Chris@76: <?php
Chris@76: 
Chris@76: /**
Chris@76:  * Simple Machines Forum (SMF)
Chris@76:  *
Chris@76:  * @package SMF
Chris@76:  * @author Simple Machines http://www.simplemachines.org
Chris@76:  * @copyright 2011 Simple Machines
Chris@76:  * @license http://www.simplemachines.org/about/smf/license.php BSD
Chris@76:  *
Chris@76:  * @version 2.0.4
Chris@76:  */
Chris@76: 
Chris@76: if (!defined('SMF'))
Chris@76: 	die('Hacking attempt...');
Chris@76: 
Chris@76: /*	This file concerns itself almost completely with theme administration.
Chris@76: 	Its tasks include changing theme settings, installing and removing
Chris@76: 	themes, choosing the current theme, and editing themes.  This is done in:
Chris@76: 
Chris@76: 	void ThemesMain()
Chris@76: 		- manages the action and delegates control to the proper sub action.
Chris@76: 		- loads both the Themes and Settings language files.
Chris@76: 		- checks the session by GET or POST to verify the sent data.
Chris@76: 		- requires the user not be a guest.
Chris@76: 		- is accessed via ?action=admin;area=theme.
Chris@76: 
Chris@76: 	void ThemeAdmin()
Chris@76: 		- administrates themes and their settings, as well as global theme
Chris@76: 		  settings.
Chris@76: 		- sets the settings theme_allow, theme_guests, and knownThemes.
Chris@76: 		- loads the template Themes.
Chris@76: 		- requires the admin_forum permission.
Chris@76: 		- accessed with ?action=admin;area=theme;sa=admin.
Chris@76: 
Chris@76: 	void ThemeList()
Chris@76: 		- lists the available themes.
Chris@76: 		- provides an interface to reset the paths of all the installed themes.
Chris@76: 
Chris@76: 	void SetThemeOptions()
Chris@76: 		// !!!
Chris@76: 
Chris@76: 	void SetThemeSettings()
Chris@76: 		- saves and requests global theme settings. ($settings)
Chris@76: 		- loads the Admin language file.
Chris@76: 		- calls ThemeAdmin() if no theme is specified. (the theme center.)
Chris@76: 		- requires an administrator.
Chris@76: 		- accessed with ?action=admin;area=theme;sa=settings&th=xx.
Chris@76: 
Chris@76: 	void RemoveTheme()
Chris@76: 		- removes an installed theme.
Chris@76: 		- requires an administrator.
Chris@76: 		- accessed with ?action=admin;area=theme;sa=remove.
Chris@76: 
Chris@76: 	void PickTheme()
Chris@76: 		- allows user or administrator to pick a new theme with an interface.
Chris@76: 		- can edit everyone's (u = 0), guests' (u = -1), or a specific user's.
Chris@76: 		- uses the Themes template. (pick sub template.)
Chris@76: 		- accessed with ?action=admin;area=theme;sa=pick.
Chris@76: 
Chris@76: 	void ThemeInstall()
Chris@76: 		- installs new themes, either from a gzip or copy of the default.
Chris@76: 		- requires an administrator.
Chris@76: 		- puts themes in $boardurl/Themes.
Chris@76: 		- assumes the gzip has a root directory in it. (ie default.)
Chris@76: 		- accessed with ?action=admin;area=theme;sa=install.
Chris@76: 
Chris@76: 	void WrapAction()
Chris@76: 		- allows the theme to take care of actions.
Chris@76: 		- happens if $settings['catch_action'] is set and action isn't found
Chris@76: 		  in the action array.
Chris@76: 		- can use a template, layers, sub_template, filename, and/or function.
Chris@76: 
Chris@76: 	void SetJavaScript()
Chris@76: 		- sets a theme option without outputting anything.
Chris@76: 		- can be used with javascript, via a dummy image... (which doesn't
Chris@76: 		  require the page to reload.)
Chris@76: 		- requires someone who is logged in.
Chris@76: 		- accessed via ?action=jsoption;var=variable;val=value;session_var=sess_id.
Chris@76: 		- does not log access to the Who's Online log. (in index.php..)
Chris@76: 
Chris@76: 	void EditTheme()
Chris@76: 		- shows an interface for editing the templates.
Chris@76: 		- uses the Themes template and edit_template/edit_style sub template.
Chris@76: 		- accessed via ?action=admin;area=theme;sa=edit
Chris@76: 
Chris@76: 	function convert_template($output_dir, $old_template = '')
Chris@76: 		// !!!
Chris@76: 
Chris@76: 	function phpcodefix(string string)
Chris@76: 		// !!!
Chris@76: 
Chris@76: 	function makeStyleChanges(&$old_template)
Chris@76: 		// !!!
Chris@76: 
Chris@76: 	// !!! Update this for the new package manager?
Chris@76: 	Creating and distributing theme packages:
Chris@76: 	---------------------------------------------------------------------------
Chris@76: 		There isn't that much required to package and distribute your own
Chris@76: 		themes... just do the following:
Chris@76: 		- create a theme_info.xml file, with the root element theme-info.
Chris@76: 		- its name should go in a name element, just like description.
Chris@76: 		- your name should go in author. (email in the email attribute.)
Chris@76: 		- any support website for the theme should be in website.
Chris@76: 		- layers and templates (non-default) should go in those elements ;).
Chris@76: 		- if the images dir isn't images, specify in the images element.
Chris@76: 		- any extra rows for themes should go in extra, serialized.
Chris@76: 		   (as in array(variable => value).)
Chris@76: 		- tar and gzip the directory - and you're done!
Chris@76: 		- please include any special license in a license.txt file.
Chris@76: 	// !!! Thumbnail?
Chris@76: */
Chris@76: 
Chris@76: // Subaction handler.
Chris@76: function ThemesMain()
Chris@76: {
Chris@76: 	global $txt, $context, $scripturl;
Chris@76: 
Chris@76: 	// Load the important language files...
Chris@76: 	loadLanguage('Themes');
Chris@76: 	loadLanguage('Settings');
Chris@76: 
Chris@76: 	// No funny business - guests only.
Chris@76: 	is_not_guest();
Chris@76: 
Chris@76: 	// Default the page title to Theme Administration by default.
Chris@76: 	$context['page_title'] = $txt['themeadmin_title'];
Chris@76: 
Chris@76: 	// Theme administration, removal, choice, or installation...
Chris@76: 	$subActions = array(
Chris@76: 		'admin' => 'ThemeAdmin',
Chris@76: 		'list' => 'ThemeList',
Chris@76: 		'reset' => 'SetThemeOptions',
Chris@76: 		'settings' => 'SetThemeSettings',
Chris@76: 		'options' => 'SetThemeOptions',
Chris@76: 		'install' => 'ThemeInstall',
Chris@76: 		'remove' => 'RemoveTheme',
Chris@76: 		'pick' => 'PickTheme',
Chris@76: 		'edit' => 'EditTheme',
Chris@76: 		'copy' => 'CopyTemplate',
Chris@76: 	);
Chris@76: 
Chris@76: 	// !!! Layout Settings?
Chris@76: 	if (!empty($context['admin_menu_name']))
Chris@76: 	{
Chris@76: 		$context[$context['admin_menu_name']]['tab_data'] = array(
Chris@76: 			'title' => $txt['themeadmin_title'],
Chris@76: 			'help' => 'themes',
Chris@76: 			'description' => $txt['themeadmin_description'],
Chris@76: 			'tabs' => array(
Chris@76: 				'admin' => array(
Chris@76: 					'description' => $txt['themeadmin_admin_desc'],
Chris@76: 				),
Chris@76: 				'list' => array(
Chris@76: 					'description' => $txt['themeadmin_list_desc'],
Chris@76: 				),
Chris@76: 				'reset' => array(
Chris@76: 					'description' => $txt['themeadmin_reset_desc'],
Chris@76: 				),
Chris@76: 				'edit' => array(
Chris@76: 					'description' => $txt['themeadmin_edit_desc'],
Chris@76: 				),
Chris@76: 			),
Chris@76: 		);
Chris@76: 	}
Chris@76: 
Chris@76: 	// Follow the sa or just go to administration.
Chris@76: 	if (isset($_GET['sa']) && !empty($subActions[$_GET['sa']]))
Chris@76: 		$subActions[$_GET['sa']]();
Chris@76: 	else
Chris@76: 		$subActions['admin']();
Chris@76: }
Chris@76: 
Chris@76: function ThemeAdmin()
Chris@76: {
Chris@76: 	global $context, $boarddir, $modSettings, $smcFunc;
Chris@76: 
Chris@76: 	loadLanguage('Admin');
Chris@76: 	isAllowedTo('admin_forum');
Chris@76: 
Chris@76: 	// If we aren't submitting - that is, if we are about to...
Chris@76: 	if (!isset($_POST['submit']))
Chris@76: 	{
Chris@76: 		loadTemplate('Themes');
Chris@76: 
Chris@76: 		// Make our known themes a little easier to work with.
Chris@76: 		$knownThemes = !empty($modSettings['knownThemes']) ? explode(',',$modSettings['knownThemes']) : array();
Chris@76: 
Chris@76: 		// Load up all the themes.
Chris@76: 		$request = $smcFunc['db_query']('', '
Chris@76: 			SELECT id_theme, value AS name
Chris@76: 			FROM {db_prefix}themes
Chris@76: 			WHERE variable = {string:name}
Chris@76: 				AND id_member = {int:no_member}
Chris@76: 			ORDER BY id_theme',
Chris@76: 			array(
Chris@76: 				'no_member' => 0,
Chris@76: 				'name' => 'name',
Chris@76: 			)
Chris@76: 		);
Chris@76: 		$context['themes'] = array();
Chris@76: 		while ($row = $smcFunc['db_fetch_assoc']($request))
Chris@76: 			$context['themes'][] = array(
Chris@76: 				'id' => $row['id_theme'],
Chris@76: 				'name' => $row['name'],
Chris@76: 				'known' => in_array($row['id_theme'], $knownThemes),
Chris@76: 			);
Chris@76: 		$smcFunc['db_free_result']($request);
Chris@76: 
Chris@76: 		// Can we create a new theme?
Chris@76: 		$context['can_create_new'] = is_writable($boarddir . '/Themes');
Chris@76: 		$context['new_theme_dir'] = substr(realpath($boarddir . '/Themes/default'), 0, -7);
Chris@76: 
Chris@76: 		// Look for a non existent theme directory. (ie theme87.)
Chris@76: 		$theme_dir = $boarddir . '/Themes/theme';
Chris@76: 		$i = 1;
Chris@76: 		while (file_exists($theme_dir . $i))
Chris@76: 			$i++;
Chris@76: 		$context['new_theme_name'] = 'theme' . $i;
Chris@76: 	}
Chris@76: 	else
Chris@76: 	{
Chris@76: 		checkSession();
Chris@76: 
Chris@76: 		if (isset($_POST['options']['known_themes']))
Chris@76: 			foreach ($_POST['options']['known_themes'] as $key => $id)
Chris@76: 				$_POST['options']['known_themes'][$key] = (int) $id;
Chris@76: 		else
Chris@76: 			fatal_lang_error('themes_none_selectable', false);
Chris@76: 
Chris@76: 		if (!in_array($_POST['options']['theme_guests'], $_POST['options']['known_themes']))
Chris@76: 				fatal_lang_error('themes_default_selectable', false);
Chris@76: 
Chris@76: 		// Commit the new settings.
Chris@76: 		updateSettings(array(
Chris@76: 			'theme_allow' => $_POST['options']['theme_allow'],
Chris@76: 			'theme_guests' => $_POST['options']['theme_guests'],
Chris@76: 			'knownThemes' => implode(',', $_POST['options']['known_themes']),
Chris@76: 		));
Chris@76: 		if ((int) $_POST['theme_reset'] == 0 || in_array($_POST['theme_reset'], $_POST['options']['known_themes']))
Chris@76: 			updateMemberData(null, array('id_theme' => (int) $_POST['theme_reset']));
Chris@76: 
Chris@76: 		redirectexit('action=admin;area=theme;' . $context['session_var'] . '=' . $context['session_id'] . ';sa=admin');
Chris@76: 	}
Chris@76: }
Chris@76: 
Chris@76: function ThemeList()
Chris@76: {
Chris@76: 	global $context, $boarddir, $boardurl, $smcFunc;
Chris@76: 
Chris@76: 	loadLanguage('Admin');
Chris@76: 	isAllowedTo('admin_forum');
Chris@76: 
Chris@76: 	if (isset($_POST['submit']))
Chris@76: 	{
Chris@76: 		checkSession();
Chris@76: 
Chris@76: 		$request = $smcFunc['db_query']('', '
Chris@76: 			SELECT id_theme, variable, value
Chris@76: 			FROM {db_prefix}themes
Chris@76: 			WHERE variable IN ({string:theme_dir}, {string:theme_url}, {string:images_url}, {string:base_theme_dir}, {string:base_theme_url}, {string:base_images_url})
Chris@76: 				AND id_member = {int:no_member}',
Chris@76: 			array(
Chris@76: 				'no_member' => 0,
Chris@76: 				'theme_dir' => 'theme_dir',
Chris@76: 				'theme_url' => 'theme_url',
Chris@76: 				'images_url' => 'images_url',
Chris@76: 				'base_theme_dir' => 'base_theme_dir',
Chris@76: 				'base_theme_url' => 'base_theme_url',
Chris@76: 				'base_images_url' => 'base_images_url',
Chris@76: 			)
Chris@76: 		);
Chris@76: 		$themes = array();
Chris@76: 		while ($row = $smcFunc['db_fetch_assoc']($request))
Chris@76: 			$themes[$row['id_theme']][$row['variable']] = $row['value'];
Chris@76: 		$smcFunc['db_free_result']($request);
Chris@76: 
Chris@76: 		$setValues = array();
Chris@76: 		foreach ($themes as $id => $theme)
Chris@76: 		{
Chris@76: 			if (file_exists($_POST['reset_dir'] . '/' . basename($theme['theme_dir'])))
Chris@76: 			{
Chris@76: 				$setValues[] = array($id, 0, 'theme_dir', realpath($_POST['reset_dir'] . '/' . basename($theme['theme_dir'])));
Chris@76: 				$setValues[] = array($id, 0, 'theme_url', $_POST['reset_url'] . '/' . basename($theme['theme_dir']));
Chris@76: 				$setValues[] = array($id, 0, 'images_url', $_POST['reset_url'] . '/' . basename($theme['theme_dir']) . '/' . basename($theme['images_url']));
Chris@76: 			}
Chris@76: 
Chris@76: 			if (isset($theme['base_theme_dir']) && file_exists($_POST['reset_dir'] . '/' . basename($theme['base_theme_dir'])))
Chris@76: 			{
Chris@76: 				$setValues[] = array($id, 0, 'base_theme_dir', realpath($_POST['reset_dir'] . '/' . basename($theme['base_theme_dir'])));
Chris@76: 				$setValues[] = array($id, 0, 'base_theme_url', $_POST['reset_url'] . '/' . basename($theme['base_theme_dir']));
Chris@76: 				$setValues[] = array($id, 0, 'base_images_url', $_POST['reset_url'] . '/' . basename($theme['base_theme_dir']) . '/' . basename($theme['base_images_url']));
Chris@76: 			}
Chris@76: 
Chris@76: 			cache_put_data('theme_settings-' . $id, null, 90);
Chris@76: 		}
Chris@76: 
Chris@76: 		if (!empty($setValues))
Chris@76: 		{
Chris@76: 			$smcFunc['db_insert']('replace',
Chris@76: 				'{db_prefix}themes',
Chris@76: 				array('id_theme' => 'int', 'id_member' => 'int', 'variable' => 'string-255', 'value' => 'string-65534'),
Chris@76: 				$setValues,
Chris@76: 				array('id_theme', 'variable', 'id_member')
Chris@76: 			);
Chris@76: 		}
Chris@76: 
Chris@76: 		redirectexit('action=admin;area=theme;sa=list;' . $context['session_var'] . '=' . $context['session_id']);
Chris@76: 	}
Chris@76: 
Chris@76: 	loadTemplate('Themes');
Chris@76: 
Chris@76: 	$request = $smcFunc['db_query']('', '
Chris@76: 		SELECT id_theme, variable, value
Chris@76: 		FROM {db_prefix}themes
Chris@76: 		WHERE variable IN ({string:name}, {string:theme_dir}, {string:theme_url}, {string:images_url})
Chris@76: 			AND id_member = {int:no_member}',
Chris@76: 		array(
Chris@76: 			'no_member' => 0,
Chris@76: 			'name' => 'name',
Chris@76: 			'theme_dir' => 'theme_dir',
Chris@76: 			'theme_url' => 'theme_url',
Chris@76: 			'images_url' => 'images_url',
Chris@76: 		)
Chris@76: 	);
Chris@76: 	$context['themes'] = array();
Chris@76: 	while ($row = $smcFunc['db_fetch_assoc']($request))
Chris@76: 	{
Chris@76: 		if (!isset($context['themes'][$row['id_theme']]))
Chris@76: 			$context['themes'][$row['id_theme']] = array(
Chris@76: 				'id' => $row['id_theme'],
Chris@76: 			);
Chris@76: 		$context['themes'][$row['id_theme']][$row['variable']] = $row['value'];
Chris@76: 	}
Chris@76: 	$smcFunc['db_free_result']($request);
Chris@76: 
Chris@76: 	foreach ($context['themes'] as $i => $theme)
Chris@76: 	{
Chris@76: 		$context['themes'][$i]['theme_dir'] = realpath($context['themes'][$i]['theme_dir']);
Chris@76: 
Chris@76: 		if (file_exists($context['themes'][$i]['theme_dir'] . '/index.template.php'))
Chris@76: 		{
Chris@76: 			// Fetch the header... a good 256 bytes should be more than enough.
