| ID | Name | Description | MIME type | Size (bytes) | Post(s) | Created | Modified | Hits | '.$row['id'].''); print(' | '.$row['name'].' | '); print(''.$row['description'].' | '); print(''.$row['mimeType'].' | '); print(''.strlen($row['content']).' | '); $sql = 'SELECT postID FROM '.get_option('dbfile_post2file_table').' WHERE dbfileID='.$row['id']; if (!($idResult = mysql_query($sql, $connection))) { db_file::showerror(); } while ($postID = mysql_fetch_array($idResult, MYSQL_ASSOC)) { $postIDs[] = ''.$postID['postID'].''; } print(''.(empty($postIDs) ? '' : implode(', ', $postIDs)).' | '); print(''.$row['created'].' | '); print(''.$row['modified'].' | '); print(''.$row['hits'].' | '); print('View | '); print('Download | '); print('Edit | '); print('Delete | '); print("\n"); $rowCount++; } mysql_free_result($result); ?>
|---|
* $myFileName = 'myFile.jpg';
* if (db_file::isImage($myFileName) {
* print('The filename is an image!');
* }
*
* Resulting in the output: The filename is an image!
*
* @param $fileName the filename to test
* @return true if the specified filename is an image, false otherwise.
*/
function isImage($fileName) {
// FIXME rename to isPreview or something...
return in_array(strtolower(db_file::getExtension($fileName)), explode(' ', get_option('dbfile_preview_types'))) != FALSE;
}
function getExtension($fileName) {
return db_file::rightback($fileName, '.');
}
function right($haystack, $needle, $start = 0) {
$position = strpos($haystack, $needle, $start);
return $position == FALSE ? '' : substr($haystack, $position + 1);
}
function rightback($haystack, $needle, $start = 0) {
$position = strrpos($haystack, $needle, $start);
return $position == FALSE ? '' : substr($haystack, $position + 1);
}
/**
* Checks that the current user is authorized to handle dbfiles (upload/edit/remove).
* The level of the user must be at or above the option 'dbfile_upload_minlevel'.
*/
function checkAccess() {
global $user_level;
get_currentuserinfo();
if ($user_level < get_option('dbfile_upload_minlevel')) {
db_file::authorizationFailure();
}
}
/**
* Show an authorization failure error message to the user.
*/
function authorizationFailure() {
die('You are not authorized to perform this operation');
}
/**
* Shows an error and stops the script
*/
function showerror() {
if (db_file::$trace) {
$s = mysql_errno().' : '.mysql_error().' '.print_r(debug_backtrace(), true);
}
if (mysql_error()) {
die('Database error '.$s);
} else {
die('Could not connect to the database '.$s);
}
}
/**
* Secure the user data by escaping characters and shortening the input string
*
* @param $input the data to "clean"
* @param $maxlength maximum number of characters to return.
*/
function clean($input, $maxlength) {
return EscapeShellCmd(substr($input, 0, $maxlength));
}
/**
* Checks that the specified dbfile ID is correctly "formatted". If not, makes the execution die.
*/
function checkId($id) {
if (!is_numeric($id)) {
die('Invalid dbfile id');
}
}
function debug($message) {
if (db_file::$trace) {
print($message."