Example #1
2
function lista($user)
{
    global $dateformat;
    $user = protect($user);
    requirelogin();
    $title = "Mensagens de {$user}";
    include "libs/accounts.php";
    // listar todas as mensagens de $user onde hidden = 'n' (para outro user ver)
    $output = menu($user) . url("message/send/{$user}", "[enviar mensagem]") . "<br>\n";
    $usr = resolveuser($user);
    $qry = mysql_query("SELECT `from`,`content`,`data` FROM messages WHERE `to`='{$usr}' AND `hidden`='n' ORDER BY id DESC LIMIT 30");
    if (mysql_numrows($qry) == 0) {
        $output .= 'Nenhuma mensagem!';
    } else {
        while ($row = mysql_fetch_array($qry)) {
            $user = mysql_query("SELECT login,foto FROM accounts WHERE id='{$row['from']}'");
            $user = mysql_fetch_array($user);
            $output .= '<p class="row">' . t("De") . ': ' . url("user/profile/{$user['login']}", $user['login']) . '<br/>';
            $output .= '<blockquote>
                 ' . bbcode($row['content']) . '
                  </blockquote>
                  <hr size="1"><i>' . date($dateformat, $row['data']) . '</i>
                  </p>';
        }
    }
    section($output, $title);
}
Example #2
0
function Ver_Formulario_Registro_Comentario($id_comentario)
{
    global $database;
    if (!$id_comentario) {
        return;
    }
    $q = "SELECT id_comentario, codigo, comentario, timestamp, tipo FROM " . TBL_COMMENTS . " WHERE id_comentario={$id_comentario}" . ";";
    $result = $database->query($q);
    $num_rows = @mysql_numrows($result);
    if (!$result || $num_rows < 0) {
        echo Mensaje("Error mostrando la información", _M_ERROR);
        return;
    }
    if ($num_rows == 0) {
        echo Mensaje("¡No hay comentarios ingresados!", _M_NOTA);
        return;
    }
    //$id_comentario
    $codigo = mysql_result($result, 0, "codigo");
    $comentario = mysql_result($result, 0, "comentario");
    $timestamp = mysql_result($result, 0, "timestamp");
    $tipo = mysql_result($result, 0, "tipo") == 0 ? '' : 'checked="checked"';
    // Creamos los campos del formulario.
    $Campo_Comentario_id_comentario_hidden = '<input type="hidden" name="id_comentario" value="' . $id_comentario . '">';
    $Campo_Comentario_id_comentario = '<tr><td width="25%">Identificador</td><td><b>' . $id_comentario . '</b></td></tr>';
    $Campo_Comentario_codigo = '<tr><td>Cliente:</td><td>' . $database->Combobox_usuarios("codigo", $codigo) . '</td></tr>';
    $Campo_Comentario_comentario = '<tr><td>Comentario:</td><td><input type="text" name="comentario" maxlength="100" value="' . $comentario . '"></td></tr>';
    $Campo_Comentario_timestamp = '<tr><td>Hora y Fecha</td><td><b>' . date('h:i:s @ d/m/Y', $timestamp) . '</b></td></tr>';
    $Campo_Comentario_tipo = '<tr><td>¿Comentario público?:</td><td><input type="checkbox" name="tipo" ' . $tipo . ' value="publico" /></tr></td>';
    // Botones de acción
    $BotonCancelar = '<input type="button" OnClick="window.location=\'./?' . _ACC_ . '=gestionar+comentarios\'" value="Cancelar">';
    // Mostramos el formulario.
    echo '<form action="./?' . _ACC_ . '=gestionar+comentarios" method="POST">' . '<table>' . $Campo_Comentario_id_comentario_hidden . $Campo_Comentario_id_comentario . $Campo_Comentario_codigo . $Campo_Comentario_comentario . $Campo_Comentario_timestamp . $Campo_Comentario_tipo . '</table><br />' . '<input type="submit" value="Editar">' . $BotonCancelar . '<input type="hidden" name="registrar_comentario" value="1">' . '</form>';
}
Example #3
0
/**
 * displayBannedUsers - Displays the banned users
 * database table in a nicely formatted html table.
