File: /home/awaldron/public_html/archive/demo/content_edit.php
<?php
session_start();
include("_functions.php");
echo dbconnect();
$admin = is_admin();
$sql = "SELECT * FROM tbl_pages WHERE page_id=".$_GET["p"];
$result = mysql_query($sql);
$p = mysql_fetch_array($result);
$page_title = "Edit Content - ".$p["page_title"];
$lnav_mods = array("empdir","leftnav","buzzword");
$rnav_mods = array();
if (!isset($_POST["post"])) {
$bbjava = true;
$disable_cbody = false;
}
include("_pagestart.php");
echo "<P><div class=\"headline\">".$page_title."</div><br>\n";
if (!authorize(get_owners($_GET["p"]))) { // CHECK IF USER ATTEMPTING THE EDIT IS AUTHORIZED TO EDIT
echo "<br><br><br>".error("You do not have the proper privileges to edit this notice.")."<br><br><br>";
echo "<center><a href=\"/content.php?p=".$_GET["p"]."\"><< Go Back</a></center><br><br><br>";
} else {
if (isset($_POST["post"])) { // IF POST IS BEING SUBMITTED
$query = "UPDATE tbl_pages SET ";
$query .= "username='".$_POST["username"]."', ";
//$query .= "page_header='".$_POST["page_header"]."', ";
$query .= "page_title='".$_POST["page_title"]."', ";
$query .= "page_body='".$_POST["message"]."', ";
$query .= "page_window=".$_POST["page_window"].", ";
$query .= "page_linkto='".$_POST["page_linkto"]."', ";
$query .= "page_updated=".time().", ";
$query .= "page_active=".$_POST["page_active"]." ";
$query .= "WHERE page_id=".$_POST["page_id"];
echo "<center><br><br><br><br>";
$result = mysql_query($query);
if ($result > 0) {
echo "<b>Your changes have been submitted successfully.</b>\n";
echo "<P><a href=\"".$_POST["update_url"]."\">Back to ".$_POST["page_title"]."</a><br><br><br><br>\n";
} else {
echo "<P>".$query;
echo error("There was an error while confirming your changes.");
echo error(mysql_error());
echo "<br><br><br><br>";
}
}
echo "<body onload=\"disableBody()\"></body>\n";
if (!isset($_POST["post"])) {
$preview = FALSE;
if (isset($_POST["preview"])) { // IF POST IS BEING PREVIEWED
$preview = TRUE;
echo "<br><center><div style=\"width:95%;text-align:left;\"><span style=\"font-size:14px\"><b>Preview of Your Post:</b></span><br>\n";
echo "<div style=\"background:#EEEEEE;width:100%;text-align:left;border:solid 2px #999999;padding:10px;\">\n";
echo "<P><span style=\"font-size:22px;color:#003466;\"><b>".stripslashes($_POST["page_title"])."</b></font></span><br><br>\n";
if ($_POST["message"] != "0") echo "<P>".format_body($_POST["message"])."\n";
echo "</div><P><div id=\"stamp\"> </div>\n";
echo "</div></center>\n";
}
echo "<center>\n";
if (!$preview) echo "<br><br><b>Use this form to edit page content.</b>\n";
echo "<form action=\"content_edit.php?p=".$_GET["p"]."\" method=\"post\" name=\"post\" onSubmit=\"MM_validateForm('username','','R');return document.MM_returnValue\">\n";
echo "<input type=\"hidden\" name=\"page_updated\" value=\"".time()."\">\n";
echo "<input type=\"hidden\" name=\"page_id\" value=\"".$_GET["p"]."\">\n";
echo "<input type=\"hidden\" name=\"update_url\" value=\"/content.php?p=".$_GET["p"]."\">\n";
if (!$admin) echo "<input type=\"hidden\" name=\"username\" value=\"".$_SESSION["auth_user"]."\">\n";
echo "<P><table border=\"0\" cellpadding=\"3\" cellspacing=\"1\">\n";
$psql = "SELECT page_title FROM tbl_pages WHERE page_id=".$p["parent_id"];
$pres = mysql_query($psql);
$parent = mysql_fetch_array($pres);
$active_status = (!$preview?$p["page_active"]:$_POST["page_active"]);
