0){
$dir_path[$i+1]['name']=pa_html_decode($ss[0]["alias"]);
}else{
$dir_path[$i+1]['name']=conv_out($dirs[$i]);
}
$dir_path[$i+1]['link']="main.php?cmd=album&var1=".urlencode($act_dir)."&var2=".$quality;
}
$qualities=db_select_all("quality","enabled=='true'"); // select all enabled qualities
$quality_links=Array();
if(count($qualities)>1){
foreach($qualities as $key=>$val){
$quality_links[]=Array("name"=>$val["name"],
"link"=>"main.php?cmd=setquality&var1=".$val["id"]."&var2=$cmd&var3=".urlencode($var1_orig).get_keyword_parameter_for_link(),
"actual" => ($val["id"]==$pa_quality["id"])?1:0
);
}
}
/*testing for next and previous image ..*/
if($newest===true){
if($position>=1){$prev_link="main.php?cmd=imageviewnew&var1=".($position-1).get_keyword_parameter_for_link();}else{$prev_link="";}
if(isset($newest_objects[$position+1])){$next_link="main.php?cmd=imageviewnew&var1=".($position+1).get_keyword_parameter_for_link();}else{$next_link="";}
}else{
list( $prev,$next) = get_next_prev_image($var1);
if( $prev != "null" ) {
$prev_link = "main.php?cmd=imageview&var1=".urlencode($prev);
}else{
$prev_link ="";
};
if( $next != "null" ) {
$next_link = "main.php?cmd=imageview&var1=".urlencode($next);
}else{
$next_link = "";
};
}
list($width, $height) = get_resized_imagesize($var1);
$image_link="main.php?cmd=image&var1=".urlencode($var1)."&var2=".$qq;
$imageview_link="main.php?cmd=imageview&var1=".urlencode($var1);
$sett_b=get_directory_settings(dirname("/".$var1),0);
$sett=$sett_b[0];//dir settings
$rec=db_select_all("files_".$sett["seq_files"],"file_name=='".prepdb(basename($var1))."'");
$file=$rec[0];
$img_desc=$file["desc"];
if($pa_theme["show_filenames"]=="true" && $img_desc==""){
$img_desc=conv_out(basename($var1));
}
$img_desc_long=$file["long_desc"];
/* store typed comments*/
if(!$var3){
update_stats("imageview",$var1,"view");
}
if($var3=="send_ecard"){
$security_checked=true;
if($pa_setup["antispam_code_enabled"]=="true"){
$rec=db_select_all("anti_spam_codes","pic_seq==".$_POST["p_code_seq"]);
if($rec[0]["code"]==$_POST["p_code_enter"]){
$security_checked=true;
}else{
$security_checked=false;
}
db_delete("anti_spam_codes","pic_seq==".$_POST["p_code_seq"]);
}
if($security_checked){
send_ecard($_POST["p_recipient_name"],$_POST["p_recipient_email"],
$_POST["p_sender_name"],$_POST["p_sender_email"],
$_POST["p_your_message"],$var1);
}
}
if($var3=="save_comment"){
$security_checked=true;
if($pa_setup["antispam_code_enabled"]=="true"){
$rec=db_select_all("anti_spam_codes","pic_seq==".$_POST["p_code_seq"]);
if($rec[0]["code"]==$_POST["p_code_enter"]){
$security_checked=true;
}else{
$security_checked=false;
}
db_delete("anti_spam_codes","pic_seq==".$_POST["p_code_seq"]);
}
if($security_checked){
if(isset($_POST['p_text'])){
if(strlen($_POST['p_name'])==0){
$p_name="Anonymous";
}else{
$p_name=$_POST['p_name'];
}
if( isset($_POST['p_name']))setcookie("comment_name",$_POST['p_name'],time()+60*60*24*365);
if( isset($_POST['p_email']))setcookie("comment_email",$_POST['p_email'],time()+60*60*24*365);
save_comment($var1,$_POST['p_text'],$p_name,$_POST['p_email'],time());
}
}
}
if(substr($var3,0,15)=="delete_comment-"){
$id=substr($var3,15);
delete_comment($var1,$id);
}
$comments=get_comments($var1);
/*parameters*/
$rec=db_select_all("photo_param");
if($rec)foreach($rec as $param){
if($sett["show_parameters"]=="default" && $param["default_displayed"]=="true" ||
isset($sett["show_parameters_custom_id"][$param["id"]])
