<?php
// ----------------------------------------------------------------------
// Copyright (c) 2005-07 by Tammy Keefer
// Valid HTML 4.01 Transitional
// Based on eFiction 1.1
// Copyright (C) 2003 by Rebecca Smallwood.
// http://efiction.sourceforge.net/
// ----------------------------------------------------------------------
// LICENSE
//
// This program is free software; you can redistribute it and/or
// modify it under the terms of the GNU General Public License (GPL)
// as published by the Free Software Foundation; either version 2
// of the License, or (at your option) any later version.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU General Public License for more details.
//
// To read the license please visit http://www.gnu.org/copyleft/gpl.html
// ----------------------------------------------------------------------
//Begin basic page setup
$current = "series";
if($_GET['action'] == "add" || $_GET['action'] == "edit") $displayform = 1;
include ("header.php");
//make a new TemplatePower object
if(file_exists("$skindir/default.tpl")) $tpl = new TemplatePower( "$skindir/default.tpl" );
else $tpl = new TemplatePower("default_tpls/default.tpl");
if(file_exists("$skindir/listings.tpl")) $tpl->assignInclude( "listings", "./$skindir/listings.tpl" );
else $tpl->assignInclude( "listings", "./default_tpls/listings.tpl" );
$tpl->assignInclude( "header", "./$skindir/header.tpl" );
$tpl->assignInclude( "footer", "./$skindir/footer.tpl" );
include("includes/pagesetup.php");
$seriesid = isset($_GET['seriesid']) && isNumber($_GET['seriesid']) ? $_GET['seriesid'] : false;
$showlist = true;
$inorder = isset($_GET['inorder']) && isNumber($_GET['inorder']) ? $_GET['inorder'] : false;
$add = isset($_GET['add']) ? $_GET['add'] : false;
// before doing anything else check if the visitor is logged in. If they are, check if they're an admin. If not, check that they're
// trying to edit/delete/etc. their own stuff then get the penname
if(!isMEMBER) accessDenied( );
if(isADMIN && uLEVEL < 3) $admin = 1;
else $admin = 0;
if(isADMIN && uLEVEL == 3) {
list($admincats) = dbrow(dbquery("SELECT categories FROM ".TABLEPREFIX."fanfiction_authorprefs WHERE uid = '".USERUID."'"));
if(isset($seriesid)) {
$series = dbquery("SELECT uid, isopen, catid from ".TABLEPREFIX."fanfiction_series WHERE seriesid='$seriesid' LIMIT 1");
list($owner, $seriesopen, $catid) = dbrow($series);
if(uLEVEL == 3 && $admincats != 0) {
$seriescats = explode(",", $catid);
$adcats = explode(",", $admincats);
foreach($seriescats as $cat) {
if(in_array($cat, $adcats)) $admin = 1;
}
}
}
}
if(!$allowseries && !$admin) accessDenied( );
if($allowseries == 1 && !$admin) {
list($count) = dbrow(dbquery("SELECT COUNT(sid) FROM ".TABLEPREFIX."fanfiction_stories WHERE uid = '".USERUID."'"));
if($count == 0) accessDenied( );
}
if($action == "validate") {
$inorder = isset($_GET['inorder']) && isNumber($_GET['inorder']) ? $_GET['inorder'] : 0;
$valid = dbquery("UPDATE ".TABLEPREFIX."fanfiction_inseries SET confirmed = 1 WHERE seriesid = '$seriesid' AND inorder = '$inorder' LIMIT 1");
if($valid) {
$output .= write_message(_ACTIONSUCCESSFUL);
$showlist = true;
}
}
if($add == "series" || ($action == "add" && !$add) || $action == "edit") {
