<?php\r
+/*\r
+ * Nucleus: PHP/MySQL Weblog CMS (http://nucleuscms.org/)\r
+ * Copyright (C) 2002-2009 The Nucleus Group\r
+ *\r
+ * This program is free software; you can redistribute it and/or\r
+ * modify it under the terms of the GNU General Public License\r
+ * as published by the Free Software Foundation; either version 2\r
+ * of the License, or (at your option) any later version.\r
+ * (see nucleus/documentation/index.html#license for more info)\r
+ */\r
/**\r
- * Nucleus: PHP/MySQL Weblog CMS (http://nucleuscms.org/)\r
- * Copyright (C) 2002-2005 The Nucleus Group\r
- *\r
- * This program is free software; you can redistribute it and/or\r
- * modify it under the terms of the GNU General Public License\r
- * as published by the Free Software Foundation; either version 2\r
- * of the License, or (at your option) any later version.\r
- * (see nucleus/documentation/index.html#license for more info)\r
- *\r
- * The code for the Nucleus admin area\r
- *\r
- * $Id: ADMIN.php,v 1.6 2005-08-13 07:28:38 kimitake Exp $\r
- * $NucleusJP: ADMIN.php,v 1.5 2005/04/19 06:58:03 kimitake Exp $\r
- */\r
+ * The code for the Nucleus admin area\r
+ *\r
+ * @license http://nucleuscms.org/license.txt GNU General Public License\r
+ * @copyright Copyright (C) 2002-2009 The Nucleus Group\r
+ * @version $Id$\r
+ * @version $NucleusJP: ADMIN.php,v 1.21.2.4 2007/10/30 19:04:24 kmorimatsu Exp $\r
+ */\r
+\r
+if ( !function_exists('requestVar') ) exit;\r
+require_once dirname(__FILE__) . '/showlist.php';\r
\r
+/**\r
+ * Builds the admin area and executes admin actions\r
+ */\r
class ADMIN {\r
\r
- // action currently being executed ($action=xxxx -> action_xxxx method)\r
+ /**\r
+ * @var string $action action currently being executed ($action=xxxx -> action_xxxx method)\r
+ */\r
var $action;\r
\r
+ /**\r
+ * Class constructor\r
+ */\r
function ADMIN() {\r
\r
}\r
\r
/**\r
- * Executes an action\r
- *\r
- * @param $action\r
- * action to be performed\r
- */\r
+ * Executes an action\r
+ *\r
+ * @param string $action action to be performed\r
+ */\r
function action($action) {\r
global $CONF, $manager;\r
\r
'' => 'overview'\r
);\r
\r
- if ($alias[$action])\r
+ if (isset($alias[$action]))\r
$action = $alias[$action];\r
\r
$methodName = 'action_' . $action;\r
// check ticket. All actions need a ticket, unless they are considered to be safe (a safe action\r
// is an action that requires user interaction before something is actually done)\r
// all safe actions are in this array:\r
- $aActionsNotToCheck = array('showlogin', 'login', 'overview', 'itemlist', 'blogcommentlist', 'bookmarklet', 'blogsettings', 'banlist', 'deleteblog', 'editmembersettings', 'browseownitems', 'browseowncomments', 'createitem', 'itemedit', 'itemmove', 'categoryedit', 'categorydelete', 'manage', 'actionlog', 'settingsedit', 'backupoverview', 'pluginlist', 'createnewlog', 'usermanagement', 'skinoverview', 'templateoverview', 'skinieoverview', 'itemcommentlist', 'commentedit', 'commentdelete', 'banlistnewfromitem', 'banlistdelete', 'itemdelete', 'manageteam', 'teamdelete', 'banlistnew', 'memberedit', 'memberdelete', 'pluginhelp', 'pluginoptions', 'plugindelete', 'skinedittype', 'skindelete', 'skinedit', 'templateedit', 'templatedelete', 'activate');\r
+ $aActionsNotToCheck = array(\r
+ 'showlogin',\r
+ 'login',\r
+ 'overview',\r
+ 'itemlist',\r
+ 'blogcommentlist',\r
+ 'bookmarklet',\r
+ 'blogsettings',\r
+ 'banlist',\r
+ 'deleteblog',\r
+ 'editmembersettings',\r
+ 'browseownitems',\r
+ 'browseowncomments',\r
+ 'createitem',\r
+ 'itemedit',\r
+ 'itemmove',\r
+ 'categoryedit',\r
+ 'categorydelete',\r
+ 'manage',\r
+ 'actionlog',\r
+ 'settingsedit',\r
+ 'backupoverview',\r
+ 'pluginlist',\r
+ 'createnewlog',\r
+ 'usermanagement',\r
+ 'skinoverview',\r
+ 'templateoverview',\r
+ 'skinieoverview',\r
+ 'itemcommentlist',\r
+ 'commentedit',\r
+ 'commentdelete',\r
+ 'banlistnewfromitem',\r
+ 'banlistdelete',\r
+ 'itemdelete',\r
+ 'manageteam',\r
+ 'teamdelete',\r
+ 'banlistnew',\r
+ 'memberedit',\r
+ 'memberdelete',\r
+ 'pluginhelp',\r
+ 'pluginoptions',\r
+ 'plugindelete',\r
+ 'skinedittype',\r
+ 'skinremovetype',\r
+ 'skindelete',\r
+ 'skinedit',\r
+ 'templateedit',\r
+ 'templatedelete',\r
+ 'activate',\r
+ 'systemoverview'\r
+ );\r
/*\r
// the rest of the actions needs to be checked\r
$aActionsToCheck = array('additem', 'itemupdate', 'itemmoveto', 'categoryupdate', 'categorydeleteconfirm', 'itemdeleteconfirm', 'commentdeleteconfirm', 'teamdeleteconfirm', 'memberdeleteconfirm', 'templatedeleteconfirm', 'skindeleteconfirm', 'banlistdeleteconfirm', 'plugindeleteconfirm', 'batchitem', 'batchcomment', 'batchmember', 'batchcategory', 'batchteam', 'regfile', 'commentupdate', 'banlistadd', 'changemembersettings', 'clearactionlog', 'settingsupdate', 'blogsettingsupdate', 'categorynew', 'teamchangeadmin', 'teamaddmember', 'memberadd', 'addnewlog', 'addnewlog2', 'backupcreate', 'backuprestore', 'pluginup', 'plugindown', 'pluginupdate', 'pluginadd', 'pluginoptionsupdate', 'skinupdate', 'skinclone', 'skineditgeneral', 'templateclone', 'templatenew', 'templateupdate', 'skinieimport', 'skinieexport', 'skiniedoimport', 'skinnew', 'deleteblogconfirm', 'sendping', 'rawping', 'activatesetpwd');\r
if (method_exists($this, $methodName))\r
call_user_func(array(&$this, $methodName));\r
else\r
- $this->error(_BADACTION . " ($action)");\r
+ $this->error(_BADACTION . htmlspecialchars(" ($action)"));\r
\r
}\r
\r
-\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_showlogin() {\r
global $error;\r
$this->action_login($error);\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_login($msg = '', $passvars = 1) {\r
global $member;\r
\r
?>\r
\r
<form action="index.php" method="post"><p>\r
- <?php echo _LOGIN_NAME?>: <br /><input name="login" tabindex="10" />\r
+ <?php echo _LOGIN_NAME; ?> <br /><input name="login" tabindex="10" />\r
<br />\r
- <?php echo _LOGIN_PASSWORD?>: <br /><input name="password" tabindex="20" type="password" />\r
+ <?php echo _LOGIN_PASSWORD; ?> <br /><input name="password" tabindex="20" type="password" />\r
<br />\r
<input name="action" value="login" type="hidden" />\r
<br />\r
\r
\r
/**\r
- * provides a screen with the overview of the actions available\r
- */\r
+ * provides a screen with the overview of the actions available\r
+ * @todo document parameter\r
+ */\r
function action_overview($msg = '') {\r
global $member;\r
\r
if (($showAll != 'yes') && ($member->isAdmin())) {\r
$total = quickQuery('SELECT COUNT(*) as result FROM ' . sql_table('blog'));\r
if ($total > $amount)\r
- echo '<p><a href="index.php?action=overview&showall=yes">Show all blogs</a></p>';\r
+ echo '<p><a href="index.php?action=overview&showall=yes">' . _OVERVIEW_SHOWALL . '</a></p>';\r
}\r
\r
if ($amount == 0)\r
$this->pagefoot();\r
}\r
\r
- // returns a link to a weblog (takes BLOG object as parameter)\r
+ /**\r
+ * Returns a link to a weblog\r
+ * @param object BLOG\r
+ */\r
function bloglink(&$blog) {\r
- return '<a href="'.htmlspecialchars($blog->getURL()).'" title="'._BLOGLIST_TT_VISIT.'">'.$blog->getName() .'</a>';\r
+ return '<a href="'.htmlspecialchars($blog->getURL()).'" title="'._BLOGLIST_TT_VISIT.'">'. htmlspecialchars( $blog->getName() ) .'</a>';\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_manage($msg = '') {\r
global $member;\r
\r
$this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_itemlist($blogid = '') {\r
- global $member, $manager;\r
+ global $member, $manager, $CONF;\r
\r
if ($blogid == '')\r
$blogid = intRequestVar('blogid');\r
// amount of items to show\r
if (postVar('amount'))\r
$amount = intPostVar('amount');\r
- else\r
- $amount = 10;\r
+ else {\r
+ $amount = intval($CONF['DefaultListSize']);\r
+ if ($amount < 1)\r
+ $amount = 10;\r
+ }\r
\r
$search = postVar('search'); // search through items\r
\r
$template['content'] = 'itemlist';\r
$template['now'] = $blog->getCorrectTime(time());\r
\r
-\r
+ $manager->loadClass("ENCAPSULATE");\r
$navList =& new NAVLIST('itemlist', $start, $amount, 0, 1000, $blogid, $search, 0);\r
$navList->showBatchList('item',$query,'table',$template);\r
\r
$this->pagefoot();\r
}\r
\r
-\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_batchitem() {\r
global $member, $manager;\r
\r
$error = $this->moveOneItem($itemid, $destCatid);\r
break;\r
default:\r
- $error = _BATCH_UNKNOWN . $action;\r
+ $error = _BATCH_UNKNOWN . htmlspecialchars($action);\r
}\r
\r
echo '<b>',($error ? $error : _BATCH_SUCCESS),'</b>';\r
\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_batchcomment() {\r
global $member;\r
\r
$error = $this->deleteOneComment($commentid);\r
break;\r
default:\r
- $error = _BATCH_UNKNOWN . $action;\r
+ $error = _BATCH_UNKNOWN . htmlspecialchars($action);\r
}\r
\r
echo '<b>',($error ? $error : _BATCH_SUCCESS),'</b>';\r
\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_batchmember() {\r
global $member;\r
\r
sql_query('UPDATE ' . sql_table('member') .' SET madmin=0 WHERE mnumber='.$memberid);\r
break;\r
default:\r
- $error = _BATCH_UNKNOWN . $action;\r
+ $error = _BATCH_UNKNOWN . htmlspecialchars($action);\r
}\r
\r
echo '<b>',($error ? $error : _BATCH_SUCCESS),'</b>';\r
\r
}\r
\r
-\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_batchteam() {\r
global $member;\r
\r
sql_query('UPDATE '.sql_table('team').' SET tadmin=0 WHERE tblog='.$blogid.' and tmember='.$memberid);\r
break;\r
default:\r
- $error = _BATCH_UNKNOWN . $action;\r
+ $error = _BATCH_UNKNOWN . htmlspecialchars($action);\r
}\r
\r
echo '<b>',($error ? $error : _BATCH_SUCCESS),'</b>';\r
\r
}\r
\r
-\r
-\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_batchcategory() {\r
global $member, $manager;\r
\r
$error = $this->moveOneCategory($catid, $destBlogId);\r
break;\r
default:\r
- $error = _BATCH_UNKNOWN . $action;\r
+ $error = _BATCH_UNKNOWN . htmlspecialchars($action);\r
}\r
\r
echo '<b>',($error ? 'Error: '.$error : _BATCH_SUCCESS),'</b>';\r
\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function batchMoveSelectDestination($type, $ids) {\r
global $manager;\r
$this->pagehead();\r
exit;\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function batchMoveCategorySelectDestination($type, $ids) {\r
global $manager;\r
$this->pagehead();\r
exit;\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function batchAskDeleteConfirmation($type, $ids) {\r
global $manager;\r
\r
\r
\r
/**\r
- * Inserts a HTML select element with choices for all categories to which the current\r
- * member has access\r
- */\r
+ * Inserts a HTML select element with choices for all categories to which the current\r
+ * member has access\r
+ * @see function selectBlog\r
+ */\r
function selectBlogCategory($name, $selected = 0, $tabindex = 0, $showNewCat = 0, $iForcedBlogInclude = -1) {\r
ADMIN::selectBlog($name, 'category', $selected, $tabindex, $showNewCat, $iForcedBlogInclude);\r
}\r
\r
/**\r
- * Inserts a HTML select element with choices for all blogs to which the user has access\r
- * mode = 'blog' => shows blognames and values are blogids\r
- * mode = 'category' => show category names and values are catids\r
- *\r
- * @param $iForcedBlogInclude\r
- * ID of a blog that always needs to be included, without checking if the member is on the blog team (-1 = none)\r
- */\r
+ * Inserts a HTML select element with choices for all blogs to which the user has access\r
+ * mode = 'blog' => shows blognames and values are blogids\r
+ * mode = 'category' => show category names and values are catids\r
+ *\r
+ * @param $iForcedBlogInclude\r
+ * ID of a blog that always needs to be included, without checking if the\r
+ * member is on the blog team (-1 = none)\r
+ * @todo document parameters\r
+ */\r
function selectBlog($name, $mode='blog', $selected = 0, $tabindex = 0, $showNewCat = 0, $iForcedBlogInclude = -1) {\r
global $member, $CONF;\r
\r
\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_browseownitems() {\r
- global $member;\r
+ global $member, $manager, $CONF;\r
\r
$this->pagehead();\r
\r
\r
// start index\r
if (postVar('start'))\r
- $start = postVar('start');\r
+ $start = intPostVar('start');\r
else\r
$start = 0;\r
\r
// amount of items to show\r
if (postVar('amount'))\r
- $amount = postVar('amount');\r
- else\r
- $amount = 10;\r
+ $amount = intPostVar('amount');\r
+ else {\r
+ $amount = intval($CONF['DefaultListSize']);\r
+ if ($amount < 1)\r
+ $amount = 10;\r
+ }\r
\r
$search = postVar('search'); // search through items\r
\r
$template['content'] = 'itemlist';\r
$template['now'] = time();\r
\r
- $navList =& new NAVLIST('browseownitems', $start, $amount, 0, 1000, $blogid, $search, 0);\r
+ $manager->loadClass("ENCAPSULATE");\r
+ $navList =& new NAVLIST('browseownitems', $start, $amount, 0, 1000, /*$blogid*/ 0, $search, 0);\r
$navList->showBatchList('item',$query,'table',$template);\r
\r
$this->pagefoot();\r
}\r
\r
/**\r
- * Show all the comments for a given item\r
- */\r
+ * Show all the comments for a given item\r
+ * @param int $itemid\r
+ */\r
function action_itemcommentlist($itemid = '') {\r
- global $member;\r
+ global $member, $manager, $CONF;\r
\r
if ($itemid == '')\r
$itemid = intRequestVar('itemid');\r
\r
// start index\r
if (postVar('start'))\r
- $start = postVar('start');\r
+ $start = intPostVar('start');\r
else\r
$start = 0;\r
\r
// amount of items to show\r
if (postVar('amount'))\r
- $amount = postVar('amount');\r
- else\r
- $amount = 10;\r
+ $amount = intPostVar('amount');\r
+ else {\r
+ $amount = intval($CONF['DefaultListSize']);\r
+ if ($amount < 1)\r
+ $amount = 10;\r
+ }\r
\r
$search = postVar('search');\r
\r
echo '<p>(<a href="index.php?action=itemlist&blogid=',$blogid,'">',_BACKTOOVERVIEW,'</a>)</p>';\r
echo '<h2>',_COMMENTS,'</h2>';\r
\r
- $query = 'SELECT cbody, cuser, cmail, mname, ctime, chost, cnumber, cip, citem FROM '.sql_table('comment').' LEFT OUTER JOIN '.sql_table('member').' ON mnumber=cmember WHERE citem=' . $itemid;\r
+ $query = 'SELECT cbody, cuser, cmail, cemail, mname, ctime, chost, cnumber, cip, citem FROM ' . sql_table('comment') . ' LEFT OUTER JOIN ' . sql_table('member') . ' ON mnumber = cmember WHERE citem = ' . $itemid;\r
\r
if ($search)\r
$query .= ' and cbody LIKE "%' . addslashes($search) . '%"';\r
$template['content'] = 'commentlist';\r
$template['canAddBan'] = $member->blogAdminRights(getBlogIDFromItemID($itemid));\r
\r
+ $manager->loadClass("ENCAPSULATE");\r
$navList =& new NAVLIST('itemcommentlist', $start, $amount, 0, 1000, 0, $search, $itemid);\r
$navList->showBatchList('comment',$query,'table',$template,_NOCOMMENTS);\r
\r
}\r
\r
/**\r
- * Browse own comments\r
- */\r
+ * Browse own comments\r
+ */\r
function action_browseowncomments() {\r
- global $member;\r
+ global $member, $manager, $CONF;\r
\r
// start index\r
if (postVar('start'))\r
- $start = postVar('start');\r
+ $start = intPostVar('start');\r
else\r
$start = 0;\r
\r
// amount of items to show\r
if (postVar('amount'))\r
- $amount = postVar('amount');\r
- else\r
- $amount = 10;\r
+ $amount = intPostVar('amount');\r
+ else {\r
+ $amount = intval($CONF['DefaultListSize']);\r
+ if ($amount < 1)\r
+ $amount = 10;\r
+ }\r
\r
$search = postVar('search');\r
\r
$template['content'] = 'commentlist';\r
$template['canAddBan'] = 0; // doesn't make sense to allow banning yourself\r
\r
+ $manager->loadClass("ENCAPSULATE");\r
$navList =& new NAVLIST('browseowncomments', $start, $amount, 0, 1000, 0, $search, 0);\r
$navList->showBatchList('comment',$query,'table',$template,_NOCOMMENTS_YOUR);\r
\r
}\r
\r
/**\r
- * Browse all comments for a weblog\r
- */\r
+ * Browse all comments for a weblog\r
+ * @param int $blogid\r
+ */\r
function action_blogcommentlist($blogid = '')\r
{\r
- global $member, $manager;\r
+ global $member, $manager, $CONF;\r
\r
if ($blogid == '')\r
$blogid = intRequestVar('blogid');\r
\r
// start index\r
if (postVar('start'))\r
- $start = postVar('start');\r
+ $start = intPostVar('start');\r
else\r
$start = 0;\r
\r
// amount of items to show\r
if (postVar('amount'))\r
- $amount = postVar('amount');\r
- else\r
- $amount = 10;\r
+ $amount = intPostVar('amount');\r
+ else {\r
+ $amount = intval($CONF['DefaultListSize']);\r
+ if ($amount < 1)\r
+ $amount = 10;\r
+ }\r
\r
$search = postVar('search'); // search through comments\r
\r
\r
- $query = 'SELECT cbody, cuser, cmail, mname, ctime, chost, cnumber, cip, citem FROM '.sql_table('comment').' LEFT OUTER JOIN '.sql_table('member').' ON mnumber=cmember WHERE cblog=' . intval($blogid);\r
+ $query = 'SELECT cbody, cuser, cemail, cmail, mname, ctime, chost, cnumber, cip, citem FROM '.sql_table('comment').' LEFT OUTER JOIN '.sql_table('member').' ON mnumber=cmember WHERE cblog=' . intval($blogid);\r
