| 1 | <?php
 | 
  
    | 2 | 
 | 
  
    | 3 | // $Id: settings2.php 555 2008-01-18 12:56:20Z Ruebenwurzel $
 | 
  
    | 4 | 
 | 
  
    | 5 | /*
 | 
  
    | 6 | 
 | 
  
    | 7 |  Website Baker Project <http://www.websitebaker.org/>
 | 
  
    | 8 |  Copyright (C) 2004-2008, Ryan Djurovich
 | 
  
    | 9 | 
 | 
  
    | 10 |  Website Baker is free software; you can redistribute it and/or modify
 | 
  
    | 11 |  it under the terms of the GNU General Public License as published by
 | 
  
    | 12 |  the Free Software Foundation; either version 2 of the License, or
 | 
  
    | 13 |  (at your option) any later version.
 | 
  
    | 14 | 
 | 
  
    | 15 |  Website Baker is distributed in the hope that it will be useful,
 | 
  
    | 16 |  but WITHOUT ANY WARRANTY; without even the implied warranty of
 | 
  
    | 17 |  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | 
  
    | 18 |  GNU General Public License for more details.
 | 
  
    | 19 | 
 | 
  
    | 20 |  You should have received a copy of the GNU General Public License
 | 
  
    | 21 |  along with Website Baker; if not, write to the Free Software
 | 
  
    | 22 |  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 | 
  
    | 23 | 
 | 
  
    | 24 | */
 | 
  
    | 25 | 
 | 
  
    | 26 | // Get page id
 | 
  
    | 27 | if(!isset($_POST['page_id']) OR !is_numeric($_POST['page_id'])) {
 | 
  
    | 28 | 	header("Location: index.php");
 | 
  
    | 29 | 	exit(0);
 | 
  
    | 30 | } else {
 | 
  
    | 31 | 	$page_id = $_POST['page_id'];
 | 
  
    | 32 | }
 | 
  
    | 33 | 
 | 
  
    | 34 | // Create new admin object and print admin header
 | 
  
    | 35 | require('../../config.php');
 | 
  
    | 36 | require_once(WB_PATH.'/framework/class.admin.php');
 | 
  
    | 37 | $admin = new admin('Pages', 'pages_settings');
 | 
  
    | 38 | 
 | 
  
    | 39 | // Include the WB functions file
 | 
  
    | 40 | require_once(WB_PATH.'/framework/functions.php');
 | 
  
    | 41 | 
 | 
  
    | 42 | // Get values
 | 
  
    | 43 | $page_title = $admin->get_post_escaped('page_title');
 | 
  
    | 44 | $page_title = my_htmlspecialchars($page_title);
 | 
  
    | 45 | $menu_title = $admin->get_post_escaped('menu_title');
 | 
  
    | 46 | $menu_title = my_htmlspecialchars($menu_title);
 | 
  
    | 47 | $description = my_htmlspecialchars($admin->add_slashes($admin->get_post('description')));
 | 
  
    | 48 | $keywords = my_htmlspecialchars($admin->add_slashes($admin->get_post('keywords')));
 | 
  
    | 49 | $parent = $admin->get_post('parent');
 | 
  
    | 50 | $visibility = $admin->get_post('visibility');
 | 
  
    | 51 | $template = $admin->get_post('template');
 | 
  
    | 52 | $target = $admin->get_post('target');
 | 
  
    | 53 | $admin_groups = $admin->get_post('admin_groups');
 | 
  
    | 54 | $viewing_groups = $admin->get_post('viewing_groups');
 | 
  
    | 55 | $searching = $admin->get_post('searching');
 | 
  
    | 56 | $language = $admin->get_post('language');
 | 
  
    | 57 | $menu = $admin->get_post('menu');
 | 
  
    | 58 | 
 | 
  
    | 59 | // Validate data
 | 
  
    | 60 | if($page_title == '' || substr($page_title,0,1)=='.') {
 | 
  
    | 61 | 	$admin->print_error($MESSAGE['PAGES']['BLANK_PAGE_TITLE']);
 | 
  
    | 62 | }
 | 
  
    | 63 | if($menu_title == '' || substr($menu_title,0,1)=='.') {
 | 
  
    | 64 | 	$admin->print_error($MESSAGE['PAGES']['BLANK_MENU_TITLE']);
 | 
  
    | 65 | }
 | 
  
    | 66 | 
 | 
  
    | 67 | // Get existing perms
 | 
  
    | 68 | $database = new database();
 | 
  
    | 69 | $results = $database->query("SELECT parent,link,position,admin_groups,admin_users FROM ".TABLE_PREFIX."pages WHERE page_id = '$page_id'");
 | 
  
