PageRenderTime 48ms CodeModel.GetById 21ms RepoModel.GetById 0ms app.codeStats 1ms

/manager/processors/save_content.processor.php

https://github.com/good-web-master/modx.evo.custom
PHP | 707 lines | 617 code | 44 blank | 46 comment | 109 complexity | 123323b927622ee6288c1446eb5527b3 MD5 | raw file
Possible License(s): LGPL-2.1, AGPL-1.0, GPL-2.0, MIT, BSD-3-Clause 
    

  1. <?php

    2. 

  2. if (IN_MANAGER_MODE != "true")

    3. 

  3. 	die("<b>INCLUDE_ORDERING_ERROR</b><br /><br />Please use the MODx Content Manager instead of accessing this file directly.");

    4. 

  4. 

    5. 

  5. if (!$modx->hasPermission('save_document')) {

    6. 

  6. 	$e->setError(3);

    7. 

  7. 	$e->dumpError();

    8. 

  8. }

    9. 

  9. 

    10. 

  10. // preprocess POST values

    11. 

  11. $id = is_numeric($_POST['id']) ? $_POST['id'] : '';

    12. 

  12. $introtext = $modx->db->escape($_POST['introtext']);

    13. 

  13. $content = $modx->db->escape($_POST['ta']);

    14. 

  14. $pagetitle = $modx->db->escape($_POST['pagetitle']);

    15. 

  15. $description = $modx->db->escape($_POST['description']);

    16. 

  16. $alias = $modx->db->escape($_POST['alias']);

    17. 

  17. $link_attributes = $modx->db->escape($_POST['link_attributes']);

    18. 

  18. $isfolder = $_POST['isfolder'];

    19. 

  19. $richtext = $_POST['richtext'];

    20. 

  20. $published = $_POST['published'];

    21. 

  21. $parent = $_POST['parent'] != '' ? $_POST['parent'] : 0;

    22. 

  22. $template = $_POST['template'];

    23. 

  23. $menuindex = !empty($_POST['menuindex']) ? $_POST['menuindex'] : 0;

    24. 

  24. $searchable = $_POST['searchable'];

    25. 

  25. $cacheable = $_POST['cacheable'];

    26. 

  26. $syncsite = $_POST['syncsite'];

    27. 

  27. $pub_date = $_POST['pub_date'];

    28. 

  28. $unpub_date = $_POST['unpub_date'];

    29. 

  29. $document_groups = (isset($_POST['chkalldocs']) && $_POST['chkalldocs'] == 'on') ? array() : $_POST['docgroups'];

    30. 

  30. $type = $_POST['type'];

    31. 

  31. $keywords = $_POST['keywords'];

    32. 

  32. $metatags = $_POST['metatags'];

    33. 

  33. $contentType = $modx->db->escape($_POST['contentType']);

    34. 

  34. $contentdispo = intval($_POST['content_dispo']);

    35. 

  35. $longtitle = $modx->db->escape($_POST['longtitle']);

    36. 

  36. $donthit = intval($_POST['donthit']);

    37. 

  37. $menutitle = $modx->db->escape($_POST['menutitle']);

    38. 

  38. $hidemenu = intval($_POST['hidemenu']);

    39. 

  39. $aliasvisible = $_POST['alias_visible'];

    40. 

  40. 

    41. 

  41. if (trim($pagetitle == "")) {

    42. 

  42. 	if ($type == "reference") {

    43. 

  43. 		$pagetitle = $_lang['untitled_weblink'];

    44. 

  44. 	} else {

    45. 

  45. 		$pagetitle = $_lang['untitled_resource'];

    46. 

  46. 	}

    47. 

  47. }

    48. 

  48. 

    49. 

  49. // get table names

    50. 

  50. $tbl_document_groups            = $modx->getFullTableName('document_groups');

    51. 

  51. $tbl_documentgroup_names        = $modx->getFullTableName('documentgroup_names');

    52. 

  52. $tbl_member_groups              = $modx->getFullTableName('member_groups');

    53. 

  53. $tbl_membergroup_access         = $modx->getFullTableName('membergroup_access');

    54. 

  54. $tbl_keyword_xref               = $modx->getFullTableName('keyword_xref');

    55. 

  55. $tbl_site_content               = $modx->getFullTableName('site_content');

    56. 

  56. $tbl_site_content_metatags      = $modx->getFullTableName('site_content_metatags');

    57. 

  57. $tbl_site_tmplvar_access        = $modx->getFullTableName('site_tmplvar_access');

    58. 

  58. $tbl_site_tmplvar_contentvalues = $modx->getFullTableName('site_tmplvar_contentvalues');

    59. 

  59. $tbl_site_tmplvar_templates     = $modx->getFullTableName('site_tmplvar_templates');

    60. 

  60. $tbl_site_tmplvars              = $modx->getFullTableName('site_tmplvars');

    61. 

  61. 

    62. 

  62. $actionToTake = "new";

    63. 

  63. if ($_POST['mode'] == '73' || $_POST['mode'] == '27') {

    64. 

  64. 	$actionToTake = "edit";

    65. 

  65. }

    66. 

  66. 

    67. 

  67. // friendly url alias checks

    68. 

  68. if ($friendly_urls) {

    69. 

  69. 	// auto assign alias

    70. 

  70. 	if (!$alias && $automatic_alias) {

    71. 

  71. 		$alias = strtolower($modx->stripAlias(trim($pagetitle)));

    72. 

  72. 		if(!$allow_duplicate_alias) {

    73. 

  73. 			if ($modx->db->getValue("SELECT COUNT(id) FROM " . $tbl_site_content . " WHERE id<>'$id' AND alias='$alias'") != 0) {

    74. 

  74. 				$cnt = 1;

    75. 

  75. 				$tempAlias = $alias;

    76. 