\r
if ($search != '')\r
$query .= ' and cbody LIKE "%' . addslashes($search) . '%"';\r
$template['content'] = 'commentlist';\r
$template['canAddBan'] = $member->blogAdminRights($blogid);\r
\r
+ $manager->loadClass("ENCAPSULATE");\r
$navList =& new NAVLIST('blogcommentlist', $start, $amount, 0, 1000, $blogid, $search, 0);\r
$navList->showBatchList('comment',$query,'table',$template, _NOCOMMENTS_BLOG);\r
\r
}\r
\r
/**\r
- * Provide a page to item a new item to the given blog\r
- */\r
+ * Provide a page to item a new item to the given blog\r
+ */\r
function action_createitem() {\r
global $member, $manager;\r
\r
$this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_itemedit() {\r
global $member, $manager;\r
\r
$this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_itemupdate() {\r
global $member, $manager, $CONF;\r
\r
$title = postVar('title');\r
$more = postVar('more');\r
$closed = intPostVar('closed');\r
+ $draftid = intPostVar('draftid');\r
\r
// default action = add now\r
if (!$actiontype)\r
$wasdraft: set to 1 when the item used to be a draft item\r
$publish: set to 1 when the edited item is not a draft\r
*/\r
+/*<del by shizuki>\r
switch ($actiontype) {\r
case 'adddraft':\r
$publish = 0;\r
case 'addfuture':\r
$wasdraft = 1;\r
$publish = 1;\r
- $timestamp = mktime(postVar('hour'), postVar('minutes'), 0, postVar('month'), postVar('day'), postVar('year'));\r
+ $timestamp = mktime(intPostVar('hour'), intPostVar('minutes'), 0, intPostVar('month'), intPostVar('day'), intPostVar('year'));\r
break;\r
case 'addnow':\r
$wasdraft = 1;\r
$timestamp = 0;\r
break;\r
case 'changedate':\r
- $timestamp = mktime(postVar('hour'), postVar('minutes'), 0, postVar('month'), postVar('day'), postVar('year'));\r
+ $timestamp = mktime(intPostVar('hour'), intPostVar('minutes'), 0, intPostVar('month'), intPostVar('day'), intPostVar('year'));\r
$publish = 1;\r
$wasdraft = 0;\r
break;\r
+ case 'backtodrafts':\r
+ $wasdraft = 0;\r
+ $publish = 0;\r
+ $timestamp = 0;\r
+ break;\r
case 'edit':\r
default:\r
$publish = 1;\r
$wasdraft = 0;\r
$timestamp = 0;\r
}\r
+</del by shizuki>*/\r
+// <add by shizuki>\r
+ $blogid = getBlogIDFromItemID($itemid);\r
+ $blog =& $manager->getBlog($blogid);\r
+\r
+ $wasdrafts = array('adddraft', 'addfuture', 'addnow');\r
+ $wasdraft = in_array($actiontype, $wasdrafts) ? 1 : 0;\r
+ $publish = ($actiontype != 'adddraft' && $actiontype != 'backtodrafts') ? 1 : 0;\r
+ if ($actiontype == 'addfuture' || $actiontype == 'changedate') {\r
+ $timestamp = mktime(intPostVar('hour'), intPostVar('minutes'), 0, intPostVar('month'), intPostVar('day'), intPostVar('year'));\r
+ } else {\r
+ $timestamp =0;\r
+ }\r
+ $doping = ($publish && $timestamp < $blog->getCorrectTime() && postVar('dosendping')) ? 1 : 0;\r
+// </add by shizuki>\r
\r
// edit the item for real\r
ITEM::update($itemid, $catid, $title, $body, $more, $closed, $wasdraft, $publish, $timestamp);\r
\r
+/* <del by shizuki>\r
$blogid = getBlogIDFromItemID($itemid);\r
$blog =& $manager->getBlog($blogid);\r
- if (!$closed && $publish && $wasdraft && $blog->pingUserland()) {\r
+\r
+ $isFuture = 0;\r
+ if ($timestamp > $blog->getCorrectTime(time())) {\r
+ $isFuture = 1;\r
+ }\r
+\r
+</del by shizuki>*/\r
+ $this->updateFuturePosted($blogid);\r
+\r
+ if ($draftid > 0) {\r
+ // delete permission is checked inside ITEM::delete()\r
+ ITEM::delete($draftid);\r
+ }\r
+\r
+// if (!$closed && $publish && $wasdraft && $blog->sendPing() && numberOfEventSubscriber('SendPing') > 0 && !$isFuture) {\r
+ if (!$closed && $doping && $blog->sendPing() && numberOfEventSubscriber('SendPing') > 0) { //<mod by shizuki />\r
$this->action_sendping($blogid);\r
return;\r
}\r
}\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_itemdelete() {\r
global $member, $manager;\r
\r
$this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_itemdeleteconfirm() {\r
global $member;\r
\r
$this->action_itemlist($blogid);\r
}\r
\r
- // deletes one item and returns error if something goes wrong\r
+ /**\r
+ * Deletes one item and returns error if something goes wrong\r
+ * @param int $itemid\r
+ */\r
function deleteOneItem($itemid) {\r
global $member, $manager;\r
\r
if (!$member->canAlterItem($itemid))\r
return _ERROR_DISALLOWED;\r
\r
+ // need to get blogid before the item is deleted\r
+ $blogid = getBlogIDFromItemId($itemid);\r
+\r
$manager->loadClass('ITEM');\r
ITEM::delete($itemid);\r
+\r
+ // update blog's futureposted\r
+ $this->updateFuturePosted($blogid);\r
+ }\r
+\r
+ /**\r
+ * Update a blog's future posted flag\r
+ * @param int $blogid\r
+ */\r
+ function updateFuturePosted($blogid) {\r
+ global $manager;\r
+\r
+ $blog =& $manager->getBlog($blogid);\r
+ $currenttime = $blog->getCorrectTime(time());\r
+ $result = sql_query("SELECT * FROM ".sql_table('item').\r
+ " WHERE iblog='".$blogid."' AND iposted=0 AND itime>".mysqldate($currenttime));\r
+ if (mysql_num_rows($result) > 0) {\r
+ $blog->setFuturePost();\r
+ }\r
+ else {\r
+ $blog->clearFuturePost();\r
+ }\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_itemmove() {\r
global $member, $manager;\r
\r
$this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_itemmoveto() {\r
global $member, $manager;\r
\r
// only allow if user is allowed to alter item\r
$member->canUpdateItem($itemid, $catid) or $this->disallow();\r
\r
+ $old_blogid = getBlogIDFromItemId($itemid);\r
+\r
ITEM::move($itemid, $catid);\r
\r
+ // set the futurePosted flag on the blog\r
+ $this->updateFuturePosted(getBlogIDFromItemId($itemid));\r
+\r
+ // reset the futurePosted in case the item is moved from one blog to another\r
+ $this->updateFuturePosted($old_blogid);\r
+\r
if ($catid != intRequestVar('catid'))\r
$this->action_categoryedit($catid, $blog->getID());\r
else\r
}\r
\r
/**\r
- * Moves one item to a given category (category existance should be checked by caller)\r
- * errors are returned\r
- */\r
+ * Moves one item to a given category (category existance should be checked by caller)\r
+ * errors are returned\r
+ * @param int $itemid\r
+ * @param int $destCatid category ID to which the item will be moved\r
+ */\r
function moveOneItem($itemid, $destCatid) {\r
global $member;\r
\r
}\r
\r
/**\r
- * Adds a item to the chosen blog\r
- */\r
+ * Adds a item to the chosen blog\r
+ */\r
function action_additem() {\r
global $member, $manager, $CONF;\r
\r
\r
$blogid = getBlogIDFromItemID($result['itemid']);\r
$blog =& $manager->getBlog($blogid);\r
-\r
+/* <del by shizuki>\r
$pingUrl = $manager->addTicketToUrl($CONF['AdminURL'] . 'index.php?action=sendping&blogid=' . intval($blogid));\r
\r
if ($result['status'] == 'newcategory')\r
$this->action_categoryedit(\r
$result['catid'],\r
$blogid,\r
- $blog->pingUserland() ? $pingUrl : ''\r
+ $blog->sendPing() && numberOfEventSubscriber('SendPing') > 0 ? $pingUrl : ''\r
);\r
- elseif ((postVar('actiontype') == 'addnow') && $blog->pingUserland())\r
+ elseif ((postVar('actiontype') == 'addnow') && $blog->sendPing() && numberOfEventSubscriber('SendPing') > 0)\r
$this->action_sendping($blogid);\r
else\r
$this->action_itemlist($blogid);\r
+</del by shizuki>*/\r
+// <add by shizuki>\r
+ $btimestamp = $blog->getCorrectTime();\r
+ $bPingInfo = ($blog->sendPing() && numberOfEventSubscriber('SendPing') > 0);\r
+ $item = $manager->getItem(intval($result['itemid']), 1, 1);\r
+ $iPingInfo = (!$item['draft'] && postVar('dosendping') && $item['timestamp'] <= $btimestamp);\r
+ if ($iPingInfo && $bPingInfo) {\r
+ $nextAction = 'sendping';\r
+ } else {\r
+ $nextAction = 'itemlist';\r
+ }\r
+ if ($result['status'] == 'newcategory') {\r
+// $distURI = ($nextAction == 'sendping') ? $manager->addTicketToUrl($CONF['AdminURL'] . 'index.php?action='\r
+// . $nextAction . '&blogid=' . intval($blogid)) :\r
+// '';\r
+ $distURI = $manager->addTicketToUrl($CONF['AdminURL'] . 'index.php?action=' . $nextAction . '&blogid=' . intval($blogid));\r
+ $this->action_categoryedit($result['catid'], $blogid, $distURI);\r
+ } else {\r
+ $methodName = 'action_' . $nextAction;\r
+ call_user_func(array(&$this, $methodName), $blogid);\r
+ }\r
+//</add by shizuki>\r
}\r
\r
/**\r
- * Shows a window that says we're about to ping weblogs.com.\r
- * immediately refresh to the real pinging page, which will\r
- * show an error, or redirect to the blog.\r
- *\r
- * @param $blogid ID of blog for which ping needs to be sent out\r
- */\r
+ * Shows a window that says we're about to ping.\r
+ * immediately refresh to the real pinging page, which will\r
+ * show an error, or redirect to the blog.\r
+ *\r
+ * @param int $blogid ID of blog for which ping needs to be sent out\r
+ */\r
function action_sendping($blogid = -1) {\r
global $member, $manager;\r
\r
$rawPingUrl = $manager->addTicketToUrl('index.php?action=rawping&blogid=' . intval($blogid));\r
\r
$this->pagehead('<meta http-equiv="refresh" content="1; url='.htmlspecialchars($rawPingUrl).'" />');\r
+ echo _UPDATEDPING_MESSAGE;\r
?>\r
- <h2>Site Updated, Now pinging weblogs.com</h2>\r
-\r
- <p>\r
- Pinging weblogs.com! This can a while...\r
- <br />\r
- When the ping is complete (and successfull), your weblog will show up in the weblogs.com updates list.\r
- </p>\r
-\r
- <p>\r
- If you aren't automatically passed through, <a href="index.php?action=rawping&blogid=<?php echo $blogid?>">try again</a>\r
+ <a href="index.php?action=rawping&blogid=<?php echo $blogid?>"><?php echo _UPDATEDPING_GOPINGPAGE ?></a>\r
</p>\r
- <?php $this->pagefoot();\r
+ <?php\r
+ $this->pagefoot();\r
}\r
\r
- // ping to Weblogs.com\r
- // sends the real ping (can take up to 10 seconds!)\r
+ /**\r
+ * Sends the real ping (can take up to 10 seconds!)\r
+ */\r
function action_rawping() {\r
global $manager;\r
// TODO: checks?\r
$blogid = intRequestVar('blogid');\r
$blog =& $manager->getBlog($blogid);\r
\r
- $result = $blog->sendUserlandPing();\r
-\r
$this->pagehead();\r
\r
?>\r
\r
- <h2>Ping Results</h2>\r
+ <h2><?php echo _UPDATEDPING_PINGING ?></h2>\r
+ <div class='note'>\r
+ <?php\r
\r
- <p>The following message was returned by weblogs.com:</p>\r
+ // send sendPing event\r
+ $manager->notify('SendPing', array('blogid' => $blogid));\r
\r
- <div class='note'><?php echo $result ?></div>\r
+ ?>\r
+ </div>\r
\r
<ul>\r
- <li><a href="index.php?action=itemlist&blogid=<?php echo $blog->getID()?>">View list of recent items for <?php echo htmlspecialchars($blog->getName())?></a></li>\r
- <li><a href="<?php echo $blog->getURL()?>">Visit your own site</a></li>\r
+ <li><a href="index.php?action=itemlist&blogid=<?php echo $blog->getID()?>"><?php echo _UPDATEDPING_VIEWITEM . htmlspecialchars($blog->getName())?></a></li>\r
+ <li><a href="<?php echo $blog->getURL()?>"><?php echo _UPDATEDPING_VISITOWNSITE ?></a></li>\r
</ul>\r
\r
<?php $this->pagefoot();\r
}\r
\r
/**\r
- * Allows to edit previously made comments\r
- */\r
+ * Allows to edit previously made comments\r
+ */\r
function action_commentedit() {\r
global $member, $manager;\r
\r
</tr><tr>\r
<td><?php echo _EDITC_HOST?></td>\r
<td><?php echo $comment['host']; ?></td>\r
- </tr><tr>\r
+ </tr>\r
+ <tr>\r
+ <td><?php echo _EDITC_URL; ?></td>\r
+ <td><input type="text" name="url" size="30" tabindex="6" value="<?php echo $comment['userid']; ?>" /></td>\r
+ </tr>\r
+ <tr>\r
+ <td><?php echo _EDITC_EMAIL; ?></td>\r
+ <td><input type="text" name="email" size="30" tabindex="8" value="<?php echo $comment['email']; ?>" /></td>\r
+ </tr>\r
+ <tr>\r
<td><?php echo _EDITC_TEXT?></td>\r
<td>\r
<textarea name="body" tabindex="10" rows="10" cols="50"><?php // htmlspecialchars not needed (things should be escaped already)\r
$this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_commentupdate() {\r
global $member, $manager;\r
\r
\r
$member->canAlterComment($commentid) or $this->disallow();\r
\r
+ $url = postVar('url');\r
+ $email = postVar('email');\r
$body = postVar('body');\r
\r
// intercept words that are too long\r
$manager->notify('PreUpdateComment',array('body' => &$body));\r
\r
$query = 'UPDATE '.sql_table('comment')\r
- . " SET cbody='" .addslashes($body). "'"\r
+ . " SET cmail = '" . addslashes($url) . "', cemail = '" . addslashes($email) . "', cbody = '" . addslashes($body) . "'"\r
. " WHERE cnumber=" . $commentid;\r
sql_query($query);\r
\r
\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_commentdelete() {\r
global $member, $manager;\r
\r
$this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_commentdeleteconfirm() {\r
global $member;\r
\r
$this->action_browseowncomments();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function deleteOneComment($commentid) {\r
global $member, $manager;\r
\r
}\r
\r
/**\r
- * Usermanagement main\r
- */\r
+ * Usermanagement main\r
+ */\r
function action_usermanagement() {\r
global $member, $manager;\r
\r
$template['content'] = 'memberlist';\r
$template['tabindex'] = 10;\r
\r
+ $manager->loadClass("ENCAPSULATE");\r
$batch =& new BATCH('member');\r
$batch->showlist($query,'table',$template);\r
\r
echo '<h3>' . _MEMBERS_NEW .'</h3>';\r
?>\r
- <form method="post" action="index.php"><div>\r
+ <form method="post" action="index.php"
name="memberedit"><div>
\r \r
<input type="hidden" name="action" value="memberadd" />\r
<?php $manager->addTicketHidden() ?>\r
<th colspan="2"><?php echo _MEMBERS_NEW?></th>\r
</tr><tr>\r
<td><?php echo _MEMBERS_DISPLAY?> <?php help('shortnames');?>\r
- <br /><small>(This is the name used to logon)</small>\r
+ <br /><small><?php echo _MEMBERS_DISPLAY_INFO?></small>\r
</td>\r
<td><input tabindex="10010" name="name" size="16" maxlength="16" /></td>\r
</tr><tr>\r
}\r
\r
/**\r
- * Edit member settings\r
- */\r
+ * Edit member settings\r
+ */\r
function action_memberedit() {\r
$this->action_editmembersettings(intRequestVar('memberid'));\r
}\r
+\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_editmembersettings($memberid = '') {\r
global $member, $manager, $CONF;\r
\r
$mem = MEMBER::createFromID($memberid);\r
\r
?>\r
- <form method="post" action="index.php"><div>\r
+ <form method="post" action="index.php"
name="memberedit"><div>
\r \r
<input type="hidden" name="action" value="changemembersettings" />\r
<input type="hidden" name="memberid" value="<?php echo $memberid; ?>" />\r
<td><?php $this->input_yesno('admin',$mem->isAdmin(),60); ?></td>\r
</tr><tr>\r
<td><?php echo _MEMBERS_CANLOGIN?> <?php help('canlogin'); ?></td>\r
- <td><?php $this->input_yesno('canlogin',$mem->canLogin(),70); ?></td>\r
+ <td><?php $this->input_yesno('canlogin',$mem->canLogin(),70,1,0,_YES,_NO,$mem->isAdmin()); ?></td>\r
<?php } ?>\r
</tr><tr>\r
<td><?php echo _MEMBERS_NOTES?></td>\r
\r
</td>\r
</tr>\r
+ <tr>\r
+ <td><?php echo _MEMBERS_USEAUTOSAVE?> <?php help('autosave'); ?></td>\r
+ <td><?php $this->input_yesno('autosave', $mem->getAutosave(), 87); ?></td>\r
+ </tr>\r
<?php\r
// plugin options\r
$this->_insertPluginOptions('member',$memberid);\r
$this->pagefoot();\r
}\r
\r
-\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_changemembersettings() {\r
global $member, $CONF, $manager;\r
\r
// check if allowed\r
($member->getID() == $memberid) or $member->isAdmin() or $this->disallow();\r
\r
- $name = trim(postVar('name'));\r
- $realname = trim(postVar('realname'));\r
+ $name = trim(strip_tags(postVar('name')));\r
+ $realname = trim(strip_tags(postVar('realname')));\r
$password = postVar('password');\r
$repeatpassword = postVar('repeatpassword');\r
- $email = postVar('email');\r
- $url = postVar('url');\r
+ $email = strip_tags(postVar('email'));\r
+ $url = strip_tags(postVar('url'));\r
\r
// Sometimes user didn't prefix the URL with http://, this cause a malformed URL. Let's fix it.\r
if (!eregi("^https?://", $url))\r
\r
$admin = postVar('admin');\r
$canlogin = postVar('canlogin');\r
- $notes = postVar('notes');\r
+ $notes = strip_tags(postVar('notes'));\r
$deflang = postVar('deflang');\r
\r
$mem = MEMBER::createFromID($memberid);\r
$mem->setPassword($password);\r
}\r
\r
- if ($newpass)\r
- $mem->setPassword($password);\r
-\r
$oldEmail = $mem->getEmail();\r
\r
$mem->setRealName($realname);\r
$mem->setCanLogin($canlogin);\r
}\r
\r
+ $autosave = postVar ('autosave');\r
+ $mem->setAutosave($autosave);\r
\r
$mem->write();\r
\r
+ // store plugin options\r
+ $aOptions = requestArray('plugoption');\r
+ NucleusPlugin::_applyPluginOptions($aOptions);\r
+ $manager->notify('PostPluginOptionsUpdate',array('context' => 'member', 'memberid' => $memberid, 'member' => &$mem));\r
+\r
// if email changed, generate new password\r
if ($oldEmail != $mem->getEmail())\r
