Seditio Source
Root |
./othercms/PHPFusion 9.10.20/infusions/downloads/downloads_admin.php
<?php
/*-------------------------------------------------------+
| PHPFusion Content Management System
| Copyright (C) PHP Fusion Inc
| https://phpfusion.com/
+--------------------------------------------------------+
| Filename: downloads.php
| Author: Core Development Team
+--------------------------------------------------------+
| This program is released as free software under the
| Affero GPL license. You can redistribute it and/or
| modify it under the terms of this license which you
| can read by viewing the included agpl.txt or online
| at www.gnu.org/licenses/agpl.html. Removal of this
| copyright header is strictly prohibited without
| written permission from the original author(s).
+--------------------------------------------------------*/
require_once __DIR__.'/../../maincore.php';
pageaccess('D');
require_once THEMES.'templates/admin_header.php';

$locale = fusion_get_locale('', [DOWNLOAD_ADMIN_LOCALE, LOCALE.LOCALESET."admin/settings.php"]);
$aidlink = fusion_get_aidlink();

require_once INCLUDES."infusions_include.php";

$dl_settings = get_settings("downloads");
add_breadcrumb(['link' => DOWNLOADS."downloads_admin.php".$aidlink, 'title' => $locale['download_0001']]);
add_to_title($locale['download_0001']);

$allowed_section = ["downloads", "download_form", "download_settings", "download_category", "submissions"];
$_GET['section'] = isset($_GET['section']) && in_array($_GET['section'], $allowed_section) ? $_GET['section'] : 'downloads';
$_GET['download_cat_id'] = isset($_GET['download_cat_id']) && isnum($_GET['download_cat_id']) ? $_GET['download_cat_id'] : 0;

$edit = (isset($_GET['action']) && $_GET['action'] == 'edit') && isset($_GET['download_id']);
$catEdit = isset($_GET['action']) && $_GET['action'] == 'edit' && isset($_GET['cat_id']);
// master template
$tab['title'][] = $locale['download_0000'];
$tab['id'][] = "downloads";
$tab['icon'][] = "fa fa-cloud-download";

$tab['title'][] = $edit ? $locale['download_0003'] : $locale['download_0002'];
$tab['id'][] = "download_form";
$tab['icon'][] = $edit ? "fa fa-pencil" : "fa fa-plus";

$tab['title'][] = $catEdit ? $locale['download_0021'] : $locale['download_0022'];
$tab['id'][] = "download_category";
$tab['icon'][] = $catEdit ? "fa fa-pencil" : "fa fa-folder";

$tab['title'][] = $locale['download_0049']."&nbsp;<span class='badge'>".dbcount("(submit_id)", DB_SUBMISSIONS, "submit_type='d'")."</span>";
$tab['id'][] = "submissions";
$tab['icon'][] = "fa fa-inbox";

$tab['title'][] = $locale['download_0006'];
$tab['id'][] = "download_settings";
$tab['icon'][] = "fa fa-cogs";

opentable($locale['download_0001']);
echo opentab($tab, $_GET['section'], "download_admin", TRUE, "", "section", ['rowstart', 'action', 'download_id', 'cat_id', 'submit_id', 'download_cat_id']);

switch ($_GET['section']) {
    case "download_form":
        if (dbcount("('download_cat_id')", DB_DOWNLOAD_CATS)) {
            include "admin/downloads.php";
        } else {
            echo "<div class='well text-center'>\n";
            echo $locale['download_0251']."<br />\n".$locale['download_0252']."<br />\n";
            echo "<a href='".INFUSIONS."downloads/downloads_admin.php".$aidlink."&amp;section=download_category'>".$locale['download_0253']."</a>".$locale['download_0254'];
            echo "</div>\n";
        }
        add_breadcrumb(['link' => FUSION_REQUEST, 'title' => $locale['download_0002']]);
        break;
    case "download_category":
        include "admin/download_cats.php";
        add_breadcrumb(['link' => FUSION_REQUEST, 'title' => $locale['download_0022']]);
        break;
    case "download_settings":
        include "admin/download_settings.php";
        add_breadcrumb(['link' => FUSION_REQUEST, 'title' => $locale['download_0006']]);
        break;
    case "submissions":
        include "admin/download_submissions.php";
        add_breadcrumb(["link" => FUSION_REQUEST, "title" => $locale['download_0049']]);
        break;
    default:
        download_listing();
        break;
}
echo closetab();
closetable();
require_once THEMES.'templates/footer.php';

/* Download Listing */
function download_listing() {
    $aidlink = fusion_get_aidlink();
    $locale = fusion_get_locale();

    $limit = 15;
    $total_rows = dbcount("(download_id)", DB_DOWNLOADS);
    $rowstart = isset($_GET['rowstart']) && isnum($_GET['rowstart']) && ($_GET['rowstart'] <= $total_rows) ? $_GET['rowstart'] : 0;

    // add a filter browser
    $catOpts['all'] = $locale['download_0004'];

