+++ /dev/null
-<?php
-/*
- * The HTML contained in this file is valid XHTML 1.0 Strict
- */
-
-echo "<div id=\"comment_block\">\n";
-
-?>
- <?php echo"<div id=\"showhideform\"><strong> " . __('Post a Comment') . "</strong>:"; ?>
- <span class="comment_toggle">
- [
- <?php echo"<a href=\"javascript:toggle_comment()\"><span id=\"showlink\">" . __('Show Form') . "</span><span id=\"hidelink\" style=\"display:none;\">" . __('Hide Form') . "</span></a>"; ?>
- ]
- </span>
- </div>
-
- <div id="comment_form" style="display: none;">
-<?php
-$page->form_start($ThisUrl, "post", NULL);
-$page->input("text", "commentname", $username, __('Name:'), NULL, _('Enter your name.') );
-$page->input("checkbox", "savecommentname", "1", __('Remember Name:'), "yes",
- __('Should the browser remember your name?'));
-$magic_number = random_digits(4);
-//temporary. should generate an image instead
-echo "<div class=\"row\"><div class=\"control\">$magic_number</div></div>\n";
-$page->input("hidden", "commentkolacek", md5($magic_number), NULL, NULL, NULL);
-$page->input("text", "commentspamcheck", "", __('Retype PIN Above:'), NULL, __('Enter the number shown above.'));
-$page->input("textarea", "commentdata", "", __('Comment') . " :" , NULL, __('Allowed HTML tags: a,b,i,ul,li,blockquote,br.') );
-$page->input("submit", "", __('Send') , NULL, NULL, NULL);
-$page->form_end();
-?>
- </div>
-</div>
//and add number, album, caption and views.
$sql = "insert into photo (name, caption, counter, number, album)";
$sql .= " values (";
- $sql .= "\"" . $this->name . "\", ";
- $sql .= "\"" . $this->caption . "\", ";
+ $sql .= "\"" . sqlite_escape_string($this->name) . "\", ";
+ $sql .= "\"" . sqlite_escape_string(strtr($this->caption,"\"","'")) . "\", ";
$sql .= $this->counter . ", ";
$sql .= $this->number . ", ";
$sql .= "\"" . $this->album . "\"";
//fallback to filesystem
if (is_writable("$root/$gallery_dir/$galerie/comments")) { // needs perms
$log = "$root/$gallery_dir/$galerie/comments/log_". $this->number .".txt";
- if (!is_writable($log)) {
+ if (file_exists($log) && !is_writable($log)) {
print "\n\n\n<!-- cannot open $log. Check permissions.";
print "\nAborting counter write -->\n";
return 0;