wwwroot/nodes.php

   1 <?php
   2 // output buffering forcing (mx)
   3 if (!empty($_POST['FORCE_OB']) && $_POST['FORCE_OB'] == 'true') ob_start();
   4
   5 //header("Location: http://web.archive.org/web/20020925021139/http://kyberia.sk");
   6 //echo "je to uz uplne v pici. vsetky data su stratene, prajem pekny den :)";
   7 //exit;
   8
   9 //starting timer for benchmarking purposes
  10 $timer_start=Time()+SubStr(MicroTime(),0,8);
  11
  12 //setting PHPSESSID cookie and starting user session
  13 session_start();
  14
  15 error_reporting(1);
  16 //$_SESSION['debugging']=1;
  17 //exit;
  18
  19
  20 if ($_SESSION['debugging']) {
  21
  22     error_reporting(E_ALL);
  23     echo "GET VARIABLES::<br/>";
  24     print_r($_GET);
  25     echo "POST VARIABLES::<br/>";
  26     print_r($_POST);
  27     echo "<b>SESSION VARIABLES::</b><br/>";
  28     print_r($_SESSION);
  29 }
  30
  31
  32 //Path info (Experimental - thish should replace most of mod_rewrites in future...)
  33 @$PATH_INFO=trim($_SERVER[PATH_INFO]);
  34 if($PATH_INFO != '') {
  35         $PATH_CHUNKS = preg_split("/\//", $PATH_INFO);
  36         switch($PATH_CHUNKS[1]) {
  37                 case 'k':
  38                         if(isset($PATH_CHUNKS[2]) && $PATH_CHUNKS[2] != '') $_GET['node_kid'] = $PATH_CHUNKS[2];
  39                         if(isset($PATH_CHUNKS[3]) && $PATH_CHUNKS[3] != '') $_GET['template_kid'] = $PATH_CHUNKS[3];
  40                         break;
  41                 case 'id':
  42                         if(isset($PATH_CHUNKS[2]) && $PATH_CHUNKS[2] != '') $_GET['node_id'] = $PATH_CHUNKS[2];
  43                         if(isset($PATH_CHUNKS[3]) && $PATH_CHUNKS[3] != '') $_GET['template_id'] = $PATH_CHUNKS[3];
  44                         break;
  45         }
  46 }
  47
  48 //Base36 http://en.wikipedia.org/wiki/Base_36 (Initial support only :-)
  49 if(isset($_GET['node_kid'])) $_GET['node_id'] = base_convert($_GET['node_kid'], 36, 10);
  50 if(isset($_GET['template_kid'])) $_GET['template_id'] = base_convert($_GET['template_kid'], 36, 10);
  51
  52 //requiring main config file with path/database etc. constants
  53 require('config/config.inc');
  54 require(INCLUDE_DIR.'senate.inc');
  55
  56 if (isset($_SERVER['HTTP_REFERER'])) {
  57         preg_match("/id\/([0-9]*)\//",$_SERVER['HTTP_REFERER'],$ref_match);
  58         $referer_id=$ref_match[1];
  59 }
  60
  61 //connecting to database and creating universal $db object
  62 require(INCLUDE_DIR.'log.inc');
  63 require(INCLUDE_DIR.'ubik.inc');
  64 require(INCLUDE_DIR.'nodes.inc');
  65 require(INCLUDE_DIR.'error_messages.inc');
  66 require(INCLUDE_DIR.'database.inc');
  67
  68 $db = new CLASS_DATABASE();
  69
  70 if (!empty($_GET['template_id'])) {
  71         $template_id=$_GET['template_id'];
  72 } else {
  73         $template_id=false;
  74 }
  75
  76 //initializing node methods
  77 if (!empty($_GET['node_name'])) {
  78         $node  = nodes::redirByName($_GET['node_name']);
  79 } elseif (!empty($_GET['node_id'])) {
  80         $node = nodes::getNodeById($_GET['node_id'],
  81                 (isset($_SESSION['user_id']))?$_SESSION['user_id']:'');
  82 }
  83
  84 //XXX Paths are wrong (!)