){
if($param["type"]=="user"){
if(isset($file["params"][$param["id"]]) && strlen($file["params"][$param["id"]])>0 ){
$parameters[$param["name"]]=$file["params"][$param["id"]];
}elseif(isset($param["default"]) && strlen($param["default"])>0){
$parameters[$param["name"]]=$param["default"];
}
}
if($param["type"]=="userlov"){
if(isset($file["params"][$param["id"]]) && $file["params"][$param["id"]]>=0 ){
$parameters[$param["name"]]=$param["lov"][$file["params"][$param["id"]]];
}elseif(isset($param["default_lov"]) && $param["default_lov"] >=0){
$parameters[$param["name"]]=$param["lov"][$param["default_lov"]];
}
}
if($param["type"]=="system"){
/*"dim"=>"Picture dimensions",
"siz"=>"File size in KB",
"cdt"=>"Creation date of picture",
"fnm"=>"Filename",
"fnl"=>"Filename with fullsize download link",
"dwl"=>"Fullsize download link"*/
switch($param["default_lov"]){
case "siz":
$parameters[$param["name"]]=t("ID_SYS_PAR_SIZ",round($sys_par["size"]/1024,1));
break;
case "dim":
$parameters[$param["name"]]=t("ID_SYS_PAR_DIM",$sys_par["width"],$sys_par["height"]);
break;
case "fnm":
$parameters[$param["name"]]=t("ID_SYS_PAR_FNM",$sys_par["name"]);
break;
case "fnl":
$parameters[$param["name"]]=t("ID_SYS_PAR_FNL",$sys_par["link"],$sys_par["name"]);
break;
case "dwl":
$parameters[$param["name"]]=t("ID_SYS_PAR_DWL",$sys_par["link"]);
break;
case "cdt":
$parameters[$param["name"]]=t("ID_SYS_PAR_CDT",date($pa_setup["date_format"],$sys_par["time"]));
break;
case "exif_iso":
if(isset($sys_par["exif_iso"]))
$parameters[$param["name"]]=t("ID_SYS_PAR_EXIF_ISO",$sys_par["exif_iso"]);
break;
case "exif_f":
if(isset($sys_par["exif_f"]))
$parameters[$param["name"]]=t("ID_SYS_PAR_EXIF_F",$sys_par["exif_f"]);
break;
case "exif_fl":
if(isset($sys_par["exif_fl"]))
$parameters[$param["name"]]=t("ID_SYS_PAR_EXIF_FL",$sys_par["exif_fl"]);
break;
case "exif_model":
if(isset($sys_par["exif_model"]))
$parameters[$param["name"]]=$sys_par["exif_model"];
break;
case "exif_exp_time":
if(isset($sys_par["exif_exp_time"]))
$parameters[$param["name"]]=t("ID_SYS_PAR_EXIF_EXP_TIME",$sys_par["exif_exp_time"]);
break;
case "exif_datetime":
if(isset($sys_par["exif_datetime"])){
$parameters[$param["name"]]=date($pa_setup["date_format"],$sys_par["exif_datetime"]);
}
break;
case "iptc_caption":
if(isset($iptc["2#120"])){
$parameters[$param["name"]]=$iptc["2#120"][0];
}
break;
case "iptc_caption_writer":
if(isset($iptc["2#122"])){
$parameters[$param["name"]]=$iptc["2#122"][0];
}
break;
case "iptc_headline":
if(isset($iptc["2#105"])){
$parameters[$param["name"]]=$iptc["2#105"][0];
}
break;
case "iptc_spec_ins":
if(isset($iptc["2#040"])){
$parameters[$param["name"]]=$iptc["2#040"][0];
}
break;
case "iptc_byline":
if(isset($iptc["2#080"])){
$parameters[$param["name"]]=$iptc["2#080"][0];
}
break;
case "iptc_byline_title":
if(isset($iptc["2#085"])){
$parameters[$param["name"]]=$iptc["2#085"][0];
}
break;
case "iptc_credits":
if(isset($iptc["2#110"])){
$parameters[$param["name"]]=$iptc["2#110"][0];
}
break;
case "iptc_source":
if(isset($iptc["2#115"])){
$parameters[$param["name"]]=$iptc["2#115"][0];
}
break;
case "iptc_object_name":
if(isset($iptc["2#005"])){
$parameters[$param["name"]]=$iptc["2#005"][0];
}
break;
case "iptc_date":
if(isset($iptc["2#055"])){
$parameters[$param["name"]]=$iptc["2#055"][0];
}
break;
case "iptc_city":
if(isset($iptc["2#090"])){
$parameters[$param["name"]]=$iptc["2#090"][0];
}
