<?php
// ************************************************** ********************
// Mysidia Adoptables Script: nadopt.php
// Copyright 2011 Mysidia Adoptables staff team
// For help and support: http://www.mysidiaadoptables.com/forum/
//
// Redistribution prohibited without written permission
// ************************************************** ********************
// ************************************************** ********************
// This file allows the administrator to create a new adoptable...
// File ID: nadopt.php
// ************************************************** ********************
// Wake the sleeping giant
// ************************************************** ********************
// Basic Configuration Info
// ************************************************** ********************
include("inc/functions.php");
include("inc/config.php");
$themeurl = grabanysetting("themeurl");
// ************************************************** ********************
// Define our ads by calling getads()
// ************************************************** ********************
$ads = ""; // No Ads, because we're in the Admin CP...
// ************************************************** ********************
// Grab any dynamic article content from the content table
// ************************************************** ********************
$pagecontent = getsitecontent("index");
$article_title = $pagecontent[title];
$article_content = $pagecontent[content];
$article_content = nl2br($article_content);
// ************************************************** ********************
// Grab any settings that we will need for the current page from the DB
// ************************************************** ********************
$browsertitle = grabanysetting("browsertitle");
$sitename = grabanysetting("sitename");
$slogan = grabanysetting("slogan");
// ************************************************** ********************
// Check and see if the user is logged in to the site
// ************************************************** ********************
$loginstatus = logincheck();
$isloggedin = $loginstatus[loginstatus];
$loggedinname = $loginstatus[username];
// ************************************************** ********************
// End Prepwork - Output the page to the user
// ************************************************** ********************
if($isloggedin == "yes"){
$group = getgroup();
$cancp = cancp($group);
$canedit = cando($group, "canmanageadopts");
if($cancp == "yes" and $canedit == "yes"){
// We are logged in and can access this page, so let's get the post info...
// We sanitize at the same time we take in...
$name = $_POST["name"];
$name = preg_replace("/[^a-zA-Z0-9\\040.]/", "", $name);
$name = secure($name);
$description = $_POST["description"];
$description = secure($description);
$imageurl = $_POST["imageurl"];
$imageurl = secure($imageurl);
$existingimageurl = $_POST["existingimageurl"];
$existingimageurl = secure($existingimageurl);
$cba = $_POST["cba"];
$cba = preg_replace("/[^a-zA-Z0-9\\040.]/", "", $cba);
$cba = secure($cba);
$promocode = $_POST["promocode"];
$promocode = preg_replace("/[^a-zA-Z0-9\\040.]/", "", $promocode);
$promocode = secure($promocode);
$freqcond = $_POST["freqcond"];
$freqcond = secure($freqcond);
$number = $_POST["number"];
$number = secure($number);
$datecond = $_POST["datecond"];
$datecond = secure($datecond);
$date = $_POST["date"];
$date = secure($date);
$adoptscond = $_POST["adoptscond"];
$adoptscond = secure($adoptscond);
//////////////////////////////////////////////////////////////////////
$maxnumcond = $_POST["maxnumcond"];
$maxnumcond = secure($maxnumcond);
$morethannum = $_POST["morethannum"];
$morethannum = secure($morethannum);
$usergroupcond = $_POST["usergroupcond"];
$usergroupcond = secure($usergroupcond);
$usergroups = $_POST["usergroups"];
$usergroups = secure($usergroups);
//////////////////////////////////////////////////////////////////////
$alternates = $_POST["alternates"];
$alternates = secure($alternates);
$altoutlevel = $_POST["altoutlevel"];
$altoutlevel = secure($altoutlevel);
$altchance = $_POST["altchance"];
$altchance = secure($altchance);
$pricestatus = $_POST["pricestatus"];
$pricestatus = secure($pricestatus);
$pricevalue = $_POST["pricevalue"];
$pricevalue = secure($pricevalue);
// Now we run some checks to make sure that we have a go.
$error = "";
if($name == ""){
$error = "You did not enter in a name for the adoptable. Please go back and try again.";
}
if($name == ""){
$error = "You did not enter in a name for the adoptable. Please go back and try again.";
}
if($imageurl == "" and $existingimageurl == "none"){
$error = "You did not select an image for this adoptable. Please go back and make sure an image is selected for this adopt.";
}
if($imageurl != "" and $existingimageurl != "none"){
$error = "You selected two images for the adoptable's egg image. Please go back and make sure that either the image textbox is blank or the image dropdown box is set to No Exising Image.";
}
if($cba != "always" and $cba != "promo" and $cba != "conditions"){
$error = "You did not choose a valid scenario when this adoptable can be adopted. Please go back and either select the Always option, the Promo option or the Conditions option.";
}
//If we are using a promo code, we should have a promo code in the box...