  85 //loading smarty template engine and setting main parameters
  86 require(SMARTY_DIR.'Smarty.class.php');
  87 $smarty = new Smarty;
  88
  89 //$smarty->php_handling = SMARTY_PHP_REMOVE; //XXX
  90 $smarty->template_dir = TEMPLATE_DIR;
  91 //echo TEMPLATE_DIR.TEMPLATE_SET;
  92 //echo $smarty->template_dir;
  93 $smarty->compile_dir = SYSTEM_DATA."templates_c/";
  94 $smarty->config_dir = SMARTY_DIR.'configs/'; //XXX neexistuje
  95 $smarty->cache_dir = SMARTY_DIR.'cache/';
  96 $smarty->plugins_dir = SMARTY_PLUGIN_DIR ;
  97 if ($_SESSION['debugging']) $smarty->debugging=true;
  98
  99 // initializing variables
 100 // preg_replace prevents LFI
 101 if (empty($_POST['event'])) $event=false;
 102 else $event= preg_replace( "![^a-zA-Z0-9_]+!", "", $_POST['event']);
 103
 104
 105 if ($_SESSION['debugging']) {
 106         echo "<pre><b>NODE::";
 107         print_r($node);
 108         echo "</pre>";
 109 }
 110
 111 if ((isset($_SESSION['user_id']) && ($node['node_creator']==$_SESSION['user_id']))) {
 112         $node['node_permission']='owner';
 113 }
 114
 115 if (isset($_SESSION['cube_vector']) && ($_SESSION['cube_vector'])) {
 116         if (strpos($node['node_vector'],$_SESSION['cube_vector'])===false) {
 117                 echo "node::".$node['node_vector'];
 118                 echo "cube_Vector::".$_SESSION['cube_vector'];
 119                 echo "you are out of allowed cwbe. access forbidden";
 120                 die();
 121         }
 122 }
 123
 124 //if not existent node show our own 404
 125 if (empty($node)) {
 126         $nodes= nodes::getNodesByName($_GET['node_name']);
 127         if ($nodes) {
 128                 $smarty->assign('nodes',$nodes);
 129                 $content=$smarty->display("404.tpl");
 130                 die();
 131         }
 132         elseif ($_SESSION['user_id']) {
 133                 $smarty->assign('node_name',$_GET['node_name']);
 134                 $content=$smarty->display("modules/addnode.tpl");
 135         }
 136 }
 137
 138 //modifying node glass pearl //XXX WTF
 139 if (is_array($children_types[$node['node_type']])) {
 140         $smarty->assign('children_types',$children_types[$node['node_type']]);
 141 }
 142 $smarty->assign('types',$types);
 143
 144
 145 //$node['node_type']=$types[$node['node_type']];
 146 $node['node_content']= StripSlashes($node['node_content']);
 147 $node['node_name']= StripSlashes($node['node_name']);
 148
 149 //checking permissions
 150 function _checkPermissions()
 151 {
 152         global $permissions, $node;
 153
 154         require(INCLUDE_DIR.'permissions.inc');
 155         $permissions=permissions::checkPermissions($node);
 156         $permissions['h']=permissions::isHierarch($node);
 157 }
 158
 159 // mail rss
 160 if ($template_id=='rss') //XXX WHAT?
