| 1 | 4 | ryan | <?php
 | 
      
        | 2 |  |  | 
 | 
      
        | 3 | 40 | stefan | // $Id$
 | 
      
        | 4 | 4 | ryan | 
 | 
      
        | 5 |  |  | /*
 | 
      
        | 6 |  |  | 
 | 
      
        | 7 |  |  |  Website Baker Project <http://www.websitebaker.org/>
 | 
      
        | 8 | 519 | Ruebenwurz |  Copyright (C) 2004-2008, Ryan Djurovich
 | 
      
        | 9 | 4 | ryan | 
 | 
      
        | 10 |  |  |  Website Baker is free software; you can redistribute it and/or modify
 | 
      
        | 11 |  |  |  it under the terms of the GNU General Public License as published by
 | 
      
        | 12 |  |  |  the Free Software Foundation; either version 2 of the License, or
 | 
      
        | 13 |  |  |  (at your option) any later version.
 | 
      
        | 14 |  |  | 
 | 
      
        | 15 |  |  |  Website Baker is distributed in the hope that it will be useful,
 | 
      
        | 16 |  |  |  but WITHOUT ANY WARRANTY; without even the implied warranty of
 | 
      
        | 17 |  |  |  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | 
      
        | 18 |  |  |  GNU General Public License for more details.
 | 
      
        | 19 |  |  | 
 | 
      
        | 20 |  |  |  You should have received a copy of the GNU General Public License
 | 
      
        | 21 |  |  |  along with Website Baker; if not, write to the Free Software
 | 
      
        | 22 |  |  |  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 | 
      
        | 23 |  |  | 
 | 
      
        | 24 |  |  | */
 | 
      
        | 25 |  |  | 
 | 
      
        | 26 |  |  | // Get page id
 | 
      
        | 27 |  |  | if(!isset($_POST['page_id']) OR !is_numeric($_POST['page_id'])) {
 | 
      
        | 28 |  |  | 	header("Location: index.php");
 | 
      
        | 29 | 286 | stefan | 	exit(0);
 | 
      
        | 30 | 4 | ryan | } else {
 | 
      
        | 31 |  |  | 	$page_id = $_POST['page_id'];
 | 
      
        | 32 |  |  | }
 | 
      
        | 33 |  |  | 
 | 
      
        | 34 |  |  | // Create new admin object and print admin header
 | 
      
        | 35 |  |  | require('../../config.php');
 | 
      
        | 36 |  |  | require_once(WB_PATH.'/framework/class.admin.php');
 | 
      
        | 37 |  |  | $admin = new admin('Pages', 'pages_settings');
 | 
      
        | 38 |  |  | 
 | 
      
        | 39 |  |  | // Include the WB functions file
 | 
      
        | 40 |  |  | require_once(WB_PATH.'/framework/functions.php');
 | 
      
        | 41 |  |  | 
 | 
      
        | 42 |  |  | // Get values
 | 
      
        | 43 | 488 | Ruebenwurz | $page_title = $admin->get_post_escaped('page_title');
 | 
      
        | 44 | 656 | thorn | $page_title = htmlspecialchars($page_title);
 | 
      
        | 45 | 488 | Ruebenwurz | $menu_title = $admin->get_post_escaped('menu_title');
 | 
      
        | 46 | 656 | thorn | $menu_title = htmlspecialchars($menu_title);
 | 
      
        | 47 |  |  | $description = htmlspecialchars($admin->add_slashes($admin->get_post('description')));
 | 
      
        | 48 |  |  | $keywords = htmlspecialchars($admin->add_slashes($admin->get_post('keywords')));
 | 
      
        | 49 |  |  | $parent = $admin->get_post_escaped('parent');
 | 
      
        | 50 |  |  | $visibility = $admin->get_post_escaped('visibility');
 | 
      
        | 51 |  |  | $template = $admin->get_post_escaped('template');
 | 
      
        | 52 |  |  | $target = $admin->get_post_escaped('target');
 | 
      
        | 53 |  |  | $admin_groups = $admin->get_post_escaped('admin_groups');
 | 
      
        | 54 |  |  | $viewing_groups = $admin->get_post_escaped('viewing_groups');
 | 
      
        | 55 |  |  | $searching = $admin->get_post_escaped('searching');
 | 
      
        | 56 |  |  | $language = $admin->get_post_escaped('language');
 | 
      
        | 57 |  |  | $menu = $admin->get_post_escaped('menu');
 | 
      
        | 58 | 4 | ryan | 
 | 
      
        | 59 |  |  | // Validate data
 | 
      
        | 60 | 430 | Ruebenwurz | if($page_title == '' || substr($page_title,0,1)=='.') {
 | 
      
