}
    if (isset($_GET['created'])) {
        $message = _formMessage(1, $_lang['global.created']);
    }
    // wysiwyg editor
    $output .= _admin_wysiwyg();
    // vypocet hodnoceni
    if (!$new) {
        if ($query['ratenum'] != 0) {
            $rate = DB::result(DB::query("SELECT ROUND(ratesum/ratenum) FROM `" . _mysql_prefix . "-articles` WHERE id=" . $query['id']), 0) . "%, " . $query['ratenum'] . "x";
        } else {
            $rate = $_lang['article.rate.nodata'];
        }
    } else {
        $rate = "";
    }
    // seo title input
    $seo_input = "<input type='text' name='title_seo' value='" . $query['title_seo'] . "' maxlength='255' class='input" . ($author_select != '' ? 'medium' : 'big') . "' />";
    // obrazek
    $picture = '';
    if (isset($query['picture_uid'])) {
        $picture .= "<img src='" . _pictureStorageGet(_indexroot . 'pictures/articles/', null, $query['picture_uid'], 'jpg') . "' alt='article picture' id='is-picture-file' />\n<label id='is-picture-delete'><input type='checkbox' name='picture-delete' value='1' /> <img src='images/icons/delete3.png' class='icon' alt='" . $_lang['global.delete'] . "' /></label>";
    } else {
        $picture .= "<img src='images/art-no-pic.png' alt='no picture' />\n";
    }
    $picture .= "<input type='file' name='picture' id='is-picture-upload' />\n";
    // formular
    $output .= "\n<a href='" . $backlink . "' class='backlink'>&lt; " . $_lang['global.return'] . "</a>\n<h1>" . $_lang['admin.content.articles.edit.title'] . "</h1>\n<p class='bborder'>" . $_lang['admin.content.articles.edit.p'] . "</p>" . $message . "\n\n" . (($new == true and _loginright_adminneedconfirm) ? _admin_smallNote($_lang['admin.content.articles.edit.newconfnote']) : '') . "\n" . ($query['confirmed'] != 1 ? _admin_smallNote($_lang['admin.content.articles.edit.confnote']) : '') . "\n\n" . (!$new && DB::result(DB::query('SELECT COUNT(*) FROM `' . _mysql_prefix . '-articles` WHERE `id`!=' . $query['id'] . ' AND `home1`=' . $query['home1'] . ' AND `title_seo`=\'' . $query['title_seo'] . '\''), 0) != 0 ? _formMessage(2, $_lang['admin.content.form.title_seo.collision']) : '') . "\n\n<form class='cform' action='index.php?p=content-articles-edit" . $actionplus . "' method='post' enctype='multipart/form-data' name='artform'" . _jsCheckForm("artform", array("title")) . ">\n\n<table class='formtable'>\n\n<tr>\n<td class='rpad'><strong>" . $_lang['article.category'] . "</strong></td>\n<td>" . _admin_rootSelect("home1", 2, $query['home1'], false) . " " . _admin_rootSelect("home2", 2, $query['home2'], true) . " " . _admin_rootSelect("home3", 2, $query['home3'], true) . "</td>\n</tr>\n\n<tr>\n<td class='rpad'><strong>" . $_lang['admin.content.form.title'] . "</strong></td>\n<td><input type='text' name='title' value='" . $query['title'] . "' class='inputbig' /></td>\n</tr>\n\n<tr>\n<td class='rpad'><strong>" . $_lang['admin.content.form.title_seo'] . "</strong></td>\n<td>" . ($author_select == '' ? $seo_input : "\n    <table class='ae-twoi'><tr>\n    <td>" . $seo_input . "</td>\n    <td class='rpad'><strong>" . $_lang['article.author'] . "</strong></td>\n    <td>" . $author_select . "</td>\n    </tr></table>\n") . "</td>\n</tr>\n\n<tr>\n<td class='rpad'><strong>" . $_lang['admin.content.form.description'] . "</strong></td>\n<td>\n    <table class='ae-twoi'><tr>\n    <td><input type='text' name='description' value='" . $query['description'] . "' maxlength='128' class='inputmedium' /></td>\n    <td class='rpad'><strong>" . $_lang['admin.content.form.keywords'] . "</strong></td>\n    <td><input type='text' name='keywords' value='" . $query['keywords'] . "' maxlength='128' class='inputmedium' /></td>\n    </tr></table>\n</td>\n</tr>\n\n<tr class='valign-top'>\n<td class='rpad'><strong>" . $_lang['admin.content.form.perex'] . "</strong></td>\n<td><textarea name='perex' rows='9' cols='94' class='areabigperex codemirror'>" . _htmlStr($query['perex']) . "</textarea></td>\n</tr>\n\n<tr class='valign-top'>\n<td class='rpad'><strong>" . $_lang['admin.content.form.content'] . "</strong>" . $artlink . "</td>\n<td>\n\n  <table id='ae-table'>\n  <tr class='valign-top'>\n    <td id='content-cell'>\n      <textarea name='content' rows='25' cols='68' class='wysiwyg_editor" . (!_wysiwyg || !_loginwysiwyg ? ' codemirror' : '') . "'>" . _htmlStr($query['content']) . "</textarea>\n    </td>\n    <td id='is-cell'>\n      <div id='is-cell-wrapper'>\n      <div id='is-cell-content'>\n\n      <h2>" . $_lang['admin.content.form.picture'] . "</h2>\n      <div id='is-picture'>" . $picture . "</div>\n\n      <h2>" . $_lang['admin.content.form.settings'] . "</h2>\n      <p id='is-settings'>\n      <label><input type='checkbox' name='public' value='1'" . _checkboxActivate($query['public']) . " /> " . $_lang['admin.content.form.public'] . "</label>\n      <label><input type='checkbox' name='visible' value='1'" . _checkboxActivate($query['visible']) . " /> " . $_lang['admin.content.form.visible'] . "</label>\n      " . (_loginright_adminconfirm || !_loginright_adminneedconfirm && $query['author'] == _loginid ? "<label><input type='checkbox' name='confirmed' value='1'" . _checkboxActivate($query['confirmed']) . " /> " . $_lang['admin.content.form.confirmed'] . "</label>" : '') . "\n      <label><input type='checkbox' name='comments' value='1'" . _checkboxActivate($query['comments']) . " /> " . $_lang['admin.content.form.comments'] . "</label>\n      <label><input type='checkbox' name='commentslocked' value='1'" . _checkboxActivate($query['commentslocked']) . " /> " . $_lang['admin.content.form.commentslocked'] . "</label>\n      <label><input type='checkbox' name='rateon' value='1'" . _checkboxActivate($query['rateon']) . " /> " . $_lang['admin.content.form.artrate'] . "</label>\n      <label><input type='checkbox' name='showinfo' value='1'" . _checkboxActivate($query['showinfo']) . " /> " . $_lang['admin.content.form.showinfo'] . "</label>\n      " . (!$new ? "<label><input type='checkbox' name='resetrate' value='1' /> " . $_lang['admin.content.form.resetartrate'] . " <small>(" . $rate . ")</small></label>" : '') . "\n      " . (!$new ? "<label><input type='checkbox' name='delcomments' value='1' /> " . $_lang['admin.content.form.delcomments'] . " <small>(" . DB::result(DB::query("SELECT COUNT(id) FROM `" . _mysql_prefix . "-posts` WHERE home=" . $query['id'] . " AND type=2"), 0) . ")</small></label>" : '') . "\n      " . (!$new ? "<label><input type='checkbox' name='resetread' value='1' /> " . $_lang['admin.content.form.resetartread'] . " <small>(" . $readed_counter . ")</small></label>" : '') . "\n      </p>\n\n      <h2>" . $_lang['admin.content.form.infobox'] . "</h2>\n      <div id='infobox-wrapper'>\n        <textarea name='infobox' rows='10' cols='20' class='codemirror'>" . _htmlStr($query['infobox']) . "</textarea>\n      </div>\n\n      </div>\n      </div>\n    </td>\n  </tr>\n  </table>\n\n</td>\n</tr>\n\n<tr id='time-cell'>\n<td class='rpad'><strong>" . $_lang['article.posted'] . "</strong></td>\n<td>" . _editTime('time', $query['time'], true, $new) . "</td>\n</tr>\n\n<tr>\n<td></td>\n<td id='ae-lastrow'><br /><input type='submit' value='" . $_lang[$submittext] . "' />\n" . (!