m_downloads_5 for PHP-Fusion 7 - PHP-Fusion SF Russian Support Site

<?php

/*-------------------------------------------------------+

| PHP-Fusion Content Management System

| Copyright (C) 2002 - 2008 Nick Jones

| http://www.php-fusion.co.uk/

+--------------------------------------------------------+

| Filename: downloads.php

| Author: Nick Jones (Digitanium)

+--------------------------------------------------------+

| This program is released as free software under the

| Affero GPL license. You can redistribute it and/or

| modify it under the terms of this license which you

| can read by viewing the included agpl.txt or online

| at www.gnu.org/licenses/agpl.html. Removal of this

| copyright header is strictly prohibited without

| written permission from the original author(s).

+--------------------------------------------------------*/

require_once "../maincore.php";

require_once THEMES."templates/admin_header.php";

require_once INCLUDES."html_buttons_include.php";

include LOCALE.LOCALESET."admin/downloads.php";

$locale['dl_490']="Разрешить комментарии";

$locale['dl_491']="Разрешить рейтинги";

$locale['dl_492']="Файл: ";

$locale['dl_493']="<b>Внимание! Такой файл уже существует!!</b>";

$locale['dl_494']="<b>Файл был переписан!!</b>";

$locale['dl_495']="Разрешить скачивание гостям";

$locale['dl_496']="<font color='red'>*</font><i>Данное поле будет действительно при условии что вы не используете поле</i> <b>Файл</b>.";

define("DOWNLOADS", BASEDIR."download/");

if (!checkrights("D") || !defined("iAUTH") || $_GET['aid'] != iAUTH) { redirect("../index.php"); }



$result = dbquery("SELECT * FROM ".DB_DOWNLOAD_CATS);

if (dbrows($result)) {

	if ((isset($_GET['action']) && $_GET['action'] == "delete") && (isset($_GET['download_id']) && isnum($_GET['download_id']))) {

		$result = dbquery("DELETE FROM ".DB_DOWNLOADS." WHERE download_id='".$_GET['download_id']."'");

		unlink($result['download_url']);

		redirect(FUSION_SELF.$aidlink."&download_cat_id=".intval($_GET['download_cat_id']));

	} 

	if (isset($_POST['save_download'])) {

		if (is_uploaded_file($_FILES['upload_file']['tmp_name'])) 

		{	

		$download_filesize = ($_FILES['upload_file']['size']);

			$upload = $_FILES['upload_file'];

			$file_name = strtolower(substr($upload['name'], 0, strrpos($upload['name'], ".")));

			$file_ext = strtolower(strrchr($upload['name'],"."));

			$file_dest = DOWNLOADS;

			$file = $file_name.$file_ext;

			$download_url=$file_dest.$file;

			////////

			$result1 = dbarray(dbquery("SELECT * FROM ".DB_DOWNLOADS." WHERE download_url='$download_url'"));

			if (isset($_POST['download_url'])){

				unlink(stripinput($_POST['download_url']));

				$error=3;

			}

			if ((file_exists($download_url)) && $_GET['action']!="edit")

			{

				$error=2;

				redirect(FUSION_SELF.$aidlink."&error=$error");

			}

			/////////

			move_uploaded_file($upload['tmp_name'], $download_url);

			//chmod($download_url, 0644);

			$download_filesize = ($_FILES['upload_file']['size']);

		}

		else

		{	

			$download_url = stripinput($_POST['download_url']);

			$download_filesize = stripinput($_POST['download_filesize']);

		}

		$download_title = stripinput($_POST['download_title']);

		$download_description = addslash($_POST['download_description']);

		$download_cat = intval($_POST['download_cat']);

		$download_license = stripinput($_POST['download_license']);

		$download_os = stripinput($_POST['download_os']);

