malhuda/developer
1
0
Fork 0
mirror of https://github.com/easy-wi/developer.git synced 2025-02-20 11:23:28 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

#329 Display html title depending on the page

Browse Source
This commit is contained in:
Ulrich Block 2014-02-15 12:57:05 +01:00
parent cea0f0c84e
commit b6bb2ab4de
12 changed files with 305 additions and 139 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
web/protectioncheck.php
View File

@ -40,6 +40,7 @@ if (isset($page_include)) {
$default_language = $user_language; $default_language = $user_language;
$reseller_id = 0; $reseller_id = 0;
$page_data->title = $page_sprache->protectioncheck;
$protection_link = ($page_data->seo == 'N') ? 'protectioncheck.php' : $page_data->pageurl . '/' . $user_language . '/' . $page_category . '/'; $protection_link = ($page_data->seo == 'N') ? 'protectioncheck.php' : $page_data->pageurl . '/' . $user_language . '/' . $page_category . '/';
} else { } else {

2
web/startupdates.php
View File

@ -64,7 +64,7 @@ if (!isset($ip) or $ui->escaped('SERVER_ADDR', 'server') == $ip or in_array($ip,
$query = $sql->prepare("SELECT `lastUpdateRun` FROM `settings` WHERE `resellerid`=0 LIMIT 1"); $query = $sql->prepare("SELECT `lastUpdateRun` FROM `settings` WHERE `resellerid`=0 LIMIT 1");
$query->execute(); $query->execute();
$lastUpdateRun= (int) $query->fetchColumn(); $lastUpdateRun = (int) $query->fetchColumn();
$query = $sql->prepare("UPDATE `settings` SET `lastUpdateRun`=? WHERE `resellerid`=0 LIMIT 1"); $query = $sql->prepare("UPDATE `settings` SET `lastUpdateRun`=? WHERE `resellerid`=0 LIMIT 1");
$query->execute(array($currentMinute)); $query->execute(array($currentMinute));

6
web/stuff/api_users.php
View File

@ -74,7 +74,7 @@ if (array_value_exists('action', 'add', $data)) {
$localID = ''; $localID = '';
$userGroupIDs = array(); $userGroupIDs = array();
$salt = md5(mt_rand().date('Y-m-d H:i:s:u')); $salt = md5(mt_rand() . date('Y-m-d H:i:s:u'));
$email = $data['email']; $email = $data['email'];
$identifyBy = $data['identify_by']; $identifyBy = $data['identify_by'];
@ -96,6 +96,7 @@ if (array_value_exists('action', 'add', $data)) {
} }
if (!isset($success['false']) and !in_array($externalID, $bad)) { if (!isset($success['false']) and !in_array($externalID, $bad)) {
$query = $sql->prepare("SELECT COUNT(`id`) AS `amount`,`mail`,`cname` FROM `userdata` WHERE `externalID`=? LIMIT 1"); $query = $sql->prepare("SELECT COUNT(`id`) AS `amount`,`mail`,`cname` FROM `userdata` WHERE `externalID`=? LIMIT 1");
$query->execute(array($externalID)); $query->execute(array($externalID));
$amount2 = (int) $query->fetchColumn(); $amount2 = (int) $query->fetchColumn();
@ -110,7 +111,9 @@ if (array_value_exists('action', 'add', $data)) {
} }
if (!in_array($username, $bad)) { if (!in_array($username, $bad)) {
$tmpName = $username; $tmpName = $username;
} else { } else {
$query = $sql->prepare("SELECT `prefix2` FROM `settings` WHERE `resellerid`=? LIMIT 1"); $query = $sql->prepare("SELECT `prefix2` FROM `settings` WHERE `resellerid`=? LIMIT 1");
@ -449,6 +452,7 @@ if (array_value_exists('action', 'add', $data)) {
} }
$extraUpdate = ''; $extraUpdate = '';
foreach($what as $key => $value) { foreach($what as $key => $value) {
$extraUpdate .= ",`" . $key . "`='" . $value . "'"; $extraUpdate .= ",`" . $key . "`='" . $value . "'";
} }

24
web/stuff/imprint.php
View File

@ -36,18 +36,24 @@
* Programm erhalten haben. Wenn nicht, siehe <http://www.gnu.org/licenses/>. * Programm erhalten haben. Wenn nicht, siehe <http://www.gnu.org/licenses/>.
*/ */
if (!isset($reseller_id)) $reseller_id = 0; if (!isset($reseller_id)) {
$sprache=(isset($user_language)) ? getlanguagefile('images',$user_language,$reseller_id) : getlanguagefile('images',$page_language,$reseller_id); $reseller_id = 0;
if (isset($admin_id) and $admin_id==$reseller_id) { }
$sprache = (isset($user_language)) ? getlanguagefile('images', $user_language, $reseller_id) : getlanguagefile('images', $page_language, $reseller_id);
if (isset($admin_id) and $admin_id == $reseller_id) {
$resellerid = 0; $resellerid = 0;
} else if (isset($reseller_id)) { } else if (isset($reseller_id)) {
$resellerid = $reseller_id; $resellerid = $reseller_id;
} else { } else {
$resellerid = 0; $resellerid = 0;
} }
$query = $sql->prepare("SELECT `imprint` FROM `imprints` WHERE language=? AND resellerid=? LIMIT 1"); $query = $sql->prepare("SELECT `imprint` FROM `imprints` WHERE language=? AND resellerid=? LIMIT 1");
$query->execute(array($user_language,$resellerid)); $query->execute(array($user_language, $resellerid));
$imprint = $query->fetchColumn(); $imprint = $query->fetchColumn();
if ($imprint != '') { if ($imprint != '') {
$query = $sql->prepare("SELECT `language` FROM `settings` WHERE `resellerid`=? LIMIT 1"); $query = $sql->prepare("SELECT `language` FROM `settings` WHERE `resellerid`=? LIMIT 1");
$query->execute(array($resellerid)); $query->execute(array($resellerid));
@ -56,15 +62,21 @@ if ($imprint != '') {
$query->execute(array($defaultlanguage,$resellerid)); $query->execute(array($defaultlanguage,$resellerid));
$imprint = $query->fetchColumn(); $imprint = $query->fetchColumn();
} }
if (isset($page_data)) { if (isset($page_data)) {
$page_data->setCanonicalUrl($s); $page_data->setCanonicalUrl($s);
$page_data->title = $gsprache->imprint;
// https://github.com/easy-wi/developer/issues/62 // https://github.com/easy-wi/developer/issues/62
$langLinks = array(); $langLinks = array();
foreach ($languages as $l) { foreach ($languages as $l) {
$tempLanguage = getlanguagefile('general',$l,0); $tempLanguage = getlanguagefile('general', $l, 0);
$langLinks[$l]=($page_data->seo== 'Y') ? szrp($tempLanguage->$s) : '?s='.$s; $langLinks[$l] = ($page_data->seo == 'Y') ? szrp($tempLanguage->$s) : '?s=' . $s;
} }
$page_data->langLinks($langLinks); $page_data->langLinks($langLinks);
} }
$template_file = "imprint.tpl"; $template_file = "imprint.tpl";

