inc/modules/admin/what-guestedit.php

   1 <?php
   2 /************************************************************************
   3  * MXChange v0.2.1                                    Start: 09/28/2003 *
   4  * ===============                              Last change: 12/13/2004 *
   5  *                                                                      *
   6  * -------------------------------------------------------------------- *
   7  * File              : what-guestedit.php                               *
   8  * -------------------------------------------------------------------- *
   9  * Short description : Edit guest's menu                                *
  10  * -------------------------------------------------------------------- *
  11  * Kurzbeschreibung  : Menue fuer die Gaeste editieren                  *
  12  * -------------------------------------------------------------------- *
  13  *                                                                      *
  14  * -------------------------------------------------------------------- *
  15  * Copyright (c) 2003 - 2008 by Roland Haeder                           *
  16  * For more information visit: http://www.mxchange.org                  *
  17  *                                                                      *
  18  * This program is free software; you can redistribute it and/or modify *
  19  * it under the terms of the GNU General Public License as published by *
  20  * the Free Software Foundation; either version 2 of the License, or    *
  21  * (at your option) any later version.                                  *
  22  *                                                                      *
  23  * This program is distributed in the hope that it will be useful,      *
  24  * but WITHOUT ANY WARRANTY; without even the implied warranty of       *
  25  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the        *
  26  * GNU General Public License for more details.                         *
  27  *                                                                      *
  28  * You should have received a copy of the GNU General Public License    *
  29  * along with this program; if not, write to the Free Software          *
  30  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston,               *
  31  * MA  02110-1301  USA                                                  *
  32  ************************************************************************/
  33
  34 // Some security stuff...
  35 if ((!defined('__SECURITY')) || (!IS_ADMIN())) {
  36         $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
  37         require($INC);
  38 }
  39
  40 // Add description as navigation point
  41 ADD_DESCR("admin", __FILE__);
  42
  43 // Do we edit/delete/change main menus or sub menus?
  44 $AND = "(`what` = '' OR `what` IS NULL)"; $SUB = "";
  45
  46 if (REQUEST_ISSET_GET(('sub'))) {
  47         $AND = sprintf("action='%s' AND `what` IS NOT NULL", REQUEST_GET(('sub')));
  48         $SUB = REQUEST_GET(('sub'));
  49 } // END - if
  50
  51 // Get count of (maybe) selected menu points
  52 $chk = 0;
  53 if (REQUEST_ISSET_POST(('sel'))) $chk = SELECTION_COUNT(REQUEST_POST('sel'));
  54
  55 // List all menu points and make them editable
  56 if ((REQUEST_ISSET_POST(('edit'))) && ($chk > 0) && (!IS_DEMO()))
  57 {
  58         // Edit menu entries
  59         define('__SUB_VALUE', $SUB);
  60         define('__CHK_VALUE', $chk);
  61
  62         $cnt = 0; $SW = 2; $OUT = "";
  63         foreach (REQUEST_POST('sel') as $sel => $confirm)
  64         {
  65                 if ($confirm == 1)
  66                 {
  67                         $cnt++;
  68                         $result = SQL_QUERY_ESC("SELECT title, action, what FROM `{!_MYSQL_PREFIX!}_guest_menu` WHERE ".$AND." AND id=%s LIMIT 1",
  69                          array(bigintval($sel)), __FILE__, __LINE__);
  70                         if (SQL_NUMROWS($result) == 1)
  71                         {
  72                                 // Entry found so we load the stuff...
  73                                 list($menu, $act, $wht) = SQL_FETCHROW($result);
  74                                 SQL_FREERESULT($result);
  75                                 $DATA = array(
  76                                         'cnt'    => $cnt,
  77                                         'sel'    => $sel,
  78                                         'action' => ADMIN_MAKE_MENU_SELECTION("guest", "action", "sel_action[".$sel."]", $act),
  79                                         'what'   => ADMIN_MAKE_MENU_SELECTION("guest", "what", "sel_what[".$sel."]", $wht),
  80                                         'menu'   => $menu,
  81                                         'sw'     => $SW,
  82                                 );
  83                                 $OUT .= LOAD_TEMPLATE("admin_gmenu_edit_row", true, $DATA);
  84                         }
  85                          else
  86                         {
  87                                 // Entry not found?
