1 |
1358
|
Luisehahne
|
<?php
|
2 |
|
|
/**
|
3 |
|
|
*
|
4 |
|
|
* @category admin
|
5 |
|
|
* @package pages
|
6 |
|
|
* @author WebsiteBaker Project
|
7 |
|
|
* @copyright 2004-2009, Ryan Djurovich
|
8 |
1373
|
Luisehahne
|
* @copyright 2009-2011, Website Baker Org. e.V.
|
9 |
1358
|
Luisehahne
|
* @link http://www.websitebaker2.org/
|
10 |
|
|
* @license http://www.gnu.org/licenses/gpl.html
|
11 |
|
|
* @platform WebsiteBaker 2.8.x
|
12 |
1373
|
Luisehahne
|
* @requirements PHP 5.2.2 and higher
|
13 |
1358
|
Luisehahne
|
* @version $Id$
|
14 |
|
|
* @filesource $HeadURL$
|
15 |
|
|
* @lastmodified $Date$
|
16 |
|
|
*
|
17 |
|
|
*/
|
18 |
1402
|
Luisehahne
|
/* */
|
19 |
1358
|
Luisehahne
|
|
20 |
1402
|
Luisehahne
|
// Create new admin object and print admin header
|
21 |
|
|
require('../../config.php');
|
22 |
|
|
require_once(WB_PATH.'/framework/class.admin.php');
|
23 |
|
|
|
24 |
1457
|
Luisehahne
|
// suppress to print the header, so no new FTAN will be set
|
25 |
|
|
$admin = new admin('Pages', 'pages_settings',false);
|
26 |
|
|
|
27 |
1358
|
Luisehahne
|
// Get page id
|
28 |
1384
|
Luisehahne
|
if(!isset($_POST['page_id']) || !is_numeric($_POST['page_id']))
|
29 |
1358
|
Luisehahne
|
{
|
30 |
|
|
header("Location: index.php");
|
31 |
|
|
exit(0);
|
32 |
|
|
} else {
|
33 |
1457
|
Luisehahne
|
$page_id = (int)$_POST['page_id'];
|
34 |
1358
|
Luisehahne
|
}
|
35 |
1457
|
Luisehahne
|
|
36 |
|
|
/*
|
37 |
|
|
if( (!($page_id = $admin->checkIDKEY('page_id', 0, $_SERVER['REQUEST_METHOD']))) )
|
38 |
|
|
{
|
39 |
|
|
$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS']);
|
40 |
|
|
}
|
41 |
|
|
*/
|
42 |
1425
|
Luisehahne
|
$pagetree_url = ADMIN_URL.'/pages/index.php';
|
43 |
|
|
$target_url = ADMIN_URL.'/pages/settings.php?page_id='.$page_id;
|
44 |
1358
|
Luisehahne
|
|
45 |
1425
|
Luisehahne
|
if (!$admin->checkFTAN())
|
46 |
|
|
{
|
47 |
1457
|
Luisehahne
|
$admin->print_header();
|
48 |
1425
|
Luisehahne
|
$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'],$target_url);
|
49 |
|
|
}
|
50 |
1457
|
Luisehahne
|
// After check print the header
|
51 |
|
|
$admin->print_header();
|
52 |
1425
|
Luisehahne
|
|
53 |
1358
|
Luisehahne
|
// Include the WB functions file
|
54 |
|
|
require_once(WB_PATH.'/framework/functions.php');
|
55 |
|
|
|
56 |
|
|
// Get values
|
57 |
1407
|
FrankH
|
$page_title = str_replace(array("[[", "]]"), '', htmlspecialchars($admin->get_post_escaped('page_title')));
|
58 |
|
|
$menu_title = str_replace(array("[[", "]]"), '', htmlspecialchars($admin->get_post_escaped('menu_title')));
|
59 |
1475
|
Luisehahne
|
$page_code = intval($admin->get_post('page_code')) ;
|
60 |
1407
|
FrankH
|
$description = str_replace(array("[[", "]]"), '', htmlspecialchars($admin->add_slashes($admin->get_post('description'))));
|
61 |
|
|
$keywords = str_replace(array("[[", "]]"), '', htmlspecialchars($admin->add_slashes($admin->get_post('keywords'))));
|
62 |
1475
|
Luisehahne
|
$parent = intval($admin->get_post('parent')); // fix secunia 2010-91-3
|
63 |
1358
|
Luisehahne
|
$visibility = $admin->get_post_escaped('visibility');
|
64 |
1384
