>', 'pos' + IntToStr(i) ); // set boundary
116 | tBound += myBound;
117 | i += 1;
118 | query.Next;
119 | end;
120 |
121 |
122 | // display geo_pos
123 | Render('bbs_geopos.html', [tPos, tMark, tBound,
124 | make_Header( mypara ),
125 | make_Footer( BrookFCLFCGIBroker.conn, mypara ) ]);
126 |
127 | // release mem
128 | query.active := false;
129 | query.free;
130 |
131 |
132 | end;
133 |
134 |
135 | initialization
136 | Tgeoinfo.Register('geoinfo');
137 |
138 | end.
139 |
140 |
--------------------------------------------------------------------------------
/info.pas:
--------------------------------------------------------------------------------
1 | /////////////////////////////////////////////////////////////////////////
2 | // project : bbs_fcgi
3 | // author : Ralph Berger
4 | // created : 01.03.14
5 | // list active users
6 | // show info tiles ( total , logins, href to user posts( upst )
7 | // modified : 24.04.2014 BF 2.6.4 -> BF 3.0.0
8 |
9 | unit info;
10 |
11 | {$mode objfpc}{$H+}
12 |
13 | interface
14 |
15 | uses
16 | BrookAction, BrookFCLFCGIBroker, BrookConsts, Classes, SysUtils, Variants,
17 | FmtBCD, strutils, sqldb, blowcryp, mapping, menu;
18 |
19 | type
20 | TInfo = class(TBrookAction)
21 | public
22 | procedure Get; override;
23 | end;
24 |
25 | implementation
26 |
27 | procedure TInfo.Get;
28 | var
29 | I : Integer;
30 | sTiles, kachel, sTmp : string;
31 | usrFrm1: usrInfType;
32 | mySessn: sessInfType;
33 | myPara : paraType;
34 | query : TSQLQuery;
35 |
36 |
37 | begin
38 | // check session
39 | mypara.VSession := Params.Values['sesn'];
40 | mypara.sip:= TheRequest.RemoteAddress;
41 | if NOT isSessionValid( mypara ) then
42 | begin
43 | Render(err_page, [myPara.lastError]);
44 | exit;
45 | end;
46 |
47 |
48 | // callback target
49 | paraTypeInit('info?', myPara ); // init mypara
50 | mypara.sCmd := '1'; // '1' full menus
51 | mySessn.id := mypara.VSession;
52 | sesn_Read( BrookFCLFCGIBroker.conn, mySessn );
53 | sesn_copy_para( mySessn, myPara );
54 |
55 | // set display order
56 | case myPara.v_order of
57 | '0' : sTmp := '' ;
58 | '1' : sTmp := ' ORDER BY login';
59 | '2' : sTmp := ' ORDER BY latitude, longitude';
60 | '3' : sTmp := ' ORDER BY user_id';
61 | end;
62 |
63 |
64 | // query
65 | query := TSQLQuery.Create(nil);
66 | query.DataBase := BrookFCLFCGIBroker.conn;
67 | query.SQL.Text := 'select * from sessions where is_active = 1' +
68 | sTmp + // order by
69 | ' limit ' + // limit start,stop
70 | IntToStr( StrToInt( myPara.v_page ) * PageItems )
71 | + ',' + IntToStr( StrToInt( myPara.v_page ) * PageItems + PageItems+1 );
72 | query.Open;
73 |
74 | if query.EOF then
75 | begin
76 | query.active := false;
77 | query.free;
78 | Render(err_page, ['No Users online.']);
79 | exit;
80 | end;
81 |
82 | // loop throug open sessions
83 | i := 0;
84 | sTiles := '';
85 | while not query.EOF do
86 | begin
87 | cpySessInfo ( query, mySessn );
88 | // read session user
89 | ReadUsr( conn, 'where iduser=' + mySessn.user_id , usrFrm1 );
90 | // set user tile
91 | kachel := sUpdate( usrTile,'%%0', mySessn.user_id ); // UserID
92 | kachel := sUpdate( kachel, '%%1', iif((i mod 2=1),'rkachel','bkachel')); // tile(red/blue)
93 | kachel := sUpdate( kachel, '%%2', usrFrm1.Name ); // UserName
94 | kachel := sUpdate( kachel, '%%3', showUsrImage(usrFrm1)); // User PNG
95 | kachel := sUpdate( kachel, '%%4', MIDSTR(mySessn.login,12,5)); // Session start ( HH:MM )
96 | kachel := sUpdate( kachel, '%%5', usrFrm1.TotalTime ); // User logins
97 | kachel := sUpdate( kachel, '%%6', myPara.VSession ); // Session ID
98 | sTiles += kachel;
99 | i += 1;
100 | if i = PageItems then break;
101 | query.Next;
102 | end;
103 |
104 | // prepare & render
105 | // Update Session info
106 | myPara.v_rec := mySessn.rid; // last rec in display
107 | myPara.v_eof := iif( query.EOF, '1', '0'); // eof flag
108 |
109 | Render('bbs_onln.html', [ make_header(mypara),
110 | sTiles,
111 | make_footer( BrookFCLFCGIBroker.conn, mypara)]);
112 |
113 | // release mem
114 | query.active := false;
115 | query.free;
116 |
117 | end;
118 |
119 | initialization
120 | TInfo.Register('info');
121 |
122 | end.
123 |
124 |
--------------------------------------------------------------------------------
/legal.pas:
--------------------------------------------------------------------------------
1 | /////////////////////////////////////////////////////////////////////////
2 | // project : bbs_fcgi
3 | // author : Ralph Berger
4 | // created : 02.03.14
5 | // render forms : bbs_terms.html, bbs_imprint.html, bbs_privacy.html
6 | // select via : legal?actn=1,2,3
7 | // modified : 24.04.2014 BF 2.6.4 -> BF 3.0.0
8 |
9 | unit legal;
10 |
11 | {$mode objfpc}{$H+}
12 |
13 | interface
14 |
15 | uses
16 | BrookAction, BrookFCLFCGIBroker, BrookConsts, Classes, SysUtils, Variants,
17 | FmtBCD, sqldb, blowcryp, mapping, menu;
18 |
19 | type
20 | TLegal = class(TBrookAction)
21 | public
22 | procedure Get; override;
23 | end;
24 |
25 | implementation
26 |
27 | procedure TLegal.Get;
28 | var
29 |
30 | bSessn : boolean;
31 | sActn : String;
32 | myPara : ParaType;
33 | mySessn : sessInfType;
34 | sMenu, sFooter : string;
35 |
36 |
37 | begin
38 |
39 | sActn := Params.Values['actn'];
40 | mypara.VSession := Params.Values['sesn'];
41 | if sActn = '' then
42 | begin
43 | Render(err_page, ['Action ID fehlt.']);
44 | exit;
45 | end;
46 |
47 | // no break on expired session - always render legal forms
48 | mypara.sip:= TheRequest.RemoteAddress;
49 | bSessn:= isSessionValid( mypara ) ;
50 |
51 | // preset myPara
52 | paraTypeInit('legal?actn=' + sActn, myPara );
53 |
54 | // read session record
55 | if bSessn then
56 | begin
57 | mySessn.id := mypara.VSession;
58 | sesn_Read( BrookFCLFCGIBroker.conn, mySessn );
59 | sesn_copy_para( mySessn, myPara );
60 | end;
61 |
62 | mypara.sCmd := iif ( bSessn, '1', '0');
63 |
64 | sMenu := make_Header( mypara );
65 | sFooter := make_Footer( BrookFCLFCGIBroker.conn, mypara );
66 | if mypara.lastError <> '' then
67 | begin
68 | Render(err_page, [mypara.lastError]);
69 | exit;
70 | end;
71 |
72 | // render template
73 | case sActn of
74 | '1' : Render('bbs_terms.html', [ sMenu, GetContent( BrookFCLFCGIBroker.conn, 'AGB'), sFooter ]);
75 | '2' : Render('bbs_terms.html', [ sMenu, GetContent( BrookFCLFCGIBroker.conn, 'Privacy'), sFooter ]);
76 | '3' : Render('bbs_terms.html', [ sMenu, GetContent( BrookFCLFCGIBroker.conn, 'Imprint'), sFooter ]);
77 | else
78 | Render(err_page, ['Action ID unbekannt:' + sActn +'.']);
79 | end;
80 |
81 | end;
82 |
83 | initialization
84 | TLegal.Register('legal');
85 |
86 | end.
87 |
88 |
89 |
--------------------------------------------------------------------------------
/logout.pas:
--------------------------------------------------------------------------------
1 | /////////////////////////////////////////////////////////////////////////
2 | // project : bbs_fcgi
3 | // author : Ralph Berger
4 | // created : 01.03.14
5 | // file : Logout.pas
6 | // close session record
7 | // modified : 24.04.2014 BF 2.6.4 -> BF 3.0.0
8 |
9 | unit Logout;
10 |
11 | {$mode objfpc}{$H+}
12 |
13 | interface
14 |
15 | uses
16 | BrookAction, BrookFCLFCGIBroker, BrookConsts, Classes, SysUtils, Variants,
17 | FmtBCD, sqldb, blowcryp, mapping, menu;
18 |
19 | type
20 | TGoodBye = class(TBrookAction)
21 | public
22 | procedure Get; override;
23 | end;
24 |
25 | implementation
26 |
27 | procedure TGoodBye.Get;
28 | var
29 | SessRec: sessInfType;
30 | myPara : ParaType;
31 |
32 | begin
33 | // check session
34 | myPara.VSession := Params.Values['sesn'];
35 | mypara.sip:= TheRequest.RemoteAddress;
36 | if NOT isSessionValid( mypara ) then
37 | begin
38 | redirect ('./main?',302);
39 | exit;
40 | end;
41 |
42 | // close session
43 | SessRec.user_id := IntToStr( myPara.userID );
44 | sesn_close( BrookFCLFCGIBroker.conn, SessRec );
45 |
46 | // free mem
47 | redirect ('./main?',302);
48 |
49 | end;
50 |
51 | initialization
52 | TGoodBye.Register('quit');
53 |
54 | end.