  88                                 $content = array(
  89                                         'sw'  => $SW,
  90                                         'sel' => $sel
  91                                 );
  92                                 $OUT .= LOAD_TEMPLATE("admin_menu_404_row", true, $content);
  93                         }
  94                         $SW = 3 - $SW;
  95                 }
  96         }
  97         define('__MENU_ROWS', $OUT);
  98         define('__CNT_VALUE', $cnt);
  99
 100         // Load template
 101         LOAD_TEMPLATE("admin_gmenu_edit_form");
 102 } elseif ((REQUEST_ISSET_POST(('del'))) && (!IS_DEMO())) {
 103         // Del menu entries with or without confirmation
 104         define('__SUB_VALUE', $SUB);
 105         define('__CHK_VALUE', $chk);
 106
 107         $cnt = 0; $OUT = ""; $SW = 2;
 108         foreach (REQUEST_POST('sel') as $sel => $confirm) {
 109                 if ($confirm == 1) {
 110                         $cnt++;
 111                         $result = SQL_QUERY_ESC("SELECT title FROM `{!_MYSQL_PREFIX!}_guest_menu` WHERE ".$AND." AND id=%s LIMIT 1",
 112                                 array(bigintval($sel)), __FILE__, __LINE__);
 113                         if (SQL_NUMROWS($result) == 1) {
 114                                 // Entry found so we load the stuff...
 115                                 list($menu) = SQL_FETCHROW($result);
 116                                 SQL_FREERESULT($result);
 117                                 $DATA = array(
 118                                         'cnt'  => $cnt,
 119                                         'menu' => $menu,
 120                                         'sel'  => $sel,
 121                                         'sw'   => $SW,
 122                                 );
 123                                 $OUT .= LOAD_TEMPLATE("admin_gmenu_delete_row", true, $DATA);
 124                         } else {
 125                                 // Entry not found?
 126                                 $content = array(
 127                                         'sw'  => $SW,
 128                                         'sel' => $sel
 129                                 );
 130                                 $OUT .= LOAD_TEMPLATE("admin_menu_404_row", true, $content);
 131                         }
 132                         $SW = 3 - $SW;
 133                 }
 134         }
 135         define('__MENU_ROWS', $OUT);
 136         define('__CNT_VALUE', $cnt);
 137
 138         // Load template
 139         LOAD_TEMPLATE("admin_gmenu_delete");
 140 } elseif ((IS_FORM_SENT()) && (!IS_DEMO())) {
 141         // An action is done...
 142         switch (REQUEST_POST('ok'))
 143         {
 144         case "edit": // Edit menu
 145                 foreach (REQUEST_POST('sel') as $sel => $menu) {
 146                         // Secure selector
 147                         $sel = bigintval($sel);
 148
 149                         // Update entry
 150                         SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_guest_menu` SET `title`='%s', `action`='%s', `what`='%s' WHERE ".$AND." AND id=%s LIMIT 1",
 151                                 array($menu, REQUEST_POST('sel_action', $sel), REQUEST_POST('sel_what', $sel), $sel),__FILE__, __LINE__);
 152                 }
 153                 LOAD_TEMPLATE("admin_settings_saved", false, getMessage('SETTINGS_SAVED'));
 154                 break;
 155
 156         case "del": // Delete menu
 157                 foreach (REQUEST_POST('sel') as $sel => $menu) {
 158                         // Delete enty
 159                         SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM `{!_MYSQL_PREFIX!}_guest_menu` WHERE ".$AND." AND id=%s LIMIT 1",
 160                                 array(bigintval($sel)), __FILE__, __LINE__);
 161                 }
 162                 LOAD_TEMPLATE("admin_settings_saved", false, getMessage('SETTINGS_SAVED'));
 163                 break;
 164
 165         case "status": // Change access levels
 166                 foreach (REQUEST_POST('sel') as $sel => $menu) {
 167                         // Secure selector
 168                         $sel = bigintval($sel);
 169
 170                         // Update entry
 171                         SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_guest_menu` SET `visible`='%s', `locked`='%s' WHERE ".$AND." AND id=%s LIMIT 1",
 172                                 array(REQUEST_POST('visible', $sel), REQUEST_POST('locked', $sel), $sel), __FILE__, __LINE__);
 173                 }
 174                 LOAD_TEMPLATE("admin_settings_saved", false, getMessage('SETTINGS_SAVED'));
 175                 break;
 176
 177         default: // Unexpected action
 178                 define('__OK_VALUE', REQUEST_POST('ok'));
 179                 DEBUG_LOG(__FILE__, __LINE__, sprintf("Unsupported action %s detected.", REQUEST_POST('ok')));
 180                 LOAD_TEMPLATE("admin_menu_unknown_okay");
 181                 break;
 182         }
 183 } elseif ((REQUEST_ISSET_POST(('status'))) && ($chk > 0) && (!IS_DEMO())) {
 184         // Change status (visible / locked)
 185         define('__SUB_VALUE', $SUB);
 186         define('__CHK_VALUE', $chk);
 187
 188         // Load template
 189         $SW = 2; $cnt = 0; $OUT = "";
 190         foreach (REQUEST_POST('sel') as $sel => $confirm)
 191         {
 192                 if ($confirm == 1)
 193                 {
 194                         $cnt++;
 195                         $result = SQL_QUERY_ESC("SELECT title, visible, locked FROM `{!_MYSQL_PREFIX!}_guest_menu` WHERE ".$AND." AND id=%s LIMIT 1",
 196                          array(bigintval($sel)), __FILE__, __LINE__);
 197                         if (SQL_NUMROWS($result) == 1)
 198                         {
 199                                 // Entry found so we load the stuff...