Chris@76: 			$fp = fopen($context['themes'][$i]['theme_dir'] . '/index.template.php', 'rb');
Chris@76: 			$header = fread($fp, 256);
Chris@76: 			fclose($fp);
Chris@76: 
Chris@76: 			// Can we find a version comment, at all?
Chris@76: 			if (preg_match('~\*\s@version\s+(.+)[\s]{2}~i', $header, $match) == 1)
Chris@76: 				$context['themes'][$i]['version'] = $match[1];
Chris@76: 		}
Chris@76: 
Chris@76: 		$context['themes'][$i]['valid_path'] = file_exists($context['themes'][$i]['theme_dir']) && is_dir($context['themes'][$i]['theme_dir']);
Chris@76: 	}
Chris@76: 
Chris@76: 	$context['reset_dir'] = realpath($boarddir . '/Themes');
Chris@76: 	$context['reset_url'] = $boardurl . '/Themes';
Chris@76: 
Chris@76: 	$context['sub_template'] = 'list_themes';
Chris@76: }
Chris@76: 
Chris@76: // Administrative global settings.
Chris@76: function SetThemeOptions()
Chris@76: {
Chris@76: 	global $txt, $context, $settings, $modSettings, $smcFunc;
Chris@76: 
Chris@76: 	$_GET['th'] = isset($_GET['th']) ? (int) $_GET['th'] : (isset($_GET['id']) ? (int) $_GET['id'] : 0);
Chris@76: 
Chris@76: 	isAllowedTo('admin_forum');
Chris@76: 
Chris@76: 	if (empty($_GET['th']) && empty($_GET['id']))
Chris@76: 	{
Chris@76: 		$request = $smcFunc['db_query']('', '
Chris@76: 			SELECT id_theme, variable, value
Chris@76: 			FROM {db_prefix}themes
Chris@76: 			WHERE variable IN ({string:name}, {string:theme_dir})
Chris@76: 				AND id_member = {int:no_member}',
Chris@76: 			array(
Chris@76: 				'no_member' => 0,
Chris@76: 				'name' => 'name',
Chris@76: 				'theme_dir' => 'theme_dir',
Chris@76: 			)
Chris@76: 		);
Chris@76: 		$context['themes'] = array();
Chris@76: 		while ($row = $smcFunc['db_fetch_assoc']($request))
Chris@76: 		{
Chris@76: 			if (!isset($context['themes'][$row['id_theme']]))
Chris@76: 				$context['themes'][$row['id_theme']] = array(
Chris@76: 					'id' => $row['id_theme'],
Chris@76: 					'num_default_options' => 0,
Chris@76: 					'num_members' => 0,
Chris@76: 				);
Chris@76: 			$context['themes'][$row['id_theme']][$row['variable']] = $row['value'];
Chris@76: 		}
Chris@76: 		$smcFunc['db_free_result']($request);
Chris@76: 
Chris@76: 		$request = $smcFunc['db_query']('', '
Chris@76: 			SELECT id_theme, COUNT(*) AS value
Chris@76: 			FROM {db_prefix}themes
Chris@76: 			WHERE id_member = {int:guest_member}
Chris@76: 			GROUP BY id_theme',
Chris@76: 			array(
Chris@76: 				'guest_member' => -1,
Chris@76: 			)
Chris@76: 		);
Chris@76: 		while ($row = $smcFunc['db_fetch_assoc']($request))
Chris@76: 			$context['themes'][$row['id_theme']]['num_default_options'] = $row['value'];
Chris@76: 		$smcFunc['db_free_result']($request);
Chris@76: 
Chris@76: 		// Need to make sure we don't do custom fields.
Chris@76: 		$request = $smcFunc['db_query']('', '
Chris@76: 			SELECT col_name
Chris@76: 			FROM {db_prefix}custom_fields',
Chris@76: 			array(
Chris@76: 			)
Chris@76: 		);
Chris@76: 		$customFields = array();
Chris@76: 		while ($row = $smcFunc['db_fetch_assoc']($request))
Chris@76: 			$customFields[] = $row['col_name'];
Chris@76: 		$smcFunc['db_free_result']($request);
Chris@76: 		$customFieldsQuery = empty($customFields) ? '' : ('AND variable NOT IN ({array_string:custom_fields})');
Chris@76: 
Chris@76: 		$request = $smcFunc['db_query']('themes_count', '
Chris@76: 			SELECT COUNT(DISTINCT id_member) AS value, id_theme
Chris@76: 			FROM {db_prefix}themes
Chris@76: 			WHERE id_member > {int:no_member}
Chris@76: 				' . $customFieldsQuery . '
Chris@76: 			GROUP BY id_theme',
Chris@76: 			array(
Chris@76: 				'no_member' => 0,
Chris@76: 				'custom_fields' => empty($customFields) ? array() : $customFields,
Chris@76: 			)
Chris@76: 		);
Chris@76: 		while ($row = $smcFunc['db_fetch_assoc']($request))
Chris@76: 			$context['themes'][$row['id_theme']]['num_members'] = $row['value'];
Chris@76: 		$smcFunc['db_free_result']($request);
Chris@76: 
Chris@76: 		// There has to be a Settings template!
Chris@76: 		foreach ($context['themes'] as $k => $v)
Chris@76: 			if (empty($v['theme_dir']) || (!file_exists($v['theme_dir'] . '/Settings.template.php') && empty($v['num_members'])))
Chris@76: 				unset($context['themes'][$k]);
Chris@76: 
Chris@76: 		loadTemplate('Themes');
Chris@76: 		$context['sub_template'] = 'reset_list';
Chris@76: 
Chris@76: 		return;
Chris@76: 	}
Chris@76: 
Chris@76: 	// Submit?
Chris@76: 	if (isset($_POST['submit']) && empty($_POST['who']))
Chris@76: 	{
Chris@76: 		checkSession();
Chris@76: 
Chris@76: 		if (empty($_POST['options']))
Chris@76: 			$_POST['options'] = array();
Chris@76: 		if (empty($_POST['default_options']))
Chris@76: 			$_POST['default_options'] = array();
Chris@76: 
Chris@76: 		// Set up the sql query.
Chris@76: 		$setValues = array();
Chris@76: 
Chris@76: 		foreach ($_POST['options'] as $opt => $val)
Chris@76: 			$setValues[] = array(-1, $_GET['th'], $opt, is_array($val) ? implode(',', $val) : $val);
Chris@76: 
Chris@76: 		$old_settings = array();
Chris@76: 		foreach ($_POST['default_options'] as $opt => $val)
Chris@76: 		{
Chris@76: 			$old_settings[] = $opt;
Chris@76: 
Chris@76: 			$setValues[] = array(-1, 1, $opt, is_array($val) ? implode(',', $val) : $val);
Chris@76: 		}
Chris@76: 
Chris@76: 		// If we're actually inserting something..
Chris@76: 		if (!empty($setValues))
Chris@76: 		{
Chris@76: 			// Are there options in non-default themes set that should be cleared?
Chris@76: 			if (!empty($old_settings))
Chris@76: 				$smcFunc['db_query']('', '
Chris@76: 					DELETE FROM {db_prefix}themes
Chris@76: 					WHERE id_theme != {int:default_theme}
Chris@76: 						AND id_member = {int:guest_member}
Chris@76: 						AND variable IN ({array_string:old_settings})',
Chris@76: 					array(
Chris@76: 						'default_theme' => 1,
Chris@76: 						'guest_member' => -1,
Chris@76: 						'old_settings' => $old_settings,
Chris@76: 					)
Chris@76: 				);
Chris@76: 
Chris@76: 			$smcFunc['db_insert']('replace',
Chris@76: 				'{db_prefix}themes',
Chris@76: 				array('id_member' => 'int', 'id_theme' => 'int', 'variable' => 'string-255', 'value' => 'string-65534'),
Chris@76: 				$setValues,
Chris@76: 				array('id_theme', 'variable', 'id_member')
Chris@76: 			);
Chris@76: 		}
Chris@76: 
Chris@76: 		cache_put_data('theme_settings-' . $_GET['th'], null, 90);
Chris@76: 		cache_put_data('theme_settings-1', null, 90);
Chris@76: 
Chris@76: 		redirectexit('action=admin;area=theme;' . $context['session_var'] . '=' . $context['session_id'] . ';sa=reset');
Chris@76: 	}
Chris@76: 	elseif (isset($_POST['submit']) && $_POST['who'] == 1)
Chris@76: 	{
Chris@76: 		checkSession();
Chris@76: 
Chris@76: 		$_POST['options'] = empty($_POST['options']) ? array() : $_POST['options'];
Chris@76: 		$_POST['options_master'] = empty($_POST['options_master']) ? array() : $_POST['options_master'];
Chris@76: 		$_POST['default_options'] = empty($_POST['default_options']) ? array() : $_POST['default_options'];
Chris@76: 		$_POST['default_options_master'] = empty($_POST['default_options_master']) ? array() : $_POST['default_options_master'];
Chris@76: 
Chris@76: 		$old_settings = array();
Chris@76: 		foreach ($_POST['default_options'] as $opt => $val)
Chris@76: 		{
Chris@76: 			if ($_POST['default_options_master'][$opt] == 0)
Chris@76: 				continue;
Chris@76: 			elseif ($_POST['default_options_master'][$opt] == 1)
Chris@76: 			{
Chris@76: 				// Delete then insert for ease of database compatibility!
Chris@76: 				$smcFunc['db_query']('substring', '
Chris@76: 					DELETE FROM {db_prefix}themes
Chris@76: 					WHERE id_theme = {int:default_theme}
Chris@76: 						AND id_member != {int:no_member}
Chris@76: 						AND variable = SUBSTRING({string:option}, 1, 255)',
Chris@76: 					array(
Chris@76: 						'default_theme' => 1,
Chris@76: 						'no_member' => 0,
Chris@76: 						'option' => $opt,
Chris@76: 					)
Chris@76: 				);
Chris@76: 				$smcFunc['db_query']('substring', '
Chris@76: 					INSERT INTO {db_prefix}themes
Chris@76: 						(id_member, id_theme, variable, value)
Chris@76: 					SELECT id_member, 1, SUBSTRING({string:option}, 1, 255), SUBSTRING({string:value}, 1, 65534)
Chris@76: 					FROM {db_prefix}members',
Chris@76: 					array(
Chris@76: 						'option' => $opt,
Chris@76: 						'value' => (is_array($val) ? implode(',', $val) : $val),
Chris@76: 					)
Chris@76: 				);
Chris@76: 
Chris@76: 				$old_settings[] = $opt;
Chris@76: 			}
Chris@76: 			elseif ($_POST['default_options_master'][$opt] == 2)
Chris@76: 			{
Chris@76: 				$smcFunc['db_query']('', '
Chris@76: 					DELETE FROM {db_prefix}themes
Chris@76: 					WHERE variable = {string:option_name}
Chris@76: 						AND id_member > {int:no_member}',
Chris@76: 					array(
Chris@76: 						'no_member' => 0,
Chris@76: 						'option_name' => $opt,
Chris@76: 					)
Chris@76: 				);
Chris@76: 			}
Chris@76: 		}
Chris@76: 
Chris@76: 		// Delete options from other themes.
