3 && ctype_alnum($username)) { $sql = "SELECT user_login FROM $tables[user] WHERE user_login='".$username."' AND user_status > 1"; $sql_result = mysqli_query($mlink,$sql); $sql_numrow = mysqli_num_rows($sql_result); mysqli_free_result($sql_result); if ($sql_numrow == 0) { return true; } else { $check_cmsusername_msg = $ddmsg["user_loginexist"]; return false; } } $check_cmsusername_msg = "3".$ddmsg["global_htmlminchar"].", ".$ddmsg["user_logine"]; return false; } // function formatBytes($bytes, $precision = 2) { $units = array('B', 'KB', 'MB', 'GB', 'TB'); $bytes = max($bytes, 0); $pow = floor(($bytes ? log($bytes) : 0) / log(1024)); $pow = min($pow, count($units) - 1); // Uncomment one of the following alternatives $bytes /= pow(1024, $pow); // $bytes /= (1 << (10 * $pow)); return round($bytes, $precision) . ' ' . $units[$pow]; } function formatmoney($uang,$comma=0,$id="",$back="",$none="") { $uang = trim($uang); if ($uang > 0) { $rupiah = "$id ". number_format((float)$uang,$comma,".",","); } else if ($uang < 0) { $rupiah = "$id ". number_format((float)$uang,$comma,".",","); } else { $rupiah = $none; } if ($back) $rupiah .= $back; return $rupiah; } function vDatetime($date,$format = 'Y-m-d H:i:s') { $dateTime = DateTime::createFromFormat($format, $date); if ($dateTime instanceof DateTime && $dateTime->format($format) == $date) { return $dateTime->getTimestamp(); } return false; } function vDateYmd($date,$format="Ymd") { $return = FALSE; if ($format=="dmY") { if (vDatetime($date,'d-m-Y')) { $return = TRUE; } } else { if (vDatetime($date,'Y-m-d')) { $return = TRUE; } } return $return; } function array_diff_assocrecursive($a, $b) { $difference=array(); $amer = $a+$b; foreach ($amer as $key=>$valmer) { if (isset($a[$key])) { if (is_array($a[$key])) { if (isset($b[$key])) { if (is_array($b[$key])) { $new_diff = array_diff_assocrecursive($a[$key],$b[$key]); if( !empty($new_diff) ) $difference[$key] = $new_diff; } } else { $difference[$key] = $a[$key]; } } else { if (!isset($b[$key])) { $difference[$key] = $a[$key]; } else { if ($a[$key] <> $b[$key]) { $difference[$key] = $a[$key]; } } } } else { if (isset($b[$key])) { if (is_array($b[$key])) { $difference[$key] = array(); } else { $difference[$key] = ""; } } } } return $difference; } class MyFormSess { var $formname; var $fromid; var $formpost; var $sessval = "upffv"; function savepost() { global $sessiondd; if (isset($_SESSION[$sessiondd][$this->sessval][$this->formname][$this->fromid])) { $a = $_SESSION[$sessiondd][$this->sessval][$this->formname][$this->fromid]; } else { $a = FALSE; } do { $this->fromid = md5(date('Y-m-d H:i:s')); } while ($a); $_SESSION[$sessiondd][$this->sessval][$this->formname][$this->fromid] = $this->formpost; return $this->fromid; } function getpost() { global $sessiondd; if (isset($_SESSION[$sessiondd][$this->sessval][$this->formname][$this->fromid])) { return $_SESSION[$sessiondd][$this->sessval][$this->formname][$this->fromid]; } } function clearpost() { global $sessiondd; if (isset($_SESSION[$sessiondd][$this->sessval][$this->formname][$this->fromid])) { unset($_SESSION[$sessiondd][$this->sessval][$this->formname][$this->fromid]); } } } function check_actdis($key) { global $actdis,$ae_msg,$f_red,$ddmsg,$insql; $check_status = FALSE; if (isset($_POST[$key])) { if (isset($actdis[$_POST[$key]]) AND $actdis[$_POST[$key]]) { $check_status = TRUE; } } if ($check_status) { $insql[$key] = $_POST[$key]; } else { $ae_msg[] = $ddmsg["global_htmlnooption"]; $f_red[] = "#".