| 1 | <?php
 | 
  
    | 2 | 
 | 
  
    | 3 | // $Id: add.php 657 2008-02-02 01:00:55Z thorn $
 | 
  
    | 4 | 
 | 
  
    | 5 | /*
 | 
  
    | 6 | 
 | 
  
    | 7 |  Website Baker Project <http://www.websitebaker.org/>
 | 
  
    | 8 |  Copyright (C) 2004-2008, Ryan Djurovich
 | 
  
    | 9 | 
 | 
  
    | 10 |  Website Baker is free software; you can redistribute it and/or modify
 | 
  
    | 11 |  it under the terms of the GNU General Public License as published by
 | 
  
    | 12 |  the Free Software Foundation; either version 2 of the License, or
 | 
  
    | 13 |  (at your option) any later version.
 | 
  
    | 14 | 
 | 
  
    | 15 |  Website Baker is distributed in the hope that it will be useful,
 | 
  
    | 16 |  but WITHOUT ANY WARRANTY; without even the implied warranty of
 | 
  
    | 17 |  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | 
  
    | 18 |  GNU General Public License for more details.
 | 
  
    | 19 | 
 | 
  
    | 20 |  You should have received a copy of the GNU General Public License
 | 
  
    | 21 |  along with Website Baker; if not, write to the Free Software
 | 
  
    | 22 |  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 | 
  
    | 23 | 
 | 
  
    | 24 | */
 | 
  
    | 25 | 
 | 
  
    | 26 | // Create new admin object and print admin header
 | 
  
    | 27 | require('../../config.php');
 | 
  
    | 28 | require_once(WB_PATH.'/framework/class.admin.php');
 | 
  
    | 29 | $admin = new admin('Pages', 'pages_add');
 | 
  
    | 30 | 
 | 
  
    | 31 | // Include the WB functions file
 | 
  
    | 32 | require_once(WB_PATH.'/framework/functions.php');
 | 
  
    | 33 | 
 | 
  
    | 34 | // Get values
 | 
  
    | 35 | $title = $admin->get_post_escaped('title');
 | 
  
    | 36 | $title = htmlspecialchars($title);
 | 
  
    | 37 | $module = $admin->get_post('type');
 | 
  
    | 38 | $parent = $admin->get_post('parent');
 | 
  
    | 39 | $visibility = $admin->get_post('visibility');
 | 
  
    | 40 | $admin_groups = $admin->get_post('admin_groups');
 | 
  
    | 41 | $viewing_groups = $admin->get_post('viewing_groups');
 | 
  
    | 42 | 
 | 
  
    | 43 | if ($parent!=0) {
 | 
  
    | 44 | 	if (!$admin->get_page_permission($parent,'admin'))
 | 
  
    | 45 | 		$admin->print_error($MESSAGE['PAGES']['INSUFFICIENT_PERMISSIONS']);
 | 
  
    | 46 | } elseif (!$admin->get_permission('pages_add_l0','system')) {
 | 
  
    | 47 | 	$admin->print_error($MESSAGE['PAGES']['INSUFFICIENT_PERMISSIONS']);
 | 
  
    | 48 | }	
 | 
  
    | 49 | 
 | 
  
    | 50 | // Validate data
 | 
  
    | 51 | if($title == '' || substr($title,0,1)=='.') {
 | 
  
    | 52 | 	$admin->print_error($MESSAGE['PAGES']['BLANK_PAGE_TITLE']);
 | 
  
    | 53 | }
 | 
  
    | 54 | 
 | 
  
    | 55 | // Setup admin groups
 | 
  
    | 56 | $admin_groups[] = 1;
 | 
  
    | 57 | if(!in_array(1, $admin->get_groups_id())) {
 | 
  
    | 58 | 	$admin_groups[] = implode(",",$admin->get_groups_id());
 | 
  
    | 59 | }
 | 
  
    | 60 | $admin_groups = implode(',', $admin_groups);
 | 
  
    | 61 | // Setup viewing groups
 | 
  
    | 62 | $viewing_groups[] = 1;
 | 
  
    | 63 | if(!in_array(1, $admin->get_groups_id())) {
 | 
  
    | 64 | 	$viewing_groups[] = implode(",",$admin->get_groups_id());
 | 
  
    | 65 | }
 | 
  
    | 66 | $viewing_groups = implode(',', $viewing_groups);
 | 
  
    | 67 | 
 | 
  
    | 68 | // Work-out what the link and page filename should be
 | 
  
    | 69 | if($parent == '0') {
 | 
  
    | 70 | 	$link = '/'.page_filename($title);
 | 
  
    | 71 | 	$filename = WB_PATH.PAGES_DIRECTORY.'/'.page_filename($title).PAGE_EXTENSION;
 | 
  
    | 72 | } else {
 | 
  
    | 73 | 	$parent_section = '';
 | 
  
    | 74 | 	$parent_titles = array_reverse(get_parent_titles($parent));
 | 
  
    | 75 | 	foreach($parent_titles AS $parent_title) {
 | 
  
    | 76 | 		$parent_section .= page_filename($parent_title).'/';
 | 
  
    | 77 | 	}
 | 
  
    | 78 | 	if($parent_section == '/') { $parent_section = ''; }
 | 
  
    | 79 | 	$link = '/'.$parent_section.page_filename($title);
 | 
  
    | 80 | 	$filename = WB_PATH.PAGES_DIRECTORY.'/'.$parent_section.page_filename($title).PAGE_EXTENSION;
 | 
  
