diff --git a/JMolViewer/jmol.htm b/JMolViewer/jmol.htm index 4e62423d3a..9e1bda88b7 100644 --- a/JMolViewer/jmol.htm +++ b/JMolViewer/jmol.htm @@ -81,25 +81,24 @@ setUpInfo += " set antialiasDisplay true;"; + var windowW = str.split(';')[7].split('width=')[1]; + var windowH = str.split(';')[8].split('height=')[1]; + + var modelW = windowW-4; + var modelH = windowH-4; + + if (controls == "true") { + modelH = windowH-80; + } + + document.write(''); - - -

The file /setup/database.txt was not set to be writable - this means future pages will not work. Please edit this file before continuing. +

The file /database.txt was not set to be writable - this means future pages will not work. Please edit this file before continuing. -

The file /setup/database.txt could not be written too - this means future pages will not work. Please edit this file before continuing. +

The file /database.txt could not be written too - this means future pages will not work. Please edit this file before continuing. -

The file /setup/database.txt has been successfully written to. +

The file /database.txt has been successfully written to.

-
\ No newline at end of file + diff --git a/setup/page4.php b/setup/page4.php index cef45045fb..eda9433ef0 100644 --- a/setup/page4.php +++ b/setup/page4.php @@ -1,909 +1,163 @@ -database_host, $xerte_toolkits_site->database_username, $xerte_toolkits_site->database_password); - - echo file_get_contents("page_top"); - - $magic_quotes = true; - - if(get_magic_quotes_gpc()===0){ - - echo "magic quotes setting is false"; - - $magic_quotes = false; - - } - - mysql_select_db($xerte_toolkits_site->database_name); - - $query = "insert into " . $xerte_toolkits_site->database_table_prefix . "sitedetails(site_id) VALUES ( \"1\")"; - - $query_response = mysql_query($query); - - $fail_string = ""; - - $success_string = ""; - - if(!$query_response){ - - $fail_string .= "The sitedetails site ID query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails site ID query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set site_url=\"http://" . $_POST['site_url'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails site url query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails site url query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set apache=\"" . $_POST['apache'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails apache query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails apache query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set apache=\"" . $_POST['apache'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails apache query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails apache query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set mimetypes=\"" . $_POST['mimetypes'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails mimetypes query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails mimetypes query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set LDAP_preference=\"" . $_POST['LDAP_preference'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails LDAP preference query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails LDAP preference query succeeded
"; - - } - - $query = "insert into " . $xerte_toolkits_site->database_table_prefix . "ldap(ldap_filter)values('" . $_POST['LDAP_filter'] . "')"; - - $query_response = mysql_query($query); - - $ldap = mysql_insert_id(); - - if(!$query_response){ - - $fail_string .= "The sitedetails LDAP preference query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails LDAP preference query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set LDAP_filter=\"" . $_POST['LDAP_filter'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "ldap set ldap_filter_attr=\"" . $_POST['LDAP_preference'] . "\" where ldap_id=\"" . $ldap . "\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails LDAP_filter query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails LDAP_filter query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set integration_config_path=\"" . $_POST['integration_config_path'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails integration_config_path query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails integration_config_path query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set admin_username=\"" . $_POST['admin_username'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails admin_username query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails admin_username query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set admin_password=\"" . $_POST['admin_password'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails admin_password query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails admin_password query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set site_session_name=\"" . $_POST['site_session_name'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails site_session_name query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails site_session_name query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set site_title=\"" . $_POST['site_title'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails site_title query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails site_title query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set site_name=\"" . $_POST['site_name'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails site_name query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails site_name query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set site_logo=\"" . $_POST['site_logo'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails site_logo query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails site_logo query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set organisational_logo=\"" . $_POST['organisational_logo'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails organisational_logo query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails organisational_logo query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set welcome_message=\"" . $_POST['welcome_message'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails welcome_message query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails welcome_message query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set site_text=\"" . $_POST['site_text'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails site_text query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails site_text query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set news_text=\"" . base64_encode(stripcslashes($_POST['news_text'])) . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails news_text query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails news_text query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set pod_one=\"" . base64_encode(stripcslashes($_POST['pod_one'])) . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails pod_one query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails pod_one query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set pod_two=\"" . base64_encode(stripcslashes($_POST['pod_two'])) . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails pod_two query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails pod_two query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set copyright=\"" . $_POST['copyright'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails copyright query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails copyright query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set rss_title=\"" . $_POST['rss_title'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails rss_title query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails rss_title query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set synd_publisher=\"" . $_POST['synd_publisher'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails synd_publisher query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails synd_publisher query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set synd_rights=\"" . $_POST['synd_rights'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails synd_rights query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails synd_rights query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set synd_license=\"" . $_POST['synd_license'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails synd_license query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails synd_license query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set demonstration_page=\"" . $_POST['demonstration_page'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails demonstration_page query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails demonstration_page query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set form_string=\"" . base64_encode(stripcslashes($_POST['form_string'])) . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails form_string query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails form_string query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set peer_form_string=\"" . base64_encode(stripcslashes($_POST['peer_form_string'])) . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails peer_form_string query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails peer_form_string query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set module_path=\"" . $_POST['module_path'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails module_path query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails module_path query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set website_code_path=\"" . $_POST['website_code_path'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails website_code_path query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails website_code_path query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set users_file_area_short=\"" . $_POST['users_file_area_short'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails users_file_area_short query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails users_file_area_short query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set php_library_path=\"" . $_POST['php_library_path'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails php_library_path query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails php_library_path query succeeded
"; - - } - - if(!$magic_quotes){ - - $import_path = addslashes($_POST['import_path']); - - }else{ - - $import_path = $_POST['import_path']; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set import_path=\"" . str_replace("\\\\","/",$import_path) . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails import_path query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails import_path query succeeded
"; - - } - - if(!$magic_quotes){ - - $root_path = addslashes($_POST['root_file_path']); - - }else{ - - - $root_path = $_POST['root_file_path']; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set root_file_path='" . str_replace("\\\\","/",$root_path) . "' where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails root_file_path query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails root_file_path query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set play_edit_preview_query=\"" . base64_encode(stripcslashes($_POST['play_edit_preview_query'])) . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails play_edit_preview_query query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails play_edit_preview_queryquery succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set error_log_path=\"" . $_POST['error_log_path'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails error_log_path query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails error_log_path query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set email_error_list=\"" . $_POST['email_error_list'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails email_error_list query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails email_error_list query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set error_log_message=\"" . $_POST['error_log_message'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails error_log_message query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails error_log_message query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set max_error_size=\"" . $_POST['max_error_size'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails max_error_size query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails max_error_size query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set error_email_message=\"" . $_POST['error_email_message'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails error_email_message query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails error_email_message query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set ldap_host=\"" . $_POST['ldap_host'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "ldap set ldap_host=\"" . $_POST['ldap_host'] . "\" where ldap_id=\"" . $ldap . "\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails