admin/modify_ads.php
<?php declare(strict_types=1);
/*
* You may not change or alter any portion of this comment or credits
* of supporting developers from this source code or any supporting source code
* which is considered copyrighted (c) material of the original comment or credit authors.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
*/
/**
* @copyright XOOPS Project (https://xoops.org)
* @license GNU GPL 2.0 or later (https://www.gnu.org/licenses/gpl-2.0.html)
* @author XOOPS Development Team
* @author Pascal Le Boustouller: original author (pascal.e-xoops@perso-search.com)
* @author Luc Bizet (www.frxoops.org)
* @author jlm69 (www.jlmzone.com)
* @author mamba (www.xoops.org)
*/
use Xmf\Request;
use XoopsModules\Adslight\{
Helper,
Tree,
Utility
};
/** @var Admin $adminObject */
/** @var Helper $helper */
require_once __DIR__ . '/admin_header.php';
$op = Request::getString('op', 'list');
/**
* Main Ad Display
*/
function index(): void
{
global $xoopsDB;
$helper = Helper::getInstance();
// $mytree = new Tree($xoopsDB->prefix('adslight_categories'), 'cid', 'pid');
// require_once __DIR__ . '/admin_header.php';
xoops_cp_header();
// loadModuleAdminMenu(0, "");
// photo dir setting checker
$photo_dir = $helper->getConfig('adslight_path_upload', '');
$photo_thumb_dir = $helper->getConfig('adslight_path_upload') . '/thumbs';
$photo_resized_dir = $helper->getConfig('adslight_path_upload') . '/midsize';
if (!is_dir($photo_dir) && (!mkdir($photo_dir) && !is_dir($photo_dir))) {
throw new \RuntimeException(sprintf('Directory "%s" was not created', $photo_dir));
}
if (!is_dir($photo_thumb_dir) && (!mkdir($photo_thumb_dir) && !is_dir($photo_thumb_dir))) {
throw new \RuntimeException(sprintf('Directory "%s" was not created', $photo_thumb_dir));
}
if (!is_dir($photo_resized_dir) && (!mkdir($photo_resized_dir) && !is_dir($photo_resized_dir))) {
throw new \RuntimeException(sprintf('Directory "%s" was not created', $photo_resized_dir));
}
if (!is_writable($photo_dir) || !is_readable($photo_dir)) {
echo "<fieldset><legend style='font-weight: bold; color: #900;'>" . _AM_ADSLIGHT_CHECKER . '</legend><br>';
echo "<span style='color: #FF0000;'><b>" . _AM_ADSLIGHT_DIRPERMS . $photo_dir . "</b></span><br><br>\n";
echo '</fieldset><br>';
}
if (!is_writable($photo_thumb_dir) || !is_readable($photo_thumb_dir)) {
echo "<fieldset><legend style='font-weight: bold; color: #900;'>" . _AM_ADSLIGHT_CHECKER . '</legend><br>';
echo "<span style='color: #FF0000;'><b>" . _AM_ADSLIGHT_DIRPERMS . $photo_thumb_dir . "</b></span><br><br>\n";
echo '</fieldset><br>';
}
if (!is_writable($photo_resized_dir) || !is_readable($photo_resized_dir)) {
echo "<fieldset><legend style='font-weight: bold; color: #900;'>" . _AM_ADSLIGHT_CHECKER . '</legend><br>';
echo "<span style='color: #FF0000;'><b>" . _AM_ADSLIGHT_DIRPERMS . $photo_resized_dir . "</b></span><br><br>\n";
echo '</fieldset><br>';
}
$sql = 'SELECT lid, cid, title, status, expire, type, desctext, tel, price, typeprice, typecondition, date_created, email, submitter, town, country, contactby, premium, photo, usid FROM ' . $xoopsDB->prefix('adslight_listing') . " WHERE valid='no' ORDER BY lid";
$result = $xoopsDB->query($sql);
$numrows = $xoopsDB->getRowsNum($result);
if ($numrows > 0) {
///////// Il y a [..] Annonces en attente d'être approuvées //////
echo "<table class='outer bnone' cellspacing=5 cellpadding=0><tr><td width=40>";
echo "<img src='../assets/images/admin/error_button.png' border=0 ></td><td>";
echo "<span style='color:#00B4C4;'><b>" . _AM_ADSLIGHT_THEREIS . "</b></span> <b>{$numrows}</b> <span style='color:#00B4C4;'>" . _AM_ADSLIGHT_WAIT . '</b></span>';
