<?php 

if (!defined("mxMainFileLoaded")) die ("You can't access this file directly...");
$module_name = basename(dirname(__FILE__));
include("modules/$module_name/funktions.php");

global $prefix;

$infoarray=mxGetUserData(); 
$uname = $infoarray['uname'];

$option = $_GET['option'];


if($option == fileupload) 
{

	$album = $_POST['album'];
	$kommentar = $_POST['kommentar'];

	if (empty($album)) {
	include("header.php");
    OpenTable();
    echo "<center>"; 
    echo "<br><br><br><b>Achtung du musst ein Album auswählen</b>";
    echo "</center>";
    CloseTable();
    include("footer.php");
	die();
	}
	
global $uploadfile1; 
global $uploadfile1_name; 
global $upload_dir; 

$uploadtemp1 = $uploadfile1; 

$original = array("$uploadtemp1"); 

$uploadreal1 = $uploadfile1_name; 

$file = array( "$uploadreal1"); 
	
function  image_valid($type)
                {
                    $file_types  = array(  
                    'image/pjpeg'     => 'jpg',
                    'image/jpeg'     => 'jpg',
                    'image/jpeg'     => 'jpeg',
					'image/JPEG'     => 'JPEG',
                    'image/gif'     => 'gif',
                    'image/X-PNG'    => 'png',
                    'image/PNG'         => 'png',
                    'image/png'     => 'png',
                    'image/x-png'     => 'png',
                    'image/JPG'     => 'jpg',
                    'image/GIF'     => 'gif',
                    'image/bmp'     => 'bmp',
                    'image/bmp'     => 'BMP',
                    );
                   
                    if(!array_key_exists($type, $file_types))
                    {
                        return "FALSE";
                    }
                    else
                    {
                        return "TRUE";
                    }
                }
				
if(image_valid($_FILES['uploadfile1']['type']) === "FALSE")
                            {
							include("header.php");
	  						echo "<br><br><br><b>Dateiformat nicht erlaubt.</b><br><br><br><A HREF=\"javascript:history.back()\">Zurück</A><br><br><br>";
     						include("footer.php");
      						die();    
                            }

if(image_valid($_FILES['uploadfile1']['type']) === "TRUE")
                            {



$uname2 = ereg_replace(" ", "_", $uname); 

$zufall = rand(10000,99999);
$pic_name = "".$uname2."-".$zufall."";


for($I = 0; $I <=6; $I++){ 
$file[$I] = ereg_replace(" ", "_", $file[$I]); 
$file[$I] = ereg_replace("%20", "_", $file[$I]); 
$copyfile = "$upload_dir/$file[$I]"; 
@move_uploaded_file($original[$I], $copyfile); 
@unlink($original[$I]); 

rename ("$upload_dir/$file[$I]", "$upload_dir/$pic_name.jpg"); 

$filechmod1 = "$upload_dir/$pic_name.jpg";
@chmod($filechmod1,0777);

}			 
}

sleep(1);

// Thumbnailgenerator 50pixel
$imgpath = "$upload_dir/$pic_name.jpg"; 

##########Thumb 1 50PX
$src1 = imagecreatefromjpeg($imgpath); 

$src_b1 = imagesx($src1); 
$src_h1 = imagesy($src1); 
$max_b1 = 50;
$max_h1 = 50;

$fact_b1 = $max_b1/$src_b1;
$fact_h1 = $max_h1/$src_h1;
$fact1 = min($fact_b1, $fact_h1, 1);

$neue_b1 = (int)($fact1 * $src_b1);
$neue_h1 = (int)($fact1 * $src_h1);

$dst1 = imagecreatetruecolor($neue_b1, $neue_h1); 
imagecopyresized($dst1, $src1, 0, 0, 0, 0, $neue_b1, $neue_h1, $src_b1, $src_h1); 
imagejpeg($dst1,"".$thumb_dir_thumb_klein."/thumb_".$pic_name.".jpg"); 

