PageRenderTime 30ms CodeModel.GetById 15ms RepoModel.GetById 0ms app.codeStats 0ms

/admin/lib/lib_core.php

http://pixie-cms.googlecode.com/
PHP | 1183 lines | 1082 code | 1 blank | 100 comment | 566 complexity | 46926fff74e9cc4e8901a50cede52d46 MD5 | raw file

Large files files are truncated, but you can click here to view the full file

    

  1. <?php
    2. 

  2. if (!defined('DIRECT_ACCESS')) {
    3. 

  3. 	header('Location: ../../');
    4. 

  4. 	exit();
    5. 

  5. }
    6. 

  6. /**
    7. 

  7.  * Pixie: The Small, Simple, Site Maker.
    8. 

  8.  * 
    9. 

  9.  * Licence: GNU General Public License v3
    10. 

  10.  * Copyright (C) 2010, Scott Evans
    11. 

  11.  *
    12. 

  12.  * This program is free software: you can redistribute it and/or modify
    13. 

  13.  * it under the terms of the GNU General Public License as published by
    14. 

  14.  * the Free Software Foundation, either version 3 of the License, or
    15. 

  15.  * (at your option) any later version.
    16. 

  16.  *
    17. 

  17.  * This program is distributed in the hope that it will be useful,
    18. 

  18.  * but WITHOUT ANY WARRANTY; without even the implied warranty of
    19. 

  19.  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
    20. 

  20.  * GNU General Public License for more details.
    21. 

  21.  *
    22. 

  22.  * You should have received a copy of the GNU General Public License
    23. 

  23.  * along with this program. If not, see http://www.gnu.org/licenses/
    24. 

  24.  *
    25. 

  25.  * Title: lib_core
    26. 

  26.  *
    27. 

  27.  * @package Pixie
    28. 

  28.  * @copyright 2008-2010 Scott Evans
    29. 

  29.  * @author Scott Evans
    30. 

  30.  * @author Sam Collett
    31. 

  31.  * @author Tony White
    32. 

  32.  * @author Isa Worcs
    33. 

  33.  * @link http://www.getpixie.co.uk
    34. 

  34.  * @license http://www.gnu.org/licenses/gpl-3.0.html GNU General Public License v3
    35. 

  35.  *
    36. 

  36.  */
    37. 

  37. // prepare for table prefix
    38. 

  38. if (!empty($pixieconfig['table_prefix'])) {
    39. 

  39. 	define('PFX', $pixieconfig['table_prefix']);
    40. 

  40. } else {
    41. 

  41. 	if (!defined('PFX')) {
    42. 

  42. 		define('PFX', '');
    43. 

  43. 	}
    44. 

  44. }
    45. 

  45. if (!function_exists('adjust_prefix')) {
    46. 

  46. 	function adjust_prefix($table) {
    47. 

  47. 		if (stripos($table, PFX) === 0)
    48. 

  48. 			return $table;
    49. 

  49. 		else
    50. 

  50. 			return PFX . $table;
    51. 

  51. 	}
    52. 

  52. }
    53. 

  53. // ------------------------------------------------------------------
    54. 

  54. // class for displaying contents of a db table
    55. 

  55. class ShowTable {
    56. 

  56. 	var $Res;
    57. 

  57. 	var $exclude = array();
    58. 

  58. 	var $table_name;
    59. 

  59. 	var $view_number;
    60. 

  60. 	var $lo;
    61. 

  61. 	var $finalmax;
    62. 

  62. 	var $whereami;
    63. 

  63. 	var $a_array = array();
    64. 

  64. 	var $edit;
    65. 

  65. 	function ShowTable($Res, $exclude, $table_name, $view_number, $lo, $finalmax, $whereami, $type, $s) {
    66. 

  66. 		$this->Res       = $Res;
    67. 

  67. 		$this->exclude   = $exclude;
    68. 

  68. 		$this->table     = $table_name;
    69. 

  69. 		$this->limit     = $view_number;
    70. 

  70. 		$this->num       = $lo;
    71. 

  71. 		$this->finalmax  = $finalmax;
    72. 

  72. 		$this->whereami  = $whereami;
    73. 

  73. 		$this->page_type = $type;
    74. 

  74. 		$this->s         = $s;
    75. 

  75. 	}
    76. 

  76. 	function DrawBody() {
    77. 

  77. 		global $date_format, $lang, $page_display_name;
    78. 

  78. 		echo "\t<table class=\"tbl $this->table\" summary=\"" . $lang['results_from'] . " $this->table.\">
    79. 

  79. 							<thead>
    80. 

  80. 								<tr>";
    81. 

  81. 		for ($j = 0; $j < mysql_num_fields($this->Res); $j++) {
    82. 

  82. 			if (!in_array(mysql_field_name($this->Res, $j), $this->exclude))
    83. 

  83. 				if ((isset($arlen)) && (isset($sum))) {
    84. 

  84. 					$arlen[$j] = mysql_field_len($this->Res, $j);
    85. 

  85. 					$sum += $arlen[$j];
    86. 

  86. 				}
    87. 

  87. 		}
    88. 

  88. 		for ($j = 0; $j < mysql_num_fields($this->Res); $j++) {
    89. 

  89. 			if (!in_array(mysql_field_name($this->Res, $j), $this->exclude)) {
    90. 

  90. 				$st3       = "class=\"tbl_heading\"";
    91. 

  91. 				$fieldname = simplify(mysql_field_name($this->Res, $j));
    92. 

  92. 				if ((isset($lang['form_' . mysql_field_name($this->Res, $j)])) && ($lang['form_' . mysql_field_name($this->Res, $j)])) {
    93. 

  93. 					$fieldname = $lang['form_' . mysql_field_name($this->Res, $j)];
    94. 

  94. 				}
    95. 

  95. 				echo "<th $st3 id=\"" . mysql_field_name($this->Res, $j) . "\">$fieldname</th>";
    96. 

  96. 			}
    97. 

  97. 		}
    98. 

  98. 		echo "
    99. 

  99. 									<th class=\"tbl_heading\" id=\"page_edit\"></th>
    100. 

  100. 									<th class=\"tbl_heading\" id=\"page_delete\"></th>
    101. 

  101. 								</tr>
    102. 

  102. 							</thead>";
    103. 

  103. 		if ($this->finalmax)
    104. 

  104. 			$this->limit = $this->finalmax;
    105. 

  105. 		echo "
    106. 

  106. 							<tbody>";
    107. 

  107. 		$counter = NULL;
    108. 

  108. 		while ($counter < $this->limit) {
    109. 

  109. 			$F = mysql_fetch_array($this->Res);
    110. 

  110. 			if (is_even($counter))
    111. 

  111. 				$trclass = 'odd';
    112. 

  112. 			else
    113. 

  113. 				$trclass = 'even';
    114. 

  114. 			echo "
    115. 

  115. 								<tr class=\"$trclass\">\n";
    116. 

  116. 			for ($j = 0; $j < mysql_num_fields($this->Res); $j++) {
    117. 

  117. 				if (!in_array(mysql_field_name($this->Res, $j), $this->exclude)) {
    118. 

  118. 					if (mysql_field_type($this->Res, $j) == 'timestamp') {
    119. 

  119. 						$logunix = returnUnixtimestamp($F[$j]);
    120. 

  120. 						$date    = safe_strftime($date_format, $logunix);
    121. 

  121. 						echo "
    122. 

  122. 									<td class=\"tbl_row\" headers=\"" . mysql_field_name($this->Res, $j) . "\">" . $date . "</td>";
    123. 

  123. 					} else if (mysql_field_name($this->Res, $j) == 'url') {
    124. 

  124. 						echo "
    125. 

  125. 									<td class=\"tbl_row\" headers=\"" . mysql_field_name($this->Res, $j) . "\"><a href=\"" . $F[$j] . "\">" . $F[$j] . "</a></td>";
    126. 

  126. 					} else if (mysql_field_name($this->Res, $j) == 'email') {
    127. 

  127. 						echo "
    128. 

  128. 									<td class=\"tbl_row\" headers=\"" . mysql_field_name($this->Res, $j) . "\"><a href=\"mailto:" . $F[$j] . "\">" . $F[$j] . "</a></td>";
    129. 

  129. 					} else if ($F[$j] == "") {
    130. 

  130. 						echo "
    131. 

  131. 									<td class=\"tbl_row\" headers=\"" . mysql_field_name($this->Res, $j) . "\">No Content</td>";
    132. 

  132. 					} else {
    133. 

  133. 						echo "
    134. 

  134. 									<td class=\"tbl_row\" headers=\"" . mysql_field_name($this->Res, $j) . "\">" . strip_tags($F[$j]) . "</td>";
    135. 

  135. 					}
    136. 

  136. 				}
    137. 

  137. 			}
    138. 

  138. 			echo "
    139. 

  139. 									<td class=\"tbl_row tbl_edit\" headers=\"page_edit\"><a href=\"$this->whereami&amp;edit=$F[0]\" title=\"" . $lang['edit'] . "\">" . $lang['edit'] . "</a></td>
    140. 

  140. 									<td class=\"tbl_row tbl_delete\" headers=\"page_delete\"><a href=\"$this->whereami&amp;delete=$F[0]\" onclick=\"return confirm('" . $lang['sure_delete_entry'] . " (#$F[0]) " . $lang['from_the'] . " $page_display_name " . $lang['settings_page'] . "?')\" title=\"" . $lang['delete'] . "\">" . $lang['delete'] . "</a></td>
    141. 

  141. 								</tr>";
    142. 

  142. 			$counter++;
    143. 

  143. 		}
    144. 

  144. 		echo "
    145. 

  145. 							</tbody>
    146. 

  146. 						</table>\n";
    147. 

  147. 	}
    148. 

  148. }
    149. 

  149. // ------------------------------------------------------------------
    150. 

  150. // class for add/edit new records in db table
    151. 

  151. class ShowBlank {
    152. 

  152. 	var $Nam;
    153. 

  153. 	var $Typ;
    154. 

  154. 	var $Res;
    155. 

  155. 	var $Flg;
    156. 

  156. 	var $Pkn;
    157. 

  157. 	var $edit_exclude = array();
    158. 

  158. 	var $table_name;
    159. 

  159. 	function ShowBlank($Nam, $Typ, $Len, $Flg, $Res, $Pkn, $edit_exclude, $table_name) {
    160. 

  160. 		$this->Nam       = $Nam;
    161. 

  161. 		$this->Typ       = $Typ;
    162. 

  162. 		$this->Len       = $Len;
    163. 

  163. 		$this->Res       = $Res;
    164. 

  164. 		$this->Flg       = $Flg;
    165. 

  165. 		$this->Pkn       = $Pkn;
    166. 

  166. 		$this->exclude   = $edit_exclude;
    167. 

  167. 		$this->tablename = $table_name;
    168. 

  168. 	}
    169. 

  169. 	function ShowBody() {
    170. 

  170. 		global $edit, $s, $m, $x, $page, $page_display_name, $lang, $type;
    171. 