$key; } } function check_defopt($options,$key,$varin="insql") { global $ae_msg,$f_red,$ddmsg,$$varin; if (!isset($$varin) OR !is_array($$varin)) { $$varin = array(); } $check_status = FALSE; if (isset($_POST[$key])) { if (isset($options[$_POST[$key]]) AND $options[$_POST[$key]]) { $check_status = TRUE; } } if ($check_status) { $data = array(); $data[$key] = $_POST[$key]; $$varin = array_merge($$varin,$data); } else { $ae_msg[] = $ddmsg["global_htmlnooption"]; $f_red[] = "#".$key; } } function html_selectyesno($val,$name,$id="",$class="",$htmladd="") { global $yesno,$ddmsg; ?> ]*?>.*?@si', // Strip out javascript '@<[\/\!]*?[^<>]*?>@si', // Strip out HTML tags '@([\r\n])[\s]+@', // Strip out white space '@&(quot|#34);@i', // Replace HTML entities '@&(amp|#38);@i', '@&(lt|#60);@i', '@&(gt|#62);@i', '@&(nbsp|#160);@i', '@&(iexcl|#161);@i', '@&(cent|#162);@i', '@&(pound|#163);@i', '@&(copy|#169);@i', '@&#(\d+);@'); // evaluate as php $replace = array (' ', ' ', '\1', '"', '&', '<', '>', ' ', chr(161), chr(162), chr(163), chr(169), 'chr(\1)'); $text = preg_replace($search, $replace, $text); if ( strlen($text) > $count) $text = substr($text,0,$count).".."; $text = htmlspecialchars($text, ENT_QUOTES); return $text; } function get_htmllist_td($viewcol,$listselect,$valist,$amsgdel=array()) { global $colview,$msg_del; $amsgdel = array_flip($amsgdel); $msg_del = ""; ob_start(); foreach ($viewcol as $colkey=>$colval) { $colval = $colview[$listselect][$colkey]; if (isset($colval[1]) AND !is_array($colval[1])) { $tmp=array($colval[1]); } else { $tmp=$colval[1]; } foreach ($tmp as $key=>$val) { $colval[1] = $val; # $ct5 = ""; if (isset($colval[5])) { if (is_array($colval[5])) { $ct5 = $colval[5][$key]; } else { $ct5 = $colval[5]; } } # $ct6 = ""; if (isset($colval[6])) { if (is_array($colval[6])) { $ct6 = $colval[6][$key]; } else { $ct6 = $colval[6]; } } if (isset($colval[0]) AND isset($colval[1]) AND isset($valist[$colval[1]])) { if (count($amsgdel) == 0 OR (isset($amsgdel[$colkey]))) { $msg_del .= "
".$colval[0]." = ".trim_title(strip_tags($valist[$colval[1]]),100); # Delete Message } } ?>$colval) { if (isset($colview[$listselect][$colkey])) { $colval = $colview[$listselect][$colkey]; ?>" ; } else { return "{$time}" ; } } function viewhlm($total,$vitot,$realpagenum,$jmlpage,$viewpage=5,$csspage="jpage") { global $dddesc; if ($viewpage < 1 ) { $viewpage = 10; } $xpage = ceil($realpagenum/$viewpage); $pagestart = (($xpage-1)*$viewpage)+1; $pageend = ($xpage*$viewpage); if ($jmlpage <= $pageend) { $pageend = $jmlpage; $nextpage = FALSE; } else { $nextpage = TRUE; $nextnmbr = $pageend+1; } if ($xpage > 1) { $prevpage = TRUE; $prevnmbr = $pagestart-1; } else { $prevpage = FALSE; } $url = ""; foreach ($_GET as $key => $value) { if($key <> "pagenum") { if (is_array($value)) { foreach ($value as $a=>$b) { $url .= $key."%5B".$a."%5D=".$b."&"; } } else { $url .= $key."=".$value."&"; } } } $url = substr(trim($url),0,-1); if ($jmlpage > 1 ){ $result = '
