inc/admin/categories.php

   1 <?php
   2 /*
   3     This program is free software; you can redistribute it and/or modify
   4     it under the terms of the Revised BSD License.
   5
   6     This program is distributed in the hope that it will be useful,
   7     but WITHOUT ANY WARRANTY; without even the implied warranty of
   8     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   9     Revised BSD License for more details.
  10
  11     Copyright 2004-2011 iDB Support - http://idb.berlios.de/
  12     Copyright 2004-2011 Game Maker 2k - http://gamemaker2k.org/
  13
  14     $FileInfo: categories.php - Last Update: 06/14/2011 SVN 672 - Author: cooldude2k $
  15 */
  16 $File3Name = basename($_SERVER['SCRIPT_NAME']);
  17 if ($File3Name=="categories.php"||$File3Name=="/categories.php") {
  18         require('index.php');
  19         exit(); }
  20
  21 // Check if we can goto admin cp
  22 if($_SESSION['UserGroup']==$Settings['GuestGroup']||$GroupInfo['HasAdminCP']=="no") {
  23 redirect("location",$rbasedir.url_maker($exfile['index'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['index'],$exqstr['index'],false));
  24 ob_clean(); header("Content-Type: text/plain; charset=".$Settings['charset']); $urlstatus = 302;
  25 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); session_write_close(); die(); }
  26 if(!isset($_POST['update'])) { $_POST['update'] = null; }
  27 $Error = null; $errorstr = null;
  28 ?>
  29 <table class="Table3">
  30 <tr style="width: 100%; vertical-align: top;">
  31         <td style="width: 15%; vertical-align: top;">
  32 <?php
  33 require($SettDir['admin'].'table.php');
  34 ?>
  35 </td>
  36         <td style="width: 85%; vertical-align: top;">
  37 <?php if($_GET['act']=="addcategory"&&$_POST['update']!="now") {
  38 $admincptitle = " ".$ThemeSet['TitleDivider']." Adding new Category";
  39 ?>
  40 <div class="TableMenuBorder">
  41 <?php if($ThemeSet['TableStyle']=="div") { ?>
  42 <div class="TableMenuRow1">
  43 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=addcategory",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">iDB Category Manager</a></div>
  44 <?php } ?>
  45 <table class="TableMenu" style="width: 100%;">
  46 <?php if($ThemeSet['TableStyle']=="table") { ?>
  47 <tr class="TableMenuRow1">
  48 <td class="TableMenuColumn1"><span style="float: left;">
  49 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=addcategory",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">iDB Category Manager</a>
  50 </span><span style="float: right;">&nbsp;</span></td>
  51 </tr><?php } ?>
  52 <tr class="TableMenuRow2">
  53 <th class="TableMenuColumn2" style="width: 100%; text-align: left;">
  54 <span style="float: left;">&nbsp;Adding new Category: </span>
  55 <span style="float: right;">&nbsp;</span>
  56 </th>
  57 </tr>
  58 <tr class="TableMenuRow3">
  59 <td class="TableMenuColumn3">
  60 <form style="display: inline;" method="post" id="acptool" action="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=addcategory",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">
  61 <table style="text-align: left;">
  62 <tr style="text-align: left;">
  63         <td style="width: 50%;"><label class="TextBoxLabel" for="CategoryID">Insert ID for category:</label></td>
  64         <td style="width: 50%;"><input type="text" name="CategoryID" class="TextBox" id="CategoryID" size="20" /></td>
  65 </tr><tr style="text-align: left;">
  66         <td style="width: 50%;"><label class="TextBoxLabel" for="OrderID">Insert order id category:</label></td>
  67         <td style="width: 50%;"><input type="text" name="OrderID" class="TextBox" id="OrderID" size="20" /></td>
  68 </tr><tr style="text-align: left;">
  69         <td style="width: 50%;"><label class="TextBoxLabel" for="CategoryName">Insert name for category:</label></td>
  70         <td style="width: 50%;"><input type="text" name="CategoryName" class="TextBox" id="CategoryName" size="20" /></td>
  71 </tr><tr style="text-align: left;">
  72         <td style="width: 50%;"><label class="TextBoxLabel" for="CategoryDesc">Insert description for category:</label></td>
  73         <td style="width: 50%;"><input type="text" name="CategoryDesc" class="TextBox" id="CategoryDesc" size="20" /></td>
  74 </tr><tr style="text-align: left;">
  75         <td style="width: 50%;"><label class="TextBoxLabel" for="ShowCategory">Show category:</label></td>
  76         <td style="width: 50%;"><select size="1" class="TextBox" name="ShowCategory" id="ShowCategory">
  77         <option selected="selected" value="yes">yes</option>
  78         <option value="no">no</option>
  79         </select></td>
  80 </tr><tr style="text-align: left;">
  81         <td style="width: 50%;"><label class="TextBoxLabel" for="CategoryType">Insert category type:</label></td>
  82         <td style="width: 50%;"><select size="1" class="TextBox" name="CategoryType" id="CategoryType">
  83         <option selected="selected" value="category">Category</option>
  84         <option value="subcategory">SubCategory</option>
  85         </select></td>
  86 </tr><tr style="text-align: left;">
  87         <td style="width: 50%;"><label class="TextBoxLabel" for="InSubCategory">In SubCategory:</label></td>
  88         <td style="width: 50%;"><select size="1" class="TextBox" name="InSubCategory" id="InSubCategory">
  89         <option selected="selected" value="0">none</option>
  90 <?php
  91 $fq = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."categories\" WHERE \"InSubCategory\"=0 AND \"CategoryType\"='subcategory' ORDER BY \"OrderID\" ASC, \"id\" ASC", array(null));
  92 $fr=sql_query($fq,$SQLStat);
  93 $ai=sql_num_rows($fr);
  94 $fi=0;
  95 while ($fi < $ai) {
  96 $InCategoryID=sql_result($fr,$fi,"id");
  97 $InCategoryName=sql_result($fr,$fi,"Name");
  98 $InCategoryType=sql_result($fr,$fi,"CategoryType");
  99 $AiFiInSubCategory=sql_result($fr,$fi,"InSubCategory");
 100 if ($AiFiInSubCategory=="0") {
 101 ?>
 102         <option value="<?php echo $InCategoryID; ?>"><?php echo $InCategoryName; ?></option>
 103 <?php } ++$fi; }
 104 sql_free_result($fr); ?>
 105         </select></td>
 106 </tr><tr style="text-align: left;">
 107         <td style="width: 50%;"><label class="TextBoxLabel" for="NumPostView">Number of posts to view category:</label></td>
 108         <td style="width: 50%;"><input type="text" class="TextBox" size="20" name="NumPostView" id="NumPostView" /></td>
 109 </tr><tr style="text-align: left;">
 110         <td style="width: 50%;"><label class="TextBoxLabel" for="NumKarmaView">Amount of karma to view category:</label></td>
 111         <td style="width: 50%;"><input type="text" class="TextBox" size="20" name="NumKarmaView" id="NumKarmaView" /></td>
 112 </tr></table>
 113 <table style="text-align: left;">
 114 <tr style="text-align: left;">
 115 <td style="width: 100%;">
 116 <input type="hidden" name="act" value="addcategory" style="display: none;" />
 117 <input type="hidden" name="update" value="now" style="display: none;" />
 118 <input type="submit" class="Button" value="Add Category" name="Apply_Changes" />
 119 <input type="reset" value="Reset Form" class="Button" name="Reset_Form" />
