XoopsModules25x / apcal

admin/events.php

<?php
/*
 * You may not change or alter any portion of this comment or credits
 * of supporting developers from this source code or any supporting source code
 * which is considered copyrighted (c) material of the original comment or credit authors.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
 */

/**
 * @copyright   {@link http://xoops.org/ XOOPS Project}
 * @license     {@link http://www.fsf.org/copyleft/gpl.html GNU public license}
 * @package
 * @since
 * @author       XOOPS Development Team,
 * @author       GIJ=CHECKMATE (PEAK Corp. http://www.peak.ne.jp/)
 */

require_once __DIR__ . '/admin_header.php';
//require_once __DIR__ . '/../../../include/cp_header.php';
require_once __DIR__ . '/../class/APCal.php';
require_once __DIR__ . '/../class/APCal_xoops.php';
require_once XOOPS_ROOT_PATH . '/class/xoopstree.php';

// for "Duplicatable"
$moduleDirName = basename(dirname(__DIR__));
if (!preg_match('/^(\D+)(\d*)$/', $moduleDirName, $regs)) {
    echo('invalid dirname: ' . htmlspecialchars($moduleDirName));
}
$mydirnumber = $regs[2] === '' ? '' : (int)$regs[2];

require_once XOOPS_ROOT_PATH . "/modules/$moduleDirName/include/gtickets.php";

// SERVER, GET �ѿ��μ���
$tz   = isset($_GET['tz']) ? preg_replace('/[^a-zA-Z0-9_-]/', '', $_GET['tz']) : 'y';
$pos  = isset($_GET['pos']) ? (int)$_GET['pos'] : 0;
$num  = isset($_GET['num']) ? (int)$_GET['num'] : 20;
$cid  = isset($_GET['cid']) ? (int)$_GET['cid'] : 0;
$txt  = isset($_GET['txt']) ? trim($_GET['txt']) : '';
$done = isset($_GET['done']) ? $_GET['done'] : '';

// MySQL�ؤ���³
$conn = $GLOBALS['xoopsDB']->conn;

// setting physical & virtual paths
$mod_path = XOOPS_ROOT_PATH . "/modules/$moduleDirName";
$mod_url  = XOOPS_URL . "/modules/$moduleDirName";

// creating an instance of APCal
$cal = new APCal_xoops('', $xoopsConfig['language'], true);

// setting properties of APCal
$cal->conn = $conn;
include __DIR__ . '/../include/read_configs.php';
$cal->base_url    = $mod_url;
$cal->base_path   = $mod_path;
$cal->images_url  = "$mod_url/assets/images/$skin_folder";
$cal->images_path = "$mod_path/assets/images/$skin_folder";

// ��̤��ˤ��ʤ���ߡʥǥե���Ȥ�̤���
$pf_options = "
    <option value='future'>" . _AM_APCAL_OPT_FUTURE . "</option>
    <option value='past'>" . _AM_APCAL_OPT_PAST . "</option>
    <option value='pandf'>" . _AM_APCAL_OPT_PASTANDFUTURE . "</option>\n";
$pf         = empty($_GET['pf']) ? 'future' : preg_replace('/[^a-zA-Z0-9_-]/', '', $_GET['pf']);
switch ($pf) {
    case 'past':

This code seems to be duplicated across your project.

        $pf_options = str_replace("'past'>", "'past' selected>", $pf_options);
        $whr_pf     = "start<'" . time() . "'";
        break;
    case 'pandf':
        $pf_options = str_replace("'pandf'>", "'pandf' selected>", $pf_options);
        $whr_pf     = '1';
        break;
    default:
        $pf = 'future';
    case 'future':

This code seems to be duplicated across your project.

        $pf_options = str_replace("'future'>", "'future' selected>", $pf_options);
        $whr_pf     = "end>'" . time() . "'";
        break;
}

// ���ƥ��꡼�����ν���
$cattree = new XoopsTree($cal->cat_table, 'cid', 'pid');
ob_start();
$cattree->makeMySelBox('cat_title', 'weight', $cid, true, 'cid', '');
$cat_selbox = ob_get_contents();
ob_end_clean();
$cat_selbox4extract = str_replace("<option value='0'>", "<option value='0'>" . _ALL . "</option>\n<option value='-1'" . ($cid == -1 ? 'selected' : '') . '>', $cat_selbox);

// Timezone ���
$serverTZ  = $cal->server_TZ;
$userTZ    = $xoopsUser->timezone();
$tzoptions = "
    <option value='s'>" . _AM_APCAL_TZOPT_SERVER . "</option>
    <option value='g'>" . _AM_APCAL_TZOPT_GMT . "</option>
    <option value='y'>" . _AM_APCAL_TZOPT_USER . "</option>\n";
switch ($tz) {

This code seems to be duplicated across your project.