|
Luisehahne
|
if (!in_array($visibility, array('public', 'private', 'registered', 'hidden', 'none'))) {$visibility = 'public';} // fix secunia 2010-93-3
|
65 |
1494
|
Luisehahne
|
$template = preg_replace('/[^a-z0-9_-]/i', "", $admin->get_post('template')); // fix secunia 2010-93-3
|
66 |
|
|
$template = (($template == DEFAULT_TEMPLATE ) ? '' : $template);
|
67 |
1475
|
Luisehahne
|
$target = preg_replace("/\W/", "", $admin->get_post('target'));
|
68 |
1358
|
Luisehahne
|
$admin_groups = $admin->get_post_escaped('admin_groups');
|
69 |
|
|
$viewing_groups = $admin->get_post_escaped('viewing_groups');
|
70 |
1475
|
Luisehahne
|
$searching = intval($admin->get_post('searching'));
|
71 |
1384
|
Luisehahne
|
$language = strtoupper($admin->get_post('language'));
|
72 |
|
|
$language = (preg_match('/^[A-Z]{2}$/', $language) ? $language : DEFAULT_LANGUAGE);
|
73 |
1475
|
Luisehahne
|
$menu = intval($admin->get_post('menu')); // fix secunia 2010-91-3
|
74 |
1358
|
Luisehahne
|
|
75 |
|
|
// Validate data
|
76 |
|
|
if($page_title == '' || substr($page_title,0,1)=='.')
|
77 |
|
|
{
|
78 |
|
|
$admin->print_error($MESSAGE['PAGES']['BLANK_PAGE_TITLE']);
|
79 |
|
|
}
|
80 |
|
|
if($menu_title == '' || substr($menu_title,0,1)=='.')
|
81 |
|
|
{
|
82 |
|
|
$admin->print_error($MESSAGE['PAGES']['BLANK_MENU_TITLE']);
|
83 |
|
|
}
|
84 |
|
|
|
85 |
|
|
// Get existing perms
|
86 |
|
|
// $database = new database();
|
87 |
|
|
|
88 |
|
|
$sql = 'SELECT `parent`,`link`,`position`,`admin_groups`,`admin_users` FROM `'.TABLE_PREFIX.'pages` WHERE `page_id`='.$page_id;
|
89 |
|
|
$results = $database->query($sql);
|
90 |
|
|
|
91 |
|
|
$results_array = $results->fetchRow();
|
92 |
|
|
$old_parent = $results_array['parent'];
|
93 |
|
|
$old_link = $results_array['link'];
|
94 |
|
|
$old_position = $results_array['position'];
|
95 |
|
|
$old_admin_groups = explode(',', str_replace('_', '', $results_array['admin_groups']));
|
96 |
|
|
$old_admin_users = explode(',', str_replace('_', '', $results_array['admin_users']));
|
97 |
|
|
|
98 |
|
|
// Work-out if we should check for existing page_code
|
99 |
1457
|
Luisehahne
|
$field_set = $database->field_exists(TABLE_PREFIX.'pages', 'page_code');
|
100 |
1358
|
Luisehahne
|
|
101 |
|
|
$in_old_group = FALSE;
|
102 |
|
|
foreach($admin->get_groups_id() as $cur_gid)
|
103 |
|
|
{
|
104 |
|
|
if (in_array($cur_gid, $old_admin_groups))
|
105 |
|
|
{
|
106 |
|
|
$in_old_group = TRUE;
|
107 |
|
|
}
|
108 |
|
|
}
|
109 |
1384
|
Luisehahne
|
if((!$in_old_group) && !is_numeric(array_search($admin->get_user_id(), $old_admin_users)))
|
110 |
1358
|
Luisehahne
|
{
|
111 |
|
|
$admin->print_error($MESSAGE['PAGES']['INSUFFICIENT_PERMISSIONS']);
|
112 |
|
|
}
|
113 |
|
|
|
114 |
|
|
// Setup admin groups
|
115 |
|
|
$admin_groups[] = 1;
|
116 |
|
|
//if(!in_array(1, $admin->get_groups_id())) {
|
117 |
|
|
// $admin_groups[] = implode(",",$admin->get_groups_id());
|
118 |
|
|
//}
|
119 |
1384
|
Luisehahne
|
$admin_groups = preg_replace("/[^\d,]/", "", implode(',', $admin_groups));
|
120 |
1358
|
Luisehahne
|
// Setup viewing groups
|
121 |
|
|
