';
$home = s('home_sef');
$home_name = l('home');
$month_names = explode(', ', l('month_names'));
while ($r = mysql_fetch_array($result)) {
$year = substr($r['date'], 0, 4);
$month = substr($r['date'], 5, 2) -1;
$month_name = (substr($month, 0, 1) == 0) ? $month_names[substr($month, 1, 1)] : $month_names[$month];
$categorySEF = $r['category'] != 0 ? find_cat_sef($r['category']) : $home;
$articleSEF = retrieve('seftitle', 'articles', 'id', $r['id']);
$cat_name = $r['category'] != 0 ? retrieve('name', 'categories', 'seftitle', $categorySEF) : $home_name;
if ($last <> $year.$month) {echo ''.$month_name.', '.$year.' '.$r['title'].' ('.$cat_name.')
';
}
//SITEMAP
function sitemap() {
echo ''.l('admin_error').''.$error.$errNote.'
' : '>'.l('operation_completed').'');
echo (!empty($link)) ? ''.l('back').'
' : '';
}
// CONTACT FORM
function contact() {
if ($_POST['contactform'] == '') {?>
2 && strlen($message) > 9 && strlen($mail) > 6) {
mail($to, $subject, $body, $from_header);
notification('','','');
echo ''.l('backhome').'
';
echo ''.$r['title'].' '.$ncom.' '.l(charerror).'
';}
else {
$keywords = explode(' ', $search_query);
$keyCount = count($keywords);
$query = "SELECT * FROM ".db('prefix')."articles WHERE SUBSTRING(position, 1, 1) != '2' AND published = 1 AND";
if ($keyCount > 1) {
for ($i = 0; $i < $keyCount - 1; $i++) {$query = $query." (title LIKE '%$keywords[$i]%' || text LIKE '%$keywords[$i]%') &&";}
$j = $keyCount - 1;
$query = $query." (title LIKE '%$keywords[$j]%' || text LIKE '%$keywords[$j]%')";
}
else {$query = $query." (title LIKE '%$keywords[0]%' || text LIKE '%$keywords[0]%')";}
$query = $query." ORDER BY id DESC";
$result = mysql_query($query);
$numrows = mysql_num_rows($result);
if (!$numrows) {echo ''.l('noresults').' '.$search_query.' .
';}
else {
echo ''.$numrows.' '.l('resultsfound').' '.$search_query.' .';
while ($r = mysql_fetch_array($result)) {
$date = date(s('date_format'), strtotime($r['date']));
echo ''.$r['title'].' - '.$date.'
';
}
}
}
echo ''.l('backhome').'
';
}
// RSS FEED
function rss() {
$limit = s('rss_limit');
$result = mysql_query("SELECT * FROM ".db('prefix')."articles WHERE position = 1 AND published = 1 ORDER BY date DESC LIMIT 0, $limit");
header('Content-type: text/xml; charset='.s('charset'));
$header = '';
$header .= '';
$header .= '';
$header .= ''.s('website_title').' ';
$header .= ''.s('website_title').' ';
$header .= 'Copyright '.s('website_title').' ';
$header .= 'sNews ';
$footer = ' ';
$footer .= ' ';
echo $header;
while ($r = mysql_fetch_assoc($result)) {
$link = db('website').find_cat_sef($r['category']).'/'.$r['seftitle'].'/';
$date = date('D, d M Y H:i:s +0000', strtotime($r['date']));
$description = preg_replace("[\[(.*?)\]]", "", stripslashes(strip_tags($r['text'])));
$item = '- ';
$item .= '
'.$r['title'].' ';
$item .= ''.$description.' ';
$item .= ''.$date.' ';
$item .= ''.$link.' ';
$item .= ' ';
echo $item;
}
echo $footer;
}
/*** ADMINISTRATIVE FUNCTIONS ***/
// LOGIN
function login() {
if ($_SESSION[db('website').'Logged_In'] != 'True') { ?>
Login
'.$label.'' : '';
$ID = !empty($id) ? ' id="'.$id.'"' : '';
$style = !empty($css) ? ' class="'.$css.'"' : '';
$js1 = !empty($script1) ? ' '.$script1 : '';
$js2 = !empty($script2) ? ' '.$script2 : '';
$js3 = !empty($script3) ? ' '.$script3 : '';
$attribs = $ID.$style.$js1.$js2.$js3;
$val = ' value="'.$value.'"';
$input = ''.$legend.'' : ' '.$lbl.':
'; break;
case 'checkbox':
case 'radio': $check = $checked == 'ok' ? ' checked="checked"' : ''; $output = ''.$input.$check.' /> '.$lbl.'
'; break;
case 'hidden':
case 'submit':
case 'reset':
case 'button': $output = $input.$val.' />'; break;
case 'textarea': $output = $lbl.':sNews '.l('administration'));
echo ''.l('categories').': '.l('add_new').' ';
$link = ' '.l('divider').' '.l('view').'
';}
echo ''.l('articles').': '.l('add_new').' ';
if (stats('articles',1) > 0) {echo $link.'articles/" title="'.l('view').'">'.l('view').'
';}
echo ''.l('extra_contents').': '.l('add_new').' ';
if (stats('articles',2) > 0) {echo $link.'extra_contents/" title="'.l('view').'">'.l('view').'
';}
echo ''.l('pages').': '.l('add_new').' ';
if (stats('articles',3) > 0) {echo $link.'pages/" title="'.l('view').'">'.l('view').'
';}
echo '';
$query_comm = "SELECT * FROM ".db('prefix')."comments WHERE approved <> 'True'";
$result_comm = mysql_query($query_comm);
$unapproved = mysql_num_rows($result_comm);
if ($unapproved > 0) {
html_input('fieldset', '', '', '', '', '', '', '', '', '', '', '', '', '', l('comments'));
echo ''.$unapproved.' comments waiting approval
';
echo '';
while ($r = mysql_fetch_array($result_comm)) {
$categorySEF = find_cat_sef($r['articleid']);
$cat = $categorySEF != '' ? $categorySEF : s('home_sef');
echo '
'.$r['name'].' '.l('divider').' '.l('edit').'
';
}
echo '
'.l('settings').'
';
echo ''.l('files').'
';
html_input('fieldset', '', '', '', '', '', '', '', '', '', '', '', '', '', l('login_status'));
echo ''.l('logout').'
