Exemplo n.º 1
0
 function display()
 {
     global $conn, $config, $lang;
     require_once $config['basepath'] . '/include/misc.inc.php';
     $misc = new misc();
     // Make Sure we passed the PageID
     $display = '';
     if (!isset($_GET['PageID'])) {
         $display .= "ERROR. PageID not sent";
     }
     $page_id = $misc->make_db_safe($_GET['PageID']);
     $display .= '<div class="page_display">';
     $sql = "SELECT pagesmain_full,pagesmain_id FROM " . $config['table_prefix'] . "pagesmain WHERE pagesmain_id=" . $page_id;
     $recordSet = $conn->Execute($sql);
     if ($recordSet === false) {
         $misc->log_error($sql);
     }
     $full = html_entity_decode($misc->make_db_unsafe($recordSet->fields['pagesmain_full']), ENT_NOQUOTES, $config['charset']);
     //$full = $misc->make_db_unsafe($recordSet->fields['pagesmain_full']);
     $id = $recordSet->fields['pagesmain_id'];
     if ($config["wysiwyg_execute_php"] == 1) {
         ob_start();
         $full = str_replace("<!--<?php", "<?php", $full);
         $full = str_replace("?>-->", "?>", $full);
         eval('?>' . "{$full}" . '<?php ');
         $display .= ob_get_contents();
         ob_end_clean();
     } else {
         $display .= $full;
     }
     // Allow Admin To Edit #
     if (isset($_SESSION['editpages']) && $_SESSION['admin_privs'] == 'yes' && $config["wysiwyg_show_edit"] == 1) {
         $display .= "<p>&nbsp;</p>";
         $display .= "<a href=\"{$config['baseurl']}/admin/index.php?action=edit_page&amp;id={$id}\">{$lang['edit_html_from_site']}</a>";
     }
     $display .= '</div>';
     // parse page for template varibales
     require_once $config['basepath'] . '/include/class/template/core.inc.php';
     $template = new page_user();
     $template->page = $display;
     $template->replace_tags(array('templated_search_form', 'featured_listings_horizontal', 'featured_listings_vertical', 'company_name', 'link_printer_friendly'));
     $display = $template->return_page();
     return $display;
 }
Exemplo n.º 2
0
 function create_searchpage($template_tag = false, $no_results = false)
 {
     global $config, $lang, $conn;
     require_once $config['basepath'] . '/include/misc.inc.php';
     $misc = new misc();
     // Determine if we are searching for a particular property class
     $class_sql = '';
     if (!isset($_GET['pclass'])) {
         $_GET['pclass'] = '';
     }
     if (is_array($_GET['pclass'])) {
         foreach ($_GET['pclass'] as $c => $class) {
             // Ignore non numberic values
             if (is_numeric($class)) {
                 if (!empty($class_sql)) {
                     $class_sql .= ' OR ';
                 }
                 $class_sql .= $config['table_prefix_no_lang'] . "classformelements.class_id = {$class}";
             } else {
                 unset($_GET['pclass'][$c]);
             }
         }
     }
     // Determine users login status.
     $display_status = false;
     $display_priv = 'listingsformelements_display_priv = 0';
     $display_status = login::loginCheck('Member', true);
     if ($display_status == true) {
         $display_priv = '(listingsformelements_display_priv = 0 OR listingsformelements_display_priv = 1)';
     }
     $display_status = login::loginCheck('Agent', true);
     if ($display_status == true) {
         $display_priv = '(listingsformelements_display_priv = 0 OR listingsformelements_display_priv = 1 OR listingsformelements_display_priv = 2)';
     }
     // Get all searchable fields and display them
     if (empty($class_sql)) {
         $sql = "SELECT listingsformelements_id, listingsformelements_search_label, listingsformelements_search_type, listingsformelements_field_name FROM " . $config['table_prefix'] . "listingsformelements WHERE  listingsformelements_searchable = 1 AND {$display_priv} ORDER BY listingsformelements_search_rank";
     } else {
         $sql = "SELECT DISTINCT(" . $config['table_prefix'] . "listingsformelements.listingsformelements_id), listingsformelements_search_label, listingsformelements_search_type, listingsformelements_field_name, listingsformelements_search_rank FROM " . $config['table_prefix'] . "listingsformelements, " . $config['table_prefix_no_lang'] . "classformelements WHERE " . $config['table_prefix'] . "listingsformelements.listingsformelements_id = " . $config['table_prefix_no_lang'] . "classformelements.listingsformelements_id AND ({$class_sql}) AND listingsformelements_searchable = 1 AND {$display_priv} ORDER BY listingsformelements_search_rank";
     }
     $rs = $conn->Execute($sql);
     if (!$rs) {
         $misc->log_error($sql);
     }
     $field_data = '';
     while (!$rs->EOF) {
         // Check for Translations if needed
         if (!isset($_SESSION["users_lang"])) {
             $search_label = $misc->make_db_unsafe($rs->fields['listingsformelements_search_label']);
         } else {
             $listingsformelements_id = $rs->fields['listingsformelements_id'];
             $lang_sql = "SELECT listingsformelements_search_label FROM " . $config['lang_table_prefix'] . "listingsformelements WHERE listingsformelements_id = {$listingsformelements_id}";
             $lang_recordSet = $conn->Execute($lang_sql);
             if (!$lang_recordSet) {
                 $misc->log_error($lang_sql);
             }
             $search_label = $misc->make_db_unsafe($lang_recordSet->fields['listingsformelements_search_label']);
         }
         $search_type = $misc->make_db_unsafe($rs->fields['listingsformelements_search_type']);
         $field_name = $misc->make_db_unsafe($rs->fields['listingsformelements_field_name']);
         $field_data .= search_page::searchbox_render($search_label, $field_name, $_GET['pclass'], $search_type);
         $rs->MoveNext();
     }
     require_once $config['basepath'] . '/include/class/template/core.inc.php';
     $page = new page_user();
     if (is_array($_GET['pclass'])) {
         $class = $_GET['pclass'][0];
         if (file_exists($config['template_path'] . '/search_page_class_' . $class . '.html')) {
             $page->load_page($config['template_path'] . '/search_page_class_' . $class . '.html');
         } else {
             $page->load_page($config['template_path'] . '/search_page_default.html');
         }
     } else {
         $page->load_page($config['template_path'] . '/search_page_default.html');
     }
     if ($template_tag == true) {
         $page->page = $page->get_template_section('templated_search_form');
     } else {
         $page->page = str_replace('{templated_search_form}', '', $page->page);
         $page->page = str_replace('{/templated_search_form}', '', $page->page);
     }
     $class_inputs = '';
     if (is_array($_GET['pclass'])) {
         foreach ($_GET['pclass'] as $class) {
             $class_inputs .= '<input type="hidden" name="pclass[]" value="' . $class . '" />';
         }
     }
     if ($class_inputs == '') {
         $class_inputs .= '<input type="hidden" name="pclass[]" value="" />';
     }
     $page->page = str_replace('{search_type}', $class_inputs, $page->page);
     $page->replace_tags(array('featured_listings_horizontal', 'featured_listings_vertical'));
     $page->page = $page->parse_template_section($page->page, 'browse_all_listings', search_page::browse_all_listings_link());
     $page->page = $page->parse_template_section($page->page, 'browse_all_listings_pclass', search_page::browse_all_listings_pclass_link());
     $page->page = $page->parse_template_section($page->page, 'search_fields', $field_data);
     $page->page = $page->parse_template_section($page->page, 'agent_searchbox', search_page::searchbox_agentdropdown());
     $page->page = $page->parse_template_section($page->page, 'lat_long_dist_search', search_page::searchbox_latlongdist());
     $page->page = $page->parse_template_section($page->page, 'postalcode_dist_search', search_page::searchbox_postaldist());
