online-bookmarks-2/lib/lib.php

<?php

###
### prints a message and exits the application properly
###
function message ($message) {
	if (isset ($message)) {
		echo "<p>" . $message . "</p>";
	}
	require_once (ABSOLUTE_PATH . "footer.php");
}

/*
 * Checks whether the user is logged in.
 * Displays a link to login if not and exit application.
 */
function logged_in_only () {
	if (! isset ($_SESSION['logged_in']) || ! $_SESSION['logged_in']) {
		global $auth;
		$auth->display_login_form ();
		require_once (ABSOLUTE_PATH . "footer.php");
	}
}

function input_validation ($data, $charset = 'UTF-8') {
	if (is_array ($data)) {
		foreach ($data as $key => $value) {
			$data[$key] = input_validation ($value);
		}
	}
	else {
		$data = htmlentities (trim ($data), ENT_QUOTES, $charset);
	}
	return $data;
}

/*
 * Verify some GET variables
 */
###
### Setting the expand variable. If empty in _GET we use the one from _SESSION if available.
### Call this function only once, otherwise some strange things will happen.
###
function set_get_expand () {
	if (!isset ($_GET['expand'])) {
		if (isset ($_SESSION['expand']) && is_array ($_SESSION['expand'])) {
			$return = set_num_array ($_SESSION['expand']);
		}
		else {
			$return = array();
		}
	}
	else if ($_GET['expand'] == '') {
		$return = array();
	}
	else {
		$return = explode (",", $_GET['expand']);
		$return = set_num_array ($return);
	}
	$return = input_validation ($return);
	$_SESSION['expand'] = $return;
	return ($return);
}

function set_get_folderid () {
	if (!isset ($_GET['folderid']) || $_GET['folderid'] == '' || !is_numeric ($_GET['folderid'])) {
		if (isset ($_SESSION['folderid'])) {
			$return = $_SESSION['folderid'];
		}
		else {
			$return = 0;
		}
	}
	else {
		$return = $_GET['folderid'];
	}
	$return = input_validation ($return);
	$_SESSION['folderid'] = $return;
	return ($return);
}




################## GET title and url are handled a bit special

function set_get_title () {
	if (!isset ($_GET['title']) || $_GET['title'] == '') {
		$return = '';
	}
	else {
		$return = $_GET['title'];
	}
	return input_validation ($return);
}

function set_get_url () {
	if (!isset ($_GET['url']) || $_GET['url'] == '') {
		$return = '';
	}
	else {
		$return = $_GET['url'];
	}
	return input_validation ($return);
}

function set_session_title () {
	if (!isset ($_SESSION['title']) || $_SESSION['title'] == '') {
		$return = '';
	}
	else {
		$return = $_SESSION['title'];
	}
	return $return;
}

function set_session_url () {
	if (!isset ($_SESSION['url']) || $_SESSION['url'] == '') {
		$return = '';
	}
	else {
		$return = $_SESSION['url'];
	}
	return $return;
}

function set_title () {
	$get_title = set_get_title ();
	$session_title = set_session_title ();

	if ($get_title == '' && $session_title == '') {
		$return = '';
	}
	else if ($get_title != '') {
		$_SESSION['title'] = $get_title;
		$return = $get_title;
	}
	else if ($session_title != '') {
		$_SESSION['title'] = $session_title;
		$return = $session_title;
	}
	return $return;	
}

function set_url () {
	$get_url = set_get_url ();
	$session_url = set_session_url ();

	if ($get_url == '' && $session_url == '') {
		$return = '';
	}
	else if ($get_url != '') {
		$_SESSION['url'] = $get_url;
		$return = $get_url;
	}
	else if ($session_url != '') {
		$_SESSION['url'] = $session_url;
		$return = $session_url;
	}
	return $return;	
}

