Skip to content

created pdo.class.php and used in some lib files #204

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
vigneshmanix wants to merge 1 commit into
base: master
Choose a base branch
from
Open

created pdo.class.php and used in some lib files #204

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 12 additions & 11 deletions cms/actionbar.lib.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,19 +24,19 @@
* @return $actionbar The list of permitted actions for the 'user' of 'page'.
*/
function getActionbarPage($userId, $pageId) {

global $pdb;
Copy link
Contributor

@nean nean Jan 13, 2015

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

use tab here instead of 4 spaces

Copy link
Member

@vshriram93 vshriram93 Mar 5, 2015

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi nean,
From now on we will following strict standards. This includes using 4 spaces instead of tab spacing.

Copy link
Contributor

@nean nean Mar 7, 2015

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks but this file has both 4 spaces and tabs

$action_query = "SELECT perm_id, perm_action, perm_text FROM `".MYSQL_DATABASE_PREFIX."permissionlist` WHERE page_module = 'page'";
$action_result = mysql_query($action_query);
$action_result = $pdb->query($action_query);
$allow_login_query = "SELECT `value` FROM `".MYSQL_DATABASE_PREFIX."global` WHERE `attribute` = 'allow_login'";
$allow_login_result = mysql_query($allow_login_query);
$allow_login_result = mysql_fetch_array($allow_login_result);
$allow_login_result = $pdb->query($allow_login_query);
$allow_login_result = $allow_login_result[0];
$actionbarPage=array();
while($action_row = mysql_fetch_assoc($action_result)) {
foreach($action_result as $action_row) {
if(getPermissions($userId, $pageId, $action_row['perm_action']))
$actionbarPage[$action_row['perm_action']]=$action_row['perm_text'];
}
if($userId==0) {
if($allow_login_result[0]) {
if($allow_login_result['value']) {
$actionbarPage["login"]="Login";
$actionbarPage["login&subaction=register"]="Register";
}
Expand Down Expand Up @@ -75,19 +75,20 @@ function getActionbarPage($userId, $pageId) {
* @return $actionbar The list of permitted module specific actions for the 'user' of 'page'.
*/
function getActionbarModule($userId, $pageId) {
global $pdb;
$action_query = "SELECT perm_id, perm_action, perm_text FROM `".MYSQL_DATABASE_PREFIX."permissionlist` WHERE perm_action != 'create' AND page_module = '".getEffectivePageModule($pageId)."'";
$action_result = mysql_query($action_query);
$action_result = $pdb->query($action_query);
$allow_login_query = "SELECT `value` FROM `".MYSQL_DATABASE_PREFIX."global` WHERE `attribute` = 'allow_login'";
$allow_login_result = mysql_query($allow_login_query);
$allow_login_result = mysql_fetch_array($allow_login_result);
$allow_login_result = $pdb->query($allow_login_query);
$allow_login_result = $allow_login_result[0];
$actionbarPage = array();
while($action_row = mysql_fetch_assoc($action_result))
foreach($action_result as $action_row)
if(getPermissions($userId, $pageId, $action_row['perm_action']))
$actionbarPage[$action_row['perm_action']]=$action_row['perm_text'];
$actionbar="<div id=\"cms-actionbarModule\">";
if(is_array($actionbarPage)>0)
foreach($actionbarPage as $action=>$actionname) {
if((!$allow_login_result[0])&&($actionname=="View")&&!($userId))
if((!$allow_login_result['value'])&&($actionname=="View")&&!($userId))
continue;
$actionbar.="<span class=\"cms-actionbarModuleItem\"><a class=\"robots-nofollow\" rel=\"nofollow\" href=\"./+$action\">$actionname</a></span>\n";
}
Expand Down
12 changes: 7 additions & 5 deletions cms/authenticate.lib.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,10 +24,11 @@
*
*/
function getSessionData($user_id) {
global $pdb;
$user_id=escape($user_id);
$query = "SELECT `user_name`,`user_email`,`user_lastlogin` FROM `" . MYSQL_DATABASE_PREFIX . "users` WHERE `user_id`='$user_id'";
$data = mysql_query($query) or die(mysql_error());
$temp = mysql_fetch_assoc($data);
$data = $pdb->query($query);
$temp = $data[0];
$user_name = $temp['user_name'];
$user_email = $temp['user_email'];
$lastlogin = $temp['user_lastlogin'];
Expand Down Expand Up @@ -129,6 +130,7 @@ function firstTimeGetUserId() {
*
*/
function getGroupIds($userId) {
global $pdb;
$groups = array (
0
);
Expand All @@ -137,9 +139,9 @@ function getGroupIds($userId) {
else
$groups[] = 1;
$groupQuery = 'SELECT `group_id` FROM `' . MYSQL_DATABASE_PREFIX . 'usergroup` WHERE `user_id` = \'' . escape($userId)."'";
$groupQueryResult = mysql_query($groupQuery) or die(mysql_error());
while ($groupQueryResultRow = mysql_fetch_row($groupQueryResult))
$groups[] = $groupQueryResultRow[0];
$groupQueryResult = $pdb->query($groupQuery);
foreach($groupQueryResult as $groupQueryResultRow)
$groups[] = $groupQueryResultRow['group_id'];
return $groups;
}

