Subversion-Projekte lars-tiefland.content-management

<?
    session_start();

    $self = basename( $PHP_SELF );
    // SEBASTIAN
    // verwendungsfilter
    if ( isset( $_GET[modul] ) )
    {
        $_SESSION[$self][verwendung] = $_GET[modul];
    }
    $DB = "Features";
    // SEBASTIAN
    if ( $_SESSION[$self][verwendung] == "Branchenbuch" )
    {
        define( "modul_name", "branchenbuch" );
    }
    else
    {
        define( "modul_name", "online_shop" );
    }
    define( "tool_name", "optionen" );

    require_once  "connect2.php";
    require_once "language_pack.php";

    // SEBASTIAN
    // prüfen, ob die spalte verwendung existiert
    if ( !isset( $_SESSION[$self][spalte_verwendung_existiert] ) )
    {
        $query = "show columns from Features like 'verwendung'";
        $result = mysql_query( $query ) or die( mysql_errno() . ": " .
            mysql_error() . "<hr>" . $query . "<hr>" );
        $_SESSION[$self][spalte_verwendung_existiert] = ( mysql_num_rows( $result ) >
            0 );
    }
    if ( $action == "update" )
    {
        if ( !$ID )
        { // insert Dummy-Entry
            $query = "insert into $DB (ID) VALUES (0)";
            $result = mysql_query( $query ) or die( mysql_errno() . ": " .
                mysql_error() . "<hr>" . $query . "<hr>" );
            $ID = mysql_insert_id();
        }

        unset( $HTTP_POST_VARS[action] );
        unset( $HTTP_POST_VARS[ID] );

        foreach ( array_keys( $HTTP_POST_VARS ) as $elem )
        {
            if ( $elem[0] == "_" )
            {
                unset( $HTTP_POST_VARS[$elem] );
                $button = $$elem;
                $elem = substr( $elem, 1 );
                $Pfad = $HTTP_POST_VARS[$elem . "_Pfad"];
                unset( $HTTP_POST_VARS[$elem . "_Pfad"] );
                $image = $$elem;
                $image_name = $elem . "_name";
                $image_name = urlencode( $$image_name );
                switch ( $button )
                {
                    case 0:
                        break;
                    case 1:
                        $HTTP_POST_VARS[$elem] = '';
                        break;
                    case 2:
                        //$image_name=$ID."_".$image_name;
                        $image_name = $ID . strrchr( $image_name, "." );
                        $HTTP_POST_VARS[$elem] = $image_name;
                        copy( $image, $Pfad . $image_name );
                        break;
                    default:
                        break;
                }
            }
        }
        $names = array();



        /* DateiUPload START */
        // Datei löschen
        foreach ( $HTTP_POST_VARS as $kk => $vv )
        {
            if ( stristr( $kk, "delete_" ) )
            {
                $cnt = explode( "_", $kk );
                $cntArr[] = $cnt[2];
                unset( $HTTP_POST_VARS[$kk] );
            }
        }
        $upd = "update " . $DB . " set ";
        if ( $cntArr )
        {
            foreach ( $cntArr as $kk => $vv )
            {
                $updelem[] = "datei_" . $vv . "=''";
                $updelem[] = "titel_" . $vv . "=''";
                unset( $HTTP_POST_VARS["datei_" . $vv . ""] );
                unset( $HTTP_POST_VARS["titel_" . $vv . ""] );
            }
        }
        if ( $updelem )
        {
            $upd .= implode( ", ", $updelem );
            $upd .= " where ID=" . $ID . "";
            $result = mysql_query( $upd ) or die( mysql_errno() . ": " .
                mysql_error() . "<hr>$query<hr>" );
        }
        // Datei uploaden und in httpvars schreiben
        if ( $_FILES['error'] == 0 )
        {

            foreach ( $_FILES as $kk => $vv )
            {
                // Datei umbenennen: [SHOP_ID]_[FEATURE_ID]_[NAME]
                $new_filename = urlencode( $webs['ID'] . "_" . $ID . "_" . $vv['name'] );

