index.php

日程 BosDates v4.5 Copyright ?2004-2005 BosDev

		     <td class="alttd"><select name="newTime2Method">$time2Box</select></td>
		     <td class="alttd"><input type="text" name="newTime2Multiplier" value="$time2Multiplier" style="width:50px;"></td>
		    </tr>
		    <tr>
		     <td><input type="text" name="newTime3" value="{$SystemOptions['time_3']}" style="width:50px;"> {$Languages['admin']['systemdays']}</td>
		     <td><select name="newTime3Method">$time3Box</select></td>
		     <td><input type="text" name="newTime3Multiplier" value="$time3Multiplier" style="width:50px;"></td>
		    </tr>
		    <tr>
		     <td class="alttd"><input type="text" name="newTime4" value="{$SystemOptions['time_4']}" style="width:50px;"> {$Languages['admin']['systemdays']}</td>
		     <td class="alttd"><select name="newTime4Method">$time4Box</select></td>
		     <td class="alttd"><input type="text" name="newTime4Multiplier" value="$time4Multiplier" style="width:50px;"></td>
		    </tr>
		   </table>
		   <br>
		  </td>
		 </tr>
		 <tr>
		  <td align="center"><input type="submit" value="{$Languages['admin']['process']}"></td>
		 </tr>
		</form>
		</table>
		</div>
ENDDATA;
		break;

	case "systemProcess":
		if($userData['admin'] != 2) { header("Location: index.php?action=logout"); die(); }

		//Protect data
		$newTitle = protect($newTitle);
		$newMetaKey = protect($newMetaKey);
		$newMetaDesc = protect($newMetaDesc);
		$newLanguage = protect($newLanguage);
		$newSpider = intval(protect($newSpider));
		$newPanelTop = intval(protect($newPanelTop));
		$newPanelBottom = intval(protect($newPanelBottom));
		$newCatColumns = intval(protect($newCatColumns));
		$newListColumns = intval(protect($newListColumns));
		$newSubcats = intval(protect($newSubcats));
		$newNumImages = intval(protect($newNumImages));
		$newMaxWidth = intval(protect($newMaxWidth));
		$newImageFee = sprintf("%03.2f",protect($newImageFee));
		$newPaymentGateway = protect($newPaymentGateway);
		$newPaymentInfo1 = protect($newPaymentInfo1);
		$newPaymentInfo2 = protect($newPaymentInfo2);
		$newFromEmail = protect($newFromEmail);
		$newAllowFeatured = intval(protect($newAllowFeatured));
		$newFeeFeatured = sprintf("%03.2f",protect($newFeeFeatured));
		$newAllowBold = intval(protect($newAllowBold));
		$newFeeBold = sprintf("%03.2f",protect($newFeeBold));
		$newAllowItalic = intval(protect($newAllowItalic));
		$newFeeItalic = sprintf("%03.2f",protect($newFeeItalic));
		$newAllowColor = intval(protect($newAllowColor));
		$newFeeColored = sprintf("%03.2f",protect($newFeeColored));
		$newApprove = intval(protect($newApprove));

		if($newTime1 != "") { $newTime1 = intval(protect($newTime1)); }
			else { $newTime1 = "2147483647"; }
		if($newTime2 != "") { $newTime2 = intval(protect($newTime2)); }
			else { $newTime2 = "2147483647"; }
		if($newTime3 != "") { $newTime3 = intval(protect($newTime3)); }
			else { $newTime3 = "2147483647"; }
		if($newTime4 != "") { $newTime4 = intval(protect($newTime4)); }
			else { $newTime4 = "2147483647"; }

		$newTime1Method = protect($newTime1Method);
		$newTime1Multiplier = protect($newTime1Multiplier);
		$newTime2Method = protect($newTime2Method);
		$newTime2Multiplier = protect($newTime2Multiplier);
		$newTime3Method = protect($newTime3Method);
		$newTime3Multiplier = protect($newTime3Multiplier);
		$newTime4Method = protect($newTime4Method);
		$newTime4Multiplier = protect($newTime4Multiplier);

		//Check to see if any payment gateway is installed, if not blank all prices
		if($newPaymentGateway == "") {
			$newTime1Method = "2"; $newTime1Multiplier = "0.00";
			$newTime2Method = "2"; $newTime2Multiplier = "0.00";
			$newTime3Method = "2"; $newTime3Multiplier = "0.00";
			$newTime4Method = "2"; $newTime4Multiplier = "0.00";
			$newFeeFeatured = "0.00";
			$newFeeBold = "0.00";
			$newFeeColor = "0.00";
			$newFeeColored = "0.00";
			$newImageFee = "0.00";
			$newPaymentInfo1 = ""; $newPaymentInfo2 = "";
			$result = query("UPDATE {$class_prefix}categories SET category_ad_prices=''",$class_link);
			}

