aboutsummaryrefslogtreecommitdiffstats
path: root/admin/waiting.php
diff options
context:
space:
mode:
Diffstat (limited to 'admin/waiting.php')
-rw-r--r--admin/waiting.php106
1 files changed, 52 insertions, 54 deletions
diff --git a/admin/waiting.php b/admin/waiting.php
index feda12754..ebced6120 100644
--- a/admin/waiting.php
+++ b/admin/waiting.php
@@ -24,14 +24,16 @@
// | Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, |
// | USA. |
// +-----------------------------------------------------------------------+
-include_once( './admin/include/isadmin.inc.php' );
+if( !defined("PHPWG_ROOT_PATH") )
+{
+ die ("Hacking attempt!");
+}
+include_once( PHPWG_ROOT_PATH.'admin/include/isadmin.inc.php');
//--------------------------------------------------------------------- updates
if ( isset( $_POST['submit'] ) )
{
- $query = 'SELECT id,storage_category_id,file,tn_ext';
- $query.= ' FROM '.PREFIX_TABLE.'waiting';
- $query.= " WHERE validated = 'false'";
- $query.= ';';
+ $query = 'SELECT * FROM '.WAITING_TABLE;
+ $query.= " WHERE validated = 'false';";
$result = mysql_query( $query );
while ( $row = mysql_fetch_array( $result ) )
{
@@ -42,7 +44,7 @@ if ( isset( $_POST['submit'] ) )
{
// The uploaded element was validated, we have to set the
// "validated" field to "true"
- $query = 'UPDATE '.PREFIX_TABLE.'waiting';
+ $query = 'UPDATE '.WAITING_TABLE;
$query.= " SET validated = 'true'";
$query.= ' WHERE id = '.$row['id'];
$query.= ';';
@@ -54,7 +56,7 @@ if ( isset( $_POST['submit'] ) )
{
// The uploaded element was refused, we have to delete its reference
// in the database and to delete the element as well.
- $query = 'DELETE FROM '.PREFIX_TABLE.'waiting';
+ $query = 'DELETE FROM '.WAITING_TABLE;
$query.= ' WHERE id = '.$row['id'];
$query.= ';';
mysql_query( $query );
@@ -66,29 +68,37 @@ if ( isset( $_POST['submit'] ) )
$thumbnail = $conf['prefix_thumbnail'];
$thumbnail.= get_filename_wo_extension( $row['file'] );
$thumbnail.= '.'.$row['tn_ext'];
- $url = '.'.$dir.'thumbnail/'.$thumbnail;
+ $url = PHPWG_ROOT_PATH.$dir.'thumbnail/'.$thumbnail;
unlink( $url );
}
}
}
}
}
+
//----------------------------------------------------- template initialization
-$sub = $vtp->Open( './template/'.$user['template'].'/admin/waiting.vtp' );
-$tpl = array( 'category','date','author','thumbnail','file','delete',
- 'submit','waiting_update' );
-templatize_array( $tpl, 'lang', $sub );
+$template->set_filenames(array('waiting'=>'admin/waiting.tpl'));
+$template->assign_vars(array(
+ 'L_WAITING_CONFIRMATION'=>$lang['waiting_update'],
+ 'L_AUTHOR'=>$lang['author'],
+ 'L_THUMBNAIL'=>$lang['thumbnail'],
+ 'L_DATE'=>$lang['date'],
+ 'L_FILE'=>$lang['file'],
+ 'L_CATEGORY'=>$lang['category'],
+ 'L_SUBMIT'=>$lang['submit'],
+ 'L_DELETE'=>$lang['delete'],
+
+ 'F_ACTION'=>add_session_id(str_replace( '&', '&', $_SERVER['REQUEST_URI'] ))
+ ));
+
//-------------------------------------------------------- confirmation message
-if ( isset( $_POST['submit'] ) )
+if (isset($_POST['submit']))
{
- $vtp->addSession( $sub, 'confirmation' );
- $vtp->closeSession( $sub, 'confirmation' );
+ $template->assign_block_vars('confirmation' ,array());
}
//---------------------------------------------------------------- form display
$cat_names = array();
-$query = 'SELECT id,storage_category_id,file,username,mail_address';
