Home Explore Help
Sign In
richard
/
sorbetcms
Watch 1
Star 0
Fork 1
Code Issues 0 Pull Requests 0 Commits 79 Releases 0 Wiki

A tumblelog CMS built on AJAX, PHP and MySQL.

Tree: 8dabf4065d
Branches Tags
sorbetcms/admin/index.php

index.php 18KB
History Raw

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442 
  1. <?php

  2. if(!defined('entry'))define('entry', true);

  3. /* ===========================

  4. 

  5.   gelato CMS - A PHP based tumblelog CMS

  6.   development version

  7.   http://www.gelatocms.com/

  8. 

  9.   gelato CMS is a free software licensed under the GPL 2.0

  10.   Copyright (C) 2007 by Pedro Santana <pecesama at gmail dot com>

  11. 

  12.   =========================== */

  13. ?>

  14. <?php

  15. 

  16. 

  17. require('../entry.php');

  18. global $user, $conf, $tumble;

  19. $template = new plantillas("admin");

  20. 

  21. $isEdition = (isset($_GET["edit"])) ? true : false;

  22. $postId = ($isEdition) ? $_GET["edit"] : NULL;

  23. 

  24. if ($user->isAdmin()) {

  25. 

  26. 	if (isset($_GET["delete"])) {

  27. 		$tumble->deletePost($_GET['delete']);

  28. 		header("Location: index.php?deleted=true");

  29. 		die();

  30. 	}

  31. 

  32. 	if(isset($_POST["btnAdd"]))	{

  33. 		unset($_POST["btnAdd"]);

  34. 		

  35. 		

  36. 		if ($_POST["type"]=="2") { // is Photo type			

  37. 			if (isset($_POST["url"]) && $_POST["url"]!="")  {			

  38. 				$photoName = getFileName($_POST["url"]);

  39. 				if (!$tumble->savePhoto($_POST["url"])) {

  40. 					header("Location: ".$conf->urlGelato."/admin/index.php?photo=false");

  41. 					die();

  42. 				}

  43. 				$_POST["url"] = "../uploads/".$photoName;

  44. 			}

  45. 			

  46. 			if ( move_uploaded_file( $_FILES['photo']['tmp_name'], "../uploads/".sanitizeName($_FILES['photo']['name']) ) ) {

  47. 				$_POST["url"] = "../uploads/".sanitizeName($_FILES['photo']['name']);

  48. 			}

  49. 			

  50. 			unset($_POST["photo"]);

  51. 			unset($_POST["MAX_FILE_SIZE"]);

  52. 		}

  53. 		

  54. 		if ($_POST["type"]=="7") { // is MP3 type

  55. 			set_time_limit(300);

  56. 			$mp3Name = getFileName($_POST["url"]);

  57. 			if (!$tumble->saveMP3($_POST["url"])) {

  58. 				header("Location: ".$conf->urlGelato."/admin/index.php?mp3=false");

  59. 				die();

  60. 			}

  61. 			if (isMP3($remoteFileName)) {

  62. 				$_POST["url"] = $conf->urlGelato."/uploads/".$mp3Name;

  63. 			}

  64. 		}		

  65. 				

  66. 		if (!get_magic_quotes_gpc()) {	

  67. 			$_POST["title"] = addslashes($_POST["title"]);

  68. 			$_POST["description"] = addslashes($_POST["description"]);

  69. 		}	

  70. 		

  71. 		$_POST["title"] = strip_tags($_POST["title"]);

  72. 		$_POST["description"] = strip_tags($_POST["description"]);

  73. 		

  74. 		

  75. 		if (isset($_POST["id_post"])) {

  76. 			$tumble->modifyPost($_POST, $_POST["id_post"]);

  77. 		} else {			

  78. 			if ($tumble->addPost($_POST)) {

  79. 				header("Location: ".$conf->urlGelato."/admin/index.php?added=true");

  80. 				die();

  81. 			} else {

  82. 				header("Location: ".$conf->urlGelato."/admin/index.php?error=2&des=".$this->merror);

  83. 				die();

  84. 			}

  85. 		}	

  86. 	} else {

  87. 		if ($isEdition) {

  88. 			$post = $tumble->getPost($postId);

  89. 		}

  90. 	

