root/upload.php

<?php</span>
<span class="code-lang">$root_path = './';
require ($root_path . 'include/config.php');
require ($root_path . 'include/functions_check.php');
require ($root_path . 'include/functions_selects.php');
require ($root_path . 'languages/lang_' . $config['default_lang'] . '/lang_upload_templates.php'); //we include default language, because it's used in templates for torrents which uploaded to tracker
require ($root_path . 'languages/lang_' . $config['default_lang'] . '/lang_modcomment_log.php');

$userdata = session_pagestart($user_ip);
init_userprefs($userdata);
loggedinorreturn();

$type = request_var('type', 'main');
$cat_id = request_var('cat', 0);
$cats = $cache->obtain_cats();</span>
<span class="code-lang">
if ( defined('USE_XBTT') ) {
    $base_announce = $config['xbt_listen_url'] . ':' . $config['listen_port'] . '/' . ( $userdata['session_logged_in'] ? $userdata['torrent_pass'] . '/' : '' ) . 'announce/';
}
else {
    $base_announce = generate_base_url() . '/announce.php' . ( $userdata['session_logged_in'] ? '?passkey=' . $userdata['torrent_pass'] : '' );
}

if ( !check_user_class($config['min_class_allow_upload']) ) {
    set_config('min_class_allow_upload', UC_UPLOADER);
    $min_class_allow_upload = UC_UPLOADER;
}
else {
    $min_class_allow_upload = $config['min_class_allow_upload'];
}

switch ( $type ) {
    case 'request':
        $heading = $lang['requests'];
        $minclass = UC_USER;
        $simpaty_type = SIMPATY_REQUEST;
    break;

    case 'offer':
        $heading = $lang['offers'];
        $minclass = $min_class_allow_upload;
        $simpaty_type = SIMPATY_OFFER;
    break;

    default:
        $heading = $lang['uploading'];
        $minclass = $min_class_allow_upload;
        $simpaty_type = SIMPATY_TORRENT;
    break;
}

if ( $userdata['class'] < $minclass ) {
    trigger_error($lang['access_denied']);
}

if ( isset($cats[$cat_id]['torrents_limit']) && $cats[$cat_id]['torrents_limit'] ) {
    $sql = 'SELECT COUNT(*) AS limit_count FROM ' . TORRENTS_TABLE . ' WHERE category = ' . $cat_id . ' AND ctime > ' . ( time() - 24 * 60 * 60 );
    $result = $db->sql_query($sql);
    $limit_count = ( $row = $db->sql_fetchrow($result) ) ? intval($row['limit_count']) : 0;
    if ( $limit_count >= $cats[$cat_id]['torrents_limit'] ) {
        trigger_error( sprintf($lang['torrent_upload_limit_reached'], $cats[$cat_id]['cat_name']) );
    }
}

if ( isset($_POST['upload']) ) {
    $name = request_var('name', '');
    $descr = request_var('descr', '');

    if ( !$name || !$descr || !$cat_id ) {
        trigger_error($lang['dont_empty_fields']);
    }
    if ( !check_category_id($cat_id, true) ) {
        trigger_error( sprintf($lang['invalid_id'], $cat_id) );
    }

    if ( $type == 'request' ) {
        $sql_ary = array('hits'    => 1,
                           'userid'  => $userdata['uid'],
                           'cat'     => $cat_id,
                           'request' => $name,
                           'descr'   => $descr,
                           'added'   => time()
        );
        $sql = 'INSERT INTO ' . REQUESTS_TABLE . ' ' . $db->sql_build_array('INSERT', $sql_ary);
        $db->sql_query($sql);
        $id = $db->sql_nextid();
        if ( $userdata['commentpm'] ) {
            $sql = 'INSERT INTO ' . COMMENTS_NOTIFY_TABLE . ' (checkcomm_userid, checkcomm_for_id, checkcomm_type, checkcomm_view_status) VALUES (' . $userdata['uid'] . ', ' . $id . ', ' . TYPE_REQUEST . ', ' . VIEW_STATUS_VIEWED . ')';
            $db->sql_query($sql);
        }
        $sql = 'INSERT INTO ' . REQUESTS_VOTES_TABLE . ' (requestid, userid) VALUES(' . $id . ', ' . $userdata['uid'] . ')';
        $db->sql_query($sql);