ldap_host query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails ldap_host query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set ldap_port=\"" . $_POST['ldap_port'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "ldap set ldap_port=\"" . $_POST['ldap_port'] . "\" where ldap_id=\"" . $ldap . "\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails ldap_port query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails ldap_port query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set bind_pwd=\"" . $_POST['bind_pwd'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "ldap set ldap_password=\"" . $_POST['bind_pwd'] . "\" where ldap_id=\"" . $ldap . "\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails bind_pwd query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails bind_pwd query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set basedn=\"" . $_POST['basedn'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "ldap set ldap_basedn=\"" . $_POST['basedn'] . "\" where ldap_id=\"" . $ldap . "\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails basedn query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails basedn query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set bind_dn=\"" . $_POST['bind_dn'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "ldap set ldap_username=\"" . $_POST['bind_dn'] . "\" where ldap_id=\"" . $ldap . "\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails bind_dn query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails bind_dn query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set flash_save_path=\"" . $_POST['flash_save_path'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails flash_save_path query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails flash_save_path query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set flash_upload_path=\"" . $_POST['flash_upload_path'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails flash_upload_path query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails flash_upload_path query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set flash_preview_check_path=\"" . $_POST['flash_preview_check_path'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails flash_preview_check_path query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails flash_preview_check_path query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set flash_flv_skin=\"" . $_POST['flash_flv_skin'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails flash_flv_skin query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails flash_flv_skin query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set site_email_account=\"" . $_POST['site_email_account'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails site_email_account query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails site_email_account query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set headers=\"" . $_POST['headers'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails headers query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails headers query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set email_to_add_to_username=\"" . $_POST['email_to_add_to_username'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails email_to_add_to_username query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails email_to_add_to_username query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set proxy1=\"" . $_POST['proxy1'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails proxy1 query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails proxy1 query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set port1=\"" . $_POST['port1'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails port1 query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails port1 query succeeded
"; - - } - - $query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set feedback_list=\"" . $_POST['feedback_list'] . "\" where site_id=\"1\""; - - $query_response = mysql_query($query); - - if(!$query_response){ - - $fail_string .= "The sitedetails feedback_list query " . $query . " has failed due to " . mysql_error() . "
"; - - }else{ - - $success_string .= "The sitedetails feedback_list query succeeded
"; - - } - - if($_POST['apache']=="true"){ - - $replace = substr($_SERVER['PHP_SELF'],0,strpos($_SERVER['PHP_SELF'],"/",1)); - - $buffer = file_get_contents("htaccess.conf"); - - $buffer = str_replace("*",$replace,$buffer); - - $file_handle = fopen(".htaccess",'w'); - fwrite($file_handle,$buffer,strlen($buffer)); - fclose($file_handle); - - chmod(".htaccess",0777); - - rename(".htaccess","../.htaccess"); - - chmod("../.htaccess",0777); - - } +database_table_prefix}sitedetails"); +if(!$res) { + die("Error running SQL query " . mysql_error()); +} + +$res = db_query("insert into {$xerte_toolkits_site->database_table_prefix}sitedetails(site_id) VALUES (1)"); +if(!$res) { + die("Error running SQL query " . mysql_error()); +} + +if(!empty($_POST['site_url'])) { + if(!preg_match('/^http/', $_POST['site_url'])) { + $_POST['site_url'] = 'http://' . $_POST['site_url']; + } +} +foreach(array('news_text', 'pod_one', 'pod_two', 'form_string', 'peer_form_string', 'play_edit_preview_query') as $key) { + $_POST[$key] = base64_encode(stripcslashes($_POST[$key])); +} + +foreach(array('site_url', 'apache', 'mimetypes', 'LDAP_preference', 'LDAP_filter', 'integration_config_path', 'admin_username', 'admin_password', 'site_session_name', + 'site_title', 'site_name', 'site_logo', 'organisational_logo','welcome_message', 'site_text', 'news_text', 'pod_one', 'pod_two', 'copyright', 'rss_title', + 'synd_publisher', 'synd_rights', 'synd_license', 'demonstration_page', 'form_string', 'peer_form_string', 'module_path', 'website_code_path', 'users_file_area_short', + 'php_library_path', 'error_log_path', 'email_error_list', 'error_log_message', 'max_error_size', 'error_email_message', 'max_error_size', 'error_email_message', + 'ldap_host', 'ldap_port', 'bind_pwd', 'basedn', 'bind_dn', 'flash_save_path', 'flash_upload_path', 'flash_preview_check_path', 'flash_flv_skin', + 'site_email_account', 'headers', 'email_to_add_to_username', 'proxy1', 'port1', 'feedback_list', 'play_edit_preview_query' ) as $field) { + + $res = db_query("UPDATE {$xerte_toolkits_site->database_table_prefix}sitedetails SET $field = ? WHERE site_id = ?", array($_POST[$field], '1')); + if(!$res) { + $fail_string .= "
The sitedetails {$field} query has failed, with MySQL saying: " . mysql_error() . "

