/**
 * Cast Question Votes
 * @param     $info
 * @param int $points
 * @todo: move and improvise the voting system
 */
function set_forumVotes($info, $points = 0)
{
    global $userdata;
    // @todo: extend on user's rank threshold before can vote. - Reputation threshold- Roadmap 9.1
    // @todo: allow multiple votes / drop $res - Roadmap 9.1
    if (checkgroup($info['forum_vote']) && dbcount("('thread_id')", DB_FORUM_THREADS, "thread_locked='0'")) {
        $data = array('forum_id' => $_GET['forum_id'], 'thread_id' => $_GET['thread_id'], 'post_id' => $_GET['post_id'], 'vote_points' => $points, 'vote_user' => $userdata['user_id'], 'vote_datestamp' => time());
        $hasVoted = dbcount("('vote_user')", DB_FORUM_VOTES, "vote_user='******'user_id']) . "' AND thread_id='" . intval($_GET['thread_id']) . "'");
        if (!$hasVoted) {
            $isSelfPost = dbcount("('post_id')", DB_FORUM_POSTS, "post_id='" . intval($_GET['post_id']) . "' AND post_user='******'user_id']) . "");
            if (!$isSelfPost) {
                $result = dbquery_insert(DB_FORUM_VOTES, $data, 'save', array('noredirect' => 1, 'no_unique' => 1));
                if ($result && $info['forum_answer_threshold'] > 0) {
                    $vote_result = dbquery("SELECT SUM('vote_points'), thread_id FROM " . DB_FORUM_VOTES . " WHERE post_id='" . $data['post_id'] . "'");
                    $v_data = dbarray($vote_result);
                    if ($info['forum_answer_threshold'] != 0 && $v_data['vote_points'] >= $info['forum_answer_threshold']) {
                        $result = dbquery("UPDATE " . DB_FORUM_THREADS . " SET 'thread_locked'='1' WHERE thread_id='" . $v_data['thread_id'] . "'");
                    }
                }
                redirect(FORUM . "viewthread.php?thread_id=" . $_GET['thread_id'] . "&post_id=" . $_GET['post_id']);
            } else {
                redirect(FORUM . "viewthread.php?thread_id=" . $_GET['thread_id'] . "&post_id=" . $_GET['post_id'] . '&error=vote_self');
            }
        } else {
            redirect(FORUM . "viewthread.php?thread_id=" . $_GET['thread_id'] . "&post_id=" . $_GET['post_id'] . '&error=vote');
        }
    }
}
 function pdpDownload($id)
 {
     global $pdp, $userdata;
     if (!$id) {
         if (!iMEMBER) {
             return;
         }
         $this->user_name = $userdata['user_name'];
         $this->data = array('dl_name' => '', 'cat_id' => 0, 'dl_homepage' => '', 'dl_desc' => '', 'dl_abstract' => '', 'dl_copyright' => 'Copyright (C) ' . $userdata['user_name'] . ' ' . date('Y'), 'license_id' => 0, 'lizenz_url' => '', 'lizenz_okay' => 'N', 'lizenz_packet' => 'N');
         return;
     }
     // get download
     $res = dbquery("SELECT d.*, c.cat_access, fu.user_name," . " c.cat_download_access," . " IF(LENGTH(dl_desc), dl_desc, dl_abstract) AS description" . " FROM " . DB_PDP_DOWNLOADS . " AS d" . " LEFT JOIN " . DB_PDP_CATS . " AS c" . " ON c.cat_id=d.cat_id" . " LEFT JOIN " . DB_USERS . " AS fu ON" . " d.user_id=fu.user_id" . " WHERE d.download_id='" . $id . "'" . " LIMIT 1");
     if (dbrows($res) != 1) {
         fallback("index.php");
     }
     $data = dbarray($res);
     if (!checkgroup($data['cat_access'])) {
         return;
     }
     $this->id = $id;
     $this->data = $data;
     $this->status = $data['dl_status'];
     $this->user_name = $data['user_name'];
     $this->description = $data['description'];
     //was enabled. why?		unset($this->data['dl_status']);
     // check what we can do
     $this->can_edit = iPDP_ADMIN || iPDP_MOD || iMEMBER && $userdata['user_id'] == $this->data['user_id'] && ($pdp->settings['user_edit'] || $this->status == PDP_PRO_NEW) && $this->status != PDP_PRO_DEL && $this->status != PDP_PRO_CHECK;
     $this->can_download = iPDP_ADMIN || iPDP_MOD || checkgroup($data['cat_download_access']);
     // data[] should containt download-table data only
     unset($this->data['user_name']);
     unset($this->data['cat_access']);
     unset($this->data['cat_download_access']);
     unset($this->data['description']);
 }
function pdp_tmp_show_cat($parentid, $cat_array, $level, $sel_this)
{
    $retval = "";
    foreach ($cat_array as $myid => $thiscat) {
        if ($thiscat['parentcat'] == $parentid && checkgroup($thiscat['access'])) {
            $retval .= "<option value='{$myid}'" . ($sel_this == $myid ? " selected" : "") . ">" . str_repeat("&nbsp;", $level * 4) . $thiscat['name'] . "</option>";
            $retval .= pdp_tmp_show_cat($myid, $cat_array, $level + 1, $sel_this);
        }
    }
    return $retval;
}
Exemple #4
0
function prp_count_cats($cat)
{
    global $prp;
    $count = 0;
    $res = dbquery("SELECT cat_id, cat_access" . " FROM " . DB_PRP_CATS . "" . " WHERE top_cat='" . $cat . "'");
    while ($data = dbarray($res)) {
        if ($prp->settings['hide_cats'] && !checkgroup($data['cat_access'])) {
            continue;
        }
        $count += prp_count_cats($data['cat_id']) + 1;
    }
    return $count;
}
function mytask()
{
    $user_id = $_SESSION['USERID'];
    $group = checkgroup($user_id);
    $filter = '';
    if ($group != 2 && $group != 5) {
        $res_row = mysql_fetch_assoc(mysql_query("SELECT \tusers.id as person_id\r\n\t\t\t\t\t\t\t\t\t\t\tFROM \t`users`\r\n\t\t\t\t\t\t\t\t\t\t\tWHERE \t`users`.`id` = {$user_id}"));
        $filter = "AND (task.responsible_user_id ='{$res_row['person_id']}')";
    }
    $task_now_count1 = mysql_fetch_row(mysql_query("   SELECT IF(COUNT(*)>0,CONCAT('<span style=\"color:red;\">',COUNT(*),'</span>'), COUNT(*)),\r\n\t\t\t\t\t\t\t\t\t\t\t\t\tCOUNT(*)\r\n\t\t\t\t\t\t\t\t\t\t\t\t\tFROM `task`\r\n\t\t\t\t\t\t\t\t\t\t\t\t\tWHERE task.`status` = 0 and task.actived=1 {$filter}"));
    $task_process_count1 = mysql_fetch_row(mysql_query("   SELECT COUNT(*)\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tFROM `task`\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tWHERE task.`status` = 1 and task.actived=1 {$filter}"));
    $task_done_count1 = mysql_fetch_row(mysql_query("   SELECT COUNT(*)\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tFROM `task`\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tWHERE task.actived=1  AND task.`status` = 2 {$filter}"));
    $row = mysql_fetch_row(mysql_query("SELECT users.group_id\r\n\t\t\t\t\t\t\t\t    FROM   `users`\r\n\t\t\t\t\t\t\t\t    WHERE  users.id = '{$user_id}'"));
    if ($task_now_count1[1] > 0) {
        $new_task1 = '<span style="background-color: red; border-radius: 2px 2px 2px 2px; color: #FFFFFF; padding: 1px 2px; position: absolute; top: -5px; left: -6px;">NEW</span>';
    }
    $my_task_hide1 = '';
    if ($row[0] != '') {
        $my_task_hide1 = '
<div id="ctl00_ContentPlaceHolder1_tile_Declarations_NEW" class="tile_small" style="background:#9CC6F0; margin-top: 0px">
<p style="display: block!important;margin:8px 0 10px;">ჩემი დავალება</p>

' . $new_task1 . '

<div onclick="location.href=\'index.php?pg=13#tab-1\'" class="tile_waybill_notification tt-wrapper" title="გადაცემულია გასარკვევად" style="float: left; cursor: pointer;">
<span id="ctl00_ContentPlaceHolder1_lblSavedDecl">' . $task_now_count1[0] . '</span>
</div>
    <div onclick="location.href=\'index.php?pg=13#tab-2\'" class="tile_waybill_notification tt-wrapper" title="გარკვევის პროცესშია" style="float: left; cursor: pointer;">
        <span id="ctl00_ContentPlaceHolder1_lblSavedDecl">' . $task_process_count1[0] . '</span>
            </div>
                <div onclick="location.href=\'index.php?pg=13#tab-3\'" class="tile_waybill_notification tt-wrapper" title="მოგვარებულია" style="float: left; margin-top: 5px; cursor: pointer;">
                    <span id="ctl00_ContentPlaceHolder1_lblSavedDecl">' . $task_done_count1[0] . '</span>
             </div>
   
     </div>
                                     ';
    } else {
        $my_task_hide1 = "";
    }
    return $my_task_hide1;
}
 function pdpDownload($id)
 {
     global $pdp, $userdata;
     if (!$id) {
         return;
     }
     // get download
     $res = dbquery("SELECT d.*, c.cat_access, fu.user_name," . " c.cat_download_access," . " IF(LENGTH(dl_desc), dl_desc, dl_abstract) AS description" . " FROM " . DB_PDP_DOWNLOADS . " AS d" . " LEFT JOIN " . DB_PDP_CATS . " AS c" . " ON c.cat_id=d.cat_id" . " LEFT JOIN " . DB_USERS . " AS fu ON" . " d.user_id=fu.user_id" . " WHERE d.download_id='" . $id . "'" . " LIMIT 1");
