Просмотр файла admin_panel/news.php

<?
include('../core/core.php');
include(BASEDIR.INC.'func.php');
include(BASEDIR.INC.'session.php');
include(BASEDIR.INC.'session_user.php');
$mode = htmlspecialchars($_GET['mode']);
include(BASEDIR.INC.'head.php');
show_title('Управление гостевой книгой');
if (is_admin(array(101, 102))) {
$users = mysql_query('SELECT * FROM users WHERE login = "'.$_COOKIE['login'].'"');
$users = mysql_fetch_assoc($users);
$admin = $users['status'];
if($admin == 101 || $admin == 102){ echo'<div class="razdel">Админ-панель</div>'; }
$act = '<img src="'.BASEDIR.''.IMG.'act.png">';
switch ($mode):
case 'index':
echo'<div class="menu">';
echo''.$act.' <a href="?mode=add">Добивить новость</a><br />
'.$act.' <a href="?mode=edit">Изменить новость</a><br />
'.$act.' <a href="?mode=delet">Удалить новость</a><br />';
echo'</div>';
break;
case 'add':
echo'<div class="menu">
<form action="?mode=add_ok" method="post">
Название новости:<br />
<input name="title" type="text" value="" /><br />
Новость:<br />
<textarea name="msg" cols="45" rows="5"></textarea><br />
<input name="" type="submit" value="Добавить" />
</form>
</div>';
break;
case 'add_ok':
$msg = check($_POST['msg']);
$title = check($_POST['title']);
if (utf_strlen($msg) >= 50 && utf_strlen($msg) < 1000) {
$msg = no_br($msg);
$msg = smiles($msg);
$data = date("d.m.Y");
mysql_query('INSERT INTO `news`(`title`, `news`, `data`, `login`,`time`) VALUES ("'.$title.'","'.$msg.'","'.$data.'","'.$_COOKIE['login'].'","'.(time() + (86400 * 3)).'")');
echo'<div class="menu">Новость Добавлена!</div>';
} else { echo'Ошибка! Слишком длинное или короткое сообщение!'; }
break;
case 'delet_kom':
$id = abs($_GET['id']);
mysql_query('DELETE FROM `news_kom` WHERE `id` = "'.$id.'"');
$a = $_SERVER['HTTP_REFERER'];
header ('location: '.$a.''); 
break;
case 'delet':
$id = abs($_GET['id']);
if($id == NULL){
define('TOPAGE',10);
$page=(int)$_GET['page'];  
     
   $q=mysql_result(mysql_query("SELECT COUNT(*) FROM `news` "),0);  
      
    $total = intval(($q - 1) / TOPAGE) + 1;  
      
    if(empty($page) or $page < 0) $page = 1;  
      
    if($page > $total) $page = $total;  
      
    $start = $page * TOPAGE -TOPAGE;  
 
    $g=mysql_query("SELECT * FROM `news` ORDER BY `id` DESC LIMIT $start,".TOPAGE."");  
while($u=mysql_fetch_array($g)){ 
echo'<div class="menu">
<a href="?mode=delet&id='.$u['id'].'" onclick="return confirm(\'Вы подтверждаете удаление?\')">'.$u['title'].'</a>
</div>';
}
 
       if ($page != $total) $nextpage = ' <a href="?mode='.$mode.'&page='. ($page + 1) .'">Далее</a>';  
      if($page - 1 > 0) $pageback = '<a href="?mode='.$mode.'&page='. ($page - 1) .'">Назад</a> ';  
echo''.$pageback.' '.$nextpage.'';
} else {
mysql_query('DELETE FROM `news` WHERE `id` = "'.$id.'"');
mysql_query('DELETE FROM `news_kom` WHERE `id_news` = "'.$id.'"');
echo'<div class="menu">Новость удалена!</div>';
}
break;
 
 
case 'edit':
$id = abs($_GET['id']);
if($id == NULL){
define('TOPAGE',10);
$page=(int)$_GET['page'];  
     
   $q=mysql_result(mysql_query("SELECT COUNT(*) FROM `news` "),0);  
      
    $total = intval(($q - 1) / TOPAGE) + 1;  
      
    if(empty($page) or $page < 0) $page = 1;  
      
    if($page > $total) $page = $total;  
      
    $start = $page * TOPAGE -TOPAGE;  
 
    $g=mysql_query("SELECT * FROM `news` ORDER BY `id` DESC LIMIT $start,".TOPAGE."");  
while($u=mysql_fetch_array($g)){ 
echo'<div class="menu">
<a href="?mode=edit&id='.$u['id'].'">'.$u['title'].'</a>
</div>';
}
 
       if ($page != $total) $nextpage = ' <a href="?mode='.$mode.'&page='. ($page + 1) .'">Далее</a>';  
      if($page - 1 > 0) $pageback = '<a href="?mode='.$mode.'&page='. ($page - 1) .'">Назад</a> ';  
echo''.$pageback.' '.$nextpage.'';
} else {
$n = mysql_query('SELECT * FROM news WHERE id = "'.$id.'"');
$n = mysql_fetch_assoc($n);
echo'<div class="menu">
<form action="?mode=edit_ok&id='.$id.'" method="post">
<input name="title" type="text" value="'.$n['title'].'" /><br />
<textarea name="msg" cols="45" rows="5">'.nosmiles($n['news']).'</textarea><br />
<input name="" type="submit" value="Редактировать" />
</form>
</div>';
}
break;
case 'edit_ok':
$id = abs($_GET['id']);
$msg = check($_POST['msg']);
$title = check($_POST['title']);
if (utf_strlen($msg) >= 50 && utf_strlen($msg) < 1000) {
$msg = no_br($msg);
$msg = smiles($msg);
mysql_query("UPDATE `news` SET `news`='$msg',`title`='$title' WHERE id = '".$id."'");
echo'<div class="menu">Новость изменена!!</div>';
} else { echo'Ошибка! Слишком длинное или короткое сообщение!'; }
break;
default: 
header ('location: ?mode=index'); 
endswitch;
echo'<div class="menu"><a href="/">На главную</a></div>';
} else {header ('location: /index.php?mode=index'); } 
include(BASEDIR.INC.'foot.php');
?>