Subversion-Projekte lars-tiefland.content-management

<? require_once "util.php"; ?>
<?
        $self=basename($PHP_SELF);
        $Tab="content";
        $DB=$Tab;
        require_once "connect.php";
        if (!$rechte[Seiten] == 1) 
        {
//              exit;
        }
        if ($action=="update")
        {
                if (!$ID)
                {       // insert Dummy-Entry
                        $query = "insert into $DB (erstellt_am,erstellt_von) VALUES (NOW(),'$PHP_AUTH_USER')";
                        $result = mysql_query ($query) or die (mysql_errno().": ".mysql_error()."<hr>".$query."<hr>");
                        $ID=mysql_insert_id();
                }

                unset($HTTP_POST_VARS[action]);
                unset($HTTP_POST_VARS[ID]);
                $HTTP_POST_VARS[Text]=preg_replace("/\"/","&quot;",$HTTP_POST_VARS[Text]);

                foreach(array_keys($HTTP_POST_VARS) as $elem)
                {
                        if ($elem[0] == "_")
                        {
                                unset($HTTP_POST_VARS[$elem]);
                                $button=$$elem;
                                $elem=substr($elem,1);
                                $Pfad=$HTTP_POST_VARS[$elem."_Pfad"];
                                unset($HTTP_POST_VARS[$elem."_Pfad"]);
                                $image=$$elem;
                                $image_name=$elem."_name";
                                $image_name=urlencode($$image_name);
                                switch ($button) 
                                {
                                        case 0:
                                                break;
                                        case 1:
                                                $HTTP_POST_VARS[$elem]='';
                                                break;
                                        case 2:
                                                //$image_name=$ID."_".$image_name;
                                                //$image_name=$ID.strrchr($image_name,".");
                                                $HTTP_POST_VARS[$elem]=$image_name;
                                                copy($image,$Pfad.$image_name);
                                                $$elem=$image_name;
                                        break;
                                    default:
                                                $$elem=$button;
                                        break;
                            }
                        }
                }
                $names=array();
                foreach(array_keys($HTTP_POST_VARS) as $elem)
                {
                        array_push($names,"$elem='$HTTP_POST_VARS[$elem]'");
                }
                $query="update $DB set ".join($names,', ');
                $query=$query.", letzte_Aenderung_von='$PHP_AUTH_USER', letzte_Aenderung_am=NOW() where ID = '$ID'";
                $result = mysql_query ($query) or die (mysql_errno().": ".mysql_error());
                dateiname($File);
                header("Location: $self?File=$File");
        }
        if ($action=="delete")
        {
                if ($ID)
                {
                        $condition=array();
                        foreach ($ID as $elem) 
                        {
                                array_push($condition," ID = '$elem'");
                        }
                        $cond=join(" or ",$condition);
                        $query = "DELETE FROM $DB WHERE $cond";
                        $result = mysql_query ("$query") or die (mysql_errno().": ".mysql_error());
                        header("Location: $self?File=$File");
                }
        }
                if (!$action) 
                {
                        $action="select_edit";
                }
                if (!$sort)
                {
                        $sort="Titel";
                }
?>