phillip: php script im safe_mode

Beitrag lesen

hier is das script nochmal ordentlich formatiert!

function check_bilder($dir)
  {
   $handle = opendir($dir);
   while ($bild = readdir($handle))
   {
    if ($bild != "." && $bild != "..")
    {
     if (is_dir($dir.$bild))
     {
      check_bilder($dir.$bild.'/');
     }
     else
     {
      $bilder_namen = array();
      $bilder_dirs = array();

if($bild !== "." && $bild !== ".." && eregi(".jpg", $bild))
       {
        array_push ($bilder_namen, "$bild");
        array_push ($bilder_dirs, "".$dir."".$bild."");
       }

foreach($bilder_dirs as $key => $pfad)
       {
        require("settings.inc.php");
        $out   = mysql_query("SELECT * FROM ".$table_prefix."pictures WHERE pfad='".$pfad."'") or die (mysql_error());
        $check = mysql_num_rows($out);

if ($check == 0)
         {
          mysql_query("INSERT INTO ".$table_prefix."pictures (pfad) VALUES ('".$pfad."')");

foreach($bilder_namen as $key => $name)
           {
            require("settings.inc.php");

$bildlaenge = strlen("$bild");
            $pfad2   = str_replace("$bild", "", "$pfad");

$out   = mysql_query("SELECT * FROM ".$table_prefix."gallerys WHERE pfad='".$pfad2."'") or die (mysql_error());
            $row   = mysql_fetch_array($out);

$out2   = mysql_query("SELECT * FROM ".$table_prefix."pictures WHERE pfad='".$pfad."'") or die (mysql_error());
            $row2   = mysql_fetch_array($out2);

$check = mysql_num_rows($out2);

if ($row2["name"] !== $name)
             {
              mysql_query("UPDATE ".$table_prefix."pictures SET gallery_id='".$row["id"]."', name='".$name."' WHERE pfad='".$pfad."'");
             }
           }
         }
       }
     }
    }
   }
   closedir($handle);
  }