<?php
defined (
'main'
)
or
die
(
'no direct access'
);
defined (
'admin'
)
or
die
(
'only admin access'
);
$design
=
new
design (
'Admins Area'
,
'Admins Area'
, 2);
$design
->header();
function
getKats (
$akt
) {
$katAR
=
array
();
$kats
=
''
;
$erg
= db_query(
"SELECT DISTINCT news_kat FROM `prefix_news`"
);
while
(
$row
= db_fetch_object(
$erg
)) {
$katAr
[] =
$row
->news_kat;
}
$katAr
[] =
'Allgemein'
;
$katAr
=
array_unique
(
$katAr
);
foreach
(
$katAr
as
$a
) {
if
(trim(
$a
) == trim(
$akt
)) {
$sel
=
' selected'
;
}
else
{
$sel
=
''
;
}
$kats
.=
'<option'
.
$sel
.
'>'
.
$a
.
'</option>'
;
}
return
(
$kats
);
}
if
(!
empty
(
$_REQUEST
[
'um'
])) {
$um
=
$_REQUEST
[
'um'
];
$_POST
[
'titel'
] = escape(
$_POST
[
'titel'
],
'string'
);
$_POST
[
'grecht'
] = escape(
$_POST
[
'grecht'
],
'integer'
);
$_POST
[
'kat'
] = escape(
$_POST
[
'kat'
],
'string'
);
$_POST
[
'katLis'
] = escape(
$_POST
[
'katLis'
],
'string'
);
$_POST
[
'newsID'
] = escape(
$_POST
[
'newsID'
],
'integer'
);
if
(
$um
==
'insert'
) {
$text
= escape(
$_POST
[
'txt'
],
'textarea'
);
if
(
$_POST
[
'katLis'
] ==
'neu'
) {
$_POST
[
'katLis'
] =
$_POST
[
'kat'
];
}
db_query("INSERT INTO `prefix_news` (news_title,user_id,news_time,news_recht,news_kat,news_text)
VALUES (
'" . $_POST['
titel
'] . "'
,
" . $_SESSION['authid'] . "
,NOW(),
" . $_POST['grecht'] . "
,
'" . $_POST['
katLis
'] . "'
,
'" . $text . "'
)");
$erg
= db_query(
'SELECT name, email FROM `prefix_user`'
);
while
(
$row
= db_fetch_object(
$erg
) )
{ icmail(
$row
->email,
'Eine neue News wurde eingetragen'
,
'Hallo '
.
$row
->name.
' es wurde eine neue Nachricht mit dem Titel '
.
$_POST
[
'titel'
].
' auf unserer WebSite veröffentlicht, schau doch mal rein!'
); }
}
elseif
(
$um
==
'change'
) {
$text
= escape(
$_POST
[
'txt'
],
'textarea'
);
if
(
$_POST
[
'katLis'
] ==
'neu'
) {
$_POST
[
'katLis'
] =
$_POST
[
'kat'
];
}
db_query('UPDATE `prefix_news` SET
news_title =
"' . $_POST['titel'] . '"
,
user_id =
"' . $_SESSION['authid'] . '"
,
news_recht =
"' . $_POST['grecht'] . '"
,
news_kat =
"' . $_POST['katLis'] . '"
,
news_text =
"' . $text . '"
WHERE news_id =
"' . $_POST['newsID'] . '"
LIMIT 1');
$edit
=
$_POST
[
'newsID'
];
}
}
if
(
$menu
->get(1) ==
'del'
) {
db_query(
'DELETE FROM `prefix_news` WHERE news_id = "'
.
$menu
->get(2) .
'" LIMIT 1'
);
}
if
(
empty
(
$doNoIn
)) {
$limit
= 20;
$page
= (
$menu
->getA(1) ==
'p'
?
$menu
->getE(1) : 1);
$MPL
= db_make_sites (
$page
,
''
,
$limit
,
"?news"
,
'news'
);
$anfang
= (
$page
- 1) *
$limit
;
if
(
$menu
->get(1) !=
'edit'
) {
$FnewsID
=
''
;
$Faktion
=
'insert'
;
$Fueber
=
''
;
$Fstext
=
''
;
$Ftxt
=
''
;
$Fgrecht
=
''
;
$FkatLis
=
''
;
$Fsub
=
'Eintragen'
;
}
else
{
$row
= db_fetch_object(db_query(
"SELECT * FROM `prefix_news` WHERE news_id = "
.
$menu
->get(2)));
$FnewsID
=
$row
->news_id;
$Faktion
=
'change'
;
$Fueber
=
$row
->news_title;
$Ftxt
=
stripslashes
(
$row
->news_text);
$Fgrecht
=
$row
->news_recht;
$FkatLis
=
$row
->news_kat;
$Fsub
=
'Ändern'
;
}
$tpl
=
new
tpl (
'news'
, 1);
$ar
=
array
(
'NEWSID'
=>
$FnewsID
,
'AKTION'
=>
$Faktion
,
'MPL'
=>
$MPL
,
'UEBER'
=>
$Fueber
,
'txt'
=>
$Ftxt
,
'SMILIS'
=> getsmilies(),
'grecht'
=> dbliste(
$Fgrecht
,
$tpl
,
'grecht'
,
"SELECT id,name FROM prefix_grundrechte ORDER BY id DESC"
),
'KATS'
=> getKats(
$FkatLis
),
'FSUB'
=>
$Fsub
);
$tpl
->set_ar_out(
$ar
, 0);
$abf
= 'SELECT news_id,news_title
FROM `prefix_news`
ORDER BY news_time DESC
LIMIT
' . $anfang . '
,' .
$limit
;
$erg
= db_query(
$abf
);
$class
=
''
;
while
(
$row
= db_fetch_object(
$erg
)) {
$class
= (
$class
==
'Cmite'
?
'Cnorm'
:
'Cmite'
);
$tpl
->set_ar_out(
array
(
'ID'
=>
$row
->news_id,
'class'
=>
$class
,
'TITEL'
=>
$row
->news_title) , 1);
}
$tpl
->set_ar_out(
array
(
'MPL'
=>
$MPL
) , 2);
}
$design
->footer();
?>