if(isset($_GET['cat']) && !empty($_GET['cat'])) $cat = $_GET['cat'];
else $cat = -1;
$isopen = isset($_GET['isopen']) ? $_GET['isopen'] : 0;
if(isset($_POST['submit'])) {
$title = addslashes(escapestring(strip_tags($_POST['title'], $allowed_tags)));
$summary = addslashes(escapestring(descript(strip_tags($_POST["summary"], $allowed_tags))));
#$category = isset($_POST['catid']) ? explode(",", $_POST['catid']) : array();
if ($multiplecats) $category = isset($_POST['catid']) ? explode(",", $_POST['catid']) : array();
else $category = isset($_POST['catid']) ? $_POST['catid'] : array();
$category = array_filter($category, "isNumber");
if($category) $category = implode(",", $category);
else $category = "";
$open = isset($_POST['open']) && isNumber($_POST['open']) ? $_POST['open'] : 0;
$characters = isset($_POST['charid']) ? $_POST['charid'] : array();
$characters = array_filter($characters, "isNumber");
if($characters) $charid = implode(",", $characters);
else $charid = "";
$classes = array( );
foreach($classtypelist as $type => $cinfo) {
if(isset($_POST["classes_".$type])) {
$opts = is_array($_POST["classes_".$type]) ? array_filter($_POST["classes_".$type], "isNumber") : array( );
$classes = array_merge($opts, $classes);
}
}
$classes = implode(",", $classes);
if(!empty($_POST['uid']) && isNumber($_POST['uid'])) $owner = $_POST['uid'];
else $owner = USERUID;
if($title == "" || $summary == "") {
$output .= write_error(_REQUIREDINFO);
}
else if(find_naughty($title) || find_naughty($summary)) {
$output .= write_error(_NAUGHTYWORDS);
}
else {
$title = replace_naughty($title);
$summary = replace_naughty($summary);
if($action == "edit") {
$seriesid = $_POST['seriesid'];
dbquery("UPDATE ".TABLEPREFIX."fanfiction_series SET title = '$title', summary ='$summary', catid = '$category', isopen = '$open', characters = '$charid', classes = '$classes' WHERE seriesid = '$seriesid'");
$codequery = dbquery("SELECT * FROM ".TABLEPREFIX."fanfiction_codeblocks WHERE code_type = 'editseries'");
while($code = dbassoc($codequery)) {
eval($code['code_text']);
}
if($logging && $admin) {
$seriesinfo = dbquery("SELECT title, uid FROM ".TABLEPREFIX."fanfiction_series WHERE seriesid = '$seriesid'");
list($title, $uid) = dbrow($seriesinfo);
if($uid != USERUID) dbquery("INSERT INTO ".TABLEPREFIX."fanfiction_log (`log_action`, `log_uid`, `log_ip`, `log_type`, `log_timestamp`) VALUES('".escapestring(sprintf(_LOG_ADMIN_EDIT_SERIES, USERPENNAME, USERUID, $title, $seriesid))."', '".USERUID. "', INET6_ATON('".$_SERVER['REMOTE_ADDR']."'), 'ED', " . time() . ")");
}
$output = write_message(_ACTIONSUCCESSFUL."<br />"._BACK2ACCT);
}
else {
dbquery("INSERT INTO ".TABLEPREFIX."fanfiction_series (title, summary, catid, isopen, uid, characters, classes) VALUES('$title', '$summary', '$category', '$open', '$owner', '$charid', '$classes')");
$seriesid = dbinsertid();
dbquery("UPDATE ".TABLEPREFIX."fanfiction_stats SET series = series + 1");
$codequery = dbquery("SELECT * FROM ".TABLEPREFIX."fanfiction_codeblocks WHERE code_type = 'addseries'");
while($code = dbassoc($codequery)) {
eval($code['code_text']);
}
$add = "stories";
unset($_POST['submit']);
}
}
}
else {
