BLASSENweb - the future of your web !

function AddDownload() {
    global $prefix, $db, $cookie, $user, $user_adddownload, $downloads_anonadddownloadlock, $module_name;
    include("header.php");
    $maindownload = 1;
    menu(1);
    echo "<br />";
    OpenTable();
    echo "<center><b>"._ADDADOWNLOAD."</b></center><br /><br />";
        if ((is_user($user) && $user_adddownload == 1) || $downloads_anonadddownloadlock != 1) {
            echo "<b>"._INSTRUCTIONS.":</b><br />"
            ."<strong><big>&middot;</big></strong> "._DSUBMITONCE."<br />"
            ."<strong><big>&middot;</big></strong> "._DPOSTPENDING."<br />"
            ."<strong><big>&middot;</big></strong> "._USERANDIP."<br />";
            echo "<form method=\"post\" action=\"modules.php?name=".$module_name."&amp;d_op=Add\" enctype=\"multipart/form-data\">"
            ._DOWNLOADNAME.": <input type=\"text\" name=\"title\" size=\"40\" maxlength=\"100\"><br />"
//            ._FILEURL.": <input type=\"text\" name=\"url\" size=\"50\" maxlength=\"100\" value=\"http://\"><br />";
            ._LISTFILE.": <input type=\"file\" name=\"subor\" size=\"50\"\"><br />";

            echo _CATEGORY.": <select name=\"cat\">";
            $SQL = "SELECT cid, title, parentid FROM ".$prefix."_downloads_categories_bw ORDER BY parentid,title";
            $result = $db->sql_query($SQL);
                while ($row = $db->sql_fetchrow($result)) {
                    $cid2 = $row['cid'];
                    $ctitle2 = stripslashes(check_html($row['title'], "nohtml"));
                    $parentid2 = $row['parentid'];
                        if ($parentid2 != 0) $ctitle2=getparent($parentid2,$ctitle2);
                        echo "<option value=\"".$cid2."\">".$ctitle2."</option>";
                }
            $db->sql_freeresult($result);
            echo "</select><br /><br />"
            ._LDESCRIPTION."<br /><textarea name=\"description\" id=\"downloads_submit\" cols=\"70\" rows=\"15\"></textarea><br /><br />"
            ._AUTHORNAME.": <input type=\"text\" name=\"auth_name\" size=\"30\" maxlength=\"60\"><br />"
            ._AUTHOREMAIL.": <input type=\"text\" name=\"email\" size=\"30\" maxlength=\"60\"><br />"
//            ._FILESIZE.": <input type=\"text\" name=\"filesize\" size=\"12\" maxlength=\"11\"> ("._INBYTES.")<br />"
            ._VERSION.": <input type=\"text\" name=\"version\" size=\"11\" maxlength=\"10\"><br />"
            ._HOMEPAGE.": <input type=\"text\" name=\"homepage\" size=\"50\" maxlength=\"200\" value=\"http://\"><br /><br />"
            ."<input type=\"hidden\" name=\"d_op\" value=\"Add\">"
            //."<input type=\"hidden\" name=\"bw_reg_paid_user\" value=\"1\">"
      ."<input type=\"hidden\" name=\"skuid\" value=\"0\">"
      ."<input type=\"hidden\" name=\"upload\" value=\"upload\">"
            ."<input type=\"submit\" value=\""._ADDTHISFILE."\"> "._GOBACK."<br /><br />"
            ."</form>";
        } else {
            echo "<center>"._DOWNLOADSNOTUSER1."<br />"
            ._DOWNLOADSNOTUSER2."<br /><br />"
            ._DOWNLOADSNOTUSER3."<br />"
            ._DOWNLOADSNOTUSER4."<br />"
            ._DOWNLOADSNOTUSER5."<br />"
            ._DOWNLOADSNOTUSER6."<br />"
            ._DOWNLOADSNOTUSER7."<br /><br />"
            ._DOWNLOADSNOTUSER8."</center>";
        }
    CloseTable();
    echo "<br />";
    OpenTable();
        Blassen();
    CloseTable();
    include("footer.php");
}

function Add($title, $url, $auth_name, $cat, $description, $email, $version, $homepage, $bw_reg_paid_user, $skuid, $upload, $subor) {
    global $prefix, $db, $user, $user_adddownload, $downloads_anonadddownloadlock;