  76. 				while ($modx->db->getValue("SELECT COUNT(id) FROM " . $tbl_site_content . " WHERE id<>'$id' AND alias='$tempAlias'") != 0) {

    77. 

  77. 					$tempAlias = $alias;

    78. 

  78. 					$tempAlias .= $cnt;

    79. 

  79. 					$cnt++;

    80. 

  80. 				}

    81. 

  81. 				$alias = $tempAlias;

    82. 

  82. 			}

    83. 

  83. 		}

    84. 

  84. 	}

    85. 

  85. 

    86. 

  86. 	// check for duplicate alias name if not allowed

    87. 

  87. 	elseif ($alias && !$allow_duplicate_alias) {

    88. 

  88. 		$alias = $modx->stripAlias($alias);

    89. 

  89. 		if ($use_alias_path) {

    90. 

  90. 			// only check for duplicates on the same level if alias_path is on

    91. 

  91. 			$docid = $modx->db->getValue("SELECT id FROM " . $tbl_site_content . " WHERE id<>'$id' AND alias='$alias' AND parent=$parent LIMIT 1");

    92. 

  92. 		} else {

    93. 

  93. 			$docid = $modx->db->getValue("SELECT id FROM " . $tbl_site_content . " WHERE id<>'$id' AND alias='$alias' LIMIT 1");

    94. 

  94. 		}

    95. 

  95. 		if ($docid > 0) {

    96. 

  96. 			if ($actionToTake == 'edit') {

    97. 

  97. 				$modx->manager->saveFormValues(27);

    98. 

  98. 				$url = "index.php?a=27&id=" . $id;

    99. 

  99. 				include_once "header.inc.php";

    100. 

  100. 				$modx->webAlert(sprintf($_lang["duplicate_alias_found"], $docid, $alias), $url);

    101. 

  101. 				include_once "footer.inc.php";

    102. 

  102. 				exit;

    103. 

  103. 			} else {

    104. 

  104. 				$modx->manager->saveFormValues(4);

    105. 

  105. 				$url = "index.php?a=4";

    106. 

  106. 				include_once "header.inc.php";

    107. 

  107. 				$modx->webAlert(sprintf($_lang["duplicate_alias_found"], $docid, $alias), $url);

    108. 

  108. 				include_once "footer.inc.php";

    109. 

  109. 				exit;

    110. 

  110. 			}

    111. 

  111. 		}

    112. 

  112. 	}

    113. 

  113. 

    114. 

  114. 	// strip alias of special characters

    115. 

  115. 	elseif ($alias) {

    116. 

  116. 		$alias = $modx->stripAlias($alias);

    117. 

  117. 	}

    118. 

  118. }

    119. 

  119. elseif ($alias) {

    120. 

  120. 	$alias = $modx->stripAlias($alias);

    121. 

  121. }

    122. 

  122. 

    123. 

  123. // determine published status

    124. 

  124. $currentdate = time();

    125. 

  125. 

    126. 

  126. if (empty ($pub_date)) {

    127. 

  127. 	$pub_date = 0;

    128. 

  128. } else {

    129. 

  129. 	$pub_date = $modx->toTimeStamp($pub_date);

    130. 

  130. 

    131. 

  131. 	if ($pub_date < $currentdate) {

    132. 

  132. 		$published = 1;

    133. 

  133. 	}

    134. 

  134. 	elseif ($pub_date > $currentdate) {

    135. 

  135. 		$published = 0;

    136. 

  136. 	}

    137. 

  137. }

    138. 

  138. 

    139. 

  139. if (empty ($unpub_date)) {

    140. 

  140. 	$unpub_date = 0;

    141. 

  141. } else {

    142. 

  142. 	$unpub_date = $modx->toTimeStamp($unpub_date);

    143. 

  143. 	if ($unpub_date < $currentdate) {

    144. 

  144. 		$published = 0;

    145. 

  145. 	}

    146. 

  146. }

    147. 

  147. 

    148. 

  148. // get document groups for current user

    149. 

  149. $tmplvars = array ();

    150. 

  150. if ($_SESSION['mgrDocgroups']) {

    151. 

  151. 	$docgrp = implode(",", $_SESSION['mgrDocgroups']);

    152. 

  152. }

    153. 

  153. 

    154. 

  154. // ensure that user has not made this document inaccessible to themselves

    155. 

  155. if($_SESSION['mgrRole'] != 1 && is_array($document_groups)) {

    156. 

  156. 	$document_group_list = implode(',', $document_groups);

    157. 

  157. 	$document_group_list = implode(',', array_filter(explode(',',$document_group_list), 'is_numeric'));

    158. 

  158. 	if(!empty($document_group_list)) {

    159. 

  159. 		$sql = "SELECT COUNT(mg.id) FROM {$tbl_membergroup_access} mga, {$tbl_member_groups} mg

    160. 

  160.  WHERE mga.membergroup = mg.user_group

    161. 

  161.  AND mga.documentgroup IN({$document_group_list})

    162. 

  162.  AND mg.member = {$_SESSION['mgrInternalKey']};";

    163. 

  163. 		$rs = $modx->db->query($sql);

    164. 

  164. 		$count = $modx->db->getValue($rs);

    165. 

  165. 		if($count == 0) {

    166. 

  166. 			if ($actionToTake == 'edit') {

    167. 

  167. 				$modx->manager->saveFormValues(27);

    168. 

  168. 				$url = "index.php?a=27&id=" . $id;

    169. 

  169. 				include_once "header.inc.php";

    170. 

  170. 				$modx->webAlert(sprintf($_lang["resource_permissions_error"]), $url);

    171. 

  171. 				include_once "footer.inc.php";

    172. 

  172. 				exit;

    173. 

  173. 			} else {

    174. 

  174. 				$modx->manager->saveFormValues(4);

    175. 

  175. 				$url = "index.php?a=4";

    176. 