55 |
56 |
--------------------------------------------------------------------------------
/main.pas:
--------------------------------------------------------------------------------
1 | /////////////////////////////////////////////////////////////////////////
2 | // project : bbs_fcgi
3 | // author : Ralph Berger
4 | // created : 08.05.14
5 | // file : main.pas
6 | // called via: cgi1/main?sesn=xx
7 | // or: cgi1/main for login dialog
8 | // modified : 24.04.2014 BF 2.6.4 -> BF 3.0.0
9 | // : 27.04.14 - change para read
10 |
11 | unit main;
12 |
13 | {$mode objfpc}{$H+}
14 |
15 | interface
16 |
17 | uses
18 | BrookAction, BrookFCLFCGIBroker, BrookConsts, Classes, SysUtils, Variants,
19 | FmtBCD, sqldb, blowcryp, mapping, menu;
20 |
21 | type
22 | TWelcome = class(TBrookAction)
23 | public
24 | procedure Get; override;
25 | procedure Post; override;
26 | end;
27 |
28 |
29 | implementation
30 |
31 | procedure TWelcome.Post;
32 | var
33 | VUser, VPass, VCmd, sTmp : string;
34 | usrRec : usrInfType;
35 | sesnRec : sessInfType;
36 |
37 |
38 | begin
39 |
40 | // post w/o paras? -> only refresh main page ( not logged in )
41 | if Fields.Count = 0 then
42 | begin
43 | redirect ('./main?',302);
44 | exit;
45 | end;
46 |
47 | // copy paras
48 | VUser := SecuredStr(Fields.Values['usr'] );
49 | VPass := SecuredStr(Fields.Values['pwd'] );
50 | VCmd := SecuredStr(Fields.Values['btn'] );
51 | sesnRec.latitude := Fields.Values['lat'];
52 | sesnRec.longitude := Fields.Values['lon'];
53 | sesnRec.accuracy := Fields.Values['acc'];
54 |
55 |
56 | // check paras
57 | if (VCmd = 'Anmelden') then
58 | begin
59 | if ( VUser = '' ) OR ( VPass = '' ) then
60 | begin
61 | Render(err_page, ['Username oder Passwort dürfen nicht leer sein.']);
62 | exit;
63 | end;
64 | end;
65 |
66 | if (VCmd = 'Abbrechen') then
67 | begin
68 | redirect ('./main?',302);
69 | exit;
70 | end;
71 |
72 | if (VCmd = 'neues Konto') then
73 | begin
74 | redirect ('./accnt?',302);
75 | exit;
76 | end;
77 |
78 |
79 | ReadUsr( BrookFCLFCGIBroker.conn, 'where name = "' + VUser +'"', usrRec );
80 | if usrRec.name = '' then
81 | begin
82 | Render(err_page, ['Username unbekannt']);
83 | exit;
84 | end;
85 |
86 | // check pwd
87 | if usrRec.pwd <> TRIM( VPass ) then
88 | begin
89 | Render(err_page, ['Falsches PWD']);
90 | exit;
91 | end;
92 |
93 | // check registration
94 | if usrRec.isChecked <> 'True' then
95 | begin
96 | Render(err_page, ['Account nicht aktiviert.']);
97 | exit;
98 | end;
99 |
100 | // update user record
101 | usrRec.picture_png := ''; // avoid blob save -> speed up
102 | usrRec.TotalTime := sPlus(usrRec.TotalTime); // incr login count
103 | sesnRec.lastlogin := usrRec.LastTime; // rescue old LastLogin
104 | usrRec.LastTime := DateTimeToStr( now ); // set login time
105 | sTmp := updUser( BrookFCLFCGIBroker.conn, usrRec );
106 | if sTmp <> '' then
107 | begin
108 | Render(err_page, [ sTmp ]);
109 | exit;
110 | end;
111 |
112 | // add session record
113 | sesnRec.browser := TheRequest.UserAgent;
114 | sesnRec.sip := TheRequest.RemoteAddress;
115 | sesnRec.user_id := usrRec.iduser; // add user_id
116 | codeSessionID( sesnRec ); // create sesnRec.id
117 | sesnRec.is_active := '1'; // active = true
118 | sesnRec.last_forum := sesnRec.forum_id ; //
119 | sesnRec.forum_id := '0';
120 | sesnRec.forwarded_for:= 'main?sesn=' + sesnRec.id;
121 | sesnRec.v_page := '0';
122 | sesnRec.v_rec := '1';
123 | sesnRec.v_order := '1';
124 | sesnRec.v_eof := '0';
125 | sesnRec.last_post_cnt:= posts_Count( BrookFCLFCGIBroker.conn, sesnRec.lastlogin );
126 | GetIPLatLon( GetSetting( BrookFCLFCGIBroker.conn,'GeoIP') + sesnRec.sip,
127 | sesnRec.sLat, sesnRec.sLong );
128 |
129 | sTmp := sesn_insert ( BrookFCLFCGIBroker.conn, sesnRec);
130 | if sTmp <> '' then
131 | begin
132 | Render(err_page, [sTmp]);
133 | exit;
134 | end;
135 |
136 | // show homepage
137 | redirect ( './main?sesn=' + sesnRec.id, 302 );
138 |
139 | end;
140 |
141 | { TWelcome }
142 | procedure TWelcome.Get;
143 | var
144 | i : integer;
145 | sTiles, Kachel, sTmp : string;
146 | bSessn : boolean;
147 | myPara : ParaType;
148 | memQry : ForInfType;
149 | mySessn : sessInfType;
150 | query : TSQLQuery;
151 |
152 | begin
153 |
154 | // check session
155 | myPara.VSession := Params.Values['sesn'];
156 | mypara.sip:= TheRequest.RemoteAddress;
157 | bSessn:= isSessionValid( mypara );
158 |
159 | // preset myPara
160 | paraTypeInit('main?', myPara );
161 | // read session record
162 | if bSessn then
163 | begin
164 | mySessn.id := mypara.VSession;
165 | sesn_Read( BrookFCLFCGIBroker.conn, mySessn );
166 | sesn_copy_para( mySessn, myPara );
167 | end;
168 |
169 | // set display order
170 | case myPara.v_order of
171 | '0' : sTmp := '' ;
172 | '1' : sTmp := ' ORDER BY last_post_time';
173 | '2' : sTmp := ' ORDER BY posts';
174 | '3' : sTmp := ' ORDER BY fname';
175 | end;
176 |
177 | // query
178 | query := TSQLQuery.Create(nil);
179 | query.DataBase := BrookFCLFCGIBroker.conn;
180 | query.SQL.Text := 'select * from forums' +
181 | sTmp + // order by
182 | ' limit ' + // limit start,stop
183 | IntToStr( StrToInt( myPara.v_page ) * PageItems )
184 | + ',' + IntToStr( StrToInt( myPara.v_page ) * PageItems + PageItems+1 );
185 | query.Open;
186 | if query.EOF then
187 | begin
188 | query.active := false;
189 | query.free;
190 | Render(err_page, ['No Forums!']);
191 | exit;
192 | end;
193 |
194 | // generate tiles
195 | i := 0;
196 | sTiles := '';
197 | while not query.EOF do
198 | begin
199 | cpyForumInfo( Query, memQry );
200 | kachel := iif(bSessn,
201 | sUpdate ( tpcTile, '%%6', cgiPath + 'forum?ID=%%0&sesn=' + myPara.VSession ) ,
202 | sUpdate ( tpcTile, '%%6', '#" onclick="overlay()') ); // set link
203 | kachel := sUpdate( kachel, '%%0', memQry.id ); // ForumID
204 | kachel := sUpdate( kachel, '%%1', iif((i mod 2=1),'rkachel','bkachel')); // red/blue tile
205 | kachel := sUpdate( kachel, '%%2', memQry.fname ); // ForumName
206 | kachel := sUpdate( kachel, '%%3', memQry.fdesc ); // Forum Description
207 | kachel := sUpdate( kachel, '%%4', LEFTSTR(memQry.last_post_time,6) ); // Last post ( DD.MM )
208 | kachel := sUpdate( kachel, '%%5', memQry.topics ); // topics#
209 | sTiles += kachel;
210 | i += 1;
211 | if i = PageItems then break;
212 | query.Next;
213 | end;
214 |
215 |
216 | // Update Session info
217 | myPara.v_rec := memQry.id; // last rec in display
218 | myPara.Text1 := 'main?'; // callback target for footer
219 | myPara.v_eof := iif( query.EOF, '1', '0'); // eof flag
220 | mypara.sCmd := iif( bSessn, '1', '0'); // if session full menu else pre login menu
221 |
222 | // render
223 | Render('bbs_main.html', [ make_Header( mypara ),
224 | sTiles,
225 | make_Footer( BrookFCLFCGIBroker.conn, mypara ) ]);
226 |
227 | // release mem
228 | query.active := false;
229 | query.free;
230 |
231 | end;
232 |
233 |
234 | initialization
235 | TWelcome.Register('main');
236 |
237 | end.
238 |
--------------------------------------------------------------------------------
/mapping.pas:
--------------------------------------------------------------------------------
1 | /////////////////////////////////////////////////////////////////////////
2 | // project : bbs_fcgi
3 | // author : Ralph Berger
4 | // created : by schema mapper V. 2.1 - 28.02.14
5 | // file : mapping.pas
6 | // created : 28.02.14
7 | // modified : 24.04.2014 BF 2.6.4 -> BF 3.0.0
8 | // 04.05.2014 Update Commit for Laz. 1.2.2
9 | // 08.05.2014 blob save as hexstr
10 | // tested : yes
11 |
12 | unit Mapping;
13 |
14 | {$mode objfpc}{$H+}
15 |
16 | interface
17 |
18 | uses
19 | Classes, SysUtils, Variants, FmtBCD, mysql55conn, sqldb, blowcryp ;
20 |
21 | const
22 | sqlDate = 'yyyy-mm-dd hh:nn:ss';
23 |
24 |
25 | type
26 | ForInfType = record // forums record
27 | id: string;
28 | fName: string;
29 | fDesc: string;
30 | fdesc_bitfield: string;
31 | fdesc_uid: string;
32 | topics_per_page: string;
33 | posts: string;
34 | topics: string;
35 | topics_real: string;
36 | last_post_id: string;
37 | last_poster_id: string;
38 | last_post_subject: string;
39 | last_post_time : string;
40 | last_poster_name: string;
41 | end;
42 |
43 | TopInfType = record // topics record
44 | id : string;
45 | forum_id : string;
46 | title : string;
47 | topic_text : string;
48 | poster : string;
49 | poster_name : string;
50 | ctime : string;
51 | time_limit : string;
52 | views : string;
53 | replies : string;
54 | replies_real : string;
55 | first_post_id : string;
56 | first_poster_name : string;
57 | last_post_id : string;
58 | last_poster_id : string;
59 | last_poster_name : string;
60 | last_post_subject : string;
61 | last_post_time : string;
62 | last_view_time : string;
63 | end;
64 |
65 |
66 | PstInfType = record // posts record
67 | id : string;
68 | topic_id : string;
69 | forum_id : string;
70 | user_id : string;
71 | poster_ip : string;
72 | post_time : string;
73 | post_subject : string;
74 | post_text: string;
75 | post_postcount: string;
76 | post_alpha : string;
77 | post_size : string;
