Просмотр файла album.php

Конкурс дизайнеров на 15000 рублей
Скрипты | CMS | Боты
Размер файла: 131.55Kb 
  1. <?php
  2. /***************************************************************************
  3.  *                                mides.ru
  4.  *                            -------------------
  5.  ***************************************************************************/
  6. define('IN_PHPBB', true);
  7. $phpbb_root_path = './';
  8. $album_root_path = $phpbb_root_path . 'album_mod/';
  9. $opera_mini = "./opera_mini";
  10. include($phpbb_root_path . 'extension.inc');
  11. include($phpbb_root_path . 'common.'.$phpEx);
  12. include($phpbb_root_path . 'includes/functions_validate.'.$phpEx);
  13. include($phpbb_root_path . 'includes/bbcode.'.$phpEx);
  14.  
  15. $userdata = session_pagestart($user_ip, PAGE_ALBUM);
  16. init_userprefs($userdata);
  17.  
  18. include($album_root_path . 'album_common.'.$phpEx);
  19.  
  20. if ( isset($HTTP_GET_VARS['action']) || isset($HTTP_POST_VARS['action']) )
  21. {
  22. 	$action = ( isset($HTTP_POST_VARS['action']) ) ? htmlspecialchars($HTTP_POST_VARS['action']) : htmlspecialchars($HTTP_GET_VARS['action']);
  23. }
  24. else
  25. {
  26. 	$action = '';
  27. }
  28.  
  29. if ( $action == 'cat' )
  30. {
  31. 	if( isset($HTTP_POST_VARS['cat_id']) )
  32. 	{
  33. 		$cat_id = intval($HTTP_POST_VARS['cat_id']);
  34. 	}
  35. 	else if( isset($HTTP_GET_VARS['cat_id']) )
  36. 	{
  37. 		$cat_id = intval($HTTP_GET_VARS['cat_id']);
  38. 	}
  39. 	else
  40. 	{
  41. 		message_die(GENERAL_ERROR, 'No categories specified');
  42. 	}
  43.  
  44. 	if ($cat_id == PERSONAL_GALLERY)
  45. 	{
  46. 		redirect(append_sid("album.$phpEx?action=personal"));
  47. 	}
  48.  
  49. 	$sql = "SELECT c.*, COUNT(p.pic_id) AS count
  50. 		FROM ". ALBUM_CAT_TABLE ." AS c LEFT JOIN ". ALBUM_TABLE ." AS p ON c.cat_id = p.pic_cat_id
  51. 		WHERE c.cat_id <> 0
  52. 		GROUP BY c.cat_id
  53. 		ORDER BY cat_order";
  54. 	if( !($result = $db->sql_query($sql)) )
  55. 	{
  56. 		message_die(GENERAL_ERROR, 'Could not query category information', '', __LINE__, __FILE__, $sql);
  57. 	}
  58.  
  59. 	$thiscat = array();
  60. 	$catrows = array();
  61.  
  62. 	while( $row = $db->sql_fetchrow($result) )
  63. 	{
  64. 		$album_user_access = album_user_access($row['cat_id'], $row, 1, 0, 0, 0, 0, 0); // VIEW
  65. 		if ($album_user_access['view'] == 1)
  66. 		{
  67. 			$catrows[] = $row;
  68.  
  69. 			if( $row['cat_id'] == $cat_id )
  70. 			{
  71. 				$thiscat = $row;
  72. 				$auth_data = album_user_access($cat_id, $row, 1, 1, 1, 1, 1, 1); // ALL
  73. 				$total_pics = $thiscat['count'];
  74. 			}
  75. 		}
  76. 	}
  77.  
  78. 	if (empty($thiscat))
  79. 	{
  80. 		message_die(GENERAL_MESSAGE, $lang['Category_not_exist']);
  81. 	}
  82.  
  83. 	if( !$auth_data['view'] )
  84. 	{
  85. 		if (!$userdata['session_logged_in'])
  86. 		{
  87. 			redirect(append_sid("login.$phpEx?redirect=album.$phpEx&action=cat&cat_id=$cat_id"));		
  88. 		}
  89. 		else
  90. 		{
  91. 			message_die(GENERAL_ERROR, $lang['Not_Authorised']);
  92. 		}
  93. 	}
  94.  
  95. 	$auth_key = array_keys($auth_data);
  96.  
  97. 	$auth_list = '';
  98. 	for ($i = 0; $i < (count($auth_data) - 1); $i++)
  99. 	{
  100. 		if( ( ($album_config['rate'] == 0) and ($auth_key[$i] == 'rate') ) or ( ($album_config['comment'] == 0) and ($auth_key[$i] == 'comment') ) )
  101. 		{
  102. 			continue;
  103. 		}
  104.  
  105. 		$auth_list .= ($auth_data[$auth_key[$i]] == 1) ? $lang['Album_'. $auth_key[$i] .'_can'] : $lang['Album_'. $auth_key[$i] .'_cannot'];
  106. 		$auth_list .= '<br />';
  107. 	}
  108.  
  109. 	if( ($userdata['user_level'] == ADMIN) or ($auth_data['moderator'] == 1) )
  110. 	{
  111. 		$auth_list .= sprintf($lang['Album_moderate_can'], '<a href="'. append_sid("album.$phpEx?action=modcp&amp;cat_id=$cat_id") .'">', '</a>');
  112. 		$moderka = '<a href="'. append_sid("album.$phpEx?action=modcp&amp;cat_id=$cat_id") .'">'.$lang['Album_moderka'].'</a>';
  113. 	}
  114.  
  115. 	$grouprows = array();
  116. 	$moderators_list = '';
  117.  
  118. 	if ($thiscat['cat_moderator_groups'] != '')
  119. 	{
  120. 		$sql = "SELECT group_id, group_name, group_type, group_single_user
  121. 			FROM " . GROUPS_TABLE . "
  122. 			WHERE group_single_user <> 1
  123. 				AND group_type <> ". GROUP_HIDDEN ."
  124. 				AND group_id IN (". $thiscat['cat_moderator_groups'] .")
  125. 			ORDER BY group_name ASC";
  126. 		if ( !$result = $db->sql_query($sql) )
  127. 		{
  128. 			message_die(GENERAL_ERROR, 'Could not get group list', '', __LINE__, __FILE__, $sql);
  129. 		}
  130.  
  131. 		while( $row = $db->sql_fetchrow($result) )
  132. 		{
  133. 			$grouprows[] = $row;
  134. 		}
  135.  
  136. 		if( count($grouprows) > 0 )
  137. 		{
  138. 			for ($j = 0; $j < count($grouprows); $j++)
  139. 			{
  140. 				$group_link = '<a href="'. append_sid("groupcp.$phpEx?". POST_GROUPS_URL .'='. $grouprows[$j]['group_id']) .'">'. $grouprows[$j]['group_name'] .'</a>';
  141. 				$moderators_list .= ($moderators_list == '') ? $group_link : ', ' . $group_link;
  142. 			}
  143. 		}
  144. 	}
  145.  
  146. 	if( empty($moderators_list) )
  147. 	{
  148. 		$moderators_list = $lang['None'];
  149. 	}
  150.  
  151. 	if( isset($HTTP_GET_VARS['start']) )
  152. 	{
  153. 		$start = intval($HTTP_GET_VARS['start']);
  154. 	}
  155. 	else if( isset($HTTP_POST_VARS['start']) )
  156. 	{
  157. 		$start = intval($HTTP_POST_VARS['start']);
  158. 	}
  159. 	else
  160. 	{
  161. 		$start = 0;
  162. 	}
  163. 	$start = ($start < 0) ? 0 : $start;
  164.  
  165. 	if( isset($HTTP_GET_VARS['sort_method']) )
  166. 	{
  167. 		switch ($HTTP_GET_VARS['sort_method'])
  168. 		{
  169. 			case 'pic_time':
  170. 				$sort_method = 'p.pic_time';
  171. 				break;
  172. 			case 'pic_title':
  173. 				$sort_method = 'p.pic_title';
  174. 				break;
  175. 			case 'username':
  176. 				$sort_method = 'u.username';
  177. 				break;
  178. 			case 'pic_view_count':
  179. 				$sort_method = 'p.pic_view_count';
  180. 				break;
  181. 			case 'rating':
  182. 				$sort_method = 'rating';
  183. 				break;
  184. 			case 'comments':
  185. 				$sort_method = 'comments';
  186. 				break;
  187. 			case 'new_comment':
  188. 				$sort_method = 'new_comment';
  189. 				break;
  190. 			default:
  191. 				$sort_method = $album_config['sort_method'];
  192. 		}
  193. 	}
  194. 	else if( isset($HTTP_POST_VARS['sort_method']) )
  195. 	{
  196. 		switch ($HTTP_POST_VARS['sort_method'])
  197. 		{
  198. 			case 'pic_time':
  199. 				$sort_method = 'p.pic_time';
  200. 				break;
  201. 			case 'pic_title':
  202. 				$sort_method = 'p.pic_title';
  203. 				break;
  204. 			case 'username':
  205. 				$sort_method = 'u.username';
  206. 				break;
  207. 			case 'pic_view_count':
  208. 				$sort_method = 'p.pic_view_count';
  209. 				break;
  210. 			case 'rating':
  211. 				$sort_method = 'rating';
  212. 				break;
  213. 			case 'comments':
  214. 				$sort_method = 'comments';
  215. 				break;
  216. 			case 'new_comment':
  217. 				$sort_method = 'new_comment';
  218. 				break;
  219. 			default:
  220. 				$sort_method = $album_config['sort_method'];
  221. 		}
  222. 	}
  223. 	else
  224. 	{
  225. 		$sort_method = $album_config['sort_method'];
  226. 	}
  227.  
  228. 	if( isset($HTTP_GET_VARS['sort_order']) )
  229. 	{
  230. 		switch ($HTTP_GET_VARS['sort_order'])
  231. 		{
  232. 			case 'ASC':
  233. 				$sort_order = 'ASC';
  234. 				break;
  235. 			case 'DESC':
  236. 				$sort_order = 'DESC';
  237. 				break;
  238. 			default:
  239. 				$sort_order = $album_config['sort_order'];
  240. 		}
  241. 	}
  242. 	else if( isset($HTTP_POST_VARS['sort_order']) )
  243. 	{
  244. 		switch ($HTTP_POST_VARS['sort_order'])
  245. 		{
  246. 			case 'ASC':
  247. 				$sort_order = 'ASC';
  248. 				break;
  249. 			case 'DESC':
  250. 				$sort_order = 'DESC';
  251. 				break;
  252. 			default:
  253. 				$sort_order = $album_config['sort_order'];
  254. 		}
  255. 	}
  256. 	else
  257. 	{
  258. 		$sort_order = $album_config['sort_order'];
  259. 	}
  260.  
  261. 	$pics_per_page = $album_config['rows_per_page'] * $album_config['cols_per_page'];
  262.  
  263. 	if ($total_pics > 0)
  264. 	{
  265. 		$limit_sql = ($start == 0) ? $pics_per_page : $start .','. $pics_per_page;
  266.  
  267. 		$pic_approval_sql = 'AND p.pic_approval = 1';
  268. 		if ($thiscat['cat_approval'] != ALBUM_USER)
  269. 		{
  270. 			if( ($userdata['user_level'] == ADMIN) or (($auth_data['moderator'] == 1) and ($thiscat['cat_approval'] == ALBUM_MOD)) )
  271. 			{
  272. 				$pic_approval_sql = '';
  273. 			}
  274. 		}
  275.  
  276. 		$sql = "SELECT p.pic_id, p.pic_title, p.pic_desc, p.pic_user_id, p.pic_user_ip, p.pic_username, p.pic_time, p.pic_cat_id, p.pic_view_count, p.pic_lock, p.pic_approval, u.user_id, u.username, r.rate_pic_id, AVG(r.rate_point) AS rating, COUNT(DISTINCT c.comment_id) AS comments, MAX(c.comment_id) as new_comment
  277. 			FROM ". ALBUM_TABLE ." AS p
  278. 				LEFT JOIN ". USERS_TABLE ." AS u ON p.pic_user_id = u.user_id
  279. 				LEFT JOIN ". ALBUM_RATE_TABLE ." AS r ON p.pic_id = r.rate_pic_id
  280. 				LEFT JOIN ". ALBUM_COMMENT_TABLE ." AS c ON p.pic_id = c.comment_pic_id
  281. 			WHERE p.pic_cat_id = '$cat_id' $pic_approval_sql
  282. 			GROUP BY p.pic_id
  283. 			ORDER BY $sort_method $sort_order
  284. 			LIMIT $limit_sql";
  285. 		if( !($result = $db->sql_query($sql)) )
  286. 		{
  287. 			message_die(GENERAL_ERROR, 'Could not query pics information', '', __LINE__, __FILE__, $sql);
  288. 		}
  289.  
  290. 		$picrow = array();
  291.  
  292. 		while( $row = $db->sql_fetchrow($result) )
  293. 		{
  294. 			$picrow[] = $row;
  295. 		}
  296.  
  297.  
  298. 		for ($i = 0; $i < count($picrow); $i += $album_config['cols_per_page'])
  299. 		{
  300. 			for ($j = $i; $j < ($i + $album_config['cols_per_page']); $j++)
  301. 			{
  302. 				if( $j >= count($picrow) )
  303. 				{
  304. 					break;
  305. 				}
  306.  
  307. 				if(!$picrow[$j]['rating'])
  308. 				{
  309. 					$picrow[$j]['rating'] = $lang['Not_rated'];
  310. 				}
  311. 				else
  312. 				{
  313. 					$picrow[$j]['rating'] = round($picrow[$j]['rating'], 2);
  314. 				}
  315.  
  316. 				if ($thiscat['cat_approval'] != ALBUM_USER)
  317. 				{
  318. 					if( ($userdata['user_level'] == ADMIN) or (($auth_data['moderator'] == 1) and ($thiscat['cat_approval'] == ALBUM_MOD)) )
  319. 					{
  320. 						$approval_mode = ($picrow[$j]['pic_approval'] == 0) ? 'approval' : 'unapproval';
  321. 						$approval_link = '<a href="'. append_sid("album.$phpEx?action=modcp&amp;mode=$approval_mode&amp;pic_id=". $picrow[$j]['pic_id']) .'">';
  322. 						$approval_link .= ($picrow[$j]['pic_approval'] == 0) ? '<b>'. $lang['Approve'] .'</b>' : $lang['Unapprove'];
  323. 						$approval_link .= '</a><br/>';
  324. 					}
  325. 				}
  326.  
  327. 				if( ($picrow[$j]['user_id'] == ALBUM_GUEST) or ($picrow[$j]['username'] == '') )
  328. 				{
  329. 					$pic_poster = ($picrow[$j]['pic_username'] == '') ? $lang['Guest'] : $picrow[$j]['pic_username'];
  330. 				}
  331. 				else
  332. 				{
  333. 					$pic_poster = '<a href="'. append_sid("../pages/profile.$phpEx?mode=viewprofile&amp;". POST_USERS_URL .'='. $picrow[$j]['user_id']) .'">'. $picrow[$j]['username'] .'</a>';
  334. 				}
  335.  
  336. 				$template->assign_block_vars('picrow', array(
  337. 					'U_PIC' => ($album_config['fullpic_popup']) ? append_sid("album.$phpEx?action=pic&amp;pic_id=". $picrow[$j]['pic_id']) : append_sid("album.$phpEx?action=page&amp;pic_id=". $picrow[$j]['pic_id']),
  338. 					'TITLE' => $picrow[$j]['pic_title'],
  339. 					'ROW_CLASS' => $row_class,
  340. 					'POSTER' => $pic_poster,
  341. 					'TIME' => create_date($board_config['default_dateformat'], $picrow[$j]['pic_time'], $board_config['board_timezone']),
  342. 					'VIEW' => $picrow[$j]['pic_view_count'],
  343. 					'RATING' => ($album_config['rate'] == 1) ? ( '<a href="'. append_sid("album.$phpEx?action=rate&amp;pic_id=". $picrow[$j]['pic_id']) . '">' . $lang['Rating'] . '</a>: ' . $picrow[$j]['rating'] . '<br />') : '',
  344. 					'COMMENTS' => ($album_config['comment'] == 1) ? ( '<a href="'. append_sid("album.$phpEx?action=comment&amp;pic_id=". $picrow[$j]['pic_id']) . '">' . $lang['Comments'] . '</a>: ' . $picrow[$j]['comments'] . '<br />') : '',
  345. 					'EDIT' => ( ( $auth_data['edit'] and ($picrow[$j]['pic_user_id'] == $userdata['user_id']) ) or ($auth_data['moderator'] and ($thiscat['cat_edit_level'] != ALBUM_ADMIN) ) or ($userdata['user_level'] == ADMIN) ) ? '<a href="'. append_sid("album.$phpEx?action=edit&amp;pic_id=". $picrow[$j]['pic_id']) . '">' . $lang['Edit_pic'] . '</a>|' : '',
  346. 					'DELETE' => ( ( $auth_data['delete'] and ($picrow[$j]['pic_user_id'] == $userdata['user_id']) ) or ($auth_data['moderator'] and ($thiscat['cat_delete_level'] != ALBUM_ADMIN) ) or ($userdata['user_level'] == ADMIN) ) ? '<a href="'. append_sid("album.$phpEx?action=delete&amp;pic_id=". $picrow[$j]['pic_id']) . '">' . $lang['Delete_pic'] . '</a>|' : '',
  347. 					'MOVE' => ($auth_data['moderator']) ? '<a href="'. append_sid("album.$phpEx?action=modcp&amp;mode=move&amp;pic_id=". $picrow[$j]['pic_id']) .'">'. $lang['Move'] .'</a>' : '',
  348. 					'LOCK' => ($auth_data['moderator']) ? '<a href="'. append_sid("album.$phpEx?action=modcp&amp;mode=". (($picrow[$j]['pic_lock'] == 0) ? 'lock' : 'unlock') ."&amp;pic_id=". $picrow[$j]['pic_id']) .'">'. (($picrow[$j]['pic_lock'] == 0) ? $lang['Lock'] : $lang['Unlock']) .'</a>|' : '',
  349. 					'IP' => ($userdata['user_level'] == ADMIN) ? $lang['IP_Address'] . ': ' . decode_ip($picrow[$j]['pic_user_ip']) .'<br />' : ''
  350. 					)
  351. 				);
  352.  
  353. 				$template->assign_block_vars('picrow.piccol', array(
  354. 					'U_PIC' => ($album_config['fullpic_popup']) ? append_sid("album.$phpEx?action=pic&amp;pic_id=". $picrow[$j]['pic_id']) : append_sid("album.$phpEx?action=page&amp;pic_id=". $picrow[$j]['pic_id']),
  355. 					'THUMBNAIL' => append_sid("album.$phpEx?action=thumbnail&amp;pic_id=". $picrow[$j]['pic_id']),
  356. 					'DESC' => $picrow[$j]['pic_desc'],
  357. 					'APPROVAL' => $approval_link,
  358. 					)
  359. 				);
  360. 			}
  361. 		}
  362.  
  363. 		$template->assign_vars(array(
  364. 			'PAGINATION' => generate_pagination(append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id&amp;sort_method=$sort_method&amp;sort_order=$sort_order"), $total_pics, $pics_per_page, $start))
  365. 		);
  366. 	}
  367. 	else
  368. 	{
  369. 		$template->assign_block_vars('no_pics', array());
  370. 	}
  371.  
  372. 	$album_jumpbox = '<form name="jumpbox" action="'. append_sid("album.$phpEx?action=cat") .'" method="get">';
  373. 	$album_jumpbox .= $lang['Jump_to'] . ':&nbsp;<select name="cat_id" onChange="forms[\'jumpbox\'].submit()">';
  374. 	for ($i = 0; $i < count($catrows); $i++)
  375. 	{
  376. 		$album_jumpbox .= '<option value="'. $catrows[$i]['cat_id'] .'"';
  377. 		$album_jumpbox .= ($catrows[$i]['cat_id'] == $cat_id) ? 'selected="selected"' : '';
  378. 		$album_jumpbox .= '>' . $catrows[$i]['cat_title'] .'</option>';
  379. 	}
  380. 	$album_jumpbox .= '</select>';
  381. 	$album_jumpbox .= '&nbsp;<input type="submit" class="liteoption" value="'. $lang['Go'] .'" />';
  382. 	$album_jumpbox .= '<input type="hidden" name="sid" value="'. $userdata['session_id'] .'" />';
  383. 	$album_jumpbox .= '</form>';
  384.  
  385. 	$sort_rating_option = '';
  386. 	$sort_comments_option = '';
  387. 	if( $album_config['rate'] == 1 )
  388. 	{
  389. 		$sort_rating_option = '<option value="rating" ';
  390. 		$sort_rating_option .= ($sort_method == 'rating') ? 'selected="selected"' : '';
  391. 		$sort_rating_option .= '>' . $lang['Rating'] .'</option>';
  392. 	}
  393. 	if( $album_config['comment'] == 1 )
  394. 	{
  395. 		$sort_comments_option = '<option value="comments" ';
  396. 		$sort_comments_option .= ($sort_method == 'comments') ? 'selected="selected"' : '';
  397. 		$sort_comments_option .= '>' . $lang['Comments'] .'</option>';
  398. 		$sort_new_comment_option = '<option value="new_comment" ';
  399. 		$sort_new_comment_option .= ($sort_method == 'new_comment') ? 'selected="selected"' : '';
  400. 		$sort_new_comment_option .= '>' . $lang['New_Comment'] .'</option>';
  401. 	}
  402.  
  403. 	$page_title = 'Галерея сайта';
  404. 	include($phpbb_root_path . 'includes/page_header.'.$phpEx);
  405.  
  406. 	$template->set_filenames(array(
  407. 		'body' => 'album_cat_body.tpl')
  408. 	);
  409.  
  410. 	$template->assign_vars(array(
  411. 		'U_VIEW_CAT' => append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id"),
  412. 		'CAT_TITLE' => $thiscat['cat_title'],
  413. 		'L_MODERATORS' => $lang['Moderators'],
  414. 		'MODERATORS' => $moderators_list,
  415. 		'U_UPLOAD_PIC' => append_sid("album.$phpEx?action=upload&amp;cat_id=$cat_id"),
  416. 		'UPLOAD_PIC_IMG' => $images['upload_pic'],
  417. 		'L_UPLOAD_PIC' => $lang['Upload_Pic'],
  418. 		'L_CATEGORY' => $lang['Category'],
  419. 		'L_NO_PICS' => $lang['No_Pics'],
  420. 		'S_COLS' => $album_config['cols_per_page'],
  421. 		'S_COL_WIDTH' => (100/$album_config['cols_per_page']) . '%',
  422. 		'L_VIEW' => $lang['View'],
  423. 		'L_POSTER' => $lang['Poster'],
  424. 		'L_POSTED' => $lang['Posted'],
  425. 		'ALBUM_JUMPBOX' => $album_jumpbox,
  426. 		'S_ALBUM_ACTION' => append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id"),
  427. 		'TARGET_BLANK' => ($album_config['fullpic_popup']) ? 'target="_blank"' : '',
  428. 		'L_SELECT_SORT_METHOD' => $lang['Select_sort_method'],
  429. 		'L_ORDER' => $lang['Order'],
  430. 		'L_SORT' => $lang['Sort'],
  431. 		'L_TIME' => $lang['Time'],
  432. 		'L_PIC_TITLE' => $lang['Pic_Title'],
  433. 		'L_USERNAME' => $lang['Sort_Username'],
  434. 		'SORT_TIME' => ($sort_method == 'pic_time') ? 'selected="selected"' : '',
  435. 		'SORT_PIC_TITLE' => ($sort_method == 'pic_title') ? 'selected="selected"' : '',
  436. 		'SORT_USERNAME' => ($sort_method == 'pic_user_id') ? 'selected="selected"' : '',
  437. 		'SORT_VIEW' => ($sort_method == 'pic_view_count') ? 'selected="selected"' : '',
  438. 		'SORT_RATING_OPTION' => $sort_rating_option,
  439. 		'SORT_COMMENTS_OPTION' => $sort_comments_option,
  440. 		'SORT_NEW_COMMENT_OPTION' => $sort_new_comment_option,
  441. 		'L_ASC' => $lang['Sort_Ascending'],
  442. 		'L_DESC' => $lang['Sort_Descending'],
  443. 		'SORT_ASC' => ($sort_order == 'ASC') ? 'selected="selected"' : '',
  444. 		'SORT_DESC' => ($sort_order == 'DESC') ? 'selected="selected"' : '',
  445. 		'U_MODERKA' => $moderka,
  446. 		'S_AUTH_LIST' => $auth_list)
  447. 	);
  448.  
  449. 	$template->pparse('body');
  450.  
  451. 	include($phpbb_root_path . 'includes/page_tail.'.$phpEx);
  452.  
  453. } elseif ( $action == 'comment' ) {
  454.  
  455. 	if( $album_config['comment'] == 0 )
  456. 	{
  457. 		message_die(GENERAL_MESSAGE, $lang['Not_Authorised']);
  458. 	}
  459.  
  460. 	if( isset($HTTP_GET_VARS['pic_id']) )
  461. 	{
  462. 		$pic_id = intval($HTTP_GET_VARS['pic_id']);
  463. 	}
  464. 	else if( isset($HTTP_POST_VARS['pic_id']) )
  465. 	{
  466. 		$pic_id = intval($HTTP_POST_VARS['pic_id']);
  467. 	}
  468. 	else
  469. 	{
  470. 		if( isset($HTTP_GET_VARS['comment_id']) )
  471. 		{
  472. 			$comment_id = intval($HTTP_GET_VARS['comment_id']);
  473. 		}
  474. 		else if( isset($HTTP_POST_VARS['comment_id']) )
  475. 		{
  476. 			$comment_id = intval($HTTP_POST_VARS['comment_id']);
  477. 		}
  478. 		else
  479. 		{
  480. 			message_die(GENERAL_ERROR, 'Bad request');
  481. 		}
  482. 	}
  483.  
  484. if( isset($comment_id) )
  485. {
  486. 	$sql = "SELECT comment_id, comment_pic_id
  487. 			FROM ". ALBUM_COMMENT_TABLE ."
  488. 			WHERE comment_id = '$comment_id'";
  489.  
  490. 	if( !($result = $db->sql_query($sql)) )
  491. 	{
  492. 		message_die(GENERAL_ERROR, 'Could not query comment and pic information', '', __LINE__, __FILE__, $sql);
  493. 	}
  494.  
  495. 	$row = $db->sql_fetchrow($result);
  496.  
  497. 	if( empty($row) )
  498. 	{
  499. 		message_die(GENERAL_ERROR, 'This comment does not exist');
  500. 	}
  501.  
  502. 	$pic_id = $row['comment_pic_id'];
  503. }
  504.  
  505. $sql = "SELECT p.*, u.user_id, u.username, COUNT(c.comment_id) as comments_count
  506. 		FROM ". ALBUM_TABLE ." AS p
  507. 			LEFT JOIN ". USERS_TABLE ." AS u ON p.pic_user_id = u.user_id
  508. 			LEFT JOIN ". ALBUM_COMMENT_TABLE ." AS c ON p.pic_id = c.comment_pic_id
  509. 		WHERE pic_id = '$pic_id'
  510. 		GROUP BY p.pic_id
  511. 		LIMIT 1";
  512. if( !($result = $db->sql_query($sql)) )
  513. {
  514. 	message_die(GENERAL_ERROR, 'Could not query pic information', '', __LINE__, __FILE__, $sql);
  515. }
  516. $thispic = $db->sql_fetchrow($result);
  517.  