"; + } + else { + $success_string .= "The sitedetails {$field} query succeeded
"; + } +} + +$ldap_fields = array('ldap_filter' => 'LDAP_filter', 'ldap_filter_attr' => 'LDAP_preference', 'ldap_host' => 'ldap_host', 'ldap_port' => 'ldap_port', + 'ldap_password' => 'bind_pwd', 'ldap_basedn' => 'basedn', 'ldap_username' => 'bind_dn'); +$comma = ''; +$query = "INSERT INTO {$xerte_toolkits_site->database_table_prefix}ldap (" . implode(',', array_keys($ldap_fields)) . ") VALUES ("; +$values = array(); +foreach($ldap_fields as $post_key) { + $query .= $comma; + $query .= "?"; + $comma = ","; + $values[] = $_POST[$post_key]; +} +$query .= ")"; + +$res = db_query($query, $values); +if(!$res) { + $fail_string .= "The ldap query has failed (query: {{{$query}}}) due to " . mysql_error() . "
"; +} +else { + $success_string .= "The 'ldap' insert query has succeeded
"; +} + + +if(!$magic_quotes){ + + $import_path = addslashes($_POST['import_path']); + +}else{ + + $import_path = $_POST['import_path']; + +} + +$query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set import_path=\"" . str_replace("\\\\","/",$import_path) . "\" where site_id=\"1\""; + +$query_response = mysql_query($query); + +if(!$query_response){ + $fail_string .= "The sitedetails import_path query " . $query . " has failed due to " . mysql_error() . "
"; +}else{ + $success_string .= "The sitedetails import_path query succeeded
"; +} + +if(!$magic_quotes){ + $root_path = addslashes($_POST['root_file_path']); +}else{ + $root_path = $_POST['root_file_path']; + +} + +$query = "update " . $xerte_toolkits_site->database_table_prefix . "sitedetails set root_file_path='" . str_replace("\\\\","/",$root_path) . "' where site_id=\"1\""; +$query_response = mysql_query($query); + +if(!$query_response){ + $fail_string .= "The sitedetails root_file_path query " . $query . " has failed due to " . mysql_error() . "
"; +}else{ + $success_string .= "The sitedetails root_file_path query succeeded
"; + +} + + +// Setup .htaccess file if we can... +if($_POST['apache']=="true"){ + $replace = substr($_SERVER['PHP_SELF'],0,strpos($_SERVER['PHP_SELF'],"/",1)); + $buffer = file_get_contents("htaccess.conf"); + $buffer = str_replace("*",$replace,$buffer); + $file_handle = fopen(".htaccess",'w'); + fwrite($file_handle,$buffer,strlen($buffer)); + fclose($file_handle); + chmod(".htaccess",0744); + rename(".htaccess","../.htaccess"); + chmod("../.htaccess",0744); +} ?>