  91. ?>	

  92. 	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

  93. 	<html xmlns="http://www.w3.org/1999/xhtml">

  94. 	<head>

  95. 		<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

  96. 		<meta name="generator" content="gelato cms <?php echo version();?>" />

  97. 		<title>gelato :: <?php echo __("control panel")?></title>

  98. 		<link rel="shortcut icon" href="<?php echo $conf->urlGelato;?>/images/favicon.ico" />

  99. 		<script language="javascript" type="text/javascript" src="<?php echo $conf->urlGelato;?>/admin/scripts/tools.js"></script>

  100. 		<script language="javascript" type="text/javascript" src="<?php echo $conf->urlGelato;?>/admin/scripts/mootools.js"></script>

  101. 		<script language="javascript" type="text/javascript" src="<?php echo $conf->urlGelato;?>/admin/scripts/slimbox.js"></script>

  102. 		<script language="javascript" type="text/javascript">

  103. 		<!--

  104. 			function exit(el, path) {

  105. 				el = $(el);

  106. 				el.style.display="block";

  107. 				el.setHTML('Processing request...');

  108. 				new Ajax(path, {

  109. 					onComplete:function(e) {

  110. 						el.setHTML(e).effect('opacity').custom(0,1);

  111. 						window.location='../login.php';

  112. 					}

  113. 				}).request();

  114. 				return false;

  115. 			}

  116. 

  117. 			window.onload = function() {

  118. 				contenedor = new Fx.Style('divMessages', 'opacity', {duration: 5000, onComplete:

  119. 					function() {

  120. 						document.getElementById('divMessages').style.display="none";

  121. 					}

  122. 				});

  123. 				contenedor.custom(1,0);

  124. 			}

  125. 		-->

  126. 		</script>

  127. 		<style type="text/css" media="screen">	

  128. 			@import "<?php echo $conf->urlGelato;?>/admin/css/style.css";

  129. 			@import "<?php echo $conf->urlGelato;?>/admin/css/slimbox.css";

  130. 		</style>

  131. 	</head>

  132. 	

  133. 	<body>

  134. 		<div id="div-process" style="display:none;"><?php echo __("Processing request...")?></div>

  135. 		<div id="cont">

  136. 			<div id="head">

  137. 				<h1><a href="<?php echo $conf->urlGelato;?>/admin/index.php" title="gelato :: <?php echo __("home")?>">gelato cms</a></h1>

  138. 				<ul id="nav">

  139. 					<li><a href="<?php echo $conf->urlGelato;?>/" title="<?php echo __("Take me to the tumblelog")?>"><?php echo __("View Tumblelog")?></a></li>

  140. 					<li><a href="close.php" title="Log off" ><?php echo __("Log out")?></a></li>

  141. 			  	</ul>

  142. 			</div>

  143. 			<div id="main">

  144. 				<div class="box">

  145. 					<ul class="menu">

  146. 					<h3><?php echo __("New Post")?></h3>					

  147. 					<li<?php echo (isset($_GET["new"]) && $_GET["new"]=="conversation") ? " class=\"selected\"" : ""; ?>><a href="<?php echo $conf->urlGelato;?>/admin/index.php?new=conversation"><img src="css/images/comments.png" alt="New chat" /> <?php echo __("Chat")?></a></li>

  148. 					<li<?php echo (isset($_GET["new"]) && $_GET["new"]=="quote") ? " class=\"selected\"" : ""; ?>><a href="<?php echo $conf->urlGelato;?>/admin/index.php?new=quote"><img src="css/images/quote.png" alt="New qoute" /> <?php echo __("Quote")?></a></li>

  149. 					<li<?php echo (isset($_GET["new"]) && $_GET["new"]=="url") ? " class=\"selected\"" : ""; ?>><a href="<?php echo $conf->urlGelato;?>/admin/index.php?new=url"><img src="css/images/world.png" alt="New link" /> <?php echo __("Link")?></a></li>

