<?php 
error_reporting();

require_once("databas.php");
dbconn(false);
loggedinorreturn();

//=== set the max size you will allow to be uploaded and number of files
$max_file_size = 3145728; // 3145728 = 3 MB //=== will be much lower later lol

//=== set how many images per page here, this will affect all galleries
$perpage = 10;

//=== number of rows per page
$num_rows = 5;

$spacer = '&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;';	

$page_links = "<p><a class=altlink href=video_gallery.php?my_gallery=1>visa mina videoarkiv</a> | <a class=altlink href=video_gallery.php?public_gallerys=1>visa alla videoarkiv</a> | ".  
"<a class=altlink href=video_gallery.php?manage_gallerys=1>hantera videoarkiv</a> | <a class=altlink href=video_gallery.php?upload=1>ladda upp filmer</a> </p>";

//=== add or remove classes to match your site, thanks Laffin! :)
//=== "number_of_pics" is how many they can up at one time, 'number_total' is the number of pitures they can have in the gallery, and  'gal_per_member' is the number of galleries the member can have
$max = array(
UC_USER => array( 'number_of_pics' => 2, 'number_total' => 10, 'gal_per_member' => 2),
UC_POWER_USER => array( 'number_of_pics' => 4, 'number_total' => 25, 'gal_per_member' => 4),
UC_VIP => array( 'number_of_pics' => 4, 'number_total' => 50, 'gal_per_member' => 5),
UC_MODERATOR => array( 'number_of_pics' => 6, 'number_total' => 100, 'gal_per_member' => 8),
UC_ADMINISTRATOR => array( 'number_of_pics' => 10, 'number_total' => 200, 'gal_per_member' => 10),
UC_SYSOP => array( 'number_of_pics' => 12, 'number_total' => 400, 'gal_per_member' => 20),
);

//=== rating for images function
function ratingpic_image($num) {
    global $pic_base_url;
    $r = round($num * 2) / 2;
    if ($r < 1 || $r > 10)
        return;
    return "<img src=/pic/video_ratings/$r.gif align=absmiddle alt=\"rating: $num / 10\" />";
}

//=== drop down gallery box select and go to gallery
function on_select_gallery_change(){
global $CURUSER;
?>
<script language="Javascript">
function goTo (page) {
	if (page != "" ) {
		if (page == "--" ) {
			resetMenu();
		} else {
			document.location.href = page;
		}
	}
	return false;
}
</script>
<?php 
$res_change = mysql_query("SELECT * FROM my_videos WHERE user_id = $CURUSER[id]") or sqlerr(__FILE__, __LINE__);
$galleryz = "";
while ($arr_change = mysql_fetch_assoc($res_change))
$galleryz .= "<option value=?my_gallery=1&gallery=$arr_change[id] ".($arr_change["id"]==(0+$_GET['gallery'])?"selected='selected'":"").">".$arr_change["gallery_name"]."</option>";
echo "<br><b>gå till: </b><form name=gmenu><select name=page onChange=\"goTo(this.options[this.selectedIndex].value)\">$galleryz</select></form>";
}

//=== drop down gallery select
function gallery_select(){
global $CURUSER;
$res_select = mysql_query("SELECT * FROM `my_videos` WHERE `user_id` =$CURUSER[id]") or sqlerr(__FILE__, __LINE__);
$list_select = "";
if (!$res_select)
$list_select .= '<option value=0>finns inga videoarkiv</option>';
else
while ($arr_select = mysql_fetch_assoc($res_select))
$list_select .= "<option value='$arr_select[id]'>".$arr_select["gallery_name"]."</option>";
echo "<select name=add_to_gallery>$list_select</select>";
}

//=== count of entered images
    $res = mysql_query("SELECT COUNT(*) FROM video_gallery WHERE user_id=" . $CURUSER["id"]) or sqlerr(__FILE__, __LINE__);
    $arr = mysql_fetch_row($res);
    $count = $arr[0];

//=== rate image /// will add a change your rating option to this :)
if ($_GET["takerate"]){
$id = isset($_GET['takerate']) ? (int)$_GET['takerate'] : 0;
if(!is_valid_id($id))
stderr("Error", "Ogiltigt ID!"); 

$rate_me = isset($_GET['rate_me']) ? (int)$_GET['rate_me'] : 0;
if ($rate_me <= 0 || $rate_me > 10)
stderr("Error", "invalid rating number");

$res = mysql_query("SELECT video_id, user_id, rating FROM video_ratings WHERE video_id = $id AND user_id = $CURUSER[id]");
$row = mysql_fetch_array($res);

if (!$row){ //=== add new rating
mysql_query("INSERT INTO video_ratings (video_id, user_id, rating, added) VALUES ($id, " . $CURUSER["id"] . ", $rate_me, NOW())");
mysql_query("UPDATE video_gallery SET numratings = numratings + 1, ratingsum = ratingsum + $rate_me WHERE id = $id");
header("Location: video_gallery.php?info=$id&rated=1");
die();
}
else { //=== change rating
mysql_query("UPDATE video_ratings SET rating = $rate_me WHERE video_id = $id AND user_id = $CURUSER[id]");
mysql_query("UPDATE video_gallery SET ratingsum = ratingsum + $rate_me - $row[rating] WHERE id = $id");
header("Location: video_gallery.php?info=$id&rate_changed=1");
die();
}
}

//=== add comment
if ($_GET['comment']){	
$video_id = isset($_GET['comment']) ? (int)$_GET['comment'] : 0;
if(!is_valid_id($video_id))
stderr("Error", "Ogiltigt ID!");

if(isset($_POST['pic_comment']) && $_POST['pic_comment'] == '')
stderr("Error", "comment body can not be empty! use your back button and fill in some text!");

$added = sqlesc(get_date_time());
$pic_comment = sqlesc($_POST["pic_comment"]);

mysql_query("INSERT INTO comments (user, text, ori_text, video_gallery, added) VALUES(".sqlesc($CURUSER["id"]).", $pic_comment, $pic_comment, $video_id, $added)") or sqlerr(__FILE__, __LINE__);
header("Location: video_gallery.php?info=$video_id&edited=1");
die();
}

//=== edit comment
if ($_GET['edit_comment']){
$edit_comment = isset($_GET['edit_comment']) ? (int)$_GET['edit_comment'] : 0;
if(!is_valid_id($edit_comment))
stderr("Error", "Bad Id!");

$video_id = isset($_GET['video_id']) ? (int)$_GET['video_id'] : 0;
if(!is_valid_id($video_id))
stderr("Error", "Bad Id!");

if(isset($_POST['pic_comment']) && $_POST['pic_comment'] == '')
stderr("Error", "comment body can not be empty! use your back button and fill in some text!");

$sure = isset($_GET['sure']) ? (int)$_GET['sure'] : 0;
if ($sure === 1){

$res_gal = mysql_query("SELECT text,id FROM comments WHERE id = ".sqlesc($edit_comment)) or sqlerr(__FILE__, __LINE__);
$arr_gal = mysql_fetch_assoc($res_gal);

stdhead("ändra kommentar");
begin_table();

echo "$page_links<table width=80%><form method=post action=?edit_comment=".$arr_gal["id"]."&video_id=$video_id&sure=2 enctype='multipart/form-data'><p><b>Edit comment</b><p>".
"<tr><td colspan=2 align=center class=colhead>Edit comment</td></tr><tr><td class=clearalt6 align=right valign=top width=25%><br><b>comment:</b></td>".
"<td class=clearalt6 align=left width=75%><br><textarea name=pic_comment cols=100 rows=3>".htmlspecialchars($arr_gal["text"])."</textarea><br></td></tr>".
"<td colspan=2 align=center class=clearalt6><input type=submit value=edit class=button><br><br></td></tr>".
"</form></table>";

end_table();
stdfoot();
}
if ($sure === 2){
$added = sqlesc(get_date_time());
$pic_comment = sqlesc($_POST["pic_comment"]);

mysql_query("UPDATE comments SET text = $pic_comment, editedby = ".sqlesc($CURUSER["id"]).", editedat = $added WHERE id = ".sqlesc($edit_comment))or sqlerr(__FILE__, __LINE__);
header("Location: video_gallery.php?info=$video_id&edited=1");
}
}

