is_maintainer($_REQUEST['appId'], $_REQUEST['versionId']))) { $str_query = "INSERT INTO appData VALUES (null, ".$_REQUEST['appId'].", ".$_REQUEST['versionId']. ", 'image', '".addslashes($_REQUEST['screenshot_desc'])."', '')"; if(debugging()) addmsg("
query: $str_query
","green"); if (query_appdb($str_query)) { $int_id = mysql_insert_id(); if(!copy($_FILES['imagefile']['tmp_name'], "data/screenshots/".$int_id)) { // whoops, copy failed. do something errorpage("debug: copy failed; (".$_FILES['imagefile']['tmp_name'].";".$_FILES['imagefile']['name']); $str_query = "DELETE FROM appData WHERE id = '".$int_id."'"; query_appdb($str_query); exit; } else { // we have to update the entry now that we know it's name $str_query = "UPDATE appData SET url = '".$int_id."' WHERE id = '".$int_id."'"; if (query_appdb($str_query)) { //success $email = getNotifyEmailAddressList($_REQUEST['appId'], $_REQUEST['versionId']); if($email) { $fullAppName = "Application: ".lookupAppName($_REQUEST['appId'])." Version: ".lookupVersionName($_REQUEST['appId'], $_REQUEST['versionId']); $ms .= APPDB_ROOT."screenshots.php?appId=".$_REQUEST['appId']."&versionId=".$_REQUEST['versionId']."\n"; $ms .= "\n"; $ms .= $_SESSION['current']->realname." added screenshot ".$_REQUEST['screenshot_desc']." to ".$fullAppName."\n"; $ms .= "\n"; $ms .= STANDARD_NOTIFY_FOOTER; mail(stripslashes($email), "[AppDB] ".$fullAppName ,$ms); } else { $email = "no one"; } addmsg("mesage sent to: ".$email, "green"); addmsg("The image was successfully added into the database", "green"); redirect(apidb_fullurl("screenshots.php?appId=".$_REQUEST['appId']."&versionId=".$_REQUEST['versionId'])); } } } } else // we are a normal user or an anonymous and submitted a screenshot { $str_query = "INSERT INTO appDataQueue VALUES (null, ".$_REQUEST['appId'].", ".$_REQUEST['versionId']. ", 'image', '".addslashes($_REQUEST['screenshot_desc'])."', '','".$_SESSION['current']->userid. "', NOW())"; if(debugging()) addmsg("query: $str_query
","green"); if (query_appdb($str_query)) { $int_queueId = mysql_insert_id(); if(!copy($_FILES['imagefile']['tmp_name'], "data/queued/screenshots/".$int_queueId)) { // whoops, copy failed. do something errorpage("debug: copy failed; (".$_FILES['imagefile']['tmp_name'].";".$_FILES['imagefile']['name']); $str_query = "DELETE FROM appDataQueue WHERE queueId = '".$int_queueId."'"; query_appdb($str_query); exit; } else { // we have to update the queued entry now that we know its name $str_query = "UPDATE appDataQueue SET url = '".$int_queueId."' WHERE queueId = '".$int_queueId."'"; if (query_appdb($str_query)) { //success $email = getNotifyEmailAddressList($_REQUEST['appId'], $_REQUEST['versionId']); if($email) { $fullAppName = "Application: ".lookupAppName($_REQUEST['appId'])." Version: ".lookupVersionName($_REQUEST['appId'], $_REQUEST['versionId']); $ms .= APPDB_ROOT."admin/adminAppDataQueue.php?queueId=".mysql_insert_id()."\n"; $ms .= "\n"; $ms .= ($_SESSION['current']->realname ? $_SESSION['current']->realname : "an anonymous user")." submitted a screenshot ".$_REQUEST['screenshot_desc']." for ".$fullAppName."\n"; $ms .= "\n"; $ms .= STANDARD_NOTIFY_FOOTER; mail(stripslashes($email), "[AppDB] ".$fullAppName ,$ms); } else { $email = "no one"; } addmsg("mesage sent to: ".$email, "green"); addmsg("The image you submitted will be added to the database database after being reviewed", "green"); redirect(apidb_fullurl("screenshots.php?appId=".$_REQUEST['appId']."&versionId=".$_REQUEST['versionId'])); } } } } } elseif($_REQUEST['cmd'] == "delete") { if(havepriv("admin") || $_SESSION['current']->is_maintainer($_REQUEST['appId'], $_REQUEST['versionId'])) { $result = query_appdb("DELETE FROM appData WHERE id = ".$_REQUEST['imageId']); if($result) { $email = getNotifyEmailAddressList($_REQUEST['appId'], $_REQUEST['versionId']); if($email) { $fullAppName = "Application: ".lookupAppName($_REQUEST['appId'])." Version: ".lookupVersionName($_REQUEST['appId'], $_REQUEST['versionId']); $ms .= APPDB_ROOT."screenshots.php?appId=".$_REQUEST['appId']."&versionId=".$_REQUEST['versionId']."\n"; $ms .= "\n"; $ms .= ($_SESSION['current']->realname ? $_SESSION['current']->realname : "Anonymous")." deleted screenshot from ".$fullAppName."\n"; $ms .= "\n"; $ms .= STANDARD_NOTIFY_FOOTER; mail(stripslashes($email), "[AppDB] ".$fullAppName ,$ms); } else { $email = "no one"; } addmsg("mesage sent to: ".$email, "green"); addmsg("Image deleted", "green"); redirect(apidb_fullurl("screenshots.php?appId=".$_REQUEST['appId']."&versionId=".$_REQUEST['versionId'])); } else { redirect(apidb_fullurl("screenshots.php?appId=".$_REQUEST['appId']."&versionId=".$_REQUEST['versionId'])); } } } exit; } // we didn't issue any command if($_REQUEST['versionId']) $result = query_appdb("SELECT * FROM appData WHERE type = 'image' AND appId = ".$_REQUEST['appId']." AND versionId = ".$_REQUEST['versionId']); else $result = query_appdb("SELECT * FROM appData WHERE type = 'image' AND appId = ".$_REQUEST['appId']." ORDER BY versionId"); $app=new Application($_REQUEST['appId']); apidb_header("Screenshots"); if($result && mysql_num_rows($result)) { echo html_frame_start("Screenshot Gallery for ".$app->data->appName,500); // display thumbnails $c = 1; echo "| \n"; echo html_frame_start(substr(stripslashes($ob->description),0,20),128,"",0); echo $img; //show admin delete link if(loggedin() && (havepriv("admin") || $_SESSION['current']->is_maintainer($_REQUEST['appId'], $_REQUEST['versionId']))) { echo ""; } echo html_frame_end(" "); echo " | \n"; // end row if counter of 3 if ($c % 3 == 0) echo "
There are currently no screenshot for the selected version of this application.";
echo "
Please consider submitting a screenshot for the selected version yourself.