File: /home/awaldron/public_html/archive/demo/notice_edit.php
<?php
session_start();
$stickypower = array("awaldron","mbennett","apoorman","rbyford");
include("_functions.php");
echo dbconnect();
$admin = is_admin();
$sql = "SELECT * FROM tbl_notices, tbl_notice_types WHERE tbl_notices.notice_id=".$_GET["nid"]." AND tbl_notices.notice_type_id=tbl_notice_types.notice_type_id";
$result = mysql_query($sql);
$n = mysql_fetch_array($result);
$page_title = "Edit Topic : ".$n["notice_type_name"];
$GLOBALS["ntid"] = $n["notice_type_id"];
if (isset($_GET["sf"])) {
$GLOBALS["breadcrumb"] = "<a href=\"/content.php?p=1\">Intranet Home</a> > <a href=\"/content.php?p=209\">Social</a> > <a href=\"/forums.php\">Discussion Forums</a> > <a href=\"/noticeboard.php?ntid=".$n["notice_type_id"]."&sf=1\">".$n["notice_type_name"]."</a> > <a href=\"/notice.php?nid=".$n["notice_id"]."&sf=1\">".(strlen(strip_tags($n["notice_headline"]))>37?substr(strip_tags($n["notice_headline"]),0,37)."...":strip_tags($n["notice_headline"]))."</a> > Edit Topic";
$_GET["p"] = 5;
} else $_GET["p"] = $n["parent_id"]; // SET FAUX PARENT ID
$lnav_mods = get_layout($_GET["p"],1);
$rnav_mods = get_layout($_GET["p"],3);
if (!isset($_POST["post"])) {
$bbjava = true;
$disable_body = true;
}
include("_pagestart.php");
echo "<P><div class=\"headline\">".$page_title."</div>\n";
if (authorize($n["username"]) || check_pgroup($_SESSION["auth_user"],$n["board_admins"])) { // CHECK IF USER ATTEMPTING THE EDIT IS THE USER WHO POSTED IT
if (isset($_POST["post"])) { // IF POST IS BEING SUBMITTED
$date = date_caltounix($_POST["notice_date"]);
$query = "UPDATE tbl_notices SET ";
$query .= "icon_id=".$_POST["icon_id"].", ";
$query .= "username='".$_POST["username"]."', ";
$query .= "notice_headline='".strip_tags($_POST["notice_headline"])."', ";
$query .= "notice_subhead='".$_POST["notice_subhead"]."', ";
$query .= "notice_date='".$date."', ";
$query .= "notice_linkto='".$_POST["notice_linkto"]."', ";
$query .= "notice_body='".$_POST["message"]."', ";
$query .= "notice_updated=".time().", ";
$query .= "notice_sticky=".$_POST["notice_sticky"].", ";
$query .= "notice_active=".$_POST["notice_active"]." ";
$query .= "WHERE notice_id=".$_POST["notice_id"];
$result = mysql_query($query);
echo "<center><br><br><br><br>";
if ($result > 0) {
echo "<b>Your changes have been submitted successfully.</b>\n";
echo "<P><a href=\"".$_POST["update_url"]."\">Back to '".stripslashes(strip_tags($_POST["notice_headline"]))."'</a><br><br><br><br>\n";
} else {
echo "<P>".$query;
echo error("There was an error while confirming your changes.");
echo error(mysql_error());
echo "<br><br><br><br>";
}
}
//if (!isset($_POST["post"]) && !isset($_POST["preview"])) echo "<body onload=\"disableBody()\"></body>\n";
if (!isset($_POST["post"])) {
$preview = isset($_POST["preview"]);
if ($preview) { // IF POST IS BEING PREVIEWED
$sql = "SELECT * FROM tbl_icons WHERE icon_id=".$_POST["icon_id"];
$result = mysql_query($sql);
$row = mysql_fetch_array($result);
$preview_date = date_caltounix($_POST["notice_date"]);
echo "<br><center><div style=\"width:95%;text-align:left;\"><span style=\"font-size:14px\"><b>Preview of Your Post:</b></span><br>\n";
echo "<div style=\"background:#EEEEEE;width:100%;text-align:left;border:solid 2px #999999;padding:10px;\">\n";
echo "<div id=\"stamp\"><img src=\"".$row["icon_file"]."\"> ".date("l, F j, Y h:i a",$preview_date)."</div>\n";
if ($_POST["notice_headline"] != "0") echo "<P><span class=\"headline\">".stripslashes(strip_tags($_POST["notice_headline"]))."</span>\n";
if ($_POST["notice_subhead"] != "0") echo "<P><span class=\"subhead\">".stripslashes($_POST["notice_subhead"])."</span>\n";
if ($_POST["message"] != "0") echo "<P>".format_body($_POST["message"])."\n";
echo "</div><P><div id=\"stamp\"> </div>\n";
echo "</div></center>\n";
}
echo "<center>\n";
if (!$preview) echo "<br><br><b>Use this page to edit a post on the ".$n["notice_type_name"]."</b>\n";
echo "<form action=\"notice_edit.php?nid=".$_GET["nid"].(isset($_GET["sf"])?"&sf=1":"")."\" method=\"post\" name=\"post\" onSubmit=\"MM_validateForm('username','','R');return document.MM_returnValue\">\n";
echo "<input type=\"hidden\" name=\"notice_type_id\" value=\"".(isset($_POST["notice_type_id"])?$_POST["notice_type_id"]:$n["notice_type_id"])."\">\n";