Data : '.$vitot.' of '.$total.' '.$dddesc["numbering_first"].''; if ($prevpage) { $result .= ' '.$dddesc["numbering_before"].''; } for ($i = $pagestart; $i <= $pageend; $i++) { if ($i == $realpagenum) { $result .= ''.$i.''; } else { $result .= ''.$i.''; } } $result .= ''; if ($nextpage) { $result .= ''.$dddesc["numbering_next"].' '; } $result .= ''.$dddesc["numbering_last"].'
'; } else { $result = '
Total Data : '.$total.'
'; ?> 0 ) { $sql = $sql." limit $startfrom,$viewlist"; } $sqlview = "SELECT SQL_CALC_FOUND_ROWS ".substr($sql,6); $view_table = $mlink->query($sqlview); if ($view_table) { $sqlcount = "SELECT FOUND_ROWS();"; $sqlrcount = $mlink->query($sqlcount); if (isset($sqlrcount) AND $sqlrcount) { $view_total = mysqli_fetch_array($sqlrcount, MYSQLI_NUM); $view_total = $view_total[0]; } if ($viewlist > 0) { $jmlpage = ceil($view_total/$viewlist); } if ($view_table AND $view_total) { $number = $startfrom; while ($row = mysqli_fetch_assoc($view_table)) { $row["listnumber"] = $number; $list [] = $row; $number++; $vitot++; } } } else { $view_total = $mlink->error; } $result["list"] = $list; $result["page"] = viewhlm($view_total,$vitot,$gethlm,$jmlpage,$viewpage,$csspage); if (is_numeric($view_total) AND !$view_total) { $view_total = $ddmsg["global_dataempty"]; } $result["total"] = $view_total; $result["view"] = $vitot; $result["pagenum"] = $gethlm; return $result; } function upin_uscook($mlink,$varname,$varvalue) { global $tables,$active_dduser; if (!$active_dduser["user_id"]) $active_dduser["user_id"] = 0; if ($varname) { $sql = "SELECT * FROM $tables[uscook] WHERE uscook_userid='$active_dduser[user_id]' AND uscook_varname = '$varname'"; $editrow = check_rowexists($mlink,$sql); if (is_array($varvalue)) { $varvalue = json_encode($varvalue); } $varname = addSlashes($varname); $varvalue = addSlashes($varvalue); if (!$editrow) { $sql="INSERT INTO $tables[uscook] (uscook_userid,uscook_varname,uscook_varvalue) values('$active_dduser[user_id]','$varname','$varvalue');"; } else { $sql="UPDATE $tables[uscook] SET uscook_varvalue='$varvalue' WHERE uscook_id='$editrow[uscook_id]';"; } $resultsql = mysqli_query($mlink,$sql); } return $resultsql; } function filter_session($filter,$defaultview=3) { global $colview,$viewcol,$viewcotd,$viewcolall,$allcolview,$sessiondd; # if (isset($_GET["viewcol_id"])) { if ($_GET["viewcol_id"] AND !is_array($_GET["viewcol_id"])) { $_GET["viewcol_id"] = explode(",",$_GET["viewcol_id"]); } $_POST["viewcol_id"] = $_GET["viewcol_id"]; } # if (!isset($colview[$filter])) $colview[$filter] = array(); $collums = $colview[$filter]; if ((!isset($_POST["viewcol_id"]) OR !$_POST["viewcol_id"]) AND $_POST) $_POST["viewcol_id"] = $defaultview; if (isset($_POST["viewcol_id"]) AND is_array($_POST["viewcol_id"])) $_SESSION[$sessiondd]["sscook"]["$filter"]["ddlist"] = implode(",",$_POST["viewcol_id"]); if (isset($_SESSION[$sessiondd]["sscook"]["$filter"]["ddlist"]) AND $_SESSION[$sessiondd]["sscook"]["$filter"]["ddlist"] AND !is_array($_SESSION[$sessiondd]["sscook"]["$filter"]["ddlist"])) $viewcol = explode(",",$_SESSION[$sessiondd]["sscook"]["$filter"]["ddlist"]); $tmp = array(); if(is_array($viewcol)) foreach ($viewcol as $key=>$val) { if (isset($collums[$val]) AND is_array($collums[$val]) AND $collums[$val][1]) $tmp[$val] = $val; } $viewcol = $tmp; if (count($viewcol) == 0) { if (!is_array($defaultview)) { $i=$defaultview; if (is_array($collums)) foreach ($collums as $ckey=>$cval) { $viewcol["$ckey"]= $ckey; $i--; if ($i==0) break; } } else { foreach ($defaultview as $val) { $viewcol["$val"]= $val; } } } if (isset($allcolview[$filter]) AND is_array($allcolview[$filter])) { $always = array_flip($allcolview[$filter]); $tmp=array(); foreach ($collums as $key=>$val) { if (isset($always[$key]) OR isset($viewcol[$key])) { $tmp[$key]= $key; } } $viewcol = $tmp; } #counttd $viewcotd = 0; foreach ($viewcol as $val) { if (isset($collums[$val]) AND is_array($collums[$val][1])) { $viewcotd = $viewcotd + count($collums[$val][1]); } else { $viewcotd++; } } $_SESSION[$sessiondd]["sscook"][$filter]["ddlist"] = implode(",",$viewcol); if (count($collums) == count($viewcol)) { $viewcolall = TRUE; } } function access_jaxsubpage($subacc) { global $active_dduser,$ddmsg; $subaccmod = $_GET["mod"]."_".$_GET["page"]."_".$subacc; if (isset($active_dduser["privil_access"][$subaccmod]) OR isset($active_dduser["privil_access"][$subacc]) OR $active_dduser["user_id"] == "1" ) { } else { echo "noaccess"; exit; } } function access_checkTF($subacc) { global $active_dduser,$ddmsg; $subaccmodfr = ""; if (isset($_GET["frpa"]) AND $_GET["frpa"]) { $subaccmodfr = $_GET["mod"]."_".$_GET["frpa"]."_".$subacc; } $subaccmod = $_GET["mod"]."_".$subacc; if ((isset($active_dduser["privil_access"][$subaccmodfr]) AND $subaccmodfr) OR isset($active_dduser["privil_access"][$subaccmod]) OR isset($active_dduser["privil_access"][$subacc]) OR $active_dduser["user_id"] == "1" ) { return TRUE; } else { return FALSE; } } function error_msg($section,$msg) { global $sessiondd; if (!isset($_SESSION[$sessiondd]["rmsg"][$section])) $_SESSION[$sessiondd]["rmsg"][$section] = ""; $_SESSION[$sessiondd]["rmsg"][$section] .= $msg."\n"; } function eprin_msg($section) { global $sessiondd; if (isset($_SESSION[$sessiondd]["rmsg"][$section]) AND $_SESSION[$sessiondd]["rmsg"][$section]) { ?>
$valacc) { $ddmenua[$module]["subaccess"][$module."_".$keyacc] = $valacc; } } unset($saccess); } } } return $ddmenua; } function list_file($dir,$listDirectories=false, $skipDots=true) { $dirArray = array(); if (substr($dir,-1) <> "/") $dir .= "/"; if (is_dir("$dir")) { if ($handle = opendir($dir)) { while (false !== ($file = readdir($handle))) { if ($file != "." && $file != ".." || $skipDots == false) { #added the $dir. in this line if(!$listDirectories && is_dir($dir.$file)) { continue; } else { $dirArray[filemtime($dir.$file).basename($file)] = basename($file); } } } closedir($handle); } krsort($dirArray); } return $dirArray; } function list_folder($dir,$listDirectories=false, $skipDots=true) { $dirArray = array(); if (substr($dir,-1) <> "/") $dir .= "/"; if (is_dir("$dir")) { if ($handle = opendir($dir)) { while (false !== ($file = readdir($handle))) { if ($file != "." && $file != ".." || $skipDots == false) { #added the $dir. in this line if($listDirectories == false && !is_dir($dir.$file)) { continue; } array_push($dirArray,basename($file)); } } closedir($handle); } } asort($dirArray); return $dirArray; } function get_ddvar($mlink) { global $ddvar,$tables; if (isset($tables["var"])) { $sqlquery = "select * from $tables[var]"; $sql_result = mysqli_query($mlink, $sqlquery); if ($sql_result) { while ($row = mysqli_fetch_assoc($sql_result)) { $ddvar["$row[var_name]"] = $row["var_value"]; } } } } function get_trigger($mlink,$website) { $tables = array(); $sqlquery = "show triggers like '$website%'"; $sql_result = mysqli_query($mlink,$sqlquery); if ($sql_result) while ($resultrow = mysqli_fetch_assoc($sql_result)) { if(preg_match("/".