PageRenderTime 1885ms CodeModel.GetById 54ms RepoModel.GetById 17ms app.codeStats 1ms

/source/admincp/admincp_nav.php

https://github.com/kuaileshike/upload
PHP | 1151 lines | 1011 code | 134 blank | 6 comment | 266 complexity | 89ee26849ace27cf917e9e560a77b873 MD5 | raw file
    

  1. <?php
    2. 

  2. 

  3. /**
    4. 

  4.  *      [Discuz!] (C)2001-2099 Comsenz Inc.
    5. 

  5.  *      This is NOT a freeware, use is subject to license terms
    6. 

  6.  *
    7. 

  7.  *      $Id: admincp_nav.php 30365 2012-05-24 07:51:03Z chenmengshu $
    8. 

  8.  */
    9. 

  9. 

  10. if(!defined('IN_DISCUZ') || !defined('IN_ADMINCP')) {
    11. 

  11. 	exit('Access Denied');
    12. 

  12. }
    13. 

  13. 

  14. cpheader();
    15. 

  15. 

  16. if(!$operation) {
    17. 

  17. 	$operation = 'headernav';
    18. 

  18. }
    19. 

  19. 

  20. $navs = array('headernav', 'topnav', 'footernav', 'mynav', 'spacenav');
    21. 

  21. $navdata = array();
    22. 

  22. foreach($navs as $nav) {
    23. 

  23. 	$navdata[] = array('nav_nav_'.$nav, 'nav&operation='.$nav, $nav == $operation);
    24. 

  24. }
    25. 

  25. 

  26. if($operation == 'headernav') {
    27. 

  27. 

  28. 	if(!$do) {
    29. 

  29. 

  30. 		if(!submitcheck('submit')) {
    31. 

  31. 

  32. 			shownav('style', 'nav_setting_customnav');
    33. 

  33. 			showsubmenu('nav_setting_customnav', $navdata);
    34. 

  34. 

  35. 			showformheader('nav&operation=headernav');
    36. 

  36. 			showtableheader();
    37. 

  37. 			showsubtitle(array('', 'display_order', 'name', 'misc_customnav_subtype', 'url', 'type', 'setindex', 'available', ''));
    38. 

  38. 			showtagheader('tbody', '', true);
    39. 

  39. 

  40. 			$navlist = $subnavlist = $pluginsubnav = array();
    41. 

  41. 			foreach(C::t('common_nav')->fetch_all_by_navtype(0) as $nav) {
    42. 

  42. 				if($nav['parentid']) {
    43. 

  43. 					$subnavlist[$nav['parentid']][] = $nav;
    44. 

  44. 				} else {
    45. 

  45. 					$navlist[$nav['id']] = $nav;
    46. 

  46. 				}
    47. 

  47. 			}
    48. 

  48. 			foreach(C::t('common_plugin')->fetch_all_data() as $plugin) {
    49. 

  49. 				if($plugin['available']) {
    50. 

  50. 					$plugin['modules'] = dunserialize($plugin['modules']);
    51. 

  51. 					if(is_array($plugin['modules'])) {
    52. 

  52. 						unset($plugin['modules']['extra']);
    53. 

  53. 						foreach($plugin['modules'] as $k => $module) {
    54. 

  54. 							if(isset($module['name'])) {
    55. 

  55. 								switch($module['type']) {
    56. 

  56. 									case 5:
    57. 

  57. 										$module['url'] = $module['url'] ? $module['url'] : 'plugin.php?id='.$plugin['identifier'].':'.$module['name'];
    58. 

  58. 										list($module['menu'], $module['title']) = explode('/', $module['menu']);
    59. 

  59. 										$pluginsubnav[] = array('key' => $k, 'id' => $plugin['pluginid'], 'displayorder' => $module['displayorder'], 'menu' => $module['menu'], 'title' => $module['title'], 'url' => $module['url']);
    60. 

  60. 										break;
    61. 

  61. 								}
    62. 

  62. 							}
    63. 

  63. 						}
    64. 

  64. 					}
    65. 

  65. 				}
    66. 

  66. 			}
    67. 

  67. 			foreach($navlist as $nav) {
    68. 

  68. 				if($nav['available'] < 0) {
    69. 

  69. 					continue;
    70. 

  70. 				}
    71. 

  71. 				$navsubtype = array();
    72. 

  72. 				$navsubtype[$nav['subtype']] = 'selected="selected"';
    73. 

  73. 				$readonly = $nav['type'] == '4' ? ' readonly="readonly"' : '';
    74. 

  74. 				showtablerow('', array('class="td25"', 'class="td25"', '', '', '',''), array(
    75. 

  75. 					($subnavlist[$nav['id']] || $nav['identifier'] == 6 && $nav['type'] == 0 && count($pluginsubnav) ? '<a href="javascript:;" class="right" onclick="toggle_group(\'subnav_'.$nav['id'].'\', this)">[+]</a>' : '').(in_array($nav['type'], array('2', '1')) ? "<input class=\"checkbox\" type=\"checkbox\" name=\"delete[]\" value=\"$nav[id]\">" : '<input type="checkbox" class="checkbox" value="" disabled="disabled" />'),
    76. 

  76. 					"<input type=\"text\" class=\"txt\" size=\"2\" name=\"displayordernew[$nav[id]]\" value=\"$nav[displayorder]\">",
    77. 

  77. 					"<div><input type=\"text\" class=\"txt\" size=\"15\" name=\"namenew[$nav[id]]\" value=\"".dhtmlspecialchars($nav['name'])."\"$readonly>".
    78. 

  78. 						($nav['identifier'] == 6 && $nav['type'] == 0 ? '' : "<a href=\"###\" onclick=\"addrowdirect=1;addrow(this, 1, $nav[id])\" class=\"addchildboard\">$lang[misc_customnav_add_submenu]</a></div>"),
    79. 

  79. 					$nav['identifier'] == 6 && $nav['nav'] == 0 ? $lang['misc_customnav_subtype_menu'] : "<select name=\"subtypenew[$nav[id]]\"><option value=\"0\" $navsubtype[0]>$lang[misc_customnav_subtype_menu]</option><option value=\"1\" $navsubtype[1]>$lang[misc_customnav_subtype_sub]</option></select>",
    80. 

  80. 					$nav['type'] == '0' || $nav['type'] == '4' ? "<span title='{$nav['url']}'>".$nav['url'].'<span>' : "<input type=\"text\" class=\"txt\" size=\"15\" name=\"urlnew[$nav[id]]\" value=\"".dhtmlspecialchars($nav['url'])."\">",
    81. 

  81. 					cplang($nav['type'] == '0' ? 'inbuilt' : ($nav['type'] == '3' ? 'nav_plugin' : ($nav['type'] == '4' ? 'channel' : 'custom'))),
    82. 

  82. 					$nav['url'] != '#' ? "<input name=\"defaultindex\" class=\"radio\" type=\"radio\" value=\"$nav[url]\"".($_G['setting']['defaultindex'] == $nav['url'] ? ' checked="checked"' : '')." />" : '',
    83. 

  83. 					"<input class=\"checkbox\" type=\"checkbox\" name=\"availablenew[$nav[id]]\" value=\"1\" ".($nav['available'] > 0 ? 'checked' : '').">",
    84. 

  84. 					"<a href=\"".ADMINSCRIPT."?action=nav&operation=headernav&do=edit&id=$nav[id]\" class=\"act\">$lang[edit]</a>"
    85. 

  85. 				));
    86. 

  86. 				if($nav['identifier'] == 6 && $nav['type'] == 0) {
    87. 

  87. 					showtagheader('tbody', 'subnav_'.$nav['id'], false);
    88. 

  88. 					$subnavnum = count($pluginsubnav);
    89. 

  89. 					foreach($pluginsubnav as $row) {
    90. 

  90. 						$subnavnum--;
    91. 

  91. 						showtablerow('', array('class="td25"', 'class="td25"', '', ''), array(
    92. 

  92. 							'',
    93. 

  93. 							'<input type="text" class="txt" size="2" name="plugindisplayordernew['.$row['id'].']['.$row['key'].']" value="'.intval($row['displayorder']).'" />',
    94. 

  94. 							'<div class="'.($subnavnum ? 'board' : 'lastboard').'"><input type="text" class="txt" size="15" name="pluginnamenew['.$row['id'].']['.$row['key'].']" value="'.dhtmlspecialchars($row['menu']).'" /></div>',
    95. 

  95. 							'<input type="hidden" size="15" name="plugintitlenew['.$row['id'].']['.$row['key'].']" value="'.dhtmlspecialchars($row['title']).'" />',
    96. 

  96. 							$row['url'],
    97. 

  97. 							cplang('nav_plugin'),
    98. 

  98. 							'',
    99. 

  99. 							'<input class="checkbox" type="checkbox" checked disabled />',
    100. 

  100. 							'<a href="'.ADMINSCRIPT.'?action=plugins&operation=edit&pluginid='.$row['id'].'&anchor=modules" class="act" target="_blank">'.$lang['edit'].'</a>',
    101. 

  101. 						));
    102. 

  102. 					}
    103. 

  103. 					showtagfooter('tbody');
    104. 

  104. 				}
    105. 

  105. 				if(!empty($subnavlist[$nav['id']])) {
    106. 

  106. 					showtagheader('tbody', 'subnav_'.$nav['id'], false);
    107. 

  107. 					$subnavnum = count($subnavlist[$nav['id']]);
    108. 

  108. 					foreach($subnavlist[$nav['id']] as $sub) {
    109. 

  109. 						$readonly = $sub['type'] == '4' ? ' readonly="readonly"' : '';
    110. 

  110. 						$subnavnum--;
    111. 

  111. 						showtablerow('', array('class="td25"', 'class="td25"', '', ''), array(
    112. 

  112. 							$sub['type'] == '0' || $sub['type'] == '4' ? '' : "<input class=\"checkbox\" type=\"checkbox\" name=\"delete[]\" value=\"$sub[id]\">",
    113. 

  113. 							"<input type=\"text\" class=\"txt\" size=\"2\" name=\"displayordernew[$sub[id]]\" value=\"$sub[displayorder]\">",
    114. 

  114. 							"<div class=\"".($subnavnum ? 'board' : 'lastboard')."\"><input type=\"text\" class=\"txt\" size=\"15\" name=\"namenew[$sub[id]]\" value=\"".dhtmlspecialchars($sub['name'])."\"$readonly></div>",
    115. 

  115. 							'',
    116. 

  116. 							$sub['type'] == '0' || $sub['type'] == '4' ? "<span title='{$sub['url']}'>".$sub['url'].'</span>' : "<input type=\"text\" class=\"txt\" size=\"15\" name=\"urlnew[$sub[id]]\" value=\"".dhtmlspecialchars($sub['url'])."\">",
    117. 