Expand Down
5 changes: 3 additions & 2 deletions cms/breadcrumbs.lib.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,12 +25,13 @@
* @return HTML string representing the breadcrumbs to be displayed for the given page
*/
function breadcrumbs($pageIdArray) {
global $pdb;
$sqlOutputArray = array();
$pageIdList = join($pageIdArray, ",");
$query = 'SELECT `page_id`, `page_name`, `page_title` FROM `' . MYSQL_DATABASE_PREFIX . 'pages` WHERE `page_id` IN (' . $pageIdList . ')';
$resultId = mysql_query($query);

while ($row = mysql_fetch_assoc($resultId))
$rows=$pdb->query($query);
foreach ($rows as $row)
$sqlOutputArray[$row['page_id']] = array($row['page_name'], $row['page_title']);

global $urlRequestRoot;
Expand Down
6 changes: 3 additions & 3 deletions cms/download.lib.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@
*/

function download($pageId, $userId, $fileName,$action="") {

global $pdb;
/// If page not found display error
if($pageId===false) {
header("http/1.0 404 Not Found" );
Expand Down Expand Up @@ -75,8 +75,8 @@ function download($pageId, $userId, $fileName,$action="") {
//return the file the particular page id.

$query = "SELECT * FROM `" . MYSQL_DATABASE_PREFIX . "uploads` WHERE `upload_filename`= '". escape($fileName). "' AND `page_module` = '".escape($moduleType)."' AND `page_modulecomponentid` = '".escape($moduleComponentId)."'";
$result = mysql_query($query) or die(mysql_error() . "upload L:85");
$row = mysql_fetch_assoc($result);
$rows = $pdb->query($query);
$row = $rows[0];

$fileType = $row['upload_filetype'];
/**
Expand Down
4 changes: 2 additions & 2 deletions cms/iconmanagement.lib.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@
* @return HTML of the FORM
*/
function handleIconManagement() {

global $pdb;
/*
* Upload a new icon
*/
Expand Down Expand Up @@ -63,7 +63,7 @@ function handleIconManagement() {
* Save the Icon in Database - The following entries are saved
* icon URL - path relative to the website installation folder on the server
*/
mysql_query("UPDATE `".MYSQL_DATABASE_PREFIX."pages` SET `page_image`='$iconURL' WHERE `page_id`='$target'");
$pdb->query("UPDATE `".MYSQL_DATABASE_PREFIX."pages` SET `page_image`='$iconURL' WHERE `page_id`='$target'");
$pageDetails = getPageInfo($target);
if($pageDetails['page_image'] != NULL)
echo "<img src=\"$rootUri/$cmsFolder/$templateFolder/common/icons/16x16/status/weather-clear.png\" /> ";
Expand Down
90 changes: 47 additions & 43 deletions cms/modules/article.lib.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,12 +42,14 @@ public static function getUploadableFileProperties(&$fileTypesArray,&$maxFileSiz
}

function isCommentsEnabled() {
$result = mysql_fetch_array(mysql_query("SELECT `allowComments` FROM `article_content` WHERE `page_modulecomponentid` = '{$this->moduleComponentId}'"));
return $result['allowComments'];
global $pdb;
$result = $pdb->query("SELECT `allowComments` FROM `article_content` WHERE `page_modulecomponentid` = '{$this->moduleComponentId}'");
return $result[0]['allowComments'];
}

function setCommentEnable($val) {
mysql_query("UPDATE `article_content` SET `allowComments` ='$val' WHERE `page_modulecomponentid` = '{$this->moduleComponentId}'");
global $pdb;
$result = $pdb->query("UPDATE `article_content` SET `allowComments` ='$val' WHERE `page_modulecomponentid` = '{$this->moduleComponentId}'");
}

function renderComment($id,$user,$timestamp,$comment,$delete=0) {
Expand Down Expand Up @@ -93,40 +95,41 @@ function commentBox() {

public function actionView($text="") {

global $pdb;
if (isset($_GET['draft']) && isset ($_POST['CKEditor1'])){

//$query = "UPDATE `article_draft` SET `draft_content` = '" . $_POST["CKEditor1"] . "' WHERE `page_modulecomponentid` =".$this->moduleComponentId;
$query="SELECT MAX(draft_number) AS MAX FROM `article_draft` WHERE page_modulecomponentid ='$this->moduleComponentId'";
$result = mysql_query($query);
if(!$result) { displayerror(mysql_error() . "article.lib L:44"); return; }
if(mysql_num_rows($result))
$result = $pdb->query($query);
//if(!$result) { displayerror(mysql_error() . "article.lib L:44"); return; }
if(count($result))
{
$drow = mysql_fetch_assoc($result);
$drow = $result[0];
$draftId = $drow['MAX'] + 1;
}
else $draftId=1;

