Esempio n. 1
0
function Formatmysqldate($datestr)
{
    if (empty($datestr)) {
        return $datestr;
    }
    list($day, $month, $year) = split('[/.-]', $datestr);
    if ($year == 0) {
        return $datestr;
    }
    if (!checkdate($month, $day, $year)) {
        ErrorReport("{$l10nstr['137']}: {$datestr}");
        /* invalid date */
        exit;
    }
    return "{$year}-{$month}-{$day}";
}
Esempio n. 2
0
function GetPageBottom($forum)
{
    $query = "SELECT pgbottom FROM mainlist WHERE forum='{$forum}'";
    $result = mysql_query($query);
    if (!$result) {
        ErrorReport("{$l10nstr['62']}");
        /* error in database query */
        echo mysql_error();
        mysql_close($link);
        exit;
    }
    $line = mysql_fetch_array($result, MYSQL_ASSOC);
    return $line['pgbottom'];
}
Esempio n. 3
0
        echo '<input type="reset" class="Formbutton" name="reset" value=" ' . $lang['reset'] . ' " class="Formbutton">&nbsp;&nbsp;&nbsp;';
        echo '</td></tr></table></form>';
    } else {
        echo '<p class="warnung">' . $hta_dir . '.htaccess existiert nicht. Soll sie erstellt werden ?</p>';
        echo '<form action="" method="post"><input type="hidden" name="hta_dir" value="' . $hta_dir . '"><input type="hidden" name="create" value="1"><input type="submit" name="createhtaccess" value="erstellen"></form>';
    }
    echo '<br><a href="main.php">' . $lang['back'] . '</a>';
    exit;
}
if ($action == "phpinfo") {
    phpinfo();
    echo '<p align="center"><a href="main.php">Home</a></p>';
    exit;
}
if ($action == "extinfo") {
    echo ErrorReport();
    exit;
}
if ($action == "db") {
    for ($i = 0; $i < count($databases['Name']); $i++) {
        if (isset($_POST['empty' . $i])) {
            EmptyDB($databases['Name'][$i]);
            $dba = '<p class="green">' . $lang['db'] . " " . $databases['Name'][$i] . " " . $lang['info_cleared'] . "</p>";
            break;
        }
        if (isset($_POST['kill' . $i])) {
            $res = mysql_query("DROP DATABASE `" . $databases['Name'][$i] . "`") or die(mysql_error() . "");
            $dba = '<p class="green">' . $lang['db'] . " " . $databases['Name'][$i] . " " . $lang['info_deleted'] . "</p>";
            SetDefault();
            include $config['files']['parameter'];
            echo '<script language="JavaScript">parent.MySQL_Dumper_menu.location.href="menu.php?action=dbrefresh";</script>';
Esempio n. 4
0
    mysql_close($link);
    print "{$pgbottom}\n";
    exit;
}
if ($action == 'update') {
    $date = date("Y-m-d");
    $title = $_POST['title'];
    $contents = $_POST['contents'];
    $url1 = $_POST['url1'];
    $urldesc1 = $_POST['urldesc1'];
    $url2 = $_POST['url2'];
    $urldesc2 = $_POST['urldesc2'];
    $url3 = $_POST['url3'];
    $urldesc3 = $_POST['urldesc3'];
    if (empty($title)) {
        ErrorReport("{$l10nstr['36']}");
        /* no title for message */
        exit;
    }
    $inf = $_POST['inform'];
    if ($inf) {
        $flags = 1;
    }
    $query = "UPDATE {$table} SET title='{$title}', date='{$date}', time=CURRENT_TIME(), name='{$name}', contents='{$contents}', ";
    $query .= "url1='{$url1}', urldesc1='{$urldesc1}', url2='{$url2}', urldesc2='{$urldesc2}', url3='{$url3}', urldesc3='{$urldesc3}' WHERE num='{$num}'";
    $result = mysql_query($query);
    if (!$result) {
        echo mysql_error();
        exit;
    }
    print "<CENTER><BIG><H1 dir={$langdir}>{$l10nstr['37']}</H1></BIG></CENTER>\n";
Esempio n. 5
0
