myext5})";
$link = query($szQuery);
$id = insert_id();
//copy du master content dans les autres langues
createdefault("ext", $table, $id);
createdefault("ext2", $table . "2_", $id);
function copyNode($dragID, $dropID, $chgname = true)
{
if ($dropID == "_1") {
$requete_pere_alias = "select arbre_id from " . __racinebd__ . "arbre where pere is null and supprimer = 0";
$link_pere_alias = query($requete_pere_alias);
$nombre_pere_alias = num_rows($link_pere_alias);
$mon_pere_dropID = "";
} else {
$requete_pere_alias = "select arbre_id from " . __racinebd__ . "arbre where pere = " . $dropID . " and supprimer = 0";
$link_pere_alias = query($requete_pere_alias);
$nombre_pere_alias = num_rows($link_pere_alias);
$mon_pere_dropID = $dropID;
}
//$requete = "select * from arbre where arbre_id = ".$dragID." and langue_id = '".$_GET["la_langue"]."'";
$requete = "select * from " . __racinebd__ . "arbre where arbre_id = " . $dragID;
$link = query($requete);
while ($ligne = fetch($link)) {
$requete_insert = "insert into " . __racinebd__ . "arbre (gabarit_id,pere,supprimer,users_id_crea,users_id_verrou,arbre_id_alias,secure,ordre,etat_id,root) values (\r\n " . ($ligne['gabarit_id'] == "" ? "null" : $ligne['gabarit_id']) . ",\r\n " . ($mon_pere_dropID == "" ? "null" : $mon_pere_dropID) . ",\r\n " . ($ligne['supprimer'] == "" ? "null" : $ligne['supprimer']) . ", \r\n " . $_SESSION["users_id"] . ",\r\n " . ($ligne['users_id_verrou'] == "" ? "null" : $ligne['users_id_verrou']) . ",\r\n " . ($ligne['arbre_id_alias'] == "" ? "null" : $ligne['arbre_id_alias']) . ",\r\n " . ($ligne['secure'] == "" ? "null" : $ligne['secure']) . ",\r\n " . ($ligne['ordre'] == "" ? "null" : $nombre_pere_alias + 1) . ",\r\n " . ($ligne['etat_id'] == "" ? "null" : $ligne['etat_id']) . ",\r\n " . getroot($mon_pere_dropID) . "\r\n )";
$link_insert = query($requete_insert);
}
$dernier_ajout = insert_id();
//for($j=1;$j<=2;$j++){
//$requete_select = "select * from contenu where arbre_id = ".$dragID." and langue_id = ".$j;
$requete_select = "select * from " . __racinebd__ . "contenu where arbre_id = " . $dragID;
$link_select = query($requete_select);
while ($ligne_select = fetch($link_select)) {
$name = $chgname ? makename("clone__" . $ligne_select['nom']) : $ligne_select['nom'];
$requete_insert_contenu = "insert into " . __racinebd__ . "contenu (arbre_id,langue_id,translate,nom) values (\r\n " . $dernier_ajout . ",\r\n " . $ligne_select['langue_id'] . ",\r\n " . $ligne_select['translate'] . ",\r\n '" . $name . "'\r\n )";
$link_insert_contenu = query($requete_insert_contenu);
$dernier_ajout_contenu = insert_id();
$requete_select_content = "select * from " . __racinebd__ . "content where contenu_id = " . $ligne_select['contenu_id'];
$link_select_content = query($requete_select_content);
//$result = mysql_query("select * from table");
while ($ligne_select_content = fetch($link_select_content)) {
$requete = "insert into " . __racinebd__ . "content ";
$listchamps = array();
$listvalue = array();
$listext = array();
$listchamps[] = "contenu_id";
$listvalue[] = $dernier_ajout_contenu;
for ($i = 0; $i < mysql_num_fields($link_select_content); $i++) {
if (mysql_field_name($link_select_content, $i) != "content_id" && mysql_field_name($link_select_content, $i) != "contenu_id") {
$listchamps[] = mysql_field_name($link_select_content, $i);
if (strpos(mysql_field_name($link_select_content, $i), "ext") === false) {
$listvalue[] = "'" . addslashes($ligne_select_content[mysql_field_name($link_select_content, $i)]) . "'";