echo "<input type=\"hidden\" name=\"notice_id\" value=\"".$n["notice_id"]."\">\n";
//echo "<input type=\"hidden\" name=\"notice_date\" value=\"".$n["notice_date"]."\">\n";
echo "<input type=\"hidden\" name=\"update_url\" value=\"/notice.php?nid=".$n["notice_id"]."\">\n";
if (!$admin) echo "<input type=\"hidden\" name=\"username\" value=\"".$_SESSION["auth_user"]."\">\n";
echo "<P><table border=\"0\" cellpadding=\"3\" cellspacing=\"1\">\n";
echo "<tr><td><b>Delete Post?</b></td><td><SELECT name=\"notice_active\" onMouseOver=\"helpline('del')\"><option value=\"1\" SELECTED>No</option><option value=\"0\">Yes</option></SELECT></td></tr>\n";
if ($admin) echo "<tr><td><b>Username</b></td><td><input type=\"text\" name=\"username\" size=\"45\" maxlength=\"32\" style=\"width:150px\" value=\"".$n["username"]."\"></td></tr>\n";
else echo "<tr><td><b>Username</b></td><td><input type=\"text\" name=\"dummy_username\" size=\"45\" maxlength=\"32\" style=\"width:150px\" value=\"".$_SESSION["auth_user"]."\" DISABLED></td></tr>\n";
echo "<tr><td><b>Notice Date</b></td><td><input type=\"text\" name=\"notice_date\" style=\"width:80px\" value=\"".(!$preview?date("m/d/Y",$n["notice_date"]):$_POST["notice_date"])."\" onMouseOver=\"helpline('nd')\"> (mm/dd/yyyy)</td></tr>\n";
if (in_array($_SESSION["auth_user"],$stickypower)) echo "<tr><td><b>Make Sticky?</b></td><td><SELECT name=\"notice_sticky\" onMouseOver=\"helpline('st')\"><option value=\"0\"".($_POST["notice_sticky"]==0?" SELECTED":"").">No</option><option value=\"1\"".($_POST["notice_sticky"]==1?" SELECTED":"").">Yes</option></SELECT></td></tr>\n";
else echo "<input type=\"hidden\" name=\"notice_sticky\" value=\"0\">\n";
echo "<tr><td><b>Icon</b></td><td>\n";
$sql = "SELECT * FROM tbl_icons WHERE 1 ORDER BY icon_id";
$result = mysql_query($sql);
for ($i=0; $i < mysql_num_rows($result); $i++) {
$icon = mysql_fetch_array($result);
if (!$preview) echo "<input type=radio name=\"icon_id\" value=\"".$icon["icon_id"]."\" onMouseOver=\"helpline('ic')\"".($n["icon_id"]==$icon["icon_id"]?" CHECKED":"")."><img src=\"".$icon["icon_file"]."\" alt=\"".$icon["icon_name"]."\"> ";
else echo "<input type=radio name=\"icon_id\" value=\"".$icon["icon_id"]."\" onMouseOver=\"helpline('ic')\"".($_POST["icon_id"]==$icon["icon_id"]?" CHECKED":"")."><img src=\"".$icon["icon_file"]."\" alt=\"".$icon["icon_name"]."\"> ";
}
echo "</td></tr>\n";
echo "<tr><td><b>Headline</b></td><td><input type=\"text\" name=\"notice_headline\" size=\"45\" maxlength=\"255\" style=\"width:550px\" value=\"".stripslashes(!$preview?htmlspecialchars($n["notice_headline"]):htmlspecialchars($_POST["notice_headline"]))."\" onMouseOver=\"helpline('hl')\" /></td></tr>\n";
echo "<tr><td><b>Sub-Head</b></td><td><input type=\"text\" name=\"notice_subhead\" id=\"subheadbox\" size=\"45\" maxlength=\"255\" style=\"width:550px\" value=\"".stripslashes(!$preview?htmlspecialchars($n["notice_subhead"]):htmlspecialchars($_POST["notice_subhead"]))."\" onMouseOver=\"helpline('sh')\" /></td></tr>\n";
echo "<tr><td><b>Link To URL</b></td><td><input type=\"text\" name=\"notice_linkto\" onChange=\"disableBody()\" size=\"45\" maxlength=\"255\" style=\"width:550px\" value=\"".(strlen($n["notice_linkto"])>7?$n["notice_linkto"]:"http://")."\" onMouseOver=\"helpline('lt')\" /></td></tr>\n";
echo "<tr><td colspan=3> </td></tr>\n";
echo "<tr><td valign=\"top\" colspan=3><b>Message Body</b> : <a href=\"#\" onClick=\"openWindow('/button_buddy.php','','resizable=yes,width=650,height=425')\">Need help? Click Here to Open the Button Buddy</a></td></tr>\n";
echo "<tr><td colspan=3 class=\"row2\" valign=\"top\" bgcolor=\"#EBEFF5\" style=\"border:solid 1px #999999;\">\n";
echo ins_textarea((!$preview?$n["notice_body"]:stripslashes($_POST["message"])));
// Preview & Submit Buttons
echo "<P><center><input type=\"submit\" name=\"preview\" value=\" Preview \"> <input type=\"submit\" name=\"post\" value=\" Submit \" /></center>\n";
echo "</td></tr></table>\n";
echo "</form>\n";
echo "</center>\n";
}
} else { // IF USER DOES NOT HAVE PERMISSION TO MODIFY THE POST
echo "<br><br><br>".error("You do not have the proper privileges to edit this notice.")."<br><br><br>";
echo "<center><a href=\"/notice.php?nid=".$n["notice_id"]."\">Back To The Notice</a></center><br><br><br>";
}
include("_pageend.php");
?>