HEX
Server: Microsoft-IIS/8.5
System: Windows NT YDAWBH120 6.3 build 9600 (Windows Server 2012 R2 Standard Edition) AMD64
User: tentjecom_web (0)
PHP: 7.4.14
Disabled: NONE
Upload Files
File: D:/HostingSpaces/SBogers45/smuldersinterieurprojecten.nl/wwwroot/admin/php/media.php
<?php

function getMedia(){
	//get text
	$siteText = getSiteText();	
		
	$output = '';
	
	//header
	 if(isset($_GET['action']) && !isset($_POST['back'])){
		$action = $_GET['action'];
		
		$output .= '<div class="header-bar top-rounded content-bar">';
		
		//if group?
		$group = false;
		if(isset($_GET['sub'])){
			if($_GET['sub'] != 'all'){
				$group = true;
				$groupTitle = $_GET['sub'];
			}
			
		}
		
		if($action == 'newFile' || $action == 'newVimeo' || $action == 'newSound' || $action == 'newYoutube' ){
			$output .= $siteText['mediaLibTitle'].' // '.strtolower($siteText['titleNewItem']);			
		}
		else if($action == 'editFile' || $action == 'editVimeo' || $action == 'editSound' || $action == 'editYoutube'){
			$output .= $siteText['mediaLibTitle'].' // '.strtolower($siteText['titleEditItem']);
		}
		else if($action == 'deleteFile' || $action == 'deleteVimeo' || $action == 'deleteSound' || $action == 'deleteYoutube'){
			$output .= $siteText['mediaLibTitle'].' // '.strtolower($siteText['titleDeleteItem']);
		}
		
		if($group) $output .= ' in &quot;'.strtolower($groupTitle).'&quot;';
		
		$output .= '</div>';
	}
	
	$fileArr = getMediaFileArray();
	$vimeoArr = getMediaVimeoArray();
	$soundArr = getMediaSoundCloudArray();
	$youtubeArr = getMediaYoutubeArray();
	
	if(isset($_POST['back'])){
		if(isset($_GET['location'])){
				$temp = explode('-',$_GET['location']);
				$str = '?page='.$temp[0].'&action='.$temp[1];
				if($temp[1] == 'edit') $str .= '&id='.$temp[2];
				
				header('location: '.$str);
		}
		else{
			$output .= showList($_GET['page']);	
		}
	}
	//shows the question if you really want to delete the stuf
	else if(isset($_POST['deleteSelectedMedia'])){
		$output .= deleteSelectedMedia();	
	}
	//moves selected to trash
	else if(isset($_POST['moveSelectedToTrash'])){
		$output .= moveSelectedToTrash();
	}
	else if(isset($_POST['sbmFileNew'])){
		$output .= validateForm($fileArr, 'new');
	}
	else if(isset($_POST['sbmFileEdit'])){
		$output .= validateForm($fileArr, 'edit', $_GET['id']);
	}
	else if(isset($_POST['sbmFileDelete'])){
		$output .= validateForm($fileArr, 'delete', $_GET['id']);
	}
	else if(isset($_POST['sbmVimeoNew'])){
		$output .= validateForm($vimeoArr, 'new');
	}
	else if(isset($_POST['sbmVimeoEdit'])){
		$output .= validateForm($vimeoArr, 'edit', $_GET['id']);
	}
	else if(isset($_POST['sbmVimeoDelete'])){
		$output .= validateForm($vimeoArr, 'delete', $_GET['id']);
	}
	else if(isset($_POST['sbmSoundNew'])){
		$output .= validateForm($soundArr, 'new');
	}
	else if(isset($_POST['sbmSoundEdit'])){
		$output .= validateForm($soundArr, 'edit', $_GET['id']);
	}
	else if(isset($_POST['sbmSoundDelete'])){
		$output .= validateForm($soundArr, 'delete', $_GET['id']);
	}
	else if(isset($_POST['sbmYoutubeNew'])){
		$output .= validateForm($youtubeArr, 'new');
	}
	else if(isset($_POST['sbmYoutubeEdit'])){
		$output .= validateForm($youtubeArr, 'edit', $_GET['id']);
	}
	else if(isset($_POST['sbmYoutubeDelete'])){
		$output .= validateForm($youtubeArr, 'delete', $_GET['id']);
	}
	else if(isset($_GET['action'])){
		$action = $_GET['action'];		
			if($action == 'newFile'){
				$output .= createForm($fileArr, 'new');
			}
			else if($action == 'editFile'){
				$output .= createForm($fileArr, 'edit', $_GET['id']);
			}
			else if($action == 'deleteFile'){
				$output .= createForm($fileArr, 'delete', $_GET['id']);
			}
			else if($action == 'newVimeo'){
				$output .= createForm($vimeoArr, 'new');
			}
			else if($action == 'editVimeo'){
				$output .= createForm($vimeoArr, 'edit', $_GET['id']);
			}
			else if($action == 'deleteVimeo'){
				$output .= createForm($vimeoArr, 'delete', $_GET['id']);
			}
			else if($action == 'newSound'){
				$output .= createForm($soundArr, 'new');
			}
			else if($action == 'editSound'){
				$output .= createForm($soundArr, 'edit', $_GET['id']);
			}
			else if($action == 'deleteSound'){
				$output .= createForm($soundArr, 'delete', $_GET['id']);
			}
			else if($action == 'newYoutube'){
				$output .= createForm($youtubeArr, 'new');
			}
			else if($action == 'editYoutube'){
				$output .= createForm($youtubeArr, 'edit', $_GET['id']);
			}
			else if($action == 'deleteYoutube'){
				$output .= createForm($youtubeArr, 'delete', $_GET['id']);
			}
			