- Install complete + Install complete

-
" . $fail_string . "

"; - echo "

These failures may affect your site, please see if they can be rectified using the management tools or altering the database directly.

"; +if($fail_string!=""){ - } + echo "

-
" . $fail_string . "

"; + echo "

These failures may affect your site, please see if they can be rectified using the management tools or altering the database directly.

"; - if($success_string!=""){ +} - echo "

The following queries suceeded -
" . $success_string . "

"; +if($success_string!=""){ - } + echo "

The following queries suceeded -
" . $success_string . "

"; + +} ?>

- Your site URL is + Your site URL is

- If you have installed this on a public facing server, please look to remove the php file you are not planning to use. Index, demo, integration, webctlink and management.php all can access the site in some way. You should rename the files you do not plan to use. + If you have installed this on a public facing server, please look to remove the php file you are not planning to use. Index, demo, integration, webctlink and management.php all can access the site in some way. You should rename the files you do not plan to use.

- Please see the Xerte site at http://www.nottingham.ac.uk/xerte and please consider joining the mailing list. -

+ Please see the Xerte site at http://www.nottingham.ac.uk/xerte and please consider joining the mailing list. +

- \ No newline at end of file + diff --git a/website_code/php/folder_library.php b/website_code/php/folder_library.php index 17be8a2b05..1d84000ec7 100644 --- a/website_code/php/folder_library.php +++ b/website_code/php/folder_library.php @@ -3,199 +3,199 @@ include 'file_library.php'; include 'user_library.php'; - /** - * - * Function make new folder - * This function is used to send an error email meesage - * @param string $folder_id = id for the new folder - * @param string $folder_name = Name of the new folder - * @version 1.0 - * @author Patrick Lockley - */ +/** + * + * Function make new folder + * This function is used to send an error email meesage + * @param string $folder_id = id for the new folder + * @param string $folder_name = Name of the new folder + * @version 1.0 + * @author Patrick Lockley + */ function make_new_folder($folder_id,$folder_name){ - global $xerte_toolkits_site; + global $xerte_toolkits_site; - $mysql_id = database_connect("New folder database connect success","New folder database connect failed"); + $mysql_id = database_connect("New folder database connect success","New folder database connect failed"); - if($folder_id=="file_area"){ + if($folder_id=="file_area"){ - $query = "INSERT INTO " . $xerte_toolkits_site->database_table_prefix . "folderdetails (login_id,folder_parent,folder_name,date_created) values ('" . $_SESSION['toolkits_logon_id'] . "','" . get_user_root_folder() . "','" . $folder_name ."','" . date('Y-m-d') . "')"; + $query = "INSERT INTO " . $xerte_toolkits_site->database_table_prefix . "folderdetails (login_id,folder_parent,folder_name,date_created) values ('" . $_SESSION['toolkits_logon_id'] . "','" . get_user_root_folder() . "','" . $folder_name ."','" . date('Y-m-d') . "')"; - }else{ + }else{ - $query = "INSERT INTO " . $xerte_toolkits_site->database_table_prefix . "folderdetails (login_id,folder_parent,folder_name,date_created) values ('" . $_SESSION['toolkits_logon_id'] . "','" . $folder_id . "','" . $folder_name . "','" . date('Y-m-d') . "')"; + $query = "INSERT INTO " . $xerte_toolkits_site->database_table_prefix . "folderdetails (login_id,folder_parent,folder_name,date_created) values ('" . $_SESSION['toolkits_logon_id'] . "','" . $folder_id . "','" . $folder_name . "','" . date('Y-m-d') . "')"; - } + } - if(mysql_query($query)){ + if(mysql_query($query)){ - receive_message($_SESSION['toolkits_logon_username'], "USER", "SUCCESS", "Folder creation succeeded for " . $_SESSION['toolkits_logon_username'], "Folder creation succeeded for " . $_SESSION['toolkits_logon_username']); + receive_message($_SESSION['toolkits_logon_username'], "USER", "SUCCESS", "Folder creation succeeded for " . $_SESSION['toolkits_logon_username'], "Folder creation succeeded for " . $_SESSION['toolkits_logon_username']); - echo "The folder has been created"; + echo "The folder has been created"; - }else{ + }else{ - receive_message($_SESSION['toolkits_logon_username'], "USER", "CRITICAL", "Folder creation failed for " . $_SESSION['toolkits_logon_username'], "Folder creation failed for " . $_SESSION['toolkits_logon_username']); + receive_message($_SESSION['toolkits_logon_username'], "USER", "CRITICAL", "Folder creation failed for " . $_SESSION['toolkits_logon_username'], "Folder creation failed for " . $_SESSION['toolkits_logon_username']); - echo "Error creating folder"; + echo "Error creating folder"; - } + } + + mysql_close($mysql_id); - mysql_close($mysql_id); - } - /** - * - * Function delete folder - * This function is used to send an error email meesage - * @param string $folder_id = id for