<? 
 // ==================================
 // ||                              ||
 // || Filename: index.php          ||
 // ||                              ||
 // || Description:                 ||
 // || ~~~~~~~~~~~~                 ||
 // || PHP file for library         ||
 // ||                              ||
 // || Lastmodif: 01/11/2001        ||
 // || Revision : 1                 ||
 // ||                              ||
 // || (co) FSZ - Thierry Huynh     ||
 // ||                              ||
 // ==================================

// ----------------------------------------------------------------------------
function postinit($arg)
{
 global ${"$arg"};
 $_POST["$arg"] = (isset($_POST["$arg"])?$_POST["$arg"]:"");
 ${"$arg"}=$_POST["$arg"];
}

// ----------------------------------------------------------------------------
function requestinit($arg)
{
 global ${"$arg"};
 $_REQUEST["$arg"] = (isset($_REQUEST["$arg"])?$_REQUEST["$arg"]:"");
 ${"$arg"}=$_REQUEST["$arg"];
}

// ----------------------------------------------------------------------------
function getinit($arg)
{
 global ${"$arg"};
 $_GET["$arg"] = (isset($_GET["$arg"])?$_GET["$arg"]:"");
 ${"$arg"}=$_GET["$arg"];
}

// ----------------------------------------------------------------------------
function sessioninit($session)
{
 global ${"$session"};
 $_SESSION["$session"] = (isset($_SESSION["$session"])?$_SESSION["$session"]:"");
 ${"$session"}=$_SESSION["$session"];
}

session_name("fengshuizone");
session_start();
sessioninit("flag_js");

requestinit("dir");
requestinit("display");
requestinit("comment");
requestinit("dsc");

postinit("user");
postinit("pass");
postinit("startlogin");
postinit("MAX_FILE_SIZE");
postinit("picuploadname");
postinit("picupload");
postinit("createdirname");
postinit("dircreate");
postinit("addingcomment");
postinit("picname");
postinit("dirlevel");
postinit("dirlevelchange");
postinit("updpic");
postinit("lev");
postinit("isbn");
postinit("author");
postinit("editor");
postinit("price");
postinit("pages");

getinit("id");
getinit("login");
getinit("create");
getinit("upload");
getinit("genall");
getinit("logout");
getinit("addcomment");
getinit("rating");
getinit("displaypic");
getinit("preview");
getinit("startpic");
getinit("lang");
getinit("lastcomments");
getinit("topratings");

 if (!$lang || ("$lang"!="fr"&&"$lang"!="us")) $lang = "fr";

 // ####################
 // ## INIT VARIABLES ##
 // ####################
 $HTTPPATH="http://".$_SERVER["HTTP_HOST"];
 $SYSTPATH=$_SERVER["DOCUMENT_ROOT"];
 $cptfile="fengshui";
 
 // FOR INTERNAL TEST
 // *****************
 if (($_SERVER["REMOTE_ADDR"]=="127.0.0.1")||ereg("^10.33.",$_SERVER["REMOTE_ADDR"])||ereg("^192.168.0.",$_SERVER["REMOTE_ADDR"]))
 {
  $websitearray=explode("/",$_SERVER["PHP_SELF"]);
  $website=$websitearray[1];
  for($i=2;$i<count($websitearray)-2;$i++) $website=$website."/".$websitearray[$i];
  $HTTPPATH=$HTTPPATH."/".$website; 
  $SYSTPATH=$SYSTPATH."/".$website; 
 }

 // Database variables
 // ******************
 $sTable	= "librarydescr";
 $sTableUsers	= "libraryusers";
 $sTableComments= "librarycomments";
 $sTableRatings = "libraryratings"; 

 // Library variables
 // *****************
 // root_dir: path to books
 $root_dir=$SYSTPATH.'/library/books/';
 
 // nb_pic_max: maximum number of pictures to display on one page
 $nb_pic_max=2; 
 
 // Thumbnails/Low-res pictures generation related variables
 // ********************************************************
 
 // thumb_generator: must be either "gd" (for GD), "convert" (if you have 
 // ImageMagick installed) of "manual" if you want to make thumbnails and 
 // low res images yourself
 $thumb_generator="gd";
 
 // thumb_res: size (in pixels) of the generated thumbnails
 $thumb_res="100x100";
 // thumb_quality: generated thumbnails quality (from 10 to 100)
 $thumb_quality="60";
 
 // lr_limit: size in bytes where we generate a low res mode picture
 $lr_limit=1024*100;
 // lr_res: size (in pixels) of the generated low res pictures
 $lr_res="800x600";
 // lr_quality: low res generated pictures quality (from10 to 100)
 $lr_quality="80";
 
 // Behaviour related variables
 // ***************************
 
 // use_sem: Set this to 1 if you have PHP4 compiled with '--enable-sysvsem'.
 //          Semaphores are used to allow phpGraphy to launch one convert at a time
 //          so it won't eat all your CPU when it'll generate all thumbnails/low-res
 //          pictures.
 $use_sem = 0;
 
