MINI Sh3ll

<?php
class keyword {
	private $objdb;

	public function __construct(){

		$this->objdb=new database;
		return true;
	}

    public function getKeywords($status = '1', $client_id = '', $shortcode_id = '') {        

        $sql = "SELECT k.*, s.shortcode, concat(u.firstname,' ',u.lastname) client_name, u.company, 
            case k.response_type when 0 then 'DR' when 1 then 'UF' when 2 then 'DRUF' END response_type_text,
            concat(cb.firstname,' ',cb.lastname) createdby_name 
            FROM keywords k 
            LEFT JOIN shortcodes s ON k.shortcode_id = s.id
            LEFT JOIN users u ON k.client_id = u.id
            LEFT JOIN users cb ON k.created_by = cb.id
            WHERE k.`status` IN (".$status.") ";

            if($client_id != ""){
                $sql .= " and k.client_id = '".$client_id."'";
            }

            if($shortcode_id != ""){
                $sql .= " and k.shortcode_id = '".$shortcode_id."'";
            }
            
            $sql .= " ORDER BY k.id DESC;";        
        
        $result = $this->objdb->get_records($sql);

        if($result == false)
            return false;
        else 
            return $result;        
    }

    public function getKeywordShortcodes($status = '1', $client_id = '') {        

        $sql = "SELECT distinct s.id, s.shortcode
            FROM keywords k 
            LEFT JOIN shortcodes s ON k.shortcode_id = s.id
            LEFT JOIN users u ON k.client_id = u.id
            LEFT JOIN users cb ON k.created_by = cb.id
            WHERE k.`status` IN (".$status.") ";

            if($client_id != ""){
                $sql .= " and k.client_id = '".$client_id."'";
            }

            $sql .= " ORDER BY s.id DESC;";        
        //y($sql);
        $result = $this->objdb->get_records($sql);

        if($result == false)
            return false;
        else 
            return $result;        
    }

    public function getActiveKeyword($shortcode, $keyword) {        

        $sql = "SELECT * FROM keywords s WHERE s.`status` in (0,1,5) and s.shortcode_id = '".mysql_escape($this->objdb->connection, $shortcode)."'
         and s.keyword = '".mysql_escape($this->objdb->connection, $keyword)."' LIMIT 1";
        
        $result = $this->objdb->get_records($sql);

        if($result == false)
            return false;
        else 
            return $result[0];        
    }

    function addKeyword($shcode = '')
    {
        if($shcode == '') return false;

        $sql = "insert into keywords(keyword, shortcode_id, description, client_id, startdate, enddate, response_type, response_text, response_url, url_parameters, status, created_by) values(
            '".mysql_escape($this->objdb->connection, $shcode['keyword'])."',             
            '".mysql_escape($this->objdb->connection, $shcode['shortcode_id'])."',             
            '".mysql_escape($this->objdb->connection, $shcode['description'])."',             
            '".mysql_escape($this->objdb->connection, $shcode['client_id'])."', 
            '".mysql_escape($this->objdb->connection, $shcode['startdate'])."', 
            '".mysql_escape($this->objdb->connection, $shcode['enddate'])."', 
            '".mysql_escape($this->objdb->connection, $shcode['response_type'])."', 
            '".mysql_escape($this->objdb->connection, $shcode['response_text'])."', 
            '".mysql_escape($this->objdb->connection, $shcode['response_url'])."', 
            '".mysql_escape($this->objdb->connection, $shcode['url_parameters'])."',             
            '".mysql_escape($this->objdb->connection, $shcode['status'])."',             
            '".mysql_escape($this->objdb->connection, $shcode['created_by'])."'
        )";
        //print $sql; die;
        $result = $this->objdb->saveRecords($sql);
        return $result;
    } 

    public function getKeywordById($keyword_id) {        

        $sql = "SELECT k.*, s.shortcode, concat(c.firstname,' ',c.lastname) client_name, c.company, c.address FROM keywords k LEFT JOIN shortcodes s ON k.shortcode_id = s.id
            LEFT JOIN users c ON k.client_id = c.id
            WHERE k.`status` in (0,1,5) and k.id = '".mysql_escape($this->objdb->connection, $keyword_id)."' LIMIT 1";
        //y($sql);
        $result = $this->objdb->get_records($sql);

        if($result == false)
            return false;
        else 
            return $result[0];        
    }

    function updateKeyword($shcode = '')
    {
        if($shcode == '') return false;

        $sql ="update keywords set
            response_type = '".mysql_escape($this->objdb->connection, $shcode['response_type'])."', 
            response_text = '".mysql_escape($this->objdb->connection, $shcode['response_text'])."', 
            response_url = '".mysql_escape($this->objdb->connection, $shcode['response_url'])."', 
            url_parameters = '".mysql_escape($this->objdb->connection, $shcode['url_parameters'])."',            
            modified_by = '".mysql_escape($this->objdb->connection, $shcode['modified_by'])."', 
            modified = now() 
            where id = '".$shcode['id']."' ";
        
        $result = $this->objdb->saveRecords($sql);        
    }
    
}
?>