  176. 				include_once "header.inc.php";

    177. 

  177. 				$modx->webAlert(sprintf($_lang["resource_permissions_error"]), $url);

    178. 

  178. 				include_once "footer.inc.php";

    179. 

  179. 				exit;

    180. 

  180. 			}

    181. 

  181. 		}

    182. 

  182. 	}

    183. 

  183. }

    184. 

  184. 

    185. 

  185. $sql = "SELECT DISTINCT tv.*, IF(tvc.value!='',tvc.value,tv.default_text) as value ";

    186. 

  186. $sql .= "FROM $tbl_site_tmplvars AS tv ";

    187. 

  187. $sql .= "INNER JOIN $tbl_site_tmplvar_templates AS tvtpl ON tvtpl.tmplvarid = tv.id ";

    188. 

  188. $sql .= "LEFT JOIN $tbl_site_tmplvar_contentvalues AS tvc ON tvc.tmplvarid=tv.id AND tvc.contentid = '$id' ";

    189. 

  189. $sql .= "LEFT JOIN $tbl_site_tmplvar_access tva ON tva.tmplvarid=tv.id  ";

    190. 

  190. $sql .= "WHERE tvtpl.templateid = '" . $template . "' AND (1='" . $_SESSION['mgrRole'] . "' OR ISNULL(tva.documentgroup)" . ((!$docgrp) ? "" : " OR tva.documentgroup IN ($docgrp)") . ") ORDER BY tv.rank;";

    191. 

  191. $rs = $modx->db->query($sql);

    192. 

  192. while ($row = $modx->db->getRow($rs)) {

    193. 

  193. 	$tmplvar = '';

    194. 

  194. 	switch ($row['type']) {

    195. 

  195. 		case 'url':

    196. 

  196. 			$tmplvar = $_POST["tv" . $row['id']];

    197. 

  197. 			if ($_POST["tv" . $row['id'] . '_prefix'] != '--') {

    198. 

  198. 				$tmplvar = str_replace(array (

    199. 

  199. 					"feed://",

    200. 

  200. 					"ftp://",

    201. 

  201. 					"http://",

    202. 

  202. 					"https://",

    203. 

  203. 					"mailto:"

    204. 

  204. 				), "", $tmplvar);

    205. 

  205. 				$tmplvar = $_POST["tv" . $row['id'] . '_prefix'] . $tmplvar;

    206. 

  206. 			}

    207. 

  207. 		break;

    208. 

  208. 		case 'file':

    209. 

  209. 			$tmplvar = $_POST["tv" . $row['id']];

    210. 

  210. 		break;

    211. 

  211. 		default:

    212. 

  212. 			if (is_array($_POST["tv" . $row['id']])) {

    213. 

  213. 				// handles checkboxes & multiple selects elements

    214. 

  214. 				$feature_insert = array ();

    215. 

  215. 				$lst = $_POST["tv" . $row['id']];

    216. 

  216. 				while (list ($featureValue, $feature_item) = each($lst)) {

    217. 

  217. 					$feature_insert[count($feature_insert)] = $feature_item;

    218. 

  218. 				}

    219. 

  219. 				$tmplvar = implode("||", $feature_insert);

    220. 

  220. 			} else {

    221. 

  221. 				$tmplvar = $_POST["tv" . $row['id']];

    222. 

  222. 			}

    223. 

  223. 		break;

    224. 

  224. 	}

    225. 

  225. 	// save value if it was modified

    226. 

  226. 	if (strlen($tmplvar) > 0 && $tmplvar != $row['default_text']) {

    227. 

  227. 		$tmplvars[$row['id']] = array (

    228. 

  228. 			$row['id'],

    229. 

  229. 			$tmplvar

    230. 

  230. 		);

    231. 

  231. 	} else {

    232. 

  232. 		// Mark the variable for deletion

    233. 

  233. 		$tmplvars[$row['name']] = $row['id'];

    234. 

  234. 	}

    235. 

  235. }

    236. 

  236. 

    237. 

  237. // get the document, but only if it already exists

    238. 

  238. if ($actionToTake != "new") {

    239. 

  239. 	$rs = $modx->db->select('*', $tbl_site_content, 'id='.$id);

    240. 

  240. 	$limit = $modx->db->getRecordCount($rs);

    241. 

  241. 	if ($limit > 1) {

    242. 

  242. 		$e->setError(6);

    243. 

  243. 		$e->dumpError();

    244. 

  244. 	}

    245. 

  245. 	if ($limit < 1) {

    246. 

  246. 		$e->setError(7);

    247. 

  247. 		$e->dumpError();

    248. 

  248. 	}

    249. 

  249. 	$existingDocument = $modx->db->getRow($rs);

    250. 

  250. }

    251. 

  251. 

    252. 

  252. // check to see if the user is allowed to save the document in the place he wants to save it in

    253. 

  253. if ($use_udperms == 1) {

    254. 

  254. 	if ($existingDocument['parent'] != $parent) {

    255. 

  255. 		include_once "./processors/user_documents_permissions.class.php";

    256. 

  256. 		$udperms = new udperms();

    257. 

  257. 		$udperms->user = $modx->getLoginUserID();

    258. 

  258. 		$udperms->document = $parent;

    259. 

  259. 		$udperms->role = $_SESSION['mgrRole'];

    260. 

  260. 

    261. 

  261. 		if (!$udperms->checkPermissions()) {

    262. 

  262. 			if ($actionToTake == 'edit') {

    263. 

  263. 				$modx->manager->saveFormValues(27);

    264. 

  264. 				$url = "index.php?a=27&id=" . $id;

    265. 

  265. 				include_once "header.inc.php";

    266. 

  266. 				$modx->webAlert(sprintf($_lang['access_permission_parent_denied'], $docid, $alias), $url);

    267. 

  267. 				include_once "footer.inc.php";

    268. 

