<?php

include("admin-load.php"); // Load config

if(defined("USER_LEVEL_ADMINISTRATOR") OR defined("USER_LEVEL_EDITOR") OR defined("USER_LEVEL_AUTHOR")) // Allow to make a post?
{
    if($_SERVER['REQUEST_METHOD'] == "POST") // New post?
    {
        if( ! empty($_POST['post_status']) && ! empty($_POST['post_comment_status']) && isset($_POST['post_title']) && isset($_POST['post_content'])) // Required fields are set?
        {
            // Generating a user-friendly URL

        	$_POST['post_url'] = strip_tags($_POST['post_title']);
        	$_POST['post_url'] = preg_replace('|%([a-fA-F0-9][a-fA-F0-9])|', '---$1---', $_POST['post_url']);
        	$_POST['post_url'] = str_replace('%', '', $_POST['post_url']);
        	$_POST['post_url'] = preg_replace('|---([a-fA-F0-9][a-fA-F0-9])---|', '%$1', $_POST['post_url']);
        	$_POST['post_url'] = strtolower($_POST['post_url']);
        	$_POST['post_url'] = preg_replace('/&.+?;/', '', $_POST['post_url']); // kill entities
        	$_POST['post_url'] = preg_replace('/[^%a-z0-9 _-]/', '', $_POST['post_url']);
        	$_POST['post_url'] = preg_replace('/\s+/', '-', $_POST['post_url']);
        	$_POST['post_url'] = preg_replace('|-+|', '-', $_POST['post_url']);
        	$_POST['post_url'] = trim($_POST['post_url'], '-');

            // Same post title twice?

            $Double = $DB->query_num_rowsDB("
                SELECT id
                FROM ot_posts
                WHERE post_url = '" . addslashes($_POST['post_url']) . "'
            "); // Check in DB

            if($Double > 0) // Double?
            {
                $_POST['post_url'] = $_POST['post_url'] . "-" . ($Double + 1); // Add number at the end
            }

            // Check if user is allow to publish

            if( ! (defined("USER_LEVEL_ADMINISTRATOR") OR  defined("USER_LEVEL_EDITOR")) && ($_POST['post_status'] == "gepubliceerd"))
            {
                $_POST['post_status'] = "klad";
            }

            // We'll create the post in DB

            $DB->query_execDB("
                INSERT INTO ot_posts
                SET id = 'NULL',
                    post_title = '" . addslashes($_POST['post_title']) . "',
                    post_content = '" . addslashes($_POST['post_content']) . "',
                    post_author = '" . USER_ID . "',
                    post_date = NOW(),
                    post_modified = 'NULL',
                    post_url = '" . $_POST['post_url'] . "',
                    post_type = 'post',
                    post_parent = 'NULL',
                    post_status = '" . addslashes($_POST['post_status']) . "',
                    post_comment_status = '" . addslashes($_POST['post_comment_status']) . "',
                    post_comments = 0,
                    post_views = 0
            ");

            // We want to know which ID the post got

            $_POST['post_id'] = mysql_insert_id();

            // Now we attach a category

            $Categories = $DB->query_fetchDB("
                SELECT id
                FROM ot_categories
                ORDER BY id DESC
            ");

            if($Categories) // Are there categories?
            {
                for($i = 0; $i < count($Categories); $i++)
                {
                    if(isset($_POST['post_category_' . $Categories[$i]['id']])) // This category?
                    {
                        $DB->query_execDB("
                            INSERT INTO ot_post2category
                            SET id = 'NULL',
                                post_id = '" . $_POST['post_id'] . "',
                                category_id = '" . $Categories[$i]['id'] . "'
                        "); // Link post to category
                    }
                }
            }

            // Everything inserted, let's edit !

            header("Location: post-edit.php?post=" . $_POST['post_id']);
        }
        else
        {
            header("Location: err-403.php"); // Error
        }
    }