		$download_version = stripinput($_POST['download_version']);

		if (isset($_POST['download_comments'])){$download_comments="yes";}else{$download_comments="no";}

		if (isset($_POST['download_ratings'])){$download_ratings="yes";}else{$download_ratings="no";}

		if (isset($_POST['download_guest'])){$download_guest="yes";}else{$download_guest="no";}

		if ($download_title) {

			if ((isset($_GET['action']) && $_GET['action'] == "edit") && (isset($_GET['download_id']) && isnum($_GET['download_id']))) {

				$download_datestamp = isset($_POST['update_datestamp']) ? ", download_datestamp='".time()."'" : "";

				$result = dbquery("UPDATE ".DB_DOWNLOADS." SET download_title='$download_title', download_description='$download_description', download_url='$download_url', download_cat='$download_cat', download_license='$download_license', download_os='$download_os', download_version='$download_version', download_filesize='$download_filesize', download_allow_comments='$download_comments', download_allow_ratings='$download_ratings', download_allow_guest='$download_guest'".$download_datestamp." WHERE download_id='".$_GET['download_id']."'");

				redirect(FUSION_SELF.$aidlink."&download_cat_id=".$download_cat);

			} else {

				$result = dbquery("INSERT INTO ".DB_DOWNLOADS." (download_title, download_description, download_url, download_cat, download_license, download_os, download_version, download_filesize, download_datestamp, download_count, download_allow_comments, download_allow_ratings) VALUES ('$download_title', '$download_description', '$download_url', '$download_cat', '$download_license', '$download_os', '$download_version', '$download_filesize', '".time()."', '0', '$download_comments', '$download_ratings')");

				redirect(FUSION_SELF.$aidlink."&download_cat_id=".$download_cat);

			}

		} else {

			redirect(FUSION_SELF.$aidlink);

		}

	}

	if ((isset($_GET['action']) && $_GET['action'] == "edit") && (isset($_GET['download_id']) && isnum($_GET['download_id']))) {

		$result = dbquery("SELECT * FROM ".DB_DOWNLOADS." WHERE download_id='".$_GET['download_id']."'");

		if (dbrows($result)) {

			$data = dbarray($result);

			$download_title = $data['download_title'];

			$download_description = stripinput(stripslashes($data['download_description']));

			$download_url = $data['download_url'];

			$download_license = $data['download_license'];

			$download_os = $data['download_os'];

			$download_version = $data['download_version'];

			$download_filesize = $data['download_filesize'];

			$download_ratings=$data['download_allow_ratings'];

			$download_comments=$data['download_allow_comments'];

			$download_guest=$data['download_allow_guest'];

			$formaction = FUSION_SELF.$aidlink."&action=edit&download_cat_id=".$data['download_cat']."&download_id=".$data['download

_id'];

			opentable($locale['401']);

		} else {

			redirect(FUSION_SELF.$aidlink);

		}

	} else {

		$download_title = "";

		$download_description = "";

		$download_url = "";

		$download_license = "";

		$download_os = "";

		$download_version = "";

		$download_filesize = "";

		$formaction = FUSION_SELF.$aidlink;

		$download_ratings = "yes";

		$download_comments = "yes";

		$download_guest = "yes";

		opentable($locale['400']);

	}

	$editlist = ""; $sel = "";

	$result2 = dbquery("SELECT * FROM ".DB_DOWNLOAD_CATS." ORDER BY download_cat_name");

	if (dbrows($result2) != 0) {

		while ($data2 = dbarray($result2)) {

			if (isset($_GET['action']) && $_GET['action'] == "edit") { $sel = ($data['download_cat'] == $data2['download_cat_id'] ? " selected='selected'='selected'" : ""); }

			$editlist .= "<option value='".$data2['download_cat_id']."'$sel>".$data2['download_cat_name']."</option>\n";