  268. 				exit;

    269. 

  269. 			} else {

    270. 

  270. 				$modx->manager->saveFormValues(4);

    271. 

  271. 				$url = "index.php?a=4";

    272. 

  272. 				include_once "header.inc.php";

    273. 

  273. 				$modx->webAlert(sprintf($_lang['access_permission_parent_denied'], $docid, $alias), $url);

    274. 

  274. 				include_once "footer.inc.php";

    275. 

  275. 				exit;

    276. 

  276. 			}

    277. 

  277. 		}

    278. 

  278. 	}

    279. 

  279. }

    280. 

  280. 

    281. 

  281. switch ($actionToTake) {

    282. 

  282. 	case 'new' :

    283. 

  283. 

    284. 

  284. 		// invoke OnBeforeDocFormSave event

    285. 

  285. 		$modx->invokeEvent("OnBeforeDocFormSave", array (

    286. 

  286. 			"mode" => "new",

    287. 

  287. 			"id" => $id

    288. 

  288. 		));

    289. 

  289. 

    290. 

  290. 		// deny publishing if not permitted

    291. 

  291. 		if (!$modx->hasPermission('publish_document')) {

    292. 

  292. 			$pub_date = 0;

    293. 

  293. 			$unpub_date = 0;

    294. 

  294. 			$published = 0;

    295. 

  295. 		}

    296. 

  296. 

    297. 

  297. 		$publishedon = ($published ? time() : 0);

    298. 

  298. 		$publishedby = ($published ? $modx->getLoginUserID() : 0);

    299. 

  299. 

    300. 

  300. 		//$sql = "INSERT INTO $tbl_site_content (introtext,content, pagetitle, longtitle, type, description, alias, link_attributes, isfolder, richtext, published, parent, template, menuindex, searchable, cacheable, createdby, createdon, editedby, editedon, publishedby, publishedon, pub_date, unpub_date, contentType, content_dispo, donthit, menutitle, hidemenu)

    301. 

  301. 		//				VALUES('" . $introtext . "','" . $content . "', '" . $pagetitle . "', '" . $longtitle . "', '" . $type . "', '" . $description . "', '" . $alias . "', '" . $link_attributes . "', '" . $isfolder . "', '" . $richtext . "', '" . $published . "', '" . $parent . "', '" . $template . "', '" . $menuindex . "', '" . $searchable . "', '" . $cacheable . "', '" . $modx->getLoginUserID() . "', " . time() . ", '" . $modx->getLoginUserID() . "', " . time() . ", " . $publishedby . ", " . $publishedon . ", '$pub_date', '$unpub_date', '$contentType', '$contentdispo', '$donthit', '$menutitle', '$hidemenu')";

    302. 

  302. $sql = "INSERT INTO $tbl_site_content (introtext,content, pagetitle, longtitle, type, description, alias, link_attributes, isfolder, richtext, published, parent, template, menuindex, searchable, cacheable, createdby, createdon, editedby, editedon, publishedby, publishedon, pub_date, unpub_date, contentType, content_dispo, donthit, menutitle, hidemenu, alias_visible) VALUES('" . $introtext . "','" . $content . "', '" . $pagetitle . "', '" . $longtitle . "', '" . $type . "', '" . $description . "', '" . $alias . "', '" . $link_attributes . "', '" . $isfolder . "', '" . $richtext . "', '" . $published . "', '" . $parent . "', '" . $template . "', '" . $menuindex . "', '" . $searchable . "', '" . $cacheable . "', '" . $modx->getLoginUserID() . "', " . time() . ", '" . $modx->getLoginUserID() . "', " . time() . ", " . $publishedby . ", " . $publishedon . ", '$pub_date', '$unpub_date', '$contentType', '$contentdispo', '$donthit', '$menutitle', '$hidemenu', '$aliasvisible')";

    303. 

  303. 

    304. 

  304. 		$rs = $modx->db->query($sql);

    305. 

  305. 		if (!$rs) {

    306. 

  306. 			$modx->manager->saveFormValues(27);

    307. 

  307. 			echo "An error occured while attempting to save the new document: " . $modx->db->getLastError();

    308. 

  308. 			exit;

    309. 

  309. 		}

    310. 

  310. 

    311. 

  311. 		if (!$key = $modx->db->getInsertId()) {

    312. 

  312. 			$modx->manager->saveFormValues(27);

    313. 

  313. 			echo "Couldn't get last insert key!";

    314. 

  314. 			exit;

    315. 

  315. 		}

    316. 

  316. 

    317. 

  317. 		$tvChanges = array();

    318. 

  318. 		foreach ($tmplvars as $field => $value) {

    319. 

  319. 			if (is_array($value)) {

    320. 

  320. 				$tvId = $value[0];

    321. 

  321. 				$tvVal = $value[1];

    322. 

  322. 				$tvChanges[] = array('tmplvarid' => $tvId, 'contentid' => $key, 'value' => $modx->db->escape($tvVal));

    323. 

  323. 			}

    324. 

  324. 		}

    325. 

  325. 		if (!empty($tvChanges)) {

    326. 

  326. 			foreach ($tvChanges as $tv) {

    327. 

  327. 				$rs = $modx->db->insert($tv, $tbl_site_tmplvar_contentvalues);

    328. 

  328. 			}

    329. 

  329. 		}

    330. 

  330. 

    331. 

  331. 		// document access permissions

    332. 

  332. 		$docgrp_save_attempt = false;

    333. 

  333. 		if ($use_udperms == 1 && is_array($document_groups)) {

    334. 

  334. 			$new_groups = array();

    335. 

  335. 			foreach ($document_groups as $value_pair) {

    336. 

  336. 				// first, split the pair (this is a new document, so ignore the second value

    337. 