{\r
$mem->sendActivationLink('addresschange', $oldEmail);\r
// logout member\r
$mem->newCookieKey();\r
- $member->logout();\r
+\r
+ // only log out if the member being edited is the current member.\r
+ if ($member->getID() == $memberid)\r
+ $member->logout();\r
$this->action_login(_MSG_ACTIVATION_SENT, 0);\r
return;\r
}\r
\r
\r
- // store plugin options\r
- $aOptions = requestArray('plugoption');\r
- NucleusPlugin::_applyPluginOptions($aOptions);\r
- $manager->notify('PostPluginOptionsUpdate',array('context' => 'member', 'memberid' => $memberid, 'member' => &$mem));\r
-\r
if ( ( $mem->getID() == $member->getID() )\r
- && ( $newpass || ( $mem->getDisplayName() != $member->getDisplayName() ) )\r
+ && ( $mem->getDisplayName() != $member->getDisplayName() )\r
) {\r
$mem->newCookieKey();\r
$member->logout();\r
}\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_memberadd() {\r
- global $member;\r
+ global $member, $manager;\r
\r
// check if allowed\r
$member->isAdmin() or $this->disallow();\r
if ($res != 1)\r
$this->error($res);\r
\r
+ // fire PostRegister event\r
+ $newmem = new MEMBER();\r
+ $newmem->readFromName(postVar('name'));\r
+ $manager->notify('PostRegister',array('member' => &$newmem));\r
+\r
$this->action_usermanagement();\r
}\r
\r
$this->_showActivationPage($key);\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function _showActivationPage($key, $message = '')\r
{\r
global $manager;\r
}\r
\r
/**\r
- * Manage team\r
- */\r
+ * Manage team\r
+ */\r
function action_manageteam() {\r
global $member, $manager;\r
\r
$template['content'] = 'teamlist';\r
$template['tabindex'] = 10;\r
\r
+ $manager->loadClass("ENCAPSULATE");\r
$batch =& new BATCH('team');\r
$batch->showlist($query, 'table', $template);\r
\r
}\r
\r
/**\r
- * Add member tot tram\r
- */\r
+ * Add member to team\r
+ */\r
function action_teamaddmember() {\r
global $member, $manager;\r
\r
\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_teamdelete() {\r
global $member, $manager;\r
\r
?>\r
<h2><?php echo _DELETE_CONFIRM?></h2>\r
\r
- <p><?php echo _CONFIRMTXT_TEAM1?><b><?php echo $teammem->getDisplayName() ?></b><?php echo _CONFIRMTXT_TEAM2?><b><?php echo htmlspecialchars(strip_tags($blog->getName())) ?></b>\r
+ <p><?php echo _CONFIRMTXT_TEAM1?><b><?php echo htmlspecialchars($teammem->getDisplayName()) ?></b><?php echo _CONFIRMTXT_TEAM2?><b><?php echo htmlspecialchars(strip_tags($blog->getName())) ?></b>\r
</p>\r
\r
\r
$this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_teamdeleteconfirm() {\r
global $member;\r
\r
$this->action_manageteam();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function deleteOneTeamMember($blogid, $memberid) {\r
global $member, $manager;\r
\r
// - (there remains at least one team member)\r
$tmem = MEMBER::createFromID($memberid);\r
\r
- $manager->notify('PreDeleteTeamMember', array('member' => &$mem, 'blogid' => $blogid));\r
+ $manager->notify('PreDeleteTeamMember', array('member' => &$tmem, 'blogid' => $blogid));\r
\r
if ($tmem->isBlogAdmin($blogid)) {\r
// check if there are more blog members left and at least one admin\r
$query = 'DELETE FROM '.sql_table('team')." WHERE tblog=$blogid and tmember=$memberid";\r
sql_query($query);\r
\r
- $manager->notify('PostDeleteTeamMember', array('member' => &$mem, 'blogid' => $blogid));\r
+ $manager->notify('PostDeleteTeamMember', array('member' => &$tmem, 'blogid' => $blogid));\r
\r
return '';\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_teamchangeadmin() {\r
global $member;\r
\r
$this->action_overview(_MSG_ADMINCHANGED);\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_blogsettings() {\r
global $member, $manager;\r
\r
\r
<h3><?php echo _EBLOG_TEAM_TITLE?></h3>\r
\r
- <p>Members currently on your team:\r
+ <p><?php echo _EBLOG_CURRENT_TEAM_MEMBER; ?>\r
<?php\r
$res = sql_query('SELECT mname, mrealname FROM ' . sql_table('member') . ',' . sql_table('team') . ' WHERE mnumber=tmember AND tblog=' . intval($blogid));\r
$aMemberNames = array();\r
</td>\r
<td><?php $this->input_yesno('public',$blog->isPublic(),70); ?></td>\r
</tr><tr>\r
+ <td><?php echo _EBLOG_REQUIREDEMAIL?>\r
+ </td>\r
+ <td><?php $this->input_yesno('reqemail',$blog->emailRequired(),72); ?></td>\r
+ </tr><tr>\r
<td><?php echo _EBLOG_NOTIFY?> <?php help('blognotify'); ?></td>\r
<td><input name="notify" tabindex="80" maxlength="60" size="40" value="<?php echo htmlspecialchars($blog->getNotifyAddress()); ?>" /></td>\r
</tr><tr>\r
/><label for="notifyNewItem"><?php echo _EBLOG_NOTIFY_ITEM?></label>\r
</td>\r
</tr><tr>\r
- <td><?php echo _EBLOG_PING?> <?php help('pinguserland'); ?></td>\r
- <td><?php $this->input_yesno('pinguserland',$blog->pingUserland(),85); ?></td>\r
+ <?php\r
+ if (numberOfEventSubscriber('SendPing') > 0) {\r
+ ?>\r
+ <td><?php echo _EBLOG_PING?> <?php help('sendping'); ?></td>\r
+ <td><?php $this->input_yesno('sendping',$blog->sendPing(),85); ?></td>\r
</tr><tr>\r
+ <?php\r
+ }\r
+ ?>\r
<td><?php echo _EBLOG_MAXCOMMENTS?> <?php help('blogmaxcomments'); ?></td>\r
<td><input name="maxcomments" tabindex="90" size="3" value="<?php echo htmlspecialchars($blog->getMaxComments()); ?>" /></td>\r
</tr><tr>\r
$template['content'] = 'categorylist';\r
$template['tabindex'] = 200;\r
\r
+ $manager->loadClass("ENCAPSULATE");\r
$batch =& new BATCH('category');\r
$batch->showlist($query,'table',$template);\r
\r
$this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_categorynew() {\r
global $member, $manager;\r
\r
$this->action_blogsettings();\r
}\r
\r
-\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_categoryedit($catid = '', $blogid = '', $desturl = '') {\r
global $member, $manager;\r
\r
$extrahead = '<script type="text/javascript" src="javascript/numbercheck.js"></script>';\r
$this->pagehead($extrahead);\r
\r
+ echo "<p><a href='index.php?action=blogsettings&blogid=$blogid'>(",_BACK_TO_BLOGSETTINGS,")</a></p>";\r
+\r
?>\r
<h2><?php echo _EBLOG_CAT_UPDATE?> '<?php echo htmlspecialchars($cname)?>'</h2>\r
<form method='post' action='index.php'><div>\r
$this->pagefoot();\r
}\r
\r
-\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_categoryupdate() {\r
global $member, $manager;\r
\r
}\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_categorydelete() {\r
global $member, $manager;\r
\r
<h2><?php echo _DELETE_CONFIRM?></h2>\r
\r
<div>\r
- <?php echo _CONFIRMTXT_CATEGORY?><b><?php echo $blog->getCategoryName($catid)?></b>\r
+ <?php echo _CONFIRMTXT_CATEGORY?><b><?php echo htmlspecialchars($blog->getCategoryName($catid))?></b>\r
</div>\r
\r
<form method="post" action="index.php"><div>\r
$this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_categorydeleteconfirm() {\r
global $member, $manager;\r
\r
$this->action_blogsettings();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function deleteOneCategory($catid) {\r
global $manager, $member;\r
\r
\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function moveOneCategory($catid, $destblogid) {\r
global $manager, $member;\r
\r
\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_blogsettingsupdate() {\r
global $member, $manager;\r
\r
$blog->setDefaultSkin(intPostVar('defskin'));\r
$blog->setDescription(trim(postVar('desc')));\r
$blog->setPublic(postVar('public'));\r
- $blog->setPingUserland(postVar('pinguserland'));\r
+ $blog->setPingUserland(postVar('sendping'));\r
$blog->setConvertBreaks(intPostVar('convertbreaks'));\r
$blog->setAllowPastPosting(intPostVar('allowpastposting'));\r
$blog->setDefaultCategory(intPostVar('defcat'));\r
$blog->setSearchable(intPostVar('searchable'));\r
+ $blog->setEmailRequired(intPostVar('reqemail'));\r
\r
$blog->writeSettings();\r
\r
$this->action_overview(_MSG_SETTINGSCHANGED);\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_deleteblog() {\r
global $member, $CONF, $manager;\r
\r
$this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_deleteblogconfirm() {\r
global $member, $CONF, $manager;\r
\r
$this->action_overview(_DELETED_BLOG);\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_memberdelete() {\r
global $member, $manager;\r
\r
?>\r
<h2><?php echo _DELETE_CONFIRM?></h2>\r
\r
- <p><?php echo _CONFIRMTXT_MEMBER?><b><?php echo $mem->getDisplayName() ?></b>\r
+ <p><?php echo _CONFIRMTXT_MEMBER?><b><?php echo htmlspecialchars($mem->getDisplayName()) ?></b>\r
</p>\r
\r
<p>\r
- Please note that media files will <b>NOT</b> be deleted. (At least not in this Nucleus version)\r
+ <?php echo _WARNINGTXT_NOTDELMEDIAFILES ?>\r
</p>\r
\r
<form method="post" action="index.php"><div>\r
$this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_memberdeleteconfirm() {\r
global $member;\r
\r
$this->action_overview(_DELETED_MEMBER);\r
}\r
\r
- // (static)\r
+ /**\r
+ * @static\r
+ * @todo document this\r
+ */\r
function deleteOneMember($memberid) {\r
global $manager;\r
\r
\r
$manager->notify('PreDeleteMember', array('member' => &$mem));\r
\r
+ /* unlink comments from memberid */\r
+ if ($memberid) {\r
+ $query = 'UPDATE ' . sql_table('comment') . ' SET cmember="0", cuser="'. addslashes($mem->getDisplayName())\r
+ .'" WHERE cmember='.$memberid;\r
+ sql_query($query);\r
+ }\r
+\r
$query = 'DELETE FROM '.sql_table('member').' WHERE mnumber='.$memberid;\r
sql_query($query);\r
\r
return '';\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_createnewlog() {\r
global $member, $CONF, $manager;\r
\r
?>\r
<h2><?php echo _EBLOG_CREATE_TITLE?></h2>\r
\r
- <h3>_ADMIN_NOTABILIA</h3>\r
+ <h3><?php echo _ADMIN_NOTABILIA ?></h3>\r
\r
- <p>_ADMIN_PLEASE_READ</p>\r
+ <p><?php echo _ADMIN_PLEASE_READ ?></p>\r
\r
- <p>_ADMIN_HOW_TO_ACCESS</p>\r
+ <p><?php echo _ADMIN_HOW_TO_ACCESS ?></p>\r
\r
<ol>\r
- <li>_ADMIN_SIMPLE_WAY</li>\r
- <li>_ADMIN_DIFFICULT_WAY</li>\r
+ <li><?php echo _ADMIN_SIMPLE_WAY ?></li>\r
+ <li><?php echo _ADMIN_ADVANCED_WAY ?></li>\r
</ol>\r
\r
- <h3>_ADMIN_HOW_TO_CREATE</h3>\r
+ <h3><?php echo _ADMIN_HOW_TO_CREATE ?></h3>\r
\r
<p>\r
<?php echo _EBLOG_CREATE_TEXT?>\r
<td><input name="timeoffset" tabindex="110" size="3" value="0" /></td>\r
</tr><tr>\r
<td><?php echo _EBLOG_ADMIN?>\r
- <?php help('blogadmin'); ?>\r
+ <?php help('teamadmin'); ?>\r
</td>\r
<td><?php echo _EBLOG_ADMIN_MSG?></td>\r
</tr><tr>\r
$this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_addnewlog() {\r
global $member, $manager, $CONF;\r
\r
$manager->notify(\r
'PreAddBlog',\r
array(\r
- 'name' => &$bname,\r
- 'shortname' => &$bshortname,\r
- 'timeoffset' => &$btimeoffset,\r
- 'description' => &$bdescription,\r
+ 'name' => &$bname,\r
+ 'shortname' => &$bshortname,\r
+ 'timeoffset' => &$btimeoffset,\r
+ 'description' => &$bdesc,\r
'defaultskin' => &$bdefskin\r
)\r
);\r
\r
\r
// add slashes for sql queries\r
- $bname = addslashes($bname);\r
- $bshortname = addslashes($bshortname);\r
- $btimeoffset = addslashes($btimeoffset);\r
- $bdesc = addslashes($bdesc);\r
- $bdefskin = addslashes($bdefskin);\r
+ $bname = addslashes($bname);\r
+ $bshortname = addslashes($bshortname);\r
+ $btimeoffset = addslashes($btimeoffset);\r
+ $bdesc = addslashes($bdesc);\r
+ $bdefskin = addslashes($bdefskin);\r
\r
// create blog\r
$query = 'INSERT INTO '.sql_table('blog')." (bname, bshortname, bdesc, btimeoffset, bdefskin) VALUES ('$bname', '$bshortname', '$bdesc', '$btimeoffset', '$bdefskin')";\r
$blog =& $manager->getBlog($blogid);\r
\r
// create new category\r
- sql_query('INSERT INTO '.sql_table('category')." (cblog, cname, cdesc) VALUES ($blogid, 'General','Items that do not fit in other categories')");\r
+ $sql = 'INSERT INTO %s (cblog, cname, cdesc) VALUES (%d, "%s", "%s")';\r
+ sql_query(sprintf($sql, sql_table('category'), $blogid, _EBLOGDEFAULTCATEGORY_NAME, _EBLOGDEFAULTCATEGORY_DESC));\r
+// sql_query('INSERT INTO '.sql_table('category')." (cblog, cname, cdesc) VALUES ($blogid, _EBLOGDEFAULTCATEGORY_NAME, _EBLOGDEFAULTCATEGORY_DESC)");\r
$catid = mysql_insert_id();\r
\r
// set as default category\r
sql_query($query);\r
\r
\r
- $blog->additem($blog->getDefaultCategory(),'First Item','これはあなたのweblogにおける最初のアイテムです。自由に削除していただいてかまいません。','',$blogid, $memberid,$blog->getCorrectTime(),0,0,0);\r
+ $blog->additem($blog->getDefaultCategory(),_EBLOG_FIRSTITEM_TITLE,_EBLOG_FIRSTITEM_BODY,'',$blogid, $memberid,$blog->getCorrectTime(),0,0,0);\r
\r
$manager->notify(\r
'PostAddBlog',\r
$manager->notify(\r
'PostAddCategory',\r
array(\r
- 'catid' => $catid\r
+ 'blog' => &$blog,\r
+ 'name' => _EBLOGDEFAULTCATEGORY_NAME,\r
+ 'description' => _EBLOGDEFAULTCATEGORY_DESC,\r
+ 'catid' => $catid\r
)\r
);\r
\r
$this->pagehead();\r
?>\r
- <h2>新しいweblogが作成されました</h2>\r
+ <h2><?php echo _BLOGCREATED_TITLE ?></h2>\r
\r
- <p>新しいweblog 「<?php echo htmlspecialchars($bname)?>」が作成されました。続けて、これにアクセスするために以下のどちらかの手順に進んでください。</p>\r
+ <p><?php echo sprintf(_BLOGCREATED_ADDEDTXT, htmlspecialchars($bname)) ?></p>\r
\r
<ol>\r
- <li><a href="#index_php">簡単な方法: 下のコードを貼付けた <code><?php echo htmlspecialchars($bshortname)?>.php</code> というファイルを作成する</a></li>\r
- <li><a href="#skins">高度な方法: 現在使用しているスキンに新しいweblogを展開させるための記述を加える</a></li>\r
+ <li><a href="#index_php"><?php echo sprintf(_BLOGCREATED_SIMPLEWAY, htmlspecialchars($bshortname)) ?></a></li>\r
+ <li><a href="#skins"><?php echo _BLOGCREATED_ADVANCEDWAY ?></a></li>\r
</ol>\r
\r
- <h3><a id="index_php">方法 1: <code><?php echo htmlspecialchars($bshortname)?>.php</code> というファイルを作成</a></h3>\r
+ <h3><a id="index_php"><?php echo sprintf(_BLOGCREATED_SIMPLEDESC1, htmlspecialchars($bshortname)) ?></a></h3>\r
\r
- <p><code><?php echo htmlspecialchars($bshortname)?>.php</code> というファイルを作成して、中身に以下のコードを貼り付ける:</p>\r
+ <p><?php echo sprintf(_BLOGCREATED_SIMPLEDESC2, htmlspecialchars($bshortname)) ?></p>\r
<pre><code><?php\r
\r
$CONF['Self'] = '<b><?php echo htmlspecialchars($bshortname)?>.php</b>';\r
\r
?></code></pre>\r
\r
- <p>すでにある<code>index.php</code>と同じディレクトリにアップロードします。</p>\r
-\r
- <p>新しいweblogの作成を完了するためには、下にこのファイルのURLを入力してください。 (すでに用意した値で合っているとは思いますが保証はしません):</p>\r
+ <p><?php echo _BLOGCREATED_SIMPLEDESC3 ?></p>\r
\r
+ <p><?php echo _BLOGCREATED_SIMPLEDESC4 ?></p>\r
\r
<form action="index.php" method="post"><div>\r
<input type="hidden" name="action" value="addnewlog2" />\r
</tr></table>\r
</div></form>\r
\r
- <h3><a id="skins">方法 2: 現在使用しているスキンに新しいweblogを展開する記述を加える</a></h3>\r
-\r
- <p>新しいweblogの作成を完了するためには、下にURLを入力してください。 (大抵は既存blogと同じURL)</p>\r
+ <h3><a id="skins"><?php echo _BLOGCREATED_ADVANCEDWAY2 ?></a></h3>\r
\r
+ <p><?php echo _BLOGCREATED_ADVANCEDWAY3 ?></p>\r
\r
<form action="index.php" method="post"><div>\r
<input type="hidden" name="action" value="addnewlog2" />\r
\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_addnewlog2() {\r
global $member, $manager;\r
\r
$this->action_overview(_MSG_NEWBLOG);\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_skinieoverview() {\r
global $member, $DIR_LIBS, $manager;\r
\r
\r
}\r
\r
- function action_skinieimport() {\r
+ /**\r
+ * @todo document this\r
+ */\r
+ function action_skinieimport() {\r
global $member, $DIR_LIBS, $DIR_SKINS, $manager;\r
\r
$member->isAdmin() or $this->disallow();\r
// read only metadata\r
$error = $importer->readFile($skinFile, 1);\r
\r
+ // clashes\r
+ $skinNameClashes = $importer->checkSkinNameClashes();\r
+ $templateNameClashes = $importer->checkTemplateNameClashes();\r
+ $hasNameClashes = (count($skinNameClashes) > 0) || (count($templateNameClashes) > 0);\r
\r
if ($error) $this->error($error);\r
\r
<li><p><strong><?php echo _SKINIE_INFO_GENERAL?></strong> <?php echo htmlspecialchars($importer->getInfo())?></p></li>\r
<li><p><strong><?php echo _SKINIE_INFO_SKINS?></strong> <?php echo implode(' <em>'._AND.'</em> ',$importer->getSkinNames())?></p></li>\r
<li><p><strong><?php echo _SKINIE_INFO_TEMPLATES?></strong> <?php echo implode(' <em>'._AND.'</em> ',$importer->getTemplateNames())?></p></li>\r
- <li><p><strong style="color: red;"><?php echo _SKINIE_INFO_SKINCLASH?></strong> <?php echo implode(' <em>'._AND.'</em> ',$importer->checkSkinNameClashes())?></p></li>\r
- <li><p><strong style="color: red;"><?php echo _SKINIE_INFO_TEMPLCLASH?></strong> <?php echo implode(' <em>'._AND.'</em> ',$importer->checkTemplateNameClashes())?></p></li>\r
+ <?php\r
+ if ($hasNameClashes)\r
+ {\r
+ ?>\r
+ <li><p><strong style="color: red;"><?php echo _SKINIE_INFO_SKINCLASH?></strong> <?php echo implode(' <em>'._AND.'</em> ',$skinNameClashes)?></p></li>\r
+ <li><p><strong style="color: red;"><?php echo _SKINIE_INFO_TEMPLCLASH?></strong> <?php echo implode(' <em>'._AND.'</em> ',$templateNameClashes)?></p></li>\r
+ <?php\r
+ } // if (hasNameClashes)\r
+ ?>\r
</ul>\r
\r
<form method="post" action="index.php"><div>\r
