PageRenderTime 32ms CodeModel.GetById 26ms RepoModel.GetById 1ms app.codeStats 1ms

/admin/images_edit.php

https://github.com/aravindc/pixelpost
PHP | 1061 lines | 888 code | 117 blank | 56 comment | 210 complexity | a85f41921e434f0010787a7bba4aab08 MD5 | raw file
Possible License(s): GPL-2.0 
    

  1. <?php
    2. 

  2. 

  3. // SVN file version:
    4. 

  4. // $Id$
    5. 

  5. 

  6. if (!isset($_SESSION["pixelpost_admin"]) || $cfgrow['password'] != $_SESSION["pixelpost_admin"] || isset($_GET["_SESSION"]["pixelpost_admin"]) and $_GET["_SESSION"]["pixelpost_admin"] == $_SESSION["pixelpost_admin"] || isset($_POST["_SESSION"]["pixelpost_admin"]) and $_POST["_SESSION"]["pixelpost_admin"] == $_SESSION["pixelpost_admin"] || isset($_COOKIE["_SESSION"]["pixelpost_admin"]) and $_COOKIE["_SESSION"]["pixelpost_admin"] == $_SESSION["pixelpost_admin"])
    7. 

  7. {
    8. 

  8.     die("Try another day!!");
    9. 

  9. }
    10. 

  10. 

  11. // view=images
    12. 

  12. if (isset($_GET['view']) and $_GET['view'] == "images")
    13. 

  13. {
    14. 

  14.     if (isset($_GET['action']) and $_GET['action'] == "masspublish")
    15. 

  15.     {
    16. 

  16.         $idz = $_POST['moderate_image_boxes'];
    17. 

  17.         // This is rather interesting since when multiple pictures have the same datetime stamp only the last one
    18. 

  18.         // will be shown. This means we have to construct single queries for each selected id and give them a
    19. 

  19.         // unique datetimestamp.
    20. 

  20.         // Since the latest image is displayed first we need to sort the idz because the lowest id have to be
    21. 

  21.         // published first.
    22. 

  22.         sort($idz);
    23. 

  23.         $minute_offset = 1;
    24. 

  24.         $current_hour = date("H");
    25. 

  25.         $current_minutes = date("i");
    26. 

  26.         $current_seconds = date("s");
    27. 

  27.         $ids = count($idz) - 1;
    28. 

  28.         $query = "UPDATE " . $pixelpost_db_prefix . "pixelpost SET datetime = ";
    29. 

  29.         for ($i = 0; $i < count($idz); $i++)
    30. 

  30.         {
    31. 

  31.             $datetimestamp = gmdate("Y-m-d H:i:s", mktime($current_hour, $current_minutes - ($minute_offset * ($ids - $i)), $current_seconds, date("m"), date("d"), date("Y")) + (3600 * $tz));
    32. 

  32.             $finalquery = $query . "'" . $datetimestamp . "' WHERE id = '" . (int)$idz[$i] . "'";
    33. 

  33.             $finalquery = sql_query($finalquery);
    34. 

  34.         }
    35. 

  35.         $c = count($idz);
    36. 

  36.         echo "<div class='jcaption confirm'>$admin_lang_imgedit_published  $c $admin_lang_imgedit_unpublished_cmnts</div>";
    37. 

  37.     }
    38. 

  38. 

  39.     if (isset($_GET['action']) and $_GET['action'] == "massdelete")
    40. 

  40.     {
    41. 

  41.         $idz = $_POST['moderate_image_boxes'];
    42. 

  42.         // delete all the images:
    43. 

  43.         for ($i = 0; $i < count($idz); $i++)
    44. 

  44.         {
    45. 

  45.             $imagerow = sql_array("SELECT image FROM " . $pixelpost_db_prefix . "pixelpost where id='" . (int)$idz[$i] . "'");
    46. 

  46.             $image = $imagerow['image'];
    47. 

  47.             $file_to_del = $cfgrow['imagepath'] . $imagerow['image'];
    48. 

  48.             unlink($file_to_del);
    49. 

  49.             $file_to_del = $cfgrow['thumbnailpath'] . "thumb_" . $imagerow['image'];
    50. 

  50.             unlink($file_to_del);
    51. 

  51.         }
    52. 

  52.         $query = "DELETE FROM " . $pixelpost_db_prefix . "pixelpost ";
    53. 

  53.         $where = "WHERE";
    54. 

  54.         $where2 = $where;
    55. 

  55.         $where3 = $where;
    56. 

  56.         for ($i = 0; $i < count($idz) - 1; $i++)
    57. 

  57.         {
    58. 

  58.             $where .= " id = '" . (int)$idz[$i] . "' or ";
    59. 

  59.             $where2 .= " img_id = '" . (int)$idz[$i] . "' or ";
    60. 

  60.             $where3 .= " parent_id = '" . (int)$idz[$i] . "' or ";
    61. 

  61.         }
    62. 

  62.         $lastid = $idz[count($idz) - 1];
    63. 

  63.         $where .= " id = '$lastid'  ";
    64. 

  64.         $where2 .= " img_id = '$lastid'  ";
    65. 

  65.         $where3 .= " parent_id = '$lastid'  ";
    66. 

  66.         $query .= $where;
    67. 

  67.         mysql_query($query) or die(mysql_error());
    68. 

  68.         $c = count($idz);
    69. 

  69.         echo "<div class='jcaption'>$admin_lang_imgedit_delete1  $c $admin_lang_imgedit_delete2</div>";
    70. 

  70.         $query2 = "DELETE FROM " . $pixelpost_db_prefix . "tags " . $where2;
    71. 

  71.         mysql_query($query2) or die(mysql_error());
    72. 

  72.         // delete the comments as well
    73. 

  73.         $query3 = "DELETE FROM " . $pixelpost_db_prefix . "comments " . $where3;
    74. 

  74.         mysql_query($query3) or die(mysql_error());
    75. 

  75.     }
    76. 

  76. 

  77.     // Mass add or delete categories to images
    78. 

  78.     if (isset($_GET['id']))
    79. 

  79.     {
    80. 

  80.         $_GET['id'] = (int)$_GET['id'];
    81. 

  81.     }
    82. 

  82.     if (isset($_GET['action']) and $_GET['action'] == "masscatedit")
    83. 

  83.     {
    84. 

  84.         $command = $_GET['cmd'];
    85. 

  85.         $command = explode('-', $command);
    86. 

  86. 

  87.         // if unassign
    88. 

  88.         if (current($command) == 'unassign')
    89. 

  89.         {
    90. 

  90.             $cat_id = end($command);
    91. 

  91.             $idz = $_POST['moderate_image_boxes'];
    92. 

  92. 

  93.             $query = "DELETE FROM " . $pixelpost_db_prefix . "catassoc ";
    94. 

  94.             $where = "WHERE";
    95. 

  95.             for ($i = 0; $i < count($idz); $i++)
    96. 

  96.             {
    97. 

  97.                 $where .= " (cat_id='$cat_id' and image_id='" . (int)$idz[$i] . "') or ";
    98. 

  98.             }
    99. 

  99. 

  100.             $where .= " 0 ";
    101. 

  101.             $query .= $where;
    102. 

  102.             $query = sql_query($query);
    103. 

  103.             $c = count($idz);
    104. 

  104.             if (isset($admin_lang_imgedit_mass_5, $admin_lang_imgedit_mass_6))
    105. 

  105.             {
    106. 

  106.                 echo "<div class='jcaption'>$admin_lang_imgedit_mass_5 $c $admin_lang_imgedit_mass_6.</div>";
    107. 

  107.             }
    108. 

  108.         } // end if un-assign
    109. 

  109. 

  110.         // if assign
    111. 

  111.         if (current($command) == 'assign')
    112. 

  112.         {
    113. 

  113.             $cat_id = end($command);
    114. 

  114.             $idz = $_POST['moderate_image_boxes'];
    115. 

  115. 

  116.             // first delete all old values
    117. 

  117.             $query = "DELETE FROM " . $pixelpost_db_prefix . "catassoc ";
    118. 

  118.             $where = "WHERE";
    119. 

  119.             for ($i = 0; $i < count($idz); $i++)
    120. 

  120.             {
    121. 

  121.                 $where .= " (cat_id='$cat_id' and image_id='" . (int)$idz[$i] . "]') or ";
    122. 

  122.             }
    123. 

  123. 

  124.             $where .= " 0 ";
    125. 

  125.             $query .= $where;
    126. 

  126. 

  127.             $query = sql_query($query);
    128. 

  128. 

  129.             // now assign the new values
    130. 

  130.             $query_val = array();
    131. 

  131. 

  132.             for ($i = 0; $i < count($idz); $i++)
    133. 

  133.             {
    134. 

  134.                 $query_val[$i] = "(NULL,'$cat_id','" . (int)$idz[$i] . "')";
    135. 

  135.             }
    136. 

  136. 

  137.             $query_st = "INSERT INTO " . $pixelpost_db_prefix . "catassoc (id,cat_id,image_id) VALUES " . implode(",", $query_val) . ";";
    138. 

  138.             $query = sql_query($query_st);
    139. 

  139. 

  140.             $c = count($idz);
    141. 

  141.             if (isset($admin_lang_imgedit_mass_7, $admin_lang_imgedit_mass_8))
    142. 

  142.             {
    143. 