		//Set up the multiplier data
		$compiledTime1 = "$newTime1Method|$newTime1Multiplier";
		$compiledTime2 = "$newTime2Method|$newTime2Multiplier";
		$compiledTime3 = "$newTime3Method|$newTime3Multiplier";
		$compiledTime4 = "$newTime4Method|$newTime4Multiplier";

		$result = query("UPDATE {$class_prefix}system SET title='$newTitle',meta_key='$newMetaKey',meta_desc='$newMetaDesc',language='$newLanguage',spider='$newSpider',fee_featured='$newFeeFeatured',fee_bold='$newFeeBold',fee_italic='$newFeeItalic',fee_color='$newFeeColored',payment_gateway='$newPaymentGateway',payment_info_1='$newPaymentInfo1',payment_info_2='$newPaymentInfo2',from_email='$newFromEmail',max_size='$newMaxWidth',allow_featured='$newAllowFeatured',allow_bold='$newAllowBold',allow_italic='$newAllowItalic',allow_color='$newAllowColor',num_images='$newNumImages',fee_images='$newImageFee',time_1='$newTime1',time_2='$newTime2',time_3='$newTime3',time_4='$newTime4',time_1_multiplier='$compiledTime1',time_2_multiplier='$compiledTime2',time_3_multiplier='$compiledTime3',time_4_multiplier='$compiledTime4',panel_top='$newPanelTop',panel_bottom='$newPanelBottom',cat_columns='$newCatColumns',list_columns='$newListColumns',subcats='$newSubcats',auto_approve='$newApprove'",$class_link);

		$displayData =<<<ENDDATA
		<div id="generalBox">
		<table width="100%" border="0" cellspacing="1" cellpadding="3">
		 <tr>
		  <td class="headtd">{$Languages['admin']['menusystem']}</td>
		 </tr>
		 <tr>
		  <td>
		   {$Languages['admin']['systemupdated']}
		  </td>
		 </tr>
		</table>
		<div>
ENDDATA;
		break;

	case "appearance":
		if($userData['admin'] != 2) { header("Location: index.php?action=logout"); die(); }
		if(substr($SystemOptions['page_header'],0,5) != "file:") { $pageHeader = stripslashes($SystemOptions['page_header']); } else { $pageHeader = str_replace("\\","\\\\",$SystemOptions['page_header']); }
		if(substr($SystemOptions['page_footer'],0,5) != "file:") { $pageFooter = stripslashes($SystemOptions['page_footer']); } else { $pageFooter = str_replace("\\","\\\\",$SystemOptions['page_footer']); }

		if($SystemOptions['banner'] != "") {
			$bannerStats = getimagesize("{$insPath}images/{$SystemOptions['banner']}");
			if($bannerStats[2] != 4) { $displayBanner = "<img src=\"{$insUrl}images/{$SystemOptions['banner']}\" width=\"".($bannerStats[0]/2)."\" height=\"".($bannerStats[1]/2)."\">"; }
				else { $displayBanner = "<embed src=\"{$insUrl}images/{$SystemOptions['banner']}\" type=\"application/x-shockwave-flash\" pluginspage=\"http://www.macromedia.com/shockwave/download/index.cgi?P1_Prod_Version=ShockwaveFlash\" width=\"".($bannerStats[0]/2)."\" height=\"".($bannerStats[1]/2)."\"></embed>"; }
			$displayBanner .= "<br><input type=\"checkbox\" name=\"deleteBanner\" value=\"1\"> {$Languages['admin']['appdelete']}<br>";
			}

		//Check to make sure we can write to the /styles directory
		$path = "{$insPath}styles";
		if(!is_writable("{$path}/{$SystemOptions['css']}")) {
			$msg = sprintf($Languages['admin']['appcsserror'],"{$path}/{$SystemOptions['css']}")."<br>";
			}

		//Get the file info
		$fp = @fopen("{$path}/{$SystemOptions['css']}", "r");
		while(!feof($fp)) {
   			$currentCSS .= fgets($fp, 4096);
			}

		$displayData =<<<ENDDATA
		<div id="generalBox">
		<table width="100%" border="0" cellspacing="1" cellpadding="3">
		<form method="post" action="index.php" enctype="multipart/form-data">
		<input type="hidden" name="action" value="appearanceProcess">
		 <tr>
		  <td class="headtd">{$Languages['admin']['menuappearance']}</td>
		 </tr>
		 <tr>
		  <td>
		   <span class="error">$msg</span>
	   	   <b>{$Languages['admin']['appheader']}:</b><br>
		   <textarea style="width:450px; height:100px;" name="newPageHeader">$pageHeader</textarea><br>
		   <br>
		   <b>{$Languages['admin']['appfooter']}:</b><br>
		   <textarea style="width:450px; height:100px;" name="newPageFooter">$pageFooter</textarea><br>
		   <br>
		   <b>{$Languages['admin']['appwidth']}:</b> <input type="text" name="newPageWidth" value="{$SystemOptions['page_width']}"><br>
		   <br>
		   <b>{$Languages['admin']['appbanner']}:</b><br>
		   $displayBanner
		   {$Languages['admin']['appupload']}: <input type="file" name="newBanner"><br>
		   <br>
		   {$Languages['admin']['appcss']}: <a href="http://www.w3.org/Style/CSS/" target="_blank">http://www.w3.org/Style/CSS/</a><br>
		   <textarea name="newCSS" style="width:450px; height:450px;">$currentCSS</textarea>
		  </td>
		 <tr>
		  <td align="center"><input type="submit" value="{$Languages['admin']['process']}"></td>
		 </tr>
		</form>
	 	</table>
	 	</div>
ENDDATA;
		break;

	case "appearanceProcess":
		if($userData['admin'] != 2) { header("Location: index.php?action=logout"); die(); }

