mirror of
https://github.com/lkddi/nexusphp.git
synced 2026-04-24 12:07:23 +08:00
fix report error, improve announce, add youtube tag
This commit is contained in:
+10
-10
@@ -40,7 +40,7 @@ if (isset($_GET['add_offer']) && $_GET["add_offer"]){
|
||||
print("<p>".$lang_offers['text_red_star_required']."</p>");
|
||||
|
||||
print("<div align=\"center\"><form id=\"compose\" action=\"?new_offer=1\" name=\"compose\" method=\"post\">".
|
||||
"<table width=940 border=0 cellspacing=0 cellpadding=5><tr><td class=colhead align=center colspan=2>".$lang_offers['text_offers_open_to_all']."</td></tr>\n");
|
||||
"<table width=100% border=0 cellspacing=0 cellpadding=5><tr><td class=colhead align=center colspan=2>".$lang_offers['text_offers_open_to_all']."</td></tr>\n");
|
||||
|
||||
$s = "<select name=type>\n<option value=0>".$lang_offers['select_type_select']."</option>\n";
|
||||
$cats = genrelist($browsecatmode);
|
||||
@@ -48,11 +48,11 @@ if (isset($_GET['add_offer']) && $_GET["add_offer"]){
|
||||
$s .= "<option value=".$row["id"].">" . htmlspecialchars($row["name"]) . "</option>\n";
|
||||
$s .= "</select>\n";
|
||||
print("<tr><td class=rowhead align=right><b>".$lang_offers['row_type']."<font color=red>*</font></b></td><td class=rowfollow align=left> $s</td></tr>".
|
||||
"<tr><td class=rowhead align=right><b>".$lang_offers['row_title']."<font color=red>*</font></b></td><td class=rowfollow align=left><input type=text name=name style=\"width: 650px;\" />".
|
||||
"<tr><td class=rowhead align=right><b>".$lang_offers['row_title']."<font color=red>*</font></b></td><td class=rowfollow align=left><input type=text name=name style=\"width: 99%;\" />".
|
||||
"</td></tr><tr><td class=rowhead align=right><b>".$lang_offers['row_post_or_photo']."</b></td><td class=rowfollow align=left>".
|
||||
"<input type=text name=picture style=\"width: 650px;\"><br />".$lang_offers['text_link_to_picture']."</td></tr>".
|
||||
"<input type=text name=picture style=\"width: 99%;\"><br />".$lang_offers['text_link_to_picture']."</td></tr>".
|
||||
"<tr><td class=rowhead align=right valign=top><b>".$lang_offers['row_description']."<b><font color=red>*</font></td><td class=rowfollow align=left>\n");
|
||||
textbbcode("compose","body",$body,false);
|
||||
textbbcode("compose","body",$body,false, 130, true);
|
||||
print("</td></tr><tr><td class=toolbox align=center colspan=2><input id=qr type=submit class=btn value=".$lang_offers['submit_add_offer']." ></td></tr></table></form><br />\n");
|
||||
stdfoot();
|
||||
die;
|
||||
@@ -85,7 +85,7 @@ if (isset($_GET['new_offer']) && $_GET["new_offer"]){
|
||||
|
||||
if (!empty($_POST['picture'])){
|
||||
$picture = unesc($_POST["picture"]);
|
||||
if(!preg_match("/^http:\/\/[^\s'\"<>]+\.(jpg|gif|png)$/i", $picture))
|
||||
if(!preg_match("/^https?:\/\/[^\s'\"<>]+\.(jpg|gif|png)$/i", $picture))
|
||||
stderr($lang_offers['std_error'], $lang_offers['std_wrong_image_format']);
|
||||
$pic = "[img]".$picture."[/img]\n";
|
||||
}
|
||||
@@ -355,10 +355,10 @@ if (isset($_GET["edit_offer"]) && $_GET["edit_offer"]) {
|
||||
print("<form id=\"compose\" method=\"post\" name=\"compose\" action=\"?id=".$id."&take_off_edit=1\">".