 120 </td></tr></table>
 121 </form>
 122 </td>
 123 </tr>
 124 <tr class="TableMenuRow4">
 125 <td class="TableMenuColumn4">&nbsp;</td>
 126 </tr>
 127 </table>
 128 </div>
 129 <?php } if($_POST['act']=="addcategory"&&$_POST['update']=="now"&&$_GET['act']=="addcategory") {
 130 $_POST['CategoryName'] = stripcslashes(htmlspecialchars($_POST['CategoryName'], ENT_QUOTES, $Settings['charset']));
 131 //$_POST['CategoryName'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_POST['CategoryName']);
 132 $_POST['CategoryName'] = remove_spaces($_POST['CategoryName']);
 133 $_POST['CategoryDesc'] = stripcslashes(htmlspecialchars($_POST['CategoryDesc'], ENT_QUOTES, $Settings['charset']));
 134 //$_POST['CategoryDesc'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_POST['CategoryDesc']);
 135 $_POST['CategoryDesc'] = remove_spaces($_POST['CategoryDesc']);
 136 $sql_id_check = sql_query(sql_pre_query("SELECT \"id\" FROM \"".$Settings['sqltable']."categories\" WHERE \"id\"=%i LIMIT 1", array($_POST['CategoryID'])),$SQLStat);
 137 $sql_order_check = sql_query(sql_pre_query("SELECT \"OrderID\" FROM \"".$Settings['sqltable']."categories\" WHERE \"OrderID\"=%i LIMIT 1", array($_POST['OrderID'])),$SQLStat);
 138 $id_check = sql_num_rows($sql_id_check); $order_check = sql_num_rows($sql_order_check);
 139 sql_free_result($sql_id_check); sql_free_result($sql_order_check);
 140 $errorstr = "";
 141 if ($_POST['NumPostView']==null||
 142         !is_numeric($_POST['NumPostView'])) {
 143         $_POST['NumPostView'] = 0; }
 144 if ($_POST['NumKarmaView']==null||
 145         !is_numeric($_POST['NumKarmaView'])) {
 146         $_POST['NumKarmaView'] = 0; }
 147 if ($_POST['CategoryName']==null||
 148         $_POST['CategoryName']=="ShowMe") { $Error="Yes";
 149 $errorstr = $errorstr."You need to enter a category name.<br />\n"; }
 150 if ($_POST['CategoryDesc']==null) { $Error="Yes";
 151 $errorstr = $errorstr."You need to enter a description.<br />\n"; }
 152 if ($_POST['CategoryID']==null||
 153         !is_numeric($_POST['CategoryID'])) { $Error="Yes";
 154 $errorstr = $errorstr."You need to enter a category id.<br />\n"; }
 155 if($id_check > 0) { $Error="Yes";
 156 $errorstr = $errorstr."This ID number is already used.<br />\n"; }
 157 if($order_check > 0) { $Error="Yes";
 158 $errorstr = $errorstr."This order number is already used.<br />\n"; }
 159 if (pre_strlen($_POST['CategoryName'])>"150") { $Error="Yes";
 160 $errorstr = $errorstr."Your category name is too big.<br />\n"; }
 161 if (pre_strlen($_POST['CategoryDesc'])>"300") { $Error="Yes";
 162 $errorstr = $errorstr."Your category description is too big.<br />\n"; }
 163 if ($Error!="Yes") {
 164 redirect("refresh",$rbasedir.url_maker($exfile['admin'],$Settings['file_ext'],"act=view&menu=categories",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin'],FALSE),"4");
 165 $admincptitle = " ".$ThemeSet['TitleDivider']." Updating Settings";
 166 $query = sql_pre_query("INSERT INTO \"".$Settings['sqltable']."categories\" (\"id\", \"OrderID\", \"Name\", \"ShowCategory\", \"CategoryType\", \"SubShowForums\", \"InSubCategory\", \"PostCountView\", \"KarmaCountView\", \"Description\") VALUES\n".
 167 "(%i, %i, '%s', '%s', '%s', 'yes', %i, %i, %i, '%s')", array($_POST['CategoryID'],$_POST['OrderID'],$_POST['CategoryName'],$_POST['ShowCategory'],$_POST['CategoryType'],$_POST['InSubCategory'],$_POST['NumPostView'],$_POST['NumKarmaView'],$_POST['CategoryDesc']));
 168 sql_query($query,$SQLStat);
 169 $getperidq = sql_pre_query("SELECT DISTINCT \"PermissionID\" FROM \"".$Settings['sqltable']."catpermissions\" ORDER BY \"PermissionID\" ASC", array(null));
 170 $getperidr=sql_query($getperidq,$SQLStat);
 171 $getperidnum=sql_num_rows($getperidr);
 172 $getperidi = 0;
 173 //$nextperid = sql_get_next_id($Settings['sqltable'],"catpermissions",$SQLStat);
 174 $nextperid = null;
 175 while ($getperidi < $getperidnum) {
 176 if($Settings['sqltype']=="mysql"||$Settings['sqltype']=="mysqli"
 177         ||$Settings['sqltype']=="pgsql") {
 178 $getperidID=sql_result($getperidr,$getperidi,"PermissionID"); }
 179 if($Settings['sqltype']=="sqlite") {
 180 $getperidID=sql_result($getperidr,$getperidi,"\"PermissionID\""); }
 181 $getperidq2 = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."catpermissions\" WHERE \"PermissionID\"=%i", array($getperidID));
 182 $getperidr2=sql_query($getperidq2,$SQLStat);
 183 $getperidnum2=sql_num_rows($getperidr2);
 184 $getperidName=sql_result($getperidr2,0,"Name");
 185 sql_free_result($getperidr2);
 186 $query = sql_pre_query("INSERT INTO \"".$Settings['sqltable']."catpermissions\" (\"PermissionID\", \"Name\", \"CategoryID\", \"CanViewCategory\") VALUES (%i, '%s', %i, 'yes')", array($getperidID,$getperidName,$_POST['CategoryID']));
 187 sql_query($query,$SQLStat);
 188 ++$getperidi; /*++$nextperid;*/ }
 189 sql_free_result($getperidr); } }
 190 if($_GET['act']=="deletecategory"&&$_POST['update']!="now") {
 191 $admincptitle = " ".$ThemeSet['TitleDivider']." Deleting a Category";
 192 ?>
 193 <div class="TableMenuBorder">
 194 <?php if($ThemeSet['TableStyle']=="div") { ?>
 195 <div class="TableMenuRow1">
 196 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=addcategory",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">iDB Category Manager</a></div>
 197 <?php } ?>
 198 <table class="TableMenu" style="width: 100%;">
 199 <?php if($ThemeSet['TableStyle']=="table") { ?>
 200 <tr class="TableMenuRow1">
 201 <td class="TableMenuColumn1"><span style="float: left;">
 202 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=addcategory",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">iDB Category Manager</a>
 203 </span><span style="float: right;">&nbsp;</span></td>
 204 </tr><?php } ?>
 205 <tr class="TableMenuRow2">
 206 <th class="TableMenuColumn2" style="width: 100%; text-align: left;">
 207 <span style="float: left;">&nbsp;Deleting a Category: </span>
 208 <span style="float: right;">&nbsp;</span>
 209 </th>
 210 </tr>
 211 <tr class="TableMenuRow3">
 212 <td class="TableMenuColumn3">
 213 <form style="display: inline;" method="post" id="acptool" action="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=deletecategory",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">
 214 <table style="text-align: left;">
 215 <tr style="text-align: left;">
 216         <td style="width: 50%;"><label class="TextBoxLabel" for="DelCategories">Delete all categories in subcategory:</label></td>
 217         <td style="width: 50%;"><select size="1" class="TextBox" name="DelCategories" id="DelCategories">
 218         <option selected="selected" value="yes">yes</option>
 219         <option value="no">no</option>
 220         </select></td>
 221 </tr><tr style="text-align: left;">
 222         <td style="width: 50%;"><label class="TextBoxLabel" for="DelForums">Delete all forums in (sub)category:</label></td>
 223         <td style="width: 50%;"><select size="1" class="TextBox" name="DelForums" id="DelForums">
 224         <option selected="selected" value="yes">yes</option>
 225         <option value="no">no</option>
 226         </select></td>
 227 </tr><tr style="text-align: left;">