';
}}
// SETTINGS FORM
function settings() {
html_input('form', '', '', '', '', '', '', '', '', '', '', '', 'post', 'index.php?action=process&task=save_settings', '');
html_input('fieldset', '', '', '', '', '', '', '', '', '', '', '', '', '',''.l('settings').' ');
echo '';
html_input('text', 'website_title', 'webtitle', s('website_title'), l('a_website_title'), '', '', '', '', '', '', '', '', '', '');
html_input('text', 'home', 'homeid', l('home') == '' ? l('home') : l('home'), l('a_home'), '', '', '', '', '', '', '', '', '', '');
html_input('text', 'home_sef', 'webSEF', s('home_sef') == '' ? l('home_sef') : s('home_sef'), l('a_home_sef'), '', 'onKeyPress="return SEFrestrict(event);"', '', '', '', '', '', '', '', '');
html_input('text', 'website_description', 'wdesc', s('website_description'), l('a_description'), '', '', '', '', '', '', '', '', '', '');
html_input('text', 'website_keywords', 'wkey', s('website_keywords'), l('a_keywords'), '', '', '', '', '', '', '', '', '', '');
echo '
';
html_input('fieldset', '', '', '', '', '', '', '', '', '', '', '', '', '', ''.l('a_contact_info').' ');
echo '';
html_input('text', 'website_email', 'we', s('website_email'), l('a_website_email'), '', '', '', '', '', '', '', '', '', '');
html_input('text', 'contact_subject', 'cs', s('contact_subject'), l('a_contact_subject'), '', '', '', '', '', '', '', '', '', '');
echo '
';
html_input('fieldset', '', '', '', '', '', '', '', '', '', '', '', '', '', ''.l('a_time_settings').' ');
echo '';
html_input('text', 'language', 'char', s('language') == '' ? 'EN' : s('language'), l('a_language'), '', '', '', '', '', '', '', '', '', '');
html_input('text', 'charset', 'char', s('charset') == '' ? 'UTF-8' : s('charset'), l('charset'), '', '', '', '', '', '', '', '', '', '');
html_input('text', 'date_format', 'dt', s('date_format'), l('a_date_format'), '', '', '', '', '', '', '', '', '', '');
echo '
';
html_input('fieldset', '', '', '', '', '', '', '', '', '', '', '', '', '',''.l('contents').' ');
echo '';
html_input('text', 'article_limit', 'artl', s('article_limit'), l('a_article_limit'), '', '', '', '', '', '', '', '', '', '');
html_input('text', 'rss_limit', 'rssl', s('rss_limit'), l('a_rss_limit'), '', '', '', '', '', '', '', '', '', '');
echo '
'.l('a_display_page').': ';
echo ''.l('none').' ';
$query = "SELECT * FROM ".db('prefix')."articles WHERE position = 3 ORDER BY id ASC";
$result = mysql_query($query);
while ($r = mysql_fetch_array($result)) {
echo ''.$r['title'].' ';
}
echo '
';
html_input('checkbox', 'display_new_on_home', 'dnoh', '', l('a_display_new_on_home'), '', '', '', '', (s('display_new_on_home') == true ? 'ok' : ''), '', '', '', '', '');
html_input('checkbox', 'display_pagination', 'dpag', '', l('a_display_pagination'), '', '', '', '', (s('display_pagination') == 'True' ? 'ok' : ''), '', '', '', '', '');
html_input('checkbox', 'num_categories', 'nc', '', l('a_num_categories'), '', '', '', '', s('num_categories') == true ? 'ok' : '', '', '', '', '', '');
echo '
'.l('comments').' ');
echo '';
html_input('checkbox', 'approve_comments', 'ac', '', l('a_approve_comments'), '', '', '', '', s('approve_comments') == true ? 'ok' : '', '', '', '', '', '');
echo '
'.l('a_comments_order').': ';
echo ''.l('newer_top').' ';
echo ''.l('newer_bottom').'
';
html_input('text', 'comment_limit', 'cl', s('comment_limit'), l('a_comment_limit'), '', '', '', '', '', '', '', '', '', '');
html_input('checkbox', 'word_filter_enable', 'wfe', '', l('a_word_filter_enable'), '', '', '', '', s('word_filter_enable') == 'on' ? 'ok' : '', '', '', '', '', '');
html_input('text', 'word_filter_file', 'wff', s('word_filter_file'), l('a_word_filter_file'), '', '', '', '', '', '', '', '', '', '');
html_input('text', 'word_filter_change', 'wfc', s('word_filter_change'), l('a_word_filter_change'), '', '', '', '', '', '', '', '', '', '');
echo '
';
html_input('hidden', 'task', 'task', 'save_settings', '', '', '', '', '', '', '', '', '', '', '');
html_input('submit', 'save', 'save', l('save'), '', '', '', '', '', '', '', '', '', '', '');
echo '
';
html_input('form', '', '', '', '', '', '', '', '', '', '', '', 'post', 'index.php?action=process&task=changeup', '');
html_input('fieldset', '', '', '', '', '', '', '', '', '', '', '', '', '', ''.l('change_up').' ');
echo '';
html_input('text', 'uname', 'uname', s('username'), l('a_username'), '', '', '', '', '', '', '', '', '', '');
html_input('password', 'pass1', 'pass1', '', l('a_password'), '', '', '', '', '', '', '', '', '', '');
html_input('password', 'pass2', 'pass2', '', l('a_password2'), '', '', '', '', '', '', '', '', '', '');
echo '
';
html_input('hidden', 'task', 'task', 'changeup', '', '', '', '', '', '', '', '', '', '', '');
html_input('submit', 'submit_pass', 'submit_pass', l('save'), '', '', '', '', '', '', '', '', '', '', '');
echo '
';
html_input('hidden', 'task', 'task', $frm_task, '', '', '', '', '', '', '', '', '', '', '');
html_input('submit', 'submit_category', 'submit_category', $frm_submit, '', '', '', '', '', '', '', '', '', '', '');
if (!empty($categoryid)) {
echo ' ';
html_input('hidden', 'id', 'id', $categoryid, '', '', '', '', '', '', '', '', '', '', '');
html_input('submit', 'delete_category', 'delete_category', l('delete'), '', '', 'onclick="javascript: return pop()"', '', '', '', '', '', '', '', '');
}
echo '
';
$query = "SELECT * FROM ".db('prefix')."categories WHERE published = 'YES' ORDER BY catorder ASC";
$result = mysql_query($query);
$numrows = mysql_num_rows($result);
if ($numrows > 1) {
html_input('form', '', 'post', '', '', '', '', '', '', '', '', '', 'post', 'index.php?action=process&task=order_category', '');
html_input('fieldset', '', '', '', '', '', '', '', '', '', '', '', '', '', l('category_order'));
$counter = 0;
while ($r = mysql_fetch_array($result)) {
echo ''.$r['name'].'
