HEX
Server: Microsoft-IIS/8.5
System: Windows NT YDAWBH120 6.3 build 9600 (Windows Server 2012 R2 Standard Edition) AMD64
User: tentjecom_web (0)
PHP: 7.4.14
Disabled: NONE
Upload Files
File: D:/HostingSpaces/SBogers45/smuldersinterieurprojecten.nl/wwwroot/admin/php/trash.php
<?php	


function getTrash(){
	$output = '';
	if(isset($_POST['askToDeletePermenantly'])){
		$output .= askToDeletePermenantly();	
	}
	else if(isset($_POST['deletePermenantly'])){
		$output .= deletePermenantly();	
	}
	else if(isset($_POST['recover'])){
		$output .= recover();	
	}
	else{
		$output .= showTrash();
	}
	
	return $output;
}


function showTrash(){
	
	//get text
	$siteText = getSiteText();
	
	
	$output = '';
	
	$output .= '<div class="triple-column-container">';
	
		$output .= '<div class="header-bar top-rounded content-bar">'.$siteText['trashTitle'].'</div>';

	
	//load items which are in trash
	$query = 	'SELECT DISTINCT page, itemId, active 
				FROM status
				WHERE active="0"
				ORDER BY id DESC';
	$result = mysql_query($query);
	
	$trashArr = array();
	
	
	$output .= '<div class="triple-column-content">';
		$output .= '<form action="" name="chkForm"  method="post">';
		
			//buttons
			$output .= '<input id="recover" type="submit" name="recover" value="'.$siteText['recover'].'" class="button fully-rounded " />';			   
			$output .= '<input id="deleteSelected" type="submit" name="askToDeletePermenantly" value="'.$siteText['deletePermanently'].'" class="button fully-rounded column-margin-left" />';
		
			
			$output .= '<div class="clear"></div>';
			$output .= '<br />';
			$output .= '<div class="clear"></div>';

			//top rows
			$output .= '<div class="trash-row  trash-head-row">';
				$output .= '<div class="trash-row-cb"><input type="checkbox" name="checkCtrl" value="checkAll" onClick="check_all(this);" class="listID"></div>';
				$output .= '<div class="trash-row-title"><strong>'.$siteText['headRowTitle'].'</strong></div>';
				$output .= '<div class="trash-row-page"><strong>'.$siteText['headRowPage'].'</strong></div>';
				$output .= '<div class="clear"></div>';
			$output .= '</div>';
			
			
			$numTotalItems = mysql_num_rows($result);
	
			//set max items
			$maxItems = 15;
			$numPages = ceil($numTotalItems / $maxItems); 
			if($numPages == 0) $numPages = 1;
			
			//set current page
			$sessionName = 'trash_thisPage';
			if(isset($_SESSION[$sessionName])){
				$thispage = $_SESSION[$sessionName];
			}
			else{
				$thispage = 1;
			}
			
			
			$limitFrom = ($thispage * $maxItems)-$maxItems;
		
			//load max items
			$query .= ' LIMIT '.$limitFrom.','.$maxItems;		
			$result = mysql_query($query);		
			
			//check if page is still needed
			$newNumItems = mysql_num_rows($result);
			if($newNumItems == 0 && $numTotalItems != 0){
				$_SESSION[$sessionName]	=  $_SESSION[$sessionName] - 1;
				header('location: ./');		
			}
			
			while($record = mysql_fetch_assoc($result)){
				$itemId = $record['itemId'];
				$page = $record['page'];
				
				//get titles / displaynames
				if($page == 'media'){
						$r = mysql_query('SELECT title FROM media WHERE id="'.$itemId.'" LIMIT 1;');
						$rec = mysql_fetch_assoc($r);
						$name = $rec['title'];	
				}
				else if($page == '_pages'){
						$r = mysql_query('SELECT name FROM _pages WHERE id="'.$itemId.'" LIMIT 1;');
						$rec = mysql_fetch_assoc($r);
						$name = $rec['name'];	
				}
				else if(is_dir('../images/'.$page) && $page != 'uploads' && $page != 'structure' && !empty($page)){
					
						$r = mysql_query('SELECT title FROM '.$page.'_albums WHERE id="'.$itemId.'" LIMIT 1;');
						$rec = mysql_fetch_assoc($r);
						$name = $rec['title'];		
				}
				else{
						$q = 'SELECT title FROM '.$page.' WHERE id="'.$itemId.'" LIMIT 1;';
						$r = mysql_query($q);
						$rec = mysql_fetch_assoc($r);
						$name = $rec['title'];					
				}
				
				
				$output .= '<div class="trash-row">';
					$output .= '<div class="trash-row-cb"><input type="checkbox" name="option[]" id="option" value="'.$itemId.'-'.$page.'" /></div>';
					$output .= '<div class="trash-row-title">'.ucfirst($name).'</div>';
					$output .= '<div class="trash-row-page">'.ucfirst($page).'</div>';
					$output .= '<div class="clear"></div>';
				$output .= '</div>';
				$output .= '<div class="clear"></div>';
				
			}
		$output .= '</form>';
		
		$output .= '</div>';
	
		//page control
		if($numPages > 1){
			$output .= '<div class="mp-page-control-container">';
				if($thispage != 1){ $output .= '<span class="mp-page-control-previous" onclick="updateSession(\''.$sessionName.'\','.($thispage-1).')">'.$siteText['prevPage'].'</a></span>'; }
				if($thispage != $numPages){ $output .= '<span class="mp-page-control-next" onclick="updateSession(\''.$sessionName.'\','.($thispage+1).')">'.$siteText['nextPage'].'</a></span>'; }
			$output .= '</div>';
		}
	
