WB 2.11.0

<?php

/**

 *

 * @category        admin

 * @package         pages

 * @author          WebsiteBaker Project

 * @copyright       Ryan Djurovich

 * @copyright       WebsiteBaker Org. e.V.

 * @link            http://websitebaker.org/

 * @license         http://www.gnu.org/licenses/gpl.html

 * @platform        WebsiteBaker 2.8.3

 * @requirements    PHP 5.3.6 and higher

 * @version         $Id: add.php 2 2017-07-02 15:14:29Z Manuela $

 * @filesource      $HeadURL: svn://isteam.dynxs.de/wb/2.10.x/trunk/admin/pages/add.php $

 * @lastmodified    $Date: 2017-07-02 17:14:29 +0200 (Sun, 02 Jul 2017) $

 *

 */

// Create new admin object and print admin header

if ( !defined( 'WB_PATH' ) ){ require( dirname(dirname((__DIR__))).'/config.php' ); }

if ( !class_exists('admin', false) ) { require(WB_PATH.'/framework/class.admin.php'); }

// suppress to print the header, so no new FTAN will be set

$admin = new admin('Pages', 'pages_add', false);

if (!$admin->checkFTAN())

{

    $admin->print_header();

    $admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'], ADMIN_URL );

}

// Include the WB functions file

require_once(WB_PATH.'/framework/functions.php');

// Get values

$title = $admin->get_post('title');

$title = htmlspecialchars($title);

$module = preg_replace('/[^a-z0-9_-]/i', "", $admin->get_post('type')); // fix secunia 2010-93-4

$parent = intval($admin->get_post('parent')); // fix secunia 2010-91-2

$visibility = $admin->get_post('visibility');

if (!in_array($visibility, array('public', 'private', 'registered', 'hidden', 'none'))) {$visibility = 'public';} // fix secunia 2010-91-2

$admin_groups = $admin->get_post('admin_groups');

$viewing_groups = $admin->get_post('viewing_groups');

// Work-out if we should check for existing page_code

$field_set = $database->field_exists(TABLE_PREFIX.'pages', 'page_code');

// add Admin to admin and viewing-groups

$admin_groups[] = 1;

$viewing_groups[] = 1;

// After check print the header

$admin->print_header();

// check parent page permissions:

if ($parent!=0) {

    if (!$admin->get_page_permission($parent,'admin'))

    {

        $admin->print_error($MESSAGE['PAGES_INSUFFICIENT_PERMISSIONS']);

    }

} elseif (!$admin->get_permission('pages_add_l0','system'))

{

    $admin->print_error($MESSAGE['PAGES_INSUFFICIENT_PERMISSIONS']);

}    

// check module permissions:

if (!$admin->get_permission($module, 'module'))

{

    $admin->print_error($MESSAGE['PAGES_INSUFFICIENT_PERMISSIONS']);

}    

// Validate data

if($title == '' || substr($title,0,1)=='.')

{

    $admin->print_error($MESSAGE['PAGES_BLANK_PAGE_TITLE']);

}

// Check to see if page created has needed permissions

if(!in_array(1, $admin->get_groups_id()))

{

    $admin_perm_ok = false;

    foreach ($admin_groups as $adm_group)

    {

        if (in_array($adm_group, $admin->get_groups_id()))

        {

            $admin_perm_ok = true;

        } 

    }

    if ($admin_perm_ok == false)

    {

        $admin->print_error($MESSAGE['PAGES_INSUFFICIENT_PERMISSIONS']);

    }

    $admin_perm_ok = false;

    foreach ($viewing_groups as $view_group)

    {

        if (in_array($view_group, $admin->get_groups_id()))

        {

            $admin_perm_ok = true;

        }

    }

    if ($admin_perm_ok == false)

    {

        $admin->print_error($MESSAGE['PAGES_INSUFFICIENT_PERMISSIONS']);

    }

}

$admin_groups = implode(',', $admin_groups);

$viewing_groups = implode(',', $viewing_groups);

// Work-out what the link and page filename should be

if($parent == '0')

{

    $link = '/'.page_filename($title);

    // rename menu titles: index && intro to prevent clashes with intro page feature and WB core file /pages/index.php

    if($link == '/index' || $link == '/intro')

    {

        $link .= '_0';

        $filename = WB_PATH .PAGES_DIRECTORY .'/' .page_filename($title) .'_0' .PAGE_EXTENSION;

    } else {

        $filename = WB_PATH.PAGES_DIRECTORY.'/'.page_filename($title).PAGE_EXTENSION;

    }

} else {

    $parent_section = '';

    $parent_titles = array_reverse(get_parent_titles($parent));

    foreach($parent_titles AS $parent_title)

    {

        $parent_section .= page_filename($parent_title).'/';

    }

    if($parent_section == '/') { $parent_section = ''; }

    $link = '/'.$parent_section.page_filename($title);

    $filename = WB_PATH.PAGES_DIRECTORY.'/'.$parent_section.page_filename($title).PAGE_EXTENSION;

    make_dir(WB_PATH.PAGES_DIRECTORY.'/'.$parent_section);

}

// Check if a page with same page filename exists

$sql = 'SELECT `page_id` FROM `'.TABLE_PREFIX.'pages` '

     . 'WHERE `link`=\''.$link.'\'';