$website."([0-9,a-z,A-Z,_]{0,})/",$resultrow["Trigger"],$tmp)) { $tables[$tmp[1]] = $tmp[0]; } } return $tables; } function get_trigger_newold ($trigcol,$add="new") { $tmp = explode(",",$trigcol); $r = array(); foreach ($tmp as $key=>$val) { $val = trim($val); if ($val) { $r [] = $add.".".$val; } } return implode(",",$r); } function get_tables($mlink,$website) { $tables = array(); $sqlquery = "show tables like '$website%'"; $sql_result = mysqli_query($mlink,$sqlquery); if ($sql_result) while ($resultrow = mysqli_fetch_array($sql_result)) { if(preg_match("/".$website."([0-9,a-z,A-Z,_]{0,})/",$resultrow[0],$tmp)) { $tables[$tmp[1]] = $tmp[0]; } } return $tables; } function trim_deep($value) { $value = is_array($value) ? array_map('trim_deep', $value) : trim($value); return $value; } function addslashes_deep($value) { $value = is_array($value) ? array_map('addslashes_deep', $value) : addSlashes($value); return $value; } class Myencript { public $encriptkey = "/51:^&X2~D(DEFz1%OIG41uj#4]H?xBS"; private $OPENSSL_CIPHER_NAME = "aes-128-cbc"; //Name of OpenSSL Cipher private $CIPHER_KEY_LEN = 16; //128 bits protected function safe_b64encode($string) { $data = base64_encode($string); $data = str_replace(array('+','/','='),array('-','_',''),$data); return $data; } protected function safe_b64decode($string) { $data = str_replace(array('-','_'),array('+','/'),$string); $mod4 = strlen($data) % 4; if ($mod4) { $data .= substr('====', $mod4); } return base64_decode($data); } protected function safe_key($string) { $lenstr = strlen($string); $val = ""; for($i=0;$i<$lenstr;$i+=2) { $val .= substr($string,$i,1); } return $val; } protected function safe_iv($string) { $lenstr = strlen($string); $val = ""; for($i=1;$i<$lenstr;$i+=2) { $val .= substr($string,$i,1); } return $val; } public function my_encode($value,$safeurl=TRUE){ if(!$value){return false;} if (strlen($this->encriptkey) == 32) { $key = $this->safe_key($this->encriptkey); $iv = $this->safe_iv($this->encriptkey); if (strlen($key) < $this->CIPHER_KEY_LEN) { $key = str_pad($key, $this->CIPHER_KEY_LEN, "0"); //0 pad to len 16 } else if (strlen($key) > $this->CIPHER_KEY_LEN) { $key = substr($str, 0, $this->CIPHER_KEY_LEN); //truncate to 16 bytes } $encodedEncryptedData = base64_encode(openssl_encrypt($value, $this->OPENSSL_CIPHER_NAME, $key, OPENSSL_RAW_DATA, $iv)); $encodedIV = base64_encode($iv); if ($safeurl) { $encryptedPayload = trim($this->safe_b64encode($encodedEncryptedData.":".$encodedIV)); } else { $encryptedPayload = $encodedEncryptedData.":".$encodedIV; } return $encryptedPayload; } else { return false; } } public function my_decode($value,$safeurl=TRUE){ if(!$value){return false;} if (strlen($this->encriptkey) == 32) { $key = $this->safe_key($this->encriptkey); $iv = $this->safe_iv($this->encriptkey); if (strlen($key) < $this->CIPHER_KEY_LEN) { $key = str_pad($key, $this->CIPHER_KEY_LEN, "0"); //0 pad to len 16 } else if (strlen($key) > $this->CIPHER_KEY_LEN) { $key = substr($str, 0, $this->CIPHER_KEY_LEN); //truncate to 16 bytes } if ($safeurl) { $crypttext = $this->safe_b64decode($value); } else { $crypttext = $value; } $parts = explode(':', $crypttext); //Separate Encrypted