forum.lissyara.su

вставляю код, а он не работает!

вставить код пытался вот здесь, где проверка происходит, из формы закачивания


[codebox]
<?php
/*
Download System
Version 1.0
by:vbgamer45
http://www.smfhacks.com
Copyright 2007 SMFHacks.com

############################################
License Information:

Links to http://www.smfhacks.com must remain unless
branding free option is purchased.
#############################################

Download System Function Information:

void DownloadsMain()
void main()
void AddCategory()
void AddCategory2()
void EditCategory()
void EditCategory2()
void DeleteCategory()
void DeleteCategory2()
void ViewDownload()
void AddDownload()
void AddDownload2()
void EditDownload()
void EditDownload2()
void DeleteDownload();
void DeleteDownload2()
void ReportDownload()
void ReportDownload2()
void AddComment()
void AddComment2()
void DeleteComment()
void AdminSettings()
void AdminSettings2()
void CatUp()
void CatDown()
void MyFiles()
void RateDownload()
void ViewRating()
void DeleteRating()
void Stats()
void UpdateUserFileSizeTable($memberid, $filesize = 0)
void FileSpaceAdmin()
void FileSpaceList()
void RecountFileQuotaTotals($redirect = true)


*/

if (!defined('SMF'))
die('Hacking attempt...');

function DownloadsMain()
{
// Load the language files
if (loadlanguage('Downloads') == false)
loadLanguage('Downloads','english');

// Load the main template file
loadtemplate('Downloads');

// Download Actions pretty big array heh
$subActions = array(
'main' => 'main',
'view' => 'ViewDownload',
'bulkactions' => 'BulkActions',
'adminset'=> 'AdminSettings',
'adminset2'=> 'AdminSettings2',
'delete' => 'DeleteDownload',
'delete2' => 'DeleteDownload2',
'edit' => 'EditDownload',
'edit2' => 'EditDownload2',
'report' => 'ReportDownload',
'report2' => 'ReportDownload2',
'deletereport' => 'DeleteReport',
'reportlist' => 'ReportList',
'comment' => 'AddComment',
'comment2' => 'AddComment2',
'editcomment' => 'EditComment',
'editcomment2' => 'EditComment2',
'apprcomment' => 'ApproveComment',
'apprcomall' => 'ApproveAllComments',
'reportcomment' => 'ReportComment',
'reportcomment2' => 'ReportComment2',
'delcomment' => 'DeleteComment',
'delcomreport' => 'DeleteCommentReport',
'commentlist' => 'CommentList',
'rate' => 'RateDownload',
'viewrating' => 'ViewRating',
'delrating' => 'DeleteRating',
'catup' => 'CatUp',
'catdown' => 'CatDown',
'catperm' => 'CatPerm',
'catperm2' => 'CatPerm2',
'catpermlist' => 'CatPermList',
'catpermdelete' => 'CatPermDelete',
'catimgdel' => 'CatImageDelete',
'addcat' => 'AddCategory',
'addcat2' => 'AddCategory2',
'editcat' => 'EditCategory',
'editcat2' => 'EditCategory2',
'deletecat' => 'DeleteCategory',
'deletecat2' => 'DeleteCategory2',
'viewc' => 'ViewC',
'myfiles' => 'MyFiles',
'approvelist' => 'ApproveList',
'approve' => 'ApproveDownload',
'unapprove' => 'UnApproveDownload',
'add' => 'AddDownload',
'add2' => 'AddDownload2',
'search' => 'Search',
'search2' => 'Search2',
'stats' => 'Stats',
'filespace' => 'FileSpaceAdmin',
'filelist' => 'FileSpaceList',
'recountquota' => 'RecountFileQuotaTotals',
'addquota' => 'AddQuota',
'deletequota' => 'DeleteQuota',
'next' => 'NextDownload',
'prev' => 'PreviousDownload',
'cusup' => 'CustomUp',
'cusdown' => 'CustomDown',
'cusadd' => 'CustomAdd',
'cusdelete' => 'CustomDelete',
'downfile' => 'DownloadFile',

);


// Follow the sa or just go to the main function
if (isset($_GET['sa']))
$sa = $_GET['sa'];
else
$sa = 'main';

if (!empty($subActions[$sa]))
$subActions[$sa]();
else
main();

}
function main()
{
global $context, $scripturl, $mbname, $txt, $db_prefix, $modSettings, $user_info;

// View the main Downloads

// Is the user allowed to view the downloads?
isAllowedTo('downloads_view');

// Load the main downloads template
$context['sub_template'] = 'mainview';


// Get the main groupid
if ($context['user']['is_guest'])
$groupid = -1;
else
$groupid = $user_info['groups'][0];

if (isset($_REQUEST['cat']))
$cat = (int) $_REQUEST['cat'];
else
$cat = 0;

if (!empty($cat))
{

// Check the permission
GetCatPermission($cat,'view');

// Get category name used for the page title
$dbresult1 = db_query("
SELECT
ID_CAT, title, roworder, description, image,
disablerating, orderby, sortby
FROM {$db_prefix}down_cat
WHERE ID_CAT = $cat LIMIT 1", __FILE__, __LINE__);
$row1 = mysql_fetch_assoc($dbresult1);
$context['downloads_cat_name'] = $row1['title'];
$context['downloads_sortby'] = $row1['sortby'];
$context['downloads_orderby'] = $row1['orderby'];
$context['downloads_cat_norate'] = $row1['disablerating'];
if ($context['downloads_cat_norate'] == '')
$context['downloads_cat_norate'] = 0;

// Free the SQL Result
mysql_free_result($dbresult1);

// Set the page title
$context['page_title'] = $mbname . ' - ' . $context['downloads_cat_name'];

// Get the page number
if (!isset($_REQUEST['pg']))
$page = 1;
else
$page = (int) $_REQUEST['pg'];

// Get the total number of pages
$total = ceil(GetTotalByCATID($cat) / $modSettings['down_set_files_per_page']);


$page--;
if ($page < 0)
$page = 0;

$curpage = $page * $modSettings['down_set_files_per_page'];

$context['downloads_total'] = $total;
$context['downloads_page'] = $page;

// Check if we are sorting stuff heh
$sortby = '';
$orderby = '';
if (isset($_REQUEST['sortby']))
{
switch ($_REQUEST['sortby'])
{
case 'date':
$sortby = 'p.ID_FILE';

break;
case 'title':
$sortby = 'p.title';
break;

case 'mostview':
$sortby = 'p.views';
break;

case 'mostdowns':
$sortby = 'p.totaldownloads';
break;
case 'filesize':
$sortby = 'p.filesize';
break;
case 'membername':
$sortby = 'm.realname';
break;

case 'mostcom':
$sortby = 'p.commenttotal';
break;

case 'mostrated':
$sortby = 'p.totalratings';
break;


default:
$sortby = 'p.ID_FILE';
break;
}

$sortby2 = $_REQUEST['sortby'];

$context['downloads_sortby'] = $sortby2;
}
else
{
if (!empty($context['downloads_sortby']))
$sortby = $context['downloads_sortby'];
else
$sortby = 'p.ID_FILE';

$sortby2 = 'date';

$context['downloads_sortby'] = $sortby2;
}


if (isset($_REQUEST['orderby']))
{
switch ($_REQUEST['orderby'])
{
case 'asc':
$orderby = 'ASC';

break;
case 'desc':
$orderby = 'DESC';
break;



default:
$orderby = 'DESC';
break;
}

$orderby2 = $_REQUEST['orderby'];

$context['downloads_orderby2'] = $orderby2;
}
else
{

if (!empty($context['downloads_orderby']))
$orderby = $context['downloads_orderby'];
else
$orderby = 'DESC';

$orderby2 = 'desc';

$context['downloads_orderby2'] = $orderby2;
}


// Show the downloads
$dbresult = db_query("
SELECT
p.ID_FILE, p.totalratings, p.rating, p.commenttotal,
p.filesize, p.views, p.title, p.ID_MEMBER, m.realName,
p.date, p.description, p.totaldownloads
FROM {$db_prefix}down_file as p
LEFT JOIN {$db_prefix}members AS m ON (p.ID_MEMBER = m.ID_MEMBER)
WHERE p.ID_CAT = $cat AND p.approved = 1
ORDER BY $sortby $orderby
LIMIT $curpage," . $modSettings['down_set_files_per_page'], __FILE__, __LINE__);
$context['downloads_files'] = array();
while($row = mysql_fetch_assoc($dbresult))
{
$context['downloads_files'][] = array(
'ID_FILE' => $row['ID_FILE'],
'title' => $row['title'],
'totalratings' => $row['totalratings'],
'rating' => $row['rating'],
'commenttotal' => $row['commenttotal'],
'filesize' => $row['filesize'],
'views' => $row['views'],
'ID_MEMBER' => $row['ID_MEMBER'],
'realName' => $row['realName'],
'date' => $row['date'],
'description' => $row['description'],
'totaldownloads' => $row['totaldownloads'],

);

}
mysql_free_result($dbresult);



if (!empty($modSettings['down_who_viewing']))
{
$context['can_moderate_forum'] = allowedTo('moderate_forum');

// SMF 1.1.x
// Taken from Display.php
// Start out with no one at all viewing it.
$context['view_members'] = array();
$context['view_members_list'] = array();
$context['view_num_hidden'] = 0;

// Search for members who have this downloads id set in their GET data.
$request = db_query("
SELECT
lo.ID_MEMBER, lo.logTime, mem.realName, mem.memberName, mem.showOnline,
mg.onlineColor, mg.ID_GROUP, mg.groupName
FROM {$db_prefix}log_online AS lo
LEFT JOIN {$db_prefix}members AS mem ON (mem.ID_MEMBER = lo.ID_MEMBER)
LEFT JOIN {$db_prefix}membergroups AS mg ON (mg.ID_GROUP = IF(mem.ID_GROUP = 0, mem.ID_POST_GROUP, mem.ID_GROUP))
WHERE INSTR(lo.url, 's:7:\"downloads\";s:3:\"cat\";i:$cat;') OR lo.session = '" . ($user_info['is_guest'] ? 'ip' . $user_info['ip'] : session_id()) . "'", __FILE__, __LINE__);
while ($row = mysql_fetch_assoc($request))
{
if (empty($row['ID_MEMBER']))
continue;

if (!empty($row['onlineColor']))
$link = '<a href="' . $scripturl . '?action=profile;u=' . $row['ID_MEMBER'] . '" style="color: ' . $row['onlineColor'] . ';">' . $row['realName'] . '</a>';
else
$link = '<a href="' . $scripturl . '?action=profile;u=' . $row['ID_MEMBER'] . '">' . $row['realName'] . '</a>';

$is_buddy = in_array($row['ID_MEMBER'], $user_info['buddies']);
if ($is_buddy)
$link = '<b>' . $link . '</b>';

// Add them both to the list and to the more detailed list.
if (!empty($row['showOnline']) || allowedTo('moderate_forum'))
$context['view_members_list'][$row['logTime'] . $row['memberName']] = empty($row['showOnline']) ? '<i>' . $link . '</i>' : $link;
$context['view_members'][$row['logTime'] . $row['memberName']] = array(
'id' => $row['ID_MEMBER'],
'username' => $row['memberName'],
'name' => $row['realName'],
'group' => $row['ID_GROUP'],
'href' => $scripturl . '?action=profile;u=' . $row['ID_MEMBER'],
'link' => $link,
'is_buddy' => $is_buddy,
'hidden' => empty($row['showOnline']),
);

if (empty($row['showOnline']))
$context['view_num_hidden']++;
}

// The number of guests is equal to the rows minus the ones we actually used .
$context['view_num_guests'] = mysql_num_rows($request) - count($context['view_members']);
mysql_free_result($request);

// Sort the list.
krsort($context['view_members']);
krsort($context['view_members_list']);

}


}
else
{
$context['page_title'] = $mbname . ' - ' . $txt['downloads_text_title'];

$dbresult = db_query("
SELECT
c.ID_CAT, c.title, p.view, c.roworder, c.description, c.image, c.filename, c.redirect
FROM {$db_prefix}down_cat AS c
LEFT JOIN {$db_prefix}down_catperm AS p ON (p.ID_GROUP = $groupid AND c.ID_CAT = p.ID_CAT)
WHERE c.ID_PARENT = 0 ORDER BY c.roworder ASC", __FILE__, __LINE__);
$context['downloads_cats'] = array();
while($row = mysql_fetch_assoc($dbresult))
{
$context['downloads_cats'][] = array(
'ID_CAT' => $row['ID_CAT'],
'title' => $row['title'],
'view' => $row['view'],
'roworder' => $row['roworder'],
'description' => $row['description'],
'filename' => $row['filename'],
'redirect' => $row['redirect'],
'image' => $row['image'],
);

}
mysql_free_result($dbresult);


// Downloads waiting for approval
$dbresult3 = db_query("
SELECT
COUNT(*) as totalfiles
FROM {$db_prefix}down_file
WHERE approved = 0", __FILE__, __LINE__);
$row2 = mysql_fetch_assoc($dbresult3);
$totalfiles = $row2['totalfiles'];
mysql_free_result($dbresult3);
$context['downloads_waitapproval'] = $totalfiles;
// Reported Downloads
$dbresult4 = db_query("
SELECT
COUNT(*) as totalreport
FROM {$db_prefix}down_report", __FILE__, __LINE__);
$row2 = mysql_fetch_assoc($dbresult4);
$totalreport = $row2['totalreport'];
mysql_free_result($dbresult4);
$context['downloads_totalreport'] = $totalreport;

// Total Comments Rating for Approval
$dbresult5 = db_query("
SELECT
COUNT(*) as totalcom
FROM {$db_prefix}down_comment
WHERE approved = 0", __FILE__, __LINE__);
$row2 = mysql_fetch_assoc($dbresult5);
$totalcomments = $row2['totalcom'];
mysql_free_result($dbresult5);
$context['downloads_totalcom'] = $totalcomments;

// Total reported Comments
$dbresult6 = db_query("
SELECT
COUNT(*) as totalcreport
FROM {$db_prefix}down_creport", __FILE__, __LINE__);
$row2 = mysql_fetch_assoc($dbresult6);
$totalcomments = $row2['totalcreport'];
mysql_free_result($dbresult6);
$context['downloads_totalcreport'] = $totalcomments;

}


}
function AddCategory()
{
global $context, $mbname, $txt, $modSettings, $db_prefix;

isAllowedTo('downloads_manage');

adminIndex('downloads_settings');

// Show the boards where the user can select to post in.
$context['downloads_boards'] = array('');
$request = db_query("SELECT b.ID_BOARD, b.name AS bName, c.name AS cName FROM {$db_prefix}boards AS b, {$db_prefix}categories AS c WHERE b.ID_CAT = c.ID_CAT ORDER BY c.catOrder, b.boardOrder", __FILE__, __LINE__);
while ($row = mysql_fetch_assoc($request))
$context['downloads_boards'][$row['ID_BOARD']] = $row['cName'] . ' - ' . $row['bName'];
mysql_free_result($request);

$dbresult = db_query("
SELECT
c.ID_CAT, c.title,c.roworder
FROM {$db_prefix}down_cat AS c
ORDER BY c.roworder ASC", __FILE__, __LINE__);
$context['downloads_cat'] = array();
while($row = mysql_fetch_assoc($dbresult))
{
$context['downloads_cat'][] = array(
'ID_CAT' => $row['ID_CAT'],
'title' => $row['title'],
'roworder' => $row['roworder'],
);
}
mysql_free_result($dbresult);

if (isset($_REQUEST['cat']))
$parent = (int) $_REQUEST['cat'];
else
$parent = 0;

$context['cat_parent'] = $parent;


$context['page_title'] = $mbname . ' - ' . $txt['downloads_text_title'] . ' - ' . $txt['downloads_text_addcategory'];

$context['sub_template'] = 'add_category';

// Check if spellchecking is both enabled and actually working.
$context['show_spellchecking'] = !empty($modSettings['enableSpellChecking']) && function_exists('pspell_new');



}
function AddCategory2()
{
global $db_prefix, $txt, $scripturl, $sourcedir, $modSettings, $boarddir;

isAllowedTo('downloads_manage');

if (empty($modSettings['down_path']))
{
$modSettings['down_path'] = $boarddir . '/downloads/';
}

// Get the category information and clean the input for bad stuff
$title = htmlspecialchars($_REQUEST['title'],ENT_QUOTES);
$description = htmlspecialchars($_REQUEST['description'],ENT_QUOTES);
$image = htmlspecialchars($_REQUEST['image'],ENT_QUOTES);
$boardselect = (int) $_REQUEST['boardselect'];
$parent = (int) $_REQUEST['parent'];


$locktopic = isset($_REQUEST['locktopic']) ? 1 : 0;
$disablerating = isset($_REQUEST['disablerating']) ? 1 : 0;


// Title is required for a category
if (empty($title))
fatal_error($txt['downloads_error_cat_title'],false);


$sortby = '';
$orderby = '';
if (isset($_REQUEST['sortby']))
{
switch ($_REQUEST['sortby'])
{
case 'date':
$sortby = 'p.ID_FILE';

break;
case 'title':
$sortby = 'p.title';
break;

case 'mostview':
$sortby = 'p.views';
break;

case 'mostcom':
$sortby = 'p.commenttotal';
break;

case 'mostrated':
$sortby = 'p.totalratings';
break;

case 'mostdowns':
$sortby = 'p.totaldownloads';
break;
case 'filesize':
$sortby = 'p.filesize';
break;
case 'membername':
$sortby = 'm.realname';
break;


default:
$sortby = 'p.ID_FILE';
break;
}

}
else
{
$sortby = 'p.ID_FILE';
}


if (isset($_REQUEST['orderby']))
{
switch ($_REQUEST['orderby'])
{
case 'asc':
$orderby = 'ASC';

break;
case 'desc':
$orderby = 'DESC';
break;

default:
$orderby = 'DESC';
break;
}
}
else
{
$orderby = 'DESC';
}

// Do the order
$dbresult = db_query("
SELECT
MAX(roworder) as catorder
FROM {$db_prefix}down_cat
WHERE ID_PARENT = $parent
ORDER BY roworder DESC", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);

if (db_affected_rows()== 0)
$order = 0;
else
$order = $row['catorder'];
$order++;



// Insert the category
db_query("INSERT INTO {$db_prefix}down_cat
(title, description,roworder,image,ID_BOARD,ID_PARENT,disablerating,locktopic,sortby,ord
rby)
VALUES ('$title', '$description',$order,'$image',$boardselect,$parent,$disablerating,$locktopic,'$sortby','$orderby')", __FILE__, __LINE__);
mysql_free_result($dbresult);

// Get the Category ID
$cat_id = db_insert_id();


$testGD = get_extension_funcs('gd');
$gd2 = in_array('imagecreatetruecolor', $testGD) && function_exists('imagecreatetruecolor');
unset($testGD);

// Upload Category image File
if (isset($_FILES['picture']['name']) && $_FILES['picture']['name'] != '')
{

$sizes = @getimagesize($_FILES['picture']['tmp_name']);

// No size, then it's probably not a valid pic.
if ($sizes === false)
fatal_error($txt['downloads_error_invalid_picture'],false);

require_once($sourcedir . '/Subs-Graphics.php');

if ((!empty($modSettings['down_set_cat_width']) && $sizes[0] > $modSettings['down_set_cat_width']) || (!empty($modSettings['down_set_cat_height']) && $sizes[1] > $modSettings['down_set_cat_height']))
{

// Delete the temp file
@unlink($_FILES['picture']['tmp_name']);
fatal_error($txt['downloads_error_img_size_height'] . $sizes[1] . $txt['downloads_error_img_size_width'] . $sizes[0],false);

}
// Move the file
$extension = substr(strrchr($_FILES['picture']['name'], '.'), 1);
$filename = $cat_id . '.' . $extension;

move_uploaded_file($_FILES['picture']['tmp_name'], $modSettings['down_path'] . 'catimgs/' . $filename);
@chmod($modSettings['down_path'] . 'catimgs/' . $filename, 0644);


// Update the filename for the category
db_query("UPDATE {$db_prefix}down_cat
SET filename = '$filename' WHERE ID_CAT = $cat_id LIMIT 1", __FILE__, __LINE__);


}


// Redirect to the category listing
redirectexit('action=downloads;sa=admincat');
}
function ViewC()
{
die(base64_decode('RG93bmxvYWRzIFN5c3RlbSBieSB2YmdhbWVyNDUgaHR0cDovL3d3dy5zbWZoYWNrcy5jb20='));
}
function EditCategory()
{
global $context, $mbname, $txt, $modSettings, $db_prefix;
isAllowedTo('downloads_manage');

adminIndex('downloads_settings');

$cat = (int) $_REQUEST['cat'];
if (empty($cat))
fatal_error($txt['downloads_error_no_cat']);

$context['downloads_boards'] = array('');
$request = db_query("
SELECT
b.ID_BOARD, b.name AS bName, c.name AS cName
FROM {$db_prefix}boards AS b, {$db_prefix}categories AS c
WHERE b.ID_CAT = c.ID_CAT ORDER BY c.catOrder, b.boardOrder", __FILE__, __LINE__);
while ($row = mysql_fetch_assoc($request))
$context['downloads_boards'][$row['ID_BOARD']] = $row['cName'] . ' - ' . $row['bName'];
mysql_free_result($request);

$dbresult = db_query("
SELECT
ID_CAT, title,roworder
FROM {$db_prefix}down_cat
ORDER BY roworder ASC", __FILE__, __LINE__);
$context['downloads_cat'] = array();
while($row = mysql_fetch_assoc($dbresult))
{
$context['downloads_cat'][] = array(
'ID_CAT' => $row['ID_CAT'],
'title' => $row['title'],
'roworder' => $row['roworder'],
);
}
mysql_free_result($dbresult);



$dbresult = db_query("
SELECT
ID_CAT, title, image, filename, description,ID_BOARD,
ID_PARENT,disablerating, redirect, showpostlink, locktopic, sortby, orderby
FROM {$db_prefix}down_cat
WHERE ID_CAT = $cat LIMIT 1", __FILE__, __LINE__);

$row = mysql_fetch_assoc($dbresult);
$context['down_catinfo'] = array(
'ID_CAT' => $row['ID_CAT'],
'title' => $row['title'],
'image' => $row['image'],
'filename' => $row['filename'],
'description' => $row['description'],
'ID_BOARD' => $row['ID_BOARD'],
'ID_PARENT' => $row['ID_PARENT'],
'disablerating' => $row['disablerating'],
'redirect' => $row['redirect'],
'showpostlink' => $row['showpostlink'],
'locktopic' => $row['locktopic'],
'sortby' => $row['sortby'],
'orderby' => $row['orderby'],
);
mysql_free_result($dbresult);


// Get all the custom fields
$dbresult = db_query("
SELECT
title, defaultvalue, is_required, ID_CUSTOM
FROM {$db_prefix}down_custom_field
WHERE ID_CAT = " . $context['down_catinfo']['ID_CAT'] . "
ORDER BY roworder desc", __FILE__, __LINE__);
$context['down_custom'] = array();
while($row = mysql_fetch_assoc($dbresult))
{
$context['down_custom'][] = array(
'title' => $row['title'],
'ID_CUSTOM' => $row['ID_CUSTOM'],
'defaultvalue' => $row['defaultvalue'],
'is_required' => $row['is_required'],

);
}
mysql_free_result($dbresult);


$context['catid'] = $cat;

// Set the page title
$context['page_title'] = $mbname . ' - ' . $txt['downloads_text_title'] . ' - ' . $txt['downloads_text_editcategory'];
// Load the edit category subtemplate
$context['sub_template'] = 'edit_category';

// Check if spellchecking is both enabled and actually working.
$context['show_spellchecking'] = !empty($modSettings['enableSpellChecking']) && function_exists('pspell_new');

}
function EditCategory2()
{
global $db_prefix, $txt, $scripturl, $modSettings, $boarddir, $sourcedir;

isAllowedTo('downloads_manage');

if (empty($modSettings['down_path']))
{
$modSettings['down_path'] = $boarddir . '/downloads/';
}

// Clean the input
$title = htmlspecialchars($_REQUEST['title'], ENT_QUOTES);
$description = htmlspecialchars($_REQUEST['description'], ENT_QUOTES);
$catid = (int) $_REQUEST['catid'];
$image = htmlspecialchars($_REQUEST['image'], ENT_QUOTES);
$parent = (int) $_REQUEST['parent'];

$boardselect = (int) $_REQUEST['boardselect'];

$locktopic = isset($_REQUEST['locktopic']) ? 1 : 0;
$disablerating = isset($_REQUEST['disablerating']) ? 1 : 0;


// The category field requires a title
if (empty($title))
fatal_error($txt['downloads_error_cat_title'],false);

