MastodonStartpage/web/mustard/edinsth.php

<?php

require('include/glob.php');
require('include/muoribene.php');
require('include/sessionstart.php');
require('include/myconn.php');
require('include/getadmacc.php');
require('include/tables.php');
$tables=tables($link);
require('include/mb_ucfirst.php');
require('include/jsencode.php');

$dbg='';

use function mysqli_real_escape_string as myesc;

// praticamente una macro
function hspech($str) {
	return(htmlspecialchars($str,ENT_QUOTES|ENT_HTML5,'UTF-8'));
}

$contextopts=array(
	'http'=>array(
		'timeout'=>5
	),
	'socket'=>array(
		'tcp_nodelay'=>true
    )
);
$context=stream_context_create($contextopts);

$langs=array('xx'=>'Local language','ca'=>'Català','en'=>'English','es'=>'Español','fr'=>'Français','it'=>'Italiano');
$exvalsjsarr='null;'.N;
$morejs='';

$dbg.='<pre>GET:'.N.print_r($_GET,1).'POST:'.N.print_r($_POST,1).'</pre>';

function check(&$link,&$account,$mode,$table,$lntable,$lncolumn,$id) {
	if ($mode=='edit' || $mode=='remove') {
		$res=mysqli_query($link,'SELECT * FROM '.$table.' WHERE ID='.$id)
			or muoribene(__LINE__.': '.mysqli_error($link),true);
		if (mysqli_num_rows($res)==1) {
			$row=mysqli_fetch_assoc($res);
			if ($account['Level']=='guest') {
				if ($row['AddedBy']!=$account['ID'])
					muoribene('You can’t modify an entry you didn’t add.',true);
				if ($table!='Localities') {
					$que='SELECT * FROM '.$lntable.' LEFT JOIN Instances ON Instances.ID='.$lntable.'.InstID WHERE '.$lntable.'.'.$lncolumn.'='.$id.' AND Instances.ID NOT IN (SELECT ID FROM Instances WHERE GuestID='.$account['ID'].')';
				} else {
					$que='SELECT * FROM Instances WHERE LocalityID='.$id.' AND Instances.ID NOT IN (SELECT ID FROM Instances WHERE GuestID='.$account['ID'].')';
				}
				$rres=mysqli_query($link,$que)
					or muoribene(__LINE__.': '.mysqli_error($link).'<br>Query: '.hspech($que),true);
				if (mysqli_num_rows($rres)>0)
					muoribene('You can’t modify an entry that<br>has already been linked by others.',true);
			}
		} else {
			muoribene('There is no «'.$table.'» entry with ID='.$id.N,true);
		}
	} elseif ($mode=='add') {
		if ($account['Level']=='guest') {
			$res=mysqli_query($link,'SELECT * FROM '.$table.' WHERE AddedBy='.$account['ID'])
				or muoribene(__LINE__.': '.mysqli_error($link),true);
			if (mysqli_num_rows($res)>=$account['Max'.$table])
				muoribene('You can’t add more «'.$table.'»<br>entries ('.$account['Max'.$table].' max).',true);
		}
	}
}

