Website Activity - 7 Days
$hit) {
if ($sessions[$visit] == 0) { continue; }
?>
0/
Website Activity - 24 Hours
$hit) {
if ($sessions[$visit] == 0) { continue; }
?>
0/
Website Activity - 60 Minutes
$hit) { ?>
0/
". makeCase($pages['pageurl']) ." Reverted to Previous Version!
";
} else {
echo "\"$pageurl\" failed to roll back! ". mysqli_error($conn) ."
";
}
}
function AdminPageUpdate() {
global $conn;
$pages = Pages();
$pageurl = preg_replace("/[^a-z\-]/","",$_REQUEST['pageurl']);
$content = preg_replace(array("/\s{2,}/", "/[\t\n\r]/"), " ", $_REQUEST['content']);
$query = sprintf("SELECT `html`,`htmltime` FROM `pages` WHERE `pagename` = '%s'", mysqli_real_escape_string($conn,$pageurl));
$result = mysqli_query($conn,$query);
$undo = mysqli_fetch_assoc($result);
// put in new data
$update = sprintf("
UPDATE `pages` SET
`html` = '%s',
`htmltime` = '%s',
`undo` = '%s',
`undotime` = '%s'
WHERE `pagename` = '%s'",
mysqli_real_escape_string($conn, $content), // html
mysqli_real_escape_string($conn, DatePHPtoSQL(time())), // htmltime
mysqli_real_escape_string($conn, $undo['html']), //undo
mysqli_real_escape_string($conn, $undo['htmltime']), //undo time
mysqli_real_escape_string($conn, $pageurl)
);
if (mysqli_query($conn,$update) === TRUE) {
echo "". makeCase($pages[$pageurl]) ." Successfully Updated!
";
} else {
echo "\"$pageurl\" page Failed to Update! ". mysqli_error($conn) ."
";
}
}
function AdminAdminsList() {
global $conn;
$query = "SELECT `username` FROM `admins` ORDER BY `username` ASC";
$result = mysqli_query($conn,$query);
while ($row = mysqli_fetch_assoc($result)) {
$admins[] = $row['username'];
}
AdminShowAdminsList($admins);
}
function AdminAddAdmin() {
AdminShowNewAdminForm();
}
function AdminSaveNewAdmin() {
global $conn;
$password = HashPassword(htmlspecialchars(strip_tags(trim($_REQUEST['password']))));
$username = strtolower(htmlspecialchars(strip_tags(trim($_REQUEST['username']))));
$query = sprintf(
"INSERT INTO `admins` (`username`,`password`) VALUES ('%s','%s')",
mysqli_real_escape_string($conn,$username),
mysqli_real_escape_string($conn,$password)
);
$result = mysqli_query($conn,$query);
AdminAdminsList();
}
function AdminsampleDelete($oid) {
global $conn;
$nextfunction = "del_sample_for_reals";
$urlDo = "samples";
$urlCancel = "samples/edit/$oid";
$query = sprintf("SELECT `name` FROM `samples` WHERE `oid` = %s", preg_replace("/[^0-9]/","",$oid));
$result = mysqli_query($conn,$query);
$row = mysqli_fetch_assoc($result);
$desc = $row['name'];
AdminShowDeleteConfirmation($oid,$desc,$urlDo,$urlCancel,$nextfunction);
}
function AdminsampleAddNew() {
if (!isset($_REQUEST['formpage'])) {
// brand new sample
AdminsampleFormNew();
} elseif ((string)$_REQUEST['formpage'] === "1") {
// attempt to save the sample info and media
$oid = AdminsampleSaveNew();
if (isEmpty($oid)) {
// Error in first page, redisplay first page.
AdminsampleFormNew();
} else {
// there's an $oid from saving basic data, so check that media in
$filecount = AdminsampleSaveMedia($oid);
if ($filecount >= 1) {
echo "New sample added with $filecount media files!
";
} else {
echo "No media was saved. Please add a photo and/or video now.
";
}
// regardless of media, we did save SOMETHING, so sets see it.
AdminsampleEditSingle($oid);
}
}
}
function allPublicCategories() {
// XXX: Redo for custom cat sorting
// Used by cats drawer, navigation dropdown, and categories listing page
global $conn;
$query = "SELECT `cid`, `category`, `url`, `description` FROM `categories` WHERE `published` = 1 ORDER BY `is_highlighted` DESC, `category` ASC";
$result = mysqli_query($conn,$query);
$categories = array();
while ($row = mysqli_fetch_array($result, MYSQLI_ASSOC)) {
$categories[] = $row;
}
return ($categories);
}
function GathersampleInfo($oid) {
global $conn;
$oid = preg_replace("/[^0-9]/",'',$oid);
// XXX: this could be some massive joined query
$sampleinfo = array();
if (isEmpty($oid)) {
echo "Bad Request for sample Record!
";
return($sampleinfo);
}
$query = sprintf("SELECT * FROM `samples` WHERE `oid` = %s", mysqli_real_escape_string($conn,$oid));
$result = mysqli_query($conn,$query);
$row = mysqli_fetch_assoc($result);
$sampleinfo['oid'] = $oid;
if (isEmpty($row['oid'])) {
echo "No record available for ID Number $oid.
";
} else {
foreach ($row as $fieldname => $value) {
$sampleinfo[$fieldname] = $value;
}
}
mysqli_free_result($result);
// AdminSelectCategories($oid) AdminSelectStyles($oid) AdminSelectLocations($oid)
// lemme have hash of media
$query = sprintf("SELECT `cid` FROM `samplecategories` WHERE `oid` = %s", mysqli_real_escape_string($conn,$oid));
$result = mysqli_query($conn,$query);
while ($row = mysqli_fetch_assoc($result)) {
$sampleinfo['categories'][$row['cid']] = $row['cid'];
}
//subcats
$sampleinfo['subcategories'] = array();
$query = sprintf("SELECT `subid` FROM `samplesubcategories` WHERE `oid` = %s", mysqli_real_escape_string($conn,$oid));
$result = mysqli_query($conn,$query);
if (mysqli_num_rows($result) > 0) {
while ($row = mysqli_fetch_assoc($result)) {
$sampleinfo['subcategories'][$row['subid']] = $row['subid'];
}
}
mysqli_free_result($result);
$query = sprintf("SELECT `lid` FROM `samplelocations` WHERE `oid` = %s", mysqli_real_escape_string($conn,$oid));
$result = mysqli_query($conn,$query);
while ($row = mysqli_fetch_assoc($result)) {
$sampleinfo['locations'][$row['lid']] = $row['lid'];
}
mysqli_free_result($result);
$query = sprintf("SELECT `sid` FROM `samplestyles` WHERE `oid` = %s", mysqli_real_escape_string($conn,$oid));
$result = mysqli_query($conn,$query);
while ($row = mysqli_fetch_assoc($result)) {
$sampleinfo['styles'][$row['sid']] = $row['sid'];
}
mysqli_free_result($result);
$query = sprintf(
"SELECT * FROM `media` WHERE `oid` = %s ORDER BY `is_highlighted` DESC, `vidlength` ASC",
mysqli_real_escape_string($conn,$oid)
);
$result = mysqli_query($conn,$query);
while ($row = mysqli_fetch_assoc($result)) {
$sampleinfo['media']['mid'][$row['mid']] = $row['mid'];
$sampleinfo['media']['name'][$row['mid']] = $row['name'];
$sampleinfo['media']['filetype'][$row['mid']] = $row['filetype'];
$sampleinfo['media']['filename'][$row['mid']] = $row['filename'];
$sampleinfo['media']['thumbwidth'][$row['mid']] = $row['thumbwidth'];
$sampleinfo['media']['thumbheight'][$row['mid']] = $row['thumbheight'];
$sampleinfo['media']['height'][$row['mid']] = $row['height'];
$sampleinfo['media']['width'][$row['mid']] = $row['width'];
$sampleinfo['media']['vidlength'][$row['mid']] = $row['vidlength'];
$sampleinfo['media']['is_highlighted'][$row['mid']] = $row['is_highlighted'];
$sampleinfo['media']['viewable'][$row['mid']] = $row['viewable'];
$sampleinfo['media']['published'][$row['mid']] = DateSQLtoPHP($row['published']);
}
mysqli_free_result($result);
return $sampleinfo;
}
function AdminsampleEditSingle($oid) {
$sampleinfo = GathersampleInfo($oid);
if (!isEmpty($sampleinfo['name'])) {
AdminsampleFormSingle($sampleinfo);
}
}
function ObfuscatesampleNameAutomatically($name) {
// crappy way of guessing a band's obfuscated "display" name: first whole word, then first letter of each additional word
// unless only two words, then initials all the way
// logic subject to be totally changed on a whim
$name = preg_replace("/[^a-zA-Z0-9\/\\_|+ ]/", '', $name); // do not want "'" in names like "'N Demand"
$words = explode(" ", $name);
$display_name = "";
$counter = 0;
if (count($words) > 0) {
if (count($words) == 1) {
$display_name = substr($name,0,3); // one word sample name is now first 3 letters
} elseif (count($words) == 2) {
foreach ($words as $word) {
$display_name .= strtoupper(substr($word,0,1));
$display_name .= ". ";
}
} elseif (count($words) >= 3) {
foreach ($words as $word) {
if (preg_match("/\b(the|group|band|of|a|an|and)\b/i",$word)) {
$display_name .= "$word ";
} else {
if ($counter == 0) {
$display_name .= strtoupper(substr($word,0,1));
$display_name .= ". ";
//$display_name = "$word ";
} else {
$display_name .= strtoupper(substr($word,0,1));
$display_name .= ". ";
}
}
$counter++;
}
}
}
return (makeCase(trim($display_name)));
}
function UniqueObfuscatedSampleName($name) {
// roll through teh database and choose a unique obfsd name for this sample
// prevents the "AR" =~ "Ashley Red | Al Robinson" iss.
global $conn;
$query = sprintf("SELECT `display_name` FROM `samples` WHERE `display_name` = '%s'", mysqli_real_escape_string($conn,$name));
$result = mysqli_query($conn,$query);
if (mysqli_num_rows($result) == 0) {
return ($name);
} else {
// go loop for a new alturl
$number = 1;
$basename = $name; // increment the number, not append another digit
while (!$done) {
$name = "$basename $number"; // HEY THERES A SPACE HERE
$query = sprintf("SELECT `display_name` FROM `samples` WHERE `display_name` = '%s'", mysqli_real_escape_string($conn,$name));
$result = mysqli_query($conn,$query);
(mysqli_num_rows($result) == 0)? $done++ : $number++;
}
return ($name);
}
}
function AdminSampleSaveSingle() {
// Updated a sample's data from within the sample editor
global $conn;
global $dirlocation;
$oid = preg_replace("/[^0-9]/",'',$_REQUEST['oid']);
$sampleinfo = GathersampleInfo($oid);
$samplesave = array("oid" => $oid);
// compare any $_REQUEST stuff with existing database, update.
// check for new file uploads, deal with.
// return the (adjusted) $sampleinfo hash
// name
if (isEmpty($_REQUEST['name'])) {
$errors[] = "Please enter the project sample's name.";
} else {
$name = makeCase(htmlspecialchars(convert_smart_quotes(trim($_REQUEST['name']))));
if ($name !== $sampleinfo['name']) {
$samplesave['name'] = $name;
$url = MakeURL(strtolower($name));
if ($url !== $sampleinfo['url']) {
$samplesave['url'] = $url;
}
// check if this is a duplicate // being a real jerk by including the "cleaned" URL text
$query = sprintf("SELECT `name` FROM `samples` WHERE `oid` <> '%s' AND (`name` = '%s' OR `url` = '%s')",
mysqli_real_escape_string($conn, $samplesave['oid']),
mysqli_real_escape_string($conn, $samplesave['name']),
mysqli_real_escape_string($conn, $samplesave['url'])
);
$result = mysqli_query($conn,$query);
if (mysqli_num_rows($result) > 0) {
$errors[] = "This sample's name is already used by another project! Please check the sample's name carefully.";
}
}
}
// slug
if (isEmpty($_REQUEST['slug'])) {
$errors[] = "Please provide a descriptive phrase about project sample.";
} else {
$slug = htmlspecialchars(convert_smart_quotes(trim($_REQUEST['slug'])));
if ($slug !== $sampleinfo['slug']) {
$samplesave['slug'] = $slug;
}
}
// bio
if (isEmpty($_REQUEST['bio'])) {
echo "No sample's bio? Please try to have a paragraph describing the sample.