';
$counter++;
}
echo '';
html_input('hidden', 'counter', 'counter', $counter, '', '', '', '', '', '', '', '', '', '', '');
html_input('hidden', 'task', 'task', 'order_category', '', '', '', '', '', '', '', '', '', '', '');
html_input('submit', 'order_category', 'order_category', l('order_category'), '', '', '', '', '', '', '', '', '', '', '');
echo '
';
}}
// ARTICLES - POSTING TIME
function posting_time($time='') {
echo ''.l('day').':';
$thisDay = !empty($time) ? substr($time, 8, 2) : intval(date('d'));
for($i = 1; $i < 32; $i++) {
echo ''.$i.' ';
}
echo ' '.l('month').':';
$thisMonth = !empty($time) ? substr($time, 5, 2) : intval(date('m'));
for($i = 1; $i < 13; $i++) {
echo ''. $i .' ';
}
echo ' '.l('year').':';
$thisYear = !empty($time) ? substr($time, 0, 4) : intval(date('Y'));
for($i = $thisYear; $i < $thisYear + 3; $i++) {
echo ''.$i.' ';
}
echo ' '.l('hour').':';
$thisHour = !empty($time) ? substr($time, 11, 2) : intval(date('H'));
for($i = 0; $i < 24; $i++) {
echo ''.$i.' ';
}
echo ' '.l('minute').':';
$thisMinute = !empty($time) ? substr($time, 14, 2) : intval(date('i'));
for($i = 0; $i < 60; $i++) {
echo ''.$i.' ';
}
echo '
';
}
// ARTICLES FORM
function form_articles($contents) {
if (isset($_GET['id']) && is_numeric($_GET['id']) && !is_null($_GET['id'])) {
$id = $_GET['id'];
$query = mysql_query("SELECT * FROM ".db('prefix')."articles WHERE id='$id'");
$r = mysql_fetch_array($query);
$article_category = $r['category'];
$edit_option = substr($r['position'], 0, 1);
$edit_page = substr($r['position'], 2);
switch ($edit_option) {
case 1: $frm_fieldset = l('edit').' '.l('article'); $frm_position1 = 'selected="selected"'; break;
case 2: $frm_fieldset = l('edit').' '.l('extra_contents'); $frm_position2 = 'selected="selected"'; break;
case 3: $frm_fieldset = l('edit').' '.l('page'); $frm_position3 = 'selected="selected"'; break;
}
$frm_action = db('website').'index.php?action=process&task=edit_article&id='.$id;
$frm_title = $_SESSION['temp']['title'] ? $_SESSION['temp']['title'] : $r['title'];
$frm_sef_title = $_SESSION['temp']['seftitle'] ? cleanSEF($_SESSION['temp']['seftitle']) : $r['seftitle'];
$frm_text = str_replace('&', '&', $_SESSION['temp']['text'] ? $_SESSION['temp']['text'] : $r['text']);
$frm_meta_desc = $_SESSION['temp']['description_meta'] ? cleanSEF($_SESSION['temp']['description_meta']) : $r['description_meta'];
$frm_meta_key = $_SESSION['temp']['keywords_meta'] ? cleanSEF($_SESSION['temp']['keywords_meta']) : $r['keywords_meta'];
$frm_display_title = $r['displaytitle'] == 'YES' ? 'ok' : '';
$frm_display_info = $r['displayinfo'] == 'YES' ? 'ok' : '';
$frm_publish = $r['published'] == 1 ? 'ok' : '';
$frm_commentable = ($r['commentable'] == 'YES' || $r['commentable'] == 'FREEZ') ? 'ok' : '';
$frm_task = 'edit_article';
$frm_submit = l('edit');
}
else {
switch ($contents) {
case 'article_new': $frm_fieldset = l('article_new'); $pos = 1; $frm_position1 = 'selected="selected"'; break;
case 'side_new': $frm_fieldset = l('side_new'); $pos = 2; $frm_position2 = 'selected="selected"'; break;
case 'page_new': $frm_fieldset = l('page_new'); $pos = 3; $frm_position3 = 'selected="selected"'; break;
}
$frm_action = db('website').'index.php?action=process&task=add_article';
$frm_title = $_SESSION['temp']['title'];
$frm_sef_title = cleanSEF($_SESSION['temp']['seftitle']);
$frm_text = $_SESSION['temp']['text'];
$frm_meta_desc = cleanSEF($_SESSION['temp']['description_meta']);
$frm_meta_key = cleanSEF($_SESSION['temp']['keywords_meta']);
$frm_display_title = 'ok';
$frm_display_info = ($contents == 'side_new') ? '' : 'ok';
$frm_publish = 'ok';
$frm_commentable = ($contents == 'side_new' || $contents == 'page_new') ? '' : 'ok';
$frm_task = 'add_article';
$frm_submit = l('submit');
}
html_input('form', '', 'post', '', '', '', '', '', '', '', '', '', 'post', $frm_action, '');
html_input('fieldset', '', '', '', '', '', '', '', '', '', '', '', '', '', $frm_fieldset);
html_input('text', 'title', 'at', $frm_title, 'Title', '', 'onchange="genSEF(this,document.forms[\'post\'].seftitle)"', 'onkeyup="genSEF(this,document.forms[\'post\'].seftitle)"', '', '', '', '', '', '', '');
if ($contents == 'side_new' || $edit_option == 2) {
echo '';
html_input('text', 'seftitle', 'as', $frm_sef_title, l('sef_title'), '', '', '', '', '', '', '', '', '', '');
echo '
';
}
else {html_input('text', 'seftitle', 'as', $frm_sef_title, l('sef_title'), '', '', '', '', '', '', '', '', '', '');}
html_input('textarea', 'text', 'txt', str_replace('';
html_input('button', '', '', 'B', '', 'button', 'onclick="tags(\'strong\')"', '', '', '', '', '', '', '', '');
html_input('button', '', '', 'I', '', 'button', 'onclick="tags(\'em\')"', '', '', '', '', '', '', '', '');
html_input('button', '', '', 'Strike', '', 'button', 'onclick="tags(\'strike\')"', '', '', '', '', '', '', '', '');
html_input('button', '', '', 'P', '', 'button', 'onclick="tags(\'p\')"', '', '', '', '', '', '', '', '');