 228         <td style="width: 50%;"><label class="TextBoxLabel" for="DelTopics">Delete all topics in (sub)category:</label></td>
 229         <td style="width: 50%;"><select size="1" class="TextBox" name="DelTopics" id="DelTopics">
 230         <option selected="selected" value="yes">yes</option>
 231         <option value="no">no</option>
 232         </select></td>
 233 </tr><tr style="text-align: left;">
 234         <td style="width: 50%;"><label class="TextBoxLabel" for="DelPermission">Delete all permission sets in (sub)category:</label></td>
 235         <td style="width: 50%;"><select size="1" class="TextBox" name="DelPermission" id="DelPermission">
 236         <option selected="selected" value="yes">yes</option>
 237         <option value="no">no</option>
 238         </select></td>
 239 </tr><tr style="text-align: left;">
 240         <td style="width: 50%;"><label class="TextBoxLabel" for="DelID">Delete Category:</label></td>
 241         <td style="width: 50%;"><select size="1" class="TextBox" name="DelID" id="DelID">
 242 <?php
 243 $fq = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."categories\" ORDER BY \"OrderID\" ASC, \"id\" ASC", array(null));
 244 $fr=sql_query($fq,$SQLStat);
 245 $ai=sql_num_rows($fr);
 246 $fi=0;
 247 while ($fi < $ai) {
 248 $InCategoryID=sql_result($fr,$fi,"id");
 249 $InCategoryName=sql_result($fr,$fi,"Name");
 250 $InCategoryType=sql_result($fr,$fi,"CategoryType");
 251 $AiFiInSubCategory=sql_result($fr,$fi,"InSubCategory");
 252 ?>
 253         <option value="<?php echo $InCategoryID; ?>"><?php echo $InCategoryName; ?></option>
 254 <?php ++$fi; }
 255 sql_free_result($fr); ?>
 256         </select></td>
 257 </tr></table>
 258 <table style="text-align: left;">
 259 <tr style="text-align: left;">
 260 <td style="width: 100%;">
 261 <input type="hidden" name="act" value="deletecategory" style="display: none;" />
 262 <input type="hidden" name="update" value="now" style="display: none;" />
 263 <input type="submit" class="Button" value="Delete Category" name="Apply_Changes" />
 264 <input type="reset" value="Reset Form" class="Button" name="Reset_Form" />
 265 </td></tr></table>
 266 </form>
 267 </td>
 268 </tr>
 269 <tr class="TableMenuRow4">
 270 <td class="TableMenuColumn4">&nbsp;</td>
 271 </tr>
 272 </table>
 273 </div>
 274 <?php } if($_GET['act']=="deletecategory"&&$_POST['update']=="now"&&$_GET['act']=="deletecategory") {
 275 $admincptitle = " ".$ThemeSet['TitleDivider']." Updating Settings";
 276 $prequery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."categories\" WHERE \"id\"=%i LIMIT 1", array($_POST['DelID']));
 277 $preresult=sql_query($prequery,$SQLStat);
 278 $prenum=sql_num_rows($preresult);
 279 $errorstr = ""; $Error = null;
 280 if (!is_numeric($_POST['DelID'])) { $Error="Yes";
 281 $errorstr = $errorstr."You need to enter a forum ID.<br />\n"; }
 282 if($prenum>0&&$Error!="Yes") {
 283 $dtquery = sql_pre_query("DELETE FROM \"".$Settings['sqltable']."categories\" WHERE \"id\"=%i", array($_POST['DelID']));
 284 sql_query($dtquery,$SQLStat);
 285 if($_POST['DelCategories']=="yes") {
 286 $dscquery = sql_pre_query("DELETE FROM \"".$Settings['sqltable']."categories\" WHERE \"InSubCategory\"=%i", array($_POST['DelID']));
 287 sql_query($dscquery,$SQLStat); }
 288 if($_POST['DelForums']=="yes") {
 289 $dsfquery = sql_pre_query("DELETE FROM \"".$Settings['sqltable']."forums\" WHERE \"CategoryID\"=%i", array($_POST['DelID']));
 290 sql_query($dsfquery,$SQLStat); }
 291 if($_POST['DelForums']=="yes") {
 292 $dstquery = sql_pre_query("DELETE FROM \"".$Settings['sqltable']."topics\" WHERE \"CategoryID\"=%i", array($_POST['DelID']));
 293 sql_query($dstquery,$SQLStat); }
 294 if($_POST['DelForums']=="yes") {
 295 $dstquery = sql_pre_query("DELETE FROM \"".$Settings['sqltable']."topics\" WHERE \"CategoryID\"=%i", array($_POST['DelID']));
 296 sql_query($dstquery,$SQLStat);
 297 $dstquery = sql_pre_query("DELETE FROM \"".$Settings['sqltable']."posts\" WHERE \"CategoryID\"=%i", array($_POST['DelID']));
 298 sql_query($dstquery,$SQLStat); }
 299 if($_POST['DelPermission']=="yes") {
 300 $apcquery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."forums\" WHERE \"CategoryID\"=%i ORDER BY \"OrderID\" ASC, \"id\" ASC", array($_POST['DelID']));
 301 $apcresult=sql_query($apcquery,$SQLStat);
 302 $apcnum=sql_num_rows($apcresult);
 303 $apci=0; $apcl=1; if($apcnum>=1) {
 304 while ($apci < $apcnum) {
 305 $DelForumID=sql_result($apcresult,$apci,"id");
 306 if($_POST['DelPermission']=="yes") {
 307 $dtquery = sql_pre_query("DELETE FROM \"".$Settings['sqltable']."permissions\" WHERE \"ForumID\"=%i", array($DelForumID));
 308 sql_query($dtquery,$SQLStat); }
 309 ++$apci; }
 310 sql_free_result($apcresult); } }
 311 if($_POST['DelPermission']=="yes") {
 312 $apcquery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."categories\" WHERE \"InSubCategory\"=%i ORDER BY \"OrderID\" ASC, \"id\" ASC", array($_POST['DelID']));
 313 $apcresult=sql_query($apcquery,$SQLStat);
 314 $apcnum=sql_num_rows($apcresult);
 315 $apci=0; $apcl=1; if($apcnum>=1) {
 316 while ($apci < $apcnum) {
 317 $DelSubsCategoryID=sql_result($apcresult,$apci,"id");
 318 if($_POST['DelPermission']=="yes") {
 319 $dtquery = sql_pre_query("DELETE FROM \"".$Settings['sqltable']."catpermissions\" WHERE \"CategoryID\"=%i", array($DelSubsCategoryID));
 320 sql_query($dtquery,$SQLStat); }
 321 ++$apci; }
 322 sql_free_result($apcresult); } }
 323 ?>
 324 <?php } } if($_GET['act']=="editcategory"&&$_POST['update']!="now") {
 325 $admincptitle = " ".$ThemeSet['TitleDivider']." Editing a Category";
 326 if(!isset($_POST['id'])) {
 327 ?>
 328 <div class="TableMenuBorder">
 329 <?php if($ThemeSet['TableStyle']=="div") { ?>
 330 <div class="TableMenuRow1">
 331 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=editcategory",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">iDB Category Manager</a></div>
 332 <?php } ?>
 333 <table class="TableMenu" style="width: 100%;">
 334 <?php if($ThemeSet['TableStyle']=="table") { ?>
 335 <tr class="TableMenuRow1">
 336 <td class="TableMenuColumn1"><span style="float: left;">
 337 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=editcategory",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">iDB Category Manager</a>
 338 </span><span style="float: right;">&nbsp;</span></td>
 339 </tr><?php } ?>
 340 <tr class="TableMenuRow2">
 341 <th class="TableMenuColumn2" style="width: 100%; text-align: left;">
 342 <span style="float: left;">&nbsp;Editing a Category: </span>
 343 <span style="float: right;">&nbsp;</span>
 344 </th>
 345 </tr>
 346 <tr class="TableMenuRow3">
 347 <td class="TableMenuColumn3">
 348 <form style="display: inline;" method="post" id="acptool" action="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=editcategory",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">
 349 <table style="text-align: left;">
 350 <tr style="text-align: left;">
 351         <td style="width: 50%;"><label class="TextBoxLabel" for="id">Category to Edit:</label></td>
 352         <td style="width: 50%;"><select size="1" class="TextBox" name="id" id="id">
 353 <?php