  117. 							cplang($sub['type'] == '0' ? 'inbuilt' : ($sub['type'] == '3' ? 'nav_plugin' : ($sub['type'] == '4' ? 'channel' : 'custom'))),
    118. 

  118. 							$sub['url'] != '#' ? "<input name=\"defaultindex\" class=\"radio\" type=\"radio\" value=\"$sub[url]\"".($_G['setting']['defaultindex'] == $sub['url'] ? ' checked="checked"' : '')." />" : '',
    119. 

  119. 							"<input class=\"checkbox\" type=\"checkbox\" name=\"availablenew[$sub[id]]\" value=\"1\" ".($sub['available'] ? 'checked' : '').">",
    120. 

  120. 							"<a href=\"".ADMINSCRIPT."?action=nav&operation=headernav&do=edit&id=$sub[id]\" class=\"act\">$lang[edit]</a>"
    121. 

  121. 						));
    122. 

  122. 					}
    123. 

  123. 					showtagfooter('tbody');
    124. 

  124. 				}
    125. 

  125. 			}
    126. 

  126. 			showtagfooter('tbody');
    127. 

  127. 			echo '<tr><td colspan="1"></td><td colspan="8"><div><a href="###" onclick="addrow(this, 0, 0)" class="addtr">'.$lang['misc_customnav_add_menu'].'</a></div></td></tr>';
    128. 

  128. 			showsubmit('submit', 'submit', 'del');
    129. 

  129. 			showtablefooter();
    130. 

  130. 			showformfooter();
    131. 

  131. 

  132. 			loaducenter();
    133. 

  133. 			$ucapparray = uc_app_ls();
    134. 

  134. 

  135. 			$applist = '';
    136. 

  136. 			if(count($ucapparray) > 1) {
    137. 

  137. 				$applist = $lang['misc_customnav_add_ucenter'].'<select name="applist" onchange="app(this)"><option value=""></option>';
    138. 

  138. 				foreach($ucapparray as $app) {
    139. 

  139. 					if($app['appid'] != UC_APPID) {
    140. 

  140. 						$applist .= "<option value=\"$app[url]\">$app[name]</option>";
    141. 

  141. 					}
    142. 

  142. 				}
    143. 

  143. 				$applist .= '</select>';
    144. 

  144. 			}
    145. 

  145. 			$applist = str_replace("'", "\'", $applist);
    146. 

  146. 

  147. 			echo <<<EOT
    148. 

  148. <script type="text/JavaScript">
    149. 

  149. 	var rowtypedata = [
    150. 

  150. 		[[1, '', 'td25'], [1,'<input name="newdisplayorder[]" value="" size="3" type="text" class="txt">', 'td25'], [1, '<input name="newname[]" value="" size="15" type="text" class="txt">'],[1,'<select name="newsubtype[]"><option value="0">$lang[misc_customnav_subtype_menu]</option><option value="1">$lang[misc_customnav_subtype_sub]</option></select>'],[5, '<input name="newurl[]" value="" size="15" type="text" class="txt"> $applist <input type="hidden" name="newparentid[]" value="0" />']],
    151. 

  151. 		[[1, '', 'td25'], [1,'<input name="newdisplayorder[]" value="" size="3" type="text" class="txt">', 'td25'], [1, '<div class=\"board\"><input name="newname[]" value="" size="15" type="text" class="txt"></div>'], [1,'',''], [5, '<input name="newurl[]" value="" size="15" type="text" class="txt"> $applist <input type="hidden" name="newparentid[]" value="{1}" />']]
    152. 

  152. 	];
    153. 

  153. 	function app(obj) {
    154. 

  154. 		var inputs = obj.parentNode.parentNode.getElementsByTagName('input');
    155. 

  155. 		for(var i = 0; i < inputs.length; i++) {
    156. 

  156. 			if(inputs[i].name == 'newname[]') {
    157. 

  157. 				inputs[i].value = obj.options[obj.options.selectedIndex].innerHTML;
    158. 

  158. 			} else if(inputs[i].name == 'newurl[]') {
    159. 

  159. 				inputs[i].value = obj.value;
    160. 

  160. 			}
    161. 

  161. 		}
    162. 

  162. 	}
    163. 

  163. </script>
    164. 

  164. EOT;
    165. 

  165. 

  166. 		} else {
    167. 

  167. 

  168. 			if($ids = dimplode($_GET['delete'])) {
    169. 

  169. 				C::t('common_nav')->delete_by_navtype_id(0, $_GET['delete']);
    170. 

  170. 				C::t('common_nav')->delete_by_navtype_parentid(0, $_GET['delete']);
    171. 

  171. 			}
    172. 

  172. 

  173. 			if(is_array($_GET['namenew'])) {
    174. 

  174. 				foreach($_GET['namenew'] as $id => $name) {
    175. 

  175. 

  176. 

  177. 					$name = trim(dhtmlspecialchars($name));
    178. 

  178. 					$urlnew = str_replace(array('&amp;'), array('&'), dhtmlspecialchars($_GET['urlnew'][$id]));
    179. 

  179. 					$urladd = !empty($_GET['urlnew'][$id]) ? ", url='$urlnew'" : '';
    180. 

  180. 					$availablenew[$id] = $name && (!isset($_GET['urlnew'][$id]) || $_GET['urlnew'][$id]) && $_GET['availablenew'][$id];
    181. 

  181. 					$displayordernew[$id] = intval($_GET['displayordernew'][$id]);
    182. 

  182. 					$data = array(
    183. 

  183. 							'displayorder' => $displayordernew[$id],
    184. 

  184. 							'available' => $availablenew[$id],
    185. 

  185. 						);
    186. 

  186. 					if(!empty($_GET['urlnew'][$id])) {
    187. 

  187. 						$data['url'] = $urlnew;
    188. 

  188. 					}
    189. 

  189. 					if(!empty($name)) {
    190. 

  190. 						$data['name'] = $name;
    191. 

  191. 					}
    192. 

  192. 					if(isset($_GET['subtypenew'][$id])) {
    193. 

  193. 						$data['subtype'] = intval($_GET['subtypenew'][$id]);
    194. 

  194. 					}
    195. 

  195. 					C::t('common_nav')->update($id, $data);
    196. 

  196. 				}
    197. 

  197. 			}
    198. 

  198. 

  199. 			if(is_array($_GET['pluginnamenew']))  {
    200. 

  200. 				foreach($_GET['pluginnamenew'] as $id => $rows) {
    201. 

  201. 					$plugin = C::t('common_plugin')->fetch($id);
    202. 

  202. 					$module = dunserialize($plugin['modules']);
    203. 

  203. 					foreach($rows as $key => $menunew) {
    204. 

  204. 						$module[$key]['menu'] = $menunew.($_GET['plugintitlenew'][$id][$key] ? '/'.$_GET['plugintitlenew'][$id][$key] : '');
    205. 

  205. 						$module[$key]['displayorder'] = $_GET['plugindisplayordernew'][$id][$key];
    206. 

  206. 					}
    207. 

  207. 					C::t('common_plugin')->update($id, array('modules' => serialize($module)));
    208. 

  208. 				}
    209. 

  209. 			}
    210. 

  210. 

  211. 			if(is_array($_GET['newname'])) {
    212. 

  212. 				foreach($_GET['newname'] as $k => $v) {
    213. 

  213. 					$v = dhtmlspecialchars(trim($v));
    214. 

  214. 					if(!empty($v)) {
    215. 

  215. 						$newavailable = $v && $_GET['newurl'][$k];
    216. 

  216. 						$newparentid[$k] = intval($_GET['newparentid'][$k]);
    217. 

  217. 						$newdisplayorder[$k] = intval($_GET['newdisplayorder'][$k]);
    218. 

  218. 						$subtype = isset($_GET['newsubtype'][$k]) ? intval($_GET['newsubtype'][$k]) : 0;
    219. 

  219. 						$newurl[$k] = str_replace('&amp;', '&', dhtmlspecialchars($_GET['newurl'][$k]));
    220. 

  220. 						$data = array(
    221. 

  221. 							'parentid' => $newparentid[$k],
    222. 

  222. 							'name' => $v,
    223. 

  223. 							'displayorder' => $newdisplayorder[$k],
    224. 

  224. 							'subtype' => $subtype,
    225. 

  225. 							'url' => $newurl[$k],
    226. 

  226. 							'type' => 1,
    227. 

  227. 							'available' => $newavailable,
    228. 

  228. 							'navtype' => 0
    229. 

  229. 						);
    230. 

  230. 						C::t('common_nav')->insert($data);
    231. 

  231. 					}
    232. 

  232. 				}
    233. 

  233. 			}
    234. 

  234. 

  235. 			if($_GET['defaultindex'] && $_GET['defaultindex'] != '#') {
    236. 

  236. 				C::t('common_setting')->update('defaultindex', $_GET['defaultindex']);
    237. 

  237. 			}
    238. 

  238. 

  239. 			updatecache('setting');
    240. 

  240. 			cpmsg('nav_add_succeed', 'action=nav&operation=headernav', 'succeed');
    241. 

  241. 

  242. 		}
    243. 

  243. 

  244. 	} elseif($do == 'edit' && ($id = $_GET['id'])) {
    245. 

  245. 

  246. 		$nav = C::t('common_nav')->fetch_by_id_navtype($id, 0);
    247. 

  247. 		if(!$nav) {
    248. 

  248. 			cpmsg('nav_not_found', '', 'error');
    249. 

  249. 		}
    250. 

  250. 

  251. 		if(!submitcheck('editsubmit')) {
    252. 

  252. 

  253. 			$string = sprintf('%02d', $nav['highlight']);
    254. 

  254. 

  255. 			shownav('global', 'misc_customnav');
    256. 

  256. 			showsubmenu('nav_setting_customnav', $navdata);
    257. 

  257. 			$parentselect = array(array('0', cplang('misc_customnav_parent_top')));
    258. 

  258. 			$parentname = '';
    259. 

  259. 			foreach(C::t('common_nav')->fetch_all_by_navtype_parentid(0, 0) as $pnavs) {
    260. 

  260. 				if($pnavs['id'] != $id && !($pnavs['identifier'] == 6 && $pnavs['type'] == 0)) {
    261. 

  261. 					$parentselect[] = array($pnavs['id'], '&nbsp;&nbsp;'.$pnavs['name']);
    262. 

  262. 					if($nav['parentid'] == $pnavs['id']) {
    263. 

  263. 						$parentname = ' - '.$pnavs['name'];
    264. 

  264. 					}
    265. 

  265. 				}
    266. 

  266. 			}
    267. 

