| 1 | 4 | ryan | <?php
 | 
      
        | 2 |  |  | 
 | 
      
        | 3 | 40 | stefan | // $Id$
 | 
      
        | 4 | 4 | ryan | 
 | 
      
        | 5 |  |  | /*
 | 
      
        | 6 |  |  | 
 | 
      
        | 7 |  |  |  Website Baker Project <http://www.websitebaker.org/>
 | 
      
        | 8 | 310 | ryan |  Copyright (C) 2004-2006, Ryan Djurovich
 | 
      
        | 9 | 4 | ryan | 
 | 
      
        | 10 |  |  |  Website Baker is free software; you can redistribute it and/or modify
 | 
      
        | 11 |  |  |  it under the terms of the GNU General Public License as published by
 | 
      
        | 12 |  |  |  the Free Software Foundation; either version 2 of the License, or
 | 
      
        | 13 |  |  |  (at your option) any later version.
 | 
      
        | 14 |  |  | 
 | 
      
        | 15 |  |  |  Website Baker is distributed in the hope that it will be useful,
 | 
      
        | 16 |  |  |  but WITHOUT ANY WARRANTY; without even the implied warranty of
 | 
      
        | 17 |  |  |  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | 
      
        | 18 |  |  |  GNU General Public License for more details.
 | 
      
        | 19 |  |  | 
 | 
      
        | 20 |  |  |  You should have received a copy of the GNU General Public License
 | 
      
        | 21 |  |  |  along with Website Baker; if not, write to the Free Software
 | 
      
        | 22 |  |  |  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 | 
      
        | 23 |  |  | 
 | 
      
        | 24 |  |  | */
 | 
      
        | 25 |  |  | 
 | 
      
        | 26 |  |  | require('../../config.php');
 | 
      
        | 27 |  |  | 
 | 
      
        | 28 |  |  | // Get id
 | 
      
        | 29 |  |  | if(!isset($_POST['group_id']) OR !is_numeric($_POST['group_id'])) {
 | 
      
        | 30 |  |  | 	header("Location: ".ADMIN_URL."/pages/index.php");
 | 
      
        | 31 | 286 | stefan | 	exit(0);
 | 
      
        | 32 | 4 | ryan | } else {
 | 
      
        | 33 |  |  | 	$group_id = $_POST['group_id'];
 | 
      
        | 34 |  |  | }
 | 
      
        | 35 |  |  | 
 | 
      
        | 36 |  |  | // Include WB admin wrapper script
 | 
      
        | 37 |  |  | $update_when_modified = true; // Tells script to update when this page was last updated
 | 
      
        | 38 |  |  | require(WB_PATH.'/modules/admin.php');
 | 
      
        | 39 |  |  | 
 | 
      
        | 40 |  |  | // Include WB functions file
 | 
      
        | 41 |  |  | require(WB_PATH.'/framework/functions.php');
 | 
      
        | 42 |  |  | 
 | 
      
        | 43 |  |  | // Vagroup_idate all fields
 | 
      
        | 44 |  |  | if($admin->get_post('title') == '') {
 | 
      
        | 45 |  |  | 	$admin->print_error($MESSAGE['GENERIC']['FILL_IN_ALL'], WB_URL.'/modules/news/modify_group.php?page_id='.$page_id.'§ion_id='.$section_id.'&group_id='.$group_id);
 | 
      
        | 46 |  |  | } else {
 | 
      
        | 47 | 40 | stefan | 	$title = $admin->add_slashes($admin->get_post('title'));
 | 
      
        | 48 | 4 | ryan | 	$active = $admin->get_post('active');
 | 
      
        | 49 |  |  | }
 | 
      
        | 50 |  |  | 
 | 
      
        | 51 |  |  | // Update row
 | 
      
        | 52 |  |  | $database->query("UPDATE ".TABLE_PREFIX."mod_news_groups SET title = '$title', active = '$active' WHERE group_id = '$group_id'");
 | 
      
        | 53 |  |  | 
 | 
      
        | 54 |  |  | // Check if the user uploaded an image or wants to delete one
 | 
      
        | 55 |  |  | if(isset($_FILES['image']['tmp_name']) AND $_FILES['image']['tmp_name'] != '') {
 | 
      
