<?php
/*-------------------------------------------------------+
| PHP-Fusion Content Management System
| Copyright (C) 2002 - 2011 Nick Jones
| http://www.php-fusion.co.uk/
+--------------------------------------------------------+
| Filename: news.php
| Author: Nick Jones (Digitanium)
+--------------------------------------------------------+
| This program is released as free software under the
| Affero GPL license. You can redistribute it and/or
| modify it under the terms of this license which you
| can read by viewing the included agpl.txt or online
| at www.gnu.org/licenses/agpl.html. Removal of this
| copyright header is strictly prohibited without
| written permission from the original author(s).
+--------------------------------------------------------*/
require_once "../maincore.php";
if (!checkrights("N") || !defined("iAUTH") || !isset($_GET['aid']) || $_GET['aid'] != iAUTH) { redirect("../index.php"); }
require_once THEMES."templates/admin_header_mce.php";
include LOCALE.LOCALESET."admin/news.php";
if ($settings['tinymce_enabled']) {
echo "<script language='javascript' type='text/javascript'>advanced();</script>\n";
} else {
require_once INCLUDES."html_buttons_include.php";
}
if (isset($_GET['error']) && isnum($_GET['error'])) {
if ($_GET['error'] == 1) {
$message = $locale['413'];
} elseif ($_GET['error'] == 2) {
$message = sprintf($locale['414'], parsebytesize($settings['news_photo_max_b']));
} elseif ($_GET['error'] == 3) {
$message = $locale['415'];
} elseif ($_GET['error'] == 4) {
$message = sprintf($locale['416'], $settings['news_photo_max_w'], $settings['news_photo_max_h']);
}
if ($message) { echo "<div id='close-message'><div class='admin-message'>".$message."</div></div>\n"; }
}
if (isset($_GET['status'])) {
if ($_GET['status'] == "sn") {
$message = $locale['410'];
} elseif ($_GET['status'] == "su") {
$message = $locale['411'];
} elseif ($_GET['status'] == "del") {
$message = $locale['412'];
}
if ($message) { echo "<div id='close-message'><div class='admin-message'>".$message."</div></div>\n"; }
}
if (isset($_POST['save'])) {
$error = "";
$news_subject = stripinput($_POST['news_subject']);
$news_cat = isnum($_POST['news_cat']) ? $_POST['news_cat'] : "0";
$news_cat2 = isnum($_POST['news_cat2']) ? $_POST['news_cat2'] : "0";
$news_cat3 = isnum($_POST['news_cat3']) ? $_POST['news_cat3'] : "0";
$news_cat4 = isnum($_POST['news_cat4']) ? $_POST['news_cat4'] : "0";
$news_cat5 = isnum($_POST['news_cat5']) ? $_POST['news_cat5'] : "0";
$news_cat6 = isnum($_POST['news_cat6']) ? $_POST['news_cat6'] : "0";
$news_cat7 = isnum($_POST['news_cat7']) ? $_POST['news_cat7'] : "0";
$news_cat8 = isnum($_POST['news_cat8']) ? $_POST['news_cat8'] : "0";
$news_cat9 = isnum($_POST['news_cat9']) ? $_POST['news_cat9'] : "0";
$news_cat10 = isnum($_POST['news_cat10']) ? $_POST['news_cat10'] : "0";
$news_cat11 = isnum($_POST['news_cat11']) ? $_POST['news_cat11'] : "0";
$news_cat12 = isnum($_POST['news_cat12']) ? $_POST['news_cat12'] : "0";
$news_cat13 = isnum($_POST['news_cat13']) ? $_POST['news_cat13'] : "0";
$news_cat14 = isnum($_POST['news_cat14']) ? $_POST['news_cat14'] : "0";
if (isset($_FILES['news_image']) && is_uploaded_file($_FILES['news_image']['tmp_name'])) {
require_once INCLUDES."photo_functions_include.php";
$image = $_FILES['news_image'];
$image_name = stripfilename(str_replace(" ", "_", strtolower(substr($image['name'], 0, strrpos($image['name'], ".")))));
$image_ext = strtolower(strrchr($image['name'],"."));
if ($image_ext == ".gif") { $filetype = 1;
} elseif ($image_ext == ".jpg") { $filetype = 2;
} elseif ($image_ext == ".png") { $filetype = 3;
} else { $filetype = false; }
if (!preg_match("/^[-0-9A-Z_\.\[\]]+$/i", $image_name)) {
$error = 1;
} elseif ($image['size'] > $settings['news_photo_max_b']){
$error = 2;
} elseif (!$filetype) {
$error = 3;
} else {
$image_t1 = image_exists(IMAGES_N_T, $image_name."_t1".$image_ext);
$image_t2 = image_exists(IMAGES_N_T, $image_name."_t2".$image_ext);
$image_full = image_exists(IMAGES_N, $image_name.$image_ext);
move_uploaded_file($_FILES['news_image']['tmp_name'], IMAGES_N.$image_full);
if (function_exists("chmod")) { chmod(IMAGES_N.$image_full, 0644); }
$imagefile = @getimagesize(IMAGES_N.$image_full);
if ($imagefile[0] > $settings['news_photo_max_w'] || $imagefile[1] > $settings['news_photo_max_h']) {
$error = 4;
unlink(IMAGES_N.$image_full);
} else {
createthumbnail($filetype, IMAGES_N.$image_full, IMAGES_N_T.$image_t1, $settings['news_photo_w'], $settings['news_photo_h']);
if ($settings['news_thumb_ratio'] == 0) {
createthumbnail($filetype, IMAGES_N.$image_full, IMAGES_N_T.$image_t2, $settings['news_thumb_w'], $settings['news_thumb_h']);
} else {
createsquarethumbnail($filetype, IMAGES_N.$image_full, IMAGES_N_T.$image_t2, $settings['news_thumb_w']);
}
}
}
if (!$error) {
$news_image = $image_full;
$news_image_t1 = $image_t1;
$news_image_t2 = $image_t2;
} else {
$news_image = "";
$news_image_t1 = "";
$news_image_t2 = "";
}
} else {
$news_image = (isset($_POST['news_image']) ? $_POST['news_image'] : "");
$news_image_t1 = (isset($_POST['news_image_t1']) ? $_POST['news_image_t1'] : "");
$news_image_t2 = (isset($_POST['news_image_t2']) ? $_POST['news_image_t2'] : "");
}
$body = addslash($_POST['body']);
if ($_POST['body2']) {
$body2 = addslash(preg_replace("(^<p>\s</p>$)", "", $_POST['body2']));
} else {
$body2 = "";
}
$news_start_date = 0; $news_end_date = 0;
if ($_POST['news_start']['mday']!="--" && $_POST['news_start']['mon']!="--" && $_POST['news_start']['year']!="----") {
$news_start_date = mktime($_POST['news_start']['hours'],$_POST['news_start']['minutes'],0,$_POST['news_start']['mon'],$_POST['news_start']['mday'],$_POST['news_start']['year']);
}
if ($_POST['news_end']['mday']!="--" && $_POST['news_end']['mon']!="--" && $_POST['news_end']['year']!="----") {
$news_end_date = mktime($_POST['news_end']['hours'],$_POST['news_end']['minutes'],0,$_POST['news_end']['mon'],$_POST['news_end']['mday'],$_POST['news_end']['year']);
}
$news_visibility = isnum($_POST['news_visibility']) ? $_POST['news_visibility'] : "0";
$news_draft = isset($_POST['news_draft']) ? "1" : "0";
$news_sticky = isset($_POST['news_sticky']) ? "1" : "0";
if ($settings['tinymce_enabled'] != 1) { $news_breaks = isset($_POST['line_breaks']) ? "y" : "n"; } else { $news_breaks = "n"; }
$news_comments = isset($_POST['news_comments']) ? "1" : "0";
$news_ratings = isset($_POST['news_ratings']) ? "1" : "0";
if (isset($_POST['news_id']) && isnum($_POST['news_id'])) {
$result = dbquery("SELECT news_image, news_image_t1, news_image_t2 FROM ".DB_NEWS." WHERE news_id='".$_POST['news_id']."' LIMIT 1");
if (dbrows($result)) {
$data = dbarray($result);
if ($news_sticky == "1") { $result = dbquery("UPDATE ".DB_NEWS." SET news_sticky='0' WHERE news_sticky='1'"); }
if (isset($_POST['del_image'])) {
if (!empty($data['news_image']) && file_exists(IMAGES_N.$data['news_image'])) { unlink(IMAGES_N.$data['news_image']); }
if (!empty($data['news_image_t1']) && file_exists(IMAGES_N_T.$data['news_image_t1'])) { unlink(IMAGES_N_T.$data['news_image_t1']); }
if (!empty($data['news_image_t2']) && file_exists(IMAGES_N_T.$data['news_image_t2'])) { unlink(IMAGES_N_T.$data['news_image_t2']); }
$news_image = "";
$news_image_t1 = "";
$news_image_t2 = "";
}
$result = dbquery("UPDATE ".DB_NEWS." SET news_subject='$news_subject', news_cat='$news_cat', news_cat2='$news_cat2', news_cat3='$news_cat3', news_cat4='$news_cat4', news_cat5='$news_cat5', news_cat6='$news_cat6', news_cat7='$news_cat7', news_cat8='$news_cat8', news_cat9='$news_cat9', news_cat10='$news_cat10', news_cat11='$news_cat11', news_cat12='$news_cat12', news_cat13='$news_cat13', news_cat14='$news_cat14', news_end='$news_end_date', news_image='$news_image', news_news='$body', news_extended='$body2', news_breaks='$news_breaks',".($news_start_date != 0 ? " news_datestamp='$news_start_date'," : "")." news_start='$news_start_date', news_image_t1='$news_image_t1', news_image_t2='$news_image_t2', news_visibility='$news_visibility', news_draft='$news_draft', news_sticky='$news_sticky', news_allow_comments='$news_comments', news_allow_ratings='$news_ratings' WHERE news_id='".$_POST['news_id']."'");
