Project

General

Profile

1
<?php
2
/**
3
 *
4
 * @category        admin
5
 * @package         groups
6
 * @author          WebsiteBaker Project
7
 * @copyright       2004-2009, Ryan Djurovich
8
 * @copyright       2009-2011, Website Baker Org. e.V.
9
 * @link			http://www.websitebaker2.org/
10
 * @license         http://www.gnu.org/licenses/gpl.html
11
 * @platform        WebsiteBaker 2.8.x
12
 * @requirements    PHP 5.2.2 and higher
13
 * @version         $Id: save.php 1457 2011-06-25 17:18:50Z Luisehahne $
14
 * @filesource		$HeadURL: svn://isteam.dynxs.de/wb-archiv/branches/2.8.x/wb/admin/groups/save.php $
15
 * @lastmodified    $Date: 2011-06-25 19:18:50 +0200 (Sat, 25 Jun 2011) $
16
 *
17
 */
18

    
19
// Print admin header
20
require('../../config.php');
21
require_once(WB_PATH.'/framework/class.admin.php');
22
// suppress to print the header, so no new FTAN will be set
23
$admin = new admin('Access', 'groups_modify', false);
24
// Create a javascript back link
25
$js_back = ADMIN_URL.'/groups/index.php';
26

    
27
if (!$admin->checkFTAN())
28
{
29
	$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'],$js_back);
30
}
31
// After check print the header
32
$admin->print_header();
33

    
34
// Check if group group_id is a valid number and doesnt equal 1
35
if(!isset($_POST['group_id']) OR !is_numeric($_POST['group_id']) OR $_POST['group_id'] == 1) {
36
	header("Location: index.php");
37
	exit(0);
38
} else {
39
	$group_id = $_POST['group_id'];
40
}
41

    
42
// Gather details entered
43
$group_name = $admin->get_post_escaped('group_name');
44

    
45
// Check values
46
if($group_name == "") {
47
	$admin->print_error($MESSAGE['GROUPS']['GROUP_NAME_BLANK'], $js_back);
48
}
49

    
50
// Get system permissions
51
require_once(ADMIN_PATH.'/groups/get_permissions.php');
52

    
53
// Update the database
54
$query = "UPDATE ".TABLE_PREFIX."groups SET name = '$group_name', system_permissions = '$system_permissions', module_permissions = '$module_permissions', template_permissions = '$template_permissions' WHERE group_id = '$group_id'";
55

    
56
$database->query($query);
57
if($database->is_error()) {
58
	$admin->print_error($database->get_error());
59
} else {
60
	$admin->print_success($MESSAGE['GROUPS']['SAVED'], ADMIN_URL.'/groups/index.php');
61
}
62

    
63
// Print admin footer
64
$admin->print_footer();
65

    
66
?>
(5-5/5)