<?

// MySQL hostname
$phpAds_hostname = "localhost";

// MySQL username
$phpAds_mysqluser = "mysqlusername";

// MySQL password
$phpAds_mysqlpassword = "mysqlpassword";

// The database phpAds lives in
$phpAds_db = "phpads";

// phpAds' database tables
$phpAds_tbl_adclicks = "adclicks";
$phpAds_tbl_adviews = "adviews";
$phpAds_tbl_adstats = "adstats";
$phpAds_tbl_banners = "banners";
$phpAds_tbl_clients = "clients";
$phpAds_tbl_session = "session";
$phpAds_tbl_acls = "acls";


// Use compact hourly stats or verbose (with host, etc.)
$phpAds_compact_stats = 1;

// The URL to your phpAds-installation
$phpAds_url_prefix = "http://www.your-url.com/phpAdsNew";

// Use INSERT DELAYED in logging functions?
$phpAds_insert_delayed = false;

// Your language file
$phpAds_language = "english";

// Enabled logging of adviews?
$phpAds_log_adviews = true;

// Enabled logging of adclicks?
$phpAds_log_adclicks = true;

// Admins's username
$phpAds_admin = "phpadsuser";

// Admin's password
$phpAds_admin_pw = "phpadspass";

// Admin's full name (used when sending stats via email)
$phpAds_admin_fullname = "Your Name";

// Admin's email address (used to set the FROM-address when sending email)
$phpAds_admin_email = "your@email.com";

//Mail Headers for the reflection of the sender of the daily ad reports
$phpAds_admin_email_headers = "From: $phpAds_admin_email \n";

// The name of this application
$phpAds_name = "phpAdsNew";

// Hosts to ignore (don't count adviews coming from them)
$phpAds_ignore_hosts = array();   // Example: array("slashdot.org", "microsoft.com");

// Reverse DNS lookup remotes hosts?
$phpAds_reverse_lookup = false;

// Use random or sequential banner retrieval? (0=random, 1=sequential)
$phpAds_random_retrieve = "0";

// Use conditional keywords? (0=no, 1=yes)
$phpAds_con_key = "1";

// Use multiple keywords for banners in banner table? (0=no, 1=yes)
$phpAds_mult_key = "1";

// E-mail admin when clicks/views get low? (0=no, 1=yes)
$phpAds_warn_admin = "1";

// E-mail client when clicks/views get low? (0=no, 1=yes)
$phpAds_warn_client = "1";

// Company Name
$phpAds_company_name = "mysite.com";

// Minimum clicks/views before warning e-mail is sent
$phpAds_warn_limit = "100"; 

// Disable magic_quotes_runtime - don't change
set_magic_quotes_runtime(0);

// weeks start on sundays if "0", on mondays if "1"
$phpAds_begin_of_week = "1";

// Precision of showing percentage results
$phpAds_percentage_decimals = "1";

// standard colors
$phpAds_table_border_color = "#000099";
$phpAds_table_back_color = "#CCCCCC";
$phpAds_table_back_color_alternative = "#F7F7F7";
$phpAds_main_back_color = "#FFFFFF";

$phpAds_persistent_connections = "0";


if (empty($phpAds_path)) {
    if (strlen(__FILE__) > strlen(basename(__FILE__)))
        $phpAds_path=substr(__FILE__, 0, strlen(__FILE__) - strlen(basename(__FILE__)) - 1);
    // If this path doesn't work for you, customize it here like this
    // $phpAds_path="/home/myname/www/phpAdsNew";       // Note: no trailing backslash
}

if (empty($phpAds_path))
    $phpAds_path = ".";

?>
<? // $id:

// it's best if we do this only once per load, not every time we call rand.    
mt_srand((double)microtime()*1000000);

require("$phpAds_path/dblib.php"); 

// Get a banner
function get_banner($what, $clientID, $context=0, $source="")
{
	global $phpAds_db, $REMOTE_HOST, $phpAds_tbl_banners, $REMOTE_ADDR, $HTTP_USER_AGENT,$phpAds_con_key, $phpAds_random_retrieve,$phpAds_mult_key;
	$where = "";
	if($context == 0)
		$context = array();
    
	for($i=0; $i<count($context); $i++)
	{
		list($key, $value) = each($context[$i]);
		{
			switch($key)
			{
				case "!=": $exclusive[] = "bannerID <> $value"; break;
				case "==": $inclusive[] = "bannerID = $value"; break;
			}
		}
	}

	$where_exclusive = !empty($exclusive) ? implode(" AND ", $exclusive): "";
	$where_inclusive = !empty($inclusive) ? implode(" OR ", $inclusive): "";