 // use_rating: Use rating system for pictures
 $use_rating = 1;
 
 // nb_top_rating: # of pictures in the top rated pictures page
 $nb_top_rating = 10;

// ###################
// ## INCLUDE FILES ##
// ###################
 require("$SYSTPATH/conf/cfg.inc.php");
 include("$SYSTPATH/colorcode.php");
 include("$SYSTPATH/weblib.php");
 include("$SYSTPATH/inc/$lang/varwebsite.php");
 include "$SYSTPATH/library/inc/$lang/varlibrary.php";
 $lvc_include_dir = "$SYSTPATH/stat/include/";
 include($lvc_include_dir.'new-visitor.inc.php');

// GET COUNTER VALUE
// *****************
 getcounter($cptfile);

 $nConnection = mysql_connect($cfgHost, $cfgUser, $cfgPass);
 
 if($nConnection<1)
 {
   print "Database unavailable !<br>";
   exit;
 }


if($thumb_generator=="convert")
{
  @exec("which convert", $my_convert_path);
  if($my_convert_path[0]=="") die("install convert (see manual) or use 'GD' or 'manual' as thumb generator");
}

// /----------------------\
// | Function definitions |
// \----------------------/

function set_cookie_val($val)
{
  global $cookiesite;
  setcookie("LoginValue",$val,time()+(3600*24*365*3),"/");
}

function get_comment($nom)
{
  global $cfgBase,$nConnection,$sTable;
  $cmd="select * from $sTable where name='".addslashes($nom)."'";
  $res=mysql_db_query($cfgBase,$cmd,$nConnection);
  $row=mysql_fetch_array($res);
  return $row["descr"];
}

function get_isbn($nom)
{
  global $cfgBase,$nConnection,$sTable;
  $cmd="select * from $sTable where name='".addslashes($nom)."'";
  $res=mysql_db_query($cfgBase,$cmd,$nConnection);
  $row=mysql_fetch_array($res);
  return $row["isbn"];
}

function get_author($nom)
{
  global $cfgBase,$nConnection,$sTable;
  $cmd="select * from $sTable where name='".addslashes($nom)."'";
  $res=mysql_db_query($cfgBase,$cmd,$nConnection);
  $row=mysql_fetch_array($res);
  return $row["author"];
}

function get_editor($nom)
{
  global $cfgBase,$nConnection,$sTable;
  $cmd="select * from $sTable where name='".addslashes($nom)."'";
  $res=mysql_db_query($cfgBase,$cmd,$nConnection);
  $row=mysql_fetch_array($res);
  return $row["editor"];
}

function get_price($nom)
{
  global $cfgBase,$nConnection,$sTable;
  $cmd="select * from $sTable where name='".addslashes($nom)."'";
  $res=mysql_db_query($cfgBase,$cmd,$nConnection);
  $row=mysql_fetch_array($res);
  return $row["price"];
}

function get_pages($nom)
{
  global $cfgBase,$nConnection,$sTable;
  $cmd="select * from $sTable where name='".addslashes($nom)."'";
  $res=mysql_db_query($cfgBase,$cmd,$nConnection);
  $row=mysql_fetch_array($res);
  return $row["pages"];
}


function get_rating($nom)
{
  global $cfgBase,$nConnection,$sTableRatings;
  $cmd="select avg(rating), count(*) from $sTableRatings where pic_name='".addslashes($nom)."'";
  $res=mysql_db_query($cfgBase,$cmd,$nConnection);
  $row=mysql_fetch_array($res);
  return ($row[1]?$row[0]:false);
}

function already_rated($nom)
{
  global $cfgBase,$nConnection,$sTableRatings;
  $cmd="select * from $sTableRatings where pic_name='".addslashes($nom)."' and ip='".getenv("REMOTE_ADDR")."'";
  $res=mysql_db_query($cfgBase,$cmd,$nConnection);
  $row=mysql_fetch_array($res);
  return($row);
}

function get_level_db($nom)
{
  global $cfgBase,$nConnection,$sTable;
  $cmd="select * from $sTable where name='".addslashes($nom)."'";
  $res=mysql_db_query($cfgBase,$cmd,$nConnection);
  $row=mysql_fetch_array($res);
  return (int)$row["seclevel"];
}

function get_level($pic) {
  if(!strstr($pic,"/")) return (int)get_level_db($pic);
  $l=get_level_db($pic);
  if($l!=0) return (int)$l;
  $l2=get_level_db($pic."/");
  if($l2!=0) return (int)$l2;
  return (int)(get_level(substr($pic,0,strrpos($pic,"/"))));
}

function reformat($s)
{
  if($s) $s=StripSlashes($s);
  if(!strstr($s,"..")) { } else $s=""; // ANTI HACK :)
  return($s);
}