  150. 					<li<?php echo (isset($_GET["new"]) && $_GET["new"]=="mp3") ? " class=\"selected\"" : ""; ?>><a href="<?php echo $conf->urlGelato;?>/admin/index.php?new=mp3"><img src="css/images/music.png" alt="New audio" /> <?php echo __("Audio")?></a></li>

  151. 					<li<?php echo (isset($_GET["new"]) && $_GET["new"]=="video") ? " class=\"selected\"" : ""; ?>><a href="<?php echo $conf->urlGelato;?>/admin/index.php?new=video"><img src="css/images/film.png" alt="New video" /> <?php echo __("Video")?></a></li>

  152. 					<li<?php echo (isset($_GET["new"]) && $_GET["new"]=="photo") ? " class=\"selected\"" : ""; ?>><a href="<?php echo $conf->urlGelato;?>/admin/index.php?new=photo"><img src="css/images/image.png" alt="New picture" /> <?php echo __("Picture")?></a></li>

  153. 					<li<?php echo (isset($_GET["new"]) && $_GET["new"]=="post") ? " class=\"selected\"" : ""; echo (!isset($_GET["new"])) ? " class=\"selected\"" : ""; ?>><a href="<?php echo $conf->urlGelato;?>/admin/index.php?new=post"><img src="css/images/page.png" alt="New post" /> <?php echo __("Regular")?></a></li>

  154. 					</ul>

  155. 					<p>&nbsp;</p>					

  156. <?php			

  157. 					$present = version();

  158. 					$lastest = _file_get_contents("http://www.gelatocms.com/vgel.txt");

  159. 					if ($present < $lastest) {

  160. 						echo "<div class=\"information\" id=\"update\">".__("A new gelato version has been released and is ready <a href=\"http://www.gelatocms.com/\">for download</a>.")."</div><br />";

  161. 					}

  162. 					

  163. 					if (isset($_GET["deleted"])) {

  164. 						if ($_GET["deleted"]=="true") {

  165. 							echo "<div class=\"exito\" id=\"divMessages\">".__("The post has been eliminated successfully.")."</div>";

  166. 						}

  167. 					}

  168. 					

  169. 					if (isset($_GET["modified"])) {

  170. 						if ($_GET["modified"]=="true") {

  171. 							echo "<div class=\"exito\" id=\"divMessages\">".__("The post has been modified successfully.")."</div>";

  172. 						}

  173. 					}

  174. 					

  175. 					if (isset($_GET["added"])) {

  176. 						if ($_GET["added"]=="true") {

  177. 							echo "<div class=\"exito\" id=\"divMessages\">".__("The post has been added successfully.")."</div>";

  178. 						}

  179. 					}

  180. 					

  181. 					if (isset($_GET["error"])) {

  182. 						if ($_GET["error"]==2) {

  183. 							echo "<div class=\"error\"><strong>".__("Error on the database server:")." </strong>".$_GET["des"]."</div>";

  184. 						}

  185. 					}

  186. 					

  187. 					if (isset($_GET["mp3"])) {

  188. 						if ($_GET["mp3"]=="false") {

  189. 							echo "<div class=\"error\" id=\"divMessages\">".__("Not an MP3 file or an upload problem.")."</div>";

  190. 						}

  191. 					}

  192. 					

  193. 					if (isset($_GET["photo"])) {

  194. 						if ($_GET["photo"]=="false") {

  195. 							echo "<div class=\"error\" id=\"divMessages\">".__("Not a photo file or an upload problem.")."</div>";

  196. 						}

  197. 					}					

  198. ?>					

  199. 					<form action="index.php" method="post" <?php echo (isset($_GET["new"]) && $_GET["new"]=="photo") ? "enctype=\"multipart/form-data\"" : ""?> name="frmAdd" class="newpost">

  200. 						<fieldset>

  201. <?php

  202. 							if ($isEdition) {

  203. ?>

  204. 								<input type="hidden" name="id_post" id="id_post" value="<?php echo $postId;?>" />

  205. <?php

  206. 								switch ($post["type"]) {

  207. 									case "1":

