PageRenderTime 25ms CodeModel.GetById 23ms RepoModel.GetById 0ms app.codeStats 1ms

/legacy/includes/pages/admin/categories.php

http://novaboard.googlecode.com/
PHP | 538 lines | 380 code | 139 blank | 19 comment | 50 complexity | 26804eafed5c8565b88b265c48f39163 MD5 | raw file
Possible License(s): AGPL-3.0 
    

  1. <?php

    2. 

  2. 

    3. 

  3. /*

    4. 

  4. +--------------------------------------------------------------------------

    5. 

  5. |   NovaBoard

    6. 

  6. |   ========================================

    7. 

  7. |   By Dave Murchison

    8. 

  8. |   (c) 2009 NovaBoard

    9. 

  9. |   http://www.novaboard.net

    10. 

  10. |   ========================================

    11. 

  11. |   categories.php - create/edit/delete forums

    12. 

  12.  

    13. 

  13. */

    14. 

  14. 

    15. 

  15. if (!defined('NOVA_RUN')){

    16. 

  16. 	echo "<h1>ACCESS DENIED</h1>You cannot access this file directly.";

    17. 

  17. 	exit();

    18. 

  18. }

    19. 

  19. 

    20. 

  20. template_hook("pages/admin/categories.template.php", "start");

    21. 

  21. 

    22. 

  22. if ($can_change_forum_settings=='0'){

    23. 

  23. 

    24. 

  24. 	nova_redirect("index.php?page=error&error=11","error/11");

    25. 

  25. 

    26. 

  26. }

    27. 

  27. 

    28. 

  28. elseif ($_GET['func']=='delete')

    29. 

  29. {

    30. 

  30. 	if ($_POST['agree']!='1')

    31. 

  31. 	{

    32. 

  32. 		list($token_id, $token, $token_name) = tokenCreate('categories_delete', (int) $_GET['id']);

    33. 

  33. 		

    34. 

  34. 		template_hook("pages/admin/categories.template.php", "warn");

    35. 

  35. 	}

    36. 

  36. 	else

    37. 

  37. 	{

    38. 

  38. 		$category_post_id = (int) $_GET['id'];

    39. 

  39. 		

    40. 

  40. 		if (tokenCheck('categories_delete', $category_post_id))

    41. 

  41. 		{

    42. 

  42. 			$query212 = "select ID from {$db_prefix}posts WHERE FORUM_ID='$category_post_id'" ;

    43. 

  43. 			$result212 = mysql_query($query212) or die("delete.php - Error in query: $query212") ;                                  

    44. 

  44. 			while ($results212 = mysql_fetch_array($result212))

    45. 

  45. 			{

    46. 

  46. 				$remove_id = $results212['ID'];

    47. 

  47. 

    48. 

  48. 				// first, delete attachments associated with these posts...

    49. 

  49. 

    50. 

  50. 				$query2121 = "select FILENAME from {$db_prefix}attachments WHERE POSTID='$remove_id'" ;

    51. 

  51. 				$result2121 = mysql_query($query2121) or die("delete.php - Error in query: $query2121") ;                                  

    52. 

  52. 				while ($results2121 = mysql_fetch_array($result2121))

    53. 

  53. 				{

    54. 

  54. 					$filename = strip_slashes($results2121['FILENAME']);

    55. 

  55. 

    56. 

  56. 					foreach (glob("uploads/attachments/$filename") as $filename)

    57. 

  57. 					{

    58. 

  58. 					   unlink($filename);

    59. 

  59. 					}

    60. 

  60. 

    61. 

  61. 					foreach (glob("uploads/attachments/t_$filename") as $filename)

    62. 

  62. 					{

    63. 

  63. 					   unlink($filename);

    64. 

  64. 					}

    65. 

  65. 

    66. 

  66. 					mysql_query("DELETE FROM {$db_prefix}attachments WHERE postid ='$remove_id'");

    67. 

  67. 				}

    68. 

  68. 			}

    69. 

  69. 

    70. 

  70. 			mysql_query('

    71. 

  71. 					DELETE p.*, pl.*, plv.*

    72. 

