89d495bc6f
Also had some adjustments to the dev cp so the adding updates file input is closer to the top of the page (for mrtech). git-svn-id: svn://10.0.0.236/branches/MOZILLA_UPDATE_1_0_BRANCH@201373 18797224-902f-48f8-a5cc-f745e15eee43
177 lines
7.0 KiB
PHP
Executable File
177 lines
7.0 KiB
PHP
Executable File
<?php
|
|
require_once('../core/init.php');
|
|
require_once('./core/sessionconfig.php');
|
|
$page_title = 'Mozilla Update :: Developer Control Panel :: Item Overview';
|
|
require_once(HEADER);
|
|
require_once('./inc_sidebar.php');
|
|
|
|
//Kill access to items this user doesn't own...
|
|
if ($_SESSION["level"] !=="admin") {
|
|
|
|
$id = escape_string($_GET["id"]);
|
|
if (!$id) {$id = escape_string($_POST["id"]); }
|
|
$sql = "SELECT `UserID` from `authorxref` TAX WHERE `ID` = '$id' AND `UserID` = '$_SESSION[uid]' LIMIT 1";
|
|
$sql_result = mysql_query($sql, $connection) or trigger_error("MySQL Error ".mysql_errno().": ".mysql_error()."", E_USER_NOTICE);
|
|
if (mysql_num_rows($sql_result)=="0") {
|
|
echo"<h1>Access Denied</h1>\n";
|
|
echo"You do not have access to this item.";
|
|
require_once(FOOTER);
|
|
exit;
|
|
}
|
|
}
|
|
?>
|
|
<?php
|
|
$id = escape_string($_GET["id"]);
|
|
$sql = "SELECT TM.ID, TM.Type, TM.GUID, TM.Name, TM.Homepage, TM.Description, TM.downloadcount, TM.TotalDownloads, TM.Rating, TU.UserEmail FROM `main` TM
|
|
LEFT JOIN authorxref TAX ON TM.ID = TAX.ID
|
|
INNER JOIN userprofiles TU ON TAX.UserID = TU.UserID
|
|
WHERE TM.ID = '$id' LIMIT 1";
|
|
$sql_result = mysql_query($sql, $connection) or trigger_error("MySQL Error ".mysql_errno().": ".mysql_error()."", E_USER_NOTICE);
|
|
$numresults = mysql_num_rows($sql_result);
|
|
$row = mysql_fetch_array($sql_result);
|
|
$v++;
|
|
$id = $row["ID"];
|
|
$type = $row["Type"];
|
|
$guid = $row["GUID"];
|
|
$name = $row["Name"];
|
|
$dateadded = $row["DateAdded"];
|
|
$dateupdated = $row["DateUpdated"];
|
|
$homepage = $row["Homepage"];
|
|
$description = nl2br($row["Description"]);
|
|
$downloadcount = $row["downloadcount"];
|
|
$totaldownloads = $row["TotalDownloads"];
|
|
$rating = $row["Rating"];
|
|
|
|
$i=""; $categories="";
|
|
$sql = "SELECT TC.CatName FROM `categoryxref` TCX
|
|
INNER JOIN categories TC ON TCX.CategoryID = TC.CategoryID
|
|
WHERE TCX.ID = '$id'";
|
|
$sql_result = mysql_query($sql, $connection) or trigger_error("MySQL Error ".mysql_errno().": ".mysql_error()."", E_USER_NOTICE);
|
|
$numresults = mysql_num_rows($sql_result);
|
|
while ($row = mysql_fetch_array($sql_result)) {
|
|
$i++;
|
|
$catname = $row["CatName"];
|
|
$categories .="$catname";
|
|
if ($i<$numresults) {$categories .=", ";}
|
|
|
|
}
|
|
?>
|
|
<div id="mainContent" class="right">
|
|
<h2>Item Overview :: <?php echo"$name"; ?></h2>
|
|
<?php
|
|
echo"<a href=\"listmanager.php?function=editmain&id=$id\">Edit $name</a><br>\n";
|
|
echo"$description<br>\n";
|
|
if ($guid) {echo"GUID: $guid<br>\n"; }
|
|
if ($homepage) {echo"Homepage: <a href=\"$homepage\">$homepage</a><br>\n";}
|
|
echo"Categories: $categories<br>\n";
|
|
|
|
?>
|
|
|
|
<h2>Add New Version of <?php echo"$name"; ?></h2>
|
|
<TABLE BORDER=0 CELLPADDING=2 CELLSPACING=2 ALIGN=CENTER STYLE="border: solid 0px #000000; width: 100%">
|
|
<FORM NAME="additem" METHOD="POST" ACTION="additem.php?function=additem2" enctype="multipart/form-data">
|
|
<INPUT NAME="type" TYPE="hidden" VALUE="<?php echo"$type"; ?>">
|
|
<TR><TD style="padding-left: 20px">
|
|
Your <?php echo"$typename"?> File:<BR>
|
|
<INPUT NAME="file" SIZE=40 TYPE="FILE"><BR>
|
|
<BR>
|
|
<INPUT NAME="button" TYPE="BUTTON" VALUE="Cancel" onclick="javascript:history.back()"> <INPUT NAME="submit" TYPE="SUBMIT" VALUE="Next »">
|
|
</TD></TR>
|
|
</FORM>
|
|
</TABLE>
|
|
|
|
<h2>Listed Versions</h2>
|
|
<?php
|
|
$approved_array = array("?"=>"Pending Approval", "YES"=>"Approved", "NO"=>"Denied", "DISABLED"=>"Disabled");
|
|