$new ? "\n&nbsp;&nbsp;\n<span class='customsettings'><a href='index.php?p=content-articles-delete&amp;id=" . $query['id'] . "&amp;returnid=" . $query['home1'] . "&amp;returnpage=1'><span><img src='images/icons/delete.png' alt='del' class='icon' />" . $_lang['global.delete'] . "</span></a></span>&nbsp;&nbsp;\n<span class='customsettings'><small>" . $_lang['admin.content.form.thisid'] . " " . $query['id'] . "</small></span>\n" : '') . "\n\n</td>\n</tr>\n\n</table>\n\n" . _xsrfProtect() . "</form>\n\n";
} else {
    $output .= "<a href='index.php?p=content-articles' class='backlink'>&lt; " . $_lang['global.return'] . "</a>\n<h1>" . $_lang['admin.content.articles.edit.title'] . "</h1>\n" . _formMessage(3, $_lang['global.badinput']);
}
    $images_forms = array();
    if (DB::size($images) != 0) {
        // sestaveni formularu
        while ($image = DB::row($images)) {
            // kod nahledu
            $preview = _galleryImage($image, "1", $galdata['var4'], $galdata['var3']);
            // kod formulare
            $images_forms[] .= "\n<table>\n\n<tr>\n<td class='rpad'><strong>" . $_lang['admin.content.form.title'] . "</strong></td>\n<td><input type='text' name='i" . $image['id'] . "_title' class='inputmedium' value='" . $image['title'] . "' maxlength='64' /></td>\n</tr>\n\n<tr>\n<td class='rpad'><strong>" . $_lang['admin.content.form.ord'] . "</strong></td>\n<td><input type='text' name='i" . $image['id'] . "_ord' class='inputmedium' value='" . $image['ord'] . "' /></td>\n</tr>\n\n" . (!$image['in_storage'] ? "<tr>\n<td class='rpad'><strong>" . $_lang['admin.content.manageimgs.prev'] . "</strong></td>\n<td><input type='hidden' name='i" . $image['id'] . "_prevtrigger' value='1' /><input type='text' name='i" . $image['id'] . "_prev' class='inputsmall' value='" . $image['prev'] . "'" . _inputDisable($image['prev'] != "") . " />&nbsp;&nbsp;<label><input type='checkbox' name='i" . $image['id'] . "_autoprev' value='1' onclick=\"_sysDisableField(checked, 'editform', 'i" . $image['id'] . "_prev');\"" . _checkboxActivate($image['prev'] == "") . " /> " . $_lang['admin.content.manageimgs.autoprev'] . "</label></td>\n</tr>\n\n<tr>\n<td class='rpad'><strong>" . $_lang['admin.content.manageimgs.full'] . "</strong></td>\n<td><input type='text' name='i" . $image['id'] . "_full' class='inputmedium' value='" . $image['full'] . "' /></td>\n</tr>" : '') . "\n\n<tr class='valign-top'>\n<td class='rpad'><strong>" . $_lang['global.preview'] . "</strong></td>\n<td>" . $preview . "<br /><br /><a href='" . _xsrfLink("index.php?p=content-manageimgs&amp;g=" . $g . "&amp;page=" . $s . "&amp;del=" . $image['id']) . "' onclick='return _sysConfirm();'><img src='images/icons/delete.png' alt='del' class='icon' />" . $_lang['admin.content.manageimgs.delete'] . "</a></td>\n</tr>\n\n</table>\n    ";
        }
        // sestaveni tabulky formularu po dvou
        $output .= "\n<table id='gallery-edittable'>";
        $count = count($images_forms);
        for ($i = 0; $i < $count; $i += 2) {
            if (isset($images_forms[$i])) {