";
}
$bio = htmlspecialchars(convert_smart_quotes(trim($_REQUEST['bio'])));
if ($bio !== $sampleinfo['bio']) {
$samplesave['bio'] = $bio;
}
// display name
if (isEmpty($_REQUEST['display_name'])) {
$display_name = MakeCase(ObfuscatesampleNameAutomatically(htmlspecialchars(convert_smart_quotes(trim($_REQUEST['name'])))));
} else {
$display_name = htmlspecialchars(convert_smart_quotes(trim($_REQUEST['display_name'])));
}
if ($display_name !== $sampleinfo['display_name']) {
$samplesave['alt_url'] = GetAltUrl(MakeURL(preg_replace("/\.\s/","",strtolower($display_name))));
$samplesave['display_name'] = UniqueObfuscatedsampleName($display_name);
}
// alt-url standalone change
if (isEmpty($samplesave['alt_url'])) {
if (!isEmpty($_REQUEST['alt_url'])) {
$samplesave['alt_url'] = MakeURL(htmlspecialchars(strtolower(trim($_REQUEST['alt_url']))));
} else {
$samplesave['alt_url'] = GetAltUrl(MakeURL(strtolower($display_name)));
}
}
// use display
isset($_REQUEST['use_display_name']) ? $use_display_name = 1 : $use_display_name = 0;
if ($use_display_name != $sampleinfo['use_display_name']) {
$samplesave['use_display_name'] = $use_display_name;
}
// active?
isset($_REQUEST['is_active']) ? $is_active = 1 : $is_active = 0;
if ($is_active != $sampleinfo['is_active']) {
$samplesave['is_active'] = $is_active;
}
// searchable?
isset($_REQUEST['is_searchable']) ? $is_searchable = 1 : $is_searchable = 0;
if ($is_searchable != $sampleinfo['is_searchable']) {
$samplesave['is_searchable'] = $is_searchable;
}
// highlighted?
isset($_REQUEST['is_highlighted']) ? $is_highlighted = 1 : $is_highlighted = 0;
if ($is_highlighted != $sampleinfo['is_highlighted']) {
$samplesave['is_highlighted'] = $is_highlighted;
}
// categories update
if (isset($_REQUEST['categories'])) {
$categories = array();
foreach ($_REQUEST['categories'] as $key => $value) {
$categories[$key] = preg_replace("/[^0-9]/","",$value);
}
if (array_diff($categories, $sampleinfo['categories']) || array_diff($sampleinfo['categories'], $categories)) {
$samplesave['samplecategories'] = $categories; // categories have been updated
}
} else {
$errors[] = "Please select one or more categories for this sample.";
}
// subcategories
$subcategories = array();
if (is_countable($_REQUEST['subcategories'])) {
foreach ($_REQUEST['subcategories'] as $key => $value) {
$subcategories[$key] = preg_replace("/[^0-9]/","",$value);
}
}
$samplesave['samplesubcategories'] = $subcategories;
// styles
if (isset($_REQUEST['styles'])) {
$styles = array();
foreach ($_REQUEST['styles'] as $key => $value) {
$styles[$key] = preg_replace("/[^0-9]/","",$value);
}
if (isEmpty($sampleinfo['styles'])) {
$samplesave['samplestyles'] = $styles; // styles have been updated
} else if (array_diff($styles, $sampleinfo['styles']) || array_diff($sampleinfo['styles'], $styles)) {
$samplesave['samplestyles'] = $styles; // styles have been updated
}
} else {
$errors[] = "Please select one or more styles of entertainment this sample performs.";
}
// locations
if (isset($_REQUEST['locations'])) {
$locations = array();
foreach ($_REQUEST['locations'] as $key => $value) {
$locations[$key] = preg_replace("/[^0-9]/","",$value);
}
if (array_diff($locations, $sampleinfo['locations']) || array_diff($sampleinfo['locations'], $locations)) {
$samplesave['samplelocations'] = $locations; // styles have been updated
}
} else {
$errors[] = "Please select one or more cities that this sample is local to.";
}
if (!isset($errors)) {
if (count($samplesave) > 1) { // more than just the oid...
foreach ($samplesave as $field => $value) {
if (preg_match("/(oid|samplecategories|samplesubcategories|samplestyles|samplelocations)/",$field)) {
continue;
} else {
$query = sprintf("UPDATE `samples` SET `%s` = '%s' WHERE `oid` = %s",
mysqli_real_escape_string($conn, $field),
mysqli_real_escape_string($conn, $value),
mysqli_real_escape_string($conn, $samplesave['oid'])
);
if (mysqli_query($conn,$query) === FALSE) {
$errors[] = "Did not update sample! Database Failure: ".mysqli_error($conn);
}
}
}
// update timestamp
$query = sprintf("UPDATE `samples` SET `last_updated` = '%s' WHERE `oid` = %s",
mysqli_real_escape_string($conn, DatePHPtoSQL(time())),
mysqli_real_escape_string($conn, $samplesave['oid'])
);
if (mysqli_query($conn,$query) === FALSE) {
$errors[] = "Did not update sample information! Database Failure: ".mysqli_error($conn);
}
}
foreach (array("samplecategories" => "cid","samplestyles" => "sid","samplelocations" => "lid", "samplesubcategories" => "subid") as $table => $column) {
if ( is_countable($samplesave[$table]) || ($table == "samplesubcategories") ){
// wipe out old data
$query = sprintf("DELETE FROM `%s` WHERE `oid` = '%s'",
mysqli_real_escape_string($conn, $table),
mysqli_real_escape_string($conn, $samplesave['oid'])
);
mysqli_query($conn,$query);
// pump in new data
foreach($samplesave[$table] as $id) { // individual cid, sid, or lid items that we're saving
$query = sprintf("INSERT INTO `%s` (`%s`,`oid`) VALUES (%s,%s)",
mysqli_real_escape_string($conn, $table),
mysqli_real_escape_string($conn, $column),
mysqli_real_escape_string($conn, $id),
mysqli_real_escape_string($conn, $samplesave['oid'])
);
if (mysqli_query($conn,$query) === FALSE) {
$errors[] = "Error saving category $cid for $oid!" .mysqli_error($conn);
}
}
}// else no category/style/locaiton changes
}
// Save Uploaded Files
$filecount = AdminsampleSaveMedia($oid);
if ($filecount >= 1) {
echo "Added $filecount additional media files!
";
}
// Modify existing photos
if (isset($_REQUEST['ImageFeatures'])) {
foreach ($_REQUEST['ImageFeatures'] as $mid => $change) {
$mid = preg_replace("/[^0-9]/","",$mid);
if ($sampleinfo['media']['mid'][$mid] !== $mid) {
echo "Media request is not valid.
";
} else {
// legit media id, do the request
foreach (array("ToggleHighlight" => "is_highlighted", "ToggleHidden" => "viewable", "Remove" => "") as $action => $column) {
if ($_REQUEST['ImageFeatures'][$mid] === $action) {
if ($action === "Remove") {
unlink($dirlocation . "/i/sample/original-" . $sampleinfo['media']['filename'][$mid]);
unlink($dirlocation . "/i/sample/" . $sampleinfo['media']['filename'][$mid]);
$query = sprintf("DELETE FROM `media` WHERE `mid` = '%s'", mysqli_real_escape_string($conn,$mid));
} else {
($sampleinfo['media'][$column][$mid] == 1)? $switcheroo = 0 : $switcheroo = 1;
$query = sprintf("UPDATE `media` SET `%s` = '%s' WHERE `mid` = '%s'",
mysqli_real_escape_string($conn, $column),
mysqli_real_escape_string($conn, $switcheroo),
mysqli_real_escape_string($conn, $mid)
);
}
if (mysqli_query($conn,$query) === FALSE) {
$errors[] = "Error updating image status $mid!" .mysqli_error($conn);
}
}
}
}
}
}
// Modify video screen shot
if (isset($_REQUEST['radio'])) {
foreach ($_REQUEST['radio'] as $mid => $change) {
$mid = preg_replace("/[^0-9]/","",$mid);
if ($sampleinfo['media']['mid'][$mid] !== $mid) {
echo "Media request is not valid.
";
} else {
$change = preg_replace("/[^0-9]/","",$change);
$fileid = substr($sampleinfo['media']['filename'][$mid], 0, -4);
// preview images are in jpg format from ResizeImage() and ffmpeg thumbnailer
if (!copy("$dirlocation/i/sample/$fileid-$change.jpg","$dirlocation/i/sample/$fileid.jpg")) {
$errors[] = "Failed to replace video thumbnail.";
}
}
}
}
// process video actions
if (isset($_REQUEST['videoaction'])) {
foreach ($_REQUEST['videoaction'] as $mid => $change) {
$mid = preg_replace("/[^0-9]/","",$mid);
if ($sampleinfo['media']['mid'][$mid] !== $mid) {
echo "Media request is not valid.
";
} else {
if ($_REQUEST['videoaction'][$mid] === "delete") {
$fileid = substr($sampleinfo['media']['filename'][$mid], 0, -4);
unlink ("$dirlocation/m/". $sampleinfo['media']['filename'][$mid]);
unlink ("$dirlocation/i/sample/$fileid.jpg"); // video screenies are always jpeg.
unlink ("$dirlocation/i/sample/$fileid-1.jpg");
unlink ("$dirlocation/i/sample/$fileid-2.jpg");
unlink ("$dirlocation/i/sample/$fileid-3.jpg");
unlink ("$dirlocation/i/sample/$fileid-4.jpg");
$query = sprintf("DELETE FROM `media` WHERE `mid` = %s", mysqli_real_escape_string($conn,$mid));
} else {
$value = preg_replace("/[^01]/","",$_REQUEST['videoaction'][$mid]);
$query = sprintf("UPDATE `media` SET `viewable` = %s WHERE `mid` = %s",
mysqli_real_escape_string($conn,$value),
mysqli_real_escape_string($conn,$mid)
);
}
if (mysqli_query($conn,$query) === FALSE) {
$errors[] = "Error updating video status $mid!" .mysqli_error($conn);
}
}
}
} // no video changes
} // else there are errors!
if (isset($errors)) { // not included above since new errors could have been introduced
echo "There are some missing details, please check the form and re-submit.
\n";
}
return($oid); // or null if bad
}
function PrepareVideoPlayer($input) {
// Put video(s) into jwplayer
global $conn;
global $videowidth;
if (is_array($input)) {
$sampleinfo = $input;
$videocount = 0;
// I am the sampleinfo's media keyed array
// If this is used, SHOW ALL (viewable) VIDEOS
//if (is_array($sampleinfo['media'])) { // are there videos here (fixes error on the foreach line below)
if (is_countable($sampleinfo['media']['vidlength'])) {
// run the loop once so I have an accurate video count plz
foreach ($sampleinfo['media']['mid'] as $mid) {
if (((string)$_REQUEST['page'] === 'admin' OR (string)$sampleinfo['media']['viewable'][$mid] == '1') AND ($sampleinfo['media']['vidlength'][$mid] > 0)) {
$videocount++;
}
}
foreach ($sampleinfo['media']['mid'] as $mid) {
// if in the admin page, or is viewable, and media is a video, ...