// sound/video/text functions
function get_movie_type($doc)
{
  if (eregi("mov$", $doc)) {
    return "video/quicktime";
  }
  if (eregi("avi$", $doc)) {
    return "video/x-msvideo";
  }
  else if (eregi("mpe?g$", $doc)) {
    return "video/mpeg";
  }
  return 0;
}

function get_sound_type($doc)
{
  if (eregi("wav$", $doc)) {
    return "audio/x-wav";
  }
  else if (eregi("mp3$", $doc)) {
    return "audio/mp3";
  }
  return 0;
}

function get_text_type($doc)
{
  if (eregi("txt$", $doc)) {
    return "text/plain";
  }
  return 0;
}

// image convertion functions

function wait_convert_proc()
{
  global $sem,$use_sem;

  register_shutdown_function("end_convert_proc");
  if($use_sem) {
    $sem=sem_get(31337);
    sem_acquire($sem);
  }
}

function end_convert_proc()
{
  global $sem,$use_sem;
  if($use_sem) {
    sem_release($sem);
  }
  register_shutdown_function("");
}

function convert_image($sourcepic,$destpic,$res,$quality)
{
  global $my_convert_path,$thumb_generator;

  if (get_sound_type($sourcepic)) {
    copy("icons/sound.gif", $destpic);
    return;
  }
  else if (get_movie_type($sourcepic)) {
    copy("icons/movie.gif", $destpic);
    return;
  } else if (get_text_type($sourcepic)) {
    copy("icons/text.gif", $destpic);
    return;
  }

  wait_convert_proc();

  if($thumb_generator=="convert") {
    @exec($my_convert_path[0]." -geometry ".$res." -quality ".$quality." \"".$sourcepic."\" \"".$destpic."\"");
  } else if($thumb_generator=="gd") {
    if(eregi("\.(jpg|jpeg)$",$sourcepic))
      $im=imagecreatefromjpeg($sourcepic);
    else if (eregi("\.png$",$fn))
      $im=imagecreatefrompng($createfn);
    if ($im != "") {
      $dims=explode("x",$res);
      $newh=$dims[1];
      $neww=$newh/imagesy($im) * imagesx($im);
      if ($neww > imagesx($im)) {
        $neww=imagesx($im);
        $newh=imagesy($im);
      }
      if ($neww > $dims[0])
      {
        $neww=$dims[0];
        $newh=$neww/imagesx($im) * imagesy($im);
      }
      $im2=ImageCreate($neww,$newh);
      ImageCopyResized($im2,$im,0,0,0,0,$neww,$newh,imagesx($im),imagesy($im));
      if (eregi("\.(jpg|jpeg)$",$sourcepic)) imagejpeg($im2,$destpic,$quality);
      else if (eregi("\.png$",$fn)) imagepng($im2,$destpic);
      ImageDestroy($im);
      ImageDestroy($im2);
     } else {
      debug_image("Error loading file!");
     }
  }

  end_convert_proc();
}

//show debug info in image format
function debug_image($str){
    $im = ImageCreate (150, 50); /* Create a blank image */
    $bgc = ImageColorAllocate ($im, 255, 255, 255);
    $tc  = ImageColorAllocate ($im, 0, 0, 0);
    ImageFilledRectangle ($im, 0, 0, 150, 30, $bgc);
    /* Output an errmsg */
    ImageString ($im, 1, 5, 5, $str, $tc);
    ImageJPEG($im);
}

// comments functions

function get_nb_comments($id)
{
  global $cfgBase,$nConnection,$sTableComments;
  $cmd="select * from ".$sTableComments." where pic_name='".addslashes($id)."'";
  $res=mysql_db_query($cfgBase,$cmd,$nConnection);
  return mysql_num_rows($res);
}

function display_comments($id)
{
  global $cfgBase,$nConnection,$sTableComments,$admin;
  global $txt_comments,$txt_add_comment,$txt_comment_from,$txt_comment_on;
?>
  <table width="60%">
  <tr><td align=left>
<? if(get_nb_comments($id)>0) { ?> 
  <u><? echo $txt_comments ?></u>:
<? } ?>
  </td><td align=right>
  <a href="" onClick='enterWindow=window.open("?id=<? echo rawurlencode($id) ?>&addcomment=1","commentadd","width=700,height=380,top=250,left=500"); return false'><? echo $txt_add_comment ?></a>
  </td></tr>
  </table>
  <br>
  <table width="60%">
<?
  $cmd="select * from ".$sTableComments." where pic_name='".addslashes($id)."'";
  $res=mysql_db_query($cfgBase,$cmd,$nConnection);
  while($row=mysql_fetch_array($res))
  {
     print "<tr><td align='left' class='smallgreen'>";
     echo $txt_comment_from."<b>".htmlentities($row["user"])."</b>".$txt_comment_on.$row["datetime"];
     if($admin)
     {
       print " | <a href=\"?display=".rawurlencode($id)."&delcom=".$row["id"]."\">Delete</a>";
     }
     print "</td><td align='left' class='smallred'>";
     echo nl2br(htmlentities($row["comment"]));
     print "</td></tr>";
  }
  print "</table>";
}

function readfolder($dir)
{
 $dossier=opendir($dir); 
 $retour = array(); 