 354 $fq = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."categories\" ORDER BY \"OrderID\" ASC, \"id\" ASC", array(null));
 355 $fr=sql_query($fq,$SQLStat);
 356 $ai=sql_num_rows($fr);
 357 $fi=0;
 358 while ($fi < $ai) {
 359 $InCategoryID=sql_result($fr,$fi,"id");
 360 $InCategoryName=sql_result($fr,$fi,"Name");
 361 $InCategoryType=sql_result($fr,$fi,"CategoryType");
 362 $AiFiInSubCategory=sql_result($fr,$fi,"InSubCategory");
 363 ?>
 364         <option value="<?php echo $InCategoryID; ?>"><?php echo $InCategoryName; ?></option>
 365 <?php ++$fi; }
 366 sql_free_result($fr); ?>
 367         </select></td>
 368 </tr></table>
 369 <table style="text-align: left;">
 370 <tr style="text-align: left;">
 371 <td style="width: 100%;">
 372 <input type="hidden" name="act" value="editcategory" style="display: none;" />
 373 <input type="submit" class="Button" value="Edit Category" name="Apply_Changes" />
 374 <input type="reset" value="Reset Form" class="Button" name="Reset_Form" />
 375 </td></tr></table>
 376 </form>
 377 </td>
 378 </tr>
 379 <tr class="TableMenuRow4">
 380 <td class="TableMenuColumn4">&nbsp;</td>
 381 </tr>
 382 </table>
 383 </div>
 384 <?php } if(isset($_POST['id'])) {
 385 $prequery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."categories\" WHERE \"id\"=%i LIMIT 1", array($_POST['id']));
 386 $preresult=sql_query($prequery,$SQLStat);
 387 $prenum=sql_num_rows($preresult);
 388 if($prenum==0) { redirect("location",$rbasedir.url_maker($exfile['admin'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin'],false)); sql_free_result($preresult);
 389 ob_clean(); header("Content-Type: text/plain; charset=".$Settings['charset']); $urlstatus = 302;
 390 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); session_write_close(); die(); }
 391 if($prenum>=1) {
 392 $CategoryID=sql_result($preresult,0,"id");
 393 $CategoryOrder=sql_result($preresult,0,"OrderID");
 394 $CategoryName=sql_result($preresult,0,"Name");
 395 $ShowCategory=sql_result($preresult,0,"ShowCategory");
 396 $CategoryType=sql_result($preresult,0,"CategoryType");
 397 $SubShowForums=sql_result($preresult,0,"SubShowForums");
 398 $InSubCategory=sql_result($preresult,0,"InSubCategory");
 399 $CategoryDescription=sql_result($preresult,0,"Description");
 400 $KarmaCountView=sql_result($preresult,0,"KarmaCountView");
 401 $PostCountView=sql_result($preresult,0,"PostCountView");
 402 sql_free_result($preresult);
 403 $CategoryType = strtolower($CategoryType);
 404 ?>
 405 <div class="TableMenuBorder">
 406 <?php if($ThemeSet['TableStyle']=="div") { ?>
 407 <div class="TableMenuRow1">
 408 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=editcategory",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">iDB Category Manager</a></div>
 409 <?php } ?>
 410 <table class="TableMenu" style="width: 100%;">
 411 <?php if($ThemeSet['TableStyle']=="table") { ?>
 412 <tr class="TableMenuRow1">
 413 <td class="TableMenuColumn1"><span style="float: left;">
 414 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=editcategory",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">iDB Category Manager</a>
 415 </span><span style="float: right;">&nbsp;</span></td>
 416 </tr><?php } ?>
 417 <tr class="TableMenuRow2">
 418 <th class="TableMenuColumn2" style="width: 100%; text-align: left;">
 419 <span style="float: left;">&nbsp;Editing a Category: </span>
 420 <span style="float: right;">&nbsp;</span>
 421 </th>
 422 </tr>
 423 <tr class="TableMenuRow3">
 424 <td class="TableMenuColumn3">
 425 <form style="display: inline;" method="post" id="acptool" action="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=editcategory",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">
 426 <table style="text-align: left;">
 427 <tr style="text-align: left;">
 428         <td style="width: 50%;"><label class="TextBoxLabel" for="CategoryID">Insert id for category:</label></td>
 429         <td style="width: 50%;"><input type="text" name="CategoryID" class="TextBox" id="CategoryID" size="20" value="<?php echo $CategoryID; ?>" /></td>
 430 </tr><tr style="text-align: left;">
 431         <td style="width: 50%;"><label class="TextBoxLabel" for="OrderID">Insert order id category:</label></td>
 432         <td style="width: 50%;"><input type="text" name="OrderID" class="TextBox" id="OrderID" size="20" value="<?php echo $CategoryOrder; ?>" /></td>
 433 </tr><tr style="text-align: left;">
 434         <td style="width: 50%;"><label class="TextBoxLabel" for="CategoryName">Insert name for category:</label></td>
 435         <td style="width: 50%;"><input type="text" name="CategoryName" class="TextBox" id="CategoryName" size="20" value="<?php echo $CategoryName; ?>" /></td>
 436 </tr><tr style="text-align: left;">
 437         <td style="width: 50%;"><label class="TextBoxLabel" for="CategoryDesc">Insert description for category:</label></td>
 438         <td style="width: 50%;"><input type="text" name="CategoryDesc" class="TextBox" id="CategoryDesc" size="20" value="<?php echo $CategoryDescription; ?>" /></td>
 439 </tr><tr style="text-align: left;">
 440         <td style="width: 50%;"><label class="TextBoxLabel" for="ShowCategory">Show category:</label></td>
 441         <td style="width: 50%;"><select size="1" class="TextBox" name="ShowCategory" id="ShowCategory">
 442         <option <?php if($ShowCategory=="yes") { echo "selected=\"selected\" "; } ?>value="yes">yes</option>
 443         <option <?php if($ShowCategory=="no") { echo "selected=\"selected\" "; } ?>value="no">no</option>
 444         </select></td>
 445 </tr><tr style="text-align: left;">
 446         <td style="width: 50%;"><label class="TextBoxLabel" for="CategoryType">Insert category type:</label></td>
 447         <td style="width: 50%;"><select size="1" class="TextBox" name="CategoryType" id="CategoryType">
 448         <option <?php if($CategoryType=="category") { echo "selected=\"selected\" "; } ?>value="category">Category</option>
 449         <option <?php if($CategoryType=="subcategory") { echo "selected=\"selected\" "; } ?>value="subcategory">SubCategory</option>
 450         </select></td>
 451 </tr><tr style="text-align: left;">
 452         <td style="width: 50%;"><label class="TextBoxLabel" for="InSubCategory">In SubCategory:</label></td>
 453         <td style="width: 50%;"><select size="1" class="TextBox" name="InSubCategory" id="InSubCategory">
 454         <option selected="selected" value="0">none</option>
 455 <?php
 456 $fq = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."categories\" WHERE \"InSubCategory\"=0 AND \"id\"<>%i AND \"CategoryType\"='subcategory' ORDER BY \"OrderID\" ASC, \"id\" ASC", array($CategoryID));
 457 $fr=sql_query($fq,$SQLStat);
 458 $ai=sql_num_rows($fr);
 459 $fi=0;
 460 while ($fi < $ai) {
 461 $InCategoryID=sql_result($fr,$fi,"id");
 462 $InCategoryName=sql_result($fr,$fi,"Name");
 463 $InCategoryType=sql_result($fr,$fi,"CategoryType");
 464 $AiFiInSubCategory=sql_result($fr,$fi,"InSubCategory");
 465 if ($AiFiInSubCategory=="0") {
 466 if($InSubCategory==$InCategoryID) {
 467 ?>
 468         <option value="<?php echo $InCategoryID; ?>" selected="selected"><?php echo $InCategoryName; ?></option>
 469 <?php } if($InSubCategory!=$InCategoryID) { ?>