     $page->page = $page->parse_template_section($page->page, 'city_dist_search', search_page::searchbox_citydist());
     $ImagesOnlySet = '';
     if (isset($_GET['imagesOnly']) && $_GET['imagesOnly'] == 'yes') {
         $ImagesOnlySet = 'checked="checked"';
     }
     $page->page = $page->parse_template_section($page->page, 'show_only_with_images', '<input type="checkbox" name="imagesOnly" ' . $ImagesOnlySet . ' value="yes" />');
     $VtourOnlySet = '';
     if (isset($_GET['vtoursOnly']) && $_GET['vtoursOnly'] == 'yes') {
         $VtourOnlySet = 'checked="checked"';
     }
     $page->page = $page->parse_template_section($page->page, 'show_only_with_vtours', '<input type="checkbox" name="vtoursOnly" ' . $VtourOnlySet . ' value="yes" />');
     if (isset($_GET['searchtext']) && $_GET['searchtext'] != '') {
         $page->page = $page->parse_template_section($page->page, 'full_text_search', '<input type="text" name="searchtext" value="' . $_GET['searchtext'] . '" />');
     } else {
         $page->page = $page->parse_template_section($page->page, 'full_text_search', '<input type="text" name="searchtext" />');
     }
     if ($no_results == false) {
         $page->replace_template_section('no_search_results_block', '');
     } else {
         $page->page = $page->cleanup_template_block('no_search_results', $page->page);
         // Generate a Saved search link
         $guidestring_no_action = '';
         foreach ($_GET as $k => $v) {
             if ($v != '' && $k != 'cur_page' && $k != 'PHPSESSID' && $k != 'action' && $k != 'printer_friendly' && $k != 'template') {
                 if (is_array($v)) {
                     foreach ($v as $vitem) {
                         $guidestring_no_action .= '&amp;' . urlencode("{$k}") . '[]=' . urlencode("{$vitem}");
                     }
                 } else {
                     $guidestring_no_action .= '&amp;' . urlencode("{$k}") . '=' . urlencode("{$v}");
                 }
             }
         }
         $save_search_link = 'index.php?action=save_search' . $guidestring_no_action;
         $page->page = $page->parse_template_section($page->page, 'save_search_link', $save_search_link);
     }
     return $page->page;
 }
 function edit_listings($only_my_listings = true)
 {
     global $conn, $lang, $config, $listingID;
     if ($only_my_listings == false) {
         $security = login::loginCheck('edit_all_listings', true);
     } else {
         $security = login::loginCheck('Agent', true);
     }
     $display = '';
     if ($security === true) {
         require_once $config['basepath'] . '/include/misc.inc.php';
         $misc = new misc();
         require_once $config['basepath'] . '/include/forms.inc.php';
         $forms = new forms();
         require_once $config['basepath'] . '/include/class/template/core.inc.php';
         $page = new page_user();
         // $display .= '<span class="section_header">'.$lang['listings_editor'].'<span><br /><br />';
         if (!isset($_GET['delete'])) {
             $_GET['delete'] = '';
         }
         if ($_GET['delete'] != '') {
             if ($_SESSION['admin_privs'] == 'yes' || $_SESSION['edit_all_listings'] == 'yes') {
                 listing_editor::delete_listing($_GET['delete'], false);
             } else {
                 listing_editor::delete_listing($_GET['delete'], true);
             }
         }
         if (!isset($_POST['action'])) {
             $_POST['action'] = '';
         }
         if ($_POST['action'] == "update_listing") {
             if ($_SESSION['admin_privs'] == 'yes' || $_SESSION['edit_all_listings'] == 'yes') {
                 $display .= listing_editor::update_listing(false);
             } else {
                 $display .= listing_editor::update_listing(true);
             }
         }
         // end if $action == "update listing"
         if (!isset($_GET['edit'])) {
             $_GET['edit'] = '';
         }
         if (isset($_POST['lookup_field']) && isset($_POST['lookup_value'])) {
             $_SESSION['edit_listing_qeb_lookup_field'] = $_POST['lookup_field'];
             $_SESSION['edit_listing_qeb_lookup_value'] = $_POST['lookup_value'];
         }
         if (isset($_SESSION['edit_listing_qeb_lookup_field']) && isset($_SESSION['edit_listing_qeb_lookup_value'])) {
             if ($_SESSION['edit_listing_qeb_lookup_field'] != 'listingsdb_id') {
                 $_POST['lookup_field'] = $_SESSION['edit_listing_qeb_lookup_field'];
                 $_POST['lookup_value'] = $_SESSION['edit_listing_qeb_lookup_value'];
             }
         }
         if (isset($_POST['filter'])) {
             $_SESSION['edit_listing_qeb_filter'] = $_POST['filter'];
         }
         if (isset($_SESSION['edit_listing_qeb_filter'])) {
             $_POST['filter'] = $_SESSION['edit_listing_qeb_filter'];
         }
         if (isset($_POST['agent_filter'])) {
             $_SESSION['edit_listing_qeb_agent_filter'] = $_POST['agent_filter'];
         }
         if (isset($_SESSION['edit_listing_qeb_agent_filter'])) {
             $_POST['agent_filter'] = $_SESSION['edit_listing_qeb_agent_filter'];
         }
         if (isset($_POST['pclass_filter'])) {
             $_SESSION['edit_listing_qeb_pclass_filter'] = $_POST['pclass_filter'];
         }
         if (isset($_SESSION['edit_listing_qeb_pclass_filter'])) {
             $_POST['pclass_filter'] = $_SESSION['edit_listing_qeb_pclass_filter'];
         }
         if (isset($_POST['lookup_field']) && isset($_POST['lookup_value']) && $_POST['lookup_field'] == 'listingsdb_id' && $_POST['lookup_value'] != '') {
             $_GET['edit'] = intval($_POST['lookup_value']);
         }
         if ($only_my_listings == TRUE) {
             unset($_POST['agent_filter']);
         }
         if ($_GET['edit'] != "") {
             $edit = intval($_GET['edit']);
             // first, grab the listings's main info
             if ($only_my_listings == true) {
                 $sql = "SELECT listingsdb_id, listingsdb_title, listingsdb_notes, userdb_id, listingsdb_last_modified, listingsdb_featured, listingsdb_active, listingsdb_mlsexport, listingsdb_expiration FROM " . $config['table_prefix'] . "listingsdb WHERE (listingsdb_id = {$edit}) AND (userdb_id = '{$_SESSION['userID']}')";
             } else {
                 $sql = "SELECT listingsdb_id, listingsdb_title, listingsdb_notes, userdb_id, listingsdb_last_modified, listingsdb_featured, listingsdb_active, listingsdb_mlsexport, listingsdb_expiration FROM " . $config['table_prefix'] . "listingsdb WHERE (listingsdb_id = {$edit})";
             }
             $ADODB_FETCH_MODE = ADODB_FETCH_ASSOC;
             $recordSet = $conn->Execute($sql);
             if ($recordSet === false) {
                 $misc->log_error($sql);
             }
             if ($recordSet->RecordCount() > 0) {
                 // collect up the main DB's various fields
                 $listing_ID = $misc->make_db_unsafe($recordSet->fields['listingsdb_id']);
                 $edit_title = $misc->make_db_unsafe($recordSet->fields['listingsdb_title']);
                 $edit_notes = $misc->make_db_unsafe($recordSet->fields['listingsdb_notes']);
                 $edit_mlsexport = $misc->make_db_unsafe($recordSet->fields['listingsdb_mlsexport']);
                 $edit_or_owner = $recordSet->fields['userdb_id'];
                 $last_modified = $recordSet->UserTimeStamp($recordSet->fields['listingsdb_last_modified'], 'D M j G:i:s T Y');
                 $edit_featured = $recordSet->fields['listingsdb_featured'];
                 $edit_active = $recordSet->fields['listingsdb_active'];
                 $expiration = $recordSet->UserTimeStamp($recordSet->fields['listingsdb_expiration'], $config["date_format_timestamp"]);
                 // now, display all that stuff