     if (dbrows($res) != 1) {
         fallback("index.php");
     }
     $data = dbarray($res);
     if (!checkgroup($data['cat_access'])) {
         return;
     }
     $this->id = $id;
     $this->data = $data;
     $this->status = $data['dl_status'];
     unset($this->data['dl_status']);
     // check what we can do
     $this->can_edit = iPDP_ADMIN || iPDP_MOD || iMEMBER && $userdata['user_id'] == $this->data['user_id'] && ($pdp->settings['user_edit'] || $this->status == PDP_PRO_NEW) && $this->status != PDP_PRO_DEL && $this->status != PDP_PRO_CHECK;
     $this->can_download = iPDP_ADMIN || iPDP_MOD || checkgroup($data['cat_download_access']);
 }
Exemple #7
0
//GET ACCESS LEVEL AND REDIRECT IF CHEAT LOOP IS DETECTED
$detect = dbquery("SELECT kroax_access,kroax_cat FROM " . $db_prefix . "kroax WHERE kroax_id='{$url}'");
while ($detect_access = dbarray($detect)) {
    $access = $detect_access['kroax_access'];
    $kroax_cat = $detect_access['kroax_cat'];
}
if (checkgroup($access)) {
    //PROCEED AS PLANNED
} else {
    redirect(INFUSIONS . "the_kroax/kroax.php?noaccess");
}
$detect = dbquery("SELECT access FROM " . $db_prefix . "kroax_kategori WHERE cid='{$kroax_cat}'");
while ($detect_access = dbarray($detect)) {
    $access = $detect_access['access'];
}
if (checkgroup($access)) {
    //PROCEED AS PLANNED
} else {
    redirect(INFUSIONS . "the_kroax/kroax.php?noaccess");
}
//END DETECTION
$counthits = dbquery("UPDATE " . $db_prefix . "kroax SET kroax_hits=kroax_hits+1 WHERE kroax_id='{$url}'");
$setplayed = dbquery("UPDATE " . $db_prefix . "kroax SET kroax_lastplayed='" . time() . "' WHERE kroax_id='{$url}'");
$result = dbquery("SELECT * FROM " . $db_prefix . "kroax WHERE kroax_id='{$url}'");
$data = dbarray($result);
$uresult = dbquery("SELECT user_id,user_name FROM " . $db_prefix . "users WHERE user_name='" . $data['kroax_uploader'] . "'");
$udata = dbarray($uresult);
$url = $data['kroax_url'];
$embed = $data['kroax_embed'];
$thumb = $data['kroax_tumb'];
$title = $data['kroax_titel'];
Exemple #8
0
/***************************************************************************
 *   awEventCalendar                                                       *
 *                                                                         *
 *   Copyright (C) 2006-2008 Artur Wiebe                                   *
 *   wibix@gmx.de                                                          *
 *                                                                         *
 *   This program is free software; you can redistribute it and/or modify  *
 *   it under the terms of the GNU General Public License as published by  *
 *   the Free Software Foundation; either version 2 of the License, or     *
 *   (at your option) any later version.                                   *
 ***************************************************************************/
require_once 'include/common.php';
if (!isset($_GET['id']) || !isNum($_GET['id'])) {
    fallback('index.php');
}
if ($awec_settings['show_birthday_to_group'] == -1 || !checkgroup($awec_settings['show_birthday_to_group'])) {
    fallback('index.php');
}
$res = dbquery("SELECT user_name, user_id,\n\tuser_birthdate AS event_date,\n\t(YEAR(CURDATE())-YEAR(user_birthdate)) AS years_old,\n\tDATE_FORMAT(user_birthdate, '" . $awec_settings['date_fmt'] . "') AS date\n\tFROM " . DB_USERS . "\n\tWHERE user_id='" . $_GET['id'] . "'");
if (dbrows($res) == 0) {
    fallback('index.php');
}
$event = dbarray($res);
$event['ev_title'] = sprintf($locale['awec_user_birthday']['title'], $event['user_name']);
/*
 * GUI
 */
opentable($locale['EC300']);
awec_menu();
ec_render_birthday($event);
closetable();
Exemple #9
0
 private function temporary_permission()
 {
     // Thread View Only -- Post DB must exists to know if can be edited or not
     if (isset($thread_data['post_author'])) {
         //'edit_lock' => $forum_settings['forum_edit_lock'] ? TRUE : FALSE,
         $this->thread_info['permissions']['can_edit_post'] = iMOD || checkgroup($thread_data['forum_post']) && $thread_data['forum_lock'] == FALSE && $thread_data['post_author'] == $userdata['user_id'] ? TRUE : FALSE;
     }
 }
Exemple #10
0
                }
            }
        }
        if (!defined("iMOD")) {
            define("iMOD", false);
        }
    } else {
        redirect("index.php");
    }
} else {
    define("iMOD", false);
}
if (isset($_POST['step']) && $_POST['step'] != "") {
    $_GET['step'] = $_POST['step'];
}
if (!iMOD && !iADMIN || !checkgroup($data['forum_post'])) {
    redirect("index.php");
}
if (isset($_POST['canceldelete'])) {
    redirect("viewthread.php?forum_id=" . $_GET['forum_id'] . "&thread_id=" . $_GET['thread_id']);
}
if (isset($_GET['step']) && $_GET['step'] == "renew") {
    $result = dbquery("SELECT post_id, post_author, post_datestamp FROM " . DB_POSTS . " WHERE thread_id='" . $_GET['thread_id'] . "' ORDER BY post_datestamp DESC LIMIT 0,1");
    if (dbrows($result)) {
        $data = dbarray($result);
        $result = dbquery("UPDATE " . DB_POSTS . " SET post_datestamp='" . time() . "' WHERE post_id='" . $data['post_id'] . "'");
        $result = dbquery("UPDATE " . DB_THREADS . " SET thread_lastpost='" . time() . "', thread_lastpostid='" . $data['post_id'] . "' WHERE thread_id='" . $_GET['thread_id'] . "'");
        $result = dbquery("UPDATE " . DB_FORUMS . " SET forum_lastpost='" . time() . "', forum_lastuser='******'post_author'] . "' WHERE forum_id='" . $_GET['forum_id'] . "'");
        opentable($locale['458']);
        echo "<div style='text-align:center'><br />\n" . $locale['459'] . "<br /><br />\n";
        echo "<a href='viewforum.php?forum_id=" . $_GET['forum_id'] . "'>" . $locale['402'] . "</a><br /><br />\n";
Exemple #11
0
            $members = dbquery("SELECT * FROM " . DB_USERS . " WHERE user_groups REGEXP('^\\\\.{$data['group_id']}\$|\\\\.{$data['group_id']}\\\\.|\\\\.{$data['group_id']}\$') or user_groups='" . $data['group_id'] . "' ORDER BY user_level DESC, user_name");
            $members = dbrows($members);
            $wallposts = dbcount("(comment_id)", DB_COMMENTS, "comment_type='g' and comment_item_id='" . $data['group_id'] . "'");
            echo "<tr>\n<td class='tbl2' style='padding:7px;'><span style='font-size:13px;'><a href='" . FUSION_SELF . "?section=groups&amp;view=" . $data['group_id'] . "' style='text-decoration:underline;'>" . $data['group_name'] . "</a></span>\n";
            if ($data['group_description']) {
                echo "<br />\n<span class='small'>" . trimlink($data['group_description'], 30) . "</span>\n";
            }
            echo "</td>\n";
            echo "<td class='tbl1' style='white-space:nowrap;padding:7px;'>" . timePassed($data['group_created'], false) . "</td>\n";
            echo "<td class='tbl2' style='text-align:center;padding:7px;'>{$members}</td>\n";
            echo "<td class='tbl1' style='text-align:center;padding:7px;'>{$wallposts}</td>\n";
            echo "<td class='tbl2' style='padding:7px;'>";
            if ($wallposts) {
                $latest = dbarray(dbquery("select c.*, u.* from " . DB_COMMENTS . " c\n\t\t\t\tleft join " . DB_USERS . " u on u.user_id=c.comment_name\n\t\t\t\twhere c.comment_type='g' and c.comment_item_id='" . $data['group_id'] . "' order by c.comment_datestamp desc limit 1"));
                echo timepassed($latest['comment_datestamp']) . "<br />\n";
                echo $locale['uc282'] . "<a href='" . BASEDIR . "profile.php?lookup=" . $latest['user_id'] . "'>" . showLabel($latest['user_id']) . "</a>\n";
            } else {
                echo $locale['uc281'];
            }
            echo "</td>\n</tr>\n";
        }
    } else {
        echo "<tr>\n<td class='tbl1' style='text-align:center;'>" . $locale['uc258'] . "</td>\n</tr>\n";
    }
    echo "<tr>\n<td class='tbl1' style='text-align:center;'" . ($rows ? " colspan='5'" : "") . ">" . (checkgroup($fb4['group_create']) ? "<a href='" . FUSION_SELF . "?section=groups&amp;action=create'>" . $locale['uc256'] . "</a> :: " : "") . "<a href='" . FUSION_SELF . "?section=groups&amp;action=search'>" . $locale['uc257'] . "</a></td>\n</tr>\n";
}
if (!defined("USER_CP")) {
    echo "</table>\n</td>\n</tr>\n</table>\n";
    closetable();
    require_once THEMES . "templates/footer.php";
}
include_once INCLUDES . "infusions_include.php";
// Check if a locale file is available that match the selected locale.