  143.                 echo "<div class='jcaption'>$admin_lang_imgedit_mass_7 $c $admin_lang_imgedit_mass_8</div>";
    144. 

  144.             }
    145. 

  145.         } // end if assign
    146. 

  146.     } // end if mass edit
    147. 

  147. 

  148.     // if tagging option
    149. 

  149.     if (isset($_POST['masstagopt']) and $_POST['masstagopt'] != '')
    150. 

  150.     {
    151. 

  151.         if ($_POST['masstagopt'] == 'unset')
    152. 

  152.         {
    153. 

  153.             $idz = $_POST['moderate_image_boxes'];
    154. 

  154.             $ids_array = implode(', ', $idz);
    155. 

  155. 

  156.             $query = "DELETE FROM " . $pixelpost_db_prefix . "tags ";
    157. 

  157.             $where = "WHERE img_id IN ($ids_array)";
    158. 

  158. 

  159.             $strtr_arr = array(',' => ' ', ';' => ' ');
    160. 

  160.             $tags = strtr($_POST['masstag'], $strtr_arr);
    161. 

  161.             $pat1 = '/([^a-zA-Z 0-9_-]+)/';
    162. 

  162.             $tags = preg_replace($pat1, '_', $tags);
    163. 

  163.             $pat2 = array('/ _ /', '/ _/', '/(_){2,}/', '/ - /', '/ -/', '/(-){2,}/');
    164. 

  164.             $rep2 = array('', '', '_', '', '', '-');
    165. 

  165.             $tags = preg_replace($pat2, $rep2, $tags);
    166. 

  166.             $tags_arr = preg_split('/[ ]{1,}/', $tags, -1, PREG_SPLIT_NO_EMPTY);
    167. 

  167. 

  168.             $tags_array = implode('", "', $tags_arr);
    169. 

  169. 

  170.             $where .= ' AND (tag IN ("' . $tags_array . '") OR alt_tag IN ("' . $tags_array . '"))';
    171. 

  171.             $query .= $where;
    172. 

  172. 

  173.             if (count($idz) > 0)
    174. 

  174.                 $query = sql_query($query);
    175. 

  175.         } else
    176. 

  176.         {
    177. 

  177.             $idz = $_POST['moderate_image_boxes'];
    178. 

  178. 

  179.             $query = "INSERT INTO " . $pixelpost_db_prefix . "tags VALUES ";
    180. 

  180. 

  181.             $strtr_arr = array(',' => ' ', ';' => ' ');
    182. 

  182.             $tags = strtr($_POST['masstag'], $strtr_arr);
    183. 

  183.             $pat1 = '/([^a-zA-Z 0-9_-]+)/';
    184. 

  184.             $tags = preg_replace($pat1, '_', $tags);
    185. 

  185.             $pat2 = array('/ _ /', '/ _/', '/(_){2,}/', '/ - /', '/ -/', '/(-){2,}/');
    186. 

  186.             $rep2 = array('', '', '_', '', '', '-');
    187. 

  187.             $tags = preg_replace($pat2, $rep2, $tags);
    188. 

  188.             $tags_arr = preg_split('/[ ]{1,}/', $tags, -1, PREG_SPLIT_NO_EMPTY);
    189. 

  189. 

  190.             if ($_POST['masstagopt'] == 'set')
    191. 

  191.             {
    192. 

  192.                 for ($x = 0; $x < count($idz); $x++)
    193. 

  193.                 {
    194. 

  194.                     for ($y = 0; $y < count($tags_arr); $y++)
    195. 

  195.                     {
    196. 

  196.                         $values[1] = '(' . (int)$idz[$x] . ', "' . $tags_arr[$y] . '", "")';
    197. 

  197.                         $values[0] = implode(', ', $values);
    198. 

  198.                     }
    199. 

  199.                 }
    200. 

  200.             } elseif ($_POST['masstagopt'] == 'set2')
    201. 

  201.             {
    202. 

  202.                 for ($x = 0; $x < count($idz); $x++)
    203. 

  203.                 {
    204. 

  204.                     for ($y = 0; $y < count($tags_arr); $y++)
    205. 

  205.                     {
    206. 

  206.                         $values[1] = '(' . (int)$idz[$x] . ', "", "' . $tags_arr[$y] . '")';
    207. 

  207.                         $values[0] = implode(', ', $values);
    208. 

  208.                     }
    209. 

  209.                 }
    210. 

  210.             }
    211. 

  211. 

  212.             $query .= $values[0];
    213. 

  213. 

  214.             if (count($idz) > 0)
    215. 

  215.                 $query = @mysql_query($query);
    216. 

  216.         }
    217. 

  217.     }
    218. 

  218. 

  219.     // x=update
    220. 

  220.     if (isset($_GET['x']) and $_GET['x'] == "update")
    221. 

  221.     {
    222. 

  222.         $headline = clean($_POST['headline']);
    223. 

  223.         $body = clean($_POST['body']);
    224. 

  224.         $alt_headline = clean($_POST['alt_headline']);
    225. 

  225.         $alt_body = clean($_POST['alt_body']);
    226. 

  226.         $comments_settings = clean($_POST['comments_settings']);
    227. 

  227.         $getid = intval($_GET['imageid']);
    228. 

  228. 

  229.         $newdatetime = intval($_POST['post_year']) . "-" . intval($_POST['post_month']) . "-" . intval($_POST['post_day']) . " " . intval($_POST['post_hour']) . ":" . intval($_POST['post_minute']) . ":" . date('s');
    230. 

  230. 

  231.         if ($_POST['autodate'] == 1) // post nn days after last post
    232. 

  232. 

  233.         {
    234. 

  234.             $query = mysql_query("select datetime + INTERVAL " . $cfgrow['daysafterlastpost'] . " DAY from " . $pixelpost_db_prefix . "pixelpost order by datetime desc limit 1");
    235. 

  235.             $row = mysql_fetch_row($query);
    236. 

  236.             if ($row)
    237. 

  237.                 $newdatetime = $row[0]; // If there is none, will default to the other value
    238. 

  238.         } else
    239. 

  239.             if ($_POST['autodate'] == 2) // post now
    240. 

  240. 

  241.             {
    242. 

  242.                 $newdatetime = gmdate("Y-m-d H:i:s", time() + (3600 * $cfgrow['timezone']));
    243. 

  243.             } else
    244. 

  244.                 if ($_POST['autodate'] == 3) // exifdate
    245. 

  245. 

  246.                 {
    247. 

  247.                     $query = mysql_query("select exif_info from " . $pixelpost_db_prefix . "pixelpost where id = '" . $getid . "'");
    248. 

  248.                     $exif_image = mysql_fetch_row($query);
    249. 

  249.                     if ($exif_image[0] != '')
    250. 

  250.                     {
    251. 

  251.                         include_once ('../includes/functions_exif.php');
    252. 

  252.                         $exif_info = stripslashes($exif_image[0]);
    253. 

  253.                         $exif_result = unserialize_exif($exif_info);
    254. 

  254.                         $exposuredatetime = $exif_result['DateTimeOriginalSubIFD'];
    255. 

  255.                         if ($exposuredatetime != '')
    256. 

  256.                         {
    257. 

  257.                             list($exifyear, $exifmonth, $exifday, $exifhour, $exifmin, $exifsec) = split('[: ]', $exposuredatetime);
    258. 

  258.                             $newdatetime = date("Y-m-d H:i:s", mktime($exifhour, $exifmin, $exifsec, $exifmonth, $exifday, $exifyear));
    259. 

  259.                         }
    260. 

  260.                     }
    261. 

  261.                 }
    262. 

  262. 

  263.         save_tags_edit($_POST['tags'], $getid);
    264. 

  264.         if ($cfgrow['altlangfile'] != 'Off')
    265. 

  265.             save_tags_edit($_POST['alt_tags'], $getid, "alt_");
    266. 

  266. 

  267.         $query = "delete from " . $pixelpost_db_prefix . "catassoc where image_id='$getid'";
    268. 

  268.         $result = mysql_query($query) || ("Error: " . mysql_error());
    269. 

  269.         eval_addon_admin_workspace_menu('image_update');
    270. 

  270.         //------------
    271. 

  271. 

  272.         if ($_FILES['userfile']['tmp_name'] != "")
    273. 

  273.         {
    274. 

  274.             $oldfilename = $_POST['oldfilename'];
    275. 

  275.             $userfile = strtolower($_FILES['userfile']['name']);
    276. 

  276.             $uploadfile = $upload_dir . $oldfilename;
    277. 

  277.             // NEW WORKSPACE ADDED
    278. 

  278.             eval_addon_admin_workspace_menu('image_reupload_start');
    279. 

  279.             if (getimagesize($_FILES['userfile']['tmp_name']))
    280. 

  280.             {
    281. 

  281.                 if (move_uploaded_file($_FILES['userfile']['tmp_name'], $uploadfile))
    282. 

  282.                 {
    283. 

  283.                     chmod($uploadfile, 0644);
    284. 

  284.                     $result = check_upload($_FILES['userfile']['error']);
    285. 

  285.                     //$filnamn =strtolower($_FILES['userfile']['name']);
    286. 

  286.                     //$filnamn = $oldfilename
    287. 

  287.                     $filtyp = $_FILES['userfile']['type'];
    288. 

  288.                     $filstorlek = $_FILES['userfile']['size'];
    289. 

  289.                     $status = "ok";
    290. 

