modify_vcontest.php

<?php
include("conn.php");
$cid =convert_str($_POST['cid']);
if (db_contest_started($cid)==false&&db_user_match($nowuser,$nowpass)&&(db_user_isroot($nowuser)||strcasecmp(db_contest_owner($cid),$nowuser)==0)) {
    $title = convert_str($_POST['title']);
    $isprivate=0;
    $description =convert_str($_POST['description']);
    $lock_board_time=convert_str($_POST['lock_board_time']);
    $start_time=convert_str($_POST['start_time']);
    $end_time=convert_str($_POST['end_time']);

    if ($_POST["localtime"]==1) {
        $dt=new DateTime($start_time,new DateTimeZone($_POST['localtz']));
        $dt->setTimezone(new DateTimeZone($mytimezone));
        $start_time=$dt->format('Y-m-d H:i:s');
        $dt=new DateTime($lock_board_time,new DateTimeZone($_POST['localtz']));
        $dt->setTimezone(new DateTimeZone($mytimezone));
        $lock_board_time=$dt->format('Y-m-d H:i:s');
        $dt=new DateTime($end_time,new DateTimeZone($_POST['localtz']));
        $dt->setTimezone(new DateTimeZone($mytimezone));
        $end_time=$dt->format('Y-m-d H:i:s');
    }

    $ctype=convert_str($_POST['ctype']);
    $hide_others=convert_str($_POST['hide_others']);
    $pass=pwd(convert_str($_POST['password']));
    if ($_POST['password']!="") $isprivate=2;
    if ($ctype==0) $n = $problemcontestadd;
    else $n=$paratypemax;
    for($i=0;$i<$n;$i++){
        $ccid[$i] = $cid;
        $pid[$i] = convert_str($_POST['pid'.$i]);
        $lable[$i] = convert_str($_POST['lable'.$i]);
        $ptype[$i] = convert_str($_POST['ptype'.$i]);
        $base[$i] = convert_str($_POST['base'.$i]);
        $minp[$i] = convert_str($_POST['minp'.$i]);
        $paraa[$i] = convert_str($_POST['paraa'.$i]);
        $parab[$i] = convert_str($_POST['parab'.$i]);
        $parac[$i] = convert_str($_POST['parac'.$i]);
        $parad[$i] = convert_str($_POST['parad'.$i]);
        $parae[$i] = convert_str($_POST['parae'.$i]);
    }
    
    $stt=strtotime($start_time);
    $edt=strtotime($end_time);
    $lbt=strtotime($lock_board_time);
    $nt=time();
    
    //echo "$title $start_time $end_time $pid[0] $stt $edt $lbt $nt ";
    //echo $_POST['submit'];
    
    if ($title==""||$start_time==""||$end_time==""||!db_problem_exist($pid[0])||db_problem_hide($pid[0])||$stt==0||$edt==0||$stt<$nt-10*60||$edt-$stt<30*60||$edt-$stt>5*24*60*60||($lbt!=0&&($lbt<$stt&&$lbt>$edt))) {
        echo "Not Correctly Filled";
    }
    else {
    
        $sql_add_con = "update contest set
            title='$title',
            description='$description',
            lock_board_time='$lock_board_time',
            start_time='$start_time',
            end_time='$end_time',
            hide_others='$hide_others',
            type='$ctype',
            password='$pass'
            where cid='$cid'";
        $sql_add_con = change_in($sql_add_con);
        //echo "<br/>".$sql_add_con."<br/>";
        $pd=false;
        for($i=0;$i<$n;$i++){
            if($pid[$i] == "")continue;
            if (!db_problem_exist($pid[$i])||db_problem_hide($pid[$i])) $pd=true;
            else if ($ctype==1) {
                if ($ptype[$i]==1||$ptype[$i]==3) {
                    if (!is_numeric($base[$i])||!is_numeric($minp[$i])||!is_numeric($paraa[$i])||!is_numeric($parab[$i])) {
//                        echo $base[$i].is_numeric($base[$i]);
                        $pd=true;
                    }
                }
                else if ($ptype[$i]==2) {
                    if (!is_numeric($base[$i])||!is_numeric($minp[$i])||!is_numeric($paraa[$i])||!is_numeric($parab[$i])||!is_numeric($parac[$i])||!is_numeric($parad[$i])||!is_numeric($parae[$i])) {
                        //echo $i;
                        $pd=true;
                    }
                    if (abs(doubleval($paraa[$i])+doubleval($parab[$i])-1.0)>0.001||doubleval($parad[$i])<0||doubleval($parac[$i])<0.0001) {
                        $pd=true;
                    }
                }
                else if ($ptype[$i]!=0) {
                    $pd=true;
                    break;
                }
            }
        }
        if ($pd) {
            echo "Invalid Problem!";
            die();
        }
        $que_add_con = mysql_query($sql_add_con);
        $ssql="delete from contest_problem where cid='$cid'";
        mysql_query($ssql);
//        echo $sql_add_con;die();
        for($i=0;$i<$n;$i++){
            if($pid[$i] == "") continue;
            $que=false;
            if ($ctype==0) $sql= "insert into contest_problem (cid ,pid,lable) values ('".$ccid[$i]."','".$pid[$i]."','".$lable[$i]."')";
            else $sql = "insert into contest_problem (cid ,pid,lable,type,base,minp,para_a,para_b,para_c,para_d,para_e) values
                ('".$ccid[$i]."','".$pid[$i]."','".$lable[$i]."','".$ptype[$i]."','".$base[$i]."','".$minp[$i]."','".$paraa[$i]."','".$parab[$i]."','".$parac[$i]."','".$parad[$i]."','".$parae[$i]."')";
            //$sql = "insert into contest_problem (cid ,pid,lable) values('".$ccid[$i]."','".$pid[$i]."','".$lable[$i]."')";
            $sql = change_in($sql);
            $que = mysql_query($sql);
        }
        $cres=mysql_query("select problem.title from contest_problem,problem where cid=".$cid." and contest_problem.pid=problem.pid");
        $str=array();
        while ($crow=mysql_fetch_array($cres)) {
            $str[]=trim(strtolower($crow[0]));
        }
        sort($str);
        mysql_query("update contest set allp='".md5(implode($str,"[-,-]"))."' where cid=".$cid);
        echo "Success!";
    }
    
}
    
else {
    echo "You cannot modify this contest.";
}

?>