if (file_exists(INFUSIONS . "shoutbox_panel/locale/" . LANGUAGE . ".php")) {
    // Load the locale file matching selection.
    include INFUSIONS . "shoutbox_panel/locale/" . LANGUAGE . ".php";
} else {
    // Load the default locale file.
    include INFUSIONS . "shoutbox_panel/locale/English.php";
}
$shout_settings = get_settings("shoutbox_panel");
$archive_shout_link = "";
$archive_shout_message = "";
$result = dbquery("SELECT panel_access FROM " . DB_PANELS . " WHERE panel_filename='shoutbox_panel' AND panel_status='1'");
if (dbrows($result)) {
    $data = dbarray($result);
    if (!checkgroup($data['panel_access'])) {
        redirect(BASEDIR . "index.php");
    }
} else {
    redirect(BASEDIR . "index.php");
}
if (iMEMBER && (isset($_GET['action']) && $_GET['action'] == "delete") && (isset($_GET['shout_id']) && isnum($_GET['shout_id']))) {
    if (iADMIN && checkrights("S") || iMEMBER && dbcount("(shout_id)", DB_SHOUTBOX, "shout_id='" . $_GET['shout_id'] . "' AND shout_name='" . $userdata['user_id'] . "' AND shout_hidden='0'")) {
        $result = dbquery("DELETE FROM " . DB_SHOUTBOX . " " . (multilang_table("SB") ? "WHERE shout_language='" . LANGUAGE . "' AND" : "WHERE") . " shout_id='" . $_GET['shout_id'] . "'" . (iADMIN ? "" : " AND shout_name='" . $userdata['user_id'] . "'"));
    }
    redirect(FUSION_SELF);
}
function sbawrap($text)
{
    global $locale;
    $i = 0;
<?php

require_once '../../includes/classes/core.php';
$action = $_REQUEST['act'];
$error = '';
$data = '';
switch ($action) {
    case 'get_list':
        $count = $_REQUEST['count'];
        $hidden = $_REQUEST['hidden'];
        $user = $_SESSION['USERID'];
        $start = $_REQUEST['start'];
        $end = $_REQUEST['end'];
        $group_id = checkgroup($user);
        $rResult = mysql_query("SELECT incomming_call.date,\r\n\t\t                               incomming_call.date,\r\n                            \t\t   incomming_call.phone,\r\n                            \t       asterisk_incomming.dst_extension,\r\n                            \t\t   asterisk_incomming.dst_queue,\r\n                            \t\t   IF(asterisk_incomming.disconnect_cause='COMPLETECALLER', 'აბონენტმა გათიშა', 'ოპერატორმა გათიშა'),\r\n                            \t\t   persons.`name`,\r\n\t\t                               SEC_TO_TIME(asterisk_incomming.duration),\r\n                            \t       IF({$group_id}!=3,CONCAT('<p onclick=play(', '\\'', DATE_FORMAT(asterisk_incomming.call_datetime, '%Y/%m/%d/'),(REPLACE(REPLACE(CONVERT(asterisk_incomming.file_name USING utf8),'/var/spool/asterisk/monitor/',''),'.wav','')),'.wav', '\\'',  ')>მოსმენა</p>', '<a download=\\'audio.wav\\' href=\\'http://213.131.56.86:8989/', \r\n                            \t\t\tDATE_FORMAT(asterisk_incomming.call_datetime, '%Y/%m/%d/'),(REPLACE(REPLACE(asterisk_incomming.file_name,'/var/spool/asterisk/monitor/',''),'.wav','')),'.wav', '\\'>ჩამოტვირთვა</a>'),\r\n                            \t\t\tCONCAT('<p onclick=play(', '\\'', DATE_FORMAT(asterisk_incomming.call_datetime, '%Y/%m/%d/'),(REPLACE(REPLACE(CONVERT(asterisk_incomming.file_name USING utf8),'/var/spool/asterisk/monitor/',''),'.wav','')),'.wav', '\\'',  ')>მოსმენა</p>'))\r\n                                       \r\n                                FROM   incomming_call\r\n                                JOIN   asterisk_incomming ON incomming_call.asterisk_incomming_id = asterisk_incomming.id\r\n                                JOIN   users ON users.id = incomming_call.user_id\r\n                                JOIN   persons ON persons.id = users.person_id\r\n                                WHERE  DATE(incomming_call.date) BETWEEN '{$start}' AND '{$end}' AND incomming_call.call_status_id=1");
        $data = array("aaData" => array());
        while ($aRow = mysql_fetch_array($rResult)) {
            $row = array();
            for ($i = 0; $i < $count; $i++) {
                $row[] = $aRow[$i];
            }
            $data['aaData'][] = $row;
        }
        break;
    default:
        $error = 'Action is Null';
}
$data['error'] = $error;
echo json_encode($data);
function checkgroup($user)
{
Exemple #14
0
 echo "<span class='small'><strong>" . $locale['504'] . "</strong> " . showdate("shortdate", $data['user_joined']) . "</span><br />\n";
 echo "<br /></td>\n<td valign='top' class='tbl1 forum_thread_user_post'>\n";
 if (iMOD) {
     echo "<div style='float:right'><input type='checkbox' name='delete_post[]' value='" . $data['post_id'] . "' /></div>\n";
 }
 $message = parseubb($message);
 $message = isset($_GET['highlight']) ? "<div class='search_result'>" . $message . "</div>\n" : $message;
 echo nl2br($message);
 echo "<!--sub_forum_post_message-->";
 $a_result = dbquery("SELECT * FROM " . DB_FORUM_ATTACHMENTS . " WHERE post_id='" . $data['post_id'] . "'");
 $a_files = "";
 $a_images = "";
 $i_files = 0;
 $i_images = 0;
 if (dbrows($a_result)) {
     if (checkgroup($fdata['forum_attach_download'])) {
         while ($a_data = dbarray($a_result)) {
             if (!file_exists(FORUM . "attachments/" . $a_data['attach_name'])) {
                 break;
             }
             if (in_array($a_data['attach_ext'], $imagetypes) && @getimagesize(FORUM . "attachments/" . $a_data['attach_name'])) {
                 $a_images .= display_image_attach($a_data['attach_name'], "100", "100", $data['post_id']) . "\n";
                 $i_images++;
             } else {
                 if ($i_files > 0) {
                     $a_files .= "<br />\n";
                 }
                 $a_files .= "<a href='" . FUSION_SELF . "?thread_id=" . $_GET['thread_id'] . "&amp;getfile=" . $a_data['attach_id'] . "'>" . $a_data['attach_name'] . "</a>&nbsp;";
                 $a_files .= "[<span class='small'>" . parsebytesize(filesize(FORUM . "attachments/" . $a_data['attach_name'])) . " / " . $a_data['attach_count'] . $locale['507a'] . "</span>]\n";
                 $i_files++;
             }
Exemple #15
0
                echo "<br />\n<span class='small'>" . $data['weblink_cat_description'] . "</span>";
            }
            echo "</td>\n";
            $counter++;
        }
        echo "</tr>\n</table>\n";
    } else {
        echo "<div style='text-align:center'><br />\n" . $locale['430'] . "<br /><br />\n</div>\n";
    }
    closetable();
} else {
    $res = 0;
    $result = dbquery("SELECT weblink_cat_name, weblink_cat_sorting, weblink_cat_access FROM " . DB_WEBLINK_CATS . " WHERE weblink_cat_id='" . $_GET['cat_id'] . "'");
    if (dbrows($result) != 0) {
        $cdata = dbarray($result);
        if (checkgroup($cdata['weblink_cat_access'])) {
            $res = 1;
            add_to_title($locale['global_201'] . $cdata['weblink_cat_name']);
            opentable($locale['400'] . ": " . $cdata['weblink_cat_name']);
            $rows = dbcount("(weblink_id)", DB_WEBLINKS, "weblink_cat='" . $_GET['cat_id'] . "'");
            if (!isset($_GET['rowstart']) || !isnum($_GET['rowstart'])) {
                $_GET['rowstart'] = 0;
            }
            if ($rows != 0) {
                $result = dbquery("SELECT weblink_id, weblink_name, weblink_description, weblink_datestamp, weblink_count FROM " . DB_WEBLINKS . " WHERE weblink_cat='" . $_GET['cat_id'] . "' ORDER BY " . $cdata['weblink_cat_sorting'] . " LIMIT " . $_GET['rowstart'] . "," . $settings['links_per_page']);