if (((string)$_REQUEST['page'] === 'admin' OR (string)$sampleinfo['media']['viewable'][$mid] == '1') AND ($sampleinfo['media']['vidlength'][$mid] > 0)) {
// single out the one media ID for the Video Player
$tempsampleinfo = $sampleinfo;
unset ($tempsampleinfo['media']); // dump all the media info on this sample, replacing with the one video to display
$gcd=getCommonDivisor($sampleinfo['media']['width'][$mid],$sampleinfo['media']['height'][$mid]);
if ((string)$_REQUEST['page'] === "admin") {
// make video players a reasonable size
if ($sampleinfo['media']['width'][$mid] > $videowidth) {
$width = $sampleinfo['media']['width'][$mid];
$height = $sampleinfo['media']['height'][$mid];
$scale = $width / $videowidth;
$tempsampleinfo['media']['width'] = ceil($width / $scale);
$tempsampleinfo['media']['height'] = ceil($height / $scale);
$tempsampleinfo['media']['widthdisplay'] = $tempsampleinfo['media']['width'];
$tempsampleinfo['media']['heightdisplay'] = "'height': '". $tempsampleinfo['media']['height'] ."',";
}
} else {
$tempsampleinfo['media']['width'] = $sampleinfo['media']['width'][$mid];
$tempsampleinfo['media']['height'] = $sampleinfo['media']['height'][$mid];
$tempsampleinfo['media']['widthdisplay'] = "100%";
}
$tempsampleinfo['media']['realdimensions'] = $sampleinfo['media']['width'][$mid] . "x" . $sampleinfo['media']['height'][$mid];
$tempsampleinfo['media']['aspectratio'] = ($sampleinfo['media']['width'][$mid]/$gcd) . ":" . ($sampleinfo['media']['height'][$mid]/$gcd);
$tempsampleinfo['media']['mid'] = $sampleinfo['media']['mid'][$mid];
$tempsampleinfo['media']['previewimage'] = substr($sampleinfo['media']['filename'][$mid],0,-4) . ".jpg";
$tempsampleinfo['media']['vidlength'] = $sampleinfo['media']['vidlength'][$mid];
$tempsampleinfo['media']['name'] = $sampleinfo['media']['name'][$mid];
$tempsampleinfo['media']['filename'] = $sampleinfo['media']['filename'][$mid];
$tempsampleinfo['media']['fileid'] = substr($sampleinfo['media']['filename'][$mid], 0, -4);
$tempsampleinfo['media']['is_highlighted'] = $sampleinfo['media']['is_highlighted'][$mid];
$tempsampleinfo['media']['viewable'] = $sampleinfo['media']['viewable'][$mid];
if ((string)$_REQUEST['page'] === 'admin') {
$tempsampleinfo['media']['published'] = $sampleinfo['media']['published'][$mid];
if ((string)$sampleinfo['media']['viewable'][$mid] === '1') {
$tempsampleinfo['classname'] = "VideoPlayer";
} else {
$tempsampleinfo['classname'] = "VideoPlayerNOVIEW";
}
echo sprintf(
"- ";
foreach ($errors as $error) {
echo "
- $error "; } echo "
%s (%s) %s
",
$sampleinfo['media']['name'][$mid],
date("i:s",($sampleinfo['media']['vidlength'][$mid])),
date("F d, Y",$sampleinfo['media']['published'][$mid])
);
}
$tempsampleinfo['media']['vidcount'] = $videocount; // how many videos are there for this sample?
DisplayVideoPlayer($tempsampleinfo);
if ((string)$_REQUEST['page'] === 'admin') {
AdminVideoPreviewChooser($tempsampleinfo);
}
}
}
}
if (($_REQUEST['page'] === 'admin') && ((string)$videocount === '0')) {
echo "No Videos Available for this sample!
";
}
} elseif (is_string($input) || is_int($input)) {
// I just got a media ID only, lemme populate with all info
// If this is used, show THIS ONE video
$mid = preg_replace("/[^0-9]/","",$input);
$sampleinfo = array();
$query = sprintf("SELECT * FROM `media` WHERE `mid` = %s",
mysqli_real_escape_string($conn,$mid)
);
$result = mysqli_query($conn,$query);
$row = mysqli_fetch_assoc($result);
foreach ($row as $fieldname => $value) {
$sampleinfo['media'][$fieldname] = $value;
}
mysqli_free_result($result);
if ($sampleinfo['media']['viewable'] == 0) {
echo "Video not available.
";
} else {
// now lemme get some meta data of the sample for the player
// XXX: duplicated from AdminsampleEditSingle
$query = sprintf("SELECT * FROM `samples` WHERE `oid` = %s", mysqli_real_escape_string($conn,$sampleinfo['media']['oid']));
$result = mysqli_query($conn,$query);
$row = mysqli_fetch_assoc($result);
$sampleinfo['oid'] = $oid;
foreach ($row as $fieldname => $value) {
$sampleinfo[$fieldname] = $value;
}
mysqli_free_result($result);
// scale the video if necessary
if ($sampleinfo['media']['height'][$mid] > $videoheight) {
$width = $sampleinfo['media']['width'][$mid];
$height = $sampleinfo['media']['height'][$mid];
$scale = $height / $videoheight;
$sampleinfo['media']['width'] = ceil($width / $scale);
$sampleinfo['media']['height'] = ceil($height / $scale);
}
DisplayVideoPlayer($sampleinfo);
}
}
}
function FigurePageNav($type,$page=1) {
global $conn;
global $pagination;
if ($type === "list_all" || $type === "list_new") {
$query = "SELECT COUNT(*) FROM `samples`";
} else if ($type === "list_feat") {
$query = "SELECT COUNT(*) FROM `samples` WHERE `is_highlighted` = 1";
} else if ($type === "list_secret") {
$query = "SELECT COUNT(*) FROM `samples` WHERE `is_searchable` = 0 OR `is_active` = 0";
}
$result = mysqli_query($conn,$query);
list($count) = mysqli_fetch_array($result);
mysqli_free_result($result);
// get maximum number of pages
$maximum = ceil($count/$pagination); // round up to a whole page number
// get previous page
if ($page == 1) {
$previous = 1;
} else {
$previous = abs($page - 1);
}
// get next page
if ($maximum > $page) {
$next = ($page + 1);
} else {
$next = $page;
}
return(
array(
"type"=>$type,
"first"=>1,
"previous"=>$previous,
"page"=>$page,
"next"=>$next,
"maximum"=>$maximum
)
);
}
function AdminsampleSaveNew() {
// save sample info, locations, styles, categories.
// then go to AdminsampleSaveMedia() for the media processing
global $conn;
(isEmpty($_REQUEST['name']))? $errors[] = "Please enter the sample or act name." : $name = htmlspecialchars(makeCase(convert_smart_quotes(trim($_REQUEST['name']))));
(isEmpty($_REQUEST['slug']))? $errors[] = "Please provide a short descriptive phrase about sample." : $slug = htmlspecialchars(makeCase(convert_smart_quotes(trim($_REQUEST['slug']))));
// XXX: we don't deal with CR/newlines or html/markup at all in bio field yet!
if (isEmpty($_REQUEST['bio'])) {
echo "Missing the sample's bio. Please have at least a paragraph describing the sample.
";
} else {
$bio = htmlspecialchars(convert_smart_quotes(trim($_REQUEST['bio'])));
}
if (isEmpty($_REQUEST['display_name'])) {
$display_name = UniqueObfuscatedsampleName(ObfuscatesampleNameAutomatically(htmlspecialchars(convert_smart_quotes(trim($_REQUEST['name'])))));
} else {
$display_name = UniqueObfuscatedsampleName(htmlspecialchars(makeCase(convert_smart_quotes(trim($_REQUEST['display_name'])))));
}
isset($_REQUEST['use_display_name']) ? $use_display_name = 1 : $use_display_name = 0;
$is_active = isset($_REQUEST['is_active']);
isset($_REQUEST['is_searchable']) ? $is_searchable = 1 : $is_searchable = 0;
isset($_REQUEST['is_highlighted']) ? $is_highlighted = 1 : $is_highlighted = 0;
if (isset($_REQUEST['categories'])) {
$categories = array();
foreach ($_REQUEST['categories'] as $key => $value) {
$categories[$key] = preg_replace("/[^0-9]/","",$value);
}
} else {
$errors[] = "Please select one or more categories for this sample.";
}
if (isset($_REQUEST['styles'])) {
$styles = array();
foreach ($_REQUEST['styles'] as $key => $value) {
$styles[$key] = preg_replace("/[^0-9]/","",$value);
}
} else {
$errors[] = "Please select one or more styles of entertainment this sample performs.";
}
if (isset($_REQUEST['locations'])) {
$locations = array();
foreach ($_REQUEST['locations'] as $key => $value) {
$locations[$key] = preg_replace("/[^0-9]/","",$value);
}
} else {
$errors[] = "Please select one or more cities that this sample is local to.";
}
// check if this is a duplicate // being a real jerk by including the "cleaned" URL text
$query = sprintf("SELECT `name` FROM `samples` WHERE `name` = '%s' OR `url` = '%s'",
mysqli_real_escape_string($conn, $name),
mysqli_real_escape_string($conn, $url)
);
$result = mysqli_query($conn,$query);
if (mysqli_num_rows($result) > 0) {
$errors[] = "This sample may already exist in the database! Please check the sample's name carefully.";
}
// XXX: This guess at an URL is pretty weaksauce
$url = MakeURL(strtolower($name));
$alt_url = GetAltUrl(MakeURL(strtolower($display_name))); // what's the URL if we're in use_display_name mode? XXX: This is pretty retarded. I want full names in URL for SEO. even specifiying an URL at all is unnecessary since going to just search on name anyways.
// insert into sample table and get the auto_incremented oid
if (!isset($errors)) {
$query = sprintf("INSERT INTO `samples` (`name`,`display_name`,`url`,`alt_url`,`slug`,`bio`,`use_display_name`,`is_active`,`is_highlighted`,`is_searchable`,`last_updated`) VALUES ('%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s')",
mysqli_real_escape_string($conn, $name),
mysqli_real_escape_string($conn, $display_name),
mysqli_real_escape_string($conn, $url),
mysqli_real_escape_string($conn, $alt_url),
mysqli_real_escape_string($conn, $slug),
mysqli_real_escape_string($conn, $bio),
mysqli_real_escape_string($conn, $use_display_name),
mysqli_real_escape_string($conn, $is_active),
mysqli_real_escape_string($conn, $is_highlighted),
mysqli_real_escape_string($conn, $is_searchable),
mysqli_real_escape_string($conn, DatePHPtoSQL(time()))
);
if (mysqli_query($conn,$query) === TRUE) {
$oid = mysqli_insert_id($conn);
foreach($categories as $cid) {
$query = sprintf("INSERT INTO `samplecategories` (`cid`,`oid`) VALUES (%s,%s)",
mysqli_real_escape_string($conn, $cid),
mysqli_real_escape_string($conn, $oid)
);
if (mysqli_query($conn,$query) === FALSE) {
$errors[] = "Error saving category $cid for $oid!" .mysqli_error($conn);
}
}
foreach($styles as $sid) {
$query = sprintf("INSERT INTO `samplestyles` (`sid`,`oid`) VALUES (%s,%s)",
mysqli_real_escape_string($conn, $sid),
mysqli_real_escape_string($conn, $oid)
);
if (mysqli_query($conn,$query) === FALSE) {
$errors[] = "Error saving style $sid for $oid!" .mysqli_error($conn);
}
}
foreach($locations as $lid) {
$query = sprintf("INSERT INTO `samplelocations` (`lid`,`oid`) VALUES (%s,%s)",
mysqli_real_escape_string($conn, $lid),
mysqli_real_escape_string($conn, $oid)
);
if (mysqli_query($conn,$query) === FALSE) {
$errors[] = "Error saving location $lid for $oid!" .mysqli_error($conn);
}
}
echo "sample information for $name updated!
";
} else {
$errors[] = "Did not update sample! Database Failure: ".mysqli_error($conn);
}
}
if (isset($errors)) {
echo "There are some missing details preventing us from updating this sample.
\n";
}
return($oid); // or null if bad
}
function GetAltUrl($alturl) {
global $conn;
$query = sprintf("SELECT `alt_url` FROM `samples` WHERE `alt_url` = '%s'", mysqli_real_escape_string($conn,$alturl));
$result = mysqli_query($conn,$query);
if (mysqli_num_rows($result) == 0) {
return ($alturl);
} else {
// go loop for a new alturl
$number = 1;
$basename = $alturl; // increment the number, not append another digit
while (!$done) {
$alturl = "$basename$number";
$query = sprintf("SELECT `alt_url` FROM `samples` WHERE `alt_url` = '%s'", mysqli_real_escape_string($conn,$alturl));
$result = mysqli_query($conn,$query);
(mysqli_num_rows($result) == 0)? $done++ : $number++;
}
return ($alturl);
}
}
function AdminsampleSaveMedia($oid) {
global $conn;
$savedfilecount = 0;
// page 1's save sample's media
if (CheckForFiles()) {
$newfiles = array();
// put all uploaded files into the filesystem
$newfiles = SaveFile("sample"); // should return an array of [fileid, orig name]
// step thru each uploaded file and process media
foreach($newfiles as $key => $newfileinfo) {
if (strlen($newfiles[$key][0]) < 1) { // [0] is fileid
continue; // XXX: This isn't a file, this is just SaveFile() noise
}
// make thumbnail
$newfileid = ResizeImage($newfiles[$key][0],"sample");
// XXX: watermark function here?