//=== delete comment
if ($_GET['delete_comment']){

$comment_id = isset($_GET['delete_comment']) ? (int)$_GET['delete_comment'] : 0;
if(!is_valid_id($comment_id))
stderr("Error", "Bad Id!");

$video_id = isset($_GET['video_id']) ? (int)$_GET['video_id'] : 0;
if(!is_valid_id($video_id))
stderr("Error", "Bad Id!");

if (!$_GET['sure'])
stderr("Bekräfta!", "är du säker på att du vill radera denna kommentar? <a class=altlink href=?delete_comment=$comment_id&video_id=$video_id&sure=1><b>JA</b></a> - <a class=altlink href=?info=$video_id><b>Nej</b></a>..");
mysql_query("DELETE FROM comments WHERE id = ".sqlesc($comment_id));
header("Location: video_gallery.php?info=$video_id&edited=1");
}

//=== add new gallery
if ($_GET['manage']){

//=== count of entered images
    $res_c = mysql_query("SELECT COUNT(*) FROM my_videos WHERE user_id=" . $CURUSER["id"]) or sqlerr(__FILE__, __LINE__);
    $arr_c = mysql_fetch_row($res_c);
if(($count_c = $arr_c[0]) >= ($max[$CURUSER['class']]['gal_per_member']))
stderr("Error!", "As a <b>".get_user_class_name($CURUSER['class'])."</b> you may have up to <b>".($max[$CURUSER['class']]['gal_per_member'])."</b> gallerys, you now have <b>$count_c</b>.");

$need = array('public', 'private', 'friends');
if ($_POST["new_gallery"] === '' || !in_array($_POST["gal_share_new"], $need))
stderr("Error!", "you must enter both a name and a share for your new gallery.");

$name = mysql_real_escape_string(htmlspecialchars($_POST["new_gallery"]));

//=== add check to see if name exists...
$res_gal_name = mysql_query("SELECT gallery_name FROM my_videos WHERE user_id = ".sqlesc($CURUSER['id'])." AND gallery_name = '$name'") or sqlerr(__FILE__, __LINE__);
$arr_gal_name = mysql_num_rows($res_gal_name);

if ($arr_gal_name > 0)
stderr("Error", "That gallery name exists.");

$gal_share_new = sqlesc($_POST["gal_share_new"]);

mysql_query("INSERT INTO my_videos (user_id, gallery_name, share_gallery) VALUES(".sqlesc($CURUSER["id"]).", '$name', $gal_share_new)") or sqlerr(__FILE__, __LINE__);
header("Location: video_gallery.php?manage_gallerys=1&edited=1");
}

//=== edit gallery
if ($_GET['edit']){

if ($_POST["gallery_name"] === '')
stderr("Error!", "you must enter a name for your gallery.");

$gallery_name = mysql_real_escape_string(htmlspecialchars($_POST["gallery_name"]));

//=== add check to see if name exists...
$res_gal_name = mysql_query("SELECT gallery_name FROM my_videos WHERE user_id = ".sqlesc($CURUSER['id'])." AND gallery_name = '$gallery_name'") or sqlerr(__FILE__, __LINE__);
$arr_gal_name = mysql_num_rows($res_gal_name);

if ($arr_gal_name >= 1)
stderr("Error", "That gallery name exists.");

$gal_share = sqlesc($_POST["gal_share"]);
$id = sqlesc(0 + $_POST["id"]);

mysql_query("UPDATE my_videos SET gallery_name = '$gallery_name', share_gallery = $gal_share WHERE user_id = ".sqlesc($CURUSER["id"])." AND id = $id") or sqlerr(__FILE__, __LINE__);
header("Location: video_gallery.php?manage_gallerys=1&edited=1");
}

//=== delete gallery
if ($_GET['delete_gallery']){
$id = sqlesc(0 + $_GET["id"]);

$res_gal = mysql_query("SELECT user_id FROM my_videos WHERE id = $id") or sqlerr(__FILE__, __LINE__);
$arr_gal = mysql_fetch_assoc($res_gal);

if ($arr_gal['user_id'] !== $CURUSER['id'] && get_user_class() < UC_MODERATOR)
stderr("Error", "This is not your gallery to delete!");

mysql_query("DELETE FROM my_videos WHERE id = $id");
header("Location: video_gallery.php?manage_gallerys=1&edited=1");
}

//=== manage galleries
if ($_GET['manage_gallerys']){

$res_mg = mysql_query("SELECT * FROM my_videos WHERE user_id=" . sqlesc($CURUSER['id'])) or sqlerr(__FILE__,__LINE__);
stdhead("Hantera videoarkiv");
begin_table();

echo "<p><b>$CURUSER[username]'s Videoarkiv</b><br><br>$page_links".
"".($_GET["edited"] == '1' ? "<h1>Uppdatering slutförd</h1>" : "")."<table border=1 cellspacing=0 cellpadding=5 width=90%><tr><td class=colhead colspan=2>My Gallery  Manager</td></tr>".
"<tr><td class=clearalt6 colspan=2><br><br><p>Här kan du skapa nya videoarkiv, ändra nuvarande, och ändra hur du vill dela videoarkiven...".
" offentligt, med vänner eller inte alls.</p><br></td></tr><tr><td class=clearalt6 colspan=2><form method=post action=?manage=1 enctype='multipart/form-data'>".
"<br><b>skapa nytt videoarkiv:</b> <input type=text name=new_gallery value=\"ange namn på videoarkiv här\" size=60  maxlength=60> <b>dela detta videoarkiv:</b> ".
"<input type=radio name=gal_share_new value=public> offentligt <input type=radio name=gal_share_new value=private> privat".
"<input type=radio name=gal_share_new value=friends> vänner<br><br></td></tr><tr><td class=clearalt6 colspan=2 align=center><br><br>".
"<input type=submit value=add class=button><br></form></td></tr><tr><td class=colhead colspan=2>Hantera mina videoarkiv</td></tr>";
while ($row_mg = mysql_fetch_assoc($res_mg)){
$id = 0 + $row_mg['id'];
echo"<form method=post action=?edit=1 enctype='multipart/form-data'><tr><td class=clearalt6 colspan=2 align=center><br><b>namn på videoarkiv:</b>".
" <input type=text name=gallery_name value=\"".$row_mg['gallery_name']."\" size=60 maxlength=60><input type=hidden name=id value=$id>".
"<input type=radio name=gal_share" . ($row_mg["share_gallery"] == "public" ? " checked" : "") . " value=public> offentligt ".
"<input type=radio name=gal_share" . ($row_mg["share_gallery"] == "private" ? " checked" : "") . " value=private> privat".
"<input type=radio name=gal_share" . ($row_mg["share_gallery"] == "friends" ? " checked" : "") . " value=friends> vänner ".
"<input class=button type=submit value=Ändra></form> <a class=altlink href=?delete_gallery=1&id=$id>".
"<input class=button type=submit value=Radera></a></td></tr>";
}
echo "</table>"; 
on_select_gallery_change();
end_table();
stdfoot();	
die();
}	

//===  Delete images 
if ($_GET["delete"]){
if (!isset($_POST[delete_image]) && !isset($_GET[delete_image]))
stderr("Error", "Inga filmer markerade");

if ($_POST['delete_image'])
$checked= $_POST['delete_image'];
else
$checked= $_GET['delete_image'];

foreach ($checked as $delete) {
//=== get file to delete
$res = mysql_query("SELECT location FROM video_gallery WHERE id=".sqlesc($delete));
$arr = mysql_fetch_assoc($res);
//=== delete image and thumb
$filepath_thumb = "./filmer/thumbs/$arr[location]";
$filepath = "./filmer/$arr[location]";
unlink($filepath); 
unlink($filepath_thumb); 

//=== remove other stuff 
mysql_query ("DELETE FROM video_gallery WHERE user_id = $CURUSER[id] AND id=".sqlesc($delete));
mysql_query ("DELETE FROM video_ratings WHERE video_id=".sqlesc($delete));
mysql_query ("DELETE FROM comments WHERE video_gallery=".(0 + $delete));
}
header("Location: ".$_SERVER['HTTP_REFERER']."&deleted=1");
}

