Project

General

Profile

1
<?php
2
/**
3
 *
4
 * @category        admin
5
 * @package         pages
6
 * @author          Ryan Djurovich, WebsiteBaker Project
7
 * @copyright       2009-2012, WebsiteBaker Org. e.V.
8
 * @link			http://www.websitebaker2.org/
9
 * @license         http://www.gnu.org/licenses/gpl.html
10
 * @platform        WebsiteBaker 2.8.x
11
 * @requirements    PHP 5.2.2 and higher and higher
12
 * @version         $Id: save.php 1703 2012-08-27 16:33:57Z Luisehahne $
13
 * @filesource		$HeadURL: svn://isteam.dynxs.de/wb-archiv/branches/2.8.x/wb/admin/pages/save.php $
14
 * @lastmodified    $Date: 2012-08-27 18:33:57 +0200 (Mon, 27 Aug 2012) $
15
 *
16
 */
17
/*
18
*/
19
// Create new admin object
20
require('../../config.php');
21
require_once(WB_PATH.'/framework/class.admin.php');
22

    
23
// suppress to print the header, so no new FTAN will be set
24
$admin = new admin('Pages', 'pages_modify', false);
25

    
26
// Get page & section id
27
if(!isset($_POST['page_id']) || !is_numeric($_POST['page_id'])) {
28
	header("Location: index.php");
29
	exit(0);
30
} else {
31
	$page_id = intval($_POST['page_id']);
32
}
33

    
34
if(!isset($_POST['section_id']) || !is_numeric($_POST['section_id'])) {
35
	header("Location: index.php");
36
	exit(0);
37
} else {
38
	$section_id = intval($_POST['section_id']);
39
}
40

    
41
// $js_back = "javascript: history.go(-1);";
42
$js_back = ADMIN_URL.'/pages/modify.php?page_id='.$page_id;
43

    
44
if (!$admin->checkFTAN())
45
{
46
	$admin->print_header();
47
	$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'],$js_back );
48
}
49
// After check print the header
50
$admin->print_header();
51

    
52
/*
53
if( (!($page_id = $admin->checkIDKEY('page_id', 0, $_SERVER['REQUEST_METHOD']))) )
54
{
55
	$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS']);
56
}
57

    
58
if( (!($section_id= $admin->checkIDKEY('section_id', 0, $_SERVER['REQUEST_METHOD']))) )
59
{
60
	$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS']);
61
}
62
*/
63

    
64
// Get perms
65
$sql  = 'SELECT `admin_groups`,`admin_users` FROM `'.TABLE_PREFIX.'pages` ';
66
$sql .= 'WHERE `page_id` = '.$page_id;
67
$results = $database->query($sql);
68
$results_array = $results->fetchRow();
69
if(!$admin->ami_group_member($results_array['admin_users']) &&
70
   !$admin->is_group_match($admin->get_groups_id(), $results_array['admin_groups']))
71
{
72
	$admin->print_error($MESSAGE['PAGES_INSUFFICIENT_PERMISSIONS']);
73
}
74
// Get page module
75
$sql  = 'SELECT `module` FROM `'.TABLE_PREFIX.'sections` ';
76
$sql .= 'WHERE `page_id`='.$page_id.' AND `section_id`='.$section_id;
77
$module = $database->get_one($sql);
78
if(!$module) {
79
	$admin->print_error( $database->is_error() ? $database->get_error() : $MESSAGE['PAGES_NOT_FOUND']);
80
}
81
// Update the pages table
82
$now = time();
83
$sql  = 'UPDATE `'.TABLE_PREFIX.'pages` SET ';
84
$sql .= '`modified_when` = '.$now.', `modified_by` = '.$admin->get_user_id().' ';
85
$sql .= 'WHERE `page_id` = '.$page_id;
86
$database->query($sql);
87

    
88
// Include the modules saving script if it exists
89
if(file_exists(WB_PATH.'/modules/'.$module.'/save.php'))
90
{
91
	include_once(WB_PATH.'/modules/'.$module.'/save.php');
92
}
93
// Check if there is a db error, otherwise say successful
94
if($database->is_error())
95
{
96
	$admin->print_error($database->get_error(), ADMIN_URL.'/pages/modify.php?page_id='.$page_id );
97
} else {
98
	$admin->print_success($MESSAGE['PAGES_SAVED'], ADMIN_URL.'/pages/modify.php?page_id='.$page_id );
99
}
100

    
101
// Print admin footer
102
$admin->print_footer();
(19-19/24)