WB 2.08.x

<?php

/**

 *

 * @category        backend

 * @package         modules

 * @author          WebsiteBaker Project

 * @copyright       2009-2012, WebsiteBaker Org. e.V.

 * @link			http://www.websitebaker2.org/

 * @license         http://www.gnu.org/licenses/gpl.html

 * @platform        WebsiteBaker 2.8.x

 * @requirements    PHP 5.2.2 and higher

 * @version         $Id: admin.php 1718 2012-08-29 14:25:15Z Luisehahne $

 * @filesource		$HeadURL: svn://isteam.dynxs.de/wb-archiv/branches/2.8.x/wb/modules/admin.php $

 * @lastmodified    $Date: 2012-08-29 16:25:15 +0200 (Wed, 29 Aug 2012) $

 *

 */

// Stop this file being access directly

if(defined('WB_PATH') == false)

{

	die('<h2 style="color:red;margin:3em auto;text-align:center;">Cannot access this file directly</h2>');

}

// Get page id

	$requestMethod = '_'.strtoupper($_SERVER['REQUEST_METHOD']);

	$page_id = intval(isset(${$requestMethod}['page_id'])) ? ${$requestMethod}['page_id'] : (isset($page_id) ? intval($page_id) : 0);

	if(	($page_id == 0)) {

		header("Location: index.php");

		exit(0);

	}

// Get section id if there is one

	$requestMethod = '_'.strtoupper($_SERVER['REQUEST_METHOD']);

	$section_id = intval(isset(${$requestMethod}['section_id'])) ? ${$requestMethod}['section_id'] : (isset($section_id) ? intval($section_id) : 0);

	if(	($section_id == 0) && isset($section_required)) {

		header("Location: $section_required");

		exit(0);

	}

/*

// be sure is is numeric

$page_id = intval($page_id);

$section_id = intval($section_id);

*/

// Create js back link

// $js_back = 'javascript: history.go(-1);';

$js_back = ADMIN_URL.'/pages/sections.php?page_id='.$page_id;

// Create new admin object, you can set the next variable in your module

// to print with or without header, default is with header

// it is recommed to set the variable before including the /modules/admin.php

$admin_header = (!isset($admin_header)) ? true : $admin_header;

require_once(WB_PATH.'/framework/class.admin.php');

$admin = new admin('Pages', 'pages_modify',(bool)$admin_header);

// Get perms

// unset($admin_header);

$page = $admin->get_page_details($page_id, ADMIN_URL.'/pages/index.php' );

$old_admin_groups = explode(',', str_replace('_', '', $page['admin_groups']));

$old_admin_users = explode(',', str_replace('_', '', $page['admin_users']));

$in_group = false;

foreach($admin->get_groups_id() as $cur_gid){

    if (in_array($cur_gid, $old_admin_groups)) {

        $in_group = true;

    }

}

if((!$in_group) && !is_numeric(array_search($admin->get_user_id(), $old_admin_users))) {

	print $admin->get_group_id().$admin->get_user_id();

	// print_r ($old_admin_groups);

	$admin->print_error($MESSAGE['PAGES_INSUFFICIENT_PERMISSIONS']);

}

// some additional security checks:

// Check whether the section_id belongs to the page_id at all

if ($section_id != 0) {

	$section = $admin->get_section_details($section_id,ADMIN_URL.'/pages/index.php');

	if (!$admin->get_permission($section['module'], 'module'))

	{

		$admin->print_error($MESSAGE['PAGES_INSUFFICIENT_PERMISSIONS']);

	}

}

// Workout if the developer wants to show the info banner

if(isset($print_info_banner) && $print_info_banner == true) {

	// Get page details already defined

	// Get display name of person who last modified the page

	$user = $admin->get_user_details($page['modified_by']);

	// Convert the unix ts for modified_when to human a readable form

	if($page['modified_when'] != 0) {

		$modified_ts = gmdate(TIME_FORMAT.', '.DATE_FORMAT, $page['modified_when']+TIMEZONE);

	} else {

		$modified_ts = 'Unknown';

	}

	// Setup template object, parse vars to it, then parse it

	// Create new template object

	$template = new Template(dirname($admin->correct_theme_source('pages_modify.htt')),'keep');

	// $template->debug = true;

	$template->set_file('page', 'pages_modify.htt');

	$template->set_block('page', 'main_block', 'main');

	$template->set_block('main_block', 'section_block', 'section_list');

	$template->set_block('section_block', 'block_block', 'block_list');

	$template->set_var(array(

				'PAGE_ID' => $page['page_id'],

				// 'PAGE_IDKEY' => $admin->getIDKEY($page['page_id']),

				'PAGE_IDKEY' => $page['page_id'],

				'PAGE_TITLE' => ($page['page_title']),

				'MENU_TITLE' => ($page['menu_title']),

				'ADMIN_URL' => ADMIN_URL,

				'WB_URL' => WB_URL,

				'THEME_URL' => THEME_URL

				));