  290.                     createthumbnail($oldfilename);
    291. 

  291.                     //Get the exif data so we can store it.
    292. 

  292.                     include_once ('../includes/functions_exif.php');
    293. 

  293.                     $exif_info_db = serialize_exif($uploadfile);
    294. 

  294.                     $update = sql_query("update " . $pixelpost_db_prefix . "pixelpost set exif_info='$exif_info_db' where id='$getid'");
    295. 

  295.                     $file_reupload_str = '<br/>' . $admin_lang_imgedit_file . '<b>' . $oldfilename . '</b> ' . $admin_lang_imgedit_file_isuploaded;
    296. 

  296.                     // NEW WORKSPACE ADDED
    297. 

  297.                     eval_addon_admin_workspace_menu('image_reupload_succesful');
    298. 

  298.                 } else
    299. 

  299.                 {
    300. 

  300.                     // something went wrong, try to describe what
    301. 

  301.                     if ($_FILES['userfile']['error'] != '0')
    302. 

  302.                     {
    303. 

  303.                         $result = check_upload($_FILES['userfile']['error']);
    304. 

  304.                     } else
    305. 

  305.                     {
    306. 

  306.                         $result = "$admin_lang_ni_upload_error";
    307. 

  307.                     }
    308. 

  308. 

  309.                     echo "<div id='warning'>$admin_lang_error ";
    310. 

  310.                     echo "<br/>$result</div><hr/>";
    311. 

  311.                     $status = "no";
    312. 

  312.                     // NEW WORKSPACE ADDED
    313. 

  313.                     eval_addon_admin_workspace_menu('image_reupload_failed');
    314. 

  314.                 }
    315. 

  315.             } else
    316. 

  316.             {
    317. 

  317.                 echo "<div id='warning'>$admin_lang_error ";
    318. 

  318.                 echo "<br/>$admin_lang_pp_up_not_an_image</div><hr/>";
    319. 

  319.                 $status = "no";
    320. 

  320.                 eval_addon_admin_workspace_menu('image_reupload_failed');
    321. 

  321.             } // end move
    322. 

  322.         } // end prepare of file */
    323. 

  323.         //------------
    324. 

  324.         if (isset($_POST['category']))
    325. 

  325.         {
    326. 

  326.             $query_val = array();
    327. 

  327. 

  328.             foreach ($_POST['category'] as $val)
    329. 

  329.             {
    330. 

  330.                 $category = $val;
    331. 

  331.                 $query_val[] = "(NULL,'$val','$getid')";
    332. 

  332.             }
    333. 

  333. 

  334.             $query_st = "INSERT INTO " . $pixelpost_db_prefix . "catassoc (id,cat_id,image_id) VALUES " . implode(",", $query_val) . ";";
    335. 

  335.             $result = mysql_query($query_st) || die("Error: " . mysql_error());
    336. 

  336.         }
    337. 

  337. 

  338.         $query = "update " . $pixelpost_db_prefix . "pixelpost set datetime='$newdatetime', headline='$headline', body='$body', category='$category', alt_headline='$alt_headline', alt_body='$alt_body', comments='$comments_settings' where id='$getid'";
    339. 

  339.         $result = mysql_query($query) || ("Error: " . mysql_error() . $admin_lang_imgedit_db_error);
    340. 

  340. 

  341. 

  342.         echo "<div class='jcaption'>$admin_lang_imgedit_update</div>
    343. 

  343.       <div class='content confirm'>$admin_lang_done $admin_lang_imgedit_updated #" . $getid . ". " . $file_reupload_str . "</div><p />";
    344. 

  344.     }
    345. 

  345. 

  346.     echo "<div id='caption'><b>$admin_lang_images</b></div>";
    347. 

  347. 

  348.     // x=delete
    349. 

  349.     if (isset($_GET['x']) and $_GET['x'] == "delete")
    350. 

  350.     {
    351. 

  351.         eval_addon_admin_workspace_menu('image_deleted');
    352. 

  352.         $getid = intval($_GET['imageid']);
    353. 

  353.         del_tags_edit($getid);
    354. 

  354.         $imagerow = sql_array("SELECT image FROM " . $pixelpost_db_prefix . "pixelpost where id='$getid'");
    355. 

  355.         $image = $imagerow['image'];
    356. 

  356.         $file_to_del = "$upload_dir" . $imagerow['image'];
    357. 

  357.         echo "<div class='jcaption'>$admin_lang_imgedit_deleted	</div>
    358. 

  358. 		<div class='content confirm'>";
    359. 

  359.         $query = sql_query("delete from " . $pixelpost_db_prefix . "pixelpost where id='$getid'");
    360. 

  360.         $query = "delete from " . $pixelpost_db_prefix . "catassoc where image_id='$getid'";
    361. 

  361.         $result = mysql_query($query) || ("Error: " . mysql_error());
    362. 

  362.         // added by ramin to delete the comments too!!
    363. 

  363.         $query = "delete from " . $pixelpost_db_prefix . "comments where parent_id='$getid'";
    364. 

  364.         $result = mysql_query($query) || ("Error: " . mysql_error());
    365. 

  365.         $query = "delete from " . $pixelpost_db_prefix . "tags where img_id='$getid'";
    366. 

  366.         $result = mysql_query($query) || ("Error: " . mysql_error());
    367. 

  367. 

  368.         echo "&nbsp;$admin_lang_imgedit_deleted1&nbsp;";
    369. 

  369. 

  370.         if (unlink($file_to_del))
    371. 

  371.             $image_message = "&nbsp;$admin_lang_imgedit_deleted2&nbsp;&nbsp;";
    372. 

  372.         else
    373. 

  373.             $image_message = "$admin_lang_imgedit_delete_error<p />";
    374. 

  374. 

  375.         echo $image_message;
    376. 

  376. 

  377.         $file_to_del = $cfgrow['thumbnailpath'] . "thumb_" . $imagerow['image'];
    378. 

  378. 

  379.         if (unlink($file_to_del))
    380. 

  380.             $image_message = "&nbsp;$admin_lang_imgedit_deleted3";
    381. 

  381.         else
    382. 

  382.             $image_message = "$admin_lang_imgedit_delete_error2<p />";
    383. 

  383. 

  384.         echo $image_message . "</div>";
    385. 

  385.     }
    386. 

  386. 

  387.     // print out a list over images/posts
    388. 

  388.     if (!isset($_GET['id']) or $_GET['id'] == "")
    389. 

  389.     {
    390. 

  390.         // resetting filter entries
    391. 

  391.         unset($selectfcat);
    392. 

  392.         unset($selectftag);
    393. 

  393.         unset($selectfalttag);
    394. 

  394.         unset($selectfmon);
    395. 

  395.         unset($findfid);
    396. 

  396.         if (isset($_POST['filtercat']) && $_POST['selectfcat'] != '')
    397. 

  397.             $selectfcat = $_POST['selectfcat'];
    398. 

  398.         else
    399. 

  399.             if (isset($_GET['selectfcat']))
    400. 

  400.                 $selectfcat = $_GET['selectfcat'];
    401. 

  401.             else
    402. 

  402.                 if (!isset($_GET['selectfcat']) or !isset($_POST['filtercat']))
    403. 

  403.                     $selectfcat = '';
    404. 

  404. 

  405.         if (isset($_POST['filtertag']) && $_POST['selectftag'] != '')
    406. 

  406.             $selectftag = $_POST['selectftag'];
    407. 

  407.         else
    408. 

  408.             if (isset($_GET['selectftag']))
    409. 

  409.                 $selectftag = $_GET['selectftag'];
    410. 

  410.             else
    411. 

  411.                 if (!isset($_GET['selectftag']) or !isset($_POST['filtertag']))
    412. 

  412.                     $selectftag = '';
    413. 

  413. 

  414.         if (isset($_POST['filteralttag']) && $_POST['selectfalttag'] != '')
    415. 

  415.             $selectfalttag = $_POST['selectfalttag'];
    416. 

  416.         else
    417. 

  417.             if (isset($_GET['selectfalttag']))
    418. 

  418.                 $selectfalttag = $_GET['selectfalttag'];
    419. 

  419.             else
    420. 

  420.                 if (!isset($_GET['selectfalttag']) or !isset($_POST['filteralttag']))
    421. 

  421.                     $selectfalttag = '';
    422. 

  422. 

  423.         if (isset($_POST['filtermon']) && $_POST['selectfmon'] != '')
    424. 

  424.             $selectfmon = $_POST['selectfmon'];
    425. 

  425.         else
    426. 

  426.             if (isset($_GET['selectfmon']))
    427. 

  427.                 $selectfmon = $_GET['selectfmon'];
    428. 

  428.             else
    429. 

  429.                 if (!isset($_GET['selectfmon']) or !isset($_POST['filtermon']))
    430. 

  430.                     $selectfmon = '';
    431. 

  431. 

  432.         if (isset($_POST['findid']) && $_POST['findfid'] != '')
    433. 

  433.             $findfid = $_POST['findfid'];
    434. 

  434.         else
    435. 

  435.             if (!isset($_POST['findid']))
    436. 

  436.                 $findfid = '';
    437. 

  437. 

  438.         // Get number of photos in database depending on filter
    439. 

  439.         if (isset($selectfcat) and $selectfcat != '')
    440. 

  440.         {
    441. 