78 | post_edit_time : string;
79 | post_edit_reason: string;
80 | post_edit_user : string;
81 | post_edit_count : string;
82 | post_edit_locked : string;
83 | end;
84 |
85 | usrInfType = record // user record
86 | iduser : string;
87 | Name : string;
88 | pwd : string;
89 | LastTime : string;
90 | TotalTime : string;
91 | MailAdress : string;
92 | CreateIP : string;
93 | CreateTime : string;
94 | RegisterIP : string;
95 | RegisterTime : string;
96 | isChecked : string;
97 | isVisible : string;
98 | picture_png : string;
99 | end;
100 |
101 |
102 | jobType = record // job server record
103 | idjobs : string ;
104 | inquirer : string ;
105 | inqIP : string ;
106 | inqTime : string ;
107 | idUser : string ;
108 | Action : string ;
109 | Intervall : string ;
110 | Result : string ;
111 | Status : string ;
112 | StatusMsg : string ;
113 | context : String;
114 | end;
115 |
116 |
117 | procedure cpyForumInfo( CONST qry:TSQLQuery; VAR memFrm:ForInfType );
118 | procedure cpyTopicInfo( CONST qry:TSQLQuery; VAR memFrm:TopInfType );
119 | procedure cpyPostInfo ( CONST qry:TSQLQuery; VAR PstFrm:PstInfType );
120 | procedure cpyUsrInfo ( CONST qry:TSQLQuery; VAR usrFrm:usrInfType );
121 | procedure cpySessInfo ( CONST qry:TSQLQuery; VAR SessFrm:sessInfType );
122 | procedure cpyJobInfo ( CONST qry:TSQLQuery; VAR myJob:jobType );
123 |
124 | function job_insert ( CONST conn: TMySQL55Connection; CONST myJob:JobType ): String;
125 |
126 | procedure ReadUsr ( CONST conn: TMySQL55Connection; CONST sUsr:string; VAR usrFrm:usrInfType );
127 | function User_insert ( CONST conn: TMySQL55Connection; CONST usrFrm:usrInfType ): String;
128 | function updUser ( CONST conn: TMySQL55Connection; CONST usrFrm:usrInfType ): String;
129 | function count_usr_themes( CONST conn: TMySQL55Connection; CONST usrRec: usrInfType ): String;
130 | function count_usr_posts( CONST conn: TMySQL55Connection; CONST usrRec: usrInfType ): String;
131 |
132 | Function Upd_Forum ( CONST conn: TMySQL55Connection; CONST memFrm:ForInfType ): STRING ;
133 | procedure ReadForum ( CONST conn: TMySQL55Connection; CONST idFrm:string; VAR usrFrm:ForInfType );
134 |
135 | procedure sesn_Read ( CONST conn: TMySQL55Connection; VAR sesnRec: sessInfType );
136 | function sesn_count ( CONST conn: TMySQL55Connection; CONST sesnRec: sessInfType ): String;
137 | function sesn_close ( CONST conn: TMySQL55Connection; CONST sesnRec: sessInfType ): String;
138 | function sesn_insert ( CONST conn: TMySQL55Connection; CONST sesnRec: sessInfType ): String;
139 | function sesn_update ( CONST conn: TMySQL55Connection; CONST sesnRec: sessInfType ): String;
140 |
141 | procedure Topic_Read ( CONST conn: TMySQL55Connection; VAR memFrm: TopInfType );
142 | Function Topic_Update( CONST conn: TMySQL55Connection; CONST memTpc: TopInfType ): STRING ;
143 | function topic_insert( CONST conn: TMySQL55Connection; CONST memFrm:TopInfType ): String;
144 |
145 | Function posts_Update( CONST conn: TMySQL55Connection; CONST memFrm: PstInfType ): STRING ;
146 | function posts_insert( CONST conn: TMySQL55Connection; CONST memFrm: PstInfType ): String;
147 | Function posts_Delete( CONST conn: TMySQL55Connection; CONST id:String ): STRING ;
148 | procedure posts_read ( CONST conn: TMySQL55Connection; VAR memFrm:PstInfType );
149 | Function posts_Count ( CONST conn: TMySQL55Connection; CONST dStart: String ): STRING ;
150 |
151 | Function GetContent (CONST conn: TMySQL55Connection; CONST sSearch:String ): STRING ;
152 | Function GetSetting (CONST conn : TMySQL55Connection; CONST inStrg: string): string;
153 |
154 | implementation
155 |
156 |
157 | Function GetSetting(CONST conn : TMySQL55Connection; CONST inStrg: string): string;
158 | VAR
159 | query : TSQLQuery;
160 |
161 | begin
162 |
163 | // query
164 | query := TSQLQuery.Create(nil);
165 | query.DataBase := conn;
166 | query.SQL.Text := 'select * from dbpara where qName="' + TRIM( inStrg ) + '"';
167 | query.Open;
168 |
169 | if query.EOF then
170 | begin
171 | query.active := false;
172 | query.free;
173 | exit;
174 | end;
175 |
176 | if query.Fields[5].AsInteger <> 0 then
177 | GetSetting := decrypt( query.Fields[4].AsString )
178 | else
179 | GetSetting := query.Fields[4].AsString;
180 |
181 | query.active := false;
182 | query.free;
183 |
184 | end;
185 |
186 | //////////////////////////////////////////////////////////
187 | // sample calls : GetContent(conn, 'bad_de' ): string;
188 | // GetContent(conn, 'bad_en' ): string;
189 |
190 | Function GetContent( CONST conn: TMySQL55Connection; CONST sSearch:String ): STRING ;
191 | VAR
192 | query : TSQLQuery;
193 |
194 | begin
195 | GetContent := 'none';
196 | // query
197 | query := TSQLQuery.Create(nil);
198 | query.DataBase := conn;
199 | query.SQL.Text := 'select * from contval where cName="' + TRIM( sSearch ) + '"';
200 | query.Open;
201 |
202 | if query.EOF then
203 | begin
204 | query.active := false;
205 | query.Free;
206 | exit;
207 | end;
208 |
209 | if query.Fields[5].AsInteger <> 0 then
210 | GetContent := decrypt( query.FieldByName('cValue').AsString )
211 | else
212 | GetContent := query.FieldByName('cValue').AsString ;
213 |
214 | query.active := false;
215 | query.Free;
216 |
217 | end;
218 |
219 | procedure cpyJobInfo ( CONST qry:TSQLQuery; VAR myJob:jobType );
220 | begin
221 | myJob.idjobs := qry.FieldByName('idjobs').AsString;
222 | myJob.inquirer := qry.FieldByName('inquirer').AsString;
223 | myJob.inqIP := qry.FieldByName('inqIP').AsString;
224 | myJob.inqTime := qry.FieldByName('inqTime').AsString;
225 | myJob.idUser := qry.FieldByName('idUser').AsString;
226 | myJob.Action := qry.FieldByName('Action').AsString;
227 | myJob.Intervall := qry.FieldByName('Intervall').AsString;
228 | myJob.Result := qry.FieldByName('Result').AsString;
229 | myJob.Status := qry.FieldByName('Status').AsString;
230 | myJob.StatusMsg := qry.FieldByName('StatusMsg').AsString;
231 | myJob.context := qry.FieldByName('context').AsString;
232 | end;
233 |
234 | procedure cpyUsrInfo ( CONST qry:TSQLQuery; VAR usrFrm:usrInfType );
235 | begin
236 | usrFrm.iduser := qry.FieldByName('iduser').AsString;
237 | usrFrm.Name := qry.FieldByName('Name').AsString;
238 | usrFrm.pwd := decrypt( qry.FieldByName('pwd').AsString );
239 | usrFrm.LastTime := qry.FieldByName('LastTime').AsString;
240 | usrFrm.TotalTime := qry.FieldByName('TotalTime').AsString;
241 | usrFrm.MailAdress := qry.FieldByName('MailAdress').AsString;
242 | usrFrm.CreateIP := qry.FieldByName('CreateIP').AsString;
243 | usrFrm.CreateTime := qry.FieldByName('CreateTime').AsString;
244 | usrFrm.RegisterIP := qry.FieldByName('RegisterIP').AsString;
245 | usrFrm.RegisterTime := qry.FieldByName('RegisterTime').AsString;
246 | usrFrm.isChecked := qry.FieldByName('isChecked').AsString;
247 | usrFrm.isVisible := qry.FieldByName('isVisible').AsString;
248 | usrFrm.picture_png := qry.FieldByName('picture_png').AsString;
249 |
250 | end;
251 |
252 | procedure cpyPostInfo( CONST qry:TSQLQuery; VAR PstFrm:PstInfType );
253 | begin
254 | PstFrm.id := qry.FieldByName('id').AsString;
255 | PstFrm.topic_id := qry.FieldByName('topic_id').AsString;
256 | PstFrm.forum_id := qry.FieldByName('forum_id').AsString;
257 | PstFrm.user_id := qry.FieldByName('user_id').AsString;
258 | PstFrm.poster_ip := qry.FieldByName('poster_ip').AsString;
259 | PstFrm.post_time := qry.FieldByName('post_time').AsString;
260 | PstFrm.post_subject := qry.FieldByName('post_subject').AsString;
261 | PstFrm.post_text := qry.FieldByName('post_text').AsString;
262 | PstFrm.post_postcount := qry.FieldByName('post_postcount').AsString;
263 | PstFrm.post_alpha := qry.FieldByName('post_alpha').AsString;
264 | PstFrm.post_size := qry.FieldByName('post_size').AsString;
265 | PstFrm.post_edit_time := qry.FieldByName('post_edit_time').AsString;
266 | PstFrm.post_edit_reason := qry.FieldByName('post_edit_reason').AsString;
267 | PstFrm.post_edit_user := qry.FieldByName('post_edit_user').AsString;
268 | PstFrm.post_edit_count := qry.FieldByName('post_edit_count').AsString;
269 | PstFrm.post_edit_locked := qry.FieldByName('post_edit_locked').AsString;
270 | end;
271 |
272 |
273 | procedure cpyTopicInfo( CONST qry:TSQLQuery; VAR memFrm:TopInfType );
274 | begin
275 | memFrm.id := qry.FieldByName('id').AsString;
276 | memFrm.forum_id := qry.FieldByName('forum_id').AsString;
277 | memFrm.title := qry.FieldByName('title').AsString;
278 | memFrm.topic_text := qry.FieldByName('topic_text').AsString;
279 | memFrm.poster := qry.FieldByName('poster').AsString;
280 | memFrm.poster_name := qry.FieldByName('poster_name').AsString;
281 | memFrm.ctime := qry.FieldByName('ctime').AsString;
282 | memFrm.time_limit := qry.FieldByName('time_limit').AsString;
283 | memFrm.views := qry.FieldByName('views').AsString;
284 | memFrm.replies := qry.FieldByName('replies').AsString;
285 | memFrm.replies_real := qry.FieldByName('replies_real').AsString;
286 | memFrm.first_post_id := qry.FieldByName('first_post_id').AsString;