    | 81 | 	make_dir(WB_PATH.PAGES_DIRECTORY.'/'.$parent_section);
 | 
  
    | 82 | }
 | 
  
    | 83 | 
 | 
  
    | 84 | // Check if a page with same page filename exists
 | 
  
    | 85 | $get_same_page = $database->query("SELECT page_id FROM ".TABLE_PREFIX."pages WHERE link = '$link'");
 | 
  
    | 86 | if($get_same_page->numRows() > 0 OR file_exists(WB_PATH.PAGES_DIRECTORY.$link.PAGE_EXTENSION) OR file_exists(WB_PATH.PAGES_DIRECTORY.$link.'/')) {
 | 
  
    | 87 | 	$admin->print_error($MESSAGE['PAGES']['PAGE_EXISTS']);
 | 
  
    | 88 | }
 | 
  
    | 89 | 
 | 
  
    | 90 | // Include the ordering class
 | 
  
    | 91 | require(WB_PATH.'/framework/class.order.php');
 | 
  
    | 92 | $order = new order(TABLE_PREFIX.'pages', 'position', 'page_id', 'parent');
 | 
  
    | 93 | // First clean order
 | 
  
    | 94 | $order->clean($parent);
 | 
  
    | 95 | // Get new order
 | 
  
    | 96 | $position = $order->get_new($parent);
 | 
  
    | 97 | 
 | 
  
    | 98 | // Work-out if the page parent (if selected) has a seperate template to the default
 | 
  
    | 99 | $query_parent = $database->query("SELECT template FROM ".TABLE_PREFIX."pages WHERE page_id = '$parent'");
 | 
  
    | 100 | if($query_parent->numRows() > 0) {
 | 
  
    | 101 | 	$fetch_parent = $query_parent->fetchRow();
 | 
  
    | 102 | 	$template = $fetch_parent['template'];
 | 
  
    | 103 | } else {
 | 
  
    | 104 | 	$template = '';
 | 
  
    | 105 | }
 | 
  
    | 106 | 
 | 
  
    | 107 | // Insert page into pages table
 | 
  
    | 108 | $query = "INSERT INTO ".TABLE_PREFIX."pages (page_title,menu_title,parent,template,target,position,visibility,searching,menu,language,admin_groups,viewing_groups,modified_when,modified_by) VALUES ('$title','$title','$parent','$template','_top','$position','$visibility','1','1','".DEFAULT_LANGUAGE."','$admin_groups','$viewing_groups','".mktime()."','".$admin->get_user_id()."')";
 | 
  
    | 109 | $database->query($query);
 | 
  
    | 110 | if($database->is_error()) {
 | 
  
    | 111 | 	$admin->print_error($database->get_error());
 | 
  
    | 112 | }
 | 
  
    | 113 | 
 | 
  
    | 114 | // Get the page id
 | 
  
    | 115 | $page_id = $database->get_one("SELECT LAST_INSERT_ID()");
 | 
  
    | 116 | 
 | 
  
    | 117 | // Work out level
 | 
  
    | 118 | $level = level_count($page_id);
 | 
  
    | 119 | // Work out root parent
 | 
  
    | 120 | $root_parent = root_parent($page_id);
 | 
  
    | 121 | // Work out page trail
 | 
  
    | 122 | $page_trail = get_page_trail($page_id);
 | 
  
    | 123 | 
 | 
  
    | 124 | // Update page with new level and link
 | 
  
    | 125 | $database->query("UPDATE ".TABLE_PREFIX."pages SET link = '$link', level = '$level', root_parent = '$root_parent', page_trail = '$page_trail' WHERE page_id = '$page_id'");
 | 
  
    | 126 | 
 | 
  
    | 127 | // Create a new file in the /pages dir
 | 
  
    | 128 | create_access_file($filename, $page_id, $level);
 | 
  
    | 129 | 
 | 
  
    | 130 | // Get new order for section
 | 
  
    | 131 | $order = new order(TABLE_PREFIX.'sections', 'position', 'section_id', 'page_id');
 | 
  
    | 132 | $position = $order->get_new($parent);
 | 
  
    | 133 | 
 | 
  
    | 134 | // Add new record into the sections table
 | 
  
    | 135 | $database->query("INSERT INTO ".TABLE_PREFIX."sections (page_id,position,module,block) VALUES ('$page_id','$position', '$module','1')");
 | 
  
    | 136 | 
 | 
  
    | 137 | // Get the section id
 | 
  
    | 138 | $section_id = $database->get_one("SELECT LAST_INSERT_ID()");
 | 
  
    | 139 | 
 | 
  
    | 140 | // Include the selected modules add file if it exists
 | 
  
    | 141 | if(file_exists(WB_PATH.'/modules/'.$module.'/add.php')) {
 | 
  
    | 142 | 	require(WB_PATH.'/modules/'.$module.'/add.php');
 | 
  
    | 143 | }
 | 
  
    | 144 | 
 | 
  
    | 145 | // Check if there is a db error, otherwise say successful
 | 
  
    | 146 | if($database->is_error()) {
 | 
  
    | 147 | 	$admin->print_error($database->get_error());
 | 
  
    | 148 | } else {
 | 
  
    | 149 | 	$admin->print_success($MESSAGE['PAGES']['ADDED'], ADMIN_URL.'/pages/modify.php?page_id='.$page_id);
 | 
  
    | 150 | }
 | 
  
    | 151 | 
 | 
  
    | 152 | // Print admin footer
 | 
  
    | 153 | $admin->print_footer();
 | 
  
    | 154 | 
 | 
  
    | 155 | ?>
 |