function edaddrem($id,$table,$column,$dispselarr,$lntable,$lncolumn,$searchid,$dispselid,$recbid) {
	global $link, $morejs, $account, $dlang;
	check($link,$account,$_POST['m'],$table,$lntable,$lncolumn,$id);
	if ($_POST['m']=='edit' || $_POST['m']=='add') {
		$res=mysqli_query($link,'SELECT * FROM '.$table.' WHERE '.$column.'=\''.myesc($link,$_POST['v']).'\'')
			or muoribene(__LINE__.': '.mysqli_error($link),true);
		if (mysqli_num_rows($res)>0)
			muoribene('«'.hspech($_POST['v']).'» already exists!',true);
	}
	if ($_POST['m']=='edit') {
		if ($table!='Languages') {
			mysqli_query($link,'UPDATE '.$table.' SET '.$column.'=\''.myesc($link,$_POST['v']).'\' WHERE ID='.$id)
				or muoribene(__LINE__.': '.mysqli_error($link),true);
		} else {
			$langs=array('NameOrig'=>mb_ucfirst(locale_get_display_name($_POST['v'],$_POST['v'])),
						'NameCA'=>mb_ucfirst(locale_get_display_name($_POST['v'],'ca')),
						'NameEN'=>mb_ucfirst(locale_get_display_name($_POST['v'],'en')),
						'NameES'=>mb_ucfirst(locale_get_display_name($_POST['v'],'es')),
						'NameFR'=>mb_ucfirst(locale_get_display_name($_POST['v'],'fr')),
						'NameIT'=>mb_ucfirst(locale_get_display_name($_POST['v'],'it')));
			if ($_POST['v']==$langs['NameOrig']) {
				muoribene('«'.$_POST['v'].'»: unknown language identifier.',true);
			} else {
				mysqli_query($link,'UPDATE '.$table.' SET Code=\''.myesc($link,$_POST['v']).'\', NameOrig=\''.myesc($link,$langs['NameOrig']).'\', NameCA=\''.myesc($link,$langs['NameCA']).'\', NameEN=\''.myesc($link,$langs['NameEN']).'\', NameES=\''.myesc($link,$langs['NameES']).'\', NameFR=\''.myesc($link,$langs['NameFR']).'\', NameIT=\''.myesc($link,$langs['NameIT']).'\' WHERE ID='.$id)
					or muoribene(__LINE__.': '.mysqli_error($link),true);
				$_POST['v']=$langs['Name'.$dlang].' ['.$_POST['v'].']';
			}
		}
		$morejs.='parent.'.$dispselarr.'=parent.cheltxtbyval(parent.'.$dispselarr.','.$id.',"'.jsencode($_POST['v']).'");'.N;
		$morejs.='parent.'.$dispselarr.'=parent.sortByKey(parent.'.$dispselarr.',0);'.N;
		$morejs.='parent.'.$dispselarr.'=parent.selonebyval(parent.'.$dispselarr.','.$id.');'.N;
	} elseif ($_POST['m']=='add') {
		if ($table!='Languages') {
			mysqli_query($link,'INSERT INTO '.$table.' (ID, '.$column.', AddedBy) VALUES (NULL, \''.myesc($link,$_POST['v']).'\', \''.$account['ID'].'\')')
				or muoribene(__LINE__.': '.mysqli_error($link),true);
			$newid=mysqli_insert_id($link);
		} else {
			$langs=array('NameOrig'=>mb_ucfirst(locale_get_display_name($_POST['v'],$_POST['v'])),
						'NameCA'=>mb_ucfirst(locale_get_display_name($_POST['v'],'ca')),
						'NameEN'=>mb_ucfirst(locale_get_display_name($_POST['v'],'en')),
						'NameES'=>mb_ucfirst(locale_get_display_name($_POST['v'],'es')),
						'NameFR'=>mb_ucfirst(locale_get_display_name($_POST['v'],'fr')),
						'NameIT'=>mb_ucfirst(locale_get_display_name($_POST['v'],'it')));
			if (strtolower($_POST['v'])==strtolower($langs['NameOrig'])) {
				muoribene('«'.$_POST['v'].'»: unknown language identifier.',true);
			} else {
				mysqli_query($link,'INSERT INTO '.$table.' (ID, Code, NameOrig, NameCA, NameEN, NameES, NameFR, NameIT, AddedBy) VALUES (NULL, \''.myesc($link,$_POST['v']).'\', \''.myesc($link,$langs['NameOrig']).'\', \''.myesc($link,$langs['NameCA']).'\', \''.myesc($link,$langs['NameEN']).'\', \''.myesc($link,$langs['NameES']).'\', \''.myesc($link,$langs['NameFR']).'\', \''.myesc($link,$langs['NameIT']).'\', '.$account['ID'].')')
