PageRenderTime 47ms CodeModel.GetById 16ms RepoModel.GetById 0ms app.codeStats 0ms

/modules/Gallery/admin.php

https://code.google.com/p/nuked-klan/
PHP | 985 lines | 814 code | 147 blank | 24 comment | 174 complexity | 28389b10be065b2dfa99a6b92b9df45c MD5 | raw file
Possible License(s): GPL-3.0, BSD-3-Clause, GPL-2.0, LGPL-3.0, LGPL-2.1 
    

  1. <?php 
    2. 

  2. // -------------------------------------------------------------------------//
    3. 

  3. // Nuked-KlaN - PHP Portal                                                  //
    4. 

  4. // http://www.nuked-klan.org                                                //
    5. 

  5. // -------------------------------------------------------------------------//
    6. 

  6. // This program is free software. you can redistribute it and/or modify     //
    7. 

  7. // it under the terms of the GNU General Public License as published by     //
    8. 

  8. // the Free Software Foundation; either version 2 of the License.           //
    9. 

  9. // -------------------------------------------------------------------------//
    10. 

  10. if (!defined("INDEX_CHECK"))
    11. 

  11. {
    12. 

  12.     die ("<div style=\"text-align: center;\">You cannot open this page directly</div>");
    13. 

  13. } 
    14. 

  14. 

  15. global $user, $language;
    16. 

  16. translate("modules/Gallery/lang/" . $language . ".lang.php");
    17. 

  17. include("modules/Admin/design.php");
    18. 

  18. admintop();
    19. 

  19. 

  20. if (!$user)
    21. 

  21. {
    22. 

  22.     $visiteur = 0;
    23. 

  23. } 
    24. 

  24. else
    25. 

  25. {
    26. 

  26.     $visiteur = $user[1];
    27. 

  27. } 
    28. 

  28. $ModName = basename(dirname(__FILE__));
    29. 

  29. $level_admin = admin_mod($ModName);
    30. 

  30. if ($visiteur >= $level_admin && $level_admin > -1)
    31. 

  31. {
    32. 

  32.     function add_screen()
    33. 

  33.     {
    34. 

  34.         global $language;
    35. 

  35. 

  36.         echo "<div class=\"content-box\">\n" //<!-- Start Content Box -->
    37. 

  37.         . "<div class=\"content-box-header\"><h3>" . _ADMINGALLERY . "</h3>\n"
    38. 

  38.         . "<div style=\"text-align:right;\"><a href=\"help/" . $language . "/Gallery.php\" rel=\"modal\">\n"
    39. 

  39.         . "<img style=\"border: 0;\" src=\"help/help.gif\" alt=\"\" title=\"" . _HELP . "\" /></a>\n"
    40. 

  40.         . "</div></div>\n"
    41. 

  41.         . "<div class=\"tab-content\" id=\"tab2\"><div style=\"text-align: center;\"><b><a href=\"index.php?file=Gallery&amp;page=admin\">" . _GALLERY . "</a> | "
    42. 

  42.         . "</b>" . _ADDSCREEN . "<b> | "
    43. 

  43.         . "<a href=\"index.php?file=Gallery&amp;page=admin&amp;op=main_cat\">" . _CATMANAGEMENT . "</a> | "
    44. 

  44.         . "<a href=\"index.php?file=Gallery&amp;page=admin&amp;op=main_pref\">" . _PREFS . "</a></b></div><br />\n"
    45. 

  45.         . "<form method=\"post\" action=\"index.php?file=Gallery&amp;page=admin&amp;op=send_screen\" enctype=\"multipart/form-data\" onsubmit=\"backslash('img_texte');\">\n"
    46. 

  46.         . "<table style=\"margin-left: auto;margin-right: auto;text-align: left;\" border=\"0\" cellspacing=\"0\" cellpadding=\"2\">\n"	
    47. 

  47.         . "<tr><td><b>" . _TITLE . " :</b> <input type=\"text\" name=\"titre\" size=\"44\" /></td></tr>\n"
    48. 

  48.         . "<tr><td><b>" . _CAT . "</b>: <select name=\"cat\">\n";
    49. 

  49. 

  50.         select_cat();
    51. 

  51. 

  52.         echo "</select></td></tr><tr><td><b>" . _AUTHOR . " :</b> <input type=\"text\" name=\"auteur\" size=\"30\" /></td></tr>\n";
    53. 

  53. 

  54.         echo "</td></tr><tr><td><b>" . _DESCR . " :</b></td></tr>\n"
    55. 

  55.         . "<tr><td><textarea class=\"editor\" id=\"img_texte\" name=\"description\" cols=\"66\" rows=\"10\"></textarea></td></tr>\n"
    56. 

  56.         . "<tr><td>&nbsp;</td></tr>\n"
    57. 

  57.         . "<tr><td><b>" . _URLIMG . " :</b> <input type=\"text\" name=\"url\" size=\"50\" maxlength=\"200\" value=\"http://\" /></td></tr>\n"
    58. 

  58.         . "<tr><td><b>" . _UPIMG . " :</b><br /><input type=\"file\" name=\"fichiernom\" />&nbsp;<input class=\"checkbox\" type=\"checkbox\" name=\"ecrase_screen\" value=\"1\" />&nbsp;" . _REPLACE . "</td></tr>\n"
    59. 

  59.         . "<tr><td>&nbsp;</td></tr>\n"
    60. 

  60.         . "<tr><td><b>" . _URLIMG2 . " :</b> <input type=\"text\" name=\"url2\" size=\"46\" maxlength=\"200\" value=\"http://\" /></td></tr>\n"
    61. 

  61.         . "<tr><td><b>" . _URLFILE . " :</b> <input type=\"text\" name=\"url_file\" size=\"51\" maxlength=\"200\" value=\"http://\" /></td></tr>\n"
    62. 

  62.         . "<tr><td>&nbsp;</td></tr><tr><td align=\"center\"><input type=\"submit\" value=\"" . _ADDSCREEN . "\" /></td></tr></table>\n"
    63. 

  63.         . "<div style=\"text-align: center;\"><br />[ <a href=\"index.php?file=Gallery&amp;page=admin\"><b>" . _BACK . "</b></a> ]</div></form><br /></div></div>\n";
    64. 

  64.     } 
    65. 

  65. 

  66.     function send_screen($titre, $description, $auteur, $fichiernom, $maxi, $cat, $url, $url2, $url_file, $ecrase_screen)
    67. 

  67.     {
    68. 

  68.         global $nuked, $user;
    69. 

  69.         include("modules/Gallery/config.php");
    70. 

  70. 

  71.         if ($url == "http://") $url = "";
    72. 

  72.         if ($url2 == "http://") $url2 = "";
    73. 

  73.         if ($url_file == "http://") $url_file = ""; 
    74. 

  74. 

  75.         if ($_FILES['fichiernom']['name'] != "" || $url != "")
    76. 

  76.         {        
    77. 

  77.             if ($_FILES['fichiernom']['name'] != "")
    78. 

  78.             {
    79. 

  79.                 $filename = $_FILES['fichiernom']['name'];
    80. 

  80.                 $filename = str_replace(" ", "_", $filename);
    81. 

  81.                 $url_screen = $rep_img . $filename;
    82. 

  82.                 $url = $url_screen;
    83. 

  83.             }
    84. 

  84.             else
    85. 

  85.             {
    86. 

  86.                 $filename = substr(strrchr($url, '/'), 1 );
    87. 

  87.             }
    88. 

  88.                                 
    89. 

  89.                 
    90. 

  90.             if (($_FILES['fichiernom']['name'] == "" && $url != "") || (!is_file($url_screen) || ( $ecrase_screen == 1 && is_file($url_screen))))
    91. 

  91.             {
    92. 

  92.                 if ($_FILES['fichiernom']['name'] != "" && (!is_file($url_screen) || ( $ecrase_screen == 1 && is_file($url_screen))))
    93. 

  93.                 {
    94. 

  94.                     $ext = pathinfo($filename, PATHINFO_EXTENSION);
    95. 

  95. 

  96.                     if ($ext == "jpg" || $ext == "jpeg" || $ext == "JPG" || $ext == "JPEG" || $ext == "gif" || $ext == "GIF" || $ext == "png" || $ext == "PNG")
    97. 

  97.                     {
    98. 

  98.                         move_uploaded_file($_FILES['fichiernom']['tmp_name'], $url_screen) or die ("Upload file failed !!!");
    99. 

  99.                         @chmod ($url_screen, 0644);
    100. 

  100.                     }
    101. 

  101.                     else
    102. 

  102.                     {
    103. 

  103.                      echo "<div class=\"notification error png_bg\">\n"
    104. 

  104.                     . "<div>\n"
    105. 

  105.                     . "No image file !"
    106. 

  106.                     . "</div>\n"
    107. 

  107.                     . "</div>\n";
    108. 

  108.                     
    109. 

  109.                     redirect("index.php?file=Gallery&page=admin&op=add_screen", 2);
    110. 

  110.                     adminfoot();
    111. 

  111.                     exit();
    112. 

  112.                     }
    113. 

  113.                 }
    114. 

  114. 

  115.                 if ($url2 == "" && $image_gd == "on" && @extension_loaded('gd') && !preg_match("`http://`i", $url) && is_file($url))
    116. 

