<?php
require ("config.php");
require_once ("funcsv2.php");
//Check session
session_start();
if (!$_SESSION['admin_logged_in'])
{
//check fails
header("Location: authenticate.php?status=session");
exit();
}
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<title>Edit Torrent in Database</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<link rel="stylesheet" href="./css/style.css" type="text/css" />
</head>
<body>
<h1>Edit Torrent in Database</h1>
<h2>This page allows you to edit torrents that are already in the database. If you need to change other things about
the torrent please <a href="deleter.php">delete it</a> and add it again.</h2>
<?php
//connect to database
if ($GLOBALS["persist"])
$db = mysql_pconnect($dbhost, $dbuser, $dbpass) or die(errorMessage() . "Tracker error: can't connect to database - " . mysql_error() . "</p>");
else
$db = mysql_connect($dbhost, $dbuser, $dbpass) or die(errorMessage() . "Tracker error: can't connect to database - " . mysql_error() . "</p>");
mysql_select_db($database) or die(errorMessage() . "Error selecting database.</p>");
//get filename from URL string
if (isset($_GET['filename'])) {
$filename = htmlentities($_GET['filename']);
}
//if not edit database or filename set, display all torrents as links
if (!isset($_POST["editdatabase"]) && !isset($filename))
{
?>
<p><strong>Click on a file to edit it:</strong></p>
<table border="0">
<?php
if ($GLOBALS["customtitle"] == "true")
$query = "SELECT title, filename FROM ".$prefix."namemap ORDER BY title ASC";
else $query = "SELECT filename FROM ".$prefix."namemap ORDER BY filename ASC";
$rows = mysql_query($query) or die(errorMessage() . "Can't do SQL query - " . mysql_error() . "</p>");
while ($data = mysql_fetch_row($rows))
{
if ($GLOBALS["customtitle"] == "true")
echo "<tr><td><a href=\"" . htmlentities($_SERVER['PHP_SELF']) . "?filename=" . rawurlencode($data[1]) . "\">" . $data[0] . "</a></td></tr>\n";
else echo "<tr><td><a href=\"" . htmlentities($_SERVER['PHP_SELF']) . "?filename=" . rawurlencode($data[0]) . "\">" . $data[0] . "</a></td></tr>\n";
}
?>
</table>
<?php
}
if (isset($filename) && !isset($_POST["editdatabase"]))
{
$query = "SELECT info_hash,title,filename,url,pubDate FROM ".$prefix."namemap WHERE filename = '" . mysql_real_escape_string($filename) . "'";
$rows = mysql_query($query) or die(errorMessage() . "Can't do SQL query - " . mysql_error() . "</p>");
$data = mysql_fetch_row($rows); //should be only one entry...
?>
<form action="<?php echo htmlentities($_SERVER['PHP_SELF']);?>" method="POST">
<input type="hidden" name="editdatabase" value="1">
<input type="hidden" name="<?php echo $data[0];?>" value="<?php echo $data[0];?>">
<input type="hidden" name="<?php echo $data[0] . "_old_filename";?>" value="<?php echo $data[2];?>">
<table border="0">
<tr><td><b>Info Hash: </b></td><td><?php echo $data[0];?></td></tr>
<tr><td><b>Title:</b></td><td><input type="text" name="<?php echo $data[0] . "_title";?>" size="60" value="<?php echo $data[1];?>"></td></tr>
<tr><td><b>Filename:</b></td><td><input type="text" name="<?php echo $data[0] . "_filename";?>" size="60" value="<?php echo $data[2];?>"></td></tr>
<tr><td><b>URL:</b></td><td><input type="text" name="<?php echo $data[0] . "_url";?>" size="60" value="<?php echo $data[3];?>"></td></tr>
<tr><td><b>Publication Date:</b></td><td><input type="text" name="<?php echo $data[0] . "_pubDate";?>" size="60" value="<?php echo $data[4];?>"></td></tr>
<tr><td><hr></td><td><hr></td></tr>
</table>
<br>
<input type="submit" value="Edit Entry">
</form>
<?php
}
//write data to database
if (isset($_POST["editdatabase"]))
{
$temp_counter = (count($_POST)-1)/5;
array_shift($_POST);
for ($i = 0; $i < $temp_counter; $i++)
{
$temp_hash = htmlspecialchars(array_shift($_POST));
$old_filename = htmlspecialchars(array_shift($_POST));
$temp_title = htmlspecialchars(array_shift($_POST));
$temp_filename = array_shift($_POST);
$temp_filename = Ltrim($temp_filename);
$temp_filename = htmlspecialchars(rtrim($temp_filename));
$temp_url = htmlspecialchars(array_shift($_POST));
$temp_pubDate = htmlspecialchars(array_shift($_POST));
$query = "UPDATE ".$prefix."namemap SET title=\"$temp_title\", filename=\"$temp_filename\", url=\"$temp_url\", pubDate=\"$temp_pubDate\" WHERE info_hash=\"$temp_hash\"";
mysql_query($query) or die(errorMessage() . "Can't do SQL query - " . mysql_error() . "</p>");
//if filename changes, rename .torrent
if ($old_filename != $temp_filename)
rename("torrents/" . $old_filename . ".torrent", "torrents/" . $temp_filename . ".torrent");
}
//run RSS generator
require_once("rss_generator.php");
echo "<br><p class=\"success\">The database was edited successfully!</p>\n";
}
?>
<br>
<br>
<a href="admin.php"><img src="images/admin.png" border="0" class="icon" alt="Admin Page" title="Admin Page" /></a><a href="admin.php">Return to Admin Page</a>
</body>
</html>