0 ? $_GET['twg_rot'] : 0); $twg_rot = $twg_rot >= 360 ? 0 : $twg_rot; } else $twg_rot = -1; // twg_album if (isset($_GET['twg_album'])) { // we have to save the + es here :). $twg_album = replace_plus($_GET['twg_album']); $twg_album = str_replace("\\'", "'", $twg_album); $twg_album = urldecode($twg_album); // the double decode is because of some servers where this is needed! $twg_album = restore_plus($twg_album); $twg_album = replaceInput($twg_album); $album_enc = urlencode($twg_album); // Albumwert für links, damit diese richtig codiert werden. } else { $twg_album = false; $album_enc = false; } $album_param = ''; if ($twg_album) { $album_param = 'twg_album='.urlencode($twg_album) . '&'; } include (dirname(__FILE__) . '/../mapping.php'); // image if (isset($_GET['twg_show'])) { $image = $_GET['twg_show']; // we check for security if a .. is in the path we remove this! $pos = strpos (strtolower($image), "http://"); if ($pos === false) { $image = ereg_replace("/", "", $image); } $image = str_replace("\\'", "'", $image); // we don't allow external images this way anymore! - I have to think of a better way! $image = replaceInput($image); $image_enc = urlencode($image); } else { $image = false; $image_enc = false; } // twg_offset if (isset($_GET['twg_offset']) && $_GET['twg_offset'] > 0) { $twg_offset = $_GET['twg_offset']; $twg_offset = replaceInput($twg_offset); } else $twg_offset = 0; // folder offset ! 12,9 = 1st level offset 12, 2nd level offset 9 if (isset($_GET['twg_foffset']) && $_GET['twg_foffset'] != "0") { $twg_foffset = $_GET['twg_foffset']; $twg_foffset = replaceInput($twg_foffset); $_SESSION['twg_ses_foffset'] = $twg_foffset; } else if (isset($_GET['twg_foffset']) && $_GET['twg_foffset'] == '0') { $_SESSION['twg_ses_foffset'] = '0'; $twg_foffset = "0"; } else if ($twg_album) { // if we are in an album and no foffset is set then we are at 0,0 $twg_foffset = '0,0'; } else { $twg_foffset = '0,0'; } // twg_slideshow if (isset($_GET['twg_slideshow'])) { $twg_slideshow = $_GET['twg_slideshow']; $twg_slideshow = replaceInput($twg_slideshow); $twg_smallnav = 'TRUE'; $show_comments = false; $show_count_views = false; } else $twg_slideshow = false; if (isset($_GET['twg_top10'])) { $top10_type = $_GET['twg_top10']; $top10_type = replaceInput($top10_type); $top10 = true; } else $top10 = false; if (isset($_GET['twg_dir'])) { $dir = $_GET['twg_dir']; $dir = replaceInput($dir); } else $dir = "next"; if (isset($_GET['twg_random_display'])) { if (isset($_SESSION['twg_random' . $_GET['twg_random']])) { $image = $_SESSION['twg_random' . $_GET['twg_random']]; $image = replaceInput($image); $image_enc = urlencode($image); } else { // if external html page was open toooo long we jump to the first image $image = false; $image_enc = false; } } if (isset($_GET['twg_random'])) { if (isset($_SESSION['twg_random_album' . $_GET['twg_random']])) { $twg_album = $_SESSION['twg_random_album' . $_GET['twg_random']]; $twg_album = replaceInput($twg_album); $album_enc = urlencode($twg_album); } else { // if external html page was open toooo long we jump to the first image $twg_album = false; $album_enc = false; } } if (isset($_GET['twg_search_term'])) { $twg_search_term = $_GET['twg_search_term']; $twg_search_term = replaceInput($twg_search_term); } else $twg_search_term = " "; if (isset($_GET['twg_search_filename'])) { $twg_search_filename = true; } else $twg_search_filename = false; if (isset($_GET['twg_search_caption'])) { $twg_search_caption = true; } else $twg_search_caption = false; if (isset($_GET['twg_search_comment'])) { $twg_search_comment = true; } else $twg_search_comment = false; if (isset($_GET['twg_search_folders'])) { $twg_search_folders = true; } else $twg_search_folders = false; if (isset($_GET['twg_search_tags'])) { $twg_search_tags = true; } else $twg_search_tags = false; if (isset($_GET['twg_search_latest'])) { $twg_search_latest = true; $twg_search_folders = false; $twg_search_comment = false; $twg_search_caption = false; $twg_search_filename = false; $twg_search_tags = false; } else $twg_search_latest = false; if (isset($_GET['twg_search_max'])) { $twg_search_max = $_GET['twg_search_max']; $twg_search_max = replaceInput($twg_search_max); } else $twg_search_max = 50; if (isset($_GET['twg_search_num'])) { $twg_search_num = $_GET['twg_search_num']; $twg_search_num = replaceInput($twg_search_num); } else $twg_search_num = 50; if (isset($_GET['twg_search_exact'])) { $twg_search_exact=true; } else { $twg_search_exact=false; } ?>