0) { $rowset = cpg_db_fetch_rowset($result); foreach ($rowset as $subcat) { $result = cpg_db_query("SELECT aid FROM {$CONFIG['TABLE_ALBUMS']} WHERE category = {$subcat['cid']}"); $album_count = mysql_num_rows($result); while ($row = mysql_fetch_array($result)) { $album_set_array[] = $row['aid']; } // while } if ($level > 1) thumb_get_subcat_data($subcat['cid'], $album_set_array, $level -1); } } /** * Main code */ if (isset($_GET['sort'])) $USER['sort'] = $_GET['sort']; if (isset($_GET['cat'])) $cat = (int)$_GET['cat']; if (isset($_GET['album'])) $album = $_GET['album']; if (isset($_POST['search'])) { // find out if a parameter has been submitted at all $allowed = array('title', 'caption', 'keywords', 'owner_name', 'filename', 'pic_raw_ip', 'pic_hrd_ip', 'user1', 'user2', 'user3', 'user4'); foreach ($allowed as $key) { if (isset($_POST[$key]) == TRUE) { $_POST['params'][$key] = $_POST[$key]; } } $USER['search'] = $_POST; $album = 'search'; } if (isset($_GET['search'])) { $USER['search']['search'] = $_GET['search']; } if (isset($_GET['page'])) { $page = max((int)$_GET['page'], 1); } else { $page = 1; } $breadcrumb = ''; $breadcrumb_text = ''; $cat_data = array(); $lang_meta_album_names['lastupby'] = $lang_meta_album_names['lastup']; $lang_meta_album_names['lastcomby'] = $lang_meta_album_names['lastcom']; if (is_numeric($album)) { $result = cpg_db_query("SELECT category, title, aid, keyword, description, alb_password_hint FROM {$CONFIG['TABLE_ALBUMS']} WHERE aid='$album'"); if (mysql_num_rows($result) > 0) { $CURRENT_ALBUM_DATA = mysql_fetch_array($result); $actual_cat = $CURRENT_ALBUM_DATA['category']; $CURRENT_ALBUM_KEYWORD = $CURRENT_ALBUM_DATA['keyword']; breadcrumb($actual_cat, $breadcrumb, $breadcrumb_text); $cat = - $album; } } elseif (isset($cat) && $cat) { // Meta albums, we need to restrict the albums to the current category if ($cat < 0) { $result = cpg_db_query("SELECT category, title, aid, keyword, description, alb_password_hint FROM {$CONFIG['TABLE_ALBUMS']} WHERE aid='" . (- $cat) . "'"); if (mysql_num_rows($result) > 0) { $CURRENT_ALBUM_DATA = mysql_fetch_array($result); $actual_cat = $CURRENT_ALBUM_DATA['category']; $CURRENT_ALBUM_KEYWORD = $CURRENT_ALBUM_DATA['keyword']; } $ALBUM_SET = 'AND aid IN (' . (- $cat) . ') ' . $ALBUM_SET; breadcrumb($actual_cat, $breadcrumb, $breadcrumb_text); $CURRENT_CAT_NAME = $CURRENT_ALBUM_DATA['title']; $CURRENT_ALBUM_KEYWORD = $CURRENT_ALBUM_DATA['keyword']; } else { $album_set_array = array(); if ($cat == USER_GAL_CAT) $where = 'category > ' . FIRST_USER_CAT; else $where = "category = '$cat'"; $result = cpg_db_query("SELECT aid FROM {$CONFIG['TABLE_ALBUMS']} WHERE $where"); while ($row = mysql_fetch_array($result)) { $album_set_array[] = $row['aid']; } // while if ($cat >= FIRST_USER_CAT) { $user_name = get_username($cat - FIRST_USER_CAT); $CURRENT_CAT_NAME = sprintf($lang_list_categories['xx_s_gallery'], $user_name); } else { $result = cpg_db_query("SELECT name FROM {$CONFIG['TABLE_CATEGORIES']} WHERE cid = '$cat'"); if (mysql_num_rows($result) == 0) cpg_die(CRITICAL_ERROR, $lang_errors['non_exist_cat'], __FILE__, __LINE__); $row = mysql_fetch_array($result); $CURRENT_CAT_NAME = $row['name']; } thumb_get_subcat_data($cat, $album_set_array, $CONFIG['subcat_level']); // Treat the album set if (count($album_set_array)) { $set = ''; foreach ($album_set_array as $album_id) $set .