break;
case "iptc_subloc":
if(isset($iptc["2#092"])){
$parameters[$param["name"]]=$iptc["2#092"][0];
}
break;
case "iptc_state":
if(isset($iptc["2#095"])){
$parameters[$param["name"]]=$iptc["2#095"][0];
}
break;
case "iptc_country":
if(isset($iptc["2#101"])){
$parameters[$param["name"]]=$iptc["2#101"][0];
}
break;
case "iptc_otr":
if(isset($iptc["2#103"])){
$parameters[$param["name"]]=$iptc["2#103"][0];
}
break;
case "iptc_category":
if(isset($iptc["2#015"])){
$parameters[$param["name"]]=$iptc["2#015"][0];
}
break;
case "iptc_subcategory":
if(isset($iptc["2#020"])){
foreach($iptc["2#020"] as $key=>$value){
if(isset($parameters[$param["name"]])){
$parameters[$param["name"]]=$parameters[$param["name"]]." , ".$value;
}else{
$parameters[$param["name"]]=$value;
}
}
}
break;
case "iptc_priority":
if(isset($iptc["2#010"])){
$parameters[$param["name"]]=$iptc["2#010"][0];
}
break;
case "iptc_keyword":
if(isset($iptc["2#025"])){
foreach($iptc["2#025"] as $key=>$value){
if(isset($parameters[$param["name"]])){
$parameters[$param["name"]]=$parameters[$param["name"]]." , ". get_keyword_link($value);
}else{
$parameters[$param["name"]]=get_keyword_link($value);
}
}
}
break;
case "iptc_copyright":
if(isset($iptc["2#116"])){
$parameters[$param["name"]]=$iptc["2#116"][0];
}
break;
}
}
}
}
theme_generate_imageview_page($dir_path,$quality_links,$img_desc,$img_desc_long,$next_link,$prev_link,$image_link,$imageview_link,$width,$height,$var3,$comments,$parameters,$ecard);
}
function approve_comment($var1,$id){
global $pa_grants;
if(isset($pa_grants["comments"])){
$dir=get_dir_from_photo_var($var1);
$file=basename($var1);
$rec=db_select_all("directory","path=='". prepdb($dir) ."'");
$im_rec=db_select_all("comments_".$rec[0]["seq_files"],"id=='".$id."'");
if($im_rec[0]["visible"]!="true"){
db_update("comments_".$rec[0]["seq_files"],"visible='true';","id=='".$id."'");
update_stats("imageview",$var1,"comment","add");
}
db_delete("new_comments","id=='".$id."'");
}
}
function delete_comment($var1,$id){
global $pa_grants;
if(isset($pa_grants["comments"])){
$dir=get_dir_from_photo_var($var1);
$file=basename($var1);
$rec=db_select_all("directory","path=='". prepdb($dir) ."'");
$im_rec=db_select_all("comments_".$rec[0]["seq_files"],"id=='".$id."'");
if($im_rec[0]["visible"]=="true"){
update_stats("imageview",$var1,"comment","del");
}
db_delete("comments_".$rec[0]["seq_files"],"id=='".$id."'");
db_delete("new_comments","id=='".$id."'");
}
}
function save_comment($var1,$text,$name,$email,$time){
global $pa_setup;
$t_text=pa_html_encode(stripslashes($text));
$t_text=str_replace("\n","
",$t_text);
$t_text=str_replace("\r","",$t_text);
$dir=get_dir_from_photo_var($var1);
$file=basename($var1);
$rec=db_select_all("directory","path=='". prepdb($dir) ."'");
$id=db_get_seq_nextval("comment_id");
$visible_flag=$pa_setup["publish_only_approved_comments"]=="true"?"false":"true";
db_insert("comments_".$rec[0]["seq_files"],Array(
"id"=>$id,
"file_name"=>$file,
"name"=>pa_html_encode($name),
"time"=>$time,
"email"=>pa_html_encode($email),
"text"=>$t_text,
"visible"=>$visible_flag
));
if($visible_flag=="true"){
update_stats("imageview",$var1,"comment","add");
}
$new_comments=db_select_all("new_comments",null,"time",true);
if(count($new_comments)>=$pa_setup["comments_approve_queue_size"]){
db_delete("new_comments","id==".$new_comments[0]["id"]);
}
db_insert("new_comments",Array(
"seq_files"=>$rec[0]["seq_files"],
"id"=>$id,
