PageRenderTime 25ms CodeModel.GetById 20ms RepoModel.GetById 0ms app.codeStats 0ms

/admin/news.php

https://github.com/ECP-Black/ECP
PHP | 334 lines | 333 code | 1 blank | 0 comment | 78 complexity | dd2338cea6405d0bf5451eb3cdd9943a MD5 | raw file
    

  1. <?php
    2. 

  2. function admin_news() {
    3. 

  3. 	global $db;
    4. 

  4. 	$tpl = new smarty;
    5. 

  5. 	if(@$_GET['func'] == 'pin') {
    6. 

  6. 		ob_end_clean();
    7. 

  7. 		if($db->result(DB_PRE.'ecp_news', 'sticky', 'newsID = '.(int)$_GET['id']) == 0) {
    8. 

  8. 			$db->query('UPDATE '.DB_PRE.'ecp_news SET sticky = 1 WHERE newsID = '.(int)$_GET['id']);
    9. 

  9. 		} else {
    10. 

  10. 			$db->query('UPDATE '.DB_PRE.'ecp_news SET sticky = 0 WHERE newsID = '.(int)$_GET['id']);
    11. 

  11. 		}
    12. 

  12. 		$tpl->assign('ajax', 1);
    13. 

  13. 	}
    14. 

  14. 	$anzahl = $db->result(DB_PRE.'ecp_news', 'COUNT(newsID)', 'datum > 0',0);
    15. 

  15. 	if($anzahl) {
    16. 

  16. 		$limits = get_sql_limit($anzahl, ADMIN_ENTRIES);
    17. 

  17. 		$news = array();
    18. 

  18. 		$db->query('SELECT `newsID`, `topicID`, `datum`, `headline`, `topicname`, sticky FROM `'.DB_PRE.'ecp_news` LEFT JOIN `'.DB_PRE.'ecp_topics` ON (`topicID` = `tID`) ORDER BY sticky DESC, `datum` DESC LIMIT '.$limits[1].', '.ADMIN_ENTRIES);
    19. 

  19. 		while($row = $db->fetch_assoc()) {
    20. 

  20. 			$row['datum'] = date(LONG_DATE, $row['datum']);
    21. 

  21. 			$news[] = $row;
    22. 

  22. 		}
    23. 

  23. 	}
    24. 

  24. 

  25. 	$tpl->assign('seiten', makepagelink('?section=admin&site=news', (isset($_GET['page']) ? $_GET['page'] : 1), $limits[0]));
    26. 

  26. 	$tpl->assign('news', @$news);
    27. 

  27. 	ob_start();
    28. 

  28. 	$tpl->display(DESIGN.'/tpl/admin/news.html');
    29. 

  29. 	$content = ob_get_contents();
    30. 

  30. 	ob_end_clean();
    31. 

  31. 	if(@$_GET['func'] == 'pin') {
    32. 

  32. 		echo html_ajax_convert($content);
    33. 

  33. 		die();
    34. 

  34. 	} else {
    35. 

  35. 		main_content(ADMIN_NEWS, $content, '',1);
    36. 

  36. 	}
    37. 

  37. }
    38. 

  38. function admin_news_add() {
    39. 

  39. 	global $db,$groups, $language_array;
    40. 

  40. 	if(isset($_POST['submit'])) {
    41. 

  41. 		if($_POST['headline'] == '' OR (int)$_POST['topic']  == 0 OR $_POST['bodytext'] == '') {
    42. 

  42. 			$tpl = new smarty;
    43. 

  43. 			$links = array();
    44. 

  44. 			foreach($_POST AS $key => $value) {
    45. 

  45. 				if(strpos($key, 'ink_')) {
    46. 

  46. 					$nr = substr($key,strpos($key, '_')+1);
    47. 

  47. 					$links[$nr]['link'] = $value;
    48. 

  48. 				} elseif (strpos($key, 'rl_')) {
    49. 

  49. 					$nr = substr($key,strpos($key, '_')+1);
    50. 

  50. 					$links[$nr]['url'] = check_url($value);
    51. 

  51. 				}else {
    52. 