                 $display .= '<table class="form_main">';
                 $display .= '<tr>';
                 $display .= '<td colspan="3" class="row_main">';
                 if ($only_my_listings == true) {
                     $display .= '<span class="section_header"><a href="index.php?action=edit_my_listings">' . $lang['listings_editor'] . '</a></span><br />';
                 } else {
                     $display .= '<span class="section_header"><a href="index.php?action=edit_listings">' . $lang['listings_editor'] . '</a></span><br />';
                 }
                 $display .= '<h3>' . $lang['admin_listings_editor_modify_listing'] . ' (<a href="' . $config['baseurl'] . '/index.php?action=listingview&amp;listingID=' . $listing_ID . '" target="_preview">' . $lang['preview'] . '</a>)</h3>';
                 $display .= '</td>';
                 $display .= '</tr>';
                 $display .= '<tr>';
                 $display .= '<td valign="top" align="center" class="row_main">';
                 $display .= '<b>' . $lang['images'] . '</b>';
                 $display .= '<br />';
                 $display .= '<hr width="75%" />';
                 $display .= '<form action="index.php?action=edit_listing_images" method="post" name="edit_listing_images"><input type="hidden" name="edit" value="' . $_GET['edit'] . '" /><a href="javascript:document.edit_listing_images.submit()">' . $lang['edit_images'] . '</a></form>';
                 $display .= '<br />';
                 $sql = "SELECT listingsimages_caption, listingsimages_file_name, listingsimages_thumb_file_name FROM " . $config['table_prefix'] . "listingsimages WHERE (listingsdb_id = {$edit}) ORDER BY listingsimages_rank";
                 $recordSet = $conn->Execute($sql);
                 if ($recordSet === false) {
                     $misc->log_error($sql);
                 }
                 while (!$recordSet->EOF) {
                     $caption = $misc->make_db_unsafe($recordSet->fields['listingsimages_caption']);
                     $thumb_file_name = $misc->make_db_unsafe($recordSet->fields['listingsimages_thumb_file_name']);
                     $file_name = $misc->make_db_unsafe($recordSet->fields['listingsimages_file_name']);
                     // gotta grab the image size
                     $thumb_imagedata = GetImageSize("{$config['listings_upload_path']}/{$thumb_file_name}");
                     $thumb_imagewidth = $thumb_imagedata[0];
                     $thumb_imageheight = $thumb_imagedata[1];
                     $thumb_max_width = $config['thumbnail_width'];
                     $thumb_max_height = $config['thumbnail_height'];
                     $resize_by = $config['resize_thumb_by'];
                     $shrinkage = 1;
                     if ($thumb_max_width == $thumb_imagewidth || $thumb_max_height == $thumb_imageheight) {
                         $thumb_displaywidth = $thumb_imagewidth;
                         $thumb_displayheight = $thumb_imageheight;
                     } else {
                         if ($resize_by == 'width') {
                             $shrinkage = $thumb_imagewidth / $thumb_max_width;
                             $thumb_displaywidth = $thumb_max_width;
                             $thumb_displayheight = round($thumb_imageheight / $shrinkage);
                         } elseif ($resize_by == 'height') {
                             $shrinkage = $thumb_imageheight / $thumb_max_height;
                             $thumb_displayheight = $thumb_max_height;
                             $thumb_displaywidth = round($thumb_imagewidth / $shrinkage);
                         } elseif ($resize_by == 'both') {
                             $thumb_displayheight = $thumb_max_height;
                             $thumb_displaywidth = $thumb_max_width;
                         }
                     }
                     $display .= "<a href=\"{$config['listings_view_images_path']}/{$file_name}\" target=\"_thumb\"> ";
                     $display .= "<img src=\"{$config['listings_view_images_path']}/{$thumb_file_name}\" height=\"{$thumb_displayheight}\" width=\"{$thumb_displaywidth}\" alt=\"{$thumb_file_name}\" /></a><br /> ";
                     $display .= "<b>{$caption}</b><br /><br />";
                     $recordSet->MoveNext();
                 }
                 // end while
                 $display .= '</td>';
                 if ($_SESSION['admin_privs'] == "yes" || $_SESSION['havevtours'] == "yes") {
                     $display .= '<td valign="top" align="center" class="row_main">';
                     $display .= '<b>' . $lang['vtours'] . '</b>';
                     $display .= '<br />';
                     $display .= '<hr width="75%" />';
                     $display .= '<form action="index.php?action=edit_vtour_images" method="post" name="edit_vtour_images"><input type="hidden" name="edit" value="' . $edit . '" /><a href="javascript:document.edit_vtour_images.submit()">' . $lang['edit_vtours'] . '</a></form>';
                     $display .= '<br />';
                     $sql = "SELECT vtourimages_caption, vtourimages_file_name, vtourimages_thumb_file_name FROM " . $config['table_prefix'] . "vtourimages WHERE (listingsdb_id = '{$edit}') ORDER BY  vtourimages_rank";
                     $recordSet = $conn->Execute($sql);
                     if ($recordSet === false) {
                         $misc->log_error($sql);
                     }
                     while (!$recordSet->EOF) {
                         $caption = $misc->make_db_unsafe($recordSet->fields['vtourimages_caption']);
                         $thumb_file_name = $misc->make_db_unsafe($recordSet->fields['vtourimages_thumb_file_name']);
                         $file_name = $misc->make_db_unsafe($recordSet->fields['vtourimages_file_name']);
                         $ext = substr(strrchr($file_name, '.'), 1);
                         if ($ext == 'jpg') {
                             // gotta grab the image size
                             $imagedata = GetImageSize("{$config['vtour_upload_path']}/{$thumb_file_name}");
                             $imagewidth = $imagedata[0];
                             $imageheight = $imagedata[1];
                             $shrinkage = $config['thumbnail_width'] / $imagewidth;
                             $displaywidth = $imagewidth * $shrinkage;
                             $displayheight = $imageheight * $shrinkage;
                             $display .= "<a href=\"{$config['vtour_view_images_path']}/{$file_name}\" target=\"_thumb\">";
                             $display .= "<img src=\"{$config['vtour_view_images_path']}/{$thumb_file_name}\" height=\"{$displayheight}\" width=\"{$displaywidth}\" alt=\"{$thumb_file_name}\" /></a><br /> ";
                             $display .= "<strong>{$caption}</strong><br /><br />";
                             $recordSet->MoveNext();
                         } elseif ($ext == 'egg') {
                             $display .= "<img src=\"{$config['baseurl']}/images/eggimage.gif\" alt=\"eggimage.gif\" /><br /> ";
                             $recordSet->MoveNext();
                         } else {
                             $display .= $file_name . '<br />' . $lang['unsupported_vtour'] . '<br /><br />';
                             $recordSet->MoveNext();
                         }
                     }
                     // end while
                     if ($_SESSION['admin_privs'] == "yes" || $_SESSION['havefiles'] == "yes") {
                         $display .= '<br />';
                     } else {
                         $display .= '</td>';
                     }
                 }
                 // Place the Files list and edit files link on the edit listing page if we are allowed to have files.