                $output .= "<tr><td" . (0 === $i % 2 && !isset($images_forms[$i + 1]) && 1 !== $count ? ' colspan="2"' : '') . " class='gallery-edittable-td'>\n" . $images_forms[$i] . "\n</td>\n";
                if (isset($images_forms[$i + 1])) {
                    $output .= "<td class='gallery-edittable-td'>\n" . $images_forms[$i + 1] . "\n</td></tr>\n";
                } else {
                    $output .= '</tr>' . _nl;
                }
            }
        }
        $output .= '</table>';
        $output .= "<input type='submit' value='" . $_lang['admin.content.manageimgs.savechanges'] . "' class='gallery-savebutton' />\n" . $paging[0];
    } else {
        $output .= '<p>' . $_lang['global.nokit'] . '</p>';
    }
    $output .= "\n" . _xsrfProtect() . "</form>\n</fieldset>\n\n\n<a id='func'></a>\n<fieldset class='hs_fieldset'>\n<legend><a href='#'>" . $_lang['admin.content.manageimgs.moveallords'] . "</a></legend>\n\n<form class='cform' action='index.php?p=content-manageimgs&amp;g=" . $g . "&amp;page=" . $s . "' method='post'>\n<input type='hidden' name='xaction' value='2' />\n<select name='moveaction'><option value='1'>" . $_lang['admin.content.move.choice1'] . "</option><option value='2'>" . $_lang['admin.content.move.choice2'] . "</option></select>&nbsp;\n" . $_lang['admin.content.move.text1'] . "&nbsp;\n<select name='zonedir'><option value='1'>" . $_lang['admin.content.move.choice3'] . "</option><option value='2'>" . $_lang['admin.content.move.choice4'] . "</option></select>&nbsp;\n" . $_lang['admin.content.move.text2'] . "&nbsp;\n<input type='text' name='zone' value='1' class='inputmini' maxlength='5' />&nbsp;,\n" . $_lang['admin.content.move.text3'] . "&nbsp;\n<input type='text' name='offset' value='1' class='inputmini' maxlength='5' />.&nbsp;\n<input type='submit' value='" . $_lang['global.do'] . "' onclick='return _sysConfirm();' />\n" . _xsrfProtect() . "</form>\n\n<form class='cform' action='index.php?p=content-manageimgs&amp;g=" . $g . "&amp;page=" . $s . "' method='post'>\n<input type='hidden' name='xaction' value='3' />\n" . $_lang['admin.content.manageimgs.moveallords.cleanup'] . " <input type='submit' value='" . $_lang['global.do'] . "' onclick='return _sysConfirm();' />\n" . _xsrfProtect() . "</form>\n\n</fieldset>\n\n<table width='100%'>\n<tr class='valign-top'>\n\n<td width='50%'>\n  <fieldset class='hs_fieldset'>\n  <legend><a href='#'>" . $_lang['admin.content.manageimgs.moveimgs'] . "</a></legend>\n\n  <form class='cform' action='index.php?p=content-manageimgs&amp;g=" . $g . "&amp;page=" . $s . "' method='post'>\n  <input type='hidden' name='xaction' value='5' />\n  " . _admin_rootSelect("newhome", 5, -1, false) . " <input type='submit' value='" . $_lang['global.do'] . "' onclick='return _sysConfirm();' /><br /><br />\n  <label><input type='checkbox' name='moveords' value='1' checked='checked' /> " . $_lang['admin.content.manageimgs.moveords'] . "</label>\n  " . _xsrfProtect() . "</form>\n\n  </fieldset>\n</td>\n\n<td>\n  <fieldset class='hs_fieldset'>\n  <legend><a href='#'>" . $_lang['admin.content.manageimgs.delimgs'] . "</a></legend>\n\n  <form class='cform' action='index.php?p=content-manageimgs&amp;g=" . $g . "&amp;page=" . $s . "' method='post'>\n  <input type='hidden' name='xaction' value='6' />\n  <label><input type='checkbox' name='confirm' value='1' /> " . $_lang['admin.content.manageimgs.delimgs.confirm'] . "</label>&nbsp;&nbsp;<input type='submit' value='" . $_lang['global.do'] . "' onclick='return _sysConfirm();' />\n  " . _xsrfProtect() . "</form>\n\n  </fieldset>\n</td>\n\n</tr>\n</table>\n\n";
