Attachment #457686 for bug #603988

View | Details | Raw Unified | Return to bug 603988
Collapse All | Expand All

Lines 94-100 Link Here

(-)a/cite/formats/cite_ascii.php (-1 / +1 lines)
94	// LOOP OVER EACH RECORD:	94	// LOOP OVER EACH RECORD:
95	// Fetch one page of results (or less if on the last page)	95	// Fetch one page of results (or less if on the last page)
96	// (i.e., upto the limit specified in $showMaxRows) fetch a row into the $row array and ...	96	// (i.e., upto the limit specified in $showMaxRows) fetch a row into the $row array and ...
97	for ($rowCounter=0; (($rowCounter < $showMaxRows) && ($row = @ mysql_fetch_array($result))); $rowCounter++)	97	for ($rowCounter=0; (($rowCounter < $showMaxRows) && ($row = @ $result->fetch_array())); $rowCounter++)
98	{	98	{
99	foreach ($row as $rowFieldName => $rowFieldValue)	99	foreach ($row as $rowFieldName => $rowFieldValue)
100	// Apply search & replace 'actions' to all fields that are listed in the 'fields' element of the arrays contained in '$plainTextSearchReplaceActionsArray':	100	// Apply search & replace 'actions' to all fields that are listed in the 'fields' element of the arrays contained in '$plainTextSearchReplaceActionsArray':

Lines 113-119 Link Here

(-)a/cite/formats/cite_html.php (-1 / +1 lines)
113	// LOOP OVER EACH RECORD:	113	// LOOP OVER EACH RECORD:
114	// Fetch one page of results (or less if on the last page)	114	// Fetch one page of results (or less if on the last page)
115	// (i.e., upto the limit specified in $showRows) fetch a row into the $row array and ...	115	// (i.e., upto the limit specified in $showRows) fetch a row into the $row array and ...
116	for ($rowCounter=0; (($rowCounter < $showRows) && ($row = @ mysql_fetch_array($result))); $rowCounter++)	116	for ($rowCounter=0; (($rowCounter < $showRows) && ($row = @ $result->fetch_array())); $rowCounter++)
117	{	117	{
118	$encodedRowData = $row; // we keep '$row' in its original (unencoded) form since unencoded data will be required by function 'linkifyFieldItems()' below	118	$encodedRowData = $row; // we keep '$row' in its original (unencoded) form since unencoded data will be required by function 'linkifyFieldItems()' below
119		119

Lines 130-136 Link Here

(-)a/cite/formats/cite_latex.php (-1 / +1 lines)
130	// LOOP OVER EACH RECORD:	130	// LOOP OVER EACH RECORD:
131	// Fetch one page of results (or less if on the last page)	131	// Fetch one page of results (or less if on the last page)
132	// (i.e., upto the limit specified in $showMaxRows) fetch a row into the $row array and ...	132	// (i.e., upto the limit specified in $showMaxRows) fetch a row into the $row array and ...
133	for ($rowCounter=0; (($rowCounter < $showMaxRows) && ($row = @ mysql_fetch_array($result))); $rowCounter++)	133	for ($rowCounter=0; (($rowCounter < $showMaxRows) && ($row = @ $result->fetch_array())); $rowCounter++)
134	{	134	{
135	foreach ($row as $rowFieldName => $rowFieldValue)	135	foreach ($row as $rowFieldName => $rowFieldValue)
136	// Apply search & replace 'actions' to all fields that are listed in the 'fields' element of the arrays contained in '$latexSearchReplaceActionsArray':	136	// Apply search & replace 'actions' to all fields that are listed in the 'fields' element of the arrays contained in '$latexSearchReplaceActionsArray':

Lines 182-188 Link Here

(-)a/cite/formats/cite_latex_bbl.php (-1 / +1 lines)
182	// LOOP OVER EACH RECORD:	182	// LOOP OVER EACH RECORD:
183	// Fetch one page of results (or less if on the last page)	183	// Fetch one page of results (or less if on the last page)
184	// (i.e., upto the limit specified in $showMaxRows) fetch a row into the $row array and ...	184	// (i.e., upto the limit specified in $showMaxRows) fetch a row into the $row array and ...
185	for ($rowCounter=0; (($rowCounter < $showMaxRows) && ($row = @ mysql_fetch_array($result))); $rowCounter++)	185	for ($rowCounter=0; (($rowCounter < $showMaxRows) && ($row = @ $result->fetch_array())); $rowCounter++)
186	{	186	{
187	foreach ($row as $rowFieldName => $rowFieldValue)	187	foreach ($row as $rowFieldName => $rowFieldValue)
188	// Apply search & replace 'actions' to all fields that are listed in the 'fields' element of the arrays contained in '$latexSearchReplaceActionsArray':	188	// Apply search & replace 'actions' to all fields that are listed in the 'fields' element of the arrays contained in '$latexSearchReplaceActionsArray':

Lines 92-98 Link Here

(-)a/cite/formats/cite_markdown.php (-1 / +1 lines)
92	// LOOP OVER EACH RECORD:	92	// LOOP OVER EACH RECORD:
93	// Fetch one page of results (or less if on the last page)	93	// Fetch one page of results (or less if on the last page)
94	// (i.e., upto the limit specified in $showMaxRows) fetch a row into the $row array and ...	94	// (i.e., upto the limit specified in $showMaxRows) fetch a row into the $row array and ...
95	for ($rowCounter=0; (($rowCounter < $showMaxRows) && ($row = @ mysql_fetch_array($result))); $rowCounter++)	95	for ($rowCounter=0; (($rowCounter < $showMaxRows) && ($row = @ $result->fetch_array())); $rowCounter++)
96	{	96	{
97	foreach ($row as $rowFieldName => $rowFieldValue)	97	foreach ($row as $rowFieldName => $rowFieldValue)
98	// Apply search & replace 'actions' to all fields that are listed in the 'fields' element of the arrays contained in '$markdownSearchReplaceActionsArray':	98	// Apply search & replace 'actions' to all fields that are listed in the 'fields' element of the arrays contained in '$markdownSearchReplaceActionsArray':

Lines 181-187 Link Here

(-)a/cite/formats/cite_pdf.php (-1 / +1 lines)
181	// LOOP OVER EACH RECORD:	181	// LOOP OVER EACH RECORD:
182	// Fetch one page of results (or less if on the last page)	182	// Fetch one page of results (or less if on the last page)
183	// (i.e., upto the limit specified in $showMaxRows) fetch a row into the $row array and ...	183	// (i.e., upto the limit specified in $showMaxRows) fetch a row into the $row array and ...
184	for ($rowCounter=0; (($rowCounter < $showMaxRows) && ($row = @ mysql_fetch_array($result))); $rowCounter++)	184	for ($rowCounter=0; (($rowCounter < $showMaxRows) && ($row = @ $result->fetch_array())); $rowCounter++)
185	{	185	{
186	foreach ($row as $rowFieldName => $rowFieldValue)	186	foreach ($row as $rowFieldName => $rowFieldValue)
187	// Apply search & replace 'actions' to all fields that are listed in the 'fields' element of the arrays contained in '$pdfSearchReplaceActionsArray':	187	// Apply search & replace 'actions' to all fields that are listed in the 'fields' element of the arrays contained in '$pdfSearchReplaceActionsArray':

Lines 113-119 Link Here

(-)a/cite/formats/cite_rtf.php (-1 / +1 lines)
113	// LOOP OVER EACH RECORD:	113	// LOOP OVER EACH RECORD:
114	// Fetch one page of results (or less if on the last page)	114	// Fetch one page of results (or less if on the last page)
115	// (i.e., upto the limit specified in $showMaxRows) fetch a row into the $row array and ...	115	// (i.e., upto the limit specified in $showMaxRows) fetch a row into the $row array and ...
116	for ($rowCounter=0; (($rowCounter < $showMaxRows) && ($row = @ mysql_fetch_array($result))); $rowCounter++)	116	for ($rowCounter=0; (($rowCounter < $showMaxRows) && ($row = @ $result->fetch_array())); $rowCounter++)
117	{	117	{
118	foreach ($row as $rowFieldName => $rowFieldValue)	118	foreach ($row as $rowFieldName => $rowFieldValue)
119	// Apply search & replace 'actions' to all fields that are listed in the 'fields' element of the arrays contained in '$rtfSearchReplaceActionsArray':	119	// Apply search & replace 'actions' to all fields that are listed in the 'fields' element of the arrays contained in '$rtfSearchReplaceActionsArray':




  		"/ +- +/"              =>  " &#8211; "
  	);

    $link = new mysqli($hostName, $username, $password, $databaseName);
    if (! $link)
      die("Couldn't connect to MySQL");
    mysql_select_db($databaseName, $link) or die("Couldn't open $db: ".mysql_error());

    //select the new updated values
    $result = $link->query( "SELECT type, author, title, year, publication, volume, issue, pages, publisher, place, language, issn, doi FROM $tableRefs where serial=$input" )
      or die("SELECT Error: ".$link->error);

    $cite = "";

    while ($row = $result->fetch_array()) {
      if ($row["type"]=="Journal Article"){
        $cite .= "{{cite_journal|url=$databaseBaseURL"."show.php?record=$input|";
        if(!empty($row["author"])){

Lines 158-164 Link Here

(-)a/duplicate_modify.php (-1 / +1 lines)
158	foreach($queryArray as $query)	158	foreach($queryArray as $query)
159	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'	159	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
160		160
161	$affectedRows = ($result ? mysql_affected_rows ($connection) : 0); // get the number of rows that were modified (or return 0 if an error occurred)	161	$affectedRows = ($result ? $connection->affected_rows : 0); // get the number of rows that were modified (or return 0 if an error occurred)
162		162
163	if ($affectedRows == 0) // no rows were affected by the update	163	if ($affectedRows == 0) // no rows were affected by the update
164	{	164	{

Lines 295-301 Link Here

(-)a/includes/atomxml.inc.php (-1 / +1 lines)
295	$exportArray = array(); // array for individually exported records	295	$exportArray = array(); // array for individually exported records
296		296
297	// Generate the export for each record and push them onto an array:	297	// Generate the export for each record and push them onto an array:
298	for ($rowCounter=0; (($rowCounter < $showRows) && ($row = @ mysql_fetch_array($result))); $rowCounter++)	298	for ($rowCounter=0; (($rowCounter < $showRows) && ($row = @ $result->fetch_array())); $rowCounter++)
299	{	299	{
300	// Export the current record as Atom XML entry:	300	// Export the current record as Atom XML entry:
301	$entry = atomEntry($row, $markupPatternsArray);	301	$entry = atomEntry($row, $markupPatternsArray);




		{
			// (1) OPEN the database connection:
			//      (variables are set by include file 'db.inc.php'!)
			if (!($connection = @ new mysqli($hostName, $username, $password, $databaseName)))
				if (mysqli_connect_error()) // this works around a stupid(?) behaviour of the Roxen webserver that returns 'errno: 0' on success! ?:-(
					showErrorMsg("The following error occurred while trying to connect to the host:");

			//     Get the MySQL version and save it to a session variable:

				else
					queryMySQLDatabase("SET NAMES latin1"); // by default, we establish a 'latin1' connection
			}

			// (3) SELECT the database:
			//      (variables are set by include file 'db.inc.php'!)
			if (!(mysql_select_db($databaseName, $connection)))
				if (mysql_errno() != 0) // this works around a stupid(?) behaviour of the Roxen webserver that returns 'errno: 0' on success! ?:-(
					showErrorMsg("The following error occurred while trying to connect to the database:");
		}
	}


		global $client;

		// (3) RUN the query on the database through the connection:
		if (!($result = @ $connection->query($query)))
			if (mysql_errno() != 0) // this works around a stupid(?) behaviour of the Roxen webserver that returns 'errno: 0' on success! ?:-(
			{
				if (isset($client) AND preg_match("/^cli/i", $client)) // if the query originated from a command line client such as the "refbase" CLI client ("cli-refbase-1.0")
					// note that we also HTML encode the query for CLI clients since a malicious user could use the client parameter to perform a cross-site scripting (XSS) attack


		if (isset($connection))
			// (5) CLOSE the database connection:
			if (!($connection->close()))
				if (mysql_errno() != 0) // this works around a stupid(?) behaviour of the Roxen webserver that returns 'errno: 0' on success! ?:-(
					showErrorMsg("The following error occurred while trying to disconnect from the database:");
	}



		$result = queryMySQLDatabase($query); // RUN the query on the database through the connection

		$row = $result->fetch_row(); // fetch the current row into the array $row (it'll be always *one* row, but anyhow)
		$mysqlVersionString = $row[0]; // extract the contents of the first (and only) row (returned version string will be something like "4.0.20-standard" etc.)
		$mysqlVersion = preg_replace("/^(\d+\.\d+).+/", "\\1", $mysqlVersionString); // extract main version number (e.g. "4.0") from version string


	// Get MySQL field info:
	// (i.e. fetch field (column) information from a given result resource; returns the
	//  field property given in '$propertyName', else an array of all field properties;
	//  see <http://www.php.net/mysqli_fetch_field>)
	function getMySQLFieldInfo($result, $fieldOffset, $propertyName = "")
	{
		$fieldInfoArray = array();

		// Get field (column) metadata:
		$fieldInfo = $result->fetch_field_direct((int)$fieldOffset); // returns an object containing the field information

		// Copy object properties to an array:
		$fieldInfoArray["name"]         = $fieldInfo->name;         // column name

	function seekInMySQLResultsToOffset($result, $rowOffset, $showRows, $displayType, $citeType)
	{
		// Find out how many rows are available:
		$rowsFound = @ $result->num_rows;
		if ($rowsFound > 0) // If there were rows found ...
		{
			// ... setup variables in order to facilitate "previous" & "next" browsing:

			$nextOffset = $rowOffset + $showRows;

			// d) Seek to the current offset
			$result->data_seek($rowOffset); // move internal result pointer to the row number given in '$rowOffset'
		}
		else // set variables to zero in order to prevent 'Undefined variable...' messages when nothing was found ('$rowsFound = 0'):
		{

	function showErrorMsg($headerMsg)
	{
		global $client;
		global $connection;

		$errorNo = mysqli_connect_errno();
		$errorMsg = mysqli_connect_error();

		if (preg_match("/^cli/i", $client)) // if the query originated from a command line client such as the "refbase" CLI client ("cli-refbase-1.0")
			// note that we also HTML encode the '$errorMsg' for CLI clients since a malicious user could use the client parameter to perform a cross-site scripting (XSS) attack

		$query = "SELECT user_id FROM $tableAuth WHERE email = " . quote_smart($emailAddress);

		$result = queryMySQLDatabase($query); // RUN the query on the database through the connection
		$row = $result->fetch_array();

		return($row["user_id"]);
	}

						$result = queryMySQLDatabase($queryRefs);

						// Get the record id that was created:
						$serialNo = @ $connection->insert_id; // find out the unique ID number of the newly created record (Note: this function should be called immediately after the
						                                            // SQL INSERT statement! After any subsequent query it won't be possible to retrieve the auto_increment identifier value for THIS record!)

