<?  
  ini_set('display_errors',1);

  function numero($numero){
   //compruebo que los caracteres sean los permitidos
   $permitidos = "0123456789";
   for ($i=0; $i<strlen($numero); $i++){
      if (strpos($permitidos, substr($numero,$i,1))===false){
         return false;
      }
   }
   return true;
  }


  function getCurrentUrl(){  
     $domain = $_SERVER['HTTP_HOST'];  
     $url = "http://" . $domain . $_SERVER['REQUEST_URI'];  
     return $url;  
  } 
  
  function tags($string, $encoding = 'UTF-8'){
  
        $search  = array(' a ',' lo ', ' de ', ' los ', ' y ', ' del ', ' las ', ' la ', ' ya ', ' tu ');
        $replace = array(' , ',' , ', ' , ', ' , ', ' , ', ' , ', ' , ', ' , ', ' , ', ' , ');
        $m       = str_replace($search, $replace, $string);
		
        $search  = array(' , , , ', ' , , ', ' ', ',,,');
        $replace = array(' ', ' ', ',', ',');

        $m       = str_replace($search, $replace, $m);
		
        return $m;
    }
  
  function sanhtml($cadena)
  {
     $new_string = filter_var($cadena, FILTER_SANITIZE_STRING); 
     return $new_string;
  }

  function sanint($cadena)
  {
     $new_string = filter_var($cadena, FILTER_SANITIZE_NUMBER_INT); 
     return $new_string;
  }

 function limpiarCadena($valor)
 {
    $valor = strtoupper($valor);
    $valor = str_replace("BENCHMARK","",$valor);
    $valor = str_replace("HAVING","",$valor);
    $valor = str_replace("FALSE","",$valor);
    $valor = str_replace("TRUE","",$valor);
    $valor = str_replace("BINARY BASE64","",$valor);
    $valor = str_replace("SP_CONFIGURE","",$valor);
    $valor = str_replace("RECONFIGURE","",$valor);
    $valor = str_replace("XML","",$valor);
    $valor = str_replace("ALLSELECT","",$valor);
    $valor = str_replace("OUTFILE","",$valor);
    $valor = str_replace("DUMPFILE","",$valor);
    $valor = str_replace("@OUTPUTFILE","",$valor);
    $valor = str_replace("NULL","",$valor);
    $valor = str_replace("USERNAME","",$valor);
    $valor = str_replace("ALL","",$valor);
    $valor = str_replace("/**/","",$valor);
    $valor = str_replace("RAW","",$valor);
    $valor = str_replace("SEPARATOR","",$valor);
    $valor = str_replace("FROM","",$valor);
    $valor = str_replace("GROUP_CONCAT","",$valor);
    $valor = str_replace("%2b","",$valor);
    $valor = str_replace("CONCAT_WS","",$valor);
    $valor = str_replace("CONCAT","",$valor);
    $valor = str_replace("INTO","",$valor);
    $valor = str_replace("TABLE_SCHEMA","",$valor);
    $valor = str_replace("INFORMATION_SCHEMA","",$valor);
    $valor = str_replace("JOIN","",$valor);
    $valor = str_replace("CREATE","",$valor);
    $valor = str_replace("UPDATE","",$valor);
    $valor = str_replace("INSERT","",$valor);
    $valor = str_replace("TRUNCATE","",$valor);
    $valor = str_replace("SCRIPT","",$valor);
    $valor = str_replace("META","",$valor);
    $valor = str_replace("EXEC","",$valor);
    $valor = str_replace("CONVERT","",$valor);
    $valor = str_replace("SET","",$valor);
    $valor = str_replace("DECLARE","",$valor);
	$valor = str_replace("CHAR","",$valor);
	$valor = str_replace("UNION","",$valor);
	$valor = str_replace("CAST","",$valor);
	$valor = str_replace("AND","",$valor);
	$valor = str_replace("SELECT","",$valor);
	$valor = str_replace("COPY","",$valor);
	$valor = str_replace("DELETE","",$valor);
	$valor = str_replace("DROP","",$valor);
	$valor = str_replace("DUMP","",$valor);
	$valor = str_replace(" OR ","",$valor);
	$valor = str_replace("%","",$valor);
	$valor = str_replace("LIKE","",$valor);
	$valor = str_replace("--","",$valor);
	$valor = str_replace("^","",$valor);
	$valor = str_replace("[","",$valor);
	$valor = str_replace("]","",$valor);
	$valor = str_replace("\\","",$valor);
	$valor = str_replace("!","",$valor);
	$valor = str_replace("¡","",$valor);
	$valor = str_replace("?","",$valor);
	$valor = str_replace("=","",$valor);
	$valor = str_replace("&","",$valor);
	$valor = str_replace('"','',$valor);
	$valor = str_replace("-","",$valor);	
	$valor = str_replace("'","",$valor);	
	$valor = str_replace("/","",$valor);	
	$valor = str_replace("(","",$valor);	
	$valor = str_replace(")","",$valor);	
	return $valor;
 } 
 function SanitizeInputXSS($dirty_input) {
	return htmlspecialchars(rawurldecode(trim($dirty_input)), ENT_QUOTES,'UTF-8');
 }
 