//=== image info edit
if ($_GET['edit_image_info']){

//=== should just add this to css to match the stylesheets :P
?>
<STYLE TYPE="text/css">
.select2 {
background-color:Deepskyblue;
font-weight: bold;
}
</STYLE>
<?php 
$video_id = isset($_GET['edit_image_info']) ? (int)$_GET['edit_image_info'] : 0;
if(!is_valid_id($video_id))
stderr("Error", "Ogiltigt ID!");

$res_gal = mysql_query("SELECT * FROM video_gallery WHERE id = $video_id") or sqlerr(__FILE__, __LINE__);
$arr_gal = mysql_fetch_assoc($res_gal);

if ($arr_gal['user_id'] !== $CURUSER['id'] && get_user_class() < UC_MODERATOR)
stderr("Error", "Du har inte tillåtelse att ändra denna film.");

if (!$_GET['sure']){

$res_select = mysql_query("SELECT * FROM `my_videos` WHERE `user_id` =$CURUSER[id]") or sqlerr(__FILE__, __LINE__);
$list_select = "";
if (!$res_select)
$list_select .= '<option value=0>Du har inga videoarkiv än.</option>';
else
while ($arr_select = mysql_fetch_assoc($res_select))
$list_select .= "<option value='$arr_select[id]' ".($arr_gal["in_gallery"]==$arr_select["id"]?"selected='selected'> • • • behåll i videoarkiv:: ".$arr_select["gallery_name"]." • • •":"> • flytta till videoarkiv:: ".$arr_select["gallery_name"]."")."</option>";

stdhead("Ändra information för '" .$arr_gal[name]. "'");
begin_table();

			$image = array_values(getimagesize("filmer/$arr_gal[location]"));
			list($width, $height) = $image;
			$image_size = "filmer/$arr_gal[location]";

if ($width >= "400")
$show_image = "<img width=400 src=filmer/".htmlspecialchars($arr_gal['location'])." title=\"$arr_gal[name]\">";
else
$show_image = "<img src=filmer/".htmlspecialchars($arr_gal['location'])." title=\"$arr_gal[name]\">";
			
echo "$page_links<p><b>Ändra bildinformation</b></p>".($_GET["edited"] == '1' ? "<h1>Uppdatering slutförd</h1>" : "")."".
"<form method=post action=?edit_image_info=$arr_gal[id]&sure=1 enctype='multipart/form-data'><table border=1 cellspacing=0 cellpadding=5 width=90%>".
"<tr><td class=colhead><b>Ändra: $arr_gal[name]</b></td></tr><tr><td align=center valign=top class=clearalt6><b>tillagd den: </b>$arr_gal[added]".
"<br><br>$show_image<br><br><b>Filmtitel:</b> <input type=text name=name value=\"$arr_gal[name]\" size=60> ".
" <select class=select2 name=gallery>$list_select</select><br><br>".
"<b>filstorlek: ".mksize(filesize($image_size))."</b><br>".
"<br>direktlänk: <a class=altlink href=$BASEURL/filmer/".htmlspecialchars($arr_gal['location'])."><b>$BASEURL/filmer/".htmlspecialchars($arr_gal['location'])."</b></a><br><br> ".
"</td></tr><tr><td class=clearalt6 align=center colspan=2><input type=submit value=\"Uppdatera bild\" class=button><br><br></td></tr></table></form><br><br>";

on_select_gallery_change();
end_table();
stdfoot();	
die();
}
//=== make the changes
if($_POST['name'] == '')
stderr("Error", "Denna film måste ha ett namn. Använd tillbaka-knappen för att ange lite text.");

$name = mysql_real_escape_string(htmlspecialchars($_POST["name"]));
$in_gallery = sqlesc(0 + $_POST['gallery']);

mysql_query("UPDATE video_gallery SET name = '$name', in_gallery = $in_gallery WHERE user_id = ".sqlesc($CURUSER["id"])." AND id = $video_id") or sqlerr(__FILE__, __LINE__);
header("Location: video_gallery.php?info=$video_id&edited=1");
}

//=== image info page
if ($_GET['info']){

$video_id = isset($_GET['info']) ? (int)$_GET['info'] : 0;
if(!is_valid_id($video_id))
stderr("Error", "Ogiltigt ID!");

$res_gal = mysql_query("SELECT p_g.*, m_g.gallery_name, u.username, u.id AS uid FROM video_gallery AS p_g LEFT JOIN my_videos AS m_g ON p_g.in_gallery = m_g.id LEFT JOIN users AS u ON u.id = p_g.user_id WHERE p_g.id = $video_id") or sqlerr(__FILE__, __LINE__);
$arr_gal = mysql_fetch_assoc($res_gal);

?>
<script language="Javascript">
function insertAtCursor(myField, myValue)
{
if (document.selection)
{
myField.focus();
sel = document.selection.createRange();
sel.text = myValue;
}
else if (myField.selectionStart || myField.selectionStart == '0')
{
var startPos = myField.selectionStart;
var endPos = myField.selectionEnd;
myField.value = myField.value.substring(0, startPos) + myValue + myField.value.substring(endPos, myField.value.length);
   myField.focus();
}
else
{
myField.value += myValue;
}
}

function SmileIT(smile,form,text){

    smile = " "+smile+" ";
    insertAtCursor(document.forms[form].elements[text],smile);
    document.forms[form].elements[text].focus();
}

function openTable(tableid) { 
which = document.getElementById(tableid);
if (which.style.display == "block") {
which.style.display = "none";
}
else {
which.style.display = "block";
}
}

   function PopupVid(sVidURL) {
     window.open( "video_popup.htm?"+sVidURL, "",  
     "resizable=1,HEIGHT=200,WIDTH=250");
   }


/***********************************************
* Pop-it menu- © Dynamic Drive (www.dynamicdrive.com)
* This notice MUST stay intact for legal use
* Visit http://www.dynamicdrive.com/ for full source code
***********************************************/

var defaultMenuWidth="180px" //set default menu width.

var linkset=new Array()
//SPECIFY MENU SETS AND THEIR LINKS. FOLLOW SYNTAX LAID OUT
linkset[0]='<p align=center><b>Rate Image!</b></p>'
linkset[0]+='<a class=altlink href=?takerate=<?php echo $video_id?>&rate_me=10><img src="pic/video_ratings/10.gif" alt="10 - tops"> 10</a>'
linkset[0]+='<a class=altlink href=?takerate=<?php echo $video_id?>&rate_me=9><img src="pic/video_ratings/9.gif" alt="9 av 10"> 9</a>'
linkset[0]+='<a class=altlink href=?takerate=<?php echo $video_id?>&rate_me=8><img src="pic/video_ratings/8.gif" alt="8 av 10"> 8</a>'
linkset[0]+='<a class=altlink href=?takerate=<?php echo $video_id?>&rate_me=7><img src="pic/video_ratings/7.gif" alt="7 av 10"> 7</a>'
linkset[0]+='<a class=altlink href=?takerate=<?php echo $video_id?>&rate_me=6><img src="pic/video_ratings/6.gif" alt="6 av 10"> 6</a>'
linkset[0]+='<a class=altlink href=?takerate=<?php echo $video_id?>&rate_me=5><img src="pic/video_ratings/5.gif" alt="5 av 10"> 5</a>'
linkset[0]+='<a class=altlink href=?takerate=<?php echo $video_id?>&rate_me=4><img src="pic/video_ratings/4.gif" alt="4 av 10"> 4</a>'
linkset[0]+='<a class=altlink href=?takerate=<?php echo $video_id?>&rate_me=3><img src="pic/video_ratings/3.gif" alt="3 av 10"> 3</a>'
linkset[0]+='<a class=altlink href=?takerate=<?php echo $video_id?>&rate_me=2><img src="pic/video_ratings/2.gif" alt="2 av 10"> 2</a>'
linkset[0]+='<a class=altlink href=?takerate=<?php echo $video_id?>&rate_me=1><img src="pic/video_ratings/1.gif" alt="1 - dålig"> 1</a>'
////No need to edit beyond here