  116.                 {
    117. 

  117.                     $size = @getimagesize($url);
    118. 

  118. 

  119.                     if ($size && $size[0] > $img_screen1)
    120. 

  120.                     {
    121. 

  121.                         $f = explode(".", $filename);
    122. 

  122.                         $end = count($f) - 1;
    123. 

  123.                         $ext = $f[$end];
    124. 

  124.                         $file_name = str_ireplace("." . $ext, "", $filename);
    125. 

  125. 

  126.                         if (preg_match("`jpg`i", $ext) || preg_match("`jpeg`i", $ext)) $src = @imagecreatefromjpeg($url);
    127. 

  127.                         if (preg_match("`png`i", $ext)) $src = @imagecreatefrompng($url);
    128. 

  128.                         if (preg_match("`gif`i", $ext)) $src = @imagecreatefromgif($url);
    129. 

  129.                         if (preg_match("`bmp`i", $ext)) $src = @imagecreatefromwbmp($url);
    130. 

  130. 

  131.                         $img = @imagecreatetruecolor($img_screen1, round(($img_screen1/$size[0])*$size[1]));
    132. 

  132.                         if (!$img) $img = @imagecreate($img_screen1, round(($img_screen1/$size[0])*$size[1]));
    133. 

  133. 

  134.                         @imagecopyresampled($img, $src, 0, 0, 0, 0, $img_screen1, round($size[1]*($img_screen1/$size[0])), $size[0], $size[1]);
    135. 

  135. 

  136.                         $temp = $rep_img_gd . $file_name . "_tmb." . $ext;
    137. 

  137.                         if (is_file($temp)) $miniature = $rep_img_gd . time() . $file_name . "_tmb." . $ext;
    138. 

  138.                         else  $miniature = $temp;
    139. 

  139. 

  140.                         if (preg_match("`jpg`i", $ext) || preg_match("`jpeg`i", $ext)) @ImageJPEG($img, $miniature);
    141. 

  141.                         if (preg_match("`png`i", $ext)) @ImagePNG($img, $miniature);
    142. 

  142.                         if (preg_match("`bmp`i", $ext)) @imagewbmp($img, $miniature);
    143. 

  143. 

  144.                         if (preg_match("`gif`i", $ext) && @function_exists("imagegif")) @ImageGIF($img, $miniature);
    145. 

  145.                         else @ImageJPEG($img, $miniature);
    146. 

  146. 

  147.                         if (is_file($miniature)) $url2 = $miniature;
    148. 

  148.                     }
    149. 

  149.                 }
    150. 

  150.                         
    151. 

  151.                 $titre = mysql_real_escape_string(stripslashes($titre));
    152. 

  152.                 $description = html_entity_decode($description);
    153. 

  153.                 $description = mysql_real_escape_string(stripslashes($description));
    154. 

  154.                 $auteur = mysql_real_escape_string(stripslashes($auteur));
    155. 

  155.                 $date = time();
    156. 

  156. 

  157.                 $sql = mysql_query("INSERT INTO " . GALLERY_TABLE . " ( `sid` , `titre` , `description` , `url` , `url2` , `url_file` , `cat` , `date` , `autor` ) VALUES ( '' , '" . $titre . "' , '" . $description . "' , '" . $url . "' , '" . $url2 . "' , '" . $url_file . "' , '" . $cat . "' , '" . $date . "' , '" . $auteur . "')");
    158. 

  158.                 
    159. 

  159.                 // Action
    160. 

  160.                 $texteaction = "". _ACTIONADDGAL .": ".$titre."";
    161. 

  161.                 $acdate = time();
    162. 

  162.                 $sqlaction = mysql_query("INSERT INTO ". $nuked['prefix'] ."_action  (`date`, `pseudo`, `action`)  VALUES ('".$acdate."', '".$user[0]."', '".$texteaction."')");
    163. 

  163.                 // Fin action
    164. 

  164.                 echo "<div class=\"notification success png_bg\">\n"
    165. 

  165.                 . "<div>\n"
    166. 

  166.                 . "" . _SCREENADD . "\n"
    167. 

  167.                 . "</div>\n"
    168. 

  168.                 . "</div>\n";
    169. 

  169.                 $sqls = mysql_query("SELECT sid FROM " . GALLERY_TABLE . " WHERE date = '" . $date . "' AND titre='" . $titre . "'");
    170. 

  170.                 list($sid) = mysql_fetch_array($sqls);
    171. 

  171.                 echo "<script>\n"
    172. 

  172.                 ."setTimeout('screen()','3000');\n"
    173. 

  173.                 ."function screen() { \n"
    174. 

  174.                 ."screenon('index.php?file=Gallery&op=description&sid=".$sid."&orderby=news', 'index.php?file=Gallery&page=admin');\n"
    175. 

  175.                 ."}\n"
    176. 

  176.                 ."</script>\n";
    177. 

  177.             }
    178. 

  178.             else 
    179. 

  179.             {
    180. 

  180.                 echo "<div class=\"notification error png_bg\">\n"
    181. 

  181.                 . "<div>\n"
    182. 

  182.                 . "" . _DEJASCREEN . "<br />" . _REPLACEIT . "<br /><a href=\"javascript:history.back();\"><b>" . _BACK . "</b></a>"
    183. 

  183.                 . "</div>\n"
    184. 

  184.                 . "</div>\n";
    185. 

  185.             }
    186. 

  186.         }
    187. 

  187.         else
    188. 

  188.         {
    189. 

  189.             echo "<div class=\"notification error png_bg\">\n"
    190. 

  190.             . "<div>\n"
    191. 

  191.             . ""._SPECIFY.""
    192. 

  192.             . "</div>\n"
    193. 

  193.             . "</div>\n";
    194. 

  194.             
    195. 

  195.             redirect("index.php?file=Gallery&page=admin&op=add_screen", 3);
    196. 

  196.         }
    197. 

  197. 

  198.     } 
    199. 

  199. 

  200.     function del_screen($sid)
    201. 

  201.     {
    202. 

  202.         global $nuked, $user;
    203. 

  203. 

  204.         $sqls = mysql_query("SELECT titre FROM " . GALLERY_TABLE . " WHERE sid = '" . $sid . "'");
    205. 

  205.         list($titre) = mysql_fetch_array($sqls);
    206. 

  206.         $titre = mysql_real_escape_string($titre);
    207. 

  207.         $sql = mysql_query("DELETE FROM " . GALLERY_TABLE . " WHERE sid = '" . $sid . "'");
    208. 

  208.         $del_com = mysql_query("DELETE FROM " . COMMENT_TABLE . " WHERE im_id = '" . $sid . "' AND module = 'Gallery'");
    209. 

  209.         $del_vote = mysql_query("DELETE FROM " . VOTE_TABLE . " WHERE vid = '" . $sid . "' AND module = 'Gallery'");
    210. 

  210.         // Action
    211. 

  211.         $texteaction = "". _ACTIONDELGAL .": ".$titre."";
    212. 

  212.         $acdate = time();
    213. 

  213.         $sqlaction = mysql_query("INSERT INTO ". $nuked['prefix'] ."_action  (`date`, `pseudo`, `action`)  VALUES ('".$acdate."', '".$user[0]."', '".$texteaction."')");
    214. 

  214.         //Fin action
    215. 

  215.         
    216. 

  216.         echo "<div class=\"notification success png_bg\">\n"
    217. 

  217.         . "<div>\n"
    218. 

  218.         . "" . _SCREENDEL . "\n"
    219. 

  219.         . "</div>\n"
    220. 

  220.         . "</div>\n";
    221. 

  221.         redirect("index.php?file=Gallery&page=admin", 1);
    222. 

  222.     } 
    223. 

  223. 

  224. 

  225.     function modif_img($sid, $titre, $description, $auteur, $fichiernom, $maxi, $cat, $url, $url2, $url_file, $ecrase_screen)
    226. 

  226.     {
    227. 

  227.         global $nuked, $user;
    228. 

  228. 

  229.         include("modules/Gallery/config.php");
    230. 

  230. 

  231.         $titre = mysql_real_escape_string(stripslashes($titre));
    232. 

  232.         $description = html_entity_decode($description);
    233. 

  233.         $description = mysql_real_escape_string(stripslashes($description));
    234. 

  234.         $auteur = mysql_real_escape_string(stripslashes($auteur));
    235. 

  235. 

  236.         if ($_FILES['fichiernom']['name'] != "")
    237. 

  237.         {     
    238. 

  238.         $img_name = $_FILES['fichiernom']['name'];
    239. 

  239.         $img_name = str_replace(" ", "_", $img_name);
    240. 

  240.         $img_url = $rep_img . $img_name;
    241. 

  241. 

  242.         if (!is_file($img_url) || $ecrase_screen == 1)
    243. 

  243.         {
    244. 

  244.             $ext = pathinfo($img_name, PATHINFO_EXTENSION);
    245. 

  245. 

  246.             if ($ext == "jpg" || $ext == "jpeg" || $ext == "JPG" || $ext == "JPEG" || $ext == "gif" || $ext == "GIF" || $ext == "png" || $ext == "PNG")
    247. 

  247.             {
    248. 

  248.                 move_uploaded_file($_FILES['fichiernom']['tmp_name'], $img_url) or die ("Upload file failed !!!");
    249. 

