function theme_display_fullsize_pic()
{
global $CONFIG, $THEME_DIR, $FORBIDDEN_SET, $LINEBREAK, $pid;
global $lang_errors, $lang_fullsize_popup, $lang_charset;
$superCage = Inspekt::makeSuperCage();
if (!USER_ID && $CONFIG['allow_unlogged_access'] <= 2) {
printf($lang_errors['login_needed'], '', '', '', '');
die;
} elseif (USER_ID && USER_ACCESS_LEVEL <= 2) {
printf($lang_errors['access_intermediate_only'], '', '', '', '');
die;
}
if ($superCage->get->keyExists('picfile')) {
if (!GALLERY_ADMIN_MODE) {
cpg_die(ERROR, $lang_errors['access_denied'], __FILE__, __LINE__);
}
//$picfile = $_GET['picfile'];
//$picfile = $superCage->get->getPath('picfile'); // doesn't work with HTML entities
$matches = $superCage->get->getMatched('picfile', '/^[0-9A-Za-z~ \\/_.-]+$/');
$picfile = $matches[0];
$picname = $CONFIG['fullpath'] . $picfile;
$imagesize = @getimagesize($picname);
$imagedata = array('name' => $picfile, 'path' => path2url($picname), 'geometry' => $imagesize[3]);
} elseif ($pid) {
$sql = "SELECT filepath, filename, url_prefix, pwidth, pheight FROM {$CONFIG['TABLE_PICTURES']} AS p " . "WHERE pid='{$pid}' {$FORBIDDEN_SET}";
$result = cpg_db_query($sql);
if (!mysql_num_rows($result)) {
cpg_die(ERROR, $lang_errors['non_exist_ap'], __FILE__, __LINE__);
}
$row = mysql_fetch_assoc($result);
if (is_image($row['filename'])) {
$pic_url = get_pic_url($row, 'fullsize');
$geom = 'width="' . $row['pwidth'] . '" height="' . $row['pheight'] . '"';
$imagedata = array('name' => $row['filename'], 'path' => $pic_url, 'geometry' => $geom);
} else {
$pic_html = theme_html_picture();
if (is_movie($row['filename'])) {
$mime_content = cpg_get_type($row['filename']);
$ctrl_offset['mov'] = 15;
$ctrl_offset['wmv'] = 45;
$ctrl_offset['swf'] = 0;
$ctrl_offset['rm'] = 0;
$ctrl_offset_default = 45;
$ctrl_height = isset($ctrl_offset[$mime_content['extension']]) ? $ctrl_offset[$mime_content['extension']] : $ctrl_offset_default;
preg_match('/width="([0-9]+)".*height="([0-9]+)"/', $pic_html, $matches);
$width = $matches[1] + $CONFIG['fullsize_padding_x'];
$height = $matches[2] + $CONFIG['fullsize_padding_y'] + $ctrl_height;
$resize_window = '<script type="text/javascript">window.resizeTo(' . $width . ', ' . $height . ')</script>';
}
preg_match('/<td align="center" style="{SLIDESHOW_STYLE}">.*(.*)<\\/td>/Us', $pic_html, $matches);
$pic_html = $matches[1] . $resize_window;
}
}
if (!USER_ID && $CONFIG['allow_unlogged_access'] <= 2 || USER_ID && USER_ACCESS_LEVEL <= 2) {
// adjust the size of the window if we don't have to catter for a full-size pop-up, but only a text message
$row['pwidth'] = 200;
$row['pheight'] = 100;
}
$charset = $CONFIG['charset'] == 'language file' ? $lang_charset : $CONFIG['charset'];
$fullsize_html = <<<EOT
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset={$charset}" />
<title>{$CONFIG['gallery_name']}: {$lang_fullsize_popup['click_to_close']}</title>
<style type="text/css">
body { margin: 0; padding: 0; background-color: gray; }
img { margin:0; padding:0; border:0; }
#content { margin:0 auto; padding:0; border:0; }
table { border:0; width:{$row['pwidth']}px; height:{$row['pheight']}px; border-collapse:collapse}
td { vertical-align: middle; text-align:center; }
