LoGD Standardrelease steht hier zum Download zur Verfügung!
Zeige Source: /logd/sulib.php
Hier klicken für den Source, ODER
Weitere Dateien, von denen du den Quelltext sehen kannst:
(Das Lesen des Source, um sich spielerische Vorteile zu verschaffen, ist nicht erlaubt.
Solltest du Schwachstellen oder Fehler entdecken, bist du als Spieler verpflichtet, diese zu melden.)
<?php
/* author: bibir (logd_bibir@email.de)
* and Chaosmaker (webmaster@chaosonline.de)
* for http://logd.chaosonline.de
*
* version: 1.4
*
* a library with text from users to help other
* a bit like faq
*
* details:
* (15.11.04) start of idea
* (15.01.05) project finished
* (17.01.05) several important bugfixes
* (18.01.05) small bugfixes
*/
/*
CREATE TABLE lib_themes (
themeid int(10) unsigned NOT NULL auto_increment,
theme varchar(30) default NULL,
listorder INT(10) UNSIGNED DEFAULT '1' NOT NULL,
PRIMARY KEY (themeid)
) TYPE=MyISAM;
CREATE TABLE lib_books (
bookid int(10) unsigned NOT NULL auto_increment,
themeid int(10) default NULL,
acctid int(10) unsigned NOT NULL default '0',
author varchar(60) NOT NULL,
title varchar(50) default NULL,
book text default NULL,
activated enum('0','1') NOT NULL default '0',
listorder INT(10) UNSIGNED DEFAULT '1' NOT NULL,
PRIMARY KEY (bookid),
KEY themeid (themeid)
) TYPE=MyISAM;
*/
require_once "common.php";
isnewday(2);
if(!isset($_GET['op'])) $_GET['op'] = "";
// settings
$dpts4book = getsetting("libdp","25");
addnav("`AZ`}u`Brück zum Weltlich`}e`An","village.php");
addnav("`AZ`}u`Brück zur Grot`}t`Ae","superuser.php");
addnav("Bibliotheksfunktionen");
page_header("Bibliothek-Editor");
output("`c`b`AE`}d`Bitor für die Biblioth`}e`Ak`b`c`n`n");
switch($_GET['op']){
case "theme":
addnav("`AZ`}u`Br Themenübersic`}h`At","sulib.php");
$sql = "SELECT theme FROM lib_themes WHERE themeid=".$_GET['themeid'];
$result = db_query($sql) or die(db_error(LINK));
$row = db_fetch_assoc($result);
if (!empty($_GET['saveorder'])) {
asort($_POST['order']);
$keys = array_keys($_POST['order']);
$i = 0;
foreach ($keys AS $key) {
$i++;
$sql = 'UPDATE lib_books SET listorder="'.$i.'" WHERE bookid="'.$key.'"';
db_query($sql);
}
}
output("`AA`}l`Ble Bücher zum The`}m`Aa: ".$row['theme']."`0`n`n");
$sql = "SELECT bookid, title, author, listorder FROM lib_books
WHERE themeid=".$_GET['themeid']." ORDER BY listorder ASC";
$result = db_query($sql) or die(db_error(LINK));
output('<form action="sulib.php?op=theme&themeid='.$_GET['themeid'].'&saveorder=1" method="post">',true);
addnav('','sulib.php?op=theme&themeid='.$_GET['themeid'].'&saveorder=1');
output("<table cellpadding=2 cellspacing=1 bgcolor='#999999' align='center'><tr class='trhead'><td>Titel</td><td>Autor</td><td>Sortierung</td></tr>",true);
if (db_num_rows($result)==0) {
output("<tr class='trdark'><td colspan=3>`AE`}s`B sind keine Bücher vorhand`}e`An</td></tr>",true);
}
else {
$bgclass = '';
while ($row = db_fetch_assoc($result)) {
$bgclass = ($bgclass=='trdark'?'trlight':'trdark');
output("<tr class='$bgclass'><td><a href=\"sulib.php?op=edit_post&id=".$row['bookid']."\">",true);
output($row['title']);
output("`0</a></td><td>",true);
output($row['author']);
output("`0</a></td><td>",true);
$order_options = '';
for ($i=1; $i<=db_num_rows($result); $i++) $order_options .= '<option value="'.$i.'"'.($i==$row['listorder']?' selected="selected"':'').'>'.$i.'</option>';
output('<select name="order['.$row['bookid'].']">'.$order_options.'</select>',true);
output("</td></tr>",true);
addnav("","sulib.php?op=edit_post&id=".$row['bookid']);
}
