Пример #1
0
$id = isset($_GET['id']) ? filter_input(INPUT_GET, 'id', FILTER_VALIDATE_INT, FILTER_NULL_ON_FAILURE) : null;
$uppdate = isset($_POST['uppdate']) ? true : false;
$title = isset($_POST['title']) ? strip_tags($_POST['title']) : null;
$type = isset($_POST['type']) ? strip_tags($_POST['type']) : null;
$acronym = isset($_SESSION['user']) ? $_SESSION['user']->acronym : null;
$cont = new CContent($urbax['database']);
if ($acronym == null) {
    echo <<<EOD
<div style=" border: 1px solid #777; border-radius: 3px; padding: 10px 20px;">
    <h2 style="margin-top: 0;">Du måste vara inloggad för att få redigera innehåll...</h2>
    <p><a href="?p=clogin" class="aButton">Logga in</a></p>
</div>
EOD;
} else {
    //Do we have a valid id-value?
    if (!$cont->validContentId($id)) {
        $dbc = new CDatabase($urbax['database']);
        $resultset = $dbc->ExecuteSelectQueryAndFetchAll('SELECT id, title FROM Content WHERE deleted IS NULL');
        echo "<h2>Välj post att redigera:</h2>";
        echo "<table class='table'>";
        echo "<tr><th style='width:100px;'></th><th>Id</th><th>Titel</th></tr>";
        foreach ($resultset as $res) {
            echo "<tr><td><a href='?p=contentedit&amp;id={$res->id}' class='aButton' style='width:50px; margin:0 auto; display:block;'>Editera</a></td><td>{$res->id}</td><td>{$res->title}</td></tr>";
        }
        echo "</table>";
    } else {
        if ($uppdate) {
            // Get parameters
            $id = isset($_POST['id']) ? strip_tags($_POST['id']) : (isset($_GET['id']) ? strip_tags($_GET['id']) : null);
            $title = isset($_POST['title']) ? $_POST['title'] : null;
            $slug = isset($_POST['slug']) ? $_POST['slug'] : null;