// All rights reserved.
This script is part of PHPWCMS. The PHPWCMS web content management system is
free software; you can redistribute it and/or modify it under the terms of
the GNU General Public License as published by the Free Software Foundation;
either version 2 of the License, or (at your option) any later version.
The GNU General Public License can be found at http://www.gnu.org/copyleft/gpl.html
A copy is found in the textfile GPL.txt and important notices to the license
from the author is found in LICENSE.txt distributed with these scripts.
This script is distributed in the hope that it will be useful, but WITHOUT ANY
WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE. See the GNU General Public License for more details.
This copyright notice MUST APPEAR in all copies of the script!
*************************************************************************************/
// ----------------------------------------------------------------
// obligate check for phpwcms constants
if (!defined('PHPWCMS_ROOT')) {
die("You Cannot Access This Script Directly, Have a Nice Day.");
}
// ----------------------------------------------------------------
// general functions used in backend only
function update_cache() {
// used to update cache setting all current cache entries
// will be forced to update cache but will not be deleted
//$sql = "UPDATE ".DB_PREPEND."phpwcms_cache SET cache_timeout='0'";
//mysql_query($sql, $GLOBALS['db']) or die("error while updating cache");
}
function set_chat_focus($do, $p) { //set_chat_focus("chat", 1)
if($do == "chat" && $p == 1) {
echo "\n";
}
}
function forward_to($to, $link, $time=2500) { //Javascript forwarding
if($to) echo "\n";
}
function subnavtext($text, $link, $is, $should, $getback=1, $js='') {
//generate subnavigation based on text
$id = "subnavid".randpassword(5);
$sn = '';
if($is == $should) {
$sn .= ''.$text.' ".$text." \n";
$sn .= (intval($h_before)) ? "";
$sn .= " ".$text." ";
$sn .= " \n";
$sn .= (intval($h_after)) ? "
\n";
echo $sn;
}
function clearfilename($formvar) {
//Filename anpassen und säubern
$formvar = trim($formvar);
if( get_magic_quotes_gpc() ) $formvar = stripslashes ($formvar);
$formvar = str_replace(array("'", ':', '/', '\\', '"'), '_', $formvar);
return $formvar;
}
function check_image_extension($file, $filename='') {
// only checks against correct image extension
$image_info = getimagesize($file);
$result = false;
if(false != $image_info) {
switch($image_info[2]) {
case 1: $result = 'gif'; break;
case 2: $result = 'jpg'; break;
case 3: $result = 'png'; break;
case 4: $result = 'swf'; break;
case 5: $result = 'psd'; break;
case 6: $result = 'bmp'; break;
case 7: $result = 'tif'; break; //(intel byte order),
case 8: $result = 'tif'; break; //(motorola byte order),
case 9: $result = 'jpc'; break;
case 10: $result = 'jp2'; break;
case 11: $result = 'jpx'; break;
case 12: $result = 'jb2'; break;
case 13: // there is a problem in some cases swf -> swc ? why ever!
// do an additional extension check and compare against swf
$result = (strtolower(which_ext($file)) == 'swf') ? 'swf' : 'swc';
break;
case 14: $result = 'iff'; break;
case 15: // there seems to be a problem with getimagesize and Quicktime VR
// mov -> wmbf ? why ever!