                $numrows = dbrows($result);
                $i = 1;
                while ($data = dbarray($result)) {
                    if ($data['weblink_datestamp'] + 604800 > time() + $settings['timeoffset'] * 3600) {
                        $new = " <span class='small'>" . $locale['410'] . "</span>";
                    } else {
Exemple #16
0
    $locale += fusion_get_locale("", INFUSIONS . "downloads/locale/" . LOCALESET . "downloads.php");
} else {
    $locale += fusion_get_locale("", INFUSIONS . "downloads/locale/English/downloads.php");
}
include INFUSIONS . "downloads/templates/downloads.php";
require_once INFUSIONS . "downloads/classes/Functions.php";
$dl_settings = get_settings("downloads");
if (!isset($_GET['download_id']) && !isset($_GET['cat_id'])) {
    add_to_title($locale['global_200'] . \PHPFusion\SiteLinks::get_current_SiteLinks("", "link_name"));
}
add_breadcrumb(array('link' => INFUSIONS . 'downloads/downloads.php', 'title' => \PHPFusion\SiteLinks::get_current_SiteLinks("", "link_name")));
$result = NULL;
if (isset($_GET['file_id']) && isnum($_GET['file_id'])) {
    $res = 0;
    $data = dbarray(dbquery("SELECT download_url, download_file, download_cat, download_visibility FROM " . DB_DOWNLOADS . " WHERE download_id='" . intval($_GET['file_id']) . "'"));
    if (checkgroup($data['download_visibility'])) {
        $result = dbquery("UPDATE " . DB_DOWNLOADS . " SET download_count=download_count+1 WHERE download_id='" . intval($_GET['file_id']) . "'");
        if (!empty($data['download_file']) && file_exists(DOWNLOADS . 'files/' . $data['download_file'])) {
            $res = 1;
            require_once INCLUDES . "class.httpdownload.php";
            ob_end_clean();
            $object = new httpdownload();
            $object->set_byfile(DOWNLOADS . 'files/' . $data['download_file']);
            $object->use_resume = TRUE;
            $object->download();
            exit;
        } elseif (!empty($data['download_url'])) {
            $res = 1;
            $url_prefix = !strstr($data['download_url'], "http://") && !strstr($data['download_url'], "https://") ? "http://" : "";
            redirect($url_prefix . $data['download_url']);
        }
Exemple #17
0
 function forum_newtopic()
 {
     global $settings, $locale;
     if (isset($_POST['select_forum'])) {
         $_POST['forum_sel'] = isset($_POST['forum_sel']) && isnum($_POST['forum_sel']) ? $_POST['forum_sel'] : 0;
         redirect(FORUM . 'post.php?action=newthread&forum_id=' . $_POST['forum_sel']);
     }
     echo openmodal('newtopic', $locale['forum_0057'], array('button_id' => 'newtopic', 'class' => 'modal-md'));
     $index = dbquery_tree(DB_FORUMS, 'forum_id', 'forum_cat');
     $result = dbquery("SELECT a.forum_id, a.forum_name, b.forum_name as forum_cat_name, a.forum_post\n\t\t FROM " . DB_FORUMS . " a\n\t\t LEFT JOIN " . DB_FORUMS . " b ON a.forum_cat=b.forum_id\n\t\t WHERE " . groupaccess('a.forum_access') . " " . (multilang_table("FO") ? "AND a.forum_language='" . LANGUAGE . "' AND" : "AND") . "\n\t\t (a.forum_type ='2' or a.forum_type='4') AND a.forum_post < " . USER_LEVEL_PUBLIC . " AND a.forum_lock !='1' ORDER BY a.forum_cat ASC, a.forum_branch ASC, a.forum_name ASC");
     $options = array();
     if (dbrows($result) > 0) {
         while ($data = dbarray($result)) {
             $depth = get_depth($index, $data['forum_id']);
             if (checkgroup($data['forum_post'])) {
                 $options[$data['forum_id']] = str_repeat("&#8212;", $depth) . $data['forum_name'] . " " . ($data['forum_cat_name'] ? "(" . $data['forum_cat_name'] . ")" : '');
             }
         }
         echo "<div class='well clearfix m-t-10'>\n";
         echo form_select('forum_sel', $locale['forum_0395'], '', array('options' => $options, 'inline' => 1, 'width' => '100%'));
         echo "<div class='display-inline-block col-xs-12 col-sm-offset-3'>\n";
         echo form_button('select_forum', $locale['forum_0396'], 'select_forum', array('class' => 'btn-primary btn-sm'));
         echo "</div>\n";
         echo "</div>\n";
         echo closeform();
     } else {
         echo "<div class='well text-center'>\n";
         echo $locale['forum_0328'];
         echo "</div>\n";
     }
     echo closemodal();
 }
Exemple #18
0
    if (checkgroup($cp_data['page_access'])) {
        ob_start();
        eval("?>" . stripslashes($cp_data['page_content']) . "<?php ");
        $custompage = ob_get_contents();
        ob_end_clean();
        $custompage = preg_split("/<!?--\\s*pagebreak\\s*-->/i", $custompage);
        $pagecount = count($custompage);
        echo $custompage[$_GET['rowstart']];
    } else {
        echo "<div class='admin-message' style='text-align:center'><br /><img style='border:0px; vertical-align:middle;' src ='" . BASEDIR . "images/warn.png' alt=''/><br /> " . $locale['400'] . "<br /><a href='index.php' onclick='javascript:history.back();return false;'>" . $locale['403'] . "</a>\n<br /><br /></div>\n";
    }
} else {
    add_to_title($locale['global_200'] . $locale['401']);
    echo "<!--custompages-pre-content-->\n";
    opentable($locale['401']);
    echo "<div style='text-align:center'><br />\n" . $locale['402'] . "\n<br /><br /></div>\n";
}
closetable();
if (isset($pagecount) && $pagecount > 1) {
    echo "<div align='center' style='margin-top:5px;'>\n" . makepagenav($_GET['rowstart'], 1, $pagecount, 3, FUSION_SELF . "?page_id=" . $_GET['page_id'] . "&amp;") . "\n</div>\n";
}
echo "<!--custompages-after-content-->\n";
if (dbrows($cp_result) && checkgroup($cp_data['page_access'])) {
    if ($cp_data['page_allow_comments']) {
        showcomments("C", DB_CUSTOM_PAGES, "page_id", $_GET['page_id'], FUSION_SELF . "?page_id=" . $_GET['page_id']);
    }
    if ($cp_data['page_allow_ratings']) {
        showratings("C", $_GET['page_id'], FUSION_SELF . "?page_id=" . $_GET['page_id']);
    }
}
require_once THEMES . "templates/footer.php";
            require_once INCLUDES . "comments_include.php";
            showcomments("P", DB_PHOTOS, "photo_id", $_GET['photo_id'], FUSION_SELF . "?photo_id=" . $_GET['photo_id']);
        }
        if ($data['photo_allow_ratings'] && $settings['ratings_enabled'] == "1") {
            require INCLUDES . "ratings_include.php";
            showratings("P", $_GET['photo_id'], FUSION_SELF . "?photo_id=" . $_GET['photo_id']);
        }
    }
} elseif (isset($_GET['album_id']) && isnum($_GET['album_id'])) {
    define("PHOTODIR", PHOTOS . (!SAFEMODE ? "album_" . $_GET['album_id'] . "/" : ""));
    $result = dbquery("SELECT album_title, album_description, album_thumb, album_access\r\n\tFROM " . DB_PHOTO_ALBUMS . " WHERE album_id='" . (int) $_GET['album_id'] . "'");
    if (!dbrows($result)) {
        redirect(make_url(BASEDIR . FUSION_SELF, BASEDIR . "photogallery", "", ".html"));
    } else {
        $data = dbarray($result);
        if (!checkgroup($data['album_access'])) {
            redirect(make_url(BASEDIR . FUSION_SELF, BASEDIR . "photogallery", "", ".html"));
        } else {
            $rows = dbcount("(photo_id)", DB_PHOTOS, "album_id='" . (int) $_GET['album_id'] . "'");
            add_to_title($locale['global_201'] . $data['album_title']);
            opentable($locale['420']);
            echo "<!--pre_album_info-->";