  52. 					$tpl->assign($key, $value);
    53. 

  53. 				}
    54. 

  54. 			}
    55. 

  55. 			$tpl->assign('links', $links);
    56. 

  56. 			$db->query('SELECT tID, topicname FROM '.DB_PRE.'ecp_topics ORDER by topicname ASC');
    57. 

  57. 			$topics = '';
    58. 

  58. 			while($row = $db->fetch_assoc()) {
    59. 

  59. 			($_POST['topic'] == $row['tID'])? $sub = ' selected="selected"' : $sub = '';
    60. 

  60. 			$topics .= '<option'.$sub.' value="'.$row['tID'].'">'.$row['topicname'].'</option>';
    61. 

  61. 			}
    62. 

  62. 			$tpl->assign('topics', $topics);
    63. 

  63. 			$db->query('SELECT groupID, name FROM '.DB_PRE.'ecp_groups ORDER by name ASC');
    64. 

  64. 			(in_array('all', $_POST['rights']))? $rights = '<option value="all" selected="selected">'.ALL.'</option>' : $rights = '<option value="all">'.ALL.'</option>';
    65. 

  65. 			while($row = $db->fetch_assoc()) {
    66. 

  66. 			(in_array($row['groupID'], $_POST['rights']))? $sub = ' selected="selected"' : $sub = '';
    67. 

  67. 			if(isset($groups[$row['name']])) $row['name'] = $groups[$row['name']];
    68. 

  68. 			$rights .= '<option'.$sub.' value="'.$row['groupID'].'">'.$row['name'].'</option>';
    69. 

  69. 			}
    70. 

  70. 			$files = scan_dir('inc/language', true);
    71. 

  71. 			(in_array('all', $_POST['rights']))?$languages = '<option value="all" selected="selected">'.ALL.'</option>' : $languages  = '<option value="all">'.ALL.'</option>';
    72. 

  72. 			foreach($files AS $lang) {
    73. 

  73. 				if(strpos($lang, '.php')) {
    74. 

  74. 					$lang = substr($lang,0,strpos($lang, '.'));
    75. 

  75. 					(in_array($lang, $_POST['languages']))? $sub = ' selected="selected"' : $sub = '';
    76. 

  76. 					@$languages .= '<option'.$sub.' value="'.$lang.'">'.@$language_array[$lang].'</option>';
    77. 

  77. 				}
    78. 

  78. 			}
    79. 

  79. 			$tpl->assign('rights', $rights);
    80. 

  80. 			$tpl->assign('topics', $topics);
    81. 

  81. 			$tpl->assign('languages', $languages);
    82. 

  82. 			ob_start();
    83. 

  83. 			$tpl->display(DESIGN.'/tpl/admin/news_add_edit.html');
    84. 

  84. 			$content = ob_get_contents();
    85. 

  85. 			ob_end_clean();
    86. 

  86. 			main_content(ADMIN_NEWS_ADD, $content, '',1);
    87. 

  87. 		} else {
    88. 

  88. 			if(in_array('all', $_POST['rights']))
    89. 

  89. 			$rights = '';
    90. 

  90. 			else {
    91. 

  91. 				$rights = ',';
    92. 

  92. 				foreach($_POST['rights'] AS $key) {
    93. 

  93. 					$rights .= (int)$key.',';
    94. 

  94. 				}
    95. 

  95. 			}
    96. 

  96. 			if(in_array('all', $_POST['languages'])) $lang = ''; else $lang = ','.implode(',',$_POST['languages']).',';
    97. 

  97. 			$zeit = strtotime($_POST['datum']);
    98. 

  98. 			if($zeit == 0) $zeit = time();
    99. 

  99. 			$i = 0;
    100. 

  100. 			while(isset($_POST['link_'.$i])) {
    101. 

  101. 				if($_POST['link_'.$i] != '' AND $_POST['url_'.$i] != '') {
    102. 

  102. 					@$links .= '[URL='.check_url($_POST['url_'.$i].']'.$_POST['link_'.$i].'[/URL]');
    103. 

  103. 				}
    104. 

  104. 				$i++;
    105. 

  105. 			}
    106. 