    case 's':
        $tzoffset  = 0;
        $tzdisp    = ($serverTZ >= 0 ? '+' : '-') . sprintf('%02d:%02d', abs($serverTZ), abs($serverTZ) * 60 % 60);
        $tzoptions = str_replace("'s'>", "'s' selected>", $tzoptions);
        break;
    case 'g':
        $tzoffset  = -$serverTZ * 3600;
        $tzdisp    = 'GMT';
        $tzoptions = str_replace("'g'>", "'g' selected>", $tzoptions);
        break;
    default:
    case 'y':
        $tzoffset  = ($userTZ - $serverTZ) * 3600;
        $tzdisp    = ($userTZ >= 0 ? '+' : '-') . sprintf('%02d:%02d', abs($userTZ), abs($userTZ) * 60 % 60);
        $tzoptions = str_replace("'y'>", "'y' selected>", $tzoptions);
        break;
}

// �ǡ����١��������ʤɤ���������
if (isset($_POST['delete'])) {

    // Ticket Check
    if (!$xoopsGTicket->check()) {
        redirect_header(XOOPS_URL . '/', 3, $xoopsGTicket->getErrors());
    }

    // �쥳���ɤκ��
    if (isset($_POST['ids']) && is_array($_POST['ids'])) {
        $whr = '';
        foreach ($_POST['ids'] as $id) {
            $whr .= "id=$id OR rrule_pid=$id OR ";
            xoops_comment_delete($xoopsModule->mid(), $id);
        }
        $sql = "DELETE FROM $cal->table WHERE ($whr 0) AND (rrule_pid=0 OR rrule_pid=id)";
        $GLOBALS['xoopsDB']->query($sql);
        $records = $GLOBALS['xoopsDB']->getAffectedRows($conn);
        $sql     = "DELETE FROM $cal->table WHERE $whr 0 ";
        if (!$GLOBALS['xoopsDB']->query($sql)) {
            echo $GLOBALS['xoopsDB']->error();
        } else {
            $mes = urlencode("$records " . _AM_APCAL_MES_DELETED);
        }
    } else {
        $mes = '';
    }
    $cal->redirect("cid=$cid&num=$num&tz=$tz&done=deleted&mes=$mes");
    exit;
} elseif (isset($_POST['addlink']) && isset($_POST['ids']) && is_array($_POST['ids']) && $_POST['cid'] > 0) {

    // Ticket Check
    if (!$xoopsGTicket->check()) {
        redirect_header(XOOPS_URL . '/', 3, $xoopsGTicket->getErrors());
    }

    // ���ƥ��꡼�ؤΥ���ɲ�
    $cid     = (int)$_POST['cid'];
    $cid4sql = sprintf('%05d,', $cid);
    $whr     = '';
    foreach ($_POST['ids'] as $id) {
        $whr .= "id=$id OR rrule_pid=$id OR ";
    }
    $sql = "UPDATE $cal->table SET categories=CONCAT(categories,'$cid4sql') WHERE ($whr 0) AND categories NOT LIKE '%$cid4sql%'";
    if (!$GLOBALS['xoopsDB']->query($sql)) {
        echo $GLOBALS['xoopsDB']->error();
    }
    $records = $GLOBALS['xoopsDB']->getAffectedRows($conn);
    $mes     = urlencode("$records " . _AM_APCAL_MES_EVENTLINKTOCAT);
    $cal->redirect("cid=$cid&num=$num&tz=$tz&done=copied&mes=$mes");
    exit;
} elseif (isset($_POST['movelink']) && isset($_POST['ids']) && is_array($_POST['ids']) && isset($_POST['cid'])
          && $_POST['old_cid'] > 0
) {

    // Ticket Check
    if (!$xoopsGTicket->check()) {
        redirect_header(XOOPS_URL . '/', 3, $xoopsGTicket->getErrors());
    }

    // ���ƥ��꡼�ؤΥ�󥯰�ư�ޤ��Ϻ��
    $cid         = (int)$_POST['cid'];
    $cid4sql     = $cid > 0 ? sprintf('%05d,', $cid) : '';
    $old_cid     = (int)$_POST['old_cid'];
    $old_cid4sql = sprintf('%05d,', $old_cid);
    $whr         = '';
    foreach ($_POST['ids'] as $id) {
        $whr .= "id=$id OR rrule_pid=$id OR ";
    }
    $sql = "UPDATE $cal->table SET categories=REPLACE(categories,'$old_cid4sql','$cid4sql') WHERE ($whr 0)";
    if (!$GLOBALS['xoopsDB']->query($sql)) {
        echo $GLOBALS['xoopsDB']->error();
    }
    $records = $GLOBALS['xoopsDB']->getAffectedRows($conn);
    if ($cid > 0) {
        $mes = urlencode("$records " . _AM_APCAL_MES_EVENTLINKTOCAT);
    } else {
        $mes = urlencode("$records " . _AM_APCAL_MES_EVENTUNLINKED);
    }
    $cal->redirect("cid=$old_cid&num=$num&tz=$tz&done=moved&mes=$mes");
    exit;
} elseif (isset($_POST['output_ics_confirm']) && !empty($_POST['ids']) && is_array($_POST['ids'])) {