						// ADD USER DATA:


		$foundSerialsArray = array(); // initialize array variable (which will hold the serial numbers of all found records)

		$rowsFound = @ $result->num_rows;
		if ($rowsFound > 0) // If there were rows found ...
		{
			while ($row = @ $result->fetch_array()) // for all rows found
			{
				$recordID = $row["record_id"]; // get the serial number of the current record
				$foundSerialsArray[] = $recordID; // add this record's serial to the array of found serial numbers


		$userGroupsArray = array(); // initialize array variable

		$rowsFound = @ $result->num_rows;
		if ($rowsFound > 0) // If there were rows found ...
		{
			while ($row = @ $result->fetch_array()) // for all rows found
			{
				// remove any meaningless delimiter(s) from the beginning or end of a field string:
				$rowUserGroupsString = trimTextPattern($row["user_groups"], "( *; *)+", true, true);


		$userQueriesArray = array(); // initialize array variable

		$rowsFound = @ $result->num_rows;
		if ($rowsFound > 0) // If there were rows found ...
		{
			while ($row = @ $result->fetch_array()) // for all rows found
				$userQueriesArray[] = $row["query_name"]; // append this row's query name to the array of found user queries

			// join array of unique user queries with '; ' as separator:


		$userCiteKeysArray = array(); // initialize array variable

		$rowsFound = @ $result->num_rows;
		if ($rowsFound > 0) // If there were rows found ...
		{
			while ($row = @ $result->fetch_array()) // for all rows found
			{
				// If this row's cite key already exists in the global array of found cite keys ('$citeKeysArray'),
				// we'll uniquify it, otherwise we'll take it as is


		$availableFormatsStylesTypesArray = array(); // initialize array variable

		$rowsFound = @ $result->num_rows;
		if ($rowsFound > 0) // If there were rows found ...
			while ($row = @ $result->fetch_array()) // for all rows found
				$availableFormatsStylesTypesArray[$row[$dataType . "_id"]] = $row[$dataType . "_name"]; // append this row's format/style/type name to the array of found user formats/styles/types

		return $availableFormatsStylesTypesArray;


		$enabledFormatsStylesTypesArray = array(); // initialize array variable

		$rowsFound = @ $result->num_rows;
		if ($rowsFound > 0) // If there were rows found ...
			while ($row = @ $result->fetch_array()) // for all rows found
			{
				if ($returnIDsAsValues) // return format/style/type IDs as element values:
					$enabledFormatsStylesTypesArray[] = $row[$dataType . "_id"]; // append this row's format/style/type ID to the array of found user formats/styles/types

		else
			$sessionVariableName = "user_" . $dataType . "s"; // yields 'user_styles' or 'user_types'

		$rowsFound = @ $result->num_rows;
		if ($rowsFound > 0) // If there were rows found ...
		{
			while ($row = @ $result->fetch_array()) // for all rows found
				$userFormatsStylesTypesArray[] = $row[$dataType . "_name"]; // append this row's format/style/type name to the array of found user formats/styles/types

			// we'll only update the appropriate session variable if either a normal user is logged in -OR- the admin is logged in and views his own user options page

		$query = "SELECT style_spec FROM $tableStyles WHERE style_name = " . quote_smart($citeStyle);

		$result = queryMySQLDatabase($query); // RUN the query on the database through the connection
		$row = $result->fetch_array();

		return($row["style_spec"]);
	}

		$query = "SELECT format_spec FROM $tableFormats WHERE format_name = " . quote_smart($formatName) . " AND format_type = " . quote_smart($formatType);

		$result = queryMySQLDatabase($query); // RUN the query on the database through the connection
		$row = $result->fetch_array();

		return($row["format_spec"]);
	}

		$query = "SELECT depends_path FROM $tableDepends WHERE depends_external = " . quote_smart($externalUtilityName);

		$result = queryMySQLDatabase($query); // RUN the query on the database through the connection
		$row = $result->fetch_array();

		return($row["depends_path"]);
	}


		$result = queryMySQLDatabase($query); // RUN the query on the database through the connection

		if ($result->num_rows == 1) // interpret query result: Do we have exactly one row?
		{
			$userPermissionsArray = array(); // initialize array variables
			$userPermissionsFieldNameArray = array();

			$row = $result->fetch_array(); // fetch the one row into the array '$row'

			$fieldsFound = $result->field_count; // count the number of fields

			for ($i=0; $i<$fieldsFound; $i++)
			{


		$languagesArray = array(); // initialize array variable

		$rowsFound = @ $result->num_rows;
		if ($rowsFound > 0) // If there were rows found ...
		{
			while ($row = @ $result->fetch_array()) // for all rows found
				$languagesArray[] = $row["language_name"]; // append this row's language name to the array of found languages
		}



		$userOptionsArray = array(); // initialize array variable

		$rowsFound = @ $result->num_rows;
		if ($rowsFound == 1) // Interpret query result: Do we have exactly one row?
			$userOptionsArray = @ $result->fetch_array(); // fetch the one row into the array '$userOptionsArray'

		return $userOptionsArray;
	}


		$result = queryMySQLDatabase($query); // RUN the query on the database through the connection

		$row = $result->fetch_row(); // fetch the current row into the array $row (it'll be always *one* row, but anyhow)
		$numberOfRecords = $row[0]; // extract the contents of the first (and only) row

		return $numberOfRecords;


		$result = queryMySQLDatabase($query); // RUN the query on the database through the connection

		$row = $result->fetch_row(); // fetch the current row into the array $row (it'll be always *one* row, but anyhow)
		$lastModifiedDateTime = $row[0] . " " . $row[1];

		return $lastModifiedDateTime;

		$i = 0;
		$resultBuffer = array();

		while ($row = @ $result->fetch_array(Id))
		{
			if ($SplitValues) // if desired, split field contents into substrings
			{


		$fieldContentsArray = array(); // initialize array variable

		$rowsFound = @ $result->num_rows;
		if ($rowsFound > 0) // If there were rows found ...
		{
			while ($row = @ $result->fetch_array()) // for all rows found
				$fieldContentsArray[] = $row[$columnName]; // append this row's field value to the array of extracted field values
		}



	// --------------------------------------------------------------------

	// this function uses 'mysqli_real_escape_string()' to:
	// - prepend backslashes to \, ', "
	// - replace the characters \x00, \n, \r, and \x1a with a MySQL acceptable representation
	//   for queries (e.g., the newline character is replaced with the litteral string '\n')
	function escapeSQL($sourceString)
	{
		global $connection;

		if (!$connection)
			connectToMySQLDatabase();

		$sourceString = $connection->real_escape_string($sourceString);

		return $sourceString;
	}

		          . "\n\t\t</image>";

		// fetch results: upto the limit specified in '$showRows', fetch a row into the '$row' array and write out a RSS item:
		for ($rowCounter=0; (($rowCounter < $showRows) && ($row = @ $result->fetch_array())); $rowCounter++)
		{
			$origTitle = $row['title']; // save the original title contents before applying any search & replace actions


		$fieldValuesArray = array(); // initialize array variable which will hold the splitted sub-items

		// split field values on the given delimiter:
		for ($i=0; $row = @ $result->fetch_array(); $i++)
		{
			$fieldSubValuesArray = preg_split($delim, $row[$fieldName]); // split field contents on '$delim' (which is interpreted as perl-style regular expression!)
			foreach ($fieldSubValuesArray as $fieldSubValue)




		global $connection;

		// Establish a *new* connection that has admin permissions
		if (!($connection = @ new mysqli($hostName, $adminUserName, $adminPassword, $databaseName)))
		if (!($connection = @ mysql_connect($hostName, $adminUserName, $adminPassword)))
			if (mysql_errno() != 0) // this works around a stupid(?) behaviour of the Roxen webserver that returns 'errno: 0' on success! ?:-(
				showErrorMsg("The following error occurred while trying to connect to the host:", "");

		// (2) SELECT the database:
		if (!(mysql_select_db($databaseName, $connection)))
			if (mysql_errno() != 0) // this works around a stupid(?) behaviour of the Roxen webserver that returns 'errno: 0' on success! ?:-(
				showErrorMsg("The following error occurred while trying to connect to the database:", "");
	}

	// --------------------------------------------------------------------


		$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
	
		$rowsFound = @ $result->num_rows;
		if ($rowsFound == 0)
		{
			$query = "INSERT INTO " . $table . " VALUES " . $values;

		$queryFields = "SHOW FIELDS FROM " . $table;
		$result = queryMySQLDatabase($queryFields); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'

		while ($row = @ $result->fetch_array()) // for all fields found, check if any of their names matches the field name that we want to add
			if ($row["Field"] == $column)
				$present = true;


		$queryFields = "SHOW TABLES";
		$result = queryMySQLDatabase($queryFields); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'

		while ($row = @ $result->fetch_array()) // for all tables found, check if any of their names matches the table name that we want to add
			if ($row[0] == $table)
				$present = true;


Lines 198-204 Link Here

(-)a/includes/modsxml.inc.php (-1 / +1 lines)
198	);	198	);
199		199
200	// Generate the export for each record and push them onto an array:	200	// Generate the export for each record and push them onto an array:
201	while ($row = @ mysql_fetch_array($result)) {	201	while ($row = @ $result->fetch_array()) {
202	// Export the current record as MODS XML	202	// Export the current record as MODS XML
203	$record = modsRecord($row);	203	$record = modsRecord($row);
204		204

Lines 69-75 Link Here

(-)a/includes/oaidcxml.inc.php (-1 / +1 lines)
69	$citeKeysArray = array(); // array of cite keys (used to ensure uniqueness of cite keys among all exported records)	69	$citeKeysArray = array(); // array of cite keys (used to ensure uniqueness of cite keys among all exported records)
70		70
71	// Generate the export for each record and push them onto an array:	71	// Generate the export for each record and push them onto an array:
72	while ($row = @ mysql_fetch_array($result))	72	while ($row = @ $result->fetch_array())
73	{	73	{
74	// Export the current record as OAI_DC XML:	74	// Export the current record as OAI_DC XML:
75	$record = oaidcRecord($row, "oai_dc");	75	$record = oaidcRecord($row, "oai_dc");

Lines 155-161 Link Here

(-)a/includes/odfxml.inc.php (-1 / +1 lines)
155	list($universalSearchReplaceActionsArray, $fieldSpecificSearchReplaceActionsArray, $odfIndexesToRefbaseFieldsArray, $referenceTypesToRefbaseTypesArray) = initializeArrays();	155	list($universalSearchReplaceActionsArray, $fieldSpecificSearchReplaceActionsArray, $odfIndexesToRefbaseFieldsArray, $referenceTypesToRefbaseTypesArray) = initializeArrays();
156		156
157	// Generate the export for each record and push them onto an array:	157	// Generate the export for each record and push them onto an array:
158	while ($row = @ mysql_fetch_array($result))	158	while ($row = @ $result->fetch_array())
159	{	159	{
160	// Parse the current record into an array of field data that shall be exported to ODF:	160	// Parse the current record into an array of field data that shall be exported to ODF:
161	$recordExportArray = parseRecord($row, $odfIndexesToRefbaseFieldsArray, $referenceTypesToRefbaseTypesArray, $universalSearchReplaceActionsArray, $fieldSpecificSearchReplaceActionsArray);	161	$recordExportArray = parseRecord($row, $odfIndexesToRefbaseFieldsArray, $referenceTypesToRefbaseTypesArray, $universalSearchReplaceActionsArray, $fieldSpecificSearchReplaceActionsArray);

Lines 86-92 Link Here

(-)a/includes/srwxml.inc.php (-1 / +1 lines)
86	$exportArray = array(); // Array for individually exported records	86	$exportArray = array(); // Array for individually exported records
87		87
88	// Generate the export for each record and push them onto an array:	88	// Generate the export for each record and push them onto an array:
89	for ($rowCounter=0; (($rowCounter < $showRows) && ($row = @ mysql_fetch_array($result))); $rowCounter++)	89	for ($rowCounter=0; (($rowCounter < $showRows) && ($row = @ $result->fetch_array())); $rowCounter++)
90	{	90	{
91	if (preg_match("/DC/i", $exportFormat)) // export the current record as DC XML (i.e. simple Dublin Core):	91	if (preg_match("/DC/i", $exportFormat)) // export the current record as DC XML (i.e. simple Dublin Core):
92	$record = oaidcRecord($row, "srw_dc"); // function 'oaidcRecord()' is defined in 'oaidcxml.inc.php'	92	$record = oaidcRecord($row, "srw_dc"); // function 'oaidcRecord()' is defined in 'oaidcxml.inc.php'




		// If we made it here, then the data is considered valid!

