<?php



/**

 *      [Discuz!] (C)2001-2099 Comsenz Inc.

 *      This is NOT a freeware, use is subject to license terms

 *

 *      $Id: spacecp_index.php 22814 2011-05-24 05:42:54Z zhangguosheng $

 */



if(!defined('IN_DISCUZ')) {

	exit('Access Denied');

}



$op = in_array($_GET['op'], array('start', 'layout', 'block', 'style', 'diy', 'image', 'getblock', 'edit', 'setmusic', 'getspaceinfo', 'savespaceinfo', 'editnv', 'getpersonalnv')) ? $_GET['op'] : 'start';



require_once libfile('function/space');

require_once libfile('function/portalcp');



if ($op == 'start') {





} elseif ($op == 'layout') {

	$layoutarr = getlayout();



} elseif ($op == 'style') {



	$themes = gettheme('space');



} elseif ($op == 'block') {

	$block = getblockdata();

} elseif ($op == 'diy' || $op == 'image') {



	$albumid = empty($_GET['albumid'])?0:intval($_GET['albumid']);

	$page = empty($_GET['page'])?1:intval($_GET['page']);

	if($page<1) $page=1;



	$perpage = 6;

	$perpage = mob_perpage($perpage);



	$start = ($page-1)*$perpage;



	ckstart($start, $perpage);



	$albumlist = array();

	$query = DB::query("SELECT * FROM ".DB::table('home_album')." WHERE uid='$space[uid]' ORDER BY updatetime DESC");

	while ($value = DB::fetch($query)) {

		if (!isset($_GET['albumid']) && empty($albumid)) $albumid = $value['albumid'];



		$albumlist[$value['albumid']] = $value;

	}



	$count = getcount('home_pic', array('albumid'=>0, 'uid'=>$space['uid']));

	$albumlist[0] = array(

		'uid' => $space['uid'],

		'albumid' => 0,

		'albumname' => lang('space', 'default_albumname'),

		'picnum' => $count

	);



	if ($albumid > 0) {

		if (!isset($albumlist[$albumid])) {

			showmessage('to_view_the_photo_does_not_exist');

		}



		$wheresql = "albumid='$albumid'";

		$count = $albumlist[$albumid]['picnum'];

	} else {

		$wheresql = "albumid='0' AND uid='$space[uid]'";

	}



	$list = array();

	if($count) {

		$query = DB::query("SELECT * FROM ".DB::table('home_pic')." WHERE $wheresql ORDER BY dateline DESC LIMIT $start,$perpage");

		while ($value = DB::fetch($query)) {

			$value['pic'] = pic_get($value['filepath'], 'album', $value['thumb'], $value['remote']);

			$list[] = $value;

		}

	}



	$_G['gp_ajaxtarget'] = empty($_G['gp_ajaxtarget']) ? 'diyimages' : $_G['gp_ajaxtarget'];

	$multi = multi($count, $perpage, $page, "home.php?mod=spacecp&ac=index&op=image&albumid=$albumid");



} elseif ($op == 'getblock') {



	$blockname = getstr($_GET['blockname'],15);

	$blockhtml = '';

	if(check_ban_block($name, $space)) {

		space_merge($space,'field_home');

		$data = getuserdiydata($space);

		$blockhtml = getblockhtml($blockname, $data['parameters'][$blockname]);

	}



} elseif ($op == 'edit') {



	$blockname = getstr($_GET['blockname'],15);

	$blockdata = lang('space','blockdata');

	if (!empty($blockdata[$blockname]) && check_ban_block($blockname, $space)) {

		space_merge($space,'field_home');

		$userdiy = getuserdiydata($space);

		$para = $userdiy['parameters'][$blockname];

		$para['title'] = !isset($para['title']) ? $blockdata[$blockname] : stripslashes($para['title']);

	} else {

		showmessage('the_block_is_not_available');

	}

} elseif ($op == 'editnv') {

	space_merge($space,'field_home');

	$blockposition = unserialize($space['blockposition']);

	$personalnv = !empty($blockposition) && isset($blockposition['nv']) ? $blockposition['nv'] : '';

} elseif ($op == 'savespaceinfo') {

	space_merge($space,'field_home');

	if (submitcheck('savespaceinfosubmit')) {



		$spacename = getstr($_POST['spacename'],30, 1, 1);

		$spacedescription = getstr($_POST['spacedescription'],135, 1, 1);



		$setarr = array();

		$setarr['spacename'] = $spacename;

		$setarr['spacedescription'] = $spacedescription;

		DB::update('common_member_field_home', $setarr, "uid = {$_G['uid']}");



		$space['spacename'] = $spacename;

		$space['spacedescription'] = $spacedescription;

	}

} elseif ($op == 'getspaceinfo') {

	space_merge($space,'field_home');

} elseif ($op == 'getpersonalnv') {

	space_merge($space,'field_home');

	getuserdiydata($space);

