some checks
This commit is contained in:
parent
e61b1fe954
commit
b797b97595
@ -85,7 +85,7 @@ class Pools extends SimpleExtension {
|
|||||||
if(!$user->is_anonymous()) {
|
if(!$user->is_anonymous()) {
|
||||||
$newPoolID = $this->add_pool();
|
$newPoolID = $this->add_pool();
|
||||||
$page->set_mode("redirect");
|
$page->set_mode("redirect");
|
||||||
$page->set_redirect(make_link("pool/view/".$newPoolID.""));
|
$page->set_redirect(make_link("pool/view/".$newPoolID));
|
||||||
} else {
|
} else {
|
||||||
$this->theme->display_error("You must be registered and logged in to add a image.");
|
$this->theme->display_error("You must be registered and logged in to add a image.");
|
||||||
}
|
}
|
||||||
@ -93,7 +93,7 @@ class Pools extends SimpleExtension {
|
|||||||
}
|
}
|
||||||
case "view":
|
case "view":
|
||||||
{
|
{
|
||||||
$poolID = $event->get_arg(1);
|
$poolID = int_escape($event->get_arg(1));
|
||||||
$this->get_posts($event, $poolID);
|
$this->get_posts($event, $poolID);
|
||||||
break;
|
break;
|
||||||
}
|
}
|
||||||
@ -105,7 +105,7 @@ class Pools extends SimpleExtension {
|
|||||||
case "revert":
|
case "revert":
|
||||||
{
|
{
|
||||||
if(!$user->is_anonymous()) {
|
if(!$user->is_anonymous()) {
|
||||||
$historyID = $event->get_arg(1);
|
$historyID = int_escape($event->get_arg(1));
|
||||||
|
|
||||||
$this->revert_history($historyID);
|
$this->revert_history($historyID);
|
||||||
|
|
||||||
@ -116,7 +116,7 @@ class Pools extends SimpleExtension {
|
|||||||
}
|
}
|
||||||
case "edit":
|
case "edit":
|
||||||
{
|
{
|
||||||
$poolID = $event->get_arg(1);
|
$poolID = int_escape($event->get_arg(1));
|
||||||
$pools = $this->get_pool($poolID);
|
$pools = $this->get_pool($poolID);
|
||||||
|
|
||||||
foreach($pools as $pool) {
|
foreach($pools as $pool) {
|
||||||
@ -125,7 +125,7 @@ class Pools extends SimpleExtension {
|
|||||||
$this->theme->edit_pool($page, $this->get_pool($poolID), $this->edit_posts($poolID));
|
$this->theme->edit_pool($page, $this->get_pool($poolID), $this->edit_posts($poolID));
|
||||||
} else {
|
} else {
|
||||||
$page->set_mode("redirect");
|
$page->set_mode("redirect");
|
||||||
$page->set_redirect(make_link("pool/view/".$poolID.""));
|
$page->set_redirect(make_link("pool/view/".$poolID));
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
break;
|
break;
|
||||||
@ -134,12 +134,12 @@ class Pools extends SimpleExtension {
|
|||||||
{
|
{
|
||||||
$poolID = int_escape($_POST["pool_id"]);
|
$poolID = int_escape($_POST["pool_id"]);
|
||||||
$page->set_mode("redirect");
|
$page->set_mode("redirect");
|
||||||
$page->set_redirect(make_link("pool/edit/".$poolID.""));
|
$page->set_redirect(make_link("pool/edit/".$poolID));
|
||||||
break;
|
break;
|
||||||
}
|
}
|
||||||
case "order":
|
case "order":
|
||||||
{
|
{
|
||||||
$poolID = $event->get_arg(1);
|
$poolID = int_escape($event->get_arg(1));
|
||||||
$pools = $this->get_pool($poolID);
|
$pools = $this->get_pool($poolID);
|
||||||
|
|
||||||
foreach($pools as $pool) {
|
foreach($pools as $pool) {
|
||||||
@ -325,7 +325,7 @@ class Pools extends SimpleExtension {
|
|||||||
(?, ?, ?, ?, now())",
|
(?, ?, ?, ?, now())",
|
||||||
array($user->id, $public, $title, $description));
|
array($user->id, $public, $title, $description));
|
||||||
|
|
||||||
$result = $database->get_row("SELECT LAST_INSERT_ID() AS poolID", array());
|
$result = $database->get_row("SELECT LAST_INSERT_ID() AS poolID");
|
||||||
|
|
||||||
log_info("pools", "Pool {$result["poolID"]} created by {$user->name}");
|
log_info("pools", "Pool {$result["poolID"]} created by {$user->name}");
|
||||||
|
|
||||||
@ -338,8 +338,7 @@ class Pools extends SimpleExtension {
|
|||||||
return $database->get_all("SELECT * FROM pools WHERE id=?", array($poolID));
|
return $database->get_all("SELECT * FROM pools WHERE id=?", array($poolID));
|
||||||
}
|
}
|
||||||
|
|
||||||
private function get_single_pool($poolID)
|
private function get_single_pool($poolID) {
|
||||||
{
|
|
||||||
global $database;
|
global $database;
|
||||||
$poolID = int_escape($poolID);
|
$poolID = int_escape($poolID);
|
||||||
return $database->get_row("SELECT * FROM pools WHERE id=?", array($poolID));