var ie5=document.all && !window.opera
var ns6=document.getElementById

if (ie5||ns6)
document.write('<div id="popitmenu" onMouseover="clearhidemenu();" onMouseout="dynamichide(event)"></div>')

function iecompattest(){
return (document.compatMode && document.compatMode.indexOf("CSS")!=-1)? document.documentElement : document.body
}

function showmenu(e, which, optWidth){
if (!document.all&&!document.getElementById)
return
clearhidemenu()
menuobj=ie5? document.all.popitmenu : document.getElementById("popitmenu")
menuobj.innerHTML=which
menuobj.style.width=(typeof optWidth!="undefined")? optWidth : defaultMenuWidth
menuobj.contentwidth=menuobj.offsetWidth
menuobj.contentheight=menuobj.offsetHeight
eventX=ie5? event.clientX : e.clientX
eventY=ie5? event.clientY : e.clientY
//Find out how close the mouse is to the corner of the window
var rightedge=ie5? iecompattest().clientWidth-eventX : window.innerWidth-eventX
var bottomedge=ie5? iecompattest().clientHeight-eventY : window.innerHeight-eventY
//if the horizontal distance isn't enough to accomodate the width of the context menu
if (rightedge<menuobj.contentwidth)
//move the horizontal position of the menu to the left by it's width
menuobj.style.left=ie5? iecompattest().scrollLeft+eventX-menuobj.contentwidth+"px" : window.pageXOffset+eventX-menuobj.contentwidth+"px"
else
//position the horizontal position of the menu where the mouse was clicked
menuobj.style.left=ie5? iecompattest().scrollLeft+eventX+"px" : window.pageXOffset+eventX+"px"
//same concept with the vertical position
if (bottomedge<menuobj.contentheight)
menuobj.style.top=ie5? iecompattest().scrollTop+eventY-menuobj.contentheight+"px" : window.pageYOffset+eventY-menuobj.contentheight+"px"
else
menuobj.style.top=ie5? iecompattest().scrollTop+event.clientY+"px" : window.pageYOffset+eventY+"px"
menuobj.style.visibility="visible"
return false
}

function contains_ns6(a, b) {
//Determines if 1 element in contained in another- by Brainjar.com
while (b.parentNode)
if ((b = b.parentNode) == a)
return true;
return false;
}

function hidemenu(){
if (window.menuobj)
menuobj.style.visibility="hidden"
}

function dynamichide(e){
if (ie5&&!menuobj.contains(e.toElement))
hidemenu()
else if (ns6&&e.currentTarget!= e.relatedTarget&& !contains_ns6(e.currentTarget, e.relatedTarget))
hidemenu()
}

function delayhidemenu(){
delayhide=setTimeout("hidemenu()",500)
}

function clearhidemenu(){
if (window.delayhide)
clearTimeout(delayhide)
}

if (ie5||ns6)
document.onclick=hidemenu
</script>
<?php 

//=== get image rating
if ($arr_gal["numratings"] != 0)
$rating =  ROUND($arr_gal["ratingsum"] / $arr_gal["numratings"], 1);
$rpic = ratingpic_image($rating); 

if ($rpic == '')
$rate_first = "<br>Rate Image:";
else
$rate_first = "<br>Rating:";

stdhead("Information om filmen '" .$arr_gal[name]. "'");
begin_table();

			$image = array_values(getimagesize("filmer/$arr_gal[location]"));
			list($width, $height) = $image;
			$image_size = "filmer/$arr_gal[location]";

if ($width >= "500")
$show_image = "<a class=altlink href=\"javascript:PopupVid('filmer/$arr_gal[location]')\">".
"<img width=500 src=filmer/".htmlspecialchars($arr_gal['location'])." title=\"klicka för att öppna $arr_gal[name] i full storlek\"></a>".
"<span class=small><br><br>[ this image has been re-sized to fit this window. click the image to view full size ]</span>";
else
$show_image = "<a class=altlink href=\"javascript:PopupVid('filmer/$arr_gal[location]')\">".
"<img src=filmer/".htmlspecialchars($arr_gal['location'])." title=\"$arr_gal[name] öppna i nytt fönster\"></a>";
			
echo "<p><b>Videoarkiv</b></p><p><b><a class=altlink href=visaprofil.php?id=$arr_gal[uid]>$arr_gal[username]'s</a> fotoalbum</b><br><br></p>$page_links".
"".($_GET["edited"] == '1' ? "<h2>Uppdatering slutförd</h2>" : "").($_GET["rated"] == '1' ? "<h1>Image rated</h1>" : "").($_GET["rate_changed"] == '1' ? "<h1>Image rating changed</h1>" : "")."".
"<form method=post action=?comment=$arr_gal[id] name=compose enctype='multipart/form-data'><table border=1 cellspacing=0 cellpadding=5 width=90%><tr><td class=colhead><b>$arr_gal[name]</b></td></tr>".
"<tr><td align=center valign=top class=clearalt6><b>tillagd den: </b>$arr_gal[added] av: <a class=altlink href=visaprofil.php?id=$arr_gal[user_id]>$arr_gal[username]</a>".
"$spacer".($arr_gal['user_id'] === $CURUSER['id'] || get_user_class() >= UC_MODERATOR ? "[ <a class=altlink href=?edit_image_info=$video_id>ändra</a>".
" ]  [ <a class=altlink href=?delete=1>radera</a> ]" : "")."<br><br>$show_image<br><a class= altlink href=\"#\" onMouseover=\"showmenu(event,linkset[0])\" onMouseout=\"delayhidemenu()\"><b>$rate_first</b> $rpic</a> $spacer ".($arr_gal['numratings'] > 0 ? "[ $rating / 10 ]" : "$rating")."<br>".
"<br><b>titel:</b> $arr_gal[name] | <b>filstorlek:</b> ".mksize(filesize($image_size))."<br>".
"<br><b>i videoarkiv:</b> ".(!$arr_gal['gallery_name'] ? " [ inget arkiv valt ]" : "$arr_gal[gallery_name]")." <br><br><b>direktlänk:</b> <a class=altlink href=$BASEURL/filmer/".htmlspecialchars($arr_gal['location'])."><b>$BASEURL/filmer/".htmlspecialchars($arr_gal['location'])."</b></a><br><br> ".
"<a class=altlink href=\"#\" onclick=\"openTable('comments'); return false;\"><b>visa kommentarer</b></a> |".
"<a class=altlink href=\"#\" onclick=\"openTable('comment'); return false;\"><b>skriv kommentar</b></a><br><br><table id=comment style=\"display: none;\" align=center><tr>".
"<td class=clear align=right valign=top width=25%><br><b>kommentar:</b></td><td class=clear align=left width=75%><br><textarea name=pic_comment cols=60 rows=3></textarea>".
"<br></td></tr><tr><td class=clear align=center></td><td class=clearalign=center>";
while ((list($code, $url) = each($smilies)) && $t<25) {
echo"<a href=\"javascript: SmileIT('".str_replace("'","\'",$code)."','compose','pic_comment')\"><img src=/pic/smilies/".$url."></a>";
$t++;
}
echo "<br><br></tr><tr><td class=clear align=center colspan=2><input type=submit value=\"posta kommentar\" class=button><br></td></tr></table></form><br>".
"<table id=comments style=\"display: none;\" align=center>";

$res_gal = mysql_query("SELECT c.text, c.id, c.added AS c_added, c.editedby, c.ori_text, u.username, u.avatar, u.id AS uid FROM comments AS c LEFT JOIN users AS u ON u.id = c.user WHERE c.video_gallery = $video_id ORDER BY c.id DESC $limit") or sqlerr(__FILE__, __LINE__);

while ($arr_gal = mysql_fetch_assoc($res_gal)) {

$avatar = "";
$avatar = ($CURUSER["avatars"] == "yes" ? htmlspecialchars($arr_gal["avatar"]) : "");
if (!$avatar)
$avatar = "/pic/default_avatar.gif";	