    | 70 | $results_array = $results->fetchRow();
 | 
  
    | 71 | $old_parent = $results_array['parent'];
 | 
  
    | 72 | $old_link = $results_array['link'];
 | 
  
    | 73 | $old_position = $results_array['position'];
 | 
  
    | 74 | $old_admin_groups = explode(',', str_replace('_', '', $results_array['admin_groups']));
 | 
  
    | 75 | $old_admin_users = explode(',', str_replace('_', '', $results_array['admin_users']));
 | 
  
    | 76 | 
 | 
  
    | 77 | $in_old_group = FALSE;
 | 
  
    | 78 | foreach($admin->get_groups_id() as $cur_gid){
 | 
  
    | 79 |     if (in_array($cur_gid, $old_admin_groups)) {
 | 
  
    | 80 | 	$in_old_group = TRUE;
 | 
  
    | 81 |     }
 | 
  
    | 82 | }
 | 
  
    | 83 | if((!$in_old_group) AND !is_numeric(array_search($admin->get_user_id(), $old_admin_users))) {
 | 
  
    | 84 | 	$admin->print_error($MESSAGE['PAGES']['INSUFFICIENT_PERMISSIONS']);
 | 
  
    | 85 | }
 | 
  
    | 86 | 
 | 
  
    | 87 | // Setup admin groups
 | 
  
    | 88 | $admin_groups[] = 1;
 | 
  
    | 89 | if(!in_array(1, $admin->get_groups_id())) {
 | 
  
    | 90 | 	$admin_groups[] = implode(",",$admin->get_groups_id());
 | 
  
    | 91 | }
 | 
  
    | 92 | $admin_groups = implode(',', $admin_groups);
 | 
  
    | 93 | // Setup viewing groups
 | 
  
    | 94 | $viewing_groups[] = 1;
 | 
  
    | 95 | if(!in_array(1, $admin->get_groups_id())) {
 | 
  
    | 96 | 	$viewing_groups[] = implode(",",$admin->get_groups_id());
 | 
  
    | 97 | }
 | 
  
    | 98 | $viewing_groups = implode(',', $viewing_groups);
 | 
  
    | 99 | 
 | 
  
    | 100 | // If needed, get new order
 | 
  
    | 101 | if($parent != $old_parent) {
 | 
  
    | 102 | 	// Include ordering class
 | 
  
    | 103 | 	require(WB_PATH.'/framework/class.order.php');
 | 
  
    | 104 | 	$order = new order(TABLE_PREFIX.'pages', 'position', 'page_id', 'parent');
 | 
  
    | 105 | 	// Get new order
 | 
  
    | 106 | 	$position = $order->get_new($parent);
 | 
  
    | 107 | 	// Clean new order
 | 
  
    | 108 | 	$order->clean($parent);
 | 
  
    | 109 | } else {
 | 
  
    | 110 | 	$position = $old_position;
 | 
  
    | 111 | }
 | 
  
    | 112 | 
 | 
  
    | 113 | // Work out level and root parent
 | 
  
    | 114 | if ($parent!='0') {
 | 
  
    | 115 | 	$level = level_count($parent)+1;
 | 
  
    | 116 | 	$root_parent = root_parent($parent);
 | 
  
    | 117 | }
 | 
  
    | 118 | else {
 | 
  
    | 119 | 	$level = '0';
 | 
  
    | 120 | 	$root_parent = '0';
 | 
  
    | 121 | }
 | 
  
    | 122 | 
 | 
  
    | 123 | // Work-out what the link should be
 | 
  
    | 124 | if($parent == '0') {
 | 
  
    | 125 | 	$link = '/'.page_filename($menu_title);
 | 
  
    | 126 | 	$filename = WB_PATH.PAGES_DIRECTORY.'/'.page_filename($menu_title).PAGE_EXTENSION; 
 | 
  
    | 127 | } else {
 | 
  
    | 128 | 	$parent_section = '';
 | 
  
    | 129 | 	$parent_titles = array_reverse(get_parent_titles($parent));
 | 
  
    | 130 | 	foreach($parent_titles AS $parent_title) {
 | 
  
    | 131 | 		$parent_section .= page_filename($parent_title).'/';
 | 
  
    | 132 | 	}
 | 
  
    | 133 | 	if($parent_section == '/') { $parent_section = ''; }
 | 
  
    | 134 | 	$link = '/'.$parent_section.page_filename($menu_title);
 | 
  
    | 135 | 	$filename = WB_PATH.PAGES_DIRECTORY.'/'.$parent_section.page_filename($menu_title).PAGE_EXTENSION;  
 | 
  
