From f5853be3d3e5d63ac296f0d152008d358ab595dd Mon Sep 17 00:00:00 2001
From: Rubenwardy <anjayward@gmail.com>
Date: Mon, 17 Sep 2012 20:03:20 +0100
Subject: [PATCH] Overview Field added and a new Admin.php file

---
 addentry.php                      |  8 +++-
 admin.php                         | 75 +++++++++++++++++++++++++++++++
 api/3m/getmodbyname.php           |  2 +-
 editentry.php                     | 14 ++++++
 index.php                         |  2 +-
 scripts/addentry.php              |  8 +++-
 scripts/entry_adders_sql_safe.php |  1 +
 scripts/loadmods.php              | 15 ++++---
 viewmod.php                       | 10 ++---
 9 files changed, 119 insertions(+), 16 deletions(-)
 create mode 100644 admin.php

diff --git a/addentry.php b/addentry.php
index e7cd71b..c9eb91d 100644
--- a/addentry.php
+++ b/addentry.php
@@ -32,10 +32,16 @@ if (is_member_moderator($_SESSION['user'],$handle)==true){
 </table>
 </td>
 <tr>
+<td colspan="2">
+<br />
+Overview:* <input type="text" size=100 name="mod_ov" value="<?php echo $overview;?>">
+</td>
+</tr>
+<tr>
 
 <!--Description-->
 <td colspan="2">
-<p>* Description<Br /><textarea name="mod_desc" cols="105" rows="25">
+<p>Description:* <Br /><textarea name="mod_desc" cols="105" rows="25">
 <?php
 if ($desc==""){
 ?>
diff --git a/admin.php b/admin.php
new file mode 100644
index 0000000..8185cfd
--- /dev/null
+++ b/admin.php
@@ -0,0 +1,75 @@
+<?php
+include "scripts/setup.php";
+
+$page_title="Control Panel";
+require_login();
+
+include "scripts/pageheader.php";
+
+echo "<h1>Admin</h1>\n";
+
+if (is_member_moderator($_SESSION['user'],$handle)==false){
+   die ("You do not have admin or moderator position on this forum.");
+}
+
+$id=$_GET['id'];
+$mode=$_GET['mode'];
+
+if($mode=="owner"){
+
+  if(is_numeric($id)==false)
+     die("Value is not numeric!");
+
+  $res = mysql_query("SELECT * FROM mods WHERE mod_id=$id",$handle) or SQLerror("MySQL Query Error","Error on searching database.mods.mod_id for '$id'");
+  $hash = mysql_fetch_assoc($res);
+  
+  echo "<center><h2>Change owner of '{$hash['name']}'</h2>\n";
+
+  $owner=$_POST['owner'];
+  $ov=$_POST['override'];
+  $message="Change the owner of the entry <b>{$hash['name']}</b>";
+  if (!$owner==""){
+     $user = mysql_real_escape_string ($owner);
+     $ur = mysql_query("SELECT * FROM users WHERE name='$user'",$handle);
+     if (mysql_num_rows($ur)<1){
+       if ($ov==false){
+         $message="User '$owner' does not exist";
+       }else{
+         addUser($user,"temp_pass","temp_pass","temp@email.co.uk",$handle);
+         $ur = mysql_query("SELECT * FROM users WHERE name='$user'",$handle);
+         $user = mysql_fetch_array($ur);
+         $ow_id=$user[0];
+         mysql_query("UPDATE mods SET owner=$ow_id WHERE mod_id=$id",$handle)or die("error on setting owner");
+         header("location: viewmod.php?id=$id");
+       }
+     }else{
+        $user = mysql_fetch_array($ur);
+        $ow_id=$user[0];
+        mysql_query("UPDATE mods SET owner=$ow_id WHERE mod_id=$id",$handle)or die("error on setting owner");
+        header("location: viewmod.php?id=$id");
+     }
+  }
+
+  $q=0;
+  $q = mysql_query("SELECT * FROM users WHERE id=".$hash['owner']);
+  if ($q){
+      echo "<!--User is relative-->";
+      $qr = mysql_fetch_array($q) or print("");
+      $qr=$qr[1];
+  }else{
+      echo "<!--User is not relative-->";
+      $qr = $hash['owner'];
+  }
+
+  echo "$message<br /><br /><form method=\"post\" action=\"".curPageURL()."\">";
+  echo "<input type=\"text\" name=\"owner\" size=50 value=\"{$qr}\"><br /><br />";
+  echo "<input type=\"checkbox\" name=\"override\"> Create account if it does not exist.<br />";
+  echo "<br /><input type=\"submit\" value=\"Change\"></form></center>";
+}else{
+      echo "Welcome to the admin console.";
+}
+
+
+
+include "scripts/pagefooter.php";
+?>
\ No newline at end of file
diff --git a/api/3m/getmodbyname.php b/api/3m/getmodbyname.php
index 961b5fc..cde6171 100644
--- a/api/3m/getmodbyname.php
+++ b/api/3m/getmodbyname.php
@@ -10,7 +10,7 @@ $row = mysql_fetch_array($res) or die("error");
 