18
web/stuff/init_page.php
View File

@ -135,16 +135,16 @@ if (isset($page_active) and $page_active == 'Y') {
} }
if ($easywiModules['ip'] === true) { if ($easywiModules['ip'] === true) {
$page_data->SetMenu($gsprache->imprint, $gsprache->imprint,'imprint'); $page_data->SetMenu($gsprache->imprint, $gsprache->imprint, 'imprint');
} }
$page_data->SetMenu($gsprache->downloads, $gsprache->downloads,'downloads'); $page_data->SetMenu($gsprache->downloads, $gsprache->downloads, 'downloads');
$page_data->SetMenu($page_sprache->about, $page_sprache->about,'about'); $page_data->SetMenu($page_sprache->about, $page_sprache->about, 'about');
$page_data->SetMenu($page_sprache->sitemap, $page_sprache->sitemap,'sitemap'); $page_data->SetMenu($page_sprache->sitemap, $page_sprache->sitemap, 'sitemap');
$page_data->SetMenu($page_sprache->gallery, $page_sprache->gallery,'gallery'); $page_data->SetMenu($page_sprache->gallery, $page_sprache->gallery, 'gallery');
$page_data->SetMenu($page_sprache->contact, $page_sprache->contact,'contact'); $page_data->SetMenu($page_sprache->contact, $page_sprache->contact, 'contact');
$page_data->SetMenu($page_sprache->search, $page_sprache->search,'search'); $page_data->SetMenu($page_sprache->search, $page_sprache->search, 'search');
$page_data->SetMenu($page_sprache->register, $page_sprache->register,'register'); $page_data->SetMenu($page_sprache->register, $page_sprache->register, 'register');
foreach ($query->fetchAll(PDO::FETCH_ASSOC) as $row) { foreach ($query->fetchAll(PDO::FETCH_ASSOC) as $row) {
if ($row['naviDisplay'] == 'Y') { if ($row['naviDisplay'] == 'Y') {
@ -154,7 +154,7 @@ if (isset($page_active) and $page_active == 'Y') {
} }
} }
if (isset($admin_id) and $ui->smallletters('preview',4, 'get') == 'true') { if (isset($admin_id) and $ui->smallletters('preview', 4, 'get') == 'true') {
$preview = 1; $preview = 1;
} else if (count($ui->get)>0 and isset($s) and isset($page_data->pages[$s])) { } else if (count($ui->get)>0 and isset($s) and isset($page_data->pages[$s])) {