					or muoribene(__LINE__.': '.mysqli_error($link),true);
				$newid=mysqli_insert_id($link);
				$_POST['v']=$langs['Name'.$dlang].' ['.$_POST['v'].']';
			}
		}
		$morejs.='parent.'.$dispselarr.'.push(["'.jsencode($_POST['v']).'",'.$newid.',true]);'.N;
		$morejs.='parent.'.$dispselarr.'=parent.sortByKey(parent.'.$dispselarr.',0);'.N;
		$morejs.='parent.'.$dispselarr.'=parent.selonebyval(parent.'.$dispselarr.','.$newid.');'.N;
	} elseif ($_POST['m']=='remove') {
		if (!array_key_exists('subst',$_POST) || preg_match('/^[0-9]+$/',$_POST['subst'])!==1)
			muoribene(__LINE__.': Malformed input.',true);
		$newid=$_POST['subst']+0;
		mysqli_query($link,'DELETE FROM '.$table.' WHERE ID='.$id)
			or muoribene(__LINE__.': '.mysqli_error($link),true);
		if ($newid==0) {
			$res=mysqli_query($link,'SELECT * FROM '.$lntable.' WHERE '.$lncolumn.'='.$id)
				or muoribene(__LINE__.': '.mysqli_error($link),true);
			mysqli_query($link,'DELETE FROM '.$lntable.' WHERE '.$lncolumn.'='.$id)
				or muoribene(__LINE__.': '.mysqli_error($link),true);
			while ($row=mysqli_fetch_assoc($res)) {
				$rres=mysqli_query($link,'SELECT * FROM '.$lntable.' WHERE InstID='.$row['InstID'].' ORDER BY Pos ASC') or muoribene(__LINE__.': '.mysqli_error($link),true);
				$pos=0;
				while ($rrow=mysqli_fetch_assoc($rres)) {
					$pos++;
					mysqli_query($link,'UPDATE '.$lntable.' SET Pos='.$pos.' WHERE InstID='.$rrow['InstID'].' AND '.$lncolumn.'='.$rrow[$lncolumn].' AND Pos='.$rrow['Pos'])
						or muoribene(__LINE__.': '.mysqli_error($link),true);
				}
			}
		} else {
			$res=mysqli_query($link,'SELECT * FROM '.$lntable.' WHERE '.$lncolumn.'='.$id)
				or muoribene(__LINE__.': '.mysqli_error($link),true);
			while ($row=mysqli_fetch_assoc($res)) {
				$rres=mysqli_query($link,'SELECT * FROM '.$lntable.' WHERE InstID='.$row['InstID'].' AND '.$lncolumn.'='.$newid) or muoribene(__LINE__.': '.mysqli_error($link),true);
				if (mysqli_num_rows($rres)==0) {
					mysqli_query($link,'UPDATE '.$lntable.' SET '.$lncolumn.'='.$newid.' WHERE InstID='.$row['InstID'].' AND '.$lncolumn.'='.$id.' AND Pos='.$row['Pos']) or muoribene(__LINE__.': '.mysqli_error($link),true);
//+++ potrebbe aver senso mettere js qui che sposti la voce agli associati se non è già lì, magari con un alerta
				} else {
					mysqli_query($link,'DELETE FROM '.$lntable.' WHERE InstID='.$row['InstID'].' AND '.$lncolumn.'='.$id.' AND Pos='.$row['Pos']) or muoribene(__LINE__.': '.mysqli_error($link),true);
					$rres=mysqli_query($link,'SELECT * FROM '.$lntable.' WHERE InstID='.$row['InstID'].' ORDER BY Pos ASC') or muoribene(__LINE__.': '.mysqli_error($link),true);
					$pos=0;
					while ($rrow=mysqli_fetch_assoc($rres)) {
						$pos++;
						mysqli_query($link,'UPDATE '.$lntable.' SET Pos='.$pos.' WHERE InstID='.$rrow['InstID'].' AND '.$lncolumn.'='.$rrow[$lncolumn].' AND Pos='.$rrow['Pos'])
							or muoribene(__LINE__.': '.mysqli_error($link),true);
					}
				}
			}
		}
		$morejs.='parent.'.$dispselarr.'=parent.rmelbyval(parent.'.$dispselarr.','.$id.');'.N;
	}
	$morejs.='parent.filtsel (parent.'.$dispselarr.', parent.document.getElementById("'.$searchid.'").value, "'.$dispselid.'", "'.$recbid.'", "'.$searchid.'", "white", "#ff8080");'.N;
	$morejs.='parent.closeinpup();'.N;
}