Chris@76: 		if (!empty($old_settings))
Chris@76: 			$smcFunc['db_query']('', '
Chris@76: 				DELETE FROM {db_prefix}themes
Chris@76: 				WHERE id_theme != {int:default_theme}
Chris@76: 					AND id_member > {int:no_member}
Chris@76: 					AND variable IN ({array_string:old_settings})',
Chris@76: 				array(
Chris@76: 					'default_theme' => 1,
Chris@76: 					'no_member' => 0,
Chris@76: 					'old_settings' => $old_settings,
Chris@76: 				)
Chris@76: 			);
Chris@76: 
Chris@76: 		foreach ($_POST['options'] as $opt => $val)
Chris@76: 		{
Chris@76: 			if ($_POST['options_master'][$opt] == 0)
Chris@76: 				continue;
Chris@76: 			elseif ($_POST['options_master'][$opt] == 1)
Chris@76: 			{
Chris@76: 				// Delete then insert for ease of database compatibility - again!
Chris@76: 				$smcFunc['db_query']('substring', '
Chris@76: 					DELETE FROM {db_prefix}themes
Chris@76: 					WHERE id_theme = {int:current_theme}
Chris@76: 						AND id_member != {int:no_member}
Chris@76: 						AND variable = SUBSTRING({string:option}, 1, 255)',
Chris@76: 					array(
Chris@76: 						'current_theme' => $_GET['th'],
Chris@76: 						'no_member' => 0,
Chris@76: 						'option' => $opt,
Chris@76: 					)
Chris@76: 				);
Chris@76: 				$smcFunc['db_query']('substring', '
Chris@76: 					INSERT INTO {db_prefix}themes
Chris@76: 						(id_member, id_theme, variable, value)
Chris@76: 					SELECT id_member, {int:current_theme}, SUBSTRING({string:option}, 1, 255), SUBSTRING({string:value}, 1, 65534)
Chris@76: 					FROM {db_prefix}members',
Chris@76: 					array(
Chris@76: 						'current_theme' => $_GET['th'],
Chris@76: 						'option' => $opt,
Chris@76: 						'value' => (is_array($val) ? implode(',', $val) : $val),
Chris@76: 					)
Chris@76: 				);
Chris@76: 			}
Chris@76: 			elseif ($_POST['options_master'][$opt] == 2)
Chris@76: 			{
Chris@76: 				$smcFunc['db_query']('', '
Chris@76: 					DELETE FROM {db_prefix}themes
Chris@76: 					WHERE variable = {string:option}
Chris@76: 						AND id_member > {int:no_member}
Chris@76: 						AND id_theme = {int:current_theme}',
Chris@76: 					array(
Chris@76: 						'no_member' => 0,
Chris@76: 						'current_theme' => $_GET['th'],
Chris@76: 						'option' => $opt,
Chris@76: 					)
Chris@76: 				);
Chris@76: 			}
Chris@76: 		}
Chris@76: 
Chris@76: 		redirectexit('action=admin;area=theme;' . $context['session_var'] . '=' . $context['session_id'] . ';sa=reset');
Chris@76: 	}
Chris@76: 	elseif (!empty($_GET['who']) && $_GET['who'] == 2)
Chris@76: 	{
Chris@76: 		checkSession('get');
Chris@76: 
Chris@76: 		// Don't delete custom fields!!
Chris@76: 		if ($_GET['th'] == 1)
Chris@76: 		{
Chris@76: 			$request = $smcFunc['db_query']('', '
Chris@76: 				SELECT col_name
Chris@76: 				FROM {db_prefix}custom_fields',
Chris@76: 				array(
Chris@76: 				)
Chris@76: 			);
Chris@76: 			$customFields = array();
Chris@76: 			while ($row = $smcFunc['db_fetch_assoc']($request))
Chris@76: 				$customFields[] = $row['col_name'];
Chris@76: 			$smcFunc['db_free_result']($request);
Chris@76: 		}
Chris@76: 		$customFieldsQuery = empty($customFields) ? '' : ('AND variable NOT IN ({array_string:custom_fields})');
Chris@76: 
Chris@76: 		$smcFunc['db_query']('', '
Chris@76: 			DELETE FROM {db_prefix}themes
Chris@76: 			WHERE id_member > {int:no_member}
Chris@76: 				AND id_theme = {int:current_theme}
Chris@76: 				' . $customFieldsQuery,
Chris@76: 			array(
Chris@76: 				'no_member' => 0,
Chris@76: 				'current_theme' => $_GET['th'],
Chris@76: 				'custom_fields' => empty($customFields) ? array() : $customFields,
Chris@76: 			)
Chris@76: 		);
Chris@76: 
Chris@76: 		redirectexit('action=admin;area=theme;' . $context['session_var'] . '=' . $context['session_id'] . ';sa=reset');
Chris@76: 	}
Chris@76: 
Chris@76: 	$old_id = $settings['theme_id'];
Chris@76: 	$old_settings = $settings;
Chris@76: 
Chris@76: 	loadTheme($_GET['th'], false);
Chris@76: 
Chris@76: 	loadLanguage('Profile');
Chris@76: 	//!!! Should we just move these options so they are no longer theme dependant?
Chris@76: 	loadLanguage('PersonalMessage');
Chris@76: 
Chris@76: 	// Let the theme take care of the settings.
Chris@76: 	loadTemplate('Settings');
Chris@76: 	loadSubTemplate('options');
Chris@76: 
Chris@76: 	$context['sub_template'] = 'set_options';
Chris@76: 	$context['page_title'] = $txt['theme_settings'];
Chris@76: 
Chris@76: 	$context['options'] = $context['theme_options'];
Chris@76: 	$context['theme_settings'] = $settings;
Chris@76: 
Chris@76: 	if (empty($_REQUEST['who']))
Chris@76: 	{
Chris@76: 		$request = $smcFunc['db_query']('', '
Chris@76: 			SELECT variable, value
Chris@76: 			FROM {db_prefix}themes
Chris@76: 			WHERE id_theme IN (1, {int:current_theme})
Chris@76: 				AND id_member = {int:guest_member}',
Chris@76: 			array(
Chris@76: 				'current_theme' => $_GET['th'],
Chris@76: 				'guest_member' => -1,
Chris@76: 			)
Chris@76: 		);
Chris@76: 		$context['theme_options'] = array();
Chris@76: 		while ($row = $smcFunc['db_fetch_assoc']($request))
Chris@76: 			$context['theme_options'][$row['variable']] = $row['value'];
Chris@76: 		$smcFunc['db_free_result']($request);
Chris@76: 
Chris@76: 		$context['theme_options_reset'] = false;
Chris@76: 	}
Chris@76: 	else
Chris@76: 	{
Chris@76: 		$context['theme_options'] = array();
Chris@76: 		$context['theme_options_reset'] = true;
Chris@76: 	}
Chris@76: 
Chris@76: 	foreach ($context['options'] as $i => $setting)
Chris@76: 	{
Chris@76: 		// Is this disabled?
Chris@76: 		if ($setting['id'] == 'calendar_start_day' && empty($modSettings['cal_enabled']))
Chris@76: 		{
Chris@76: 			unset($context['options'][$i]);
Chris@76: 			continue;
Chris@76: 		}
Chris@76: 		elseif (($setting['id'] == 'topics_per_page' || $setting['id'] == 'messages_per_page') && !empty($modSettings['disableCustomPerPage']))
Chris@76: 		{
Chris@76: 			unset($context['options'][$i]);
Chris@76: 			continue;
Chris@76: 		}
Chris@76: 
Chris@76: 		if (!isset($setting['type']) || $setting['type'] == 'bool')
Chris@76: 			$context['options'][$i]['type'] = 'checkbox';
Chris@76: 		elseif ($setting['type'] == 'int' || $setting['type'] == 'integer')
Chris@76: 			$context['options'][$i]['type'] = 'number';
Chris@76: 		elseif ($setting['type'] == 'string')
Chris@76: 			$context['options'][$i]['type'] = 'text';
Chris@76: 
Chris@76: 		if (isset($setting['options']))
Chris@76: 			$context['options'][$i]['type'] = 'list';
Chris@76: 
Chris@76: 		$context['options'][$i]['value'] = !isset($context['theme_options'][$setting['id']]) ? '' : $context['theme_options'][$setting['id']];
Chris@76: 	}
Chris@76: 
Chris@76: 	// Restore the existing theme.
Chris@76: 	loadTheme($old_id, false);
Chris@76: 	$settings = $old_settings;
Chris@76: 
Chris@76: 	loadTemplate('Themes');
Chris@76: }
Chris@76: 
Chris@76: // Administrative global settings.
Chris@76: function SetThemeSettings()
Chris@76: {
Chris@76: 	global $txt, $context, $settings, $modSettings, $sourcedir, $smcFunc;
Chris@76: 
Chris@76: 	if (empty($_GET['th']) && empty($_GET['id']))
Chris@76: 		return ThemeAdmin();
Chris@76: 	$_GET['th'] = isset($_GET['th']) ? (int) $_GET['th'] : (int) $_GET['id'];
Chris@76: 
Chris@76: 	// Select the best fitting tab.
Chris@76: 	$context[$context['admin_menu_name']]['current_subsection'] = 'list';
Chris@76: 
Chris@76: 	loadLanguage('Admin');
Chris@76: 	isAllowedTo('admin_forum');
Chris@76: 
Chris@76: 	// Validate inputs/user.
Chris@76: 	if (empty($_GET['th']))
Chris@76: 		fatal_lang_error('no_theme', false);
Chris@76: 
Chris@76: 	// Fetch the smiley sets...
Chris@76: 	$sets = explode(',', 'none,' . $modSettings['smiley_sets_known']);
Chris@76: 	$set_names = explode("\n", $txt['smileys_none'] . "\n" . $modSettings['smiley_sets_names']);
Chris@76: 	$context['smiley_sets'] = array(
Chris@76: 		'' => $txt['smileys_no_default']
Chris@76: 	);
Chris@76: 	foreach ($sets as $i => $set)
Chris@76: 		$context['smiley_sets'][$set] = htmlspecialchars($set_names[$i]);
Chris@76: 
Chris@76: 	$old_id = $settings['theme_id'];
Chris@76: 	$old_settings = $settings;
Chris@76: 
Chris@76: 	loadTheme($_GET['th'], false);
Chris@76: 
Chris@76: 	// Sadly we really do need to init the template.
Chris@76: 	loadSubTemplate('init', 'ignore');
Chris@76: 
Chris@76: 	// Also load the actual themes language file - in case of special settings.
Chris@76: 	loadLanguage('Settings', '', true, true);
Chris@76: 
Chris@76: 	// And the custom language strings...
Chris@76: 	loadLanguage('ThemeStrings', '', false, true);
Chris@76: 
Chris@76: 	// Let the theme take care of the settings.
Chris@76: 	loadTemplate('Settings');
Chris@76: 	loadSubTemplate('settings');
Chris@76: 
Chris@76: 	// Load the variants separately...
Chris@76: 	$settings['theme_variants'] = array();
Chris@76: 	if (file_exists($settings['theme_dir'] . '/index.template.php'))
Chris@76: 	{
Chris@76: 		$file_contents = implode('', file($settings['theme_dir'] . '/index.template.php'));
Chris@76: 		if (preg_match('~\$settings\[\'theme_variants\'\]\s*=(.+?);~', $file_contents, $matches))
Chris@76: 				eval('global $settings;' . $matches[0]);
Chris@76: 	}
Chris@76: 
Chris@76: 	// Submitting!
Chris@76: 	if (isset($_POST['submit']))
Chris@76: 	{
Chris@76: 		checkSession();
Chris@76: 
Chris@76: 		if (empty($_POST['options']))
Chris@76: 			$_POST['options'] = array();
Chris@76: 		if (empty($_POST['default_options']))
Chris@76: 			$_POST['default_options'] = array();
Chris@76: 
Chris@76: 		// Make sure items are cast correctly.
Chris@76: 		foreach ($context['theme_settings'] as $item)
Chris@76: 		{
Chris@76: 			// Disregard this item if this is just a separator.
Chris@76: 			if (!is_array($item))
Chris@76: 				continue;
Chris@76: 
Chris@76: 			foreach (array('options', 'default_options') as $option)
Chris@76: 			{
Chris@76: 				if (!isset($_POST[$option][$item['id']]))
Chris@76: 					continue;
Chris@76: 				// Checkbox.
Chris@76: 				elseif (empty($item['type']))
Chris@76: 					$_POST[$option][$item['id']] = $_POST[$option][$item['id']] ? 1 : 0;
Chris@76: 				// Number
Chris@76: 				elseif ($item['type'] == 'number')
Chris@76: 					$_POST[$option][$item['id']] = (int) $_POST[$option][$item['id']];
Chris@76: 			}
Chris@76: 		}
Chris@76: 
Chris@76: 		// Set up the sql query.
Chris@76: 		$inserts = array();
Chris@76: 		foreach ($_POST['options'] as $opt => $val)
Chris@76: 			$inserts[] = array(0, $_GET['th'], $opt, is_array($val) ? implode(',', $val) : $val);
Chris@76: 		foreach ($_POST['default_options'] as $opt => $val)
Chris@76: 			$inserts[] = array(0, 1, $opt, is_array($val) ? implode(',', $val) : $val);
Chris@76: 		// If we're actually inserting something..
Chris@76: 		if (!empty($inserts))
Chris@76: 		{
Chris@76: 			$smcFunc['db_insert']('replace',
Chris@76: 				'{db_prefix}themes',
Chris@76: 				array('id_member' => 'int', 'id_theme' => 'int', 'variable' => 'string-255', 'value' => 'string-65534'),
Chris@76: 				$inserts,
Chris@76: 				array('id_member', 'id_theme', 'variable')
Chris@76: 			);
Chris@76: 		}
Chris@76: 
Chris@76: 		cache_put_data('theme_settings-' . $_GET['th'], null, 90);
Chris@76: 		cache_put_data('theme_settings-1', null, 90);
Chris@76: 
Chris@76: 		// Invalidate the cache.
Chris@76: 		updateSettings(array('settings_updated' => time()));
Chris@76: 
Chris@76: 		redirectexit('action=admin;area=theme;sa=settings;th=' . $_GET['th'] . ';' . $context['session_var'] . '=' . $context['session_id']);
Chris@76: 	}
Chris@76: 
Chris@76: 	$context['sub_template'] = 'set_settings';
Chris@76: 	$context['page_title'] = $txt['theme_settings'];
Chris@76: 
Chris@76: 	foreach ($settings as $setting => $dummy)
Chris@76: 	{
Chris@76: 		if (!in_array($setting, array('theme_url', 'theme_dir', 'images_url', 'template_dirs')))
Chris@76: 			$settings[$setting] = htmlspecialchars__recursive($settings[$setting]);
Chris@76: 	}
Chris@76: 
Chris@76: 	$context['settings'] = $context['theme_settings'];
Chris@76: 	$context['theme_settings'] = $settings;
Chris@76: 
Chris@76: 	foreach ($context['settings'] as $i => $setting)
Chris@76: 	{
Chris@76: 		// Separators are dummies, so leave them alone.