output('<tr><td colspan="3" style="text-align:right"><input type="submit" class="button" value="Sortierung speichern!" /></td></tr>',true);
}
output("</table>",true);
output('</form>',true);
break;
case "new_theme":
addnav("`AZ`}u`Br Themenübersic`}h`At","sulib.php");
if ($_GET['subop']=="save") {
$sql = 'SELECT MAX(listorder) AS maxtheme FROM lib_themes';
$result = db_query($sql);
$row = db_fetch_assoc($result);
$row['maxtheme']++;
$sql = "INSERT INTO lib_themes (theme,listorder) VALUES ('".$_POST['theme']."', {$row['maxtheme']})";
$result = db_query($sql) or die(db_error(LINK));
output("`AN`}e`Bues Thema wurde angele`}g`At.`0`n`n");
}
output("<form action=\"sulib.php?op=new_theme&subop=save\" method='POST'>",true);
output("<table><tr><td>Thema </td><td><input name='theme' maxlength='30'></td></tr>",true);
output("</table><input type='submit' class='button' value='`AS`}p`Beiche`}r`An'></form>",true);
addnav("","sulib.php?op=new_theme&subop=save");
output("`n");
output("`b`AV`}o`Brhandene Them`}e`An:`b`n`n");
$sql = "SELECT theme FROM lib_themes ORDER BY themeid ASC";
$result = db_query($sql) or die(db_error(LINK));
if(db_num_rows($result)==0) {
output("`AE`}s`B gibt keine Them`}e`An.");
}
else while($row = db_fetch_assoc($result)) {
output($row['theme']."`0`n");
}
break;
case "edit_theme":
addnav("`AZ`}u`Br Themenübersic`}h`At","sulib.php");
if ($_GET['subop']=="save") {
$_POST['theme'] = addslashes(closetags(stripslashes($_POST['theme']),'`i`b`c`H'));
$sql = "UPDATE lib_themes SET theme='".$_POST['theme']."' WHERE themeid=".$_GET['themeid'];
$result = db_query($sql) or die(db_error(LINK));
//output("Thema wurde geändert.`n`n");
redirect("sulib.php?op=browse");
}
else {
output("`AH`}i`Ber kann das Thema geändert werd`}e`An.");
$sql = "SELECT theme FROM lib_themes WHERE themeid=".$_GET['themeid'];
$result = db_query($sql) or die(db_error(LINK));
$row = db_fetch_assoc($result);
output("<form action=\"sulib.php?op=edit_theme&subop=save&themeid=".$_GET['themeid']."\" method='POST'>
Thema: <input name='theme' value='".htmlentities(str_replace("`","``",$row['theme']),ENT_QUOTES)."' maxlength='30' size='80'>
`n<input type='submit' class='button' value='Speichern'></form>",true);
addnav("","sulib.php?op=edit_theme&subop=save&themeid=".$_GET['themeid']);
}
break;
case "del_theme":
addnav("`AZ`}u`Br Themenübersic`}h`At","sulib.php");
//buecher, die zu diesem thema gehoeren:
//a) mitloeschen
//b) anderem Thema zuordnen
//c) auf themeid 0 setzen
$sql = "SELECT COUNT(bookid) AS anz FROM lib_books WHERE themeid=".$_GET['themeid'];
$result = db_query($sql) or die(db_error(LINK));
$row = db_fetch_assoc($result);
if ($row['anz']==0) {
output("`AE`}s`B sind keine Bücher zu diesem Thema vorhanden, das Thema wird gelösc`}h`At.");
$sql = "DELETE FROM lib_themes WHERE themeid=".$_GET['themeid'];
db_query($sql) or die(db_error(LINK));
}
else {
output("`AE`}s`B sind ".$row['anz']." Bücher vorhanden, was soll mit diesen passiere`}n`A?`n`n");
output("<form action=\"sulib.php?op=del_theme2&themeid=".$_GET['themeid']."\" method='POST'>
<input type='radio' name='del' value='del_choice'>`Bebenfalls lösch`}e`An`n
<input type='radio' name='del' value='other_theme'>`Beinem anderen Thema zuordn`}e`An`n
<input type='radio' name='del' value='no_theme'>`Bkeinem Thema zuordn`}e`An`n
<input type='submit' class='button' value='`BLösch`}e`An'></form>",true);
addnav("","sulib.php?op=del_theme2&themeid=".$_GET['themeid']);
}
break;
case "del_theme2":
addnav("`AZ`}u`Br Themenübersic`}h`At","sulib.php");
if ($_POST['del']=="del_choice") {
$sql = "DELETE FROM lib_books WHERE themeid=".$_GET['themeid'];
