/
item_watch.php
executable file
·96 lines (87 loc) · 3.04 KB
/
item_watch.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
<?php
/***************************************************************************
* copyright : (C) 2008 - 2013 WeBid
* site : http://www.webidsupport.com/
***************************************************************************/
/***************************************************************************
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version. Although none of the code may be
* sold. If you have been sold this script, get a refund.
***************************************************************************/
include 'common.php';
include $include_path . 'browseitems.inc.php';
include $include_path . 'dates.inc.php';
// If user is not logged in redirect to login page
if (!$user->is_logged_in())
{
header("location: user_login.php");
exit;
}
// Auction id is present, now update table
if (isset($_GET['add']) && !empty($_GET['add']))
{
$add_id = intval($_GET['add']);
// Check if this item is not already added
$items = trim($user->user_data['item_watch']);
$match = strstr($items, $add_id);
if (!$match)
{
$item_watch = trim($items . ' ' . $add_id);
$item_watch_new = trim($item_watch);
$query = "UPDATE " . $DBPrefix . "users SET item_watch = '" . $item_watch_new . "' WHERE id = " . $user->user_data['id'];
$system->check_mysql(mysql_query($query), $query, __LINE__, __FILE__);
$user->user_data['item_watch'] = $item_watch_new;
}
}
// Delete item form item watch
if (isset($_GET['delete']) && !empty($_GET['delete']))
{
$items = trim($user->user_data['item_watch']);
$auc_id = preg_split('/ /', $items);
for ($j = 0; $j < count($auc_id); $j++)
{
$match = strstr($auc_id[$j], $_GET['delete']);
if ($match)
{
$item_watch = $item_watch;
}
else
{
$item_watch = $auc_id[$j] . ' ' . $item_watch;
}
}
$item_watch_new = trim($item_watch);
$query = "UPDATE " . $DBPrefix . "users SET item_watch = '" . $item_watch_new . "' WHERE id = " . $user->user_data['id'];
$system->check_mysql(mysql_query($query), $query, __LINE__, __FILE__);
$user->user_data['item_watch'] = $item_watch_new;
}
// Show results
$items = trim($user->user_data['item_watch']);
if ($items != '' && $items != null)
{
$item = preg_split('/ /', $items);
$itemids = '0';
$total = count($item);
for ($j = 0; $j < $total; $j++)
{
$itemids .= ',' . $item[$j];
}
$query = "SELECT * FROM " . $DBPrefix . "auctions WHERE id IN ($itemids)";
$result = mysql_query($query);
$system->check_mysql($result, $query, __LINE__, __FILE__);
if (mysql_num_rows($result) > 0)
{
browseItems($result, false, $total, 'item_watch.php');
}
}
include 'header.php';
$TMP_usmenutitle = $MSG['472'];
include $include_path . 'user_cp.php';
$template->set_filenames(array(
'body' => 'item_watch.tpl'
));
$template->display('body');
include 'footer.php';
?>