		// (1) Open the database connection and use the mysql database:
		if (!($connection = @ new mysqli($hostName,$adminUserName,$adminPassword,$adminDatabaseName)))
			if (mysql_errno() != 0) // this works around a stupid(?) behaviour of the Roxen webserver that returns 'errno: 0' on success! ?:-(
				showErrorMsg("The following error occurred while trying to connect to the host:", "");

		if (!(mysql_select_db($adminDatabaseName, $connection)))
			if (mysql_errno() != 0) // this works around a stupid(?) behaviour of the Roxen webserver that returns 'errno: 0' on success! ?:-(
				showErrorMsg("The following error occurred while trying to connect to the database:", "");


		// First, check if we're a dealing with MySQL version 4.1.x or greater:
		// (MySQL 4.1.x is required if the refbase MySQL database/tables shall be installed using Unicode/UTF-8 as default character set)

			$queryUpdateDependsTable = "UPDATE " . $databaseName . "." . $tableDepends . " SET depends_enabled = \"false\" WHERE depends_external = \"bibutils\""; // disable Bibutils functionality

		// (2) Run the INSTALL queries on the mysql database through the connection:
		if (!($result = @ $connection->query ($queryGrantStatement)))
			if (mysql_errno() != 0) // this works around a stupid(?) behaviour of the Roxen webserver that returns 'errno: 0' on success! ?:-(
				showErrorMsg("The following error occurred while trying to query the database:", "");

		if (!($result = @ $connection->query ($queryCreateDB)))
			if (mysql_errno() != 0) // this works around a stupid(?) behaviour of the Roxen webserver that returns 'errno: 0' on success! ?:-(
				showErrorMsg("The following error occurred while trying to query the database:", "");

		// IMPORT the literature database structure from file:

		// stderr to stdout, which you can then easily print using something like print `shellcommand 2>&1`.

		// run the UPDATE query on the depends table of the (just imported) literature database:
		if (!($result = @ $connection->query ($queryUpdateDependsTable)))
			if (mysql_errno() != 0) // this works around a stupid(?) behaviour of the Roxen webserver that returns 'errno: 0' on success! ?:-(
				showErrorMsg("The following error occurred while trying to query the database:", "");

		// (5) Close the database connection:
		if (!($connection->close()))
			if (mysql_errno() != 0) // this works around a stupid(?) behaviour of the Roxen webserver that returns 'errno: 0' on success! ?:-(
				showErrorMsg("The following error occurred while trying to disconnect from the database:", "");

		$resultLines = ""; // initialize variable




		$queryFile = "SELECT file FROM $tableRefs WHERE serial = " . quote_smart($serialNo);

		$result = queryMySQLDatabase($queryFile); // RUN the query on the database through the connection
		$row = @ $result->fetch_array();

		$fileName = $row["file"];
	}

			// (3) RUN the query on the database through the connection:
			$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'

			if ($result->num_rows == 1) // if there's already an existing user_data entry, we perform an UPDATE action:
				$queryUserData = "UPDATE $tableUserData SET "
				               . "marked = " . quote_smart($markedRadio) . ", "
				               . "copy = " . quote_smart($copyName) . ", "

		$result = queryMySQLDatabase($queryRefs); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'

		// Get the record id that was created
		$serialNo = @ $connection->insert_id; // find out the unique ID number of the newly created record (Note: this function should be called immediately after the
													// SQL INSERT statement! After any subsequent query it won't be possible to retrieve the auto_increment identifier value for THIS record!)

		$formVars['serialNo'] = $serialNo; // for '$recordAction = "add"' we update the original '$formVars' array element to ensure a correct serial number when generating the file name via the 'parsePlaceholderString()' function

Lines 73-82 Link Here

(-)a/queries.php (-2 / +2 lines)
73		73
74	$result = queryMySQLDatabase($query); // RUN the query on the database through the connection (function 'queryMySQLDatabase()' is defined in 'include.inc.php')	74	$result = queryMySQLDatabase($query); // RUN the query on the database through the connection (function 'queryMySQLDatabase()' is defined in 'include.inc.php')
75		75
76	$rowsFound = @ mysql_num_rows($result);	76	$rowsFound = @ $result->num_rows;
77	if ($rowsFound == 1) // if there was exactly one row found (normally, this should be the case) ...	77	if ($rowsFound == 1) // if there was exactly one row found (normally, this should be the case) ...
78	{	78	{
79	$row = mysql_fetch_array($result);	79	$row = $result->fetch_array();
80		80
81	// redirect the browser to 'query_manager.php':	81	// redirect the browser to 'query_manager.php':
82	if (encodeHTML($submitAction) == $loc["ButtonTitle_Edit"]) // note that we need to HTML encode '$submitAction' for comparison with the HTML encoded locales (function 'encodeHTML()' is defined in 'include.inc.php')	82	if (encodeHTML($submitAction) == $loc["ButtonTitle_Edit"]) // note that we need to HTML encode '$submitAction' for comparison with the HTML encoded locales (function 'encodeHTML()' is defined in 'include.inc.php')

Lines 174-183 Link Here

(-)a/query_manager.php (-2 / +2 lines)
174	// (3a) RUN the query on the database through the connection:	174	// (3a) RUN the query on the database through the connection:
175	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'	175	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
176		176
177	if (@ mysql_num_rows($result) == 1) // this condition is added here to avoid the case that editing a query item which got deleted in the meantime invokes a seemingly correct but empty 'edit query' form	177	if (@ $result->num_rows == 1) // this condition is added here to avoid the case that editing a query item which got deleted in the meantime invokes a seemingly correct but empty 'edit query' form
178	{	178	{
179	// (3b) EXTRACT results:	179	// (3b) EXTRACT results:
180	$row = mysql_fetch_array($result); // fetch the current row into the array $row (it'll be always one row, but anyhow)	180	$row = $result->fetch_array(); // fetch the current row into the array $row (it'll be always one row, but anyhow)
181		181
182	// check whether the user tries to edit a query that does not belong to his own set of saved queries:	182	// check whether the user tries to edit a query that does not belong to his own set of saved queries:
183	if ($row['user_id'] != getUserID($loginEmail)) // the function 'getUserID' and the '$loginEmail' variable are specified in 'include.inc.php'	183	if ($row['user_id'] != getUserID($loginEmail)) // the function 'getUserID' and the '$loginEmail' variable are specified in 'include.inc.php'





		$result = queryMySQLDatabase($query); // RUN the query on the database through the connection (function 'queryMySQLDatabase()' is defined in 'include.inc.php')

		if (@ $result->num_rows > 0) // if there's already a saved query (belonging to this user) with exactly the same name
			$errors["queryName"] = "You've got already a query with that name!<br>Please choose a different name:"; // the user's query name must be unique (since the query popup of the 'Recall My Query' form on the main page uses the query's name to recall a particular query)
			// note that we could allow for duplicate query names if the query popup on the main page would work with query IDs instead. However, from an interface design perspective, duplicate query names shouldn't be allowed anyhow. So we simply don't permit them.
	}


	if (preg_match("/^(edit|delet)$/", $queryAction))
	{
		$affectedRows = ($result ? $connection->affected_rows : 0); // get the number of rows that were modified (or return 0 if an error occurred)

		if ($affectedRows == 0) // no rows were affected by the update, i.e., the query must have been deleted in the meantime!
		// NOTE: Previously, we did return "Warning_SavedQueryDoesNotExistAnymore": "This saved query does not exist anymore".

	}

	elseif ($queryAction == "add") // Get the query id that was created:
		$queryID = @ $connection->insert_id; // find out the unique ID number of the newly created query (Note: this function should be called immediately after the
													// SQL INSERT statement! After any subsequent query it won't be possible to retrieve the auto_increment identifier value for THIS record!)

	// update the 'userQueries' session variable:

Lines 305-314 Link Here

(-)a/record.php (-2 / +2 lines)
305	// (3a) RUN the query on the database through the connection:	305	// (3a) RUN the query on the database through the connection:
306	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'	306	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
307		307
308	if (@ mysql_num_rows($result) == 1) // this condition is added here to avoid the case that clicking on a search result item which got deleted in the meantime invokes a seemingly correct but empty 'edit record' search form	308	if (@ $result->num_rows == 1) // this condition is added here to avoid the case that clicking on a search result item which got deleted in the meantime invokes a seemingly correct but empty 'edit record' search form
309	{	309	{
310	// (3b) EXTRACT results:	310	// (3b) EXTRACT results:
311	$row = mysql_fetch_array($result); //fetch the current row into the array $row (it'll be always one row, but anyhow)	311	$row = $result->fetch_array(); //fetch the current row into the array $row (it'll be always one row, but anyhow)
312		312
313	// fetch attributes of the current record into variables:	313	// fetch attributes of the current record into variables:
314	$authorName = encodeHTML($row['author']);	314	$authorName = encodeHTML($row['author']);

Lines 123-129 Link Here

(-)a/rss.php (-1 / +1 lines)
123	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'	123	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
124		124
125	// find out how many rows are available:	125	// find out how many rows are available:
126	$rowsFound = @ mysql_num_rows($result);	126	$rowsFound = @ $result->num_rows;
127		127
128	// construct a meaningful channel description based on the specified 'WHERE' clause:	128	// construct a meaningful channel description based on the specified 'WHERE' clause:
129	$rssChannelDescription = "Displays all newly added records where " . explainSQLQuery($sanitizedWhereClause) . "."; // function 'explainSQLQuery()' is defined in 'include.inc.php'	129	$rssChannelDescription = "Displays all newly added records where " . explainSQLQuery($sanitizedWhereClause) . "."; // function 'explainSQLQuery()' is defined in 'include.inc.php'




	if (($displayType == "Export"))
	{
		// Find out how many rows are available:
		$rowsFound = @ $result->num_rows; // for all other display types, the '$rowsFound' variable is set within function 'seekInMySQLResultsToOffset()' (see below)
		if ($rowsFound > 0) // If there were rows found ...
		{
			generateExport($result, $rowOffset, $showRows, $exportFormat, $exportType, $exportStylesheet, $displayType, $viewType, $userID); // export records using the export format specified in '$exportFormat'

	$queryURL = rawurlencode($query); // URL encode SQL query

	if (!preg_match("/^SELECT/i", $query)) // for queries other than SELECT queries (e.g. UPDATE, DELETE or INSERT queries that were executed by the admin via use of 'sql_search.php')
		$affectedRows = ($result ? $connection->affected_rows : 0); // get the number of rows that were modified (or return 0 if an error occurred)

	// If the previous query (which is stored in the 'oldQuery' session variable) is different
	// from the current query, we append it to the 'queryHistory' session variable:

					$CounterMax = 0; // Otherwise don't hide any columns

				// count the number of fields
				$fieldsFound = $result->field_count;
				if ($displayType != "Browse")
				{
					// hide those last columns that were added by the script and not by the user

				// BEGIN RESULTS DATA COLUMNS --------------
				// Fetch one page of results (or less if on the last page)
				// (i.e., upto the limit specified in $showRows) fetch a row into the $row array and ...
				for ($rowCounter=0; (($rowCounter < $showRows) && ($row = @ $result->fetch_array())); $rowCounter++)
				{
					if (is_integer($rowCounter / 2)) // if we currently are at an even number of rows
						$rowClass = "even";

					$CounterMax = ($CounterMax + 1); // ...we'll also need to hide the 'related' column (which isn't displayed in Details view but is only used to generate a link to related records)

				// count the number of fields
				$fieldsFound = $result->field_count;
				// hide those last columns that were added by the script and not by the user
				$fieldsToDisplay = $fieldsFound-(2+$CounterMax+$addCounterMax); // (2+$CounterMax) -> $CounterMax is increased by 2 in order to hide the 'orig_record' & 'serial' columns (which were added to make checkboxes & dup warning work)
																				// $addCounterMax is set to 1 when the field given in '$fileVisibilityException[0]' (defined in 'ini.inc.php') was added to the query, otherwise '$addCounterMax = 0'

				// BEGIN RESULTS DATA COLUMNS --------------
				// Fetch one page of results (or less if on the last page)
				// (i.e., upto the limit specified in $showRows) fetch a row into the $row array and ...
				for ($rowCounter=0; (($rowCounter < $showRows) && ($row = @ $result->fetch_array())); $rowCounter++)
				{
					// ... print out each of the attributes
					// in that row as a separate TR (Table Row)

		$recordSerialsArray = array();
		$duplicateRecordSerialsArray = array();

		$rowsFound = @ $result->num_rows;

		// Identify any records with matching field data:
		if ($rowsFound > 0) // if there were rows found ...
		{
			// Count the number of fields:
			$fieldsFound = $result->field_count;

			// Loop over each row in the result set:
			for ($rowCounter=0; $row = @ $result->fetch_array(); $rowCounter++)
			{
				$recordIdentifier = ""; // make sure our buffer variable is empty


		// Check whether the extracted serial numbers and cite keys exist in the database:
		$result = queryMySQLDatabase($query); // RUN the query on the database through the connection (function 'queryMySQLDatabase()' is defined in 'include.inc.php')

		if (@ $result->num_rows > 0) // if there were rows found ...
		{
			// Loop over each row in the result set:
			for ($rowCounter=0; $row = @ $result->fetch_array(); $rowCounter++)
			{
				if (!in_array($row["serial"], $foundRecordSerialsKeysArray) OR (!empty($row["cite_key"]) AND !in_array($row["cite_key"], $foundRecordSerialsKeysArray))) // if this record identifier hasn't been seen yet
				{

Lines 66-72 Link Here

(-)a/sitemap.php (-1 / +1 lines)
66	// (3) RUN the query on the database through the connection:	66	// (3) RUN the query on the database through the connection:
67	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'	67	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
68		68
69	while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {	69	while ($row = $result->fetch_array(, MYSQL_ASSOC)) {
70	echo " <url>\n";	70	echo " <url>\n";
71	echo " <loc>".$databaseBaseURL."show.php?record=".$row['serial']."</loc>\n";	71	echo " <loc>".$databaseBaseURL."show.php?record=".$row['serial']."</loc>\n";
72	if (!empty($row['modified_date'])) {	72	if (!empty($row['modified_date'])) {