echo "<tr><td><b>Page is Active?</b></td><td><SELECT name=\"page_active\" onMouseOver=\"helpline('del')\"><option value=\"1\"".($active_status==1?" SELECTED":"").">Yes</option><option value=\"0\"".($active_status==0?" SELECTED":"").">No</option></SELECT></td>\n";
echo "<td rowspan=6 valign=\"top\" width=\"*\">\n";
echo "<table width=250 border=0 cellpadding=3 cellspacing=2 bgcolor=\"#".COLOR_TBAR."\">\n";
echo "<tr class=\"header\"><td><b>Advanced Edit:</b></td></tr>\n";
echo "<tr><td bgcolor=\"#".COLOR_BG."\">\n";
echo " <ul><li> <a href=\"#\" onClick=\"openWindow('/content_edit_owners.php?p=".$_GET["p"]."','','resizable=yes,width=500,height=350')\">Add/Remove Owners</a>\n";
echo " <li> <a href=\"#\" onClick=\"openWindow('/content_edit_access.php?p=".$_GET["p"]."','','resizable=yes,width=700,height=450')\">Restrict Page Access</a>\n";
//if (is_admin()) echo "<br> <img src=\"/gui/bullet.gif\"> <a href=\"#\" onClick=\"openWindow('../upload/index.php?a=content','','resizable=yes,width=500,height=300')\">Insert a Photo</a>\n";
echo "</ul><br></td></tr>\n";
echo "</table>\n";
echo "</td>\n";
echo "</tr>\n";
if ($admin) echo "<tr><td><b>Username</b></td><td><input type=\"text\" name=\"username\" size=\"45\" maxlength=\"32\" style=\"width:250px\" value=\"".$p["username"]."\" onMouseOver=\"helpline('un')\"></td></tr>\n";
else echo "<tr><td><b>Username</b></td><td><input type=\"text\" name=\"dummy_username\" size=\"45\" maxlength=\"32\" style=\"width:250px\" value=\"".$_SESSION["auth_user"]."\" onMouseOver=\"helpline('un')\" DISABLED></td></tr>\n";
echo "<tr><td><b>Parent Page:</b></td><td><input type=\"text\" name=\"parentname\" style=\"width:250px\" value=\"".$parent["page_title"]."\" DISABLED></td></tr>\n";
echo "<tr><td><b>Page Title</b></td><td><input type=\"text\" name=\"page_title\" size=\"45\" maxlength=\"255\" style=\"width:250px\" value=\"".(!$preview?stripslashes($p["page_title"]):stripslashes($_POST["page_title"]))."\" onMouseOver=\"helpline('pt')\"></td></tr>\n";
echo "<tr><td><b>Link To URL</b></td><td><input type=\"text\" name=\"page_linkto\" onChange=\"disableCBody()\" size=\"45\" maxlength=\"255\" style=\"width:250px\" value=\"".(!$preview?stripslashes($p["page_linkto"]):stripslashes($_POST["page_linkto"]))."\" onMouseOver=\"helpline('clt')\" /></td></tr>\n";
echo "<tr><td><b>Open in New Window?</b></td><td><SELECT name=\"page_window\" onMouseOver=\"helpline('win')\"><option value=\"0\"".(!$preview?($p["page_window"]==0?" SELECTED":""):($_POST["page_window"]==0?" SELECTED":"")).">No</option><option value=\"1\"".(!$preview?($p["page_window"]==1?" SELECTED":""):($_POST["page_window"]==1?" SELECTED":"")).">Yes</option></SELECT></td></tr>\n";
echo "<tr><td colspan=3> </td></tr>\n";
echo "<tr><td valign=\"top\" colspan=3><b>Page Body</b> : <a href=\"#\" onClick=\"openWindow('/button_buddy.php','','resizable=yes,width=650,height=425')\">Need help? Click Here to Open the Button Buddy</a></td></tr>\n";
echo "<tr><td colspan=3 class=\"row2\" valign=\"top\" bgcolor=\"#EBEFF5\" style=\"border:solid 1px #999999;\">\n";
echo ins_textarea((!$preview?$p["page_body"]:stripslashes($_POST["message"])));
// Preview & Submit Buttons
echo "<P><center><input type=\"submit\" name=\"preview\" value=\" Preview \"> <input type=\"submit\" name=\"post\" value=\" Submit \" /></center>\n";
echo "</td></tr></table>\n";
echo "</form>\n";
echo "</center>\n";
}
} // END PERMISSION ELSE
include("_pageend.php");
?>