function add_or_edit_link()
{
    global $smarty, $lang;
    $lin_id = post('lin_id');
    $lin_word = post('lin_word');
    $lin_url = post('lin_url');
    $lin_img = post('lin_img');
    $lin_title = post('lin_title');
    if ($lin_img == 'http://' || $lin_img == '') {
        $lin_img = 'none';
    }
    $obj = new link();
    $obj->set_value('lin_word', $lin_word);
    $obj->set_value('lin_url', $lin_url);
    $obj->set_value('lin_img', $lin_img);
    $obj->set_value('lin_title', $lin_title);
    if ($lin_id != '') {
        $obj->set_where("lin_id = {$lin_id}");
        $obj->edit();
        $info_text = '修改友情链接成功';
    } else {
        $obj->set_value('lin_lang', S_LANG);
        $obj->add();
        $info_text = '添加友情链接成功';
    }
    $smarty->assign('info_text', $info_text);
    $smarty->assign('link_text', $lang['return_list']);
    $smarty->assign('link_href', url(array('channel' => 'service', 'mod' => 'link_list')));
}

function createPayQRcode($url, $data)
{
    header("Content-Type: image/png");
    $img = post($url, $data);
    echo $img;
    exit;
}

 public function onSignup()
 {
     $settings = Settings::instance();
     if (!$settings->api_key) {
         throw new ApplicationException('MailChimp API key is not configured.');
     }
     /*
      * Validate input
      */
     $data = post();
     $rules = ['email' => 'required|email|min:2|max:64'];
     $validation = Validator::make($data, $rules);
     if ($validation->fails()) {
         throw new ValidationException($validation);
     }
     /*
      * Sign up to Mailchimp via the API
      */
     require_once plugins_path() . '/rainlab/mailchimp/vendor/MCAPI.class.php';
     $api = new \MCAPI($settings->api_key);
     $this->page['error'] = null;
     $mergeVars = '';
     if (isset($data['merge']) && is_array($data['merge']) && count($data['merge'])) {
         $mergeVars = $data['merge'];
     }
     if ($api->listSubscribe($this->property('list'), post('email'), $mergeVars) !== true) {
         $this->page['error'] = $api->errorMessage;
     }
 }

 public function onUpdate()
 {
     $filter = post('filter');
     $results = $this->getResults($filter);
     $this->page['results'] = $results;
     return ['#activity-stream' => $this->renderPartial('@default')];
 }

