X-Git-Url: https://git.mxchange.org/?p=mailer.git;a=blobdiff_plain;f=inc%2Fmodules%2Fadmin%2Fwhat-guestedit.php;h=9fc694c62ebcb880e9a29fb3956dc1bf8a2cdc2e;hp=c2d46fab5b9b77eb53844481b7f6bd8fdae05ea1;hb=d3c4fdd9bfab35389e1a5ff48f3952d527c7b4bb;hpb=d5ee31ebfc85f22fc691b8c2753c42e188c1c4ef diff --git a/inc/modules/admin/what-guestedit.php b/inc/modules/admin/what-guestedit.php index c2d46fab5b..9fc694c62e 100644 --- a/inc/modules/admin/what-guestedit.php +++ b/inc/modules/admin/what-guestedit.php @@ -10,9 +10,14 @@ * -------------------------------------------------------------------- * * Kurzbeschreibung : Menue fuer die Gaeste editieren * * -------------------------------------------------------------------- * - * * + * $Revision:: $ * + * $Date:: $ * + * $Tag:: 0.2.1-FINAL $ * + * $Author:: $ * + * Needs to be in all Files and every File needs "svn propset * + * svn:keywords Date Revision" (autoprobset!) at least!!!!!! * * -------------------------------------------------------------------- * - * Copyright (c) 2003 - 2008 by Roland Haeder * + * Copyright (c) 2003 - 2009 by Roland Haeder * * For more information visit: http://www.mxchange.org * * * * This program is free software; you can redistribute it and/or modify * @@ -32,311 +37,301 @@ ************************************************************************/ // Some security stuff... -if ((!defined('__SECURITY')) || (!IS_ADMIN())) { - $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php"; - require($INC); +if ((!defined('__SECURITY')) || (!isAdmin())) { + die(); } // Add description as navigation point -ADD_DESCR("admin", __FILE__); +addMenuDescription('admin', __FILE__); // Do we edit/delete/change main menus or sub menus? -$AND = "(`what` = '' OR `what` IS NULL)"; $SUB = ""; +$AND = "(`what` = '' OR `what` IS NULL)"; $SUB = ''; -if (!empty($_GET['sub'])) { - $AND = sprintf("action='%s' AND `what` IS NOT NULL", SQL_ESCAPE($_GET['sub'])); - $SUB = SQL_ESCAPE($_GET['sub']); +if (isGetRequestElementSet('sub')) { + $AND = sprintf("`action`='%s' AND `what` IS NOT NULL", getRequestElement('sub')); + $SUB = getRequestElement('sub'); } // END - if // Get count of (maybe) selected menu points $chk = 0; -if (!empty($_POST['sel'])) $chk = SELECTION_COUNT($_POST['sel']); +if (isPostRequestElementSet('sel')) $chk = countPostSelection(); // List all menu points and make them editable -if ((isset($_POST['edit'])) && ($chk > 0) && (!IS_DEMO())) -{ +if ((isPostRequestElementSet('edit')) && ($chk > 0) && (!isDemoModeActive())) { // Edit menu entries - define('__SUB_VALUE', $SUB); - define('__CHK_VALUE', $chk); - - $cnt = 0; $SW = 2; $OUT = ""; - foreach ($_POST['sel'] as $sel => $confirm) - { - if ($confirm == 1) - { + $content['sub'] = $SUB; + $content['chk'] = $chk; + + $cnt = 0; $OUT = ''; $SW = 2; + foreach (postRequestElement('sel') as $sel => $confirm) { + if ($confirm == 1) { $cnt++; - $result = SQL_QUERY_ESC("SELECT title, action, what FROM `{!_MYSQL_PREFIX!}_guest_menu` WHERE ".