$get_same_page = $database->get_one($sql);

if (

    $get_same_page OR

    file_exists(WB_PATH.PAGES_DIRECTORY.$link.PAGE_EXTENSION) OR

    file_exists(WB_PATH.PAGES_DIRECTORY.$link.'/')

) {

    $admin->print_error($MESSAGE['PAGES']['PAGE_EXISTS']);

}

// Include the ordering class

require(WB_PATH.'/framework/class.order.php');

$order = new order(TABLE_PREFIX.'pages', 'position', 'page_id', 'parent');

// First clean order

$order->clean($parent);

// Get new order

$position = $order->get_new($parent);

// Work-out if the page parent (if selected) has a seperate template or language to the default

$sql='SELECT `template`, `language` FROM `'.TABLE_PREFIX.'pages` '

    . 'WHERE `page_id` = '.(int)$parent;

$query_parent = $database->query($sql);

if ($query_parent->numRows() > 0) {

    $fetch_parent = $query_parent->fetchRow( MYSQLI_ASSOC );

    $template = $fetch_parent['template'];

    $language = $fetch_parent['language'];

} else {

    $template = '';

    $language = DEFAULT_LANGUAGE;

}

// Insert page into pages table

$sql = 'INSERT INTO `'.TABLE_PREFIX.'pages` '

     . 'SET `parent`='.(int)$parent.', '

     .     '`link` = \'\', '

     .     '`description`=\'\', '

     .     '`keywords`=\'\', '

     .     '`page_trail`=\'\', '

     .     '`admin_users`=\'\', '

     .     '`viewing_users`=\'\', '

     .     '`target`=\'_top\', '

     .     '`page_title`=\''.$database->escapeString($title).'\', '

     .     '`menu_title`=\''.$database->escapeString($title).'\', '

     .     '`template`=\''.$database->escapeString($template).'\', '

     .     '`visibility`=\''.$database->escapeString($visibility).'\', '

     .     '`position`='.(int)$position.', '

     .     '`menu`=1, '

     .     '`language`=\''.$database->escapeString($language).'\', '

     .     '`searching`=1, '

     .     '`modified_when`='.time().', '

     .     '`modified_by`='.(int)$admin->get_user_id().', '

     .     '`admin_groups`=\''.$database->escapeString($admin_groups).'\', '

     .     '`viewing_groups`=\''.$database->escapeString($viewing_groups).'\'';

if (!$database->query($sql)) {

    $admin->print_error($database->get_error());

}

// Get the new page id

$page_id = $database->getLastInsertId();

// Work out level

$level = level_count($page_id);

// Work out root parent

$root_parent = root_parent($page_id);

// Work out page trail

$page_trail = get_page_trail($page_id);

// Update page with new level and link

$sql  = 'UPDATE `'.TABLE_PREFIX.'pages` SET '

      . '`root_parent` = '.(int)$root_parent.', '

      . '`level` = '.(int)$level.', '

      . '`link` = \''.$database->escapeString($link).'\', '

      . ((defined('PAGE_LANGUAGES') && PAGE_LANGUAGES)

                 && $field_set

                 && ($language == DEFAULT_LANGUAGE)

                 && (file_exists(WB_PATH.'/modules/mod_multilingual/update_keys.php')

         )

         ? '`page_code` = '.(int)$page_id.', ' : '')

.     '`page_trail`=\''.$database->escapeString($page_trail).'\' '

      . 'WHERE `page_id` = '.$page_id;

    if (!$database->query($sql)) {

    $admin->print_error($database->get_error());

}

// Create a new file in the /pages dir

create_access_file($filename, $page_id, $level);

// add position 1 to new page

$position = 1;

// Add new record into the sections table

$sql = 'INSERT INTO `'.TABLE_PREFIX.'sections` '

     . 'SET `page_id`='.(int)$page_id.', '

     .     '`position`='.(int)$position.', '

     .     '`module`=\''.$database->escapeString($module).'\', '

     .     '`block`=1';

if (!$database->query($sql)) {

    $admin->print_error($database->get_error());

}

// Get the section id

if (!($section_id = $database->getLastInsertId())) {

    $admin->print_error($database->get_error());

}

// Include the selected modules add file if it exists

if (

    file_exists(WB_PATH.'/modules/'.$module.'/addon.php') &&

    file_exists(WB_PATH.'/modules/'.$module.'/cmd/cmdModify.inc')

) {

    $sCommand = 'modify';

//    require WB_PATH.'/modules/'.$module.'/addon.php';

    $admin->print_success($MESSAGE['PAGES_ADDED'], ADMIN_URL.'/pages/modify.php?page_id='.$page_id);

} else {

    if (file_exists(WB_PATH.'/modules/'.$module.'/add.php')) {

        require WB_PATH.'/modules/'.$module.'/add.php';

    }

    $admin->print_success($MESSAGE['PAGES_ADDED'], ADMIN_URL.'/pages/modify.php?page_id='.$page_id);

}

/*

// Include the selected modules add file if it exists

if(file_exists(WB_PATH.'/modules/'.$module.'/add.php')) {

    require(WB_PATH.'/modules/'.$module.'/add.php');

}

$admin->print_success($MESSAGE['PAGES']['ADDED'], ADMIN_URL.'/pages/modify.php?page_id='.$page_id);

*/

// Print admin footer

$admin->print_footer();