the new folder - * @param string $folder_name = Name of the new folder - * @version 1.0 - * @author Patrick Lockley - */ +/** + * + * Function delete folder + * This function is used to send an error email meesage + * @param string $folder_id = id for the new folder + * @param string $folder_name = Name of the new folder + * @version 1.0 + * @author Patrick Lockley + */ function delete_folder($folder_id){ - global $xerte_toolkits_site; + global $xerte_toolkits_site; + + $database_id = database_connect("Delete folder database connect success","Delete folder database connect failed"); - $database_id = database_connect("Delete folder database connect success","Delete folder database connect failed"); + $folder_id = substr($folder_id,strpos($folder_id,"_")+1,strlen($folder_id)); - $folder_id = substr($folder_id,strpos($folder_id,"_")+1,strlen($folder_id)); + echo $folder_id; - echo $folder_id; + $query_to_delete_folder = "delete from " .$xerte_toolkits_site->database_table_prefix . "folderdetails where folder_id=\"" . $folder_id . "\""; - $query_to_delete_folder = "delete from " .$xerte_toolkits_site->database_table_prefix . "folderdetails where folder_id=\"" . $folder_id . "\""; + echo $query_to_delete_folder; - echo $query_to_delete_folder; + if(mysql_query($query_to_delete_folder)){ - if(mysql_query($query_to_delete_folder)){ + receive_message($_SESSION['toolkits_logon_username'], "USER", "SUCCESS", "Folder " . $folder_id . " deleted for " . $_SESSION['toolkits_logon_username'], "Folder creation succeeded for " . $_SESSION['toolkits_logon_username']); - receive_message($_SESSION['toolkits_logon_username'], "USER", "SUCCESS", "Folder " . $folder_id . " deleted for " . $_SESSION['toolkits_logon_username'], "Folder creation succeeded for " . $_SESSION['toolkits_logon_username']); + }else{ - }else{ + receive_message($_SESSION['toolkits_logon_username'], "USER", "CRITICAL", "Folder " . $folder_id . " not deleted for " . $_SESSION['toolkits_logon_username'], "Folder creation succeeded for " . $_SESSION['toolkits_logon_username']); - receive_message($_SESSION['toolkits_logon_username'], "USER", "CRITICAL", "Folder " . $folder_id . " not deleted for " . $_SESSION['toolkits_logon_username'], "Folder creation succeeded for " . $_SESSION['toolkits_logon_username']); + } - } + mysql_close($database_id); - mysql_close($database_id); - } - /** - * - * Function move file - * This function is used to move files and folders - * @param array $files_to_move = an array of files and folders to move - * @param string $destination = Name of the new folder - * @version 1.0 - * @author Patrick Lockley - */ +/** + * + * Function move file + * This function is used to move files and folders + * @param array $files_to_move = an array of files and folders to move + * @param string $destination = Name of the new folder + * @version 1.0 + * @author Patrick Lockley + */ function move_file($files_to_move,$destination){ - global $xerte_toolkits_site; + global $xerte_toolkits_site; + + $mysql_id = database_connect("Move file database connect success", "Move file database connect failure"); + + $new_files_array=explode(",",$files_to_move); + + /* + * Files array can be complicated, and this thread can lock the system, so limit max files to 50 + */ + + if((count($new_files_array)!=0)&&(count($new_files_array)<=50)){ + + /* + * check their is a destination + */ - $mysql_id = database_connect("Move file database connect success", "Move file database connect failure"); + if(($destination!="")){ - $new_files_array=explode(",",$files_to_move); + for($x=0;$x!=count($new_files_array);$x++){ - /* - * Files array can be complicated, and this thread can lock the system, so limit max files to 50 - */ + // check there are files - if((count($new_files_array)!=0)&&(count($new_files_array)<=50)){ + if($new_files_array[$x]!=""){ - /* - * check their is a destination - */ + if($new_files_array[$x+1]=="file"){ - if(($destination!="")){ + if($new_files_array[$x+2]=="folder_workspace"){ - for($x=0;$x!=count($new_files_array);$x++){ - - // check there are files + $parent = get_user_root_folder(); - if($new_files_array[$x]!=""){ + } - if($new_files_array[$x+1]=="file"){ + if($destination=="folder_workspace"){ - if($new_files_array[$x+2]=="folder_workspace"){ + $destination = get_user_root_folder(); - $parent = get_user_root_folder(); + } - } + if($destination=="recyclebin"){ - if($destination=="folder_workspace"){ + $destination = get_recycle_bin(); - $destination = get_user_root_folder(); + } - } + /* + * Move files in the database + */ - if($destination=="recyclebin"){ + $query_file = "UPDATE " .$xerte_toolkits_site->database_table_prefix . "templaterights SET folder = \"" . $destination . "\" where (template_id=\"" . $new_files_array[$x] . "\" AND user_id =\"" . $_SESSION['toolkits_logon_id'] . "\")"; - $destination = get_recycle_bin(); + if(mysql_query($query_file)){ - } - - /* - * Move files in the database - */ + receive_message($_SESSION['toolkits_logon_username'], "USER", "SUCCESS", "File " . $new_files_array[$x]. " moved into " . $destination . " for " . $_SESSION['toolkits_logon_username'], "File " . $new_files_array[$x]. " moved into " . $destination . " for " . $_SESSION['toolkits_logon_username']); - $query_file = "UPDATE " .