	$where = sprintf("$where_inclusive %s $where_exclusive", (!empty($where_inclusive) && !empty($where_exclusive)) ? "AND": "");

	$where = trim($where);
	if(!empty($where))
		$where .= " AND ";


	// separate parts
	$what_parts = explode ("|",$what);	


	for ($wpc=0;$wpc<sizeof($what_parts);$wpc++)	// build a query and execute for each part
	{
		$select = "
			SELECT
				bannerID,
				banner,
				clientID,
				format,
				width,
				height,
				alt,
				bannertext,
				url,
				weight,
				seq,
				target
			FROM
				$phpAds_tbl_banners 
			WHERE
				$where
				active = 'true' ";

		if($clientID != 0)
			$select .= " AND clientID = $clientID ";

		if (ereg("^[0-9]+$", $what_parts[$wpc]))
		{
			$select .= " AND bannerID = $what_parts[$wpc] ";
		}
    	elseif (ereg("^[0-9]+x[0-9]+$", $what_parts[$wpc]))
    	{
            list($width, $height) = explode("x", $what_parts[$wpc]);
    		// Get all banners with the specified width/height
    		$select .= " AND width = $width AND height = $height ";
    	}
		else
		{
			switch($what_parts[$wpc]) 
        	{
			// Get all HTML banners     
			case "html":  
				$select .= " AND format = 'html' ";
				break;

				// Not any of the special words (i.e. 'html'), So, must be a keyword
			default: 
				$select .= " AND (";

					$what_array = explode(",",$what_parts[$wpc]);
				for($k=0; $k<count($what_array); $k++)
				{
					if($phpAds_random_retrieve == "1")
					{
						if(substr($what_array[$k],0,1)=="+" OR substr($what_array[$k],0,1)=="_")
						{
							$what_array[$k]=substr($what_array[$k],1);
							$select=substr($select,0,(strlen($select)-3));
							if($what_array[$k]!="" && $what_array[$k]!=" ")
								$select .= "AND keyword LIKE '%".trim($what_array[$k])."%' OR ";
						}
						elseif(substr($what_array[$k],0,1)=="-")
						{
							$what_array[$k]=substr($what_array[$k],1);
							$select=substr($select,0,(strlen($select)-3));
							$select .= "AND keyword NOT LIKE '%".trim($what_array[$k])."%' OR ";
						}
						else
						{
							if($phpAds_mult_key == "1")
							{
								if($what_array[$k]!="" && $what_array[$k]!=" ")
									$select .= "keyword LIKE '%".trim($what_array[$k])."%' OR ";
							}
							else
								$select .= "keyword = '".trim($what_array[$k])."' OR ";
						}
					}
					else
					{
						if($phpAds_mult_key == "1")
							$select .= "keyword LIKE '%".trim($what_array[$k])."%' OR ";
						else
							$select .= "keyword = '".trim($what_array[$k])."' OR ";
					}
				}

                /*
                The special 'global' keyword allows you to define a banner as global and
                show up under all keywords. I put this in so that if I didn't have any banners 
                for a particular keyword, instead of being blank, it would show one of the global
                banners - Weston Bustraan <weston@infinityteldata.net> 
                */                
                if (sizeof($what_parts) == 1)
                {
                    $select .= "keyword = 'global') ";
                }
                else
                {
                    $select .= "0) ";	// Not very nice, but works perfectly :-)
                }					
				break;
			} //switch($what_parts[$wpc])
		}

		if($phpAds_random_retrieve == "1") 			
		{
			$seq_select = $select . " AND seq!='1'";

			// First attempt to fetch a banner
			$res = @db_query($seq_select);
			
			if (@mysql_num_rows($res) == 0) 		
			{
				// No banner left, reset all banners in this category to 'unused', try again below
    			$del_select=strstr($select,'WHERE');
    			$delete_select="UPDATE $phpAds_tbl_banners SET seq='' ".$del_select;
				@db_query($delete_select);

				$select = $seq_select;				
			}
			else
			{
				// Found banners, continue
				break;
			}
		}

		// Attempt to fetch a banner
		$res = @db_query($select);
		if ($res) 
		{
			if (@mysql_num_rows($res) > 0)	break;	// Found banners, continue
		}

		// No banners found in this part, try again with next part
	}

	if(!$res)
		return(false);

	$rows = array();
	$weightsum = 0;
	while ($tmprow = @mysql_fetch_array($res))
	{
        // weight of 0 disables the banner
        if ($tmprow["weight"])
        {
            $weightsum += $tmprow["weight"];
		    $rows[] = $tmprow; 
	    }
    }