if (array_key_exists('w',$_GET) && array_key_exists('i',$_GET) && preg_match('/^[0-9]+$/',$_GET['i'])===1 && array_key_exists('m',$_GET) && in_array($_GET['m'],array('edit','add','remove'))) {
	$id=$_GET['i']+0;
	switch ($_GET['w']) {
		case 'LocalityID':
			$out=buildform($id,'Localities','Name'.$dlang,'Location name','Instances','LocalityID');
			$exvalsjsarr=setjsarr('Localities','Name'.$dlang);
		break;
		case 'DispLangs':
			$out=buildform($id,'Languages','Code','Language code','InstOurLangs','OurLangID');
			$exvalsjsarr=setjsarr('Languages','Code');
		break;
		case 'DispFinModes':
			$out=buildform($id,'Financing','Type','Financing modality','InstFinancing','FinID');
			$exvalsjsarr=setjsarr('Financing','Type');
		break;
		case 'DispPolicies':
			$out=buildform($id,'Policies','Name','Policy','InstPolicies','PolID');
			$exvalsjsarr=setjsarr('Policies','Name');
		break;
		case 'DispTags':
			$out=buildform($id,'Tags','Name','Tag','InstTags','TagID');
			$exvalsjsarr=setjsarr('Tags','Name');
		break;
		default:
		muoribene(__LINE__.': Malformed input.',true);
		break;
	}
} elseif (array_key_exists('m',$_POST) && in_array($_POST['m'],array('edit','add','remove')) && array_key_exists('t',$_POST) && in_array($_POST['t'],array('Localities','Languages','Financing','Policies','Tags')) && array_key_exists('i',$_POST) && preg_match('/^[0-9]+$/',$_POST['i'])===1) {
	$id=$_POST['i']+0;
	if (array_key_exists('v',$_POST)) {
		$out='';
		if ($_POST['t']=='Localities') {
			if ($_POST['m']!='remove') {
//https://nominatim.openstreetmap.org/search?q=bresso,+milano&format=json&accept-language=fr&email=pezcurrel@tiscali.it
//https://nominatim.openstreetmap.org/lookup?osm_ids=R45266&format=json&accept-language=fr&addressdetails=1&email=pezcurrel@tiscali.it
				$url='https://nominatim.openstreetmap.org/search?q='.urlencode($_POST['v']).'&format=json&email='.$iniarr['ref_email'];
				$osmd=@file_get_contents($url,false,$context);
				if ($osmd!==false) {
					$osmd=json_decode($osmd,true);
					if (count($osmd)>0) {
						$addrkeys=array('neighbourhood','borough','suburb','city','municipality','county','district','province','region','state','country');
						$onegood=false;
						$divs='';
						foreach ($osmd as $loc) {
							$good=false;
							$div='';
							//$loc=array(); // simula errore
							if (array_key_exists('osm_id',$loc) && array_key_exists('osm_type',$loc) && $loc['osm_type']=='relation') {
								$div.='<input type="hidden" id="OSMID-'.$loc['osm_id'].'" value="'.$loc['osm_id'].'">'.N;
								$div.='<ul class="hiful">'.N;
								foreach ($langs as $code=>$lang) {
									$hidval='';
									$url='https://nominatim.openstreetmap.org/lookup?osm_ids=R'.$loc['osm_id'].'&format=json&accept-language='.$code.'&addressdetails=1&email='.$iniarr['ref_email'];
									$osmdil=@file_get_contents($url,false,$context);
									if ($osmdil!==false) {
										$osmdil=json_decode($osmdil,true);
										if (array_key_exists(0,$osmdil) && array_key_exists('address',$osmdil[0])) {
											//$osmdil[0]['address']=array(); // simula errore
											$dispname=array();
											foreach ($addrkeys as $addrkey)
												if (array_key_exists($addrkey,$osmdil[0]['address']))
													$dispname[]=$osmdil[0]['address'][$addrkey];
											if (count($dispname)>0) {
												$dispname=array_unique($dispname);
												$dispname=implode(', ',$dispname);