  441.             $query = "select count(*) as count from " . $pixelpost_db_prefix . "pixelpost as a, " . $pixelpost_db_prefix . "catassoc as b WHERE a.id = b.image_id AND b.cat_id = " . $selectfcat;
    442. 

  442.         } else
    443. 

  443.             if (isset($selectftag) and $selectftag != '')
    444. 

  444.             {
    445. 

  445.                 $query = "select count(*) as count from " . $pixelpost_db_prefix . "pixelpost as a, " . $pixelpost_db_prefix . "tags as b WHERE a.id = b.img_id AND b.tag LIKE '" . $selectftag . "'";
    446. 

  446.             } else
    447. 

  447.                 if (isset($selectfalttag) and $selectfalttag != '')
    448. 

  448.                 {
    449. 

  449.                     $query = "select count(*) as count from " . $pixelpost_db_prefix . "pixelpost as a, " . $pixelpost_db_prefix . "tags as b WHERE a.id = b.img_id AND b.alt_tag LIKE '" . $selectfalttag . "'";
    450. 

  450.                 } else
    451. 

  451.                     if (isset($selectfmon) and $selectfmon != '')
    452. 

  452.                     {
    453. 

  453.                         $query = "select count(*) as count from " . $pixelpost_db_prefix . "pixelpost WHERE datetime LIKE '" . $selectfmon . "%'";
    454. 

  454.                     } else
    455. 

  455.                         if (isset($findfid) and $findfid != '')
    456. 

  456.                         {
    457. 

  457.                             $query = "SELECT count(*) FROM " . $pixelpost_db_prefix . "pixelpost WHERE id = " . $findfid . " limit 0,1";
    458. 

  458.                         } else
    459. 

  459.                         {
    460. 

  460.                             $query = "select count(*) as count from " . $pixelpost_db_prefix . "pixelpost";
    461. 

  461.                         }
    462. 

  462.                         $photonumb = sql_array($query);
    463. 

  463.         if ($photonumb['count'])
    464. 

  464.             $pixelpost_photonumb = $photonumb['count'];
    465. 

  465.         else
    466. 

  466.             $pixelpost_photonumb = "0";
    467. 

  467. 

  468. 

  469.         if (!isset($_GET['page']) or $_GET['page'] == "")
    470. 

  470.             $page = "0";
    471. 

  471.         else
    472. 

  472.             $page = intval($_GET['page']);
    473. 

  473.         $_SESSION['page_pp'] = (int)$page;
    474. 

  474.         if (isset($_SESSION['numimg_pp']))
    475. 

  475.         {
    476. 

  476.             $_SESSION['numimg_pp'] = (int)$_SESSION['numimg_pp'];
    477. 

  477.         }
    478. 

  478. 

  479.         if (isset($_SESSION['numimg_pp']) and $_SESSION['numimg_pp'] == 0 or !isset($_SESSION['numimg_pp']))
    480. 

  480.             $_SESSION['numimg_pp'] = 10;
    481. 

  481.         elseif (isset($_POST['numimg_pp']) && $_POST['numimg_pp'] > 0)
    482. 

  482.         {
    483. 

  483.             $_SESSION['numimg_pp'] = ($pixelpost_photonumb < $_POST['numimg_pp'] && $pixelpost_photonumb > 0) ? $pixelpost_photonumb : $_POST['numimg_pp'];
    484. 

  484.         }
    485. 

  485. 

  486.         $currntpg = ceil($page / $_SESSION['numimg_pp']) + 1;
    487. 

  487.         // calculate the number of pages
    488. 

  488.         $num_img_pages = ceil($pixelpost_photonumb / $_SESSION['numimg_pp']);
    489. 

  489.         $num_img_pages = ($num_img_pages > 0) ? $num_img_pages : 1;
    490. 

  490.         // Now the queries to show the select options for filtering
    491. 

  491.         // the query for the select by category statement
    492. 

  492.         $selectfcats = "<option value='' selected=\"selected\">All</option>\n";
    493. 

  493.         $query = mysql_query("select * from " . $pixelpost_db_prefix . "categories order by name");
    494. 

  494.         while (list($id, $name) = mysql_fetch_row($query))
    495. 

  495.         {
    496. 

  496.             $selectfcats .= "<option value='$id'" . ($id == $selectfcat ? ' selected=\"selected\"' : '') . ">" . pullout($name) . "</option>\n";
    497. 

  497.         }
    498. 

  498.         // the query for the select by tag statement
    499. 

  499.         $selectftags = "<option value='' selected=\"selected\">All</option>\n";
    500. 

  500.         $query = mysql_query("select distinct tag from " . $pixelpost_db_prefix . "tags WHERE tag NOT LIKE '' order by tag");
    501. 

  501.         while (list($tag) = mysql_fetch_row($query))
    502. 

  502.         {
    503. 

  503.             $selectftags .= "<option value='$tag'" . ($tag == $selectftag ? ' selected=\"selected\"' : '') . ">" . $tag . "</option>\n";
    504. 

  504.         }
    505. 

  505.         // the query for the select by alt_tag statement
    506. 

  506.         if ($cfgrow['altlangfile'] != 'Off')
    507. 

  507.         {
    508. 

  508.             $selectfalttags = "<option value='' selected=\"selected\">All</option>\n";
    509. 

  509.             $query = mysql_query("select distinct alt_tag from " . $pixelpost_db_prefix . "tags WHERE alt_tag NOT LIKE '' order by alt_tag");
    510. 

  510.             while (list($alt_tag) = mysql_fetch_row($query))
    511. 

  511.             {
    512. 

  512.                 $selectfalttags .= "<option value='$alt_tag'" . ($alt_tag == $selectfalttag ? ' selected=\"selected\"' : '') . ">" . $alt_tag . "</option>\n";
    513. 

  513.             }
    514. 

  514.         }
    515. 

  515.         // the query for the select by month statement
    516. 

  516.         $selectfmons = "<option value='' selected=\"selected\">All</option>\n";
    517. 

  517.         $query = mysql_query("select distinct DATE_FORMAT(datetime, '%Y-%m') as fmonth from " . $pixelpost_db_prefix . "pixelpost order by datetime desc");
    518. 

  518.         while (list($fmonth) = mysql_fetch_row($query))
    519. 

  519.         {
    520. 

  520.             $selectfmons .= "<option value='$fmonth'" . ($fmonth == $selectfmon ? ' selected=\"selected\"' : '') . ">" . $fmonth . "</option>\n";
    521. 

  521.         }
    522. 

  522.         $langs = 'admin_lang_' . $cfgrow['langfile'];
    523. 

  523.         $langs = ${$langs};
    524. 

  524.         if ($cfgrow['altlangfile'] != 'Off')
    525. 

  525.         {
    526. 

  526.             $altlangs = 'admin_lang_' . $cfgrow['altlangfile'];
    527. 

  527.             $altlangs = ${$altlangs};
    528. 

  528.         }
    529. 

  529.         echo "<div class='jcaption'><a href='' onclick=\"flip('additionalSelects'); return false;\" title=\"$admin_lang_show $admin_lang_options\">$admin_lang_imgedit_title1 $admin_lang_ni_select_cat, $admin_lang_ni_month, ID</a></div>
    530. 

  530. 	  <div id=\"additionalSelects\">";
    531. 

  531.         if ($selectfcat == '' and $selectftag == '' and $selectfalttag == '' and $selectfmon == '')
    532. 

  532.             echo "<script language='javascript' type='text/javascript'>flip('additionalSelects');</script>";
    533. 

  533.         echo "<div class='content'>
    534. 

  534. 		<form method='post' name='filter' accept-charset='UTF-8' action='index.php?view=images'>
    535. 

  535. 		<table width='400' border='0' cellpadding='2'>
    536. 

  536. 		<tr>
    537. 

  537. 		<td align='right'><strong>$admin_lang_show $admin_lang_imgedit_category_plural:&nbsp;</strong></td>
    538. 

  538. 		<td><select name='selectfcat'>$selectfcats</select></td>
    539. 

  539. 		<td><input class='cmnt-buttons' type='submit' name='filtercat' value='$admin_lang_go' /></td>
    540. 

  540. 		</tr>
    541. 

  541. 		<tr>
    542. 

  542. 		<td align='right'><strong>$admin_lang_show $admin_lang_ni_tags $langs:&nbsp;</strong></td>
    543. 

  543. 		<td><select name='selectftag'>$selectftags</select></td>
    544. 

  544. 		<td><input class='cmnt-buttons' type='submit' name='filtertag' value='$admin_lang_go' /></td>
    545. 

  545. 		</tr>";
    546. 

  546.         if ($cfgrow['altlangfile'] != 'Off')
    547. 

  547.         {
    548. 

  548.             echo "<tr>
    549. 

  549. 			<td align='right'><strong>$admin_lang_show $admin_lang_ni_tags $altlangs:&nbsp;</strong></td>
    550. 

  550. 			<td><select name='selectfalttag'>$selectfalttags</select></td>
    551. 

  551. 			<td><input class='cmnt-buttons' type='submit' name='filteralttag' value='$admin_lang_go' /></td>
    552. 

  552. 			</tr>";
    553. 

  553.         }
    554. 

  554.         echo "<tr>
    555. 

  555. 		<td align='right'><strong>$admin_lang_show " . ucfirst($admin_lang_ni_month) . ":&nbsp;</strong></td>
    556. 

  556. 		<td><select name='selectfmon'>$selectfmons</select></td>
    557. 

