<?php
require_once "../silnik.php";
require_once "../ustawienia/szablon/naglowek.php";
if ($_GET['status'] == "sn") {
$message = "Dodano dodatkową stronę.<br />Adres URL do tej strony to: \n";
$message .= "<a href='".BASEDIR
."viewpage.php?page_id=".intval($_GET['pid'])."'>viewpage.php?page_id=".intval($_GET['pid'])."</a>\n"; } elseif ($_GET['status'] == "su") {
$message = "Zaktualizowano dodatkową stronę.<br />Adres URL do tej strony to: \n";
$message .= "<a href='".BASEDIR
."viewpage.php?page_id=".intval($_GET['pid'])."'>viewpage.php?page_id=".intval($_GET['pid'])."</a>\n"; } elseif ($_GET['status'] == "del") {
$message = "Usunięto dodatkową stronę.";
}
if ($message) {
$message = "<div class='admin-message'>".$message."</div>";
if ($_GET['status'] == "sn" || $_GET['status'] == "su") {
} else {
echo "<div id='close-message'>".$message."</div>\n"; }
}
}
function stripinput($text) {
$text = stripslash
(trim($text)); $search = array("&", "\"", "'", "\\", '\"', "\'", "<", ">", " "); $replace = array("&", """, "'", "\", ""
;", "'", "<", ">", " "); $text = preg_replace("/(&)+(?=\#([0-9]{2,3});)/i", "&", str_replace($search, $replace, $text));
} else {
foreach ($text as $key => $value) {
$text[$key] = stripinput($value);
}
}
return $text;
}
function addslash($text) {
if (!QUOTES_GPC) {
$text = addslashes(addslashes($text));
} else {
$text = addslashes($text);
}
return $text;
}
function phpentities($text) {
$search = array("&", "\"", "'", "\\", "<", ">");
$replace = array("&", """, "'", "\", "<", ">");
$text = str_replace($search, $replace, $text);
return $text;
}
if (isset($_POST['save'])) {
$page_title = stripinput($_POST['page_title']);
$page_content = addslash($_POST['page_content']);
if (isset($_POST['page_id']) && isnum($_POST['page_id'])) {
$result = mysql_query("UPDATE ".DB_PREFIX."podstrona SET page_title='".$page_title."', page_content='".$page_content."' WHERE page_id='".$_POST['page_id']."'");
} else {
$result = mysql_query("INSERT INTO ".DB_PREFIX."podstrona (page_title, page_content) VALUES ('".$page_title."', '".$page_content."')");
$page_id = mysql_insert_id();
if (isset($_POST['add_link'])) {
$data = @mysql_fetch_assoc(mysql_query("SELECT link_order FROM ".DB_SITE_LINKS." ORDER BY link_order DESC LIMIT 1"));
$link_order = $data['link_order'] + 1;
$result = mysql_query("INSERT INTO ".DB_SITE_LINKS." (link_name, link_url, link_visibility, link_position, link_window, link_order) VALUES ('".$page_title."', 'viewpage.php?page_id=".$page_id."', '".$page_access."', '1', '0', '".$link_order."')");
}
}
if (isset($_POST['page_id']) && isnum($_POST['page_id'])) {
header("Location: ".FUSION_SELF."?status=su&pid=".$_POST['page_id']);
} else {
header("Location: ".FUSION_SELF."?status=sn&pid=".$page_id);
}
} else if (isset($_POST['delete']) && (isset($_POST['page_id']) && isnum($_POST['page_id']))) {
$result = mysql_query("DELETE FROM ".DB_PREFIX."podstrona WHERE page_id='".$_POST['page_id']."'");
$result = mysql_query("DELETE FROM ".DB_SITE_LINKS." WHERE link_url='viewpage.php?page_id=".$_POST['page_id']."'");
header("Location: ".FUSION_SELF."?status=del");
} else {
if (isset($_POST['preview'])) {
$addlink = isset($_POST['add_link']) ? " checked='checked'" : "";
$page_title = stripinput($_POST['page_title']);
$page_content = stripslash($_POST['page_content']);
