<? 
session_start();
include('../admin/db.php'); 
$id = mysql_real_escape_string($_REQUEST[id]); 
//pagination 
$result = mysql_query("SELECT * FROM users WHERE record_num = '$id'") or die(mysql_error());
$row = mysql_fetch_array($result); 
$profusername = $row[username]; 
if(mysql_num_rows($result) < 1) { header("Location: /404.php"); }
$title = "$profusername's Profile";
$headertitle = "$profusername's Profile";
include($basepath.'/templates/template.overall_header.php');




?>
<script type="text/javascript" language="javascript">
   var http_request = false;
   function makePOSTRequest(url, parameters) {
      http_request = false;
      if (window.XMLHttpRequest) { // Mozilla, Safari,...
         http_request = new XMLHttpRequest();
         if (http_request.overrideMimeType) {
         	// set type accordingly to anticipated content type
            //http_request.overrideMimeType('text/xml');
            http_request.overrideMimeType('text/html');
         }
      } else if (window.ActiveXObject) { // IE
         try {
            http_request = new ActiveXObject("Msxml2.XMLHTTP");
         } catch (e) {
            try {
               http_request = new ActiveXObject("Microsoft.XMLHTTP");
            } catch (e) {}
         }
      }
      if (!http_request) {
         alert('Cannot create XMLHTTP instance');
         return false;
      }
      
      http_request.onreadystatechange = alertContents;
      http_request.open('POST', url, true);
      http_request.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
      http_request.setRequestHeader("Content-length", parameters.length);
      http_request.setRequestHeader("Connection", "close");
      http_request.send(parameters);
   }

   function alertContents() {
      if (http_request.readyState == 4) {
         if (http_request.status == 200) {
            //alert(http_request.responseText);
            result = http_request.responseText;
            document.getElementById('myspan').innerHTML = result;            
         } else {
            alert('There was a problem with the request.');
         }
      }
   }
   
   function get(obj) {
      var poststr = "id=" + encodeURI( document.getElementById("id").value ) + "&userid=" + encodeURI( document.getElementById("userid").value ) +
                    "&comment=" + encodeURI( document.getElementById("comment").value );
      makePOSTRequest('<? echo $basehttp; ?>/includes/inc.post_profile_comment.php', poststr);
   }
</script>


<script type="text/javascript">
<!--
function pokazAlboUkryj(co) { 
     var obiekt = document.getElementById(co); 
     if (obiekt.style.display == 'block') { 
          obiekt.style.display = 'none'; 
     } else { 
          obiekt.style.display = 'block'; 
     } 
}
-->
</script>

<div>
  
  <!-- general info-->
<div id="view_box" style="width:170px; padding-top:5px; height:125px;">
<center><? if($row[avatar] != '') { ?><img src='<? echo $basehttp; ?>/media/misc/<? echo $row[avatar]; ?>' /><? } else { ?><img src='<? echo $basehttp; ?>/images/avatars/default.jpg' width=160 height=120 /><? } ?></center>
</div>
<!-- end-->
<!-- general info-->


<!-- general info-->
<div id="view_box" style="width:361px; margin-left:15px; padding-left:15px; height:120px; padding-top:10px; ">
		<table width='100%' cellpadding="0" cellspacing="0" border="0">
        <tr>
        	<td width='50%'><strong><? if($row[age] && $row[gender]) { echo "$row[age] year old $row[gender]"; } ?></strong><br />        
       
     </td>
</td> 
            <td width='50%'><? if($row[location]) { ?><strong>Location:</strong> <? echo $row[location]; } ?></td> 
        </tr>
        <tr>
        	<td width='50%'><strong>Videos Uploaded:</strong> <? echo mysql_num_rows(mysql_query("SELECT record_num FROM content WHERE submitter = '$row[record_num]' AND approved = 2 AND enabled = 1")); ?><br />
           <strong>Joined:</strong> <? echo date('F jS Y',strtotime($row[date_joined])); ?></td> 
            <td width='50%'><strong>Total Views:</strong> <? $count = mysql_query("SELECT SUM(content_views.views) as viewcount FROM content, content_views WHERE content_views.content = content.record_num AND content.submitter = '$urow[record_num]' AND enabled = 1") or die(mysql_error()); $crow = mysql_fetch_array($count); if($crow[viewcount]) { echo $crow[viewcount]; } else { echo "0"; } ?>
    <br /><br />        
            <? if($_SESSION[userid]) { $check1="1";} else {$check1="0";};
 	   if(($_SESSION[userid])!==$row[record_num]){ $check2="1";} else {$check2="0";};
	   $user= $_SESSION[userid];
	   $row[record_num]=$id;
	     
     if( $check1=="1" and $check2=="1"){?>
    <img src="<? echo $basehttp; ?>/images/addIcon.png" /><a href="/friends.php?option=add&id=<? echo $row[record_num]; ?>" onclick="pokazAlboUkryj('friends'); return false;"> add to friends</a> <br />  
 <? } ?>
    <img src="<? echo $basehttp; ?>/images/icon-sendMail.png" /><a href="#send" onclick="pokazAlboUkryj('send'); return false;"> send private message</a>
            
            </td> 
        </tr>
        </table>        
<br />
       <? if($row[description]) { ?>
        <strong>A little about me...</strong><br />
        <? echo nl2br($row[description]); ?>
        <? } ?>
</div>
<!-- end-->
<!-- general info-->




