index.php | searchcode

/notepad/index.php

https://github.com/michaelmwu/saratogahigh.com
PHP | 219 lines | 187 code | 31 blank | 1 comment | 25 complexity | 9edbcb8f108bbbfbdf7aa78f231041ff MD5 | raw file

<?



include '../db.php';

include 'notepad.php';



if($_GET['charset'] == '')

	$charset = 'utf-8';

else

	$charset = htmlentities($_GET['charset']);



if($loggedin)

{

	$toomanynotes = TooManyNotes($userid);



	if(is_numeric($_GET['delete']))

		mysql_query('DELETE FROM NOTEPAGE_LIST WHERE NOTEPAGE_OWNER=' . $userid . ' AND NOTEPAGE_ID=' . $_GET['delete']) or die("Delete failed.");

	if($_POST['go'] == 'Save')

	{

		if(strlen(stripslashes($_POST['entrytext'])) > 65530)

			$errorm = '<p style="font-size: medium">Your note was too long. Notes are limited to 65530 characters.</p>.';

		else if($toomanynotes)

			$errorm = '<p style="font-size: medium">Sorry, you\'re limited to 60 notes.</p>';

		else

			mysql_query('INSERT INTO NOTEPAGE_LIST (NOTEPAGE_OWNER, NOTEPAGE_CREATED, NOTEPAGE_MODIFIED, NOTEPAGE_VALUE, NOTEPAGE_DIGEST) VALUES (' . $userid . ', "' . date(TIME_FORMAT_SQL, CURRENT_TIME) . '", NOTEPAGE_CREATED, \'' . $_POST['entrytext'] . '\', \'' . makedigest($_POST['entrytext']) . '\')') or die("Insert failed.");

	}

	else if($_POST['go'] == 'Edit')

	{

		mysql_query('UPDATE NOTEPAGE_LIST SET NOTEPAGE_MODIFIED="' . date(TIME_FORMAT_SQL, CURRENT_TIME) . '", NOTEPAGE_VALUE=\'' . $_POST['entrytext'] . '\', NOTEPAGE_DIGEST=\'' . makedigest($_POST['entrytext']) . '\' WHERE NOTEPAGE_OWNER=' . $userid . ' AND NOTEPAGE_ID=' . $_GET['id']) or die("Insert failed.");

	}

}

else

	forceLogin();



$xml->handle_request();



?>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN">

<html>

	<head>

		<title>Notepad</title>

		<meta name="GENERATOR" content="Microsoft Visual Studio.NET 7.0">

		<meta name="vs_targetSchema" content="http://schemas.microsoft.com/intellisense/ie5">

		<link rel="stylesheet" type="text/css" href="../shs.css">

		<meta http-equiv="Content-Type" content="text/html; charset=<?= $charset ?>">

		<style type="text/css">

			a.linkh { font-weight: bold }

			.headed { background-color: #f0f0f0; border-width: 1px 1px 1px 1px; border-style: solid; border-color: #666; padding: 3px; }

		</style>

	</head>

	<body>

		<? include "../inc-header.php"; ?>

		<h1>Notepad</h1>

		<?= htmlentities($errorm) ?>

		<p>Notepad is the easy way to save information you've found on the web. You can use it to store links and text you've found at school and access them at home, or vice versa.</p> 

        <? if(strlen($_GET['query']) > 0) { ?>

        <form method="get" action="./">

        <p>Search my pages: <input type="text" name="query" value="<?= htmlentities(stripslashes($_GET['query'])) ?>"> <input type="submit" name="go" value="Search"><!-- <a href="search.php">Search Tips</a>--></p>

        </form>

        

        <h2>Pages matching '<?= htmlentities(stripslashes($_GET['query'])) ?>'</h2>

        <p><a href="./">Cancel search</a></p>

        <?

	print 'SELECT NOTEPAGE_ID, NOTEPAGE_DIGEST, UNIX_TIMESTAMP(NOTEPAGE_CREATED) as TS FROM NOTEPAGE_LIST WHERE NOTEPAGE_OWNER=' . $userid . ' AND MATCH(NOTEPAGE_VALUE) AGAINST (\'' . $_GET['query'] . '\')';