        update_reputation($userdata, $simpaty_type, 1);

        redirect( append_sid('requests.php?id=' . $id));
    }
    elseif ( $type == 'offer' ) {
        $sql_ary = array('userid'   => $userdata['uid'],
                           'category' => $cat_id,
                           'name'     => $name,
                         'descr'    => $descr,
                         'added'    => time()
        );

        $sql = 'INSERT INTO ' . OFFERS_TABLE . ' ' . $db->sql_build_array('INSERT', $sql_ary);
          $db->sql_query($sql);

        $id = $db->sql_nextid();

        if ( $userdata['commentpm'] ) {
            $sql = 'INSERT INTO ' . COMMENTS_NOTIFY_TABLE . ' (checkcomm_userid, checkcomm_for_id, checkcomm_type, checkcomm_view_status) VALUES (' . $userdata['uid'] . ', ' . $id . ', ' . TYPE_OFFER . ', ' . VIEW_STATUS_VIEWED . ')';
            $db->sql_query($sql);
          }

          update_reputation($userdata, $simpaty_type, 1);

          redirect( append_sid('offers.php?id=' . $id));
    }
    else {
        $hidden = ( isset($_POST['hidden']) && ( $userdata['hiddentorrents'] || $userdata['class'] >= UC_MODERATOR ) ? 1 : 0);


          //start nfo check
        $nfo = '';
            $nfofile = $_FILES['nfo'];
            if ( $nfofile['size'] > 65535 ) {
                trigger_error($lang['nfo_too_big']);
            }
            elseif ( @is_uploaded_file($nfofile['tmp_name']) && @filesize($nfofile['tmp_name']) > 0 ) {
            @move_uploaded_file($nfofile['tmp_name'], $root_path . '/cache/' . $nfofile['name']);
               $nfo = @file_get_contents($root_path . '/cache/' . $nfofile['name']);
               @unlink($root_path . '/cache/' . $nfofile['name']);
               $nfo = str_replace('\x0d\x0a', "\n", $nfo);
                $nfo = trim($nfo);

               if ( function_exists('iconv') ) {
                  $nfo = iconv(mb_detect_encoding($nfo, 'auto', 1), 'UTF-8//TRANSLIT', $nfo);
               }
               else {
                   $nfo = utf8_encode($nfo);
               }
          }
          // end nfo check

        //start torrent check
        if ( !isset($_FILES['file']) ) {
                trigger_error($lang['dont_empty_fields']);
            }
            list($infohash, $fname, $totallen, $filelist, $dname, $filename) = check_torrent($_FILES['file']);
            //end torrent check

          if ( $config['default_type_moderated_torrents'] == MODERATED_ALL_TORRENTS ) {
              $moderated = 0;
          }
          elseif ( $config['default_type_moderated_torrents'] == MODERATED_ONLY_NON_UPLOADERS_TORRENTS && $userdata['class'] < UC_UPLOADER ) {
              $moderated = 0;
          }
          else {
              $moderated = 1;
          }
          $torrent_dir = $root_path . ( !empty($config['torrent_dir']) ? $config['torrent_dir'] : 'torrents');

          $sql = 'SELECT name, fid, category FROM ' . TORRENTS_TABLE . ' WHERE info_hash = ' . "'" . $db->sql_escape($infohash) . "'";
          $result = $db->sql_query($sql);

         if ( $row = $db->sql_fetchrow($result) ) {

            if ( isset($cats[$cats[$row['category']]['cat_parent']]['cat_name']) ) {
                // www.phpBB-SEO.com SEO TOOLKIT BEGIN
                $seo->set_url($cat_parent['cat_name'], $cat_parent['cat_id'], $seo->seo_static['browse']);
                $seo->set_parent($cats[$row['category']]['cat_id'], $seo->seo_static['browse'], $cat_parent['cat_id'], $seo->seo_static['browse']);
                // www.phpBB-SEO.com SEO TOOLKIT END
            }