  557. 		<td><input class='cmnt-buttons' type='submit' name='filtermon' value='$admin_lang_go' /></td>
    558. 

  558. 		</tr>
    559. 

  559. 		<tr>
    560. 

  560. 		<td align='right' height='50'><strong>$admin_lang_show ID:&nbsp;</strong></td>
    561. 

  561. 		<td><input type='text' size='6' name='findfid' value='$findfid' /></td>
    562. 

  562. 		<td><input class='cmnt-buttons' type='submit' name='findid' value='$admin_lang_go' /></td>
    563. 

  563. 		</tr>
    564. 

  564. 		</table></form></div></div>";
    565. 

    566. 

  566.         //the filter stuff for showing the correct browse pages
    567. 

  567.         if (isset($selectfcat) and $selectfcat != '')
    568. 

  568.         {
    569. 

  569.             $getfstring = '&amp;selectfcat=' . $selectfcat;
    570. 

  570.         } else
    571. 

  571.             if (isset($selectftag) and $selectftag != '')
    572. 

  572.             {
    573. 

  573.                 $getfstring = '&amp;selectftag=' . $selectftag;
    574. 

  574.             } else
    575. 

  575.                 if (isset($selectfalttag) and $selectfalttag != '')
    576. 

  576.                 {
    577. 

  577.                     $getfstring = '&amp;selectfalttag=' . $selectfalttag;
    578. 

  578.                 } else
    579. 

  579.                     if (isset($selectfmon) and $selectfmon != '')
    580. 

  580.                     {
    581. 

  581.                         $getfstring = '&amp;selectfmon=' . $selectfmon;
    582. 

  582.                     } else
    583. 

  583.                     {
    584. 

  584.                         $getfstring = '';
    585. 

  585.                     }
    586. 

  586. 

  587.                     echo "<div class=\"jcaption\"><strong><span id=\"photonumb\">$pixelpost_photonumb</span>$admin_lang_imgedit_title2" . $_SESSION['numimg_pp'] . "$admin_lang_imgedit_title3$currntpg$admin_lang_imgedit_title4$num_img_pages</strong>
    588. 

  588. 		</div>
    589. 

  589. 		<div class=\"content\">
    590. 

  590. 		<form method=\"post\" name=\"manageposts\" id=\"manageposts\"  accept-charset=\"UTF-8\" action=\"index.php?view=images&amp;page=$page$getfstring\">
    591. 

  591. 			<input class=\"cmnt-buttons\" type=\"button\" onclick=\"checkAll(document.getElementById('manageposts')); return false; \" value=\"$admin_lang_cmnt_check_all\" name=\"chechallbox\" />
    592. 

  592. 			<input class=\"cmnt-buttons\" type=\"button\" onclick=\"invertselection(document.getElementById('manageposts')); return false; \" value=\"$admin_lang_cmnt_invert_checks\" name=\"invcheckbox\" />
    593. 

  593. 			<input class=\"cmnt-buttons\" type=\"submit\" name=\"submitdelete\" value=\"$admin_lang_cmnt_del_selected\" onclick=\"return (confirm('Delete all selected images? \\n  \'Cancel\' to stop, \'OK\' to delete.')) ? document.getElementById('manageposts').action='" . PHP_SELF . "?view=images&amp;action=massdelete' : false;\"/>
    594. 

  594. 			<input class=\"cmnt-buttons\" type=\"submit\" name=\"submitpublish\" value=\"$admin_lang_cmnt_publish_sel\" onclick=\"return (confirm('Publish all selected images? \\n  \'Cancel\' to stop, \'OK\' to publish.')) ? document.getElementById('manageposts').action='" . PHP_SELF . "?view=images&amp;action=masspublish' : false;\"/>
    595. 

  595. 			<br/><br/>
    596. 

  596. 			<select name=\"mass-edit-cat\" id=\"mass-edit-cat\" onchange=\"document.getElementById('manageposts').action='" . PHP_SELF . "?view=images&amp;action=masscatedit&amp;cmd='+this.options[this.selectedIndex].value; \" >\n
    597. 

  597. 			<option value=\"\">$admin_lang_imgedit_mass_1</option> \n
    598. 

  598. 			<option value=\"\"></option> \n
    599. 

  599. 			<option value=\"\">--- $admin_lang_imgedit_mass_2  ---</option> \n";
    600. 

  600. 

  601.         $query = mysql_query("select * from " . $pixelpost_db_prefix . "categories order by name");
    602. 

  602. 

  603.         while (list($id, $name) = mysql_fetch_row($query))
    604. 

  604.         {
    605. 

  605.             $name = pullout($name);
    606. 

  606.             $cat_name[] = $name;
    607. 

  607.             $ids[] = $id;
    608. 

  608.             echo "<option value=\"assign-$id\">$name</option>\n";
    609. 

  609.         }
    610. 

  610. 

  611.         echo "<option value=\"\"></option> \n
    612. 

  612. 	         		<option value=\"\">--- $admin_lang_imgedit_mass_3 ---</option> \n";
    613. 

  613. 

  614.         for ($k = 0; $k < count($cat_name); $k++)
    615. 

  615.         {
    616. 

  616.             $name = $cat_name[$k];
    617. 

  617.             $id = $ids[$k];
    618. 

  618. 

  619.             echo "<option value='unassign-$id'>$name</option>\n";
    620. 

  620.         }
    621. 

  621. 

  622.         echo "</select> <input type='text' size='40' name='masstag' value='$admin_lang_imgedit_masstag...' onblur=\"if(this.value=='') this.value='$admin_lang_imgedit_masstag...';\" onfocus=\"if(this.value=='$admin_lang_imgedit_masstag...') this.value='';\" /> <select name='masstagopt' size='1'><option value=''></option><option value='set'>$admin_lang_imgedit_masstag_set</option><option value='set2'>$admin_lang_imgedit_masstag_set2</option><option value='unset'>$admin_lang_imgedit_masstag_unset</option></select>";
    623. 

  623.         echo " <input type=\"submit\" name=\"submit-mass-catedit\" id=\"submit-mass-catedit\" value=\"" . $admin_lang_imgedit_mass_4 . "\" /><p /> <ul>";
    624. 

  624. 

  625. 

  626.         //cat filter
    627. 

  627.         if (isset($selectfcat) and $selectfcat != '')
    628. 

  628.         {
    629. 

  629.             $query = "SELECT a.id, datetime, headline, body, image, category, alt_headline FROM " . $pixelpost_db_prefix . "pixelpost as a, " . $pixelpost_db_prefix . "catassoc as b WHERE a.id = b.image_id AND b.cat_id = " . $selectfcat . " ORDER BY a.datetime DESC limit $page," . $_SESSION['numimg_pp'];
    630. 

  630.         }
    631. 

  631.         //tag filter
    632. 

  632.         else
    633. 

  633.             if (isset($selectftag) and $selectftag != '')
    634. 

  634.             {
    635. 

  635.                 $query = "SELECT id, datetime, headline, body, image, category, alt_headline FROM " . $pixelpost_db_prefix . "pixelpost as a, " . $pixelpost_db_prefix . "tags as b WHERE a.id = b.img_id AND b.tag LIKE '" . $selectftag . "' ORDER BY a.datetime DESC limit $page," . $_SESSION['numimg_pp'];
    636. 

  636.             }
    637. 

  637.         //alt tag filter
    638. 

  638.             else
    639. 

  639.                 if (isset($selectfalttag) and $selectfalttag != '')
    640. 

  640.                 {
    641. 

  641.                     $query = "SELECT id, datetime, headline, body, image, category, alt_headline FROM " . $pixelpost_db_prefix . "pixelpost as a, " . $pixelpost_db_prefix . "tags as b WHERE a.id = b.img_id AND b.alt_tag LIKE '" . $selectfalttag . "' ORDER BY a.datetime DESC limit $page," . $_SESSION['numimg_pp'];
    642. 

  642.                 }
    643. 

  643.         //month filter
    644. 

  644.                 else
    645. 

  645.                     if (isset($selectfmon) and $selectfmon != '')
    646. 

  646.                     {
    647. 

  647.                         $query = "SELECT id, datetime, headline, body, image, category, alt_headline FROM " . $pixelpost_db_prefix . "pixelpost WHERE datetime LIKE '" . $selectfmon . "%' ORDER BY datetime DESC limit $page," . $_SESSION['numimg_pp'];
    648. 

  648.                     } else
    649. 

  649.                         if (isset($findfid) and $findfid != '')
    650. 

  650.                         {
    651. 

  651.                             $query = "SELECT id, datetime, headline, body, image, category, alt_headline FROM " . $pixelpost_db_prefix . "pixelpost WHERE id = " . $findfid . " limit 0,1";
    652. 

  652.                         } else
    653. 

  653.                         {
    654. 

  654.                             $query = "SELECT id, datetime, headline, body, image, category, alt_headline FROM " . $pixelpost_db_prefix . "pixelpost ORDER BY datetime DESC limit $page," . $_SESSION['numimg_pp'];
    655. 

  655.                         }
    656. 

  656. 

  657.                         // construct the pagelinks
    658. 

  658.                         if ($pixelpost_photonumb > $_SESSION['numimg_pp'])
    659. 

  659.                         {
    660. 

  660.                             $pagecounter = 0;
    661. 

  661.                             $pcntr = 0;
    662. 