    // Ticket Check
    if (!$xoopsGTicket->check()) {
        redirect_header(XOOPS_URL . '/', 3, $xoopsGTicket->getErrors());
    }

    // iCalendar�Хå����ϥץ�åȥե������ǧ
    xoops_cp_header();
    $adminObject->displayNavigation(basename(__FILE__));
    echo $cal->output_ics_confirm("$mod_url/", '_blank');
    xoops_cp_footer();
    exit;
}

// ���ƥ��꡼����
if ($cid > 0) {
    $cid4sql = sprintf('%05d,', $cid);
    $whr_cid = "categories like '%$cid4sql%'";
} elseif ($cid == -1) {
    $whr_cid = "categories=''";
} else {
    $whr_cid = '1';
}

// �ե꡼��ɸ���
if ($txt !== '') {
    $whr_txt = '';
    if (get_magic_quotes_gpc()) {
        $txt = stripslashes($txt);
    }
    $keywords = explode(' ', $cal->mb_convert_kana($txt, 's'));
    foreach ($keywords as $keyword) {
        $whr_txt .= "(CONCAT( summary , description , location , contact ) LIKE '%" . addslashes($keyword) . "%') AND ";
    }
    $whr_txt = substr($whr_txt, 0, -4);
} else {
    $whr_txt = '1';
}

$whr = "$whr_cid AND $whr_txt AND $whr_pf AND rrule_pid=0 OR $whr_cid AND $whr_txt AND rrule_pid=id";

// Main query
//$rs      = $xoopsDB->query("SELECT COUNT(id) FROM $cal->table WHERE $whr");
//$numrows = mysql_result($rs, 0, 0);
//$rs      = $xoopsDB->query("SELECT * FROM $cal->table WHERE $whr ORDER BY start,end LIMIT $pos,$num");

$rs        = $GLOBALS['xoopsDB']->query("SELECT COUNT(id) FROM $cal->table WHERE $whr");
$numrows   = 0;
$resultRow = $GLOBALS['xoopsDB']->fetchRow($rs);
if (false !== $resultRow && isset($resultRow[0])) {
    $numrows = $resultRow[0];
}
$rs = $GLOBALS['xoopsDB']->query("SELECT * FROM $cal->table WHERE $whr ORDER BY start,end LIMIT $pos,$num");

// Page Navigation
include XOOPS_ROOT_PATH . '/class/pagenav.php';
$nav      = new XoopsPageNav($numrows, $num, $pos, 'pos', "cid=$cid&tz=$tz&num=$num&pf=$pf&txt=" . urlencode($txt));
$nav_html = $nav->renderNav(10);
if ($numrows <= 0) {

This code seems to be duplicated across your project.

    $nav_num_info = _NONE;
} elseif ($pos + $num > $numrows) {
    $nav_num_info = ($pos + 1) . "-$numrows/$numrows";
} else {
    $nav_num_info = ($pos + 1) . '-' . ($pos + $num) . '/' . $numrows;
}

// メイン出力部
xoops_cp_header();
$adminObject->displayNavigation(basename(__FILE__));

echo '
<h4 xmlns="http://www.w3.org/1999/html">' . _AM_APCAL_MENU_EVENTS . "</h4>
<p><style='color: blue; '>" . (isset($_GET['mes']) ? htmlspecialchars($_GET['mes'], ENT_QUOTES) : '') . "</style></p>\n" . (isset($confirm_html) ? $confirm_html : '') . "
<form class='apcalForm' action='' method='get' style='margin-bottom:0px;text-align:left'>
  <select name='tz' onChange='submit();'>$tzoptions</select>
  <input type='hidden' name='cid' value='$cid' />
  <input type='hidden' name='num' value='$num' />
  <input type='hidden' name='txt' value='" . htmlspecialchars($txt, ENT_QUOTES) . "' />
</form>
<table width='100%' cellpadding='0' cellspacing='0' border='0'>
  <tr>
    <td align='left'>
      $nav_num_info
    </td>
    <td>
      <form class='apcalForm' action='' method='get' style='margin-bottom:0px;text-align:right'>
        <select name='pf'>
          $pf_options
        </select>
        $cat_selbox4extract
        <input type='text' name='txt' value='" . htmlspecialchars($txt, ENT_QUOTES) . "' />
        <input type='submit' value='" . _AM_APCAL_BUTTON_EXTRACT . "' /> &nbsp;
        $nav_html &nbsp;
        <input type='hidden' name='num' value='$num' />
        <input type='hidden' name='tz' value='$tz' />
      </form>
    </td>
  </tr>
</table>
<form class='apcalForm' id='MainForm' name='MainForm' action='?tz=$tz&amp;num=$num&amp;cid=$cid' method='post' style='margin-top:0px;'>
" . $xoopsGTicket->getTicketHtml(__LINE__) . "
<table width='100%' class='outer' cellpadding='4' cellspacing='1'>
  <tr valign='middle'>
    <th>" . _AM_APCAL_IO_TH0 . '</th>
    <th>' . _AM_APCAL_IO_TH1 . "<br>($tzdisp)</th>
    <th>" . _AM_APCAL_IO_TH2 . "<br>($tzdisp)</th>
    <th>" . _AM_APCAL_IO_TH3 . '</th>
    <th>' . _AM_APCAL_IO_TH4 . '</th>
    <th>' . _AM_APCAL_IO_TH5 . "</th>
    <th></th>
    <th><input type='checkbox' name='dummy' onclick=\"with(document.MainForm){for (i=0;i<length;i++) {if (elements[i].type=='checkbox') {elements[i].checked=this.checked;}}}\" /></th>
  </tr>
";