 */
function displayBannedUsers(){
   global $database;
   $q = "SELECT username,timestamp "
       ."FROM ".TBL_BANNED_USERS." ORDER BY username";
   $result = $database->query($q);
   /* Error occurred, return given name by default */
   $num_rows = mysql_numrows($result);
   if(!$result || ($num_rows < 0)){
      echo "Error displaying info";
      return;
   }
   if($num_rows == 0){
      echo "Database table empty";
      return;
   }
   /* Display table contents */
   echo "<table align=\"left\" border=\"1\" cellspacing=\"0\" cellpadding=\"3\">\n";
   echo "<tr><td><b>Username</b></td><td><b>Time Banned</b></td></tr>\n";
   for($i=0; $i<$num_rows; $i++){
      $uname = mysql_result($result,$i,"username");
      $time  = mysql_result($result,$i,"timestamp");

      echo "<tr><td>$uname</td><td>$time</td></tr>\n";
   }
   echo "</table><br>\n";
}
Example #4
0
function page($theme)
{
    include "includes/smileyparse.php";
    if (isset($_GET['page'])) {
        $page = $_GET['page'];
        $query = "SELECT * FROM pages WHERE id_string = '{$page}'";
        $result = mysql_query($query);
        $num = mysql_numrows($result);
        if ($num == 0) {
            echo '<div class="entry">No such page!</div>';
        } else {
            $id = mysql_result($result, 0, "id");
            $title = mysql_result($result, 0, "title");
            $page = mysql_result($result, 0, "page");
            $page = parseSmiley($page);
            $page = stripslashes($page);
            echo '<div class="entry"><h3>';
            echo $title;
            echo '</h3><p>';
            echo $page;
            echo '</div>';
        }
    } else {
        echo '<div class="entry">You must specify a page!</div>';
    }
}
Example #5
0
function recent()
{
    echo '<h4>Recent posts</h4>';
    $query = "SELECT * FROM news ORDER BY id DESC LIMIT 5";
    $result = mysql_query($query);
    $num = mysql_numrows($result);
    if ($num == 0) {
        echo 'No posts in database';
    } else {
        $i = 0;
        while ($i < $num) {
            $id = mysql_result($result, $i, "id");
            $title = mysql_result($result, $i, "title");
            ?>
		<div class="navtext">> <a href="index.php?module=news&article=<?php 
            echo $id;
            ?>
"><?php 
            echo $title;
            ?>
</a></div>
		<?php 
            $i++;
        }
    }
}
function dok_create_album()
{
    global $VARS, $USER;
    if (!isset($VARS['name'])) {
        dok_msg(MSG_ERR_NO_ALBUM_NAME, 'dok_create_album', 'e');
        return false;
    }
    if (!strlen(trim($VARS['name']))) {
        dok_msg(MSG_ERR_NO_ALBUM_NAME, 'dok_create_album', 'e');
        return false;
    }
    $album_name = ucwords(substr($VARS['name'], 0, 255));
    $res = mysql_query('select id from ' . dok_tn('album') . ' where name = \'' . addslashes($album_name) . '\'');
    if (mysql_numrows($res)) {
        dok_msg(sprintf(MSG_ERR_DUP_ALBUM_NAME, $album_name), 'dok_create_album', 'e');
        return false;
    }
    if (DOK_ENABLE_USER) {
        $creation_uid = $USER->id;
    } else {
        $creation_uid = 0;
    }
    //add artist
    $res = dok_uquery('insert into ' . dok_tn('album') . ' (name,creation,creation_uid) values (\'' . addslashes($album_name) . '\',' . time() . ',' . $creation_uid . ')');
    if (!$res) {
        dok_msg(mysql_error(), 'dok_create_album', 'e');
        return false;
    }
    $VARS['id'] = mysql_insert_id();
    $_SESSION['song_select_album'] = $VARS['id'];
    return 'view_album';
}
Example #7
0
 /**
  * @name: listQuizes
  * @type: Public
  * @description: Списък със всички добавени тестове и възможност за решаване на 
  */
 public function listQuizes()
 {
     //Извикваме нужните ни класове
     global $db, $filter;
     //Нулираме си променливите
     $allQuizes = array();
     $page = 0;
     $disciplineName = $filter->input($_GET['id']);
     //Ако е избран предмет извличаме id-то му
     if ($disciplineName != null) {
         $allDisciplines = mysql_fetch_array($db->getDisciplineByName($disciplineName));
         if (mysql_numrows($db->getDisciplineByName($disciplineName)) == 1) {
             $discipline = $allDisciplines['id'];
         } else {
             $discipline = "False";
         }
     }
     //Филтрираме променливата за страницата
     if (isset($_GET['page'])) {
         $page = $filter->input($_GET['page']);
     }
     //Вземане на тестовете, според поисканата страица
     $allQuizes = $db->listQuizes($page, 1, $discipline);
     //Заглавие на страницата
     $title = "Тестове | " . SITE_NAME;
     //Визуализираме списъка
     require_once TEMPLATE . "listQuizes.tpl.php";
 }
function getcomments($id)
{
    $query = "SELECT * FROM comments WHERE article = {$id}";
    $result = mysql_query($query);
    $num = mysql_numrows($result);
    echo "<a href=\"index.php?module=news&article={$id}\">{$num} comments</a>";
}
Example #9
0
function dok_box_ranked($display_module, $theme_path)
{
    if (DOK_USE_CACHE) {
        $fname = dok_c_box_filename('ranked', 'ignored');
        $cache = dok_c_get($fname);