<input type="hidden" name="skinfile" value="<?php echo htmlspecialchars(postVar('skinfile'))?>" />\r
<input type="hidden" name="mode" value="<?php echo htmlspecialchars($mode)?>" />\r
<input type="submit" value="<?php echo _SKINIE_CONFIRM_IMPORT?>" />\r
+ <?php\r
+ if ($hasNameClashes)\r
+ {\r
+ ?>\r
<br />\r
<input type="checkbox" name="overwrite" value="1" id="cb_overwrite" /><label for="cb_overwrite"><?php echo _SKINIE_CONFIRM_OVERWRITE?></label>\r
+ <?php\r
+ } // if (hasNameClashes)\r
+ ?>\r
</div></form>\r
\r
\r
$this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_skiniedoimport() {\r
global $member, $DIR_LIBS, $DIR_SKINS;\r
\r
\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_skinieexport() {\r
global $member, $DIR_LIBS;\r
\r
$exporter->export();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_templateoverview() {\r
global $member, $manager;\r
\r
$this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_templateedit($msg = '') {\r
global $member, $manager;\r
\r
<a href="index.php?action=templateoverview">(<?php echo _TEMPLATE_BACK?>)</a>\r
</p>\r
\r
- <h2><?php echo _TEMPLATE_EDIT_TITLE?> '<?php echo $templatename; ?>'</h2>\r
+ <h2><?php echo _TEMPLATE_EDIT_TITLE?> '<?php echo htmlspecialchars($templatename); ?>'</h2>\r
\r
<?php if ($msg) echo "<p>"._MESSAGE.": $msg</p>";\r
?>\r
$this->_templateEditRow($template, _TEMPLATE_AFOOTER, 'ARCHIVELIST_FOOTER', '', 150);\r
?>\r
</tr><tr>\r
+ <th colspan="2"><?php echo _TEMPLATE_BLOGLIST?> <?php help('templatebloglists'); ?></th>\r
+<?php $this->_templateEditRow($template, _TEMPLATE_BLOGHEADER, 'BLOGLIST_HEADER', '', 160);\r
+ $this->_templateEditRow($template, _TEMPLATE_BLOGITEM, 'BLOGLIST_LISTITEM', '', 170);\r
+ $this->_templateEditRow($template, _TEMPLATE_BLOGFOOTER, 'BLOGLIST_FOOTER', '', 180);\r
+?>\r
+ </tr><tr>\r
<th colspan="2"><?php echo _TEMPLATE_CATEGORYLIST?> <?php help('templatecategorylists'); ?></th>\r
-<?php $this->_templateEditRow($template, _TEMPLATE_CATHEADER, 'CATLIST_HEADER', '', 160);\r
- $this->_templateEditRow($template, _TEMPLATE_CATITEM, 'CATLIST_LISTITEM', '', 170);\r
- $this->_templateEditRow($template, _TEMPLATE_CATFOOTER, 'CATLIST_FOOTER', '', 180);\r
+<?php $this->_templateEditRow($template, _TEMPLATE_CATHEADER, 'CATLIST_HEADER', '', 190);\r
+ $this->_templateEditRow($template, _TEMPLATE_CATITEM, 'CATLIST_LISTITEM', '', 200);\r
+ $this->_templateEditRow($template, _TEMPLATE_CATFOOTER, 'CATLIST_FOOTER', '', 210);\r
?>\r
</tr><tr>\r
<th colspan="2"><?php echo _TEMPLATE_DATETIME?></th>\r
-<?php $this->_templateEditRow($template, _TEMPLATE_DHEADER, 'DATE_HEADER', 'dateheads', 190);\r
- $this->_templateEditRow($template, _TEMPLATE_DFOOTER, 'DATE_FOOTER', 'dateheads', 200);\r
- $this->_templateEditRow($template, _TEMPLATE_DFORMAT, 'FORMAT_DATE', 'datetime', 210);\r
- $this->_templateEditRow($template, _TEMPLATE_TFORMAT, 'FORMAT_TIME', 'datetime', 220);\r
- $this->_templateEditRow($template, _TEMPLATE_LOCALE, 'LOCALE', 'locale', 230);\r
+<?php $this->_templateEditRow($template, _TEMPLATE_DHEADER, 'DATE_HEADER', 'dateheads', 220);\r
+ $this->_templateEditRow($template, _TEMPLATE_DFOOTER, 'DATE_FOOTER', 'dateheads', 230);\r
+ $this->_templateEditRow($template, _TEMPLATE_DFORMAT, 'FORMAT_DATE', 'datetime', 240);\r
+ $this->_templateEditRow($template, _TEMPLATE_TFORMAT, 'FORMAT_TIME', 'datetime', 250);\r
+ $this->_templateEditRow($template, _TEMPLATE_LOCALE, 'LOCALE', 'locale', 260);\r
?>\r
</tr><tr>\r
<th colspan="2"><?php echo _TEMPLATE_IMAGE?> <?php help('templatepopups'); ?></th>\r
-<?php $this->_templateEditRow($template, _TEMPLATE_PCODE, 'POPUP_CODE', '', 240);\r
- $this->_templateEditRow($template, _TEMPLATE_ICODE, 'IMAGE_CODE', '', 250);\r
- $this->_templateEditRow($template, _TEMPLATE_MCODE, 'MEDIA_CODE', '', 260);\r
+<?php $this->_templateEditRow($template, _TEMPLATE_PCODE, 'POPUP_CODE', '', 270);\r
+ $this->_templateEditRow($template, _TEMPLATE_ICODE, 'IMAGE_CODE', '', 280);\r
+ $this->_templateEditRow($template, _TEMPLATE_MCODE, 'MEDIA_CODE', '', 290);\r
?>\r
</tr><tr>\r
<th colspan="2"><?php echo _TEMPLATE_SEARCH?></th>\r
-<?php $this->_templateEditRow($template, _TEMPLATE_SHIGHLIGHT, 'SEARCH_HIGHLIGHT', 'highlight',270);\r
- $this->_templateEditRow($template, _TEMPLATE_SNOTFOUND, 'SEARCH_NOTHINGFOUND', 'nothingfound',280);\r
+<?php $this->_templateEditRow($template, _TEMPLATE_SHIGHLIGHT, 'SEARCH_HIGHLIGHT', 'highlight',300);\r
+ $this->_templateEditRow($template, _TEMPLATE_SNOTFOUND, 'SEARCH_NOTHINGFOUND', 'nothingfound',310);\r
+?>\r
+ </tr><tr>\r
+ <th colspan="2"><?php echo _TEMPLATE_PLUGIN_FIELDS?></th>\r
+<?php\r
+ $tab = 600;\r
+ $pluginfields = array();\r
+ $manager->notify('TemplateExtraFields',array('fields'=>&$pluginfields));\r
+\r
+ foreach ($pluginfields as $pfkey=>$pfvalue) {\r
+ echo "</tr><tr>\n";\r
+ echo '<th colspan="2">'.htmlentities($pfkey)."</th>\n";\r
+ foreach ($pfvalue as $pffield=>$pfdesc) {\r
+ $this->_templateEditRow($template, $pfdesc, $pffield, '',++$tab,0);\r
+ }\r
+ }\r
?>\r
</tr><tr>\r
<th colspan="2"><?php echo _TEMPLATE_UPDATE?></th>\r
</tr><tr>\r
<td><?php echo _TEMPLATE_UPDATE?></td>\r
<td>\r
- <input type="submit" tabindex="290" value="<?php echo _TEMPLATE_UPDATE_BTN?>" onclick="return checkSubmit();" />\r
- <input type="reset" tabindex="300" value="<?php echo _TEMPLATE_RESET_BTN?>" />\r
+ <input type="submit" tabindex="800" value="<?php echo _TEMPLATE_UPDATE_BTN?>" onclick="return checkSubmit();" />\r
+ <input type="reset" tabindex="810" value="<?php echo _TEMPLATE_RESET_BTN?>" />\r
</td>\r
</tr></table>\r
\r
$this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function _templateEditRow(&$template, $description, $name, $help = '', $tabindex = 0, $big = 0) {\r
static $count = 1;\r
+ if (!isset($template[$name])) $template[$name] = '';\r
?>\r
</tr><tr>\r
<td><?php echo $description?> <?php if ($help) help('template'.$help); ?></td>\r
<?php $count++;\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_templateupdate() {\r
- global $member;\r
+ global $member, $manager;\r
\r
$templateid = intRequestVar('templateid');\r
\r
$this->addToTemplate($templateid, 'ARCHIVELIST_HEADER', postVar('ARCHIVELIST_HEADER'));\r
$this->addToTemplate($templateid, 'ARCHIVELIST_LISTITEM', postVar('ARCHIVELIST_LISTITEM'));\r
$this->addToTemplate($templateid, 'ARCHIVELIST_FOOTER', postVar('ARCHIVELIST_FOOTER'));\r
+ $this->addToTemplate($templateid, 'BLOGLIST_HEADER', postVar('BLOGLIST_HEADER'));\r
+ $this->addToTemplate($templateid, 'BLOGLIST_LISTITEM', postVar('BLOGLIST_LISTITEM'));\r
+ $this->addToTemplate($templateid, 'BLOGLIST_FOOTER', postVar('BLOGLIST_FOOTER'));\r
$this->addToTemplate($templateid, 'CATLIST_HEADER', postVar('CATLIST_HEADER'));\r
$this->addToTemplate($templateid, 'CATLIST_LISTITEM', postVar('CATLIST_LISTITEM'));\r
$this->addToTemplate($templateid, 'CATLIST_FOOTER', postVar('CATLIST_FOOTER'));\r
$this->addToTemplate($templateid, 'MEDIA_CODE', postVar('MEDIA_CODE'));\r
$this->addToTemplate($templateid, 'IMAGE_CODE', postVar('IMAGE_CODE'));\r
\r
+ $pluginfields = array();\r
+ $manager->notify('TemplateExtraFields',array('fields'=>&$pluginfields));\r
+ foreach ($pluginfields as $pfkey=>$pfvalue) {\r
+ foreach ($pfvalue as $pffield=>$pfdesc) {\r
+ $this->addToTemplate($templateid, $pffield, postVar($pffield));\r
+ }\r
+ }\r
\r
// jump back to template edit\r
$this->action_templateedit(_TEMPLATE_UPDATED);\r
\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function addToTemplate($id, $partname, $content) {\r
$partname = addslashes($partname);\r
$content = addslashes($content);\r
\r
$query = 'INSERT INTO '.sql_table('template')." (tdesc, tpartname, tcontent) "\r
. "VALUES ($id, '$partname', '$content')";\r
- mysql_query($query) or die("Query error: " . mysql_error());\r
+ sql_query($query) or exit(_ADMIN_SQLDIE_QUERYERROR . mysql_error());\r
return mysql_insert_id();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_templatedelete() {\r
global $member, $manager;\r
\r
<h2><?php echo _DELETE_CONFIRM?></h2>\r
\r
<p>\r
- <?php echo _CONFIRMTXT_TEMPLATE?><b><?php echo $name?></b> (<?php echo htmlspecialchars($desc) ?>)\r
+ <?php echo _CONFIRMTXT_TEMPLATE?><b><?php echo htmlspecialchars($name)?></b> (<?php echo htmlspecialchars($desc) ?>)\r
</p>\r
\r
<form method="post" action="index.php"><div>\r
$this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_templatedeleteconfirm() {\r
global $member, $manager;\r
\r
$this->action_templateoverview();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_templatenew() {\r
global $member;\r
\r
$this->action_templateoverview();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_templateclone() {\r
global $member;\r
\r
$this->action_templateoverview();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_skinoverview() {\r
global $member, $manager;\r
\r
$this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_skinnew() {\r
global $member;\r
\r
$this->action_skinoverview();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_skinedit() {\r
global $member, $manager;\r
\r
<li><a tabindex="75" href="index.php?action=skinedittype&skinid=<?php echo $skinid ?>&type=imagepopup"><?php echo _SKIN_PART_POPUP?></a> <?php help('skinpartimagepopup')?></li>\r
</ul>\r
\r
- <h3><?php echo _SKIN_GENSETTINGS_TITLE?></h3>\r
+ <?php\r
+\r
+ $query = "SELECT stype FROM " . sql_table('skin') . " WHERE stype NOT IN ('index', 'item', 'error', 'search', 'archive', 'archivelist', 'imagepopup', 'member') and sdesc = " . $skinid;\r
+ $res = sql_query($query);\r
+\r
+ echo '<h3>' . _SKIN_PARTS_SPECIAL . '</h3>';\r
+ echo '<form method="get" action="index.php">' . "\r\n";\r
+ echo '<input type="hidden" name="action" value="skinedittype" />' . "\r\n";\r
+ echo '<input type="hidden" name="skinid" value="' . $skinid . '" />' . "\r\n";\r
+ echo '<input name="type" tabindex="89" size="20" maxlength="20" />' . "\r\n";\r
+ echo '<input type="submit" tabindex="140" value="' . _SKIN_CREATE . '" onclick="return checkSubmit();" />' . "\r\n";\r
+ echo '</form>' . "\r\n";\r
+\r
+ if ($res && mysql_num_rows($res) > 0) {\r
+ echo '<ul>';\r
+ $tabstart = 75;\r
+\r
+ while ($row = mysql_fetch_assoc($res)) {\r
+ echo '<li><a tabindex="' . ($tabstart++) . '" href="index.php?action=skinedittype&skinid=' . $skinid . '&type=' . htmlspecialchars(strtolower($row['stype'])) . '">' . htmlspecialchars(ucfirst($row['stype'])) . '</a> (<a tabindex="' . ($tabstart++) . '" href="index.php?action=skinremovetype&skinid=' . $skinid . '&type=' . htmlspecialchars(strtolower($row['stype'])) . '">remove</a>)</li>';\r
+ }\r
+\r
+ echo '</ul>';\r
+ }\r
+\r
+ ?>\r
+\r
+ <h3><?php echo _SKIN_GENSETTINGS_TITLE; ?></h3>\r
<form method="post" action="index.php">\r
<div>\r
\r
<?php $this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_skineditgeneral() {\r
global $member;\r
\r
\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_skinedittype($msg = '') {\r
global $member, $manager;\r
\r
\r
$member->isAdmin() or $this->disallow();\r
\r
+ $type = trim($type);\r
+ $type = strtolower($type);\r
+\r
+ if (!isValidShortName($type)) {\r
+ $this->error(_ERROR_SKIN_PARTS_SPECIAL_FORMAT);\r
+ }\r
+\r
$skin =& new SKIN($skinid);\r
\r
$friendlyNames = SKIN::getFriendlyNames();\r
?>\r
<p>(<a href="index.php?action=skinoverview"><?php echo _SKIN_GOBACK?></a>)</p>\r
\r
- <h2><?php echo _SKIN_EDITPART_TITLE?> '<?php echo $skin->getName() ?>': <?php echo $friendlyNames[$type] ?></h2>\r
+ <h2><?php echo _SKIN_EDITPART_TITLE?> '<?php echo htmlspecialchars($skin->getName()) ?>': <?php echo htmlspecialchars(isset($friendlyNames[$type]) ? $friendlyNames[$type] : ucfirst($type)); ?></h2>\r
\r
<?php if ($msg) echo "<p>"._MESSAGE.": $msg</p>";\r
?>\r
\r
<input type="submit" value="<?php echo _SKIN_UPDATE_BTN?>" onclick="return checkSubmit();" />\r
<input type="reset" value="<?php echo _SKIN_RESET_BTN?>" />\r
- (skin type: <?php echo $friendlyNames[$type] ?>)\r
- <?php help('skinpart' . $type);?>\r
+ (skin type: <?php echo htmlspecialchars(isset($friendlyNames[$type]) ? $friendlyNames[$type] : ucfirst($type)); ?>)\r
+ <?php if (in_array($type, array('index', 'item', 'archivelist', 'archive', 'search', 'error', 'member', 'imagepopup'))) {\r
+ help('skinpart' . $type);\r
+ } else {\r
+ help('skinpartspecial');\r
+ }?>\r
<br />\r
\r
<textarea class="skinedit" tabindex="10" rows="20" cols="80" name="content"><?php echo htmlspecialchars($skin->getContent($type)) ?></textarea>\r
<br />\r
<input type="submit" tabindex="20" value="<?php echo _SKIN_UPDATE_BTN?>" onclick="return checkSubmit();" />\r
<input type="reset" value="<?php echo _SKIN_RESET_BTN?>" />\r
- (skin type: <?php echo $friendlyNames[$type] ?>)\r
+ (skin type: <?php echo htmlspecialchars(isset($friendlyNames[$type]) ? $friendlyNames[$type] : ucfirst($type)); ?>)\r
\r
<br /><br />\r
<?php echo _SKIN_ALLOWEDVARS?>\r
echo helplink('skinvar-' . $current) . "$current</a>";\r
if (count($actions) != 0) echo ", ";\r
}\r
- ?>\r
- <br /><br />\r
- Short blog names:\r
- <?php $query = 'SELECT bshortname, bname FROM '.sql_table('blog');\r
+ echo '<br /><br />' . _SKINEDIT_ALLOWEDBLOGS;\r
+ $query = 'SELECT bshortname, bname FROM '.sql_table('blog');\r
showlist($query,'table',array('content'=>'shortblognames'));\r
- ?>\r
-\r
- <br />\r
- Template names:\r
- <?php $query = 'SELECT tdname as name, tddesc as description FROM '.sql_table('template_desc');\r
+ echo '<br />' . _SKINEDIT_ALLOWEDTEMPLATESS;\r
+ $query = 'SELECT tdname as name, tddesc as description FROM '.sql_table('template_desc');\r
showlist($query,'table',array('content'=>'shortnames'));\r
- ?>\r
-\r
-\r
- </div>\r
- </form>\r
-\r
-\r
- <?php $this->pagefoot();\r
+ echo '</div></form>';\r
+ $this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_skinupdate() {\r
global $member;\r
\r
$this->action_skinedittype(_SKIN_UPDATED);\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_skindelete() {\r
global $member, $manager, $CONF;\r
\r
$query = 'SELECT bname FROM '.sql_table('blog').' WHERE bdefskin=' . $skinid;\r
$r = sql_query($query);\r
if ($o = mysql_fetch_object($r))\r
- $this->error(_ERROR_SKINDEFDELETE . $o->bname);\r
+ $this->error(_ERROR_SKINDEFDELETE . htmlspecialchars($o->bname));\r
\r
$this->pagehead();\r
\r
<h2><?php echo _DELETE_CONFIRM?></h2>\r
\r
<p>\r
- <?php echo _CONFIRMTXT_SKIN?><b><?php echo $name ?></b> (<?php echo htmlspecialchars($desc)?>)\r
+ <?php echo _CONFIRMTXT_SKIN?><b><?php echo htmlspecialchars($name) ?></b> (<?php echo htmlspecialchars($desc)?>)\r
</p>\r
\r
<form method="post" action="index.php"><div>\r
$this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_skindeleteconfirm() {\r
global $member, $CONF, $manager;\r
\r
$this->action_skinoverview();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
+ function action_skinremovetype() {\r
+ global $member, $manager, $CONF;\r
+\r
+ $skinid = intRequestVar('skinid');\r
+ $skintype = requestVar('type');\r
+\r
+ if (!isValidShortName($skintype)) {\r
+ $this->error(_ERROR_SKIN_PARTS_SPECIAL_DELETE);\r
+ }\r
+\r
+ $member->isAdmin() or $this->disallow();\r
+\r
+ // don't allow default skinparts to be deleted\r
+ if (in_array($skintype, array('index', 'item', 'archivelist', 'archive', 'search', 'error', 'member', 'imagepopup'))) {\r
+ $this->error(_ERROR_SKIN_PARTS_SPECIAL_DELETE);\r
+ }\r
+\r
+ $this->pagehead();\r
+\r
+ $skin =& new SKIN($skinid);\r
+ $name = $skin->getName();\r
+ $desc = $skin->getDescription();\r
+\r
+ ?>\r
+ <h2><?php echo _DELETE_CONFIRM?></h2>\r
+\r
+ <p>\r
+ <?php echo _CONFIRMTXT_SKIN_PARTS_SPECIAL; ?> <b><?php echo htmlspecialchars($skintype); ?> (<?php echo htmlspecialchars($name); ?>)</b> (<?php echo htmlspecialchars($desc)?>)\r
+ </p>\r
+\r
+ <form method="post" action="index.php"><div>\r
+ <input type="hidden" name="action" value="skinremovetypeconfirm" />\r
+ <?php $manager->addTicketHidden() ?>\r
+ <input type="hidden" name="skinid" value="<?php echo $skinid; ?>" />\r
+ <input type="hidden" name="type" value="<?php echo htmlspecialchars($skintype); ?>" />\r
+ <input type="submit" tabindex="10" value="<?php echo _DELETE_CONFIRM_BTN?>" />\r
+ </div></form>\r
+ <?php\r
+ $this->pagefoot();\r
+ }\r
+\r
+ /**\r
+ * @todo document this\r
+ */\r
+ function action_skinremovetypeconfirm() {\r
+ global $member, $CONF, $manager;\r
+\r
+ $skinid = intRequestVar('skinid');\r
+ $skintype = requestVar('type');\r
+\r
+ if (!isValidShortName($skintype)) {\r
+ $this->error(_ERROR_SKIN_PARTS_SPECIAL_DELETE);\r
+ }\r
+\r
+ $member->isAdmin() or $this->disallow();\r
+\r
