bAdminMode = $logged['admin'] ? true : false; $this->iVisitorID = (int)$_COOKIE['memberID']; $this->sCurrBrowsedFile = ($sCurrBrowsedFile=='') ? $_SERVER['PHP_SELF'] : $sCurrBrowsedFile; if( $this->bAdminMode ) { $this->sUrl = $site['url_admin']; } else { $this->sUrl = $site['url']; } } /** * * * @param * @return HTML presentation of data */ function getArticlesCategoriesList( $resurs = false ) { global $site; global $sUrl; $sAddCategoryC = _t('_Add Category'); $sAddNewArticleC = _t('_Add New Article'); $sEditC = _t('_Edit'); $sDeleteC = _t('_Delete'); $sSureC = _t('_are you sure?'); $sCategQuery = " SELECT `CategoryID`, `CategoryName`, `CategoryDescription` FROM `ArticlesCategory` ORDER BY `CategoryID` ASC "; $rCategory = db_res( $sCategQuery ); if( $resurs ) { return $rCategory; } else { $ret = ''; $sActions = ''; if( $this->bAdminMode ) { $sActions .= <<{$sAddCategoryC} EOF; } if ($this->bAdminMode || $this->iVisitorID) { $ret .= << {$sActions} {$sAddNewArticleC} EOF; } $i = ''; while ($aCategory = mysql_fetch_assoc( $rCategory )) { if ( ($i%2) == 0 ) { $sStyleAdd = '1'; } else { $sStyleAdd = '2'; } $sCategoryName = process_line_output( $aCategory['CategoryName'] ); $sCategoryDescription = process_html_output( $aCategory['CategoryDescription'] ); $sCategUrl = $this->getArticleCatUrl($aCategory['CategoryID']); $sAdminActions = ''; if( $this->bAdminMode) { $sAdminActions .= << {$sEditC} {$sDeleteC} EOF; } $ret .= <<

{$sCategoryName}

{$sCategoryDescription}

{$sAdminActions} EOF; $i++; } return $ret; } } function getArticlesList( $iCategoryID ) { global $sUrl; global $site; global $short_date_format; $sArticlesC = _t('_Articles'); $sEditC = _t('_Edit'); $sDeleteC = _t('_Delete'); $sSureC = _t('_are you sure?'); $iCategoryID = (int)$iCategoryID; if( !(int)$iCategoryID ) { return ''; } else { $sCategoryQuery = " SELECT `CategoryName`, `CategoryDescription` FROM `ArticlesCategory` WHERE `CategoryID` = '{$iCategoryID}' LIMIT 1; "; $aCategory = db_arr( $sCategoryQuery ); } $sArticlesQuery = " SELECT `Title`, `Text`, DATE_FORMAT( `Date`, '{$short_date_format}' ) AS Date, `ArticlesID`, `ArticleFlag`, `ownerID` FROM `Articles` WHERE `CategoryID` = '{$iCategoryID}' "; $rArticles = db_res( $sArticlesQuery ); $sCategoryName = process_line_output( $aCategory['CategoryName'] ); $sCategoryDescription = process_text_output( $aCategory['CategoryDescription'] ); $ret = << {$sArticlesC} > {$sCategoryName}

{$sCategoryName}

{$sCategoryDescription}

EOF; $i = ''; while ( $aArticles = mysql_fetch_assoc( $rArticles )) { if ( ($i%2) == 0 ) { $sStyleAdd = '1'; } else { $sStyleAdd = '2'; } $sArticleUrl = $this->getArticleUrl($aArticles['ArticlesID']); $sArticleTitle = process_line_output( $aArticles['Title'] ); $sArticleText = ''; if( $aArticles['ArticleFlag'] == 'HTML' ) { $sArticleText = process_html_output( strmaxtextlen( strip_tags($aArticles['Text']), 200 ) ) . "\n"; } else { $sArticleText = strmaxtextlen( $aArticles['Text'], 200 ); //$sArticleText = process_text_output( strmaxtextlen( $aArticles['Text'], 200 ) ) . "\n"; } $sAdminActions = ''; if( $this->bAdminMode || ($aArticles['ownerID'] != 0 && $aArticles['ownerID'] == $this->iVisitorID )) { $sAdminActions .= << {$sEditC} {$sDeleteC} EOF; } $ret .= <<