        if ($cache) {
            return $cache;
        }
    }
    $res = mysql_query('select name, id from ' . dok_tn('song') . ' order by hits desc limit 10');
    echo mysql_error();
    if (!mysql_numrows($res)) {
        return;
    }
    $t = new template($theme_path);
    $t->set_file('page', 'box_default.tpl');
    $t->set_var('BOXTITLE', MSG_TITLE_BOX_RANKED_SONG);
    $t->set_block('page', 'boxlink', 'boxlinktag');
    $t->set_var('boxlinktag', '');
    if (!mysql_numrows($res)) {
        $t->set_var('BOXCONTENT', '');
    }
    while ($row = mysql_fetch_array($res)) {
        $t->set_var('LINK', $_SERVER['PHP_SELF'] . '?display=view_song&id=' . $row['id']);
        $t->set_var('LABEL', $row['name']);
        $t->parse('BOXCONTENT', 'boxlink', 'true');
    }
    $html = $t->parse('out', 'page');
    if (DOK_USE_CACHE) {
        dok_c_write($fname, $html);
    }
    return $html;
}
Example #10
0
function displayUsers()
{
    global $database;
    $q = "SELECT username,userlevel,email,timestamp " . "FROM " . TBL_USERS . " ORDER BY userlevel DESC,username";
    $result = $database->query($q);
    $num_rows = mysql_numrows($result);
    if (!$result || $num_rows < 0) {
        echo "Error displaying info";
        return;
    }
    if ($num_rows == 0) {
        echo "Database table empty";
        return;
    }
    echo "<table align=\"left\" border=\"1\" cellspacing=\"0\" cellpadding=\"3\">\n";
    echo "<tr><td><b>Username</b></td><td><b>Level</b></td><td><b>Email</b></td><td><b>Last Active</b></td></tr>\n";
    for ($i = 0; $i < $num_rows; $i++) {
        $uname = mysql_result($result, $i, "username");
        $ulevel = mysql_result($result, $i, "userlevel");
        $email = mysql_result($result, $i, "email");
        $time = mysql_result($result, $i, "timestamp");
        echo "<tr><td>{$uname}</td><td>{$ulevel}</td><td>{$email}</td><td>{$time}</td></tr>\n";
    }
    echo "</table><br>\n";
}
Example #11
0
 function saveData()
 {
     if ($this->connection()) {
         $quser = mysql_query("select * from `customer_table` where cus_user='******' OR cus_email='" . $this->getEmail() . "' ");
         if (mysql_numrows($quser) == 0) {
             $query = mysql_query("insert into customer_table values(NULL,'" . $this->getUser() . "','" . $this->getPass() . "','" . $this->getEmail() . "')");
             if ($query) {
                 $result['status'] = "1";
             } else {
                 $result['status'] = "0";
             }
         } else {
             $row = mysql_fetch_array($quser);
             if ($row['cus_user'] == $this->getUser() && $row['cus_email'] == $this->getEmail()) {
                 $result['status'] = "4";
             } elseif ($row['cus_user'] == $this->getUser()) {
                 $result['status'] = "2";
             } elseif ($row['cus_email'] == $this->getEmail()) {
                 $result['status'] = "3";
             } else {
                 $result['status'] = "0";
             }
         }
     } else {
         $result['status'] = "0";
     }
     echo json_encode($result);
 }
Example #12
0
function index()
{
    global $timeformat, $home;
    if (is_logged()) {
        $output = '<p><form method="post" action="' . $home . 'shoutbox/escrevepost">
<textarea rows="8" cols="25" name="message"></textarea><br/>
<input type="submit" value="' . t("Enviar") . '">
</form></p><hr size="1">';
    }
    $qry = mysql_query("SELECT s.id AS d, s.text AS t, s.time AS i, a.login AS l FROM shoutbox s LEFT JOIN accounts a ON s.owner=a.id ORDER BY s.id DESC LIMIT 10");
    if (mysql_numrows($qry) != 0) {
        $response = true;
        while ($row = mysql_fetch_array($qry)) {
            $output .= '<p><h3>' . $row['t'] . '</h3><br/><h6>' . t("postado por") . ' ' . url("user/profile/{$row['l']}", $row['l']) . ' ' . t("em") . ' ' . date($timeformat, $row['i']);
            if (is_admin()) {
                $output .= '<br>' . url("shoutbox/del/{$row['d']}", t("[excluir]"));
            }
            $output .= '</p><hr size="1">';
        }
    } else {
        $output .= infobox(t("Não há mensagens na shoutbox."), false);
    }
    if ($response) {
        section(substr($output, 0, -13), t("Shoutbox"));
    } else {
        section($output, t("Shoutbox"));
    }
}
Example #13
0
function links()
{
    echo '<h4>Links</h4>';
    $query = "SELECT * FROM links";
    $result = mysql_query($query);
    $num = mysql_numrows($result);
    $i = 0;
    while ($i < $num) {
        $link_name = mysql_result($result, $i, "link_name");
        $link_description = mysql_result($result, $i, "link_description");
        $link_target = mysql_result($result, $i, "link_location");
        ?>
		<div class="navtext">> <a href="<?php 
        echo $link_target;
        ?>
" title="<?php 
        echo $link_description;
        ?>
"><?php 
        echo $link_name;
        ?>
</a></div>
		<?php 
        $i++;
    }
}
Example #14
0
 public function __construct($host, $user, $pass)
 {
     $body = "_[l[Shacker Birthdays:]l]_ \n";
     //TODO: refactor out passwords/mysql connection details?