  // limit velkosti suboru v bytoch
  $MAX_SIZE = 104857600;
  // Povolene MIME
  $FILE_MIMES = array('image/jpeg','image/jpg','image/gif','image/png','application/msword');
  // Povolene pripony
  $FILE_EXTS  = array('.zip','.jpg','.png','.gif', '.rar', '.mp3', '.wav' ,'.mpeg', '.avi');
  // Adresar pre subory
  $downloads_dir = "download_files";

  $subor_cesta = $downloads_dir."/".$cat; 
  $subor_name = $_FILES["subor"]["name"]; 
    $subor_type = $_FILES['subor']['type']; 
  $filesize=$_FILES['subor']['size'];
  $subor_ext = strtolower(substr($subor_name,strrpos($subor_name,".")));
  $url = $subor_cesta."/".$subor_name;

// Premenovanie duplicitneho suboru
$i = 0;
  while (file_exists($url)) {
    $url = $subor_cesta."/".$i."_".$subor_name;
    $i++;
  }

// vytvorenie adresarov
if (!is_dir($downloads_dir)) {
  if (!mkdir($downloads_dir, 0755))
      die ($downloads_dir ."directory doesn't exist and creation failed");
  if (!chmod($downloads_dir,0755))
      die ("change permission to 755 failed.");
}
if (!is_dir($subor_cesta)) {
  if (!mkdir($subor_cesta, 0755))
      die ($subor_cesta ."directory doesn't exist and creation failed");
  if (!chmod($subor_cesta,0755))
      die ("change permission to 755 failed.");
}


    $SQL = "SELECT COUNT(*) AS numrows FROM ".$prefix."_downloads_downloads_bw WHERE url='".addslashes($url)."'";
    $result = $db->sql_query($SQL);    
    $numrow = $db->sql_fetchrow($result);
    $db->sql_freeresult($result);
    $numrows = $numrow['numrows'];
        if ($numrows>0) {
            include("header.php");
            menu(1);
            echo "<br />";
            OpenTable();
            echo "<center><b>"._DOWNLOADALREADYEXT."</b><br /><br />"
            ._GOBACK;
            CloseTable();
            include("footer.php");
        } else {
        
      if (is_uploaded_file($_FILES["subor"]["tmp_name"])) {
      $error = 0;
      $error_msg = "";
            if(is_user($user)) {
                $user2 = base64_decode($user);
                $user2 = addslashes($user2);
                $cookie = explode(":", $user2);
                cookiedecode($user);
                $submitter = $cookie[1];
            }
            // Check if Title exist
            if ($title == "") {
              $error ++;
              $error_msg .= "<center><b>"._DOWNLOADNOTITLE."</b><br /><br />";
            }
            // Check if URL exist
/*            if ($url == "") {
              $error ++;
              $error_msg .= "<center><b>"._DOWNLOADNOURL."</b><br /><br />";

            }
*/            // Check if Description exist
            if ($description == "") {
              $error ++;
              $error_msg .= "<center><b>"._DOWNLOADNODESC."</b><br /><br />";
            }
             // Check file size
            if ($filesize > $MAX_SIZE) {
              $error ++;
              $error_msg .= "<center><b>"._TOOBIG." (".$filesize.") "._TOOBIG2." (".$MAX_SIZE.")</b><br /><br />";
            }
             //Check file type
            if (!in_array($subor_type, $FILE_MIMES) && !in_array($subor_ext, $FILE_EXTS)) {
              $error ++;
              $error_msg .= "<center><b>"._FILEEXTERROR."<br />";
              $i=0;
              while($i < sizeof($FILE_EXTS)) {
           $error_msg .= " *".$FILE_EXTS[$i];
           $i++;        
        }        
        $error_msg .= "</b><br /><br />";
            }
      if($error != 0) {
                include("header.php");
                menu(1);
                echo "<br />";
                OpenTable();
                echo $error_msg."<br /><br />"._GOBACK;
                CloseTable();
                include("footer.php");      
      }
// Ulozenie suboru na serveri
      copy($_FILES["subor"]["tmp_name"], $url);