 200                                 list($menu, $vis, $locked) = SQL_FETCHROW($result);
 201                                 SQL_FREERESULT($result);
 202                                 $content = array(
 203                                         'cnt'     => $cnt,
 204                                         'menu'    => $menu,
 205                                         'sel'     => $sel,
 206                                         'sw'      => $SW,
 207                                         'visible' => ADD_SELECTION("yn", $vis   , "visible", $sel),
 208                                         'locked'  => ADD_SELECTION("yn", $locked, "locked" , $sel),
 209                                 );
 210
 211                                 // Load template
 212                                 $OUT .= LOAD_TEMPLATE("admin_menu_status_row", true, $content);
 213                         }
 214                          else
 215                         {
 216                                 // Entry not found?
 217                                 $content = array(
 218                                         'sw'  => $SW,
 219                                         'sel' => $sel
 220                                 );
 221                                 $OUT .= LOAD_TEMPLATE("admin_menu_404_row", true, $content);
 222                         }
 223                         $SW = 3 - $SW;
 224                 }
 225         }
 226         define('__CNT_VALUE', $cnt);
 227         define('__MENU_ROWS', $OUT);
 228
 229         // Load template
 230         LOAD_TEMPLATE("admin_gmenu_status");
 231 } else {
 232         if ((REQUEST_ISSET_GET(('act'))) && (REQUEST_ISSET_GET(('tid'))) && (REQUEST_ISSET_GET(('fid')))) {
 233                 // Get IDs
 234                 if (REQUEST_ISSET_GET(('w'))) {
 235                         // Sub menus selected
 236                         $result = SQL_QUERY_ESC("SELECT id FROM `{!_MYSQL_PREFIX!}_guest_menu` WHERE `action`='%s' AND `sort`='%s' LIMIT 1",
 237                          array(REQUEST_GET('act'), bigintval(REQUEST_GET('tid'))), __FILE__, __LINE__);
 238                         list($tid) = SQL_FETCHROW($result);
 239                         SQL_FREERESULT($result);
 240                         $result = SQL_QUERY_ESC("SELECT id FROM `{!_MYSQL_PREFIX!}_guest_menu` WHERE `action`='%s' AND `sort`='%s' LIMIT 1",
 241                          array(REQUEST_GET('act'), bigintval(REQUEST_GET('fid'))), __FILE__, __LINE__);
 242                         list($fid) = SQL_FETCHROW($result);
 243                         SQL_FREERESULT($result);
 244                 } else {
 245                         // Main menu selected
 246                         $result = SQL_QUERY_ESC("SELECT id FROM `{!_MYSQL_PREFIX!}_guest_menu` WHERE (what='' OR `what` IS NULL) AND `sort`='%s' LIMIT 1",
 247                          array(bigintval(REQUEST_GET('tid'))), __FILE__, __LINE__);
 248                         list($tid) = SQL_FETCHROW($result);
 249                         SQL_FREERESULT($result);
 250                         $result = SQL_QUERY_ESC("SELECT id FROM `{!_MYSQL_PREFIX!}_guest_menu` WHERE (what='' OR `what` IS NULL) AND `sort`='%s' LIMIT 1",
 251                          array(bigintval(REQUEST_GET('fid'))), __FILE__, __LINE__);
 252                         list($fid) = SQL_FETCHROW($result);
 253                         SQL_FREERESULT($result);
 254                 }
 255
 256                 if ((!empty($tid)) && (!empty($fid))) {
 257                         // Sort menu
 258                         SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_guest_menu` SET `sort`='%s' WHERE ".$AND." AND id=%s LIMIT 1",
 259                                 array(bigintval(REQUEST_GET('tid')), bigintval($fid)), __FILE__, __LINE__);
 260                         SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_guest_menu` SET `sort`='%s' WHERE ".$AND." AND id=%s LIMIT 1",