    | 136 | }
 | 
  
    | 137 | 
 | 
  
    | 138 | // Check if a page with same page filename exists
 | 
  
    | 139 | $database = new database();
 | 
  
    | 140 | $get_same_page = $database->query("SELECT page_id,page_title FROM ".TABLE_PREFIX."pages WHERE link = '$link' and page_id != '$page_id'");
 | 
  
    | 141 | if($get_same_page->numRows() > 0) {
 | 
  
    | 142 | 	$admin->print_error($MESSAGE['PAGES']['PAGE_EXISTS']);
 | 
  
    | 143 | }
 | 
  
    | 144 | 
 | 
  
    | 145 | // Update page with new order
 | 
  
    | 146 | $query = "UPDATE ".TABLE_PREFIX."pages SET parent = '$parent', position = '$position' WHERE page_id = '$page_id'";
 | 
  
    | 147 | $database = new database();
 | 
  
    | 148 | $database->query($query);
 | 
  
    | 149 | 
 | 
  
    | 150 | // Get page trail
 | 
  
    | 151 | $page_trail = get_page_trail($page_id);
 | 
  
    | 152 | 
 | 
  
    | 153 | // Update page settings in the pages table
 | 
  
    | 154 | $query = "UPDATE ".TABLE_PREFIX."pages SET parent = '$parent', page_title = '$page_title', menu_title = '$menu_title', menu = '$menu', level = '$level', page_trail = '$page_trail', root_parent = '$root_parent', link = '$link', template = '$template', target = '$target', description = '$description', keywords = '$keywords', position = '$position', visibility = '$visibility', searching = '$searching', language = '$language', admin_groups = '$admin_groups', viewing_groups = '$viewing_groups' WHERE page_id = '$page_id'";
 | 
  
    | 155 | $database->query($query);
 | 
  
    | 156 | 
 | 
  
    | 157 | // Clean old order if needed
 | 
  
    | 158 | if($parent != $old_parent) {
 | 
  
    | 159 | 	$order->clean($old_parent);
 | 
  
    | 160 | }
 | 
  
    | 161 | 
 | 
  
    | 162 | /* BEGIN page "access file" code */
 | 
  
    | 163 | 
 | 
  
    | 164 | // Create a new file in the /pages dir if title changed
 | 
  
    | 165 | if(!is_writable(WB_PATH.PAGES_DIRECTORY.'/')) {
 | 
  
    | 166 | 	$admin->print_error($MESSAGE['PAGES']['CANNOT_CREATE_ACCESS_FILE']);
 | 
  
    | 167 | } else {
 | 
  
    | 168 | 	// First check if we need to create a new file
 | 
  
    | 169 | 	if($old_link != $link) {
 | 
  
    | 170 | 		// Delete old file
 | 
  
    | 171 | 		$old_filename = WB_PATH.PAGES_DIRECTORY.$old_link.PAGE_EXTENSION;
 | 
  
    | 172 | 		if(file_exists($old_filename)) {
 | 
  
    | 173 | 			unlink($old_filename);
 | 
  
    | 174 | 		}
 | 
  
    | 175 | 		// Create access file
 | 
  
    | 176 | 		create_access_file($filename,$page_id,$level);
 | 
  
    | 177 | 		// Move a directory for this page
 | 
  
    | 178 | 		if(file_exists(WB_PATH.PAGES_DIRECTORY.$old_link.'/') AND is_dir(WB_PATH.PAGES_DIRECTORY.$old_link.'/')) {
 | 
  
    | 179 | 			rename(WB_PATH.PAGES_DIRECTORY.$old_link.'/', WB_PATH.PAGES_DIRECTORY.$link.'/');
 | 
  
    | 180 | 		}
 | 
  
    | 181 | 		// Update any pages that had the old link with the new one
 | 
  
    | 182 | 		$old_link_len = strlen($old_link);
 | 
  
    | 183 | 		$query_subs = $database->query("SELECT page_id,link,level FROM ".TABLE_PREFIX."pages WHERE link LIKE '%$old_link/%' ORDER BY LEVEL ASC");
 | 
  
