Example #1
0
<?php

require_once "./header.php";
logged_in_only();
$foldername = set_post_foldername();
$public = set_post_bool_var("public", false);
if ($foldername == "") {
    ?>
	
	<h2 class="title">New Folder</h2>
	<form action="<?php 
    echo $_SERVER['SCRIPT_NAME'] . "?folderid=" . $folderid;
    ?>
" id="fnew" method="POST">
	<p><input type=text name="foldername" size="50" value="<?php 
    echo $foldername;
    ?>
"></p>
	<p><input type="checkbox" name="public"> Public</p>
	<input type="submit" value=" OK ">
	<input type="button" value=" Cancel " onClick="self.close()">
	</form>
	<script>
	this.focus();
	document.getElementById('fnew').foldername.focus();
	</script>
	
	<?php 
} else {
    $query = sprintf("INSERT INTO folder (childof, name, public, user) values ('%d', '%s', '%d', '%s')", $mysql->escape($folderid), $mysql->escape($foldername), $mysql->escape($public), $mysql->escape($username));
    if ($mysql->query($query)) {
Example #2
0
<?php

require_once "./header.php";
logged_in_only();
$message = '';
if (isset($_POST['settings_apply'])) {
    $settings = array('root_folder_name' => set_post_foldername("settings_root_folder_name"), 'column_width_folder' => check_num_var("settings_column_width_folder"), 'column_width_bookmark' => check_num_var("settings_column_width_bookmark"), 'table_height' => check_num_var("settings_table_height"), 'confirm_delete' => set_post_bool_var("settings_confirm_delete", false), 'open_new_window' => set_post_bool_var("settings_open_new_window", false), 'show_bookmark_description' => set_post_bool_var("settings_show_bookmark_description", false), 'show_bookmark_icon' => set_post_bool_var("settings_show_bookmark_icon", false), 'show_column_date' => set_post_bool_var("settings_show_column_date", false), 'date_format' => check_date_format(), 'show_column_edit' => set_post_bool_var("settings_show_column_edit", false), 'show_column_move' => set_post_bool_var("settings_show_column_move", false), 'show_column_delete' => set_post_bool_var("settings_show_column_delete", false), 'fast_folder_minus' => set_post_bool_var("settings_fast_folder_minus", false), 'fast_folder_plus' => set_post_bool_var("settings_fast_folder_plus", false), 'fast_symbol' => set_post_bool_var("settings_fast_symbol", false), 'simple_tree_mode' => set_post_bool_var("settings_simple_tree_mode", false), 'show_public' => set_post_bool_var("settings_show_public", false), 'theme' => set_post_string_var("settings_theme", ''));
    $query = sprintf("UPDATE user SET\n\t\troot_folder_name\t\t\t='%s',\n\t\tcolumn_width_folder\t\t\t='%d',\n\t\tcolumn_width_bookmark\t\t='%d',\n\t\ttable_height\t\t\t\t='%d',\n\t\tconfirm_delete\t\t\t\t='%d',\n\t\topen_new_window\t\t\t\t='%d',\n\t\tshow_bookmark_description\t='%d',\n\t\tshow_bookmark_icon\t\t\t='%d',\n\t\tshow_column_date\t\t\t='%d',\n\t\tdate_format\t\t\t\t\t='%s',\n\t\tshow_column_edit\t\t\t='%d',\n\t\tshow_column_move\t\t\t='%d',\n\t\tshow_column_delete\t\t\t='%d',\n\t\tfast_folder_minus\t\t\t='%d',\n\t\tfast_folder_plus\t\t\t='%d',\n\t\tfast_symbol\t\t\t\t\t='%d',\n\t\tsimple_tree_mode\t\t\t='%d',\n\t\tshow_public\t\t\t\t\t='%d',\n\t\ttheme\t\t\t\t\t\t='%s'\n\t\tWHERE username='******'", $mysql->escape($settings['root_folder_name']), $settings['column_width_folder'], $settings['column_width_bookmark'], $settings['table_height'], $settings['confirm_delete'], $settings['open_new_window'], $settings['show_bookmark_description'], $settings['show_bookmark_icon'], $settings['show_column_date'], $mysql->escape($settings['date_format']), $settings['show_column_edit'], $settings['show_column_move'], $settings['show_column_delete'], $settings['fast_folder_minus'], $settings['fast_folder_plus'], $settings['fast_symbol'], $settings['simple_tree_mode'], $settings['show_public'], $mysql->escape($settings['theme']), $mysql->escape($username));
    if ($mysql->query($query)) {
        $message = "Settings applied.";
    } else {
        message($mysql->error);
    }
}
# I really don't feel like putting these very specific function into lib.php...
function check_num_var($varname)
{
    if (!is_numeric($_POST[$varname])) {
        return 280;
    } else {
        if ($_POST[$varname] == 0 && $varname == "settings_column_width_bookmark") {
            return 0;
        } else {
            if ($_POST[$varname] < 0) {
                return 0;
            } else {
                if ($_POST[$varname] > 800) {
                    return 800;
                } else {
                    return $_POST[$varname];
                }