} else {
    $output .= _formMessage(3, $_lang['global.badinput']);
}
<?php

/* ---  kontrola jadra  --- */
if (!defined('_core')) {
    exit;
}
/* ---  priprava, kontrola pristupovych prav  --- */
$message = "";
if (!(_loginright_adminsection or _loginright_admincategory or _loginright_adminbook or _loginright_adminseparator or _loginright_admingallery or _loginright_adminintersection or _loginright_adminpluginpage)) {
    $continue = false;
    $output .= _formMessage(3, $_lang['global.accessdenied']);
} else {
    $continue = true;
}
/* ---  akce  --- */
if ($continue && isset($_POST['index'])) {
    DB::query("UPDATE `" . _mysql_prefix . "-settings` SET `val`=" . ($index_id = intval($_POST['index'])) . ' WHERE `var`=\'index_page_id\'');
    $message = _formMessage(1, $_lang['global.done']);
} else {
    $index_id = _index_page_id;
}
/* ---  vystup  --- */
if ($continue) {
    $output .= "<p class='bborder'>" . $_lang['admin.content.setindex.p'] . "</p>" . $message . "\n<form class='cform' action='index.php?p=content-setindex' method='post'>\n" . _admin_rootSelect('index', null, $index_id, false) . "\n<input type='submit' value='" . $_lang['global.do'] . "' />\n" . _xsrfProtect() . "</form>\n";
}
                    $homeid = 2;
                    $homecheck = array(1, 3);
                }
                if ($item['home3'] == $source) {
                    $homeid = 3;
                    $homecheck = array(1, 2);
                }
                DB::query("UPDATE `" . _mysql_prefix . "-articles` SET home" . $homeid . "=" . $target . " WHERE id=" . $item['id']);
                foreach ($homecheck as $hc) {
                    if ($item['home' . $hc] == $target) {
                        if ($hc != 1) {
                            DB::query("UPDATE `" . _mysql_prefix . "-articles` SET home" . $hc . "=-1 WHERE id=" . $item['id']);
                        } else {
                            DB::query("UPDATE `" . _mysql_prefix . "-articles` SET home" . $homeid . "=-1 WHERE id=" . $item['id']);
                        }
                    }
                }
                $counter++;
            }
        } else {
            DB::query("UPDATE `" . _mysql_prefix . "-articles` SET home1=" . $target . ",home2=-1,home3=-1 WHERE home1=" . $source . " OR home2=" . $source . " OR home3=" . $source);
            $counter = DB::affectedRows();
        }
        $message = _formMessage(1, str_replace("*moved*", $counter, $_lang['admin.content.movearts.done']));
    } else {
        $message = _formMessage(2, _eventList($error_log, 'errors'));
    }
}
/* ---  vystup  --- */
$output .= "\n<p class='bborder'>" . $_lang['admin.content.movearts.p'] . "</p>\n" . $message . "\n<form class='cform' action='index.php?p=content-movearts' method='post'>\n" . $_lang['admin.content.movearts.text1'] . " " . _admin_rootSelect("source", 2, -1, false) . " " . $_lang['admin.content.movearts.text2'] . " " . _admin_rootSelect("target", 2, -1, false) . " <input type='submit' value='" . $_lang['global.do'] . "' />\n<br /><br />\n<label><input type='checkbox' name='fullmove' value='1' /> " . $_lang['admin.content.movearts.fullmove'] . "</label>\n" . _xsrfProtect() . "</form>\n";
/* ---  schvaleni zvoleneho clanku  --- */
$message = "";
if (isset($_GET['id'])) {
    DB::query("UPDATE `" . _mysql_prefix . "-articles` SET confirmed=1 WHERE id=" . intval($_GET['id']));