$added = $arr_gal["c_added"] . " GMT (" . (get_elapsed_time(sql_timestamp_to_unix_timestamp($arr_gal["c_added"]))) . " sedan)";

if ($arr_gal['editedby'] > 0){
$res2 = mysql_query("SELECT username FROM users WHERE id=$arr_gal[editedby]");
$arr2 = mysql_fetch_assoc($res2);
$edited = "<p><hr><font size=1 class=small>Senast ändrad av <a href=visaprofil.php?id=$arr_gal[editedby]><b>$arr2[username]</b></a> den $arr_gal[editedat] GMT</font></p>";
}
 
//=======change colors
$count2= (++$count2)%2;
$class = 'clearalt'.($count2==0?'6':'7');
echo"<tr><td class=colhead width=900 colspan=2><b>#$arr_gal[id]</b>$spacer av: <a class=altlink href=visaprofil.php?id=$arr_gal[uid]>$arr_gal[username]</a>".
" $spacer den: $added $spacer$spacer ".($arr_gal['uid'] === $CURUSER['id'] || get_user_class() >= UC_MODERATOR ? "[ <a class=altlink href=?delete_comment=$arr_gal[id]&video_id=$video_id>radera</a> ] $spacer [ <a class=altlink href=?edit_comment=$arr_gal[id]&video_id=$video_id&sure=1>ändra</a> ]" : "")."".
" ".(get_user_class() >= UC_MODERATOR && $arr_gal[editedby] > 0 ? "$spacer [ <a class=altlink href=\"#\" onclick=\"openTable('v_o'); return false;\">".
"visa original</a> ]" : "")." $spacer [ <a class=altlink href=sendmessage.php?receiver=$arr_gal[uid]>pm</a> ]".
"</td></tr><tr><td class=$class width=80><img width=80 src=$avatar></td><td class=$class valign=top>".format_comment($arr_gal["text"])."$edited".
"<table id=v_o style=\"display: none;\" width=100%><tr><td><hr><font color=red>original kommentar:<hr></font>".format_comment($arr_gal["ori_text"])."</td></tr></table></td></tr>";
}
echo '</td></tr></table></td></tr></table>'; 
on_select_gallery_change();
end_table();
stdfoot();	
die();
}

//=== other members gallery pages
if ($_GET['member_gallery']){
?>
<script language = "Javascript">
<!-- 

var form='all_my_gal'

function SetChecked(val,chkName) {
dml=document.forms[form];
len = dml.elements.length;
var i=0;
for( i=0 ; i<len ; i++) {
if (dml.elements[i].name==chkName) {
dml.elements[i].checked=val;
}
}
}

// -->
</script>
<?php 
$member_id = sqlesc(0 + $_GET['member_gallery']);

//=== get friends
$res_pals = mysql_query("SELECT id FROM friends WHERE $CURUSER[id] = friendid AND $member_id = userid") or sqlerr();
$arr_pals = mysql_num_rows($res_pals);

if ($arr_pals > 0)
$where .= "WHERE p_g.user_id=$member_id AND m_g.share_gallery !='private'";
else
$where .= "WHERE p_g.user_id=$member_id AND m_g.share_gallery !='private' AND m_g.share_gallery !='friends'";
//=== if a gallery is selected...
if ($_GET["gallery"]){
$where .= "AND p_g.in_gallery =".sqlesc(( 0 + $_GET["gallery"]));
$get_gallery = "&gallery=".( 0 + $_GET["gallery"]);
}

$page = 0 + $_GET['page'];

$res = mysql_query("SELECT p_g.*, m_g.share_gallery, m_g.gallery_name FROM video_gallery AS p_g LEFT JOIN my_videos AS m_g ON p_g.in_gallery = m_g.id $where") or sqlerr(__FILE__, __LINE__);
$arr = mysql_num_rows($res);
$gallery_name = mysql_fetch_assoc($res);

$pages = floor($arr / $perpage);
if ($pages * $perpage < $arr)
  ++$pages;

if ($page < 1)
  $page = 1;
else
  if ($page > $pages)
    $page = $pages;

for ($i = 1; $i <= $pages; ++$i)
  if ($i == $page)
    $pagemenu .= "<b>$i</b>\n";
  else
    $pagemenu .= "<a class=altlink href=?my_gallery=1$get_gallery&$q&page=$i><b>$i</b></a>\n";

if ($page == 1)
  $browsemenu .= "<b><img src=$imgdir/arrow_prev.gif =alt=\"&lt;&lt;\"> Prev</b>";
else
  $browsemenu .= "<a class=altlink href=?my_gallery=1$get_gallery&" . ($page - 1) . "><b><img src=$imgdir/arrow_prev.gif =alt=\"&lt;&lt;\"> Prev</b></a>";

$browsemenu .= "&nbsp;&nbsp;&nbsp;$pagemenu&nbsp;&nbsp;&nbsp;";

if ($page == $pages)
  $browsemenu .= "<b>Next <img src=$imgdir/arrow_next.gif =alt=\"&gt;&gt;\"></b>";
else
  $browsemenu .= "<a class=altlink href=?my_gallery=1$get_gallery&page=" . ($page + 1) . "><b>Next <img src=$imgdir/arrow_next.gif =alt=\"&gt;&gt;\"></b></a>";

$offset = ($page * $perpage) - $perpage;

$res_name = mysql_query("SELECT username FROM users WHERE id=$member_id LIMIT 1") or sqlerr(__FILE__, __LINE__);
$arr_name = mysql_fetch_assoc($res_name);
$name = $arr_name['username'];

//=== make the page
stdhead("Photo Gallery");
begin_table();

echo "<p><b><a class=altlink href=visaprofil.php?id=$member_id>$name's</a> Photo Gallery</b><br><br></p>$page_links".($_GET["deleted"] == '1' ? "<h1>Image deleted</h1>" : "").($_GET["rated"] == '1' ? "<h1>Image rated</h1>" : "")."".
"$browsemenu<br><br><table border=1 cellspacing=0 cellpadding=5 width=90%><tr><td class=colhead colspan=$num_rows>Gallery :: $gallery_name[gallery_name] $spacer<span class=small>[ $arr images]</span></td></tr>".
"<form action=?delete=1 method=post name=all_my_gal>";
$c2 = 0;
$res_gal = mysql_query("SELECT p_g.*, m_g.share_gallery FROM video_gallery AS p_g LEFT JOIN my_videos AS m_g ON p_g.in_gallery = m_g.id $where LIMIT $offset,$perpage") or sqlerr(__FILE__, __LINE__);
while ($arr_gal = mysql_fetch_assoc($res_gal)) {
         if ($c2 % $num_rows==0)
            echo'<tr>';
			
			$image = array_values(getimagesize("filmer/$arr_gal[location]"));
			list($width, $height) = $image;
			$image_size = "filmer/$arr_gal[location]";
			
			//=== get image rating
			if ($arr_gal["numratings"] != 0)
			$rating =  ROUND($arr_gal["ratingsum"] / $arr_gal["numratings"], 1);
			$rpic = ratingpic_image($rating);
			
            echo"<td align=center valign=bottom><a class=altlink href=?info=$arr_gal[id] title=\"Click for image details page\">".
			"<img src=filmer/thumbs/".htmlspecialchars($arr_gal['location'])."><br><br>".($arr_gal["numratings"] != 0 ? "rating: $rpic<br>" : "")."<b>$arr_gal[name]</a></b><br>".
			"$width x $height [ ".mksize(filesize($image_size))." ]".
			"<span class=small>".($CURUSER['id'] === $arr_gal['user_id'] || get_user_class() >= UC_MODERATOR ? "<br>[ <a class=altlink href=?edit_image_info=$arr_gal[id]>edit</a> ]  [ delete <input type=checkbox name=\"delete_image[]\" value=$arr_gal[id] /> ]" : "")."</span>".
			"<br><span class=small>added: $arr_gal[added]</span><br><br></td>";
            $c2++;
        if ($c2 % $num_rows==0)
            echo'</tr>';
      }

echo "<tr><td align=center class=clearalt6 colspan=$num_rows><a class=altlink href=\"javascript:SetChecked(1,'delete_image[]')\">markera alla</a> - ".
"<a class=altlink href=\"javascript:SetChecked(0,'delete_image[]')\">avmarkera alla</a>$spacer".
"<input class=button type=submit name=delete value=\"radera valda bilder\"></form></td></tr><table><br>$browsemenu"; 

on_select_gallery_change();
end_table();
stdfoot();	
die();
}
	
//=== members gallery pages
if ($_GET['my_gallery']){
?>
<script language = "Javascript">
<!-- 

var form='all_my_gal'

function SetChecked(val,chkName) {
dml=document.forms[form];
len = dml.elements.length;
var i=0;
for( i=0 ; i<len ; i++) {
if (dml.elements[i].name==chkName) {
dml.elements[i].checked=val;
}
}
}