$xerte_toolkits_site->database_table_prefix . "templaterights SET folder = \"" . $destination . "\" where (template_id=\"" . $new_files_array[$x] . "\" AND user_id =\"" . $_SESSION['toolkits_logon_id'] . "\")"; + }else{ - if(mysql_query($query_file)){ + receive_message($_SESSION['toolkits_logon_username'], "USER", "SUCCESS", "File " . $new_files_array[$x]. " failed to move into " . $destination . " for " . $_SESSION['toolkits_logon_username'], "File " . $new_files_array[$x]. " failed to move into " . $destination . " for " . $_SESSION['toolkits_logon_username']); - receive_message($_SESSION['toolkits_logon_username'], "USER", "SUCCESS", "File " . $new_files_array[$x]. " moved into " . $destination . " for " . $_SESSION['toolkits_logon_username'], "File " . $new_files_array[$x]. " moved into " . $destination . " for " . $_SESSION['toolkits_logon_username']); + } - }else{ + }else{ - receive_message($_SESSION['toolkits_logon_username'], "USER", "SUCCESS", "File " . $new_files_array[$x]. " failed to move into " . $destination . " for " . $_SESSION['toolkits_logon_username'], "File " . $new_files_array[$x]. " failed to move into " . $destination . " for " . $_SESSION['toolkits_logon_username']); + /* + * destination is the root folder + */ - } - - }else{ - - /* - * destination is the root folder - */ + if($destination=="folder_workspace"){ - if($destination=="folder_workspace"){ + $destination = get_user_root_folder(); - $destination = get_user_root_folder(); + } - } + $query_folder = "UPDATE " .$xerte_toolkits_site->database_table_prefix . "folderdetails SET folder_parent = \"" . $destination . "\" where (folder_id=\"" . $new_files_array[$x] . "\")"; - $query_folder = "UPDATE " .$xerte_toolkits_site->database_table_prefix . "folderdetails SET folder_parent = \"" . $destination . "\" where (folder_id=\"" . $new_files_array[$x] . "\")"; + if(mysql_query($query_folder)){ - if(mysql_query($query_folder)){ + receive_message($_SESSION['toolkits_logon_username'], "USER", "SUCCESS", "Folder " . $new_files_array[$x]. " moved into " . $destination . " for " . $_SESSION['toolkits_logon_username'], "File " . $new_files_array[$x]. " moved into " . $destination . " for " . $_SESSION['toolkits_logon_username']); - receive_message($_SESSION['toolkits_logon_username'], "USER", "SUCCESS", "Folder " . $new_files_array[$x]. " moved into " . $destination . " for " . $_SESSION['toolkits_logon_username'], "File " . $new_files_array[$x]. " moved into " . $destination . " for " . $_SESSION['toolkits_logon_username']); - - }else{ + }else{ - receive_message($_SESSION['toolkits_logon_username'], "USER", "SUCCESS", "File " . $new_files_array[$x]. " failed to move into " . $destination . " for " . $_SESSION['toolkits_logon_username'], "Folder " . $new_files_array[$x]. " failed to move into " . $destination . " for " . $_SESSION['toolkits_logon_username']); + receive_message($_SESSION['toolkits_logon_username'], "USER", "SUCCESS", "File " . $new_files_array[$x]. " failed to move into " . $destination . " for " . $_SESSION['toolkits_logon_username'], "Folder " . $new_files_array[$x]. " failed to move into " . $destination . " for " . $_SESSION['toolkits_logon_username']); - } + } - } + } - $x+=2; + $x+=2; - } + } - } + } - } + } - } + } - mysql_close($mysql_id); + mysql_close($mysql_id); } diff --git a/website_code/php/folders/make_new_folder.php b/website_code/php/folders/make_new_folder.php index 108c74f665..5b3ead58d2 100644 --- a/website_code/php/folders/make_new_folder.php +++ b/website_code/php/folders/make_new_folder.php @@ -1,16 +1,15 @@ - \ No newline at end of file +make_new_folder(mysql_real_escape_string($_POST['folder_id']),mysql_real_escape_string($_POST['folder_name'])); diff --git a/website_code/php/login_library.php b/website_code/php/login_library.php index 768e3fe9f8..f8285fab81 100644 --- a/website_code/php/login_library.php +++ b/website_code/php/login_library.php @@ -130,15 +130,14 @@ function get_user_ldap($host,$port,$bind_pwd,$bind_dn,$basedn,$ldap_filter,$ldap $ldapbind = null; $ds = @ldap_connect($host, (int)$port); - - @ldap_set_option($ds, LDAP_OPT_PROTOCOL_VERSION, 3); - if ($ds) { + @ldap_set_option($ds, LDAP_OPT_PROTOCOL_VERSION, 3); if ($bind_dn != '') { $ldapbind = @ldap_bind($ds, $bind_dn, $bind_pwd); + _debug("$basedn / $ldap_filter_attr / $eureka_username / $ldap_search_attr "); $sr = @ldap_search($ds, $basedn, $ldap_filter_attr ."=". $eureka_username, array_values($ldap_search_attr)); if(!$sr){ diff --git a/website_code/php/properties/export_template.php b/website_code/php/properties/export_template.php index 8d1cd15092..026721d2ff 100644 --- a/website_code/php/properties/export_template.php +++ b/website_code/php/properties/export_template.php @@ -32,11 +32,11 @@ echo "