                // Datei kopieren
                // pfad zum Optionenbild
                $image_Path = "/images/features/";
                $image_Path = $webs[verzeichnis] . $image_Path;
                $dest = $image_Path . $new_filename;
                move_uploaded_file( $vv['tmp_name'], $dest );


                if ( file_exists( $dest ) )
                {
                    // Filename dem http_post_vars array hinzufügen
                    $HTTP_POST_VARS[$kk] = $new_filename;
                }
            }
        }
        /* DateiUPload ENDE */



        foreach ( array_keys( $HTTP_POST_VARS ) as $elem )
        {

            array_push( $names, "$elem='$HTTP_POST_VARS[$elem]'" );
        }
        $query = "update $DB set " . join( $names, ', ' );
        // SEBASTIAN
        if ( $_SESSION[$self][spalte_verwendung_existiert] )
        {
            $query .= ", verwendung = '" . $_SESSION[$self][verwendung] .
                "' ";
        }
        $query = $query . " where ID = '$ID'";
        $result = mysql_query( $query ) or die( mysql_errno() . ": " .
            mysql_error() . "<hr>$query<hr>" );
        header( "Location: " . $self );
    }

    if ( $action == "delete" )
    {
        if ( $ID )
        {
            $condition = array();
            $condition2 = array();
            foreach ( $ID as $elem )
            {
                array_push( $condition, " ID = '$elem'" );
                array_push( $condition2, " Feature = '$elem'" );
            }
            $cond = join( " or ", $condition );
            $cond2 = join( " or ", $condition2 );
            $query = "DELETE FROM $DB WHERE $cond";
            $query2 = "DELETE FROM Feature_options WHERE $cond2";
            $result = mysql_query( "$query" ) or die( mysql_errno() . ": " .
                mysql_error() );
            $result = mysql_query( "$query2" ) or die( mysql_errno() . ": " .
                mysql_error() );
            header( "Location: " . $self );
        }
    }
    if ( !$action )
    {
        $action = "select_edit";
    }
    if ( !$sort )
    {
        $sort = 'Name';
    }
?>
<html>
<head>
<title><? echo $webs[kunde_bezeichnung]
?>: Redaktionssystem</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<link rel=stylesheet type="text/css" href="redaktion.css">
<style type="text/css">
body 
{
        font-family: Arial, Helvetica, sans-serif; font-size: 10pt;
<? if ( $webs[font_color_seite] )
    {
?>color:                                #<? echo $webs[font_color_seite]
?>;<? }
?>
<? if ( $webs[bgcolor_seite] )
    {
?>background-color:     #<? echo $webs[bgcolor_seite]
?>;<? }
?>
<? if ( $webs[hintergrundbild] )
    {
?>background-image: url(../images/hintergrundbild/<? echo
$webs[hintergrundbild]
?>);<? }
?>
}

.links
{
font-size: 10pt;
font-weight:bold;
vertical-align:top;
width:10%;
<? if ( $webs[font_color_links] )
    {
?>color:                                #<? echo $webs[font_color_links]
?>;<? }
?>
<? if ( $webs[bgcolor_links] )
    {
?>background-color:     #<? echo $webs[bgcolor_links]
?>;<? }
?>
}

.rechts
{
font-size: 10pt;
<? if ( $webs[font_color_rechts] )
    {
?>color:                                #<? echo $webs[font_color_rechts]
?>;<? }
?>
<? if ( $webs[bgcolor_rechts] )
    {
?>background-color:     #<? echo $webs[bgcolor_rechts]
?>;<? }
?>
}