 function install()
 {
     //bind password
     $password = post("adminpassword1");
     //create important vars
     $salt = rand(0, 99999);
     $md5_password = md5($salt . $password);
     DB::query("DROP TABLE IF EXISTS " . DB_PREFIX . "user");
     DB::query("CREATE TABLE " . DB_PREFIX . "user(\r\n                user_id int(11) NOT NULL AUTO_INCREMENT,\r\n                name varchar(90) NOT NULL,\r\n                salt int(5) NOT NULL default '0',\r\n                password varchar(32) NOT NULL default '0',\r\n                email varchar(255) NOT NULL,\r\n                last_ip varchar(255) NOT NULL default '127.0.0.1',\r\n                data_login int(15) NULL,\r\n                status int(1) NOT NULL default 1,\r\n                activation_code varchar(40) NULL,\r\n                lang_id varchar(2) NOT NULL default 'EN',\r\n                PRIMARY KEY (user_id)\r\n                ) ENGINE=MyISAM");
     DB::insert(DB_PREFIX . "user", array("name" => post("adminname"), "salt" => "{$salt}", "password" => "{$md5_password}", "email" => post("adminemail", FILTER_SANITIZE_EMAIL), "status" => 3));
     DB::query("DROP TABLE IF EXISTS " . DB_PREFIX . "user_where_is");
     DB::query("CREATE TABLE " . DB_PREFIX . "user_where_is ( \r\n            user_where_is_id int(11) NOT NULL AUTO_INCREMENT,\r\n            user_id int(11) NOT NULL,\r\n            guest_id int(11) NOT NULL,\r\n            ip varchar(20) NOT NULL default '127.0.0.1',\r\n            name varchar(90) NOT NULL,\r\n            sid varchar(32) NOT NULL,\r\n            url varchar(255) NOT NULL,\r\n            id int(11) NOT NULL,\r\n            file varchar(255) NOT NULL,\r\n            os varchar(255) NOT NULL,\r\n            browser varchar(255) NOT NULL,\r\n            time int(15) NOT NULL , \r\n            time_first_click int(15) NOT NULL,\r\n            country_code varchar(2) NOT NULL,\r\n            country_name varchar(90) NOT NULL,\r\n            region_code varchar(15) NOT NULL,\r\n            region_name varchar(255) NOT NULL,\r\n            city_name varchar(255) NOT NULL,\r\n            zip varchar(20) NOT NULL,\r\n            latitude varchar(55) NOT NULL,\r\n            longitude varchar(55) NOT NULL,\r\n            timezone_name varchar(255) NOT NULL,\r\n            gmt_offset varchar(255) NOT NULL,\r\n            PRIMARY KEY (user_where_is_id)\r\n            ) ENGINE=MyISAM");
     DB::query("DROP TABLE IF EXISTS " . DB_PREFIX . "usergroup");
     DB::query("CREATE TABLE " . DB_PREFIX . "usergroup(\r\n            group_id int(11) NOT NULL AUTO_INCREMENT,\r\n            parent_id int(11) NOT NULL,\r\n            name varchar(255) NOT NULL,\r\n            position int(11) NOT NULL,\r\n            nuser int(11) NOT NULL,\r\n            PRIMARY KEY (group_id)\r\n            ) ENGINE=MyISAM");
     DB::query("DROP TABLE IF EXISTS " . DB_PREFIX . "usergroup_user");
     DB::query("CREATE TABLE " . DB_PREFIX . "usergroup_user(\r\n            group_id int(11) NOT NULL,\r\n            user_id int(11) NOT NULL,\r\n            PRIMARY KEY (group_id , user_id)\r\n            ) ENGINE=MyISAM");
     DB::query("DROP TABLE IF EXISTS " . DB_PREFIX . "user_localization");
     DB::query("CREATE TABLE " . DB_PREFIX . "user_localization(\r\n            user_localization_id int(11) NOT NULL AUTO_INCREMENT,\r\n            ip varchar(20) NOT NULL DEFAULT '127.0.0.1',\r\n            sid varchar(32) NOT NULL,\r\n            user_id int(11) NOT NULL,\r\n            guest_id int(11) NOT NULL,\r\n            name varchar(90) NOT NULL,\r\n            url varchar(255) NOT NULL,\r\n            id int(11) NOT NULL,\r\n            file varchar(255) NOT NULL,\r\n            os varchar(255) NOT NULL,\r\n            browser varchar(255) NOT NULL,\r\n            time int(15) NOT NULL,\r\n            time_first_click int(15) NOT NULL,\r\n            country_code varchar(2) NOT NULL,\r\n            country_name varchar(90) NOT NULL,\r\n            region_code varchar(15) NOT NULL,\r\n            region_name varchar(255) NOT NULL,\r\n            city_name varchar(255) NOT NULL,\r\n            zip varchar(20) NOT NULL,\r\n            latitude varchar(55) NOT NULL,\r\n            longitude varchar(55) NOT NULL,\r\n            timezone_name varchar(255) NOT NULL,\r\n            gmt_offset varchar(255) NOT NULL,\r\n            PRIMARY KEY (user_localization_id)\r\n            )");
     $querys = DB::get_executed_query();
     $html_message = '<br /><strong>Install Complete!!!<br /></strong> Please Delete: <br /><strong>' . CONTROLLERS_DIR . 'install
         </strong><br />Please read next steps in the "Install-notes" <br />';
     if ($querys == 11) {
         echo draw_msg($html_message, INFO, true);
     } else {
         echo draw_msg("ERROR", ERROR, true);
     }
 }