data from iv. $parts[0] = isset($parts[0]) ? $parts[0] : ""; $parts[1] = isset($parts[1]) ? $parts[1] : ""; $decryptedData = openssl_decrypt(base64_decode($parts[0]), $this->OPENSSL_CIPHER_NAME, $key, OPENSSL_RAW_DATA, base64_decode($parts[1])); return $decryptedData; } else { return false; } } } function get_client_ip() { $ipaddress = ''; if (isset($_SERVER['HTTP_CLIENT_IP']) AND $_SERVER['HTTP_CLIENT_IP']) $ipaddress = $_SERVER['HTTP_CLIENT_IP']; else if(isset($_SERVER['HTTP_X_FORWARDED']) AND $_SERVER['HTTP_X_FORWARDED']) $ipaddress = $_SERVER['HTTP_X_FORWARDED']; else if(isset($_SERVER['HTTP_FORWARDED_FOR']) AND $_SERVER['HTTP_FORWARDED_FOR']) $ipaddress = $_SERVER['HTTP_FORWARDED_FOR']; else if(isset($_SERVER['HTTP_FORWARDED']) AND $_SERVER['HTTP_FORWARDED']) $ipaddress = $_SERVER['HTTP_FORWARDED']; else if(isset($_SERVER['REMOTE_ADDR']) AND $_SERVER['REMOTE_ADDR']) $ipaddress = $_SERVER['REMOTE_ADDR']; else $ipaddress = 'UNKNOWN'; if (isset($_SERVER['HTTP_X_FORWARDED_FOR']) AND $_SERVER['HTTP_X_FORWARDED_FOR']) $ipaddress = $ipaddress.",".$_SERVER['HTTP_X_FORWARDED_FOR']; return $ipaddress; } function checkPassword_script($password1 = "password1",$password2 = "password2") { global $passscore; ?> $userid"; } $sqlquery = "SELECT user_email FROM $tables[user] WHERE user_email='".$email."' AND user_status > 1 $sqladd"; $sql_result = mysqli_query($mlink,$sqlquery); if ($sql_result) { $sql_numrow = mysqli_num_rows($sql_result); mysqli_free_result($sql_result); if ($sql_numrow == 0) { return true; } } } return false; } function check_password($strPassword) { $m_strUpperCase = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"; $m_strLowerCase = "abcdefghijklmnopqrstuvwxyz"; $m_strNumber = "0123456789"; $m_strCharacters = "!@#$%^&*?_~"; $nScore = 0; if (strlen($strPassword) == 0) { $nScore += 5; } elseif (strlen($strPassword) < 5) { $nScore += 5; } elseif (strlen($strPassword) > 4 && strlen($strPassword) < 8 ) { $nScore += 30; } elseif (strlen($strPassword) > 7) { $nScore += 50; } $nUpperCount = countContain($strPassword, $m_strUpperCase); // Letters $nLowerCount = countContain($strPassword, $m_strLowerCase); $nLowerUpperCount = $nUpperCount + $nLowerCount; if ($nUpperCount == 0 && $nLowerCount != 0) { $nScore += 10; } elseif ($nUpperCount != 0 && $nLowerCount != 0) { $nScore += 20; } $nNumberCount = countContain($strPassword, $m_strNumber); // Numbers if ($nNumberCount == 1) { $nScore += 10; } else if ($nNumberCount == 2) { $nScore += 15; } elseif ($nNumberCount >= 3) { $nScore += 20; } $nCharacterCount = countContain($strPassword, $m_strCharacters); // Characters if ($nCharacterCount == 1) { $nScore += 10; } elseif ($nCharacterCount > 1) { $nScore += 25; } if ($nNumberCount != 0 && $nLowerUpperCount != 0) { $nScore += 2; } // bonus if ($nNumberCount != 0 && $nLowerUpperCount != 0 && $nCharacterCount != 0) { $nScore += 3; } if ($nNumberCount != 0 && $nUpperCount != 0 && $nLowerCount != 0 && $nCharacterCount != 0) { $nScore += 5; } return $nScore; } function countContain($strPassword, $strCheck) { $characters = str_split($strPassword); $character_count = 0; if (strlen($strPassword) > 0 ) { foreach($characters as $character){ $character_count = $character_count + substr_count($strCheck, $character); } } return $character_count; } function mysqldd_in($mlink,$tname,$insql,$debug=FALSE) { global $tables; $tname = strtolower($tname); if (isset($tables[$tname]) AND $tables[$tname]) { $tabin = $tables[$tname]; } else { $tabin = $tname; } $insqlslash = array_map('addSlashes', $insql); $coloms = "("; $values = "values("; foreach ($insqlslash as $ksql => $vsql) { $coloms .