  249.                 @chmod ($img_url, 0644);
    250. 

  250.             }
    251. 

  251.             else
    252. 

  252.             {
    253. 

  253.                 echo "<br /><br /><div style=\"text-align: center;\">No image file !!!</div><br /><br />";
    254. 

  254.                 redirect("index.php?file=Gallery&page=admin&op=edit_screen&sid=" . $sid, 2);
    255. 

  255.                 adminfoot();
    256. 

  256.                 exit();
    257. 

  257.             }
    258. 

  258.         }
    259. 

  259.         else
    260. 

  260.         {
    261. 

  261.             echo "<br /><br /><div style=\"text-align: center;\">" . _DEJASCREEN . "<br />" . _REPLACEIT . "<br /><br /><a href=\"javascript:history.back();\"><b>" . _BACK . "</b></a></div><br /><br />";
    262. 

  262.             adminfoot();
    263. 

  263.             exit();
    264. 

  264.         }
    265. 

  265.     }
    266. 

  266.     else
    267. 

  267.     {
    268. 

  268.         $img_url = $url;
    269. 

  269.         $img_name = substr(strrchr($img_url, '/'), 1 );
    270. 

  270.     }
    271. 

  271. 

  272.     if ($url2 == "" && $image_gd == "on" && @extension_loaded('gd') && !preg_match("`http://`i", $img_url) && is_file($img_url))
    273. 

  273.     {
    274. 

  274.         $size = @getimagesize($img_url);
    275. 

  275. 

  276.         if ($size[0] > $img_screen1)
    277. 

  277.         {
    278. 

  278.             $f = explode(".", $img_name);
    279. 

  279.             $end = count($f) - 1;
    280. 

  280.             $ext = $f[$end];
    281. 

  281.             $file_name = preg_replace("." . $ext, "", $img_name);
    282. 

  282. 

  283.             if (preg_match("`jpg`i", $ext) || preg_match("`jpeg`i", $ext)) $src = @imagecreatefromjpeg($img_url);
    284. 

  284.             if (preg_match("`png`i", $ext)) $src = @imagecreatefrompng($img_url);
    285. 

  285.             if (preg_match("`gif`i", $ext)) $src = @imagecreatefromgif($img_url);
    286. 

  286.             if (preg_match("`bmp`i", $ext)) $src = @imagecreatefromwbmp($img_url);
    287. 

  287. 

  288.             $img = @imagecreatetruecolor($img_screen1, round(($img_screen1/$size[0])*$size[1]));
    289. 

  289.             if (!$img) $img = @imagecreate($img_screen1, round(($img_screen1/$size[0])*$size[1]));
    290. 

  290. 

  291.             @imagecopyresampled($img, $src, 0, 0, 0, 0, $img_screen1, round($size[1]*($img_screen1/$size[0])), $size[0], $size[1]);
    292. 

  292. 

  293.             $temp = $rep_img_gd . $file_name . "_tmb." . $ext;
    294. 

  294.             if (is_file($temp)) $miniature = $rep_img_gd . time() . $file_name . "_tmb." . $ext;
    295. 

  295.             else  $miniature = $temp;	
    296. 

  296. 

  297.             if (preg_match("`jpg`i", $ext) || preg_match("`jpeg`i", $ext)) @ImageJPEG($img, $miniature);
    298. 

  298.             if (preg_match("`png`i", $ext)) @ImagePNG($img, $miniature);
    299. 

  299.             if (preg_match("`bmp`i", $ext)) @imagewbmp($img, $miniature);
    300. 

  300. 

  301.             if (preg_match("`gif`i", $ext) && @function_exists("imagegif")) @ImageGIF($img, $miniature);
    302. 

  302.             else @ImageJPEG($img, $miniature);	
    303. 

  303.      
    304. 

  304.             if (is_file($miniature)) $url2 = $miniature;
    305. 

  305.         }
    306. 

  306.     }
    307. 

  307. 

  308.         $sql = mysql_query("UPDATE " . GALLERY_TABLE . " SET titre = '" . $titre . "', description = '" . $description . "', autor = '" . $auteur . "', url = '" . $img_url . "', url2 = '" . $url2 . "', url_file = '" . $url_file . "', cat = '" . $cat . "' WHERE sid = '" . $sid . "'");
    309. 

  309.         // Action
    310. 

  310.         $texteaction = "". _ACTIONMODIFGAL .": ".$titre."";
    311. 

  311.         $acdate = time();
    312. 

  312.         $sqlaction = mysql_query("INSERT INTO ". $nuked['prefix'] ."_action  (`date`, `pseudo`, `action`)  VALUES ('".$acdate."', '".$user[0]."', '".$texteaction."')");
    313. 

  313.         //Fin action
    314. 

  314.         
    315. 

  315.         echo "<div class=\"notification success png_bg\">\n"
    316. 

  316.         . "<div>\n"
    317. 

  317.         . "" . _SCREENMODIF . "\n"
    318. 

  318.         . "</div>\n"
    319. 

  319.         . "</div>\n";
    320. 

  320.         echo "<script>\n"
    321. 

  321.         ."setTimeout('screen()','3000');\n"
    322. 

  322.         ."function screen() { \n"
    323. 

  323.         ."screenon('index.php?file=Gallery&op=description&sid=".$sid."&orderby=news', 'index.php?file=Gallery&page=admin');\n"
    324. 

  324.         ."}\n"
    325. 

  325.         ."</script>\n";
    326. 

  326.     } 
    327. 

  327. 

  328. 

  329. 

  330.     function main()
    331. 

  331.     {
    332. 

  332.         global $nuked, $language;
    333. 

  333. 

  334.         $nb_img_guest = 30;
    335. 

  335. 

  336.         $sql3 = mysql_query("SELECT sid FROM " . GALLERY_TABLE);
    337. 

  337.         $count = mysql_num_rows($sql3);
    338. 

  338. 

  339.         if (!$_REQUEST['p']) $_REQUEST['p'] = 1;
    340. 

  340.         $start = $_REQUEST['p'] * $nb_img_guest - $nb_img_guest;
    341. 

  341. 

  342.         echo"<script type=\"text/javascript\">\n"
    343. 

  343.         ."<!--\n"
    344. 

  344.         ."\n"
    345. 

  345.         . "function del_img(titre, id)\n"
    346. 

  346.         . "{\n"
    347. 

  347.         . "if (confirm('" . _SCREENDELETE . " '+titre+' ! " . _CONFIRM . "'))\n"
    348. 

  348.         . "{document.location.href = 'index.php?file=Gallery&page=admin&op=del_screen&sid='+id;}\n"
    349. 

  349.         . "}\n"
    350. 

  350.             . "\n"
    351. 

  351.         . "// -->\n"
    352. 

  352.         . "</script>\n";
    353. 

  353. 

  354.         echo "<div class=\"content-box\">\n" //<!-- Start Content Box -->
    355. 

  355.         . "<div class=\"content-box-header\"><h3>" . _ADMINGALLERY . "</h3>\n"
    356. 

  356.         . "<div style=\"text-align:right;\"><a href=\"help/" . $language . "/Gallery.php\" rel=\"modal\">\n"
    357. 

  357.         . "<img style=\"border: 0;\" src=\"help/help.gif\" alt=\"\" title=\"" . _HELP . "\" /></a>\n"
    358. 

  358.         . "</div></div>\n"
    359. 

  359.         . "<div class=\"tab-content\" id=\"tab2\"><div style=\"text-align: center;\">" . _GALLERY . "<b> | "
    360. 

  360.         . "<a href=\"index.php?file=Gallery&amp;page=admin&amp;op=add_screen\">" . _ADDSCREEN . "</a> | "
    361. 

  361.         . "<a href=\"index.php?file=Gallery&amp;page=admin&amp;op=main_cat\">" . _CATMANAGEMENT . "</a> | "
    362. 

  362.         . "<a href=\"index.php?file=Gallery&amp;page=admin&amp;op=main_pref\">" . _PREFS . "</a></b></div><br />\n";
    363. 

  363. 

  364.         if ($_REQUEST['orderby'] == "date")
    365. 

  365.         {
    366. 

  366.             $order_by = "G.sid DESC";
    367. 

  367.         } 
    368. 

  368.         else if ($_REQUEST['orderby'] == "name")
    369. 

  369.         {
    370. 

  370.             $order_by = "G.titre";
    371. 

  371.         } 
    372. 

  372.         else if ($_REQUEST['orderby'] == "cat")
    373. 

  373.         {
    374. 

  374.             $order_by = "GC.titre, GC.parentid";
    375. 

  375.         } 
    376. 

  376.         else
    377. 

  377.         {
    378. 

  378.             $order_by = "G.sid DESC";
    379. 

  379.         } 
    380. 

  380. 

  381.         echo "<table width=\"100%\" cellpadding=\"2\" cellspacing=\"0\" border=\"0\">\n"
    382. 

  382.     . "<tr><td align=\"right\">" . _ORDERBY . " : ";
    383. 

  383. 

  384.         if ($_REQUEST['orderby'] == "date" || !$_REQUEST['orderby'])
    385. 

  385.         {
    386. 

  386.             echo "<b>" . _DATE . "</b> | ";
    387. 