} else {
$listvalue[] = $ligne_select_content[mysql_field_name($link_select_content, $i)] == "" ? "null" : "'" . $ligne_select_content[mysql_field_name($link_select_content, $i)] . "'";
$listext[] = mysql_field_name($link_select_content, $i);
}
}
}
$requete_insert_content = "insert into " . __racinebd__ . "content (" . implode(",", $listchamps) . ") values(" . implode(",", $listvalue) . ")";
//print $requete_insert_content;
//echo $requete_insert_content;
$link_insert_content = query($requete_insert_content);
$dernier_ajout_content = insert_id();
for ($listextindice = 0; $listextindice < count($listext); $listextindice++) {
$suffixe = $listextindice == 0 ? "" : $listextindice + 1 . "_";
//print $_SERVER["DOCUMENT_ROOT"].__uploaddir__.__racinebd__.'content'.$suffixe.$ligne_select_content['content_id'].'.'.$ligne_select_content[$listext[$listextindice]]."<br>";
@copy($_SERVER["DOCUMENT_ROOT"] . __uploaddir__ . __racinebd__ . 'content' . $suffixe . $ligne_select_content['content_id'] . '.' . $ligne_select_content[$listext[$listextindice]], $_SERVER["DOCUMENT_ROOT"] . __uploaddir__ . __racinebd__ . 'content' . $suffixe . $dernier_ajout_content . '.' . $ligne_select_content[$listext[$listextindice]]);
@copy($_SERVER["DOCUMENT_ROOT"] . __uploaddir__ . 'tbl_' . __racinebd__ . 'content' . $suffixe . $ligne_select_content['content_id'] . '.' . $ligne_select_content[$listext[$listextindice]], $_SERVER["DOCUMENT_ROOT"] . __uploaddir__ . 'tbl_' . __racinebd__ . 'content' . $suffixe . $dernier_ajout_content . '.' . $ligne_select_content[$listext[$listextindice]]);
for ($i = 0; $i < 5; $i++) {
@copy($_SERVER["DOCUMENT_ROOT"] . __uploaddir__ . 'tbl_' . $i . __racinebd__ . 'content' . $suffixe . $ligne_select_content['content_id'] . '.' . $ligne_select_content[$listext[$listextindice]], $_SERVER["DOCUMENT_ROOT"] . __uploaddir__ . 'tbl_' . $i . __racinebd__ . 'content' . $suffixe . $dernier_ajout_content . '.' . $ligne_select_content[$listext[$listextindice]]);
}
}
$requete_select_fichier = "select * from " . __racinebd__ . "fichiers where content_id = " . $ligne_select_content['content_id'] . " and supprimer=0";
$link_select_fichier = query($requete_select_fichier);
while ($ligne_select_fichier = fetch($link_select_fichier)) {
$requete_insert_fichier = "insert into " . __racinebd__ . "fichiers (content_id,titre,abstract,ext,nom_fichier,supprimer,contenu) values (\r\n " . $dernier_ajout_content . ",\r\n '" . addslashes($ligne_select_fichier['titre']) . "',\r\n '" . addslashes($ligne_select_fichier['abstract']) . "',\r\n " . ($ligne_select_fichier['ext'] == "" ? "null" : "'" . $ligne_select_fichier['ext'] . "'") . ",\r\n '" . addslashes($ligne_select_fichier['nom_fichier']) . "',\r\n " . $ligne_select_fichier['supprimer'] . ",\r\n '" . addslashes($ligne_select_fichier['contenu']) . "'\r\n )";
$link_insert_fichier = query($requete_insert_fichier);
$dernier_ajout_fichier = insert_id();
copy($_SERVER["DOCUMENT_ROOT"] . __uploaddir__ . __racinebd__ . 'fichiers' . $ligne_select_fichier['fichiers_id'] . '.' . $ligne_select_fichier['ext'], $_SERVER["DOCUMENT_ROOT"] . __uploaddir__ . __racinebd__ . 'fichiers' . $dernier_ajout_fichier . '.' . $ligne_select_fichier['ext']);
}
}
}
//affectation des droits identique a ceux du pere
$sql = "select * from " . __racinebd__ . "groupe_arbre where arbre_id='" . ($mon_pere_dropID == "" ? "null" : $mon_pere_dropID) . "'";
$link = query($sql);
if (num_rows($link) > 0) {
while ($tbl_result = fetch($link)) {
