404Forbiden

✏️ Editing: template_edit.php

<?
require_once "../include/user.inc.php";
require_once "../include/video.inc.php";
require_once "../include/video_folder.inc.php";
require "checkWebVideoUser.inc.php";	//for checking iWebVideo user
include('../js/fckeditor/fckeditor.php');

$code = $_GET['v'];
$v = Video::LoadByCode($code);

if (!isset($v) || $v===FALSE)
	$error = "Sorry, video not found.";
	
if ($v->userid != $user->id)
	$error = "Access denied.";
	
if (isset($error))
	die("<h3>$error</h3>");

$res = mysql_query("select * from templates where templateId=".$_GET['templateId']);
$template_data = mysql_fetch_assoc($res);

//temaplte colors
$template_colors = explode("||",$template_data['colors']);
$deafult_color = $template_colors[0];

//checking if user template
if($template_data['user_id'] != 0) 
{
	$new_template_id = $template_data['templateId'];
	$new_template_name = $template_data['templateName'];
}

//setting template text
if($template_data['pro_template'] == 1 && $v->templateContent != "" && $v->templateId == $template_data['templateId'] && $_GET['new'] != "Y") {
	$temp_content = explode("|||",$v->templateContent);
	$content = $temp_content[1];
	
	$deafult_color = $temp_content[0];
}
else
	$content = $template_data['templateText'];

if($deafult_color == "many")
	$deafult_color = "white";

if($_GET['color'] != "") {
	$deafult_color = $_GET['color'];
	$content = str_replace($_POST['deafult_color'], "color_theme_name", $_POST['templateText']);
}

$content = str_replace("color_theme_name",$deafult_color,$content);

//getvideo image code
$img = $SITE."member/get_image.php?v=".$v->code;

//replacing image
$embed_img = '<div style="width:'.$v->width.'; height:'.$v->height.'; margin:auto; position:relative;"><a style="width:'.$v->width.'; height:'.$v->height.'; position:absolute; top:0px; left:0px; background:url('.$SITE.'pro_templates/play.png) no-repeat center center; z-index:2;">&nbsp;</a><img alt="" width="'.$v->width.'" height="'.$v->height.'" src="'.$img.'" /></div>';

$email_form_content = $content = str_replace("<<EMBED_CODE>>",$embed_img,$content);
$content = htmlspecialchars(addslashes($content));

if($v->fb_comment=='Y')
	$addval = 'checked="checked"';
else
	$addval = '';

include "../header.inc.php";
error_reporting(E_ERROR);

?>
<link rel="stylesheet" href="<?php echo $SITE; ?>css/video_page.css" type="text/css" />
<link rel="stylesheet" href="<?php echo $SITE; ?>css/jquery.alerts.css" type="text/css" />
<link rel="stylesheet" href="<?=$SITE?>css/colorpicker.css" type="text/css" />

.inner-content{
	position:relative;
	z-index:1;
	text-align:left;
}
.logobg_code123{
	position:absolute;
	z-index:0;
	width:816px;
	height:459px;
	background:url(../images/template/page2_bg_code123.png) no-repeat right 245px;
	bottom:-10px;
	right:-2px;
	display:block;
}
.logobg_up_code123{
	position:absolute;
	z-index:0;
	width:700px;
	height:340px;
	background:url(../images/template/page2_bg_up_code123.png) no-repeat right 0;
	top:-92px;
	right:-2px;
	display:block;
}	
#header{
	z-index:1;
}

.button_class{
	background:url(../images/template/next_btnbg_code123.png) repeat-x 0 0;
	border-radius:3px;
	color:#4D4D4D;
	font-weight:bold;
	font-family:'myriad Pro', sans-serif, Arial, Helvetica;
	font-size:14px;
	height:25px;
	line-height:25px;
	padding:0 11px;
	text-transform:uppercase;
	-webkit-border-radius:3px;
	-o-border-radius:3px;
	-moz-border-radius:3px;
	-khtml-border-radius:3px;
	-ms-border-radius:3px;
}
.button_class:hover{
	opacity:0.8;
	filter:alpha(opcaity=80);
}
</style>
<div class="template_header"><h2>Step 2 of 2 - Customize Web Page Template</h2></div>
  <form action="template.php?action=preview"  target="_blank" method="post" id="template_form">
    <div style="margin-top:20px;">
		<?php
            $oFCKeditor = new FCKeditor('templateText') ;
			$oFCKeditor->BasePath   = $SITE.'js/fckeditor/';
			$oFCKeditor->Value      = html_entity_decode(stripslashes($content));
			$oFCKeditor->Width		= '100%' ;
			$oFCKeditor->Height		= '570' ;
			$oFCKeditor->Create() ;
        ?>
    </div>
    
    <div style="display:block; font-size:12px; font-weight:bold; text-align:center; min-height:130px; padding-top:20px;">
        <?php	
		if(strpos($email_form_content, '') && strpos($email_form_content, ''))
		{
			//$email_form_code = get_between($email_form_content, '', '');

