6 files changed, 220 insertions, 5 deletions

@@ -0,0 +1,124 @@
+<?php
+
+/* InstaDisc Server - A Four Island Project */
+
+include('includes/instadisc.php');
+include('includes/template.php');
+
+if (isset($_SESSION['username']))
+{
+        if (!isset($_GET['submit']))
+        {
+                showForm('',array());
+        } else {
+                $numOfErrors = 0;
+                $errors = array();
+
+                $getpending = "SELECT * FROM pending2 WHERE username = \"" . mysql_real_escape_string($_SESSION['username']) . "\" AND url = \"" . mysql_real_escape_string($_POST['url']) . "\"";
+                $getpending2 = mysql_query($getpending);
+                $getpending3 = mysql_fetch_array($getpending2);
+                if ($getpending3['username'] != $_POST['username'])
+                {
+                        addError($numOfErrors, $errors, 'url', 'Subscription could not be found');
+                }
+
+                if ($numOfErrors > 0)
+                {
+                        showForm($_POST['url'], $errors);
+                } else {
+                        if ($_POST['submit'] == "Verify")
+                        {
+                                switch (instaDisc_addSubscription($_SESSION['username'], $_POST['url']))
+                                {
+                                        case 0:
+                                                $template = new FITemplate('activatedsub');
+                                                $template->add('SITENAME', instaDisc_getConfig('siteName'));
+                                                $template->display();
+                                                break;
+
+                                        case 1:
+                                                addError($numOfErrors, $errors, '', 'Unknown error');
+                                                showForm($_POST['url'], $errors);
+                                                break;
+
+                                        case 2:
+                                                addError($numOfErrors, $errors, 'url', 'Subscription could not be found');
+                                                showForm($_POST['url'], $errors);
+                                                break;
+
+                                        case 3:
+                                                addError($numOfErrors, $errors, '', 'Subscription File is not well-formed');
+                                                showForm($_POST['url'], $errors);
+                                                break;
+
+                                        case 4:
+                                                addError($numOfErrors, $errors, '', 'Key in Subscription File is incorrect');
+                                                showForm($_POST['url'], $errors);
+                                                break;
+                                }
+                        } else {
+                                instaDisc_cancelSubscription($_SESSION['username'], $_POST['url']);
+                        }
+                }
+        }
+} else {
+        header('Location: index.php');
+}
+
+function showForm($url, $errors)
+{
+        $template = new FITemplate('activatesub');
+        $template->add('SITENAME', instaDisc_getConfig('siteName'));
+
+        if (isset($errors[1]))
+        {
+                $template->adds_block('ERROR', array('ex'=>'1'));
+
+                foreach ($errors as $name => $value)
+                {
+                        $template->adds_block('ERRORS', array(  'NAME' => $name,
+                                                                'MSG' => $value['msg']));
+                }
+        }
+
+        $template->add('URL_ERR', ifErrors($errors, 'url'));
+
+        doErrors($template, $errors, 'url');
+
+        $template->add('URL', $url);
+
+        $template->display();
+}
+
+function ifErrors($errors, $id)
+{
+        foreach ($errors as $name => $value)
+        {
+                if ($value['field'] == $id)
+                {
+                        return ' error';
+                }
+        }
+
+        return '';
+}
+
+function doErrors($template, $errors, $id)
+{
+        foreach ($errors as $name => $value)
+        {
+                if ($value['field'] == $id)
+                {
+                        $template->adds_block(strtoupper($id) . '_ERRS', array( 'NAME' => $name,
+                                                                                'VALUE' => $value['msg']));
+                }
+        }
+}
+
+function addError(&$numOfErrors, &$errors, $field, $msg)
+{
+        $numOfErrors++;
+        $errors[$numOfErrors] = array('field' => $field, 'msg' => $msg);
+}
+
+?>
@@ -294,9 +294,6 @@ function instaDisc_addSubscription($username, $url)
         $getcode3 = mysql_fetch_array($getcode2);
         if ($getcode3['username'] == $username)
         {
-                $delcode = "DELETE FROM pending2 WHERE username = \"" . mysql_real_escape_string($username) . "\" AND url = \"" . mysql_real_escape_string($url) . "\"";
-                $delcode2 = mysql_query($delcode);
-
                 $c = curl_init();
                 curl_setopt($c, CURLOPT_URL, $url);
                 curl_setopt($c, CURLOPT_HEADER, false);
@@ -324,15 +321,30 @@ function instaDisc_addSubscription($username, $url)
                                                         $inssub = "INSERT INTO subscriptions (username,url,owner,category) VALUES (\"" . mysql_real_escape_string($username) . "\", \"" . mysql_real_escape_string($header['Subscription']) . "\", \"true\", \"" . mysql_real_escape_string($header['Category']) . "\")";
                                                         $inssub2 = mysql_query($inssub);
 