html_input('button', '', '', 'Break', '', 'button', 'onclick="tags(\'break\')"', '', '', '', '', '', '', '', '');
html_input('button', '', '', 'Image', '', 'button', 'onclick="tags(\'img\')"', '', '', '', '', '', '', '', '');
html_input('button', '', '', 'Link', '', 'button', 'onclick="tags(\'link\')"', '', '', '', '', '', '', '', '');
html_input('button', '', '', 'Include', '', 'button', 'onclick="tags(\'include\')"', '', '', '', '', '', '', '', '');
echo '
';
if ($contents == 'article_new' || $edit_option == 1) {
html_input('checkbox', 'publish_article', 'pu', 'YES', l('publish_article'), '', '', '', '', $frm_publish, '', '', '', '', '');
}
echo '';
html_input('fieldset', '', '', '', '', '', '', '', '', '', '', '', '', '', l('preview'));
echo '
';
html_input('fieldset', '', '', '', '', '', '', '', '', '', '', '', '', '', ''.l('customize').' ');
echo '';
if ($contents != 'page_new' && $edit_option != 3) {
echo '
';
echo ($contents == 'side_new' || $edit_option == 2) ? l('appear_category') : l('category');
echo ': ';
if ($contents == 'side_new' || $edit_option == 2) {echo ''.l('all').' ';}
echo ''.l('home').' ';
$category_query = "SELECT * FROM ".db('prefix')."categories WHERE published = 'YES' ORDER BY catorder ASC";
$category_result = mysql_query($category_query);
while ($cat = mysql_fetch_array($category_result)) {
echo ''.$cat['name'].' ';
}
echo '
';
if ($contents == 'side_new' || $edit_option == 2) {
echo '
'.l('appear_page').': ';
echo ''.l('all').' ';
$query = "SELECT * FROM ".db('prefix')."articles WHERE position = 3 ORDER BY id ASC";
$result = mysql_query($query);
while ($r = mysql_fetch_array($result)) {
echo ''.$r['title'].' ';
}
echo '
';
}
}
if (isset($_GET['action']) == 'edit_article') {
echo '
'.l('position').': ';
echo ''.l('center').' ';
echo ''.l('side').' ';
echo ''.l('display_page').' ';
echo '
';
}
else {html_input('hidden', 'position', 'position', $pos, '', '', '', '', '', '', '', '', '', '', '');}
if ($contents != 'side_new' && $edit_option != 2) {
html_input('text', 'description_meta', 'dm', $frm_meta_desc, l('description_meta'), 'smalltxtarea', '', '', '', '', '2', '100', '', '', '');
html_input('text', 'keywords_meta', 'km', $frm_meta_key, l('keywords_meta'), 'smalltxtarea', '', '', '', '', '2', '100', '', '', '');
}
html_input('checkbox', 'display_title', 'dt', 'YES', l('display_title'), '', '', '', '', $frm_display_title, '', '', '', '', '');
if ($contents != 'side_new' && $edit_option != 2) {
html_input('checkbox', 'display_info', 'di', 'YES', l('display_info'), '', '', '', '', $frm_display_info, '', '', '', '', '');
html_input('checkbox', 'commentable', 'ca', 'YES', l('enable_commenting'), '', '', '', '', $frm_commentable, '', '', '', '', '');
if (!empty($id)) {
echo '
'.l('freeze_comments').'
';
}
}
echo '';
if ($contents == 'article_new' || $edit_option == 1) {
html_input('fieldset', '', '', '', '', '', '', '', '', '', '', '', '', '', '
'.l('publish_date').' ');
echo '
';
html_input('checkbox', 'fposting', 'fp', 'YES', l('enable'), '', '', '', '', '', '', '', '', '', '');
echo '
'.l('server_time').': '.date(s('date_format')).':'.date('s').'
';
!empty($id) ? posting_time($r['date']) : posting_time();
echo '
';
}
echo '
';
html_input('hidden', 'task', 'task', $frm_task, '', '', '', '', '', '', '', '', '', '', '');
html_input('submit', 'submit_article', 'submit_article', $frm_submit, '', '', '', '', '', '', '', '', '', '', '');
if (!empty($id)) {
html_input('hidden', 'id', 'id', $id, '', '', '', '', '', '', '', '', '', '', '');
html_input('submit', 'delete_article', 'delete_article', l('delete'), '', '', 'onclick="javascript: return pop()"', '', '', '', '', '', '', '', '');
}
echo '
';
}
// ARTICLES - ADMIN LIST
function admin_articles($contents) {
switch ($contents) {
case 'article_view': $title = l('articles'); $subquery = "WHERE position = 1"; break;
case 'side_view': $title = l('extra_contents'); $subquery = "WHERE SUBSTRING(position,1,1) = '2'"; break;
case 'page_view': $title = l('pages'); $subquery = "WHERE position = 3"; break;
}
echo '
'.$title.' ';
$query = "SELECT * FROM ".db('prefix')."articles $subquery ORDER BY date DESC";
$result = mysql_query($query);
if (!$result || !mysql_num_rows($result)) {echo ''.l('article_not_exist').'
';}
else {
$i = 0;
while ($r = mysql_fetch_array($result)) {
$categorySEF = find_cat_sef($r['category']).'/';
$articleSEF = $contents != 'side_view' ? $r['seftitle'].'/' : '';
echo ''.date(s('date_format'), strtotime($r['date'])).' '.$r['title'].' '.l('divider').' '.l('view').' ';
echo l('divider').' '.l('edit').' ';
if ($r['published'] == 2) {echo l('divider').' ['.l('status').' '.l('future_posting').']';}
if ($r['published'] == 0) {echo l('divider').' ['.l('status').' '.l('unpublished').']';}
echo '
';
$i++;
}
echo '';
}}
//CATEGORIES - ADMIN LIST
function admin_categories() {
echo '
'.l('categories').' ';
$query = "SELECT * FROM ".db('prefix')."categories ORDER BY catorder ASC";
$result = mysql_query($query);
if (!$result || !mysql_num_rows($result)) {echo ''.l('category_not_exist').'