                 if ($_SESSION['admin_privs'] == "yes" || $_SESSION['havefiles'] == "yes") {
                     if ($_SESSION['admin_privs'] == "yes" || $_SESSION['havevtours'] == "yes") {
                         $display .= '<br />';
                     } else {
                         $display .= '<td valign="top" align="center" class="row_main">';
                     }
                     $display .= '<b>' . $lang['files'] . '</b>';
                     $display .= '<br />';
                     $display .= '<hr width="75%" />';
                     $display .= '<form action="index.php?action=edit_listing_files" method="post" name="edit_listing_files"><input type="hidden" name="edit" value="' . $_GET['edit'] . '" /><a href="javascript:document.edit_listing_files.submit()">' . $lang['edit_files'] . '</a></form>';
                     $display .= '<br />';
                     $sql = "SELECT listingsfiles_id, listingsfiles_caption, listingsfiles_file_name FROM " . $config['table_prefix'] . "listingsfiles WHERE (listingsdb_id = '{$_GET['edit']}')";
                     $recordSet = $conn->Execute($sql);
                     if ($recordSet === false) {
                         $misc->log_error($sql);
                     }
                     while (!$recordSet->EOF) {
                         $caption = $misc->make_db_unsafe($recordSet->fields['listingsfiles_caption']);
                         $file_name = $misc->make_db_unsafe($recordSet->fields['listingsfiles_file_name']);
                         $file_id = $misc->make_db_unsafe($recordSet->fields['listingsfiles_id']);
                         $iconext = substr(strrchr($file_name, '.'), 1);
                         $iconpath = $config["file_icons_path"] . '/' . $iconext . '.png';
                         if (file_exists($iconpath)) {
                             $icon = $config["listings_view_file_icons_path"] . '/' . $iconext . '.png';
                         } else {
                             $icon = $config["listings_view_file_icons_path"] . '/default.png';
                         }
                         $file_download_url = 'index.php?action=create_download&amp;ID=' . $edit . '&amp;file_id=' . $file_id . '&amp;type=listing';
                         $display .= '<a href="' . $config['baseurl'] . '/' . $file_download_url . '" target="_thumb">';
                         $display .= '<img src="' . $icon . '" height="' . $config["file_icon_height"] . '" width="' . $config["file_icon_width"] . '" alt="' . $file_name . '" /><br />';
                         $display .= '<strong>' . $file_name . '</strong></a><br />';
                         $display .= '<strong>' . $caption . '</strong><br /><br />';
                         $recordSet->MoveNext();
                     }
                     // end while
                     $display .= '</td>';
                 }
                 $display .= '<td class="row_main">';
                 //START FORM VALIDATION
                 if (isset($_POST['property_class'])) {
                     $class_sql = '';
                     foreach ($_POST['property_class'] as $class_id) {
                         if (empty($class_sql)) {
                             $class_sql .= ' class_id = ' . $class_id;
                         } else {
                             $class_sql .= ' OR class_id = ' . $class_id;
                         }
                         $display .= '<input type="hidden" name="property_class[]" value="' . $class_id . '" />';
                     }
                     $pclass_list = '';
                     $sql = "SELECT DISTINCT(listingsformelements_id) FROM  " . $config['table_prefix_no_lang'] . "classformelements WHERE " . $class_sql;
                     $recordSet = $conn->execute($sql);
                     if ($recordSet === false) {
                         $misc->log_error($sql);
                     }
                     while (!$recordSet->EOF) {
                         if (empty($pclass_list)) {
                             $pclass_list .= $recordSet->fields['listingsformelements_id'];
                         } else {
                             $pclass_list .= ',' . $recordSet->fields['listingsformelements_id'];
                         }
                         $recordSet->Movenext();
                     }
                     if ($pclass_list == '') {
                         $pclass_list = 0;
                     }
                     $sql = "SELECT listingsformelements_field_type, listingsformelements_field_name, listingsformelements_field_caption, listingsformelements_default_text, listingsformelements_field_elements, listingsformelements_required from " . $config['table_prefix'] . "listingsformelements WHERE listingsformelements_id IN (" . $pclass_list . ") ORDER BY listingsformelements_rank, listingsformelements_field_name";
                 } else {
                     $sql = "SELECT listingsformelements_field_type, listingsformelements_field_name, listingsformelements_field_caption, listingsformelements_default_text, listingsformelements_field_elements, listingsformelements_required from " . $config['table_prefix'] . "listingsformelements ORDER BY listingsformelements_rank, listingsformelements_field_name";
                 }
                 $recordSet = $conn->Execute($sql);
                 if ($recordSet === false) {
                     $misc->log_error($sql);
                 }
                 $display .= "\r\n<script type=\"text/javascript\" >\r\n";
                 $display .= "<!--\r\n";
                 $display .= "function validate_form()\r\n";
                 $display .= "{\r\n";
                 $display .= "var msg=\"\"\r\n";
                 $display .= "valid = true;\r\n";
                 $display .= "if ( document.update_listing.title.value == \"\" )\r\n";
                 $display .= "{\r\n";
                 $display .= "msg += '{$lang['forgot_field']} {$lang['admin_listings_editor_title']} {$lang['admin_template_editor_field']}.\\r\\n';\r\n";
                 $display .= "valid = false;\r\n";
                 $display .= "}\r\n";
                 while (!$recordSet->EOF) {
                     $field_name = $recordSet->fields['listingsformelements_field_name'];
                     $field_caption = $recordSet->fields['listingsformelements_field_caption'];
                     $required = $recordSet->fields['listingsformelements_required'];
                     if ($required == 'Yes') {
                         $display .= "if ( document.update_listing.{$field_name}.value == \"\" )\r\n";
                         $display .= "{\r\n";
                         $display .= "msg += '" . html_entity_decode($lang[forgot_field]) . " {$field_caption} " . html_entity_decode($lang[admin_template_editor_field]) . ".\\r\\n';\r\n";
                         $display .= "valid = false;\r\n";
                         $display .= "}\r\n";
                     }
                     $recordSet->MoveNext();
                 }
                 $display .= "if (msg != \"\")\r\n";
                 $display .= "{\r\n";
                 $display .= "alert (msg);";
                 $display .= "}\r\n";
                 $display .= "return valid;\r\n";
                 $display .= "}\r\n";
                 $display .= "//-->\r\n";
                 $display .= "</script>\r\n";
                 //END FORM VALIDATION
                 $display .= '<table>';
                 if ($only_my_listings == true) {
                     $display .= '<form name="update_listing" action="index.php?action=edit_my_listings&amp;edit=' . $_GET['edit'] . '" method="post" onsubmit="return validate_form ( );">';
