| 1 | 2 | Manuela | <?php
 | 
      
        | 2 |  |  | /**
 | 
      
        | 3 |  |  |  *
 | 
      
        | 4 |  |  |  * @category        admin
 | 
      
        | 5 |  |  |  * @package         pages
 | 
      
        | 6 |  |  |  * @author          WebsiteBaker Project
 | 
      
        | 7 |  |  |  * @copyright       Ryan Djurovich
 | 
      
        | 8 |  |  |  * @copyright       WebsiteBaker Org. e.V.
 | 
      
        | 9 |  |  |  * @link            http://websitebaker.org/
 | 
      
        | 10 |  |  |  * @license         http://www.gnu.org/licenses/gpl.html
 | 
      
        | 11 |  |  |  * @platform        WebsiteBaker 2.8.3
 | 
      
        | 12 |  |  |  * @requirements    PHP 5.3.6 and higher
 | 
      
        | 13 |  |  |  * @version         $Id$
 | 
      
        | 14 |  |  |  * @filesource      $HeadURL$
 | 
      
        | 15 |  |  |  * @lastmodified    $Date$
 | 
      
        | 16 |  |  |  *
 | 
      
        | 17 |  |  | */
 | 
      
        | 18 |  |  | // Create new admin object
 | 
      
        | 19 |  |  | if ( !defined( 'WB_PATH' ) ){ require( dirname(dirname((__DIR__))).'/config.php' ); }
 | 
      
        | 20 |  |  | if ( !class_exists('admin', false) ) { require(WB_PATH.'/framework/class.admin.php'); }
 | 
      
        | 21 |  |  | 
 | 
      
        | 22 |  |  | $admin = new admin('Pages', 'pages_modify');
 | 
      
        | 23 |  |  | // Get page id
 | 
      
        | 24 |  |  | 
 | 
      
        | 25 |  |  |     $requestMethod = '_'.strtoupper($_SERVER['REQUEST_METHOD']);
 | 
      
        | 26 |  |  |     $page_id = intval(isset(${$requestMethod}['page_id']) ? ${$requestMethod}['page_id'] : 0);
 | 
      
        | 27 |  |  |     if( ($page_id == 0) || !is_numeric($page_id) ) {
 | 
      
        | 28 |  |  |         $sInfo = strtoupper(basename(__DIR__).'_'.basename(__FILE__, '.'.PAGE_EXTENSION)).'::';
 | 
      
        | 29 |  |  |         $sDEBUG=(@DEBUG?$sInfo:'');
 | 
      
        | 30 |  |  |         $admin->print_error($sDEBUG.$MESSAGE['PAGES_NOT_FOUND'], ADMIN_URL.'/pages/index.php' );
 | 
      
        | 31 |  |  |     }
 | 
      
        | 32 |  |  | 
 | 
      
        | 33 |  |  | /*
 | 
      
        | 34 |  |  | if( (!($page_id = $admin->checkIDKEY('page_id', $page_id, $_SERVER['REQUEST_METHOD']))) )
 | 
      
        | 35 |  |  | {
 | 
      
        | 36 |  |  |     $admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'], ADMIN_URL );
 | 
      
        | 37 |  |  | }
 | 
      
        | 38 |  |  | */
 | 
      
        | 39 |  |  | 
 | 
      
        | 40 |  |  | // Get perms
 | 
      
        | 41 |  |  | if(!$admin->get_page_permission($page_id,'admin')) {
 | 
      
        | 42 |  |  |     $admin->print_error($MESSAGE['PAGES_INSUFFICIENT_PERMISSIONS'], ADMIN_URL );
 | 
      
        | 43 |  |  | }
 | 
      
        | 44 |  |  | 
 | 
      
        | 45 |  |  | $sectionId = isset($_GET['wysiwyg']) ? htmlspecialchars($admin->get_get('wysiwyg')) : NULL;
 | 
      