    $categories = dbquery("select download_cat_id, download_cat_name from ".DB_DOWNLOAD_CATS." ".(multilang_table("DL") ? "WHERE ".in_group('download_cat_language', LANGUAGE) : "")."");
    if (dbrows($categories) > 0) {
        while ($cat_data = dbarray($categories)) {
            $catOpts[$cat_data['download_cat_id']] = $cat_data['download_cat_name'];
        }
    }
    // prevent xss
    $catFilter = "";
    if (isset($_GET['filter_cid']) && isnum($_GET['filter_cid']) && isset($catOpts[$_GET['filter_cid']])) {
        if ($_GET['filter_cid'] > 0) {
            $catFilter = "download_cat='".intval($_GET['filter_cid'])."'";
        }
    }

    $langFilter = multilang_table("DL") ? in_group('download_cat_language', LANGUAGE) : "";

    if ($catFilter && $langFilter) {
        $filter = $catFilter." AND ".$langFilter;
    } else {
        $filter = $catFilter.$langFilter;
    }

    $result = dbquery("SELECT d.*, dc.download_cat_id, dc.download_cat_name
    FROM ".DB_DOWNLOADS." d
    INNER JOIN ".DB_DOWNLOAD_CATS." dc on d.download_cat = dc.download_cat_id
    ".($filter ? "WHERE $filter " : "")."
    ORDER BY d.download_datestamp DESC LIMIT $rowstart, $limit");

    $rows = dbrows($result);
    echo "<div class='clearfix m-t-10'>\n";
    echo "<span class='pull-right m-t-10 hidden-xs'>".sprintf($locale['download_0005'], $rows, $total_rows)."</span>\n";

    if (!empty($catOpts) > 0 && $total_rows > 0) {
        echo "<div class='dropdown pull-left m-r-10'>\n";
        echo "<a id='ddfilter' class='btn btn-default btn-sm dropdown-toggle' style='width: 200px;' data-toggle='dropdown' aria-haspopup='true' aria-expanded='false'>\n";
        if (isset($_GET['filter_cid']) && isset($catOpts[$_GET['filter_cid']])) {
            echo $catOpts[$_GET['filter_cid']];
        } else {
            echo $locale['download_0011'];
        }
        echo " <span class='caret'></span></a>\n";
        echo "<ul aria-labelledby='ddfilter' class='dropdown-menu' style='max-height:180px; width:200px; overflow-y: auto'>\n";
        foreach ($catOpts as $catID => $catName) {
            $active = isset($_GET['filter_cid']) && $_GET['filter_cid'] == $catID;
            echo "<li".($active ? " class='active'" : "").">\n<a class='text-smaller' href='".clean_request("filter_cid=".$catID, ["section", "rowstart", "aid"])."'>\n";
            echo $catName;
            echo "</a>\n</li>\n";
        }
        echo "</ul>\n";
        echo "</div>\n";
    }
    if ($total_rows > $rows) {
        echo makepagenav($rowstart, $limit, $total_rows, $limit, clean_request("", ["aid", "section"])."&amp;");
    }
    echo "</div>\n";

    echo "<ul class='list-group spacer-xs block'>\n";
    if ($rows > 0) {
        while ($data2 = dbarray($result)) {
            $download_url = '';
            if (!empty($data2['download_file']) && file_exists(DOWNLOADS_FILES.$data2['download_file'])) {
                $download_url = INFUSIONS."downloads/downloads.php?file_id=".$data2['download_id'];
            } else if (!strstr($data2['download_url'], "http://") && !strstr($data2['download_url'], "../")) {
                $download_url = $data2['download_url'];
            }
            echo "<li class='list-group-item'>\n";
            echo "<div class='pull-left m-r-10'>\n";
            echo thumbnail(IMAGES_D.$data2['download_image_thumb'], '50px');
            echo "</div>\n";
            echo "<div class='overflow-hide'>\n";

            echo '<div class="clearfix">';
            echo "<div class='pull-right'>\n".$locale['download_0207']."
            <a style='width:auto;' href='".FUSION_SELF.$aidlink."&amp;section=download_category&amp;action=edit&amp;cat_id=".$data2['download_cat_id']."' class='badge'>
            ".$data2['download_cat_name']."</a>
            </div>\n";
            echo "<span class='strong text-dark'>".$data2['download_title']."</span>\n";
            echo '</div>';

            echo '<div class="clearfix">';
            $dlText = strip_tags(parse_text($data2['download_description_short']));
            echo fusion_first_words($dlText, '50');
            echo '</div>';

            echo "<div class='m-t-5'>\n";
            echo "<a class='m-r-10' target='_blank' href='$download_url'>".$locale['download_0226']."</a>\n";
            echo "<a class='m-r-10' href='".FUSION_SELF.$aidlink."&amp;action=edit&amp;section=download_form&amp;download_id=".$data2['download_id']."'>".$locale['edit']."</a>\n";
            echo "<a class='m-r-10' href='".FUSION_SELF.$aidlink."&amp;action=delete&amp;section=download_form&amp;download_id=".$data2['download_id']."' onclick=\"return confirm('".$locale['download_0255']."');\">".$locale['delete']."</a>\n";
            echo "</div>\n";
            echo "</div>\n";
            echo "</li>\n";
        }
    } else {
        echo "<li class='panel-body text-center'>\n";
        echo $locale['download_0250'];
        echo "</li>\n";
    }
    echo "</ul>\n";

    if ($total_rows > $rows) {
        echo makepagenav($rowstart, $limit, $total_rows, $limit, clean_request("", ["aid", "section"])."&amp;");
    }
}