  208. 										$_GET["new"] = "post";

  209. 										break;

  210. 									case "2":

  211. 										$_GET["new"] = "photo";							   

  212. 										break;

  213. 									case "3":

  214. 										$_GET["new"] = "quote";

  215. 										break;

  216. 									case "4":

  217. 										$_GET["new"] = "url";

  218. 										break;

  219. 									case "5":

  220. 										$_GET["new"] = "conversation";

  221. 										break;

  222. 									case "6":

  223. 										$_GET["new"] = "video";

  224. 										break;

  225. 									case "7":

  226. 										$_GET["new"] = "mp3";

  227. 										break;								

  228. 								}

  229. 								

  230. 							}

  231. 							

  232. 							$date = ($isEdition) ? strtotime($post["date"]) : gmmktime();

  233. 							$title = ($isEdition) ? htmlspecialchars(stripslashes($post["title"])) : "";

  234. 							$body = ($isEdition) ? stripslashes($post["description"]) : "";

  235. 							$url = ($isEdition) ? $post["url"] : "";

  236. 							

  237. 							if (!isset($_GET['new'])) $_GET['new'] = 'default';

  238. 							switch ($_GET["new"]) {

  239. 								case "post":

  240. 									$input = array("{type}", "{date}", "{id_user}", "{editTitle}", "{editBody}");

  241. 									$output = array("1", $date, $_SESSION['user_id'], $title, $body);

  242. 									

  243. 									$template->cargarPlantilla($input, $output, "template_add_post");

  244. 									$template->mostrarPlantilla();

  245. 									break;

  246. 								case "photo":

  247. 									$input = array("{type}", "{date}", "{id_user}", "{editUrl}", "{editBody}");

  248. 									$output = array("2", $date, $_SESSION['user_id'], $url, $body);

  249. 									

  250. 									$template->cargarPlantilla($input, $output, "template_add_photo");

  251. 									$template->mostrarPlantilla();							   

  252. 									break;

  253. 								case "quote":

  254. 									$input = array("{type}", "{date}", "{id_user}", "{editTitle}", "{editBody}");

  255. 									$output = array("3", $date, $_SESSION['user_id'], $title, $body);

  256. 									

  257. 									$template->cargarPlantilla($input, $output, "template_add_quote");

  258. 									$template->mostrarPlantilla();

  259. 									break;

  260. 								case "url":

  261. 									$input = array("{type}", "{date}", "{id_user}", "{editTitle}", "{editUrl}", "{editBody}");

  262. 									$output = array("4", $date, $_SESSION['user_id'], $title, $url, $body);

  263. 									

  264. 									$template->cargarPlantilla($input, $output, "template_add_link");

  265. 									$template->mostrarPlantilla();

  266. 									break;

  267. 								case "conversation":

  268. 									$input = array("{type}", "{date}", "{id_user}", "{editTitle}", "{editBody}");

  269. 									$output = array("5", $date, $_SESSION['user_id'], $title, $body);

  270. 									

  271. 									$template->cargarPlantilla($input, $output, "template_add_conversation");

  272. 									$template->mostrarPlantilla();

  273. 									break;

  274. 								case "video":

  275. 									$input = array("{type}", "{date}", "{id_user}", "{editUrl}", "{editBody}");

  276. 									$output = array("6", $date, $_SESSION['user_id'], $url, $body);

  277. 									

  278. 									$template->cargarPlantilla($input, $output, "template_add_video");

  279. 									$template->mostrarPlantilla();

  280. 									break;

  281. 								case "mp3":

  282. 									$input = array("{type}", "{date}", "{id_user}", "{editUrl}", "{editBody}");

  283. 									$output = array("7", $date, $_SESSION['user_id'], $url, $body);

  284. 									

  285. 									$template->cargarPlantilla($input, $output, "template_add_mp3");

  286. 									$template->mostrarPlantilla();

  287. 									break;

  288. 								default:

  289. 									$input = array("{type}", "{date}", "{id_user}", "{editTitle}", "{editBody}");

  290. 									$output = array("1", $date, $_SESSION['user_id'], $title, $body);

  291. 									