 while ($fichier = readdir($dossier))
 { 
  $l = array('.', '..','.thumbs'); 
  if (!in_array( $fichier, $l))
  { 
    if (is_dir($dir."/".$fichier))
    { 
     $retour[$fichier] = readfolder("$dir/$fichier"); 
    }
    else
    { 
     if (eregi(".jpg$" ,$fichier) ||
         eregi(".jpeg$",$fichier) ||
         eregi(".gif$" ,$fichier) ||
         eregi(".png$" ,$fichier))
     {
       $retour[$fichier] = $fichier;
     } 
    }
  } 
 } 
 return $retour; 
}

function readarray($array,$i,$path)
{
 global $type_ar,$find_ar,$counter_ar;
 $display="";

 while ( list($type_ar[$i],$key[$i]) = each($array) )
 { 
  if (!is_array($key[$i]))
  {
   for ($j=0;$j<=$i;$j++)
   {
    if (!$j)	$display=$path.$type_ar[$j];
    else	$display=$display."/".$type_ar[$j];
   }
   $find_ar[$counter_ar]=$display;
   $counter_ar++;
  }
  else
  {
   readarray($key[$i],$i+1,$path);
  }
 } 
}

/*==========================================================*/

// logout ?

if($logout) {
  set_cookie_val("");
  header("Location: ".$HTTPPATH);
  exit;
}

// logging in ?

unset($user_row);
global $user_row;
if($startlogin) {
  $cmd="select * from ".$sTableUsers." where login='$user' and pass='$pass'";
  $res = mysql_db_query($cfgBase,$cmd,$nConnection);
  if(!$res || mysql_num_rows($res)==0 ) $error_login=1;
  else {
    $logged=1;
    $user_row=mysql_fetch_array($res);
    set_cookie_val($user_row["cookieval"]);
  }
} else if($_COOKIE["LoginValue"]) { // login cookie present ?
  $cmd="select * from ".$sTableUsers." where cookieval='".$_COOKIE["LoginValue"]."'";
  $res = mysql_db_query($cfgBase,$cmd,$nConnection);
  if($res && mysql_num_rows($res)>0 ) {
    $logged=1;
    $user_row=mysql_fetch_array($res);
  }
}

$admin=($user_row["seclevel"]==999);


// pic rating update ?

if ($display&&$rating) {
	if (!already_rated($display) && ($rating>0) && ($rating<=10)) {
		$cmd="insert into $sTableRatings (datetime, pic_name, ip, rating) values (now(), '$display', '".getenv("REMOTE_ADDR")."', $rating)";
		mysql_db_query($cfgBase,$cmd,$nConnection);
	}
}

// pic comment update ?

if($updpic=="1"&&$admin) {
  $cmd="select * from ".$sTable." where name='$display'";
  $res = mysql_db_query($cfgBase,$cmd,$nConnection);
  if($res && mysql_num_rows($res)>0 )
  {
   $cmd="UPDATE $sTable SET descr='$dsc',isbn='$isbn',author='$author',editor='$editor',price='$price',pages='$pages',seclevel='$lev' WHERE name='$display'";
   mysql_db_query($cfgBase,$cmd,$nConnection);
  }
  else
  {
   $cmd="INSERT INTO $sTable (name,descr,seclevel,isbn,author,editor,price,pages) VALUES ('$display','$dsc','$lev','$isbn','$author','$editor','$price','$pages')";
   mysql_db_query($cfgBase,$cmd,$nConnection);
  }
}

// dir level update ?

if($dirlevelchange&&$admin) {
  $cmd="select * from ".$sTable." where name='$dir'";
  $res = mysql_db_query($cfgBase,$cmd,$nConnection);
  if($res && mysql_num_rows($res)>0 )
  {
   $cmd="UPDATE $sTable SET seclevel='$dirlevel' WHERE name='$dir'";
   mysql_db_query($cfgBase,$cmd,$nConnection);
  }
  else
  {
   $cmd="INSERT INTO $sTable (name,descr,seclevel) VALUES ('$dir','','$dirlevel')";
   mysql_db_query($cfgBase,$cmd,$nConnection);
  }
}

if($dir) $dir=reformat($dir);
if($display) $display=reformat($display);
if($displaypic) $displaypic=reformat($displaypic);
if($preview) $preview=reformat($preview);

if($display) $dir=dirname($display);

if(substr($root_dir,-1)!='/') $root_dir.='/';
if($dir && substr($dir,-1)!='/') $dir.='/';

// dir creation ?

if($dircreate&&$admin) {
  mkdir($root_dir.$dir.$createdirname,0755);
}

// file uploaded ?

if($admin&&$picupload&&$picuploadname!="none") {
  Exec("cp -f \"$picuploadname\" \"".$root_dir.$dir.$picuploadname_name."\"");
  chmod("$picuploadname_name",0755);
}

// adding comment ?