  72. 					FROM ' . $db_prefix . 'posts p

    73. 

  73. 					LEFT JOIN ' . $db_prefix . 'polls pl

    74. 

  74. 							ON p.topic_id = pl.topic_id

    75. 

  75. 							LEFT JOIN ' . $db_prefix . 'polls_votes plv

    76. 

  76. 									ON pl.id = plv.poll_id

    77. 

  77. 					WHERE forum_id = ' . $category_post_id

    78. 

  78. 			);

    79. 

  79. 			mysql_query("DELETE FROM {$db_prefix}categories WHERE id ='$category_post_id'");

    80. 

  80. 			mysql_query("DELETE FROM {$db_prefix}permissions WHERE forum_id ='$category_post_id'");

    81. 

  81. 			mysql_query('DELETE FROM ' . $db_prefix . 'moderators WHERE forum_id = ' . $category_post_id);

    82. 

  82. 

    83. 

  83. 			$query3 = "select PARENT, ID from {$db_prefix}categories WHERE PARENT='$category_post_id' ORDER BY ID desc" ;

    84. 

  84. 			$result3 = mysql_query($query3) or die("categories.php - Error in query: $query3") ; 

    85. 

  85. 			while ($results3 = mysql_fetch_array($result3))

    86. 

  86. 			{

    87. 

  87. 				$parent = $results3['PARENT'];

    88. 

  88. 				$id = $results3['ID'];

    89. 

  89. 

    90. 

  90. 				$query212 = "select ID from {$db_prefix}posts WHERE FORUM_ID='$id'" ;

    91. 

  91. 				$result212 = mysql_query($query212) or die("delete.php - Error in query: $query212") ;                                  

    92. 

  92. 				while ($results212 = mysql_fetch_array($result212))

    93. 

  93. 				{

    94. 

  94. 					$remove_id = $results212['ID'];

    95. 

  95. 

    96. 

  96. 					// first, delete attachments associated with these posts...

    97. 

  97. 

    98. 

  98. 					$query2121 = "select FILENAME from {$db_prefix}attachments WHERE POSTID='$remove_id'" ;

    99. 

  99. 					$result2121 = mysql_query($query2121) or die("delete.php - Error in query: $query2121") ;                                  

    100. 

  100. 					while ($results2121 = mysql_fetch_array($result2121))

    101. 

  101. 					{

    102. 

  102. 						$filename = strip_slashes($results2121['FILENAME']);

    103. 

  103. 

    104. 

  104. 						foreach (glob("uploads/attachments/$filename") as $filename)

    105. 

  105. 						{

    106. 

  106. 						   unlink($filename);

    107. 

  107. 						}

    108. 

  108. 

    109. 

  109. 						foreach (glob("uploads/attachments/t_$filename") as $filename)

    110. 

  110. 						{

    111. 

  111. 						   unlink($filename);

    112. 

  112. 						}

    113. 

  113. 

    114. 

  114. 						mysql_query("DELETE FROM {$db_prefix}attachments WHERE postid ='$remove_id'");

    115. 

  115. 					}

    116. 

  116. 				}

    117. 

  117. 

    118. 

  118. 				mysql_query('

    119. 

  119. 						DELETE p.*, pl.*, plv.*

    120. 

  120. 						FROM ' . $db_prefix . 'posts p

    121. 

  121. 						LEFT JOIN ' . $db_prefix . 'polls pl

    122. 

  122. 								ON p.topic_id = pl.topic_id

    123. 

  123. 								LEFT JOIN ' . $db_prefix . 'polls_votes plv

    124. 

  124. 										ON pl.id = plv.poll_id

    125. 

  125. 						WHERE forum_id = ' . $id

    126. 

  126. 				);

    127. 

  127. 				mysql_query("DELETE FROM {$db_prefix}categories WHERE id ='$id'");

    128. 

  128. 				mysql_query("DELETE FROM {$db_prefix}permissions WHERE forum_id ='$id'");

    129. 

  129. 				mysql_query('DELETE FROM ' . $db_prefix . 'moderators WHERE forum_id = ' . $id);

    130. 