= "`$ksql`,"; if ($vsql == "NOW()") { $values .= $vsql.","; } else if ($vsql == "NULL") { $values .= $vsql.","; } else { $values .= "'".$vsql."',"; } } $coloms = substr($coloms,0,-1).")"; $values = substr($values,0,-1).")"; $sql = "INSERT INTO ".$tabin." $coloms $values;"; $sql_result = mysqli_query($mlink,$sql); $return = array(); if(!$sql_result) { if ($debug) $return["error"] = $sql; else $return["error"] = mysqli_error($mlink); } else { $return["error"] = FALSE; $return ["id"] = mysqli_insert_id($mlink); } return $return; } function mysqldd_up($mlink,$tname,$checkvalue,$where,$debug=FALSE) { global $tables; $tname = strtolower($tname); if (isset($tables[$tname]) AND $tables[$tname]) { $tabin = $tables[$tname]; } else { $tabin = $tname; } #generate update sql $setsql=""; $checkvalue = array_map('addSlashes', $checkvalue); foreach ($checkvalue as $key=>$val) { if ($val == "NULL") { $setsql.= "`$key`=$val,"; } else { $setsql.= "`$key`='$val',"; } } $setsql = substr($setsql,0,-1); #update sql $sql = "UPDATE ".$tabin." SET $setsql WHERE $where"; if ($debug) { return $sql; } if (!mysqli_query($mlink,$sql)) { return mysqli_error($mlink); } } // function mysqldd_del($mlink,$tname,$where,$debug=FALSE) { global $tables; $tname = strtolower($tname); if (isset($tables[$tname]) AND $tables[$tname]) { $tabin = $tables[$tname]; } else { $tabin = $tname; } #delete sql $sql = "DELETE FROM ".$tabin." WHERE $where"; if ($debug) { echo $sql; exit; } if (!mysqli_query($mlink,$sql)) { return mysqli_error($mlink); } } // function upin_var($mlink,$insert_variabel,$inonly=FALSE) { global $tables,$active_dduser; $rval = array(); if (!$active_dduser["user_id"]) $active_dduser["user_id"] = 0; if (count($insert_variabel) > 0) { foreach ($insert_variabel as $key=>$val) { $sql = "SELECT * FROM $tables[var] WHERE BINARY var_name='$val[1]'"; $editrow = check_rowexists($mlink,$sql); $val = array_map('addSlashes', $val); if (!$editrow) { $sql="INSERT INTO $tables[var] (var_group,var_name,var_value,var_uid,var_udate,var_uip,var_hiscol) values('$val[0]','$val[1]','$val[2]',".$active_dduser["user_id"].",'".SYSTIME."','".CLNTIP."','instrig');"; } else { if (!$inonly) { $sql="UPDATE $tables[var] SET var_value='$val[2]', var_uid='".$active_dduser["user_id"]."', var_udate='".SYSTIME."', var_uip='".CLNTIP."' WHERE var_name='$val[1]';"; } } $resultsql = mysqli_query($mlink,$sql); if ($resultsql) { $rval[$key] = TRUE; } else { $rval[$key] = FALSE; } } } return $rval; } function check_rowexists($mlink,$sqlf,$pageredirect=FALSE) { global $ddmsg; $aresult = FALSE; $sql_result = mysqli_query($mlink,$sqlf); if ($sql_result) { $mresult = mysqli_fetch_assoc($sql_result); mysqli_free_result($sql_result); if (is_array($mresult)) { $aresult = $mresult; } } if ($pageredirect AND !$aresult) { error_msg("globerr",$ddmsg["global_sqliderror"]); header("Location:".DEFDD.