												$div.='<li><strong>'.$lang.':</strong> '.hspech($dispname).'</li>'.N;
												$hidval=jsencode($dispname);
												if ($code=='xx') {
													$res=mysqli_query($link,'SELECT NameOrig FROM Localities WHERE NameOrig=\''.myesc($link,$dispname).'\'')
														or muoribene(__LINE__.': '.mysqli_error($link),true);
													if (mysqli_num_rows($res)==0)
														$good=true;
												}
											} else {
												$div.='<li><strong>'.$lang.':</strong> <span class="hiferr">No useful «address» data found in OpenStreetMap lookup data.</span></li>'.N;
											}
										} else {
											$div.='<li><strong>'.$lang.':</strong> <span class="hiferr">No «address» found in OpenStreetMap lookup data.</span></li>'.N;
										}
									} else {
										$div.='<li><strong>'.$lang.':</strong> <span class="hiferr">Couldn’t fetch OpenStreetMap lookup data.</span></li>'.N;
									}
									$div.='<input type="hidden" id="Loc'.strtoupper($code).'-'.$loc['osm_id'].'" value="'.$hidval.'">'.N;
								}
								if ($good) {
									$onegood=true;
									$divs.='<div class="hifloc" onclick="subosmd(\''.$loc['osm_id'].'\');">'.N.$div;
								} else {
									$divs.='<div class="hiflocno">'.N.$div;
								}
								$divs.='</ul>'.N.'</div>'.N;
							}
						}
						if ($onegood) {
							$out.='<form action="edinsth.php" method="post" id="f">'.N;
							$out.='<p><strong>Please choose the most appropriate entry<br>among those with green background</strong></p>'.N;
							$out.=$divs;
							$out.='<input type="hidden" id="i" name="i" value="'.$_POST['i'].'">'.N;
							$out.='<input type="hidden" id="t" name="t" value="'.$_POST['t'].'">'.N;
							$out.='<input type="hidden" id="m" name="m" value="'.$_POST['m'].'">'.N;
							$out.='<input type="hidden" id="OSMID" name="OSMID" value="">'.N;
							$out.='<input type="hidden" id="LocXX" name="LocXX" value="">'.N;
							$out.='<input type="hidden" id="LocCA" name="LocCA" value="">'.N;
							$out.='<input type="hidden" id="LocEN" name="LocEN" value="">'.N;
							$out.='<input type="hidden" id="LocES" name="LocES" value="">'.N;
							$out.='<input type="hidden" id="LocFR" name="LocFR" value="">'.N;
							$out.='<input type="hidden" id="LocIT" name="LocIT" value="">'.N;
							$out.='</form>'.N;
						} else {
							$out.='<p><strong>Sorry, no good OpenStreetMap entry was found<br>(they are either incomplete or already in our database)</strong></p>'.N;
							$out.=$divs;
						}
					} else {
						$out='<p class="hiferr">Couldn’t find OpenStreetMap data for «'.hspech($_POST['v']).'».</p>';
					}
				} else {
					$out='<p class="hiferr">Couldn’t fetch OpenStreetMap search data.</p>'.N;
				}
			} else {
				// locality remove
				check($link,$account,$_POST['m'],'Localities','Instances','LocalityID',$id);
				$out='CANCELLO!';
				if (!array_key_exists('subst',$_POST) || preg_match('/^[0-9]+$/',$_POST['subst'])!==1)
					muoribene(__LINE__.': Malformed input.',true);
				$_POST['subst']+=0;
				if ($_POST['subst']==0) {
					mysqli_query($link,'UPDATE Instances SET LocalityID=NULL WHERE LocalityID='.$id)
						or muoribene(__LINE__.': '.mysqli_error($link),true);
				} else {
					mysqli_query($link,'UPDATE Instances SET LocalityID='.$_POST['subst'].' WHERE LocalityID='.$id)
						or muoribene(__LINE__.': '.mysqli_error($link),true);
				}
				mysqli_query($link,'DELETE FROM Localities WHERE ID='.$id)