  337. 				list($group) = explode(',', $value_pair); // @see manager/actions/mutate_content.dynamic.php @ line 1138 (permissions list)

    338. 

  338. 				$new_groups[] = '('.(int)$group.','.$key.')';

    339. 

  339. 			}

    340. 

  340. 			$saved = true;

    341. 

  341. 			if (!empty($new_groups)) {

    342. 

  342. 				$sql = 'INSERT INTO '.$tbl_document_groups.' (document_group, document) VALUES '. implode(',', $new_groups);

    343. 

  343. 				$saved = $modx->db->query($sql) ? $saved : false;

    344. 

  344. 				$docgrp_save_attempt = true;

    345. 

  345. 			}

    346. 

  346. 		} else {

    347. 

  347. 			$isManager = $modx->hasPermission('access_permissions');

    348. 

  348. 			$isWeb     = $modx->hasPermission('web_access_permissions');

    349. 

  349. 			if($use_udperms && !($isManager || $isWeb) && $parent != 0) {

    350. 

  350. 				// inherit document access permissions

    351. 

  351. 				$sql = "INSERT INTO $tbl_document_groups (document_group, document) SELECT document_group, $key FROM $tbl_document_groups WHERE document = $parent";

    352. 

  352. 				$saved = $modx->db->query($sql);

    353. 

  353. 				$docgrp_save_attempt = true;

    354. 

  354. 			}

    355. 

  355. 		}

    356. 

  356. 		if ($docgrp_save_attempt && !$saved) {

    357. 

  357. 			$modx->manager->saveFormValues(27);

    358. 

  358. 			echo "An error occured while attempting to add the document to a document_group.";

    359. 

  359. 			exit;

    360. 

  360. 		}

    361. 

  361. 

    362. 

  362. 

    363. 

  363. 		// update parent folder status

    364. 

  364. 		if ($parent != 0) {

    365. 

  365. 			$fields = array('isfolder' => 1);

    366. 

  366. 			$rs = $modx->db->update($fields, $tbl_site_content, 'id='.$_REQUEST['parent']);

    367. 

  367. 			if (!$rs) {

    368. 

  368. 				echo "An error occured while attempting to change the document's parent to a folder.";

    369. 

  369. 			}

    370. 

  370. 		}

    371. 

  371. 

    372. 

  372. 		// save META Keywords

    373. 

  373. 		saveMETAKeywords($key);

    374. 

  374. 

    375. 

  375. 		// invoke OnDocFormSave event

    376. 

  376. 		$modx->invokeEvent("OnDocFormSave", array (

    377. 

  377. 			"mode" => "new",

    378. 

  378. 			"id" => $key

    379. 

  379. 		));

    380. 

  380. 

    381. 

  381. 		// secure web documents - flag as private

    382. 

  382. 		include $base_path . "manager/includes/secure_web_documents.inc.php";

    383. 

  383. 		secureWebDocument($key);

    384. 

  384. 

    385. 

  385. 		// secure manager documents - flag as private

    386. 

  386. 		include $base_path . "manager/includes/secure_mgr_documents.inc.php";

    387. 

  387. 		secureMgrDocument($key);

    388. 

  388. 

    389. 

  389. 		if ($syncsite == 1) {

    390. 

  390. 			// empty cache

    391. 

  391. 			include_once "cache_sync.class.processor.php";

    392. 

  392. 			$sync = new synccache();

    393. 

  393. 			$sync->setCachepath("../assets/cache/");

    394. 

  394. 			$sync->setReport(false);

    395. 

  395. 			$sync->emptyCache();

    396. 

  396. 		}

    397. 

  397. 

    398. 

  398. 		// redirect/stay options

    399. 

  399. 		if ($_POST['stay'] != '') {

    400. 

  400. 			// weblink

    401. 

  401. 			if ($_POST['mode'] == "72")

    402. 

  402. 				$a = ($_POST['stay'] == '2') ? "27&id=$key" : "72&pid=$parent";

    403. 

  403. 			// document

    404. 

  404. 			if ($_POST['mode'] == "4")

    405. 

  405. 				$a = ($_POST['stay'] == '2') ? "27&id=$key" : "4&pid=$parent";

    406. 

  406. 			$header = "Location: index.php?a=" . $a . "&r=1&stay=" . $_POST['stay'];

    407. 

  407. 		} else {

    408. 

  408. 			$header = "Location: index.php?r=1&id=$id&a=7&dv=1";

    409. 

  409. 		}

    410. 

  410. 		header($header);

    411. 

  411. 

    412. 

  412. 		break;

    413. 

  413. 	case 'edit' :

    414. 

  414. 

    415. 

  415. 		// get the document's current parent

    416. 

  416. 		$rs = $modx->db->select('parent', $tbl_site_content, 'id='.$_REQUEST['id']);

    417. 

  417. 		if (!$rs) {

    418. 

  418. 			$modx->manager->saveFormValues(27);

    419. 

  419. 			echo "An error occured while attempting to find the document's current parent.";

    420. 

  420. 			exit;

    421. 

  421. 		}

    422. 

  422. 		

    423. 

  423. 		$row = $modx->db->getRow($rs);

    424. 

  424. 		$oldparent = $row['parent'];

    425. 

  425. 		$doctype = $row['type'];

    426. 

  426. 

    427. 

  427. 		if ($id == $site_start && $published == 0) {

    428. 

  428. 			$modx->manager->saveFormValues(27);

    429. 

  429. 			echo "Document is linked to site_start variable and cannot be unpublished!";

    430. 

  430. 			exit;

    431. 

  431. 		}

    432. 

  432. 		if ($id == $site_start && ($pub_date != "0" || $unpub_date != "0")) {

    433. 

  433. 			$modx->manager->saveFormValues(27);

    434. 

  434. 			echo "Document is linked to site_start variable and cannot have publish or unpublish dates set!";

    435. 

  435. 			exit;

    436. 