  171. 		// check $edit against $x - they need to represent the same page, if not redirect.
    172. 

  172. 		$checkid = safe_field('page_id', 'pixie_core', "page_name='$x'");
    173. 

  173. 		if ((isset($edit)) && ($edit) && ($m == 'static')) {
    174. 

  174. 			if ($edit != $checkid) {
    175. 

  175. 				echo "<div class=\"helper\"><h3>" . $lang['help'] . "</h3><p>" . $lang['unknown_edit_url'] . "</p></div>";
    176. 

  176. 				$cancel = TRUE;
    177. 

  177. 			}
    178. 

  178. 		}
    179. 

  179. 		if (isset($cancel)) {
    180. 

  180. 		} else {
    181. 

  181. 			$cancel_not_set = 1;
    182. 

  182. 		}
    183. 

  183. 		if ($cancel_not_set == 1) {
    184. 

  184. 			$Nams = explode('|', substr($this->Nam, 0, (strlen($this->Nam) - 1)));
    185. 

  185. 			$Type = explode('|', substr($this->Typ, 0, (strlen($this->Typ) - 1)));
    186. 

  186. 			$Leng = explode('|', substr($this->Len, 0, (strlen($this->Len) - 1)));
    187. 

  187. 			$Flag = explode('|', substr($this->Flg, 0, (strlen($this->Flg) - 1)));
    188. 

  188. 			$Fild = explode('|', substr($this->Res, 0, (strlen($this->Res) - 1)));
    189. 

  189. 			if (!$page) {
    190. 

  190. 				$page = 1;
    191. 

  191. 			}
    192. 

  192. 			if ((isset($s)) && ($s == 'settings')) {
    193. 

  193. 				if (strpos($this->tablename, 'module')) {
    194. 

  194. 					$formtitle = $lang['advanced'] . " " . $lang['page_settings'];
    195. 

  195. 				} else if (strpos($this->tablename, 'dynamic')) {
    196. 

  196. 					$formtitle = $lang['advanced'] . " " . $lang['page_settings'];
    197. 

  197. 				} else {
    198. 

  198. 					$formtitle = $lang['page_settings'];
    199. 

  199. 				}
    200. 

  200. 			} else {
    201. 

  201. 				if ((isset($edit)) && ($edit)) {
    202. 

  202. 					if ($m == 'static') {
    203. 

  203. 						$formtitle = $lang['edit'] . " $page_display_name " . $lang['settings_page'];
    204. 

  204. 					} else {
    205. 

  205. 						$formtitle = $lang['edit'] . " $page_display_name " . str_replace('.', "", $lang['entry']) . " (#$edit)";
    206. 

  206. 					}
    207. 

  207. 				} else {
    208. 

  208. 					$formtitle = $lang['new_entry'] . " $page_display_name " . str_replace('.', "", $lang['entry']);
    209. 

  209. 				}
    210. 

  210. 			}
    211. 

  211. 			if ((isset($s)) && ($s == 'settings')) {
    212. 

  212. 				$post = "?s=$s&amp;x=$x";
    213. 

  213. 			} else if (($m == 'static') && (isset($edit))) {
    214. 

  214. 				$post = "?s=$s&amp;m=$m&amp;x=$x&amp;edit=$edit&amp;page=$page";
    215. 

  215. 			} else {
    216. 

  216. 				$post = "?s=$s&amp;m=$m&amp;x=$x&amp;page=$page";
    217. 

  217. 			}
    218. 

  218. 			echo "<form accept-charset=\"UTF-8\" action=\"$post\" method=\"post\" id=\"form_addedit\" class=\"form\">\n";
    219. 

  219. 			echo "\t\t\t\t\t\t<fieldset>\n\t\t\t\t\t\t<legend>$formtitle</legend>\n";
    220. 

  220. 			echo "\t\t\t\t\t\t\t<input type=\"hidden\" class=\"form_text\" name=\"table_name\" value=\"$this->tablename\" maxlength=\"80\" />\n";
    221. 

  221. 			for ($j = 0; $j < count($Nams); $j++) {
    222. 

  222. 				// clears out the form as some of the fields populate
    223. 

  223. 				if ((!isset($edit)) or (!$edit)) {
    224. 

  224. 					$Fild[$j] = "";
    225. 

  225. 				}
    226. 

  226. 				// if comments are disabled then hide the field
    227. 

  227. 				if (($Nams[$j] == 'comments') && (!public_page_exists('comments'))) {
    228. 

  228. 					echo "\t\t\t\t\t\t\t<input type=\"hidden\" class=\"form_text\" name=\"$Nams[$j]\" value=\"no\" maxlength=\"" . $Leng[$j] . "\" />\n";
    229. 

  229. 					$j++;
    230. 

  230. 				}
    231. 

  231. 				if (!in_array($Nams[$j], $this->exclude)) { //fields populated and output depending on type etc.
    232. 

  232. 					//$searchfor = "_".first_word($Nams[$j]);
    233. 

  233. 					if ($Leng[$j] < 40) {
    234. 

  234. 						$ln = $Leng[$j];
    235. 

  235. 					} else if ($Leng[$j] <= 400) {
    236. 

  236. 						$ln = 50;
    237. 

  237. 					}
    238. 

  238. 					$nullf = explode(" ", $Flag[$j]);
    239. 

  239. 					if ($nullf[0] == 'not_null') { // label required fields
    240. 

  240. 						if ((isset($lang['form_' . $Nams[$j]]))) {
    241. 

  241. 							if (($Nams[$j] != 'page_name') or ($type == 'static') or (!isset($edit)) or (!$edit)) {
    242. 

  242. 								/* Prevents the editing of page_name which does not work in modules and dynamic pages */
    243. 

  243. 								$displayname = $lang['form_' . $Nams[$j]] . " <span class=\"form_required\">" . $lang['form_required'] . "</span>";
    244. 

  244. 							} else {
    245. 

  245. 								$displayname = " <span style=\"display:none\" class=\"form_required\">" . $lang['form_required'] . "</span>";
    246. 

  246. 							}
    247. 

  247. 						} else {
    248. 

  248. 							$displayname = simplify($Nams[$j]) . " <span class=\"form_required\">" . $lang['form_required'] . "</span>";
    249. 

  249. 						}
    250. 

  250. 					} else {
    251. 

  251. 						if ((isset($lang['form_' . $Nams[$j]])) && ($lang['form_' . $Nams[$j]])) {
    252. 

  252. 							$displayname = $lang['form_' . $Nams[$j]] . " <span class=\"form_optional\">" . $lang['form_optional'] . "</span>";
    253. 

  253. 						} else {
    254. 

  254. 							$displayname = simplify($Nams[$j]) . " <span class=\"form_optional\">" . $lang['form_optional'] . "</span>";
    255. 

  255. 						}
    256. 

  256. 					}
    257. 

  257. 					// check language file for any form help
    258. 

  258. 					if ((isset($lang['form_help_' . $Nams[$j]])) && ($lang['form_help_' . $Nams[$j]])) {
    259. 

  259. 						if (($Nams[$j] != 'page_name') or ($type == 'static') or (!isset($edit)) or (!$edit)) {
    260. 

  260. 							/* Prevents the editing of page_name which does not work in modules and dynamic pages */
    261. 

  261. 							$form_help = "<span class=\"form_help\">" . $lang['form_help_' . $Nams[$j]] . "</span>";
    262. 

  262. 						} else {
    263. 

  263. 							$form_help = "<span style=\"display:none\" class=\"form_help\">" . $lang['form_help_' . $Nams[$j]] . "</span>";
    264. 

  264. 						}
    265. 

  265. 					} else {
    266. 

  266. 						$form_help = "";
    267. 

  267. 					}
    268. 

  268. 					if ($GLOBALS['rich_text_editor'] == 1) {
    269. 

  269. 						$containsphp = strlen(stristr(utf8_decode(($Fild[$j])), '<?php')) > 0;
    270. 

  270. 						if ($containsphp) {
    271. 

  271. 							$form_help .= " <span class=\"alert\">" . $lang['form_php_warning'] . '</span>';
    272. 

  272. 						}
    273. 

  273. 					}
    274. 

  274. 					echo "\t\t\t\t\t\t\t<div class=\"form_row\">\n\t\t\t\t\t\t\t\t<div class=\"form_label\">
    275. 

  275. 					<label for=\"$Nams[$j]\">" . $displayname . "</label>$form_help</div>\n"; //$Type[$j] $Leng[$j] $Flag[$j] for field info
    276. 

  276. 					//echo "$Nams[$j] - $Type[$j] - $Leng[$j] - $Flag[$j]"; // see form field properties
    277. 

  277. 					if (($Type[$j] == 'timestamp') && (!isset($edit)) && (!$edit)) {
    278. 

  278. 						echo "\t\t\t\t\t\t\t\t<div class=\"form_item_drop\">\n";
    279. 

  279. 						if (isset($date)) {
    280. 

  280. 							date_dropdown($date);
    281. 

  281. 						} else {
    282. 

  282. 							$date = NULL;
    283. 

  283. 							date_dropdown($date);
    284. 

  284. 						}
    285. 

  285. 						echo "\n\t\t\t\t\t\t\t\t</div>\n\t\t\t\t\t\t\t</div>\n";
    286. 

  286. 					} else if (($Type[$j] == 'timestamp') && (isset($edit)) && ($edit)) {
    287. 

  287. 						echo "\t\t\t\t\t\t\t\t<div class=\"form_item_drop\">\n";
    288. 

  288. 						date_dropdown($Fild[$j]);
    289. 

  289. 						echo "\n\t\t\t\t\t\t\t\t</div>\n\t\t\t\t\t\t\t</div>\n";
    290. 

  290. 						//} else if ($Type[$j] == "blob") {
    291. 

  291. 						//	echo "\t\t\t\t\t\t\t\t<div class=\"form_item_textarea\">\n\t\t\t\t\t\t\t\t<textarea name=\"$Nams[$j]\" class=\"form_item_textarea_no_ckeditor\">$Fild[$j]</textarea>\n\t\t\t\t\t\t\t\t</div>\n\t\t\t\t\t\t\t</div>\n"; 	   				
    292. 

  292. 					} else if ($Type[$j] == 'longtext' or $Leng[$j] > 800 or $Type[$j] == 'blob') {
    293. 

  293. 						if ($GLOBALS['rich_text_editor'] == 1) {
    294. 

  294. 							if (!$containsphp) {
    295. 

  295. 								echo "\t\t\t\t\t\t\t\t<div class=\"form_item_textarea_ckeditor\">\n\t\t\t\t\t\t\t\t\t\t<textarea name=\"$Nams[$j]\" id=\"$Nams[$j]\" cols=\"50\" class=\"ck-textarea\" rows=\"10\">" . htmlentities($Fild[$j], ENT_QUOTES, 'UTF-8') . "</textarea>\n\t\t\t\t\t\t\t\t\t</div>\n\t\t\t\t\t\t\t\t</div>\n"; // id=\"$Nams[$j]\"
    296. 