$viewing_groups[] = 1;
|
122 |
|
|
//if(!in_array(1, $admin->get_groups_id())) {
|
123 |
|
|
// $viewing_groups[] = implode(",",$admin->get_groups_id());
|
124 |
|
|
//}
|
125 |
1384
|
Luisehahne
|
$viewing_groups = preg_replace("/[^\d,]/", "", implode(',', $viewing_groups));
|
126 |
1358
|
Luisehahne
|
|
127 |
|
|
// If needed, get new order
|
128 |
|
|
if($parent != $old_parent)
|
129 |
|
|
{
|
130 |
|
|
// Include ordering class
|
131 |
|
|
require(WB_PATH.'/framework/class.order.php');
|
132 |
|
|
$order = new order(TABLE_PREFIX.'pages', 'position', 'page_id', 'parent');
|
133 |
|
|
// Get new order
|
134 |
|
|
$position = $order->get_new($parent);
|
135 |
|
|
// Clean new order
|
136 |
|
|
$order->clean($parent);
|
137 |
|
|
} else {
|
138 |
|
|
$position = $old_position;
|
139 |
|
|
}
|
140 |
|
|
|
141 |
|
|
// Work out level and root parent
|
142 |
|
|
if ($parent!='0')
|
143 |
|
|
{
|
144 |
|
|
$level = level_count($parent)+1;
|
145 |
|
|
$root_parent = root_parent($parent);
|
146 |
|
|
}
|
147 |
|
|
else {
|
148 |
|
|
$level = '0';
|
149 |
|
|
$root_parent = '0';
|
150 |
|
|
}
|
151 |
|
|
|
152 |
|
|
// Work-out what the link should be
|
153 |
|
|
if($parent == '0')
|
154 |
|
|
{
|
155 |
|
|
$link = '/'.page_filename($menu_title);
|
156 |
|
|
// rename menu titles: index && intro to prevent clashes with intro page feature and WB core file /pages/index.php
|
157 |
|
|
if($link == '/index' || $link == '/intro')
|
158 |
|
|
{
|
159 |
|
|
$link .= '_' .$page_id;
|
160 |
|
|
$filename = WB_PATH.PAGES_DIRECTORY.'/'.page_filename($menu_title).'_'.$page_id .PAGE_EXTENSION;
|
161 |
|
|
} else {
|
162 |
|
|
$filename = WB_PATH.PAGES_DIRECTORY.'/'.page_filename($menu_title).PAGE_EXTENSION;
|
163 |
|
|
}
|
164 |
|
|
} else {
|
165 |
|
|
$parent_section = '';
|
166 |
|
|
$parent_titles = array_reverse(get_parent_titles($parent));
|
167 |
|
|
foreach($parent_titles AS $parent_title)
|
168 |
|
|
{
|
169 |
|
|
$parent_section .= page_filename($parent_title).'/';
|
170 |
|
|
}
|
171 |
|
|
if($parent_section == '/')
|
172 |
|
|
{
|
173 |
|
|
$parent_section = '';
|
174 |
|
|
}
|
175 |
|
|
$link = '/'.$parent_section.page_filename($menu_title);
|
176 |
|
|
$filename = WB_PATH.PAGES_DIRECTORY.'/'.$parent_section.page_filename($menu_title).PAGE_EXTENSION;
|
177 |
|
|
}
|
178 |
|
|
|
179 |
|
|
// Check if a page with same page filename exists
|
180 |
|
|
// $database = new database();
|
181 |
|
|
$sql = 'SELECT `page_id`,`page_title` FROM `'.TABLE_PREFIX.'pages` WHERE `link` = "'.$link.'" AND `page_id` != '.$page_id;
|
182 |
|
|
$get_same_page = $database->query($sql);
|
183 |
|
|
|
184 |
|
|
if($get_same_page->numRows() > 0)
|
185 |
|
|
{
|
186 |
|
|
$admin->print_error($MESSAGE['PAGES']['PAGE_EXISTS']);
|
187 |
|
|
}
|
188 |
|
|
|
189 |
|
|
// Update page with new order
|
190 |
|
|
$sql = 'UPDATE `'.TABLE_PREFIX.'pages` SET `parent`='.$parent.', `position`='.$position.' WHERE `page_id`='.$page_id.'';
|
191 |
|
|
// $database = new database();
|
192 |
|
|
$database->query($sql);
|
193 |
|
|
|
194 |
|
|
// Get page trail
|
195 |
|
|
$page_trail = get_page_trail($page_id);
|