287 | memFrm.first_poster_name := qry.FieldByName('first_poster_name').AsString;
288 | memFrm.last_post_id := qry.FieldByName('last_post_id').AsString;
289 | memFrm.last_poster_id := qry.FieldByName('last_poster_id').AsString;
290 | memFrm.last_poster_name := qry.FieldByName('last_poster_name').AsString;
291 | memFrm.last_post_subject := qry.FieldByName('last_post_subject').AsString;
292 | memFrm.last_post_time := qry.FieldByName('last_post_time').AsString;
293 | memFrm.last_view_time := qry.FieldByName('last_view_time').AsString;
294 | end;
295 |
296 |
297 | procedure cpyForumInfo( CONST qry:TSQLQuery; VAR memFrm:ForInfType );
298 | begin
299 | memFrm.id := qry.FieldByName('id').AsString;
300 | memFrm.fName := qry.FieldByName('fname').AsString;
301 | memFrm.fDesc := qry.FieldByName('fdesc').AsString;
302 | memFrm.fdesc_bitfield := qry.FieldByName('fdesc_bitfield').AsString;
303 | memFrm.fdesc_uid := qry.FieldByName('fdesc_uid').AsString;
304 | memFrm.topics_per_page := qry.FieldByName('topics_per_page').AsString;
305 | memFrm.posts := qry.FieldByName('posts').AsString;
306 | memFrm.topics := qry.FieldByName('topics').AsString;
307 | memFrm.topics_real := qry.FieldByName('topics_real').AsString;
308 | memFrm.last_post_id := qry.FieldByName('last_post_id').AsString;
309 | memFrm.last_poster_id := qry.FieldByName('last_poster_id').AsString;
310 | memFrm.last_post_subject := qry.FieldByName('last_post_subject').AsString;
311 | memFrm.last_post_time := qry.FieldByName('last_post_time').AsString;
312 | memFrm.last_poster_name := qry.FieldByName('last_poster_name').AsString;
313 | end;
314 |
315 |
316 | procedure cpySessInfo ( CONST qry:TSQLQuery; VAR SessFrm:sessInfType );
317 | begin
318 | SessFrm.rid := qry.FieldByName('rid').AsString;
319 | SessFrm.id := qry.FieldByName('id').AsString;
320 | SessFrm.user_id := qry.FieldByName('user_id').AsString;
321 | SessFrm.forum_id := qry.FieldByName('forum_id').AsString;
322 | SessFrm.is_active := qry.FieldByName('is_active').AsString;
323 | SessFrm.last_forum := qry.FieldByName('last_forum').AsString;
324 | SessFrm.browser := qry.FieldByName('browser').AsString;
325 | SessFrm.sip := qry.FieldByName('sip').AsString;
326 | SessFrm.sLat := qry.FieldByName('sLat').AsString;
327 | SessFrm.sLong := qry.FieldByName('sLong').AsString;
328 | SessFrm.latitude := qry.FieldByName('latitude').AsString;
329 | SessFrm.longitude := qry.FieldByName('longitude').AsString;
330 | SessFrm.accuracy := qry.FieldByName('accuracy').AsString;
331 | SessFrm.forwarded_for := qry.FieldByName('forwarded_for').AsString;
332 | SessFrm.v_order := qry.FieldByName('v_order').AsString;
333 | SessFrm.v_page := qry.FieldByName('v_page').AsString;
334 | SessFrm.v_rec := qry.FieldByName('v_rec').AsString;
335 | SessFrm.v_eof := qry.FieldByName('v_eof').AsString;
336 | SessFrm.viewonline := qry.FieldByName('viewonline').AsString;
337 | SessFrm.autologin := qry.FieldByName('autologin').AsString;
338 | SessFrm.admin := qry.FieldByName('admin').AsString;
339 | SessFrm.lastsearch := qry.FieldByName('lastsearch').AsString;
340 | SessFrm.lastlogin := qry.FieldByName('lastlogin').AsString;
341 | SessFrm.last_post_cnt := qry.FieldByName('last_post_cnt').AsString;
342 | SessFrm.login := qry.FieldByName('login').AsString;
343 | SessFrm.logout := qry.FieldByName('logout').AsString;
344 | end;
345 |
346 | procedure ReadForum(CONST conn:TMySQL55Connection; CONST idFrm:string; VAR usrFrm:ForInfType );
347 | VAR
348 | query2 : TSQLQuery;
349 |
350 | begin
351 | query2 := TSQLQuery.Create(nil);
352 | query2.DataBase := conn;
353 | query2.SQL.Text := 'select * from forums ' + idFrm ;
354 | query2.Open;
355 |
356 | if not query2.eof then cpyForumInfo( query2, usrFrm );
357 | query2.active := false;
358 | query2.Free;
359 |
360 |
361 | end;
362 |
363 | procedure ReadUsr(CONST conn:TMySQL55Connection; CONST sUsr:string; VAR usrFrm:usrInfType );
364 | VAR
365 | query2 : TSQLQuery;
366 |
367 | begin
368 | query2 := TSQLQuery.Create(nil);
369 | query2.DataBase := conn;
370 | query2.SQL.Text := 'select * from user ' + sUsr ;
371 | query2.Open;
372 |
373 | if not query2.eof then
374 | cpyUsrInfo( query2, usrFrm )
375 | else
376 | usrFrm.iduser:= '';
377 |
378 | query2.active := false;
379 | query2.Free;
380 |
381 |
382 | end;
383 |
384 | Function Upd_Forum( CONST conn: TMySQL55Connection; CONST memFrm: ForInfType ): STRING ;
385 | VAR
386 | query2 : TSQLQuery;
387 | sQry : STRING;
388 |
389 | begin
390 | sQry := 'UPDATE forums SET fname = "%%1", fdesc = "%%2", fdesc_bitfield = "%%3", fdesc_uid = %%4, topics_per_page = %%5, posts = %%6, '+
391 | 'topics = %%7, topics_real = %%8, last_post_id = %%9, last_poster_id = %%A, last_post_subject = "%%B", last_post_time = now(), last_poster_name = "%%C" ' +
392 | 'WHERE id = %%D;';
393 |
394 | sQry := sUpdate( sQry, '%%1', memFrm.fName );
395 | sQry := sUpdate( sQry, '%%2', memFrm.fDesc );
396 | sQry := sUpdate( sQry, '%%3', memFrm.fdesc_bitfield );
397 | sQry := sUpdate( sQry, '%%4', memFrm.fdesc_uid );
398 | sQry := sUpdate( sQry, '%%5', memFrm.topics_per_page );
399 | sQry := sUpdate( sQry, '%%6', memFrm.posts );
400 | sQry := sUpdate( sQry, '%%7', memFrm.topics );
401 | sQry := sUpdate( sQry, '%%8', memFrm.topics_real );
402 | sQry := sUpdate( sQry, '%%9', memFrm.last_post_id );
403 | sQry := sUpdate( sQry, '%%A', memFrm.last_poster_id );
404 | sQry := sUpdate( sQry, '%%B', memFrm.last_post_subject );
405 | sQry := sUpdate( sQry, '%%C', memFrm.last_poster_name );
406 | sQry := sUpdate( sQry, '%%D', memFrm.ID);
407 |
408 | query2 := TSQLQuery.Create(nil);
409 | query2.DataBase := conn;
410 | query2.SQL.Text := sQry;
411 | try
412 | query2.ExecSQL;
413 | conn.Transaction.Commit;
414 | except
415 | on e: Exception do Upd_Forum := e.Message + query2.SQL.Text;
416 | end;
417 |
418 | query2.active := False;
419 | query2.Free;
420 |
421 | end;
422 |
423 |
424 | function updUser( CONST conn: TMySQL55Connection; CONST usrFrm:usrInfType ): String;
425 | VAR
426 | query2 : TSQLQuery;
427 | sQry, d1, d2, d3 : STRING;
428 |
429 | begin
430 |
431 | // normalize datetime
432 | d1 := usrFrm.LastTime;
433 | d2 := usrFrm.CreateTime;
434 | d3 := usrFrm.RegisterTime;
435 | if d1 = '' then d1 := DateTimeToStr (now) ;
436 | if d2 = '' then d2 := d1;
437 | if d3 = '' then d3 := d1;
438 | d1 := FormatDateTime(sqlDate, StrToDateTime(d1));
439 | d2 := FormatDateTime(sqlDate, StrToDateTime(d2));
440 | d3 := FormatDateTime(sqlDate, StrToDateTime(d3));
441 |
442 | // build query
443 | sQry := 'UPDATE user SET Name = "%%1", pwd = "%%2", LastTime= "%%3", TotalTime=%%4, MailAdress="%%5", CreateIP="%%6", CreateTime="%%7", ' +
444 | 'RegisterIP="%%8", RegisterTime="%%9", isChecked="%%A", isVisible="%%B"';
445 | if usrFrm.picture_png <> '' then sQry += ', picture_png=x''%%C'' ';
446 | sQry += ' WHERE iduser= %%D';
447 |
448 |
449 | sQry := sUpdate( sQry, '%%1', usrFrm.Name );
450 | sQry := sUpdate( sQry, '%%2', encrypt(usrFrm.pwd) );
451 | sQry := sUpdate( sQry, '%%3', d1 );
452 | sQry := sUpdate( sQry, '%%4', usrFrm.TotalTime );
453 | sQry := sUpdate( sQry, '%%5', usrFrm.MailAdress );
454 | sQry := sUpdate( sQry, '%%6', usrFrm.CreateIP );
455 | sQry := sUpdate( sQry, '%%7', d2 );
456 | sQry := sUpdate( sQry, '%%8', usrFrm.RegisterIP );
457 | sQry := sUpdate( sQry, '%%9', d3 );
458 | sQry := sUpdate( sQry, '%%A', usrFrm.isChecked );
459 | sQry := sUpdate( sQry, '%%B', usrFrm.isVisible );
460 | if usrFrm.picture_png <> '' then
461 | sQry:=sUpdate(sQry, '%%C', usrFrm.picture_png );
462 | sQry := sUpdate( sQry, '%%D', usrFrm.iduser );
463 |
464 | // write to db
465 | query2 := TSQLQuery.Create(nil);
466 | query2.DataBase := conn;
467 | query2.SQL.Text := sQry;
468 | try
469 | query2.ExecSQL;
470 | conn.Transaction.Commit;
471 | except
472 | on e: Exception do updUser := e.Message + CHR(13) + sQry;
473 | end;
474 |
475 | query2.active := False;
476 | query2.Free;
477 |
478 | end;
479 |
480 |
481 |
482 | function posts_insert( CONST conn: TMySQL55Connection; CONST memFrm: PstInfType ): String;
483 | VAR
484 | i: integer;
485 | sTmp : string;
486 | query2 : TSQLQuery;
487 |
488 | begin
489 | posts_insert := '';
490 | query2 := TSQLQuery.Create(nil);
491 | query2.DataBase := conn;
492 | query2.SQL.Text := 'INSERT INTO posts ( topic_id, forum_id, user_id, poster_ip, post_subject, post_text, post_alpha, post_size )' +
493 | 'VALUES ( ' + memFrm.topic_id + ', ' + memFrm.forum_id + ', ' + memFrm.user_id + ', "' +
494 | memFrm.poster_ip + '", "' + memFrm.post_subject + '", x' + #39 + StrToHex(memfrm.post_text) + #39 + ', "' +
495 | memfrm.post_alpha + '", ' + memfrm.post_size +');';
496 | try
497 | query2.ExecSQL;
498 | conn.Transaction.Commit;
499 | except
500 | on e: Exception do posts_insert := 'posts_insert ' + e.Message + '--' + query2.SQL.Text;
501 | end;
502 |
503 | query2.active := False;
504 | query2.Free;
505 | end;
506 |
507 | function User_insert( CONST conn: TMySQL55Connection; CONST usrFrm:usrInfType ): String;
508 | VAR
509 | query2 : TSQLQuery;
510 |
511 | begin
512 | User_insert := '' ;