     $connection = mysql_connect($host, $user, $pass);
     $numRows = 0;
     $averageAge = 0;
     if ($connection !== False) {
         // TODO: refactor this out too
         mysql_select_db("shackdb");
         // fetch birthdays first on same connection
         $query = "select avg(year) as avg_year from (SELECT substring(dob,1,4) as year from birthdays having year > 1901 and year < 2005) as tb1;";
         $result = mysql_query($query);
         $averageAge = mysql_fetch_array($result, MYSQL_ASSOC);
         $averageAge = date("Y") - floatval($averageAge["avg_year"]);
         $query = "SELECT * FROM birthdays where dob like '%" . date('m-d') . "'";
         $result = mysql_query($query);
         $numRows = mysql_numrows($result);
     }
     if ($numRows > 0) {
         while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
             $body .= "y{" . $row["username"] . "}y" . self::agestring($row["dob"], $row["username"]) . "\n";
         }
         $body .= "\n";
         $body .= "And as always, Happy Birthday, Shackers from the y{the man with the briefcase}y!!\n";
     } else {
         $body .= "\n";
         $body .= "No birthdays today!\n";
     }
     $body .= "\n";
     $body .= "s[The average shackage is now " . number_format($averageAge, 2, '.', '') . "!]s\n";
     $body .= "s[Want to add your birthday? http://shack.asktherelic.com/birthday.php]s";
     parent::__construct($body);
 }
function availableElems()
{
    $db = new db();
    $log = ADLog::getInstance();
    /*
     * Extract all Policy Elements for select list below
     */
    $q = "SELECT id, elementName FROM compliancePolElem WHERE status = 1 ORDER BY elementName ASC";
    $result = $db->q($q);
    $num_rows = mysql_numrows($result);
    if (!$result || $num_rows < 0) {
        $log->Warn("Failure: Problem Displaying compliancePolElem options (File: " . $_SERVER['PHP_SELF'] . ")");
        echo "Error displaying info for availableElems() function";
        return;
    }
    if ($num_rows == 0) {
        $log->Warn("Failure: Problem Displaying availableElems() - no options returned (File: " . $_SERVER['PHP_SELF'] . ")");
        echo "Database table empty";
        return;
    }
    for ($i = 0; $i < $num_rows; $i++) {
        $id = mysql_result($result, $i, "id");
        $elementName = mysql_result($result, $i, "elementName");
        echo "<option value=" . $id . ">" . $elementName . "</option>";
    }
}
function insert_order($order_details)
{
    global $HTTP_SESSION_VARS;
    //extract order_details out as variables
    extract($order_details);
    //set shipping address same as address
    if (!$ship_name && !$ship_address && !$ship_city && !$ship_state && !$ship_zip && !$ship_country) {
        $ship_name = $name;
        $ship_address = $address;
        $ship_city = $city;
        $ship_state = $state;
        $ship_zip = $zip;
        $ship_country = $country;
    }
    $conn = db_connect();
    //insert customer address
    $query = "select customerid from customers where  \n            name = '{$name}' and address = '{$address}' \n            and city = '{$city}' and state = '{$state}' \n            and zip = '{$zip}' and country = '{$country}'";
    $result = mysql_query($query);
    if (mysql_numrows($result) > 0) {
        $customer_id = mysql_result($result, 0, 'customerid');
    } else {
        $query = "insert into customers values\n            ('', '{$name}','{$address}','{$city}','{$state}','{$zip}','{$country}')";
        $result = mysql_query($query);
        if (!$result) {
            return false;
        }
    }
    $query = "select customerid from customers where  \n            name = '{$name}' and address = '{$address}' \n            and city = '{$city}' and state = '{$state}' \n            and zip = '{$zip}' and country = '{$country}'";
    $result = mysql_query($query);
    if (mysql_numrows($result) > 0) {
        $customerid = mysql_result($result, 0, 'customerid');
    } else {
        return false;
    }
    $date = date('Y-m-d');
    $query = "insert into orders values\n            ('', {$customerid}, " . $HTTP_SESSION_VARS['total_price'] . ", '{$date}', 'PARTIAL', '{$ship_name}',\n             '{$ship_address}','{$ship_city}','{$ship_state}','{$ship_zip}',\n              '{$ship_country}')";
    $result = mysql_query($query);
    if (!$result) {