  387.         } 
    388. 

  388.         else
    389. 

  389.         {
    390. 

  390.             echo "<a href=\"index.php?file=Gallery&amp;page=admin&amp;orderby=date\">" . _DATE . "</a> | ";
    391. 

  391.         } 
    392. 

  392. 

  393.         if ($_REQUEST['orderby'] == "name")
    394. 

  394.         {
    395. 

  395.             echo "<b>" . _TITLE . "</b> | ";
    396. 

  396.         } 
    397. 

  397.         else
    398. 

  398.         {
    399. 

  399.             echo "<a href=\"index.php?file=Gallery&amp;page=admin&amp;orderby=name\">" . _TITLE . "</a> | ";
    400. 

  400.         } 
    401. 

  401. 

  402.         if ($_REQUEST['orderby'] == "cat")
    403. 

  403.         {
    404. 

  404.             echo "<b>" . _CAT . "</b>";
    405. 

  405.         } 
    406. 

  406.         else
    407. 

  407.         {
    408. 

  408.             echo "<a href=\"index.php?file=Gallery&amp;page=admin&amp;orderby=cat\">" . _CAT . "</a>";
    409. 

  409.         } 
    410. 

  410. 

  411.         echo "&nbsp;</td></tr></table>\n";
    412. 

  412. 

  413.         if ($count > $nb_img_guest)
    414. 

  414.         {
    415. 

  415.             echo "<div>";
    416. 

  416.             $url_page = "index.php?file=Gallery&amp;page=admin&amp;orderby=" . $_REQUEST['orderby'];
    417. 

  417.             number($count, $nb_img_guest, $url_page);
    418. 

  418.             echo "</div>\n";
    419. 

  419.         } 
    420. 

  420. 

  421.         echo "<table width=\"100%\" border=\"0\" cellspacing=\"1\" cellpadding=\"2\">\n"
    422. 

  422.         . "<tr>\n"
    423. 

  423.         . "<td style=\"width: 20%;\" align=\"center\"><b>" . _TITLE . "</b></td>\n"
    424. 

  424.         . "<td style=\"width: 20%;\" align=\"center\"><b>" . _DATE . "</b></td>\n"
    425. 

  425.         . "<td style=\"width: 30%;\" align=\"center\"><b>" . _CAT . "</b></td>\n"
    426. 

  426.         . "<td style=\"width: 15%;\" align=\"center\"><b>" . _EDIT . "</b></td>\n"
    427. 

  427.         . "<td style=\"width: 15%;\" align=\"center\"><b>" . _DEL . "</b></td></tr>\n";
    428. 

  428. 

  429.         $sql = mysql_query("SELECT G.sid, G.titre, G.cat, G.url, G.date, GC.parentid, GC.titre FROM " . GALLERY_TABLE . " AS G LEFT JOIN " . GALLERY_CAT_TABLE . " AS GC ON GC.cid = G.cat ORDER BY " . $order_by . " LIMIT " . $start . ", " . $nb_img_guest."");
    430. 

  430.         while (list($sid, $titre, $cat, $url, $date, $parentid, $namecat) = mysql_fetch_array($sql))
    431. 

  431.         {
    432. 

  432. 

  433.             $titre = printSecuTags($titre);
    434. 

  434.             $date = nkDate($date);
    435. 

  435. 

  436.             if ($cat == "0")
    437. 

  437.             {
    438. 

  438.                 $categorie = _NONE;
    439. 

  439.             } 
    440. 

  440.             else if ($parentid == 0)
    441. 

  441.             {
    442. 

  442.                 $categorie = $namecat;
    443. 

  443.             } 
    444. 

  444.             else
    445. 

  445.             {
    446. 

  446.                 $sql3 = mysql_query("SELECT titre FROM " . GALLERY_CAT_TABLE . " WHERE cid = '" . $parentid . "' ORDER BY position, titre");
    447. 

  447.                 list($parentcat) = mysql_fetch_array($sql3);
    448. 

  448.                 $categorie = "$parentcat -> $namecat";
    449. 

  449.                 $categorie = printSecuTags($categorie);
    450. 

  450.             } 
    451. 

  451. 

  452.             echo "<tr style=\"background: " . $bg . ";\">\n"
    453. 

  453.             . "<td style=\"width: 20%;\"><a href=\"" . $url . "\" title=\"" . $url . "\" onclick=\"window.open(this.href); return false;\">" . $titre . "</a></td>\n"
    454. 

  454.             . "<td style=\"width: 20%;\" align=\"center\">" . $date . "</td>\n"
    455. 

  455.             . "<td style=\"width: 30%;\" align=\"center\">" . $categorie . "</td>\n"
    456. 

  456.             . "<td style=\"width: 15%;\" align=\"center\"><a href=\"index.php?file=Gallery&amp;page=admin&amp;op=edit_screen&amp;sid=" . $sid . "\"><img style=\"border: 0;\" src=\"images/edit.gif\" alt=\"\" title=\"" . _EDITTHISSCREEN . "\" /></a></td>\n"
    457. 

  457.             . "<td style=\"width: 15%;\" align=\"center\"><a href=\"javascript:del_img('" . mysql_real_escape_string(stripslashes($titre)) . "', '" . $sid . "');\"><img style=\"border: 0;\" src=\"images/del.gif\" alt=\"\" title=\"" . _DELTHISSCREEN . "\" /></a></td></tr>\n";
    458. 

  458.         } 
    459. 

  459. 

  460.         if ($count == 0) echo "<tr><td colspan=\"5\" align=\"center\">" . _NOSCREENINDB . "</td></tr>\n";
    461. 

  461. 

  462.         echo "</table>\n";
    463. 

  463. 

  464.         if ($count > $nb_img_guest)
    465. 

  465.         {
    466. 

  466.             echo "<div>";
    467. 

  467.             $url_page = "index.php?file=Gallery&amp;page=admin&amp;orderby=" . $_REQUEST['orderby'];
    468. 

  468.             number($count, $nb_img_guest, $url_page);
    469. 

  469.             echo "</div>\n";
    470. 

  470.         } 
    471. 

  471. 

  472.         echo "<br /><div style=\"text-align: center;\">[ <a href=\"index.php?file=Admin\"><b>" . _BACK . "</b></a> ]</div><br /></div></div>\n";
    473. 

  473.     } 
    474. 

  474. 

  475.     function edit_screen($sid)
    476. 

  476.     {
    477. 

  477.         global $nuked, $language;
    478. 

  478. 

  479.         include("modules/Gallery/config.php");
    480. 

  480. 

  481.         $sql = mysql_query("SELECT cat, titre, description, autor, url, url2, url_file FROM " . GALLERY_TABLE . " WHERE sid = '" . $sid . "'");
    482. 

  482.         list($cat, $titre, $description, $autor, $url, $url2, $url_file) = mysql_fetch_array($sql);
    483. 

  483. 

  484.         if ($url2 != "")
    485. 

  485.         {
    486. 

  486.             $img = $url2;
    487. 

  487.         } 
    488. 

  488.         else
    489. 

  489.         {
    490. 

  490.             $img = $url;
    491. 

  491.         } 
    492. 

  492. 

  493.         if (!preg_match("`%20`i", $img)) list($w, $h, $t, $a) = @getimagesize($img);
    494. 

  494.         if ($w != "" && $w <= $img_screen1) $width = "width=\"" . $w . "\"";
    495. 

  495.         else $width = "width=\"" . $img_screen1 . "\"";
    496. 

  496.         $image = "<img style=\"border: 1px solid #000000;\" src=\"" . $img . "\" " . $width . " alt=\"\" title=\"" .  _CLICTOSCREEN . "\" />";
    497. 

  497. 

  498.         $name = strrchr($img, '/');
    499. 

  499.         $name = substr($name, 1);
    500. 

  500.         $name_enc = rawurlencode($name);
    501. 

  501.         $img = str_replace($name, $name_enc, $img);
    502. 

  502.     
    503. 

  503.         if ($cat > 0)
    504. 

  504.         {
    505. 

  505.             $sql2 = mysql_query("SELECT titre FROM " . GALLERY_CAT_TABLE . " WHERE cid = '" . $cat . "'");
    506. 

  506.             list($cat_name) = mysql_fetch_array($sql2);
    507. 

  507.             $cat_name = printSecuTags($cat_name);
    508. 

  508.         }
    509. 

  509.         else
    510. 

  510.         {
    511. 

  511.             $cat_name = _NONE;
    512. 

  512.         }
    513. 

  513. 

  514.         echo "<div class=\"content-box\">\n" //<!-- Start Content Box -->
    515. 

  515.         . "<div class=\"content-box-header\"><h3>" . _ADMINGALLERY . "</h3>\n"
    516. 

  516.         . "<div style=\"text-align:right;\"><a href=\"help/" . $language . "/Gallery.php\" rel=\"modal\">\n"
    517. 

  517.         . "<img style=\"border: 0;\" src=\"help/help.gif\" alt=\"\" title=\"" . _HELP . "\" /></a>\n"
    518. 

  518.         . "</div></div>\n"
    519. 

  519.         . "<div class=\"tab-content\" id=\"tab2\"><form method=\"post\" action=\"index.php?file=Gallery&amp;page=admin&amp;op=modif_img\" enctype=\"multipart/form-data\" onsubmit=\"backslash('img_texte');\">\n"
    520. 