  130. 

    131. 

  131. 				$query31 = "select PARENT, ID from {$db_prefix}categories WHERE PARENT='$id' ORDER BY ID desc" ;

    132. 

  132. 				$result31 = mysql_query($query31) or die("categories.php - Error in query: $query31") ; 

    133. 

  133. 				while ($results31 = mysql_fetch_array($result31))

    134. 

  134. 				{

    135. 

  135. 					$sub_parent = $results31['PARENT'];

    136. 

  136. 					$sub_id = $results31['ID'];

    137. 

  137. 

    138. 

  138. 					$query212 = "select ID from {$db_prefix}posts WHERE FORUM_ID='$sub_id'" ;

    139. 

  139. 					$result212 = mysql_query($query212) or die("delete.php - Error in query: $query212") ;                                  

    140. 

  140. 					while ($results212 = mysql_fetch_array($result212))

    141. 

  141. 					{

    142. 

  142. 						$remove_id = $results212['ID'];

    143. 

  143. 

    144. 

  144. 						// first, delete attachments associated with these posts...

    145. 

  145. 

    146. 

  146. 						$query2121 = "select FILENAME from {$db_prefix}attachments WHERE POSTID='$remove_id'" ;

    147. 

  147. 						$result2121 = mysql_query($query2121) or die("delete.php - Error in query: $query2121") ;                                  

    148. 

  148. 						while ($results2121 = mysql_fetch_array($result2121))

    149. 

  149. 						{

    150. 

  150. 							$filename = strip_slashes($results2121['FILENAME']);

    151. 

  151. 

    152. 

  152. 							foreach (glob("uploads/attachments/$filename") as $filename)

    153. 

  153. 							{

    154. 

  154. 							   unlink($filename);

    155. 

  155. 							}

    156. 

  156. 

    157. 

  157. 							foreach (glob("uploads/attachments/t_$filename") as $filename)

    158. 

  158. 							{

    159. 

  159. 							   unlink($filename);

    160. 

  160. 							}

    161. 

  161. 

    162. 

  162. 							mysql_query("DELETE FROM {$db_prefix}attachments WHERE postid ='$remove_id'");

    163. 

  163. 						}

    164. 

  164. 					}

    165. 

  165. 

    166. 

  166.                                         mysql_query('

    167. 

  167.                                                 DELETE p.*, pl.*, plv.*

    168. 

  168.                                                 FROM ' . $db_prefix . 'posts p

    169. 

  169.                                                 LEFT JOIN ' . $db_prefix . 'polls pl

    170. 

  170.                                                         ON p.topic_id = pl.topic_id

    171. 

  171.                                                         LEFT JOIN ' . $db_prefix . 'polls_votes plv

    172. 

  172.                                                                 ON pl.id = plv.poll_id

    173. 

  173.                                                 WHERE forum_id = ' . $sub_id

    174. 

  174.                                         );

    175. 

  175. 					mysql_query("DELETE FROM {$db_prefix}categories WHERE id ='$sub_id'");

    176. 

  176. 					mysql_query("DELETE FROM {$db_prefix}permissions WHERE forum_id ='$sub_id'");

    177. 

  177. 					mysql_query('DELETE FROM ' . $db_prefix . 'moderators WHERE forum_id = ' . $sub_id);

    178. 

  178. 				}

    179. 

  179. 			}

    180. 

  180. 			

    181. 

  181. 			// perform auto-cache

    182. 

  182. 			include "scripts/php/auto_cache.php";

    183. 

  183. 			

    184. 

  184. 			# Re-cache moderators

    185. 

  185. 			$Cache->delete('moderators');

    186. 

  186. 			

    187. 

  187. 			template_hook("pages/admin/categories.template.php", "form_1");

    188. 

  188. 			

    189. 

  189. 			nova_redirect("index.php?page=admin&act=categories","admin/categories");

    190. 

  190. 		}

    191. 

  191. 		else

    192. 

  192. 		{

    193. 

  193. 			nova_redirect('index.php?page=error&error=28', 'error/28');

    194. 

  194. 		}

    195. 

  195. 	}

    196. 

