443 lines
9.2 KiB
PHP
443 lines
9.2 KiB
PHP
<?php
|
|
|
|
###
|
|
### prints a message and exits the application properly
|
|
###
|
|
function message ($message) {
|
|
if (isset ($message)) {
|
|
echo "<p>" . $message . "</p>";
|
|
}
|
|
require_once (ABSOLUTE_PATH . "footer.php");
|
|
}
|
|
|
|
/*
|
|
* Checks whether the user is logged in.
|
|
* Displays a link to login if not and exit application.
|
|
*/
|
|
function logged_in_only () {
|
|
if (! isset ($_SESSION['logged_in']) || ! $_SESSION['logged_in']) {
|
|
global $auth;
|
|
$auth->display_login_form ();
|
|
require_once (ABSOLUTE_PATH . "footer.php");
|
|
}
|
|
}
|
|
|
|
function input_validation ($data, $charset = 'UTF-8') {
|
|
if (is_array ($data)) {
|
|
foreach ($data as $key => $value) {
|
|
$data[$key] = input_validation ($value);
|
|
}
|
|
}
|
|
else {
|
|
$data = htmlentities (trim ($data), ENT_QUOTES, $charset);
|
|
}
|
|
return $data;
|
|
}
|
|
|
|
/*
|
|
* Verify some GET variables
|
|
*/
|
|
###
|
|
### Setting the expand variable. If empty in _GET we use the one from _SESSION if available.
|
|
### Call this function only once, otherwise some strange things will happen.
|
|
###
|
|
function set_get_expand () {
|
|
if (!isset ($_GET['expand'])) {
|
|
if (isset ($_SESSION['expand']) && is_array ($_SESSION['expand'])) {
|
|
$return = set_num_array ($_SESSION['expand']);
|
|
}
|
|
else {
|
|
$return = array();
|
|
}
|
|
}
|
|
else if ($_GET['expand'] == '') {
|
|
$return = array();
|
|
}
|
|
else {
|
|
$return = explode (",", $_GET['expand']);
|
|
$return = set_num_array ($return);
|
|
}
|
|
$return = input_validation ($return);
|
|
$_SESSION['expand'] = $return;
|
|
return ($return);
|
|
}
|
|
|
|
function set_get_folderid () {
|
|
if (!isset ($_GET['folderid']) || $_GET['folderid'] == '' || !is_numeric ($_GET['folderid'])) {
|
|
if (isset ($_SESSION['folderid'])) {
|
|
$return = $_SESSION['folderid'];
|
|
}
|
|
else {
|
|
$return = 0;
|
|
}
|
|
}
|
|
else {
|
|
$return = $_GET['folderid'];
|
|
}
|
|
$return = input_validation ($return);
|
|
$_SESSION['folderid'] = $return;
|
|
return ($return);
|
|
}
|
|
|
|
|
|
|
|
|
|
################## GET title and url are handled a bit special
|
|
|
|
function set_get_title () {
|
|
if (!isset ($_GET['title']) || $_GET['title'] == '') {
|
|
$return = '';
|
|
}
|
|
else {
|
|
$return = $_GET['title'];
|
|
}
|
|
return input_validation ($return);
|
|
}
|
|
|
|
function set_get_url () {
|
|
if (!isset ($_GET['url']) || $_GET['url'] == '') {
|
|
$return = '';
|
|
}
|
|
else {
|
|
$return = $_GET['url'];
|
|
}
|
|
return input_validation ($return);
|
|
}
|
|
|
|
function set_session_title () {
|
|
if (!isset ($_SESSION['title']) || $_SESSION['title'] == '') {
|
|
$return = '';
|
|
}
|
|
else {
|
|
$return = $_SESSION['title'];
|
|
}
|
|
return $return;
|
|
}
|
|
|
|
function set_session_url () {
|
|
if (!isset ($_SESSION['url']) || $_SESSION['url'] == '') {
|
|
$return = '';
|
|
}
|
|
else {
|
|
$return = $_SESSION['url'];
|
|
}
|
|
return $return;
|
|
}
|
|
|
|
function set_title () {
|
|
$get_title = set_get_title ();
|
|
$session_title = set_session_title ();
|
|
|
|
if ($get_title == '' && $session_title == '') {
|
|
$return = '';
|
|
}
|
|
else if ($get_title != '') {
|
|
$_SESSION['title'] = $get_title;
|
|
$return = $get_title;
|
|
}
|
|
else if ($session_title != '') {
|
|
$_SESSION['title'] = $session_title;
|
|
$return = $session_title;
|
|
}
|
|
return $return;
|
|
}
|
|
|
|
function set_url () {
|
|
$get_url = set_get_url ();
|
|
$session_url = set_session_url ();