+ // don't allow default skinparts to be deleted\r
+ if (in_array($skintype, array('index', 'item', 'archivelist', 'archive', 'search', 'error', 'member', 'imagepopup'))) {\r
+ $this->error(_ERROR_SKIN_PARTS_SPECIAL_DELETE);\r
+ }\r
+\r
+ $manager->notify('PreDeleteSkinPart', array('skinid' => $skinid, 'skintype' => $skintype));\r
+\r
+ // delete part\r
+ sql_query('DELETE FROM '.sql_table('skin').' WHERE sdesc=' . $skinid . ' AND stype=\'' . $skintype . '\'');\r
+\r
+ $manager->notify('PostDeleteSkinPart', array('skinid' => $skinid, 'skintype' => $skintype));\r
+\r
+ $this->action_skinedit();\r
+ }\r
+\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_skinclone() {\r
global $member;\r
\r
\r
\r
// 3. clone\r
+ /*\r
$this->skinclonetype($skin, $newid, 'index');\r
$this->skinclonetype($skin, $newid, 'item');\r
$this->skinclonetype($skin, $newid, 'archivelist');\r
$this->skinclonetype($skin, $newid, 'error');\r
$this->skinclonetype($skin, $newid, 'member');\r
$this->skinclonetype($skin, $newid, 'imagepopup');\r
+ */\r
+\r
+ $query = "SELECT stype FROM " . sql_table('skin') . " WHERE sdesc = " . $skinid;\r
+ $res = sql_query($query);\r
+ while ($row = mysql_fetch_assoc($res)) {\r
+ $this->skinclonetype($skin, $newid, $row['stype']);\r
+ }\r
\r
$this->action_skinoverview();\r
\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function skinclonetype($skin, $newid, $type) {\r
$newid = intval($newid);\r
$content = $skin->getContent($type);\r
}\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_settingsedit() {\r
global $member, $manager, $CONF, $DIR_NUCLEUS, $DIR_MEDIA;\r
\r
</td>\r
<td><?php $this->input_yesno('DisableSite',$CONF['DisableSite'],10060); ?>\r
<br />\r
- URL: <input name="DisableSiteURL" tabindex="10070" size="40" value="<?php echo htmlspecialchars($CONF['DisableSiteURL'])?>" />\r
+ <?php echo _SETTINGS_DISABLESITEURL ?> <input name="DisableSiteURL" tabindex="10070" size="40" value="<?php echo htmlspecialchars($CONF['DisableSiteURL'])?>" />\r
</td>\r
</tr><tr>\r
<td><?php echo _SETTINGS_DIRS?></td>\r
\r
</td>\r
</tr><tr>\r
+ <td><?php echo _SETTINGS_DEBUGVARS?> <?php help('debugvars');?></td>\r
+ <td><?php\r
+\r
+ $this->input_yesno('DebugVars',$CONF['DebugVars'],10078);\r
+\r
+ ?>\r
+\r
+ </td>\r
+ </tr><tr>\r
+ <td><?php echo _SETTINGS_DEFAULTLISTSIZE?> <?php help('defaultlistsize');?></td>\r
+ <td>\r
+ <?php\r
+ if (!array_key_exists('DefaultListSize',$CONF)) {\r
+ sql_query("INSERT INTO ".sql_table('config')." VALUES ('DefaultListSize', '10')");\r
+ $CONF['DefaultListSize'] = 10;\r
+ }\r
+ ?>\r
+ <input name="DefaultListSize" tabindex="10079" size="40" value="<?php echo htmlspecialchars((intval($CONF['DefaultListSize']) < 1 ? '10' : $CONF['DefaultListSize'])) ?>" />\r
+ </td>\r
+ </tr><tr>\r
<th colspan="2"><?php echo _SETTINGS_MEDIA?> <?php help('media'); ?></th>\r
</tr><tr>\r
<td><?php echo _SETTINGS_MEDIADIR?></td>\r
$this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_settingsupdate() {\r
global $member, $CONF;\r
\r
$this->updateConfig('CookieSecure', postVar('CookieSecure'));\r
$this->updateConfig('URLMode', postVar('URLMode'));\r
$this->updateConfig('CookiePrefix', postVar('CookiePrefix'));\r
+ $this->updateConfig('DebugVars', postVar('DebugVars'));\r
+ $this->updateConfig('DefaultListSize', postVar('DefaultListSize'));\r
\r
// load new config and redirect (this way, the new language will be used is necessary)\r
// note that when changing cookie settings, this redirect might cause the user\r
\r
}\r
\r
+ /**\r
+ * Give an overview over the used system\r
+ */\r
+ function action_systemoverview() {\r
+ global $member, $nucleus, $CONF;\r
+\r
+ $this->pagehead();\r
+\r
+ echo '<h2>' . _ADMIN_SYSTEMOVERVIEW_HEADING . "</h2>\n";\r
+\r
+ if ($member->isLoggedIn() && $member->isAdmin()) {\r
+\r
+ // Information about the used PHP and MySQL installation\r
+ echo '<h3>' . _ADMIN_SYSTEMOVERVIEW_PHPANDMYSQL . "</h3>\n";\r
+\r
+ // Version of PHP MySQL\r
+ echo "<table>\n";\r
+ echo "\t<tr>\n";\r
+ echo "\t\t" . '<th colspan="2">' . _ADMIN_SYSTEMOVERVIEW_VERSIONS . "</th>\n";\r
+ echo "\t</tr><tr>\n";\r
+ echo "\t\t" . '<td width="50%">' . _ADMIN_SYSTEMOVERVIEW_PHPVERSION . "</td>\n";\r
+ echo "\t\t" . '<td>' . phpversion() . "</td>\n";\r
+ echo "\t</tr><tr>\n";\r
+ echo "\t\t" . '<td>' . _ADMIN_SYSTEMOVERVIEW_MYSQLVERSION . "</td>\n";\r
+ echo "\t\t" . '<td>' . mysql_get_server_info() . ' (' . mysql_get_client_info() . ')' . "</td>\n";\r
+ echo "\t</tr>";\r
+ echo "</table>\n";\r
+\r
+ // Important PHP settings\r
+ echo "<table>\n";\r
+ echo "\t<tr>\n";\r
+ echo "\t\t" . '<th colspan="2">' . _ADMIN_SYSTEMOVERVIEW_SETTINGS . "</th>\n";\r
+ echo "\t</tr><tr>\n";\r
+ echo "\t\t" . '<td width="50%">magic_quotes_gpc' . "</td>\n";\r
+ $mqg = get_magic_quotes_gpc() ? 'On' : 'Off';\r
+ echo "\t\t" . '<td>' . $mqg . "</td>\n";\r
+ echo "\t</tr><tr>\n";\r
+ echo "\t\t" . '<td>magic_quotes_runtime' . "</td>\n";\r
+ $mqr = get_magic_quotes_runtime() ? 'On' : 'Off';\r
+ echo "\t\t" . '<td>' . $mqr . "</td>\n";\r
+ echo "\t</tr><tr>\n";\r
+ echo "\t\t" . '<td>register_globals' . "</td>\n";\r
+ $rg = ini_get('register_globals') ? 'On' : 'Off';\r
+ echo "\t\t" . '<td>' . $rg . "</td>\n";\r
+ echo "\t</tr>";\r
+ echo "</table>\n";\r
+\r
+ // Information about GD library\r
+ $gdinfo = gd_info();\r
+ echo "<table>\n";\r
+ echo "\t<tr>";\r
+ echo "\t\t" . '<th colspan="2">' . _ADMIN_SYSTEMOVERVIEW_GDLIBRALY . "</th>\n";\r
+ echo "\t</tr>\n";\r
+ foreach ($gdinfo as $key=>$value) {\r
+ if (is_bool($value)) {\r
+ $value = $value ? _ADMIN_SYSTEMOVERVIEW_ENABLE : _ADMIN_SYSTEMOVERVIEW_DISABLE;\r
+ } else {\r
+ $value = htmlspecialchars($value, ENT_QUOTES);\r
+ }\r
+ echo "\t<tr>";\r
+ echo "\t\t" . '<td width="50%">' . $key . "</td>\n";\r
+ echo "\t\t" . '<td>' . $value . "</td>\n";\r
+ echo "\t</tr>\n";\r
+ }\r
+ echo "</table>\n";\r
+\r
+ // Check if special modules are loaded\r
+ ob_start();\r
+ phpinfo(INFO_MODULES);\r
+ $im = ob_get_contents();\r
+ ob_clean();\r
+ echo "<table>\n";\r
+ echo "\t<tr>";\r
+ echo "\t\t" . '<th colspan="2">' . _ADMIN_SYSTEMOVERVIEW_MODULES . "</th>\n";\r
+ echo "\t</tr><tr>\n";\r
+ echo "\t\t" . '<td width="50%">mod_rewrite' . "</td>\n";\r
+ $modrewrite = (strstr($im, 'mod_rewrite') != '') ?\r
+ _ADMIN_SYSTEMOVERVIEW_ENABLE :\r
+ _ADMIN_SYSTEMOVERVIEW_DISABLE;\r
+ echo "\t\t" . '<td>' . $modrewrite . "</td>\n";\r
+ echo "\t</tr>\n";\r
+ echo "</table>\n";\r
+\r
+ // Information about the used Nucleus CMS\r
+ echo '<h3>' . _ADMIN_SYSTEMOVERVIEW_NUCLEUSSYSTEM . "</h3>\n";\r
+ global $nucleus;\r
+ $nv = getNucleusVersion() / 100 . '(' . $nucleus['version'] . ')';\r
+ $np = getNucleusPatchLevel();\r
+ echo "<table>\n";\r
+ echo "\t<tr>";\r
+ echo "\t\t" . '<th colspan="2">Nucleus CMS' . "</th>\n";\r
+ echo "\t</tr><tr>\n";\r
+ echo "\t\t" . '<td width="50%">' . _ADMIN_SYSTEMOVERVIEW_NUCLEUSVERSION . "</td>\n";\r
+ echo "\t\t" . '<td>' . $nv . "</td>\n";\r
+ echo "\t</tr><tr>\n";\r
+ echo "\t\t" . '<td width="50%">' . _ADMIN_SYSTEMOVERVIEW_NUCLEUSPATCHLEVEL . "</td>\n";\r
+ echo "\t\t" . '<td>' . $np . "</td>\n";\r
+ echo "\t</tr>\n";\r
+ echo "</table>\n";\r
+\r
+ // Important settings of the installation\r
+ echo "<table>\n";\r
+ echo "\t<tr>";\r
+ echo "\t\t" . '<th colspan="2">' . _ADMIN_SYSTEMOVERVIEW_NUCLEUSSETTINGS . "</th>\n";\r
+ echo "\t</tr><tr>\n";\r
+ echo "\t\t" . '<td width="50%">' . '$CONF[' . "'Self']</td>\n";\r
+ echo "\t\t" . '<td>' . $CONF['Self'] . "</td>\n";\r
+ echo "\t</tr><tr>\n";\r
+ echo "\t\t" . '<td width="50%">' . '$CONF[' . "'ItemURL']</td>\n";\r
+ echo "\t\t" . '<td>' . $CONF['ItemURL'] . "</td>\n";\r
+ echo "\t</tr><tr>\n";\r
+ echo "\t\t" . '<td width="50%">' . '$CONF[' . "'alertOnHeadersSent']</td>\n";\r
+ $ohs = $CONF['alertOnHeadersSent'] ?\r
+ _ADMIN_SYSTEMOVERVIEW_ENABLE :\r
+ _ADMIN_SYSTEMOVERVIEW_DISABLE;\r
+ echo "\t\t" . '<td>' . $ohs . "</td>\n";\r
+ echo "\t</tr>\n";\r
+ echo "</table>\n";\r
+\r
+ // Link to the online version test at the Nucleus CMS website\r
+ echo '<h3>' . _ADMIN_SYSTEMOVERVIEW_VERSIONCHECK . "</h3>\n";\r
+ if ($nucleus['codename'] != '') {\r
+ $codenamestring = ' "' . $nucleus['codename'] . '"';\r
+ } else {\r
+ $codenamestring = '';\r
+ }\r
+ echo _ADMIN_SYSTEMOVERVIEW_VERSIONCHECK_TXT;\r
+ $checkURL = sprintf(_ADMIN_SYSTEMOVERVIEW_VERSIONCHECK_URL, getNucleusVersion(), getNucleusPatchLevel());\r
+ echo '<a href="' . $checkURL . '" title="' . _ADMIN_SYSTEMOVERVIEW_VERSIONCHECK_TITLE . '">';\r
+ echo 'Nucleus CMS ' . $nv . $codenamestring;\r
+ echo '</a>';\r
+ //echo '<br />';\r
+ }\r
+ else {\r
+ echo _ADMIN_SYSTEMOVERVIEW_NOT_ADMIN;\r
+ }\r
+\r
+ $this->pagefoot();\r
+ }\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function updateConfig($name, $val) {\r
$name = addslashes($name);\r
$val = trim(addslashes($val));\r
. " SET value='$val'"\r
. " WHERE name='$name'";\r
\r
- mysql_query($query) or die("Query error: " . mysql_error());\r
+ sql_query($query) or die("Query error: " . mysql_error());\r
return mysql_insert_id();\r
}\r
\r
/**\r
- * Error message\r
- */\r
+ * Error message\r
+ * @param string $msg message that will be shown\r
+ */\r
function error($msg) {\r
$this->pagehead();\r
?>\r
exit;\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function disallow() {\r
ACTIONLOG::add(WARNING, _ACTIONLOG_DISALLOWED . serverVar('REQUEST_URI'));\r
\r
$this->error(_ERROR_DISALLOWED);\r
}\r
\r
-\r
+ /**\r
+ * @todo document this\r
+ */\r
function pagehead($extrahead = '') {\r
global $member, $nucleus, $CONF, $manager;\r
\r
\r
?>\r
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">\r
- <html xmlns="http://www.w3.org/1999/xhtml">\r
+ <html <?php echo _HTML_XML_NAME_SPACE_AND_LANG_CODE; ?>>\r
<head>\r
<meta http-equiv="Content-Type" content="text/html; charset=<?php echo _CHARSET ?>" />\r
<title><?php echo htmlspecialchars($CONF['SiteName'])?> - Admin</title>\r
\r
echo '<br />(';\r
\r
- if ($member->isLoggedIn() && $member->isAdmin())\r
- echo '<a href="http://nucleuscms.org/version.php?v=',getNucleusVersion(),'&pl=',getNucleusPatchLevel(),'" title="Check for upgrade">Nucleus CMS ', $nucleus['version'], '</a>';\r
- else\r
- echo 'Nucleus CMS ' , $nucleus['version'];\r
+ $codenamestring = ($nucleus['codename']!='')? ' "'.$nucleus['codename'].'"':'';\r
+\r
+ if ($member->isLoggedIn() && $member->isAdmin()) {\r
+ $checkURL = sprintf(_ADMIN_SYSTEMOVERVIEW_VERSIONCHECK_URL, getNucleusVersion(), getNucleusPatchLevel());\r
+ echo '<a href="' . $checkURL . '" title="' . _ADMIN_SYSTEMOVERVIEW_VERSIONCHECK_TITLE . '">Nucleus CMS ' . $nucleus['version'] . $codenamestring . '</a>';\r
+ } else {\r
+ echo 'Nucleus CMS ' . $nucleus['version'] . $codenamestring;\r
+ }\r
echo ')';\r
echo '</div>';\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function pagefoot() {\r
global $action, $member, $manager;\r
\r
<?php }\r
?>\r
<div class="foot">\r
- <a href="http://nucleuscms.org/">Nucleus CMS</a> © 2002-2005 The Nucleus Group\r
+ <a href="<?php echo _ADMINPAGEFOOT_OFFICIALURL ?>">Nucleus CMS</a> © 2002-<?php echo date('Y') . ' ' . _ADMINPAGEFOOT_COPYRIGHT; ?>\r
-\r
- <a href="http://nucleuscms.org/donate.php">Donate!</a>\r
+ <a href="<?php echo _ADMINPAGEFOOT_DONATEURL ?>"><?php echo _ADMINPAGEFOOT_DONATE ?></a>\r
</div>\r
\r
</div><!-- content -->\r
\r
echo '<h2>' . $member->getDisplayName(). '</h2>';\r
echo '<ul>';\r
- echo '<li><a href="index.php?action=editmembersettings">',_QMENU_USER_SETTINGS,'</a></li>';\r
- echo '<li><a href="index.php?action=browseownitems">',_QMENU_USER_ITEMS,'</a></li>';\r
- echo '<li><a href="index.php?action=browseowncomments">',_QMENU_USER_COMMENTS,'</a></li>';\r
+ echo '<li><a href="index.php?action=editmembersettings">' . _QMENU_USER_SETTINGS . '</a></li>';\r
+ echo '<li><a href="index.php?action=browseownitems">' . _QMENU_USER_ITEMS . '</a></li>';\r
+ echo '<li><a href="index.php?action=browseowncomments">' . _QMENU_USER_COMMENTS . '</a></li>';\r
echo '</ul>';\r
\r
\r
echo '<h2>',_QMENU_MANAGE,'</h2>';\r
\r
echo '<ul>';\r
- echo '<li><a href="index.php?action=actionlog">',_QMENU_MANAGE_LOG,'</a></li>';\r
- echo '<li><a href="index.php?action=settingsedit">',_QMENU_MANAGE_SETTINGS,'</a></li>';\r
- echo '<li><a href="index.php?action=usermanagement">',_QMENU_MANAGE_MEMBERS,'</a></li>';\r
- echo '<li><a href="index.php?action=createnewlog">',_QMENU_MANAGE_NEWBLOG,'</a></li>';\r
- echo '<li><a href="index.php?action=backupoverview">',_QMENU_MANAGE_BACKUPS,'</a></li>';\r
- echo '<li><a href="index.php?action=pluginlist">',_QMENU_MANAGE_PLUGINS,'</a></li>';\r
+ echo '<li><a href="index.php?action=actionlog">' . _QMENU_MANAGE_LOG . '</a></li>';\r
+ echo '<li><a href="index.php?action=settingsedit">' . _QMENU_MANAGE_SETTINGS . '</a></li>';\r
+ echo '<li><a href="index.php?action=systemoverview">' . _QMENU_MANAGE_SYSTEM . '</a></li>';\r
+ echo '<li><a href="index.php?action=usermanagement">' . _QMENU_MANAGE_MEMBERS . '</a></li>';\r
+ echo '<li><a href="index.php?action=createnewlog">' . _QMENU_MANAGE_NEWBLOG . '</a></li>';\r
+ echo '<li><a href="index.php?action=backupoverview">' . _QMENU_MANAGE_BACKUPS . '</a></li>';\r
+ echo '<li><a href="index.php?action=pluginlist">' . _QMENU_MANAGE_PLUGINS . '</a></li>';\r
echo '</ul>';\r
\r
echo '<h2>',_QMENU_LAYOUT,'</h2>';\r
echo '<ul>';\r
- echo '<li><a href="index.php?action=skinoverview">',_QMENU_LAYOUT_SKINS,'</a></li>';\r
- echo '<li><a href="index.php?action=templateoverview">',_QMENU_LAYOUT_TEMPL,'</a></li>';\r
- echo '<li><a href="index.php?action=skinieoverview">',_QMENU_LAYOUT_IEXPORT,'</a></li>';\r
+ echo '<li><a href="index.php?action=skinoverview">' . _QMENU_LAYOUT_SKINS . '</a></li>';\r
+ echo '<li><a href="index.php?action=templateoverview">' . _QMENU_LAYOUT_TEMPL . '</a></li>';\r
+ echo '<li><a href="index.php?action=skinieoverview">' . _QMENU_LAYOUT_IEXPORT . '</a></li>';\r
echo '</ul>';\r
\r
}\r
</html>\r
<?php }\r
\r
-\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_regfile() {\r
global $member, $CONF;\r
\r
// header-code stolen from phpMyAdmin\r
// REGEDIT and bookmarklet code stolen from GreyMatter\r
\r
- $sjisBlogName = getBlogNameFromID($blogid);\r
+ $sjisBlogName = sprintf(_WINREGFILE_TEXT, getBlogNameFromID($blogid));\r
$sjisBlogName = mb_convert_encoding($sjisBlogName, "SJIS", "auto");\r
\r
header('Content-Type: application/octetstream');\r
header('Expires: 0');\r
\r
echo "REGEDIT4\n";\r
- echo "[HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\MenuExt\\Post To &Nucleus (".$sjisBlogName.")]\n";\r
+ echo "[HKEY_CURRENT_USER\\Software\\Microsoft\\Internet Explorer\\MenuExt\\" . $sjisBlogName . "]\n";\r
echo '@="' . $CONF['AdminURL'] . "bookmarklet.php?action=contextmenucode&blogid=".intval($blogid)."\"\n";\r
echo '"contexts"=hex:31';\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_bookmarklet() {\r
global $member, $manager;\r
\r
\r
?>\r
\r
- <h2>Bookmarklet<!-- and Right Click Menu --></h2>\r
+ <h2><?php echo _BOOKMARKLET_TITLE ?></h2>\r
\r
<p>\r
- Bookmarklet とは、クリック1回で記事の投稿ができるシステムです。 この Bookmarklet をインストールすると、ブラウザのツールバーの'add to weblog'ボタンが利用可能となり、Nucleusの新規アイテムの追加ウィンドウがポップアップします。任意のWebページを開いた状態でこのボタンを押せば、そのWebページのタイトルと、そのページへのリンクタグがすでに埋め込まれた状態でアイテム追加ウィンドウが開き、さらに、そのページ内に引用したい文を選択した状態であればその引用文も自動的に引用します。\r
+ <?php echo _BOOKMARKLET_DESC1 . _BOOKMARKLET_DESC2 . _BOOKMARKLET_DESC3 . _BOOKMARKLET_DESC4 . _BOOKMARKLET_DESC5 ?>\r
</p>\r
\r
- <h3>Bookmarklet</h3>\r
+ <h3><?php echo _BOOKMARKLET_BOOKARKLET ?></h3>\r
<p>\r
- 下のリンク部分を「お気に入り」もしくはツールバーにドラッグできます。<small>(その前にテストしてみたい場合は単純に下のリンクをクリックしてみてください)</small>\r
+ <?php echo _BOOKMARKLET_BMARKTEXT ?><small><?php echo _BOOKMARKLET_BMARKTEST ?></small>\r
<br />\r
<br />\r
- <a href="<?php echo htmlspecialchars($bm)?>">Add to <?php echo $blog->getShortName()?></a> (ほとんどのブラウザで動作します)\r
+ <?php echo '<a href="' . htmlspecialchars($bm, ENT_QUOTES) . '">' . sprintf(_BOOKMARKLET_ANCHOR, htmlspecialchars($blog->getName(), ENT_QUOTES)) . '</a>' . _BOOKMARKLET_BMARKFOLLOW; ?>\r
</p>\r
\r
- <h3>右クリックメニューにインストール (WindowsでIE使用時)</h3>\r
+ <h3><?php echo _BOOKMARKLET_RIGHTCLICK ?></h3>\r
<p>\r
<?php\r
$url = 'index.php?action=regfile&blogid=' . intval($blogid);\r
$url = $manager->addTicketToUrl($url);\r
?>\r
- あるいは<a href="<?php echo htmlspecialchars($url) ?>">右クリックメニュー</a>にインストールすることもできます (「開く」を選択すれば直接レジストリに登録します)\r
+ <?php echo _BOOKMARKLET_RIGHTTEXT1 . '<a href="' . htmlspecialchars($url, ENT_QUOTES, "SJIS") . '">' . _BOOKMARKLET_RIGHTLABEL . '</a>' . _BOOKMARKLET_RIGHTTEXT2; ?>\r
</p>\r
\r
<p>\r
- このインストールした右クリックメニューを表示するためにはIEの再起動が必要です。\r