db_query($sql) or die(db_error(LINK));
$sql = "DELETE FROM lib_themes WHERE themeid=".$_GET['themeid'];
db_query($sql) or die(db_error(LINK));
output("`AB`}ü`Bcher und Thema gelösc`}h`At.");
}
elseif ($_POST['del']=="other_theme") {
output("`AF`}o`Blgende Bücher einem anderen Thema zuordn`}e`An:`n");
$sql = "SELECT title FROM lib_books WHERE themeid=".$_GET['themeid'];
$result= db_query($sql) or die(db_error(LINK));
while($row = db_fetch_assoc($result)) {
output($row['title']."`0`n");
}
output("`n`AW`}e`Blches Thema sollen die Bücher nun habe`}n`A?");
$sql = "SELECT * FROM lib_themes WHERE themeid!=".$_GET['themeid'];
$result = db_query($sql) or die(db_error(LINK));
output("<form action=\"sulib.php?op=del_theme3&old_themeid=".$_GET['themeid']."\" method='POST'>
<select name='new_themeid'>",true);
while($row = db_fetch_assoc($result)) {
output("<option value='".$row['themeid']."'>",true);
output(preg_replace('/`./','',$row['theme']));
output("</option>",true);
}
output("</select><input type='submit' class='button' value='Thema zuordnen'></form>",true);
addnav("","sulib.php?op=del_theme3&old_themeid=".$_GET['themeid']);
}
else {
$sql = "UPDATE lib_books SET themeid='0' WHERE themeid=".$_GET['themeid'];
db_query($sql) or die(db_error(LINK));
$sql = "DELETE FROM lib_themes WHERE themeid=".$_GET['themeid'];
db_query($sql) or die(db_error(LINK));
output("`AT`}h`Bema-ID der Bücher entfernt und Thema gelösc`}h`At.");
}
break;
case "del_theme3":
addnav("`AZ`}u`Br Themenübersic`}h`At","sulib.php");
$sql = "UPDATE lib_books SET themeid='".$_POST['new_themeid']."' WHERE themeid=".$_GET['old_themeid'] ;
db_query($sql) or die(db_error(LINK));
$sql = "DELETE FROM lib_themes WHERE themeid=".$_GET['old_themeid'];
db_query($sql) or die(db_error(LINK));
output("`AB`}ü`Bcher neu zugeordnet und das Thema gelösc`}h`At.");
break;
case "new_books":
addnav("`AZ`}u`Br Themenübersic`}h`At","sulib.php");
if ($_GET['subop']=="activate") {
output("`AD`}i`Beses Buch ist jetzt für alle in der Bibliothek einsehb`}a`Ar.");
$sql = "UPDATE lib_books SET activated='1' WHERE bookid=".$_GET['id'];
$result = db_query($sql);
$sql = 'SELECT acctid, title FROM lib_books WHERE bookid='.$_GET['id'];
$result = db_query($sql);
$row = db_fetch_assoc($result);
if ($row['acctid']==$session['user']['acctid']) $session['user']['donation'] += $dpts4book;
else {
$sql = 'UPDATE accounts SET donation=donation+'.$dpts4book.' WHERE acctid='.$row['acctid'];
db_query($sql);
}
debuglog("gave $dpts4book donationpoints for a book to ",$row['acctid']);
systemmail($row['acctid'],'`AD`}e`Bin Buch wurde angenommen!','Das Buch mit dem Titel "'.$row['title'].'", das du eingereicht hattest, wurde in die Bibliothek aufgenommen. Du bekommst dafür '.$dpts4book.' Donationpoin`}t`As.');
}
output("`AD`}a`Bs sind die Bücher, die eingereicht aber noch nicht freigegeben wurd`}e`An:`n`n");
$sql = "SELECT b.bookid, b.title, t.theme, b.author
FROM lib_books b
LEFT JOIN lib_themes t USING(themeid)
WHERE b.activated='0'";
$result = db_query($sql) or die(db_error(LINK));
output("<table cellpadding=2 cellspacing=1 bgcolor='#999999' align='center'><tr class='trhead'><td>Option</td><td>ID</td><td>Thema</td><td>Titel</td><td>Autor</td></tr>",true);
$bgclass = '';
if (db_num_rows($result)==0) {
output("<tr class='trdark'><td colspan=5>`AE`}s`B gibt keine Bücher, die aktiviert werden müßt`}e`An.</td></tr>",true);
}
else while ($row = db_fetch_assoc($result)) {
$bgclass = ($bgclass=='trdark'?'trlight':'trdark');
output("<tr class='$bgclass'><td><a href=\"sulib.php?op=new_books&subop=activate&id=".$row['bookid']."\">`AA`}k`Btivier`}e`An</a>|