|
||||
"<table width=\"97%\" cellspacing=\"0\" cellpadding=\"3\"><tr><td class=\"colhead\" align=\"center\" colspan=\"2\">".$lang_offers['text_edit_offer']."</td></tr>");
|
||||
tr($lang_offers['row_type']."<font color=\"red\">*</font>", $s2, 1);
|
||||
tr($lang_offers['row_title']."<font color=\"red\">*</font>", "<input type=\"text\" style=\"width: 650px\" name=\"name\" value=\"".$title."\" />", 1);
|
||||
tr($lang_offers['row_post_or_photo'], "<input type=\"text\" name=\"picture\" style=\"width: 650px\" value='' /><br />".$lang_offers['text_link_to_picture'], 1);
|
||||
tr($lang_offers['row_title']."<font color=\"red\">*</font>", "<input type=\"text\" style=\"width: 99%\" name=\"name\" value=\"".$title."\" />", 1);
|
||||
tr($lang_offers['row_post_or_photo'], "<input type=\"text\" name=\"picture\" style=\"width: 99%\" value='' /><br />".$lang_offers['text_link_to_picture'], 1);
|
||||
print("<tr><td class=\"rowhead\" align=\"right\" valign=\"top\"><b>".$lang_offers['row_description']."<font color=\"red\">*</font></b></td><td class=\"rowfollow\" align=\"left\">");
|
||||
textbbcode("compose","body",$body,false);
|
||||
textbbcode("compose","body",$body, false, 130, true);
|
||||
print("</td></tr>");
|
||||
print("<tr><td class=\"toolbox\" style=\"vertical-align: middle; padding-top: 10px; padding-bottom: 10px;\" align=\"center\" colspan=\"2\"><input id=\"qr\" type=\"submit\" value=\"".$lang_offers['submit_edit_offer']."\" class=\"btn\" /></td></tr></table></form><br />\n");
|
||||
stdfoot();
|
||||
@@ -385,7 +385,7 @@ if (isset($_GET["take_off_edit"]) && $_GET["take_off_edit"]){
|
||||
|
||||
if (!empty($_POST['picture'])){
|
||||
$picture = unesc($_POST["picture"]);
|
||||
if(!preg_match("/^http:\/\/[^\s'\"<>]+\.(jpg|gif|png)$/i", $picture))
|
||||
if(!preg_match("/^https?:\/\/[^\s'\"<>]+\.(jpg|gif|png)$/i", $picture))
|
||||
stderr($lang_offers['std_error'], $lang_offers['std_wrong_image_format']);
|
||||
$pic = "[img]".$picture."[/img]\n";
|
||||
}
|
||||
@@ -708,7 +708,7 @@ if ($offeruptimeout_main)
|
||||
print("<li>".$lang_offers['text_rule_four_one']."<b>".($offeruptimeout_main / 3600)."</b>".$lang_offers['text_rule_four_two']."</li>\n");
|
||||
print("</ul></div>");
|
||||
if (get_user_class() >= $addoffer_class)
|
||||
print("<div align=\"center\" style=\"margin-bottom: 8px;\"><a href=\"?add_offer=1\">".
|
||||
print("<div align=\"right\" style=\"margin-bottom: 8px;\"><a href=\"?add_offer=1\">".
