Project

General

Profile

1 4 ryan
<?php
2
3
// $Id: sections_save.php,v 1.6 2005/04/08 07:36:58 rdjurovich Exp $
4
5
/*
6
7
 Website Baker Project <http://www.websitebaker.org/>
8
 Copyright (C) 2004-2005, Ryan Djurovich
9
10
 Website Baker is free software; you can redistribute it and/or modify
11
 it under the terms of the GNU General Public License as published by
12
 the Free Software Foundation; either version 2 of the License, or
13
 (at your option) any later version.
14
15
 Website Baker is distributed in the hope that it will be useful,
16
 but WITHOUT ANY WARRANTY; without even the implied warranty of
17
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
18
 GNU General Public License for more details.
19
20
 You should have received a copy of the GNU General Public License
21
 along with Website Baker; if not, write to the Free Software
22
 Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
23
24
*/
25
26
// Include config file
27
require('../../config.php');
28
29
// Make sure people are allowed to access this page
30
if(MANAGE_SECTIONS != 'enabled') {
31
	header('Location: '.ADMIN_URL.'/pages/index.php');
32
}
33
34
// Get page id
35
if(!isset($_GET['page_id']) OR !is_numeric($_GET['page_id'])) {
36
	header("Location: index.php");
37
} else {
38
	$page_id = $_GET['page_id'];
39
}
40
41
// Create new admin object
42
require_once(WB_PATH.'/framework/class.admin.php');
43
$admin = new admin('Pages', 'pages_modify');
44
45
// Get perms
46
$database = new database();
47
$results = $database->query("SELECT admin_groups,admin_users FROM ".TABLE_PREFIX."pages WHERE page_id = '$page_id'");
48
$results_array = $results->fetchRow();
49
$old_admin_groups = explode(',', $results_array['admin_groups']);
50
$old_admin_users = explode(',', $results_array['admin_users']);
51
if(!is_numeric(array_search($admin->get_group_id(), $old_admin_groups)) AND !is_numeric(array_search($admin->get_user_id(), $old_admin_users))) {
52
	$admin->print_error($MESSAGE['PAGES']['INSUFFICIENT_PERMISSIONS']);
53
}
54
55
// Get page details
56
$database = new database();
57
$query = "SELECT * FROM ".TABLE_PREFIX."pages WHERE page_id = '$page_id'";
58
$results = $database->query($query);
59
if($database->is_error()) {
60
	$admin->print_header();
61
	$admin->print_error($database->get_error());
62
}
63
if($results->numRows() == 0) {
64
	$admin->print_header();
65
	$admin->print_error($MESSAGE['PAGES']['NOT_FOUND']);
66
}
67
$results_array = $results->fetchRow();
68
69
// Set module permissions
70
$module_permissions = $_SESSION['MODULE_PERMISSIONS'];
71
72
// Loop through sections
73
$query_sections = $database->query("SELECT section_id,module,position FROM ".TABLE_PREFIX."sections WHERE page_id = '$page_id' ORDER BY position ASC");
74
if($query_sections->numRows() > 0) {
75
	$num_sections = $query_sections->numRows();
76
	while($section = $query_sections->fetchRow()) {
77
		// Get the modules real name
78
		$module_path = WB_PATH.'/modules/'.$section['module'].'/info.php';
79
		if(file_exists($module_path)) {
80
			require($module_path);
81
			if(!isset($module_type)) { $module_type = 'unknown'; }
82
			if(!is_numeric(array_search($section['module'], $module_permissions)) AND $module_type == 'page') {
83
				// Update the section record with properties
84
				$section_id = $section['section_id'];
85
				$sql = '';
86
				if(isset($_POST['block'.$section_id]) AND $_POST['block'.$section_id] != '') {
87
					$sql = "block = '".addslashes($_POST['block'.$section_id])."'";
88
					$query = "UPDATE ".TABLE_PREFIX."sections SET $sql WHERE section_id = '$section_id' LIMIT 1";
89
					if($sql != '') {
90
						$database->query($query);
91
					}
92
				}
93
			}
94
			if(isset($module_type)) { unset($module_type); } // Unset module type
95
		}
96
	}
97
}
98
99
// Check for error or print success message
100
if($database->is_error()) {
101
	$admin->print_error($database->get_error(), ADMIN_URL.'/pages/sections.php?page_id='.$page_id);
102
} else {
103
	$admin->print_success($MESSAGE['PAGES']['SECTIONS_PROPERTIES_SAVED'], ADMIN_URL.'/pages/sections.php?page_id='.$page_id);
104
}
105
106
// Print admin footer
107
$admin->print_footer();
108
109
?>