$sortby = '';
$orderby = '';
if (isset($_REQUEST['sortby']))
{
switch ($_REQUEST['sortby'])
{
case 'date':
$sortby = 'p.ID_FILE';

break;
case 'title':
$sortby = 'p.title';
break;

case 'mostview':
$sortby = 'p.views';
break;

case 'mostcom':
$sortby = 'p.commenttotal';
break;

case 'mostrated':
$sortby = 'p.totalratings';
break;

case 'mostdowns':
$sortby = 'p.totaldownloads';
break;
case 'filesize':
$sortby = 'p.filesize';
break;
case 'membername':
$sortby = 'm.realname';
break;

default:
$sortby = 'p.ID_FILE';
break;
}

}
else
{
$sortby = 'p.ID_FILE';
}


if (isset($_REQUEST['orderby']))
{
switch ($_REQUEST['orderby'])
{
case 'asc':
$orderby = 'ASC';

break;
case 'desc':
$orderby = 'DESC';
break;

default:
$orderby = 'DESC';
break;
}
}
else
{
$orderby = 'DESC';
}

// Update the category
db_query("UPDATE {$db_prefix}down_cat
SET title = '$title', image = '$image', description = '$description', ID_BOARD = $boardselect,
ID_PARENT = $parent, disablerating = $disablerating, locktopic = $locktopic,
orderby = '$orderby', sortby = '$sortby'
WHERE ID_CAT = $catid LIMIT 1", __FILE__, __LINE__);


$testGD = get_extension_funcs('gd');
$gd2 = in_array('imagecreatetruecolor', $testGD) && function_exists('imagecreatetruecolor');
unset($testGD);

// Upload Category image File
if (isset($_FILES['picture']['name']) && $_FILES['picture']['name'] != '')
{

$sizes = @getimagesize($_FILES['picture']['tmp_name']);

// No size, then it's probably not a valid pic.
if ($sizes === false)
fatal_error($txt['downloads_error_invalid_picture'],false);

require_once($sourcedir . '/Subs-Graphics.php');

if ((!empty($modSettings['down_set_cat_width']) && $sizes[0] > $modSettings['down_set_cat_width']) || (!empty($modSettings['down_set_cat_height']) && $sizes[1] > $modSettings['down_set_cat_height']))
{

// Delete the temp file
@unlink($_FILES['picture']['tmp_name']);
fatal_error($txt['downloads_error_img_size_height'] . $sizes[1] . $txt['downloads_error_img_size_width'] . $sizes[0],false);

}
// Move the file
$extension = substr(strrchr($_FILES['picture']['name'], '.'), 1);
$filename = $catid . '.' . $extension;

move_uploaded_file($_FILES['picture']['tmp_name'], $modSettings['down_path'] . 'catimgs/' . $filename);
@chmod($modSettings['down_path'] . 'catimgs/' . $filename, 0644);


// Update the filename for the category
db_query("UPDATE {$db_prefix}down_cat
SET filename = '$filename' WHERE ID_CAT = $catid LIMIT 1", __FILE__, __LINE__);


}


redirectexit('action=downloads;sa=admincat');

}
function DeleteCategory()
{
global $context, $mbname, $txt,$db_prefix;
isAllowedTo('downloads_manage');

adminIndex('downloads_settings');

$catid = (int) $_REQUEST['cat'];

if (empty($catid))
fatal_error($txt['downloads_error_no_cat']);

$context['catid'] = $catid;


// Lookup the category to get its name
$dbresult = db_query("
SELECT
ID_CAT, title
FROM {$db_prefix}down_cat
WHERE ID_CAT = $catid", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
$context['cat_title'] = $row['title'];
mysql_free_result($dbresult);

// Get total files in the category
$dbresult2 = db_query("
SELECT
COUNT(*) as totalfiles
FROM {$db_prefix}down_file
WHERE ID_CAT = $catid AND approved = 1", __FILE__, __LINE__);
$row2 = mysql_fetch_assoc($dbresult2);
$context['totalfiles'] = $row2['totalfiles'];
mysql_free_result($dbresult2);


$context['page_title'] = $mbname . ' - ' . $txt['downloads_text_title'] . ' - ' . $txt['downloads_text_delcategory'];

$context['sub_template'] = 'delete_category';
}
function DeleteCategory2()
{
global $db_prefix, $modSettings, $boarddir,$scripturl;
isAllowedTo('downloads_manage');

if (empty($modSettings['down_path']))
{
$modSettings['down_path'] = $boarddir . '/downloads/';
}

$catid = (int) $_REQUEST['catid'];
// Increase the max time just in case it takes a long to delete the category and files.
@ini_set('max_execution_time', '300');
$dbresult = db_query("
SELECT
ID_FILE, filename
FROM {$db_prefix}down_file
WHERE ID_CAT = $catid", __FILE__, __LINE__);

while($row = mysql_fetch_assoc($dbresult))
{
// Delete Files
// Delete the download
@unlink($modSettings['down_path'] . $row['filename']);


db_query("DELETE FROM {$db_prefix}down_comment WHERE ID_FILE = " . $row['ID_FILE'], __FILE__, __LINE__);
db_query("DELETE FROM {$db_prefix}down_rating WHERE ID_FILE = " . $row['ID_FILE'], __FILE__, __LINE__);
db_query("DELETE FROM {$db_prefix}down_report WHERE ID_FILE = " . $row['ID_FILE'], __FILE__, __LINE__);
db_query("DELETE FROM {$db_prefix}down_creport WHERE ID_FILE = " . $row['ID_FILE'], __FILE__, __LINE__);
}
mysql_free_result($dbresult);
// Update Category parent
db_query("UPDATE {$db_prefix}down_cat SET ID_PARENT = 0 WHERE ID_PARENT = $catid", __FILE__, __LINE__);


// Delete All Files
db_query("DELETE FROM {$db_prefix}down_file WHERE ID_CAT = $catid", __FILE__, __LINE__);

// Finally delete the category
db_query("DELETE FROM {$db_prefix}down_cat WHERE ID_CAT = $catid LIMIT 1", __FILE__, __LINE__);

// Last Recount the totals
RecountFileQuotaTotals(false);

redirectexit('action=downloads;sa=admincat');
}
function ViewDownload()
{
global $context, $mbname, $db_prefix, $modSettings, $user_info, $scripturl, $txt, $ID_MEMBER;

isAllowedTo('downloads_view');

// Get the file id
$id = (int) $_REQUEST['id'];
if (empty($id))
fatal_error($txt['downloads_error_no_file_selected']);

$dbresult = db_query("
SELECT
ID_FILE, ID_CAT
FROM {$db_prefix}down_file
WHERE ID_FILE = $id LIMIT 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
mysql_free_result($dbresult);

// Get the download information
$dbresult = db_query("
SELECT
p.ID_FILE, p.totalratings, p.rating, p.allowcomments, p.ID_CAT, p.keywords,
p.commenttotal, p.filesize, p.filename, p.orginalfilename, p.fileurl,
p.approved, p.views, p.title, p.ID_MEMBER, m.realName, p.date, p.description,
c.title CAT_TITLE, c.disablerating, p.credits, p.totaldownloads, p.lastdownload
FROM ({$db_prefix}down_file as p, {$db_prefix}down_cat AS c)
LEFT JOIN {$db_prefix}members AS m ON (p.ID_MEMBER = m.ID_MEMBER)
WHERE p.ID_FILE = $id AND p.ID_CAT = c.ID_CAT LIMIT 1", __FILE__, __LINE__);


// Check if download exists
if (db_affected_rows()== 0)
fatal_error($txt['downloads_error_no_downloadexist'],false);


$row = mysql_fetch_assoc($dbresult);

// Check if they can view the download
GetCatPermission($row['ID_CAT'],'view');


// Checked if they are allowed to view an unapproved download.
if ($row['approved'] == 0 && $ID_MEMBER != $row['ID_MEMBER'])
{
if (!allowedTo('downloads_manage'))
fatal_error($txt['downloads_error_file_notapproved'],false);
}


// Download information
$context['downloads_file'] = array(
'ID_FILE' => $row['ID_FILE'],
'ID_MEMBER' => $row['ID_MEMBER'],
'commenttotal' => $row['commenttotal'],
'views' => $row['views'],
'title' => $row['title'],
'description' => $row['description'],
'filesize' => round($row['filesize'] / 1024, 2),
'filename' => $row['filename'],
'allowcomments' => $row['allowcomments'],
'ID_CAT' => $row['ID_CAT'],
'date' => timeformat($row['date']),
'keywords' => $row['keywords'],
'realName' => $row['realName'],
'totalratings' => $row['totalratings'],
'rating' => $row['rating'],
'CAT_TITLE' => $row['CAT_TITLE'],
'disablerating' => @$row['disablerating'],
'credits' => $row['credits'],
'orginalfilename' => $row['orginalfilename'],
'totaldownloads' => $row['totaldownloads'],
'lastdownload' => $row['lastdownload'],
'fileurl' => $row['fileurl'],


);
mysql_free_result($dbresult);



// Show Custom Fields
$result = db_query("
SELECT
f.title, d.value
FROM ({$db_prefix}down_custom_field as f,{$db_prefix}down_custom_field_data as d)
WHERE d.ID_CUSTOM = f.ID_CUSTOM AND d.ID_FILE = " . $context['downloads_file']['ID_FILE'] . "
ORDER BY f.roworder desc", __FILE__, __LINE__);
$context['downloads_custom'] = array();
while ($row = mysql_fetch_assoc($result))
{
$context['downloads_custom'][] = array(
'value' => $row['value'],
'title' => $row['title'],
);
}
mysql_free_result($result);

if (!empty($modSettings['down_set_commentsnewest']))
$commentorder = 'DESC';
else
$commentorder = 'ASC';
// Display all user comments
$dbresult = db_query("
SELECT
c.ID_FILE, c.ID_COMMENT, c.date, c.comment, c.ID_MEMBER,
c.lastmodified,c.modified_ID_MEMBER, m.posts, m.realName, c.approved, md.realName modmember
FROM {$db_prefix}down_comment as c
LEFT JOIN {$db_prefix}members AS m ON (c.ID_MEMBER = m.ID_MEMBER)
LEFT JOIN {$db_prefix}members AS md ON (c.modified_ID_MEMBER = md.ID_MEMBER)
WHERE c.ID_FILE = " . $context['downloads_file']['ID_FILE'] . " AND c.approved = 1
ORDER BY c.ID_COMMENT $commentorder", __FILE__, __LINE__);

$context['comment_count'] = db_affected_rows();
$context['downloads_comments'] = array();
while ($row = mysql_fetch_assoc($dbresult))
{
$context['downloads_comments'][] = array(
'ID_FILE' => $row['ID_FILE'],
'ID_COMMENT' => $row['ID_COMMENT'],
'date' => $row['date'],
'comment' => $row['comment'],
'ID_MEMBER' => $row['ID_MEMBER'],
'lastmodified' => $row['lastmodified'],
'modified_ID_MEMBER' => $row['modified_ID_MEMBER'],
'posts' => $row['posts'],
'realName' => $row['realName'],
'approved' => $row['approved'],
'modmember' => $row['modmember'],
);
}
mysql_free_result($dbresult);

// Check if spellchecking is both enabled and actually working.
$context['show_spellchecking'] = !empty($modSettings['enableSpellChecking']) && function_exists('pspell_new');


// Update the number of views.
$dbresult = db_query("UPDATE {$db_prefix}down_file
SET views = views + 1 WHERE ID_FILE = $id LIMIT 1", __FILE__, __LINE__);


$context['sub_template'] = 'view_download';

$context['page_title'] = $mbname . ' - ' . $context['downloads_file']['title'];

if (!empty($modSettings['down_who_viewing']))
{
$context['can_moderate_forum'] = allowedTo('moderate_forum');

// SMF 1.1
// Taken from Display.php
// Start out with no one at all viewing it.
$context['view_members'] = array();
$context['view_members_list'] = array();
$context['view_num_hidden'] = 0;

// Search for members who have this download id set in their GET data.
$request = db_query("
SELECT
lo.ID_MEMBER, lo.logTime, mem.realName, mem.memberName, mem.showOnline,
mg.onlineColor, mg.ID_GROUP, mg.groupName
FROM {$db_prefix}log_online AS lo
LEFT JOIN {$db_prefix}members AS mem ON (mem.ID_MEMBER = lo.ID_MEMBER)
LEFT JOIN {$db_prefix}membergroups AS mg ON (mg.ID_GROUP = IF(mem.ID_GROUP = 0, mem.ID_POST_GROUP, mem.ID_GROUP))
WHERE INSTR(lo.url, 's:7:\"downloads\";s:2:\"sa\";s:4:\"view\";s:2:\"id\";i:$id;') OR lo.session = '" . ($user_info['is_guest'] ? 'ip' . $user_info['ip'] : session_id()) . "'", __FILE__, __LINE__);
while ($row = mysql_fetch_assoc($request))
{
if (empty($row['ID_MEMBER']))
continue;

if (!empty($row['onlineColor']))
$link = '<a href="' . $scripturl . '?action=profile;u=' . $row['ID_MEMBER'] . '" style="color: ' . $row['onlineColor'] . ';">' . $row['realName'] . '</a>';
else
$link = '<a href="' . $scripturl . '?action=profile;u=' . $row['ID_MEMBER'] . '">' . $row['realName'] . '</a>';

$is_buddy = in_array($row['ID_MEMBER'], $user_info['buddies']);
if ($is_buddy)
$link = '<b>' . $link . '</b>';

// Add them both to the list and to the more detailed list.
if (!empty($row['showOnline']) || allowedTo('moderate_forum'))
$context['view_members_list'][$row['logTime'] . $row['memberName']] = empty($row['showOnline']) ? '<i>' . $link . '</i>' : $link;
$context['view_members'][$row['logTime'] . $row['memberName']] = array(
'id' => $row['ID_MEMBER'],
'username' => $row['memberName'],
'name' => $row['realName'],
'group' => $row['ID_GROUP'],
'href' => $scripturl . '?action=profile;u=' . $row['ID_MEMBER'],
'link' => $link,
'is_buddy' => $is_buddy,
'hidden' => empty($row['showOnline']),
);

if (empty($row['showOnline']))
$context['view_num_hidden']++;
}

// The number of guests is equal to the rows minus the ones we actually used .
$context['view_num_guests'] = mysql_num_rows($request) - count($context['view_members']);
mysql_free_result($request);

// Sort the list.
krsort($context['view_members']);
krsort($context['view_members_list']);


}
}
function AddDownload()
{
global $context, $mbname, $txt, $modSettings, $db_prefix, $ID_MEMBER, $user_info;

isAllowedTo('downloads_add');

if (isset($_REQUEST['cat']))
$cat = (int) $_REQUEST['cat'];
else
$cat = 0;

$context['down_cat'] = $cat;

GetCatPermission($cat,'addfile');

if ($context['user']['is_guest'])
$groupid = -1;
else
$groupid = $user_info['groups'][0];


$dbresult = db_query("
SELECT
c.ID_CAT, c.title, p.view, p.addfile
FROM {$db_prefix}down_cat AS c
LEFT JOIN {$db_prefix}down_catperm AS p ON (p.ID_GROUP = $groupid AND c.ID_CAT = p.ID_CAT)
WHERE c.redirect = 0 ORDER BY c.roworder ASC", __FILE__, __LINE__);
if (mysql_num_rows($dbresult) == 0)
fatal_error($txt['downloads_error_no_catexists'] , false);

$context['downloads_cat'] = array();
while($row = mysql_fetch_assoc($dbresult))
{
// Check if they have permission to add to this category.
if ($row['view'] == '0' || $row['addfile'] == '0' )
continue;

$context['downloads_cat'][] = array(
'ID_CAT' => $row['ID_CAT'],
'title' => $row['title'],
);
}
mysql_free_result($dbresult);

$result = db_query("
SELECT
title, defaultvalue, is_required, ID_CUSTOM
FROM {$db_prefix}down_custom_field
WHERE ID_CAT = " . $cat, __FILE__, __LINE__);
$context['downloads_custom'] = array();
while ($row = mysql_fetch_assoc($result))
{
$context['downloads_custom'][] = array(
'ID_CUSTOM' => $row['ID_CUSTOM'],
'title' => $row['title'],
'defaultvalue' => $row['defaultvalue'],
'is_required' => $row['is_required'],
);
}
mysql_free_result($result);

// Get Quota Limits to Display
$context['quotalimit'] = GetQuotaGroupLimit($ID_MEMBER);
$context['userspace'] = GetUserSpaceUsed($ID_MEMBER);

$context['sub_template'] = 'add_download';

$context['page_title'] = $mbname . ' - ' . $txt['downloads_text_title'] . ' - ' . $txt['downloads_form_adddownload'];

// Check if spellchecking is both enabled and actually working.
$context['show_spellchecking'] = !empty($modSettings['enableSpellChecking']) && function_exists('pspell_new');

}
function AddDownload2()
{
global $ID_MEMBER, $txt, $db_prefix, $scripturl, $modSettings, $boarddir, $sourcedir, $gd2, $user_info, $boardurl;

isAllowedTo('downloads_add');

if (empty($modSettings['down_path']))
{
$modSettings['down_path'] = $boarddir . '/downloads/';
}
// Check if downloads path is writable
if (!is_writable($modSettings['down_path']))
fatal_error($txt['downloads_write_error'] . $modSettings['down_path']);


$title = htmlspecialchars($_REQUEST['title'],ENT_QUOTES);
$description = htmlspecialchars($_REQUEST['description'],ENT_QUOTES);
$keywords = htmlspecialchars($_REQUEST['keywords'],ENT_QUOTES);
$cat = (int) $_REQUEST['cat'];
$fileurl = htmlspecialchars($_REQUEST['fileurl'],ENT_QUOTES);
$allowcomments = isset($_REQUEST['allowcomments']) ? 1 : 0;
$sendemail = isset($_REQUEST['sendemail']) ? 1 : 0;
$filesize = 0;

GetCatPermission($cat,'addfile');


// Check if downloads are auto approved
$approved = (allowedTo('downloads_autoapprove') ? 1 : 0);

// Allow comments on file if no setting set.
if (empty($modSettings['down_commentchoice']))
$allowcomments = 1;


if ($title == '')
fatal_error($txt['downloads_error_no_title'],false);
if ($cat == '')
fatal_error($txt['downloads_error_no_cat'],false);

if ($modSettings['down_set_enable_multifolder'])
CreateDownloadFolder();



$result = db_query("
SELECT
f.title, f.is_required, f.ID_CUSTOM
FROM {$db_prefix}down_custom_field as f
WHERE f.is_required = 1 AND f.ID_CAT = " . $cat, __FILE__, __LINE__);
while ($row2 = mysql_fetch_assoc($result))
{
if (!isset($_REQUEST['cus_' . $row2['ID_CUSTOM']]))
{
fatal_error($txt['downloads_err_req_custom_field'] . $row2['title'], false);
}
else
{
if ($_REQUEST['cus_' . $row2['ID_CUSTOM']] == '')
fatal_error($txt['downloads_err_req_custom_field'] . $row2['title'], false);
}
}
mysql_free_result($result);


// Get category infomation
$dbresult = db_query("
SELECT
ID_BOARD,locktopic
FROM {$db_prefix}down_cat
WHERE ID_CAT = $cat", __FILE__, __LINE__);
$rowcat = mysql_fetch_assoc($dbresult);
mysql_free_result($dbresult);


// Process Uploaded file
if (isset($_FILES['download']['name']) && $_FILES['download']['name'] != '')
{
// Store the orginal filename
$orginalfilename = $_FILES['download']['name'];

// Get the filesize
$filesize = $_FILES['download']['size'];


if (!empty($modSettings['down_max_filesize']) && $filesize > $modSettings['down_max_filesize'])
{
// Delete the temp file
@unlink($_FILES['download']['tmp_name']);
fatal_error($txt['downloads_error_img_filesize'] . round($modSettings['down_max_filesize'] / 1024, 2) . 'kb',false);
}


// Check Quota
$quotalimit = GetQuotaGroupLimit($ID_MEMBER);
$userspace = GetUserSpaceUsed($ID_MEMBER);
// Check if exceeds quota limit or if there is a quota
if ($quotalimit != 0 && ($userspace + $filesize) > $quotalimit)
{
@unlink($_FILES['download']['tmp_name']);
fatal_error($txt['downloads_error_space_limit'] . round($userspace / 1024, 2) . 'kb / ' . round($quotalimit / 1024, 2) . 'kb',false);
}

// Filename Member Id + Day + Month + Year + 24 hour, Minute Seconds
//$extension = substr(strrchr($_FILES['download']['name'], '.'), 1);
$filename = $ID_MEMBER . '_' . date('d_m_y_g_i_s'); //. '.' . $extension;

$extrafolder = '';

if ($modSettings['down_set_enable_multifolder'])
{
$extrafolder = $modSettings['down_folder_id'] . '/';
}

move_uploaded_file($_FILES['download']['tmp_name'], $modSettings['down_path'] . $extrafolder . $filename);
@chmod($modSettings['down_path'] . $extrafolder . $filename, 0644);


// Create the Database entry
$t = time();
$file_id = 0;

db_query("INSERT INTO {$db_prefix}down_file
(ID_CAT, filesize,filename, orginalfilename, keywords, title, description,ID_MEMBER,date,approved,allowcomments,sendemail)
VALUES ($cat, $filesize, '" . $extrafolder . $filename . "', '$orginalfilename', '$keywords','$title', '$description',$ID_MEMBER,$t,$approved, $allowcomments,$sendemail)", __FILE__, __LINE__);

$file_id = db_insert_id();

// If we are using multifolders get the next folder id
if ($modSettings['down_set_enable_multifolder'])
ComputeNextFolderID($file_id);

}
else
{

// Check if they entered a fileurl
if (empty($fileurl))
fatal_error($txt['downloads_error_no_download']);
else
{

// Process the fileurl specific settings
// Create the Database entry
$t = time();
$file_id = 0;

db_query("INSERT INTO {$db_prefix}down_file
(ID_CAT, fileurl, keywords, title, description,ID_MEMBER,date,approved,allowcomments,sendemail)
VALUES ($cat, '$fileurl', '$keywords', '$title', '$description',$ID_MEMBER,$t,$approved, $allowcomments,$sendemail)", __FILE__, __LINE__);

$file_id = db_insert_id();

}

}

// Check for any custom fields
$result = db_query("
SELECT
f.title, f.is_required, f.ID_CUSTOM
FROM {$db_prefix}down_custom_field as f
WHERE f.ID_CAT = " . $cat, __FILE__, __LINE__);
while ($row2 = mysql_fetch_assoc($result))
{
if (isset($_REQUEST['cus_' . $row2['ID_CUSTOM']]))
{

$custom_data = htmlspecialchars($_REQUEST['cus_' . $row2['ID_CUSTOM']],ENT_QUOTES);

db_query("INSERT INTO {$db_prefix}down_custom_field_data
(ID_FILE, ID_CUSTOM, value)
VALUES('$file_id', " . $row2['ID_CUSTOM'] . ", '$custom_data')", __FILE__, __LINE__);
}
}
mysql_free_result($result);



if ($filesize != 0)
UpdateUserFileSizeTable($ID_MEMBER,$filesize);

if ($rowcat['ID_BOARD'] != 0 && $approved == 1)
{
if (empty($modSettings['down_url']))
{
$modSettings['down_url'] = $boardurl . '/downloads/';
}

// Create the post
require_once($sourcedir . '/Subs-Post.php');


$showpostlink = '\n\n' . $scripturl . '?action=downloads;sa=view;id=' . $file_id;


$msgOptions = array(
'id' => 0,
'subject' => $title,
'body' => '' . $title . "\n\n$showpostlink",
'icon' => 'xx',
'smileys_enabled' => 1,
'attachments' => array(),
);
$topicOptions = array(
'id' => 0,
'board' => $rowcat['ID_BOARD'],
'poll' => null,
'lock_mode' => $rowcat['locktopic'],
'sticky_mode' => null,
'mark_as_read' => true,
);
$posterOptions = array(
'id' => $ID_MEMBER,
'update_post_count' => !$user_info['is_guest'] && !isset($_REQUEST['msg']),
);
preparsecode($msgOptions['body']);


createPost($msgOptions, $topicOptions, $posterOptions);

}


UpdateCategoryTotals($cat);

// Update the SMF Shop Points
if (isset($modSettings['shopVersion']))
db_query("UPDATE {$db_prefix}members
SET money = money + " . $modSettings['down_shop_fileadd'] . "
WHERE ID_MEMBER = {$ID_MEMBER}
LIMIT 1", __FILE__, __LINE__);



// Redirect to the users files page.
if ($ID_MEMBER != 0)
redirectexit('action=downloads;sa=myfiles;u=' . $ID_MEMBER);
else
redirectexit('action=downloads;cat=' . $cat);

}
function EditDownload()
{
global $context, $mbname, $txt, $ID_MEMBER, $db_prefix, $modSettings, $user_info;

is_not_guest();

$id = (int) $_REQUEST['id'];
if (empty($id))
fatal_error($txt['downloads_error_no_file_selected']);

if ($context['user']['is_guest'])
$groupid = -1;
else
$groupid = $user_info['groups'][0];