$page_content = phpentities($page_content);
}
$result = mysql_query("SELECT page_id, page_title FROM ".DB_PREFIX."podstrona ORDER BY page_title");
if (@mysql_num_rows($result) != 0) {
$editlist = ""; $sel = "";
while ($data = @mysql_fetch_assoc($result)) {
if (isset($_POST['page_id'])) { $sel = ($_POST['page_id'] == $data['page_id'] ? " selected='selected'" : ""); }
$editlist .= "<option value='".$data['page_id']."'$sel>[".$data['page_id']."] ".$data['page_title']."</option>\n";
}
opentable("Istniejące dodatkowe strony");
echo "<div style='text-align:center'>\n<form name='selectform' method='post' action='".FUSION_SELF."'>\n";
echo "<select name='page_id' class='textbox' style='width:200px;'>\n".$editlist."</select>\n";
echo "<input type='submit' name='edit' value='Edytuj' />\n";
echo "<input type='submit' name='delete' value='Usuń' onclick='return DeletePage();' />\n";
echo "</form>\n</div>\n";
closetable();
}
if (isset($_POST['edit']) && (isset($_POST['page_id']) && isnum($_POST['page_id']))) {
$result = mysql_query("SELECT page_id, page_title, page_content FROM ".DB_PREFIX."podstrona WHERE page_id='".$_POST['page_id']."' LIMIT 1");
if (@mysql_num_rows($result)) {
$data = @mysql_fetch_assoc($result);
$page_title = $data['page_title'];
$page_content = phpentities(stripslashes($data['page_content']));
$addlink = "";
} else {
header("Location: podstrona.php");
}
}
if (isset($_POST['page_id']) && isnum($_POST['page_id'])) {
opentable("Edytuj dodatkową stronę : [".$_POST['page_id']."] ".$page_title);
} else {
if (!isset($_POST['preview'])) {
$page_title = "";
$page_content = "";
$addlink = "";
}
opentable("Dodaj dodatkową stronę");
}
echo "<form name='inputform' method='post' action='".FUSION_SELF."' onsubmit='return ValidateForm(this);'>\n";
echo "<table cellpadding='0' cellspacing='0' class='center'>\n<tr>\n";
echo "<td width='100' class='tbl'>Tytuł strony:</td>\n";
echo "<td width='80%' class='tbl'><input type='text' name='page_title' value='".$page_title."' class='textbox' style='width:250px;' />\n";
echo "</tr>\n<tr>\n";
echo "<td valign='top' width='100' class='tbl'>Zawartość strony:</td>\n";
echo "<td width='80%' class='tbl'><textarea name='page_content' cols='95' rows='15' style='width:98%'>".$page_content."</textarea></td>\n";
echo "</tr>\n<tr>\n";
echo "<td align='center' colspan='2' class='tbl'><br />\n";
if (isset($_POST['page_id']) && isnum($_POST['page_id'])) {
echo "<input type='hidden' name='page_id' value='".$_POST['page_id']."' />\n";
}
echo "<input type='submit' name='save' value='Zachowaj' /></td>\n";
echo "</tr>\n</table>\n</form>\n";
closetable();
echo "<script type='text/javascript'>\n"."function DeletePage() {\n";
echo "return confirm('Usunąć dodatkową stronę?');\n}"."\n";
echo "function ValidateForm(frm) {\n"."if(frm.page_title.value=='') {\n";
echo "alert('Wpisz tytuł strony');\n"."return false;\n}\n";
/*if ($ustawienia['tinymce']) {
echo "function SetTinyMCE(val) {\n";
echo "now=new Date();\n"."now.setTime(now.getTime()+1000*60*60*24*365);\n";
echo "expire=(now.toGMTString());\n"."document.cookie=\"custom_pages_tinymce=\"+escape(val)+\";expires=\"+expire;\n";
echo "location.href='".FUSION_SELF."';\n"."}\n";
}*/
echo "</script>\n";
}
require_once "../ustawienia/szablon/stopka.php";
?>