$AND." AND id=%s LIMIT 1", - array(bigintval($sel)), __FILE__, __LINE__); - if (SQL_NUMROWS($result) == 1) - { + $result = SQL_QUERY_ESC("SELECT `title`, `action`, `what` FROM `{?_MYSQL_PREFIX?}_guest_menu` WHERE ".$AND." AND `id`=%s LIMIT 1", + array(bigintval($sel)), __FILE__, __LINE__); + if (SQL_NUMROWS($result) == 1) { // Entry found so we load the stuff... - list($menu, $act, $wht) = SQL_FETCHROW($result); - SQL_FREERESULT($result); + $DATA = SQL_FETCHARRAY($result); + + // Prepapre content $DATA = array( 'cnt' => $cnt, 'sel' => $sel, - 'action' => ADMIN_MAKE_MENU_SELECTION("guest", "action", "sel_action[".$sel."]", $act), - 'what' => ADMIN_MAKE_MENU_SELECTION("guest", "what", "sel_what[".$sel."]", $wht), - 'menu' => $menu, + 'action' => adminAddMenuSelectionBox('guest', 'action', 'sel_action[' . $sel . ']', $DATA['action']), + 'what' => adminAddMenuSelectionBox('guest', 'what' , 'sel_what[' . $sel . ']', $DATA['what']), + 'menu' => $DATA['title'], 'sw' => $SW, ); - $OUT .= LOAD_TEMPLATE("admin_gmenu_edit_row", true, $DATA); - } - else - { - // Entry not found? - $content = array( + + // Load row template + $OUT .= loadTemplate('admin_gmenu_edit_row', true, $DATA); + } else { + // Entry not found + $DATA = array( 'sw' => $SW, 'sel' => $sel ); - $OUT .= LOAD_TEMPLATE("admin_menu_404_row", true, $content); + $OUT .= loadTemplate('admin_menu_404_row', true, $DATA); } + + // Free result and switch color + SQL_FREERESULT($result); $SW = 3 - $SW; - } - } - define('__MENU_ROWS', $OUT); - define('__CNT_VALUE', $cnt); + } // END - if + } // END - foreach + + $content['rows'] = $OUT; + $content['cnt'] = $cnt; // Load template - LOAD_TEMPLATE("admin_gmenu_edit_form"); -} - elseif ((isset($_POST['del'])) && (!IS_DEMO())) -{ + loadTemplate('admin_gmenu_edit_form', false, $content); +} elseif ((isPostRequestElementSet('del')) && (!isDemoModeActive())) { // Del menu entries with or without confirmation - define('__SUB_VALUE', $SUB); - define('__CHK_VALUE', $chk); - - $cnt = 0; $OUT = ""; $SW = 2; - foreach ($_POST['sel'] as $sel => $confirm) - { - if ($confirm == 1) - { + $content['sub'] = $SUB; + $content['chk'] = $chk; + + $cnt = 0; + $OUT = ''; + $SW = 2; + + foreach (postRequestElement('sel') as $sel => $confirm) { + if ($confirm == 1) { $cnt++; - $result = SQL_QUERY_ESC("SELECT title FROM `{!_MYSQL_PREFIX!}_guest_menu` WHERE ".$AND." AND id=%s LIMIT 1", - array(bigintval($sel)), __FILE__, __LINE__); - if (SQL_NUMROWS($result) == 1) - { + $result = SQL_QUERY_ESC("SELECT `title` FROM `{?_MYSQL_PREFIX?}_guest_menu` WHERE ".$AND." AND `id`=%s LIMIT 1", + array(bigintval($sel)), __FILE__, __LINE__); + if (SQL_NUMROWS($result) == 1) { // Entry found so we load the stuff... - list($menu) = SQL_FETCHROW($result); - SQL_FREERESULT($result); + $DATA = SQL_FETCHARRAY($result); $DATA = array( 'cnt' => $cnt, - 'menu' => $menu, + 'menu' => $DATA['title'], 'sel' => $sel, 'sw' => $SW, ); - $OUT .= LOAD_TEMPLATE("admin_gmenu_delete_row", true, $DATA); - } - else - { + $OUT .