| 1 | 
        
            2
         | 
        
            Manuela
         | 
        <?php
  | 
      
      
        | 2 | 
        
         | 
        
         | 
        /**
  | 
      
      
        | 3 | 
        
         | 
        
         | 
         *
  | 
      
      
        | 4 | 
        
         | 
        
         | 
         * @category        admin
  | 
      
      
        | 5 | 
        
         | 
        
         | 
         * @package         pages
  | 
      
      
        | 6 | 
        
         | 
        
         | 
         * @author          WebsiteBaker Project
  | 
      
      
        | 7 | 
        
         | 
        
         | 
         * @copyright       Ryan Djurovich
  | 
      
      
        | 8 | 
        
         | 
        
         | 
         * @copyright       WebsiteBaker Org. e.V.
  | 
      
      
        | 9 | 
        
         | 
        
         | 
         * @link            http://websitebaker.org/
  | 
      
      
        | 10 | 
        
         | 
        
         | 
         * @license         http://www.gnu.org/licenses/gpl.html
  | 
      
      
        | 11 | 
        
         | 
        
         | 
         * @platform        WebsiteBaker 2.8.3
  | 
      
      
        | 12 | 
        
         | 
        
         | 
         * @requirements    PHP 5.3.6 and higher
  | 
      
      
        | 13 | 
        
         | 
        
         | 
         * @version         $Id$
  | 
      
      
        | 14 | 
        
         | 
        
         | 
         * @filesource      $HeadURL$
  | 
      
      
        | 15 | 
        
         | 
        
         | 
         * @lastmodified    $Date$
  | 
      
      
        | 16 | 
        
         | 
        
         | 
         *
  | 
      
      
        | 17 | 
        
         | 
        
         | 
         */
  | 
      
      
        | 18 | 
        
         | 
        
         | 
        
  | 
      
      
        | 19 | 
        
         | 
        
         | 
        // Create new admin object
  | 
      
      
        | 20 | 
        
         | 
        
         | 
            if (!defined('WB_PATH')) { require dirname(dirname((__DIR__))).'/config.php'; }
 | 
      
      
        | 21 | 
        
         | 
        
         | 
            if (!class_exists('admin', false)) { require WB_PATH.'/framework/class.admin.php'; }
 | 
      
      
        | 22 | 
        
         | 
        
         | 
            $admin = new admin('Pages', 'pages_settings');
 | 
      
      
        | 23 | 
        
         | 
        
         | 
        // Include the WB functions file
  | 
      
      
        | 24 | 
        
         | 
        
         | 
            include __DIR__.'/settings_helper.php';
  | 
      
      
        | 25 | 
        
         | 
        
         | 
        // Get page id from  HTML request and sanitize it
  | 
      
      
        | 26 | 
        
         | 
        
         | 
            if (!($page_id = intval(@$_GET['page_id']?:0))) {
 | 
      
      
        | 27 | 
        
         | 
        
         | 
                $admin->print_header();
  | 
      
      
        | 28 | 
        
         | 
        
         | 
                $admin->print_error($MESSAGE['PAGES_NOT_FOUND']);
  | 
      
      
        | 29 | 
        
         | 
        
         | 
            }
  | 
      
      
        | 30 | 
        
         | 
        
         | 
        // load requested page
  | 
      
      
        | 31 | 
        
         | 
        
         | 
            $aPage = null;
  | 
      
      
        | 32 | 
        
         | 
        
         | 
            $sql = 'SELECT * FROM `'.TABLE_PREFIX.'pages` WHERE `page_id` = '.$page_id;
  | 
      
      
        | 33 | 
        
         | 
        
         | 
            if (($oResult = $database->query($sql))) {
 | 
      
      
        | 34 | 
        
         | 
        
         | 
                $aPage = $oResult->fetchRow(MSQL_ASSOC);
  | 
      
      
        | 35 | 
        
         | 
        
         | 
            }
  | 
      
      
        | 36 | 
        
         | 
        
         | 
            if (!$aPage) {
 | 
      
      
        | 37 | 
        
         | 
        
         | 
        // throw error if no valid page received
  | 
      
      
        | 38 | 
        
         | 
        
         | 
                $admin->print_header();
  | 
      
      
        | 39 | 
        
         | 
        
         | 
                $admin->print_error($MESSAGE['PAGES_NOT_FOUND']);
  | 
      
      
        | 40 | 
        
         | 
        
         | 
            }
  | 
      
      
        | 41 | 
        
         | 
        
         | 
        // check if current user has admin rights to that page
  | 
      
      
        | 42 | 
        
         | 
        
         | 
            if (!($admin->ami_group_member($aPage['admin_groups']) ||
  | 
      
      
        | 43 | 
        
         | 
        
         | 
                 $admin->is_group_match($aPage['admin_users'], $admin->get_user_id()))
  | 
      