	}
	else{
		$output .= showList('media');	
	}
	
	return $output;
}

function showList($page){
	//get text
	$siteText = getSiteText();
	
	if(isset($_GET['sub'])){
		$sub = $_GET['sub'];
	}
	else{
		$sub = 'all';	
	}
	
	$output = '';
	//header
	$output .= '<div class="header-bar top-rounded content-bar">'.$siteText['mediaLibTitle'];
		if($sub != 'all') $output .= ' // '.strtolower($sub);
	$output .= '</div>';
	
	if($sub != 'all'){
	$output .= '<div class="pages-group-options">';
		$output .= 'Group options:';
		
		//get groupId	
		$groupResult = mysql_query('SELECT id FROM media_groups WHERE linkname = "'.$sub.'" LIMIT 1');
		$groupRecord = mysql_fetch_assoc($groupResult);
		$groupId = $groupRecord['id'];
		
		$output .= '<a href="./media/'.$sub.'/edit-group/'.$groupId.'/" /><img src="./images/icons/edit.png" class="mp-box-icon pages-group-icon" /></a>';
		$output .= '<a href="./media/'.$sub.'/delete-group/'.$groupId.'/" /><img src="./images/icons/trashcan.png" class="mp-box-icon pages-group-icon" /></a>';
	$output .= '</div>';
	}
	
	$output .= '<div class="pages-action-menu';
		if($sub == 'all') $output .= ' full-action-menu ';
	$output .= '">';
		$output .= '<ul>
						<li><a href="./media/'.$sub.'/newFile/"><img src="./images/icons/plus.png" alt="add"/> '.$siteText['btnNewImage'].'</a></li>
						<li><a href="./media/'.$sub.'/newSound/"><img src="./images/icons/plus.png" alt="add"/> '.$siteText['btnNewSound'].'</a></li>
						<li><a href="./media/'.$sub.'/newVimeo/"><img src="./images/icons/plus.png" alt="add"/> '.$siteText['btnNewVimeo'].'</a></li>
						<li><a href="./media/'.$sub.'/newYoutube/"><img src="./images/icons/plus.png" alt="add"/> '.$siteText['btnNewYoutube'].'</a></li>
						<div class="clear"></div>
					</ul>';
					
	$output .= '</div>';
	$output .= '<div class="clear"></div>';
	
	
	
	
	//start form
	$output .= '<form action="" name="chkForm"  method="post">';
	
	//sub menu
	$output .= '<div class="med-sub-nav">';
		//check all
		$output .= '<span class="med-check-all"><input type="checkbox" name="checkCtrl" value="checkAll" onClick="check_all(this);" class="med-check-all-box" />Check all</span>';
		
		//delete selected
		$output .= '<input type="submit" id="deleteSelected" name="deleteSelectedMedia" value="'.$siteText['deleteSelected'].'" class="button fully-rounded med-delete-selected"/>';
		