$output = "<div id=\"pagetitle\">".($action == "edit" ? _EDITSERIES : ($add == "stories" ? _ADD2SERIES : _ADDSERIES))."</div>
<form METHOD=\"POST\" class='tblborder' style='width: 75%; margin: 0 auto; padding: 10px;' name=\"form\" action=\"series.php?action=$action&add=".(!empty($add) ? $add : "series").(!empty($seriesid) ? "&seriesid=$seriesid" : "")."\">";
if($action == "edit" && !isset($POST['submit'])) {
$seriesquery = dbquery(_SERIESQUERY." AND seriesid = '$seriesid' LIMIT 1");
$series = dbassoc($seriesquery);
$series = array_map("stripslashes", $series);
$owner = $series['uid'];
$output .= "<input type=\"hidden\" name=\"seriesid\" value=\"$seriesid\">";
}
else $series = array("uid" => 0, "title" => "", "summary" => "");
$output .= "<div>";
if($admin) {
$authorquery = dbquery("SELECT "._PENNAMEFIELD." as penname, "._UIDFIELD." as uid FROM "._AUTHORTABLE." ORDER BY penname");
$output .= "<label for=\"uid=\">"._AUTHOR.":</label> <select name=\"uid\" id=\"uid\">";
while($authorresult = dbassoc($authorquery)) {
$output .= "<option value=\"".$authorresult['uid']."\"".((USERUID == $authorresult['uid'] && !$seriesid) || (is_array($series) && $series['uid'] == $authorresult['uid']) ? " selected" : "").">".$authorresult['penname']."</option>";
}
$output .= "</select><font color=\"red\">*</font><br />";
}
$output .= "<label for=\"title\">"._TITLE.":</label> <font color=\"red\">*</font> <input type=\"text\" class=\"textbox=\" name=\"title\" id=\"title\" value=\"".(isset($series) ? htmlentities($series['title']) : "")."\" maxlength=\"200\" size=\"60\"><input type=\"hidden\" value=\"".(isset($series) ? $series['uid'] : "")."\"><br />
<label for=\"summary\">"._SUMMARY.":</label><font color=\"red\">*</font><br /><textarea rows=\"6\" id=\"summary\" name=\"summary\" cols=\"58\">".(isset($series) ? $series['summary'] : "")."</textarea><br />";
if($tinyMCE)
$output .= "<div class='tinytoggle'><input type='checkbox' name='toggle' onclick=\"toogleEditorMode('summary');\" checked><label for='toggle'>"._TINYMCETOGGLE."</label></div>";
if(!$multiplecats) $output .= "<input type=\"hidden\" name=\"catid[]\" id=\"catid\" value=\"1\">";
else {
$catid = isset($series['catid']) ? explode(",", $series['catid']) : array( );
include("includes/categories.php");
$output .= "<input type=\"hidden\" name=\"formname\" value=\"series\">";
}
if(count($charlist) > 0) {
$output .= "<div style=\"float: left; width: 99%;\"><div style=\"float: left; padding: 5px; width: 47%;\"><label for=\"charid\">"._CHARACTERS.":</label> <br /><select size=\"5\" style=\"width: 99%;\" name=\"charid[]\" id=\"charid\" multiple>";
$chars = isset($series['characters']) ? explode(",", $series['characters']) : array( );
$catid[] = -1;
foreach($charlist as $char => $vars) {
if(is_array($catid) && in_array($vars['catid'], $catid)) $output .= "<option value=\"$char\"".(in_array($char, $chars) ? " selected" : "").">".$vars['name']."</option>";
}
$output .= "</select></div>";
}
$classes = isset($series['classes']) ? explode(",", $series['classes']) : array( );
foreach($classtypelist as $type => $typevars) {
