<?php

include("admin-load.php"); // Load config

// Load post

if(isset($_GET['post'])) // Post is set?
{
    if(is_numeric($_GET['post'])) // Post is numeric?
    {
        if(defined("USER_LEVEL_ADMINISTRATOR") OR defined("USER_LEVEL_EDITOR")) // Is this an administrator?
        {
            $Post = $DB->query_fetchDB("
                SELECT post_title, post_content, post_status, post_comment_status
                FROM ot_posts
                WHERE id = '" . $_GET['post'] . "' &&
                      post_type = 'post' &&
                      (post_status != 'privé' OR post_author = " . USER_ID . ")
                ORDER BY id DESC
                LIMIT 1
            ");
        }
        elseif(defined("USER_LEVEL_AUTHOR")) // No, it's the writer himself
        {
            $Post = $DB->query_fetchDB("
                SELECT post_title, post_content, post_status, post_comment_status
                FROM ot_posts
                WHERE id = '" . $_GET['post'] . "' &&
                      post_author = '" . USER_ID . "' &&
                      post_type = 'post'
                ORDER BY id DESC
                LIMIT 1
            ");
        }

        if($Post) // Post exists?
        {
            $CategoriesSelected = $DB->query_fetchDB("
                SELECT id, category_id
                FROM ot_post2category
                WHERE post_id = '" . $_GET['post'] . "'
                ORDER BY id DESC
            "); // Fetch categories where post is in

            // We'll check to save the post

            if($_SERVER['REQUEST_METHOD'] == "POST") // New post?
            {
                if( ! empty($_POST['post_status']) && ! empty($_POST['post_comment_status']) && isset($_POST['post_title']) && isset($_POST['post_content'])) // Required fields are set?
                {
                    // Generating a user-friendly URL

                	$_POST['post_url'] = strip_tags($_POST['post_title']);
                	$_POST['post_url'] = preg_replace('|%([a-fA-F0-9][a-fA-F0-9])|', '---$1---', $_POST['post_url']);
                	$_POST['post_url'] = str_replace('%', '', $_POST['post_url']);
                	$_POST['post_url'] = preg_replace('|---([a-fA-F0-9][a-fA-F0-9])---|', '%$1', $_POST['post_url']);
                	$_POST['post_url'] = strtolower($_POST['post_url']);
                	$_POST['post_url'] = preg_replace('/&.+?;/', '', $_POST['post_url']); // kill entities
                	$_POST['post_url'] = preg_replace('/[^%a-z0-9 _-]/', '', $_POST['post_url']);
                	$_POST['post_url'] = preg_replace('/\s+/', '-', $_POST['post_url']);
                	$_POST['post_url'] = preg_replace('|-+|', '-', $_POST['post_url']);
                	$_POST['post_url'] = trim($_POST['post_url'], '-');

                    // Same post title twice?

                    $Double = $DB->query_num_rowsDB("
                        SELECT id
                        FROM ot_posts
                        WHERE post_url = '" . addslashes($_POST['post_url']) . "'
                    "); // Check in DB

                    if($Double > 0) // Double?
                    {
                        $_POST['post_url'] = $_POST['post_url'] . "-" . ($Double + 1); // Add number at the end
                    }

                    // Check if user is allow to publish

                    if( ! (defined("USER_LEVEL_ADMINISTRATOR") OR  defined("USER_LEVEL_EDITOR")) && ($_POST['post_status'] == "gepubliceerd"))
                    {
                        $_POST['post_status'] = "klad";
                    }

                    // We'll update the post in DB

                    $DB->query_execDB("
                        UPDATE ot_posts
                        SET post_title = '" . addslashes($_POST['post_title']) . "',
                            post_content = '" . addslashes($_POST['post_content']) . "',
                            post_modified = NOW(),
                            post_url = '" . $_POST['post_url'] . "',
                            post_status = '" . addslashes($_POST['post_status']) . "',
                            post_comment_status = '" . addslashes($_POST['post_comment_status']) . "'
                        WHERE id = '" . $_GET['post'] . "'
                        LIMIT 1
                    ");