  518. $cat_id = $thispic['pic_cat_id'];
  519. $user_id = $thispic['pic_user_id'];
  520.  
  521. $total_comments = $thispic['comments_count'];
  522. $comments_per_page = $board_config['posts_per_page'];
  523.  
  524. if( empty($thispic) )
  525. {
  526. 	message_die(GENERAL_ERROR, $lang['Pic_not_exist'] . ' -> ' . $pic_id);
  527. }
  528.  
  529. if ($cat_id != PERSONAL_GALLERY)
  530. {
  531. 	$sql = "SELECT *
  532. 			FROM ". ALBUM_CAT_TABLE ."
  533. 			WHERE cat_id = '$cat_id'";
  534. 	if( !($result = $db->sql_query($sql)) )
  535. 	{
  536. 		message_die(GENERAL_ERROR, 'Could not query category information', '', __LINE__, __FILE__, $sql);
  537. 	}
  538.  
  539. 	$thiscat = $db->sql_fetchrow($result);
  540. }
  541. else
  542. {
  543. 	$thiscat = init_personal_gallery_cat($user_id);
  544. }
  545.  
  546. if (empty($thiscat))
  547. {
  548. 	message_die(GENERAL_ERROR, $lang['Category_not_exist']);
  549. }
  550.  
  551. $auth_data = album_user_access($cat_id, $thiscat, 1, 0, 0, 1, 1, 1);
  552.  
  553. if ($auth_data['view'] == 0)
  554. {
  555. 	if (!$userdata['session_logged_in'])
  556. 	{
  557. 		redirect(append_sid("login.$phpEx?redirect=album.$phpEx&action=comment&pic_id=$pic_id"));
  558. 		exit;
  559. 	}
  560. 	else
  561. 	{
  562. 		message_die(GENERAL_ERROR, $lang['Not_Authorised']);
  563. 	}
  564. }
  565.  
  566. if( !isset($HTTP_POST_VARS['comment']) )
  567. {
  568. 	if( !isset($comment_id) )
  569. 	{
  570. 		if( isset($HTTP_GET_VARS['start']) )
  571. 		{
  572. 			$start = intval($HTTP_GET_VARS['start']);
  573. 		}
  574. 		else if( isset($HTTP_POST_VARS['start']) )
  575. 		{
  576. 			$start = intval($HTTP_POST_VARS['start']);
  577. 		}
  578. 		else
  579. 		{
  580. 			$start = 0;
  581. 		}
  582. 		$start = ($start < 0) ? 0 : $start;
  583. 	}
  584. 	else
  585. 	{
  586. 		$sql = "SELECT COUNT(comment_id) AS count
  587. 				FROM ". ALBUM_COMMENT_TABLE ."
  588. 				WHERE comment_pic_id = $pic_id
  589. 					AND comment_id < $comment_id";
  590.  
  591. 		if( !$result = $db->sql_query($sql) )
  592. 		{
  593. 			message_die(GENERAL_ERROR, 'Could not obtain comments information from the database', '', __LINE__, __FILE__, $sql);
  594. 		}
  595.  
  596. 		$row = $db->sql_fetchrow($result);
  597.  
  598. 		if( !empty($row) )
  599. 		{
  600. 			$start = floor( $row['count'] / $comments_per_page ) * $comments_per_page;
  601. 		}
  602. 		else
  603. 		{
  604. 			$start = 0;
  605. 		}
  606. 	}
  607.  
  608. 	if( isset($HTTP_GET_VARS['sort_order']) )
  609. 	{
  610. 		switch ($HTTP_GET_VARS['sort_order'])
  611. 		{
  612. 			case 'ASC':
  613. 				$sort_order = 'ASC';
  614. 				break;
  615. 			default:
  616. 				$sort_order = 'DESC';
  617. 		}
  618. 	}
  619. 	else if( isset($HTTP_POST_VARS['sort_order']) )
  620. 	{
  621. 		switch ($HTTP_POST_VARS['sort_order'])
  622. 		{
  623. 			case 'ASC':
  624. 				$sort_order = 'ASC';
  625. 				break;
  626. 			default:
  627. 				$sort_order = 'DESC';
  628. 		}
  629. 	}
  630. 	else
  631. 	{
  632. 		$sort_order = 'ASC';
  633. 	}
  634.  
  635. 	if ($total_comments > 0)
  636. 	{
  637. 		$limit_sql = ($start == 0) ? $comments_per_page : $start .','. $comments_per_page;
  638.  
  639. 		$sql = "SELECT c.*, u.user_id, u.username
  640. 				FROM ". ALBUM_COMMENT_TABLE ." AS c
  641. 					LEFT JOIN ". USERS_TABLE ." AS u ON c.comment_user_id = u.user_id
  642. 				WHERE c.comment_pic_id = '$pic_id'
  643. 				ORDER BY c.comment_id $sort_order
  644. 				LIMIT $limit_sql";
  645.  
  646. 		if( !$result = $db->sql_query($sql) )
  647. 		{
  648. 			message_die(GENERAL_ERROR, 'Could not obtain comments information from the database', '', __LINE__, __FILE__, $sql);
  649. 		}
  650.  
  651. 		$commentrow = array();
  652.  
  653. 		while( $row = $db->sql_fetchrow($result) )
  654. 		{
  655. 			$commentrow[] = $row;
  656. 		}
  657.  
  658. 		for ($i = 0; $i < count($commentrow); $i++)
  659. 		{
  660. 			if( ($commentrow[$i]['user_id'] == ALBUM_GUEST) or ($commentrow[$i]['username'] == '') )
  661. 			{
  662. 				$poster = ($commentrow[$i]['comment_username'] == '') ? $lang['Guest'] : $commentrow[$i]['comment_username'];
  663. 			}
  664. 			else
  665. 			{
  666. 				$poster = '<a href="'. append_sid("../pages/profile.$phpEx?mode=viewprofile&amp;". POST_USERS_URL .'='. $commentrow[$i]['user_id']) .'">'. $commentrow[$i]['username'] .'</a>';
  667. 			}
  668.  
  669. 			if ($commentrow[$i]['comment_edit_count'] > 0)
  670. 			{
  671. 				$sql = "SELECT c.comment_id, c.comment_edit_user_id, u.user_id, u.username
  672. 						FROM ". ALBUM_COMMENT_TABLE ." AS c
  673. 							LEFT JOIN ". USERS_TABLE ." AS u ON c.comment_edit_user_id = u.user_id
  674. 						WHERE c.comment_id = '".$commentrow[$i]['comment_id']."'
  675. 						LIMIT 1";
  676.  
  677. 				if( !$result = $db->sql_query($sql) )
  678. 				{
  679. 					message_die(GENERAL_ERROR, 'Could not obtain last edit information from the database', '', __LINE__, __FILE__, $sql);
  680. 				}
  681.  
  682. 				$lastedit_row = $db->sql_fetchrow($result);
  683.  
  684. 				$edit_info = ($commentrow[$i]['comment_edit_count'] == 1) ? $lang['Edited_time_total'] : $lang['Edited_times_total'];
  685.  
  686. 				$edit_info = '<br /><br />&raquo;&nbsp;'. sprintf($edit_info, $lastedit_row['username'], create_date($board_config['default_dateformat'], $commentrow[$i]['comment_edit_time'], $board_config['board_timezone']), $commentrow[$i]['comment_edit_count']) .'<br />';
  687. 			}
  688. 			else
  689. 			{
  690. 				$edit_info = '';
  691. 			}
  692. 			$commentrow[$i]['comment_text'] = smilies_pass($commentrow[$i]['comment_text']);
  693. 			$row_class = ( !($i % 2) ) ? 'row_easy' : 'row_hard';
  694.  
  695. 			$template->assign_block_vars('commentrow', array(
  696. 				'ID' => $commentrow[$i]['comment_id'],
  697. 				'ROW_CLASS' => $row_class,
  698. 				'POSTER' => $poster,
  699. 				'TIME' => create_date($board_config['default_dateformat'], $commentrow[$i]['comment_time'], $board_config['board_timezone']),
  700. 				'IP' => ($userdata['user_level'] == ADMIN) ? '<br/>' . $lang['IP_Address'] . ': ' . decode_ip($commentrow[$i]['comment_user_ip']) : '',
  701. 				'TEXT' => nl2br($commentrow[$i]['comment_text']),
  702. 				'EDIT_INFO' => $edit_info,
  703. 				'EDIT' => ( ( $auth_data['edit'] and ($commentrow[$i]['comment_user_id'] == $userdata['user_id']) ) or ($auth_data['moderator'] and ($thiscat['cat_edit_level'] != ALBUM_ADMIN) ) or ($userdata['user_level'] == ADMIN) ) ? '<a href="'. append_sid("album.$phpEx?action=comment_edit&amp;comment_id=". $commentrow[$i]['comment_id']) .'">ред</a>|':'',
  704. 				'DELETE' => ( ( $auth_data['delete'] and ($commentrow[$i]['comment_user_id'] == $userdata['user_id']) ) or ($auth_data['moderator'] and ($thiscat['cat_delete_level'] != ALBUM_ADMIN) ) or ($userdata['user_level'] == ADMIN) ) ? '<a href="'. append_sid("album.$phpEx?action=comment_delete&amp;comment_id=". $commentrow[$i]['comment_id']) .'">уд</a>':''
  705. 				)
  706. 			);
  707. 		}
  708.  
  709. 		$template->assign_block_vars('switch_comment', array());
  710.  
  711. 		$template->assign_vars(array(
  712. 			'PAGINATION' => generate_pagination(append_sid("album.$phpEx?action=comment&amp;pic_id=$pic_id&amp;sort_order=$sort_order"), $total_comments, $comments_per_page, $start),
  713. 			'PAGE_NUMBER' => sprintf($lang['Page_of'], ( floor( $start / $comments_per_page ) + 1 ), ceil( $total_comments / $comments_per_page ))
  714. 			)
  715. 		);
  716. 	}
  717.  
  718. 	$page_title = 'Галерея сайта';
  719. 	include($phpbb_root_path . 'includes/page_header.'.$phpEx);
  720.  
  721. 	$template->set_filenames(array(
  722. 		'body' => 'album_comment_body.tpl')
  723. 	);
  724.  
  725. 	if( ($thispic['pic_user_id'] == ALBUM_GUEST) or ($thispic['username'] == '') )
  726. 	{
  727. 		$poster = ($thispic['pic_username'] == '') ? $lang['Guest'] : $thispic['pic_username'];
  728. 	}
  729. 	else
  730. 	{
  731. 		$poster = '<a href="'. append_sid("../pages/profile.$phpEx?mode=viewprofile&amp;". POST_USERS_URL .'='. $thispic['user_id']) .'">'. $thispic['username'] .'</a>';
  732. 	}
  733.  
  734. 	if ($auth_data['comment'] == 1)
  735. 	{
  736. 		$template->assign_block_vars('switch_comment_post', array());
  737.  
  738. 		if( !$userdata['session_logged_in'] )
  739. 		{
  740. 			$template->assign_block_vars('switch_comment_post.logout', array());
  741. 		}
  742. 	}
  743.  
  744. 	$template->assign_vars(array(
  745. 		'CAT_TITLE' => $thiscat['cat_title'],
  746. 		'U_VIEW_CAT' => ($cat_id != PERSONAL_GALLERY) ? append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id") : append_sid("album.$phpEx?action=personal&amp;user_id=$user_id"),
  747. 		'U_THUMBNAIL' => append_sid("album.$phpEx?action=thumbnail&amp;pic_id=$pic_id"),
  748. 		'U_PIC' => ($album_config['fullpic_popup']) ? append_sid("album.$phpEx?action=pic&amp;pic_id=$pic_id") : append_sid("album.$phpEx?action=page&amp;pic_id=$pic_id"),
  749. 		'PIC_TITLE' => $thispic['pic_title'],
  750. 		'PIC_DESC' => nl2br($thispic['pic_desc']),
  751. 		'POSTER' => $poster,
  752. 		'PIC_TIME' => create_date($board_config['default_dateformat'], $thispic['pic_time'], $board_config['board_timezone']),
  753. 		'PIC_VIEW' => $thispic['pic_view_count'],
  754. 		'PIC_COMMENTS' => $total_comments,
  755. 		'TARGET_BLANK' => ($album_config['fullpic_popup']) ? 'target="_blank"' : '',
  756. 		'L_PIC_TITLE' => $lang['Pic_Title'],
  757. 		'L_PIC_DESC' => $lang['Pic_Desc'],
  758. 		'L_POSTER' => $lang['Poster'],
  759. 		'L_POSTED' => $lang['Posted'],
  760. 		'L_VIEW' => $lang['View'],
  761. 		'L_COMMENTS' => $lang['Comments'],
  762. 		'L_POST_YOUR_COMMENT' => $lang['Post_your_comment'],
  763. 		'L_MESSAGE' => $lang['Message'],
  764. 		'L_USERNAME' => $lang['Username'],
  765. 		'L_COMMENT_NO_TEXT' => $lang['Comment_no_text'],
  766. 		'L_COMMENT_TOO_LONG' => $lang['Comment_too_long'],
  767. 		'L_MAX_LENGTH' => $lang['Max_length'],
  768. 		'S_MAX_LENGTH' => $album_config['desc_length'],
  769. 		'L_ORDER' => $lang['Order'],
  770. 		'L_SORT' => $lang['Sort'],
  771. 		'L_ASC' => $lang['Sort_Ascending'],
  772. 		'L_DESC' => $lang['Sort_Descending'],
  773. 		'SORT_ASC' => ($sort_order == 'ASC') ? 'selected="selected"' : '',
  774. 		'SORT_DESC' => ($sort_order == 'DESC') ? 'selected="selected"' : '',
  775. 		'L_SUBMIT' => $lang['Submit'],
  776. 		'S_ALBUM_ACTION' => append_sid("album.$phpEx?action=comment&amp;pic_id=$pic_id")
  777. 		)
  778. 	);
  779.  
  780. 	$template->pparse('body');
  781.  
  782. 	include($phpbb_root_path . 'includes/page_tail.'.$phpEx);
  783. }
  784. else
  785. {
  786. 	if ($auth_data['comment'] == 0)
  787. 	{
  788. 		if (!$userdata['session_logged_in'])
  789. 		{
  790. 			redirect(append_sid("login.$phpEx?redirect=album.$phpEx&action=comment&pic_id=$pic_id"));
  791. 		}
  792. 		else
  793. 		{
  794. 			message_die(GENERAL_ERROR, $lang['Not_Authorised']);
  795. 		}
  796. 	}
  797.  
  798. 	$comment_text = str_replace("\'", "''", htmlspecialchars(substr(trim($HTTP_POST_VARS['comment']), 0, $album_config['desc_length'])));
  799. 	$comment_username = (!$userdata['session_logged_in']) ? str_replace("\'", "''", substr(htmlspecialchars(trim($HTTP_POST_VARS['comment_username'])), 0, 32)) : str_replace("'", "''", htmlspecialchars(trim($userdata['username'])));
  800.  
  801. 	if( empty($comment_text) )
  802. 	{
  803. 		message_die(GENERAL_ERROR, $lang['Comment_no_text']);
  804. 	}
  805.  
  806. 	if( ($thispic['pic_lock'] == 1) and (!$auth_data['moderator']) )
  807. 	{
  808. 		message_die(GENERAL_ERROR, $lang['Pic_Locked']);
  809. 	}
  810.  
  811. 	if (!$userdata['session_logged_in'])
  812. 	{
  813. 		if ($comment_username != '')
  814. 		{
  815. 			$result = validate_username($comment_username);
  816. 			if ( $result['error'] )
  817. 			{
  818. 				message_die(GENERAL_MESSAGE, $result['error_msg']);
  819. 			}
  820. 		}
  821. 	}
  822.  
  823. 	$comment_time = time();
  824. 	$comment_user_id = $userdata['user_id'];
  825. 	$comment_user_ip = $userdata['session_ip'];
  826.  
  827. 	$sql = "SELECT MAX(comment_id) AS max
  828. 			FROM ". ALBUM_COMMENT_TABLE;
  829.  
  830. 	if( !$result = $db->sql_query($sql) )
  831. 	{
  832. 		message_die(GENERAL_ERROR, 'Could not found comment_id', '', __LINE__, __FILE__, $sql);
  833. 	}
  834.  
  835. 	$row = $db->sql_fetchrow($result);
  836.  
  837. 	$comment_id = $row['max'] + 1;
  838.  
  839. 	$sql = "INSERT INTO ". ALBUM_COMMENT_TABLE ." (comment_id, comment_pic_id, comment_user_id, comment_username, comment_user_ip, comment_time, comment_text)
  840. 			VALUES ('$comment_id', '$pic_id', '$comment_user_id', '$comment_username', '$comment_user_ip', '$comment_time', '$comment_text')";
  841. 	if( !$result = $db->sql_query($sql) )
  842. 	{
  843. 		message_die(GENERAL_ERROR, 'Could not insert new entry', '', __LINE__, __FILE__, $sql);
  844. 	}
  845.  
  846. 	$template->assign_vars(array(
  847. 		'META' => '<meta http-equiv="refresh" content="3;url=' . append_sid("album.$phpEx?action=comment&amp;comment_id=$comment_id") . '#'.$comment_id.'">')
  848. 	);
  849.  
  850. 	$message = $lang['Stored'] . "<br /><br />" . sprintf($lang['Click_view_message'], "<a href=\"" . append_sid("album.$phpEx?action=comment&amp;comment_id=$comment_id") . "#$comment_id\">", "</a>") . "<br /><br />" . sprintf($lang['Click_return_album_index'], "<a href=\"" . append_sid("album.$phpEx") . "\">", "</a>");
  851.  
  852. 	message_die(GENERAL_MESSAGE, $message);
  853. }
  854.  
  855. } elseif ( $action == 'comment_delete' ) {
  856.  
  857. if( $album_config['comment'] == 0 )
  858. {
  859. 	message_die(GENERAL_MESSAGE, $lang['Not_Authorised']);
  860. }
  861.  
  862. if( isset($HTTP_GET_VARS['comment_id']) )
  863. {
  864. 	$comment_id = intval($HTTP_GET_VARS['comment_id']);
  865. }
  866. else if( isset($HTTP_POST_VARS['comment_id']) )
  867. {
  868. 	$comment_id = intval($HTTP_POST_VARS['comment_id']);
  869. }
  870. else
  871. {
  872. 	message_die(GENERAL_ERROR, 'No comment_id specified');
  873. }
  874.  
  875. $sql = "SELECT *
  876. 		FROM ". ALBUM_COMMENT_TABLE ."
  877. 		WHERE comment_id = '$comment_id'";
  878.  
  879. if( !($result = $db->sql_query($sql)) )
  880. {
  881. 	message_die(GENERAL_ERROR, 'Could not query this comment information', '', __LINE__, __FILE__, $sql);
  882. }
  883.  
  884. $thiscomment = $db->sql_fetchrow($result);
  885.  
  886. if( empty($thiscomment) )
  887. {
  888. 	message_die(GENERAL_ERROR, 'This comment does not exist');
  889. }
  890.  
  891. $sql = "SELECT comment_id, comment_pic_id
  892. 		FROM ". ALBUM_COMMENT_TABLE ."
  893. 		WHERE comment_id = '$comment_id'";
  894.  
  895. if( !($result = $db->sql_query($sql)) )
  896. {
  897. 	message_die(GENERAL_ERROR, 'Could not query comment and pic information', '', __LINE__, __FILE__, $sql);
  898. }
  899.  
  900. $row = $db->sql_fetchrow($result);
  901.  
  902. if( empty($row) )
  903. {
  904. 	message_die(GENERAL_ERROR, 'This comment does not exist');
  905. }
  906.  
  907. $pic_id = $row['comment_pic_id'];
  908.  
  909. $sql = "SELECT p.*, u.user_id, u.username, COUNT(c.comment_id) as comments_count
  910. 		FROM ". ALBUM_TABLE ." AS p
  911. 			LEFT JOIN ". USERS_TABLE ." AS u ON p.pic_user_id = u.user_id
  912. 			LEFT JOIN ". ALBUM_COMMENT_TABLE ." AS c ON p.pic_id = c.comment_pic_id
  913. 		WHERE pic_id = '$pic_id'
  914. 		GROUP BY p.pic_id
  915. 		LIMIT 1";
  916. if( !($result = $db->sql_query($sql)) )
  917. {
  918. 	message_die(GENERAL_ERROR, 'Could not query pic information', '', __LINE__, __FILE__, $sql);
  919. }
  920. $thispic = $db->sql_fetchrow($result);
  921.  
  922. $cat_id = $thispic['pic_cat_id'];
  923. $user_id = $thispic['pic_user_id'];
  924.  
  925. $total_comments = $thispic['comments_count'];
  926. $comments_per_page = $board_config['posts_per_page'];
  927.  
  928. $pic_filename = $thispic['pic_filename'];
  929. $pic_thumbnail = $thispic['pic_thumbnail'];
  930.  
  931. if( empty($thispic) )
  932. {
  933. 	message_die(GENERAL_ERROR, $lang['Pic_not_exist']);
  934. }
  935.  
  936. if ($cat_id != PERSONAL_GALLERY)
  937. {
  938. 	$sql = "SELECT *
  939. 			FROM ". ALBUM_CAT_TABLE ."
  940. 			WHERE cat_id = '$cat_id'";
  941. 	if( !($result = $db->sql_query($sql)) )
  942. 	{
  943. 		message_die(GENERAL_ERROR, 'Could not query category information', '', __LINE__, __FILE__, $sql);
  944. 	}
  945.  
  946. 	$thiscat = $db->sql_fetchrow($result);
  947. }
  948. else
  949. {
  950. 	$thiscat = init_personal_gallery_cat($user_id);
  951. }
  952.  
  953. if (empty($thiscat))
  954. {
  955. 	message_die(GENERAL_ERROR, $lang['Category_not_exist']);
  956. }
  957.  
  958. $album_user_access = album_user_access($thispic['pic_cat_id'], $thiscat, 0, 0, 0, 1, 0, 1);
  959.  
  960. if( ($album_user_access['comment'] == 0) or ($album_user_access['delete'] == 0) )
  961. {
  962. 	if (!$userdata['session_logged_in'])
  963. 	{
  964. 		redirect(append_sid("login.$phpEx?redirect=album.$phpEx&action=comment_delete&comment_id=$comment_id"));
  965. 	}
  966. 	else
  967. 	{
  968. 		message_die(GENERAL_ERROR, $lang['Not_Authorised']);
  969. 	}
  970. }
  971. else
  972. {	
  973. 	if( (!$album_user_access['moderator']) or ($userdata['user_level'] != ADMIN) )
  974. 	{
  975. 		if ($thiscomment['comment_user_id'] != $userdata['user_id'])
  976. 		{
  977. 			message_die(GENERAL_ERROR, $lang['Not_Authorised']);
  978. 		}
  979. 	}
  980. }
  981.  
  982. if( !isset($HTTP_POST_VARS['confirm']) )
  983. {
  984. 	if( isset($HTTP_POST_VARS['cancel']) )
  985. 	{
  986. 		redirect(append_sid("album.$phpEx?action=comment&comment_id=$comment_id"));
  987. 		exit;
  988. 	}
  989.  
  990. 	$page_title = 'Галерея сайта';
  991. 	include($phpbb_root_path . 'includes/page_header.'.$phpEx);
  992.  
  993. 	$template->set_filenames(array(
  994. 		'body' => 'confirm_body.tpl')
  995. 	);
  996.  
  997. 	$template->assign_vars(array(
  998. 		'MESSAGE_TITLE' => $lang['Confirm'],
  999.  
  1000. 		'MESSAGE_TEXT' => $lang['Comment_delete_confirm'],
  1001.  
  1002. 		'L_NO' => $lang['No'],
  1003. 		'L_YES' => $lang['Yes'],
  1004.  
  1005. 		'S_CONFIRM_ACTION' => append_sid("album.$phpEx?action=comment_delete&amp;comment_id=$comment_id"),
  1006. 		)
  1007. 	);
  1008.  
  1009. 	$template->pparse('body');
  1010.  
  1011. 	include($phpbb_root_path . 'includes/page_tail.'.$phpEx);
  1012. }
  1013. else
  1014. {
  1015. 	$sql = "DELETE
  1016. 			FROM ". ALBUM_COMMENT_TABLE ."
  1017. 			WHERE comment_id = '$comment_id'";
  1018.  
  1019. 	if( !$result = $db->sql_query($sql) )
  1020. 	{
  1021. 		message_die(GENERAL_ERROR, 'Could not delete this comment', '', __LINE__, __FILE__, $sql);
  1022. 	}
  1023.  
  1024. 	$message = $lang['Deleted'];
  1025.  
  1026. 	if ($cat_id != PERSONAL_GALLERY)
  1027. 	{
  1028. 		$template->assign_vars(array(
  1029. 			'META' => '<meta http-equiv="refresh" content="3;url=' . append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id") . '">')
  1030. 		);
  1031.  
  1032. 		$message .= "<br /><br />" . sprintf($lang['Click_return_category'], "<a href=\"" . append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id") . "\">", "</a>");
  1033. 	}
  1034. 	else
  1035. 	{
  1036. 		$template->assign_vars(array(
  1037. 			'META' => '<meta http-equiv="refresh" content="3;url=' . append_sid("album.$phpEx?action=personal&amp;user_id=$user_id") . '">')
  1038. 		);
  1039.  
  1040. 		$message .= "<br /><br />" . sprintf($lang['Click_return_personal_gallery'], "<a href=\"" . append_sid("album.$phpEx?action=personal&amp;user_id=$user_id") . "\">", "</a>");
  1041. 	}
  1042.  
  1043. 	$message .= "<br /><br />" . sprintf($lang['Click_return_album_index'], "<a href=\"" . append_sid("album.$phpEx") . "\">", "</a>");
  1044.  
  1045. 	message_die(GENERAL_MESSAGE, $message);
  1046. }
  1047.  
  1048. } elseif ( $action == 'comment_edit' ) {
  1049.  
  1050. if( $album_config['comment'] == 0 )
  1051. {
  1052. 	message_die(GENERAL_MESSAGE, $lang['Not_Authorised']);
  1053. }
  1054.  
  1055. if( isset($HTTP_GET_VARS['comment_id']) )
  1056. {
  1057. 	$comment_id = intval($HTTP_GET_VARS['comment_id']);
  1058. }
  1059. else if( isset($HTTP_POST_VARS['comment_id']) )
  1060. {
  1061. 	$comment_id = intval($HTTP_POST_VARS['comment_id']);
  1062. }
  1063. else
  1064. {
  1065. 	message_die(GENERAL_ERROR, 'No comment_id specified');
  1066. }
  1067.  
  1068. $sql = "SELECT *
  1069. 		FROM ". ALBUM_COMMENT_TABLE ."
  1070. 		WHERE comment_id = '$comment_id'";
  1071.  
  1072. if( !($result = $db->sql_query($sql)) )
  1073. {
  1074. 	message_die(GENERAL_ERROR, 'Could not query this comment information', '', __LINE__, __FILE__, $sql);
  1075. }
  1076.  
  1077. $thiscomment = $db->sql_fetchrow($result);
  1078.  
  1079. if( empty($thiscomment) )
  1080. {
  1081. 	message_die(GENERAL_ERROR, 'This comment does not exist');
  1082. }
  1083.  