513 | query2 := TSQLQuery.Create(nil);
514 | query2.DataBase := conn;
515 | Query2.SQL.Text := 'INSERT INTO user (Name, pwd, LastTime, TotalTime, MailAdress, CreateIP, CreateTime ) VALUES ("' +
516 | usrFrm.Name + '", "' + usrFrm.pwd + '", now(), 0, "' + usrFrm.MailAdress + '", "' + usrFrm.RegisterIP + '", now() )';
517 | try
518 | query2.ExecSQL;
519 | conn.Transaction.Commit;
520 | except
521 | on e: Exception do User_insert := 'User_insert ' + e.Message;
522 | end;
523 |
524 | query2.active := False;
525 | query2.Free;
526 |
527 | end;
528 |
529 | function topic_insert( CONST conn: TMySQL55Connection; CONST memFrm: TopInfType ): String;
530 | VAR
531 | query2 : TSQLQuery;
532 |
533 | begin
534 | topic_insert := '';
535 | query2 := TSQLQuery.Create(nil);
536 | query2.DataBase := conn;
537 | query2.SQL.Text := 'INSERT INTO topics ( forum_id, title, topic_text, poster, poster_name, ctime ) ' +
538 | 'VALUES ( ' + memFrm.forum_id + ', "' + memFrm.title + '", x' + #39 + StrToHex(memFrm.topic_text) + #39 + ', ' +
539 | memFrm.poster + ', "' + memFrm.poster_name + '", now() );';
540 |
541 | try
542 | query2.ExecSQL;
543 | conn.Transaction.Commit;
544 | except
545 | on e: Exception do topic_insert := 'topic_insert ' + e.Message;
546 | end;
547 |
548 | query2.active := False;
549 | query2.Free;
550 |
551 | end;
552 |
553 |
554 | /////////////////////////////////////////////////
555 | // called on new session by sesn_insert
556 | // called on expired session by isSessionValid
557 |
558 | function sesn_close( CONST conn: TMySQL55Connection; CONST sesnRec: sessInfType ): String;
559 | VAR
560 | query2 : TSQLQuery;
561 | sQry : STRING;
562 |
563 | begin
564 |
565 | sQry := 'UPDATE sessions ' +
566 | 'SET is_active="0", logout="' + FormatDateTime(sqlDate, now()) + '" ' +
567 | 'WHERE user_id="' + sesnRec.user_id + '";' ;
568 | query2 := TSQLQuery.Create(nil);
569 | query2.DataBase := conn;
570 | query2.SQL.Text := sQry;
571 | try
572 | query2.ExecSQL;
573 | conn.Transaction.Commit;
574 | except
575 | on e: Exception do sesn_close := 'sesn_close ' + e.Message;
576 | end;
577 |
578 | query2.active := False;
579 | query2.Free;
580 | end;
581 |
582 | function count_usr_posts( CONST conn: TMySQL55Connection; CONST usrRec: usrInfType ): String;
583 | VAR
584 | query2 : TSQLQuery;
585 | sQry : STRING;
586 |
587 | begin
588 | count_usr_posts := '0';
589 | query2 := TSQLQuery.Create(nil);
590 | query2.DataBase := conn;
591 | query2.SQL.Text := 'select count(*) from posts where user_id=' + usrRec.iduser ;
592 | query2.Open;
593 |
594 | if not query2.eof then count_usr_posts := query2.Fields[0].AsString;
595 | query2.active := False;
596 | query2.Free;
597 |
598 | end;
599 |
600 | function count_usr_themes( CONST conn: TMySQL55Connection; CONST usrRec: usrInfType ): String;
601 | VAR
602 | query2 : TSQLQuery;
603 | sQry : STRING;
604 |
605 | begin
606 | count_usr_themes := '0';
607 | query2 := TSQLQuery.Create(nil);
608 | query2.DataBase := conn;
609 | query2.SQL.Text := 'select count(*) from topics where poster=' + usrRec.iduser ;
610 | query2.Open;
611 |
612 | if not query2.eof then count_usr_themes := query2.Fields[0].AsString;
613 | query2.active := False;
614 | query2.Free;
615 |
616 | end;
617 |
618 |
619 | function sesn_count( CONST conn: TMySQL55Connection; CONST sesnRec: sessInfType ): String;
620 | VAR
621 | query2 : TSQLQuery;
622 | sQry : STRING;
623 |
624 | begin
625 | sesn_count := '0';
626 | query2 := TSQLQuery.Create(nil);
627 | query2.DataBase := conn;
628 | query2.SQL.Text := 'select count(*) from sessions where is_active ="1";';
629 | query2.Open;
630 |
631 | if not query2.eof then sesn_count := query2.Fields[0].AsString;
632 | query2.active := False;
633 | query2.Free;
634 |
635 | end;
636 |
637 |
638 |
639 |
640 | function sesn_insert( CONST conn: TMySQL55Connection; CONST sesnRec: sessInfType ): String;
641 | VAR
642 | query2 : TSQLQuery;
643 | s1,s2,s3,s4, s5 : String;
644 |
645 | begin
646 | // normalize paras - avoid blank
647 | s1 := iif( sesnRec.last_forum ='', '0', sesnRec.last_forum );
648 | s2 := iif( sesnRec.latitude ='', '0', sesnRec.latitude);
649 | s3 := iif( sesnRec.longitude ='', '0', sesnRec.longitude );
650 | s4 := iif( sesnRec.accuracy ='', '0', sesnRec.accuracy );
651 | s5 := iif( sesnRec.lastlogin ='',
652 | FormatDateTime(sqlDate, now()),
653 | FormatDateTime(sqlDate, StrToDateTime(sesnRec.lastlogin)));
654 |
655 | // close all open sessions for user_id
656 | sesn_close( conn, sesnRec );
657 |
658 | sesn_insert := '';
659 | query2 := TSQLQuery.Create(nil);
660 | query2.DataBase := conn;
661 | query2.SQL.Text := 'INSERT INTO sessions ( id, user_id, forum_id, is_active, last_forum, browser, sip, sLat, sLong, latitude, longitude, ' +
662 | 'accuracy, v_order, v_page, v_rec, v_eof, lastlogin, last_post_cnt ) ' +
663 | 'VALUES ( "' + sesnRec.id + '", ' + sesnRec.user_id + ' ,' + sesnRec.forum_id + ' ,"' + sesnRec.is_active + '", ' +
664 | s1 + ', "' + sesnRec.browser + '", "' + sesnRec.sip + '", ' + sesnRec.sLat + ', ' + sesnRec.sLong + ' ,' +
665 | s2 + ', ' + s3 + ', ' + s4 + ', ' + sesnRec.v_order + ', ' + sesnRec.v_page + ', ' + sesnRec.v_rec + ', ' +
666 | sesnRec.v_eof + ', "' + s5 + '", ' + sesnRec.last_post_cnt + ');';
667 | try
668 | query2.ExecSQL;
669 | conn.Transaction.Commit;
670 | except
671 | on e: Exception do sesn_insert := 'sesn_insert ' + e.Message;
672 | end;
673 |
674 | query2.active := False;
675 | query2.Free;
676 |
677 | end;
678 |
679 |
680 | function job_insert( CONST conn: TMySQL55Connection; CONST myJob:JobType ): String;
681 | VAR
682 | query2 : TSQLQuery;
683 |
684 | begin
685 | job_insert := '';
686 | query2 := TSQLQuery.Create(nil);
687 | query2.DataBase := conn;
688 | query2.SQL.Text := 'INSERT INTO jobs ( inquirer, inqIP, inqTime, idUser, Action, Intervall, context ) VALUES ("' +
689 | myJob.inquirer + '", "' + myJob.inqIP + '", now(), ' + myJob.iduser +', "' + myJob.Action +'", ' +
690 | myJob.Intervall + ', "' + myJob.context + '" )';
691 | try
692 | query2.ExecSQL;
693 | conn.Transaction.Commit;
694 | except
695 | on e: Exception do job_insert := 'job_insert ' + e.Message;
696 | end;
697 |
698 | query2.active := False;
699 | query2.Free;
700 |
701 | end;
702 |
703 |
704 | function sesn_update ( CONST conn: TMySQL55Connection; CONST sesnRec: sessInfType ): String;
705 | VAR
706 | query2 : TSQLQuery;
707 | sQry : STRING;
708 |
709 | begin
710 | sesn_update := '';
711 | sQry := 'UPDATE sessions SET is_active=%%1, forum_id=%%2, last_forum=%%3, forwarded_for="%%4", v_order=%%5, v_page=%%6, v_rec=%%7, v_eof=%%8, lastsearch="%%9" WHERE id="' + sesnRec.id + '";' ;
712 | sQry := sUpdate( sQry, '%%1', sesnRec.is_active );
713 | sQry := sUpdate( sQry, '%%2', sesnRec.forum_id );
714 | sQry := sUpdate( sQry, '%%3', sesnRec.last_forum );
715 | sQry := sUpdate( sQry, '%%4', sesnRec.forwarded_for );
716 | sQry := sUpdate( sQry, '%%5', sesnRec.v_order);
717 | sQry := sUpdate( sQry, '%%6', sesnRec.v_page );
718 | sQry := sUpdate( sQry, '%%7', sesnRec.v_rec );
719 | sQry := sUpdate( sQry, '%%8', sesnRec.v_eof );
720 | sQry := sUpdate( sQry, '%%9', sesnRec.lastsearch );
721 | query2 := TSQLQuery.Create(nil);
722 | query2.DataBase := conn;
723 | query2.SQL.Text := sQry;
724 | try
725 | query2.ExecSQL;
726 | conn.Transaction.Commit;
727 | except
728 | on e: Exception do sesn_update := query2.SQL.Text + ' -- sesn_update --' + e.Message;
729 | end;
730 |
731 | query2.active := False;
732 | query2.Free;
733 |
734 | end;
735 |
736 |
737 | procedure sesn_Read(CONST conn:TMySQL55Connection; VAR sesnRec: sessInfType );
738 | VAR
739 | query2 : TSQLQuery;
740 |
741 | begin
742 | query2 := TSQLQuery.Create(nil);
743 | query2.DataBase := conn;
744 | query2.SQL.Text := 'SELECT * FROM sessions WHERE id="' + sesnRec.id + '";';
745 | query2.Open;
746 |
747 | if not query2.eof then cpySessInfo ( query2, sesnRec );
748 | query2.active := false;
749 | query2.Free;
750 |
751 | end;
752 |
753 | procedure posts_read( CONST conn: TMySQL55Connection; VAR memFrm:PstInfType );
754 | VAR
755 | query2 : TSQLQuery;
756 |
757 | begin
758 | query2 := TSQLQuery.Create(nil);
759 | query2.DataBase := conn;
760 | query2.SQL.Text := 'SELECT * FROM posts WHERE id="' + memFrm.id + '";';
761 | query2.Open;
762 |
763 | if not query2.eof then
764 | cpyPostInfo( Query2, memFrm )
765 | else
766 | memFrm.id := '';
767 |
768 | query2.active := false;
769 | query2.Free;
770 |
771 | end;
772 |
773 |
774 | Function posts_Delete( CONST conn: TMySQL55Connection; CONST id:String ): STRING ;
775 | VAR
776 | query2 : TSQLQuery;
777 |
778 | begin
779 | posts_Delete := '';
780 | query2 := TSQLQuery.Create(nil);
781 | query2.DataBase := conn;
782 | query2.SQL.Text := 'DELETE FROM posts WHERE id=' + id + ';';
783 | try
784 | query2.ExecSQL;
785 | conn.Transaction.Commit;
786 | except
787 | on e: Exception do posts_Delete := e.Message + query2.SQL.Text;
788 | end;
789 |
790 | query2.active := False;
791 | query2.Free;
792 |
793 | end;
794 |
795 |