 echo "{{$row['basename']}}\n";
 echo "[description]\n";
-echo "{$row['description']}\n";
+echo "{$row['overview']}\n";
 echo "[release]\n";
 echo "{$row['3m_rele']}\n";
 echo "[deps]\n";
diff --git a/editentry.php b/editentry.php
index a46c401..f3247aa 100644
--- a/editentry.php
+++ b/editentry.php
@@ -51,6 +51,10 @@ $owner=$owar['name'];
 $desc=$_POST['mod_desc'];
 if ($desc=="")
    $desc=$row[4];
+   
+$overview=$_POST['mod_ov'];
+if ($overview=="")
+   $overview = $row[22];
 
 $tags=$_POST['mod_tags'];
 if ($tags=="")
@@ -85,6 +89,7 @@ if ($do==true){
   // 3m release (by Phitherek_)
   mysql_query("UPDATE mods SET 3m_rele='$mmmrel' WHERE name='$name'",$handle) or SQLerror("Error on 3m_specific:rel","");
   // End of Phitherek_' s code
+  mysql_query("UPDATE mods SET overview='$overview' WHERE name='$name'",$handle)or SQLerror("Error on overview","");
   mysql_query("UPDATE mods SET description='$desc' WHERE name='$name'",$handle) or SQLerror("Error on desc","");
   mysql_query("UPDATE mods SET tags='$tags' WHERE name='$name'",$handle)or SQLerror("Error on tags","");
   mysql_query("UPDATE mods SET license='$license' WHERE name='$name'",$handle)or SQLerror("Error on license","");
@@ -94,6 +99,7 @@ if ($do==true){
   mysql_query("UPDATE mods SET file='$file' WHERE name='$name'",$handle)or SQLerror("Error on file","");
   mysql_query("UPDATE mods SET depend='$depend' WHERE name='$name'",$handle)or SQLerror("Error on depend","");
   mysql_query("UPDATE mods SET basename='$basename' WHERE name='$name'",$handle)or SQLerror("Error on basename","");
+
   header("location: viewmod.php?id=$id");
   die("");
 }
@@ -124,6 +130,14 @@ Help: <a href="help/markup.php" target="_blank">Description Markup</a> - <a href
 </td>
 <tr>
 
+<!--Overview-->
+<tr>
+<td colspan="2">
+<br />
+Overview:* <input type="text" size=100 name="mod_ov" value="<?php echo $overview;?>">
+</td>
+</tr>
+
 <!--Description-->
 <tr>
 <td colspan="2">
diff --git a/index.php b/index.php
index 0775ddf..f5802fa 100644
--- a/index.php
+++ b/index.php
@@ -42,7 +42,7 @@ body {margin: 0px; padding: 0px;}
     <area shape="rect" coords="0,50,2,176" href="listing.php?id=texture" alt="">
 </map>
 <a href="search.php?id=sound"><img src="images/wp5533b116.gif" width="326" height="125" border="0" alt="" usemap="#map0" style="position:absolute;left:325px;top:212px;"></a>
-<br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br />
+<br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br />
 
 <?php
      include "scripts/pagefooter.php";
diff --git a/scripts/addentry.php b/scripts/addentry.php
index a309c95..6143488 100644
--- a/scripts/addentry.php
+++ b/scripts/addentry.php
@@ -18,6 +18,10 @@ if ($mmrel=="")
 $desc=$_POST['mod_desc'];
 if ($desc=="")
    return 0;
+   
+$overview=$_POST['mod_ov'];
+if ($overview=="")
+   return 0;
 
 //Tag
 $tags_type=$_POST['mod_tag_type'];
@@ -61,8 +65,8 @@ $tags = "$tags_type,$tags_msc,";
 if (entry_exists($name,$handle))
    return 1;
 //Substitute owner with ownerid (by Phitherek_)
-mysql_query("INSERT INTO mods (name,version,owner,description,tags,likes,dislikes,license,file,depend,basename,date_released,repotype,3m_rele)
-VALUES ('$name','$version',$ownerid,'$desc','$tags',0,0,'$license','$file','$depend','$basename','$date','$mmmrt','$mmmrel')");
+mysql_query("INSERT INTO mods (name,version,owner,description,tags,likes,dislikes,license,file,depend,basename,date_released,repotype,3m_rele,overview)
+VALUES ('$name','$version',$ownerid,'$desc','$tags',0,0,'$license','$file','$depend','$basename','$date','$mmmrt','$mmmrel','$overview')");
 //End of Phitherek_' s change
 