  1084. $sql = "SELECT comment_id, comment_pic_id
  1085. 		FROM ". ALBUM_COMMENT_TABLE ."
  1086. 		WHERE comment_id = '$comment_id'";
  1087.  
  1088. if( !($result = $db->sql_query($sql)) )
  1089. {
  1090. 	message_die(GENERAL_ERROR, 'Could not query comment and pic information', '', __LINE__, __FILE__, $sql);
  1091. }
  1092.  
  1093. $row = $db->sql_fetchrow($result);
  1094.  
  1095. $pic_id = $row['comment_pic_id'];
  1096.  
  1097. $sql = "SELECT p.*, u.user_id, u.username, COUNT(c.comment_id) as comments_count
  1098. 		FROM ". ALBUM_TABLE ." AS p
  1099. 			LEFT JOIN ". USERS_TABLE ." AS u ON p.pic_user_id = u.user_id
  1100. 			LEFT JOIN ". ALBUM_COMMENT_TABLE ." AS c ON p.pic_id = c.comment_pic_id
  1101. 		WHERE pic_id = '$pic_id'
  1102. 		GROUP BY p.pic_id
  1103. 		LIMIT 1";
  1104. if( !($result = $db->sql_query($sql)) )
  1105. {
  1106. 	message_die(GENERAL_ERROR, 'Could not query pic information', '', __LINE__, __FILE__, $sql);
  1107. }
  1108. $thispic = $db->sql_fetchrow($result);
  1109.  
  1110. $cat_id = $thispic['pic_cat_id'];
  1111. $user_id = $thispic['pic_user_id'];
  1112.  
  1113. $total_comments = $thispic['comments_count'];
  1114. $comments_per_page = $board_config['posts_per_page'];
  1115.  
  1116. $pic_filename = $thispic['pic_filename'];
  1117. $pic_thumbnail = $thispic['pic_thumbnail'];
  1118.  
  1119. if( empty($thispic) )
  1120. {
  1121. 	message_die(GENERAL_ERROR, $lang['Pic_not_exist']);
  1122. }
  1123.  
  1124. if ($cat_id != PERSONAL_GALLERY)
  1125. {
  1126. 	$sql = "SELECT *
  1127. 			FROM ". ALBUM_CAT_TABLE ."
  1128. 			WHERE cat_id = '$cat_id'";
  1129. 	if( !($result = $db->sql_query($sql)) )
  1130. 	{
  1131. 		message_die(GENERAL_ERROR, 'Could not query category information', '', __LINE__, __FILE__, $sql);
  1132. 	}
  1133.  
  1134. 	$thiscat = $db->sql_fetchrow($result);
  1135. }
  1136. else
  1137. {
  1138. 	$thiscat = init_personal_gallery_cat($user_id);
  1139. }
  1140.  
  1141. if (empty($thiscat))
  1142. {
  1143. 	message_die(GENERAL_ERROR, $lang['Category_not_exist']);
  1144. }
  1145.  
  1146. $album_user_access = album_user_access($thispic['pic_cat_id'], $thiscat, 0, 0, 0, 1, 1, 0);
  1147.  
  1148. if( ($album_user_access['comment'] == 0) or ($album_user_access['edit'] == 0) )
  1149. {
  1150. 	if (!$userdata['session_logged_in'])
  1151. 	{
  1152. 		redirect(append_sid("login.$phpEx?redirect=album.$phpEx&action=comment_edit&comment_id=$comment_id"));
  1153. 	}
  1154. 	else
  1155. 	{
  1156. 		message_die(GENERAL_ERROR, $lang['Not_Authorised']);
  1157. 	}
  1158. }
  1159. else
  1160. {	
  1161. 	if( (!$album_user_access['moderator']) or ($userdata['user_level'] != ADMIN) )
  1162. 	{
  1163. 		if ($thiscomment['comment_user_id'] != $userdata['user_id'])
  1164. 		{
  1165. 			message_die(GENERAL_ERROR, $lang['Not_Authorised']);
  1166. 		}
  1167. 	}
  1168. }
  1169.  
  1170. if( !isset($HTTP_POST_VARS['comment']) )
  1171. {
  1172. 	if( ($thispic['pic_user_id'] == ALBUM_GUEST) or ($thispic['username'] == '') )
  1173. 	{
  1174. 		$poster = ($thispic['pic_username'] == '') ? $lang['Guest'] : $thispic['pic_username'];
  1175. 	}
  1176. 	else
  1177. 	{
  1178. 		$poster = '<a href="'. append_sid("../pages/profile.$phpEx?mode=viewprofile&amp;". POST_USERS_URL .'='. $thispic['user_id']) .'">'. $thispic['username'] .'</a>';
  1179. 	}
  1180.  
  1181. 	$page_title = 'Галерея сайта';
  1182. 	include($phpbb_root_path . 'includes/page_header.'.$phpEx);
  1183.  
  1184. 	$template->set_filenames(array(
  1185. 		'body' => 'album_comment_body.tpl')
  1186. 	);
  1187.  
  1188. 	$template->assign_block_vars('switch_comment_post', array());
  1189.  
  1190. 	$template->assign_vars(array(
  1191. 		'CAT_TITLE' => $thiscat['cat_title'],
  1192. 		'U_VIEW_CAT' => ($cat_id != PERSONAL_GALLERY) ? append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id") : append_sid("album.$phpEx?action=personal&amp;user_id=$user_id"),
  1193.  
  1194. 		'U_THUMBNAIL' => append_sid("album.$phpEx?action=thumbnail&amp;pic_id=$pic_id"),
  1195. 		'U_PIC' => append_sid("album.$phpEx?action=pic&amp;pic_id=$pic_id"),
  1196.  
  1197. 		'PIC_TITLE' => $thispic['pic_title'],
  1198. 		'PIC_DESC' => nl2br($thispic['pic_desc']),
  1199. 		'POSTER' => $poster,
  1200. 		'PIC_TIME' => create_date($board_config['default_dateformat'], $thispic['pic_time'], $board_config['board_timezone']),
  1201. 		'PIC_VIEW' => $thispic['pic_view_count'],
  1202. 		'PIC_COMMENTS' => $total_comments,
  1203. 		'S_MESSAGE' => $thiscomment['comment_text'],
  1204.  
  1205. 		'L_PIC_TITLE' => $lang['Pic_Title'],
  1206. 		'L_PIC_DESC' => $lang['Pic_Desc'],
  1207. 		'L_POSTER' => $lang['Poster'],
  1208. 		'L_POSTED' => $lang['Posted'],
  1209. 		'L_VIEW' => $lang['View'],
  1210. 		'L_COMMENTS' => $lang['Comments'],
  1211.  
  1212. 		'L_POST_YOUR_COMMENT' => $lang['Post_your_comment'],
  1213. 		'L_MESSAGE' => $lang['Message'],
  1214. 		'L_USERNAME' => $lang['Username'],
  1215. 		'L_COMMENT_NO_TEXT' => $lang['Comment_no_text'],
  1216. 		'L_COMMENT_TOO_LONG' => $lang['Comment_too_long'],
  1217. 		'L_MAX_LENGTH' => $lang['Max_length'],
  1218. 		'S_MAX_LENGTH' => $album_config['desc_length'],
  1219.  
  1220. 		'L_SUBMIT' => $lang['Submit'],
  1221.  
  1222. 		'S_ALBUM_ACTION' => append_sid("album.$phpEx?action=comment_edit&amp;comment_id=$comment_id")
  1223. 		)
  1224. 	);
  1225.  
  1226. 	$template->pparse('body');
  1227.  
  1228. 	include($phpbb_root_path . 'includes/page_tail.'.$phpEx);
  1229. }
  1230. else
  1231. {
  1232. 	$comment_text = str_replace("\'", "''", htmlspecialchars(substr(trim($HTTP_POST_VARS['comment']), 0, $album_config['desc_length'])));
  1233.  
  1234. 	if( empty($comment_text) )
  1235. 	{
  1236. 		message_die(GENERAL_ERROR, $lang['Comment_no_text']);
  1237. 	}
  1238.  
  1239. 	$comment_edit_time = time();
  1240. 	$comment_edit_user_id = $userdata['user_id'];
  1241.  
  1242. 	$sql = "UPDATE ". ALBUM_COMMENT_TABLE ."
  1243. 			SET comment_text = '$comment_text', comment_edit_time = '$comment_edit_time', comment_edit_count = comment_edit_count + 1, comment_edit_user_id = '$comment_edit_user_id'
  1244. 			WHERE comment_id = '$comment_id'";
  1245.  
  1246. 	if( !$result = $db->sql_query($sql) )
  1247. 	{
  1248. 		message_die(GENERAL_ERROR, 'Could not update comment data', '', __LINE__, __FILE__, $sql);
  1249. 	}
  1250.  
  1251. 	$template->assign_vars(array(
  1252. 		'META' => '<meta http-equiv="refresh" content="3;url=' . append_sid("album.$phpEx?action=comment&amp;comment_id=$comment_id") . '#'.$comment_id.'">')
  1253. 	);
  1254.  
  1255. 	$message = $lang['Stored'] . "<br /><br />" . sprintf($lang['Click_view_message'], "<a href=\"" . append_sid("album.$phpEx?action=comment&amp;comment_id=$comment_id") . "#$comment_id\">", "</a>") . "<br /><br />" . sprintf($lang['Click_return_album_index'], "<a href=\"" . append_sid("album.$phpEx") . "\">", "</a>");
  1256.  
  1257. 	message_die(GENERAL_MESSAGE, $message);
  1258. }
  1259.  
  1260. } elseif ( $action == 'delete' ) {
  1261.  
  1262. if( isset($HTTP_GET_VARS['pic_id']) )
  1263. {
  1264. 	$pic_id = intval($HTTP_GET_VARS['pic_id']);
  1265. }
  1266. else if( isset($HTTP_POST_VARS['pic_id']) )
  1267. {
  1268. 	$pic_id = intval($HTTP_POST_VARS['pic_id']);
  1269. }
  1270. else
  1271. {
  1272. 	message_die(GENERAL_ERROR, 'No pics specified');
  1273. }
  1274.  
  1275. $sql = "SELECT *
  1276. 		FROM ". ALBUM_TABLE ."
  1277. 		WHERE pic_id = '$pic_id'";
  1278. if( !($result = $db->sql_query($sql)) )
  1279. {
  1280. 	message_die(GENERAL_ERROR, 'Could not query pic information', '', __LINE__, __FILE__, $sql);
  1281. }
  1282. $thispic = $db->sql_fetchrow($result);
  1283.  
  1284. $cat_id = $thispic['pic_cat_id'];
  1285. $user_id = $thispic['pic_user_id'];
  1286.  
  1287. $pic_filename = $thispic['pic_filename'];
  1288. $pic_thumbnail = $thispic['pic_thumbnail'];
  1289.  
  1290. if( empty($thispic) )
  1291. {
  1292. 	message_die(GENERAL_ERROR, $lang['Pic_not_exist']);
  1293. }
  1294.  
  1295. if ($cat_id != PERSONAL_GALLERY)
  1296. {
  1297. 	$sql = "SELECT *
  1298. 			FROM ". ALBUM_CAT_TABLE ."
  1299. 			WHERE cat_id = '$cat_id'";
  1300. 	if( !($result = $db->sql_query($sql)) )
  1301. 	{
  1302. 		message_die(GENERAL_ERROR, 'Could not query category information', '', __LINE__, __FILE__, $sql);
  1303. 	}
  1304.  
  1305. 	$thiscat = $db->sql_fetchrow($result);
  1306. }
  1307. else
  1308. {
  1309. 	$thiscat = init_personal_gallery_cat($user_id);
  1310. }
  1311.  
  1312. if (empty($thiscat))
  1313. {
  1314. 	message_die(GENERAL_ERROR, $lang['Category_not_exist']);
  1315. }
  1316.  
  1317. $album_user_access = album_user_access($cat_id, $thiscat, 0, 0, 0, 0, 0, 1);
  1318.  
  1319. if ($album_user_access['delete'] == 0)
  1320. {
  1321. 	if (!$userdata['session_logged_in'])
  1322. 	{
  1323. 		redirect(append_sid("login.$phpEx?redirect=album.$phpEx&action=delete&pic_id=$pic_id"));
  1324. 	}
  1325. 	else
  1326. 	{
  1327. 		message_die(GENERAL_ERROR, $lang['Not_Authorised']);
  1328. 	}
  1329. }
  1330. else
  1331. {
  1332. 	if( (!$album_user_access['moderator']) and ($userdata['user_level'] != ADMIN) )
  1333. 	{
  1334. 		if ($thispic['pic_user_id'] != $userdata['user_id'])
  1335. 		{
  1336. 			message_die(GENERAL_ERROR, $lang['Not_Authorised']);
  1337. 		}
  1338. 	}
  1339. }
  1340.  
  1341. if( !isset($HTTP_POST_VARS['confirm']) )
  1342. {
  1343. 	if( isset($HTTP_POST_VARS['cancel']) )
  1344. 	{
  1345. 		redirect(append_sid("album.$phpEx?action=cat&cat_id=$cat_id"));
  1346. 		exit;
  1347. 	}
  1348.  
  1349. 	$page_title = 'Галерея сайта';
  1350. 	include($phpbb_root_path . 'includes/page_header.'.$phpEx);
  1351.  
  1352. 	$template->set_filenames(array(
  1353. 		'body' => 'confirm_body.tpl')
  1354. 	);
  1355.  
  1356. 	$template->assign_vars(array(
  1357. 		'MESSAGE_TITLE' => $lang['Confirm'],
  1358.  
  1359. 		'MESSAGE_TEXT' => $lang['Album_delete_confirm'],
  1360.  
  1361. 		'L_NO' => $lang['No'],
  1362. 		'L_YES' => $lang['Yes'],
  1363.  
  1364. 		'S_CONFIRM_ACTION' => append_sid("album.$phpEx?action=delete&amp;pic_id=$pic_id"),
  1365. 		)
  1366. 	);
  1367.  
  1368. 	$template->pparse('body');
  1369.  
  1370. 	include($phpbb_root_path . 'includes/page_tail.'.$phpEx);
  1371. }
  1372. else
  1373. {
  1374. 	$sql = "DELETE FROM ". ALBUM_COMMENT_TABLE ."
  1375. 			WHERE comment_pic_id = '$pic_id'";
  1376. 	if( !$result = $db->sql_query($sql) )
  1377. 	{
  1378. 		message_die(GENERAL_ERROR, 'Could not delete related comments', '', __LINE__, __FILE__, $sql);
  1379. 	}
  1380.  
  1381. 	$sql = "DELETE FROM ". ALBUM_RATE_TABLE ."
  1382. 			WHERE rate_pic_id = '$pic_id'";
  1383. 	if( !$result = $db->sql_query($sql) )
  1384. 	{
  1385. 		message_die(GENERAL_ERROR, 'Could not delete related ratings', '', __LINE__, __FILE__, $sql);
  1386. 	}
  1387.  
  1388. 	if(($thispic['pic_thumbnail'] != '') and @file_exists(ALBUM_CACHE_PATH . $thispic['pic_thumbnail']))
  1389. 	{
  1390. 		@unlink(ALBUM_CACHE_PATH . $thispic['pic_thumbnail']);
  1391. 	}
  1392.  
  1393. 	@unlink(ALBUM_UPLOAD_PATH . $thispic['pic_filename']);
  1394.  
  1395. 	$sql = "DELETE FROM ". ALBUM_TABLE ."
  1396. 			WHERE pic_id = '$pic_id'";
  1397. 	if( !$result = $db->sql_query($sql) )
  1398. 	{
  1399. 		message_die(GENERAL_ERROR, 'Could not delete DB entry', '', __LINE__, __FILE__, $sql);
  1400. 	}
  1401.  
  1402. 	$message = $lang['Pics_deleted_successfully'];
  1403.  
  1404. 	if ($cat_id != PERSONAL_GALLERY)
  1405. 	{
  1406. 		$template->assign_vars(array(
  1407. 			'META' => '<meta http-equiv="refresh" content="3;url=' . append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id") . '">')
  1408. 		);
  1409.  
  1410. 		$message .= "<br /><br />" . sprintf($lang['Click_return_category'], "<a href=\"" . append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id") . "\">", "</a>");
  1411. 	}
  1412. 	else
  1413. 	{
  1414. 		$template->assign_vars(array(
  1415. 			'META' => '<meta http-equiv="refresh" content="3;url=' . append_sid("album.$phpEx?action=personal") . '">')
  1416. 		);
  1417.  
  1418. 		$message .= "<br /><br />" . sprintf($lang['Click_return_personal_gallery'], "<a href=\"" . append_sid("album.$phpEx?action=personal") . "\">", "</a>");
  1419. 	}
  1420.  
  1421. 	$message .= "<br /><br />" . sprintf($lang['Click_return_album_index'], "<a href=\"" . append_sid("album.$phpEx") . "\">", "</a>");
  1422.  
  1423. 	message_die(GENERAL_MESSAGE, $message);
  1424.  
  1425. }
  1426.  
  1427. } elseif ( $action == 'edit' ) {
  1428.  
  1429. if( isset($HTTP_GET_VARS['pic_id']) )
  1430. {
  1431. 	$pic_id = intval($HTTP_GET_VARS['pic_id']);
  1432. }
  1433. else if( isset($HTTP_POST_VARS['pic_id']) )
  1434. {
  1435. 	$pic_id = intval($HTTP_POST_VARS['pic_id']);
  1436. }
  1437. else
  1438. {
  1439. 	message_die(GENERAL_ERROR, 'No pics specified');
  1440. }
  1441.  
  1442. $sql = "SELECT *
  1443. 		FROM ". ALBUM_TABLE ."
  1444. 		WHERE pic_id = '$pic_id'";
  1445. if( !($result = $db->sql_query($sql)) )
  1446. {
  1447. 	message_die(GENERAL_ERROR, 'Could not query pic information', '', __LINE__, __FILE__, $sql);
  1448. }
  1449. $thispic = $db->sql_fetchrow($result);
  1450.  
  1451. $cat_id = $thispic['pic_cat_id'];
  1452. $user_id = $thispic['pic_user_id'];
  1453.  
  1454. $pic_filename = $thispic['pic_filename'];
  1455. $pic_thumbnail = $thispic['pic_thumbnail'];
  1456.  
  1457. if( empty($thispic) )
  1458. {
  1459. 	message_die(GENERAL_ERROR, $lang['Pic_not_exist']);
  1460. }
  1461.  
  1462. if ($cat_id != PERSONAL_GALLERY)
  1463. {
  1464. 	$sql = "SELECT *
  1465. 			FROM ". ALBUM_CAT_TABLE ."
  1466. 			WHERE cat_id = '$cat_id'";
  1467. 	if( !($result = $db->sql_query($sql)) )
  1468. 	{
  1469. 		message_die(GENERAL_ERROR, 'Could not query category information', '', __LINE__, __FILE__, $sql);
  1470. 	}
  1471.  
  1472. 	$thiscat = $db->sql_fetchrow($result);
  1473. }
  1474. else
  1475. {
  1476. 	$thiscat = init_personal_gallery_cat($user_id);
  1477. }
  1478.  
  1479. if (empty($thiscat))
  1480. {
  1481. 	message_die(GENERAL_ERROR, $lang['Category_not_exist']);
  1482. }
  1483.  
  1484. $album_user_access = album_user_access($cat_id, $thiscat, 0, 0, 0, 0, 1, 0);
  1485.  
  1486. if ($album_user_access['edit'] == 0)
  1487. {
  1488. 	if (!$userdata['session_logged_in'])
  1489. 	{
  1490. 		redirect(append_sid("login.$phpEx?redirect=album.$phpEx&action=edit&pic_id=$pic_id"));
  1491. 	}
  1492. 	else
  1493. 	{
  1494. 		message_die(GENERAL_ERROR, $lang['Not_Authorised']);
  1495. 	}
  1496. }
  1497. else
  1498. {	
  1499. 	if( (!$album_user_access['moderator']) and ($userdata['user_level'] != ADMIN) )
  1500. 	{
  1501. 		if ($thispic['pic_user_id'] != $userdata['user_id'])
  1502. 		{
  1503. 			message_die(GENERAL_ERROR, $lang['Not_Authorised']);
  1504. 		}
  1505. 	}
  1506. }
  1507.  
  1508. if( !isset($HTTP_POST_VARS['pic_title']) )
  1509. {
  1510. 	$page_title = 'Галерея сайта';
  1511. 	include($phpbb_root_path . 'includes/page_header.'.$phpEx);
  1512.  
  1513. 	$template->set_filenames(array(
  1514. 		'body' => 'album_edit_body.tpl')
  1515. 	);
  1516.  
  1517. 	$template->assign_vars(array(
  1518. 		'L_EDIT_PIC_INFO' => $lang['Edit_Pic_Info'],
  1519.  
  1520. 		'CAT_TITLE' => $thiscat['cat_title'],
  1521. 		'U_VIEW_CAT' => ($cat_id != PERSONAL_GALLERY) ? append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id") : append_sid("album.$phpEx?action=personal&amp;user_id=$user_id"),
  1522.  
  1523. 		'L_PIC_TITLE' => $lang['Pic_Title'],
  1524. 		'PIC_TITLE' => $thispic['pic_title'],
  1525. 		'PIC_DESC' => $thispic['pic_desc'],
  1526.  
  1527. 		'L_PIC_DESC' => $lang['Pic_Desc'],
  1528. 		'L_PLAIN_TEXT_ONLY' => $lang['Plain_text_only'],
  1529. 		'L_MAX_LENGTH' => $lang['Max_length'],
  1530.  
  1531. 		'L_UPLOAD_NO_TITLE' => $lang['Upload_no_title'],
  1532. 		'L_DESC_TOO_LONG' => $lang['Desc_too_long'],
  1533. 		'S_PIC_DESC_MAX_LENGTH' => $album_config['desc_length'],
  1534.  
  1535. 		'L_RESET' => $lang['Reset'],
  1536. 		'L_SUBMIT' => $lang['Submit'],
  1537.  
  1538. 		'S_ALBUM_ACTION' => append_sid("album.$phpEx?action=edit&amp;pic_id=$pic_id"),
  1539. 		)
  1540. 	);
  1541. 	$template->pparse('body');
  1542.  
  1543. 	include($phpbb_root_path . 'includes/page_tail.'.$phpEx);
  1544. }
  1545. else
  1546. {
  1547. 	$pic_title = str_replace("\'", "''", htmlspecialchars(trim($HTTP_POST_VARS['pic_title'])));
  1548. 	$pic_desc = str_replace("\'", "''", htmlspecialchars(substr(trim($HTTP_POST_VARS['pic_desc']), 0, $album_config['desc_length'])));
  1549.  
  1550. 	if( empty($pic_title) )
  1551. 	{
  1552. 		message_die(GENERAL_ERROR, $lang['Missed_pic_title']);
  1553. 	}
  1554.  
  1555. 	$sql = "UPDATE ". ALBUM_TABLE ."
  1556. 			SET pic_title = '$pic_title', pic_desc= '$pic_desc'
  1557. 			WHERE pic_id = '$pic_id'";
  1558. 	if( !$result = $db->sql_query($sql) )
  1559. 	{
  1560. 		message_die(GENERAL_ERROR, 'Could not update pic information', '', __LINE__, __FILE__, $sql);
  1561. 	}
  1562.  
  1563. 	$message = $lang['Pics_updated_successfully'];
  1564.  
  1565. 	if ($cat_id != PERSONAL_GALLERY)
  1566. 	{
  1567. 		$template->assign_vars(array(
  1568. 			'META' => '<meta http-equiv="refresh" content="3;url=' . append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id") . '">')
  1569. 		);
  1570.  
  1571. 		$message .= "<br /><br />" . sprintf($lang['Click_return_category'], "<a href=\"" . append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id") . "\">", "</a>");
  1572. 	}
  1573. 	else
  1574. 	{
  1575. 		$template->assign_vars(array(
  1576. 			'META' => '<meta http-equiv="refresh" content="3;url=' . append_sid("album.$phpEx?action=personal") . '">')
  1577. 		);
  1578.  
  1579. 		$message .= "<br /><br />" . sprintf($lang['Click_return_personal_gallery'], "<a href=\"" . append_sid("album.$phpEx?action=personal") . "\">", "</a>");
  1580. 	}
  1581.  
  1582. 	$message .= "<br /><br />" . sprintf($lang['Click_return_album_index'], "<a href=\"" . append_sid("album.$phpEx") . "\">", "</a>");
  1583.  
  1584. 	message_die(GENERAL_MESSAGE, $message);
  1585.  
  1586. }
  1587.  
  1588. } elseif ( $action == 'modcp' ) {
  1589.  
  1590. if( isset($HTTP_GET_VARS['pic_id']) )
  1591. {
  1592. 	$pic_id = intval($HTTP_GET_VARS['pic_id']);
  1593. }
  1594. else
  1595. {
  1596. 	$pic_id = FALSE;
  1597. }
  1598.  
  1599. if( $pic_id != FALSE )
  1600. {
  1601. 	$sql = "SELECT *
  1602. 			FROM ". ALBUM_TABLE ."
  1603. 			WHERE pic_id = '$pic_id'";
  1604. 	if( !($result = $db->sql_query($sql)) )
  1605. 	{
  1606. 		message_die(GENERAL_ERROR, 'Could not query pic information', '', __LINE__, __FILE__, $sql);
  1607. 	}
  1608. 	$thispic = $db->sql_fetchrow($result);
  1609. 	if( empty($thispic) )
  1610. 	{
  1611. 		message_die(GENERAL_ERROR, $lang['Pic_not_exist']);
  1612. 	}
  1613. 	$cat_id = $thispic['pic_cat_id'];
  1614. 	$user_id = $thispic['pic_user_id'];
  1615. }
  1616. else
  1617. {
  1618. 	if( isset($HTTP_POST_VARS['cat_id']) )
  1619. 	{
  1620. 		$cat_id = intval($HTTP_POST_VARS['cat_id']);
  1621. 	}
  1622. 	else if( isset($HTTP_GET_VARS['cat_id']) )
  1623. 	{
  1624. 		$cat_id = intval($HTTP_GET_VARS['cat_id']);
  1625. 	}
  1626. 	else
  1627. 	{
  1628. 		message_die(GENERAL_ERROR, 'No categories specified');
  1629. 	}
  1630. }
  1631.  
  1632. if( ($cat_id == PERSONAL_GALLERY) and (($HTTP_GET_VARS['mode'] == 'lock') or ($HTTP_GET_VARS['mode'] == 'unlock')) )
  1633. {
  1634. 	$thiscat = init_personal_gallery_cat($user_id);
  1635. }
  1636. else
  1637. {
  1638. 	$sql = "SELECT *
  1639. 			FROM ". ALBUM_CAT_TABLE ."
  1640. 			WHERE cat_id = '$cat_id'";
  1641. 	if( !($result = $db->sql_query($sql)) )
  1642. 	{
  1643. 		message_die(GENERAL_ERROR, 'Could not query category information', '', __LINE__, __FILE__, $sql);
  1644. 	}
  1645.  
  1646. 	$thiscat = $db->sql_fetchrow($result);
  1647. }
  1648.  
  1649. if (empty($thiscat))
  1650. {
  1651. 	message_die(GENERAL_ERROR, $lang['Category_not_exist']);
  1652. }
  1653.  
  1654. $auth_data = album_user_access($cat_id, $thiscat, 0, 0, 0, 0, 0, 0);
  1655.  