redirect(FUSION_SELF.$aidlink."&status=su".($error ? "&error=$error" : ""));
} else {
redirect(FUSION_SELF.$aidlink);
}
} else {
if ($news_sticky == "1") { $result = dbquery("UPDATE ".DB_NEWS." SET news_sticky='0' WHERE news_sticky='1'"); }
$result = dbquery("INSERT INTO ".DB_NEWS." (news_subject, news_cat, news_cat2, news_cat3, news_cat4, news_cat5, news_cat6, news_cat7, news_cat8, news_cat9, news_cat10, news_cat11, news_cat12, news_cat13, news_cat14, news_news, news_extended, news_breaks, news_name, news_datestamp, news_start, news_end, news_image, news_image_t1, news_image_t2, news_visibility, news_draft, news_sticky, news_reads, news_allow_comments, news_allow_ratings) VALUES ('$news_subject', '$news_cat', '$body', '$body2', '$news_breaks', '".$userdata['user_id']."', '".($news_start_date != 0 ? $news_start_date : time())."', '$news_start_date', '$news_end_date', '$news_image', '$news_image_t1', '$news_image_t2', '$news_visibility', '$news_draft', '$news_sticky', '0', '$news_comments', '$news_ratings')");
redirect(FUSION_SELF.$aidlink."&status=sn".($error ? "&error=$error" : ""));
}
} else if (isset($_POST['delete']) && (isset($_POST['news_id']) && isnum($_POST['news_id']))) {
$result = dbquery("SELECT news_image, news_image_t1, news_image_t2 FROM ".DB_NEWS." WHERE news_id='".$_POST['news_id']."' LIMIT 1");
if (dbrows($result)) {
$data = dbarray($result);
if (!empty($data['news_image']) && file_exists(IMAGES_N.$data['news_image'])) { unlink(IMAGES_N.$data['news_image']); }
if (!empty($data['news_image_t1']) && file_exists(IMAGES_N_T.$data['news_image_t1'])) { unlink(IMAGES_N_T.$data['news_image_t1']); }
if (!empty($data['news_image_t2']) && file_exists(IMAGES_N_T.$data['news_image_t2'])) { unlink(IMAGES_N_T.$data['news_image_t2']); }
$result = dbquery("DELETE FROM ".DB_NEWS." WHERE news_id='".$_POST['news_id']."'");
$result = dbquery("DELETE FROM ".DB_COMMENTS." WHERE comment_item_id='".$_POST['news_id']."' and comment_type='N'");
$result = dbquery("DELETE FROM ".DB_RATINGS." WHERE rating_item_id='".$_POST['news_id']."' and rating_type='N'");
redirect(FUSION_SELF.$aidlink."&status=del");
} else {
redirect(FUSION_SELF.$aidlink);
}
} else {
if (isset($_POST['preview'])) {
$news_subject = stripinput($_POST['news_subject']);
$news_cat = isnum($_POST['news_cat']) ? $_POST['news_cat'] : "0";
$news_cat2 = isnum($_POST['news_cat2']) ? $_POST['news_cat2'] : "0";
$news_cat3 = isnum($_POST['news_cat3']) ? $_POST['news_cat3'] : "0";
$news_cat4 = isnum($_POST['news_cat4']) ? $_POST['news_cat4'] : "0";
$news_cat5 = isnum($_POST['news_cat5']) ? $_POST['news_cat5'] : "0";
$news_cat6 = isnum($_POST['news_cat6']) ? $_POST['news_cat6'] : "0";
$news_cat7 = isnum($_POST['news_cat7']) ? $_POST['news_cat7'] : "0";
$news_cat8 = isnum($_POST['news_cat8']) ? $_POST['news_cat8'] : "0";
$news_cat9 = isnum($_POST['news_cat9']) ? $_POST['news_cat9'] : "0";
$news_cat10 = isnum($_POST['news_cat10']) ? $_POST['news_cat10'] : "0";
$news_cat11 = isnum($_POST['news_cat11']) ? $_POST['news_cat11'] : "0";
$news_cat12 = isnum($_POST['news_cat12']) ? $_POST['news_cat12'] : "0";
$news_cat13 = isnum($_POST['news_cat13']) ? $_POST['news_cat13'] : "0";
$news_cat14 = isnum($_POST['news_cat14']) ? $_POST['news_cat14'] : "0";
$body = phpentities(stripslash($_POST['body']));
$bodypreview = str_replace("src='".str_replace("../", "", IMAGES_N), "src='".IMAGES_N, stripslash($_POST['body']));
if ($_POST['body2']) {
$body2 = phpentities(stripslash($_POST['body2']));
$body2preview = str_replace("src='".str_replace("../", "", IMAGES_N), "src='".IMAGES_N, stripslash($_POST['body2']));
} else {
$body2 = "";
}
if (isset($_POST['line_breaks'])) {
$news_breaks = " checked='checked'";
$bodypreview = nl2br($bodypreview);
if ($body2) { $body2preview = nl2br($body2preview); }
} else {
$news_breaks = "";
}
$news_start = array(
"mday" => isnum($_POST['news_start']['mday']) ? $_POST['news_start']['mday'] : "--",
"mon" => isnum($_POST['news_start']['mon']) ? $_POST['news_start']['mon'] : "--",
"year" => isnum($_POST['news_start']['year']) ? $_POST['news_start']['year'] : "----",
"hours" => isnum($_POST['news_start']['hours']) ? $_POST['news_start']['hours'] : "0",
"minutes" => isnum($_POST['news_start']['minutes']) ? $_POST['news_start']['minutes'] : "0",
);
$news_end = array(
"mday" => isnum($_POST['news_end']['mday']) ? $_POST['news_end']['mday'] : "--",
"mon" => isnum($_POST['news_end']['mon']) ? $_POST['news_end']['mon'] : "--",
"year" => isnum($_POST['news_end']['year']) ? $_POST['news_end']['year'] : "----",
"hours" => isnum($_POST['news_end']['hours']) ? $_POST['news_end']['hours'] : "0",
"minutes" => isnum($_POST['news_end']['minutes']) ? $_POST['news_end']['minutes'] : "0",
);
$news_image = (isset($_POST['news_image']) ? $_POST['news_image'] : "");
$news_image_t1 = (isset($_POST['news_image_t1']) ? $_POST['news_image_t1'] : "");
$news_image_t2 = (isset($_POST['news_image_t2']) ? $_POST['news_image_t2'] : "");
$news_visibility = isnum($_POST['news_visibility']) ? $_POST['news_visibility'] : "0";
$news_draft = isset($_POST['news_draft']) ? " checked='checked'" : "";
$news_sticky = isset($_POST['news_sticky']) ? " checked='checked'" : "";
$news_comments = isset($_POST['news_comments']) ? " checked='checked'" : "";
$news_ratings = isset($_POST['news_ratings']) ? " checked='checked'" : "";
opentable($news_subject);
echo "$bodypreview\n";
closetable();
if (isset($body2preview)) {
opentable($news_subject);
echo "$body2preview\n";
closetable();
}
}
$result = dbquery("SELECT news_id, news_subject, news_draft FROM ".DB_NEWS." ORDER BY news_draft DESC, news_datestamp DESC");
if (dbrows($result) != 0) {
$editlist = ""; $sel = "";
while ($data = dbarray($result)) {
if ((isset($_POST['news_id']) && isnum($_POST['news_id'])) || (isset($_GET['news_id']) && isnum($_GET['news_id']))) {
$news_id = isset($_POST['news_id']) ? $_POST['news_id'] : $_GET['news_id'];
$sel = ($news_id == $data['news_id'] ? " selected='selected'" : "");
}
$editlist .= "<option value='".$data['news_id']."'$sel>".($data['news_draft'] ? $locale['438']." " : "").$data['news_subject']."</option>\n";
}
opentable($locale['400']);
echo "<div style='text-align:center'>\n<form name='selectform' method='post' action='".FUSION_SELF.$aidlink."&action=edit'>\n";
echo "<select name='news_id' class='textbox' style='width:250px'>\n".$editlist."</select>\n";
echo "<input type='submit' name='edit' value='".$locale['420']."' class='button' />\n";
echo "<input type='submit' name='delete' value='".$locale['421']."' onclick='return DeleteNews();' class='button' />\n";
echo "</form>\n</div>\n";
closetable();
}
if ((isset($_GET['action']) && $_GET['action'] == "edit") && (isset($_POST['news_id']) && isnum($_POST['news_id'])) || (isset($_GET['news_id']) && isnum($_GET['news_id']))) {
$result = dbquery("SELECT news_subject, news_cat, news_cat2, news_cat3, news_cat4, news_cat5, news_cat6, news_cat7, news_cat8, news_cat9, news_cat10, news_cat11, news_cat12, news_cat13, news_cat14, news_news, news_extended, news_start, news_end, news_image, news_image_t1, news_image_t2, news_visibility, news_draft, news_sticky, news_breaks, news_allow_comments, news_allow_ratings FROM ".DB_NEWS." WHERE news_id='".(isset($_POST['news_id']) ? $_POST['news_id'] : $_GET['news_id'])."' LIMIT 1");
if (dbrows($result)) {
$data = dbarray($result);
$news_subject = $data['news_subject'];
$news_cat = $data['news_cat'];
$news_cat2 = $data['news_cat2'];
$news_cat3 = $data['news_cat3'];
$news_cat4 = $data['news_cat4'];
$news_cat5 = $data['news_cat5'];