        | 61 | 4 | ryan | 	$admin->print_error($MESSAGE['PAGES']['BLANK_PAGE_TITLE']);
 | 
      
        | 62 |  |  | }
 | 
      
        | 63 | 428 | Ruebenwurz | if($menu_title == '' || substr($menu_title,0,1)=='.') {
 | 
      
        | 64 | 4 | ryan | 	$admin->print_error($MESSAGE['PAGES']['BLANK_MENU_TITLE']);
 | 
      
        | 65 |  |  | }
 | 
      
        | 66 |  |  | 
 | 
      
        | 67 |  |  | // Get existing perms
 | 
      
        | 68 |  |  | $database = new database();
 | 
      
        | 69 |  |  | $results = $database->query("SELECT parent,link,position,admin_groups,admin_users FROM ".TABLE_PREFIX."pages WHERE page_id = '$page_id'");
 | 
      
        | 70 |  |  | $results_array = $results->fetchRow();
 | 
      
        | 71 |  |  | $old_parent = $results_array['parent'];
 | 
      
        | 72 |  |  | $old_link = $results_array['link'];
 | 
      
        | 73 |  |  | $old_position = $results_array['position'];
 | 
      
        | 74 |  |  | $old_admin_groups = explode(',', str_replace('_', '', $results_array['admin_groups']));
 | 
      
        | 75 |  |  | $old_admin_users = explode(',', str_replace('_', '', $results_array['admin_users']));
 | 
      
        | 76 | 546 | doc | 
 | 
      
        | 77 |  |  | $in_old_group = FALSE;
 | 
      
        | 78 |  |  | foreach($admin->get_groups_id() as $cur_gid){
 | 
      
        | 79 |  |  |     if (in_array($cur_gid, $old_admin_groups)) {
 | 
      
        | 80 |  |  | 	$in_old_group = TRUE;
 | 
      
        | 81 |  |  |     }
 | 
      
        | 82 |  |  | }
 | 
      
        | 83 |  |  | if((!$in_old_group) AND !is_numeric(array_search($admin->get_user_id(), $old_admin_users))) {
 | 
      
        | 84 | 4 | ryan | 	$admin->print_error($MESSAGE['PAGES']['INSUFFICIENT_PERMISSIONS']);
 | 
      
        | 85 |  |  | }
 | 
      
        | 86 |  |  | 
 | 
      
        | 87 |  |  | // Setup admin groups
 | 
      
        | 88 |  |  | $admin_groups[] = 1;
 | 
      
        | 89 | 546 | doc | if(!in_array(1, $admin->get_groups_id())) {
 | 
      
        | 90 |  |  | 	$admin_groups[] = implode(",",$admin->get_groups_id());
 | 
      
        | 91 | 4 | ryan | }
 | 
      
        | 92 |  |  | $admin_groups = implode(',', $admin_groups);
 | 
      
        | 93 |  |  | // Setup viewing groups
 | 
      
        | 94 |  |  | $viewing_groups[] = 1;
 | 
      
        | 95 | 546 | doc | if(!in_array(1, $admin->get_groups_id())) {
 | 
      
        | 96 |  |  | 	$viewing_groups[] = implode(",",$admin->get_groups_id());
 | 
      
        | 97 | 4 | ryan | }
 | 
      
        | 98 |  |  | $viewing_groups = implode(',', $viewing_groups);
 | 
      
        | 99 |  |  | 
 | 
      
        | 100 |  |  | // If needed, get new order
 | 
      
        | 101 |  |  | if($parent != $old_parent) {
 | 
      
        | 102 |  |  | 	// Include ordering class
 | 
      
        | 103 |  |  | 	require(WB_PATH.'/framework/class.order.php');
 | 
      
        | 104 |  |  | 	$order = new order(TABLE_PREFIX.'pages', 'position', 'page_id', 'parent');
 | 
      
