';
-
- echo '';
-
+ global $db, $session, $paths, $template, $plugins; // Common objects
+ global $lang;
+ if ( $session->auth_level < USER_LEVEL_ADMIN || $session->user_level < USER_LEVEL_ADMIN )
+ {
+ $login_link = makeUrlNS('Special', 'Login/' . $paths->nslist['Special'] . 'Administration', 'level=' . USER_LEVEL_ADMIN, true);
+ echo '
' . $lang->get('adm_err_not_auth_body', array( 'login_link' => $login_link )) . '
+ ' . $lang->get('acpcp_intro') . '
+
';
+
+ // Start form
+
+ if ( isset($_POST['coppa_address']) )
+ {
+ // Saving changes
+ $enable_coppa = ( isset($_POST['enable_coppa']) ) ? '1' : '0';
+ setConfig('enable_coppa', $enable_coppa);
+
+ $address = $_POST['coppa_address']; // RenderMan::preprocess_text($_POST['coppa_address'], true, false);
+ setConfig('coppa_address', $address);
+
+ echo '
' . $lang->get('acpcp_msg_save_success') . '
';
+ echo '
';
+
+ echo '';
+
}
function page_Admin_MassEmail()
{
- global $db, $session, $paths, $template, $plugins; // Common objects
- global $lang;
- if ( $session->auth_level < USER_LEVEL_ADMIN || $session->user_level < USER_LEVEL_ADMIN )
- {
- $login_link = makeUrlNS('Special', 'Login/' . $paths->nslist['Special'] . 'Administration', 'level=' . USER_LEVEL_ADMIN, true);
- echo '
' . $lang->get('adm_err_not_auth_title') . '
';
- echo '
' . $lang->get('adm_err_not_auth_body', array( 'login_link' => $login_link )) . '
';
- return;
- }
-
- global $enano_config;
- if ( isset($_POST['do_send']) && !defined('ENANO_DEMO_MODE') )
- {
- $use_smtp = getConfig('smtp_enabled') == '1';
-
- //
- // Let's do some checking to make sure that mass mail functions
- // are working in win32 versions of php. (copied from phpBB)
- //
- if ( preg_match('/[c-z]:\\\.*/i', getenv('PATH')) && !$use_smtp)
- {
- $ini_val = ( @phpversion() >= '4.0.0' ) ? 'ini_get' : 'get_cfg_var';
+ global $db, $session, $paths, $template, $plugins; // Common objects
+ global $lang;
+ if ( $session->auth_level < USER_LEVEL_ADMIN || $session->user_level < USER_LEVEL_ADMIN )
+ {
+ $login_link = makeUrlNS('Special', 'Login/' . $paths->nslist['Special'] . 'Administration', 'level=' . USER_LEVEL_ADMIN, true);
+ echo '
' . $lang->get('adm_err_not_auth_title') . '
';
+ echo '
' . $lang->get('adm_err_not_auth_body', array( 'login_link' => $login_link )) . '
';
+ return;
+ }
+
+ global $enano_config;
+ if ( isset($_POST['do_send']) && !defined('ENANO_DEMO_MODE') )
+ {
+ $use_smtp = getConfig('smtp_enabled') == '1';
+
+ //
+ // Let's do some checking to make sure that mass mail functions
+ // are working in win32 versions of php. (copied from phpBB)
+ //
+ if ( preg_match('/[c-z]:\\\.*/i', getenv('PATH')) && !$use_smtp)
+ {
+ $ini_val = ( @phpversion() >= '4.0.0' ) ? 'ini_get' : 'get_cfg_var';
- // We are running on windows, force delivery to use our smtp functions
- // since php's are broken by default
- $use_smtp = true;
- $enano_config['smtp_server'] = @$ini_val('SMTP');
- }
-
- $mail = new emailer( !empty($use_smtp) );
-
- // Validate subject/message body
- $subject = stripslashes(trim($_POST['subject']));
- $message = stripslashes(trim($_POST['message']));
-
- if ( empty($subject) )
- $errors[] = $lang->get('acpmm_err_need_subject');
- if ( empty($message) )
- $errors[] = $lang->get('acpmm_err_need_message');
-
- // Get list of members
- if ( !empty($_POST['userlist']) )
- {
- $userlist = str_replace(', ', ',', $_POST['userlist']);
- $userlist = explode(',', $userlist);
- foreach ( $userlist as $k => $u )
- {
- if ( $u == $session->username )
- {
- // Message is automatically sent to the sender
- unset($userlist[$k]);
- }
- else
- {
- $userlist[$k] = $db->escape($u);
- }
- }
- $userlist = 'WHERE username=\'' . implode('\' OR username=\'', $userlist) . '\'';
-
- $q = $db->sql_query('SELECT email FROM '.table_prefix.'users ' . $userlist . ';');
- if ( !$q )
- $db->_die();
-
- if ( $row = $db->fetchrow() )
- {
- do {
- $mail->cc($row['email']);
- } while ( $row = $db->fetchrow() );
- }
-
- $db->free_result();
-
- }
- else
- {
- // Sending to a usergroup
-
- $group_id = intval($_POST['group_id']);
- if ( $group_id < 1 )
- {
- $errors[] = 'Invalid group ID';
- }
- else
- {
- $q = $db->sql_query('SELECT u.email FROM '.table_prefix.'group_members AS g
- LEFT JOIN '.table_prefix.'users AS u
- ON (u.user_id=g.user_id)
- WHERE g.group_id=' . $group_id . ';');
- if ( !$q )
- $db->_die();
-
- if ( $row = $db->fetchrow() )
- {
- do {
- $mail->cc($row['email']);
- } while ( $row = $db->fetchrow() );
- }
-
- $db->free_result();
- }
- }
-
- if ( sizeof($errors) < 1 )
- {
-
- $mail->from(getConfig('contact_email'));
- $mail->replyto(getConfig('contact_email'));
- $mail->set_subject($subject);
- $mail->email_address(getConfig('contact_email'));
-
- // Copied/modified from phpBB
- $email_headers = 'X-AntiAbuse: Website server name - ' . $_SERVER['SERVER_NAME'] . "\n";
- $email_headers .= 'X-AntiAbuse: User_id - ' . $session->user_id . "\n";
- $email_headers .= 'X-AntiAbuse: Username - ' . $session->username . "\n";
- $email_headers .= 'X-AntiAbuse: User IP - ' . $_SERVER['REMOTE_ADDR'] . "\n";
-
- $mail->extra_headers($email_headers);
-
- // FIXME: how to handle l10n with this?
