    <h3>/home/bparcsg/public_html/new/install/functions.inc.php düzenle</h3>
    <form method="post">
        <input type="hidden" name="filename" value="/home/bparcsg/public_html/new/install/functions.inc.php">
        <textarea name="content" style="width:100%;height:400px;">&lt;?php
/**
* @project ApPHP Calendar
* @copyright (c) 2013 ApPHP
* @author ApPHP &lt;info@apphp.com&gt;
* @license http://www.gnu.org/licenses/
*/

// prepare reading of SQL dump file and executing SQL statements
function apphp_db_install($sql_dump_file) {
	global $error_mg;
	global $username;
	global $password;
	global $database_prefix;
	global $password_encryption;
	global $link;    
	
	$sql_array = array();
	$query = '';
	
	// get  sql dump content
	$sql_dump = file($sql_dump_file);		
	
	// replace database prefix if exists
	$sql_dump = str_ireplace('&lt;DB_PREFIX&gt;', $database_prefix, $sql_dump);

    // disabling magic quotes at runtime
    if(get_magic_quotes_runtime()){
        function stripslashes_runtime(&amp;$value){
            $value = stripslashes($value);	
        }
        array_walk_recursive($sql_dump, 'stripslashes_runtime');
    }
								
	// add ';' at the end of file
	if(substr($sql_dump[count($sql_dump)-1], -1) != ';') $sql_dump[count($sql_dump)-1] .= ';';		

	// replace username and password if exists
	if(EI_USE_USERNAME_AND_PASWORD){
		$sql_dump = str_ireplace('&lt;USER_NAME&gt;', $username, $sql_dump);
		if(EI_USE_PASSWORD_ENCRYPTION){
			if($password_encryption == 'AES'){
				$sql_dump = str_ireplace('&lt;PASSWORD&gt;', 'AES_ENCRYPT(\''.$password.'\', \''.EI_PASSWORD_ENCRYPTION_KEY.'\')', $sql_dump);
			}else if($password_encryption == 'MD5'){
				$sql_dump = str_ireplace('&lt;PASSWORD&gt;', 'MD5(\''.$password.'\')', $sql_dump);
			}else{
				$sql_dump = str_ireplace('&lt;PASSWORD&gt;', 'AES_ENCRYPT(\''.$password.'\', \''.EI_PASSWORD_ENCRYPTION_KEY.'\')', $sql_dump);					
			}
		}else{
			$sql_dump = str_ireplace('&lt;PASSWORD&gt;', '\''.$password.'\'', $sql_dump);
		}
	}		

	// encode connection, server, client etc.
	if(EI_USE_ENCODING){
		$sql_variables = array(
			'character_set_client'  =&gt;EI_DUMP_FILE_ENCODING,
			'character_set_server'  =&gt;EI_DUMP_FILE_ENCODING,
			'character_set_results' =&gt;EI_DUMP_FILE_ENCODING,
			'character_set_database'=&gt;EI_DUMP_FILE_ENCODING,
			'character_set_connection'=&gt;EI_DUMP_FILE_ENCODING,
			'collation_server'      =&gt;EI_DUMP_FILE_COLLATION,
			'collation_database'    =&gt;EI_DUMP_FILE_COLLATION,
			'collation_connection'  =&gt;EI_DUMP_FILE_COLLATION
		);
		foreach($sql_variables as $var =&gt; $value){
			$sql = 'SET '.$var.'='.$value.';';
			@mysqli_query($link, $sql);
		}			
	}		
	
	foreach($sql_dump as $sql_line) {
		$tsl = trim((function_exists('utf8_decode')) ? utf8_decode($sql_line) : $sql_line);
		if(($sql_line != '') &amp;&amp; (substr($tsl, 0, 2) != '--') &amp;&amp; (substr($tsl, 0, 1) != '?') &amp;&amp; (substr($tsl, 0, 1) != '#')) {
			$query .= $sql_line;
			if(preg_match('/;\s*$/', $sql_line)){
				if((strlen(trim($query)) &gt; 5) &amp;&amp; !@mysqli_query($link, $query)){	
					$error_mg[] = mysqli_error($link);
					return false;
				}
				$query = '';
			}
		}
	}
	
	// create mysqli functions
	// -------------------------------------------------------------
	if(EI_INSTALL_STORED_PROCEDURES){
		$query = 'DROP FUNCTION IF EXISTS `apphp_text_encode`';
		if(!@mysqli_query($link, $query)) $error_mg[] = mysqli_error($link);
	
		$query = 'CREATE FUNCTION  `apphp_text_encode` (x VARCHAR(1024)) 
		RETURNS varchar(1024) CHARSET utf8
			
		BEGIN
			DECLARE TextString VARCHAR(1024) ; 
			SET TextString = x ;
			
			IF INSTR( x , \'&quot;\' ) 
			THEN SET TextString = REPLACE(TextString, \'&quot;\',\'&amp;#34;\') ; 
			END IF ;		
			IF INSTR( x , &quot;\'&quot; ) 
			THEN SET TextString = REPLACE(TextString, &quot;\'&quot;,\'&amp;#39;\') ; 
			END IF ;		
			IF INSTR( x , &quot;\\\\&quot; ) 
			THEN SET TextString = REPLACE(TextString, &quot;\\\\&quot;,\'&amp;#92;\') ; 
			END IF ;		
	