      
        | 44 | 
        
         | 
        
         | 
            ) {
 | 
      
      
        | 45 | 
        
         | 
        
         | 
                $admin->print_error($MESSAGE['PAGES_INSUFFICIENT_PERMISSIONS']);
  | 
      
      
        | 46 | 
        
         | 
        
         | 
            }
  | 
      
      
        | 47 | 
        
         | 
        
         | 
        // check if user has owner rights for this page
  | 
      
      
        | 48 | 
        
         | 
        
         | 
            $bHasOwnerRight = ($admin->get_user_id() == $aPage['page_owner'] || $admin->get_user_id() == 1);
  | 
      
      
        | 49 | 
        
         | 
        
         | 
        // restore SEO title from page-link
  | 
      
      
        | 50 | 
        
         | 
        
         | 
            $aPage['seo_title'] = basename($aPage['link']);
  | 
      
      
        | 51 | 
        
         | 
        
         | 
        // add user data array to page
  | 
      
      
        | 52 | 
        
         | 
        
         | 
            $aPage['modified_by'] = $admin->get_user_details($aPage['modified_by']);
  | 
      
      
        | 53 | 
        
         | 
        
         | 
        
  | 
      
      
        | 54 | 
        
         | 
        
         | 
        // prepare template data -------------------------------------------------------
  | 
      
      
        | 55 | 
        
         | 
        
         | 
            $aTmplDataGlobal = array();
  | 
      
      
        | 56 | 
        
         | 
        
         | 
            $aTmplData = array();
  | 
      
      
        | 57 | 
        
         | 
        
         | 
            $aTmplDataGlobal['page'] = $aPage;
  | 
      
      
        | 58 | 
        
         | 
        
         | 
            $aTmplDataGlobal['user'] = $admin->get_user_details($admin->get_user_id());
  | 
      
      
        | 59 | 
        
         | 
        
         | 
            $aTmplDataGlobal['user']['owner'] = $bHasOwnerRight;
  | 
      
      
        | 60 | 
        
         | 
        
         | 
        
  | 
      
      
        | 61 | 
        
         | 
        
         | 
        // get sorted group lists ------------------------------------------------------
  | 
      
      
        | 62 | 
        
         | 
        
         | 
            $aAdmins = explode(',', $aPage['admin_groups']);
 | 
      
      
        | 63 | 
        
         | 
        
         | 
            $aViewers = explode(',', $aPage['viewing_groups']);
 | 
      
      
        | 64 | 
        
         | 
        
         | 
            $aList = array();
  | 
      
      
        | 65 | 
        
         | 
        
         | 
            $sql = 'SELECT `group_id` `id`, `name` '
  | 
      
      
        | 66 | 
        
         | 
        
         | 
                 . 'FROM `'.TABLE_PREFIX.'groups` '
  | 
      
      
        | 67 | 
        
         | 
        
         | 
                 . 'ORDER BY `name`';
  | 
      
      
        | 68 | 
        
         | 
        
         | 
            $oRecords = $database->query($sql);
  | 
      
      
        | 69 | 
        
         | 
        
         | 
            while ($aRecord = $oRecords->fetchRow(MYSQLI_ASSOC)) {
 | 
      
      
        | 70 | 
        
         | 
        
         | 
            // if group is set as admin to this page
  | 
      
      
        | 71 | 
        
         | 
        
         | 
                $aRecord['admin'] = in_array($aRecord['id'], $aAdmins);
  | 
      
      
        | 72 | 
        
         | 
        
         | 
            // if group ist set as viewer to this page
  | 
      
      
        | 73 | 
        
         | 
        
         | 
                $aRecord['viewer'] = in_array($aRecord['id'], $aViewers);
  | 
      
      
        | 74 | 
        
         | 
        
         | 
                $aList[] = $aRecord;
  | 
      
      
        | 75 | 
        
         | 
        
         | 
            }
  | 
      
      
        | 76 | 
        
         | 
        
         | 
        // sort groups by admins
  | 
      
      
        | 77 | 
        
         | 
        
         | 
            $aTmplData['GroupListAdmin'] = SettingsHelper::doMultiSort($aList, 'admin', 'name');
  | 
      
      
        | 78 | 
        
         | 
        
         | 
        // sort groups by viewers
  | 
      
      
        | 79 | 
        
         | 
        
         | 
            $aTmplData['GroupListViewer'] = SettingsHelper::doMultiSort($aList, 'viewer', 'name');
  | 
      
      
        | 80 | 
        
         | 
        
         | 
        // get sorted user lists -------------------------------------------------------
  | 
      