    $message = _formMessage(1, $_lang['global.done']);
}
/* ---  vystup  --- */
// nacteni filtru
if (isset($_GET['limit'])) {
    $catlimit = intval($_GET['limit']);
    $condplus = " AND (art.home1=" . $catlimit . " OR art.home2=" . $catlimit . " OR art.home3=" . $catlimit . ")";
} else {
    $catlimit = -1;
    $condplus = "";
}
$output .= "\n<p class='bborder'>" . $_lang['admin.content.confirm.p'] . "</p>\n\n<form class='cform' action='index.php' method='get'>\n<input type='hidden' name='p' value='content-confirm' />\n" . $_lang['admin.content.confirm.filter'] . ": " . _admin_rootSelect("limit", 2, $catlimit, true, $_lang['global.all']) . " <input type='submit' value='" . $_lang['global.do'] . "' />\n</form>\n<div class='hr'><hr /></div>\n\n" . $message . "\n\n<table class='list'>\n<thead><tr><td>" . $_lang['global.article'] . "</td><td>" . $_lang['article.category'] . "</td><td>" . $_lang['article.posted'] . "</td><td>" . $_lang['article.author'] . "</td><td>" . $_lang['global.action'] . "</td></tr></thead>\n<tbody>";
// vypis
$query = DB::query("SELECT art.id,art.title,art.title_seo,art.home1,art.home2,art.home3,art.author,art.time,art.visible,art.confirmed,art.public,cat.title_seo AS cat_title_seo FROM `" . _mysql_prefix . "-articles` AS art JOIN `" . _mysql_prefix . "-root` AS cat ON(cat.id=art.home1) WHERE art.confirmed=0" . $condplus . " ORDER BY art.time DESC");
if (DB::size($query) != 0) {
    while ($item = DB::row($query)) {
        // seznam kategorii
        $cats = "";
        for ($i = 1; $i <= 3; $i++) {
            if ($item['home' . $i] != -1) {
                $hometitle = DB::query_row("SELECT title FROM `" . _mysql_prefix . "-root` WHERE id=" . $item['home' . $i]);
                $cats .= $hometitle['title'];
            }
            if ($i != 3 and $item['home' . ($i + 1)] != -1) {
                $cats .= ", ";
            }
        }
                    $paramvar = "new_" . $param;
                    $paramval = ${$paramvar};
                    if ($paramval == 0 or $paramval == 1) {
                        DB::query("UPDATE `" . _mysql_prefix . "-articles` SET " . $param . "=" . $paramval . " WHERE id=" . $item['id']);
                    }
                }
            }
            $message = _formMessage(1, $_lang['global.done']);
        }
    } else {
        $message = _formMessage(2, $_lang['admin.content.artfilter.f1.noresult']);
    }
}
/* ---  vystup  --- */
$output .= "\n<p class='bborder'>" . $_lang['admin.content.artfilter.p'] . "</p>\n" . $message . "\n<form action='index.php?p=content-artfilter' method='post'>\n";
if (!$infopage) {
    $output .= "\n<h2>" . $_lang['admin.content.artfilter.f1.title'] . "</h2>\n<p>" . $_lang['admin.content.artfilter.f1.p'] . "</p>\n<table>\n\n<tr>\n<td class='rpad'><strong>" . $_lang['article.category'] . "</strong></td>\n<td>" . _admin_rootSelect("category", 2, -1, true, $_lang['global.any2']) . "</td>\n</tr>\n\n<tr>\n<td class='rpad'><strong>" . $_lang['article.author'] . "</strong></td>\n<td>" . _admin_authorSelect("author", -1, "adminart=1", "selectmedium", $_lang['global.any']) . "</td>\n</tr>\n\n<tr>\n<td class='rpad'><strong>" . $_lang['article.posted'] . "</strong></td>\n<td>\n\n<select name='ba'>\n<option value='0'>" . $_lang['admin.content.artfilter.f1.time0'] . "</option>\n<option value='1'>" . $_lang['admin.content.artfilter.f1.time1'] . "</option>\n<option