?> </table> <?php shownavbar($xpg_totalrecs, $xpg_pagesize, $xpg_total_pages, $page, $folder_id); echo "<br />"; } /**** Main Program ****/ $canAccess_this_folder = getPermission('file_folders', 'access', $folder); $canRead_this_folder = getPermission('file_folders', 'view', $folder); $canEdit_this_folder = getPermission('file_folders', 'edit', $folder); if (!($canAccess_folders || $canAccess_this_folder)) { $AppUI->redirect("m=public&a=access_denied"); } if ($folder > 0) { $cfObj->load($folder); $msg = ''; $canDelete = $cfObj->canDelete($msg, $folder); } ?> <script type="text/JavaScript"> function expand(id) { var element = document.getElementById(id); element.style.display = (element.style.display == '' || element.style.display == "none") ? "block" : "none"; } function addBulkComponent(li) { var form = document.frm_bulk; var ni = document.getElementById('tbl_bulk'); var newitem = document.createElement('input');
$AppUI->redirect('m=public&a=access_denied'); } } elseif ($isNotNew) { if (!$perms->checkModule('files', 'edit')) { $AppUI->redirect('m=public&a=access_denied'); } } else { if (!$perms->checkModule('files', 'add')) { $AppUI->redirect('m=public&a=access_denied'); } } $obj = new CFileFolder(); if ($file_folder_id) { $obj->_message = 'updated'; $oldObj = new CFileFolder(); $oldObj->load($file_folder_id); } else { $obj->_message = 'added'; } if (!$obj->bind($_POST)) { $AppUI->setMsg($obj->getError(), UI_MSG_ERROR); $AppUI->redirect($redirect); } // prepare (and translate) the module name ready for the suffix $AppUI->setMsg('File Folder'); // delete the file folder if ($del) { $obj->load($file_folder_id); if ($msg = $obj->delete()) { $AppUI->setMsg($msg, UI_MSG_ERROR); $AppUI->redirect();
<?php /* FILES $Id$ */ if (!defined('DP_BASE_DIR')) { die('You should not access this file directly.'); } $file_folder_parent = intval(dPgetParam($_GET, 'file_folder_parent', 0)); $folder = intval(dPgetParam($_GET, 'folder', 0)); // add to allow for returning to other modules besides Files $referrerArray = parse_url($_SERVER['HTTP_REFERER']); $referrer = $referrerArray['query'] . $referrerArray['fragment']; $obj = new CFileFolder(); // load the record data if ($folder && !$obj->load($folder)) { $AppUI->setMsg('File Folder'); $AppUI->setMsg("invalidID", UI_MSG_ERROR, true); $AppUI->redirect(); } // check permissions for this record if ($folder) { $canRead_folder = getPermission('file_folders', 'view', $folder); $canEdit_folder = getPermission('file_folders', 'edit', $folder); } else { $canAuthor_folder = getPermission('file_folders', 'add', $folder); } if ($folder && !($canEdit_folder && $canRead_folder) || !$folder && !$canAuthor_folder) { $AppUI->redirect("m=public&a=access_denied"); } $msg = ''; // check if this record has dependancies to prevent deletion if ($folder > 0) {