// -->
</script>
<?php 
$where .= "WHERE p_g.user_id=".sqlesc($CURUSER['id']);
//=== if a gallery is selected...
if ($_GET["gallery"]){
$where .= " AND p_g.in_gallery =".sqlesc(( 0 + $_GET["gallery"]));
$get_gallery = "&gallery=".( 0 + $_GET["gallery"]);
}

$page = 0 + $_GET['page'];

$res = mysql_query("SELECT p_g.*, m_g.share_gallery, m_g.gallery_name FROM video_gallery AS p_g LEFT JOIN my_videos AS m_g ON p_g.in_gallery = m_g.id $where") or sqlerr(__FILE__, __LINE__);
$arr = mysql_num_rows($res);
$name = mysql_fetch_assoc($res);

$pages = floor($arr / $perpage);
if ($pages * $perpage < $arr)
  ++$pages;

if ($page < 1)
  $page = 1;
else
  if ($page > $pages)
    $page = $pages;

for ($i = 1; $i <= $pages; ++$i)
  if ($i == $page)
    $pagemenu .= "<b>$i</b>\n";
  else
    $pagemenu .= "<a class=altlink href=?my_gallery=1$get_gallery&$q&page=$i><b>$i</b></a>\n";

if ($page == 1)
  $browsemenu .= "<b><< Föregående</b>";
else
  $browsemenu .= "<a class=altlink href=?my_gallery=1$get_gallery&" . ($page - 1) . "><b><< Föregående</b></a>";

$browsemenu .= "&nbsp;&nbsp;&nbsp;$pagemenu&nbsp;&nbsp;&nbsp;";

if ($page == $pages)
  $browsemenu .= "<b>Nästa >></b>";
else
  $browsemenu .= "<a class=altlink href=?my_gallery=1$get_gallery&page=" . ($page + 1) . "><b>Nästa >></b></a>";

$offset = ($page * $perpage) - $perpage;

//=== make the page
stdhead("Fotoalbum");
begin_table();

echo "<p><b><a class=altlink href=visaprofil.php?id=$CURUSER[id]>$CURUSER[username]'s</a> videoarkiv</b><br><br></p>$page_links".($_GET["deleted"] == '1' ? "<h1>Film raderad</h1>" : "").($_GET["rated"] == '1' ? "<h1>Bild betygsatt</h1>" : "")."".
"$browsemenu<br><br><table border=1 cellspacing=0 cellpadding=5 width=90%><tr><td class=colhead colspan=$num_rows>".(!$_GET["gallery"] ? "Mina Videoarkiv " : "Mitt Videoarkiv :: $name[gallery_name]")." $spacer<span class=small>[ $arr filmer]</span></td></tr>".
"<form action=?delete=1 method=post name=all_my_gal>";
$c2 = 0;
$res_gal = mysql_query("SELECT p_g.*, m_g.share_gallery FROM video_gallery AS p_g LEFT JOIN my_videos AS m_g ON p_g.in_gallery = m_g.id $where LIMIT $offset,$perpage") or sqlerr(__FILE__, __LINE__);
while ($arr_gal = mysql_fetch_assoc($res_gal)) {

         if ($c2 % $num_rows==0)
            echo'<tr>';
			
			//$image = array_values(getimagesize("filmer/$arr_gal[location]"));
			//list($width, $height) = $image;
			$image_size = "filmer/$arr_gal[location]";
			
			//=== get image rating
			if ($arr_gal["numratings"] != 0)
			$rating =  ROUND($arr_gal["ratingsum"] / $arr_gal["numratings"], 1);
			$rpic = ratingpic_image($rating);
			
            echo"<td align=center valign=bottom><a class=altlink href=?info=$arr_gal[id] title=\"Visa bildinformation\">".
			"<img src=filmer/thumbs/".htmlspecialchars($arr_gal['location'])."><br><br>".($arr_gal["numratings"] != 0 ? "rating: $rpic<br>" : "")."<b>$arr_gal[name]</a></b><br>".
			"$width x $height [ ".mksize(filesize($image_size))." ]".
			"<span class=small>".($CURUSER['id'] === $arr_gal['user_id'] || get_user_class() >= UC_MODERATOR ? "<br>[ <a class=altlink href=?edit_image_info=$arr_gal[id]>ändra</a> ]  [ radera <input type=checkbox name=\"delete_image[]\" value=$arr_gal[id] /> ]" : "")."</span>".
			"<br><span class=small>tillagd: $arr_gal[added]</span><br><br></td>";
            $c2++;
        if ($c2 % $num_rows==0)
            echo'</tr>';
      }

echo "<tr><td align=center class=clearalt6 colspan=$num_rows><a class=altlink href=\"javascript:SetChecked(1,'delete_image[]')\">markera alla</a> - ".
"<a class=altlink href=\"javascript:SetChecked(0,'delete_image[]')\">avmarkera alla</a>$spacer".
"<input class=button type=submit name=delete value=\"radera valda filmer\"></form></td></tr><table><br>$browsemenu<br>"; 

on_select_gallery_change();
end_table();
stdfoot();	
die();
}

//=== enter the images into the DB with user ID names and comments
if ($_GET['name_images'])	{

$added = sqlesc(get_date_time());
$image= $_POST['image'];

foreach ($image as $key => $add_it) {

$location = $_POST['location'];
$pic_comment = $_POST['pic_comment'];
$add_to_gallery = $_POST['add_to_gallery'];

$name = mysql_real_escape_string(htmlspecialchars($add_it));
$location = sqlesc(str_replace(" ", "%20", $location[$key]));
$pic_comment = sqlesc($pic_comment[$key]);
$add_to_gallery = sqlesc(0 + $add_to_gallery[$key]);

mysql_query("INSERT INTO video_gallery (user_id, name, location, in_gallery, added) VALUES(".sqlesc($CURUSER["id"]).", '$name', $location, $add_to_gallery, $added)") or sqlerr(__FILE__, __LINE__);
$video_gallery = mysql_insert_id();
mysql_query("INSERT INTO comments (user, text, video_gallery, added) VALUES(".sqlesc($CURUSER["id"]).", $pic_comment, $video_gallery, $added)") or sqlerr(__FILE__, __LINE__);
}
stderr("Lyckat!", "Alla filmer blev placerade.<p> ".
"<a class=altlink href=video_gallery.php?my_gallery=1>visa mina videoarkiv</a> | <a class=altlink href=video_gallery.php?public_gallerys=1>visa alla videoarkiv</a>  | ".  
"<a class=altlink href=video_gallery.php?manage_gallerys=1>hantera videoarkiv</a> | <a class=altlink href=video_gallery.php?upload=1>ladda upp filmer</a> </p>");
}

//===  if post
if ($_SERVER["REQUEST_METHOD"] === "POST"){

if ($count >= ($max[$CURUSER['class']]['number_total']))
stderr("Error", "You have reached the max number of images to upload. <br>Your total number of allowed images are  ".
"<b>".($max[$CURUSER['class']]['number_total'])."</b> and you have uploaded <b>$count</b>$page_links");

$image_count = 0; 
$size_error_count = 0;
$file_exists_error_count = 0;
while(list($key,$value) = each($_FILES[images][name]))
{
if(!empty($value)){
$filename = $value; 
$add = "filmer/$filename"; 
$file_type = $_FILES[images][type][$key];  

if (!($file_type =="video/x-ms-wmv" OR $file_type=="video/quicktime" OR $file_type=="video/avi"))
stderr("Error", "Filmen måste vara i formaten wmv, mov eller avi.");