$sql = "insert into " . __racinebd__ . "groupe_arbre (arbre_id,droits_id,groupe_id) values (" . $dernier_ajout . "," . $tbl_result["droits_id"] . "," . $tbl_result["groupe_id"] . ")";
query($sql);
}
}
return array(true, $dernier_ajout);
}
function urlp($arbre_id, $langue_id = 0, $first = true)
{
//print __html__;
if (function_exists(urlpcustom) && __html__ === true) {
return urlpcustom($arbre_id, $langue_id = 0, $first = true);
} else {
if (defined("__racineurl__")) {
$racineurl = __racineurl__;
} else {
$racineurl = "";
}
$langue_id = $langue_id == 0 && $_GET["la_langue"] == "" ? __defaultlangueid__ : ($langue_id != "" ? $langue_id : $_GET["la_langue"]);
$sql = "select shortlib from " . __racinebd__ . "langue where langue_id=" . $langue_id;
$link = query($sql);
$tbl_result = fetch($link);
$shortlib = $tbl_result["shortlib"];
$sql = "select a.supprimer,nom,pere,etat_id from " . __racinebd__ . "arbre a inner join " . __racinebd__ . "contenu c on a.arbre_id=c.arbre_id and langue_id=" . $langue_id . " where c.arbre_id='" . $arbre_id . "'";
$link = query($sql);
$tbl_result = fetch($link);
if ($tbl_result["etat_id"] == 1 && $tbl_result["supprimer"] == 0 || !$first || $_GET["mode"] == "preview") {
if ($tbl_result["pere"] == "") {
if (__showlang__) {
return $tbl_result["nom"] . __parser__ . $shortlib;
} else {
return $tbl_result["nom"] . __parser__;
}
} else {
return urlp($tbl_result["pere"], $langue_id, false) . "/" . makename($tbl_result["nom"]);
}
} else {
if ($arbre_id != 0) {
return "#";
} else {
if (__showlang__) {
return $tbl_result["nom"] . "/" . __parser__ . $shortlib;
} else {
return $tbl_result["nom"] . "/" . __parser__;
}
}
}
}
}
<?php
require "../../require/function.php";
require "../../require/back_include.php";
set_time_limit(3600);
if ($_FILES["ext"]["tmp_name"] != "") {
//creation du repertoire tmp
//@mkdir ($_SERVER["DOCUMENT_ROOT"].__uploaddir__."u".$_SESSION['users_id'], 0775);
//deplacement du fichier
//move_uploaded_file($_FILES[ext]["tmp_name"],$_SERVER["DOCUMENT_ROOT"].__uploaddir__."u".$_SESSION['users_id']."/".$_FILES["ext"]["name"]);
//$filename=preg_replace('/[^a-z0-9_\-\.]/i', '_', $_FILES["ext"]["name"]);
$filename = preg_replace('/[^a-z0-9_\\-\\.]/i', '_', $_FILES["ext"]["name"]);
$filename = makename($_FILES["ext"]["name"]);
//if(move_uploaded_file($_FILES["ext"]["tmp_name"],$_SERVER["DOCUMENT_ROOT"].__uploaddir__."u".$_SESSION['users_id']."/".$filename)===false){
//sauvegarde en base
$ext = getext($_FILES["ext"]["name"]);
//$sql="insert into ".__racinebd__."fichiers (titre,abstract,ext,nom_fichier,contenu) value('".addquote($_POST["titre_fichier"])."','".addquote($_POST["description_fichier"])."','".$ext."','".$filename."','".$contenu."')";
$sql = "insert into " . __racinebd__ . "fichiers (titre,abstract,ext,nom_fichier) value('" . addquote($_POST["titre_fichier"]) . "','" . addquote($_POST["description_fichier"]) . "','" . $ext . "','" . addquote($filename) . "')";
//print $sql;
$link = query($sql);
$fichiers_id = insert_id();
savefile("ext", __racinebd__ . "fichiers", $fichiers_id);
//print $_SERVER["DOCUMENT_ROOT"].__uploaddir__.__racinebd__."fichiers".$fichiers_id.".".$ext;
if (PHANTOM_FULLTEXT == true) {
$contenu = addslashes(extract2tmpfile($ext, $_SERVER["DOCUMENT_ROOT"] . __uploaddir__ . __racinebd__ . "fichiers" . $fichiers_id . "." . $ext));
}
if ($contenu == '') {
$contenu = addquote($_POST["description_fichier"]);
}
$sql = "update " . __racinebd__ . "fichiers set contenu='" . $contenu . "' where fichiers_id=" . $fichiers_id;
query($sql);