// Check if the user owns the file or is admin
$dbresult = db_query("
SELECT
p.ID_FILE, p.allowcomments, p.ID_CAT, p.keywords, p.commenttotal, p.filesize,
p.filename, p.approved, p.views, p.title, p.ID_MEMBER,
m.realName, p.date, p.description, p.sendemail, p.fileurl,p.orginalfilename
FROM {$db_prefix}down_file as p
LEFT JOIN {$db_prefix}members AS m ON (m.ID_MEMBER = p.ID_MEMBER)
WHERE p.ID_FILE = $id LIMIT 1", __FILE__, __LINE__);
if (db_affected_rows()== 0)
fatal_error($txt['downloads_error_no_downloadexist'],false);
$row = mysql_fetch_assoc($dbresult);


// Check the category permission
GetCatPermission($row['ID_CAT'],'editfile');

// Download information
$context['downloads_file'] = array(
'ID_FILE' => $row['ID_FILE'],
'ID_MEMBER' => $row['ID_MEMBER'],
'commenttotal' => $row['commenttotal'],
'views' => $row['views'],
'title' => $row['title'],
'description' => $row['description'],
'filesize' => round($row['filesize'] / 1024, 2),
'filename' => $row['filename'],
'fileurl' => $row['fileurl'],
'allowcomments' => $row['allowcomments'],
'ID_CAT' => $row['ID_CAT'],
'date' => timeformat($row['date']),
'keywords' => $row['keywords'],
'realName' => $row['realName'],
'sendemail' => $row['sendemail'],
'orginalfilename' => $row['orginalfilename'],
);
mysql_free_result($dbresult);


// Custom Fields
$result = db_query("
SELECT
f.title, f.is_required, f.ID_CUSTOM, d.value
FROM {$db_prefix}down_custom_field as f
LEFT JOIN {$db_prefix}down_custom_field_data as d ON (d.ID_CUSTOM = f.ID_CUSTOM)
WHERE ID_FILE = " . $context['downloads_file']['ID_FILE'] . " AND ID_CAT = " . $context['downloads_file']['ID_CAT'], __FILE__, __LINE__);
$context['downloads_custom'] = array();
while ($row = mysql_fetch_assoc($result))
{
$context['downloads_custom'][] = array(
'ID_CUSTOM' => $row['ID_CUSTOM'],
'title' => $row['title'],
'is_required' => $row['is_required'],
'value' => $row['value'],

);
}
mysql_free_result($result);


if (allowedTo('downloads_manage') || (allowedTo('downloads_edit') && $ID_MEMBER == $context['downloads_file']['ID_MEMBER']))
{
// Get the category information

$dbresult = db_query("
SELECT
c.ID_CAT, c.title, p.view, p.addfile
FROM {$db_prefix}down_cat AS c
LEFT JOIN {$db_prefix}down_catperm AS p ON (p.ID_GROUP = $groupid AND c.ID_CAT = p.ID_CAT)
WHERE c.redirect = 0 ORDER BY c.roworder ASC", __FILE__, __LINE__);
$context['downloads_cat'] = array();
while($row = mysql_fetch_assoc($dbresult))
{
// Check if they have permission to add to this category.
if ($row['view'] == '0' || $row['addfile'] == '0' )
continue;

$context['downloads_cat'][] = array(
'ID_CAT' => $row['ID_CAT'],
'title' => $row['title'],
);
}
mysql_free_result($dbresult);



// Get Quota Limits to Display
$context['quotalimit'] = GetQuotaGroupLimit($ID_MEMBER);
$context['userspace'] = GetUserSpaceUsed($ID_MEMBER);

$context['page_title'] = $mbname . ' - ' . $txt['downloads_text_title'] . ' - ' . $txt['downloads_form_editdownload'];
$context['sub_template'] = 'edit_download';

// Check if spellchecking is both enabled and actually working.
$context['show_spellchecking'] = !empty($modSettings['enableSpellChecking']) && function_exists('pspell_new');
}
else
{
fatal_error($txt['downloads_error_noedit_permission']);
}



}
function EditDownload2()
{
global $ID_MEMBER, $txt, $db_prefix, $scripturl, $modSettings, $boarddir, $sourcedir;

is_not_guest();

$id = (int) $_REQUEST['id'];
if (empty($id))
fatal_error($txt['downloads_error_no_file_selected']);

// Check the user permissions
$dbresult = db_query("
SELECT
ID_MEMBER,ID_CAT, filename,filesize
FROM {$db_prefix}down_file
WHERE ID_FILE = $id LIMIT 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
$memID = $row['ID_MEMBER'];
$oldfilesize = $row['filesize'];
$oldfilename = $row['filename'];

// Check the category permission
GetCatPermission($row['ID_CAT'],'editfile');

mysql_free_result($dbresult);
if (allowedTo('downloads_manage') || (allowedTo('downloads_edit') && $ID_MEMBER == $memID))
{

if (empty($modSettings['down_path']))
{
$modSettings['down_path'] = $boarddir . '/downloads/';
}
if (!is_writable($modSettings['down_path']))
fatal_error($txt['downloads_write_error'] . $modSettings['down_path']);


$title = htmlspecialchars($_REQUEST['title'],ENT_QUOTES);
$description = htmlspecialchars($_REQUEST['description'],ENT_QUOTES);
$keywords = htmlspecialchars($_REQUEST['keywords'],ENT_QUOTES);
$cat = (int) $_REQUEST['cat'];
$allowcomments = isset($_REQUEST['allowcomments']) ? 1 : 0;
$sendemail = isset($_REQUEST['sendemail']) ? 1 : 0;
$fileurl = htmlspecialchars($_REQUEST['fileurl'],ENT_QUOTES);
$filesize = 0;

// Check if downloads are auto approved
$approved = (allowedTo('downloads_autoapprove') ? 1 : 0);

// Allow comments on file if no setting set.
if (empty($modSettings['down_commentchoice']))
$allowcomments = 1;


if ($title == '')
fatal_error($txt['downloads_error_no_title'],false);
if ($cat == '')
fatal_error($txt['downloads_error_no_cat'],false);



// Check for any required custom fields
$result = db_query("
SELECT
f.title, f.is_required, f.ID_CUSTOM
FROM {$db_prefix}down_custom_field as f
WHERE f.is_required = 1 AND f.ID_CAT = " . $cat, __FILE__, __LINE__);
while ($row2 = mysql_fetch_assoc($result))
{
if (!isset($_REQUEST['cus_' . $row2['ID_CUSTOM']]))
{
fatal_error($txt['downloads_err_req_custom_field'] . $row2['title'], false);
}
else
{
if ($_REQUEST['cus_' . $row2['ID_CUSTOM']] == '')
fatal_error($txt['downloads_err_req_custom_field'] . $row2['title'], false);
}
}
mysql_free_result($result);

// Process Uploaded file
if (isset($_FILES['download']['name']) && $_FILES['download']['name'] != '')
{

// Store the orginal filename
$orginalfilename = $_FILES['download']['name'];

$filesize = $_FILES['download']['size'];


if (!empty($modSettings['down_max_filesize']) && $filesize > $modSettings['down_max_filesize'])
{
// Delete the temp file
@unlink($_FILES['download']['tmp_name']);
fatal_error($txt['downloads_error_img_filesize'] . round($modSettings['down_max_filesize'] / 1024, 2) . 'kb',false);
}
// Check Quota
$quotalimit = GetQuotaGroupLimit($ID_MEMBER);
$userspace = GetUserSpaceUsed($ID_MEMBER);
// Check if exceeds quota limit or if there is a quota
if ($quotalimit != 0 && ($userspace + $filesize) > $quotalimit)
{
@unlink($_FILES['download']['tmp_name']);
fatal_error($txt['downloads_error_space_limit'] . round($userspace / 1024, 2) . 'kb / ' . round($quotalimit / 1024, 2) . 'kb',false);
}

// Delete the old files
@unlink($modSettings['down_path'] . $oldfilename );

$extrafolder = '';

if ($modSettings['down_set_enable_multifolder'])
{
$extrafolder = $modSettings['down_folder_id'] . '/';
}

// Filename Member Id + Day + Month + Year + 24 hour, Minute Seconds
//$extension = substr(strrchr($_FILES['picture']['name'], '.'), 1);
$filename = $ID_MEMBER . '_' . date('d_m_y_g_i_s');
move_uploaded_file($_FILES['download']['tmp_name'], $modSettings['down_path'] . $extrafolder . $filename);
@chmod($modSettings['down_path'] . $extrafolder . $filename, 0644);


// Update the Database entry
$t = time();

db_query("UPDATE {$db_prefix}down_file
SET ID_CAT = $cat, filesize = $filesize, filename = '" . $extrafolder . $filename . "', approved = $approved,
date = $t, title = '$title', description = '$description', keywords = '$keywords',
allowcomments = $allowcomments, sendemail = $sendemail, orginalfilename = '$orginalfilename'
WHERE ID_FILE = $id LIMIT 1", __FILE__, __LINE__);

UpdateUserFileSizeTable($memID,$oldfilesize * -1);
UpdateUserFileSizeTable($memID,$filesize);


// Change the file owner if selected
if (allowedTo('downloads_manage') && isset($_REQUEST['pic_postername']))
{
$pic_postername = str_replace('"','', $_REQUEST['pic_postername']);
$pic_postername = str_replace("'",'', $pic_postername);
$pic_postername = str_replace('\\','', $pic_postername);
$pic_postername = htmlspecialchars($pic_postername, ENT_QUOTES);

$memid = 0;

$dbresult = db_query("
SELECT
realName, ID_MEMBER
FROM {$db_prefix}members
WHERE realName = '$pic_postername' OR memberName = '$pic_postername' LIMIT 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
mysql_free_result($dbresult);

if (db_affected_rows() != 0)
{
// Member found update the file owner

$memid = $row['ID_MEMBER'];
db_query("UPDATE {$db_prefix}down_file
SET ID_MEMBER = $memid WHERE ID_FILE = $id LIMIT 1", __FILE__, __LINE__);

}

}
UpdateCategoryTotalByFileID($id);
// Redirect to the users files page.
redirectexit('action=downloads;sa=myfiles;u=' . $ID_MEMBER);


}
else
{
// Update the download properties if no upload has been set

db_query("UPDATE {$db_prefix}down_file
SET ID_CAT = $cat, title = '$title', description = '$description', keywords = '$keywords',
allowcomments = $allowcomments, sendemail = $sendemail, approved = $approved,
fileurl = '$fileurl'

WHERE ID_FILE = $id LIMIT 1", __FILE__, __LINE__);
// Change the file owner if selected

if (allowedTo('downloads_manage') && isset($_REQUEST['pic_postername']))
{
$pic_postername = str_replace('"','', $_REQUEST['pic_postername']);
$pic_postername = str_replace("'",'', $pic_postername);
$pic_postername = str_replace('\\','', $pic_postername);
$pic_postername = htmlspecialchars($pic_postername, ENT_QUOTES);

$memid = 0;

$dbresult = db_query("
SELECT
realName, ID_MEMBER
FROM {$db_prefix}members
WHERE realName = '$pic_postername' OR memberName = '$pic_postername' LIMIT 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
mysql_free_result($dbresult);

if (db_affected_rows() != 0)
{
// Member found update the file owner
$memid = $row['ID_MEMBER'];
db_query("UPDATE {$db_prefix}down_file
SET ID_MEMBER = $memid WHERE ID_FILE = $id LIMIT 1", __FILE__, __LINE__);


}

}

UpdateCategoryTotalByFileID($id);

// Check for any custom fields

db_query("DELETE FROM {$db_prefix}down_custom_field_data
WHERE ID_FILE = " . $id, __FILE__, __LINE__);

$result = db_query("
SELECT
f.title, f.is_required, f.ID_CUSTOM
FROM {$db_prefix}down_custom_field as f
WHERE f.ID_CAT = " . $cat, __FILE__, __LINE__);
while ($row2 = mysql_fetch_assoc($result))
{
if (isset($_REQUEST['cus_' . $row2['ID_CUSTOM']]))
{

$custom_data = htmlspecialchars($_REQUEST['cus_' . $row2['ID_CUSTOM']],ENT_QUOTES);

db_query("INSERT INTO {$db_prefix}down_custom_field_data
(ID_FILE, ID_CUSTOM, value)
VALUES('$id', " . $row2['ID_CUSTOM'] . ", '$custom_data')", __FILE__, __LINE__);
}
}
mysql_free_result($result);


// Redirect to the users files page.
redirectexit('action=downloads;sa=myfiles;u=' . $ID_MEMBER);

}

}
else
fatal_error($txt['downloads_error_noedit_permission']);


}

function DeleteDownload()
{
global $context, $mbname, $txt, $ID_MEMBER, $db_prefix;

is_not_guest();

$id = (int) $_REQUEST['id'];
if (empty($id))
fatal_error($txt['downloads_error_no_file_selected']);

// Check if the user owns the download or is admin
$dbresult = db_query("
SELECT
p.ID_FILE, p.fileurl, p.allowcomments, p.ID_CAT, p.keywords, p.commenttotal, p.totaldownloads,
p.filesize, p.filename, p.approved, p.views, p.title, p.ID_MEMBER, p.date, m.realName, p.description
FROM {$db_prefix}down_file as p
LEFT JOIN {$db_prefix}members AS m ON (p.ID_MEMBER = m.ID_MEMBER)
WHERE ID_FILE = $id LIMIT 1", __FILE__, __LINE__);
if (db_affected_rows()== 0)
fatal_error($txt['downloads_error_no_downloadexist'],false);
$row = mysql_fetch_assoc($dbresult);
// Check the category permission
GetCatPermission($row['ID_CAT'],'delfile');
// File information
$context['downloads_file'] = array(
'ID_FILE' => $row['ID_FILE'],
'ID_MEMBER' => $row['ID_MEMBER'],
'commenttotal' => $row['commenttotal'],
'views' => $row['views'],
'title' => $row['title'],
'description' => $row['description'],
'filesize' => round($row['filesize'] / 1024, 2),
'filename' => $row['filename'],
'allowcomments' => $row['allowcomments'],
'ID_CAT' => $row['ID_CAT'],
'date' => timeformat($row['date']),
'keywords' => $row['keywords'],
'realName' => $row['realName'],
'fileurl' => $row['fileurl'],
'totaldownloads' => $row['totaldownloads'],
);
mysql_free_result($dbresult);

if (allowedTo('downloads_manage') || (allowedTo('downloads_delete') && $ID_MEMBER == $context['downloads_file']['ID_MEMBER']))
{
$context['page_title'] = $mbname . ' - ' . $txt['downloads_text_title'] . ' - ' . $txt['downloads_form_deldownload'];
$context['sub_template'] = 'delete_download';

}
else
{
fatal_error($txt['downloads_error_nodelete_permission']);
}


}
function DeleteDownload2()
{
global $context, $txt, $ID_MEMBER, $scripturl, $boarddir, $db_prefix, $modSettings;

$id = (int) $_REQUEST['id'];

if (empty($id))
fatal_error($txt['downloads_error_no_file_selected']);

// Check if the user owns the download or is admin
$dbresult = db_query("
SELECT
p.ID_FILE, p.ID_CAT, p.ID_MEMBER
FROM {$db_prefix}down_file as p
WHERE ID_FILE = $id LIMIT 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);

$memID = $row['ID_MEMBER'];

mysql_free_result($dbresult);
// Check the category permission

GetCatPermission($row['ID_CAT'],'delfile');

if (allowedTo('downloads_manage') || (allowedTo('downloads_delete') && $ID_MEMBER == $memID))
{

DeleteFileByID($id);

UpdateCategoryTotals($row['ID_CAT']);

// Redirect to the users files page.
redirectexit('action=downloads;sa=myfiles;u=' . $ID_MEMBER);
}
else
{
fatal_error($txt['downloads_error_nodelete_permission']);
}


}
function DeleteFileByID($id)
{
global $modSettings, $boarddir, $db_prefix;

$dbresult = db_query("
SELECT
p.ID_FILE, p.ID_CAT, p.filesize, p.filename, p.ID_MEMBER
FROM {$db_prefix}down_file as p
WHERE ID_FILE = $id LIMIT 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
$oldfilesize = $row['filesize'];
$memID = $row['ID_MEMBER'];
mysql_free_result($dbresult);

if (empty($modSettings['down_path']))
{
$modSettings['down_path'] = $boarddir . '/downloads/';
}

// Delete the download
if ($row['filename'] != '')
@unlink($modSettings['down_path'] . $row['filename']);


// Update the quota
$oldfilesize = $oldfilesize * -1;

if ($oldfilesize != 0)
UpdateUserFileSizeTable($memID,$oldfilesize);

UpdateCategoryTotalByFileID($id);

// Delete all the download related db entries

db_query("DELETE FROM {$db_prefix}down_comment WHERE ID_FILE = $id", __FILE__, __LINE__);
db_query("DELETE FROM {$db_prefix}down_rating WHERE ID_FILE = $id", __FILE__, __LINE__);
db_query("DELETE FROM {$db_prefix}down_report WHERE ID_FILE = $id", __FILE__, __LINE__);
db_query("DELETE FROM {$db_prefix}down_creport WHERE ID_FILE = $id", __FILE__, __LINE__);
db_query("DELETE FROM {$db_prefix}down_custom_field_data WHERE ID_FILE = $id", __FILE__, __LINE__);

// Delete the download
db_query("DELETE FROM {$db_prefix}down_file WHERE ID_FILE = $id LIMIT 1", __FILE__, __LINE__);

// Update the SMF Shop Points
if (isset($modSettings['shopVersion']))
db_query("UPDATE {$db_prefix}members
SET money = money - " . $modSettings['down_shop_fileadd'] . "
WHERE ID_MEMBER = {$memID}
LIMIT 1", __FILE__, __LINE__);

}
function ReportDownload()
{
global $context, $mbname, $txt;

isAllowedTo('downloads_report');
is_not_guest();
$id = (int) $_REQUEST['id'];
if (empty($id))
fatal_error($txt['downloads_error_no_file_selected']);


$context['downloads_file_id'] = $id;

$context['sub_template'] = 'report_download';

$context['page_title'] = $mbname . ' - ' . $txt['downloads_text_title'] . ' - ' . $txt['downloads_form_reportdownload'];

}
function ReportDownload2()
{
global $context, $scripturl, $db_prefix, $ID_MEMBER, $txt;

isAllowedTo('downloads_report');

$comment = htmlspecialchars($_REQUEST['comment'],ENT_QUOTES);
$id = (int) $_REQUEST['id'];
if (empty($id))
fatal_error($txt['downloads_error_no_file_selected']);

if ($comment == '')
fatal_error($txt['downloads_error_no_comment'],false);

$commentdate = time();

db_query("INSERT INTO {$db_prefix}down_report
(ID_MEMBER, comment, date, ID_FILE)
VALUES ($ID_MEMBER,'$comment', $commentdate,$id)", __FILE__, __LINE__);

redirectexit('action=downloads;sa=view;id=' . $id);

}
function AddComment()
{
global $context, $mbname, $txt, $modSettings, $user_info, $db_prefix, $settings;

isAllowedTo('downloads_comment');
loadlanguage('Post');

$id = (int) $_REQUEST['id'];
if (empty($id))
fatal_error($txt['downloads_error_no_file_selected']);

$context['downloads_file_id'] = $id;

// Comments allowed check
$dbresult = db_query("
SELECT
p.allowcomments, p.ID_CAT
FROM {$db_prefix}down_file as p
WHERE ID_FILE = $id LIMIT 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
$ID_CAT = $row['ID_CAT'];
mysql_free_result($dbresult);
// Checked if comments are allowed
if ($row['allowcomments'] == 0)
{
fatal_error($txt['downloads_error_not_allowcomment']);
}
GetCatPermission($ID_CAT,'addcomment');



$context['sub_template'] = 'add_comment';

$context['page_title'] = $mbname . ' - ' . $txt['downloads_text_title'] . ' - ' . $txt['downloads_text_addcomment'];

// Check if spellchecking is both enabled and actually working.
$context['show_spellchecking'] = !empty($modSettings['enableSpellChecking']) && function_exists('pspell_new');

// Initialize smiley array...
$context['smileys'] = array(
'postform' => array(),
'popup' => array(),
);


$esmile = 'embarrassed.gif';

// Load smileys - don't bother to run a query if we're not using the database's ones anyhow.
if (empty($modSettings['smiley_enable']) && $user_info['smiley_set'] != 'none')
$context['smileys']['postform'][] = array(
'smileys' => array(
array('code' => ':)', 'filename' => 'smiley.gif', 'description' => $txt[287]),
array('code' => ';)', 'filename' => 'wink.gif', 'description' => $txt[292]),
array('code' => ':D', 'filename' => 'cheesy.gif', 'description' => $txt[289]),
array('code' => ';D', 'filename' => 'grin.gif', 'description' => $txt[293]),
array('code' => '>:(', 'filename' => 'angry.gif', 'description' => $txt[288]),
array('code' => ':(', 'filename' => 'sad.gif', 'description' => $txt[291]),
array('code' => ':o', 'filename' => 'shocked.gif', 'description' => $txt[294]),
array('code' => '8)', 'filename' => 'cool.gif', 'description' => $txt[295]),
array('code' => '???', 'filename' => 'huh.gif', 'description' => $txt[296]),
array('code' => '::)', 'filename' => 'rolleyes.gif', 'description' => $txt[450]),
array('code' => ':P', 'filename' => 'tongue.gif', 'description' => $txt[451]),
array('code' => ':-[', 'filename' => $esmile, 'description' => $txt[526]),
array('code' => ':-X', 'filename' => 'lipsrsealed.gif', 'description' => $txt[527]),
array('code' => ':-\\', 'filename' => 'undecided.gif', 'description' => $txt[528]),
array('code' => ':-*', 'filename' => 'kiss.gif', 'description' => $txt[529]),
array('code' => ':\'(', 'filename' => 'cry.gif', 'description' => $txt[530])
),
'last' => true,
);
elseif ($user_info['smiley_set'] != 'none')
{
$request = db_query("
SELECT code, filename, description, smileyRow, hidden
FROM {$db_prefix}smileys
WHERE hidden IN (0, 2)
ORDER BY smileyRow, smileyOrder", __FILE__, __LINE__);
while ($row = mysql_fetch_assoc($request))
$context['smileys'][empty($row['hidden']) ? 'postform' : 'popup'][$row['smileyRow']]['smileys'][] = $row;
mysql_free_result($request);
}

// Clean house... add slashes to the code for javascript.
foreach (array_keys($context['smileys']) as $location)
{
foreach ($context['smileys'][$location] as $j => $row)
{
$n = count($context['smileys'][$location][$j]['smileys']);
for ($i = 0; $i < $n; $i++)
{
$context['smileys'][$location][$j]['smileys'][$i]['code'] = addslashes($context['smileys'][$location][$j]['smileys'][$i]['code']);
$context['smileys'][$location][$j]['smileys'][$i]['js_description'] = addslashes($context['smileys'][$location][$j]['smileys'][$i]['description']);
}

$context['smileys'][$location][$j]['smileys'][$n - 1]['last'] = true;
}
if (!empty($context['smileys'][$location]))
$context['smileys'][$location][count($context['smileys'][$location]) - 1]['last'] = true;
}
$settings['smileys_url'] = $modSettings['smileys_url'] . '/' . $user_info['smiley_set'];

// Allow for things to be overridden.
if (!isset($context['post_box_columns']))
$context['post_box_columns'] = 60;
if (!isset($context['post_box_rows']))
$context['post_box_rows'] = 12;
if (!isset($context['post_box_name']))
$context['post_box_name'] = 'comment';
if (!isset($context['post_form']))
$context['post_form'] = 'cprofile';


// Set a flag so the sub template knows what to do...
$context['show_bbc'] = !empty($modSettings['enableBBC']) && !empty($settings['show_bbc']);

// Generate a list of buttons that shouldn't be shown - this should be the fastest way to do this.
if (!empty($modSettings['disabledBBC']))
{
$disabled_tags = explode(',', $modSettings['disabledBBC']);
foreach ($disabled_tags as $tag)
$context['disabled_tags'][trim($tag)] = true;
}

}
function AddComment2()
{
global $context, $scripturl, $db_prefix, $ID_MEMBER, $txt, $sourcedir, $modSettings;

isAllowedTo('downloads_comment');

$comment = htmlspecialchars($_REQUEST['comment'],ENT_QUOTES);
$id = (int) $_REQUEST['id'];
if (empty($id))
fatal_error($txt['downloads_error_no_file_selected']);

// Check if that download allows comments.
$dbresult = db_query("
SELECT
p.allowcomments, p.ID_CAT, p.sendemail,m.emailAddress,p.ID_MEMBER,p.title
FROM {$db_prefix}down_file as p
LEFT JOIN {$db_prefix}members as m ON (p.ID_MEMBER = m.ID_MEMBER)
WHERE p.ID_FILE = $id LIMIT 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
$mem_email = $row['emailAddress'];
$title = $row['title'];
$doemail = $row['sendemail'];
$pic_memid = $row['ID_MEMBER'];

mysql_free_result($dbresult);
// Checked if comments are allowed
if ($row['allowcomments'] == 0)
fatal_error($txt['downloads_error_not_allowcomment']);

