if (!($logged['admin'] = member_auth(1, false))) { if (!($logged['member'] = member_auth(0, false))) { if (!($logged['aff'] = member_auth(2, false))) { $logged['moderator'] = member_auth(3, false); } } } $_page['header'] = _t("_view Photo"); $_ni = $_page['name_index']; $member['ID'] = (int) $_COOKIE['memberID']; $iFile = isset($_GET['fileID']) ? (int) $_GET['fileID'] : 0; if (isset($_POST['commentAdd']) && isset($_POST['commentText']) && strlen($_POST['commentText']) > 0) { $iFileID = (int) $_POST['fileID']; $iUser = (int) $_POST['profileID']; $sText = htmlspecialchars_adv($_POST['commentText']); addMediaComment($iFileID, $iUser, $sText, 'Photo'); header('location:' . $_SERVER['PHP_SELF'] . '?fileID=' . $_POST['fileID']); } $sQuery = "\r\n\t\tSELECT `sharePhotoFiles`.*,\r\n\t\t\t\tUNIX_TIMESTAMP(`sharePhotoFiles`.`medDate`) as `medDate`,\r\n\t\t\t\tCOUNT( `share1`.`medID` ) AS `medCount`,\r\n\t\t\t\t`Profiles`.`NickName`\r\n\t\tFROM `sharePhotoFiles`\r\n\t\tLEFT JOIN `sharePhotoFiles` AS `share1` USING ( `medProfId` )\r\n\t\tINNER JOIN `Profiles` ON `Profiles`.`ID`=`sharePhotoFiles`.`medProfId`\r\n\t\tWHERE `sharePhotoFiles`.`medID` = {$iFile}\r\n\t\tGROUP BY `share1`.`medProfId`\r\n\t"; $aFile = db_arr($sQuery); $check_res = checkAction($member['ID'], ACTION_ID_VIEW_GALLERY_PHOTO); if ($check_res[CHECK_ACTION_RESULT] != CHECK_ACTION_RESULT_ALLOWED && !$logged['admin'] && !$logged['moderator'] && $aFile['medProfId'] != $member['ID']) { $ret = "\r\n \t<table width=100% height=100% cellpadding=0 cellspacing=0 class=text2>\r\n \t\t<td align=center bgcolor={$boxbg2}>\r\n \t\t\t" . $check_res[CHECK_ACTION_MESSAGE] . "<br />\r\n \t\t</td>\r\n \t</table>\n"; $_page['name_index'] = 0; $_page_cont[0]['page_main_code'] = $ret; PageCode(); exit; } if (is_array($aFile)) { $_page['header'] = $aFile['medTitle']; db_res("UPDATE `sharePhotoFiles` SET `medViews` = `medViews` + 1 WHERE `medID`='{$iFile}'");
if (!($logged['admin'] = member_auth(1, false))) { if (!($logged['member'] = member_auth(0, false))) { if (!($logged['aff'] = member_auth(2, false))) { $logged['moderator'] = member_auth(3, false); } } } $_page['header'] = _t("_view Video"); $_ni = $_page['name_index']; $member['ID'] = (int) $_COOKIE['memberID']; $iFile = isset($_GET['fileID']) ? (int) $_GET['fileID'] : 0; if (isset($_POST['commentAdd']) && isset($_POST['commentText']) && strlen($_POST['commentText']) > 0) { $iFileID = (int) $_POST['fileID']; $iUser = (int) $_POST['profileID']; $sText = htmlspecialchars_adv($_POST['commentText']); addMediaComment($iFileID, $iUser, $sText, 'Video'); header('location:' . $_SERVER['PHP_SELF'] . '?fileID=' . $_POST['fileID']); } $sQuery = "\r\n\t\tSELECT `RayMovieFiles`.`ID` as `medID`,\r\n\t\t\t\t`RayMovieFiles`.`Title` as `medTitle`,\r\n\t\t\t\t`RayMovieFiles`.`Tags` as `medTags`,\r\n\t\t\t\t`RayMovieFiles`.`Description` as `medDesc`,\r\n\t\t\t\t`RayMovieFiles`.`Date` as `medDate`,\r\n\t\t\t\t`RayMovieFiles`.`Views` as `medViews`,\r\n\t\t\t\t`RayMovieFiles`.`Owner` as `medProfId`,\r\n\t\t\t\tCOUNT( `share1`.`ID` ) AS `medCount`,\r\n\t\t\t\t`Profiles`.