  1656. if( isset($HTTP_POST_VARS['mode']) )
  1657. {
  1658. 	if( isset($HTTP_POST_VARS['move']) )
  1659. 	{
  1660. 		$mode = 'move';
  1661. 	}
  1662. 	else if( isset($HTTP_POST_VARS['lock']) )
  1663. 	{
  1664. 		$mode = 'lock';
  1665. 	}
  1666. 	else if( isset($HTTP_POST_VARS['unlock']) )
  1667. 	{
  1668. 		$mode = 'unlock';
  1669. 	}
  1670. 	else if( isset($HTTP_POST_VARS['delete']) )
  1671. 	{
  1672. 		$mode = 'delete';
  1673. 	}
  1674. 	else if( isset($HTTP_POST_VARS['approval']) )
  1675. 	{
  1676. 		$mode = 'approval';
  1677. 	}
  1678. 	else if( isset($HTTP_POST_VARS['unapproval']) )
  1679. 	{
  1680. 		$mode = 'unapproval';
  1681. 	}
  1682. 	else
  1683. 	{
  1684. 		$mode = '';
  1685. 	}
  1686. }
  1687. else if( isset($HTTP_GET_VARS['mode']) )
  1688. {
  1689. 	$mode = trim($HTTP_GET_VARS['mode']);
  1690. }
  1691. else
  1692. {
  1693. 	$mode = '';
  1694. }
  1695.  
  1696. if ($auth_data['moderator'] == 0)
  1697. {
  1698. 	if (!$userdata['session_logged_in'])
  1699. 	{
  1700. 		redirect(append_sid("login.$phpEx?redirect=album.$phpEx&action=modcp&cat_id=$cat_id"));
  1701. 	}
  1702. 	else
  1703. 	{
  1704. 		message_die(GENERAL_ERROR, $lang['Not_Authorised']);
  1705. 	}
  1706. }
  1707.  
  1708. if ($mode == '')
  1709. {
  1710. 	if( isset($HTTP_GET_VARS['start']) )
  1711. 	{
  1712. 		$start = intval($HTTP_GET_VARS['start']);
  1713. 	}
  1714. 	else if( isset($HTTP_POST_VARS['start']) )
  1715. 	{
  1716. 		$start = intval($HTTP_POST_VARS['start']);
  1717. 	}
  1718. 	else
  1719. 	{
  1720. 		$start = 0;
  1721. 	}
  1722. 	$start = ($start < 0) ? 0 : $start;
  1723.  
  1724. 	if( isset($HTTP_GET_VARS['sort_method']) )
  1725. 	{
  1726. 		switch ($HTTP_GET_VARS['sort_method'])
  1727. 		{
  1728. 			case 'pic_title':
  1729. 				$sort_method = 'pic_title';
  1730. 				break;
  1731. 			case 'pic_user_id':
  1732. 				$sort_method = 'pic_user_id';
  1733. 				break;
  1734. 			case 'pic_view_count':
  1735. 				$sort_method = 'pic_view_count';
  1736. 				break;
  1737. 			case 'rating':
  1738. 				$sort_method = 'rating';
  1739. 				break;
  1740. 			case 'comments':
  1741. 				$sort_method = 'comments';
  1742. 				break;
  1743. 			case 'new_comment':
  1744. 				$sort_method = 'new_comment';
  1745. 				break;
  1746. 			default:
  1747. 				$sort_method = 'pic_time';
  1748. 		}
  1749. 	}
  1750. 	else if( isset($HTTP_POST_VARS['sort_method']) )
  1751. 	{
  1752. 		switch ($HTTP_POST_VARS['sort_method'])
  1753. 		{
  1754. 			case 'pic_title':
  1755. 				$sort_method = 'pic_title';
  1756. 				break;
  1757. 			case 'pic_user_id':
  1758. 				$sort_method = 'pic_user_id';
  1759. 				break;
  1760. 			case 'pic_view_count':
  1761. 				$sort_method = 'pic_view_count';
  1762. 				break;
  1763. 			case 'rating':
  1764. 				$sort_method = 'rating';
  1765. 				break;
  1766. 			case 'comments':
  1767. 				$sort_method = 'comments';
  1768. 				break;
  1769. 			case 'new_comment':
  1770. 				$sort_method = 'new_comment';
  1771. 				break;
  1772. 			default:
  1773. 				$sort_method = 'pic_time';
  1774. 		}
  1775. 	}
  1776. 	else
  1777. 	{
  1778. 		$sort_method = 'pic_time';
  1779. 	}
  1780.  
  1781. 	if( isset($HTTP_GET_VARS['sort_order']) )
  1782. 	{
  1783. 		switch ($HTTP_GET_VARS['sort_order'])
  1784. 		{
  1785. 			case 'ASC':
  1786. 				$sort_order = 'ASC';
  1787. 				break;
  1788. 			default:
  1789. 				$sort_order = 'DESC';
  1790. 		}
  1791. 	}
  1792. 	else if( isset($HTTP_POST_VARS['sort_order']) )
  1793. 	{
  1794. 		switch ($HTTP_POST_VARS['sort_order'])
  1795. 		{
  1796. 			case 'ASC':
  1797. 				$sort_order = 'ASC';
  1798. 				break;
  1799. 			default:
  1800. 				$sort_order = 'DESC';
  1801. 		}
  1802. 	}
  1803. 	else
  1804. 	{
  1805. 		$sort_order = 'DESC';
  1806. 	}
  1807.  
  1808. 	$sql = "SELECT COUNT(pic_id) AS count
  1809. 			FROM ". ALBUM_TABLE ."
  1810. 			WHERE pic_cat_id = '$cat_id'";
  1811. 	if( !($result = $db->sql_query($sql)) )
  1812. 	{
  1813. 		message_die(GENERAL_ERROR, 'Could not count pics in this category', '', __LINE__, __FILE__, $sql);
  1814. 	}
  1815. 	$row = $db->sql_fetchrow($result);
  1816.  
  1817. 	$total_pics = $row['count'];
  1818.  
  1819. 	$pics_per_page = $board_config['topics_per_page'];
  1820.  
  1821. 	if ($total_pics > 0)
  1822. 	{
  1823. 		$limit_sql = ($start == 0) ? $pics_per_page : $start .', '. $pics_per_page;
  1824.  
  1825. 		$pic_approval_sql = '';
  1826. 		if( ($userdata['user_level'] != ADMIN) and ($thiscat['cat_approval'] == ALBUM_ADMIN) )
  1827. 		{
  1828. 			$pic_approval_sql = 'AND p.pic_approval = 1';
  1829. 		}
  1830.  
  1831. 		$sql = "SELECT p.pic_id, p.pic_title, p.pic_user_id, p.pic_user_ip, p.pic_username, p.pic_time, p.pic_cat_id, p.pic_view_count, p.pic_lock, p.pic_approval, u.user_id, u.username, r.rate_pic_id, AVG(r.rate_point) AS rating, COUNT(c.comment_id) AS comments, MAX(c.comment_id) AS new_comment
  1832. 				FROM ". ALBUM_TABLE ." AS p
  1833. 					LEFT JOIN ". USERS_TABLE ." AS u ON p.pic_user_id = u.user_id
  1834. 					LEFT JOIN ". ALBUM_RATE_TABLE ." AS r ON p.pic_id = r.rate_pic_id
  1835. 					LEFT JOIN ". ALBUM_COMMENT_TABLE ." AS c ON p.pic_id = c.comment_pic_id
  1836. 				WHERE p.pic_cat_id = '$cat_id' $pic_approval_sql
  1837. 				GROUP BY p.pic_id
  1838. 				ORDER BY $sort_method $sort_order
  1839. 				LIMIT $limit_sql";
  1840. 		if( !($result = $db->sql_query($sql)) )
  1841. 		{
  1842. 			message_die(GENERAL_ERROR, 'Could not query pics information', '', __LINE__, __FILE__, $sql);
  1843. 		}
  1844.  
  1845. 		$picrow = array();
  1846.  
  1847. 		while( $row = $db->sql_fetchrow($result) )
  1848. 		{
  1849. 			$picrow[] = $row;
  1850. 		}
  1851.  
  1852. 		for ($i = 0; $i <count($picrow); $i++)
  1853. 		{
  1854. 			if( ($picrow[$i]['user_id'] == ALBUM_GUEST) or ($picrow[$i]['username'] == '') )
  1855. 			{
  1856. 				$pic_poster = ($picrow[$i]['pic_username'] == '') ? $lang['Guest'] : $picrow[$i]['pic_username'];
  1857. 			}
  1858. 			else
  1859. 			{
  1860. 				$pic_poster = '<a href="'. append_sid("../pages/profile.$phpEx?mode=viewprofile&amp;". POST_USERS_URL .'='. $picrow[$i]['user_id']) .'">'. $picrow[$i]['username'] .'</a>';
  1861. 			}
  1862. 			$row_class = ( !($i % 2) ) ? 'row_easy' : 'row_hard';
  1863.  
  1864. 			$template->assign_block_vars('picrow', array(
  1865. 				'PIC_ID' => $picrow[$i]['pic_id'],
  1866. 				'ROW_CLASS' => $row_class,
  1867. 				'PIC_TITLE' => '<a href="'. append_sid("album.$phpEx?action=pic&amp;pic_id=". $picrow[$i]['pic_id']) .'" target="_blank">'. $picrow[$i]['pic_title'] .'</a>',
  1868. 				'POSTER' => $pic_poster,
  1869. 				'TIME' => create_date($board_config['default_dateformat'], $picrow[$i]['pic_time'], $board_config['board_timezone']),
  1870. 				'RATING' => ($picrow[$i]['rating'] == 0) ? $lang['Not_rated'] : round($picrow[$i]['rating'], 2),
  1871. 				'COMMENTS' => $picrow[$i]['comments'],
  1872. 				'LOCK' => ($picrow[$i]['pic_lock'] == 0) ? '' : $lang['Locked'],
  1873. 				'APPROVAL' => ($picrow[$i]['pic_approval'] == 0) ? $lang['Not_approved'] : $lang['Approved']
  1874. 				)
  1875. 			);
  1876. 		}
  1877.  
  1878. 		$template->assign_vars(array(
  1879. 			'PAGINATION' => generate_pagination(append_sid("album.$phpEx?action=modcp&amp;cat_id=$cat_id&amp;sort_method=$sort_method&amp;sort_order=$sort_order"), $total_pics, $pics_per_page, $start),
  1880. 			'PAGE_NUMBER' => sprintf($lang['Page_of'], ( floor( $start / $pics_per_page ) + 1 ), ceil( $total_pics / $pics_per_page ))
  1881. 			)
  1882. 		);
  1883. 	}
  1884. 	else
  1885. 	{
  1886. 		$template->assign_block_vars('no_pics', array());
  1887. 	}
  1888.  
  1889. 	$page_title = 'Галерея сайта';
  1890. 	include($phpbb_root_path . 'includes/page_header.'.$phpEx);
  1891.  
  1892. 	$template->set_filenames(array(
  1893. 		'body' => 'album_modcp_body.tpl')
  1894. 	);
  1895.  
  1896. 	$sort_rating_option = '';
  1897. 	$sort_comments_option = '';
  1898. 	if( $album_config['rate'] == 1 )
  1899. 	{
  1900. 		$sort_rating_option = '<option value="rating" ';
  1901. 		$sort_rating_option .= ($sort_method == 'rating') ? 'selected="selected"' : '';
  1902. 		$sort_rating_option .= '>' . $lang['Rating'] .'</option>';
  1903. 	}
  1904. 	if( $album_config['comment'] == 1 )
  1905. 	{
  1906. 		$sort_comments_option = '<option value="comments" ';
  1907. 		$sort_comments_option .= ($sort_method == 'comments') ? 'selected="selected"' : '';
  1908. 		$sort_comments_option .= '>' . $lang['Comments'] .'</option>';
  1909. 		$sort_new_comment_option = '<option value="new_comment" ';
  1910. 		$sort_new_comment_option .= ($sort_method == 'new_comment') ? 'selected="selected"' : '';
  1911. 		$sort_new_comment_option .= '>' . $lang['New_Comment'] .'</option>';
  1912. 	}
  1913.  
  1914. 	$template->assign_vars(array(
  1915. 		'U_VIEW_CAT' => append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id"),
  1916. 		'CAT_TITLE' => $thiscat['cat_title'],
  1917. 		'L_CATEGORY' => $lang['Category'],
  1918. 		'L_MODCP' => $lang['Mod_CP'],
  1919. 		'L_NO_PICS' => $lang['No_Pics'],
  1920. 		'L_VIEW' => $lang['View'],
  1921. 		'L_POSTER' => $lang['Poster'],
  1922. 		'L_POSTED' => $lang['Posted'],
  1923. 		'S_ALBUM_ACTION' => append_sid("album.$phpEx?action=modcp&amp;cat_id=$cat_id"),
  1924. 		'L_SELECT_SORT_METHOD' => $lang['Select_sort_method'],
  1925. 		'L_ORDER' => $lang['Order'],
  1926. 		'L_SORT' => $lang['Sort'],
  1927. 		'L_TIME' => $lang['Time'],
  1928. 		'L_PIC_TITLE' => $lang['Pic_Title'],
  1929. 		'L_POSTER' => $lang['Poster'],
  1930. 		'L_RATING' => $lang['Rating'],
  1931. 		'L_COMMENTS' => $lang['Comments'],
  1932. 		'L_STATUS' => $lang['Status'],
  1933. 		'L_APPROVAL' => $lang['Approval'],
  1934. 		'L_SELECT' => $lang['Select'],
  1935. 		'L_DELETE' => $lang['Delete'],
  1936. 		'L_MOVE' => $lang['Move'],
  1937. 		'L_LOCK' => $lang['Lock'],
  1938. 		'L_UNLOCK' => $lang['Unlock'],
  1939. 		'DELETE_BUTTON' => ($auth_data['delete'] == 1) ? '<input type="submit" name="delete" value="'. $lang['Delete'] .'" />' : '',
  1940. 		'APPROVAL_BUTTON' => ( ($userdata['user_level'] != ADMIN) and ($thiscat['cat_approval'] == ALBUM_ADMIN) ) ? '' : '<input type="submit" name="approval" value="'. $lang['Approve'] .'" />',
  1941. 		'UNAPPROVAL_BUTTON' => ( ($userdata['user_level'] != ADMIN) and ($thiscat['cat_approval'] == ALBUM_ADMIN) ) ? '' : '<input type="submit" name="unapproval" value="'. $lang['Unapprove'] .'" />',
  1942. 		'L_USERNAME' => $lang['Sort_Username'],
  1943. 		'SORT_TIME' => ($sort_method == 'pic_time') ? 'selected="selected"' : '',
  1944. 		'SORT_PIC_TITLE' => ($sort_method == 'pic_title') ? 'selected="selected"' : '',
  1945. 		'SORT_USERNAME' => ($sort_method == 'pic_user_id') ? 'selected="selected"' : '',
  1946. 		'SORT_VIEW' => ($sort_method == 'pic_view_count') ? 'selected="selected"' : '',
  1947. 		'SORT_RATING_OPTION' => $sort_rating_option,
  1948. 		'SORT_COMMENTS_OPTION' => $sort_comments_option,
  1949. 		'SORT_NEW_COMMENT_OPTION' => $sort_new_comment_option,
  1950. 		'L_ASC' => $lang['Sort_Ascending'],
  1951. 		'L_DESC' => $lang['Sort_Descending'],
  1952. 		'SORT_ASC' => ($sort_order == 'ASC') ? 'selected="selected"' : '',
  1953. 		'SORT_DESC' => ($sort_order == 'DESC') ? 'selected="selected"' : ''
  1954. 		)
  1955. 	);
  1956.  
  1957. 	$template->pparse('body');
  1958.  
  1959. 	include($phpbb_root_path . 'includes/page_tail.'.$phpEx);
  1960. }
  1961. else
  1962. {
  1963. 	if ($mode == 'move')
  1964. 	{
  1965. 		if( !isset($HTTP_POST_VARS['target']) )
  1966. 		{
  1967. 			$pic_id_array = array();
  1968. 			if ($pic_id != FALSE)
  1969. 			{
  1970. 				$pic_id_array[] = $pic_id;
  1971. 			}
  1972. 			else
  1973. 			{
  1974. 				if( isset($HTTP_POST_VARS['pic_id']) )
  1975. 				{
  1976. 					$pic_id_array = $HTTP_POST_VARS['pic_id'];
  1977. 					if( !is_array($pic_id_array) )
  1978. 					{
  1979. 						message_die(GENERAL_ERROR, 'Invalid request');
  1980. 					}
  1981. 				}
  1982. 				else
  1983. 				{
  1984. 					message_die(GENERAL_ERROR, 'No pics specified');
  1985. 				}
  1986. 			}
  1987. 			for ($i = 0; $i < count($pic_id_array); $i++)
  1988. 			{
  1989. 				$template->assign_block_vars('pic_id_array', array(
  1990. 					'VALUE' => $pic_id_array[$i])
  1991. 				);
  1992. 			}
  1993.  
  1994. 			$sql = "SELECT *
  1995. 					FROM ". ALBUM_CAT_TABLE ."
  1996. 					WHERE cat_id <> '$cat_id'
  1997. 					ORDER BY cat_order ASC";
  1998. 			if( !($result = $db->sql_query($sql)) )
  1999. 			{
  2000. 				message_die(GENERAL_ERROR, 'Could not query categories list', '', __LINE__, __FILE__, $sql);
  2001. 			}
  2002.  
  2003. 			$catrows = array();
  2004.  
  2005. 			while( $row = $db->sql_fetchrow($result) )
  2006. 			{
  2007. 				$album_user_access = album_user_access($row['cat_id'], $row, 0, 1, 0, 0, 0, 0);
  2008.  
  2009. 				if ($album_user_access['upload'] == 1)
  2010. 				{
  2011. 					$catrows[] = $row;
  2012. 				}
  2013. 			}
  2014.  
  2015. 			if( count($catrows) == 0 )
  2016. 			{
  2017. 				message_die(GENERAL_MESSAGE, 'There is no more categories which you have permisson to move pics to');
  2018. 			}
  2019.  
  2020. 			$category_select = '<select name="target">';
  2021.  
  2022. 			for ($i = 0; $i < count($catrows); $i++)
  2023. 			{
  2024. 				$category_select .= '<option value="'. $catrows[$i]['cat_id'] .'">'. $catrows[$i]['cat_title'] .'</option>';
  2025. 			}
  2026.  
  2027. 			$category_select .= '</select>';
  2028.  
  2029. 			$page_title = 'Галерея сайта';
  2030. 			include($phpbb_root_path . 'includes/page_header.'.$phpEx);
  2031.  
  2032. 			$template->set_filenames(array(
  2033. 				'body' => 'album_move_body.tpl')
  2034. 			);
  2035.  
  2036. 			$template->assign_vars(array(
  2037. 				'S_ALBUM_ACTION' => append_sid("album.$phpEx?action=modcp&amp;mode=move&amp;cat_id=$cat_id"),
  2038. 				'L_MOVE' => $lang['Move'],
  2039. 				'L_MOVE_TO_CATEGORY' => $lang['Move_to_Category'],
  2040. 				'S_CATEGORY_SELECT' => $category_select)
  2041. 			);
  2042.  
  2043. 			$template->pparse('body');
  2044.  
  2045. 			include($phpbb_root_path . 'includes/page_tail.'.$phpEx);
  2046. 		}
  2047. 		else
  2048. 		{
  2049. 			if( isset($HTTP_POST_VARS['pic_id']) )
  2050. 			{
  2051. 				$pic_id = $HTTP_POST_VARS['pic_id'];
  2052. 				if( is_array($pic_id) )
  2053. 				{
  2054. 					$pic_id_sql = implode(',', $pic_id);
  2055. 				}
  2056. 				else
  2057. 				{
  2058. 					message_die(GENERAL_ERROR, 'Invalid request');
  2059. 				}
  2060. 			}
  2061. 			else
  2062. 			{
  2063. 				message_die(GENERAL_ERROR, 'No pics specified');
  2064. 			}
  2065.  
  2066. 			$sql = "SELECT pic_id
  2067. 					FROM ". ALBUM_TABLE ."
  2068. 					WHERE pic_id IN ($pic_id_sql) AND pic_cat_id <> $cat_id";
  2069. 			if( !$result = $db->sql_query($sql) )
  2070. 			{
  2071. 				message_die(GENERAL_ERROR, 'Could not obtain album information', '', __LINE__, __FILE__, $sql);
  2072. 			}
  2073. 			if( $db->sql_numrows($result) > 0 )
  2074. 			{
  2075. 				message_die(GENERAL_MESSAGE, $lang['Not_Authorised']);
  2076. 			}
  2077.  
  2078. 			$sql = "UPDATE ". ALBUM_TABLE ."
  2079. 					SET pic_cat_id = ". intval($HTTP_POST_VARS['target']) ."
  2080. 					WHERE pic_id IN ($pic_id_sql)";
  2081. 			if( !$result = $db->sql_query($sql) )
  2082. 			{
  2083. 				message_die(GENERAL_ERROR, 'Could not update album information', '', __LINE__, __FILE__, $sql);
  2084. 			}
  2085.  
  2086. 			$message = $lang['Pics_moved_successfully'] .'<br /><br />'. sprintf($lang['Click_return_category'], "<a href=\"" . append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id") . "\">", "</a>") .'<br /><br />'. sprintf($lang['Click_return_modcp'], "<a href=\"" . append_sid("album.$phpEx?action=modcp&amp;cat_id=$cat_id") . "\">", "</a>") . "<br /><br />" . sprintf($lang['Click_return_album_index'], "<a href=\"" . append_sid("album.$phpEx") . "\">", "</a>");
  2087.  
  2088. 			message_die(GENERAL_MESSAGE, $message);
  2089. 		}
  2090. 	}
  2091. 	else if ($mode == 'lock')
  2092. 	{
  2093. 		if ($pic_id != FALSE)
  2094. 		{
  2095. 			$pic_id_sql = $pic_id;
  2096. 		}
  2097. 		else
  2098. 		{
  2099. 			if( isset($HTTP_POST_VARS['pic_id']) )
  2100. 			{
  2101. 				$pic_id = $HTTP_POST_VARS['pic_id'];
  2102. 				if( is_array($pic_id) )
  2103. 				{
  2104. 					$pic_id_sql = implode(',', $pic_id);
  2105. 				}
  2106. 				else
  2107. 				{
  2108. 					message_die(GENERAL_ERROR, 'Invalid request');
  2109. 				}
  2110. 			}
  2111. 			else
  2112. 			{
  2113. 				message_die(GENERAL_ERROR, 'No pics specified');
  2114. 			}
  2115. 		}
  2116.  
  2117. 		$sql = "SELECT pic_id
  2118. 				FROM ". ALBUM_TABLE ."
  2119. 				WHERE pic_id IN ($pic_id_sql) AND pic_cat_id <> $cat_id";
  2120. 		if( !$result = $db->sql_query($sql) )
  2121. 		{
  2122. 			message_die(GENERAL_ERROR, 'Could not obtain album information', '', __LINE__, __FILE__, $sql);
  2123. 		}
  2124. 		if( $db->sql_numrows($result) > 0 )
  2125. 		{
  2126. 			message_die(GENERAL_ERROR, $lang['Not_Authorised']);
  2127. 		}
  2128.  
  2129. 		$sql = "UPDATE ". ALBUM_TABLE ."
  2130. 				SET pic_lock = 1
  2131. 				WHERE pic_id IN ($pic_id_sql)";
  2132. 		if( !$result = $db->sql_query($sql) )
  2133. 		{
  2134. 			message_die(GENERAL_ERROR, 'Could not update album information', '', __LINE__, __FILE__, $sql);
  2135. 		}
  2136.  
  2137. 		$message = $lang['Pics_locked_successfully'] .'<br /><br />';
  2138.  
  2139. 		if ($cat_id != PERSONAL_GALLERY)
  2140. 		{
  2141. 			$message .= sprintf($lang['Click_return_category'], "<a href=\"" . append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id") . "\">", "</a>") .'<br /><br />'. sprintf($lang['Click_return_modcp'], "<a href=\"" . append_sid("album.$phpEx?action=modcp&amp;cat_id=$cat_id") . "\">", "</a>") . "<br /><br />";
  2142. 		}
  2143. 		else
  2144. 		{
  2145. 			$message .= sprintf($lang['Click_return_personal_gallery'], "<a href=\"" . append_sid("album.$phpEx?action=personal") . "\">", "</a>");
  2146. 		}
  2147.  
  2148. 		$message .= '<br /><br />' . sprintf($lang['Click_return_album_index'], "<a href=\"" . append_sid("album.$phpEx") . "\">", "</a>");
  2149.  
  2150. 		message_die(GENERAL_MESSAGE, $message);
  2151. 	}
  2152. 	else if ($mode == 'unlock')
  2153. 	{
  2154. 		if ($pic_id != FALSE)
  2155. 		{
  2156. 			$pic_id_sql = $pic_id;
  2157. 		}
  2158. 		else
  2159. 		{
  2160. 			if( isset($HTTP_POST_VARS['pic_id']) )
  2161. 			{
  2162. 				$pic_id = $HTTP_POST_VARS['pic_id'];
  2163. 				if( is_array($pic_id) )
  2164. 				{
  2165. 					$pic_id_sql = implode(',', $pic_id);
  2166. 				}
  2167. 				else
  2168. 				{
  2169. 					message_die(GENERAL_ERROR, 'Invalid request');
  2170. 				}
  2171. 			}
  2172. 			else
  2173. 			{
  2174. 				message_die(GENERAL_ERROR, 'No pics specified');
  2175. 			}
  2176. 		}
  2177.  
  2178. 		$sql = "SELECT pic_id
  2179. 				FROM ". ALBUM_TABLE ."
  2180. 				WHERE pic_id IN ($pic_id_sql) AND pic_cat_id <> $cat_id";
  2181. 		if( !$result = $db->sql_query($sql) )
  2182. 		{
  2183. 			message_die(GENERAL_ERROR, 'Could not obtain album information', '', __LINE__, __FILE__, $sql);
  2184. 		}
  2185. 		if( $db->sql_numrows($result) > 0 )
  2186. 		{
  2187. 			message_die(GENERAL_ERROR, $lang['Not_Authorised']);
  2188. 		}
  2189.  
  2190. 		$sql = "UPDATE ". ALBUM_TABLE ."
  2191. 				SET pic_lock = 0
  2192. 				WHERE pic_id IN ($pic_id_sql)";
  2193. 		if( !$result = $db->sql_query($sql) )
  2194. 		{
  2195. 			message_die(GENERAL_ERROR, 'Could not update album information', '', __LINE__, __FILE__, $sql);
  2196. 		}
  2197.  
  2198. 		$message = $lang['Pics_unlocked_successfully'] .'<br /><br />';
  2199.  
  2200. 		if ($cat_id != PERSONAL_GALLERY)
  2201. 		{
  2202. 			$message .= sprintf($lang['Click_return_category'], "<a href=\"" . append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id") . "\">", "</a>") .'<br /><br />'. sprintf($lang['Click_return_modcp'], "<a href=\"" . append_sid("album.$phpEx?action=modcp&amp;cat_id=$cat_id") . "\">", "</a>") . "<br /><br />";
  2203. 		}
  2204. 		else
  2205. 		{
  2206. 			$message .= sprintf($lang['Click_return_personal_gallery'], "<a href=\"" . append_sid("album.$phpEx?action=personal") . "\">", "</a>");
  2207. 		}
  2208.  