// do an additional extension check and compare against mov
$result = (strtolower(which_ext( empty($filename) ? $file : $filename )) == 'mov') ? 'mov' : 'wbmp';
break;
case 16: $result = 'xbm'; break;
}
}
return $result;
}
function getParentStructArray($structID) {
$structID = intval($structID);
$sql = "SELECT * FROM ".DB_PREPEND."phpwcms_articlecat WHERE acat_id=".$structID." LIMIT 1";
if($result = mysql_query($sql, $GLOBALS['db'])) {
if($row = mysql_fetch_assoc($result)) {
return $row;
}
mysql_free_result($result);
}
return $GLOBALS['indexpage'];
}
/*
* Get sort value for an article based on category
*/
function getArticleSortValue($cat_id=0) {
// default sort value
$sort = 0;
$cat_id = intval($cat_id);
$count = 0;
$max_sort = 0;
// Count all articles within the given structure ID
$sql = "SELECT article_id, article_sort FROM ".DB_PREPEND."phpwcms_article ";
$sql .= "WHERE article_cid=".$cat_id." ";
$sql .= "ORDER BY article_sort DESC";
if($result = mysql_query($sql, $GLOBALS['db'])) {
// this is the max articles in structure
$count = mysql_num_rows($result);
// but neccessary trying to get the highest article sort value
if($row = mysql_fetch_assoc($result)) {
$max_sort = $row['article_sort'];
}
mysql_free_result($result);
}
$count = ($count + 1) * 10;
$count = ($max_sort < $count) ? $count : $max_sort + 10;
return $count;
}
/*
* Make a re-sort for given structure ID and
* return new sorted articles as array
*/
function getArticleReSorted(& $cat_id, & $ordered_by) {
// get all articles including deleted and update sorting
// in correct sort order by adding sort + 10
$sort = 10;
$sort_multiply_by = 1;
$count_article = 0;
$ao = get_order_sort($ordered_by);
$sql = "SELECT article_id, article_cid, article_title, article_public, article_aktiv, article_uid, ";
$sql .= "date_format(article_tstamp, '%Y-%m-%d %H:%i:%s') AS article_date, article_sort, article_deleted, article_tstamp ";
$sql .= "FROM ".DB_PREPEND."phpwcms_article ";
$sql .= "WHERE article_cid='".$cat_id."' ORDER BY ".$ao[2];
if($result = mysql_query($sql, $GLOBALS['db'])) {
// now check if it's sorted manually and DESC
// then sort has to be lowerd by -10
if($ao[0] == 0 && $ao[1] == 1) {
$max_article_count = mysql_num_rows($result);
$sort = ($max_article_count + 1) * 10;
$sort_multiply_by = -1;
}
// take all entries and build new array with it
while($row = mysql_fetch_assoc($result)) {
// SQL update query with new sort value
$update_sql = "UPDATE ".DB_PREPEND."phpwcms_article SET ";
$update_sql .= "article_sort=".$sort.", ";
$update_sql .= "article_tstamp='".$row['article_tstamp']."' ";
$update_sql .= "WHERE article_id=".$row['article_id']." LIMIT 1";
@mysql_query($update_sql, $GLOBALS['db']);
// add entry to the returning array only for article_deleted=0
// drops all deleted articles or articles having another status
if($row['article_deleted'] == 0) {
$article[$count_article] = $row;
$article[$count_article]['article_sort'] = $sort;
// count up for article array index
$count_article++;
}
// count sort up by 10
$sort = $sort + (10 * $sort_multiply_by);
}
mysql_free_result($result);
}
return $article;
}
function phpwcmsversionCheck() {
// Check for new version
global $phpwcms;
global $BL;
if(empty($phpwcms['version_check'])) return '';
$errno = 0;
