|
1
|
<?php
|
|
2
|
/**
|
|
3
|
*
|
|
4
|
* @category admin
|
|
5
|
* @package pages
|
|
6
|
* @author WebsiteBaker Project
|
|
7
|
* @copyright 2004-2009, Ryan Djurovich
|
|
8
|
* @copyright 2009-2011, Website Baker Org. e.V.
|
|
9
|
* @link http://www.websitebaker2.org/
|
|
10
|
* @license http://www.gnu.org/licenses/gpl.html
|
|
11
|
* @platform WebsiteBaker 2.8.x
|
|
12
|
* @requirements PHP 5.2.2 and higher
|
|
13
|
* @version $Id: settings_save.php 1664 2012-04-17 11:46:03Z darkviper $
|
|
14
|
* @filesource $HeadURL: svn://isteam.dynxs.de/wb-archiv/branches/2.8.x/wb/admin/pages/settings_save.php $
|
|
15
|
* @lastmodified $Date: 2012-04-17 13:46:03 +0200 (Tue, 17 Apr 2012) $
|
|
16
|
*
|
|
17
|
*/
|
|
18
|
/* */
|
|
19
|
|
|
20
|
// Create new admin object and print admin header
|
|
21
|
require('../../config.php');
|
|
22
|
require_once(WB_PATH.'/framework/class.admin.php');
|
|
23
|
|
|
24
|
// suppress to print the header, so no new FTAN will be set
|
|
25
|
$admin = new admin('Pages', 'pages_settings',false);
|
|
26
|
|
|
27
|
// Get page id
|
|
28
|
if(!isset($_POST['page_id']) || preg_match('/[^0-9a-f]/i',$_POST['page_id']))
|
|
29
|
{
|
|
30
|
header("Location: index.php");
|
|
31
|
exit(0);
|
|
32
|
} else {
|
|
33
|
// $page_id = $admin->checkIDKEY('page_id');
|
|
34
|
// $page_id = (int)$_POST['page_id'];
|
|
35
|
if((!($page_id = $admin->checkIDKEY('page_id')))) {
|
|
36
|
$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'], ADMIN_URL.'/pages/index.php');
|
|
37
|
}
|
|
38
|
}
|
|
39
|
|
|
40
|
/*
|
|
41
|
if( (!($page_id = $admin->checkIDKEY('page_id', 0, $_SERVER['REQUEST_METHOD']))) )
|
|
42
|
{
|
|
43
|
$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS']);
|
|
44
|
}
|
|
45
|
*/
|
|
46
|
$pagetree_url = ADMIN_URL.'/pages/index.php';
|
|
47
|
$target_url = ADMIN_URL.'/pages/settings.php?page_id='.$page_id;
|
|
48
|
|
|
49
|
if (!$admin->checkFTAN())
|
|
50
|
{
|
|
51
|
$admin->print_header();
|
|
52
|
$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'],$target_url);
|
|
53
|
}
|
|
54
|
// After check print the header
|
|
55
|
$admin->print_header();
|
|
56
|
|
|
57
|
// Include the WB functions file
|
|
58
|
require_once(WB_PATH.'/framework/functions.php');
|
|
59
|
|
|
60
|
// Get values
|
|
61
|
$page_title = str_replace(array("[[", "]]"), '', htmlspecialchars($admin->get_post_escaped('page_title')));
|
|
62
|
$menu_title = str_replace(array("[[", "]]"), '', htmlspecialchars($admin->get_post_escaped('menu_title')));
|
|
63
|
$page_code = intval($admin->get_post('page_code')) ;
|
|
64
|
$description = str_replace(array("[[", "]]"), '', htmlspecialchars($admin->add_slashes($admin->get_post('description'))));
|
|
65
|
$keywords = str_replace(array("[[", "]]"), '', htmlspecialchars($admin->add_slashes($admin->get_post('keywords'))));
|
|
66
|
$parent = intval($admin->get_post('parent')); // fix secunia 2010-91-3
|
|
67
|
$visibility = $admin->get_post_escaped('visibility');