		}

	}

	if ($download_comments=='yes'){$dc="checked";}else{$dc="";}

	if ($download_ratings=='yes'){$dr="checked";}else{$dr="";}

	if ($download_guest=='yes'){$dg="checked";}else{$dg="";}

	echo "<form id='inputform' method='post' action='".$formaction."' enctype='multipart/form-data'>\n";

	echo "<table cellpadding='0' cellspacing='0' width='460' class='center'>\n<tr>\n";

	echo "<td width='80' class='tbl'>".$locale['420']."</td>\n";

	echo "<td class='tbl'><input type='text' name='download_title' value='".$download_title."' class='textbox' style='width:380px;' /></td>\n";

	echo "</tr>\n<tr>\n";

	echo "<td valign='top' width='80' class='tbl'>".$locale['421']."</td>\n";

	echo "<td class='tbl'><textarea name='download_description' cols='60' rows='5' class='textbox' style='width:380px;'>".$download_description."</textarea></td>\n";

	echo "</tr>\n<tr>\n";

	echo "<td class='tbl'></td><td class='tbl'>\n";

	require_once INCLUDES."bbcode_include.php";

	echo display_bbcodes("360px", "download_description", "inputform")."<br>";

	echo display_html("inputform", "download_description", true)."</td>\n";

	echo "</tr>\n<tr>\n";



	if (isset($_GET['action']) && $_GET['action'] == "edit") {

	echo "<tr>

	<td width='80' class='tbl'><font color='red'>*</font>".$locale['422']."</td>

	<td class='tbl'><input type='text' name='download_url' value='".$download_url."' class='textbox' style='width:380px;'></td>

	</tr>";

	}

	echo "<td width='80' class='tbl'>".$locale['423']."</td>\n";

	echo "<td class='tbl'><select name='download_cat' class='textbox'>\n".$editlist."</select></td>\n";

	echo "</tr>\n<tr>\n";

	echo "<td width='80' class='tbl'>".$locale['424']."</td>\n";

	echo "<td class='tbl'><input type='text' name='download_license' value='".$download_license."' class='textbox' style='width:150px;' /></td>\n";

	echo "</tr>\n<tr>\n";

	echo "<td width='80' class='tbl'>".$locale['425']."</td>\n";

	echo "<td class='tbl'><input type='text' name='download_os' value='".$download_os."' class='textbox' style='width:150px;' /></td>\n";

	echo "</tr>\n<tr>\n";

	echo "<td width='80' class='tbl'>".$locale['426']."</td>\n";

	echo "<td class='tbl'><input type='text' name='download_version' value='".$download_version."' class='textbox' style='width:150px;' /></td></tr>\n";

	if (!isset($_GET['action'])){

	echo "

	<tr>

	<td width='80' class='tbl'><font color='red'>*</font>".$locale['422']."</td>

	<td class='tbl'><input type='text' name='download_url' value='".$download_url."' class='textbox' style='width:150px;'>  ".$locale['427']."<input type='text' name='download_filesize' value='".$download_filesize."' class='textbox' style='width:70px;'>(byte)</td></tr>";

	}

	echo "

	<tr>

	<td width='80' class='tbl'>".$locale['dl_492']."</td>

	<td class='tbl'><input type='file' name='upload_file' class='textbox' style='width:150px;'></td>

	</tr>\n";

	if (isset($_GET['action']) && $_GET['action'] == "edit") {

	echo "<tr>\n";

	echo "<td width='80' class='tbl'>".$locale['427']."</td>\n";

	echo "<td class='tbl'><input type='text' name='download_filesize' value='".$download_filesize."' class='textbox' style='width:70px;' />(byte)</td>\n";

	echo "</tr>\n";

	}

	echo "<tr><td colspan='2' class='tbl1'>".$locale['dl_496']."</td>

	</tr>\n";

	echo "<tr><td colspan='2' align='center'><input type='checkbox' name='download_comments' ".$dc."> <b>".$locale['dl_490']."</b><br>

<input type='checkbox' name='download_ratings' ".$dr."> <b>".$locale['dl_491']."</b><br>

<input type='checkbox' name='download_guest' ".$dg."> <b>".$locale['dl_495']."</b></td></tr>";

	

	echo "<tr>\n";

	echo "<td align='center' colspan='2' class='tbl'>";

	if (isset($_GET['action']) && $_GET['action'] == "edit") {

		echo "<input type='checkbox' name='update_datestamp' value='1' /> ".$locale['429']."<br /><br />\n";