{$sArticleTitle}

{$aArticles['Date']}

{$sArticleText}

{$sAdminActions} EOF; $i++; } return $ret; } function getArticle( $iArticleID ) { global $short_date_format; $sArticlesC = _t('_Articles'); if( !(int)$iArticleID ) { return ''; } else { $sArticleQuery = " SELECT `Title`, `Text`, `Articles`.`CategoryID`, DATE_FORMAT( `Date`, '{$short_date_format}' ) AS Date, `ArticlesID`, `CategoryName`, `ArticleFlag`, `ownerID` FROM `Articles` INNER JOIN `ArticlesCategory` ON `Articles`.`CategoryID` = `ArticlesCategory`.`CategoryID` WHERE `ArticlesID` = '{$iArticleID}' LIMIT 1; "; } $aArticle = db_arr( $sArticleQuery ); $sCategoryName = process_line_output( $aArticle['CategoryName'] ); $sTitle = process_line_output( $aArticle['Title']); $sText = ''; if( $aArticle['ArticleFlag'] == 'HTML' ) { $sText = process_html_output( $aArticle['Text'] ) . "\n"; } else { $sText = process_text_output( $aArticle['Text'] ) . "\n"; } $ret = << {$sArticlesC} > {$sCategoryName} > {$sTitle}

{$sTitle}

{$aArticle['Date']}

{$sText}

EOF; return $ret; } function getArticlesCategoryEditForm( $iCategoryID = '' ) { global $site; $sArticlesC = _t('_Articles'); $sCategoryCaptionC = _t('_Category Caption'); $sCategoryDescriptionC = _t('_category_description'); $ret = ''; if( (int)$iCategoryID ) { $sEditCategoryQuery = " SELECT `CategoryID`, `CategoryName`, `CategoryDescription` FROM `ArticlesCategory` WHERE `CategoryID` = '{$iCategoryID}' LIMIT 1; "; $aCategory = db_arr( $sEditCategoryQuery ); } $ret .= << {$sArticlesC} EOF; $ret .= << function checkForm() { var el; var hasErr = false; var fild = ""; el = document.getElementById("caption"); if( el.value.length < 3 ) { el.style.backgroundColor = "pink"; hasErr = true; fild += " Category Title "; } else { el.style.backgroundColor = "#fff"; } el = document.getElementById("description"); if( el.value.length < 3 ) { el.style.backgroundColor = "pink"; hasErr = true; fild += " Category Description"; } else { el.style.backgroundColor = "#fff"; } if (hasErr) { alert( "Please fill next fields first!" + fild ) return false; } else { return true; } } EOF; $sFormInputs = ''; if( (int)$iCategoryID ) { $sFormInputs .= '' . "\n"; $sFormInputs .= '' . "\n"; } else { $sFormInputs .= '' . "\n"; } $sCategoryName = process_line_output( $aCategory['CategoryName'] ); $sCategoryDescription = process_text_output( $aCategory['CategoryDescription'] ); $ret .= << EOF; return $ret; } function getArticleEditForm( $iArticleID = '' ) { $sEditArticleC = _t('_Edit Article'); $sArticlesC = _t('_Articles'); $sArticleC = _t('_Article'); $sArticleTitleC = _t('_Article Title'); $sSelectCategoryC = _t('_Select Category'); $sPrintAsC = _t('_Print As'); $rCatories = $this->getArticlesCategoriesList( true ); if( (int)$iArticleID ) { $articleQuery = " SELECT `Articles`.`ArticlesID`, `Articles`.`CategoryID`, `Articles`.`Date`, `Articles`.`Title`, `Articles`.`Text`, `Articles`.`ArticleFlag`, `ArticlesCategory`.`CategoryName` FROM `Articles` INNER JOIN `ArticlesCategory` ON `ArticlesCategory`.`CategoryID` = `Articles`.`CategoryID` WHERE `Articles`.`ArticlesID` = '{$iArticleID}'; "; $aArticle = db_arr( $articleQuery ); } $sCategoryNameAd = ''; if( $iArticleID && strlen( $aArticle['CategoryName'] ) ) { $sCategoryNameAd = <<> {$aArticle['CategoryName']} > {$sEditArticleC} EOF; } $sRetCateg = ''; while ( $aCategory = mysql_fetch_assoc( $rCatories ) ) { if( $aArticle['CategoryID'] == $aCategory['CategoryID'] ) { $sSelectedCategory = ' selected="selected"'; } else { $sSelectedCategory = ''; } $sRetCateg .= '' . "\n"; } $sArticleActions = ''; if( (int)$iArticleID ) { $sArticleActions .= '' . "\n"; $sArticleActions .= '' . "\n"; } else { $sArticleActions .= '' . "\n"; } $sTitle = process_line_output( $aArticle['Title'] ); $textSelected = ( $aArticle['ArticleFlag'] == 'Text' ) ? ' selected="selected"' : ''; $htmlSelected = ( $aArticle['ArticleFlag'] == 'HTML' ) ? ' selected="selected"' : ''; $ret = << {$sArticlesC} {$sCategoryNameAd}