  292. 									$template->cargarPlantilla($input, $output, "template_add_post");

  293. 									$template->mostrarPlantilla();

  294. 									break;

  295. 							}

  296. ?>

  297. 								<p>

  298. 									<span style="color: rgb(136, 136, 136); margin-bottom: 10px; font-size: 10px;"><a href="http://hobix.com/textile/">Textile</a> <?php echo __("syntax is supported.")?></span>

  299. 								</p>

  300. 								<p>

  301. 									<input class="btn" type="submit" name="btnAdd" value="<?php echo ($isEdition) ? "Modify" : "Create"; ?> post" />

  302. 								</p>

  303. 						</fieldset>

  304. 					</form>

  305. 					

  306. 					<div class="footer-box">&nbsp;</div>

  307. 				</div>

  308. <?php

  309. 				if (!$isEdition) {

  310. ?>

  311. 				<div class="box">

  312. 					<ul class="menu manage">

  313. 					<h3>Manage</h3>

  314. 					<li><a href="<?php echo $conf->urlGelato;?>/admin/settings.php"><?php echo __("Settings")?></a></li>

  315. 					<li><a href="<?php echo $conf->urlGelato;?>/admin/options.php"><?php echo __("Options")?></a></li>

  316. 					<li><a href="<?php echo $conf->urlGelato;?>/admin/admin.php"><?php echo __("Users")?></a></li>

  317. 					<li><a href="<?php echo $conf->urlGelato;?>/admin/comments.php"><?php echo __("Comments")?></a></li>

  318. 					<li class="selected"><a><?php echo __("Posts")?></a></li>

  319. 					</ul>

  320. 

  321. <?php

  322. 					if (isset($_GET["page"])) {

  323. 						$page_num = $_GET["page"];

  324. 					} else {

  325. 						$page_num = NULL;

  326. 					}

  327. 					

  328. 					$limit=$conf->postLimit;

  329. 					

  330. 					if(isset($page_num) && is_numeric($page_num) && $page_num>0) { // Is defined the page and is numeric?

  331. 						$from = (($page_num-1) * $limit);

  332. 					} else {

  333. 						$from = 0;

  334. 					}

  335. 					

  336. 					$rs = $tumble->getPosts($limit, $from);

  337. 					

  338. 					if ($tumble->contarRegistros()>0) {				

  339. 						while($register = mysql_fetch_array($rs)) {			

  340. 							$formatedDate = date("M d", strtotime($register["date"]));

  341. 							$permalink = $conf->urlGelato."/index.php/post/".$register["id_post"]."/";							

  342. 							

  343. 							$textile = new Textile();				

  344. 							$register["description"] = $textile->TextileThis($register["description"]);

  345. 							

  346. 							$register["title"] = stripslashes($register["title"]);

  347. 							$register["description"] = stripslashes($register["description"]);

  348. 							

  349. 							switch ($tumble->getType($register["id_post"])) {

  350. 								case "1":

  351. 									$input = array("{Id_Post}", "{Date_Added}", "{Permalink}", "{Title}", "{Body}", "{URL_Tumble}");

  352. 									$output = array($register["id_post"], $formatedDate, $permalink, $register["title"], $register["description"], $conf->urlGelato);

  353. 														

  354. 									$template->cargarPlantilla($input, $output, "template_regular_post");

  355. 									$template->mostrarPlantilla();

  356. 									break;

  357. 								case "2":

  358. 									$fileName = "../uploads/".getFileName($register["url"]);

  359. 									

  360. 									$x = @getimagesize($fileName);						

  361. 									if ($x[0] > 100) {							

  362. 										$photoPath = $conf->urlGelato."/classes/imgsize.php?w=100&img=".$register["url"];

  363. 									} else {

  364. 										$photoPath = $register["url"];

  365. 									}

  366. 

  367. 									$effect = " style=\"cursor: pointer;\" onclick=\"Lightbox.show('".$register["url"]."', '".strip_tags($register["description"])."');\" ";

  368. 									