$output .= "<div style=\"float: left; padding: 5px; width: 47%;\"><label for=\"classes_{$type}\">{$typevars['title']}:</label><br /><select size=\"5\" style=\"width: 99%;\" name=\"classes_{$type}[]\" id=\"$type\" multiple>";
foreach($classlist as $c => $vars) {
if($vars['type'] == $type) $output .= "<option value=\"$c\"".(in_array($c, $classes) ? " selected" : "").">".$vars['name']."</option>";
}
$output .= "</select></div>";
}
$isopen = isset($series['isopen']) ? $series['isopen'] : 0;
$output .= "<div style=\"clear:left;\"> </div></div><label for=\"open\">"._SERIESTYPE.":</label> <select id=\"open\" name=\"open\">
<option value=\"2\"".($isopen == "2" ? " selected" : "").">"._OPEN."</option>
<option value=\"1\"".($isopen == "1" ? " selected" : "").">"._MODERATED."</option>
<option value=\"0\"".(!$isopen ? " selected" : "").">"._CLOSED."</option>
</select><div style=\"margin: 1em;\">"._OPENNOTE."</div>";
$codequery = dbquery("SELECT * FROM ".TABLEPREFIX."fanfiction_codeblocks WHERE code_type = 'seriesform'");
while($code = dbassoc($codequery)) {
eval($code['code_text']);
}
$output .= "<div style=\"text-align: center;\"><input type=\"submit\" class=\"submit\" name=\"submit\" value=\""._SUBMIT."\"></div></div></form>";
if($action == "add") {
$output .= "<center>"._SERIESNOTE."</center>";
$showlist = false;
}
}
}
if($add == "stories") {
if(isset($seriesid) && isset($_POST['submit'])) {
if(!$seriesid) accessDenied( );
list($owner, $isopen, $title) = dbrow(dbquery("SELECT uid, isopen, title FROM ".TABLEPREFIX."fanfiction_series WHERE seriesid = '$seriesid' LIMIT 1"));
$seriescount = dbquery("SELECT count(seriesid) FROM ".TABLEPREFIX."fanfiction_inseries WHERE seriesid = '$seriesid'");
list($count) = dbrow($seriescount);
$seriesitems = dbquery("SELECT sid, subseriesid FROM ".TABLEPREFIX."fanfiction_inseries WHERE seriesid = '$seriesid'");
while($item = dbassoc($seriesitems)) {
if($item['sid']) $items[] = $item['sid'];
if($item['subseriesid']) $subs[] = $item['subseriesid'];
}
if($admin || USERUID == $owner || $isopen == 2 ) $confirmed = 1;
else {
$confirmed = 0;
include("includes/emailer.php");
$seriesMail = sprintf(_NEWSERIESITEMS, stripslashes($title));
$subject = sprintf("_SERIESITEMSSUBS", stripslashes($title));
$mailInfo = dbassoc(dbquery("SELECT "._PENNAMEFIELD." as penname, "._EMAILFIELD." as email FROM "._AUTHORTABLE." WHERE "._UIDFIELD." = '$owner' LIMIT 1"));
sendemail($mailInfo['penname'], $mailInfo['email'], $sitename, $siteemail, $subject, $seriesMail, "html");
}
if(!empty($_POST["sid"])) {
foreach($_POST["sid"] as $story) {
if(!isNumber($story)) continue;
if(!isset($items) || !is_array($items) || !in_array($story, $items)) {
$count++;
$validate = dbquery("SELECT validated FROM ".TABLEPREFIX."fanfiction_stories WHERE sid = '$story' LIMIT 1");
list($valid) = dbrow($validate);
if($valid) dbquery("INSERT INTO ".TABLEPREFIX."fanfiction_inseries (seriesid, sid, inorder, confirmed) VALUES('$seriesid', '$story', '$count', '$confirmed')");
}
}
}
$seriescount = dbquery("SELECT count(seriesid) FROM ".TABLEPREFIX."fanfiction_inseries WHERE seriesid = '$seriesid'");
list($count) = dbrow($seriescount);
if(!empty($_POST["subseriesid"])) {
foreach($_POST["subseriesid"] as $subseries) {
if(!isNumber($subseries)) continue;
if(!isset($subs) || !in_array($subseries, $subs)) {
