developer/stuff/global_gserver_file_templates.php

<?php

/**
 * File: global_gserver_file_templates.php.
 * Author: Ulrich Block
 * Date: 02.01.14
 * Time: 11:46
 * Contact: <ulrich.block@easy-wi.com>
 *
 * This file is part of Easy-WI.
 *
 * Easy-WI is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * Easy-WI is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with Easy-WI.  If not, see <http://www.gnu.org/licenses/>.
 *
 * Diese Datei ist Teil von Easy-WI.
 *
 * Easy-WI ist Freie Software: Sie koennen es unter den Bedingungen
 * der GNU General Public License, wie von der Free Software Foundation,
 * Version 3 der Lizenz oder (nach Ihrer Wahl) jeder spaeteren
 * veroeffentlichten Version, weiterverbreiten und/oder modifizieren.
 *
 * Easy-WI wird in der Hoffnung, dass es nuetzlich sein wird, aber
 * OHNE JEDE GEWAEHELEISTUNG, bereitgestellt; sogar ohne die implizite
 * Gewaehrleistung der MARKTFAEHIGKEIT oder EIGNUNG FUER EINEN BESTIMMTEN ZWECK.
 * Siehe die GNU General Public License fuer weitere Details.
 *
 * Sie sollten eine Kopie der GNU General Public License zusammen mit diesem
 * Programm erhalten haben. Wenn nicht, siehe <http://www.gnu.org/licenses/>.
 */

if (isset($userInclude)) {

    $targetFile = 'userpanel.php';
    $loguserid = $user_id;
    $logusername = getusername($user_id);
    $logusertype = 'user';
    $logreseller = 0;

    if (isset($admin_id)) {
        $logsubuser = $admin_id;
    } else if (isset($subuser_id)) {
        $logsubuser = $subuser_id;
    } else {
        $logsubuser = 0;
    }

} else if (isset($adminInclude)) {

    $targetFile = 'admin.php';

    $loguserid = $admin_id;
    $logusername = getusername($admin_id);
    $logusertype = 'admin';

    if ($reseller_id == 0) {
        $logreseller = 0;
        $logsubuser = 0;
    } else {
        $logsubuser =  (isset($_SESSION['oldid'])) ? $_SESSION['oldid'] : 0;
        $logreseller = 0;
    }
}

if (!isset($main) or $main != 1 or !isset($targetFile) or (!$pa['gserver'] and !$pa['restart'])) {
    $targetFile = (isset($targetFile)) ? $targetFile : 'login.php';
    header('Location: ' . $targetFile);
    die;
}

$sprache = getlanguagefile('images', $user_language, $resellerLockupID);

if ($ui->w('action', 4, 'post') and !token(true)) {

	unset($header, $text);

    $errors = array($spracheResponse->token);

    $template_file = ($ui->st('d', 'get') == 'ad') ? 'global_gserver_file_template_add.tpl' : 'global_gserver_file_template_md.tpl';

} else if ($ui->st('d', 'get') == 'ad' or ($ui->st('d', 'get') == 'md' and $ui->id('id', 10, 'get'))) {

    $errors = array();

    $id = (int) $ui->id('id', 10, 'get');

    $servertype = $ui->gamestring('servertype', 'post');
    $name = $ui->startparameter('name', 'post');
    $content = $ui->escaped('content', 'post');

    // Add jQuery plugin chosen to the header
    $htmlExtraInformation['css'][] = '<link href="css/default/chosen/chosen.min.css" rel="stylesheet" type="text/css">';
    $htmlExtraInformation['js'][] = '<script src="js/default/plugins/chosen/chosen.jquery.min.js" type="text/javascript"></script>';

    $table = array();

    $query = $sql->prepare("SELECT `shorten`,`description` FROM `servertypes` WHERE `resellerid`=? GROUP BY `shorten`,`description` ORDER BY `shorten`");
    $query->execute(array($resellerLockupID));
    while ($row = $query->fetch(PDO::FETCH_ASSOC)) {
        $table[$row['shorten']] = $row['description'];
    }

    if (!$ui->st('action', 'post')) {

        if ($ui->st('d', 'get') == 'ad') {

            $template_file = 'global_gserver_file_template_add.tpl';