        return false;
    }
    $query = "select orderid from orders where \n               customerid = {$customerid} and \n               amount > " . $HTTP_SESSION_VARS['total_price'] . "-.001 and\n               amount < " . $HTTP_SESSION_VARS['total_price'] . "+.001 and\n               date = '{$date}' and\n               order_status = 'PARTIAL' and\n               ship_name = '{$ship_name}' and\n               ship_address = '{$ship_address}' and\n               ship_city = '{$ship_city}' and\n               ship_state = '{$ship_state}' and\n               ship_zip = '{$ship_zip}' and\n               ship_country = '{$ship_country}'";
    $result = mysql_query($query);
    if (mysql_numrows($result) > 0) {
        $orderid = mysql_result($result, 0, 'orderid');
    } else {
        return false;
    }
    // insert each book
    foreach ($HTTP_SESSION_VARS['cart'] as $isbn => $quantity) {
        $detail = get_book_details($isbn);
        $query = "delete from order_items where  \n              orderid = '{$orderid}' and isbn =  '{$isbn}'";
        $result = mysql_query($query);
        $query = "insert into order_items values\n              ('{$orderid}', '{$isbn}', " . $detail['price'] . ", {$quantity})";
        $result = mysql_query($query);
        if (!$result) {
            return false;
        }
    }
    return $orderid;
}
Example #17
0
function search_other_function_clause(&$clause)
{
    global $dbh;
    global $heyrieux_public;
    if ($heyrieux_public) {
        $requete = "select distinct idsection from docs_section where section_visible_opac=1 and sdoc_codage_import = '" . $heyrieux_public . "' order by sdoc_codage_import";
        $result = mysql_query($requete, $dbh);
        $public = "";
        if (mysql_numrows($result)) {
            while ($sect = mysql_fetch_object($result)) {
                if ($public) {
                    $public .= ", ";
                }
                $public .= $sect->idsection;
            }
        }
        $r = ",exemplaires " . $clause . " and notices.notice_id=exemplaires.expl_notice and expl_section in ({$public})";
    } else {
        $r = $clause;
    }
    if ($r == "") {
        $r = $clause;
    }
    if ($clause == $r) {
        return false;
    } else {
        $clause = $r;
        return true;
    }
}
function get_xml_data($result)
{
    $zap = '<?xml version="1.0" encoding="utf-8"?>
<thumbnails>
';
    for ($i = 0; $i < mysql_numrows($result); $i++) {
        $find = mysql_fetch_array($result);
        $_name = "flash_" . $find['id'] . ".jpg";
        $_url = MAIN_PATH . '/projects/id/' . $find['id'];
        //$ar[$it->getId()]=$it->getName()."-".$it->getTitle();
        $zap .= '
	<thumbnail filename="' . $_name . '" url="' . $_url . '" target="_parent" 
		title="' . htmlspecialchars($find['name_of_site']) . '" />
';
        /*
        <trans-unit id="3">
                		<source>'.$it->getTitle().'</source>
                		<target>'.$it->getName().'</target>
        </trans-unit>
        */
    }
    $zap .= '
		</thumbnails>
';
    $file_name = HOST . "/flash/flashmo_129_thumbnail_list.xml";
    write_file($file_name, $zap);
}
Example #19
0
function snippetsOptions()
{
    $db = new db();
    $log = ADLog::getInstance();
    /*
     * Extract all snippets for select list below
     */
    $q = "SELECT id, snippetName\n\t\t\t\t\t\tFROM snippets \n\t\t\t\t\t\tORDER BY snippetName ASC";
    $result = $db->q($q);
    $num_rows = mysql_numrows($result);
    if (!$result || $num_rows < 0) {
        $log->Warn("Failure: Problem Displaying snippetsOptions() options (File: " . $_SERVER['PHP_SELF'] . ")");
        echo "Error displaying info for reportsOptions() function";
        return;
    }
    if ($num_rows == 0) {
        $log->Warn("Failure: Problem Displaying snippetsOptions() - no options returned (File: " . $_SERVER['PHP_SELF'] . ")");
        echo "Database table empty";
        return;
    }
    for ($i = 0; $i < $num_rows; $i++) {
        $id = mysql_result($result, $i, "id");
        $snippetName = mysql_result($result, $i, "snippetName");
        echo "<option value=snippetId-" . $id . ">" . $snippetName . "</option>";
    }
}
Example #20
0
function print_deck_select_table($table, $attributes, $constraints)
{
    array_push($attributes, "id");
    #array_push($attributes, "delete");