EOF; return $ret; } function deleteCategory( $iCategoryID ) { $sADS = _t('_Articles were deleted successfully'); $sADF = _t('_Articles are not deleted'); $sCDS = _t('_category_deleted'); $sCDF = _t('_category_delete_failed'); $sRetVal = _t('_Error Occured'); if( $this->bAdminMode ) { $sCategoryDeleteQuery = "DELETE FROM `ArticlesCategory` WHERE `CategoryID` = '{$iCategoryID}' LIMIT 1;"; $sCategoriesArticlesDeleteQuery = "DELETE FROM `Articles` WHERE `CategoryID` = '{$iCategoryID}';"; if( db_res( $sCategoriesArticlesDeleteQuery ) ) { $sRetVal = $sADS; } else { $sRetVal = $sADF; } if( db_res( $sCategoryDeleteQuery ) ) { $sRetVal = $sCDS; } else { $sRetVal = $sCDF; } } else { } return MsgBox($sRetVal); } function deleteArticle( $iArticleID ) { $sADS = _t('_Article was deleted successfully'); $sADF = _t('_Article was not deleted'); $sRetVal = _t('_Error Occured'); if( $this->bAdminMode ) $sArticleDeleteQuery = "DELETE FROM `Articles` WHERE `ArticlesID` = '{$iArticleID}'"; else $sArticleDeleteQuery = "DELETE FROM `Articles` WHERE `ArticlesID` = '{$iArticleID}' AND `ownerID`='{$this->iVisitorID}'"; if( db_res( $sArticleDeleteQuery ) ) $sRetVal = $sADS; else $sRetVal = $sADF; return MsgBox($sRetVal); } function ActionAddUpdateElements() { $sActionText = ''; if( $_POST['add_category'] ) { $sCategorySubject = process_db_input( $_POST['caption'], 1 ); $sCategoryDesc = process_db_input( $_POST['description'], 1 ); $sCategoryUri = uriGenerate( $sCategorySubject, 'ArticlesCategory', 'CategoryUri', 255); $sAddQuery = "INSERT INTO `ArticlesCategory` SET `CategoryName` = '{$sCategorySubject}', `CategoryDescription` = '{$sCategoryDesc}', `CategoryUri`='{$sCategoryUri}'"; if ($sCategorySubject=='' || $sCategoryDesc=='') { $sActionText = 'Category didn\'t add'; } elseif( db_res( $sAddQuery ) ) { $sActionText = 'Category Added'; } else { $sActionText = 'Category didn\'t add'; } } elseif( $_POST['edit_category'] ) { $sCategorySubject = process_db_input( $_POST['caption'], 1 ); $sCategoryDesc = process_db_input( $_POST['description'], 1 ); $iCategoryID = (int)$_POST['categoryID']; $sAddQuery = "UPDATE `ArticlesCategory` SET `CategoryName` = '{$sCategorySubject}', `CategoryDescription` = '{$sCategoryDesc}' WHERE `CategoryID` = '{$iCategoryID}' LIMIT 1;"; if ($sCategorySubject=='' || $sCategoryDesc=='') { $sActionText = 'Category didn\'t add'; } elseif( db_res( $sAddQuery ) ) { $sActionText = 'Category Udated'; } else { $sActionText = 'Category didn\'t updated'; } } elseif( $_POST['add_article'] ) { $sArticleTitle = process_db_input( $_POST['title'], 1 ); $sArticle = $this->process_html_db_input( $_POST['article'] ); $iCategoryID = (int)$_POST['categoryID']; if( $_POST['flag'] == 'HTML') { $sFlag = 'HTML'; } else { $sFlag = 'Text'; } $sArticleUri = uriGenerate($sArticleTitle, 'Articles', 'ArticleUri', 100); $sOwner = $this->bAdminMode ? "" : ", `ownerID` = '{$this->iVisitorID}'"; $sAddQuery = "INSERT INTO `Articles` SET `Title` = '{$sArticleTitle}', `Text` = '{$sArticle}', `CategoryID` = '{$iCategoryID}', `Date` = NOW(), `ArticleFlag` = '{$sFlag}', `ArticleUri`='{$sArticleUri}' {$sOwner}"; if ($sArticleTitle=='' || $sArticle=='') { $sActionText = 'Article Not Added'; } elseif( db_res( $sAddQuery ) ) { $sActionText = 'Article Added'; } else { $sActionText = 'Article Not Added'; } } elseif( $_POST['edit_article'] ) { $sArticleTitle = process_db_input( $_POST['title'], 1 ); $sArticle = $this->process_html_db_input( $_POST['article'] ); $iCategoryID = (int)$_POST['categoryID']; $iArticleID = (int)$_POST['articleID']; $sArticleUri = uriGenerate($sArticleTitle, 'Articles', 'Title', 100); if( $_POST['flag'] == 'HTML') { $sFlag = 'HTML'; } else { $sFlag = 'Text'; } if ($this->bAdminMode) { $sOwner = ", `ownerID`='0'"; $sOwnerCond = ""; } else { $sOwner = ", `ownerID`='{$this->iVisitorID}'"; $sOwnerCond = " AND `ownerID`='{$this->iVisitorID}'"; } $sAddQuery = "UPDATE `Articles` SET `Title` = '{$sArticleTitle}', `Text` = '{$sArticle}', `CategoryID` = '{$iCategoryID}', `Date` = NOW(), `ArticleFlag` = '{$sFlag}', `ArticleUri`='{$sArticleUri}' {$sOwner} WHERE `ArticlesID` = '{$iArticleID}' {$sOwnerCond}"; if ($sArticleTitle=='' || $sArticle=='') { $sActionText = 'Article Updated'; } elseif( db_res( $sAddQuery ) ) { $sActionText = 'Article Updated'; } else { $sActionText = 'Article Not Updated'; } } return ($sActionText!='') ? MsgBox($sActionText) : ''; } function getArticleIdByUri($sName) { $sName = process_db_input($sName); return db_value( "SELECT `ArticlesID` FROM `Articles` WHERE `ArticleUri` = '{$sName}'" ); } function getArticleCatIdByUri($sName) { $sName = process_db_input($sName); return db_value( "SELECT `CategoryID` FROM `ArticlesCategory` WHERE `CategoryUri` = '$sName'" ); } function getArticleUrl($iArticleId) { global $sUrl; $iArticleId = (int)$iArticleId; if ($this->isPermalinkEnabled() && $this->bAdminMode == false) { $sArticleUri = db_value("SELECT `ArticleUri` FROM `Articles` WHERE `ArticlesID`='{$iArticleId}'"); $sLinkUrl = $sUrl.'articles/entry/'.$sArticleUri; } else $sLinkUrl = $sUrl.'articles.php?action=viewarticle&articleID='.$iArticleId; return $sLinkUrl; } function getArticleCatUrl($iCategoryId) { global $sUrl; $iArticleId = (int)$iArticleId; if ($this->isPermalinkEnabled() && $this->bAdminMode == false) { $sCategoryUri = db_value("SELECT `CategoryUri` FROM `ArticlesCategory` WHERE `CategoryID`='{$iCategoryId}'"); $sLinkUrl = $sUrl.'articles/category/'.$sCategoryUri; } else $sLinkUrl = $sUrl.'articles.php?action=viewcategory&catID='.$iCategoryId; return $sLinkUrl; } function isPermalinkEnabled() { return isset($this->_isPermalinkEnabled) ? $this->_isPermalinkEnabled : ($this->_isPermalinkEnabled = (getParam('permalinks_articles') == 'on')); } function getArticlesResource($iLimit = 1) { $iLimit = (int)$iLimit; $sQuery = " SELECT `ArticlesID`, `Articles`.`CategoryID`, `Date`, UNIX_TIMESTAMP(`Date`) AS 'Date_UTS', `Title`, `Text`, `CategoryName`, `ownerID` FROM `Articles` INNER JOIN `ArticlesCategory` USING( `CategoryID` ) ORDER BY `Date` DESC LIMIT {$iLimit} "; $rArticles = db_res($sQuery); return $rArticles; } function process_html_db_input( $sText ) { return addslashes( clear_xss( trim( process_pass_data( $sText )))); } } ?>