<?php
/*---------------------------------------------------+
| PHP-Fusion 6 Content Management System
+----------------------------------------------------+
| Copyright (c) 2005 Nick Jones
| http://www.php-fusion.co.uk/
+----------------------------------------------------+
| Released under the terms & conditions of v2 of the
| GNU General Public License. For details refer to
| the included gpl.txt file or visit http://gnu.org
+----------------------------------------------------*/
require_once "../maincore.php";
require_once BASEDIR."subheader.php";
require_once ADMIN."navigation.php";
include LOCALE.LOCALESET."admin/panels.php";

if (!checkrights("P")) fallback("../index.php");
if (isset($panel_id) && !isNum($panel_id)) fallback(FUSION_SELF);

$temp = opendir(INFUSIONS);
while ($folder = readdir($temp)) {
	if (!in_array($folder, array(".","..")) && strstr($folder, "_panel")) {
		if (is_dir(INFUSIONS.$folder)) $panel_list[] = $folder;
	}
}
closedir($temp); sort($panel_list); array_unshift($panel_list, "none");

if (isset($_POST['save'])) {
	$error = "";
	$panel_name = stripinput($_POST['panel_name']);
	if ($panel_name == "") $error .= $locale['470']."<br>";
	if ($_POST['panel_filename'] == "none") {
		$panel_filename = "";
		$panel_content = addslash($_POST['panel_content']);
		$panel_type = "php";
	} else {
		$panel_type = "file";
		$panel_content = "";
	}
	$panel_access = $_POST['panel_access'];
	if (isset($panel_id)) {
		if ($panel_name != "") {
			$data = dbarray(dbquery("SELECT * FROM ".$db_prefix."panels WHERE panel_id='$panel_id'"));
			if ($panel_name != $data['panel_name']) {
				$result = dbquery("SELECT * FROM ".$db_prefix."panels WHERE panel_name='$panel_name'");
				if (dbrows($result) != 0) $error .= $locale['471']."<br>";
			}
		}
		if ($panel_type == "php" && $panel_content == "") $error .= $locale['472']."<br>";
		if ($error == "") {
			$result = dbquery("UPDATE ".$db_prefix."panels SET panel_name='$panel_name', panel_filename='$panel_filename', panel_content='$panel_content', panel_access='$panel_access' WHERE panel_id='$panel_id'");
		}
		opentable($locale['480']);
		echo "<center><br>\n";
		if ($error != "") {
			echo $locale['481']."<br><br>\n".$error."<br>\n";
		} else {
			echo $locale['482']."<br><br>\n";
		}
		echo "<a href='panels.php'>".$locale['486']."</a><br><br>
<a href='index.php'>".$locale['487']."</a><br><br>
</center>\n";
		closetable();
	} else {
		if ($panel_name != "") {
			$result = dbquery("SELECT * FROM ".$db_prefix."panels WHERE panel_name='$panel_name'");
			if (dbrows($result) != 0) $error .= $locale['471']."<br>";
		}
		if ($panel_type == "php" && $panel_content == "") $error .= $locale['472']."<br>";
		if ($panel_type == "file" && $panel_filename == "none") $error .= $locale['473']."<br>";
		if ($error == "") {
			$result = dbquery("SELECT * FROM ".$db_prefix."panels WHERE panel_side='$panel_side' ORDER BY panel_order DESC LIMIT 1");
			if (dbrows($result) != 0) { $data = dbarray($result); $neworder = $data['panel_order'] + 1; } else { $neworder = 1; }
			$result = dbquery("INSERT INTO ".$db_prefix."panels VALUES('', '$panel_name', '$panel_filename', '$panel_content', '$panel_side', '$neworder', '$panel_type', '$panel_access', '0')");
		}
		opentable($locale['483']);
		echo "<center><br>\n";
		if ($error != "") {
			echo $locale['484']."<br><br>
".$error."<br>\n";
		} else {
			echo $locale['485']."<br><br>\n";
		}
		echo "<a href='panels.php'>".$locale['486']."</a><br><br>
<a href='index.php'>".$locale['487']."</a><br><br>
</center>\n";
		closetable();
	}
} else {
	if (isset($_POST['preview'])) {
		$panel_name = stripinput($_POST['panel_name']);
		$panel_filename = $_POST['panel_filename'];
		$panel_content = $_POST['panel_content'];
		$panel_access = $_POST['panel_access'];
		$panel_side = $_POST['panel_side'];
		$panel_content = stripslash($panel_content);
		opentable($panel_name);
		if ($panel_filename != "none") {
			@include INFUSIONS.$panel_filename."/".$panel_filename.".php";
			$panel_type = "file";
		} else {
			eval($panel_content);