A zip file export will package (but not delete) your project into one zip file. If you then open this file, the contents can be used to deploy your project on any webpage.

Click on zip export to get your file - Zip export

"; - echo "

As above, but with references to web based files altered - Zip (local) export

"; + echo "

As above, but with references to web based files altered - Zip (local) export

"; echo "

A SCORM 1.2 file export will package (but not delete) your project into one zip file. This zip file can then be imported by most VLEs to become part of an online course. This file will be SCORM 1.2 compliant.

Click on Scorm export to get this package - Scorm export

"; - echo "

As above, but with richer SCORM metadata - SCORM + metadata export

"; + echo "

As above, but with richer SCORM metadata - SCORM + metadata export

"; }else{ diff --git a/website_code/php/properties/rename_template.php b/website_code/php/properties/rename_template.php index 47c9de4c00..55533963b0 100644 --- a/website_code/php/properties/rename_template.php +++ b/website_code/php/properties/rename_template.php @@ -19,11 +19,10 @@ $tutorial_id = mysql_real_escape_string($_POST['template_id']); - $database_id = database_connect("Template rename database connect success","Template rename database connect failed"); + $query = "update {$xerte_toolkits_site->database_table_prefix}templatedetails SET template_name = ? WHERE template_id = ?"; + $res = db_query($query, array(str_replace(' ', '_', $_POST['template_name']), $_POST['template_id'])); - $query = "update " . $xerte_toolkits_site->database_table_prefix . "templatedetails SET template_name =\"" . str_replace(" ", "_", mysql_real_escape_string($_POST['template_name'])) . "\" WHERE template_id =\"" . mysql_real_escape_string($_POST['template_id']) . "\""; - - if(mysql_query($query)){ + if($res) { $query_for_names = "select template_name, date_created, date_modified from " . $xerte_toolkits_site->database_table_prefix . "templatedetails where template_id=\"". $tutorial_id . "\""; @@ -67,8 +66,4 @@ } - mysql_close($database_id); - } - -?> diff --git a/website_code/php/properties/sharing_status_template.php b/website_code/php/properties/sharing_status_template.php index 29e8705488..8ac408e52f 100644 --- a/website_code/php/properties/sharing_status_template.php +++ b/website_code/php/properties/sharing_status_template.php @@ -29,7 +29,7 @@ * show a different view if you are the file creator */ - if(is_user_creator(mysql_real_escape_string($_POST['template_id']))){ + if(is_user_creator(mysql_real_escape_string($_POST['template_id'])) ||is_user_admin() ){ echo "

To share this template with some one, please type their name here. The user must have an account on the site to appear in this search.

Names will appear here

";