  106. 			$sql = 'INSERT INTO '.DB_PRE.'ecp_news (`userID`, `topicID`, `access`, `lang`, `datum`, `headline`, `bodytext`, `extendtext`, `links`) VALUES (
    107. 

  107. 					'.$_SESSION['userID'].', '.(int)$_POST['topic'].', \''.$rights.'\', \''.strsave($lang).'\', '.$zeit.', 
    108. 

  108. 					\''.strsave($_POST['headline']).'\', \''.strsave($_POST['bodytext']).'\', \''.strsave($_POST['extendtext']).'\', 
    109. 

  109. 					\''.strsave(@$links).'\');';
    110. 

  110. 			if($db->query($sql)) {
    111. 

  111. 				header1('?section=admin&site=news');
    112. 

  112. 			}
    113. 

  113. 		}
    114. 

  114. 	} else {
    115. 

  115. 		$tpl = new smarty;
    116. 

  116. 		$links = array(0);
    117. 

  117. 		$tpl->assign('links', $links);
    118. 

  118. 		$db->query('SELECT tID, topicname FROM '.DB_PRE.'ecp_topics ORDER by topicname ASC');
    119. 

  119. 		$topics = '';
    120. 

  120. 		while($row = $db->fetch_assoc()) {
    121. 

  121. 			$topics .= '<option value="'.$row['tID'].'">'.$row['topicname'].'</option>';
    122. 

  122. 		}
    123. 

  123. 		$tpl->assign('topics', $topics);
    124. 

  124. 		$db->query('SELECT groupID, name FROM '.DB_PRE.'ecp_groups ORDER by name ASC');
    125. 

  125. 		$rights = '<option value="all" selected="selected">'.ALL.'</option>';
    126. 

  126. 		while($row = $db->fetch_assoc()) {
    127. 

  127. 			if(isset($groups[$row['name']])) $row['name'] = $groups[$row['name']];
    128. 

  128. 			$rights .= '<option value="'.$row['groupID'].'">'.$row['name'].'</option>';
    129. 

  129. 		}
    130. 

  130. 		$files = scan_dir('inc/language', true);
    131. 

  131. 		$languages = '<option value="all" selected="selected">'.ALL.'</option>';
    132. 

  132. 		foreach($files AS $lang) {
    133. 

  133. 			if(strpos($lang, '.php')) {
    134. 

  134. 				$lang = substr($lang,0,strpos($lang, '.'));
    135. 

  135. 				@$languages .= '<option value="'.$lang.'">'.@$language_array[$lang].'</option>';
    136. 

  136. 			}
    137. 

  137. 		}
    138. 

  138. 		$tpl->assign('rights', $rights);
    139. 

  139. 		$tpl->assign('topics', $topics);
    140. 

  140. 		$tpl->assign('languages', $languages);
    141. 

  141. 		ob_start();
    142. 

  142. 		$tpl->display(DESIGN.'/tpl/admin/news_add_edit.html');
    143. 

  143. 		$content = ob_get_contents();
    144. 

  144. 		ob_end_clean();
    145. 

  145. 		main_content(ADMIN_NEWS_ADD, $content, '',1);
    146. 

  146. 	}
    147. 

  147. }
    148. 

  148. function admin_news_edit($id) {
    149. 

  149. 	global $db,$groups, $language_array;
    150. 

  150. 	if(isset($_POST['submit'])) {
    151. 

  151. 		if($_POST['headline'] == '' OR (int)$_POST['topic']  == 0 OR $_POST['bodytext'] == '') {
    152. 

  152. 			$tpl = new smarty;
    153. 

  153. 			$links = array();
    154. 

  154. 			foreach($_POST AS $key => $value) {
    155. 

  155. 				if(strpos($key, 'ink_')) {
    156. 

  156. 					$nr = substr($key,strpos($key, '_')+1);
    157. 

  157. 					$links[$nr]['link'] = $value;
    158. 

  158. 				} elseif (strpos($key, 'rl_')) {
    159. 

  159. 					$nr = substr($key,strpos($key, '_')+1);
    160. 

  160. 					$links[$nr]['url'] = check_url($value);
    161. 