// �ꥹ�Ƚ�����
$myts    = MyTextSanitizer::getInstance();
$oddeven = 'odd';
while ($event = $GLOBALS['xoopsDB']->fetchObject($rs)) {
    $oddeven = ($oddeven === 'odd' ? 'even' : 'odd');
    if ($event->allday) {

This code seems to be duplicated across your project.

        $start_desc = date(_AM_APCAL_DTFMT_LIST_ALLDAY, $event->start) . '<br>(' . _APCAL_MB_ALLDAY_EVENT . ')';
        $end_desc   = date(_AM_APCAL_DTFMT_LIST_ALLDAY, $event->end - 300) . '<br>(' . _APCAL_MB_ALLDAY_EVENT . ')';
    } else {
        $start_desc = date(_AM_APCAL_DTFMT_LIST_NORMAL, $event->start + $tzoffset);
        $end_desc   = date(_AM_APCAL_DTFMT_LIST_NORMAL, $event->end + $tzoffset);
    }
    $summary4disp = $myts->htmlSpecialChars($event->summary);
    echo "
  <tr>
    <td class='$oddeven'>" . XoopsUser::getUnameFromId($event->uid) . "</td>
    <td class='$oddeven' nowrap='nowrap'>$start_desc</td>
    <td class='$oddeven' nowrap='nowrap'>$end_desc</td>
    <td class='$oddeven'><a href='$mod_url/index.php?action=View&amp;event_id=$event->id'>$summary4disp</a></td>
    <td class='$oddeven'>" . $cal->rrule_to_human_language($event->rrule) . "</td>
    <td class='$oddeven'>" . ($event->admission ? _YES : _NO) . "</td>
    <td class='$oddeven' align='right'><a href='$mod_url/index.php?action=Edit&amp;event_id=$event->id' target='_blank'><img src='$cal->images_url/addevent.gif' border='0' width='14' height='12' /></a></td>
    <td class='$oddeven' align='right'><input type='checkbox' name='ids[]' value='$event->id' /></td>
  </tr>\n";
}

echo "
  <tr>
    <td colspan='8' align='right' class='head'>
      "
     . _AM_APCAL_LABEL_IO_CHECKEDITEMS
     . ' &nbsp; '
     . _AM_APCAL_LABEL_IO_OUTPUT
     . "<input type='submit' name='output_ics_confirm' value='"
     . _APCAL_BTN_EXPORT
     . "' /> &nbsp; "
     . _AM_APCAL_LABEL_IO_DELETE
     . "<input type='submit' name='delete' value='"
     . _DELETE
     . "' onclick='return confirm(\""
     . _AM_APCAL_CONFIRM_DELETE
     . "\")' /><br>
      <br>
      $cat_selbox <input type='submit' name='movelink' value='"
     . _AM_APCAL_BUTTON_MOVE
     . "' onclick='return confirm(\""
     . _AM_APCAL_CONFIRM_MOVE
     . "\")' "
     . ($cid <= 0 ? "disabled='disabled'" : '')
     . " /> <input type='submit' name='addlink' value='"
     . _AM_APCAL_BUTTON_COPY
     . "' onclick='return confirm(\""
     . _AM_APCAL_CONFIRM_COPY
     . "\")' />
      <input type='hidden' name='old_cid' value='$cid' />
    </td>
  </tr>
  <tr>
    <td colspan='8' align='right' valign='bottom' height='50'>"
     . _AM_APCAL_COPYRIGHT
     . '</td>
  </tr>
</table>
</form>
';

require_once __DIR__ . '/admin_footer.php';