PageRenderTime 60ms CodeModel.GetById 35ms RepoModel.GetById 1ms app.codeStats 0ms

/01.Source/01.CORE/modules/weblinks/admin/content.php

http://creative-portal.googlecode.com/
PHP | 238 lines | 216 code | 14 blank | 8 comment | 27 complexity | 1d9fc5754d6d8ea03484597c3b2b51d2 MD5 | raw file
Possible License(s): BSD-3-Clause 
    

  1. <?php

    2. 

  2. 

    3. 

  3. /**

    4. 

  4.  * @Project NUKEVIET 3.0

    5. 

  5.  * @Author VINADES.,JSC (contact@vinades.vn)

    6. 

  6.  * @Copyright (C) 2010 VINADES.,JSC. All rights reserved

    7. 

  7.  * @Createdate 2-9-2010 14:43

    8. 

  8.  */

    9. 

  9. if ( ! defined( 'NV_IS_FILE_ADMIN' ) ) die( 'Stop!!!' );

    10. 

  10. 

    11. 

  11. function check_url ( $id, $url )

    12. 

  12. {

    13. 

  13.     global $db, $module_data;

    14. 

  14.     $sql = "SELECT count(*) FROM `" . NV_PREFIXLANG . "_" . $module_data . "_rows` WHERE `id` != '" . $id . "' AND `url` = '" . $url . "'";

    15. 

  15.     list( $numurl ) = $db->sql_fetchrow( $db->sql_query( $sql ) );

    16. 

  16.     $msg = ( $numurl > 0 ) ? false : true;

    17. 

  17.     return $msg;

    18. 

  18. }

    19. 

  19. 

    20. 

  20. function check_title ( $title )

    21. 

  21. {

    22. 

  22.     global $db, $module_data;

    23. 

  23.     $sql = 'SELECT title FROM `' . NV_PREFIXLANG . '_' . $module_data . '_rows` WHERE title = "' . $title . '"';

    24. 

  24.     $numtitle = $db->sql_numrows( $db->sql_query( $sql ) );

    25. 

  25.     $msg = ( $numtitle > 0 ) ? false : true;

    26. 

  26.     return $msg;

    27. 

  27. }

    28. 

  28. 

    29. 

  29. $rowcat = array( 

    30. 

  30.     "id" => "", "catid" => "", "title" => "", "alias" => "", "url" => "", "urlimg" => "", "description" => "", "add_time" => "", "edit_time" => "", "hits_total" => "", "status" => 1 

    31. 

  31. );

    32. 

  32. 

    33. 

  33. $error = "";

    34. 

  34. $id = $nv_Request->get_int( 'id', 'post,get', 0 );

    35. 

  35. $submit = $nv_Request->get_string( 'submit', 'post' );

    36. 

  36. if ( ! empty( $submit ) )

    37. 

  37. {

    38. 

  38.     $error = 0;

    39. 

  39.     $catid = $nv_Request->get_int( 'catid', 'post', 0 );

    40. 

  40.     $title = filter_text_input( 'title', 'post', '', 1 );

    41. 

  41.     $alias = filter_text_input( 'alias', 'post', '', 1 );

    42. 

  42.     $parentid = $nv_Request->get_int( 'parentid', 'post', 0 );

    43. 

  43.     $alias = ( $alias == "" ) ? change_alias( $title ) : change_alias( $alias );

    44. 

  44.     $url = filter_text_input( 'url', 'post', '' );

    45. 

  45.     $image = filter_text_input( 'image', 'post', '' );

    46. 

  46.     if ( ! nv_is_url( $image ) and file_exists( NV_DOCUMENT_ROOT . $image ) )

    47. 

  47.     {

    48. 

  48.         $lu = strlen( NV_BASE_SITEURL . NV_UPLOADS_DIR . "/" );

    49. 

  49.         if ( substr( $image, 0, $lu ) == NV_BASE_SITEURL . NV_UPLOADS_DIR . "/" )

    50. 

  50.         {

    51. 

  51.             $image = substr( $image, $lu );

    52. 

  52.         }

    53. 

  53.     }

    54. 

  54.     $admin_phone = "";

    55. 

  55.     $admin_email = "";

    56. 

  56.     $note = "";

    57. 

  57.     $description = filter_text_textarea( 'description', '', NV_ALLOWED_HTML_TAGS );

    58. 

  58.     $description = ( defined( 'NV_EDITOR' ) ) ? nv_editor_nl2br( $description ) : nv_nl2br( $description, '<br />' );

    59. 

  59.     

    60. 

  60.     $status = ( $nv_Request->get_int( 'status', 'post' ) == 1 ) ? 1 : 0;

    61. 

