Subversion-Projekte lars-tiefland.content-management

<? require_once "util.php" ?>
<?
        $self=basename($PHP_SELF);
        $Tab="Files";
        $DB=$Tab;
        require_once "connect.php";
        if (!$rechte[$Rubrik[content_management]] & $Buttons[Seiten]) 
        {
                exit;
        }
        if ($action=="update")
        {
                if (!$ID)
                {       // insert Dummy-Entry
                        if ($dir) 
                        {
                                $Dateiname=$dir."/".$Dateiname;
                                $HTTP_POST_VARS[Dateiname]=$dir."/".$HTTP_POST_VARS[Dateiname];
                        }
                        $query = "insert into $DB (erstellt_am,erstellt_von,site,Dateiname) VALUES (NOW(),'$PHP_AUTH_USER','$site','$Dateiname')";
                        $result = mysql_query ("$query");
                        if (mysql_errno()==1062)
                        {
                                ?><font face="Arial, Helvetica, sans-serif" size="3" color="#FF0000"><b>Dieser 
      Dateiname ist bereits vergeben!</b></font><br>
<a href="javascript:history.go(-1)"><font face="Arial, Helvetica, sans-serif" size="2" color="#FF0000"><b>Zurück</b></font></a> 
<?
                                exit;
                        }
                        $ID=mysql_insert_id();
                }

                unset($HTTP_POST_VARS[action]);
                unset($HTTP_POST_VARS[ID]);

//-------------------------------------------------------------------------------------------
// save Files
//-------------------------------------------------------------------------------------------
                foreach(array_keys($HTTP_POST_VARS) as $elem)
                {
                        global $elem;
                        if ($elem[0] == "_")
                        {
                                unset($HTTP_POST_VARS[$elem]);
                                $button=$$elem;
                                $elem=substr($elem,1);
                                $Pfad=$HTTP_POST_VARS[$elem."_Pfad"];
                                unset($HTTP_POST_VARS[$elem."_Pfad"]);
                                $image=$$elem;
                                $image_name=$elem."_name";
                                $image_name=urlencode($$image_name);
                                switch ($button) 
                                {
                                        case 0:
                                                break;
                                        case 1:
                                                $HTTP_POST_VARS[$elem]='';
                                                break;
                                        case 2:
                                                //$image_name=$ID."_".$image_name;
                                                //$image_name=$ID.strrchr($image_name,".");
                                                $HTTP_POST_VARS[$elem]=$image_name;
                                                copy($image,$Pfad.$image_name);
                                                $$elem=$image_name;
                                        break;
                                    default:
                                                $$elem=$button;
                                        break;
                            }
                        }
                }
//-------------------------------------------------------------------------------------------
//-------------------------------------------------------------------------------------------

                $names=array();
                foreach(array_keys($HTTP_POST_VARS) as $elem)
                {
                        array_push($names,"$elem='$HTTP_POST_VARS[$elem]'");
                }
                $query="update $DB set ".join($names,', ');
                $query=$query.", letzteAenderung_von='$PHP_AUTH_USER', letzteAenderung_am=NOW() where ID = '$ID'";
                $result = mysql_query ($query) or die (mysql_errno().": ".mysql_error());
                if (!$redirect)
                {
                        if (!$externeDatei)
                        {
                                dateiname($ID);
                        }
                        else 
                        {
                                Navigation();
                        }
                }
                header("Location: $self?$QUERY_STRING&ID=$ID");
        }
        if ($action=="delete")
        {
                if ($ID)
                {
                        $condition=array();
                        $condition2=array();
                        foreach ($ID as $elem) 
                        {
                                array_push($condition," ID = '$elem'");
                                array_push($condition2," File = '$elem'");                              
                        }
                        $cond=join(" or ",$condition);
                        $query = "DELETE FROM $DB WHERE $cond";
                        $result = mysql_query ("$query") or die (mysql_errno().": ".mysql_error());

                        $cond2=join(" or ",$condition2);
                        $query = "DELETE FROM content WHERE $cond2";
                        $result = mysql_query ("$query") or die (mysql_errno().": ".mysql_error());
                        Navigation();
                        header("Location: ".$self);  
                }
        }
                if (!$action) 
                {
                        $action="select_edit";
                }
                if (!$sort)
                {
                        $sort="Titel";
                }
?>