  662.                             $image_page_Links = "";
    663. 

  663.                             while ($pcntr < $num_img_pages)
    664. 

  664.                             {
    665. 

  665.                                 $pcntr++;
    666. 

  666. 

  667.                                 $page_num = ($page == $pagecounter) ? "<strong>$pcntr</strong>" : $pcntr;
    668. 

  668. 

  669.                                 $image_page_Links .= "<a href='index.php?view=images&amp;page=$pagecounter$getfstring'>$page_num</a> ";
    670. 

  670.                                 $pagecounter = $pagecounter + $_SESSION['numimg_pp'];
    671. 

  671.                             } // end while
    672. 

  672.                             if ($page < (($num_img_pages - 1) * $_SESSION['numimg_pp']))
    673. 

  673.                             {
    674. 

  674.                                 $newpage = $page + $_SESSION['numimg_pp'];
    675. 

  675.                                 $image_page_Links .= "<a href='index.php?view=images&amp;page=$newpage$getfstring'>$admin_lang_next</a>";
    676. 

  676.                             }
    677. 

  677.                             if ($page >= $_SESSION['numimg_pp'])
    678. 

  678.                             {
    679. 

  679.                                 $newpage = $page - $_SESSION['numimg_pp'];
    680. 

  680.                                 $image_page_Links = "<a href='index.php?view=images&amp;page=$newpage$getfstring'>$admin_lang_prev</a> " . $image_page_Links;
    681. 

  681.                             }
    682. 

  682.                             echo $image_page_Links . "<hr />";
    683. 

  683.                         }
    684. 

  684. 

  685.         $pagec = 0;
    686. 

  686.         $images = mysql_query($query);
    687. 

  687. 

  688.         while (list($id, $datetime, $headline, $body, $image, $category, $alt_headline) = mysql_fetch_row($images))
    689. 

  689.         {
    690. 

  690.             $headline = pullout($headline);
    691. 

  691.             $alt_headline = pullout($alt_headline);
    692. 

  692.             # 		$headline = htmlentities($headline);
    693. 

  693. 

  694.             list($local_width, $local_height, $type, $attr) = getimagesize($cfgrow['imagepath'] . $image);
    695. 

  695. 

  696.             $fs = filesize($cfgrow['imagepath'] . $image);
    697. 

  697.             $fs *= 0.001;
    698. 

  698. 

  699.             if (isset($_POST['moderate_image_boxes']))
    700. 

  700.             {
    701. 

  701.                 $checked = in_array($id, $_POST['moderate_image_boxes']) ? 'checked' : '';
    702. 

  702.             } else
    703. 

  703.             {
    704. 

  704.                 $checked = '';
    705. 

  705.             }
    706. 

  706. 

  707.             echo "<li><a href=\"../index.php?showimage=$id\"><img src=\"" . $cfgrow['thumbnailpath'] . "thumb_$image\" align=\"left\" hspace=\"3\" alt=\"Click to go to image\" /></a>
    708. 

  708. 				<input type=\"checkbox\" class=\"images-checkbox\" name=\"moderate_image_boxes[]\" value=\"$id\" $checked />
    709. 

  709. 				<strong><a href=\"" . PHP_SELF . "?view=images&amp;id=$id\">[$admin_lang_imgedit_edit]</a> <a href=\"../index.php?showimage=$id\" target=\"_blank\">[$admin_lang_imgedit_preview]</a> <a onclick=\"return confirmDeleteImg()\" href=\"" . PHP_SELF . "?view=images&amp;x=delete&amp;imageid=$id\">[$admin_lang_imgedit_delete]</a></strong><br/>
    710. 

  710. 				<strong>#$id<br/>
    711. 

  711. 				$langs $admin_lang_imgedit_title</strong> $headline<br/>";
    712. 

  712.             if ($cfgrow['altlangfile'] != 'Off')
    713. 

  713.             {
    714. 

  714.                 echo "<strong>$altlangs $admin_lang_imgedit_alttitle</strong> $alt_headline<br/>";
    715. 

  715.             }
    716. 

  716.             echo "<strong>$admin_lang_imgedit_file_name</strong> $image<br/>
    717. 

  717. 				<strong>$admin_lang_imgedit_dimensions</strong> $local_width x $local_height, $fs KB<br/>
    718. 

  718. 				<strong>$admin_lang_imgedit_tbpublished</strong> $datetime<br/>";
    719. 

    720. 

  720.             // categories
    721. 

  721.             echo "<strong>$admin_lang_imgedit_category_plural &nbsp;</strong>";
    722. 

  722.             $category_list = mysql_query("SELECT t2.name FROM " . $pixelpost_db_prefix . "catassoc t1 INNER JOIN " . $pixelpost_db_prefix . "categories t2 ON t1.cat_id = t2.id WHERE t1.image_id = '$id' ORDER BY t2.name ");
    723. 

  723. 

  724.             while (list($category_name) = mysql_fetch_row($category_list))
    725. 

  725.             {
    726. 

  726.                 $category_name = pullout($category_name);
    727. 

  727.                 echo "[$category_name]";
    728. 

  728.             }
    729. 

  729. 

  730.             echo "<br/>";
    731. 

  731. 

  732.             // tags
    733. 

  733.             echo "<strong>$langs $admin_lang_ni_tags:</strong> ";
    734. 

  734.             echo list_tags_edit($id);
    735. 

  735.             if ($cfgrow['altlangfile'] != 'Off')
    736. 

  736.             {
    737. 

  737.                 echo "<br/><strong>$altlangs $admin_lang_ni_tags:</strong> ";
    738. 

  738.                 echo list_tags_edit($id, "alt_");
    739. 

  739.             }
    740. 

  740.             echo "<br/>";
    741. 

  741.             // added workspace requested by KArin on the forums
    742. 

  742.             eval_addon_admin_workspace_menu('image_list');
    743. 

  743.             // end workspace
    744. 

  744.             echo "</li>";
    745. 

  745. 

  746.             $pagec++;
    747. 

  747.         }
    748. 

  748. 

  749.         echo "</ul></form>";
    750. 

  750. 

  751.         if ($pixelpost_photonumb > $_SESSION['numimg_pp'])
    752. 

  752.         {
    753. 

  753.             echo $image_page_Links;
    754. 

  754.         }
    755. 

  755. 

  756.         if (isset($_GET['page']))
    757. 

  757.         {
    758. 

  758.             $page = '&amp;page=' . $_GET['page'];
    759. 

  759.         } else
    760. 

  760.         {
    761. 

  761.             $page = '';
    762. 

  762.         }
    763. 

  763. 

  764.         echo '<br/>
    765. 

  765.        <form method="post" action="' . PHP_SELF . '?view=images' . $page . $getfstring . '" accept-charset="UTF-8">';
    766. 

  766.         echo $admin_lang_show . ' ';
    767. 

  767.         echo '<input type="text" name="numimg_pp" size="2" value="' . $_SESSION['numimg_pp'] . '" /> ' . $admin_lang_imgedit_img_page . '.
    768. 

  768. 	    <input type="submit" value="' . $admin_lang_go . '" />
    769. 

  769. 		     		</form>';
    770. 

  770.         echo "</div><p />";
    771. 

  771.     } else
    772. 

  772.     {
    773. 

  773.         // an id is specified, edit the image, pull it out and put it in a form
    774. 

  774.         $getid = intval($_GET['id']);
    775. 

  775.         $imagerow = sql_array("SELECT * FROM " . $pixelpost_db_prefix . "pixelpost where id='$getid'");
    776. 

  776.         $headline = pullout($imagerow['headline']);
    777. 

  777.         $headline = htmlspecialchars($headline, ENT_QUOTES);
    778. 

  778.         $body = pullout($imagerow['body']);
    779. 

  779. 

  780.         $alt_headline = pullout($imagerow['alt_headline']);
    781. 

  781.         $alt_headline = htmlspecialchars($alt_headline, ENT_QUOTES);
    782. 

  782.         $alt_body = pullout($imagerow['alt_body']);
    783. 

  783. 

  784.         $image = $imagerow['image'];
    785. 

  785.         // fetch the categories
    786. 

  786.         $category = array();
    787. 

  787. 		$query = mysql_query("SELECT `cat_id` FROM " . $pixelpost_db_prefix . "catassoc where image_id='$getid'");
    788. 

  788. 		while(list($cat_id) = mysql_fetch_row($query))
    789. 

  789. 		{
    790. 

  790. 			$category[] = $cat_id;
    791. 

  791. 		}
    792. 

  792. 		
    793. 

  793.         echo "
    794. 

  794. 		<div id='submenu'>
    795. 

  795. 		<a href='?view=images&amp;id=$getid' ";
    796. 

    797. 

  797.         $selectedclass = '';
    798. 

  798.         if (!isset($_GET["imagesview"]))
    799. 

  799.         {
    800. 

  800.             $selectedclass = 'selectedsubmenu';
    801. 

  801.             $_GET['imagesview'] = '';
    802. 

  802.         }
    803. 

  803. 

  804.         echo "class='" . $selectedclass . "'>$admin_lang_imgedit_edit_post</a>";
    805. 

  805.         echo_addon_admin_menus($addon_admin_functions, "images", "&amp;id=" . $getid);
    806. 

  806. 

  807.         echo "</div>";
    808. 

  808. 

  809.         eval_addon_admin_workspace_menu("image_edit", "images");
    810. 