$filechmod2 = "".$thumb_dir_thumb_klein."/thumb_".$pic_name.".jpg";
@chmod($filechmod2,0777);

########Thumb 2 200PX
$src = imagecreatefromjpeg($imgpath); 

$src_b = imagesx($src); 
$src_h = imagesy($src); 
$max_b = 200;
$max_h = 200;

$fact_b = $max_b/$src_b;
$fact_h = $max_h/$src_h;
$fact = min($fact_b, $fact_h, 1);

$neue_b = (int)($fact * $src_b);
$neue_h = (int)($fact * $src_h);

$dst = imagecreatetruecolor($neue_b, $neue_h); 
imagecopyresized($dst, $src, 0, 0, 0, 0, $neue_b, $neue_h, $src_b, $src_h); 
imagejpeg($dst,"".$thumb_dir_thumb_gross."/thumb_".$pic_name.".jpg"); 

$filechmod3 = "".$thumb_dir_thumb_gross."/thumb_".$pic_name.".jpg";
@chmod($filechmod3,0777);

		$resultA = sql_query("SELECT gid FROM `".$prefix."_user_pics` WHERE `user` = '".$uname."' AND `hauptfoto` = '1' LIMIT 1");
		if (!$resultA)
		{
		echo "<center>Hauptfoto nicht gefunden.</center>";
		}
		while($hauptfotoout = sql_fetch_assoc($resultA))
		{
		$resultB = sql_query("UPDATE `".$prefix."_user_pics` SET `hauptfoto` = '0' WHERE `gid` = '".$hauptfotoout['gid']."'");
		}

$result = sql_query("INSERT INTO `" . $prefix . "_user_pics` ( `gid` , `time` , `user` , `foto` , `kommentar` , `album` , `aktiv` , `hauptfoto`) VALUES (NULL , '".time()."' , '".$uname."', '".$pic_name."', '".$kommentar."' , '".$album."' , '0' , '1' );");
					 
Header("Location: $gopage"); 

}

if($option == createalbum) 
{

$album = $_POST['album'];
$kennwort = $_POST['kennwort'];

$album2 = preg_replace("![^A-Za-z0-9-]!is"," ",$album);

if (!empty($kennwort)) {
$kennwortausgabe = " , '".$kennwort."'";
$kennwortausgabe1 = ", `kennwort`";
}
else
{
$kennwortausgabe = "";
$kennwortausgabe1 = "";
}
if (!empty($album)) {
$result = sql_query("INSERT INTO `" . $prefix . "_user_pics_alben` ( `from` , `album`  ".$kennwortausgabe1." ) VALUES ('".$uname."' , '".$album2."' ".$kennwortausgabe.");");
}

Header("Location: $gopage"); 
}
	
if($option == deletealbum) 
{	

$album = $_GET['album']; 

$result = sql_query("SELECT * FROM `".$prefix."_user_pics` WHERE `album` = '".$album."'");
if (!$result)
{
echo "<center>FEHLER</center>";
}
while($pics = sql_fetch_assoc($result))
{	

$dateiname1= "".$thumb_dir_thumb_klein."/thumb_".$pics['foto'].".jpg";
$dateiname2= "".$thumb_dir_thumb_gross."/thumb_".$pics['foto'].".jpg";
$dateiname3= "".$upload_dir."/".$pics['foto'].".jpg";
unlink($dateiname1);
unlink($dateiname2);
unlink($dateiname3);
$result2 = sql_query("DELETE FROM `".$prefix."_user_pics` WHERE `album` = '".$album."';");
$result3 = sql_query("DELETE FROM `".$prefix."_user_pics_comments` WHERE `topic` = '".$pics['foto']."';");
}

sleep(1);

$result4 = sql_query("DELETE FROM `".$prefix."_user_pics_alben` WHERE `album` = '".$album."';");
Header("Location: $gopage");	