';}
else {
while ($r = mysql_fetch_array($result)) {
echo ''.$r['name'].' '.l('divider').' '.l('edit').' ';
echo $r['published'] != 'YES' ? ' '.l('divider').' ['.l('status').' '.l('unpublished').']' : '';
echo '
';
}
}
}
// COMMENTS - EDIT
function edit_comment() {
echo ''.l('edit_comment').' ';
$commentid = $_GET['commentid'];
$query = mysql_query("SELECT * FROM ".db('prefix')."comments WHERE id='$commentid'");
$r = mysql_fetch_array($query);
html_input('form', '', '', '', '', '', '', '', '', '', '', '', 'post', '', '');
html_input('fieldset', '', '', '', '', '', '', '', '', '', '', '', '', '', l('edit_comment'));
html_input('textarea', 'editedcomment', 'ec', stripslashes($r['comment']), l('comment'), '', '', '', '', '', '2', '100', '', '', '');
html_input('text', 'name', 'n', $r['name'], l('name'), '', '', '', '', '', '', '', '', '', '');
html_input('text', 'url', 'url', $r['url'], l('url'), '', '', '', '', '', '', '', '', '', '');
html_input('checkbox', 'approved', 'a', '', l('approved'), '', '', '', '', $r['approved'] == 'True' ? 'ok' : '', '', '', '', '', '');
echo '';
html_input('hidden', 'id', 'id', $r['articleid'], '', '', '', '', '', '', '', '', '', '', '');
html_input('hidden', 'commentid', 'commentid', $r['id'], '', '', '', '', '', '', '', '', '', '', '');
html_input('hidden', 'task', 'commentid', 'editcomment', '', '', '', '', '', '', '', '', '', '', '');
html_input('submit', 'submit_text', 'submit_text', l('edit'), '', '', '', '', '', '', '', '', '', '', '');
echo '
';
}
/*** PROCESSING (CATEGORIES, CONTENTS, COMMENTS) ***/
function processing() {
if ($_SESSION[db('website').'Logged_In'] != 'True') {notification(l('error_not_logged_in'),'','login/');}
$action = $_REQUEST['action'];
$id = $_REQUEST['id'];
$commentid = $_POST['commentid'];
$approved = $_POST['approved'] == 'on' ? 'True' : '';
$name = str_replace("\'", "'", $_POST['name']);
$category = $_POST['define_category'];
$description = $_POST['description'];
$title = str_replace("\'", "'", $_POST['title']);
$seftitle = $_POST['seftitle'];
$url = cleanXSS($_POST['url']);
$comment = str_replace("\'", "'", $_POST['editedcomment']);
$text = str_replace("\'", "'", $_POST['text']);
$text = str_replace("\n", "
", $text);
$text_limit = $_POST['text_limit'];
$date = date('Y-m-d H:i:s');
$description_meta = str_replace("\'", "'", $_POST['description_meta']);
$keywords_meta = str_replace("\'", "'", $_POST['keywords_meta']);
$display_title = $_POST['display_title'] == 'on' ? 'YES' : 'NO';
$display_info = $_POST['display_info'] == 'on' ? 'YES' : 'NO';
$commentable = $_POST['commentable'] == 'on' ? 'YES' : 'NO';
if ($_POST['freeze'] == 'on' && $commentable == 'YES') {$commentable = 'FREEZ';}
$position = $_POST['position'];
if ($position == 2) {$position = $_POST['cat_dependant'] == 'on' ? 21 : 2;}
$publish_article = ($_POST['publish_article'] == 'on' || $position > 1) ? 1 : 0;
$publish_category = $_POST['publish'] == 'on' ? 'YES' : 'NO';
$fpost_enabled = false;
if($_POST['fposting'] == 'on') {
$fpost_enabled = true;
$publish_article = 2;
$date = $_POST['fposting_year'].'-'.$_POST['fposting_month'].'-'.$_POST['fposting_day'].' '.$_POST['fposting_hour'].':'.$_POST['fposting_minute'].':00';
}
switch ($_REQUEST['task']) {
case 'save_settings':
if (isset($_POST['save'])) {
$website_title = $_POST['website_title'];
$home_sef = $_POST['home_sef'];
$website_description = $_POST['website_description'];
$website_keywords = $_POST['website_keywords'];
$website_email = $_POST['website_email'];
$contact_subject = $_POST['contact_subject'];
$language = $_POST['language'];
$charset = $_POST['charset'];
$date_format = $_POST['date_format'];
$article_limit = $_POST['article_limit'];
$rss_limit = $_POST['rss_limit'];
$display_page = $_POST['display_page'];
$display_new_on_home = $_POST['display_new_on_home'];
$display_pagination = $_POST['display_pagination'] == 'on' ? 'True' : '';
$num_categories = $_POST['num_categories'];
$approve_comments = $_POST['approve_comments'];
$comments_order = $_POST['comments_order'];
$comment_limit = $_POST['comment_limit'];
$word_filter_enable = $_POST['word_filter_enable'];
$word_filter_file = $_POST['word_filter_file'];
$word_filter_change = $_POST['word_filter_change'];
$query = "UPDATE ".db('prefix')."settings SET VALUE=";
mysql_query($query."'$home' WHERE name='home' LIMIT 1");
mysql_query($query."'$display_new_on_home' WHERE name='display_new_on_home' LIMIT 1");
mysql_query($query."'$approved' WHERE name='approved' LIMIT 1");
mysql_query($query."'$language' WHERE name='language' LIMIT 1");
mysql_query($query."'$website_title' WHERE name='website_title' LIMIT 1");
mysql_query($query."'$home_sef' WHERE name='home_sef' LIMIT 1");
mysql_query($query."'$website_description' WHERE name='website_description' LIMIT 1");
mysql_query($query."'$website_keywords' WHERE name='website_keywords' LIMIT 1");
mysql_query($query."'$website_email' WHERE name='website_email' LIMIT 1");
mysql_query($query."'$contact_subject' WHERE name='contact_subject' LIMIT 1");
mysql_query($query."'$word_filter_enable' WHERE name='word_filter_enable' LIMIT 1");
mysql_query($query."'$word_filter_file' WHERE name='word_filter_file' LIMIT 1");