        } else if ($ui->st('d', 'get') == 'md' and $id) {

            if (isset($adminInclude)) {
                $query = $sql->prepare("SELECT `servertype`,`name`,`content` FROM `gserver_file_templates` WHERE `templateID`=? AND `resellerID`=? AND `userID` IS NULL LIMIT 1");
                $query->execute(array($id, $resellerLockupID));
                while ($row = $query->fetch(PDO::FETCH_ASSOC)) {
                    $servertype = $row['servertype'];
                    $name = $row['name'];
                    $content = $row['content'];
                }
            } else {
                $query = $sql->prepare("SELECT `servertype`,`name`,`content` FROM `gserver_file_templates` WHERE `templateID`=? AND `userID`=? AND `resellerID`=? LIMIT 1");
                $query->execute(array($id, $user_id, $resellerLockupID));
                while ($row = $query->fetch(PDO::FETCH_ASSOC)) {
                    $servertype = $row['servertype'];
                    $name = $row['name'];
                    $content = $row['content'];
                }
            }

            $template_file = ($query->rowCount() > 0) ? 'global_gserver_file_template_md.tpl' : 'admin_404.tpl';

        } else {
            $template_file = 'admin_404.tpl';
        }

    } else if ($ui->st('action', 'post') == 'md' or $ui->st('action', 'post') == 'ad') {

        if (!$servertype or !isset($table[$servertype])) {
            $errors['servertype'] = $sprache->game;
        }

        if (!$name) {
            $errors['name'] = $sprache->description;
        }

        if (!$content) {
            $errors['content'] = $gsprache->template;
        }

        if ($name and $ui->smallletters('action',2, 'post') == 'ad') {
            if (isset($adminInclude)) {
                $query = $sql->prepare("SELECT `templateID` FROM `gserver_file_templates` WHERE `name`=? AND `servertype`=? AND `resellerID`=? AND `userID` IS NULL LIMIT 1");
                $query->execute(array($name, $servertype, $resellerLockupID));
                if ($query->rowCount() > 0) {
                    $errors['name'] = $sprache->description;
                    $errors['servertype'] = $sprache->game;
                }
            } else {
                $query = $sql->prepare("SELECT `templateID` FROM `gserver_file_templates` WHERE `name`=? AND `servertype`=? AND `userID`=? AND `resellerID`=? LIMIT 1");
                $query->execute(array($name, $servertype, $user_id, $resellerLockupID));
                if ($query->rowCount() > 0) {
                    $errors['name'] = $sprache->description;
                    $errors['servertype'] = $sprache->game;
                }
            }

        } else if ($name and $ui->smallletters('action',2, 'post') == 'md') {
            if (isset($adminInclude)) {
                $query = $sql->prepare("SELECT `templateID` FROM `gserver_file_templates` WHERE `templateID`!=? AND `name`=? AND `servertype`=? AND `resellerID`=? AND `userID` IS NULL LIMIT 1");
                $query->execute(array($id, $name, $servertype, $resellerLockupID));
                if ($query->rowCount() > 0) {
                    $errors['name'] = $sprache->description;
                    $errors['servertype'] = $sprache->game;
                }
            } else {
                $query = $sql->prepare("SELECT `templateID` FROM `gserver_file_templates` WHERE `templateID`!=? AND `name`=? AND `servertype`=? AND `userID`=? AND `resellerID`=? LIMIT 1");
                $query->execute(array($id, $name, $servertype, $user_id, $resellerLockupID));
                if ($query->rowCount() > 0) {
                    $errors['name'] = $sprache->description;
                    $errors['servertype'] = $sprache->game;
                }
            }

        }

        if (count($errors) == 0) {

            if ($ui->st('action', 'post') == 'ad') {

                if (isset($adminInclude)) {
                    $query = $sql->prepare("INSERT INTO `gserver_file_templates` (`userID`,`servertype`,`name`,`content`,`resellerID`) VALUES (NULL,?,?,?,?)");
                    $query->execute(array($servertype, $name, $content, $resellerLockupID));
                } else {
                    $query = $sql->prepare("INSERT INTO `gserver_file_templates` (`userID`,`servertype`,`name`,`content`,`resellerID`) VALUES (?,?,?,?,?)");
                    $query->execute(array($user_id, $servertype, $name, $content, $resellerLockupID));
                }

                $rowCount = $query->rowCount();
                $loguseraction = '%add% %gserver% %file% %template% ' . $name;