$news_cat6 = $data['news_cat6'];
$news_cat7 = $data['news_cat7'];
$news_cat8 = $data['news_cat8'];
$news_cat9 = $data['news_cat9'];
$news_cat10 = $data['news_cat10'];
$news_cat11 = $data['news_cat11'];
$news_cat12 = $data['news_cat12'];
$news_cat13 = $data['news_cat13'];
$news_cat14 = $data['news_cat14'];
$body = phpentities(stripslashes($data['news_news']));
$body2 = phpentities(stripslashes($data['news_extended']));
if ($data['news_start'] > 0) $news_start = getdate($data['news_start']);
if ($data['news_end'] > 0) $news_end = getdate($data['news_end']);
$news_image = $data['news_image'];
$news_image_t1 = $data['news_image_t1'];
$news_image_t2 = $data['news_image_t2'];
$news_visibility = $data['news_visibility'];
$news_draft = $data['news_draft'] == "1" ? " checked='checked'" : "";
$news_sticky = $data['news_sticky'] == "1" ? " checked='checked'" : "";
$news_breaks = $data['news_breaks'] == "y" ? " checked='checked'" : "";
$news_comments = $data['news_allow_comments'] == "1" ? " checked='checked'" : "";
$news_ratings = $data['news_allow_ratings'] == "1" ? " checked='checked'" : "";
} else {
redirect(FUSION_SELF.$aidlink);
}
}
if ((isset($_POST['news_id']) && isnum($_POST['news_id'])) || (isset($_GET['news_id']) && isnum($_GET['news_id']))) {
opentable($locale['402']);
} else {
if (!isset($_POST['preview'])) {
$news_subject = "";
$news_cat = "0";
$news_cat2 = "0";
$news_cat3 = "0";
$news_cat4 = "0";
$news_cat5 = "0";
$news_cat6 = "0";
$news_cat7 = "0";
$news_cat8 = "0";
$news_cat9 = "0";
$news_cat10 = "0";
$news_cat11 = "0";
$news_cat12 = "0";
$news_cat13 = "0";
$news_cat14 = "0";
$body = "";
$body2 = "";
$news_image = "";
$news_image_t1 = "";
$news_image_t2 = "";
$news_visibility = 0;
$news_draft = "";
$news_sticky = "";
$news_breaks = " checked='checked'";
$news_comments = " checked='checked'";
$news_ratings = " checked='checked'";
}
opentable($locale['401']);
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat)) $sel = ($news_cat == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts2 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat2)) $sel = ($news_cat2 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts2 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts3 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat3)) $sel = ($news_cat3 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts3 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts4 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat4)) $sel = ($news_cat4 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts4 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts5 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat5)) $sel = ($news_cat5 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts5 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts6 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat6)) $sel = ($news_cat6 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts6 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts7 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat7)) $sel = ($news_cat7 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts7 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts8 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat8)) $sel = ($news_cat8 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts8 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts9 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat9)) $sel = ($news_cat9 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts9 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts10 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat10)) $sel = ($news_cat10 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts10 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts11 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat11)) $sel = ($news_cat11 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts11 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts12 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat12)) $sel = ($news_cat12 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts12 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts13 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat13)) $sel = ($news_cat13 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts13 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts14 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat14)) $sel = ($news_cat14 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts14 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$visibility_opts = ""; $sel = "";
$user_groups = getusergroups();
while(list($key, $user_group) = each($user_groups)){
$sel = ($news_visibility == $user_group['0'] ? " selected='selected'" : "");
$visibility_opts .= "<option value='".$user_group['0']."'$sel>".$user_group['1']."</option>\n";
}
echo "<form name='inputform' method='post' action='".FUSION_SELF.$aidlink."' enctype='multipart/form-data' onsubmit='return ValidateForm(this);'>\n";
echo "<table cellpadding='0' cellspacing='0' class='center'>\n<tr>\n";
echo "<td width='100' class='tbl'>".$locale['422']."</td>\n";
echo "<td width='80%' class='tbl'><input type='text' name='news_subject' value='".$news_subject."' class='textbox' style='width: 250px' /></td>\n";
echo "</tr>\n<tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."2</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat2' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts2."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."3</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat3' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts3."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."4</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat4' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts4."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."5</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat5' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts5."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."6</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat6' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts6."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."7</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat7' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts7."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."8</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat8' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts8."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."9</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat9' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts9."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."10</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat10' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts10."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."11</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat11' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts11."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."12</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat12' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts12."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."13</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat13' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts13."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."14</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat14' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts14."</select></td></tr>\n";
echo "</tr>\n<tr>\n";
echo "<td class='tbl' valign='top'>".$locale['439'].":</td>\n<td class='tbl' valign='top'>";
if ($news_image != "" && $news_image_t1 != "") {
echo "<label><img src='".IMAGES_N_T.$news_image_t2."' alt='".$locale['439']."' /><br />\n";
