MadCollector Code

<?php
/* This file is part of Madcollector.
* Madcollector created by Thomas Andrieu,
* Developped by Thomas Andrieu.
* Madcollector is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation.

* Madcollector is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
* GNU General Public License for more details.
*/

if(basename($_SERVER['PHP_SELF']) != 'index.php')
  exit;

if((isset($_SESSION["level"]))&&($_SESSION["level"]>1)&&(isset($_POST["main_form_submit"])))
    {
      $_POST["cover_price_text"] = preg_replace ("/,/",".",$_POST["cover_price_text"]);//Non anglo-saxon price
      $oldIssue = maddb_select('SELECT * FROM '.$cfg_table_prefix.'issues,'.$cfg_table_prefix.'series WHERE '.$cfg_table_prefix.'issues.id_series="'.$id_series.'" AND '.$cfg_table_prefix.'issues.issue="'.$issue.'" AND '.$cfg_table_prefix.'issues.id_series='.$cfg_table_prefix.'series.id_series;');
      $mySeries = maddb_select('SELECT * FROM '.$cfg_table_prefix.'series as ser, '.$cfg_table_prefix.'publishers as pub WHERE ser.id_series="'.$id_series.'" AND ser.id_publisher=pub.id_publisher;');
      $requetes_issue = array();
	  array_push($requetes_issue,"UPDATE ".$cfg_table_prefix."issues SET issue_cover_price='".mad_strip($_POST["cover_price_text"])."', issue_currency='".$_POST["currency_select"]."',issue_month='".$_POST["publication_month"]."',issue_year='".$_POST["publication_year"]."' WHERE id_series='".$id_series."' AND issue='".$issue."';");
	  $requete_log = "INSERT INTO ".$cfg_table_prefix."logs (id_user,log_date,log_area,log_action,log) VALUES ('".$_SESSION["id_user"]."',NOW(),'issue','update','".addslashes(mad_strip($mySeries["publisher_name"]))." : ".addslashes(mad_strip($mySeries["series_name"]))." vol.".$mySeries["series_volume"]." #".addslashes(mad_strip($issue));
	  if($_POST["cover_price_text"] != $oldIssue["issue_cover_price"]) $requete_log .="\r\nnewCoverPrice: ".addslashes(mad_strip($_POST["cover_price_text"]));
	  if($_POST["currency_select"] != $oldIssue["issue_currency"]) $requete_log .="\r\nnewCurrency: ".addslashes(mad_strip($_POST["currency_select"]));
	  if($_POST["publication_month"] != $oldIssue["issue_month"]) $requete_log .="\r\nnewMonth: ".addslashes(mad_strip($_POST["publication_month"]));
	  if($_POST["publication_year"] != $oldIssue["issue_year"]) $requete_log .="\r\nnewYear: ".addslashes(mad_strip($_POST["publication_year"]));
	  $requete_log .= "');";
      array_push($requetes_issue,$requete_log);
	  $changedLines = maddb_transaction($requetes_issue);
    }