  296. 							} else {
    297. 

  297. 								echo "\t\t\t\t\t\t\t\t<div class=\"form_item_textarea\">\n\t\t\t\t\t\t\t\t<textarea name=\"$Nams[$j]\" class=\"form_item_textarea_no_ckeditor\">" . htmlspecialchars($Fild[$j], ENT_QUOTES, 'UTF-8') . "</textarea>\n\t\t\t\t\t\t\t\t</div>\n\t\t\t\t\t\t\t</div>\n"; // id=\"$Nams[$j]\"
    298. 

  298. 							}
    299. 

  299. 						} else {
    300. 

  300. 							echo "\t\t\t\t\t\t\t\t<div class=\"form_item_textarea\">\n\t\t\t\t\t\t\t\t<textarea name=\"$Nams[$j]\" class=\"form_item_textarea_no_ckeditor\">" . htmlspecialchars($Fild[$j], ENT_QUOTES, 'UTF-8') . "</textarea>\n\t\t\t\t\t\t\t\t</div>\n\t\t\t\t\t\t\t</div>\n"; // id=\"$Nams[$j]\"
    301. 

  301. 						}
    302. 

  302. 					} else if ($Type[$j] == "set'yes','no'" or $Flag[$j] == 'not_null set') {
    303. 

  303. 						if ($Fild[$j] == 'no') {
    304. 

  304. 							echo "\t\t\t\t\t\t\t\t<div class=\"form_item_radio\">\n\t\t\t\t\t\t\t\tYes<input type=\"radio\" name=\"$Nams[$j]\" id=\"$Nams[$j]\" class=\"form_radio\" value=\"yes\" />
    305. 

  305. 	   						     	No<input checked=\"checked\" type=\"radio\" name=\"$Nams[$j]\" class=\"form_radio\" value=\"$Fild[$j]\" />\n\t\t\t\t\t\t\t\t</div>\n\n\t\t\t\t\t\t\t</div>\n";
    306. 

  306. 						} else {
    307. 

  307. 							echo "\t\t\t\t\t\t\t\t<div class=\"form_item_radio\">\n\t\t\t\t\t\t\t\tYes<input checked=\"checked\" type=\"radio\" name=\"$Nams[$j]\" id=\"$Nams[$j]\" class=\"form_radio\" value=\"yes\" />
    308. 

  308. 	   						     	No<input type=\"radio\" name=\"$Nams[$j]\" class=\"form_radio\" value=\"no\"/>\n\t\t\t\t\t\t\t\t</div>\n\t\t\t\t\t\t\t</div>\n";
    309. 

  309. 						}
    310. 

  310. 					} else if (first_word($Nams[$j]) == 'image') {
    311. 

  311. 						echo "\t\t\t\t\t\t\t\t<div class=\"form_item_drop image_preview\">\n";
    312. 

  312. 						db_dropdown('pixie_files', $Fild[$j], $Nams[$j], "file_type = 'Image' order by file_id desc");
    313. 

  313. 						echo "\n\t\t\t\t\t\t\t\t<span class=\"more_upload\">or <a href=\"#\" onclick=\"upswitch('" . $Nams[$j] . "'); return false;\" title=\"" . $lang['upload'] . "\">" . strtolower($lang['upload']) . "...</a></span>\n\t\t\t\t\t\t\t\t</div>\n\t\t\t\t\t\t\t</div>\n";
    314. 

  314. 					} else if (first_word($Nams[$j]) == 'document') {
    315. 

  315. 						echo "\t\t\t\t\t\t\t\t<div class=\"form_item_drop\">\n";
    316. 

  316. 						db_dropdown('pixie_files', $Fild[$j], $Nams[$j], "file_type = 'Other' order by file_id desc");
    317. 

  317. 						echo "\n\t\t\t\t\t\t\t\t<span class=\"more_upload\">or <a href=\"#\" onclick=\"upswitch('" . $Nams[$j] . "'); return false;\" title=\"" . $lang['upload'] . "\">" . strtolower($lang['upload']) . "...</a></span>\n\t\t\t\t\t\t\t\t</div>\n\t\t\t\t\t\t\t</div>\n";
    318. 

  318. 					} else if (first_word($Nams[$j]) == 'video') {
    319. 

  319. 						echo "\t\t\t\t\t\t\t\t<div class=\"form_item_drop\">\n";
    320. 

  320. 						db_dropdown('pixie_files', $Fild[$j], $Nams[$j], "file_type = 'Video' order by file_id desc");
    321. 

  321. 						echo "\n\t\t\t\t\t\t\t\t<span class=\"more_upload\">or <a href=\"#\" onclick=\"upswitch('" . $Nams[$j] . "'); return false;\" title=\"" . $lang['upload'] . "\">" . strtolower($lang['upload']) . "...</a></span>\n\t\t\t\t\t\t\t\t</div>\n\t\t\t\t\t\t\t</div>\n";
    322. 

  322. 					} else if (first_word($Nams[$j]) == 'audio') {
    323. 

  323. 						echo "\t\t\t\t\t\t\t\t<div class=\"form_item_drop\">\n";
    324. 

  324. 						db_dropdown('pixie_files', $Fild[$j], $Nams[$j], "file_type = 'Audio' order by file_id desc");
    325. 

  325. 						echo "\n\t\t\t\t\t\t\t\t<span class=\"more_upload\">or <a href=\"#\" onclick=\"upswitch('" . $Nams[$j] . "'); return false;\" title=\"" . $lang['upload'] . "\">" . strtolower($lang['upload']) . "...</a></span>\n\t\t\t\t\t\t\t\t</div>\n\t\t\t\t\t\t\t</div>\n";
    326. 

  326. 					} else if (first_word($Nams[$j]) == 'file') {
    327. 

  327. 						echo "\t\t\t\t\t\t\t\t<div class=\"form_item_drop\">\n";
    328. 

  328. 						db_dropdown('pixie_files', $Fild[$j], $Nams[$j], "file_id >= '0' order by file_id desc");
    329. 

  329. 						echo "\n\t\t\t\t\t\t\t\t<span class=\"more_upload\">or <a href=\"#\" onclick=\"upswitch('" . $Nams[$j] . "'); return false;\" title=\"" . $lang['upload'] . "\">" . strtolower($lang['upload']) . "...</a></span>\n\t\t\t\t\t\t\t\t</div>\n\t\t\t\t\t\t\t</div>\n";
    330. 

  330. 					} else if ($Nams[$j] == 'tags') {
    331. 

  331. 						$tableid   = 0;
    332. 

  332. 						$condition = $tableid . " >= '0'";
    333. 

  333. 						form_tag($this->tablename, $condition);
    334. 

  334. 						echo "\t\t\t\t\t\t\t\t<div class=\"form_item\">\n\t\t\t\t\t\t\t\t<input type=\"text\" class=\"form_text\" name=\"$Nams[$j]\" id=\"$Nams[$j]\" value=\"$Fild[$j]\" size=\"";
    335. 

  335. 						if ((isset($ln))) {
    336. 

  336. 							echo $ln;
    337. 

  337. 						} else {
    338. 

  338. 							$ln = 25;
    339. 

  339. 							echo $ln;
    340. 

  340. 						}
    341. 

  341. 						echo "\" maxlength=\"" . $Leng[$j] . "\" />\n\t\t\t\t\t\t\t\t</div>\n\t\t\t\t\t\t\t</div>\n";
    342. 

  342. 					} else if ($Nams[$j] == 'page_blocks') {
    343. 

  343. 						form_blocks();
    344. 

  344. 						echo "\t\t\t\t\t\t\t\t<div class=\"form_item\">\n\t\t\t\t\t\t\t\t<input type=\"text\" class=\"form_text\" name=\"$Nams[$j]\" id=\"$Nams[$j]\" value=\"$Fild[$j]\" size=\"";
    345. 

  345. 						if ((isset($ln))) {
    346. 

  346. 							echo $ln;
    347. 

  347. 						} else {
    348. 

  348. 							$ln = 25;
    349. 

  349. 							echo $ln;
    350. 

  350. 						}
    351. 

  351. 						echo "\" maxlength=\"" . $Leng[$j] . "\" />\n\t\t\t\t\t\t\t\t</div>\n\t\t\t\t\t\t\t</div>\n";
    352. 

  352. 					} else if ($Nams[$j] == 'privs') {
    353. 

  353. 						if ($Fild[$j] == 2) {
    354. 

  354. 							$adminclass    = "selected=\"selected\"";
    355. 

  355. 							$everyoneclass = NULL;
    356. 

  356. 						} else {
    357. 

  357. 							$everyoneclass = "selected=\"selected\"";
    358. 

  358. 							$adminclass    = NULL;
    359. 

  359. 						}
    360. 

  360. 						echo "\t\t\t\t\t\t\t\t<div class=\"form_item_drop\">
    361. 

  361. 									<select class=\"form_select\" name=\"$Nams[$j]\" name=\"$Nams[$j]\">
    362. 

  362. 										<option value=\"2\" $adminclass>Administrators only</option>
    363. 

  363. 										<option value=\"1\" $everyoneclass>Administrators &amp; Clients</option>
    364. 

  364. 									</select>
    365. 

  365. 	   							</div>\n\t\t\t\t\t\t\t</div>\n";
    366. 

  366. 					} else {
    367. 

  367. 						if (($Nams[$j] != 'page_name') or ($type == 'static') or (!isset($edit)) or (!$edit)) {
    368. 

  368. 							/* Prevents the editing of page_name which does not work in modules and dynamic pages */
    369. 

  369. 							echo "\t\t\t\t\t\t\t\t<div class=\"form_item\">\n\t\t\t\t\t\t\t\t<input type=\"text\" class=\"form_text\" name=\"$Nams[$j]\" id=\"$Nams[$j]\" value=\"" . htmlspecialchars($Fild[$j], ENT_QUOTES, 'UTF-8') . "\" size=\"";
    370. 

  370. 							if ((isset($ln))) {
    371. 

  371. 								echo $ln;
    372. 

  372. 							} else {
    373. 

  373. 								$ln = 25;
    374. 

  374. 								echo $ln;
    375. 

  375. 							}
    376. 

  376. 							echo "\" maxlength=\"" . $Leng[$j] . "\" />\n\t\t\t\t\t\t\t\t</div>";
    377. 

  377. 						} else {
    378. 

  378. 							echo "\t\t\t\t\t\t\t\t<div style=\"display:none\" class=\"form_item\">\n\t\t\t\t\t\t\t\t<input style=\"display:none\" type=\"text\" class=\"form_text\" name=\"$Nams[$j]\" id=\"$Nams[$j]\" value=\"" . htmlspecialchars($Fild[$j], ENT_QUOTES, 'UTF-8') . "\" size=\"";
    379. 

  379. 							if ((isset($ln))) {
    380. 

  380. 								echo $ln;
    381. 

  381. 							} else {
    382. 

  382. 								$ln = 25;
    383. 

  383. 								echo $ln;
    384. 