        | 46 |  |  | 
 | 
      
        | 47 |  |  | // Get page details
 | 
      
        | 48 |  |  | $results_array=$admin->get_page_details($page_id);
 | 
      
        | 49 |  |  | 
 | 
      
        | 50 |  |  | // Get display name of person who last modified the page
 | 
      
        | 51 |  |  | $user=$admin->get_user_details($results_array['modified_by']);
 | 
      
        | 52 |  |  | 
 | 
      
        | 53 |  |  | // Convert the unix ts for modified_when to human a readable form
 | 
      
        | 54 |  |  | 
 | 
      
        | 55 |  |  | $modified_ts = ($results_array['modified_when'] != 0)
 | 
      
        | 56 |  |  |         ? $modified_ts = date(TIME_FORMAT.', '.DATE_FORMAT, $results_array['modified_when']+TIMEZONE)
 | 
      
        | 57 |  |  |         : 'Unknown';
 | 
      
        | 58 |  |  | // $ftan_module = $GLOBALS['ftan_module'];
 | 
      
        | 59 |  |  | // Setup template object, parse vars to it, then parse it
 | 
      
        | 60 |  |  | // Create new template object
 | 
      
        | 61 |  |  | $template = new Template(dirname($admin->correct_theme_source('pages_modify.htt')));
 | 
      
        | 62 |  |  | // $template->debug = true;
 | 
      
        | 63 |  |  | $template->set_file('page', 'pages_modify.htt');
 | 
      
        | 64 |  |  | $template->set_block('page', 'main_block', 'main');
 | 
      
        | 65 |  |  | // $template->set_var('FTAN', $admin->getFTAN() );
 | 
      
        | 66 |  |  | 
 | 
      
        | 67 |  |  | $template->set_var(array(
 | 
      
        | 68 |  |  |             'PAGE_ID' => $results_array['page_id'],
 | 
      
        | 69 |  |  |             // 'PAGE_IDKEY' => $admin->getIDKEY($results_array['page_id']),
 | 
      
        | 70 |  |  |             'PAGE_IDKEY' => $results_array['page_id'],
 | 
      
        | 71 |  |  |             'PAGE_TITLE' => ($results_array['page_title']),
 | 
      
        | 72 |  |  |             'MENU_TITLE' => ($results_array['menu_title']),
 | 
      
        | 73 |  |  |             'ADMIN_URL' => ADMIN_URL,
 | 
      
        | 74 |  |  |             'WB_URL' => WB_URL,
 | 
      
        | 75 |  |  |             'THEME_URL' => THEME_URL
 | 
      
        | 76 |  |  |             ));
 | 
      
        | 77 |  |  | 
 | 
      
        | 78 |  |  | $template->set_var(array(
 | 
      
        | 79 |  |  |             'MODIFIED_BY' => $user['display_name'],
 | 
      
        | 80 |  |  |             'MODIFIED_BY_USERNAME' => $user['username'],
 | 
      
        | 81 |  |  |             'MODIFIED_WHEN' => $modified_ts,
 | 
      
        | 82 |  |  |             'LAST_MODIFIED' => $MESSAGE['PAGES']['LAST_MODIFIED'],
 | 
      
        | 83 |  |  |             ));
 | 
      
        | 84 |  |  | 
 | 
      
        | 85 |  |  | $template->set_block('main_block', 'show_modify_block', 'show_modify');
 | 
      
        | 86 |  |  | if($modified_ts == 'Unknown')
 | 
      
        | 87 |  |  | {
 | 
      
        | 88 |  |  |     $template->set_block('show_modify', '');
 | 
      
        | 89 |  |  |     $template->set_var('CLASS_DISPLAY_MODIFIED', 'hide');
 | 
      
        | 90 |  |  | 
 | 
      
        | 91 |  |  | } else {
 | 
      
        | 92 |  |  |     $template->set_var('CLASS_DISPLAY_MODIFIED', '');
 | 
      
        | 93 |  |  |     $template->parse('show_modify', 'show_modify_block', true);
 | 
      
        | 94 |  |  | }
 | 
      
        | 95 |  |  | 
 | 
      
        | 96 |  |  | // Work-out if we should show the "manage sections" link
 | 
      
        | 97 |  |  | $sql = 'SELECT COUNT(*) FROM `'.TABLE_PREFIX.'sections` '
 | 
      
        | 98 |  |  |      . 'WHERE `page_id`='.(int)$page_id.' AND `module`=\'menu_link\'';
 | 
      