  267. 

  268. 			if($nav['logo']) {
    269. 

  269. 				$navlogo = str_replace('{STATICURL}', STATICURL, $nav['logo']);
    270. 

  270. 				if(!preg_match("/^".preg_quote(STATICURL, '/')."/i", $navlogo) && !(($valueparse = parse_url($navlogo)) && isset($valueparse['host']))) {
    271. 

  271. 					$navlogo = $_G['setting']['attachurl'].'common/'.$nav['logo'].'?'.random(6);
    272. 

  272. 				}
    273. 

  273. 				$logohtml = '<br /><label><input type="checkbox" class="checkbox" name="deletelogo" value="yes" /> '.$lang['delete'].'</label><br /><img src="'.$navlogo.'" />';
    274. 

  274. 			}
    275. 

  275. 

  276. 			showformheader("nav&operation=headernav&do=edit&id=$id", 'enctype');
    277. 

  277. 			showtableheader();
    278. 

  278. 			showtitle(cplang('nav_nav_headernav').$parentname.' - '.$nav['name']);
    279. 

  279. 			showsetting('misc_customnav_name', 'namenew', $nav['name'], 'text', $nav['type'] == '4');
    280. 

  280. 			showsetting('misc_customnav_parent', array('parentidnew', $parentselect), $nav['parentid'], 'select');
    281. 

  281. 			showsetting('misc_customnav_title', 'titlenew', $nav['title'], 'text');
    282. 

  282. 			showsetting('misc_customnav_url', 'urlnew', $nav['url'], 'text', ($nav['type'] == '0' || $nav['type'] == '4'));
    283. 

  283. 			showsetting('misc_customnav_style', array('stylenew', array(cplang('misc_customnav_style_underline'), cplang('misc_customnav_style_italic'), cplang('misc_customnav_style_bold'))), $string[0], 'binmcheckbox');
    284. 

  284. 			showsetting('misc_customnav_style_color', array('colornew', array(
    285. 

  285. 				array(0, '<span style="color: '.LINK.';">Default</span>'),
    286. 

  286. 				array(1, '<span style="color: Red;">Red</span>'),
    287. 

  287. 				array(2, '<span style="color: Orange;">Orange</span>'),
    288. 

  288. 				array(3, '<span style="color: Yellow;">Yellow</span>'),
    289. 

  289. 				array(4, '<span style="color: Green;">Green</span>'),
    290. 

  290. 				array(5, '<span style="color: Cyan;">Cyan</span>'),
    291. 

  291. 				array(6, '<span style="color: Blue;">Blue</span>'),
    292. 

  292. 				array(7, '<span style="color: Purple;">Purple</span>'),
    293. 

  293. 				array(8, '<span style="color: Gray;">Gray</span>'),
    294. 

  294. 			)), $string[1], 'mradio2');
    295. 

  295. 			showsetting('misc_customnav_url_open', array('targetnew', array(
    296. 

  296. 				array(0, cplang('misc_customnav_url_open_default')),
    297. 

  297. 				array(1, cplang('misc_customnav_url_open_blank'))
    298. 

  298. 			), TRUE), $nav['target'], 'mradio');
    299. 

  299. 			if(!$nav['parentid']) {
    300. 

  300. 				showsetting('misc_customnav_logo', 'logonew', $nav['logo'], 'filetext', '', 0, cplang('misc_customnav_logo_comment').$logohtml);
    301. 

  301. 				showsetting('misc_customnav_level', array('levelnew', array(
    302. 

  302. 					array(0, cplang('nolimit')),
    303. 

  303. 					array(1, cplang('member')),
    304. 

  304. 					array(2, cplang('usergroups_system_3')),
    305. 

  305. 					array(3, cplang('usergroups_system_1')),
    306. 

  306. 				)), $nav['level'], 'select');
    307. 

  307. 				showsetting('misc_customnav_subtype', array('subtypenew', array(
    308. 

  308. 					array(0, cplang('misc_customnav_subtype_menu'), array('subcols' => 'none')),
    309. 

  309. 					array(1, cplang('misc_customnav_subtype_sub'), array('subcols' => '')),
    310. 

  310. 				)), $nav['subtype'], 'mradio');
    311. 

  311. 				showtagheader('tbody', 'subcols', $nav['subtype'], 'sub');
    312. 

  312. 				showsetting('misc_customnav_subcols', 'subcolsnew', $nav['subcols'], 'text');
    313. 

  313. 				showtagfooter('tbody');
    314. 

  314. 			}
    315. 

  315. 			showsubmit('editsubmit');
    316. 

  316. 			showtablefooter();
    317. 

  317. 			showformfooter();
    318. 

  318. 

  319. 		} else {
    320. 

  320. 

  321. 			$namenew = trim(dhtmlspecialchars($_GET['namenew']));
    322. 

  322. 			$titlenew = trim(dhtmlspecialchars($_GET['titlenew']));
    323. 

  323. 			$urlnew = str_replace(array('&amp;'), array('&'), dhtmlspecialchars($_GET['urlnew']));
    324. 

  324. 			$colornew = $_GET['colornew'];
    325. 

  325. 			$parentidnew = $_GET['parentidnew'];
    326. 

  326. 			$subtypenew = $_GET['subtypenew'];
    327. 

  327. 			$stylebin = '';
    328. 

  328. 			for($i = 3; $i >= 1; $i--) {
    329. 

  329. 				$stylebin .= empty($_GET['stylenew'][$i]) ? '0' : '1';
    330. 

  330. 			}
    331. 

  331. 			$stylenew = bindec($stylebin);
    332. 

  332. 			$targetnew = intval($_GET['targetnew']) ? 1 : 0;
    333. 

  333. 			$levelnew = intval($_GET['levelnew']) && $_GET['levelnew'] > 0 && $_GET['levelnew'] < 4 ? intval($_GET['levelnew']) : 0 ;
    334. 

  334. 

  335. 			$urladd = $nav['type'] != '0' && $urlnew ? ", url='".$urlnew."'" : '';
    336. 

  336. 			$subcols = ", subcols='".intval($_GET['subcolsnew'])."'";
    337. 

  337. 

  338. 			$logonew = addslashes($nav['logo']);
    339. 

  339. 			if($_FILES['logonew']) {
    340. 

  340. 				$upload = new discuz_upload();
    341. 

  341. 				if($upload->init($_FILES['logonew'], 'common') && $upload->save()) {
    342. 

  342. 					$logonew = $upload->attach['attachment'];
    343. 

  343. 				}
    344. 

  344. 			} else {
    345. 

  345. 				$logonew = $_GET['logonew'];
    346. 

  346. 			}
    347. 

  347. 			if($_GET['deletelogo'] && $nav['logo']) {
    348. 

  348. 				$valueparse = parse_url($nav['logo']);
    349. 

  349. 				if(!isset($valueparse['host']) && !strexists($nav['logo'], '{STATICURL}')) {
    350. 

  350. 					@unlink($_G['setting']['attachurl'].'common/'.$nav['logo']);
    351. 

  351. 				}
    352. 

  352. 				$logonew = '';
    353. 

  353. 			}
    354. 

  354. 			$logoadd = ", logo='$logonew'";
    355. 

  355. 

  356. 			$data = array(
    357. 

  357. 					'name' => $namenew,
    358. 

  358. 					'parentid' => $parentidnew,
    359. 

  359. 					'title' => $titlenew,
    360. 

  360. 					'highlight' => "$stylenew$colornew",
    361. 

  361. 					'target' => $targetnew,
    362. 

  362. 					'level' => $levelnew,
    363. 

  363. 					'subtype' => $subtypenew,
    364. 

  364. 					'subcols' => intval($_GET['subcolsnew']),
    365. 

  365. 					'logo' => $logonew
    366. 

  366. 				);
    367. 

  367. 			if($nav['type'] != '0' && $urlnew) {
    368. 

  368. 				$data['url'] = $urlnew;
    369. 

  369. 			}
    370. 

  370. 			C::t('common_nav')->update($id, $data);
    371. 

  371. 

  372. 			updatecache('setting');
    373. 

  373. 			cpmsg('nav_add_succeed', 'action=nav&operation=headernav', 'succeed');
    374. 

  374. 

  375. 		}
    376. 

  376. 

  377. 	}
    378. 

  378. 

  379. } elseif($operation == 'footernav') {
    380. 

  380. 

  381. 	if(!$do) {
    382. 

  382. 

  383. 		if(!submitcheck('submit')) {
    384. 

  384. 

  385. 			shownav('style', 'nav_setting_customnav');
    386. 

  386. 			showsubmenu('nav_setting_customnav', $navdata);
    387. 

  387. 

  388. 			showformheader('nav&operation=footernav');
    389. 

  389. 			showtableheader();
    390. 

  390. 			showsubtitle(array('', 'display_order', 'name', 'url', 'type', 'available', ''));
    391. 

  391. 

  392. 			$navlist = array();
    393. 

  393. 			foreach(C::t('common_nav')->fetch_all_by_navtype(1) as $nav) {
    394. 

  394. 				$navlist[$nav['id']] = $nav;
    395. 

  395. 			}
    396. 

  396. 

  397. 			foreach($navlist as $nav) {
    398. 

  398. 				showtablerow('', array('class="td25"', 'class="td25"', '', ''), array(
    399. 

  399. 					in_array($nav['type'], array('2', '1')) ? "<input class=\"checkbox\" type=\"checkbox\" name=\"delete[]\" value=\"$nav[id]\">" : '<input type="checkbox" class="checkbox" value="" disabled="disabled" />',
    400. 

  400. 					"<input type=\"text\" class=\"txt\" size=\"2\" name=\"displayordernew[$nav[id]]\" value=\"$nav[displayorder]\">",
    401. 

  401. 					"<div><input type=\"text\" class=\"txt\" size=\"15\" name=\"namenew[$nav[id]]\" value=\"".dhtmlspecialchars($nav['name'])."\">",
    402. 

  402. 					$nav['type'] == '0' ? $nav['url'] : "<input type=\"text\" class=\"txt\" size=\"15\" name=\"urlnew[$nav[id]]\" value=\"".dhtmlspecialchars($nav['url'])."\">",
    403. 

  403. 					cplang($nav['type'] == '0' ? 'inbuilt' : ($nav['type'] == '3' ? 'nav_plugin' : ($nav['type'] == '4' ? 'channel' : 'custom'))),
    404. 

  404. 					"<input class=\"checkbox\" type=\"checkbox\" name=\"availablenew[$nav[id]]\" value=\"1\" ".($nav['available'] ? 'checked' : '').">",
    405. 

  405. 					"<a href=\"".ADMINSCRIPT."?action=nav&operation=footernav&do=edit&id=$nav[id]\" class=\"act\">$lang[edit]</a>"
    406. 