<a href=\"sulib.php?op=del_post&id=".$row['bookid']."\">`AL`}ö`Bsch`}e`An</a></td>",true);
output("<td>".$row['bookid']."</td><td>",true);
output($row['theme']);
output("`0</td><td><a href=\"sulib.php?op=edit_post&id=".$row['bookid']."\">",true);
output($row['title']);
output("`0</a></td><td>",true);
output($row['author']);
output("`0</td></tr>",true);
addnav("","sulib.php?op=new_books&subop=activate&id=".$row['bookid']); //activate
addnav("","sulib.php?op=del_post&id=".$row['bookid']); //delete
addnav("","sulib.php?op=edit_post&id=".$row['bookid']); //view
}
break;
case "del_post":
output("`AD`}i`Beses Buch ist für immer verschwunden - und das ist auch gut `}s`Ao.");
$sql = 'SELECT acctid, title, activated FROM lib_books WHERE bookid='.$_GET['id'];
$result = db_query($sql);
$row = db_fetch_assoc($result);
if ($row['activated']==1) {
systemmail($row['acctid'],'`AD`}e`Bin Buch wurde verbrannt!','Das Buch mit dem Titel "'.$row['title'].'", das in der Bibliothek stand, wurde im Kamin verbran`}n`At.');
}
else {
systemmail($row['acctid'],'`AD`}e`Bin Buch wurde abgelehnt!','Das Buch mit dem Titel "'.$row['title'].'", das du eingereicht hattest, wurde nicht in die Bibliothek aufgenomm`}e`An.');
}
$sql = "DELETE FROM lib_books WHERE bookid=".$_GET['id'];
db_query($sql);
addnav("`AW`}e`Bitere neue Büch`}e`Ar","sulib.php?op=new_books");
addnav("`AZ`}u`Br Themenübersic`}h`At","sulib.php");
break;
case "edit_post":
if ($_GET['subop']=="button") {
if (isset($_POST['save'])) {
output("`AB`}u`Bch bearbeit`}e`At.");
$sql="UPDATE lib_books set themeid='".$_POST['themeid']."',
title='".$_POST['title']."',
book='".$_POST['book']."'
WHERE bookid=".$_GET['id'];
db_query($sql);
}
elseif (isset($_POST['activate'])) {
redirect("sulib.php?op=new_books&subop=activate&id=".$_GET['id']);
}
elseif (isset($_POST['del'])) {
redirect("sulib.php?op=del_post&id=".$_GET['id']);
}
}
$sql = "SELECT themeid, title, book, activated, author FROM lib_books
WHERE bookid=".$_GET['id'];
$result = db_query($sql) or die(db_error(LINK));
$row = db_fetch_assoc($result);
output("<form action=\"sulib.php?op=edit_post&subop=button&id=".$_GET['id']."\" method='POST'>
`nThema: <select name='themeid'>",true);
$sql2 = "SELECT * FROM lib_themes ORDER BY themeid ASC";
$result2 = db_query($sql2) or die(db_error(LINK));
while ($row2 = db_fetch_assoc($result2)) {
output("<option value='".$row2['themeid']."' ".($row2['themeid']==$row['themeid']?" selected":"").">",true);
output($row2['theme']);
output("`0</option>",true);
}
output("</select>`n`AT`}i`Bt`}e`Al: <input type='text' name='title' value='",true);
output(stripslashes(htmlentities(str_replace('`','``',$row['title']),ENT_QUOTES)),true);
output("' size='50' maxlength='50'>`n",true);
output("Autor: ".$row['author']."`B hat in dem Buch geschrieb`}e`An:`n");
output("<textarea name='book' class='input' cols='60' rows='10'>".stripslashes(htmlentities(str_replace('`','``',$row['book']),ENT_QUOTES))."</textarea>`n",true);
output("<input type='submit' class='button' name='save' value='`AS`}p`Beiche`}r`An'>",true);
if ($row['activated']=='0') {
output("<input type='submit' class='button' name='activate' value='`AA`}k`Btivier`}e`An'>",true);
addnav("`AA`}k`Btivier`}e`An","sulib.php?op=new_books&subop=activate&id=".$_GET['id']);
}
output("<input type='submit' class='button' name='del' value='Löschen'></form>",true);
addnav("","sulib.php?op=edit_post&subop=button&id=".$_GET['id']);
output("`AD`}a`Bs Bu`}c`Ah:`n`n".str_replace("\n",'`n',$row['book']).'`0');