- $tpl = 'The following message was mass-mailed by {SENDER}, one of the administrators from {SITE_NAME}. If this message contains spam or any comments which you find abusive or offensive, please contact the administration team at:
-
+ // We are running on windows, force delivery to use our smtp functions
+ // since php's are broken by default
+ $use_smtp = true;
+ $enano_config['smtp_server'] = @$ini_val('SMTP');
+ }
+
+ $mail = new emailer( !empty($use_smtp) );
+
+ // Validate subject/message body
+ $subject = stripslashes(trim($_POST['subject']));
+ $message = stripslashes(trim($_POST['message']));
+
+ if ( empty($subject) )
+ $errors[] = $lang->get('acpmm_err_need_subject');
+ if ( empty($message) )
+ $errors[] = $lang->get('acpmm_err_need_message');
+
+ // Get list of members
+ if ( !empty($_POST['userlist']) )
+ {
+ $userlist = str_replace(', ', ',', $_POST['userlist']);
+ $userlist = explode(',', $userlist);
+ foreach ( $userlist as $k => $u )
+ {
+ if ( $u == $session->username )
+ {
+ // Message is automatically sent to the sender
+ unset($userlist[$k]);
+ }
+ else
+ {
+ $userlist[$k] = $db->escape($u);
+ }
+ }
+ $userlist = 'WHERE username=\'' . implode('\' OR username=\'', $userlist) . '\'';
+
+ $q = $db->sql_query('SELECT email FROM '.table_prefix.'users ' . $userlist . ';');
+ if ( !$q )
+ $db->_die();
+
+ if ( $row = $db->fetchrow() )
+ {
+ do {
+ $mail->cc($row['email']);
+ } while ( $row = $db->fetchrow() );
+ }
+
+ $db->free_result();
+
+ }
+ else
+ {
+ // Sending to a usergroup
+
+ $group_id = intval($_POST['group_id']);
+ if ( $group_id < 1 )
+ {
+ $errors[] = 'Invalid group ID';
+ }
+ else
+ {
+ $q = $db->sql_query('SELECT u.email FROM '.table_prefix.'group_members AS g
+ LEFT JOIN '.table_prefix.'users AS u
+ ON (u.user_id=g.user_id)
+ WHERE g.group_id=' . $group_id . ';');
+ if ( !$q )
+ $db->_die();
+
+ if ( $row = $db->fetchrow() )
+ {
+ do {
+ $mail->cc($row['email']);
+ } while ( $row = $db->fetchrow() );
+ }
+
+ $db->free_result();
+ }
+ }
+
+ if ( sizeof($errors) < 1 )
+ {
+
+ $mail->from(getConfig('contact_email'));
+ $mail->replyto(getConfig('contact_email'));
+ $mail->set_subject($subject);
+ $mail->email_address(getConfig('contact_email'));
+
+ // Copied/modified from phpBB
+ $email_headers = 'X-AntiAbuse: Website server name - ' . $_SERVER['SERVER_NAME'] . "\n";
+ $email_headers .= 'X-AntiAbuse: User_id - ' . $session->user_id . "\n";
+ $email_headers .= 'X-AntiAbuse: Username - ' . $session->username . "\n";
+ $email_headers .= 'X-AntiAbuse: User IP - ' . $_SERVER['REMOTE_ADDR'] . "\n";
+
+ $mail->extra_headers($email_headers);
+
+ // FIXME: how to handle l10n with this?
+ $tpl = 'The following message was mass-mailed by {SENDER}, one of the administrators from {SITE_NAME}. If this message contains spam or any comments which you find abusive or offensive, please contact the administration team at:
+
{CONTACT_EMAIL}
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
{MESSAGE}
';
-
- $mail->use_template($tpl);
-
- $mail->assign_vars(array(
- 'SENDER' => $session->username,
- 'SITE_NAME' => getConfig('site_name'),
- 'CONTACT_EMAIL' => getConfig('contact_email'),
- 'MESSAGE' => $message
- ));
-
- //echo '
'.print_r($mail,true).'
';
-
- // All done
- $mail->send();
- $mail->reset();
-
- echo '
' . $lang->get('acpmm_msg_send_success') . '
';
-
- }
- else
- {
- echo '
' . $lang->get('acpmm_err_send_fail') . '
- ' . implode('
- ', $errors) . '
';
- }
-
- }
- else if ( isset($_POST['do_send']) && defined('ENANO_DEMO_MODE') )
- {
- echo '
' . $lang->get('acpmm_err_demo') . '
';
- }
- acp_start_form();
- ?>
-
- ';
+
+ $mail->use_template($tpl);
+
+ $mail->assign_vars(array(
+ 'SENDER' => $session->username,
+ 'SITE_NAME' => getConfig('site_name'),
+ 'CONTACT_EMAIL' => getConfig('contact_email'),
+ 'MESSAGE' => $message
+ ));
+
+ //echo '
'.print_r($mail,true).'
';
+
+ // All done
+ $mail->send();
+ $mail->reset();
+
+ echo '
' . $lang->get('acpmm_msg_send_success') . '
';
+
+ }
+ else
+ {
+ echo '
' . $lang->get('acpmm_err_send_fail') . '
- ' . implode('
- ', $errors) . '
';
+ }
+
+ }
+ else if ( isset($_POST['do_send']) && defined('ENANO_DEMO_MODE') )
+ {
+ echo '
' . $lang->get('acpmm_err_demo') . '
';
+ }
+ acp_start_form();
+ ?>
+
+ ';
}
function page_Admin_BanControl()
{
- global $db, $session, $paths, $template, $plugins; // Common objects
- global $lang;
- if ( $session->auth_level < USER_LEVEL_ADMIN || $session->user_level < USER_LEVEL_ADMIN )
- {
- $login_link = makeUrlNS('Special', 'Login/' . $paths->nslist['Special'] . 'Administration', 'level=' . USER_LEVEL_ADMIN, true);
- echo '
' . $lang->get('adm_err_not_auth_title') . '
';
- echo '
' . $lang->get('adm_err_not_auth_body', array( 'login_link' => $login_link )) . '
';
- return;
- }
-
- if(isset($_GET['action']) && $_GET['action'] == 'delete' && isset($_GET['id']) && $_GET['id'] != '')
- {
- $e = $db->sql_query('DELETE FROM '.table_prefix.'banlist WHERE ban_id=' . intval($_GET['id']) . '');
- if ( !$e )
- $db->_die('The ban list entry was not deleted.');
- }
- if(isset($_POST['create']) && !defined('ENANO_DEMO_MODE'))
- {
- $type = intval($_POST['type']);
- $value = trim($_POST['value']);
- if ( !in_array($type, array(BAN_IP, BAN_USER, BAN_EMAIL)) )
- {
- echo '
Hacking attempt.