796 | Function posts_Count( CONST conn: TMySQL55Connection; CONST dStart: String ): STRING ;
797 | VAR
798 | query2 : TSQLQuery;
799 |
800 | begin
801 | posts_Count := '0';
802 | query2 := TSQLQuery.Create(nil);
803 | query2.DataBase := conn;
804 | query2.SQL.Text := 'select count(*) from posts where post_time > "'+
805 | FormatDateTime(sqlDate, StrToDateTime(dStart)) + '";';
806 | query2.Open;
807 |
808 | if not query2.eof then posts_Count := query2.Fields[0].AsString;
809 | query2.active := False;
810 | query2.Free;
811 |
812 | end;
813 |
814 | procedure Topic_Read(CONST conn:TMySQL55Connection; VAR memFrm: TopInfType );
815 | VAR
816 | query2 : TSQLQuery;
817 |
818 | begin
819 |
820 | if memFrm.id = '' then exit;
821 | query2 := TSQLQuery.Create(nil);
822 | query2.DataBase := conn;
823 | query2.SQL.Text := 'SELECT * FROM topics where id=' + memFrm.id ;
824 | query2.Open;
825 |
826 | if not query2.eof then
827 | cpyTopicInfo( Query2, memFrm )
828 | else
829 | memFrm.id := '';
830 |
831 | query2.active := false;
832 | query2.Free;
833 |
834 | end;
835 |
836 |
837 | Function posts_Update( CONST conn: TMySQL55Connection; CONST memFrm: PstInfType ): STRING ;
838 | VAR
839 | query2 : TSQLQuery;
840 | d1, d2, sQry: STRING;
841 |
842 | begin
843 |
844 | posts_Update := '';
845 | // normalize datetime
846 | d1 := memFrm.post_time;
847 | d2 := memFrm.post_edit_time;
848 | if d1 = '' then d1 := DateTimeToStr (now) ;
849 | if d2 = '' then d2 := d1;
850 | d1 := FormatDateTime(sqlDate, StrToDateTime(d1));
851 | d2 := FormatDateTime(sqlDate, StrToDateTime(d2));
852 | // make query string post_text=''%%7'' changed to post_text=%%7
853 | sQry := 'UPDATE posts SET topic_id= %%1, forum_id=%%2, user_id=%%3, poster_ip="%%4", post_time="%%5", post_subject="%%6", post_text=%%7, ' +
854 | 'post_postcount= %%8, post_alpha="%%9", post_size=%%A, post_edit_time="%%B", post_edit_reason="", post_edit_user=%%D, post_edit_count=%%E, post_edit_locked="%%F" ' +
855 | 'WHERE id=%%G;';
856 |
857 | sQry := sUpdate( sQry, '%%1', memFrm.topic_id );
858 | sQry := sUpdate( sQry, '%%2', memFrm.forum_id );
859 | sQry := sUpdate( sQry, '%%3', memFrm.user_id );
860 | sQry := sUpdate( sQry, '%%4', memFrm.poster_ip );
861 | sQry := sUpdate( sQry, '%%5', d1 );
862 | sQry := sUpdate( sQry, '%%6', memFrm.post_subject );
863 | // sQry := sUpdate( sQry, '%%7', memFrm.post_text );
864 | sQry := sUpdate( sQry, '%%7', 'x' + #39 + StrToHex(memFrm.post_text) + #39 );
865 | sQry := sUpdate( sQry, '%%8', memFrm.post_postcount );
866 |
867 | sQry := sUpdate( sQry, '%%9', memFrm.post_alpha );
868 | sQry := sUpdate( sQry, '%%A', memFrm.post_size );
869 |
870 | sQry := sUpdate( sQry, '%%B', d2 );
871 | sQry := sUpdate( sQry, '%%C', memFrm.post_edit_reason );
872 | sQry := sUpdate( sQry, '%%D', memFrm.post_edit_user );
873 | sQry := sUpdate( sQry, '%%E', memFrm.post_edit_count );
874 | sQry := sUpdate( sQry, '%%F', memFrm.post_edit_locked);
875 | sQry := sUpdate( sQry, '%%G', memFrm.id );
876 |
877 | query2 := TSQLQuery.Create(nil);
878 | query2.DataBase := conn;
879 | query2.SQL.Text := sQry;
880 | try
881 | query2.ExecSQL;
882 | conn.Transaction.Commit;
883 | except
884 | on e: Exception do posts_Update := e.Message + query2.SQL.Text;
885 | end;
886 |
887 | query2.active := False;
888 | query2.Free;
889 |
890 | end;
891 |
892 | Function Topic_Update( CONST conn: TMySQL55Connection; CONST memTpc: TopInfType ): STRING ;
893 | VAR
894 | query2 : TSQLQuery;
895 | d1, d2, d3, d4, sQry : STRING;
896 |
897 | begin
898 |
899 | Topic_Update := '';
900 | // normalize datetime
901 | d1 := memTpc.cTime;
902 | d2 := memTpc.time_limit;
903 | d3 := memTpc.last_post_time;
904 | d4 := memTpc.last_view_time;
905 | if d1 = '' then d1 := DateTimeToStr (now) ;
906 | if d2 = '' then d2 := '30.12.2099 00:00:00';
907 | if d3 = '' then d3 := d1;
908 | if d4 = '' then d4 := d1;
909 | d1 := FormatDateTime(sqlDate, StrToDateTime(d1));
910 | d2 := FormatDateTime(sqlDate, StrToDateTime(d2));
911 | d3 := FormatDateTime(sqlDate, StrToDateTime(d3));
912 | d4 := FormatDateTime(sqlDate, StrToDateTime(d4));
913 |
914 | // make query string Test: topic_text=%%3 instead of topic_text="%%3",
915 | sQry := 'UPDATE topics SET forum_id= %%1, title="%%2", topic_text=%%3, poster=%%4, poster_name="%%5", ctime= "%%6", ' +
916 | 'time_limit="%%7", views=%%8, replies=%%9, replies_real=%%A, first_post_id=%%B, first_poster_name="%%C", last_post_id=%%D, ' +
917 | 'last_poster_id=%%E, last_poster_name="%%F", last_post_subject="%%G", last_post_time="%%H", last_view_time="%%I" ' +
918 | 'WHERE id = %%J' ;
919 |
920 | sQry := sUpdate( sQry, '%%1', memTpc.forum_id );
921 | sQry := sUpdate( sQry, '%%2', memTpc.title );
922 | // sQry := sUpdate( sQry, '%%3', memTpc.topic_text );
923 | sQry := sUpdate( sQry, '%%3', 'x' + #39 + StrToHex(memTpc.topic_text) + #39 );
924 | sQry := sUpdate( sQry, '%%4', memTpc.poster );
925 | sQry := sUpdate( sQry, '%%5', memTpc.poster_name );
926 | sQry := sUpdate( sQry, '%%6', d1 );
927 | sQry := sUpdate( sQry, '%%7', d2 );
928 | sQry := sUpdate( sQry, '%%8', memTpc.views );
929 | sQry := sUpdate( sQry, '%%9', memTpc.replies );
930 | sQry := sUpdate( sQry, '%%A', memTpc.replies_real );
931 | sQry := sUpdate( sQry, '%%B', memTpc.first_post_id );
932 | sQry := sUpdate( sQry, '%%C', memTpc.first_poster_name );
933 | sQry := sUpdate( sQry, '%%D', memTpc.last_post_id);
934 | sQry := sUpdate( sQry, '%%E', memTpc.last_poster_id );
935 | sQry := sUpdate( sQry, '%%F', memTpc.last_poster_name );
936 | sQry := sUpdate( sQry, '%%G', memTpc.last_post_subject );
937 | sQry := sUpdate( sQry, '%%H', d3 );
938 | sQry := sUpdate( sQry, '%%I', d4 );
939 | sQry := sUpdate( sQry, '%%J', memTpc.id );
940 |
941 | query2 := TSQLQuery.Create(nil);
942 | query2.DataBase := conn;
943 | query2.SQL.Text := sQry;
944 | try
945 | query2.ExecSQL;
946 | conn.Transaction.Commit;
947 | except
948 | on e: Exception do Topic_Update := e.Message + query2.SQL.Text;
949 | end;
950 |
951 | query2.active := False;
952 | query2.Free;
953 |
954 | end;
955 |
956 | end.
957 |
958 |
--------------------------------------------------------------------------------
/menu.pas:
--------------------------------------------------------------------------------
1 | /////////////////////////////////////////////////////////////////////////
2 | // project : bbs_cgi
3 | // author : Ralph Berger
4 | // file : menu.pas
5 | // erstellt : 28.02.14
6 | // modified : RB - 21.03.2014
7 | // modified : 24.04.2014 BF 2.6.4 -> BF 3.0.0
8 | // tested : yes
9 |
10 | unit Menu;
11 |
12 | {$mode objfpc}{$H+}
13 |
14 | interface
15 |
16 | uses
17 | Classes, SysUtils, Variants, synacode, FmtBCD, mysql55conn, sqldb, blowcryp, mapping ;
18 |
19 | CONST
20 | PageItems = 5;
21 | cgiPath = '/fcgi-bin/bbs/';
22 | err_page= 'bbs_error.html';
23 | MenuS_1 = ' TeamBBS Forum TeamBBS Forum Abmelden Meine Nachrichten TeamBBS Forum Forum: %%3 Thema: %%4 Abmelden ' ;
86 | sTopic := '
' +
87 | '' +
88 | ' ' +
89 | 'Erstellt von: %%2 am: %%3 - Letzter Aufruf von: %%4 am: %%5 ' +
90 | '' +
91 | '' +
92 | ' ' +
93 | '
' ;
94 |
95 | sTopic := sUpdate( sTopic, '%%1', showUsrImage(usrFrm2) );
96 | sTopic := sUpdate( sTopic, '%%2', memTpc.poster_name );
97 | sTopic := sUpdate( sTopic, '%%3', memTpc.ctime );
98 | sTopic := sUpdate( sTopic, '%%4', memTpc.last_poster_name );
99 | sTopic := sUpdate( sTopic, '%%5', memTpc.last_post_time );
100 | sTopic := sUpdate( sTopic, '%%6', memTpc.topic_text );
101 | sTopic := sUpdate( sTopic, '%%7', showUsrInfo(usrFrm2) );
102 |
103 | sBody += sTopic +
104 | '
';
106 | sTopic := '
' ;
121 |
122 |
123 | sTopic := sUpdate( sTopic, '%%1', usrFrm1.Name );
124 | sTopic := sUpdate( sTopic, '%%2', PstFrm.post_time );
125 | sTopic := sUpdate( sTopic, '%%6', showUsrImage(usrFrm1) );
126 | sTopic := sUpdate( sTopic, '%%7', memTpc.id );
127 | sTopic := sUpdate( sTopic, '%%8', myPara.VSession );
128 | sTopic := sUpdate( sTopic, '%%9', memTpc.forum_id );
129 | sTopic := sUpdate( sTopic, '%%A', showUsrInfo(usrFrm1) );
130 | sBody += sTopic + '
';
131 | sBody += '
' +
84 | query.FieldByName('fname').AsString + ' ' );
85 | sRslt := sUpdate( sRslt, '%%2','' +
88 | query.FieldByName('title').AsString + ' ' );
89 | sRslt := sUpdate( sRslt, '%%3',StripHTML( query.FieldByName('post_text').AsString) );
90 | sRslt := sUpdate( sRslt, '%%4','' +
92 | query.FieldByName('Name').AsString + ' ' );
93 | body += sRslt;
94 | i += 1;
95 | if i = PageItems then break;
96 | query.next;
97 | end;
98 |
99 | // Build last table line
100 | sRslt := sUpdate( newsinfo, '%%5', mySessn.lastlogin);
101 | body += sRslt;
102 |
103 | // set footer info
104 | myPara.v_eof := iif( query.EOF, '1', '0'); // eof flag
105 |
106 | // show page
107 | Render('bbs_news.html', [ make_header(mypara), // header
108 | body, // body
109 | make_footer( BrookFCLFCGIBroker.conn, mypara) ]); // footer
110 | // release mem
111 | query.active := False;
112 | query.Free;
113 |
114 | end;
115 |
116 | initialization
117 | Tnews.Register('news');
118 |
119 | end.
