root/ajax.php

<?php</span>
<span class="code-lang">$root_path = './';
require_once ($root_path . 'include/config.php');
require_once ($root_path . 'include/ajax.php');

$userdata = session_pagestart($user_ip);
init_userprefs($userdata);
loggedinorreturn();</span>
<span class="code-lang">
if (empty($_SERVER['HTTP_REFERER'])) {
    redirect( append_sid($root_path));
}

$JsHttpRequest = new JsHttpRequest();

$action = request_var('action', '');

$db->sql_return_on_error(true);

//assign some base vars
$template->assign_vars(array(</span>
<span class="code-lang">    'S_USER_LOGGED_IN' => $userdata['session_logged_in'],
    'S_USER_IS_MOD' => ( $userdata['class'] >= UC_MODERATOR ) ? 1 : 0,
));

switch ( $action ) {

    case 'viewhost':
        require_once ($root_path . 'include/functions_check.php');

        $ip = request_var('ip', '');

        if ( !check_ip($ip) ) {
                return $_RESULT = array('host' => 'unknown' );
        }
        $dom = htmlspecialchars(@gethostbyaddr($ip));
        if ( !($dom == $ip) || $dom) {
                $host = strtoupper($dom);
        }
        else {
                $host = $ip;
        }
        return $_RESULT = array('host' => $host );

     break;

    case 'thanks':
        $id = request_var('id', 0);

        $sql = 'SELECT user_reputation, user_reputation_level, user_rank_id, uid
                FROM ' . TORRENTS_TABLE . ' t, ' . USERS_TABLE . ' u
                WHERE u.uid = t.owner
                AND t.fid = ' . $id;
        $result = $db->sql_query($sql);
        if ( !($owner_row = $db->sql_fetchrow($result)) ) {
            return $_RESULT = array('text' => $lang['error'] . "\n" . sprintf($lang['invalid_id'], $id) );
        }

        if ( $owner_row['uid'] == $userdata['uid'] ) {
            return $_RESULT = array( 'text' => $lang['owner_cant_thanks'] );
        }
        else {
            $sql = 'SELECT COUNT(*) AS count FROM ' . THANKS_TABLE . ' WHERE torrentid = ' . $id . ' AND userid = ' . $userdata['uid'];
            $result = $db->sql_query($sql);
            $count = ( $row = $db->sql_fetchrow($result) ) ? intval($row['count']) : 0;
            if ( $count ) {
                return $_RESULT = array( 'text' => $lang['already_thanked'] );
            }
            else {
                $sql = 'INSERT INTO ' . THANKS_TABLE . ' (torrentid, userid) VALUES (' . $id . ', ' . $userdata['uid'] . ')';
                $db->sql_query($sql);
                $thanksby = '<a href="' . append_sid('userdetails.php?id=' . $userdata['uid']) . '">' . $userdata['name'] . '</a>';

                update_reputation($owner_row, SIMPATY_THANKS_TO_UPLOAD, 1);

                return $_RESULT = array( 'text' => $lang['thanks_added'], 'thanks_users' => $thanksby );
            }
        }

    break;

    case 'sos':
        $id = request_var('id', 0);

        $sql = 'SELECT COUNT(*) AS count FROM ' . SOS_TABLE . ' WHERE torrentid = ' . $id . ' AND userid = ' . $userdata['uid'];
        $result = $db->sql_query($sql);
        $count = ( $row = $db->sql_fetchrow($result) ) ? $row['count'] : 0;
        if ( $count ) {
            return $_RESULT = array( 'text' => $lang['already_sos'] );
        }
        else {
            $sql = 'SELECT name FROM ' . TORRENTS_TABLE . ' WHERE fid = ' . $id;
            $result = $db->sql_query($sql);
            if ( $row = $db->sql_fetchrow($result) ) {

                $torrent_name = $row['name'];

                $sql = 'INSERT INTO ' . SOS_TABLE . ' (torrentid, userid) VALUES (' . $id . ', ' . $userdata['uid'] . ')';
                $db->sql_query($sql);