mysql_query($query."'$word_filter_change' WHERE name='word_filter_change' LIMIT 1");
mysql_query($query."'$num_categories' WHERE name='num_categories' LIMIT 1");
mysql_query($query."'$charset' WHERE name='charset' LIMIT 1");
mysql_query($query."'$date_format' WHERE name='date_format' LIMIT 1");
mysql_query($query."'$comments_order' WHERE name='comments_order' LIMIT 1");
mysql_query($query."'$approve_comments' WHERE name='approve_comments' LIMIT 1");
mysql_query($query."'$comment_limit' WHERE name='comment_limit' LIMIT 1");
mysql_query($query."'$rss_limit' WHERE name='rss_limit' LIMIT 1");
mysql_query($query."'$article_limit' WHERE name='article_limit' LIMIT 1");
mysql_query($query."'$display_page' WHERE name='display_page' LIMIT 1");
mysql_query($query."'$display_pagination' WHERE name='display_pagination' LIMIT 1");
notification('','','');
echo '
';
}
break;
case 'changeup':
if (isset($_POST['submit_pass'])) {
if ($_POST['pass1'] == $_POST['pass2'] && strlen($_POST['pass1']) > 3 && !empty($_POST['uname'])) {
$uname = $_POST['uname'];
$pass = md5($_POST['pass1']);
$query = "UPDATE ".db('prefix')."settings SET VALUE=";
mysql_query($query."'$uname' WHERE name='username' LIMIT 1");
mysql_query($query."'$pass' WHERE name='password' LIMIT 1");
notification('','','');
echo '
';
}
else {notification(l('pass_mismatch'),'','settings/');}
}
break;
case 'add_category':
if (isset($_POST['submit_category'])) {
switch(true) {
case(empty($name)): notification(l('err_TitleEmpty'),l('errNote'),''); form_categories(); break;
case(empty($seftitle)): notification(l('err_SEFEmpty'),l('errNote'),''); form_categories(); break;
case(check_if_unique('category_name', $name, $id)): notification(l('err_TitleExists'),l('errNote'),''); form_categories(); break;
case(check_if_unique('category_seftitle', $seftitle, $id)): notification(l('err_SEFExists'),l('errNote'),''); form_categories(); break;
case(cleancheckSEF($seftitle) == 'notok'): notification(l('err_SEFIllegal'),l('errNote'), ''); form_categories(); break;
default:
mysql_query("INSERT INTO ".db('prefix')."categories(name, seftitle, description, published) VALUES('$name', '$seftitle', '$description', '$publish_category')");
notification('','','');
echo '
';
}
}
break;
case 'edit_category':
if (isset($_POST['submit_category'])) {
switch(true) {
case(empty($name)): notification(l('err_TitleEmpty'),l('errNote'),''); form_categories(); break;
case(empty($seftitle)): notification(l('err_SEFEmpty'),l('errNote'),''); form_categories(); break;
case(check_if_unique('category_name', $name, $id)): notification(l('err_TitleExists'),l('errNote'),''); form_categories(); break;
case(check_if_unique('category_seftitle', $seftitle, $id)): notification(l('err_SEFExists'),l('errNote'),''); form_categories(); break;
case(cleancheckSEF($seftitle) == 'notok'): notification(l('err_SEFIllegal'),l('errNote'), ''); form_categories(); break;
default:
$query = "UPDATE ".db('prefix')."categories SET";
$query_end = "WHERE id='$id' LIMIT 1";
mysql_query($query." name='$name' ".$query_end);
mysql_query($query." seftitle='$seftitle' ".$query_end);
mysql_query($query." description='$description' ".$query_end);
mysql_query($query." published='$publish_category' ".$query_end);
notification('','','');
echo '
';
}
}
if (isset($_POST['delete_category'])) {
mysql_query("DELETE FROM ".db('prefix')."categories WHERE id=$id LIMIT 1");
notification('','','');
echo '
';
}
break;
case 'order_category':
if (isset($_POST['order_category'])) {
$counter = $_POST['counter'];
for($i = 0; $i < $counter; $i++) {
$category_order = $_POST['catorder'][$i];
$counter_id = $_POST['counter_id'][$i];
if ($category_order == '' || !is_numeric($category_order)) {$category_order = 0;}
$query = "UPDATE ".db('prefix')."categories SET catorder = '$category_order' WHERE id = '$counter_id' LIMIT 1";
mysql_query($query);
}
notification('','','');
echo '
';
}
break;
case 'add_article':
if (isset($_POST['submit_article'])) {
if (substr($position, 0, 1) == 2) {
$category = $_POST['define_category'];
$page = $_POST['define_page'];
if ($category != -1) {$position = '21'.$category;}
else if ($page != 0) {$position = '22'.$page; $category = -1;}
}
$_SESSION['temp']['title'] = $title; $_SESSION['temp']['seftitle'] = $seftitle; $_SESSION['temp']['text'] = $text;
switch(true) {
case(empty($title)): notification(l('err_TitleEmpty'),l('errNote'),''); form_articles(''); unset($_SESSION['temp']); break;
case(empty($seftitle)):
notification(l('err_SEFEmpty'),l('errNote'),'');
$_SESSION['temp']['seftitle'] = $_SESSION['temp']['title']; form_articles(''); unset($_SESSION['temp']); break;
case(cleancheckSEF($seftitle) == 'notok'): notification(l('err_SEFIllegal'),l('errNote'),''); form_articles(''); unset($_SESSION['temp']); break;
case(check_if_unique('article_title', $title)): notification(l('err_TitleExists'),l('errNote'),''); form_articles(''); unset($_SESSION['temp']); break;
case(check_if_unique('article_seftitle', $seftitle)): notification(l('err_SEFExists'),l('errNote'),''); form_articles(''); unset($_SESSION['temp']); break;
default:
$query = "INSERT INTO ".db('prefix')."articles(title, seftitle, text, date, category, position, displaytitle, displayinfo, commentable, published, description_meta, keywords_meta) VALUES('$title', '$seftitle', '$text', '$date', '$category', '$position', '$display_title', '$display_info', '$commentable', '$publish_article', '$description_meta', '$keywords_meta')";
mysql_query($query); $pos = substr($position, 0, 1);
switch ($pos) {
case 1: $link = 'articles/'; break;
case 2: $link = 'extra_contents/'; break;
case 3: $link = 'pages/'; break;
}
notification('','','');
echo '
'; unset($_SESSION['temp']);
}
}
break;
case 'edit_article':
if (isset($_POST['submit_article'])) {
if (substr($position, 0, 1) == 2) {
$category = $_POST['define_category'];
$page = $_POST['define_page'];
if ($category != -1) {$position = '21'.$category;}
else if ($page != 0) {$position = '22'.$page; $category = -1;}
}
$_SESSION['temp']['title'] = $title; $_SESSION['temp']['seftitle'] = $seftitle; $_SESSION['temp']['text'] = $text;
switch(true) {
case(empty($title)): notification(l('err_TitleEmpty'),l('errNote'),''); form_articles(''); unset($_SESSION['temp']); break;
case(empty($seftitle)): notification(l('err_SEFEmpty'),l('errNote'),''); form_articles(''); unset($_SESSION['temp']); break;
case(cleancheckSEF($seftitle) == 'notok'): notification(l('err_SEFIllegal'),l('errNote'),''); form_articles(''); unset($_SESSION['temp']); break;
case(check_if_unique('article_title', $title, $id)): notification(l('err_TitleExists'),l('errNote'),''); form_articles(''); unset($_SESSION['temp']); break;
case(check_if_unique('article_seftitle', $seftitle, $id)): notification(l('err_SEFExists'),l('errNote'),''); form_articles(''); unset($_SESSION['temp']); break;
default:
$query = "UPDATE ".db('prefix')."articles SET";
$query_end = "WHERE id='$id' LIMIT 1";
mysql_query($query." title='$title' ".$query_end);
mysql_query($query." seftitle='$seftitle' ".$query_end);
mysql_query($query." text='$text' ".$query_end);
mysql_query($query." textlimit='$text_limit' ".$query_end);
mysql_query($query." date='$date' ".$query_end);
mysql_query($query." category='$category' ".$query_end);
mysql_query($query." position='$position' ".$query_end);
mysql_query($query." displaytitle='$display_title' ".$query_end);
mysql_query($query." displayinfo='$display_info' ".$query_end);
mysql_query($query." commentable='$commentable' ".$query_end);
mysql_query($query." published='$publish_article' ".$query_end);
mysql_query($query." description_meta='$description_meta' ".$query_end);
mysql_query($query." keywords_meta='$keywords_meta' ".$query_end);
$link = (substr($position, 0, 1) != 2) ? find_cat_sef($category).'/'.retrieve('seftitle', 'articles', 'id', $id).'/' : find_cat_sef($category).'/';
notification('','','');
echo '
'; unset($_SESSION['temp']);
}
}
if (isset($_POST['delete_article'])) {
mysql_query("DELETE FROM ".db('prefix')."articles WHERE id='$id' LIMIT 1");
mysql_query("DELETE FROM ".db('prefix')."comments WHERE articleid='$id'");
$pos = substr($position, 0, 1);
switch ($pos) {
case 1: $link = 'articles/'; break;
case 2: $link = 'extra_contents/'; break;
case 3: $link = 'pages/'; break;
}
notification('','','');
echo '
';
}
break;
case 'approvecomment':
mysql_query("UPDATE ".db('prefix')."comments SET approved='True' WHERE id='$id' LIMIT 1");
notification('','','');
echo '
';
break;
case 'editcomment':
$query = "UPDATE ".db('prefix')."comments SET";
$query_end = "WHERE id='$commentid' LIMIT 1";
mysql_query($query." name='$name' ".$query_end);
mysql_query($query." url='$url' ".$query_end);
mysql_query($query." comment='$comment' ".$query_end);
mysql_query($query." approved='$approved' ".$query_end);
$link = find_cat_sef($categoryid).'/'.retrieve('seftitle', 'articles', 'id', $id).'/';
notification('','','');
echo '
';
break;
case 'freezecomments':
$categoryId = retrieve('category', 'articles', 'id', $id);
mysql_query("UPDATE ".db('prefix')."articles SET commentable='FREEZ' WHERE id='$id' LIMIT 1");
$link = find_cat_sef($categoryid).'/'.retrieve('seftitle', 'articles', 'id', $id).'/';
notification('','','');
echo '
';
break;
case 'unfreezecomments':
$categoryId = retrieve('category', 'articles', 'id', $id);
mysql_query("UPDATE ".db('prefix')."articles SET commentable='YES' WHERE id='$id' LIMIT 1");
$link = find_cat_sef($categoryid).'/'.retrieve('seftitle', 'articles', 'id', $id).'/';
notification('','','');
echo '
';
break;
case 'deletecomment':
$commentid = $_GET['commentid'];
$articleid = $_GET['articleid'];
mysql_query("DELETE FROM ".db('prefix')."comments WHERE id='$commentid' LIMIT 1");
$link = find_cat_sef($categoryid).'/'.retrieve('seftitle', 'articles', 'id', $articleid).'/';
notification('','','');
echo '
';
break;
}
}
/*** FILES ***/
function files() {
if (isset($_POST['upload']) && isset($_SESSION[db('website').'Logged_In']) && $_POST['ip'] == $_SERVER['REMOTE_ADDR'] && (time() - $_POST['time']) > 4) {
if ($_FILES['imagefile']['type']) {
$upload_dir = $_POST['upload_dir'].'/';
copy ($_FILES['imagefile']['tmp_name'], $upload_dir.$_FILES['imagefile']['name']) or die ('Could not copy'); notification('','','files/');
$kb_size = round(($_FILES['imagefile']['size'] / 1024), 1);
echo '
'.$_FILES['imagefile']['name'].' ['.$kb_size.' KB] ['.$_FILES['imagefile']['type'].']';
} else {echo '
'.l('admin_error').' '.l('image_error').'