echo '</td></tr></table><br>';
} else {
echo "<table class='outer' width='50%' border='0'><tr><td width=40>";
echo "<img src='../assets/images/admin/search_button_green_32.png' border=0 alt=\"._AM_ADSLIGHT_RELEASEOK.\" ></td><td>";
echo "<span style='color: #00B4C4;'><b>" . _AM_ADSLIGHT_NOANNVAL . '</b></span>';
echo '</td></tr></table><br>';
}
// Modify Annonces
$sql = 'SELECT COUNT(*) FROM ' . $xoopsDB->prefix('adslight_listing');
$result = $xoopsDB->query($sql);
if (!$xoopsDB->isResultSet($result)) {
\trigger_error("Query Failed! SQL: $sql- Error: " . $xoopsDB->error(), E_USER_ERROR);
}
[$numrows] = $xoopsDB->fetchRow($result);
if ($numrows > 0) {
echo "<table width='100%' border='0' class='outer'><tr class='bg4'><td valign='top'>";
echo '<form method="post" action="modify_ads.php">'
. '<b>'
. _AM_ADSLIGHT_MODANN
. '</b><br><br>'
. _AM_ADSLIGHT_NUMANN
. ' <input type="text" name="lid" size="12" maxlength="11"> '
. '<input type="hidden" name="op" value="modifyAd">'
. '<input type="submit" value="'
. _AM_ADSLIGHT_MODIF
. '">'
. '</form><br>';
echo '</td></tr></table><br>';
}
echo "<table width='100%' border='0' cellspacing='1' cellpadding='8' style='border: 2px solid #DFE0E0;'><tr class='bg4'><td valign='top'>";
echo '<a href="map.php">' . _AM_ADSLIGHT_GESTCAT . '</a> | <a href="../index.php">' . _AM_ADSLIGHT_ACCESMYANN . '</a>';
echo '</td></tr></table><br>';
xoops_cp_footer();
}
# function modifyAd
#####################################################
/**
* @param $lid
*/
function modifyAd($lid): void
{
global $xoopsDB, $xoopsModule, $xoopsConfig, $myts, $desctext;
$helper = Helper::getInstance();
$mytree = new Tree($xoopsDB->prefix('adslight_categories'), 'cid', 'pid');
$helper = Helper::getInstance();
$contactselect = '';
// require_once __DIR__ . '/admin_header.php';
xoops_cp_header();
// loadModuleAdminMenu(0, "");
$id_price = '';
$nom_price = '';
$lid = (int)$lid;
echo "<fieldset><legend style='font-weight: bold; color: #900;'>" . _AM_ADSLIGHT_MODANN . '</legend>';
$sql = 'SELECT lid, cid, title, status, expire, type, desctext, tel, price, typeprice, typecondition, date_created, email, submitter, town, country, contactby, premium, valid, photo FROM ' . $xoopsDB->prefix('adslight_listing') . " WHERE lid={$lid}";
$result = $xoopsDB->query($sql);
if (!$xoopsDB->isResultSet($result)) {
\trigger_error("Query Failed! SQL: $sql- Error: " . $xoopsDB->error(), E_USER_ERROR);
}
while ([$lid, $cid, $title, $status, $expire, $type, $desctext, $tel, $price, $typeprice, $typecondition, $date_created, $email, $submitter, $town, $country, $contactby, $premium, $valid, $photo] = $xoopsDB->fetchRow(
$result
)) {
$title = \htmlspecialchars($title, ENT_QUOTES | ENT_HTML5);
$status = \htmlspecialchars($status, ENT_QUOTES | ENT_HTML5);
$expire = \htmlspecialchars($expire, ENT_QUOTES | ENT_HTML5);
$type = \htmlspecialchars($type, ENT_QUOTES | ENT_HTML5);
$desctext = $myts->displayTarea($desctext, 1, 1, 1);
$tel = \htmlspecialchars($tel, ENT_QUOTES | ENT_HTML5);
// $price = number_format($price, 2, ',', ' ');
xoops_load('XoopsLocal');
$tempXoopsLocal = new \XoopsLocal();
// For US currency with 2 numbers after the decimal comment out if you don't want 2 numbers after decimal
$priceFormatted = $tempXoopsLocal->number_format($price);
// For other countries uncomment the below line and comment out the above line
// $priceFormatted = $tempXoopsLocal->number_format($price);
$typeprice = \htmlspecialchars($typeprice, ENT_QUOTES | ENT_HTML5);
$typecondition = \htmlspecialchars($typecondition, ENT_QUOTES | ENT_HTML5);