  436. 		}

    437. 

  437. 		if ($parent == $id) {

    438. 

  438. 			$modx->manager->saveFormValues(27);

    439. 

  439. 			echo "Document can not be it's own parent!";

    440. 

  440. 			exit;

    441. 

  441. 		}

    442. 

  442. 		// check to see document is a folder

    443. 

  443. 		$rs = $modx->db->select('COUNT(id)', $tbl_site_content, 'parent='. $_REQUEST['id']);

    444. 

  444. 		if (!$rs) {

    445. 

  445. 			$modx->manager->saveFormValues(27);

    446. 

  446. 			echo "An error occured while attempting to find the document's children.";

    447. 

  447. 			exit;

    448. 

  448. 		}

    449. 

  449. 		$row = $modx->db->getRow($rs);

    450. 

  450. 		if ($row['COUNT(id)'] > 0) {

    451. 

  451. 			$isfolder = 1;

    452. 

  452. 		}

    453. 

  453. 

    454. 

  454. 		// set publishedon and publishedby

    455. 

  455. 		$was_published = $modx->db->getValue("SELECT published FROM $tbl_site_content WHERE id='$id'");

    456. 

  456. 

    457. 

  457. 		// keep original publish state, if change is not permitted

    458. 

  458. 		if (!$modx->hasPermission('publish_document')) {

    459. 

  459. 			$published = $was_published;

    460. 

  460. 			$pub_date = 'pub_date';

    461. 

  461. 			$unpub_date = 'unpub_date';

    462. 

  462. 		}

    463. 

  463. 

    464. 

  464. 		// if it was changed from unpublished to published

    465. 

  465. 		if (!$was_published && $published) {

    466. 

  466. 			$publishedon = time();

    467. 

  467. 			$publishedby = $modx->getLoginUserID();

    468. 

  468. 		}

    469. 

  469. 		elseif ($was_published && !$published) {

    470. 

  470. 			$publishedon = 0;

    471. 

  471. 			$publishedby = 0;

    472. 

  472. 		} else {

    473. 

  473. 			$publishedon = 'publishedon';

    474. 

  474. 			$publishedby = 'publishedby';

    475. 

  475. 		}

    476. 

  476. 

    477. 

  477. 		// invoke OnBeforeDocFormSave event

    478. 

  478. 		$modx->invokeEvent("OnBeforeDocFormSave", array (

    479. 

  479. 			"mode" => "upd",

    480. 

  480. 			"id" => $id

    481. 

  481. 		));

    482. 

  482. 

    483. 

  483. 		// update the document

    484. 

  484. 		//$sql = "UPDATE $tbl_site_content SET introtext='$introtext', content='$content', pagetitle='$pagetitle', longtitle='$longtitle', type='$type', description='$description', alias='$alias', link_attributes='$link_attributes',

    485. 

  485. 		//		isfolder=$isfolder, richtext=$richtext, published=$published, pub_date=$pub_date, unpub_date=$unpub_date, parent=$parent, template=$template, menuindex='$menuindex',

    486. 

  486. 		//		searchable=$searchable, cacheable=$cacheable, editedby=" . $modx->getLoginUserID() . ", editedon=" . time() . ", publishedon=$publishedon, publishedby=$publishedby, contentType='$contentType', content_dispo='$contentdispo', donthit='$donthit', menutitle='$menutitle', hidemenu='$hidemenu'  WHERE id=$id;";

    487. 

  487. $sql = "UPDATE $tbl_site_content SET introtext='$introtext', content='$content', pagetitle='$pagetitle', longtitle='$longtitle', type='$type', description='$description', alias='$alias', link_attributes='$link_attributes', isfolder=$isfolder, richtext=$richtext, published=$published, pub_date=$pub_date, unpub_date=$unpub_date, parent=$parent, template=$template, menuindex='$menuindex', searchable=$searchable, cacheable=$cacheable, editedby=" . $modx->getLoginUserID() . ", editedon=" . time() . ", publishedon=$publishedon, publishedby=$publishedby, contentType='$contentType', content_dispo='$contentdispo', donthit='$donthit', menutitle='$menutitle', hidemenu='$hidemenu', alias_visible='$aliasvisible' WHERE id=$id;";

    488. 

  488. 

    489. 

  489. 		$rs = $modx->db->query($sql);

    490. 

  490. 		if (!$rs) {

    491. 

  491. 			echo "An error occured while attempting to save the edited document. The generated SQL is: <i> $sql </i>.";

    492. 

  492. 		}

    493. 

  493. 

    494. 

  494. 		// update template variables

    495. 

  495. 		$rs = $modx->db->select('id, tmplvarid', $tbl_site_tmplvar_contentvalues, 'contentid='. $id);

    496. 

  496. 		$tvIds = array ();

    497. 

  497. 		while ($row = $modx->db->getRow($rs)) {

    498. 

  498. 			$tvIds[$row['tmplvarid']] = $row['id'];

    499. 

  499. 		}

    500. 

  500. 		$tvDeletions = array();

    501. 

  501. 		$tvChanges = array();

    502. 

  502. 		foreach ($tmplvars as $field => $value) {

    503. 

  503. 			if (!is_array($value)) {

    504. 

  504. 				if (isset($tvIds[$value])) $tvDeletions[] = $tvIds[$value];

    505. 

  505. 			} else {

    506. 

  506. 				$tvId = $value[0];

    507. 

  507. 				$tvVal = $value[1];

    508. 

  508. 

    509. 

  509. 				if (isset($tvIds[$tvId])) {

    510. 

  510. 					$tvChanges[] = array(array('tmplvarid' => $tvId, 'contentid' => $id, 'value' => $modx->db->escape($tvVal)), array('id' => $tvIds[$tvId]));

    511. 

  511. 				} else {

    512. 