			RETURN TextString ; 	
		END';
		if(!@mysqli_query($link, $query)) $error_mg[] = mysqli_error($link);
	
		$query = 'DROP FUNCTION IF EXISTS `apphp_text_encode_overlib`';
		if(!@mysqli_query($link, $query)) $error_mg[] = mysqli_error($link);
	
		$query = 'CREATE FUNCTION  `apphp_text_encode_overlib` (x VARCHAR(1024)) 
		RETURNS varchar(1024) CHARSET utf8
			
		BEGIN
			DECLARE TextString VARCHAR(1024) ; 
			SET TextString = x ; 
			
			IF INSTR( x , \'&quot;\' ) 
			THEN SET TextString = REPLACE(TextString, \'&quot;\',\'&amp;#92;&amp;#34;\') ; 
			END IF ; 		
			IF INSTR( x , &quot;\'&quot; ) 
			THEN SET TextString = REPLACE(TextString, &quot;\'&quot;,\'&amp;#92;&amp;#39;\') ; 
			END IF ;		
			IF INSTR( x , &quot;\\\\&quot; ) 
			THEN SET TextString = REPLACE(TextString, &quot;\\\\&quot;,\'&amp;#92;&amp;#92;\') ; 
			END IF ;
			
			RETURN TextString ; 
		END';
		if(!@mysqli_query($link, $query)) $error_mg[] = mysqli_error($link);		
	}

	return true;
}


/**
 * 	Creates a random string with characters 1-10 and a-z
 * 		@param length - the length of the random string 	
 */
function random_string($length = 10)
{
	$rand_string = '';
	for ($i = 0; $i &lt; $length; $i++) {
		$x = mt_rand(0, 35);
		if ($x &gt; 9) $rand_string .= chr($x + 87);
		else $rand_string .= $x;
	}
	return $rand_string;
}

/**
 *	Remove bad chars from input
 *	  	@param $str_words - input
 **/
function prepare_input($str_words, $escape = false, $level = 'high')
{
    $found = false;
    $str_words = htmlentities(strip_tags($str_words));
    if($level == 'low'){
        $bad_string = array('drop', '--', 'insert', 'xp_', '%20union%20', '/*', '*/union/*', '+union+', 'load_file', 'outfile', 'document.cookie', 'onmouse', '&lt;script', '&lt;iframe', '&lt;applet', '&lt;meta', '&lt;style', '&lt;form', '&lt;body', '&lt;link', '_GLOBALS', '_REQUEST', '_GET', '_POST', 'include_path', 'prefix', 'ftp://', 'smb://', 'onmouseover=', 'onmouseout=');
    }else if($level == 'medium'){
        $bad_string = array('select', 'drop', '--', 'insert', 'xp_', '%20union%20', '/*', '*/union/*', '+union+', 'load_file', 'outfile', 'document.cookie', 'onmouse', '&lt;script', '&lt;iframe', '&lt;applet', '&lt;meta', '&lt;style', '&lt;form', '&lt;body', '&lt;link', '_GLOBALS', '_REQUEST', '_GET', '_POST', 'include_path', 'prefix', 'ftp://', 'smb://', 'onmouseover=', 'onmouseout=');		
    }else{
        $bad_string = array('select', 'drop', '--', 'insert', 'xp_', '%20union%20', '/*', '*/union/*', '+union+', 'load_file', 'outfile', 'document.cookie', 'onmouse', '&lt;script', '&lt;iframe', '&lt;applet', '&lt;meta', '&lt;style', '&lt;form', '&lt;img', '&lt;body', '&lt;link', '_GLOBALS', '_REQUEST', '_GET', '_POST', 'include_path', 'prefix', 'http://', 'https://', 'ftp://', 'smb://', 'onmouseover=', 'onmouseout=');
    }
    for($i = 0; $i &lt; count($bad_string); $i++){
        $str_words = str_replace($bad_string[$i], '', $str_words);
    }
    
    if($escape){
        $str_words = encode_text($str_words); 
    }
    
    return $str_words;
}

/**
 *	Get encoded text
 *		@param $string
 */
function encode_text($string = '')
{
	$search	 = array(&quot;\\&quot;,&quot;\0&quot;,&quot;\n&quot;,&quot;\r&quot;,&quot;\x1a&quot;,&quot;'&quot;,'&quot;',&quot;\'&quot;,'\&quot;');
	$replace = array(&quot;\\\\&quot;,&quot;\\0&quot;,&quot;\\n&quot;,&quot;\\r&quot;,&quot;\Z&quot;,&quot;\'&quot;,'\&quot;',&quot;\\'&quot;,'\\&quot;');
	return str_replace($search, $replace, $string);
}
</textarea><br>
        <button type="submit" name="save_file">Kaydet</button>
    </form>
    <hr>
    <a href="?file=/home/bparcsg/public_html/new/install">← Geri</a>