  61.     //check url

    62. 

  62.     if ( empty( $url ) || ! nv_is_url( $url ) || ! check_url( $id, $url ) )

    63. 

  63.     {

    64. 

  64.         $error = $lang_module['error_url'];

    65. 

  65.     }

    66. 

  66.     elseif ( empty( $title ) )

    67. 

  67.     {

    68. 

  68.         $error = $lang_module['error_title'];

    69. 

  69.     }

    70. 

  70.     elseif ( strip_tags( $description ) == "" )

    71. 

  71.     {

    72. 

  72.         $error = $lang_module['error_description'];

    73. 

  73.     }

    74. 

  74.     else

    75. 

  75.     {

    76. 

  76.         if ( $id > 0 )

    77. 

  77.         {

    78. 

  78.             $query = "UPDATE `" . NV_PREFIXLANG . "_" . $module_data . "_rows` SET `catid`=" . $catid . ", `title`=" . $db->dbescape( $title ) . ", `alias` =  " . $db->dbescape( $alias ) . ", `url` =  " . $db->dbescape( $url ) . ", `urlimg` =  " . $db->dbescape( $image ) . ", `description`=" . $db->dbescape( $description ) . ", `edit_time` = UNIX_TIMESTAMP(), `status`=" . $status . " WHERE `id` =" . $id . "";

    79. 

  79.             $db->sql_query( $query );

    80. 

  80.             if ( $db->sql_affectedrows() > 0 )

    81. 

  81.             {

    82. 

  82.                 nv_insert_logs( NV_LANG_DATA, $module_name, 'log_edit_content', "id ".$id, $admin_info['userid'] );

    83. 

  83.             	Header( "Location: " . NV_BASE_ADMINURL . "index.php?" . NV_NAME_VARIABLE . "=" . $module_name . "" );

    84. 

  84.                 die();

    85. 

  85.             }

    86. 

  86.             else

    87. 

  87.             {

    88. 

  88.                 $error = $lang_module['errorsave'];

    89. 

  89.             }

    90. 

  90.             $db->sql_freeresult();

    91. 

  91.         }

    92. 

  92.         else

    93. 

  93.         {

    94. 

  94.             $query = "INSERT INTO `" . NV_PREFIXLANG . "_" . $module_data . "_rows` (`id`, `catid`, `title`, `alias`, `url`, `urlimg`, `admin_phone`, `admin_email`, `note`, `description`, `add_time`, `edit_time`, `hits_total`, `status`) 

    95. 

  95.             VALUES (NULL, '" . $catid . "', " . $db->dbescape( $title ) . ", " . $db->dbescape( $alias ) . ", " . $db->dbescape( $url ) . ", " . $db->dbescape( $image ) . ", '" . $admin_phone . "', '" . $admin_email . "', " . $db->dbescape( $note ) . ", " . $db->dbescape( $description ) . ", UNIX_TIMESTAMP(), UNIX_TIMESTAMP(), '0', " . $status . ")";

    96. 

  96.             

    97. 

  97.             if ( $db->sql_query_insert_id( $query ) )

    98. 

  98.             {

    99. 

  99.                 nv_insert_logs( NV_LANG_DATA, $module_name, 'log_add_content', " ", $admin_info['userid'] );

    100. 

  100.             	$db->sql_freeresult();

    101. 

  101.                 Header( "Location: " . NV_BASE_ADMINURL . "index.php?" . NV_NAME_VARIABLE . "=" . $module_name . "" );

    102. 

  102.                 die();

    103. 

  103.             }

    104. 

  104.             else

    105. 

  105.             {

    106. 

  106.                 $error = $lang_module['errorsave'];

    107. 

  107.             }

    108. 

  108.         }

    109. 

  109.     }

    110. 

  110.     $rowcat['id'] = $id;

    111. 

  111.     $rowcat['url'] = $url;

    112. 

  112.     $rowcat['title'] = $title;

    113. 

  113.     $rowcat['urlimg'] = $image;

    114. 

  114.     $rowcat['description'] = $description;

    115. 

  115. }

    116. 

  116. elseif ( $id > 0 )

    117. 

  117. {

    118. 

  118.     $query = $db->sql_query( "SELECT * FROM `" . NV_PREFIXLANG . "_" . $module_data . "_rows` WHERE `id`=" . $id . "" );

    119. 

  119.     $rowcat = $db->sql_fetchrow( $query );

    120. 

  120.     if ( $rowcat['id'] > 0 )

    121. 

  121.     {

    122. 

  122.         $page_title = $lang_module['weblink_edit_link'];

    123. 