  2209. 		$message .= '<br /><br />' . sprintf($lang['Click_return_album_index'], "<a href=\"" . append_sid("album.$phpEx") . "\">", "</a>");
  2210.  
  2211. 		message_die(GENERAL_MESSAGE, $message);
  2212. 	}
  2213. 	else if ($mode == 'approval')
  2214. 	{
  2215. 		if ($pic_id != FALSE)
  2216. 		{
  2217. 			$pic_id_sql = $pic_id;
  2218. 		}
  2219. 		else
  2220. 		{
  2221. 			if( isset($HTTP_POST_VARS['pic_id']) )
  2222. 			{
  2223. 				$pic_id = $HTTP_POST_VARS['pic_id'];
  2224. 				if( is_array($pic_id) )
  2225. 				{
  2226. 					$pic_id_sql = implode(',', $pic_id);
  2227. 				}
  2228. 				else
  2229. 				{
  2230. 					message_die(GENERAL_ERROR, 'Invalid request');
  2231. 				}
  2232. 			}
  2233. 			else
  2234. 			{
  2235. 				message_die(GENERAL_ERROR, 'No pics specified');
  2236. 			}
  2237. 		}
  2238.  
  2239. 		$sql = "SELECT pic_id
  2240. 				FROM ". ALBUM_TABLE ."
  2241. 				WHERE pic_id IN ($pic_id_sql) AND pic_cat_id <> $cat_id";
  2242. 		if( !$result = $db->sql_query($sql) )
  2243. 		{
  2244. 			message_die(GENERAL_ERROR, 'Could not obtain album information', '', __LINE__, __FILE__, $sql);
  2245. 		}
  2246. 		if( $db->sql_numrows($result) > 0 )
  2247. 		{
  2248. 			message_die(GENERAL_ERROR, $lang['Not_Authorised']);
  2249. 		}
  2250.  
  2251. 		$sql = "UPDATE ". ALBUM_TABLE ."
  2252. 				SET pic_approval = 1
  2253. 				WHERE pic_id IN ($pic_id_sql)";
  2254. 		if( !$result = $db->sql_query($sql) )
  2255. 		{
  2256. 			message_die(GENERAL_ERROR, 'Could not update album information', '', __LINE__, __FILE__, $sql);
  2257. 		}
  2258.  
  2259. 		$message = $lang['Pics_approved_successfully'] .'<br /><br />'. sprintf($lang['Click_return_category'], "<a href=\"" . append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id") . "\">", "</a>") .'<br /><br />'. sprintf($lang['Click_return_modcp'], "<a href=\"" . append_sid("album.$phpEx?action=modcp&amp;cat_id=$cat_id") . "\">", "</a>") . "<br /><br />" . sprintf($lang['Click_return_album_index'], "<a href=\"" . append_sid("album.$phpEx") . "\">", "</a>");
  2260.  
  2261. 		message_die(GENERAL_MESSAGE, $message);
  2262. 	}
  2263. 	else if ($mode == 'unapproval')
  2264. 	{
  2265. 		if ($pic_id != FALSE)
  2266. 		{
  2267. 			$pic_id_sql = $pic_id;
  2268. 		}
  2269. 		else
  2270. 		{
  2271. 			if( isset($HTTP_POST_VARS['pic_id']) )
  2272. 			{
  2273. 				$pic_id = $HTTP_POST_VARS['pic_id'];
  2274. 				if( is_array($pic_id) )
  2275. 				{
  2276. 					$pic_id_sql = implode(',', $pic_id);
  2277. 				}
  2278. 				else
  2279. 				{
  2280. 					message_die(GENERAL_ERROR, 'Invalid request');
  2281. 				}
  2282. 			}
  2283. 			else
  2284. 			{
  2285. 				message_die(GENERAL_ERROR, 'No pics specified');
  2286. 			}
  2287. 		}
  2288.  
  2289. 		$sql = "SELECT pic_id
  2290. 				FROM ". ALBUM_TABLE ."
  2291. 				WHERE pic_id IN ($pic_id_sql) AND pic_cat_id <> $cat_id";
  2292. 		if( !$result = $db->sql_query($sql) )
  2293. 		{
  2294. 			message_die(GENERAL_ERROR, 'Could not obtain album information', '', __LINE__, __FILE__, $sql);
  2295. 		}
  2296. 		if( $db->sql_numrows($result) > 0 )
  2297. 		{
  2298. 			message_die(GENERAL_ERROR, $lang['Not_Authorised']);
  2299. 		}
  2300.  
  2301. 		$sql = "UPDATE ". ALBUM_TABLE ."
  2302. 				SET pic_approval = 0
  2303. 				WHERE pic_id IN ($pic_id_sql)";
  2304. 		if( !$result = $db->sql_query($sql) )
  2305. 		{
  2306. 			message_die(GENERAL_ERROR, 'Could not update album information', '', __LINE__, __FILE__, $sql);
  2307. 		}
  2308.  
  2309. 		$message = $lang['Pics_unapproved_successfully'] .'<br /><br />'. sprintf($lang['Click_return_category'], "<a href=\"" . append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id") . "\">", "</a>") .'<br /><br />'. sprintf($lang['Click_return_modcp'], "<a href=\"" . append_sid("album.$phpEx?action=modcp&amp;cat_id=$cat_id") . "\">", "</a>") . "<br /><br />" . sprintf($lang['Click_return_album_index'], "<a href=\"" . append_sid("album.$phpEx") . "\">", "</a>");
  2310.  
  2311. 		message_die(GENERAL_MESSAGE, $message);
  2312. 	}
  2313. 	else if ($mode == 'delete')
  2314. 	{
  2315. 		if ($auth_data['delete'] == 0)
  2316. 		{
  2317. 			message_die(GENERAL_ERROR, $lang['Not_Authorised']);
  2318. 		}
  2319.  
  2320. 		if( !isset($HTTP_POST_VARS['confirm']) )
  2321. 		{
  2322. 			$pic_id_array = array();
  2323. 			if ($pic_id != FALSE)
  2324. 			{
  2325. 				$pic_id_array[] = $pic_id;
  2326. 			}
  2327. 			else
  2328. 			{
  2329. 				if( isset($HTTP_POST_VARS['pic_id']) )
  2330. 				{
  2331. 					$pic_id_array = $HTTP_POST_VARS['pic_id'];
  2332. 					if( !is_array($pic_id_array) )
  2333. 					{
  2334. 						message_die(GENERAL_ERROR, 'Invalid request');
  2335. 					}
  2336. 				}
  2337. 				else
  2338. 				{
  2339. 					message_die(GENERAL_ERROR, 'No pics specified');
  2340. 				}
  2341. 			}
  2342.  
  2343. 			if ( isset($HTTP_POST_VARS['cancel']) )
  2344. 			{
  2345. 				$redirect = "album.$phpEx?action=modcp&cat_id=$cat_id";
  2346. 				redirect(append_sid($redirect, true));
  2347. 			}			
  2348.  
  2349. 			$hidden_field = '';
  2350. 			for ($i = 0; $i < count($pic_id_array); $i++)
  2351. 			{
  2352. 				$hidden_field .= '<input name="pic_id[]" type="hidden" value="'. $pic_id_array[$i] .'" />' . "\n";
  2353. 			}
  2354.  
  2355. 			$page_title = 'Галерея сайта';
  2356. 			include($phpbb_root_path . 'includes/page_header.'.$phpEx);
  2357.  
  2358. 			$template->set_filenames(array(
  2359. 				'body' => 'confirm_body.tpl')
  2360. 			);
  2361.  
  2362. 			$template->assign_vars(array(
  2363. 				'MESSAGE_TITLE' => $lang['Confirm'],
  2364. 				'MESSAGE_TEXT' => $lang['Album_delete_confirm'],
  2365. 				'S_HIDDEN_FIELDS' => $hidden_field,
  2366. 				'L_NO' => $lang['No'],
  2367. 				'L_YES' => $lang['Yes'],
  2368. 				'S_CONFIRM_ACTION' => append_sid("album.$phpEx?action=modcp&amp;mode=delete&amp;cat_id=$cat_id"),
  2369. 				)
  2370. 			);
  2371.  
  2372. 			$template->pparse('body');
  2373.  
  2374. 			include($phpbb_root_path . 'includes/page_tail.'.$phpEx);
  2375. 		}
  2376. 		else
  2377. 		{
  2378. 			if( isset($HTTP_POST_VARS['pic_id']) )
  2379. 			{
  2380. 				$pic_id = $HTTP_POST_VARS['pic_id'];
  2381. 				if( is_array($pic_id) )
  2382. 				{
  2383. 					$pic_id_sql = implode(',', $pic_id);
  2384. 				}
  2385. 				else
  2386. 				{
  2387. 					message_die(GENERAL_ERROR, 'Invalid request');
  2388. 				}
  2389. 			}
  2390. 			else
  2391. 			{
  2392. 				message_die(GENERAL_ERROR, 'No pics specified');
  2393. 			}
  2394. 			$sql = "SELECT pic_id
  2395. 					FROM ". ALBUM_TABLE ."
  2396. 					WHERE pic_id IN ($pic_id_sql) AND pic_cat_id <> $cat_id";
  2397. 			if( !$result = $db->sql_query($sql) )
  2398. 			{
  2399. 				message_die(GENERAL_ERROR, 'Could not obtain album information', '', __LINE__, __FILE__, $sql);
  2400. 			}
  2401. 			if( $db->sql_numrows($result) > 0 )
  2402. 			{
  2403. 				message_die(GENERAL_ERROR, $lang['Not_Authorised']);
  2404. 			}
  2405.  
  2406. 			$sql = "DELETE FROM ". ALBUM_COMMENT_TABLE ."
  2407. 					WHERE comment_pic_id IN ($pic_id_sql)";
  2408. 			if( !$result = $db->sql_query($sql) )
  2409. 			{
  2410. 				message_die(GENERAL_ERROR, 'Could not delete related comments', '', __LINE__, __FILE__, $sql);
  2411. 			}
  2412.  
  2413. 			$sql = "DELETE FROM ". ALBUM_RATE_TABLE ."
  2414. 					WHERE rate_pic_id IN ($pic_id_sql)";
  2415. 			if( !$result = $db->sql_query($sql) )
  2416. 			{
  2417. 				message_die(GENERAL_ERROR, 'Could not delete related ratings', '', __LINE__, __FILE__, $sql);
  2418. 			}
  2419.  
  2420. 			$sql = "SELECT pic_filename, pic_thumbnail
  2421. 					FROM ". ALBUM_TABLE ."
  2422. 					WHERE pic_id IN ($pic_id_sql)";
  2423. 			if( !$result = $db->sql_query($sql) )
  2424. 			{
  2425. 				message_die(GENERAL_ERROR, 'Could not obtain filenames', '', __LINE__, __FILE__, $sql);
  2426. 			}
  2427. 			$filerow = array();
  2428. 			while( $row = $db->sql_fetchrow($result) )
  2429. 			{
  2430. 				$filerow[] = $row;
  2431. 			}
  2432. 			for ($i = 0; $i < count($filerow); $i++)
  2433. 			{
  2434. 				if( ($filerow[$i]['pic_thumbnail'] != '') and (@file_exists(ALBUM_CACHE_PATH . $filerow[$i]['pic_thumbnail'])) )
  2435. 				{
  2436. 					@unlink(ALBUM_CACHE_PATH . $filerow[$i]['pic_thumbnail']);
  2437. 				}
  2438. 				@unlink(ALBUM_UPLOAD_PATH . $filerow[$i]['pic_filename']);
  2439. 			}
  2440.  
  2441. 			$sql = "DELETE FROM ". ALBUM_TABLE ."
  2442. 					WHERE pic_id IN ($pic_id_sql)";
  2443. 			if( !$result = $db->sql_query($sql) )
  2444. 			{
  2445. 				message_die(GENERAL_ERROR, 'Could not delete DB entry', '', __LINE__, __FILE__, $sql);
  2446. 			}
  2447.  
  2448. 			$message = $lang['Pics_deleted_successfully'] .'<br /><br />'. sprintf($lang['Click_return_category'], "<a href=\"" . append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id") . "\">", "</a>") .'<br /><br />'. sprintf($lang['Click_return_modcp'], "<a href=\"" . append_sid("album.$phpEx?action=modcp&amp;cat_id=$cat_id") . "\">", "</a>") . "<br /><br />" . sprintf($lang['Click_return_album_index'], "<a href=\"" . append_sid("album.$phpEx") . "\">", "</a>");
  2449.  
  2450. 			message_die(GENERAL_MESSAGE, $message);
  2451. 		}
  2452. 	}
  2453. 	else
  2454. 	{
  2455. 		message_die(GENERAL_ERROR, 'Invalid_mode');
  2456. 	}
  2457. }
  2458.  
  2459. } elseif ( $action == 'page' ) {
  2460.  
  2461. if( isset($HTTP_GET_VARS['pic_id']) )
  2462. {
  2463. 	$pic_id = intval($HTTP_GET_VARS['pic_id']);
  2464. }
  2465. else if( isset($HTTP_POST_VARS['pic_id']) )
  2466. {
  2467. 	$pic_id = intval($HTTP_POST_VARS['pic_id']);
  2468. }
  2469. else
  2470. {
  2471. 	message_die(GENERAL_ERROR, 'No pic_id set');
  2472. }
  2473.  
  2474. if( isset($HTTP_GET_VARS['mode']) ) 
  2475. { 
  2476.         if( ($HTTP_GET_VARS['mode'] == 'next') or ($HTTP_GET_VARS['mode'] == 'previous') ) 
  2477.         { 
  2478.                 $sql = "SELECT pic_id, pic_cat_id, pic_user_id 
  2479.                                 FROM ". ALBUM_TABLE ." 
  2480.                                 WHERE pic_id = $pic_id"; 
  2481.  
  2482.                 if( !($result = $db->sql_query($sql)) ) 
  2483.                 { 
  2484.                         message_die(GENERAL_ERROR, 'Could not query pic information', '', __LINE__, __FILE__, $sql); 
  2485.                 } 
  2486. 		  
  2487. 		        $row = $db->sql_fetchrow($result); 
  2488. 				$cur_pic_cat = $row['pic_cat_id'];
  2489.  
  2490.                 if( empty($row) ) 
  2491.                 { 
  2492.                         message_die(GENERAL_ERROR, 'Bad pic_id'); 
  2493.                 } 
  2494.  
  2495.                 $sql = "SELECT new.pic_id, new.pic_time 
  2496.                                 FROM ". ALBUM_TABLE ." AS new, ". ALBUM_TABLE ." AS cur 
  2497.                                 WHERE cur.pic_id = $pic_id 
  2498.                                         AND new.pic_id <> cur.pic_id 
  2499.                                         AND new.pic_cat_id = cur.pic_cat_id"; 
  2500.                 $sql .= ($HTTP_GET_VARS['mode'] == 'next') ? " AND new.pic_time >= cur.pic_time" : " AND new.pic_time <= cur.pic_time"; 
  2501.                 $sql .= ($row['pic_cat_id'] == PERSONAL_GALLERY) ? " AND new.pic_user_id = cur.pic_user_id" : ""; 
  2502.                 $sql .= ($HTTP_GET_VARS['mode'] == 'next') ? " ORDER BY pic_time ASC LIMIT 1" : " ORDER BY pic_time DESC LIMIT 1"; 
  2503.                 if( !($result = $db->sql_query($sql)) ) 
  2504.                 { 
  2505.                         message_die(GENERAL_ERROR, 'Could not query pic information', '', __LINE__, __FILE__, $sql); 
  2506.                 } 
  2507.  
  2508.                 $row = $db->sql_fetchrow($result); 
  2509.  
  2510.                 $sql = "SELECT min(pic_id), max(pic_id)
  2511.                                 FROM ". ALBUM_TABLE ."
  2512. 			WHERE pic_cat_id = $cur_pic_cat"; 
  2513.  
  2514.                 if( !($result = $db->sql_query($sql)) ) 
  2515.                 { 
  2516.                         message_die(GENERAL_ERROR, 'Could not query pic information', '', __LINE__, __FILE__, $sql); 
  2517.                 } 
  2518.  
  2519.                 $next = $db->sql_fetchrow($result);
  2520. 				
  2521. 				$first_pic = $next['min(pic_id)'];
  2522. 				$last_pic = $next['max(pic_id)'];
  2523. 				
  2524. 	if( empty($row) AND ($HTTP_GET_VARS['mode'] == 'next')) 
  2525.             { 						  
  2526. 		redirect(append_sid("album.$phpEx?action=page&pic_id=$first_pic"));
  2527. 	} 
  2528.                 if( empty($row) AND ($HTTP_GET_VARS['mode'] == 'previous')) 
  2529.                 { 
  2530.                         redirect(append_sid("album.$phpEx?action=page&pic_id=$last_pic"));
  2531.                 } 
  2532. 						
  2533.                 $pic_id = $row['pic_id'];
  2534.         } 
  2535. }
  2536.  
  2537. $sql = "SELECT p.*, u.user_id, u.username, r.rate_pic_id, AVG(r.rate_point) AS rating, COUNT(DISTINCT c.comment_id) AS comments
  2538. 		FROM ". ALBUM_TABLE ." AS p
  2539. 			LEFT JOIN ". USERS_TABLE ." AS u ON p.pic_user_id = u.user_id
  2540. 			LEFT JOIN ". ALBUM_RATE_TABLE ." AS r ON p.pic_id = r.rate_pic_id
  2541. 			LEFT JOIN ". ALBUM_COMMENT_TABLE ." AS c ON p.pic_id = c.comment_pic_id
  2542. 		WHERE pic_id = '$pic_id'
  2543. 		GROUP BY p.pic_id";
  2544. if( !($result = $db->sql_query($sql)) )
  2545. {
  2546. 	message_die(GENERAL_ERROR, 'Could not query pic information', '', __LINE__, __FILE__, $sql);
  2547. }
  2548. $thispic = $db->sql_fetchrow($result);
  2549.  
  2550. $cat_id = $thispic['pic_cat_id'];
  2551. $user_id = $thispic['pic_user_id'];
  2552.  
  2553. if( empty($thispic) or !file_exists(ALBUM_UPLOAD_PATH . $pic_filename) )
  2554. {
  2555. 	message_die(GENERAL_ERROR, $lang['Pic_not_exist']);
  2556. }
  2557.  
  2558. if ($cat_id != PERSONAL_GALLERY)
  2559. {
  2560. 	$sql = "SELECT *
  2561. 			FROM ". ALBUM_CAT_TABLE ."
  2562. 			WHERE cat_id = '$cat_id'";
  2563. 	if( !($result = $db->sql_query($sql)) )
  2564. 	{
  2565. 		message_die(GENERAL_ERROR, 'Could not query category information', '', __LINE__, __FILE__, $sql);
  2566. 	}
  2567.  
  2568. 	$thiscat = $db->sql_fetchrow($result);
  2569. }
  2570. else
  2571. {
  2572. 	$thiscat = init_personal_gallery_cat($user_id);
  2573. }
  2574.  
  2575. if (empty($thiscat))
  2576. {
  2577. 	message_die(GENERAL_ERROR, $lang['Category_not_exist']);
  2578. }
  2579.  
  2580. $album_user_access = album_user_access($cat_id, $thiscat, 1, 0, 0, 0, 0, 0);
  2581.  
  2582. if ($album_user_access['view'] == 0)
  2583. {
  2584. 	if (!$userdata['session_logged_in'])
  2585. 	{
  2586. 		redirect(append_sid("login.$phpEx?redirect=album.$phpEx&action=page&pic_id=$pic_id"));
  2587. 	}
  2588. 	else
  2589. 	{
  2590. 		message_die(GENERAL_ERROR, $lang['Not_Authorised']);
  2591. 	}
  2592. }
  2593.  
  2594. if ($userdata['user_level'] != ADMIN)
  2595. {
  2596. 	if( ($thiscat['cat_approval'] == ADMIN) or (($thiscat['cat_approval'] == MOD) and !$album_user_access['moderator']) )
  2597. 	{
  2598. 		if ($thispic['pic_approval'] != 1)
  2599. 		{
  2600. 			message_die(GENERAL_ERROR, $lang['Not_Authorised']);
  2601. 		}
  2602. 	}
  2603. }
  2604.  
  2605. $page_title = 'Галерея сайта';
  2606. include($phpbb_root_path . 'includes/page_header.'.$phpEx);
  2607.  
  2608. $template->set_filenames(array(
  2609. 	'body' => 'album_page_body.tpl')
  2610. );
  2611.  
  2612. if( ($thispic['pic_user_id'] == ALBUM_GUEST) or ($thispic['username'] == '') )
  2613. {
  2614. 	$poster = ($thispic['pic_username'] == '') ? $lang['Guest'] : $thispic['pic_username'];
  2615. }
  2616. else
  2617. {
  2618. 	$poster = '<a href="'. append_sid("../pages/profile.$phpEx?mode=viewprofile&amp;". POST_USERS_URL .'='. $thispic['user_id']) .'">'. $thispic['username'] .'</a>';
  2619. }
  2620.  
  2621.  
  2622. $template->assign_vars(array(
  2623. 	'CAT_TITLE' => $thiscat['cat_title'],
  2624. 	'U_VIEW_CAT' => ($cat_id != PERSONAL_GALLERY) ? append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id") : append_sid("album.$phpEx?action=personal&amp;user_id=$user_id"),
  2625. 	'U_PIC' => append_sid("album.$phpEx?action=pic&amp;pic_id=$pic_id"),
  2626. 	'PIC_TITLE' => $thispic['pic_title'],
  2627. 	'PIC_DESC' => nl2br($thispic['pic_desc']),
  2628. 	'POSTER' => $poster,
  2629. 	'PIC_TIME' => create_date($board_config['default_dateformat'], $thispic['pic_time'], $board_config['board_timezone']),
  2630. 	'PIC_VIEW' => $thispic['pic_view_count'],
  2631. 	'PIC_RATING' => ($thispic['rating'] != 0) ? round($thispic['rating'], 2) : $lang['Not_rated'],
  2632. 	'PIC_COMMENTS' => $thispic['comments'],
  2633. 	'U_RATE' => append_sid("album.$phpEx?action=rate&amp;pic_id=$pic_id"),
  2634. 	'U_COMMENT' => append_sid("album.$phpEx?action=comment&amp;pic_id=$pic_id"),
  2635. 	'U_NEXT' => append_sid("album.$phpEx?action=page&amp;pic_id=$pic_id&amp;mode=next"),
  2636. 	'U_PREVIOUS' => append_sid("album.$phpEx?action=page&amp;pic_id=$pic_id&amp;mode=previous"),
  2637. 	'L_NEXT' => $lang['Next'],
  2638. 	'L_PREVIOUS' => $lang['Previous'],
  2639. 	'L_RATING' => $lang['Rating'],
  2640. 	'L_PIC_TITLE' => $lang['Pic_Title'],
  2641. 	'L_PIC_DESC' => $lang['Pic_Desc'],
  2642. 	'L_POSTER' => $lang['Poster'],
  2643. 	'L_POSTED' => $lang['Posted'],
  2644. 	'L_VIEW' => $lang['View'],
  2645. 	'L_COMMENTS' => $lang['Comments'])
  2646. );
  2647.  
  2648. if ($album_config['rate'])
  2649. {
  2650. 	$template->assign_block_vars('rate_switch', array());
  2651. }
  2652.  
  2653. if ($album_config['comment'])
  2654. {
  2655. 	$template->assign_block_vars('comment_switch', array());
  2656. }
  2657.  
  2658. $template->pparse('body');
  2659.  
  2660. include($phpbb_root_path . 'includes/page_tail.'.$phpEx);
  2661.  
  2662. } elseif ( $action == 'personal' ) {
  2663.  
  2664. if( isset($HTTP_POST_VARS['user_id']) )
  2665. {
  2666. 	$user_id = intval($HTTP_POST_VARS['user_id']);
  2667. }
  2668. else if( isset($HTTP_GET_VARS['user_id']) )
  2669. {
  2670. 	$user_id = intval($HTTP_GET_VARS['user_id']);
  2671. }
  2672. else
  2673. {
  2674. 	$user_id = $userdata['user_id'];
  2675. }
  2676.  
  2677. if( ($user_id < 1) and (!$userdata['session_logged_in']) )
  2678. {
  2679. 	redirect(append_sid("login.$phpEx?redirect=album.$phpEx&action=personal"));
  2680. }
  2681.  
  2682. $sql = "SELECT username
  2683. 		FROM ". USERS_TABLE ."
  2684. 		WHERE user_id = $user_id";
  2685.  
  2686. if( !($result = $db->sql_query($sql)) )
  2687. {
  2688. 	message_die(GENERAL_ERROR, 'Could not get the username of this category owner', '', __LINE__, __FILE__, $sql);
  2689. }
  2690.  
  2691. $row = $db->sql_fetchrow($result);
  2692.  
  2693. $username = $row['username'];
  2694.  
  2695. if( empty($username) )
  2696. {
  2697. 	message_die(GENERAL_ERROR, 'Sorry, this user does not exist');
  2698. }
  2699.  
  2700. $personal_gallery_access = personal_gallery_access(1,1);
  2701.  
  2702. if( $personal_gallery_access['view'] == 0 )
  2703. {
  2704. 	if (!$userdata['session_logged_in'])
  2705. 	{
  2706. 		redirect(append_sid("login.$phpEx?redirect=album.$phpEx&action=personal&user_id=$user_id"));
  2707. 	}
  2708. 	else
  2709. 	{
  2710. 		message_die(GENERAL_ERROR, $lang['Not_Authorised']);
  2711. 	}
  2712. }
  2713.  
  2714. if ($user_id == $userdata['user_id'])
  2715. {
  2716. 	if( $personal_gallery_access['upload'] == 0 )
  2717. 	{
  2718. 		message_die(GENERAL_MESSAGE, $lang['Not_allowed_to_create_personal_gallery']);
  2719. 	}
  2720. }
  2721.  
  2722. if( isset($HTTP_GET_VARS['start']) )
  2723. {
  2724. 	$start = intval($HTTP_GET_VARS['start']);
  2725. }
  2726. else if( isset($HTTP_POST_VARS['start']) )
  2727. {
  2728. 	$start = intval($HTTP_POST_VARS['start']);
  2729. }
  2730. else
  2731. {
  2732. 	$start = 0;
  2733. }
  2734. $start = ($start < 0) ? 0 : $start;
  2735.  
  2736. if( isset($HTTP_GET_VARS['sort_method']) )
  2737. {
  2738. 	switch ($HTTP_GET_VARS['sort_method'])
  2739. 	{
  2740. 		case 'pic_title':
  2741. 			$sort_method = 'pic_title';
  2742. 			break;
  2743. 		case 'pic_view_count':
  2744. 			$sort_method = 'pic_view_count';
  2745. 			break;
  2746. 		case 'rating':
  2747. 			$sort_method = 'rating';
  2748. 			break;
  2749. 		case 'comments':
  2750. 			$sort_method = 'comments';
  2751. 			break;
  2752. 		case 'new_comment':
  2753. 			$sort_method = 'new_comment';
  2754. 			break;
  2755. 		default:
  2756. 			$sort_method = $album_config['sort_method'];
  2757. 	}
  2758. }
  2759. else if( isset($HTTP_POST_VARS['sort_method']) )
  2760. {
  2761. 	switch ($HTTP_POST_VARS['sort_method'])
  2762. 	{
  2763. 		case 'pic_title':
  2764. 			$sort_method = 'pic_title';
  2765. 			break;
  2766. 		case 'pic_view_count':
  2767. 			$sort_method = 'pic_view_count';
  2768. 			break;
  2769. 		case 'rating':
  2770. 			$sort_method = 'rating';
  2771. 			break;
  2772. 		case 'comments':
  2773. 			$sort_method = 'comments';
  2774. 			break;
  2775. 		case 'new_comment':
  2776. 			$sort_method = 'new_comment';
  2777. 			break;
  2778. 		default:
  2779. 			$sort_method = $album_config['sort_method'];
  2780. 	}
  2781. }
  2782. else
  2783. {
  2784. 	$sort_method = $album_config['sort_method'];
  2785. }
  2786.  