  520.         . "<table style=\"margin-left: auto;margin-right: auto;text-align: left;\" cellpadding=\"10\" cellspacing=\"0\" border=\"0\">\n"
    521. 

  521.         . "<tr><td>\n"
    522. 

  522.         . "<a href=\"#\" onclick=\"javascript:window.open('" . $url . "','Gallery','toolbar=no,location=no,directories=no,status=no,scrollbars=yes,resizable=yes,copyhistory=no,width=800,height=600,top=30,left=0')\">" . $image . "</a></td></tr></table><br />\n"
    523. 

  523.         . "<table style=\"margin-left: auto;margin-right: auto;text-align: left;\" border=\"0\" cellspacing=\"0\" cellpadding=\"2\">\n"	
    524. 

  524.         . "<tr><td><b>" . _TITLE . " :</b> <input type=\"text\" name=\"titre\" size=\"44\" value=\"" . $titre . "\" /></td></tr>\n"
    525. 

  525.         . "<tr><td><b>" . _CAT . "</b>: <select name=\"cat\"><option value=\"" . $cat . "\">" . $cat_name . "</option>\n";
    526. 

  526. 

  527.         select_cat();
    528. 

  528. 

  529.         echo "</select></td></tr><tr><td><b>" . _AUTHOR . " :</b> <input type=\"text\" name=\"auteur\" size=\"30\" value=\"" . $autor . "\" /></td></tr>\n";
    530. 

  530. 

  531.         echo "<tr><td><b>" . _DESCR . " :</b></td></tr>\n"
    532. 

  532.         . "<tr><td><textarea class=\"editor\" id=\"img_texte\" name=\"description\" cols=\"66\" rows=\"10\" onselect=\"storeCaret('img_texte');\" onclick=\"storeCaret('img_texte');\" onkeyup=\"storeCaret('img_texte');\">" . $description . "</textarea></td></tr>\n"
    533. 

  533.         . "<tr><td>&nbsp;</td></tr>\n"
    534. 

  534.         . "<tr><td><b>" . _URLIMG . " :</b> <input type=\"text\" name=\"url\" size=\"50\" maxlength=\"200\" value=\"" . $url . "\" /></td></tr>\n"
    535. 

  535.         . "<tr><td><b>" . _UPIMG . " :</b><br /><input type=\"file\" name=\"fichiernom\" />&nbsp;<input class=\"checkbox\" type=\"checkbox\" name=\"ecrase_screen\" value=\"1\" />&nbsp;" . _REPLACE . "</td></tr>\n"
    536. 

  536.         . "<tr><td>&nbsp;</td></tr>\n"
    537. 

  537.         . "<tr><td><b>" . _URLIMG2 . " :</b> <input type=\"text\" name=\"url2\" size=\"46\" maxlength=\"200\" value=\"" . $url2 . "\" /></td></tr>\n"
    538. 

  538.         . "<tr><td><b>" . _URLFILE . " :</b> <input type=\"text\" name=\"url_file\" size=\"51\" maxlength=\"200\" value=\"" . $url_file . "\" /></td></tr>\n"
    539. 

  539.         . "<tr><td>&nbsp;<input type=\"hidden\" name=\"sid\" value=\"" . $sid . "\" /></td></tr><tr><td align=\"center\"><input type=\"submit\" value=\"" . _MODIFTHISSCREEN . "\" /></td></tr></table>\n"
    540. 

  540.         . "<div style=\"text-align: center;\"><br />[ <a href=\"index.php?file=Gallery&amp;page=admin\"><b>" . _BACK . "</b></a> ]</div></form><br /></div></div>\n";
    541. 

  541.     } 
    542. 

  542. 

  543.     function main_cat()
    544. 

  544.     {
    545. 

  545.         global $nuked, $language;
    546. 

  546. 

  547.         echo"<script type=\"text/javascript\">\n"
    548. 

  548.         ."<!--\n"
    549. 

  549.         ."\n"
    550. 

  550.         . "function delcat(titre, id)\n"
    551. 

  551.         . "{\n"
    552. 

  552.         . "if (confirm('" . _SCREENDELETE  . " '+titre+' ! " . _CONFIRM . "'))\n"
    553. 

  553.         . "{document.location.href = 'index.php?file=Gallery&page=admin&op=del_cat&cid='+id;}\n"
    554. 

  554.         . "}\n"
    555. 

  555.             . "\n"
    556. 

  556.         . "// -->\n"
    557. 

  557.         . "</script>\n";
    558. 

  558. 

  559.         echo "<div class=\"content-box\">\n" //<!-- Start Content Box -->
    560. 

  560.         . "<div class=\"content-box-header\"><h3>" . _ADMINGALLERY . "</h3>\n"
    561. 

  561.         . "<div style=\"text-align:right;\"><a href=\"help/" . $language . "/Gallery.php\" rel=\"modal\">\n"
    562. 

  562.         . "<img style=\"border: 0;\" src=\"help/help.gif\" alt=\"\" title=\"" . _HELP . "\" /></a>\n"
    563. 

  563.         . "</div></div>\n"
    564. 

  564.         . "<div class=\"tab-content\" id=\"tab2\"><div style=\"text-align: center;\"><b><a href=\"index.php?file=Gallery&amp;page=admin\">" . _GALLERY . "</a> | "
    565. 

  565.         . "<a href=\"index.php?file=Gallery&amp;page=admin&amp;op=add_screen\">" . _ADDSCREEN . "</a> | "
    566. 

  566.         . "</b>" . _CATMANAGEMENT . "<b> | "
    567. 

  567.         . "<a href=\"index.php?file=Gallery&amp;page=admin&amp;op=main_pref\">" . _PREFS . "</a></b></div><br />\n"
    568. 

  568.         . "<table style=\"margin-left: auto;margin-right: auto;text-align: left;\" width=\"80%\" border=\"0\" cellspacing=\"1\" cellpadding=\"2\">\n"
    569. 

  569.         . "<tr>\n"
    570. 

  570.         . "<td style=\"width: 35%;\" align=\"center\"><b>" . _CAT . "</b></td>\n"
    571. 

  571.         . "<td style=\"width: 35%;\" align=\"center\"><b>" . _CATPARENT . "</b></td>\n"
    572. 

  572.         . "<td style=\"width: 10%;\" align=\"center\"><b>" . _POSITION . "</b></td>\n"
    573. 

  573.         . "<td style=\"width: 10%;\" align=\"center\"><b>" . _EDIT . "</b></td>\n"
    574. 

  574.         . "<td style=\"width: 10%;\" align=\"center\"><b>" . _DEL . "</b></td></tr>\n";
    575. 

  575. 

  576.         $sql = mysql_query("SELECT cid, titre, parentid, position FROM " . GALLERY_CAT_TABLE . " ORDER BY parentid, position");
    577. 

  577.         $nbcat = mysql_num_rows($sql);
    578. 

  578. 

  579.         if ($nbcat > 0)
    580. 

  580.         {
    581. 

  581.             while (list($cid, $titre, $parentid, $position) = mysql_fetch_array($sql))
    582. 

  582.             {
    583. 

  583.                 $titre = printSecuTags($titre);
    584. 

  584. 

  585.                 echo "<tr>\n"
    586. 

  586.                 . "<td style=\"width: 35%;\" align=\"center\">" . $titre . "</td>\n"
    587. 

  587.                 . "<td style=\"width: 35%;\" align=\"center\">\n";
    588. 

  588. 

  589.                 if ($parentid > 0)
    590. 

  590.                 {
    591. 

  591.                     $sql2 = mysql_query("SELECT titre FROM " . GALLERY_CAT_TABLE . " WHERE cid = '" . $parentid . "'");
    592. 

  592.                     list($pnomcat) = mysql_fetch_array($sql2);
    593. 

  593.                     $pnomcat = printSecuTags($pnomcat);
    594. 

  594. 

  595.                     echo "<i>" . $pnomcat . "</i>";
    596. 

  596.                 } 
    597. 

  597.                 else
    598. 

  598.                 {
    599. 

  599.                     echo _NONE;
    600. 

  600.                 } 
    601. 

  601. 

  602.                 echo "</td><td style=\"width: 10%;\" align=\"center\"><a href=\"index.php?file=Gallery&amp;page=admin&amp;op=modif_position&amp;cid=" . $cid . "&amp;method=down\" title=\"" . _MOVEDOWN . "\">&lt;</a>"
    603. 

  603.                 . "&nbsp;" . $position . "&nbsp;<a href=\"index.php?file=Gallery&amp;page=admin&amp;op=modif_position&amp;cid=" . $cid . "&amp;method=up\" title=\"" . _MOVEUP . "\">&gt;</a></td>\n"
    604. 

  604.                 . "<td align=\"center\"><a href=\"index.php?file=Gallery&amp;page=admin&amp;op=edit_cat&amp;cid=" . $cid . "\"><img style=\"border: 0;\" src=\"images/edit.gif\" alt=\"\" title=\"" . _EDITTHISCAT . "\" /></a></td>\n"
    605. 