                 } else {
                     $display .= '<form name="update_listing" action="index.php?action=edit_listings&amp;edit=' . $_GET['edit'] . '" method="post" onsubmit="return validate_form ( );">';
                 }
                 $display .= '<input type="hidden" name="action" value="update_listing">';
                 $display .= '<input type="hidden" name="edit" value="' . $_GET['edit'] . '">';
                 $display .= '<tr>';
                 $display .= '<td align="right"><b>' . $lang['admin_listings_editor_title'] . ': <font color="red">*</font></b></td>';
                 $display .= '<td align="left"> <input type="text" name="title" value="' . $edit_title . '"></td></tr>';
                 // Display Property Classes
                 $sql2 = 'SELECT class_id FROM ' . $config['table_prefix_no_lang'] . 'classlistingsdb WHERE listingsdb_id =' . $listing_ID;
                 $recordSet2 = $conn->execute($sql2);
                 if ($recordSet2 === false) {
                     $misc->log_error($sql2);
                 }
                 $selected_class_id = array();
                 while (!$recordSet2->EOF) {
                     $selected_class_id[] = $recordSet2->fields['class_id'];
                     $recordSet2->MoveNext();
                 }
                 $sql2 = 'SELECT class_id,class_name FROM ' . $config['table_prefix'] . 'class';
                 $recordSet2 = $conn->execute($sql2);
                 if ($recordSet2 === false) {
                     $misc->log_error($sql2);
                 }
                 $display .= '<tr><td align="right"><b>' . $lang['admin_listings_editor_property_class'] . '</b></td><td align="left">';
                 $display .= '<select name="pclass[]"';
                 if ($config["multiple_pclass_selection"] == '1') {
                     $display .= ' multiple="multiple" size="5"';
                 }
                 $display .= '>';
                 while (!$recordSet2->EOF) {
                     $class_id = $recordSet2->fields['class_id'];
                     $class_name = $misc->make_db_unsafe($recordSet2->fields['class_name']);
                     if (in_array($class_id, $selected_class_id, true)) {
                         $display .= '<option value="' . $class_id . '" selected="selected">' . $class_name . '</option>';
                     } else {
                         $display .= '<option value="' . $class_id . '">' . $class_name . '</option>';
                     }
                     $recordSet2->MoveNext();
                 }
                 $display .= '</select></td></tr>';
                 // End property Class Display
                 if ($_SESSION['featureListings'] == "yes" || $_SESSION['admin_privs'] == "yes") {
                     $display .= '<tr><td align="right"><b>' . $lang['admin_listings_editor_featured'] . ':</b></td><td align="left">';
                     $display .= '<select name="featured" size="1">';
                     $display .= '<option value="' . $edit_featured . '">' . $lang['' . $edit_featured . ''] . '</option>';
                     $display .= '<option value="">-----</option>';
                     $display .= '<option value="yes">' . $lang['yes'] . '</option>';
                     $display .= '<option value="no">' . $lang['no'] . '</option>';
                     $display .= '</select></td></tr>';
                 }
                 // end if ($featureListings == "yes")
                 if ($_SESSION['admin_privs'] == "yes" || $_SESSION['moderator'] == 'yes') {
                     $display .= '<tr><td align="right"><b>' . $lang['admin_listings_active'] . ':</b></td><td align="left">';
                     $display .= '<select name="edit_active" size="1">';
                     $display .= '<option value="' . $edit_active . '">' . $lang['' . $edit_active . ''] . '</option>';
                     $display .= '<option value="">-----</option>';
                     $display .= '<option value="yes">' . $lang['yes'] . '</option>';
                     $display .= '<option value="no">' . $lang['no'] . '</option>';
                     $display .= '</select></td></tr>';
                     if ($config['moderate_listings'] == 1 && $edit_active == 'no') {
                         $display .= '<tr><td align="right"><b>' . $lang['admin_send_notices'] . ':</b></td><td align="left">';
                         $display .= '<select name="send_notices" size="1">';
                         $display .= '<option value="no">' . $lang['no'] . '</option>';
                         $display .= '<option value="yes">' . $lang['yes'] . '</option>';
                         $display .= '</select>';
                         $display .= ' <a href="#" class="tooltip"><img src="images/info.gif" width="16" height="16" /><span>' . $lang['send_notices_tool_tip'] . '</span></a>';
                         $display .= '</td></tr>';
                     }
                 }
                 // end if ($featureListings == "yes")
                 if (($_SESSION['admin_privs'] == "yes" || $_SESSION['edit_expiration'] == "yes") && $config['use_expiration'] == "1") {
                     $display .= '<tr><td align="right" class="row_main"><b>' . $lang['expiration'] . ':</b></td><td align="left"><input type="text" name="edit_expiration" value="' . $expiration . '" onFocus="javascript:vDateType=\'' . $config['date_format'] . '\'" onKeyUp="DateFormat(this,this.value,event,false,\'' . $config['date_format'] . '\')" onBlur="DateFormat(this,this.value,event,true,\'' . $config['date_format'] . '\')" />(' . $config['date_format_long'] . ')</td></tr>';
                 }
                 // end if ($admin_privs == "yes" and $config[use_expiration] = "yes")
                 if ($config["export_listings"] == 1 && $_SESSION['export_listings'] == "yes") {
                     $display .= '<tr><td align="right"><strong>' . $lang['admin_listings_editor_mlsexport'] . ':</strong></td><td align="left">';
                     $display .= '<select name="mlsexport" size="1">';
                     $display .= '<option value="' . $edit_mlsexport . '">' . $lang['' . $edit_mlsexport . ''] . '</option>';
                     $display .= '<option value="">-----</option>';
                     $display .= '<option value="yes">' . $lang['yes'] . '</option>';
                     $display .= '<option value="no">' . $lang['no'] . '</option>';
                     $display .= '</select>';
                     $display .= '</td></tr>';
                 } else {
                     $display .= '<input type="hidden" name="mlsexport" value="no" />';
                 }
                 // Display Agent selection Option to reassign listing
                 if ($_SESSION['admin_privs'] == "yes" || $_SESSION['edit_all_listings'] == "yes") {
                     $display .= '<tr><td align="right"><b>' . $lang['listing_editor_listing_agent'] . ':</b></td>';
                     $display .= '<td align="left" class="row_main"><select name="or_owner" size="1">';
                     // find the name of the agent listed as ID in $edit_or_owner
                     $sql = "SELECT userdb_user_first_name, userdb_user_last_name FROM " . $config['table_prefix'] . "userdb WHERE (userdb_id = {$edit_or_owner})";
                     $ADODB_FETCH_MODE = ADODB_FETCH_ASSOC;
                     $recordSet = $conn->Execute($sql);
                     if ($recordSet === false) {
                         $misc->log_error($sql);
                     }