Chris@76: 		if (!is_array($setting))
Chris@76: 			continue;
Chris@76: 
Chris@76: 		if (!isset($setting['type']) || $setting['type'] == 'bool')
Chris@76: 			$context['settings'][$i]['type'] = 'checkbox';
Chris@76: 		elseif ($setting['type'] == 'int' || $setting['type'] == 'integer')
Chris@76: 			$context['settings'][$i]['type'] = 'number';
Chris@76: 		elseif ($setting['type'] == 'string')
Chris@76: 			$context['settings'][$i]['type'] = 'text';
Chris@76: 
Chris@76: 		if (isset($setting['options']))
Chris@76: 			$context['settings'][$i]['type'] = 'list';
Chris@76: 
Chris@76: 		$context['settings'][$i]['value'] = !isset($settings[$setting['id']]) ? '' : $settings[$setting['id']];
Chris@76: 	}
Chris@76: 
Chris@76: 	// Do we support variants?
Chris@76: 	if (!empty($settings['theme_variants']))
Chris@76: 	{
Chris@76: 		$context['theme_variants'] = array();
Chris@76: 		foreach ($settings['theme_variants'] as $variant)
Chris@76: 		{
Chris@76: 			// Have any text, old chap?
Chris@76: 			$context['theme_variants'][$variant] = array(
Chris@76: 				'label' => isset($txt['variant_' . $variant]) ? $txt['variant_' . $variant] : $variant,
Chris@76: 				'thumbnail' => !file_exists($settings['theme_dir'] . '/images/thumbnail.gif') || file_exists($settings['theme_dir'] . '/images/thumbnail_' . $variant . '.gif') ? $settings['images_url'] . '/thumbnail_' . $variant . '.gif' : ($settings['images_url'] . '/thumbnail.gif'),
Chris@76: 			);
Chris@76: 		}
Chris@76: 		$context['default_variant'] = !empty($settings['default_variant']) && isset($context['theme_variants'][$settings['default_variant']]) ? $settings['default_variant'] : $settings['theme_variants'][0];
Chris@76: 	}
Chris@76: 
Chris@76: 	// Restore the current theme.
Chris@76: 	loadTheme($old_id, false);
Chris@76: 
Chris@76: 	// Reinit just incase.
Chris@76: 	loadSubTemplate('init', 'ignore');
Chris@76: 
Chris@76: 	$settings = $old_settings;
Chris@76: 
Chris@76: 	loadTemplate('Themes');
Chris@76: }
Chris@76: 
Chris@76: // Remove a theme from the database.
Chris@76: function RemoveTheme()
Chris@76: {
Chris@76: 	global $modSettings, $context, $smcFunc;
Chris@76: 
Chris@76: 	checkSession('get');
Chris@76: 
Chris@76: 	isAllowedTo('admin_forum');
Chris@76: 
Chris@76: 	// The theme's ID must be an integer.
Chris@76: 	$_GET['th'] = isset($_GET['th']) ? (int) $_GET['th'] : (int) $_GET['id'];
Chris@76: 
Chris@76: 	// You can't delete the default theme!
Chris@76: 	if ($_GET['th'] == 1)
Chris@76: 		fatal_lang_error('no_access', false);
Chris@76: 
Chris@76: 	$known = explode(',', $modSettings['knownThemes']);
Chris@76: 	for ($i = 0, $n = count($known); $i < $n; $i++)
Chris@76: 	{
Chris@76: 		if ($known[$i] == $_GET['th'])
Chris@76: 			unset($known[$i]);
Chris@76: 	}
Chris@76: 
Chris@76: 	$smcFunc['db_query']('', '
Chris@76: 		DELETE FROM {db_prefix}themes
Chris@76: 		WHERE id_theme = {int:current_theme}',
Chris@76: 		array(
Chris@76: 			'current_theme' => $_GET['th'],
Chris@76: 		)
Chris@76: 	);
Chris@76: 
Chris@76: 	$smcFunc['db_query']('', '
Chris@76: 		UPDATE {db_prefix}members
Chris@76: 		SET id_theme = {int:default_theme}
Chris@76: 		WHERE id_theme = {int:current_theme}',
Chris@76: 		array(
Chris@76: 			'default_theme' => 0,
Chris@76: 			'current_theme' => $_GET['th'],
Chris@76: 		)
Chris@76: 	);
Chris@76: 
Chris@76: 	$smcFunc['db_query']('', '
Chris@76: 		UPDATE {db_prefix}boards
Chris@76: 		SET id_theme = {int:default_theme}
Chris@76: 		WHERE id_theme = {int:current_theme}',
Chris@76: 		array(
Chris@76: 			'default_theme' => 0,
Chris@76: 			'current_theme' => $_GET['th'],
Chris@76: 		)
Chris@76: 	);
Chris@76: 
Chris@76: 	$known = strtr(implode(',', $known), array(',,' => ','));
Chris@76: 
Chris@76: 	// Fix it if the theme was the overall default theme.
Chris@76: 	if ($modSettings['theme_guests'] == $_GET['th'])
Chris@76: 		updateSettings(array('theme_guests' => '1', 'knownThemes' => $known));
Chris@76: 	else
Chris@76: 		updateSettings(array('knownThemes' => $known));
Chris@76: 
Chris@76: 	redirectexit('action=admin;area=theme;sa=list;' . $context['session_var'] . '=' . $context['session_id']);
Chris@76: }
Chris@76: 
Chris@76: // Choose a theme from a list.
Chris@76: function PickTheme()
Chris@76: {
Chris@76: 	global $txt, $context, $modSettings, $user_info, $language, $smcFunc, $settings, $scripturl;
Chris@76: 
Chris@76: 	loadLanguage('Profile');
Chris@76: 	loadTemplate('Themes');
Chris@76: 
Chris@76: 	// Build the link tree.
Chris@76: 	$context['linktree'][] = array(
Chris@76: 		'url' => $scripturl . '?action=theme;sa=pick;u=' . (!empty($_REQUEST['u']) ? (int) $_REQUEST['u'] : 0),
Chris@76: 		'name' => $txt['theme_pick'],
Chris@76: 	);
Chris@76: 
Chris@76: 	$_SESSION['id_theme'] = 0;
Chris@76: 
Chris@76: 	if (isset($_GET['id']))
Chris@76: 		$_GET['th'] = $_GET['id'];
Chris@76: 
Chris@76: 	// Saving a variant cause JS doesn't work - pretend it did ;)
Chris@76: 	if (isset($_POST['save']))
Chris@76: 	{
Chris@76: 		// Which theme?
Chris@76: 		foreach ($_POST['save'] as $k => $v)
Chris@76: 			$_GET['th'] = (int) $k;
Chris@76: 
Chris@76: 		if (isset($_POST['vrt'][$k]))
Chris@76: 			$_GET['vrt'] = $_POST['vrt'][$k];
Chris@76: 	}
Chris@76: 
Chris@76: 	// Have we made a desicion, or are we just browsing?
Chris@76: 	if (isset($_GET['th']))
Chris@76: 	{
Chris@76: 		checkSession('get');
Chris@76: 
Chris@76: 		$_GET['th'] = (int) $_GET['th'];
Chris@76: 
Chris@76: 		// Save for this user.
Chris@76: 		if (!isset($_REQUEST['u']) || !allowedTo('admin_forum'))
Chris@76: 		{
Chris@76: 			updateMemberData($user_info['id'], array('id_theme' => (int) $_GET['th']));
Chris@76: 
Chris@76: 			// A variants to save for the user?
Chris@76: 			if (!empty($_GET['vrt']))
Chris@76: 			{
Chris@76: 				$smcFunc['db_insert']('replace',
Chris@76: 					'{db_prefix}themes',
Chris@76: 					array('id_theme' => 'int', 'id_member' => 'int', 'variable' => 'string-255', 'value' => 'string-65534'),
Chris@76: 					array($_GET['th'], $user_info['id'], 'theme_variant', $_GET['vrt']),
Chris@76: 					array('id_theme', 'id_member', 'variable')
Chris@76: 				);
Chris@76: 				cache_put_data('theme_settings-' . $_GET['th'] . ':' . $user_info['id'], null, 90);
Chris@76: 
Chris@76: 				$_SESSION['id_variant'] = 0;
Chris@76: 			}
Chris@76: 
Chris@76: 			redirectexit('action=profile;area=theme');
Chris@76: 		}
Chris@76: 
Chris@76: 		// If changing members or guests - and there's a variant - assume changing default variant.
Chris@76: 		if (!empty($_GET['vrt']) && ($_REQUEST['u'] == '0' || $_REQUEST['u'] == '-1'))
Chris@76: 		{
Chris@76: 			$smcFunc['db_insert']('replace',
Chris@76: 				'{db_prefix}themes',
Chris@76: 				array('id_theme' => 'int', 'id_member' => 'int', 'variable' => 'string-255', 'value' => 'string-65534'),
Chris@76: 				array($_GET['th'], 0, 'default_variant', $_GET['vrt']),
Chris@76: 				array('id_theme', 'id_member', 'variable')
Chris@76: 			);
Chris@76: 
Chris@76: 			// Make it obvious that it's changed
Chris@76: 			cache_put_data('theme_settings-' . $_GET['th'], null, 90);
Chris@76: 		}
Chris@76: 
Chris@76: 		// For everyone.
Chris@76: 		if ($_REQUEST['u'] == '0')
Chris@76: 		{
Chris@76: 			updateMemberData(null, array('id_theme' => (int) $_GET['th']));
Chris@76: 
Chris@76: 			// Remove any custom variants.
Chris@76: 			if (!empty($_GET['vrt']))
Chris@76: 			{
Chris@76: 				$smcFunc['db_query']('', '
Chris@76: 					DELETE FROM {db_prefix}themes
Chris@76: 					WHERE id_theme = {int:current_theme}
Chris@76: 						AND variable = {string:theme_variant}',
Chris@76: 					array(
Chris@76: 						'current_theme' => (int) $_GET['th'],
Chris@76: 						'theme_variant' => 'theme_variant',
Chris@76: 					)
Chris@76: 				);
Chris@76: 			}
Chris@76: 
Chris@76: 			redirectexit('action=admin;area=theme;sa=admin;' . $context['session_var'] . '=' . $context['session_id']);
Chris@76: 		}
Chris@76: 		// Change the default/guest theme.
Chris@76: 		elseif ($_REQUEST['u'] == '-1')
Chris@76: 		{
Chris@76: 			updateSettings(array('theme_guests' => (int) $_GET['th']));
Chris@76: 
Chris@76: 			redirectexit('action=admin;area=theme;sa=admin;' . $context['session_var'] . '=' . $context['session_id']);
Chris@76: 		}
Chris@76: 		// Change a specific member's theme.
Chris@76: 		else
Chris@76: 		{
Chris@76: 			updateMemberData((int) $_REQUEST['u'], array('id_theme' => (int) $_GET['th']));
Chris@76: 
Chris@76: 			if (!empty($_GET['vrt']))
Chris@76: 			{
Chris@76: 				$smcFunc['db_insert']('replace',
Chris@76: 					'{db_prefix}themes',
Chris@76: 					array('id_theme' => 'int', 'id_member' => 'int', 'variable' => 'string-255', 'value' => 'string-65534'),
Chris@76: 					array($_GET['th'], (int) $_REQUEST['u'], 'theme_variant', $_GET['vrt']),
Chris@76: 					array('id_theme', 'id_member', 'variable')
Chris@76: 				);
Chris@76: 				cache_put_data('theme_settings-' . $_GET['th'] . ':' . (int) $_REQUEST['u'], null, 90);
Chris@76: 
Chris@76: 				if ($user_info['id'] == $_REQUEST['u'])
Chris@76: 					$_SESSION['id_variant'] = 0;
Chris@76: 			}
Chris@76: 
Chris@76: 			redirectexit('action=profile;u=' . (int) $_REQUEST['u'] . ';area=theme');
Chris@76: 		}
Chris@76: 	}
Chris@76: 
Chris@76: 	// Figure out who the member of the minute is, and what theme they've chosen.
Chris@76: 	if (!isset($_REQUEST['u']) || !allowedTo('admin_forum'))
Chris@76: 	{
Chris@76: 		$context['current_member'] = $user_info['id'];
Chris@76: 		$context['current_theme'] = $user_info['theme'];
Chris@76: 	}
Chris@76: 	// Everyone can't chose just one.
Chris@76: 	elseif ($_REQUEST['u'] == '0')
Chris@76: 	{
Chris@76: 		$context['current_member'] = 0;
Chris@76: 		$context['current_theme'] = 0;
Chris@76: 	}
Chris@76: 	// Guests and such...
Chris@76: 	elseif ($_REQUEST['u'] == '-1')
Chris@76: 	{
Chris@76: 		$context['current_member'] = -1;
Chris@76: 		$context['current_theme'] = $modSettings['theme_guests'];
Chris@76: 	}
Chris@76: 	// Someones else :P.
Chris@76: 	else
Chris@76: 	{
Chris@76: 		$context['current_member'] = (int) $_REQUEST['u'];
Chris@76: 
Chris@76: 		$request = $smcFunc['db_query']('', '
Chris@76: 			SELECT id_theme
Chris@76: 			FROM {db_prefix}members
Chris@76: 			WHERE id_member = {int:current_member}
Chris@76: 			LIMIT 1',
Chris@76: 			array(
Chris@76: 				'current_member' => $context['current_member'],
Chris@76: 			)
Chris@76: 		);
Chris@76: 		list ($context['current_theme']) = $smcFunc['db_fetch_row']($request);
Chris@76: 		$smcFunc['db_free_result']($request);
Chris@76: 	}
Chris@76: 
Chris@76: 	// Get the theme name and descriptions.