 function SanitizeInputSQL($dirty_input) {
	if (get_magic_quotes_gpc()) $value = stripslashes($dirty_input);
	$value = mysql_real_escape_string($dirty_input);
	return $value;
 }
 
 $input_arr = array(); 
 foreach ($_GET as $key => $input_arr) 
 { 
	$_GET[$key] = addslashes(limpiarCadena($input_arr)); 
 }

  $id  = sanint($_GET['id']);
  $id  = intval($id);
  
//  $gal = sanhtml($_GET['gal']);
  $gal = "";

  $id  = SanitizeInputXSS($id);
 

  // ----------------------------- Pagina anterior 
  $prim_reg_an = $id - 1; 
  $prim_reg_ant = abs($prim_reg_an);        // Tomamos el valor absoluto 
  if ($id < 2)  
  {  
    $prim_reg_an = 1;
  } 
  $pag_anterior = "<span><a href='http://pontecool.com/fotos/gallery.php?id=$prim_reg_ant'><button class='btn btn-success' formaction='galerias.php?pagi=$prim_reg_ant'>Anterior</button></a></span>";
  // ----------------------------- Pagina siguiente 
  $prim_reg_sigu = $id + 1; 
  if ($prim_reg_sigu > 444)  
  { 
    $bit = 1;
    $prim_reg_sigu = 10;
  } 
  
   if ($bit ==1)  
  { 
  $pag_siguiente = "<span><a href='http://sociales.pontecool.com/gallery.php?id=$prim_reg_sigu'><button class='btn btn-success' formaction='galerias.php?pagi=$prim_reg_sigu'>Siguiente</button></a></span>";

  } else 
  { 
      $pag_siguiente = "<span><a href='http://pontecool.com/fotos/gallery.php?id=$prim_reg_sigu'><button class='btn btn-success' formaction='galerias.php?pagi=$prim_reg_sigu'>Siguiente</button></a></span>";

  }  

  
  // ----------------------------- Boton inicio
  $pag_inicio = "<span><a href='http://pontecool.com/fotos/gallery.php?id=1'><button class='btn btn-success' formaction='galerias.php'>Inicio</button></a></span>";
  // ----------------------------- Separador 
  // Creamos la barra de navegacion 
  $pagi_navegacion = "$pag_anterior $separador $pag_inicio $separador $pag_siguiente"; 

  $hlink = getCurrentUrl();
  require 'config/connect.php';
  //$busqueda = mysql_db_query($conf['dbname'],$conf['dbtags']);
  
  mysqli_select_db($link,$dbname);
  $busqueda = mysqli_query($link,$dbseek);

  while ($row = mysqli_fetch_array($busqueda))
  {
         $news = $row["noticia"];
		 $tags = $row["tags"];
  }
  mysqli_close($link);
  
  require 'include/init.php';

  if ($gal == '') 
  {  
       $dbseek = 'select title from cpg14x_albums where aid = '.$id;
       //$link = MYSQL_CONNECT($dbserver,$dbuser,$dbpass) or die ( "<H3>Sever fuera de función</H3>");
       //$result=mysql_db_query($dbname,$dbseek);
	   