|
|
|
|
if ($get_url == '' && $session_url == '') {
|
|
$return = '';
|
|
}
|
|
else if ($get_url != '') {
|
|
$_SESSION['url'] = $get_url;
|
|
$return = $get_url;
|
|
}
|
|
else if ($session_url != '') {
|
|
$_SESSION['url'] = $session_url;
|
|
$return = $session_url;
|
|
}
|
|
return $return;
|
|
}
|
|
|
|
#############################################
|
|
|
|
function set_get_noconfirm () {
|
|
if (!isset ($_GET['noconfirm']) || $_GET['noconfirm'] == '') {
|
|
$return = false;
|
|
}
|
|
else {
|
|
$return = true;
|
|
}
|
|
return $return;
|
|
}
|
|
|
|
/*
|
|
* Verify some POST variables
|
|
*/
|
|
|
|
function set_post_childof () {
|
|
if (!isset ($_POST['childof']) || $_POST['childof'] == '' || !is_numeric($_POST['childof'])) {
|
|
$return = 0;
|
|
}
|
|
else {
|
|
$return = $_POST['childof'];
|
|
}
|
|
return input_validation ($return);
|
|
}
|
|
|
|
function set_post_title () {
|
|
if (!isset ($_POST['title']) || $_POST['title'] == '') {
|
|
$return = '';
|
|
}
|
|
else {
|
|
$return = $_POST['title'];
|
|
}
|
|
return input_validation ($return);
|
|
}
|
|
|
|
function set_post_url () {
|
|
if (!isset ($_POST['url']) || $_POST['url'] == '') {
|
|
$return = '';
|
|
}
|
|
else {
|
|
$return = $_POST['url'];
|
|
}
|
|
return input_validation ($return);
|
|
}
|
|
|
|
function set_post_description () {
|
|
if (!isset ($_POST['description']) || $_POST['description'] == '') {
|
|
$return = '';
|
|
}
|
|
else {
|
|
$return = $_POST['description'];
|
|
}
|
|
return input_validation ($return);
|
|
}
|
|
|
|
function set_post_foldername () {
|
|
if (!isset ($_POST['foldername']) || $_POST['foldername'] == '') {
|
|
$return = '';
|
|
}
|
|
else {
|
|
$return = $_POST['foldername'];
|
|
}
|
|
return input_validation ($return);
|
|
}
|
|
|
|
function set_post_sourcefolder () {
|
|
if (!isset ($_POST['sourcefolder']) || $_POST['sourcefolder'] == '' || !is_numeric ($_POST['sourcefolder'])) {
|
|
$return = '';
|
|
}
|
|
else {
|
|
$return = $_POST['sourcefolder'];
|
|
}
|
|
return input_validation ($return);
|
|
}
|
|
|
|
function set_post_parentfolder () {
|
|
if (!isset ($_POST['parentfolder']) || $_POST['parentfolder'] == '' || !is_numeric ($_POST['parentfolder'])) {
|
|
$return = 0;
|
|
}
|
|
else {
|
|
$return = $_POST['parentfolder'];
|
|
}
|
|
return input_validation ($return);
|
|
}
|
|
|
|
function set_post_browser () {
|
|
if (!isset ($_POST['browser'])) {
|
|
$return = '';
|
|
}
|
|
else if ($_POST['browser'] == 'opera') {
|
|
$return = 'opera';
|
|
}
|
|
else if ($_POST['browser'] == 'netscape') {
|
|
$return = 'netscape';
|
|
}
|
|
else if ($_POST['browser'] == 'IE') {
|
|
$return = 'IE';
|
|
}
|
|
else {
|
|
$return = '';
|
|
}
|
|
return input_validation ($return);
|
|
}
|
|
|
|
|
|
|
|
#########################################################
|
|
|
|
###
|
|
###
|
|
###
|
|
|
|
function return_charsets () {
|
|
$charsets = array (
|
|
'ISO-8859-1',
|
|
'ISO-8859-15',
|
|
'UTF-8',
|
|
'cp866',
|
|
'cp1251',
|
|
'cp1252',
|
|
'KOI8-R',
|
|
'BIG5',
|
|
'GB2312',
|
|
'BIG5-HKSCS',
|
|
'Shift_JIS',
|
|
'EUC-JP',
|
|
);
|
|
return $charsets;
|
|
}
|
|
|
|
function set_post_charset () {
|
|
$charsets = return_charsets ();
|
|
|
|
if (!isset ($_POST['charset']) || $_POST['charset'] == '') {
|
|
$return = 'UTF-8';
|
|
}
|
|
else if (in_array ($_POST['charset'], $charsets)) {
|
|
$return = $_POST['charset'];
|
|
}
|
|
else {
|
|
$return = 'UTF-8';
|
|
}
|
|
return $return;
|
|
}
|
|
|
|
function check_username ($username) {
|
|
$return = false;
|
|