44
web/stuff/mysql_functions.php
View File

@ -37,10 +37,11 @@
*/ */
class ExternalSQL { class ExternalSQL {
function __construct($ip,$port,$user,$password) {
function __construct($ip, $port, $user, $password) {
try { try {
$this->remotesql = new PDO('mysql:host=' .$ip . ';' . $port . '=' . $port,$user,$password); $this->remotesql = new PDO('mysql:host=' .$ip . ';' . $port . '=' . $port, $user, $password);
$this->remotesql->setAttribute(PDO::ATTR_ERRMODE,PDO::ERRMODE_EXCEPTION); $this->remotesql->setAttribute(PDO::ATTR_ERRMODE,PDO::ERRMODE_EXCEPTION);
} catch(PDOException $error) { } catch(PDOException $error) {
@ -51,7 +52,8 @@ class ExternalSQL {
$this->error='ok'; $this->error='ok';
} }
} }
function AddUser ($username,$password,$max_queries_per_hour,$max_connections_per_hour,$max_updates_per_hour,$max_userconnections_per_hour) {
function AddUser ($username, $password, $max_queries_per_hour, $max_connections_per_hour, $max_updates_per_hour, $max_userconnections_per_hour) {
if ($this->error!='ok') { if ($this->error!='ok') {
return $this->error; return $this->error;
@ -60,10 +62,10 @@ class ExternalSQL {
try { try {
$query = $this->remotesql->prepare("CREATE USER ?@'' IDENTIFIED BY ?"); $query = $this->remotesql->prepare("CREATE USER ?@'' IDENTIFIED BY ?");
$query->execute(array($username,$password)); $query->execute(array($username, $password));
$query = $this->remotesql->prepare("GRANT USAGE ON *.* TO ?@'' IDENTIFIED BY ? WITH MAX_QUERIES_PER_HOUR $max_queries_per_hour MAX_CONNECTIONS_PER_HOUR $max_connections_per_hour MAX_UPDATES_PER_HOUR $max_updates_per_hour MAX_USER_CONNECTIONS $max_userconnections_per_hour"); $query = $this->remotesql->prepare("GRANT USAGE ON *.* TO ?@'' IDENTIFIED BY ? WITH MAX_QUERIES_PER_HOUR $max_queries_per_hour MAX_CONNECTIONS_PER_HOUR $max_connections_per_hour MAX_UPDATES_PER_HOUR $max_updates_per_hour MAX_USER_CONNECTIONS $max_userconnections_per_hour");
$query->execute(array($username,$password)); $query->execute(array($username, $password));
$this->remotesql->exec("FLUSH PRIVILEGES; FLUSH HOSTS;"); $this->remotesql->exec("FLUSH PRIVILEGES; FLUSH HOSTS;");
@ -73,21 +75,23 @@ class ExternalSQL {
return $error->getMessage(); return $error->getMessage();
} }
} }
function AddDB ($dbname,$password,$ips,$max_queries_per_hour,$max_connections_per_hour,$max_updates_per_hour,$max_userconnections_per_hour) {
if ($this->error!='ok') { function AddDB ($dbname, $password, $ips, $max_queries_per_hour, $max_connections_per_hour, $max_updates_per_hour, $max_userconnections_per_hour) {
if ($this->error != 'ok') {
return $this->error; return $this->error;
} }
try { try {
$query = $this->remotesql->prepare("CREATE USER ?@'' IDENTIFIED BY ?"); $query = $this->remotesql->prepare("CREATE USER ?@'' IDENTIFIED BY ?");
$query->execute(array($dbname,$password)); $query->execute(array($dbname, $password));
$query = $this->remotesql->prepare("GRANT USAGE ON *.* TO ?@'' IDENTIFIED BY ? WITH MAX_QUERIES_PER_HOUR $max_queries_per_hour MAX_CONNECTIONS_PER_HOUR $max_connections_per_hour MAX_UPDATES_PER_HOUR $max_updates_per_hour MAX_USER_CONNECTIONS $max_userconnections_per_hour"); $query = $this->remotesql->prepare("GRANT USAGE ON *.* TO ?@'' IDENTIFIED BY ? WITH MAX_QUERIES_PER_HOUR $max_queries_per_hour MAX_CONNECTIONS_PER_HOUR $max_connections_per_hour MAX_UPDATES_PER_HOUR $max_updates_per_hour MAX_USER_CONNECTIONS $max_userconnections_per_hour");
$query->execute(array($dbname,$password)); $query->execute(array($dbname, $password));
$query = $this->remotesql->prepare("GRANT USAGE ON *.* TO ?@'localhost' IDENTIFIED BY ? WITH MAX_QUERIES_PER_HOUR $max_queries_per_hour MAX_CONNECTIONS_PER_HOUR $max_connections_per_hour MAX_UPDATES_PER_HOUR $max_updates_per_hour MAX_USER_CONNECTIONS $max_userconnections_per_hour"); $query = $this->remotesql->prepare("GRANT USAGE ON *.* TO ?@'localhost' IDENTIFIED BY ? WITH MAX_QUERIES_PER_HOUR $max_queries_per_hour MAX_CONNECTIONS_PER_HOUR $max_connections_per_hour MAX_UPDATES_PER_HOUR $max_updates_per_hour MAX_USER_CONNECTIONS $max_userconnections_per_hour");
$query->execute(array($dbname,$password)); $query->execute(array($dbname, $password));
$query = $this->remotesql->prepare("SELECT `host` FROM `mysql`.`host` WHERE `host`='localhost' AND `db`='%' LIMIT 1"); $query = $this->remotesql->prepare("SELECT `host` FROM `mysql`.`host` WHERE `host`='localhost' AND `db`='%' LIMIT 1");
$query->execute(array()); $query->execute(array());
@ -105,10 +109,10 @@ class ExternalSQL {
$query2 = $this->remotesql->prepare("INSERT INTO `mysql`.`host` (`host`,`db`,`Select_priv`,`Insert_priv`,`Update_priv`,`Delete_priv`,`Create_priv`,`Drop_priv`,`Alter_priv`) VALUES (?,?,'Y','Y','Y','Y','Y','Y','Y')"); $query2 = $this->remotesql->prepare("INSERT INTO `mysql`.`host` (`host`,`db`,`Select_priv`,`Insert_priv`,`Update_priv`,`Delete_priv`,`Create_priv`,`Drop_priv`,`Alter_priv`) VALUES (?,?,'Y','Y','Y','Y','Y','Y','Y')");
foreach (ipstoarray($ips) as $ip) { foreach (ipstoarray($ips) as $ip) {
$query->execute(array($ip,$dbname)); $query->execute(array($ip, $dbname));
if ($query->rowCount()==0) { if ($query->rowCount()==0) {
$query2->execute(array($ip,$dbname)); $query2->execute(array($ip, $dbname));
} }
} }
$this->remotesql->exec("FLUSH PRIVILEGES; FLUSH HOSTS;"); $this->remotesql->exec("FLUSH PRIVILEGES; FLUSH HOSTS;");
@ -119,7 +123,8 @@ class ExternalSQL {
return 'ok'; return 'ok';
} }
function ModDB ($dbname,$password,$ips,$max_queries_per_hour,$max_connections_per_hour,$max_updates_per_hour,$max_userconnections_per_hour) {
function ModDB ($dbname, $password, $ips, $max_queries_per_hour, $max_connections_per_hour, $max_updates_per_hour, $max_userconnections_per_hour) {
if ($this->error!='ok') { if ($this->error!='ok') {
return $this->error; return $this->error;
@ -128,14 +133,14 @@ class ExternalSQL {
try { try {
$query = $this->remotesql->prepare("SET PASSWORD FOR ?@'' = PASSWORD(?)"); $query = $this->remotesql->prepare("SET PASSWORD FOR ?@'' = PASSWORD(?)");
$query->execute(array($dbname,$password)); $query->execute(array($dbname, $password));
$this->remotesql->exec("GRANT USAGE ON * . * TO '$dbname'@'' WITH MAX_QUERIES_PER_HOUR $max_queries_per_hour MAX_CONNECTIONS_PER_HOUR $max_connections_per_hour MAX_UPDATES_PER_HOUR $max_updates_per_hour MAX_USER_CONNECTIONS $max_userconnections_per_hour"); $this->remotesql->exec("GRANT USAGE ON * . * TO '$dbname'@'' WITH MAX_QUERIES_PER_HOUR $max_queries_per_hour MAX_CONNECTIONS_PER_HOUR $max_connections_per_hour MAX_UPDATES_PER_HOUR $max_updates_per_hour MAX_USER_CONNECTIONS $max_userconnections_per_hour");
$query = $this->remotesql->prepare("GRANT SELECT,INSERT,UPDATE,DELETE,CREATE,DROP,REFERENCES,INDEX,ALTER,CREATE TEMPORARY TABLES,LOCK TABLES,CREATE VIEW,SHOW VIEW,CREATE ROUTINE,ALTER ROUTINE,EXECUTE ON `$dbname`.* TO ?@''"); $query = $this->remotesql->prepare("GRANT SELECT,INSERT,UPDATE,DELETE,CREATE,DROP,REFERENCES,INDEX,ALTER,CREATE TEMPORARY TABLES,LOCK TABLES,CREATE VIEW,SHOW VIEW,CREATE ROUTINE,ALTER ROUTINE,EXECUTE ON `$dbname`.* TO ?@''");
$query->execute(array($dbname)); $query->execute(array($dbname));
$iparray=ipstoarray($ips); $iparray = ipstoarray($ips);
$allowedips = array(); $allowedips = array();
$query = $this->remotesql->prepare("SELECT `host` FROM `mysql`.`host` WHERE `db`=?"); $query = $this->remotesql->prepare("SELECT `host` FROM `mysql`.`host` WHERE `db`=?");
@ -146,15 +151,15 @@ class ExternalSQL {
$query = $this->remotesql->prepare("INSERT INTO `mysql`.`host` (`host`,`db`,`Select_priv`,`Insert_priv`,`Update_priv`,`Delete_priv`,`Create_priv`,`Drop_priv`,`Alter_priv`) VALUES (?,?,'Y','Y','Y','Y','Y','Y','Y')"); $query = $this->remotesql->prepare("INSERT INTO `mysql`.`host` (`host`,`db`,`Select_priv`,`Insert_priv`,`Update_priv`,`Delete_priv`,`Create_priv`,`Drop_priv`,`Alter_priv`) VALUES (?,?,'Y','Y','Y','Y','Y','Y','Y')");
foreach ($iparray as $ip) { foreach ($iparray as $ip) {
if (!in_array($ip,$allowedips)) { if (!in_array($ip, $allowedips)) {
$query->execute(array($ip,$dbname)); $query->execute(array($ip, $dbname));
} }
} }
$query = $this->remotesql->prepare("DELETE FROM `mysql`.`host` WHERE `host`=? AND `db`=? LIMIT 1"); $query = $this->remotesql->prepare("DELETE FROM `mysql`.`host` WHERE `host`=? AND `db`=? LIMIT 1");
foreach ($allowedips as $ip) { foreach ($allowedips as $ip) {
if (!in_array($ip,$iparray)) { if (!in_array($ip, $iparray)) {
$query->execute(array($ip,$dbname)); $query->execute(array($ip, $dbname));
} }
} }
@ -166,6 +171,7 @@ class ExternalSQL {
return 'ok'; return 'ok';
} }
function DelDB ($dbname) { function DelDB ($dbname) {
if ($this->error!='ok') { if ($this->error!='ok') {