  384. 							}
    385. 

  385. 							echo "\" maxlength=\"" . $Leng[$j] . "\" />\n\t\t\t\t\t\t\t\t</div>";
    386. 

  386. 						}
    387. 

  387. 						echo "\n\t\t\t\t\t\t\t</div>\n";
    388. 

  388. 					}
    389. 

  389. 					//other field types still to come: File uploads...?
    390. 

  390. 					//hidden fields populated
    391. 

  391. 				} else {
    392. 

  392. 					if ((($Nams[$j] == 'page_id') && (isset($s)) && ($s == 'publish') && ($m == 'dynamic'))) {
    393. 

  393. 						$page_id = get_page_id($x);
    394. 

  394. 						echo "\t\t\t\t\t\t\t<input type=\"hidden\" class=\"form_text\" name=\"$Nams[$j]\" value=\"$page_id\" maxlength=\"" . $Leng[$j] . "\" />\n";
    395. 

  395. 					} else if (last_word($Nams[$j]) == 'id') {
    396. 

  396. 						echo "\t\t\t\t\t\t\t<input type=\"hidden\" class=\"form_text\" name=\"$Nams[$j]\" value=\"$Fild[$j]\" maxlength=\"" . $Leng[$j] . "\" />\n";
    397. 

  397. 					} else if (($Nams[$j] == 'author')) {
    398. 

  398. 						if ((isset($edit)) && ($edit)) {
    399. 

  399. 							$output = $Fild[$j];
    400. 

  400. 						} else {
    401. 

  401. 							if (!isset($GLOBALS['pixie_user'])) {
    402. 

  402. 								$GLOBALS['pixie_user'] = NULL;
    403. 

  403. 							}
    404. 

  404. 							$output = $GLOBALS['pixie_user'];
    405. 

  405. 						}
    406. 

  406. 						echo "\t\t\t\t\t\t\t<input type=\"hidden\" class=\"form_text\" name=\"$Nams[$j]\" value=\"" . $output . "\" maxlength=\"" . $Leng[$j] . "\" />\n";
    407. 

  407. 					} else if ($Type[$j] == "timestamp") {
    408. 

  408. 						echo "\t\t\t\t\t\t\t<input type=\"hidden\" class=\"form_text\" name=\"$Nams[$j]\" value=\"" . returnSQLtimestamp(time()) . "\" maxlength=\"" . $Leng[$j] . "\" />\n";
    409. 

  409. 					} else if ($Nams[$j] == 'page_type') {
    410. 

  410. 						if ($type) {
    411. 

  411. 							$output = $type;
    412. 

  412. 						} else {
    413. 

  413. 							if (isset($edit)) {
    414. 

  414. 								$output = safe_field('page_type', 'pixie_core', "page_id='$edit'");
    415. 

  415. 							}
    416. 

  416. 						}
    417. 

  417. 						echo "\t\t\t\t\t\t\t<input type=\"hidden\" class=\"form_text\" name=\"$Nams[$j]\" value=\"" . $output . "\" maxlength=\"" . $Leng[$j] . "\" />\n";
    418. 

  418. 					} else if (($Nams[$j] == 'publish' && !$edit)) {
    419. 

  419. 						echo "\t\t\t\t\t\t\t<input type=\"hidden\" class=\"form_text\" name=\"$Nams[$j]\" value=\"yes\" maxlength=\"0\" />\n";
    420. 

  420. 					} else if ($Nams[$j] == 'page_content') {
    421. 

  421. 						// do nothing
    422. 

  422. 					} else if ($Nams[$j] == 'admin') {
    423. 

  423. 						// do nothing
    424. 

  424. 					} else {
    425. 

  425. 						echo "\t\t\t\t\t\t\t<input type=\"hidden\" class=\"form_text\" name=\"$Nams[$j]\" value=\"$Fild[$j]\" maxlength=\"" . $Leng[$j] . "\" />\n";
    426. 

  426. 					}
    427. 

  427. 				}
    428. 

  428. 			}
    429. 

  429. 			if ((isset($edit)) && ($edit)) {
    430. 

  430. 				echo "\t\t\t\t\t\t\t<div class=\"form_row_button\">\n\t\t\t\t\t\t\t\t<input type=\"submit\" name=\"submit_edit\" class=\"form_submit\" value=\"" . $lang['form_button_update'] . "\" />\n\t\t\t\t\t\t\t</div>\n";
    431. 

  431. 			} else if ((isset($go)) && ($go == 'new')) {
    432. 

  432. 				// do a save draft and save button button?? - when everything can be saved as a draft and is autosaved using AJAX
    433. 

  433. 			} else {
    434. 

  434. 				echo "\t\t\t\t\t\t\t<div class=\"form_row_button\" id=\"form_button\">\n\t\t\t\t\t\t\t\t<input type=\"submit\" name=\"submit_new\" class=\"form_submit\" value=\"" . $lang['form_button_save'] . "\" />\n\t\t\t\t\t\t\t</div>\n";
    435. 

  435. 			}
    436. 

  436. 			if ($m != 'static') {
    437. 

  437. 				echo "\t\t\t\t\t\t\t<div class=\"form_row_button\">\n\t\t\t\t\t\t\t\t<span class=\"form_button_cancel\"><a href=\"?s=$s&amp;m=$m&amp;x=$x\" title=\"" . $lang['form_button_cancel'] . "\">" . $lang['form_button_cancel'] . "</a></span>\n\t\t\t\t\t\t\t</div>\n";
    438. 

  438. 			}
    439. 

  439. 			echo "\t\t\t\t\t\t\t<div class=\"safclear\"></div>\n\t\t\t\t\t\t</fieldset>\n";
    440. 

  440. 			echo "\t\t\t\t\t</form>";
    441. 

  441. 		}
    442. 

  442. 	}
    443. 

  443. }
    444. 

  444. // ------------------------------------------------------------------
    445. 

  445. // build module page
    446. 

  446. function admin_module($module_name, $table_name, $order_by, $asc_desc, $exclude = array(NULL), $edit_exclude = array(NULL), $view_number, $tags) {
    447. 

  447. 	global $type, $go, $page, $message, $s, $m, $x, $edit, $submit_new, $submit_edit, $delete, $messageok, $new, $search_submit, $field, $search_words;
    448. 

  448. 	if ((isset($GLOBALS['pixie_user_privs'])) && ($GLOBALS['pixie_user_privs'] >= 1)) {
    449. 

  449. 		$type = 'module';
    450. 

  450. 		if ((isset($go)) && ($go == 'new') && (isset($table_name))) {
    451. 

  451. 			admin_head();
    452. 

  452. 			admin_new($table_name, $edit_exclude);
    453. 

  453. 		} else if ((isset($edit)) && ($edit) && (isset($table_name))) {
    454. 

  454. 			admin_head();
    455. 

  455. 			admin_edit($table_name, $module_name . '_id', $edit, $edit_exclude);
    456. 

  456. 		} else if (isset($table_name)) {
    457. 

  457. 			admin_carousel($x);
    458. 

  458. 			echo "\n\t\t\t\t<div id=\"blocks\">\n";
    459. 

  459. 			admin_block_search($type);
    460. 

  460. 			if ((isset($tags)) && ($tags == 'yes')) {
    461. 

  461. 				admin_block_tag_cloud($table_name, $module_name . "_id >= 0");
    462. 

  462. 			}
    463. 

  463. 			echo "\t\t\t\t</div>\n";
    464. 

  464. 			admin_head();
    465. 

  465. 			echo "\t\t\t\t<div id=\"pixie_content\">";
    466. 

  466. 			admin_overview($table_name, '', $order_by, $asc_desc, $exclude, $view_number, $type);
    467. 

  467. 			echo "\t\t\t\t</div>\n";
    468. 

  468. 		}
    469. 

  469. 	}
    470. 

  470. }
    471. 

  471. // ------------------------------------------------------------------
    472. 

  472. // display page information
    473. 

  473. function admin_head() {
    474. 

  474. 	global $s, $m, $x, $page_display_name, $page_id, $edit, $go, $lang, $tag, $search_words, $search_submit;
    475. 

  475. 	$rs = safe_row('*', 'pixie_core', "page_name = '$x' limit 0,1");
    476. 

  476. 	if ($rs) {
    477. 

  477. 		extract($rs);
    478. 

  478. 		if ((isset($tag)) && ($tag)) {
    479. 

  479. 			$stitle = $page_display_name . " (" . ucwords($lang['all_posts_tagged']) . ": " . $tag . ")";
    480. 

  480. 		} else if ($search_words) {
    481. 

  481. 			$stitle = $page_display_name . " (" . $lang['search'] . ": " . chopme(sterilise($search_words), 40) . ")";
    482. 

  482. 		} else if ($search_submit) {
    483. 

  483. 			$stitle = $page_display_name . " (" . $lang['search'] . ": $search_submit)";
    484. 

  484. 		} else {
    485. 

  485. 			$stitle = $page_display_name;
    486. 

  486. 		}
    487. 

  487. 		if ((!isset($edit)) or (!$edit)) {
    488. 

  488. 			if ((!isset($go)) or (!$go)) {
    489. 

  489. 				// do not want people to be able to add to comments in this way
    490. 

  490. 				if ($x != 'comments') {
    491. 

  491. 					echo "
    492. 

  492. 				<ul id=\"page_tools\">
    493. 

  493. 					<li><a href=\"?s=$s&amp;m=$m&amp;x=$x&amp;go=new\" title=\"" . $lang['new_entry'] . "$page_display_name " . str_replace('.', "", $lang['entry']) . "\">" . $lang['new_entry'] . "$page_display_name " . str_replace('.', "", $lang['entry']) . "</a></li>
    494. 

  494. 				</ul>\n";
    495. 

  495. 				}
    496. 

  496. 			}
    497. 

  497. 		}
    498. 

  498. 		echo "\t\t\t\t<div id=\"page_header\">
    499. 

  499. 					<h2>$stitle</h2>
    500. 

  500. 			</div>\n";
    501. 

  501. 	}
    502. 

  502. }
    503. 

  503. // ------------------------------------------------------------------
    504. 

  504. // display admin block for searching
    505. 

  505. function admin_block_search($type) {
    506. 

  506. 	global $s, $m, $x, $lang;
    507. 

  507. 	echo "\n\t\t\t\t\t<div id=\"admin_block_search\" class=\"admin_block\">
    508. 

  508. 			\t\t\t<h3 class=\"$type\">" . $lang['search'] . "</h3>\n";
    509. 

  509. 	echo "\t\t\t\t\t\t<form accept-charset=\"UTF-8\" action=\"?s=$s&amp;m=$m&amp;x=$x\" method=\"post\" id=\"search\">
    510. 

  510. 							<fieldset>
    511. 

  511. 							<legend>" . $lang['search'] . "</legend>
    512. 

  512. 								<div class=\"form_row\">
    513. 

  513. 									<div class=\"form_label\"><label for=\"search-keywords\">" . $lang['form_search_words'] . "</label></div>
    514. 