		// TODO: create a new function 'changeColumn()' that only modifies the column spec if the new column spec is different from the old one
		$query = "ALTER table " . $tableDeleted . " MODIFY edition varchar(50) default NULL";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'deleted': altered table specification. Affected rows"] = ($result ? $connection->affected_rows : 0); // get the number of rows that were modified (or return 0 if an error occurred)

		$query = "ALTER table " . $tableDeleted . " MODIFY thesis enum('Bachelor''s thesis','Honours thesis','Master''s thesis','Ph.D. thesis','Diploma thesis','Doctoral thesis','Habilitation thesis') default NULL";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'deleted': altered table specification. Affected rows"] = ($result ? $connection->affected_rows : 0);

		// Alter table specification for table 'refs'
		$query = "ALTER table " . $tableRefs . " MODIFY edition varchar(50) default NULL";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'refs': altered table specification. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "ALTER table " . $tableRefs . " MODIFY thesis enum('Bachelor''s thesis','Honours thesis','Master''s thesis','Ph.D. thesis','Diploma thesis','Doctoral thesis','Habilitation thesis') default NULL";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'refs': altered table specification. Affected rows"] = ($result ? $connection->affected_rows : 0);

		// Add field 'version' to table 'deleted'
		$properties = "MEDIUMINT(8) UNSIGNED DEFAULT 1 AFTER modified_by";

		// Update table 'refs'
		$query = "UPDATE " . $tableRefs . " SET thesis = NULL WHERE thesis = ''"; // this fix is required to ensure correct sorting when outputting citations with '$citeOrder="type"' or '$citeOrder="type-year"'
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'refs': updated 'thesis' field (replaced empty string with NULL). Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableRefs . " SET type = 'Conference Article' WHERE type RLIKE '^(Unsupported: )?Conference Proceeding$'"; // this may not be perfect since some items of type "Conference Proceeding" may be actually a "Conference Volume"
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'refs': updated 'type' field ('Conference Proceeding' => 'Conference Article'). Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableRefs . " SET type = 'Miscellaneous' WHERE type RLIKE '^(Unsupported: )?Generic$'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'refs': updated 'type' field ('Generic' => 'Miscellaneous'). Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableRefs . " SET type = 'Newspaper Article' WHERE type RLIKE '^(Unsupported: )?Newspaper$'"; // this may not be perfect since some items of type "Newspaper" may be actually a "Newspaper Volume"
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'refs': updated 'type' field ('Newspaper' => 'Newspaper Article'). Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableRefs . " SET type = 'Software' WHERE type RLIKE '^(Unsupported: )?Computer Program$'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'refs': updated 'type' field ('Computer Program' => 'Software'). Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableRefs . " SET type = REPLACE(type,'Unsupported: ','') WHERE type RLIKE '^Unsupported: (Abstract|Conference (Article|Volume)|Magazine Article|Manual|Miscellaneous|Newspaper Article|Patent|Report|Software)$'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'refs': updated 'type' field (removed 'Unsupported' label for all newly supported types). Affected rows"] = ($result ? $connection->affected_rows : 0);

		// Add new utilities to table 'depends'
		$values = "(NULL, 'pdftotext', 'true', NULL)";

		// First, check how many users are contained in table 'users':
		$query = "SELECT user_id, first_name, last_name FROM " . $tableUsers;
		$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
		$rowsFound = @ $result->num_rows;
		if ($rowsFound > 0) // If there were rows (= user IDs) found ...
		{
			while ($row = @ $result->fetch_array())
			{
				$values = "(NULL, " . $row['user_id'] . ", 'yes', 'yes', 'no', 'yes', '<:authors[2|+|++]:><:year:>', 'yes', 'transliterate', 'no', '<:authors[2| & | et al.]:>< :year:>< {:recordIdentifier:}>', NULL, 'author, title, publication, keywords, abstract')";
				$resultArray["Table 'user_options': inserted default options for user " . $row['user_id'] . " (" . $row['first_name'] . " " . $row['last_name'] . ")"] = insertIfNotExists(array("user_id" => $row['user_id']), $tableUserOptions, $values);

		// Disable the Browse view feature (which isn't done yet) for all users
		$query= "UPDATE " . $tableUserPermissions . " SET allow_browse_view = 'no'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'user_permissions': disabled the Browse view feature (which isn't done yet). Affected rows"] = ($result ? $connection->affected_rows : 0);

		// Enable the Export feature for anyone who's not logged in ('$userID = 0'):
		$query= "UPDATE " . $tableUserPermissions . " SET allow_export = 'yes', allow_batch_export = 'yes' WHERE user_id = 0";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'user_permissions': enabled the export feature for anyone who's not logged in. Affected rows"] = ($result ? $connection->affected_rows : 0);

		// Update table 'styles'
		$query = "UPDATE " . $tableStyles . " SET style_spec = REPLACE(style_spec,'cite_','styles/cite_') WHERE style_spec RLIKE '^cite_'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'styles': updated 'style_spec' field. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$values = "(NULL, 'Ann Glaciol', 'true', 'styles/cite_AnnGlaciol_JGlaciol.php', 'B010', '1')";
		$resultArray["Table 'styles': inserted style 'Ann Glaciol'"] = insertIfNotExists(array("style_name" => "Ann Glaciol"), $tableStyles, $values);


		$query = "UPDATE " . $tableStyles . " SET order_by = 'B010' WHERE style_name = 'Ann Glaciol'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'styles': updated 'Ann Glaciol' style. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableStyles . " SET order_by = 'B020' WHERE style_name = 'Deep Sea Res'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'styles': updated 'Deep Sea Res' style. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableStyles . " SET order_by = 'B030' WHERE style_name = 'J Glaciol'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'styles': updated 'J Glaciol' style. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableStyles . " SET order_by = 'B040' WHERE style_name = 'Mar Biol'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'styles': updated 'Mar Biol' style. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableStyles . " SET order_by = 'B050' WHERE style_name = 'MEPS'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'styles': updated 'MEPS' style. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableStyles . " SET order_by = 'B060' WHERE style_name = 'Polar Biol'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'styles': updated 'Polar Biol' style. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableStyles . " SET order_by = 'C010' WHERE style_name = 'Text Citation'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'styles': updated 'Text Citation' style. Affected rows"] = ($result ? $connection->affected_rows : 0);

		// Update table 'types'
		$query = "UPDATE " . $tableTypes . " SET order_by = '01' WHERE type_name = 'Journal Article'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'types': updated 'Journal Article' type. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableTypes . " SET order_by = '02' WHERE type_name = 'Abstract'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'types': updated 'Abstract' type. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableTypes . " SET order_by = '03' WHERE type_name = 'Book Chapter'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'types': updated 'Book Chapter' type. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableTypes . " SET order_by = '04' WHERE type_name = 'Book Whole'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'types': updated 'Book Whole' type. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableTypes . " SET order_by = '05' WHERE type_name = 'Conference Article'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'types': updated 'Conference Article' type. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableTypes . " SET order_by = '06' WHERE type_name = 'Conference Volume'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'types': updated 'Conference Volume' type. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableTypes . " SET order_by = '07' WHERE type_name = 'Journal'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'types': updated 'Journal' type. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableTypes . " SET order_by = '08' WHERE type_name = 'Magazine Article'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'types': updated 'Magazine Article' type. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableTypes . " SET order_by = '09' WHERE type_name = 'Manual'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'types': updated 'Manual' type. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableTypes . " SET order_by = '10' WHERE type_name = 'Manuscript'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'types': updated 'Manuscript' type. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableTypes . " SET order_by = '11' WHERE type_name = 'Map'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'types': updated 'Map' type. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableTypes . " SET order_by = '12' WHERE type_name = 'Miscellaneous'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'types': updated 'Miscellaneous' type. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableTypes . " SET order_by = '13' WHERE type_name = 'Newspaper Article'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'types': updated 'Newspaper Article' type. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableTypes . " SET order_by = '14' WHERE type_name = 'Patent'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'types': updated 'Patent' type. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableTypes . " SET order_by = '15' WHERE type_name = 'Report'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'types': updated 'Report' type. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableTypes . " SET order_by = '16' WHERE type_name = 'Software'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'types': updated 'Software' type. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$values = "(NULL, 'Abstract', 'true', 2, '02')";
		$resultArray["Table 'types': inserted type 'Abstract'"] = insertIfNotExists(array("type_name" => "Abstract"), $tableTypes, $values);

		// Enable disabled localizations
		$query = "UPDATE " . $tableLanguages . " SET language_enabled = 'true' WHERE language_name = 'de'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'languages': enabled German language option. Affected rows"] = ($result ? $connection->affected_rows : 0);

		// Alter table specification for table 'formats'
		$query = "ALTER table " . $tableFormats . " MODIFY format_type enum('export','import','cite') NOT NULL default 'export'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': altered table specification. Affected rows"] = ($result ? $connection->affected_rows : 0);

		// Update existing formats in table 'formats'
		$query = "UPDATE " . $tableFormats . " SET format_name = 'BibTeX' WHERE format_name = 'Bibtex'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': renamed format name 'Bibtex' to 'BibTeX'. Affected rows"] = ($result ? $connection->affected_rows : 0);

		// Update existing import formats in table 'formats'
		$query = "UPDATE " . $tableFormats . " SET format_spec = 'bibutils/import_bib2refbase.php', order_by = 'A010' WHERE format_name = 'BibTeX' AND format_type = 'import'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'BibTeX' import format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET order_by = 'A020' WHERE format_name = 'Copac' AND format_type = 'import'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'Copac' import format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET order_by = 'A030' WHERE format_name = 'CSA' AND format_type = 'import'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'CSA' import format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET format_spec = 'bibutils/import_end2refbase.php', order_by = 'A040' WHERE format_name = 'Endnote' AND format_type = 'import'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'Endnote' import format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET order_by = 'A045' WHERE format_name = 'Endnote XML' AND format_type = 'import'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'Endnote XML' import format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET format_name = 'ISI', format_spec = 'import_isi2refbase.php', order_by = 'A050', depends_id = 1 WHERE (format_name = 'RIS (ISI)' OR format_name = 'ISI') AND format_type = 'import'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'ISI' import format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET order_by = 'A060' WHERE format_name = 'Pubmed Medline' AND format_type = 'import'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'Pubmed Medline' import format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET format_spec = 'bibutils/import_med2refbase.php', order_by = 'A065' WHERE format_name = 'Pubmed XML' AND format_type = 'import'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'Pubmed XML' import format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET order_by = 'A070' WHERE format_name = 'RefWorks' AND format_type = 'import'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'RefWorks' import format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET format_spec = 'import_ris2refbase.php', order_by = 'A080', depends_id = 1 WHERE format_name = 'RIS' AND format_type = 'import'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'RIS' import format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET order_by = 'A090' WHERE format_name = 'SciFinder' AND format_type = 'import'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'SciFinder' import format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET order_by = 'A100' WHERE format_name = 'Text (Tab-Delimited)' AND format_type = 'import'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'Text (Tab-Delimited)' import format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET order_by = 'A150' WHERE format_name = 'CrossRef XML' AND format_type = 'import'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'CrossRef XML' import format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET format_spec = 'bibutils/import_modsxml2refbase.php', order_by = 'A160', depends_id = 2 WHERE format_name = 'MODS XML' AND format_type = 'import'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'MODS XML' import format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET order_by = 'A170' WHERE format_name = 'OAI_DC XML' AND format_type = 'import'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'OAI_DC XML' import format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		// Add new import formats in table 'formats'
		$values = "(NULL, 'Copac', 'import', 'true', 'bibutils/import_copac2refbase.php', 'A020', 2)";

		// Update existing export formats in table 'formats'
		$query = "UPDATE " . $tableFormats . " SET order_by = 'B010' WHERE format_name = 'BibTeX' AND format_type = 'export'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'BibTeX' export format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET order_by = 'B040' WHERE format_name = 'Endnote' AND format_type = 'export'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'Endnote' export format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET order_by = 'B050' WHERE format_name = 'ISI' AND format_type = 'export'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'ISI' export format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET order_by = 'B080' WHERE format_name = 'RIS' AND format_type = 'export'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'RIS' export format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET order_by = 'B105' WHERE format_name = 'Text (CSV)' AND format_type = 'export'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'Text (CSV)' export format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET format_name = 'Atom XML', format_enabled = 'true', format_spec ='export_atomxml.php', order_by = 'B140' WHERE format_name = 'OpenSearch RSS' AND format_type = 'export'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'OpenSearch RSS' export format, and renamed it to 'Atom XML'. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET order_by = 'B160' WHERE format_name = 'MODS XML' AND format_type = 'export'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'MODS XML' export format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET order_by = 'B170' WHERE format_name = 'OAI_DC XML' AND format_type = 'export'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'OAI_DC XML' export format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET order_by = 'B180' WHERE format_name = 'ODF XML' AND format_type = 'export'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'ODF XML' export format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET format_name = 'SRW_MODS XML', order_by = 'B195' WHERE format_name = 'SRW XML' AND format_type = 'export'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'SRW XML' export format, and renamed it to 'SRW_MODS XML'. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET order_by = 'B200' WHERE format_name = 'Word XML' AND format_type = 'export'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'Word XML' export format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		// Add new export formats in table 'formats'
		$values = "(NULL, 'ADS', 'export', 'true', 'bibutils/export_xml2ads.php', 'B005', 2)";