$sql = "SELECT vID, TV.Version, URI, OSName, approved FROM `version` TV
|
|
INNER JOIN os TOS ON TOS.OSID = TV.OSID
|
|
WHERE `ID`='$id' GROUP BY `URI` ORDER BY `Version` DESC";
|
|
$sql_result = mysql_query($sql, $connection) or trigger_error("MySQL Error ".mysql_errno().": ".mysql_error()."", E_USER_NOTICE);
|
|
while($row = mysql_fetch_array($sql_result)) {
|
|
$vid = $row["vID"];
|
|
$version = $row["Version"];
|
|
$uri = $row["URI"];
|
|
$filename = basename($row["URI"]);
|
|
$os = $row["OSName"];
|
|
$approved = $row["approved"];
|
|
$approved = $approved_array["$approved"];
|
|
|
|
echo"<h4><a href=\"listmanager.php?function=editversion&id=$id&vid=$vid\">Version $version</a> - $approved (<small>$filename</small>)</h4>\n";
|
|
|
|
if ($os !="ALL") {echo" - for $os"; }
|
|
}
|
|
?>
|
|
|
|
|
|
</div>
|
|
<div id="side" class="right">
|
|
<h2>Statistics</h2>
|
|
<img src="/images/download.png" border=0 height=32 width=32 alt="" class="iconbar">Downloads this Week: <?php echo"$downloadcount"; ?><br>
|
|
Total Downloads: <?php echo"$totaldownloads"; ?><BR>
|
|
<BR>
|
|
<img src="/images/ratings.png" border=0 height=34 width=34 alt="" class="iconbar">Rated: <?php echo"$rating"; ?> of 5<BR> <br>
|
|
<BR>
|
|
<?php
|
|
|
|
$sql = "SELECT CommentID FROM `feedback` WHERE ID = '$id'";
|
|
$sql_result = mysql_query($sql, $connection) or trigger_error("MySQL Error ".mysql_errno().": ".mysql_error()."", E_USER_NOTICE);
|
|
$num_comments = mysql_num_rows($sql_result);
|
|
?>
|
|
<img src="/images/edit.png" border=0 height=34 width=34 alt="" class="iconbar"><a href="commentsmanager.php?id=<?php echo"$id"; ?>">Comments: <?php echo"$num_comments"; ?></a><BR> <br>
|
|
|
|
<h2>Developer Comments</h2>
|
|
<?php
|
|
if ($_POST["submit"]=="Post Comments") {
|
|
$id = escape_string($_POST["id"]);
|
|
$comments = escape_string($_POST["comments"]);
|
|
if (checkFormKey()) {
|
|
$sql = "UPDATE `main` SET `devcomments`='$comments' WHERE `id`='$id'";
|
|
$sql_result = mysql_query($sql, $connection) or trigger_error("MySQL Error ".mysql_errno().": ".mysql_error()."", E_USER_NOTICE);
|
|
if ($sql_result) { echo"Developer Comments Updated...<br>\n"; }
|
|
}
|
|
}
|
|
|
|
$sql = "SELECT `devcomments` FROM `main` WHERE `id`='$id' LIMIT 1";
|
|
$sql_result = mysql_query($sql, $connection) or trigger_error("MySQL Error ".mysql_errno().": ".mysql_error()."", E_USER_NOTICE);
|
|
$row = mysql_fetch_array($sql_result);
|
|
$devcomments = $row["devcomments"];
|
|
|
|
?>
|
|
<form name="devcomments" method="post" action="itemoverview.php?id=<?php echo"$id"; ?>">
|
|
<?writeFormKey();?>
|
|
<input name="id" type="hidden" value="<?php echo"$id"; ?>">
|
|
<textarea name="comments" rows=10 cols=26><?php echo"$devcomments"; ?></textarea><br>
|
|
<input name="submit" type="submit" value="Post Comments"> <input name="reset" type="reset" value="Reset">
|
|
</form>
|
|
|
|
<h2><a href="previews.php?id=<?php echo"$id"; ?>">Previews</a></h2>
|
|
<?php
|
|
$sql = "SELECT * FROM `previews` TP WHERE `ID`='$id' AND `preview`='YES' ORDER BY `PreviewID` LIMIT 1";
|
|
$sql_result = mysql_query($sql, $connection) or trigger_error("MySQL Error ".mysql_errno().": ".mysql_error()."", E_USER_NOTICE);
|
|
while ($row = mysql_fetch_array($sql_result)) {
|
|
$i++;
|
|
$previewid = $row["PreviewID"];
|
|
$uri = $row["PreviewURI"];
|
|
$filename = basename($row["PreviewURI"]);
|
|
$filename_array[$i] = $filename;
|
|
$caption = $row["caption"];
|
|
$preview = $row["preview"];
|
|
list($src_width, $src_height, $type, $attr) = getimagesize(FILE_PATH.'/'.$uri);
|
|
|
|
echo"<a href=\"previews.php?id=$id\"><img src=\"$uri\" border=0 $attr alt=\"$caption\"></a><br>$caption\n";
|
|
}
|
|
if (mysql_num_rows($sql_result)=="0") {echo"<a href=\"previews.php?id=$id\">Add a Preview</a>...<br>\n"; }
|
|
?>
|
|
|
|
|
|
|
|
</div>
|
|
|
|
|
|
<!-- close #mBody-->
|
|
</div>
|
|
|
|
<?php
|
|
require_once(FOOTER);
|
|
?>
|