      
        | 81 | 
        
         | 
        
         | 
            $aAdmins = explode(',', $aPage['admin_users']);
 | 
      
      
        | 82 | 
        
         | 
        
         | 
            $aViewers = explode(',', $aPage['viewing_users']);
 | 
      
      
        | 83 | 
        
         | 
        
         | 
            $aList = array();
  | 
      
      
        | 84 | 
        
         | 
        
         | 
            $sql = 'SELECT `user_id` `id`, `display_name` `name` '
  | 
      
      
        | 85 | 
        
         | 
        
         | 
                 . 'FROM `'.TABLE_PREFIX.'users` '
  | 
      
      
        | 86 | 
        
         | 
        
         | 
                 . 'ORDER BY `name`';
  | 
      
      
        | 87 | 
        
         | 
        
         | 
            $oRecords = $database->query($sql);
  | 
      
      
        | 88 | 
        
         | 
        
         | 
            while ($aRecord = $oRecords->fetchRow(MYSQLI_ASSOC)) {
 | 
      
      
        | 89 | 
        
         | 
        
         | 
            // if user is set as admin to this page
  | 
      
      
        | 90 | 
        
         | 
        
         | 
                $aRecord['admin'] = in_array($aRecord['id'], $aAdmins);
  | 
      
      
        | 91 | 
        
         | 
        
         | 
            // if user is set as viewer to this page
  | 
      
      
        | 92 | 
        
         | 
        
         | 
                $aRecord['viewer'] = in_array($aRecord['id'], $aViewers);
  | 
      
      
        | 93 | 
        
         | 
        
         | 
                $aList[] = $aRecord;
  | 
      
      
        | 94 | 
        
         | 
        
         | 
            }
  | 
      
      
        | 95 | 
        
         | 
        
         | 
        // sort groups by admins
  | 
      
      
        | 96 | 
        
         | 
        
         | 
            $aTmplData['UserListAdmin'] = SettingsHelper::doMultiSort($aList, 'admin', 'name');
  | 
      
      
        | 97 | 
        
         | 
        
         | 
        // sort groups by viewers
  | 
      
      
        | 98 | 
        
         | 
        
         | 
            $aTmplData['UserListViewer'] = SettingsHelper::doMultiSort($aList, 'viewer', 'name');
  | 
      
      
        | 99 | 
        
         | 
        
         | 
        // clean up memory
  | 
      
      
        | 100 | 
        
         | 
        
         | 
            unset($aAdmins, $aViewers, $oRecords, $aRecord, $aList, $doMultiSort);
  | 
      
      
        | 101 | 
        
         | 
        
         | 
        // add list of possible parent pages -------------------------------------------
  | 
      
      
        | 102 | 
        
         | 
        
         | 
            $aParentPages = SettingsHelper::getParentPagesList($aTmplDataGlobal['page']['page_id'], $iCurrentPage, $admin, $database);
  | 
      
      
        | 103 | 
        
         | 
        
         | 
        // check for permission to add a level-0 page
  | 
      
      
        | 104 | 
        
         | 
        
         | 
            if ($admin->get_permission('pages_add_l0') || $results_array['level'] == 0) {
 | 
      
      
        | 105 | 
        
         | 
        
         | 
        // add the option to choose level-0
  | 
      
      
        | 106 | 
        
         | 
        
         | 
                $aPage['id']       = 0;
  | 
      
      
        | 107 | 
        
         | 
        
         | 
                $aPage['title']    = $aLang['TEXT_NONE'];
  | 
      
      
        | 108 | 
        
         | 
        
         | 
                $aPage['language'] = '';
  | 
      
      
        | 109 | 
        
         | 
        
         | 
                $aPage['active']   = !$results_array['parent'];
  | 
      
      
        | 110 | 
        
         | 
        
         | 
                array_unshift($aParentPages, $aPage);
  | 
      
      
        | 111 | 
        
         | 
        
         | 
            }
  | 
      
      
        | 112 | 
        
         | 
        
         | 
            $aTmplData['ParentPages'] = $aParentPages;
  | 
      
      
        | 113 | 
        
         | 
        
         | 
        // add list of linking targets -------------------------------------------------
  | 
      
      
        | 114 | 
        
         | 
        
         | 
            $aTmplData['LinkTargets'] = array(
  | 
      
      
        | 115 | 
        
         | 
        
         | 
                array('target' => '_top', 'caption' => $TEXT['TOP_FRAME']),
 | 
      
      
        | 116 | 
        
         | 
        
         | 
                array('target' => '_self', 'caption' => $TEXT['SAME_WINDOW']),
 | 
      