    #var_dump($constraints);
    $attr_list_str = implode(', ', $attributes);
    $query = "SELECT {$attr_list_str} FROM {$table}";
    if (!empty($constraints)) {
        $cons_str = mysql_where_str($constraints);
        $query .= " WHERE {$cons_str}";
    }
    #$query .= ";";
    $query .= " ORDER BY name;";
    #print_msg($query);
    $result = mysql_query($query);
    $num = @mysql_numrows($result);
    print_msg("total = {$num}");
    if ($num == 0) {
        return;
    }
    echo "<table>";
    echo "<tr>";
    array_push($attributes, "delete");
    foreach ($attributes as $attr) {
        if ($attr != "id") {
            echo "<th>";
            echo $attr;
            echo "</th>";
        }
    }
    echo "</tr>";
    $i = 0;
    while ($i < $num) {
        $id = mysql_result($result, $i, "id");
        echo "<tr id=\"{$id}\">";
        foreach ($attributes as $attr) {
            if ($attr == "delete") {
                echo "<td>";
                echo "<button name=\"{$id}\">delete</button>";
                echo "</td>";
            } else {
                if ($attr != "id") {
                    $value = mysql_result($result, $i, $attr);
                    echo "<td>";
                    if ($attr == "link") {
                        echo "<a href=\"{$value}\">";
                        echo $value;
                        echo "</a>";
                    } else {
                        echo mysql_result($result, $i, $attr);
                    }
                    echo "</td>";
                }
            }
        }
        echo "</tr>";
        $i++;
    }
    echo "</table>";
}
Example #21
0
    public function all()
    {
        $query = "SELECT * FROM ExpenseItems ORDER BY eitem_date DESC, eitem_ID DESC";
        $result = mysql_query($query);
        $num = mysql_numrows($result);
        $x = '{"items":[';
        $is_first = true;
        $i = 0;
        while ($i < $num) {
            $id = mysql_result($result, $i, "eitem_id");
            $desc = mysql_result($result, $i, "eitem_desc");
            $price = mysql_result($result, $i, "eitem_price");
            $sharing = mysql_result($result, $i, "eitem_sharing");
            $date = mysql_result($result, $i, "eitem_date");
            if (!$is_first) {
                $x = $x . ', ';
            }
            $x = $x . '{
				"id":			"' . $id . '",
				"description":	"' . $desc . '",
				"price":		"' . $price . '", 
				"sharing":		"' . $sharing . '", 
				"date":			"' . $date . '"
			}';
            $is_first = false;
            $i++;
        }
        $x = $x . ']}';
        return $x;
    }
Example #22
0
/**
 * Checks whether or not the given username is in the
 * database, if so it checks if the given password is
 * the same password in the database for that user.
 * If the user doesn't exist or if the passwords don't
 * match up, it returns an error code (1 or 2). 
 * On success it returns 0.
 */
function confirmUser($username, $password)
{
    global $connuni;
    /* Add slashes if necessary (for query) */
    if (!get_magic_quotes_gpc()) {
        $username = addslashes($username);
    }
    /* Verify that user is in database */
    $q = "SELECT password FROM mt_users WHERE nick = '{$username}'";
    $result = mysql_query($q, $connuni);
    if (!$result || mysql_numrows($result) < 1) {
        return 1;
        //Indicates username failure
    }
    /* Retrieve password from result, strip slashes */
    $dbarray = mysql_fetch_array($result);
    $dbarray['password'] = stripslashes($dbarray['password']);
    $password = stripslashes($password);
    /* Validate that password is correct */
    if ($password == $dbarray['password']) {
        return 0;
        //Success! Username and password confirmed
    } else {
        return 2;
        //Indicates password failure
    }
}
Example #23
0
function search_other_function_filters()
{
    global $dbh;
    global $supagro_loc_sel, $supagro_rev_res;
    $r = "&nbsp;<select name='supagro_loc_sel'>";
    $r .= "<option value=''>tous les sites</option>";
    $requete = "select location_libelle,idlocation from docs_location where location_visible_opac=1";
    $result = mysql_query($requete, $dbh);
    if (mysql_numrows($result)) {
        while ($loc = mysql_fetch_object($result)) {
            $selected = "";