= loadTemplate('admin_gmenu_delete_row', true, $DATA); + } else { // Entry not found? - $content = array( + $DATA = array( 'sw' => $SW, 'sel' => $sel ); - $OUT .= LOAD_TEMPLATE("admin_menu_404_row", true, $content); + $OUT .= loadTemplate('admin_menu_404_row', true, $DATA); } + SQL_FREERESULT($result); $SW = 3 - $SW; } } - define('__MENU_ROWS', $OUT); - define('__CNT_VALUE', $cnt); + $content['rows'] = $OUT; + $content['cnt'] = $cnt; // Load template - LOAD_TEMPLATE("admin_gmenu_delete"); -} - elseif ((isset($_POST['ok'])) && (!IS_DEMO())) -{ + loadTemplate('admin_gmenu_delete', false, $content); +} elseif ((isFormSent()) && (!isDemoModeActive())) { // An action is done... - switch ($_POST['ok']) - { - case "edit": // Edit menu - foreach ($_POST['sel'] as $sel => $menu) - { - // Secure selector - $sel = bigintval($sel); - - // Update entry - SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_guest_menu` SET title='%s', action='%s', what='%s' WHERE ".$AND." AND id=%s LIMIT 1", - array($menu, $_POST['sel_action'][$sel], $_POST['sel_what'][$sel], $sel),__FILE__, __LINE__); - } - LOAD_TEMPLATE("admin_settings_saved", false, getMessage('SETTINGS_SAVED')); - break; - - case "del": // Delete menu - foreach ($_POST['sel'] as $sel => $menu) - { - // Delete enty - SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM `{!_MYSQL_PREFIX!}_guest_menu` WHERE ".$AND." AND id=%s LIMIT 1", - array(bigintval($sel)), __FILE__, __LINE__); - } - LOAD_TEMPLATE("admin_settings_saved", false, getMessage('SETTINGS_SAVED')); - break; - - case "status": // Change access levels - foreach ($_POST['sel'] as $sel => $menu) - { - // Secure selector - $sel = bigintval($sel); - - // Update entry - SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_guest_menu` SET `visible`='%s', `locked`='%s' WHERE ".$AND." AND id=%s LIMIT 1", - array($_POST['visible'][$sel], $_POST['locked'][$sel], $sel), __FILE__, __LINE__); - } - LOAD_TEMPLATE("admin_settings_saved", false, getMessage('SETTINGS_SAVED')); - break; - - default: // Unexpected action - define('__OK_VALUE', $_POST['ok']); - DEBUG_LOG(__FILE__, __LINE__, sprintf("Unsupported action %s detected.", $_POST['ok'])); - LOAD_TEMPLATE("admin_menu_unknown_okay"); - break; - } -} - elseif ((isset($_POST['status'])) && ($chk > 0) && (!IS_DEMO())) -{ + switch (postRequestElement('ok')) { + case 'edit': // Edit menu + foreach (postRequestElement('sel') as $sel => $menu) { + // Secure selector + $sel = bigintval($sel); + + // Update entry + SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_guest_menu` SET `title`='%s', `action`='%s', `what`='%s' WHERE ".$AND." AND id=%s LIMIT 1", + array($menu, postRequestElement('sel_action', $sel), postRequestElement('sel_what', $sel), $sel),__FILE__, __LINE__); + } // END - foreach + loadTemplate('admin_settings_saved', false, getMessage('SETTINGS_SAVED')); + break; + + case 'del': // Delete menu + foreach (postRequestElement('sel') as $sel => $menu) { + // Delete enty + SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM `{?_MYSQL_PREFIX?}_guest_menu` WHERE ".