$errstr = '';
$version_info = '';
if ($fsock = @fsockopen('www.phpwcms.de', 80, $errno, $errstr, 10)) {
$identify = '?version='.rawurlencode(PHPWCMS_VERSION.'-'.str_replace('/', '', PHPWCMS_RELEASE_DATE)).'&hash='.md5($_SERVER['REQUEST_URI']);
@fputs($fsock, "GET /versioncheck/phpwcms_releaseinfo.txt".$identify." HTTP/1.1\r\n");
@fputs($fsock, "HOST: www.phpwcms.de\r\n");
@fputs($fsock, "Connection: close\r\n\r\n");
$get_info = false;
while (!@feof($fsock)) {
if ($get_info) {
$version_info .= @fread($fsock, 1024);
} else {
if (@fgets($fsock, 1024) == "\r\n") {
$get_info = true;
}
}
}
@fclose($fsock);
$version_info = explode("\n", $version_info);
$latest_version = trim($version_info[0]);
$latest_revdate = trim($version_info[1]);
$latest_revision = intval(trim($version_info[2]));
// do version check
$check = $latest_revision > $phpwcms['revision'] ? false : true;
if ($check) {
$version_info = '' . $BL['Version_up_to_date'] . '
';
$version_info .= ''.sprintf($BL['Latest_version_info'], $latest_version.' ('.$latest_revdate.', r'.$latest_revision.')'). ' ';
$version_info .= sprintf($BL['Current_version_info'], PHPWCMS_VERSION.' ('.PHPWCMS_RELEASE_DATE.', r'.PHPWCMS_REVISION.')') . '
';
} else {
$version_info = '' . $BL['Version_not_up_to_date'] . '
';
$version_info .= ''.sprintf($BL['Latest_version_info'], ' ' . $latest_version . ' ('.$latest_revdate.', r'.$latest_revision.')'). ' ';
$version_info .= sprintf($BL['Current_version_info'], PHPWCMS_VERSION.' ('.PHPWCMS_RELEASE_DATE.', r'.PHPWCMS_REVISION.')') . '
';
}
} else {
if ($errstr) {
$version_info = '' . sprintf($BL['Connect_socket_error'], $errstr) . '
';
} else {
$version_info = '' . $BL['Socket_functions_disabled'] . '
';
}
}
//$version_info .= '' . $BL['Mailing_list_subscribe_reminder'] . '
';
return '
'.$BL['Version_information'].' '.$version_info.'';
}
function createOptionTransferSelectList($id='', $leftData, $rightData, $option = array()) {
// used to create
global $BL;
$id_left = $id.'_left';
$id_right = $id.'_right';
$id_left_box = $id_left.'list';
$id_right_box = $id_right.'list';
$option_object = generic_string(4, 4);
$table = '';
$option['rows'] = empty($option['rows']) || !intval($option['rows']) ? 5 : $option['rows'];
$option['delimeter'] = empty($option['delimeter']) ? ',' : $option['delimeter'];
$option['encode'] = (isset($option['encode']) && $option['encode'] === false) ? false : true;
$option['style'] = empty($option['style']) ? '' : ' style="'.$option['style'].'"';
$option['class'] = empty($option['class']) ? ' class="#SIDE#"' : ' class="#SIDE# '.$option['class'].'"';
$option['formname'] = empty($option['formname']) ? 'document.forms[0]' : 'document.getElementById(\''.$option['formname'].'\')';
$GLOBALS['BE']['HEADER']['optionselect.js'] = getJavaScriptSourceLink('include/inc_js/optionselect.js');
$table .= ''.LF.''.LF;
// left select list
$table .= ''.LF;
if(!empty($leftData) && is_array($leftData)) {
foreach($leftData as $key => $value) {
$table .= ' '.$value.' '.LF;
}
} $table .= ' ';
$table .= ''.LF;
if(!empty($rightData) && is_array($rightData)) {
foreach($rightData as $key => $value) {
$table .= ' '.$value.' '.LF;
}
}
$table .= ' '.LF;
$table .= ''.LF.'';
$table .= ' '.LF;
$table .= '';
$table .= ' '.LF;
$table .= ' '.LF.'