//=== get image size 
$file_size = $_FILES[images][size][$key];
//=== error if file too big
if ($file_size > $max_file_size){
$size_error_count = + 1;
$size_error[] = array ('image'  => $filename, 'size' => $file_size);
}
elseif (file_exists($add)){
$file_exists_error_count = + 1;
$file_exists_error[] = array ('image'  => $filename);
}
else {
copy($_FILES[images][tmp_name][$key], $add);  
chmod("$add",0777); 

if($filename)
$image_count = (++$image_count);

//=== make thumbnails
$thumb_dir="filmer/thumbs/$filename"; 
//=== gif
if (@$file_type=="video/x-ms-wmv"){

$im=ImageCreateFromGIF($add);
$width=ImageSx($im); 
$height=ImageSy($im); 
//=== lets do some math :P
if ($height > 99 || $width > 99){
if ($height >= $width){
$thumb_height=100; 
$thumb_width = ($thumb_height / $height * $width);
}
else {
$thumb_width=100;
$thumb_height = ($thumb_width / $width * $height);
}
}
else {
$thumb_width=$width;
$thumb_height =$height;
}
$newimage=imagecreatetruecolor($thumb_width,$thumb_height);
imageCopyResized($newimage,$im,0,0,0,0,$thumb_width,$thumb_height,$width,$height);

if (function_exists("imagegif")) 
ImageGIF($newimage,$thumb_dir);
elseif (function_exists("imagejpeg"))
ImageJPEG($newimage,$thumb_dir);

chmod("$thumb_dir",0777);
}
//=== jpg
if($file_type=="video/quicktime"){
$im=ImageCreateFromJPEG($add);
$width=ImageSx($im); 
$height=ImageSy($im); 
//=== lets do some math :P
if ($height > 99 || $width > 99){
if ($height >= $width){
$thumb_height=100; 
$thumb_width = ($thumb_height / $height * $width);
}
else {
$thumb_width=100;
$thumb_height = ($thumb_width / $width * $height);
}
}
else {
$thumb_width=$width;
$thumb_height =$height;
}
$newimage=imagecreatetruecolor($thumb_width,$thumb_height);
imageCopyResized($newimage,$im,0,0,0,0,$thumb_width,$thumb_height,$width,$height);
ImageJpeg($newimage,$thumb_dir);
chmod("$thumb_dir",0777);
}
//=== png
if (@$file_type=="video/avi"){
$im=ImageCreateFrompng($add);
$width=ImageSx($im); 
$height=ImageSy($im); 
//=== lets do some math :P
if ($height > 99 || $width > 99){
if ($height >= $width){
$thumb_height=100; 
$thumb_width = ($thumb_height / $height * $width);
}
else {
$thumb_width=100;
$thumb_height = ($thumb_width / $width * $height);
}
}
else {
$thumb_width=$width;
$thumb_height =$height;
}
$newimage=imagecreatetruecolor($thumb_width,$thumb_height);
imageCopyResized($newimage,$im,0,0,0,0,$thumb_width,$thumb_height,$width,$height);
ImagePNG($newimage,$thumb_dir);
chmod("$thumb_dir",0777);
}   
 
}
}//=== end if image exists

//====  let's put all the info into an array, thanks Laffin! :P
if (!empty($value))
$image_info[] = array ( 'location' => $thumb_dir, 'image'  => $filename, 'size' => $file_size, 'width' => $width, 'height' => $height);
}//=== end while

$res_select = mysql_query("SELECT * FROM `my_videos` WHERE `user_id` =$CURUSER[id]") or sqlerr(__FILE__, __LINE__);
$list_select = "";
if (!$res_select)
$list_select .= '<option value=0>finns inga videoarkiv</option>';
else
while ($arr_select = mysql_fetch_assoc($res_select))
$list_select .= "<option value='$arr_select[id]'>".$arr_select["gallery_name"]."</option>";

stdhead("Names and comments");
begin_table(); 
echo "<form method=post action=?name_images=1 enctype='multipart/form-data'><p><b>$SITENAME Photo Gallery</b></p>$page_links<br>".
"<table border=1 cellspacing=0 cellpadding=5 width=90%><tr><td class=colhead colspan=3>Photo Gallery  upload</td></tr>";

if ($image_count > 0){ 
echo"<tr><td class=clearalt6 colspan=2 align=center><br>If you wish to give your images titles, or add comments to them, ".
"do it now. If not just click the add to gallery button below.<br></td></tr>";
$button = "<tr><td class=clearalt7 align=center colspan=2><input type=submit value=\"lägg till i arkiv\" class=button><br><br></td></tr>";
}

$count_image = count($image_info);
for ($i=0;$i<$count_image;$i++) {
$image_size = "<br>".mksize($image_info[$i]['size'])."<br> ".$image_info[$i]['width']." x ".$image_info[$i]['height'];
//=== set stuff for loop
if($image_info[$i]['width'] > 0)
echo"<tr><td class=clearalt7 align=center valign=middle width=120><img src=\"".$image_info[$i]['location']."\">$image_size</td><td class=clearalt7 align=left valign=middle>".
"<b>Lägg till i arkiv:</b> <select name=\"add_to_gallery[]\">$list_select</select>".
"<br><br><b>Filmtitel:</b><br><input type=text name=\"image[]\" value=\"".$image_info[$i]['image']."\" size=60> [ default is the image name ]<br><br><b>Kommentar:</b><br>".
"<textarea name=\"pic_comment[]\" cols=80 rows=5></textarea> [ BB-kod är ok ]<br><input type=hidden name=\"location[]\" value=\"".$image_info[$i]['image']."\"></td></tr>";
}

//=== file_exists_error
if ($file_exists_error_count > 0){
$file_exists_error_count = count($file_exists_error);
echo"<tr><td class=clearalt6 align=center valign=middle width=120><h3>Filnamn<br> <img src=pic/warned8.gif> fel! <img src=pic/warned8.gif></h3></td><td class=clearalt6 align=left valign=middle><br>".
"Följande fil".($file_exists_error_count > 1 ? "er blev" : " blev")." <b>inte</b> uppladdade!<br>";

for ($i=0;$i<$file_exists_error_count;$i++) {
echo "<br><b>".$file_exists_error[$i]['image']."</b>";
}
echo"".($file_exists_error_count > 1 ? "<br><br> Files with the same names exist on the server. Re-name the files and try again." : "<br><br> En fil med samma namn finns redan på servern. Bytt namn på filen och försök igen.")."<br><br><br></td></tr>";
}//=== end file exists error

//=== file too big error //== not totally tested...
if ($size_error_count > 0){
$size_error_count = count($size_error);
echo"<tr><td class=clearalt6 align=center valign=middle width=120><h1>File size<br> <img src=pic/warned8.gif> error! <img src=pic/warned8.gif></h1></td><td class=clearalt6 align=left valign=middle><br>".
"The following file".($size_error_count > 1 ? "s were" : " was")." <b>not</b> uploaded!<br>";

for ($i=0;$i<$size_error_count;$i++) {
echo "<br><b>".$size_error[$i]['image']."</b> size was <b>".mksize($size_error[$i]['size'])."</b>";
}
echo"<br><br>Maximal filstorlek är:<b> ".mksize($max_file_size).".</b><br><br><br></td></tr>";
}//=== end file too big error

echo $button;

echo'</table></form>';
on_select_gallery_change();
end_table();
stdfoot();
die();
}//=== end if $_POST

if ($_GET['upload']){
//=== the upload page 
stdhead("Videouppladdning");
begin_table();