		// Update existing citation formats in table 'formats'
		$query = "UPDATE " . $tableFormats . " SET order_by = 'C010' WHERE format_name = 'html' AND format_type = 'cite'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'html' citation format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET order_by = 'C020' WHERE format_name = 'RTF' AND format_type = 'cite'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'RTF' citation format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET order_by = 'C030' WHERE format_name = 'PDF' AND format_type = 'cite'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'PDF' citation format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET order_by = 'C040' WHERE format_name = 'LaTeX' AND format_type = 'cite'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'LaTeX' citation format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET order_by = 'C045' WHERE format_name = 'LaTeX .bbl' AND format_type = 'cite'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'LaTeX .bbl' citation format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET order_by = 'C050' WHERE format_name = 'Markdown' AND format_type = 'cite'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'Markdown' citation format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		$query = "UPDATE " . $tableFormats . " SET order_by = 'C060' WHERE format_name = 'ASCII' AND format_type = 'cite'";
		$result = queryMySQLDatabase($query);
		$resultArray["Table 'formats': updated 'ASCII' citation format. Affected rows"] = ($result ? $connection->affected_rows : 0);

		// Add new citation formats in table 'formats'
		$values = "(NULL, 'html', 'cite', 'true', 'formats/cite_html.php', 'C010', 1)";

		$formatIDArray = array();
		$query = "SELECT format_id, format_name FROM " . $tableFormats . " WHERE (format_name RLIKE '^(BibTeX|Endnote|RIS)$' AND format_type = 'export')";
		$result = queryMySQLDatabase($query);
		$rowsFound = @ $result->num_rows;
		if ($rowsFound > 0)
		{
			while ($row = @ $result->fetch_array())
				$formatIDArray[$row['format_id']] = $row['format_name'];
		}


		$formatIDArray = array();
		$query = "SELECT format_id, format_name FROM " . $tableFormats . " WHERE (format_name RLIKE '^(ISI|ODF XML|Word XML)$' AND format_type = 'export') OR (format_name RLIKE '^(html|RTF|PDF|LaTeX)$' AND format_type = 'cite')";
		$result = queryMySQLDatabase($query);
		$rowsFound = @ $result->num_rows;
		if ($rowsFound > 0)
		{
			while ($row = @ $result->fetch_array())
				$formatIDArray[$row['format_id']] = $row['format_name'];
		}


		$styleIDArray = array();
		$query = "SELECT style_id, style_name FROM " . $tableStyles . " WHERE style_name RLIKE '^(AMA|APA|Chicago|Harvard( [0-9]+)?|J Glaciol|MLA|Vancouver)$'";
		$result = queryMySQLDatabase($query);
		$rowsFound = @ $result->num_rows;
		if ($rowsFound > 0)
		{
			while ($row = @ $result->fetch_array())
				$styleIDArray[$row['style_id']] = $row['style_name'];
		}


		$typeIDArray = array();
		$query = "SELECT type_id, type_name FROM " . $tableTypes . " WHERE type_name RLIKE '^(Abstract|Conference Article|Conference Volume|Magazine Article|Manual|Miscellaneous|Newspaper Article|Patent|Report|Software)$'";
		$result = queryMySQLDatabase($query);
		$rowsFound = @ $result->num_rows;
		if ($rowsFound > 0)
		{
			while ($row = @ $result->fetch_array())
				$typeIDArray[$row['type_id']] = $row['type_name'];
		}


		// First, check how many users are contained in table 'users':
		$query = "SELECT user_id, first_name, last_name FROM " . $tableUsers;
		$result = queryMySQLDatabase($query);
		$rowsFound = @ $result->num_rows;
		if ($rowsFound > 0) // If there were rows (= user IDs) found ...
		{
			while ($row = @ $result->fetch_array())
			{
				foreach ($formatIDArray as $formatID => $formatName)
				{

Lines 170-176 Link Here

(-)a/user_details.php (-1 / +1 lines)
170	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'	170	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
171		171
172	// (3b) EXTRACT results:	172	// (3b) EXTRACT results:
173	$row = mysql_fetch_array($result); //fetch the current row into the array $row	173	$row = $result->fetch_array(); //fetch the current row into the array $row
174		174
175	// If the admin is logged in AND the displayed user data are NOT his own, we overwrite the default header message:	175	// If the admin is logged in AND the displayed user data are NOT his own, we overwrite the default header message:
176	// (Since the admin is allowed to view and edit account data from other users, we have to provide a dynamic header message in that case)	176	// (Since the admin is allowed to view and edit account data from other users, we have to provide a dynamic header message in that case)




		$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'

		// (4) EXTRACT results:
		if ($result->num_rows == 1) // Interpret query result: Do we have exactly one row?
		{
			$foundUser = true; // then we have found the user
			$row = $result->fetch_array(); // fetch the one row into the array '$row'
		}
		else
			$foundUser = false;

			// Now we need to get the user's first name and last name (e.g., in order to display them within the login welcome message)
			$query = "SELECT user_id, first_name, last_name, abbrev_institution, language, last_login FROM $tableUsers WHERE user_id = " . quote_smart($userID); // CONSTRUCT SQL QUERY
			$result = queryMySQLDatabase($query); // RUN the query on the database through the connection (function 'queryMySQLDatabase()' is defined in 'include.inc.php')
			$row2 = $result->fetch_array(); // EXTRACT results: fetch the one row into the array '$row2'

			// Save the fetched user details to the session file:


Lines 170-176 Link Here

(-)a/user_options.php (-1 / +1 lines)
170	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'	170	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
171		171
172	// (3b) EXTRACT results:	172	// (3b) EXTRACT results:
173	$row = mysql_fetch_array($result); // fetch the current row into the array $row	173	$row = $result->fetch_array(); // fetch the current row into the array $row
174		174
175	// If the admin is logged in AND the displayed user data are NOT his own, we overwrite the default header message:	175	// If the admin is logged in AND the displayed user data are NOT his own, we overwrite the default header message:
176	// (Since the admin is allowed to view and edit account data from other users, we have to provide a dynamic header message in that case)	176	// (Since the admin is allowed to view and edit account data from other users, we have to provide a dynamic header message in that case)

Lines 405-411 Link Here

(-)a/user_options_modify.php (-1 / +1 lines)
405	// RUN the query on the database through the connection:	405	// RUN the query on the database through the connection:
406	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'	406	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
407		407
408	if (mysql_num_rows($result) == 1) // if there's already an existing user_data entry, we perform an UPDATE action:	408	if ($result->num_rows == 1) // if there's already an existing user_data entry, we perform an UPDATE action:
409	$queryArray[] = "UPDATE $tableUserOptions SET "	409	$queryArray[] = "UPDATE $tableUserOptions SET "
410	. "export_cite_keys = " . quote_smart($formVars["export_cite_keys"])	410	. "export_cite_keys = " . quote_smart($formVars["export_cite_keys"])
411	. ", autogenerate_cite_keys = " . quote_smart($formVars["autogenerate_cite_keys"])	411	. ", autogenerate_cite_keys = " . quote_smart($formVars["autogenerate_cite_keys"])




		$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'

		// (4) EXTRACT results (since 'user_id' is the unique primary key for the 'users' table, there will be only one matching row)
		$row = @ $result->fetch_array();

		// Build the correct header message:
		if (!isset($_SESSION['HeaderString'])) // if there's no saved message


			echo "\n\t\t<tr>\n\t\t\t<td align=\"left\"><b>Account Details:</b></td>";

			if ($result->num_rows == 1) // If there's a user associated with this user ID
			{
				// Add edit/delete button:
				echo "\n\t\t\t<td align=\"left\">";

				echo "\n\t\t<tr>\n\t\t\t<td align=\"left\"><b>Display Options:</b></td>"
				   . "\n\t\t\t<td align=\"right\">";

				if (($result->num_rows == 1) OR ($userID == 0)) // If there's a user associated with this user ID (or if we're supposed to display options/permissions for anyone who isn't logged in)
					echo "<a href=\"user_options.php?userID=" . $userID . "\"><img src=\"img/options.gif\" alt=\"" . $loc["options"] . "\" title=\"" . $loc["LinkTitle_EditOptions"] . "\" width=\"11\" height=\"17\" hspace=\"0\" border=\"0\"></a>";

				echo "</td>\n\t\t</tr>";

				echo "\n\t\t<tr valign=\"top\">"
				   . "\n\t\t\t<td>Use language:</td>";

				if ($result->num_rows == 1) // If there's a user associated with this user ID
					echo "\n\t\t\t<td>\n\t\t\t\t<ul>\n\t\t\t\t\t<li>" . $row["language"] . "</li>\n\t\t\t\t</ul>\n\t\t\t</td>";
				else // no user exists with this user ID
					echo "\n\t\t\t<td>\n\t\t\t\t<ul>\n\t\t\t\t\t<li>" . $defaultLanguage . "</li>\n\t\t\t\t</ul>\n\t\t\t</td>";

					echo "\n\t\t<tr>\n\t\t\t<td align=\"left\"><b>User Permissions:</b></td>"
					   . "\n\t\t\t<td align=\"right\">";

					if (($result->num_rows == 1) OR ($userID == 0)) // If there's a user associated with this user ID (or if we're supposed to display options/permissions for anyone who isn't logged in)
						echo "<a href=\"user_options.php?userID=" . $userID . "#permissions\"><img src=\"img/options.gif\" alt=\"" . $loc["permissions"] . "\" title=\"" . $loc["LinkTitle_EditPermissions"] . "\" width=\"11\" height=\"17\" hspace=\"0\" border=\"0\"></a>";

					echo "</td>\n\t\t</tr>";




			// (3) RUN the query on the database through the connection:
			$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'

			if ($result->num_rows == 1) // (4) Interpret query result: Is it taken?
				$errors["email"] = "A user already exists with this email address as login name.\n\t\t<br>\n\t\tPlease enter a different one:";
		}
	}

		// (3a) RUN the query on the database through the connection:
		$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'

		$row = $result->fetch_array(); // (3b) EXTRACT results: fetch the current row into the array $row

		// 1) Mail feedback to user, i.e., send the person who wants to be added as new user a notification email:
		$emailRecipient = $formVars["firstName"] . " " . $formVars["lastName"] . " <" . $formVars["email"] . ">";

	elseif ((!isset($_SESSION['loginEmail']) && ($addNewUsers == "everyone") && ($_REQUEST['userID'] == "")) | (isset($_SESSION['loginEmail']) && ($loginEmail == $adminLoginEmail) && ($_REQUEST['userID'] == ""))) // -> perform an insert:
	{
		// Get the user id that was created
		$userID = @ $connection->insert_id;

		// Use the first two characters of the email as a salt for the password
		$salt = substr($formVars["email"], 0, 2);

			// get the 'format_id' for the record entry in table 'formats' whose 'format_name' matches that in '$defaultUserExportFormats' (defined in 'ini.inc.php'):
			$query = "SELECT format_id FROM $tableFormats WHERE format_name = " . quote_smart($defaultUserExportFormat) . " AND format_type = 'export'";
			$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
			$row = $result->fetch_array();

			// Insert a row with the found format ID for this new user into the 'user_formats' table:
			$queryArray[] = "INSERT INTO $tableUserFormats VALUES (NULL, " . quote_smart($row["format_id"]) . ", " . quote_smart($userID) . ", \"true\")";

			// get the 'format_id' for the record entry in table 'formats' whose 'format_name' matches that in '$defaultUserCiteFormats' (defined in 'ini.inc.php'):
			$query = "SELECT format_id FROM $tableFormats WHERE format_name = " . quote_smart($defaultUserCiteFormat) . " AND format_type = 'cite'";
			$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
			$row = $result->fetch_array();

			// Insert a row with the found format ID for this new user into the 'user_formats' table:
			$queryArray[] = "INSERT INTO $tableUserFormats VALUES (NULL, " . quote_smart($row["format_id"]) . ", " . quote_smart($userID) . ", \"true\")";

			// get the 'style_id' for the record entry in table 'styles' whose 'style_name' matches that in '$defaultUserStyles' (defined in 'ini.inc.php'):
			$query = "SELECT style_id FROM $tableStyles WHERE style_name = " . quote_smart($defaultUserStyle);
			$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
			$row = $result->fetch_array();

			// Insert a row with the found style ID for this new user into the 'user_styles' table:
			$queryArray[] = "INSERT INTO $tableUserStyles VALUES (NULL, " . quote_smart($row["style_id"]) . ", " . quote_smart($userID) . ", \"true\")";

			// get the 'type_id' for the record entry in table 'types' whose 'type_name' matches that in '$defaultUserTypes' (defined in 'ini.inc.php'):
			$query = "SELECT type_id FROM $tableTypes WHERE type_name = " . quote_smart($defaultUserType);
			$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
			$row = $result->fetch_array();

			// Insert a row with the found type ID for this new user into the 'user_types' table:
			$queryArray[] = "INSERT INTO $tableUserTypes VALUES (NULL, " . quote_smart($row["type_id"]) . ", " . quote_smart($userID) . ", \"true\")";




	$queryURL = rawurlencode($query); // URL encode SQL query

	// First, find out how many rows are available:
	$rowsFound = @ $result->num_rows;
	if ($rowsFound > 0) // If there were rows found ...
		{
			// ... setup variables in order to facilitate "previous" & "next" browsing:

			$nextOffset = $rowOffset + $showRows;

			// d) Seek to the current offset
			$result->data_seek($rowOffset);
		}
	else // set variables to zero in order to prevent 'Undefined variable...' messages when nothing was found ('$rowsFound = 0'):
		{

			$CounterMax = "0";

			// count the number of fields
			$fieldsFound = $result->field_count;
			// hide those last columns that were added by the script and not by the user
			$fieldsToDisplay = $fieldsFound-(1+$CounterMax); // (1+$CounterMax) -> $CounterMax is increased by 1 in order to hide the user_id column (which was added to make the checkbox work)


        echo "</tr>";