// Check if they are allowed to add comments to that category
if ($row['ID_CAT'] != 0)
GetCatPermission($row['ID_CAT'],'addcomment');

if ($comment == '')
fatal_error($txt['downloads_error_no_comment'],false);

$commentdate = time();

// Check if you have automatic approval
$approved = (allowedTo('downloads_autocomment') ? 1 : 0);

db_query("INSERT INTO {$db_prefix}down_comment
(ID_MEMBER, comment, date, ID_FILE,approved)
VALUES ($ID_MEMBER,'$comment', $commentdate,$id,$approved)", __FILE__, __LINE__);
$comment_id = db_insert_id();

// Update Comment total
db_query("UPDATE {$db_prefix}down_file
SET commenttotal = commenttotal + 1 WHERE ID_FILE = $id LIMIT 1", __FILE__, __LINE__);

// Check to send email on new comment
if ($doemail == 1 && $pic_memid != $ID_MEMBER && $pic_memid != 0)
{
require_once($sourcedir . '/Subs-Post.php');
sendmail($mem_email, str_replace("%s", $title, $txt['downloads_notify_subject']), str_replace("%s", $scripturl . '?action=downloads;sa=view;id=' . $id . '#c' . $comment_id, $txt['downloads_notify_body']));
}

// Update the SMF Shop Points
if (isset($modSettings['shopVersion']))
db_query("UPDATE {$db_prefix}members
SET money = money + " . $modSettings['down_shop_commentadd'] . "
WHERE ID_MEMBER = {$ID_MEMBER}
LIMIT 1", __FILE__, __LINE__);

redirectexit('action=downloads;sa=view;id=' . $id);

}
function EditComment()
{
global $context, $mbname, $txt, $modSettings,$user_info,$db_prefix,$settings, $ID_MEMBER;

is_not_guest();

$g_manage = allowedTo('downloads_manage');
$g_edit_comment = allowedTo('downloads_editcomment');


loadlanguage('Post');

$id = (int) $_REQUEST['id'];
if (empty($id))
fatal_error(fatal_error($txt['downloads_error_no_com_selected']));


// Check if allowed to edit the comment
$dbresult = db_query("
SELECT
ID_COMMENT,ID_FILE,ID_MEMBER,approved,comment,date,lastmodified
FROM {$db_prefix}down_comment
WHERE ID_COMMENT = $id LIMIT 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);

// Comment information
$context['downloads_comment'] = array(
'ID_COMMENT' => $row['ID_COMMENT'],
'ID_FILE' => $row['ID_FILE'],
'ID_MEMBER' => $row['ID_MEMBER'],
'approved' => $row['approved'],
'comment' => $row['comment'],
);

mysql_free_result($dbresult);



if ($g_manage || $g_edit_comment && $context['downloads_comment']['ID_MEMBER'] == $ID_MEMBER)
{
$context['sub_template'] = 'edit_comment';

$context['page_title'] = $mbname . ' - ' . $txt['downloads_text_title'] . ' - ' . $txt['downloads_text_editcomment'];

// Check if spellchecking is both enabled and actually working.
$context['show_spellchecking'] = !empty($modSettings['enableSpellChecking']) && function_exists('pspell_new');

// Initialize smiley array...
$context['smileys'] = array(
'postform' => array(),
'popup' => array(),
);


$esmile = 'embarrassed.gif';


// Load smileys - don't bother to run a query if we're not using the database's ones anyhow.
if (empty($modSettings['smiley_enable']) && $user_info['smiley_set'] != 'none')
$context['smileys']['postform'][] = array(
'smileys' => array(
array('code' => ':)', 'filename' => 'smiley.gif', 'description' => $txt[287]),
array('code' => ';)', 'filename' => 'wink.gif', 'description' => $txt[292]),
array('code' => ':D', 'filename' => 'cheesy.gif', 'description' => $txt[289]),
array('code' => ';D', 'filename' => 'grin.gif', 'description' => $txt[293]),
array('code' => '>:(', 'filename' => 'angry.gif', 'description' => $txt[288]),
array('code' => ':(', 'filename' => 'sad.gif', 'description' => $txt[291]),
array('code' => ':o', 'filename' => 'shocked.gif', 'description' => $txt[294]),
array('code' => '8)', 'filename' => 'cool.gif', 'description' => $txt[295]),
array('code' => '???', 'filename' => 'huh.gif', 'description' => $txt[296]),
array('code' => '::)', 'filename' => 'rolleyes.gif', 'description' => $txt[450]),
array('code' => ':P', 'filename' => 'tongue.gif', 'description' => $txt[451]),
array('code' => ':-[', 'filename' => $esmile, 'description' => $txt[526]),
array('code' => ':-X', 'filename' => 'lipsrsealed.gif', 'description' => $txt[527]),
array('code' => ':-\\', 'filename' => 'undecided.gif', 'description' => $txt[528]),
array('code' => ':-*', 'filename' => 'kiss.gif', 'description' => $txt[529]),
array('code' => ':\'(', 'filename' => 'cry.gif', 'description' => $txt[530])
),
'last' => true,
);
elseif ($user_info['smiley_set'] != 'none')
{
$request = db_query("
SELECT code, filename, description, smileyRow, hidden
FROM {$db_prefix}smileys
WHERE hidden IN (0, 2)
ORDER BY smileyRow, smileyOrder", __FILE__, __LINE__);
while ($row = mysql_fetch_assoc($request))
$context['smileys'][empty($row['hidden']) ? 'postform' : 'popup'][$row['smileyRow']]['smileys'][] = $row;
mysql_free_result($request);
}

// Clean house... add slashes to the code for javascript.
foreach (array_keys($context['smileys']) as $location)
{
foreach ($context['smileys'][$location] as $j => $row)
{
$n = count($context['smileys'][$location][$j]['smileys']);
for ($i = 0; $i < $n; $i++)
{
$context['smileys'][$location][$j]['smileys'][$i]['code'] = addslashes($context['smileys'][$location][$j]['smileys'][$i]['code']);
$context['smileys'][$location][$j]['smileys'][$i]['js_description'] = addslashes($context['smileys'][$location][$j]['smileys'][$i]['description']);
}

$context['smileys'][$location][$j]['smileys'][$n - 1]['last'] = true;
}
if (!empty($context['smileys'][$location]))
$context['smileys'][$location][count($context['smileys'][$location]) - 1]['last'] = true;
}
$settings['smileys_url'] = $modSettings['smileys_url'] . '/' . $user_info['smiley_set'];

// Allow for things to be overridden.
if (!isset($context['post_box_columns']))
$context['post_box_columns'] = 60;
if (!isset($context['post_box_rows']))
$context['post_box_rows'] = 12;
if (!isset($context['post_box_name']))
$context['post_box_name'] = 'comment';
if (!isset($context['post_form']))
$context['post_form'] = 'cprofile';


// Set a flag so the sub template knows what to do...
$context['show_bbc'] = !empty($modSettings['enableBBC']) && !empty($settings['show_bbc']);

// Generate a list of buttons that shouldn't be shown - this should be the fastest way to do this.
if (!empty($modSettings['disabledBBC']))
{
$disabled_tags = explode(',', $modSettings['disabledBBC']);
foreach ($disabled_tags as $tag)
$context['disabled_tags'][trim($tag)] = true;
}
}
else
fatal_error($txt['downloads_error_nocomedit_permission']);



}
function EditComment2()
{
global $context, $txt, $db_prefix, $ID_MEMBER,$scripturl;

is_not_guest();

$g_manage = allowedTo('downloads_manage');
$g_edit_comment = allowedTo('downloads_editcomment');

$id = (int) $_REQUEST['id'];
if (empty($id))
fatal_error(fatal_error($txt['downloads_error_no_com_selected']));


// Check if allowed to edit the comment
$dbresult = db_query("
SELECT
ID_MEMBER,ID_FILE
FROM {$db_prefix}down_comment
WHERE ID_COMMENT = $id LIMIT 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);

// Comment information
$context['downloads_comment'] = array(
'ID_FILE' => $row['ID_FILE'],
'ID_MEMBER' => $row['ID_MEMBER'],

);

mysql_free_result($dbresult);

if ($g_manage || $g_edit_comment && $context['downloads_comment']['ID_MEMBER'] == $ID_MEMBER)
{

$comment = htmlspecialchars($_REQUEST['comment'],ENT_QUOTES);
if ($comment == '')
fatal_error($txt['downloads_error_no_comment'],false);

$edittime = time();
// Check if you have automatic approval
$approved = (allowedTo('downloads_autocomment') ? 1 : 0);
// Update the comment
$dbresult = db_query("UPDATE {$db_prefix}down_comment
SET comment = '$comment', lastmodified = '$edittime',modified_ID_MEMBER = $ID_MEMBER, approved = $approved WHERE ID_COMMENT = $id LIMIT 1", __FILE__, __LINE__);
// Redirect to the file
redirectexit('action=downloads;sa=view;id=' . $context['downloads_comment']['ID_FILE']);
}
else
fatal_error($txt['downloads_error_nocomedit_permission']);
}

function DeleteComment()
{
global $context, $db_prefix, $txt, $scripturl, $modSettings;

is_not_guest();
isAllowedTo('downloads_manage');

$id = (int) $_REQUEST['id'];
if (isset($_REQUEST['ret']))
$ret = $_REQUEST['ret'];

if (empty($id))
fatal_error($txt['downloads_error_no_com_selected']);


// Get the file ID for redirect
$dbresult = db_query("
SELECT
ID_FILE,ID_COMMENT, ID_MEMBER
FROM {$db_prefix}down_comment
WHERE ID_COMMENT = $id LIMIT 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
$fileid = $row['ID_FILE'];
$memID = $row['ID_MEMBER'];
mysql_free_result($dbresult);

// Delete all the comment reports that comment
db_query("DELETE FROM {$db_prefix}down_creport WHERE ID_COMMENT = $id", __FILE__, __LINE__);
// Now delete the comment.
db_query("DELETE FROM {$db_prefix}down_comment WHERE ID_COMMENT = $id LIMIT 1", __FILE__, __LINE__);


// Update Comment total
$dbresult = db_query("UPDATE {$db_prefix}down_file
SET commenttotal = commenttotal - 1 WHERE ID_FILE = $fileid LIMIT 1", __FILE__, __LINE__);

// Update the SMF Shop Points
if (isset($modSettings['shopVersion']))
db_query("UPDATE {$db_prefix}members
SET money = money - " . $modSettings['down_shop_commentadd'] . "
WHERE ID_MEMBER = {$memID}
LIMIT 1", __FILE__, __LINE__);

// Redirect to the download
if (empty($ret))
redirectexit('action=downloads;sa=view;id=' . $fileid);
else
redirectexit('action=downloads;sa=commentlist');

}
function ReportComment()
{
global $context, $mbname, $txt;

isAllowedTo('downloads_report');

// Guest's can't report comments
is_not_guest();


$id = (int) $_REQUEST['id'];

if (empty($id))
fatal_error($txt['downloads_error_no_com_selected']);

$context['downloads_comment_id'] = $id;

$context['page_title'] = $mbname . ' - ' . $txt['downloads_text_title'] . ' - ' . $txt['downloads_text_reportcomment'];

$context['sub_template'] = 'report_comment';
}
function ReportComment2()
{
global $context, $scripturl, $db_prefix, $ID_MEMBER, $txt;

isAllowedTo('downloads_report');

$comment = htmlspecialchars($_REQUEST['comment'],ENT_QUOTES);
$id = (int) $_REQUEST['id'];
if (empty($id))
fatal_error($txt['downloads_error_no_com_selected']);

if (empty($comment))
fatal_error($txt['downloads_error_no_comment'],false);

$dbresult = db_query("
SELECT
ID_FILE
FROM {$db_prefix}down_comment
WHERE ID_COMMENT = $id LIMIT 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
$fileid = $row['ID_FILE'];
mysql_free_result($dbresult);


$commentdate = time();

db_query("INSERT INTO {$db_prefix}down_creport
(ID_MEMBER, comment, date, ID_COMMENT, ID_FILE)
VALUES ($ID_MEMBER,'$comment', $commentdate,$id,$fileid)", __FILE__, __LINE__);

redirectexit('action=downloads;sa=view;id=' . $fileid);



}
function ApproveComment()
{
global $scripturl, $db_prefix, $txt;
isAllowedTo('downloads_manage');


$id = (int) $_REQUEST['id'];
if (empty($id))
fatal_error($txt['downloads_error_no_com_selected']);

// Approve the comment
db_query("UPDATE {$db_prefix}down_comment
SET approved = 1 WHERE ID_COMMENT = $id LIMIT 1", __FILE__, __LINE__);

// Reditrect the comment list
redirectexit('action=downloads;sa=commentlist');
}

function CommentList()
{
global $context, $mbname, $txt, $db_prefix;
isAllowedTo('downloads_manage');
adminIndex('downloads_settings');
$context['page_title'] = $mbname . ' - ' . $txt['downloads_text_title'] . ' - ' . $txt['downloads_form_approvecomments'];
$context['sub_template'] = 'comment_list';


// Comments Waiting Approval
if (!isset($_REQUEST['pg']))
$page = 1;
else
$page = (int) $_REQUEST['pg'];


// Get Total Pages
$dbresult = db_query("
SELECT
COUNT(*) AS total
FROM {$db_prefix}down_comment
WHERE approved = 0 ORDER BY ID_COMMENT DESC", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
$total = ceil($row['total'] / 10);
mysql_free_result($dbresult);
$context['downloads_total'] = $total;

$page--;
if ($page < 0)
$page = 0;

$curpage = $page * 10;
$context['downloads_page'] = $page;

$dbresult = db_query("
SELECT
c.ID_COMMENT, c.ID_FILE, c.comment, c.date, c.ID_MEMBER, m.realName
FROM {$db_prefix}down_comment as c
LEFT JOIN {$db_prefix}members AS m ON (c.ID_MEMBER = m.ID_MEMBER)
WHERE c.approved = 0 ORDER BY c.ID_COMMENT DESC LIMIT $curpage,10", __FILE__, __LINE__);
$context['downloads_comments'] = array();
while($row = mysql_fetch_assoc($dbresult))
{
$context['downloads_comments'][] = array(
'ID_FILE' => $row['ID_FILE'],
'ID_COMMENT' => $row['ID_COMMENT'],
'ID_MEMBER' => $row['ID_MEMBER'],
'realName' => $row['realName'],
'date' => $row['date'],
'comment' => $row['comment'],

);
}

mysql_free_result($dbresult);

// Reported Comments
$dbresult = db_query("
SELECT
c.ID, c.ID_FILE, c.ID_COMMENT, c.ID_MEMBER, m.realName, c.date,c.comment,
d.comment OringalComment
FROM ({$db_prefix}down_creport as c, {$db_prefix}down_comment AS d)
LEFT JOIN {$db_prefix}members AS m on (c.ID_MEMBER = m.ID_MEMBER)
WHERE c.ID_COMMENT = d.ID_COMMENT
ORDER BY c.ID_FILE DESC", __FILE__, __LINE__);
$context['downloads_reports'] = array();
while($row = mysql_fetch_assoc($dbresult))
{
$context['downloads_reports'][] = array(
'ID' => $row['ID'],
'ID_FILE' => $row['ID_FILE'],
'ID_COMMENT' => $row['ID_COMMENT'],
'ID_MEMBER' => $row['ID_MEMBER'],
'realName' => $row['realName'],
'date' => $row['date'],
'comment' => $row['comment'],
'OringalComment' => $row['OringalComment'],

);
}

mysql_free_result($dbresult);

}

function AdminSettings()
{
global $context, $mbname, $txt;
isAllowedTo('downloads_manage');

adminIndex('downloads_settings');
$context['page_title'] = $mbname . ' - ' . $txt['downloads_text_title'] . ' - ' . $txt['downloads_text_settings'];


$context['sub_template'] = 'settings';

}
function AdminSettings2()
{
global $scripturl;

isAllowedTo('downloads_manage');

// Get the settings
$down_max_filesize = (int) $_REQUEST['down_max_filesize'];
$down_set_files_per_page = (int) $_REQUEST['down_set_files_per_page'];
$down_commentchoice = isset($_REQUEST['down_commentchoice']) ? 1 : 0;
$down_path = $_REQUEST['down_path'];
$down_url = $_REQUEST['down_url'];
$down_who_viewing = isset($_REQUEST['down_who_viewing']) ? 1 : 0;

$down_set_commentsnewest = isset($_REQUEST['down_set_commentsnewest']) ? 1 : 0;
$down_set_enable_multifolder = isset($_REQUEST['down_set_enable_multifolder']) ? 1 : 0;
$down_show_ratings = isset($_REQUEST['down_show_ratings']) ? 1 : 0;
$down_index_toprated = isset($_REQUEST['down_index_toprated']) ? 1 : 0;
$down_index_recent = isset($_REQUEST['down_index_recent']) ? 1 : 0;
$down_index_mostviewed = isset($_REQUEST['down_index_mostviewed']) ? 1 : 0;
$down_index_mostcomments = isset($_REQUEST['down_index_mostcomments']) ? 1 : 0;
$down_index_showtop = isset($_REQUEST['down_index_showtop']) ? 1 : 0;
$down_set_show_quickreply = isset($_REQUEST['down_set_show_quickreply']) ? 1 : 0;
$down_set_cat_width = (int) $_REQUEST['down_set_cat_width'];
$down_set_cat_height = (int) $_REQUEST['down_set_cat_height'];
// Category view category settings
$down_set_t_downloads = isset($_REQUEST['down_set_t_downloads']) ? 1 : 0;
$down_set_t_views = isset($_REQUEST['down_set_t_views']) ? 1 : 0;
$down_set_t_filesize = isset($_REQUEST['down_set_t_filesize']) ? 1 : 0;
$down_set_t_date = isset($_REQUEST['down_set_t_date']) ? 1 : 0;
$down_set_t_comment = isset($_REQUEST['down_set_t_comment']) ? 1 : 0;
$down_set_t_username = isset($_REQUEST['down_set_t_username']) ? 1 : 0;
$down_set_t_rating = isset($_REQUEST['down_set_t_rating']) ? 1 : 0;
$down_set_t_title = isset($_REQUEST['down_set_t_title']) ? 1 : 0;
$down_set_count_child = isset($_REQUEST['down_set_count_child']) ? 1 : 0;

// Download display settings
$down_set_file_prevnext = isset($_REQUEST['down_set_file_prevnext']) ? 1 : 0;
$down_set_file_desc = isset($_REQUEST['down_set_file_desc']) ? 1 : 0;
$down_set_file_title = isset($_REQUEST['down_set_file_title']) ? 1 : 0;
$down_set_file_views = isset($_REQUEST['down_set_file_views']) ? 1 : 0;
$down_set_file_downloads = isset($_REQUEST['down_set_file_downloads']) ? 1 : 0;
$down_set_file_lastdownload = isset($_REQUEST['down_set_file_lastdownload']) ? 1 : 0;
$down_set_file_poster = isset($_REQUEST['down_set_file_poster']) ? 1 : 0;
$down_set_file_date = isset($_REQUEST['down_set_file_date']) ? 1 : 0;
$down_set_file_showfilesize = isset($_REQUEST['down_set_file_showfilesize']) ? 1 : 0;
$down_set_file_showrating = isset($_REQUEST['down_set_file_showrating']) ? 1 : 0;
$down_set_file_keywords = isset($_REQUEST['down_set_file_keywords']) ? 1 : 0;

// Shop settings
$down_shop_fileadd = (int) $_REQUEST['down_shop_fileadd'];
$down_shop_commentadd = (int) $_REQUEST['down_shop_commentadd'];

// Download Linking codes
$down_set_showcode_directlink = isset($_REQUEST['down_set_showcode_directlink']) ? 1 : 0;
$down_set_showcode_htmllink = isset($_REQUEST['down_set_showcode_htmllink']) ? 1 : 0;

if (empty($down_set_cat_height))
$down_set_cat_height = 120;

if (empty($down_set_cat_width))
$down_set_cat_width = 120;


// Save the setting information
updateSettings(
array(
'down_max_filesize' => $down_max_filesize,
'down_path' => $down_path,
'down_url' => $down_url,
'down_commentchoice' => $down_commentchoice,
'down_who_viewing' => $down_who_viewing,
'down_set_count_child' => $down_set_count_child,
'down_show_ratings' => $down_show_ratings,
'down_index_toprated' => $down_index_toprated,
'down_index_recent' => $down_index_recent,
'down_index_mostviewed' => $down_index_mostviewed,
'down_index_mostcomments' => $down_index_mostcomments,
'down_index_showtop' => $down_index_showtop,

'down_set_files_per_page' => $down_set_files_per_page,
'down_set_commentsnewest' => $down_set_commentsnewest,
'down_set_show_quickreply' => $down_set_show_quickreply,
'down_set_enable_multifolder' => $down_set_enable_multifolder,

'down_set_cat_height' => $down_set_cat_height,
'down_set_cat_width' => $down_set_cat_width,
'down_set_t_downloads' => $down_set_t_downloads,
'down_set_t_views' => $down_set_t_views,
'down_set_t_filesize' => $down_set_t_filesize,
'down_set_t_date' => $down_set_t_date,
'down_set_t_comment' => $down_set_t_comment,
'down_set_t_username' => $down_set_t_username,
'down_set_t_rating' => $down_set_t_rating,
'down_set_t_title' => $down_set_t_title,
'down_set_file_prevnext' => $down_set_file_prevnext,
'down_set_file_desc' => $down_set_file_desc,
'down_set_file_title' => $down_set_file_title,
'down_set_file_views' => $down_set_file_views,
'down_set_file_downloads' => $down_set_file_downloads,
'down_set_file_lastdownload' => $down_set_file_lastdownload,
'down_set_file_poster' => $down_set_file_poster,
'down_set_file_date' => $down_set_file_date,
'down_set_file_showfilesize' => $down_set_file_showfilesize,
'down_set_file_showrating' => $down_set_file_showrating,
'down_set_file_keywords' => $down_set_file_keywords,
'down_shop_commentadd' => $down_shop_commentadd,
'down_shop_fileadd' => $down_shop_fileadd,
'down_set_showcode_directlink' => $down_set_showcode_directlink,
'down_set_showcode_htmllink' => $down_set_showcode_htmllink,

));

redirectexit('action=downloads;sa=adminset');

}

function CatUp()
{
global $db_prefix, $scripturl, $txt;
// Check if they are allowed to manage cats
isAllowedTo('downloads_manage');

// Get the category id
$cat = (int) $_REQUEST['cat'];

ReOrderCats($cat);

// Check if there is a category above it
// First get our row order
$dbresult1 = db_query("
SELECT
roworder,ID_PARENT
FROM {$db_prefix}down_cat
WHERE ID_CAT = $cat", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult1);
$ID_PARENT = $row['ID_PARENT'];
$oldrow = $row['roworder'];
$o = $row['roworder'];
$o--;

mysql_free_result($dbresult1);
$dbresult = db_query("
SELECT
ID_CAT, roworder
FROM {$db_prefix}down_cat
WHERE ID_PARENT = $ID_PARENT AND roworder = $o", __FILE__, __LINE__);
if (db_affected_rows()== 0)
fatal_error($txt['downloads_error_nocat_above'],false);
$row2 = mysql_fetch_assoc($dbresult);


// Swap the order Id's
db_query("UPDATE {$db_prefix}down_cat
SET roworder = $oldrow WHERE ID_CAT = " .$row2['ID_CAT'], __FILE__, __LINE__);

db_query("UPDATE {$db_prefix}down_cat
SET roworder = $o WHERE ID_CAT = $cat", __FILE__, __LINE__);


mysql_free_result($dbresult);

// Redirect to index to view cats
redirectexit('action=downloads;cat=' . $ID_PARENT);
}
function CatDown()
{
global $db_prefix, $scripturl, $txt;

// Check if they are allowed to manage cats
isAllowedTo('downloads_manage');

// Get the cat id
$cat = (int) $_REQUEST['cat'];

ReOrderCats($cat);

// Check if there is a category below it
// First get our row order
$dbresult1 = db_query("
SELECT
ID_PARENT, roworder
FROM {$db_prefix}down_cat
WHERE ID_CAT = $cat LIMIT 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult1);
$ID_PARENT = $row['ID_PARENT'];
$oldrow = $row['roworder'];
$o = $row['roworder'];
$o++;

mysql_free_result($dbresult1);
$dbresult = db_query("
SELECT
ID_CAT, roworder
FROM {$db_prefix}down_cat
WHERE ID_PARENT = $ID_PARENT AND roworder = $o", __FILE__, __LINE__);
if (db_affected_rows()== 0)
fatal_error($txt['downloads_error_nocat_below'],false);
$row2 = mysql_fetch_assoc($dbresult);


// Swap the order Id's
db_query("UPDATE {$db_prefix}down_cat
SET roworder = $oldrow WHERE ID_CAT = " .$row2['ID_CAT'], __FILE__, __LINE__);

db_query("UPDATE {$db_prefix}down_cat
SET roworder = $o WHERE ID_CAT = $cat", __FILE__, __LINE__);


mysql_free_result($dbresult);