}

if($option == deletefoto) 
{	
$foto = $_GET['foto']; 
$dateiname1= "".$thumb_dir_thumb_klein."/thumb_".$foto.".jpg";
$dateiname2= "".$thumb_dir_thumb_gross."/thumb_".$foto.".jpg";
$dateiname3= "".$upload_dir."/".$foto.".jpg";
unlink($dateiname1);
unlink($dateiname2);
unlink($dateiname3);

		$resultA = sql_query("SELECT gid FROM `".$prefix."_user_pics` WHERE  `foto` = '".$foto."' AND `hauptfoto` = '1' LIMIT 1");
		if (!$resultA)
		{
		echo "<center>Hauptfoto nicht gefunden.</center>";
		}
		while($hauptfotoout = sql_fetch_assoc($resultA))
		{
		$resultB = sql_query("UPDATE `".$prefix."_user_pics` SET `hauptfoto` = '1' WHERE `foto` != '".$foto."' AND `user` = '".$uname."' LIMIT 1");
		}


$resultC = sql_query("DELETE FROM `".$prefix."_user_pics` WHERE `foto` = '".$foto."';");
$resultD = sql_query("DELETE FROM `".$prefix."_user_pics_comments` WHERE `topic` = '".$foto."';");



Header("Location: $gopage");
}

if($option == sethauptfoto) 
{
$fotogid = $_GET['fotogid'];

		$resultA = sql_query("SELECT gid FROM `".$prefix."_user_pics` WHERE `user` = '".$uname."' AND `hauptfoto` = '1' LIMIT 1");
		if (!$resultA)
		{
		echo "<center>Hauptfoto nicht gefunden.</center>";
		}
		while($hauptfotoout = sql_fetch_assoc($resultA))
		{
		$resultB = sql_query("UPDATE `".$prefix."_user_pics` SET `hauptfoto` = '0' WHERE `gid` = '".$hauptfotoout['gid']."'");
		}

$result = sql_query("UPDATE `".$prefix."_user_pics` SET `hauptfoto` = '1' WHERE `gid` = '".$fotogid."'");
Header("Location: $gopage"); 
}

if($option == savenewcomment) 
{
$kommentar = $_POST['kommentar'];
$foto = $_POST['foto'];

$result = sql_query("UPDATE `".$prefix."_user_pics` SET `kommentar` = '".$kommentar."' WHERE `foto` = '".$foto."'");
Header("Location: $gopage"); 
}

if($option == savecomment) 
{
$kommentar = $_POST['kommentar'];
$foto = $_POST['topic'];
$touser = $_POST['fromuser'];
$album = $_POST['album'];
$gid = $_POST['gid'];

$result = sql_query("INSERT INTO `" . $prefix . "_user_pics_comments` (`time` , `from` , `touser` , `topic` , `text` ) VALUES ('".time()."' , '".$uname."' , '".$touser."' , '".$foto."' , '".$kommentar."');");

Header("Location: modules.php?name=user_pics&file=bildercontentview&foto=".$foto."&fromuser=".$touser."&album=".$album."&gid=".$gid."#pic"); 
}

if($option == delcomment) 
{
$gid = $_GET['gid'];
$fromuser = $_GET['fromuser'];
$album = $_GET['albumname'];
$fotogid = $_GET['fotogid'];
$foto = $_GET['foto'];

if ($fromuser == $cookie[1]) {
$resultA = sql_query("DELETE FROM `".$prefix."_user_pics_comments` WHERE `gid` = '".$gid."';");
}

if (MX_IS_ADMIN) {
$resultA = sql_query("DELETE FROM `".$prefix."_user_pics_comments` WHERE `gid` = '".$gid."';");
}
Header("Location: modules.php?name=user_pics&file=bildercontentview&foto=".$foto."&fromuser=".$fromuser."&album=".$album."&gid=".$fotogid."#pic"); 
}



?>