50
web/stuff/page_contact.php
View File

@ -1,4 +1,5 @@
<?php <?php
/** /**
* File: page_contact.php. * File: page_contact.php.
* Author: Ulrich Block * Author: Ulrich Block
@ -37,39 +38,60 @@
* Programm erhalten haben. Wenn nicht, siehe <http://www.gnu.org/licenses/>. * Programm erhalten haben. Wenn nicht, siehe <http://www.gnu.org/licenses/>.
*/ */
$name = $ui->names('name',255, 'post'); $name = $ui->names('name',255, 'post');
$email = $ui->ismail('email', 'post'); $email = $ui->ismail('email', 'post');
$comments=nl2br(htmlentities(trim($ui->escaped('comments', 'post')),ENT_QUOTES,'UTF-8')); $comments = nl2br(htmlentities(trim($ui->escaped('comments', 'post')), ENT_QUOTES, 'UTF-8'));
if ($ui->escaped('email', 'post')) { if ($ui->escaped('email', 'post')) {
$error = array(); $error = array();
if (!$ui->ismail('email', 'post'))$error[] = 'Mail';
if (!$ui->ismail('email', 'post')) {
$error[] = 'Mail';
}
if (!$ui->names('name',255, 'post')) $error[] = 'Name'; if (!$ui->names('name',255, 'post')) $error[] = 'Name';
if (!isset($_SESSION['token'])) $error[] = 'No Token';
else if ($_SESSION['token'] != $ui->escaped('token', 'post')) $error[] = 'Spamprotect'; if (!isset($_SESSION['token'])) {
if (isset($_SESSION['token'])) unset($_SESSION['token']); $error[] = 'No Token';
if (count($error)>0) { } else if ($_SESSION['token'] != $ui->escaped('token', 'post')) {
$token=md5(passwordgenerate(32)); $error[] = 'Spamprotect';
}
if (isset($_SESSION['token'])) {
unset($_SESSION['token']);
}
if (count($error) > 0) {
$token = md5(passwordgenerate(32));
$_SESSION['token'] = $token; $_SESSION['token'] = $token;
$comments=str_replace('<br />','',$comments); $comments = str_replace('<br />', '', $comments);
} else { } else {
unset($error); unset($error);
$success = true; $success = true;
$comments = $name.' ('.$email.'):<br />'.$comments; $comments = $name . ' (' . $email . '):<br />' . $comments;
sendmail('contact',$name,$comments,$rSA['email']); sendmail('contact', $name, $comments, $rSA['email']);
} }
} else { } else {
$token=md5(passwordgenerate(32)); $token = md5(passwordgenerate(32));
$_SESSION['token'] = $token; $_SESSION['token'] = $token;
} }
$page_data->title = $page_sprache->contact;
$page_data->setCanonicalUrl($s); $page_data->setCanonicalUrl($s);
// https://github.com/easy-wi/developer/issues/62 // https://github.com/easy-wi/developer/issues/62
$langLinks = array(); $langLinks = array();
foreach ($languages as $l) { foreach ($languages as $l) {
$tempLanguage = getlanguagefile('page',$l,0); $tempLanguage = getlanguagefile('page', $l, 0);
$langLinks[$l]=($page_data->seo== 'Y') ? szrp($tempLanguage->$s) : '?s='.$s; $langLinks[$l]=($page_data->seo == 'Y') ? szrp($tempLanguage->$s) : '?s=' . $s;
} }
$page_data->langLinks($langLinks); $page_data->langLinks($langLinks);
$template_file = 'contact.tpl'; $template_file = 'contact.tpl';

8
web/stuff/page_download.php
View File

@ -51,6 +51,7 @@ if (isset($page_name) and isid($page_name,10)) {
} else if ($ui->id('id', 10, 'get')) { } else if ($ui->id('id', 10, 'get')) {
$downloadID = $ui->id('id', 10, 'get'); $downloadID = $ui->id('id', 10, 'get');
} }
if (!isset($user_language) or $user_language == '') { if (!isset($user_language) or $user_language == '') {
$user_language=(isset($page_detect_language)) ? $page_detect_language : $rSA['language']; $user_language=(isset($page_detect_language)) ? $page_detect_language : $rSA['language'];
} }
@ -69,18 +70,23 @@ if (isset($downloadID)) {
if (($row['show'] == 'E' or ($row['show'] == 'A' and isset($admin_id)) or ($row['show'] == 'R' and (isset($user_id) or isset($admin_id)))) and file_exists(EASYWIDIR . "/downloads/${row['fileID']}.${row['fileExtension']}")) { if (($row['show'] == 'E' or ($row['show'] == 'A' and isset($admin_id)) or ($row['show'] == 'R' and (isset($user_id) or isset($admin_id)))) and file_exists(EASYWIDIR . "/downloads/${row['fileID']}.${row['fileExtension']}")) {
if (isset($startDownload)) { if (isset($startDownload)) {
$fileWithPath = EASYWIDIR . "/downloads/${row['fileID']}.${row['fileExtension']}"; $fileWithPath = EASYWIDIR . "/downloads/${row['fileID']}.${row['fileExtension']}";
$finfo = finfo_open(FILEINFO_MIME_TYPE); $finfo = finfo_open(FILEINFO_MIME_TYPE);
$contentType = finfo_file($finfo, $fileWithPath); $contentType = finfo_file($finfo, $fileWithPath);
finfo_close($finfo); finfo_close($finfo);
header("Content-Type: ${contentType}"); header("Content-Type: ${contentType}");
if (strpos(strtolower($ui->server['SERVER_SOFTWARE']),'nginx') !== false) { if (strpos(strtolower($ui->server['SERVER_SOFTWARE']),'nginx') !== false) {
header('Content-Length: ' . (string) (filesize($fileWithPath))); header('Content-Length: ' . (string) (filesize($fileWithPath)));
header('Cache-Control: public, must-revalidate'); header('Cache-Control: public, must-revalidate');
header('Pragma: no-cache'); header('Pragma: no-cache');
header("Content-Disposition: attachment; filename=\"${row['fileName']}.${row['fileExtension']}\""); header("Content-Disposition: attachment; filename=\"${row['fileName']}.${row['fileExtension']}\"");
header('Content-Transfer-Encoding: binary'); header('Content-Transfer-Encoding: binary');
header("X-Accel-Redirect: /downloads/${row['fileID']}.${row['fileExtension']}"); header("X-Accel-Redirect: /downloads/${row['fileID']}.${row['fileExtension']}");
} else { } else {
header("Content-Disposition: attachment; filename=\"${row['fileName']}.${row['fileExtension']}\""); header("Content-Disposition: attachment; filename=\"${row['fileName']}.${row['fileExtension']}\"");
set_time_limit(0); set_time_limit(0);
@ -98,6 +104,7 @@ if (isset($downloadID)) {
$query2->execute(array($downloadID, $loguserip, $userHostname)); $query2->execute(array($downloadID, $loguserip, $userHostname));
die; die;
} else { } else {
$template_file = 'page_downloads_detail.tpl'; $template_file = 'page_downloads_detail.tpl';
} }
@ -127,6 +134,7 @@ if (isset($downloadID)) {
$langLinks[$l]=($page_data->seo== 'Y') ? szrp($tempLanguage->$s) : '?s=' . $s; $langLinks[$l]=($page_data->seo== 'Y') ? szrp($tempLanguage->$s) : '?s=' . $s;
} }
$page_data->title = $gsprache->downloads;
$page_data->langLinks($langLinks); $page_data->langLinks($langLinks);
$template_file = 'page_downloads_list.tpl'; $template_file = 'page_downloads_list.tpl';

