root/admin/admin_ranks.php

<?php
/***************************************************************************</span>
<span class="code-comment"> *                              admin_ranks.php
 *                            -------------------
 *   begin                : Thursday, Jul 12, 2001
 *   copyright            : (C) 2001 The phpBB Group
 *   email                : support@phpbb.com
 *
 *   $Id: admin_ranks.php,v 1.13.2.8 2006/04/13 09:56:48 grahamje Exp $
 *
 ***************************************************************************/

/***************************************************************************
 *
 *   This program is free software; you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
 *   the Free Software Foundation; either version 2 of the License, or
 *   (at your option) any later version.
 *
 ***************************************************************************/

if( !empty($setmodules) )</span>
<span class="code-keyword">{
    $file = basename(__FILE__);
    $module['users']['ranks'] = $file;
    return;
}

define('IN_PHPBB', 1);</span>
<span class="code-lang">
function resync_ranks_level () {
    global $db, $cache;

    $sql = 'SELECT COUNT(*) AS ranks_count FROM ' . RANKS_TABLE . ' WHERE rank_points < 0';
    $result = $db->sql_query($sql);
    $min_ranks_count = ( $row = $db->sql_fetchrow($result) ) ? -$row['ranks_count'] : 0;

    $sql = 'SELECT rank_id, rank_points FROM ' . RANKS_TABLE . ' ORDER BY rank_points';
    $result = $db->sql_query($sql);

    $i = 0;
    $counter = 0;

    while ( $row = $db->sql_fetchrow($result) ) {
        if ( $row['rank_points'] < 0 ) {
            ++$min_ranks_count;
            $counter = $min_ranks_count;
        }
        else {
            ++$i;
            $counter = $i;
        }

        --$counter;

        $sql = 'UPDATE ' . RANKS_TABLE . ' SET rank_level = ' . $counter . ' WHERE rank_id = ' . $row['rank_id'];
        $db->sql_query($sql);
    }

    $cache->destroy('_ranks');

}

//</span>
<span class="code-comment">// Let's set the root dir for phpBB
//
$root_path = './../';</span>
<span class="code-lang">require($root_path . 'extension.inc');
require('./pagestart.' . $phpEx);
$cancel = ( isset($_POST['cancel']) ) ? true : false;
$no_page_header = $cancel;</span>
<span class="code-lang">
if ($cancel)
{
    redirect(append_sid("admin_ranks.$phpEx", true));
}

$mode = request_var('mode', '');
//</span>
<span class="code-comment">// These could be entered via a form button
//
if( isset($_POST['add']) )</span>
<span class="code-keyword">{
    $mode = "add";
}
else if( isset($_POST['save']) )
{
    $mode = "save";
}

// Restrict mode input to valid options
$mode = ( in_array($mode, array('add', 'edit', 'save', 'delete')) ) ? $mode : '';</span>
<span class="code-lang">
if( $mode != "" )
{
    if( $mode == "edit" || $mode == "add" )
    {
        //
        // They want to add a new rank, show the form.
        //
        $rank_id = request_var('id', 0);

        $s_hidden_fields = "";

        if( $mode == "edit" )
        {
            if( empty($rank_id) )
            {
                trigger_error('Must_select_rank');
            }

            $sql = "SELECT * FROM " . RANKS_TABLE . "
                WHERE rank_id = $rank_id";
            $result = $db->sql_query($sql);

            $rank_info = $db->sql_fetchrow($result);
            $s_hidden_fields .= '<input type="hidden" name="id" value="' . $rank_id . '" />';

        }

        $s_hidden_fields .= '<input type="hidden" name="mode" value="save" />';

        $template->set_filenames(array(
            "body" => "../admin/ranks_edit_body.html")
        );

        $fields_ary = array('rank_name', 'rank_points', 'rank_image', 'rank_simpaty_limit');
        foreach ( $fields_ary AS $_null => $field ) {
            $$field = ( isset($rank_info[$field]) ? $rank_info[$field] : '' );
        }

        $template->assign_vars(array(
            "RANK" => $rank_name,
            "MINIMUM" => $rank_points,
            "SIMPATY_LIMIT" => $rank_simpaty_limit,
            //"IMAGE" => $rank_image,
            //"IMAGE_DISPLAY" => ( $rank_image != "" ) ? '<img src="../' . $rank_image . '" />' : "",

            "S_RANK_ACTION" => append_sid("admin_ranks.$phpEx"),
            "S_HIDDEN_FIELDS" => $s_hidden_fields)
        );

    }
    else if( $mode == "save" )
    {
        //
        // Ok, they sent us our info, let's update it.
        //

        $rank_id = request_var('id', 0);
        $rank_name = request_var('rank_name', '');
        $rank_points = request_var('rank_points', '');
        $rank_image = request_var('rank_image', '');
        $rank_simpaty_limit = request_var('rank_simpaty_limit', 0);

        if( $rank_name == "" )
        {
            trigger_error('Must_select_rank');
        }