echo "<input type='checkbox' name='del_image' value='y' /> ".$locale['421']."</label>\n";
echo "<input type='hidden' name='news_image' value='".$news_image."' />\n";
echo "<input type='hidden' name='news_image_t1' value='".$news_image_t1."' />\n";
echo "<input type='hidden' name='news_image_t2' value='".$news_image_t2."' />\n";
} else {
echo "<input type='file' name='news_image' class='textbox' style='width:250px;' /><br />\n";
echo sprintf($locale['440'], parsebytesize($settings['news_photo_max_b']))."\n";
}
echo "</td>\n</tr>\n<tr>\n";
echo "<td valign='top' width='100' class='tbl'>".$locale['425']."</td>\n";
echo "<td width='80%' class='tbl'><textarea name='body' cols='95' rows='10' class='textbox' style='width:98%'>".$body."</textarea></td>\n";
echo "</tr>\n";
if (!$settings['tinymce_enabled']) {
echo "<tr>\n<td class='tbl'></td>\n<td class='tbl'>\n";
echo display_html("inputform", "body", true, true, true, IMAGES_N);
echo "</td>\n</tr>\n";
}
echo "<tr>\n<td valign='top' width='100' class='tbl'>".$locale['426']."</td>\n";
echo "<td class='tbl'><textarea name='body2' cols='95' rows='10' class='textbox' style='width:98%'>".$body2."</textarea></td>\n";
echo "</tr>\n";
if ($settings['tinymce_enabled'] != 1) {
echo "<tr>\n<td class='tbl'></td>\n<td class='tbl'>\n";
echo display_html("inputform", "body2", true, true, true, IMAGES_N);
echo "</td>\n</tr>\n";
}
echo "<tr>\n";
echo "<td class='tbl'>".$locale['427']."</td>\n";
echo "<td class='tbl'><select name='news_start[mday]' class='textbox'>\n<option>--</option>\n";
for ($i=1;$i<=31;$i++) echo "<option".(isset($news_start['mday']) && $news_start['mday'] == $i ? " selected='selected'" : "").">$i</option>\n";
echo "</select> <select name='news_start[mon]' class='textbox'>\n<option>--</option>\n";
for ($i=1;$i<=12;$i++) echo "<option".(isset($news_start['mon']) && $news_start['mon'] == $i ? " selected='selected'" : "").">$i</option>\n";
echo "</select> <select name='news_start[year]' class='textbox'>\n<option>----</option>\n";
for ($i=(isset($news_start['year']) && $news_start['year'] != "----" ? $news_start['year'] : date('Y'));$i<=date("Y", strtotime('+10 years'));$i++) echo "<option".(isset($news_start['year']) && $news_start['year'] == $i ? " selected='selected'" : "").">$i</option>\n";
echo "</select> / <select name='news_start[hours]' class='textbox'>\n";
for ($i=0;$i<=24;$i++) echo "<option".(isset($news_start['hours']) && $news_start['hours'] == $i ? " selected='selected'" : "").">$i</option>\n";
echo "</select> : <select name='news_start[minutes]' class='textbox'>\n";
for ($i=0;$i<=60;$i++) echo "<option".(isset($news_start['minutes']) && $news_start['minutes'] == $i ? " selected='selected'" : "").">$i</option>\n";
echo "</select> : 00 ".$locale['429']."</td>\n";
echo "</tr>\n<tr>\n";
echo "<td class='tbl'>".$locale['428']."</td>\n";
echo "<td class='tbl'><select name='news_end[mday]' class='textbox'>\n<option>--</option>\n";
for ($i=1;$i<=31;$i++) echo "<option".(isset($news_end['mday']) && $news_end['mday'] == $i ? " selected='selected'" : "").">$i</option>\n";
echo "</select> <select name='news_end[mon]' class='textbox'>\n<option>--</option>\n";
for ($i=1;$i<=12;$i++) echo "<option".(isset($news_end['mon']) && $news_end['mon'] == $i ? " selected='selected'" : "").">$i</option>\n";
echo "</select> <select name='news_end[year]' class='textbox'>\n<option>----</option>\n";
for ($i=(isset($news_end['year']) && $news_end['year'] != "----" ? $news_end['year'] : date('Y'));$i<=date("Y", strtotime('+10 years'));$i++) echo "<option".(isset($news_end['year']) && $news_end['year'] == $i ? " selected='selected'" : "").">$i</option>\n";
echo "</select> / <select name='news_end[hours]' class='textbox'>\n";
for ($i=0;$i<=24;$i++) echo "<option".(isset($news_end['hours']) && $news_end['hours'] == $i ? " selected='selected'" : "").">$i</option>\n";
echo "</select> : <select name='news_end[minutes]' class='textbox'>\n";
for ($i=0;$i<=60;$i++) echo "<option".(isset($news_end['minutes']) && $news_end['minutes'] == $i ? " selected='selected'" : "").">$i</option>\n";
echo "</select> : 00 ".$locale['429']."</td>\n";
echo "</tr>\n<tr>\n";
echo "<td class='tbl'>".$locale['430']."</td>\n";
echo "<td class='tbl'><select name='news_visibility' class='textbox'>\n".$visibility_opts."</select></td>\n";
echo "</tr>\n<tr>\n";
echo "<td class='tbl'></td><td class='tbl'>\n";
echo "<label><input type='checkbox' name='news_draft' value='yes'".$news_draft." /> ".$locale['431']."</label><br />\n";
echo "<label><input type='checkbox' name='news_sticky' value='yes'".$news_sticky." /> ".$locale['432']."</label><br />\n";
if ($settings['tinymce_enabled'] != 1) {
echo "<label><input type='checkbox' name='line_breaks' value='yes'".$news_breaks." /> ".$locale['433']."</label><br />\n";
}
echo "<label><input type='checkbox' name='news_comments' value='yes' onclick='SetRatings();'".$news_comments." /> ".$locale['434']."</label>";
if ($settings['comments_enabled'] == "0") {
echo "<span style='color:red;font-weight:bold;margin-left:3px;'>*</span>";
}
echo "<br />\n";
echo "<label><input type='checkbox' name='news_ratings' value='yes'".$news_ratings." /> ".$locale['435']."</label>";
if ($settings['ratings_enabled'] == "0") {
echo "<span style='color:red;font-weight:bold;margin-left:3px;'>*</span>";
}
echo "</td>\n";
echo "</tr>\n";
if ($settings['comments_enabled'] == "0" || $settings['ratings_enabled'] == "0") {
$sys = "";
if ($settings['comments_enabled'] == "0" && $settings['ratings_enabled'] == "0") {
$sys = $locale['455'];
} elseif ($settings['comments_enabled'] == "0") {
$sys = $locale['453'];
} else {
$sys = $locale['454'];
}
echo "<tr>\n<td colspan='2' class='tbl1' style='font-weight:bold;text-align:left; color:black !important; background-color:#FFDBDB;'>";
echo "<span style='color:red;font-weight:bold;margin-right:5px;'>*</span>".sprintf($locale['452'], $sys);
echo "</td>\n</tr>";
}
echo "<tr>\n";
echo "<td align='center' colspan='2' class='tbl'><br />\n";
if ((isset($_POST['edit']) && (isset($_POST['news_id']) && isnum($_POST['news_id']))) || (isset($_POST['preview']) && (isset($_POST['news_id']) && isnum($_POST['news_id']))) || (isset($_GET['news_id']) && isnum($_GET['news_id']))) {
echo "<input type='hidden' name='news_id' value='".(isset($_POST['news_id']) ? $_POST['news_id'] : $_GET['news_id'])."' />\n";
}
echo "<input type='submit' name='preview' value='".$locale['436']."' class='button' />\n";
echo "<input type='submit' name='save' value='".$locale['437']."' class='button' /></td>\n";
echo "</tr>\n</table>\n</form>\n";
closetable();
echo "<script type='text/javascript'>\n"."function DeleteNews() {\n";
echo "return confirm('".$locale['451']."');\n}\n";
echo "function ValidateForm(frm) {\n"."if(frm.news_subject.value=='') {\n";
echo "alert('".$locale['450']."');\n"."return false;\n}\n}\n";
echo "function SetRatings() {\n"."if (inputform.news_comments.checked == false) {\n";
echo "inputform.news_ratings.checked = false;\n"."inputform.news_ratings.disabled = true;\n";
echo "} else {\n"."inputform.news_ratings.disabled = false;\n}\n}\n</script>\n";
}
require_once THEMES."templates/footer.php";
?>
<?php
/*-------------------------------------------------------+
| PHP-Fusion Content Management System
| Copyright (C) 2002 - 2011 Nick Jones
| http://www.php-fusion.co.uk/
+--------------------------------------------------------+
| Filename: news.php
| Author: Nick Jones (Digitanium)
+--------------------------------------------------------+
| This program is released as free software under the
| Affero GPL license. You can redistribute it and/or
| modify it under the terms of this license which you
| can read by viewing the included agpl.txt or online
| at www.gnu.org/licenses/agpl.html. Removal of this
| copyright header is strictly prohibited without
| written permission from the original author(s).