196 |
|
|
|
197 |
|
|
// Update page settings in the pages table
|
198 |
|
|
$sql = 'UPDATE `'.TABLE_PREFIX.'pages` SET ';
|
199 |
|
|
$sql .= '`parent` = '.$parent.', ';
|
200 |
|
|
$sql .= '`page_title` = "'.$page_title.'", ';
|
201 |
|
|
$sql .= '`menu_title` = "'.$menu_title.'", ';
|
202 |
|
|
$sql .= '`menu` = '.$menu.', ';
|
203 |
|
|
$sql .= '`level` = '.$level.', ';
|
204 |
|
|
$sql .= '`page_trail` = "'.$page_trail.'", ';
|
205 |
|
|
$sql .= '`root_parent` = '.$root_parent.', ';
|
206 |
|
|
$sql .= '`link` = "'.$link.'", ';
|
207 |
|
|
$sql .= '`template` = "'.$template.'", ';
|
208 |
|
|
$sql .= '`target` = "'.$target.'", ';
|
209 |
|
|
$sql .= '`description` = "'.$description.'", ';
|
210 |
|
|
$sql .= '`keywords` = "'.$keywords.'", ';
|
211 |
|
|
$sql .= '`position` = '.$position.', ';
|
212 |
|
|
$sql .= '`visibility` = "'.$visibility.'", ';
|
213 |
|
|
$sql .= '`searching` = '.$searching.', ';
|
214 |
|
|
$sql .= '`language` = "'.$language.'", ';
|
215 |
|
|
$sql .= '`admin_groups` = "'.$admin_groups.'", ';
|
216 |
|
|
$sql .= '`viewing_groups` = "'.$viewing_groups.'"';
|
217 |
|
|
$sql .= (defined('PAGE_LANGUAGES') && PAGE_LANGUAGES) && $field_set && (file_exists(WB_PATH.'/modules/mod_multilingual/update_keys.php')) ? ', `page_code` = '.(int)$page_code.' ' : ' ';
|
218 |
|
|
$sql .= 'WHERE `page_id` = '.$page_id;
|
219 |
|
|
$database->query($sql);
|
220 |
|
|
|
221 |
|
|
$target_url = ADMIN_URL.'/pages/settings.php?page_id='.$page_id;
|
222 |
|
|
if($database->is_error())
|
223 |
|
|
{
|
224 |
|
|
$admin->print_error($database->get_error(), $target_url );
|
225 |
|
|
}
|
226 |
|
|
// Clean old order if needed
|
227 |
|
|
if($parent != $old_parent)
|
228 |
|
|
{
|
229 |
|
|
$order->clean($old_parent);
|
230 |
|
|
}
|
231 |
|
|
|
232 |
|
|
/* BEGIN page "access file" code */
|
233 |
|
|
|
234 |
|
|
// Create a new file in the /pages dir if title changed
|
235 |
|
|
if(!is_writable(WB_PATH.PAGES_DIRECTORY.'/'))
|
236 |
|
|
{
|
237 |
|
|
$admin->print_error($MESSAGE['PAGES']['CANNOT_CREATE_ACCESS_FILE']);
|
238 |
|
|
} else {
|
239 |
|
|
$old_filename = WB_PATH.PAGES_DIRECTORY.$old_link.PAGE_EXTENSION;
|
240 |
|
|
// First check if we need to create a new file
|
241 |
|
|
if(($old_link != $link) || (!file_exists($old_filename)))
|
242 |
|
|
{
|
243 |
|
|
// Delete old file
|
244 |
|
|
$old_filename = WB_PATH.PAGES_DIRECTORY.$old_link.PAGE_EXTENSION;
|
245 |
|
|
if(file_exists($old_filename))
|
246 |
|
|
{
|
247 |
|
|
unlink($old_filename);
|
248 |
|
|
}
|
249 |
|
|
// Create access file
|
250 |
|
|
create_access_file($filename,$page_id,$level);
|
251 |
|
|
// Move a directory for this page
|
252 |
1384
|
Luisehahne
|
if(file_exists(WB_PATH.PAGES_DIRECTORY.$old_link.'/') && is_dir(WB_PATH.PAGES_DIRECTORY.$old_link.'/'))
|
253 |
1358
|
Luisehahne
|
{
|
254 |
|
|
rename(WB_PATH.PAGES_DIRECTORY.$old_link.'/', WB_PATH.PAGES_DIRECTORY.$link.'/');
|
255 |
|
|
}
|
256 |
|
|
// Update any pages that had the old link with the new one
|
257 |
|
|
$old_link_len = strlen($old_link);
|
258 |
|
|
$sql = '';
|
259 |
|
|