 261                                 array(bigintval(REQUEST_GET('fid')), bigintval($tid)), __FILE__, __LINE__);
 262                 } // END - if
 263         } // END - if
 264
 265         // By default list menus
 266         if (empty($SUB)) {
 267                 // List only main menus
 268                 $result = SQL_QUERY("SELECT `id`, `action`, `what`, `title`, `sort` FROM `{!_MYSQL_PREFIX!}_guest_menu` WHERE (`what`='' OR `what` IS NULL) ORDER BY `sort` ASC", __FILE__, __LINE__);
 269         } else {
 270                 // List sub menus
 271                 $result = SQL_QUERY_ESC("SELECT `id`, `action`, `what`, `title`, `sort` FROM `{!_MYSQL_PREFIX!}_guest_menu` WHERE `action`='%s' AND `what` != '' AND `what` IS NOT NULL ORDER BY `sort` ASC",
 272                  array($SUB), __FILE__, __LINE__);
 273         }
 274
 275         // Get number of menu entries
 276         $max = SQL_NUMROWS($result);
 277         if ($max > 0) {
 278                 // Set sub value
 279                 define('__SUB_VALUE', $SUB);
 280
 281                 // Init variables
 282                 $SW = 2;
 283                 $cnt = 0;
 284                 $OUT = "";
 285
 286                 while (list($id, $act, $wht, $title, $sort) = SQL_FETCHROW($result)) {
 287                         $cnt++;
 288                         if (($sort == 0) || (($sort == 1) && (!empty($SUB)))) {
 289                                 // Is highest position
 290                                 $NAVI = "<a href=\"{!URL!}/modules.php?module=admin&amp;what=guestedit&amp;sub={!__SUB_VALUE!}&amp;act=".$act."&amp;w=".$wht."&amp;tid=".($sort+1)."&amp;fid=".$sort."\">{--LOWER--}</a>";
 291                         } elseif ($cnt == $max) {
 292                                 // Is lowest position
 293                                 $NAVI = "<a href=\"{!URL!}/modules.php?module=admin&amp;what=guestedit&amp;sub={!__SUB_VALUE!}&amp;act=".$act."&amp;w=".$wht."&amp;tid=".($sort-1)."&amp;fid=".$sort."\">{--HIGHER--}</a>";
 294                         } elseif ($sort > 0) {
 295                                 // Anything else between highest and lowest
 296                                 $NAVI = "<a href=\"{!URL!}/modules.php?module=admin&amp;what=guestedit&amp;sub={!__SUB_VALUE!}&amp;act=".$act."&amp;w=".$wht."&amp;tid=".($sort-1)."&amp;fid=".$sort."\">{--HIGHER--}</a>/<a href=\"{!URL!}/modules.php?module=admin&amp;what=guestedit&amp;sub={!__SUB_VALUE!}&amp;act=".$act."&amp;w=".$wht."&amp;tid=".($sort+1)."&amp;fid=".$sort."\">{--LOWER--}</a>";
 297                         }
 298
 299                         if (empty($act))   $act   = "&nbsp;";
 300                         if (empty($wht))   $wht   = "&nbsp;";
 301                         if (empty($title)) $title = "&nbsp;";
 302                         $content = array(
 303                                 'sw'     => $SW,
 304                                 'id'     => $id,
 305                                 'action' => $act,
 306                                 'what'   => $wht,
 307                                 'title'  => $title,
 308                                 'navi'   => $NAVI,
 309                                 'mode'   => "guest"
 310                         );
 311                         $OUT .= LOAD_TEMPLATE("admin_menu_overview_row", true, $content);
 312                         $SW = 3 - $SW;
 313                 }
 314
 315                 // Free memory
 316                 SQL_FREERESULT($result);
 317                 define('__MENU_ROWS', $OUT);
 318
 319                 // Load template
 320                 LOAD_TEMPLATE("admin_gmenu_edit");
 321         } else {
 322                 // Menu entries are missing... (???)
 323                 LOAD_TEMPLATE("admin_settings_saved", false, getMessage('ADMIN_NO_MENUS_FOUND'));
 324         }
 325 }
 326
 327 //
 328 ?>