                     // strip slashes so input appears correctly
                     $agent_first_name = $misc->make_db_unsafe($recordSet->fields['userdb_user_first_name']);
                     $agent_last_name = $misc->make_db_unsafe($recordSet->fields['userdb_user_last_name']);
                     $display .= "<option value=\"{$edit_or_owner}\">{$agent_last_name},{$agent_first_name}</option>";
                     // fill list with names of all agents
                     $sql = "SELECT userdb_id, userdb_user_first_name, userdb_user_last_name FROM " . $config['table_prefix'] . "userdb where userdb_is_agent = 'yes' or userdb_is_admin = 'yes' ORDER BY userdb_user_last_name,userdb_user_first_name";
                     $ADODB_FETCH_MODE = ADODB_FETCH_ASSOC;
                     $recordSet = $conn->Execute($sql);
                     if ($recordSet === false) {
                         $misc->log_error($sql);
                     }
                     while (!$recordSet->EOF) {
                         // strip slashes so input appears correctly
                         $agent_ID = $recordSet->fields['userdb_id'];
                         $agent_first_name = $misc->make_db_unsafe($recordSet->fields['userdb_user_first_name']);
                         $agent_last_name = $misc->make_db_unsafe($recordSet->fields['userdb_user_last_name']);
                         $display .= "<option value=\"{$agent_ID}\">{$agent_last_name},{$agent_first_name}</option>";
                         $recordSet->MoveNext();
                     }
                     $display .= "</select></td>";
                     $display .= '</tr>';
                 } else {
                     $display .= '<input type="hidden" name="or_owner" value="' . $edit_or_owner . '" />';
                 }
                 // Show Notes Field
                 if ($config["show_notes_field"] == 1) {
                     $display .= '<tr><td align="right"><b>' . $lang['admin_listings_editor_notes'] . ':</b><br /><div class="small">(' . $lang['admin_listings_editor_notes_note'] . ')</div></td><td align="left"> <textarea name="notes" rows="6" cols="40">' . $edit_notes . '</textarea></td></tr>';
                 } else {
                     $display .= '<input type="hidden" name="notes" value="' . $edit_notes . '" />';
                 }
                 // Show Listing Fields for this property class
                 $sql = 'SELECT class_id from ' . $config['table_prefix_no_lang'] . 'classlistingsdb WHERE listingsdb_id =' . $edit;
                 $recordSet = $conn->Execute($sql);
                 if ($recordSet === false) {
                     $misc->log_error($sql);
                 }
                 $class_sql = '';
                 while (!$recordSet->EOF()) {
                     $class_id = $recordSet->fields['class_id'];
                     if (empty($class_sql)) {
                         $class_sql .= ' class_id = ' . $class_id;
                     } else {
                         $class_sql .= ' OR class_id = ' . $class_id;
                     }
                     $recordSet->MoveNext();
                 }
                 $class_list = '';
                 $sql = "SELECT DISTINCT(listingsformelements_id) FROM  " . $config['table_prefix_no_lang'] . "classformelements WHERE " . $class_sql;
                 $recordSet = $conn->Execute($sql);
                 if ($recordSet === false) {
                     $misc->log_error($sql);
                 }
                 while (!$recordSet->EOF) {
                     if (empty($class_list)) {
                         $class_list .= $recordSet->fields['listingsformelements_id'];
                     } else {
                         $class_list .= ',' . $recordSet->fields['listingsformelements_id'];
                     }
                     $recordSet->MoveNext();
                 }
                 if ($class_list == '') {
                     $class_list = 0;
                 }
                 $sql = "SELECT listingsformelements_field_name, listingsdbelements_field_value, listingsformelements_field_type, listingsformelements_field_caption, listingsformelements_default_text, listingsformelements_field_elements, listingsformelements_required, listingsformelements_field_length, listingsformelements_tool_tip FROM " . $config['table_prefix'] . "listingsformelements left join " . $config['table_prefix'] . "listingsdbelements on listingsdbelements_field_name = listingsformelements_field_name AND listingsdb_id = {$edit} WHERE listingsformelements_id IN (" . $class_list . ") ORDER BY listingsformelements_rank";
                 $recordSet = $conn->Execute($sql);
                 if ($recordSet === false) {
                     $misc->log_error($sql);
                 }
                 while (!$recordSet->EOF) {
                     $field_name = $misc->make_db_unsafe($recordSet->fields['listingsformelements_field_name']);
                     if (isset($_POST[$field_name])) {
                         if (is_array($_POST[$field_name])) {
                             $field_value = "";
                             foreach ($_POST[$field_name] as $feature_item) {
                                 $feature_item = $misc->make_db_unsafe($feature_item);
                                 $field_value .= "||{$feature_item}";
                             }
                             // end while
                             // now remove the first two characters
                             $feature_insert_length = strlen($field_value);
                             $feature_insert_length = $feature_insert_length - 2;
                             $field_value = substr($field_value, 2, $feature_insert_length);
                         } else {
                             $field_value = $misc->make_db_unsafe($recordSet->fields['listingsdbelements_field_value']);
                         }
                     } else {
                         $field_value = $misc->make_db_unsafe($recordSet->fields['listingsdbelements_field_value']);
                     }
                     $field_type = $misc->make_db_unsafe($recordSet->fields['listingsformelements_field_type']);
                     $field_caption = $misc->make_db_unsafe($recordSet->fields['listingsformelements_field_caption']);
                     $default_text = $misc->make_db_unsafe($recordSet->fields['listingsformelements_default_text']);
                     $field_elements = $misc->make_db_unsafe($recordSet->fields['listingsformelements_field_elements']);
                     $required = $misc->make_db_unsafe($recordSet->fields['listingsformelements_required']);
                     $field_length = $misc->make_db_unsafe($recordSet->fields['listingsformelements_field_length']);
                     $tool_tip = $misc->make_db_unsafe($recordSet->fields['listingsformelements_tool_tip']);
                     // pass the data to the function
                     $display .= $forms->renderExistingFormElement($field_type, $field_name, $field_value, $field_caption, $default_text, $required, $field_elements, $field_length, $tool_tip);
                     $recordSet->MoveNext();
                 }
                 //$editid = substr($edit, 1, -1) * 1;
                 if ($only_my_listings == true) {
                     $edit_link = $config['baseurl'] . '/admin/index.php?action=edit_my_listings&amp;edit=' . $edit;
                     $delete_link = $config['baseurl'] . '/admin/index.php?action=edit_my_listings&amp;delete=' . $edit;
                 } else {
                     $edit_link = $config['baseurl'] . '/admin/index.php?action=edit_listings&amp;edit=' . $edit;