$AND." AND id=%s LIMIT 1", + array(bigintval($sel)), __FILE__, __LINE__); + } // END - foreach + loadTemplate('admin_settings_saved', false, getMessage('SETTINGS_SAVED')); + break; + + case 'status': // Change access levels + foreach (postRequestElement('sel') as $sel => $menu) { + // Secure selector + $sel = bigintval($sel); + + // Update entry + SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_guest_menu` SET `visible`='%s', `locked`='%s' WHERE ".$AND." AND id=%s LIMIT 1", + array(postRequestElement('visible', $sel), postRequestElement('locked', $sel), $sel), __FILE__, __LINE__); + } // END - foreach + loadTemplate('admin_settings_saved', false, getMessage('SETTINGS_SAVED')); + break; + + default: // Unexpected action + logDebugMessage(__FILE__, __LINE__, sprintf("Unsupported action %s detected.", postRequestElement('ok'))); + loadTemplate('admin_menu_unknown_okay', false, postRequestElement('ok')); + break; + } // END - switch +} elseif ((isPostRequestElementSet('status')) && ($chk > 0) && (!isDemoModeActive())) { // Change status (visible / locked) - define('__SUB_VALUE', $SUB); - define('__CHK_VALUE', $chk); + $content['sub'] = $SUB; + $content['chk'] = $chk; // Load template - $SW = 2; $cnt = 0; $OUT = ""; - foreach ($_POST['sel'] as $sel => $confirm) - { - if ($confirm == 1) - { + $SW = 2; $cnt = 0; $OUT = ''; + foreach (postRequestElement('sel') as $sel => $confirm) { + if ($confirm == 1) { $cnt++; - $result = SQL_QUERY_ESC("SELECT title, visible, locked FROM `{!_MYSQL_PREFIX!}_guest_menu` WHERE ".$AND." AND id=%s LIMIT 1", - array(bigintval($sel)), __FILE__, __LINE__); - if (SQL_NUMROWS($result) == 1) - { + $result = SQL_QUERY_ESC("SELECT `title`, `visible`, `locked` FROM `{?_MYSQL_PREFIX?}_guest_menu` WHERE ".$AND." AND `id`=%s LIMIT 1", + array(bigintval($sel)), __FILE__, __LINE__); + if (SQL_NUMROWS($result) == 1) { // Entry found so we load the stuff... - list($menu, $vis, $locked) = SQL_FETCHROW($result); - SQL_FREERESULT($result); - $content = array( + $data = SQL_FETCHARRAY($result); + $data = array( 'cnt' => $cnt, - 'menu' => $menu, + 'menu' => $data['title'], 'sel' => $sel, 'sw' => $SW, - 'visible' => ADD_SELECTION("yn", $vis , "visible", $sel), - 'locked' => ADD_SELECTION("yn", $locked, "locked" , $sel), + 'visible' => addSelectionBox('yn', $data['visible'], 'visible', $sel), + 'locked' => addSelectionBox('yn', $data['locked'] , 'locked' , $sel), ); // Load template - $OUT .= LOAD_TEMPLATE("admin_menu_status_row", true, $content); - } - else - { + $OUT .= loadTemplate('admin_menu_status_row', true, $data); + } else { // Entry not found? - $content = array( + $data = array( 'sw' => $SW, 'sel' => $sel ); - $OUT .= LOAD_TEMPLATE("admin_menu_404_row", true, $content); + $OUT .