if($addingcomment && (trim($comment) || trim($user))) {
  $picname=reformat($picname);
  $cmd="insert into ".$sTableComments." values(0,'".addslashes($picname)."','$comment','".date("Y-m-d H:i:s")."','$user','$REMOTE_ADDR')";
  mysql_db_query($cfgBase,$cmd,$nConnection);
 ?> <html><script language="javascript">window.opener.location="?display=<? echo rawurlencode($picname) ?>";window.close();</script></html> <? 
  exit;
}

// deleting comment ?

if($delcom&&$admin) {
  $cmd="delete from ".$sTableComments." where id=$delcom";
  mysql_db_query($cfgBase,$cmd,$nConnection);
}

// picture displaying ?

if($displaypic && get_level($displaypic)<=(int)$user_row["seclevel"]) {
  header("Content-type: image/jpeg");

  if(filesize($root_dir.$displaypic)>=$lr_limit && !$non_lr) {
    // switch to lr_mode
    $lrdir=$root_dir.dirname($displaypic)."/.thumbs";
    $lrfile=$lrdir."/lr_".basename($displaypic);
    if(!file_exists($lrfile)) {
      if(!is_dir($lrdir)) mkdir($lrdir,0755);
      convert_image($root_dir.$displaypic,$lrfile,$lr_res,$lr_quality);
    }
    readfile($lrfile);
  } else readfile($root_dir.$displaypic);
  exit;
}

if($preview) {
  header("Content-type: image/jpeg"); 
  $prdir=$root_dir.dirname($preview)."/.thumbs";
  $prfile=$prdir."/thumb_".basename($preview);
  if(!file_exists($prfile)) {
    if(!is_dir($prdir)) mkdir($prdir,0755);
    convert_image($root_dir.$preview,$prfile,$thumb_res,$thumb_quality);
  }
  readfile($prfile);
  exit;
}

// generate all thumbnails/low res

if($genall&&$admin) { 
  print "Generating all missing thumbnails/low res pictures: (be patient)<br><br>";
  flush();

  $gen_lr=0; $gen_th=0;
  //exec('find '.$root_dir.' -type f -print | egrep -i "\.(jpg|jpeg|gif|png)$" | grep -v ".thumbs/"',$find_ar);
  $counter_ar=0;
  readarray(readfolder($root_dir),0,$root_dir);
  for($i=0;$find_ar[$i];$i++) {
    $pic=substr($find_ar[$i],strlen($root_dir));
    $lrdir=$root_dir.dirname($pic)."/.thumbs";
    if(!is_dir($lrdir)) mkdir($lrdir,0755);

    // low res check
    if(filesize($root_dir.$pic)>=$lr_limit) {
      $lrfile=$lrdir."/lr_".basename($pic);
      if(!file_exists($lrfile)) {
        print "Generating low res picture for $pic<br>";
        flush();
        convert_image($root_dir.$pic,$lrfile,$lr_res,$lr_quality);
        $gen_lr++;
      }
    }

    // thumbnail check
    $prfile=$lrdir."/thumb_".basename($pic);
    if(!file_exists($prfile)) {
      print "Generating thumbnail picture for $pic<br>";
      flush();
      convert_image($root_dir.$pic,$prfile,$thumb_res,$thumb_quality);
      $gen_th++;
    }
  }

  print "<br>";
  print "Generated <b>$gen_lr</b> low res pictures and <b>$gen_th</b> thumbnails.<br>";
  print "Your library has <b>".sizeof($find_ar)."</b> pictures.<br>";

  exit;
}

// pic delete
if($updpic=="del"&&$admin) {
  $cmd="delete from $sTable where name='$display'";
  $db=mysql_db_query($cfgBase,$cmd,$nConnection);
  $cmd="delete from $sTableComments where pic_name='$display'";
  $db=mysql_db_query($cfgBase,$cmd,$nConnection);
  $filename=$root_dir.$display;
  $thumbname=$root_dir.dirname($display)."/.thumbs/thumb_".basename($display);
  $lrname=$root_dir.dirname($display)."/.thumbs/lr_".basename($display);
  if (file_exists($filename))unlink($filename);
  if (file_exists($thumbname))unlink($thumbname);
  if (file_exists($lrname))unlink($lrname);
  //jump back to the directory after deleting the pic
  $dir=dirname($display);
  header("Location: ./?dir=$dir");
  exit;
}

// test if display is video or sound
if ($display) {
  if (($type = get_movie_type($display)) || ($type = get_sound_type($display)) || ($type = get_text_type($display))) {
    header("Content-type: ".$type);
    header("Content-Disposition: inline; filename=".basename($display));
    readfile($root_dir.$display);
    return;
  }
}

?>

<?
 require("$SYSTPATH/header.php");
 br();
?>

<table width="100%"><tr align="center"><td align="center">

<? // Login form
if($login)
{
?>

<form method=POST action="index.php">
<? echo $txt_login_form_login ?> <input name="user" size=20><br>
<? echo $txt_login_form_pass ?> <input type="password" name="pass" size=20> 
<input type="hidden" name="startlogin" value="1">
<input type="hidden" name="dir" value="<? echo $dir ?>">
<input type="submit" value="Login">
</form> 
<?