$submitter = \htmlspecialchars($submitter, ENT_QUOTES | ENT_HTML5);
$town = \htmlspecialchars($town, ENT_QUOTES | ENT_HTML5);
$country = \htmlspecialchars($country, ENT_QUOTES | ENT_HTML5);
$contactby = \htmlspecialchars($contactby, ENT_QUOTES | ENT_HTML5);
$premium = \htmlspecialchars($premium, ENT_QUOTES | ENT_HTML5);
$date2 = formatTimestamp($date_created, 's');
echo '<form action="modify_ads.php" method=post>';
echo $GLOBALS['xoopsSecurity']->getTokenHTML();
echo "<table class='bnone'><tr class='head' border='1'>
<td>" . _AM_ADSLIGHT_NUMANN . " </td><td>{$lid} " . _AM_ADSLIGHT_ADDED_ON . " {$date2}</td>
</tr><tr class='head' border='1'>
<td>" . _AM_ADSLIGHT_SENDBY . " </td><td>{$submitter}</td>
</tr><tr class='head' border='1'>
<td>" . _AM_ADSLIGHT_EMAIL . " </td><td><input type=\"text\" name=\"email\" size=\"40\" value=\"{$email}\"></td>
</tr><tr class='head' border='1'>
<td>" . _AM_ADSLIGHT_TEL . " </td><td><input type=\"text\" name=\"tel\" size=\"50\" value=\"{$tel}\"></td>
</tr><tr class='head' border='1'>
<td>" . _AM_ADSLIGHT_TOWN . " </td><td><input type=\"text\" name=\"town\" size=\"40\" value=\"{$town}\"></td>
</tr><tr class='head' border='1'>
<td>" . _AM_ADSLIGHT_COUNTRY . " </td><td><input type=\"text\" name=\"country\" size=\"40\" value=\"{$country}\"></td>
</tr></tr><tr class='head' border='1'>";
$contactSel1 = $contactSel2 = $contactSel3 = $contactSel4 = '';
$selected = 'contactSel' . (int)$contactby;
${$selected} = ' selected';
echo " <td class='head'>"
. _AM_ADSLIGHT_CONTACTBY
. " </td><td class='head'><select name=\"contactby\">\n"
// . " <option value=\"{$contactby}\">{$contactselect[$contactby]}</option>\n"
. " <option value=\"1\"{$contactSel1}>"
. _AM_ADSLIGHT_CONTACT_BY_EMAIL
. "</option>\n"
. " <option value=\"2\"{$contactSel2}>"
. _AM_ADSLIGHT_CONTACT_BY_PM
. "</option>\n"
. " <option value=\"3\"{$contactSel3}>"
. _AM_ADSLIGHT_CONTACT_BY_BOTH
. "</option>\n"
. " <option value=\"4\"{$contactSel4}>"
. _AM_ADSLIGHT_CONTACT_BY_PHONE
. "</option></select>\n"
. " </td>\n"
. '</tr>';
echo "<tr><td class='head'>" . _AM_ADSLIGHT_STATUS . "</td><td class='head'><input type=\"radio\" name=\"status\" value=\"0\"";
if (0 === (int)$status) {
echo 'checked';
}
echo '>' . _AM_ADSLIGHT_ACTIVE . ' <input type="radio" name="status" value="1"';
if (1 === (int)$status) {
echo 'checked';
}
echo '>' . _AM_ADSLIGHT_INACTIVE . ' <input type="radio" name="status" value="2"';
if (2 === (int)$status) {
echo 'checked';
}
echo '>' . _AM_ADSLIGHT_SOLD . '</td></tr>';
echo "<tr class='head' border='1'>
<td>" . _AM_ADSLIGHT_TITLE2 . " </td><td><input type=\"text\" name=\"title\" size=\"40\" value=\"{$title}\"></td>
</tr><tr class='head' border='1'>
<td>" . _AM_ADSLIGHT_PREMIUM . " </td><td><input type=\"text\" name=\"premium\" size=\"3\" value=\"{$premium}\"></td>
</tr><tr class='head' border='1'>
<td>" . _AM_ADSLIGHT_EXPIRE . " </td><td><input type=\"text\" name=\"expire\" size=\"40\" value=\"{$expire}\"></td>
</tr>";
////// Type d'annonce
echo "<tr class='head' border='1'>
<td>" . _AM_ADSLIGHT_TYPE . ' </td><td><select name="type">';
$sql = 'SELECT nom_type, id_type FROM ' . $xoopsDB->prefix('adslight_type') . ' ORDER BY nom_type';
$result5 = $xoopsDB->query($sql);
if (!$xoopsDB->isResultSet($result5)) {
\trigger_error("Query Failed! SQL: $sql- Error: " . $xoopsDB->error(), E_USER_ERROR);
}
while ([$nom_type, $id_type] = $xoopsDB->fetchRow($result5)) {
$sel = '';
if ($id_type === $type) {
$sel = 'selected';
}
echo "<option value=\"{$id_type}\"{$sel}>{$nom_type}</option>";
}
echo '</select></td></tr>';
////// Condition