+ <?php echo _BOOKMARKLET_RIGHTTEXT3 ?>\r
</p>\r
\r
- <h3>アンインストール</h3>\r
+ <h3><?php echo _BOOKMARKLET_UNINSTALLTT ?></h3>\r
<p>\r
- 「お気に入り」もしくはツールバーから消すには、単に削除するだけです。\r
+ <?php echo _BOOKMARKLET_DELETEBAR ?>\r
</p>\r
- \r
+\r
<p>\r
- 右クリックメニューから消したい時は、以下の手順を踏んでください:\r
+ <?php echo _BOOKMARKLET_DELETERIGHTT ?>\r
</p>\r
\r
<ol>\r
- <li>スタートメニューから「ファイルを指定して実行...」を選択</li>\r
- <li>"regedit" と入力</li>\r
- <li>"OK" ボタンを押す</li>\r
- <li>"\HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt" をツリーの中から検索</li>\r
- <li>"add to weblog" エントリを削除</li> \r
+ <li><?php echo _BOOKMARKLET_DELETERIGHT1 ?></li>\r
+ <li><?php echo _BOOKMARKLET_DELETERIGHT2 ?></li>\r
+ <li><?php echo _BOOKMARKLET_DELETERIGHT3 ?></li>\r
+ <li><?php echo _BOOKMARKLET_DELETERIGHT4 ?></li>\r
+ <li><?php echo _BOOKMARKLET_DELETERIGHT5 ?></li>\r
</ol>\r
\r
<?php\r
\r
}\r
\r
-\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_actionlog() {\r
global $member, $manager;\r
\r
\r
}\r
\r
-\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_banlist() {\r
global $member, $manager;\r
\r
\r
}\r
\r
-\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_banlistdelete() {\r
global $member, $manager;\r
\r
$member->blogAdminRights($blogid) or $this->disallow();\r
\r
$blog =& $manager->getBlog($blogid);\r
+ $banBlogName = htmlspecialchars($blog->getName(), ENT_QUOTES);\r
\r
$this->pagehead();\r
?>\r
\r
<div>\r
<input type="hidden" name="blogid" value="<?php echo $blogid?>" />\r
- <input name="allblogs" type="radio" value="0" id="allblogs_one" /><label for="allblogs_one">Only blog '<?php echo htmlspecialchars($blog->getName())?>'</label>\r
+ <input name="allblogs" type="radio" value="0" id="allblogs_one" />\r
+ <label for="allblogs_one"><?php echo sprintf(_BAN_BANBLOGNAME, $banBlogName) ?></label>\r
<br />\r
<input name="allblogs" type="radio" value="1" checked="checked" id="allblogs_all" /><label for="allblogs_all"><?php echo _BAN_ALLBLOGS?></label>\r
</div>\r
$this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_banlistdeleteconfirm() {\r
global $member, $manager;\r
\r
\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_banlistnewfromitem() {\r
$this->action_banlistnew(getBlogIDFromItemID(intRequestVar('itemid')));\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_banlistnew($blogid = '') {\r
global $member, $manager;\r
\r
<p><?php echo _BAN_IPRANGE_TEXT?></p>\r
\r
<div class="note">\r
- <b>An example</b>: "134.58.253.193" will only block one computer, while "134.58.253" will block 256 IP addresses, including the one from the first example.\r
+ <strong><?php echo _BAN_EXAMPLE_TITLE ?></strong>\r
+ <?php echo _BAN_EXAMPLE_TEXT ?>\r
</div>\r
\r
<div>\r
- <?php if ($ip) {\r
+ <?php\r
+ if ($ip) {\r
+ $iprangeVal = htmlspecialchars($ip, ENT_QUOTES);\r
?>\r
- <input name="iprange" type="radio" value="<?php echo htmlspecialchars($ip)?>" checked="checked" id="ip_fixed" /><label for="ip_fixed"><?php echo htmlspecialchars($ip)?></label>\r
+ <input name="iprange" type="radio" value="<?php echo $iprangeVal ?>" checked="checked" id="ip_fixed" />\r
+ <label for="ip_fixed"><?php echo $iprangeVal ?></label>\r
<br />\r
- <input name="iprange" type="radio" value="custom" id="ip_custom" /><label for="ip_custom">Custom: </label><input name='customiprange' value='<?php echo htmlspecialchars($ip)?>' maxlength='15' size='15' />\r
- <?php } else {\r
+ <input name="iprange" type="radio" value="custom" id="ip_custom" />\r
+ <label for="ip_custom"><?php echo _BAN_IP_CUSTOM ?></label>\r
+ <input name='customiprange' value='<?php echo $iprangeVal ?>' maxlength='15' size='15' />\r
+ <?php\r
+ } else {\r
echo "<input name='iprange' value='custom' type='hidden' />";\r
echo "<input name='customiprange' value='' maxlength='15' size='15' />";\r
}\r
<?php $this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_banlistadd() {\r
global $member;\r
\r
\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_clearactionlog() {\r
global $member;\r
\r
$this->action_manage(_MSG_ACTIONLOGCLEARED);\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_backupoverview() {\r
global $member, $manager;\r
\r
<?php $this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_backupcreate() {\r
global $member, $DIR_LIBS;\r
\r
// (creating/restoring dumps might take a while)\r
@set_time_limit(1200);\r
\r
- do_backup($useGzip);\r
+ $bu = new Backup();\r
+ $bu->do_backup($useGzip);\r
exit;\r
}\r
\r
-\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_backuprestore() {\r
global $member, $DIR_LIBS;\r
\r
// (creating/restoring dumps might take a while)\r
@set_time_limit(1200);\r
\r
- $message = do_restore();\r
+ $bu = new Backup();\r
+ $message = $bu->do_restore();\r
if ($message != '')\r
$this->error($message);\r
\r
\r
}\r
\r
-\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_pluginlist() {\r
global $member, $manager;\r
\r
if (ereg('^NP_(.*)\.php$',$filename,$matches)) {\r
$name = $matches[1];\r
// only show in list when not yet installed\r
- if (mysql_num_rows(sql_query('SELECT * FROM '.sql_table('plugin').' WHERE pfile="NP_'.addslashes($name).'"')) == 0)\r
+ $res = sql_query('SELECT * FROM '.sql_table('plugin').' WHERE pfile="NP_'.addslashes($name).'"');\r
+ if (mysql_num_rows($res) == 0)\r
array_push($candidates,$name);\r
}\r
}\r
$this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_pluginhelp() {\r
global $member, $manager, $DIR_PLUGINS, $CONF;\r
\r
$this->pagefoot();\r
}\r
\r
-\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_pluginadd() {\r
global $member, $manager, $DIR_PLUGINS;\r
\r
if ($manager->pluginInstalled($name))\r
$this->error(_ERROR_DUPPLUGIN);\r
if (!checkPlugin($name))\r
- $this->error(_ERROR_PLUGFILEERROR . ' (' . $name . ')');\r
-\r
- // check if the plugin dependency is met\r
- $plugin =& $manager->getPlugin($name);\r
- $pluginList = $plugin->getPluginDep();\r
- foreach ($pluginList as $pluginName)\r
- {\r
-\r
- $res = sql_query('SELECT * FROM '.sql_table('plugin') . ' WHERE pfile="' . $pluginName . '"');\r
- if (mysql_num_rows($res) == 0)\r
- {\r
- // uninstall plugin again...\r
- $this->deleteOnePlugin($plugin->getID());\r
-\r
- $this->error(_ERROR_INSREQPLUGIN . $pluginName);\r
- }\r
- }\r
+ $this->error(_ERROR_PLUGFILEERROR . ' (' . htmlspecialchars($name) . ')');\r
\r
// get number of currently installed plugins\r
- $numCurrent = mysql_num_rows(sql_query('SELECT * FROM '.sql_table('plugin')));\r
+ $res = sql_query('SELECT * FROM '.sql_table('plugin'));\r
+ $numCurrent = mysql_num_rows($res);\r
\r
// plugin will be added as last one in the list\r
$newOrder = $numCurrent + 1;\r
sql_query($query);\r
$iPid = mysql_insert_id();\r
\r
- // need to update the plugin object's pid since we didn't have it above when it's first create....\r
- $plugin->plugid = $iPid;\r
-\r
$manager->clearCachedInfo('installedPlugins');\r
\r
- // call the install method of the plugin\r
+ // Load the plugin for condition checking and instalation\r
+ $plugin =& $manager->getPlugin($name);\r
+\r
+ // check if it got loaded (could have failed)\r
if (!$plugin)\r
{\r
sql_query('DELETE FROM ' . sql_table('plugin') . ' WHERE pid='. intval($iPid));\r
$manager->clearCachedInfo('installedPlugins');\r
- $this->error('Plugin could not be loaded, or does not support certain features that are required for it to run on your Nucleus installation (you might want to check the <a href="?action=actionlog">actionlog</a> for more info)');\r
+ $this->error(_ERROR_PLUGIN_LOAD);\r
}\r
\r
// check if plugin needs a newer Nucleus version\r
$this->deleteOnePlugin($plugin->getID());\r
\r
// ...and show error\r
- $this->error(_ERROR_NUCLEUSVERSIONREQ . $plugin->getMinNucleusVersion());\r
+ $this->error(_ERROR_NUCLEUSVERSIONREQ . htmlspecialchars($plugin->getMinNucleusVersion()));\r
}\r
\r
// check if plugin needs a newer Nucleus version\r
$this->deleteOnePlugin($plugin->getID());\r
\r
// ...and show error\r
- $this->error(_ERROR_NUCLEUSVERSIONREQ . $plugin->getMinNucleusVersion() . ' patch ' . $plugin->getMinNucleusPatchLevel());\r
+ $this->error(_ERROR_NUCLEUSVERSIONREQ . htmlspecialchars( $plugin->getMinNucleusVersion() . ' patch ' . $plugin->getMinNucleusPatchLevel() ) );\r
+ }\r
+\r
+ $pluginList = $plugin->getPluginDep();\r
+ foreach ($pluginList as $pluginName)\r
+ {\r
+\r
+ $res = sql_query('SELECT * FROM '.sql_table('plugin') . ' WHERE pfile="' . $pluginName . '"');\r
+ if (mysql_num_rows($res) == 0)\r
+ {\r
+ // uninstall plugin again...\r
+ $this->deleteOnePlugin($plugin->getID());\r
+\r
+ $this->error(sprintf(_ERROR_INSREQPLUGIN, htmlspecialchars($pluginName, ENT_QUOTES)));\r
+ }\r
}\r
\r
+ // call the install method of the plugin\r
$plugin->install();\r
\r
$manager->notify(\r
$this->action_pluginupdate();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_pluginupdate() {\r
- global $member, $manager;\r
+ global $member, $manager, $CONF;\r
\r
// check if allowed\r
$member->isAdmin() or $this->disallow();\r
}\r
}\r
\r
- $this->action_pluginlist();\r
+ redirect($CONF['AdminURL'] . '?action=pluginlist');\r
+// $this->action_pluginlist();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_plugindelete() {\r
global $member, $manager;\r
\r
<input type="hidden" name="plugid" value="<?php echo $pid; ?>" />\r
<input type="submit" tabindex="10" value="<?php echo _DELETE_CONFIRM_BTN?>" />\r
</div></form>\r
- <?php $this->pagefoot();\r
+ <?php\r
+ $this->pagefoot();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_plugindeleteconfirm() {\r
- global $member, $manager;\r
+ global $member, $manager, $CONF;\r
\r
// check if allowed\r
$member->isAdmin() or $this->disallow();\r
$this->error($error);\r
}\r
\r
- $this->action_pluginlist();\r
+ redirect($CONF['AdminURL'] . '?action=pluginlist');\r
+// $this->action_pluginlist();\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function deleteOnePlugin($pid, $callUninstall = 0) {\r
global $manager;\r
\r
\r
$name = quickQuery('SELECT pfile as result FROM '.sql_table('plugin').' WHERE pid='.$pid);\r
\r
- // call the unInstall method of the plugin\r
+/* // call the unInstall method of the plugin\r
if ($callUninstall) {\r
$plugin =& $manager->getPlugin($name);\r
if ($plugin) $plugin->unInstall();\r
- }\r
+ }*/\r
\r
// check dependency before delete\r
$res = sql_query('SELECT pfile FROM '.sql_table('plugin'));\r
{\r
if ($name == $depName)\r
{\r
- return _ERROR_DELREQPLUGIN . $o->pfile;\r
+ return sprintf(_ERROR_DELREQPLUGIN, $o->pfile);\r
}\r
}\r
}\r
\r
$manager->notify('PreDeletePlugin', array('plugid' => $pid));\r
\r
+ // call the unInstall method of the plugin\r
+ if ($callUninstall) {\r
+ $plugin =& $manager->getPlugin($name);\r
+ if ($plugin) $plugin->unInstall();\r
+ }\r
+\r
// delete all subscriptions\r
sql_query('DELETE FROM '.sql_table('plugin_event').' WHERE pid=' . $pid);\r
\r
sql_query('DELETE FROM '.sql_table('plugin_option').' WHERE oid in ('.implode(',',$aOIDs).')');\r
\r
// update order numbers\r
- $o = mysql_fetch_object(sql_query('SELECT porder FROM '.sql_table('plugin').' WHERE pid=' . $pid));\r
+ $res = sql_query('SELECT porder FROM '.sql_table('plugin').' WHERE pid=' . $pid);\r
+ $o = mysql_fetch_object($res);\r
sql_query('UPDATE '.sql_table('plugin').' SET porder=(porder - 1) WHERE porder>'.$o->porder);\r
\r
// delete row\r
return '';\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_pluginup() {\r
- global $member, $manager;\r
+ global $member, $manager, $CONF;\r
\r
// check if allowed\r
$member->isAdmin() or $this->disallow();\r
$this->error(_ERROR_NOSUCHPLUGIN);\r
\r
// 1. get old order number\r
- $o = mysql_fetch_object(sql_query('SELECT porder FROM '.sql_table('plugin').' WHERE pid='.$plugid));\r
+ $res = sql_query('SELECT porder FROM '.sql_table('plugin').' WHERE pid='.$plugid);\r
+ $o = mysql_fetch_object($res);\r
$oldOrder = $o->porder;\r
\r
// 2. calculate new order number\r
sql_query('UPDATE '.sql_table('plugin').' SET porder='.$oldOrder.' WHERE porder='.$newOrder);\r
sql_query('UPDATE '.sql_table('plugin').' SET porder='.$newOrder.' WHERE pid='.$plugid);\r
\r
- $this->action_pluginlist();\r
+ //$this->action_pluginlist();\r
+ // To avoid showing ticket in the URL, redirect to pluginlist, instead.\r
+ redirect($CONF['AdminURL'] . '?action=pluginlist');\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_plugindown() {\r
- global $member, $manager;\r
+ global $member, $manager, $CONF;\r
\r
// check if allowed\r
$member->isAdmin() or $this->disallow();\r
$this->error(_ERROR_NOSUCHPLUGIN);\r
\r
// 1. get old order number\r
- $o = mysql_fetch_object(sql_query('SELECT porder FROM '.sql_table('plugin').' WHERE pid='.$plugid));\r
+ $res = sql_query('SELECT porder FROM '.sql_table('plugin').' WHERE pid='.$plugid);\r
+ $o = mysql_fetch_object($res);\r
$oldOrder = $o->porder;\r
\r
- $maxOrder = mysql_num_rows(sql_query('SELECT * FROM '.sql_table('plugin')));\r
+ $res = sql_query('SELECT * FROM '.sql_table('plugin'));\r
+ $maxOrder = mysql_num_rows($res);\r
\r
// 2. calculate new order number\r
$newOrder = ($oldOrder < $maxOrder) ? ($oldOrder + 1) : $maxOrder;\r
sql_query('UPDATE '.sql_table('plugin').' SET porder='.$oldOrder.' WHERE porder='.$newOrder);\r
sql_query('UPDATE '.sql_table('plugin').' SET porder='.$newOrder.' WHERE pid='.$plugid);\r
\r
- $this->action_pluginlist();\r
+ //$this->action_pluginlist();\r
+ // To avoid showing ticket in the URL, redirect to pluginlist, instead.\r
+ redirect($CONF['AdminURL'] . '?action=pluginlist');\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_pluginoptions($message = '') {\r
global $member, $manager;\r
\r
$this->error(_ERROR_NOSUCHPLUGIN);\r
\r
$extrahead = '<script type="text/javascript" src="javascript/numbercheck.js"></script>';\r
+ $pluginName = htmlspecialchars(getPluginNameFromPid($pid), ENT_QUOTES);\r
$this->pagehead($extrahead);\r
\r
?>\r
<p><a href="index.php?action=pluginlist">(<?php echo _PLUGS_BACK?>)</a></p>\r
\r
- <h2>Options for <?php echo htmlspecialchars(getPluginNameFromPid($pid))?></h2>\r
+ <h2><?php echo sprintf(_PLUGIN_OPTIONS_TITLE, $pluginName) ?></h2>\r
\r
<?php if ($message) echo $message?>\r
\r
\r
}\r
\r
+ /**\r
+ * @todo document this\r
+ */\r
function action_pluginoptionsupdate() {\r
global $member, $manager;\r
\r
}\r
\r
/**\r
- * @static\r
- */\r
+ * @static\r
+ * @todo document this\r
+ */\r
function _insertPluginOptions($context, $contextid = 0) {\r
// get all current values for this contextid\r
// (note: this might contain doubles for overlapping contextids)\r
echo '<tr><th colspan="2">Options for ', htmlspecialchars($aOption['pfile']),'</th></tr>';\r
}\r
\r
- echo '<tr>';\r
- listplug_plugOptionRow($aOption);\r
- echo '</tr>';\r
+ $meta = NucleusPlugin::getOptionMeta($aOption['typeinfo']);\r
+ if (@$meta['access'] != 'hidden') {\r
+ echo '<tr>';\r
+ listplug_plugOptionRow($aOption);\r
+ echo '</tr>';\r
+ }\r
\r
}\r
\r
\r
}\r
\r
- /* helper functions to create option forms etc. */\r
- function input_yesno($name, $checkedval,$tabindex = 0, $value1 = 1, $value2 = 0, $yesval = _YES, $noval = _NO) {\r
+ /**\r
+ * Helper functions to create option forms etc.\r
+ * @todo document parameters\r
+ */\r
+ function input_yesno($name, $checkedval,$tabindex = 0, $value1 = 1, $value2 = 0, $yesval = _YES, $noval = _NO, $isAdmin = 0) {\r
$id = htmlspecialchars($name);\r
$id = str_replace('[','-',$id);\r
$id = str_replace(']','-',$id);\r
$id1 = $id . htmlspecialchars($value1);\r
$id2 = $id . htmlspecialchars($value2);\r
\r
- echo '<input type="radio" name="', htmlspecialchars($name),'" value="', htmlspecialchars($value1),'" ';\r
+ if ($name=="admin") {\r
+ echo '<input onclick="selectCanLogin(true);" type="radio" name="', htmlspecialchars($name),'" value="', htmlspecialchars($value1),'" ';\r
+ } else {\r
+ echo '<input type="radio" name="', htmlspecialchars($name),'" value="', htmlspecialchars($value1),'" ';\r
+ }\r
+\r
if ($checkedval == $value1)\r
echo "tabindex='$tabindex' checked='checked'";\r
echo ' id="'.$id1.'" /><label for="'.$id1.'">' . $yesval . '</label>';\r
echo ' ';\r
- echo '<input type="radio" name="', htmlspecialchars($name),'" value="', htmlspecialchars($value2),'" ';\r
+ if ($name=="admin") {\r
+ echo '<input onclick="selectCanLogin(false);" type="radio" name="', htmlspecialchars($name),'" value="', htmlspecialchars($value2),'" ';\r
+ } else {\r
+ echo '<input type="radio" name="', htmlspecialchars($name),'" value="', htmlspecialchars($value2),'" ';\r
+ }\r
if ($checkedval != $value1)\r
echo "tabindex='$tabindex' checked='checked'";\r
+ if ($isAdmin && $name=="canlogin")\r
+ echo ' disabled="disabled"';\r