|
|
68
|
if (!in_array($visibility, array('public', 'private', 'registered', 'hidden', 'none'))) {$visibility = 'public';} // fix secunia 2010-93-3
|
|
69
|
$template = preg_replace('/[^a-z0-9_-]/i', "", $admin->get_post('template')); // fix secunia 2010-93-3
|
|
70
|
$template = (($template == DEFAULT_TEMPLATE ) ? '' : $template);
|
|
71
|
$target = preg_replace("/\W/", "", $admin->get_post('target'));
|
|
72
|
$aAdminGroups = (isset($_POST['admin_groups']) ? $_POST['admin_groups'] : array(1));
|
|
73
|
$aAdminUsers = (isset($_POST['admin_users']) ? $_POST['admin_users'] : array());
|
|
74
|
$aViewingGroups = (isset($_POST['viewing_groups']) ? $_POST['viewing_groups'] : array(1));
|
|
75
|
$aViewingUsers = (isset($_POST['viewing_users']) ? $_POST['viewing_users'] : array());
|
|
76
|
$searching = intval($admin->get_post('searching'));
|
|
77
|
$language = strtoupper($admin->get_post('language'));
|
|
78
|
$language = (preg_match('/^[A-Z]{2}$/', $language) ? $language : DEFAULT_LANGUAGE);
|
|
79
|
$menu = intval($admin->get_post('menu')); // fix secunia 2010-91-3
|
|
80
|
$page_code = (isset($_POST['page_code']) ? intval($_POST['page_code']) : 0);
|
|
81
|
// Validate data
|
|
82
|
if($page_title == '' || substr($page_title,0,1)=='.')
|
|
83
|
{
|
|
84
|
$admin->print_error($MESSAGE['PAGES']['BLANK_PAGE_TITLE']);
|
|
85
|
}
|
|
86
|
if($menu_title == '' || substr($menu_title,0,1)=='.')
|
|
87
|
{
|
|
88
|
$admin->print_error($MESSAGE['PAGES']['BLANK_MENU_TITLE']);
|
|
89
|
}
|
|
90
|
|
|
91
|
// Get existing perms
|
|
92
|
$sql = 'SELECT `parent`,`link`,`position`,`admin_groups`,`admin_users` FROM `'.TABLE_PREFIX.'pages` WHERE `page_id`='.$page_id;
|
|
93
|
$results = $database->query($sql);
|
|
94
|
|
|
95
|
$results_array = $results->fetchRow();
|
|
96
|
$old_parent = $results_array['parent'];
|
|
97
|
$old_link = $results_array['link'];
|
|
98
|
$old_position = $results_array['position'];
|
|
99
|
|
|
100
|
if(!$admin->ami_group_member($results_array['admin_groups']) &&
|
|
101
|
!$admin->is_group_match($admin->get_user_id(), $results_array['admin_users']))
|
|
102
|
{
|
|
103
|
$admin->print_error($MESSAGE['PAGES']['INSUFFICIENT_PERMISSIONS']);
|
|
104
|
}
|
|
105
|
|
|
106
|
// Setup admin groups
|
|
107
|
$aAdminGroups = (is_array($aAdminGroups) ? $aAdminGroups : array(1));
|
|
108
|
array_unshift($aAdminGroups, 1);
|
|
109
|
$sAdminGroups = implode(',', array_unique($aAdminGroups, SORT_REGULAR));
|
|
110
|
$sAdminGroups = (preg_match('/^,|[^0-9,]|,,|,$/', $sAdminGroups) ? '1' : $sAdminGroups);
|
|
111
|
|
|
112
|
$aAdminUsers = (is_array($aAdminUsers) ? $aAdminUsers : array());
|
|
113
|
$sAdminUsers = implode(',', array_diff($aAdminUsers, array(0)));
|
|
114
|
$sAdminUsers = (preg_match('/^,|[^0-9,]|,,|,$/', $sAdminUsers) ? array() : $sAdminUsers);
|
|
115
|
|
|
116
|
$aViewingGroups = (is_array($aViewingGroups) ? $aViewingGroups : array(1));
|
|
117
|