	$personalnv = isset($_G['blockposition']['nv']) ? $_G['blockposition']['nv'] : '';

	if($personalnv && !empty($_GET['show'])) {

		$personalnv['nvhidden'] = 0;

	}

}

if (submitcheck('blocksubmit')) {



	$blockname = getstr($_GET['blockname'],15,0,1);

	if(check_ban_block($blockname, $space)) {

		space_merge($space,'field_home');

		$blockdata = unserialize($space['blockposition']);



		$title = getstr($_POST['blocktitle'],50,1,1);

		$blockdata['parameters'][$blockname]['title'] = $title;



		if (in_array($blockname, array('block1', 'block2', 'block3', 'block4', 'block5'))) {

			$content = censor(getstr($_POST['content'],1000,1,0,0,1));

			$blockdata['parameters'][$blockname]['content'] = stripslashes($content);

		} elseif($blockname == 'profile') {

			$blockdata['parameters'][$blockname]['banavatar'] = in_array($_G['gp_avatar'], array('big', 'middle', 'small')) ? $_G['gp_avatar'] : 'middle';

		} elseif($blockname == 'statistic') {

			$blockdata['parameters'][$blockname]['bancredits'] = $_G['gp_credits'] ? 0 : 1;

			$blockdata['parameters'][$blockname]['banfriends'] = $_G['gp_friends'] ? 0 : 1;

			$blockdata['parameters'][$blockname]['banthreads'] = $_G['gp_threads'] ? 0 : 1;

			$blockdata['parameters'][$blockname]['banblogs'] = $_G['gp_blogs'] ? 0 : 1;

			$blockdata['parameters'][$blockname]['banalbums'] = $_G['gp_albums'] ? 0 : 1;

			$blockdata['parameters'][$blockname]['bansharings'] = $_G['gp_sharings'] ? 0 : 1;

			$blockdata['parameters'][$blockname]['banviews'] = $_G['gp_views'] ? 0 : 1;

		} elseif(in_array($blockname, array('personalinfo'))) {



		} else {

			$shownum = max(1,intval($_POST['shownum']));

			if ($shownum <= 20) {

				$blockdata['parameters'][$blockname]['shownum'] = $shownum;

			}

		}



		if($blockname == 'blog') {

			$blockdata['parameters'][$blockname]['showmessage'] = min(100000, abs(intval($_G['gp_showmessage'])));

		} elseif($blockname == 'myapp') {

			$blockdata['parameters'][$blockname]['logotype'] = in_array($_G['gp_logotype'], array('logo', 'icon')) ? $_G['gp_logotype'] : 'logo';

		}



		$setarr['blockposition'] = daddslashes(serialize($blockdata));

		DB::update('common_member_field_home', $setarr, "uid = {$space['uid']}");



		showmessage('do_success', 'portal.php?mod=spacecp&ac=index&op=getblock&blockname='.$blockname, array('blockname'=>$blockname));

	} else {

		showmessage('the_block_is_not_available');

	}

}



if (submitcheck('editnvsubmit')) {



	$hidden = intval($_POST['nvhidden']);

	$nv = array('index', 'feed', 'doing', 'blog', 'album', 'topic', 'share', 'friends', 'wall', 'profile');

	space_merge($space,'field_home');

	$blockdata = unserialize($space['blockposition']);



	$personalnv = array();

	$personalnv['nvhidden'] = $hidden;

	foreach($nv as $value) {

		$namevalue = trim($_POST[$value]);

		$personalnv['items'][$value] = getstr($namevalue,15,0,1);

		$personalnv['banitems'][$value] = empty($_POST['ban'.$value]) ? 0 : 1;

	}

	$blockdata['nv'] = $personalnv;

	$setarr['blockposition'] = daddslashes(serialize($blockdata));

	DB::update('common_member_field_home', $setarr, "uid = {$space['uid']}");



	showmessage('do_success', 'portal.php?mod=spacecp&ac=index&op=getnv');



}



if (submitcheck('musicsubmit')) {



	$blockname = getstr($_GET['blockname'],15,0,1);

	$_POST = dstripslashes($_POST);

	space_merge($space,'field_home');

	$blockdata = unserialize($space['blockposition']);

	if ($_POST['act'] == 'config') {

		$config = array (

				'showmod' => $_POST['showmod'],

				'autorun' => $_POST['autorun'],

				'shuffle' => $_POST['shuffle'],

				'crontabcolor' => $_POST['crontabcolor'],

				'buttoncolor' => $_POST['buttoncolor'],

				'fontcolor' => $_POST['fontcolor'],

				'crontabbj' => $_POST['crontabbj'],

				'height' => min(9999,abs(intval($_POST['height']))),

			  );

		$blockdata['parameters']['music']['config'] = $config;



		$blockdata['parameters']['music']['title']= getstr($_POST['blocktitle'],50,1,1);



	} elseif ($_POST['act'] == 'addmusic') {

		$mp3url = $_POST['mp3url'];