  196. }

    197. 

  197. elseif ($_POST['post_form']!=''){

    198. 

  198. 

    199. 

  199. $token_id = escape_string($_POST['token_id']);

    200. 

  200. 

    201. 

  201. $token_name = "token_categories_reorder_$token_id";

    202. 

  202. 

    203. 

  203.  if (isset($_POST[$token_name]) && isset($_SESSION[$token_name]) && $_SESSION[$token_name] == $_POST[$token_name]){

    204. 

  204. 

    205. 

  205. $query3 = "select ID from {$db_prefix}categories ORDER BY ID desc LIMIT 1" ;

    206. 

  206. $result3 = mysql_query($query3) or die("categories.php - Error in query: $query3") ; 

    207. 

  207. $last = mysql_result($result3, 0);

    208. 

  208. 

    209. 

  209. $counted="1";

    210. 

  210. 

    211. 

  211. for ( $counter = $counted; $counter <= $last; $counter += 1) {

    212. 

  212. 

    213. 

  213. $forum_order="forum_order"."$counter";

    214. 

  214. $forum_id="forum_id"."$counter";

    215. 

  215. 

    216. 

  216. $forum_id=escape_string($_POST[$forum_id]);

    217. 

  217. $forum_order=escape_string($_POST[$forum_order]);

    218. 

  218. 

    219. 

  219. 

    220. 

  220. mysql_query("UPDATE {$db_prefix}categories SET forum_order='$forum_order' WHERE id='$forum_id'");

    221. 

  221. }

    222. 

  222. 

    223. 

  223. 	template_hook("pages/admin/categories.template.php", "form_2");

    224. 

  224. 

    225. 

  225. 	nova_redirect("index.php?page=admin&act=categories","admin/categories");

    226. 

  226. 

    227. 

  227. }

    228. 

  228. else{

    229. 

  229. 

    230. 

  230. 	nova_redirect("index.php?page=error&error=28","error/28");

    231. 

  231. 

    232. 

  232. }

    233. 

  233. }

    234. 

  234. 

    235. 

  235. elseif ($_POST['new_forum_form'] != '')

    236. 

  236. {

    237. 

  237. 	$token_id = escape_string($_POST['token_id']);

    238. 

  238. 

    239. 

  239. 	$token_name = "token_categories_new_$token_id";

    240. 

  240. 

    241. 

  241. 	if (isset($_POST[$token_name]) && isset($_SESSION[$token_name]) && $_SESSION[$token_name] == $_POST[$token_name])

    242. 

  242. 	{

    243. 

  243. 		$forum_name = escape_string($_POST['name']);

    244. 

  244. 		$forum_description = escape_string($_POST['description']);

    245. 

  245. 		$forum_rules = escape_string($_POST['forum_rules']);

    246. 

  246. 		$forum_parent = escape_string($_POST['parent']);

    247. 

  247. 		$forum_read_only = escape_string($_POST['read_only']);

    248. 

  248. 		$forum_post_count = escape_string($_POST['post_count']);

    249. 

  249. 		$forum_theme = escape_string($_POST['forum_theme']);

    250. 

  250. 

    251. 

  251.                 if ( ($_POST['redirect_url'] != '') && (!stristr($_POST['redirect_url'], "http://")) && (!stristr($_POST['redirect_url'], "ftp://")) && (!stristr($_POST['redirect_url'], "https://")) )

    252. 

  252.                 {

    253. 

  253.                 	$redirect_url = "http://" . escape_string($_POST['redirect_url']);

    254. 

  254.                 }

    255. 

  255.                 else

    256. 

  256.                 {

    257. 

  257. 			$redirect_url = escape_string($_POST['redirect_url']);

    258. 

  258.                 }

    259. 

  259. 

    260. 

  260. 		mysql_query("INSERT INTO {$db_prefix}categories (name, description, forum_rules, parent, forum_order, read_only, post_count, theme, redirect_url) VALUES ('$forum_name', '$forum_description', '$forum_rules', '$forum_parent', '0', '$forum_read_only', '$forum_post_count', '$forum_theme', '$redirect_url')");

    261. 