A:link {font-family: Arial, Helvetica, sans-serif; font-size: 10pt; color: #<? echo
$webs[font_color_rechts]
?>}
A:visited {font-family: Arial, Helvetica, sans-serif; font-size: 10pt; color: #<? echo
$webs[font_color_rechts]
?>}
A:active {font-family: Arial, Helvetica, sans-serif; font-size: 10pt; color: #<? echo
$webs[font_color_rechts]
?>}
A:hover {font-family: Arial, Helvetica, sans-serif; font-size: 10pt; color: #<? echo
$webs[font_color_rechts]
?>}
</style><MM:EndLock>
<script language="JavaScript">
<!--
function MM_swapImgRestore() { //v3.0
  var i,x,a=document.MM_sr; for(i=0;a&&i<a.length&&(x=a[i])&&x.oSrc;i++) x.src=x.oSrc;
}

function MM_preloadImages() { //v3.0
  var d=document; if(d.images){ if(!d.MM_p) d.MM_p=new Array();
    var i,j=d.MM_p.length,a=MM_preloadImages.arguments; for(i=0; i<a.length; i++)
    if (a[i].indexOf("#")!=0){ d.MM_p[j]=new Image; d.MM_p[j++].src=a[i];}}
}

function MM_swapImage() { //v3.0
  var i,j=0,x,a=MM_swapImage.arguments; document.MM_sr=new Array; for(i=0;i<(a.length-2);i+=3)
   if ((x=MM_findObj(a[i]))!=null){document.MM_sr[j++]=x; if(!x.oSrc) x.oSrc=x.src; x.src=a[i+2];}
}

function MM_findObj(n, d) { //v4.01
  var p,i,x;  if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
    d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
  if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
  for(i=0;!x&&d.layers&&i<d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
  if(!x && d.getElementById) x=d.getElementById(n); return x;
}
//-->
</script>
<meta name="description" content="Redaktionssystem">
<meta name="author" content="Webagentur Niewerth">
<meta name="robots" content="noindex">
</head>

<body bgcolor="#<? echo $webs[bgcolor_seite];
?>" leftmargin="20" topmargin="10" marginwidth="20" marginheight="10" text="#000000" onLoad="MM_preloadImages('../images/navigation/bt_bearbeiten_f2.gif','../images/navigation/bt_delete_f2.gif','../images/navigation/bt_neu_f2.gif')">
<form method="post" action="#" name="formname" enctype="multipart/form-data">
<table width="595" border="0" cellspacing="0" cellpadding="0">
        <tr valign="top"> 
                <td width="508"> 
<?
    if ( $action == "delete" )
    {
        $query = "SELECT * FROM $DB ";
        // SEBASTIAN
        if ( $_SESSION[$self][spalte_verwendung_existiert] )
        {
            $query .= "where verwendung = '" . $_SESSION[$self][verwendung] .
                "' ";
        }
        $query = $query . "order by $sort";
        $result = mysql_query( $query ) or die( mysql_errno() . ": " .
            mysql_error() );
        if ( mysql_num_rows( $result ) == 0 )
        {
?>
                        <font color="#<? echo $webs[font_color_seite]
?>"><b>Es sind keine Daten eingetragen !</b></font>
<?
        }
        else
        {
?>
                        <table width="100%" border="1" cellspacing="0" cellpadding="3" bordercolorlight="#FFFFFF" bordercolordark="#999999">
                                <tr bgcolor="#<? echo $webs[bgcolor_links]
?>"> 
                                        <td colspan="2"><font color="#<? echo $webs[font_color_links]
?>"><b>Option: L&ouml;schen</b></font></td>
                                </tr>
                                <?
            while ( $zeile = mysql_fetch_array( $result ) )
            {
?>
                                <tr> 
                                        
            <td bgcolor="#<? echo $webs[bgcolor_rechts]
?>"><a href="<? echo
$self
?>?action=edit&ID=<? echo
$zeile[ID];
?>"><? echo
$zeile[Name]
?></a></td>
                                        <td width="5%" align="center" bgcolor="#<? echo $webs[bgcolor_rechts]
?>"><input type="checkbox" name="ID[]" value="<? echo
$zeile[ID]
?>"></td>
                                </tr>
                                <?
            }
?>
                                
                                
                                
                                <tr bgcolor="#<? echo $webs[bgcolor_links]
?>"> 
                                        <td colspan="2" align="right"> 
                                                <input type="hidden" name="action" value='delete'>
                                                <input type="submit" value="LÖSCHEN">
                                                <input type="reset" value="Zur&uuml;cksetzen">
                                        </td>
                                </tr>
                        </table>
<?
        }
?>
<?
    }
?>
<!--  Auswahl Löschen ENDE  -->
<!--  Auswahl SELECT_EDIT START  -->
<?
    if ( $action == "select_edit" )
    {
        $query = "SELECT * FROM $DB ";
        // SEBASTIAN
        if ( $_SESSION[$self][spalte_verwendung_existiert] )
        {
            $query .= "where verwendung = '" . $_SESSION[$self][verwendung] .
                "' ";
        }
        $query = $query . "order by $sort";