  406. 				));
    407. 

  407. 			}
    408. 

  408. 			echo '<tr><td colspan="1"></td><td colspan="7"><div><a href="###" onclick="addrow(this, 0, 0)" class="addtr">'.$lang['nav_footernav_add'].'</a></div></td></tr>';
    409. 

  409. 			showsubmit('submit', 'submit', 'del');
    410. 

  410. 			showtablefooter();
    411. 

  411. 			showformfooter();
    412. 

  412. 

  413. 			echo <<<EOT
    414. 

  414. <script type="text/JavaScript">
    415. 

  415. 	var rowtypedata = [
    416. 

  416. 		[[1, '', 'td25'], [1,'<input name="newdisplayorder[]" value="" size="3" type="text" class="txt">', 'td25'], [1, '<input name="newname[]" value="" size="15" type="text" class="txt">'], [4, '<input name="newurl[]" value="" size="15" type="text" class="txt">']],
    417. 

  417. 	];
    418. 

  418. </script>
    419. 

  419. EOT;
    420. 

  420. 

  421. 		} else {
    422. 

  422. 

  423. 			if($ids = dimplode($_GET['delete'])) {
    424. 

  424. 				C::t('common_nav')->delete_by_navtype_id(1, $_GET['delete']);
    425. 

  425. 			}
    426. 

  426. 

  427. 			if(is_array($_GET['namenew'])) {
    428. 

  428. 				foreach($_GET['namenew'] as $id => $name) {
    429. 

  429. 					$name = trim(dhtmlspecialchars($name));
    430. 

  430. 					$urlnew = str_replace(array('&amp;'), array('&'), dhtmlspecialchars($_GET['urlnew'][$id]));
    431. 

  431. 					$availablenew[$id] = $name && (!isset($_GET['urlnew'][$id]) || $_GET['urlnew'][$id]) && $_GET['availablenew'][$id];
    432. 

  432. 					$displayordernew[$id] = intval($_GET['displayordernew'][$id]);
    433. 

  433. 					$data = array(
    434. 

  434. 							'displayorder' => $displayordernew[$id],
    435. 

  435. 							'available' => $availablenew[$id],
    436. 

  436. 						);
    437. 

  437. 					if(!empty($_GET['urlnew'][$id])) {
    438. 

  438. 						$data['url'] = $urlnew;
    439. 

  439. 					}
    440. 

  440. 					if(!empty($name)) {
    441. 

  441. 						$data['name'] = $name;
    442. 

  442. 					}
    443. 

  443. 					C::t('common_nav')->update($id, $data);
    444. 

  444. 				}
    445. 

  445. 			}
    446. 

  446. 

  447. 			if(is_array($_GET['newname'])) {
    448. 

  448. 				foreach($_GET['newname'] as $k => $v) {
    449. 

  449. 					$v = dhtmlspecialchars(trim($v));
    450. 

  450. 					if(!empty($v)) {
    451. 

  451. 						$newavailable = $v && $_GET['newurl'][$k];
    452. 

  452. 						$newdisplayorder[$k] = intval($_GET['newdisplayorder'][$k]);
    453. 

  453. 						$newurl[$k] = str_replace('&amp;', '&', dhtmlspecialchars($_GET['newurl'][$k]));
    454. 

  454. 						$data = array(
    455. 

  455. 							'name' => $v,
    456. 

  456. 							'displayorder' => $newdisplayorder[$k],
    457. 

  457. 							'url' => $newurl[$k],
    458. 

  458. 							'type' => 1,
    459. 

  459. 							'available' => $newavailable,
    460. 

  460. 							'navtype' => 1
    461. 

  461. 						);
    462. 

  462. 						C::t('common_nav')->insert($data);
    463. 

  463. 					}
    464. 

  464. 				}
    465. 

  465. 			}
    466. 

  466. 

  467. 			updatecache('setting');
    468. 

  468. 			cpmsg('nav_add_succeed', 'action=nav&operation=footernav', 'succeed');
    469. 

  469. 

  470. 		}
    471. 

  471. 

  472. 	} elseif($do == 'edit' && ($id = $_GET['id'])) {
    473. 

  473. 

  474. 		$nav = C::t('common_nav')->fetch_by_id_navtype($id, 1);
    475. 

  475. 		if(!$nav) {
    476. 

  476. 			cpmsg('nav_not_found', '', 'error');
    477. 

  477. 		}
    478. 

  478. 

  479. 		if(!submitcheck('editsubmit')) {
    480. 

  480. 

  481. 			$string = sprintf('%02d', $nav['highlight']);
    482. 

  482. 

  483. 			shownav('global', 'misc_customnav');
    484. 

  484. 			showsubmenu('nav_setting_customnav', $navdata);
    485. 

  485. 

  486. 			showformheader("nav&operation=footernav&do=edit&id=$id");
    487. 

  487. 			showtableheader();
    488. 

  488. 			showtitle(cplang('nav_nav_footernav').' - '.$nav['name']);
    489. 

  489. 			showsetting('misc_customnav_name', 'namenew', $nav['name'], 'text');
    490. 

  490. 			showsetting('misc_customnav_title', 'titlenew', $nav['title'], 'text');
    491. 

  491. 			showsetting('misc_customnav_url', 'urlnew', $nav['url'], 'text', $nav['type'] == '0');
    492. 

  492. 			showsetting('misc_customnav_style', array('stylenew', array(cplang('misc_customnav_style_underline'), cplang('misc_customnav_style_italic'), cplang('misc_customnav_style_bold'))), $string[0], 'binmcheckbox');
    493. 

  493. 			showsetting('misc_customnav_style_color', array('colornew', array(
    494. 

  494. 				array(0, '<span style="color: '.LINK.';">Default</span>'),
    495. 

  495. 				array(1, '<span style="color: Red;">Red</span>'),
    496. 

  496. 				array(2, '<span style="color: Orange;">Orange</span>'),
    497. 

  497. 				array(3, '<span style="color: Yellow;">Yellow</span>'),
    498. 

  498. 				array(4, '<span style="color: Green;">Green</span>'),
    499. 

  499. 				array(5, '<span style="color: Cyan;">Cyan</span>'),
    500. 

  500. 				array(6, '<span style="color: Blue;">Blue</span>'),
    501. 

  501. 				array(7, '<span style="color: Purple;">Purple</span>'),
    502. 

  502. 				array(8, '<span style="color: Gray;">Gray</span>'),
    503. 

  503. 			)), $string[1], 'mradio2');
    504. 

  504. 			showsetting('misc_customnav_url_open', array('targetnew', array(
    505. 

  505. 				array(0, cplang('misc_customnav_url_open_default')),
    506. 

  506. 				array(1, cplang('misc_customnav_url_open_blank'))
    507. 

  507. 			), TRUE), $nav['target'], 'mradio');
    508. 

  508. 			if($nav['type']) {
    509. 

  509. 				showsetting('misc_customnav_level', array('levelnew', array(
    510. 

  510. 					array(0, cplang('nolimit')),
    511. 

  511. 					array(1, cplang('member')),
    512. 

  512. 					array(2, cplang('usergroups_system_3')),
    513. 

  513. 					array(3, cplang('usergroups_system_1')),
    514. 

  514. 				)), $nav['level'], 'select');
    515. 

  515. 			}
    516. 

  516. 			showtagfooter('tbody');
    517. 

  517. 			showsubmit('editsubmit');
    518. 

  518. 			showtablefooter();
    519. 

  519. 			showformfooter();
    520. 

  520. 

  521. 		} else {
    522. 

  522. 

  523. 			$namenew = trim(dhtmlspecialchars($_GET['namenew']));
    524. 

  524. 			$titlenew = trim(dhtmlspecialchars($_GET['titlenew']));
    525. 

  525. 			$urlnew = str_replace(array('&amp;'), array('&'), dhtmlspecialchars($_GET['urlnew']));
    526. 

  526. 			$colornew = $_GET['colornew'];
    527. 

  527. 			$stylebin = '';
    528. 

  528. 			for($i = 3; $i >= 1; $i--) {
    529. 

  529. 				$stylebin .= empty($_GET['stylenew'][$i]) ? '0' : '1';
    530. 

  530. 			}
    531. 

  531. 			$stylenew = bindec($stylebin);
    532. 

  532. 			$targetnew = intval($_GET['targetnew']) ? 1 : 0;
    533. 

  533. 			$levelnew = $nav['type'] ? (intval($_GET['levelnew']) && $_GET['levelnew'] > 0 && $_GET['levelnew'] < 4 ? intval($_GET['levelnew']) : 0) : 0;
    534. 

  534. 			$urladd = $nav['type'] != '0' && $urlnew ? ", url='".$urlnew."'" : '';
    535. 

  535. 

  536. 			$data = array(
    537. 

  537. 					'name' => $namenew,
    538. 

  538. 					'title' => $titlenew,
    539. 

  539. 					'highlight' => "$stylenew$colornew",
    540. 

  540. 					'target' => $targetnew,
    541. 

  541. 					'level' => $levelnew
    542. 

  542. 				);
    543. 

  543. 			if($nav['type'] != '0' && $urlnew) {
    544. 

  544. 				$data['url'] = $urlnew;
    545. 

  545. 			}
    546. 

  546. 			C::t('common_nav')->update($id, $data);
    547. 

  547. 

  548. 			updatecache('setting');
    549. 

  549. 			cpmsg('nav_add_succeed', 'action=nav&operation=footernav', 'succeed');
    550. 

  550. 

  551. 		}
    552. 

  552. 

  553. 	}
    554. 

  554. 

  555. } elseif($operation == 'spacenav') {
    556. 

  556. 

  557. 	if(!$do) {
    558. 

  558. 

  559. 		if(!submitcheck('submit')) {
    560. 

  560. 

  561. 			shownav('style', 'nav_setting_customnav');
    562. 

  562. 

  563. 			showsubmenu('nav_setting_customnav', $navdata);
    564. 

  564. 			showtips('nav_spacenav_tips');
    565. 

  565. 			showformheader('nav&operation=spacenav');
    566. 

  566. 			showtableheader();
    567. 

  567. 			showsubtitle(array('', 'display_order', 'name', 'url', 'type', 'available', ''));
    568. 

  568. 

  569. 			$navlist = array();
    570. 

  570. 			foreach(C::t('common_nav')->fetch_all_by_navtype(2) as $nav) {
    571. 

  571. 				if($nav['available'] < 0) {
    572. 

  572. 					continue;
    573. 

  573. 				}
    574. 

  574. 				$navlist[$nav['id']] = $nav;
    575. 

  575. 			}
    576. 

  576. 