  261. 

    262. 

  262. 		// now go to the permissions page...

    263. 

  263. 		$query3 = "select ID from {$db_prefix}categories ORDER BY ID desc LIMIT 1" ;

    264. 

  264. 		$result3 = mysql_query($query3) or die("categories.php - Error in query: $query3") ; 

    265. 

  265. 		$last = mysql_result($result3, 0);

    266. 

  266. 

    267. 

  267. 		// perform auto-cache

    268. 

  268. 		include "scripts/php/auto_cache.php";	

    269. 

  269. 

    270. 

  270. 		template_hook("pages/admin/categories.template.php", "form_3");

    271. 

  271. 

    272. 

  272. 		nova_redirect("index.php?page=admin&act=permissions&id=$last","admin/permissions/$last");

    273. 

  273. 

    274. 

  274. 	}

    275. 

  275. 	else

    276. 

  276. 	{

    277. 

  277. 		nova_redirect("index.php?page=error&error=28","error/28");

    278. 

  278. 

    279. 

  279. 	}

    280. 

  280. }

    281. 

  281. elseif($_POST['post_edit_form'] != '')

    282. 

  282. {

    283. 

  283.         $id = escape_string($_POST['id']);

    284. 

  284. 

    285. 

  285.         $token_id = escape_string($_POST['token_id']);

    286. 

  286. 

    287. 

  287.         $token_name = "token_categories_edit_$id$token_id";

    288. 

  288. 

    289. 

  289.         if (isset($_POST[$token_name]) && isset($_SESSION[$token_name]) && $_SESSION[$token_name] == $_POST[$token_name])

    290. 

  290.         {

    291. 

  291.                 $forum_name=escape_string($_POST['name']);

    292. 

  292.                 $forum_description=escape_string($_POST['description']);

    293. 

  293.                 $forum_rules=escape_string($_POST['forum_rules']);

    294. 

  294.                 $forum_parent=escape_string($_POST['parent']);

    295. 

  295.                 $forum_read_only=escape_string($_POST['read_only']);

    296. 

  296.                 $forum_post_count=escape_string($_POST['post_count']);

    297. 

  297.                 $forum_theme=escape_string($_POST['forum_theme']);

    298. 

  298. 

    299. 

  299.                 if ( ($_POST['redirect_url'] != '') && (!stristr($_POST['redirect_url'], "http://")) && (!stristr($_POST['redirect_url'], "ftp://")) && (!stristr($_POST['redirect_url'], "https://")) )

    300. 

  300.                 {

    301. 

  301.                 	$redirect_url = "http://" . escape_string($_POST['redirect_url']);

    302. 

  302.                 }

    303. 

  303.                 else

    304. 

  304.                 {

    305. 

  305. 			$redirect_url = escape_string($_POST['redirect_url']);

    306. 

  306.                 }

    307. 

  307. 

    308. 

  308.                 mysql_query("UPDATE {$db_prefix}categories SET name='$forum_name', description='$forum_description', forum_rules='$forum_rules', parent='$forum_parent', read_only='$forum_read_only', post_count='$forum_post_count', theme='$forum_theme', redirect_url='$redirect_url' WHERE id = '$id' ");

    309. 

  309. 

    310. 

  310. 	        template_hook("pages/admin/categories.template.php", "form_4");

    311. 

  311. 

    312. 

  312. 	        nova_redirect("index.php?page=admin&act=categories","admin/categories");

    313. 

  313. 

    314. 

  314.         }

    315. 

  315.         else

    316. 

  316.         {

    317. 

  317.         	nova_redirect("index.php?page=error&error=28","error/28");

    318. 

  318. 

    319. 

  319.         }

    320. 

  320. }

    321. 

  321. 

    322. 

  322. elseif($_GET['func'] == 'edit')

    323. 

  323. {

    324. 

  324.         $token_id = md5(microtime());

    325. 

  325.         $token = md5(uniqid(rand(),true));

    326. 

  326. 

    327. 

  327.         $category_edit_id = (int) $_GET['id'];

    328. 

  328. 

    329. 