  514. 									<div class=\"form_item\"><input type=\"text\" name=\"search_words\" id=\"search-keywords\" value=\"\" class=\"form_text\" size=\"25\" /></div>
    515. 

  515. 								</div>							
    516. 

  516. 								<div class=\"form_row_button\">
    517. 

  517. 									<input type=\"submit\" name=\"search_submit\" id=\"search_submit\" value=\"" . $lang['search'] . "\" />
    518. 

  518. 								</div>
    519. 

  519. 							</fieldset>
    520. 

  520. 						</form>";
    521. 

  521. 	echo "\n\t\t\t\t\t</div>\n";
    522. 

  522. }
    523. 

  523. // ------------------------------------------------------------------ 
    524. 

  524. // view table overview
    525. 

  525. function admin_overview($table_name, $condition, $order_by, $asc_desc, $exclude = array(NULL), $view_number, $type) {
    526. 

  526. 	global $page, $message, $s, $m, $x, $messageok, $search_submit, $field, $search_words, $tag, $lang;
    527. 

  527. 	$table_name  = adjust_prefix($table_name);
    528. 

  528. 	$searchwords = trim($search_words);
    529. 

  529. 	if ($page) {
    530. 

  530. 		$searchwords = $search_submit;
    531. 

  531. 	}
    532. 

  532. 	if (($search_submit) && (isset($table_name))) {
    533. 

  533. 		$searchwords = sterilise($searchwords, FALSE);
    534. 

  534. 		//build search sql
    535. 

  535. 		$r2          = safe_query("show fields from $table_name");
    536. 

  536. 		for ($j = 0; $j < mysql_num_rows($r2); $j++) {
    537. 

  537. 			if ($F = mysql_fetch_array($r2)) {
    538. 

  538. 				$an[$j] = $F['Field'];
    539. 

  539. 			}
    540. 

  540. 			if (last_word($an[$j]) != 'id') {
    541. 

  541. 				if ($an[$j] != 'posted') {
    542. 

  542. 					if ($an[$j] != 'author') {
    543. 

  543. 						if ($an[$j] != 'comments') {
    544. 

  544. 							if ($an[$j] != 'public') {
    545. 

  545. 								if (first_word($an[$j]) != 'last') {
    546. 

  546. 									if ($an[$j] != 'date') {
    547. 

  547. 										$search_sql .= $an[$j] . " like '%" . $searchwords . "%' OR ";
    548. 

  548. 									}
    549. 

  549. 								}
    550. 

  550. 							}
    551. 

  551. 						}
    552. 

  552. 					}
    553. 

  553. 				}
    554. 

  554. 			}
    555. 

  555. 		}
    556. 

  556. 		$search_sql = substr($search_sql, 0, (strlen($search_sql) - 3)) . "";
    557. 

  557. 		//echo $search_sql;
    558. 

  558. 	}
    559. 

  559. 	if (isset($tag)) {
    560. 

  560. 		$tag = squash_slug($tag);
    561. 

  561. 	}
    562. 

  562. 	if (isset($table_name)) {
    563. 

  563. 		if ($search_submit) {
    564. 

  564. 			if ($m == 'dynamic') {
    565. 

  565. 				$page_id = get_page_id($x);
    566. 

  566. 				$r1      = safe_query("select * from $table_name where page_id = '$page_id' and (" . $search_sql . ") order by $order_by $asc_desc");
    567. 

  567. 			} else {
    568. 

  568. 				$r1 = safe_query("select * from $table_name where " . $search_sql . " order by $order_by $asc_desc");
    569. 

  569. 			}
    570. 

  570. 		} else if ((isset($tag)) && ($tag)) {
    571. 

  571. 			$r1 = safe_query("select * from $table_name where tags REGEXP '[[:<:]]" . $tag . "[[:>:]]' order by $order_by $asc_desc");
    572. 

  572. 		} else {
    573. 

  573. 			$r1 = safe_query("select * from $table_name $condition order by $order_by $asc_desc");
    574. 

  574. 		}
    575. 

  575. 	}
    576. 

  576. 	if ($r1) {
    577. 

  577. 		$total = mysql_num_rows($r1);
    578. 

  578. 		if ((!isset($page)) && (isset($table_name))) {
    579. 

  579. 			$lo   = 0;
    580. 

  580. 			$page = 1;
    581. 

  581. 			if ($search_submit) {
    582. 

  582. 				if ($m == 'dynamic') {
    583. 

  583. 					$page_id = get_page_id($x);
    584. 

  584. 					$r       = safe_query("select * from $table_name where page_id = '$page_id' and (" . $search_sql . ") order by $order_by $asc_desc");
    585. 

  585. 				} else {
    586. 

  586. 					$r = safe_query("select * from $table_name where " . $search_sql . " order by $order_by $asc_desc");
    587. 

  587. 				}
    588. 

  588. 			} else if ((isset($tag)) && ($tag)) {
    589. 

  589. 				$r = safe_query("select * from $table_name where tags REGEXP '[[:<:]]" . $tag . "[[:>:]]' order by $order_by $asc_desc");
    590. 

  590. 			} else {
    591. 

  591. 				$r = safe_query("select * from $table_name $condition order by $order_by $asc_desc limit $lo,$view_number");
    592. 

  592. 			}
    593. 

  593. 		} else if (isset($table_name)) {
    594. 

  594. 			$lo = ($page - 1) * $view_number;
    595. 

  595. 			if ($search_submit) {
    596. 

  596. 				if ($m == 'dynamic') {
    597. 

  597. 					$page_id = get_page_id($x);
    598. 

  598. 					$r       = safe_query("select * from $table_name where page_id = '$page_id' and (" . $search_sql . ") order by $order_by $asc_desc");
    599. 

  599. 				} else {
    600. 

  600. 					$r = safe_query("select * from $table_name where " . $search_sql . " order by $order_by $asc_desc");
    601. 

  601. 				}
    602. 

  602. 			} else if ((isset($tag)) && ($tag)) {
    603. 

  603. 				$r = safe_query("select * from $table_name where tags REGEXP '[[:<:]]" . $tag . "[[:>:]]' order by $order_by $asc_desc");
    604. 

  604. 			} else {
    605. 

  605. 				$r = safe_query("select * from $table_name $condition order by $order_by $asc_desc limit $lo,$view_number");
    606. 

  606. 			}
    607. 

  607. 		}
    608. 

  608. 		if ($r) {
    609. 

  609. 			$rows = mysql_num_rows($r);
    610. 

  610. 			$hi   = $lo + $view_number;
    611. 

  611. 			if ($hi > $total) {
    612. 

  612. 				$finalmax = $total - $lo;
    613. 

  613. 				$hi       = $total;
    614. 

  614. 			}
    615. 

  615. 			$pages = ceil($total / $view_number);
    616. 

  616. 			if ($pages < 1) {
    617. 

  617. 				$pages = 1;
    618. 

  618. 			}
    619. 

  619. 		}
    620. 

  620. 		/* Was : */
    621. 

  621. 		/* $a = &new Paginator_html($page, $total); */
    622. 

  622. 		/* but it's providing a "Assigning the return value of new by reference is deprecated" message. */
    623. 

  623. 		$a = new Paginator_html($page, $total);
    624. 

  624. 		$a->set_Limit($view_number);
    625. 

  625. 		$a->set_Links(4);
    626. 

  626. 		$whereami = "?s=$s&amp;m=$m&amp;x=$x";
    627. 

  627. 		if ((isset($tag)) && ($tag)) {
    628. 

  628. 			$whereami = "?s=$s&amp;m=$m&amp;x=$x&amp;tag=$tag";
    629. 

  629. 		}
    630. 

  630. 		if ($search_submit) {
    631. 

  631. 			$whereami = "?s=$s&amp;m=$m&amp;x=$x&amp;search_submit=$searchwords";
    632. 

  632. 		}
    633. 

  633. 		echo "\n\t\t\t\t\t<div class=\"admin_table_holder pcontent\">\n\t\t\t\t\t";
    634. 

  634. 		$wheream = "?s=$s&amp;m=$m&amp;x=$x&amp;page=$page";
    635. 

  635. 		if ((isset($table_name)) && ($rows)) {
    636. 

  636. 			if (isset($finalmax) && ($finalmax)) {
    637. 

  637. 			} else {
    638. 

  638. 				$finalmax = NULL;
    639. 

  639. 			}
    640. 

  640. 			$Table = new ShowTable($r, $exclude, $table_name, $view_number, $lo, $finalmax, $wheream, $type, $s);
    641. 

  641. 			$Table->DrawBody();
    642. 

  642. 			$loprint = $lo + 1;
    643. 

  643. 			echo "\n\t\t\t\t\t\t<div id=\"admin_table_overview\">\n\t\t\t\t\t\t\t<p>" . $lang['total_records'] . ": $total (" . $lang['showing_from_record'] . " $loprint " . $lang['to'] . " $hi) $pages " . $lang['page(s)'] . ".</p>\n\t\t\t\t\t\t</div>\n\n\t\t\t\t\t\t<div id=\"admin_table_pages\">\n\t\t\t\t\t\t\t";
    644. 

  644. 			echo "<p>";
    645. 

  645. 			$a->previousNext($whereami);
    646. 

  646. 			echo "</p>";
    647. 

  647. 			echo "\n\t\t\t\t\t\t</div>";
    648. 

  648. 		} else {
    649. 

  649. 			if (($search_submit) or (isset($tag)) && ($tag)) {
    650. 

  650. 				echo "<div class=\"helper\"><h3>" . $lang['help'] . "</h3><p>" . $lang['helper_search'] . "</p></div>";
    651. 

  651. 			} else {
    652. 

  652. 				echo "<div class=\"helper\"><h3>" . $lang['help'] . "</h3><p>" . $lang['helper_nocontent'] . "</p></div>";
    653. 

  653. 			}
    654. 

  654. 			echo "\n\t\t\t\t\t</div>\n";
    655. 

  655. 		}
    656. 

  656. 		if ($rows) {
    657. 

  657. 			echo "\n\t\t\t\t\t</div>\n";
    658. 

  658. 		}
    659. 

  659. 	}
    660. 

  660. }
    661. 

  661. // ------------------------------------------------------------------
    662. 

  662. // show the page carousel
    663. 

  663. function admin_carousel($current) {
    664. 

  664. 	global $s, $lang;
    665. 

  665. 	echo "<h2>" . $lang['nav2_pages'] . "</h2>\n";
    666. 

  666. 	$rz = safe_rows('*', 'pixie_core', "public = 'yes'  and publish = 'yes' order by page_order asc");
    667. 

  667. 	$cc = 1;
    668. 

  668. 	if (count($rz) <= 1) {
    669. 

  669. 		if ((isset($GLOBALS['pixie_user_privs'])) && ($GLOBALS['pixie_user_privs'] >= 2)) {
    670. 

  670. 			echo "\t\t\t\t<div class=\"helper\"><h3>" . $lang['help'] . "</h3><p>" . $lang['helper_nopages404'] . " " . $lang['helper_nopagesadmin'] . "</p></div>\n";
    671. 