  577. 			foreach($navlist as $nav) {
    578. 

  578. 				$navicon = str_replace('{STATICURL}', STATICURL, $nav['icon']);
    579. 

  579. 				if(!preg_match("/^".preg_quote(STATICURL, '/')."/i", $navicon) && !(($valueparse = parse_url($navicon)) && isset($valueparse['host']))) {
    580. 

  580. 					$navicon = $_G['setting']['attachurl'].'common/'.$nav['icon'].'?'.random(6);
    581. 

  581. 				}
    582. 

  582. 				showtablerow('', array('class="td25"', 'class="td25"', '', ''), array(
    583. 

  583. 					in_array($nav['type'], array('2', '1')) ? "<input class=\"checkbox\" type=\"checkbox\" name=\"delete[]\" value=\"$nav[id]\">" : '<input type="checkbox" class="checkbox" value="" disabled="disabled" />',
    584. 

  584. 					"<input type=\"text\" class=\"txt\" size=\"2\" name=\"displayordernew[$nav[id]]\" value=\"$nav[displayorder]\">",
    585. 

  585. 					!in_array($nav['name'], array('{userpanelarea1}', '{userpanelarea2}', '{hr}')) ? ("<input type=\"text\" class=\"txt\" size=\"15\" name=\"namenew[$nav[id]]\" value=\"".dhtmlspecialchars($nav['name'])."\">".
    586. 

  586. 					($nav['icon'] ? '<img src="'.$navicon.'" width="16" height="16" class="vmiddle" />' : '')) : "<input type=\"hidden\" name=\"namenew[$nav[id]]\" value=\"$nav[name]\">".cplang('nav_spacenav_'.str_replace(array('{', '}'), '', $nav['name']), array('navname' => $_G['setting']['navs'][5]['navname'])),
    587. 

  587. 					$nav['type'] == '0' || $nav['name'] == '{hr}' ? $nav['url'] : "<input type=\"text\" class=\"txt\" size=\"15\" name=\"urlnew[$nav[id]]\" value=\"".dhtmlspecialchars($nav['url'])."\">",
    588. 

  588. 					cplang($nav['type'] == '0' ? 'inbuilt' : ($nav['type'] == '3' ? 'nav_plugin' : ($nav['type'] == '4' ? 'channel' : 'custom'))),
    589. 

  589. 					"<input class=\"checkbox\" type=\"checkbox\" name=\"availablenew[$nav[id]]\" value=\"1\" ".($nav['available'] ? 'checked' : '').">",
    590. 

  590. 					!in_array($nav['name'], array('{userpanelarea1}', '{userpanelarea2}', '{hr}')) ? "<a href=\"".ADMINSCRIPT."?action=nav&operation=spacenav&do=edit&id=$nav[id]\" class=\"act\">$lang[edit]</a>" : ''
    591. 

  591. 				));
    592. 

  592. 			}
    593. 

  593. 			echo '<tr><td colspan="1"></td><td colspan="7"><div><a href="###" onclick="addrow(this, 0, 0)" class="addtr">'.$lang['nav_spacenav_add'].'</a> &nbsp; <a href="###" onclick="addrow(this, 1, 0)" class="addtr">'.$lang['nav_spacenav_add_hr'].'</a></div></td></tr>';
    594. 

  594. 			showsubmit('submit', 'submit', 'del');
    595. 

  595. 			showtablefooter();
    596. 

  596. 			showformfooter();
    597. 

  597. 

  598. 			echo <<<EOT
    599. 

  599. <script type="text/JavaScript">
    600. 

  600. 	var rowtypedata = [
    601. 

  601. 		[[1, '', 'td25'], [1,'<input name="newdisplayorder[]" value="" size="3" type="text" class="txt">', 'td25'], [1, '<input name="newname[]" value="" size="15" type="text" class="txt">'], [4, '<input name="newurl[]" value="" size="15" type="text" class="txt">']],
    602. 

  602. 		[[1, '', 'td25'], [1,'<input name="newdisplayorder[]" value="" size="3" type="text" class="txt">', 'td25'], [1, '<input name="newname[]" value="{hr}" type="hidden">$lang[nav_spacenav_hr]'], [4, '<input name="newurl[]" value="" type="hidden">']],
    603. 

  603. 	];
    604. 

  604. </script>
    605. 

  605. EOT;
    606. 

  606. 

  607. 		} else {
    608. 

  608. 

  609. 			if($ids = dimplode($_GET['delete'])) {
    610. 

  610. 				C::t('common_nav')->delete_by_navtype_id(2, $_GET['delete']);
    611. 

  611. 			}
    612. 

  612. 

  613. 			if(is_array($_GET['namenew'])) {
    614. 

  614. 				foreach($_GET['namenew'] as $id => $name) {
    615. 

  615. 					$name = trim(dhtmlspecialchars($name));
    616. 

  616. 					$urlnew = str_replace(array('&amp;'), array('&'), dhtmlspecialchars($_GET['urlnew'][$id]));
    617. 

  617. 					$urladd = !empty($_GET['urlnew'][$id]) ? ", url='$urlnew'" : '';
    618. 

  618. 					$availablenew[$id] = $name && (!isset($_GET['urlnew'][$id]) || $_GET['urlnew'][$id]) && $_GET['availablenew'][$id];
    619. 

  619. 					$displayordernew[$id] = intval($_GET['displayordernew'][$id]);
    620. 

  620. 					$nameadd = !empty($name) ? ", name='$name'" : '';
    621. 

  621. 					$data = array(
    622. 

  622. 							'displayorder' => $displayordernew[$id],
    623. 

  623. 							'available' => $availablenew[$id]
    624. 

  624. 						);
    625. 

  625. 					if(!empty($_GET['urlnew'][$id])) {
    626. 

  626. 						$data['url'] = $urlnew;
    627. 

  627. 					}
    628. 

  628. 					if(!empty($name)) {
    629. 

  629. 						$data['name'] = $name;
    630. 

  630. 					}
    631. 

  631. 					C::t('common_nav')->update($id, $data);
    632. 

  632. 				}
    633. 

  633. 			}
    634. 

  634. 

  635. 			if(is_array($_GET['newname'])) {
    636. 

  636. 				foreach($_GET['newname'] as $k => $v) {
    637. 

  637. 					$v = dhtmlspecialchars(trim($v));
    638. 

  638. 					if(!empty($v)) {
    639. 

  639. 						$newavailable = $v && $_GET['newurl'][$k];
    640. 

  640. 						$newdisplayorder[$k] = intval($_GET['newdisplayorder'][$k]);
    641. 

  641. 						$newurl[$k] = str_replace('&amp;', '&', dhtmlspecialchars($_GET['newurl'][$k]));
    642. 

  642. 						$data = array(
    643. 

  643. 							'name' => $v,
    644. 

  644. 							'displayorder' => $newdisplayorder[$k],
    645. 

  645. 							'url' => $newurl[$k],
    646. 

  646. 							'type' => 1,
    647. 

  647. 							'available' => $newavailable,
    648. 

  648. 							'navtype' => 2
    649. 

  649. 						);
    650. 

  650. 						C::t('common_nav')->insert($data);
    651. 

  651. 					}
    652. 

  652. 				}
    653. 

  653. 			}
    654. 

  654. 

  655. 			updatecache('setting');
    656. 

  656. 			cpmsg('nav_add_succeed', 'action=nav&operation=spacenav', 'succeed');
    657. 

  657. 

  658. 		}
    659. 

  659. 

  660. 	} elseif($do == 'edit' && ($id = $_GET['id'])) {
    661. 

  661. 

  662. 		$nav = C::t('common_nav')->fetch_by_id_navtype($id, 2);
    663. 

  663. 		if(!$nav) {
    664. 

  664. 			cpmsg('nav_not_found', '', 'error');
    665. 

  665. 		}
    666. 

  666. 

  667. 		if(!submitcheck('editsubmit')) {
    668. 

  668. 

  669. 			$nav['allowsubnew'] = 1;
    670. 

  670. 			if(substr($nav['subname'], 0, 1) == "\t") {
    671. 

  671. 				$nav['allowsubnew'] = 0;
    672. 

  672. 				$nav['subname'] = substr($nav['subname'], 1);
    673. 

  673. 			}
    674. 

  674. 			if($nav['icon']) {
    675. 

  675. 				$navicon = str_replace('{STATICURL}', STATICURL, $nav['icon']);
    676. 

  676. 				if(!preg_match("/^".preg_quote(STATICURL, '/')."/i", $navicon) && !(($valueparse = parse_url($navicon)) && isset($valueparse['host']))) {
    677. 

  677. 					$navicon = $_G['setting']['attachurl'].'common/'.$nav['icon'].'?'.random(6);
    678. 

  678. 				}
    679. 

  679. 				$naviconhtml = '<br /><label><input type="checkbox" class="checkbox" name="deleteicon" value="yes" /> '.$lang['delete'].'</label><br /><img src="'.$navicon.'" width="16" height="16" />';
    680. 

  680. 			}
    681. 

  681. 			shownav('global', 'misc_customnav');
    682. 

  682. 			showsubmenu('nav_setting_customnav', $navdata);
    683. 

  683. 

  684. 			showformheader("nav&operation=spacenav&do=edit&id=$id", 'enctype');
    685. 

  685. 			showtableheader();
    686. 

  686. 			showtitle(cplang('nav_nav_spacenav').' - '.$nav['name']);
    687. 

  687. 			showsetting('misc_customnav_name', 'namenew', $nav['name'], 'text');
    688. 

  688. 			showsetting('misc_customnav_title', 'titlenew', $nav['title'], 'text');
    689. 

  689. 			showsetting('misc_customnav_url', 'urlnew', $nav['url'], 'text', $nav['type'] == '0');
    690. 

  690. 			showsetting('misc_customnav_icon', 'iconnew', $nav['icon'], 'filetext', '', 0, cplang('misc_customnav_icon_comment').$naviconhtml);
    691. 

  691. 			showsetting('misc_customnav_allowsub', 'allowsubnew', $nav['allowsubnew'], 'radio', '', 1);
    692. 

  692. 			showsetting('misc_customnav_subname', 'subnamenew', $nav['subname'], 'text');
    693. 

  693. 			showsetting('misc_customnav_suburl', 'suburlnew', $nav['suburl'], 'text', $nav['type'] == '0');
    694. 

  694. 			showtagfooter('tbody');
    695. 

  695. 			showsetting('misc_customnav_url_open', array('targetnew', array(
    696. 

  696. 				array(0, cplang('misc_customnav_url_open_default')),
    697. 

  697. 				array(1, cplang('misc_customnav_url_open_blank'))
    698. 

  698. 			), TRUE), $nav['target'], 'mradio');
    699. 