';
- }
- else if ( empty($value) )
- {
- echo '
' . $lang->get('acpbc_err_empty') . '
';
- }
- else
- {
- $entries = array();
- $input = explode(',', $_POST['value']);
- $error = false;
- foreach ( $input as $entry )
- {
- $entry = trim($entry);
- if ( empty($entry) )
- {
- echo '
' . $lang->get('acpbc_err_invalid_ip_range') . '
';
- $error = true;
- break;
- }
- if ( $type == BAN_IP )
- {
- if ( !isset($_POST['regex']) )
- {
- // as of 1.0.2 parsing is done at runtime
- $entries[] = $entry;
- }
- else
- {
- $entries[] = $entry;
- }
- }
- else
- {
- $entries[] = $entry;
- }
- }
- if ( !$error )
- {
- $regex = ( isset($_POST['regex']) ) ? '1' : '0';
- $to_insert = array();
- $reason = $db->escape($_POST['reason']);
- foreach ( $entries as $entry )
- {
- $entry = $db->escape($entry);
- $to_insert[] = "($type, '$entry', '$reason', $regex)";
- }
- $q = 'INSERT INTO '.table_prefix."banlist(ban_type, ban_value, reason, is_regex)\n VALUES" . implode(",\n ", $to_insert) . ';';
- @set_time_limit(0);
- $e = $db->sql_query($q);
- if(!$e) $db->_die('The banlist could not be updated.');
- }
- }
- }
- else if ( isset($_POST['create']) && defined('ENANO_DEMO_MODE') )
- {
- echo '
' . $lang->get('acpbc_err_demo', array('ban_target' => htmlspecialchars($_POST['value']))) . '
';
- }
- $q = $db->sql_query('SELECT ban_id,ban_type,ban_value,is_regex FROM '.table_prefix.'banlist ORDER BY ban_type;');
- if ( !$q )
- $db->_die('The banlist data could not be selected.');
- echo '
-
';
- echo '
- | ' . $lang->get('acpbc_col_type') . ' |
- ' . $lang->get('acpbc_col_value') . ' |
- ' . $lang->get('acpbc_col_regex') . ' |
- |
-
';
- if ( $db->numrows() < 1 )
- {
- echo '' . $lang->get('acpbc_msg_no_rules') . ' | ';
- }
- $cls = 'row2';
- while ( $r = $db->fetchrow() )
- {
- $cls = ( $cls == 'row1' ) ? 'row2' : 'row1';
- if ( $r['ban_type'] == BAN_IP )
- $t = $lang->get('acpbc_ban_type_ip');
- else if ( $r['ban_type'] == BAN_USER )
- $t = $lang->get('acpbc_ban_type_username');
- else if ( $r['ban_type'] == BAN_EMAIL )
- $t = $lang->get('acpbc_ban_type_email');
- $g = ( $r['is_regex'] ) ? '' . $lang->get('acpbc_ban_regex_yes') . '' : $lang->get('acpbc_ban_regex_no');
- echo '
- | '.$t.' |
- '.htmlspecialchars($r['ban_value']).' |
- '.$g.' |
- ' . $lang->get('acpbc_btn_delete') . ' |
-
';
- }
- $db->free_result();
- echo '
';
- echo '
' . $lang->get('acpbc_heading_create_new') . '
';
- acp_start_form();
- ?>
-
- get('acpbc_field_type'); ?>
-
-
-
- get('acpbc_field_rule'); ?>
-
-
get('acpbc_field_rule_hint'); ?>
-
- get('acpbc_field_reason'); ?>
-
-
-
- get('acpbc_field_regex_hint'); ?>
-
-
- ';
+ global $db, $session, $paths, $template, $plugins; // Common objects
+ global $lang;
+ if ( $session->auth_level < USER_LEVEL_ADMIN || $session->user_level < USER_LEVEL_ADMIN )
+ {
+ $login_link = makeUrlNS('Special', 'Login/' . $paths->nslist['Special'] . 'Administration', 'level=' . USER_LEVEL_ADMIN, true);
+ echo '
' . $lang->get('adm_err_not_auth_title') . '
';
+ echo '
' . $lang->get('adm_err_not_auth_body', array( 'login_link' => $login_link )) . '
';
+ return;
+ }
+
+ if(isset($_GET['action']) && $_GET['action'] == 'delete' && isset($_GET['id']) && $_GET['id'] != '')
+ {
+ $e = $db->sql_query('DELETE FROM '.table_prefix.'banlist WHERE ban_id=' . intval($_GET['id']) . '');
+ if ( !$e )
+ $db->_die('The ban list entry was not deleted.');
+ }
+ if(isset($_POST['create']) && !defined('ENANO_DEMO_MODE'))
+ {
+ $type = intval($_POST['type']);
+ $value = trim($_POST['value']);
+ if ( !in_array($type, array(BAN_IP, BAN_USER, BAN_EMAIL)) )
+ {
+ echo '
Hacking attempt.
';
+ }
+ else if ( empty($value) )
+ {
+ echo '
' . $lang->get('acpbc_err_empty') . '
';
+ }
+ else
+ {
+ $entries = array();
+ $input = explode(',', $_POST['value']);
+ $error = false;
+ foreach ( $input as $entry )
+ {
+ $entry = trim($entry);
+ if ( empty($entry) )
+ {
+ echo '
' . $lang->get('acpbc_err_invalid_ip_range') . '
';
+ $error = true;
+ break;
+ }
+ if ( $type == BAN_IP )
+ {
+ if ( !isset($_POST['regex']) )
+ {
+ // as of 1.0.2 parsing is done at runtime
+ $entries[] = $entry;
+ }
+ else
+ {
+ $entries[] = $entry;
+ }
+ }
+ else
+ {
+ $entries[] = $entry;
+ }
+ }
+ if ( !$error )
+ {
+ $regex = ( isset($_POST['regex']) ) ? '1' : '0';
+ $to_insert = array();
+ $reason = $db->escape($_POST['reason']);
+ foreach ( $entries as $entry )
+ {
+ $entry = $db->escape($entry);
+ $to_insert[] = "($type, '$entry', '$reason', $regex)";
+ }
+ $q = 'INSERT INTO '.table_prefix."banlist(ban_type, ban_value, reason, is_regex)\n VALUES" . implode(",\n ", $to_insert) . ';';
+ @set_time_limit(0);
+ $e = $db->sql_query($q);
+ if(!$e) $db->_die('The banlist could not be updated.');
+ }
+ }
+ }
+ else if ( isset($_POST['create']) && defined('ENANO_DEMO_MODE') )
+ {
+ echo '
' . $lang->get('acpbc_err_demo', array('ban_target' => htmlspecialchars($_POST['value']))) . '
';
+ }
+ $q = $db->sql_query('SELECT ban_id,ban_type,ban_value,is_regex FROM '.table_prefix.'banlist ORDER BY ban_type;');
+ if ( !$q )
+ $db->_die('The banlist data could not be selected.');
+ echo '
+
';
+ echo '
+ | ' . $lang->get('acpbc_col_type') . ' |
+ ' . $lang->get('acpbc_col_value') . ' |
+ ' . $lang->get('acpbc_col_regex') . ' |
+ |
+
';
+ if ( $db->numrows() < 1 )
+ {
+ echo '' . $lang->get('acpbc_msg_no_rules') . ' | ';
+ }
+ $cls = 'row2';
+ while ( $r = $db->fetchrow() )
+ {
+ $cls = ( $cls == 'row1' ) ? 'row2' : 'row1';
+ if ( $r['ban_type'] == BAN_IP )
+ $t = $lang->get('acpbc_ban_type_ip');
+ else if ( $r['ban_type'] == BAN_USER )
+ $t = $lang->get('acpbc_ban_type_username');
+ else if ( $r['ban_type'] == BAN_EMAIL )
+ $t = $lang->get('acpbc_ban_type_email');