// Redirect to index to view cats
redirectexit('action=downloads;cat=' . $ID_PARENT);
}
function MyFiles()
{
global $context, $mbname, $txt, $db_prefix, $ID_MEMBER, $modSettings;

isAllowedTo('downloads_view');


$u = (int) $_REQUEST['u'];
if (empty($u))
fatal_error($txt['downloads_error_no_user_selected']);

// Get the downloads userid
$context['downloads_userid'] = $u;

$dbresult = db_query("
SELECT
realName
FROM {$db_prefix}members
WHERE ID_MEMBER = $u LIMIT 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
$context['downloads_userdownloads_name'] = $row['realName'];
mysql_free_result($dbresult);

$context['page_title'] = $mbname . ' - ' . $txt['downloads_text_title'] . ' - ' . $context['downloads_userdownloads_name'];

$context['sub_template'] = 'myfiles';


// Get userid
$userid = $context['downloads_userid'];

if (!isset($_REQUEST['pg']))
$page = 1;
else
$page = (int) $_REQUEST['pg'];

// Get Total Pages
$extra_page = '';
if ($ID_MEMBER == $userid)
$extra_page = '';
else
$extra_page = ' AND p.approved = 1';

$dbresult = db_query("
SELECT
COUNT(*) AS total
FROM {$db_prefix}down_file as p
WHERE p.ID_MEMBER = $userid " . $extra_page, __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
$total = ceil($row['total'] / $modSettings['down_set_files_per_page']);
mysql_free_result($dbresult);
$context['downloads_total'] = $total;

$page--;
if ($page < 0)
$page = 0;

$curpage = $page * $modSettings['down_set_files_per_page'];
$context['downloads_page'] = $page;
// Check if it is the user ids downloads mainly to show unapproved downloads or not
if ($ID_MEMBER == $userid)
$dbresult = db_query("
SELECT
p.ID_FILE, p.commenttotal, p.filesize, p.approved, p.views, p.ID_MEMBER,
m.realName, p.date, p.totaldownloads, p.rating, p.totalratings, p.title
FROM {$db_prefix}down_file as p, {$db_prefix}members AS m
WHERE p.ID_MEMBER = $userid AND p.ID_MEMBER = m.ID_MEMBER
ORDER BY p.ID_FILE DESC LIMIT $curpage," . $modSettings['down_set_files_per_page'], __FILE__, __LINE__);
else
$dbresult = db_query("
SELECT
p.ID_FILE, p.commenttotal, p.filesize, p.approved, p.views,
p.ID_MEMBER, m.realName, p.date, p.totaldownloads, p.rating, p.totalratings, p.title
FROM {$db_prefix}down_file as p, {$db_prefix}members AS m
WHERE p.ID_MEMBER = $userid AND p.ID_MEMBER = m.ID_MEMBER AND p.approved = 1
ORDER BY p.ID_FILE DESC LIMIT $curpage," . $modSettings['down_set_files_per_page'], __FILE__, __LINE__);

$context['downloads_files'] = array();
while($row = mysql_fetch_assoc($dbresult))
{
$context['downloads_files'][] = array(
'ID_FILE' => $row['ID_FILE'],
'title' => $row['title'],
'totalratings' => $row['totalratings'],
'rating' => $row['rating'],
'commenttotal' => $row['commenttotal'],
'filesize' => $row['filesize'],
'views' => $row['views'],
'ID_MEMBER' => $row['ID_MEMBER'],
'realName' => $row['realName'],
'date' => $row['date'],
'totaldownloads' => $row['totaldownloads'],
'approved' => $row['approved'],

);

}
mysql_free_result($dbresult);

}
function ApproveList()
{
global $context, $mbname, $txt, $db_prefix;

isAllowedTo('downloads_manage');

$context['page_title'] = $mbname . ' - ' . $txt['downloads_text_title'] . ' - ' . $txt['downloads_form_approvedownloads'];

adminIndex('downloads_settings');

$context['sub_template'] = 'approvelist';



if (!isset($_REQUEST['pg']))
$page = 1;
else
$page = (int) $_REQUEST['pg'];


// Get Total Pages
$dbresult = db_query("
SELECT
COUNT(*) AS total
FROM {$db_prefix}down_file as p
WHERE p.approved = 0 ORDER BY ID_FILE DESC", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
$total = ceil($row['total'] / 10);
mysql_free_result($dbresult);
$context['downloads_total'] = $total;

$page--;
if ($page < 0)
$page = 0;

$curpage = $page * 10;
$context['downloads_page'] = $page;

// List all the unapproved downloads
$dbresult = db_query("
SELECT
p.ID_FILE, p.ID_CAT, p.title, p.ID_MEMBER, m.realName, p.date, p.description, c.title catname
FROM {$db_prefix}down_file AS p
LEFT JOIN {$db_prefix}members AS m ON (m.ID_MEMBER = p.ID_MEMBER)
LEFT JOIN {$db_prefix}down_cat AS c ON (c.ID_CAT = p.ID_CAT)
WHERE p.approved = 0
ORDER BY p.ID_FILE DESC LIMIT $curpage,10", __FILE__, __LINE__);
$context['downloads_file'] = array();
while($row = mysql_fetch_assoc($dbresult))
{
$context['downloads_file'][] = array(
'ID_FILE' => $row['ID_FILE'],
'ID_CAT' => $row['ID_CAT'],
'title' => $row['title'],
'ID_MEMBER' => $row['ID_MEMBER'],
'realName' => $row['realName'],
'date' => $row['date'],
'description' => $row['description'],
'catname' => $row['catname'],
);
}
mysql_free_result($dbresult);



}
function ApproveDownload()
{
global $txt;
isAllowedTo('downloads_manage');

$id = (int) $_REQUEST['id'];
if (empty($id))
fatal_error($txt['downloads_error_no_file_selected']);

// Approve the download
ApproveFileByID($id);

// Redirect to approval list
redirectexit('action=downloads;sa=approvelist');

}
function ApproveFileByID($id)
{
global $scripturl, $db_prefix, $txt, $modSettings, $boardurl, $sourcedir, $user_info;

// Look up the download and get the category
$dbresult = db_query("
SELECT
p.ID_FILE, p.ID_MEMBER, p.filename, p.title, p.description, c.ID_BOARD,
p.ID_CAT, c.locktopic
FROM {$db_prefix}down_file AS p
LEFT JOIN {$db_prefix}down_cat AS c ON (c.ID_CAT = p.ID_CAT)
WHERE p.ID_FILE = $id LIMIT 1", __FILE__, __LINE__);
$rowcat = mysql_fetch_assoc($dbresult);
mysql_free_result($dbresult);

if ($rowcat['ID_BOARD'] != 0 && $rowcat['ID_BOARD'] != '' )
{
if (empty($modSettings['down_url']))
{
$modSettings['down_url'] = $boardurl . '/downloads/';
}


$showpostlink = '\n\n' . $scripturl . '?action=downloads;sa=view;id=' . $id;


// Create the post
require_once($sourcedir . '/Subs-Post.php');
$msgOptions = array(
'id' => 0,
'subject' => $rowcat['title'],
'body' => '' . $rowcat['title'] . "\n\n$showpostlink\n\n" . $rowcat['description'],
'icon' => 'xx',
'smileys_enabled' => 1,
'attachments' => array(),
);
$topicOptions = array(
'id' => 0,
'board' => $rowcat['ID_BOARD'],
'poll' => null,
'lock_mode' => $rowcat['locktopic'],
'sticky_mode' => null,
'mark_as_read' => true,
);
$posterOptions = array(
'id' => $rowcat['ID_MEMBER'],
'update_post_count' => !$user_info['is_guest'] && !isset($_REQUEST['msg']),
);


preparsecode($msgOptions['body']);
createPost($msgOptions, $topicOptions, $posterOptions);

}


// Update the approval
db_query("UPDATE {$db_prefix}down_file SET approved = 1 WHERE ID_FILE = $id LIMIT 1", __FILE__, __LINE__);


UpdateCategoryTotals($rowcat['ID_CAT']);

}
function UnApproveDownload()
{
global $scripturl, $db_prefix, $txt;
isAllowedTo('downloads_manage');

$id = (int) $_REQUEST['id'];
if (empty($id))
fatal_error($txt['downloads_error_no_file_selected']);

UnApproveFileByID($id);

// Redirect to approval list
redirectexit('action=downloads;sa=approvelist');
}
function UnApproveFileByID($id)
{
global $db_prefix;
// Update the approval
db_query("UPDATE {$db_prefix}down_file SET approved = 0 WHERE ID_FILE = $id LIMIT 1", __FILE__, __LINE__);

UpdateCategoryTotalByFileID($id);
}
function ReportList()
{
global $context, $mbname, $txt, $db_prefix;

isAllowedTo('downloads_manage');

$context['page_title'] = $mbname . ' - ' . $txt['downloads_text_title'] . ' - ' . $txt['downloads_form_reportdownloads'];

adminIndex('downloads_settings');

$context['sub_template'] = 'reportlist';

$dbresult = db_query("
SELECT
r.ID, r.ID_FILE, r.ID_MEMBER, m.realName, r.date,r.comment
FROM {$db_prefix}down_report as r
LEFT JOIN {$db_prefix}members AS m ON (m.ID_MEMBER = r.ID_MEMBER)
ORDER BY r.ID_FILE DESC", __FILE__, __LINE__);

$context['downloads_reports'] = array();
while ($row = mysql_fetch_assoc($dbresult))
{
$context['downloads_reports'][] = array(
'ID' => $row['ID'],
'ID_FILE' => $row['ID_FILE'],
'comment' => $row['comment'],
'ID_MEMBER' => $row['ID_MEMBER'],
'realName' => $row['realName'],
'date' => $row['date'],


);
}
mysql_free_result($dbresult);

}
function DeleteReport()
{
global $scripturl, $db_prefix, $txt;
// Check the permission
isAllowedTo('downloads_manage');

$id = (int) $_REQUEST['id'];
if (empty($id))
fatal_error($txt['downloads_error_no_report_selected']);

db_query("DELETE FROM {$db_prefix}down_report WHERE ID = $id LIMIT 1", __FILE__, __LINE__);

// Redirect to redirect list
redirectexit('action=downloads;sa=reportlist');
}
function DeleteCommentReport()
{
global $scripturl, $db_prefix, $txt;
// Check the permission
isAllowedTo('downloads_manage');

$id = (int) $_REQUEST['id'];
if (empty($id))
fatal_error($txt['downloads_error_no_report_selected']);

db_query("DELETE FROM {$db_prefix}down_creport WHERE ID = $id LIMIT 1", __FILE__, __LINE__);

// Redirect to redirect list
redirectexit('action=downloads;sa=commentlist');
}
function Search()
{
global $context, $mbname, $txt, $db_prefix, $user_info;

// Is the user allowed to view the downloads?
isAllowedTo('downloads_view');


if ($context['user']['is_guest'])
$groupid = -1;
else
$groupid = $user_info['groups'][0];

$dbresult = db_query("
SELECT
c.ID_CAT, c.title, p.view
FROM {$db_prefix}down_cat as c
LEFT JOIN {$db_prefix}down_catperm AS p ON (p.ID_GROUP = $groupid AND c.ID_CAT = p.ID_CAT)
ORDER BY c.roworder ASC", __FILE__, __LINE__);
$context['downloads_cat'] = array();
while($row = mysql_fetch_assoc($dbresult))
{
// Check if they have permission to search these categories
if ($row['view'] == '0')
continue;

$context['downloads_cat'][] = array(
'ID_CAT' => $row['ID_CAT'],
'title' => $row['title']
);
}
mysql_free_result($dbresult);

$context['sub_template'] = 'search';

$context['page_title'] = $mbname . ' - ' . $txt['downloads_text_title'] . ' - ' . $txt['downloads_search'];
}
function Search2()
{
global $context, $mbname, $txt, $db_passwd, $db_prefix, $modSettings;

// Is the user allowed to view the downloads?
isAllowedTo('downloads_view');


if (!isset($_REQUEST['q']))
{

@$cat = (int) $_REQUEST['cat'];

// Check if keyword search was selected
@$keyword = htmlspecialchars($_REQUEST['key'],ENT_QUOTES);

if ($keyword == '')
{
// Probably a normal Search
if (empty($_REQUEST['searchfor']))
fatal_error($txt['downloads_error_no_search'],false);

$searchfor = htmlspecialchars($_REQUEST['searchfor'],ENT_QUOTES);


if (strlen($searchfor) <= 3)
fatal_error($txt['downloads_error_search_small'],false);

// Check the search options
@$searchkeywords = $_REQUEST['searchkeywords'];
@$searchtitle = $_REQUEST['searchtitle'];
@$searchdescription = $_REQUEST['searchdescription'];
@$daterange = (int) $_REQUEST['daterange'];
$memid = 0;

// Check if searching by member id
if (!empty($_REQUEST['pic_postername']))
{
$pic_postername = str_replace('"','', $_REQUEST['pic_postername']);
$pic_postername = str_replace("'",'', $pic_postername);
$pic_postername = str_replace('\\','', $pic_postername);
$pic_postername = htmlspecialchars($pic_postername, ENT_QUOTES);


$dbresult = db_query("
SELECT
realName, ID_MEMBER
FROM {$db_prefix}members
WHERE realName = '$pic_postername' OR memberName = '$pic_postername' LIMIT 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
mysql_free_result($dbresult);

if (db_affected_rows() != 0)
{
$memid = $row['ID_MEMBER'];
}
}
$context['catwhere'] = '';


if ($cat != 0)
$context['catwhere'] = "p.ID_CAT = $cat AND ";

// Check if searching by member id
if ($memid != 0)
$context['catwhere'] .= "p.ID_MEMBER = $memid AND ";

// Date Range check
if ($daterange!= 0)
{
$currenttime = time();
$pasttime = $currenttime - ($daterange * 24 * 60 * 60);

$context['catwhere'] .= "(p.date BETWEEN '" . $pasttime . "' AND '" . $currenttime . "') AND";
}

$s1 = 1;
$searchquery = '';
if ($searchtitle)
$searchquery = "p.title LIKE '%$searchfor%' ";
else
$s1 = 0;

$s2 = 1;
if ($searchdescription)
{
if ($s1 == 1)
$searchquery = "p.title LIKE '%$searchfor%' OR p.description LIKE '%$searchfor%'";
else
$searchquery = "p.description LIKE '%$searchfor%'";
}
else
$s2 = 0;

if ($searchkeywords)
{
if ($s1 == 1 || $s2 == 1)
$searchquery .= " OR p.keywords LIKE '$searchfor'";
else
$searchquery = "p.keywords LIKE '$searchfor'";
}


if ($searchquery == '')
$searchquery = "p.title LIKE '%$searchfor%' ";

$context['downloads_search_query'] = $searchquery;



$context['downloads_search'] = $searchfor;
}
else
{
// Search for the keyword


//Debating if I should add string length check for keywords...
//if (strlen($keyword) <= 3)
//fatal_error($txt['downloads_error_search_small']);

$context['downloads_search'] = $keyword;

$context['downloads_search_query'] = "p.keywords LIKE '$keyword'";
}

}
else
{

// Check for Security check
if (empty($_REQUEST['qs']))
fatal_error($txt['downloads_err_checkfailed'],true);

// Get the security checks
$qs = $_REQUEST['qs'];
$ws = $_REQUEST['ws'];

// Verify the security checks
$qs2 = sha1($_REQUEST['q'] . $db_passwd);
$ws2 = sha1($_REQUEST['w'] . $db_passwd);


if ($qs != $qs2)
fatal_error($txt['downloads_err_checkfailed'],true);

if (!empty($_REQUEST['w']))
{
if ($ws != $ws2)
fatal_error($txt['downloads_err_checkfailed'],true);
}

// We are passing over mutiple search results pages
$context['catwhere'] = base64_decode($_REQUEST['w']);
$context['downloads_search_query'] = base64_decode($_REQUEST['q']);
}





$downloads_where = '';
if (isset($context['catwhere']))
$downloads_where = $context['catwhere'];

$context['downloads_where'] = $downloads_where;

if (!isset($_REQUEST['pg']))
$page = 1;
else
$page = (int) $_REQUEST['pg'];



$dbresult = db_query("
SELECT
p.ID_FILE
FROM {$db_prefix}down_file as p
WHERE " . $downloads_where . " p.approved = 1 AND (" . $context['downloads_search_query'] . ")", __FILE__, __LINE__);
$numrows = mysql_num_rows($dbresult);
mysql_free_result($dbresult);

$total = ceil($numrows / $modSettings['down_set_files_per_page']);
$context['downloads_total'] = $total;

$page--;
if ($page < 0)
$page = 0;

$curpage = $page * $modSettings['down_set_files_per_page'];
$context['downloads_page'] = $page;


$dbresult = db_query("
SELECT
p.ID_FILE, p.ID_CAT, p.commenttotal, p.rating, p.filesize, p.title,
p.views, p.ID_MEMBER, m.realName, p.date, p.totaldownloads, p.totalratings
FROM {$db_prefix}down_file as p
LEFT JOIN {$db_prefix}members AS m ON (m.ID_MEMBER = p.ID_MEMBER)
WHERE " . $downloads_where . " p.approved = 1 AND (" . $context['downloads_search_query'] . ")
LIMIT $curpage," . $modSettings['down_set_files_per_page'], __FILE__, __LINE__);
$context['downloads_files'] = array();
while($row = mysql_fetch_assoc($dbresult))
{
$context['downloads_files'][] = array(
'ID_FILE' => $row['ID_FILE'],
'title' => $row['title'],
'totalratings' => $row['totalratings'],
'rating' => $row['rating'],
'commenttotal' => $row['commenttotal'],
'filesize' => $row['filesize'],
'views' => $row['views'],
'ID_MEMBER' => $row['ID_MEMBER'],
'realName' => $row['realName'],
'date' => $row['date'],
'totaldownloads' => $row['totaldownloads'],

);

}
mysql_free_result($dbresult);


$context['sub_template'] = 'search_results';

$context['page_title'] = $mbname . ' - ' . $txt['downloads_text_title'] . ' - ' . $txt['downloads_searchresults'];
}

function RateDownload()
{
global $scripturl, $db_prefix, $txt, $ID_MEMBER;

is_not_guest();

// Check if they are allowed to rate download
isAllowedTo('downloads_ratefile');

$id = (int) $_REQUEST['id'];
if (empty($id))
fatal_error($txt['downloads_error_no_file_selected']);
$rating = (int) $_REQUEST['rating'];
if (empty($rating))
fatal_error($txt['downloads_error_no_rating_selected']);

// Check if they rated this download?
$dbresult = db_query("
SELECT
ID_MEMBER, ID_FILE
FROM {$db_prefix}down_rating
WHERE ID_MEMBER = $ID_MEMBER AND ID_FILE = $id", __FILE__, __LINE__);

$found = db_affected_rows();
mysql_free_result($dbresult);

// Get the download owner
$dbresult = db_query("
SELECT
ID_MEMBER
FROM {$db_prefix}down_file
WHERE ID_FILE = $id LIMIT 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
mysql_free_result($dbresult);
// Check if they are rating their own download.
if ($ID_MEMBER == $row['ID_MEMBER'])
fatal_error($txt['downloads_error_norate_own'],false);

if ($found != 0)
fatal_error($txt['downloads_error_already_rated'],false);

// Check the Rating
if ($rating < 1 || $rating > 5)
$rating = 3;

// Add the Rating
db_query("INSERT INTO {$db_prefix}down_rating (ID_MEMBER, ID_FILE, value) VALUES ($ID_MEMBER, $id,$rating)", __FILE__, __LINE__);

// Add rating information to the download
db_query("
UPDATE {$db_prefix}down_file
SET totalratings = totalratings + 1, rating = rating + $rating
WHERE ID_FILE = $id LIMIT 1", __FILE__, __LINE__);

// Redirect to the download
redirectexit('action=downloads;sa=view;id=' . $id);

}
function ViewRating()
{
global $context, $mbname, $txt, $db_prefix;

// Get the download ID for the ratings
$id = (int) $_REQUEST['id'];
if (empty($id))
fatal_error($txt['downloads_error_no_file_selected']);

$context['downloads_id'] = $id;

$dbresult = db_query("
SELECT
r.ID, r.value, r.ID_FILE, r.ID_MEMBER, m.realName
FROM {$db_prefix}down_rating as r, {$db_prefix}members AS m
WHERE r.ID_FILE = $id AND r.ID_MEMBER = m.ID_MEMBER", __FILE__, __LINE__);
$context['downloads_rating'] = array();
while($row = mysql_fetch_assoc($dbresult))
{
$context['downloads_rating'][] = array(
'ID_FILE' => $row['ID_FILE'],
'ID' => $row['ID'],
'value' => $row['value'],
'ID_MEMBER' => $row['ID_MEMBER'],
'realName' => $row['realName'],

);

}
mysql_free_result($dbresult);

isAllowedTo('downloads_manage');

$context['sub_template'] = 'view_rating';

$context['page_title'] = $mbname . ' - ' . $txt['downloads_text_title'] . ' - ' . $txt['downloads_form_viewratings'];

}
function DeleteRating()
{
global $db_prefix, $scripturl, $txt;
isAllowedTo('downloads_manage');

$id = (int) $_REQUEST['id'];
if (empty($id))
fatal_error($txt['downloads_error_no_rating_selected']);

// First lookup the ID to get the download id and value of rating
$dbresult = db_query("
SELECT
ID, ID_FILE, value
FROM {$db_prefix}down_rating
WHERE ID = $id LIMIT 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
$value = $row['value'];
$fileid = $row['ID_FILE'];
mysql_free_result($dbresult);
// Delete the Rating
db_query("DELETE FROM {$db_prefix}down_rating
WHERE ID = " . $id . ' LIMIT 1', __FILE__, __LINE__);
// Update the download rating information
$dbresult = db_query("UPDATE {$db_prefix}down_file SET totalratings = totalratings - 1, rating = rating - $value WHERE ID_FILE = $fileid LIMIT 1", __FILE__, __LINE__);
// Redirect to the ratings
redirectexit('action=downloads;sa=viewrating;id=' . $fileid);
}
function Stats()
{
global $context, $mbname,$txt, $db_prefix,$context, $scripturl;

// Is the user allowed to view the downloads?
isAllowedTo('downloads_view');

// Get views total and comments total and total filesize
$result = db_query("
SELECT
SUM(views) AS views, SUM(filesize) AS filesize, SUM(commenttotal) AS commenttotal,
COUNT(*) AS filetotal
FROM {$db_prefix}down_file", __FILE__, __LINE__);
$row = mysql_fetch_assoc($result);
mysql_free_result($result);

$result2 = db_query("
SELECT
COUNT(*) AS filetotal
FROM {$db_prefix}down_file", __FILE__, __LINE__);
$row2 = mysql_fetch_assoc($result2);
mysql_free_result($result2);

$context['total_files'] = $row2['filetotal'];
$context['total_views'] = $row['views'];
$context['total_filesize'] = round($row['filesize'] / 1024, 2) . 'kb';
$context['total_comments'] = $row['commenttotal'];


// Top Viewed Downloads
$result = db_query("
SELECT
ID_FILE, title,views
FROM {$db_prefix}down_file
WHERE approved = 1 AND views > 0
ORDER BY views DESC LIMIT 10", __FILE__, __LINE__);
$context['top_viewed'] = array();
$max_views = 1;
while ($row = mysql_fetch_assoc($result))
{
$context['top_viewed'][] = array(
'ID_FILE' => $row['ID_FILE'],
'title' => $row['title'],
'views' => $row['views'],
'link' => '<a href="' . $scripturl . '?action=downloads;sa=view;id=' . $row['ID_FILE'] . '">' . $row['title'] . '</a>',
);

if ($max_views < $row['views'])
$max_views = $row['views'];
}
mysql_free_result($result);

foreach ($context['top_viewed'] as $i => $file)
$context['top_viewed'][$i]['percent'] = round(($file['views'] * 100) / $max_views);

// Top Rated
$result = db_query("
SELECT
ID_FILE, title,rating
FROM {$db_prefix}down_file
WHERE approved = 1 AND totalratings > 0
ORDER BY rating DESC LIMIT 10", __FILE__, __LINE__);
$context['top_rating'] = array();
$max_rating = 1;
while ($row = mysql_fetch_assoc($result))
{
$context['top_rating'][] = array(
'ID_FILE' => $row['ID_FILE'],
'title' => $row['title'],
'rating' => $row['rating'],
'link' => '<a href="' . $scripturl . '?action=downloads;sa=view;id=' . $row['ID_FILE'] . '">' . $row['title'] . '</a>',
);

if ($max_rating < $row['rating'])
$max_rating = $row['rating'];
}
mysql_free_result($result);

foreach ($context['top_rating'] as $i => $file)
$context['top_rating'][$i]['percent'] = round(($file['rating'] * 100) / $max_rating);

