File: /home/awaldron/public_html/archive/demo/content_add.php
<?php
session_start();
include("_functions.php");
echo dbconnect();
$sql = "SELECT * FROM tbl_pages WHERE page_id=".$_GET["p"];
$result = mysql_query($sql);
$p = mysql_fetch_array($result);
$page_title = "Create New Content";
$lnav_mods = array("empdir","leftnav","buzzword");
$rnav_mods = array();
if (isset($_POST["post"])) { // IF POST IS BEING SUBMITTED
if (strlen($_POST["page_linkto"]) > 7) $linkto = $_POST["page_linkto"];
else $linkto = "0";
$sql = "INSERT INTO tbl_pages (parent_id, page_title, page_linkto, page_body, page_window, username, page_created, page_updated) ";
$sql .= "VALUES (".$_POST["parent_id"].",'".$_POST["page_title"]."','".$linkto."','".$_POST["message"]."',".$_POST["page_window"].",'".$_POST["username"]."',".time().",".time().")";
//echo $sql;
$result = mysql_query($sql);
if ($result > 0) {
$sql2 = "SELECT MAX(page_id) AS pid FROM tbl_pages WHERE 1";
$result2 = mysql_query($sql2);
$p = mysql_fetch_array($result2);
$sql3 = "INSERT INTO tbl_page_owners (page_id,username) VALUES (".$p["pid"].",'".$_POST["username"]."')";
$res3 = mysql_query($sql3);
header("Location: /content.php?p=".$p["pid"]);
} else {
echo $sql."<P>".error(mysql_error());
}
}
if (!isset($_POST["post"])) $bbjava = true;
include("_pagestart.php");
if (!isset($_POST["post"]) && !isset($_POST["preview"])) echo "<body onload=\"disableBody()\"></body>\n";
echo "<P><div class=\"headline\">".$page_title."</div><br>\n";
if (!isset($_POST["post"])) {
$preview = FALSE;
if (isset($_POST["preview"])) { // IF POST IS BEING PREVIEWED
$preview = TRUE;
echo "<br><center><div style=\"width:95%;text-align:left;\"><span style=\"font-size:14px\"><b>Preview of Your Post:</b></span><br>\n";
echo "<div style=\"background:#EEEEEE;width:100%;text-align:left;border:solid 2px #999999;padding:10px;\">\n";
echo "<P><span style=\"font-size:22px;color:#003466;\"><b>".stripslashes($_POST["page_title"])."</b></font></span><br><br>\n";
if ($_POST["message"] != "0") echo "<P>".format_body($_POST["message"])."\n";
echo "</div><P><div id=\"stamp\"> </div>\n";
echo "</div></center>\n";
}
echo "<center>\n";
if (!$preview) echo "<br><br><b>Use this page to create new content in the ".$p["page_header"]." section.</b>\n";
echo "<form action=\"content_add.php?p=".$_GET["p"]."\" method=\"post\" name=\"post\" onSubmit=\"MM_validateForm('username','','R');return document.MM_returnValue\">\n";
echo "<input type=\"hidden\" name=\"page_updated\" value=\"".time()."\">\n";
echo "<input type=\"hidden\" name=\"parent_id\" value=\"".$_GET["p"]."\">\n";
echo "<input type=\"hidden\" name=\"username\" value=\"".$_SESSION["auth_user"]."\">\n";
echo "<P><table border=\"0\" cellpadding=\"3\" cellspacing=\"1\">\n";
$psql = "SELECT page_title FROM tbl_pages WHERE page_id=".$p["parent_id"];
$pres = mysql_query($psql);
$parent = mysql_fetch_array($pres);
echo "<tr><td><b>Username</b></td><td><input type=\"text\" name=\"dummy_username\" size=\"45\" maxlength=\"32\" style=\"width:150px\" value=\"".$_SESSION["auth_user"]."\" DISABLED></td></tr>\n";
echo "<tr><td><b>Parent Page:</b></td><td><input type=\"text\" name=\"parentname\" style=\"width:250px\" value=\"".$p["page_title"]."\" DISABLED></td></tr>\n";
echo "<tr><td><b>Page Title</b></td><td><input type=\"text\" name=\"page_title\" size=\"45\" maxlength=\"32\" style=\"width:250px\" value=\"".stripslashes($_POST["page_title"])."\" onMouseOver=\"helpline('pt')\"></td></tr>\n";
echo "<tr><td><b>Link To URL</b></td><td><input type=\"text\" name=\"page_linkto\" onChange=\"disableCBody()\" size=\"45\" maxlength=\"255\" style=\"width:550px\" value=\"http://\" onMouseOver=\"helpline('clt')\" /></td></tr>\n";
echo "<tr><td><b>Open in New Window?</b></td><td><SELECT name=\"page_window\" onMouseOver=\"helpline('win')\"><option value=\"0\"".($_POST["page_window"]==0?" SELECTED":($p["page_window"]==0?" SELECTED":"")).">No</option><option value=\"1\"".($_POST["page_window"]==1?" SELECTED":($p["page_window"]==1?" SELECTED":"")).">Yes</option></SELECT></td></tr>\n";
echo "<tr><td colspan=3> </td></tr>\n";
echo "<tr><td valign=\"top\" colspan=3><b>Page Body</b> : <a href=\"#\" onClick=\"openWindow('/button_buddy.php','','resizable=yes,width=650,height=425')\">Need help? Click Here to Open the Button Buddy</a></td></tr>\n";
echo "<tr><td colspan=3 class=\"row2\" valign=\"top\" bgcolor=\"#EBEFF5\" style=\"border:solid 1px #999999;\">\n";
echo ins_textarea((!$preview?"":stripslashes($_POST["message"])));
// Preview & Submit Buttons
echo "<P><center><input type=\"submit\" name=\"preview\" value=\" Preview \"> <input type=\"submit\" name=\"post\" value=\" Submit \" /></center>\n";
echo "</td></tr></table>\n";
echo "</form>\n";
echo "</center>\n";
}
include("_pageend.php");
?>