	$date = getdate(time());
	$request = array(
		'remote_host'	=>	$REMOTE_ADDR,
		'user_agent'	=>	$HTTP_USER_AGENT,
		'weekday'	=>	$date['wday'],
		'source'	=>	$source,
		'time'		=>	$date['hours']);


    while ($weightsum && sizeof($rows))
    {
        $low = 0;
        $high = 0;
        $ranweight = ($weightsum>1)?mt_rand(0,$weightsum-1):0;
        for ($i=0; $i<sizeof($rows); $i++)
        {
            $low = $high;
            $high += $rows[$i]["weight"];
            if ($high > $ranweight && $low <= $ranweight)
            {
                $tmprow=$rows[$i];
                if (acl_check($request,$tmprow))
                    return ($tmprow);
                
                // Matched, but acl_check failed.  delete this row and adjust $weightsum
                if (sizeof($rows) == 1)
                    return false;

                $weightsum -= $tmprow["weight"];
                $rows[$i] = array_pop($rows);
                break;                              // break out of the for loop to try again
            }
        }
    }
}

// Mail warning - preset is reached
function warn_mail($warn)
{
	global $phpAds_url_prefix, $phpAds_warn_limit, $phpAds_company_name, $phpAds_warn_admin, $phpAds_warn_client;
	global $phpAds_admin_email, $phpAds_admin_email_headers;
	$clientcontact=$warn["contact"];
	$clientname=$warn["clientname"];
	$strWarnMailSubject = "Ad views/clicks are low at $phpAds_company_name";
	$strWarnAdminTxt = "Click or View count is getting below $phpAds_warn_limit  for $clientname";
	$strWarnClientTxt = "Dear $clientcontact,\n\n Click or View count is getting below $phpAds_warn_limit  for your $clientname banners at $phpAds_company_name.\n\n Please visit $phpAds_url_prefix or reply to this e-mail to renew your subscription.";
	if($phpAds_warn_admin=='1')
		mail($phpAds_admin_email, $strWarnMailSubject, $strWarnAdminTxt, $phpAds_admin_email_headers);
	if($email=$warn["email"])
	{
		if($phpAds_warn_client=='1')
			mail($email, $strWarnMailSubject, $strWarnClientTxt, $phpAds_admin_email_headers);
	}
}

// Log an adview for the banner with $bannerID
function log_adview($bannerID,$clientID)
{
	global $phpAds_log_adviews, $phpAds_ignore_hosts, $phpAds_reverse_lookup, $phpAds_insert_delayed;
	global $row, $phpAds_tbl_banners, $phpAds_tbl_clients, $phpAds_language;
	global $REMOTE_HOST, $REMOTE_ADDR, $phpAds_warn_limit, $phpAds_warn_client, $phpAds_warn_admin;
	global $phpAds_admin_email, $phpAds_admin_email_headers, $phpAds_url_prefix, $strWarnAdminTxt, $strWarnClientTxt;

	// set banner as "used"
	db_query("Update $phpAds_tbl_banners SET seq='1' WHERE bannerID='$bannerID'");

	if(!$phpAds_log_adviews)
		return(false);

	if($phpAds_reverse_lookup)
		$host = isset($REMOTE_HOST) ? $REMOTE_HOST : @gethostbyaddr($REMOTE_ADDR);
	else
		$host = $REMOTE_ADDR;

	// Check if host is on list of hosts to ignore

	$found = 0;
	while(($found == 0) && (list($key, $ignore_host)=each($phpAds_ignore_hosts))) 
	{
		if(eregi($ignore_host, $host)) // host found in ignore list
			$found = 1;
	}

	if($found == 0)
	{ 
		$res = @db_log_view($bannerID, $host);

		// Decrement views
		$currentview=db_query("SELECT * FROM $phpAds_tbl_clients WHERE clientID=$clientID and views > 0");
		if($viewcount=mysql_fetch_array($currentview))
		{
			$viewcount["views"]=$viewcount["views"]-1;

			// Mail warning - preset is reached
			if($viewcount["views"]==$phpAds_warn_limit)
				warn_mail($viewcount);
			db_query("UPDATE $phpAds_tbl_clients SET views=$viewcount[views] WHERE clientID=$clientID");
			// Check view count and de-activate banner if needed
			if($viewcount["views"]==0 && $viewcount["clicks"]==0)
				db_query("UPDATE $phpAds_tbl_banners SET active='false' WHERE clientID=$clientID");
		}
	}
}

