WB 2.08.x

<?php

// $Id: sections_save.php,v 1.6 2005/04/08 07:36:58 rdjurovich Exp $

/*

 Website Baker Project <http://www.websitebaker.org/>

 Copyright (C) 2004-2005, Ryan Djurovich

 Website Baker is free software; you can redistribute it and/or modify

 it under the terms of the GNU General Public License as published by

 the Free Software Foundation; either version 2 of the License, or

 (at your option) any later version.

 Website Baker is distributed in the hope that it will be useful,

 but WITHOUT ANY WARRANTY; without even the implied warranty of

 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

 GNU General Public License for more details.

 You should have received a copy of the GNU General Public License

 along with Website Baker; if not, write to the Free Software

 Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA

*/

// Include config file

require('../../config.php');

// Make sure people are allowed to access this page

if(MANAGE_SECTIONS != 'enabled') {

	header('Location: '.ADMIN_URL.'/pages/index.php');

}

// Get page id

if(!isset($_GET['page_id']) OR !is_numeric($_GET['page_id'])) {

	header("Location: index.php");

} else {

	$page_id = $_GET['page_id'];

}

// Create new admin object

require_once(WB_PATH.'/framework/class.admin.php');

$admin = new admin('Pages', 'pages_modify');

// Get perms

$database = new database();

$results = $database->query("SELECT admin_groups,admin_users FROM ".TABLE_PREFIX."pages WHERE page_id = '$page_id'");

$results_array = $results->fetchRow();

$old_admin_groups = explode(',', $results_array['admin_groups']);

$old_admin_users = explode(',', $results_array['admin_users']);

if(!is_numeric(array_search($admin->get_group_id(), $old_admin_groups)) AND !is_numeric(array_search($admin->get_user_id(), $old_admin_users))) {

	$admin->print_error($MESSAGE['PAGES']['INSUFFICIENT_PERMISSIONS']);

}

// Get page details

$database = new database();

$query = "SELECT * FROM ".TABLE_PREFIX."pages WHERE page_id = '$page_id'";

$results = $database->query($query);

if($database->is_error()) {

	$admin->print_header();

	$admin->print_error($database->get_error());

}

if($results->numRows() == 0) {

	$admin->print_header();

	$admin->print_error($MESSAGE['PAGES']['NOT_FOUND']);

}

$results_array = $results->fetchRow();

// Set module permissions

$module_permissions = $_SESSION['MODULE_PERMISSIONS'];

// Loop through sections

$query_sections = $database->query("SELECT section_id,module,position FROM ".TABLE_PREFIX."sections WHERE page_id = '$page_id' ORDER BY position ASC");

if($query_sections->numRows() > 0) {

	$num_sections = $query_sections->numRows();

	while($section = $query_sections->fetchRow()) {

		// Get the modules real name

		$module_path = WB_PATH.'/modules/'.$section['module'].'/info.php';

		if(file_exists($module_path)) {

			require($module_path);

			if(!isset($module_type)) { $module_type = 'unknown'; }

			if(!is_numeric(array_search($section['module'], $module_permissions)) AND $module_type == 'page') {

				// Update the section record with properties

				$section_id = $section['section_id'];

				$sql = '';

				if(isset($_POST['block'.$section_id]) AND $_POST['block'.$section_id] != '') {

					$sql = "block = '".addslashes($_POST['block'.$section_id])."'";

					$query = "UPDATE ".TABLE_PREFIX."sections SET $sql WHERE section_id = '$section_id' LIMIT 1";

					if($sql != '') {

						$database->query($query);

					}

				}

			}

			if(isset($module_type)) { unset($module_type); } // Unset module type

		}

	}

}

// Check for error or print success message

if($database->is_error()) {

	$admin->print_error($database->get_error(), ADMIN_URL.'/pages/sections.php?page_id='.$page_id);

} else {

	$admin->print_success($MESSAGE['PAGES']['SECTIONS_PROPERTIES_SAVED'], ADMIN_URL.'/pages/sections.php?page_id='.$page_id);

}

// Print admin footer

$admin->print_footer();

?>