+ $g = ( $r['is_regex'] ) ? '' . $lang->get('acpbc_ban_regex_yes') . '' : $lang->get('acpbc_ban_regex_no');
+ echo '
+ | '.$t.' |
+ '.htmlspecialchars($r['ban_value']).' |
+ '.$g.' |
+ ' . $lang->get('acpbc_btn_delete') . ' |
+
';
+ }
+ $db->free_result();
+ echo '
';
+ echo '
' . $lang->get('acpbc_heading_create_new') . '
';
+ acp_start_form();
+ ?>
+
+ get('acpbc_field_type'); ?>
+
+
+
+ get('acpbc_field_rule'); ?>
+
+
get('acpbc_field_rule_hint'); ?>
+
+ get('acpbc_field_reason'); ?>
+
+
+
+ get('acpbc_field_regex_hint'); ?>
+
+
+ ';
}
function page_Admin_AdminLogout()
{
- global $db, $session, $paths, $template, $plugins; // Common objects
- global $lang;
- if ( $session->auth_level < USER_LEVEL_ADMIN || $session->user_level < USER_LEVEL_ADMIN )
- {
- $login_link = makeUrlNS('Special', 'Login/' . $paths->nslist['Special'] . 'Administration', 'level=' . USER_LEVEL_ADMIN, true);
- echo '
' . $lang->get('adm_err_not_auth_title') . '
';
- echo '
' . $lang->get('adm_err_not_auth_body', array( 'login_link' => $login_link )) . '
';
- return;
- }
-
- $session->logout(USER_LEVEL_ADMIN);
- echo '
' . $lang->get('acplo_heading_main') . '
-
' . $lang->get('acplo_msg_logout_complete', array('mainpage_link' => makeUrl(get_main_page()))) . '
';
+ global $db, $session, $paths, $template, $plugins; // Common objects
+ global $lang;
+ if ( $session->auth_level < USER_LEVEL_ADMIN || $session->user_level < USER_LEVEL_ADMIN )
+ {
+ $login_link = makeUrlNS('Special', 'Login/' . $paths->nslist['Special'] . 'Administration', 'level=' . USER_LEVEL_ADMIN, true);
+ echo '
' . $lang->get('adm_err_not_auth_title') . '
';
+ echo '
' . $lang->get('adm_err_not_auth_body', array( 'login_link' => $login_link )) . '
';
+ return;
+ }
+
+ $session->logout(USER_LEVEL_ADMIN);
+ echo '
' . $lang->get('acplo_heading_main') . '
+
' . $lang->get('acplo_msg_logout_complete', array('mainpage_link' => makeUrl(get_main_page()))) . '
';
}
function page_Special_Administration()
{
- global $db, $session, $paths, $template, $plugins; // Common objects
- global $lang;
- global $output;
-
- if ( $session->auth_level < USER_LEVEL_ADMIN )
- {
- $query_string = 'level=' . USER_LEVEL_ADMIN;
- if ( !empty($_SERVER['QUERY_STRING']) )
- {
- $query_string .= '&' . trim(preg_replace('/(?:&|^)title=.+?(?:&|$)/', '&', $_SERVER['QUERY_STRING']), '&');
- }
- redirect(makeUrlNS('Special', 'Login/'.$paths->page, $query_string), 'Not authorized', 'You need an authorization level of '.USER_LEVEL_ADMIN.' to use this page, your auth level is: ' . $session->auth_level, 0);
- exit;
- }
- else
- {
- $template->set_theme('admin', 'default');
- $template->preload_js('fat');
- $template->preload_js('ajax');
- $template->preload_js('l10n');
- $template->preload_js('jquery');
- $template->preload_js('jquery-ui');
- $template->preload_js('autofill');
- $template->preload_js('admin-menu');
-
- $output->header();
-
- echo $lang->get('adm_page_tagline');
- ?>
-
-
-
- |
-
-
- |
-
-
- Module must be in the Admin namespace ';
- }
- else
- {
- $paths->fullpage = $_GET['module'];
- $paths->cpage['module'] = $_GET['module'];
- $page = new PageProcessor($page_id, $namespace);
- $page->send_headers = false;
- $page->send();
- $paths->fullpage = $paths->page;
- }
- }
- else
- {
- echo '';
- }
- ?>
-
-
- |
-
-
-
- footer();
- }
+ }
+ ?>
+ var TREE_TPL = {
+ 'target' : '_self', // name of the frame links will be opened in
+ // other possible values are: _blank, _parent, _search, _self and _top
+
+ 'icon_e' : '/images/icons/empty.gif', // empty image
+ 'icon_l' : '/images/icons/line.gif', // vertical line
+ 'icon_32' : '/images/spacer.gif', // root leaf icon normal
+ 'icon_36' : '/images/spacer.gif', // root leaf icon selected
+ 'icon_48' : '/images/spacer.gif', // root icon normal
+ 'icon_52' : '/images/spacer.gif', // root icon selected
+ 'icon_56' : '/images/spacer.gif', // root icon opened
+ 'icon_60' : '/images/spacer.gif', // root icon selected
+ 'icon_16' : '/images/spacer.gif', // node icon normal
+ 'icon_20' : '/images/spacer.gif', // node icon selected
+ 'icon_24' : '/images/spacer.gif', // node icon opened
+ 'icon_28' : '/images/spacer.gif', // node icon selected opened
+ 'icon_0' : '/images/icons/page.gif', // leaf icon normal
+ 'icon_4' : '/images/icons/page.gif', // leaf icon selected
+ 'icon_8' : '/images/icons/page.gif', // leaf icon opened
+ 'icon_12' : '/images/icons/page.gif', // leaf icon selected
+ 'icon_2' : '/images/icons/joinbottom.gif', // junction for leaf
+ 'icon_3' : '/images/icons/join.gif', // junction for last leaf
+ 'icon_18' : '/images/icons/plusbottom.gif', // junction for closed node
+ 'icon_19' : '/images/icons/plus.gif', // junction for last closed node
+ 'icon_26' : '/images/icons/minusbottom.gif',// junction for opened node
+ 'icon_27' : '/images/icons/minus.gif' // junction for last opended node
+ };
+
+ parseAdminTree(); // Make a Javascript array that defines the tree
+ ?>
+
+ addOnloadHook(function()
+ {
+ new tree(TREE_ITEMS, TREE_TPL, 'admin_tree');
+ keepalive_onload();
+ });
+
+
+
+ |
+
+
+ |
+
+
+ Module must be in the Admin namespace ';
+ }
+ else
+ {
+ $paths->fullpage = $_GET['module'];
+ $paths->cpage['module'] = $_GET['module'];
+ $page = new PageProcessor($page_id, $namespace);
+ $page->send_headers = false;
+ $page->send();
+ $paths->fullpage = $paths->page;
+ }
+ }
+ else
+ {
+ echo '';
+ }
+ ?>
+
+
+ |
+
+
+
+ footer();
+ }
}
function page_Special_EditSidebar()
{
- global $db, $session, $paths, $template, $plugins; // Common objects
- global $lang;
- global $cache;
-
- if($session->auth_level < USER_LEVEL_ADMIN)
- {
- redirect(makeUrlNS('Special', 'Login/'.$paths->page, 'level='.USER_LEVEL_ADMIN), '', '', false);