        

        $entries = mysql_query('SELECT NOTEPAGE_ID, NOTEPAGE_DIGEST, UNIX_TIMESTAMP(NOTEPAGE_CREATED) as TS FROM NOTEPAGE_LIST WHERE NOTEPAGE_OWNER=' . $userid . ' AND MATCH(NOTEPAGE_VALUE) AGAINST (\'' . $_GET['query'] . '\')') or die('Query failed.');



        

        print '<p>' . mysql_num_rows($entries) . ' page(s), sorted by relevance.</p>';

        

        while($l = mysql_fetch_array($entries, MYSQL_ASSOC))

        	print '<p><a href="page.php?id=' . $l['NOTEPAGE_ID'] . '">' . date(TIME_FORMAT, $l['TS']) . '</a>: ' .  htmlentities($l['NOTEPAGE_DIGEST']) . ' <a href="./?go=Search?&amp;query=' . $_GET['query'] . '&amp;delete=' . $l['NOTEPAGE_ID'] . '">Delete</a></p>';

        ?>				

        <? } else { ?>

        

	  <table>

	  <tr>

	  <td id="noteview_box" style="vertical-align: top; width: 500px;">

	  	<? if($_GET['mode'] == 'view')

				view_box($userid,$_GET['id']);

			else if($_GET['mode'] == 'edit')

				edit_box($userid,$_GET['id']);

			else

				new_box($userid); ?>

        </td>

	  <td style="vertical-align: top; padding-left: 20px;">

        <h2>All Pages</h2>

	  <div class="headed">

        <form method="get" action="./">

        <p>Search my pages: <input type="text" name="query" value=""> <input type="submit" name="go" value="Search"><!-- <a href="search.php">Search Tips</a>--></p>

        </form>

        

		<div id="allpages_box">

			<? allpages_box($userid); ?>

		</div>

		<a href="/notepad" onClick="return new_page();">New Page</a>

	  </div>

	  </td>

	  </tr>

	  </table>

	<? include '../inc-footer.php'; ?>

	<script type="text/javascript">

	<!--

		function view_page(id)

		{

			<? print $xml->make_request("'index.php'",'POST','noteview_box','view_box', "a:2:{i:0;i:$userid;i:1;i:' + id + ';}"); ?>

			return false;

		}

		

		function edit_page(id)

		{

			<? print $xml->make_request("'index.php'",'POST','noteview_box','edit_box',"a:2:{i:0;i:$userid;i:1;i:' + id + ';}"); ?>

			return false;

		}



		function save_page(id,text)

		{

			xmlhttp.open("POST", 'index.php?id=',true);

			xmlhttp.onreadystatechange=function()

			{

			if (xmlhttp.readyState==4)

				{

					document.getElementById("noteview_box").innerHTML = xmlhttp.responseText;

				}

			}

			xmlhttp.setRequestHeader("Content-Type", "application/x-www-form-urlencoded");xmlhttp.send('go=Edit&entrytext=' + text + '&XMLRequest=1&XMLFunction=view_box&XMLArgs=a:2:{i:0;i:32;i:1;i:' + id + ';}');				return false;

		}

		

		function delete_page(id, redirect)

		{

			xmlhttp.open("POST", 'index.php?delete=' + id,true);

			xmlhttp.onreadystatechange=function()

			{

				if (xmlhttp.readyState==4)

				{

					document.getElementById("allpages_box").innerHTML = xmlhttp.responseText;



					document.getElementById("noteview_box").innerHTML = '		<h2>New Page</h2>'

						+ '<form method="post" action="./">'

						+ '<p><textarea name="entrytext" rows="12" cols="60" wrap="virtual"></textarea></p>'

						+ '<p><input type="submit" name="go" value="Save"></p>'

						+ '</form>';

				}

			}

			xmlhttp.setRequestHeader("Content-Type", "application/x-www-form-urlencoded");xmlhttp.send('XMLRequest=1&XMLFunction=allpages_box&XMLArgs=a:1:{i:0;i:<?=$userid?>;}');

			return false;

		}

		

		function new_page()

		{

			<? print $xml->make_request("'index.php'",'POST','noteview_box','new_box',"a:1:{i:0;i:$userid;}"); ?>



			return false;

		}

	// -->

	</script>	

	</body>

</html>

<?