					or muoribene(__LINE__.': '.mysqli_error($link),true);
				$morejs.='parent.locselarr=parent.rmelbyval(parent.locselarr,'.$id.');'.N;
				$morejs.='parent.filtsel (parent.locselarr, parent.document.getElementById("locsearch").value, "LocalityID", "locselre", "locsearch", "white", "#ff8080");'.N;
				$morejs.='parent.closeinpup();'.N;
			}
		} elseif ($_POST['t']=='Languages') {
			edaddrem($id,'Languages','Name'.$dlang,'langselarr','InstOurLangs','OurLangID','langsearch','DispLangs','langselre');
		} elseif ($_POST['t']=='Financing') {
			edaddrem($id,'Financing','Type','finselarr','InstFinancing','FinID','finsearch','DispFinModes','finselre');
		} elseif ($_POST['t']=='Policies') {
			edaddrem($id,'Policies','Name','polselarr','InstPolicies','PolID','polsearch','DispPolicies','polselre');
		} elseif ($_POST['t']=='Tags') {
			edaddrem($id,'Tags','Name','tagselarr','InstTags','TagID','tagsearch','DispTags','tagselre');
		} else {
			// questo è ridondante ma fa niente
			muoribene(__LINE__.': Malformed input.',true);
		}
	} elseif (array_key_exists('OSMID',$_POST) && preg_match('/^[0-9]+$/',$_POST['OSMID'])===1 && array_key_exists('LocXX',$_POST) && array_key_exists('LocCA',$_POST) && array_key_exists('LocEN',$_POST) && array_key_exists('LocES',$_POST) && array_key_exists('LocFR',$_POST) && array_key_exists('LocIT',$_POST)) {
		// locality edit/add
		check($link,$account,$_POST['m'],'Localities','Instances','LocalityID',$id);
		$res=mysqli_query($link,'SELECT * FROM Localities WHERE Name'.$dlang.'=\''.myesc($link,$_POST['Loc'.$dlang]).'\'')
			or muoribene(__LINE__.': '.mysqli_error($link),true);
		if (mysqli_num_rows($res)>0)
			muoribene('«'.hspech($_POST['Loc'.$dlang]).'» already exists!',true);
		$out='EDITO/AGGIUNGO!';
		if ($_POST['m']=='add') {
			mysqli_query($link,'INSERT INTO Localities (ID, OSMID, NameOrig, NameCA, NameEN, NameES, NameFR, NameIT, AddedBy) VALUES (NULL, \''.myesc($link,$_POST['OSMID']).'\', \''.myesc($link,$_POST['LocXX']).'\', \''.myesc($link,$_POST['LocCA']).'\', \''.myesc($link,$_POST['LocEN']).'\', \''.myesc($link,$_POST['LocES']).'\', \''.myesc($link,$_POST['LocFR']).'\', \''.myesc($link,$_POST['LocIT']).'\', \''.$account['ID'].'\')')
				or muoribene(__LINE__.': '.mysqli_error($link),true);
			$id=mysqli_insert_id($link);
			$morejs.='parent.locselarr.push(["'.jsencode($_POST['Loc'.$dlang]).'",'.$id.',true]);'.N;
		} elseif ($_POST['m']=='edit') {
			mysqli_query($link,'UPDATE Localities SET OSMID=\''.myesc($link,$_POST['OSMID']).'\', NameOrig=\''.myesc($link,$_POST['LocXX']).'\', NameCA=\''.myesc($link,$_POST['LocCA']).'\', NameEN=\''.myesc($link,$_POST['LocEN']).'\', NameES=\''.myesc($link,$_POST['LocES']).'\', NameFR=\''.myesc($link,$_POST['LocFR']).'\', NameIT=\''.myesc($link,$_POST['LocIT']).'\' WHERE ID='.$id)
				or muoribene(__LINE__.': '.mysqli_error($link),true);
			$morejs.='parent.locselarr=parent.cheltxtbyval(parent.locselarr,'.$id.',"'.jsencode($_POST['Loc'.$dlang]).'");'.N;
		}
		$morejs.='parent.locselarr=parent.sortByKey(parent.locselarr,0);'.N;
		$morejs.='parent.locselarr=parent.selonebyval(parent.locselarr,'.$id.');'.N;
		$morejs.='parent.filtsel (parent.locselarr, parent.document.getElementById("locsearch").value, "LocalityID", "locselre", "locsearch", "white", "#ff8080");'.N;
		$morejs.='parent.closeinpup();'.N;
	} else {
		muoribene(__LINE__.': Malformed input.',true);
	}
} else {
	muoribene(__LINE__.': Malformed input.',true);
}