		
		//move selected
		$output .= '<div class="med-hover-move">';
				$output .= 'Move to <select name="selectToGroup">';
					//first option
					$output .= '<option value="all">All</option>';
					// get all media groups and groupid's
					//media groups
					$movequery = 'SELECT DISTINCT m.id, m.title, m.linkname
							  FROM media_groups AS m, status AS s
							  WHERE s.itemId = m.id
							  AND s.active = "1"
							  ORDER BY title ASC';
					$moveresult = mysql_query($movequery);
					while($moverecord = mysql_fetch_assoc($moveresult)){
						$moveId = $moverecord['id'];
						$moveTitle = $moverecord['title'];
						$moveLinkname = $moverecord['linkname'];
						
						$output .= '<option value="'.$moveId.'">'.$moveTitle.'</option>';
					}
				$output .= '</select>';
				$output .= '<input type="submit" id="moveSelected" name="moveSelected" value="move" class="button fully-rounded med-delete-selected"/>';
		$output .= '</div>';
		
		$output .= '<div class="clear"></div>';
	$output .= '</div>';
	
	
	//get ALLthe total items 
	$query = 'SELECT m.id, m.title, m.shortcode, m.type, m.path, m.thumb, m.medium
				FROM media AS m, status AS s 
				WHERE s.page="'.$page.'"
				AND s.itemId = m.id 
				AND s.active=1 
				ORDER BY m.id DESC';
				
	//if isset sub, then overwrite the query above
	if(isset($_GET['sub'])){
		if($_GET['sub'] != 'all'){
			$query = 'SELECT m.id, mg.id AS groupId, m.title, m.shortcode, m.type, m.path, m.thumb, m.medium
				FROM media AS m, status AS s, media_groups AS mg, media_grouprows AS gr 
				WHERE s.page="'.$page.'"
				AND s.itemId = m.id 
				AND s.active=1 
				AND mg.linkname = "'.$_GET['sub'].'"
				AND mg.id = gr.groupId
				AND m.id = gr.mediaId
				ORDER BY m.id DESC';
		}
	}
	
	$result = mysql_query($query);
	$numTotalItems = mysql_num_rows($result);
	
	//set max items
	$maxItems = 24;
	$numPages = ceil($numTotalItems / $maxItems); 
	if($numPages == 0) $numPages = 1;
	
	$sessionName = 'media__'.$sub.'_thisPage';
	//set current page
	if(isset($_SESSION[$sessionName])){
		$thispage = $_SESSION[$sessionName];
	}
	else{
		$thispage = 1;
	}
	$limitFrom = ($thispage * $maxItems)-$maxItems;

	$query .= ' LIMIT '.$limitFrom.','.$maxItems;		
	$result = mysql_query($query);
	
	//check if page is still needed
	$newNumItems = mysql_num_rows($result);
	if($newNumItems == 0 && $numTotalItems != 0){
		$_SESSION[$sessionName]	=  $_SESSION[$sessionName] - 1;
		header('location: ./');		
	}
	
	$colCount = 0;
	$count = 0;
	//start div row
	$output .= '<div class="med-thumb-row">';
	
	$row = 1;
	while($record = mysql_fetch_assoc($result)){
		$itemId = $record['id'];
		$title = fromDatabase($record['title']);
		$shortcode = $record['shortcode'];
		$type = $record['type'];
			
		if($type == 0){
			$thumb = '../images/uploads/thumb/'.$record['thumb'];
			$hoverThumb = '../images/uploads/thumb/'.$record['medium'];
			$actionSuffix = 'File';
		}
		else if($type == 1){
			$thumb = './images/icons/vimeoSquare.jpg';
			$hoverThumb = './images/icons/vimeoRect.jpg';
			$actionSuffix = 'Vimeo';
		}
		else if($type == 2){
			$thumb = '../images/soundThumb.png';
			$hoverThumb = $thumb;
			$actionSuffix = 'Sound';
		}
		else{
			$thumb = './images/icons/youtubeSquare.jpg';
			$hoverThumb = './images/icons/youtubeRect.jpg';
			$actionSuffix = 'Youtube';
		}
		
		//evt short title
		if(strlen($title) > 22){
			$title = substr($title, 0,20).'..';
		}
		
		if($colCount == 0 && $count != 0){
			$output .= '<div class="clear"></div>';
			$output .= '</div>';
			$output .= '<div class="med-thumb-row">';
		}		
	