        | 99 |  |  | $query_sections = $database->get_one($sql);
 | 
      
        | 100 |  |  | 
 | 
      
        | 101 |  |  | $template->set_block('main_block', 'show_section_block', 'show_section');
 | 
      
        | 102 |  |  | if($query_sections) {
 | 
      
        | 103 |  |  |     $template->set_block('show_section', '');
 | 
      
        | 104 |  |  |     $template->set_var('DISPLAY_MANAGE_SECTIONS', 'display:none;');
 | 
      
        | 105 |  |  | } elseif(MANAGE_SECTIONS == 'enabled') {
 | 
      
        | 106 |  |  |     $template->set_var('TEXT_MANAGE_SECTIONS', $HEADING['MANAGE_SECTIONS']);
 | 
      
        | 107 |  |  |     $template->parse('show_section', 'show_section_block', true);
 | 
      
        | 108 |  |  | } else {
 | 
      
        | 109 |  |  |     $template->set_block('show_section', '');
 | 
      
        | 110 |  |  |     $template->set_var('DISPLAY_MANAGE_SECTIONS', 'display:none;');
 | 
      
        | 111 |  |  | }
 | 
      
        | 112 |  |  | 
 | 
      
        | 113 |  |  | // Insert language TEXT
 | 
      
        | 114 |  |  | $template->set_var(array(
 | 
      
        | 115 |  |  |                 'TEXT_CURRENT_PAGE' => $TEXT['CURRENT_PAGE'],
 | 
      
        | 116 |  |  |                 'TEXT_CHANGE_SETTINGS' => $TEXT['CHANGE_SETTINGS'],
 | 
      
        | 117 |  |  |                 'HEADING_MODIFY_PAGE' => $HEADING['MODIFY_PAGE']
 | 
      
        | 118 |  |  |                 ));
 | 
      
        | 119 |  |  | 
 | 
      
        | 120 |  |  | // Parse and print header template
 | 
      
        | 121 |  |  | $template->parse('main', 'main_block', false);
 | 
      
        | 122 |  |  | $template->pparse('output', 'page');
 | 
      
        | 123 |  |  | 
 | 
      
        | 124 |  |  | // get template used for the displayed page (for displaying block details)
 | 
      
        | 125 |  |  | if (SECTION_BLOCKS)
 | 
      
        | 126 |  |  | {
 | 
      
        | 127 |  |  |     $sql = 'SELECT `template` FROM `'.TABLE_PREFIX.'pages` '
 | 
      
        | 128 |  |  |          . 'WHERE `page_id`='.(int)$page_id;
 | 
      
        | 129 |  |  |     if (($sTemplate = $database->get_one($sql)) !== null) {
 | 
      
        | 130 |  |  |         $page_template = ($sTemplate == '') ? DEFAULT_TEMPLATE : $sTemplate;
 | 
      
        | 131 |  |  |         // include template info file if exists
 | 
      
        | 132 |  |  |         if (is_readable(WB_PATH.'/templates/'.$page_template.'/info.php')) {
 | 
      
        | 133 |  |  |             include_once(WB_PATH.'/templates/'.$page_template.'/info.php');
 | 
      
        | 134 |  |  |         }
 | 
      
        | 135 |  |  |     }
 | 
      
        | 136 |  |  | }
 | 
      
        | 137 |  |  | 
 | 
      
        | 138 |  |  | // Get sections for this page
 | 
      
        | 139 |  |  | $module_permissions = $_SESSION['MODULE_PERMISSIONS'];
 | 
      
        | 140 |  |  | // workout for edit only one section for faster pageloading
 | 
      
        | 141 |  |  | // Constant later set in wb_settings, in meantime defined in framework/initialize.php
 | 
      