			$panel_type = "php";
		}
		$panel_content = stripinput((QUOTES_GPC ? addslashes($panel_content) : $panel_content));
		closetable();
		tablebreak();
	}
	if (isset($step) && $step == "edit") {
		$result = dbquery("SELECT * FROM ".$db_prefix."panels WHERE panel_id='$panel_id'");
		if (dbrows($result) != 0) {
			$data = dbarray($result);
			$panel_name = $data['panel_name'];
			$panel_filename = $data['panel_filename'];
			$panel_content = stripinput((QUOTES_GPC ? $data['panel_content'] : stripslashes($data['panel_content'])));
			$panel_type = $data['panel_type'];
			$panel_access = $data['panel_access'];
			$panel_side = $data['panel_side'];
		}
	}
	if (isset($panel_id)) {
		$action = FUSION_SELF."?panel_id=$panel_id";
		opentable($locale['450']);
	} else {
		if (!isset($_POST['preview'])) {
			$panel_name = "";
			$panel_filename = "";
			$panel_content = "openside(\"name\");\n"."  echo \"content\";\n"."closeside();";
			$panel_type = "";
			$panel_access = "";
			$panel_side = "";
		}
		$action = FUSION_SELF;
		opentable($locale['451']);
	}
	$user_groups = getusergroups(); $access_opts = "";
	while(list($key, $user_group) = each($user_groups)){
		$sel = ($panel_access == $user_group['0'] ? " selected" : "");
		$access_opts .= "<option value='".$user_group['0']."'$sel>".$user_group['1']."</option>\n";
	}
	echo "<form name='editform' method='post' action='$action'>
<table align='center' cellspacing='0' cellpadding='0'>
<tr>
<td class='tbl'>".$locale['452']."</td>
<td class='tbl'><input type='text' name='panel_name' value='$panel_name' class='textbox' style='width:200px;'></td>
</tr>\n";
	if (isset($panel_id)) {
		if ($panel_type == "file") {
			echo "<tr>
<td class='tbl'>".$locale['453']."</td>
<td class='tbl'><select name='panel_filename' class='textbox' style='width:200px;'>\n";
			for ($i=0;$i < count($panel_list);$i++) {
				echo "<option".($panel_filename == $panel_list[$i] ? " selected" : "").">$panel_list[$i]</option>\n";
			}
			echo "</select>&nbsp;&nbsp;<span class='small2'>".$locale['454']."</span></td>\n</tr>\n";
		}
	} else {
		echo "<tr>
<td class='tbl'>".$locale['453']."</td>
<td class='tbl'><select name='panel_filename' class='textbox' style='width:200px;'>\n";
		for ($i=0;$i < count($panel_list);$i++) {
			echo "<option".($panel_filename == $panel_list[$i] ? " selected" : "").">$panel_list[$i]</option>\n";
		}
		echo "</select>&nbsp;&nbsp;<span class='small2'>".$locale['454']."</span></td>\n</tr>\n";
	}
	if (isset($panel_id)) {
		if ($panel_type == "php") {
			echo "<tr>
<td valign='top' class='tbl'>".$locale['455']."</td>
<td class='tbl'><textarea name='panel_content' cols='95' rows='15' class='textbox'>$panel_content</textarea></td>
</tr>\n";
		}
	} else {
		echo "<tr>
<td valign='top' class='tbl'>".$locale['455']."</td>
<td class='tbl'><textarea name='panel_content' cols='95' rows='15' class='textbox'>$panel_content</textarea></td>
</tr>\n";
	}
	if (!isset($panel_id)) {
		echo "<tr>
<td class='tbl'>".$locale['456']."</td>
<td class='tbl'><select name='panel_side' class='textbox' style='width:150px;'>
<option value='1'".($panel_side == "1" ? " selected" : "").">".$locale['420']."</option>
<option value='2'".($panel_side == "2" ? " selected" : "").">".$locale['421']."</option>
<option value='3'".($panel_side == "3" ? " selected" : "").">".$locale['422']."</option>
</select></td>
</tr>\n";
	}
echo "<tr>
<td class='tbl'>".$locale['457']."</td>
<td class='tbl'><select name='panel_access' class='textbox' style='width:150px;'>
$access_opts</select></td>
</tr>
<tr>
<td align='center' colspan='2' class='tbl'><br>\n";
	if (isset($panel_id)) {
		if ($panel_type == "php") echo "<input type='hidden' name='panel_filename' value='none'>\n";
		echo "<input type='hidden' name='panel_side' value='$panel_side'>\n";
	}
	echo "<input type='submit' name='preview' value='".$locale['458']."' class='button'>
<input type='submit' name='save' value='".$locale['459']."' class='button'></td>
</tr>
</table>
</form>\n";
	closetable();
}

echo "</td>\n";
require_once BASEDIR."footer.php";
?>