echo ' id="'.$id2.'" /><label for="'.$id2.'">' . $noval . '</label>';\r
}\r
\r
-\r
-\r
} // class ADMIN\r
\r
-class ENCAPSULATE {\r
- /**\r
- * Uses $call to call a function using parameters $params\r
- * This function should return the amount of entries shown.\r
- * When entries are show, batch operation handlers are shown too.\r
- * When no entries were shown, $errormsg is used to display an error\r
- *\r
- * Passes on the amount of results found (for further encapsulation)\r
- */\r
- function doEncapsulate($call, $params, $errorMessage = 'No entries') {\r
- // start output buffering\r
- ob_start();\r
-\r
- $nbOfRows = call_user_func_array($call, $params);\r
-\r
- // get list contents and stop buffering\r
- $list = ob_get_contents();\r
- ob_end_clean();\r
-\r
- if ($nbOfRows > 0) {\r
- $this->showHead();\r
- echo $list;\r
- $this->showFoot();\r
- } else {\r
- echo $errorMessage;\r
- }\r
-\r
- return $nbOfRows;\r
- }\r
-}\r
-\r
-\r
-/**\r
- * A class used to encapsulate a list of some sort inside next/prev buttons\r
- */\r
-class NAVLIST extends ENCAPSULATE {\r
-\r
- function NAVLIST($action, $start, $amount, $minamount, $maxamount, $blogid, $search, $itemid) {\r
- $this->action = $action;\r
- $this->start = $start;\r
- $this->amount = $amount;\r
- $this->minamount = $minamount;\r
- $this->maxamount = $maxamount;\r
- $this->blogid = $blogid;\r
- $this->search = $search;\r
- $this->itemid = $itemid;\r
- }\r
-\r
- function showBatchList($batchtype, $query, $type, $template, $errorMessage = _LISTS_NOMORE) {\r
- $batch =& new BATCH($batchtype);\r
-\r
- $this->doEncapsulate(\r
- array(&$batch, 'showlist'),\r
- array(&$query, $type, $template),\r
- $errorMessage\r
- );\r
-\r
- }\r
-\r
-\r
- function showHead() {\r
- $this->showNavigation();\r
- }\r
- function showFoot() {\r
- $this->showNavigation();\r
- }\r
-\r
- /**\r
- * Displays a next/prev bar for long tables\r
- */\r
- function showNavigation() {\r
- $action = $this->action;\r
- $start = $this->start;\r
- $amount = $this->amount;\r
- $minamount = $this->minamount;\r
- $maxamount = $this->maxamount;\r
- $blogid = $this->blogid;\r
- $search = $this->search;\r
- $itemid = $this->itemid;\r
-\r
- $prev = $start - $amount;\r
- if ($prev < $minamount) $prev=$minamount;\r
-\r
- // maxamount not used yet\r
- // if ($start + $amount <= $maxamount)\r
- $next = $start + $amount;\r
- // else\r
- // $next = $start;\r
-\r
- ?>\r
- <table class="navigation">\r
- <tr><td>\r
- <form method="post" action="index.php"><div>\r
- <input type="submit" value="<< <?php echo _LISTS_PREV?>" />\r
- <input type="hidden" name="blogid" value="<?php echo $blogid; ?>" />\r
- <input type="hidden" name="itemid" value="<?php echo $itemid; ?>" />\r
- <input type="hidden" name="action" value="<?php echo $action; ?>" />\r
- <input type="hidden" name="amount" value="<?php echo $amount; ?>" />\r
- <input type="hidden" name="search" value="<?php echo $search; ?>" />\r
- <input type="hidden" name="start" value="<?php echo $prev; ?>" />\r
- </div></form>\r
- </td><td>\r
- <form method="post" action="index.php"><div>\r
- <input type="hidden" name="blogid" value="<?php echo $blogid; ?>" />\r
- <input type="hidden" name="itemid" value="<?php echo $itemid; ?>" />\r
- <input type="hidden" name="action" value="<?php echo $action; ?>" />\r
- <input name="amount" size="3" value="<?php echo $amount; ?>" /> <?php echo _LISTS_PERPAGE?>\r
- <input type="hidden" name="start" value="<?php echo $start; ?>" />\r
- <input type="hidden" name="search" value="<?php echo $search; ?>" />\r
- <input type="submit" value="> <?php echo _LISTS_CHANGE?>" />\r
- </div></form>\r
- </td><td>\r
- <form method="post" action="index.php"><div>\r
- <input type="hidden" name="blogid" value="<?php echo $blogid; ?>" />\r
- <input type="hidden" name="itemid" value="<?php echo $itemid; ?>" />\r
- <input type="hidden" name="action" value="<?php echo $action; ?>" />\r
- <input type="hidden" name="amount" value="<?php echo $amount; ?>" />\r
- <input type="hidden" name="start" value="0" />\r
- <input type="text" name="search" value="<?php echo $search; ?>" size="7" />\r
- <input type="submit" value="> <?php echo _LISTS_SEARCH?>" />\r
- </div></form>\r
- </td><td>\r
- <form method="post" action="index.php"><div>\r
- <input type="submit" value="<?php echo _LISTS_NEXT?> > >" />\r
- <input type="hidden" name="search" value="<?php echo $search; ?>" />\r
- <input type="hidden" name="blogid" value="<?php echo $blogid; ?>" />\r
- <input type="hidden" name="itemid" value="<?php echo $itemid; ?>" />\r
- <input type="hidden" name="action" value="<?php echo $action; ?>" />\r
- <input type="hidden" name="amount" value="<?php echo $amount; ?>" />\r
- <input type="hidden" name="start" value="<?php echo $next; ?>" />\r
- </div></form>\r
- </td></tr>\r
- </table>\r
- <?php }\r
-\r
-\r
-}\r
-\r
-/**\r
- * A class used to encapsulate a list of some sort in a batch selection\r
- */\r
-class BATCH extends ENCAPSULATE {\r
- function BATCH($type) {\r
- $this->type = $type;\r
- }\r
-\r
- function showHead() {\r
- ?>\r
- <form method="post" action="index.php">\r
- <?php\r
-// TODO: get a list op operations above the list too\r
-// (be careful not to use the same names for the select...)\r
-// $this->showOperationList();\r
- }\r
-\r
- function showFoot() {\r
- $this->showOperationList();\r
- ?>\r
- </form>\r
- <?php }\r
-\r
- function showOperationList() {\r
- global $manager;\r
- ?>\r
- <div class="batchoperations">\r
- <?php echo _BATCH_WITH_SEL ?>\r
- <select name="batchaction">\r
- <?php $options = array();\r
- switch($this->type) {\r
- case 'item':\r
- $options = array(\r
- 'delete' => _BATCH_ITEM_DELETE,\r
- 'move' => _BATCH_ITEM_MOVE\r
- );\r
- break;\r
- case 'member':\r
- $options = array(\r
- 'delete' => _BATCH_MEMBER_DELETE,\r
- 'setadmin' => _BATCH_MEMBER_SET_ADM,\r
- 'unsetadmin' => _BATCH_MEMBER_UNSET_ADM\r
- );\r
- break;\r
- case 'team':\r
- $options = array(\r
- 'delete' => _BATCH_TEAM_DELETE,\r
- 'setadmin' => _BATCH_TEAM_SET_ADM,\r
- 'unsetadmin' => _BATCH_TEAM_UNSET_ADM,\r
- );\r
- break;\r
- case 'category':\r
- $options = array(\r
- 'delete' => _BATCH_CAT_DELETE,\r
- 'move' => _BATCH_CAT_MOVE,\r
- );\r
- break;\r
- case 'comment':\r
- $options = array(\r
- 'delete' => _BATCH_COMMENT_DELETE,\r
- );\r
- break;\r
- }\r
- foreach ($options as $option => $label) {\r
- echo '<option value="',$option,'">',$label,'</option>';\r
- }\r
- ?>\r
- </select>\r
- <input type="hidden" name="action" value="batch<?php echo $this->type?>" />\r
- <?php\r
- $manager->addTicketHidden();\r
-\r
- // add hidden fields for 'team' and 'comment' batchlists\r
- if ($this->type == 'team')\r
- {\r
- echo '<input type="hidden" name="blogid" value="',intRequestVar('blogid'),'" />';\r
- }\r
- if ($this->type == 'comment')\r
- {\r
- echo '<input type="hidden" name="itemid" value="',intRequestVar('itemid'),'" />';\r
- }\r
-\r
- echo '<input type="submit" value="',_BATCH_EXEC,'" />';\r
- ?>(\r
- <a href="" onclick="if (event && event.preventDefault) event.preventDefault(); return batchSelectAll(1); "><?php echo _BATCH_SELECTALL?></a> -\r
- <a href="" onclick="if (event && event.preventDefault) event.preventDefault(); return batchSelectAll(0); "><?php echo _BATCH_DESELECTALL?></a>\r
- )\r
- </div>\r
- <?php }\r
-\r
- // shortcut :)\r
- function showList($query, $type, $template, $errorMessage = _LISTS_NOMORE) {\r
- return $this->doEncapsulate( 'showlist',\r
- array($query, $type, $template),\r
- $errorMessage\r
- );\r
- }\r
-\r
-}\r
-\r
-\r
-\r
-// can take either an array of objects, or an SQL query\r
-function showlist($query, $type, $template) {\r
-\r
- if (is_array($query)) {\r
- if (sizeof($query) == 0)\r
- return 0;\r
-\r
- call_user_func('listplug_' . $type, $template, 'HEAD');\r
-\r
- foreach ($query as $currentObj) {\r
- $template['current'] = $currentObj;\r
- call_user_func('listplug_' . $type, $template, 'BODY');\r
- }\r
-\r
- call_user_func('listplug_' . $type, $template, 'FOOT');\r
-\r
- return sizeof($query);\r
-\r
- } else {\r
- $res = sql_query($query);\r
-\r
- // don't do anything if there are no results\r
- $numrows = mysql_num_rows($res);\r
- if ($numrows == 0)\r
- return 0;\r
-\r
- call_user_func('listplug_' . $type, $template, 'HEAD');\r
-\r
- while($template['current'] = mysql_fetch_object($res))\r
- call_user_func('listplug_' . $type, $template, 'BODY');\r
-\r
- call_user_func('listplug_' . $type, $template, 'FOOT');\r
-\r
- mysql_free_result($res);\r
-\r
- // return amount of results\r
- return $numrows;\r
- }\r
-}\r
-\r
-function listplug_select($template, $type) {\r
- switch($type) {\r
- case 'HEAD':\r
- echo '<select name="'.$template['name'].'" tabindex="'.$template['tabindex'].'" '.$template['javascript'].'>';\r
-\r
- // add extra row if needed\r
- if ($template['extra']) {\r
- echo '<option value="',$template['extraval'],'">',$template['extra'],'</option>';\r
- }\r
-\r
- break;\r
- case 'BODY':\r
- $current = $template['current'];\r
-\r
- echo '<option value="' . htmlspecialchars($current->value) . '"';\r
- if ($template['selected'] == $current->value)\r
- echo ' selected="selected" ';\r
- if ($template['shorten'] > 0) {\r
- echo ' title="'. htmlspecialchars($current->text).'"';\r
- $current->text = shorten($current->text, $template['shorten'], $template['shortenel']);\r
- }\r
- echo '>' . htmlspecialchars($current->text) . '</option>';\r
- break;\r
- case 'FOOT':\r
- echo '</select>';\r
- break;\r
- }\r
-}\r
-\r
-function listplug_table($template, $type) {\r
- switch($type) {\r
- case 'HEAD':\r
- echo "<table>";\r
- echo "<thead><tr>";\r
- // print head\r
- call_user_func("listplug_table_" . $template['content'] , $template, 'HEAD');\r
- echo "</tr></thead><tbody>";\r
- break;\r
- case 'BODY':\r
- // print tabletype specific thingies\r
- echo "<tr onmouseover='focusRow(this);' onmouseout='blurRow(this);'>";\r
- call_user_func("listplug_table_" . $template['content'] , $template, 'BODY');\r
- echo "</tr>";\r
- break;\r
- case 'FOOT':\r
- call_user_func("listplug_table_" . $template['content'] , $template, 'FOOT');\r
- echo "</tbody></table>";\r
- break;\r
- }\r
-}\r
-\r
-function listplug_table_memberlist($template, $type) {\r
- switch($type) {\r
- case 'HEAD':\r
- echo '<th>' . _LIST_MEMBER_NAME . '</th><th>' . _LIST_MEMBER_RNAME . '</th><th>' . _LIST_MEMBER_URL . '</th><th>' . _LIST_MEMBER_ADMIN;\r
- help('superadmin');\r
- echo "</th><th>" . _LIST_MEMBER_LOGIN;\r
- help('canlogin');\r
- echo "</th><th colspan='2'>" . _LISTS_ACTIONS. "</th>";\r
- break;\r
- case 'BODY':\r
- $current = $template['current'];\r
-\r
- echo '<td>';\r
- $id = listplug_nextBatchId();\r
- echo '<input type="checkbox" id="batch',$id,'" name="batch[',$id,']" value="',$current->mnumber,'" />';\r
- echo '<label for="batch',$id,'">';\r
- echo "<a href='mailto:", htmlspecialchars($current->memail), "' tabindex='".$template['tabindex']."'>", htmlspecialchars($current->mname), "</a>";\r
- echo '</label>';\r
- echo '</td>';\r
- echo '<td>', htmlspecialchars($current->mrealname), '</td>';\r
- echo "<td><a href='$current->murl' tabindex='".$template['tabindex']."'>$current->murl</a></td>";\r
- echo '<td>', ($current->madmin ? _YES : _NO),'</td>';\r
- echo '<td>', ($current->mcanlogin ? _YES : _NO), '</td>';\r
- echo "<td><a href='index.php?action=memberedit&memberid=$current->mnumber' tabindex='".$template['tabindex']."'>"._LISTS_EDIT."</a></td>";\r
- echo "<td><a href='index.php?action=memberdelete&memberid=$current->mnumber' tabindex='".$template['tabindex']."'>"._LISTS_DELETE."</a></td>";\r
- break;\r
- }\r
-}\r
-\r
-function listplug_table_teamlist($template, $type) {\r
- global $manager;\r
- switch($type) {\r
- case 'HEAD':\r
- echo "<th>"._LIST_MEMBER_NAME."</th><th>"._LIST_MEMBER_RNAME."</th><th>"._LIST_TEAM_ADMIN;\r
- help('teamadmin');\r
- echo "</th><th colspan='2'>"._LISTS_ACTIONS."</th>";\r
- break;\r
- case 'BODY':\r
- $current = $template['current'];\r
-\r
- echo '<td>';\r
- $id = listplug_nextBatchId();\r
- echo '<input type="checkbox" id="batch',$id,'" name="batch[',$id,']" value="',$current->tmember,'" />';\r
- echo '<label for="batch',$id,'">';\r
- echo "<a href='mailto:", htmlspecialchars($current->memail), "' tabindex='".$template['tabindex']."'>", htmlspecialchars($current->mname), "</a>";\r
- echo '</label>';\r
- echo '</td>';\r
- echo '<td>', htmlspecialchars($current->mrealname), '</td>';\r
- echo '<td>', ($current->tadmin ? _YES : _NO) , '</td>';\r
- echo "<td><a href='index.php?action=teamdelete&memberid=$current->tmember&blogid=$current->tblog' tabindex='".$template['tabindex']."'>"._LISTS_DELETE."</a></td>";\r
-\r
- $url = 'index.php?action=teamchangeadmin&memberid=' . intval($current->tmember) . '&blogid=' . intval($current->tblog);\r
- $url = $manager->addTicketToUrl($url);\r
- echo "<td><a href='",htmlspecialchars($url),"' tabindex='".$template['tabindex']."'>"._LIST_TEAM_CHADMIN."</a></td>";\r
- break;\r
- }\r
-}\r
-\r
-function encode_desc(&$data)\r
- { //_$to_entities = get_html_translation_table(HTML_ENTITIES);\r
- $to_entities = get_html_translation_table(HTML_SPECIALCHARS);\r
- $from_entities = array_flip($to_entities);\r
- $data = str_replace('<br />','\n',$data); //hack\r
- $data = strtr($data,$from_entities);\r
- $data = strtr($data,$to_entities);\r
- $data = str_replace('\n','<br />',$data); //hack\r
- return $data;\r
- }\r
-\r
-function listplug_table_pluginlist($template, $type) {\r
- global $manager;\r
- switch($type) {\r
- case 'HEAD':\r
- echo '<th>'._LISTS_INFO.'</th><th>'._LISTS_DESC.'</th>';\r
- echo '<th style="white-space:nowrap">'._LISTS_ACTIONS.'</th>';\r
- break;\r
- case 'BODY':\r
- $current = $template['current'];\r
-\r
- $plug =& $manager->getPlugin($current->pfile);\r
- if ($plug) {\r
- echo '<td>';\r
- echo '<strong>' , htmlspecialchars($plug->getName()) , '</strong><br />';\r
- echo _LIST_PLUGS_AUTHOR, ' ' , htmlspecialchars($plug->getAuthor()) , '<br />';\r
- echo _LIST_PLUGS_VER, ' ' , htmlspecialchars($plug->getVersion()) , '<br />';\r
- if ($plug->getURL())\r
- echo '<a href="',htmlspecialchars($plug->getURL()),'" tabindex="'.$template['tabindex'].'">',_LIST_PLUGS_SITE,'</a><br />';\r
- echo '</td>';\r
- echo '<td>';\r
- echo _LIST_PLUGS_DESC .'<br/>'. encode_desc($plug->getDescription());\r
- if (sizeof($plug->getEventList()) > 0) {\r
- echo '<br /><br />',_LIST_PLUGS_SUBS,'<br />',htmlspecialchars(implode($plug->getEventList(),', '));\r
- // check the database to see if it is up-to-date and notice the user if not\r
- }\r
- if (!$plug->subscribtionListIsUptodate()) {\r
- echo '<br /><br /><strong>',_LIST_PLUG_SUBS_NEEDUPDATE,'</strong>';\r
- }\r
- if (sizeof($plug->getPluginDep()) > 0)\r
- echo '<br /><br />',_LIST_PLUGS_DEP,'<br />',htmlspecialchars(implode($plug->getPluginDep(),', '));\r
- echo '</td>';\r
- } else {\r
- echo '<td colspan="2">Error: plugin file <b>',htmlspecialchars($current->pfile),'.php</b> could not be loaded, or it has been set inactive because it does not support some features (check the <a href="?action=actionlog">actionlog</a> for more info)</td>';\r
- }\r
- echo '<td>';\r
-\r
- $baseUrl = 'index.php?plugid=' . intval($current->pid) . '&action=';\r
- $url = $manager->addTicketToUrl($baseUrl . 'pluginup');\r
- echo "<a href='",htmlspecialchars($url),"' tabindex='".$template['tabindex']."'>",_LIST_PLUGS_UP,"</a>";\r
- $url = $manager->addTicketToUrl($baseUrl . 'plugindown');\r
- echo "<br /><a href='",htmlspecialchars($url),"' tabindex='".$template['tabindex']."'>",_LIST_PLUGS_DOWN,"</a>";\r
- echo "<br /><a href='index.php?action=plugindelete&plugid=$current->pid' tabindex='".$template['tabindex']."'>",_LIST_PLUGS_UNINSTALL,"</a>";\r
- if ($plug && ($plug->hasAdminArea() > 0))\r
- echo "<br /><a href='".htmlspecialchars($plug->getAdminURL())."' tabindex='".$template['tabindex']."'>",_LIST_PLUGS_ADMIN,"</a>";\r
- if ($plug && ($plug->supportsFeature('HelpPage') > 0))\r
- echo "<br /><a href='index.php?action=pluginhelp&plugid=$current->pid' tabindex='".$template['tabindex']."'>",_LIST_PLUGS_HELP,"</a>";\r
- if (quickQuery('SELECT COUNT(*) AS result FROM '.sql_table('plugin_option_desc').' WHERE ocontext=\'global\' and opid='.$current->pid) > 0)\r
- echo "<br /><a href='index.php?action=pluginoptions&plugid=$current->pid' tabindex='".$template['tabindex']."'>",_LIST_PLUGS_OPTIONS,"</a>";\r
- echo '</td>';\r
- break;\r
- }\r
-}\r
-\r
-function listplug_table_plugoptionlist($template, $type) {\r
- global $manager;\r
- switch($type) {\r
- case 'HEAD':\r
