$out = array(); require 'header.php'; if (isGET('draft') && isAdmin() && isValidEntry('drafts', GET('draft'))) { $draft = GET('draft'); if (check('title') && check('content') && check('id')) { $post = newEntry(cleanMagic($_POST['id'])); $postEntry['title'] = clean(cleanMagic($_POST['title'])); $postEntry['content'] = cleanMagic($_POST['content']); $postEntry['locked'] = $_POST['locked'] === 'yes'; $addedTags = $_POST['tags'] ? $_POST['tags'] : array(); $postEntry['tags'] = $addedTags; saveEntry('posts', $post, $postEntry); foreach ($addedTags as $tag) { $tagEntry = readEntry('tags', $tag); $tagEntry['posts'][$post] = $post; saveEntry('tags', $tag, $tagEntry); } deleteEntry('drafts', $draft); redirect('view.php?post=' . $post); } else { $draftEntry = readEntry('drafts', $draft); $tagOptions = array(); foreach (listEntry('tags') as $tag) { $tagEntry = readEntry('tags', $tag); $tagOptions[$tag] = $tagEntry['name']; } $out['title'] = $lang['publishPost'] . ': ' . $draftEntry['title']; $out['content'] .= '<form action="./publish.php?draft=' . $draft . '" method="post"> <p>' . text('title', $draftEntry['title']) . '</p> <p>' . text('id', substr($draft, 20)) . '</p> <p>' . textarea('content', clean($draftEntry['content'])) . '</p>
<?php require 'include/flatfile.inc.php'; require 'include/manage.inc.php'; for ($i = 1; $i <= 29; $i++) { saveEntry('answers', $i, $data); }
<?php include_once "header.php"; include_once "db.php"; include_once "sourlib.php"; $id = $_GET['id']; $id = mysql_real_escape_string($id); $action = $_GET['action']; $action = mysql_real_escape_string($action); $catid = $_GET['catid']; $catid = mysql_real_escape_string($catid); if (checkCookie()) { if (preg_match("/^save\$/", $action)) { saveEntry($id); } elseif (preg_match("/^unread\$/", $action)) { markEntryUnread($id); } else { markEntryRead($id); } printEntrybar($id, $catid); } showEntry($id); ?> </body> </html>
} } return 1000 * (microtime_float() - (double) $start_time); } } $admin_req = isset($_REQUEST['perform']) ? strtolower($_REQUEST['perform']) : null; $login_status = getLoginState($get); if ($login_status["status"] !== true) { $login_status["error"] = "Invalid user"; $login_status["human_error"] = "You're not logged in as a valid user to edit this. Please log in and try again."; returnAjax($login_status); } switch ($admin_req) { # Stuff case "save": returnAjax(saveEntry($_REQUEST)); break; case "new": returnAjax(newEntry($_REQUEST)); break; case "delete": returnAjax(deleteEntry($_REQUEST)); break; default: returnAjax(getLoginState($_REQUEST, true)); } function saveEntry($get) { /*** * Save a new taxon entry ***/
if (isGET('comment') && (isAdmin() || isAuthor(GET('comment')))) { $comment = GET('comment'); $commentEntry = readEntry('comments', $comment); deleteEntry('comments', $comment); $postEntry = readEntry('posts', $commentEntry['post']); unset($postEntry['comments'][$comment]); saveEntry('posts', $commentEntry['post'], $postEntry); redirect('view.php?post=' . $commentEntry['post'] . '#comments'); } else { if (isGET('link') && isAdmin()) { deleteEntry('links', GET('link')); home(); } else { if (isGET('tag') && isAdmin()) { $tag = GET('tag'); $tagEntry = readEntry('tags', $tag); deleteEntry('tags', $tag); foreach ($tagEntry['posts'] as $post) { $postEntry = readEntry('posts', $post); $postEntry['tags'] = array_diff($postEntry['tags'], array($tag)); saveEntry('posts', $post, $postEntry); } home(); } else { home(); } } } } } require 'templates/page.php';
saveEntry('links', $link, $linkEntry); home(); } else { $out['title'] = $lang['editLink'] . ': ' . $linkEntry['name']; $out['content'] .= '<form action="./edit.php?link=' . $link . '" method="post"> <p>' . text('name', $linkEntry['name']) . '</p> <p>' . text('url', $linkEntry['url']) . '</p> <p>' . submitAdmin($lang['confirm']) . '</p> </form>'; } } else { if (isGET('tag') && isAdmin() && isValidEntry('tags', GET('tag'))) { $tagEntry = readEntry('tags', GET('tag')); if (check('name')) { $tagEntry['name'] = clean(cleanMagic($_POST['name'])); saveEntry('tags', GET('tag'), $tagEntry); home(); } else { $out['title'] = $lang['editTag'] . ': ' . $tagEntry['name']; $out['content'] .= '<form action="./edit.php?tag=' . GET('tag') . '" method="post"> <p>' . text('name', $tagEntry['name']) . '</p> <p>' . submitAdmin($lang['confirm']) . '</p> </form>'; } } else { home(); } } } } }
saveEntry('links', newEntry(), $linkEntry); home(); } else { $out['title'] = $lang['addLink']; $out['content'] .= '<form action="./add.php?link" method="post"> <p>' . text('name') . '</p> <p>' . text('url') . '</p> <p>' . submitAdmin($lang['confirm']) . '</p> </form>'; } } else { if (isGET('tag') && isAdmin()) { if (check('name')) { $tagEntry['name'] = clean(cleanMagic($_POST['name'])); $tagEntry['posts'] = array(); saveEntry('tags', newEntry(), $tagEntry); home(); } else { $out['title'] = $lang['addTag']; $out['content'] .= '<form action="./add.php?tag" method="post"> <p>' . text('name') . '</p> <p>' . submitAdmin($lang['confirm']) . '</p> </form>'; } } else { home(); } } } } require 'templates/page.php';
$_SESSION['admin'] = true; } } if ($_SESSION['admin']) { if ($_POST['submit']){ $vopr = $_POST['vopradd']; $voprimg = $_POST['voprimg']; $type = 'questions'; $name = file_newname_count('data/questions/', ''); $questdata['name'] = $vopr; $questdata['img'] = $voprimg; saveEntry($type, $name[1], $questdata); echo 'Успешно добавлен '.$name[1].' вопрос'; ?> <div class="row"> <div class="col-md-12"> <center> <div style="width:300px"> <a href="#" id="add">Добавить</a> | <a href="#" id="remove">Удалить</a> | <a href="#" id="reset">Сбросить</a> <form action="addques.php" method="post"> <br> <p> <input class="form-control" type="text" name="vopradd" placeholder="Вопрос..." /> <input class="form-control" type="text" name="voprimg" placeholder="Картинка к вопросу URL..." /> </p> <p><input type="submit" class="btn btn-lg btn-success" name="submit" value="Проверить!"></p>