|
||||
"<b>".$lang_offers['text_add_offer']."</b></a></div>");
|
||||
print("<div align=\"center\"><form method=\"get\" action=\"?\">".$lang_offers['text_search_offers']." <input type=\"text\" id=\"specialboxg\" name=\"search\" /> ");
|
||||
$cats = genrelist($browsecatmode);
|
||||
|
||||
+3
-3
@@ -102,7 +102,7 @@ elseif ((isset($takesubtitleid)) && (isset($takereason)))
|
||||
elseif (isset($user))
|
||||
{
|
||||
int_check($user);
|
||||
if ($user == $CURUSER[id]) {
|
||||
if ($user == $CURUSER['id']) {
|
||||
stderr($lang_report['std_sorry'],$lang_report['std_cannot_report_oneself']);
|
||||
die;
|
||||
}
|
||||
@@ -200,7 +200,7 @@ elseif (isset($reportofferid))
|
||||
stderr($lang_report['std_error'],$lang_report['std_invalid_offer_id']);
|
||||
}
|
||||
$arr = mysql_fetch_array($res);
|
||||
stderr($lang_report['std_are_you_sure'], $lang_report['text_are_you_sure_offer']."<a href=\"offers.php?id=".$arr[id]."&off_details=1\"><b>".htmlspecialchars($arr['name'])."</b></a>".$lang_report['text_to_staff']."<br />".$lang_report['text_reason_note']."<br /><form method=post action=report.php><input type=hidden name=takereportofferid value=\"".htmlspecialchars($reportofferid)."\">".$lang_report['text_reason_is']."<input type=text style=\"width: 200px\" name=reason><input type=submit value=\"".$lang_report['submit_confirm']."\"></form>", false);
|
||||
stderr($lang_report['std_are_you_sure'], $lang_report['text_are_you_sure_offer']."<a href=\"offers.php?id=".$arr['id']."&off_details=1\"><b>".htmlspecialchars($arr['name'])."</b></a>".$lang_report['text_to_staff']."<br />".$lang_report['text_reason_note']."<br /><form method=post action=report.php><input type=hidden name=takereportofferid value=\"".htmlspecialchars($reportofferid)."\">".$lang_report['text_reason_is']."<input type=text style=\"width: 200px\" name=reason><input type=submit value=\"".$lang_report['submit_confirm']."\"></form>", false);
|
||||
}
|
||||
//////////OFFERT #2 END//////////
|
||||
|
||||
@@ -214,7 +214,7 @@ elseif (isset($reportrequestid))
|
||||
stderr($lang_report['std_error'],$lang_report['std_invalid_request_id']);
|
||||
}
|
||||
$arr = mysql_fetch_array($res);
|
||||
stderr($lang_report['std_are_you_sure'], $lang_report['text_are_you_sure_request']."<a href=\"viewrequests.php?id=".$arr[id]."&req_details=1\"><b>".htmlspecialchars($arr['request'])."</b></a>".$lang_report['text_to_staff']."<br />".$lang_report['text_reason_note']."<br /><form method=post action=report.php><input type=hidden name=takerequestid value=\"".htmlspecialchars($reportrequestid)."\">".$lang_report['text_reason_is']."<input type=text style=\"width: 200px\" name=reason><input type=submit value=\"".$lang_report['submit_confirm']."\"></form>", false);
|
||||
stderr($lang_report['std_are_you_sure'], $lang_report['text_are_you_sure_request']."<a href=\"viewrequests.php?id=".$arr['id']."&req_details=1\"><b>".htmlspecialchars($arr['request'])."</b></a>".$lang_report['text_to_staff']."<br />".$lang_report['text_reason_note']."<br /><form method=post action=report.php><input type=hidden name=takerequestid value=\"".htmlspecialchars($reportrequestid)."\">".$lang_report['text_reason_is']."<input type=text style=\"width: 200px\" name=reason><input type=submit value=\"".$lang_report['submit_confirm']."\"></form>", false);
|
||||
}
|
||||