if (isset ($username) || $username == '') {
|
|
global $mysql;
|
|
$query = sprintf ("SELECT COUNT(*) FROM user WHERE md5(username)=md5('%s')",
|
|
$mysql->escape ($username));
|
|
if ($mysql->query ($query)) {
|
|
if (mysql_result ($mysql->result, 0) == 1) {
|
|
$return = true;
|
|
}
|
|
}
|
|
}
|
|
return input_validation ($return);
|
|
}
|
|
|
|
function admin_only () {
|
|
$return = false;
|
|
global $mysql, $username;
|
|
$query = sprintf ("SELECT COUNT(*) FROM user WHERE admin='1'
|
|
AND username='%s'",
|
|
$mysql->escape ($username));
|
|
if ($mysql->query ($query)) {
|
|
if (mysql_result ($mysql->result, 0) == "1") {
|
|
$return = true;
|
|
}
|
|
}
|
|
return input_validation ($return);
|
|
}
|
|
|
|
function set_get_string_var ($varname, $default = '') {
|
|
if (! isset ($_GET[$varname]) || $_GET[$varname] == '') {
|
|
$return = $default;
|
|
}
|
|
else {
|
|
$return = $_GET[$varname];
|
|
}
|
|
return input_validation ($return);
|
|
}
|
|
|
|
function set_post_string_var ($varname, $default = '') {
|
|
if (! isset ($_POST[$varname]) || $_POST[$varname] == '') {
|
|
$return = $default;
|
|
}
|
|
else {
|
|
$return = $_POST[$varname];
|
|
}
|
|
return input_validation ($return);
|
|
}
|
|
|
|
function set_post_num_var ($varname, $default = 0) {
|
|
if (! isset ($_POST[$varname]) || $_POST[$varname] == '' || !is_numeric ($_POST[$varname])) {
|
|
$return = $default;
|
|
}
|
|
else {
|
|
$return = intval ($_POST[$varname]);
|
|
}
|
|
return input_validation ($return);
|
|
}
|
|
|
|
function set_post_bool_var ($varname, $default = true) {
|
|
if (! isset ($_POST[$varname])) {
|
|
$return = $default;
|
|
}
|
|
else if (! $_POST[$varname] ) {
|
|
$return = false;
|
|
}
|
|
else if ($_POST[$varname] ) {
|
|
$return = true;
|
|
}
|
|
else {
|
|
$return = $default;
|
|
}
|
|
return $return;
|
|
}
|
|
|
|
function set_get_num_list ($varname) {
|
|
if (!isset ($_GET[$varname]) || $_GET[$varname] == '') {
|
|
$return = array ();
|
|
}
|
|
else {
|
|
$return = set_num_array (explode ("_", $_GET[$varname]));
|
|
}
|
|
return input_validation ($return);
|
|
}
|
|
|
|
function set_post_num_list ($varname) {
|
|
if (!isset ($_POST[$varname]) || $_POST[$varname] == '') {
|
|
$return = array ();
|
|
}
|
|
else {
|
|
$return = set_num_array (explode ("_", $_POST[$varname]));
|
|
}
|
|
return input_validation ($return);
|
|
}
|
|
|
|
/*
|
|
* This function checks the values of each entry in an array.
|
|
* It returns an array with unique and only numeric entries.
|
|
*/
|
|
function set_num_array ($array){
|
|
foreach ($array as $key => $value) {
|
|
if ($value == '' || !is_numeric ($value)) {
|
|
unset ($array[$key]);
|
|
}
|
|
}
|
|
return array_unique ($array);
|
|
}
|
|
|
|
function print_footer () {
|
|
echo '<a href="http://www.frech.ch/online-bookmarks/" target="_blank">Online-Bookmarks</a>' . "\n";
|
|
@readfile (ABSOLUTE_PATH . "VERSION");
|
|
echo ' by Stefan Frech';
|
|
}
|
|
|
|
function object_count () {
|
|
global $mysql, $username;
|
|
$return = '';
|
|
$query = sprintf ("SELECT (SELECT COUNT(*) FROM bookmark WHERE user='%s') AS bookmarks,
|
|
(SELECT COUNT(*) FROM folder WHERE user='%s') AS folders",
|
|
$mysql->escape ($username),
|
|
$mysql->escape ($username));
|
|
|
|
if ($mysql->query ($query)) {
|
|
if (mysql_num_rows ($mysql->result) == "1") {
|
|
$row = mysql_fetch_object ($mysql->result);
|
|
$return = "You have $row->bookmarks Bookmarks and $row->folders Folders";
|
|
}
|
|
}
|
|
else {
|
|
$return = $mysql->error;
|
|
}
|
|
echo $return;
|
|
}
|
|
|
|
?>
|