  699. 			showsetting('misc_customnav_level', array('levelnew', array(
    700. 

  700. 				array(0, cplang('nolimit')),
    701. 

  701. 				array(1, cplang('member')),
    702. 

  702. 				array(2, cplang('usergroups_system_3')),
    703. 

  703. 				array(3, cplang('usergroups_system_1')),
    704. 

  704. 			)), $nav['level'], 'select');
    705. 

  705. 			showtagfooter('tbody');
    706. 

  706. 			showsubmit('editsubmit');
    707. 

  707. 			showtablefooter();
    708. 

  708. 			showformfooter();
    709. 

  709. 

  710. 		} else {
    711. 

  711. 

  712. 			$namenew = trim(dhtmlspecialchars($_GET['namenew']));
    713. 

  713. 			$titlenew = trim(dhtmlspecialchars($_GET['titlenew']));
    714. 

  714. 			$subnamenew = trim(dhtmlspecialchars($_GET['subnamenew']));
    715. 

  715. 			$urlnew = str_replace(array('&amp;'), array('&'), dhtmlspecialchars($_GET['urlnew']));
    716. 

  716. 			$suburlnew = str_replace(array('&amp;'), array('&'), dhtmlspecialchars($_GET['suburlnew']));
    717. 

  717. 			$targetnew = intval($_GET['targetnew']) ? 1 : 0;
    718. 

  718. 			$levelnew = intval($_GET['levelnew']) && $_GET['levelnew'] > 0 && $_GET['levelnew'] < 4 ? intval($_GET['levelnew']) : 0 ;
    719. 

  719. 			$urladd = $nav['type'] != '0' && $urlnew ? ", url='$urlnew'" : '';
    720. 

  720. 			$urladd .= $nav['type'] != '0' && $suburlnew ? ", suburl='$suburlnew'" : '';
    721. 

  721. 

  722. 			if(empty($_GET['allowsubnew'])) {
    723. 

  723. 				$subnamenew = "\t".$subnamenew;
    724. 

  724. 			}
    725. 

  725. 			$iconnew = addslashes($nav['icon']);
    726. 

  726. 			if($_FILES['iconnew']) {
    727. 

  727. 				$upload = new discuz_upload();
    728. 

  728. 				if($upload->init($_FILES['iconnew'], 'common') && $upload->save()) {
    729. 

  729. 					$iconnew = $upload->attach['attachment'];
    730. 

  730. 				}
    731. 

  731. 			} else {
    732. 

  732. 				$iconnew = $_GET['iconnew'];
    733. 

  733. 			}
    734. 

  734. 			if($_GET['deleteicon'] && $nav['icon']) {
    735. 

  735. 				$valueparse = parse_url($nav['icon']);
    736. 

  736. 				if(!isset($valueparse['host']) && !strexists($nav['icon'], '{STATICURL}')) {
    737. 

  737. 					@unlink($_G['setting']['attachurl'].'common/'.$nav['icon']);
    738. 

  738. 				}
    739. 

  739. 				$iconnew = '';
    740. 

  740. 			}
    741. 

  741. 			$iconadd = ", icon='$iconnew'";
    742. 

  742. 

  743. 			$data = array(
    744. 

  744. 					'name' => $namenew,
    745. 

  745. 					'subname' => $subnamenew,
    746. 

  746. 					'title' => $titlenew,
    747. 

  747. 					'target' => $targetnew,
    748. 

  748. 					'level' => $levelnew,
    749. 

  749. 					'icon' => $iconnew
    750. 

  750. 				);
    751. 

  751. 			if($nav['type'] != '0' && $urlnew) {
    752. 

  752. 				$data['url'] = $urlnew;
    753. 

  753. 			}
    754. 

  754. 			if($nav['type'] != '0' && $suburlnew) {
    755. 

  755. 				$data['suburl'] = $suburlnew;
    756. 

  756. 			}
    757. 

  757. 			C::t('common_nav')->update($id, $data);
    758. 

  758. 			updatecache('setting');
    759. 

  759. 			cpmsg('nav_add_succeed', 'action=nav&operation=spacenav', 'succeed');
    760. 

  760. 

  761. 		}
    762. 

  762. 

  763. 	}
    764. 

  764. 

  765. } elseif($operation == 'mynav') {
    766. 

  766. 

  767. 	if(!$do) {
    768. 

  768. 

  769. 		if(!submitcheck('submit')) {
    770. 

  770. 

  771. 			shownav('style', 'nav_setting_customnav');
    772. 

  772. 			showsubmenu('nav_setting_customnav', $navdata);
    773. 

  773. 

  774. 			showformheader('nav&operation=mynav');
    775. 

  775. 			showtableheader();
    776. 

  776. 			showsubtitle(array('', 'display_order', 'name', 'url', 'type', 'available', ''));
    777. 

  777. 

  778. 			$navlist = array();
    779. 

  779. 			foreach(C::t('common_nav')->fetch_all_by_navtype(3) as $nav) {
    780. 

  780. 				if($nav['available'] < 0) {
    781. 

  781. 					continue;
    782. 

  782. 				}
    783. 

  783. 				$navlist[$nav['id']] = $nav;
    784. 

  784. 			}
    785. 

  785. 

  786. 			foreach($navlist as $nav) {
    787. 

  787. 				$navicon = str_replace('{STATICURL}', STATICURL, $nav['icon']);
    788. 

  788. 				if(!preg_match("/^".preg_quote(STATICURL, '/')."/i", $navicon) && !(($valueparse = parse_url($navicon)) && isset($valueparse['host']))) {
    789. 

  789. 					$navicon = $_G['setting']['attachurl'].'common/'.$nav['icon'].'?'.random(6);
    790. 

  790. 				}
    791. 

  791. 				showtablerow('', array('class="td25"', 'class="td25"', '', ''), array(
    792. 

  792. 					in_array($nav['type'], array('2', '1')) ? "<input class=\"checkbox\" type=\"checkbox\" name=\"delete[]\" value=\"$nav[id]\">" : '<input type="checkbox" class="checkbox" value="" disabled="disabled" />',
    793. 

  793. 					"<input type=\"text\" class=\"txt\" size=\"2\" name=\"displayordernew[$nav[id]]\" value=\"$nav[displayorder]\">",
    794. 

  794. 					"<input type=\"text\" class=\"txt\" size=\"15\" name=\"namenew[$nav[id]]\" value=\"".dhtmlspecialchars($nav['name'])."\">".
    795. 

  795. 					($nav['icon'] ? '<img src="'.$navicon.'" width="40" height="40" class="vmiddle" />' : ''),
    796. 

  796. 					$nav['type'] == '0' ? $nav['url'] : "<input type=\"text\" class=\"txt\" size=\"15\" name=\"urlnew[$nav[id]]\" value=\"".dhtmlspecialchars($nav['url'])."\">",
    797. 

  797. 					cplang($nav['type'] == '0' ? 'inbuilt' : ($nav['type'] == '3' ? 'nav_plugin' : ($nav['type'] == '4' ? 'channel' : 'custom'))),
    798. 

  798. 					"<input class=\"checkbox\" type=\"checkbox\" name=\"availablenew[$nav[id]]\" value=\"1\" ".($nav['available'] ? 'checked' : '').">",
    799. 

  799. 					"<a href=\"".ADMINSCRIPT."?action=nav&operation=mynav&do=edit&id=$nav[id]\" class=\"act\">$lang[edit]</a>"
    800. 

  800. 				));
    801. 

  801. 			}
    802. 

  802. 			echo '<tr><td colspan="1"></td><td colspan="7"><div><a href="###" onclick="addrow(this, 0, 0)" class="addtr">'.$lang['nav_mynav_add'].'</a></div></td></tr>';
    803. 

  803. 			showsubmit('submit', 'submit', 'del');
    804. 

  804. 			showtablefooter();
    805. 

  805. 			showformfooter();
    806. 

  806. 

  807. 			echo <<<EOT
    808. 

  808. <script type="text/JavaScript">
    809. 

  809. 	var rowtypedata = [
    810. 

  810. 		[[1, '', 'td25'], [1,'<input name="newdisplayorder[]" value="" size="3" type="text" class="txt">', 'td25'], [1, '<input name="newname[]" value="" size="15" type="text" class="txt">'], [4, '<input name="newurl[]" value="" size="15" type="text" class="txt">']],
    811. 

  811. 	];
    812. 

  812. </script>
    813. 

  813. EOT;
    814. 

  814. 

  815. 		} else {
    816. 

  816. 

  817. 			if($_GET['delete']) {
    818. 

  818. 				C::t('common_nav')->delete_by_navtype_id(3, $_GET['delete']);
    819. 

  819. 			}
    820. 

  820. 

  821. 			if(is_array($_GET['namenew'])) {
    822. 

  822. 				foreach($_GET['namenew'] as $id => $name) {
    823. 

  823. 					$name = trim(dhtmlspecialchars($name));
    824. 

  824. 					$urlnew = str_replace(array('&amp;'), array('&'), dhtmlspecialchars($_GET['urlnew'][$id]));
    825. 

  825. 					$urladd = !empty($_GET['urlnew'][$id]) ? ", url='$urlnew'" : '';
    826. 

  826. 					$availablenew[$id] = $name && (!isset($_GET['urlnew'][$id]) || $_GET['urlnew'][$id]) && $_GET['availablenew'][$id];
    827. 

  827. 					$displayordernew[$id] = intval($_GET['displayordernew'][$id]);
    828. 

  828. 					$nameadd = !empty($name) ? ", name='$name'" : '';
    829. 

  829. 					$data = array(
    830. 

  830. 							'displayorder' => $displayordernew[$id],
    831. 

  831. 							'available' => $availablenew[$id]
    832. 

  832. 						);
    833. 

  833. 					if(!empty($_GET['urlnew'][$id])) {
    834. 

  834. 						$data['url'] = $urlnew;
    835. 

  835. 					}
    836. 

  836. 					if(!empty($name)) {
    837. 

  837. 						$data['name'] = $name;
    838. 

  838. 					}
    839. 

  839. 					C::t('common_nav')->update($id, $data);
    840. 

  840. 				}
    841. 

  841. 			}
    842. 

  842. 

  843. 			if(is_array($_GET['newname'])) {
    844. 

  844. 				foreach($_GET['newname'] as $k => $v) {
    845. 

  845. 					$v = dhtmlspecialchars(trim($v));
    846. 

  846. 					if(!empty($v)) {
    847. 

  847. 						$newavailable = $v && $_GET['newurl'][$k];
    848. 

  848. 						$newdisplayorder[$k] = intval($_GET['newdisplayorder'][$k]);
    849. 