//////////REQUEST #2 END//////////
|
||||
|
||||
|
||||
+2
-2
@@ -219,7 +219,7 @@ insert_tag(
|
||||
""
|
||||
);
|
||||
|
||||
/*
|
||||
|
||||
insert_tag(
|
||||
$lang_tags['text_youtube'],
|
||||
$lang_tags['text_youtube_description'],
|
||||
@@ -227,7 +227,7 @@ insert_tag(
|
||||
$lang_tags['text_youtube_example'],
|
||||
""
|
||||
);
|
||||
|
||||
/*
|
||||
insert_tag(
|
||||
$lang_tags['text_youku'],
|
||||
$lang_tags['text_youku_description'],
|
||||
|
||||
@@ -116,7 +116,7 @@ else {
|
||||
else $arr = mysql_fetch_assoc($res);
|
||||
stdhead($lang_viewrequests['page_title']);
|
||||
print("<h1 align=center id=top>{$lang_viewrequests['request']}-" . htmlspecialchars($arr["request"]) . "</h1>\n");
|
||||
print("<table width=940 cellspacing=0 cellpadding=5>\n");
|
||||
print("<table width=100% cellspacing=0 cellpadding=5>\n");
|
||||
$res = sql_query("SELECT * FROM resreq WHERE reqid ='" . $_GET["id"] . "'" . $limit) or sqlerr(__FILE__, __LINE__);
|
||||
tr($lang_viewrequests['basic_info'], get_username($arr['userid']) . $lang_viewrequests['created_at'] . gettime($arr["added"], true, false) . "\n", 1);
|
||||
tr($lang_viewrequests['reward'], $lang_viewrequests['newest_bidding'] . $arr['amount'] . " {$lang_viewrequests['original_bidding']}" . $arr["ori_amount"] . "\n", 1);
|
||||
@@ -200,10 +200,10 @@ else {
|
||||
<input type=hidden name=action value=takeedit >
|
||||
<input type=hidden name=reqid value=" . $_GET["id"] . " >
|
||||
");
|
||||
print("<table width=940 cellspacing=0 cellpadding=3><tr><td class=colhead align=center colspan=2>{$lang_functions['title_edit']}{$lang_viewrequests['request']}</td></tr>");
|
||||
print("<table width=100% cellspacing=0 cellpadding=3><tr><td class=colhead align=center colspan=2>{$lang_functions['title_edit']}{$lang_viewrequests['request']}</td></tr>");
|
||||
tr("{$lang_functions['col_name']}:", "<input name=request value=\"" . $arr["request"] . "\" size=134 ><br/>", 1);
|
||||
print("<tr><td class=rowhead align=right valign=top><b>{$lang_functions['std_desc']}:</b></td><td class=rowfollow align=left>");
|
||||
textbbcode("edit", "descr", $arr["descr"]);
|
||||
textbbcode("edit", "descr", $arr["descr"], false, 130, true);
|
||||
print("</td></tr>");
|
||||
print("</td></tr><tr><td class=toolbox align=center colspan=2><input id=qr type=submit class=btn value={$lang_functions['text_edit']}{$lang_viewrequests['request']} ></td></tr></table></form><br />\n");
|
||||
stdfoot();
|
||||
@@ -217,11 +217,11 @@ else {
|
||||
stdhead($lang_viewrequests['add_request']);
|
||||
print(
|
||||
"<form id=edit method=post name=edit action=viewrequests.php >\n<input type=hidden name=action value=takeadded >\n");
|
||||
print("<table width=940 cellspacing=0 cellpadding=3><tr><td class=colhead align=center colspan=2>{$lang_viewrequests['add_request']}</td></tr>\n");
|
||||
print("<table width=100% cellspacing=0 cellpadding=3><tr><td class=colhead align=center colspan=2>{$lang_viewrequests['add_request']}</td></tr>\n");
|
||||
tr("{$lang_functions['col_name']}:", "<input name=request size=134><br/>", 1);
|
||||
tr("{$lang_viewrequests['reward']}:", "<input name=amount size=11 value=2000>{$lang_viewrequests['add_request_desc']}<br/>", 1);
|
||||
print("<tr><td class=rowhead align=right valign=top><b>{$lang_functions['std_desc']}:</b></td><td class=rowfollow align=left>");