-                                                        return true;
+                                                        $delcode = "DELETE FROM pending2 WHERE username = \"" . mysql_real_escape_string($username) . "\" AND url = \"" . mysql_real_escape_string($url) . "\"";
+                                                        $delcode2 = mysql_query($delcode);
+
+                                                        return 0;
+                                                } else {
+                                                        return 4;
                                                 }
+                                        } else {
+                                                return 3;
                                         }
+                                } else {
+                                        return 3;
                                 }
+                        } else {
+                                return 3;
                         }
+                } else {
+                        return 3;
                 }
+        } else {
+                return 2;
         }
 
-        return false;
+        return 1;
 }
 
 function instaDisc_listPendingSubscriptions($username)
@@ -0,0 +1,14 @@
+<HTML>
+        <HEAD>
+                <TITLE><!--SITENAME--> InstaDisc Central Server</TITLE>
+        </HEAD>
+
+        <BODY>
+                <CENTER>
+                        <H1>InstaDisc Subscription Activation</H1>
+
+                        <P>You've sucessfully activated your subscription! <A HREF="userpanel.php">Back to User Panel</A>
+                </CENTER>
+        </BODY>
+</HTML>
+
@@ -0,0 +1,51 @@
+<HTML>
+        <HEAD>
+                <TITLE><!--SITENAME--> InstaDisc Central Server</TITLE>
+                <LINK REL="stylesheet" TYPE="text/css" HREF="theme/uniform.css">
+        </HEAD>
+
+        <BODY>
+                <CENTER>
+                        <H1>InstaDisc Subscription Activation</H1>
+
+                        <P>If you've already requested a subscription be sponsered and added its Activation Key to its Subscription File, you can activate the subscription here:
+                </CENTER>
+
+                <FORM CLASS="uniform" ACTION="./activatesub.php?submit=" METHOD="POST">
+
+                        <!--BEGIN ERROR-->
+                        <DIV ID="errorMsg">Uh oh! Validation errors!<P>
+                                <OL>
+                        <!--END ERROR-->
+
+                        <!--BEGIN ERRORS-->
+                                        <LI><A HREF="#error<!--ERRORS.NAME-->"><!--ERRORS.MSG--></A></LI>
+                        <!--END ERRORS-->
+
+                        <!--BEGIN ERROR-->
+                                </OL>
+                        </DIV>
+                        <!--END ERROR-->
+
+                        <FIELDSET CLASS="inlineLabels">
+                                <LEGEND>User Details</LEGEND>
+
+                                <DIV CLASS="ctrlHolder<!--URL_ERR-->">
+                                        <!--BEGIN URL_ERRS-->
+                                                <P ID="error<!--URL_ERRS.NAME-->" CLASS="errorField"><EM>*</EM>
+                                                        <!--URL_ERRS.MSG-->
+                                                </P>
+                                        <!--END URL_ERRS-->
+
+                                        <LABEL FOR="url"><EM>*</EM> Subscription File URL: </LABEL>
+                                        <INPUT TYPE="text" ID="url" NAME="url" CLASS="textInput" VALUE="<!--URL-->">                    
+                                </DIV>
+                        </FIELDSET>
+
+                        <DIV CLASS="buttonHolder">
+                                <INPUT TYPE="submit" NAME="submit" VALUE="Verify">
+                                <INPUT TYPE="submit" NAME="submit" VALUE="Delete">
+                        </DIV>
+                </FORM>
+        </BODY>
+</HTML>
@@ -21,6 +21,14 @@
                                 <LI><A HREF="activatesub.php">Activate a Subscription</A></LI>
                                 <LI><A HREF="mansub.php">Manage subscriptions</A></LI>
                         </UL>
+
+                        <!--BEGIN ADMIN-->
+                        <P>Since you are the almighty admin of this Central Server, you can edit configurational values!
+
+                        <UL>
+                                <LI><A HREF="admin.php">Edit Configuration</A></LI>
+                        </UL>
+                        <!--END ADMIN-->
                 </CENTER>
         </BODY>
 </HTML>
@@ -10,6 +10,12 @@ if (isset($_SESSION['username']))
         $template = new FITemplate('userpanel');
         $template->add('SITENAME', instaDisc_getConfig('siteName'));
         $template->add('USERNAME', $_SESSION['username']);
+
+        if (instaDisc_getConfig('owner') == $_SESSION['username'])
+        {
+                $template->adds_block('ADMIN',array('ex'=>1));
+        }
+
         $template->display();
 } else {
         header('Location: index.php');