echo "<tr class='head' border='1'>
<td>" . _AM_ADSLIGHT_TYPE_CONDITION . ' </td><td><select name="typecondition">';
$sql = 'SELECT nom_condition, id_condition FROM ' . $xoopsDB->prefix('adslight_condition') . ' ORDER BY nom_condition';
$result6 = $xoopsDB->query($sql);
if (!$xoopsDB->isResultSet($result6)) {
\trigger_error("Query Failed! SQL: $sql- Error: " . $xoopsDB->error(), E_USER_ERROR);
}
while ([$nom_condition, $id_condition] = $xoopsDB->fetchRow($result6)) {
$sel = '';
if ($id_condition === $typecondition) {
$sel = 'selected';
}
echo "<option value=\"{$id_condition}\"{$sel}>{$nom_condition}</option>";
}
echo '</select></td></tr>';
/////// Price
echo "<tr class='head' border='1'><td>" . _AM_ADSLIGHT_PRICE2 . " </td><td><input type=\"text\" name=\"price\" size=\"20\" value=\"{$price}\"> " . $helper->getConfig('adslight_currency_symbol');
//////// Price type
$sql = 'SELECT nom_price, id_price FROM ' . $xoopsDB->prefix('adslight_price') . ' ORDER BY nom_price';
$resultx = $xoopsDB->query($sql);
if (!$xoopsDB->isResultSet($resultx)) {
\trigger_error("Query Failed! SQL: $sql- Error: " . $xoopsDB->error(), E_USER_ERROR);
}
echo " <select name=\"typeprice\"><option value=\"{$id_price}\">{$nom_price}</option>";
while ([$nom_price, $id_price] = $xoopsDB->fetchRow($resultx)) {
$sel = '';
if ($id_price === $typeprice) {
$sel = 'selected';
}
echo "<option value=\"{$id_price}\"{$sel}>{$nom_price}</option>";
}
echo '</select></td>';
/////// Category
echo "<tr class='head' border='1'>
<td>" . _AM_ADSLIGHT_CAT2 . ' </td><td>';
$mytree->makeMySelBox('title', 'title', $cid);
echo "</td>
</tr><tr class='head' border='1'>
<td>" . _AM_ADSLIGHT_DESC . ' </td><td>';
// $options = ['desctext', $desctext, '100%', '200px', 'small'];
$options = [];
$options['name'] = 'desctext';
$options['value'] = $desctext;
$options['cols'] = '100%';
$options['width'] = '100%';
$options['height'] = '400px';
$options['rows'] = 10;
$wysiwyg_text_area = Utility::getEditor($helper, $options);
echo $wysiwyg_text_area->render();
echo '</td></tr>';
echo "<tr class='head' border='1'>
<td>" . _AM_ADSLIGHT_PHOTO1 . " </td><td><input type=\"text\" name=\"photo\" size=\"50\" value=\"{$photo}\"></td>
</tr><tr>";
$time = time();
echo "</tr><tr class='head' border='1'>
<td> </td><td><select name=\"op\">
<option value=\"modifyAds\"> " . _AM_ADSLIGHT_MODIF . '
<option value="ListingDel"> ' . _AM_ADSLIGHT_DEL . '
</select><input type="submit" value="' . _AM_ADSLIGHT_GO . '"></td>
</tr></table>';
echo '<input type="hidden" name="valid" value="Yes">';
echo "<input type=\"hidden\" name=\"lid\" value=\"{$lid}\">";
echo "<input type=\"hidden\" name=\"date_created\" value=\"{$time}\">";
echo "<input type=\"hidden\" name=\"submitter\" value=\"{$submitter}\">
</form><br>";
echo '</fieldset><br>';
xoops_cp_footer();
}
}
# function modifyAds
#####################################################
/**
* @param $lid
* @param $cat
* @param $title
* @param $status
* @param $expire
* @param $type
* @param $desctext
* @param $tel
* @param $price
* @param $typeprice
* @param $typecondition
* @param $date_created
* @param $email
* @param $submitter
* @param $town
* @param $country
* @param $contactby
* @param $premium
* @param $valid
* @param $photo
*/
function modifyAds(
$lid,
$cat,
$title,
$status,
$expire,
$type,
$desctext,
$tel,
$price,
$typeprice,
$typecondition,
$date_created,
$email,
$submitter,
$town,
$country,
$contactby,
$premium,
$valid,
$photo
): void {
global $xoopsDB, $myts;
$helper = Helper::getInstance();
$sql = 'UPDATE '
. $xoopsDB->prefix('adslight_listing')