  512. 					$tvAdded[] = array('tmplvarid' => $tvId, 'contentid' => $id, 'value' => $modx->db->escape($tvVal));

    513. 

  513. 				}

    514. 

  514. 			}

    515. 

  515. 		}

    516. 

  516. 

    517. 

  517. 		if (!empty($tvDeletions)) {

    518. 

  518. 			$rs = $modx->db->delete($tbl_site_tmplvar_contentvalues, 'id IN('.implode(',', $tvDeletions).')');

    519. 

  519. 		}

    520. 

  520. 			

    521. 

  521. 		if (!empty($tvAdded)) {

    522. 

  522. 			foreach ($tvAdded as $tv) {

    523. 

  523. 				$rs = $modx->db->insert($tv, $tbl_site_tmplvar_contentvalues);

    524. 

  524. 			}

    525. 

  525. 		}

    526. 

  526. 		

    527. 

  527. 		if (!empty($tvChanges)) {

    528. 

  528. 			foreach ($tvChanges as $tv) {

    529. 

  529. 				$rs = $modx->db->update($tv[0], $tbl_site_tmplvar_contentvalues, 'id='.$tv[1]['id']);

    530. 

  530. 			}

    531. 

  531. 		}

    532. 

  532. 

    533. 

  533. 		// set document permissions

    534. 

  534. 		if ($use_udperms == 1 && is_array($document_groups)) {

    535. 

  535. 			$new_groups = array();

    536. 

  536. 			// process the new input

    537. 

  537. 			foreach ($document_groups as $value_pair) {

    538. 

  538. 				list($group, $link_id) = explode(',', $value_pair); // @see manager/actions/mutate_content.dynamic.php @ line 1138 (permissions list)

    539. 

  539. 				$new_groups[$group] = $link_id;

    540. 

  540. 			}

    541. 

  541. 

    542. 

  542. 			// grab the current set of permissions on this document the user can access

    543. 

  543. 			$isManager = $modx->hasPermission('access_permissions');

    544. 

  544. 			$isWeb     = $modx->hasPermission('web_access_permissions');

    545. 

  545. 			$sql = 'SELECT groups.id, groups.document_group FROM '.$tbl_document_groups.' AS groups '.

    546. 

  546. 			       'LEFT JOIN '.$tbl_documentgroup_names.' AS dgn ON dgn.id = groups.document_group '.

    547. 

  547. 			       'WHERE ((1='.(int)$isManager.' AND dgn.private_memgroup) '.

    548. 

  548. 			       'OR    (1='.(int)$isWeb.' AND dgn.private_webgroup))'.

    549. 

  549. 			       'AND groups.document = '.$id;

    550. 

  550. 			$rs = $modx->db->query($sql);

    551. 

  551. 			$old_groups = array();

    552. 

  552. 			while ($row = $modx->db->getRow($rs)) $old_groups[$row['document_group']] = $row['id'];

    553. 

  553. 

    554. 

  554. 			// update the permissions in the database

    555. 

  555. 			$insertions = $deletions = array();

    556. 

  556. 			foreach ($new_groups as $group => $link_id) {

    557. 

  557. 				if (array_key_exists($group, $old_groups)) {

    558. 

  558. 					unset($old_groups[$group]);

    559. 

  559. 					continue;

    560. 

  560. 				} elseif ($link_id == 'new') {

    561. 

  561. 					$insertions[] = '('.(int)$group.','.$id.')';

    562. 

  562. 				}

    563. 

  563. 			}

    564. 

  564. 			$saved = true;

    565. 

  565. 			if (!empty($insertions)) {

    566. 

  566. 				$sql_insert = 'INSERT INTO '.$tbl_document_groups.' (document_group, document) VALUES '.implode(',', $insertions);

    567. 

  567. 				$saved = $modx->db->query($sql_insert) ? $saved : false;

    568. 

  568. 			}

    569. 

  569. 			if (!empty($old_groups)) {

    570. 

  570. 				$sql_delete = 'DELETE FROM '.$tbl_document_groups.' WHERE id IN ('.implode(',', $old_groups).')';

    571. 

  571. 				$saved = $modx->db->query($sql_delete) ? $saved : false;

    572. 

  572. 			}

    573. 

  573. 			// necessary to remove all permissions as document is public

    574. 

  574. 			if ((isset($_POST['chkalldocs']) && $_POST['chkalldocs'] == 'on')) {

    575. 

  575. 				$sql_delete = 'DELETE FROM '.$tbl_document_groups.' WHERE document='.$id;

    576. 

  576. 				$saved = $modx->db->query($sql_delete) ? $saved : false;

    577. 

  577. 			}

    578. 

  578. 			if (!$saved) {

    579. 

  579. 				$modx->manager->saveFormValues(27);

    580. 

  580. 				echo "An error occured while saving document groups.";

    581. 

  581. 				exit;

    582. 

  582. 			}

    583. 

  583. 		}

    584. 

  584. 

    585. 

  585. 		// do the parent stuff

    586. 

  586. 		if ($parent != 0) {

    587. 

  587. 			$fields = array('isfolder' => 1);

    588. 

  588. 			$rs = $modx->db->update($fields, $tbl_site_content, 'id='.$_REQUEST['parent']);

    589. 

  589. 			if (!$rs) {

    590. 

  590. 				echo "An error occured while attempting to change the new parent to a folder.";

    591. 

  591. 			}

    592. 

  592. 		}

    593. 

  593. 

    594. 

  594. 		// finished moving the document, now check to see if the old_parent should no longer be a folder

    595. 

  595. 		$rs = $modx->db->select('COUNT(id)', $tbl_site_content, 'parent='.$oldparent);

    596. 

  596. 		if (!$rs) {

    597. 

  597. 			echo "An error occured while attempting to find the old parents' children.";

    598. 

  598. 		}

    599. 

  599. 		$row = $modx->db->getRow($rs);

    600. 