        $result = mysql_query( $query ) or die( mysql_errno() . ": " .
            mysql_error() );
        if ( mysql_num_rows( $result ) == 0 )
        {
?>
                        <font color="#<? echo $webs[font_color_seite]
?>"><b>Es sind keine Daten eingetragen !</b></font>
<?
        }
        else
        {
?>
        <table width="100%" border="1" cellspacing="0" cellpadding="3" bordercolorlight="#FFFFFF" bordercolordark="#999999">
          <tr bgcolor="#<? echo $webs[bgcolor_links]
?>"> 
            <td colspan="2"><font color="#<? echo $webs[font_color_links]
?>"><b>Option: 
              Bearbeiten</b></font></td>
          </tr>
          <?
            while ( $zeile = mysql_fetch_array( $result ) )
            {
?>
          <tr bgcolor="#<? echo $webs[bgcolor_rechts]
?>"> 
            <td><a href="<? echo $self
?>?action=edit&ID=<? echo $zeile[ID];
?>"> 
              <? echo $zeile[Name]
?>
              </a></td>
          </tr>
          <?
            }
?>
          <tr bgcolor="#<? echo $webs[bgcolor_links]
?>"> 
            <td colspan="2"> 
              &nbsp;<input type="hidden" name="action" value='edit'>
            </td>
          </tr>
        </table>
 <?
        }
?> 
        <?
    }
?> 
<!--  Auswahl SELECT_EDIT ENDE  -->
<?
    if ( $action == "edit" )
    {
        if ( $ID )
        {
            $result = mysql_query( "SELECT * FROM $DB where ID = '$ID'" ) or
                die( mysql_errno() . ": " . mysql_error() );
            $zeile = mysql_fetch_array( $result );
        }
?> 
<table width="100%" border="1" cellspacing="0" cellpadding="3" bordercolorlight="#FFFFFF" bordercolordark="#999999">
        <tr bgcolor="#<? echo $webs[bgcolor_links]
?>"> 
                <td colspan="3"><font color="#<? echo $webs[font_color_links]
?>"><b>Option: 
<?
        if ( $ID )
        {
?>
Bearbeiten 
<?
        }
        else
        {
?>
Neueintrag 
<?
        }
?>
                </b></font></td>
        </tr>
<?
        $Feld = "Name";
        if ( isset( $user_rechte[modul_name][tool_name][$Feld] ) )
        {
?>
        <tr> 
                    <td bgcolor="#<? echo $webs[bgcolor_links]
?>" valign="middle" width="16%"> 
              <font color="#<? echo $webs[font_color_links]
?>"><b> 
              <?
            if ( $web_rechte[modul_name][tool_name][$Feld] )
            {
                echo $web_rechte[modul_name][tool_name][$Feld];
            }
            else
            {
?>
              Name: 
              <?
            }
?>
              </b></font> </td>
                <td width="84%" colspan="2" bgcolor="#<? echo $webs[bgcolor_rechts]
?>"> 
                        <input type="text" name="Name" value="<? echo $zeile[Name]
?>" >
                </td>
        </tr>
<?
        }
?>
<?
        if ( $language_pack )
        {
?>
        <tr> 
                    <td bgcolor="#<? echo $webs[bgcolor_links]
?>" valign="middle" width="16%"> 
              <font color="#<? echo $webs[font_color_links]
?>"><b> 
              <?
            if ( $web_rechte[modul_name][tool_name][$Feld] )
            {
                echo $web_rechte[modul_name][tool_name][$Feld];
            }
            else
            {
?>
              Sprache: 
              <?
            }
?>
              </b></font> </td>
                    <td colspan="2" bgcolor="#<? echo $webs[bgcolor_rechts]
?>"> 
<?
            if ( $ID )
            {
                echo $zeile[Language];
            }
            else
            {
?>
              <select name="Language">
<?
                foreach ( $language_pack as $language )
                {
?>
<option value="<? echo $language[0]
?>" <? if ( $language[0] == $zeile[Language] )
                    {
?> selected<? }
?>><? echo
$language[2]
?></option>
<?
                }
?>
                        </select>
<?
            }
?>
                        </td>
        </tr>
<?
        }
?>
<?
        $Feld = "Sonderoption";
        if ( isset( $user_rechte[modul_name][tool_name][$Feld] ) )
        {
?>
        <tr> 
                    <td bgcolor="#<? echo $webs[bgcolor_links]
?>" valign="middle" width="16%"> 
              <font color="#<? echo $webs[font_color_links]
?>"><b> 
              <?
            if ( $web_rechte[modul_name][tool_name][$Feld] )
            {
                echo $web_rechte[modul_name][tool_name][$Feld];
            }
            else
            {
?>Sonderoption: <? }
?>
              </b></font> </td>
                <td width="84%" colspan="2" bgcolor="#<? echo $webs[bgcolor_rechts]
?>"> 
                        <input type="hidden" name="Sonderoption" value="0">
              <input type="checkbox" name="Sonderoption" value="1"<? if ( $zeile[Sonderoption] )
            {
                echo " checked";
            }
?>>
            </td>
        </tr>
<?
        }
?>
<?
        $Feld = "Einzeloption";
        if ( isset( $user_rechte[modul_name][tool_name][$Feld] ) )
        {
?>
        <tr> 
                    <td bgcolor="#<? echo $webs[bgcolor_links]
?>" valign="middle" width="16%"> 
              <font color="#<? echo $webs[font_color_links]
?>"><b> 
              <?
            if ( $web_rechte[modul_name][tool_name][$Feld] )
            {
                echo $web_rechte[modul_name][tool_name][$Feld];
            }
            else
            {
?>Einzeloption: <? }
?>
              </b></font> </td>
                <td width="84%" colspan="2" bgcolor="#<? echo $webs[bgcolor_rechts]
?>"> 
                        <input type="hidden" name="<?= $Feld
?>" value="0">
              <input type="checkbox" name="<?= $Feld
?>" value="1"<? if ( $zeile[$Feld] ==
1 )
            {
                echo " checked";
            }
?>>
            </td>
        </tr>
<?
        }
?>
<?
        $Feld = "Text";
        if ( isset( $user_rechte[modul_name][tool_name][$Feld] ) )
        {
?>
        <tr> 
                    <td bgcolor="#<? echo $webs[bgcolor_links]
?>" valign="top" width="16%"> 
              <font color="#<? echo $webs[font_color_links]
?>"><b> 
              <?
            if ( $web_rechte[modul_name][tool_name][$Feld] )
            {
                echo $web_rechte[modul_name][tool_name][$Feld];
            }
            else
            {
?>
              Text: 
              <?
            }
?>
              </b></font> </td>
                <td colspan="2" bgcolor="#<? echo $webs[bgcolor_rechts]
?>"> 
                        <textarea name="Beschreibung" cols="40" rows="5"><? echo $zeile[Beschreibung]
?></textarea>
                </td>
        </tr>
<?
        }
?>
<?php
        // Dateiupload und Titel START
        if ( $opt_kk = array_keys( $web_rechte[modul_name][tool_name] ) )
        {