            echo "<table cellpadding='0' cellspacing='0' width='80%' class='center'>\n<tr>\n";
            echo "<td rowspan='2' align='center' class='tbl1 photogallery_album_thumb'><!--photogallery_album_thumb-->";
            if ($data['album_thumb'] && file_exists(PHOTOS . $data['album_thumb'])) {
                echo "<img src='" . PHOTOS . $data['album_thumb'] . "' alt='" . $data['album_thumb'] . "' />";
            } elseif (file_exists(PHOTOS . "nophoto.jpg")) {
                echo "<img src='" . PHOTOS . "nophoto.jpg' alt='" . $locale['432'] . "' title='" . $locale['432'] . "' style='border:0px' />";
            } else {
                echo $locale['432'];
            }
Exemple #20
0
$file = $_REQUEST['file_name'];
switch ($action) {
    case 'get_add_page':
        $page = GetPage();
        $data = array('page' => $page);
        break;
    case 'get_edit_page':
        $page = GetPage(Getincomming($task_id));
        $data = array('page' => $page);
        break;
    case 'get_list':
        $count = $_REQUEST['count'];
        $hidden = $_REQUEST['hidden'];
        $user_id = $_REQUEST['user_id'];
        $user = $_SESSION['USERID'];
        $group = checkgroup($user);
        $filter = '';
        if ($group != 2) {
            $filter = 'AND outgoing_call.responsible_user_id =' . $user;
        }
        $rResult = mysql_query("SELECT \t \t`task`.id,\r\n\t\t\t\t\t\t\t\t\t\t\t`task`.id,\r\n\t\t\t\t\t\t\t\t\t\t\t`site_user`.`name`,\r\n\t\t\t\t\t\t\t\t\t\t\t`site_user`.`pin`,\r\n\t\t\t\t\t\t\t\t\t\t\t`person1`.`name` ,\r\n\t\t\t\t\t\t\t\t\t\t\t`person2`.`name` ,\r\n\t\t\t\t\t\t\t\t\t\t\t`incomming_call`.date,\r\n\t\t\t\t\t\t\t\t\t\t\t`status`.`call_status`\r\n\t\t\t\t\t\t\t\tFROM \t\ttask\t\t\t\r\n\t\t\t\t\t\t\t\tLEFT JOIN \t\tincomming_call ON task.incomming_call_id=incomming_call.id\r\n\t\t\t\t\t\t\t\tLEFT JOIN \tsite_user\t\tON incomming_call.id=site_user.incomming_call_id\r\n\t\t\t\t\t\t\t\t\r\n\t\t\t\t\t\t\t\t\r\n\t\t\t\t\t\t\t\tJOIN \t\tusers AS `user1`\t\t\tON task.responsible_user_id=user1.id\r\n\t\t\t\t\t\t\t\tJOIN \t\tpersons AS `person1`\t\tON user1.person_id=person1.id\r\n\t\t\t\t\t\t\t\t\r\n\t\t\t\t\t\t\t\tJOIN \t\tusers AS `user2`\t\t\tON task.user_id=user2.id\r\n\t\t\t\t\t\t\t\tJOIN \t\tpersons AS `person2`\t\tON user2.person_id=person2.id\r\n\t\t\t\t\t\t\t\t\r\n\t\t\t\t\t\t\t\tLEFT JOIN `status`  \tON\ttask.`status`= `status`.id\r\n\t\t\t\t\t\t\t\t\r\n\t\t\t\t\t\t\t\tWHERE \t\ttask.task_type_id=1 AND task.`status`=1");
        $data = array("aaData" => array());
        while ($aRow = mysql_fetch_array($rResult)) {
            $row = array();
            for ($i = 0; $i < $count; $i++) {
                /* General output */
                $row[] = $aRow[$i];
            }
            $data['aaData'][] = $row;
        }
        break;
Exemple #21
0
function navigation($main_menu = true)
{
    if ($main_menu) {
        $link = Cache::read('navigation');
        if (!$link) {
            $result = dbquery("SELECT link_name, link_url, link_window, link_visibility FROM " . DB_SITE_LINKS . "\r\n\t\t\t\t WHERE link_position='3' ORDER BY link_order");
            $link = array();
            while ($data = dbarray($result)) {
                $link[] = $data;
            }
            Cache::write('navigation', $link);
        }
        echo "<ul>\n";
        foreach ($link as $data) {
            if (checkgroup($data['link_visibility'])) {
                $link_target = $data['link_window'] == "1" ? " target='_blank'" : "";
                $li_class = preg_match("/^" . preg_quote(START_PAGE, '/') . "/i", $data['link_url']) ? " class='current'" : "";
                if (strstr($data['link_name'], "%submenu% ")) {
                    echo "        <li{$li_class}><a href='/" . $data['link_url'] . "'{$link_target}><span>" . parseubb(str_replace("%submenu% ", "", $data['link_name']), "b|i|u|color") . "</span></a>\n        <ul class='children'>\n";
                } elseif (strstr($data['link_name'], "%endmenu% ")) {
                    echo "        <li{$li_class}><a href='/" . $data['link_url'] . "'{$link_target}><span>" . parseubb(str_replace("%endmenu% ", "", $data['link_name']), "b|i|u|color") . "</span></a></li>\n        </ul>\n        </li>\n";
                } elseif (strstr($data['link_url'], "http://") || strstr($data['link_url'], "https://")) {
                    echo "        <li{$li_class}><a href='" . $data['link_url'] . "'{$link_target}><span>" . parseubb($data['link_name'], "b|i|u|color") . "</span></a></li>\n";
                } else {
                    echo "        <li{$li_class}><a href='/" . $data['link_url'] . "'{$link_target}><span>" . parseubb($data['link_name'], "b|i|u|color") . "</span></a></li>\n";
                }
            }
        }
        echo "      </ul>\n";
    } else {
        $link = Cache::read('footer');
        $list_open = false;
        if (!$link) {
            $result = dbquery("SELECT link_name, link_url, link_window, link_visibility FROM " . DB_SITE_LINKS . "\r\n\t\t\t\t WHERE link_position='1' ORDER BY link_order");
            $link = array();
            while ($data = dbarray($result)) {
                $link[] = $data;
            }
            Cache::write('footer', $link);
        }
        foreach ($link as $data) {
            if (checkgroup($data['link_visibility'])) {
                if ($data['link_name'] != "---" && $data['link_url'] == "---") {
                    if ($list_open) {
                        echo "\t\t\t</ul>\n\t\t</div>\n";
                        $list_open = false;
                    }
                    echo "\t\t<div class='footer grid_4'>\n\t\t\t<h3>" . parseubb($data['link_name'], "b|i|u|color") . "</h3>\n";
                } elseif ($data['link_name'] == "---" && $data['link_url'] == "---") {
                    echo "\t\t\t\t<li>Method does not exist anymore</li>\n";
                } else {
                    if (!$list_open) {
                        echo "\t\t\t<ul>\n";
                        $list_open = true;
                    }
                    $link_target = $data['link_window'] == "1" ? " target='_blank'" : "";
                    if (strstr($data['link_url'], "http://") || strstr($data['link_url'], "https://")) {
                        echo "\t\t\t\t<li><a href='" . $data['link_url'] . "'" . $link_target . "><span>" . parseubb($data['link_name'], "b|i|u|color") . "</span></a></li>\n";
                    } else {
                        echo "\t\t\t\t<li><a href='/" . $data['link_url'] . "'" . $link_target . "><span>" . parseubb($data['link_name'], "b|i|u|color") . "</span></a></li>\n";
                    }
                }
            }
        }
        if ($list_open) {
            echo "\t\t\t</ul>\n\t\t</div>\n";
        }
    }
}
Exemple #22
0
        for ($i = 0; $i < count($oldpath) - 1; $i++) {
            $newpath .= $oldpath[$i] . "/";
        }
        if (is_dir($newpath . $settings['locale'])) {
            redirect_img_dir($newpath, $newpath . $settings['locale'] . "/");
        }
    }
}
//locale dependent forum buttons
if (iSUPERADMIN) {
    define("iMOD", true);
}
if (!defined("iMOD") && iMEMBER && $fdata['forum_moderators']) {
    $mod_groups = explode(".", $fdata['forum_moderators']);
    foreach ($mod_groups as $mod_group) {
        if (!defined("iMOD") && checkgroup($mod_group)) {