= ($set == '') ? $album_id : ',' . $album_id; $ALBUM_SET .= "AND aid IN ($set) "; } breadcrumb($cat, $breadcrumb, $breadcrumb_text); } } pageheader(isset($CURRENT_ALBUM_DATA) ? $CURRENT_ALBUM_DATA['title'] : $lang_meta_album_names[$album]); if ($breadcrumb) { if (!(strpos($CONFIG['main_page_layout'], "breadcrumb") === false)) { theme_display_breadcrumb($breadcrumb, $cat_data); } theme_display_cat_list($breadcrumb, $cat_data, ''); } /** * Function to draw the password box if the album is password protected */ function form_albpw() { global $lang_thumb_view, $CURRENT_ALBUM_DATA; $login_falied = starttable('-1', $lang_thumb_view['enter_alb_pass'], 2); if (isset($_POST['validate_album'])) { $login_failed = ' '.$lang_thumb_view['invalid_pass'].' '; } if (!empty($CURRENT_ALBUM_DATA['alb_password_hint'])) { echo << {$CURRENT_ALBUM_DATA['alb_password_hint']} EOT; } echo <<
{$lang_thumb_view['pass']}:
EOT; endtable(); } $valid = false; //flag to test whether the album is validated. if ($CONFIG['allow_private_albums'] == 0 || !in_array($album, $FORBIDDEN_SET_DATA)) { $valid = true; } elseif (isset($_POST['validate_album'])) { $password = $_POST['password']; $sql = "SELECT aid FROM " . $CONFIG['TABLE_ALBUMS'] . " WHERE alb_password='$password' AND aid='$album'"; $result = cpg_db_query($sql); if (mysql_num_rows($result)) { if (!empty($_COOKIE[$CONFIG['cookie_name'] . '_albpw'])) { $albpw = unserialize($_COOKIE[$CONFIG['cookie_name'] . '_albpw']); } $albpw[$album] = md5($password); $alb_cookie_str = serialize($albpw); setcookie($CONFIG['cookie_name'] . "_albpw", $alb_cookie_str); get_private_album_set($album); $valid = true; } else { // Invalid password $valid = false; } } else { $sql = "SELECT aid FROM " . $CONFIG['TABLE_ALBUMS'] . " WHERE aid='$album' AND alb_password != ''"; $result = cpg_db_query($sql); if (mysql_num_rows($result)) { // This album has a password. // Check whether the cookie is set for the current albums password if (!empty($_COOKIE[$CONFIG['cookie_name'] . '_albpw'])) { $alb_pw = unserialize($_COOKIE[$CONFIG['cookie_name'] . '_albpw']); // Check whether the alubm id in the cookie is same as that of the album id send by get if (isset($alb_pw[$album])) { $sql = "SELECT aid FROM " . $CONFIG['TABLE_ALBUMS'] . " WHERE MD5(alb_password)='{$alb_pw[$album]}' AND aid='{$album}'"; $result = cpg_db_query($sql); if (mysql_num_rows($result)) { $valid = true; //The album password is correct. Show the album details. get_private_album_set(); } } } } else { // Album with no password. Might be a private or normal album. Just set valid as true. $valid = true; } } $META_ALBUM_SET = $ALBUM_SET; //temporary assignment until we are sure we are keeping the $META_ALBUM_SET functionality. CPGPluginAPI::filter('post_breadcrumb',null); if (!$valid) { form_albpw(); } else { display_thumbnails($album, (isset($cat) ? $cat : 0), $page, $CONFIG['thumbcols'], $CONFIG['thumbrows'], true); } pagefooter(); ob_end_flush(); ?>