+--------------------------------------------------------*/
require_once "../maincore.php";
if (!checkrights("N") || !defined("iAUTH") || !isset($_GET['aid']) || $_GET['aid'] != iAUTH) { redirect("../index.php"); }
require_once THEMES."templates/admin_header_mce.php";
include LOCALE.LOCALESET."admin/news.php";
if ($settings['tinymce_enabled']) {
echo "<script language='javascript' type='text/javascript'>advanced();</script>\n";
} else {
require_once INCLUDES."html_buttons_include.php";
}
if (isset($_GET['error']) && isnum($_GET['error'])) {
if ($_GET['error'] == 1) {
$message = $locale['413'];
} elseif ($_GET['error'] == 2) {
$message = sprintf($locale['414'], parsebytesize($settings['news_photo_max_b']));
} elseif ($_GET['error'] == 3) {
$message = $locale['415'];
} elseif ($_GET['error'] == 4) {
$message = sprintf($locale['416'], $settings['news_photo_max_w'], $settings['news_photo_max_h']);
}
if ($message) { echo "<div id='close-message'><div class='admin-message'>".$message."</div></div>\n"; }
}
if (isset($_GET['status'])) {
if ($_GET['status'] == "sn") {
$message = $locale['410'];
} elseif ($_GET['status'] == "su") {
$message = $locale['411'];
} elseif ($_GET['status'] == "del") {
$message = $locale['412'];
}
if ($message) { echo "<div id='close-message'><div class='admin-message'>".$message."</div></div>\n"; }
}
if (isset($_POST['save'])) {
$error = "";
$news_subject = stripinput($_POST['news_subject']);
$news_cat = isnum($_POST['news_cat']) ? $_POST['news_cat'] : "0";
$news_cat2 = isnum($_POST['news_cat2']) ? $_POST['news_cat2'] : "0";
$news_cat3 = isnum($_POST['news_cat3']) ? $_POST['news_cat3'] : "0";
$news_cat4 = isnum($_POST['news_cat4']) ? $_POST['news_cat4'] : "0";
$news_cat5 = isnum($_POST['news_cat5']) ? $_POST['news_cat5'] : "0";
$news_cat6 = isnum($_POST['news_cat6']) ? $_POST['news_cat6'] : "0";
$news_cat7 = isnum($_POST['news_cat7']) ? $_POST['news_cat7'] : "0";
$news_cat8 = isnum($_POST['news_cat8']) ? $_POST['news_cat8'] : "0";
$news_cat9 = isnum($_POST['news_cat9']) ? $_POST['news_cat9'] : "0";
$news_cat10 = isnum($_POST['news_cat10']) ? $_POST['news_cat10'] : "0";
$news_cat11 = isnum($_POST['news_cat11']) ? $_POST['news_cat11'] : "0";
$news_cat12 = isnum($_POST['news_cat12']) ? $_POST['news_cat12'] : "0";
$news_cat13 = isnum($_POST['news_cat13']) ? $_POST['news_cat13'] : "0";
$news_cat14 = isnum($_POST['news_cat14']) ? $_POST['news_cat14'] : "0";
if (isset($_FILES['news_image']) && is_uploaded_file($_FILES['news_image']['tmp_name'])) {
require_once INCLUDES."photo_functions_include.php";
$image = $_FILES['news_image'];
$image_name = stripfilename(str_replace(" ", "_", strtolower(substr($image['name'], 0, strrpos($image['name'], ".")))));
$image_ext = strtolower(strrchr($image['name'],"."));
if ($image_ext == ".gif") { $filetype = 1;
} elseif ($image_ext == ".jpg") { $filetype = 2;
} elseif ($image_ext == ".png") { $filetype = 3;
} else { $filetype = false; }
if (!preg_match("/^[-0-9A-Z_\.\[\]]+$/i", $image_name)) {
$error = 1;
} elseif ($image['size'] > $settings['news_photo_max_b']){
$error = 2;
} elseif (!$filetype) {
$error = 3;
} else {
$image_t1 = image_exists(IMAGES_N_T, $image_name."_t1".$image_ext);
$image_t2 = image_exists(IMAGES_N_T, $image_name."_t2".$image_ext);
$image_full = image_exists(IMAGES_N, $image_name.$image_ext);
move_uploaded_file($_FILES['news_image']['tmp_name'], IMAGES_N.$image_full);
if (function_exists("chmod")) { chmod(IMAGES_N.$image_full, 0644); }
$imagefile = @getimagesize(IMAGES_N.$image_full);
if ($imagefile[0] > $settings['news_photo_max_w'] || $imagefile[1] > $settings['news_photo_max_h']) {
$error = 4;
unlink(IMAGES_N.$image_full);
} else {
createthumbnail($filetype, IMAGES_N.$image_full, IMAGES_N_T.$image_t1, $settings['news_photo_w'], $settings['news_photo_h']);
if ($settings['news_thumb_ratio'] == 0) {
createthumbnail($filetype, IMAGES_N.$image_full, IMAGES_N_T.$image_t2, $settings['news_thumb_w'], $settings['news_thumb_h']);
} else {
createsquarethumbnail($filetype, IMAGES_N.$image_full, IMAGES_N_T.$image_t2, $settings['news_thumb_w']);
}
}
}
if (!$error) {
$news_image = $image_full;
$news_image_t1 = $image_t1;
$news_image_t2 = $image_t2;
} else {
$news_image = "";
$news_image_t1 = "";
$news_image_t2 = "";
}
} else {
$news_image = (isset($_POST['news_image']) ? $_POST['news_image'] : "");
$news_image_t1 = (isset($_POST['news_image_t1']) ? $_POST['news_image_t1'] : "");
$news_image_t2 = (isset($_POST['news_image_t2']) ? $_POST['news_image_t2'] : "");
}
$body = addslash($_POST['body']);
if ($_POST['body2']) {
$body2 = addslash(preg_replace("(^<p>\s</p>$)", "", $_POST['body2']));
} else {
$body2 = "";
}
$news_start_date = 0; $news_end_date = 0;
if ($_POST['news_start']['mday']!="--" && $_POST['news_start']['mon']!="--" && $_POST['news_start']['year']!="----") {
$news_start_date = mktime($_POST['news_start']['hours'],$_POST['news_start']['minutes'],0,$_POST['news_start']['mon'],$_POST['news_start']['mday'],$_POST['news_start']['year']);
}
if ($_POST['news_end']['mday']!="--" && $_POST['news_end']['mon']!="--" && $_POST['news_end']['year']!="----") {
$news_end_date = mktime($_POST['news_end']['hours'],$_POST['news_end']['minutes'],0,$_POST['news_end']['mon'],$_POST['news_end']['mday'],$_POST['news_end']['year']);
}
$news_visibility = isnum($_POST['news_visibility']) ? $_POST['news_visibility'] : "0";
$news_draft = isset($_POST['news_draft']) ? "1" : "0";
$news_sticky = isset($_POST['news_sticky']) ? "1" : "0";
if ($settings['tinymce_enabled'] != 1) { $news_breaks = isset($_POST['line_breaks']) ? "y" : "n"; } else { $news_breaks = "n"; }
$news_comments = isset($_POST['news_comments']) ? "1" : "0";
$news_ratings = isset($_POST['news_ratings']) ? "1" : "0";
if (isset($_POST['news_id']) && isnum($_POST['news_id'])) {
$result = dbquery("SELECT news_image, news_image_t1, news_image_t2 FROM ".DB_NEWS." WHERE news_id='".$_POST['news_id']."' LIMIT 1");
if (dbrows($result)) {
$data = dbarray($result);
if ($news_sticky == "1") { $result = dbquery("UPDATE ".DB_NEWS." SET news_sticky='0' WHERE news_sticky='1'"); }
if (isset($_POST['del_image'])) {
if (!empty($data['news_image']) && file_exists(IMAGES_N.$data['news_image'])) { unlink(IMAGES_N.$data['news_image']); }
if (!empty($data['news_image_t1']) && file_exists(IMAGES_N_T.$data['news_image_t1'])) { unlink(IMAGES_N_T.$data['news_image_t1']); }
if (!empty($data['news_image_t2']) && file_exists(IMAGES_N_T.$data['news_image_t2'])) { unlink(IMAGES_N_T.$data['news_image_t2']); }
$news_image = "";
$news_image_t1 = "";
$news_image_t2 = "";
}
$result = dbquery("UPDATE ".DB_NEWS." SET news_subject='$news_subject', news_cat='$news_cat', news_cat2='$news_cat2', news_cat3='$news_cat3', news_cat4='$news_cat4', news_cat5='$news_cat5', news_cat6='$news_cat6', news_cat7='$news_cat7', news_cat8='$news_cat8', news_cat9='$news_cat9', news_cat10='$news_cat10', news_cat11='$news_cat11', news_cat12='$news_cat12', news_cat13='$news_cat13', news_cat14='$news_cat14', news_end='$news_end_date', news_image='$news_image', news_news='$body', news_extended='$body2', news_breaks='$news_breaks',".($news_start_date != 0 ? " news_datestamp='$news_start_date'," : "")." news_start='$news_start_date', news_image_t1='$news_image_t1', news_image_t2='$news_image_t2', news_visibility='$news_visibility', news_draft='$news_draft', news_sticky='$news_sticky', news_allow_comments='$news_comments', news_allow_ratings='$news_ratings' WHERE news_id='".$_POST['news_id']."'");
redirect(FUSION_SELF.$aidlink."&status=su".($error ? "&error=$error" : ""));
} else {