			// BEGIN RESULTS DATA COLUMNS --------------
			for ($rowCounter=0; (($rowCounter < $showRows) && ($row = @ $result->fetch_array())); $rowCounter++)
			{
				if (is_integer($rowCounter / 2)) // if we currently are at an even number of rows
					$rowClass = "even";

Return to bug 603988

Lines 380-393 Link Here

(-)a/install.php (-14 / +5 lines)
380	// If we made it here, then the data is considered valid!	380	// If we made it here, then the data is considered valid!
381		381
382	// (1) Open the database connection and use the mysql database:	382	// (1) Open the database connection and use the mysql database:
383	if (!($connection = @ mysql_connect($hostName,$adminUserName,$adminPassword)))	383	if (!($connection = @ new mysqli($hostName,$adminUserName,$adminPassword,$adminDatabaseName)))
384	if (mysql_errno() != 0) // this works around a stupid(?) behaviour of the Roxen webserver that returns 'errno: 0' on success! ?:-(
385	showErrorMsg("The following error occurred while trying to connect to the host:", "");	384	showErrorMsg("The following error occurred while trying to connect to the host:", "");
386		385
387	if (!(mysql_select_db($adminDatabaseName, $connection)))
388	if (mysql_errno() != 0) // this works around a stupid(?) behaviour of the Roxen webserver that returns 'errno: 0' on success! ?:-(
389	showErrorMsg("The following error occurred while trying to connect to the database:", "");
390
391		386
392	// First, check if we're a dealing with MySQL version 4.1.x or greater:	387	// First, check if we're a dealing with MySQL version 4.1.x or greater:
393	// (MySQL 4.1.x is required if the refbase MySQL database/tables shall be installed using Unicode/UTF-8 as default character set)	388	// (MySQL 4.1.x is required if the refbase MySQL database/tables shall be installed using Unicode/UTF-8 as default character set)
Lines 417-428 Link Here
417	$queryUpdateDependsTable = "UPDATE " . $databaseName . "." . $tableDepends . " SET depends_enabled = \"false\" WHERE depends_external = \"bibutils\""; // disable Bibutils functionality	412	$queryUpdateDependsTable = "UPDATE " . $databaseName . "." . $tableDepends . " SET depends_enabled = \"false\" WHERE depends_external = \"bibutils\""; // disable Bibutils functionality
418		413
419	// (2) Run the INSTALL queries on the mysql database through the connection:	414	// (2) Run the INSTALL queries on the mysql database through the connection:
420	if (!($result = @ mysql_query ($queryGrantStatement, $connection)))	415	if (!($result = @ $connection->query ($queryGrantStatement)))
421	if (mysql_errno() != 0) // this works around a stupid(?) behaviour of the Roxen webserver that returns 'errno: 0' on success! ?:-(
422	showErrorMsg("The following error occurred while trying to query the database:", "");	416	showErrorMsg("The following error occurred while trying to query the database:", "");
423		417
424	if (!($result = @ mysql_query ($queryCreateDB, $connection)))	418	if (!($result = @ $connection->query ($queryCreateDB)))
425	if (mysql_errno() != 0) // this works around a stupid(?) behaviour of the Roxen webserver that returns 'errno: 0' on success! ?:-(
426	showErrorMsg("The following error occurred while trying to query the database:", "");	419	showErrorMsg("The following error occurred while trying to query the database:", "");
427		420
428	// IMPORT the literature database structure from file:	421	// IMPORT the literature database structure from file:
Lines 436-448 Link Here
436	// stderr to stdout, which you can then easily print using something like print `shellcommand 2>&1`.	429	// stderr to stdout, which you can then easily print using something like print `shellcommand 2>&1`.
437		430
438	// run the UPDATE query on the depends table of the (just imported) literature database:	431	// run the UPDATE query on the depends table of the (just imported) literature database:
439	if (!($result = @ mysql_query ($queryUpdateDependsTable, $connection)))	432	if (!($result = @ $connection->query ($queryUpdateDependsTable)))
440	if (mysql_errno() != 0) // this works around a stupid(?) behaviour of the Roxen webserver that returns 'errno: 0' on success! ?:-(
441	showErrorMsg("The following error occurred while trying to query the database:", "");	433	showErrorMsg("The following error occurred while trying to query the database:", "");
442		434
443	// (5) Close the database connection:	435	// (5) Close the database connection:
444	if (!(mysql_close($connection)))	436	if (!($connection->close()))
445	if (mysql_errno() != 0) // this works around a stupid(?) behaviour of the Roxen webserver that returns 'errno: 0' on success! ?:-(
446	showErrorMsg("The following error occurred while trying to disconnect from the database:", "");	437	showErrorMsg("The following error occurred while trying to disconnect from the database:", "");
447		438
448	$resultLines = ""; // initialize variable	439	$resultLines = ""; // initialize variable

Lines 81-98 Link Here

(-)a/contrib/mediawiki/refbase.php (-5 / +4 lines)
81	"/ +- +/" => " – "	81	"/ +- +/" => " – "
82	);	82	);
83		83
84	$link = mysql_connect($hostName, $username, $password);	84	$link = new mysqli($hostName, $username, $password, $databaseName);
85	if (! $link)	85	if (! $link)
86	die("Couldn't connect to MySQL");	86	die("Couldn't connect to MySQL");
87	mysql_select_db($databaseName, $link) or die("Couldn't open $db: ".mysql_error());
88		87
89	//select the new updated values	88	//select the new updated values
90	$result = mysql_query( "SELECT type, author, title, year, publication, volume, issue, pages, publisher, place, language, issn, doi FROM $tableRefs where serial=$input" )	89	$result = $link->query( "SELECT type, author, title, year, publication, volume, issue, pages, publisher, place, language, issn, doi FROM $tableRefs where serial=$input" )
91	or die("SELECT Error: ".mysql_error());	90	or die("SELECT Error: ".$link->error);
92		91
93	$cite = "";	92	$cite = "";
94		93
95	while ($row = mysql_fetch_array($result)) {	94	while ($row = $result->fetch_array()) {
96	if ($row["type"]=="Journal Article"){	95	if ($row["type"]=="Journal Article"){
97	$cite .= "{{cite_journal\|url=$databaseBaseURL"."show.php?record=$input\|";	96	$cite .= "{{cite_journal\|url=$databaseBaseURL"."show.php?record=$input\|";
98	if(!empty($row["author"])){	97	if(!empty($row["author"])){

Lines 64-78 Link Here

(-)a/includes/install.inc.php (-11 / +4 lines)
64	global $connection;	64	global $connection;
65		65
66	// Establish a new connection that has admin permissions	66	// Establish a new connection that has admin permissions
67	// (1) OPEN the database connection:	67	if (!($connection = @ new mysqli($hostName, $adminUserName, $adminPassword, $databaseName)))
68	if (!($connection = @ mysql_connect($hostName, $adminUserName, $adminPassword)))
69	if (mysql_errno() != 0) // this works around a stupid(?) behaviour of the Roxen webserver that returns 'errno: 0' on success! ?:-(
70	showErrorMsg("The following error occurred while trying to connect to the host:", "");	68	showErrorMsg("The following error occurred while trying to connect to the host:", "");
71
72	// (2) SELECT the database:
73	if (!(mysql_select_db($databaseName, $connection)))
74	if (mysql_errno() != 0) // this works around a stupid(?) behaviour of the Roxen webserver that returns 'errno: 0' on success! ?:-(
75	showErrorMsg("The following error occurred while trying to connect to the database:", "");
76	}	69	}
77		70
78	// --------------------------------------------------------------------	71	// --------------------------------------------------------------------
Lines 104-110 Link Here
104		97
105	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'	98	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
106		99
107	$rowsFound = @ mysql_num_rows($result);	100	$rowsFound = @ $result->num_rows;
108	if ($rowsFound == 0)	101	if ($rowsFound == 0)
109	{	102	{
110	$query = "INSERT INTO " . $table . " VALUES " . $values;	103	$query = "INSERT INTO " . $table . " VALUES " . $values;
Lines 133-139 Link Here
133	$queryFields = "SHOW FIELDS FROM " . $table;	126	$queryFields = "SHOW FIELDS FROM " . $table;
134	$result = queryMySQLDatabase($queryFields); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'	127	$result = queryMySQLDatabase($queryFields); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
135		128
136	while ($row = @ mysql_fetch_array($result)) // for all fields found, check if any of their names matches the field name that we want to add	129	while ($row = @ $result->fetch_array()) // for all fields found, check if any of their names matches the field name that we want to add
137	if ($row["Field"] == $column)	130	if ($row["Field"] == $column)
138	$present = true;	131	$present = true;
139		132
Lines 165-171 Link Here
165	$queryFields = "SHOW TABLES";	158	$queryFields = "SHOW TABLES";
166	$result = queryMySQLDatabase($queryFields); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'	159	$result = queryMySQLDatabase($queryFields); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
167		160
168	while ($row = @ mysql_fetch_array($result)) // for all tables found, check if any of their names matches the table name that we want to add	161	while ($row = @ $result->fetch_array()) // for all tables found, check if any of their names matches the table name that we want to add
169	if ($row[0] == $table)	162	if ($row[0] == $table)
170	$present = true;	163	$present = true;
171		164

Lines 448-454 Link Here

(-)a/modify.php (-3 / +3 lines)
448	$queryFile = "SELECT file FROM $tableRefs WHERE serial = " . quote_smart($serialNo);	448	$queryFile = "SELECT file FROM $tableRefs WHERE serial = " . quote_smart($serialNo);
449		449
450	$result = queryMySQLDatabase($queryFile); // RUN the query on the database through the connection	450	$result = queryMySQLDatabase($queryFile); // RUN the query on the database through the connection
451	$row = @ mysql_fetch_array($result);	451	$row = @ $result->fetch_array();
452		452
453	$fileName = $row["file"];	453	$fileName = $row["file"];
454	}	454	}
Lines 947-953 Link Here
947	// (3) RUN the query on the database through the connection:	947	// (3) RUN the query on the database through the connection:
948	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'	948	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
949		949
950	if (mysql_num_rows($result) == 1) // if there's already an existing user_data entry, we perform an UPDATE action:	950	if ($result->num_rows == 1) // if there's already an existing user_data entry, we perform an UPDATE action:
951	$queryUserData = "UPDATE $tableUserData SET "	951	$queryUserData = "UPDATE $tableUserData SET "
952	. "marked = " . quote_smart($markedRadio) . ", "	952	. "marked = " . quote_smart($markedRadio) . ", "
953	. "copy = " . quote_smart($copyName) . ", "	953	. "copy = " . quote_smart($copyName) . ", "
Lines 1134-1140 Link Here
1134	$result = queryMySQLDatabase($queryRefs); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'	1134	$result = queryMySQLDatabase($queryRefs); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
1135		1135
1136	// Get the record id that was created	1136	// Get the record id that was created
1137	$serialNo = @ mysql_insert_id($connection); // find out the unique ID number of the newly created record (Note: this function should be called immediately after the	1137	$serialNo = @ $connection->insert_id; // find out the unique ID number of the newly created record (Note: this function should be called immediately after the
1138	// SQL INSERT statement! After any subsequent query it won't be possible to retrieve the auto_increment identifier value for THIS record!)	1138	// SQL INSERT statement! After any subsequent query it won't be possible to retrieve the auto_increment identifier value for THIS record!)
1139		1139
1140	$formVars['serialNo'] = $serialNo; // for '$recordAction = "add"' we update the original '$formVars' array element to ensure a correct serial number when generating the file name via the 'parsePlaceholderString()' function	1140	$formVars['serialNo'] = $serialNo; // for '$recordAction = "add"' we update the original '$formVars' array element to ensure a correct serial number when generating the file name via the 'parsePlaceholderString()' function

Lines 176-182 Link Here

(-)a/query_modify.php (-3 / +3 lines)
176		176
177	$result = queryMySQLDatabase($query); // RUN the query on the database through the connection (function 'queryMySQLDatabase()' is defined in 'include.inc.php')	177	$result = queryMySQLDatabase($query); // RUN the query on the database through the connection (function 'queryMySQLDatabase()' is defined in 'include.inc.php')
178		178
179	if (@ mysql_num_rows($result) > 0) // if there's already a saved query (belonging to this user) with exactly the same name	179	if (@ $result->num_rows > 0) // if there's already a saved query (belonging to this user) with exactly the same name
180	$errors["queryName"] = "You've got already a query with that name!<br>Please choose a different name:"; // the user's query name must be unique (since the query popup of the 'Recall My Query' form on the main page uses the query's name to recall a particular query)	180	$errors["queryName"] = "You've got already a query with that name!<br>Please choose a different name:"; // the user's query name must be unique (since the query popup of the 'Recall My Query' form on the main page uses the query's name to recall a particular query)
181	// note that we could allow for duplicate query names if the query popup on the main page would work with query IDs instead. However, from an interface design perspective, duplicate query names shouldn't be allowed anyhow. So we simply don't permit them.	181	// note that we could allow for duplicate query names if the query popup on the main page would work with query IDs instead. However, from an interface design perspective, duplicate query names shouldn't be allowed anyhow. So we simply don't permit them.
182	}	182	}
Lines 261-267 Link Here
261		261
262	if (preg_match("/^(edit\|delet)$/", $queryAction))	262	if (preg_match("/^(edit\|delet)$/", $queryAction))
263	{	263	{
264	$affectedRows = ($result ? mysql_affected_rows ($connection) : 0); // get the number of rows that were modified (or return 0 if an error occurred)	264	$affectedRows = ($result ? $connection->affected_rows : 0); // get the number of rows that were modified (or return 0 if an error occurred)
265		265
266	if ($affectedRows == 0) // no rows were affected by the update, i.e., the query must have been deleted in the meantime!	266	if ($affectedRows == 0) // no rows were affected by the update, i.e., the query must have been deleted in the meantime!
267	// NOTE: Previously, we did return "Warning_SavedQueryDoesNotExistAnymore": "This saved query does not exist anymore".	267	// NOTE: Previously, we did return "Warning_SavedQueryDoesNotExistAnymore": "This saved query does not exist anymore".
Lines 283-289 Link Here
283	}	283	}
284		284
285	elseif ($queryAction == "add") // Get the query id that was created:	285	elseif ($queryAction == "add") // Get the query id that was created:
286	$queryID = @ mysql_insert_id($connection); // find out the unique ID number of the newly created query (Note: this function should be called immediately after the	286	$queryID = @ $connection->insert_id; // find out the unique ID number of the newly created query (Note: this function should be called immediately after the
287	// SQL INSERT statement! After any subsequent query it won't be possible to retrieve the auto_increment identifier value for THIS record!)	287	// SQL INSERT statement! After any subsequent query it won't be possible to retrieve the auto_increment identifier value for THIS record!)
288		288
289	// update the 'userQueries' session variable:	289	// update the 'userQueries' session variable:

