Просмотр файла library/edit.php

<?php

/*
////////////////////////////////////////////////////////////////////////////////
// JohnCMS                Mobile Content Management System                    //
// Project site:          http://johncms.com                                  //
// Support site:          http://gazenwagen.com                               //
////////////////////////////////////////////////////////////////////////////////
// Lead Developer:        Oleg Kasyanov   (AlkatraZ)  [email protected] //
// Development Team:      Eugene Ryabinin (john77)    [email protected]   //
//                        Dmitry Liseenko (FlySelf)   [email protected]     //
////////////////////////////////////////////////////////////////////////////////
*/

defined('_IN_JOHNCMS') or die('Error: restricted access');

if ($rights == 5 || $rights >= 6) {
    if ($_GET['id'] == "" || $_GET['id'] == "0") {
        echo "ERROR<br/><a href='index.php?'>Back</a><br/>";
        require_once('../incfiles/end.php');
        exit;
    }
    $req = mysql_query("SELECT * FROM `lib` WHERE `id` = '" . $id . "'");
    $ms = mysql_fetch_array($req);
    if (isset($_POST['submit'])) {
        switch ($ms['type']) {
            case "bk":
                ////////////////////////////////////////////////////////////
                // Сохраняем отредактированную статью                     //
                ////////////////////////////////////////////////////////////
                if (empty($_POST['name'])) {
                    echo functions::display_error($lng['error_empty_title'], '<a href="index.php?act=edit&amp;id=' . $id . '">' . $lng['repeat'] . '</a>');
                    require_once('../incfiles/end.php');
                    exit;
                }
                if (empty($_POST['text'])) {
                    echo functions::display_error($lng['error_empty_text'], '<a href="index.php?act=edit&amp;id=' . $id . '">' . $lng['repeat'] . '</a>');
                    require_once('../incfiles/end.php');
                    exit;
                }
                $text = trim($_POST['text']);
                $autor = isset($_POST['autor']) ? functions::check($_POST['autor']) : '';
                $count = isset($_POST['count']) ? abs(intval($_POST['count'])) : '0';
                if (!empty($_POST['anons'])) {
                    $anons = mb_substr(trim($_POST['anons']), 0, 100);
                } else {
                    $anons = mb_substr($text, 0, 100);
                }
                mysql_query("UPDATE `lib` SET
                    `name` = '" . mysql_real_escape_string(mb_substr(trim($_POST['name']), 0, 100)) . "',
                    `announce` = '" . mysql_real_escape_string($anons) . "',
                    `text` = '" . mysql_real_escape_string($text) . "',
                    `avtor` = '$autor',
                    `count` = '$count'
                    WHERE `id` = '$id'
                ");
                header('location: index.php?id=' . $id);
                break;

            case "cat":
                ////////////////////////////////////////////////////////////
                // Сохраняем отредактированную категорию                  //
                ////////////////////////////////////////////////////////////
                $text = functions::check($_POST['text']);
                if (!empty($_POST['user'])) {
                    $user = intval($_POST['user']);
                } else {
                    $user = 0;
                }
                $mod = intval($_POST['mod']);
                mysql_query("UPDATE `lib` SET
                `text` = '" . $text . "',
                `ip` = '" . $mod . "',
                `soft` = '" . $user . "'
                WHERE `id` = '" . $id . "'");
                header('location: index.php?id=' . $id);
                break;
                default :
            ////////////////////////////////////////////////////////////
            // Сохраняем отредактированный комментарий                //
            ////////////////////////////////////////////////////////////
            $text = functions::check($_POST['text']);
                mysql_query("update `lib` set text='" . $text . "' where id='" . $id . "';");
                header("location: index.php?id=$ms[refid]");
                break;
        }
    } else {
        switch ($ms['type']) {
            case 'bk':
                ////////////////////////////////////////////////////////////
                // Форма редактирования статьи                            //
                ////////////////////////////////////////////////////////////
                echo '<div class="phdr"><b>' . $lng_lib['edit_article'] . '</b></div>' .
                    '<form action="index.php?act=edit&amp;id=' . $id . '" method="post">' .
                    '<div class="menu"><p><h3>' . $lng['title'] . '</h3><input type="text" name="name" value="' . htmlentities($ms['name'], ENT_QUOTES, 'UTF-8') . '"/></p>' .
                    '<p><h3>' . $lng_lib['announce'] . '</h3><small>' . $lng_lib['announce_help'] . '</small><br/><input type="text" name="anons" value="' . htmlentities($ms['announce'], ENT_QUOTES, 'UTF-8') . '"/></p>' .
                    '<p><h3>' . $lng['text'] . '</h3><textarea rows="5" name="text">' . htmlentities($ms['text'], ENT_QUOTES, 'UTF-8') . '</textarea></p></div>' .
                    '<div class="rmenu"><p><h3>' . $lng['author'] . '</h3><input type="text" name="autor" value="' . $ms['avtor'] . '"/></p>' .
                    '<p><h3>' . $lng_lib['reads'] . '</h3><input type="text" name="count" value="' . $ms['count'] . '" size="4"/></p></div>' .
                    '<div class="bmenu"><input type="submit" name="submit" value="' . $lng['save'] . '"/></div></form>' .
                    '<p><a href="index.php?id=' . $id . '">' . $lng['back'] . '</a></p>';
                break;

            case "cat":
                echo $lng_lib['edit_category'] . "<br/><form action='index.php?act=edit&amp;id=" . $id . "' method='post'><input type='text' name='text' value='" . $ms['text'] .
                    "'/><br/>" . $lng_lib['edit_category_help'] . ":<br/><select name='mod'>";
                if ($ms['ip'] == 1) {
                    echo "<option value='1'>" . $lng['categories'] . "</option><option value='0'>" . $lng_lib['articles'] . "</option>";
                } else {
                    echo "<option value='0'>" . $lng_lib['articles'] . "</option><option value='1'>" . $lng['categories'] . "</option>";
                }
                echo "</select><br/>";
                if ($ms['soft'] == 1) {
                    echo $lng_lib['allow_to_add'] . "<br/><input type='checkbox' name='user' value='1' checked='checked' /><br/>";
                } else {
                    echo $lng_lib['allow_to_add'] . "<br/><input type='checkbox' name='user' value='1'/><br/>";
                }
                echo "<input type='submit' name='submit' value='" . $lng['save'] . "'/></form><br/><a href='index.php?id=" . $ms['refid'] . "'>" . $lng['back'] . "</a><br/>";
                break;
        }
    }
} else {
    header("location: index.php");
}

?>