$filename = preg_replace(array('/\s/', '/\.[\.]+/', '/[^\w_\.\-]/'), array('_', '.', ''), $_FILES['filesToUpload']['name'][$key]);
$mediainfo = MediaInfo($newfileid,"sample");
$query = sprintf("INSERT INTO `media` (`filename`, `filetype`,
`oid`, `name`, `thumbwidth`, `thumbheight`, `width`, `height`,
`vidlength`, `is_highlighted`, `viewable`, `published`
) VALUES ( '%s','%s',%s,'%s',%s,%s,%s,%s,%s,%s,%s,'%s')",
mysqli_real_escape_string($conn, $newfileid),
mysqli_real_escape_string($conn, $mediainfo['filetype']),
mysqli_real_escape_string($conn, preg_replace("/[^0-9]/",'',$oid)),
mysqli_real_escape_string($conn, $filename),
preg_replace("/[^0-9]/",'',$mediainfo['thumbwidth']),
preg_replace("/[^0-9]/",'',$mediainfo['thumbheight']),
preg_replace("/[^0-9]/",'',$mediainfo['width']),
preg_replace("/[^0-9]/",'',$mediainfo['height']),
preg_replace("/[^0-9]/",'',$mediainfo['vidlength']),
"0", // XXX: we don't highlight on upload, user gotta select one manually.
"1", // Assume yes, media file is viewable for this initial upload.
mysqli_real_escape_string($conn, DatePHPtoSQL(time()))
);
if (mysqli_query($conn,$query) === TRUE) {
$savedfilecount++;
} else {
$errors[] = "Media file '$filename' not saved in database!- ";
foreach ($errors as $error) {
echo "
- $error "; } echo "
". mysqli_error($conn); } } } if (is_countable($errors)) { foreach ($errors as $error) { echo "
$error
";
}
return (0);
} else {
return ($savedfilecount);
}
}
function MediaInfo($fileid,$purpose) {
global $dirlocation;
//fileid includes confirmed file extension
$mediainfo = array();
if (preg_match("/\.jpg/",$fileid)) {
list($mediainfo['width'], $mediainfo['height'], $filetype, $attr) = getimagesize("$dirlocation/i/$purpose/original-$fileid");
list($mediainfo['thumbwidth'], $mediainfo['thumbheight'], $thumbtype, $thumbattr) = getimagesize("$dirlocation/i/$purpose/$fileid");
$mediainfo['filetype'] = "jpg";
$mediainfo['vidlength'] = 0;
} else if (preg_match("/\.png/",$fileid)) {
list($mediainfo['width'], $mediainfo['height'], $filetype, $attr) = getimagesize("$dirlocation/i/$purpose/original-$fileid");
list($mediainfo['thumbwidth'], $mediainfo['thumbheight'], $thumbtype, $thumbattr) = getimagesize("$dirlocation/i/$purpose/$fileid");
$mediainfo['filetype'] = "png";
$mediainfo['vidlength'] = 0;
} else if (preg_match("/mp4/",$fileid)) {
/* no ffmpeg PHP library dependancies anymore, since php-ffmpeg is locked to php5 */
exec("/usr/local/bin/ffprobe -i m/$fileid -v quiet -print_format json -show_format -show_streams -hide_banner", $ffresult);
$ffresult = implode("",$ffresult);
$ffinfo = json_decode($ffresult, TRUE);
$mediainfo['vidlength'] = ceil($ffinfo['format']['duration']);
$mediainfo['width'] = $ffinfo['streams'][0]['width'];
$mediainfo['height'] = $ffinfo['streams'][0]['height'];
$mediainfo['thumbwidth'] = 0;
$mediainfo['thumbheight'] = 0;
$mediainfo['filetype'] = "mp4";
}
return ($mediainfo);
}
function AdminsampleList() {
global $conn;
global $pagination;
if ($_REQUEST['listpage'] > 0) {
$page = preg_replace("/[^0-9]/","",$_REQUEST['listpage']);
} else {
$page = 1;
}
$limit_start = (abs($page - 1) * $pagination);
$limit_end = $pagination;
//echo "$limit_start / $limit_end";
// XXX: Presence -- Figure out what to select, plz
$query = sprintf("SELECT * FROM `samples` ORDER BY `name` LIMIT %s,%s",
mysqli_real_escape_string($conn,$limit_start),
mysqli_real_escape_string($conn,$limit_end)
);
$result = mysqli_query($conn,$query);
$row = mysqli_fetch_assoc($result);
AdminsampleListPage($result,$page);
mysqli_free_result($result);
}
function AdminsampleListNew() {
global $conn;
global $pagination;
if ($_REQUEST['listpage'] > 0) {
$page = preg_replace("/[^0-9]/","",$_REQUEST['listpage']);
} else {
$page = 1;
}
$limit_start = (abs($page - 1) * $pagination);
$limit_end = $pagination;
$query = sprintf("SELECT * FROM `samples` ORDER BY `last_updated` DESC LIMIT %s,%s",
mysqli_real_escape_string($conn,$limit_start),
mysqli_real_escape_string($conn,$limit_end)
);
$result = mysqli_query($conn,$query);
$row = mysqli_fetch_assoc($result);
AdminsampleListPageNew($result,$page);
mysqli_free_result($result);
}
function AdminsampleListFeat() {
global $conn;
global $pagination;
if ($_REQUEST['listpage'] > 0) {
$page = preg_replace("/[^0-9]/","",$_REQUEST['listpage']);
} else {
$page = 1;
}
$limit_start = (abs($page - 1) * $pagination);
$limit_end = $pagination;
$query = sprintf("SELECT * FROM `samples` WHERE `is_highlighted` = 1 ORDER BY `name` LIMIT %s,%s",
mysqli_real_escape_string($conn,$limit_start),
mysqli_real_escape_string($conn,$limit_end)
);
$result = mysqli_query($conn,$query);
$row = mysqli_fetch_assoc($result);
AdminsampleListPageFeat($result,$page);
mysqli_free_result($result);
}
function AdminsampleListSecret() {
global $conn;
global $pagination;
if ($_REQUEST['listpage'] > 0) {
$page = preg_replace("/[^0-9]/","",$_REQUEST['listpage']);
} else {
$page = 1;
}
$limit_start = (abs($page - 1) * $pagination);
$limit_end = $pagination;
$query = sprintf("SELECT * FROM `samples` WHERE `is_active` = 0 OR `is_searchable` = 0 ORDER BY `is_active` DESC, `name` LIMIT %s,%s",
mysqli_real_escape_string($conn,$limit_start),
mysqli_real_escape_string($conn,$limit_end)
);
$result = mysqli_query($conn,$query);
$row = mysqli_fetch_assoc($result);
AdminsampleListPageSecret($result,$page);
mysqli_free_result($result);
}
function AdminListsamplesByCategory() {
global $conn;
// wtf is the cid for categoryurl
$query = sprintf(
"SELECT `cid` FROM `categories` WHERE `url` = '%s'",
mysqli_real_escape_string($conn,$_REQUEST['categoryurl'])
);
$result = mysqli_query($conn,$query);
$row = mysqli_fetch_assoc($result);
// wtf are all the oid's associated with the one cid?
$query = sprintf(
"SELECT * FROM `samples` LEFT OUTER JOIN `samplecategories` ON `samples`.`oid` = `samplecategories`.`oid` WHERE `samplecategories`.`cid` = %s ORDER BY `samples`.`name`",
mysqli_real_escape_string($conn,$row['cid'])
);
$result = mysqli_query($conn,$query);
// XXX: no pagination, just a long listing
AdminsampleListPageByCategory($result,$page);
mysqli_free_result($result);
}
function AdminListsampleByStyle() {
global $conn;
// wtf are all the oid's associated with the one sid?
$query = sprintf(
"SELECT * FROM `samples` LEFT OUTER JOIN `samplestyles` ON `samples`.`oid` = `samplestyles`.`oid` WHERE `samplestyles`.`sid` = %s ORDER BY `samples`.`name`",
mysqli_real_escape_string($conn,preg_replace("/[^0-9]/","",$_REQUEST['sid']))
);
$result = mysqli_query($conn,$query);
$row = mysqli_fetch_assoc($result);
// XXX: no pagination, just a long listing
AdminsampleListPageByStyle($result,$page);
mysqli_free_result($result);
}
function AdminsampleListSearchResults() {
global $conn;
if (isEmpty($_REQUEST['q'])) {
$search = htmlspecialchars(strip_tags(strtolower(trim($_REQUEST['listpage']))));
} else {
$search = htmlspecialchars(strip_tags(strtolower(trim($_REQUEST['q']))));
}
$search = preg_replace('/[\W]+/', '', $search); // remove punctuation and dashes
$query = sprintf(
"
SELECT * FROM `samples` WHERE
REPLACE(REPLACE(`name`,' ',''),'-','') LIKE '%%%s%%' OR
REPLACE(REPLACE(`alt_url`,'-',''),'_','') LIKE '%%%s%%' OR
REPLACE(REPLACE(`display_name`,'.',''),'-','') LIKE '%%%s%%'
ORDER BY `name`
",
mysqli_real_escape_string($conn,$search),
mysqli_real_escape_string($conn,$search),
mysqli_real_escape_string($conn,$search)
);
$result = mysqli_query($conn,$query);
$row = mysqli_fetch_assoc($result);
// XXX: no pagination, just a long listing
AdminsampleListPageBySearchResult($result,$page);
mysqli_free_result($result);
}
function AdminEditSingleLocation($lid) {
global $conn;
$query = sprintf("SELECT `lid`, `city`,`state` FROM `locations` WHERE `lid` = '%s'",
mysqli_real_escape_string($conn,$lid)
);
$result = mysqli_query($conn,$query);
$row = mysqli_fetch_assoc($result);
AdminEditLocation($row);
mysqli_free_result($result);
}
function AdminListLocations() {
global $conn;
$query = "SELECT `lid`, `city`, `state` FROM `locations` ORDER BY `state`, `city`";
$result = mysqli_query($conn,$query);
$locationslist = array();
while ($row = mysqli_fetch_assoc($result)) {
$locations[] = array(
"lid" => $row['lid'],
"city" => $row['city'],
"state" => StateCodeToName($row['state'])
);
}
mysqli_free_result($result);
AdminShowLocations($locations);
}
function AdminSaveNewLocation() {
global $conn;
if ( (isEmpty($_REQUEST['city'])) || (strlen($_REQUEST['state']) != 2) ) {
echo "Please input both a city and state.
";
} else {
$city = htmlspecialchars(ucwords(trim($_REQUEST['city'])));
$state = htmlspecialchars(strtoupper(trim($_REQUEST['state'])));
$query = sprintf("INSERT INTO `locations` (`city`,`state`) VALUES ('%s','%s')",
mysqli_real_escape_string($conn,$city),
mysqli_real_escape_string($conn,$state)
); // XXX: there may be two legitimate cities named the same, but in different states. Not allowed currently.
$statename = StateCodeToName($state);
if (mysqli_query($conn,$query) === TRUE) {
echo "$city, $statename Successfully Added.
";
} else {
echo "$city, $statename Failed to Save!
". mysqli_error($conn) ."
";
}
}
}
function AdminDeleteLocation($lid) {
global $conn;
$sid = preg_replace("/[^0-9]/","",$lid); // input sanitization -- only numbers
// find all samples using this location in `samplelocations` and clean 'em up
$query = sprintf("DELETE FROM `samplelocations` WHERE `lid` = '%s'",
mysqli_real_escape_string($conn,$lid)
);
if (mysqli_query($conn,$query) === FALSE) {
echo "". mysqli_error($conn) ."
Whoa, couldn't delete '$lid' from samplelocations. ". mysqli_error($conn) ."
";
}
$query = sprintf("DELETE FROM `locations` WHERE `lid` = '%s'",
mysqli_real_escape_string($conn,$lid)
);
if (mysqli_query($conn,$query) === TRUE) {
echo "Location removed.
";
} else {
echo "Hmm, couldn't delete '$lid' from locations.". mysqli_error($conn) ."