            // www.phpBB-SEO.com SEO TOOLKIT BEGIN
            $seo->set_url($cats[$row['category']]['cat_name'], $cats[$row['category']]['cat_id'], $seo->seo_static['browse']);
            $seo->set_parent($row['fid'], $seo->seo_static['details'], $cats[$row['category']]['cat_id'], $seo->seo_static['browse']);
            $seo->set_url(censor_text($row['name']), $row['fid'], $seo->seo_static['details']);
            // www.phpBB-SEO.com SEO TOOLKIT END
            @unlink($torrent_dir . DIRECTORY_SEPARATOR . $filename . '.torrent');
            $message = sprintf($lang['torrent_already_uploaded'], append_sid($root_path . 'details.php?id=' . $row['fid']), $row['name']);
              trigger_error($message);
          }

          $sql_ary = array('filename'    => $fname,
                        'owner'       => $userdata['uid'],
                        'info_hash'   => $infohash,
                        'name'        => $name,
                        'size'        => $totallen,
                        'numfiles'    => sizeof($filelist),
                        'descr'       => $descr,
                        'category'    => $cat_id,
                        'ctime'       => time(),
                        'mtime'       => time(),
                        'nfo'         => $nfo,
                        'hidden'      => $hidden,
                        'moderated'   => $moderated,
          );

          $sql = 'INSERT INTO ' . TORRENTS_TABLE . ' ' . $db->sql_build_array('INSERT', $sql_ary);
        $db->sql_query($sql);
        $id = $db->sql_nextid();

        @rename($torrent_dir . DIRECTORY_SEPARATOR . $filename . '.torrent', $torrent_dir . DIRECTORY_SEPARATOR . $id . '.torrent');

        $sql = 'INSERT INTO ' . COMMENTS_NOTIFY_TABLE . ' (checkcomm_userid, checkcomm_for_id, checkcomm_type, checkcomm_view_status) VALUES (' . $userdata['uid'] . ', ' . $id . ', ' . TYPE_TORRENT . ', ' . VIEW_STATUS_VIEWED . ')';
        $db->sql_query($sql);

        $sql = 'DELETE FROM ' . FILES_TABLE . ' WHERE torrent = ' . $id;
        $db->sql_query($sql);
        foreach ( $filelist AS $file ) {
               $sql = 'INSERT INTO ' . FILES_TABLE . ' (torrent, filename, size) VALUES (' . $id . ", '" . $db->sql_escape($file[0]) . "'," . $file[1] . ')';
                $db->sql_query($sql);
        }

        /* start tags */

        require_once($root_path . 'include/class.tags.php');

        if ( tags::return_allow_add_tag(TYPE_TORRENT, 0, $userdata['uid']) ) {
            $tags_name = request_var('tag_name', '');
            $tag_type = TYPE_TORRENT;

            tags::set_tag_cat_id($cat_id);
            tags::set_tag_owner($userdata['uid']);
            tags::set_fast_add_mode();
            tags::add_tag(TYPE_TORRENT, $id, $tags_name, 'up');
        }
        /* end tags */

          write_log( sprintf($lang['log_torrent_uploaded'], $id, $name, $userdata['uid'], $userdata['name']) );

          if ( $moderated ) {
            update_reputation($userdata, $simpaty_type, 1);
        }

        // www.phpBB-SEO.com SEO TOOLKIT BEGIN
        $seo->set_torrent_url($id, $name, $cat_id);
        // www.phpBB-SEO.com SEO TOOLKIT END

          redirect( append_sid($root_path . 'details.php?id=' . $id . '&uploaded=1'));