redirect(FUSION_SELF.$aidlink);
}
} else {
if ($news_sticky == "1") { $result = dbquery("UPDATE ".DB_NEWS." SET news_sticky='0' WHERE news_sticky='1'"); }
$result = dbquery("INSERT INTO ".DB_NEWS." (news_subject, news_cat, news_cat2, news_cat3, news_cat4, news_cat5, news_cat6, news_cat7, news_cat8, news_cat9, news_cat10, news_cat11, news_cat12, news_cat13, news_cat14, news_news, news_extended, news_breaks, news_name, news_datestamp, news_start, news_end, news_image, news_image_t1, news_image_t2, news_visibility, news_draft, news_sticky, news_reads, news_allow_comments, news_allow_ratings) VALUES ('$news_subject', '$news_cat', '$body', '$body2', '$news_breaks', '".$userdata['user_id']."', '".($news_start_date != 0 ? $news_start_date : time())."', '$news_start_date', '$news_end_date', '$news_image', '$news_image_t1', '$news_image_t2', '$news_visibility', '$news_draft', '$news_sticky', '0', '$news_comments', '$news_ratings')");
redirect(FUSION_SELF.$aidlink."&status=sn".($error ? "&error=$error" : ""));
}
} else if (isset($_POST['delete']) && (isset($_POST['news_id']) && isnum($_POST['news_id']))) {
$result = dbquery("SELECT news_image, news_image_t1, news_image_t2 FROM ".DB_NEWS." WHERE news_id='".$_POST['news_id']."' LIMIT 1");
if (dbrows($result)) {
$data = dbarray($result);
if (!empty($data['news_image']) && file_exists(IMAGES_N.$data['news_image'])) { unlink(IMAGES_N.$data['news_image']); }
if (!empty($data['news_image_t1']) && file_exists(IMAGES_N_T.$data['news_image_t1'])) { unlink(IMAGES_N_T.$data['news_image_t1']); }
if (!empty($data['news_image_t2']) && file_exists(IMAGES_N_T.$data['news_image_t2'])) { unlink(IMAGES_N_T.$data['news_image_t2']); }
$result = dbquery("DELETE FROM ".DB_NEWS." WHERE news_id='".$_POST['news_id']."'");
$result = dbquery("DELETE FROM ".DB_COMMENTS." WHERE comment_item_id='".$_POST['news_id']."' and comment_type='N'");
$result = dbquery("DELETE FROM ".DB_RATINGS." WHERE rating_item_id='".$_POST['news_id']."' and rating_type='N'");
redirect(FUSION_SELF.$aidlink."&status=del");
} else {
redirect(FUSION_SELF.$aidlink);
}
} else {
if (isset($_POST['preview'])) {
$news_subject = stripinput($_POST['news_subject']);
$news_cat = isnum($_POST['news_cat']) ? $_POST['news_cat'] : "1";
$news_cat2 = isnum($_POST['news_cat2']) ? $_POST['news_cat2'] : "1";
$news_cat3 = isnum($_POST['news_cat3']) ? $_POST['news_cat3'] : "1";
$news_cat4 = isnum($_POST['news_cat4']) ? $_POST['news_cat4'] : "1";
$news_cat5 = isnum($_POST['news_cat5']) ? $_POST['news_cat5'] : "1";
$news_cat6 = isnum($_POST['news_cat6']) ? $_POST['news_cat6'] : "1";
$news_cat7 = isnum($_POST['news_cat7']) ? $_POST['news_cat7'] : "1";
$news_cat8 = isnum($_POST['news_cat8']) ? $_POST['news_cat8'] : "1";
$news_cat9 = isnum($_POST['news_cat9']) ? $_POST['news_cat9'] : "1";
$news_cat10 = isnum($_POST['news_cat10']) ? $_POST['news_cat10'] : "1";
$news_cat11 = isnum($_POST['news_cat11']) ? $_POST['news_cat11'] : "1";
$news_cat12 = isnum($_POST['news_cat12']) ? $_POST['news_cat12'] : "1";
$news_cat13 = isnum($_POST['news_cat13']) ? $_POST['news_cat13'] : "1";
$news_cat14 = isnum($_POST['news_cat14']) ? $_POST['news_cat14'] : "1";
$body = phpentities(stripslash($_POST['body']));
$bodypreview = str_replace("src='".str_replace("../", "", IMAGES_N), "src='".IMAGES_N, stripslash($_POST['body']));
if ($_POST['body2']) {
$body2 = phpentities(stripslash($_POST['body2']));
$body2preview = str_replace("src='".str_replace("../", "", IMAGES_N), "src='".IMAGES_N, stripslash($_POST['body2']));
} else {
$body2 = "";
}
if (isset($_POST['line_breaks'])) {
$news_breaks = " checked='checked'";
$bodypreview = nl2br($bodypreview);
if ($body2) { $body2preview = nl2br($body2preview); }
} else {
$news_breaks = "";
}
$news_start = array(
"mday" => isnum($_POST['news_start']['mday']) ? $_POST['news_start']['mday'] : "--",
"mon" => isnum($_POST['news_start']['mon']) ? $_POST['news_start']['mon'] : "--",
"year" => isnum($_POST['news_start']['year']) ? $_POST['news_start']['year'] : "----",
"hours" => isnum($_POST['news_start']['hours']) ? $_POST['news_start']['hours'] : "0",
"minutes" => isnum($_POST['news_start']['minutes']) ? $_POST['news_start']['minutes'] : "0",
);
$news_end = array(
"mday" => isnum($_POST['news_end']['mday']) ? $_POST['news_end']['mday'] : "--",
"mon" => isnum($_POST['news_end']['mon']) ? $_POST['news_end']['mon'] : "--",
"year" => isnum($_POST['news_end']['year']) ? $_POST['news_end']['year'] : "----",
"hours" => isnum($_POST['news_end']['hours']) ? $_POST['news_end']['hours'] : "0",
"minutes" => isnum($_POST['news_end']['minutes']) ? $_POST['news_end']['minutes'] : "0",
);
$news_image = (isset($_POST['news_image']) ? $_POST['news_image'] : "");
$news_image_t1 = (isset($_POST['news_image_t1']) ? $_POST['news_image_t1'] : "");
$news_image_t2 = (isset($_POST['news_image_t2']) ? $_POST['news_image_t2'] : "");
$news_visibility = isnum($_POST['news_visibility']) ? $_POST['news_visibility'] : "0";
$news_draft = isset($_POST['news_draft']) ? " checked='checked'" : "";
$news_sticky = isset($_POST['news_sticky']) ? " checked='checked'" : "";
$news_comments = isset($_POST['news_comments']) ? " checked='checked'" : "";
$news_ratings = isset($_POST['news_ratings']) ? " checked='checked'" : "";
opentable($news_subject);
echo "$bodypreview\n";
closetable();
if (isset($body2preview)) {
opentable($news_subject);
echo "$body2preview\n";
closetable();
}
}
$result = dbquery("SELECT news_id, news_subject, news_draft FROM ".DB_NEWS." ORDER BY news_draft DESC, news_datestamp DESC");
if (dbrows($result) != 0) {
$editlist = ""; $sel = "";
while ($data = dbarray($result)) {
if ((isset($_POST['news_id']) && isnum($_POST['news_id'])) || (isset($_GET['news_id']) && isnum($_GET['news_id']))) {
$news_id = isset($_POST['news_id']) ? $_POST['news_id'] : $_GET['news_id'];
$sel = ($news_id == $data['news_id'] ? " selected='selected'" : "");
}
$editlist .= "<option value='".$data['news_id']."'$sel>".($data['news_draft'] ? $locale['438']." " : "").$data['news_subject']."</option>\n";
}
opentable($locale['400']);
echo "<div style='text-align:center'>\n<form name='selectform' method='post' action='".FUSION_SELF.$aidlink."&action=edit'>\n";
echo "<select name='news_id' class='textbox' style='width:250px'>\n".$editlist."</select>\n";
echo "<input type='submit' name='edit' value='".$locale['420']."' class='button' />\n";
echo "<input type='submit' name='delete' value='".$locale['421']."' onclick='return DeleteNews();' class='button' />\n";
echo "</form>\n</div>\n";
closetable();
}
if ((isset($_GET['action']) && $_GET['action'] == "edit") && (isset($_POST['news_id']) && isnum($_POST['news_id'])) || (isset($_GET['news_id']) && isnum($_GET['news_id']))) {
$result = dbquery("SELECT news_subject, news_cat, news_cat2, news_cat3, news_cat4, news_cat5, news_cat6, news_cat7, news_cat8, news_cat9, news_cat10, news_cat11, news_cat12, news_cat13, news_cat14, news_news, news_extended, news_start, news_end, news_image, news_image_t1, news_image_t2, news_visibility, news_draft, news_sticky, news_breaks, news_allow_comments, news_allow_ratings FROM ".DB_NEWS." WHERE news_id='".(isset($_POST['news_id']) ? $_POST['news_id'] : $_GET['news_id'])."' LIMIT 1");
if (dbrows($result)) {
$data = dbarray($result);
$news_subject = $data['news_subject'];
$news_cat = $data['news_cat'];
$news_cat2 = $data['news_cat2'];
$news_cat3 = $data['news_cat3'];
$news_cat4 = $data['news_cat4'];
$news_cat5 = $data['news_cat5'];
$news_cat6 = $data['news_cat6'];
$news_cat7 = $data['news_cat7'];
$news_cat8 = $data['news_cat8'];
$news_cat9 = $data['news_cat9'];