        | 142 |  |  | $sql = 'SELECT * FROM `'.TABLE_PREFIX.'sections` ';
 | 
      
        | 143 |  |  | $sql .= (defined('EDIT_ONE_SECTION') && EDIT_ONE_SECTION && is_numeric($sectionId))
 | 
      
        | 144 |  |  |         ? 'WHERE `section_id` = '.(int)$sectionId
 | 
      
        | 145 |  |  |         : 'WHERE `page_id` = '.(int)$page_id;
 | 
      
        | 146 |  |  | $sql .= ' ORDER BY position ASC';
 | 
      
        | 147 |  |  | $query_sections = $database->query($sql);
 | 
      
        | 148 |  |  | if($query_sections->numRows() > 0)
 | 
      
        | 149 |  |  | {
 | 
      
        | 150 |  |  |     while($section = $query_sections->fetchRow(MYSQLI_ASSOC))
 | 
      
        | 151 |  |  |     {
 | 
      
        | 152 |  |  |         $now = time();
 | 
      
        | 153 |  |  |         $bSectionInactive = !(($now<=$section['publ_end'] || $section['publ_end']==0) && ($now>=$section['publ_start'] || $section['publ_start']==0));
 | 
      
        | 154 |  |  |         $section_id = $section['section_id'];
 | 
      
        | 155 |  |  |         $module = $section['module'];
 | 
      
        | 156 |  |  |         //Have permission?
 | 
      
        | 157 |  |  |         if(!is_numeric(array_search($module, $module_permissions)))
 | 
      
        | 158 |  |  |         {
 | 
      
        | 159 |  |  |             // Include the modules editing script if it exists
 | 
      
        | 160 |  |  |             if (!is_readable(WB_PATH.'/modules/'.$module.'/modify.php')){
 | 
      
        | 161 |  |  |                 $admin->print_error($MESSAGE['GENERIC_MODULE_VERSION_ERROR'],ADMIN_URL.'/pages/settings.php?page_id='.(int)$page_id);
 | 
      
        | 162 |  |  |             } else {
 | 
      
        | 163 |  |  | //                print /* '<a name="'.$section_id.'"></a>'. */"\n";
 | 
      
        | 164 |  |  |                 $sSectionBlock = '<div class="block-outer">'."\n";
 | 
      
        | 165 |  |  | // set container if SECTION_BLOCKS disabled
 | 
      
        | 166 |  |  | //                $sSectionInfoLine  = ($bSectionInactive ? false: true);
 | 
      
        | 167 |  |  |                 $sSectionInfoLine  = ($bSectionInactive ? 'inactive': 'active');
 | 
      
        | 168 |  |  | //                $sSectionInfoLine  = ($bSectionInactive ? '<div class="section-inactive">': '<div class="section-active">')."\n" ;
 | 
      
        | 169 |  |  |                 // output block name if blocks are enabled
 | 
      
        | 170 |  |  | //                if (SECTION_BLOCKS) {
 | 
      
        | 171 |  |  |                     if (isset($block[$section['block']]) && trim(strip_tags(($block[$section['block']]))) != '')
 | 
      
        | 172 |  |  |                     {
 | 
      
        | 173 |  |  |                         $block_name = htmlentities(strip_tags($block[$section['block']]));
 | 
      
        | 174 |  |  |                     } else {
 | 
      
        | 175 |  |  |                         if ($section['block'] == 1)
 | 
      
        | 176 |  |  |                         {
 | 
      
        | 177 |  |  |                             $block_name = $TEXT['MAIN'];
 | 
      
        | 178 |  |  |                         } else {
 | 
      
        | 179 |  |  |                             $block_name = '#' . (int) $section['block'];
 | 
      