</style>
<script type="text/javascript" src="js/jquery-1.4.2.js"></script>
<script type="text/javascript" src="js/jquery.dimensions.pack.js"></script>
<script type="text/javascript" src="js/displayimage.fullsize.js"></script>
</head>
<body style="margin:0px; padding:0px; background-color: gray;">
EOT;
if ($pic_html) {
$fullsize_html .= $pic_html;
} else {
if ($CONFIG['transparent_overlay'] == 1) {
$fullsize_html .= <<<EOT
<table cellpadding="0" cellspacing="0" align="center" style="padding:0px;">
<tr>
EOT;
$fullsize_html .= '<td align="center" valign="middle" background="' . htmlspecialchars($imagedata['path']) . '" ' . $imagedata['geometry'] . ' class="image">';
$fullsize_html .= '<div id="content">';
$fullsize_html .= '<a href="javascript: window.close()" style="border:none"><img src="images/image.gif?id=' . floor(rand() * 1000 + rand()) . '&fullsize=yes" ' . $imagedata['geometry'] . ' alt="' . htmlspecialchars($imagedata['name']) . '" title="' . htmlspecialchars($imagedata['name']) . $LINEBREAK . $lang_fullsize_popup['click_to_close'] . '" /></a><br />' . $LINEBREAK;
$fullsize_html .= <<<EOT
</div>
</td>
</tr>
</table>
EOT;
} else {
$fullsize_html .= ' <div id="content">' . $LINEBREAK;
$fullsize_html .= '<a href="javascript: window.close()"><img src="' . htmlspecialchars($imagedata['path']) . '" ' . $imagedata['geometry'] . ' id="fullsize_image" alt="' . htmlspecialchars($imagedata['name']) . '" title="' . htmlspecialchars($imagedata['name']) . $LINEBREAK . $lang_fullsize_popup['click_to_close'] . '" /></a><br />' . $LINEBREAK . ' </div>' . $LINEBREAK;
}
}
$fullsize_html .= <<<EOT
</body>
</html>
EOT;
$fullsize_html = CPGPluginAPI::filter('fullsize_html', $fullsize_html);
echo $fullsize_html;
}
}
}
if (isset($CLEAN['fullsize'])) {
theme_display_fullsize_pic();
ob_end_flush();
} elseif (isset($CLEAN['slideshow'])) {
theme_slideshow();
ob_end_flush();
} else {
//if (!isset($_GET['pos'])) cpg_die(ERROR, $lang_errors['non_exist_ap'], __FILE__, __LINE__); //Commented by Abbas
if (!$CLEAN['pos'] && !$CLEAN['pid']) {
cpg_die(ERROR, $lang_errors['non_exist_ap'], __FILE__, __LINE__);
}
$picture_title = $CURRENT_PIC_DATA['title'] ? $CURRENT_PIC_DATA['title'] : strtr(preg_replace("/(.+)\\..*?\\Z/", "\\1", htmlspecialchars($CURRENT_PIC_DATA['filename'])), "_", " ");
$nav_menu = theme_html_img_nav_menu();
$picture = theme_html_picture();
$votes = theme_html_rating_box();
$pic_info = html_picinfo();
$comments = theme_html_comments($CURRENT_PIC_DATA['pid']);
if ($CURRENT_PIC_DATA['keywords']) {
$meta_keywords = "<meta name=\"keywords\" content=\"" . $CURRENT_PIC_DATA['keywords'] . "\"/>";
}
//$meta_nav .= "<link rel=\"alternate\" type=\"text/xml\" title=\"RSS feed\" href=\"rss.php\" />
// ";
$meta_keywords .= $meta_nav;
if ($_GET['album'] == 'lastup' || $_GET['album'] == 'lastcom' || $_GET['album'] == 'topn' || $_GET['album'] == 'toprated' || $_GET['album'] == 'favpics' || $_GET['album'] == 'random') {
$meta_keywords .= '<meta name="robots" content="noindex, nofollow" />';
}
pageheader($album_name . '/' . $picture_title, $meta_keywords, false);
// Display Breadcrumbs
if ($breadcrumb && !(strpos($CONFIG['main_page_layout'], "breadcrumb") === false)) {