  2787. if( isset($HTTP_GET_VARS['sort_order']) )
  2788. {
  2789. 	switch ($HTTP_GET_VARS['sort_order'])
  2790. 	{
  2791. 		case 'ASC':
  2792. 			$sort_order = 'ASC';
  2793. 			break;
  2794. 		case 'DESC':
  2795. 			$sort_order = 'DESC';
  2796. 			break;
  2797. 		default:
  2798. 			$sort_order = $album_config['sort_order'];
  2799. 	}
  2800. }
  2801. else if( isset($HTTP_POST_VARS['sort_order']) )
  2802. {
  2803. 	switch ($HTTP_POST_VARS['sort_order'])
  2804. 	{
  2805. 		case 'ASC':
  2806. 			$sort_order = 'ASC';
  2807. 			break;
  2808. 		case 'DESC':
  2809. 			$sort_order = 'DESC';
  2810. 			break;
  2811. 		default:
  2812. 			$sort_order = $album_config['sort_order'];
  2813. 	}
  2814. }
  2815. else
  2816. {
  2817. 	$sort_order = $album_config['sort_order'];
  2818. }
  2819.  
  2820. $pics_per_page = $album_config['rows_per_page'] * $album_config['cols_per_page'];
  2821.  
  2822. $sql = "SELECT COUNT(pic_id) AS count
  2823. 		FROM ". ALBUM_TABLE ."
  2824. 		WHERE pic_cat_id = ". PERSONAL_GALLERY ."
  2825. 			AND pic_user_id = $user_id";
  2826. if( !($result = $db->sql_query($sql)) )
  2827. {
  2828. 	message_die(GENERAL_ERROR, 'Could not count pics', '', __LINE__, __FILE__, $sql);
  2829. }
  2830.  
  2831. $row = $db->sql_fetchrow($result);
  2832.  
  2833. $total_pics = $row['count'];
  2834.  
  2835. if ($total_pics > 0)
  2836. {
  2837. 	$limit_sql = ($start == 0) ? $pics_per_page : $start .','. $pics_per_page;
  2838.  
  2839. 	$sql = "SELECT p.pic_id, p.pic_title, p.pic_desc, p.pic_user_id, p.pic_user_ip, p.pic_time, p.pic_view_count, p.pic_lock, r.rate_pic_id, AVG(r.rate_point) AS rating, COUNT(DISTINCT c.comment_id) AS comments, MAX(c.comment_id) as new_comment
  2840. 			FROM ". ALBUM_TABLE ." AS p
  2841. 				LEFT JOIN ". ALBUM_RATE_TABLE ." AS r ON p.pic_id = r.rate_pic_id
  2842. 				LEFT JOIN ". ALBUM_COMMENT_TABLE ." AS c ON p.pic_id = c.comment_pic_id
  2843. 			WHERE p.pic_cat_id = ". PERSONAL_GALLERY ."
  2844. 				AND p.pic_user_id = $user_id
  2845. 			GROUP BY p.pic_id
  2846. 			ORDER BY $sort_method $sort_order
  2847. 			LIMIT $limit_sql";
  2848. 	if( !($result = $db->sql_query($sql)) )
  2849. 	{
  2850. 		message_die(GENERAL_ERROR, 'Could not query pics information', '', __LINE__, __FILE__, $sql);
  2851. 	}
  2852.  
  2853. 	$picrow = array();
  2854.  
  2855. 	while( $row = $db->sql_fetchrow($result) )
  2856. 	{
  2857. 		$picrow[] = $row;
  2858. 	}
  2859.  
  2860. 	for ($i = 0; $i < count($picrow); $i += $album_config['cols_per_page'])
  2861. 	{
  2862.  
  2863. 		for ($j = $i; $j < ($i + $album_config['cols_per_page']); $j++)
  2864. 		{
  2865. 			if( $j >= count($picrow) )
  2866. 			{
  2867. 				break;
  2868. 			}
  2869.  
  2870. 			if(!$picrow[$j]['rating'])
  2871. 			{
  2872. 				$picrow[$j]['rating'] = $lang['Not_rated'];
  2873. 			}
  2874. 			else
  2875. 			{
  2876. 				$picrow[$j]['rating'] = round($picrow[$j]['rating'], 2);
  2877. 			}
  2878.  
  2879. 			$row_class = ( !($j % 2) ) ? 'row_easy' : 'row_hard';
  2880.  
  2881. 			$template->assign_block_vars('picrow', array(
  2882. 				'TITLE' => $picrow[$j]['pic_title'],
  2883. 				'ROW_CLASS' => $row_class,
  2884. 				'TIME' => create_date($board_config['default_dateformat'], $picrow[$j]['pic_time'], $board_config['board_timezone']),
  2885. 				'VIEW' => $picrow[$j]['pic_view_count'],
  2886. 				'RATING' => ($album_config['rate'] == 1) ? ( '<a href="'. append_sid("album.$phpEx?action=rate&amp;pic_id=". $picrow[$j]['pic_id']) . '">' . $lang['Rating'] . '</a>: ' . $picrow[$j]['rating'] . '<br />') : '',
  2887. 				'COMMENTS' => ($album_config['comment'] == 1) ? ( '<a href="'. append_sid("album.$phpEx?action=comment&amp;pic_id=". $picrow[$j]['pic_id']) . '">' . $lang['Comments'] . '</a>: ' . $picrow[$j]['comments'] . '<br />') : '',
  2888. 				'EDIT' => ( ($userdata['user_level'] == ADMIN) or ($userdata['user_id'] == $picrow[$j]['pic_user_id']) ) ? '<a href="'. append_sid("album.$phpEx?action=edit&amp;pic_id=". $picrow[$j]['pic_id']) . '">' . $lang['Edit_pic'] . '</a>|' : '',
  2889. 				'DELETE' => ( ($userdata['user_level'] == ADMIN) or ($userdata['user_id'] == $picrow[$j]['pic_user_id']) ) ? '<a href="'. append_sid("album.$phpEx?action=delete&amp;pic_id=". $picrow[$j]['pic_id']) . '">' . $lang['Delete_pic'] . '</a>|' : '',
  2890. 				'LOCK' => ($userdata['user_level'] == ADMIN) ? '<a href="'. append_sid("album.$phpEx?action=modcp&amp;mode=". (($picrow[$j]['pic_lock'] == 0) ? 'lock' : 'unlock') ."&amp;pic_id=". $picrow[$j]['pic_id']) .'">'. (($picrow[$j]['pic_lock'] == 0) ? $lang['Lock'] : $lang['Unlock']) .'</a>' : '',
  2891. 				'IP' => ($userdata['user_level'] == ADMIN) ? $lang['IP_Address'] . ': ' . decode_ip($picrow[$j]['pic_user_ip']) .'<br />' : ''
  2892. 				)
  2893. 			);
  2894.  
  2895. 			$template->assign_block_vars('picrow.piccol', array(
  2896. 				'U_PIC' => ($album_config['fullpic_popup']) ? append_sid("album.$phpEx?action=pic&amp;pic_id=". $picrow[$j]['pic_id']) : append_sid("album.$phpEx?action=page&amp;pic_id=". $picrow[$j]['pic_id']),
  2897. 				'THUMBNAIL' => append_sid("album.$phpEx?action=thumbnail&amp;pic_id=". $picrow[$j]['pic_id']),
  2898. 				'DESC' => $picrow[$j]['pic_desc']
  2899. 				)
  2900. 			);
  2901. 		}
  2902. 	}
  2903.  
  2904. 	$template->assign_vars(array(
  2905. 		'PAGINATION' => generate_pagination(append_sid("album.$phpEx?action=personal&amp;user_id=$user_id&amp;sort_method=$sort_method&amp;sort_order=$sort_order"), $total_pics, $pics_per_page, $start))
  2906. 	);
  2907. }
  2908. else
  2909. {
  2910. 	$template->assign_block_vars('no_pics', array());
  2911. }
  2912.  
  2913. $sort_rating_option = '';
  2914. $sort_comments_option = '';
  2915. if( $album_config['rate'] == 1 )
  2916. {
  2917. 	$sort_rating_option = '<option value="rating" ';
  2918. 	$sort_rating_option .= ($sort_method == 'rating') ? 'selected="selected"' : '';
  2919. 	$sort_rating_option .= '>' . $lang['Rating'] .'</option>';
  2920. }
  2921. if( $album_config['comment'] == 1 )
  2922. {
  2923. 	$sort_comments_option = '<option value="comments" ';
  2924. 	$sort_comments_option .= ($sort_method == 'comments') ? 'selected="selected"' : '';
  2925. 	$sort_comments_option .= '>' . $lang['Comments'] .'</option>';
  2926.  
  2927. 	$sort_new_comment_option = '<option value="new_comment" ';
  2928. 	$sort_new_comment_option .= ($sort_method == 'new_comment') ? 'selected="selected"' : '';
  2929. 	$sort_new_comment_option .= '>' . $lang['New_Comment'] .'</option>';
  2930. }
  2931.  
  2932. $page_title = 'Галерея сайта';
  2933. include($phpbb_root_path . 'includes/page_header.'.$phpEx);
  2934.  
  2935. $template->set_filenames(array(
  2936. 	'body' => 'album_personal_body.tpl')
  2937. );
  2938.  
  2939. if( $user_id == $userdata['user_id'] )
  2940. {
  2941. 	$template->assign_block_vars('your_personal_gallery', array());
  2942. }
  2943.  
  2944. $template->assign_vars(array(
  2945. 	'U_UPLOAD_PIC' => append_sid("album.$phpEx?action=upload&amp;cat_id=". PERSONAL_GALLERY),
  2946. 	'UPLOAD_PIC_IMG' => $images['upload_pic'],
  2947. 	'L_UPLOAD_PIC' => $lang['Upload_Pic'],
  2948. 	'L_PERSONAL_GALLERY_NOT_CREATED' => sprintf($lang['Personal_gallery_not_created'], $username),
  2949. 	'TARGET_BLANK' => ($album_config['fullpic_popup']) ? 'target="_blank"' : '',
  2950. 	'S_COLS' => $album_config['cols_per_page'],
  2951. 	'S_COL_WIDTH' => (100/$album_config['cols_per_page']) . '%',
  2952. 	'L_VIEW' => $lang['View'],
  2953. 	'L_POSTED' => $lang['Posted'],
  2954. 	'U_PERSONAL_GALLERY' => append_sid("album.$phpEx?action=personal&amp;user_id=$user_id"),
  2955. 	'L_YOUR_PERSONAL_GALLERY' => $lang['Your_Personal_Gallery'],
  2956. 	'L_PERSONAL_GALLERY_EXPLAIN' => $lang['Personal_Gallery_Explain'],
  2957. 	'L_PERSONAL_GALLERY_OF_USER' => sprintf($lang['Personal_Gallery_Of_User'], $username),
  2958. 	'L_SELECT_SORT_METHOD' => $lang['Select_sort_method'],
  2959. 	'L_ORDER' => $lang['Order'],
  2960. 	'L_SORT' => $lang['Sort'],
  2961. 	'L_NO_PICS' => $lang['No_Pics'],
  2962. 	'L_TIME' => $lang['Time'],
  2963. 	'L_PIC_TITLE' => $lang['Pic_Title'],
  2964. 	'SORT_TIME' => ($sort_method == 'pic_time') ? 'selected="selected"' : '',
  2965. 	'SORT_PIC_TITLE' => ($sort_method == 'pic_title') ? 'selected="selected"' : '',
  2966. 	'SORT_VIEW' => ($sort_method == 'pic_view_count') ? 'selected="selected"' : '',
  2967. 	'SORT_RATING_OPTION' => $sort_rating_option,
  2968. 	'SORT_COMMENTS_OPTION' => $sort_comments_option,
  2969. 	'SORT_NEW_COMMENT_OPTION' => $sort_new_comment_option,
  2970. 	'L_ASC' => $lang['Sort_Ascending'],
  2971. 	'L_DESC' => $lang['Sort_Descending'],
  2972. 	'SORT_ASC' => ($sort_order == 'ASC') ? 'selected="selected"' : '',
  2973. 	'SORT_DESC' => ($sort_order == 'DESC') ? 'selected="selected"' : '')
  2974. );
  2975.  
  2976. $template->pparse('body');
  2977.  
  2978. include($phpbb_root_path . 'includes/page_tail.'.$phpEx);
  2979.  
  2980. } elseif ( $action == 'personal_index' ) {
  2981.  
  2982. $start = ( isset($HTTP_GET_VARS['start']) ) ? intval($HTTP_GET_VARS['start']) : 0;
  2983. $start = ($start < 0) ? 0 : $start;
  2984.  
  2985. if ( isset($HTTP_GET_VARS['mode']) || isset($HTTP_POST_VARS['mode']) )
  2986. {
  2987. 	$mode = ( isset($HTTP_POST_VARS['mode']) ) ? $HTTP_POST_VARS['mode'] : $HTTP_GET_VARS['mode'];
  2988. }
  2989. else
  2990. {
  2991. 	$mode = 'joined';
  2992. }
  2993.  
  2994. if(isset($HTTP_POST_VARS['order']))
  2995. {
  2996. 	$sort_order = ($HTTP_POST_VARS['order'] == 'ASC') ? 'ASC' : 'DESC';
  2997. }
  2998. else if(isset($HTTP_GET_VARS['order']))
  2999. {
  3000. 	$sort_order = ($HTTP_GET_VARS['order'] == 'ASC') ? 'ASC' : 'DESC';
  3001. }
  3002. else
  3003. {
  3004. 	$sort_order = 'ASC';
  3005. }
  3006.  
  3007. $mode_types_text = array($lang['Sort_Joined'], $lang['Sort_Username'], $lang['Pics'], $lang['Last_Pic']);
  3008. $mode_types = array('joindate', 'username', 'pics', 'last_pic');
  3009.  
  3010. $select_sort_mode = '<select name="mode">';
  3011. for($i = 0; $i < count($mode_types_text); $i++)
  3012. {
  3013. 	$selected = ( $mode == $mode_types[$i] ) ? ' selected="selected"' : '';
  3014. 	$select_sort_mode .= '<option value="' . $mode_types[$i] . '"' . $selected . '>' . $mode_types_text[$i] . '</option>';
  3015. }
  3016. $select_sort_mode .= '</select>';
  3017.  
  3018. $select_sort_order = '<select name="order">';
  3019. if($sort_order == 'ASC')
  3020. {
  3021. 	$select_sort_order .= '<option value="ASC" selected="selected">' . $lang['Sort_Ascending'] . '</option><option value="DESC">' . $lang['Sort_Descending'] . '</option>';
  3022. }
  3023. else
  3024. {
  3025. 	$select_sort_order .= '<option value="ASC">' . $lang['Sort_Ascending'] . '</option><option value="DESC" selected="selected">' . $lang['Sort_Descending'] . '</option>';
  3026. }
  3027. $select_sort_order .= '</select>';
  3028.  
  3029. $page_title = 'Галерея сайта';
  3030. include($phpbb_root_path . 'includes/page_header.'.$phpEx);
  3031.  
  3032. $template->set_filenames(array(
  3033. 	'body' => 'album_personal_index_body.tpl')
  3034. );
  3035.  
  3036. $template->assign_vars(array(
  3037. 	'L_SELECT_SORT_METHOD' => $lang['Select_sort_method'],
  3038. 	'L_ORDER' => $lang['Order'],
  3039. 	'L_SORT' => $lang['Sort'],
  3040. 	'L_JOINED' => $lang['Joined'],
  3041. 	'L_PICS' => $lang['Pics'],
  3042. 	'L_USERS_PERSONAL_GALLERIES' => $lang['Users_Personal_Galleries'],
  3043. 	'S_MODE_SELECT' => $select_sort_mode,
  3044. 	'S_ORDER_SELECT' => $select_sort_order,
  3045. 	'S_MODE_ACTION' => append_sid("album.$phpEx?action=personal_index")
  3046. 	)
  3047. );
  3048.  
  3049.  
  3050. switch( $mode )
  3051. {
  3052. 	case 'joined':
  3053. 		$order_by = "user_regdate ASC LIMIT $start, " . $board_config['topics_per_page'];
  3054. 		break;
  3055. 	case 'username':
  3056. 		$order_by = "username $sort_order LIMIT $start, " . $board_config['topics_per_page'];
  3057. 		break;
  3058. 	case 'pics':
  3059. 		$order_by = "pics $sort_order LIMIT $start, " . $board_config['topics_per_page'];
  3060. 		break;
  3061. 	case 'last_pic':
  3062. 		$order_by = "last_pic $sort_order LIMIT $start, " . $board_config['topics_per_page'];
  3063. 		break;
  3064. 	default:
  3065. 		$order_by = "user_regdate $sort_order LIMIT $start, " . $board_config['topics_per_page'];
  3066. 		break;
  3067. }
  3068.  
  3069. $sql = "SELECT u.username, u.user_id, u.user_regdate, COUNT(p.pic_id) AS pics, MAX(p.pic_id) AS last_pic
  3070. 		FROM ". USERS_TABLE ." AS u, ". ALBUM_TABLE ." as p
  3071. 		WHERE u.user_id <> ". ANONYMOUS ."
  3072. 			AND u.user_id = p.pic_user_id
  3073. 			AND p.pic_cat_id = ". PERSONAL_GALLERY ."
  3074. 		GROUP BY user_id
  3075. 		ORDER BY $order_by";
  3076.  
  3077. if( !($result = $db->sql_query($sql)) )
  3078. {
  3079. 	message_die(GENERAL_ERROR, 'Could not query users', '', __LINE__, __FILE__, $sql);
  3080. }
  3081.  
  3082. $memberrow = array();
  3083.  
  3084. while( $row = $db->sql_fetchrow($result) )
  3085. {
  3086. 	$memberrow[] = $row;
  3087. }
  3088.  
  3089. for ($i = 0; $i < count($memberrow); $i++)
  3090. {
  3091. 	$template->assign_block_vars('memberrow', array(
  3092. 		'ROW_CLASS' => ( !($i % 2) ) ? 'row_easy' : 'row_hard',
  3093. 		'USERNAME' => $memberrow[$i]['username'],
  3094. 		'U_VIEWGALLERY' => append_sid("album.$phpEx?action=personal&amp;user_id=". $memberrow[$i]['user_id']),
  3095. 		'JOINED' => create_date($lang['DATE_FORMAT'], $memberrow[$i]['user_regdate'], $board_config['board_timezone']),
  3096. 		'PICS' => $memberrow[$i]['pics'])
  3097. 	);
  3098. }
  3099.  
  3100. $sql = "SELECT COUNT(DISTINCT u.user_id) AS total
  3101. 		FROM ". USERS_TABLE ." AS u, ". ALBUM_TABLE ." AS p
  3102. 		WHERE u.user_id <> ". ANONYMOUS ."
  3103. 			AND u.user_id = p.pic_user_id
  3104. 			AND p.pic_cat_id = ". PERSONAL_GALLERY;
  3105.  
  3106. if ( !($result = $db->sql_query($sql)) )
  3107. {
  3108. 	message_die(GENERAL_ERROR, 'Error getting total galleries', '', __LINE__, __FILE__, $sql);
  3109. }
  3110.  
  3111. if ( $total = $db->sql_fetchrow($result) )
  3112. {
  3113. 	$total_galleries = $total['total'];
  3114.  
  3115. 	$pagination = ( $total_galleries > $board_config['topics_per_page'] ) ? generate_pagination("album.$phpEx?action=personal_index&amp;mode=$mode&amp;order=$sort_order", $total_galleries, $board_config['topics_per_page'], $start) : '';
  3116. }
  3117.  
  3118. $template->assign_vars(array(
  3119. 	'PAGINATION' => $pagination,
  3120. 	'PAGE_NUMBER' => sprintf($lang['Page_of'], ( floor( $start / $board_config['topics_per_page'] ) + 1 ), ceil( $total_galleries / $board_config['topics_per_page'] ))
  3121. 	)
  3122. );
  3123.  
  3124. if ( $total_galleries == 0 )
  3125. {
  3126. 	$template->assign_block_vars('no_pics', array());
  3127. }
  3128.  
  3129. $template->pparse('body');
  3130.  
  3131. include($phpbb_root_path . 'includes/page_tail.'.$phpEx);
  3132.  
  3133. } elseif ( $action == 'pic' ) {
  3134.  
  3135. if( isset($HTTP_GET_VARS['pic_id']) )
  3136. {
  3137. 	$pic_id = intval($HTTP_GET_VARS['pic_id']);
  3138. }
  3139. else if( isset($HTTP_POST_VARS['pic_id']) )
  3140. {
  3141. 	$pic_id = intval($HTTP_POST_VARS['pic_id']);
  3142. }
  3143. else
  3144. {
  3145. 	die('No pics specified');
  3146. }
  3147.  
  3148. $sql = "SELECT *
  3149. 		FROM ". ALBUM_TABLE ."
  3150. 		WHERE pic_id = '$pic_id'";
  3151. if( !($result = $db->sql_query($sql)) )
  3152. {
  3153. 	message_die(GENERAL_ERROR, 'Could not query pic information', '', __LINE__, __FILE__, $sql);
  3154. }
  3155. $thispic = $db->sql_fetchrow($result);
  3156.  
  3157. $cat_id = $thispic['pic_cat_id'];
  3158. $user_id = $thispic['pic_user_id'];
  3159.  
  3160. $pic_filetype = substr($thispic['pic_filename'], strlen($thispic['pic_filename']) - 4, 4);
  3161. $pic_filename = $thispic['pic_filename'];
  3162. $pic_thumbnail = $thispic['pic_thumbnail'];
  3163.  
  3164. if( empty($thispic) or !file_exists(ALBUM_UPLOAD_PATH . $pic_filename) )
  3165. {
  3166. 	die($lang['Pic_not_exist']);
  3167. }
  3168.  
  3169. if ($cat_id != PERSONAL_GALLERY)
  3170. {
  3171. 	$sql = "SELECT *
  3172. 			FROM ". ALBUM_CAT_TABLE ."
  3173. 			WHERE cat_id = '$cat_id'";
  3174. 	if( !($result = $db->sql_query($sql)) )
  3175. 	{
  3176. 		message_die(GENERAL_ERROR, 'Could not query category information', '', __LINE__, __FILE__, $sql);
  3177. 	}
  3178.  
  3179. 	$thiscat = $db->sql_fetchrow($result);
  3180. }
  3181. else
  3182. {
  3183. 	$thiscat = init_personal_gallery_cat($user_id);
  3184. }
  3185.  
  3186. if (empty($thiscat))
  3187. {
  3188. 	die($lang['Category_not_exist']);
  3189. }
  3190.  
  3191. $album_user_access = album_user_access($cat_id, $thiscat, 1, 0, 0, 0, 0, 0);
  3192. if ($album_user_access['view'] == 0)
  3193. {
  3194. 	die($lang['Not_Authorised']);
  3195. }
  3196.  
  3197. if ($userdata['user_level'] != ADMIN)
  3198. {
  3199. 	if( ($thiscat['cat_approval'] == ADMIN) or (($thiscat['cat_approval'] == MOD) and !$album_user_access['moderator']) )
  3200. 	{
  3201. 		if ($thispic['pic_approval'] != 1)
  3202. 		{
  3203. 			die($lang['Not_Authorised']);
  3204. 		}
  3205. 	}
  3206. }
  3207.  
  3208. if( ($album_config['hotlink_prevent'] == 1) and (isset($HTTP_SERVER_VARS['HTTP_REFERER'])) )
  3209. {
  3210. 	$check_referer = explode('?', $HTTP_SERVER_VARS['HTTP_REFERER']);
  3211. 	$check_referer = trim($check_referer[0]);
  3212.  
  3213. 	$good_referers = array();
  3214.  
  3215. 	if ($album_config['hotlink_allowed'] != '')
  3216. 	{
  3217. 		$good_referers = explode(',', $album_config['hotlink_allowed']);
  3218. 	}
  3219.  
  3220. 	$good_referers[] = $board_config['server_name'] . $board_config['script_path'];
  3221.  
  3222. 	$errored = TRUE;
  3223.  
  3224. 	for ($i = 0; $i < count($good_referers); $i++)
  3225. 	{
  3226. 		$good_referers[$i] = trim($good_referers[$i]);
  3227.  
  3228. 		if( (strstr($check_referer, $good_referers[$i])) and ($good_referers[$i] != '') )
  3229. 		{
  3230. 			$errored = FALSE;
  3231. 		}
  3232. 	}
  3233.  
  3234. 	if ($errored)
  3235. 	{
  3236. 		die($lang['Not_Authorised']);
  3237. 	}
  3238. }
  3239.  
  3240. $sql = "UPDATE ". ALBUM_TABLE ."
  3241. 		SET pic_view_count = pic_view_count + 1
  3242. 		WHERE pic_id = '$pic_id'";
  3243. if( !($result = $db->sql_query($sql)) )
  3244. {
  3245. 	message_die(GENERAL_ERROR, 'Could not update pic information', '', __LINE__, __FILE__, $sql);
  3246. }
  3247.  
  3248. switch ( $pic_filetype )
  3249. {
  3250. 	case '.png':
  3251. 		header('Content-type: image/png');
  3252. 		break;
  3253. 	case '.gif':
  3254. 		header('Content-type: image/gif');
  3255. 		break;
  3256. 	case '.jpg':
  3257. 		header('Content-type: image/jpeg');
  3258. 		break;
  3259. 	default:
  3260. 		die('The filename data in the DB was corrupted');
  3261. }
  3262.  
  3263. readfile(ALBUM_UPLOAD_PATH  . $thispic['pic_filename']);
  3264.  
  3265. exit;
  3266.  
  3267. } elseif ( $action == 'rate' ) {
  3268.  
  3269. if( $album_config['rate'] == 0 )
  3270. {
  3271. 	message_die(GENERAL_MESSAGE, $lang['Not_Authorised']);
  3272. }
  3273.  
  3274. if( isset($HTTP_GET_VARS['pic_id']) )
  3275. {
  3276. 	$pic_id = intval($HTTP_GET_VARS['pic_id']);
  3277. }
  3278. else if( isset($HTTP_POST_VARS['pic_id']) )
  3279. {
  3280. 	$pic_id = intval($HTTP_POST_VARS['pic_id']);
  3281. }
  3282. else
  3283. {
  3284. 	message_die(GENERAL_ERROR, 'No pics specified');
  3285. }
  3286.  
  3287. $sql = "SELECT p.*, u.user_id, u.username, r.rate_pic_id, AVG(r.rate_point) AS rating
  3288. 		FROM ". ALBUM_TABLE ." AS p
  3289. 			LEFT JOIN ". USERS_TABLE ." AS u ON p.pic_user_id = u.user_id
  3290. 			LEFT JOIN ". ALBUM_RATE_TABLE ." AS r ON p.pic_id = r.rate_pic_id
  3291. 		WHERE pic_id = '$pic_id'
  3292. 		GROUP BY p.pic_id";
  3293. if( !($result = $db->sql_query($sql)) )
  3294. {
  3295. 	message_die(GENERAL_ERROR, 'Could not query pic information', '', __LINE__, __FILE__, $sql);
  3296. }
  3297. $thispic = $db->sql_fetchrow($result);
  3298.  