"pic_link"=>$var1,
"file_name"=>$file,
"name"=>pa_html_encode($name),
"time"=>$time,
"email"=>pa_html_encode($email),
"text"=>$t_text
));
db_commit();
}
function get_comments($var1){
$dir=get_dir_from_photo_var($var1);
$file=basename($var1);
$rec=db_select_all("directory","path=='". prepdb($dir) ."'");
$comments=db_select_all("comments_".$rec[0]["seq_files"],"file_name=='".prepdb($file)."' && visible=='true'","time-");
return $comments;
}
function get_all_comments(){
global $data_dir;
$comments=db_select_all("new_comments",null);
return $comments;
}
/****************************************/
/* FOOTER */
/****************************************/
function generate_footer(){
echo "";
echo "
";
}
function check_writable($dir){
$file=fopen($dir."writablity_test","w");
fclose($file);
// unlink($dir."writablity_test");
return $file;
}
function write_log(){
global $pa_setup,$cmd,$var1,$passwd,$pa_user;
if($pa_setup["logs_enabled"]=="true"){
$strings=explode(";",$pa_setup["logs_exclude"]);
$found="false";
$host=gethostbyaddr($_SERVER['REMOTE_ADDR']);
foreach($strings as $num=>$string){
if(strlen($string)>0)
if(strstr($host,$string))$found="true";
}
if($found=="false"){
$file_log=fopen($pa_setup["cache_dir"].$pa_setup["logs_filename"],"a");
fwrite($file_log,date("D.M.j G:i:s")."|".$cmd."|".$var1."|".$pa_user["name"]."|".$host."|\n");
fclose($file_log);
}
}
}
function generate_theme($var1){
if($var1=="style_css"){
theme_get_style_css();
return;
}
}
function install_database(){
global $data_dir,$phpalbum_version,$init_album_dir,$init_cache_dir,$init_ftp_server,$init_ftp_photos_dir;
require("install_db.php");
}
/****************************************/
/* Start Program v0. */
/****************************************/
/*
foreach($_POST as $key=>$value){
$_POST[$key]=stripslashes($value);
}
*/
if(isset($_GET['cmd'])){
$cmd=$_GET['cmd'];
}
if(isset($_GET['keyword'])){
$pa_keywords=explode(" ",$_GET['keyword']);
foreach($pa_keywords as $key=>$value){
if(strlen(trim($value))==0){
unset($pa_keywords[$key]);
}
}
$pa_original_keywords=$_GET['keyword'];
$pa_keywords_unsorted=$pa_keywords;
}
if(isset($_GET['var1'])){
$var1=stripslashes($_GET['var1']);
}
if(isset($_GET['var2'])){
$var2=stripslashes($_GET['var2']);
}
if(isset($_GET['var3'])){
$var3=stripslashes($_GET['var3']);
}
if(isset($_GET['var4'])){
$var4=stripslashes($_GET['var4']);
}
if(isset($_POST['cmd'])){
$cmd=$_POST['cmd'];
}
if(isset($_POST['keyword'])){
$pa_keywords=explode(" ",$_POST['keyword']);
}
if(isset($_POST['var1'])){
$var1=$_POST['var1'];
}
if(isset($_POST['var2'])){
$var2=$_POST['var2'];
}
if(isset($_POST['var3'])){
$var3=$_POST['var3'];
}
if(isset($_POST['var4'])){
$var4=$_POST['var4'];
}
if($cmd!="album" &&
$cmd!="albumnew" &&
$cmd!="phpinfo" &&
$cmd!="thmb" &&
$cmd!="imageorig" &&
$cmd!="image" &&
$cmd!="imageview" &&
$cmd!="ecardview" &&
$cmd!="imageviewnew" &&
$cmd!="setup" &&
$cmd!="delcache" &&
$cmd!="logo" &&
$cmd!="theme" &&
$cmd!="themeimage" &&
$cmd!="antispampic" &&
//$cmd!="system_check" &&
$cmd!="setquality"){
$cmd="album";
}
require("phpdatabase.php");
/*if(!db_startup_database("album",$data_dir)){
install_database();
}*/
if(!db_startup_database("album",$data_dir)){
db_create_database("album",$data_dir);
install_database();
}
db_set_auto_commit(false);
$pa_db_version=db_select_all("phpalbum_version");
if(!isset($pa_db_version[0]) || $pa_db_version[0]["version"]!=$phpalbum_version){
include "upgrade_db.php";