array_unshift($aViewingGroups, 1);
|
|
118
|
$sViewingGroups = implode(',', array_unique($aViewingGroups, SORT_REGULAR));
|
|
119
|
$sViewingGroups = (preg_match('/^,|[^0-9,]|,,|,$/', $sViewingGroups) ? '1' : $sViewingGroups);
|
|
120
|
|
|
121
|
$aViewingUsers = (is_array($aViewingUsers) ? $aViewingUsers : array());
|
|
122
|
$sViewingUsers = implode(',', array_diff($aViewingUsers, array(0)));
|
|
123
|
$sViewingUsers = (preg_match('/^,|[^0-9,]|,,|,$/', $sViewingUsers) ? array() : $sViewingUsers);
|
|
124
|
|
|
125
|
// If needed, get new order
|
|
126
|
if($parent != $old_parent)
|
|
127
|
{
|
|
128
|
// Include ordering class
|
|
129
|
require(WB_PATH.'/framework/class.order.php');
|
|
130
|
$order = new order(TABLE_PREFIX.'pages', 'position', 'page_id', 'parent');
|
|
131
|
// Get new order
|
|
132
|
$position = $order->get_new($parent);
|
|
133
|
// Clean new order
|
|
134
|
$order->clean($parent);
|
|
135
|
} else {
|
|
136
|
$position = $old_position;
|
|
137
|
}
|
|
138
|
|
|
139
|
// Work out level and root parent
|
|
140
|
if ($parent!='0')
|
|
141
|
{
|
|
142
|
$level = level_count($parent)+1;
|
|
143
|
$root_parent = root_parent($parent);
|
|
144
|
}
|
|
145
|
else {
|
|
146
|
$level = '0';
|
|
147
|
$root_parent = '0';
|
|
148
|
}
|
|
149
|
|
|
150
|
// Work-out what the link should be
|
|
151
|
if($parent == '0')
|
|
152
|
{
|
|
153
|
$link = '/'.page_filename($menu_title);
|
|
154
|
// rename menu titles: index && intro to prevent clashes with intro page feature and WB core file /pages/index.php
|
|
155
|
if($link == '/index' || $link == '/intro')
|
|
156
|
{
|
|
157
|
$link .= '_' .$page_id;
|
|
158
|
$filename = WB_PATH.PAGES_DIRECTORY.'/'.page_filename($menu_title).'_'.$page_id .PAGE_EXTENSION;
|
|
159
|
} else {
|
|
160
|
$filename = WB_PATH.PAGES_DIRECTORY.'/'.page_filename($menu_title).PAGE_EXTENSION;
|
|
161
|
}
|
|
162
|
} else {
|
|
163
|
$parent_section = '';
|
|
164
|
$parent_titles = array_reverse(get_parent_titles($parent));
|
|
165
|
foreach($parent_titles AS $parent_title)
|
|
166
|
{
|
|
167
|
$parent_section .= page_filename($parent_title).'/';
|
|
168
|
}
|
|
169
|
if($parent_section == '/')
|
|
170
|
{
|
|
171
|
$parent_section = '';
|
|
172
|
}
|
|
173
|
$link = '/'.$parent_section.page_filename($menu_title);
|
|
174
|
$filename = WB_PATH.PAGES_DIRECTORY.'/'.$parent_section.page_filename($menu_title).PAGE_EXTENSION;
|
|
175
|
}
|
|
176
|
|
|
177
|
// Check if a page with same page filename exists
|
|
178
|
// $database = new database();
|
|
179
|
$sql = 'SELECT `page_id`,`page_title` FROM `'.TABLE_PREFIX.'pages` WHERE `link` = "'.$link.'" AND `page_id` != '.$page_id;
|
|
180
|
$get_same_page = $database->query($sql);
|
|
181
|
|
|
182
|
if($get_same_page->numRows() > 0)
|
|
183
|
{
|
|
184
|
$admin->print_error($MESSAGE['PAGES']['PAGE_EXISTS']);
|
|
185
|
}
|
|
186
|
|
|
187
|
// Update page with new order
|
|
188
|