	$output .= '</div>';
	$output .= '<div class="clear"></div>';
	return $output;	
}

function recover(){
	if(isset($_POST['option'])){
		foreach($_POST['option'] as $key => $value){
			$temp = explode('-', $value);
			$itemId= $temp[0];
			$page = $temp[1];
			
			$updateQuery = 'UPDATE status SET active="1" WHERE page="'.$page.'" AND itemId="'.$itemId.'";';
			
			//reset orders
			if(is_dir('../images/'.$page) && $page != 'uploads' && $page != 'structure' && !empty($page)){
				$query = 'SELECT albumOrder FROM '.$page.'_albums ORDER by albumOrder DESC LIMIT 1';
				$result = mysql_query($query);
				$record = mysql_fetch_assoc($result);
				$order = $record['albumOrder'];
				$order++;
				mysql_query('UPDATE '.$page.'_albums SET albumOrder = "'.$order.'" WHERE id="'.$itemId.'" LIMIT 1;');	
			}
			else if($page != 'media' && $page != 'media_groups'  && $page != 'documents' ){
				$query = 'SELECT itemOrder FROM '.$page.' ORDER by itemOrder DESC LIMIT 1';
				$result = mysql_query($query);
				$record = mysql_fetch_assoc($result);
				$order = $record['itemOrder'];
				$order++;
				mysql_query('UPDATE '.$page.' SET itemOrder = "'.$order.'" WHERE id="'.$itemId.'" LIMIT 1;');
			}
					
			mysql_query($updateQuery);	
		}
	}
	header('location: ./');
}



function askToDeletePermenantly(){
	
	//get text
	$siteText = getSiteText();
	
	$numSelected = 0;
	
	if(isset($_POST['option'])){
		foreach($_POST['option'] as $key => $value){
			if(isset($value)){			
				$arr['value'][$numSelected] = $value;
				$numSelected++;
			}
		}
		$output = '';
		
		$output .= '<div class="triple-column-container">';
			$output .= '<div class="header-bar top-rounded content-bar">'.$siteText['trashTitle'].' // '.$siteText['deletePermanently'].'</div>';
			$output .= '<div class="triple-column-content">';
				
				$output .= '<form action="" method="post">';
				$output .= $siteText['areYouSureDelete'];
				
				$output .= '<div class="clear"></div>';
				for($i=0;$i<$numSelected;$i++){
					$output .= '<input type="hidden" name="valueArray[]" value="'.$arr['value'][$i].'" />';
				}
				$output .= '<input type="submit" name="deletePermenantly" value="'.$siteText['formBtnYes'].'" class="button fully-rounded" />&nbsp;';
				
				$output .= '<input type="submit" name="back" value="'.$siteText['formBtnNo'].'" class="button fully-rounded" />';
				$output .= '</form>';
				
			$output .= '</div>';			
		$output .= '</div>';	
			
		return $output;
	}
	else{
	header('location: ./');
	}
}


function deletePermenantly(){
	foreach($_POST['valueArray'] as $key => $value){
		$temp = explode('-', $value);
		$itemId= $temp[0];
		$page = $temp[1];
		
		//if it is media we need tot delete some files
		if($page == 'media'){
			//get fileName 
			
			$result = mysql_query('SELECT path, type, thumb, medium FROM media WHERE id="'.$itemId.'" LIMIT 1');
			$record = mysql_fetch_assoc($result);
			$fileName = $record['path'];
			$thumb = $record['thumb'];
			$type = $record['type'];
			$medium = $record['medium'];
			
			if($type == 0){
				if(!empty($fileName)){
					unlink('../images/uploads/'.$fileName);
				}
				
				if(!empty($thumb)){
					unlink('../images/uploads/thumb/'.$thumb);
				}
				if(!empty($thumb)){
					unlink('../images/uploads/thumb/'.$medium);
				}
			}
			$deleteQuery1 = 'DELETE FROM '.$page.' WHERE id="'.$itemId.'" LIMIT 1;';
			mysql_query($deleteQuery1);
			$deleteQuery2= 'DELETE FROM status WHERE itemId="'.$itemId.'" AND page="'.$page.'" LIMIT 1;';
			mysql_query($deleteQuery2);	
		}
		else if($page == 'documents'){
			
			//remove document
			$result = mysql_query('SELECT url FROM documents WHERE id = "'.$itemId.'" LIMIT 1');
			$record = mysql_fetch_assoc($result);
			$fileName = $record['url'];
			if(!empty($fileName)){
				unlink($fileName);
			}
			
			$deleteQuery1 = 'DELETE FROM '.$page.' WHERE id="'.$itemId.'" LIMIT 1;';
			mysql_query($deleteQuery1);
			$deleteQuery2 = 'DELETE FROM status WHERE itemId="'.$itemId.'" AND page="'.$page.'" LIMIT 1;';
			mysql_query($deleteQuery2);	
		}
		else{
			$deleteQuery1 = 'DELETE FROM '.$page.' WHERE id="'.$itemId.'" LIMIT 1;';
			mysql_query($deleteQuery1);
			$deleteQuery2 = 'DELETE FROM status WHERE itemId="'.$itemId.'" AND page="'.$page.'" LIMIT 1;';
			mysql_query($deleteQuery2);
		}	
		
		
		
		//check if the page is a photoalbum
		if(is_dir('../images/'.$page) && $page != 'uploads' && $page != 'structure' && !empty($page)){
			
			$deleteQuery1 = 'DELETE FROM '.$page.'_photos WHERE albumId="'.$itemId.'" LIMIT 1;';
			
			if(is_dir('../images/'.$page.'/'.$itemId)){
				delete_directory('../images/'.$page.'/'.$itemId);	
			}
		}	
		
		
		
	}
	header('location: ./');
	
}

?>