  print "</td></tr></table>";
  require("$SYSTPATH/footer.php");
  exit;
}
else if($create&&$admin)
{  // Create dir form
print "Current directory : ".$dir."<br>";
?>
<form method=POST action="index.php">
Directory to create: <input name="createdirname" size=50><br>
<input type="hidden" name="dircreate" value="1">
<input type="hidden" name="dir" value="<? echo $dir ?>">
<input type="submit" value="Create">
</form> 
<?
  print "</td></tr></table>";
  require("$SYSTPATH/footer.php");
  exit;
}
else if($upload&&$admin)
{  // Create dir form
print "Current directory : ".$dir."<br>";
?>
<form method=POST action="index.php" ENCTYPE="multipart/form-data">
<INPUT TYPE="hidden" name="MAX_FILE_SIZE" VALUE="1024000">
File to upload: <INPUT TYPE=FILE NAME="picuploadname" SIZE=24 MAXLENGTH=80>
<INPUT TYPE="SUBMIT" VALUE="Upload">
<input type="hidden" name="picupload" value="1">
<input type="hidden" name="dir" value="<? echo $dir ?>">
</form> 
<?
  print "</td></tr></table>";
  require("$SYSTPATH/footer.php");
  exit;
}
else if($addcomment)
{ // (little "add comment" popup window)
  $id=reformat($id);
  ?>
    <form name="blah" method=POST>
    <? echo $txt_comment_form_name ?> <font face="Courier" size=1><input type=text name=user size=30></font><br>
    <? echo $txt_comment_form_comment ?> <br><font face="Courier" size=1><textarea name=comment cols=40 rows=3></textarea></font><br>
    <br>
    <input type=submit value="<? echo $txt_add_comment ?>">
    <input type=hidden name=addingcomment value="1">
    <input type=hidden name=picname value="<? echo $id ?>">
    </form>
    <script language="javascript">document.blah.user.focus();</script>
  <?
  print "</td></tr></table>";
  require("$SYSTPATH/footer.php");
  exit;
}
else if($lastcomments)
{ // display last added comments
  prstr("Vos derniers commentaires:","smallred");
  br();
  print "<table width='60%'  border='0' cellspacing='0' cellpadding='0'>\n";
  $cmd="select * from ".$sTableComments." order by datetime desc";
  $res=mysql_db_query($cfgBase,$cmd,$nConnection);
  $i=0;
  while(($row=mysql_fetch_array($res)) && $i<20)
  {
    if(get_level($row["pic_name"])>(int)$user_row["seclevel"]) continue;
    print "<tr><td align='left'>\n";
    print "<span class=\"small\">";
    echo $row["datetime"]." by <b>".htmlentities($row["user"])."</b> : </span>";
    print "</td><td align='left'>\n";
    $comment=get_comment($row["pic_name"]);
    if(trim($comment)=="") $comment=$row["pic_name"];
    print "<a href=\"?display=".rawurlencode($row["pic_name"])."\">".$comment."</a>";
    print "</td></tr>";
    $i++;
  }
  print "</table>";
  print "<br>";
  print "<span class=\"small\"><a href=\"?dir=\">Retour</a></span><br>";
  print "<br>";
  print "</td></tr></table>";
  require("$SYSTPATH/footer.php");
  exit;
}
else if($topratings)
{ // display top ratings
  prstr("Le Hit parade des ".$nb_top_rating." premiers livres:","smallred");
  br();
  print "<table width='40%'  border='0' cellspacing='0' cellpadding='0'>\n";
  $cmd="select *,avg(rating) as rat from ".$sTableRatings." group by pic_name order by rat desc";
  $res=mysql_db_query($cfgBase,$cmd,$nConnection);
  $i=0;
  while(($row=mysql_fetch_array($res)) && $i<$nb_top_rating)
  {
    if(get_level($row["pic_name"])>(int)$user_row["seclevel"]) continue;
    print "<tr><td align='left'><span class=\"small\">".($i+1).": </span></td>";
    $comment=get_comment($row["pic_name"]);
    if(trim($comment)=="") $comment=$row["pic_name"];
    print "<td align='left'><a href=\"?display=".rawurlencode($row["pic_name"])."\">".$comment."</a></td>";
    print "<td align='right'><span class=\"small\">(<b>".sprintf("%.1f", $row["rat"])."</b>)</span>";
    print "</td></tr>";
    $i++;
  }
  print "</table>";
  print "<br>";
  print "<span class=\"small\"><a href=\"?dir=\">Retour</a></span><br>";
  print "<br>";
  print "</td></tr></table>";
  require("$SYSTPATH/footer.php");
  exit;
}

?>

<?
  if(get_level($dir)>(int)$user_row["seclevel"]) exit; // antihack :)