- echo '<th>'._LISTS_INFO.'</th><th>'._LISTS_VALUE.'</th>';\r
- break;\r
- case 'BODY':\r
- $current = $template['current'];\r
- listplug_plugOptionRow($current);\r
- break;\r
- case 'FOOT':\r
- ?>\r
- <tr>\r
- <th colspan="2"><?php echo _PLUGS_SAVE?></th>\r
- </tr><tr>\r
- <td><?php echo _PLUGS_SAVE?></td>\r
- <td><input type="submit" value="<?php echo _PLUGS_SAVE?>" /></td>\r
- </tr>\r
- <?php break;\r
- }\r
-}\r
-\r
-function listplug_plugOptionRow($current) {\r
- $varname = 'plugoption['.$current['oid'].']['.$current['contextid'].']';\r
- // retreive the optionmeta\r
- $meta = NucleusPlugin::getOptionMeta($current['typeinfo']);\r
-\r
- // only if it is not a hidden option write the controls to the page\r
- if ($meta['access'] != 'hidden') {\r
- echo '<td>',htmlspecialchars($current['description']?$current['description']:$current['name']),'</td>';\r
- echo '<td>';\r
- switch($current['type']) {\r
- case 'yesno':\r
- ADMIN::input_yesno($varname, $current['value'], 0, 'yes', 'no');\r
- break;\r
- case 'password':\r
- echo '<input type="password" size="40" maxlength="128" name="',htmlspecialchars($varname),'" value="',htmlspecialchars($current['value']),'" />';\r
- break;\r
- case 'select':\r
- echo '<select name="'.htmlspecialchars($varname).'">';\r
- $aOptions = NucleusPlugin::getOptionSelectValues($current['typeinfo']);\r
- $aOptions = explode('|', $aOptions);\r
- for ($i=0; $i<(count($aOptions)-1); $i+=2) {\r
- echo '<option value="'.htmlspecialchars($aOptions[$i+1]).'"';\r
- if ($aOptions[$i+1] == $current['value'])\r
- echo ' selected="selected"';\r
- echo '>'.htmlspecialchars($aOptions[$i]).'</option>';\r
- }\r
- echo '</select>';\r
- break;\r
- case 'textarea':\r
- //$meta = NucleusPlugin::getOptionMeta($current['typeinfo']);\r
- echo '<textarea class="pluginoption" cols="30" rows="5" name="',htmlspecialchars($varname),'"';\r
- if ($meta['access'] == 'readonly') {\r
- echo ' readonly="readonly"';\r
- }\r
- echo '>',htmlspecialchars($current['value']),'</textarea>';\r
- break;\r
- case 'text':\r
- default:\r
- //$meta = NucleusPlugin::getOptionMeta($current['typeinfo']);\r
-\r
- echo '<input type="text" size="40" maxlength="128" name="',htmlspecialchars($varname),'" value="',htmlspecialchars($current['value']),'"';\r
- if ($meta['datatype'] == 'numerical') {\r
- echo ' onkeyup="checkNumeric(this)" onblur="checkNumeric(this)"';\r
- }\r
- if ($meta['access'] == 'readonly') {\r
- echo ' readonly="readonly"';\r
- }\r
- echo ' />';\r
- }\r
- echo $current['extra'];\r
- echo '</td>';\r
- }\r
-}\r
-\r
-function listplug_table_itemlist($template, $type) {\r
- switch($type) {\r
- case 'HEAD':\r
- echo "<th>"._LIST_ITEM_INFO."</th><th>"._LIST_ITEM_CONTENT."</th><th style=\"white-space:nowrap\" colspan='1'>"._LISTS_ACTIONS."</th>";\r
- break;\r
- case 'BODY':\r
- $current = $template['current'];\r
- $current->itime = strtotime($current->itime); // string -> unix timestamp\r
-\r
- if ($current->idraft == 1)\r
- $cssclass = "class='draft'";\r
-\r
- // (can't use offset time since offsets might vary between blogs)\r
- if ($current->itime > $template['now'])\r
- $cssclass = "class='future'";\r
-\r
- echo "<td $cssclass>",_LIST_ITEM_BLOG,' ', htmlspecialchars($current->bshortname);\r
- echo " <br />",_LIST_ITEM_CAT,' ', htmlspecialchars($current->cname);\r
- echo " <br />",_LIST_ITEM_AUTHOR, ' ', htmlspecialchars($current->mname);\r
- echo " <br />",_LIST_ITEM_DATE," " . date("Y-m-d",$current->itime);\r
- echo "<br />",_LIST_ITEM_TIME," " . date("H:i",$current->itime);\r
- echo "</td>";\r
- echo "<td $cssclass>";\r
-\r
- $id = listplug_nextBatchId();\r
-\r
- echo '<input type="checkbox" id="batch',$id,'" name="batch[',$id,']" value="',$current->inumber,'" />';\r
- echo '<label for="batch',$id,'">';\r
- echo "<b>" . htmlspecialchars(strip_tags($current->ititle)) . "</b>";\r
- echo '</label>';\r
- echo "<br />";\r
-\r
-\r
- $current->ibody = strip_tags($current->ibody);\r
- $current->ibody = htmlspecialchars(shorten($current->ibody,300,'...'));\r
-\r
- echo "$current->ibody</td>";\r
- echo "<td style=\"white-space:nowrap\" $cssclass>";\r
- echo "<a href='index.php?action=itemedit&itemid=$current->inumber'>"._LISTS_EDIT."</a>";\r
- echo "<br /><a href='index.php?action=itemcommentlist&itemid=$current->inumber'>"._LISTS_COMMENTS."</a>";\r
- echo "<br /><a href='index.php?action=itemmove&itemid=$current->inumber'>"._LISTS_MOVE."</a>";\r
- echo "<br /><a href='index.php?action=itemdelete&itemid=$current->inumber'>"._LISTS_DELETE."</a>";\r
- echo "</td>";\r
- break;\r
- }\r
-}\r
-\r
-// for batch operations: generates the index numbers for checkboxes\r
-function listplug_nextBatchId() {\r
- static $id = 0;\r
- return $id++;\r
-}\r
-\r
-function listplug_table_commentlist($template, $type) {\r
- switch($type) {\r
- case 'HEAD':\r
- echo "<th>"._LISTS_INFO."</th><th>"._LIST_COMMENT."</th><th colspan='3'>"._LISTS_ACTIONS."</th>";\r
- break;\r
- case 'BODY':\r
- $current = $template['current'];\r
- $current->ctime = strtotime($current->ctime); // string -> unix timestamp\r
-\r
- echo '<td>';\r
- echo date("Y-m-d@H:i",$current->ctime);\r
- echo '<br />';\r
- if ($current->mname)\r
- echo htmlspecialchars($current->mname) ,' ', _LIST_COMMENTS_MEMBER;\r
- else\r
- echo htmlspecialchars($current->cuser);\r
- echo '</td>';\r
-\r
-\r
- $current->cbody = strip_tags($current->cbody);\r
- $current->cbody = htmlspecialchars(shorten($current->cbody, 300, '...'));\r
-\r
- echo '<td>';\r
- $id = listplug_nextBatchId();\r
- echo '<input type="checkbox" id="batch',$id,'" name="batch[',$id,']" value="',$current->cnumber,'" />';\r
- echo '<label for="batch',$id,'">';\r
- echo $current->cbody;\r
- echo '</label>';\r
- echo '</td>';\r
-\r
- echo "<td style=\"white-space:nowrap\"><a href='index.php?action=commentedit&commentid=$current->cnumber'>"._LISTS_EDIT."</a></td>";\r
- echo "<td style=\"white-space:nowrap\"><a href='index.php?action=commentdelete&commentid=$current->cnumber'>"._LISTS_DELETE."</a></td>";\r
- if ($template['canAddBan'])\r
- echo "<td style=\"white-space:nowrap\"><a href='index.php?action=banlistnewfromitem&itemid=$current->citem&ip=", htmlspecialchars($current->cip), "' title='", htmlspecialchars($current->chost), "'>"._LIST_COMMENT_BANIP."</a></td>";\r
- break;\r
- }\r
-}\r
-\r
-\r
-function listplug_table_bloglist($template, $type) {\r
- switch($type) {\r
- case 'HEAD':\r
- echo "<th>" . _NAME . "</th><th colspan='7'>" ._LISTS_ACTIONS. "</th>";\r
- break;\r
- case 'BODY':\r
- $current = $template['current'];\r
-\r
- echo "<td title='blogid:$current->bnumber shortname:$current->bshortname'><a href='$current->burl'><img src='images/globe.gif' width='13' height='13' alt='". _BLOGLIST_TT_VISIT."' /></a> " . htmlspecialchars($current->bname) . "</td>";\r
- echo "<td><a href='index.php?action=createitem&blogid=$current->bnumber' title='" . _BLOGLIST_TT_ADD ."'>" . _BLOGLIST_ADD . "</a></td>";\r
- echo "<td><a href='index.php?action=itemlist&blogid=$current->bnumber' title='". _BLOGLIST_TT_EDIT."'>". _BLOGLIST_EDIT."</a></td>";\r
- echo "<td><a href='index.php?action=blogcommentlist&blogid=$current->bnumber' title='". _BLOGLIST_TT_COMMENTS."'>". _BLOGLIST_COMMENTS."</a></td>";\r
- echo "<td><a href='index.php?action=bookmarklet&blogid=$current->bnumber' title='". _BLOGLIST_TT_BMLET."'>". _BLOGLIST_BMLET . "</a></td>";\r
-\r
- if ($current->tadmin == 1) {\r
- echo "<td><a href='index.php?action=blogsettings&blogid=$current->bnumber' title='" . _BLOGLIST_TT_SETTINGS . "'>" ._BLOGLIST_SETTINGS. "</a></td>";\r
- echo "<td><a href='index.php?action=banlist&blogid=$current->bnumber' title='" . _BLOGLIST_TT_BANS. "'>". _BLOGLIST_BANS."</a></td>";\r
- }\r
-\r
- if ($template['superadmin']) {\r
- echo "<td><a href='index.php?action=deleteblog&blogid=$current->bnumber' title='". _BLOGLIST_TT_DELETE."'>" ._BLOGLIST_DELETE. "</a></td>";\r
- }\r
-\r
-\r
-\r
- break;\r
- }\r
-}\r
-\r
-function listplug_table_shortblognames($template, $type) {\r
- switch($type) {\r
- case 'HEAD':\r
- echo "<th>" . _NAME . "</th><th>" . _NAME. "</th>";\r
- break;\r
- case 'BODY':\r
- $current = $template['current'];\r
-\r
- echo '<td>' , htmlspecialchars($current->bshortname) , '</td>';\r
- echo '<td>' , htmlspecialchars($current->bname) , '</td>';\r
-\r
- break;\r
- }\r
-}\r
-\r
-function listplug_table_shortnames($template, $type) {\r
- switch($type) {\r
- case 'HEAD':\r
- echo "<th>" . _NAME . "</th><th>" . _LISTS_DESC. "</th>";\r
- break;\r
- case 'BODY':\r
- $current = $template['current'];\r
-\r
- echo '<td>' , htmlspecialchars($current->name) , '</td>';\r
- echo '<td>' , htmlspecialchars($current->description) , '</td>';\r
-\r
- break;\r
- }\r
-}\r
-\r
-\r
-function listplug_table_categorylist($template, $type) {\r
- switch($type) {\r
- case 'HEAD':\r
- echo "<th>"._LISTS_NAME."</th><th>"._LISTS_DESC."</th><th colspan='2'>"._LISTS_ACTIONS."</th>";\r
- break;\r
- case 'BODY':\r
- $current = $template['current'];\r
-\r
- echo '<td>';\r
- $id = listplug_nextBatchId();\r
- echo '<input type="checkbox" id="batch',$id,'" name="batch[',$id,']" value="',$current->catid,'" />';\r
- echo '<label for="batch',$id,'">';\r
- echo htmlspecialchars($current->cname);\r
- echo '</label>';\r
- echo '</td>';\r
-\r
- echo '<td>', htmlspecialchars($current->cdesc), '</td>';\r
- echo "<td><a href='index.php?action=categorydelete&blogid=$current->cblog&catid=$current->catid' tabindex='".$template['tabindex']."'>"._LISTS_DELETE."</a></td>";\r
- echo "<td><a href='index.php?action=categoryedit&blogid=$current->cblog&catid=$current->catid' tabindex='".$template['tabindex']."'>"._LISTS_EDIT."</a></td>";\r
-\r
- break;\r
- }\r
-}\r
-\r
-\r
-function listplug_table_templatelist($template, $type) {\r
- global $manager;\r
- switch($type) {\r
- case 'HEAD':\r
- echo "<th>"._LISTS_NAME."</th><th>"._LISTS_DESC."</th><th colspan='3'>"._LISTS_ACTIONS."</th>";\r
- break;\r
- case 'BODY':\r
- $current = $template['current'];\r
-\r
- echo "<td>" , htmlspecialchars($current->tdname), "</td>";\r
- echo "<td>" , htmlspecialchars($current->tddesc), "</td>";\r
- echo "<td style=\"white-space:nowrap\"><a href='index.php?action=templateedit&templateid=$current->tdnumber' tabindex='".$template['tabindex']."'>"._LISTS_EDIT."</a></td>";\r
-\r
- $url = $manager->addTicketToUrl('index.php?action=templateclone&templateid=' . intval($current->tdnumber));\r
- echo "<td style=\"white-space:nowrap\"><a href='",htmlspecialchars($url),"' tabindex='".$template['tabindex']."'>"._LISTS_CLONE."</a></td>";\r
- echo "<td style=\"white-space:nowrap\"><a href='index.php?action=templatedelete&templateid=$current->tdnumber' tabindex='".$template['tabindex']."'>"._LISTS_DELETE."</a></td>";\r
-\r
- break;\r
- }\r
-}\r
-\r
-function listplug_table_skinlist($template, $type) {\r
- global $CONF, $DIR_SKINS, $manager;\r
- switch($type) {\r
- case 'HEAD':\r
- echo "<th>"._LISTS_NAME."</th><th>"._LISTS_DESC."</th><th colspan='3'>"._LISTS_ACTIONS."</th>";\r
- break;\r
- case 'BODY':\r
- $current = $template['current'];\r
-\r
- echo '<td>';\r
-\r
- // use a special style for the default skin\r
- if ($current->sdnumber == $CONF['BaseSkin']) {\r
- echo '<strong>',htmlspecialchars($current->sdname),'</strong>';\r
- } else {\r
- echo htmlspecialchars($current->sdname);\r
- }\r
-\r
- echo '<br /><br />';\r
- echo _LISTS_TYPE ,': ' , htmlspecialchars($current->sdtype);\r
- echo '<br />', _LIST_SKINS_INCMODE , ' ' , (($current->sdincmode=='skindir') ?_PARSER_INCMODE_SKINDIR:_PARSER_INCMODE_NORMAL);\r
- if ($current->sdincpref) echo '<br />' , _LIST_SKINS_INCPREFIX , ' ', htmlspecialchars($current->sdincpref);\r
-\r
- // add preview image when present\r
- if ($current->sdincpref && @file_exists($DIR_SKINS . $current->sdincpref . 'preview.png'))\r
- {\r
- echo '<br /><br />';\r
-\r
- $hasEnlargement = @file_exists($DIR_SKINS . $current->sdincpref . 'preview-large.png');\r
- if ($hasEnlargement)\r
- echo '<a href="',$CONF['SkinsURL'], htmlspecialchars($current->sdincpref),'preview-large.png" title="View larger">';\r
-\r
- echo '<img class="skinpreview" src="',$CONF['SkinsURL'], htmlspecialchars($current->sdincpref),'preview.png" width="100" height="75" alt="Preview for \'',htmlspecialchars($current->sdname),'\' skin" />';\r
-\r
- if ($hasEnlargement)\r
- echo '</a>';\r
-\r
- if (@file_exists($DIR_SKINS . $current->sdincpref . 'readme.html'))\r
- {\r
- echo '<br /><a href="',$CONF['SkinsURL'], htmlspecialchars($current->sdincpref),'readme.html" title="More info on the \'',htmlspecialchars($current->sdname),'\' skin">Readme</a>';\r
- }\r
-\r
-\r
- }\r
-\r
- echo "</td>";\r
-\r
-\r
- echo "<td>" , htmlspecialchars($current->sddesc);\r
- // show list of defined parts\r
- $r = sql_query('SELECT stype FROM '.sql_table('skin').' WHERE sdesc='.$current->sdnumber . ' ORDER BY stype');\r
- $types = array();\r
- while ($o = mysql_fetch_object($r))\r
- array_push($types,$o->stype);\r
- if (sizeof($types) > 0) {\r
- $friendlyNames = SKIN::getFriendlyNames();\r
- for ($i=0;$i<sizeof($types);$i++) {\r
- $type = $types[$i];\r
- $types[$i] = '<li>' . helpHtml('skinpart'.$type) . ' <a href="index.php?action=skinedittype&skinid='.$current->sdnumber.'&type='.$type.'" tabindex="'.$template['tabindex'].'">' . htmlspecialchars($friendlyNames[$type]) . "</a></li>";\r
- }\r
- echo '<br /><br />',_LIST_SKINS_DEFINED,' <ul>',implode($types,'') ,'</ul>';\r
- }\r
- echo "</td>";\r
- echo "<td style=\"white-space:nowrap\"><a href='index.php?action=skinedit&skinid=$current->sdnumber' tabindex='".$template['tabindex']."'>"._LISTS_EDIT."</a></td>";\r
-\r
- $url = $manager->addTicketToUrl('index.php?action=skinclone&skinid=' . intval($current->sdnumber));\r
- echo "<td style=\"white-space:nowrap\"><a href='",htmlspecialchars($url),"' tabindex='".$template['tabindex']."'>"._LISTS_CLONE."</a></td>";\r
- echo "<td style=\"white-space:nowrap\"><a href='index.php?action=skindelete&skinid=$current->sdnumber' tabindex='".$template['tabindex']."'>"._LISTS_DELETE."</a></td>";\r
-\r
- break;\r
- }\r
-}\r
-\r
-function listplug_table_draftlist($template, $type) {\r
- switch($type) {\r
- case 'HEAD':\r
- echo "<th>"._LISTS_BLOG."</th><th>"._LISTS_TITLE."</th><th colspan='2'>"._LISTS_ACTIONS."</th>";\r
- break;\r
- case 'BODY':\r
- $current = $template['current'];\r
-\r
- echo '<td>', htmlspecialchars($current->bshortname) , '</td>';\r
- echo '<td>', htmlspecialchars(strip_tags($current->ititle)) , '</td>';\r
- echo "<td><a href='index.php?action=itemedit&itemid=$current->inumber'>"._LISTS_EDIT."</a></td>";\r
- echo "<td><a href='index.php?action=itemdelete&itemid=$current->inumber'>"._LISTS_DELETE."</a></td>";\r
-\r
- break;\r
- }\r
-}\r
-\r
-\r
-function listplug_table_actionlist($template, $type) {\r
- switch($type) {\r
- case 'HEAD':\r
- echo '<th>'._LISTS_TIME.'</th><th>'._LIST_ACTION_MSG.'</th>';\r
- break;\r
- case 'BODY':\r
- $current = $template['current'];\r
-\r
- echo '<td>' , htmlspecialchars($current->timestamp), '</td>';\r
- echo '<td>' , htmlspecialchars($current->message), '</td>';\r
-\r
- break;\r
- }\r
-}\r
-\r
-function listplug_table_banlist($template, $type) {\r
- switch($type) {\r
- case 'HEAD':\r
- echo '<th>'._LIST_BAN_IPRANGE.'</th><th>'. _LIST_BAN_REASON.'</th><th>'._LISTS_ACTIONS.'</th>';\r
- break;\r
- case 'BODY':\r
- $current = $template['current'];\r
-\r
- echo '<td>' , htmlspecialchars($current->iprange) , '</td>';\r
- echo '<td>' , htmlspecialchars($current->reason) , '</td>';\r
- echo "<td><a href='index.php?action=banlistdelete&blogid=", intval($current->blogid) , "&iprange=" , htmlspecialchars($current->iprange) , "'>",_LISTS_DELETE,"</a></td>";\r
- break;\r
- }\r
-}\r
-\r
-/**\r
- * Returns the Javascript code for a bookmarklet that works on most modern browsers\r
- *\r
- * @param blogid\r
- */\r
-function getBookmarklet($blogid) {\r
- global $CONF;\r
-\r
- // normal\r
- $document = 'document';\r
- $bookmarkletline = "javascript:Q='';x=".$document.";y=window;if(x.selection){Q=x.selection.createRange().text;}else if(y.getSelection){Q=y.getSelection();}else if(x.getSelection){Q=x.getSelection();}wingm=window.open('";\r
- $bookmarkletline .= $CONF['AdminURL'] . "bookmarklet.php?blogid=$blogid";\r
- $bookmarkletline .="&logtext='+escape(Q)+'&loglink='+escape(x.location.href)+'&loglinktitle='+escape(x.title),'nucleusbm','scrollbars=yes,width=600,height=500,left=10,top=10,status=yes,resizable=yes');wingm.focus();";\r
-\r
- return $bookmarkletline;\r
-}\r
-\r
-\r
-?>\r
+?>
\ No newline at end of file
OSDN Git Service