            if ($supagro_loc_sel == $loc->idlocation) {
                $selected = "selected=\"selected\"";
            }
            $r .= "<option value='{$loc->idlocation}' {$selected}>{$loc->location_libelle}</option>";
        }
    }
    $r .= "</select>";
    $r .= "&nbsp;<div style='display:none;'><input type='checkbox' id='supagro_rev_res' name='supagro_rev_res' value='1' ";
    if ($supagro_rev_res) {
        $r .= "checked='checked' ";
    }
    $r .= "/><label for='supagro_rev_res' >Cocher pour localiser une revue</label></div>";
    $r .= "\n\t<script type='text/javascript'>\n\t\tfunction test_tp() {\n\t\t\tif(sel_tp.value=='v') {\n\t\t\t\taff_chk_rev.parentNode.style.display='block';\n\t\t\t} else {\n\t\t\t\taff_chk_rev.checked='';\n\t\t\t\taff_chk_rev.parentNode.style.display='none';\n\t\t\t}\n\t\t}\n\t\tvar sel_tp=document.forms['search_input'].elements['typdoc'];\n\t\tvar aff_chk_rev=document.forms['search_input'].elements['supagro_rev_res'];\n\t\ttest_tp();\n\t\tsel_tp.onchange=test_tp;\n\t</script>\n\t";
    return $r;
}
function makedump($table_select, $what, $db, $crlf = "\n")
{
    global $dump_buffer, $tmp_buffer;
    $tables = mysql_list_tables($db);
    $num_tables = mysql_numrows($tables);
    $dump_buffer = '';
    $tmp_buffer = '';
    $i = 0;
    while ($i < $num_tables) {
        $table = mysql_tablename($tables, $i);
        if (!isset($table_select[$table])) {
            $i++;
            continue;
        }
        if ($what != 'dataonly') {
            $dump_buffer .= PMA_getTableDef($db, $table, $crlf) . ';' . $crlf . $crlf;
        }
        if ($what == 'data' || $what == 'dataonly') {
            $tmp_buffer = '';
            PMA_getTableContent($db, $table, 0, 0, 'PMA_myHandler', $crlf);
            $dump_buffer .= $tmp_buffer . $crlf;
        }
        $i++;
    }
    return $dump_buffer;
}
function dok_update_album()
{
    global $VARS;
    if (!isset($VARS['id']) || !is_numeric($VARS['id']) || $VARS['id'] < 1) {
        dok_msg(MSG_ERR_ALBUM_NOT_FOUND, 'dok_update_album', 'e');
        return false;
    }
    if (!isset($VARS['name']) || !strlen(trim($VARS['name']))) {
        return 'view_album';
    }
    $name = substr(trim($VARS['name']), 0, 255);
    $res = mysql_query('select * from ' . dok_tn('album') . ' where id = ' . $VARS['id']);
    if (!mysql_numrows($res)) {
        dok_msg(MSG_ERR_ALBUM_NOT_FOUND, 'dok_update_album', 'e');
        return false;
    }
    $artist = mysql_fetch_array($res);
    if (strtolower($artist['name']) == strtolower($name)) {
        return 'view_album';
    }
    $res = dok_uquery('update ' . dok_tn('album') . ' set name = \'' . addslashes(ucwords($name)) . '\' where id = ' . $VARS['id']);
    if ($res) {
        return 'view_album';
    } else {
        dok_msg(MSG_ERR_DB_UPDATE_FAILED, 'dok_update_album', 'e');
        return false;
    }
}
Example #26
0
function showTable($tableTitle)
{
    $i = 0;
    echo "      <br/>\n";
    echo "      <table class=\"tableTitle\" cellspacing=0 rules=rows>\n";
    echo "        <tr>\n";
    echo "          <td><center><b>{$tableTitle}</b></center></td>\n";
    echo "        </tr>\n";
    echo "      </table>\n";
    echo "      <br/>\n";
    echo "      <table  class=\"tableLight\" border=1 cellspacing=0 rules=rows>\n        <tr class=\"tableHead1\">\n          <td> Zeit </td>\n          <td> Nr </td>\n          <td> Status </td>\n          <td> Fehler </td>\n        </tr>\n";
    $result = mysql_query("select * from errors order by time desc") or die("<br/>Error" . mysql_error());
    $num = mysql_numrows($result);
    while ($i < $num) {
        $time = mysql_result($result, $i, "time");
        $nr = mysql_result($result, $i, "number");
        $state = mysql_result($result, $i, "state");
        $text = mysql_result($result, $i, "text");
        if ($i % 2) {
            echo "         <tr class=\"tableLight\">";
        } else {
            echo "         <tr class=\"tableDark\">";
        }
        echo "\n           <td> {$time} </td>\n           <td> {$nr} </td>\n           <td> {$state} </td>\n           <td> {$text} </td>\n";
        echo "        </tr>\n";
        $i++;
    }
    echo "      </table>\n";
}
function search_other_function_filters()
{
    global $recherche_loc;
    global $charset;
    global $msg, $dbh;
    // mettre par défaut la localisation du lecteur