            define("iMOD", true);
        }
    }
}
if (!defined("iMOD")) {
    define("iMOD", false);
}
$caption = $fdata['forum_cat_name'] . " :: " . $fdata['forum_name'];
add_to_title($locale['global_201'] . $fdata['forum_name']);
if (isset($_POST['delete_threads']) && iMOD) {
    $thread_ids = "";
    if (isset($_POST['check_mark']) && is_array($_POST['check_mark'])) {
        foreach ($_POST['check_mark'] as $thisnum) {
            if (isnum($thisnum)) {
                $thread_ids .= ($thread_ids ? "," : "") . $thisnum;
Exemple #23
0
         }
     }
     if (!$res) {
         redirect($settings['opening_page']);
     }
 } else {
     $posts_per_page = 20;
     if (!isset($_GET['rowstart']) || !isnum($_GET['rowstart'])) {
         $_GET['rowstart'] = 0;
     }
     $result = dbquery("SELECT fp.post_message, fp.post_datestamp, fp.post_edittime, fp.post_author, fp.post_edituser,\n                fu.user_name AS user_name, fu.user_status AS user_status, fe.user_name AS edit_name, fe.user_status AS edit_status,\n                ft.thread_subject, ff.forum_access\n                FROM " . DB_FORUM_THREADS . " ft\n                INNER JOIN " . DB_FORUM_POSTS . " fp ON ft.thread_id = fp.thread_id\n                INNER JOIN " . DB_FORUMS . " ff ON ff.forum_id = ft.forum_id\n                INNER JOIN " . DB_USERS . " fu ON fu.user_id = fp.post_author\n                LEFT JOIN " . DB_USERS . " fe ON fe.user_id = fp.post_edituser\n                WHERE ft.thread_id=" . $_GET['item_id'] . "\n                ORDER BY fp.post_datestamp\n                LIMIT " . $_GET['rowstart'] . ",{$posts_per_page}");
     $res = FALSE;
     $i = 0;
     if (dbrows($result)) {
         while ($data = dbarray($result)) {
             if (checkgroup($data['forum_access'])) {
                 $res = TRUE;
                 if ($i == 0) {
                     echo $locale['500'] . " <strong>" . $settings['sitename'] . " :: " . $data['thread_subject'] . "</strong><hr /><br />\n";
                 }
                 echo "<div style='margin-left:20px'>\n";
                 echo "<div style='float:left'>" . $locale['501'] . profile_link($data['post_author'], $data['user_name'], $data['user_status']) . $locale['502'] . showdate("forumdate", $data['post_datestamp']) . "</div><div style='float:right'>#" . ($i + 1) . "</div><div style='float:none;clear:both'></div><hr />\n";
                 echo nl2br(parseubb(parsesmileys($data['post_message'])));
                 if ($data['edit_name'] != '') {
                     echo "<div style='margin-left:20px'>\n<hr />\n";
                     echo $locale['503'] . profile_link($data['post_edituser'], $data['edit_name'], $data['edit_status']) . $locale['502'] . showdate("forumdate", $data['post_edittime']);
                     echo "</div>\n";
                 }
                 echo "</div>\n";
                 echo "<br />\n";
                 $i++;
Exemple #24
0
function render_item($item_id)
{
    global $aidlink, $locale, $settings, $golddata, $_REQUEST, $_POST, $_GET;
    include INCLUDES . "comments_include.php";
    include INCLUDES . "ratings_include.php";
    echo "<table width='100%' cellpadding='0' cellspacing='0' class='tbl-border'>\n<tr>\n";
    echo "<td valign='top' align='left'>\n";
    $result = dbquery("SELECT * FROM " . DB_UG3_USAGE . " LEFT JOIN (" . DB_UG3_CATEGORIES . ")\n\t\t\t\t ON (" . DB_UG3_CATEGORIES . ".cat_id = " . DB_UG3_USAGE . ".category)\n\t\t\t\t WHERE " . DB_UG3_USAGE . ".id = '" . $item_id . "'\n\t\t\t\t LIMIT 1");
    if (dbrows($result)) {
        $data = dbarray($result);
        if (checkgroup($data['cat_access'])) {
            echo "<table cellpadding='3' cellspacing='0' width='100%' class='tbl-border'>\n<tr>\n";
            echo "<td align='left' valign='top'>&nbsp;</td>\n";
            echo "<td algin='left' valign='top'><h3>" . $data['name'] . "</h3></td>\n";
            echo "</tr><tr>\n";
            echo "<td align='left' valign='top'><img src='" . GOLD_IMAGE_ITEM . $data['image'] . "' /></td>";
            echo "<td algin='left' valign='top'>" . $data['description'] . "<br/><br />\n";
            echo "<u>" . $locale['urg_shop_109'] . "</u> " . formatMoney($data['cost']) . "<br /><br />\n";
            echo "<u>" . $locale['urg_shop_117'] . "</u> " . $data['stock'] . "<br /><br />\n";
            if ($golddata['cash'] >= $data['cost']) {
                echo "<a href='index.php?op=shop_finalise&amp;id=" . $data['id'] . "&amp;return=" . urlencode(FUSION_SELF . "?op=shop_start&category=" . $data['category']) . "'>" . $locale['urg_shop_119'] . "</a>\n";
            } elseif ($data['stock'] == 0) {
                echo "<strong>" . $locale['urg_shop_120'] . "</strong>\n";
            } else {
                echo "<span style='color:red;'>" . sprintf($locale['urg_shop_121'] . " %s", formatMoney($data['cost'] - $golddata['cash'])) . "</span>\n";
            }
            echo "</td>\n";
            echo "</tr>\n</table>\n";
        } else {
            echo $locale['urg_shop_150'];
            pagerefresh('meta', 3, FUSION_SELF . '?op=shop_start');
        }
    } else {
        echo $locale['urg_shop_151'];
        pagerefresh('meta', 3, FUSION_SELF . '?op=shop_start');
    }
    echo "</td>\n";
    echo "<td valign='top' align='left' width='150px'>\n";
    echo "<table width='100%' cellpadding='3' cellspacing='3' class='tbl-border'>\n<tr>\n";
    echo "<td class='tbl2'><strong>" . $locale['urg_shop_152'] . "</strong></td>\n";
    echo "</tr>\n";
    $count = 0;
    $result = dbquery("SELECT ownerid FROM " . DB_UG3_INVENTORY . " WHERE itemid = '" . $item_id . "' AND ownerid != '" . $userdata['user_id'] . "' GROUP BY ownerid ORDER BY RAND()");
    if (dbrows($result)) {
        while ($data = dbarray($result)) {
            if ($count < 5) {
                $result2 = dbquery("SELECT itemid FROM " . DB_UG3_INVENTORY . " WHERE ownerid = '" . $data['ownerid'] . "' AND itemid != '" . $item_id . "' GROUP BY itemid ORDER BY RAND() LIMIT 5");
                while ($data2 = dbarray($result2)) {
                    if ($count < 5) {
                        $item = dbarray(dbquery("SELECT id, name, image FROM " . DB_UG3_USAGE . " WHERE id = '" . $data2['itemid'] . "' LIMIT 1"));
                        echo "<tr>\n";
                        echo "<td><img src='" . GOLD_IMAGE_ITEM . $item['image'] . "' alt='" . $data['itemname'] . "' width='15px' height='15px' align='left' /> \n";
                        echo "<a href='" . FUSION_SELF . "?op=shop_item&amp;id=" . $item['id'] . "'>" . trimlink($item['name'], 15) . "</a></td>\n";
                        echo "</tr>\n";
                        $count++;
                    } else {
                        break;
                    }
                }
            } else {
                break;
            }
        }
    } else {
        echo "<tr><td>" . $locale['urg_shop_153'] . "</td></tr>\n";
    }
    echo "</table>\n";
    echo "</td>\n</tr>\n</table>\n";
    echo "<div style='margin:5px'></div>\n";
    showcomments("S", DB_UG3_USAGE, "id", $_REQUEST['id'], FUSION_SELF . "?op=shop_item&amp;id=" . $_REQUEST['id']);
    showratings("S", $_REQUEST['id'], FUSION_SELF . "?op=shop_item&amp;id=" . $_REQUEST['id']);
}
function showsublinks($sep = "&middot;", $class = "")
{