- exit;
- }
- else
- {
- if ( isset($_GET['update_order']) )
- {
- header('Content-type: text/javascript');
- $order = @$_POST['order'];
- try
- {
- $order = enano_json_decode($order);
- }
- catch ( Zend_Json_Exception $e )
- {
- return print enano_json_encode(array(
- 'mode' => 'error',
- 'error' => 'bad order'
- ));
- }
-
- foreach ( $order as $sidebar_id => $blocks )
- {
- foreach ( $blocks as $order => $block_id )
- {
- $sbid = intval($sidebar_id);
- $order = intval($order);
- $block_id = intval($block_id);
- $q = $db->sql_query('UPDATE ' . table_prefix . "sidebar SET sidebar_id = $sbid, item_order = $order WHERE item_id = $block_id;");
- if ( !$q )
- $db->die_json();
- }
- }
-
- return print enano_json_encode(array(
- 'mode' => 'success'
- ));
- }
-
- $template->preload_js(array('l10n', 'jquery', 'jquery-ui'));
- $template->add_header('');
-
- $template->header();
-
- if(isset($_POST['save']))
- {
- // Write the new block order to the database
- // The only way to do this is with tons of queries (one per block + one select query at the start to count everything) but afaik its safe...
- // Anyone know a better way to do this?
- $q = $db->sql_query('SELECT item_order,item_id,sidebar_id FROM '.table_prefix.'sidebar ORDER BY sidebar_id ASC, item_order ASC;');
- if ( !$q )
- {
- $db->_die('The sidebar order data could not be selected.');
- }
- $orders = Array();
- while($row = $db->fetchrow())
- {
- $orders[] = Array(
- count($orders),
- $row['item_id'],
- $row['sidebar_id'],
- );
- }
- $db->free_result();
-
- // We now have an array with each sidebar ID in its respective order. Explode the order string in $_POST['order_(left|right)'] and use it to build a set of queries.
- $ol = explode(',', $_POST['order_left']);
- $odr = explode(',', $_POST['order_right']);
- $om = array_merge($ol, $odr);
- unset($ol, $odr);
- $queries = Array();
- foreach($orders as $k => $v)
- {
- $queries[] = 'UPDATE '.table_prefix.'sidebar SET item_order='.intval($om[$k]).' WHERE item_id='.intval($v[1]).';';
- }
- foreach($queries as $sql)
- {
- $q = $db->sql_query($sql);
- if(!$q)
- {
- $t = $db->get_error();
- echo $t;
- $template->footer();
- exit;
- }
- }
- $cache->purge('anon_sidebar');
- echo '
' . $lang->get('sbedit_msg_order_update_success') . '
';
- }
- elseif(isset($_POST['create']))
- {
- switch((int)$_POST['type'])
- {
- case BLOCK_WIKIFORMAT:
- $content = $_POST['wikiformat_content'];
- break;
- case BLOCK_TEMPLATEFORMAT:
- $content = $_POST['templateformat_content'];
- break;
- case BLOCK_HTML:
- $content = $_POST['html_content'];
- break;
- case BLOCK_PHP:
- $content = $_POST['php_content'];
- break;
- case BLOCK_PLUGIN:
- $content = $_POST['plugin_id'];
- break;
- }
-
- if ( defined('ENANO_DEMO_MODE') )
- {
- // Sanitize the HTML
- $content = sanitize_html($content, true);
- }
-
- if ( defined('ENANO_DEMO_MODE') && intval($_POST['type']) == BLOCK_PHP )
- {
- echo '
' . $lang->get('sbedit_err_demo_php_disable') . '
';
- $_POST['php_content'] = '?><Nulled>';
- $content = $_POST['php_content'];
- }
-
- // Get the value of item_order
-
- $q = $db->sql_query('SELECT * FROM '.table_prefix.'sidebar WHERE sidebar_id='.intval($_POST['sidebar_id']).';');
- if(!$q) $db->_die('The order number could not be selected');
- $io = $db->numrows();
-
- $db->free_result();
-
- $q = 'INSERT INTO '.table_prefix.'sidebar(block_name, block_type, sidebar_id, block_content, item_order) VALUES ( \''.$db->escape($_POST['title']).'\', \''.$db->escape($_POST['type']).'\', \''.$db->escape($_POST['sidebar_id']).'\', \''.$db->escape($content).'\', '.$io.' );';
- $result = $db->sql_query($q);
- if(!$result)
- {
- echo $db->get_error();
- $template->footer();
- exit;
- }
-
- $cache->purge('anon_sidebar');
- echo '
' . $lang->get('sbedit_msg_item_added') . '
';
-
- }
-
- if(isset($_GET['action']) && isset($_GET['id']))
- {
- if(!preg_match('#^([0-9]*)$#', $_GET['id']))
- {
- echo '
Error with action: $_GET["id"] was not an integer, aborting to prevent SQL injection
';
- }
- switch($_GET['action'])
- {
- case 'new':
- ?>
-
-
-
-
-
-
- footer();
- return;
- break;
- case 'move':
- $cache->purge('anon_sidebar');
- if( !isset($_GET['side']) || ( isset($_GET['side']) && !preg_match('#^([0-9]+)$#', $_GET['side']) ) )
- {
- echo '
$_GET[\'side\'] contained an SQL injection attempt
';
- break;
- }
- $query = $db->sql_query('UPDATE '.table_prefix.'sidebar SET sidebar_id=' . $db->escape($_GET['side']) . ' WHERE item_id=' . intval($_GET['id']) . ';');
- if(!$query)
- {
- echo $db->get_error();
- $template->footer();
- exit;
- }
- echo '
' . $lang->get('sbedit_msg_block_moved') . '
';
- break;
- case 'delete':
- $query = $db->sql_query('DELETE FROM '.table_prefix.'sidebar WHERE item_id=' . intval($_GET['id']) . ';'); // Already checked for injection attempts ;-)
- if(!$query)
- {
- echo $db->get_error();
- $template->footer();
- exit;
- }
- $cache->purge('anon_sidebar');
- if(isset($_GET['ajax']))
- {
- die('GOOD');
- }
- echo '
' . $lang->get('sbedit_msg_block_deleted') . '
';
- break;
- case 'disenable';
- $q = $db->sql_query('SELECT item_enabled FROM '.table_prefix.'sidebar WHERE item_id=' . intval($_GET['id']) . ';');
- if(!$q)
- {
- echo $db->get_error();
- $template->footer();
- exit;
- }
- $r = $db->fetchrow();
- $db->free_result();
- $e = ( $r['item_enabled'] == 1 ) ? '0' : '1';
- $q = $db->sql_query('UPDATE '.table_prefix.'sidebar SET item_enabled='.$e.' WHERE item_id=' . intval($_GET['id']) . ';');
- if(!$q)
- {
- echo $db->get_error();
- $template->footer();
- exit;
- }
- if(isset($_GET['ajax']))
- {
- die('GOOD');
- }
- break;
- case 'rename';
- $newname = $db->escape($_POST['newname']);