  //main story data
if((isset($_SESSION["level"]))&&($_SESSION["level"]>1)&&(isset($_POST["main_story_submit"])))
    {
      $oldIssue = maddb_select('SELECT * FROM '.$cfg_table_prefix.'issues,'.$cfg_table_prefix.'series WHERE '.$cfg_table_prefix.'issues.id_series="'.$id_series.'" AND '.$cfg_table_prefix.'issues.issue="'.$issue.'" AND '.$cfg_table_prefix.'issues.id_series='.$cfg_table_prefix.'series.id_series;');
      $mySeries = maddb_select('SELECT * FROM '.$cfg_table_prefix.'series as ser, '.$cfg_table_prefix.'publishers as pub WHERE ser.id_series="'.$id_series.'" AND ser.id_publisher=pub.id_publisher;');
      $requetes_issue = array();
      $newBNW="";
      if(isset($_POST["main_story_isBlackNWhite"])) 
      {
        if($_POST["main_story_isBlackNWhite"]=="on") $newBNW = "Y";
      }
      else $newBNM = "N";
      if(!is_numeric($_POST["main_story_page_number"])) $_POST["main_story_page_number"]==0;
	  $old_summary = $oldIssue["issue_summary"];
      $new_summary = addXML_content($old_summary,"summary","summaries",mad_strip($_POST["main_story_summary_text"]));
      $requetes_issue = array();
	  array_push($requetes_issue,"UPDATE ".$cfg_table_prefix."issues SET issue_title='".addslashes(mad_strip($_POST["main_story_title"]))."', issue_summary='".addslashes($new_summary)."', issue_black_white='".$newBNW."',issue_nb_pages='".$_POST["main_story_page_number"]."', issue_genre='".$_POST["main_story_genre"]."' WHERE id_series='".$id_series."' AND issue='".$issue."'");
	  $requete_log = "INSERT INTO ".$cfg_table_prefix."logs (id_user,log_date,log_area,log_action,log) VALUES ('".$_SESSION["id_user"]."',NOW(),'story','update','".addslashes(mad_strip($mySeries["publisher_name"]))." : ".addslashes(mad_strip($mySeries["series_name"]))." vol.".$mySeries["series_volume"]." #".addslashes(mad_strip($issue)."story 0");
	  if($_POST["main_story_title"] != $oldIssue["issue_title"]) $requete_log .="\r\nnewTitle: ".addslashes(mad_strip($_POST["main_story_title"]));
	  if($old_summary != $new_summary) $requete_log .="\r\nnewSummary: ".addslashes(mad_strip($_POST["main_story_summary_text"]));
	  if($newBNW != $oldIssue["issue_black_white"]) $requete_log .="\r\nnewBNW: ".addslashes(mad_strip($newBNW));
	  if($_POST["main_story_page_number"] != $oldIssue["issue_nb_pages"]) $requete_log .="\r\nnewPageNumber: ".addslashes(mad_strip($_POST["main_story_page_number"]));
	  if($_POST["main_story_genre"] != $oldIssue["issue_genre"]) $requete_log .="\r\nnewGenre: ".addslashes(mad_strip($_POST["main_story_genre"]));
	  $requete_log .= "');";
      array_push($requetes_issue,$requete_log);
	  $changedLines = maddb_transaction($requetes_issue);
    }
    
  //Update story data
  if((isset($_SESSION["level"]))&&($_SESSION["level"]>1)&&(isset($_POST["submit_story"]))&&($_POST["updated_story"])!="")
    {
      $idStory = $_POST["updated_story"];
      $oldStory = maddb_select('SELECT * FROM '.$cfg_table_prefix.'stories WHERE id_series="'.$id_series.'" AND issue="'.$issue.'" AND id_story='.$idStory.';');
      $mySeries = maddb_select('SELECT * FROM '.$cfg_table_prefix.'series as ser, '.$cfg_table_prefix.'publishers as pub WHERE ser.id_series="'.$id_series.'" AND ser.id_publisher=pub.id_publisher;');
      $requetes_story = array();
      if($_POST["story".$idStory."_isBlackNWhite"]=="on")
	    $newBNW = "Y";
      else $newBNW = "N";
	  $old_summary = $oldStory["story_comments"];
      $new_summary = addXML_content($old_summary,"comment","comments",mad_strip($_POST["story_summary".$idStory."_text"]));
      array_push($requetes_story,"UPDATE mc_stories SET story_title='".addslashes(mad_strip($_POST["story".$idStory."_title"]))."', story_comments='".addslashes($new_summary)."', story_black_white='".$newBNW."',story_nb_pages='".$_POST["story".$idStory."_page_number"]."', story_genre='".$_POST["story".$idStory."_genre"]."' WHERE id_series='".$id_series."' AND issue='".$issue."' AND id_story='".$idStory."'");
	  $requete_log = "INSERT INTO ".$cfg_table_prefix."logs (id_user,log_date,log_area,log_action,log) VALUES ('".$_SESSION["id_user"]."',NOW(),'story','update','".addslashes(mad_strip($mySeries["publisher_name"]))." : ".addslashes(mad_strip($mySeries["series_name"]))." vol.".$mySeries["series_volume"]." #".addslashes(mad_strip($issue)."story ".$idStory);
	  if($_POST["story".$idStory."_title"] != $oldStory["story_title"]) $requete_log .="\r\nnewTitle: ".addslashes(mad_strip($_POST["story".$idStory."_title"]));
	  if($old_summary != $new_summary) $requete_log .="\r\nnewSummary: ".addslashes(mad_strip($_POST["story_summary".$idStory."_text"]));
	  if($newBNW != $oldStory["story_black_white"]) $requete_log .="\r\nnewBNW: ".addslashes(mad_strip($newBNW));
	  if($_POST["story".$idStory."_page_number"] != $oldStory["story_nb_pages"]) $requete_log .="\r\nnewPageNumber: ".addslashes(mad_strip($_POST["story".$idStory."_page_number"]));
	  if($_POST["story".$idStory."_genre"] != $oldStory["story_genre"]) $requete_log .="\r\nnewGenre: ".addslashes(mad_strip($_POST["story".$idStory."_genre"]));
	  $requete_log .= "');";
      array_push($requetes_story,$requete_log);
	  $changedLines = maddb_transaction($requetes_story);
    }