Chris@76: 	$context['available_themes'] = array();
Chris@76: 	if (!empty($modSettings['knownThemes']))
Chris@76: 	{
Chris@76: 		$request = $smcFunc['db_query']('', '
Chris@76: 			SELECT id_theme, variable, value
Chris@76: 			FROM {db_prefix}themes
Chris@76: 			WHERE variable IN ({string:name}, {string:theme_url}, {string:theme_dir}, {string:images_url}, {string:disable_user_variant})' . (!allowedTo('admin_forum') ? '
Chris@76: 				AND id_theme IN ({array_string:known_themes})' : '') . '
Chris@76: 				AND id_theme != {int:default_theme}
Chris@76: 				AND id_member = {int:no_member}',
Chris@76: 			array(
Chris@76: 				'default_theme' => 0,
Chris@76: 				'name' => 'name',
Chris@76: 				'no_member' => 0,
Chris@76: 				'theme_url' => 'theme_url',
Chris@76: 				'theme_dir' => 'theme_dir',
Chris@76: 				'images_url' => 'images_url',
Chris@76: 				'disable_user_variant' => 'disable_user_variant',
Chris@76: 				'known_themes' => explode(',', $modSettings['knownThemes']),
Chris@76: 			)
Chris@76: 		);
Chris@76: 		while ($row = $smcFunc['db_fetch_assoc']($request))
Chris@76: 		{
Chris@76: 			if (!isset($context['available_themes'][$row['id_theme']]))
Chris@76: 				$context['available_themes'][$row['id_theme']] = array(
Chris@76: 					'id' => $row['id_theme'],
Chris@76: 					'selected' => $context['current_theme'] == $row['id_theme'],
Chris@76: 					'num_users' => 0
Chris@76: 				);
Chris@76: 			$context['available_themes'][$row['id_theme']][$row['variable']] = $row['value'];
Chris@76: 		}
Chris@76: 		$smcFunc['db_free_result']($request);
Chris@76: 	}
Chris@76: 
Chris@76: 	// Okay, this is a complicated problem: the default theme is 1, but they aren't allowed to access 1!
Chris@76: 	if (!isset($context['available_themes'][$modSettings['theme_guests']]))
Chris@76: 	{
Chris@76: 		$context['available_themes'][0] = array(
Chris@76: 			'num_users' => 0
Chris@76: 		);
Chris@76: 		$guest_theme = 0;
Chris@76: 	}
Chris@76: 	else
Chris@76: 		$guest_theme = $modSettings['theme_guests'];
Chris@76: 
Chris@76: 	$request = $smcFunc['db_query']('', '
Chris@76: 		SELECT id_theme, COUNT(*) AS the_count
Chris@76: 		FROM {db_prefix}members
Chris@76: 		GROUP BY id_theme
Chris@76: 		ORDER BY id_theme DESC',
Chris@76: 		array(
Chris@76: 		)
Chris@76: 	);
Chris@76: 	while ($row = $smcFunc['db_fetch_assoc']($request))
Chris@76: 	{
Chris@76: 		// Figure out which theme it is they are REALLY using.
Chris@76: 		if (!empty($modSettings['knownThemes']) && !in_array($row['id_theme'], explode(',',$modSettings['knownThemes'])))
Chris@76: 			$row['id_theme'] = $guest_theme;
Chris@76: 		elseif (empty($modSettings['theme_allow']))
Chris@76: 			$row['id_theme'] = $guest_theme;
Chris@76: 
Chris@76: 		if (isset($context['available_themes'][$row['id_theme']]))
Chris@76: 			$context['available_themes'][$row['id_theme']]['num_users'] += $row['the_count'];
Chris@76: 		else
Chris@76: 			$context['available_themes'][$guest_theme]['num_users'] += $row['the_count'];
Chris@76: 	}
Chris@76: 	$smcFunc['db_free_result']($request);
Chris@76: 
Chris@76: 	// Get any member variant preferences.
Chris@76: 	$variant_preferences = array();
Chris@76: 	if ($context['current_member'] > 0)
Chris@76: 	{
Chris@76: 		$request = $smcFunc['db_query']('', '
Chris@76: 			SELECT id_theme, value
Chris@76: 			FROM {db_prefix}themes
Chris@76: 			WHERE variable = {string:theme_variant}',
Chris@76: 			array(
Chris@76: 				'theme_variant' => 'theme_variant',
Chris@76: 			)
Chris@76: 		);
Chris@76: 		while ($row = $smcFunc['db_fetch_assoc']($request))
Chris@76: 			$variant_preferences[$row['id_theme']] = $row['value'];
Chris@76: 		$smcFunc['db_free_result']($request);
Chris@76: 	}
Chris@76: 
Chris@76: 	// Save the setting first.
Chris@76: 	$current_images_url = $settings['images_url'];
Chris@76: 	$current_theme_variants = !empty($settings['theme_variants']) ? $settings['theme_variants'] : array();
Chris@76: 
Chris@76: 	foreach ($context['available_themes'] as $id_theme => $theme_data)
Chris@76: 	{
Chris@76: 		// Don't try to load the forum or board default theme's data... it doesn't have any!
Chris@76: 		if ($id_theme == 0)
Chris@76: 			continue;
Chris@76: 
Chris@76: 		// The thumbnail needs the correct path.
Chris@76: 		$settings['images_url'] = &$theme_data['images_url'];
Chris@76: 
Chris@76: 		if (file_exists($theme_data['theme_dir'] . '/languages/Settings.' . $user_info['language'] . '.php'))
Chris@76: 			include($theme_data['theme_dir'] . '/languages/Settings.' . $user_info['language'] . '.php');
Chris@76: 		elseif (file_exists($theme_data['theme_dir'] . '/languages/Settings.' . $language . '.php'))
Chris@76: 			include($theme_data['theme_dir'] . '/languages/Settings.' . $language . '.php');
Chris@76: 		else
Chris@76: 		{
Chris@76: 			$txt['theme_thumbnail_href'] = $theme_data['images_url'] . '/thumbnail.gif';
Chris@76: 			$txt['theme_description'] = '';
Chris@76: 		}
Chris@76: 
Chris@76: 		$context['available_themes'][$id_theme]['thumbnail_href'] = $txt['theme_thumbnail_href'];
Chris@76: 		$context['available_themes'][$id_theme]['description'] = $txt['theme_description'];
Chris@76: 
Chris@76: 		// Are there any variants?
Chris@76: 		if (file_exists($theme_data['theme_dir'] . '/index.template.php') && empty($theme_data['disable_user_variant']))
Chris@76: 		{
Chris@76: 			$file_contents = implode('', file($theme_data['theme_dir'] . '/index.template.php'));
Chris@76: 			if (preg_match('~\$settings\[\'theme_variants\'\]\s*=(.+?);~', $file_contents, $matches))
Chris@76: 			{
Chris@76: 				$settings['theme_variants'] = array();
Chris@76: 
Chris@76: 				// Fill settings up.
Chris@76: 				eval('global $settings;' . $matches[0]);
Chris@76: 
Chris@76: 				if (!empty($settings['theme_variants']))
Chris@76: 				{
Chris@76: 					loadLanguage('Settings');
Chris@76: 
Chris@76: 					$context['available_themes'][$id_theme]['variants'] = array();
Chris@76: 					foreach ($settings['theme_variants'] as $variant)
Chris@76: 						$context['available_themes'][$id_theme]['variants'][$variant] = array(
Chris@76: 							'label' => isset($txt['variant_' . $variant]) ? $txt['variant_' . $variant] : $variant,
Chris@76: 							'thumbnail' => !file_exists($theme_data['theme_dir'] . '/images/thumbnail.gif') || file_exists($theme_data['theme_dir'] . '/images/thumbnail_' . $variant . '.gif') ? $theme_data['images_url'] . '/thumbnail_' . $variant . '.gif' : ($theme_data['images_url'] . '/thumbnail.gif'),
Chris@76: 						);
Chris@76: 
Chris@76: 					$context['available_themes'][$id_theme]['selected_variant'] = isset($_GET['vrt']) ? $_GET['vrt'] : (!empty($variant_preferences[$id_theme]) ? $variant_preferences[$id_theme] : (!empty($settings['default_variant']) ? $settings['default_variant'] : $settings['theme_variants'][0]));
Chris@76: 					if (!isset($context['available_themes'][$id_theme]['variants'][$context['available_themes'][$id_theme]['selected_variant']]['thumbnail']))
Chris@76: 						$context['available_themes'][$id_theme]['selected_variant'] = $settings['theme_variants'][0];
Chris@76: 
Chris@76: 					$context['available_themes'][$id_theme]['thumbnail_href'] = $context['available_themes'][$id_theme]['variants'][$context['available_themes'][$id_theme]['selected_variant']]['thumbnail'];
Chris@76: 					// Allow themes to override the text.
Chris@76: 					$context['available_themes'][$id_theme]['pick_label'] = isset($txt['variant_pick']) ? $txt['variant_pick'] : $txt['theme_pick_variant'];
Chris@76: 				}
Chris@76: 			}
Chris@76: 		}
Chris@76: 	}
Chris@76: 	// Then return it.
Chris@76: 	$settings['images_url'] = $current_images_url;
Chris@76: 	$settings['theme_variants'] = $current_theme_variants;
Chris@76: 
Chris@76: 	// As long as we're not doing the default theme...
Chris@76: 	if (!isset($_REQUEST['u']) || $_REQUEST['u'] >= 0)
Chris@76: 	{
Chris@76: 		if ($guest_theme != 0)
Chris@76: 			$context['available_themes'][0] = $context['available_themes'][$guest_theme];
Chris@76: 
Chris@76: 		$context['available_themes'][0]['id'] = 0;
Chris@76: 		$context['available_themes'][0]['name'] = $txt['theme_forum_default'];
Chris@76: 		$context['available_themes'][0]['selected'] = $context['current_theme'] == 0;
Chris@76: 		$context['available_themes'][0]['description'] = $txt['theme_global_description'];
Chris@76: 	}
Chris@76: 
Chris@76: 	ksort($context['available_themes']);
Chris@76: 
Chris@76: 	$context['page_title'] = $txt['theme_pick'];
Chris@76: 	$context['sub_template'] = 'pick';
Chris@76: }
Chris@76: 
Chris@76: function ThemeInstall()
Chris@76: {
Chris@76: 	global $sourcedir, $boarddir, $boardurl, $txt, $context, $settings, $modSettings, $smcFunc;
Chris@76: 
Chris@76: 	checkSession('request');
Chris@76: 
Chris@76: 	isAllowedTo('admin_forum');
Chris@76: 	checkSession('request');
Chris@76: 
Chris@76: 	require_once($sourcedir . '/Subs-Package.php');
Chris@76: 
Chris@76: 	loadTemplate('Themes');
Chris@76: 
Chris@76: 	if (isset($_GET['theme_id']))
Chris@76: 	{
Chris@76: 		$result = $smcFunc['db_query']('', '
Chris@76: 			SELECT value
Chris@76: 			FROM {db_prefix}themes
Chris@76: 			WHERE id_theme = {int:current_theme}
Chris@76: 				AND id_member = {int:no_member}
Chris@76: 				AND variable = {string:name}
Chris@76: 			LIMIT 1',
Chris@76: 			array(
Chris@76: 				'current_theme' => (int) $_GET['theme_id'],
Chris@76: 				'no_member' => 0,
Chris@76: 				'name' => 'name',
Chris@76: 			)
Chris@76: 		);
Chris@76: 		list ($theme_name) = $smcFunc['db_fetch_row']($result);
Chris@76: 		$smcFunc['db_free_result']($result);
Chris@76: 
Chris@76: 		$context['sub_template'] = 'installed';
Chris@76: 		$context['page_title'] = $txt['theme_installed'];
Chris@76: 		$context['installed_theme'] = array(
Chris@76: 			'id' => (int) $_GET['theme_id'],
Chris@76: 			'name' => $theme_name,
Chris@76: 		);
Chris@76: 
Chris@76: 		return;
Chris@76: 	}
Chris@76: 
Chris@76: 	if ((!empty($_FILES['theme_gz']) && (!isset($_FILES['theme_gz']['error']) || $_FILES['theme_gz']['error'] != 4)) || !empty($_REQUEST['theme_gz']))
Chris@76: 		$method = 'upload';
Chris@76: 	elseif (isset($_REQUEST['theme_dir']) && rtrim(realpath($_REQUEST['theme_dir']), '/\\') != realpath($boarddir . '/Themes') && file_exists($_REQUEST['theme_dir']))
Chris@76: 		$method = 'path';
Chris@76: 	else
Chris@76: 		$method = 'copy';
Chris@76: 
Chris@76: 	if (!empty($_REQUEST['copy']) && $method == 'copy')
Chris@76: 	{
Chris@76: 		// Hopefully the themes directory is writable, or we might have a problem.
Chris@76: 		if (!is_writable($boarddir . '/Themes'))
Chris@76: 			fatal_lang_error('theme_install_write_error', 'critical');
Chris@76: 
Chris@76: 		$theme_dir = $boarddir . '/Themes/' . preg_replace('~[^A-Za-z0-9_\- ]~', '', $_REQUEST['copy']);
Chris@76: 
Chris@76: 		umask(0);
Chris@76: 		mkdir($theme_dir, 0777);
Chris@76: 
Chris@76: 		@set_time_limit(600);
Chris@76: 		if (function_exists('apache_reset_timeout'))
Chris@76: 			@apache_reset_timeout();
Chris@76: 
Chris@76: 		// Create subdirectories for css and javascript files.
Chris@76: 		mkdir($theme_dir . '/css', 0777);
Chris@76: 		mkdir($theme_dir . '/scripts', 0777);
Chris@76: 
Chris@76: 		// Copy over the default non-theme files.
Chris@76: 		$to_copy = array('/index.php', '/index.template.php', '/css/index.css', '/css/rtl.css', '/scripts/theme.js');
Chris@76: 		foreach ($to_copy as $file)
Chris@76: 		{
Chris@76: 			copy($settings['default_theme_dir'] . $file, $theme_dir . $file);
Chris@76: 			@chmod($theme_dir . $file, 0777);
Chris@76: 		}
Chris@76: 
Chris@76: 		// And now the entire images directory!
Chris@76: 		copytree($settings['default_theme_dir'] . '/images', $theme_dir . '/images');
Chris@76: 		package_flush_cache();
Chris@76: 
Chris@76: 		$theme_name = $_REQUEST['copy'];
Chris@76: 		$images_url = $boardurl . '/Themes/' . basename($theme_dir) . '/images';
Chris@76: 		$theme_dir = realpath($theme_dir);
Chris@76: 
Chris@76: 		// Lets get some data for the new theme.
Chris@76: 		$request = $smcFunc['db_query']('', '
Chris@76: 			SELECT variable, value
Chris@76: 			FROM {db_prefix}themes
Chris@76: 			WHERE variable IN ({string:theme_templates}, {string:theme_layers})
Chris@76: 				AND id_member = {int:no_member}
Chris@76: 				AND id_theme = {int:default_theme}',
Chris@76: 			array(
Chris@76: 				'no_member' => 0,
Chris@76: 				'default_theme' => 1,
Chris@76: 				'theme_templates' => 'theme_templates',
Chris@76: 				'theme_layers' => 'theme_layers',
Chris@76: 			)
Chris@76: 		);
Chris@76: 		while ($row = $smcFunc['db_fetch_assoc']($request))
Chris@76: 		{
Chris@76: 			if ($row['variable'] == 'theme_templates')
Chris@76: 				$theme_templates = $row['value'];
Chris@76: 			elseif ($row['variable'] == 'theme_layers')
Chris@76: 				$theme_layers = $row['value'];
Chris@76: 			else
Chris@76: 				continue;
Chris@76: 		}
Chris@76: 		$smcFunc['db_free_result']($request);
Chris@76: 
Chris@76: 		// Lets add a theme_info.xml to this theme.