$news_cat10 = $data['news_cat10'];
$news_cat11 = $data['news_cat11'];
$news_cat12 = $data['news_cat12'];
$news_cat13 = $data['news_cat13'];
$news_cat14 = $data['news_cat14'];
$body = phpentities(stripslashes($data['news_news']));
$body2 = phpentities(stripslashes($data['news_extended']));
if ($data['news_start'] > 0) $news_start = getdate($data['news_start']);
if ($data['news_end'] > 0) $news_end = getdate($data['news_end']);
$news_image = $data['news_image'];
$news_image_t1 = $data['news_image_t1'];
$news_image_t2 = $data['news_image_t2'];
$news_visibility = $data['news_visibility'];
$news_draft = $data['news_draft'] == "1" ? " checked='checked'" : "";
$news_sticky = $data['news_sticky'] == "1" ? " checked='checked'" : "";
$news_breaks = $data['news_breaks'] == "y" ? " checked='checked'" : "";
$news_comments = $data['news_allow_comments'] == "1" ? " checked='checked'" : "";
$news_ratings = $data['news_allow_ratings'] == "1" ? " checked='checked'" : "";
} else {
redirect(FUSION_SELF.$aidlink);
}
}
if ((isset($_POST['news_id']) && isnum($_POST['news_id'])) || (isset($_GET['news_id']) && isnum($_GET['news_id']))) {
opentable($locale['402']);
} else {
if (!isset($_POST['preview'])) {
$news_subject = "";
$news_cat = "1";
$news_cat2 = "1";
$news_cat3 = "1";
$news_cat4 = "1";
$news_cat5 = "1";
$news_cat6 = "1";
$news_cat7 = "1";
$news_cat8 = "1";
$news_cat9 = "1";
$news_cat10 = "1";
$news_cat11 = "1";
$news_cat12 = "1";
$news_cat13 = "1";
$news_cat14 = "1";
$body = "";
$body2 = "";
$news_image = "";
$news_image_t1 = "";
$news_image_t2 = "";
$news_visibility = 1;
$news_draft = "";
$news_sticky = "";
$news_breaks = " checked='checked'";
$news_comments = " checked='checked'";
$news_ratings = " checked='checked'";
}
opentable($locale['401']);
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat)) $sel = ($news_cat == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts2 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat2)) $sel = ($news_cat2 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts2 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts3 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat3)) $sel = ($news_cat3 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts3 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts4 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat4)) $sel = ($news_cat4 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts4 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts5 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat5)) $sel = ($news_cat5 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts5 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts6 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat6)) $sel = ($news_cat6 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts6 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts7 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat7)) $sel = ($news_cat7 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts7 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts8 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat8)) $sel = ($news_cat8 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts8 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts9 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat9)) $sel = ($news_cat9 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts9 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts10 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat10)) $sel = ($news_cat10 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts10 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts11 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat11)) $sel = ($news_cat11 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts11 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts12 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat12)) $sel = ($news_cat12 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts12 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts13 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat13)) $sel = ($news_cat13 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts13 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$result = dbquery("SELECT news_cat_id, news_cat_name FROM ".DB_NEWS_CATS." ORDER BY news_cat_name");
$news_cat_opts14 = ""; $sel = "";
if (dbrows($result)) {
while ($data = dbarray($result)) {
if (isset($news_cat14)) $sel = ($news_cat14 == $data['news_cat_id'] ? " selected='selected'" : "");
$news_cat_opts14 .= "<option value='".$data['news_cat_id']."'$sel>".$data['news_cat_name']."</option>\n";
}
}
$visibility_opts = ""; $sel = "";
$user_groups = getusergroups();
while(list($key, $user_group) = each($user_groups)){
$sel = ($news_visibility == $user_group['0'] ? " selected='selected'" : "");
$visibility_opts .= "<option value='".$user_group['0']."'$sel>".$user_group['1']."</option>\n";
}
echo "<form name='inputform' method='post' action='".FUSION_SELF.$aidlink."' enctype='multipart/form-data' onsubmit='return ValidateForm(this);'>\n";
echo "<table cellpadding='0' cellspacing='0' class='center'>\n<tr>\n";
echo "<td width='100' class='tbl'>".$locale['422']."</td>\n";
echo "<td width='80%' class='tbl'><input type='text' name='news_subject' value='".$news_subject."' class='textbox' style='width: 250px' /></td>\n";
echo "</tr>\n<tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."2</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat2' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts2."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."3</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat3' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts3."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."4</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat4' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts4."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."5</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat5' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts5."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."6</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat6' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts6."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."7</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat7' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts7."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."8</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat8' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts8."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."9</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat9' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts9."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."10</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat10' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts10."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."11</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat11' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts11."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."12</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat12' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts12."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."13</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat13' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts13."</select></td></tr>\n";
echo "<tr><td width='100' class='tbl'>".$locale['423']."14</td>\n";
