150 lines
5.0 KiB
PHP
150 lines
5.0 KiB
PHP
<?php
|
|
|
|
// Pandora FMS - http://pandorafms.com
|
|
// ==================================================
|
|
// Copyright (c) 2005-2009 Artica Soluciones Tecnologicas
|
|
// Please see http://pandorafms.org for full contribution list
|
|
|
|
// This program is free software; you can redistribute it and/or
|
|
// modify it under the terms of the GNU General Public License
|
|
// as published by the Free Software Foundation for version 2.
|
|
// This program is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU General Public License for more details.
|
|
// Load global vars
|
|
require_once ("include/config.php");
|
|
|
|
check_login ();
|
|
|
|
if (! give_acl ($config['id_user'], 0, "PM")) {
|
|
audit_db ($config['id_user'], $REMOTE_ADDR, "ACL Violation",
|
|
"Trying to access Link Management");
|
|
require ("general/noaccess.php");
|
|
exit;
|
|
}
|
|
|
|
if (isset ($_POST["create"])) { // If create
|
|
$subject = get_parameter ("subject");
|
|
$text = get_parameter ("text");
|
|
|
|
$sql = sprintf ("INSERT INTO tnews (subject, text, author, timestamp) VALUES ('%s', '%s', '%s', NOW()) ", $subject, $text, $config["id_user"]);
|
|
$id_link = process_sql ($sql, "insert_id");
|
|
|
|
print_result_message ($id_link,
|
|
__('Successfully created'),
|
|
__('Could not be created'));
|
|
}
|
|
|
|
if (isset ($_POST["update"])) { // if update
|
|
$id_news = (int) get_parameter ("id_news", 0);
|
|
$subject = get_parameter ("subject");
|
|
$text = get_parameter ("text");
|
|
|
|
$sql = sprintf ("UPDATE tnews SET subject = '%s', text ='%s', timestamp = NOW() WHERE id_news = %d", $subject, $text, $id_news);
|
|
|
|
$result = process_sql ($sql);
|
|
|
|
print_result_message ($result,
|
|
__('Successfully updated'),
|
|
__('Not updated. Error updating data'));
|
|
}
|
|
|
|
if (isset ($_GET["borrar"])) { // if delete
|
|
$id_news = (int) get_parameter ("borrar", 0);
|
|
|
|
$result = process_sql_delete ('tnews', array ('id_news' => $id_news));
|
|
|
|
print_result_message ($result,
|
|
__('Successfully deleted'),
|
|
__('Could not be deleted'));
|
|
}
|
|
|
|
// Main form view for Links edit
|
|
if ((isset ($_GET["form_add"])) || (isset ($_GET["form_edit"]))) {
|
|
if (isset($_GET["form_edit"])) {
|
|
$creation_mode = 0;
|
|
$id_news = (int) get_parameter ("id_news", 0);
|
|
|
|
$result = get_db_row ("tnews", "id_news", $id_news);
|
|
|
|
if ($result !== false) {
|
|
$subject = $result["subject"];
|
|
$text = $result["text"];
|
|
$author = $result["author"];
|
|
$timestamp = $result["timestamp"];
|
|
} else {
|
|
echo "<h3 class='error'>".__('Name error')."</h3>";
|
|
}
|
|
} else { // form_add
|
|
$creation_mode = 1;
|
|
$text = "";
|
|
$subject = "";
|
|
$author = $config['id_user'];
|
|
}
|
|
|
|
// Create news
|
|
echo "<h2>".__('Pandora Setup')." » ";
|
|
echo __('Site news management')."</h2>";
|
|
echo '<table class="databox" cellpadding="4" cellspacing="4" width="500">';
|
|
echo '<form name="ilink" method="post" action="index.php?sec=gsetup&sec2=godmode/setup/news">';
|
|
if ($creation_mode == 1)
|
|
echo "<input type='hidden' name='create' value='1'>";
|
|
else
|
|
echo "<input type='hidden' name='update' value='1'>";
|
|
echo "<input type='hidden' name='id_news' value='";
|
|
if (isset($id_news)) {
|
|
echo $id_news;
|
|
}
|
|
echo "'>";
|
|
echo '<tr>
|
|
<td class="datos">'.__('Subject').'</td>
|
|
<td class="datos"><input type="text" name="subject" size="35" value="'.$subject.'">';
|
|
echo '<tr>
|
|
<td class="datos2">'.__('Text').'</td>
|
|
<td class="datos2">
|
|
<textarea rows=4 cols=50 name="text" >';
|
|
echo $text;
|
|
echo '</textarea></td>';
|
|
echo '</tr>';
|
|
echo "</table>";
|
|
echo "<table width='500px'>";
|
|
echo "<tr><td align='right'>
|
|
<input name='crtbutton' type='submit' class='sub upd' value='".__('Update')."'>";
|
|
echo '</form></td></tr></table>';
|
|
} else { // Main list view for Links editor
|
|
echo "<h2>".__('Pandora Setup')." » ";
|
|
echo __('Site news management')."</h3>";
|
|
echo "<table cellpadding='4' cellspacing='4' class='databox' width=600>";
|
|
echo "<th>".__('Subject')."</th>";
|
|
echo "<th>".__('Author')."</th>";
|
|
echo "<th>".__('Timestamp')."</th>";
|
|
echo "<th>".__('Delete')."</th>";
|
|
$sql = 'SELECT * FROM tnews ORDER BY timestamp';
|
|
$result = mysql_query ($sql);
|
|
$color = 1;
|
|
while ($row=mysql_fetch_array($result)){
|
|
if ($color == 1) {
|
|
$tdcolor = "datos";
|
|
$color = 0;
|
|
}
|
|
else {
|
|
$tdcolor = "datos2";
|
|
$color = 1;
|
|
}
|
|
echo "<tr><td class='$tdcolor'><b><a href='index.php?sec=gsetup&sec2=godmode/setup/news&form_edit=1&id_news=".$row["id_news"]."'>".$row["subject"]."</a></b></td>";
|
|
|
|
echo "<td class='$tdcolor'>".$row["author"]."</b></td>";
|
|
echo "<td class='$tdcolor'>".$row["timestamp"]."</b></td>";
|
|
|
|
echo '<td class="'.$tdcolor.'" align="center"><a href="index.php?sec=gsetup&sec2=godmode/setup/news&id_news='.$row["id_news"].'&borrar='.$row["id_news"].'" onClick="if (!confirm(\' '.__('Are you sure?').'\')) return false;"><img border=0 src="images/cross.png"></a></td></tr>';
|
|
}
|
|
echo "</table>";
|
|
echo "<table width='600'>";
|
|
echo "<tr><td align='right'>";
|
|
echo "<form method='post' action='index.php?sec=gsetup&sec2=godmode/setup/news&form_add=1'>";
|
|
echo "<input type='submit' class='sub next' name='form_add' value='".__('Add')."'>";
|
|
echo "</form></table>";
|
|
}
|
|
?>
|