      
        | 117 | 
        
         | 
        
         | 
                array('target' => '_blank', 'caption' => $TEXT['NEW_WINDOW'])
 | 
      
      
        | 118 | 
        
         | 
        
         | 
            );
  | 
      
      
        | 119 | 
        
         | 
        
         | 
        // build list of available templates -------------------------------------------
  | 
      
      
        | 120 | 
        
         | 
        
         | 
            $aTemplatesList = array();
  | 
      
      
        | 121 | 
        
         | 
        
         | 
            $sql = 'SELECT `directory`, `name`, `version` FROM `'.TABLE_PREFIX.'addons` '
  | 
      
      
        | 122 | 
        
         | 
        
         | 
                 . 'WHERE `function` = \'template\' '
  | 
      
      
        | 123 | 
        
         | 
        
         | 
                 . 'ORDER BY `name`';
  | 
      
      
        | 124 | 
        
         | 
        
         | 
            if (($oAddons = $database->query($sql))) {
 | 
      
      
        | 125 | 
        
         | 
        
         | 
                while (($aAddon = $oAddon->fetchRow(MYSQLI_ASSOC))) {
 | 
      
      
        | 126 | 
        
         | 
        
         | 
                    $aTemplatesList[] = $aAddon;
  | 
      
      
        | 127 | 
        
         | 
        
         | 
                }
  | 
      
      
        | 128 | 
        
         | 
        
         | 
            }
  | 
      
      
        | 129 | 
        
         | 
        
         | 
            if (!$aTemplatesList) {
 | 
      
      
        | 130 | 
        
         | 
        
         | 
                $aTemplatesList[] = array('directory'=>'', 'name'=>'System Default', 'version'=>'');
 | 
      
      
        | 131 | 
        
         | 
        
         | 
            }
  | 
      
      
        | 132 | 
        
         | 
        
         | 
            $aTmplData['Templates'] = $aTemplatesList;
  | 
      
      
        | 133 | 
        
         | 
        
         | 
        // get available menues from active template -----------------------------------
  | 
      
      
        | 134 | 
        
         | 
        
         | 
            $sTpl = WB_PATH.'/templates/'
  | 
      
      
        | 135 | 
        
         | 
        
         | 
                  .($aPage['template'] ?: DEFAULT_TEMPLATE)
  | 
      
      
        | 136 | 
        
         | 
        
         | 
                  .'/info.php';
  | 
      
      
        | 137 | 
        
         | 
        
         | 
            $aTemplateInfo = getContentFromInfoPhp(
  | 
      
      
        | 138 | 
        
         | 
        
         | 
                WB_PATH.'/templates/'.($aPage['template'] ?: DEFAULT_TEMPLATE).'/info.php'
  | 
      
      
        | 139 | 
        
         | 
        
         | 
            );
  | 
      
      
        | 140 | 
        
         | 
        
         | 
            if (!isset($aTemplateInfo['menu'])) {
 | 
      
      
        | 141 | 
        
         | 
        
         | 
                $aTemplateInfo['menu'] = array(1 => 'Main');
  | 
      
      
        | 142 | 
        
         | 
        
         | 
            }
  | 
      
      
        | 143 | 
        
         | 
        
         | 
            $aTmplData['Menues'] = $aTemplateInfo['menu'];
  | 
      
      
        | 144 | 
        
         | 
        
         | 
        // get list of available languages ---------------------------------------------
  | 
      
      
        | 145 | 
        
         | 
        
         | 
            $sql = 'SELECT `directory`, `name`, `version` FROM `'.TABLE_PREFIX.'addons` '
  | 
      
      
        | 146 | 
        
         | 
        
         | 
                 . 'WHERE `type` = \'language\' '
  | 
      
      
        | 147 | 
        
         | 
        
         | 
                 . 'ORDER BY `name`';
  | 
      
      
        | 148 | 
        
         | 
        
         | 
            if (($oAddons = $database->query($sql))) {
 | 
      
      
        | 149 | 
        
         | 
        
         | 
                while (($aAddon = $oAddon->fetchRow(MYSQLI_ASSOC))) {
 | 
      
      
        | 150 | 
        
         | 
        
         | 
                    $aLanguageList[] = $aAddon;
  | 
      
      
        | 151 | 
        
         | 
        
         | 
                }
  | 
      
      
        | 152 | 
        
         | 
        
         | 
            }
  | 
      
      
        | 153 | 
        
         | 
        
         | 
            $aTmplData['Languages'] = $aLanguageList;
  | 
      
      
        | 154 | 
        
         | 
        
         | 
        
  | 
      
      
        | 155 | 
        
         | 
        
         | 
        // Print admin footer
  | 
      
      
        | 156 | 
        
         | 
        
         | 
        $admin->print_footer();
  |