if($cba == "promo" and $promocode == ""){
$error = "You selected that this adoptable is available for adoption only with a promo code, but you did not enter in a promo code. Please go back and either change this setting or type in a valid promo code.";
}
//If we are using conditions...
if($cba == "conditions"){
if($freqcond == "enabled" and !is_numeric($number)){
$error = "A condition is enabled but is blank or has an incorrect value. Please go back and double check your conditions and that they contain valid input.";
}
if($datecond == "enabled" and $date == ""){
$error = "A condition is enabled but is blank or has an incorrect value. Please go back and double check your conditions and that they contain valid input.";
}
if($adoptscond == "enabled"){
if($moreless == "" or !is_numeric($morelessnum) or $levelgrle == "" or !is_numeric($grlelevel)){
$error = "A condition is enabled but is blank or has an incorrect value. Please go back and double check your conditions and that they contain valid input.";
}
}
if($maxnumcond == "enabled" and !is_numeric($morethannum)){
$error = "A condition is enabled but is blank or has an incorrect value. Please go back and double check your conditions and that they contain valid input.";
}
if($usergroupcond == "enabled" and !is_numeric($usergroups)){
$error = "A condition is enabled but is blank or has an incorrect value. Please go back and double check your conditions and that they contain valid input.";
}
}
if($alternates == "enabled"){
if(!is_numeric($altoutlevel) or !is_numeric($altchance)){
$error = "There has been an error with the adoptable's alternate settings you selected. Please go back and make sure the alternate values are filled in correctly.";
}
}
if($pricestatus == "enabled"){
if(!is_numeric($pricevalue) or !is_numeric($pricevalue)){
$error = "There has been an error with the adoptable's pricing settings you selected. Please go back and make sure the price of your adoptable filled in correctly.";
}
if($pricevalue < 0){
$error = "Your adoptable's price cannot be a negative number, please go back and change this value again.";
}
}
//Check and see if an adoptable with this name already exists...
$query = "SELECT * FROM ".$prefix."adoptables WHERE type = '$name'";
$result = mysql_query($query);
$num = mysql_numrows($result);
if($num > 0){
$error = "An adoptable with this name already exists in your database. Please go back and rename the adoptable to something different.";
}
//If we have an error, show it. Otherwise continue...
if($error != ""){
$article_title = "An Error Has Occurred!";
$article_content = $error;
}
else{
//There has been no error, continue with the addition of the adoptable to the system...
//First determine which image URL to use...
$eggimage = "";
if($imageurl != "" and $existingimageurl == "none"){
$eggimage = $imageurl;
}
else{
$eggimage = $existingimageurl;
}
mysql_query("INSERT INTO ".$prefix."adoptables VALUES ('', '$name', '$description','$eggimage','$cba','$promocode', '$freqcond', '$number','$datecond','$date','$adoptscond','$maxn umcond','$morethannum','$usergroupcond','$usergrou ps','$alternates','$altoutlevel','$altchance','$pr icestatus','$pricevalue')");
$article_title = "Adoptable Added Successfully";
$article_content = "Your adoptable, ".$name.", has been added to the database successfully. You can now <a href='admin.php?set=adopts&do=addlevel'>Add a Level</a> to this adoptable. You can also <a href='admin.php'>go back to the Admin CP index page</a>.";
}
} //This bracket ends the check of whether or not this user can access the adopts portion of the ACP
}
else{
$article_title = "Access Denied";
$article_content = "Access Denied";
}
// ************************************************** ********************
// Begin Template Definition
// ************************************************** ********************
//Define our current theme
$file = $themeurl;
// Do the template changes and echo the ready template
$template = file_get_contents($file);
$template = replace(':ARTICLETITLE:',$article_title,$template) ;
$template = replace(':ARTICLECONTENT:',$article_content,$templ ate);
$template = replace(':ARTICLEDATE:',$article_date,$template);
$template = replace(':BROWSERTITLE:',$browsertitle,$template);
$template = replace(':SITENAME:',$sitename,$template);
//Define our links
if($cancp == "yes"){
//Admins see a custom set of links here...
$links = getadmlinks();
}
else{
$links = getlinks();
}
$template = replace(':LINKSBAR:',$links,$template);
//Get the content for the side bar...
$sidebar = getsidebar();
$template = replace(':SIDEFEED:',$sidebar,$template);
//Get the ad content...
$template = replace(':ADS:',$ads,$template);
//Get the slogan info
$template = replace(':SLOGAN:',$slogan,$template);
echo $template;
// ************************************************** ********************
// End Template Definition
// ************************************************** ********************
?>