       $link =  mysqli_connect($dbserver,$dbuser,$dbpass);
       mysqli_select_db($link,$dbname);
       $result = mysqli_query($link,$dbseek);
	   
       while ($row=mysqli_fetch_array($result))
       {
         $tit = $row["title"];
    	 $aid = $row["aid"];
		 echo $aid;
       }
       $tags = tags($tit);
       $dbpath = 'select * from cpg14x_pictures where aid = '.$id.' order by pwidth';;
       //$search = mysql_db_query($dbname,$dbpath);  
	   
       mysqli_select_db($link,$dbname); //2017
       $search = mysqli_query($link,$dbpath);
	   
	   $indice = 1;
	   $e1 = "";
	   $e2 = "";
       while ($row=mysqli_fetch_array($search))
       {
          $gal = $row["filepath"];
     	  $fil = $row["filename"];
		  $fec = $row["mtime"];
     	  $zis = "albums/".$gal.$fil;
     	  $ubi = "albums/".$gal."thumb_".$fil;
		  $vis = rand(1, 3);
		  if ($vis == 1) $star='Lo más visto';
		  if ($vis == 2) $star='Muy cool';
		  if ($vis == 3) $star='Ultra cool';
		  $link = getCurrentUrl();
 		  $e2 = $e2.' <!-- item Content --> 
				  <li data-tags="'.$star.'" class="marginbottom"> 
				      <div class="span3"> 
					     <div class="paddingleft paddingright paddingbottom">
					       <div class="shadow center">'." 
						      <a class='fancybox-buttons' data-fancybox-group='button' caption='".ltrim($link)."' title='".ltrim($tit)."' href='".$zis."'>".'
					  	      <img alt="'.$tit.'" src="'.$ubi.'" style="text-align: center"/></a>		   </div> <h5 class="margintop">'.$tit.'</h5> 
							  <p class="small">Date: '.$fec.' by // pontecool</p> 
					     </div> 
					  </div> 
				  </li> 
				<!-- item Content End -->';
		   $indice++;
       }
	   //mysqli_close($link); 
  }
  //mysql_close();
  mysqli_free_result($result); 
  mysqli_free_result($search); 
?>  

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="utf-8">
    <title><? echo $tit; ?></title>
    <meta name="description" content="<? echo $tit; ?>">
	<meta name="keywords" content="<? echo $tags; ?>" >

    <script type="text/javascript">
    (function(d){
    var f = d.getElementsByTagName('SCRIPT')[0], p = d.createElement('SCRIPT');
    p.type = 'text/javascript';
    p.async = true;
    p.src = '//assets.pinterest.com/js/pinit.js';
    f.parentNode.insertBefore(p, f);
    }(document));
    </script>
<!--    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <meta name="author" content="bnrcreativelab.com">
    <meta name="copyright" content="Copyright 2013" />
	<meta name="keywords" content="kids,template,html,bootstrap,children,play,games,video,fun,happy,parents,young,store" >
    <meta name="googlebot" content="noarchive" />
    <meta name="content-language" content="en-US" />
    <meta name="date" content="Tue, 7 Aug 2012 11:10:00 GMT" />
    <meta name="cache-control" content="no-Store" />
    <meta http-equiv="expires" content="Thu, 7 Aug 2014 12:00:00 GMT" />
    <meta name="refresh" content="15;URL=http://www.bnrcreativelab.com/html/kids/" /> -->

    <!-- Le styles -->
    <link href="assets/css/bootstrap.css" rel="stylesheet">
    <link href="assets/css/socialmediabutton.css" rel="stylesheet">
    <link href="assets/css/slideshow.html" rel="stylesheet">
    <link href="assets/css/gallery.css" rel="stylesheet">
    <link href="assets/css/type.css" rel="stylesheet">
    <link href="assets/css/style.css" rel="stylesheet" type="text/css" />
    <link href="assets/css/docs.css" rel="stylesheet">
    <link href="assets/js/google-code-prettify/prettify.css" rel="stylesheet">
	<link rel="stylesheet" href="assets/css/add.css" type="text/css" media="screen" />    
    <link href="assets/css/bootstrap-responsive.css" rel="stylesheet">

