multidetails.php | searchcode

/TBDev/installer_v4_1/multidetails.php

https://github.com/cybernet/CyBerFuN-CoDeX · PHP · 57 lines · 52 code · 3 blank · 2 comment · 4 complexity · 8fabe40b887ca2992dcc3c7a1b0a976a MD5 · raw file


<?php

if (!extension_loaded('zlib')) {

    ob_start("ob_gzhandler");

}

require_once("include/bittorrent.php");

require_once("include/bbcode_functions.php");

dbconn(false);

maxcoder();

if(!logged_in())

{

header("HTTP/1.0 404 Not Found");

// moddifed logginorreturn by retro//Remember to change the following line to match your server

print("<html><h1>Not Found</h1><p>The requested URL /{$_SERVER['PHP_SELF']} was not found on this server.</p><hr /><address>Apache/1.1.11 ".$SITENAME." Server at ".$_SERVER['SERVER_NAME']." Port 80</address></body></html>\n");

die();

}



stdhead("Multi Upload");



print("<table border=1 cellpadding=4 width=35%> ");

$ids = array();



$ids[] = 0 + $_GET["id1"];

$ids[] = 0 + $_GET["id2"];

$ids[] = 0 + $_GET["id3"];

$ids[] = 0 + $_GET["id4"];

$ids[] = 0 + $_GET["id5"];

// this is the page which is displayed if the uploader has just uplaoded the torrents//

if (array_key_exists('uploaded', $_GET) && $_GET["uploaded"]) {

    print("<h2>Successfully uploaded!</h2>\n");

    print("<p>You can start downloading them now and start seeding. <b>Note</b> that the torrent won't be visible until you do that!</p>\n");



    $res = mysql_query("SELECT torrents.filename FROM torrents WHERE torrents.id=$ids[0] OR torrents.id=$ids[1] OR torrents.id=$ids[2] OR torrents.id=$ids[3] OR torrents.id=$ids[4];") or sqlerr();



    $i = 0;

    while ($row = mysql_fetch_array($res)) {

        print("<tr><td><a class=\"index\" href=\"download.php/$ids[$i]/" . rawurlencode($row["filename"]) . "\">" . htmlspecialchars($row["filename"]) . "</a></td></tr>");

        $i++;

    }

    print("</table>");

    // this is the page which is displayed when a user views the uploaded torrents from the shoutbox link//

} else {

    print("<h2>New Torrents have been Uploaded!</h2>\n");

    print("<p>Click on the Torrents below to see the full description or alternatively click the 'Download' Button to Download..now</p>\n");



    $res = mysql_query("SELECT * FROM torrents WHERE torrents.id=$ids[0] OR torrents.id=$ids[1] OR torrents.id=$ids[2] OR torrents.id=$ids[3] OR torrents.id=$ids[4];") or sqlerr();

    print("<tr><td class='colhead'><b>Torrent Description</b></td><td class='colhead'><img src=\"pic/download.gif\" /></td></tr>");

    $i = 0;

    while ($row = mysql_fetch_array($res)) {

        print("<tr><td><a class=\"index\" href='$BASEURL/details.php?id=$ids[$i]'\>" . htmlspecialchars($row["name"]) . "</a></td><td><a class=\"index\" href=\"download.php/$ids[$i]/" . rawurlencode($row["filename"]) . "\"><img src=\"pic/download.gif\" /></a></td></tr>");

        $i++;

    }

    print("</table>");

    print("<br />");

}

stdfoot();



?>

Alerts (9)

'die(' Abrupt termination detected; use try-catch or custom error handlers for better control
14
'$_GET[' Unbounded request input detected; limit size (e.g., check Content-Length or use max input vars) to prevent memory exhaustion
22 23 24 25 26 28
'mysql_fetch_array(' Deprecated mysql_* functions; use PDO or MySQLi for modern database access
35 48