11
web/stuff/page_news.php
View File

@ -68,6 +68,8 @@ if ((isset($page_name) and $page_name != szrp($page_sprache->older) and isset($p
$allTags = array(); $allTags = array();
$allCategories = array(); $allCategories = array();
$page_data->title = $row['title'];
$page_title = $row['title']; $page_title = $row['title'];
$page_text = nl2br($row['text']); $page_text = nl2br($row['text']);
$comments = $row['comments']; $comments = $row['comments'];
@ -243,13 +245,19 @@ if ((isset($page_name) and $page_name != szrp($page_sprache->older) and isset($p
} else if (isset($admin_id) and $ui->smallletters('preview',4, 'get') == 'true') { } else if (isset($admin_id) and $ui->smallletters('preview',4, 'get') == 'true') {
if (is_array($ui->escaped('text', 'post')) or is_object($ui->escaped('text', 'post'))) { if (is_array($ui->escaped('text', 'post')) or is_object($ui->escaped('text', 'post'))) {
foreach ($ui->escaped('text', 'post') as $key=>$value) { foreach ($ui->escaped('text', 'post') as $key=>$value) {
$page_title = $ui->htmlcode('title', 'post',$key); $page_title = $ui->htmlcode('title', 'post',$key);
$page_text=nl2br($value); $page_data->title = $ui->htmlcode('title', 'post',$key);
$page_text = nl2br($value);
} }
} else { } else {
$page_title = $ui->escaped('title', 'post'); $page_title = $ui->escaped('title', 'post');
$page_data->title = $ui->escaped('title', 'post');
$page_text=nl2br($ui->escaped('text', 'post')); $page_text=nl2br($ui->escaped('text', 'post'));
} }
$allTags = array(); $allTags = array();
@ -362,6 +370,7 @@ if ((isset($page_name) and $page_name != szrp($page_sprache->older) and isset($p
} }
$page_data->langLinks($langLinks); $page_data->langLinks($langLinks);
$page_data->title = $gsprache->news;
$page_data->setCanonicalUrl($s); $page_data->setCanonicalUrl($s);
$template_file = 'page_news.tpl'; $template_file = 'page_news.tpl';