'.LF;
$table .= ''.LF;
}
return $result;
}
function isContentPartSet($value='') {
$value = explode(':', $value);
$value[0] = intval($value[0]);
// check for set module
if(empty($value[1])) {
$value[1] = 1;
} elseif( isset($GLOBALS['phpwcms']['modules'][$value[1]])
&& $GLOBALS['phpwcms']['modules'][$value[1]]['cntp']
&& file_exists($GLOBALS['phpwcms']['modules'][$value[1]]['path'].'inc/cnt.list.php')) {
$value[1] = 1;
} else {
$value[1] = 0;
}
// check if content part ID exists
if(isset($GLOBALS['wcs_content_type'][ $value[0] ]) && $value[1]) {
return true;
} else {
return false;
}
}
/*
* Show System Status Message
*/
function show_status_message($return_status=false) {
if(empty($_SESSION['system_status']['msg'])) {
$status = '';
} else {
$status = '';
$status .= nl2br( trim( html_specialchars($_SESSION['system_status']['msg']) ) ) . '
';
$_SESSION['system_status']['msg'] = '';
}
if($return_status) {
return $status;
} else {
echo $status;
return NULL;
}
}
/*
* Set System Status Message
*/
function set_status_message($msg='', $type='info', $replace=array()) {
if(is_array($replace) && count($replace)) {
foreach($replace as $key => $item) {
$msg = str_replace('{'.strtoupper($key).'}', $item, $msg);
}
}
$_SESSION['system_status']['msg'] = $msg;
switch($type) {
case 'success':
case 'info':
case 'help':
case 'error':
case 'warning': break;
default: $type = 'info';
}
$_SESSION['system_status']['type'] = $type;
return NULL;
}
function set_language_cookie() {
setcookie('phpwcmsBELang', $_SESSION["wcs_user_lang"], time()+(3600*24*365), '/', getCookieDomain() );
}
// checks for alias and sets unique value
function proof_alias($current_id, $alias='', $mode='CATEGORY') {
$current_id = intval($current_id);
$alias = uri_sanitize( clean_slweg(strtolower($alias), 150) );
$reserved = array(
'print',
'newsdetail',
'newspage',
'id',
'aid',
'subgallery',
'listpage',
'page',
'subscribe',
'unsubscribe',
'email',
'u',
's',
'q',
'feedimport'
);
if($mode == 'CATEGORY' && $alias == '' && isset($_POST["acat_name"])) {
$alias = $_POST["acat_name"];
$set = true;
} elseif($mode == 'ARTICLE' && $alias == '' && isset($_POST["article_title"])) {
$alias = $_POST["article_title"];
$set = true;
} elseif($mode == 'CONTENT' && $alias == '' && ( isset($_POST["cnt_title"]) || isset($_POST["cnt_name"]) )) {
$alias = trim($_POST["cnt_title"]) == '' ? $_POST["cnt_name"] : $_POST["cnt_title"];
$set = true;
} else {
$set = false;
}
if($set) {
$alias = clean_slweg(strtolower($alias), 150);
$alias = pre_remove_accents($alias);
$alias = get_alnum_dashes($alias, true);
if($alias != '') {
$alias = trim( preg_replace('/\-\-+/', '-', $alias), '-' );
$alias = trim( preg_replace('/__+/', '_', $alias), '_' );
}
}
// new reserved alias can be defined in $phpwcms['reserved_alias']
if( isset($phpwcms['reserved_alias']) && is_array($phpwcms['reserved_alias']) && count($phpwcms['reserved_alias']) ) {
$reserved = array_merge($reserved, $phpwcms['reserved_alias']);
}
if( $alias == '' || in_array($alias, $reserved) || ($alias == 'index' && $current_id != 'index') ) {
if($mode == 'CONTENT') {
$alias .= date('-Y-n-j');
} else {
$alias .= '-view';
}
}
$alias = trim( $alias, '-' );
$where_acat = '';
$where_article = '';
$where_content = '';
switch($mode) {
case 'CATEGORY': $where_acat = 'acat_id != '.$current_id.' AND '; break;
case 'ARTICLE': $where_article = 'article_id != '.$current_id.' AND '; break;