 470         <option value="<?php echo $InCategoryID; ?>"><?php echo $InCategoryName; ?></option>
 471 <?php } } ++$fi; }
 472 sql_free_result($fr); ?>
 473         </select></td>
 474 </tr><tr style="text-align: left;">
 475         <td style="width: 50%;"><label class="TextBoxLabel" for="NumPostView">Number of posts to view categories:</label></td>
 476         <td style="width: 50%;"><input type="text" class="TextBox" size="20" name="NumPostView" id="NumPostView" value="<?php echo $PostCountView; ?>" /></td>
 477 </tr><tr style="text-align: left;">
 478         <td style="width: 50%;"><label class="TextBoxLabel" for="NumKarmaView">Amount of karma to view categories:</label></td>
 479         <td style="width: 50%;"><input type="text" class="TextBox" size="20" name="NumKarmaView" id="NumKarmaView" value="<?php echo $KarmaCountView; ?>" /></td>
 480 </tr></table>
 481 <table style="text-align: left;">
 482 <tr style="text-align: left;">
 483 <td style="width: 100%;">
 484 <input type="hidden" name="act" value="editcategory" style="display: none;" />
 485 <input type="hidden" name="update" value="now" style="display: none;" />
 486 <input type="hidden" name="id" value="<?php echo $CategoryID; ?>" style="display: none;" />
 487 <input type="submit" class="Button" value="Edit Category" name="Apply_Changes" />
 488 <input type="reset" value="Reset Form" class="Button" name="Reset_Form" />
 489 </td></tr></table>
 490 </form>
 491 </td>
 492 </tr>
 493 <tr class="TableMenuRow4">
 494 <td class="TableMenuColumn4">&nbsp;</td>
 495 </tr>
 496 </table>
 497 </div>
 498 <?php } } } if($_POST['act']=="editcategory"&&$_POST['update']=="now"&&$_GET['act']=="editcategory"&&
 499         isset($_POST['id'])) {
 500 $_POST['CategoryName'] = stripcslashes(htmlspecialchars($_POST['CategoryName'], ENT_QUOTES, $Settings['charset']));
 501 //$_POST['CategoryName'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_POST['CategoryName']);
 502 $_POST['CategoryName'] = remove_spaces($_POST['CategoryName']);
 503 $_POST['CategoryDesc'] = stripcslashes(htmlspecialchars($_POST['CategoryDesc'], ENT_QUOTES, $Settings['charset']));
 504 //$_POST['CategoryDesc'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_POST['CategoryDesc']);
 505 $_POST['CategoryDesc'] = remove_spaces($_POST['CategoryDesc']);
 506 $prequery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."categories\" WHERE \"id\"=%i LIMIT 1", array($_POST['id']));
 507 $preresult=sql_query($prequery,$SQLStat);
 508 $prenum=sql_num_rows($preresult);
 509 if($prenum==0) { redirect("location",$rbasedir.url_maker($exfile['admin'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin'],false)); sql_free_result($preresult);
 510 ob_clean(); header("Content-Type: text/plain; charset=".$Settings['charset']); $urlstatus = 302;
 511 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); session_write_close(); die(); }
 512 if($prenum>=1) {
 513 $OldID=sql_result($preresult,0,"id");
 514 $OldOrder=sql_result($preresult,0,"OrderID");
 515 sql_free_result($preresult);
 516 $sql_id_check = sql_query(sql_pre_query("SELECT \"id\" FROM \"".$Settings['sqltable']."categories\" WHERE \"id\"=%i LIMIT 1", array($_POST['ForumID'])),$SQLStat);
 517 $sql_order_check = sql_query(sql_pre_query("SELECT \"OrderID\" FROM \"".$Settings['sqltable']."categories\" WHERE \"OrderID\"=%i LIMIT 1", array($_POST['OrderID'])),$SQLStat);
 518 $id_check = sql_num_rows($sql_id_check); $order_check = sql_num_rows($sql_order_check);
 519 sql_free_result($sql_id_check); sql_free_result($sql_order_check);
 520 if ($_POST['NumPostView']==null||
 521         !is_numeric($_POST['NumPostView'])) {
 522         $_POST['NumPostView'] = 0; }
 523 if ($_POST['NumKarmaView']==null||
 524         !is_numeric($_POST['NumKarmaView'])) {
 525         $_POST['NumKarmaView'] = 0; }
 526 if ($_POST['CategoryName']==null||
 527         $_POST['CategoryName']=="ShowMe") { $Error="Yes";
 528 $errorstr = $errorstr."You need to enter a category name.<br />\n"; }
 529 if ($_POST['CategoryDesc']==null) { $Error="Yes";
 530 $errorstr = $errorstr."You need to enter a description.<br />\n"; }
 531 if ($_POST['CategoryID']==null||
 532         !is_numeric($_POST['CategoryID'])) { $Error="Yes";
 533 $errorstr = $errorstr."You need to enter a category ID.<br />\n"; }
 534 if($id_check > 0&&$_POST['CategoryID']!=$OldID) { $Error="Yes";
 535 $errorstr = $errorstr."This ID number is already used.<br />\n"; }
 536 if($order_check > 0&&$_POST['OrderID']!=$OldOrder) { $Error="Yes";
 537 $errorstr = $errorstr."This order number is already used.<br />\n"; }
 538 if (pre_strlen($_POST['CategoryName'])>"150") { $Error="Yes";
 539 $errorstr = $errorstr."Your category name is too big.<br />\n"; }
 540 if (pre_strlen($_POST['CategoryDesc'])>"300") { $Error="Yes";
 541 $errorstr = $errorstr."Your category description is too big.<br />\n"; }
 542 if ($Error!="Yes") {
 543 redirect("refresh",$rbasedir.url_maker($exfile['admin'],$Settings['file_ext'],"act=view&menu=categories",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin'],FALSE),"4");
 544 $admincptitle = " ".$ThemeSet['TitleDivider']." Updating Settings";
 545 $query = sql_pre_query("UPDATE \"".$Settings['sqltable']."categories\" SET \"id\"=%i,\"OrderID\"=%i,\"Name\"='%s',\"ShowCategory\"='%s',\"CategoryType\"='%s',\"InSubCategory\"=%i,\"Description\"='%s',\"PostCountView\"=%i,\"KarmaCountView\"=%i WHERE \"id\"=%i", array($_POST['CategoryID'],$_POST['OrderID'],$_POST['CategoryName'],$_POST['ShowCategory'],$_POST['CategoryType'],$_POST['InSubCategory'],$_POST['CategoryDesc'],$_POST['NumPostView'],$_POST['NumKarmaView'],$_POST['id']));
 546 sql_query($query,$SQLStat);
 547 $queryz = sql_pre_query("UPDATE \"".$Settings['sqltable']."catpermissions\" SET \"CategoryID\"=%i WHERE \"CategoryID\"=%i", array($_POST['CategoryID'],$_POST['id']));
 548 sql_query($queryz,$SQLStat);
 549 $query = sql_pre_query("UPDATE \"".$Settings['sqltable']."forums\" SET \"CategoryID\"=%i WHERE \"CategoryID\"=%i", array($_POST['CategoryID'],$_POST['id']));
 550 sql_query($query,$SQLStat);
 551 $query = sql_pre_query("UPDATE \"".$Settings['sqltable']."topics\" SET \"CategoryID\"=%i,\"OldCategoryID\"=%i WHERE \"CategoryID\"=%i", array($_POST['CategoryID'],$_POST['CategoryID'],$_POST['id']));
 552 sql_query($query,$SQLStat);
 553 $query = sql_pre_query("UPDATE \"".$Settings['sqltable']."posts\" SET \"CategoryID\"=%i WHERE \"CategoryID\"=%i", array($_POST['CategoryID'],$_POST['id']));
 554 sql_query($query,$SQLStat); } } }
 555 if($_GET['act']=="cpermissions"&&$_POST['update']!="now") {
 556 $admincptitle = " ".$ThemeSet['TitleDivider']." Category Permissions Manager";
 557 if(!isset($_POST['id'])) {
 558 ?>
 559 <div class="TableMenuBorder">
 560 <?php if($ThemeSet['TableStyle']=="div") { ?>
 561 <div class="TableMenuRow1">
 562 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=cpermissions",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">Category Permissions Manager</a></div>
 563 <?php } ?>
 564 <table class="TableMenu" style="width: 100%;">
 565 <?php if($ThemeSet['TableStyle']=="table") { ?>
 566 <tr class="TableMenuRow1">
 567 <td class="TableMenuColumn1"><span style="float: left;">
