Exemplo n.º 1
0
function cs_pictures_upload($file, $mod, $fid, $ajaxclean = 1)
{
    if (!empty($_POST['del_picture'])) {
        cs_pictures_delete($_POST['del_picture']);
    }
    if (empty($file['tmp_name'])) {
        return true;
    }
    settype($fid, 'integer');
    $types_allowed = array('image/jpeg', 'image/png', 'image/pjpeg', 'image/x-png');
    if (!in_array($file['type'], $types_allowed)) {
        return false;
    }
    $exts = array('image/jpeg' => 'jpg', 'image/png' => 'png', 'image/pjpeg' => 'jpg', 'image/x-png' => 'png');
    $ext = $exts[$file['type']];
    $where = "pictures_fid = '" . $fid . "' AND pictures_mod = '" . $mod . "'";
    $already = cs_sql_select(__FILE__, 'pictures', 'pictures_id', $where);
    $pictures_id = $already['pictures_id'];
    if (empty($already)) {
        $vars = array();
        $vars['pictures_mod'] = $mod;
        $vars['pictures_fid'] = $fid;
        cs_sql_insert(__FILE__, 'pictures', array_keys($vars), array_values($vars));
        $pictures_id = cs_sql_insertid(__FILE__);
    }
    if (!cs_upload('pictures', 'picture-' . $pictures_id . '.' . $ext, $file['tmp_name'], $ajaxclean)) {
        cs_sql_delete(__FILE__, 'pictures', $pictures_id);
        return false;
    }
    $cells = array('pictures_file');
    $content = array('picture-' . $pictures_id . '.' . $ext);
    cs_sql_update(__FILE__, 'pictures', $cells, $content, $pictures_id);
    return true;
}
Exemplo n.º 2
0
<?php

// ClanSphere 2010 - www.clansphere.net
// $Id$
$cs_lang = cs_translate('articles');
$cs_get = cs_get('id');
$cs_post = cs_post('id');
$articles_id = empty($cs_get['id']) ? $cs_post['id'] : $cs_get['id'];
if (isset($cs_post['agree'])) {
    cs_sql_delete(__FILE__, 'articles', $articles_id);
    $query = "DELETE FROM {pre}_comments WHERE comments_mod='articles' AND ";
    $query .= "comments_fid='" . $articles_id . "'";
    cs_sql_query(__FILE__, $query);
    require_once 'mods/pictures/functions.php';
    cs_pictures_delete($articles_id, 'articles');
    cs_redirect($cs_lang['del_true'], 'articles');
}
if (isset($cs_post['cancel'])) {
    cs_redirect($cs_lang['del_false'], 'articles');
}
$article = cs_sql_select(__FILE__, 'articles', 'articles_headline', 'articles_id = ' . $articles_id, 0, 0, 1);
if (!empty($article)) {
    $data['head']['body'] = sprintf($cs_lang['remove_entry'], $cs_lang['mod_name'], $article['articles_headline']);
    $data['articles']['id'] = $articles_id;
    echo cs_subtemplate(__FILE__, $data, 'articles', 'remove');
} else {
    cs_redirect('', 'articles');
}