= loadTemplate('admin_menu_404_row', true, $data); } + + SQL_FREERESULT($result); $SW = 3 - $SW; - } - } - define('__CNT_VALUE', $cnt); - define('__MENU_ROWS', $OUT); + } // END - if + } // END - foreach + $content['cnt'] = $cnt; + $content['rows'] = $OUT; // Load template - LOAD_TEMPLATE("admin_gmenu_status"); + loadTemplate('admin_gmenu_status', false, $content); } else { - if ((!empty($_GET['act'])) && (!empty($_GET['tid'])) && (!empty($_GET['fid']))) { - // Get IDs - if (!empty($_GET['w'])) { + if ((isGetRequestElementSet('act')) && (isGetRequestElementSet('tid')) && (isGetRequestElementSet('fid'))) { + // Get ids + if (isGetRequestElementSet('w')) { // Sub menus selected - $result = SQL_QUERY_ESC("SELECT id FROM `{!_MYSQL_PREFIX!}_guest_menu` WHERE action='%s' AND sort='%s' LIMIT 1", - array($_GET['act'], bigintval($_GET['tid'])), __FILE__, __LINE__); + $result = SQL_QUERY_ESC("SELECT `id` FROM `{?_MYSQL_PREFIX?}_guest_menu` WHERE `action`='%s' AND `sort`='%s' LIMIT 1", + array(getRequestElement('act'), bigintval(getRequestElement('tid'))), __FILE__, __LINE__); list($tid) = SQL_FETCHROW($result); SQL_FREERESULT($result); - $result = SQL_QUERY_ESC("SELECT id FROM `{!_MYSQL_PREFIX!}_guest_menu` WHERE action='%s' AND sort='%s' LIMIT 1", - array($_GET['act'], bigintval($_GET['fid'])), __FILE__, __LINE__); + $result = SQL_QUERY_ESC("SELECT `id` FROM `{?_MYSQL_PREFIX?}_guest_menu` WHERE `action`='%s' AND `sort`='%s' LIMIT 1", + array(getRequestElement('act'), bigintval(getRequestElement('fid'))), __FILE__, __LINE__); list($fid) = SQL_FETCHROW($result); SQL_FREERESULT($result); } else { // Main menu selected - $result = SQL_QUERY_ESC("SELECT id FROM `{!_MYSQL_PREFIX!}_guest_menu` WHERE (what='' OR `what` IS NULL) AND sort='%s' LIMIT 1", - array(bigintval($_GET['tid'])), __FILE__, __LINE__); + $result = SQL_QUERY_ESC("SELECT `id` FROM `{?_MYSQL_PREFIX?}_guest_menu` WHERE (`what`='' OR `what` IS NULL) AND `sort`='%s' LIMIT 1", + array(bigintval(getRequestElement('tid'))), __FILE__, __LINE__); list($tid) = SQL_FETCHROW($result); SQL_FREERESULT($result); - $result = SQL_QUERY_ESC("SELECT id FROM `{!_MYSQL_PREFIX!}_guest_menu` WHERE (what='' OR `what` IS NULL) AND sort='%s' LIMIT 1", - array(bigintval($_GET['fid'])), __FILE__, __LINE__); + $result = SQL_QUERY_ESC("SELECT `id` FROM `{?_MYSQL_PREFIX?}_guest_menu` WHERE (`what`='' OR `what` IS NULL) AND `sort`='%s' LIMIT 1", + array(bigintval(getRequestElement('fid'))), __FILE__, __LINE__); list($fid) = SQL_FETCHROW($result); SQL_FREERESULT($result); } if ((!empty($tid)) && (!empty($fid))) { // Sort menu - SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_guest_menu` SET sort='%s' WHERE ".$AND." AND id=%s LIMIT 1", - array(bigintval($_GET['tid']), bigintval($fid)), __FILE__, __LINE__); - SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_guest_menu` SET sort='%s' WHERE ".$AND." AND id=%s LIMIT 1", - array(bigintval($_GET['fid']), bigintval($tid)), __FILE__, __LINE__); + SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_guest_menu` SET `sort`='%s' WHERE ".$AND." AND `id`=%s LIMIT 1", + array(bigintval(getRequestElement('tid')), bigintval($fid)), __FILE__, __LINE__); + SQL_QUERY_ESC("UPDATE `{?_MYSQL_PREFIX?}_guest_menu` SET `sort`='%s' WHERE ".