270
web/stuff/page_page.php
View File

@ -40,6 +40,7 @@ if (!isset($page_include)) {
header('Location: index.php'); header('Location: index.php');
die; die;
} }
if (isset($default_page_id)) { if (isset($default_page_id)) {
$page_id = $default_page_id; $page_id = $default_page_id;
} else if (isset($page_category,$page_data->pages_array['pages']) and in_array($page_category,$page_data->pages_array['pages'])) { } else if (isset($page_category,$page_data->pages_array['pages']) and in_array($page_category,$page_data->pages_array['pages'])) {
@ -47,204 +48,299 @@ if (isset($default_page_id)) {
} else { } else {
$page_id = $ui->id('id',19, 'get'); $page_id = $ui->id('id',19, 'get');
} }
if (isset($page_id) and is_numeric($page_id)) { if (isset($page_id) and is_numeric($page_id)) {
function pre_replace($m) { function pre_replace($m) {
return str_replace($m[1],htmlentities($m[1]),$m[0]); return str_replace($m[1], htmlentities($m[1]), $m[0]);
} }
$query = $sql->prepare("SELECT t.`title`,t.`text`,t.`id`,p.`subpage` FROM `page_pages` p LEFT JOIN `page_pages_text` t ON p.`id`=t.`pageid` WHERE p.`id`=? AND `type`='page' AND t.`language`=? AND p.`released`='1' AND p.`resellerid`='0' LIMIT 1"); $query = $sql->prepare("SELECT t.`title`,t.`text`,t.`id`,p.`subpage` FROM `page_pages` p LEFT JOIN `page_pages_text` t ON p.`id`=t.`pageid` WHERE p.`id`=? AND `type`='page' AND t.`language`=? AND p.`released`='1' AND p.`resellerid`='0' LIMIT 1");
$query->execute(array($page_id,$user_language)); $query->execute(array($page_id ,$user_language));
foreach ($query->fetchAll(PDO::FETCH_ASSOC) as $row) { foreach ($query->fetchAll(PDO::FETCH_ASSOC) as $row) {
$page_keywords = array();
$tag_tags = array();
$page_data->title = $row['title'];
$page_title = $row['title']; $page_title = $row['title'];
$page_text=str_replace('%url%',$page_data->pageurl, $row['text']);
$page_text=preg_replace_callback('/<pre.*?>(.*?)<\/pre>/imsu','pre_replace',$page_text);
$page_keywords = array();
$tag_tags = array();
$breadcrumbID = $row['subpage']; $breadcrumbID = $row['subpage'];
$breadcrumbPageID = $page_id; $breadcrumbPageID = $page_id;
$page_text = str_replace('%url%', $page_data->pageurl, $row['text']);
$page_text = preg_replace_callback('/<pre.*?>(.*?)<\/pre>/imsu', 'pre_replace', $page_text);
$query2 = $sql->prepare("SELECT t.`name` FROM `page_terms_used` u LEFT JOIN `page_terms` t ON u.`term_id`=t.`id` WHERE u.`language_id`=? AND u.`resellerid`='0' ORDER BY t.`name` DESC"); $query2 = $sql->prepare("SELECT t.`name` FROM `page_terms_used` u LEFT JOIN `page_terms` t ON u.`term_id`=t.`id` WHERE u.`language_id`=? AND u.`resellerid`='0' ORDER BY t.`name` DESC");
$query2->execute(array($row['id'])); $query2->execute(array($row['id']));
foreach ($query2->fetchAll(PDO::FETCH_ASSOC) as $row2) { foreach ($query2->fetchAll(PDO::FETCH_ASSOC) as $row2) {
$page_data->AddData('keywords', $row2['name']); $page_data->AddData('keywords', $row2['name']);
$tag_tags[]=($seo== 'Y') ? '<a href='.$page_url. '/' . $user_language. '/' . $page_sprache->tag . '/' . strtolower(szrp($row2['name'])).'/>'.$row2['name'].'</a>' : '<a href='.$page_url.'/index.php?site=tag&amp;tag='.strtolower(szrp($row2['name'])).'/>'.$row2['name'].'</a>'; $tag_tags[] = ($seo == 'Y') ? '<a href=' . $page_url. '/' . $user_language. '/' . $page_sprache->tag . '/' . strtolower(szrp($row2['name'])) . '/>' . $row2['name'] . '</a>' : '<a href=' . $page_url . '/index.php?site=tag&amp;tag=' . strtolower(szrp($row2['name'])) . '/>' . $row2['name'] . '</a>';
} }
} }
$breadcrumbs = array(); $breadcrumbs = array();
$query = $sql->prepare("SELECT p.`id`,p.`subpage`,t.`title` FROM `page_pages` p LEFT JOIN `page_pages_text` t ON p.`id`=t.`pageid` WHERE p.`id`=? AND t.`language`=? AND `type`='page' AND p.`released`='1' AND p.`resellerid`='0' LIMIT 1"); $query = $sql->prepare("SELECT p.`id`,p.`subpage`,t.`title` FROM `page_pages` p LEFT JOIN `page_pages_text` t ON p.`id`=t.`pageid` WHERE p.`id`=? AND t.`language`=? AND `type`='page' AND p.`released`='1' AND p.`resellerid`='0' LIMIT 1");
while (isset($breadcrumbID) and isid($breadcrumbID,19) and $breadcrumbID != $breadcrumbPageID) {
$query->execute(array($breadcrumbID,$user_language)); while (isset($breadcrumbID) and isid($breadcrumbID, 19) and $breadcrumbID != $breadcrumbPageID) {
$query->execute(array($breadcrumbID, $user_language));
unset($breadcrumbID); unset($breadcrumbID);
foreach ($query->fetchAll(PDO::FETCH_ASSOC) as $row) { foreach ($query->fetchAll(PDO::FETCH_ASSOC) as $row) {
$link=(isset($seo) and $seo== 'Y') ? $page_data->pageurl. '/' . $user_language . '/' . szrp($row['title']).'/' : $page_data->pageurl.'?s=page&amp;l='.$user_language.'&amp;id='.$row['id'];
$breadcrumbs[] = array('href' => '<a href="'.$link.'">'.$row['title'].'</a>','link' => $link); $link = (isset($seo) and $seo == 'Y') ? $page_data->pageurl . '/' . $user_language . '/' . szrp($row['title']) . '/' : $page_data->pageurl . '?s=page&amp;l=' . $user_language . '&amp;id=' . $row['id'];
$breadcrumbs[] = array('href' => '<a href="' . $link . '">' . $row['title'] . '</a>', 'link' => $link);
$breadcrumbID = $row['subpage']; $breadcrumbID = $row['subpage'];
$breadcrumbPageID = $row['id']; $breadcrumbPageID = $row['id'];
} }
} }
$breadcrumbs=array_reverse($breadcrumbs);
$breadcrumbs = array_reverse($breadcrumbs);
$template_file = (isset($page_title)) ? 'page_page.tpl' : 'page_404.tpl'; $template_file = (isset($page_title)) ? 'page_page.tpl' : 'page_404.tpl';
} else if ($s == 'about') { } else if ($s == 'about') {
$query = $sql->prepare("SELECT t.`text` FROM `page_pages` p LEFT JOIN `page_pages_text` t ON p.`id`=t.`pageid` WHERE `type`='about' AND t.`language`=? AND p.`resellerid`='0' LIMIT 1");
$query->execute(array($user_language));
$page_text=nl2br($query->fetchColumn());
$page_title = $page_sprache->about;
$page_keywords = array(); $page_keywords = array();
$tag_tags = array(); $tag_tags = array();
$query = $sql->prepare("SELECT t.`text` FROM `page_pages` p LEFT JOIN `page_pages_text` t ON p.`id`=t.`pageid` WHERE `type`='about' AND t.`language`=? AND p.`resellerid`='0' LIMIT 1");
$query->execute(array($user_language));
$page_text = nl2br($query->fetchColumn());
$page_title = $page_sprache->about;
$page_data->title = $page_sprache->about;
$page_data->setCanonicalUrl($s); $page_data->setCanonicalUrl($s);
$template_file = 'page_page.tpl'; $template_file = 'page_page.tpl';
} else if ($s == 'search') { } else if ($s == 'search') {
$searchStringValue=htmlentities($ui->escaped('search', 'post'),ENT_QUOTES,'UTF-8');
$searchStringValue = htmlentities($ui->escaped('search', 'post'), ENT_QUOTES, 'UTF-8');
if ($ui->escaped('search', 'post')) { if ($ui->escaped('search', 'post')) {
$results = array(); $results = array();
$searchFor=array('general' => array(),'exact' => array()); $searchFor = array('general' => array(),'exact' => array());
$searchString=preg_replace("/\s+/",' ',$ui->escaped('search', 'post')); $searchString = preg_replace("/\s+/",' ', $ui->escaped('search', 'post'));
$searchFor['exact'][]=strtolower($searchString); $searchFor['exact'][]=strtolower($searchString);
if (strpos($searchString,'"') === false) { if (strpos($searchString,'"') === false) {
foreach (preg_split('/\s+/',$searchString,-1,PREG_SPLIT_NO_EMPTY) as $v) $searchFor['general'][]=strtolower($v);
foreach (preg_split('/\s+/', $searchString, -1, PREG_SPLIT_NO_EMPTY) as $v) {
$searchFor['general'][] = strtolower($v);
}
} else { } else {
$checkForEnd = false; $checkForEnd = false;
$split=explode('"',$searchString); $split = explode('"', $searchString);
foreach ($split as $v) { foreach ($split as $v) {
if ($v != '' and $checkForEnd == false) { if ($v != '' and $checkForEnd == false) {
foreach (preg_split('/\s+/',$v,-1,PREG_SPLIT_NO_EMPTY) as $v2) $searchFor['general'][]=strtolower($v2);
foreach (preg_split('/\s+/', $v, -1, PREG_SPLIT_NO_EMPTY) as $v2) {
$searchFor['general'][]=strtolower($v2);
}
$checkForEnd = true; $checkForEnd = true;
} else if ($v != '' and $checkForEnd == true) { } else if ($v != '' and $checkForEnd == true) {
$searchFor['exact'][]=strtolower($v);
$searchFor['exact'][] = strtolower($v);
$checkForEnd = false; $checkForEnd = false;
} else if ($v== '' and $checkForEnd == false) { } else if ($v== '' and $checkForEnd == false) {
$checkForEnd = true; $checkForEnd = true;
} }
} }
} }
$searchFor['exact'] = array_unique($searchFor['exact']); $searchFor['exact'] = array_unique($searchFor['exact']);
$searchFor['general'] = array_unique($searchFor['general']); $searchFor['general'] = array_unique($searchFor['general']);
function returnRating ($value,$exact=false) {
global $sql,$newssidebar_textlength,$page_data,$results,$seo; function returnRating ($value, $exact = false) {
global $sql, $newssidebar_textlength, $page_data, $results, $seo;
$query = $sql->prepare("SELECT t.`id`,p.`id` AS `pageID`,p.`type`,t.`shortlink`,t.`title`,t.`text`,t.`language` FROM `page_pages` p LEFT JOIN `page_pages_text` t ON p.`id`=t.`pageid` WHERE p.`released`=1 AND p.`resellerid`=0 AND (LOWER(t.`shortlink`) LIKE :search OR LOWER(t.`title`) LIKE :search OR LOWER(t.`text`) LIKE :search)"); $query = $sql->prepare("SELECT t.`id`,p.`id` AS `pageID`,p.`type`,t.`shortlink`,t.`title`,t.`text`,t.`language` FROM `page_pages` p LEFT JOIN `page_pages_text` t ON p.`id`=t.`pageid` WHERE p.`released`=1 AND p.`resellerid`=0 AND (LOWER(t.`shortlink`) LIKE :search OR LOWER(t.`title`) LIKE :search OR LOWER(t.`text`) LIKE :search)");
$query->execute(array(':search' => '%'.$value.'%')); $query->execute(array(':search' => '%' . $value . '%'));
foreach ($query->fetchAll(PDO::FETCH_ASSOC) as $row) { foreach ($query->fetchAll(PDO::FETCH_ASSOC) as $row) {
if (!isset($titleLanguages[$row['language']])) { if (!isset($titleLanguages[$row['language']])) {
$titleLanguages[$row['language']] = array('page' => getlanguagefile('page', $row['language'],0),'general' => getlanguagefile('general', $row['language'],0)); $titleLanguages[$row['language']] = array('page' => getlanguagefile('page', $row['language'], 0), 'general' => getlanguagefile('general', $row['language'], 0));