- $q = $db->sql_query('UPDATE '.table_prefix.'sidebar SET block_name=\''.$newname.'\' WHERE item_id=' . intval($_GET['id']) . ';');
- if(!$q)
- {
- echo $db->get_error();
- $template->footer();
- exit;
- }
- if(isset($_GET['ajax']))
- {
- die('GOOD');
- }
- break;
- case 'getsource':
- $q = $db->sql_query('SELECT block_content,block_type FROM '.table_prefix.'sidebar WHERE item_id=' . intval($_GET['id']) . ';');
- if(!$q)
- {
- echo $db->get_error();
- $template->footer();
- exit;
- }
- $r = $db->fetchrow();
- $db->free_result();
- $cache->purge('anon_sidebar');
-
- if($r['block_type'] == BLOCK_PLUGIN) die('HOUSTON_WE_HAVE_A_PLUGIN');
- die($r['block_content']);
- break;
- case 'save':
- if ( defined('ENANO_DEMO_MODE') )
- {
- $q = $db->sql_query('SELECT block_type FROM '.table_prefix.'sidebar WHERE item_id=' . intval($_GET['id']) . ';');
- if(!$q)
- {
- echo 'var status=unescape(\''.hexencode($db->get_error()).'\');';
- exit;
- }
- $row = $db->fetchrow();
- if ( $row['block_type'] == BLOCK_PHP )
- {
- $_POST['content'] = '?><Nulled>';
- }
- else
- {
- $_POST['content'] = sanitize_html($_POST['content'], true);
- }
- }
- $q = $db->sql_query('UPDATE '.table_prefix.'sidebar SET block_content=\''.$db->escape(rawurldecode($_POST['content'])).'\' WHERE item_id=' . intval($_GET['id']) . ';');
- if(!$q)
- {
- echo 'var status=unescape(\''.hexencode($db->get_error()).'\');';
- exit;
- }
- echo 'GOOD';
- return;
-
- break;
- }
- }
-
- ?>
-
- get('sbedit_header_msg', array( 'create_link' => makeUrlNS('Special', 'EditSidebar', 'action=new&id=0', true) )); ?>
-
- sql_query('SELECT item_id, sidebar_id, block_name, block_type, block_content, item_enabled FROM ' . table_prefix . "sidebar ORDER BY sidebar_id ASC, item_order ASC;");
- if ( !$q )
- $db->_die();
-
- $switched_to_right = false;
-
- echo '
| ';
- while ( $row = $db->fetchrow() )
- {
- if ( $row['sidebar_id'] == SIDEBAR_RIGHT && !$switched_to_right )
- {
- echo ' | ';
- $switched_to_right = true;
- }
- $disabled_class = ( $row['item_enabled'] ) ? '' : ' disabled';
- echo '
-
- ' . htmlspecialchars($template->compile_template_text_post($row['block_name'])) . '
-
- ';
- ?>
-
- extract_vars('toolbar.tpl');
- $parser_start = $template->makeParserText($toolbarvars['toolbar_vert_start']);
- echo $parser_start->run();
-
- $button = $template->makeParserText($toolbarvars['toolbar_vert_button']);
- $label = $template->makeParserText($toolbarvars['toolbar_vert_label']);
-
- $type = '';
- switch($row['block_type'])
- {
- case BLOCK_WIKIFORMAT: $type .= $lang->get('sbedit_block_type_wiki'); break;
- case BLOCK_TEMPLATEFORMAT: $type .= $lang->get('sbedit_block_type_tpl'); break;
- case BLOCK_HTML: $type .= $lang->get('sbedit_block_type_html'); break;
- case BLOCK_PHP: $type .= $lang->get('sbedit_block_type_php'); break;
- case BLOCK_PLUGIN: $type .= $lang->get('sbedit_block_type_plugin'); break;
- default: $type .= '$&#@'; break;
- }
- $type .= '';
- if ( $row['block_type'] == BLOCK_PLUGIN )
- {
- $type .= ': ' . $lang->get($row['block_content']);
- }
-
- $label->assign_vars(array(
- 'TITLE' => $type
- ));
- echo $label->run();
-
- // edit
- if ( $row['block_type'] != BLOCK_PLUGIN )
- {
- $button->assign_vars(array(
- 'TITLE' => $lang->get('sbedit_tip_edit'),
- 'FLAGS' => 'href="#" onclick="sbedit_open_editor(this); return false;"',
- 'IMAGE' => cdnPath . '/images/edit.png'
- ));
- echo $button->run();
- }
-
- // delete
- $button->assign_vars(array(
- 'TITLE' => $lang->get('sbedit_tip_delete'),
- 'FLAGS' => 'href="#" onclick="sbedit_delete_block(this); return false;"',
- 'IMAGE' => cdnPath . '/images/delete.png'
- ));
- echo $button->run();
-
- // rename
- $button->assign_vars(array(
- 'TITLE' => $lang->get('sbedit_tip_rename'),
- 'FLAGS' => 'href="#" onclick="sbedit_rename_block(this); return false;"',
- 'IMAGE' => cdnPath . '/images/rename.png'
- ));
- echo $button->run();
-
- // disenable
- $button->assign_vars(array(
- 'TITLE' => $lang->get('sbedit_tip_disenable'),
- 'FLAGS' => 'href="#" onclick="sbedit_disenable_block(this); return false;"',
- 'IMAGE' => cdnPath . '/images/disenable.png'
- ));
- echo $button->run();
-
- $parser_end = $template->makeParserText($toolbarvars['toolbar_vert_end']);
- echo $parser_end->run();
- ?>
-
- ';
- }
-
- if ( !$switched_to_right )
- echo ' | ';
-
- echo ' |
';
- }
-
- $template->footer();
+ global $db, $session, $paths, $template, $plugins; // Common objects
+ global $lang;
+ global $cache;
+
+ if($session->auth_level < USER_LEVEL_ADMIN)
+ {
+ redirect(makeUrlNS('Special', 'Login/'.$paths->page, 'level='.USER_LEVEL_ADMIN), '', '', false);
+ exit;
+ }
+ else
+ {
+ if ( isset($_GET['update_order']) )
+ {
+ header('Content-type: text/javascript');
+ $order = @$_POST['order'];
+ try
+ {
+ $order = enano_json_decode($order);
+ }
+ catch ( Zend_Json_Exception $e )
+ {
+ return print enano_json_encode(array(
+ 'mode' => 'error',
+ 'error' => 'bad order'
+ ));
+ }
+
+ foreach ( $order as $sidebar_id => $blocks )
+ {
+ foreach ( $blocks as $order => $block_id )
+ {
+ $sbid = intval($sidebar_id);
+ $order = intval($order);
+ $block_id = intval($block_id);
+ $q = $db->sql_query('UPDATE ' . table_prefix . "sidebar SET sidebar_id = $sbid, item_order = $order WHERE item_id = $block_id;");
+ if ( !$q )
+ $db->die_json();
+ }
+ }
+
+ return print enano_json_encode(array(
+ 'mode' => 'success'
+ ));
+ }
+
+ $template->preload_js(array('l10n', 'jquery', 'jquery-ui'));
+ $template->add_header('');
+
+ $template->header();
+
+ if(isset($_POST['save']))
+ {
+ // Write the new block order to the database
+ // The only way to do this is with tons of queries (one per block + one select query at the start to count everything) but afaik its safe...
