{

global $output, $lang_run_patch, $realm_db, $world_db, $characters_db, $mmfpm_db;

if (isset($_FILES['uploaded_file']['name']))

{

if ( 'application/octet-stream' == $_FILES['uploaded_file']['type'] || 'text/plain' == $_FILES['uploaded_file']['type'] );

else

error($lang_run_patch['run_sql_file_only'].'<br />'. $_FILES['uploaded_file']['type']);

if (file_exists($_FILES['uploaded_file']['tmp_name']))

$buffer = implode('', file($_FILES['uploaded_file']['tmp_name']));

else

error($lang_run_patch['file_not_found']);

}

else

$buffer = '';

$upload_max = ini_get('upload_max_filesize');

if (eregi('([0-9]+)K', $upload_max, $tempregs))

$upload_max=$tempregs[1]*1024;

if (eregi('([0-9]+)M', $upload_max, $tempregs))

$upload_max=$tempregs[1]*1024*1024;

$post_max = ini_get('post_max_size');

if (eregi('([0-9]+)K', $post_max, $tempregs))

$post_max=$tempregs[1]*1024;

if (eregi('([0-9]+)M', $post_max, $tempregs))

$post_max=$tempregs[1]*1024*1024;

// sanity check- a single upload should not be more than 50% the size limit of the total post

$post_max = $post_max /2;

$upload_max_filesize = ($upload_max < $post_max) ? $upload_max : $post_max;

unset($upload_max);

unset($post_max);

$output .= '

<center>

'.$lang_run_patch['select_sql_file'].' :<br />

'.$lang_run_patch['max_filesize'].' '.$upload_max_filesize.' bytes('.round ($upload_max_filesize/1024/1024).' Mbytes)<br />

<table class="hidden">

<tr>

<td>

<form enctype="multipart/form-data" action="run_patch.php?action=print_upload" method="post" name="form">

<input type="hidden" name="MAX_FILE_SIZE" value="'.$upload_max_filesize.'" />

<input type="file" name="uploaded_file" />

</form>

</td>

<td>';

makebutton($lang_run_patch['open'], 'javascript:do_submit()', 130);

unset($upload_max_filesize);

$output .= '

</td>

</tr>

</table>

<hr />

<form action="run_patch.php?action=do_run_patch" method="post" name="form1">

<table class="hidden">

<tr>

<td align="left">'.$lang_run_patch['run_rules'].'</td>

<td align="right">'.$lang_run_patch['select_db'].':

<select name="use_db">';

foreach ($world_db as $db)

$output .= '

<option value="'.$db['name'].'">'.$db['name'].'</option>';

foreach ($characters_db as $db)

$output .= '

<option value="'.$db['name'].'">'.$db['name'].'</option>';

unset($db);

$output .= '

<option value="'.$realm_db['name'].'">'.$realm_db['name'].'</option>

<option value="'.$mmfpm_db['name'].'">'.$mmfpm_db['name'].'</option>

</select>

</td>

</tr>

<tr><td colspan="2"><textarea name="query" rows="26" cols="97">'.$buffer.'</textarea></td></tr>

<tr>

<td colspan="2">';

makebutton($lang_run_patch['run_sql'], 'javascript:do_submit(\'form1\',0)" type="wrn', 130);

unset($buffer);

$output .= '

</td>

</tr>

</table>

</form>

</center>';

{

global $output, $lang_run_patch, $world_db, $realm_db, $characters_db, $mmfpm_db;

if (empty($_POST['query']) || empty($_POST['use_db']))

redirect('run_patch.php?error=1');

$sql = new SQL;

$sql->connect($realm_db['addr'], $realm_db['user'], $realm_db['pass'], $realm_db['name']);

$use_db = $sql->quote_smart($_POST['use_db']);

$query = $_POST['query'];

if ($use_db == $realm_db['name'])

$sql->db($realm_db['name']);

elseif ($use_db == $mmfpm_db['name'])

$sql->connect($mmfpm_db['addr'], $mmfpm_db['user'], $mmfpm_db['pass'], $mmfpm_db['name']);

else

{

foreach ($world_db as $db)

if ($use_db == $db['name'])

$sql->connect($db['addr'], $db['user'], $db['pass'], $db['name']);

foreach ($characters_db as $db)

if ($use_db == $db['name'])

$sql->connect($db['addr'], $db['user'], $db['pass'], $db['name']);

}

unset($use_db);

$new_queries = array();

$line = 0;

$queries = explode("\n",$query);

unset($query);

$n_queries = count($queries);

for($i=0; $i<$n_queries; ++$i)

{

$queries[$i] = trim($queries[$i]);

if ( 0 === strpos ($queries[$i], '#') || 0 === strpos ($queries[$i], '--') )

++$line;

else

array_push($new_queries, $queries[$i]);

}

unset($n_queries);

$qr=split(";\n",implode("\n",$new_queries));

unset($new_queries);

$good = 0;

$bad = 0;

foreach($qr as $qry)

{

++$line;

if (trim($qry))

( $sql->query(trim($qry) ) ? ++$good : ++$bad);

if ($bad)

{

$err = ereg_replace ('\n', '',$sql->error());

$err = ereg_replace ('\r\n$','',$err);

$err = ereg_replace ('\r$', '',$err);

error($lang_run_patch['err_in_line'].': '.$line.' <br />'.$err);

exit();

}

}

unset($qry);

unset($qr);

unset($line);

unset($bad);

if ($queries)

redirect('run_patch.php?error=2&tot='.$good.'');

else

redirect('run_patch.php?error=3');