$count++;
dbquery("INSERT INTO ".TABLEPREFIX."fanfiction_inseries (seriesid, subseriesid, inorder) VALUES('$seriesid', '$subseries', '$count')");
}
}
}
$numstories = count(storiesInSeries($seriesid));
dbquery("UPDATE ".TABLEPREFIX."fanfiction_series SET numstories = '$numstories' WHERE seriesid = $seriesid LIMIT 1");
seriesreview($seriesid);
$showlist = true;
$output .= write_message(_ACTIONSUCCESSFUL);
}
else {
$output = "<div id=\"pagetitle\">".($action == "edit" ? _EDITSERIES : ($add == "stories" ? _ADD2SERIES : _ADDSERIES))."</div>
<form METHOD=\"POST\" style='width: 90%; margin: 0 auto;' name=\"form\" action=\"series.php?action=$action&add=".(!empty($add) ? $add : "series").(!empty($seriesid) ? "&seriesid=$seriesid" : "")."\">";
$output .= "<input type=\"hidden\" name=\"seriesid\" value=\"$seriesid\">";
$series = dbquery("SELECT title, uid, isopen FROM ".TABLEPREFIX."fanfiction_series WHERE seriesid = '$seriesid' LIMIT 1");
list($title, $owner) = dbrow($series);
$output .= "<div class='sectionheader'>"._SERIES.": ".stripslashes($title)."</div>";
if(($admin || USERUID == $owner ) && isset($_GET['stories']) && $_GET['stories'] == "others") {
if($let == _OTHER) $letter= _PENNAMEFIELD." REGEXP '^[^a-z]'";
else $letter = _PENNAMEFIELD." LIKE '$let%'";
$pagelink = "series.php?action=$action&add=stories&stories=others&seriesid=$seriesid&";
$authorlink = "<a href=\"series.php?action=$action&add=stories&seriesid=$seriesid&stories=";
$countquery = _MEMBERCOUNT." WHERE ap.stories > 0".(isset($letter) ? " AND $letter" : "");
$authorquery = _MEMBERLIST." WHERE ap.stories > 0".(isset($letter) ? " AND $letter" : "");
include("includes/members_list.php");
$showlist = false;
}
else {
$stories = dbquery("SELECT title, sid FROM ".TABLEPREFIX."fanfiction_stories WHERE validated > 0 AND uid = '".(isset($_GET["stories"]) && isNumber($_GET['stories']) ? $_GET["stories"] : USERUID)."' ORDER BY title ASC");
$seriesstories = dbquery("SELECT sid FROM ".TABLEPREFIX."fanfiction_inseries WHERE seriesid = '$seriesid'");
while($story = dbassoc($seriesstories)) {
$selectedstories["$story[sid]"] = 1;
}
if($admin || USERUID == $owner) $output .= "<div style=\"text-align: center;\"><a href=\"series.php?action=$action&add=$add&stories=others&seriesid=$seriesid\">"._CHOOSEAUTHOR."</a></div>";
$output .= "<table style=\"width: 500px; margin: 0 auto;\" class=\"tblborder\"><tr><th class=\"tblborder\">"._STORIES."</th></tr>";
$numstories = 0;
while($story = dbassoc($stories)) {
if(!empty($selectedstories[$story['sid']])) continue;
$output .= "<tr><td><input type=\"checkbox\" class=\"checkbox\" value=\"".$story['sid']."\" name=\"sid[]\">".stripslashes($story['title'])."</td></tr>";
$numstories++;
}
if($numstories == 0) $output .= "<tr><td align=\"center\">"._NORESULTS."</td></tr>";
$series2 = dbquery("SELECT title, seriesid FROM ".TABLEPREFIX."fanfiction_series WHERE uid = '".(isset($_GET['stories']) && isNumber($_GET['stories']) ? $_GET['stories'] : USERUID)."' ORDER BY title ASC");
$output .= "<tr><th class=\"tblborder\">"._SERIES."</th></tr>";
$numseries = 0;
while($series = dbassoc($series2)) {
if($series['seriesid'] != $seriesid) {