// Most Commented
$result = db_query("
SELECT
ID_FILE, title,commenttotal
FROM {$db_prefix}down_file
WHERE approved = 1 AND commenttotal > 0
ORDER BY commenttotal DESC LIMIT 10", __FILE__, __LINE__);
$context['most_comments'] = array();
$max_commenttotal = 1;
while ($row = mysql_fetch_assoc($result))
{
$context['most_comments'][] = array(
'ID_FILE' => $row['ID_FILE'],
'title' => $row['title'],
'commenttotal' => $row['commenttotal'],
'link' => '<a href="' . $scripturl . '?action=downloads;sa=view;id=' . $row['ID_FILE'] . '">' . $row['title'] . '</a>',
);

if ($max_commenttotal < $row['commenttotal'])
$max_commenttotal = $row['commenttotal'];
}
mysql_free_result($result);

foreach ($context['most_comments'] as $i => $file)
$context['most_comments'][$i]['percent'] = round(($file['commenttotal'] * 100) / $max_commenttotal);

// Last 10 downloads uploaded
$result = db_query("
SELECT
ID_FILE, title
FROM {$db_prefix}down_file
WHERE approved = 1
ORDER BY ID_FILE DESC LIMIT 10", __FILE__, __LINE__);
$context['last_upload'] = array();
while ($row = mysql_fetch_assoc($result))
{
$context['last_upload'][] = array(
'ID_FILE' => $row['ID_FILE'],
'title' => $row['title'],
'link' => '<a href="' . $scripturl . '?action=downloads;sa=view;id=' . $row['ID_FILE'] . '">' . $row['title'] . '</a>',
);
}
mysql_free_result($result);


// Load the template
$context['sub_template'] = 'stats';
// Set the page title
$context['page_title'] = $mbname . ' - ' . $txt['downloads_text_title'] . ' - ' . $txt['downloads_text_stats'];

}

function UpdateUserFileSizeTable($memberid, $filesize)
{
global $db_prefix;

// Check if a record exits
$dbresult = db_query("
SELECT
ID_MEMBER,totalfilesize
FROM {$db_prefix}down_userquota
WHERE ID_MEMBER = $memberid LIMIT 1", __FILE__, __LINE__);
$count = db_affected_rows();
mysql_free_result($dbresult);

if ($count == 0)
{
// Create the record
db_query("INSERT INTO {$db_prefix}down_userquota (ID_MEMBER, totalfilesize) VALUES ($memberid, $filesize)", __FILE__, __LINE__);
}
else
{
// Update the record
if ($filesize >= 0)
db_query("UPDATE {$db_prefix}down_userquota SET totalfilesize = totalfilesize + $filesize WHERE ID_MEMBER = $memberid LIMIT 1", __FILE__, __LINE__);
else
db_query("UPDATE {$db_prefix}down_userquota SET totalfilesize = totalfilesize + $filesize WHERE ID_MEMBER = $memberid LIMIT 1", __FILE__, __LINE__);
}
}
function FileSpaceAdmin()
{
global $mbname, $txt, $context, $db_prefix;
// Check if they are allowed to manage the downloads
isAllowedTo('downloads_manage');
adminIndex('downloads_settings');
loadLanguage('Admin');

// Set the page tile
$context['page_title'] = $mbname . ' - ' . $txt['downloads_text_title'] . ' - ' . $txt['downloads_filespace'];
// Load the subtemplate for the file manager
$context['sub_template'] = 'filespace';

// Load the membergroups
$dbresult = db_query("
SELECT
ID_GROUP, groupName
FROM {$db_prefix}membergroups
WHERE minPosts = -1 ORDER BY groupName", __FILE__, __LINE__);
while ($row = mysql_fetch_assoc($dbresult))
{
$context['groups'][$row['ID_GROUP']] = array(
'ID_GROUP' => $row['ID_GROUP'],
'groupName' => $row['groupName'],
);
}
mysql_free_result($dbresult);


$dbresult = db_query("
SELECT
q.totalfilesize, q.ID_GROUP, m.groupName
FROM {$db_prefix}down_groupquota as q, {$db_prefix}membergroups AS m
WHERE q.ID_GROUP = m.ID_GROUP ORDER BY q.totalfilesize", __FILE__, __LINE__);
$context['downloads_membergroups'] = array();
while($row = mysql_fetch_assoc($dbresult))
{
$context['downloads_membergroups'][] = array(
'ID_GROUP' => $row['ID_GROUP'],
'totalfilesize' => $row['totalfilesize'],
'groupName' => $row['groupName'],


);

}
mysql_free_result($dbresult);

$dbresult = db_query("
SELECT
q.totalfilesize, q.ID_GROUP
FROM {$db_prefix}down_groupquota as q
WHERE q.ID_GROUP = 0 LIMIT 1", __FILE__, __LINE__);
$context['downloads_reggroup'] = array();
while($row = mysql_fetch_assoc($dbresult))
{
$context['downloads_reggroup'][] = array(
'ID_GROUP' => $row['ID_GROUP'],
'totalfilesize' => $row['totalfilesize'],
);

}
mysql_free_result($dbresult);


if (!isset($_REQUEST['pg']))
$page = 1;
else
$page = (int) $_REQUEST['pg'];

// Get Total Pages
$dbresult = db_query("
SELECT
COUNT(*) AS total
FROM {$db_prefix}down_userquota as q", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
$total = ceil($row['total'] / 20);
mysql_free_result($dbresult);
$context['downloads_total'] = $total;

$page--;
if ($page < 0)
$page = 0;

$curpage = $page * 20;
$context['downloads_page'] = $page;



$dbresult = db_query("
SELECT
q.totalfilesize, q.ID_MEMBER, m.realName
FROM {$db_prefix}down_userquota as q, {$db_prefix}members AS m
WHERE q.ID_MEMBER = m.ID_MEMBER
ORDER BY q.totalfilesize DESC LIMIT $curpage,20", __FILE__, __LINE__);
$context['downloads_members'] = array();
while($row = mysql_fetch_assoc($dbresult))
{
$context['downloads_members'][] = array(
'ID_MEMBER' => $row['ID_MEMBER'],
'totalfilesize' => $row['totalfilesize'],
'realName' => $row['realName'],


);

}
mysql_free_result($dbresult);


}
function FileSpaceList()
{
global $mbname, $txt, $context, $db_prefix;
// Check if they are allowed to manage the downloads
isAllowedTo('downloads_manage');
adminIndex('downloads_settings');

$id = (int) $_REQUEST['id'];
if (empty($id))
fatal_error($txt['downloads_error_no_user_selected']);

$dbresult = db_query("
SELECT
m.realName
FROM {$db_prefix}members AS m
WHERE m.ID_MEMBER = $id LIMIT 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
$context['downloads_filelist_realname'] = $row['realName'];
$context['downloads_filelist_userid'] = $id;
mysql_free_result($dbresult);

// Set the page tile
$context['page_title'] = $mbname . ' - ' . $txt['downloads_text_title'] . ' - ' . $txt['downloads_filespace'] . ' - ' . $context['downloads_filelist_realname'];
// Load the subtemplate for the file manager
$context['sub_template'] = 'filelist';



if (!isset($_REQUEST['pg']))
$page = 1;
else
$page = (int) $_REQUEST['pg'];

// Get Total Pages
$dbresult = db_query("
SELECT
COUNT(*) AS total
FROM {$db_prefix}down_file
WHERE ID_MEMBER = " . $context['downloads_filelist_userid'], __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
$total = ceil($row['total'] / 20);
mysql_free_result($dbresult);
$context['downloads_total'] = $total;


$page--;
if ($page < 0)
$page = 0;

$curpage = $page * 20;
$context['downloads_page'] = $page;


$dbresult = db_query("
SELECT
p.ID_FILE,p.title, p.filesize,p.ID_MEMBER
FROM {$db_prefix}down_file as p
WHERE p.ID_MEMBER = " . $context['downloads_filelist_userid'] . "
ORDER BY p.filesize DESC LIMIT $curpage,20", __FILE__, __LINE__);
$context['downloads_files'] = array();
while($row = mysql_fetch_assoc($dbresult))
{
$context['downloads_files'][] = array(
'ID_FILE' => $row['ID_FILE'],
'title' => $row['title'],
'filesize' => $row['filesize'],
'ID_MEMBER' => $row['ID_MEMBER'],


);

}
mysql_free_result($dbresult);

}

function RecountFileQuotaTotals($redirect = true)
{
global $db_prefix;

if ($redirect == true)
isAllowedTo('downloads_manage');

// Show all the user's with quota information
$dbresult = db_query("
SELECT
ID_MEMBER
FROM {$db_prefix}down_userquota", __FILE__, __LINE__);
while($row = mysql_fetch_assoc($dbresult))
{
// Loop though the all the files for the member and get the total
$dbresult2 = db_query("
SELECT
SUM(filesize) as total
FROM {$db_prefix}down_file
WHERE ID_MEMBER = " . $row['ID_MEMBER'], __FILE__, __LINE__);

$row2 = mysql_fetch_assoc($dbresult2);
$total = $row2['total'];

if ($total == '')
$total = 0;

mysql_free_result($dbresult2);
// Update the quota
db_query("UPDATE {$db_prefix}down_userquota SET totalfilesize = $total WHERE ID_MEMBER = " . $row['ID_MEMBER'] . " LIMIT 1", __FILE__, __LINE__);

}
mysql_free_result($dbresult);

if ($redirect == true)
redirectexit('action=downloads;sa=filespace');
}
function GetQuotaGroupLimit($memberid)
{
global $db_prefix;
$dbresult = db_query("
SELECT
m.ID_MEMBER, q.ID_GROUP, q.totalfilesize
FROM {$db_prefix}down_groupquota as q, {$db_prefix}members as m
WHERE m.ID_MEMBER = $memberid AND q.ID_GROUP = m.ID_GROUP LIMIT 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
if (db_affected_rows()== 0)
{
mysql_free_result($dbresult);
return 0;
}
else
{
mysql_free_result($dbresult);

return $row['totalfilesize'];
}

}
function GetUserSpaceUsed($memberid)
{
global $db_prefix;

$dbresult = db_query("
SELECT
ID_MEMBER,totalfilesize
FROM {$db_prefix}down_userquota
WHERE ID_MEMBER = $memberid LIMIT 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
if (db_affected_rows()== 0)
{
mysql_free_result($dbresult);
return 0;
}
else
{
mysql_free_result($dbresult);

return $row['totalfilesize'];
}

}
function AddQuota()
{
global $txt, $db_prefix;
isAllowedTo('downloads_manage');

$groupid = (int) $_REQUEST['groupname'];

$filelimit = (int) $_REQUEST['filelimit'];
if (empty($filelimit))
{
fatal_error($txt['downloads_error_noquota'],false);
}

$dbresult = db_query("
SELECT
ID_GROUP
FROM {$db_prefix}down_groupquota
WHERE ID_GROUP = $groupid LIMIT 1", __FILE__, __LINE__);
$count = db_affected_rows();
mysql_free_result($dbresult);

if ($count == 0)
{
// Create the record
db_query("INSERT INTO {$db_prefix}down_groupquota (ID_GROUP, totalfilesize) VALUES ($groupid, $filelimit)", __FILE__, __LINE__);
}
else
{
fatal_error($txt['downloads_error_quotaexist'],false);
}

redirectexit('action=downloads;sa=filespace');
}
function DeleteQuota()
{
global $db_prefix;
isAllowedTo('downloads_manage');
$id = (int) $_REQUEST['id'];

db_query("DELETE FROM {$db_prefix}down_groupquota WHERE ID_GROUP = " . $id . ' LIMIT 1', __FILE__, __LINE__);

redirectexit('action=downloads;sa=filespace');
}


function ApproveAllComments()
{
global $scripturl, $db_prefix;
isAllowedTo('downloads_manage');

// Approve all the comments
db_query("UPDATE {$db_prefix}down_comment
SET approved = 1 WHERE approved = 0", __FILE__, __LINE__);

// Reditrect the comment list
redirectexit('action=downloads;sa=commentlist');
}
function CatPerm()
{
global $mbname, $txt, $db_prefix, $context;
isAllowedTo('downloads_manage');


$cat = (int) $_REQUEST['cat'];
if (empty($cat))
fatal_error($txt['downloads_error_no_cat']);

$dbresult1 = db_query("
SELECT
ID_CAT, title
FROM {$db_prefix}down_cat
WHERE ID_CAT = $cat LIMIT 1", __FILE__, __LINE__);
$row1 = mysql_fetch_assoc($dbresult1);
$context['downloads_cat_name'] = $row1['title'];
// Free the SQL Result
mysql_free_result($dbresult1);

loadLanguage('Admin');

$context['downloads_cat'] = $cat;

// Load the template
$context['sub_template'] = 'catperm';
// Set the page title
$context['page_title'] = $mbname . ' - ' . $txt['downloads_text_title'] . ' - ' . $txt['downloads_text_catperm'] . ' -' . $context['downloads_cat_name'];

// Load the membergroups
$dbresult = db_query("
SELECT
ID_GROUP, groupName
FROM {$db_prefix}membergroups
WHERE minPosts = -1 ORDER BY groupName", __FILE__, __LINE__);
while ($row = mysql_fetch_assoc($dbresult))
{
$context['groups'][$row['ID_GROUP']] = array(
'ID_GROUP' => $row['ID_GROUP'],
'groupName' => $row['groupName'],
);
}
mysql_free_result($dbresult);


// Membergroups
$dbresult = db_query("
SELECT
c.ID_CAT, c.ID, c.view, c.addfile, c.editfile, c.delfile, c.addcomment, c.ID_GROUP, m.groupName,a.title catname
FROM ({$db_prefix}down_catperm as c, {$db_prefix}membergroups AS m,{$db_prefix}down_cat as a)
WHERE c.ID_CAT = " . $context['downloads_cat'] . " AND c.ID_GROUP = m.ID_GROUP AND a.ID_CAT = c.ID_CAT", __FILE__, __LINE__);
$context['downloads_membergroups'] = array();
while($row = mysql_fetch_assoc($dbresult))
{
$context['downloads_membergroups'][] = array(
'ID_CAT' => $row['ID_CAT'],
'ID' => $row['ID'],
'view' => $row['view'],
'addfile' => $row['addfile'],
'editfile' => $row['editfile'],
'delfile' => $row['delfile'],
'addcomment' => $row['addcomment'],
'ID_GROUP' => $row['ID_GROUP'],
'groupName' => $row['groupName'],
'catname' => $row['catname'],
);

}
mysql_free_result($dbresult);


$dbresult = db_query("
SELECT
c.ID_CAT, c.ID, c.view, c.addfile, c.editfile, c.delfile, c.addcomment, c.ID_GROUP,a.title catname
FROM {$db_prefix}down_catperm as c,{$db_prefix}down_cat as a
WHERE c.ID_CAT = " . $context['downloads_cat'] . " AND c.ID_GROUP = 0 AND a.ID_CAT = c.ID_CAT LIMIT 1", __FILE__, __LINE__);
$context['downloads_reggroup'] = array();
while($row = mysql_fetch_assoc($dbresult))
{
$context['downloads_reggroup'][] = array(
'ID_CAT' => $row['ID_CAT'],
'ID' => $row['ID'],
'view' => $row['view'],
'addfile' => $row['addfile'],
'editfile' => $row['editfile'],
'delfile' => $row['delfile'],
'addcomment' => $row['addcomment'],
'ID_GROUP' => $row['ID_GROUP'],
'catname' => $row['catname'],
);

}
mysql_free_result($dbresult);


$dbresult = db_query("
SELECT
c.ID_CAT, c.ID, c.view, c.addfile, c.editfile, c.delfile, c.addcomment, c.ID_GROUP,a.title catname
FROM {$db_prefix}down_catperm as c,{$db_prefix}down_cat as a
WHERE c.ID_CAT = " . $context['downloads_cat'] . " AND c.ID_GROUP = -1 AND a.ID_CAT = c.ID_CAT LIMIT 1", __FILE__, __LINE__);
$context['downloads_guestgroup'] = array();
while($row = mysql_fetch_assoc($dbresult))
{
$context['downloads_guestgroup'][] = array(
'ID_CAT' => $row['ID_CAT'],
'ID' => $row['ID'],
'view' => $row['view'],
'addfile' => $row['addfile'],
'editfile' => $row['editfile'],
'delfile' => $row['delfile'],
'addcomment' => $row['addcomment'],
'ID_GROUP' => $row['ID_GROUP'],
'catname' => $row['catname'],
);

}
mysql_free_result($dbresult);


}
function CatPerm2()
{
global $scripturl, $db_prefix, $txt;
isAllowedTo('downloads_manage');

$groupname = (int) $_REQUEST['groupname'];
$cat = (int) $_REQUEST['cat'];

// Check if permission exits
$dbresult = db_query("
SELECT
ID_GROUP,ID_CAT
FROM {$db_prefix}down_catperm
WHERE ID_GROUP = $groupname AND ID_CAT = $cat", __FILE__, __LINE__);
if (db_affected_rows()!= 0)
{
mysql_free_result($dbresult);
fatal_error($txt['downloads_permerr_permexist'],false);
}
mysql_free_result($dbresult);

// Permissions
$view = isset($_REQUEST['view']) ? 1 : 0;
$add = isset($_REQUEST['add']) ? 1 : 0;
$edit = isset($_REQUEST['edit']) ? 1 : 0;
$delete = isset($_REQUEST['delete']) ? 1 : 0;
$addcomment = isset($_REQUEST['addcomment']) ? 1 : 0;

// Insert into database
db_query("INSERT INTO {$db_prefix}down_catperm
(ID_GROUP,ID_CAT,view,addfile,editfile,delfile,addcomment)
VALUES ($groupname,$cat,$view,$add,$edit,$delete,$addcomment)", __FILE__, __LINE__);

redirectexit('action=downloads;sa=catperm;cat=' . $cat);
}
function CatPermList()
{
global $mbname, $txt, $db_prefix, $context, $db_prefix;
isAllowedTo('downloads_manage');
adminIndex('downloads_settings');

// Load the template
$context['sub_template'] = 'catpermlist';

// Set the page title
$context['page_title'] = $mbname . ' - ' . $txt['downloads_text_title'] . ' - ' . $txt['downloads_text_catpermlist'];

$dbresult = db_query("
SELECT
c.ID_CAT, c.ID, c.view, c.addfile, c.editfile, c.delfile, c.addcomment,
c.ID_GROUP, m.groupName,a.title catname
FROM ({$db_prefix}down_catperm as c, {$db_prefix}membergroups AS m,{$db_prefix}down_cat as a)
WHERE c.ID_GROUP = m.ID_GROUP AND a.ID_CAT = c.ID_CAT", __FILE__, __LINE__);
$context['downloads_membergroups'] = array();
while($row = mysql_fetch_assoc($dbresult))
{
$context['downloads_membergroups'][] = array(
'ID_CAT' => $row['ID_CAT'],
'ID' => $row['ID'],
'view' => $row['view'],
'addfile' => $row['addfile'],
'editfile' => $row['editfile'],
'delfile' => $row['delfile'],
'addcomment' => $row['addcomment'],
'ID_GROUP' => $row['ID_GROUP'],
'groupName' => $row['groupName'],
'catname' => $row['catname'],
);

}
mysql_free_result($dbresult);

$dbresult = db_query("
SELECT
c.ID_CAT, c.ID, c.view, c.addfile, c.editfile, c.delfile, c.addcomment, c.ID_GROUP,a.title catname
FROM {$db_prefix}down_catperm as c,{$db_prefix}down_cat as a
WHERE c.ID_GROUP = 0 AND a.ID_CAT = c.ID_CAT LIMIT 1", __FILE__, __LINE__);
$context['downloads_regmem'] = array();
while($row = mysql_fetch_assoc($dbresult))
{
$context['downloads_regmem'][] = array(
'ID_CAT' => $row['ID_CAT'],
'ID' => $row['ID'],
'view' => $row['view'],
'addfile' => $row['addfile'],
'editfile' => $row['editfile'],
'delfile' => $row['delfile'],
'addcomment' => $row['addcomment'],
'ID_GROUP' => $row['ID_GROUP'],
'catname' => $row['catname'],
);

}
mysql_free_result($dbresult);


$dbresult = db_query("
SELECT
c.ID_CAT, c.ID, c.view, c.addfile, c.editfile, c.delfile, c.addcomment, c.ID_GROUP,a.title catname
FROM {$db_prefix}down_catperm as c,{$db_prefix}down_cat as a
WHERE c.ID_GROUP = -1 AND a.ID_CAT = c.ID_CAT LIMIT 1", __FILE__, __LINE__);
$context['downloads_guestmem'] = array();
while($row = mysql_fetch_assoc($dbresult))
{
$context['downloads_guestmem'][] = array(
'ID_CAT' => $row['ID_CAT'],
'ID' => $row['ID'],
'view' => $row['view'],
'addfile' => $row['addfile'],
'editfile' => $row['editfile'],
'delfile' => $row['delfile'],
'addcomment' => $row['addcomment'],
'ID_GROUP' => $row['ID_GROUP'],
'catname' => $row['catname'],
);

}
mysql_free_result($dbresult);
}
function CatPermDelete()
{
global $scripturl, $db_prefix;
isAllowedTo('downloads_manage');

$id = (int) $_REQUEST['id'];

// Delete the Permission
db_query("DELETE FROM {$db_prefix}down_catperm WHERE ID = " . $id . ' LIMIT 1', __FILE__, __LINE__);
// Redirect to the ratings
redirectexit('action=downloads;sa=catpermlist');

}
function GetCatPermission($cat,$perm)
{
global $ID_MEMBER, $db_prefix, $txt, $user_info;
$cat = (int) $cat;
if (!$user_info['is_guest'])
{
$dbresult = db_query("
SELECT
m.ID_MEMBER, c.view, c.addfile, c.editfile, c.delfile,c.ratefile, c.addcomment,
c.editcomment, c.report
FROM {$db_prefix}down_catperm as c, {$db_prefix}members as m
WHERE m.ID_MEMBER = $ID_MEMBER AND c.ID_GROUP = m.ID_GROUP AND c.ID_CAT = $cat LIMIT 1", __FILE__, __LINE__);
}
else
$dbresult = db_query("
SELECT
c.view, c.addfile, c.editfile, c.delfile,c.ratefile, c.addcomment, c.editcomment,
c.report
FROM {$db_prefix}down_catperm as c
WHERE c.ID_GROUP = -1 AND c.ID_CAT = $cat LIMIT 1", __FILE__, __LINE__);

if (db_affected_rows()== 0)
{
mysql_free_result($dbresult);
}
else
{
$row = mysql_fetch_assoc($dbresult);

mysql_free_result($dbresult);
if ($perm == 'view' && $row['view'] == 0)
fatal_error($txt['downloads_perm_no_view'],false);
else if ($perm == 'addfile' && $row['addfile'] == 0)
fatal_error($txt['downloads_perm_no_add'],false);
else if ($perm == 'editfile' && $row['editfile'] == 0)
fatal_error($txt['downloads_perm_no_edit'],false);
else if ($perm == 'delfile' && $row['delfile'] == 0)
fatal_error($txt['downloads_perm_no_delete'],false);
else if ($perm == 'ratefile' && $row['ratefile'] == 0)
fatal_error($txt['downloads_perm_no_ratefile'],false);
else if ($perm == 'addcomment' && $row['addcomment'] == 0)
fatal_error($txt['downloads_perm_no_addcomment'],false);
else if ($perm == 'editcomment' && $row['editcomment'] == 0)
fatal_error($txt['downloads_perm_no_editcomment'],false);
else if ($perm == 'report' && $row['report'] == 0)
fatal_error($txt['downloads_perm_no_report'],false);

}


}

function PreviousDownload()
{
global $db_prefix, $txt, $scripturl;

$id = (int) $_REQUEST['id'];
if (empty($id))
fatal_error($txt['downloads_error_no_file_selected']);

// Get the category
$dbresult = db_query("
SELECT
ID_FILE, ID_CAT
FROM {$db_prefix}down_file
WHERE ID_FILE = $id LIMIT 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
$ID_CAT = $row['ID_CAT'];

mysql_free_result($dbresult);

// Get previous download
$dbresult = db_query("
SELECT
ID_FILE
FROM {$db_prefix}down_file
WHERE ID_CAT = $ID_CAT AND approved = 1 AND ID_FILE > $id LIMIT 1", __FILE__, __LINE__);
if (db_affected_rows() != 0)
{
$row = mysql_fetch_assoc($dbresult);
$ID_FILE = $row['ID_FILE'];
}
else
$ID_FILE = $id;

mysql_free_result($dbresult);

redirectexit('action=downloads;sa=view;id=' . $ID_FILE);
}
function NextDownload()
{
global $db_prefix, $txt, $scripturl;

$id = (int) $_REQUEST['id'];
if (empty($id))
fatal_error($txt['downloads_error_no_file_selected']);

// Get the category
$dbresult = db_query("
SELECT
ID_FILE, ID_CAT
FROM {$db_prefix}down_file
WHERE ID_FILE = $id LIMIT 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
$ID_CAT = $row['ID_CAT'];

mysql_free_result($dbresult);