  329.         $token_name = "token_categories_edit_$category_edit_id$token_id";

    330. 

  330. 

    331. 

  331.         $_SESSION[$token_name] = $token;

    332. 

  332. 

    333. 

  333.         $query3 = "select ID, NAME, DESCRIPTION, FORUM_RULES, PARENT, READ_ONLY, POST_COUNT, THEME, REDIRECT_URL from {$db_prefix}categories WHERE ID='$category_edit_id'" ;

    334. 

  334.         $result3 = mysql_query($query3) or die("attachments.php - Error in query: $query3") ;

    335. 

  335. 

    336. 

  336.         while ($results3 = mysql_fetch_array($result3))

    337. 

  337.         {

    338. 

  338.                 $id = $results3['ID'];

    339. 

  339.                 $name = strip_slashes($results3['NAME']);

    340. 

  340.                 $description = strip_slashes($results3['DESCRIPTION']);

    341. 

  341.                 $forum_rules = strip_slashes($results3['FORUM_RULES']);

    342. 

  342.                 $parent = $results3['PARENT'];

    343. 

  343.                 $read_only = $results3['READ_ONLY'];

    344. 

  344.                 $post_count = $results3['POST_COUNT'];

    345. 

  345.                 $forum_theme = strip_slashes($results3['FORUM_THEME']);

    346. 

  346.                 $redirect_url = strip_slashes($results3['REDIRECT_URL']);

    347. 

  347. 

    348. 

  348.                 $forum_rules = str_replace("<br />", "", $forum_rules);

    349. 

  349. 

    350. 

  350.                 $query31 = "select NAME from {$db_prefix}categories WHERE ID='$parent'" ;

    351. 

  351.                 $result31 = mysql_query($query31) or die("attachments.php - Error in query: $query31") ; 

    352. 

  352.                 $parent_name = strip_slashes(mysql_result($result31, 0));

    353. 

  353. 

    354. 

  354.                 template_hook("pages/admin/categories.template.php", "5");

    355. 

  355. 

    356. 

  356.                 $query34 = "select ID, NAME, PARENT from {$db_prefix}categories WHERE PARENT='0' AND ID!='$id'";

    357. 

  357.                 $result34 = mysql_query($query34) or die("attachments.php - Error in query: $query34") ;

    358. 

  358. 

    359. 

  359.                 while ($results34 = mysql_fetch_array($result34))

    360. 

  360.                 {

    361. 

  361.                         $id = $results34['ID'];

    362. 

  362.                         $name = strip_slashes($results34['NAME']);

    363. 

  363.                         $parent = $results34['PARENT'];

    364. 

  364. 

    365. 

  365.                         template_hook("pages/admin/categories.template.php", "6");

    366. 

  366. 

    367. 

  367.                         $query4 = "select ID, NAME from {$db_prefix}categories WHERE PARENT='$id' AND ID!='$category_edit_id'";

    368. 

  368.                         $result4 = mysql_query($query4) or die("categories.php - Error in query: $query4") ;

    369. 

  369. 

    370. 

  370.                         while ($results4 = mysql_fetch_array($result4))

    371. 

  371.                         {

    372. 

  372.                                 $id = $results4['ID'];

    373. 

  373.                                 $name = strip_slashes($results4['NAME']);

    374. 

  374. 

    375. 

  375.                                 template_hook("pages/admin/categories.template.php", "7");

    376. 

  376. 

    377. 

  377.                         }

    378. 

  378. 

    379. 

  379.                 }

    380. 

  380. 

    381. 

  381.                 template_hook("pages/admin/categories.template.php", "8");

    382. 

  382. 

    383. 

  383.                 list_themes("themes/");

    384. 

  384. 

    385. 

  385.                 template_hook("pages/admin/categories.template.php", "27");

    386. 

  386.         }

    387. 

  387. }

    388. 

  388. elseif ($_GET['func'] == 'new')

    389. 

  389. {

    390. 

  390.         $token_id = md5(microtime());

    391. 

  391.         $token = md5(uniqid(rand(),true));

    392. 

  392. 

    393. 