  //new story
  if((isset($_SESSION["level"]))&&($_SESSION["level"]>1)&&(isset($_POST["add_story_submit"])))
    {
      if($_POST["add_story_black_n_white"]=="on")
    	$newBNW = 1;
      else $newBNW = 0;
      if(!is_numeric($_POST["add_story_pages"])) $_POST["add_story_pages"]==0;
      $mySeries = maddb_select('SELECT * FROM '.$cfg_table_prefix.'series as ser, '.$cfg_table_prefix.'publishers as pub WHERE ser.id_series="'.$id_series.'" AND ser.id_publisher=pub.id_publisher;');
      $requetes_story = array();
      array_push($requetes_story,"INSERT INTO ".$cfg_table_prefix."stories(id_series,issue,story_title,story_black_white,story_nb_pages,story_genre) VALUES('".$id_series."','".$issue."','".addslashes(mad_strip($_POST["add_story_title"]))."','".$newBNW."','".$_POST["add_story_pages"]."','".$_POST["add_story_genre"]."')");
      array_push($requetes_story,"INSERT INTO ".$cfg_table_prefix."logs (id_user,log_date,log_area,log_action,log) VALUES ('".$_SESSION["id_user"]."',NOW(),'story','create','".addslashes(mad_strip($mySeries["publisher_name"]))." : ".addslashes(mad_strip($mySeries["series_name"]))." vol.".$mySeries["series_volume"]." #".addslashes(mad_strip($issue))."story: ".addslashes(mad_strip($_POST["add_story_title"]))."';");
	  $changedLines = maddb_transaction($requetes_story);
    }

  //Story Casting
  if((isset($_SESSION["level"]))&&($_SESSION["level"]>1)&&(isset($_POST["update_story_cast_submit"])))
    {
      $requetes_casting = array();
      $story_number = $_POST["id_story"];
      if(isset($_POST["remove_artist_story"]))
        for($i=0;$i<sizeOf($_POST["remove_artist_story"]);$i++)
	    {
	        $artist = $_POST["remove_artist_story"][$i];
	        array_push($requetes_casting,"DELETE FROM ".$cfg_table_prefix."works WHERE id_artist='".$artist."' AND id_series='".$id_series."' and issue='".$issue."' and id_story='".$story_number."' AND role='".$_POST["select_artist_role".$artist]."'; ");
 	    }
 	  if(isset($_POST["cast_artist_ids"]))  
        for($i=0;$i<sizeOf($_POST["cast_artist_ids"]);$i++)
	     {
	        $idArtist = $_POST["cast_artist_ids"][$i];
	        array_push($requetes_casting, "UPDATE ".$cfg_table_prefix."works SET role='".$_POST["select_artist_role".$idArtist]."',works_pages='".addslashes(mad_strip($_POST["artist_pages".$idArtist]))."'  WHERE id_artist='".$idArtist."' AND id_series='".$id_series."' and issue='".$issue."' and id_story='".$story_number."'; ");
	    }
	  if(isset($_POST["new_artist_id"]))  
        if($_POST["new_artist_id"]!="")
	      {
	    array_push($requetes_casting, "INSERT INTO ".$cfg_table_prefix."works (id_series,issue,id_artist,id_story,role,works_pages) VALUES ('".$id_series."','".$issue."','".$_POST["new_artist_id"]."','".$story_number."','".$_POST["select_new_artist_role"]."','".addslashes(mad_strip($_POST["new_artist_pages"]))."');");
         }
	  $changedLines = maddb_transaction($requetes_casting);
    }