  600. 		$limit = $row['COUNT(id)'];

    601. 

  601. 

    602. 

  602. 		if ($limit == 0) {

    603. 

  603. 			$fields = array('isfolder' => 0);

    604. 

  604. 			$rs = $modx->db->update($fields, $tbl_site_content, 'id='.$oldparent);

    605. 

  605. 			if (!$rs) {

    606. 

  606. 				echo "An error occured while attempting to change the old parent to a regular document.";

    607. 

  607. 			}

    608. 

  608. 		}

    609. 

  609. 

    610. 

  610. 		// save META Keywords

    611. 

  611. 		saveMETAKeywords($id);

    612. 

  612. 

    613. 

  613. 		// invoke OnDocFormSave event

    614. 

  614. 		$modx->invokeEvent("OnDocFormSave", array (

    615. 

  615. 			"mode" => "upd",

    616. 

  616. 			"id" => $id

    617. 

  617. 		));

    618. 

  618. 

    619. 

  619. 		// secure web documents - flag as private

    620. 

  620. 		include $base_path . "manager/includes/secure_web_documents.inc.php";

    621. 

  621. 		secureWebDocument($id);

    622. 

  622. 

    623. 

  623. 		// secure manager documents - flag as private

    624. 

  624. 		include $base_path . "manager/includes/secure_mgr_documents.inc.php";

    625. 

  625. 		secureMgrDocument($id);

    626. 

  626. 

    627. 

  627. 		if ($syncsite == 1) {

    628. 

  628. 			// empty cache

    629. 

  629. 			include_once "cache_sync.class.processor.php";

    630. 

  630. 			$sync = new synccache();

    631. 

  631. 			$sync->setCachepath("../assets/cache/");

    632. 

  632. 			$sync->setReport(false);

    633. 

  633. 			$sync->emptyCache();

    634. 

  634. 		}

    635. 

  635. 		

    636. 

  636. 		if ($_POST['refresh_preview'] == '1')

    637. 

  637. 			$header = "Location: ../index.php?id=$id&z=manprev";

    638. 

  638. 		else {

    639. 

  639. 			if ($_POST['stay'] != '') {

    640. 

  640. 				$id = $_REQUEST['id'];

    641. 

  641. 				if ($type == "reference") {

    642. 

  642. 					// weblink

    643. 

  643. 					$a = ($_POST['stay'] == '2') ? "27&id=$id" : "72&pid=$parent";

    644. 

  644. 				} else {

    645. 

  645. 					// document

    646. 

  646. 					$a = ($_POST['stay'] == '2') ? "27&id=$id" : "4&pid=$parent";

    647. 

  647. 				}

    648. 

  648. 				$header = "Location: index.php?a=" . $a . "&r=1&stay=" . $_POST['stay'];

    649. 

  649. 			} else {

    650. 

  650. 				$header = "Location: index.php?r=1&id=$id&a=7&dv=1";

    651. 

  651. 			}

    652. 

  652. 		}

    653. 

  653. 		header($header);

    654. 

  654. 		break;

    655. 

  655. 	default :

    656. 

  656. 		header("Location: index.php?a=7");

    657. 

  657. 		exit;

    658. 

  658. }

    659. 

  659. 

    660. 

  660. /**

    661. 

  661.  * Format alias to be URL-safe

    662. 

  662.  *

    663. 

  663.  * @deprecated Use $modx->stripAlias()

    664. 

  664.  * @param string Alias to be formatted

    665. 

  665.  * @return string Safe alias

    666. 

  666.  */

    667. 

  667. function stripAlias($alias) {

    668. 

  668.    return $GLOBALS['modx']->stripAlias($alias);

    669. 

  669. }

    670. 

  670. 

    671. 

  671. // -- Save META Keywords --

    672. 

  672. function saveMETAKeywords($id) {

    673. 

  673. 	global $modx, $keywords, $metatags,

    674. 

  674. 	       $tbl_keyword_xref,

    675. 

  675. 	       $tbl_site_content,

    676. 

  676. 	       $tbl_site_content_metatags;

    677. 

  677. 

    678. 

  678. 	if ($modx->hasPermission('edit_doc_metatags')) {

    679. 

  679. 		// keywords - remove old keywords first

    680. 

  680. 		$modx->db->delete($tbl_keyword_xref, "content_id=$id");

    681. 

  681. 		for ($i = 0; $i < count($keywords); $i++) {

    682. 

  682. 			$kwid = $keywords[$i];

    683. 

  683. 			$flds = array (

    684. 

  684. 				'content_id' => $id,

    685. 

  685. 				'keyword_id' => $kwid

    686. 

  686. 			);

    687. 

  687. 			$modx->db->insert($flds, $tbl_keyword_xref);

    688. 

  688. 		}

    689. 

  689. 		// meta tags - remove old tags first

    690. 

  690. 		$modx->db->delete($tbl_site_content_metatags, "content_id=$id");

    691. 

  691. 		for ($i = 0; $i < count($metatags); $i++) {

    692. 

  692. 			$kwid = $metatags[$i];

    693. 

  693. 			$flds = array (

    694. 

  694. 				'content_id' => $id,

    695. 

  695. 				'metatag_id' => $kwid

    696. 

  696. 			);

    697. 

  697. 			$modx->db->insert($flds, $tbl_site_content_metatags);

    698. 

  698. 		}

    699. 

  699. 		$flds = array (

    700. 

  700. 			'haskeywords' => (count($keywords) ? 1 : 0),

    701. 

  701. 			'hasmetatags' => (count($metatags) ? 1 : 0)

    702. 

  702. 		);

    703. 

  703. 		$modx->db->update($flds, $tbl_site_content, "id=$id");

    704. 

  704. 	}

    705. 

  705. }

    706. 

  706. 

    707. 

  707. ?>
    708.