                    // Now we attach a category

                    $Categories = $DB->query_fetchDB("
                        SELECT id
                        FROM ot_categories
                        ORDER BY id DESC
                    ");

                    if($Categories) // Are there categories?
                    {
                        for($i = 0; $i < count($Categories); $i++)
                        {
                            $Exist = $DB->query_fetchDB("
                                SELECT id
                                FROM ot_post2category
                                WHERE post_id = '" . $_GET['post'] . "' &&
                                      category_id = '" . $Categories[$i]['id'] . "'
                                ORDER BY id DESC
                                LIMIT 1
                            ");

                            if($Exist)
                            {
                                if( ! isset($_POST['post_category_' . $Categories[$i]['id']])) // This category?
                                {
                                    $DB->query_execDB("
                                        DELETE FROM ot_post2category
                                        WHERE id = '" . $Exist['0']['id'] . "'
                                        LIMIT 1
                                    "); // Delete link
                                }
                            }
                            else
                            {
                                if(isset($_POST['post_category_' . $Categories[$i]['id']])) // This category?
                                {
                                    $DB->query_execDB("
                                        INSERT INTO ot_post2category
                                        SET id = 'NULL',
                                            post_id = '" . $_GET['post'] . "',
                                            category_id = '" . $Categories[$i]['id'] . "'
                                    "); // Link post to category
                                }
                            }
                        }
                    }

                    // Everything update, let's edit again !

                    header("Location: post-edit.php?post=" . $_GET['post']);
                }
                else
                {
                    header("Location: err-403.php"); // Error
                }
            }

            $PageTitle = " &raquo; Schrijven &raquo; Bericht bewerken"; // Set page title

            include("admin-header.php"); // Load header

            ?>

            <div class="clTabs">
                <a href="post-new.php" title="Nieuw Bericht"><img src="images/newspaper_add.png" alt="Nieuw bericht" />Nieuw bericht</a>
                <a href="page-new.php" title="Nieuwe pagina"><img src="images/page_add.png" alt="Nieuwe pagina" />Nieuwe pagina</a>
                <a href="archive-list.php" title="Archief"><img src="images/folder_table.png" alt="Archief" />Archief</a>
                <?php if(defined("USER_LEVEL_ADMINISTRATOR")) { echo '<a href="categories-list.php" title="Categorieën"><img src="images/book.png" alt="Categorieën" />Categorieën</a>'; } ?>
            </div>

            <div class="clPage">
                <div id="idMessage" class="clMessageSuccess">
                    Het bericht werd succesvol opgeslaan.
                </div>
                <?php get_form("post", ""); ?>
                    <h1>Bericht bewerken</h1>
                    <div class="clInfoFloat">
                        <div class="clInfo">
                            <h3>Categorieën:</h3>
                                <?php

                                if($CategoriesSelected) // Are there categories with this post?
                                {
                                    get_form_checkbox("post_category_0", 1, "unchecked", "Ongecategoriseerd");
                                    echo "<br />";
                                }
                                else
                                {
                                    get_form_checkbox("post_category_0", 1, "checked", "Ongecategoriseerd");
                                    echo "<br />";
                                }

                                $Categories = $DB->query_fetchDB("
                                    SELECT id, category_name FROM ot_categories
                                    ORDER BY category_name ASC
                                ");

                                if($Categories) // Are there categories?
                                {
                                    for($i = 0; $i < count($Categories); $i++)
                                    {
                                        if($CategoriesSelected)
                                        {
                                            for($k = 0; $k < count($CategoriesSelected); $k++)
                                            {
                                                if($Categories[$i]['id'] == $CategoriesSelected[$k]['category_id'])
                                                {
                                                    get_form_checkbox("post_category_" . $Categories[$i]['id'], 1, "checked", stripslashes($Categories[$i]['category_name']));
                                                    echo "<br />";

                                                    $Selected[$i] = "ok";
                                                }
                                            }
                                        }

                                        if( ! isset($Selected[$i]))
                                        {
                                            get_form_checkbox("post_category_" . $Categories[$i]['id'], 1, "unchecked", stripslashes($Categories[$i]['category_name']));
                                            echo "<br />";
                                        }
                                    }
                                }

                                ?>
                        </div>
                        <div class="clInfo">
                            <h3>Bericht status:</h3>
                                <?php

                                if(defined("USER_LEVEL_ADMINISTRATOR") OR defined("USER_LEVEL_EDITOR"))
                                {
                                    if($Post['0']['post_status'] == "gepubliceerd")
                                    {
                                        get_form_radio("post_status", "gepubliceerd", "checked");
                                    }
                                    else
                                    {
                                        get_form_radio("post_status", "gepubliceerd", "unchecked");
                                    }