	$template->set_var(array(

				'MODIFIED_BY' => $user['display_name'],

				'TEXT_LAST_MODIFIED' => $TEXT['LAST_UPDATED_BY'],

				'MODIFIED_BY_USERNAME' => $user['username'],

				'MODIFIED_WHEN' => $modified_ts,

				'LAST_MODIFIED' => $MESSAGE['PAGES_LAST_MODIFIED'],

				'TEXT_MANAGE_SECTIONS' => $HEADING['MANAGE_SECTIONS']

			));

	$template->set_block('main_block', 'show_modify_block', 'show_modify');

	if($modified_ts == 'Unknown')

	{

	    $template->set_block('show_modify', '');

		$template->set_var('CLASS_DISPLAY_MODIFIED', 'hide');

	} else {

		$template->set_var('CLASS_DISPLAY_MODIFIED', '');

	    $template->parse('show_modify', 'show_modify_block', true);

	}

	// Work-out if we should show the "manage sections" link

//	$sql  = 'SELECT `section_id` FROM `'.TABLE_PREFIX.'sections` WHERE `page_id` = '.(int)$page_id.' ';

//	$sql .= 'AND `module` = "menu_link"';

//	$query_sections = $database->query($sql);

/*-- workout if we should show the "manage sections" link ------------------------------*/

	$sql = 'SELECT COUNT(*) FROM `'.TABLE_PREFIX.'sections` '

	     . 'WHERE `page_id`='.$page_id.' AND `module`=\'menu_link\'';

	$bIsMenuLink = (intval($database->get_one($sql)) != 0);

//	if(!$bIsMenuLink && (MANAGE_SECTIONS == true) && $admin->get_permission('pages_add') )

	if((MANAGE_SECTIONS == true) && $admin->get_permission('pages_add') )

	{

		$template->set_var(array(

				'SECTIONS_LINK_BEFORE' => '<a href="'.ADMIN_URL.'/pages/sections.php?page_id='.$page['page_id'].'">',

				'SECTIONS_LINK_AFTER' => '</a>',

				'DISPLAY_MANAGE_SECTIONS' => 'link',

				));

	}else {

//		$oTpl->set_block('show_manage_sections', '');

		$template->set_var(array(

				'SECTIONS_LINK_BEFORE' => '<span class="bold grey">',

				'SECTIONS_LINK_AFTER' => '</span>',

				'DISPLAY_MANAGE_SECTIONS' => 'link',

				));

	}

	if( $admin->get_permission('pages_settings') )

	{

		$template->set_var(array(

				'SETTINGS_LINK_BEFORE' => '<a href="'.ADMIN_URL.'/pages/settings.php?page_id='.$page['page_id'].'">',

				'SETTINGS_LINK_AFTER' => '</a>',

				'DISPLAY_MANAGE_SETTINGS' => 'link',

				));

	} else {

		$template->set_var(array(

				'SETTINGS_LINK_BEFORE' => '<span class="bold grey">',

				'SETTINGS_LINK_AFTER' => '</span>',

				'DISPLAY_MANAGE_SECTIONS' => 'link',

				));

	}

/*

	$template->set_block('main_block', 'show_section_block', 'show_section');

	if($query_sections->numRows() > 0)

	{

		$template->set_block('show_section', '');

		$template->set_var('DISPLAY_MANAGE_SECTIONS', 'display:none;');

	} elseif(MANAGE_SECTIONS == 'enabled')

	{

		$template->set_var('TEXT_MANAGE_SECTIONS', $HEADING['MANAGE_SECTIONS']);

	    $template->parse('show_section', 'show_section_block', true);

	} else {

		$template->set_block('show_section', '');

		$template->set_var('DISPLAY_MANAGE_SECTIONS', 'display:none;');

	}

*/

	// Insert language TEXT

	$template->set_var(array(

					'TEXT_CURRENT_PAGE' => $TEXT['CURRENT_PAGE'],

					'TEXT_CHANGE_SETTINGS' => $TEXT['CHANGE_SETTINGS'],

					'HEADING_MODIFY_PAGE' => $HEADING['MODIFY_PAGE']

					));

	// Parse and print header template

	$template->parse('main', 'main_block', false);

	$template->pparse('output', 'page');

	// unset($print_info_banner);

	unset($template);

	if (SECTION_BLOCKS) {

		if (isset($block[$section['block']]) && trim(strip_tags(($block[$section['block']]))) != '')

                 {

			$block_name = htmlentities(strip_tags($block[$section['block']]));

		} else {

			if ($section['block'] == 1) {

				$block_name = $TEXT['MAIN'];

			} else {

				$block_name = '#' . (int) $section['block'];

			}

		}

		$sec_anchor = (defined( 'SEC_ANCHOR' ) && ( SEC_ANCHOR != '' )  ? 'id="'.SEC_ANCHOR.$section['section_id'].'"' : '');

		print '<div class="section-info" ><b>' . $TEXT['BLOCK'] . ': </b>' . $block_name;

		print '<b>  Modul: </b>' . $section['module']." ";

		print '<b>  ID: </b><a' . $section_id."></a></div>\n";

	}

} //

// Work-out if the developer wants us to update the timestamp for when the page was last modified

if(isset($update_when_modified) && $update_when_modified == true) {

	$database->query("UPDATE ".TABLE_PREFIX."pages SET modified_when = '".time()."', modified_by = '".$admin->get_user_id()."' WHERE page_id = '$page_id'");

}