  161. 				}else {
    162. 

  162. 					$tpl->assign($key, $value);
    163. 

  163. 				}
    164. 

  164. 			}
    165. 

  165. 			$tpl->assign('links', $links);
    166. 

  166. 			$db->query('SELECT tID, topicname FROM '.DB_PRE.'ecp_topics ORDER by topicname ASC');
    167. 

  167. 			$topics = '';
    168. 

  168. 			while($row = $db->fetch_assoc()) {
    169. 

  169. 			($_POST['topic'] == $row['tID'])? $sub = ' selected="selected"' : $sub = '';
    170. 

  170. 			$topics .= '<option'.$sub.' value="'.$row['tID'].'">'.$row['topicname'].'</option>';
    171. 

  171. 			}
    172. 

  172. 			$tpl->assign('topics', $topics);
    173. 

  173. 			$db->query('SELECT groupID, name FROM '.DB_PRE.'ecp_groups ORDER by name ASC');
    174. 

  174. 			(in_array('all', $_POST['rights']))? $rights = '<option value="all" selected="selected">'.ALL.'</option>' : $rights = '<option value="all">'.ALL.'</option>';
    175. 

  175. 			while($row = $db->fetch_assoc()) {
    176. 

  176. 			(in_array($row['groupID'], $_POST['rights']))? $sub = ' selected="selected"' : $sub = '';
    177. 

  177. 			if(isset($groups[$row['name']])) $row['name'] = $groups[$row['name']];
    178. 

  178. 			$rights .= '<option'.$sub.' value="'.$row['groupID'].'">'.$row['name'].'</option>';
    179. 

  179. 			}
    180. 

  180. 			$files = scan_dir('inc/language', true);
    181. 

  181. 			(in_array('all', $_POST['rights']))?$languages = '<option value="all" selected="selected">'.ALL.'</option>' : $languages  = '<option value="all">'.ALL.'</option>';
    182. 

  182. 			foreach($files AS $lang) {
    183. 

  183. 				if(strpos($lang, '.php')) {
    184. 

  184. 					$lang = substr($lang,0,strpos($lang, '.'));
    185. 

  185. 					(in_array($lang, $_POST['languages']))? $sub = ' selected="selected"' : $sub = '';
    186. 

  186. 					@$languages .= '<option'.$sub.' value="'.$lang.'">'.@$language_array[$lang].'</option>';
    187. 

  187. 				}
    188. 

  188. 			}
    189. 

  189. 			$tpl->assign('rights', $rights);
    190. 

  190. 			$tpl->assign('topics', $topics);
    191. 

  191. 			$tpl->assign('languages', $languages);
    192. 

  192. 			ob_start();
    193. 

  193. 			$tpl->display(DESIGN.'/tpl/admin/news_add_edit.html');
    194. 

  194. 			$content = ob_get_contents();
    195. 

  195. 			ob_end_clean();
    196. 

  196. 			main_content(ADMIN_NEWS_ADD, $content, '',1);
    197. 

  197. 		} else {
    198. 

  198. 			if(in_array('all', $_POST['rights']))
    199. 

  199. 			$rights = '';
    200. 

  200. 			else {
    201. 

  201. 				$rights = ',';
    202. 

  202. 				foreach($_POST['rights'] AS $key) {
    203. 

  203. 					$rights .= (int)$key.',';
    204. 

  204. 				}
    205. 

  205. 			}
    206. 

  206. 			if(in_array('all', $_POST['languages'])) $lang = ''; else $lang = ','.implode(',',$_POST['languages']).',';
    207. 

  207. 			$zeit = strtotime($_POST['datum']);
    208. 

  208. 			if($zeit == 0) $zeit = time();
    209. 

  209. 			$i = 0;
    210. 

  210. 			while(isset($_POST['link_'.$i])) {
    211. 

  211. 				if($_POST['link_'.$i] != '' AND $_POST['url_'.$i] != '') {
    212. 

  212. 					@$links .= '[URL='.check_url($_POST['url_'.$i].']'.$_POST['link_'.$i].'[/URL]');
    213. 