                     $delete_link = $config['baseurl'] . '/admin/index.php?action=edit_listings&amp;delete=' . $edit;
                 }
                 $display .= '<tr><td colspan="2" align="center">' . $lang[required_form_text] . '</td></tr>';
                 $display .= '<tr><td colspan="2" align="center"><input type="submit" value="' . $lang[update_button] . '">  <a href="' . $delete_link . '" onclick="return confirmDelete()">' . $lang[admin_listings_editor_delete_listing] . '</a></td></tr></table></form>';
                 $display .= '</td></tr></table>';
             } else {
                 $display .= '<center><span class="redtext">' . $lang['admin_listings_editor_invalid_listing'] . '</span></center>';
                 $next_prev = '<center>' . $misc->next_prev($num_rows, $_GET['cur_page'], "", '', TRUE) . '</center>';
                 // put in the next/previous stuff
                 $display .= listing_editor::show_quick_edit_bar($next_prev, $only_my_listings);
             }
         } else {
             // show all the listings
             $sql_filter = '';
             if (isset($_POST['filter'])) {
                 if ($_POST['filter'] == 'active') {
                     $sql_filter = " AND listingsdb_active = 'yes' ";
                 }
                 if ($_POST['filter'] == 'inactive') {
                     $sql_filter = " AND listingsdb_active = 'no' ";
                 }
                 if ($_POST['filter'] == 'expired') {
                     $sql_filter = " AND listingsdb_expiration < " . $conn->DBDate(time());
                 }
                 if ($_POST['filter'] == 'featured') {
                     $sql_filter = " AND listingsdb_featured = 'yes' ";
                 }
                 if ($_POST['filter'] == 'created_1week') {
                     $sql_filter = " AND listingsdb_creation_date >= " . $conn->DBDate(date('Y-m-d', strtotime('-1 week')));
                 }
                 if ($_POST['filter'] == 'created_1month') {
                     $sql_filter = " AND listingsdb_creation_date >= " . $conn->DBDate(date('Y-m-d', strtotime('-1 month')));
                 }
                 if ($_POST['filter'] == 'created_3month') {
                     $sql_filter = " AND listingsdb_creation_date >= " . $conn->DBDate(date('Y-m-d', strtotime('-3 month')));
                 }
             }
             $lookup_sql = '';
             if (isset($_POST['lookup_field']) && isset($_POST['lookup_value']) && $_POST['lookup_field'] != 'listingsdb_id' && $_POST['lookup_field'] != 'listingsdb_title' && $_POST['lookup_value'] != '') {
                 $lookup_field = $misc->make_db_safe($_POST['lookup_field']);
                 $lookup_value = $misc->make_db_safe('%' . $_POST['lookup_value'] . '%');
                 $sql = 'SELECT listingsdb_id FROM ' . $config['table_prefix'] . 'listingsdbelements WHERE listingsdbelements_field_name = ' . $lookup_field . ' AND listingsdbelements_field_value LIKE ' . $lookup_value;
                 $recordSet = $conn->Execute($sql);
                 if ($recordSet === false) {
                     $misc->log_error($sql);
                 }
                 $listing_ids = array();
                 while (!$recordSet->EOF) {
                     $listing_ids[] = $recordSet->fields['listingsdb_id'];
                     $recordSet->MoveNext();
                 }
                 if (count($listing_ids) > 0) {
                     $listing_ids = implode(',', $listing_ids);
                 } else {
                     $listing_ids = '0';
                 }
                 $lookup_sql = ' AND listingsdb_id IN (' . $listing_ids . ') ';
             }
             if (isset($_POST['lookup_field']) && isset($_POST['lookup_value']) && $_POST['lookup_field'] == 'listingsdb_title' && $_POST['lookup_value'] != '') {
                 $lookup_value = $misc->make_db_safe('%' . $_POST['lookup_value'] . '%');
                 $sql = 'SELECT listingsdb_id FROM ' . $config['table_prefix'] . 'listingsdb WHERE listingsdb_title  LIKE ' . $lookup_value;
                 $recordSet = $conn->Execute($sql);
                 if ($recordSet === false) {
                     $misc->log_error($sql);
                 }
                 $listing_ids = array();
                 while (!$recordSet->EOF) {
                     $listing_ids[] = $recordSet->fields['listingsdb_id'];
                     $recordSet->MoveNext();
                 }
                 if (count($listing_ids) > 0) {
                     $listing_ids = implode(',', $listing_ids);
                 } else {
                     $listing_ids = '0';
                 }
                 $lookup_sql = ' AND listingsdb_id IN (' . $listing_ids . ') ';
             }
             if (isset($_POST['pclass_filter']) && $_POST['pclass_filter'] != '') {
                 $pclass_filter = $misc->make_db_safe($_POST['pclass_filter']);
                 $sql = 'SELECT listingsdb_id FROM ' . $config['table_prefix_no_lang'] . 'classlistingsdb WHERE class_id = ' . $pclass_filter;
                 $recordSet = $conn->Execute($sql);
                 if ($recordSet === false) {
                     $misc->log_error($sql);
                 }
                 $listing_ids = array();
                 while (!$recordSet->EOF) {
                     $listing_ids[] = $recordSet->fields['listingsdb_id'];
                     $recordSet->MoveNext();
                 }
                 if (count($listing_ids) > 0) {
                     $listing_ids = implode(',', $listing_ids);
                 } else {
                     $listing_ids = '0';
                 }
                 $pclass_sql = ' AND listingsdb_id IN (' . $listing_ids . ') ';
             }
             if (isset($_POST['agent_filter']) && $_POST['agent_filter'] != '') {
                 $agent_filter = $misc->make_db_safe($_POST['agent_filter']);
                 $sql = 'SELECT listingsdb_id FROM ' . $config['table_prefix'] . 'listingsdb WHERE userdb_id = ' . $agent_filter;
                 $recordSet = $conn->Execute($sql);
                 if ($recordSet === false) {
                     $misc->log_error($sql);
                 }
                 $listing_ids = array();
                 while (!$recordSet->EOF) {
                     $listing_ids[] = $recordSet->fields['listingsdb_id'];
                     $recordSet->MoveNext();
                 }
                 if (count($listing_ids) > 0) {
                     $listing_ids = implode(',', $listing_ids);
                 } else {
                     $listing_ids = '0';
                 }
                 $agent_sql = ' AND listingsdb_id IN (' . $listing_ids . ') ';
             }
             // grab the number of listings from the db
             if ($only_my_listings == true) {
                 $sql = "SELECT listingsdb_id, listingsdb_title, listingsdb_mlsexport, listingsdb_notes,\tlistingsdb_expiration, listingsdb_active, listingsdb_featured, listingsdb_hit_count, userdb_emailaddress FROM " . $config['table_prefix'] . "listingsdb, " . $config['table_prefix'] . "userdb WHERE " . $config['table_prefix'] . "listingsdb.userdb_id = " . $config['table_prefix'] . "userdb.userdb_id AND (" . $config['table_prefix'] . "userdb.userdb_id = '{$_SESSION['userID']}') {$sql_filter} {$lookup_sql} {$pclass_sql} {$agent_sql} ORDER BY listingsdb_id ASC";
             } else {