    if (!isset($recherche_loc) && $_SESSION["empr_location"]) {
        $recherche_loc = $_SESSION["empr_location"];
    }
    $r .= "<select name='recherche_loc'>";
    $r .= "<option value='0'>" . htmlentities($msg["search_loc_all_site"], ENT_QUOTES, $charset) . "</option>";
    $requete = "select location_libelle,idlocation from docs_location where location_visible_opac=1";
    $result = mysql_query($requete, $dbh);
    if (mysql_numrows($result)) {
        while ($loc = mysql_fetch_object($result)) {
            $selected = "";
            if ($recherche_loc == $loc->idlocation) {
                $selected = "selected";
            }
            $r .= "<option value='{$loc->idlocation}' {$selected}>{$loc->location_libelle}</option>";
        }
    }
    $r .= "</select>";
    return $r;
}
function dok_link_song_album($VARS, $update, $theme_path)
{
    if (!is_numeric($VARS['id']) || $VARS['id'] < 1) {
        $VARS['id'] = 0;
    }
    $res = mysql_query('select * from ' . dok_tn('song') . ' where id = ' . $VARS['id']);
    if (!mysql_numrows($res)) {
        $t = dok_error_template(MSG_ERR_SONG_NOT_FOUND);
        return array($t, MSG_TITLE_ADD_SONG_ALBUM);
    }
    $song = mysql_fetch_array($res);
    /**	$res = dok_oquery('select distinct(album_id) as aid from '.dok_tn('rel_song_album').' where song_id = '.$song['id']);
    	$current_albums = $res->fetch_col_array('aid');
    	$where = '';
    	if ( sizeof($current_albums) )	$where = ' where id not in('.implode(',',$current_albums).')';*/
    $where = '';
    $res = mysql_query('select id, name from ' . dok_tn('album') . $where . ' order by name');
    $a_select = '';
    while ($row = mysql_fetch_array($res)) {
        $a_select .= '<option value="' . $row['id'] . '"';
        if ($_SESSION['song_select_album'] == $row['id']) {
            $a_select .= ' selected';
        }
        $a_select .= '>' . $row['name'] . '</option>';
    }
    $t = new template($theme_path);
    $t->set_file('page', 'song_album_link.tpl');
    $t->set_var(dok_song_format($song));
    $t->set_var('ALBUM_SELECT', $a_select);
    $t->set_var('SONG_ID', $song['id']);
    return array($t, MSG_TITLE_ADD_SONG_ALBUM);
}
Example #29
0
function print_relation($result, $attributes, $callback = "")
{
    $num = @mysql_numrows($result);
    echo "<table>";
    echo "<tr>";
    foreach ($attributes as $attr) {
        echo "<th>";
        echo $attr;
        echo "</th>";
    }
    echo "</tr>";
    $i = 0;
    while ($i < $num) {
        echo "<tr>";
        foreach ($attributes as $attr) {
            echo "<td>";
            if ($callback != NULL) {
                $value = mysql_result($result, $i, $attr);
                $callback($attr, $value);
            } else {
                echo mysql_result($result, $i, $attr);
            }
            echo "</td>";
        }
        echo "</tr>";
        $i++;
    }
    echo "</table>";
    return $num;
}
Example #30
0
function cevapKontrol($cevap, $id)
{
    global $yol1;
    global $metin;
    $cevap = iconv("UTF-8", "ISO-8859-9", $cevap);
    $olmasiGerekenDogruCevapSayisi = getCevapSay($id);
    $sql1 = "SELECT id FROM eo_5sayfa where cevap like '%{$cevap}%' and id='{$id}' limit 0,1";
    $result1 = mysql_query($sql1, $yol1);
    if ($result1 && mysql_numrows($result1) == 1) {
        $uyeDogruCevapSayisi = $_SESSION["cevaplar"][$id] + 1;
        $_SESSION["cevaplar"][$id] = $uyeDogruCevapSayisi;
        //doðru sayýsýný 1 artýrdýk
        $hataSayisi = $_SESSION["hataSay"][$id];
        //kaç hata yapýldý
        if ($olmasiGerekenDogruCevapSayisi == $uyeDogruCevapSayisi && $hataSayisi == 0) {
            //eðer hatasýz olarak tüm cevaplar seçilmiþ ise, DOÐRU
            $sonuc = "<span><img src='img/tick_circle.png' border='0' style=\"vertical-align: middle;\" alt=\"ok\" /> {$metin['348']}</span>";
            $_SESSION["cevaplar"][$id] = "D";
        } else {
            $sonuc = $uyeDogruCevapSayisi . " {$metin['453']}";
            if ($hataSayisi > 0) {
                $sonuc .= $metin[454];
            }
        }
        return $sonuc;
    } else {
        //hatalý bir cevap verildi ise
        $_SESSION["hataSay"][$id] += 1;
        return "<span><img src='img/error.png' border='0' style=\"vertical-align: middle;\" alt=\"error\" /> {$metin['349']}</span>";
    }
}