";
}
}
function AdminListStyles() {
global $conn;
$query = "SELECT `sid`, `name` FROM `styles`";
$result = mysqli_query($conn,$query);
$categorieslist = array();
while ($row = mysqli_fetch_assoc($result)) {
$styles[] = array(
"sid" => $row['sid'],
"name" => $row['name']
);
}
mysqli_free_result($result);
aasort($styles,"name");
$quantity = count($styles);
AdminShowStyles($styles,$quantity);
}
function AdminSaveSingleLocation() {
// save an existing location that was just edited
global $conn;
if ( (isEmpty($_REQUEST['city'])) || (strlen($_REQUEST['state']) != 2) ) {
echo "Please input both a city and state.
";
} else {
$lid = preg_replace("/[^0-9]/","",$_REQUEST['lid']); // input sanitization -- only numbers
$city = htmlspecialchars(ucwords(trim($_REQUEST['city'])));
$state = htmlspecialchars(strtoupper(trim($_REQUEST['state'])));
$statename = StateCodeToName($state);
$query = sprintf("UPDATE `locations` SET `city` = '%s', `state` = '%s' WHERE `lid` = '%s'",
mysqli_real_escape_string($conn,$city),
mysqli_real_escape_string($conn,$state),
mysqli_real_escape_string($conn,$lid)
);
if (mysqli_query($conn,$query) === TRUE) {
echo "Location $city, $statename [$lid] Successfully Updated.
";
} else {
echo "Location $city, $statename [$lid] Failed to Update!
". mysqli_error($conn) ."
";
}
}
}
function AdminSaveSingleStyle() {
// save an existing style that was just edited
global $conn;
$sid = preg_replace("/[^0-9]/","",$_REQUEST['sid']); // input sanitization -- only numbers
$name = htmlspecialchars(ucwords(trim($_REQUEST['name'])));
if (isEmpty($name)) {
echo "". mysqli_error($conn) ."
Please fill in the style's Name.
";
} else {
$sid = preg_replace("/\[^0-9]/","",trim($_REQUEST['sid']));
$query = sprintf("UPDATE `styles` SET `name` = '%s' WHERE `sid` = '%s'",
mysqli_real_escape_string($conn,$name),
mysqli_real_escape_string($conn,$sid)
);
if (mysqli_query($conn,$query) === TRUE) {
echo "Style Entry $name [$sid] Successfully Updated.
";
} else {
echo "Style Entry $name [$sid] Failed to Update!
". mysqli_error($conn) ."
";
}
}
}
function AdminDeleteStyle($targetcategoryurl) {
global $conn;
$query = sprintf(
"SELECT `name` FROM `styles` WHERE `sid` = %s",
mysqli_real_escape_string($conn,preg_replace("/[^0-9]/","",$_REQUEST['sid']))
);
$result = mysqli_query($conn,$query);
$row = mysqli_fetch_assoc($result);
$nextfunction = "del_style_for_reals";
$url = "styles_list";
AdminShowDeleteConfirmation($targetcategoryurl,$row['name'],$url,$url,$nextfunction);
}
function AdminDeleteStyleGo($sid) {
global $conn;
$sid = preg_replace("/[^0-9]/","",$sid); // input sanitization -- only numbers
// find all samples using this category in `samplecategories` and clean 'em up
$query = sprintf("DELETE FROM `samplestyles` WHERE `sid` = '%s'",
mysqli_real_escape_string($conn,$sid)
);
if (mysqli_query($conn,$query) === FALSE) {
echo "". mysqli_error($conn) ."
Whoa, couldn't delete '$sid' from samplestyles. ". mysqli_error($conn) ."
";
}
// delete the style from `styles`
$query = sprintf("DELETE FROM `styles` WHERE `sid` = '%s'",
mysqli_real_escape_string($conn,$sid)
);
if (mysqli_query($conn,$query) === TRUE) {
echo "Style removed.
";
} else {
echo "Hmm, couldn't delete '$sid' from categories.". mysqli_error($conn) ."
";
}
}
function AdminEditSingleStyle($sid) {
global $conn;
$query = sprintf("SELECT `sid`,`name` FROM `styles` WHERE `sid` = '%s'",
mysqli_real_escape_string($conn,$sid)
);
$result = mysqli_query($conn,$query);
$row = mysqli_fetch_assoc($result);
AdminEditStyle($row);
mysqli_free_result($result);
}
function AdminSaveNewStyle() {
// save a NEW style
global $conn;
if (isEmpty($_REQUEST['name'])) {
echo "Please fill in the style's name.
";
} else {
$name = htmlspecialchars(ucwords(trim($_REQUEST['name'])));
$query = sprintf("INSERT INTO `styles` (`name`) VALUES ('%s')",
mysqli_real_escape_string($conn,$name)
); // I'm trusting that MySQL's UNIQUE will prevent duplicates
if (mysqli_query($conn,$query) === TRUE) {
echo "Style Entry $name Successfully Added.
";
} else {
echo "Style Entry $name Failed to Save!
". mysqli_error($conn) ."
";
}
}
}
function AdminEditSingleCategory($targetcategoryurl) {
global $conn;
$query = sprintf("SELECT * FROM `categories` WHERE `url` = '%s'",
mysqli_real_escape_string($conn,$targetcategoryurl)
);
$result = mysqli_query($conn,$query);
$row = mysqli_fetch_assoc($result);
AdminEditCategory($row);
mysqli_free_result($result);
}
function AdminEditSingleSubCategory($targetcategoryurl) {
global $conn;
$query = sprintf("SELECT * FROM `subcategories` WHERE `url` = '%s'",
mysqli_real_escape_string($conn,$targetcategoryurl)
);
$result = mysqli_query($conn,$query);
$row = mysqli_fetch_assoc($result);
$query = sprintf("SELECT `category` FROM `categories` WHERE `cid` = '%s'",
mysqli_real_escape_string($conn,$row['parent_cid'])
);
$result = mysqli_query($conn,$query);
list($category) = mysqli_fetch_array($result);
$row['category'] = $category;
AdminEditSubCategory($row);
}
function AdminSaveSingleCategory($cid) {
// save an existing category that was just edited
global $conn;
global $dirlocation;
if (CheckForFiles()) {
list ($fileid, $filename) = SaveFile("category")[0]; // for Categories, only one image uploaded.
$newfileid = ResizeImage($fileid,"category"); // 728x90
}
if ( (isEmpty($_REQUEST['form_url'])) || (isEmpty($_REQUEST['form_category'])) || (isEmpty($_REQUEST['form_description'])) ) {
echo "". mysqli_error($conn) ."
Please fill in all three Category fields
";
} else {
$cid = preg_replace("/\[^0-9]/","",trim($cid));
$url = MakeURL(strip_tags(trim($_REQUEST['form_url'])));
$category = htmlspecialchars(trim($_REQUEST['form_category']));
if (strlen($_REQUEST['published'])) {
$published = TRUE;
} else {
$published = FALSE;
}
// do highlighted carousel image
$highlighted = FALSE;
if (strlen($_REQUEST['is_highlighted'])) {
list ($highlighted_fileid, $highlighted_filename) = SaveCategoryHighlight(); // for Highghlighted Carousel image, only one file uploaded.
if (!isEmpty($highlighted_fileid)) {
$query = sprintf("UPDATE `categories` SET `carousel_filename` = '%s', `carousel_id` = '%s' WHERE `cid` = '%s'",
mysqli_real_escape_string($conn,$highlighted_filename),
mysqli_real_escape_string($conn,$highlighted_fileid),
mysqli_real_escape_string($conn,$cid)
);
if (mysqli_query($conn,$query) === TRUE) {
echo "Category Entry $category [$url] Carousel Image Successfully Updated.
";
} else {
echo "Category Entry $category [$url] Failed to Update Carousel Image!
". mysqli_error($conn) ."
";
}
}
// XXX: I'm leaving behind the old category carousel image.
$highlighted = TRUE;
} else {
$highlighted = 0;
}
if ($filename) {
// delete the old category image file from the system
$query = sprintf("SELECT `image_id` FROM `categories` WHERE `cid` = '%s'", mysqli_real_escape_string($conn,$cid));
$result = mysqli_query($conn,$query);
list($old_fileid) = mysqli_fetch_array($result);
unlink("$dirlocation/i/category/$old_fileid");
unlink("$dirlocation/i/category/original-$old_fileid"); // XXX: we're not deleting jpegs, only png.
$query = sprintf("UPDATE `categories` SET `url` = '%s', `category` = '%s', `description` = '%s', `force_display_names` = '%s', `published` = '%s', `image_filename` = '%s', `image_id` = '%s', `is_highlighted` = '%s', `last_updated` = '%s' WHERE `cid` = '%s'",
mysqli_real_escape_string($conn,$url),
mysqli_real_escape_string($conn,$category),
mysqli_real_escape_string($conn,htmlspecialchars(trim($_REQUEST['form_description']))),
mysqli_real_escape_string($conn,preg_replace("/[^YNI]/","",$_REQUEST['force_display_names'])),
mysqli_real_escape_string($conn,$published),
mysqli_real_escape_string($conn,$filename),
mysqli_real_escape_string($conn,$newfileid),
mysqli_real_escape_string($conn,$highlighted),
mysqli_real_escape_string($conn,DatePHPtoSQL(time())),
mysqli_real_escape_string($conn,$cid)
);
} else {
$query = sprintf("UPDATE `categories` SET `url` = '%s', `category` = '%s', `description` = '%s', `force_display_names` = '%s', `published` = '%s', `is_highlighted` = '%s', `last_updated` = '%s' WHERE `cid` = '%s'",
mysqli_real_escape_string($conn,$url),
mysqli_real_escape_string($conn,$category),
mysqli_real_escape_string($conn,htmlspecialchars(trim($_REQUEST['form_description']))),
mysqli_real_escape_string($conn,preg_replace("/[^YNI]/","",$_REQUEST['force_display_names'])),
mysqli_real_escape_string($conn,$published),
mysqli_real_escape_string($conn,$highlighted),
mysqli_real_escape_string($conn,DatePHPtoSQL(time())),
mysqli_real_escape_string($conn,$cid)
);
}
if (mysqli_query($conn,$query) === TRUE) {
echo "". mysqli_error($conn) ."
Category Entry $category [$url] Successfully Updated.
";
} else {
echo "Category Entry $category [$url] Failed to Update!
". mysqli_error($conn) ."
";
}
}
}
function AdminSaveSingleSubCategory($subid) {
global $conn;
global $dirlocation;
if (CheckForFiles()) {
list ($fileid, $filename) = SaveFile("sample")[0]; // for Categories, only one image uploaded. // XXX: I suck, just calling this an sample image
$newfileid = ResizeImage($fileid,"sample"); // 600x400
}
if ( (isEmpty($_REQUEST['form_url'])) || (isEmpty($_REQUEST['form_subcategory'])) || (isEmpty($_REQUEST['form_description'])) ) {
echo "". mysqli_error($conn) ."
Please fill in all three Category fields
";
} else {
$subid = preg_replace("/\[^0-9]/","",trim($subid));
$url = MakeURL(strtolower(strip_tags(trim($_REQUEST['form_url']))));
$subcategory = htmlspecialchars(trim($_REQUEST['form_subcategory']));
if ($filename) {
// delete the old category image file from the system
$query = sprintf("SELECT `image_id` FROM `subcategories` WHERE `subid` = '%s'", mysqli_real_escape_string($conn,$subid));
$result = mysqli_query($conn,$query);
list($old_fileid) = mysqli_fetch_array($result);
unlink("$dirlocation/i/sample/$old_fileid"); // XXX: It's an sample image, not a category image. I suck.
unlink("$dirlocation/i/sample/original-$old_fileid"); // XXX: It's an sample image, not a category image. I suck.
$query = sprintf("UPDATE `subcategories` SET `url` = '%s', `subcategory` = '%s', `description` = '%s', `image_filename` = '%s', `image_id` = '%s' WHERE `subid` = '%s'",
mysqli_real_escape_string($conn,$url),
mysqli_real_escape_string($conn,$subcategory),
mysqli_real_escape_string($conn,htmlspecialchars(trim($_REQUEST['form_description']))),
mysqli_real_escape_string($conn,$filename),
mysqli_real_escape_string($conn,$newfileid),
mysqli_real_escape_string($conn,$subid)
);
} else {
$query = sprintf("UPDATE `subcategories` SET `url` = '%s', `subcategory` = '%s', `description` = '%s' WHERE `subid` = '%s'",
mysqli_real_escape_string($conn,$url),
mysqli_real_escape_string($conn,$subcategory),
mysqli_real_escape_string($conn,htmlspecialchars(trim($_REQUEST['form_description']))),
mysqli_real_escape_string($conn,$subid)
);
}
if (mysqli_query($conn,$query) === TRUE) {
echo "Sub-category Entry $subcategory [$url] Successfully Updated.
