Пример #1
0
         $message = str_replace('dd/mm', $date_error, $lang['xs_news_invalid_date']) . '<br /><br />' . sprintf($lang['n_click_return_newslist'], '<a href="' . append_sid('admin_xs_news.' . PHP_EXT) . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_admin_index'], '<a href="' . append_sid('index.' . PHP_EXT . '?pane=right') . '">', '</a>');
         message_die(GENERAL_MESSAGE, $message);
     }
     $news_date_posting = gmmktime(gmdate('H'), gmdate('i'), gmdate('s'), $date_month, $date_day, $date_split[2]);
     $sql = "UPDATE " . XS_NEWS_TABLE . "\n\t\t\t\tSET news_date = " . $news_date_posting . ", news_text = '" . $db->sql_escape($news_item) . "', news_display = " . intval($_POST['news_display']) . ", news_smilies = " . intval($_POST['news_smilies']) . "\n\t\t\t\tWHERE news_id = " . intval($_POST['id']);
     $result = $db->sql_query($sql);
     $db->clear_cache('xs_');
     $message = $lang['n_news_updated'] . '<br /><br />' . sprintf($lang['n_click_return_newslist'], '<a href="' . append_sid('admin_xs_news.' . PHP_EXT) . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_admin_index'], '<a href="' . append_sid('index.' . PHP_EXT . '?pane=right') . '">', '</a>');
     message_die(GENERAL_MESSAGE, $message);
     break;
 case 'deletenews':
     // Show form to delete a news item
     $news_id = intval($_GET['id']);
     $buttonvalue = $lang['Delete'];
     $newmode = 'deletenews';
     $news_info = xsm_get_info('news', $news_id);
     $name = $news_info['n_news_item'];
     if ($confirm) {
         $sql = "DELETE FROM " . XS_NEWS_TABLE . "\n\t\t\t\t\tWHERE news_id = {$news_id}";
         $result = $db->sql_query($sql);
         $db->clear_cache('xs_');
         $message = $lang['n_news_updated'] . '<br /><br />' . sprintf($lang['n_click_return_newslist'], '<a href="' . append_sid('admin_xs_news.' . PHP_EXT) . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_admin_index'], '<a href="' . append_sid('index.' . PHP_EXT . '?pane=right') . '">', '</a>');
         message_die(GENERAL_MESSAGE, $message);
     } else {
         // Set template files
         $template->set_filenames(array('confirm' => ADM_TPL . 'confirm_body.tpl'));
         //$template->set_filenames(array('confirm' => XS_TPL_PATH . 'news_confirm_body.tpl'));
         $s_hidden_fields = '<input type="hidden" name="mode" value="' . $newmode . '" /><input type="hidden" name="id" value="' . $news_id . '" />';
         $template->assign_vars(array('MESSAGE_TITLE' => $lang['Confirm'], 'MESSAGE_TEXT' => sprintf($lang['n_confirm_delete_news'], $name), 'L_YES' => $lang['Yes'], 'L_NO' => $lang['No'], 'S_CONFIRM_ACTION' => append_sid('admin_xs_news.' . PHP_EXT . '?id=' . $news_id), 'S_HIDDEN_FIELDS' => $s_hidden_fields));
         $template->pparse('confirm');
     }
Пример #2
0
     break;
 case 'modxml':
     // Modify a news ticker in the DB
     $xml_feed = xsm_prepare_message($xml_feed);
     $sql = "UPDATE " . XS_NEWS_XML_TABLE . "\n\t\t\t\tSET xml_title = '" . $db->sql_escape(request_post_var('xml_title', '', true)) . "', xml_show = " . intval($_POST['xml_show']) . ", xml_feed = '" . $db->sql_escape($xml_feed) . "', xml_is_feed = '" . intval($_POST['xml_is_feed']) . "', xml_width = '" . $db->sql_escape(request_post_var('xml_width', '')) . "', xml_height = '" . $db->sql_escape(request_post_var('xml_height', '')) . "', xml_font = '" . $db->sql_escape(request_post_var('xml_font', '')) . "', xml_speed = '" . $db->sql_escape(request_post_var('xml_speed', '')) . "', xml_direction = " . intval($_POST['xml_direction']) . "\n\t\t\t\tWHERE xml_id = " . intval($_POST['id']);
     $result = $db->sql_query($sql);
     $db->clear_cache('xs_');
     $message = $lang['n_xml_news_updated'] . '<br /><br />' . sprintf($lang['n_xml_click_return_newslist'], '<a href="' . append_sid('admin_xs_news_xml.' . PHP_EXT) . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_admin_index'], '<a href="' . append_sid('index.' . PHP_EXT . '?pane=right') . '">', '</a>');
     message_die(GENERAL_MESSAGE, $message);
     break;
 case 'deletexml':
     // Show form to delete a news item
     $xml_id = request_var('id', 0);
     $buttonvalue = $lang['Delete'];
     $newmode = 'deletexml';
     $xml_info = xsm_get_info('ticker', $xml_id);
     $name = $news_info['n_news_item'];
     if ($confirm) {
         $sql = "DELETE FROM " . XS_NEWS_XML_TABLE . "\n\t\t\t\t\tWHERE xml_id = {$xml_id}";
         $result = $db->sql_query($sql);
         $db->clear_cache('xs_');
         $message = $lang['n_news_updated'] . '<br /><br />' . sprintf($lang['n_click_return_newslist'], '<a href="' . append_sid('admin_xs_news_xml.' . PHP_EXT) . '">', '</a>') . '<br /><br />' . sprintf($lang['Click_return_admin_index'], '<a href="' . append_sid('index.' . PHP_EXT . '?pane=right') . '">', '</a>');
         message_die(GENERAL_MESSAGE, $message);
     } else {
         // Set template files
         $template->set_filenames(array('confirm' => ADM_TPL . 'confirm_body.tpl'));
         //$template->set_filenames(array('confirm' =>  XS_TPL_PATH . 'news_confirm_body.tpl'));
         $s_hidden_fields = '<input type="hidden" name="mode" value="' . $newmode . '" /><input type="hidden" name="id" value="' . $xml_id . '" />';
         $template->assign_vars(array('MESSAGE_TITLE' => $lang['Confirm'], 'MESSAGE_TEXT' => sprintf($lang['n_confirm_delete_news'], $name), 'L_YES' => $lang['Yes'], 'L_NO' => $lang['No'], 'S_CONFIRM_ACTION' => append_sid('admin_xs_news_xml.' . PHP_EXT . '?id=' . $xml_id), 'S_HIDDEN_FIELDS' => $s_hidden_fields));
         $template->pparse('confirm');
     }