  810. 

  811.         // edit image, list categories etc.
    812. 

  812. 

  813.         if (isset($_GET['imagesview']) and $_GET['imagesview'] == 'edit' or isset($_GET['imagesview']) and $_GET['imagesview'] == '' or !isset($_GET['imagesview']))
    814. 

  814.         {
    815. 

  815.             $tags = list_tags_edit($_GET['id']);
    816. 

  816. 

  817.             if ($cfgrow['altlangfile'] != 'Off')
    818. 

  818.                 $alt_tags = list_tags_edit($_GET['id'], "alt_");
    819. 

  819. 

  820.             echo "
    821. 

  821. 			<form method='post' action='" . PHP_SELF . "?view=images&amp;x=update&amp;imageid=" . $getid . "&amp;page=" . $_SESSION['page_pp'] . "' enctype='multipart/form-data' accept-charset='UTF-8'>";
    822. 

  822.             echo "
    823. 

  823. 			<div class='jcaption'>$admin_lang_imgedit_reupimg</div>
    824. 

  824. 			<div class='content'>
    825. 

  825. 				<input name='userfile' type='file' size='60'/>
    826. 

  826.         		<input name='oldfilename' type = 'hidden' value='$image' />
    827. 

  827. 			</div>
    828. 

  828. 			<div class='jcaption'>$admin_lang_imgedit_title</div>
    829. 

  829. 			<div class='content'>
    830. 

  830. 				<input type='text' name='headline' value='$headline' style='width:300px;' />
    831. 

  831. 			</div>
    832. 

  832. 			<div class='jcaption'>$admin_lang_imgedit_tags_edit</div>
    833. 

  833. 			<div class='content'><input type='text' name='tags' style='width:550px;' value='$tags' />";
    834. 

  834.             eval_addon_admin_workspace_menu('edit_image_form_def_lang');
    835. 

  835.             echo "</div>
    836. 

  836. 			<div class='jcaption'>$admin_lang_imgedit_txt_desc</div>
    837. 

  837. 			<div class='content'>";
    838. 

    839. 

  839.             if ($cfgrow['markdown'] == 'T')
    840. 

  840.             {
    841. 

  841.                 echo "
    842. 

  842.  			<div>" . $admin_lang_ni_markdown_text . "<br/>
    843. 

  843.   			<a href='http://daringfireball.net/projects/markdown/' title='<?php echo $admin_lang_ni_markdown_hp; ?>' target='_blank'>" . $admin_lang_ni_markdown_hp . "</a>
    844. 

  844.   			&nbsp;&nbsp;&nbsp;
    845. 

  845.   			<a href='http://daringfireball.net/projects/markdown/basics' title='<?php echo $admin_lang_ni_markdown_element; ?>' target='_blank'>" . $admin_lang_ni_markdown_element . "</a>
    846. 

  846.   			&nbsp;&nbsp;&nbsp;
    847. 

  847.   			<a href='http://daringfireball.net/projects/markdown/syntax' title='<?php echo $admin_lang_ni_markdown_syntax; ?>' target='_blank'>" . $admin_lang_ni_markdown_syntax . "</a>
    848. 

  848.   			</div>";
    849. 

  849.             }
    850. 

  850. 

  851.             echo "	<textarea name='body' cols='50' rows='5' style='width:95%;'>$body</textarea>
    852. 

  852. 			</div>
    853. 

  853. 			<div class='jcaption'>$admin_lang_imgedit_category_plural</div>
    854. 

  854. 			<div class='content'>
    855. 

  855. 			";
    856. 

  856.             category_list_as_table($category, $cfgrow);
    857. 

  857.             echo "</div>";
    858. 

  858. 

  859.             list($img_width, $img_height, $type, $attr) = getimagesize($cfgrow['imagepath'] . $image);
    860. 

  860.             $img_size = filesize($cfgrow['imagepath'] . $image);
    861. 

  861.             $img_size = number_format($img_size);
    862. 

  862. 

  863.             $yearUpload = substr($imagerow['datetime'], 0, 4);
    864. 

  864.             $monthUpload = substr($imagerow['datetime'], 5, 2);
    865. 

  865.             $dayUpload = substr($imagerow['datetime'], 8, 2);
    866. 

  866.             $hourUpload = substr($imagerow['datetime'], 11, 2);
    867. 

  867.             $minuteUpload = substr($imagerow['datetime'], 14, 2);
    868. 

  868.             $secondUpload = substr($imagerow['datetime'], 17, 2);
    869. 

  869.             $dateUpload = mktime($hourUpload, $minuteUpload, $secondUpload, $monthUpload, $dayUpload, $yearUpload);
    870. 

  870.             $tz = $cfgrow["timezone"];
    871. 

  871.             $cur_time = gmdate("Y-m-d H:i:s", time() + (3600 * $tz));
    872. 

  872. 

  873.             echo "<div class='jcaption'>$admin_lang_imgedit_dtime</div>
    874. 

  874. 			<div class='content'>
    875. 

  875.      <input type='radio' name='autodate' value='2' id='postnow'/><label for='postnow'>" . $admin_lang_ni_post_now . " (~" . $cur_time . ")</label><br/>
    876. 

  876.      <input type='radio' name='autodate' value='1' id='postdayaft'/><label for='postdayaft'>";
    877. 

  877.             if ($cfgrow['daysafterlastpost'] == 1)
    878. 

  878.                 echo $admin_lang_ni_post_one_day_after;
    879. 

  879.             else
    880. 

  880.                 echo $admin_lang_ni_post . $cfgrow['daysafterlastpost'] . $admin_lang_ni_post_multiple_days_after;
    881. 

  881.             echo "</label><br/>
    882. 

  882.      <input type='radio' name='autodate' value='3' id='exifdate'/><label for='exifdate'>" . $admin_lang_ni_post_exif_date . "</label><br/>
    883. 

  883.      <input type='radio' name='autodate' value='0' checked='checked' id='specificdate'/><label for='specificdate'>" . $admin_lang_ni_post_spec_date . "</label><br/><br/>
    884. 

  884. 

  885. 					 <table id=\"datetable\"><tr>
    886. 

  886. 					 <td>{$admin_lang_ni_year}</td><td style=\"width:5px;\">-</td><td>{$admin_lang_ni_month}</td><td style=\"width:5px;\">-</td><td>{$admin_lang_ni_day}</td><td><img src='../includes/spacer.gif' height='1' width='30' alt=''/></td><td>{$admin_lang_ni_hour}</td><td style=\"width:5px;\">-</td><td>{$admin_lang_ni_min}</td>
    887. 

  887.  					</tr><tr><td><select name='post_year'>
    888. 

  888. 						<option value='" . date("Y", $dateUpload) . "'>" . date("Y", $dateUpload) . "</option>";
    889. 

  889.             $lc = 2002;
    890. 

  890.             while ($lc <= (date("Y") + 3))
    891. 

  891.             {
    892. 

  892.                 echo "<option";
    893. 

  893.                 if (isset($_POST['post_year']) and $_POST['post_year'] == $lc)
    894. 

  894.                     echo " SELECTED";
    895. 

  895.                 echo " value='$lc'>$lc</option>";
    896. 

  896.                 $lc++;
    897. 

  897.             }
    898. 

  898.             echo "</select></td><td style=\"width:5px;\">-</td><td><select name='post_month'>
    899. 

  899. 			<option value='" . date("m", $dateUpload) . "'>" . date("m", $dateUpload) . "</option>";
    900. 

  900.             $lc = 1;
    901. 

  901.             while ($lc <= 12)
    902. 

  902.             {
    903. 

  903.                 if ($lc < 10)
    904. 

  904.                 {
    905. 

  905.                     $lc = "0$lc";
    906. 

  906.                 }
    907. 

  907.                 echo "<option";
    908. 

  908.                 if (isset($_POST['post_month']) and $_POST['post_month'] == $lc)
    909. 

  909.                     echo " SELECTED";
    910. 

  910.                 echo " value='$lc'>$lc</option>";
    911. 

  911.                 $lc++;
    912. 

  912.             }
    913. 

  913.             echo "</select></td><td style=\"width:5px;\">-</td><td><select name='post_day'>
    914. 

  914. 			<option value='" . date("d", $dateUpload) . "'>" . date("d", $dateUpload) . "</option>";
    915. 

  915.             $lc = 1;
    916. 

  916.             while ($lc <= 31)
    917. 

  917.             {
    918. 

  918.                 if ($lc < 10)
    919. 

  919.                 {
    920. 

  920.                     $lc = "0$lc";
    921. 

  921.                 }
    922. 

  922.                 echo "<option";
    923. 

  923.                 if (isset($_POST['post_day']) and $_POST['post_day'] == $lc)
    924. 

  924.                     echo " SELECTED";
    925. 

  925.                 echo " value='$lc'>$lc</option>";
    926. 

  926.                 $lc++;
    927. 

  927.             }
    928. 

  928.             echo "</select></td><td><img src='../includes/spacer.gif' height='1' width='30' alt=\"\"/></td><td>
    929. 

  929. 			<select name='post_hour'>
    930. 

  930. 			<option value='" . date("H", $dateUpload) . "'>" . date("H", $dateUpload) . "</option>";
    931. 

  931.             $lc = 0;
    932. 

  932.             while ($lc < 24)
    933. 

  933.             {
    934. 

