<?php

/**
 *      [Discuz!] (C)2001-2099 Comsenz Inc.
 *      This is NOT a freeware, use is subject to license terms
 *
 *      $Id: admincp_attach.php 11004 2010-05-19 08:12:38Z zhengqingpeng $
 */

if(!defined('IN_DISCUZ') || !defined('IN_ADMINCP')) {
	exit('Access Denied');
}

cpheader();

$searchsubmit = $_G['gp_searchsubmit'];

if(!submitcheck('deletesubmit')) {

	require_once libfile('function/forumlist');
	$anchor = isset($_G['gp_anchor']) ? $_G['gp_anchor'] : '';
	$anchor = in_array($anchor, array('search', 'admin')) ? $anchor : 'search';

	shownav('topic', 'nav_attaches');
	showsubmenusteps('nav_attaches', array(
		array('search', !$searchsubmit),
		array('admin', $searchsubmit),
	));
	showtips('attach_tips', 'attach_tips', $searchsubmit);
	showtagheader('div', 'search', !$searchsubmit);
	showformheader('attach');
	showtableheader();
	showsetting('attach_nomatched', 'nomatched', 0, 'radio');
	showsetting('attach_forum', '', '', '<select name="inforum"><option value="all">&nbsp;&nbsp;>'.cplang('all').'</option><option value="">&nbsp;</option>'.forumselect(FALSE, 0, 0, TRUE).'</select>');
	showsetting('attach_sizerange', array('sizeless', 'sizemore'), array('', ''), 'range');
	showsetting('attach_dlcountrange', array('dlcountless', 'dlcountmore'), array('', ''), 'range');
	showsetting('attach_daysold', 'daysold', '', 'text');
	showsetting('filename', 'filename', '', 'text');
	showsetting('attach_keyword', 'keywords', '', 'text');
	showsetting('attach_author', 'author', '', 'text');
	showsubmit('searchsubmit', 'search');
	showtablefooter();
	showformfooter();
	showtagfooter('div');

	if(submitcheck('searchsubmit')) {

		require_once libfile('function/attachment');

		$sql = "a.pid=p.pid";
		$ppp = 100;

		if($_G['gp_inforum'] != 'all') {
			$inforum = intval($_G['gp_inforum']);
		}

		$sql .= is_numeric($inforum) ? " AND p.fid='$inforum'" : '';
		$sql .= $_G['gp_author'] ? " AND p.author='$_G[gp_author]'" : '';
		$sql .= $_G['gp_filename'] ? " AND a.filename LIKE '%$_G[gp_filename]%'" : '';

		if($_G['gp_keywords']) {
			$sqlkeywords = $or = '';
			foreach(explode(',', str_replace(' ', '', $_G['gp_keywords'])) as $_G['gp_keywords']) {
				$sqlkeywords .= " $or af.description LIKE '%$_G[gp_keywords]%'";
				$or = 'OR';
			}
			$sql .= " AND ($sqlkeywords)";
		}

		$sql .= $_G['gp_sizeless'] ? " AND a.filesize<'$_G[gp_sizeless]'" : '';
		$sql .= $_G['gp_sizemore'] ? " AND a.filesize>'$_G[gp_sizemore]' " : '';
		$sql .= $_G['gp_dlcountless'] ? " AND a.downloads<'$_G[gp_dlcountless]'" : '';
		$sql .= $_G['gp_dlcountmore'] ? " AND a.downloads>'$_G[gp_dlcountmore]'" : '';

		$attachments = '';

		$attachmentarray = getallwithposts(array(
			'select' => 'a.*, af.description, p.fid, p.author, t.tid, t.subject, f.name AS fname',
			'from' => DB::table('forum_attachment')." a LEFT JOIN ".DB::table('forum_attachmentfield')." af ON a.aid=af.aid, ".DB::table('forum_post')." p, ".DB::table('forum_thread')." t, ".DB::table('forum_forum')." f",
			'where' => "t.tid=a.tid AND f.fid=p.fid AND t.displayorder>='0' AND p.invisible='0' AND $sql",
			'limit' => (($page - 1) * $ppp).','.$ppp
		));

		foreach($attachmentarray as $attachment) {
			if(!$attachment['remote']) {
				$matched = file_exists($_G['setting']['attachdir'].'/forum/'.$attachment['attachment']) ? '' : cplang('attach_lost');
				$attachment['url'] = $_G['setting']['attachurl'].'forum/';
			} else {
				@set_time_limit(0);
				if(@fclose(@fopen($_G['setting']['ftp']['attachurl'].$attachment['attachment'], 'r'))) {
					$matched = '';
				} else {
					$matched = cplang('attach_lost');
				}
				$attachment['url'] = $_G['setting']['ftp']['attachurl'].'forum/';
			}
			$attachsize = sizecount($attachment['filesize']);
			if(!$_G['gp_nomatched'] || ($_G['gp_nomatched'] && $matched)) {
				$attachments .= showtablerow('', array('class="td25"', 'title="'.$attachment['description'].'" class="td21"'), array(
					"<input class=\"checkbox\" type=\"checkbox\" name=\"delete[]\" value=\"$attachment[aid]\" />",
					$attachment['remote'] ? "<span class=\"diffcolor3\">$attachment[filename]" : $attachment['filename'],
					"<a href=\"$attachment[url]/$attachment[attachment]\" class=\"smalltxt\" target=\"_blank\">".cutstr($attachment['attachment'], 30)."</a>",
					$attachment['author'],
					"<a href=\"forum.php?mod=viewthread&tid=$attachment[tid]\" target=\"_blank\">".cutstr($attachment['subject'], 20)."</a>",
					$attachsize,
					$attachment['downloads'],
					$matched ? "<em class=\"error\">$matched<em>" : "<a href=\"forum.php?mod=attachment&aid=".aidencode($attachment['aid'])."&noupdate=yes\" target=\"_blank\" class=\"act nomargin\">$lang[download]</a>"
				), TRUE);
			}
		}