    $PageTitle = " &raquo; Schrijven &raquo; Nieuw bericht"; // Set page title

    include("admin-header.php"); // Load header

    ?>

    <div class="clTabs">
        <a href="post-new.php" title="Nieuw Bericht" class="clTabsSelected"><img src="images/newspaper_add.png" alt="Nieuw bericht" />Nieuw bericht</a>
        <a href="page-new.php" title="Nieuwe pagina"><img src="images/page_add.png" alt="Nieuwe pagina" />Nieuwe pagina</a>
        <a href="archive-list.php" title="Archief"><img src="images/folder_table.png" alt="Archief" />Archief</a>
        <?php if(defined("USER_LEVEL_ADMINISTRATOR")) { echo '<a href="categories-list.php" title="Categorieën"><img src="images/book.png" alt="Categorieën" />Categorieën</a>'; } ?>
    </div>

    <div class="clPage">
        <?php get_form("post", ""); ?>
            <h1>Nieuw bericht</h1>
            <div class="clInfoFloat">
                <div class="clInfo">
                    <h3>Categorieën:</h3>
                        <?php

                        get_form_checkbox("post_category_0", 1, "checked", "Ongecategoriseerd");
                        echo "<br />";

                        $Categories = $DB->query_fetchDB("
                            SELECT id, category_name FROM ot_categories
                            ORDER BY category_name ASC
                        ");

                        if($Categories) // Are there categories?
                        {
                            for($i = 0; $i < count($Categories); $i++)
                            {
                                get_form_checkbox("post_category_" . $Categories[$i]['id'], 1, "unchecked", stripslashes($Categories[$i]['category_name']));
                                echo "<br />";
                            }
                        }

                        ?>
                </div>
                <div class="clInfo">
                    <h3>Bericht status:</h3>
                        <?php

                        if(defined("USER_LEVEL_ADMINISTRATOR") OR defined("USER_LEVEL_EDITOR"))
                        {
                            get_form_radio("post_status", "gepubliceerd", "unchecked");
                            echo " Gepubliceerd<br />";
                        }
                        else
                        {
                            get_form_radio("post_status", "goedkeuring", "unchecked");
                            echo " Goedkeuring<br />";
                        }

                        get_form_radio("post_status", "klad", "checked");
                        echo " Klad<br />";
                        get_form_radio("post_status", "privé", "unchecked");
                        echo " Privé<br />";
                        get_form_radio("post_status", "toekomst", "unchecked");
                        echo " Toekomst";

                        ?>
                </div>
                <div class="clInfo">
                    <h3>Reactiemogelijkheden:</h3>
                    <?php

                    if(CONF_COMMENT == 1)
                    {
                        get_form_radio("post_comment_status", "open", "checked");
                        echo " Open<br />";
                        get_form_radio("post_comment_status", "gesloten", "unchecked");
                        echo " Gesloten<br />";
                        get_form_radio("post_comment_status", "leden", "unchecked");
                        echo " Geregistreerde leden";
                    }
                    elseif(CONF_COMMENT == 0)
                    {
                        get_form_radio("post_comment_status", "open", "unchecked");
                        echo " Open<br />";
                        get_form_radio("post_comment_status", "gesloten", "checked");
                        echo " Gesloten<br />";
                        get_form_radio("post_comment_status", "leden", "unchecked");
                        echo " Geregistreerde leden";
                    }

                    ?>
                </div>
            </div>
            <span class="clPageFormInformation">Titel:</span>
            <br />
            <?php get_form_text("post_title", "", 64, ""); ?>
            <br /><br />
            <span class="clPageFormInformation">Bericht:</span>
            <br />
            <?php get_form_textarea("post_content", "", "15", "60"); ?>
            <br />
            <?php get_form_input("post_submit", "Bericht opslaan"); ?>
        </form>
        <br />
        <div class="clSearch" style="clear: both;">
            <h2>Bestand toevoegen</h2>
            Met onderstaande knop "Bestanden toevoegen" kan u bestanden toevoegen aan uw weblog. De duur van het uploaden is afhankelijk van de grootte van het bestand (max. 2MB) en uw verbindingssnelheid.<br />
            Na het uploadproces zal u automatisch de URL naar het bestand krijgen.
            <br /><br />
            <form>
                <button id="post_file" name="post_file" type="button" style="padding: 5px;" onclick="swfu.selectFiles(); this.blur();"><img src="images/page_add.png" style="padding-right: 10px; vertical-align: bottom;">Bestanden toevoegen</button>
            </form>
            <br />
     		<div id="idUploadBox">
            </div>
        </div>
    </div>

    <?php

    include("admin-footer.php"); // Load footer

}
else
{
    header("Location: err-403.php"); // Not allowed
}

?>