		//Protect input
		if(substr($newPageHeader,0,5) != "file:") { $newPageHeader = protect($newPageHeader); }
			else { $newPageHeader = addslashes($newPageHeader); }
		if(substr($newPageFooter,0,5) != "file:") { $newPageFooter = protect($newPageFooter); }
			else { $newPageFooter = addslashes($newPageFooter); }
		$newPageWidth = protect($newPageWidth);
		$newBannerName = $SystemOptions['banner'];

		//Delete old banner if needed
		if($deleteBanner == "1" || is_uploaded_file($_FILES['newBanner']['tmp_name'])) {
			@unlink("{$insPath}images/{$SystemOptions['banner']}");
			$newBannerName = "";
			}

		//Process new banner, and make sure it's a valid file.
		if(is_uploaded_file($_FILES['newBanner']['tmp_name'])) {
			@move_uploaded_file($_FILES['newBanner']['tmp_name'],"{$insPath}images/{$_FILES['newBanner']['name']}");
			if(!@getimagesize("{$insPath}images/{$_FILES['newBanner']['name']}")) {
				@unlink("{$insPath}images/{$_FILES['newBanner']['name']}");
				}
				else { $newBannerName = $_FILES['newBanner']['name']; }
			}

		//Update the system table
		$result = query("UPDATE {$class_prefix}system SET banner='$newBannerName',page_header='$newPageHeader',page_footer='$newPageFooter',page_width='$newPageWidth'",$class_link);

		//Save CSS
		$newCSS = str_replace("\r","",$newCSS);
		$fp = @fopen("{$insPath}styles/style.css", "w+");
		if(!@fwrite($fp, $newCSS)) {
			$msg =  $Languages['admin']['apperror'];
			}
		@fclose($fp);

		$displayData =<<<ENDDATA
		<div id="generalBox">
		<table width="100%" border="0" cellspacing="1" cellpadding="3">
		 <tr>
		  <td class="headtd">{$Languages['admin']['menuappearance']}</td>
		 </tr>
		 <tr>
		  <td>
		   {$Languages['admin']['appupdated']}
		   <span class="error">$msg</span>
		  </td>
		 </tr>
		</table>
		</div>
ENDDATA;
		break;

	case "categoriesMove":
		if($userData['admin'] != 2) { header("Location: index.php?action=logout"); die(); }
		if($move != "" && $dir != "") {
			//Moving a single category
			$result = query("SELECT category_parent,category_order FROM {$class_prefix}categories WHERE category_id=$move",$class_link);
			list($parent,$orig_pos) = mysql_fetch_row($result);

			$counter = 0;
			$result = query("SELECT category_id,category_order FROM {$class_prefix}categories WHERE category_parent=$parent ORDER BY category_order",$class_link);
			while(list($cat,$order) = mysql_fetch_row($result)) {
				$counter++;
				$new[$counter] = $cat;
				if($cat == $move) { $marker = $counter; }
				}

			if(($dir == "up" && $marker != 1) || ($dir == "down" && $marker != $counter)) {
				switch($dir) {
					case "up":
						$to_switch = $new[$marker - 1];
						$new[$marker - 1] = $move;
						$new[$marker] = $to_switch;
						break;
					case "down":
						$to_switch = $new[$marker + 1];
						$new[$marker + 1] = $move;
						$new[$marker] = $to_switch;
						break;
					}
				for($i=1; $i<=count($new); $i++) {
					$cat = $new[$i];
					$result = query("UPDATE {$class_prefix}categories SET category_order=$i WHERE category_id=$cat",$class_link);
					}
				}
			if($parent != 0) { $cat_id=$parent; }
			}
			elseif($autoBy != "") {
				//Auto sorting
				switch($autoBy) {
					case 0: $sortBy = "ORDER BY category_title"; break;
					case 1: $sortBy = "ORDER BY category_listings DESC"; break;
					}
				//Get all possible parents
				$catParents = array("0");
				$result = query("SELECT category_parent FROM {$class_prefix}categories GROUP BY category_parent",$class_link);
				while(list($catParent) = mysql_fetch_row($result)) {
					array_push($catParents,$catParent);
					}
				//Cycle through the parents
				while(list(,$parent) = each($catParents)) {
					if($parent != "") {