value='2'>" . $_lang['admin.content.artfilter.f1.time2'] . "</option>\n<option value='3'>" . $_lang['admin.content.artfilter.f1.time3'] . "</option>\n</select>\n\n" . _editTime('time', -1) . "\n\n</td>\n</tr>\n\n<tr class='valign-top'>\n<td class='rpad'><strong>" . $_lang['admin.content.form.settings'] . "</strong></td>\n<td>\n" . _admin_boolSelect("public") . $_lang['admin.content.form.public'] . "<br />\n" . _admin_boolSelect("visible") . $_lang['admin.content.form.visible'] . "<br />\n" . _admin_boolSelect("confirmed") . $_lang['admin.content.form.confirmed'] . "<br />\n" . _admin_boolSelect("comments") . $_lang['admin.content.form.comments'] . "<br />\n" . _admin_boolSelect("rateon") . $_lang['admin.content.form.artrate'] . "<br />\n" . _admin_boolSelect("showinfo") . $_lang['admin.content.form.showinfo'] . "\n</td>\n</tr>\n\n</table>\n\n<br /><div class='hr'><hr /></div><br />\n\n<h2>" . $_lang['admin.content.artfilter.f2.title'] . "</h2>\n<p>" . $_lang['admin.content.artfilter.f2.p'] . "</p>\n<table>\n\n<tr>\n<td class='rpad'><strong>" . $_lang['article.category'] . "</strong></td>\n<td>" . _admin_rootSelect("new_category", 2, -1, true, $_lang['global.nochange']) . "</td>\n</tr>\n\n<tr>\n<td class='rpad'><strong>" . $_lang['article.author'] . "</strong></td>\n<td>" . _admin_authorSelect("new_author", -1, "adminart=1", "selectmedium", $_lang['global.nochange']) . "</td>\n</tr>\n\n<tr class='valign-top'>\n<td class='rpad'><strong>" . $_lang['admin.content.form.settings'] . "</strong></td>\n<td>\n" . _admin_boolSelect("new_public", true) . $_lang['admin.content.form.public'] . "<br />\n" . _admin_boolSelect("new_visible", true) . $_lang['admin.content.form.visible'] . "<br />\n" . (_loginright_adminconfirm ? _admin_boolSelect("new_confirmed", true) . $_lang['admin.content.form.confirmed'] . "<br />" : '') . "\n" . _admin_boolSelect("new_comments", true) . $_lang['admin.content.form.comments'] . "<br />\n" . _admin_boolSelect("new_rateon", true) . $_lang['admin.content.form.artrate'] . "<br />\n" . _admin_boolSelect("new_showinfo", true) . $_lang['admin.content.form.showinfo'] . "\n</td>\n</tr>\n\n<tr class='valign-top'>\n<td class='rpad'><strong>" . $_lang['global.action'] . "</strong></td>\n<td>\n<label><input type='checkbox' name='new_delete' value='1' /> " . $_lang['global.delete'] . "</label><br />\n<label><input type='checkbox' name='new_resetrate' value='1' /> " . $_lang['admin.content.form.resetartrate'] . "</label><br />\n<label><input type='checkbox' name='new_delcomments' value='1' /> " . $_lang['admin.content.form.delcomments'] . "</label><br />\n<label><input type='checkbox' name='new_resetread' value='1' /> " . $_lang['admin.content.form.resetartread'] . "</label>\n</td>\n</tr>\n\n</table>\n\n<br /><div class='hr'><hr /></div><br />\n\n<input type='submit' value='" . $_lang['mod.search.submit'] . "' />\n";
} else {
    $output .= _getPostdata() . "\n<input type='hidden' name='_process' value='1' />\n" . _formMessage(1, str_replace("*found*", $found, $_lang['admin.content.artfilter.f1.infotext'])) . "\n<ul>";
    $counter = 0;
    while ($r = DB::row($query)) {
        if ($counter >= 30) {
            $output .= "<li><em>... (+" . ($found - $counter) . ")</em></li>\n";
            break;
        }
        $output .= "<li><a href='" . _indexroot . _linkArticle($r['id'], $r['title_seo'], $r['cat_title_seo']) . "' target='_blank'>" . $r['title'] . "</a></li>\n";
        ++$counter;
    }
