HEX

File: /var/www/html/reporterSQL.php
<?php 
include('Connections/videoondemand.php');
Class DBSQL
{
     
   function DBSQL($DBName)
   {     
      global $DBHost,$DBUser,$DBPassword;
      $videoondemand=mysql_pconnect($DBHost,$DBUser,$DBPassword);
	  mysql_select_db($DBName,$videoondemand); 
	  $this->CONN = $videoondemand;
      return true;
   }

     function getuser($videouser)
   {      
      $sql = "select * from users where catalogid=$videouser";
      $result = $this->select($sql);      
      return $result;
   }
   function select($sql="")
   {
      if (empty($sql)) return false;
      if (empty($this->CONN)) return false;
      $videoondemand = $this->CONN;
      $results = mysqli_query($sql,$videoondemand);
      if ((!$results) or (empty($results)))
      {       
         return false;
      }
      $count = 0;
      $data = array();
      while ($row = mysql_fetch_array($results)) {
         $data[$count] = $row;
         $count++;
      }
      mysql_free_result($results);
      return $data;
   }

   
   function insert($sql="")
   {
      if (empty($sql)) return false;
      if (empty($this->CONN)) return false;

      $videoondemand = $this->CONN;
      $results = mysqli_query($sql,$videoondemand);
      if (!$results) return false;
      $results = mysql_insert_id();
      return $results;
   }

   
   function update($sql="")
   {
      if(empty($sql)) return false;
      if(empty($this->CONN)) return false;

      $videoondemand = $this->CONN;
      $result = mysqli_query($sql,$videoondemand);
      return $result;
   }

   
   function delete($sql="")
   {
      if(empty($sql)) return false;
      if(empty($this->CONN)) return false;

      $videoondemand = $this->CONN;
      $result = mysqli_query($sql,$videoondemand);
      return $result;
   }
 
   

}

 
Class NewsSQL extends DBSQL
{
   // the constructor
   function NewsSQL($dbname = "")
   {
      $this->DBSQL($dbname);
   }
    function getusercategory($videouser)
   {      
      $sql = "select * from users where catalogid=$videouser";
      $result = $this->select($sql);      
      return $result;
   }
function slug($str){
	$str = strtolower(trim($str));
	$str = preg_replace('/[^a-z0-9-]/', '-', $str);
	$str = preg_replace('/-+/', "-", $str);
	return $str;
}
     function addvideofile($videouser,$yanani,$db_file,$new_image,$titleme,$url,$type,$upload,$latitude,$longitude,$vcat)
   {
    
   $sqlc = "select * from users where catalogid=$videouser";
      $resultc = $this->select($sqlc); 
	   $vcat = $resultc[0]["category"];
	   $username = $resultc[0]["user_name"];
	    $catalogname = $resultc[0]["catalogname"];
	  $user_email = $resultc[0]["user_email"];
	  $episodeid = $resultc[0]["episodeid"];
	  $county = $resultc[0]["county"];
	  
	   $sqlo = "select * from users where catalogid=$yanani";
      $result0 = $this->select($sqlo); 
	   $vcato = $resulto[0]["category"];
	   $usernameo = $resulto[0]["user_name"];
	    $catalognameo = $resulto[0]["catalogname"];
	  $user_emailo = $resulto[0]["user_email"];
	  
	  
	  
 $nameReporta = $usernameo;
 $emailReporta = $usernameo;
 $emailAdmin = "sokottah2@gmail.com";
 $message = "Hi $username \n
 The Reporter $nameReporta has submitted content for your approval \n
 
 Please kindly have a look
 
 Thank You \n

Eziki Team  \n
$host_upper ";

 mail( $emailAdmin, "A reporter has submitted a story!", $message,
    "From: \"Eziki Reporta\" <reporta@$host>\r\n" .
     "X-Mailer: PHP/" . phpversion());
	  
	  
	  
	  
	  
	 $message = "Hi $username \n 
 
 We have successfully received your content \n
 
 Kindly wait for it to be approved \n
 

 
 Thank You \n

Eziki Team  \n
$host_upper ";

 mail($emailAdmin, "We have received your story!", $message,
    "From: \"Eziki Reporta\" <reporta@$host>\r\n" .
     "X-Mailer: PHP/" . phpversion()); 
	  
	  
	  
	  
	  
	  
	  
    $adddate = date("y-m-d");
     $viewnum = "1";
	 $ratenum = "1";
//$titleme = strtolower($titleme);
$titleme = mysqli_real_escape_string($link,$titleme);
 
    $part = substr($titleme,-500); 
    $part = explode('.',$part);
 
    $part = $part[0];
	$part = preg_replace('/[\!@#$%^&*()+=\',.;:]/', '', $part);
	$slugx = "$part";
 $keywords = preg_replace('/[\!@#$%^&*()+=\'-,.;:]/', '', $part);
 $keywords = trim($keywords);
  $keywords = str_replace(" ", ",", $keywords);
    $keyworda = str_replace("-", "", $keywords);
   $keyworda = str_replace(",,", ",", $keyworda);
   $keyworda = str_replace(",,,", ",", $keyworda);
    
    $sql = "insert into reporta (catalogid,title,yanani,video,isdisplay,picture,viewnum,ratenum,adddate,keywords,slug,type,original,episodeid,latitude,longitude,vcat) values ('$videouser','$part','$yanani','$db_file','3','$new_image','$viewnum','$ratenum','$adddate','$keywordsXS','$url','$type','$upload','$episodeid','$latitude','$longitude','$vcat')";      
     $results = $this->insert($sql);
	 
	 
	 
	 
	 
	 
	 
	 
	       return $results;
   }
      

   
}
  $rs_settings = mysqli_query($link,"select * from users where catalogid='$_SESSION[euserid]'");
?>