 568 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=cpermissions",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">Category Permissions Manager</a>
 569 </span><span style="float: right;">&nbsp;</span></td>
 570 </tr><?php } ?>
 571 <tr class="TableMenuRow2">
 572 <th class="TableMenuColumn2" style="width: 100%; text-align: left;">
 573 <span style="float: left;">&nbsp;Category Permissions Manager: </span>
 574 <span style="float: right;">&nbsp;</span>
 575 </th>
 576 </tr>
 577 <tr class="TableMenuRow3">
 578 <td class="TableMenuColumn3">
 579 <form style="display: inline;" method="post" id="acptool" action="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=cpermissions",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">
 580 <table style="text-align: left;">
 581 <tr style="text-align: left;">
 582         <td style="width: 50%;"><label class="TextBoxLabel" for="id">Permission to view:</label></td>
 583         <td style="width: 50%;"><select size="1" class="TextBox" name="id" id="id">
 584 <?php
 585 $getperidq = sql_pre_query("SELECT DISTINCT \"PermissionID\" FROM \"".$Settings['sqltable']."catpermissions\"", array(null));
 586 $getperidr=sql_query($getperidq,$SQLStat);
 587 $getperidnum=sql_num_rows($getperidr);
 588 $getperidi = 0;
 589 while ($getperidi < $getperidnum) {
 590 if($Settings['sqltype']=="mysql"||$Settings['sqltype']=="mysqli"
 591         ||$Settings['sqltype']=="pgsql") {
 592 $getperidID=sql_result($getperidr,$getperidi,"PermissionID"); }
 593 if($Settings['sqltype']=="sqlite") {
 594 $getperidID=sql_result($getperidr,$getperidi,"\"PermissionID\""); }
 595 $getperidq2 = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."catpermissions\" WHERE \"PermissionID\"=%i ORDER BY \"CategoryID\" ASC", array($getperidID));
 596 $getperidr2=sql_query($getperidq2,$SQLStat);
 597 $getperidnum2=sql_num_rows($getperidr2);
 598 $getperidName=sql_result($getperidr2,0,"Name");
 599 sql_free_result($getperidr2);
 600 ?>
 601         <option value="<?php echo $getperidID; ?>"><?php echo $getperidName; ?></option>
 602 <?php ++$getperidi; }
 603 sql_free_result($getperidr); ?>
 604         </select></td>
 605 </tr></table>
 606 <table style="text-align: left;">
 607 <tr style="text-align: left;">
 608 <td style="width: 100%;">
 609 <input type="hidden" name="act" value="cpermissions" style="display: none;" />
 610 <input type="submit" class="Button" value="View Permission" name="Apply_Changes" />
 611 <input type="reset" value="Reset Form" class="Button" name="Reset_Form" />
 612 </td></tr></table>
 613 </form>
 614 </td>
 615 </tr>
 616 <tr class="TableMenuRow4">
 617 <td class="TableMenuColumn4">&nbsp;</td>
 618 </tr>
 619 </table>
 620 </div>
 621 <?php } if(isset($_POST['id'])&&$_POST['subact']==null) { ?>
 622 <div class="TableMenuBorder">
 623 <?php if($ThemeSet['TableStyle']=="div") { ?>
 624 <div class="TableMenuRow1">
 625 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=cpermissions",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">Category Permissions Manager</a></div>
 626 <?php } ?>
 627 <table class="TableMenu" style="width: 100%;">
 628 <?php if($ThemeSet['TableStyle']=="table") { ?>
 629 <tr class="TableMenuRow1">
 630 <td class="TableMenuColumn1"><span style="float: left;">
 631 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=cpermissions",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">Category Permissions Manager</a>
 632 </span><span style="float: right;">&nbsp;</span></td>
 633 </tr><?php } ?>
 634 <tr class="TableMenuRow2">
 635 <th class="TableMenuColumn2" style="width: 100%; text-align: left;">
 636 <span style="float: left;">&nbsp;Category Permissions Manager: </span>
 637 <span style="float: right;">&nbsp;</span>
 638 </th>
 639 </tr>
 640 <tr class="TableMenuRow3">
 641 <td class="TableMenuColumn3">
 642 <?php
 643 $fq = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."categories\" ORDER BY \"OrderID\" ASC, \"id\" ASC", array(null));
 644 $fr=sql_query($fq,$SQLStat);
 645 $ai=sql_num_rows($fr);
 646 $fi=0;
 647 while ($fi < $ai) {
 648 $InCategoryID=sql_result($fr,$fi,"id");
 649 $InCategoryName=sql_result($fr,$fi,"Name");
 650 $getperidq = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."catpermissions\" WHERE \"PermissionID\"=%i AND \"CategoryID\"=%i LIMIT 1", array($_POST['id'],$InCategoryID));
 651 $getperidr=sql_query($getperidq,$SQLStat);
 652 $getperidnum=sql_num_rows($getperidr);
 653 $getperidNumz = null;
 654 $getperidID = null;
 655 if($getperidnum>0) {
 656 $getperidNumz=sql_result($getperidr,0,"id");
 657 $getperidID=sql_result($getperidr,0,"PermissionID"); }
 658 ?>
 659 <form style="display: inline;" method="post" action="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=cpermissions",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">
 660 <table style="text-align: left;">
 661 <tr style="text-align: left;">
 662 <td style="width: 100%;">
 663 <?php if($getperidnum>0) { ?>
 664 Permissions for <?php echo $InCategoryName; ?> are set: <br />
 665 <input type="hidden" name="act" value="cpermissions" style="display: none;" />
 666 <input type="hidden" name="subact" value="edit" style="display: none;" />
 667 <input type="hidden" name="id" value="<?php echo $getperidNumz; ?>" style="display: none;" />
 668 <input type="submit" class="Button" value="Edit Permissions" name="Apply_Changes" />
 669 <?php } if($getperidnum<=0) { ?>
 670 Permissions for <?php echo $InCategoryName; ?> are not set: <br />
 671 <input type="hidden" name="act" value="cpermissions" style="display: none;" />
 672 <input type="hidden" name="subact" value="create" style="display: none;" />
 673 <input type="hidden" name="permid" value="<?php echo $_POST['id']; ?>" style="display: none;" />
 674 <input type="hidden" name="id" value="<?php echo $InCategoryID; ?>" style="display: none;" />
 675 <input type="submit" class="Button" value="Create Permissions" name="Apply_Changes" />
 676 <?php } ?>
 677 </td></tr></table>
 678 </form>
 679 <?php
 680 sql_free_result($getperidr);
 681 ++$fi; }
 682 sql_free_result($fr); ?>
 683 </td>
 684 </tr>
 685 <tr class="TableMenuRow4">
 686 <td class="TableMenuColumn4">&nbsp;</td>
 687 </tr>
 688 </table>
 689 </div>
 690 <?php } if(isset($_POST['id'])&&$_POST['subact']=="edit") {
 691 $prequery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."catpermissions\" WHERE \"id\"=%i LIMIT 1", array($_POST['id']));
 692 $preresult=sql_query($prequery,$SQLStat);
 693 $prenum=sql_num_rows($preresult);
 694 if($prenum==0) { redirect("location",$rbasedir.url_maker($exfile['admin'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin'],false)); sql_free_result($preresult);
 695 ob_clean(); header("Content-Type: text/plain; charset=".$Settings['charset']); $urlstatus = 302;
 696 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); session_write_close(); die(); }
 697 if($prenum>=1) {
 698 $PermissionNum=sql_result($preresult,0,"id");
 699 $PermissionID=sql_result($preresult,0,"PermissionID");
 700 $PermissionName=sql_result($preresult,0,"Name");
 701 $PermissionCategoryID=sql_result($preresult,0,"CategoryID");
 702 $CanViewCategory=sql_result($preresult,0,"CanViewCategory");
 703 sql_free_result($preresult); }