echo "<td width='80%' class='tbl'><select name='news_cat14' class='textbox'>\n";
echo "<option value='0'>".$locale['424']."</option>\n".$news_cat_opts14."</select></td></tr>\n";
echo "</tr>\n<tr>\n";
echo "<td class='tbl' valign='top'>".$locale['439'].":</td>\n<td class='tbl' valign='top'>";
if ($news_image != "" && $news_image_t1 != "") {
echo "<label><img src='".IMAGES_N_T.$news_image_t2."' alt='".$locale['439']."' /><br />\n";
echo "<input type='checkbox' name='del_image' value='y' /> ".$locale['421']."</label>\n";
echo "<input type='hidden' name='news_image' value='".$news_image."' />\n";
echo "<input type='hidden' name='news_image_t1' value='".$news_image_t1."' />\n";
echo "<input type='hidden' name='news_image_t2' value='".$news_image_t2."' />\n";
} else {
echo "<input type='file' name='news_image' class='textbox' style='width:250px;' /><br />\n";
echo sprintf($locale['440'], parsebytesize($settings['news_photo_max_b']))."\n";
}
echo "</td>\n</tr>\n<tr>\n";
echo "<td valign='top' width='100' class='tbl'>".$locale['425']."</td>\n";
echo "<td width='80%' class='tbl'><textarea name='body' cols='95' rows='10' class='textbox' style='width:98%'>".$body."</textarea></td>\n";
echo "</tr>\n";
if (!$settings['tinymce_enabled']) {
echo "<tr>\n<td class='tbl'></td>\n<td class='tbl'>\n";
echo display_html("inputform", "body", true, true, true, IMAGES_N);
echo "</td>\n</tr>\n";
}
echo "<tr>\n<td valign='top' width='100' class='tbl'>".$locale['426']."</td>\n";
echo "<td class='tbl'><textarea name='body2' cols='95' rows='10' class='textbox' style='width:98%'>".$body2."</textarea></td>\n";
echo "</tr>\n";
if ($settings['tinymce_enabled'] != 1) {
echo "<tr>\n<td class='tbl'></td>\n<td class='tbl'>\n";
echo display_html("inputform", "body2", true, true, true, IMAGES_N);
echo "</td>\n</tr>\n";
}
echo "<tr>\n";
echo "<td class='tbl'>".$locale['427']."</td>\n";
echo "<td class='tbl'><select name='news_start[mday]' class='textbox'>\n<option>--</option>\n";
for ($i=1;$i<=31;$i++) echo "<option".(isset($news_start['mday']) && $news_start['mday'] == $i ? " selected='selected'" : "").">$i</option>\n";
echo "</select> <select name='news_start[mon]' class='textbox'>\n<option>--</option>\n";
for ($i=1;$i<=12;$i++) echo "<option".(isset($news_start['mon']) && $news_start['mon'] == $i ? " selected='selected'" : "").">$i</option>\n";
echo "</select> <select name='news_start[year]' class='textbox'>\n<option>----</option>\n";
for ($i=(isset($news_start['year']) && $news_start['year'] != "----" ? $news_start['year'] : date('Y'));$i<=date("Y", strtotime('+10 years'));$i++) echo "<option".(isset($news_start['year']) && $news_start['year'] == $i ? " selected='selected'" : "").">$i</option>\n";
echo "</select> / <select name='news_start[hours]' class='textbox'>\n";
for ($i=0;$i<=24;$i++) echo "<option".(isset($news_start['hours']) && $news_start['hours'] == $i ? " selected='selected'" : "").">$i</option>\n";
echo "</select> : <select name='news_start[minutes]' class='textbox'>\n";
for ($i=0;$i<=60;$i++) echo "<option".(isset($news_start['minutes']) && $news_start['minutes'] == $i ? " selected='selected'" : "").">$i</option>\n";
echo "</select> : 00 ".$locale['429']."</td>\n";
echo "</tr>\n<tr>\n";
echo "<td class='tbl'>".$locale['428']."</td>\n";
echo "<td class='tbl'><select name='news_end[mday]' class='textbox'>\n<option>--</option>\n";
for ($i=1;$i<=31;$i++) echo "<option".(isset($news_end['mday']) && $news_end['mday'] == $i ? " selected='selected'" : "").">$i</option>\n";
echo "</select> <select name='news_end[mon]' class='textbox'>\n<option>--</option>\n";
for ($i=1;$i<=12;$i++) echo "<option".(isset($news_end['mon']) && $news_end['mon'] == $i ? " selected='selected'" : "").">$i</option>\n";
echo "</select> <select name='news_end[year]' class='textbox'>\n<option>----</option>\n";
for ($i=(isset($news_end['year']) && $news_end['year'] != "----" ? $news_end['year'] : date('Y'));$i<=date("Y", strtotime('+10 years'));$i++) echo "<option".(isset($news_end['year']) && $news_end['year'] == $i ? " selected='selected'" : "").">$i</option>\n";
echo "</select> / <select name='news_end[hours]' class='textbox'>\n";
for ($i=0;$i<=24;$i++) echo "<option".(isset($news_end['hours']) && $news_end['hours'] == $i ? " selected='selected'" : "").">$i</option>\n";
echo "</select> : <select name='news_end[minutes]' class='textbox'>\n";
for ($i=0;$i<=60;$i++) echo "<option".(isset($news_end['minutes']) && $news_end['minutes'] == $i ? " selected='selected'" : "").">$i</option>\n";
echo "</select> : 00 ".$locale['429']."</td>\n";
echo "</tr>\n<tr>\n";
echo "<td class='tbl'>".$locale['430']."</td>\n";
echo "<td class='tbl'><select name='news_visibility' class='textbox'>\n".$visibility_opts."</select></td>\n";
echo "</tr>\n<tr>\n";
echo "<td class='tbl'></td><td class='tbl'>\n";
echo "<label><input type='checkbox' name='news_draft' value='yes'".$news_draft." /> ".$locale['431']."</label><br />\n";
echo "<label><input type='checkbox' name='news_sticky' value='yes'".$news_sticky." /> ".$locale['432']."</label><br />\n";
if ($settings['tinymce_enabled'] != 1) {
echo "<label><input type='checkbox' name='line_breaks' value='yes'".$news_breaks." /> ".$locale['433']."</label><br />\n";
}
echo "<label><input type='checkbox' name='news_comments' value='yes' onclick='SetRatings();'".$news_comments." /> ".$locale['434']."</label>";
if ($settings['comments_enabled'] == "0") {
echo "<span style='color:red;font-weight:bold;margin-left:3px;'>*</span>";
}
echo "<br />\n";
echo "<label><input type='checkbox' name='news_ratings' value='yes'".$news_ratings." /> ".$locale['435']."</label>";
if ($settings['ratings_enabled'] == "0") {
echo "<span style='color:red;font-weight:bold;margin-left:3px;'>*</span>";
}
echo "</td>\n";
echo "</tr>\n";
if ($settings['comments_enabled'] == "0" || $settings['ratings_enabled'] == "0") {
$sys = "";
if ($settings['comments_enabled'] == "0" && $settings['ratings_enabled'] == "0") {
$sys = $locale['455'];
} elseif ($settings['comments_enabled'] == "0") {
$sys = $locale['453'];
} else {
$sys = $locale['454'];
}
echo "<tr>\n<td colspan='2' class='tbl1' style='font-weight:bold;text-align:left; color:black !important; background-color:#FFDBDB;'>";
echo "<span style='color:red;font-weight:bold;margin-right:5px;'>*</span>".sprintf($locale['452'], $sys);
echo "</td>\n</tr>";
}
echo "<tr>\n";
echo "<td align='center' colspan='2' class='tbl'><br />\n";
if ((isset($_POST['edit']) && (isset($_POST['news_id']) && isnum($_POST['news_id']))) || (isset($_POST['preview']) && (isset($_POST['news_id']) && isnum($_POST['news_id']))) || (isset($_GET['news_id']) && isnum($_GET['news_id']))) {
echo "<input type='hidden' name='news_id' value='".(isset($_POST['news_id']) ? $_POST['news_id'] : $_GET['news_id'])."' />\n";
}
echo "<input type='submit' name='preview' value='".$locale['436']."' class='button' />\n";
echo "<input type='submit' name='save' value='".$locale['437']."' class='button' /></td>\n";
echo "</tr>\n</table>\n</form>\n";
closetable();
echo "<script type='text/javascript'>\n"."function DeleteNews() {\n";
echo "return confirm('".$locale['451']."');\n}\n";
echo "function ValidateForm(frm) {\n"."if(frm.news_subject.value=='') {\n";
echo "alert('".$locale['450']."');\n"."return false;\n}\n}\n";
echo "function SetRatings() {\n"."if (inputform.news_comments.checked == false) {\n";
echo "inputform.news_ratings.checked = false;\n"."inputform.news_ratings.disabled = true;\n";
echo "} else {\n"."inputform.news_ratings.disabled = false;\n}\n}\n</script>\n";
}
require_once THEMES."templates/footer.php";
?>