  123.     }

    124. 

  124. }

    125. 

  125. 

    126. 

  126. if ( empty( $rowcat['id'] ) )

    127. 

  127. {

    128. 

  128.     $page_title = $lang_module['weblink_add_link'];

    129. 

  129. }

    130. 

  130. 

    131. 

  131. $rowcat['description'] = ( defined( 'NV_EDITOR' ) ) ? nv_editor_br2nl( $rowcat['description'] ) : nv_br2nl( $rowcat['description'] ); // dung de lay data tu CSDL

    132. 

  132. $rowcat['description'] = nv_htmlspecialchars( $rowcat['description'] ); // dung de dua vao editor

    133. 

  133. 

    134. 

  134. 

    135. 

  135. if ( ! empty( $rowcat['urlimg'] ) and ! nv_is_url( $rowcat['urlimg'] ) )

    136. 

  136. {

    137. 

  137.     $rowcat['urlimg'] = NV_BASE_SITEURL . NV_UPLOADS_DIR . "/" . $rowcat['urlimg'];

    138. 

  138. }

    139. 

  139. 

    140. 

  140. if ( defined( 'NV_EDITOR' ) )

    141. 

  141. {

    142. 

  142.     require_once ( NV_ROOTDIR . '/' . NV_EDITORSDIR . '/' . NV_EDITOR . '/nv.php' );

    143. 

  143. }

    144. 

  144. $contents = "";

    145. 

  145. if ( $error != "" )

    146. 

  146. {

    147. 

  147.     $contents .= "<div class=\"quote\" style=\"width:780px;\">\n";

    148. 

  148.     $contents .= "<blockquote class=\"error\"><span>" . $error . "</span></blockquote>\n";

    149. 

  149.     $contents .= "</div>\n";

    150. 

  150.     $contents .= "<div class=\"clear\"></div>\n";

    151. 

  151. }

    152. 

  152. $contents .= "<div id=\"list_mods\">";

    153. 

  153. 

    154. 

  154. $contents .= "<form action=\"" . NV_BASE_ADMINURL . "index.php\" method=\"post\">";

    155. 

  155. // post header parameter

    156. 

  156. $contents .= "<input type=\"hidden\" name =\"" . NV_NAME_VARIABLE . "\"value=\"" . $module_name . "\" />";

    157. 

  157. $contents .= "<input type=\"hidden\" name =\"" . NV_OP_VARIABLE . "\"value=\"" . $op . "\" />";

    158. 

  158. $contents .= "<input type=\"hidden\" name =\"id\" value=\"" . $id . "\" />";

    159. 

  159. $contents .= "<table class=\"tab2\" cellspacing=\"5\" cellpadding=\"5\">\n";

    160. 

  160. $contents .= "<tr>";

    161. 

  161. $contents .= "<td align=\"right\" style=\"width: 150px;\">" . $lang_module['weblink_add_title'] . ": </td>\n";

    162. 

  162. $contents .= "<td><input type=\"text\" name=\"title\" id=\"webtitle\" style=\"width:550px\" value=\"" . $rowcat['title'] . "\"/></td>\n";

    163. 

  163. $contents .= "</tr>";

    164. 

  164. $contents .= "<tr>";

    165. 

  165. $contents .= "<td valign=\"top\" align=\"right\">" . $lang_module['weblink_add_url'] . ": </td>\n";

    166. 

  166. $contents .= "<td><input style=\"width: 550px\" name=\"url\" id= \"url\" type=\"text\" value=\"" . $rowcat['url'] . "\" maxlength=\"255\" /></td>\n";

    167. 

  167. $contents .= "</tr>";

    168. 

  168. $contents .= "<tr>";

    169. 

  169. $contents .= "<td valign=\"top\" align=\"right\">" . $lang_module['weblink_add_parent'] . ": </td>\n";

    170. 

  170. $contents .= "<td>\n";

    171. 

  171. $contents .= "<select name=\"catid\">\n";

    172. 

  172. $querysubcat = $db->sql_query( "SELECT catid, parentid, title FROM `" . NV_PREFIXLANG . "_" . $module_data . "_cat` ORDER BY `parentid`, `weight` ASC" );

    173. 

  173. $array_cat = array();

    174. 

  174. while ( $row = $db->sql_fetchrow( $querysubcat ) )

    175. 

  175. {

    176. 

  176.     $selected = ( intval( $row['catid'] ) == intval( $rowcat["catid"] ) ) ? 'selected' : '';

    177. 

  177.     $array_cat[$row['catid']] = $row['title'];

    178. 

  178.     $title = $row["title"];

    179. 