Lines 576-582 Link Here

(-)a/search.php (-11 / +11 lines)
576	if (($displayType == "Export"))	576	if (($displayType == "Export"))
577	{	577	{
578	// Find out how many rows are available:	578	// Find out how many rows are available:
579	$rowsFound = @ mysql_num_rows($result); // for all other display types, the '$rowsFound' variable is set within function 'seekInMySQLResultsToOffset()' (see below)	579	$rowsFound = @ $result->num_rows; // for all other display types, the '$rowsFound' variable is set within function 'seekInMySQLResultsToOffset()' (see below)
580	if ($rowsFound > 0) // If there were rows found ...	580	if ($rowsFound > 0) // If there were rows found ...
581	{	581	{
582	generateExport($result, $rowOffset, $showRows, $exportFormat, $exportType, $exportStylesheet, $displayType, $viewType, $userID); // export records using the export format specified in '$exportFormat'	582	generateExport($result, $rowOffset, $showRows, $exportFormat, $exportType, $exportStylesheet, $displayType, $viewType, $userID); // export records using the export format specified in '$exportFormat'
Lines 609-615 Link Here
609	$queryURL = rawurlencode($query); // URL encode SQL query	609	$queryURL = rawurlencode($query); // URL encode SQL query
610		610
611	if (!preg_match("/^SELECT/i", $query)) // for queries other than SELECT queries (e.g. UPDATE, DELETE or INSERT queries that were executed by the admin via use of 'sql_search.php')	611	if (!preg_match("/^SELECT/i", $query)) // for queries other than SELECT queries (e.g. UPDATE, DELETE or INSERT queries that were executed by the admin via use of 'sql_search.php')
612	$affectedRows = ($result ? mysql_affected_rows ($connection) : 0); // get the number of rows that were modified (or return 0 if an error occurred)	612	$affectedRows = ($result ? $connection->affected_rows : 0); // get the number of rows that were modified (or return 0 if an error occurred)
613		613
614	// If the previous query (which is stored in the 'oldQuery' session variable) is different	614	// If the previous query (which is stored in the 'oldQuery' session variable) is different
615	// from the current query, we append it to the 'queryHistory' session variable:	615	// from the current query, we append it to the 'queryHistory' session variable:
Lines 893-899 Link Here
893	$CounterMax = 0; // Otherwise don't hide any columns	893	$CounterMax = 0; // Otherwise don't hide any columns
894		894
895	// count the number of fields	895	// count the number of fields
896	$fieldsFound = mysql_num_fields($result);	896	$fieldsFound = $result->field_count;
897	if ($displayType != "Browse")	897	if ($displayType != "Browse")
898	{	898	{
899	// hide those last columns that were added by the script and not by the user	899	// hide those last columns that were added by the script and not by the user
Lines 1059-1065 Link Here
1059	// BEGIN RESULTS DATA COLUMNS --------------	1059	// BEGIN RESULTS DATA COLUMNS --------------
1060	// Fetch one page of results (or less if on the last page)	1060	// Fetch one page of results (or less if on the last page)
1061	// (i.e., upto the limit specified in $showRows) fetch a row into the $row array and ...	1061	// (i.e., upto the limit specified in $showRows) fetch a row into the $row array and ...
1062	for ($rowCounter=0; (($rowCounter < $showRows) && ($row = @ mysql_fetch_array($result))); $rowCounter++)	1062	for ($rowCounter=0; (($rowCounter < $showRows) && ($row = @ $result->fetch_array())); $rowCounter++)
1063	{	1063	{
1064	if (is_integer($rowCounter / 2)) // if we currently are at an even number of rows	1064	if (is_integer($rowCounter / 2)) // if we currently are at an even number of rows
1065	$rowClass = "even";	1065	$rowClass = "even";
Lines 1276-1282 Link Here
1276	$CounterMax = ($CounterMax + 1); // ...we'll also need to hide the 'related' column (which isn't displayed in Details view but is only used to generate a link to related records)	1276	$CounterMax = ($CounterMax + 1); // ...we'll also need to hide the 'related' column (which isn't displayed in Details view but is only used to generate a link to related records)
1277		1277
1278	// count the number of fields	1278	// count the number of fields
1279	$fieldsFound = mysql_num_fields($result);	1279	$fieldsFound = $result->field_count;
1280	// hide those last columns that were added by the script and not by the user	1280	// hide those last columns that were added by the script and not by the user
1281	$fieldsToDisplay = $fieldsFound-(2+$CounterMax+$addCounterMax); // (2+$CounterMax) -> $CounterMax is increased by 2 in order to hide the 'orig_record' & 'serial' columns (which were added to make checkboxes & dup warning work)	1281	$fieldsToDisplay = $fieldsFound-(2+$CounterMax+$addCounterMax); // (2+$CounterMax) -> $CounterMax is increased by 2 in order to hide the 'orig_record' & 'serial' columns (which were added to make checkboxes & dup warning work)
1282	// $addCounterMax is set to 1 when the field given in '$fileVisibilityException[0]' (defined in 'ini.inc.php') was added to the query, otherwise '$addCounterMax = 0'	1282	// $addCounterMax is set to 1 when the field given in '$fileVisibilityException[0]' (defined in 'ini.inc.php') was added to the query, otherwise '$addCounterMax = 0'
Lines 1436-1442 Link Here
1436	// BEGIN RESULTS DATA COLUMNS --------------	1436	// BEGIN RESULTS DATA COLUMNS --------------
1437	// Fetch one page of results (or less if on the last page)	1437	// Fetch one page of results (or less if on the last page)
1438	// (i.e., upto the limit specified in $showRows) fetch a row into the $row array and ...	1438	// (i.e., upto the limit specified in $showRows) fetch a row into the $row array and ...
1439	for ($rowCounter=0; (($rowCounter < $showRows) && ($row = @ mysql_fetch_array($result))); $rowCounter++)	1439	for ($rowCounter=0; (($rowCounter < $showRows) && ($row = @ $result->fetch_array())); $rowCounter++)
1440	{	1440	{
1441	// ... print out each of the attributes	1441	// ... print out each of the attributes
1442	// in that row as a separate TR (Table Row)	1442	// in that row as a separate TR (Table Row)
Lines 2359-2374 Link Here
2359	$recordSerialsArray = array();	2359	$recordSerialsArray = array();
2360	$duplicateRecordSerialsArray = array();	2360	$duplicateRecordSerialsArray = array();
2361		2361
2362	$rowsFound = @ mysql_num_rows($result);	2362	$rowsFound = @ $result->num_rows;
2363		2363
2364	// Identify any records with matching field data:	2364	// Identify any records with matching field data:
2365	if ($rowsFound > 0) // if there were rows found ...	2365	if ($rowsFound > 0) // if there were rows found ...
2366	{	2366	{
2367	// Count the number of fields:	2367	// Count the number of fields:
2368	$fieldsFound = mysql_num_fields($result);	2368	$fieldsFound = $result->field_count;
2369		2369
2370	// Loop over each row in the result set:	2370	// Loop over each row in the result set:
2371	for ($rowCounter=0; $row = @ mysql_fetch_array($result); $rowCounter++)	2371	for ($rowCounter=0; $row = @ $result->fetch_array(); $rowCounter++)
2372	{	2372	{
2373	$recordIdentifier = ""; // make sure our buffer variable is empty	2373	$recordIdentifier = ""; // make sure our buffer variable is empty
2374		2374
Lines 5148-5157 Link Here
5148	// Check whether the extracted serial numbers and cite keys exist in the database:	5148	// Check whether the extracted serial numbers and cite keys exist in the database:
5149	$result = queryMySQLDatabase($query); // RUN the query on the database through the connection (function 'queryMySQLDatabase()' is defined in 'include.inc.php')	5149	$result = queryMySQLDatabase($query); // RUN the query on the database through the connection (function 'queryMySQLDatabase()' is defined in 'include.inc.php')
5150		5150
5151	if (@ mysql_num_rows($result) > 0) // if there were rows found ...	5151	if (@ $result->num_rows > 0) // if there were rows found ...
5152	{	5152	{
5153	// Loop over each row in the result set:	5153	// Loop over each row in the result set:
5154	for ($rowCounter=0; $row = @ mysql_fetch_array($result); $rowCounter++)	5154	for ($rowCounter=0; $row = @ $result->fetch_array(); $rowCounter++)
5155	{	5155	{
5156	if (!in_array($row["serial"], $foundRecordSerialsKeysArray) OR (!empty($row["cite_key"]) AND !in_array($row["cite_key"], $foundRecordSerialsKeysArray))) // if this record identifier hasn't been seen yet	5156	if (!in_array($row["serial"], $foundRecordSerialsKeysArray) OR (!empty($row["cite_key"]) AND !in_array($row["cite_key"], $foundRecordSerialsKeysArray))) // if this record identifier hasn't been seen yet
5157	{	5157	{

Lines 121-130 Link Here

(-)a/user_login.php (-3 / +3 lines)
121	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'	121	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
122		122
123	// (4) EXTRACT results:	123	// (4) EXTRACT results:
124	if (mysql_num_rows($result) == 1) // Interpret query result: Do we have exactly one row?	124	if ($result->num_rows == 1) // Interpret query result: Do we have exactly one row?
125	{	125	{
126	$foundUser = true; // then we have found the user	126	$foundUser = true; // then we have found the user
127	$row = mysql_fetch_array($result); // fetch the one row into the array '$row'	127	$row = $result->fetch_array(); // fetch the one row into the array '$row'
128	}	128	}
129	else	129	else
130	$foundUser = false;	130	$foundUser = false;
Lines 146-152 Link Here
146	// Now we need to get the user's first name and last name (e.g., in order to display them within the login welcome message)	146	// Now we need to get the user's first name and last name (e.g., in order to display them within the login welcome message)
147	$query = "SELECT user_id, first_name, last_name, abbrev_institution, language, last_login FROM $tableUsers WHERE user_id = " . quote_smart($userID); // CONSTRUCT SQL QUERY	147	$query = "SELECT user_id, first_name, last_name, abbrev_institution, language, last_login FROM $tableUsers WHERE user_id = " . quote_smart($userID); // CONSTRUCT SQL QUERY
148	$result = queryMySQLDatabase($query); // RUN the query on the database through the connection (function 'queryMySQLDatabase()' is defined in 'include.inc.php')	148	$result = queryMySQLDatabase($query); // RUN the query on the database through the connection (function 'queryMySQLDatabase()' is defined in 'include.inc.php')
149	$row2 = mysql_fetch_array($result); // EXTRACT results: fetch the one row into the array '$row2'	149	$row2 = $result->fetch_array(); // EXTRACT results: fetch the one row into the array '$row2'
150		150
151	// Save the fetched user details to the session file:	151	// Save the fetched user details to the session file:
152		152