  213. 				}
    214. 

  214. 				$i++;
    215. 

  215. 			}
    216. 

  216. 			$sql = 'UPDATE '.DB_PRE.'ecp_news SET `topicID` = '.(int)$_POST['topic'].',
    217. 

  217. 										`access` =  \''.$rights.'\', 
    218. 

  218. 										`lang` =  \''.strsave($lang).'\', 
    219. 

  219. 										`datum` = '.$zeit.', 
    220. 

  220. 										`headline` = \''.strsave($_POST['headline']).'\', 
    221. 

  221. 										`bodytext` = \''.strsave($_POST['bodytext']).'\', 
    222. 

  222. 										`extendtext` = \''.strsave($_POST['extendtext']).'\', 
    223. 

  223. 										`links` = \''.strsave(@$links).'\'
    224. 

  224. 									WHERE newsID = '.$id.';';
    225. 

  225. 			if($db->query($sql)) {
    226. 

  226. 				header1('?section=admin&site=news');
    227. 

  227. 			}
    228. 

  228. 		}
    229. 

  229. 	} else {
    230. 

  230. 		$news = $db->fetch_assoc('SELECT `topicID`, `access`, `lang`, `datum`, `headline`, `bodytext`, `extendtext`, `links` FROM `'.DB_PRE.'ecp_news` WHERE newsID = '.$id);
    231. 

  231. 		if(is_array($news)) {
    232. 

  232. 			$tpl = new smarty;
    233. 

  233. 			$news['datum'] = date('Y-m-d H:i:s', $news['datum']);
    234. 

  234. 			$db->query('SELECT tID, topicname FROM '.DB_PRE.'ecp_topics ORDER by topicname ASC');
    235. 

  235. 			$topics = '';
    236. 

  236. 			while($row = $db->fetch_assoc()) {
    237. 

  237. 			($news['topicID'] == $row['tID'])? $sub = ' selected="selected"' : $sub = '';
    238. 

  238. 			$topics .= '<option'.$sub.' value="'.$row['tID'].'">'.$row['topicname'].'</option>';
    239. 

  239. 			}
    240. 

  240. 			$tpl->assign('topics', $topics);
    241. 

  241. 			$db->query('SELECT groupID, name FROM '.DB_PRE.'ecp_groups ORDER by name ASC');
    242. 

  242. 			if ($news['access'] == '') {
    243. 

  243. 				$rights = '<option value="all" selected="selected">'.ALL.'</option>';
    244. 

  244. 				$rechte = array();
    245. 

  245. 			} else {
    246. 

  246. 				$rechte = explode(',', substr($news['access'],1,strlen($news['access'])-1));
    247. 

  247. 				$rights = '<option value="all">'.ALL.'</option>';
    248. 

  248. 			}
    249. 

  249. 			while($row = $db->fetch_assoc()) {
    250. 

  250. 			(in_array($row['groupID'], $rechte))? $sub = ' selected="selected"' : $sub = '';
    251. 

  251. 			if(isset($groups[$row['name']])) $row['name'] = $groups[$row['name']];
    252. 

  252. 			$rights .= '<option'.$sub.' value="'.$row['groupID'].'">'.$row['name'].'</option>';
    253. 

  253. 			}
    254. 

  254. 			$files = scan_dir('inc/language', true);
    255. 

  255. 			if ($news['lang'] == '') {
    256. 

  256. 				$languages = '<option value="all" selected="selected">'.ALL.'</option>';
    257. 

  257. 				$lang1 = array();
    258. 

  258. 			} else {
    259. 

  259. 				$lang1 = explode(',', substr($news['lang'],1,strlen($news['lang'])-1));
    260. 

  260. 				$languages = '<option value="all">'.ALL.'</option>';
    261. 

  261. 			}
    262. 

  262. 			foreach($files AS $lang) {
    263. 

  263. 				if(strpos($lang, '.php')) {
    264. 

  264. 					$lang = substr($lang,0,strpos($lang, '.'));
    265. 

  265. 					(in_array($lang, $lang1))? $sub = ' selected="selected"' : $sub = '';
    266. 