Chris@76: 		$xml_info = '<' . '?xml version="1.0"?' . '>
Chris@76: <theme-info xmlns="http://www.simplemachines.org/xml/theme-info" xmlns:smf="http://www.simplemachines.org/">
Chris@76: 	<!-- For the id, always use something unique - put your name, a colon, and then the package name. -->
Chris@76: 	<id>smf:' . $smcFunc['strtolower'](str_replace(array(' '), '_', $_REQUEST['copy'])) . '</id>
Chris@76: 	<version>' . $modSettings['smfVersion'] . '</version>
Chris@76: 	<!-- Theme name, used purely for aesthetics. -->
Chris@76: 	<name>' . $_REQUEST['copy'] . '</name>
Chris@76: 	<!-- Author: your email address or contact information. The name attribute is optional. -->
Chris@76: 	<author name="Simple Machines">info@simplemachines.org</author>
Chris@76: 	<!-- Website... where to get updates and more information. -->
Chris@76: 	<website>http://www.simplemachines.org/</website>
Chris@76: 	<!-- Template layers to use, defaults to "html,body". -->
Chris@76: 	<layers>' . (empty($theme_layers) ? 'html,body' : $theme_layers) . '</layers>
Chris@76: 	<!-- Templates to load on startup. Default is "index". -->
Chris@76: 	<templates>' . (empty($theme_templates) ? 'index' : $theme_templates) . '</templates>
Chris@76: 	<!-- Base this theme off another? Default is blank, or no. It could be "default". -->
Chris@76: 	<based-on></based-on>
Chris@76: </theme-info>';
Chris@76: 
Chris@76: 		// Now write it.
Chris@76: 		$fp = @fopen($theme_dir . '/theme_info.xml', 'w+');
Chris@76: 		if ($fp)
Chris@76: 		{
Chris@76: 			fwrite($fp, $xml_info);
Chris@76: 			fclose($fp);
Chris@76: 		}
Chris@76: 	}
Chris@76: 	elseif (isset($_REQUEST['theme_dir']) && $method == 'path')
Chris@76: 	{
Chris@76: 		if (!is_dir($_REQUEST['theme_dir']) || !file_exists($_REQUEST['theme_dir'] . '/theme_info.xml'))
Chris@76: 			fatal_lang_error('theme_install_error', false);
Chris@76: 
Chris@76: 		$theme_name = basename($_REQUEST['theme_dir']);
Chris@76: 		$theme_dir = $_REQUEST['theme_dir'];
Chris@76: 	}
Chris@76: 	elseif ($method = 'upload')
Chris@76: 	{
Chris@76: 		// Hopefully the themes directory is writable, or we might have a problem.
Chris@76: 		if (!is_writable($boarddir . '/Themes'))
Chris@76: 			fatal_lang_error('theme_install_write_error', 'critical');
Chris@76: 
Chris@76: 		require_once($sourcedir . '/Subs-Package.php');
Chris@76: 
Chris@76: 		// Set the default settings...
Chris@76: 		$theme_name = strtok(basename(isset($_FILES['theme_gz']) ? $_FILES['theme_gz']['name'] : $_REQUEST['theme_gz']), '.');
Chris@76: 		$theme_name = preg_replace(array('/\s/', '/\.[\.]+/', '/[^\w_\.\-]/'), array('_', '.', ''), $theme_name);
Chris@76: 		$theme_dir = $boarddir . '/Themes/' . $theme_name;
Chris@76: 
Chris@76: 		if (isset($_FILES['theme_gz']) && is_uploaded_file($_FILES['theme_gz']['tmp_name']) && (@ini_get('open_basedir') != '' || file_exists($_FILES['theme_gz']['tmp_name'])))
Chris@76: 			$extracted = read_tgz_file($_FILES['theme_gz']['tmp_name'], $boarddir . '/Themes/' . $theme_name, false, true);
Chris@76: 		elseif (isset($_REQUEST['theme_gz']))
Chris@76: 		{
Chris@76: 			// Check that the theme is from simplemachines.org, for now... maybe add mirroring later.
Chris@76: 			if (preg_match('~^http://[\w_\-]+\.simplemachines\.org/~', $_REQUEST['theme_gz']) == 0 || strpos($_REQUEST['theme_gz'], 'dlattach') !== false)
Chris@76: 				fatal_lang_error('not_on_simplemachines');
Chris@76: 
Chris@76: 			$extracted = read_tgz_file($_REQUEST['theme_gz'], $boarddir . '/Themes/' . $theme_name, false, true);
Chris@76: 		}
Chris@76: 		else
Chris@76: 			redirectexit('action=admin;area=theme;sa=admin;' . $context['session_var'] . '=' . $context['session_id']);
Chris@76: 	}
Chris@76: 
Chris@76: 	// Something go wrong?
Chris@76: 	if ($theme_dir != '' && basename($theme_dir) != 'Themes')
Chris@76: 	{
Chris@76: 		// Defaults.
Chris@76: 		$install_info = array(
Chris@76: 			'theme_url' => $boardurl . '/Themes/' . basename($theme_dir),
Chris@76: 			'images_url' => isset($images_url) ? $images_url : $boardurl . '/Themes/' . basename($theme_dir) . '/images',
Chris@76: 			'theme_dir' => $theme_dir,
Chris@76: 			'name' => $theme_name
Chris@76: 		);
Chris@76: 
Chris@76: 		if (file_exists($theme_dir . '/theme_info.xml'))
Chris@76: 		{
Chris@76: 			$theme_info = file_get_contents($theme_dir . '/theme_info.xml');
Chris@76: 
Chris@76: 			$xml_elements = array(
Chris@76: 				'name' => 'name',
Chris@76: 				'theme_layers' => 'layers',
Chris@76: 				'theme_templates' => 'templates',
Chris@76: 				'based_on' => 'based-on',
Chris@76: 			);
Chris@76: 			foreach ($xml_elements as $var => $name)
Chris@76: 			{
Chris@76: 				if (preg_match('~<' . $name . '>(?:<!\[CDATA\[)?(.+?)(?:\]\]>)?</' . $name . '>~', $theme_info, $match) == 1)
Chris@76: 					$install_info[$var] = $match[1];
Chris@76: 			}
Chris@76: 
Chris@76: 			if (preg_match('~<images>(?:<!\[CDATA\[)?(.+?)(?:\]\]>)?</images>~', $theme_info, $match) == 1)
Chris@76: 			{
Chris@76: 				$install_info['images_url'] = $install_info['theme_url'] . '/' . $match[1];
Chris@76: 				$explicit_images = true;
Chris@76: 			}
Chris@76: 			if (preg_match('~<extra>(?:<!\[CDATA\[)?(.+?)(?:\]\]>)?</extra>~', $theme_info, $match) == 1)
Chris@76: 				$install_info += unserialize($match[1]);
Chris@76: 		}
Chris@76: 
Chris@76: 		if (isset($install_info['based_on']))
Chris@76: 		{
Chris@76: 			if ($install_info['based_on'] == 'default')
Chris@76: 			{
Chris@76: 				$install_info['theme_url'] = $settings['default_theme_url'];
Chris@76: 				$install_info['images_url'] = $settings['default_images_url'];
Chris@76: 			}
Chris@76: 			elseif ($install_info['based_on'] != '')
Chris@76: 			{
Chris@76: 				$install_info['based_on'] = preg_replace('~[^A-Za-z0-9\-_ ]~', '', $install_info['based_on']);
Chris@76: 
Chris@76: 				$request = $smcFunc['db_query']('', '
Chris@76: 					SELECT th.value AS base_theme_dir, th2.value AS base_theme_url' . (!empty($explicit_images) ? '' : ', th3.value AS images_url') . '
Chris@76: 					FROM {db_prefix}themes AS th
Chris@76: 						INNER JOIN {db_prefix}themes AS th2 ON (th2.id_theme = th.id_theme
Chris@76: 							AND th2.id_member = {int:no_member}
Chris@76: 							AND th2.variable = {string:theme_url})' . (!empty($explicit_images) ? '' : '
Chris@76: 						INNER JOIN {db_prefix}themes AS th3 ON (th3.id_theme = th.id_theme
Chris@76: 							AND th3.id_member = {int:no_member}
Chris@76: 							AND th3.variable = {string:images_url})') . '
Chris@76: 					WHERE th.id_member = {int:no_member}
Chris@76: 						AND (th.value LIKE {string:based_on} OR th.value LIKE {string:based_on_path})
Chris@76: 						AND th.variable = {string:theme_dir}
Chris@76: 					LIMIT 1',
Chris@76: 					array(
Chris@76: 						'no_member' => 0,
Chris@76: 						'theme_url' => 'theme_url',
Chris@76: 						'images_url' => 'images_url',
Chris@76: 						'theme_dir' => 'theme_dir',
Chris@76: 						'based_on' => '%/' . $install_info['based_on'],
Chris@76: 						'based_on_path' => '%' . "\\" . $install_info['based_on'],
Chris@76: 					)
Chris@76: 				);
Chris@76: 				$temp = $smcFunc['db_fetch_assoc']($request);
Chris@76: 				$smcFunc['db_free_result']($request);
Chris@76: 
Chris@76: 				// !!! An error otherwise?
Chris@76: 				if (is_array($temp))
Chris@76: 				{
Chris@76: 					$install_info = $temp + $install_info;
Chris@76: 
Chris@76: 					if (empty($explicit_images) && !empty($install_info['base_theme_url']))
Chris@76: 						$install_info['theme_url'] = $install_info['base_theme_url'];
Chris@76: 				}
Chris@76: 			}
Chris@76: 
Chris@76: 			unset($install_info['based_on']);
Chris@76: 		}
Chris@76: 
Chris@76: 		// Find the newest id_theme.
Chris@76: 		$result = $smcFunc['db_query']('', '
Chris@76: 			SELECT MAX(id_theme)
Chris@76: 			FROM {db_prefix}themes',
Chris@76: 			array(
Chris@76: 			)
Chris@76: 		);
Chris@76: 		list ($id_theme) = $smcFunc['db_fetch_row']($result);
Chris@76: 		$smcFunc['db_free_result']($result);
Chris@76: 
Chris@76: 		// This will be theme number...
Chris@76: 		$id_theme++;
Chris@76: 
Chris@76: 		$inserts = array();
Chris@76: 		foreach ($install_info as $var => $val)
Chris@76: 			$inserts[] = array($id_theme, $var, $val);
Chris@76: 
Chris@76: 		if (!empty($inserts))
Chris@76: 			$smcFunc['db_insert']('insert',
Chris@76: 				'{db_prefix}themes',
Chris@76: 				array('id_theme' => 'int', 'variable' => 'string-255', 'value' => 'string-65534'),
Chris@76: 				$inserts,
Chris@76: 				array('id_theme', 'variable')
Chris@76: 			);
Chris@76: 
Chris@76: 		updateSettings(array('knownThemes' => strtr($modSettings['knownThemes'] . ',' . $id_theme, array(',,' => ','))));
Chris@76: 	}
Chris@76: 
Chris@76: 	redirectexit('action=admin;area=theme;sa=install;theme_id=' . $id_theme . ';' . $context['session_var'] . '=' . $context['session_id']);
Chris@76: }
Chris@76: 
Chris@76: // Possibly the simplest and best example of how to ues the template system.
Chris@76: function WrapAction()
Chris@76: {
Chris@76: 	global $context, $settings, $sourcedir;
Chris@76: 
Chris@76: 	// Load any necessary template(s)?
Chris@76: 	if (isset($settings['catch_action']['template']))
Chris@76: 	{
Chris@76: 		// Load both the template and language file. (but don't fret if the language file isn't there...)
Chris@76: 		loadTemplate($settings['catch_action']['template']);
Chris@76: 		loadLanguage($settings['catch_action']['template'], '', false);
Chris@76: 	}
Chris@76: 
Chris@76: 	// Any special layers?
Chris@76: 	if (isset($settings['catch_action']['layers']))
Chris@76: 		$context['template_layers'] = $settings['catch_action']['layers'];
Chris@76: 
Chris@76: 	// Just call a function?
Chris@76: 	if (isset($settings['catch_action']['function']))
Chris@76: 	{
Chris@76: 		if (isset($settings['catch_action']['filename']))
Chris@76: 			template_include($sourcedir . '/' . $settings['catch_action']['filename'], true);
Chris@76: 
Chris@76: 		$settings['catch_action']['function']();
Chris@76: 	}
Chris@76: 	// And finally, the main sub template ;).
Chris@76: 	elseif (isset($settings['catch_action']['sub_template']))
Chris@76: 		$context['sub_template'] = $settings['catch_action']['sub_template'];
Chris@76: }
Chris@76: 
Chris@76: // Set an option via javascript.
Chris@76: function SetJavaScript()
Chris@76: {
Chris@76: 	global $settings, $user_info, $smcFunc, $options;
Chris@76: 
Chris@76: 	// Check the session id.
Chris@76: 	checkSession('get');
Chris@76: 
Chris@76: 	// This good-for-nothing pixel is being used to keep the session alive.
Chris@76: 	if (empty($_GET['var']) || !isset($_GET['val']))
Chris@76: 		redirectexit($settings['images_url'] . '/blank.gif');
Chris@76: 
Chris@76: 	// Sorry, guests can't go any further than this..
Chris@76: 	if ($user_info['is_guest'] || $user_info['id'] == 0)
Chris@76: 		obExit(false);
Chris@76: 
Chris@76: 	$reservedVars = array(
Chris@76: 		'actual_theme_url',
Chris@76: 		'actual_images_url',
Chris@76: 		'base_theme_dir',
Chris@76: 		'base_theme_url',
Chris@76: 		'default_images_url',
Chris@76: 		'default_theme_dir',
Chris@76: 		'default_theme_url',
Chris@76: 		'default_template',
Chris@76: 		'images_url',
Chris@76: 		'number_recent_posts',
Chris@76: 		'smiley_sets_default',
Chris@76: 		'theme_dir',
Chris@76: 		'theme_id',
Chris@76: 		'theme_layers',
Chris@76: 		'theme_templates',
Chris@76: 		'theme_url',
Chris@76: 		'name',
Chris@76: 	);
Chris@76: 
Chris@76: 	// Can't change reserved vars.