  849. 						$newurl[$k] = str_replace('&amp;', '&', dhtmlspecialchars($_GET['newurl'][$k]));
    850. 

  850. 						$data = array(
    851. 

  851. 							'name' => $v,
    852. 

  852. 							'displayorder' => $newdisplayorder[$k],
    853. 

  853. 							'url' => $newurl[$k],
    854. 

  854. 							'type' => 1,
    855. 

  855. 							'available' => $newavailable,
    856. 

  856. 							'navtype' => 3
    857. 

  857. 						);
    858. 

  858. 						C::t('common_nav')->insert($data);
    859. 

  859. 					}
    860. 

  860. 				}
    861. 

  861. 			}
    862. 

  862. 

  863. 			updatecache('setting');
    864. 

  864. 			cpmsg('nav_add_succeed', 'action=nav&operation=mynav', 'succeed');
    865. 

  865. 

  866. 		}
    867. 

  867. 

  868. 	} elseif($do == 'edit' && ($id = $_GET['id'])) {
    869. 

  869. 

  870. 		$nav = C::t('common_nav')->fetch_by_id_navtype($id, 3);
    871. 

  871. 		if(!$nav) {
    872. 

  872. 			cpmsg('nav_not_found', '', 'error');
    873. 

  873. 		}
    874. 

  874. 

  875. 		if(!submitcheck('editsubmit')) {
    876. 

  876. 

  877. 			$nav['allowsubnew'] = 1;
    878. 

  878. 			if(substr($nav['subname'], 0, 1) == "\t") {
    879. 

  879. 				$nav['allowsubnew'] = 0;
    880. 

  880. 				$nav['subname'] = substr($nav['subname'], 1);
    881. 

  881. 			}
    882. 

  882. 			if($nav['icon']) {
    883. 

  883. 				$navicon = str_replace('{STATICURL}', STATICURL, $nav['icon']);
    884. 

  884. 				if(!preg_match("/^".preg_quote(STATICURL, '/')."/i", $navicon) && !(($valueparse = parse_url($navicon)) && isset($valueparse['host']))) {
    885. 

  885. 					$navicon = $_G['setting']['attachurl'].'common/'.$nav['icon'].'?'.random(6);
    886. 

  886. 				}
    887. 

  887. 				$naviconhtml = '<br /><label><input type="checkbox" class="checkbox" name="deleteicon" value="yes" /> '.$lang['delete'].'</label><br /><img src="'.$navicon.'" width="40" height="40" />';
    888. 

  888. 			}
    889. 

  889. 			shownav('global', 'misc_customnav');
    890. 

  890. 			showsubmenu('nav_setting_customnav', $navdata);
    891. 

  891. 

  892. 			showformheader("nav&operation=mynav&do=edit&id=$id", 'enctype');
    893. 

  893. 			showtableheader();
    894. 

  894. 			showtitle(cplang('nav_nav_mynav').' - '.$nav['name']);
    895. 

  895. 			showsetting('misc_customnav_name', 'namenew', $nav['name'], 'text');
    896. 

  896. 			showsetting('misc_customnav_title', 'titlenew', $nav['title'], 'text');
    897. 

  897. 			showsetting('misc_customnav_url', 'urlnew', $nav['url'], 'text', $nav['type'] == '0');
    898. 

  898. 			showsetting('misc_customnav_icon', 'iconnew', $nav['icon'], 'filetext', '', 0, cplang('misc_mynav_icon_comment').$naviconhtml);
    899. 

  899. 			showsetting('misc_customnav_url_open', array('targetnew', array(
    900. 

  900. 				array(0, cplang('misc_customnav_url_open_default')),
    901. 

  901. 				array(1, cplang('misc_customnav_url_open_blank'))
    902. 

  902. 			), TRUE), $nav['target'], 'mradio');
    903. 

  903. 			showsetting('misc_customnav_level', array('levelnew', array(
    904. 

  904. 				array(0, cplang('nolimit')),
    905. 

  905. 				array(1, cplang('member')),
    906. 

  906. 				array(2, cplang('usergroups_system_3')),
    907. 

  907. 				array(3, cplang('usergroups_system_1')),
    908. 

  908. 			)), $nav['level'], 'select');
    909. 

  909. 			showtagfooter('tbody');
    910. 

  910. 			showsubmit('editsubmit');
    911. 

  911. 			showtablefooter();
    912. 

  912. 			showformfooter();
    913. 

  913. 

  914. 		} else {
    915. 

  915. 

  916. 			$namenew = trim(dhtmlspecialchars($_GET['namenew']));
    917. 

  917. 			$titlenew = trim(dhtmlspecialchars($_GET['titlenew']));
    918. 

  918. 			$urlnew = str_replace(array('&amp;'), array('&'), dhtmlspecialchars($_GET['urlnew']));
    919. 

  919. 			$targetnew = intval($_GET['targetnew']) ? 1 : 0;
    920. 

  920. 			$levelnew = intval($_GET['levelnew']) && $_GET['levelnew'] > 0 && $_GET['levelnew'] < 4 ? intval($_GET['levelnew']) : 0 ;
    921. 

  921. 			$urladd = $nav['type'] != '0' && $urlnew ? ", url='$urlnew'" : '';
    922. 

  922. 

  923. 			$iconnew = addslashes($nav['icon']);
    924. 

  924. 			if($_FILES['iconnew']) {
    925. 

  925. 				$upload = new discuz_upload();
    926. 

  926. 				if($upload->init($_FILES['iconnew'], 'common') && $upload->save()) {
    927. 

  927. 					$iconnew = $upload->attach['attachment'];
    928. 

  928. 				}
    929. 

  929. 			} else {
    930. 

  930. 				$iconnew = $_GET['iconnew'];
    931. 

  931. 			}
    932. 

  932. 			if($_GET['deleteicon'] && $nav['icon']) {
    933. 

  933. 				$valueparse = parse_url($nav['icon']);
    934. 

  934. 				if(!isset($valueparse['host']) && !strexists($nav['icon'], '{STATICURL}')) {
    935. 

  935. 					@unlink($_G['setting']['attachurl'].'common/'.$nav['icon']);
    936. 

  936. 				}
    937. 

  937. 				$iconnew = '';
    938. 

  938. 			}
    939. 

  939. 			$iconadd = ", icon='$iconnew'";
    940. 

  940. 

  941. 			$data = array(
    942. 

  942. 					'name' => $namenew,
    943. 

  943. 					'title' => $titlenew,
    944. 

  944. 					'target' => $targetnew,
    945. 

  945. 					'level' => $levelnew,
    946. 

  946. 					'icon' => $iconnew
    947. 

  947. 				);
    948. 

  948. 			if($nav['type'] != '0' && $urlnew) {
    949. 

  949. 				$data['url'] = $urlnew;
    950. 

  950. 			}
    951. 

  951. 			C::t('common_nav')->update($id, $data);
    952. 

  952. 

  953. 			updatecache('setting');
    954. 

  954. 			cpmsg('nav_add_succeed', 'action=nav&operation=mynav', 'succeed');
    955. 

  955. 

  956. 		}
    957. 

  957. 

  958. 	}
    959. 

  959. 

  960. } elseif($operation == 'topnav') {
    961. 

  961. 

  962. 	if(!$do) {
    963. 

  963. 

  964. 		if(!submitcheck('submit')) {
    965. 

  965. 

  966. 			shownav('style', 'nav_setting_customnav');
    967. 

  967. 			showsubmenu('nav_setting_customnav', $navdata);
    968. 

  968. 

  969. 			showformheader('nav&operation=topnav');
    970. 

  970. 			showtableheader();
    971. 

  971. 			showsubtitle(array('', 'display_order', 'name', 'setting_styles_global_topnavtype', 'url', 'type', 'available', ''));
    972. 

  972. 

  973. 			$navlist = array();
    974. 

  974. 			foreach(C::t('common_nav')->fetch_all_by_navtype(4) as $nav) {
    975. 

  975. 				$navlist[$nav['id']] = $nav;
    976. 

  976. 			}
    977. 

  977. 

  978. 			foreach($navlist as $nav) {
    979. 

  979. 				$navtype = array();
    980. 

  980. 				$navtype[$nav['subtype']] = 'selected="selected"';
    981. 

  981. 				showtablerow('', array('class="td25"', 'class="td25"', '', ''), array(
    982. 

  982. 					in_array($nav['type'], array('2', '1')) ? "<input class=\"checkbox\" type=\"checkbox\" name=\"delete[]\" value=\"$nav[id]\">" : '<input type="checkbox" class="checkbox" value="" disabled="disabled" />',
    983. 

  983. 					"<input type=\"text\" class=\"txt\" size=\"2\" name=\"displayordernew[$nav[id]]\" value=\"$nav[displayorder]\">",
    984. 

  984. 					"<div><input type=\"text\" class=\"txt\" size=\"15\" name=\"namenew[$nav[id]]\" value=\"".dhtmlspecialchars($nav['name'])."\">",
    985. 

  985. 					"<select name=\"subtypenew[$nav[id]]\"><option value=\"0\" $navtype[0]>$lang[setting_styles_global_topnavtype_0]</option><option value=\"1\" $navtype[1]>$lang[setting_styles_global_topnavtype_1]</option></select>",
    986. 

  986. 					$nav['type'] == '0' ? $nav['url'] : "<input type=\"text\" class=\"txt\" size=\"15\" name=\"urlnew[$nav[id]]\" value=\"".dhtmlspecialchars($nav['url'])."\">",
    987. 

  987. 					cplang($nav['type'] == '0' ? 'inbuilt' : ($nav['type'] == '3' ? 'nav_plugin' : ($nav['type'] == '4' ? 'channel' : 'custom'))),
    988. 

  988. 					"<input class=\"checkbox\" type=\"checkbox\" name=\"availablenew[$nav[id]]\" value=\"1\" ".($nav['available'] ? 'checked' : '').">",
    989. 

  989. 					"<a href=\"".ADMINSCRIPT."?action=nav&operation=topnav&do=edit&id=$nav[id]\" class=\"act\">$lang[edit]</a>"
    990. 

  990. 				));
    991. 

  991. 			}
    992. 

  992. 			echo '<tr><td colspan="1"></td><td colspan="7"><div><a href="###" onclick="addrow(this, 0, 0)" class="addtr">'.$lang['nav_topnav_add'].'</a></div></td></tr>';
    993. 

  993. 			showsubmit('submit', 'submit', 'del');
    994. 

  994. 			showtablefooter();
    995. 

  995. 			showformfooter();
    996. 

  996. 

  997. 			echo <<<EOT
    998. 

  998. <script type="text/JavaScript">
    999. 

  999. 	var rowtypedata = [
    1000. 