<!-- SEND MESSAGE-->

 <? 
 //wyslij wiadomosc

if(isset($_POST['send'])){
$text=mysql_real_escape_string($_POST['text']);
$to=mysql_real_escape_string($_POST['to']);
$subject=mysql_real_escape_string($_POST['subject']);
$from=mysql_real_escape_string($_POST['from']);
$date= mysql_real_escape_string(date("Y-m-d"));

$text=htmlspecialchars($text);
$subject=htmlspecialchars($subject);


$sql= "

INSERT INTO `mail` (`id` ,`from` ,`to` ,`subject` ,`date` ,`text` ,`read` ,`trash`)
VALUES (NULL , '$from', '$to', '$subject', '$date', '$text', 'N', 'N')";


mysql_query($sql);

 if($sql) echo "<div id=\"view_box\" ><h3>Success</h3></div>";
     else echo "Error";
	

}
 ?>
<div id="send" style="display:none;">      
 
 <!--  send message -->
 <div id="view_box" >
 
 <h3>Send Message</h3>
 
 
 <? if($_SESSION[userid]) { ?> 
<div style="width:95%; margin-left:10px; float:left; line-height:18px;">


<form method="post" action="">
<strong>Subject: </strong><input name="subject"  style="width:100%;" type="text" /><br />


<div id="view_box" style="height:20px; margin-top:0px;"></div> 
<br />
<strong>Your Message:</strong>
<br />
<textarea name="text" cols="" rows="" style="width:100%; height:100px;"></textarea>
<input type="hidden" name="to" value="<? echo $id;?>" />
<input type="hidden" name="from" value="<? echo $_SESSION[userid];?>" />


<div id="view_box" style="height:20px; margin-top:0px;"></div> 
<input name="send" type="submit" value="send" />
<div id="view_box" style="height:20px; margin-top:0px;"></div> 
</form>
 
    <? } else { ?>
    <div style="width:95%; margin-left:10px; float:left; line-height:18px;">
             <div style='font-family: Arial, Helvetica, sans-serif; width:100%; float:left; font-size: 10px; margin-left:10px;'>
             You must be logged in to send message. Please <a href='/login.php'>login</a> or <a href='/signup.php'>signup (free)</a>.
             </div>
            <? } ?>
             
 </div> </div></div>
 <!--  send message-->







<!-- general info-->
<div id="view_box">
<h3>Comments</h3>

<table width="100%" border="0">
  <tr>
    <td > <? 
		$cresult = mysql_query("SELECT * FROM profile_comments WHERE profile = '$row[record_num]' ORDER BY timestamp DESC"); 
		if(mysql_num_rows($cresult) > 0) { 
		?>
        <div style='overflow : auto; max-height: 360px; font-family: Arial, Helvetica, sans-serif; font-size: 11px; clear: both;'>
			<? 
            
            while($crow = mysql_fetch_array($cresult)) { 
            ?>
            <a href="<? echo $basehttp; ?>/profiles/<? echo $crow[userid]; ?>.html"><? echo $crow[name]; ?></a> wrote <? echo datediff('n',$crow[timestamp],time(),true); ?> ago:<br/>
           <strong> <? echo $crow[comment]; ?></strong><br /><br />
           <? } ?>
        </div>
        <? } else { ?>
         <div style='font-family: Arial, Helvetica, sans-serif; font-size: 10px;'>
         There are no comments for this profile. Please leave your feedback and be the first!
         </div>
        <? } ?></td>
        </tr>
         <tr>
    <td align="center"><div id='comments' style='font-family: Arial, Helvetica, sans-serif; font-size: 11px;'>
        <? if($_SESSION[userid]) { ?>
        <hr /><br/>
            <form id="myform" action="javascript:get(document.getElementById('myform'));" style='margin: 0 0 0 0; padding: 0 0 0 0;'>
              <input type='hidden' name='id' id='id' value='<? echo $row[record_num]; ?>' />
                <input type='hidden' name='userid' id='userid' value='<? echo $user; ?>' />
              <span name="myspan" id="myspan" style='text-align: center; font-weight: bold; color: #ff0000;'></span>
                    <textarea style='width: 90%; height: 70px; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 10px; margin-bottom: 5px;' name="comment" id="comment"></textarea>
                    <br />
                    <input type="submit" name="button" id="button" value="Post Comment" /></td>
            </form>
            <? } else { ?>
             <div style='font-family: Arial, Helvetica, sans-serif; font-size: 10px;'>
             You must be logged in to post comments. Please <a href='/login.php'>login</a> or <a href='/signup.php'>signup (free)</a>.
             </div>
            <? } ?>
        </div></td>
  </tr>
</table>

</div>
<!-- end-->





<!-- general info-->
<div id="view_box" style="width:100%;">
<h3><? echo $profusername; ?>'s Recent Uploads</h3>

<?
            $result = mysql_query("SELECT content.*, content_views.views as views FROM content, content_views WHERE enabled = 1 AND content_views.content = content.record_num AND content.submitter = '$id' GROUP BY content.record_num ORDER BY content.record_num DESC LIMIT 0,8") or die(mysql_error());
            $total_results = mysql_num_rows($result);
            if($total_results < 1) {
                echo "<p>This user has not uploaded anything!</p>";
            }
            $counter = 0;
            while($row = mysql_fetch_array($result)) { 
                if($row[photos] == 1) { 
					include($basepath.'/templates/template.content_item_photo.php');
				}
				else {
					include($basepath.'/templates/template.content_item.php');
				}
            } 
			?>

<div style="float:left; height:5px; width:100%;"></div>
</div>
<!-- end-->



      
<div style="float:left; height:5px; width:100%;"></div> 
    </div>
        
        
        
        
        
   
        
        
   
        


<? include($basepath.'/templates/template.overall_footer.php'); ?>