// Java-encodes text for use with (remote) javascript tags
function enjavanate($str)
{
	$lines = explode("\n", $str);
	
	reset ($lines);
	while (list(,$line) = each($lines))
	{
        $line = str_replace("\r", "", $line);
        $line = str_replace("'", "\\'", $line);
        if (!empty($line))
            print "document.writeln('$line');\n";
	}
}


function view_raw($what, $clientID=0, $target="", $source="", $withtext=0, $context=0)
{
    global $phpAds_db, $REMOTE_HOST;

	if(!ereg("^[0-9]+$", $clientID))
	{
		$target = $clientID;
		$clientID = 0;
	}

	db_connect();
    $row = get_banner($what, $clientID, $context, $source);

	$outputbuffer = "";
	
	if(!empty($row["bannerID"])) 
	{
		if(!empty($target))
		{
			if(strstr($target,'+'))
			{
				if($row["target"]!="")
					$target=$row["target"];
				else
					$target=substr($target,1);
			}
			$target = " target=\"$target\"";
		}
		if($row["format"] == "html")
		{
			if(!empty($row["url"])) 
			{
				$outputbuffer .= "<a href=\"$GLOBALS[phpAds_url_prefix]/click.php?bannerID=$row[bannerID]\"$target>";
                $outputbuffer .= $row["banner"];
			} else
			{
				$lowerbanner=strtolower($row["banner"]);
				$hrefpos=strpos($lowerbanner,"href=");
				while ($hrefpos > 0)
				{
					$hrefpos=$hrefpos+5;
					$quotepos=strpos($lowerbanner,"\"",$hrefpos);
					if ($quotepos > 0)
					{
						$endquotepos=strpos($lowerbanner,"\"",$quotepos+1);
						$newbanner=$newbanner.substr($row["banner"],$prevhrefpos,$hrefpos-$prevhrefpos)."\"$GLOBALS[phpAds_url_prefix]/htmlclick.php?bannerID=$row[bannerID]&dest=".urlencode(substr($row["banner"],$quotepos+1,$endquotepos-$quotepos-1));
						$prevhrefpos=$hrefpos+($endquotepos-$quotepos);
					} else
					{
						$spacepos=strpos($lowerbanner," ",$hrefpos+1);
						$endtagpos=strpos($lowerbanner,">",$hrefpos+1);
						if ($spacepos<$endtagpos) $endpos=$spacepos; else $endpos=$endtagpos;
 						$newbanner=$newbanner.substr($row["banner"],$prevhrefpos,$hrefpos-$prevhrefpos)."\"$GLOBALS[phpAds_url_prefix]/htmlclick.php?bannerID=$row[bannerID]&dest=".urlencode(substr($row["banner"],$hrefpos,$endpos-$hrefpos))."\"";
						$prevhrefpos=$hrefpos+($endpos-$hrefpos);
					}
					$hrefpos=strpos($lowerbanner,"href=",$hrefpos+1);
				}
				$newbanner=$newbanner.substr($row["banner"],$prevhrefpos);
				$outputbuffer .= $newbanner;
			}
			if(!empty($row["url"])) 
				$outputbuffer .= "</a>";
		}
		else
		{
			if (empty($row["url"]))
			{
				if ($row["format"] == "url")	// patch for ie bug
					$outputbuffer .= "<img src=\"$row[banner]\" width=$row[width] height=$row[height] alt=\"$row[alt]\" border=0>";
    			else
					$outputbuffer .= "<img src=\"$GLOBALS[phpAds_url_prefix]/viewbanner.php?bannerID=$row[bannerID]\" width=$row[width] height=$row[height] alt=\"$row[alt]\" border=0>";
			}
			else
			{
				if ($row["format"] == "url")	// patch for ie bug
					$outputbuffer .= "<a href=\"$GLOBALS[phpAds_url_prefix]/click.php?bannerID=$row[bannerID]\"$target><img src=\"$row[banner]\" width=$row[width] height=$row[height] alt=\"$row[alt]\" border=0></a>";
				else
					$outputbuffer .= "<a href=\"$GLOBALS[phpAds_url_prefix]/click.php?bannerID=$row[bannerID]\"$target><img src=\"$GLOBALS[phpAds_url_prefix]/viewbanner.php?bannerID=$row[bannerID]\" width=$row[width] height=$row[height] alt=\"$row[alt]\" border=0></a>";
			}
			if($withtext && !empty($row["bannertext"]))
				$outputbuffer .= "<BR>\n<a href=\"$GLOBALS[phpAds_url_prefix]/click.php?bannerID=$row[bannerID]\"$target>".$row["bannertext"]."</a>";
		}
		if(!empty($row["bannerID"]))
			log_adview($row["bannerID"],$row["clientID"]);
	}
    db_close();
	