function set_skin($username, $password, $skin)
{
    $login_url = "https://minecraft.net/login";
    $skin_url = "https://minecraft.net/profile/skin";
    //first, login to Minecraft.net
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $login_url);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
    curl_setopt($ch, CURLOPT_COOKIEJAR, "/dev/null");
    curl_setopt($ch, CURLOPT_HEADER, true);
    $fields = array("username" => urlencode($username), "password" => urlencode($password));
    post($ch, $fields);
    curl_exec($ch);
    //Then, load the profile page to retrieve authenticityToken
    curl_setopt($ch, CURLOPT_URL, $skin_url);
    $result = curl_exec($ch);
    $token = get_string_between($result, 'name="authenticityToken" value="', '">');
    //finally, post the skin update
    $headers = array("Content-Type:multipart/form-data");
    // cURL headers for file uploading
    $fields = array("model" => "steve", "skin" => "@{$skin}", "authenticityToken" => $token);
    $options = array(CURLOPT_URL => $skin_url, CURLOPT_HEADER => true, CURLOPT_POST => 1, CURLOPT_HTTPHEADER => $headers, CURLOPT_POSTFIELDS => $fields, CURLOPT_RETURNTRANSFER => true);
    // cURL options
    curl_setopt_array($ch, $options);
    $result = urldecode(curl_exec($ch));
    curl_close($ch);
    if (strlen(strstr($result, "success=Your skin has been changed! It will take a couple of seconds for it to update.")) > 0) {
        return true;
    } else {
        return false;
    }
}

 public function testPostWithinMockedEnvironment()
 {
     $posted = post('some_post_field');
     $this->assertEquals('Bob', $posted);
     $default = post('blah_doesnt_exist', 7777);
     $this->assertEquals(7777, $default);
 }

 function aksi($id)
 {
     // Add
     if (post('add')) {
         $data = array('title_posting' => post('title_posting'), 'content_posting' => post('content_posting'), 'date_posting' => date('Y-m-d'));
         $this->db->insert('posting', $data);
         $this->all->setMsg('success', 'Berhasil tambah posting');
         $_POST = '';
     }
     // Edit
     if (post('edit')) {
         $data = array('title_posting' => post('title_posting'), 'content_posting' => post('content_posting'), 'date_posting' => date('Y-m-d'));
         $this->db->where('id_posting', $id);
         $this->db->update('posting', $data);
         $this->all->setMsg('success', 'Berhasil edit posting');
     }
     // Status
     if (post('status')) {
         $this->db->where('id_siswa', post('id'));
         $this->db->update('siswa', array('status' => post('status')));
     }
     // Delete
     if (post('delete')) {
         $this->db->where('id_posting', post('id'));
         $this->db->delete(post('delete'));
     }
 }

 private function _check()
 {
     if (!array_diff(array_keys($args = array_intersect_key(post(), array_flip(func_get_args()))), func_get_args())) {
         return $args;
     }
     throw new Exception(NeoFrag::UNFOUND);
 }

 /**
  * Create a comment
  *
  **/
 function save()
 {
     $out = array();
     // Sanitize
     $serial_number = post('serial_number');
     $section = post('section');
     $text = post('text');
     $html = post('html');
     if ($serial_number and $section and $text) {
         if (authorized_for_serial($serial_number)) {
             $comment = new Comment_model();
             $comment->retrieve_record($serial_number, 'section=?', array($section));
             $comment->serial_number = $serial_number;
             $comment->section = $section;
             $comment->text = $text;
             $comment->html = $html;
             $comment->user = $_SESSION['user'];
             $comment->timestamp = time();
             $comment->save();
             $out['status'] = 'saved';
         } else {
             $out['status'] = 'error';
             $out['msg'] = 'Not authorized for this serial';
         }
     } else {
         $out['status'] = 'error';
         $out['msg'] = 'Missing data';
     }
     $obj = new View();
     $obj->view('json', array('msg' => $out));
 }

 /**
  * Creates the options admin page and manages the update of options.
  * 
  * This is the default Action
  *
  * @return void
  */
 function indexAction()
 {
     if (post('action') == 'index') {
         $options = get_option('HerissonOptions');
         $new_options = array();
         foreach ($this->allowedoptions as $option) {
             $new_options[$option] = post($option);
         }
         $complete_options = array_merge($options, $new_options);
         if (!array_key_exists('privateKey', $complete_options)) {
             $encryption = Encryption::i()->generateKeyPairs();
             $complete_options['publicKey'] = $encryption->public;
             $complete_options['privateKey'] = $encryption->private;
             Message::i()->addError("<b>Warning</b> : public/private keys have been regenerated");
         }
         update_option('HerissonOptions', $complete_options);
     }
     // Check binaries paths
     $binaryTools = array('convert', 'wget', 'du', 'mv', 'uname');
     sort($binaryTools);
     $this->view->binaries = array();
     foreach ($binaryTools as $binary) {
         $this->view->binaries[$binary] = Shell::getPath($binary);
     }
     $this->view->platform = Shell::shellExec('uname', '-a');
     $this->view->screenshots = WpHerissonScreenshotsTable::getAll();
     $this->view->options = get_option('HerissonOptions');
 }