	}

	echo "<input type='submit' name='save_download' value='".$locale['428']."' class='button' /></td>\n</tr>\n";

	if (isset($error)&&($error == 2)) echo "<tr><td align='center' colspan='2' class='tbl'>".$locale['dl_493']."</td></tr>";

	if (isset($error)&&($error == 3)) echo "<tr><td align='center' colspan='2' class='tbl'>".$locale['dl_494']."</td></tr>";

	echo "</table>\n</form>\n";

	closetable();



	opentable($locale['402']);

	echo "<table cellpadding='0' cellspacing='0' width='400' class='center'>\n";

	$result = dbquery("SELECT * FROM ".DB_DOWNLOAD_CATS." ORDER BY download_cat_name");

	if (dbrows($result)) {

		echo "<tr>\n";

		echo "<td class='tbl2'>".$locale['440']."</td>\n";

		echo "<td align='right' class='tbl2'>".$locale['441']."</td>\n";

		echo "</tr>\n<tr>\n";

		echo "<td colspan='2' height='1'></td>\n";

		echo "</tr>\n";

		while ($data = dbarray($result)) {

			if (!isset($_GET['download_cat_id']) || !isnum($_GET['download_cat_id'])) { $_GET['download_cat_id'] = 0; }

			if ($data['download_cat_id'] == $_GET['download_cat_id']) { $p_img = "off"; $div = ""; } else { $p_img = "on"; $div = "style='display:none'"; }

			echo "<tr>\n";

			echo "<td class='tbl2'>".$data['download_cat_name']."</td>\n";

			echo "<td class='tbl2' align='right'><img src='".get_image("panel_$p_img")."' name='b_".$data['download_cat_id']."' alt='' onclick=\"javascript:flipBox('".$data['download_cat_id']."')\" /></td>\n";

			echo "</tr>\n";

			$result2 = dbquery("SELECT * FROM ".DB_DOWNLOADS." WHERE download_cat='".$data['download_cat_id']."' ORDER BY download_title");

			if (dbrows($result2) != 0) {

				echo "<tr>\n<td colspan='2'>\n";

				echo "<div id='box_".$data['download_cat_id']."'".$div.">\n";

				echo "<table cellpadding='0' cellspacing='0' width='100%'>\n";

				while ($data2 = dbarray($result2)) {

					if (!strstr($data2['download_url'],"http://") && !strstr($data2['download_url'],"../")) {

						$download_url = BASEDIR.$data2['download_url'];

					} else {

						$download_url = $data2['download_url'];

					}

					echo "<tr>\n<td class='tbl'><a href='$download_url' target='_blank'>".$data2['download_title']."</a></td>\n";

					echo "<td align='right' width='100' class='tbl'><a href='".FUSION_SELF.$aidlink."&action=edit&download_cat_id=".$data['download_cat_id']."&download_id="

.$data2['download_id']."'>".$locale['442']."</a> -\n";

					echo "<a href='".FUSION_SELF.$aidlink."&action=delete&download_cat_id=".$data['download_cat_id']."&download_id=&quo

t;.$data2['download_id']."' onclick=\"return confirm('".$locale['460']."');\">".$locale['443']."</a></td>\n";

					echo "</tr>\n";

				}

				echo "</table>\n</div>\n</td>\n</tr>\n";

			}

		}

		echo "</table>\n";

	} else {

		echo "<tr>\n<td align='center'><br />\n";

		echo $locale['450']."<br /><br /></td>\n";

		echo "</tr>\n</table>\n";

	}

	closetable();

} else {

	opentable($locale['402']);

	echo "<div style='text-align:center'>".$locale['451']."<br />\n".$locale['452']."<br /><br />\n";

	echo "<a href='download_cats.php".$aidlink."'>".$locale['453']."</a>".$locale['454']."</div&g

t;\n";

	closetable();

}



require_once THEMES."templates/footer.php";

?>