Chris@76: 	if (in_array(strtolower($_GET['var']), $reservedVars))
Chris@76: 		redirectexit($settings['images_url'] . '/blank.gif');
Chris@76: 
Chris@76: 	// Use a specific theme?
Chris@76: 	if (isset($_GET['th']) || isset($_GET['id']))
Chris@76: 	{
Chris@76: 		// Invalidate the current themes cache too.
Chris@76: 		cache_put_data('theme_settings-' . $settings['theme_id'] . ':' . $user_info['id'], null, 60);
Chris@76: 
Chris@76: 		$settings['theme_id'] = isset($_GET['th']) ? (int) $_GET['th'] : (int) $_GET['id'];
Chris@76: 	}
Chris@76: 
Chris@76: 	// If this is the admin preferences the passed value will just be an element of it.
Chris@76: 	if ($_GET['var'] == 'admin_preferences')
Chris@76: 	{
Chris@76: 		$options['admin_preferences'] = !empty($options['admin_preferences']) ? unserialize($options['admin_preferences']) : array();
Chris@76: 		// New thingy...
Chris@76: 		if (isset($_GET['admin_key']) && strlen($_GET['admin_key']) < 5)
Chris@76: 			$options['admin_preferences'][$_GET['admin_key']] = $_GET['val'];
Chris@76: 
Chris@76: 		// Change the value to be something nice,
Chris@76: 		$_GET['val'] = serialize($options['admin_preferences']);
Chris@76: 	}
Chris@76: 
Chris@76: 	// Update the option.
Chris@76: 	$smcFunc['db_insert']('replace',
Chris@76: 		'{db_prefix}themes',
Chris@76: 		array('id_theme' => 'int', 'id_member' => 'int', 'variable' => 'string-255', 'value' => 'string-65534'),
Chris@76: 		array($settings['theme_id'], $user_info['id'], $_GET['var'], is_array($_GET['val']) ? implode(',', $_GET['val']) : $_GET['val']),
Chris@76: 		array('id_theme', 'id_member', 'variable')
Chris@76: 	);
Chris@76: 
Chris@76: 	cache_put_data('theme_settings-' . $settings['theme_id'] . ':' . $user_info['id'], null, 60);
Chris@76: 
Chris@76: 	// Don't output anything...
Chris@76: 	redirectexit($settings['images_url'] . '/blank.gif');
Chris@76: }
Chris@76: 
Chris@76: function EditTheme()
Chris@76: {
Chris@76: 	global $context, $settings, $scripturl, $boarddir, $smcFunc;
Chris@76: 
Chris@76: 	if (isset($_REQUEST['preview']))
Chris@76: 	{
Chris@76: 		// !!! Should this be removed?
Chris@76: 		die;
Chris@76: 	}
Chris@76: 
Chris@76: 	isAllowedTo('admin_forum');
Chris@76: 	loadTemplate('Themes');
Chris@76: 
Chris@76: 	$_GET['th'] = isset($_GET['th']) ? (int) $_GET['th'] : (int) @$_GET['id'];
Chris@76: 
Chris@76: 	if (empty($_GET['th']))
Chris@76: 	{
Chris@76: 		$request = $smcFunc['db_query']('', '
Chris@76: 			SELECT id_theme, variable, value
Chris@76: 			FROM {db_prefix}themes
Chris@76: 			WHERE variable IN ({string:name}, {string:theme_dir}, {string:theme_templates}, {string:theme_layers})
Chris@76: 				AND id_member = {int:no_member}',
Chris@76: 			array(
Chris@76: 				'name' => 'name',
Chris@76: 				'theme_dir' => 'theme_dir',
Chris@76: 				'theme_templates' => 'theme_templates',
Chris@76: 				'theme_layers' => 'theme_layers',
Chris@76: 				'no_member' => 0,
Chris@76: 			)
Chris@76: 		);
Chris@76: 		$context['themes'] = array();
Chris@76: 		while ($row = $smcFunc['db_fetch_assoc']($request))
Chris@76: 		{
Chris@76: 			if (!isset($context['themes'][$row['id_theme']]))
Chris@76: 				$context['themes'][$row['id_theme']] = array(
Chris@76: 					'id' => $row['id_theme'],
Chris@76: 					'num_default_options' => 0,
Chris@76: 					'num_members' => 0,
Chris@76: 				);
Chris@76: 			$context['themes'][$row['id_theme']][$row['variable']] = $row['value'];
Chris@76: 		}
Chris@76: 		$smcFunc['db_free_result']($request);
Chris@76: 
Chris@76: 		foreach ($context['themes'] as $key => $theme)
Chris@76: 		{
Chris@76: 			// There has to be a Settings template!
Chris@76: 			if (!file_exists($theme['theme_dir'] . '/index.template.php') && !file_exists($theme['theme_dir'] . '/css/index.css'))
Chris@76: 				unset($context['themes'][$key]);
Chris@76: 			else
Chris@76: 			{
Chris@76: 				if (!isset($theme['theme_templates']))
Chris@76: 					$templates = array('index');
Chris@76: 				else
Chris@76: 					$templates = explode(',', $theme['theme_templates']);
Chris@76: 
Chris@76: 				foreach ($templates as $template)
Chris@76: 					if (file_exists($theme['theme_dir'] . '/' . $template . '.template.php'))
Chris@76: 					{
Chris@76: 						// Fetch the header... a good 256 bytes should be more than enough.
Chris@76: 						$fp = fopen($theme['theme_dir'] . '/' . $template . '.template.php', 'rb');
Chris@76: 						$header = fread($fp, 256);
Chris@76: 						fclose($fp);
Chris@76: 
Chris@76: 						// Can we find a version comment, at all?
Chris@76: 						if (preg_match('~\*\s@version\s+(.+)[\s]{2}~i', $header, $match) == 1)
Chris@76: 						{
Chris@76: 							$ver = $match[1];
Chris@76: 							if (!isset($context['themes'][$key]['version']) || $context['themes'][$key]['version'] > $ver)
Chris@76: 								$context['themes'][$key]['version'] = $ver;
Chris@76: 						}
Chris@76: 					}
Chris@76: 
Chris@76: 				$context['themes'][$key]['can_edit_style'] = file_exists($theme['theme_dir'] . '/css/index.css');
Chris@76: 			}
Chris@76: 		}
Chris@76: 
Chris@76: 		$context['sub_template'] = 'edit_list';
Chris@76: 
Chris@76: 		return 'no_themes';
Chris@76: 	}
Chris@76: 
Chris@76: 	$context['session_error'] = false;
Chris@76: 
Chris@76: 	// Get the directory of the theme we are editing.
Chris@76: 	$request = $smcFunc['db_query']('', '
Chris@76: 		SELECT value, id_theme
Chris@76: 		FROM {db_prefix}themes
Chris@76: 		WHERE variable = {string:theme_dir}
Chris@76: 			AND id_theme = {int:current_theme}
Chris@76: 		LIMIT 1',
Chris@76: 		array(
Chris@76: 			'current_theme' => $_GET['th'],
Chris@76: 			'theme_dir' => 'theme_dir',
Chris@76: 		)
Chris@76: 	);
Chris@76: 	list ($theme_dir, $context['theme_id']) = $smcFunc['db_fetch_row']($request);
Chris@76: 	$smcFunc['db_free_result']($request);
Chris@76: 
Chris@76: 	if (!file_exists($theme_dir . '/index.template.php') && !file_exists($theme_dir . '/css/index.css'))
Chris@76: 		fatal_lang_error('theme_edit_missing', false);
Chris@76: 
Chris@76: 	if (!isset($_REQUEST['filename']))
Chris@76: 	{
Chris@76: 		if (isset($_GET['directory']))
Chris@76: 		{
Chris@76: 			if (substr($_GET['directory'], 0, 1) == '.')
Chris@76: 				$_GET['directory'] = '';
Chris@76: 			else
Chris@76: 			{
Chris@76: 				$_GET['directory'] = preg_replace(array('~^[\./\\:\0\n\r]+~', '~[\\\\]~', '~/[\./]+~'), array('', '/', '/'), $_GET['directory']);
Chris@76: 
Chris@76: 				$temp = realpath($theme_dir . '/' . $_GET['directory']);
Chris@76: 				if (empty($temp) || substr($temp, 0, strlen(realpath($theme_dir))) != realpath($theme_dir))
Chris@76: 					$_GET['directory'] = '';
Chris@76: 			}
Chris@76: 		}
Chris@76: 
Chris@76: 		if (isset($_GET['directory']) && $_GET['directory'] != '')
Chris@76: 		{
Chris@76: 			$context['theme_files'] = get_file_listing($theme_dir . '/' . $_GET['directory'], $_GET['directory'] . '/');
Chris@76: 
Chris@76: 			$temp = dirname($_GET['directory']);
Chris@76: 			array_unshift($context['theme_files'], array(
Chris@76: 				'filename' => $temp == '.' || $temp == '' ? '/ (..)' : $temp . ' (..)',
Chris@76: 				'is_writable' => is_writable($theme_dir . '/' . $temp),
Chris@76: 				'is_directory' => true,
Chris@76: 				'is_template' => false,
Chris@76: 				'is_image' => false,
Chris@76: 				'is_editable' => false,
Chris@76: 				'href' => $scripturl . '?action=admin;area=theme;th=' . $_GET['th'] . ';' . $context['session_var'] . '=' . $context['session_id'] . ';sa=edit;directory=' . $temp,
Chris@76: 				'size' => '',
Chris@76: 			));
Chris@76: 		}
Chris@76: 		else
Chris@76: 			$context['theme_files'] = get_file_listing($theme_dir, '');
Chris@76: 
Chris@76: 		$context['sub_template'] = 'edit_browse';
Chris@76: 
Chris@76: 		return;
Chris@76: 	}
Chris@76: 	else
Chris@76: 	{
Chris@76: 		if (substr($_REQUEST['filename'], 0, 1) == '.')
Chris@76: 			$_REQUEST['filename'] = '';
Chris@76: 		else
Chris@76: 		{
Chris@76: 			$_REQUEST['filename'] = preg_replace(array('~^[\./\\:\0\n\r]+~', '~[\\\\]~', '~/[\./]+~'), array('', '/', '/'), $_REQUEST['filename']);
Chris@76: 
Chris@76: 			$temp = realpath($theme_dir . '/' . $_REQUEST['filename']);
Chris@76: 			if (empty($temp) || substr($temp, 0, strlen(realpath($theme_dir))) != realpath($theme_dir))
Chris@76: 				$_REQUEST['filename'] = '';
Chris@76: 		}
Chris@76: 
Chris@76: 		if (empty($_REQUEST['filename']))
Chris@76: 			fatal_lang_error('theme_edit_missing', false);
Chris@76: 	}
Chris@76: 
Chris@76: 	if (isset($_POST['submit']))
Chris@76: 	{
Chris@76: 		if (checkSession('post', '', false) == '')
Chris@76: 		{
Chris@76: 			if (is_array($_POST['entire_file']))
Chris@76: 				$_POST['entire_file'] = implode("\n", $_POST['entire_file']);
Chris@76: 			$_POST['entire_file'] = rtrim(strtr($_POST['entire_file'], array("\r" => '', '   ' => "\t")));
Chris@76: 
Chris@76: 			// Check for a parse error!
Chris@76: 			if (substr($_REQUEST['filename'], -13) == '.template.php' && is_writable($theme_dir) && @ini_get('display_errors'))
Chris@76: 			{
Chris@76: 				$request = $smcFunc['db_query']('', '
Chris@76: 					SELECT value
Chris@76: 					FROM {db_prefix}themes
Chris@76: 					WHERE variable = {string:theme_url}
Chris@76: 						AND id_theme = {int:current_theme}
Chris@76: 					LIMIT 1',
Chris@76: 					array(
Chris@76: 						'current_theme' => $_GET['th'],
Chris@76: 						'theme_url' => 'theme_url',
Chris@76: 					)
Chris@76: 				);
Chris@76: 				list ($theme_url) = $smcFunc['db_fetch_row']($request);
Chris@76: 				$smcFunc['db_free_result']($request);
Chris@76: 
Chris@76: 				$fp = fopen($theme_dir . '/tmp_' . session_id() . '.php', 'w');
Chris@76: 				fwrite($fp, $_POST['entire_file']);
Chris@76: 				fclose($fp);
Chris@76: 
Chris@76: 				// !!! Use fetch_web_data()?
Chris@76: 				$error = @file_get_contents($theme_url . '/tmp_' . session_id() . '.php');
Chris@76: 				if (preg_match('~ <b>(\d+)</b><br( /)?' . '>$~i', $error) != 0)
Chris@76: 					$error_file = $theme_dir . '/tmp_' . session_id() . '.php';
Chris@76: 				else
Chris@76: 					unlink($theme_dir . '/tmp_' . session_id() . '.php');
Chris@76: 			}
Chris@76: 
Chris@76: 			if (!isset($error_file))
Chris@76: 			{
Chris@76: 				$fp = fopen($theme_dir . '/' . $_REQUEST['filename'], 'w');
Chris@76: 				fwrite($fp, $_POST['entire_file']);
Chris@76: 				fclose($fp);
Chris@76: 
Chris@76: 				redirectexit('action=admin;area=theme;th=' . $_GET['th'] . ';' . $context['session_var'] . '=' . $context['session_id'] . ';sa=edit;directory=' . dirname($_REQUEST['filename']));
Chris@76: 			}
Chris@76: 		}
Chris@76: 		// Session timed out.
Chris@76: 		else
Chris@76: 		{
Chris@76: 			loadLanguage('Errors');
Chris@76: 
Chris@76: 			$context['session_error'] = true;
Chris@76: 			$context['sub_template'] = 'edit_file';
Chris@76: 
Chris@76: 			// Recycle the submitted data.
Chris@76: 			$context['entire_file'] = htmlspecialchars($_POST['entire_file']);
Chris@76: 
Chris@76: 			// You were able to submit it, so it's reasonable to assume you are allowed to save.