 $the_id=mysql_insert_id($handle);
diff --git a/scripts/entry_adders_sql_safe.php b/scripts/entry_adders_sql_safe.php
index 1203437..f45e3b8 100644
--- a/scripts/entry_adders_sql_safe.php
+++ b/scripts/entry_adders_sql_safe.php
@@ -10,4 +10,5 @@ $depend=mysql_real_escape_string($depend);
 $basename=mysql_real_escape_string($basename);
 $mmmrt=mysql_real_escape_string($mmmrt);
 $mmmrel=mysql_real_escape_string($mmmrel);
+$overview=mysql_real_escape_string($overview);
 ?>
\ No newline at end of file
diff --git a/scripts/loadmods.php b/scripts/loadmods.php
index 83cdeb0..a189b88 100644
--- a/scripts/loadmods.php
+++ b/scripts/loadmods.php
@@ -1,5 +1,5 @@
 <?php
-echo "<table width=\"100%\"><tr><th colspan=2>Mod Name</th><th>Populatity</th><th>Tags</th><th>License</th></tr>\n";
+echo "<table width=\"100%\"><tr><th colspan=2>Mod Name</th><th>Description</th><th width=200>Tags</th><th>Likes</th></tr>\n";
 $query= mysql_real_escape_string ($query);
 $res = mysql_query("SELECT * FROM mods WHERE tags LIKE '%$query%' ORDER BY likes DESC",$handle) or SQLerror("MySQL Query Error","Error on searching database.mods.tags for '$query'");
 
@@ -12,21 +12,24 @@ while ($hash = mysql_fetch_assoc($res)){
       }else{
          $bgcolor="#FFFFBD";
       }
-      
+
       // Owner name from id (by Phitherek_)
+
+      $name="";
       $q=0;
       $q = mysql_query("SELECT name FROM users WHERE id=".$hash['owner']);
       if ($q){
       $qr = mysql_fetch_array($q) or print("");
+      $name=$qr['name'];
       }
       // End of Phitherek_' s code
-      
+
       // Owner name instead of id (by Phitherek_)
-      echo "<tr bgcolor=\"$bgcolor\"><td width=16><img width=16 height=16 src=\"images/topicicon_read.jpg\" /></td><td><a href=\"viewmod.php?id={$hash['mod_id']}\">{$hash['name']}</a><br />by {$qr['name']}</td>";
+      echo "<tr bgcolor=\"$bgcolor\"><td width=16><img width=16 height=16 src=\"images/topicicon_read.jpg\" /></td><td><a href=\"viewmod.php?id={$hash['mod_id']}\">{$hash['name']}</a><br />by $name</td>";
       // End of Phitherek_' s change
-      echo "<td>{$hash['likes']}</td>";
+      echo "<td>{$hash['overview']}</td>";
       echo "<td>{$hash['tags']}</td>";
-      echo "<td>{$hash['license']}</td></tr>\n";
+      echo "<td>{$hash['likes']}</td></tr>\n";
 
       $alternate=1-$alternate;
 }
diff --git a/viewmod.php b/viewmod.php
index d1522c9..356bb21 100644
--- a/viewmod.php
+++ b/viewmod.php
@@ -30,11 +30,10 @@ include "scripts/pageheader.php";
 include "scripts/formatcode.php";
 
 
-
-if (is_member_moderator($_SESSION['user'],$handle) || $_SESSION['user']==$row[3]){
-//3m Release Increasing (by Phitherek_)
+if (is_member_moderator($_SESSION['user'],$handle)){
+$links="<a href=\"admin.php?mode=owner&id=$id\">Change Owner</a> - <a href=\"editentry.php?id=$id\">Edit</a> <a href=\"3mrelinc.php?id=$id\">Increase 3m Release</a> <a href=\"deleteentry.php?id=$id\">Delete</a>";
+}elseif ($_SESSION['user']==$row[3]){
 $links="<a href=\"editentry.php?id=$id\">Edit</a> <a href=\"3mrelinc.php?id=$id\">Increase 3m Release</a> <a href=\"deleteentry.php?id=$id\">Delete</a>";
-//End of Phitherek_' s change
 }else{
 $links="";
 }
@@ -43,8 +42,9 @@ echo "<table width=\"100%\"><tr bgcolor=\"#FFFFBD\"><td><a href=\"{$row[9]}\">Do
 echo "<h1 align=center>{$row[1]} - by <a href=\"user.php?name={$owner}\">{$owner}</a></h1></td>";     // Title and User Link
 echo "<td width=150>{$row[2]}</td></tr>";                                                               // Version
 echo "<tr><td colspan=2><div style=\"width:900px;text-wrap: suppress;\"><p>".formatbb($row[4])."</p></div></td>"; // Description
+
 if (is_logged_in()==true){
-echo "<td><a href=\"viewmod.php?id=$id&action=like\">+</a></td></tr>";   // Likes
+  echo "<td><a href=\"viewmod.php?id=$id&action=like\">+</a></td></tr>";   // Likes
 }else{
   echo "<td></td></tr>";   // Likes
 }