  3299. $cat_id = $thispic['pic_cat_id'];
  3300. $user_id = $thispic['pic_user_id'];
  3301.  
  3302. $pic_filename = $thispic['pic_filename'];
  3303. $pic_thumbnail = $thispic['pic_thumbnail'];
  3304.  
  3305. if( empty($thispic) )
  3306. {
  3307. 	message_die(GENERAL_ERROR, $lang['Pic_not_exist']);
  3308. }
  3309.  
  3310. if ($cat_id != PERSONAL_GALLERY)
  3311. {
  3312. 	$sql = "SELECT *
  3313. 			FROM ". ALBUM_CAT_TABLE ."
  3314. 			WHERE cat_id = '$cat_id'";
  3315. 	if( !($result = $db->sql_query($sql)) )
  3316. 	{
  3317. 		message_die(GENERAL_ERROR, 'Could not query category information', '', __LINE__, __FILE__, $sql);
  3318. 	}
  3319.  
  3320. 	$thiscat = $db->sql_fetchrow($result);
  3321. }
  3322. else
  3323. {
  3324. 	$thiscat = init_personal_gallery_cat($user_id);
  3325. }
  3326.  
  3327. if (empty($thiscat))
  3328. {
  3329. 	message_die(GENERAL_ERROR, $lang['Category_not_exist']);
  3330. }
  3331.  
  3332. $album_user_access = album_user_access($cat_id, $thiscat, 0, 0, 1, 0, 0, 0);
  3333.  
  3334. if ($album_user_access['rate'] == 0)
  3335. {
  3336. 	if (!$userdata['session_logged_in'])
  3337. 	{
  3338. 		redirect(append_sid("login.$phpEx?redirect=album.$phpEx&action=rate&pic_id=$pic_id"));
  3339. 	}
  3340. 	else
  3341. 	{
  3342. 		message_die(GENERAL_ERROR, $lang['Not_Authorised']);
  3343. 	}
  3344. }
  3345.  
  3346. if( $userdata['session_logged_in'] )
  3347. {
  3348. 	$sql = "SELECT *
  3349. 			FROM ". ALBUM_RATE_TABLE ."
  3350. 			WHERE rate_pic_id = '$pic_id'
  3351. 				AND rate_user_id = '". $userdata['user_id'] ."'
  3352. 			LIMIT 1";
  3353.  
  3354. 	if( !$result = $db->sql_query($sql) )
  3355. 	{
  3356. 		message_die(GENERAL_ERROR, 'Could not query rating information', '', __LINE__, __FILE__, $sql);
  3357. 	}
  3358.  
  3359. 	if ($db->sql_numrows($result) > 0)
  3360. 	{
  3361. 		$already_rated = TRUE;
  3362. 	}
  3363. 	else
  3364. 	{
  3365. 		$already_rated = FALSE;
  3366. 	}
  3367. }
  3368.  
  3369. if( !isset($HTTP_POST_VARS['rate']) )
  3370. {
  3371. 	if (!$already_rated)
  3372. 	{
  3373. 		for ($i = 0; $i < $album_config['rate_scale']; $i++)
  3374. 		{
  3375. 			$template->assign_block_vars('rate_row', array(
  3376. 				'POINT' => ($i + 1)
  3377. 				)
  3378. 			);
  3379. 		}
  3380. 	}
  3381.  
  3382. 	$page_title = 'Галерея сайта';
  3383. 	include($phpbb_root_path . 'includes/page_header.'.$phpEx);
  3384.  
  3385. 	$template->set_filenames(array(
  3386. 		'body' => 'album_rate_body.tpl')
  3387. 	);
  3388.  
  3389. 	if( ($thispic['pic_user_id'] == ALBUM_GUEST) or ($thispic['username'] == '') )
  3390. 	{
  3391. 		$poster = ($thispic['pic_username'] == '') ? $lang['Guest'] : $thispic['pic_username'];
  3392. 	}
  3393. 	else
  3394. 	{
  3395. 		$poster = '<a href="'. append_sid("../pages/profile.$phpEx?mode=viewprofile&amp;". POST_USERS_URL .'='. $thispic['user_id']) .'">'. $thispic['username'] .'</a>';
  3396. 	}
  3397.  
  3398. 	$template->assign_vars(array(
  3399. 		'CAT_TITLE' => $thiscat['cat_title'],
  3400. 		'U_VIEW_CAT' => ($cat_id != PERSONAL_GALLERY) ? append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id") : append_sid("album.$phpEx?action=personal&amp;user_id=$user_id"),
  3401. 		'U_THUMBNAIL' => append_sid("album.$phpEx?action=thumbnail&amp;pic_id=$pic_id"),
  3402. 		'U_PIC' => ($album_config['fullpic_popup']) ? append_sid("album.$phpEx?action=pic&amp;pic_id=$pic_id") : append_sid("album.$phpEx?action=page&amp;pic_id=$pic_id"),
  3403. 		'PIC_TITLE' => $thispic['pic_title'],
  3404. 		'PIC_DESC' => nl2br($thispic['pic_desc']),
  3405. 		'POSTER' => $poster,
  3406. 		'PIC_TIME' => create_date($board_config['default_dateformat'], $thispic['pic_time'], $board_config['board_timezone']),
  3407. 		'PIC_VIEW' => $thispic['pic_view_count'],
  3408. 		'PIC_RATING' => ($thispic['rating'] != 0) ? round($thispic['rating'], 2) : $lang['Not_rated'],
  3409. 		'S_RATE_MSG' => ($already_rated) ? $lang['Already_rated'] : $lang['Rating'],
  3410. 		'TARGET_BLANK' => ($album_config['fullpic_popup']) ? 'target="_blank"' : '',
  3411. 		'L_RATING' => $lang['Rating'],
  3412. 		'L_PIC_TITLE' => $lang['Pic_Title'],
  3413. 		'L_PIC_DESC' => $lang['Pic_Desc'],
  3414. 		'L_POSTER' => $lang['Poster'],
  3415. 		'L_POSTED' => $lang['Posted'],
  3416. 		'L_VIEW' => $lang['View'],
  3417. 		'L_CURRENT_RATING' => $lang['Current_Rating'],
  3418. 		'L_PLEASE_RATE_IT' => $lang['Please_Rate_It'],
  3419. 		'L_SUBMIT' => $lang['Submit'],
  3420. 		'S_ALBUM_ACTION' => append_sid("album.$phpEx?action=rate&amp;pic_id=$pic_id"),
  3421.  
  3422. 		)
  3423. 	);
  3424.  
  3425. 	$template->pparse('body');
  3426.  
  3427. 	include($phpbb_root_path . 'includes/page_tail.'.$phpEx);
  3428. }
  3429. else
  3430. {
  3431. 	$rate_point = intval($HTTP_POST_VARS['rate']);
  3432.  
  3433. 	if( ($rate_point <= 0) or ($rate_point > $album_config['rate_scale']) )
  3434. 	{
  3435. 		message_die(GENERAL_ERROR, 'Bad submited value');
  3436. 	}
  3437.  
  3438. 	$rate_user_id = $userdata['user_id'];
  3439. 	$rate_user_ip = $userdata['session_ip'];
  3440.  
  3441. 	if ($already_rated)
  3442. 	{
  3443. 		message_die(GENERAL_ERROR, $lang['Already_rated']);
  3444. 	}
  3445.  
  3446. 	$sql = "INSERT INTO ". ALBUM_RATE_TABLE ." (rate_pic_id, rate_user_id, rate_user_ip, rate_point)
  3447. 			VALUES ('$pic_id', '$rate_user_id', '$rate_user_ip', '$rate_point')";
  3448.  
  3449. 	if( !$result = $db->sql_query($sql) )
  3450. 	{
  3451. 		message_die(GENERAL_ERROR, 'Could not insert new rating', '', __LINE__, __FILE__, $sql);
  3452. 	}
  3453.  
  3454. 	$message = $lang['Album_rate_successfully'];
  3455.  
  3456. 	if ($cat_id != PERSONAL_GALLERY)
  3457. 	{
  3458. 		$template->assign_vars(array(
  3459. 			'META' => '<meta http-equiv="refresh" content="3;url=' . append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id") . '">')
  3460. 		);
  3461.  
  3462. 		$message .= "<br /><br />" . sprintf($lang['Click_return_category'], "<a href=\"" . append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id") . "\">", "</a>");
  3463. 	}
  3464. 	else
  3465. 	{
  3466. 		$template->assign_vars(array(
  3467. 			'META' => '<meta http-equiv="refresh" content="3;url=' . append_sid("album.$phpEx?action=personal&amp;user_id=$user_id") . '">')
  3468. 		);
  3469.  
  3470. 		$message .= "<br /><br />" . sprintf($lang['Click_return_personal_gallery'], "<a href=\"" . append_sid("album.$phpEx?action=personal&amp;user_id=$user_id") . "\">", "</a>");
  3471. 	}
  3472.  
  3473. 	$message .= "<br /><br />" . sprintf($lang['Click_return_album_index'], "<a href=\"" . append_sid("album.$phpEx") . "\">", "</a>");
  3474.  
  3475. 	message_die(GENERAL_MESSAGE, $message);
  3476. }
  3477.  
  3478. } elseif ( $action == 'thumbnail' ) {
  3479.  
  3480. if( isset($HTTP_GET_VARS['pic_id']) )
  3481. {
  3482. 	$pic_id = intval($HTTP_GET_VARS['pic_id']);
  3483. }
  3484. else if( isset($HTTP_POST_VARS['pic_id']) )
  3485. {
  3486. 	$pic_id = intval($HTTP_POST_VARS['pic_id']);
  3487. }
  3488. else
  3489. {
  3490. 	die('No pics specified');
  3491. }
  3492.  
  3493. $sql = "SELECT *
  3494. 		FROM ". ALBUM_TABLE ."
  3495. 		WHERE pic_id = '$pic_id'";
  3496. if( !($result = $db->sql_query($sql)) )
  3497. {
  3498. 	message_die(GENERAL_ERROR, 'Could not query pic information', '', __LINE__, __FILE__, $sql);
  3499. }
  3500. $thispic = $db->sql_fetchrow($result);
  3501.  
  3502. $cat_id = $thispic['pic_cat_id'];
  3503. $user_id = $thispic['pic_user_id'];
  3504.  
  3505. $pic_filetype = substr($thispic['pic_filename'], strlen($thispic['pic_filename']) - 4, 4);
  3506. $pic_filename = $thispic['pic_filename'];
  3507. $pic_thumbnail = $thispic['pic_thumbnail'];
  3508.  
  3509. if( empty($thispic) or !file_exists(ALBUM_UPLOAD_PATH . $pic_filename) )
  3510. {
  3511. 	die($lang['Pic_not_exist']);
  3512. }
  3513.  
  3514. if ($cat_id != PERSONAL_GALLERY)
  3515. {
  3516. 	$sql = "SELECT *
  3517. 			FROM ". ALBUM_CAT_TABLE ."
  3518. 			WHERE cat_id = '$cat_id'";
  3519. 	if( !($result = $db->sql_query($sql)) )
  3520. 	{
  3521. 		message_die(GENERAL_ERROR, 'Could not query category information', '', __LINE__, __FILE__, $sql);
  3522. 	}
  3523.  
  3524. 	$thiscat = $db->sql_fetchrow($result);
  3525. }
  3526. else
  3527. {
  3528. 	$thiscat = init_personal_gallery_cat($user_id);
  3529. }
  3530.  
  3531. if (empty($thiscat))
  3532. {
  3533. 	die($lang['Category_not_exist']);
  3534. }
  3535.  
  3536. $album_user_access = album_user_access($cat_id, $thiscat, 1, 0, 0, 0, 0, 0);
  3537.  
  3538. if ($album_user_access['view'] == 0)
  3539. {
  3540. 	die($lang['Not_Authorised']);
  3541. }
  3542.  
  3543. if ($userdata['user_level'] != ADMIN)
  3544. {
  3545. 	if( ($thiscat['cat_approval'] == ADMIN) or (($thiscat['cat_approval'] == MOD) and !$album_user_access['moderator']) )
  3546. 	{
  3547. 		if ($thispic['pic_approval'] != 1)
  3548. 		{
  3549. 			die($lang['Not_Authorised']);
  3550. 		}
  3551. 	}
  3552. }
  3553.  
  3554. if( ($album_config['hotlink_prevent'] == 1) and (isset($HTTP_SERVER_VARS['HTTP_REFERER'])) )
  3555. {
  3556. 	$check_referer = explode('?', $HTTP_SERVER_VARS['HTTP_REFERER']);
  3557. 	$check_referer = trim($check_referer[0]);
  3558.  
  3559. 	$good_referers = array();
  3560.  
  3561. 	if ($album_config['hotlink_allowed'] != '')
  3562. 	{
  3563. 		$good_referers = explode(',', $album_config['hotlink_allowed']);
  3564. 	}
  3565.  
  3566. 	$good_referers[] = $board_config['server_name'] . $board_config['script_path'];
  3567.  
  3568. 	$errored = TRUE;
  3569.  
  3570. 	for ($i = 0; $i < count($good_referers); $i++)
  3571. 	{
  3572. 		$good_referers[$i] = trim($good_referers[$i]);
  3573.  
  3574. 		if( (strstr($check_referer, $good_referers[$i])) and ($good_referers[$i] != '') )
  3575. 		{
  3576. 			$errored = FALSE;
  3577. 		}
  3578. 	}
  3579.  
  3580. 	if ($errored)
  3581. 	{
  3582. 		die($lang['Not_Authorised']);
  3583. 	}
  3584. }
  3585.  
  3586. if( ($pic_filetype != '.jpg') and ($pic_filetype != '.png') and ($pic_filetype != '.gif') )
  3587. {
  3588. 	header('Content-type: image/jpeg');
  3589. 	readfile($images['no_thumbnail']);
  3590. 	exit;
  3591. }
  3592. else
  3593. {
  3594. 	if( ($album_config['thumbnail_cache'] == 1) and ($pic_thumbnail != '') and file_exists(ALBUM_CACHE_PATH . $pic_thumbnail) )
  3595. 	{
  3596. 		switch ($pic_filetype)
  3597. 		{
  3598. 		  case '.gif':
  3599. 			case '.jpg':
  3600. 				header('Content-type: image/jpeg');
  3601. 				break;
  3602. 			case '.png':
  3603. 				header('Content-type: image/png');
  3604. 				break;
  3605. 		}
  3606.  
  3607. 		readfile(ALBUM_CACHE_PATH . $pic_thumbnail);
  3608. 		exit;
  3609. 	}
  3610.  
  3611. 	$pic_size = @getimagesize(ALBUM_UPLOAD_PATH . $pic_filename);
  3612. 	$pic_width = $pic_size[0];
  3613. 	$pic_height = $pic_size[1];
  3614.  
  3615. 	$gd_errored = FALSE;
  3616. 	switch ($pic_filetype)
  3617. 	{
  3618. 	 case '.gif':
  3619.       $read_function = 'imagecreatefromgif';
  3620.       $pic_filetype = '.jpg';
  3621.    break;
  3622. 		case '.jpg':
  3623. 			$read_function = 'imagecreatefromjpeg';
  3624. 			break;
  3625. 		case '.png':
  3626. 			$read_function = 'imagecreatefrompng';
  3627. 			break;
  3628. 	}
  3629.  
  3630. 	$src = @$read_function(ALBUM_UPLOAD_PATH  . $pic_filename);
  3631.  
  3632. 	if (!$src)
  3633. 	{
  3634. 		$gd_errored = TRUE;
  3635. 		$pic_thumbnail = '';
  3636. 	}
  3637. 	else if( ($pic_width > $album_config['thumbnail_size']) or ($pic_height > $album_config['thumbnail_size']) )
  3638. 	{
  3639. 		if ($pic_width > $pic_height)
  3640. 		{
  3641. 			$thumbnail_width = $album_config['thumbnail_size'];
  3642. 			$thumbnail_height = $album_config['thumbnail_size'] * ($pic_height/$pic_width);
  3643. 		}
  3644. 		else
  3645. 		{
  3646. 			$thumbnail_height = $album_config['thumbnail_size'];
  3647. 			$thumbnail_width = $album_config['thumbnail_size'] * ($pic_width/$pic_height);
  3648. 		}
  3649.  
  3650. 		$thumbnail = ($album_config['gd_version'] == 1) ? @imagecreate($thumbnail_width, $thumbnail_height) : @imagecreatetruecolor($thumbnail_width, $thumbnail_height);
  3651.  
  3652. 		$resize_function = ($album_config['gd_version'] == 1) ? 'imagecopyresized' : 'imagecopyresampled';
  3653.  
  3654. 		@$resize_function($thumbnail, $src, 0, 0, 0, 0, $thumbnail_width, $thumbnail_height, $pic_width, $pic_height);
  3655. 	}
  3656. 	else
  3657. 	{
  3658. 		$thumbnail = $src;
  3659. 	}
  3660.  
  3661. 	if (!$gd_errored)
  3662. 	{
  3663. 		if ($album_config['thumbnail_cache'] == 1)
  3664. 		{
  3665. 			$pic_thumbnail = $pic_filename;
  3666.  
  3667. 			switch ($pic_filetype)
  3668. 			{
  3669. 				case '.jpg':
  3670. 					@imagejpeg($thumbnail, ALBUM_CACHE_PATH . $pic_thumbnail, $album_config['thumbnail_quality']);
  3671. 					break;
  3672. 				case '.png':
  3673. 					@imagepng($thumbnail, ALBUM_CACHE_PATH . $pic_thumbnail);
  3674. 					break;
  3675. 			}
  3676.  
  3677. 			@chmod(ALBUM_CACHE_PATH . $pic_thumbnail, 0777);
  3678. 		}
  3679.  
  3680. 		switch ($pic_filetype)
  3681. 		{
  3682. 			case '.jpg':
  3683. 				@imagejpeg($thumbnail, '', $album_config['thumbnail_quality']);
  3684. 				break;
  3685. 			case '.png':
  3686. 				@imagepng($thumbnail);
  3687. 				break;
  3688. 		}
  3689.  
  3690. 		exit;
  3691. 	}
  3692. 	else
  3693. 	{
  3694. 		header('Content-type: image/jpeg');
  3695. 		readfile('images/nothumbnail.jpg');
  3696. 		exit;
  3697. 	}
  3698. }
  3699.  
  3700. } elseif ( $action == 'upload' ) {
  3701.  
  3702. if( isset($HTTP_POST_VARS['cat_id']) )
  3703. {
  3704. 	$cat_id = intval($HTTP_POST_VARS['cat_id']);
  3705. }
  3706. else if( isset($HTTP_GET_VARS['cat_id']) )
  3707. {
  3708. 	$cat_id = intval($HTTP_GET_VARS['cat_id']);
  3709. }
  3710. else
  3711. {
  3712. 	message_die(GENERAL_ERROR, 'No categories specified');
  3713. }
  3714.  
  3715. if ($cat_id != PERSONAL_GALLERY)
  3716. {
  3717. 	$sql = "SELECT c.*, COUNT(p.pic_id) AS count
  3718. 			FROM ". ALBUM_CAT_TABLE ." AS c
  3719. 				LEFT JOIN ". ALBUM_TABLE ." AS p ON c.cat_id = p.pic_cat_id
  3720. 			WHERE c.cat_id = '$cat_id'
  3721. 			GROUP BY c.cat_id
  3722. 			LIMIT 1";
  3723. 	if( !($result = $db->sql_query($sql)) )
  3724. 	{
  3725. 		message_die(GENERAL_ERROR, 'Could not query category information', '', __LINE__, __FILE__, $sql);
  3726. 	}
  3727.  
  3728. 	$thiscat = $db->sql_fetchrow($result);
  3729. }
  3730. else
  3731. {
  3732. 	$thiscat = init_personal_gallery_cat($user_data['user_id']);
  3733. }
  3734.  
  3735. $current_pics = $thiscat['count'];
  3736.  
  3737. if (empty($thiscat))
  3738. {
  3739. 	message_die(GENERAL_ERROR, $lang['Category_not_exist']);
  3740. }
  3741.  
  3742. $album_user_access = album_user_access($cat_id, $thiscat, 0, 1, 0, 0, 0, 0);
  3743.  
  3744. if ($album_user_access['upload'] == 0)
  3745. {
  3746. 	if (!$userdata['session_logged_in'])
  3747. 	{
  3748. 		redirect(append_sid("login.$phpEx?redirect=album.$phpEx&action=upload&cat_id=$cat_id"));
  3749. 	}
  3750. 	else
  3751. 	{
  3752. 		message_die(GENERAL_ERROR, $lang['Not_Authorised']);
  3753. 	}
  3754. }
  3755.  
  3756. if ($cat_id != PERSONAL_GALLERY)
  3757. {
  3758. 	if ($album_config['max_pics'] >= 0)
  3759. 	{
  3760. 		if( $current_pics >= $album_config['max_pics'] )
  3761. 		{
  3762. 			message_die(GENERAL_MESSAGE, $lang['Album_reached_quota']);
  3763. 		}
  3764. 	}
  3765.  
  3766. 	$check_user_limit = FALSE;
  3767.  
  3768. 	if( ($userdata['user_level'] != ADMIN) and ($userdata['session_logged_in']) )
  3769. 	{
  3770. 		if ($album_user_access['moderator'])
  3771. 		{
  3772. 			if ($album_config['mod_pics_limit'] >= 0)
  3773. 			{
  3774. 				$check_user_limit = 'mod_pics_limit';
  3775. 			}
  3776. 		}
  3777. 		else
  3778. 		{
  3779. 			if ($album_config['user_pics_limit'] >= 0)
  3780. 			{
  3781. 				$check_user_limit = 'user_pics_limit';
  3782. 			}
  3783. 		}
  3784. 	}
  3785.  
  3786. 	if ($check_user_limit != FALSE)
  3787. 	{
  3788. 		$sql = "SELECT COUNT(pic_id) AS count
  3789. 				FROM ". ALBUM_TABLE ."
  3790. 				WHERE pic_user_id = '". $userdata['user_id'] ."'
  3791. 					AND pic_cat_id = '$cat_id'";
  3792. 		if( !($result = $db->sql_query($sql)) )
  3793. 		{
  3794. 			message_die(GENERAL_ERROR, 'Could not count your pic', '', __LINE__, __FILE__, $sql);
  3795. 		}
  3796. 		$row = $db->sql_fetchrow($result);
  3797. 		$own_pics = $row['count'];
  3798.  
  3799. 		if( $own_pics >= $album_config[$check_user_limit] )
  3800. 		{
  3801. 			message_die(GENERAL_MESSAGE, $lang['User_reached_pics_quota']);
  3802. 		}
  3803. 	}
  3804. }
  3805. else
  3806. {
  3807. 	if( ($current_pics >= $album_config['personal_gallery_limit']) and ($album_config['personal_gallery_limit'] >= 0) )
  3808. 	{
  3809. 		message_die(GENERAL_MESSAGE, $lang['Album_reached_quota']);
  3810. 	}
  3811. }
  3812.  
  3813. if( !isset($HTTP_POST_VARS['pic_title']) )
  3814. {
  3815. 	$sql = "SELECT *
  3816. 			FROM " . ALBUM_CAT_TABLE ."
  3817. 			ORDER BY cat_order ASC";
  3818. 	if( !($result = $db->sql_query($sql)) )
  3819. 	{
  3820. 		message_die(GENERAL_ERROR, 'Could not query categories list', '', __LINE__, __FILE__, $sql);
  3821. 	}
  3822.  
  3823. 	$catrows = array();
  3824.  
  3825. 	while( $row = $db->sql_fetchrow($result) )
  3826. 	{
  3827. 		$thiscat_access = album_user_access($row['cat_id'], $row, 0, 1, 0, 0, 0, 0);
  3828.  
  3829. 		if ($thiscat_access['upload'] == 1)
  3830. 		{
  3831. 			$catrows[] = $row;
  3832. 		}
  3833. 	}
  3834.  
  3835. 	$select_cat = '<select name="cat_id">';
  3836.  
  3837. 	if ($cat_id == PERSONAL_GALLERY)
  3838. 	{
  3839. 		$select_cat .= '<option value="$cat_id" selected="selected">';
  3840. 		$select_cat .= sprintf($lang['Personal_Gallery_Of_User'], $userdata['username']);
  3841. 		$select_cat .= '</option>';
  3842. 	}
  3843.  
  3844. 	for ($i = 0; $i < count($catrows); $i++)
  3845. 	{
  3846. 		$select_cat .= '<option value="'. $catrows[$i]['cat_id'] .'" ';
  3847. 		$select_cat .= ($cat_id == $catrows[$i]['cat_id']) ? 'selected="selected"' : '';
  3848. 		$select_cat .= '>'. $catrows[$i]['cat_title'] .'</option>';
  3849. 	}
  3850.  
  3851. 	$select_cat .= '</select>';
  3852.  
  3853. 	$page_title = 'Галерея сайта';
  3854. 	include($phpbb_root_path . 'includes/page_header.'.$phpEx);
  3855.  
  3856. 	$template->set_filenames(array(
  3857. 		'body' => ($result_ua) ? 'album_upload_body_om.tpl' : 'album_upload_body.tpl')
  3858. 	);
  3859.  
  3860. 	$template->assign_vars(array(
  3861. 		'U_VIEW_CAT' => ($cat_id != PERSONAL_GALLERY) ? append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id") : append_sid("album.$phpEx?action=personal"),
  3862. 		'CAT_TITLE' => $thiscat['cat_title'],
  3863.  
  3864. 		'L_UPLOAD_PIC' => $lang['Upload_Pic'],
  3865.  
  3866. 		'L_USERNAME' => $lang['Username'],
  3867. 		'L_PIC_TITLE' => $lang['Pic_Title'],
  3868.  
  3869. 		'L_PIC_DESC' => $lang['Pic_Desc'],
  3870. 		'L_PLAIN_TEXT_ONLY' => $lang['Plain_text_only'],
  3871. 		'L_MAX_LENGTH' => $lang['Max_length'],
  3872. 		'S_PIC_DESC_MAX_LENGTH' => $album_config['desc_length'],
  3873.  
  3874. 		'L_UPLOAD_PIC_FROM_MACHINE' => $lang['Upload_pic_from_machine'],
  3875. 		'L_UPLOAD_PIC_FROM_MACHINE_OM' => $lang['Upload_pic_from_machine_om'],
  3876. 		'L_UPLOAD_TO_CATEGORY' => $lang['Upload_to_Category'],
  3877.  
  3878. 		'SELECT_CAT' => $select_cat,
  3879.  
  3880. 		'L_MAX_FILESIZE' => $lang['Max_file_size'],
  3881. 		'S_MAX_FILESIZE' => $album_config['max_file_size'],
  3882.  
  3883. 		'L_MAX_WIDTH' => $lang['Max_width'],
  3884. 		'L_MAX_HEIGHT' => $lang['Max_height'],
  3885.  
  3886. 		'S_MAX_WIDTH' => $album_config['max_width'],
  3887. 		'S_MAX_HEIGHT' => $album_config['max_height'],
  3888.  
  3889. 		'L_ALLOWED_JPG' => $lang['JPG_allowed'],
  3890. 		'L_ALLOWED_PNG' => $lang['PNG_allowed'],
  3891. 		'L_ALLOWED_GIF' => $lang['GIF_allowed'],
  3892.  