  //Add a new story arc
  if((isset($_SESSION["level"]))&&($_SESSION["level"]>1)&&(isset($_POST["new_story_arc_submit"])))
    {
      $requetes_arc = array();
      array_push($requetes_arc, "UPDATE ".$cfg_table_prefix."issues SET id_arc='".$_POST["new_story_arc_id"]."', issue_reading_order='".$_POST["reading_order_select"]."' WHERE issue='".$issue."' and id_series='".$id_series."'; ");
	  $changedLines = maddb_transaction($requetes_arc);
    }
  //Remove a story arc
  if((isset($_SESSION["level"]))&&($_SESSION["level"]>1)&&(isset($_POST["delete_story_arc"])))
    {
      $requetes_arc = array();
      array_push($requetes_arc, "UPDATE ".$cfg_table_prefix."issues SET id_arc='0' WHERE issue='".$issue."' and id_series='".$id_series."'; ");
	  $changedLines = maddb_transaction($requetes_arc);
    }
  //Add a new link
  if((isset($_SESSION["level"]))&&($_SESSION["level"]>1)&&(isset($_POST["new_link_submit"])))
    {
      if($_POST["new_link_label"]=="")
	    array_push($error_messages,$locales["ErrMsg_No_Link_Label"]); 
      if($_POST["new_link_url"]!="")
	    {
      $requetes_link = array();
	  array_push($requetes_link, "INSERT into ".$cfg_table_prefix."issue_links(id_series,issue,link_url,link_type,link_label) VALUES('".$id_series."','".$issue."','".mad_strip($_POST["new_link_url"])."','".$_POST["new_link_type"]."','".addslashes(mad_strip($_POST["new_link_label"]))."'); ");
	  $changedLines = maddb_transaction($requetes_link);
	  }
    }
  //Remove links
  if((isset($_SESSION["level"]))&&($_SESSION["level"]>1)&&(isset($_POST["remove_links_submit"])))
    {
      $requetes_link = array();
      for($i=0;$i<sizeOf($_POST["check_Links_Remove"]);$i++)
	    {
	        array_push($requetes_link, "DELETE FROM ".$cfg_table_prefix."issue_links WHERE id_link='".$_POST["check_Links_Remove"][$i]."'; ");
	    }
	  $changedLines = maddb_transaction($requetes_link);
    }

  //Add comment
  if((isset($_SESSION["level"]))&&($_SESSION["level"]>0)&&(isset($_POST["new_comment_text_submit"]))&&($_POST["new_comment_text"]!=""))
    {
      $requetes_comment = array();
	  array_push($requetes_comment, "INSERT into ".$cfg_table_prefix."issue_comments(id_series,issue,id_user,comment_date,comment_lang,comment) VALUES ('".$id_series."','".$issue."','".$_SESSION['id_user']."',NOW(),'".$lang."','".addslashes(mad_strip(nl2br($_POST["new_comment_text"])))."'); ");
	  $changedLines = maddb_transaction($requetes_comment);
    }
    