 161 {
 162         $_feedType = "RSS0.91";
 163         if (!is_numeric($_SESSION['user_id']))
 164         {
 165                 if (!isset($_SERVER['PHP_AUTH_USER'])) {
 166                         header('WWW-Authenticate: Basic realm="Kyberia"');
 167                         header('HTTP/1.0 401 Unauthorized');
 168                         echo 'Cancel button';
 169                         exit;
 170                 }
 171                 else
 172                 {
 173                         require_once(EVENT_DIR.'/login.inc');
 174                         $_POST['login'] = $_SERVER['PHP_AUTH_USER'];
 175                         $_POST['password'] = $_SERVER['PHP_AUTH_PW'];
 176                         $_POST['login_type'] = "name";
 177                         if (!login())
 178                         {
 179                                 echo "Zle meno/heslo.";
 180                                 exit();
 181                         }
 182                 }
 183         }
 184
 185         _checkPermissions();
 186
 187         // Mail
 188         if ($_GET['node_id']==='24' && $permissions['r'])
 189         {
 190            require_once(INCLUDE_DIR.'/feedcreator.class.php');
 191
 192            $rss = new UniversalFeedCreator();
 193            $rss->title = "Kyberia mail";
 194            $rss->description = "";
 195            $rss->link = "https://". SYSTEM_URL . "/id/24";
 196
 197                 //XXX into function
 198            $query = "select date_format(mail.mail_timestamp,\"%e.%c. %k:%i:%s\") as cas,
 199    userfrom.user_action as locationfrom_action,
 200    userfrom.user_action_id as locationfrom_action_id,
 201    userto.user_action as locationto_action,
 202    userto.user_action_id as locationto_action_id,
 203    userto.login as mail_to_name, userfrom.login as mail_from_name,
 204    mail.* from mail left join users as userfrom on
 205    mail_from=userfrom.user_id left join users as userto on mail_to=userto.user_id
 206    where mail_user='$_SESSION[user_id]' and mail_to='$_SESSION[user_id]' order by mail_id desc limit 0,10";
 207
 208            $set = $db->query($query);
 209
 210            while($set->next()) {
 211                    $m = $set->getRecord();
 212                    if ($m['mail_to'] != $_SESSION['user_id'])
 213                            continue;
 214                    $item = new FeedItem();
 215                    $item->title = $m['mail_from_name'];
 216                    $item->link = "https://".SYSTEM_URL."/id/24";
 217                    $item->description = $m['mail_text'];
 218                    $rss->addItem($item);
 219            }
 220         }
 221         // bookmarks
 222         elseif ($_GET['node_id']=='19' && $permissions['r'])
 223         {
 224                 require_once(INCLUDE_DIR.'/feedcreator.class.php');
 225
 226                 $rss = new UniversalFeedCreator();
 227                 $rss->title = "Kyberia bookmarks";
 228                 $rss->link = "http://".SYSTEM_URL."/id/19"; //XXX https ?
 229
 230                 require_once(SMARTY_PLUGIN_DIR.'/function.get_bookmarks.php');
 231                 smarty_function_get_bookmarks(array(), $smarty);
 232                 $_items = $smarty->get_template_vars('get_bookmarks');
 233                 foreach ($_items as $_item)
 234                 {
 235                         if (is_array($_item['children']))
 236                                 foreach ($_item['children'] as $_b)
 237                                 {
 238                                         $item = new FeedItem();
 239                                         $item->title = $_b['node_name'];
 240                                         $item->link = "http://".SYSTEM_URL."/id/".$_b['node_id']."/rss";
 241                                         $rss->addItem($item);
 242                                 }
 243                 }
 244                 $_feedType = 'OPML';
 245         }
 246         elseif ($permissions['r'])
 247         {
 248                 require_once(INCLUDE_DIR.'/feedcreator.class.php');
 249
 250                 $rss = new UniversalFeedCreator();
 251                 $rss->title = $node['node_name'];
 252                 $rss->description = "";
 253                 $rss->link = "http://".SYSTEM_URL."/id/".$node['node_id'];
 254
 255                 // K list
 256                 if ($_GET['node_id']=='15')
 257                 {
 258                         require_once(SMARTY_PLUGIN_DIR.'/function.get_k.php');