}
read_settings();
require($themes_dir."engines/".$site_engine."/engine.php");
require("language.php");
if($cmd=="setquality"){
if(!($rec=db_select_all("quality","id=='$var1'"))){
//setted quality not found
$rec=db_select_all("quality","default=='true'");
}
$pa_quality=$rec[0];
setcookie("phpAlbum_quality",$pa_quality["id"],time()+60*60*24*365);
$cmd=$var2;$var1=$var3;$var2="";$var3="";
if(isset($var3)){ $var2=$var3;}
if(isset($var4)){ $var3=$var4;}
}else{
if(isset($_COOKIE["phpAlbum_quality"])){
if(!($rec=db_select_all("quality","id=='".$_COOKIE["phpAlbum_quality"]."'"))){
//setted quality not found
$rec=db_select_all("quality","default=='true'");
}
}else{
$rec=db_select_all("quality","default=='true'");
}
$pa_quality=$rec[0];
}
if(strstr($var1,"..")){
$var1="";
}
if(isset($_GET["logout"])){
setcookie("userid","",time()-60*60*24*365);
setcookie("userpassword","",time()-60*60*24*365);
}else{
if(isset($_COOKIE['userid'])){
$userid=$_COOKIE['userid'];
}
if(isset($_COOKIE['userpassword'])){
$userpassword=$_COOKIE['userpassword'];
}
}
if(isset($_POST["p_username"])){
$username=$_POST["p_username"];
$userpassword=md5($_POST["p_userpassword"]);
$rec=db_select_all("user","name=='".$username."' && password=='".$userpassword."'");
if(isset($rec[0])){
$pa_user=$rec[0];
if(!isset($_POST["p_storepassword"])){
setcookie("userid",$pa_user["id"]);
setcookie("userpassword",$userpassword);
}else{
setcookie("userid",$pa_user["id"],time()+60*60*24*365);
setcookie("userpassword",$userpassword,time()+60*60*24*365);
}
}else{
$pa_user=Array("name"=>"guest","groups"=>Array("guest"=>"1"));
}
}else{
$rec=db_select_all("user","id=='".$userid."' && password=='".$userpassword."'");
if(isset($rec[0])){
$pa_user=$rec[0];
$comment_name=$pa_user["name"];
$comment_email=$pa_user["email"];
}else{
$pa_user=Array("name"=>"guest","groups"=>Array("guest"=>"1"));
$comment_name=$_COOKIE["comment_name"];
$comment_email=$_COOKIE["comment_email"];
}
}
//take all groups where the user is a member
//and merge the grants to be easy to check it later if needed
$where="";
foreach($pa_user["groups"] as $key => $value){
if($where ==""){
$where = $where . "name=='".$key."'";
}else{
$where = $where . " || name=='".$key."'";
}
}
$rec=db_select_all("group",$where);
$pa_grants=Array();
if(is_array($rec)){
foreach($rec as $record){
if(is_array($record["grants"])){
$pa_grants =array_merge($pa_grants,$record["grants"]);
}
}
}
/*security check, either if it is disabled for actual user or it is not visible.*/
/*if accessed trough direct link it will be redirected to show the root directory*/
if($cmd=="album"){
$pa_dir_settings = get_directory_settings($var1,0);
if(!check_access_to_dir($var1) || $pa_dir_settings[0]["visibility"]=="false"){
$var1=""; // show the root directory.
$var2="";
$var3="";
$cmd="album";
}
}else if($cmd=="imageview" || $cmd=="thmb" || $cmd=="image"){
$pa_dir_settings = get_directory_settings(dirname($var1),0);
if(!check_access_to_dir(dirname($var1)) || $pa_dir_settings[0]["visibility"]=="false"){
$var1=""; // show the root directory.
$var2="";
$var3="";
$cmd="album";
}
}
$this_is_cachable=false;
if(is_cachable($cmd,$var1)) {
$this_is_cachable=true;
if(is_cached($cmd,$var1,$var2,$var3,$quality)) {
load_from_cache($cmd,$var1,$var2,$var3,$quality);
//echo "
Loaded from cache";
return;
}
}
/*full-scanning directories evry 1 day*/
if($pa_setup["last_dir_scan"] 0) {
ob_end_flush();
}
}
?>
![](\"res/expl.png\")