  369. 									$input = array("{Id_Post}", "{Date_Added}", "{Permalink}", "{PhotoURL}", "{PhotoAlt}", "{Caption}", "{Effect}", "{URL_Tumble}");

  370. 									$output = array($register["id_post"], $formatedDate, $permalink, $photoPath, strip_tags($register["description"]), $register["description"], $effect, $conf->urlGelato);

  371. 									

  372. 									$template->cargarPlantilla($input, $output, "template_photo");

  373. 									$template->mostrarPlantilla();							   

  374. 									break;

  375. 								case "3":

  376. 									$input = array("{Id_Post}", "{Date_Added}", "{Permalink}", "{Quote}", "{Source}", "{URL_Tumble}");

  377. 									$output = array($register["id_post"], $formatedDate, $permalink, $register["description"], $register["title"], $conf->urlGelato);

  378. 									

  379. 									$template->cargarPlantilla($input, $output, "template_quote");

  380. 									$template->mostrarPlantilla();

  381. 									break;

  382. 								case "4":

  383. 									$input = array("{Id_Post}", "{Date_Added}", "{Permalink}", "{URL}", "{Name}", "{Description}", "{URL_Tumble}");

  384. 									$output = array($register["id_post"], $formatedDate, $permalink, $register["url"], $register["title"], $register["description"], $conf->urlGelato);

  385. 									

  386. 									$template->cargarPlantilla($input, $output, "template_url");

  387. 									$template->mostrarPlantilla();

  388. 									break;

  389. 								case "5":

  390. 									$input = array("{Id_Post}", "{Date_Added}", "{Permalink}", "{Title}", "{Conversation}", "{URL_Tumble}");

  391. 									$output = array($register["id_post"], $formatedDate, $permalink, $register["title"], $tumble->formatConversation($register["description"]), $conf->urlGelato);

  392. 									

  393. 									$template->cargarPlantilla($input, $output, "template_conversation");

  394. 									$template->mostrarPlantilla();

  395. 									break;

  396. 								case "6":

  397. 									$input = array("{Id_Post}", "{Date_Added}", "{Permalink}", "{Video}", "{Caption}", "{URL_Tumble}");

  398. 									$output = array($register["id_post"], $formatedDate, $permalink, $tumble->getVideoPlayer($register["url"]), $register["description"], $conf->urlGelato);

  399. 									

  400. 									$template->cargarPlantilla($input, $output, "template_video");

  401. 									$template->mostrarPlantilla();

  402. 									break;

  403. 								case "7":

  404. 									$input = array("{Id_Post}", "{Date_Added}", "{Permalink}", "{Mp3}", "{Caption}", "{URL_Tumble}");

  405. 									$output = array($register["id_post"], $formatedDate, $permalink, $tumble->getMp3Player($register["url"]), $register["description"], $conf->urlGelato);

  406. 									

  407. 									$template->cargarPlantilla($input, $output, "template_mp3");

  408. 									$template->mostrarPlantilla();

  409. 									break;

  410. 							}

  411. 						}

  412. 

  413. 						$p = new pagination;

  414. 						$p->items($tumble->getPostsNumber());

  415. 						$p->limit($limit);

  416. 						$p->currentPage(isset($page_num) ? $page_num : 1);

  417. 						$p->show();

  418. 			

  419. 			

  420. 					} else {

  421. 						$template->renderizaEtiqueta(__("No posts in this tumblelog."), "div","error");

  422. 					}			

  423. 					

  424. ?>				

  425. 					<div class="footer-box">&nbsp;</div>

  426. 				</div>

  427. 			</div>

  428. <?php

  429. 			}

  430. ?>

  431. 			<div id="foot">

  432. 				<a href="http://www.gelatocms.com/" title="gelato CMS">gelato CMS</a> :: PHP/MySQL Tumblelog Content Management System.

  433. 			</div>

  434. 		</div>

  435. 	</body>

  436. 	</html>

  437. <?php

  438. 	}

  439. } else {

  440. 	header("Location: ".$conf->urlGelato."/login.php");

  441. }

  442. ?>