$AND." AND `id`=%s LIMIT 1", + array(bigintval(getRequestElement('fid')), bigintval($tid)), __FILE__, __LINE__); } // END - if } // END - if // By default list menus if (empty($SUB)) { // List only main menus - $result = SQL_QUERY("SELECT `id`, `action`, `what`, `title`, `sort` FROM `{!_MYSQL_PREFIX!}_guest_menu` WHERE (`what`='' OR `what` IS NULL) ORDER BY `sort` ASC", __FILE__, __LINE__); + $result = SQL_QUERY("SELECT `id`,`action`,`what`,`title`,`sort` FROM `{?_MYSQL_PREFIX?}_guest_menu` WHERE (`what`='' OR `what` IS NULL) ORDER BY `sort` ASC", __FILE__, __LINE__); } else { // List sub menus - $result = SQL_QUERY_ESC("SELECT `id`, `action`, `what`, `title`, `sort` FROM `{!_MYSQL_PREFIX!}_guest_menu` WHERE `action`='%s' AND `what` != '' AND `what` IS NOT NULL ORDER BY `sort` ASC", - array($SUB), __FILE__, __LINE__); + $result = SQL_QUERY_ESC("SELECT `id`,`action`,`what`,`title`,`sort` FROM `{?_MYSQL_PREFIX?}_guest_menu` WHERE `action`='%s' AND `what` != '' AND `what` IS NOT NULL ORDER BY `sort` ASC", + array($SUB), __FILE__, __LINE__); } // Get number of menu entries $max = SQL_NUMROWS($result); if ($max > 0) { // Set sub value - define('__SUB_VALUE', $SUB); + $content['sub'] = $SUB; // Init variables $SW = 2; $cnt = 0; - $OUT = ""; + $OUT = ''; - while (list($id, $act, $wht, $title, $sort) = SQL_FETCHROW($result)) { + // Process all menu entries + while ($data = SQL_FETCHARRAY($result)) { $cnt++; - if (($sort == 0) || (($sort == 1) && (!empty($SUB)))) { + if (($data['sort'] == 0) || (($data['sort'] == 1) && (!empty($SUB)))) { // Is highest position - $NAVI = "{--LOWER--}"; + $NAVI = "{--LOWER--}"; } elseif ($cnt == $max) { // Is lowest position - $NAVI = "{--HIGHER--}"; - } elseif ($sort > 0) { + $NAVI = "{--HIGHER--}"; + } elseif ($data['sort'] > 0) { // Anything else between highest and lowest - $NAVI = "{--HIGHER--}/{--LOWER--}"; + $NAVI = "{--HIGHER--}/{--LOWER--}"; } - if (empty($act)) $act = " "; - if (empty($wht)) $wht = " "; - if (empty($title)) $title = " "; - $content = array( + if (empty($data['action'])) $data['action'] = ' '; + if (empty($data['what'])) $data['what'] = ' '; + if (empty($data['title'])) $data['title'] = ' '; + + // Prepapre content + $row = array( 'sw' => $SW, - 'id' => $id, - 'action' => $act, - 'what' => $wht, - 'title' => $title, + 'id' => $data['id'], + 'action' => $data['action'], + 'what' => $data['what'], + 'title' => $data['title'], 'navi' => $NAVI, - 'mode' => "guest" + 'mode' => 'guest' ); - $OUT .= LOAD_TEMPLATE("admin_menu_overview_row", true, $content); + + // Load row template + $OUT .= loadTemplate('admin_menu_overview_row', true, $row); $SW = 3 - $SW; - } + } // END - while + + // Add rows + $content['rows'] = $OUT; // Free memory SQL_FREERESULT($result); - define('__MENU_ROWS', $OUT); // Load template - LOAD_TEMPLATE("admin_gmenu_edit"); + loadTemplate('admin_gmenu_edit', false, $content); } else { // Menu entries are missing... (???) - LOAD_TEMPLATE("admin_settings_saved", false, getMessage('ADMIN_NO_MENUS_FOUND')); + loadTemplate('admin_settings_saved', false, getMessage('ADMIN_NO_MENUS_FOUND')); } } -// +// [EOF] ?>