                 $sql = "SELECT listingsdb_id, listingsdb_title, listingsdb_mlsexport, listingsdb_notes,\tlistingsdb_expiration, listingsdb_active, listingsdb_featured, listingsdb_hit_count, userdb_emailaddress FROM " . $config['table_prefix'] . "listingsdb, " . $config['table_prefix'] . "userdb WHERE " . $config['table_prefix'] . "listingsdb.userdb_id = " . $config['table_prefix'] . "userdb.userdb_id {$sql_filter} {$lookup_sql} {$pclass_sql} {$agent_sql} ORDER BY listingsdb_id ASC";
             }
             $recordSet = $conn->Execute($sql);
             if ($recordSet === false) {
                 $misc->log_error($sql);
             }
             $num_rows = $recordSet->RecordCount();
             if (!isset($_GET['cur_page'])) {
                 $_GET['cur_page'] = 0;
             }
             $next_prev = '<center>' . $misc->next_prev($num_rows, $_GET['cur_page'], "", '', TRUE) . '</center>';
             // put in the next/previous stuff
             $display .= listing_editor::show_quick_edit_bar($next_prev, $only_my_listings);
             // build the string to select a certain number of listings per page
             $limit_str = $_GET['cur_page'] * $config['listings_per_page'];
             $recordSet = $conn->SelectLimit($sql, $config['listings_per_page'], $limit_str);
             if ($recordSet === false) {
                 $misc->log_error($sql);
             }
             $count = 0;
             $display .= "<br /><br />";
             $page->load_page($config['admin_template_path'] . '/edit_listings.html');
             $page->replace_lang_template_tags();
             $page->replace_tags();
             $addons = $page->load_addons();
             $listing_section = $page->get_template_section('listing_dataset');
             while (!$recordSet->EOF) {
                 // alternate the colors
                 if ($count == 0) {
                     $count = $count + 1;
                 } else {
                     $count = 0;
                 }
                 $listing .= $listing_section;
                 // strip slashes so input appears correctly
                 $title = $misc->make_db_unsafe($recordSet->fields['listingsdb_title']);
                 $notes = $misc->make_db_unsafe($recordSet->fields['listingsdb_notes']);
                 $active = $misc->make_db_unsafe($recordSet->fields['listingsdb_active']);
                 $featured = $misc->make_db_unsafe($recordSet->fields['listingsdb_featured']);
                 $mlsexport = $misc->make_db_unsafe($recordSet->fields['listingsdb_mlsexport']);
                 $email = $misc->make_db_unsafe($recordSet->fields['userdb_emailaddress']);
                 $formatted_expiration = $recordSet->UserTimeStamp($recordSet->fields['listingsdb_expiration'], $config["date_format_timestamp"]);
                 $listingID = $recordSet->fields['listingsdb_id'];
                 $hit_count = $misc->make_db_unsafe($recordSet->fields['listingsdb_hit_count']);
                 if ($active == 'yes') {
                     $active = '<span class="edit_listings_' . $active . '">' . $lang['yes'] . '</span>';
                 } elseif ($active == 'no') {
                     $active = '<span class="edit_listings_' . $active . '">' . $lang['no'] . '</span>';
                 }
                 if ($featured == 'yes') {
                     $featured = '<span class="edit_listings_' . $featured . '">' . $lang['yes'] . '</span>';
                 } elseif ($featured == 'no') {
                     $featured = '<span class="edit_listings_' . $featured . '">' . $lang['no'] . '</span>';
                 }
                 //Add filters to link
                 if (isset($_POST['lookup_field']) && isset($_POST['lookup_value'])) {
                     $_GET['lookup_field'] = $_POST['lookup_field'];
                     $_GET['lookup_value'] = $_POST['lookup_value'];
                 }
                 if (isset($_GET['lookup_field']) && isset($_GET['lookup_value'])) {
                     $_POST['lookup_field'] = $_GET['lookup_field'];
                     $_POST['lookup_value'] = $_GET['lookup_value'];
                 }
                 if ($only_my_listings == true) {
                     $edit_link = $config['baseurl'] . '/admin/index.php?action=edit_my_listings&amp;edit=' . $listingID;
                     $delete_link = $config['baseurl'] . '/admin/index.php?action=edit_my_listings&amp;delete=' . $listingID;
                 } else {
                     $edit_link = $config['baseurl'] . '/admin/index.php?action=edit_listings&amp;edit=' . $listingID;
                     $delete_link = $config['baseurl'] . '/admin/index.php?action=edit_listings&amp;delete=' . $listingID;
                 }
                 $email_link = 'mailto:' . $email;
                 $listing = $page->replace_listing_field_tags($listingID, $listing);
                 $listing = $page->parse_template_section($listing, 'listingid', $listingID);
                 $listing = $page->parse_template_section($listing, 'edit_listing_link', $edit_link);
                 $listing = $page->parse_template_section($listing, 'delete_listing_link', $delete_link);
                 $listing = $page->parse_template_section($listing, 'email_agent_link', $email_link);
                 $listing = $page->parse_template_section($listing, 'listing_active_status', $active);
                 $listing = $page->parse_template_section($listing, 'listing_featured_status', $featured);
                 $listing = $page->parse_template_section($listing, 'listing_expiration', $formatted_expiration);
                 $listing = $page->parse_template_section($listing, 'listing_notes', $notes);
                 $listing = $page->parse_template_section($listing, 'row_num_even_odd', $count);
                 $listing = $page->parse_template_section($listing, 'listing_hit_count', $hit_count);
                 $addon_fields = $page->get_addon_template_field_list($addons);
                 $listing = $page->parse_addon_tags($listing, $addon_fields);
                 if ($config["use_expiration"] == 0) {
                     $listing = $page->remove_template_block('show_expiration', $listing);
                 } else {
                     $listing = $page->cleanup_template_block('show_expiration', $listing);
                 }
                 $recordSet->MoveNext();
             }
             // end while
             $page->replace_template_section('listing_dataset', $listing);
             $page->replace_permission_tags();
             $display .= $page->return_page();
         }
         // end if $edit == ""
     } else {
         $display .= '<div class="error_text">' . $lang['access_denied'] . '</div>';
     }
     return $display;
 }
Exemplo n.º 4
0
        } elseif ($_GET['action'] == 'searchresults' && file_exists($config['template_path'] . '/searchresults_main.html')) {
            $page->load_page($config['template_path'] . '/searchresults_main.html');
        } else {
            $page->load_page($config['template_path'] . '/main.html');
        }
    }
} else {
    //echo 'RSS';
    $page->page = '{content}';
}
// Allow Addons/Functions to pass back custom jscript.
global $jscript, $jscript_last;
$jscript = '';
$jscript_last = '';
//Load Content
$page->replace_tags(array('content'));
//Replace Permission tags first
$page->replace_permission_tags();
$page->replace_urls();
$page->replace_meta_template_tags();
$page->auto_replace_tags();
// Load js last to make sure all custom js was added
$page->replace_tags(array('load_js', 'load_js_last'));
//Replace Languages
$page->replace_lang_template_tags();
$page->replace_css_template_tags();
$page->output_page();
$conn->Close();
// Close Buffer
$buffer = ob_get_contents();
ob_end_clean();