MadCollector Code

<?php
/* This file is part of Madcollector.
 * Madcollector created by Thomas Andrieu,
 * Developped by Mickael Jardet and Thomas Andrieu.
 * Madcollector is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.

 * Madcollector is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 */
session_start(); // on démarre la session
ob_start();//Pour le PDF
?>
<?php
//defines divers
define("DATA", "data/");
define("LIBS", "libs/");
define("COVER","covers/kingsize/");
define("PREVIEWCOVER","covers/thumbails/");

	require LIBS.'functions.php';
	require LIBS.'classes/mysql.php';
        require_once LIBS.('xajax.inc.php');
        $xajax = new xajax(); 
        


	require 'cfg/param.php';	// Fichiers de configuration
        $myDB = new MYSQL(); // on ouvre une nouvelle instance
 	// penser à faire un test de connection 
 	$link = $myDB -> connect($myHost, $myUser, $myPass, $myBase);


//Desactivation des magic_quotes (cf problemes free.fr)
set_magic_quotes_runtime(FALSE);
if (get_magic_quotes_gpc()) {
   $_SERVER = stripslashes_array($_SERVER);
   $_GET = stripslashes_array($_GET);
   $_POST = stripslashes_array($_POST);
   $_COOKIE = stripslashes_array($_COOKIE);
   $_FILES = stripslashes_array($_FILES);
   $_ENV = stripslashes_array($_ENV);
   $_REQUEST = stripslashes_array($_REQUEST);
   $HTTP_SERVER_VARS = stripslashes_array($HTTP_SERVER_VARS);
   $HTTP_GET_VARS = stripslashes_array($HTTP_GET_VARS);
   $HTTP_POST_VARS = stripslashes_array($HTTP_POST_VARS);
   $HTTP_COOKIE_VARS = stripslashes_array($HTTP_COOKIE_VARS);
   $HTTP_POST_FILES = stripslashes_array($HTTP_POST_FILES);
   $HTTP_ENV_VARS = stripslashes_array($HTTP_ENV_VARS);
   if (isset($_SESSION)) {    #These are unconfirmed (?)
       $_SESSION = stripslashes_array($_SESSION, '');
       $HTTP_SESSION_VARS = stripslashes_array($HTTP_SESSION_VARS, '');
   }
}

//Getting main settings
$table_settings = array();
$requete_settings = 'SELECT * FROM mc_settings;';
$envoi_settings = $myDB->send_query($requete_settings);
$nb_occur = $myDB->num_rows();
if(($nb_occur != 0)&&($nb_occur != ""))
{
  while($lec_settings = $myDB->get_object($envoi_settings))
    {
      $table_settings[$lec_settings->setting_name]=$lec_settings->setting_value;
    }
}

//Language in mc_settings
if($_SESSION['lang']=="") 
{
  $_SESSION['lang']=$table_settings["default_language"];
  //si malgré tout pas de langue par défaut, français
  if($_SESSION['lang']=="")
    $_SESSION['lang']="fr";
}
        // Langue
        if($_GET['lang']!=""){$_SESSION['lang']=$_GET['lang'];}
        $lang=$_SESSION['lang'];
 	include 'locales/'.$lang.'/locale.'.$lang.".php"; // exemple "locales/fr/locale.fr ou fr est la variable $lang


//page, lettre et autres GET courants
//--------------
$letter = substr($_GET['letter'],0,1);
$page = $_GET['page'];
$nbrEnregPage = $_GET['enreg'];

if(($letter == "")||(!isset($letter)))
     $letter = "A";
     if(($page == "")||(!isset($page))||(!is_numeric($page)))
     $page = "1";
if(($_SESSION['NbrEnregPage']=="")||(!isset($_SESSION['NbrEnregPage']))||(!is_numeric($_SESSION['NbrEnregPage'])))
     $_SESSION['NbrEnregPage'] = 50;
if(($nbrEnregPage == "")||(!isset($nbrEnregPage))||(!is_numeric($_SESSION['NbrEnregPage'])))
     $nbrEnregPage = $_SESSION['NbrEnregPage'];
else $_SESSION['NbrEnregPage'] = $nbrEnregPage;
//---------------	
 
// Pour faire plus 'secure' et faire plaisir au chef
$rub=$_GET['rub'];
// Tableau contenant les pages autorisées
//$tableau = glob(DATA."*.inc.php");
$tableau=array();
//free.fr ne supporte pas la fonction glob()
                        if ($dh = opendir(DATA)) 
			      {
				while (($file = readdir($dh)) !== false)
				  if (substr($file, strlen($file) - 8) == '.inc.php') 
				    array_push($tableau, DATA.$file);
			      }
			closedir($dh);
			
                        //End unsupported glob()
			if (isset($rub) && in_array(DATA.$rub.".inc.php", $tableau)) {
				$pageInclude = DATA.$rub.".inc.php";
			}else{
				$pageInclude = DATA."introduction.inc.php";
			}
			include $pageInclude; 
		?>
   </div> <!-- fin de contenu (contents) -->


	
</div> <!-- fin de page -->

<div id="footer"></div> <!-- fin de footer -->

</body>
</html>