  3893. 		'S_JPG' => ($album_config['jpg_allowed'] == 1) ? $lang['Yes'] : $lang['No'],
  3894. 		'S_PNG' => ($album_config['png_allowed'] == 1) ? $lang['Yes'] : $lang['No'],
  3895. 		'S_GIF' => ($album_config['gif_allowed'] == 1) ? $lang['Yes'] : $lang['No'],
  3896.  
  3897. 		'L_UPLOAD_NO_TITLE' => $lang['Upload_no_title'],
  3898. 		'L_UPLOAD_NO_FILE' => $lang['Upload_no_file'],
  3899. 		'L_DESC_TOO_LONG' => $lang['Desc_too_long'],
  3900.  
  3901. 		'L_UPLOAD_THUMBNAIL' => $lang['Upload_thumbnail'],
  3902. 		'L_UPLOAD_THUMBNAIL_EXPLAIN' => $lang['Upload_thumbnail_explain'],
  3903. 		'L_THUMBNAIL_SIZE' => $lang['Thumbnail_size'],
  3904. 		'S_THUMBNAIL_SIZE' => $album_config['thumbnail_size'],
  3905.  
  3906. 		'L_RESET' => $lang['Reset'],
  3907. 		'L_SUBMIT' => $lang['Submit'],
  3908.  
  3909. 		'S_ALBUM_ACTION' => append_sid("album.$phpEx?action=upload&amp;cat_id=$cat_id"),
  3910. 		)
  3911. 	);
  3912.  
  3913. 	if ($album_config['gd_version'] == 0)
  3914. 	{
  3915. 		$template->assign_block_vars('switch_manual_thumbnail', array());
  3916. 	}
  3917.  
  3918. 	$template->pparse('body');
  3919.  
  3920. 	include($phpbb_root_path . 'includes/page_tail.'.$phpEx);
  3921. }
  3922. else
  3923. {
  3924. 	$pic_title = str_replace("\'", "''", htmlspecialchars(trim($HTTP_POST_VARS['pic_title'])));
  3925. 	$pic_desc = str_replace("\'", "''", htmlspecialchars(substr(trim($HTTP_POST_VARS['pic_desc']), 0, $album_config['desc_length'])));
  3926. 	$pic_username = (!$userdata['session_logged_in']) ? substr(str_replace("\'", "''", htmlspecialchars(trim($HTTP_POST_VARS['pic_username']))), 0, 32) : str_replace("'", "''", $userdata['username']);
  3927.  
  3928. 	if( empty($pic_title) )
  3929. 	{
  3930. 		message_die(GENERAL_ERROR, $lang['Missed_pic_title']);
  3931. 	}
  3932.  
  3933. 	if ($result_ua)
  3934. 	{
  3935. 		if( !isset($HTTP_POST_VARS['picupload']) )
  3936. 		{
  3937. 			message_die(GENERAL_ERROR, 'Bad Upload');
  3938. 		}
  3939. 	} else {
  3940. 		if( !isset($HTTP_POST_FILES['pic_file']) )
  3941. 		{
  3942. 			message_die(GENERAL_ERROR, 'Bad Upload');
  3943. 		}
  3944. 	}
  3945.  
  3946. 	if (!$userdata['session_logged_in'])
  3947. 	{
  3948. 		if ($pic_username != '')
  3949. 		{
  3950. 			$result = validate_username($pic_username);
  3951. 			if ( $result['error'] )
  3952. 			{
  3953. 				message_die(GENERAL_MESSAGE, $result['error_msg']);
  3954. 			}
  3955. 		}
  3956. 	}	
  3957.  
  3958. 	if ($result_ua)
  3959. 	{
  3960. 		$uploadedfile = $HTTP_POST_VARS['picupload'];
  3961.  
  3962. 		if (strlen($uploadedfile)) 
  3963. 		{ 
  3964. 			$array = explode('file=', $uploadedfile);
  3965. 			$tmp_name = $array[0];
  3966. 			$filebase64 = $array[1]; 
  3967. 		} 
  3968.  
  3969. 		$tmp_name = basename($tmp_name);
  3970.  
  3971. 		if (strlen($filebase64)) 
  3972. 		{ 
  3973. 			$filedata = base64_decode($filebase64);
  3974. 		} 
  3975.  
  3976. 		$fileom = @fopen($opera_mini . "/" . $tmp_name, "wb");
  3977.  
  3978. 		if($fileom) 
  3979. 		{
  3980. 			if(flock($fileom, LOCK_EX)) 
  3981. 			{ 
  3982. 				fwrite($fileom, $filedata);
  3983. 				flock($fileom, LOCK_UN); 
  3984. 			} 
  3985. 			fclose($fileom); 
  3986. 		}
  3987.  
  3988. 		$filetmp = $opera_mini . "/" . $tmp_name;
  3989. 		$filesize = @filesize($filetmp);
  3990. 		$tmp_name_type = strrchr($tmp_name, '.');
  3991. 		$repl=array("."=>"");
  3992. 		$type = strtr($tmp_name_type, $repl);
  3993. 		$filetype = 'image/'.$type;
  3994.  
  3995. 	} else {
  3996. 		$filetype = $HTTP_POST_FILES['pic_file']['type'];
  3997. 		$filesize = $HTTP_POST_FILES['pic_file']['size'];
  3998. 		$filetmp = $HTTP_POST_FILES['pic_file']['tmp_name'];
  3999. 	}
  4000.  
  4001. 	if ($album_config['gd_version'] == 0)
  4002. 	{
  4003. 		$thumbtype = $HTTP_POST_FILES['pic_thumbnail']['type'];
  4004. 		$thumbsize = $HTTP_POST_FILES['pic_thumbnail']['size'];
  4005. 		$thumbtmp = $HTTP_POST_FILES['pic_thumbnail']['tmp_name'];
  4006. 	}
  4007.  
  4008. 	$pic_time = time();
  4009. 	$pic_user_id = $userdata['user_id'];
  4010. 	$pic_user_ip = $userdata['session_ip'];
  4011.  
  4012. 	if( ($filesize == 0) or ($filesize > $album_config['max_file_size']) )
  4013. 	{
  4014. 		@unlink($filetmp);
  4015. 		message_die(GENERAL_MESSAGE, $lang['Bad_upload_file_size']);
  4016. 	}
  4017.  
  4018. 	if ($album_config['gd_version'] == 0)
  4019. 	{
  4020. 		if( ($thumbsize == 0) or ($thumbsize > $album_config['max_file_size']) )
  4021. 		{
  4022. 			@unlink($filetmp);
  4023. 			message_die(GENERAL_MESSAGE, $lang['Bad_upload_file_size']);
  4024. 		}
  4025. 	}
  4026.  
  4027. 	switch ($filetype)
  4028. 	{
  4029. 		case 'image/jpeg':
  4030. 		case 'image/jpg':
  4031. 		case 'image/pjpeg':
  4032. 			if ($album_config['jpg_allowed'] == 0)
  4033. 			{
  4034. 				@unlink($filetmp);
  4035. 				message_die(GENERAL_ERROR, $lang['Not_allowed_file_type']);
  4036. 			}
  4037. 			$pic_filetype = '.jpg';
  4038. 			break;
  4039.  
  4040. 		case 'image/png':
  4041. 		case 'image/x-png':
  4042. 			if ($album_config['png_allowed'] == 0)
  4043. 			{
  4044. 				@unlink($filetmp);
  4045. 				message_die(GENERAL_ERROR, $lang['Not_allowed_file_type']);
  4046. 			}
  4047. 			$pic_filetype = '.png';
  4048. 			break;
  4049.  
  4050. 		case 'image/gif':
  4051. 			if ($album_config['gif_allowed'] == 0)
  4052. 			{
  4053. 				@unlink($filetmp);
  4054. 				message_die(GENERAL_ERROR, $lang['Not_allowed_file_type']);
  4055. 			}
  4056. 			$pic_filetype = '.gif';
  4057. 			break;
  4058. 		default:
  4059. 			@unlink($filetmp);
  4060. 			message_die(GENERAL_ERROR, $lang['Not_allowed_file_type']);
  4061. 	}
  4062.  
  4063. 	if ($album_config['gd_version'] == 0)
  4064. 	{
  4065. 		if ($filetype != $thumbtype)
  4066. 		{
  4067. 			@unlink($filetmp);
  4068. 			message_die(GENERAL_ERROR, $lang['Filetype_and_thumbtype_do_not_match']);
  4069. 		}
  4070. 	}
  4071.  
  4072. 	srand((double)microtime()*1000000);
  4073.  
  4074. 	do
  4075. 	{
  4076. 		$pic_filename = md5(uniqid(rand())) . $pic_filetype;
  4077. 	}
  4078. 	while( file_exists(ALBUM_UPLOAD_PATH . $pic_filename) );
  4079.  
  4080. 	if ($album_config['gd_version'] == 0)
  4081. 	{
  4082. 		$pic_thumbnail = $pic_filename;
  4083. 	}
  4084.  
  4085. 	$ini_val = ( @phpversion() >= '4.0.0' ) ? 'ini_get' : 'get_cfg_var';
  4086.  
  4087. 	if ( @$ini_val('open_basedir') != '' )
  4088. 	{
  4089. 		if ( @phpversion() < '4.0.3' )
  4090. 		{
  4091. 			@unlink($filetmp);
  4092. 			message_die(GENERAL_ERROR, 'open_basedir is set and your PHP version does not allow move_uploaded_file<br /><br />Please contact your server admin', '', __LINE__, __FILE__);
  4093. 		}
  4094.  
  4095. 		$move_file = 'move_uploaded_file';
  4096. 	}
  4097. 	else
  4098. 	{
  4099. 		$move_file = 'copy';
  4100. 	}
  4101.  
  4102. 	if ($result_ua)
  4103. 	{
  4104. 		$move_file = 'copy';
  4105. 	}
  4106.  
  4107. 	$move_file($filetmp, ALBUM_UPLOAD_PATH . $pic_filename);
  4108.  
  4109. 	@chmod(ALBUM_UPLOAD_PATH . $pic_filename, 0777);
  4110.  
  4111. 	if ($album_config['gd_version'] == 0)
  4112. 	{
  4113. 		$move_file($thumbtmp, ALBUM_CACHE_PATH . $pic_thumbnail);
  4114.  
  4115. 		@chmod(ALBUM_CACHE_PATH . $pic_thumbnail, 0777);
  4116. 	}
  4117.  
  4118. 	$pic_size = getimagesize(ALBUM_UPLOAD_PATH . $pic_filename);
  4119.  
  4120. 	$pic_width = $pic_size[0];
  4121. 	$pic_height = $pic_size[1];
  4122.  
  4123. 	if ( ($pic_width > $album_config['max_width']) or ($pic_height > $album_config['max_height']) )
  4124. 	{
  4125. 		@unlink(ALBUM_UPLOAD_PATH . $pic_filename);
  4126.  
  4127. 		if ($album_config['gd_version'] == 0)
  4128. 		{
  4129. 			@unlink(ALBUM_CACHE_PATH . $pic_thumbnail);
  4130. 		}
  4131. 		@unlink($filetmp);
  4132. 		message_die(GENERAL_ERROR, $lang['Upload_image_size_too_big']);
  4133. 	}
  4134.  
  4135. 	if ($album_config['gd_version'] == 0)
  4136. 	{
  4137. 		$thumb_size = getimagesize(ALBUM_CACHE_PATH . $pic_thumbnail);
  4138.  
  4139. 		$thumb_width = $thumb_size[0];
  4140. 		$thumb_height = $thumb_size[1];
  4141.  
  4142. 		if ( ($thumb_width > $album_config['thumbnail_size']) or ($thumb_height > $album_config['thumbnail_size']) )
  4143. 		{
  4144. 			@unlink(ALBUM_UPLOAD_PATH . $pic_filename);
  4145.  
  4146. 			@unlink(ALBUM_CACHE_PATH . $pic_thumbnail);
  4147.  
  4148. 			@unlink($filetmp);
  4149. 			message_die(GENERAL_ERROR, $lang['Upload_thumbnail_size_too_big']);
  4150. 		}
  4151. 	}
  4152.  
  4153. 	if( ($album_config['thumbnail_cache'] == 1) and ($pic_filetype != '.gif') and ($album_config['gd_version'] > 0) )
  4154. 	{
  4155. 		$gd_errored = FALSE;
  4156.  
  4157. 		switch ($pic_filetype)
  4158. 		{
  4159. 			case '.jpg':
  4160. 				$read_function = 'imagecreatefromjpeg';
  4161. 				break;
  4162. 			case '.png':
  4163. 				$read_function = 'imagecreatefrompng';
  4164. 				break;
  4165. 		}
  4166.  
  4167. 		$src = @$read_function(ALBUM_UPLOAD_PATH  . $pic_filename);
  4168.  
  4169. 		if (!$src)
  4170. 		{
  4171. 			$gd_errored = TRUE;
  4172. 			$pic_thumbnail = '';
  4173. 		}
  4174. 		else if( ($pic_width > $album_config['thumbnail_size']) or ($pic_height > $album_config['thumbnail_size']) )
  4175. 		{
  4176. 			if ($pic_width > $pic_height)
  4177. 			{
  4178. 				$thumbnail_width = $album_config['thumbnail_size'];
  4179. 				$thumbnail_height = $album_config['thumbnail_size'] * ($pic_height/$pic_width);
  4180. 			}
  4181. 			else
  4182. 			{
  4183. 				$thumbnail_height = $album_config['thumbnail_size'];
  4184. 				$thumbnail_width = $album_config['thumbnail_size'] * ($pic_width/$pic_height);
  4185. 			}
  4186.  
  4187. 			$thumbnail = ($album_config['gd_version'] == 1) ? @imagecreate($thumbnail_width, $thumbnail_height) : @imagecreatetruecolor($thumbnail_width, $thumbnail_height);
  4188.  
  4189. 			$resize_function = ($album_config['gd_version'] == 1) ? 'imagecopyresized' : 'imagecopyresampled';
  4190.  
  4191. 			@$resize_function($thumbnail, $src, 0, 0, 0, 0, $thumbnail_width, $thumbnail_height, $pic_width, $pic_height);
  4192. 		}
  4193. 		else
  4194. 		{
  4195. 			$thumbnail = $src;
  4196. 		}
  4197.  
  4198. 		if (!$gd_errored)
  4199. 		{
  4200. 			$pic_thumbnail = $pic_filename;
  4201.  
  4202. 			switch ($pic_filetype)
  4203. 			{
  4204. 				case '.jpg':
  4205. 					@imagejpeg($thumbnail, ALBUM_CACHE_PATH . $pic_thumbnail, $album_config['thumbnail_quality']);
  4206. 					break;
  4207. 				case '.png':
  4208. 					@imagepng($thumbnail, ALBUM_CACHE_PATH . $pic_thumbnail);
  4209. 					break;
  4210. 			}
  4211.  
  4212. 			@chmod(ALBUM_CACHE_PATH . $pic_thumbnail, 0777);
  4213.  
  4214. 		}
  4215.  
  4216. 	}
  4217. 	else if ($album_config['gd_version'] > 0)
  4218. 	{
  4219. 		$pic_thumbnail = '';
  4220. 	}
  4221.  
  4222. 	$pic_approval = ($thiscat['cat_approval'] == 0) ? 1 : 0;
  4223.  
  4224. 	$sql = "INSERT INTO ". ALBUM_TABLE ." (pic_filename, pic_thumbnail, pic_title, pic_desc, pic_user_id, pic_user_ip, pic_username, pic_time, pic_cat_id, pic_approval)
  4225. 			VALUES ('$pic_filename', '$pic_thumbnail', '$pic_title', '$pic_desc', '$pic_user_id', '$pic_user_ip', '$pic_username', '$pic_time', '$cat_id', '$pic_approval')";
  4226. 	if( !$result = $db->sql_query($sql) )
  4227. 	{
  4228. 		@unlink($filetmp);
  4229. 		message_die(GENERAL_ERROR, 'Could not insert new entry', '', __LINE__, __FILE__, $sql);
  4230. 	}
  4231.  
  4232. 	if ($thiscat['cat_approval'] == 0)
  4233. 	{
  4234. 		$message = $lang['Album_upload_successful'];
  4235. 	}
  4236. 	else
  4237. 	{
  4238. 		$message = $lang['Album_upload_need_approval'];
  4239. 	}
  4240. 	@unlink($filetmp);
  4241.  
  4242. 	if ($cat_id != PERSONAL_GALLERY)
  4243. 	{
  4244. 		if ($thiscat['cat_approval'] == 0)
  4245. 		{
  4246. 			$template->assign_vars(array(
  4247. 				'META' => '<meta http-equiv="refresh" content="2;url=' . append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id") . '">')
  4248. 			);
  4249. 		}
  4250.  
  4251. 		$message .= "<br /><br />" . sprintf($lang['Click_return_category'], "<a href=\"" . append_sid("album.$phpEx?action=cat&amp;cat_id=$cat_id") . "\">", "</a>");
  4252. 	}
  4253. 	else
  4254. 	{
  4255. 		if ($thiscat['cat_approval'] == 0)
  4256. 		{
  4257. 			$template->assign_vars(array(
  4258. 				'META' => '<meta http-equiv="refresh" content="2;url=' . append_sid("album.$phpEx?action=personal") . '">')
  4259. 			);
  4260. 		}
  4261.  
  4262. 		$message .= "<br /><br />" . sprintf($lang['Click_return_personal_gallery'], "<a href=\"" . append_sid("album.$phpEx?action=personal") . "\">", "</a>");
  4263. 	}
  4264.  
  4265. 	$message .= "<br /><br />" . sprintf($lang['Click_return_album_index'], "<a href=\"" . append_sid("album.$phpEx") . "\">", "</a>");
  4266.  
  4267. 	message_die(GENERAL_MESSAGE, $message);
  4268. }
  4269.  
  4270. } else {
  4271.  
  4272. $sql = "SELECT c.*, COUNT(p.pic_id) AS count
  4273. 		FROM ". ALBUM_CAT_TABLE ." AS c
  4274. 			LEFT JOIN ". ALBUM_TABLE ." AS p ON c.cat_id = p.pic_cat_id
  4275. 		WHERE cat_id <> 0
  4276. 		GROUP BY cat_id
  4277. 		ORDER BY cat_order ASC";
  4278. if( !($result = $db->sql_query($sql)) )
  4279. {
  4280. 	message_die(GENERAL_ERROR, 'Could not query categories list', '', __LINE__, __FILE__, $sql);
  4281. }
  4282.  
  4283. $catrows = array();
  4284.  
  4285. while( $row = $db->sql_fetchrow($result) )
  4286. {
  4287. 	$album_user_access = album_user_access($row['cat_id'], $row, 1, 0, 0, 0, 0, 0);
  4288. 	if ($album_user_access['view'] == 1)
  4289. 	{
  4290. 		$catrows[] = $row;
  4291. 	}
  4292. }
  4293.  
  4294. $allowed_cat = '';
  4295.  
  4296. for ($i = 0; $i < count($catrows); $i++)
  4297. {
  4298. 	$allowed_cat .= ($allowed_cat == '') ? $catrows[$i]['cat_id'] : ',' . $catrows[$i]['cat_id'];
  4299. 	$l_moderators = '';
  4300. 	$moderators_list = '';
  4301.  
  4302. 	$grouprows= array();
  4303.  
  4304. 	if( $catrows[$i]['cat_moderator_groups'] != '')
  4305. 	{
  4306. 		$sql = "SELECT group_id, group_name
  4307. 				FROM " . GROUPS_TABLE . "
  4308. 				WHERE group_single_user <> 1
  4309. 					AND group_type <> ". GROUP_HIDDEN ."
  4310. 					AND group_id IN (". $catrows[$i]['cat_moderator_groups'] .")
  4311. 				ORDER BY group_name ASC";
  4312. 		if ( !$result = $db->sql_query($sql) )
  4313. 		{
  4314. 			message_die(GENERAL_ERROR, 'Could not obtain usergroups data', '', __LINE__, __FILE__, $sql);
  4315. 		}
  4316.  
  4317. 		while( $row = $db->sql_fetchrow($result) )
  4318. 		{
  4319. 			$grouprows[] = $row;
  4320. 		}
  4321. 	}
  4322.  
  4323. 	if( count($grouprows) > 0 )
  4324. 	{
  4325. 		$l_moderators = $lang['Moderators'];
  4326.  
  4327. 		for ($j = 0; $j < count($grouprows); $j++)
  4328. 		{
  4329. 			$group_link = '<a href="'. append_sid("groupcp.$phpEx?". POST_GROUPS_URL .'='. $grouprows[$j]['group_id']) .'">'. $grouprows[$j]['group_name'] .'</a>';
  4330.  
  4331. 			$moderators_list .= ($moderators_list == '') ? $group_link : ', ' . $group_link;
  4332. 		}
  4333. 	}
  4334.  
  4335. 	if ($catrows[$i]['count'] == 0)
  4336. 	{
  4337. 		$last_pic_info = $lang['No_Pics'];
  4338. 		$u_last_pic = '';
  4339. 		$last_pic_title = '';
  4340. 	}
  4341. 	else
  4342. 	{
  4343. 		if(($catrows[$i]['cat_approval'] == ALBUM_ADMIN) or ($catrows[$i]['cat_approval'] == ALBUM_MOD))
  4344. 		{
  4345. 			$pic_approval_sql = 'AND p.pic_approval = 1';
  4346. 		}
  4347. 		else
  4348. 		{
  4349. 			$pic_approval_sql = '';
  4350. 		}
  4351.  
  4352. 		$sql = "SELECT p.pic_id, p.pic_title, p.pic_user_id, p.pic_username, p.pic_time, p.pic_cat_id, u.user_id, u.username
  4353. 				FROM ". ALBUM_TABLE ." AS p	LEFT JOIN ". USERS_TABLE ." AS u ON p.pic_user_id = u.user_id
  4354. 				WHERE p.pic_cat_id = '". $catrows[$i]['cat_id'] ."' $pic_approval_sql
  4355. 				ORDER BY p.pic_time DESC
  4356. 				LIMIT 1";
  4357. 		if ( !$result = $db->sql_query($sql) )
  4358. 		{
  4359. 			message_die(GENERAL_ERROR, 'Could not get last pic information', '', __LINE__, __FILE__, $sql);
  4360. 		}
  4361. 		$lastrow = $db->sql_fetchrow($result);
  4362.  
  4363. 		$last_pic_info = create_date($board_config['default_dateformat'], $lastrow['pic_time'], $board_config['board_timezone']);
  4364.  
  4365. 		$last_pic_info .= '<br />';
  4366.  
  4367. 		if( ($lastrow['user_id'] == ALBUM_GUEST) or ($lastrow['username'] == '') )
  4368. 		{
  4369. 			$last_pic_info .= ($lastrow['pic_username'] == '') ? $lang['Guest'] : $lastrow['pic_username'];
  4370. 		}
  4371. 		else
  4372. 		{
  4373. 			$last_pic_info .= $lang['Poster'] .': <a href="'. append_sid("../pages/profile.$phpEx?mode=viewprofile&amp;". POST_USERS_URL .'='. $lastrow['user_id']) .'">'. $lastrow['username'] .'</a>';
  4374. 		}
  4375.  
  4376. 		if( !isset($album_config['last_pic_title_length']) )
  4377. 		{
  4378. 			$album_config['last_pic_title_length'] = 25;
  4379. 		}
  4380.  
  4381. 		$lastrow['pic_title'] = $lastrow['pic_title'];
  4382.  
  4383. 		if (strlen($lastrow['pic_title']) > $album_config['last_pic_title_length'])
  4384. 		{
  4385. 			$lastrow['pic_title'] = substr($lastrow['pic_title'], 0, $album_config['last_pic_title_length']) . '...';
  4386. 		}
  4387.  
  4388. 		$last_pic_info .= '<br />'. $lang['Pic_Title'] .': <a href="';
  4389.  
  4390. 		$last_pic_info .= ($album_config['fullpic_popup']) ? append_sid("album.$phpEx?action=pic&amp;pic_id=". $lastrow['pic_id']) .'" target="_blank">' : append_sid("album.$phpEx?action=page&amp;pic_id=". $lastrow['pic_id']) .'">' ;
  4391.  
  4392. 		$last_pic_info .= $lastrow['pic_title'] .'</a>';
  4393. 	}
  4394.  
  4395. 	$template->assign_block_vars('catrow', array(
  4396. 		'U_VIEW_CAT' => append_sid("album.$phpEx?action=cat&amp;cat_id=". $catrows[$i]['cat_id']),
  4397. 		'CAT_TITLE' => $catrows[$i]['cat_title'],
  4398. 		'CAT_DESC' => $catrows[$i]['cat_desc'],
  4399. 		'L_MODERATORS' => $l_moderators,
  4400. 		'MODERATORS' => $moderators_list,
  4401. 		'PICS' => $catrows[$i]['count'],
  4402. 		'LAST_PIC_INFO' => $last_pic_info)
  4403. 	);
  4404. }
  4405.  
  4406. if ($allowed_cat == '')
  4407. {
  4408. 	$template->assign_block_vars('no_cats', array());
  4409. }
  4410.  
  4411. $page_title = 'Галерея сайта';
  4412. include($phpbb_root_path . 'includes/page_header.'.$phpEx);
  4413.  
  4414. $template->set_filenames(array(
  4415. 	'body' => 'album_index_body.tpl')
  4416. );
  4417.  
  4418. // Общее количество фото
  4419. $result = mysql_query("SELECT count(*) AS total FROM " . ALBUM_TABLE); 
  4420. $album = mysql_fetch_array($result); 
  4421. $album = $album['total'];
  4422.  
  4423. $template->assign_vars(array(
  4424.         'ALBUM' => $album,
  4425. 	'L_CATEGORY' => $lang['Category'],
  4426. 	'L_PICS' => $lang['Pics'],
  4427. 	'L_LAST_PIC' => $lang['Last_Pic'],
  4428.  
  4429. 	'U_YOUR_PERSONAL_GALLERY' => append_sid("album.$phpEx?action=personal&amp;user_id=". $userdata['user_id']),
  4430. 	'L_YOUR_PERSONAL_GALLERY' => $lang['Your_Personal_Gallery'],
  4431.  
  4432. 	'U_USERS_PERSONAL_GALLERIES' => append_sid("album.$phpEx?action=personal_index"),
  4433. 	'L_USERS_PERSONAL_GALLERIES' => $lang['Users_Personal_Galleries'],
  4434.  
  4435. 	'S_COLS' => $album_config['cols_per_page'],
  4436. 	'S_COL_WIDTH' => (100/$album_config['cols_per_page']) . '%',
  4437. 	'TARGET_BLANK' => ($album_config['fullpic_popup']) ? 'target="_blank"' : '',
  4438. 	'L_RECENT_PUBLIC_PICS' => $lang['Recent_Public_Pics'],
  4439. 	'L_NO_PICS' => $lang['No_Pics'],
  4440. 	'L_PIC_TITLE' => $lang['Pic_Title'],
  4441. 	'L_VIEW' => $lang['View'],
  4442. 	'L_POSTER' => $lang['Poster'],
  4443. 	'L_POSTED' => $lang['Posted'],
  4444. 	'L_PUBLIC_CATS' => $lang['Public_Categories'])
  4445. );
  4446.  
  4447. $template->pparse('body');
  4448.  
  4449. include($phpbb_root_path . 'includes/page_tail.'.$phpEx);
  4450.  
  4451. }
  4452.  
  4453. ?>