function buildform($id,$table,$column,$title,$lntable,$lncolumn) {
	global $account, $tables, $link;
	check($link,$account,$_GET['m'],$table,$lntable,$lncolumn,$id);
	$out='';
	if ($_GET['m']=='edit' || $_GET['m']=='remove') {
		$res=mysqli_query($link,'SELECT * FROM '.$table.' WHERE ID='.$id)
			or muoribene(__LINE__.': '.mysqli_error($link),true);
		$row=mysqli_fetch_assoc($res);
		if ($_GET['m']=='edit') {
			$out.='<div class="hiflab"><label for="v">'.$title.'</label></div>'.N;
			$out.='<input type="text" class="hifinp" name="v" id="v" maxlength="'.$tables[$table][$column].'" value="'.hspech($row[$column]).'">'.N;
			$out.='<script language="JavaScript">'.N;
			$out.='<!--'.N;
			$out.='document.getElementById(\'v\').focus();'.N;
			$out.='document.getElementById(\'v\').select();'.N;
			$out.='//-->'.N;
			$out.='</script>'.N;
		} elseif ($_GET['m']=='remove') {
			$lnres=mysqli_query($link,'SELECT * FROM '.$lntable.' WHERE '.$lncolumn.'='.$id)
				or muoribene(__LINE__.': '.mysqli_error($link),true);
			$nlinking=mysqli_num_rows($lnres);
			if ($nlinking>0) {
				$out.='<div class="hiflab">«'.hspech($row[$column]).'» is referenced by '.$nlinking.' '.(($nlinking==1) ? 'instance' : 'instances').'!</div>'.N;
				$out.='<div class="hifdiv">What do you want to do with '.(($nlinking==1) ? 'this reference' : 'those '.$nlinking.' references').'?<br>If you choose “Delete” '.(($nlinking==1) ? 'it' : 'they').' will be removed; otherwise you can select a substitution record.</div>'.N;
				$out.='<select id="subst" name="subst" class="hifinp">'.N;
				$out.='<option value="0">Delete</option>'.N;
				$lnres=mysqli_query($link,'SELECT * FROM '.$table.' WHERE ID!='.$id.' ORDER BY '.$column.' ASC')
					or muoribene(__LINE__.': '.mysqli_error($link),true);
				while ($lnrow=mysqli_fetch_assoc($lnres)) {
					$out.='<option value="'.$lnrow['ID'].'">Subst. with «'.hspech($lnrow[$column]).'»</option>'.N;
				}
				$out.='</select>'.N;
			} else {
				$out.='<input type="hidden" name="subst" value="0">'.N;
			}
			$out.='<div class="hiflab">Are you sure you want to remove «'.$row[$column].'»?</div>'.N;
			$out.='<input type="hidden" name="v" value="IGNORAMI">'.N;
		}
		$out.='<input type="hidden" name="i" value="'.$id.'">'.N;
	} elseif ($_GET['m']=='add') {
		$out.='<div class="hiflab"><label for="v">'.$title.'</label></div>'.N;
		$out.='<input type="text" class="hifinp" name="v" id="v" maxlength="'.$tables[$table][$column].'" value="">'.N;
		$out.='<script language="JavaScript">'.N;
		$out.='<!--'.N;
		$out.='document.getElementById(\'v\').focus();'.N;
		$out.='document.getElementById(\'v\').select();'.N;
		$out.='//-->'.N;
		$out.='</script>'.N;
		$out.='<input type="hidden" name="i" value="0">'.N;
	}
	$out.='<input type="hidden" name="m" value="'.$_GET['m'].'">'.N;
	$out.='<input type="hidden" name="t" value="'.$table.'">'.N;
	$out.='<div id="errmsg"></div>'.N;
	$out.='<table class="hiftab"><tr><td style="width:50%"><input type="button" value="Cancel" class="hifbut" onclick="parent.closeinpup()"></td><td style="width:50%"><input type="button" value="Ok" class="hifbut" onclick="ckf(\''.$_GET['m'].'\',\''.$table.'\')"></td></tr></table>'.N;
	$out='<form action="edinsth.php" method="post" id="f" onsubmit="return ckf(\''.$_GET['m'].'\',\''.$table.'\');">'.N.$out.'</form>'.N;
	return($out);
}