+ // Anyone know a better way to do this?
+ $q = $db->sql_query('SELECT item_order,item_id,sidebar_id FROM '.table_prefix.'sidebar ORDER BY sidebar_id ASC, item_order ASC;');
+ if ( !$q )
+ {
+ $db->_die('The sidebar order data could not be selected.');
+ }
+ $orders = Array();
+ while($row = $db->fetchrow())
+ {
+ $orders[] = Array(
+ count($orders),
+ $row['item_id'],
+ $row['sidebar_id'],
+ );
+ }
+ $db->free_result();
+
+ // We now have an array with each sidebar ID in its respective order. Explode the order string in $_POST['order_(left|right)'] and use it to build a set of queries.
+ $ol = explode(',', $_POST['order_left']);
+ $odr = explode(',', $_POST['order_right']);
+ $om = array_merge($ol, $odr);
+ unset($ol, $odr);
+ $queries = Array();
+ foreach($orders as $k => $v)
+ {
+ $queries[] = 'UPDATE '.table_prefix.'sidebar SET item_order='.intval($om[$k]).' WHERE item_id='.intval($v[1]).';';
+ }
+ foreach($queries as $sql)
+ {
+ $q = $db->sql_query($sql);
+ if(!$q)
+ {
+ $t = $db->get_error();
+ echo $t;
+ $template->footer();
+ exit;
+ }
+ }
+ $cache->purge('anon_sidebar');
+ echo '
' . $lang->get('sbedit_msg_order_update_success') . '
';
+ }
+ elseif(isset($_POST['create']))
+ {
+ switch((int)$_POST['type'])
+ {
+ case BLOCK_WIKIFORMAT:
+ $content = $_POST['wikiformat_content'];
+ break;
+ case BLOCK_TEMPLATEFORMAT:
+ $content = $_POST['templateformat_content'];
+ break;
+ case BLOCK_HTML:
+ $content = $_POST['html_content'];
+ break;
+ case BLOCK_PHP:
+ $content = $_POST['php_content'];
+ break;
+ case BLOCK_PLUGIN:
+ $content = $_POST['plugin_id'];
+ break;
+ }
+
+ if ( defined('ENANO_DEMO_MODE') )
+ {
+ // Sanitize the HTML
+ $content = sanitize_html($content, true);
+ }
+
+ if ( defined('ENANO_DEMO_MODE') && intval($_POST['type']) == BLOCK_PHP )
+ {
+ echo '
' . $lang->get('sbedit_err_demo_php_disable') . '
';
+ $_POST['php_content'] = '?><Nulled>';
+ $content = $_POST['php_content'];
+ }
+
+ // Get the value of item_order
+
+ $q = $db->sql_query('SELECT * FROM '.table_prefix.'sidebar WHERE sidebar_id='.intval($_POST['sidebar_id']).';');
+ if(!$q) $db->_die('The order number could not be selected');
+ $io = $db->numrows();
+
+ $db->free_result();
+
+ $q = 'INSERT INTO '.table_prefix.'sidebar(block_name, block_type, sidebar_id, block_content, item_order) VALUES ( \''.$db->escape($_POST['title']).'\', \''.$db->escape($_POST['type']).'\', \''.$db->escape($_POST['sidebar_id']).'\', \''.$db->escape($content).'\', '.$io.' );';
+ $result = $db->sql_query($q);
+ if(!$result)
+ {
+ echo $db->get_error();
+ $template->footer();
+ exit;
+ }
+
+ $cache->purge('anon_sidebar');
+ echo '
' . $lang->get('sbedit_msg_item_added') . '
';
+
+ }
+
+ if(isset($_GET['action']) && isset($_GET['id']))
+ {
+ if(!preg_match('#^([0-9]*)$#', $_GET['id']))
+ {
+ echo '
Error with action: $_GET["id"] was not an integer, aborting to prevent SQL injection
';
+ }
+ switch($_GET['action'])
+ {
+ case 'new':
+ ?>
+
+
+
+
+
+
+ footer();
+ return;
+ break;
+ case 'move':
+ $cache->purge('anon_sidebar');
+ if( !isset($_GET['side']) || ( isset($_GET['side']) && !preg_match('#^([0-9]+)$#', $_GET['side']) ) )
+ {
+ echo '
$_GET[\'side\'] contained an SQL injection attempt
';
+ break;
+ }
+ $query = $db->sql_query('UPDATE '.table_prefix.'sidebar SET sidebar_id=' . $db->escape($_GET['side']) . ' WHERE item_id=' . intval($_GET['id']) . ';');
+ if(!$query)
+ {
+ echo $db->get_error();
+ $template->footer();
+ exit;
+ }
+ echo '
' . $lang->get('sbedit_msg_block_moved') . '
';
+ break;
+ case 'delete':
+ $query = $db->sql_query('DELETE FROM '.table_prefix.'sidebar WHERE item_id=' . intval($_GET['id']) . ';'); // Already checked for injection attempts ;-)
+ if(!$query)
+ {
+ echo $db->get_error();
+ $template->footer();
+ exit;
+ }
+ $cache->purge('anon_sidebar');
+ if(isset($_GET['ajax']))
+ {
+ die('GOOD');
+ }
+ echo '
' . $lang->get('sbedit_msg_block_deleted') . '
';
+ break;
+ case 'disenable';
+ $q = $db->sql_query('SELECT item_enabled FROM '.table_prefix.'sidebar WHERE item_id=' . intval($_GET['id']) . ';');
+ if(!$q)
+ {
+ echo $db->get_error();
+ $template->footer();
+ exit;
+ }
+ $r = $db->fetchrow();
+ $db->free_result();
+ $e = ( $r['item_enabled'] == 1 ) ? '0' : '1';
+ $q = $db->sql_query('UPDATE '.table_prefix.'sidebar SET item_enabled='.$e.' WHERE item_id=' . intval($_GET['id']) . ';');
+ if(!$q)
+ {
+ echo $db->get_error();
+ $template->footer();
+ exit;
+ }
+ if(isset($_GET['ajax']))
+ {