$email_form_code = "";
			if($_POST)
				$email_form_code = $_POST['email_form_code'];
			?>
			<div style="margin-bottom:20px;">
            	<div>Please enter your email form HTML code below (ask your email service provider for this if you aren't sure how to get it) : </div>
                <div><input type="text" name="email_form_code" value="<?php echo htmlspecialchars($email_form_code); ?>" style="width:600px;" /></div>
            </div>
			<?php
		}
		?>
        
        <div style="width:350px; float:left;">&nbsp;
            <div style="display:none;" id="new_name">
                Enter New Template Name : <input type="text" id="new_template_name" name="new_template_name" value="<?php echo $new_template_name; ?>" />
                <input type="hidden" id="new_template_id" name="new_template_id" value="<?php echo $new_template_id; ?>" />
            </div>
        </div>
        
		<?php if(count($template_colors) > 1) {  ?>
        	<div style="margin-left:20px; float:left;">
                Select Color : 
                <select name="color" id="color" onChange="javascript:changeCSS(this.value)">
                   <?php
                      foreach($template_colors as $color) {
                          if($color == $deafult_color)
                            echo '<option value="'.$color.'" selected="selected">'.ucwords(end(explode("_",$color))).'</option>';
                          else
                            echo '<option value="'.$color.'">'.ucwords(end(explode("_",$color))).'</option>';
                      }
                    ?>
                </select>
                &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
                Page Title :&nbsp;&nbsp;<input type="text" name="template_title" id="template_title"  value="<?php echo $v->template_title; ?>"/>
            </div>
            <div class="clear"></div>
            
            <div style="margin-top:10px;"><input type="checkbox" id="fbcomment" <?php echo $addval; ?> name="fbcomment" />Add Facebook comments</div>
        <?php 
        } else if($template_data['colors'] == "many") {
        ?>
            <div style="margin-left:20px; float:left;">
                Background Color : <input type="text" name="color" id="colorpicker1" value="<?php echo $deafult_color; ?>" /> 
                &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Page Title :&nbsp;&nbsp;<input type="text" name="template_title" id="template_title"  value="<?php echo $v->template_title; ?>"/>
            </div>
            <div class="clear"></div>
            
            <div style="margin-top:10px;"><input type="checkbox" id="fbcomment" <?php echo $addval; ?> name="fbcomment" />Add Facebook comments</div>
        <?php
        }	else	{
        ?>
        	<div style="margin-left:20px; float:left;">
                Page Title :&nbsp;&nbsp;<input type="text" name="template_title" id="template_title"  value="<?php echo $v->template_title; ?>"/>
                &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
                <input type="checkbox" <?php echo $addval; ?> id="fbcomment" name="fbcomment" />Add Facebook comments 
            </div>
        <?php 
        }
        ?>
    </div>
    
    <div style="margin-top:20px;text-align:center">
    	<input type="button" value="Back To Video" onClick="document.location='video.php?v=<?php echo $code; ?>'" class="button_class" />
        <input type="button" value="Back" onClick="document.location='template_list.php?v=<?php echo $code; ?>'" class="button_class" />
        <input type="submit" value="Preview" class="button_class" />
        <input type="button" value="Save As New Template" onClick="javascript:save_template();" class="button_class" />
        <input type="button" value="Save" onClick="javascript:save_to_video();" class="button_class" />
        <input type="button" value="Save As New" onClick="javascript:save_webpage();" class="button_class" />
    </div>
    <input type="hidden" name="css_file" value="<?php echo $SITE; ?>pro_templates/css/color_theme_name.css" />
    <input type="hidden" name="deafult_color" value="<?php echo $deafult_color; ?>" />
    <input type="hidden" name="code" value="<?php echo $code; ?>" />
    <input type="hidden" name="templateId" value="<?php echo $_GET['templateId']; ?>" />
  </form>

<div class="artoon_layout_bg" id="link_popup" style="display:none; width:500px;">
    <div class="artoon_layout_bg_header" style="min-height:30px;">
    	<div style="float:right; margin:5px 15px 0 0"><a href="javascript:$.unblockUI();"><b style="color:red">X </b>Close</a></div>
    </div>
    <div class="artoon_layout_bg_content" style="margin-bottom:10px;">
      Changes saved! Here is your web page URL : 
      
      <?php  if($_GET['save'] == "Y") {  ?>
		<input type="text" value="<?php echo $SITE; ?>video.php?v=<?php echo $code; ?>" id="webpage_link" style="width:330px;" />
      <?php  }   else   {	?>
      	<input type="text" value="<?php echo $SITE."video.php?code=".$_GET['save']; ?>" id="webpage_link" style="width:330px;" />
      <?php  }   ?>
      
      <div style="margin-top:10px;"><a href="videos.php">Return to Video Gallery</a></div>
    </div>
</div>

<?php
function get_between($string, $start_str, $end_str)
{
	$start_pos = strpos($string, $start_str)+strlen($start_str);
	$end_pos = strpos($string, $end_str, $start_pos);
	return substr($string, $start_pos, $end_pos-$start_pos);
	
	return str_replace($sub_string, $replace, $string);
}

include "../footer.inc.php";
?>

Sid Gifari From Gifari Industries - BD Cyber Security Team