| 1 | <?php
 | 
  
    | 2 | /**
 | 
  
    | 3 |  *
 | 
  
    | 4 |  * @category        backend
 | 
  
    | 5 |  * @package         wysiwyg
 | 
  
    | 6 |  * @author          WebsiteBaker Project
 | 
  
    | 7 |  * @copyright       2004-2009, Ryan Djurovich
 | 
  
    | 8 |  * @copyright       2009-2011, Website Baker Org. e.V.
 | 
  
    | 9 |  * @link			http://www.websitebaker2.org/
 | 
  
    | 10 |  * @license         http://www.gnu.org/licenses/gpl.html
 | 
  
    | 11 |  * @platform        WebsiteBaker 2.8.x
 | 
  
    | 12 |  * @requirements    PHP 5.2.2 and higher
 | 
  
    | 13 |  * @version         $Id: save.php 1457 2011-06-25 17:18:50Z Luisehahne $
 | 
  
    | 14 |  * @filesource		$HeadURL: svn://isteam.dynxs.de/wb-archiv/branches/2.8.x/wb/modules/wysiwyg/save.php $
 | 
  
    | 15 |  * @lastmodified    $Date: 2011-06-25 19:18:50 +0200 (Sat, 25 Jun 2011) $
 | 
  
    | 16 |  *
 | 
  
    | 17 | */
 | 
  
    | 18 | 
 | 
  
    | 19 | require('../../config.php');
 | 
  
    | 20 | 
 | 
  
    | 21 | // suppress to print the header, so no new FTAN will be set
 | 
  
    | 22 | $admin_header = false;
 | 
  
    | 23 | // Tells script to update when this page was last updated
 | 
  
    | 24 | $update_when_modified = true;
 | 
  
    | 25 | // Include WB admin wrapper script
 | 
  
    | 26 | require(WB_PATH.'/modules/admin.php');
 | 
  
    | 27 | 
 | 
  
    | 28 | if (!$admin->checkFTAN())
 | 
  
    | 29 | {
 | 
  
    | 30 | 	$admin->print_header();
 | 
  
    | 31 | 	$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'], ADMIN_URL.'/pages/modify.php?page_id='.$page_id);
 | 
  
    | 32 | }
 | 
  
    | 33 | // After check print the header
 | 
  
    | 34 | $admin->print_header();
 | 
  
    | 35 | 
 | 
  
    | 36 | // Include the WB functions file
 | 
  
    | 37 | require_once(WB_PATH.'/framework/functions.php');
 | 
  
    | 38 | 
 | 
  
    | 39 | // Update the mod_wysiwygs table with the contents
 | 
  
    | 40 | if(isset($_POST['content'.$section_id])) {
 | 
  
    | 41 | 	$content = $admin->add_slashes($_POST['content'.$section_id]);
 | 
  
    | 42 | 	// searching in $text will be much easier this way
 | 
  
    | 43 | 	$text = umlauts_to_entities(strip_tags($content), strtoupper(DEFAULT_CHARSET), 0);
 | 
  
    | 44 | 	$query = "UPDATE ".TABLE_PREFIX."mod_wysiwyg SET content = '$content', text = '$text' WHERE section_id = '$section_id'";
 | 
  
    | 45 | 	$database->query($query);	
 | 
  
    | 46 | }
 | 
  
    | 47 | 
 | 
  
    | 48 | if(defined('EDIT_ONE_SECTION') and EDIT_ONE_SECTION)
 | 
  
    | 49 | {
 | 
  
    | 50 |     $edit_page = ADMIN_URL.'/pages/modify.php?page_id='.$page_id.'&wysiwyg='.$section_id;
 | 
  
    | 51 | } else {
 | 
  
    | 52 |     $edit_page = ADMIN_URL.'/pages/modify.php?page_id='.$page_id.'#wb'.$section_id;
 | 
  
    | 53 | }
 | 
  
    | 54 | 
 | 
  
    | 55 | // Check if there is a database error, otherwise say successful
 | 
  
    | 56 | if($database->is_error()) {
 | 
  
    | 57 | 	$admin->print_error($database->get_error(), $js_back);
 | 
  
    | 58 | } else {
 | 
  
    | 59 | 	$admin->print_success($MESSAGE['PAGES']['SAVED'], $edit_page );
 | 
  
    | 60 | }
 | 
  
    | 61 | 
 | 
  
    | 62 | // Print admin footer
 | 
  
    | 63 | $admin->print_footer();
 | 
  
    | 64 | 
 | 
  
    | 65 | ?>
 |