Chris@76: 			$context['allow_save'] = true;
Chris@76: 
Chris@76: 			return;
Chris@76: 		}
Chris@76: 	}
Chris@76: 
Chris@76: 	$context['allow_save'] = is_writable($theme_dir . '/' . $_REQUEST['filename']);
Chris@76: 	$context['allow_save_filename'] = strtr($theme_dir . '/' . $_REQUEST['filename'], array($boarddir => '...'));
Chris@76: 	$context['edit_filename'] = htmlspecialchars($_REQUEST['filename']);
Chris@76: 
Chris@76: 	if (substr($_REQUEST['filename'], -4) == '.css')
Chris@76: 	{
Chris@76: 		$context['sub_template'] = 'edit_style';
Chris@76: 
Chris@76: 		$context['entire_file'] = htmlspecialchars(strtr(file_get_contents($theme_dir . '/' . $_REQUEST['filename']), array("\t" => '   ')));
Chris@76: 	}
Chris@76: 	elseif (substr($_REQUEST['filename'], -13) == '.template.php')
Chris@76: 	{
Chris@76: 		$context['sub_template'] = 'edit_template';
Chris@76: 
Chris@76: 		if (!isset($error_file))
Chris@76: 			$file_data = file($theme_dir . '/' . $_REQUEST['filename']);
Chris@76: 		else
Chris@76: 		{
Chris@76: 			if (preg_match('~(<b>.+?</b>:.+?<b>).+?(</b>.+?<b>\d+</b>)<br( /)?' . '>$~i', $error, $match) != 0)
Chris@76: 				$context['parse_error'] = $match[1] . $_REQUEST['filename'] . $match[2];
Chris@76: 			$file_data = file($error_file);
Chris@76: 			unlink($error_file);
Chris@76: 		}
Chris@76: 
Chris@76: 		$j = 0;
Chris@76: 		$context['file_parts'] = array(array('lines' => 0, 'line' => 1, 'data' => ''));
Chris@76: 		for ($i = 0, $n = count($file_data); $i < $n; $i++)
Chris@76: 		{
Chris@76: 			if (isset($file_data[$i + 1]) && substr($file_data[$i + 1], 0, 9) == 'function ')
Chris@76: 			{
Chris@76: 				// Try to format the functions a little nicer...
Chris@76: 				$context['file_parts'][$j]['data'] = trim($context['file_parts'][$j]['data']) . "\n";
Chris@76: 
Chris@76: 				if (empty($context['file_parts'][$j]['lines']))
Chris@76: 					unset($context['file_parts'][$j]);
Chris@76: 				$context['file_parts'][++$j] = array('lines' => 0, 'line' => $i + 1, 'data' => '');
Chris@76: 			}
Chris@76: 
Chris@76: 			$context['file_parts'][$j]['lines']++;
Chris@76: 			$context['file_parts'][$j]['data'] .= htmlspecialchars(strtr($file_data[$i], array("\t" => '   ')));
Chris@76: 		}
Chris@76: 
Chris@76: 		$context['entire_file'] = htmlspecialchars(strtr(implode('', $file_data), array("\t" => '   ')));
Chris@76: 	}
Chris@76: 	else
Chris@76: 	{
Chris@76: 		$context['sub_template'] = 'edit_file';
Chris@76: 
Chris@76: 		$context['entire_file'] = htmlspecialchars(strtr(file_get_contents($theme_dir . '/' . $_REQUEST['filename']), array("\t" => '   ')));
Chris@76: 	}
Chris@76: }
Chris@76: 
Chris@76: function get_file_listing($path, $relative)
Chris@76: {
Chris@76: 	global $scripturl, $txt, $context;
Chris@76: 
Chris@76: 	// Is it even a directory?
Chris@76: 	if (!is_dir($path))
Chris@76: 		fatal_lang_error('error_invalid_dir', 'critical');
Chris@76: 
Chris@76: 	$dir = dir($path);
Chris@76: 	$entries = array();
Chris@76: 	while ($entry = $dir->read())
Chris@76: 		$entries[] = $entry;
Chris@76: 	$dir->close();
Chris@76: 
Chris@76: 	natcasesort($entries);
Chris@76: 
Chris@76: 	$listing1 = array();
Chris@76: 	$listing2 = array();
Chris@76: 
Chris@76: 	foreach ($entries as $entry)
Chris@76: 	{
Chris@76: 		// Skip all dot files, including .htaccess.
Chris@76: 		if (substr($entry, 0, 1) == '.' || $entry == 'CVS')
Chris@76: 			continue;
Chris@76: 
Chris@76: 		if (is_dir($path . '/' . $entry))
Chris@76: 			$listing1[] = array(
Chris@76: 				'filename' => $entry,
Chris@76: 				'is_writable' => is_writable($path . '/' . $entry),
Chris@76: 				'is_directory' => true,
Chris@76: 				'is_template' => false,
Chris@76: 				'is_image' => false,
Chris@76: 				'is_editable' => false,
Chris@76: 				'href' => $scripturl . '?action=admin;area=theme;th=' . $_GET['th'] . ';' . $context['session_var'] . '=' . $context['session_id'] . ';sa=edit;directory=' . $relative . $entry,
Chris@76: 				'size' => '',
Chris@76: 			);
Chris@76: 		else
Chris@76: 		{
Chris@76: 			$size = filesize($path . '/' . $entry);
Chris@76: 			if ($size > 2048 || $size == 1024)
Chris@76: 				$size = comma_format($size / 1024) . ' ' . $txt['themeadmin_edit_kilobytes'];
Chris@76: 			else
Chris@76: 				$size = comma_format($size) . ' ' . $txt['themeadmin_edit_bytes'];
Chris@76: 
Chris@76: 			$listing2[] = array(
Chris@76: 				'filename' => $entry,
Chris@76: 				'is_writable' => is_writable($path . '/' . $entry),
Chris@76: 				'is_directory' => false,
Chris@76: 				'is_template' => preg_match('~\.template\.php$~', $entry) != 0,
Chris@76: 				'is_image' => preg_match('~\.(jpg|jpeg|gif|bmp|png)$~', $entry) != 0,
Chris@76: 				'is_editable' => is_writable($path . '/' . $entry) && preg_match('~\.(php|pl|css|js|vbs|xml|xslt|txt|xsl|html|htm|shtm|shtml|asp|aspx|cgi|py)$~', $entry) != 0,
Chris@76: 				'href' => $scripturl . '?action=admin;area=theme;th=' . $_GET['th'] . ';' . $context['session_var'] . '=' . $context['session_id'] . ';sa=edit;filename=' . $relative . $entry,
Chris@76: 				'size' => $size,
Chris@76: 				'last_modified' => timeformat(filemtime($path . '/' . $entry)),
Chris@76: 			);
Chris@76: 		}
Chris@76: 	}
Chris@76: 
Chris@76: 	return array_merge($listing1, $listing2);
Chris@76: }
Chris@76: 
Chris@76: function CopyTemplate()
Chris@76: {
Chris@76: 	global $context, $settings, $smcFunc;
Chris@76: 
Chris@76: 	isAllowedTo('admin_forum');
Chris@76: 	loadTemplate('Themes');
Chris@76: 
Chris@76: 	$context[$context['admin_menu_name']]['current_subsection'] = 'edit';
Chris@76: 
Chris@76: 	$_GET['th'] = isset($_GET['th']) ? (int) $_GET['th'] : (int) $_GET['id'];
Chris@76: 
Chris@76: 	$request = $smcFunc['db_query']('', '
Chris@76: 		SELECT th1.value, th1.id_theme, th2.value
Chris@76: 		FROM {db_prefix}themes AS th1
Chris@76: 			LEFT JOIN {db_prefix}themes AS th2 ON (th2.variable = {string:base_theme_dir} AND th2.id_theme = {int:current_theme})
Chris@76: 		WHERE th1.variable = {string:theme_dir}
Chris@76: 			AND th1.id_theme = {int:current_theme}
Chris@76: 		LIMIT 1',
Chris@76: 		array(
Chris@76: 			'current_theme' => $_GET['th'],
Chris@76: 			'base_theme_dir' => 'base_theme_dir',
Chris@76: 			'theme_dir' => 'theme_dir',
Chris@76: 		)
Chris@76: 	);
Chris@76: 	list ($theme_dir, $context['theme_id'], $base_theme_dir) = $smcFunc['db_fetch_row']($request);
Chris@76: 	$smcFunc['db_free_result']($request);
Chris@76: 
Chris@76: 	if (isset($_REQUEST['template']) && preg_match('~[\./\\\\:\0]~', $_REQUEST['template']) == 0)
Chris@76: 	{
Chris@76: 		if (!empty($base_theme_dir) && file_exists($base_theme_dir . '/' . $_REQUEST['template'] . '.template.php'))
Chris@76: 			$filename = $base_theme_dir . '/' . $_REQUEST['template'] . '.template.php';
Chris@76: 		elseif (file_exists($settings['default_theme_dir'] . '/' . $_REQUEST['template'] . '.template.php'))
Chris@76: 			$filename = $settings['default_theme_dir'] . '/' . $_REQUEST['template'] . '.template.php';
Chris@76: 		else
Chris@76: 			fatal_lang_error('no_access', false);
Chris@76: 
Chris@76: 		$fp = fopen($theme_dir . '/' . $_REQUEST['template'] . '.template.php', 'w');
Chris@76: 		fwrite($fp, file_get_contents($filename));
Chris@76: 		fclose($fp);
Chris@76: 
Chris@76: 		redirectexit('action=admin;area=theme;th=' . $context['theme_id'] . ';' . $context['session_var'] . '=' . $context['session_id'] . ';sa=copy');
Chris@76: 	}
Chris@76: 	elseif (isset($_REQUEST['lang_file']) && preg_match('~^[^\./\\\\:\0]\.[^\./\\\\:\0]$~', $_REQUEST['lang_file']) != 0)
Chris@76: 	{
Chris@76: 		if (!empty($base_theme_dir) && file_exists($base_theme_dir . '/languages/' . $_REQUEST['lang_file'] . '.php'))
Chris@76: 			$filename = $base_theme_dir . '/languages/' . $_REQUEST['template'] . '.php';
Chris@76: 		elseif (file_exists($settings['default_theme_dir'] . '/languages/' . $_REQUEST['template'] . '.php'))
Chris@76: 			$filename = $settings['default_theme_dir'] . '/languages/' . $_REQUEST['template'] . '.php';
Chris@76: 		else
Chris@76: 			fatal_lang_error('no_access', false);
Chris@76: 
Chris@76: 		$fp = fopen($theme_dir . '/languages/' . $_REQUEST['lang_file'] . '.php', 'w');
Chris@76: 		fwrite($fp, file_get_contents($filename));
Chris@76: 		fclose($fp);
Chris@76: 
Chris@76: 		redirectexit('action=admin;area=theme;th=' . $context['theme_id'] . ';' . $context['session_var'] . '=' . $context['session_id'] . ';sa=copy');
Chris@76: 	}
Chris@76: 
Chris@76: 	$templates = array();
Chris@76: 	$lang_files = array();
Chris@76: 
Chris@76: 	$dir = dir($settings['default_theme_dir']);
Chris@76: 	while ($entry = $dir->read())
Chris@76: 	{
Chris@76: 		if (substr($entry, -13) == '.template.php')
Chris@76: 			$templates[] = substr($entry, 0, -13);
Chris@76: 	}
Chris@76: 	$dir->close();
Chris@76: 
Chris@76: 	$dir = dir($settings['default_theme_dir'] . '/languages');
Chris@76: 	while ($entry = $dir->read())
Chris@76: 	{
Chris@76: 		if (preg_match('~^([^\.]+\.[^\.]+)\.php$~', $entry, $matches))
Chris@76: 			$lang_files[] = $matches[1];
Chris@76: 	}
Chris@76: 	$dir->close();
Chris@76: 
Chris@76: 	if (!empty($base_theme_dir))
Chris@76: 	{
Chris@76: 		$dir = dir($base_theme_dir);
Chris@76: 		while ($entry = $dir->read())
Chris@76: 		{
Chris@76: 			if (substr($entry, -13) == '.template.php' && !in_array(substr($entry, 0, -13), $templates))
Chris@76: 				$templates[] = substr($entry, 0, -13);
Chris@76: 		}
Chris@76: 		$dir->close();
Chris@76: 
Chris@76: 		if (file_exists($base_theme_dir . '/languages'))
Chris@76: 		{
Chris@76: 			$dir = dir($base_theme_dir . '/languages');
Chris@76: 			while ($entry = $dir->read())
Chris@76: 			{
Chris@76: 				if (preg_match('~^([^\.]+\.[^\.]+)\.php$~', $entry, $matches) && !in_array($matches[1], $lang_files))
Chris@76: 					$lang_files[] = $matches[1];
Chris@76: 			}
Chris@76: 			$dir->close();
Chris@76: 		}
Chris@76: 	}
Chris@76: 
Chris@76: 	natcasesort($templates);
Chris@76: 	natcasesort($lang_files);
Chris@76: 
Chris@76: 	$context['available_templates'] = array();
Chris@76: 	foreach ($templates as $template)
Chris@76: 		$context['available_templates'][$template] = array(
Chris@76: 			'filename' => $template . '.template.php',
Chris@76: 			'value' => $template,
Chris@76: 			'already_exists' => false,
Chris@76: 			'can_copy' => is_writable($theme_dir),
Chris@76: 		);
Chris@76: 	$context['available_language_files'] = array();
Chris@76: 	foreach ($lang_files as $file)
Chris@76: 		$context['available_language_files'][$file] = array(
Chris@76: 			'filename' => $file . '.php',
Chris@76: 			'value' => $file,
Chris@76: 			'already_exists' => false,
Chris@76: 			'can_copy' => file_exists($theme_dir . '/languages') ? is_writable($theme_dir . '/languages') : is_writable($theme_dir),
Chris@76: 		);
Chris@76: 
Chris@76: 	$dir = dir($theme_dir);
Chris@76: 	while ($entry = $dir->read())
Chris@76: 	{
Chris@76: 		if (substr($entry, -13) == '.template.php' && isset($context['available_templates'][substr($entry, 0, -13)]))
Chris@76: 		{
Chris@76: 			$context['available_templates'][substr($entry, 0, -13)]['already_exists'] = true;
Chris@76: 			$context['available_templates'][substr($entry, 0, -13)]['can_copy'] = is_writable($theme_dir . '/' . $entry);
Chris@76: 		}
Chris@76: 	}
Chris@76: 	$dir->close();
Chris@76: 
Chris@76: 	if (file_exists($theme_dir . '/languages'))
Chris@76: 	{
Chris@76: 		$dir = dir($theme_dir . '/languages');
Chris@76: 		while ($entry = $dir->read())
Chris@76: 		{
Chris@76: 			if (preg_match('~^([^\.]+\.[^\.]+)\.php$~', $entry, $matches) && isset($context['available_language_files'][$matches[1]]))
Chris@76: 			{
Chris@76: 				$context['available_language_files'][$matches[1]]['already_exists'] = true;
Chris@76: 				$context['available_language_files'][$matches[1]]['can_copy'] = is_writable($theme_dir . '/languages/' . $entry);
Chris@76: 			}
Chris@76: 		}
Chris@76: 		$dir->close();
Chris@76: 	}
Chris@76: 
Chris@76: 	$context['sub_template'] = 'copy_template';
Chris@76: }
Chris@76: 
Chris@76: ?>