                $sql = 'SELECT s.userid, u.language, u.name, u.email, u.notifs, u.class
                           FROM ' . SNATCHED_TABLE . ' s, ' . USERS_TABLE . ' u
                            WHERE s.torrentid = ' . $id . ' AND s.completedat != 0 AND s.userid = u.uid';
                $result = $db->sql_query($sql);

                $users = array();

                if ( $row = $db->sql_fetchrow($result) ) {
                    do {
                        $users[$row['language']][] = $row;
                    }
                    while ( $row = $db->sql_fetchrow($result) );

                    $db->sql_freeresult($result);

                    foreach ( $users AS $user_lang => $ary ) {
                        require_once($root_path . 'languages/lang_' . $user_lang . '/lang_pms.php');

                        $count = sizeof($ary);

                        for ( $i = 0; $i < $count; $i++ ) {
                            $pm_ary[] = array(
                                'sender' => 0,
                                'receiver' => $ary[$i]['userid'],
                                'msg' => sprintf($lang['pm_need_seed_body'], generate_base_url(), $id, $torrent_name, generate_base_url(), $userdata['uid'], $userdata['name']),
                                'subject' => $lang['pm_need_seed_subject'],
                                'name' => $ary[$i]['name'],
                                'email' => $ary[$i]['email'],
                                'notifs' => $ary[$i]['notifs'],
                                'language' => $ary[$i]['language'],
                                'class' => $ary[$i]['class']
                            );
                        }
                    }

                    send_pm($pm_ary);
                }
                return $_RESULT = array( 'text' => $lang['sos_sended'] );
            }
            else {
                return $_RESULT = array( 'text' => $lang['error'] . "\n" . sprintf($lang['invalid_id'], $id) );
            }
        }

    break;

    case 'rating':
        $id = request_var('torrent_id', 0);
        $rating = request_var('rating', 0);
        $error = false;
        $msg = '';
        $rating_sum = $numratings = 0;

        if ( !$id || $rating <= 0 || $rating > 5 ) {
            gc(json_encode(array('error' => $error, 'msg' => $lang['bad_rating'])));
        }
        $sql = 'SELECT numratings, ratingsum, owner FROM ' . TORRENTS_TABLE . ' WHERE fid = ' . $id;
        $result = $db->sql_query($sql);
        if ( !$row = $db->sql_fetchrow($result) ) {
            $msg = $lang['bad_torrent'];
            $error = true;
        }
        else {
            if ( $row['owner'] == $userdata['uid'] ) {
                $error = true;
                $msg = $lang['bad_torrent'];
            }
            $rating_sum = $row['ratingsum'];
            $numratings = $row['numratings'];
        }
        if ( !$error ) {
            $sql = 'SELECT torrent FROM ' . RATINGS_TABLE . ' WHERE torrent = ' . $id . ' AND user = ' . $userdata['uid'];
            $result = $db->sql_query($sql);
            if ( $row = $db->sql_fetchrow($result) ) {
                $error = true;
                $msg = $lang['dupe_vote'];
            }

            if ( !$error ) {
                $sql = 'INSERT INTO ' . RATINGS_TABLE . ' (torrent, user, rating) VALUES (' . $id . ', ' . $userdata['uid'] . ', ' . $rating . ')';
                $db->sql_query($sql);
                $sql = 'UPDATE ' . TORRENTS_TABLE . ' SET numratings = numratings + 1, ratingsum = ratingsum + ' . $rating. ' WHERE fid = ' . $id;
                $db->sql_query($sql);

                $rating_sum += $rating;
                ++$numratings;

                $msg = sprintf($lang['rating_added'], $rating, $numratings, $config['minvotes']);
            }
        }

        $rating = ratingpic($numratings, $rating_sum, false);

        gc(json_encode(array('error' => $error, 'msg' => $msg, 'rating_pic_width' => $rating * $config['rating_pic_width'], 'rating_title' => sprintf($lang['total_rating'], $rating, $rating, $numratings))));
    break;

    case 'preview':

        require_once ($root_path . 'include/bbcode/bbcode.lib.php');

