advanced();\n"; } else { require_once INCLUDES."html_buttons_include.php"; } if (isset($_GET['status'])) { if ($_GET['status'] == "sn") { $message = $locale['410']; } elseif ($_GET['status'] == "su") { $message = $locale['411']; } elseif ($_GET['status'] == "del") { $message = $locale['412']; } if ($message) { echo "
\n"; } } if (isset($_POST['save'])) { $news_subject = stripinput($_POST['news_subject']); $news_cat = isnum($_POST['news_cat']) ? $_POST['news_cat'] : "0"; $body = addslash($_POST['body']); $body3 = addslash($_POST['body3']); if ($_POST['body2']) { $body2 = addslash(preg_replace("(^\s
$)", "", $_POST['body2'])); } else { $body2 = ""; } $news_start_date = 0; $news_end_date = 0; if ($_POST['news_start']['mday']!="--" && $_POST['news_start']['mon']!="--" && $_POST['news_start']['year']!="----") { $news_start_date = mktime($_POST['news_start']['hours'],$_POST['news_start']['minutes'],0,$_POST['news_start']['mon'],$_POST['news_start']['mday'],$_POST['news_start']['year']); } if ($_POST['news_end']['mday']!="--" && $_POST['news_end']['mon']!="--" && $_POST['news_end']['year']!="----") { $news_end_date = mktime($_POST['news_end']['hours'],$_POST['news_end']['minutes'],0,$_POST['news_end']['mon'],$_POST['news_end']['mday'],$_POST['news_end']['year']); } $news_visibility = isnum($_POST['news_visibility']) ? $_POST['news_visibility'] : "0"; $news_draft = isset($_POST['news_draft']) ? "1" : "0"; $news_sticky = isset($_POST['news_sticky']) ? "1" : "0"; if ($settings['tinymce_enabled'] != 1) { $news_breaks = isset($_POST['line_breaks']) ? "y" : "n"; } else { $news_breaks = "n"; } $news_comments = isset($_POST['news_comments']) ? "1" : "0"; $news_ratings = isset($_POST['news_ratings']) ? "1" : "0"; if (isset($_POST['news_id']) && isnum($_POST['news_id'])) { if ($news_sticky == "1") { $result = dbquery("UPDATE ".DB_NEWS." SET news_sticky='0' WHERE news_sticky='1'"); } $result = dbquery("UPDATE ".DB_NEWS." SET news_subject='$news_subject', news_cat='$news_cat', news_news='$body', news_extended='$body2',news_link='$body3', news_breaks='$news_breaks',".($news_start_date != 0 ? " news_datestamp='$news_start_date'," : "")." news_start='$news_start_date', news_end='$news_end_date', news_visibility='$news_visibility', news_draft='$news_draft', news_sticky='$news_sticky', news_allow_comments='$news_comments', news_allow_ratings='$news_ratings' WHERE news_id='".$_POST['news_id']."'"); redirect(FUSION_SELF.$aidlink."&status=su"); } else { if ($news_sticky == "1") { $result = dbquery("UPDATE ".DB_NEWS." SET news_sticky='0' WHERE news_sticky='1'"); } $result = dbquery("INSERT INTO ".DB_NEWS." (news_subject, news_cat, news_news, news_extended, news_link, news_breaks, news_name, news_datestamp, news_start, news_end, news_visibility, news_draft, news_sticky, news_reads, news_allow_comments, news_allow_ratings) VALUES ('$news_subject', '$news_cat', '$body', '$body2', '$body3', '$news_breaks', '".$userdata['user_id']."', '".($news_start_date != 0 ? $news_start_date : time())."', '$news_start_date', '$news_end_date', '$news_visibility', '$news_draft', '$news_sticky', '0', '$news_comments', '$news_ratings')"); redirect(FUSION_SELF.$aidlink."&status=sn"); } } else if (isset($_POST['delete']) && (isset($_POST['news_id']) && isnum($_POST['news_id']))) { $result = dbquery("DELETE FROM ".DB_NEWS." WHERE news_id='".$_POST['news_id']."'"); $result = dbquery("DELETE FROM ".DB_COMMENTS." WHERE comment_item_id='".$_POST['news_id']."' and comment_type='N'"); $result = dbquery("DELETE FROM ".DB_RATINGS." WHERE rating_item_id='".$_POST['news_id']."' and rating_type='N'"); redirect(FUSION_SELF.$aidlink."&status=del"); } else { if (isset($_POST['preview'])) { $news_subject = stripinput($_POST['news_subject']); $news_cat = isnum($_POST['news_cat']) ? $_POST['news_cat'] : "0"; $body = phpentities(stripslash($_POST['body'])); $body3 = phpentities(stripslash($_POST['body3'])); $bodypreview = str_replace("src='".str_replace("../", "", IMAGES_N), "src='".IMAGES_N, stripslash($_POST['body'])); if ($_POST['body2']) { $body2 = phpentities(stripslash($_POST['body2'])); $body2preview = str_replace("src='".str_replace("../", "", IMAGES_N), "src='".IMAGES_N, stripslash($_POST['body2'])); } else { $body2 = ""; } if (isset($_POST['line_breaks'])) { $news_breaks = " checked='checked'"; $bodypreview = nl2br($bodypreview); if ($body2) { $body2preview = nl2br($body2preview); } } else { $news_breaks = ""; } $news_start = array( "mday" => isnum($_POST['news_start']['mday']) ? $_POST['news_start']['mday'] : "--", "mon" => isnum($_POST['news_start']['mon']) ? $_POST['news_start']['mon'] : "--", "year" => isnum($_POST['news_start']['year']) ? $_POST['news_start']['year'] : "----", "hours" => isnum($_POST['news_start']['hours']) ? $_POST['news_start']['hours'] : "0", "minutes" => isnum($_POST['news_start']['minutes']) ? $_POST['news_start']['minutes'] : "0", ); $news_end = array( "mday" => isnum($_POST['news_end']['mday']) ? $_POST['news_end']['mday'] : "--", "mon" => isnum($_POST['news_end']['mon']) ? $_POST['news_end']['mon'] : "--", "year" => isnum($_POST['news_end']['year']) ? $_POST['news_end']['year'] : "----", "hours" => isnum($_POST['news_end']['hours']) ? $_POST['news_end']['hours'] : "0", "minutes" => isnum($_POST['news_end']['minutes']) ? $_POST['news_end']['minutes'] : "0", ); $news_visibility = isnum($_POST['news_visibility']) ? $_POST['news_visibility'] : "0"; $news_draft = isset($_POST['news_draft']) ? " checked='checked'" : ""; $news_sticky = isset($_POST['news_sticky']) ? " checked='checked'" : ""; $news_comments = isset($_POST['news_comments']) ? " checked='checked'" : ""; $news_ratings = isset($_POST['news_ratings']) ? " checked='checked'" : ""; opentable($news_subject); echo "$bodypreview\n"; closetable(); if (isset($body2preview)) { opentable($news_subject); echo "$body2preview\n"; closetable(); } } $result = dbquery("SELECT * FROM ".DB_NEWS." ORDER BY news_draft DESC, news_datestamp DESC"); if (dbrows($result) != 0) { $editlist = ""; $sel = ""; while ($data = dbarray($result)) { if ((isset($_POST['news_id']) && isnum($_POST['news_id'])) || (isset($_GET['news_id']) && isnum($_GET['news_id']))) { $news_id = isset($_POST['news_id']) ? $_POST['news_id'] : $_GET['news_id']; $sel = ($news_id == $data['news_id'] ? " selected='selected'" : ""); } $editlist .= "\n"; } opentable($locale['400']); echo "