`NickName`\r\n\t\tFROM `RayMovieFiles`\r\n\t\tLEFT JOIN `RayMovieFiles` AS `share1` USING ( `Owner` )\r\n\t\tINNER JOIN `Profiles` ON `Profiles`.`ID`=`RayMovieFiles`.`Owner`\r\n\t\tWHERE `RayMovieFiles`.`ID` = {$iFile}\r\n\t\tGROUP BY `share1`.`Owner`\r\n\t"; $aFile = db_arr($sQuery); $check_res = checkAction($member['ID'], ACTION_ID_VIEW_GALLERY_VIDEO); if ($check_res[CHECK_ACTION_RESULT] != CHECK_ACTION_RESULT_ALLOWED && !$logged['admin'] && !$logged['moderator'] && $aFile['medProfId'] != $member['ID']) { $ret = "\r\n \t<table width=100% height=100% cellpadding=0 cellspacing=0 class=text2>\r\n \t\t<td align=center bgcolor={$boxbg2}>\r\n \t\t\t" . $check_res[CHECK_ACTION_MESSAGE] . "<br />\r\n \t\t</td>\r\n \t</table>\n"; $_page['name_index'] = 0; $_page_cont[0]['page_main_code'] = $ret; PageCode(); exit; } if (is_array($aFile)) { $_page['header'] = $aFile['medTitle']; db_res("UPDATE `RayMovieFiles` SET `Views` = `Views` + 1 WHERE `ID`='{$iFile}'");
if (!($logged['member'] = member_auth(0, false))) { if (!($logged['aff'] = member_auth(2, false))) { $logged['moderator'] = member_auth(3, false); } } } $_page['header'] = _t("_view Music"); $_ni = $_page['name_index']; $member['ID'] = (int) $_COOKIE['memberID']; $member['Password'] = $_COOKIE['memberPassword']; $iFile = isset($_GET['fileID']) ? (int) $_GET['fileID'] : 0; if (isset($_POST['commentAdd']) && isset($_POST['commentText']) && strlen($_POST['commentText']) > 0) { $iFileID = (int) $_POST['fileID']; $iUser = (int) $_POST['profileID']; $sText = htmlspecialchars_adv($_POST['commentText']); addMediaComment($iFileID, $iUser, $sText, 'Music'); header('location:' . $_SERVER['PHP_SELF'] . '?fileID=' . $_POST['fileID']); } $sQuery = "\r\n\tSELECT `RayMusicFiles`.`ID` as `medID`,\r\n\t\t\t`RayMusicFiles`.`Title` as `medTitle`,\r\n\t\t\t`RayMusicFiles`.`Tags` as `medTags`,\r\n\t\t\t`RayMusicFiles`.`Description` as `medDesc`,\r\n\t\t\t`RayMusicFiles`.`Date` as `medDate`,\r\n\t\t\t`RayMusicFiles`.`Listens` as `medListens`,\r\n\t\t\t`RayMusicFiles`.`Owner` as `medProfId`,\r\n\t\t\tCOUNT( `share1`.`ID` ) AS `medCount`,\r\n\t\t\t`Profiles`.`NickName`,\r\n\t\t\t`Profiles`.`Password`\r\n\tFROM `RayMusicFiles`\r\n\tLEFT JOIN `RayMusicFiles` AS `share1` USING ( `Owner` )\r\n\tINNER JOIN `Profiles` ON `Profiles`.`ID`=`RayMusicFiles`.`Owner`\r\n\tWHERE `RayMusicFiles`.`ID` = {$iFile}\r\n\tGROUP BY `share1`.`Owner`\r\n\t"; $aFile = db_arr($sQuery); $check_res = checkAction($member['ID'], ACTION_ID_VIEW_GALLERY_MUSIC); if ($check_res[CHECK_ACTION_RESULT] != CHECK_ACTION_RESULT_ALLOWED && !$logged['admin'] && !$logged['moderator'] && $aFile['medProfId'] != $member['ID']) { $ret = "\r\n \t<table width=100% height=100% cellpadding=0 cellspacing=0 class=text2>\r\n \t\t<td align=center bgcolor={$boxbg2}>\r\n \t\t\t" . $check_res[CHECK_ACTION_MESSAGE] . "<br />\r\n \t\t</td>\r\n \t</table>\n"; $_page['name_index'] = 0; $_page_cont[0]['page_main_code'] = $ret; PageCode(); exit; } if (is_array($aFile)) { $_page['header'] = $aFile['medTitle']; db_res("UPDATE `RayMusicFiles` SET `Listens` = `Listens` + 1 WHERE `ID`='{$iFile}'");