  393.         $token_name = "token_categories_new_$token_id";

    394. 

  394. 

    395. 

  395.         $_SESSION[$token_name] = $token;

    396. 

  396. 

    397. 

  397.         template_hook("pages/admin/categories.template.php", "10");

    398. 

  398. 

    399. 

  399.         if ($_GET['id'] != '')

    400. 

  400.         {

    401. 

  401.                 $id = escape_string($_GET['id']);

    402. 

  402. 

    403. 

  403.                 $query3 = "select ID, NAME, PARENT from {$db_prefix}categories WHERE ID='$id'";

    404. 

  404.         }

    405. 

  405.         else

    406. 

  406.         {

    407. 

  407.                 $query3 = "select ID, NAME, PARENT from {$db_prefix}categories WHERE PARENT='0'";

    408. 

  408.                 echo "<option value='0'>".$lang_admin['categories_edit_parent_no']."</option>";

    409. 

  409.         }

    410. 

  410. 

    411. 

  411.         $result3 = mysql_query($query3) or die("categories.php - Error in query: $query3") ; 

    412. 

  412. 

    413. 

  413.         while ($results3 = mysql_fetch_array($result3))

    414. 

  414.         {

    415. 

  415.                 $id = $results3['ID'];

    416. 

  416.                 $name = strip_slashes($results3['NAME']);

    417. 

  417.                 $parent = $results3['PARENT'];

    418. 

  418. 

    419. 

  419.                 template_hook("pages/admin/categories.template.php", "11");

    420. 

  420. 

    421. 

  421.                 if ($_GET['id'] != '')

    422. 

  422.                 {

    423. 

  423.                         $query4 = "select ID, NAME from {$db_prefix}categories WHERE PARENT='$id'";

    424. 

  424.                         $result4 = mysql_query($query4) or die("categories.php - Error in query: $query4") ;

    425. 

  425. 

    426. 

  426.                         while ($results4 = mysql_fetch_array($result4))

    427. 

  427.                         {

    428. 

  428.                                 $id = $results4['ID'];

    429. 

  429.                                 $name = strip_slashes($results4['NAME']);

    430. 

  430. 

    431. 

  431.                                 template_hook("pages/admin/categories.template.php", "12");

    432. 

  432. 

    433. 

  433.                         }

    434. 

  434.                 }

    435. 

  435.         }

    436. 

  436. 

    437. 

  437.         template_hook("pages/admin/categories.template.php", "13");

    438. 

  438. 

    439. 

  439.         list_themes("themes/");

    440. 

  440. 

    441. 

  441.         template_hook("pages/admin/categories.template.php", "26");

    442. 

  442. 

    443. 

  443. }

    444. 

  444. else

    445. 

  445. {

    446. 

  446. 

    447. 

  447. 

    448. 

  448. $token_id = md5(microtime());

    449. 

  449. $token = md5(uniqid(rand(),true));

    450. 

  450. 

    451. 

  451. $token_name = "token_categories_reorder_$token_id";

    452. 

  452. 

    453. 

  453. $_SESSION[$token_name] = $token;

    454. 

  454. 

    455. 

  455. template_hook("pages/admin/categories.template.php", "14");

    456. 

  456. 

    457. 

  457. $query3 = "select ID, NAME, DESCRIPTION, FORUM_ORDER from {$db_prefix}categories WHERE PARENT='0' ORDER BY FORUM_ORDER, ID asc" ;

    458. 

  458. $result3 = mysql_query($query3) or die("categories.php - Error in query: $query3") ; 

    459. 

  459. $number_of_forums=mysql_num_rows($result3);

    460. 

  460. while ($results3 = mysql_fetch_array($result3)){

    461. 

  461. $id = $results3['ID'];

    462. 

  462. $parent_id = $results3['ID'];

    463. 

  463. $name = strip_slashes($results3['NAME']);

    464. 

  464. $description = strip_slashes($results3['DESCRIPTION']);

    465. 

  465. $forum_order = $results3['FORUM_ORDER'];

    466. 

  466. 

    467. 

  467. template_hook("pages/admin/categories.template.php", "15");

    468. 