        | 180 |  |  |                         }
 | 
      
        | 181 |  |  |                     }
 | 
      
        | 182 |  |  | 
 | 
      
        | 183 |  |  |                     ob_start() ;
 | 
      
        | 184 |  |  |                     require(WB_PATH.'/modules/'.$module.'/modify.php');
 | 
      
        | 185 |  |  |                     $content = ob_get_clean() ;
 | 
      
        | 186 |  |  |                     if($content != '')
 | 
      
        | 187 |  |  |                     {
 | 
      
        | 188 |  |  |                       echo $sSectionBlock;//block-outer
 | 
      
        | 189 |  |  |                       $sSectionIdPrefix = (defined( 'SEC_ANCHOR' ) && ( SEC_ANCHOR != '' )  ? SEC_ANCHOR : '' );
 | 
      
        | 190 |  |  |                       $data = array();
 | 
      
        | 191 |  |  |                       $tpl = new Template(dirname($admin->correct_theme_source('SectionInfoLine.htt')),'keep');
 | 
      
        | 192 |  |  |                       // $template->debug = true;
 | 
      
        | 193 |  |  |                       $tpl->set_file('page', 'SectionInfoLine.htt');
 | 
      
        | 194 |  |  |                       $tpl->set_block('page', 'main_block', 'main');
 | 
      
        | 195 |  |  |                       $tpl->set_block('main_block', 'section_block', 'section_save');
 | 
      
        | 196 |  |  |                       $data['aTarget.SectionIdPrefix'] = $sSectionIdPrefix.$section_id;
 | 
      
        | 197 |  |  |                       $data['aTarget.SectionInfoLine'] = $sSectionInfoLine;
 | 
      
        | 198 |  |  |                       $data['aTarget.sectionBlock'] = $section['block'];
 | 
      
        | 199 |  |  |                       $data['aTarget.SectionId'] = $section_id;
 | 
      
        | 200 |  |  |                       $data['aTarget.pageId'] = $page_id;
 | 
      
        | 201 |  |  |                       $data['aTarget.FTAN'] = $admin->getFTAN();
 | 
      
        | 202 |  |  |                       $data['aTarget.BlockName'] = $block_name;
 | 
      
        | 203 |  |  |                       $data['aTarget.sectionUrl'] = ADMIN_URL.'/pages/';
 | 
      
        | 204 |  |  |                       $data['aTarget.sectionModule'] = $section['module'];
 | 
      
        | 205 |  |  |                       $data['aTarget.title'] = $section['title'];
 | 
      
        | 206 |  |  |                       $data['aTarget.Content'] = '';
 | 
      
        | 207 |  |  |                       if( $admin->get_permission('pages_settings') ) {
 | 
      
        | 208 |  |  |                         $data['lang.TEXT_SUBMIT'] = $TEXT['SAVE'];
 | 
      
        | 209 |  |  |                           $tpl->parse('section_save', 'section_block');
 | 
      
        | 210 |  |  |                       } else {
 | 
      
        | 211 |  |  |                           $tpl->parse('section_save', '');
 | 
      
        | 212 |  |  |                       }
 | 
      
        | 213 |  |  |                       $tpl->set_var($data);
 | 
      
        | 214 |  |  |                       $tpl->parse('main', 'main_block', false);
 | 
      
        | 215 |  |  |                       $tpl->pparse('output', 'page');
 | 
      
        | 216 |  |  |                       unset($tpl);
 | 
      
        | 217 |  |  |                      $sAfterContent = '</div>'."\n" ;
 | 
      
        | 218 |  |  |                      $content = $content."\n".$sAfterContent;
 | 
      
        | 219 |  |  |                      echo $content;
 | 
      
        | 220 |  |  |                 }
 | 
      
        | 221 |  |  |             }
 | 
      
        | 222 |  |  |         }
 | 
      
        | 223 |  |  |     }
 | 
      
        | 224 |  |  | }
 | 
      
        | 225 |  |  | 
 | 
      
        | 226 |  |  | // Print admin footer
 | 
      
        | 227 |  |  | $admin->print_footer();
 |