		$mp3name = $_POST['mp3name'];

		$cdbj = $_POST['cdbj'];

		$mp3list = empty($blockdata['parameters']['music']['mp3list']) ? array() : $blockdata['parameters']['music']['mp3list'];

		foreach ($mp3url as $key => $value) {

			if (!empty($value)) {

				if(empty($mp3name[$key])) $mp3name[$key] = substr($value,strrpos($value,'/')+1,strlen($value));

				$mp3list[] = array('mp3url'=>$value, 'mp3name'=>$mp3name[$key], 'cdbj'=>$cdbj[$key]);

			}

		}

		$blockdata['parameters']['music']['mp3list'] = $mp3list;



	} elseif ($_POST['act'] == 'editlist') {

		$mp3url = $_POST['mp3url'];

		$mp3name = $_POST['mp3name'];

		$cdbj = $_POST['cdbj'];

		$mp3list = array();

		foreach ($mp3url as $key => $value) {

			if (!empty($value)) {

				if(empty($mp3name[$key])) $mp3name[$key] = substr($value,strrpos($value,'/')+1,strlen($value));

				$mp3list[] = array('mp3url'=>$value, 'mp3name'=>$mp3name[$key], 'cdbj'=>$cdbj[$key]);

			}

		}



		$blockdata['parameters']['music']['mp3list'] = $mp3list;

	}



	if (empty($blockdata['parameters']['music']['config'])) {

		$blockdata['parameters']['music']['config'] = array (

			  'showmod' => 'default',

			  'autorun' => 'true',

			  'shuffle' => 'true',

			  'crontabcolor' => '#D2FF8C',

			  'buttoncolor' => '#1F43FF',

			  'fontcolor' => '#1F43FF',

			);

	}

	$setarr['blockposition'] = daddslashes(serialize($blockdata));

	DB::update('common_member_field_home', $setarr, "uid = {$space['uid']}");

	showmessage('do_success', 'home.php?mod=spacecp&ac=index&op=getblock&blockname='.$blockname, array('blockname'=>$blockname));

}



if (submitcheck('diysubmit')) {



	$blockdata = array();



	checksecurity($_POST['spacecss']);



	$spacecss = dstripslashes($_POST['spacecss']);

	$spacecss = preg_replace("/(\<|\>)/is", '', $spacecss);



	$currentlayout = getstr($_POST['currentlayout'],5, 1, 1);

	$style = empty($_POST['style'])?'':preg_replace("/[^0-9a-z]/i", '', $_POST['style']);



	$layoutdata = dstripslashes(getgpc('layoutdata', 'P'));

	require_once libfile('class/xml');

	$layoutdata = xml2array($layoutdata);

	if (empty($layoutdata)) showmessage('space_data_format_invalid');

	$layoutdata = $layoutdata['diypage'];

	if($style && $style != 'uchomedefault') {

		$cssfile = DISCUZ_ROOT.'./static/space/'.$style.'/style.css';

		if(!file_exists($cssfile)) {

			showmessage('theme_does_not_exist');

		}

	}



	space_merge($space, 'field_home');

	$blockdata = unserialize($space['blockposition']);

	$blockdata['block'] = $layoutdata;

	$blockdata['currentlayout'] = $currentlayout;



	$setarr['spacecss'] = daddslashes($spacecss);

	$setarr['blockposition'] = daddslashes(serialize($blockdata));

	$setarr['theme'] = $style;

	DB::update('common_member_field_home', $setarr, "uid = {$_G['uid']}");

	showmessage('do_success','home.php?mod=space'.($_G['adminid'] == 1 && $_G['setting']['allowquickviewprofile'] ? '&view=admin' : ''));

}



if (submitcheck('uploadsubmit')) {

	$albumid = $picid = 0;



	if(!checkperm('allowupload')) {

		echo "<script>";

		echo "alert(\"".lang('spacecp', 'not_allow_upload')."\")";

		echo "</script>";

		exit();

	}

	$uploadfiles = pic_save($_FILES['attach'], $_POST['albumid'], $_POST['pic_title'], false);

	if($uploadfiles && is_array($uploadfiles)) {

		$albumid = $uploadfiles['albumid'];

		$picid = $uploadfiles['picid'];

		$uploadStat = 1;

		require_once libfile('function/spacecp');

		album_update_pic($albumid);

	} else {

		$uploadStat = $uploadfiles;

	}



	$picurl = pic_get($uploadfiles['filepath'], 'album', $uploadfiles['thumb'], $uploadfiles['remote']);



	echo "<script>";

	if($uploadStat == 1) {

		echo "parent.spaceDiy.getdiy('diy', 'albumid', '$albumid');";

		echo "parent.spaceDiy.setBgImage('$picurl');";

		echo "parent.Util.toggleEle('upload');";

	} else {

		echo "parent.showDialog('$uploadStat','notice');";

	}

	echo "</script>";

	exit();

}

include_once(template('home/spacecp_index'));

?>