case 'CONTENT': $where_content = 'cnt_id != '.$current_id.' AND '; break;
}
// check alias against all structure alias
$sql = "SELECT COUNT(acat_id) FROM ".DB_PREPEND."phpwcms_articlecat WHERE ";
$sql .= $where_acat;
$sql .= "acat_alias='".aporeplace($alias)."'";
$acat_count = _dbQuery($sql, 'COUNT');
// check alias against all articles
$sql = "SELECT COUNT(article_id) FROM ".DB_PREPEND."phpwcms_article WHERE ";
$sql .= $where_article;
$sql .= "article_alias='".aporeplace($alias)."'";
$article_count = _dbQuery($sql, 'COUNT');
// check alias against all "sub" contents like news
$sql = "SELECT COUNT(cnt_id) FROM ".DB_PREPEND."phpwcms_content WHERE ";
$sql .= $where_content;
$sql .= "cnt_alias='".aporeplace($alias)."'";
$content_count = _dbQuery($sql, 'COUNT');
if( $acat_count > 0 || $article_count > 0 || $content_count > 0 ) {
$sql = "SELECT acat_alias FROM ".DB_PREPEND."phpwcms_articlecat WHERE ";
$sql .= $where_acat;
$sql .= "acat_alias LIKE '".aporeplace($alias)."%'";
$all_acat_alias = _dbQuery($sql);
$sql = "SELECT article_alias FROM ".DB_PREPEND."phpwcms_article WHERE ";
$sql .= $where_article;
$sql .= "article_alias LIKE '".aporeplace($alias)."%'";
$all_article_alias = _dbQuery($sql);
$sql = "SELECT cnt_alias FROM ".DB_PREPEND."phpwcms_content WHERE ";
$sql .= $where_content;
$sql .= "cnt_alias LIKE '".aporeplace($alias)."%'";
$all_content_alias = _dbQuery($sql);
$all_alias = array();
foreach($all_acat_alias as $item) {
$item = $item['acat_alias'];
$all_alias[$item] = $item;
}
foreach($all_article_alias as $item) {
$item = $item['article_alias'];
$all_alias[$item] = $item;
}
foreach($all_content_alias as $item) {
$item = $item['cnt_alias'];
$all_alias[$item] = $item;
}
$all_alias_count = count($all_alias);
while( isset( $all_alias[ $alias.'-'.$all_alias_count ] ) ) {
$all_alias_count++;
}
if(preg_match('/\-(\d+)$/', $alias)) {
$alias .= $all_alias_count;
} else {
$alias .= '-'.$all_alias_count;
}
}
return $alias;
}
function _getTime($time='', $delimeter=':', $default_time='H:i:s') {
$timeformat = explode($delimeter, trim($default_time));
$time = explode($delimeter, trim($time));
$hour = 0;
$minute = 0;
$second = 0;
for($x=0; $x<=2; $x++) {
if(isset($timeformat[$x])) {
$value = trim($timeformat[$x]);
switch( $value{0} ) {
case 'H': if(isset($time[$x])) {
$hour = intval($time[$x]);
if($hour < 0 || $hour > 23) $hour = 0;
}
break;
case 'i': if(isset($time[$x])) {
$minute = intval($time[$x]);
if($minute < 0 || $minute > 59) $minute = 0;
}
break;
case 's': if(isset($time[$x])) {
$second = intval($time[$x]);
if($second < 0 || $second > 59) $second = 0;
}
break;
}
}
}
$time = str_replace($delimeter, ':', $default_time);
$time = str_replace('H', $hour, $time);
$time = str_replace('i', $minute, $time);
$time = str_replace('s', $second, $time);
return $time;
}
function _getDate($date='', $delimeter='', $default_date='') {
global $BL;
$delimeter = $delimeter == '' ? $BL['default_date_delimiter'] : $delimeter;
$default_date = $default_date == '' ? $BL['default_date'] : $default_date;
$dateformat = explode($delimeter, trim($default_date));
$date = explode($delimeter, trim($date));
$day = '';
$month = '';
$year = '';
for($x=0; $x<=2; $x++) {
if(isset($dateformat[$x])) {
$value = trim($dateformat[$x]);
$value = strtolower($value);
switch( $value{0} ) {
case 'y': if(isset($date[$x])) {
$year = intval($date[$x]);
if($year < 0) $year = '';
}
break;
case 'd': if(isset($date[$x])) {
$day = intval($date[$x]);