 259                         smarty_function_get_k(array(), $smarty);
 260                         $_items = $smarty->get_template_vars('get_k');
 261                 }
 262                 else
 263                 {
 264                         require_once(SMARTY_PLUGIN_DIR.'/function.get_children.php');
 265                         smarty_function_get_children(
 266                                 array('orderby' => 'desc', 'orderby_type' => 'time'), $smarty);
 267                         $_items = $smarty->get_template_vars('get_children');
 268                 }
 269
 270                 foreach ($_items as $_item)
 271                 {
 272                         $item = new FeedItem();
 273                         $item->title = $_item['node_name'];
 274                         $item->link = "http://".SYSTEM_URL."/id/".$_item['node_id'];
 275                         $item->description = $_item['node_content'];
 276                         $rss->addItem($item);
 277                 }
 278         }
 279
 280         if ($permissions['r']) $rss->showFeed($_feedType);
 281         exit();
 282 }
 283
 284 _checkPermissions();
 285
 286 //entering the node
 287
 288 //sventest
 289 if (($permissions['r']) || ($event != 'register')) {
 290
 291         //performing node_events (based on update/insert/delete db queries)
 292         if ($event) {
 293                 require(INCLUDE_DIR.'eventz.inc');
 294         }
 295
 296         elseif ($transaction) {
 297                 require(INCLUDE_DIR.'transaction.inc');
 298         }
 299         //end of performing node events
 300
 301         //sventest
 302 }
 303
 304
 305 if ($permissions['r']) {
 306
 307 // these 4 lines are not the source of kyberia lagging problems.
 308 // leave them. started on the 10.4.
 309 // data gained will be used for scientific purposes
 310
 311 // if (isset($_SESSION['user_id']) {
 312 //      log_levenshtein($_SESSION['user_id'],$node['node_id']);
 313 // }
 314
 315 if ((isset($_SESSION['user_id'])) && ($_SESSION['user_id'])) {
 316         $q="insert delayed into levenshtein set user_id='".$_SESSION['user_id']."',node_id='".$node['node_id']."'";
 317         $db->update($q);
 318 }
 319
 320 //if node is css
 321 //XXX into function
 322 if ($node['template_id']!='2019721'){
 323
 324         logger::log('enter',$node['node_id'],'ok',$node['node_user_subchild_count']);
 325         if (!empty($_SESSION['user_id']) && is_numeric($node['node_id'])) {
 326                 $q="update node_access set visits=visits+1,node_user_subchild_count='0',last_visit=NOW() where node_id='".$node['node_id']."' and user_id='".$_SESSION['user_id']."'";
 327 //              echo $q;
 328                 $result=$db->update($q);
 329
 330                 if (!$result) {
 331                         $q="insert into node_access set user_id='".$_SESSION['user_id']."',node_id='".$node['node_id']."',last_visit=NOW()";
 332                         $db->query($q);
 333                 }
 334         }//end of if node os css
 335 }
 336
 337 }
 338
 339 //XXX into function
 340 // if (isset($_SESSION['user_id']) {
 341 //      if (isset($referer_id)) {
 342 //              update_nodes($_SESSION['user_id'],$node['node_id'],$referer_id);
 343 //      } else {
 344 //              update_nodes($_SESSION['user_id'],$node['node_id'],0);
 345 //      }
 346 // }
 347
 348 // DO NOT MESS WITH THIS !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
 349 //creating neural network
 350 $db->update("update nodes set node_views=node_views+1 where node_id='".$node['node_id']."'");
 351 if (isset($referer_id) && is_numeric($referer_id)) {
 352         $q="update neurons set synapse=synapse+1 where dst='".$node['node_id']."' and src='$referer_id'";
 353         $result=$db->update($q);
 354         if (!$result) {
 355                 $q="insert into neurons set synapse_creator='".$_SESSION['user_id']."',dst='".$node['node_id']."',src='$referer_id',synapse=1";
 356                 $db->query($q);
 357                 }
 358 }
 359
 360
 361 elseif (!$permissions['r'] && $_GET['magic_word']) {
 362         $magic_word_big=$_GET['magic_word'];
 363
 364         if ( preg_match("/(\d+)-(.+)/",$_GET['magic_word'],$mu)) {
 365                 $magic_uid=$mu['1'];
 366                 $magic_word=addslashes($mu['2']);
 367                 // XXX WTF column magic_word does not exists
 368                 $q="select login from users where user_id='$magic_uid' and magic_word='$magic_word'";
 369                 $set=$db->query($q);