$sql = 'UPDATE `'.TABLE_PREFIX.'pages` SET `parent`='.$parent.', `position`='.$position.' WHERE `page_id`='.$page_id.'';
|
|
189
|
// $database = new database();
|
|
190
|
$database->query($sql);
|
|
191
|
|
|
192
|
// Get page trail
|
|
193
|
$page_trail = get_page_trail($page_id);
|
|
194
|
|
|
195
|
// Update page settings in the pages table
|
|
196
|
$sql = 'UPDATE `'.TABLE_PREFIX.'pages` '
|
|
197
|
. 'SET `parent`='.$parent.', '
|
|
198
|
. '`page_title`=\''.$page_title.'\', '
|
|
199
|
. '`menu_title`=\''.$menu_title.'\', '
|
|
200
|
. '`menu`='.$menu.', '
|
|
201
|
. '`level`='.$level.', '
|
|
202
|
. '`page_trail`=\''.$page_trail.'\', '
|
|
203
|
. '`root_parent`='.$root_parent.', '
|
|
204
|
. '`link`=\''.$link.'\', '
|
|
205
|
. '`template`=\''.$template.'\', '
|
|
206
|
. '`target`=\''.$target.'\', '
|
|
207
|
. '`description`=\''.$description.'\', '
|
|
208
|
. '`keywords`=\''.$keywords.'\', '
|
|
209
|
. '`position`='.$position.', '
|
|
210
|
. '`visibility`=\''.$visibility.'\', '
|
|
211
|
. '`searching`='.$searching.', '
|
|
212
|
. '`language`=\''.$language.'\', '
|
|
213
|
. '`admin_groups`=\''.$sAdminGroups.'\', '
|
|
214
|
. '`admin_users`=\''.$sAdminUsers.'\', '
|
|
215
|
. '`viewing_groups`=\''.$sViewingGroups.'\', '
|
|
216
|
. '`viewing_users`=\''.$sViewingUsers.'\', '
|
|
217
|
. '`page_code`='.$page_code.' '
|
|
218
|
. 'WHERE `page_id`='.$page_id;
|
|
219
|
if(!$database->query($sql)) {
|
|
220
|
$target_url = ADMIN_URL.'/pages/settings.php?page_id='.$page_id;
|
|
221
|
$admin->print_error($database->get_error(), $target_url );
|
|
222
|
}
|
|
223
|
// Clean old order if needed
|
|
224
|
if($parent != $old_parent)
|
|
225
|
{
|
|
226
|
$order->clean($old_parent);
|
|
227
|
}
|
|
228
|
|
|
229
|
/* BEGIN page "access file" code */
|
|
230
|
|
|
231
|
// Create a new file in the /pages dir if title changed
|
|
232
|
if(!is_writable(WB_PATH.PAGES_DIRECTORY.'/'))
|
|
233
|
{
|
|
234
|
$admin->print_error($MESSAGE['PAGES']['CANNOT_CREATE_ACCESS_FILE']);
|
|
235
|
} else {
|
|
236
|
$old_filename = WB_PATH.PAGES_DIRECTORY.$old_link.PAGE_EXTENSION;
|
|
237
|
// First check if we need to create a new file
|
|
238
|
if(($old_link != $link) || (!file_exists($old_filename)))
|
|
239
|
{
|
|
240
|
// Delete old file
|
|
241
|
$old_filename = WB_PATH.PAGES_DIRECTORY.$old_link.PAGE_EXTENSION;
|
|
242
|
if(file_exists($old_filename))
|
|
243
|
{
|
|
244
|
unlink($old_filename);
|
|
245
|
}
|
|
246
|
// Create access file
|
|
247
|
create_access_file($filename,$page_id,$level);
|
|
248
|
// Move a directory for this page
|
|
249
|
if(file_exists(WB_PATH.PAGES_DIRECTORY.$old_link.'/') && is_dir(WB_PATH.PAGES_DIRECTORY.$old_link.'/'))
|
|
250
|
{
|
|
251
|
rename(WB_PATH.PAGES_DIRECTORY.$old_link.'/', WB_PATH.PAGES_DIRECTORY.$link.'/');
|
|
252
|
}
|
|
253
|
// Update any pages that had the old link with the new one
|
|
254
|
$old_link_len = strlen($old_link);
|
|
255
|
$sql = '';
|
|
256
|