  266. 					@$languages .= '<option'.$sub.' value="'.$lang.'">'.@$language_array[$lang].'</option>';
    267. 

  267. 				}
    268. 

  268. 			}
    269. 

  269. 			if($news['links'] == '')
    270. 

  270. 			$links = array(0);
    271. 

  271. 			else {
    272. 

  272. 				preg_match_all('#\[URL=(.*)\](.*)\[/URL\]#Uis', $news['links'], $spe);
    273. 

  273. 				for($i = 0; $i<count($spe[1]); $i++) {
    274. 

  274. 					$links[$i]['url'] = $spe[1][$i];
    275. 

  275. 					$links[$i]['link'] = $spe[2][$i];
    276. 

  276. 				}
    277. 

  277. 			}
    278. 

  278. 			foreach($news AS $key => $value) $tpl->assign($key, $value);
    279. 

  279. 			$tpl->assign('links', $links);
    280. 

  280. 			$tpl->assign('rights', $rights);
    281. 

  281. 			$tpl->assign('topics', $topics);
    282. 

  282. 			$tpl->assign('languages', $languages);
    283. 

  283. 			ob_start();
    284. 

  284. 			$tpl->display(DESIGN.'/tpl/admin/news_add_edit.html');
    285. 

  285. 			$content = ob_get_contents();
    286. 

  286. 			ob_end_clean();
    287. 

  287. 			main_content(ADMIN_NEWS_ADD, $content, '',1);
    288. 

  288. 		} else {
    289. 

  289. 			table(ERROR, NO_ENTRIES);
    290. 

  290. 		}
    291. 

  291. 	}
    292. 

  292. }
    293. 

  293. function admin_news_del($id) {
    294. 

  294. 	global $db;
    295. 

  295. 	if(isset($_GET['agree'])) {
    296. 

  296. 		$id = (int)$_GET['id'];
    297. 

  297. 		if($db->result(DB_PRE.'ecp_news', 'COUNT(newsID)', 'newsID = '.$id)) {
    298. 

  298. 			if($db->query('DELETE FROM '.DB_PRE.'ecp_comments WHERE subID = '.$id.' AND bereich = "news"')){
    299. 

  299. 				if($db->query('DELETE FROM '.DB_PRE.'ecp_news WHERE newsID = '.$id)) {
    300. 

  300. 					header1('?section=admin&site=news');
    301. 

  301. 				}
    302. 

  302. 			}
    303. 

  303. 		} else {
    304. 

  304. 			echo NO_ENTRIES_ID;
    305. 

  305. 		}
    306. 

  306. 	} else {
    307. 

  307. 		table(DELETE, '<center>'.DEL_NEWS.'<br /><a href="?section=admin&amp;site=news&amp;func=del&amp;id='.$id.'&amp;agree=1"><span class="error">'.YES.'</span></a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href="?section=admin&amp;site=news">'.NO.'</a></center>');
    308. 

  308. 	}
    309. 

  309. }
    310. 

  310. if (!isset($_SESSION['rights']['admin']['news']) AND !isset($_SESSION['rights']['superadmin'])) {
    311. 

  311. 	table(ERROR, NO_ADMIN_RIGHTS);
    312. 

  312. } else {
    313. 

  313. 	if(isset($_GET['func'])) {
    314. 

  314. 		switch($_GET['func']) {
    315. 

  315. 			case 'add':
    316. 

  316. 				admin_news_add();
    317. 

  317. 				break;
    318. 

  318. 			case 'edit':
    319. 

  319. 				admin_news_edit((int)$_GET['id']);
    320. 

  320. 				break;
    321. 

  321. 			case 'del':
    322. 

  322. 				admin_news_del((int)$_GET['id']);
    323. 

  323. 				break;
    324. 

  324. 			case 'pin':
    325. 

  325. 				admin_news();
    326. 

  326. 				break;
    327. 

  327. 			default:
    328. 

  328. 				admin_news();
    329. 

  329. 		}
    330. 

  330. 	} else {
    331. 

  331. 		admin_news();
    332. 

  332. 	}
    333. 

  333. }
    334. 

  334. ?>
    335.