. " SET cid='{$cat}', title='{$title}', status='{$status}', expire='{$expire}', type='{$type}', desctext='{$desctext}', tel='{$tel}', price='{$price}', typeprice='{$typeprice}', typecondition='{$typecondition}', date_created='{$date_created}', email='{$email}', submitter='{$submitter}', town='{$town}', country='{$country}', contactby='{$contactby}', premium='{$premium}', valid='{$valid}', photo='{$photo}' WHERE lid={$lid}";
$result = $xoopsDB->query($sql);
$helper->redirect('admin/modify_ads.php', 1, _AM_ADSLIGHT_ANNMOD);
}
/**
* Delete Listing
*
* @param int $lid
* @param string $photo
*/
function listingDel($lid, $photo): void
{
global $xoopsDB;
$helper = Helper::getInstance();
$lid = (int)$lid;
$sql = 'SELECT p.url FROM ' . $xoopsDB->prefix('adslight_listing') . ' l LEFT JOIN ' . $xoopsDB->prefix('adslight_pictures') . " p ON l.lid=p.lid WHERE l.lid={$lid}";
$result2 = $xoopsDB->query($sql);
if (!$xoopsDB->isResultSet($result2)) {
\trigger_error("Query Failed! SQL: $sql- Error: " . $xoopsDB->error(), E_USER_ERROR);
}
while ([$purl] = $xoopsDB->fetchRow($result2)) {
if ($purl) {
$destination = XOOPS_ROOT_PATH . '/uploads/adslight';
if (is_file("{$destination}/{$purl}")) {
unlink("{$destination}/{$purl}");
}
$destination2 = XOOPS_ROOT_PATH . '/uploads/adslight/thumbs';
if (is_file("{$destination2}/thumb_{$purl}")) {
unlink("{$destination2}/thumb_{$purl}");
}
$destination3 = XOOPS_ROOT_PATH . '/uploads/adslight/midsize';
if (is_file("{$destination3}/resized_{$purl}")) {
unlink("{$destination3}/resized_{$purl}");
}
$sql = 'DELETE FROM ' . $xoopsDB->prefix('adslight_pictures') . " WHERE lid={$lid}";
$xoopsDB->query($sql);
}
}
$sql = 'DELETE FROM ' . $xoopsDB->prefix('adslight_listing') . " WHERE lid={$lid}";
$xoopsDB->query($sql);
$helper->redirect('admin/modify_ads.php', 1, _AM_ADSLIGHT_ANNDEL);
}
#####################################################
#####################################################
//@todo REMOVE THIS ASAP. This code is extremely unsafe
foreach ($_POST as $k => $v) {
${$k} = $v;
}
$cid = Request::getInt('cid', 0, 'POST');
$contactby = Request::getInt('contactby', 0, 'POST');
$country = Request::getString('country', '', 'POST');
$date_created = Request::getInt('date_created', time(), 'POST');
$desctext = Request::getText('Description', '', 'POST');
$email = Request::getString('email', '', 'POST');
$expire = Request::getInt('expire', 14, 'POST');
$lid = Request::getInt('lid', 0, 'POST');
$op = Request::getCmd('op', '', 'POST');
$photo = Request::getString('photo', '', 'POST');
$premium = Request::getInt('premium', 0, 'POST');
$price = Request::getFloat('price', 0.00, 'POST');
$status = Request::getInt('status', 0, 'POST');
$submitter = Request::getInt('submitter', 0, 'POST');
$tel = Request::getString('tel', '', 'POST');
$title = Request::getString('title', '', 'POST');
$town = Request::getString('town', '', 'POST');
$type = Request::getInt('type', 0, 'POST');
$typecondition = Request::getInt('typecondition', 0, 'POST');
$typeprice = Request::getInt('typeprice', 0, 'POST');
$valid = Request::getString('valid', '', 'POST');
$pa = Request::getString('pa', '', 'GET');
$lid = Request::getInt('lid', 0);
$op = Request::getString('op', '');
switch ($op) {
case 'IndexView':
indexView($lid);
break;
case 'ListingDel':
listingDel($lid, $photo);
break;
case 'modifyAd':
modifyAd($lid);
break;
case 'modifyAds':
modifyAds(
$lid,
$cid,
$title,
$status,
$expire,
$type,
$desctext,
$tel,
$price,
$typeprice,
$typecondition,
$date_created,
$email,
$submitter,
$town,
$country,
$contactby,
$premium,
$valid,
$photo
);
break;
default:
index();
break;
}