Lines 238-244 Link Here

(-)a/user_receipt.php (-5 / +5 lines)
238	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'	238	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
239		239
240	// (4) EXTRACT results (since 'user_id' is the unique primary key for the 'users' table, there will be only one matching row)	240	// (4) EXTRACT results (since 'user_id' is the unique primary key for the 'users' table, there will be only one matching row)
241	$row = @ mysql_fetch_array($result);	241	$row = @ $result->fetch_array();
242		242
243	// Build the correct header message:	243	// Build the correct header message:
244	if (!isset($_SESSION['HeaderString'])) // if there's no saved message	244	if (!isset($_SESSION['HeaderString'])) // if there's no saved message
Lines 294-300 Link Here
294		294
295	echo "\n\t\t<tr>\n\t\t\t<td align=\"left\"><b>Account Details:</b></td>";	295	echo "\n\t\t<tr>\n\t\t\t<td align=\"left\"><b>Account Details:</b></td>";
296		296
297	if (mysql_num_rows($result) == 1) // If there's a user associated with this user ID	297	if ($result->num_rows == 1) // If there's a user associated with this user ID
298	{	298	{
299	// Add edit/delete button:	299	// Add edit/delete button:
300	echo "\n\t\t\t<td align=\"left\">";	300	echo "\n\t\t\t<td align=\"left\">";
Lines 404-410 Link Here
404	echo "\n\t\t<tr>\n\t\t\t<td align=\"left\"><b>Display Options:</b></td>"	404	echo "\n\t\t<tr>\n\t\t\t<td align=\"left\"><b>Display Options:</b></td>"
405	. "\n\t\t\t<td align=\"right\">";	405	. "\n\t\t\t<td align=\"right\">";
406		406
407	if ((mysql_num_rows($result) == 1) OR ($userID == 0)) // If there's a user associated with this user ID (or if we're supposed to display options/permissions for anyone who isn't logged in)	407	if (($result->num_rows == 1) OR ($userID == 0)) // If there's a user associated with this user ID (or if we're supposed to display options/permissions for anyone who isn't logged in)
408	echo "<a href=\"user_options.php?userID=" . $userID . "\"><img src=\"img/options.gif\" alt=\"" . $loc["options"] . "\" title=\"" . $loc["LinkTitle_EditOptions"] . "\" width=\"11\" height=\"17\" hspace=\"0\" border=\"0\"></a>";	408	echo "<a href=\"user_options.php?userID=" . $userID . "\"><img src=\"img/options.gif\" alt=\"" . $loc["options"] . "\" title=\"" . $loc["LinkTitle_EditOptions"] . "\" width=\"11\" height=\"17\" hspace=\"0\" border=\"0\"></a>";
409		409
410	echo "</td>\n\t\t</tr>";	410	echo "</td>\n\t\t</tr>";
Lines 413-419 Link Here
413	echo "\n\t\t<tr valign=\"top\">"	413	echo "\n\t\t<tr valign=\"top\">"
414	. "\n\t\t\t<td>Use language:</td>";	414	. "\n\t\t\t<td>Use language:</td>";
415		415
416	if (mysql_num_rows($result) == 1) // If there's a user associated with this user ID	416	if ($result->num_rows == 1) // If there's a user associated with this user ID
417	echo "\n\t\t\t<td>\n\t\t\t\t<ul>\n\t\t\t\t\t<li>" . $row["language"] . "</li>\n\t\t\t\t</ul>\n\t\t\t</td>";	417	echo "\n\t\t\t<td>\n\t\t\t\t<ul>\n\t\t\t\t\t<li>" . $row["language"] . "</li>\n\t\t\t\t</ul>\n\t\t\t</td>";
418	else // no user exists with this user ID	418	else // no user exists with this user ID
419	echo "\n\t\t\t<td>\n\t\t\t\t<ul>\n\t\t\t\t\t<li>" . $defaultLanguage . "</li>\n\t\t\t\t</ul>\n\t\t\t</td>";	419	echo "\n\t\t\t<td>\n\t\t\t\t<ul>\n\t\t\t\t\t<li>" . $defaultLanguage . "</li>\n\t\t\t\t</ul>\n\t\t\t</td>";
Lines 596-602 Link Here
596	echo "\n\t\t<tr>\n\t\t\t<td align=\"left\"><b>User Permissions:</b></td>"	596	echo "\n\t\t<tr>\n\t\t\t<td align=\"left\"><b>User Permissions:</b></td>"
597	. "\n\t\t\t<td align=\"right\">";	597	. "\n\t\t\t<td align=\"right\">";
598		598
599	if ((mysql_num_rows($result) == 1) OR ($userID == 0)) // If there's a user associated with this user ID (or if we're supposed to display options/permissions for anyone who isn't logged in)	599	if (($result->num_rows == 1) OR ($userID == 0)) // If there's a user associated with this user ID (or if we're supposed to display options/permissions for anyone who isn't logged in)
600	echo "<a href=\"user_options.php?userID=" . $userID . "#permissions\"><img src=\"img/options.gif\" alt=\"" . $loc["permissions"] . "\" title=\"" . $loc["LinkTitle_EditPermissions"] . "\" width=\"11\" height=\"17\" hspace=\"0\" border=\"0\"></a>";	600	echo "<a href=\"user_options.php?userID=" . $userID . "#permissions\"><img src=\"img/options.gif\" alt=\"" . $loc["permissions"] . "\" title=\"" . $loc["LinkTitle_EditPermissions"] . "\" width=\"11\" height=\"17\" hspace=\"0\" border=\"0\"></a>";
601		601
602	echo "</td>\n\t\t</tr>";	602	echo "</td>\n\t\t</tr>";

Lines 203-209 Link Here

(-)a/user_validation.php (-7 / +7 lines)
203	// (3) RUN the query on the database through the connection:	203	// (3) RUN the query on the database through the connection:
204	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'	204	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
205		205
206	if (mysql_num_rows($result) == 1) // (4) Interpret query result: Is it taken?	206	if ($result->num_rows == 1) // (4) Interpret query result: Is it taken?
207	$errors["email"] = "A user already exists with this email address as login name.\n\t\t<br>\n\t\tPlease enter a different one:";	207	$errors["email"] = "A user already exists with this email address as login name.\n\t\t<br>\n\t\tPlease enter a different one:";
208	}	208	}
209	}	209	}
Lines 353-359 Link Here
353	// (3a) RUN the query on the database through the connection:	353	// (3a) RUN the query on the database through the connection:
354	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'	354	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
355		355
356	$row = mysql_fetch_array($result); // (3b) EXTRACT results: fetch the current row into the array $row	356	$row = $result->fetch_array(); // (3b) EXTRACT results: fetch the current row into the array $row
357		357
358	// 1) Mail feedback to user, i.e., send the person who wants to be added as new user a notification email:	358	// 1) Mail feedback to user, i.e., send the person who wants to be added as new user a notification email:
359	$emailRecipient = $formVars["firstName"] . " " . $formVars["lastName"] . " <" . $formVars["email"] . ">";	359	$emailRecipient = $formVars["firstName"] . " " . $formVars["lastName"] . " <" . $formVars["email"] . ">";
Lines 448-454 Link Here
448	elseif ((!isset($_SESSION['loginEmail']) && ($addNewUsers == "everyone") && ($_REQUEST['userID'] == "")) \| (isset($_SESSION['loginEmail']) && ($loginEmail == $adminLoginEmail) && ($_REQUEST['userID'] == ""))) // -> perform an insert:	448	elseif ((!isset($_SESSION['loginEmail']) && ($addNewUsers == "everyone") && ($_REQUEST['userID'] == "")) \| (isset($_SESSION['loginEmail']) && ($loginEmail == $adminLoginEmail) && ($_REQUEST['userID'] == ""))) // -> perform an insert:
449	{	449	{
450	// Get the user id that was created	450	// Get the user id that was created
451	$userID = @ mysql_insert_id($connection);	451	$userID = @ $connection->insert_id;
452		452
453	// Use the first two characters of the email as a salt for the password	453	// Use the first two characters of the email as a salt for the password
454	$salt = substr($formVars["email"], 0, 2);	454	$salt = substr($formVars["email"], 0, 2);
Lines 477-483 Link Here
477	// get the 'format_id' for the record entry in table 'formats' whose 'format_name' matches that in '$defaultUserExportFormats' (defined in 'ini.inc.php'):	477	// get the 'format_id' for the record entry in table 'formats' whose 'format_name' matches that in '$defaultUserExportFormats' (defined in 'ini.inc.php'):
478	$query = "SELECT format_id FROM $tableFormats WHERE format_name = " . quote_smart($defaultUserExportFormat) . " AND format_type = 'export'";	478	$query = "SELECT format_id FROM $tableFormats WHERE format_name = " . quote_smart($defaultUserExportFormat) . " AND format_type = 'export'";
479	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'	479	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
480	$row = mysql_fetch_array($result);	480	$row = $result->fetch_array();
481		481
482	// Insert a row with the found format ID for this new user into the 'user_formats' table:	482	// Insert a row with the found format ID for this new user into the 'user_formats' table:
483	$queryArray[] = "INSERT INTO $tableUserFormats VALUES (NULL, " . quote_smart($row["format_id"]) . ", " . quote_smart($userID) . ", \"true\")";	483	$queryArray[] = "INSERT INTO $tableUserFormats VALUES (NULL, " . quote_smart($row["format_id"]) . ", " . quote_smart($userID) . ", \"true\")";
Lines 488-494 Link Here
488	// get the 'format_id' for the record entry in table 'formats' whose 'format_name' matches that in '$defaultUserCiteFormats' (defined in 'ini.inc.php'):	488	// get the 'format_id' for the record entry in table 'formats' whose 'format_name' matches that in '$defaultUserCiteFormats' (defined in 'ini.inc.php'):
489	$query = "SELECT format_id FROM $tableFormats WHERE format_name = " . quote_smart($defaultUserCiteFormat) . " AND format_type = 'cite'";	489	$query = "SELECT format_id FROM $tableFormats WHERE format_name = " . quote_smart($defaultUserCiteFormat) . " AND format_type = 'cite'";
490	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'	490	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
491	$row = mysql_fetch_array($result);	491	$row = $result->fetch_array();
492		492
493	// Insert a row with the found format ID for this new user into the 'user_formats' table:	493	// Insert a row with the found format ID for this new user into the 'user_formats' table:
494	$queryArray[] = "INSERT INTO $tableUserFormats VALUES (NULL, " . quote_smart($row["format_id"]) . ", " . quote_smart($userID) . ", \"true\")";	494	$queryArray[] = "INSERT INTO $tableUserFormats VALUES (NULL, " . quote_smart($row["format_id"]) . ", " . quote_smart($userID) . ", \"true\")";
Lines 499-505 Link Here
499	// get the 'style_id' for the record entry in table 'styles' whose 'style_name' matches that in '$defaultUserStyles' (defined in 'ini.inc.php'):	499	// get the 'style_id' for the record entry in table 'styles' whose 'style_name' matches that in '$defaultUserStyles' (defined in 'ini.inc.php'):
500	$query = "SELECT style_id FROM $tableStyles WHERE style_name = " . quote_smart($defaultUserStyle);	500	$query = "SELECT style_id FROM $tableStyles WHERE style_name = " . quote_smart($defaultUserStyle);
501	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'	501	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
502	$row = mysql_fetch_array($result);	502	$row = $result->fetch_array();
503		503
504	// Insert a row with the found style ID for this new user into the 'user_styles' table:	504	// Insert a row with the found style ID for this new user into the 'user_styles' table:
505	$queryArray[] = "INSERT INTO $tableUserStyles VALUES (NULL, " . quote_smart($row["style_id"]) . ", " . quote_smart($userID) . ", \"true\")";	505	$queryArray[] = "INSERT INTO $tableUserStyles VALUES (NULL, " . quote_smart($row["style_id"]) . ", " . quote_smart($userID) . ", \"true\")";
Lines 510-516 Link Here
510	// get the 'type_id' for the record entry in table 'types' whose 'type_name' matches that in '$defaultUserTypes' (defined in 'ini.inc.php'):	510	// get the 'type_id' for the record entry in table 'types' whose 'type_name' matches that in '$defaultUserTypes' (defined in 'ini.inc.php'):
511	$query = "SELECT type_id FROM $tableTypes WHERE type_name = " . quote_smart($defaultUserType);	511	$query = "SELECT type_id FROM $tableTypes WHERE type_name = " . quote_smart($defaultUserType);
512	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'	512	$result = queryMySQLDatabase($query); // function 'queryMySQLDatabase()' is defined in 'include.inc.php'
513	$row = mysql_fetch_array($result);	513	$row = $result->fetch_array();
514		514
515	// Insert a row with the found type ID for this new user into the 'user_types' table:	515	// Insert a row with the found type ID for this new user into the 'user_types' table:
516	$queryArray[] = "INSERT INTO $tableUserTypes VALUES (NULL, " . quote_smart($row["type_id"]) . ", " . quote_smart($userID) . ", \"true\")";	516	$queryArray[] = "INSERT INTO $tableUserTypes VALUES (NULL, " . quote_smart($row["type_id"]) . ", " . quote_smart($userID) . ", \"true\")";

Lines 186-192 Link Here

(-)a/users.php (-4 / +4 lines)
186	$queryURL = rawurlencode($query); // URL encode SQL query	186	$queryURL = rawurlencode($query); // URL encode SQL query
187		187
188	// First, find out how many rows are available:	188	// First, find out how many rows are available:
189	$rowsFound = @ mysql_num_rows($result);	189	$rowsFound = @ $result->num_rows;
190	if ($rowsFound > 0) // If there were rows found ...	190	if ($rowsFound > 0) // If there were rows found ...
191	{	191	{
192	// ... setup variables in order to facilitate "previous" & "next" browsing:	192	// ... setup variables in order to facilitate "previous" & "next" browsing:
Lines 218-224 Link Here
218	$nextOffset = $rowOffset + $showRows;	218	$nextOffset = $rowOffset + $showRows;
219		219
220	// d) Seek to the current offset	220	// d) Seek to the current offset
221	mysql_data_seek($result, $rowOffset);	221	$result->data_seek($rowOffset);
222	}	222	}
223	else // set variables to zero in order to prevent 'Undefined variable...' messages when nothing was found ('$rowsFound = 0'):	223	else // set variables to zero in order to prevent 'Undefined variable...' messages when nothing was found ('$rowsFound = 0'):
224	{	224	{
Lines 296-302 Link Here
296	$CounterMax = "0";	296	$CounterMax = "0";
297		297
298	// count the number of fields	298	// count the number of fields
299	$fieldsFound = mysql_num_fields($result);	299	$fieldsFound = $result->field_count;
300	// hide those last columns that were added by the script and not by the user	300	// hide those last columns that were added by the script and not by the user
301	$fieldsToDisplay = $fieldsFound-(1+$CounterMax); // (1+$CounterMax) -> $CounterMax is increased by 1 in order to hide the user_id column (which was added to make the checkbox work)	301	$fieldsToDisplay = $fieldsFound-(1+$CounterMax); // (1+$CounterMax) -> $CounterMax is increased by 1 in order to hide the user_id column (which was added to make the checkbox work)
302		302
Lines 432-438 Link Here
432	echo "</tr>";	432	echo "</tr>";
433		433
434	// BEGIN RESULTS DATA COLUMNS --------------	434	// BEGIN RESULTS DATA COLUMNS --------------
435	for ($rowCounter=0; (($rowCounter < $showRows) && ($row = @ mysql_fetch_array($result))); $rowCounter++)	435	for ($rowCounter=0; (($rowCounter < $showRows) && ($row = @ $result->fetch_array())); $rowCounter++)
436	{	436	{
437	if (is_integer($rowCounter / 2)) // if we currently are at an even number of rows	437	if (is_integer($rowCounter / 2)) // if we currently are at an even number of rows
438	$rowClass = "even";	438	$rowClass = "even";