  605.                 . "<td align=\"center\"><a href=\"javascript:delcat('" . mysql_real_escape_string(stripslashes($titre)) . "', '" . $cid . "');\"><img style=\"border: 0;\" src=\"images/del.gif\" alt=\"\" title=\"" . _DELTHISCAT . "\" /></a></td></tr>\n";
    606. 

  606.             } 
    607. 

  607.         } 
    608. 

  608.         else
    609. 

  609.         { 
    610. 

  610.             echo "<tr><td align=\"center\" colspan=\"5\">" . _NONE . "&nbsp;" . _CAT . "&nbsp;" . _INDATABASE . "</td></tr>\n";
    611. 

  611.         }
    612. 

  612. 

  613.         echo "</table><div style=\"text-align: center;\"><br />[ <a href=\"index.php?file=Gallery&amp;page=admin&amp;op=add_cat\"><b>" . _ADDCAT . "</b></a> ]</div>\n"
    614. 

  614.         . "<div style=\"text-align: center;\"><br />[ <a href=\"index.php?file=Gallery&amp;page=admin\"><b>" . _BACK . "</b></a> ]</div><br /></div></div>\n";
    615. 

  615.     } 
    616. 

  616. 

  617.     function add_cat()
    618. 

  618.     {
    619. 

  619.         global $language, $nuked;
    620. 

  620. 

  621.         echo "<div class=\"content-box\">\n" //<!-- Start Content Box -->
    622. 

  622.         . "<div class=\"content-box-header\"><h3>" . _ADMINGALLERY . "</h3>\n"
    623. 

  623.         . "<div style=\"text-align:right;\"><a href=\"help/" . $language . "/Gallery.php\" rel=\"modal\">\n"
    624. 

  624.         . "<img style=\"border: 0;\" src=\"help/help.gif\" alt=\"\" title=\"" . _HELP . "\" /></a>\n"
    625. 

  625.         . "</div></div>\n"
    626. 

  626.         . "<div class=\"tab-content\" id=\"tab2\"><form method=\"post\" action=\"index.php?file=Gallery&amp;page=admin&amp;op=send_cat\">\n"
    627. 

  627.         . "<table  style=\"margin-left: auto;margin-right: auto;text-align: left;\">\n"
    628. 

  628.         . "<tr><td><b>" . _TITLE . " :</b> <input type=\"text\" name=\"titre\" size=\"30\" /></td></tr>\n"
    629. 

  629.         . "<tr><td><b>" . _CATPARENT . " :</b> <select name=\"parentid\"><option value=\"0\">" . _NONE . "</option>\n";
    630. 

  630. 

  631.         $sql = mysql_query("SELECT cid, titre FROM " . GALLERY_CAT_TABLE . " WHERE parentid = 0 ORDER BY position, titre");
    632. 

  632.         while (list($cid, $nomcat) = mysql_fetch_array($sql))
    633. 

  633.         {
    634. 

  634.             $nomcat = printSecuTags($nomcat);
    635. 

  635. 

  636.             echo "<option value=\"" . $cid . "\">" . $nomcat . "</option>\n";
    637. 

  637.         } 
    638. 

  638. 

  639.         echo "</select></td></tr><tr><td><b>" . _POSITION . " : </b><input type=\"text\" name=\"position\" size=\"2\" value=\"0\" /></td></tr>\n"
    640. 

  640.         . "<tr><td><b>" . _DESCR . " :</b></td></tr>\n"
    641. 

  641.         . "<tr><td align=\"center\"><textarea class=\"editor\" name=\"description\" cols=\"60\" rows=\"10\"></textarea></td></tr></table>\n"
    642. 

  642.         . "<div style=\"text-align: center;\"><br /><input type=\"submit\" value=\"" . _CREATECAT . "\" /></div>\n"
    643. 

  643.         . "<div style=\"text-align: center;\"><br />[ <a href=\"index.php?file=Gallery&amp;page=admin&amp;op=main_cat\"><b>" . _BACK . "</b></a> ]</div></form><br /></div></div>\n";
    644. 

  644.     } 
    645. 

  645. 

  646.     function send_cat($titre, $description, $parentid, $position)
    647. 

  647.     {
    648. 

  648.         global $nuked, $user;
    649. 

  649. 

  650.         $titre = mysql_real_escape_string(stripslashes($titre));
    651. 

  651.         
    652. 

  652.         if (empty($titre))
    653. 

  653.         {
    654. 

  654.             echo "<div class=\"notification error png_bg\">\n"
    655. 

  655.             . "<div>\n"
    656. 

  656.             . "" . _TITLECATFORGOT . "\n"
    657. 

  657.             . "</div>\n"
    658. 

  658.             . "</div>\n";
    659. 

  659.             redirect("index.php?file=Gallery&page=admin&op=main_cat", 4);
    660. 

  660.         }
    661. 

  661.         else
    662. 

  662.         {
    663. 

  663.             $description = html_entity_decode($description);
    664. 

  664.             $description = mysql_real_escape_string(stripslashes($description));
    665. 

  665.         
    666. 

  666.             $sql = mysql_query("INSERT INTO " . GALLERY_CAT_TABLE . " ( `parentid` , `titre` , `description` , `position` ) VALUES ('" . $parentid . "', '" . $titre . "', '" . $description . "', '" . $position . "')");
    667. 

  667.             // Action
    668. 

  668.             $texteaction = "". _ACTIONADDCATGAL .": ".$titre."";
    669. 

  669.             $acdate = time();
    670. 

  670.             $sqlaction = mysql_query("INSERT INTO ". $nuked['prefix'] ."_action  (`date`, `pseudo`, `action`)  VALUES ('".$acdate."', '".$user[0]."', '".$texteaction."')");
    671. 

  671.             //Fin action
    672. 

  672.             echo "<div class=\"notification success png_bg\">\n"
    673. 

  673.             . "<div>\n"
    674. 

  674.             . "" . _CATADD . "\n"
    675. 

  675.             . "</div>\n"
    676. 

  676.             . "</div>\n";
    677. 

  677.             $sqlq = mysql_query("SELECT cid FROM " . GALLERY_CAT_TABLE . " WHERE parentid='".$parentid."' AND titre='".$titre."'");
    678. 

  678.             list($cid) = mysql_fetch_array($sqlq);
    679. 

  679.             echo "<script>\n"
    680. 

  680.             ."setTimeout('screen()','3000');\n"
    681. 

  681.             ."function screen() { \n"
    682. 

  682.             ."screenon('index.php?file=Gallery&op=categorie&cat=".$cid."', 'index.php?file=Gallery&page=admin&op=main_cat');\n"
    683. 

  683.             ."}\n"
    684. 

  684.             ."</script>\n";
    685. 

  685.         }
    686. 

  686.     } 
    687. 

  687. 

  688.     function edit_cat($cid)
    689. 

  689.     {
    690. 

  690.         global $nuked, $language;
    691. 

  691. 

  692.         $sql = mysql_query("SELECT titre, description, parentid, position FROM " . GALLERY_CAT_TABLE . " WHERE cid='".$cid."'");
    693. 

  693.         list($titre, $description, $parentid, $position) = mysql_fetch_array($sql);
    694. 

  694. 

  695.         echo "<div class=\"content-box\">\n" //<!-- Start Content Box -->
    696. 

  696.         . "<div class=\"content-box-header\"><h3>" . _ADMINGALLERY . "</h3>\n"
    697. 

  697.         . "<div style=\"text-align:right;\"><a href=\"help/" . $language . "/Gallery.php\" rel=\"modal\">\n"
    698. 

  698.         . "<img style=\"border: 0;\" src=\"help/help.gif\" alt=\"\" title=\"" . _HELP . "\" /></a>\n"
    699. 

  699.         . "</div></div>\n"
    700. 

  700.         . "<div class=\"tab-content\" id=\"tab2\"><form method=\"post\" action=\"index.php?file=Gallery&amp;page=admin&amp;op=modif_cat\">\n"
    701. 

  701.         . "<table  style=\"margin-left: auto;margin-right: auto;text-align: left;\">\n"
    702. 

  702.         . "<tr><td><b>" . _TITLE . " :</b> <input type=\"text\" name=\"titre\" size=\"30\" value=\"" . $titre . "\" /></td></tr>\n"
    703. 

  703.         . "<tr><td><b>" . _CATPARENT . " :</b> <select name=\"parentid\">\n";
    704. 

  704. 

  705.         if ($parentid > 0)
    706. 

  706.         {
    707. 

  707.             $sql2 = mysql_query("SELECT titre FROM " . GALLERY_CAT_TABLE . " WHERE cid = '" . $parentid . "'");
    708. 

  708.             list($pnomcat) = mysql_fetch_array($sql2);
    709. 

  709.             $pnomcat = printSecuTags($pnomcat);
    710. 

  710. 

  711.             echo "<option value=\"" . $parentid . "\">" . $pnomcat . "</option>\n";
    712. 

  712.         } 
    713. 

  713. 

  714.         echo "<option value=\"0\">" . _NONE . "</option>\n";
    715. 

  715. 

  716.         $sql3 = mysql_query("SELECT cid, titre FROM " . GALLERY_CAT_TABLE . " WHERE parentid = 0 ORDER BY position, titre");
    717. 

  717.         while (list($catid, $nomcat) = mysql_fetch_array($sql3))
    718. 

  718.         {
    719. 