	return( array("html" => $outputbuffer, 
				  "bannerID" => $row["bannerID"])
		  );
}

function view_t($what, $target="")
{
	view ($what, $target, 1);
}

function view($what, $clientID=0, $target="", $source="", $withtext=0, $context=0)
{
	$output = view_raw($what, $clientID, "$target", "$source", $withtext, $context);
	print($output["html"]);
	return($output["bannerID"]);
}

function view_js($what, $clientID=0, $target="", $source="", $withtext=0, $context=0)
{
	$output = view_raw($what, $clientID, "$target", "$source", $withtext, $context);
	
	enjavanate($output["html"]);
	return($output["bannerID"]);
}

?>
<?
function acl_check($request, $row) {
	global $phpAds_tbl_acls;
	global $phpAds_db;
	$bannerID = $row['bannerID'];
	if (($res = db_query("SELECT * FROM $phpAds_tbl_acls
		WHERE bannerID = $bannerID ORDER by acl_order")) == 0){ 
		return(0);
	}
	while ($aclrow = mysql_fetch_array($res)) {
		switch ($aclrow['acl_type']) {
			case 'clientip':
				$result = acl_check_clientip($request, $aclrow);
				break;
			case 'useragent':
				$result = acl_check_useragent($request, $aclrow);
				break;
			case 'weekday':
				$result = acl_check_weekday($request, $aclrow);
				break;
			case 'domain':
				$result = acl_check_domain($request, $aclrow);
				break;
			case 'source':
				$result = acl_check_source($request, $aclrow);
				break;
			case 'time':
				$result = acl_check_time($request, $aclrow);
				break;
			default:
				return(0);
		}
		if ($result != -1) {
			return($result);
		}	
	}
	return(1); 
}

function acl_check_weekday($request, $aclrow) {
	$data = $aclrow['acl_data'];
	$day = $request['weekday'];
	if ($data == "*" || $day == $data) {
		switch ($aclrow['acl_ad']) {
			case 'allow':
				return(1);
			case 'deny';
				return(0);
			default:
				return(-1);
		}
	}
	return(-1);
}


function acl_check_useragent($request, $aclrow) {
	$data = $aclrow['acl_data'];
	$agent = $request['user_agent'];
	if ($data == "*" || eregi($data, $agent)) {
		switch ($aclrow['acl_ad']) {
			case 'allow':
				return(1);
			case 'deny';
				return(0);
			default:
				return(-1);
		}
	}
	return(-1);	
}

function acl_check_clientip($request, $aclrow) {
	$data = $aclrow['acl_data'];
	$host = $request['remote_host'];
	list ($net, $mask) = explode('/', $data);
	$net = explode('.', $net);
	$pnet = pack('C4', $net[0], $net[1], $net[2], $net[3]);
	$mask = explode('.', $mask);
	$pmask = pack('C4', $mask[0], $mask[1], $mask[2], $mask[3]);
	$host = explode('.', $host);
	$phost = pack('C4', $host[0], $host[1], $host[2], $host[3]);
	if ($data == "*" || ($phost & $pmask) == $pnet) {
		switch ($aclrow['acl_ad']) {
			case 'allow':
				return(1);
			case 'deny';
				return(0);
			default:
				return(-1);
		}
	}
	return(-1);
}

function acl_check_domain($request, $aclrow) {
	$data = $aclrow['acl_data'];
	$ip = $request['remote_host'];
	$host = gethostbyaddr($ip);
	if ($host == $ip)
	{
		return(-1);
	} 
    else
	{
		$domain = substr($host,-(strlen($data)+1));
		if ($data == "*" || strtolower($domain) == strtolower(".$data"))
        {
			switch ($aclrow['acl_ad']) {
				case 'allow':
					return(1);
				case 'deny':
					return(0);
				default:
					return(-1);
			}
		}
		return(-1);
	}
}

function acl_check_source($request, $aclrow) {
	$data = $aclrow['acl_data'];
	$source = $request['source'];
	if ($data == "*" || strtolower($source) == strtolower($data))
	{
		switch ($aclrow['acl_ad']) {
			case 'allow':
				return(1);
			case 'deny':
				return(0);
			default:
				return(-1);
		}
	}
	return(-1);
}

function acl_check_time($request, $aclrow) {
	$data = $aclrow['acl_data'];
	$time = $request['time'];
	if ($data == "*" || $time == $data) {
		switch ($aclrow['acl_ad']) {
			case 'allow':
				return(1);
			case 'deny';
				return(0);
			default:
				return(-1);
		}
	}
	return(-1);
}

?>