$output .= "<tr><td><input type=\"checkbox\" class=\"checkbox\" value=\"".$series['seriesid']."\" name=\"subseriesid[]\">".stripslashes($series['title'])."</td></tr>";
$numseries++;
}
}
if($numseries < 1) $output .= "<tr><td align=\"center\">"._NORESULTS."</td></tr>";
$output .="</table><p style=\"text-align: center;\">"._SERIESNOTE2."<br /><input type=\"submit\" class=\"button\" name=\"submit\" value=\"submit\"></p></form>";
$showlist = false;
}
}
}
if($action == "delete") {
global $seriesid;
$confirmed = isset($_GET["confirmed"]) ? $_GET['confirmed'] : false;
$output = "<div id=\"pagetitle\">".(!empty($inorder) ? _REMOVEFROM : _DELETESERIES)."</div>";
if($confirmed == "no") {
$output .= write_message(_ACTIONCANCELLED);
}
else if($confirmed == "yes" && $seriesid) {
if(!empty($inorder)) {
$info = dbquery("SELECT inorder, subseriesid, sid FROM ".TABLEPREFIX."fanfiction_inseries WHERE seriesid = '$seriesid' AND inorder = '$inorder' LIMIT 1");
list($inorder, $subseriesid, $sid) = dbrow($info);
$countquery = dbquery("SELECT count(seriesid) FROM ".TABLEPREFIX."fanfiction_inseries WHERE seriesid = '$seriesid'");
list($count) = dbrow($countquery);
dbquery("DELETE FROM ".TABLEPREFIX."fanfiction_inseries WHERE seriesid = '$seriesid' AND ".($sid ? "sid = '$sid'" : "subseriesid = '$subseriesid'"). " LIMIT 1");
if($inorder < $count) dbquery("UPDATE ".TABLEPREFIX."fanfiction_inseries SET inorder = (inorder - 1) WHERE seriesid = '$seriesid' AND inorder > '$inorder'");
$output .= write_message(_ACTIONSUCCESSFUL);
$showlist = true;
}
else {
$seriesinfo = dbquery("SELECT title, uid FROM ".TABLEPREFIX."fanfiction_series WHERE seriesid = '$seriesid'");
list($title, $uid) = dbrow($seriesinfo);
include("includes/deletefunctions.php");
deleteSeries($seriesid);
$output .= write_message(_ACTIONSUCCESSFUL);
if($admin || USERUID == $uid) $showlist = true;
$seriesid = false;
}
}
else {
$output .= write_message((!empty($inorder) ? _CONFIRMREMOVE : _CONFIRMDELETE)."<br /><br />[ <a href=\"series.php?action=delete&confirmed=yes&seriesid=$seriesid".(!empty($inorder) ? "&inorder=$inorder" : "")."\">"._YES."</a> |
<a href=\"series.php?action=delete&confirmed=no\">"._NO."</a> ]");
$showlist = false;
}
}
if($showlist) {
$go = isset($_GET['go']) ? $_GET['go'] : false;
if($go != "" && $seriesid != "") {
if(!empty($_GET['sid']) && isNumber($_GET['sid'])) $sid = $_GET["sid"];
if(!empty($_GET['subseriesid']) && isNumber($_GET['subseriesid'])) $subseriesid = $_GET["subseriesid"];
if(isset($inorder) && (isset($sid) || isset($subseriesid))) {
if($go == "up") $oneabove = $inorder - 1;
else $oneabove = $inorder + 1;
if($oneabove >= 1) {
dbquery("UPDATE ".TABLEPREFIX."fanfiction_inseries SET inorder = '$inorder' WHERE inorder = '$oneabove' AND seriesid = '$seriesid'");
dbquery("UPDATE ".TABLEPREFIX."fanfiction_inseries SET inorder = '$oneabove' WHERE ".(isset($sid) ? "sid = '$sid'" : "subseriesid = '$subseriesid'")." AND seriesid = '$seriesid'");
}
}
}
if(empty($action) || $action == "manage") $output .= "<div id=\"pagetitle\">"._MANAGESERIES."</div>";
if($seriesid) {
list($owner, $isopen) = dbrow(dbquery("SELECT uid,isopen FROM ".TABLEPREFIX."fanfiction_series WHERE seriesid = '$seriesid' LIMIT 1"));