            foreach ( $opt_kk as $kk => $vv )
            {
                if ( stristr( $vv, "datei_" ) )
                {
                    $opt_datei[] = $vv;
                }
                if ( stristr( $vv, "titel_" ) )
                {
                    $opt_titel[] = $vv;
                }
            }
            if ( $opt_datei )
            {
                foreach ( $opt_datei as $kk => $vv )
                {
                    $cnt = explode( "_", $vv );
                    $cnt = $cnt[1];
                    echo "<tr>
                                                                                <td bgcolor=\"#" . $webs[bgcolor_links] . "\" valign=\"top\" width=\"16%\">
                                                                                        <font color=\"#" . $webs[font_color_links] . "\"><strong>Datei " .
                        $cnt . ":</strong></font>
                                                                                </td>\n";
                    echo "<td bgcolor=\"#" . $webs[bgcolor_rechts] . "\">";
                    // bild löschen ermöglichen
                    echo "\n<input id=\"delete_" . $vv . "\" name=\"delete_" .
                        $vv . "\" type=\"radio\" /> <label for=\"delete_" .
                        $vv . "\">Keine Datei</label><br />\n";
                    echo "\n<input type=\"file\" name=\"" . $vv . "\" />\n";
                    if ( $zeile[$vv] )
                    {
                        echo "<br>" . $zeile[$vv];
                        //echo "\n<br><img src=\"http://www.".$webs[domain]."/images/features/".$zeile[$vv]."\" width=\"100\" />\n";
                    }
                    echo "</td></tr>\n";
                }
            }
            if ( $opt_titel )
            {
                foreach ( $opt_titel as $kk => $vv )
                {
                    $cnt = explode( "_", $vv );
                    $cnt = $cnt[1];
                    echo "<tr>
                                                                                <td bgcolor=\"#" . $webs[bgcolor_links] . "\" valign=\"top\" width=\"16%\">
                                                                                        <font color=\"#" . $webs[font_color_links] . "\"><strong>Titel " .
                        $cnt . ":</strong></font>
                                                                                </td>\n";
                    echo "<td bgcolor=\"#" . $webs[bgcolor_rechts] . "\">";
                    echo "\n<input type=\"text\" name=\"" . $vv . "\" value=\"" .
                        $zeile[$vv] . "\" />\n";
                    echo "</td></tr>\n";
                }
            }
        }
        // Dateiupload und Titel ENDE

