WB 2.11.0

<?php

/**

 *

 * @category        modules

 * @package         news

 * @author          WebsiteBaker Project

 * @copyright       Ryan Djurovich

 * @copyright       WebsiteBaker Org. e.V.

 * @link            http://websitebaker.org/

 * @license         http://www.gnu.org/licenses/gpl.html

 * @platform        WebsiteBaker 2.8.3

 * @requirements    PHP 5.3.6 and higher

 * @version         $Id: add_post.php 2 2017-07-02 15:14:29Z Manuela $

 * @filesource      $HeadURL: svn://isteam.dynxs.de/wb/2.10.x/branches/main/modules/news/add_post.php $

 * @lastmodified    $Date: 2017-07-02 17:14:29 +0200 (Sun, 02 Jul 2017) $

 *

 */

if ( !defined( 'WB_PATH' ) ){ require( dirname(dirname((__DIR__))).'/config.php' ); }

// suppress to print the header, so no new FTAN will be set

$admin_header = false;

// Tells script to update when this page was last updated

$update_when_modified = false;

// show the info banner

//$print_info_banner = true;

// Include WB admin wrapper script

require(WB_PATH.'/modules/admin.php');

if(!$admin->checkFTAN('GET')) {

    $admin->print_header();

    $admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'], ADMIN_URL.'/pages/modify.php?page_id='.$page_id);

}

// After check print the header

$admin->print_header();

// Include the ordering class

require(WB_PATH.'/framework/class.order.php');

// Get new order

$order = new order(TABLE_PREFIX.'mod_news_posts', 'position', 'post_id', 'section_id');

$position = $order->get_new($section_id);

// Get default commenting

$sql = 'SELECT `commenting` FROM `'.TABLE_PREFIX.'mod_news_settings` '

     . 'WHERE `section_id`='.(int)$section_id;

$commenting = $database->get_one($sql);

$now = time();

$sUrl = WB_URL.'/modules/news/modify_post.php?page_id='.$page_id.'&section_id='.$section_id.'&post_id=';

$sql  = 'INSERT INTO `'.TABLE_PREFIX.'mod_news_posts` SET '

      . '`section_id`='.$database->escapeString($section_id).', '

      . '`page_id`='.$database->escapeString($page_id).', '

      . '`position`='.$database->escapeString($position).', '

      . '`active`=1, '

      . '`title`=\'\', '

      . '`link`=\'\', '

      . '`content_short`=\'\', '

      . '`content_long`=\'\', '

      . '`commenting`=\''.$database->escapeString($commenting).'\', '

      . '`created_when`='.$now.', '

      . '`created_by`='.$admin->get_user_id().', '

      . '`published_when` ='.$now.', '

      . '`published_until` =0, '

      . '`posted_when` ='.$now.', '

      . '`posted_by` ='.$admin->get_user_id().'';

if (($database->query($sql))) {

    $post_id = $admin->getIDKEY($database->getLastInsertId());

    $admin->print_success($TEXT['SUCCESS'], $sUrl.$post_id);

} else {

    $post_id = $admin->getIDKEY(0);

    $admin->print_error($database->get_error(), $sUrl.$post_id);

}

$admin->print_footer();