                                    echo " Gepubliceerd<br />";
                                }
                                else
                                {
                                    if($Post['0']['post_status'] == "goedkeuring")
                                    {
                                        get_form_radio("post_status", "goedkeuring", "checked");
                                    }
                                    else
                                    {
                                        get_form_radio("post_status", "goedkeuring", "unchecked");
                                    }

                                    echo " Goedkeuring<br />";
                                }

                                if($Post['0']['post_status'] == "klad")
                                {
                                    get_form_radio("post_status", "klad", "checked");
                                }
                                else
                                {
                                    get_form_radio("post_status", "klad", "unchecked");
                                }

                                echo " Klad<br />";

                                if($Post['0']['post_status'] == "privé")
                                {
                                    get_form_radio("post_status", "privé", "checked");
                                }
                                else
                                {
                                    get_form_radio("post_status", "privé", "unchecked");
                                }

                                echo " Privé<br />";

                                if($Post['0']['post_status'] == "toekomst")
                                {
                                    get_form_radio("post_status", "toekomst", "checked");
                                }
                                else
                                {
                                    get_form_radio("post_status", "toekomst", "unchecked");
                                }

                                echo " Toekomst";

                                ?>
                        </div>
                        <div class="clInfo">
                            <h3>Reactiemogelijkheden:</h3>
                            <?php

                            if(CONF_COMMENT == 1)
                            {
                                if($Post['0']['post_comment_status'] == "open")
                                {
                                    get_form_radio("post_comment_status", "open", "checked");
                                }
                                else
                                {
                                    get_form_radio("post_comment_status", "open", "unchecked");
                                }

                                echo " Open<br />";

                                if($Post['0']['post_comment_status'] == "gesloten")
                                {
                                    get_form_radio("post_comment_status", "gesloten", "checked");
                                }
                                else
                                {
                                    get_form_radio("post_comment_status", "gesloten", "unchecked");
                                }

                                echo " Gesloten<br />";

                                if($Post['0']['post_comment_status'] == "leden")
                                {
                                    get_form_radio("post_comment_status", "leden", "checked");
                                }
                                else
                                {
                                    get_form_radio("post_comment_status", "leden", "unchecked");
                                }

                                echo " Geregistreerde leden";
                            }
                            elseif(CONF_COMMENT == 0)
                            {
                                get_form_radio("post_comment_status", "open", "unchecked");
                                echo " Open<br />";
                                get_form_radio("post_comment_status", "gesloten", "checked");
                                echo " Gesloten<br />";
                                get_form_radio("post_comment_status", "leden", "unchecked");
                                echo " Geregistreerde leden";
                            }

                            ?>
                        </div>
                    </div>
                    <span class="clPageFormInformation">Titel:</span>
                    <br />
                    <?php get_form_text("post_title", stripslashes($Post['0']['post_title']), 64, ""); ?>
                    <br /><br />
                    <span class="clPageFormInformation">Bericht:</span>
                    <br />
                    <?php get_form_textarea("post_content", stripslashes($Post['0']['post_content']), "15", "60"); ?>
                    <br />
                    <?php get_form_input("post_submit", "Bericht opslaan"); ?>
                </form>
                <br />
                <div class="clSearch" style="clear: both;">
                    <h2>Bestand toevoegen</h2>
                    Met onderstaande knop "Bestanden toevoegen" kan u bestanden toevoegen aan uw weblog. De duur van het uploaden is afhankelijk van de grootte van het bestand (max. 2MB) en uw verbindingssnelheid.<br />
                    Na het uploadproces zal u automatisch de URL naar het bestand krijgen.
                    <br /><br />
                    <form>
                        <button id="post_file" name="post_file" type="button" style="padding: 5px;" onclick="swfu.selectFiles(); this.blur();"><img src="images/page_add.png" style="padding-right: 10px; vertical-align: bottom;">Bestanden toevoegen</button>
                    </form>
                    <br />
             		<div id="idUploadBox">
                    </div>
                </div>
            </div>

            <?php

            include("admin-footer.php"); // Load footer
        }
        else
        {
            header("Location: err-403.php"); // Not allowed
        }
    }
    else
    {
        header("Location: err-404.php"); // Not found
    }
}
else
{
    header("Location: err-404.php"); // Not found
}

?>