        | 56 |  |  | 	// Get real filename and set new filename
 | 
      
        | 57 |  |  | 	$filename = $_FILES['image']['name'];
 | 
      
        | 58 |  |  | 	$new_filename = WB_PATH.MEDIA_DIRECTORY.'/.news/image'.$group_id.'.jpg';
 | 
      
        | 59 |  |  | 	// Make sure the image is a jpg file
 | 
      
        | 60 |  |  | 	if(substr($filename, -3, 3) != 'jpg') {
 | 
      
        | 61 |  |  | 		$admin->print_error($MESSAGE['GENERIC']['FILE_TYPE'].' JPG (JPEG)');
 | 
      
        | 62 |  |  | 	} elseif(mime_content_type($_FILES['image']['tmp_name']) != 'image/jpeg' AND mime_content_type($_FILES['image']['tmp_name']) != 'image/jpg') {
 | 
      
        | 63 |  |  | 		$admin->print_error($MESSAGE['GENERIC']['FILE_TYPE'].' JPG (JPEG)');
 | 
      
        | 64 |  |  | 	}
 | 
      
        | 65 |  |  | 	// Make sure the target directory exists
 | 
      
        | 66 |  |  | 	make_dir(WB_PATH.MEDIA_DIRECTORY.'/.news');
 | 
      
        | 67 |  |  | 	// Upload image
 | 
      
        | 68 |  |  | 	move_uploaded_file($_FILES['image']['tmp_name'], $new_filename);
 | 
      
        | 69 |  |  | 	// Check if we need to create a thumb
 | 
      
        | 70 |  |  | 	$query_settings = $database->query("SELECT resize FROM ".TABLE_PREFIX."mod_news_settings WHERE section_id = '$section_id'");
 | 
      
        | 71 |  |  | 	$fetch_settings = $query_settings->fetchRow();
 | 
      
        | 72 |  |  | 	$resize = $fetch_settings['resize'];
 | 
      
        | 73 |  |  | 	if($resize != 0) {
 | 
      
        | 74 |  |  | 		// Resize the image
 | 
      
        | 75 |  |  | 		$thumb_location = WB_PATH.MEDIA_DIRECTORY.'/.news/thumb'.$group_id.'.jpg';
 | 
      
        | 76 |  |  | 		if(make_thumb($new_filename, $thumb_location, $resize)) {
 | 
      
        | 77 |  |  | 			// Delete the actual image and replace with the resized version
 | 
      
        | 78 |  |  | 			unlink($new_filename);
 | 
      
        | 79 |  |  | 			rename($thumb_location, $new_filename);
 | 
      
        | 80 |  |  | 		}
 | 
      
        | 81 |  |  | 	}
 | 
      
        | 82 |  |  | }
 | 
      
        | 83 |  |  | if(isset($_POST['delete_image']) AND $_POST['delete_image'] != '') {
 | 
      
        | 84 |  |  | 	// Try unlinking image
 | 
      
        | 85 |  |  | 	if(file_exists(WB_PATH.MEDIA_DIRECTORY.'/.news/image'.$group_id.'.jpg')) {
 | 
      
        | 86 |  |  | 		unlink(WB_PATH.MEDIA_DIRECTORY.'/.news/image'.$group_id.'.jpg');
 | 
      
        | 87 |  |  | 	}
 | 
      
        | 88 |  |  | }
 | 
      
        | 89 |  |  | 
 | 
      
        | 90 |  |  | // Check if there is a db error, otherwise say successful
 | 
      
        | 91 |  |  | if($database->is_error()) {
 | 
      
        | 92 |  |  | 	$admin->print_error($database->get_error(), WB_URL.'/modules/news/modify_group.php?page_id='.$page_id.'§ion_id='.$section_id.'&group_id='.$group_id);
 | 
      
        | 93 |  |  | } else {
 | 
      
        | 94 |  |  | 	$admin->print_success($TEXT['SUCCESS'], ADMIN_URL.'/pages/modify.php?page_id='.$page_id);
 | 
      
        | 95 |  |  | }
 | 
      
        | 96 |  |  | 
 | 
      
        | 97 |  |  | // Print admin footer
 | 
      
        | 98 |  |  | $admin->print_footer();
 | 
      
        | 99 |  |  | 
 | 
      
        | 100 |  |  | ?>
 |