  719.             $nomcat = printSecuTags($nomcat);
    720. 

  720. 

  721.             if ($nomcat != $titre)
    722. 

  722.             {
    723. 

  723.                 echo "<option value=\"" . $catid . "\">" . $nomcat . "</option>\n";
    724. 

  724.             } 
    725. 

  725.         } 
    726. 

  726. 

  727.         echo "</select></td></tr><tr><td><b>" . _POSITION . " : </b><input type=\"text\" name=\"position\" size=\"2\" value=\"" . $position . "\" /></td></tr>\n"
    728. 

  728.         . "<tr><td><b>" . _DESCR . " :</b><input type=\"hidden\" name=\"cid\" value=\"" . $cid . "\" /></td></tr>\n"
    729. 

  729.         . "<tr><td align=\"center\"><textarea class=\"editor\" name=\"description\" cols=\"60\" rows=\"10\">" . $description . "</textarea></td></tr></table>\n"
    730. 

  730.         . "<div style=\"text-align: center;\"><br /><input type=\"submit\" value=\"" . _MODIFTHISCAT . "\" /></div>\n"
    731. 

  731.         . "<div style=\"text-align: center;\"><br />[ <a href=\"index.php?file=Gallery&amp;page=admin&amp;op=main_cat\"><b>" . _BACK . "</b></a> ]</div></form><br /></div></div>\n";
    732. 

  732.     } 
    733. 

  733. 

  734.     function modif_cat($cid, $titre, $description, $parentid, $position)
    735. 

  735.     {
    736. 

  736.         global $nuked, $user;
    737. 

  737. 

  738.         $titre = mysql_real_escape_string(stripslashes($titre));
    739. 

  739.         
    740. 

  740.         if (empty($titre))
    741. 

  741.         {
    742. 

  742.             echo "<div class=\"notification error png_bg\">\n"
    743. 

  743.             . "<div>\n"
    744. 

  744.             . "" . _TITLEARTFORGOT . "\n"
    745. 

  745.             . "</div>\n"
    746. 

  746.             . "</div>\n";
    747. 

  747.             redirect("index.php?file=Gallery&page=admin&op=main_cat", 4);
    748. 

  748.         }
    749. 

  749.         else
    750. 

  750.         {
    751. 

  751.             $description = html_entity_decode($description);
    752. 

  752.             $description = mysql_real_escape_string(stripslashes($description));
    753. 

  753.         
    754. 

  754.             $sql = mysql_query("UPDATE " . GALLERY_CAT_TABLE . " SET parentid = '" . $parentid . "', titre = '" . $titre . "', description = '" . $description . "', position = '" . $position . "' WHERE cid = '" . $cid . "'");
    755. 

  755.             // Action
    756. 

  756.             $texteaction = "". _ACTIONMODIFCATGAL .": ".$titre."";
    757. 

  757.             $acdate = time();
    758. 

  758.             $sqlaction = mysql_query("INSERT INTO ". $nuked['prefix'] ."_action  (`date`, `pseudo`, `action`)  VALUES ('".$acdate."', '".$user[0]."', '".$texteaction."')");
    759. 

  759.             //Fin action
    760. 

  760.             echo "<div class=\"notification success png_bg\">\n"
    761. 

  761.             . "<div>\n"
    762. 

  762.             . "" . _CATMODIF . "\n"
    763. 

  763.             . "</div>\n"
    764. 

  764.             . "</div>\n";
    765. 

  765.             echo "<script>\n"
    766. 

  766.             ."setTimeout('screen()','3000');\n"
    767. 

  767.             ."function screen() { \n"
    768. 

  768.             ."screenon('index.php?file=Gallery&op=categorie&cat=".$cid."', 'index.php?file=Gallery&page=admin&op=main_cat');\n"
    769. 

  769.             ."}\n"
    770. 

  770.             ."</script>\n";
    771. 

  771.         }
    772. 

  772.     } 
    773. 

  773. 

  774.     function select_cat()
    775. 

  775.     {
    776. 

  776.         global $nuked;
    777. 

  777. 

  778.         $sql = mysql_query("SELECT cid, titre FROM " . GALLERY_CAT_TABLE . " WHERE parentid = 0 ORDER BY position, titre");
    779. 

  779.         while (list($cid, $titre) = mysql_fetch_array($sql))
    780. 

  780.         {
    781. 

  781.             $titre = printSecuTags($titre);
    782. 

  782. 

  783.             echo "<option value=\"" . $cid . "\">* " . $titre . "</option>\n";
    784. 

  784. 

  785.             $sql2 = mysql_query("SELECT cid, titre FROM " . GALLERY_CAT_TABLE . " WHERE parentid = '" . $cid . "' ORDER BY position, titre");
    786. 

  786.             while (list($s_cid, $s_titre) = mysql_fetch_array($sql2))
    787. 

  787.             {
    788. 

  788.                 $s_titre = printSecuTags($s_titre);
    789. 

  789. 

  790.                 echo"<option value=\"" . $s_cid . "\">&nbsp;&nbsp;&nbsp;" . $s_titre . "</option>\n";
    791. 

  791.             } 
    792. 

  792.         } 
    793. 

  793.         echo "<option value=\"0\">* " . _NONE . "</option>\n";
    794. 

  794.     } 
    795. 

  795. 

  796.     function del_cat($cid)
    797. 

  797.     {
    798. 

  798.         global $nuked, $user;
    799. 

  799. 

  800.         $sqlq = mysql_query("SELECT titre FROM " . GALLERY_CAT_TABLE . " WHERE cid='".$cid."'");
    801. 

  801.         list($titre) = mysql_fetch_array($sqlq);
    802. 

  802.         $titre = mysql_real_escape_string($titre);
    803. 

  803.         $sql = mysql_query("DELETE FROM " . GALLERY_CAT_TABLE . " WHERE cid = '" . $cid . "'");
    804. 

  804.         $sql = mysql_query("UPDATE " . GALLERY_CAT_TABLE . " SET parentid = 0 WHERE parentid = '" . $cid . "'");
    805. 

  805.         $sql = mysql_query("UPDATE " . GALLERY_TABLE . " SET cat = 0 WHERE cat = '" . $cid . "'");
    806. 

  806.         // Action
    807. 

  807.         $texteaction = "". _ACTIONDELCATGAL .": ".$titre."";
    808. 

  808.         $acdate = time();
    809. 

  809.         $sqlaction = mysql_query("INSERT INTO ". $nuked['prefix'] ."_action  (`date`, `pseudo`, `action`)  VALUES ('".$acdate."', '".$user[0]."', '".$texteaction."')");
    810. 

  810.         //Fin action
    811. 

  811.         echo "<div class=\"notification success png_bg\">\n"
    812. 

  812.         . "<div>\n"
    813. 

  813.         . "" . _CATDEL . "\n"
    814. 

  814.         . "</div>\n"
    815. 

  815.         . "</div>\n";
    816. 

  816.         redirect("index.php?file=Gallery&page=admin&op=main_cat", 2);
    817. 

  817.     } 
    818. 

  818. 

  819.     function main_pref()
    820. 

  820.     {
    821. 

  821.         global $nuked, $language;
    822. 

  822. 

  823.         echo "<div class=\"content-box\">\n" //<!-- Start Content Box -->
    824. 

  824.         . "<div class=\"content-box-header\"><h3>" . _ADMINGALLERY . "</h3>\n"
    825. 

  825.         . "<div style=\"text-align:right;\"><a href=\"help/" . $language . "/Gallery.php\" rel=\"modal\">\n"
    826. 

  826.         . "<img style=\"border: 0;\" src=\"help/help.gif\" alt=\"\" title=\"" . _HELP . "\" /></a>\n"
    827. 

  827.         . "</div></div>\n"
    828. 

  828.         . "<div class=\"tab-content\" id=\"tab2\"><div style=\"text-align: center;\"><b><a href=\"index.php?file=Gallery&amp;page=admin\">" . _GALLERY . "</a> | "
    829. 

  829.         . "<a href=\"index.php?file=Gallery&amp;page=admin&amp;op=add_screen\">" . _ADDSCREEN . "</a> | "
    830. 

  830.         . "<a href=\"index.php?file=Gallery&amp;page=admin&amp;op=main_cat\">" . _CATMANAGEMENT . "</a> | "
    831. 

  831.         . "</b>" . _PREFS . "</div><br />\n"
    832. 

  832.         . "<form method=\"post\" action=\"index.php?file=Gallery&amp;page=admin&amp;op=change_pref\">\n"
    833. 

  833.         . "<table style=\"margin-left: auto;margin-right: auto;text-align: left;\" border=\"0\" cellspacing=\"0\" cellpadding=\"3\">\n"
    834. 

  834.         . "<tr><td align=\"center\" colspan=\"2\"><big>" . _PREFS . "</big></td></tr>\n"
    835. 

  835.         . "<tr><td>" . _GALLERYTITLE . " : </td><td> <input type=\"text\" name=\"gallery_title\" size=\"40\" value=\"" . $nuked['gallery_title']. "\" /></td></tr>\n"
    836. 

  836.         . "<tr><td>" . _NUMBERIMG . " : </td><td><input type=\"text\" name=\"max_img\" size=\"2\" value=\"" . $nuked['max_img'] . "\" /></td></tr>\n"
    837. 