  // scan dir

$nb_dirs=0; $nb_files=0;
$dirs[0]=""; $files[0]="";
$dh=dir($root_dir.$dir);
//$dh=dir($root_dir.$dir);
while ($file=$dh->read()) {
  if(substr($file,0,1)==".") continue;
//  if(substr($file,-3)=="_lr") continue;
//  if(substr($file,-6)=="_thumb") continue;
  if(substr($file,-8)=="_comment") continue;
  if(is_dir($root_dir.$dir.$file)) {
      // directory
    if(get_level($dir.$file."/")<=(int)$user_row["seclevel"])
      $dirs[$nb_dirs++]=$file;
  } else {
      // file
    if(get_level($dir.$file)<=(int)$user_row["seclevel"])
      $files[$nb_files++]=$file;
  }
}
$dh->close();
sort($dirs);

if (is_file($root_dir.$dir."/.desc"))
  rsort($files);
else
  sort($files);

?>

<? 
  // display current dir

if(!$dir) title("$txt_root_dir");
else print "<a href=\"?dir=\">".$txt_root_dir."</a>/";

$alldirs=explode("/",$dir);
$alldirtmp="";
for($i=0;$alldirs[$i];$i++)
{
  $alldirtmp.=$alldirs[$i]."/";
  if($alldirs[$i+1] || $display) print "<a href=\"?dir=".rawurlencode($alldirtmp)."\">";
  print "&nbsp;".$alldirs[$i]."&nbsp;";
  if($alldirs[$i+1] || $display) print "</a>/";
}
if ($dir) print "<br>";
?>
(
<? if(!$logged) { ?>
<a href="?dir=<? echo rawurlencode($dir) ?>&login=1"><? echo $txt_login ?></a>
<? } else {
  echo $user_row["login"]." - "; 
  if($admin) {
    print "<a href=\"?dir=".rawurlencode($dir)."&create=1\">create dir</a> - <a href=\"?dir=".rawurlencode($dir)."&upload=1\">upload</a> - ";
    print "<a href=\"?genall=1\">gen all pics</a> - ";
  } ?>
<a href="?logout=1">logout</a>
<? } ?>

)<br>
<?
  // display dirs
for($i=0;$i<$nb_dirs;$i++)
{
    print "<a href=\"?dir=".rawurlencode($dir.$dirs[$i])."\">".$dirs[$i]."</a>\n";
    if ($i<$nb_dirs-1) print "&nbsp;-&nbsp;";
}
?>

<?
if($admin&&$dir&&!$display) {
  print "<form method=POST>Directory security level: <input name=\"dirlevel\" value=\"".get_level($dir)."\" size=4>";
  print "<input type=hidden name=dir value=\"".$dir."\">";
  print "<input type=hidden name=dirlevelchange value=\"1\">";
  print " <input type=submit value=\"Change\"></form>";
}
?>

<br>

<?

// display .welcome message if it exists

if(is_file($root_dir.$dir.".welcome".$lang) && !$display) {
  print "<font color=".$welcomecolor."><pre>";

  $welcomefile=$root_dir.$dir.".welcome".$lang;
  if (file_exists("$welcomefile"))
  {
   $file = fopen("$welcomefile", 'r');
   $line = fgets($file, 4096);     // get first line

   while (! feof($file))
   {
    print "$line";
    // Get next line
    $line = fgets($file, 4096);
   } // end of main while() loop

   fclose($file);
  }

  print "</pre></font>";
}

?>

<? if(!$display) { ?>
</td></tr><tr><td align='center'>
<table border=0 width="60%">
<?
  // display the directory content

function echo_pic($i)
{
  global $dir,$files,$cfgBase,$nConnection;

  $asin=get_isbn($dir.$files[$i]);

  print "<td width='30%' align=center valign=top><a href=\"?display=".rawurlencode($dir.$files[$i])."\"><img src=\"?preview=".rawurlencode($dir.$files[$i])."\" border=0></a></td>\n";

  print "<td width='30%' valign=top class='smallgreen'>";
  print "ISBN: $asin<BR>\n";
  print "Auteur: ".get_author($dir.$files[$i])."<BR>\n";
  print "Editeur: ".get_editor($dir.$files[$i])."<BR>\n";
  print "Prix: ".get_price($dir.$files[$i])."F (".get_pages($dir.$files[$i])." pages)<BR>\n";
  print "</td>\n";


  $comment=get_comment($dir.$files[$i]);
  if($comment=="") $comment=$files[$i];
  print "<td width='40%' align=right valign=top><a href=\"?display=".rawurlencode($dir.$files[$i])."\">".nl2br(htmlentities($comment))."</a>\n";
  print "<br><A HREF=\"http://www.amazon.fr/exec/obidos/ASIN/".eregi_replace('-','',$asin)."/fengshuizone-21\">Achat en ligne avec amazon.fr\n";
  if(($nbc=get_nb_comments($dir.$files[$i]))>0)
  {
    print "<br>".$nbc." commentaire(s)\n";
  }
  if(($rtg=get_rating($dir.$files[$i]))!==false)
  {
    print "<br>Classement: <b>".sprintf("%.1f", $rtg)."</b>\n";
  }
  print "</td>\n";

}

if(!$startpic) $startpic=0;

for ($i=$startpic;$i<$nb_files && $i<($startpic+$nb_pic_max);$i++)
{
 print "<tr>";
 echo_pic($i);
 print "</tr>";
}