120 |
121 |
--------------------------------------------------------------------------------
/newthm.pas:
--------------------------------------------------------------------------------
1 | /////////////////////////////////////////////////////////////////////////
2 | // project : bbs_fcgi
3 | // author : Ralph Berger
4 | // created : 11.02.14
5 | // file : newThm.pas
6 | // modified : 12.03.14
7 | // modified : 24.04.2014 BF 2.6.4 -> BF 3.0.0
8 | // called via: 'cgi1/forum?ID=XXXX&sesn=XXXXXXXXXXXXXXX'
9 |
10 | unit newThm;
11 |
12 | {$mode objfpc}{$H+}
13 |
14 | interface
15 |
16 | uses
17 | BrookAction, BrookFCLFCGIBroker, BrookConsts, Classes, SysUtils, Variants,
18 | FmtBCD, sqldb, blowcryp, mapping, menu;
19 |
20 | type
21 | TnewThm = class(TBrookAction)
22 | public
23 | procedure Get; override;
24 | procedure Post; override;
25 | end;
26 |
27 | implementation
28 |
29 | procedure TnewThm.Get;
30 | VAR
31 | memQry : ForInfType;
32 | memTpc : TopInfType;
33 | usrFrm1: usrInfType;
34 | myPara : ParaType;
35 |
36 | begin
37 |
38 | // check paras
39 | memTpc.forum_id := Params.Values['ID'];
40 | myPara.VSession := Params.Values['sesn'];
41 | mypara.sip:= TheRequest.RemoteAddress;
42 | if NOT isSessionValid( mypara ) then
43 | begin
44 | Render(err_page, [myPara.lastError]);
45 | exit;
46 | end;
47 |
48 | if memTpc.forum_id = '' then
49 | begin
50 | Render(err_page, ['Forum ID fehlt.']);
51 | exit;
52 | end;
53 |
54 | // copy from db to record
55 | ReadForum( BrookFCLFCGIBroker.conn, 'where id=' + memTpc.forum_id, memQry );
56 | ReadUsr ( BrookFCLFCGIBroker.conn, 'where iduser=' + IntToStr(myPara.userID), usrFrm1 );
57 |
58 | // start render
59 | myPara.Text1 := 'newthm?' ; // saved in session.forward_for
60 | myPara.sID := memTpc.forum_id ;
61 | myPara.sTopic:= memQry.fName ;
62 |
63 | Render('bbs_newthm.html', [ make_Header_newThm(mypara),
64 | showUsrImage(usrFrm1), // Usr Image
65 | showUsrInfo(usrFrm1), // Usr Info
66 | usrFrm1.Name, // Column 2 Usr Name
67 | memQry.fName, // Column 2 Forum Name
68 | mypara.VSession,
69 | memTpc.forum_id,
70 | make_Footer( BrookFCLFCGIBroker.conn, mypara ) ]);
71 |
72 |
73 | end;
74 |
75 |
76 | procedure TnewThm.Post;
77 | VAR
78 | memFrm : ForInfType;
79 | memTpc : TopInfType;
80 | usrFrm1: usrInfType;
81 | sNotify: string;
82 | myPara : ParaType;
83 |
84 | begin
85 |
86 | // read para
87 | sNotify := Fields.Values['vsbl'];
88 | myPara.VSession := Fields.Values['sesn'];
89 | mypara.sCmd := Fields.Values['B1'];
90 | mypara.sCmd += Fields.Values['B2']; // form posts B1 or B2
91 | memTpc.forum_id := Fields.Values['forum'];
92 | memTpc.title := Fields.Values['tpc_name'];
93 | memTpc.topic_text:= Fields.Values['S1'];
94 | // check session
95 | mypara.sip:= TheRequest.RemoteAddress;
96 | if NOT isSessionValid( mypara ) then
97 | begin
98 | Render(err_page, [myPara.lastError]);
99 | exit;
100 | end;
101 |
102 | // check submit button
103 | if mypara.sCmd <> 'Senden' then redirect ('./main?sesn=' + mypara.VSession, 302);
104 |
105 | usrFrm1.iduser := inttostr( mypara.userID );
106 | memTpc.poster := usrFrm1.iduser;
107 |
108 |
109 | ReadForum( BrookFCLFCGIBroker.conn, 'where id=' + memTpc.forum_id, memFrm );
110 | ReadUsr ( BrookFCLFCGIBroker.conn, 'where iduser=' + usrFrm1.iduser, usrFrm1 );
111 | memTpc.poster_name := usrFrm1.Name;
112 |
113 | // insert new topic
114 | myPara.lastError := topic_insert( BrookFCLFCGIBroker.conn, memTpc );
115 | if myPara.lastError <> '' then
116 | begin
117 | Render(err_page, [myPara.lastError]);
118 | exit;
119 | end;
120 |
121 | // update forum
122 | memFrm.topics := sPlus( memFrm.topics );
123 | memFrm.posts := sPlus( memFrm.posts );
124 | memFrm.last_poster_id := usrFrm1.iduser ;
125 | memFrm.last_poster_name := usrFrm1.Name;
126 | memFrm.last_post_subject:= memTpc.title;
127 | myPara.lastError := Upd_Forum( BrookFCLFCGIBroker.conn, memFrm );
128 | if myPara.lastError <> '' then
129 | begin
130 | Render(err_page, [myPara.lastError]);
131 | exit;
132 | end;
133 |
134 | redirect ('./forum?ID=' + memTpc.forum_id + '&sesn=' + myPara.VSession, 302);
135 |
136 | end;
137 |
138 | initialization
139 | TnewThm.Register('newthm');
140 |
141 | end.
142 |
143 |
--------------------------------------------------------------------------------
/posts.pas:
--------------------------------------------------------------------------------
1 | ////////////////////////////////////////////////////
2 | // project : bbs_fcgi
3 | // file : posts.pas
4 | // created : 02.03.14
5 | // called via: 'cgi1/topic?ID=1;Tpc=1'
6 | // modified : 24.04.2014 BF 2.6.4 -> BF 3.0.0
7 |
8 | unit posts;
9 | {$mode objfpc}{$H+}
10 |
11 | interface
12 |
13 | uses
14 | BrookAction, BrookFCLFCGIBroker, BrookConsts, Classes, SysUtils, Variants,
15 | FmtBCD, sqldb, DateUtils, mapping, blowcryp, menu;
16 |
17 | type
18 | TPosts = class(TBrookAction)
19 | public
20 | procedure Get; override;
21 | end;
22 |
23 | implementation
24 |
25 |
26 |
27 | procedure TPosts.Get;
28 | var
29 | I : Integer;
30 | sMenu, sBody, sTopic, sTmp, sPage : string;
31 | memFrm : ForInfType;
32 | memTpc : TopInfType;
33 | PstFrm : PstInfType;
34 | usrFrm1: usrInfType;
35 | usrFrm2: usrInfType;
36 | mySessn: sessInfType;
37 | myPara : paraType;
38 | query : TSQLQuery;
39 |
40 | begin
41 |
42 | // check paras
43 | mypara.sip := TheRequest.RemoteAddress;
44 | myPara.VSession := Params.Values['sesn'];
45 | memTpc.forum_id := Params.Values['ID'];
46 | memTpc.id := Params.Values['Tpc'];
47 | sPage := Params.Values['page']; // resest vpage para
48 |
49 | if memTpc.forum_id = '' then
50 | begin
51 | Render(err_page, ['Forum ID fehlt: ' + memTpc.forum_id ]);
52 | exit;
53 | end;
54 |
55 | if memTpc.id = '' then
56 | begin
57 | Render(err_page, ['Topic ID fehlt: ' + memTpc.id ]);
58 | exit;
59 | end;
60 |
61 |
62 | if NOT isSessionValid( mypara ) then
63 | begin
64 | Render(err_page, [myPara.lastError]);
65 | exit;
66 | end;
67 |
68 | // read forum info
69 | ReadForum( BrookFCLFCGIBroker.conn, 'where id=' + memTpc.forum_id, memFrm );
70 | // read session user
71 | ReadUsr( BrookFCLFCGIBroker.conn, 'where iduser=' + inttostr(mypara.userID), usrFrm1 );
72 | // read topic info
73 | Topic_Read( BrookFCLFCGIBroker.conn, memTpc );
74 | // refresh topic access infos
75 | memTpc.views := sPlus( memTpc.Views );
76 | memTpc.last_view_time := DateTimeToStr( now());
77 | memTpc.last_poster_name := usrFrm1.Name;
78 | Topic_Update( BrookFCLFCGIBroker.conn, memTpc );
79 | // read topic user
80 | ReadUsr( BrookFCLFCGIBroker.conn, 'where iduser=' + memTpc.poster, usrFrm1 );
81 |
82 | // render topic
83 | sTopic := '' +
84 | '
' +
85 | '' +
86 | ' ' +
87 | 'Erstellt von: %%2 am: %%3 - Letzter Aufruf von: %%4 am: %%5 ' +
88 | '' +
89 | '' +
90 | '' +
97 | ' ' +
98 | '';
104 |
105 | /// show topic edit button if current user = topic creator
106 | if inttostr( mypara.userID ) = memTpc.poster then
107 | sTopic += '' ;
113 |
114 | sTopic += '
';
184 | while not query.EOF do
185 | begin
186 | // read
187 | cpyPostInfo( Query, PstFrm );
188 | ReadUsr( BrookFCLFCGIBroker.conn, 'where iduser=' + PstFrm.user_id, usrFrm1 );
189 | ReadUsr( BrookFCLFCGIBroker.conn, 'where iduser=' + PstFrm.post_edit_user, usrFrm2 );
190 |
191 | // build display string
192 | sTopic := '
' +
193 | 'Antwort von: %%1 am: %%2 - Letzter Aufruf von: %%3 am: %%4 ' +
194 | ' ' +
196 | ' ';
197 |
198 | // show post edit buttons if current user = post creator
199 | if inttostr( mypara.userID ) = PstFrm.user_id then
200 | sTopic += '' ;
207 |
208 | sTopic += '
' ;
209 | sTopic := sUpdate( sTopic, '%%1', usrFrm1.Name );
210 | sTopic := sUpdate( sTopic, '%%2', PstFrm.post_time );
211 | sTopic := sUpdate( sTopic, '%%3', usrFrm2.Name );
212 | sTopic := sUpdate( sTopic, '%%4', PstFrm.post_edit_time );
213 | sTopic := sUpdate( sTopic, '%%5', PstFrm.post_text );
214 | sTopic := sUpdate( sTopic, '%%6', showUsrImage(usrFrm1) );
215 | sTopic := sUpdate( sTopic, '%%A', showUsrInfo(usrFrm1) );
216 |
217 | // set post edit buttons links
218 | if inttostr( mypara.userID ) = PstFrm.user_id then
219 | begin
220 | sTopic := sUpdate( sTopic, '%%7', PstFrm.id );
221 | sTopic := sUpdate( sTopic, '%%8', mypara.VSession );
222 | sTopic := sUpdate( sTopic, '%%9', PstFrm.user_id );
223 | end;
224 | sBody += sTopic + '
';
225 | i += 1;
226 | if i = PageItems then break;
227 | query.next;
228 | end;
229 | sBody += '
';
56 |
57 |
58 | // parse session string
59 | myPara.sIP := TheRequest.RemoteAddress;
60 | if decodeSessionID( myPara ) > 1440 then
61 | begin
62 | Render('bbs_accnt.html', [make_Header(mypara), sRet, make_Footer( conn, mypara )]);
63 | exit;
64 | end;
65 |
66 |
67 | // ReadUsr
68 | usrFrm.iduser := IntToStr(myPara.userID);
69 | ReadUsr( BrookFCLFCGIBroker.conn, 'where iduser=' + usrFrm.iduser, usrFrm );
70 | if usrFrm.iduser = '' then
71 | begin
72 | Render('bbs_accnt.html', [make_Header(mypara),
73 | sRet,
74 | make_Footer( BrookFCLFCGIBroker.conn, mypara )]);
75 | exit;
76 | end;
77 |
78 | // update vars
79 | usrFrm.RegisterIP := myPara.sIP;
80 | usrFrm.RegisterTime := DateTimeToStr( now ) ;