        | 105 |  |  | 	// Get new order
 | 
      
        | 106 |  |  | 	$position = $order->get_new($parent);
 | 
      
        | 107 |  |  | 	// Clean new order
 | 
      
        | 108 |  |  | 	$order->clean($parent);
 | 
      
        | 109 |  |  | } else {
 | 
      
        | 110 |  |  | 	$position = $old_position;
 | 
      
        | 111 |  |  | }
 | 
      
        | 112 |  |  | 
 | 
      
        | 113 |  |  | // Work out level and root parent
 | 
      
        | 114 |  |  | if ($parent!='0') {
 | 
      
        | 115 |  |  | 	$level = level_count($parent)+1;
 | 
      
        | 116 |  |  | 	$root_parent = root_parent($parent);
 | 
      
        | 117 |  |  | }
 | 
      
        | 118 |  |  | else {
 | 
      
        | 119 |  |  | 	$level = '0';
 | 
      
        | 120 |  |  | 	$root_parent = '0';
 | 
      
        | 121 |  |  | }
 | 
      
        | 122 |  |  | 
 | 
      
        | 123 |  |  | // Work-out what the link should be
 | 
      
        | 124 |  |  | if($parent == '0') {
 | 
      
        | 125 | 627 | doc | 	$link = '/'.page_filename($page_title);
 | 
      
        | 126 |  |  | 	$filename = WB_PATH.PAGES_DIRECTORY.'/'.page_filename($page_title).PAGE_EXTENSION;
 | 
      
        | 127 | 4 | ryan | } else {
 | 
      
        | 128 |  |  | 	$parent_section = '';
 | 
      
        | 129 |  |  | 	$parent_titles = array_reverse(get_parent_titles($parent));
 | 
      
        | 130 |  |  | 	foreach($parent_titles AS $parent_title) {
 | 
      
        | 131 |  |  | 		$parent_section .= page_filename($parent_title).'/';
 | 
      
        | 132 |  |  | 	}
 | 
      
        | 133 |  |  | 	if($parent_section == '/') { $parent_section = ''; }
 | 
      
        | 134 | 627 | doc | 	$link = '/'.$parent_section.page_filename($page_title);
 | 
      
        | 135 |  |  | 	$filename = WB_PATH.PAGES_DIRECTORY.'/'.$parent_section.page_filename($page_title).PAGE_EXTENSION;
 | 
      
        | 136 | 4 | ryan | }
 | 
      
        | 137 |  |  | 
 | 
      
        | 138 |  |  | // Check if a page with same page filename exists
 | 
      
        | 139 |  |  | $database = new database();
 | 
      
        | 140 |  |  | $get_same_page = $database->query("SELECT page_id,page_title FROM ".TABLE_PREFIX."pages WHERE link = '$link' and page_id != '$page_id'");
 | 
      
        | 141 |  |  | if($get_same_page->numRows() > 0) {
 | 
      
        | 142 |  |  | 	$admin->print_error($MESSAGE['PAGES']['PAGE_EXISTS']);
 | 
      
        | 143 |  |  | }
 | 
      
        | 144 |  |  | 
 | 
      
        | 145 |  |  | // Update page with new order
 | 
      
        | 146 |  |  | $query = "UPDATE ".TABLE_PREFIX."pages SET parent = '$parent', position = '$position' WHERE page_id = '$page_id'";
 | 
      
        | 147 |  |  | $database = new database();
 | 
      
        | 148 |  |  | $database->query($query);
 | 
      
        | 149 |  |  | 
 | 
      
        | 150 |  |  | // Get page trail
 | 
      
        | 151 |  |  | $page_trail = get_page_trail($page_id);
 | 
      
        | 152 |  |  | 
 | 
      
        | 153 |  |  | // Update page settings in the pages table
 | 
      
        | 154 |  |  | $query = "UPDATE ".TABLE_PREFIX."pages SET parent = '$parent', page_title = '$page_title', menu_title = '$menu_title', menu = '$menu', level = '$level', page_trail = '$page_trail', root_parent = '$root_parent', link = '$link', template = '$template', target = '$target', description = '$description', keywords = '$keywords', position = '$position', visibility = '$visibility', searching = '$searching', language = '$language', admin_groups = '$admin_groups', viewing_groups = '$viewing_groups' WHERE page_id = '$page_id'";
 | 
      