}



function new_box($userid)

{

	$toomanynotes = TooManyNotes($userid);



	print '<h2>New Page</h2>';



	if(!$toomanynotes) { ?>

		<form method="post" action="./">

		<p><textarea name="entrytext" rows="12" cols="60" wrap="virtual"></textarea></p>

		<p><input type="submit" name="go" value="Save"></p>

		</form>

	<? } else {

		print "<p>You can't save any more notes at this time, because you've exceeded your limit.</p>";

	}

}



function view_box($userid,$id)

{

	print '<h2>View Page</h2>';



	$entries = mysql_query('SELECT NOTEPAGE_LIST.*, NOTEPAGE_CREATED as CR, NOTEPAGE_MODIFIED as MO FROM NOTEPAGE_LIST WHERE NOTEPAGE_OWNER=' . $userid . ' AND NOTEPAGE_ID=' . $id) or die('Query failed.');

			

	if($l = mysql_fetch_array($entries, MYSQL_ASSOC))

	{

		print '<table>';

		print '<tr><td>Created</td><td>' . date(TIME_FORMAT, strtotime($l['CR'])) . '</td></tr>';

		print '<tr><td>Modified</td><td>' . date(TIME_FORMAT, strtotime($l['MO'])) . '</td></tr>';

		print '</table>';

		print '<p><span class="toolbar"><a href="./?mode=edit&amp;id=' . $id . '" onClick="return edit_page(' . $id . ');">Modify</a></span>&nbsp;<span class="toolbar"><a href="/mail/compose.php?fwnote=' . $id . '">Forward</a></span>&nbsp;<span class="toolbar"><a href="./?delete=' . $id . '" onClick="return delete_page(' . $l['NOTEPAGE_ID'] . ',true);">Delete</a></span></p>';

		print '<p style="font-family: monospace; background-color: #eeeeee; padding: 5px;">' . printable($l['NOTEPAGE_VALUE']) . '</p>';

	}

}



function edit_box($userid,$id) 

{

	print '<h2>Modify Page</h2>';

	

	$entries = mysql_query('SELECT NOTEPAGE_LIST.*, NOTEPAGE_CREATED as CR, NOTEPAGE_MODIFIED as MO FROM NOTEPAGE_LIST WHERE NOTEPAGE_OWNER=' . $userid . ' AND NOTEPAGE_ID=' . $id) or die('Query failed.');



	if($l = mysql_fetch_array($entries, MYSQL_ASSOC))

	{

	?>

		<form method="post" action="./?id=<?= $id ?>">

		<p><textarea name="entrytext" rows="12" cols="60" wrap="virtual"><?= htmlspecialchars($l['NOTEPAGE_VALUE']) ?></textarea></p>

		<p><input type="submit" name="go" value="Edit"></p>

		</form>

<? }

}



function allpages_box($userid)

{

	$entries = mysql_query('SELECT NOTEPAGE_ID, NOTEPAGE_DIGEST, NOTEPAGE_CREATED as TS FROM NOTEPAGE_LIST WHERE NOTEPAGE_OWNER=' . $userid . ' ORDER BY NOTEPAGE_CREATED DESC') or die('Query failed.');



	print '<p>' . mysql_num_rows($entries) . ' page(s).</p>';



	while($l = mysql_fetch_array($entries, MYSQL_ASSOC))

		print '<p><a href="./?mode=view&amp;id=' . $l['NOTEPAGE_ID'] . '" onClick="return view_page(' . $l['NOTEPAGE_ID'] . ');">' . date(TIME_FORMAT, strtotime($l['TS'])) . '</a>: ' .  htmlentities($l['NOTEPAGE_DIGEST']) . ' <a href="./?delete=' . $l['NOTEPAGE_ID'] . '" onClick="return delete_page(' . $l['NOTEPAGE_ID'] . ',false);">Delete</a></p>';

}

?>