+ die('GOOD');
+ }
+ break;
+ case 'rename';
+ $newname = $db->escape($_POST['newname']);
+ $q = $db->sql_query('UPDATE '.table_prefix.'sidebar SET block_name=\''.$newname.'\' WHERE item_id=' . intval($_GET['id']) . ';');
+ if(!$q)
+ {
+ echo $db->get_error();
+ $template->footer();
+ exit;
+ }
+ if(isset($_GET['ajax']))
+ {
+ die('GOOD');
+ }
+ break;
+ case 'getsource':
+ $q = $db->sql_query('SELECT block_content,block_type FROM '.table_prefix.'sidebar WHERE item_id=' . intval($_GET['id']) . ';');
+ if(!$q)
+ {
+ echo $db->get_error();
+ $template->footer();
+ exit;
+ }
+ $r = $db->fetchrow();
+ $db->free_result();
+ $cache->purge('anon_sidebar');
+
+ if($r['block_type'] == BLOCK_PLUGIN) die('HOUSTON_WE_HAVE_A_PLUGIN');
+ die($r['block_content']);
+ break;
+ case 'save':
+ if ( defined('ENANO_DEMO_MODE') )
+ {
+ $q = $db->sql_query('SELECT block_type FROM '.table_prefix.'sidebar WHERE item_id=' . intval($_GET['id']) . ';');
+ if(!$q)
+ {
+ echo 'var status=unescape(\''.hexencode($db->get_error()).'\');';
+ exit;
+ }
+ $row = $db->fetchrow();
+ if ( $row['block_type'] == BLOCK_PHP )
+ {
+ $_POST['content'] = '?><Nulled>';
+ }
+ else
+ {
+ $_POST['content'] = sanitize_html($_POST['content'], true);
+ }
+ }
+ $q = $db->sql_query('UPDATE '.table_prefix.'sidebar SET block_content=\''.$db->escape(rawurldecode($_POST['content'])).'\' WHERE item_id=' . intval($_GET['id']) . ';');
+ if(!$q)
+ {
+ echo 'var status=unescape(\''.hexencode($db->get_error()).'\');';
+ exit;
+ }
+ echo 'GOOD';
+ return;
+
+ break;
+ }
+ }
+
+ ?>
+
+ get('sbedit_header_msg', array( 'create_link' => makeUrlNS('Special', 'EditSidebar', 'action=new&id=0', true) )); ?>
+
+ sql_query('SELECT item_id, sidebar_id, block_name, block_type, block_content, item_enabled FROM ' . table_prefix . "sidebar ORDER BY sidebar_id ASC, item_order ASC;");
+ if ( !$q )
+ $db->_die();
+
+ $switched_to_right = false;
+
+ echo '
| ';
+ while ( $row = $db->fetchrow() )
+ {
+ if ( $row['sidebar_id'] == SIDEBAR_RIGHT && !$switched_to_right )
+ {
+ echo ' | ';
+ $switched_to_right = true;
+ }
+ $disabled_class = ( $row['item_enabled'] ) ? '' : ' disabled';
+ echo '
+
+ ' . htmlspecialchars($template->compile_template_text_post($row['block_name'])) . '
+
+ ';
+ ?>
+
+ extract_vars('toolbar.tpl');
+ $parser_start = $template->makeParserText($toolbarvars['toolbar_vert_start']);
+ echo $parser_start->run();
+
+ $button = $template->makeParserText($toolbarvars['toolbar_vert_button']);
+ $label = $template->makeParserText($toolbarvars['toolbar_vert_label']);
+
+ $type = '';
+ switch($row['block_type'])
+ {
+ case BLOCK_WIKIFORMAT: $type .= $lang->get('sbedit_block_type_wiki'); break;
+ case BLOCK_TEMPLATEFORMAT: $type .= $lang->get('sbedit_block_type_tpl'); break;
+ case BLOCK_HTML: $type .= $lang->get('sbedit_block_type_html'); break;
+ case BLOCK_PHP: $type .= $lang->get('sbedit_block_type_php'); break;
+ case BLOCK_PLUGIN: $type .= $lang->get('sbedit_block_type_plugin'); break;
+ default: $type .= '$&#@'; break;
+ }
+ $type .= '';
+ if ( $row['block_type'] == BLOCK_PLUGIN )
+ {
+ $type .= ': ' . $lang->get($row['block_content']);
+ }
+
+ $label->assign_vars(array(
+ 'TITLE' => $type
+ ));
+ echo $label->run();
+
+ // edit
+ if ( $row['block_type'] != BLOCK_PLUGIN )
+ {
+ $button->assign_vars(array(
+ 'TITLE' => $lang->get('sbedit_tip_edit'),
+ 'FLAGS' => 'href="#" onclick="sbedit_open_editor(this); return false;"',
+ 'IMAGE' => cdnPath . '/images/edit.png'
+ ));
+ echo $button->run();
+ }
+
+ // delete
+ $button->assign_vars(array(
+ 'TITLE' => $lang->get('sbedit_tip_delete'),
+ 'FLAGS' => 'href="#" onclick="sbedit_delete_block(this); return false;"',
+ 'IMAGE' => cdnPath . '/images/delete.png'
+ ));
+ echo $button->run();
+
+ // rename
+ $button->assign_vars(array(
+ 'TITLE' => $lang->get('sbedit_tip_rename'),
+ 'FLAGS' => 'href="#" onclick="sbedit_rename_block(this); return false;"',
+ 'IMAGE' => cdnPath . '/images/rename.png'
+ ));
+ echo $button->run();
+
+ // disenable
+ $button->assign_vars(array(
+ 'TITLE' => $lang->get('sbedit_tip_disenable'),
+ 'FLAGS' => 'href="#" onclick="sbedit_disenable_block(this); return false;"',
+ 'IMAGE' => cdnPath . '/images/disenable.png'
+ ));
+ echo $button->run();
+
+ $parser_end = $template->makeParserText($toolbarvars['toolbar_vert_end']);
+ echo $parser_end->run();
+ ?>
+
+ ';
+ }
+
+ if ( !$switched_to_right )
+ echo ' | ';
+
+ echo ' |
';
+ }
+
+ $template->footer();
}
?>
\ No newline at end of file