        | 155 |  |  | $database->query($query);
 | 
      
        | 156 |  |  | 
 | 
      
        | 157 |  |  | // Clean old order if needed
 | 
      
        | 158 |  |  | if($parent != $old_parent) {
 | 
      
        | 159 |  |  | 	$order->clean($old_parent);
 | 
      
        | 160 |  |  | }
 | 
      
        | 161 |  |  | 
 | 
      
        | 162 |  |  | /* BEGIN page "access file" code */
 | 
      
        | 163 |  |  | 
 | 
      
        | 164 |  |  | // Create a new file in the /pages dir if title changed
 | 
      
        | 165 |  |  | if(!is_writable(WB_PATH.PAGES_DIRECTORY.'/')) {
 | 
      
        | 166 |  |  | 	$admin->print_error($MESSAGE['PAGES']['CANNOT_CREATE_ACCESS_FILE']);
 | 
      
        | 167 |  |  | } else {
 | 
      
        | 168 |  |  | 	// First check if we need to create a new file
 | 
      
        | 169 |  |  | 	if($old_link != $link) {
 | 
      
        | 170 |  |  | 		// Delete old file
 | 
      
        | 171 | 555 | Ruebenwurz | 		$old_filename = WB_PATH.PAGES_DIRECTORY.$old_link.PAGE_EXTENSION;
 | 
      
        | 172 | 497 | ryan | 		if(file_exists($old_filename)) {
 | 
      
        | 173 |  |  | 			unlink($old_filename);
 | 
      
        | 174 |  |  | 		}
 | 
      
        | 175 | 4 | ryan | 		// Create access file
 | 
      
        | 176 |  |  | 		create_access_file($filename,$page_id,$level);
 | 
      
        | 177 |  |  | 		// Move a directory for this page
 | 
      
        | 178 |  |  | 		if(file_exists(WB_PATH.PAGES_DIRECTORY.$old_link.'/') AND is_dir(WB_PATH.PAGES_DIRECTORY.$old_link.'/')) {
 | 
      
        | 179 |  |  | 			rename(WB_PATH.PAGES_DIRECTORY.$old_link.'/', WB_PATH.PAGES_DIRECTORY.$link.'/');
 | 
      
        | 180 |  |  | 		}
 | 
      
        | 181 |  |  | 		// Update any pages that had the old link with the new one
 | 
      
        | 182 |  |  | 		$old_link_len = strlen($old_link);
 | 
      
        | 183 | 54 | stefan | 		$query_subs = $database->query("SELECT page_id,link,level FROM ".TABLE_PREFIX."pages WHERE link LIKE '%$old_link/%' ORDER BY LEVEL ASC");
 | 
      
        | 184 | 4 | ryan | 		if($query_subs->numRows() > 0) {
 | 
      
        | 185 |  |  | 			while($sub = $query_subs->fetchRow()) {
 | 
      
        | 186 |  |  | 				// Double-check to see if it contains old link
 | 
      
        | 187 |  |  | 				if(substr($sub['link'], 0, $old_link_len) == $old_link) {
 | 
      
        | 188 |  |  | 					// Get new link
 | 
      
        | 189 |  |  | 					$replace_this = $old_link;
 | 
      
        | 190 | 54 | stefan | 					$old_sub_link_len =strlen($sub['link']);
 | 
      
        | 191 |  |  | 					$new_sub_link = $link.'/'.substr($sub['link'],$old_link_len+1,$old_sub_link_len);
 | 
      
        | 192 | 4 | ryan | 					// Work out level
 | 
      
        | 193 |  |  | 					$new_sub_level = level_count($sub['page_id']);
 | 
      
        | 194 | 54 | stefan | 					// Update level and link
 | 
      
        | 195 |  |  | 					$database->query("UPDATE ".TABLE_PREFIX."pages SET link = '$new_sub_link', level = '$new_sub_level' WHERE page_id = '".$sub['page_id']."' LIMIT 1");
 | 
      