        $name = request_var('name', '');
        $message = request_var('message', '');
        $preview_type = request_var('preview_type', '');

        $preview_type = ( !$preview_type ? 'basic' : 'upload' );

        $name = ( !empty($name) ? censor_text($name) : $lang['preview'] );

        $bb_code = new bbcode($message);
        $message = $bb_code->get_html();
        $message = censor_text($message);

        $template->set_filenames(array(
                'preview_tpl' => 'preview_box.html')
        );

        $template->assign_block_vars($preview_type . '_preview_box', array(
                'MESSAGE' => $message,
                'NAME' => $name )
        );

        $tpl = $template->assign_display('preview_tpl');

        return $_RESULT = array( 'tpl' => $tpl );

    break;

    case 'edit_template_preview':

        require_once ($root_path . 'include/bbcode/bbcode.lib.php');

        $template_prev = request_var('template', '');

        $template->set_filenames(array(
                   'preview_tpl' => '../admin/admin_categories_preview_box.html')
        );

        $bb_code = new bbcode($template_prev);
        $template_prev = $bb_code->get_html();

        $template->assign_vars(array(
                'PREVIEW_VIEW' => $template_prev)
        );

        $tpl = $template->assign_display('preview_tpl');

        return $_RESULT = array( 'tpl' => $tpl );

    break;

    case 'update_tag':
        require_once($root_path . 'include/class.tags.php');

        $name = request_var('tag_name', '');
        $tag_type = request_var('tag_type', TYPE_TORRENT);
        $id = request_var('id', 0);
        $type = request_var('type', '');

        $message = tags::add_tag($tag_type, $id, $name, $type);

        if ( $message ) {
            gc(json_encode(array('message' => $message, 'tpl' => '')));
        }
        else {

            $tags = tags::tags_for_single($tag_type, $id);

            foreach ( $tags AS $_null => $tag_ary ) {
                $template->assign_block_vars('tags_row', array(
                    'TAG_NAME' => $tag_ary['tag_name'],
                    'JS_TAG_NAME' => $tag_ary['js_tag_name'],
                    'ENC_TAG_NAME' => $tag_ary['enc_tag_name'],
                    'TAG_SIZE' => $tag_ary['tag_size'],
                    'TAG_NUM' => $tag_ary['tag_num'],

                    'U_TAG' => append_sid($root_path . 'browse.php?search_in=3&amp;search=' . $tag_ary['enc_tag_name']),
                    'U_TAG_USERS' => append_sid($root_path . 'modtask.php?action=tags&amp;do=view_users&amp;tag_name=' . $tag_ary['enc_tag_name'] . '&amp;tag_type=' . $tag_type . '&amp;tag_for_id=' . $id),
                ));
            }

            $template->assign_vars(array(
                'TAG_TYPE' => $tag_type,
                'ID' => $id,
                'ALLOW_ADD_TAGS' => tags::return_allow_add_tag($tag_type, $id),
            ));

            $template->set_filenames(array(
                'template' => 'tags_view_form.html'
            ));

            $tpl = $template->assign_display('template', 'TEMPLATE_FILE');

            gc(json_encode(array('message' => '', 'tpl' => $tpl)));
        }
    break;

    case 'autocomplete_tags':
        $tag_name = request_var('q', '');

        $tag_length = utf_strlen($tag_name);

        if ( $tag_length < $config['tags_min_length'] ) {
            return false;
        }
        else {
            $sql = 'SELECT SUM(tag_count) AS sum, tag_name
                    FROM ' . TAGS_TABLE . '
                    WHERE tag_name LIKE \'' . $db->sql_escape($tag_name) . '%\'
                    GROUP BY tag_name
                    ORDER BY sum DESC';
            $result = $db->sql_query($sql);

            header('Content-type: text/html; charset=UTF-8');
            while ( $row = $db->sql_fetchrow($result) ) {
                echo $row['tag_name'] . "\n";
            }
            gc();
        }
    break;

    default:
        redirect( append_sid($root_path, true) );
    break;

}
?>