";
} else {
echo "Sub-category Entry $subcategory [$url] Failed to Update!
". mysqli_error($conn) ."
";
}
}
}
function AdminDeleteCategory($targetcategoryurl) {
$nextfunction = "del_category_for_reals";
$url = "categories_list";
AdminShowDeleteConfirmation($targetcategoryurl,$targetcategoryurl,$url,$url,$nextfunction);
}
function AdminDeleteSubCategory($targetcategoryurl) {
$nextfunction = "del_subcategory_for_reals";
$url = "categories_list";
AdminShowDeleteConfirmation($targetcategoryurl,$targetcategoryurl,$url,$url,$nextfunction);
}
function AdminsampleDeleteGo($oid) {
global $conn;
global $dirlocation;
$oid = preg_replace("/[^0-9]/","",$oid);
// Delete media files from filesystem
$query = "SELECT `filename`,`filetype` FROM `media` WHERE `oid` = $oid";
$result = mysqli_query($conn, $query);
while ($row = mysqli_fetch_assoc($result)) {
$filename = $row['filename'];
if ($row['filetype'] == "mp4") {
unlink ("$dirlocation/m/$filename");
echo "XXX: unlink $dirlocation m $filename\n";
} else {
unlink ("$dirlocation/i/sample/$filename");
unlink ("$dirlocation/i/sample/original-$filename");
}
}
// delete from database tables
$tables = array("samplestyles","samplecategories","samplelocations","samplesubcategories","media","samples");
$error = 0;
foreach ($tables as $table) {
$query = "DELETE FROM `$table` WHERE `oid` = $oid";
if (mysqli_query($conn,$query) === FALSE) {
echo "". mysqli_error($conn) ."
Error deleting $oid from $table: ". mysqli_error($conn) ."
";
$error++;
}
}
if ($error == 0) {
echo "Who? What? Them be gone, Man.
";
}
}
function AdminDeleteCategoryGo($targetcategoryurl) {
global $conn;
global $dirlocation;
// fetch us the category id for tihs url
// XXX: could this be some sort of joined thing? Yeah. Am I doing it? Dunno how. Does it matter? Not this time.
$query = sprintf("SELECT `cid`,`image_id`,`carousel_id` FROM `categories` WHERE `url` = '%s'",
mysqli_real_escape_string($conn,$targetcategoryurl)
);
$result = mysqli_query($conn,$query);
list($cid,$fileid,$carousel_id) = mysqli_fetch_array($result);
if (isEmpty($cid)) {
echo "Huh, I couldn't retrieve the cid from $targetcategoryurl.". mysqli_error($conn) ."
";
}
// find all samples using this category in `samplecategories` and clean 'em up
$query = sprintf("DELETE FROM `samplecategories` WHERE `cid` = '%s'",
mysqli_real_escape_string($conn,$cid)
);
if (mysqli_query($conn,$query) === FALSE) {
echo "Whoa, couldn't delete '$cid' from samplecategories.". mysqli_error($conn) ."
";
}
// delete the category from `categories`
$query = sprintf("DELETE FROM `categories` WHERE `cid` = '%s'",
mysqli_real_escape_string($conn,$cid)
);
// delete the category image file from the system
@unlink("$dirlocation/i/category/$fileid");
@unlink("$dirlocation/i/category/original-$fileid"); // XXX: we're not deleting jpegs, only png.
if (!isEmpty($carousel_id)) {
unlink("$dirlocation/i/category/$carousel_id");
unlink("$dirlocation/i/category/original-$carousel_id");
}
if (mysqli_query($conn,$query) === TRUE) {
echo "The light is green, the trap is clean.
";
} else {
echo "Hmm, couldn't delete '$cid' from categories.". mysqli_error($conn) ."
";
}
}
function AdminDeleteSubCategoryGo($targetcategoryurl) {
global $conn;
global $dirlocation;
$query = sprintf("SELECT `subid`,`image_id` FROM `subcategories` WHERE `url` = '%s'",
mysqli_real_escape_string($conn,$targetcategoryurl)
);
$result = mysqli_query($conn,$query);
list($subid,$fileid) = mysqli_fetch_array($result);
if (isEmpty($subid)) {
echo "Derp, there's no subid for $targetcategoryurl.". mysqli_error($conn) ."
";
} else {
$query = sprintf("DELETE FROM `samplesubcategories` WHERE `subid` = %s",
mysqli_real_escape_string($conn,$subid)
);
if (mysqli_query($conn,$query) === FALSE) {
echo "Snap, couldn't delete '$subid' from samplesubcategories! ". mysqli_error($conn) ."
";
} else {
$query = sprintf("DELETE FROM `subcategories` WHERE `subid` = '%s'",
mysqli_real_escape_string($conn,$subid)
);
@unlink("$dirlocation/i/category/$fileid");
@unlink("$dirlocation/i/category/original-$fileid");
if (mysqli_query($conn,$query) === TRUE) {
echo "Silly Subcategory, Say Sayonara!
";
} else {
echo "O NOES! '$subid' is too hardcore. ". mysqli_error($conn) ."
";
}
}
}
}
function AdminEditCategories() {
global $conn;
$query = "SELECT * FROM `categories`";
$result = mysqli_query($conn,$query);
$categorieslist = array();
while ($row = mysqli_fetch_assoc($result)) {
// does this category have subcategories?
$subs = 0;
$query = sprintf("SELECT `subid` FROM `subcategories` WHERE `parent_cid` = '%s'",
mysqli_real_escape_string($conn,$row['cid'])
);
$subresult = mysqli_query($conn,$query);
if (mysqli_num_rows($subresult) > 0) {
$subs++;
}
$categorieslist[] = array(
"url" => $row['url'],
"category" => $row['category'],
"description" => $row['description'],
"published" => $row['published'],
"highlighted" => $row['is_highlighted'],
"subs" => $subs
);
}
mysqli_free_result($result);
aasort($categorieslist,"category");
AdminShowCategories($categorieslist);
}
function AdminEditSubCategories($parent) {
global $conn;
if (preg_match("/^[0-9]+$/",$parent)) {
$parent_cid = $parent;
} else {
$parent_cid = CategoryIDFromURL($parent);
}
$query = sprintf("SELECT * FROM `subcategories` WHERE `parent_cid` = '%s'",
mysqli_real_escape_string($conn,$parent_cid)
);
$result = mysqli_query($conn,$query);
$subcategorieslist = array();
if (mysqli_num_rows($result) > 0) {
while ($row = mysqli_fetch_assoc($result)) {
$subcategorieslist[] = array(
"url" => $row['url'],
"category" => $row['subcategory'],
"description" => $row['description'],
"parent_cid" => $row['parent_cid']
);
}
aasort($subcategorieslist,"category");
AdminShowSubCategories($subcategorieslist);
}
}
function AdminSelectCategories($oid = NULL) {
// for adding or editing an sample
// XXX: This does not respect user-defined priority/sequence order from webform or database
global $conn;
$categorieslist = array();
$samplecategories = array();
$query = "SELECT * FROM `categories` ORDER BY `category`";
$result = mysqli_query($conn,$query);
while ($row = mysqli_fetch_assoc($result)) {
$categorieslist[$row['cid']] = $row['category'];
}
mysqli_free_result($result);
if ($oid) {
$query = sprintf("SELECT `cid` FROM `samplecategories` WHERE `oid` = %s",
mysqli_real_escape_string($conn,$oid)
);
$result = mysqli_query($conn,$query);
while ($row = mysqli_fetch_assoc($result)) {
$samplecategories[$row['cid']] = TRUE;
}
}
foreach($categorieslist as $cid => $category) {
$s = 0; // selected flag
if ($samplecategories[$cid]) {
// if sample is assigned to category is in the database
$s++;
}
if (($_REQUEST['formpage'] == 1) && is_countable($_REQUEST['categories'])) {
// if this is from the new sample webform...
if (strlen(array_search($cid,$_REQUEST['categories'])) > 0) { // LAME: array_search returns null for a key that's "0"
// if sample selected to category from form page 1
$s++;
}
}
$string .= sprintf("",
$cid,
($s > 0)? ' selected' : '',
$category
);
}
return($string);
}
function AdminSelectSubCategories($sampleinfo) {
// $sampleinfo['oid'] and array in $sampleinfo['categories'] of cid=>cid
// XXX: This does not respect user-defined priority/sequence order from webform or database
global $conn;
$subcategorieslist = array();
$samplesubcategories = array();
$parentcatslist = array();
foreach ($sampleinfo['categories'] as $cid) {
$parent_cids .= "$cid,";
}
$parent_cids = substr($parent_cids, 0, -1);
$query = sprintf("SELECT * FROM `subcategories` WHERE `parent_cid` IN (%s) ORDER BY `subcategory`",
mysqli_real_escape_string($conn,$parent_cids)
);
$result = mysqli_query($conn,$query);
if (mysqli_num_rows($result) > 0) {
while ($row = mysqli_fetch_assoc($result)) {
$subcategorieslist[$row['subid']] = $row['subcategory'];
$parentquery = "SELECT `category` FROM `categories` WHERE `cid` = '". $row['parent_cid'] ."'";
$parentresult = mysqli_query($conn,$parentquery);
$parentrow = mysqli_fetch_assoc($parentresult);
$parentcatslist[$row['subid']] = $parentrow['category'];
mysqli_free_result($parentresult);
}
mysqli_free_result($result);
if ($sampleinfo['oid']) {
$query = sprintf("SELECT `subid` FROM `samplesubcategories` WHERE `oid` = %s",
mysqli_real_escape_string($conn,$sampleinfo['oid'])
);
$result = mysqli_query($conn,$query);
while ($row = mysqli_fetch_assoc($result)) {
$samplesubcategories[$row['subid']] = TRUE;
}
}
?>
Please fill in Category Name, Description and the Category Graphic
";
} else {
$category = htmlspecialchars(ucwords(trim($_REQUEST['form_category'])));
$url = MakeURL(strip_tags(trim($_REQUEST['form_url'])));
if (isEmpty($url)) {
$url = MakeURL(strtolower($category));
}
if (CheckForFiles()) {
list ($fileid, $filename) = SaveFile("category")[0]; // for Categories, only one image uploaded.
$newfileid = ResizeImage($fileid,"category"); // 728x90
}
// do highlighted carousel image
$highlighted_fileid = NULL;
$highlighted_filename = NULL;
$highlighted = FALSE;
if (strlen($_REQUEST['highlighted'])) {
list ($highlighted_fileid, $highlighted_filename) = SaveCategoryHighlight(); // for Highghlighted Carousel image, only one file uploaded.
$highlighted = TRUE;
} else {
$highlighted = 0;
}
if (strlen($_REQUEST['published'])) {
$published = 1;
} else {
$published = 0;
}
$query = sprintf("INSERT INTO `categories` (`url`,`category`,`description`,`force_display_names`,`published`,`is_highlighted`,`carousel_id`,`carousel_filename`,`image_filename`,`image_id`, `last_updated`) VALUES ('%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s')",
mysqli_real_escape_string($conn,$url),
mysqli_real_escape_string($conn,$category),
mysqli_real_escape_string($conn,htmlspecialchars(ucwords(trim($_REQUEST['form_description'])))),
mysqli_real_escape_string($conn,preg_replace("/[^YNI]/","",$_REQUEST['force_display_names'])),
mysqli_real_escape_string($conn,$published),
mysqli_real_escape_string($conn,$highlighted),
mysqli_real_escape_string($conn,$highlighted_fileid),
mysqli_real_escape_string($conn,$highlighted_filename),
mysqli_real_escape_string($conn,$filename),
mysqli_real_escape_string($conn,$newfileid),
mysqli_real_escape_string($conn,DatePHPtoSQL(time()))
);
if (mysqli_query($conn,$query) === TRUE) {
echo "Category Entry $category [$url] Successfully Added.
";
} else {
echo "Category Entry $category [$url] Failed to Save!
". mysqli_error($conn) ."
";
}
}
}
function AdminSaveNewSubCategory() {
// save a NEW Sub-category
global $conn;
if (isEmpty($_REQUEST['form_category']) || isEmpty($_REQUEST['form_description'])) {
echo "". mysqli_error($conn) ."