  1000. 		[[1, '', 'td25'], [1,'<input name="newdisplayorder[]" value="" size="3" type="text" class="txt">', 'td25'], [1, '<input name="newname[]" value="" size="15" type="text" class="txt">'], [1, '<select name="newsubtype[]"><option value="0">$lang[setting_styles_global_topnavtype_0]</option><option value="1">$lang[setting_styles_global_topnavtype_1]</option></select>'], [4, '<input name="newurl[]" value="" size="15" type="text" class="txt">']],
    1001. 

  1001. 	];
    1002. 

  1002. </script>
    1003. 

  1003. EOT;
    1004. 

  1004. 

  1005. 		} else {
    1006. 

  1006. 

  1007. 			if($_GET['delete']) {
    1008. 

  1008. 				C::t('common_nav')->delete_by_navtype_id(4, $_GET['delete']);
    1009. 

  1009. 			}
    1010. 

  1010. 

  1011. 			if(is_array($_GET['namenew'])) {
    1012. 

  1012. 				foreach($_GET['namenew'] as $id => $name) {
    1013. 

  1013. 					$name = trim(dhtmlspecialchars($name));
    1014. 

  1014. 					$urlnew = str_replace(array('&amp;'), array('&'), dhtmlspecialchars($_GET['urlnew'][$id]));
    1015. 

  1015. 					$availablenew[$id] = $name && (!isset($_GET['urlnew'][$id]) || $_GET['urlnew'][$id]) && $_GET['availablenew'][$id];
    1016. 

  1016. 					$displayordernew[$id] = intval($_GET['displayordernew'][$id]);
    1017. 

  1017. 					$data = array(
    1018. 

  1018. 							'displayorder' => $displayordernew[$id],
    1019. 

  1019. 							'available' => $availablenew[$id]
    1020. 

  1020. 						);
    1021. 

  1021. 					if(!empty($_GET['urlnew'][$id])) {
    1022. 

  1022. 						$data['url'] = $urlnew;
    1023. 

  1023. 					}
    1024. 

  1024. 					if(!empty($name)) {
    1025. 

  1025. 						$data['name'] = $name;
    1026. 

  1026. 					}
    1027. 

  1027. 					if(isset($_GET['subtypenew'][$id])) {
    1028. 

  1028. 						$data['subtype'] = intval($_GET['subtypenew'][$id]);
    1029. 

  1029. 					}
    1030. 

  1030. 					C::t('common_nav')->update($id, $data);
    1031. 

  1031. 				}
    1032. 

  1032. 			}
    1033. 

  1033. 

  1034. 			if(is_array($_GET['newname'])) {
    1035. 

  1035. 				foreach($_GET['newname'] as $k => $v) {
    1036. 

  1036. 					$v = dhtmlspecialchars(trim($v));
    1037. 

  1037. 					if(!empty($v)) {
    1038. 

  1038. 						$newavailable = $v && $_GET['newurl'][$k];
    1039. 

  1039. 						$newdisplayorder[$k] = intval($_GET['newdisplayorder'][$k]);
    1040. 

  1040. 						$subtype = isset($_GET['newsubtype'][$k]) ? intval($_GET['newsubtype'][$k]) : 0;
    1041. 

  1041. 						$newurl[$k] = str_replace('&amp;', '&', dhtmlspecialchars($_GET['newurl'][$k]));
    1042. 

  1042. 						$data = array(
    1043. 

  1043. 							'name' => $v,
    1044. 

  1044. 							'displayorder' => $newdisplayorder[$k],
    1045. 

  1045. 							'subtype' => $subtype,
    1046. 

  1046. 							'url' => $newurl[$k],
    1047. 

  1047. 							'type' => 1,
    1048. 

  1048. 							'available' => $newavailable,
    1049. 

  1049. 							'navtype' => 4
    1050. 

  1050. 						);
    1051. 

  1051. 						C::t('common_nav')->insert($data);
    1052. 

  1052. 					}
    1053. 

  1053. 				}
    1054. 

  1054. 			}
    1055. 

  1055. 

  1056. 			updatecache('setting');
    1057. 

  1057. 			cpmsg('nav_add_succeed', 'action=nav&operation=topnav', 'succeed');
    1058. 

  1058. 

  1059. 		}
    1060. 

  1060. 

  1061. 	} elseif($do == 'edit' && ($id = $_GET['id'])) {
    1062. 

  1062. 

  1063. 		$nav = C::t('common_nav')->fetch_by_id_navtype($id, 4);
    1064. 

  1064. 		if(!$nav) {
    1065. 

  1065. 			cpmsg('nav_not_found', '', 'error');
    1066. 

  1066. 		}
    1067. 

  1067. 

  1068. 		if(!submitcheck('editsubmit')) {
    1069. 

  1069. 

  1070. 			$string = sprintf('%02d', $nav['highlight']);
    1071. 

  1071. 

  1072. 			shownav('global', 'misc_customnav');
    1073. 

  1073. 			showsubmenu('nav_setting_customnav', $navdata);
    1074. 

  1074. 

  1075. 			showformheader("nav&operation=topnav&do=edit&id=$id");
    1076. 

  1076. 			showtableheader();
    1077. 

  1077. 			showtitle(cplang('nav_nav_topnav').' - '.$nav['name']);
    1078. 

  1078. 			showsetting('misc_customnav_name', 'namenew', $nav['name'], 'text');
    1079. 

  1079. 			showsetting('setting_styles_global_topnavtype', array('subtypenew', array(
    1080. 

  1080. 				array(0, cplang('setting_styles_global_topnavtype_0')),
    1081. 

  1081. 				array(1, cplang('setting_styles_global_topnavtype_1')),
    1082. 

  1082. 			)), $nav['subtype'], 'select');
    1083. 

  1083. 			showsetting('misc_customnav_title', 'titlenew', $nav['title'], 'text');
    1084. 

  1084. 			showsetting('misc_customnav_url', 'urlnew', $nav['url'], 'text', $nav['type'] == '0');
    1085. 

  1085. 			showsetting('misc_customnav_style', array('stylenew', array(cplang('misc_customnav_style_underline'), cplang('misc_customnav_style_italic'), cplang('misc_customnav_style_bold'))), $string[0], 'binmcheckbox');
    1086. 

  1086. 			showsetting('misc_customnav_style_color', array('colornew', array(
    1087. 

  1087. 				array(0, '<span style="color: '.LINK.';">Default</span>'),
    1088. 

  1088. 				array(1, '<span style="color: Red;">Red</span>'),
    1089. 

  1089. 				array(2, '<span style="color: Orange;">Orange</span>'),
    1090. 

  1090. 				array(3, '<span style="color: Yellow;">Yellow</span>'),
    1091. 

  1091. 				array(4, '<span style="color: Green;">Green</span>'),
    1092. 

  1092. 				array(5, '<span style="color: Cyan;">Cyan</span>'),
    1093. 

  1093. 				array(6, '<span style="color: Blue;">Blue</span>'),
    1094. 

  1094. 				array(7, '<span style="color: Purple;">Purple</span>'),
    1095. 

  1095. 				array(8, '<span style="color: Gray;">Gray</span>'),
    1096. 

  1096. 			)), $string[1], 'mradio2');
    1097. 

  1097. 			showsetting('misc_customnav_url_open', array('targetnew', array(
    1098. 

  1098. 				array(0, cplang('misc_customnav_url_open_default')),
    1099. 

  1099. 				array(1, cplang('misc_customnav_url_open_blank'))
    1100. 

  1100. 			), TRUE), $nav['target'], 'mradio');
    1101. 

  1101. 			if($nav['type']) {
    1102. 

  1102. 				showsetting('misc_customnav_level', array('levelnew', array(
    1103. 

  1103. 					array(0, cplang('nolimit')),
    1104. 

  1104. 					array(1, cplang('member')),
    1105. 

  1105. 					array(2, cplang('usergroups_system_3')),
    1106. 

  1106. 					array(3, cplang('usergroups_system_1')),
    1107. 

  1107. 				)), $nav['level'], 'select');
    1108. 

  1108. 			}
    1109. 

  1109. 			showtagfooter('tbody');
    1110. 

  1110. 			showsubmit('editsubmit');
    1111. 

  1111. 			showtablefooter();
    1112. 

  1112. 			showformfooter();
    1113. 

  1113. 

  1114. 		} else {
    1115. 

  1115. 

  1116. 			$namenew = trim(dhtmlspecialchars($_GET['namenew']));
    1117. 

  1117. 			$titlenew = trim(dhtmlspecialchars($_GET['titlenew']));
    1118. 

  1118. 			$urlnew = str_replace(array('&amp;'), array('&'), dhtmlspecialchars($_GET['urlnew']));
    1119. 

  1119. 			$colornew = $_GET['colornew'];
    1120. 

  1120. 			$subtypenew = $_GET['subtypenew'];
    1121. 

  1121. 			$stylebin = '';
    1122. 

  1122. 			for($i = 3; $i >= 1; $i--) {
    1123. 

  1123. 				$stylebin .= empty($_GET['stylenew'][$i]) ? '0' : '1';
    1124. 

  1124. 			}
    1125. 

  1125. 			$stylenew = bindec($stylebin);
    1126. 

  1126. 			$targetnew = intval($_GET['targetnew']) ? 1 : 0;
    1127. 

  1127. 			$levelnew = $nav['type'] ? (intval($_GET['levelnew']) && $_GET['levelnew'] > 0 && $_GET['levelnew'] < 4 ? intval($_GET['levelnew']) : 0) : 0;
    1128. 

  1128. 			$urladd = $nav['type'] != '0' && $urlnew ? ", url='".$urlnew."'" : '';
    1129. 

  1129. 

  1130. 			$data = array(
    1131. 

  1131. 					'name' => $namenew,
    1132. 

  1132. 					'title' => $titlenew,
    1133. 

  1133. 					'highlight' => "$stylenew$colornew",
    1134. 

  1134. 					'target' => $targetnew,
    1135. 

  1135. 					'level' => $levelnew,
    1136. 

  1136. 					'subtype' => $subtypenew
    1137. 

  1137. 				);
    1138. 

  1138. 			if($nav['type'] != '0' && $urlnew) {
    1139. 

  1139. 				$data['url'] = $urlnew;
    1140. 

  1140. 			}
    1141. 

  1141. 			C::t('common_nav')->update($id, $data);
    1142. 

  1142. 			updatecache('setting');
    1143. 

  1143. 			cpmsg('nav_add_succeed', 'action=nav&operation=topnav', 'succeed');
    1144. 

  1144. 

  1145. 		}
    1146. 

  1146. 

  1147. 	}
    1148. 

  1148. 

  1149. }
    1150. 

  1150. 

  1151. ?>
    1152.