		//hover output
		/*$str =  '';
		$str .='<div class=\\\'med-hover-img\\\'>';
			$str .= '<img src=\\\''.$hoverThumb.'\\\' width=\\\'198\\\' />';
		$str .= '</div>';
		$str .= '<div class=\\\'med-hover-title\\\'>';
			$str .= '&quot;'.inDatabase($title).'&quot;';
			$str .= '<br /><span class=\\\'med-hover-title-sc\\\'>['.$shortcode.']</span>';				
		$str .= '</div>';
		$str .= '<div class=\\\'med-hover-actions\\\'>';
			$str .= '<a href=\\\'./media/'.$sub.'/edit'.$actionSuffix.'/'.$itemId.'/\\\' /><img src=\\\'./images/icons/edit.png\\\' class=\\\'mp-box-icon\\\' /></a>';
			$str .= '<a href=\\\'./media/'.$sub.'/delete'.$actionSuffix.'/'.$itemId.'/\\\' /><img src=\\\'./images/icons/trashcan.png\\\' class=\\\'mp-box-icon\\\' /></a>';
		$str .= '</div>';
		$str .= '<div class=\\\'med-hover-move\\\'>';
			
			$str .= '<form action=\\\'\\\' id=\\\'moveToGroupForm\\\' name=\\\'moveToGroupForm\\\' method=post>';
				$str .= 'Move to <select name=\\\'selectToGroup\\\' onChange=\\\'this.form.submit(); \\\'>';
					//first option
					$str .= '<option value=\\\'all\\\'>All</option>';
					// get all media groups and groupid's
					//media groups
					$movequery = 'SELECT DISTINCT m.id, m.title, m.linkname
							  FROM media_groups AS m, status AS s
							  WHERE s.itemId = m.id
							  AND s.active = "1"
							  ORDER BY title ASC';
					$moveresult = mysql_query($movequery);
					while($moverecord = mysql_fetch_assoc($moveresult)){
						$moveId = $moverecord['id'];
						$moveTitle = $moverecord['title'];
						$moveLinkname = $moverecord['linkname'];
						
						$groupIdResult = mysql_query('SELECT DISTINCT groupId FROM media_grouprows WHERE mediaId = '.$itemId.' LIMIT 1');
						$groupIdRecord = mysql_fetch_assoc($groupIdResult);
						$groupId = $groupIdRecord['groupId'];
						
						$str .= '<option value=\\\''.$moveId.'\\\'';
							if($moveId == $groupId ) $str .= ' selected ';
						$str .= '>'.$moveTitle.'</option>';
					}
				$str .= '</select>';
				$str .= '<input type=\\\'hidden\\\' name=\\\'mediaIdToMove\\\' value=\\\''.$itemId.'\\\' />';
			$str .= '</form>';
		$str .= '</div>';
		*/
		
		
		//new thumb output.
		$output .= '<div class="med-hover">';
			$output .='<div class="med-hover-img">';
				$output .= '<img src="'.$hoverThumb.'" width="198" />';
				$output .= '<input type="checkbox" name="option[]" id="option" value="'.$itemId.'" class="med-thumb-img-cb"/>';
			$output .= '</div>';
			$output .= '<div class="med-hover-title">';
				$output .= '&quot;'.inDatabase($title).'&quot;';
				$output .= '<br /><span class="med-hover-title-sc">['.$shortcode.']</span>';				
			$output .= '</div>';
			$output .= '<div class="med-hover-actions">';
				$output .= '<a href="./media/'.$sub.'/edit'.$actionSuffix.'/'.$itemId.'/" /><img src="./images/icons/edit.png" class="mp-box-icon" /></a>';
				$output .= '<a href="./media/'.$sub.'/delete'.$actionSuffix.'/'.$itemId.'/" /><img src="./images/icons/trashcan.png" class="mp-box-icon" /></a>';
			$output .= '</div>';
			
		$output .= '</div>';
		//thumb output
		/*$output .= '<div class="med-thumb" onMouseOver="mediaOver('.$itemId.', \''.$str.'\' );" onMouseOut="thumbDivMouseOut('.$itemId.');" >
						<input type="checkbox" name="option[]" id="option" value="'.$itemId.'" class="med-thumb-img-cb"/>
						<img src="'.$thumb.'" id="med-img-'.$itemId.'" alt="'.$title.'" class="med-thumb-img" />
					</div>';*/
					