    global $settings;
    require_once INCLUDES . "mobile.menu.inc.php";
    $mobile_icon = isset($default_mobile_icon) ? $default_mobile_icon : '';
    $sres = dbquery("SELECT link_name, link_url, link_window, link_visibility FROM " . DB_SITE_LINKS . "\r\n\t        " . (multilang_table("SL") ? "WHERE link_language='" . LANGUAGE . "' AND" : "WHERE") . " link_position>='2' ORDER BY link_order");
    $mobile_link = array();
    if (dbrows($sres)) {
        $i = 0;
        if ($settings['bootstrap']) {
            $res = "<nav class='navbar' role='navigation'>\n";
            $res .= "<div class='mobile-menu'>\n<button type='button' class='navbar-toggle collapsed' data-toggle='collapse' data-target='#mp'><i class='entypo menu'></i></button>\n</div>\n";
            $res .= "<div id='mp' class='navbar-collapse collapse'>\n";
            // collect all navbar item.
            $res .= "<ul class='nav navbar-nav hidden-xs'>\n";
        } else {
            $res = "<ul>\n";
        }
        while ($sdata = dbarray($sres)) {
            $mobile_link[$sdata['link_name']] = $sdata['link_url'];
            // order, visibility, language - complied.
            $li_class = $class;
            $i++;
            if ($sdata['link_url'] != "---" && checkgroup($sdata['link_visibility'])) {
                $link_target = $sdata['link_window'] == "1" ? " target='_blank'" : "";
                if ($i == 1) {
                    $li_class .= ($li_class ? " " : "") . "first-link";
                }
                if (START_PAGE == $sdata['link_url']) {
                    $li_class .= ($li_class ? " " : "") . "current-link";
                }
                if (preg_match("!^(ht|f)tp(s)?://!i", $sdata['link_url'])) {
                    $res .= "<li" . ($li_class ? " class='" . $li_class . "'" : "") . ">" . $sep . "<a href='" . $sdata['link_url'] . "'" . $link_target . ">\n";
                    $res .= "<span>" . parseubb($sdata['link_name'], "b|i|u|color|img") . "</span></a></li>\n";
                } else {
                    $res .= "<li" . ($li_class ? " class='" . $li_class . "'" : "") . ">" . $sep . "<a href='" . BASEDIR . $sdata['link_url'] . "'" . $link_target . ">\n";
                    $res .= "<span>" . parseubb($sdata['link_name'], "b|i|u|color|img") . "</span></a></li>\n";
                }
            }
        }
        if ($settings['bootstrap']) {
            $res .= "</ul>\n";
            $res .= "<!--start of mobile menu -->\n";
            $res .= "<div class='hidden-sm hidden-md hidden-lg mobile-panel m-0'>\n";
            $res .= "<div class='mobile-pane'>\n";
            $res .= "<div class='mobile-header'>\n";
            $res .= "<button class='btn mobile-btn-close' data-toggle='collapse' data-target='#mp'>Close</button>\n";
            $res .= "<div class='mobile-header-text text-center'>Navigation</div>";
            $res .= "</div>\n";
            if (count($mobile_link) > 0) {
                $res .= "<div class='row m-0 mobile-body'>\n";
                foreach ($mobile_link as $link_name => $link_url) {
                    $icon = array_key_exists($link_url, $mobile_icon) ? $mobile_icon[$link_url] : 'entypo layout';
                    $res .= "<div class='col-xs-3 mobile-grid text-center'><a href='{$link_url}' class='btn btn-menu btn-block btn-default m-b-10'><i class='" . $icon . "'></i><br/><span class='mobile-text'>" . trimlink($link_name, 10) . "</span></a></div>\n";
                }
                $res .= "</div>\n";
            }
            $res .= "</div>\n";
            $res .= "</div>\n";
            $res .= "<!--end of mobile menu -->\n";
        } else {
            $res .= "</ul>\n";
        }
        $res .= "</div>\n";
        $res .= "</nav>\n";
        return $res;
    }
}
<?php

require_once "../../../maincore.php";
require_once THEMES . "templates/admin_header.php";
include INFUSIONS . "al_register_mod/infusion_db.php";
if (!defined("IN_FUSION")) {
    die("access denied");
}
if (file_exists(INFUSIONS . "al_register_mod/locale/" . $settings['locale'] . ".php")) {
    include INFUSIONS . "al_register_mod/locale/" . $settings['locale'] . ".php";
} else {
    include INFUSIONS . "al_register_mod/locale/English.php";
}
require_once INFUSIONS . "al_register_mod/includes/functions.php";
if (!checkgroup(1) && !checkgroup(3)) {
    redirect(BASEDIR);
}
//nav
opentable($locale['rm1']);
echo "<a href='" . INFUSIONS . "al_register_mod/admin/index.php'>" . $locale['rm2'] . "</a> <a href='" . INFUSIONS . "al_register_mod/admin/index.php?p=rules'>" . $locale['rm3'] . "</a> <a href='" . INFUSIONS . "al_register_mod/admin/index.php?p=form'>" . $locale['rm4'] . "</a> <a href='" . INFUSIONS . "al_register_mod/admin/index.php?p=apps'>" . $locale['rm5'] . "</a> <a href='" . INFUSIONS . "al_register_mod/admin/index.php?p=addapp'>Add app</a>";
closetable();
if (!isset($_GET['p']) || $_GET['p'] == "" || !file_exists(INFUSIONS . "al_register_mod/admin/" . $_GET['p'] . ".php")) {
    //index
    opentable($locale['rm6']);
    echo $locale['rm7'];
    closetable();
} else {
    require_once INFUSIONS . "al_register_mod/admin/" . $_GET['p'] . ".php";
}
require_once THEMES . "templates/footer.php";
require INCLUDES . "class.httpdownload.php";
function unstripinput($text)
{
    if (QUOTES_GPC) {
        $text = stripslashes($text);
    }
    $search = array("\n", "&amp;", "&quot;", "&#39;", "&#92;", "&quot;", "&#39;", "&lt;", "&gt;");
    $replace = array("\r\n", "&", "\"", "'", "\\", '\\"', "\\'", "<", ">");
    $text = str_replace($search, $replace, $text);
    return $text;
}
if (isset($_GET['thread_id']) && isnum($_GET['thread_id']) && (isset($_GET['post_id']) && isnum($_GET['post_id'])) && (isset($_GET['code_id']) && isnum($_GET['code_id']))) {
    $result = dbquery("SELECT fp.*, ff.* FROM " . DB_POSTS . " AS fp\r\n\t\tINNER JOIN " . DB_FORUMS . " AS ff ON ff.forum_id=fp.forum_id\r\n\t\tWHERE fp.thread_id='" . $_GET['thread_id'] . "' AND fp.post_id='" . $_GET['post_id'] . "'");
    if (dbrows($result)) {
        $data = dbarray($result);
        if (!checkgroup($data['forum_access']) || !$data['forum_cat']) {
            redirect(BASEDIR . "forum/viewthread.php?thread_id=" . $_GET['thread_id']);
        }
        $text = $data['post_message'];
        preg_match_all("#\\[geshi=(.*?)\\](.*?)\\[/geshi\\]#si", $text, $matches, PREG_PATTERN_ORDER);
        if (isset($matches[1][$_GET['code_id']]) && isset($matches[2][$_GET['code_id']])) {
            $ext = strtolower(str_replace("4strict", "", $matches[1][$_GET['code_id']]));
            $text = unstripinput($matches[2][$_GET['code_id']]);
            $filename = "geshi_" . $_GET['thread_id'] . "_" . $_GET['post_id'] . "_" . $_GET['code_id'] . "." . $ext;
            $object = new httpdownload();
            $object->set_bydata($text);
            $object->use_resume = true;
            $object->set_filename($filename);
            $object->download();
        }
    }
Exemple #28
0
| This program is released as free software under the
| Affero GPL license. You can redistribute it and/or
| modify it under the terms of this license which you
| can read by viewing the included agpl.txt or online
| at www.gnu.org/licenses/agpl.html. Removal of this
| copyright header is strictly prohibited without
| written permission from the original author(s).