  468. 

    469. 

  469. $root_counter="1";

    470. 

  470. 

    471. 

  471. for ( $root_counter = $counted; $root_counter <= $number_of_forums; $root_counter += 1) {

    472. 

  472. 

    473. 

  473. template_hook("pages/admin/categories.template.php", "16");

    474. 

  474. 

    475. 

  475. }

    476. 

  476. 

    477. 

  477. template_hook("pages/admin/categories.template.php", "17");

    478. 

  478. 

    479. 

  479. $query4 = "select ID, NAME, DESCRIPTION, FORUM_ORDER, READ_ONLY from {$db_prefix}categories WHERE PARENT='$id' ORDER BY FORUM_ORDER, ID asc" ;

    480. 

  480. $result4 = mysql_query($query4) or die("categories.php - Error in query: $query4") ; 

    481. 

  481. $number_of_sub_forums=mysql_num_rows($result4);

    482. 

  482. while ($results4 = mysql_fetch_array($result4)){

    483. 

  483. $id = $results4['ID'];

    484. 

  484. $name = strip_slashes($results4['NAME']);

    485. 

  485. $read_only = $results4['READ_ONLY'];

    486. 

  486. $description = strip_slashes($results4['DESCRIPTION']);

    487. 

  487. $forum_order = $results4['FORUM_ORDER'];

    488. 

  488. 

    489. 

  489. $sub_counter="1";

    490. 

  490. 

    491. 

  491. template_hook("pages/admin/categories.template.php", "18");

    492. 

  492. 

    493. 

  493. for ( $sub_counter = $counted; $sub_counter <= $number_of_sub_forums; $sub_counter += 1) {

    494. 

  494. 

    495. 

  495. template_hook("pages/admin/categories.template.php", "19");

    496. 

  496. 

    497. 

  497. }

    498. 

  498. 

    499. 

  499. template_hook("pages/admin/categories.template.php", "20");

    500. 

  500. 

    501. 

  501. // sub-forums...

    502. 

  502. $sub_counter_two="0";

    503. 

  503. $query_sub = "select ID, NAME, DESCRIPTION, FORUM_ORDER, READ_ONLY from {$db_prefix}categories WHERE PARENT='$id' ORDER BY FORUM_ORDER, ID asc" ;

    504. 

  504. $result_sub = mysql_query($query_sub) or die("categories.php - Error in query: $query_sub") ; 

    505. 

  505. $number_of_sub_forums_two=mysql_num_rows($result_sub);

    506. 

  506. while ($results_sub = mysql_fetch_array($result_sub)){

    507. 

  507. $id = $results_sub['ID'];

    508. 

  508. $name = strip_slashes($results_sub['NAME']);

    509. 

  509. $read_only = $results_sub['READ_ONLY'];

    510. 

  510. $description = strip_slashes($results_sub['DESCRIPTION']);

    511. 

  511. $forum_order_two = $results_sub['FORUM_ORDER'];

    512. 

  512. 

    513. 

  513. $sub_counter_two="1";

    514. 

  514. 

    515. 

  515. template_hook("pages/admin/categories.template.php", "21");

    516. 

  516. 

    517. 

  517. for ( $sub_counter_two = $counted_two; $sub_counter_two <= $number_of_sub_forums_two; $sub_counter_two += 1) {

    518. 

  518. 

    519. 

  519. template_hook("pages/admin/categories.template.php", "22");

    520. 

  520. 

    521. 

  521. }

    522. 

  522. 

    523. 

  523. template_hook("pages/admin/categories.template.php", "23");

    524. 

  524. 

    525. 

  525. }

    526. 

  526. 

    527. 

  527. }

    528. 

  528. 

    529. 

  529. template_hook("pages/admin/categories.template.php", "24");

    530. 

  530. 

    531. 

  531. }

    532. 

  532. 

    533. 

  533. template_hook("pages/admin/categories.template.php", "25");

    534. 

  534. 

    535. 

  535. }

    536. 

  536. 

    537. 

  537. template_hook("pages/admin/categories.template.php", "end");

    538. 

  538. ?>

    539. 

  539.