		$colCount++;
		$count++;
		
		if($colCount == 5){
			$colCount = 0;
		}			
		
	}
	$output .= '<div class="clear"></div>';
	$output .= '</div>'; // end row
	$output .= '</form>';
	
	//page control
	if($numPages > 1){
		$output .= '<div class="mp-page-control-container">';
			if($thispage != 1){ $output .= '<span class="mp-page-control-previous" onclick="pageControl(\''.$sessionName.'\','.($thispage-1).')">'.$siteText['prevPage'].'</a></span>'; }
			if($thispage != $numPages){ $output .= '<span class="mp-page-control-next" onclick="pageControl(\''.$sessionName.'\','.($thispage+1).')">'.$siteText['nextPage'].'</a></span>'; }
		$output .= '</div>';
	}
		
	return $output;		
}

function deleteSelectedMedia(){
	//get text
	$siteText = getSiteText();
	
	$numSelected = 0;
	if(isset($_POST['option'])){
		foreach($_POST['option'] as $key => $itemId){
			if(isset($itemId)){
				$query = 'SELECT title, type, thumb FROM media WHERE id ="'.$itemId.'"';
				$result = mysql_query($query);
				$record = mysql_fetch_assoc($result);
				$type = $record['type'];
				
				if($type == 0){
					$thumb = '../images/uploads/thumb/'.$record['thumb'];
				}
				else if($type == 1){
					$thumb = './images/icons/vimeoSquare.jpg';
				}
				else if($type == 2){
					$thumb = './images/soundThumb.png';
				}
				else{
					$thumb = './images/icons/youtubeSquare.jpg';
				}
				
				$arr['id'][$numSelected] = $itemId;
				$arr['image'][$numSelected] = $thumb;
				$arr['title'][$numSelected] = fromDatabase($record['title']);
				$numSelected++;
			}
		}
		
		$output = '';
		
		$output .= '<div class="triple-column-container">';
			$output .= '<div class="header-bar top-rounded content-bar">media // delete selected</div>';
			$output .= '<div class="triple-column-content">';
			
				$output .= '<form action="" method="post">';
				$output .= $siteText['areYouSureDelete'].'<br /><br/>';
	
				//column count
				$colCount = 0;
				
				//thumbs
				$output .= '<div class="med-thumb-row">';
				for($i=0;$i<$numSelected;$i++){
				
					if($colCount == 0 && $i != 0){
						$output .= '<div class="clear"></div>';
						$output .= '</div>';
						$output .= '<div class="med-thumb-row">';
					}		
	
					$output .= '<div class="med-thumb"><img src="'.$arr['image'][$i].'" alt="'.$arr['title'][$i].'" /></div>';
	
					$colCount++;
					
					if($colCount == 5){
						$colCount = 0;
					}		
				}
				$output .= '</div>';
				
				$output .= '<div class="clear"></div>';
				$output .= '<br /><br/>';
				for($i=0;$i<$numSelected;$i++){
					$output .= '<input type="hidden" name="idArray[]" value="'.$arr['id'][$i].'" />';
				}
				$output .= '<input type="submit" name="moveSelectedToTrash" value="'.$siteText['formBtnYes'].'" class="button fully-rounded" />&nbsp;';
				
				$output .= '<input type="submit" name="back" value="'.$siteText['formBtnNo'].'" class="button fully-rounded" />';
				$output .= '</form>';
	
			$output .= '</div>';			
		$output .= '</div>';	
	}
	else{
		header('location: ./');
	}
	
	return $output;
}

function moveSelectedToTrash(){
	foreach($_POST['idArray'] as $key => $itemId){
		$updateQuery = 'UPDATE status SET active="0" WHERE page="media" AND itemId="'.$itemId.'";';
		mysql_query($updateQuery);	
	}
	header('location: ./');
}

function moveItemToTrash($itemid){
	$updateQuery = 'UPDATE status SET active="0" WHERE page="media" AND itemId="'.$itemId.'" LIMIT1;';
	mysql_query($updateQuery);	
	header('location: ./media/');
}



?>