+--------------------------------------------------------*/
if (!defined("IN_FUSION")) {
    die("Access Denied");
}
openside($locale['global_001']);
$result = dbquery("SELECT * FROM " . DB_SITE_LINKS . " WHERE link_position<='2' ORDER BY link_order");
if (dbrows($result)) {
    while ($data = dbarray($result)) {
        if (checkgroup($data['link_visibility'])) {
            if ($data['link_name'] != "---" && $data['link_url'] == "---") {
                echo "<div class='side-label'><strong>" . $data['link_name'] . "</strong></div>\n";
            } else {
                if ($data['link_name'] == "---" && $data['link_url'] == "---") {
                    echo "<hr class='side-hr' />\n";
                } else {
                    $link_target = $data['link_window'] == "1" ? " target='_blank'" : "";
                    if (strstr($data['link_url'], "http://") || strstr($data['link_url'], "https://")) {
                        echo THEME_BULLET . " <a href='" . $data['link_url'] . "'" . $link_target . " class='side'>" . $data['link_name'] . "</a><br />\n";
                    } else {
                        echo THEME_BULLET . " <a href='" . BASEDIR . $data['link_url'] . "'" . $link_target . " class='side'>" . $data['link_name'] . "</a><br />\n";
                    }
                }
            }
        }
Exemple #29
0
            echo "<td align='center' class='tbl2'><strong>" . $pdata['forum_poll_title'] . "</strong></td>\n</tr>\n<tr>\n<td class='tbl1'>\n";
            echo "<table align='center' cellpadding='0' cellspacing='0'>\n";
            $presult = dbquery("SELECT * FROM " . DB_FORUM_POLL_OPTIONS . " WHERE thread_id='" . $_GET['thread_id'] . "' ORDER BY forum_poll_option_id ASC");
            $poll_options = dbrows($presult);
            while ($pvdata = dbarray($presult)) {
                if (iMEMBER && isset($pdata['forum_vote_user_id']) || (!$fdata['forum_vote'] || !checkgroup($fdata['forum_vote']))) {
                    $option_votes = $pdata['forum_poll_votes'] ? number_format(100 / $pdata['forum_poll_votes'] * $pvdata['forum_poll_option_votes']) : 0;
                    echo "<tr>\n<td class='tbl1'>" . $pvdata['forum_poll_option_text'] . "</td>\n";
                    echo "<td class='tbl1'><img src='" . get_image("pollbar") . "' alt='" . $pvdata['forum_poll_option_text'] . "' height='12' width='" . 200 / 100 * $option_votes . "' class='poll' /></td>\n";
                    echo "<td class='tbl1'>" . $option_votes . "%</td><td class='tbl1'>[" . $pvdata['forum_poll_option_votes'] . " " . ($pvdata['forum_poll_option_votes'] == 1 ? $locale['global_133'] : $locale['global_134']) . "]</td>\n</tr>\n";
                } else {
                    echo "<tr>\n<td class='tbl1'><label><input type='radio' name='poll_option' value='" . $i . "' style='vertical-align:middle' /> " . $pvdata['forum_poll_option_text'] . "</label></td>\n</tr>\n";
                    $i++;
                }
            }
            if (iMEMBER && isset($pdata['forum_vote_user_id']) || (!$fdata['forum_vote'] || !checkgroup($fdata['forum_vote']))) {
                echo "<tr>\n<td align='center' colspan='4' class='tbl1'>" . $locale['480'] . " : " . $pdata['forum_poll_votes'] . "</td>\n</tr>\n";
            } else {
                echo "<tr>\n<td class='tbl1'><input type='submit' name='cast_vote' value='" . $locale['481'] . "' class='button' /></td>\n</tr>\n";
            }
            echo "</table>\n</td>\n</tr>\n</table>\n";
            if (iMEMBER) {
                echo "</form>\n";
            }
        }
    }
}
$result = dbquery("SELECT p.*, u.*, u2.user_name AS edit_name\n\tFROM " . DB_POSTS . " p\n\tLEFT JOIN " . DB_USERS . " u ON p.post_author = u.user_id\n\tLEFT JOIN " . DB_USERS . " u2 ON p.post_edituser = u2.user_id AND post_edituser > '0'\n\tWHERE p.thread_id='" . $_GET['thread_id'] . "' ORDER BY post_datestamp LIMIT " . $_GET['rowstart'] . ",{$posts_per_page}");
if (iMOD) {
    echo "<form name='mod_form' method='post' action='" . FUSION_SELF . "?thread_id=" . $_GET['thread_id'] . "&amp;rowstart=" . $_GET['rowstart'] . "'>\n";
}
Exemple #30
0
 }
 echo "<label><input type='checkbox' name='disable_smileys' value='1'" . $disable_smileys_check . " /> " . $locale['482'] . "</label>";
 if (array_key_exists("user_sig", $userdata) && $userdata['user_sig']) {
     echo "<br />\n<label><input type='checkbox' name='show_sig' value='1'" . $sig_checked . " /> " . $locale['483'] . "</label>";
 }
 if ($settings['thread_notify']) {
     echo "<br />\n<label><input type='checkbox' name='notify_me' value='1'" . $notify_checked . " /> " . $locale['486'] . "</label>";
 }
 echo "</td>\n</tr>\n";
 if ($fdata['forum_attach'] && checkgroup($fdata['forum_attach'])) {
     echo "<tr>\n<td width='145' class='tbl2'>" . $locale['464'] . "</td>\n";
     echo "<td class='tbl1'><input type='file' name='attach' class='textbox' style='width:200px;' /><br />\n";
     echo "<span class='small2'>" . sprintf($locale['466'], parsebytesize($settings['attachmax']), str_replace(',', ' ', $settings['attachtypes'])) . "</span></td>\n";
     echo "</tr>\n";
 }
 if ($fdata['forum_poll'] && checkgroup($fdata['forum_poll'])) {
     echo "<tr>\n<td align='center' colspan='2' class='tbl2'>" . $locale['467'] . "</td>\n";
     echo "</tr>\n<tr>\n";
     echo "<td width='145' class='tbl2'>" . $locale['469'] . "</td>\n";
     echo "<td class='tbl1'><input type='text' name='poll_title' value='" . $poll_title . "' class='textbox' maxlength='255' style='width:250px' /></td>\n";
     echo "</tr>\n";
     $i = 1;
     if (isset($poll_opts) && is_array($poll_opts) && count($poll_opts)) {
         foreach ($poll_opts as $poll_option) {
             echo "<tr>\n<td width='145' class='tbl2'>" . $locale['470'] . " " . $i . "</td>\n";
             echo "<td class='tbl1'><input type='text' name='poll_options[{$i}]' value='" . $poll_option . "' class='textbox' maxlength='255' style='width:250px'>";
             if ($i == count($poll_opts)) {
                 echo " <input type='submit' name='add_poll_option' value='" . $locale['471'] . "' class='button' />";
             }
             echo "</td>\n</tr>\n";
             $i++;