// Check if the user has sent or received the file.
// Check if the user has sent or received the file.
$sql="SELECT * FROM `".$dropbox_cnf["personTbl"]."` WHERE file_id='".mysql_real_escape_string($_GET['id'])."' AND user_id='".mysql_real_escape_string($_user['user_id'])."'";
$sql="SELECT * FROM ".$dropbox_cnf["tbl_person"]." WHERE file_id='".mysql_real_escape_string($_GET['id'])."' AND user_id='".mysql_real_escape_string($_user['user_id'])."'";
@ -126,13 +126,13 @@ function delete_category($action, $id)
if ($action=='deletereceivedcategory')
if ($action=='deletereceivedcategory')
{
{
$sentreceived='received';
$sentreceived='received';
$entries_table=$dropbox_cnf['postTbl'];
$entries_table=$dropbox_cnf['tbl_post'];
$id_field='file_id';
$id_field='file_id';
}
}
elseif ($action=='deletesentcategory')
elseif ($action=='deletesentcategory')
{
{
$sentreceived='sent';
$sentreceived='sent';
$entries_table=$dropbox_cnf['fileTbl'];
$entries_table=$dropbox_cnf['tbl_file'];
$id_field='id';
$id_field='id';
}
}
else
else
@ -145,7 +145,7 @@ function delete_category($action, $id)
$result=api_sql_query($sql);
$result=api_sql_query($sql);
// step 2: delete all the documents in this category
// step 2: delete all the documents in this category
$sql="SELECT * FROM `".$entries_table."` WHERE cat_id='".Database::escape_string($id)."'";
$sql="SELECT * FROM ".$entries_table." WHERE cat_id='".Database::escape_string($id)."'";
$result=api_sql_query($sql);
$result=api_sql_query($sql);
while ($row=mysql_fetch_array($result))
while ($row=mysql_fetch_array($result))
@ -209,7 +209,7 @@ function store_move($id, $target, $part)
{
{
if ($part=='received')
if ($part=='received')
{
{
$sql="UPDATE `".$dropbox_cnf["postTbl"]."` SET cat_id='".Database::escape_string($target)."'
$sql="UPDATE ".$dropbox_cnf["tbl_post"]." SET cat_id='".Database::escape_string($target)."'
WHERE dest_user_id='".Database::escape_string($_user['user_id'])."'
WHERE dest_user_id='".Database::escape_string($_user['user_id'])."'
AND file_id='".Database::escape_string($id)."'
AND file_id='".Database::escape_string($id)."'
";
";
@ -218,7 +218,7 @@ function store_move($id, $target, $part)
}
}
if ($part=='sent')
if ($part=='sent')
{
{
$sql="UPDATE `".$dropbox_cnf["fileTbl"]."` SET cat_id='".Database::escape_string($target)."'
$sql="UPDATE ".$dropbox_cnf["tbl_file"]." SET cat_id='".Database::escape_string($target)."'
WHERE uploader_id='".Database::escape_string($_user['user_id'])."'
WHERE uploader_id='".Database::escape_string($_user['user_id'])."'
AND id='".Database::escape_string($id)."'
AND id='".Database::escape_string($id)."'
";
";
@ -309,7 +309,7 @@ function get_dropbox_categories($filter='')
$return_array=array();
$return_array=array();
$sql="SELECT * FROM `".$dropbox_cnf['tbl_category']."` WHERE user_id='".$_user['user_id']."'";
$sql="SELECT * FROM ".$dropbox_cnf['tbl_category']." WHERE user_id='".$_user['user_id']."'";
$result=api_sql_query($sql);
$result=api_sql_query($sql);
while ($row=mysql_fetch_array($result))
while ($row=mysql_fetch_array($result))
@ -367,14 +367,14 @@ function store_addcategory()
if (!$_POST['edit_id'])
if (!$_POST['edit_id'])
{
{
// step 3a, we check if the category doesn't already exist
// step 3a, we check if the category doesn't already exist
$sql="SELECT * FROM `".$dropbox_cnf['tbl_category']."` WHERE user_id='".$_user['user_id']."' AND cat_name='".Database::escape_string($_POST['category_name'])."' AND received='".$received."' AND sent='".$sent."'";
$sql="SELECT * FROM ".$dropbox_cnf['tbl_category']." WHERE user_id='".$_user['user_id']."' AND cat_name='".Database::escape_string($_POST['category_name'])."' AND received='".$received."' AND sent='".$sent."'";
$result=api_sql_query($sql);
$result=api_sql_query($sql);
// step 3b, we add the category if it does not exist yet.
// step 3b, we add the category if it does not exist yet.
if (mysql_num_rows($result)==0)
if (mysql_num_rows($result)==0)
{
{
$sql="INSERT INTO `".$dropbox_cnf['tbl_category']."` (cat_name, received, sent, user_id)
$sql="INSERT INTO ".$dropbox_cnf['tbl_category']." (cat_name, received, sent, user_id)
Yannick Warnier
18 years ago