  671. 		} else {
    672. 

  672. 			echo "\t\t\t\t<div class=\"helper\"><h3>" . $lang['help'] . "</h3><p>" . $lang['helper_nopages404'] . " " . $lang['helper_nopagesuser'] . "</p></div>\n";
    673. 

  673. 		}
    674. 

  674. 	} else {
    675. 

  675. 		echo "\t\t\t\t<ul id=\"mycarousel\" class=\"jcarousel-skin-tango\">\n";
    676. 

  676. 		if (isset($GLOBALS['pixie_user_privs'])) {
    677. 

  677. 			$rs = safe_rows('*', 'pixie_core', "public = 'yes' and in_navigation = 'yes' and publish = 'yes' and page_type != 'plugin' and privs <= '" . $GLOBALS['pixie_user_privs'] . "' order by page_order asc");
    678. 

  678. 		}
    679. 

  679. 		if ($rs) {
    680. 

  680. 			$num = count($rs);
    681. 

  681. 			$i   = 0;
    682. 

  682. 			while ($i < $num) {
    683. 

  683. 				$out               = $rs[$i];
    684. 

  684. 				$page_display_name = $out['page_display_name'];
    685. 

  685. 				$page_name         = $out['page_name'];
    686. 

  686. 				$page_type         = $out['page_type'];
    687. 

  687. 				$page_id           = $out['page_id'];
    688. 

  688. 				$m                 = $page_type;
    689. 

  689. 				$x                 = $page_name;
    690. 

  690. 				if ($current == $x) {
    691. 

  691. 					$class  = 'current';
    692. 

  692. 					$scroll = $cc;
    693. 

  693. 				} else {
    694. 

  694. 					$class = "";
    695. 

  695. 				}
    696. 

  696. 				if ($m == 'dynamic') {
    697. 

  697. 					echo "\t\t\t\t\t<li id=\"c_$page_name\" class=\"page innav $class\"><a href=\"?s=$s&amp;m=$m&amp;x=$x\"><span class=\"page_title\">$page_display_name</span><img src=\"admin/theme/images/icons/page_dynamic.png\" alt=\"$m\" class=\"picon\" /></a></li>\n";
    698. 

  698. 				} else if ($m == 'module') {
    699. 

  699. 					echo "\t\t\t\t\t<li id=\"c_$page_name\" class=\"page innav $class\"><a href=\"?s=$s&amp;m=$m&amp;x=$x\"><span class=\"page_title\">$page_display_name</span><img src=\"admin/theme/images/icons/page_module.png\" alt=\"$m\" class=\"picon\" /></a></li>\n";
    700. 

  700. 				} else {
    701. 

  701. 					echo "\t\t\t\t\t<li id=\"c_$page_name\" class=\"page innav $class\"><a href=\"?s=$s&amp;m=$m&amp;x=$x&amp;edit=$page_id\"><span class=\"page_title\">$page_display_name</span><img src=\"admin/theme/images/icons/page_static.png\" alt=\"$m\" class=\"picon\" /></a></li>\n";
    702. 

  702. 				}
    703. 

  703. 				$cc++;
    704. 

  704. 				$i++;
    705. 

  705. 			}
    706. 

  706. 		}
    707. 

  707. 		if (isset($GLOBALS['pixie_user_privs'])) {
    708. 

  708. 			$rs = safe_rows('*', 'pixie_core', "public = 'yes' and in_navigation = 'no' and publish = 'yes' and page_type != 'plugin' and privs <= '" . $GLOBALS['pixie_user_privs'] . "' order by page_name asc");
    709. 

  709. 		}
    710. 

  710. 		if ($rs) {
    711. 

  711. 			$num = count($rs);
    712. 

  712. 			$i   = 0;
    713. 

  713. 			while ($i < $num) {
    714. 

  714. 				$out               = $rs[$i];
    715. 

  715. 				$page_display_name = $out['page_display_name'];
    716. 

  716. 				$page_name         = $out['page_name'];
    717. 

  717. 				$page_type         = $out['page_type'];
    718. 

  718. 				$page_id           = $out['page_id'];
    719. 

  719. 				$m                 = $page_type;
    720. 

  720. 				$x                 = $page_name;
    721. 

  721. 				if ($current == $x) {
    722. 

  722. 					$class  = 'current';
    723. 

  723. 					$scroll = $cc;
    724. 

  724. 				} else {
    725. 

  725. 					$class = "";
    726. 

  726. 				}
    727. 

  727. 				if ($m == 'dynamic') {
    728. 

  728. 					echo "\t\t\t\t\t<li id=\"c_$page_name\" class=\"page outnav $class\"><a href=\"?s=$s&amp;m=$m&amp;x=$x\"><span class=\"page_title\">$page_display_name</span><img src=\"admin/theme/images/icons/page_dynamic_white.png\" alt=\"$m\" class=\"picon\" /></a></li>\n";
    729. 

  729. 				} else if ($m == 'module') {
    730. 

  730. 					echo "\t\t\t\t\t<li id=\"c_$page_name\" class=\"page outnav $class\"><a href=\"?s=$s&amp;m=$m&amp;x=$x\"><span class=\"page_title\">$page_display_name</span><img src=\"admin/theme/images/icons/page_module_white.png\" alt=\"$m\" class=\"picon\" /></a></li>\n";
    731. 

  731. 				} else {
    732. 

  732. 					echo "\t\t\t\t\t<li id=\"c_$page_name\" class=\"page outnav $class\"><a href=\"?s=$s&amp;m=$m&amp;x=$x&amp;edit=$page_id\"><span class=\"page_title\">$page_display_name</span><img src=\"admin/theme/images/icons/page_static_white.png\" alt=\"$m\" class=\"picon\" /></a></li>\n";
    733. 

  733. 				}
    734. 

  734. 				$cc++;
    735. 

  735. 				$i++;
    736. 

  736. 			}
    737. 

  737. 		}
    738. 

  738. 		if (isset($GLOBALS['pixie_user_privs'])) {
    739. 

  739. 			$rs = safe_rows('*', 'pixie_core', "public = 'yes' and in_navigation = 'no' and publish = 'yes' and page_type = 'plugin' and privs <= '" . $GLOBALS['pixie_user_privs'] . "' order by page_order asc");
    740. 

  740. 		}
    741. 

  741. 		if ($rs) {
    742. 

  742. 			$num = count($rs);
    743. 

  743. 			$i   = 0;
    744. 

  744. 			while ($i < $num) {
    745. 

  745. 				$out               = $rs[$i];
    746. 

  746. 				$page_display_name = $out['page_display_name'];
    747. 

  747. 				$page_name         = $out['page_name'];
    748. 

  748. 				$page_type         = $out['page_type'];
    749. 

  749. 				$page_id           = $out['page_id'];
    750. 

  750. 				$m                 = $page_type;
    751. 

  751. 				$x                 = $page_name;
    752. 

  752. 				if ($current == $x) {
    753. 

  753. 					$class  = 'current';
    754. 

  754. 					$scroll = $cc;
    755. 

  755. 				} else {
    756. 

  756. 					$class = "";
    757. 

  757. 				}
    758. 

  758. 				echo "\t\t\t\t\t<li id=\"c_$page_name\" class=\"page plugin $class\"><a href=\"?s=$s&amp;m=module&amp;x=$x\"><span class=\"page_title\">$page_display_name</span><img src=\"admin/theme/images/icons/page_plugin.png\" alt=\"$m\" class=\"picon\" /></a></li>\n";
    759. 

  759. 				$cc++;
    760. 

  760. 				$i++;
    761. 

  761. 			}
    762. 

  762. 		}
    763. 

  763. 		echo "\t\t\t\t</ul>\n";
    764. 

  764. 	}
    765. 

  765. 	// move carousel to current page
    766. 

  766. 	echo "
    767. 

  767. 			<script type=\"text/javascript\">
    768. 

  768. 			function mycarousel_itemFirstInCallback(carousel, item, idx, state)
    769. 

  769. 			{
    770. 

  770. 	    			if (state == 'init') carousel.scroll($scroll, false);
    771. 

  771. 		 	}; 
    772. 

  772.   			</script>
    773. 

  773.   ";
    774. 

  774. }
    775. 

  775. // ------------------------------------------------------------------
    776. 

  776. // edit table entry
    777. 

  777. function admin_edit($table_name, $edit_id, $edit, $edit_exclude) {
    778. 

  778. 	global $message, $m, $lang;
    779. 

  779. 	$an = NULL;
    780. 

  780. 	$at = NULL;
    781. 

  781. 	$al = NULL;
    782. 

  782. 	$af = NULL;
    783. 

  783. 	$az = NULL;
    784. 

  784. 	if (isset($table_name)) {
    785. 

  785. 		$table_name = adjust_prefix($table_name);
    786. 

  786. 	}
    787. 

  787. 

  788. 	if ((isset($edit)) && (isset($table_name))) {
    789. 

  789. 		$sql = "select * from $table_name where {$edit_id}={$edit}";
    790. 

  790. 		$r2  = safe_query($sql);
    791. 

  791. 	}
    792. 

  792. 	if ($r2) {
    793. 

  793. 		if ($f = mysql_fetch_array($r2)) {
    794. 

  794. 			for ($j = 0; $j < mysql_num_fields($r2); $j++) {
    795. 

  795. 				$an .= mysql_field_name($r2, $j) . "|";
    796. 

  796. 				$at .= mysql_field_type($r2, $j) . "|";
    797. 

  797. 				$al .= "50|";
    798. 

  798. 				/* Some field lengths seem unset or inconsistent. CSS classes would handle this better. */
    799. 

  799. 				/* $al .= mysql_field_len($r2, $j) . "|"; */
    800. 

  800. 				$af .= mysql_field_flags($r2, $j) . "|";
    801. 

  801. 				$az .= $f[$j] . "|";
    802. 

  802. 			}
    803. 

  803. 			if ($m == 'static') {
    804. 

  804. 				echo "\n\t\t\t\t<div class=\"admin_form form_static\">\n\n\t\t\t\t\t";
    805. 

  805. 			} else {
    806. 

  806. 				echo "\n\t\t\t\t<div class=\"admin_form\">\n\n\t\t\t\t\t";
    807. 

  807. 			}
    808. 

  808. 			if (isset($table_name)) {
    809. 

  809. 				if (!isset($nam)) {
    810. 

  810. 					$nam = NULL;
    811. 

  811. 				}
    812. 

  812. 				$Blank = new ShowBlank($an, $at, $al, $af, $az, $nam, $edit_exclude, $table_name);
    813. 

  813. 				$Blank->ShowBody();
    814. 

  814. 			}
    815. 

  815. 			echo "\n\t\t\t\t</div>";
    816. 

  816. 		}
    817. 

  817. 	} else {
    818. 

  818. 		$message = $lang['form_build_fail'];
    819. 

  819. 	}
    820. 

  820. }
    821. 

  821. // ------------------------------------------------------------------
    822. 