Please fill in Category Name, Description and the Category Graphic
";
} else {
$subcategory = htmlspecialchars(ucwords(trim($_REQUEST['form_category'])));
$url = MakeURL(strtolower(strip_tags(trim($_REQUEST['form_url']))));
if (isEmpty($url)) {
$url = MakeURL(strtolower($subcategory));
}
if (CheckForFiles()) {
list ($fileid, $filename) = SaveFile("sample")[0]; // for Categories, only one image uploaded. // XXX: I suck, just calling this an sample image
$newfileid = ResizeImage($fileid,"sample"); // 600x400
} else {
$error = "No Sub-category image uploaded!
";
}
$parent_cid = preg_replace("/[^0-9]/","",$_REQUEST['form_cid']);
$query = sprintf("INSERT INTO `subcategories` (`url`,`subcategory`,`description`,`parent_cid`,`image_filename`,`image_id`) VALUES ('%s','%s','%s','%s','%s','%s')",
mysqli_real_escape_string($conn,$url),
mysqli_real_escape_string($conn,$subcategory),
mysqli_real_escape_string($conn,htmlspecialchars(ucwords(trim($_REQUEST['form_description'])))),
mysqli_real_escape_string($conn,$parent_cid),
mysqli_real_escape_string($conn,$filename),
mysqli_real_escape_string($conn,$newfileid)
);
if (mysqli_query($conn,$query) === TRUE) {
echo "Sub-Category $subcategory [$url] Successfully Added.
";
unset ($_REQUEST['form_category']); // XXX: Uncool but sufficient way to empty the web form
unset ($_REQUEST['form_description']);
unset ($_REQUEST['form_url']);
} else {
echo "Sub-Category $category [$url] Failed to Save!
". mysqli_error($conn) ."
";
}
echo $error;
}
}
function ResizeImage($fileid,$purpose) {
// Resize image according to its purpose
global $dirlocation;
if (preg_match("/\.jpg/",$fileid)) {
$origimage = imagecreatefromjpeg("$dirlocation/i/$purpose/original-$fileid");
} elseif (preg_match("/\.png/",$fileid)) {
$origimage = imagecreatefrompng("$dirlocation/i/$purpose/original-$fileid");
imagealphablending($origimage, true);
imagesavealpha($origimage, true);
}
if ($origimage) {
if (preg_match("/category/",$purpose)) {
$width = 728;
$height = 90;
}
if (preg_match("/sample/",$purpose)) {
$height = 450;
$width = abs(round( (imagesX($origimage) / imagesY($origimage)) * $height ));
}
if (preg_match("/carousel/",$purpose)) {
$height = 400;
$width = 266;
}
$newimage = imagecreatetruecolor($width,$height);
imagesavealpha($newimage, true);
$color = imagecolorallocatealpha($newimage,0x00,0x00,0x00,127);
imagefill($newimage, 0, 0, $color);
// dest , src , x dest, y dest , x src , y src , dest w, dest h, src w, src h
if (!imagecopyresampled($newimage,$origimage,0, 0, 0, 0, $width, $height, imagesX($origimage), imagesY($origimage))) {
echo "". mysqli_error($conn) ."
Image No Web Resize/Compress WTF $fileid
";
}
// if its a category, only do a transparent png. sample, whatever came in.
if (preg_match("/\.jpg/",$fileid) && (!preg_match("/category/",$purpose))) {
$newfilename = substr($fileid,0,-4) . ".jpg";
imagejpeg($newimage, "$dirlocation/i/$purpose/$newfilename", 80); // http://www.ebrueggeman.com/blog/php_image_optimization
} else if (preg_match("/\.png/",$fileid)) {
$newfilename = substr($fileid,0,-4) . ".png";
imagepng($newimage, "$dirlocation/i/$purpose/$newfilename",9);
}
imagedestroy($origimage);
imagedestroy($newimage);
}
if (preg_match("/\.mp4/",$fileid)) {
// create a thumbnail
// XXXXXX
exec("/usr/local/bin/ffprobe -i m/$fileid -v quiet -print_format json -show_format -show_streams -hide_banner", $ffresult);
$ffresult = implode("",$ffresult);
$ffinfo = json_decode($ffresult, TRUE);
$vidlength = ceil($ffinfo['format']['duration']);
$totalframes = $vidlength * 30; // assuming 30fps...
// XXX: This takes some time to render
for ($i = 1; $i < 5; $i++) {
$thumbnailname = substr($fileid,0,-4) . "-$i.jpg";
$frame = framesToTC(ceil($totalframes*($i * "0.2")), 30); // make four thumbnails every 200~ish frames, assuming 30 fps
echo "rendering preview $i using frame ". ceil($totalframes*($i * "0.1")) ." at ". $frame ." of $totalframes\n"; exec ("/usr/local/bin/ffmpeg -v quiet -hide_banner -ss $frame -i $dirlocation/m/$fileid -frames 1 -qscale:v 2 $dirlocation/i/$purpose/$thumbnailname"); } // whatever image is fileid.jpg is the visible thumbnail, others just there for alternates copy ("$dirlocation/i/$purpose/".substr($fileid,0,-4) . "-1.jpg", "$dirlocation/i/$purpose/". substr($fileid,0,-4) .".jpg"); $newfilename = $fileid; } return($newfilename); } function CheckForFiles() { $count = 0; foreach ($_FILES['filesToUpload']['error'] as $status){ if ($status === UPLOAD_ERR_OK) { $count++; } } return ($count); } function SaveFile($purpose) { // save a form's files into their purpose's directory as a unique ID, returning back the id and "file name" global $dirlocation; $happyuploads = array(); // the array of ids & names of the numerous uploaded files $error_types = array( 1=>"Your file is too large for the server", 2=>"Your file is larger than expected", 3=>"Your file upload incomplete, only partially uploaded", 4=>"You did not select a file, so no file uploaded", 6=>"Server problem with the temp directory", 7=>"Server failed to write file to disk", 8=>"Server PHP extension prevented upload" ); foreach ($_FILES['filesToUpload']['tmp_name'] as $ref => $tmp_name) { $gotafile = FALSE; //make the filename safe $filename = preg_replace(array('/\s/', '/\.[\.]+/', '/[^\w_\.\-]/'), array('_', '.', ''), $_FILES['filesToUpload']['name'][$ref]); $errorIndex = $_FILES['filesToUpload']['error'][$ref]; if ($errorIndex > 0) { if ( ($errorIndex != 4) && (!$gotafile) ) { // listen, we got at least one file, so I no longer care about "no file uploaded" errors. $error_message = $error_types[$_FILES['filesToUpload']['error'][$ref]]; echo "
File Upload Error: $error_message.
";
$happyuploads[] = array(NULL,NULL);
}
} else {
$fileid = uniqid();
// XXX: I am a race condition, where my unconfirmed file name is exposed on the webs
move_uploaded_file($tmp_name, $dirlocation . "/i/" . $purpose . "/original-" . $fileid );
if (filesize($dirlocation . "/i/" . $purpose . "/original-" . $fileid) < 1024) {
// if the file is smaller than 1kb, I don't trust it.
unlink($dirlocation . "/i/" . $purpose . "/original-" . $fileid);
echo "File Upload Error: File is invalid due to small size.
";
$happyuploads[] = array(NULL,NULL);
} else {
// Yay, its a file! Lets totally blow off the given file name and replace with my own.
$finfo = finfo_open(FILEINFO_MIME);
$type = finfo_file($finfo, $dirlocation . "/i/" . $purpose . "/original-" . $fileid);
if (preg_match("/jpeg/i",$type)) {
$newfileid = "$fileid.jpg";
rename (
$dirlocation . "/i/" . $purpose . "/original-". $fileid,
$dirlocation . "/i/" . $purpose . "/original-". $newfileid
);
} elseif (preg_match("/png/i",$type)) {
$newfileid = "$fileid.png";
rename (
$dirlocation . "/i/" . $purpose . "/original-". $fileid,
$dirlocation . "/i/" . $purpose . "/original-". $newfileid
);
} elseif (preg_match("/(mp4|m4v)/i",$type)) {
$newfileid = "$fileid.mp4";
rename (
$dirlocation . "/i/" . $purpose . "/original-". $fileid,
$dirlocation . "/m/$newfileid"
);
} elseif (preg_match("/word/i",$type)) {
$newfileid = "$fileid.doc";
rename (
$dirlocation . "/i/" . $purpose . "/original-". $fileid,
$dirlocation . "/i/" . $purpose . "/original-". $newfileid
);
} elseif (preg_match("/excel/i",$type)) {
$newfileid = "$fileid.xls";
rename (
$dirlocation . "/i/" . $purpose . "/original-". $fileid,
$dirlocation . "/i/" . $purpose . "/original-". $newfileid
);
} elseif (preg_match("/pdf/i",$type)) {
$newfileid = "$fileid.pdf";
rename (
$dirlocation . "/i/" . $purpose . "/original-". $fileid,
$dirlocation . "/i/" . $purpose . "/original-". $newfileid
);
} else {
$newfileid = $fileid;
rename (
$dirlocation . "/i/" . $purpose . "/original-". $fileid,
$dirlocation . "/i/" . $purpose . "/original-". $newfileid
);
}
$happyuploads[] = array($newfileid,$filename);
$gotafile = TRUE;
}
}
}
// We accepted a positive number of files !
return $happyuploads;
}
function SaveCategoryHighlight() {
// save categorty highlight image as a unique ID, returning back the id and "file name"
// I'm repeating code because I suck sometimes
global $dirlocation;
$happyuploads = array(); // the array of ids & names of the numerous uploaded files
$error_types = array(
1=>"Your file is too large for the server",
2=>"Your file is larger than expected",
3=>"Your file upload incomplete, only partially uploaded",
4=>"You did not select a file, so no file uploaded",
6=>"Server problem with the temp directory",
7=>"Server failed to write file to disk",
8=>"Server PHP extension prevented upload"
);
$gotafile = FALSE;
//make the filename safe
$filename = preg_replace(array('/\s/', '/\.[\.]+/', '/[^\w_\.\-]/'), array('_', '.', ''), $_FILES['carousel_image']['name']);
$errorIndex = $_FILES['carousel_image']['error'];
if ($errorIndex > 0) {
if ( ($errorIndex != 4) && (!$gotafile) ) {
// listen, we got at least one file, so I no longer care about "no file uploaded" errors.
$error_message = $error_types[$_FILES['carousel_image']['error']];
echo "File Upload Error: $error_message.
";
$happyuploads[] = array(NULL,NULL);
}
} else {
$fileid = uniqid();
// XXX: I am a race condition, where my unconfirmed file name is exposed on the webs
move_uploaded_file($_FILES['carousel_image']['tmp_name'], $dirlocation . "/i/category/original-" . $fileid );
if (filesize($dirlocation . "/i/category/original-" . $fileid) < 1024) {
// if the file is smaller than 1kb, I don't trust it.
unlink($dirlocation . "/i/category/original-" . $fileid);
echo "File Upload Error: File is invalid due to small size.
";
$happyuploads[] = array(NULL,NULL);
} else {
// Yay, its a file! Lets totally blow off the given file name and replace with my own.
$finfo = finfo_open(FILEINFO_MIME);
$type = finfo_file($finfo, $dirlocation . "/i/category/original-" . $fileid);
if (preg_match("/jpeg/i",$type)) {
$newfileid = "$fileid.jpg";
rename (
$dirlocation . "/i/category/original-". $fileid,
$dirlocation . "/i/category/original-". $newfileid
);
} elseif (preg_match("/png/i",$type)) {
$newfileid = "$fileid.png";
rename (
$dirlocation . "/i/category/original-". $fileid,
$dirlocation . "/i/category/original-". $newfileid
);
}
$happyuploads[] = array($newfileid,$filename);
$gotafile = TRUE;
}
}
// XXX: Yes, this whole routine is retarded. I just want it over with.