 370                 if ($set->getNumRows()) {
 371                         $permissions['r']=true;
 372                 }
 373         }
 374 }
 375
 376
 377
 378
 379
 380 else {
 381         logger::log('enter',$node['node_id'],'failed');
 382 }
 383
 384
 385
 386 //assigning user data to smarty if user logged in
 387 if (isset($_SESSION['user_id'])&&($user_id=$_SESSION['user_id'])) {
 388         $smarty->assign('_POST',$_POST);
 389         $smarty->assign('bookmarks',$_SESSION['bookmarks']);
 390         $smarty->assign('ignore',$_SESSION['ignore']);
 391         $smarty->assign('bookstyl',$_SESSION['bookstyl']);
 392         $smarty->assign('fook',$_SESSION['fook']);
 393         $smarty->assign('user_id',$_SESSION['user_id']);
 394         if (!empty($_SESSION['cube_vector']))
 395                 $smarty->assign('cube_vector',$_SESSION['cube_vector']);
 396         $smarty->assign('friends',$_SESSION['friends']); //req by freezy, done by darkaural
 397         $smarty->assign('user_quota',$_SESSION['user_quota']);
 398
 399         // XXX into function
 400         $newmail_q = sprintf('select u.user_mail_id
 401                                 , u.user_k
 402                                 , u.k_wallet
 403                                 , u.user_mail
 404                                 , ms.user_id as mail_sender_id
 405                                 , ms.login as mail_sender
 406                                 from users u
 407                                 left join users ms on ms.user_id = u.user_mail_id
 408                                 where u.user_id = %d',
 409                                 $user_id);
 410         $newmailset = $db->query($newmail_q);
 411
 412
 413         $newmailset->next();
 414         $new_mail=$newmailset->getString('user_mail');
 415         // XXX into function
 416         $newmailset2 = $db->query("select users.user_mail_id,mailsender.login
 417  from users left join users as mailsender on users.user_mail_id = mailsender.user_id where users.user_id = '$user_id'");
 418         $newmailset2->next();
 419         $smarty->assign('new_mail',$new_mail);
 420         $smarty->assign('new_mail_name',$newmailset->getString('mail_sender'));
 421         $smarty->assign('new_mail_name2',$newmailset2->getString('login'));
 422         $user_k=$newmailset->getString('user_k');
 423         $smarty->assign('user_k',$user_k);
 424         $k_wallet=$newmailset->getString('k_wallet');
 425         $smarty->assign('k_wallet',$k_wallet);
 426         $user_id=$_SESSION['user_id'];
 427
 428         //mail node
 429         if ($node['node_name']=='mail') {
 430
 431                 //clear new mail message
 432
 433                 if ($new_mail) $db->query("update users set user_mail=0 where user_id='$user_id'");
 434
 435                 //set messages as delivered to recipient
 436                 $set=$db->query("select mail_id,mail_duplicate_id from mail where mail_user='$user_id' and mail_to='$user_id' and mail_read='no'");
 437                 while($set->next()) {
 438                         $db->query("update mail set mail_read='yes' where mail_id='".$set->getString('mail_duplicate_id')."'");
 439                         $db->query("update mail set mail_read='yes' where mail_id='".$set->getString('mail_id')."'");
 440
 441                         $new_messages[$set->getString('mail_id')]=true;
 442                 }
 443 /*
 444                 if (count($new_messages)) {
 445                         $db->query("update mail set mail_read='yes' where mail_user='$user_id' and mail_user=mail_to and mail_read='no'");
 446                         $smarty->assign('new_messages',$new_messages);
 447
 448                 }
 449 */
 450         }
 451 }
 452
 453
 454
 455 if ($node['node_system_access']=='crypto') {
 456         $smarty->assign('crypto_pass',$_SESSION['crypto'][$node['node_id']]);
 457 }
 458
 459 $smarty->assign('error',$error);
 460 $smarty->assign('permissions',$permissions);
 461 $smarty->assign('current_vector',$node['node_vector']);
 462 if ($permissions['r']) $smarty->assign('node',$node);
 463 else {
 464
 465         $smarty->assign('node',$node);
 466         //new templates by Dark matter
 467         $smarty->template_dir=OWN_TEMPLATE_DIR;
 468
 469         $smarty->display('1549864.tpl');
 470         $smarty->display('1549885.tpl');
 471         $smarty->display('630526.tpl');
 472         die();
 473
 474         //redirect to mainpage
 475 // looks like poeple totaly hate this redirect!