addnav("`AZ`}u`B neuen Büche`}r`An","sulib.php?op=new_books");
addnav("`AZ`}u`B Büchern ohne The`}m`Aa","sulib.php?op=no_theme_books");
addnav("`AZ`}u`Br Themenübersic`}h`At","sulib.php");
break;
case "no_theme_books":
addnav("`AZ`}u`Br Themenübersic`}h`At","sulib.php");
$sql = "SELECT bookid, title, author FROM lib_books
WHERE themeid='0'";
$result = db_query($sql) or die(db_error(LINK));
output("<table cellpadding=2 cellspacing=1 bgcolor='#999999' align='center'><tr class='trhead'><td>Option</td><td>ID</td><td>Titel</td><td>Autor</td></tr>",true);
$bgclass = '';
if (db_num_rows($result)==0) {
output("<tr class='trdark'><td colspan=4>`AE`}s`B gibt keine Bücher, die einem Thema zugeordnet werden müßt`}e`An.</td></tr>",true);
}
else while($row = db_fetch_assoc($result)) {
$bgclass = ($bgclass=='trdark'?'trlight':'trdark');
output("<tr class='$bgclass'><td><a href=\"sulib.php?op=del_post&id=".$row['bookid']."\">Löschen</a></td>",true);
output("<td>".$row['bookid']."</td><td><a href=\"sulib.php?op=edit_post&id=".$row['bookid']."\">",true);
output($row['title']);
output("`0</a></td><td>",true);
output($row['author']);
output("`0</td></tr>",true);
addnav("","sulib.php?op=del_post&id=".$row['bookid']); //delete
addnav("","sulib.php?op=edit_post&id=".$row['bookid']); //ansehen
}
break;
default:
if (!empty($_GET['saveorder'])) {
asort($_POST['order']);
$keys = array_keys($_POST['order']);
$i = 0;
foreach ($keys AS $key) {
$i++;
$sql = 'UPDATE lib_themes SET listorder="'.$i.'" WHERE themeid="'.$key.'"';
db_query($sql);
}
}
output("`AÜ`}b`Bersicht der Them`}e`An`n`n");
output('<form action="sulib.php?saveorder=1" method="post">',true);
addnav('','sulib.php?saveorder=1');
output("<table cellpadding=2 cellspacing=1 bgcolor='#999999' align='center'><tr class='trhead'><td>Option</td><td>ID</td><td>Thema</td><td>Anzahl Bücher</td><td>Sortierung</td></tr>",true);
$sql = "SELECT t.*, COUNT(b.bookid) AS anz FROM lib_themes t
LEFT JOIN lib_books b USING(themeid)
GROUP BY themeid
ORDER BY listorder ASC";
$result = db_query($sql) or die(db_error(LINK));
if (db_num_rows($result)==0) {
output("<tr class='trdark'><td colspan=5 align='center'>`i`AE`}s`B gibt keine Them`}e`An`i</td></tr>",true);
}
else {
$bgclass = '';
while ($row = db_fetch_assoc($result)) {
$bgclass = ($bgclass=='trdark'?'trlight':'trdark');
output("<tr class='$bgclass'><td><a href=\"sulib.php?op=edit_theme&themeid=".$row['themeid']."\">Edit</a> |
<a href=\"sulib.php?op=del_theme&themeid=".$row['themeid']."\">Löschen</a></td><td>".$row['themeid']."</td><td>
<a href=\"sulib.php?op=theme&themeid=".$row['themeid']."\">",true);
output($row['theme']);
output("`0</a></td><td>".$row['anz']."</td><td>",true);
$order_options = '';
for ($i=1; $i<=db_num_rows($result); $i++) $order_options .= '<option value="'.$i.'"'.($i==$row['listorder']?' selected="selected"':'').'>'.$i.'</option>';
output('<select name="order['.$row['themeid'].']">'.$order_options.'</select>',true);
output('</td></tr>',true);
addnav("","sulib.php?op=edit_theme&themeid=".$row['themeid']);
addnav("","sulib.php?op=del_theme&themeid=".$row['themeid']);
addnav("","sulib.php?op=theme&themeid=".$row['themeid']);
}
output('<tr><td colspan="5" style="text-align:right"><input type="submit" class="button" value="Sortierung speichern!" /></td></tr>',true);
}
output("</table>",true);
output('</form>',true);
addnav("`AN`}e`Bues Thema erstell`}e`An","sulib.php?op=new_theme");
addnav("`AN`}e`Bue Bücher anseh`}e`An","sulib.php?op=new_books");
addnav("`AB`}ü`Bcher ohne The`}m`Aa","sulib.php?op=no_theme_books");
}
page_footer();
?>