 public function onSubscribe()
 {
     if (!($user = Auth::getUser())) {
         return;
     }
     $user->subscription(post('subscriptionType'))->withCoupon('code')->create(post('stripeToken'), ['email' => $user->email, 'metadata' => array_only($user->attributes, ['name', 'surname', 'phone', 'company', 'street_addr', 'city', 'zip'])]);
 }

 public function onSignup()
 {
     /*
      * Validate input
      */
     $data = ['email' => post('email'), 'first_name' => post('first_name'), 'last_name' => post('last_name')];
     $rules = ['email' => 'required|email|min:2|max:64'];
     $validation = Validator::make($data, $rules);
     if ($validation->fails()) {
         throw new ValidationException($validation);
     }
     try {
         /*
          * Create and add the subscriber
          */
         $isThrottled = $this->checkThrottle();
         if (!$isThrottled) {
             $subscriber = $this->listSubscribe($data);
             $requireConfirmation = !$subscriber->confirmed_at;
         } else {
             $requireConfirmation = null;
         }
         $this->page['error'] = null;
         $this->page['isThrottled'] = $isThrottled;
         $this->page['requireConfirmation'] = $requireConfirmation;
     } catch (Exception $ex) {
         $this->page['error'] = $ex->getMessage();
     }
 }

 /**
  * Renders form for sending messages.
  * Sends message content to selected user.
  * If message is sent, user is notified.
  */
 public function action()
 {
     checkUnauthorizedAccess();
     $main = new Main();
     $body = new \templates\SendMessage();
     echo $main->setPageTitle("Send Message")->setBody($body);
     if (post('send')) {
         $senderID = UserRepository::getIdByUsername($_SESSION['username']);
         $recipientID = getIdFromURL();
         $content = htmlentities(trim(post('content')));
         //stvaranje poruke
         $message = new Message();
         $message->setSenderID($senderID);
         $message->setRecipientID($recipientID);
         $message->setContent($content);
         $message->setCreated(date('Y-m-d H:i:s'));
         try {
             //slanje poruke
             MessageRepository::sendMessage($message);
             ?>
             <script src="/TwitterApp/assets/js/messageSent.js"></script>
             <?php 
         } catch (\PDOException $e) {
             $e->getMessage();
         }
     }
 }

 public static function _get()
 {
     if (!self::$inst) {
         self::$inst = new static(post('request'), post('data'));
     }
     return self::$inst;
 }

 public function onGetfilters()
 {
     $data = post('filters');
     // $result = Product::leftJoin('fotis_reviews_prod_rates', 'tiipiik_catalog_products.id', '=', 'fotis_reviews_prod_rates.product_id');
     if (isset($data)) {
         //     foreach ($data as $object) {
         //         switch ($object['Name']) {
         //             case "FilterPrice":
         //                 $result = $result->where('price', '<=', $object['Value']);
         //                 break;
         //             case "FilterSI":
         //                 if ($object['Value'] == 0) {
         //                     $result = $result->where('index_rating', '=', null);
         //                 }else{
         //                     $result = $result->where('index_rating', '>=', $object['Value']);
         //                 }
         //                 break;
         //             default:
         //         }
         //     }
         //     $this->products = $result->get();
         $this->stores = Store::orderBy('products_number', 'desc')->take(2)->get();
     } else {
         $this->stores = Store::orderBy('products_number', 'asc')->take(2)->get();
         //     $this->products = Product::leftJoin('fotis_reviews_prod_rates', 'tiipiik_catalog_products.id', '=', 'fotis_reviews_prod_rates.product_id')->orderBy('price', 'desc')->get();
     }
 }