 476 //      header("Location: /id/1");
 477 }
 478
 479
 480 // XXX into function
 481 if (($node['template_id']!='2019721') && (isset($_SESSION['user_id']))){
 482 //setting user location
 483 $q="update users set last_action=NOW(),user_location_vector='".$node['node_vector']."',user_action='".addslashes($node['node_name'])."',user_action_id='".$node['node_id']."' where user_id='".$_SESSION['user_id']."'";
 484 $db->executequery($q);
 485 }
 486
 487 $whole_time=SubStr((Time()+SubStr(MicroTime(),0,8)-$timer_start),0,7);
 488 $smarty->assign('whole_time',$whole_time);
 489
 490
 491 if ($template_id=='download' OR $template_id=='download.jpg') {
 492         if ($permissions['r']) {
 493         $linkname = SYSTEM_ROOT."/files/".$node['node_id'];
 494         $filename= readlink($linkname);
 495         $suffix=preg_replace("/(.*?)\.(.*?)/i","$2",$filename);
 496
 497         $ext = substr( $filename,-3 );
 498         if( $filename == "" ) {
 499            echo "ERROR: Empty file to download. ";
 500            exit;
 501         } elseif ( ! file_exists( $filename ) ) {
 502                 exit;
 503         };
 504         switch( strtolower($ext) ){
 505            case "pdf": $ctype="application/pdf";              break;
 506            case "exe": $ctype="application/octet-stream";      break;
 507            case "zip": $ctype="application/zip";              break;
 508            case "doc": $ctype="application/msword";            break;
 509            case "xls": $ctype="application/vnd.ms-excel";      break;
 510            case "ppt": $ctype="application/vnd.ms-powerpoint"; break;
 511            case "gif": $ctype="image/gif";                    break;
 512            case "png": $ctype="image/png";                    break;
 513            case "jpg": $ctype="image/jpg";                    break;
 514            default:    $ctype="application/force-download";
 515         }
 516         $file=str_replace(" ","_",$node['node_name']).".$ext";
 517         header("Pragma: public");
 518         header("Expires: 0");
 519         header("Cache-Control: must-revalidate, post-check=0, pre-check=0");
 520         header("Content-Type: $ctype");
 521         $user_agent = strtolower ($_SERVER["HTTP_USER_AGENT"]);
 522         if ((is_integer (strpos($user_agent, "msie"))) && (is_integer
 523         (strpos($user_agent, "win")))) {
 524            header( "Content-Disposition: filename=$file;" );
 525         } else  {
 526            header( "Content-Disposition: attachment;
 527         filename=$file;" );
 528         }
 529         header("Content-Transfer-Encoding: binary");
 530         header("Content-Length: ".filesize($filename));
 531         readfile("$filename");
 532         exit();
 533         }
 534         else { echo "you don't have permissions for downloading this data"; die(); }
 535 }
 536
 537 if ($node['template_id']=='2019721'){
 538 Header("Cache-control: max-age=3600");
 539 }else{
 540 Header("Cache-control: no-cache");
 541 Header("Expires:".gmdate("D, d M Y H:i:s")." GMT");
 542 header("Last-Modified: ".gmdate("D, d M Y H:i:s")." GMT");
 543 }
 544
 545
 546 //for cases like search & preview
 547         $smarty->assign('post_vars',$_POST);
 548 if (!empty($_POST['template_event'])) {
 549         $smarty->assign('template_event',$_POST['template_event']);
 550
 551 }
 552
 553 //setting listing parameters