$result = dbquery("SELECT series.seriesid AS mainid, series.inorder, confirmed, series.sid, series.subseriesid, stories.title AS storytitle, sub.title AS subtitle FROM ".TABLEPREFIX."fanfiction_inseries AS series LEFT JOIN ".TABLEPREFIX."fanfiction_stories AS stories ON ( series.sid = stories.sid ) LEFT JOIN ".TABLEPREFIX."fanfiction_series AS sub ON ( sub.seriesid = series.subseriesid ) WHERE series.seriesid = '$seriesid' ORDER BY series.inorder");
$output .= "<table style=\"margin: 1em auto;\" cellpadding=\"0\" class=\"tblborder\">
<tr><th class=\"tblborder\">"._TITLE."</th><th class=\"tblborder\" width=\"26\">"._ORDER."</th><th class=\"tblborder\">"._OPTIONS."</th></tr>";
$rows = dbnumrows($result);
while($series = dbassoc($result)) {
$output .= "<tr><td class=\"tblborder\"><a href=\"".($series['subseriesid'] == 0 ? "viewstory.php?sid=".$series['sid']."\">".stripslashes($series['storytitle']) : "viewseries.php?seriesid=$series[subseriesid]\">".stripslashes($series['subtitle']))."</a></td>
<td class=\"tblborder\" align=\"center\">".($series['inorder'] == $rows ? "" : "<a href=\"series.php?action=manage&go=down&inorder=".$series['inorder']."&".($series['sid'] ? "sid=".$series['sid'] : "subseriesid=".$series['subseriesid'])."&seriesid=$seriesid\"><img src=\"images/arrowdown.gif\" align=\"right\" border=\"0\" width=\"13\" height=\"18\" alt=\""._DOWN."\"></a>").
($series['inorder'] == 1 ? " " : "<a href=\"series.php?action=manage&go=up&inorder=$series[inorder]&".($series['sid'] ? "sid=".$series['sid'] : "subseriesid=".$series['subseriesid'])."&seriesid=$seriesid\"><img src=\"images/arrowup.gif\" border=\"0\" width=\"13\" height=\"18\" align=\"left\" alt=\""._UP."\"></a>")."</td>
<td class=\"tblborder\">".($owner == USERUID || $admin ? "<a href=\"series.php?action=delete&seriesid=$seriesid&inorder=".$series['inorder']."\">"._REMOVE."</a>" : " ").($isopen == 1 && empty($series['confirmed']) && USERUID == $owner ? " | <a href=\"series.php?action=validate&seriesid=$seriesid&inorder=".$series['inorder']."\">"._VALIDATE."</a>" : "")."</td></tr>";
}
$output .= "<tr><td colspan=\"3\" align=\"center\"><a href=\"series.php?action=add&add=stories&seriesid=$seriesid\">"._ADD2SERIES."</a></td></tr></table>";
}
else {
$result = dbquery("SELECT * from ".TABLEPREFIX."fanfiction_series WHERE uid = '".USERUID."' ORDER BY title");
$output .= "<table style=\"margin: 0 auto;\" cellpadding=\"0\" cellspacing=\"0\" class=\"tblborder\">
<tr><th class=\"tblborder\">"._TITLE."</th><th class=\"tblborder\">"._OPTIONS."</th></tr>";
while($series = dbassoc($result)) {
$output .= "<tr><td class=\"tblborder\"><a href=\"viewseries.php?seriesid=".$series['seriesid']."\">".stripslashes($series['title'])."</a></td><td class=\"tblborder\"><a href=\"series.php?action=add&add=stories&seriesid=".$series['seriesid']."\">"._ADD2SERIES."</a> | <a href=\"series.php?action=edit&seriesid=$series[seriesid]\">"._EDIT."</a> | <a href=\"series.php?action=delete&seriesid=$series[seriesid]\">"._DELETE."</a></td></tr>";
}
$output .= "<tr><td colspan='2' align='center' class=\"tblborder\"><a href='series.php?action=add'>"._ADDSERIES."</a></td></tr></table>";
}
}
$tpl->assign("output", $output);
$tpl->printToScreen( );
?>