$pageredirect); exit; } return $aresult; } function check_userlogin($mlink,$username, $md5_password){ global $tables,$appslogin,$appscode,$ddmsg,$sqlactivedd,$ddmaintenance,$ddmainteallowlogin; $result = FALSE; if ($appslogin == "LOCALSQL") { $username = addslashes($username); if(filter_var($username, FILTER_VALIDATE_EMAIL)) { $username = addslashes($username); $sql = "$sqlactivedd WHERE user_email='".$username."' AND user_pass='".$md5_password."' AND user_status > 1 limit 1;"; } else { $username = addslashes($username); $sql = "$sqlactivedd WHERE user_login='".$username."' AND user_pass='".$md5_password."' AND user_status > 1 limit 1;"; } $sql_result = mysqli_query($mlink,$sql); if ($sql_result) { $sql_numrow = mysqli_num_rows($sql_result); $sqlresult = mysqli_fetch_assoc($sql_result); mysqli_free_result($sql_result); if ($sql_numrow == 1 && $sqlresult["user_pass"] <> "") { $active_userinfo = $sqlresult; $sql = "SELECT * FROM $tables[userloginhis] WHERE userloginhis_userid=$active_userinfo[user_id] ORDER BY userloginhis_id DESC limit 1"; $sql_result = mysqli_query($mlink,$sql); if ($sql_result) { $sqlresult = mysqli_fetch_assoc($sql_result); mysqli_free_result($sql_result); $active_userinfo["userloginhis_lasttime"] = $sqlresult["userloginhis_lasttime"]; $active_userinfo["userloginhis_ip"] = $sqlresult["userloginhis_ip"]; $active_userinfo["userloginhis_agent"] = $sqlresult["userloginhis_agent"]; $active_userinfo["userloginhis_sid"] = $sqlresult["userloginhis_sid"]; $active_userinfo["userloginhis_inout"] = $sqlresult["userloginhis_inout"]; $active_userinfo["userloginhis_id"] = $sqlresult["userloginhis_id"]; } #privil $valaccess = json_decode(isset($active_userinfo["privil_val"]) ? $active_userinfo["privil_val"] : "",TRUE); if (is_array($valaccess)) foreach ($valaccess as $key=>$val) { $active_userinfo[$key] = $val; } # #check login if ($active_userinfo["user_id"] > 1) { if ($active_userinfo["privil_status"] <> 3) { $active_userinfo["user_status"] = 2; $active_userinfo["login_block"] = $ddmsg["privil_block"]; } else if ($active_userinfo["user_status"] <> 3) { $active_userinfo["user_status"] = 2; $active_userinfo["login_block"] = $ddmsg["user_block"]; } } else { $sql = "SELECT privil_id,privil_name FROM $tables[privil] WHERE privil_status > 1 ORDER BY privil_sort,privil_name ASC"; $privil = array(); $sql_result = mysqli_query($mlink,$sql); if ($sql_result) { while ($row = mysqli_fetch_assoc($sql_result)) { $privil[$row["privil_id"]] = $row["privil_id"]; } } $active_userinfo["privil_creallow"] = $privil; $active_userinfo["privil_name"] = "Root"; } if (isset($ddmaintenance) AND $ddmaintenance AND $active_userinfo["user_id"] > 1 AND !isset($ddmainteallowlogin[$active_userinfo["user_login"]])) { $active_userinfo["user_status"] = 2; $active_userinfo["login_block"] = $ddmsg["installation_ddmaintenance"]; } return $active_userinfo; } } } return $result; } function sqltoarray($mlink,$sql,$id="") { $result = array(); $sql_result = mysqli_query($mlink,$sql); if ($sql_result) { while ($row = mysqli_fetch_assoc($sql_result)) { if ($id) { $result[$row[$id]] = $row; } else { $result[] = $row;} } } return $result; } function check_loginexpired($time,$expired) { if ($expired == 0) { return TRUE; } if ($expired == "") { $expired = "1 hours"; } $timeexpired = time(); $timesystem = strtotime($time." + $expired"); if ( $timeexpired < $timesystem ) { return TRUE; } else { return FALSE; } } function html_fineupload($version="3.1.1") { global $renewscript; ?>