if($day < 1 || $day > 31) $day = '';
}
break;
case 'm': if(isset($date[$x])) {
$month = intval($date[$x]);
if($month < 1 || $month > 12) $month = '';
}
break;
}
}
}
if($year && $month && $day) {
return $year.'-'.$month.'-'.$day;
} else {
return '0000-00-00';
}
}
function _dbSaveCategories($categories=array(), $type='', $pid=0, $seperator=',') {
$pid = intval($pid);
$type = trim($type);
if(is_string($categories)) {
$categories = convertStringToArray($categories, $seperator);
}
// delete all related categories first
if($type && $pid) {
$sql = 'DELETE FROM '.DB_PREPEND.'phpwcms_categories WHERE cat_pid='.$pid." AND cat_type='".aporeplace( $type )."'";
_dbQuery($sql, 'DELETE');
}
if(is_array($categories) && count($categories) && $type && $pid) {
$data = array( 'cat_type' => $type,
'cat_pid' => $pid,
'cat_status' => 1,
'cat_createdate' => date('Y-m-d H:i:s'),
'cat_changedate' => date('Y-m-d H:i:s'),
'cat_name' => '',
'cat_info' => ''
);
foreach($categories as $value) {
$value = trim($value);
if($value != '') {
$data['cat_name'] = $value;
_dbInsert('phpwcms_categories', $data);
}
}
}
}
function setItemsPerPage($default=25) {
if( isset($_GET['showipp']) ) {
$ipp = intval( is_numeric($_GET['showipp']) ? $_GET['showipp'] : $default );
setcookie('phpwcmsBEItemsPerPage', $ipp, time()+157680000, '/', getCookieDomain() );
} elseif(isset($_SESSION['PAGE_FILTER'])) {
$ipp = $_SESSION['PAGE_FILTER']['IPP'];
} elseif( isset($_COOKIE['phpwcmsBEItemsPerPage']) ) {
$ipp = intval( $_COOKIE['phpwcmsBEItemsPerPage'] );
} else {
$ipp = $default;
}
if(!isset($_SESSION['PAGE_FILTER'])) {
$_SESSION['PAGE_FILTER'] = array();
}
$_SESSION['PAGE_FILTER']['IPP'] = $ipp;
return $ipp;
}
function getItemsPerPageMenu($base_url='', $steps=array(10,25,50,100,250,0), $separator=' ') {
$ipp = isset($_SESSION['PAGE_FILTER']['IPP']) ? $_SESSION['PAGE_FILTER']['IPP'] : setItemsPerPage();
if(!in_array($ipp, $steps)) {
array_unshift($steps, $ipp);
}
$menu = array();
$x = 0;
foreach($steps as $item) {
$menu[$x] = '');
$html_pos2 = strpos($BE['HTML'], '');
if($html_pos1 !== false && $html_pos2 !== false) {
$html_pos1 += strlen('');
$html_pos2 -= 1;
}
$html = trim( preg_replace('/\s+/', ' ', substr($BE['HTML'], $html_pos1, $html_pos2-$html_pos1) ) );
$BE['HTML'] = substr($BE['HTML'], 0, $html_pos1) . substr($BE['HTML'], $html_pos2);
// load MooTools too
if(empty($phpwcms['mootools_mode'])) {
initMootools();
}
// init language replacements
$regexp = array( 'search' => array(), 'replace' => array() );
$bracket = array('BBCODE_OPEN' => '[', 'BRACECODE_OPEN' => '{', 'BBCODE_CLOSE' => ']', 'BRACECODE_CLOSE' => '}');
$cookie = (empty($_COOKIE['phpwcms_be_parse_lang']) || !in_array($_COOKIE['phpwcms_be_parse_lang'], $phpwcms['allowed_lang'])) ? false : $_COOKIE['phpwcms_be_parse_lang'];
// init menu
$menu = array(
'',
''.$BL['be_profile_label_lang'].': ',
''.$BL['be_off'].' ';
// wrap current lang/html with
$BE['HTML'] = replace_tmpl_section('BE_MAIN_CONTENT', $BE['HTML'], '
' . (empty($new_html) ? $html : $new_html) . '
');
backend_language_replace( implode(LF, $menu) );
}
function backend_language_replace($result) {
$GLOBALS['BE']['HTML'] = str_replace('{BE_PARSE_LANG}', $result, $GLOBALS['BE']['HTML']);
return NULL;
}
?>
![\"\"](\"img/subnav/subnav_A.gif\")
![\"\"](\"img/leer.gif\")
![\"\"](\"img/subnav/subnav_back_0.gif\")
';
$table .= '
';
$table .= '
';
$table .= '
';
$table .= '
';
$table .= '
';
$table .= '
';
$table .= '