';}
} else {
if (isset($_GET['task']) == 'delete') {
$file_to_delete = $_GET['folder'].'/'.$_GET['file'];
@unlink($file_to_delete);
notification('','','files/');
} else {
html_input('fieldset', '', '', '', '', '', '', '', '', '', '', '', '', '', l('upload'));
echo '
';
html_input('fieldset', '', '', '', '', '', '', '', '', '', '', '', '', '', l('view').' '.l('files'));
echo '
';
}}}
// FILELIST FUNCTION
function filelist($mode, $path, $depth = 0) {
$ignore = array('cgi-bin', '.htaccess', '.', '..', 'Thumbs.db');
$extension = array('php', 'html');
$dh = @opendir($path);
while (false !== ($file = readdir($dh))) {
if(!in_array($file, $ignore) && !in_array(substr($file, -3), $extension)) {
$spaces = str_repeat(l('divider').' ',($depth));
if($mode != "list" && is_dir("$path/$file")) {
if ($_POST['upload_dir'] == $file) {$selected = ' selected="selected"';} else {$selected == '';}
echo '
'.$spaces.$file.' ';
filelist("option", "$path/$file",($depth + 1));
} else if (is_file("$path/$file")) {
echo '
'.$file.' '.l('divider').'
'.l('delete').' ';
}
}
}
closedir($dh);
}
// CONNECT TO DATABASE
function connect_to_db() {
$db = mysql_connect(db('dbhost'), db('dbuname'), db('dbpass'));
mysql_select_db(db('dbname')) or die(db('dberror'));
}
// SMART RETRIEVE FUNCTION
function retrieve($column, $table, $field, $value) {
$query = "SELECT $column FROM ".db('prefix')."$table WHERE $field = '$value'";
$result = mysql_query($query);
while ($r = mysql_fetch_array($result)) {$retrieve = $r[$column];}
return $retrieve;
}
// FIND CATEGORY'S SEF TITLE THROUGH ARTICLE'S CATEGORY ID
function find_cat_sef($categoryid) {
$query = "SELECT seftitle FROM ".db('prefix')."categories WHERE id = '$categoryid'";
$result = mysql_query($query);
while ($r = mysql_fetch_array($result)) {$cat_sef = $r['seftitle'];}
$cat_sef_title = isset($cat_sef) ? $cat_sef : s('home_sef');
return $cat_sef_title;
}
// CLEAN - cleaning query
function clean($query) {
$query = mysql_real_escape_string(addslashes($query));
return $query;
}
// CLEAN - XSS stuff clean.
function cleanXSS($text) {
$allowedtags = "
";
$notallowedattribs = array("@javascript:|onclick|ondblclick|onmousedown|onmouseup"
."|onmouseover|onmousemove|onmouseout|onkeypress|onkeydown|onkeyup@si");
$changexssto = '';
$text = preg_replace($notallowedattribs, $changexssto, $text);
$text = strip_tags($text, $allowedtags);
$text = nl2br($text);
$text = cleanWords($text);
return $text;
}
// CLEAN - WORD FILTER
function cleanWords($text) {
if ((strtolower(s('word_filter_enable')) == 'on') && (file_exists(s('addon_folder').'/'.s('word_filter_file')))) {
$bad_words_from_what = preg_replace('/(^[\r\n]*|[\r\n]+)[\s\t]*[\r\n]+/', '', file(s('addon_folder').'/'.s('word_filter_file')));
$bad_words_from_what = preg_replace('/^(.*)$/', '/\\1/i', $bad_words_from_what);
echo $test[0];
$bad_words_to_what = s('word_filter_change');
$text = preg_replace($bad_words_from_what, $bad_words_to_what, $text);
return $text;
} else {return $text;}
}
// CHECK IF UNIQUE
function check_if_unique($what, $text, $not_id = 'x') {
switch ($what) {
case 'article_seftitle': $sql = "articles WHERE seftitle = '".clean($text)."' AND id != '".$not_id."'"; break;
case 'article_title': $sql = "articles WHERE title = '".clean($text)."' AND id != '".$not_id."'"; break;
case 'category_seftitle': $sql = "categories WHERE seftitle = '".clean($text)."' AND id != '".$not_id."'"; break;
case 'category_name': $sql = "categories WHERE name = '".clean($text)."' AND id != '".$not_id."'"; break;
}
$rows = mysql_num_rows(mysql_query("SELECT id FROM ".db('prefix').$sql));
if ($rows == 0) {return false;}
else {return true;}
}
// GET ID
function get_id($parameter) {
$url = array();
$url = explode('/', clean($_GET['category']));
$get_id = array();
$get_id['category'] = $url['0'];
if (isset($url['1'])) {$get_id['article'] = $url['1'];}
if (isset($url['2'])) {$get_id['commentspage'] = $url['2'];}
if (isset($get_id[$parameter])) {return $get_id[$parameter];}
}
//CATEGORY CHECK
function check_category($category) {
$main_menu = explode(',', l('cat_listSEF'));
if (in_array($category, $main_menu)) {return true;}
else {return false;}
}
//FILE INCLUSION
function file_include($text, $shorten) {
$fulltext = substr(stripslashes($text), 0, $shorten);
$inc = strpos($fulltext, '[/include]');
if ($inc > 0) {
$text = str_replace('[include]', '|&|', $fulltext);
$text = str_replace('[/include]', '|&|', $text);
$text = explode('|&|', $text);
$num = count($text);
$extension = explode(',', l('file_include_extensions'));
for ($i = 0; ; $i++) {
if ($i == $num) {break;}
if (!in_array(substr($text[$i], -3), $extension)) {echo substr(stripslashes($text[$i]), 0);}
else {
if (preg_match("#^[a-z0-9_\-.\/]+$#i", $text[$i])) {
$filename = $text[$i];
file_exists($filename) ? include($filename) : print l('error_file_exists');
} else {echo l('error_file_name');}
}
}
} else {echo $fulltext;}
}
// ARTICLES - FUTURE POSTING
function update_articles() {
mysql_query("UPDATE ".db('prefix')."articles SET published=1 WHERE published=2 AND date <= '".date("Y-m-d H:i:s")."'");
}
// MAKE A CLEAN SEF URL
function cleanSEF($string) {
$string = str_replace(' ', '-', $string);
$string = preg_replace('/[^0-9a-zA-Z-_]/', '', $string);
$string = str_replace('-', ' ', $string);
$string = preg_replace('/^\s+|\s+$/', '', $string);
$string = preg_replace('/\s+/', ' ', $string);
$string = str_replace(' ', '-', $string);
return strtolower($string);
}
function cleancheckSEF($string) {
$ret = !ereg('^[_a-zA-Z0-9-]+$', $string) ? 'notok' : 'ok';
return $ret;
}
// JAVASCRIPT FUNCTIONS
function js() { ?>
,name, on ,date,edit,
,,comment,
,