$query = "INSERT INTO `article_draft` (`page_modulecomponentid`,`draft_number`,`draft_content`,`draft_lastsaved`,`user_id`) VALUES ('".$this->moduleComponentId."','".$draftId."','".$_POST['CKEditor1']."',now(),'".$this->userId."')";
$result = mysql_query($query) or die(mysql_error());
if(mysql_affected_rows() < 1)
$result = $pdb->query($query);
if($result < 1)
displayerror("Unable to draft the article");

}
if($this->isCommentsEnabled() && isset($_POST['btnSubmit'])) {
$id = mysql_fetch_array(mysql_query("SELECT MAX(`comment_id`) AS MAX FROM `article_comments`"));
$id = $id['MAX'] + 1;
$id = $pdb->query("SELECT MAX(`comment_id`) AS MAX FROM `article_comments`");
$id = $id[0]['MAX'] + 1;
$user = getUserName($this->userId);
$comment = escape(safe_html($_POST['comment']));
mysql_query("INSERT INTO `article_comments`(`comment_id`,`page_modulecomponentid`,`user`,`comment`) VALUES('$id','{$this->moduleComponentId}','$user','$comment')");
if(mysql_affected_rows())
$result = $pdb->query("INSERT INTO `article_comments`(`comment_id`,`page_modulecomponentid`,`user`,`comment`) VALUES('$id','{$this->moduleComponentId}','$user','$comment')");
if($result)
displayinfo("Post successful");
else
displayerror("Error in posting comment");
}
if($text==""){
$query = "SELECT article_content,article_lastupdated FROM article_content WHERE page_modulecomponentid='" . $this->moduleComponentId."'";
$result = mysql_query($query);
if($row = mysql_fetch_assoc($result)) {
$result = $pdb->query($query);
if($row = $result[0]) {
$text = $row['article_content'];
$text = censor_words($text);
global $PAGELASTUPDATED;
Expand All @@ -148,12 +151,12 @@ public function actionView($text="") {


if($this->isCommentsEnabled()) {
$comments = mysql_query("SELECT `comment_id`,`user`,`timestamp`,`comment` FROM `article_comments` WHERE `page_modulecomponentid` = '{$this->moduleComponentId}' ORDER BY `timestamp`");
if(mysql_num_rows($comments)>0)
$comments = $pdb->query("SELECT `comment_id`,`user`,`timestamp`,`comment` FROM `article_comments` WHERE `page_modulecomponentid` = '{$this->moduleComponentId}' ORDER BY `timestamp`");
if(count($comments)>0)
$ret .= "<fieldset><legend>Comments</legend>";
while($row = mysql_fetch_array($comments))
foreach($comments as $row)
$ret .= $this->renderComment($row['comment_id'],$row['user'],$row['timestamp'],censor_words($row['comment']));
if(mysql_num_rows($comments)>0)
if(count($comments)>0)
$ret .= "</fieldset>";
$ret .= $this->commentBox();
}
Expand All @@ -162,15 +165,15 @@ public function actionView($text="") {


public function actionEdit() {
global $sourceFolder,$ICONS;
global $sourceFolder,$ICONS,$pdb;
//require_once("$sourceFolder/diff.lib.php");
require_once($sourceFolder."/upload.lib.php");

if (isset($_GET['deldraft']))
{
$dno = escape($_GET['dno']);
$query = "DELETE FROM `article_draft` WHERE `page_modulecomponentid`='". $this->moduleComponentId."' AND `draft_number`=".$dno;
$result = mysql_query($query) or die(mysql_error());
$result = $pdb->query($query);
}

global $ICONS;
Expand All @@ -192,8 +195,8 @@ public function actionEdit() {

submitFileUploadForm($this->moduleComponentId,"article",$this->userId,UPLOAD_SIZE_LIMIT);
if(isset($_GET['delComment']) && $this->userId == 1) {
mysql_query("DELETE FROM `article_comments` WHERE `comment_id` = '".escape($_GET['delComment'])."'");
if(mysql_affected_rows())
$result = $pdb->query("DELETE FROM `article_comments` WHERE `comment_id` = '".escape($_GET['delComment'])."'");
if($result)
displayinfo("Comment deleted!");
else
displayerror("Error in deleting comment");
Expand All @@ -217,30 +220,30 @@ public function actionEdit() {