#############################################

function set_get_noconfirm () {
	if (!isset ($_GET['noconfirm']) || $_GET['noconfirm'] == '') {
		$return = false;
	}
	else {
		$return = true;
	}
	return $return;
}

function set_get_order () {
	if (!isset ($_GET['order']) || $_GET['order'] == '') {
		$return = array ("titleasc", "title ASC");
	}
	else if ($_GET['order'] == 'datedesc') {
		$return = array ("datedesc", "date DESC");
	}
	else if ($_GET['order'] == 'dateasc') {
		$return = array ("dateasc", "date ASC");
	}
	else if ($_GET['order'] == 'titledesc') {
		$return = array ("titledesc", "title DESC");
	}
	else if ($_GET['order'] == 'titleasc') {
		$return = array ("titleasc", "title ASC");
	}
	else {
		$return = array ("titleasc", "title ASC");
	}
	return $return;
}

/*
 * Verify some POST variables
 */

function set_post_childof () {
	if (!isset ($_POST['childof']) || $_POST['childof'] == '' || !is_numeric($_POST['childof'])) {
		$return = 0;
	}
	else {
		$return = $_POST['childof'];
	}
	return input_validation ($return);
}

function set_post_title () {
	if (!isset ($_POST['title']) || $_POST['title'] == '') {
		$return = '';
	}
	else {
		$return = $_POST['title'];
	}
	return input_validation ($return);
}

function set_post_url () {
	if (!isset ($_POST['url']) || $_POST['url'] == '') {
		$return = '';
	}
	else {
		$return = $_POST['url'];
	}
	return input_validation ($return);
}

function set_post_description () {
	if (!isset ($_POST['description']) || $_POST['description'] == '') {
		$return = '';
	}
	else {
		$return = $_POST['description'];
	}
	return input_validation ($return);
}

function set_post_foldername () {
	if (!isset ($_POST['foldername']) || $_POST['foldername'] == '') {
		$return = '';
	}
	else {
		$return = $_POST['foldername'];
	}
	return input_validation ($return);
}

function set_post_sourcefolder () {
	if (!isset ($_POST['sourcefolder']) || $_POST['sourcefolder'] == '' || !is_numeric ($_POST['sourcefolder'])) {
		$return = '';
	}
	else {
		$return = $_POST['sourcefolder'];
	}
	return input_validation ($return);
}

function set_post_parentfolder () {
	if (!isset ($_POST['parentfolder']) || $_POST['parentfolder'] == '' || !is_numeric ($_POST['parentfolder'])) {
		$return = 0;
	}
	else {
		$return = $_POST['parentfolder'];
	}
	return input_validation ($return);
}

function set_post_browser () {
	if (!isset ($_POST['browser'])) {
		$return = '';
	}
	else if ($_POST['browser'] == 'opera') {
		$return = 'opera';
	}
	else if ($_POST['browser'] == 'netscape') {
		$return = 'netscape';
	}
	else if ($_POST['browser'] == 'IE') {
		$return = 'IE';
	}
	else {
		$return = '';
	}
	return input_validation ($return);
}

#########################################################

###
### 
###

function return_charsets () {
	$charsets = array (
		'ISO-8859-1',
		'ISO-8859-15',
		'UTF-8',
		'cp866',
		'cp1251',
		'cp1252',
		'KOI8-R',
		'BIG5',
		'GB2312',
		'BIG5-HKSCS',
		'Shift_JIS',
		'EUC-JP',
	);
	return $charsets;
}

function set_post_charset () {
	$charsets = return_charsets ();

	if (!isset ($_POST['charset']) || $_POST['charset'] == '') {
		$return = 'UTF-8';
	}
	else if (in_array ($_POST['charset'], $charsets)) {
		$return = $_POST['charset'];
	}
	else {
		$return = 'UTF-8';
	}
	return $return;
}