 /**
  * @abstract Saves page section data to the main section list, unique data to special tables
  * @param unknown_type $id
  * @return unknown
  */
 public function savePageSections($id)
 {
     $sections = array();
     $post = post()->getRawSource();
     if (isset($post['page_sections']) && is_array($post['page_sections'])) {
         // first, wipe all section content so that our saves are new
         foreach ($post['page_sections'] as $section) {
             if (array_key_exists($section['section_type'], $this->sections)) {
                 model()->open('section_' . $section['section_type'])->delete($id, 'page_id');
             }
         }
         // then, loop and save all sections
         foreach ($post['page_sections'] as $val) {
             if (array_key_exists($val['section_type'], $this->sections)) {
                 $section = $this->sections[$val['section_type']];
                 if (isset(app()->{$section['module']}) && method_exists(app()->{$section['module']}, 'saveSection')) {
                     $new_sections = app()->{$section['module']}->saveSection($val, $id);
                     $sections = array_merge($sections, $new_sections);
                 }
             }
         }
     }
     // return an array of section details, for saving in the section list table
     return $sections;
 }

 /**
  * Try to perform a login, perform_login_if_requested will redirect as necessary
  */
 public function requestLogin()
 {
     $logged_out = in('logged_out');
     // Logout page redirected to this one, so display the message.
     $login_error_message = in('error');
     // Error to display after unsuccessful login and redirection.
     $is_logged_in = is_logged_in();
     $pass = post('pass');
     $username_requested = post('user');
     if ($logged_out) {
         logout_user();
         // Perform logout if requested!
     } else {
         if ($username_requested === null || $pass === null) {
             $login_error_message = 'No username or no password specified';
         }
     }
     if (!$login_error_message && !$is_logged_in) {
         $login_error_message = self::perform_login_if_requested($username_requested, $pass);
     }
     if ($login_error_message) {
         return new RedirectResponse('/login.php?error=' . url($login_error_message));
     } else {
         // Successful login, go to the main page
         return new RedirectResponse('/');
     }
 }

 function add()
 {
     //Load the validation library
     $this->library('validation');
     $this->views['user_id'] = $this->user_id;
     $config = array();
     $config['title'] = 'required|max_length[150]';
     $config['text'] = 'required|max_length[2000]';
     if ($this->validation->run($config) == FALSE) {
         $views['failed'] = true;
         $this->views['content'] = $this->view('me/new_idea', $views);
         return;
     } else {
         $data = array('title' => post('title'), 'message' => post('text'), 'aid' => $this->user_id);
         $this->db->insert_idea($data);
         // Create a stream
         if (in_array('publish_stream', explode(',', $this->facebook->fb_params['ext_perms']))) {
             $message = "I published a new idea: " . post('title') . "!";
             /*
             $action_links = array(
             		      array(
             			'text' => '<fb:publisher-link>Check out Ideas App </fb:publisher-link>',
             			'href' => 'http://apps.facebook.com/'.$this->app_url.'/ideas/newest'
             		));
             */
             $this->facebook->api_client->stream_publish($message);
         }
     }
     $this->views['content'] = $this->view('me/idea_added');
     return TRUE;
 }

function handle_uploaded_identity_docs()
{
    global $is_logged_in, $is_admin;
    ?>
    <div class='content_box'>
    <h3>Upload Results</h3>
<?php 
    if ($is_admin && isset($_POST['uid'])) {
        $uid = post('uid');
        if ($uid == '') {
            $uid = $is_logged_in;
        } else {
            get_openid_for_user($uid);
        }
        // will throw exception if user doesn't exist
    } else {
        $uid = $is_logged_in;
    }
    $uploaded = 0;
    for ($i = 0; $i < ID_FILE_UPLOAD_SLOTS; $i++) {
        $uploaded += upload_identity_doc($i, $uid);
    }
    echo "<p>" . _("Documents uploaded") . ": {$uploaded}</p>\n";
    echo "</div>\n";
    if ($uploaded && !$is_admin) {
        email_tech(_("User Uploaded New Identity Documents"), sprintf("%s\n\n%s", sprintf(_("User %s uploaded %s new file(s)."), $is_logged_in, $uploaded), sprintf("%s?page=docs&uid=%s", SITE_URL, $is_logged_in)));
    }
}