  822. // add new table entry
    823. 

  823. function admin_new($table_name, $edit_exclude) {
    824. 

  824. 	if (isset($table_name)) {
    825. 

  825. 		$an = $at = $af = $az = $al = '';
    826. 

  826. 		$r2 = safe_query('show fields from ' . PFX . "$table_name");
    827. 

  827. 		$r3 = safe_query('select * from ' . PFX . "$table_name WHERE 1=0");
    828. 

  828. 		for ($j = 0; $j < mysql_num_rows($r2); $j++) {
    829. 

  829. 			$flags = mysql_field_flags($r3, $j);
    830. 

  830. 			$af .= $flags . '|';
    831. 

  831. 			if ($F = mysql_fetch_array($r2)) {
    832. 

  832. 				$an .= $F['Field'] . '|';
    833. 

  833. 				$at .= preg_replace('([()0-9]+)', "", $F['Type']) . '|';
    834. 

  834. 			}
    835. 

  835. 			if (preg_match('([0-9]+)', $F['Type'], $str)) {
    836. 

  836. 				$al .= $str[0] . '|';
    837. 

  837. 			} else {
    838. 

  838. 				$al .= '|';
    839. 

  839. 				$az .= $F['Default'] . '|';
    840. 

  840. 			}
    841. 

  841. 			if ($F['Key'] == "PRI") {
    842. 

  842. 				$nam = $F['Field'];
    843. 

  843. 			}
    844. 

  844. 		}
    845. 

  845. 		echo "\n\t\t\t\t<div id=\"admin_form\">\n\n\t\t\t\t\t";
    846. 

  846. 		if (isset($table_name)) {
    847. 

  847. 			$Blank = new ShowBlank($an, $at, $al, $af, $az, $nam, $edit_exclude, $table_name);
    848. 

  848. 			$Blank->ShowBody();
    849. 

  849. 		}
    850. 

  850. 		echo "\n\t\t\t\t</div>";
    851. 

  851. 	}
    852. 

  852. }
    853. 

  853. // ------------------------------------------------------------------
    854. 

  854. // delete code
    855. 

  855. if ((isset($GLOBALS['pixie_user'])) && (isset($GLOBALS['pixie_user_privs'])) && ($GLOBALS['pixie_user_privs'] >= 1)) {
    856. 

  856. 	if (isset($delete)) {
    857. 

  857. 		if ((isset($s)) && ($s == 'settings') && ($delete == 1)) {
    858. 

  858. 			// protect 404
    859. 

  859. 		} else if ((isset($s)) && ($s == 'settings')) {
    860. 

  860. 			$table = 'pixie_core';
    861. 

  861. 			$id    = 'page_id';
    862. 

  862. 		} else if ((isset($s)) && ($s == 'publish') && ($m == 'dynamic')) {
    863. 

  863. 			$table = 'pixie_dynamic_posts';
    864. 

  864. 			$id    = 'post_id';
    865. 

  865. 		} else if ((isset($s)) && ($s == 'publish') && ($m == 'module')) {
    866. 

  866. 			$table = 'pixie_module_' . $x;
    867. 

  867. 			$id    = $x . '_id';
    868. 

  868. 		}
    869. 

  869. 		$table      = adjust_prefix($table);
    870. 

  870. 		$getdetails = extract(safe_row('*', "$table", "$id='$delete' limit 0,1"));
    871. 

  871. 		if ($getdetails) {
    872. 

  872. 			$del = safe_delete("$table", "$id='$delete'");
    873. 

  873. 		}
    874. 

  874. 		if ((isset($del)) && ($del)) {
    875. 

  875. 			if ((isset($s)) && (isset($m)) && ($s == 'settings') && ($m == 'dynamic')) {
    876. 

  876. 				$page_display_name = safe_field('page_display_name', 'pixie_core', "page_id='$del'");
    877. 

  877. 				//do not delete the posts as one false click could destroy lots of data. Backup first?
    878. 

  878. 				//safe_delete("pixie_dynamic_posts", "page_id='$delete'"); 
    879. 

  879. 				safe_delete('pixie_dynamic_settings', "page_id='$delete'");
    880. 

  880. 			}
    881. 

  881. 			if ((isset($s)) && (isset($m)) && (isset($del)) && ($s == 'settings') && ($m == 'static')) {
    882. 

  882. 				$page_display_name = safe_field('page_display_name', 'pixie_core', "page_id='$del'");
    883. 

  883. 				safe_delete('pixie_static_posts', "page_id='$delete'");
    884. 

  884. 			}
    885. 

  885. 			if ((isset($s)) && (isset($m)) && ($s == 'settings') && ($m == 'module')) {
    886. 

  886. 				$table_mod          = PFX . 'pixie_module_' . $page_name;
    887. 

  887. 				$table_mod_settings = PFX . 'pixie_module_' . $page_name . '_settings';
    888. 

  888. 				$sql                = "DROP TABLE IF EXISTS $table_mod";
    889. 

  889. 				$sql1               = "DROP TABLE IF EXISTS $table_mod_settings";
    890. 

  890. 				//do not drop the tables as one false click could destroy lots of data. Backup first?
    891. 

  891. 				//safe_query($sql);
    892. 

  892. 				//safe_query($sql1);
    893. 

  893. 				//do not remove the file as we might want to reinstall at a later date
    894. 

  894. 				//file_delete("modules/".$page_name.".php");
    895. 

  895. 			}
    896. 

  896. 			if ($table == PFX . 'pixie_core') {
    897. 

  897. 				$messageok = $lang['ok_delete_page'] . " " . $page_display_name . " " . $lang['page'];
    898. 

  898. 				$icon      = 'site';
    899. 

  899. 				$alert     = 'yes';
    900. 

  900. 			} else {
    901. 

  901. 				$page_display_name = safe_field('page_display_name', 'pixie_core', "page_name='$x'");
    902. 

  902. 				$messageok         = $lang['ok_delete_entry'] . " " . $page_display_name . " " . $lang['page'];
    903. 

  903. 				$icon              = 'page';
    904. 

  904. 				$alert             = 'no';
    905. 

  905. 			}
    906. 

  906. 			logme($messageok, $alert, $icon);
    907. 

  907. 			if (isset($table_name)) {
    908. 

  908. 				safe_optimize("$table_name");
    909. 

  909. 				safe_repair("$table_name");
    910. 

  910. 			}
    911. 

  911. 		} else {
    912. 

  912. 			if (!$message) {
    913. 

  913. 				if ((isset($s)) && ($s == 'settings') && ($delete == 1)) {
    914. 

  914. 					$message = $lang['failed_protected_page'];
    915. 

  915. 					$imp     = 'yes';
    916. 

  916. 				} else {
    917. 

  917. 					$message = $lang['failed_delete'];
    918. 

  918. 					$imp     = 'no';
    919. 

  919. 				}
    920. 

  920. 				logme($message, $imp, 'error');
    921. 

  921. 			}
    922. 

  922. 		}
    923. 

  923. 	}
    924. 

  924. }
    925. 

  925. // ------------------------------------------------------------------
    926. 

  926. // save and edit code
    927. 

  927. if ((isset($GLOBALS['pixie_user'])) && (isset($GLOBALS['pixie_user_privs'])) && ($GLOBALS['pixie_user_privs'] >= 1)) {
    928. 

  928. 	if ((isset($submit_edit)) && ($submit_edit) or (isset($submit_new)) && ($submit_new)) {
    929. 

  929. 		$rs = safe_row('*', 'pixie_core', "page_name = '$x' limit 0,1");
    930. 

  930. 		if ($rs) {
    931. 

  931. 			extract($rs);
    932. 

  932. 		}
    933. 

  933. 		foreach ($_POST as $key => $value) {
    934. 

  934. 			if (($key == 'day') or ($key == 'month') or ($key == 'year') or ($key == 'time')) {
    935. 

  935. 				$value = str_replace(':', "", $value);
    936. 

  936. 				if ($key == 'time') {
    937. 

  937. 					if (strlen($value) == 3) {
    938. 

  938. 						$value = 0 . $value;
    939. 

  939. 					}
    940. 

  940. 				}
    941. 

  941. 				$timey[] = $value;
    942. 

  942. 			}
    943. 

  943. 			//echo "$key - $value <br>"; //enable to see $_post output
    944. 

  944. 		}
    945. 

  945. 		if ((isset($timey)) && ($timey)) {
    946. 

  946. 			if ((!checkdate($timey[1], $timey[0], $timey[2]))) {
    947. 

  947. 				$error .= $lang['date_error'] . ' ';
    948. 

  948. 			} else {
    949. 

  949. 				$minute   = substr($timey[3], 2, 4);
    950. 

  950. 				$hour     = substr($timey[3], 0, 2);
    951. 

  951. 				$unixtime = mktime($hour, $minute, 00, $timey[1], $timey[0], $timey[2]);
    952. 

  952. 			}
    953. 

  953. 		}
    954. 

  954. 		$r2 = safe_query('show fields from ' . adjust_prefix($table_name));
    955. 

  955. 		$r3 = safe_query('select * from ' . adjust_prefix($table_name) . ' WHERE 1=0');
    956. 

  956. 		for ($j = 0; $j < mysql_num_rows($r2); $j++) {
    957. 

  957. 			$flags  = mysql_field_flags($r3, $j);
    958. 

  958. 			$af[$j] = $flags;
    959. 

  959. 			if ($F = mysql_fetch_array($r2)) {
    960. 

  960. 				$an[$j] = $F['Field'];
    961. 

  961. 				$at[$j] = preg_replace('([()0-9]+)', "", $F['Type']);
    962. 

  962. 			}
    963. 

  963. 			//echo $an[$j]."-".$at[$j]."-".$af[$j]."<br>"; //enable to see field properties
    964. 

  964. 		}
    965. 

  965. 		for ($j = 0; $j < mysql_num_rows($r2); $j++) {
    966. 

  966. 			$check = new Validator();
    967. 

  967. 			if (isset($had_id)) {
    968. 

  968. 			} else {
    969. 

  969. 				$had_id = NULL;
    970. 

  970. 			}
    971. 

  971. 			if ($at[$j] == 'timestamp' && !array_key_exists("$an[$j]", $_POST)) {
    972. 

  972. 				$check->validateNumber($unixtime, 'invalid time' . ' ');
    973. 

  973. 				if ((isset($sql))) {
    974. 

  974. 				} else {
    975. 

  975. 					$sql = NULL;
    976. 

  976. 				}
    977. 

  977. 				$sql .= "" . $an[$j] . " = '" . returnSQLtimestamp($unixtime) . "',";
    978. 

  978. 			} else if ((last_word($an[$j]) == 'id') && ($had_id === NULL)) {
    979. 

  979. 				$had_id = 1;
    980. 

  980. 				$editid = $_POST[$an[$j]];
    981. 

  981. 				$idme   = $an[$j];
    982. 

  982. 			} else if (($an[$j] == 'page_content') && (isset($s)) && ($s == 'settings')) {
    983. 