$query_subs = $database->query("SELECT page_id,link,level FROM ".TABLE_PREFIX."pages WHERE link LIKE '%$old_link/%' ORDER BY LEVEL ASC");
|
260 |
|
|
|
261 |
|
|
if($query_subs->numRows() > 0)
|
262 |
|
|
{
|
263 |
|
|
while($sub = $query_subs->fetchRow())
|
264 |
|
|
{
|
265 |
|
|
// Double-check to see if it contains old link
|
266 |
|
|
if(substr($sub['link'], 0, $old_link_len) == $old_link)
|
267 |
|
|
{
|
268 |
|
|
// Get new link
|
269 |
|
|
$replace_this = $old_link;
|
270 |
|
|
$old_sub_link_len =strlen($sub['link']);
|
271 |
|
|
$new_sub_link = $link.'/'.substr($sub['link'],$old_link_len+1,$old_sub_link_len);
|
272 |
|
|
// Work out level
|
273 |
|
|
$new_sub_level = level_count($sub['page_id']);
|
274 |
|
|
// Update level and link
|
275 |
|
|
$database->query("UPDATE ".TABLE_PREFIX."pages SET link = '$new_sub_link', level = '$new_sub_level' WHERE page_id = '".$sub['page_id']."' LIMIT 1");
|
276 |
|
|
// Re-write the access file for this page
|
277 |
|
|
$old_subpage_file = WB_PATH.PAGES_DIRECTORY.$new_sub_link.PAGE_EXTENSION;
|
278 |
|
|
if(file_exists($old_subpage_file))
|
279 |
|
|
{
|
280 |
|
|
unlink($old_subpage_file);
|
281 |
|
|
}
|
282 |
|
|
create_access_file(WB_PATH.PAGES_DIRECTORY.$new_sub_link.PAGE_EXTENSION, $sub['page_id'], $new_sub_level);
|
283 |
|
|
}
|
284 |
|
|
}
|
285 |
|
|
}
|
286 |
|
|
}
|
287 |
|
|
}
|
288 |
|
|
|
289 |
|
|
// Function to fix page trail of subs
|
290 |
|
|
function fix_page_trail($parent,$root_parent)
|
291 |
|
|
{
|
292 |
|
|
// Get objects and vars from outside this function
|
293 |
|
|
global $admin, $template, $database, $TEXT, $MESSAGE;
|
294 |
|
|
// Get page list from database
|
295 |
|
|
// $database = new database();
|
296 |
|
|
$query = "SELECT page_id FROM ".TABLE_PREFIX."pages WHERE parent = '$parent'";
|
297 |
|
|
$get_pages = $database->query($query);
|
298 |
|
|
// Insert values into main page list
|
299 |
|
|
if($get_pages->numRows() > 0)
|
300 |
|
|
{
|
301 |
|
|
while($page = $get_pages->fetchRow())
|
302 |
|
|
{
|
303 |
|
|
// Fix page trail
|
304 |
|
|
|
305 |
|
|
$database->query("UPDATE ".TABLE_PREFIX."pages SET ".($root_parent != 0 ?"root_parent = '$root_parent', ":"")." page_trail = '".get_page_trail($page['page_id'])."' WHERE page_id = '".$page['page_id']."'");
|
306 |
|
|
// Run this query on subs
|
307 |
|
|
fix_page_trail($page['page_id'],$root_parent);
|
308 |
|
|
}
|
309 |
|
|
}
|
310 |
|
|
}
|
311 |
|
|
|
312 |
|
|
// Fix sub-pages page trail
|
313 |
|
|
fix_page_trail($page_id,$root_parent);
|
314 |
|
|
|
315 |
|
|
/* END page "access file" code */
|
316 |
|
|
|
317 |
1425
|
Luisehahne
|
//$pagetree_url = ADMIN_URL.'/pages/index.php';
|
318 |
|
|
//$target_url = ADMIN_URL.'/pages/settings.php?page_id='.$page_id;
|
319 |
1358
|
Luisehahne
|
// Check if there is a db error, otherwise say successful
|
320 |
|
|
if($database->is_error())
|
321 |
|
|
{
|
322 |
|
|
$admin->print_error($database->get_error(), $target_url );
|
323 |
|
|
} else {
|
324 |
|
|
$admin->print_success($MESSAGE['PAGES']['SAVED_SETTINGS'], $target_url );
|
325 |
|
|
}
|
326 |
|
|
|
327 |
|
|
// Print admin footer
|
328 |
|
|
$admin->print_footer();
|