 704 $PermissionName = stripcslashes(htmlspecialchars($PermissionName, ENT_QUOTES, $Settings['charset']));
 705 //$_POST['CategoryName'] = preg_replace("/&amp;#(x[a-f0-9]+|[0-9]+);/i", "&#$1;", $_POST['CategoryName']);
 706 ?>
 707 <div class="TableMenuBorder">
 708 <?php if($ThemeSet['TableStyle']=="div") { ?>
 709 <div class="TableMenuRow1">
 710 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=cpermissions",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">Category Permissions Manager</a></div>
 711 <?php } ?>
 712 <table class="TableMenu" style="width: 100%;">
 713 <?php if($ThemeSet['TableStyle']=="table") { ?>
 714 <tr class="TableMenuRow1">
 715 <td class="TableMenuColumn1"><span style="float: left;">
 716 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=cpermissions",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">Category Permissions Manager</a>
 717 </span><span style="float: right;">&nbsp;</span></td>
 718 </tr><?php } ?>
 719 <tr class="TableMenuRow2">
 720 <th class="TableMenuColumn2" style="width: 100%; text-align: left;">
 721 <span style="float: left;">&nbsp;Editing Category Permissions: </span>
 722 <span style="float: right;">&nbsp;</span>
 723 </th>
 724 </tr>
 725 <tr class="TableMenuRow3">
 726 <td class="TableMenuColumn3">
 727 <form style="display: inline;" method="post" id="acptool" action="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=cpermissions",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">
 728 <table style="text-align: left;">
 729 <tr style="text-align: left;">
 730         <td style="width: 50%;"><label class="TextBoxLabel" for="CanViewCategory">Can view Category:</label></td>
 731         <td style="width: 50%;"><select size="1" class="TextBox" name="CanViewCategory" id="CanViewCategory">
 732         <option <?php if($CanViewCategory=="yes") { echo "selected=\"selected\" "; } ?>value="yes">yes</option>
 733         <option <?php if($CanViewCategory=="no") { echo "selected=\"selected\" "; } ?>value="no">no</option>
 734         </select></td>
 735 </tr>
 736 </table>
 737 <table style="text-align: left;">
 738 <tr style="text-align: left;">
 739 <td style="width: 100%;">
 740 <input type="hidden" name="act" value="cpermissions" style="display: none;" />
 741 <input type="hidden" name="subact" value="editnow" style="display: none;" />
 742 <input type="hidden" name="id" value="<?php echo $PermissionNum; ?>" style="display: none;" />
 743 <input type="submit" class="Button" value="Edit Permissions" name="Apply_Changes" />
 744 <input type="reset" value="Reset Form" class="Button" name="Reset_Form" />
 745 </td></tr></table>
 746 </form>
 747 </td>
 748 </tr>
 749 <tr class="TableMenuRow4">
 750 <td class="TableMenuColumn4">&nbsp;</td>
 751 </tr>
 752 </table>
 753 </div>
 754 <?php } if(isset($_POST['id'])&&$_POST['subact']=="editnow") {
 755 $admincptitle = " ".$ThemeSet['TitleDivider']." Updating Settings";
 756 redirect("refresh",$rbasedir.url_maker($exfile['admin'],$Settings['file_ext'],"act=view&menu=categories",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin'],FALSE),"4");
 757 $query = sql_pre_query("UPDATE \"".$Settings['sqltable']."catpermissions\" SET \"CanViewCategory\"='%s' WHERE \"id\"=%i", array($_POST['CanViewCategory'], $_POST['id']));
 758 sql_query($query,$SQLStat); } if(isset($_POST['id'])&&$_POST['subact']=="create") {
 759 ?>
 760 <div class="TableMenuBorder">
 761 <?php if($ThemeSet['TableStyle']=="div") { ?>
 762 <div class="TableMenuRow1">
 763 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=cpermissions",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">Category Permissions Manager</a></div>
 764 <?php } ?>
 765 <table class="TableMenu" style="width: 100%;">
 766 <?php if($ThemeSet['TableStyle']=="table") { ?>
 767 <tr class="TableMenuRow1">
 768 <td class="TableMenuColumn1"><span style="float: left;">
 769 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=cpermissions",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">Category Permissions Manager</a>
 770 </span><span style="float: right;">&nbsp;</span></td>
 771 </tr><?php } ?>
 772 <tr class="TableMenuRow2">
 773 <th class="TableMenuColumn2" style="width: 100%; text-align: left;">
 774 <span style="float: left;">&nbsp;Editing Category Permissions: </span>
 775 <span style="float: right;">&nbsp;</span>
 776 </th>
 777 </tr>
 778 <tr class="TableMenuRow3">
 779 <td class="TableMenuColumn3">
 780 <form style="display: inline;" method="post" id="acptool" action="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=cpermissions",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">
 781 <table style="text-align: left;">
 782 <tr style="text-align: left;">
 783         <td style="width: 50%;"><label class="TextBoxLabel" for="CanViewCategory">Can view category:</label></td>
 784         <td style="width: 50%;"><select size="1" class="TextBox" name="CanViewCategory" id="CanViewCategory">
 785         <option value="yes">yes</option>
 786         <option value="no">no</option>
 787         </select></td>
 788 </tr></table>
 789 <table style="text-align: left;">
 790 <tr style="text-align: left;">
 791 <td style="width: 100%;">
 792 <input type="hidden" name="act" value="cpermissions" style="display: none;" />
 793 <input type="hidden" name="subact" value="makenow" style="display: none;" />
 794 <input type="hidden" name="id" value="<?php echo $_POST['id']; ?>" style="display: none;" />
 795 <input type="hidden" name="permid" value="<?php echo $_POST['permid']; ?>" style="display: none;" />
 796 <input type="submit" class="Button" value="Create Permissions" name="Apply_Changes" />
 797 <input type="reset" value="Reset Form" class="Button" name="Reset_Form" />
 798 </td></tr></table>
 799 </form>
 800 </td>
 801 </tr>
 802 <tr class="TableMenuRow4">
 803 <td class="TableMenuColumn4">&nbsp;</td>
 804 </tr>
 805 </table>
 806 </div>
 807 <?php } if(isset($_POST['id'])&&isset($_POST['permid'])&&$_POST['subact']=="makenow") {
 808 $admincptitle = " ".$ThemeSet['TitleDivider']." Updating Settings";
 809 redirect("refresh",$rbasedir.url_maker($exfile['admin'],$Settings['file_ext'],"act=view&menu=categories",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin'],FALSE),"4");
 810 $prequery = sql_pre_query("SELECT * FROM \"".$Settings['sqltable']."catpermissions\" WHERE \"id\"=%i LIMIT 1", array($_POST['permid']));
 811 $preresult=sql_query($prequery,$SQLStat);
 812 $prenum=sql_num_rows($preresult);
 813 if($prenum==0) { redirect("location",$rbasedir.url_maker($exfile['admin'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin'],false)); sql_free_result($preresult);
 814 ob_clean(); header("Content-Type: text/plain; charset=".$Settings['charset']); $urlstatus = 302;
 815 gzip_page($Settings['use_gzip'],$GZipEncode['Type']); session_write_close(); die(); }
 816 if($prenum>=1) {
 817 $PermissionName=sql_result($preresult,0,"Name");
 818 sql_free_result($preresult); }
 819 //$nextidnum = sql_get_next_id($Settings['sqltable'],"catpermissions",$SQLStat);
 820 $query = sql_pre_query("INSERT INTO \"".$Settings['sqltable']."catpermissions\" (\"PermissionID\", \"Name\", \"CategoryID\", \"CanViewCategory\") VALUES\n".