 554         $children_count=$node['node_children_count'];
 555         $descendant_count=$node['node_descendant_count'];
 556
 557         if (isset($_POST['listing_amount']) && is_numeric($_POST['listing_amount'])) {
 558                 $listing_amount=mysql_real_escape_string($_POST['listing_amount']);
 559         }elseif (!empty($_SESSION['listing_amount'])) $listing_amount=$_SESSION['listing_amount'];
 560         else $listing_amount=DEFAULT_LISTING_AMOUNT;
 561         $smarty->assign('listing_amount',$listing_amount);
 562
 563         if (isset($_POST['listing_order']) && $_POST['listing_order']) {
 564                 $listing_order=mysql_real_escape_string($_POST['listing_order']);
 565         } elseif (!empty($_SESSION['listing_order'])) $listing_order=$_SESSION['listing_order'];
 566         else $listing_order=DEFAULT_LISTING_ORDER;
 567         $smarty->assign('listing_order',$listing_order);
 568
 569         if (isset ($_POST['get_children_offset']) && is_numeric($_POST['get_children_offset'])) {
 570                 $offset=$_POST['get_children_offset'];
 571         } else { $offset=0; }
 572
 573
 574         //movement forward and backward
 575 //      if ($listing_order=='asc' && !$offset) $offset=$descendant_count-$listing_amount;
 576
 577         if ($_POST['get_children_move']=='<') {
 578                 $offset=$offset-$listing_amount;
 579               if ($offset<0) $offset=0;
 580         }
 581         elseif ($_POST['get_children_move']=='>') {
 582                 $offset=$offset+$listing_amount;
 583         }
 584         elseif ($_POST['get_children_move']=='>>') {
 585                 $offset=$descendant_count-$listing_amount;
 586         }
 587
 588         elseif ($_POST['get_children_move']=='<<') {
 589                $offset=0;
 590         }
 591         if ($offset<0) $offset=0;
 592         $_POST['offset']=$offset;
 593         $smarty->assign('offset',$offset);
 594
 595
 596 if ($node['external_link']=='header://svg' && !is_numeric($template_id)) {
 597         header("Content-Type: image/svg+xml");
 598 }
 599
 600 //show own header
 601 elseif (isset($_SESSION['header_id']) && ($_SESSION['header_id']==true)) {
 602         $smarty->assign('header_id',$_SESSION['header_id']);
 603         $smarty->template_dir=OWN_TEMPLATE_DIR;
 604         $content=$smarty->fetch($_SESSION['header_id'].".tpl");
 605         $smarty->template_dir = TEMPLATE_DIR.TEMPLATE_SET;
 606         //not registered user
 607         if ($_SESSION['header_id']==2091520) {
 608                 echo $content;
 609                 session_destroy();
 610                 die();
 611         }
 612 }
 613
 614 $smarty->template_dir=OWN_TEMPLATE_DIR;
 615
 616 if (is_numeric($template_id)) {
 617         $content.=$smarty->fetch($template_id.".tpl");
 618 }
 619
 620 else {
 621         $template_id=$node['template_id'];
 622         $content.=$smarty->fetch($node['template_id'].".tpl");
 623 }
 624
 625 if ($template_id=='2019721'){
 626         $content=$smarty->fetch($template_id.".tpl");
 627         echo $content;
 628 }else{
 629         $time=SubStr((Time()+SubStr(MicroTime(),0,8)-$timer_start),0,7);
 630         echo $content;
 631 //      echo "<center>page generation took: $time second</center>";
 632 }
 633 //end of displaying
 634
 635 // output buffering forcing (mx)
 636 if (!empty($_POST['FORCE_OB']) && $_POST['FORCE_OB'] == 'true') ob_end_flush();
 637
 638 ?>