events.php

<?php
/*
 *  Copyright (C) 2010-2011  TrinityScripts <http://www.trinityscripts.xe.cx/>
 *
 *  This program is free software; you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
 *   the Free Software Foundation; either version 2 of the License, or
 *   (at your option) any later version.
 *
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public License
 *  along with this program; if not, write to the Free Software
 *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 */
 
// page header, and any additional required libraries
require_once 'header.php';
// minimum permission to view page
valid_login($action_permission['read']);

//#############################################################################
// EVENTS
//#############################################################################
function events()
{
    global $output, $lang_events,
    $realm_id, $world_db,
    $itemperpage;
    $sqlw = new SQL;
    $sqlw->connect($world_db[$realm_id]['addr'], $world_db[$realm_id]['user'], $world_db[$realm_id]['pass'], $world_db[$realm_id]['name']);

    //-------------------SQL Injection Prevention--------------------------------
    // this page has multipage support and field ordering, so we need these
    $start = (isset($_GET['start'])) ? $sqlw->quote_smart($_GET['start']) : 0;
    if (is_numeric($start)); 
    else 
        $start=0;

    $order_by = (isset($_GET['order_by'])) ? $sqlw->quote_smart($_GET['order_by']) : 'description';
    if (preg_match('/^[_[:lower:]]{1,11}$/', $order_by)); 
    else 
        $order_by='description';

    $dir = (isset($_GET['dir'])) ? $sqlw->quote_smart($_GET['dir']) : 1;
    if (preg_match('/^[01]{1}$/', $dir)); 
    else 
        $dir=1;

    $order_dir = ($dir) ? 'ASC' : 'DESC';
    $dir = ($dir) ? 0 : 1;

    // for multipage support
    $all_record = $sqlw->result($sqlw->query('SELECT count(*) FROM game_event WHERE start_time <> end_time'),0);

    // main data that we need for this page, game events
    $result = $sqlw->query('SELECT description, start_time, occurence, length
                            FROM game_event WHERE start_time <> end_time ORDER BY '.$order_by.' '.$order_dir.' LIMIT '.$start.', '.$itemperpage.'');

    //---------------Page Specific Data Starts Here--------------------------
    // we start with a lead of 10 spaces,
    //  because last line of header is an opening tag with 8 spaces
    //  keep html indent in sync, so debuging from browser source would be easy to read
    $output .= '
                <!-- start of events.php -->
                <center>
                    <table class="top_hidden">
                        <tr>
                            <td width="25%" align="right">';

    // multi page links
    $output .= $lang_events['total'].' : '.$all_record.'<br /><br />'.
    generate_pagination('events.php?order_by='.$order_by.'&amp;dir='.(($dir) ? 0 : 1), $all_record, $itemperpage, $start);
    
    // column headers, with links for sorting
    $output .= '
                            </td>
                        </tr>
                    </table>
                    <table class="lined">
                        <tr>
                            <th width="35%"><a href="events.php?order_by=description&amp;start='.$start.'&amp;dir='.$dir.'"'.($order_by==='description' ? ' class="'.$order_dir.'"' : '').'>'.$lang_events['descr'].'</a></th>
                            <th width="25%"><a href="events.php?order_by=start_time&amp;start='.$start.'&amp;dir='.$dir.'"'.($order_by==='start_time' ? ' class="'.$order_dir.'"' : '').'>'.$lang_events['start'].'</a></th>
                            <th width="20%"><a href="events.php?order_by=occurence&amp;start='.$start.'&amp;dir='.$dir.'"'.($order_by==='occurence' ? ' class="'.$order_dir.'"' : '').'>'.$lang_events['occur'].'</a></th>
                            <th width="20%"><a href="events.php?order_by=length&amp;start='.$start.'&amp;dir='.$dir.'"'.($order_by==='length' ? ' class="'.$order_dir.'"' : '').'>'.$lang_events['length'].'</a></th>
                        </tr>';

    while ($events = $sqlw->fetch_assoc($result))
    {
        $days  = floor(round($events['occurence'] / 60) / 24);
        $hours = round($events['occurence'] / 60) - ($days * 24);
        $event_occurance = '';
        
        if ($days)
            $event_occurance .= $days.' days ';
        if ($hours)
            $event_occurance .= $hours.' hours';
            
        $days  = floor(round($events['length'] / 60) / 24);
        $hours = round($events['length'] / 60) - ($days * 24);
        $event_duration = '';
        if ($days)
            $event_duration .= $days.' days ';
        if ($hours)
            $event_duration .= $hours.' hours';
        $output .= '
                        <tr valign="top">
                            <td align="left">'.$events['description'].'</td>
                            <td>'.$events['start_time'].'</td>
                            <td>'.$event_occurance.'</td>
                            <td>'.$event_duration.'</td>
                        </tr>';
    }
    unset($event_duration);
    unset($event_occurance);
    unset($hours);
    unset($days);
    unset($events);
    unset($result);

    $output .= '
                        <tr>
                            <td colspan="4" class="hidden" align="right" width="25%">';
                            // multi page links
                            $output .= generate_pagination('events.php?order_by='.$order_by.'&amp;dir='.(($dir) ? 0 : 1), $all_record, $itemperpage, $start);
                            unset($start);
                            $output .= '
                            </td>
                        </tr>
                        <tr>
                            <td colspan="4" class="hidden" align="right">'.$lang_events['total'].' : '.$all_record.'</td>
                        </tr>
                    </table>
                </center>
                <!-- end of events.php -->';
}
//#############################################################################
// MAIN
//#############################################################################
// error variable reserved for future use
//$err = (isset($_GET['error'])) ? $_GET['error'] : NULL;

//unset($err);

$lang_events = lang_events();

$output .= '
        <div class="top">
            <h1>'.$lang_events['events'].'</h1>
        </div>';

// action variable reserved for future use
//$action = (isset($_GET['action'])) ? $_GET['action'] : NULL;

events();

//unset($action);
unset($action_permission);
unset($lang_events);

require_once 'footer.php';

?>