  837.         . "<tr><td>" . _NUMBERIMG2 . " : </td><td><input type=\"text\" name=\"max_img_line\" size=\"2\" value=\"" . $nuked['max_img_line'] . "\" /></td></tr>\n"
    838. 

  838.         . "</table><div style=\"text-align: center;\"><br /><input type=\"submit\" value=\"" . _SEND . "\" /></div>\n"
    839. 

  839.         . "<div style=\"text-align: center;\"><br />[ <a href=\"index.php?file=Gallery&amp;page=admin\"><b>" . _BACK . "</b></a> ]</div></form><br /></div></div>\n";
    840. 

  840.     } 
    841. 

  841. 

  842.     function change_pref($gallery_title, $max_img, $max_img_line)
    843. 

  843.     {
    844. 

  844.         global $nuked, $user;
    845. 

  845. 

  846.         $upd1 = mysql_query("UPDATE " . CONFIG_TABLE . " SET value = '" . $gallery_title . "' WHERE name = 'gallery_title'");
    847. 

  847.         $upd2 = mysql_query("UPDATE " . CONFIG_TABLE . " SET value = '" . $max_img . "' WHERE name = 'max_img'");
    848. 

  848.         $upd3 = mysql_query("UPDATE " . CONFIG_TABLE . " SET value = '" . $max_img_line . "' WHERE name = 'max_img_line'");
    849. 

  849.         // Action
    850. 

  850.         $texteaction = "". _ACTIONPREFGAL .".";
    851. 

  851.         $acdate = time();
    852. 

  852.         $sqlaction = mysql_query("INSERT INTO ". $nuked['prefix'] ."_action  (`date`, `pseudo`, `action`)  VALUES ('".$acdate."', '".$user[0]."', '".$texteaction."')");
    853. 

  853.         //Fin action
    854. 

  854.         echo "<div class=\"notification success png_bg\">\n"
    855. 

  855.         . "<div>\n"
    856. 

  856.         . "" . _PREFUPDATED . "\n"
    857. 

  857.         . "</div>\n"
    858. 

  858.         . "</div>\n";
    859. 

  859.         redirect("index.php?file=Gallery&page=admin", 2);
    860. 

  860.     } 
    861. 

  861. 

  862.     function modif_position($cid, $method)
    863. 

  863.     {
    864. 

  864.         global $nuked, $user;
    865. 

  865. 

  866.         $sqlq = mysql_query("SELECT titre, position FROM " . GALLERY_CAT_TABLE . " WHERE cid='".$cid."'");
    867. 

  867.         list($titre, $position) = mysql_fetch_array($sqlq);
    868. 

  868.         if ($position <=0 AND $method == "up")
    869. 

  869.         {
    870. 

  870.             echo "<div class=\"notification error png_bg\">\n"
    871. 

  871.             . "<div>\n"
    872. 

  872.             . "" . _CATERRORPOS . "\n"
    873. 

  873.             . "</div>\n"
    874. 

  874.             . "</div>\n";
    875. 

  875.             redirect("index.php?file=Gallery&page=admin&op=main_cat", 2);
    876. 

  876.             exit();
    877. 

  877.         }
    878. 

  878.         if ($method == "up") $upd = mysql_query("UPDATE " . GALLERY_CAT_TABLE . " SET position = position - 1 WHERE cid = '" . $cid . "'");
    879. 

  879.         else if ($method == "down") $upd = mysql_query("UPDATE " . GALLERY_CAT_TABLE . " SET position = position + 1 WHERE cid = '" . $cid . "'");
    880. 

  880.         // Action
    881. 

  881.         $texteaction = "". _ACTIONPOSCATGAL .": ".$titre."";
    882. 

  882.         $acdate = time();
    883. 

  883.         $sqlaction = mysql_query("INSERT INTO ". $nuked['prefix'] ."_action  (`date`, `pseudo`, `action`)  VALUES ('".$acdate."', '".$user[0]."', '".$texteaction."')");
    884. 

  884.         //Fin action
    885. 

  885.         echo "<div class=\"notification success png_bg\">\n"
    886. 

  886.         . "<div>\n"
    887. 

  887.         . "" . _CATMODIF . "\n"
    888. 

  888.         . "</div>\n"
    889. 

  889.         . "</div>\n";
    890. 

  890.         redirect("index.php?file=Gallery&page=admin&op=main_cat", 2);
    891. 

  891.     } 
    892. 

  892. 

  893.     switch ($_REQUEST['op'])
    894. 

  894.     {
    895. 

  895.         case "add_screen":
    896. 

  896.             add_screen();
    897. 

  897.             break;
    898. 

  898. 

  899.         case "del_screen":
    900. 

  900.             del_screen($_REQUEST['sid']);
    901. 

  901.             break;
    902. 

  902. 

  903.         case "send_screen":
    904. 

  904.             send_screen($_REQUEST['titre'], $_REQUEST['description'], $_REQUEST['auteur'], $_REQUEST['fichiernom'], $_REQUEST['maxi'], $_REQUEST['cat'], $_REQUEST['url'], $_REQUEST['url2'], $_REQUEST['url_file'], $_REQUEST['ecrase_screen']);
    905. 

  905.             break;
    906. 

  906. 

  907.         case "edit_screen":
    908. 

  908.             edit_screen($_REQUEST['sid']);
    909. 

  909.             break;
    910. 

  910. 

  911.         case "modif_img":
    912. 

  912.             modif_img($_REQUEST['sid'], $_REQUEST['titre'], $_REQUEST['description'], $_REQUEST['auteur'], $_REQUEST['fichiernom'], $_REQUEST['maxi'], $_REQUEST['cat'], $_REQUEST['url'], $_REQUEST['url2'], $_REQUEST['url_file'], $_REQUEST['ecrase_screen']);
    913. 

  913.             break;
    914. 

  914. 

  915.         case "send_cat":
    916. 

  916.             send_cat($_REQUEST['titre'], $_REQUEST['description'], $_REQUEST['parentid'], $_REQUEST['position']);
    917. 

  917.             break;
    918. 

  918. 

  919.         case "add_cat":
    920. 

  920.             add_cat();
    921. 

  921.             break;
    922. 

  922. 

  923.         case "main_cat":
    924. 

  924.             main_cat();
    925. 

  925.             break;
    926. 

  926. 

  927.         case "edit_cat":
    928. 

  928.             edit_cat($_REQUEST['cid']);
    929. 

  929.             break;
    930. 

  930. 

  931.         case "modif_cat":
    932. 

  932.             modif_cat($_REQUEST['cid'], $_REQUEST['titre'], $_REQUEST['description'], $_REQUEST['parentid'], $_REQUEST['position']);
    933. 

  933.             break;
    934. 

  934. 

  935.         case "del_cat":
    936. 

  936.             del_cat($_REQUEST['cid']);
    937. 

  937.             break;
    938. 

  938. 

  939.         case "main_pref":
    940. 

  940.             main_pref();
    941. 

  941.             break;
    942. 

  942. 

  943.         case "change_pref":
    944. 

  944.             change_pref($_REQUEST['gallery_title'], $_REQUEST['max_img'], $_REQUEST['max_img_line']);
    945. 

  945.             break;
    946. 

  946. 

  947.         case "modif_position":
    948. 

  948.             modif_position($_REQUEST['cid'], $_REQUEST['method']);
    949. 

  949.             break;
    950. 

  950. 

  951.         default:
    952. 

  952.             main();
    953. 

  953.             break;
    954. 

  954.     } 
    955. 

  955. 

  956. } 
    957. 

  957. else if ($level_admin == -1)
    958. 

  958. {
    959. 

  959.     echo "<div class=\"notification error png_bg\">\n"
    960. 

  960.     . "<div>\n"
    961. 

  961.     . "<br /><br /><div style=\"text-align: center;\">" . _MODULEOFF . "<br /><br /><a href=\"javascript:history.back()\"><b>" . _BACK . "</b></a></div><br /><br />"
    962. 

  962.     . "</div>\n"
    963. 

  963.     . "</div>\n";
    964. 

  964. }
    965. 

  965. else if ($visiteur > 1)
    966. 

  966. {
    967. 

  967.     echo "<div class=\"notification error png_bg\">\n"
    968. 

  968.     . "<div>\n"
    969. 

  969.     . "<br /><br /><div style=\"text-align: center;\">" . _NOENTRANCE . "<br /><br /><a href=\"javascript:history.back()\"><b>" . _BACK . "</b></a></div><br /><br />"
    970. 

  970.     . "</div>\n"
    971. 

  971.     . "</div>\n";
    972. 

  972. }
    973. 

  973. else
    974. 

  974. {
    975. 

  975.     echo "<div class=\"notification error png_bg\">\n"
    976. 

  976.     . "<div>\n"
    977. 

  977.     . "<br /><br /><div style=\"text-align: center;\">" . _ZONEADMIN . "<br /><br /><a href=\"javascript:history.back()\"><b>" . _BACK . "</b></a></div><br /><br />"
    978. 

  978.     . "</div>\n"
    979. 

  979.     . "</div>\n";
    980. 

  980. }
    981. 

  981.   
    982. 

  982. 

  983. adminfoot();
    984. 

  984. 

  985. ?>
    986. 

  986.