  //Cover
  if((isset($_SESSION["level"]))&&($_SESSION["level"]>1)&&(isset($_POST['upload_cover']))) 
    {
      create_thumbnail($_FILES['fichier_cover'],$id_series."_".$issue.".jpg");
      // End of JPG thumbnail creation
    }
  //VariantCover
  if((isset($_SESSION["level"]))&&($_SESSION["level"]>1)&&(isset($_POST['upload_variantcover']))&&($_POST['variantcover_text']!="")) 
    {
      $requetes_variant = array();
	  array_push($requetes_variant, "INSERT into ".$cfg_table_prefix."issue_variantcovers(id_series,issue,cover_comment) VALUES ('".$id_series."','".$issue."','".mad_strip($_POST['variantcover_text'])."'); ");
	  $changedLines = maddb_transaction($requetes_variant);
      if($changedLines != -1)
	    {
	        $latestVariant = maddb_select("SELECT * FROM ".$cfg_table_prefix."issue_variantcovers WHERE id_series='".$id_series."' AND issue='".$issue."' ORDER BY id_cover DESC");
	        $cover_id = $latestVariant["id_cover"];
	        create_thumbnail($_FILES['fichier_variantcover'],$id_series."_".$issue."_".$cover_id.".jpg");
	    }
    }

  //Delete VariantCover
  if((isset($_SESSION["level"]))&&($_SESSION["level"]>1)&&(isset($_POST['delete_cover_submit'])))
    {
      $requetes_variant = array();
	  array_push($requetes_variant, "DELETE FROM ".$cfg_table_prefix."issue_variantcovers WHERE id_cover='".$_POST["delete_cover_id"]."'; ");
	  $changedLines = maddb_transaction($requetes_variant);
      if($changedLines != -1)
	    {
    	  if(is_file(PREVIEWCOVER.$id_series."_".$issue."_".$_POST["delete_cover_id"].".jpg"))
    	    unlink(PREVIEWCOVER.$id_series."_".$issue."_".$_POST["delete_cover_id"].".jpg");
    	  if(is_file(COVER.$id_series."_".$issue."_".$_POST["delete_cover_id"].".jpg"))
    	    unlink(COVER.$id_series."_".$issue."_".$_POST["delete_cover_id"].".jpg");
    	}
    }
    
    //Update comment
    if((isset($_SESSION["level"]))&&($_SESSION["level"]>2)&&(isset($_POST['edit_comment_submit']))&&($_POST['edit_comment_text']!=""))
    {
      $requetes_comment = array();
	  array_push($requetes_comment, "UPDATE ".$cfg_table_prefix."issue_comments SET comment='".addslashes(mad_strip(nl2br($_POST['edit_comment_text'])))."' WHERE id_comment='".$_POST['update_comment_id']."';");
	  $changedLines = maddb_transaction($requetes_comment);
    }
    //confirmed comment removal
    if((isset($_SESSION["level"]))&&($_SESSION["level"]>2)&&(isset($_POST['confirm_delete_comment_submit'])))
    {
      $requetes_comment = array();
	  array_push($requetes_comment, "DELETE FROM ".$cfg_table_prefix."issue_comments WHERE id_comment='".$_POST["confirm_delete_comment_id"]."'; ");
	  $changedLines = maddb_transaction($requetes_comment);
    }

  //Move to series
    if((isset($_POST["merge_series_submit"]))&&($_SESSION["level"]>2))
    {
      $isOKMove = move_issue($id_series,$issue,$_POST["merge_series_select"],$issue);
      if($isOKMove)
	        header("Location:index.php?rub=issue&issue=".$issue."&id_series=".$_POST["merge_series_select"]);
    }
    
  //Rename issue
    if((isset($_POST["rename_issue_submit"]))&&($_SESSION["level"]>2))
    {
      $isOKMove = move_issue($id_series,$issue,$id_series,$_POST["rename_issue_text"]);
      if($isOKMove)
	        header("Location:index.php?rub=issue&issue=".$_POST["rename_issue_text"]."&id_series=".$id_series);
    }

?>