|
||||
textbbcode("edit", "descr", $arr["descr"]);
|
||||
textbbcode("edit", "descr", $arr["descr"], false, 130, true);
|
||||
print("</td></tr>");
|
||||
print("<tr><td class=toolbox style=vertical-align: middle; padding-top: 10px; padding-bottom: 10px; align=center colspan=2><input id=qr type=submit value={$lang_viewrequests['add_request']} class=btn /></td></tr></table></form><br />\n");
|
||||
|
||||
@@ -246,7 +246,7 @@ else {
|
||||
|
||||
print(
|
||||
"<form id=reply name=reply method=post action=viewrequests.php >\n<input type=hidden name=action value=message ><input type=hidden name=id value=" . $_GET["id"] . " >\n");
|
||||
print("<table width=940 cellspacing=0 cellpadding=3>\n");
|
||||
print("<table width=100% cellspacing=0 cellpadding=3>\n");
|
||||
|
||||
print("<tr><td class=rowfollow align=left>");
|
||||
if ($ruserid) {
|
||||
@@ -308,14 +308,14 @@ else {
|
||||
case "takeedit":
|
||||
{
|
||||
if (!is_numeric($_POST["reqid"])) stderr($lang_functions['std_error'], "{$lang_viewrequests['request_id_must_be_numeric']}<a href='viewrequests.php?action=edit&id=" . $_POST["reqid"] . "'>{$lang_functions['std_click_here_to_goback']}</a>", 0);
|
||||
$res = sql_query("SELECT * FROM requests WHERE id ='" . sqlesc( $_POST["reqid"]) . "'") or sqlerr(__FILE__, __LINE__);
|
||||
$res = sql_query("SELECT * FROM requests WHERE id =" . sqlesc( $_POST["reqid"])) or sqlerr(__FILE__, __LINE__);
|
||||
if (!$_POST["descr"]) stderr($lang_functions['std_error'], "{$lang_viewrequests['description_required']}<a href='viewrequests.php?action=edit&id=" . $_POST["reqid"] . "'>{$lang_functions['std_click_here_to_goback']}</a>", 0);
|
||||
if (!$_POST["request"]) stderr($lang_functions['std_error'], "{$lang_viewrequests['name_required']}<a href='viewrequests.php?action=edit&id=" . $_POST["reqid"] . "'>{$lang_functions['std_click_here_to_goback']}</a>", 0);
|
||||
if (mysql_num_rows($res) == 0) stderr($lang_functions['std_error'], "{$lang_viewrequests['request_deleted']}<a href='viewrequests.php'>{$lang_functions['std_click_here_to_goback']}</a>", 0);
|
||||
$arr = mysql_fetch_assoc($res);
|
||||
if ($arr["finish"] == "yes") stderr($lang_functions['std_error'], "{$lang_viewrequests['request_already_resolved']}<a href='viewrequests.php?action=view&id=" . $_POST["reqid"] . "'>{$lang_functions['std_click_here_to_goback']}</a>", 0);
|
||||
if ($arr['userid'] == $CURUSER['id'] || get_user_class() >= UC_UPLOADER) {
|
||||
sql_query("UPDATE requests SET descr = " . sqlesc($_POST["descr"]) . " , request = " . sqlesc($_POST["request"]) . " WHERE id ='" . sqlesc($_POST["reqid"]) . "'") or sqlerr(__FILE__, __LINE__);
|
||||
sql_query("UPDATE requests SET descr = " . sqlesc($_POST["descr"]) . " , request = " . sqlesc($_POST["request"]) . " WHERE id =" . sqlesc($_POST["reqid"])) or sqlerr(__FILE__, __LINE__);
|
||||
stderr($lang_functions['std_success'], "{$lang_viewrequests['edit_request_success']},<a href='viewrequests.php?action=view&id=" . $_POST["reqid"] . "'>{$lang_functions['std_click_here_to_goback']}</a>", 0);
|
||||
} else stderr($lang_functions['std_error'], "{$lang_functions['std_permission_denied']}<a href='viewrequests.php?action=view&id=" . $_POST["reqid"] . "'>{$lang_functions['std_click_here_to_goback']}</a>", 0);
|
||||
die;
|
||||
|
||||
Reference in New Issue
Block a user