Beispiel #1
0
?>
" class="adverts-button"><?php 
_e("Go Back", "adverts");
?>
</a>
    <a href="<?php 
esc_attr_e(get_post_permalink($post_id));
?>
" class="adverts-button"><?php 
_e("View Ad", "adverts");
?>
</a>
</p>

<?php 
adverts_flash($adverts_flash);
?>

<form action="" method="post" class="adverts-form adverts-form-aligned">
    <fieldset>
        
        <?php 
foreach ($form->get_fields(array("type" => array("adverts_field_hidden"))) as $field) {
    ?>
        <?php 
    call_user_func(adverts_field_get_renderer($field), $field);
    ?>
        <?php 
}
?>
        
Beispiel #2
0
/**
 * Generates HTML for ad edit form (in [adverts_manage] shortcode)
 * 
 * @param array $atts Shortcode attributes
 * @since 0.1
 * @return void 
 * @access private
 */
function _adverts_manage_edit($atts)
{
    wp_enqueue_style('adverts-frontend');
    wp_enqueue_style('adverts-icons');
    wp_enqueue_style('adverts-icons-animate');
    wp_enqueue_script('adverts-frontend');
    wp_enqueue_script('adverts-auto-numeric');
    extract(shortcode_atts(array('name' => 'default', 'moderate' => false), $atts));
    include_once ADVERTS_PATH . 'includes/class-html.php';
    include_once ADVERTS_PATH . 'includes/class-form.php';
    $form = new Adverts_Form(Adverts::instance()->get("form"));
    $valid = null;
    $error = array();
    $info = array();
    $bind = array();
    $action = apply_filters('adverts_action', adverts_request("_adverts_action", ""), __FUNCTION__);
    $post_id = adverts_request("advert_id", null);
    // $post_id hijack attempt protection here!
    $post = get_post($post_id);
    if ($post === null) {
        $error[] = __("Ad does not exist.", "adverts");
        adverts_flash(array("error" => $error));
        return;
    }
    if ($post->post_author != get_current_user_id()) {
        $error[] = __("You do not own this Ad.", "adverts");
        adverts_flash(array("error" => $error));
        return;
    }
    $slist = apply_filters("adverts_sh_manage_list_statuses", array('publish', 'expired', 'pending', 'draft'));
    if (!in_array($post->post_status, $slist)) {
        $error[] = sprintf(__("Incorrect post status [%s].", "adverts"), $post->post_status);
        adverts_flash(array("error" => $error));
        return;
    }
    foreach ($form->get_fields() as $f) {
        $bind[$f["name"]] = get_post_meta($post_id, $f["name"], true);
    }
    $bind["_adverts_action"] = "update";
    $bind["_post_id"] = $post_id;
    $bind["post_title"] = $post->post_title;
    $bind["post_content"] = $post->post_content;
    $bind["advert_category"] = array();
    $terms = get_the_terms($post_id, 'advert_category');
    if (is_array($terms)) {
        foreach ($terms as $term) {
            $bind["advert_category"][] = $term->term_id;
        }
    }
    $form->bind($bind);
    if ($action == "update") {
        $form->bind((array) stripslashes_deep($_POST));
        $valid = $form->validate();
        if ($valid) {
            $post_id = Adverts_Post::save($form, $post_id);
            if (is_wp_error($post_id)) {
                $error[] = $post_id->get_error_message();
            } else {
                $info[] = __("Post has been updated.", "adverts");
            }
        } else {
            $error[] = __("Cannot update. There are errors in your form.", "adverts");
        }
    }
    $adverts_flash = array("error" => $error, "info" => $info);
    // adverts/templates/manage-edit.php
    include apply_filters("adverts_template_load", ADVERTS_PATH . 'templates/manage-edit.php');
}