    | 184 | 		if($query_subs->numRows() > 0) {
 | 
  
    | 185 | 			while($sub = $query_subs->fetchRow()) {
 | 
  
    | 186 | 				// Double-check to see if it contains old link
 | 
  
    | 187 | 				if(substr($sub['link'], 0, $old_link_len) == $old_link) {
 | 
  
    | 188 | 					// Get new link
 | 
  
    | 189 | 					$replace_this = $old_link;
 | 
  
    | 190 | 					$old_sub_link_len =strlen($sub['link']);
 | 
  
    | 191 | 					$new_sub_link = $link.'/'.substr($sub['link'],$old_link_len+1,$old_sub_link_len);
 | 
  
    | 192 | 					// Work out level
 | 
  
    | 193 | 					$new_sub_level = level_count($sub['page_id']);
 | 
  
    | 194 | 					// Update level and link
 | 
  
    | 195 | 					$database->query("UPDATE ".TABLE_PREFIX."pages SET link = '$new_sub_link', level = '$new_sub_level' WHERE page_id = '".$sub['page_id']."' LIMIT 1");
 | 
  
    | 196 | 					// Re-write the access file for this page
 | 
  
    | 197 | 					$old_subpage_file = WB_PATH.PAGES_DIRECTORY.$new_sub_link.PAGE_EXTENSION;
 | 
  
    | 198 | 					if(file_exists($old_subpage_file)) {
 | 
  
    | 199 | 						unlink($old_subpage_file);
 | 
  
    | 200 | 					}
 | 
  
    | 201 | 					create_access_file(WB_PATH.PAGES_DIRECTORY.$new_sub_link.PAGE_EXTENSION, $sub['page_id'], $new_sub_level);
 | 
  
    | 202 | 				}
 | 
  
    | 203 | 			}
 | 
  
    | 204 | 		}
 | 
  
    | 205 | 	}
 | 
  
    | 206 | }
 | 
  
    | 207 | 
 | 
  
    | 208 | // Function to fix page trail of subs
 | 
  
    | 209 | function fix_page_trail($parent,$root_parent) {
 | 
  
    | 210 | 	// Get objects and vars from outside this function
 | 
  
    | 211 | 	global $admin, $template, $database, $TEXT, $MESSAGE;
 | 
  
    | 212 | 	// Get page list from database
 | 
  
    | 213 | 	$database = new database();
 | 
  
    | 214 | 	$query = "SELECT page_id FROM ".TABLE_PREFIX."pages WHERE parent = '$parent'";
 | 
  
    | 215 | 	$get_pages = $database->query($query);
 | 
  
    | 216 | 	// Insert values into main page list
 | 
  
    | 217 | 	if($get_pages->numRows() > 0)	{
 | 
  
    | 218 | 		while($page = $get_pages->fetchRow()) {
 | 
  
    | 219 | 			// Fix page trail
 | 
  
    | 220 | 			$database->query("UPDATE ".TABLE_PREFIX."pages SET ".($root_parent != 0 ?"root_parent = '$root_parent', ":"")." page_trail = '".get_page_trail($page['page_id'])."' WHERE page_id = '".$page['page_id']."'");
 | 
  
    | 221 | 			// Run this query on subs
 | 
  
    | 222 | 			fix_page_trail($page['page_id'],$root_parent);
 | 
  
    | 223 | 		}
 | 
  
    | 224 | 	}
 | 
  
    | 225 | }
 | 
  
    | 226 | // Fix sub-pages page trail
 | 
  
    | 227 | fix_page_trail($page_id,$root_parent);
 | 
  
    | 228 | 
 | 
  
    | 229 | /* END page "access file" code */
 | 
  
    | 230 | 
 | 
  
    | 231 | // Check if there is a db error, otherwise say successful
 | 
  
    | 232 | if($database->is_error()) {
 | 
  
    | 233 | 	$admin->print_error($database->get_error(), ADMIN_URL.'/pages/settings.php?page_id='.$page_id);
 | 
  
    | 234 | } else {
 | 
  
    | 235 | 	$admin->print_success($MESSAGE['PAGES']['SAVED_SETTINGS'], ADMIN_URL.'/pages/index.php');
 | 
  
    | 236 | }
 | 
  
    | 237 | 
 | 
  
    | 238 | // Print admin footer
 | 
  
    | 239 | $admin->print_footer();
 | 
  
    | 240 | 
 | 
  
    | 241 | ?>
 |