ucast.upm.edu.my ~ Shell I

Editing file /var/www/memberprofile.php (0775)

<?php

///////////////////////////////////////////////////////////////////////////////////////
// PHPmotion                                                http://www.phpmotion.com //
///////////////////////////////////////////////////////////////////////////////////////
// License: You are not to sell or distribute this software without permission       //
// Main Author: Brian Shawa -  bshawa@gmail.com                                      //
// Help and support please visit http://www.phpmotion.com                            //
// Copyright reserved                                                                //
///////////////////////////////////////////////////////////////////////////////////////

include_once ("classes/config.php");

include_once ('classes/menu.php');
include_once ('classes/sessions.php');
include_once ('online.php');

$member_id = $_GET['uid'];

// check if uid is in the requesting url
if ($member_id == "") {
    @mysql_close();
    header("Location: "."index.php");
    die();
}

// otherwise proceed to retrieve members details - starting with profile informaton
$sql = "SELECT * FROM member_profile WHERE user_id = $member_id";
$query = mysql_query($sql);
// if no member found redirect to home page with error code
if (mysql_num_rows($query) == 0) {
    @mysql_close();
    header("Location: "."index.php?code=102");
    die();
}
else {
    $result = mysql_fetch_array($query);
    // get all values for display on members profile section
    $members_username = $result["user_name"];
    $year_of_birth = $result["year_of_birth"];
    $gender = $result["gender"];
    $relationship_satus = $result["relationship_status"];
    $about_me = wordwrap($result["about_me"],15," ",true);
    //$personal_website = wordwrap($result["personal_website"],15," ",true);
    $personal_website = wordwrap($result["personal_website"],32," ",true);
    $home_town = wordwrap($result["home_town"],15," ",true);
    $home_country = $result["home_country"];
    $current_country = $result["current_country"];
    $high_school = wordwrap($result["high_school"],15," ",true);
    $college = wordwrap($result["college"],15," ",true);
    $work_places = wordwrap($result["work_places"],15," ",true);
    $interests = wordwrap($result["interests"],15," ",true);
    $fav_movies = wordwrap($result["fav_movies"],15," ",true);
    $fav_music = wordwrap($result["fav_music"],15," ",true);
    $current_city = wordwrap($result["current_city"],15," ",true);
}

// get members picture
// check friends picture
$sql = "SELECT * FROM pictures WHERE user_id = $member_id";
$result1 = @mysql_query($sql);
if (@mysql_num_rows($result1) != 0) {
    $result1 = @mysql_fetch_array($result1);
    $result1_existing_file = $result1['file_name'];
    $result1_approved = $result1['approved'];
    if ($result1_approved == "yes") {
        // show current picture
        $result1_mypicture = $config['site_base_url'].'/pictures/'.$result1_existing_file;
    }
    else {
        // show place holder image  for image "awaiting approval"
        $result1_mypicture = $config['site_base_url'].'/image_s/placeholder.gif';
    }
}
else {
    // show place holder for no image uploaded by user at all
    $result1_mypicture = $config['site_base_url'].'/image_s/placeholder.gif';

}
/*
* ----------------------------resuable video display code----------------------------
* display members snaphot video thumbs (3 total)
*/
$member_videos = array();
$sql = "SELECT * FROM videos WHERE user_id = $member_id AND approved = 'yes' AND public_private = 'public' LIMIT 3";
$query = @mysql_query($sql);
if (@mysql_num_rows($query) == 0) {
    $show_v = 1;
}
else {
    while ($result_members_videos = @mysql_fetch_array($query)) {
        $member_videos[] = $result_members_videos;
        $show_v = 2;
    }
}
/*
* END
*/

/*
* -----------------------------reusable favorites code -------------------------------
* display members snaphot video thumbs (3 total)
*/
$member_favorites = array();
$sql = "SELECT * FROM favorites WHERE user_id = $member_id LIMIT 3";
$query = @mysql_query($sql);
if (@mysql_num_rows($query) == 0) {
    $show_f = 1;
}
else {
    while ($result_members_favorites = @mysql_fetch_array($query)) {
        $fav_id = $result_members_favorites['video_id'];

// get more details about video i.e titles etc
        $sql2 = "SELECT * FROM videos WHERE indexer = $fav_id AND public_private = 'public'";
        $query2 = @mysql_query($sql2);
        $result_members_fav_videos = @mysql_fetch_array($query2);
        $member_favorites[] = $result_members_fav_videos;
        $show_f = 2;
    }
}

//get members online status
$sql = "SELECT * FROM online WHERE logged_in_id = $member_id";
$my_online_status = @mysql_num_rows(mysql_query($sql));
if ($my_online_status > 0) {// there is a multiple IP address issue hence use of '>'

$online_status = '<img src="images/icon_online.gif" alt="status" width="8" height="8" border="0" align="absmiddle" />';

}
else {
    $online_status = '<img src="images/icon_offline.gif" alt="status" width="8" height="8" border="0" align="absmiddle" />';
}

///////////////////////////////
//Members Audio Related Section
///////////////////////////////

// Count Members Own Fav Audio
$sql = "SELECT * FROM audio_favorites WHERE user_id = $member_id";
$member_fav_audio_count = @mysql_num_rows(mysql_query($sql));

// Count Members Own Fav Audio
$sql = "SELECT * FROM audios WHERE user_id = $member_id AND approved = 'yes'";
$member_own_audio_count = @mysql_num_rows(mysql_query($sql));

//Hide or show audio section in template inner_members_profile.htm
if ($enable_audio = 'yes'){
    $show_audio = 1;
}

//Audio Section End
///////////////////

// checking for any error codes --reusbale----
$codes = $_GET['code'];
$error_code = array();
$error_code = errorcodes($codes);
if (!empty($error_code)) {
    $blk_notification = $error_code['error_display'];
    $message_type = $error_code['error_type'];
    $error_message = $error_code['error_message'];
}
//-------end of reusable---

// display page
$template = "templates/main_1.htm";
$inner_template1 = "templates/inner_members_profile.htm";//middle of page
$inner_template2 = "templates/inner_blank.htm";// bottom of page
$TBS = new clsTinyButStrong;
$TBS->NoErr = true;// no more error message displayed.
$TBS->LoadTemplate("$template");
$TBS->MergeBlock('mp',$member_videos);
$TBS->MergeBlock('mf',$member_favorites);
$TBS->Render = TBS_OUTPUT;
$TBS->Show();

@mysql_close();
die();