function setjsarr($table,$column) {
	global $link;
	$jsarr=array();
	$res=mysqli_query($link,'SELECT '.$column.' FROM '.$table)
		or muoribene(__LINE__.': '.mysqli_error($link),true);
	while ($row=mysqli_fetch_assoc($res)) {
		$jsarr[]=jsencode(strtolower($row[$column]));
	}
	$jsarr='["'.implode('","',$jsarr).'"];'.N;
	return($jsarr);
}

mysqli_close($link);

?>
<!DOCTYPE HTML>
<html lang="en">
<head>
<title>Mustard - Little edit’s helper</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="description" content="Admin pages for Mastodon Startpage">
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
<script language="JavaScript" src="js/confirma.js?v=<?php echo($cjrand); ?>"></script>
<script language="JavaScript" src="js/alerta.js?v=<?php echo($cjrand); ?>"></script>
<link rel="stylesheet" type="text/css" href="theme.css?v=<?php echo($cjrand); ?>">
<script language="JavaScript">
<!--
exvalsarr=<?php echo($exvalsjsarr); ?>

function ckf(mode,table) {
	var ok=false;
	if (mode=='remove') {
		ok=true;
	} else if (mode=='add' || mode=='edit') {
		var val=document.getElementById('v').value.trim(), vallow=val.toLowerCase(), len=exvalsarr.length, i=0, found=false;
		document.getElementById('v').value=val;
		if (val!='') {
			for (i=0; i<len; i++) {
				if (exvalsarr[i]==vallow) {
					found=true;
					break;
				}
			}
			if (found) {
				document.getElementById('errmsg').innerHTML='«'+val+'» already exists!';
			} else {
				ok=true;
			}
		} else {
			document.getElementById('errmsg').innerHTML='You can’t submit an empty value!';
		}
	}
	if (ok) {
		var wdiv=document.getElementById('wait');
		if (table=='Localities' && mode!='remove')
			wdiv.innerHTML='Fetching data from OpenStreetMap.org (can take some time) ...';
		else
			wdiv.innerHTML='Sending data ...';
		wdiv.style.display='block';
		document.getElementById('f').submit();
	} else {
		return false;
	}
}

function subosmd(osmid) {
	if (document.getElementById('OSMID-'+osmid).value=='' || document.getElementById('LocXX-'+osmid).value=='' || document.getElementById('LocCA-'+osmid).value=='' || document.getElementById('LocEN-'+osmid).value=='' || document.getElementById('LocES-'+osmid).value=='' || document.getElementById('LocFR-'+osmid).value=='' || document.getElementById('LocIT-'+osmid).value=='') {
		alerta('Error','<p>Couldn’t save this entry: missing data for one or more languages.</p>');
	} else {
		document.getElementById('OSMID').value=document.getElementById('OSMID-'+osmid).value;
		document.getElementById('LocXX').value=document.getElementById('LocXX-'+osmid).value;
		document.getElementById('LocCA').value=document.getElementById('LocCA-'+osmid).value;
		document.getElementById('LocEN').value=document.getElementById('LocEN-'+osmid).value;
		document.getElementById('LocES').value=document.getElementById('LocES-'+osmid).value;
		document.getElementById('LocFR').value=document.getElementById('LocFR-'+osmid).value;
		document.getElementById('LocIT').value=document.getElementById('LocIT-'+osmid).value;
		document.getElementById('f').submit();
	}
}

<?php echo($morejs); ?>

//-->
</script>
</head>
<body class="hifbody">
<div id="fullscreen">
<div id="middlerow">
<?php echo($out); ?>
</div>
</div>
<!--
<div id="debugh">
<?php echo($dbg); ?>
</div>
-->
<div id="wait">
...
</div>
<div id="popup">
<div id="inpopup">
<div id="popupcont">
...
</div>
</div>
</div>
</body>
</html>