// get the damn category highlight carousel image, do the thing, move the hell on.
list ($fileid, $filename) = $happyuploads[0]; // for Highghlighted Carousel image, only one file uploaded.
if (preg_match("/\.jpg/",$fileid)) {
$origimage = imagecreatefromjpeg("$dirlocation/i/category/original-$fileid");
} elseif (preg_match("/\.png/",$fileid)) {
$origimage = imagecreatefrompng("$dirlocation/i/category/original-$fileid");
imagealphablending($origimage, true);
imagesavealpha($origimage, true);
}
// XXX: hardcoded carousel highlighted size!
if ($origimage) {
$height = 266;
$width = 400;
$newimage = imagecreatetruecolor($width,$height);
imagesavealpha($newimage, true);
$color = imagecolorallocatealpha($newimage,0x00,0x00,0x00,127);
imagefill($newimage, 0, 0, $color);
// dest , src , x dest, y dest , x src , y src , dest w, dest h, src w, src h
if (!imagecopyresampled($newimage,$origimage,0, 0, 0, 0, $width, $height, imagesX($origimage), imagesY($origimage))) {
echo "Highlight Image No Web Resize/Compress WTF $fileid
";
}
// if its a category, only do a transparent png. sample, whatever came in.
if (preg_match("/\.jpg/",$fileid)) {
$newfilename = substr($fileid,0,-4) . ".jpg";
imagejpeg($newimage, "$dirlocation/i/category/$newfilename", 80); // http://www.ebrueggeman.com/blog/php_image_optimization
} else if (preg_match("/\.png/",$fileid)) {
$newfilename = substr($fileid,0,-4) . ".png";
imagepng($newimage, "$dirlocation/i/category/$newfilename",9);
}
imagedestroy($origimage);
imagedestroy($newimage);
}
$alldone = array($fileid,$filename);
return($alldone);
}
function ShowPhotoArray($mediadata) {
// show a bunch of photos
// argument is just $sampleinfo['media']
global $conn;
$photosorder = array();
$videos = array();
if (is_array($mediadata)) {
foreach ($mediadata['mid'] as $arraykey => $mid) {
if (preg_match("/png|jpg/",$mediadata['filetype'][$mid])) {
// check if highlighted is viewable, then put highlighted first
if (($mediadata['is_highlighted'][$mid] == 1) && ($mediadata['viewable'][$mid] == 1)) {
$location = $arraykey;
$photosorder[$location] = $mediadata['mid'][$mid];
}
// viewable items next, sorted by recent published first
if (($mediadata['viewable'][$mid] == 1) && ($mediadata['is_highlighted'][$mid] == 0)) {
$location = $arraykey * 100; // put this media ID later in the sort index
$photosorder[$location] = $mediadata['mid'][$mid];
}
// non-viewable crap, with marker
if ($mediadata['viewable'][$mid] == 0) {
$location = $arraykey * 1000; // put this media ID later in the sort index
$photosorder[$location] = $mediadata['mid'][$mid];
}
} else {
$videos[] = $mid;
}
}
} else {
if ($_REQUEST['page'] === 'admin') {
echo "No Photos Available for this sample!
";
}
}
ksort($photosorder, SORT_NUMERIC);
foreach ($photosorder as $key => $mid) {
//echo "$key = $mid / real mid: ".$mediadata['mid'][$mid] .""; if ($mediadata['is_highlighted'][$mid]) { $highlightclass = "AdminImagesPreviewHighlighted"; } elseif ($mediadata['viewable'][$mid] == 0) { $highlightclass = "AdminImagesPreviewNotVisible"; } else { $highlightclass = "AdminImagesPreviewNormal"; } $megapixels = $mediadata['width'][$mid] * $mediadata['height'][$mid]; // if image is over 1 megapixel, call it "high-res" // XXX: what about DPI? This is a bad way and a bad place to do this. if ($megapixels > 1000000) { $adminimageicon = "AdminImageIconHighRes"; } else { $adminimageicon = "AdminImageIconLowRes"; } if ($mediadata['is_highlighted'][$mid] == 1) { $highlighted = "Remove Highlight"; $highlightstatus = "Highlighted"; } else { $highlighted = "Highlight This"; $highlightstatus = "Not Highlighted"; } if ($mediadata['viewable'][$mid] == 1) { $viewable = "Make Hidden"; $viewablestatus = "Visible"; } else { $viewable = "Make Visible"; $viewablestatus = "Hidden"; } if (strlen($mediadata['name'][$mid]) > 18) { $filename = htmlspecialchars(substr($mediadata['name'][$mid],0,18) . "..."); } else { $filename = htmlspecialchars($mediadata['name'][$mid]); } // attempt to provide video preview image options $videothumboptions = ""; foreach ($videos as $vidmid) { $videothumboptions .= sprintf( "", $mid, htmlspecialchars(substr($mediadata['name'][$vidmid],0,16)) ); } $string = sprintf( // fields "
".
"".
"
".
"".
"".
"
\n",
// values
"original-".$mediadata['filename'][$mid],
$highlightclass,
$mediadata['filename'][$mid],
$mediadata['thumbwidth'][$mid],
$mediadata['thumbheight'][$mid],
$mediadata['name'][$mid],
$mediadata['name'][$mid],
$adminimageicon,
$mediadata['mid'][$mid],
((int)$mediadata['viewable'][$mid] === 0)? 'style="background-color: #FFBABA" ' : '',
$highlighted,
$viewable,
$filename,
$highlightstatus,
$viewablestatus,
$mediadata['width'][$mid],
$mediadata['height'][$mid],
date("M d, Y",$mediadata['published'][$mid])
);
echo "$string\n";
}
}
function UploadProgress() {
// ajax file upload progress percentage for URL /uploadprogress
$key = ini_get("session.upload_progress.prefix") . "irevform";
if (!empty($_SESSION[$key])) {
$current = $_SESSION[$key]["bytes_processed"];
$total = $_SESSION[$key]["content_length"];
echo $current < $total ? ceil($current / $total * 100) : 100;
} else {
echo "100";
}
}
function aasort (&$array, $key) {
// sort an array's array by the sub-array's key name
$sorter=array();
$ret=array();
if (isset($array)) {
reset($array);
foreach ($array as $ii => $va) {
$sorter[$ii]=$va[$key];
}
asort($sorter);
foreach ($sorter as $ii => $va) {
$ret[$ii]=$array[$ii];
}
$array=$ret;
}
}
function HashPassword($password) {
$hash = password_hash($password, PASSWORD_DEFAULT);
return $hash;
}
function ValidatePassword($password, $correctHash) {
$result = password_verify($password, $correctHash);
return $result;
}
function nicetime($date) {
if(empty($date)) {
return "ERROR: No date provided";
}
$periods = array("second", "minute", "hour", "day", "week", "month", "year", "decade");
$lengths = array("60","60","24","7","4.35","12","10");
$now = time();
$unix_date = strtotime($date);
// check validity of date
if(empty($unix_date)) {
return "ERROR: Invalid date";
}
// is it future date or past date
if($now > $unix_date) {
$difference = $now - $unix_date;
$tense = "ago";
} else if ($now == $unix_date) {
$tense = "Just now";
} else {
$difference = $unix_date - $now;
$tense = "from now";
}
for($j = 0; $difference >= $lengths[$j] && $j < count($lengths)-1; $j++) {
$difference /= $lengths[$j];
}
$difference = round($difference);
if($difference != 1) {
// $periods[$j] .= "s"; // plural for English language
$periods = array("seconds", "minutes", "hours", "days", "weeks", "months", "years", "decades"); // plural for international words
}
if ($tense == "Just now") {
return ($tense);
} else {
return "$difference $periods[$j] {$tense}";
}
}
function StatesArray() {
return(array('AL'=>"Alabama",'AK'=>"Alaska",'AZ'=>"Arizona",'AR'=>"Arkansas",'CA'=>"California",'CO'=>"Colorado",'CT'=>"Connecticut",'DE'=>"Delaware",'DC'=>"District Of Columbia",'FL'=>"Florida",'GA'=>"Georgia",'HI'=>"Hawaii",'ID'=>"Idaho",'IL'=>"Illinois", 'IN'=>"Indiana", 'IA'=>"Iowa", 'KS'=>"Kansas",'KY'=>"Kentucky",'LA'=>"Louisiana",'ME'=>"Maine",'MD'=>"Maryland", 'MA'=>"Massachusetts",'MI'=>"Michigan",'MN'=>"Minnesota",'MS'=>"Mississippi",'MO'=>"Missouri",'MT'=>"Montana",'NE'=>"Nebraska",'NV'=>"Nevada",'NH'=>"New Hampshire",'NJ'=>"New Jersey",'NM'=>"New Mexico",'NY'=>"New York",'NC'=>"North Carolina",'ND'=>"North Dakota",'OH'=>"Ohio",'OK'=>"Oklahoma", 'OR'=>"Oregon",'PA'=>"Pennsylvania",'RI'=>"Rhode Island",'SC'=>"South Carolina",'SD'=>"South Dakota",'TN'=>"Tennessee",'TX'=>"Texas",'UT'=>"Utah",'VT'=>"Vermont",'VA'=>"Virginia",'WA'=>"Washington",'WV'=>"West Virginia",'WI'=>"Wisconsin",'WY'=>"Wyoming",'UK'=>'United Kingdom','AU'=>"Australia",'MX'=>"Mexico",'CN'=>"China",'CD'=>"Canada"));
}
function StateCodeToName($code) {
$states = StatesArray();
return($states[$code]);
}
function StateNameToCode($state) {
$states = StatesArray();
return(array_search($state, $states));
}
function DisplayNamesOptionsDropDown($cid) {
// Show a dropdown of category's "use real or obfuscated display name" per category
// N force real names only, I individual sample mode, Y force display names only
global $conn;
if ($cid) {
$query = sprintf("SELECT `force_display_names` FROM `categories` WHERE `cid` = %s",
preg_replace("/[^0-9]/","",$cid)
);
$result = mysqli_query($conn,$query);
$row = mysqli_fetch_assoc($result);
}
$display_mode = $row['force_display_names'];
$options = array(
"I" => "Use the Individual Sample's Setting",
"N" => "Real Names to be used for All Samples in this Category",
"Y" => "Obfuscated Display Names to be used for All Samples in this Category"
);
$string = "";
foreach ($options as $key => $value) {
$string .= sprintf("",
$key,
($key == $display_mode)? ' selected="SELECTED"' : '',
$value
);
}
return ($string);
}
function StateOptionsDropDown($active) {
// show a dropdown of states with the active state highlighted, or just zend a zero for nuffin
$states = StatesArray();
$string = "";
foreach($states as $code => $state) {
$string .= sprintf("",
$code,
($active == $code)? ' selected="SELECTED"' : '', // yeah bitches
$state
);
}
return($string);
}
function convert_smart_quotes($string) {
// utf-8
$search = array(
"\xe2\x80\x98",
"\xe2\x80\x99",
"\xe2\x80\x9c",
"\xe2\x80\x9d",
"\xe2\x80\x93",
"\xe2\x80\x94",
"\xe2\x80\xa6"
);
$replace = array(
"'",
"'",
'"',
'"',
'-',
'--',
'...'
);
$string = str_replace($search, $replace, $string);
// windows
$search = array(
chr(133),
chr(145),
chr(146),
chr(147),
chr(148),
chr(150),
chr(151)
);
$replace = array(
'...',
"'",
"'",
'"',
'"',
'-',
'--'
);
return str_replace($search, $replace, $string);
}
function MakeURL($str, $replace=array(), $delimiter='-') {
// XXX: Using underscore for spaces per LeviV
// XXX: Back to using dashes, since Google SEO prefers it.
setlocale(LC_ALL, 'en_US.UTF8');
if( !empty($replace) ) {
$str = str_replace((array)$replace, ' ', $str);
}
$clean = iconv('UTF-8', 'ASCII//TRANSLIT', $str);
$clean = preg_replace("/"/", '', $clean);
$clean = preg_replace("/[^a-zA-Z0-9\/_|+ -]/", '', $clean);
$clean = strtolower(trim($clean, '-'));
$clean = trim(preg_replace("/[\/_|+ -]+/", $delimiter, $clean));
return $clean;
}
function isEmpty($var) {
// freaking sick of trim, strlen, empty, and isset weirdness
// is this an array?
if ( (array)$var === $var) {
// I can typecast myself into an array, so I was an array already, thusly not empty.
return false;
} else {
// I might be a string?
if (!isset($var) || is_null($var) || (is_bool($var) && $var === false) ) {
// I'm empty, yay!
return true;
} else {
// there's something in this, but maybe its kinda blank?
if (strlen(trim($var)) == 0) {
return true; // I'm empty enough.
} else {
return false;
}
}
}
}
//Converts a string to Title Case based on one set of title case rules
// put