            } else if ($ui->st('action', 'post') == 'md') {

                if (isset($adminInclude)) {
                    $query = $sql->prepare("UPDATE `gserver_file_templates` SET `servertype`=?,`name`=?,`content`=? WHERE `templateID`=? AND `resellerID`=? LIMIT 1");
                    $query->execute(array($servertype, $name, $content, $id, $resellerLockupID));
                } else {
                    $query = $sql->prepare("UPDATE `gserver_file_templates` SET `servertype`=?,`name`=?,`content`=? WHERE `templateID`=? AND `userID`=? AND `resellerID`=? LIMIT 1");
                    $query->execute(array($servertype, $name, $content, $id, $user_id, $resellerLockupID));
                }

                $rowCount = $query->rowCount();
                $loguseraction = '%mod% %gserver% %file% %template% ' . $name;
            }

            if (isset($rowCount) and $rowCount > 0) {
                $insertlog->execute();
                $template_file = $spracheResponse->table_add;
            } else {
                $template_file = $spracheResponse->error_table;
            }

        } else {

            unset($header, $text);
            $template_file = ($ui->st('d', 'get') == 'ad') ? 'global_gserver_file_template_add.tpl' : 'global_gserver_file_template_md.tpl';
        }
    }

} else if ($ui->st('d', 'get') == 'dl' and $ui->id('id', 10, 'get')) {

    $id = $ui->id('id', 10, 'get');

    if (!$ui->st('action', 'post')) {

        if (isset($adminInclude)) {
            $query = $sql->prepare("SELECT `name` FROM `gserver_file_templates` WHERE `templateID`=? AND `userID` IS NULL AND `resellerID`=? LIMIT 1");
            $query->execute(array($id, $resellerLockupID));
        } else {
            $query = $sql->prepare("SELECT `name` FROM `gserver_file_templates` WHERE `templateID`=? AND `userID`=? AND `resellerID`=? LIMIT 1");
            $query->execute(array($id, $user_id, $resellerLockupID));
        }

        $name = $query->fetchColumn();

        $template_file = ($name != '') ? 'global_gserver_file_template_dl.tpl' : 'admin_404.tpl';

    } else if ($ui->st('action', 'post') == 'dl'){

        if (isset($adminInclude)) {
            $query = $sql->prepare("SELECT `name` FROM `gserver_file_templates` WHERE templateID=? AND `userID` IS NULL AND resellerID=? LIMIT 1");
            $query->execute(array($id, $resellerLockupID));
        } else {
            $query = $sql->prepare("SELECT `name` FROM `gserver_file_templates` WHERE templateID=? AND `userID`=? AND resellerID=? LIMIT 1");
            $query->execute(array($id, $user_id, $resellerLockupID));
        }

        $name = $query->fetchColumn();

        if (isset($adminInclude)) {
            $query = $sql->prepare("DELETE FROM `gserver_file_templates` WHERE `templateID`=? AND `userID` IS NULL AND `resellerID`=? LIMIT 1");
            $query->execute(array($id, $resellerLockupID));
        } else {
            $query = $sql->prepare("DELETE FROM `gserver_file_templates` WHERE `templateID`=? AND `userID`=? AND `resellerID`=? LIMIT 1");
            $query->execute(array($id, $user_id, $resellerLockupID));
        }

        if ($query->rowCount() > 0) {
            $loguseraction = '%del% %template% ' . $name;
            $insertlog->execute();
            $template_file = $spracheResponse->table_del;
        } else {
            $template_file = $spracheResponse->error_table;
        }

    } else {

        $template_file = 'admin_404.tpl';
    }

} else {

    $table = array();

    if (isset($adminInclude)) {
        $query = $sql->prepare("SELECT `templateID`,`name`,`servertype` FROM `gserver_file_templates` WHERE `userID` IS NULL AND `resellerID`=?");
        $query->execute(array($resellerLockupID));
    } else {
        $query = $sql->prepare("SELECT `templateID`,`name`,`servertype` FROM `gserver_file_templates` WHERE `userID`=? AND `resellerID`=?");
        $query->execute(array($user_id, $resellerLockupID));
    }

    while ($row = $query->fetch(PDO::FETCH_ASSOC)) {
        $table[] = array('id' => $row['templateID'], 'name' => $row['name'], 'servertype' => $row['servertype']);
    }

    configureDateTables('-1, -2');

    $template_file = 'global_gserver_file_template_list.tpl';
}