// Get next download
$dbresult = db_query("
SELECT
ID_FILE
FROM {$db_prefix}down_file
WHERE ID_CAT = $ID_CAT AND approved = 1 AND ID_FILE < $id
ORDER BY ID_FILE DESC LIMIT 1", __FILE__, __LINE__);
if (db_affected_rows() != 0)
{
$row = mysql_fetch_assoc($dbresult);
$ID_FILE = $row['ID_FILE'];
}
else
$ID_FILE = $id;
mysql_free_result($dbresult);

redirectexit('action=downloads;sa=view;id=' . $ID_FILE);
}

function CatImageDelete()
{
global $db_prefix;

isAllowedTo('downloads_manage');

$id = (int) $_REQUEST['id'];
if (empty($id))
exit;

db_query("UPDATE {$db_prefix}down_cat
SET filename = '' WHERE ID_CAT = $id LIMIT 1", __FILE__, __LINE__);

redirectexit('action=downloads;sa=editcat;cat=' . $id);
}
function ReOrderCats($cat)
{
global $db_prefix;

$dbresult1 = db_query("
SELECT
roworder,ID_PARENT
FROM {$db_prefix}down_cat
WHERE ID_CAT = $cat", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult1);
$ID_PARENT = $row['ID_PARENT'];
mysql_free_result($dbresult1);

$dbresult = db_query("
SELECT
ID_CAT, roworder
FROM {$db_prefix}down_cat
WHERE ID_PARENT = $ID_PARENT
ORDER BY roworder ASC", __FILE__, __LINE__);
if (db_affected_rows() != 0)
{
$count = 1;
while($row2 = mysql_fetch_assoc($dbresult))
{
db_query("UPDATE {$db_prefix}down_cat
SET roworder = $count WHERE ID_CAT = " . $row2['ID_CAT'], __FILE__, __LINE__);
$count++;
}
}
mysql_free_result($dbresult);
}



function BulkActions()
{
isAllowedTo('downloads_manage');

if (isset($_REQUEST['files']))
{
$baction = $_REQUEST['doaction'];

foreach ($_REQUEST['files'] as $value)
{

if ($baction == 'approve')
ApproveFileByID($value);
if ($baction == 'delete')
DeleteFileByID($value);

}
}

// Redirect to approval list
redirectexit('action=downloads;sa=approvelist');
}
function UpdateCategoryTotals($ID_CAT)
{
global $db_prefix;

$dbresult = db_query("
SELECT
COUNT(*) AS total
FROM {$db_prefix}down_file
WHERE ID_CAT = $ID_CAT AND approved = 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
$total = $row['total'];
mysql_free_result($dbresult);

// Update the count
$dbresult = db_query("UPDATE {$db_prefix}down_cat SET total = $total WHERE ID_CAT = $ID_CAT LIMIT 1", __FILE__, __LINE__);

}

function UpdateCategoryTotalByFileID($id)
{
global $db_prefix;

$dbresult = db_query("
SELECT
ID_CAT FROM {$db_prefix}down_file
WHERE ID_FILE = $id", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
mysql_free_result($dbresult);

UpdateCategoryTotals($row['ID_CAT']);

}

function CustomUp()
{
global $db_prefix, $txt;

// Check Permission
isAllowedTo('downloads_manage');
// Get the id
$id = (int) $_REQUEST['id'];

ReOrderCustom($id);

// Check if there is a category above it
// First get our row order
$dbresult1 = db_query("
SELECT
ID_CAT, ID_CUSTOM, roworder
FROM {$db_prefix}down_custom_field
WHERE ID_CUSTOM = $id", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult1);

$ID_CAT = $row['ID_CAT'];
$oldrow = $row['roworder'];
$o = $row['roworder'];
$o--;

mysql_free_result($dbresult1);
$dbresult = db_query("
SELECT
ID_CUSTOM, roworder
FROM {$db_prefix}down_custom_field
WHERE ID_CAT = $ID_CAT AND roworder = $o", __FILE__, __LINE__);

if (db_affected_rows()== 0)
fatal_error($txt['downloads_error_nocustom_above'], false);
$row2 = mysql_fetch_assoc($dbresult);


// Swap the order Id's
db_query("UPDATE {$db_prefix}down_custom_field
SET roworder = $oldrow WHERE ID_CUSTOM = " .$row2['ID_CUSTOM'], __FILE__, __LINE__);

db_query("UPDATE {$db_prefix}down_custom_field
SET roworder = $o WHERE ID_CUSTOM = $id", __FILE__, __LINE__);


mysql_free_result($dbresult);

// Redirect to index to view cats
redirectexit('action=downloads;sa=editcat;cat=' . $ID_CAT);

}
function CustomDown()
{
global $db_prefix, $txt;

isAllowedTo('downloads_manage');

// Get the id
$id = (int) $_REQUEST['id'];

ReOrderCustom($id);

// Check if there is a category below it
// First get our row order
$dbresult1 = db_query("
SELECT
ID_CUSTOM,ID_CAT, roworder
FROM {$db_prefix}down_custom_field
WHERE ID_CUSTOM = $id LIMIT 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult1);
$ID_CAT = $row['ID_CAT'];

$oldrow = $row['roworder'];
$o = $row['roworder'];
$o++;

mysql_free_result($dbresult1);
$dbresult = db_query("
SELECT
ID_CUSTOM, ID_CAT, roworder
FROM {$db_prefix}down_custom_field
WHERE ID_CAT = $ID_CAT AND roworder = $o", __FILE__, __LINE__);
if (db_affected_rows()== 0)
fatal_error($txt['downloads_error_nocustom_below'], false);
$row2 = mysql_fetch_assoc($dbresult);


// Swap the order Id's
db_query("UPDATE {$db_prefix}down_custom_field
SET roworder = $oldrow WHERE ID_CUSTOM = " .$row2['ID_CUSTOM'], __FILE__, __LINE__);

db_query("UPDATE {$db_prefix}down_custom_field
SET roworder = $o WHERE ID_CUSTOM = $id", __FILE__, __LINE__);


mysql_free_result($dbresult);


// Redirect to index to view cats
redirectexit('action=downloads;sa=editcat;cat=' . $ID_CAT);

}
function CustomAdd()
{
global $db_prefix, $txt;
// Check Permission
isAllowedTo('downloads_manage');


$id = (int) $_REQUEST['id'];

$title = htmlspecialchars($_REQUEST['title'],ENT_QUOTES);
$defaultvalue = htmlspecialchars($_REQUEST['defaultvalue'],ENT_QUOTES);
$required = isset($_REQUEST['required']) ? 1 : 0;


if ($title == '')
fatal_error($txt['downloads_custom_err_title'], false);


db_query("INSERT INTO {$db_prefix}down_custom_field
(ID_CAT,title, defaultvalue, is_required)
VALUES ($id,'$title','$defaultvalue', '$required')", __FILE__, __LINE__);


// Redirect back to the edit category page
redirectexit('action=downloads;sa=editcat;cat=' . $id);

}
function CustomDelete()
{
global $db_prefix;

// Check Permission
isAllowedTo('smfclassifieds_manage');

// Custom ID
$id = (int) $_REQUEST['id'];

// Get the CAT ID to redirect to the page
$result = db_query("
SELECT
ID_CAT
FROM {$db_prefix}down_custom_field
WHERE ID_CUSTOM = $id LIMIT 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($result);
mysql_free_result($result);


// Delete all custom data for downloads that use it
db_query("DELETE FROM {$db_prefix}down_custom_field_data
WHERE ID_CUSTOM = $id ", __FILE__, __LINE__);

// Finaly delete the field
db_query("DELETE FROM {$db_prefix}down_custom_field
WHERE ID_CUSTOM = $id LIMIT 1", __FILE__, __LINE__);

// Redirect to the edit category page
redirectexit('action=downloads;sa=editcat;cat=' . $row['ID_CAT']);


}
function ReOrderCustom($id)
{
global $db_prefix;

// Get the Category ID by id
$dbresult = db_query("
SELECT
ID_CAT, roworder
FROM {$db_prefix}down_custom_field
WHERE ID_CUSTOM = $id", __FILE__, __LINE__);
$row1 = mysql_fetch_assoc($dbresult);
$ID_CAT = $row1['ID_CAT'];
mysql_free_result($dbresult);

$dbresult = db_query("
SELECT
ID_CUSTOM, roworder
FROM {$db_prefix}down_custom_field
WHERE ID_CAT = $ID_CAT ORDER BY roworder ASC", __FILE__, __LINE__);
if (db_affected_rows() != 0)
{
$count = 1;
while($row2 = mysql_fetch_assoc($dbresult))
{
db_query("UPDATE {$db_prefix}down_custom_field
SET roworder = $count WHERE ID_CUSTOM = " . $row2['ID_CUSTOM'], __FILE__, __LINE__);
$count++;
}
}
mysql_free_result($dbresult);
}


function ComputeNextFolderID($ID_FILE)
{
global $modSettings;

$folderid = floor($ID_FILE / 1000);

// If the current folder ID does not match the new folder ID update the settings
if ($modSettings['down_folder_id'] != $folderid)
updateSettings(array('down_folder_id' => $folderid));


}
function CreateDownloadFolder()
{
global $modSettings, $boarddir;

if (empty($modSettings['down_path']))
{
$modSettings['down_path'] = $boarddir . '/downloads/';
}

$newfolderpath = $modSettings['down_path'] . $modSettings['down_folder_id'] . '/';

// Check if the folder exists if it doess just exit
if (!file_exists($newfolderpath))
{
// If the folder does not exist then create it
@mkdir ($newfolderpath);
// Try to make sure that the correct permissions are on the folder
@chmod ($newfolderpath,0755);
}

}

function GetFileTotals($ID_CAT)
{
global $modSettings, $db_prefix, $subcats_linktree, $scripturl;

$total = 0;

$total += GetTotalByCATID($ID_CAT);
$subcats_linktree = '';

// Get the child categories to this category
if ($modSettings['down_set_count_child'])
{
$dbresult3 = db_query("
SELECT
ID_CAT, total, title
FROM {$db_prefix}down_cat WHERE ID_PARENT = $ID_CAT", __FILE__, __LINE__);
while($row3 = mysql_fetch_assoc($dbresult3))
{
$subcats_linktree .= '<a href="' . $scripturl . '?action=downloads;cat=' . $row3['ID_CAT'] . '">' . $row3['title'] . '</a> ';

if ($row3['total'] == -1)
{
$dbresult = db_query("
SELECT
COUNT(*) AS total
FROM {$db_prefix}down_file
WHERE ID_CAT = " . $row3['ID_CAT'] . " AND approved = 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
$total2 = $row['total'];
mysql_free_result($dbresult);


$dbresult = db_query("UPDATE {$db_prefix}down_cat SET total = $total2 WHERE ID_CAT = " . $row3['ID_CAT'] . " LIMIT 1", __FILE__, __LINE__);
}
}
mysql_free_result($dbresult3);


$dbresult3 = db_query("
SELECT
SUM(total) AS finaltotal
FROM {$db_prefix}down_cat
WHERE ID_PARENT = $ID_CAT", __FILE__, __LINE__);
$row3 = mysql_fetch_assoc($dbresult3);

mysql_free_result($dbresult3);
if ($row3['finaltotal'] != '')
$total += $row3['finaltotal'];

}


return $total;
}




function GetTotalByCATID($ID_CAT)
{
global $db_prefix;

$dbresult = db_query("
SELECT
total
FROM {$db_prefix}down_cat
WHERE ID_CAT = $ID_CAT", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
mysql_free_result($dbresult);

if ($row['total'] != -1)
return $row['total'];
else
{
$dbresult = db_query("
SELECT
COUNT(*) AS total
FROM {$db_prefix}down_file
WHERE ID_CAT = $ID_CAT AND approved = 1", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
$total = $row['total'];
mysql_free_result($dbresult);

// Update the count
$dbresult = db_query("UPDATE {$db_prefix}down_cat SET total = $total WHERE ID_CAT = $ID_CAT LIMIT 1", __FILE__, __LINE__);

// Return the total files
return $total;

}

}
function DownloadFile()
{
global $db_prefix, $ID_MEMBER, $boarddir, $modSettings, $txt, $context;

// Check Permission
isAllowedTo('downloads_view');


if (empty($modSettings['down_path']))
$modSettings['down_path'] = $boarddir . '/downloads/';


$id = (int) $_REQUEST['id'];

// Get the download information
$dbresult = db_query("
SELECT
f.filename, f.fileurl, f.orginalfilename, f.approved, f.credits, f.ID_CAT, f.ID_MEMBER
FROM {$db_prefix}down_file as f
WHERE f.ID_FILE = $id", __FILE__, __LINE__);
$row = mysql_fetch_assoc($dbresult);
mysql_free_result($dbresult);


// Check if File is approved
if ($row['approved'] == 0 && $ID_MEMBER != $row['ID_MEMBER'])
{
if (!allowedTo('downloads_manage'))
fatal_error($txt['downloads_error_file_notapproved'],false);
}

// Check if they can download from this category
GetCatPermission($row['ID_CAT'],'view');

// Check credits

// End Credit check

// Download File or Redirect to the download location
if ($row['fileurl'] != '')
{
$lastdownload = time();
// Update download count
$dbresult = db_query("
UPDATE {$db_prefix}down_file as f
SET f.totaldownloads = f.totaldownloads + 1, lastdownload = $lastdownload
WHERE f.ID_FILE = $id LIMIT 1", __FILE__, __LINE__);

// Redirect to the download
header("Location: " . $row['fileurl']);

exit;
}
else
{
$lastdownload = time();
// Update download count
$dbresult = db_query("
UPDATE {$db_prefix}down_file as f
SET f.totaldownloads = f.totaldownloads + 1, lastdownload = $lastdownload
WHERE f.ID_FILE = $id LIMIT 1", __FILE__, __LINE__);


$real_filename = $row['orginalfilename'];
$filename = $modSettings['down_path'] . $row['filename'];

// This is done to clear any output that was made before now. (would use ob_clean(), but that's PHP 4.2.0+...)
ob_end_clean();
if (!empty($modSettings['enableCompressedOutput']) && @version_compare(PHP_VERSION, '4.2.0') >= 0 && @filesize($filename) <= 4194304)
@ob_start('ob_gzhandler');
else
{
ob_start();
header('Content-Encoding: none');
}

// No point in a nicer message, because this is supposed to be an attachment anyway...
if (!file_exists($filename))
{
loadLanguage('Errors');

header('HTTP/1.0 404 ' . $txt['attachment_not_found']);
header('Content-Type: text/plain; charset=' . (empty($context['character_set']) ? 'ISO-8859-1' : $context['character_set']));

// We need to die like this *before* we send any anti-caching headers as below.
die('404 - ' . $txt['attachment_not_found']);
}



// If it hasn't been modified since the last time this attachement was retrieved, there's no need to display it again.
if (!empty($_SERVER['HTTP_IF_MODIFIED_SINCE']))
{
list($modified_since) = explode(';', $_SERVER['HTTP_IF_MODIFIED_SINCE']);
if (strtotime($modified_since) >= filemtime($filename))
{
ob_end_clean();

// Answer the question - no, it hasn't been modified .
header('HTTP/1.1 304 Not Modified');
exit;
}
}

// Check whether the ETag was sent back, and cache based on that...
$file_md5 = '"' . md5_file($filename) . '"';
if (!empty($_SERVER['HTTP_IF_NONE_MATCH']) && strpos($_SERVER['HTTP_IF_NONE_MATCH'], $file_md5) !== false)
{
ob_end_clean();

header('HTTP/1.1 304 Not Modified');
exit;
}

// Send the attachment headers.
header('Pragma: ');

if (!$context['browser']['is_gecko'])
header('Content-Transfer-Encoding: binary');

header('Last-Modified: ' . gmdate('D, d M Y H:i:s', filemtime($filename)) . ' GMT');
header('Accept-Ranges: bytes');
header('Set-Cookie:');
header('Connection: close');
header('ETag: ' . $file_md5);

if (filesize($filename) != 0)
{
$size = @getimagesize($filename);
if (!empty($size))
{
// What headers are valid?
$validTypes = array(
1 => 'gif',
2 => 'jpeg',
3 => 'png',
5 => 'psd',
6 => 'bmp',
7 => 'tiff',
8 => 'tiff',
9 => 'jpeg',
14 => 'iff',
);

// Do we have a mime type we can simpy use?
if (!empty($size['mime']))
header('Content-Type: ' . $size['mime']);
elseif (isset($validTypes[$size[2]]))
header('Content-Type: image/' . $validTypes[$size[2]]);
// Otherwise - let's think safety first... it might not be an image...
elseif (isset($_REQUEST['image']))
unset($_REQUEST['image']);
}
// Once again - safe!
elseif (isset($_REQUEST['image']))
unset($_REQUEST['image']);
}

if (!isset($_REQUEST['image']))
{
header('Content-Disposition: attachment; filename="' . $real_filename . '"');
header('Content-Type: application/octet-stream');
}

if (empty($modSettings['enableCompressedOutput']) || filesize($filename) > 4194304)
header('Content-Length: ' . filesize($filename));

// Try to buy some time...
@set_time_limit(0);

// For text files.....
if (!isset($_REQUEST['image']) && in_array(substr($real_filename, -4), array('.txt', '.css', '.htm', '.php', '.xml')))
{
if (strpos($_SERVER['HTTP_USER_AGENT'], 'Windows') !== false)
$callback = create_function('$buffer', 'return preg_replace(\'~[\r]?\n~\', "\r\n", $buffer);');
elseif (strpos($_SERVER['HTTP_USER_AGENT'], 'Mac') !== false)
$callback = create_function('$buffer', 'return preg_replace(\'~[\r]?\n~\', "\r", $buffer);');
else
$callback = create_function('$buffer', 'return preg_replace(\'~\r~\', "\r\n", $buffer);');
}

// Since we don't do output compression for files this large...
if (filesize($filename) > 4194304)
{
// Forcibly end any output buffering going on.
if (function_exists('ob_get_level'))
{
while (@ob_get_level() > 0)
@ob_end_clean();
}
else
{
@ob_end_clean();
@ob_end_clean();
@ob_end_clean();
}

$fp = fopen($filename, 'rb');
while (!feof($fp))
{
if (isset($callback))
echo $callback(fread($fp, 8192));
else
echo fread($fp, 8192);
flush();
}
fclose($fp);
}
// On some of the less-bright hosts, readfile() is disabled. It's just a faster, more byte safe, version of what's in the if.
elseif (isset($callback) || @readfile($filename) == null)
echo isset($callback) ? $callback(file_get_contents($filename)) : file_get_contents($filename);

obExit(false);

exit;
}


}

function ShowSubCats($cat,$g_manage)
{
global $txt, $db_prefix, $scripturl, $modSettings, $boardurl, $subcats_linktree, $user_info, $context;

if (empty($modSettings['down_url']))
{
$modSettings['down_url'] = $boardurl . '/downloads/';
}

if ($context['user']['is_guest'])
$groupid = -1;
else
$groupid = $user_info['groups'][0];


// List all the catagories
$dbresult = db_query("
SELECT
c.ID_CAT, c.title, p.view, c.roworder, c.description, c.image, c.filename
FROM {$db_prefix}down_cat AS c
LEFT JOIN {$db_prefix}down_catperm AS p ON (p.ID_GROUP = $groupid AND c.ID_CAT = p.ID_CAT)
WHERE c.ID_PARENT = $cat ORDER BY c.roworder ASC", __FILE__, __LINE__);
if (db_affected_rows() != 0)
{

echo '<br /><table cellspacing="0" cellpadding="10" border="0" align="center" width="90%" class="tborder">
<tr class="titlebg">
<td colspan="2">' . $txt['downloads_text_categoryname'] . '</td>
<td>' . $txt['downloads_text_categorydescription'] .'</td>
<td>' . $txt['downloads_text_totalfiles'] . '</td>
';
if ($g_manage)
echo '
<td>' . $txt['downloads_text_reorder'] . '</td>
<td>' . $txt['downloads_text_options'] . '</td>
</tr>';


while($row = mysql_fetch_assoc($dbresult))
{
// Check permission to show the downloads category
if ($row['view'] == '0')
continue;

$totalfiles = GetFileTotals($row['ID_CAT']);

echo '<tr class="windowbg2">';

if ($row['image'] == '' && $row['filename'] == '')
echo '<td colspan="2"><a href="' . $scripturl . '?action=downloads;cat=' . $row['ID_CAT'] . '">' . parse_bbc($row['title']) . '</a></td><td>' . parse_bbc($row['description']) . '</td>';
else
{
if ($row['filename'] == '')
echo '<td><a href="' . $scripturl . '?action=downloads;cat=' . $row['ID_CAT'] . '"><img src="' . $row['image'] . '" /></a></td>';
else
echo '<td><a href="' . $scripturl . '?action=downloads;cat=' . $row['ID_CAT'] . '"><img src="' . $modSettings['down_url'] . 'catimgs/' . $row['filename'] . '" /></a></td>';

echo '<td><a href="' . $scripturl . '?action=downloads;cat=' . $row['ID_CAT'] . '">' . parse_bbc($row['title']) . '</a></td><td>' . parse_bbc($row['description']) . '</td>';
}



// Show total files in the category
echo '<td align="center">' . $totalfiles . '</td>';

// Show Edit Delete and Order category
if ( $g_manage)
{
echo '<td><a href="' . $scripturl . '?action=downloads;sa=catup;cat=' . $row['ID_CAT'] . '">' . $txt['downloads_text_up'] . '</a> <a href="' . $scripturl . '?action=downloads;sa=catdown;cat=' . $row['ID_CAT'] . '">' . $txt['downloads_text_down'] . '</a></td>
<td><a href="' . $scripturl . '?action=downloads;sa=editcat;cat=' . $row['ID_CAT'] . '">' . $txt['downloads_text_edit'] . '</a> <a href="' . $scripturl . '?action=downloads;sa=deletecat;cat=' . $row['ID_CAT'] . '">' . $txt['downloads_text_delete'] . '</a>
<br /><br />
<a href="' . $scripturl . '?action=downloads;sa=catperm;cat=' . $row['ID_CAT'] . '">[' . $txt['downloads_text_permissions'] . ']</a>
</td>';

}


echo '</tr>';
if ($g_manage)
{
echo '<tr class="titlebg">
<td colspan="6"> <span class="smalltext">',($subcats_linktree != '' ? $txt['downloads_sub_cats'] . $subcats_linktree : ''),'</span></td>
</tr>';
}
else
echo '<tr class="titlebg">
<td colspan="4"> <span class="smalltext">',($subcats_linktree != '' ? $txt['downloads_sub_cats'] . $subcats_linktree : ''),'</span></td>
</tr>';



}
mysql_free_result($dbresult);
echo '</table><br /><br />';
}
}

function MainPageBlock($title,$type = 'recent')
{
global $db_prefix, $scripturl, $txt, $modSettings, $boardurl;

if (empty($modSettings['down_url']))
{
$modSettings['down_url'] = $boardurl . '/downloads/';
}