function UpdatePic()
{
    global $id;
    global $userfilesdir;
    $num = (int) $_GET['num'];
    $size = (int) $_FILES['imgfile']['size'];
    print "size: {$size}<BR>\n";
    if ($size > 0) {
        if ($size > 100000) {
            ErrorReport("קובץ גדול מדי");
            exit;
        }
        $tmpname = $_FILES['imgfile']['tmp_name'];
        $name = $_FILES['imgfile']['name'];
        $carr = explode(".", $name);
        $n = count($carr) - 1;
        $ext = $carr[$n];
        $filename = "{$table}_{$num}.{$ext}";
        move_uploaded_file($tmpname, "{$userfilesdir}/{$filename}");
        $query = "UPDATE guides SET picture='{$filename}' WHERE id='{$id}' AND num='{$num}'";
        $result = mysql_query($query);
        if (!$result) {
            echo mysql_error();
            exit;
        }
        print "<CENTER><H1>הקובץ נוסף להודעה</H1>\n";
        print "יש ללחוץ רענון על מנת לראות את הקובץ";
        print "בעוד מספר שניות תחזור למדריך, אם הקובץ לא נראה, לחץ רענון";
        print "<META HTTP-EQUIV=\"Refresh\" CONTENT=\"2; URL=editguide.php?id={$id}\">\n";
    } else {
        ErrorReport("שגיאה בטעינת קובץ, קובץ גדול מדי או מסוג לא חוקי");
        exit;
    }
    exit;
}
Esempio n. 6
0
        move_uploaded_file($tmpname, "{$userfilesdir}/{$filename}");
        $query = "UPDATE {$table} SET picture='{$filename}' WHERE num='{$num}'";
        $result = mysql_query($query);
        if (!$result) {
            echo mysql_error();
            exit;
        }
        print "<CENTER><H1>{$l10nstr['113']}</H1>\n";
        /* file has ben added to message */
        print "{$l10nstr['114']}";
        /* press refressh to see the file */
        print "<BR><BR><INPUT type=button value=\"{$l10nstr['74']}\" onclick=javascript:window.close();>";
        /*	print "בעוד מספר שניות תחזור לפורום, אם הקובץ לא נראה, לחץ רענון";
        		print "<META HTTP-EQUIV=\"Refresh\" CONTENT=\"2; URL=$mainfile?forum=$table\">\n"; */
    } else {
        ErrorReport("{$l10nstr['115']}");
        /* Too big file or invalid type */
        exit;
    }
    exit;
}
print "<CENTER>\n";
print "<FORM enctype=multipart/form-data action=addpic.php?action=picupdate&forum={$table}&num={$num} method=post>\n";
print "<TABLE border=8><TR><TD colspan=2 align=center><BIG><B>\n";
print "{$l10nstr['107']}";
/* add file to message */
print "<TR>\n";
print "<input type=hidden name=\"MAX_FILE_SIZE\" value=250000><TD>\n";
print "<input type=file name=imgfile size=40>\n";
print "<TR><TD colspan=2 align=center>\n";
print "<input type=\"submit\" value=שלח>\n";
Esempio n. 7
0
        exit;
    }
    $line = mysql_fetch_array($result, MYSQL_ASSOC);
    $msg_title = $line['title'];
    $time = $line['time'];
    $contents = stripslashes($line['contents']);
    $pic = $line['pic'];
}
$blog_name = GetBlogName($blognum);
print "<BR><CENTER><H1>{$blog_name}</H1>\n";
/*
| Print form of message
*/
if ($action == 'edit') {
    if ($user != $name) {
        ErrorReport("אינך רשאי לערוך בלוג זה");
        exit;
    }
    print "<FORM enctype=multipart/form-data action=blogmsg.php?action=update&blog={$blognum}&num={$num} method=post>\n";
} else {
    print "<FORM enctype=multipart/form-data action=blogmsg.php?action=add&blog={$blognum} method=post>\n";
}
print "<TABLE border=8 dir=RTL>\n";
print "<TR><TD colspan=4>\n";
if ($action == 'edit') {
    print "<CENTER><H1>עריכת מאמר</H1></CENTER>\n";
} else {
    print "<CENTER><H1>מאמר חדש</H1></CENTER>\n";
}
print "<TR>\n";
print "<TD >כותרת: \n";