    $output .= "</ul>\n<input type='submit' value='" . $_lang['global.do2'] . "' />&nbsp;&nbsp;<a href='index.php?p=content-artfilter'>" . $_lang['global.cancel'] . "</a>\n";
}
$output .= _xsrfProtect() . "</form>";
Esempio n. 7
0
             $action_submit = "global.insert";
             $action_acbonus = "";
             $action_title = "admin.fman.menu.addtogallery";
             // load and check images
             $images_load = _getPostdata(true, "f");
             $images = "";
             $counter = 0;
             foreach ($images_load as $images_load_image) {
                 $images_load_image = pathinfo(base64_decode($images_load_image[1]));
                 if (isset($images_load_image['extension']) and in_array(mb_strtolower($images_load_image['extension']), SL::$imageExt)) {
                     $images .= "<input type='hidden' name='f" . $counter . "' value='" . base64_encode($images_load_image['basename']) . "' />\n";
                     $counter++;
                 }
             }
             if ($counter != 0) {
                 $action_code = "\n      <tr>\n      <td class='rpad'><strong>" . $_lang['admin.fman.addtogallery.galllery'] . "</strong></td>\n      <td>\n      " . _admin_rootSelect("gallery", 5, -1, false, null, null) . "\n      " . $images . "\n      </td>\n      </tr>\n\n      <tr>\n      <td class='rpad'><strong>" . $_lang['admin.fman.addtogallery.counter'] . "</strong></td>\n      <td>" . $counter . "</td>\n      </tr>\n      ";
             } else {
                 $message = _formMessage(2, $_lang['admin.fman.addtogallery.noimages']);
             }
             break;
     }
     // dokonceni kodu
     if ($action_code != "") {
         $action_code = "\n<div id='fman-action'>\n<h2>" . $_lang[$action_title] . "</h2>\n<form action='" . $url . $action_acbonus . "'" . (null !== $action_form_class ? " class='" . $action_form_class . "'" : '') . " method='post' enctype='multipart/form-data'>\n<input type='hidden' name='action' value='" . _htmlStr($_GET['a']) . "' />\n<table class='formtable'>\n" . $action_code . "\n\n  <tr>\n  <td></td>\n  <td><input type='submit' value='" . $_lang[$action_submit] . "' />&nbsp;&nbsp;<a href='" . $url . "'>" . $_lang['global.cancel'] . "</a></td>\n  </tr>\n\n</table>\n" . _xsrfProtect() . "</form>\n</div>\n";
     }
 }
 /* ---  vystup  --- */
 // menu, formular akce
 $output .= $message . "\n    <a name='top'></a>\n    <p class='fman-menu'>\n    <a href='" . $url . "&amp;a=upload'>" . $_lang['admin.fman.menu.upload'] . "</a>\n    <a href='" . $url . "&amp;a=edit'>" . $_lang['admin.fman.menu.createfile'] . "</a>\n    <a href='" . $url . "&amp;a=newfolder'>" . $_lang['admin.fman.menu.createfolder'] . "</a>\n    " . ((_loginright_admingallery and _loginright_admincontent) ? "<a href='#' onclick='return _sysFmanAddSelectedToGallery()'>" . $_lang['admin.fman.menu.addtogallery'] . "</a>" : '') . "\n    <a href='" . $url_base . "dir=" . urlencode($defdir) . "'>" . $_lang['admin.fman.menu.home'] . "</a>\n    <strong>" . $_lang['admin.fman.currentdir'] . ":</strong> /" . mb_substr($dir, mb_strlen(_indexroot)) . "\n    </p>\n\n    " . $action_code;
 // vypis
 $output .= "\n    <form action='" . $url . "' method='post' name='filelist'>\n    <input type='hidden' name='action' value='-1' />\n    <input type='hidden' name='param' value='-1' />\n    <table id='fman-list'>\n    <tr><td width='60%'></td><td width='15%'></td><td width='25%'></td></tr>\n    ";