81 | usrFrm.isChecked := 'True';
82 | myPara.lastError := updUser(BrookFCLFCGIBroker.conn,usrFrm);
83 | if myPara.lastError <> '' then
84 | begin
85 | Render(err_page, [myPara.lastError]);
86 | exit;
87 | end;
88 |
89 | sRet := '
';
91 |
92 | Render('bbs_accnt.html', [make_Header(mypara),
93 | sRet,
94 | make_Footer( BrookFCLFCGIBroker.conn, mypara )]);
95 |
96 | end;
97 |
98 | procedure TAccount.Get;
99 | var
100 | i: integer;
101 | vPWD2, vagb, sRet : string;
102 | myPara : ParaType;
103 | usrFrm : usrInfType;
104 | myJob : JobType;
105 |
106 | begin
107 |
108 | // no navi bars
109 | mypara.sCmd := '0';
110 |
111 |
112 | if Params.Count = 0 then
113 | begin
114 | sRet := 'Benutzername
' +
115 | 'eMail
' +
117 | 'Passwort
' +
119 | 'Passwort bestätigen
' +
121 | '
';
124 | Render('bbs_accnt.html', [make_Header(mypara), sRet, make_Footer( conn, mypara )]);
125 | exit;
126 | end;
127 |
128 | // read paras
129 | vPWD2:= Params.Values['password_confirm'];
130 | vagb := Params.Values['agb'];
131 |
132 | mypara.VSession := Params.Values['sesn'];
133 | usrFrm.Name := Params.Values['usr_name'];
134 | usrFrm.MailAdress := Params.Values['emailsignup'];
135 | usrFrm.pwd := Params.Values['password'];
136 | // punish code injection
137 | usrFrm.Name := SecuredStr( usrFrm.Name );
138 | usrFrm.pwd := SecuredStr( usrFrm.pwd );
139 | usrFrm.MailAdress := SecuredStr( usrFrm.MailAdress );
140 |
141 | // preset entry fault text
142 | sRet := accntErr;
143 |
144 | // check paras
145 | if (usrFrm.Name = '') or (usrFrm.pwd ='') or (usrFrm.MailAdress = '') then
146 | begin
147 | sRet := sUpdate (sRet, '%%1', 'SQL Zeichen nicht erlaubt.');
148 | sRet := sUpdate (sRet, '%%2', 'Aktion abgebrochen !');
149 | Render('bbs_accnt.html', [make_Header(mypara), sRet, make_Footer( conn, mypara ) ]);
150 | exit;
151 | end;
152 |
153 | // validate input
154 | if length( usrFrm.pwd ) < 6 then
155 | begin
156 | sRet := sUpdate (sRet, '%%1', 'Ihr Passwort muss mindesten 6 Zeichen lang sein.');
157 | sRet := sUpdate (sRet, '%%2', 'Bitte korrigieren ..');
158 | Render('bbs_accnt.html', [make_Header(mypara), sRet, make_Footer( conn, mypara ) ]);
159 | exit;
160 | end;
161 |
162 | if usrFrm.pwd <> vPWD2 then
163 | begin
164 | sRet := sUpdate (sRet, '%%1', 'Passwort und Passwortbestätigung sind ungleich.');
165 | sRet := sUpdate (sRet, '%%2', 'Bitte korrigieren ..');
166 | Render('bbs_accnt.html', [make_Header(mypara), sRet, make_Footer( conn, mypara) ]);
167 | exit;
168 | end;
169 |
170 | // check if user already exists
171 | ReadUsr ( conn, ' where name="' + TRIM(usrFrm.Name) + '"', usrFrm );
172 | if usrFrm.iduser <> '' then
173 | begin
174 | sRet := sUpdate (sRet, '%%1', 'Der Benutzername: ' + usrFrm.Name + '
' +
190 | '';
191 | Render('bbs_accnt.html', [make_Header(mypara),
192 | sRet,
193 | make_Footer( BrookFCLFCGIBroker.conn, mypara) ]);
194 | exit;
195 | end;
196 |
197 | // Insert job 'regmail'
198 | myJob.inquirer := conn.UserName;
199 | myJob.inqIP := TheRequest.RemoteAddress;
200 | myJob.iduser := usrFrm.iduser;
201 | myJob.Action := 'regmail';
202 | myJob.Intervall := '0';
203 | myJob.Context := '|';
204 | job_insert ( BrookFCLFCGIBroker.conn, myJob );
205 |
206 | // render
207 | sRet := '
';
209 | Render('bbs_accnt.html', [make_Header(mypara),
210 | sRet,
211 | make_Footer( conn, mypara) ]);
212 |
213 | end;
214 |
215 |
216 |
217 | initialization
218 | TAccount.Register('accnt');
219 | TApprove.Register('approve');
220 |
221 | end.
222 |
223 |
--------------------------------------------------------------------------------
/upload.pas:
--------------------------------------------------------------------------------
1 | unit Upload;
2 |
3 | {$mode objfpc}{$H+}
4 |
5 | interface
6 |
7 | uses
8 | BrookAction, BrookConsts, BrookUtils, HTTPDefs, SysUtils;
9 |
10 | type
11 | TTest = class(TBrookAction)
12 | public
13 | procedure Get; override;
14 | procedure Post; override;
15 | end;
16 |
17 | const
18 | RESULT =
19 | 'All files:' + BR + LF + '%s' + BR + BR + LF +
20 | 'All files saved in:' + BR + LF + '%s';
21 |
22 | implementation
23 |
24 | procedure TTest.Get;
25 | begin
26 | Write({$i head.inc}, [{$i form.inc}]);
27 | end;
28 |
29 | procedure TTest.Post;
30 | var
31 | I: Integer;
32 | VFiles, VSep: string;
33 | VFormItem: TUploadedFile;
34 | begin
35 | VFiles := '';
36 | VSep := '||';
37 | for I := 0 to Pred(Files.Count) do
38 | begin
39 | VFormItem := Files[I];
40 | if VFormItem.FileName <> '' then
41 | VFiles += VFormItem.FileName + VSep;
42 | end;
43 | Write({$i head.inc},
44 | [Format(RESULT, [VFiles, BrookSettings.DirectoryForUploads])]);
45 | end;
46 |
47 | initialization
48 | TTest.Register('upload');
49 |
50 | end.
51 |
52 |
--------------------------------------------------------------------------------
/upst.pas:
--------------------------------------------------------------------------------
1 | /////////////////////////////////////////////////////////////////////////
2 | // project : bbs_fcgi
3 | // author : Ralph Berger
4 | // created : 10.03.14
5 | // file : upst.pas
6 | // show user posts for select or current user
7 | // modified : 24.04.2014 BF 2.6.4 -> BF 3.0.0
8 |
9 | unit upst;
10 |
11 | {$mode objfpc}{$H+}
12 |
13 | interface
14 |
15 | uses
16 | BrookAction, BrookFCLFCGIBroker, BrookConsts, Classes, SysUtils, Variants,
17 | FmtBCD, sqldb, blowcryp, mapping, menu;
18 |
19 |
20 | type
21 | TUpst = class(TBrookAction)
22 | public
23 | procedure Get; override;
24 | end;
25 |
26 |
27 | implementation
28 |
29 |
30 | procedure TUpst.Get;
31 | Var
32 | i,lastID: integer;
33 | sBody, sTmp : String;
34 | usrFrm1 : usrInfType;
35 | myPara : paraType;
36 | mySessn : sessInfType;
37 | query : TSQLQuery;
38 |
39 |
40 | begin
41 |
42 | // read paras
43 | myPara.VSession := Params.Values['sesn'];
44 | myPara.sID := Params.Values['ID'];
45 | // check session
46 | mypara.sip:= TheRequest.RemoteAddress;
47 | if NOT isSessionValid( mypara ) then
48 | begin
49 | Render(err_page, [myPara.lastError]);
50 | exit;
51 | end;
52 |
53 | // session callback target
54 | paraTypeInit('upst?ID=' + myPara.sID, myPara );
55 | mypara.sCmd := '1'; // '1' full menus
56 | // read sesion info
57 | mySessn.id := mypara.VSession;
58 | sesn_Read( BrookFCLFCGIBroker.conn, mySessn );
59 | sesn_copy_para( mySessn, myPara );
60 |
61 | // set session info
62 | if myPara.sID = '' then myPara.sID := IntToStr( myPara.userID ); // show logon user postings
63 | mypara.sCmd := '1'; // '1' full menus
64 |
65 | // set display order
66 | case myPara.v_order of
67 | '0' : sTmp := '' ;
68 | '1' : sTmp := ' ORDER BY topics.forum_id';
69 | '2' : sTmp := ' ORDER BY topics.topic_text';
70 | '3' : sTmp := ' ORDER BY topics.ctime';
71 | end;
72 |
73 |
74 | // read session user
75 | ReadUsr( BrookFCLFCGIBroker.conn, 'where iduser=' + mypara.sID, usrFrm1 );
76 | sBody := sUpdate( usrTbl,'%%0', showUsrImage(usrFrm1) );
77 | sBody := sUpdate( sBody, '%%1', count_usr_themes(BrookFCLFCGIBroker.conn, usrFrm1) );
78 | sBody := sUpdate( sBody, '%%2', count_usr_posts(BrookFCLFCGIBroker.conn, usrFrm1) + showUsrInfo(usrFrm1) );
79 |
80 | myPara.Text2 := usrFrm1.Name;
81 |
82 | // read forums and child posts
83 | query := TSQLQuery.Create(nil);
84 | query.DataBase := BrookFCLFCGIBroker.conn;
85 | query.SQL.Text := 'SELECT * FROM topics left join posts on ( topics.id = posts.forum_id ) ' +
86 | 'WHERE topics.poster =' + mypara.sID + ' OR posts.user_id =' + mypara.sID +
87 | sTmp + // set order
88 | ' limit ' + // limit start,stop
89 | IntToStr( StrToInt( mySessn.v_page ) * PageItems )
90 | + ',' + IntToStr( StrToInt( mySessn.v_page ) * PageItems + PageItems+1 );
91 | query.Open;
92 |
93 | i := 0;
94 | while not query.EOF do
95 | begin
96 | if query.FieldByName('forum_id').AsInteger <> lastID then
97 | begin
98 | sTmp := sUpdate( tpcTbl,'%%3', query.FieldByName('title').AsString );
99 | sTmp := sUpdate( sTmp, '%%4', query.FieldByName('ctime').AsString );
100 | sTmp := sUpdate( sTmp, '%%5', query.FieldByName('topic_text').AsString );
101 | sBody += sTmp;
102 | end;
103 |
104 | if query.FieldByName('user_id').IsNull = false then
105 | begin
106 | sTmp := sUpdate( pstTbl,'%%6', query.FieldByName('post_time').AsString );
107 | sTmp := sUpdate( sTmp, '%%7', query.FieldByName('post_text').AsString );
108 | sBody += sTmp;
109 | end;
110 |
111 |
112 | lastID := query.FieldByName('id').AsInteger;
113 | i += 1;
114 | if i = PageItems then break;
115 | query.next;
116 | end;
117 |
118 | mypara.V_rec := IntToStr(lastID); // rec id
119 | myPara.v_eof := iif( query.EOF, '1', '0'); // eof flag
120 |
121 | // display
122 | Render('bbs_upst.html', [make_Header_UPosts( myPara ),
123 | sBody ,
124 | make_Footer( BrookFCLFCGIBroker.conn, myPara ) ]);
125 |
126 |
127 | // release mem
128 | query.active := false;
129 | query.free;
130 |
131 |
132 | end;
133 |
134 | initialization
135 | TUpst.Register('upst');
136 |
137 | end.
138 |
139 |
--------------------------------------------------------------------------------
' + 56 | '' + 57 | '' + 78 | '
' + 153 | '
%%4 ' +
155 | '
%%5' +
156 | '
%%5';
160 |
161 | findinfo='