    <link href="assets/css/style_fotos.css" rel="stylesheet" type="text/css" />


    <!-- Le HTML5 shim, for IE6-8 support of HTML5 elements -->
    <!--[if lt IE 9]>
      <script src="http://html5shim.googlecode.com/svn/trunk/html5.js"></script>
    <![endif]-->

    <!-- Le fav and touch icons -->
    <link rel="shortcut icon" href="assets/ico/favicon.ico">
    <link rel="apple-touch-icon-precomposed" sizes="144x144" href="assets/ico/apple-touch-icon-144-precomposed.png">
    <link rel="apple-touch-icon-precomposed" sizes="114x114" href="assets/ico/apple-touch-icon-114-precomposed.png">
    <link rel="apple-touch-icon-precomposed" sizes="72x72" href="assets/ico/apple-touch-icon-72-precomposed.png">
    <link rel="apple-touch-icon-precomposed" href="assets/ico/apple-touch-icon-57-precomposed.png">
    
    <!-- googe webfonts -->
    <link href='http://fonts.googleapis.com/css?family=McLaren' rel='stylesheet' type='text/css'>
    <link href='http://fonts.googleapis.com/css?family=Vampiro+One' rel='stylesheet' type='text/css'>
    <link href='http://fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,800italic,400,300,600,700,800' rel='stylesheet' type='text/css'>

<script type="text/javascript">

  var _gaq = _gaq || [];
  _gaq.push(['_setAccount', 'UA-5060983-15']);
  _gaq.push(['_trackPageview']);

  (function() {
    var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
    ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
    var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
  })();

</script>

<!-- Add jQuery library -->
<script type="text/javascript" src="lib/jquery-1.8.0.min.js"></script>
<script type="text/javascript" src="assets/js/jquery.flexisel.js"></script>

<!-- Add mousewheel plugin (this is optional) -->
<script type="text/javascript" src="lib/jquery.mousewheel-3.0.6.pack.js"></script>

<!-- Add fancyBox main JS and CSS files -->
<script type="text/javascript" src="source/jquery.fancybox.js?v=2.1.0"></script>
<link rel="stylesheet" type="text/css" href="source/jquery.fancybox.css?v=2.1.0" media="screen" />
<!-- Add Button helper (this is optional) -->
<link rel="stylesheet" type="text/css" href="source/helpers/jquery.fancybox-buttons.css?v=1.0.3" />
<script type="text/javascript" src="source/helpers/jquery.fancybox-buttons.js?v=1.0.3"></script>
<!-- Add Thumbnail helper (this is optional) -->
<link rel="stylesheet" type="text/css" href="source/helpers/jquery.fancybox-thumbs.css?v=1.0.6" />
<script type="text/javascript" src="source/helpers/jquery.fancybox-thumbs.js?v=1.0.6"></script>
<!-- Add Media helper (this is optional) -->
<script type="text/javascript" src="source/helpers/jquery.fancybox-media.js?v=1.0.3"></script>

<script>!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0];if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src="//platform.twitter.com/widgets.js";fjs.parentNode.insertBefore(js,fjs);}}(document,"script","twitter-wjs");</script>

<script type="text/javascript">
		$(document).ready(function() {
			$('.fancybox-buttons').fancybox({
                beforeShow: function () {
                   if (this.title) {
                   // New line
                   this.title += '<br />';
                
                   // Add tweet button
				   var link = ' ' + $(this.element).attr('caption');

                   this.title += '<a href="https://twitter.com/share" class="twitter-share-button" data-count="none" data-url="' + this.href + '">Tweet</a> ';
                   // Add FaceBook like button
                   this.title += '<iframe src="//www.facebook.com/plugins/like.php?href=http://pontecool.com/fotos/' + this.href + '&amp;layout=button_count&amp;show_faces=true&amp;width=500&amp;action=like&amp;font&amp;colorscheme=light&amp;height=23" scrolling="no" frameborder="0" style="border:none; overflow:hidden; width:110px; height:23px;" allowTransparency="true"></iframe>';
				   // Add Pinterest like button
   				   this.title += '<a href="http://pinterest.com/pin/create/button/?url=