File: /home/httpd/html/tubeshemale.com/public_html/mbApi.php
<?
@session_start();
error_reporting(0);
include('admin/db.php');
@mkdir($cache_path.'/mbApi');
$cacheName = str_replace('/','',str_replace($basehttp,'',$_SERVER['REQUEST_URI']));
$cached_file = $cache_path.'/mbApi/'.$cacheName;
$template = $_GET[template];
if(!file_exists("templates/template.$_GET[template].php")) {
?>
document.write("Template not found");
<?
exit();
}
if(!is_numeric($_GET[amount])) {
?>
document.write("Invalid amount");
<?
exit();
}
if(file_exists($cached_file) && time() - $overall_cache_time < filemtime($cached_file)) {
$string = file_get_contents($cached_file);
$array = unserialize($string);
}
else {
$mode = $_GET[mode];
$from = 0;
$max_results = $_GET[amount];
$_GET[q] = mysql_real_escape_array($_GET[q]);
switch($mode) {
case 'toprated':
$result = mysql_query("SELECT content.*, (SELECT content_views.views FROM content_views WHERE content_views.content = content.record_num) as views FROM content, ratings WHERE approved = 2 AND content.record_num = ratings.id AND ratings.total_votes > $minimum_votes AND content.enabled = 1 AND scheduled_date <= NOW() GROUP BY content.record_num ORDER BY content.rating DESC LIMIT $from,$max_results") or die(mysql_error());
break;
case 'discussed':
$result = mysql_query("SELECT content.*, COUNT(comments.record_num) as counter, (SELECT content_views.views FROM content_views WHERE content_views.content = content.record_num) as views FROM content, comments WHERE approved = 2 AND content.record_num = comments.content AND content.enabled = 1 AND scheduled_date <= NOW() GROUP BY content.record_num ORDER BY counter DESC LIMIT $from,$max_results") or die(mysql_error());
break;
case 'mostviewed':
$result = mysql_query("SELECT content.*, (SELECT content_views.views FROM content_views WHERE content_views.content = content.record_num) as views FROM content WHERE content.approved = 2 AND content.enabled = 1 AND scheduled_date <= NOW() ORDER BY views DESC LIMIT $from,$max_results") or die(mysql_error());
break;
case 'longest':
$result = mysql_query("SELECT content.*, (SELECT content_views.views FROM content_views WHERE content_views.content = content.record_num) as views FROM content WHERE content.approved = 2 AND content.enabled = 1 AND scheduled_date <= NOW() ORDER BY length DESC LIMIT $from,$max_results") or die(mysql_error());
break;
case 'search':
$q = str_replace('-',' ',htmlentities(mysql_real_escape_string($_GET[q])));
$result = mysql_query("SELECT content.*, (MATCH (title,keywords,description) AGAINST ('$q' IN BOOLEAN MODE)) as score, (SELECT content_views.views FROM content_views WHERE content_views.content = content.record_num) as views FROM content WHERE approved = 2 AND enabled = 1 AND scheduled_date <= NOW() AND MATCH (title,keywords,description) AGAINST ('$q' IN BOOLEAN MODE) HAVING score > 0 ORDER BY score DESC LIMIT $from,$max_results");
break;
case 'channel':
$chanid = mysql_real_escape_string($_GET[channel]);
$result = mysql_query("SELECT content.*, (SELECT content_views.views FROM content_views WHERE content_views.content = content.record_num) as views FROM content, content_niches WHERE approved = 2 AND content_niches.content = content.record_num AND content_niches.niche = '$chanid' AND content.enabled = 1 AND scheduled_date <= NOW() GROUP BY content.record_num ORDER BY encoded_date DESC LIMIT $from,$max_results") or die(mysql_error());
break;
case 'mostrecent':
$result = mysql_query("SELECT content.*, (SELECT content_views.views FROM content_views WHERE content_views.content = content.record_num) as views FROM content WHERE enabled = 1 AND scheduled_date <= NOW() AND approved = 2 ORDER BY encoded_date DESC LIMIT $from,$max_results") or die(mysql_error());
break;
case 'photos':
$result = mysql_query("SELECT content.*, (SELECT content_views.views FROM content_views WHERE content_views.content = content.record_num) as views FROM content WHERE enabled = 1 AND scheduled_date <= NOW() AND approved = 2 AND photos = 1 ORDER BY encoded_date DESC LIMIT $from,$max_results") or die(mysql_error());
break;
default:
$result = mysql_query("SELECT content.*, (SELECT content_views.views FROM content_views WHERE content_views.content = content.record_num) as views FROM content WHERE enabled = 1 AND scheduled_date <= NOW() AND approved = 2 ORDER BY encoded_date DESC LIMIT $from,$max_results") or die(mysql_error());
break;
}
while($row = mysql_fetch_array($result)) {
$array[] = $row;
}
$string = serialize($array);
file_put_contents($cached_file, $string);
}
ob_start();
foreach($array as $row) {
include("templates/template.$_GET[template].php");
}
$buffer = ob_get_contents();
//$buffer = preg_replace('/<!--(.*)-->/Uis', '', $buffer);
ob_end_clean();
$var = addslashes(trim(str_replace("\n","",str_replace("\r","",$buffer))));
echo "var b = \"".$var."\";";
echo "document.write(b);";
exit();
?>