$query_subs = $database->query("SELECT page_id,link,level FROM ".TABLE_PREFIX."pages WHERE link LIKE '%$old_link/%' ORDER BY LEVEL ASC");
|
|
257
|
|
|
258
|
if($query_subs->numRows() > 0)
|
|
259
|
{
|
|
260
|
while($sub = $query_subs->fetchRow())
|
|
261
|
{
|
|
262
|
// Double-check to see if it contains old link
|
|
263
|
if(substr($sub['link'], 0, $old_link_len) == $old_link)
|
|
264
|
{
|
|
265
|
// Get new link
|
|
266
|
$replace_this = $old_link;
|
|
267
|
$old_sub_link_len =strlen($sub['link']);
|
|
268
|
$new_sub_link = $link.'/'.substr($sub['link'],$old_link_len+1,$old_sub_link_len);
|
|
269
|
// Work out level
|
|
270
|
$new_sub_level = level_count($sub['page_id']);
|
|
271
|
// Update level and link
|
|
272
|
$database->query("UPDATE ".TABLE_PREFIX."pages SET link = '$new_sub_link', level = '$new_sub_level' WHERE page_id = '".$sub['page_id']."' LIMIT 1");
|
|
273
|
// Re-write the access file for this page
|
|
274
|
$old_subpage_file = WB_PATH.PAGES_DIRECTORY.$new_sub_link.PAGE_EXTENSION;
|
|
275
|
if(file_exists($old_subpage_file))
|
|
276
|
{
|
|
277
|
unlink($old_subpage_file);
|
|
278
|
}
|
|
279
|
create_access_file(WB_PATH.PAGES_DIRECTORY.$new_sub_link.PAGE_EXTENSION, $sub['page_id'], $new_sub_level);
|
|
280
|
}
|
|
281
|
}
|
|
282
|
}
|
|
283
|
}
|
|
284
|
}
|
|
285
|
|
|
286
|
// Function to fix page trail of subs
|
|
287
|
function fix_page_trail($parent,$root_parent)
|
|
288
|
{
|
|
289
|
// Get objects and vars from outside this function
|
|
290
|
global $admin, $template, $database, $TEXT, $MESSAGE;
|
|
291
|
// Get page list from database
|
|
292
|
// $database = new database();
|
|
293
|
$query = "SELECT page_id FROM ".TABLE_PREFIX."pages WHERE parent = '$parent'";
|
|
294
|
$get_pages = $database->query($query);
|
|
295
|
// Insert values into main page list
|
|
296
|
if($get_pages->numRows() > 0)
|
|
297
|
{
|
|
298
|
while($page = $get_pages->fetchRow())
|
|
299
|
{
|
|
300
|
// Fix page trail
|
|
301
|
|
|
302
|
$database->query("UPDATE ".TABLE_PREFIX."pages SET ".($root_parent != 0 ?"root_parent = '$root_parent', ":"")." page_trail = '".get_page_trail($page['page_id'])."' WHERE page_id = '".$page['page_id']."'");
|
|
303
|
// Run this query on subs
|
|
304
|
fix_page_trail($page['page_id'],$root_parent);
|
|
305
|
}
|
|
306
|
}
|
|
307
|
}
|
|
308
|
|
|
309
|
// Fix sub-pages page trail
|
|
310
|
fix_page_trail($page_id,$root_parent);
|
|
311
|
|
|
312
|
/* END page "access file" code */
|
|
313
|
|
|
314
|
//$pagetree_url = ADMIN_URL.'/pages/index.php';
|
|
315
|
//$target_url = ADMIN_URL.'/pages/settings.php?page_id='.$page_id;
|
|
316
|
// Check if there is a db error, otherwise say successful
|
|
317
|
if($database->is_error())
|
|
318
|
{
|
|
319
|
$admin->print_error($database->get_error(), $target_url );
|
|
320
|
} else {
|
|
321
|
$admin->print_success($MESSAGE['PAGES']['SAVED_SETTINGS'], $target_url );
|
|
322
|
}
|
|
323
|
|
|
324
|
// Print admin footer
|
|
325
|
$admin->print_footer();
|