 821 "(%i, '%s', %i, '%s')", array($_POST['permid'], $PermissionName, $_POST['id'], $_POST['CanViewCategory']));
 822 sql_query($query,$SQLStat); } } $doupdate = false;
 823 if(isset($_POST['id'])&&$_POST['subact']=="editnow") {
 824         $doupdate = true; }
 825 if(isset($_POST['id'])&&isset($_POST['permid'])&&$_POST['subact']=="makenow") {
 826         $doupdate = true; }
 827 if($_POST['act']=="addcategory"&&$_POST['update']=="now"&&$_GET['act']=="addcategory") {
 828         $doupdate = true; }
 829 if($_GET['act']=="deletecategory"&&$_POST['update']=="now"&&$_GET['act']=="deletecategory") {
 830         $doupdate = true; }
 831 if($_POST['act']=="editcategory"&&$_POST['update']=="now"&&$_GET['act']=="editcategory"&&
 832         isset($_POST['id'])) {
 833         $doupdate = true; }
 834 if($doupdate===true&&$Error!="Yes") { ?>
 835 <div class="TableMenuBorder">
 836 <?php if($ThemeSet['TableStyle']=="div") { ?>
 837 <div class="TableMenuRow1">
 838 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">Updating Settings</a></div>
 839 <?php } ?>
 840 <table class="TableMenu" style="width: 100%;">
 841 <?php if($ThemeSet['TableStyle']=="table") { ?>
 842 <tr class="TableMenuRow1">
 843 <td class="TableMenuColumn1"><span style="float: left;">
 844 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=view",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">Updating Settings</a>
 845 </span><span style="float: right;">&nbsp;</span></td>
 846 </tr><?php } ?>
 847 <tr id="ProfileTitle" class="TableMenuRow2">
 848 <th class="TableMenuColumn2">Updating Settings</th>
 849 </tr>
 850 <tr class="TableMenuRow3" id="ProfileUpdate">
 851 <td class="TableMenuColumn3">
 852 <?php if(isset($_POST['id'])&&$_POST['subact']=="editnow") { ?>
 853 <div style="text-align: center;">
 854         <br />The permission was edited successfully. <a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=".$_GET['act']."&menu=categories",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">Click here</a> to go back. ^_^<br />&nbsp;
 855         </div>
 856 <?php } if(isset($_POST['id'])&&isset($_POST['permid'])&&$_POST['subact']=="makenow") { ?>
 857 <div style="text-align: center;">
 858         <br />The permission was created successfully. <a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=".$_GET['act']."&menu=categories",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">Click here</a> to go back. ^_^<br />&nbsp;
 859         </div>
 860 <?php } if($_POST['act']=="addcategory"&&$_POST['update']=="now"&&$_GET['act']=="addcategory") { ?>
 861 <div style="text-align: center;">
 862         <br />The category was created successfully. <a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=".$_GET['act']."&menu=categories",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">Click here</a> to go back. ^_^<br />&nbsp;
 863         </div>
 864 <?php } if($_GET['act']=="deletecategory"&&$_POST['update']=="now"&&$_GET['act']=="deletecategory") { ?>
 865 <div style="text-align: center;">
 866         <br />The category was deleted successfully. <a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=".$_GET['act']."&menu=categories",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">Click here</a> to go back. ^_^<br />&nbsp;
 867         </div>
 868 <?php } if($_POST['act']=="editcategory"&&$_POST['update']=="now"&&$_GET['act']=="editcategory"&&
 869         isset($_POST['id'])) { ?>
 870 <div style="text-align: center;">
 871         <br />The category was edited successfully. <a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=".$_GET['act']."&menu=categories",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">Click here</a> to go back. ^_^<br />&nbsp;
 872         </div>
 873 <?php } ?>
 874 </td></tr>
 875 <tr id="ProfileTitleEnd" class="TableMenuRow4">
 876 <td class="TableMenuColumn4">&nbsp;</td>
 877 </tr></table></div>
 878 <?php } if ($_GET['act']!=null&&$Error=="Yes") {
 879 redirect("refresh",$rbasedir.url_maker($exfile['admin'],$Settings['file_ext'],"act=".$_GET['act']."&menu=categories",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin'],FALSE),"4");
 880 $admincptitle = " ".$ThemeSet['TitleDivider']." Updating Settings";
 881 ?>
 882 <div class="TableMenuBorder">
 883 <?php if($ThemeSet['TableStyle']=="div") { ?>
 884 <div class="TableMenuRow1">
 885 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=".$_GET['act']."&menu=categories",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">Updating Settings</a></div>
 886 <?php } ?>
 887 <table class="TableMenu" style="width: 100%;">
 888 <?php if($ThemeSet['TableStyle']=="table") { ?>
 889 <tr class="TableMenuRow1">
 890 <td class="TableMenuColumn1"><span style="float: left;">
 891 <?php echo $ThemeSet['TitleIcon']; ?><a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=".$_GET['act']."&menu=categories",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">Updating Settings</a>
 892 </span><span style="float: right;">&nbsp;</span></td>
 893 </tr><?php } ?>
 894 <tr id="ProfileTitle" class="TableMenuRow2">
 895 <th class="TableMenuColumn2">Updating Settings</th>
 896 </tr>
 897 <tr class="TableMenuRow3" id="ProfileUpdate">
 898 <td class="TableMenuColumn3">
 899 <div style="text-align: center;">
 900         <br /><?php echo $errorstr; ?>
 901         <a href="<?php echo url_maker($exfile['admin'],$Settings['file_ext'],"act=".$_GET['act']."&menu=categories",$Settings['qstr'],$Settings['qsep'],$prexqstr['admin'],$exqstr['admin']); ?>">Click here</a> to back to admin cp.<br />&nbsp;
 902         </div>
 903 </td></tr>
 904 <tr id="ProfileTitleEnd" class="TableMenuRow4">
 905 <td class="TableMenuColumn4">&nbsp;</td>
 906 </tr></table></div>
 907 <?php } ?>
 908 </td></tr>
 909 </table>
 910 <div>&nbsp;</div>