  179.     if ( intval( $row['parentid'] ) > 0 )

    180. 

  180.     {

    181. 

  181.         $title = $array_cat[$row['parentid']] . " ->" . $row["title"];

    182. 

  182.     }

    183. 

  183.     $contents .= "<option value=\"" . $row["catid"] . "\" " . $selected . ">" . $title . "</option>\n";

    184. 

  184. }

    185. 

  185. $contents .= "</select>\n";

    186. 

  186. $contents .= "</td>\n";

    187. 

  187. $contents .= "</tr>";

    188. 

  188. if ( $id > 0 )

    189. 

  189. {

    190. 

  190.     $contents .= "<tr>";

    191. 

  191.     $contents .= "<td valign=\"top\" align=\"right\">" . $lang_module['alias'] . ": </td>\n";

    192. 

  192.     $contents .= "<td><input style=\"width: 200px\" name=\"alias\" type=\"text\" value=\"" . $rowcat['alias'] . "\" maxlength=\"255\" /></td>\n";

    193. 

  193.     $contents .= "</tr>";

    194. 

  194. }

    195. 

  195. $contents .= "<tr>";

    196. 

  196. $contents .= "<td valign=\"top\" align=\"right\">" . $lang_module['weblink_add_image'] . ": </td>\n";

    197. 

  197. $contents .= "<td>";

    198. 

  198. $contents .= '<input style="width:400px" type="text" name="image" id="image" value="' . $rowcat['urlimg'] . '"/>';

    199. 

  199. $contents .= '<input type="button" value="Browse Server" name="selectimg"/>

    200. 

  200. 				<script type="text/javascript">

    201. 

  201. 					$("input[name=selectimg]").click(function(){

    202. 

  202. 						var area = "image";

    203. 

  203. 						var path= "' . NV_UPLOADS_DIR . '/' . $module_name . '";						

    204. 

  204. 						nv_open_browse_file("' . NV_BASE_ADMINURL . 'index.php?' . NV_NAME_VARIABLE . '=upload&popup=1&area=" + area+"&path="+path, "NVImg", "850", "500","resizable=no,scrollbars=no,toolbar=no,location=no,status=no");

    205. 

  205. 						return false;

    206. 

  206. 					});

    207. 

  207. 				</script>	';

    208. 

  208. $contents .= "</td>";

    209. 

  209. $contents .= "</tr>";

    210. 

  210. $contents .= "<tr>";

    211. 

  211. $contents .= "<td align=\"right\">" . $lang_module['weblink_description'] . ": </td>\n";

    212. 

  212. $contents .= "<td>";

    213. 

  213. if ( defined( 'NV_EDITOR' ) and function_exists( 'nv_aleditor' ) )

    214. 

  214. {

    215. 

  215.     $contents .= nv_aleditor( "description", '700px', '300px', $rowcat['description'] );

    216. 

  216. }

    217. 

  217. else

    218. 

  218. {

    219. 

  219.     $contents .= "<textarea style=\"width: 650px\" name=\"description\" id=\"description\" cols=\"20\" rows=\"8\">" . $rowcat['description'] . "</textarea>";

    220. 

  220. }

    221. 

  221. $contents .= "</td>\n";

    222. 

  222. $contents .= "</tr>";

    223. 

  223. $contents .= "<tr>";

    224. 

  224. $contents .= "<td valign=\"top\" align=\"right\">" . $lang_module['weblink_inhome'] . ": </td>\n";

    225. 

  225. $checked = ( intval( $rowcat['status'] ) == 1 ) ? 'checked' : '';

    226. 

  226. $contents .= "<td><label><input name=\"status\" type=\"checkbox\" value=\"1\" checked=\"" . $checked . "\" />" . $lang_module['weblink_yes'] . "</label></td>\n";

    227. 

  227. $contents .= "</tr>";

    228. 

  228. $contents .= "<tr>";

    229. 

  229. $contents .= "<td align=\"left\" colspan=\"2\"><input name=\"submit\" style=\"width:80px;margin-left:110px\" type=\"submit\" value=\"" . $lang_module['weblink_submit'] . "\" /></td>\n";

    230. 

  230. $contents .= "</tr>";

    231. 

  231. $contents .= "</table>";

    232. 

  232. $contents .= "</form>\n";

    233. 

  233. $contents .= "</div>\n";

    234. 

  234. 

    235. 

  235. include ( NV_ROOTDIR . "/includes/header.php" );

    236. 

  236. echo nv_admin_theme( $contents );

    237. 

  237. include ( NV_ROOTDIR . "/includes/footer.php" );

    238. 

  238. ?>
    239.