echo "<form method=post action=".$_SERVER['PHP_SELF']." enctype='multipart/form-data'><p><b>$SITENAME Videoarkiv</b>$page_links<br>".
"<table border=1 cellspacing=0 cellpadding=5 width=90%><tr><td class=colhead colspan=2>Videouppladdning</td></tr><tr><td class=clearalt6 colspan=2 align=center>".
"<br>".(($max[$CURUSER['class']]['number_total']) == 0 ? "<p>Tyvärr! Du har inte tillåtelse att använda denna funktion.</p><br><br></td></tr>" : "<p>Maximal filstorlek är: <b>".mksize($max_file_size).".</b> [ per film ]<br>".
"<br>Tillåtna filformat: <b>.wmv .mov .avi</b><br><br>Som en <b>".get_user_class_name($CURUSER['class'])."</b> kan du ladda upp <b>".($max[$CURUSER['class']]['number_of_pics'])."</b> film(er) åt gången. ".
"<br>Du kan också ha upp till <b>".($max[$CURUSER['class']]['number_total'])."</b> filmer i videoarkivet.<br>För närvarande har du <b>$count</b> filmer i arkivet.<br><br>Before uploading anything please read the <a class=altlink href=/rules.php><b>Rules</b>".
"</a> and <a class=altlink href=/faq.php><b>FAQ</b></a></p><br></td></tr>")."";
for($i=1; $i<=($max[$CURUSER['class']]['number_of_pics']); $i++){
echo "<tr><td class=clearalt6 align=right><b>Film $i:</b></td><td class=clearalt6 align=left>
<input type=file name='images[]'  size=40></td></tr>";
}

echo "<tr><td colspan=2 align=center class=clearalt6><input type=submit value='Ladda upp' class=button></td></tr>".
"</form></table><p><table class=main width=410 border=0 cellspacing=0 cellpadding=0><tr><td class=embedded>".
"<font class=small><b>Disclaimer:</b> Ladda inte upp olagliga filmer eller filmer som du inte har tillåtelse till. Var god läs ".
"<a class=altlink href=/faq.php><b>FAQ</b></a> för mer information.</font></td></tr></table>";
on_select_gallery_change();
end_table();
stdfoot();
}

//=== list public galleries
$search = trim($HTTP_GET_VARS['search']);

if ($search = '*')
{
  $query = "u.status='confirmed' AND p_g.user_id > '0'";
  
	if ($search)
		  $q = "search=" . htmlspecialchars($search);
}
elseif ($_GET["letter"])
{
	$letter = trim($_GET["letter"]);
  if (strlen($letter) > 1)
    die;

  if ($letter == "" || strpos("abcdefghijklmnopqrstuvwxyz", $letter) === false)
    $letter = "a";
  $query = "username LIKE '$letter%' AND u.status='confirmed' AND p_g.user_id > '0'";
  $q = "letter=$letter";
}
else
{
  $query = "u.username LIKE " . sqlesc("%$search%") . " AND u.status='confirmed' AND p_g.user_id > '0'";
  
	if ($search)
		  $q = "search=" . htmlspecialchars($search);
}

stdhead("Medlemmars offentliga videoarkiv");

echo("<h2>Medlemmars offentliga videoarkiv</h2>$page_links<form method=get action=?>\n".
"<b>Sök:</b> <input type=text size=30 name=search>\n".
"<input class=button type=submit value='sök'></form><p>\n");

for ($i = 97; $i < 123; ++$i){
	$l = chr($i);
	$L = chr($i - 32);
	if ($l == $letter)
    echo("<b>$L</b>\n");
	else
    echo("<a href=?letter=$l><b>$L</b></a>\n");
}

echo("</p>\n");
  
$page = 0 + $_GET['page'];

$res = mysql_query("SELECT DISTINCT u.id AS uid FROM users AS u LEFT JOIN video_gallery AS p_g ON u.id = p_g.user_id  WHERE $query");
$arr = mysql_num_rows($res);
$pages = floor($arr / $perpage);
if ($pages * $perpage < $arr)
  ++$pages;

if ($page < 1)
  $page = 1;
else
  if ($page > $pages)
    $page = $pages;

for ($i = 1; $i <= $pages; ++$i)
  if ($i == $page)
    $pagemenu .= "<b>$i</b>\n";
  else
    $pagemenu .= "<a class=altlink href=?$q&page=$i><b>$i</b></a>\n";

if ($page == 1)
  $browsemenu .= "<b><< Föregående</b>";
else
  $browsemenu .= "<a class=altlink href=?$q&page=" . ($page - 1) . "><b><< Föregående</b></a>";

$browsemenu .= "&nbsp;&nbsp;&nbsp;$pagemenu&nbsp;&nbsp;&nbsp;";

if ($page == $pages)
  $browsemenu .= "<b>Nästa >></b>";
else
  $browsemenu .= "<a class=altlink href=?$q&page=" . ($page + 1) . "><b>Nästa >></b></a>";

$offset = ($page * $perpage) - $perpage;

$res = mysql_query("SELECT DISTINCT u.id AS uid, u.username, u.added, u.last_access, u.class, u.lan FROM users AS u LEFT JOIN video_gallery AS p_g ON u.id = p_g.user_id WHERE $query ORDER BY username LIMIT $offset,$perpage") or sqlerr(__FILE__, __LINE__);
$num = mysql_num_rows($res);

if($num > 0){
echo("<p>$browsemenu</p>");
echo("<table border=1 cellspacing=0 cellpadding=5>\n".
"<tr><td class=colhead align=left>Användarnamn</td><td class=colhead align=left>Videoarkiv</td><td class=colhead>Registrerad</td><td class=colhead>Senast aktiv</td>".
"<td class=colhead align=left>Grupp</td><td class=colhead>Län</td></tr>\n");
for ($i = 0; $i < $num; ++$i){	
$count= (++$count)%2;
$class = 'clearalt'.($count==0?'6':'7');
 
  $arr = mysql_fetch_assoc($res);
  
  //=== get friends
$res_pals = mysql_query("SELECT id FROM friends WHERE $CURUSER[id] = friendid AND $arr[uid] = userid") or sqlerr(__FILE__, __LINE__);
$arr_pals = mysql_num_rows($res_pals);

if ($arr_pals > 0)
$res_gal = mysql_query("SELECT DISTINCT p_g.in_gallery, m_g.gallery_name, m_g.share_gallery FROM video_gallery AS p_g LEFT JOIN my_videos AS m_g ON p_g.in_gallery = m_g.id WHERE m_g.share_gallery != 'private' AND m_g.user_id = $arr[uid] ORDER BY m_g.gallery_name") or sqlerr(__FILE__, __LINE__);
else			
$res_gal = mysql_query("SELECT DISTINCT p_g.in_gallery, m_g.gallery_name  FROM video_gallery AS p_g LEFT JOIN my_videos AS m_g ON p_g.in_gallery = m_g.id WHERE m_g.share_gallery = 'public' AND m_g.user_id = $arr[uid] ORDER BY m_g.gallery_name") or sqlerr(__FILE__, __LINE__);
			while ($arr_gal = mysql_fetch_assoc($res_gal)){
			$gal_name .= "• <span class=small><a class=altlink href=?member_gallery=$arr[uid]&gallery=$arr_gal[in_gallery]>$arr_gal[gallery_name]</a></span>".($arr_gal["share_gallery"] == 'friends' ? "<img src=/pic/buddylist.gif title=\"Friends only gallery\">" : '')."<br>";
			}
  
  if ($arr['lan'] > 0){
    $cres = mysql_query("SELECT lan,pic FROM lan WHERE id=$arr[lan]");
    if (mysql_num_rows($cres) == 1){
      $carr = mysql_fetch_assoc($cres);
      $lan = "<td style='padding: 0px' align=center class=$class><img src=pic/lan/$carr[pic] height=\"30\" alt=\"$carr[lan]\"></td>";
    }
  }
  else
    $country = "<td align=center class=$class>---</td>";
  if ($arr['added'] == '0000-00-00 00:00:00')
    $arr['added'] = '-';
  if ($arr['last_access'] == '0000-00-00 00:00:00')
    $arr['last_access'] = '-';
  echo("<tr><td align=left class=$class><a class=altlink href=visaprofil.php?id=$arr[uid]><b>$arr[username]</b></a>" .($arr["donated"] > 0 ? "<img src=$imgdir/star.gif border=0 alt='Donor'>" : "")."</td>" .
  "<td class=$class>$gal_name</td><td class=$class>$arr[added]</td><td class=$class>$arr[last_access]</td>".
    "<td align=left class=$class>" . get_user_class_name($arr["class"]) . "</td>$lan</tr>\n");
$gal_name = '';
}
echo("</table>\n");

echo("<p>$browsemenu</p>");
}
else
echo '<p>Inga videoarkiv hittades. Välj en bokstav eller skriv in ett användarnamn.</p>';

stdfoot();
die;
?>