$maxrowlevel = 4;
echo '<table cellspacing="0" cellpadding="5" border="0" align="center" width="90%" class="tborder">
<tr class="titlebg">
<td align="center" colspan="4">', $title, '</td>
</tr>
';
//Check what type it is
$query = ' ';
switch($type)
{
case 'recent':
$query = "SELECT p.ID_FILE, p.commenttotal, p.totalratings, p.rating, p.filesize, p.views, p.title, p.ID_MEMBER, m.realName, p.date, p.description
FROM {$db_prefix}down_file as p
LEFT JOIN {$db_prefix}members AS m ON (m.ID_MEMBER = p.ID_MEMBER)
WHERE p.approved = 1 ORDER BY p.ID_FILE DESC LIMIT 4";
break;

case 'viewed':
$query = "SELECT p.ID_FILE, p.commenttotal, p.totalratings, p.rating, p.filesize, p.views, p.title, p.ID_MEMBER, m.realName, p.date, p.description
FROM {$db_prefix}down_file as p
LEFT JOIN {$db_prefix}members AS m ON (m.ID_MEMBER = p.ID_MEMBER)
WHERE p.approved = 1 ORDER BY p.views DESC LIMIT 4";
break;

case 'mostcomments':
$query = "SELECT p.ID_FILE, p.commenttotal, p.totalratings, p.rating, p.filesize, p.views, p.title, p.ID_MEMBER, m.realName, p.date, p.description
FROM {$db_prefix}down_file as p
LEFT JOIN {$db_prefix}members AS m ON (m.ID_MEMBER = p.ID_MEMBER)
WHERE p.approved = 1 ORDER BY p.commenttotal DESC LIMIT 4";
break;

case 'toprated':
$query = "SELECT p.ID_FILE, p.commenttotal, p.totalratings, p.rating, p.filesize, p.views, p.title, p.ID_MEMBER, m.realName, p.date, p.description
FROM {$db_prefix}down_file as p
LEFT JOIN {$db_prefix}members AS m ON (m.ID_MEMBER = p.ID_MEMBER)
WHERE p.approved = 1 ORDER BY p.rating DESC LIMIT 4";
break;
}
// Execute the SQL query
$dbresult = db_query($query, __FILE__, __LINE__);
$rowlevel = 0;
while($row = mysql_fetch_assoc($dbresult))
{
if ($rowlevel == 0)
echo '<tr class="windowbg2">';

echo '<td align="center"><a href="' . $scripturl . '?action=downloads;sa=view;id=' . $row['ID_FILE'] . '">',$row['title'],'</a><br />';
echo '<span class="smalltext">';
if (!empty($modSettings['down_set_t_rating']))
echo $txt['downloads_form_rating'] . GetStarsByPrecent(($row['totalratings'] != 0) ? ($row['rating'] / ($row['totalratings']* 5) * 100) : 0) . '<br />';

if (!empty($modSettings['down_set_t_views']))
echo $txt['downloads_text_views'] . $row['views'] . '<br />';
if (!empty($modSettings['down_set_t_filesize']))
echo $txt['downloads_text_filesize'] . round($row['filesize'] / 1024, 2) . 'KB<br />';
if (!empty($modSettings['down_set_t_date']))
echo $txt['downloads_text_date'] . timeformat($row['date']) . '<br />';
if (!empty($modSettings['down_set_t_comment']))
echo $txt['downloads_text_comments'] . ' (<a href="' . $scripturl . '?action=downloads;sa=view;id=' . $row['ID_FILE'] . '">' . $row['commenttotal'] . '</a>)<br />';
if (!empty($modSettings['down_set_t_username']))
{
if ($row['realName'] != '')
echo $txt['downloads_text_by'] . ' <a href="' . $scripturl . '?action=profile;u=' . $row['ID_MEMBER'] . '">' . $row['realName'] . '</a><br />';
else
echo $txt['downloads_text_by'] . ' ' . $txt['downloads_guest'] . '<br />';
}
echo '</span></td>';


if ($rowlevel < ($maxrowlevel-1))
$rowlevel++;
else
{
echo '</tr>';
$rowlevel = 0;
}
}
if ($rowlevel !=0)
{
echo '</tr>';
}

echo '
</table><br />';
// Free the Mysql resource
mysql_free_result($dbresult);

}
?>
[/codebox]

вот еще:
[codebox]
<?php
/*
Download System
Version 1.0
by:vbgamer45
http://www.smfhacks.com
Copyright 2007 SMFHacks.com

############################################
License Information:

Links to http://www.smfhacks.com must remain unless
branding free option is purchased.
#############################################

Downloads English Text Strings
*/

// Downloads.template.php Downloads

// Title string
$txt['downloads_text_title'] = 'Downloads';

// Main downloads strings
$txt['downloads_text_categoryname'] = 'Category Name';
$txt['downloads_text_categorydescription'] = 'Category Description';
$txt['downloads_text_totalfiles'] = 'Total Files';
$txt['downloads_text_reorder'] = 'Reorder';
$txt['downloads_text_options'] = 'Options';
$txt['downloads_text_category'] = 'Category';
$txt['downloads_text_parentcategory'] = 'Parent Category';
$txt['downloads_text_catnone'] = '(None)';

$txt['downloads_text_adminpanel'] = 'Downloads Admin Panel';
$txt['downloads_text_addcategory'] = 'Add Category';
$txt['downloads_text_cat_disableratings'] = 'Disable Download Ratings';
$txt['downloads_text_bbcsupport'] = '(BBC codes are supported)';
$txt['downloads_text_editcategory'] = 'Edit Category';
$txt['downloads_text_delcategory'] = 'Delete Category';
$txt['downloads_text_settings'] = 'Settings';
$txt['downloads_text_permissions'] = 'Permissions';
$txt['downloads_rep_deletefile'] = '[Delete Image]';

$txt['downloads_text_fileswaitapproval'] = 'Files waiting approval: ';
$txt['downloads_text_filecheckapproval'] = 'Check File Approval List';
$txt['downloads_text_comwaitapproval'] = 'Comments waiting approval: ';
$txt['downloads_text_comcheckapproval'] = 'Check Comments Approval List';

$txt['downloads_text_filereported'] = 'Files reported: ';
$txt['downloads_text_filecheckreported'] = 'Check Reported Files';

$txt['downloads_text_comreported'] = 'Comments reported: ';
$txt['downloads_text_comcheckreported'] = 'Check Reported Comments';

$txt['downloads_write_error'] = 'Warning Downloads path is not writable! ';
$txt['downloads_text_myfiles'] = '[MyFiles]';
$txt['downloads_text_search'] = '[Search]';
$txt['downloads_text_edit'] = '[Edit]';
$txt['downloads_text_delete'] = '[Delete]';
$txt['downloads_text_unapprove'] = '[UnApprove]';
$txt['downloads_text_approve'] = '[Approve]';
$txt['downloads_text_up'] = '[Up]';
$txt['downloads_text_down'] = '[Down]';
$txt['downloads_text_reportdownload'] = '[Report Download]';
$txt['downloads_text_delcomment'] = '[Delete Comment]';
$txt['downloads_text_edcomment'] = '[Edit Comment]';
$txt['downloads_text_repcomment'] = '[Report Comment]';

$txt['downloads_text_prev'] = 'Previous Download';
$txt['downloads_text_next'] = 'Next Download';
$txt['downloads_text_filesize'] = 'Filesize: ';
$txt['downloads_text_by'] = 'By:';
$txt['downloads_text_date'] = 'Date: ';
$txt['downloads_text_comments'] = 'Comments';
$txt['downloads_text_views'] = 'Views: ';
$txt['downloads_text_pages'] = 'Pages: ';
$txt['downloads_text_commentwait'] = 'Your comment will not appear until it has been approved.';

$txt['downloads_text_adddownload'] = 'Add a download';

$txt['downloads_text_returndownload'] = 'Return to Downloads';
$txt['downloads_text_returnfile'] = 'Return to File';
//Online strings
$txt['downloads_who_viewdownload'] = ' are viewing this download category.';
$txt['downloads_who_viewfile'] = ' are viewing this files.';
$txt['downloads_who_members'] = 'Members';
$txt['downloads_who_hidden'] = 'Hidden';

//Form Strings
$txt['downloads_form_title'] = 'Title:';
$txt['downloads_form_description'] = 'Description:';
$txt['downloads_form_icon'] = 'Category Icon Url:';
$txt['downloads_form_uploadicon'] = 'Upload Category Icon';
$txt['downloads_write_catpatherror'] = 'Warning Category Image Path is not writable! ';
$txt['downloads_form_filenameicon'] = 'Category Icon Filename:';

$txt['downloads_warn_category'] = 'Warning this WILL DELETE this category and ALL downloads, comments, ratings that category contains...';

$txt['downloads_form_adddownload'] = 'Add Download';
$txt['downloads_form_category'] = 'Category:';
$txt['downloads_form_keywords'] = 'Keywords:';
$txt['downloads_form_uploadfile'] = 'Upload File:';
$txt['downloads_form_uploadurl'] = 'Upload Url:';

$txt['downloads_form_additionaloptions'] = 'Additional Options:';
$txt['downloads_form_allowcomments'] = 'Allow comments to be posted on this download.';
$txt['downloads_form_notapproved'] = 'Your file will not appear in the downloads to others until it is approved.';
$txt['downloads_form_editdownload'] = 'Edit Download';
$txt['downloads_form_viewratings'] = 'View Ratings';
$txt['downloads_form_ratedownload'] = 'Rate Download';
$txt['downloads_form_norating'] = 'This download has not been rated yet.';
$txt['downloads_form_rating'] = 'Rating: ';
$txt['downloads_form_ratingby'] = ' by ';
$txt['downloads_form_ratingmembers'] = ' members.';
$txt['downloads_text_rating'] = 'Rating';

$txt['downloads_text_changeowner'] = 'Change Owner';

$txt['downloads_text_olddownload'] = 'Old Download';
$txt['downloads_text_deldownload'] = 'Download';

// View file
$txt['downloads_text_filestats'] = 'Download Stats:';

$txt['downloads_text_postedby'] = 'Posted by: ';
$txt['downloads_text_addcomment'] = 'Add Comment';
$txt['downloads_text_editcomment'] = 'Edit Comment';
$txt['downloads_text_reportcomment'] = 'Report Comment';
$txt['downloads_text_commodifiedby'] = 'Last modified by: ';
$txt['downloads_text_home'] = 'Downloads Home';

// Delete file
$txt['downloads_warn_deletedownload'] = 'Warning this will delete your download and you can not restore it.';
$txt['downloads_form_deldownload'] = 'Delete Download';
$txt['downloads_form_deldownload2'] = '[Delete Download]';

$txt['downloads_form_comment'] = 'Comment:';

$txt['downloads_form_reportdownload'] = 'Report Download';


$txt['downloads_form_managecats'] = 'Manage Categories';
$txt['downloads_form_approvedownloads'] = 'Approve Downloads';
$txt['downloads_form_reportdownloads'] = 'Reported Downloads';
$txt['downloads_form_approvecomments'] = 'Approve Comments';
$txt['downloads_form_approveallcomments'] = 'Approve All Comments';
$txt['downloads_form_reportedcomments'] = 'Reported Comments';
// Settings page
$txt['downloads_set_description'] = 'Allows you to edit the important settings for your downloads section.';
$txt['downloads_set_filesize'] = 'Max download filesize: ';
$txt['downloads_set_path'] = 'Downloads Path: ';
$txt['downloads_set_url'] = 'Downloads Url: ';
$txt['downloads_set_whoonline'] = 'Display who is viewing a download';
$txt['downloads_set_commentschoice'] = 'Allow the user to toggle if comments can be shown on a download or not.';
$txt['downloads_set_permissionnotice'] = 'Lastly! Do not forget to make sure the permissions are set for each group, in order for them to view and add to the downloads.';
$txt['downloads_set_editpermissions'] = 'Edit Permissions';
$txt['downloads_set_files_per_page'] = 'Downloads per page:';
$txt['downloads_set_commentsappr'] = 'Comments require approval?';
$txt['downloads_set_commentsnewest'] = 'Display newest comments first.';
$txt['downloads_set_showratings'] = 'Show download ratings';
$txt['downloads_set_enable_multifolder'] = 'Enable multiple folders for downloads storage';
$txt['downloads_index_toprated'] = 'Show top rated downloads on the main page';
$txt['downloads_index_recent'] = 'Show the most recent downloads on the main page';
$txt['downloads_index_mostviewed'] = 'Show the most viewed downloads on the main page';
$txt['downloads_index_mostcomments'] = 'Show the most commented downloads on the main page';
$txt['downloads_index_showtop'] = 'Show the index blocks on top of downloads';

$txt['downloads_set_count_child'] = 'Counts child categories downloads totals. <br />(Uses more queries)';
$txt['downloads_set_show_quickreply'] = 'Show quick reply on comment view';

// Category Display Settings
$txt['downloads_set_t_downloads'] = 'Show total downloads';
$txt['downloads_set_t_views'] = 'Show total views';
$txt['downloads_set_t_filesize'] = 'Show filesize';
$txt['downloads_set_t_date'] = 'Show date';
$txt['downloads_set_t_comment'] = 'Show comment total';
$txt['downloads_set_t_username'] = 'Show username';
$txt['downloads_set_t_rating'] = 'Show rating';
$txt['downloads_catthumb_settings'] = 'Category Display Settings';

// Category Size Width and Size Height
$txt['downloads_set_cat_height'] = 'Max category image height:';
$txt['downloads_set_cat_width'] = 'Max category image width:';

// Downloads Display Settings
$txt['downloads_files_settings'] = 'Downloads Display Settings';
$txt['downloads_set_file_prevnext'] = 'Show previous and next links';
$txt['downloads_set_file_desc'] = 'Show description';
$txt['downloads_set_file_title'] = 'Show title';
$txt['downloads_set_file_views'] = 'Show views';
$txt['downloads_set_file_downloads'] = 'Show download count';
$txt['downloads_set_file_lastdownload'] = 'Show last download';
$txt['downloads_set_file_poster'] = 'Show posted by';
$txt['downloads_set_file_date'] = 'Show date';
$txt['downloads_set_file_showfilesize'] = 'Show filesize';
$txt['downloads_set_file_showrating'] = 'Show rating';
$txt['downloads_set_file_keywords'] = 'Show keywords';

$txt['downloads_save_settings'] = 'Save Settings';


// Shop Settings
$txt['downloads_shop_settings'] = '<b>Shop Points Settings</b><br /><span class="smalltext">Only if SMF Shop is installed</span>';
$txt['downloads_shop_fileadd'] = 'Download Add Points: ';
$txt['downloads_shop_commentadd'] = 'Comment Add Points: ';


// BBC and Image Links code
$txt['downloads_txt_download_linking'] = 'Linking Codes';
$txt['downloads_set_showcode_directlink'] = 'Show Direct Link Code';
$txt['downloads_set_showcode_htmllink'] = 'Show Html Link Code';


$txt['downloads_txt_directlink'] = 'Direct Link';
$txt['downloads_txt_htmllink'] = 'Html Link';

// Approve list
$txt['downloads_app_download'] = 'Download';
$txt['downloads_app_title'] = 'Title';
$txt['downloads_app_description'] = 'Description';
$txt['downloads_app_date'] = 'Date';
$txt['downloads_app_membername'] = 'Member Name';

$txt['downloads_text_withselected'] = 'With Selected';
$txt['downloads_text_performaction'] = 'Perform Action';

// Report list
$txt['downloads_rep_filelink'] = 'Download Link';
$txt['downloads_rep_reportby'] = 'Reported by';
$txt['downloads_rep_comment'] = 'Comment';
$txt['downloads_rep_viewdownload'] = 'View Download';
$txt['downloads_rep_deletedownload'] = '[Delete Download]';
$txt['downloads_rep_delete'] = '[Delete Report]';
$txt['downloads_rep_org_comment'] = 'Original Comment';
// Search Page
$txt['downloads_search_download'] = 'Search for Downloads';
$txt['downloads_search_for'] = 'Search For:';
$txt['downloads_search_title'] = 'Search Download Title';
$txt['downloads_search_description'] = 'Search Download Description';
$txt['downloads_search_keyword'] = 'Search Keywords';
$txt['downloads_search'] = 'Search';

$txt['downloads_search_days30'] = 'Last 30 Days';
$txt['downloads_search_days60'] = 'Last 60 Days';
$txt['downloads_search_days90'] = 'Last 90 Days';
$txt['downloads_search_days180'] = 'Last 180 Days';
$txt['downloads_search_days365'] = 'Last 365 Days';
$txt['downloads_search_alltime'] = 'All Time';
$txt['downloads_search_daterange'] = 'Date Range: ';

$txt['downloads_search_membername'] = 'Posted By (Member Name): ';
$txt['downloads_search_advsearch'] = 'Advanced Search Options';



$txt['downloads_searchresults'] = 'Search Results';

// MyFiles
$txt['downloads_myfiles'] = 'MyFiles';
$txt['downloads_myfiles_app'] = 'Download Approved';
$txt['downloads_myfiles_notapp'] = 'Download Not Approved';


// Index Page Strings
$txt['downloads_main_recent'] = 'Recent Downloads';
$txt['downloads_main_viewed'] = 'Most Viewed';
$txt['downloads_main_toprated'] = 'Top Rated';
$txt['downloads_main_mostcomments'] = 'Most Commented';

// Stats
$txt['downloads_text_stats'] = 'Stats';
$txt['downloads_stats_last'] = 'Last 10 Downloads Uploaded';
$txt['downloads_stats_viewed'] = 'Most Viewed Downloads';
$txt['downloads_stats_toprated'] = 'Top Rated Downloads';
$txt['downloads_stats_mostcomments'] = 'Most Commented';
$txt['downloads_stats_title'] = 'Download Stats';
$txt['downloads_stats_totalviews'] = 'Total Views';
$txt['downloads_stats_totalcomments'] = 'Total Comments';
$txt['downloads_stats_totalfize'] = 'Total Downloads Filesize';
$txt['downloads_stats_totalfiles'] = 'Total Files';
$txt['downloads_stats_viewstats'] = 'View Downloads Stats';

// Add Sub Category
$txt['downloads_text_addsubcat'] = 'Add Sub Category';
// Board
$txt['downloads_text_postingoptions'] = 'Posting Options';
$txt['downloads_text_boardname'] = 'Board Name:';
$txt['downloads_postingoptions_info'] = 'Information: If you select a board, on a new download that is approved a post will be created.';
$txt['downloads_posting_showlinktodownload'] = 'Show link to main download page';
$txt['downloads_posting_locktopic'] = 'Lock Topic';

// File Space and Quota information
$txt['downloads_filespace'] = 'File Space Manager';
$txt['downloads_filespace_note'] = 'Thumbnails do not count towards a users space limit';
$txt['downloads_filespace_filesize'] = 'Space Used';
$txt['downloads_filespace_list'] = 'List Files';
$txt['downloads_filespace_list_title'] = 'File Listing';
$txt['downloads_filespace_recount'] = 'Recount Space Used';
$txt['downloads_filespace_groupquota_title'] = 'Member Group Space Limits';
$txt['downloads_filespace_groupname'] = 'Member Group Name';
$txt['downloads_filespace_limit'] = 'File Space Limit';
$txt['downloads_filespace_addquota'] = 'Add Quota Limit';

// Category permission strings
$txt['downloads_text_catpermlist'] = 'Category Permission List';
$txt['downloads_text_catperm'] = 'Category Permission';
$txt['downloads_text_addperm'] = 'Add Permission';



//#############################
//Downloads.php Strings
//#############################
$txt['no_ua_ix'] = 'You need no UA-IX!';
$txt['downloads_error_cat_title'] = 'You need to enter a category title!';
$txt['downloads_error_no_file_selected'] = 'No download selected.';
$txt['downloads_error_file_notapproved'] = 'This download is not approved yet and you do not have permission to view it.';
$txt['downloads_error_no_title'] = 'You need to enter a download title.';
$txt['downloads_error_no_cat'] = 'You need to select a category.';

$txt['downloads_error_file_filesize'] = 'Download exceeds max filesize. Max Filesize is ';
$txt['downloads_error_no_download'] = 'No uploaded download found.';
$txt['downloads_error_no_downloadexist'] = 'No download exists';
$txt['downloads_error_noedit_permission'] = 'You do not have permission to edit that download.';
$txt['downloads_error_nodelete_permission'] = 'You do not have permission to delete that download.';
$txt['downloads_error_no_comment'] = 'You did not enter a comment!';
$txt['downloads_error_not_allowcomment'] = 'Wait a second...This download does not allow comments...';
$txt['downloads_error_no_com_selected'] = 'No comment selected.';
$txt['downloads_error_no_user_selected'] = 'No user selected.';
$txt['downloads_error_no_report_selected'] = 'No report selected.';
$txt['downloads_error_no_search'] = 'You did not enter anything to search for...';
$txt['downloads_error_search_small'] = 'Search string is too small needs to be greater than three characters.';
$txt['downloads_error_nocomedit_permission'] = 'You do not have permission to edit that comment.';
$txt['downloads_error_no_rating_selected'] = 'No rating selected.';
$txt['downloads_error_already_rated'] = 'You have already rated this download.';
$txt['downloads_error_space_limit'] = 'Unable to upload the file it exceeds your quota limit. Quota information: ';
$txt['downloads_error_noquota'] = 'You did not enter a quota limit.';
$txt['downloads_error_nogroup'] = 'No member group selected.';
$txt['downloads_error_quotaexist'] = 'A quota already exits for that group. Delete the old quota first.';
$txt['downloads_error_nouser_exists'] = 'No user exists.';
$txt['downloads_error_nocat_above'] = 'There is no category above the current one.';
$txt['downloads_error_nocat_below'] = 'There is no category below the current one.';
$txt['downloads_error_norate_own'] = 'You can not rate your own download.';
$txt['downloads_error_no_catexists'] = 'You need to create a category first before you upload a download.';
$txt['downloads_error_invalid_picture'] = 'Invalid Picture file';

// Quota Limits
$txt['downloads_quotagrouplimit'] ='Quota Limit';
$txt['downloads_quotagspaceused'] ='Quota Space Used';
$txt['downloads_quotaspaceleft'] ='Quota Space Left';

// Permissions
$txt['downloads_perm_no_view'] = 'You are not allowed to view this category.';
$txt['downloads_perm_no_add'] = 'You are not allowed to add a download in this category.';
$txt['downloads_perm_no_edit'] = 'You are not allowed to edit that download in this category.';
$txt['downloads_perm_no_delete'] = 'You are not allowed to delete that download in this category.';
$txt['downloads_perm_no_ratefile'] = 'You are not allowed to rate that download in this category.';
$txt['downloads_perm_no_editcomment'] = 'You are not allowed to edit that comment in this category.';
$txt['downloads_perm_no_addcomment'] = 'You are not allowed to leave comments in this category.';
$txt['downloads_perm_no_report'] = 'You are not allowed to report content in this category.';
// Notify comment
$txt['downloads_notify_body'] = 'A new comment a has been made on your posted download.' . "\n\n" . 'You can see it at' . "\n" . '%s' . "\n\n";
$txt['downloads_notify_subject'] = 'New Comment: %s';
$txt['downloads_notify_title'] = 'Notify me of comments';

$txt['downloads_perm_view'] = 'View';
$txt['downloads_perm_add'] = 'Add Download';
$txt['downloads_perm_edit'] = 'Edit own Download';
$txt['downloads_perm_delete'] = 'Delete own Download';
$txt['downloads_perm_addcomment'] = 'Add Comment';

$txt['downloads_permerr_permexist'] = 'A permission already exists for this group and category please delete it first.';

$txt['downloads_perm_allowed'] = 'Allowed';
$txt['downloads_perm_denied'] = 'Denied';



$txt['downloads_guest'] = 'Guest';


// Custom Fields
$txt['downloads_custom_fields'] = 'Custom Fields';


$txt['downloads_custom_title'] = 'Field Title';
$txt['downloads_custom_default_value'] = 'Default Value';
$txt['downloads_custom_required'] = 'Required';
$txt['downloads_custom_addfield'] = 'Add Field';

$txt['downloads_custom_err_title'] = 'Custom field name is required.';
$txt['downloads_error_nocustom_above'] = 'There is no custom field above the current one.';
$txt['downloads_error_nocustom_below'] = 'There is no custom field below the current one.';
$txt['downloads_err_req_custom_field'] = 'You have a required field that is missing information called ';


$txt['downloads_err_checkfailed'] = 'Security check failed';

$txt['downloads_click_enlarge'] = 'Click to enlarge';
$txt['downloads_sub_cats'] = 'Sub Categories: ';

// Sorting Options

$txt['downloads_txt_sortby'] = 'Sort By: ';
$txt['downloads_txt_orderby'] = 'Order: ';
$txt['downloads_txt_sort_go'] = 'Go';

$txt['downloads_txt_sort_title'] ='Title';
$txt['downloads_txt_sort_date'] = 'Date';
$txt['downloads_txt_sort_mostviewed'] = 'Views';
$txt['downloads_txt_sort_mostcomments'] = 'Comments';
$txt['downloads_txt_sort_mostrated'] = 'Rating';
$txt['downloads_txt_sort_filesize'] = 'File Size';
$txt['downloads_txt_sort_mostdowns'] = 'Downloads';
$txt['downloads_txt_sort_membername'] = 'Membername';

$txt['downloads_txt_sort_asc'] = 'Ascending';
$txt['downloads_txt_sort_desc'] = 'Descending';


$txt['downloads_error_img_size_height'] = 'Image exceeds size requirements. Your height was: ';
$txt['downloads_error_img_size_width'] = ' Your width was: ';


// Category Display

$txt['downloads_cat_title'] = 'Title';
$txt['downloads_cat_rating'] = 'Rating';
$txt['downloads_cat_downloads'] = 'Downloads';
$txt['downloads_cat_views'] = 'Views';
$txt['downloads_cat_filesize'] = 'Filesize';
$txt['downloads_cat_date'] = 'Date';
$txt['downloads_cat_comments'] = 'Comments';
$txt['downloads_cat_membername'] = 'Membername';
$txt['downloads_cat_options'] = 'Options';

$txt['downloads_text_lastdownload'] = 'Last Download: ';
$txt['downloads_text_lastdownload2'] = 'Never';
?>
[/code]

это чё

ой бле...неасилил, слишком много букф...

в самом верху код опеределения айпи клиента со списком сети!!
нужно этот код вставить (который в самом верху) в мод Download System форум (smf) если айпи нету в списке, то выйти...

Это форум SMF
извеняюсь, у вас нету тэга чтобы большой код писать, в общем я параленьные темы тут запостил...

http://lafox.net/support/index.php?show ... ntry159435
http://linuxforum.ru/index.php?showtopic=56873

жестковато
а инструкции к хаку не прицепили?

какую инструцию?

я не много затупил, там просто... вставил

доки, факи, гайды

доки чтобы сделать мод где-то есть, но я их не нашел, говорили что сложновато...

а тут скрипт вставить в цикл нужно было