/*Save the diff :-*/
$query = "SELECT article_content FROM article_content WHERE page_modulecomponentid='" . $this->moduleComponentId."'";
$result = mysql_query($query);
$row = mysql_fetch_assoc($result);
$diff = mysql_escape_string($this->diff($_POST['CKEditor1'],$row['article_content']));
$result = $pdb->query($query);
$row = $result[0];
$diff = $this->diff($_POST['CKEditor1'],$row['article_content']);
$query="SELECT MAX(article_revision) AS MAX FROM `article_contentbak` WHERE page_modulecomponentid ='" . $this->moduleComponentId."'";
$result = mysql_query($query);
if(!$result) { displayerror(mysql_error() . "article.lib L:44"); return; }
if(mysql_num_rows($result))
$result = $pdb->query($query);
//if(!$result) { displayerror(mysql_error() . "article.lib L:44"); return; }
if(count($result))
{
$row = mysql_fetch_assoc($result);
$row = $result[0];
$revId = $row['MAX'] + 1;
}
else $revId=1;


$query = "INSERT INTO `article_contentbak` (`page_modulecomponentid` ,`article_revision` ,`article_diff`,`user_id`)
VALUES ('$this->moduleComponentId', '$revId','$diff','$this->userId')";
$result = mysql_query($query);
if(!$result) { displayerror(mysql_error() . "article.lib L:44"); return; }
$result = $pdb->query($query);
//if(!$result) { displayerror(mysql_error() . "article.lib L:44"); return; }

/*Save the diff end.*/

$query = "UPDATE `article_content` SET `article_content` = '" . escape($_POST["CKEditor1"]) . "' WHERE `page_modulecomponentid` ='$this->moduleComponentId' ";
$result = mysql_query($query);
if(mysql_affected_rows() < 0)
$result = $pdb->query($query);
if(count($result) <= 0)
displayerror("Unable to update the article content");
else {

Expand All @@ -254,8 +257,8 @@ public function actionEdit() {
if(isset($_POST['editor'])){
$editor=escape($_POST['editor']);
$query = "UPDATE `article_content` SET `default_editor` = '" . $editor . "' WHERE `page_modulecomponentid` ='$this->moduleComponentId' ";
$result = mysql_query($query);
if(mysql_affected_rows() < 0)
$result = $pdb->query($query);
if(count($result) < 0)
displayerror("Unable to update the article Editor");
}
return $this->actionView();
Expand All @@ -265,12 +268,12 @@ public function actionEdit() {
$commentsedit = "<fieldset><legend><a name='comments'>{$ICONS['Page Comments']['small']}Comments</a></legend>";

if($this->isCommentsEnabled()) {
$comments = mysql_query("SELECT `comment_id`,`user`,`timestamp`,`comment` FROM `article_comments` WHERE `page_modulecomponentid` = '{$this->moduleComponentId}' ORDER BY `timestamp`");
if(mysql_num_rows($comments)==0)
$comments = $pdb->query("SELECT `comment_id`,`user`,`timestamp`,`comment` FROM `article_comments` WHERE `page_modulecomponentid` = '{$this->moduleComponentId}' ORDER BY `timestamp`");
if(count($comments)==0)
$commentsedit.= "No comments have been posted !";


while($row = mysql_fetch_array($comments))
foreach($comments as $row)
{
$commentsedit .= $this->renderComment($row['comment_id'],$row['user'],$row['timestamp'],$row['comment'],1);

Expand Down Expand Up @@ -366,13 +369,14 @@ public function patch($article,$patch) {
return $patch;
}
public function getRevision($revisionNo) {
global $pdb;
$currentquery = "SELECT article_content FROM article_content WHERE page_modulecomponentid='" . $this->moduleComponentId."'";
$currentresult = mysql_query($currentquery);
$currentrow = mysql_fetch_assoc($currentresult);
$currentresult = $pdb->query($currentquery);
$currentrow = $currentresult[0];
$revision = $currentrow['article_content'];
$diffquery = "SELECT * FROM `article_contentbak` WHERE `page_modulecomponentid`='$this->moduleComponentId' AND article_revision >= '$revisionNo' ORDER BY article_revision DESC";
$diffresult = mysql_query($diffquery);
while($diffrow = mysql_fetch_assoc($diffresult)) {
$diffresult = $pdb->query($diffquery);
foreach($diffresult as $diffrow) {
$revision = $this->patch($revision,$diffrow['article_diff']);
}
return $revision;
Expand Down
Loading