        | 196 | 4 | ryan | 					// Re-write the access file for this page
 | 
      
        | 197 | 555 | Ruebenwurz | 					$old_subpage_file = WB_PATH.PAGES_DIRECTORY.$new_sub_link.PAGE_EXTENSION;
 | 
      
        | 198 | 4 | ryan | 					if(file_exists($old_subpage_file)) {
 | 
      
        | 199 |  |  | 						unlink($old_subpage_file);
 | 
      
        | 200 |  |  | 					}
 | 
      
        | 201 | 555 | Ruebenwurz | 					create_access_file(WB_PATH.PAGES_DIRECTORY.$new_sub_link.PAGE_EXTENSION, $sub['page_id'], $new_sub_level);
 | 
      
        | 202 | 4 | ryan | 				}
 | 
      
        | 203 |  |  | 			}
 | 
      
        | 204 |  |  | 		}
 | 
      
        | 205 |  |  | 	}
 | 
      
        | 206 |  |  | }
 | 
      
        | 207 |  |  | 
 | 
      
        | 208 |  |  | // Function to fix page trail of subs
 | 
      
        | 209 | 447 | Ruebenwurz | function fix_page_trail($parent,$root_parent) {
 | 
      
        | 210 | 4 | ryan | 	// Get objects and vars from outside this function
 | 
      
        | 211 |  |  | 	global $admin, $template, $database, $TEXT, $MESSAGE;
 | 
      
        | 212 |  |  | 	// Get page list from database
 | 
      
        | 213 |  |  | 	$database = new database();
 | 
      
        | 214 |  |  | 	$query = "SELECT page_id FROM ".TABLE_PREFIX."pages WHERE parent = '$parent'";
 | 
      
        | 215 |  |  | 	$get_pages = $database->query($query);
 | 
      
        | 216 |  |  | 	// Insert values into main page list
 | 
      
        | 217 |  |  | 	if($get_pages->numRows() > 0)	{
 | 
      
        | 218 |  |  | 		while($page = $get_pages->fetchRow()) {
 | 
      
        | 219 |  |  | 			// Fix page trail
 | 
      
        | 220 | 447 | Ruebenwurz | 			$database->query("UPDATE ".TABLE_PREFIX."pages SET ".($root_parent != 0 ?"root_parent = '$root_parent', ":"")." page_trail = '".get_page_trail($page['page_id'])."' WHERE page_id = '".$page['page_id']."'");
 | 
      
        | 221 | 4 | ryan | 			// Run this query on subs
 | 
      
        | 222 | 447 | Ruebenwurz | 			fix_page_trail($page['page_id'],$root_parent);
 | 
      
        | 223 | 4 | ryan | 		}
 | 
      
        | 224 |  |  | 	}
 | 
      
        | 225 |  |  | }
 | 
      
        | 226 |  |  | // Fix sub-pages page trail
 | 
      
        | 227 | 447 | Ruebenwurz | fix_page_trail($page_id,$root_parent);
 | 
      
        | 228 | 4 | ryan | 
 | 
      
        | 229 |  |  | /* END page "access file" code */
 | 
      
        | 230 |  |  | 
 | 
      
        | 231 |  |  | // Check if there is a db error, otherwise say successful
 | 
      
        | 232 |  |  | if($database->is_error()) {
 | 
      
        | 233 |  |  | 	$admin->print_error($database->get_error(), ADMIN_URL.'/pages/settings.php?page_id='.$page_id);
 | 
      
        | 234 |  |  | } else {
 | 
      
        | 235 |  |  | 	$admin->print_success($MESSAGE['PAGES']['SAVED_SETTINGS'], ADMIN_URL.'/pages/index.php');
 | 
      
        | 236 |  |  | }
 | 
      
        | 237 |  |  | 
 | 
      
        | 238 |  |  | // Print admin footer
 | 
      
        | 239 |  |  | $admin->print_footer();
 | 
      
        | 240 |  |  | 
 | 
      
        | 241 | 543 | thorn | ?>
 |