  983. 				//skip it to protect the php in the page_content field
    984. 

  984. 			} else if (($an[$j] == 'admin') && (isset($s)) && ($s == 'settings')) {
    985. 

  985. 				//skip it to protect the php code in the admin field
    986. 

  986. 			} else {
    987. 

  987. 				$value = $_POST[$an[$j]];
    988. 

  988. 				if ($an[$j] == 'title') {
    989. 

  989. 					$tit = $value;
    990. 

  990. 				}
    991. 

  991. 				if ($at[$j] == 'varchar') {
    992. 

  992. 					$value = htmlspecialchars($value, ENT_QUOTES, 'UTF-8');
    993. 

  993. 				}
    994. 

  994. 				// check for posts with duplicate title/slug and increment
    995. 

  995. 				if ($an[$j] == 'post_slug') {
    996. 

  996. 					if (!$value) {
    997. 

  997. 						$value         = make_slug($tit);
    998. 

  998. 						$value         = strtolower($value);
    999. 

  999. 						$searchforslug = safe_rows('*', $table_name, "post_slug REGEXP '[[:<:]]" . $value . "[[:>:]]'");
    1000. 

  1000. 						if ($searchforslug) {
    1001. 

  1001. 							$addslug = count($searchforslug);
    1002. 

  1002. 							$value   = $value . '-' . $addslug;
    1003. 

  1003. 						}
    1004. 

  1004. 					}
    1005. 

  1005. 				}
    1006. 

  1006. 				// check for pages with duplicate title/slug and increment
    1007. 

  1007. 				if ($an[$j] == 'page_name') {
    1008. 

  1008. 					$oldvalue = safe_field('page_name', $table_name, "page_id='$editid'");
    1009. 

  1009. 					if ($value != $oldvalue) {
    1010. 

  1010. 						$searchforpage = safe_rows('*', $table_name, "page_name REGEXP '[[:<:]]" . $value . "[[:>:]]'");
    1011. 

  1011. 						if ($searchforpage) {
    1012. 

  1012. 							$addpage = count($searchforpage);
    1013. 

  1013. 							$value   = $value . '-' . $addpage;
    1014. 

  1014. 						}
    1015. 

  1015. 					}
    1016. 

  1016. 					// force the value to be lowercase and without spaces for slug
    1017. 

  1017. 					$value = strtolower(str_replace(" ", "", preg_replace('/\s\s+/', ' ', trim($value))));
    1018. 

  1018. 				}
    1019. 

  1019. 				// set a page_order, and navigation settings for a newly saved page
    1020. 

  1020. 				if ($an[$j] == 'public') {
    1021. 

  1021. 					if ($value == 'yes') {
    1022. 

  1022. 						$itspublic = 'yes';
    1023. 

  1023. 					}
    1024. 

  1024. 				}
    1025. 

  1025. 				if ($an[$j] == 'in_navigation') {
    1026. 

  1026. 					if ($value == 'yes') {
    1027. 

  1027. 						$innavigation = 'yes';
    1028. 

  1028. 					}
    1029. 

  1029. 				}
    1030. 

  1030. 				if ($an[$j] == 'page_order') {
    1031. 

  1031. 					if ($itspublic) {
    1032. 

  1032. 						if ($value != 0) {
    1033. 

  1033. 							if ($innavigation) {
    1034. 

  1034. 								if ((isset($submit_new)) && ($submit_new)) {
    1035. 

  1035. 									$value = count(safe_rows('*', $table_name, "public='yes' and in_navigation='yes' order by post_order asc")) + 1;
    1036. 

  1036. 								}
    1037. 

  1037. 							} else {
    1038. 

  1038. 								$value = 0;
    1039. 

  1039. 							}
    1040. 

  1040. 						} else {
    1041. 

  1041. 							if ($innavigation) {
    1042. 

  1042. 								$value = count(safe_rows('*', $table_name, "public='yes' and in_navigation='yes' order by post_order asc")) + 1;
    1043. 

  1043. 							} else {
    1044. 

  1044. 								$value = $value;
    1045. 

  1045. 							}
    1046. 

  1046. 						}
    1047. 

  1047. 					} else {
    1048. 

  1048. 						$value = 0;
    1049. 

  1049. 					}
    1050. 

  1050. 				}
    1051. 

  1051. 				// validate and clean input
    1052. 

  1052. 				$value = str_replace('|', '&#124;', $value);
    1053. 

  1053. 				$nullf = explode(" ", $af[$j]);
    1054. 

  1054. 				if ($an[$j] == 'tags') {
    1055. 

  1055. 					$value = make_tag($value);
    1056. 

  1056. 				}
    1057. 

  1057. 				if (get_magic_quotes_gpc() == 0) {
    1058. 

  1058. 					$value = addslashes($value);
    1059. 

  1059. 				}
    1060. 

  1060. 				if ($at[$j] == 'varchar') {
    1061. 

  1061. 					sterilise(strip_tags($value));
    1062. 

  1062. 				}
    1063. 

  1063. 				if (($an[$j] == 'url') or ($an[$j] == 'website')) {
    1064. 

  1064. 					if ($nullf[0] == 'not_null') {
    1065. 

  1065. 						$check->validateURL($value, $lang['url_error'] . ' ');
    1066. 

  1066. 					} else if ($value != "") {
    1067. 

  1067. 						$check->validateURL($value, $lang['url_error'] . ' ');
    1068. 

  1068. 					}
    1069. 

  1069. 				}
    1070. 

  1070. 				if ($at[$j] == 'longtext') {
    1071. 

  1071. 					// remove para from <!--more-->
    1072. 

  1072. 					if ((isset($m)) && ($m == 'dynamic')) {
    1073. 

  1073. 						// hacky to try and clean the more
    1074. 

  1074. 						$value = str_replace('<p><!--more--></p>', '<!--more-->', $value);
    1075. 

  1075. 						$value = str_replace('<p> <!--more--></p>', '<!--more-->', $value);
    1076. 

  1076. 						$value = str_replace('<!--more--></p>', '</p><!--more-->', $value);
    1077. 

  1077. 						$value = str_replace('<p><!--more-->', '<!--more--><p>', $value);
    1078. 

  1078. 					}
    1079. 

  1079. 				}
    1080. 

  1080. 				if ($an[$j] == 'email') {
    1081. 

  1081. 					if ($nullf[0] == 'not_null') {
    1082. 

  1082. 						$check->validateEmail($value, $lang['email_error'] . ' ');
    1083. 

  1083. 					} else if ($value != "") {
    1084. 

  1084. 						$check->validateEmail($value, $lang['email_error'] . ' ');
    1085. 

  1085. 					}
    1086. 

  1086. 				}
    1087. 

  1087. 				if (($nullf[0] == 'not_null') && ($value == "")) {
    1088. 

  1088. 					$error .= ucwords($an[$j]) . " " . $lang['is_required'] . ' ';
    1089. 

  1089. 				}
    1090. 

  1090. 				// if empty int set to 0
    1091. 

  1091. 				if ($at[$j] == 'int')
    1092. 

  1092. 					$value = ($value ? $value : 0);
    1093. 

  1093. 				if (isset($sql)) {
    1094. 

  1094. 				} else {
    1095. 

  1095. 					$sql = NULL;
    1096. 

  1096. 				}
    1097. 

  1097. 				$sql .= "`" . $an[$j] . "` = '" . $value . "',";
    1098. 

  1098. 				if ($check->foundErrors()) {
    1099. 

  1099. 					$error .= $check->listErrors('x');
    1100. 

  1100. 				}
    1101. 

  1101. 			}
    1102. 

  1102. 		}
    1103. 

  1103. 		if (isset($sql)) {
    1104. 

  1104. 		} else {
    1105. 

  1105. 			$sql = NULL;
    1106. 

  1106. 		}
    1107. 

  1107. 		$sql = substr($sql, 0, (strlen($sql) - 1)) . "";
    1108. 

  1108. 		//echo $sql; //view the SQL for current form save
    1109. 

  1109. 		if (!isset($error)) {
    1110. 

  1110. 			if ((isset($submit_new)) && ($submit_new)) {
    1111. 

  1111. 				$ok       = safe_insert($table_name, $sql);
    1112. 

  1112. 				$idofsave = mysql_insert_id();
    1113. 

  1113. 				safe_optimize($table_name);
    1114. 

  1114. 				safe_repair($table_name);
    1115. 

  1115. 				if (!$ok) {
    1116. 

  1116. 					$message = $lang['unknown_error'];
    1117. 

  1117. 					logme($message, 'no', 'error');
    1118. 

  1118. 				} else {
    1119. 

  1119. 					if ((isset($s)) && ($s == 'settings') && ($page_type == 'dynamic')) {
    1120. 

  1120. 						$sql = "`page_id` = '$idofsave', `posts_per_page` = '10', `rss` = 'yes'";
    1121. 

  1121. 						safe_insert('pixie_dynamic_settings', $sql);
    1122. 

  1122. 					}
    1123. 

  1123. 					if ($table_name == 'pixie_core') {
    1124. 

  1124. 						$output    = safe_field('page_display_name', 'pixie_core', "page_id='$idofsave'");
    1125. 

  1125. 						$icon      = 'site';
    1126. 

  1126. 						$messageok = $lang['saved_new_page'] . ": $output.";
    1127. 

  1127. 					} else {
    1128. 

  1128. 						$ptitle = $title;
    1129. 

  1129. 						$output = $page_display_name;
    1130. 

  1130. 						$icon   = 'page';
    1131. 

  1131. 						if (isset($ptitle)) {
    1132. 

  1132. 							$messageok = $lang['saved_new'] . ": $ptitle " . $lang['in_the'] . " $output " . $lang['page'];
    1133. 

  1133. 						} else {
    1134. 

  1134. 							$messageok = $lang['saved_new'] . " (#$idofsave) " . $lang['in_the'] . " $output " . $lang['page'];
    1135. 

  1135. 						}
    1136. 

  1136. 					}
    1137. 

  1137. 					logme($messageok, 'no', $icon);
    1138. 

  1138. 				}
    1139. 

  1139. 			}
    1140. 

  1140. 			if ((isset($submit_edit)) && $submit_edit) {
    1141. 

  1141. 				$ok = safe_update("$table_name", "$sql", "`$idme` = '$editid'");
    1142. 

  1142. 				if (!$ok) {
    1143. 

  1143. 					$message = $lang['unknown_error'];
    1144. 

  1144. 				} else {
    1145. 

  1145. 					if ((isset($s)) && ($s == 'settings')) {
    1146. 

  1146. 						$output = $page_display_name;
    1147. 

  1147. 						$icon   = 'site';
    1148. 

  1148. 						if ($output) {
    1149. 

  1149. 							$messageok = $lang['saved_new_settings_for'] . " " . $output . " " . $lang['page'];
    1150. 

  1150. 						} else {
    1151. 

  1151. 							$output    = safe_field('page_display_name', 'pix…
    1152.

Large files files are truncated, but you can click here to view the full file