        //
        // The rank image has to be a jpg, gif or png
        //
        if($rank_image != "")
        {
            if ( !preg_match("/(\.gif|\.png|\.jpg)$/is", $rank_image))
            {
                $rank_image = "";
            }
        }

        $sql_ary = array('rank_name' => $rank_name, 'rank_points' => $rank_points, 'rank_image' => $rank_image, 'rank_simpaty_limit' => $rank_simpaty_limit);

        if ($rank_id)
        {
            $sql = 'UPDATE ' . RANKS_TABLE . ' SET ' . $db->sql_build_array('UPDATE', $sql_ary) . ' WHERE rank_id = ' . $rank_id;

            $message = $lang['rank_updated'];
        }
        else
        {
            $sql = 'INSERT INTO ' . RANKS_TABLE . ' ' . $db->sql_build_array('INSERT', $sql_ary);

            $message = $lang['rank_added'];
        }

        $db->sql_query($sql);
        resync_ranks_level();

        $message .= "<br /><br />" . sprintf($lang['click_return_rankadmin'], "<a href=\"" . append_sid("admin_ranks.$phpEx") . "\">", "</a>") . "<br /><br />" . sprintf($lang['click_return_admin_index'], "<a href=\"" . append_sid("index.$phpEx?pane=right") . "\">", "</a>");

        trigger_error($message);

    }
    else if( $mode == "delete" )
    {
        //
        // Ok, they want to delete their rank
        //

        $rank_id = request_var('id', 0);

        $confirm = isset($_POST['confirm']);

        if( $rank_id && $confirm )
        {
            $sql = "DELETE FROM " . RANKS_TABLE . "
                WHERE rank_id = $rank_id";

            $db->sql_query($sql);
            resync_ranks_level();

            $message = $lang['rank_removed'] . "<br /><br />" . sprintf($lang['click_return_rankadmin'], "<a href=\"" . append_sid("admin_ranks.$phpEx") . "\">", "</a>") . "<br /><br />" . sprintf($lang['click_return_admin_index'], "<a href=\"" . append_sid("index.$phpEx?pane=right") . "\">", "</a>");

            trigger_error($message);

        }
        elseif( $rank_id && !$confirm)
        {
            // Present the confirmation screen to the user
            $template->set_filenames(array(
                'body' => '../admin/confirm_body.tpl')
            );

            $hidden_fields = '<input type="hidden" name="mode" value="delete" /><input type="hidden" name="id" value="' . $rank_id . '" />';

            $template->assign_vars(array(
                'MESSAGE_TITLE' => $lang['confirm'],
                'MESSAGE_TEXT' => $lang['confirm_delete_rank'],

                'S_CONFIRM_ACTION' => append_sid("admin_ranks.$phpEx"),
                'S_HIDDEN_FIELDS' => $hidden_fields)
            );
        }
        else
        {
            trigger_error('Must_select_rank');
        }
    }

    $template->display("body");

    include('./page_footer_admin.'.$phpEx);
}

//</span>
<span class="code-comment">// Show the default page
//
$template->set_filenames(array(</span>
<span class="code-lang">    "body" => "../admin/ranks_list_body.html")
);

$template->assign_vars(array(</span>
<span class="code-lang">    "S_RANKS_ACTION" => append_sid("admin_ranks.$phpEx"))
);

$sql = "SELECT * FROM " . RANKS_TABLE . "</span>
<span class="code-lang">    ORDER BY rank_points ASC";
$result = $db->sql_query($sql);

$i = 0;</span>
<span class="code-lang">
while ( $row = $db->sql_fetchrow($result) ) {
    $rank = $row['rank_name'];
    $rank_id = $row['rank_id'];
    $rank_points = $row['rank_points'];

    $row_color = ( !($i % 2) ) ? $theme['td_color1'] : $theme['td_color2'];
    $row_class = ( !($i % 2) ) ? $theme['td_class1'] : $theme['td_class2'];

    $template->assign_block_vars("ranks", array(
        "ROW_COLOR" => "#" . $row_color,
        "ROW_CLASS" => $row_class,
        "RANK" => $rank,
        "RANK_MIN" => $rank_points,
        'SIMPATY_LIMIT' => $row['rank_simpaty_limit'],

        "U_RANK_EDIT" => append_sid("admin_ranks.$phpEx?mode=edit&amp;id=$rank_id"),
        "U_RANK_DELETE" => append_sid("admin_ranks.$phpEx?mode=delete&amp;id=$rank_id"))
    );

    ++$i;
}

$template->display("body");</span>
<span class="code-lang">
include('./page_footer_admin.'.$phpEx);

?>