    }
}

elseif ( isset($_POST['cat']) ) {
    $template->assign_block_vars('uploading', array());

    $name = request_var('name', '');
    $descr = request_var('descr', '');

    if ( !check_category_id($cat_id, true) ) {
        trigger_error( sprintf($lang['invalid_id'], $cat_id) );
    }

    /* */
    require ($root_path . 'include/bbcode/bbcode.lib.php');
    /* */

    $cat_parent_name = ( isset($cats[$cats[$cat_id]['cat_parent']]['cat_name']) ? $cats[$cats[$cat_id]['cat_parent']]['cat_name'] . ' -> ' : '' );

    $template->assign_vars(array(
        'S_FORM_ACTION' => append_sid('upload.php'),
        'FORM_ENCTYPE' => ( $type == 'main' ?  ' enctype="multipart/form-data"' : '' ),
        'MAX_TORRENT_SIZE' => $config['max_torrent_size'],
        'NAME' => $name,
        'DESCRIPTION' => $descr,
        'CAT_NAME' => $cat_parent_name . $cats[$cat_id]['cat_name'],
        'CATEGORY' => $cat_id,
        'TYPE' => $type,
        'S_ANNOUNCE_ADDRESS' => sprintf($lang['tracker_announce_address'], $base_announce)
    ));

    if ( ( $userdata['hiddentorrents'] || $userdata['class'] >= UC_MODERATOR ) && $type == 'main' ) {
        $template->assign_block_vars('switch_hidden_section', array(
            'HIDDEN_CHECKED' => ( isset($_POST['hidden']) ? ' checked="checked"' : '')
        ));
    }

    $bb_code = new bbcode($descr);
    $descr = $bb_code->get_html();
    $descr = censor_text($descr);

    $template->assign_block_vars('uploading_preview', array(
        'NAME' => censor_text($name),
        'DESCRIPTION' => $descr
    ));

    stdhead($heading, false);
    $template->set_filenames(array(
        'body' => 'upload_body.html'
    ));
    stdfoot();
}

elseif ( $cat_id ) {
    if ( !check_category_id($cat_id, true) ) {
        trigger_error( sprintf($lang['invalid_id'], $cat_id) );
    }
    $template->set_filenames(array(
        'template' => '../upload_templates/' . $cat_id . '.html'
    ));

    $sql = 'SELECT pic_url, group_name FROM ' . RELEASE_GROUPS_TABLE . ' ORDER by group_name ASC';
    $result = $db->sql_query($sql);
    $release_group_options = '<option value="0">(' . $lang['choose'] . ')</option>';
    while ( $row = $db->sql_fetchrow($result) ) {
        $release_group_options .= '<option value="[img]' . generate_base_url() . '/pic/groups/' . $row['pic_url'] . '[/img]">' . $row['group_name'] . '</option>';
     }

    $template->assign_vars(array(
        'S_FORM_ACTION' => append_sid('upload.php'),
        'TYPE' => $type,
        'CATEGORY' => $cat_id,
        'ANNOUNCE_URL' => ( $type == 'main'? $base_announce : '' ),
        'L_JS_UNFILLED_FIELDS' => str_replace("'", "\'", $lang['js_unfilled_fields']),
         'RELEASE_GROUP_OPTIONS' => $release_group_options )
    );

    $template_tpl = $template->assign_display('template', 'TEMPLATE_FILE', false);

    stdhead($heading, false);
    $template->set_filenames(array(
            'body' => 'upload_template_body.html'
    ));
    stdfoot();
}
else {
    $s = categories_select('-', 'cat', true, true);

    $s .= '<input type="hidden" name="sid" value="' . $userdata['session_id'] . '" />';

    $template->assign_vars(array(
        'S_FORM_ACTION' => append_sid('upload.php'),
        'CATS_SELECT' => $s,
        'TYPE' => $type
    ));

    stdhead($heading);
    $template->set_filenames(array(
        'body' => 'cats_select_body.html'
    ));
    stdfoot();
}
?>