		$attachmentcount = getcountofposts(DB::table('forum_attachment')." a LEFT JOIN ".DB::table('forum_attachmentfield')." af ON a.aid=af.aid, ".DB::table('forum_post')." p, ".DB::table('forum_thread')." t, ".DB::table('forum_forum')." f", "t.tid=a.tid ANd f.fid=p.fid ANd t.displayorder>='0' ANd p.invisible='0' AND $sql");
		$multipage = multi($attachmentcount, $ppp, $page, ADMINSCRIPT."?action=attachments");
		$multipage = preg_replace("/href=\"".ADMINSCRIPT."\?action=attachments&amp;page=(\d+)\"/", "href=\"javascript:page(\\1)\"", $multipage);
		$multipage = str_replace("window.location='".ADMINSCRIPT."?action=attachments&amp;page='+this.value", "page(this.value)", $multipage);

		echo <<<EOT
<script type="text/JavaScript">
	function page(number) {
		$('attachmentforum').page.value=number;
		$('attachmentforum').searchsubmit.click();
	}
</script>
EOT;
		showtagheader('div', 'admin', $searchsubmit);
		showformheader('attach', '', 'attachmentforum');
		showhiddenfields(array(
			'page' => $page,
			'nomatched' => $_G['gp_nomatched'],
			'inforum' => $_G['gp_inforum'],
			'sizeless' => $_G['gp_sizeless'],
			'sizemore' => $_G['gp_sizemore'],
			'dlcountless' => $_G['gp_dlcountless'],
			'dlcountmore' => $_G['gp_dlcountmore'],
			'daysold' => $_G['gp_daysold'],
			'filename' => $_G['gp_filename'],
			'keywords' => $_G['gp_keywords'],
			'author' => $_G['gp_author'],
		));
		echo '<input type="submit" name="searchsubmit" value="'.cplang('submit').'" class="btn" style="display: none" />';
		showformfooter();

		showformheader('attach&frame=no', 'target="attachmentframe"');
		showtableheader();
		showsubtitle(array('', 'filename', 'attach_path', 'author', 'attach_thread', 'size', 'attach_downloadnums', ''));
		echo $attachments;
		showsubmit('deletesubmit', 'submit', 'del', '<a href="###" onclick="$(\'admin\').style.display=\'none\';$(\'search\').style.display=\'\';" class="act lightlink normal">'.cplang('research').'</a>', $multipage);
		showtablefooter();
		showformfooter();
		echo '<iframe name="attachmentframe" style="display:none"></iframe>';
		showtagfooter('div');

	}

} else {

	if($ids = dimplode($_G['gp_delete'])) {

		$tids = $pids = 0;
		$query = DB::query("SELECT tid, pid, attachment, thumb, remote, aid FROM ".DB::table('forum_attachment')." WHERE aid IN ($ids)");
		while($attach = DB::fetch($query)) {
			dunlink($attach);
			$tids .= ','.$attach['tid'];
			$pids .= ','.$attach['pid'];
		}
		DB::query("DELETE FROM ".DB::table('forum_attachment')." WHERE aid IN ($ids)");
		DB::query("DELETE FROM ".DB::table('forum_attachmentfield')." WHERE aid IN ($ids)");

		$attachtids = 0;
		$query = DB::query("SELECT tid FROM ".DB::table('forum_attachment')." WHERE tid IN ($tids) GROUP BY tid ORDER BY pid DESC");
		while($attach = DB::fetch($query)) {
			$attachtids .= ','.$attach['tid'];
		}
		DB::query("UPDATE ".DB::table('forum_thread')." SET attachment='0' WHERE tid IN ($tids)".($attachtids ? " AND tid NOT IN ($attachtids)" : NULL));

		$attachpids = 0;
		$query = DB::query("SELECT pid FROM ".DB::table('forum_attachment')." WHERE pid IN ($pids) GROUP BY pid ORDER BY pid DESC");
		while($attach = DB::fetch($query)) {
			$attachpids .= ','.$attach['pid'];
		}

		updatepost(array('attachment' => '0'), "pid IN ($pids)".($attachpids ? "AND pid NOT IN ($attachpids)" : NULL));

		$cpmsg = cplang('attach_edit_succeed');

	} else {

		$cpmsg = cplang('attach_edit_invalid');

	}

	echo "<script type=\"text/JavaScript\">alert('$cpmsg');parent.\$('attachmentforum').searchsubmit.click();</script>";
}

?>