}
if (strlen($row['text'])<=$newssidebar_textlength) {
$text = $row['text'];
} else {
$text=substr($row['text'],0,$newssidebar_textlength).' ...';
} }
$text = (strlen($row['text']) <= $newssidebar_textlength) ? $row['text'] : substr($row['text'], 0, $newssidebar_textlength) . ' ...';
$title = $row['title']; $title = $row['title'];
if ($row['type'] == 'news' and isset($seo) and $seo== 'Y') {
$type=(string)$titleLanguages[$row['language']]['general']->news; if ($row['type'] == 'news' and isset($seo) and $seo == 'Y') {
$link = $page_data->pageurl. '/' . $row['language'] . '/' . szrp($titleLanguages[$row['language']]['general']->news) . '/' . szrp($row['title']) . '/';
$type = (string) $titleLanguages[$row['language']]['general']->news;
$link = $page_data->pageurl . '/' . $row['language'] . '/' . szrp($titleLanguages[$row['language']]['general']->news) . '/' . szrp($row['title']) . '/';
} else if ($row['type'] == 'news') { } else if ($row['type'] == 'news') {
$type=(string)$titleLanguages[$row['language']]['general']->news;
$link = $page_data->pageurl.'?s=news&amp;l='.$row['language'].'&amp;id='.$row['pageID']; $type = (string) $titleLanguages[$row['language']]['general']->news;
} else if ($row['type'] == 'page' and isset($seo) and $seo== 'Y') { $link = $page_data->pageurl . '?s=news&amp;l=' . $row['language'] . '&amp;id=' . $row['pageID'];
$type=(string)$titleLanguages[$row['language']]['general']->page;
$link = $page_data->pageurl. '/' . $row['language'] . '/' . szrp($row['title']) . '/'; } else if ($row['type'] == 'page' and isset($seo) and $seo == 'Y') {
$type = (string) $titleLanguages[$row['language']]['general']->page;
$link = $page_data->pageurl . '/' . $row['language'] . '/' . szrp($row['title']) . '/';
} else if ($row['type'] == 'page') { } else if ($row['type'] == 'page') {
$type=(string)$titleLanguages[$row['language']]['general']->page;
$link = $page_data->pageurl.'?s=page&amp;l='.$row['language'].'&amp;id='.$row['pageID']; $type = (string) $titleLanguages[$row['language']]['general']->page;
} else if ($row['type'] == 'about' and isset($seo) and $seo== 'Y') { $link = $page_data->pageurl . '?s=page&amp;l=' . $row['language'] . '&amp;id=' . $row['pageID'];
$type=(string)$titleLanguages[$row['language']]['page']->about;
$title=(string)$titleLanguages[$row['language']]['page']->about; } else if ($row['type'] == 'about' and isset($seo) and $seo == 'Y') {
$link = $page_data->pageurl. '/' . $row['language'] . '/' . szrp($titleLanguages[$row['language']]['page']->about) . '/';
$type = (string) $titleLanguages[$row['language']]['page']->about;
$title = (string) $titleLanguages[$row['language']]['page']->about;
$link = $page_data->pageurl . '/' . $row['language'] . '/' . szrp($titleLanguages[$row['language']]['page']->about) . '/';
} else if ($row['type'] == 'about') { } else if ($row['type'] == 'about') {
$type=(string)$titleLanguages[$row['language']]['page']->about;
$title=(string)$titleLanguages[$row['language']]['page']->about; $type = (string) $titleLanguages[$row['language']]['page']->about;
$link = $page_data->pageurl.'/?s=news&amp;l='.$row['language']; $title = (string) $titleLanguages[$row['language']]['page']->about;
$link = $page_data->pageurl . '/?s=news&amp;l=' . $row['language'];
} }
if (!isset($link)) { if (!isset($link)) {
$link='#'; $link='#';
} }
if ($exact == true) { if ($exact == true) {
$worth=substr_count(strtolower($row['title']),strtolower($value))*16; $worth = substr_count(strtolower($row['title']), strtolower($value)) * 16;
$worth+=substr_count(strtolower($row['text']),strtolower($value))*2; $worth += substr_count(strtolower($row['text']), strtolower($value)) * 2;
} else { } else {
$worth=substr_count(strtolower($row['title']),strtolower($value))*12; $worth = substr_count(strtolower($row['title']), strtolower($value)) * 12;
$worth+=substr_count(strtolower($row['text']),strtolower($value)); $worth += substr_count(strtolower($row['text']), strtolower($value));
} }
$href='<a href="'.$link.'" title="'.$title.'">'.$title.'</a>';
$href = '<a href="' . $link.'" title="' . $title.'">' . $title.'</a>';
if (isset($results[$row['id']])) { if (isset($results[$row['id']])) {
$oldWorth = $results[$row['id']]['worth']; $oldWorth = $results[$row['id']]['worth'];
$hits = $results[$row['id']]['hits']; $hits = $results[$row['id']]['hits'];
$hits[] = $value; $hits[] = $value;
$hits=array_unique($hits); $hits = array_unique($hits);
$worth+=$oldWorth; $worth += $oldWorth;
unset($results[$row['id']]); unset($results[$row['id']]);
} else { } else {
$hits=array($value); $hits=array($value);
} }
$results[$row['id']] = array('textID' => $row['id'], 'pageID' => $row['pageID'], 'language' => $row['language'], 'type' => $type,'worth' => $worth,'href' => $href,'title' => $title,'link' => $link,'text' => str_replace('%url%',$page_data->pageurl,$text),'hits' => $hits);
$results[$row['id']] = array('textID' => $row['id'], 'pageID' => $row['pageID'], 'language' => $row['language'], 'type' => $type, 'worth' => $worth, 'href' => $href, 'title' => $title, 'link' => $link, 'text' => str_replace('%url%', $page_data->pageurl, $text), 'hits' => $hits);
} }
return $results; return $results;
} }
foreach ($searchFor['general'] as $v) {
foreach (returnRating($v) as $key=>$val) {
$results[$key] = $val;
}
}
foreach ($searchFor['exact'] as $v) {
foreach (returnRating($v) as $key=>$val) {
$results[$key] = $val;
}
}
$resultsArray = array(); $resultsArray = array();
foreach ($searchFor['general'] as $v) {
foreach (returnRating($v) as $key => $val) {
$results[$key] = $val;
}
}
foreach ($searchFor['exact'] as $v) {
foreach (returnRating($v) as $key => $val) {
$results[$key] = $val;
}
}
foreach ($results as $k => $v) { foreach ($results as $k => $v) {
unset($results[$k]); unset($results[$k]);
$resultsArray[$v['worth']][$v['textID']] = $v; $resultsArray[$v['worth']][$v['textID']] = $v;
} }
krsort($resultsArray); krsort($resultsArray);
$results = array(); $results = array();
$exists = array(); $exists = array();
foreach ($resultsArray as $key=>$val) {
foreach ($resultsArray as $key => $val) {
foreach ($val as $k => $v) { foreach ($val as $k => $v) {
if (!in_array($key,$exists)) { if (!in_array($key, $exists)) {
unset($resultsArray[$key][$k]); unset($resultsArray[$key][$k]);
$results[] = $v; $results[] = $v;
$exists[] = $key; $exists[] = $key;
} }
} }
} }
unset($resultsArray,$searchFor,$searchString,$exists);
unset($resultsArray, $searchFor, $searchString, $exists);
} }
$page_data->setCanonicalUrl($s); $page_data->setCanonicalUrl($s);
$page_data->title = $page_sprache->search;
$template_file = 'page_search.tpl'; $template_file = 'page_search.tpl';
} else if ($s == 'home') { } else if ($s == 'home') {
$page_data->setCanonicalUrl(); $page_data->setCanonicalUrl();
$template_file = 'page_home.tpl'; $template_file = 'page_home.tpl';
} else if ($s == 'sitemap') { } else if ($s == 'sitemap') {
$page_data->setCanonicalUrl($s); $page_data->setCanonicalUrl($s);
$page_data->title = $page_sprache->sitemap;
$template_file = 'page_sitemap.tpl'; $template_file = 'page_sitemap.tpl';
} else if ($s == 'gallery') { } else if ($s == 'gallery') {
$page_data->setCanonicalUrl($s); $page_data->setCanonicalUrl($s);
$page_data->title = $page_sprache->gallery;
$template_file = 'page_gallery.tpl'; $template_file = 'page_gallery.tpl';
} else if (isset($admin_id) and $ui->smallletters('preview',4, 'get') == 'true') {
} else if (isset($admin_id) and $ui->smallletters('preview', 4, 'get') == 'true') {
$page_keywords = array();
$tag_tags = array();
if (is_array($ui->escaped('text', 'post')) or is_object($ui->escaped('text', 'post'))) { if (is_array($ui->escaped('text', 'post')) or is_object($ui->escaped('text', 'post'))) {
foreach ($ui->escaped('text', 'post') as $key=>$value) {
$page_title = $ui->htmlcode('title', 'post',$key); foreach ($ui->escaped('text', 'post') as $key => $value) {
$page_text=str_replace('%url%',$page_data->pageurl,$value); $page_title = $ui->htmlcode('title', 'post', $key);
$page_data->title = $ui->htmlcode('title', 'post', $key);
$page_text=str_replace('%url%', $page_data->pageurl, $value);
} }
} else { } else {
$page_title = $ui->escaped('title', 'post'); $page_title = $ui->escaped('title', 'post');
$page_text=str_replace('%url%',$page_data->pageurl,$ui->escaped('text', 'post')); $page_data->title = $ui->escaped('title', 'post');
$page_text=str_replace('%url%', $page_data->pageurl, $ui->escaped('text', 'post'));
} }
$page_keywords = array();
$tag_tags = array(); $template_file = (isset($page_title)) ? 'page_page.tpl' : 'page_404.tpl';
if (isset($page_title)) {
$template_file = 'page_page.tpl';
} else {
$template_file = 'page_404.tpl';
}
} }
// https://github.com/easy-wi/developer/issues/62 // https://github.com/easy-wi/developer/issues/62
$langLinks = array(); $langLinks = array();
if (isset($s) and $s == 'page') { if (isset($s) and $s == 'page') {
$query = $sql->prepare("SELECT `title`,`language` FROM `page_pages_text` WHERE `pageid`=?"); $query = $sql->prepare("SELECT `title`,`language` FROM `page_pages_text` WHERE `pageid`=?");
$query->execute(array($page_id)); $query->execute(array($page_id));
foreach ($query->fetchAll(PDO::FETCH_ASSOC) as $row) $langLinks[$row['language']]=($page_data->seo== 'Y') ? szrp($row['title']) : '?s=page&amp;id='.$page_id; foreach ($query->fetchAll(PDO::FETCH_ASSOC) as $row) {
} else if (isset($s)) { $langLinks[$row['language']] = ($page_data->seo == 'Y') ? szrp($row['title']) : '?s=page&amp;id=' . $page_id;
foreach ($languages as $l) {
$tempLanguage = getlanguagefile('page',$l,0);
$langLinks[$l]=($page_data->seo== 'Y') ? szrp($tempLanguage->$s) : '?s='.$s;
} }
} else if (isset($s)) {
foreach ($languages as $l) {
$tempLanguage = getlanguagefile('page', $l, 0);
$langLinks[$l] = ($page_data->seo== 'Y') ? szrp($tempLanguage->$s) : '?s=' . $s;
}
} }
$page_data->langLinks($langLinks); $page_data->langLinks($langLinks);