$startpic2=$i;
for (;$i<$nb_files && $i<($startpic2+$nb_pic_max);$i++)
{
 print "<tr>";
 echo_pic($i);
 print "</tr>";
}

print "</table>\n";

print "<center>";
if($startpic!=0) {
  $a=$startpic-($nb_pic_max*2);
  if($a<0) $a=0;
  print "<a href=\"?dir=".rawurlencode($dir)."&startpic=".$a."\">".$txt_previous_page."</a>\n";
}

if($i!=$nb_files) {
  print "<a href=\"?dir=".rawurlencode($dir)."&startpic=".$i."\">".$txt_next_page."</a>\n";
}
print "</center>\n";

?>

<? } else { 

   // display the picture

for($i=0;$i<$nb_files && basename($display)!=$files[$i];$i++);

print "<center>";
$comment=get_comment($display);
if($comment!="") prstr(nl2br(htmlentities($comment)),"greenbold"); else prstr(basename($display),"greenbold");
if($i!=0) print "<a href=\"?display=".rawurlencode($dir.$files[$i-1])."\">".$txt_previous_image."</a> ";
print " (".($i+1)."/".$nb_files.") ";
if(filesize($root_dir.$display)>=$lr_limit && !$non_lr) print " <a href=\"?display=".rawurlencode($display)."&non_lr=1\">".$txt_hires_image."</a> ";
if(filesize($root_dir.$display)>=$lr_limit && $non_lr) print " <a href=\"?display=".rawurlencode($display)."\">".$txt_lores_image."</a> ";

if($files[$i+1]) print "<a href=\"?display=".rawurlencode($dir.$files[$i+1])."\">".$txt_next_image."</a>";

print "<br>";

if ($use_rating) {
	$pic_rating=get_rating($display);
	if ($pic_rating===false) echo $txt_no_rating;
	else prstr($txt_pic_rating."<b>".sprintf("%.1f", $pic_rating)."</b>","smallgreen");
	print "<br>";
	if (!already_rated($display)) {
		$rate_url="?display=".rawurlencode($display);
		if (strpos($rate_url, "?")!==false) $rate_url.="&rating="; else $rate_url.="?rating=";
		print "<select onChange='document.location.href=\"".$rate_url."\" + this.options[this.selectedIndex].value'>";
		print "<option value='null'>".$txt_option_rating;
		for ($a=1;$a<=10;$a++) print "<option value='$a'>$a</option>";
		print "</select>";
	}
}

if($admin) { ?>
<form name="updateform">

<input type=hidden name=display value="<? echo $display ?>">
<input type=hidden name=updpic value="1">

<table cellspacing=1>

 <tr><td align=left><?echo $txt_description ?></td>
 <td align=right><textarea name="dsc" cols=60 rows=1><? echo get_comment($display) ?></textarea></td></tr>

 <tr><td align=left><?echo $txt_sec_lev?></td><td align=right><input name="lev" value="<? echo get_level($display) ?>" size=4></td></tr>
 <tr><td align=left>ISBN</td><td align=right><input name="isbn" value="<? echo get_isbn($display) ?>" size=20></td></tr>
 <tr><td align=left>Auteur</td><td align=right><input name="author" value="<? echo get_author($display) ?>" size=20></td></tr>
 <tr><td align=left>Editeur</td><td align=right><input name="editor" value="<? echo get_editor($display) ?>" size=20></td></tr>
 <tr><td align=left>Prix</td><td align=right><input name="price" value="<? echo get_price($display) ?>" size=20></td></tr>
 <tr><td align=left>Pages</td><td align=right><input name="pages" value="<? echo get_pages($display) ?>" size=20></td></tr>
 <tr><td align=left><input type=submit value="<?echo $txt_change?>"></td>
 <td align=right>
 <input type=button value="<?echo $txt_delete_photo?>" onclick="javascript:if(confirm('Are you sure to delete?')){document.updateform.updpic.value='del';document.updateform.submit();}">
 </td></tr>

</table>

</form>
<? }

// display comment message if it exists

if(is_file($root_dir.$display."_comment")) {
  print "<font color=".$welcomecolor."><table><tr><td><pre>";

  $welcomefile=$root_dir.$display."_comment";
  if (file_exists("$welcomefile"))
  {
   $file = fopen("$welcomefile", 'r');
   $line = fgets($file, 4096);     // get first line

   while (! feof($file))
   {
    print "<a class='smallred'>$line</a>";
    // Get next line
    $line = fgets($file, 4096);
   } // end of main while() loop

   fclose($file);
  }

  print "</pre></td></tr></table></font>";
}
else br();


if(get_level($display)<=(int)$user_row["seclevel"]) {
?>
<img src="?displaypic=<? echo rawurlencode($display) ?>&non_lr=<? echo $non_lr ?>" border=0><br>
<? } ?>
</center>
<br>

<?
display_comments($display);

} ?>

<?
  print "</td></tr></table>";
 require("$SYSTPATH/footer.php");
?>