  934.                 if ($lc < 10)
    935. 

  935.                 {
    936. 

  936.                     $lc = "0$lc";
    937. 

  937.                 }
    938. 

  938.                 echo "<option";
    939. 

  939.                 if (isset($_POST['post_hour']) and $_POST['post_hour'] == $lc)
    940. 

  940.                     echo " SELECTED";
    941. 

  941.                 echo " value='$lc'>$lc</option>";
    942. 

  942.                 $lc++;
    943. 

  943.             }
    944. 

  944.             echo "</select></td><td style=\"width:5px;\">-</td><td><select name='post_minute'>
    945. 

  945. 			<option value='" . date("i", $dateUpload) . "'>" . date("i", $dateUpload) . "</option>";
    946. 

  946.             $lc = 0;
    947. 

  947.             while ($lc <= 59)
    948. 

  948.             {
    949. 

  949.                 if ($lc < 10)
    950. 

  950.                 {
    951. 

  951.                     $lc = "0$lc";
    952. 

  952.                 }
    953. 

  953.                 echo "<option";
    954. 

  954.                 if (isset($_POST['post_minute']) and $_POST['post_minute'] == $lc)
    955. 

  955.                     echo " SELECTED";
    956. 

  956.                 echo " value='$lc'>$lc</option>";
    957. 

  957.                 $lc++;
    958. 

  958.             }
    959. 

  959.             echo "</select></td></tr></table></div>";
    960. 

  960. 

  961.             echo "<div class='jcaption'>$admin_lang_optn_comment_setting2</div>
    962. 

  962.  			<div class='content'>$admin_lang_optn_cmnt_mod_txt2
    963. 

  963.  				<select name=\"comments_settings\">";
    964. 

  964. 

  965.             $comments_result = sql_array("SELECT comments FROM " . $pixelpost_db_prefix . "pixelpost where id = '$getid'");
    966. 

  966.             $comments = pullout($comments_result['comments']);
    967. 

  967. 

  968.             if ($comments == 'A')
    969. 

  969.             {
    970. 

  970.                 echo "<option selected=\"selected\" value=\"A\">$admin_lang_optn_cmnt_mod_allowed</option><option value=\"M\">$admin_lang_optn_cmnt_mod_moderation</option><option value=\"F\">$admin_lang_optn_cmnt_mod_forbidden</option>";
    971. 

  971.             } elseif ($comments == 'M')
    972. 

  972.             {
    973. 

  973.                 echo "<option value=\"A\">$admin_lang_optn_cmnt_mod_allowed</option><option  selected=\"selected\" value=\"M\">$admin_lang_optn_cmnt_mod_moderation</option><option value=\"F\">$admin_lang_optn_cmnt_mod_forbidden</option>";
    974. 

  974.             } else
    975. 

  975.             {
    976. 

  976.                 echo "<option value=\"A\">$admin_lang_optn_cmnt_mod_allowed</option><option value=\"M\">$admin_lang_optn_cmnt_mod_moderation</option><option selected=\"selected\" value=\"F\">$admin_lang_optn_cmnt_mod_forbidden</option>";
    977. 

  977.             }
    978. 

  978. 

  979.             echo "</select></div>";
    980. 

  980. 

  981.             // Check if the language addon is enabled. If not there is no need to show these fields
    982. 

  982.             if ($cfgrow['altlangfile'] != 'Off')
    983. 

  983.             {
    984. 

  984.                 echo "
    985. 

  985. 					<div class='jcaption' style='text-align:left;color:black;'>$admin_lang_imgedit_alt_language</div><br />
    986. 

  986. 						<div class='jcaption'>$admin_lang_imgedit_title</div>
    987. 

  987. 							<div class='content'><input type='text' name='alt_headline' value='$alt_headline' style='width:300px;' /></div>
    988. 

  988. 						<div class='jcaption'>$admin_lang_imgedit_tags_edit</div>
    989. 

  989. 							<div class='content'><input type='text' name='alt_tags' style='width:550px;' value='$alt_tags' />";
    990. 

  990.                 eval_addon_admin_workspace_menu('edit_image_form_alt_lang');
    991. 

  991.                 echo "</div>
    992. 

  992. 						<div class='jcaption'>$admin_lang_imgedit_txt_desc</div>
    993. 

  993. 			<div class='content'>";
    994. 

  994.                 if ($cfgrow['markdown'] == 'T')
    995. 

  995.                 {
    996. 

  996.                     echo "
    997. 

  997.    							<div>" . $admin_lang_ni_markdown_text . "<br/>
    998. 

  998.     						<a href='http://daringfireball.net/projects/markdown/' title='<?php echo $admin_lang_ni_markdown_hp; ?>' target='_blank'>" . $admin_lang_ni_markdown_hp . "</a>
    999. 

  999.     						&nbsp;&nbsp;&nbsp;
    1000. 

  1000.     						<a href='http://daringfireball.net/projects/markdown/basics' title='<?php echo $admin_lang_ni_markdown_element; ?>' target='_blank'>" . $admin_lang_ni_markdown_element . "</a>
    1001. 

  1001.     						&nbsp;&nbsp;&nbsp;
    1002. 

  1002.     						<a href='http://daringfireball.net/projects/markdown/syntax' title='<?php echo $admin_lang_ni_markdown_syntax; ?>' target='_blank'>" . $admin_lang_ni_markdown_syntax . "</a>
    1003. 

  1003.     						</div>";
    1004. 

  1004.                 }
    1005. 

  1005. 

  1006.                 echo " $admin_lang_imgedit_txt_desc<br/>
    1007. 

  1007. 							<textarea name='alt_body' cols='50' rows='5' style='width:95%;'>$alt_body</textarea>
    1008. 

  1008. 						</div><br />";
    1009. 

    1010. 

  1010. 

  1011.             }
    1012. 

  1012.             eval_addon_admin_workspace_menu("image_edit_form", "images");
    1013. 

  1013.             echo "
    1014. 

  1014. 			<div class='jcaption'>$admin_lang_imgedit_img</div>
    1015. 

  1015. 			<div class='content'>
    1016. 

  1016. 	    	<b>$admin_lang_imgedit_file_name</b> $image, <b>$admin_lang_imgedit_fsize</b> $img_width x $img_height; $img_size <b>kb</b>
    1017. 

  1017. 				<br/>
    1018. 

  1018.          <img id='itemimg' src='" . $cfgrow['thumbnailpath'] . "thumb_$image' alt='' />
    1019. 

  1019. 			</div>
    1020. 

  1020.       <div class='content'>
    1021. 

  1021. 	    	<input type='submit' value='$admin_lang_imgedit_u_post_button' />
    1022. 

  1022. 			</div>
    1023. 

  1023.       	    </form>
    1024. 

  1024. 			    	  ";
    1025. 

    1026. 

  1026.             // Check if the '12c' is selected as the crop then add 3 buttons to the page '+', '-', and 'crop'
    1027. 

  1027.             if ($cfgrow['crop'] == '12c')
    1028. 

  1028.             {
    1029. 

  1029.                 $to_echo = "
    1030. 

  1030. 			<br/><br/>
    1031. 

  1031. 			&nbsp;&nbsp;&nbsp;<strong>$admin_lang_imgedit_12cropimg</strong><br/>
    1032. 

  1032.             $admin_lang_imgedit_12cropimg_txt
    1033. 

  1033.             <input type='button' name='Submit1' value='$admin_lang_imgedit_uthmb_button' onclick=\"cropCheck('def','" . $image . "');\" />
    1034. 

  1034.  	    	<input type='button' name='Submit3' value='" . $txt['smaller'] . "' onmousedown=\"cropZoom('in');\" onmouseup='stopZoom();' />
    1035. 

  1035. 	   		<input type='button' name='Submit4' value='" . $txt['bigger'] . "' onmousedown=\"cropZoom('out');\" onmouseup='stopZoom();' />";
    1036. 

  1036.                 echo $to_echo;
    1037. 

  1037. 

  1038.                 // set the size of the crop frame according to the uploaded image
    1039. 

  1039.                 setsize_cropdiv($image);
    1040. 

  1040. 

  1041.                 //--------------------------------------------------------
    1042. 

  1042.                 $for_echo = "<p/>
    1043. 

  1043. 	<img src='" . $cfgrow['imagepath'] . $image . "' id='myimg' />
    1044. 

  1044. 	<div id='cropdiv'>
    1045. 

  1045. 	<table width='100%' height='100%' border='1' cellpadding='0' cellspacing='0' bordercolor='#000000'>
    1046. 

  1046.     <tr><td><img src='" . $spacer . "' /></td>
    1047. 

  1047. 	</tr></table>
    1048. 

  1048. 	</div>
    1049. 

  1049. 	<div id='editthumbnail'>$admin_lang_imgedit_cropbg</div> <!-- end of edit thumb div -->
    1050. 

  1050. 	 ";
    1051. 

  1051.                 echo $for_echo;
    1052. 

  1052.                 //--------------------------------------------------------
    1053. 

  1053.             } else
    1054. 

  1054.                 echo "$admin_lang_imgedit_12crop_opt<p />";
    1055. 

  1055.             echo "<!-- end of content div -->
    1056. 

  1056.          <p />";
    1057. 

  1057.         }
    1058. 

  1058.     } // end of if imagesview = edit
    1059. 

  1059. } // end view=images
    1060. 

  1060. 

  1061. ?>
    1062.