|
return $database->get_row("SELECT * FROM pools WHERE id=?", array($poolID));
|
||||||
@ -351,7 +350,7 @@ class Pools extends SimpleExtension {
|
|||||||
private function get_pool_id($imageID) {
|
private function get_pool_id($imageID) {
|
||||||
global $database;
|
global $database;
|
||||||
$imageID = int_escape($imageID);
|
$imageID = int_escape($imageID);
|
||||||
return $database->get_all("SELECT pool_id FROM pool_images WHERE image_id =?", array($imageID));
|
return $database->get_all("SELECT pool_id FROM pool_images WHERE image_id=?", array($imageID));
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
@ -415,7 +414,7 @@ class Pools extends SimpleExtension {
|
|||||||
list ($imageORDER, $imageID) = $data;
|
list ($imageORDER, $imageID) = $data;
|
||||||
|
|
||||||
$imageID = int_escape($imageID);
|
$imageID = int_escape($imageID);
|
||||||
$database->Execute("UPDATE pool_images SET image_order = ? WHERE pool_id = ? AND image_id = ?", array($imageORDER, $poolID, $imageID));
|
$database->Execute("UPDATE pool_images SET image_order=? WHERE pool_id=? AND image_id=?", array($imageORDER, $poolID, $imageID));
|
||||||
}
|
}
|
||||||
|
|
||||||
return $poolID;
|
return $poolID;
|
||||||
@ -433,8 +432,7 @@ class Pools extends SimpleExtension {
|
|||||||
$images = "";
|
$images = "";
|
||||||
|
|
||||||
foreach ($_POST['check'] as $imageID) {
|
foreach ($_POST['check'] as $imageID) {
|
||||||
$database->execute("DELETE FROM pool_images WHERE pool_id = ? AND image_id = ?", array($poolID, $imageID));
|
$database->execute("DELETE FROM pool_images WHERE pool_id=? AND image_id=?", array($poolID, $imageID));
|
||||||
|
|
||||||
$images .= " ".$imageID;
|
$images .= " ".$imageID;
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -481,13 +479,13 @@ class Pools extends SimpleExtension {
|
|||||||
|
|
||||||
// WE CHECK IF THE EXTENSION RATING IS INSTALLED, WICH VERSION AND IF IT WORKS TO SHOW/HIDE SAFE, QUESTIONABLE, EXPLICIT AND UNRATED IMAGES FROM USER
|
// WE CHECK IF THE EXTENSION RATING IS INSTALLED, WICH VERSION AND IF IT WORKS TO SHOW/HIDE SAFE, QUESTIONABLE, EXPLICIT AND UNRATED IMAGES FROM USER
|
||||||
if($config->get_int("ext_ratings2_version") < 3) {
|
if($config->get_int("ext_ratings2_version") < 3) {
|
||||||
$result = $database->get_all("SELECT image_id ".
|
$result = $database->get_all("SELECT image_id
|
||||||
"FROM pool_images ".
|
FROM pool_images
|
||||||
"WHERE pool_id=? ".
|
WHERE pool_id=?
|
||||||
"ORDER BY image_order ASC ".
|
ORDER BY image_order ASC
|
||||||
"LIMIT ?, ?"
|
LIMIT ?, ?",
|
||||||
, array($poolID, $pageNumber * $imagesPerPage, $imagesPerPage));
|
array($poolID, $pageNumber * $imagesPerPage, $imagesPerPage));
|
||||||
$totalPages = ceil($database->db->GetOne("SELECT COUNT(*) FROM pool_images WHERE pool_id=?",array($poolID)) / $imagesPerPage);
|
$totalPages = ceil($database->db->GetOne("SELECT COUNT(*) FROM pool_images WHERE pool_id=?", array($poolID)) / $imagesPerPage);
|
||||||
}
|
}
|
||||||
|
|
||||||
if($config->get_int("ext_ratings2_version") >= 3) {
|
if($config->get_int("ext_ratings2_version") >= 3) {
|
||||||
@ -506,15 +504,15 @@ class Pools extends SimpleExtension {
|
|||||||
}
|
}
|
||||||
$rating = join(', ', $arr);
|
$rating = join(', ', $arr);
|
||||||
|
|
||||||
$result = $database->get_all("SELECT p.image_id ".
|
$result = $database->get_all("SELECT p.image_id
|
||||||
"FROM pool_images AS p ".
|
FROM pool_images AS p
|
||||||
"INNER JOIN images AS i ".
|
INNER JOIN images AS i
|
||||||
"ON i.id = p.image_id ".
|
ON i.id = p.image_id
|
||||||
"WHERE p.pool_id = ? ".
|
WHERE p.pool_id = ?
|
||||||
"AND i.rating IN ($rating) ".
|
AND i.rating IN ($rating)
|
||||||
"ORDER BY p.image_order ASC ".
|
ORDER BY p.image_order ASC
|
||||||
"LIMIT ?, ?"
|
LIMIT ?, ?",
|
||||||
, array($poolID, $pageNumber * $imagesPerPage, $imagesPerPage));
|
array($poolID, $pageNumber * $imagesPerPage, $imagesPerPage));
|
||||||
|
|
||||||
$totalPages = ceil($database->db->GetOne("SELECT COUNT(*) ".
|
$totalPages = ceil($database->db->GetOne("SELECT COUNT(*) ".
|
||||||
"FROM pool_images AS p ".
|
"FROM pool_images AS p ".
|
||||||
|
Loading…
x
Reference in New Issue
Block a user