<?

// PHPMyLinks version 0.1.4, Copyright (C) 2000, Rémi Henriot
// http://rhenriot.free.fr/phpmylinks/ - rhenriot@mail.com
//
// This is free software ; you can redistribute it and/or modify it
// under the terms of the PHPMyLinks License Version 1.0
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY ; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
// For more details, see the license.txt file that you should have
// received with this program.


require 'parameters.inc.php';

function error($msg)
{
    global $inc_path;
    header("Location: ".$inc_path."error.php3?msg=".(rawurlencode($msg)));
    exit;
}

function check_mail()
{
    global $mail, $mail_compulsory, $password;
    if(strlen($password) == 0)
    {
        if($mail_compulsory && strlen(chop($mail)) == 0)
            error('adresse e-mail obligatoire.');
        else if(strlen($mail) != 0 && ! ereg('[^@]+@[^@.]+[.][^@]+',$mail))
            //mail should look like 'someone@somewhere.something'
            error('adresse e-mail de forme incorrecte');
    }
}

function add_modif($action, $object, $mail, $fields, $values)
{
    // Insert into 'modification' table
    $query = "insert into modification (mdf_type,mdf_objet,mdf_mail,$fields) ".
           "values ('$action','$object','$mail',$values)";
    mysql_query($query);
    return mysql_insert_id();
}

function delete_where_in($from_table, $where_champ, $in_select)
{
    eval("\$query = \"".$in_select."\";");
    $result = mysql_query($query);

    while($row = mysql_fetch_row($result))
    {
        $query = "delete from $from_table ".
               "where $where_champ = $row[0]";
        mysql_query($query);
    }
}

function add_url($url, $title, $descr, $keywords, $filing)
{
    // cut, if it's necessary, 'http://' from the url
    ereg_replace("http://","",$url);

    // insertion into 'url' table
    mysql_query("insert into url (url_str, url_titre, url_descr) ".
                "values (\"$url\", \"$title\", \"$descr\")");
    $url_id = mysql_insert_id();

    // add filing links to categories and sub-categories
    $filing_ar = explode(';', $filing);
    for($i = 0; $i < sizeof($filing_ar); $i++)
        mysql_query("insert into classement (sca_id, url_id) values ($filing_ar[$i], $url_id)");

    // add keywords refrences
    $keywords = ereg_replace(' *, *', ',', $keywords);
    $key_ar = explode(',', $keywords);
    for($i = 0; $i < sizeof($key_ar); $i++)
        if(strlen($key_ar[$i]) != 0)
        {
            $res = mysql_query("select cle_id from mot_cle where cle_mot = \"$key_ar[$i]\"");
            if(mysql_num_rows($res) != 0)
            {
                $row = mysql_fetch_row($res);
                $cle_id = $row[0];
            }
            else
            {
                mysql_query("insert into mot_cle (cle_mot) values (\"$key_ar[$i]\")");
                $cle_id = mysql_insert_id();
            }
            mysql_query("insert into reference (cle_id, url_id) values ($cle_id,$url_id)");
        }
}

function delete_url($url_id)
{
    // delete data from table 'url'
    mysql_query("delete from url where url_id = $url_id");

    // delete sub-category filing
    mysql_query("delete from classement where url_id = $url_id");

    // delete keyword references
    mysql_query("delete from reference where url_id = $url_id");

    // delete keywords that are not any more linked with any URL
    // because MySQL doesn't support inner queries, we can't write :
    //        delete from mot_cle where cle_id not in (select cle_id from reference)
    // so :
        delete_where_in("mot_cle","cle_id",
        "select cle.cle_id ".
        "from mot_cle cle left join reference ref using(cle_id) ".
        "where ref.cle_id is null");
}

function exec_code_modif($type, $object, $ch1, $ch2, $ch3, $ch4, $ch5, $texte)
{
// type = A : Adding | M : Modification | S : deletion ('Suppression' in french)
// objet = C : Category | S : Sub-category | U : Url
switch($type.$object)
{
    case 'AC' :
        mysql_query("insert into categorie (cat_nom) values (\"$ch1\")");
        $id = mysql_insert_id();
        mysql_query("insert into sous_categorie (cat_id) values ($id)");
        break;
    case 'MC' :
        mysql_query("update categorie set cat_nom = \"$ch2\" where cat_id = $ch1");
        break;
    case 'SC' :
        delete_where_in("classement","sca_id","select sca_id from sous_categorie where cat_id = $ch1");
        mysql_query("delete from sous_categorie where cat_id = $ch1");
        mysql_query("delete from categorie where cat_id = $ch1");
        break;
    case 'AS' :
        mysql_query("insert into sous_categorie (cat_id, sca_nom) values ($ch1,\"$ch2\")");
        break;
    case 'MS' :
        mysql_query("update sous_categorie set cat_id=$ch2,sca_nom=\"$ch3\" where sca_id = $ch1");
        break;
    case 'SS' :
        mysql_query("delete from classement where sca_id = $ch1");
        mysql_query("delete from sous_categorie where sca_id = $ch1");
        break;
    case 'AU' :
        add_url($ch1, $ch2, $texte, $ch3,$ch4);
        break;
    case 'MU' :
        delete_url($ch5);
        add_url($ch1, $ch2, $texte, $ch3,$ch4);
        break;
    case 'SU' :
        delete_url($ch1);
        break;
}
}

function exec_modif($mdf_id, $password)
{
    global $admin_pwd;

    // check the password
    if ($password != $admin_pwd)
        error("mot de passe incorrect !");

    // get the row of the 'modification' table with id = $mdf_id
    $query_mdf = "select mdf_id, mdf_type, mdf_objet, ".
               "mdf_ch1,  mdf_ch2, mdf_ch3, mdf_ch4, mdf_ch5, mdf_texte ".
               "from modification where mdf_id = $mdf_id";
    $res_mdf = mysql_query($query_mdf);
    $r = mysql_fetch_object($res_mdf);

    exec_code_modif($r->mdf_type, $r->mdf_objet, $r->mdf_ch1, $r->mdf_ch2,
                    $r->mdf_ch3, $r->mdf_ch4, $r->mdf_ch5, $r->mdf_texte);

    // delete the row from 'modification' table
    mysql_query("delete from modification where mdf_id = $r->mdf_id");
}

?>