5
web/stuff/roots_subnets.php
View File

@ -54,6 +54,7 @@ $id = $ui->id('id', 10, 'get');
// CSFR protection with hidden tokens. If token(true) returns false, we likely have an attack // CSFR protection with hidden tokens. If token(true) returns false, we likely have an attack
if ($ui->w('action',4, 'post') and !token(true)) { if ($ui->w('action',4, 'post') and !token(true)) {
$template_file = $spracheResponse->token; $template_file = $spracheResponse->token;
// Add and modify entries. Same validation can be used. // Add and modify entries. Same validation can be used.
@ -190,6 +191,10 @@ option domain-name-servers 1.1.1.1;';
$rowCount = $query->rowCount(); $rowCount = $query->rowCount();
$loguseraction = '%mod% %subnets% ' . $subnet; $loguseraction = '%mod% %subnets% ' . $subnet;
if ($rowCount > 0) {
# insert job to change dhcp server config
}
} }
// Check if a row was affected during insert or update // Check if a row was affected during insert or update

5
web/stuff/userpanel_restartcalendar.php
View File

@ -299,11 +299,14 @@ if ($ui->smallletters('edit',4, 'post') == 'edit' and isset($serverip) and isset
$pupdate->execute(array($template, $anticheat, $protected, $gsswitch, $map, $ui->mapname('mapGroup', 'post'), $restart, $backup, $worldsafe, $stvupload, $date, $id, $user_id, $reseller_id)); $pupdate->execute(array($template, $anticheat, $protected, $gsswitch, $map, $ui->mapname('mapGroup', 'post'), $restart, $backup, $worldsafe, $stvupload, $date, $id, $user_id, $reseller_id));
} }
$template_file = $spracheResponse->table_add; $template_file = $spracheResponse->table_add;
} else if ($ui->smallletters('delete',6, 'post') == 'delete' and $ui->gamestring('date', 'post') and isset($serverip) and isset($port)) {
} else if ($ui->smallletters('delete', 6, 'post') == 'delete' and $ui->gamestring('date', 'post') and isset($serverip) and isset($port)) {
$date = $ui->gamestring('date', 'post'); $date = $ui->gamestring('date', 'post');
$pdelete = $sql->prepare("DELETE FROM `gserver_restarts` WHERE `restarttime`=? AND `switchID`=? AND `resellerid`=? LIMIT 1"); $pdelete = $sql->prepare("DELETE FROM `gserver_restarts` WHERE `restarttime`=? AND `switchID`=? AND `resellerid`=? LIMIT 1");
$pdelete->execute(array($date, $id, $reseller_id)); $pdelete->execute(array($date, $id, $reseller_id));
$template_file = $spracheResponse->table_del;; $template_file = $spracheResponse->table_del;;
} else if (isset($serverip) and isset($port)){ } else if (isset($serverip) and isset($port)){
$backup = 'N'; $backup = 'N';