?>

        <tr bgcolor="#<? echo $webs[bgcolor_links]
?>"> 
                <td align="right" colspan="3"> 
                        <input type="hidden" name="ID" value="<? echo $ID
?>">
                        <input type="hidden" name="action" value="update">
<?
        $Feld = "Werte";
        if ( ( $ID ) and ( isset( $user_rechte[modul_name][tool_name][$Feld] ) ) )
        {
?>
<input type="button" value="<? if ( $web_rechte[modul_name][tool_name][$Feld] )
            {
                echo $web_rechte[modul_name][tool_name][$Feld];
            }
            else
            {
?>Werte bearbeiten<? }
?>" onClick="location.href='Feature_options.php?ID=<? echo
$ID
?>'">
<?
        }
?>
              <input type="submit" value="OK">
              <input type="reset" name="Button" value="Zur&uuml;cksetzen">
            </td>
          </tr>
        </table>
        <?
    }
?> </td>
      <td width="77" align="right"> 
        <table width="67" border="1" cellspacing="0" cellpadding="0" bordercolorlight="#FFFFFF" bordercolordark="#999999">
                <tr> 
            <td><a href="<? echo $self
?>?action=edit" onMouseOut="MM_swapImgRestore()" onMouseOver="MM_swapImage('new','','../images/navigation/bt_neu_f2.gif',1)"><img name="new" border="0" src="../images/navigation/bt_neu.gif" width="67" height="40" alt="Neueintrag"></a></td>
                </tr>
                <tr> 
            <td><a href="<? echo $self
?>?action=select_edit" onMouseOut="MM_swapImgRestore()" onMouseOver="MM_swapImage('Image4','','../images/navigation/bt_bearbeiten_f2.gif',1)"><img name="Image4" border="0" src="../images/navigation/bt_bearbeiten.gif" width="67" height="40"></a></td>
                </tr>
                <tr> 
            <td><a href="<? echo $self
?>?action=delete" onMouseOut="MM_swapImgRestore()" onMouseOver="MM_swapImage('delete','','../images/navigation/bt_delete_f2.gif',1)"><img name="delete" border="0" src="../images/navigation/bt_delete.gif" width="67" height="40" alt="Eintrag l&ouml;schen"></a></td>
                </tr>
                </table>
      </td>
</tr>
</table>
</form>
</body>
</html>