-$query.= ',date,tn_ext';
-$query.= ' FROM '.PREFIX_TABLE.'waiting';
+$query = 'SELECT * FROM '.WAITING_TABLE;
$query.= " WHERE validated = 'false'";
$query.= ' ORDER BY storage_category_id';
$query.= ';';
@@ -96,57 +106,45 @@ $result = mysql_query( $query );
$i = 0;
while ( $row = mysql_fetch_array( $result ) )
{
- $vtp->addSession( $sub, 'picture' );
- $vtp->setVar( $sub, 'picture.id', $row['id'] );
- if ( $i++ % 2 == 0 )
- {
- $vtp->setVar( $sub, 'picture.class', 'row2' );
- }
if ( !isset( $cat_names[$row['storage_category_id']] ) )
{
$cat = get_cat_info( $row['storage_category_id'] );
$cat_names[$row['storage_category_id']] = array();
$cat_names[$row['storage_category_id']]['dir'] =
- '.'.get_complete_dir( $row['storage_category_id'] );
+ PHPWG_ROOT_PATH.get_complete_dir( $row['storage_category_id'] );
$cat_names[$row['storage_category_id']]['display_name'] =
get_cat_display_name( $cat['name'], ' > ', 'font-weight:bold;' );
}
- // category name
- $vtp->setVar( $sub, 'picture.cat_name',
- $cat_names[$row['storage_category_id']]['display_name'] );
- // date displayed like this (in English ) :
- // Sunday 15 June 2003 21:29
- $date = format_date( $row['date'], 'unix', true );
- $vtp->setVar( $sub, 'picture.date', $date );
- // file preview link
- $url = $cat_names[$row['storage_category_id']]['dir'].$row['file'];
- $vtp->setVar( $sub, 'picture.preview_url', $url );
- // file name
- $vtp->setVar( $sub, 'picture.file', $row['file'] );
+ $preview_url = PHPWG_ROOT_PATH.$cat_names[$row['storage_category_id']]['dir'].$row['file'];
+ $class='row1';
+ if ( $i++ % 2== 0 ) $class='row2';
+
+ $template->assign_block_vars('picture' ,array(
+ 'WAITING_CLASS'=>$class,
+ 'CATEGORY_IMG'=>$cat_names[$row['storage_category_id']]['display_name'],
+ 'ID_IMG'=>$row['id'],
+ 'DATE_IMG'=>format_date( $row['date'], 'unix', true ),
+ 'FILE_IMG'=>$row['file'],
+ 'PREVIEW_URL_IMG'=>$preview_url,
+ 'UPLOAD_EMAIL'=>$row['mail_address'],
+ 'UPLOAD_USERNAME'=>$row['username']
+ ));
+
// is there an existing associated thumnail ?
- if ( isset( $row['tn_ext'] ) and $row['tn_ext'] != '' )
+ if ( !empty( $row['tn_ext'] ))
{
- $vtp->addSession( $sub, 'thumbnail' );
$thumbnail = $conf['prefix_thumbnail'];
$thumbnail.= get_filename_wo_extension( $row['file'] );
$thumbnail.= '.'.$row['tn_ext'];
- $url = $cat_names[$row['storage_category_id']]['dir'];
+ $url = $cat_names[$row['storage_category_id']]['dir'];
$url.= 'thumbnail/'.$thumbnail;
- $vtp->setVar( $sub, 'thumbnail.preview_url', $url );
- $vtp->setVar( $sub, 'thumbnail.file', $thumbnail );
- $vtp->closeSession( $sub, 'thumbnail' );
+
+ $template->assign_block_vars('picture.thumbnail' ,array(
+ 'PREVIEW_URL_TN_IMG'=>$url,
+ 'FILE_TN_IMG'=>$thumbnail
+ ));
}
- else
- {
- $vtp->addSession( $sub, 'no_thumbnail' );
- $vtp->closeSession( $sub, 'no_thumbnail' );
- }
- // username and associated mail address
- $vtp->setVar( $sub, 'picture.mail_address', $row['mail_address'] );
- $vtp->setVar( $sub, 'picture.username', $row['username'] );
-
- $vtp->closeSession( $sub, 'picture' );
}
//----------------------------------------------------------- sending html code
-$vtp->Parse( $handle , 'sub', $sub );
+$template->assign_var_from_handle('ADMIN_CONTENT', 'waiting');
?>
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-23 09:15:57 +0000