            $cat = explode("-", $cat);
                if ($cat[1] == "") {
                    $cat[1] = 0;
                }
            $title = stripslashes(check_html(FixQuotes($title), "nohtml"));
            $url = stripslashes(check_html($url, "nohtml"));
            $description = stripslashes(check_html(FixQuotes($description), "html"));
            $auth_name = stripslashes(check_html($auth_name, "nohtml"));
            $email = stripslashes(check_html($email, "nohtml"));
            $filesize = str_replace(".","",$filesize);
            $filesize = str_replace(",","",$filesize);
          if (!preg_match("/^[1]$/", $bw_reg_paid_user)) {
            $bw_reg_paid_user = 0;
          }
            $cat[0] = intval($cat[0]);
            $cat[1] = intval($cat[1]);
            $num_result = $db->sql_query("SELECT COUNT(*) AS numrows FROM ".$prefix."_downloads_newdownload_bw WHERE title='".addslashes($title)."' OR url='".addslashes($url)."' OR description='".addslashes($description)."'");
            $num_row = $db->sql_fetchrow($num_result);
            $db->sql_freeresult($num_result);
            $num_new = $num_row['numrows'];
                if ($num_new == 0) {
                    if((is_user($user) && $user_adddownload == 1) || $downloads_anonadddownloadlock != 1) {
                        $db->sql_query("INSERT INTO ".$prefix."_downloads_newdownload_bw VALUES (NULL, '".$cat[0]."', '".$cat[1]."', '".addslashes($title)."', '".addslashes($url)."', '".addslashes($description)."', '".addslashes($auth_name)."', '".addslashes($email)."', '".addslashes($submitter)."', '".addslashes($filesize)."', '".addslashes($version)."', '".addslashes($homepage)."', '".addslashes($bw_reg_paid_user)."', '".$skuid."')");
                    }
                }
            include("header.php");
            menu(1);
            echo "<br />";
            OpenTable();
            echo "<center><b>"._DOWNLOADRECEIVED."</b><br />";
                if ($email == "") {
                    echo _CHECKFORIT;
                }
            CloseTable();
    echo "<br />";
    OpenTable();
        Blassen();
    CloseTable();
            include("footer.php");
          }
      else {
              include("header.php");
              menu(1);
              echo "<br />";
              OpenTable();
              echo "<center><b>"._ERROR."</b><br />".$_FILES["subor"]["name"];
              CloseTable();
          echo "<br />";
          OpenTable();
          CloseTable();
              include("footer.php");
      }
        }
}

case "Add":

Add($title, $url, $auth_name, $cat, $description, $email, $version, $homepage, $bw_reg_paid_user, $skuid, $upload, $subor);

/** K-NinetyNine add **/
define("_LISTFILE","Vybrať súbor");
define("_ERROR","Súbor sa nepodarilo nahrať na server!");
define("_TOOBIG","Súbor je príliš veľký. Veľkosť súboru");
define("_TOOBIG2","Povolená veľkosť");
define("_FILEEXTERROR","Nepovolený typ súboru. Môžeťe pridať iba tieto typy: ");



  // limit velkosti suboru v bytoch
  $MAX_SIZE = 104857600;
  // Povolene MIME
  $FILE_MIMES = array('image/jpeg','image/jpg','image/gif','image/png','application/msword');
  // Povolene pripony
  $FILE_EXTS  = array('.zip','.jpg','.png','.gif', '.rar', '.mp3', '.wav' ,'.mpeg', '.avi');
  // Adresar pre subory
  $downloads_dir = "download_files";