function check_username ($username) {
	$return = false;
	if (isset ($username) || $username == '') {
		global $mysql;
		$query = sprintf ("SELECT COUNT(*) FROM user WHERE md5(username)=md5('%s')",
			$mysql->escape ($username));
		if ($mysql->query ($query)) {
			$res = mysqli_fetch_assoc ($mysql->result);
			if (reset($res) == 1) {
				$return = true;
			}
		}
	}
	return input_validation ($return);
}

function admin_only () {
    $return = false;
    global $mysql, $username;
    $query = sprintf ("SELECT COUNT(*) FROM user WHERE admin='1'
                       AND username='%s'",
                       $mysql->escape ($username));
    if ($mysql->query ($query)) {
    	$res = mysqli_fetch_assoc ($mysql->result);
        if (reset($res) == "1") {
            $return = true;
        }
    }
    return input_validation ($return);
}

function set_get_string_var ($varname, $default = '') {
	if (! isset ($_GET[$varname]) || $_GET[$varname] == '') {
		$return = $default;
	}
	else {
		$return = $_GET[$varname];
	}
	return input_validation ($return);
}

function set_post_string_var ($varname, $default = '') {
	if (! isset ($_POST[$varname]) || $_POST[$varname] == '') {
		$return = $default;
	}
	else {
		$return = $_POST[$varname];
	}
	return input_validation ($return);
}

function set_post_num_var ($varname, $default = 0) {
	if (! isset ($_POST[$varname]) || $_POST[$varname] == '' || !is_numeric ($_POST[$varname])) {
		$return = $default;
	}
	else {
		$return = intval ($_POST[$varname]);
	}
	return input_validation ($return);
}

function set_post_bool_var ($varname, $default = true) {
	if (! isset ($_POST[$varname])) {
		$return = $default;
	}
	else if (! $_POST[$varname] ) {
		$return = false;
	}
	else if ($_POST[$varname] ) {
		$return = true;
	}
	else {
		$return = $default;
	}
	return $return;
}

function set_get_num_list ($varname) {
	if (!isset ($_GET[$varname]) || $_GET[$varname] == '') {
		$return = array ();
	}
	else {
		$return = set_num_array (explode ("_", $_GET[$varname]));
	}
	return input_validation ($return);
}

function set_post_num_list ($varname) {
	if (!isset ($_POST[$varname]) || $_POST[$varname] == '') {
		$return = array ();
	}
	else {
		$return = set_num_array (explode ("_", $_POST[$varname]));
	}
	return input_validation ($return);
}

/*
 * This function checks the values of each entry in an array.
 * It returns an array with unique and only numeric entries.
 */
function set_num_array ($array){
	foreach ($array as $key => $value) {
		if ($value == '' || !is_numeric ($value)) {
			unset ($array[$key]);
		}
	}
	return array_unique ($array);
}

function print_footer () {
	echo '<div id="footer">';
	object_count();
	echo "<br>\n";

	echo '<a class="footer" href="http://www.frech.ch/online-bookmarks/" target="_blank">Online-Bookmarks</a>' . "\n";
	@readfile (ABSOLUTE_PATH . "VERSION");
	echo ' by Stefan Frech.';
	echo "</p>\n";
}

function object_count () {
	global $mysql, $username;
	$return = '';
	$query = sprintf ("SELECT (SELECT COUNT(*) FROM bookmark WHERE user='%s') AS bookmarks,
	                          (SELECT COUNT(*) FROM folder   WHERE user='%s') AS folders",
	                 $mysql->escape ($username),
	                 $mysql->escape ($username));
	
	if ($mysql->query ($query)) {
		if (mysqli_num_rows ($mysql->result) == "1") {
			$row = mysqli_fetch_object ($mysql->result);
			$return = "You have $row->bookmarks Bookmarks and $row->folders Folders";
		}
	}
	else {
		$return = $mysql->error;
	}
	echo $return;
}

function assemble_query_string ($data) {
	$return = array ();
	foreach ($data as $key => $value) {
		array_push ($return, $key . "=" . $value);
	}
	return implode ($return, "&");
}

?>