source: extensions/AdminTools/include/events.inc.php @ 25654

<?php
defined('ADMINTOOLS_PATH') or die('Hacking attempt!');

function admintools_add_public_controller()
{
  global $MultiView, $conf;

  if (!$MultiView->is_admin())
  {
    return;
  }

  global $template, $page, $user;

  $url_root = get_root_url();

  $tpl_vars = array(
    'U_SITE_ADMIN' => $url_root . 'admin.php?page=',
    'MULTIVIEW' => $MultiView->get_data(),
    'U_SELF' => $MultiView->get_clean_url(true),
    'USER' => $MultiView->get_user(),
    'CURRENT_USERNAME' => $user['id']==$conf['guest_id'] ? l10n('guest') : $user['username'],
    'PWG_TOKEN' => get_pwg_token(),
    );

  // TODO : param to allow owner modification
  if (script_basename() == 'picture')
  {
    global $picture;

    include_once(PHPWG_ROOT_PATH . 'admin/include/functions.php');

    $url_self = duplicate_picture_url();

    $tpl_vars['IS_PICTURE'] = true;

    $template->clear_assign(array(
      'U_SET_AS_REPRESENTATIVE',
      'U_PHOTO_ADMIN',
      'U_CADDIE',
      ));

    $template->set_prefilter('picture', 'admintools_remove_privacy');

    $query = 'SELECT element_id FROM ' . CADDIE_TABLE . '
      WHERE element_id = ' . $page['image_id'] .';';
    $tpl_vars['IS_IN_CADDIE'] = pwg_db_num_rows(pwg_query($query)) > 0;

    if (isset($page['category']))
    {
      $tpl_vars['CATEGORY_ID'] = $page['category']['id'];

      $tpl_vars['U_SET_REPRESENTATIVE'] = add_url_params(
        $url_self,
        array('action'=>'set_as_representative')
        );

      $query = 'SELECT id FROM ' . CATEGORIES_TABLE.'
        WHERE id = ' . $page['category']['id'] .'
        AND representative_picture_id = ' . $page['image_id'] .';';
      $tpl_vars['IS_REPRESENTATIVE'] = pwg_db_num_rows(pwg_query($query)) > 0;
    }

    $tpl_vars['U_EDIT'] = $url_root . 'admin.php?page=photo-' . $page['image_id']
      .(isset($page['category']) ? '&amp;cat_id=' . $page['category']['id'] : '');

    $tpl_vars['U_CADDIE'] = add_url_params(
      $url_self,
      array('action'=>'add_to_caddie')
      );

    // gets tags
    $query = '
SELECT id, name
  FROM '.IMAGE_TAG_TABLE.' AS it
    JOIN '.TAGS_TABLE.' AS t ON t.id = it.tag_id
  WHERE image_id = '.$page['image_id'].'
;';
    $tag_selection = get_taglist($query);

    $query = '
SELECT id, name
  FROM '.TAGS_TABLE.'
;';
    $tags = get_taglist($query, false);

    $tpl_vars['QUICK_EDIT'] = array(
      'file' => $picture['current']['file'],
      'name' => $picture['current']['name'],
      'comment' => $picture['current']['comment'],
      'author' => $picture['current']['author'],
      'level' => $picture['current']['level'],
      'date_creation' => substr($picture['current']['date_creation'], 0, 10),
      'date_creation_time' => substr($picture['current']['date_creation'], 11, 5),
      'tag_selection' => $tag_selection,
      'tags' => $tags,
      );
  }
  else if (@$page['section'] = 'categories' and isset($page['category']))
  {
    $url_self = duplicate_index_url();

    $tpl_vars['IS_CATEGORY'] = true;
    $tpl_vars['CATEGORY_ID'] = $page['category']['id'];

    $template->clear_assign(array(
      'U_EDIT',
      'U_CADDIE',
      ));

    $tpl_vars['U_EDIT'] = $url_root . 'admin.php?page=album-' . $page['category']['id'];

    if (!empty($page['items']))
    {
      $tpl_vars['U_CADDIE'] = add_url_params(
        $url_self,
        array('caddie'=>1)
        );
    }
  }


  // get users
  $query = '
SELECT
  '.$conf['user_fields']['id'].' AS id,
  '.$conf['user_fields']['username'].' AS username
FROM '.USERS_TABLE.'
  ORDER BY CONVERT('.$conf['user_fields']['username'].', CHAR)
;';
  $tpl_vars['USERS'] = simple_hash_from_query($query, 'id', 'username');

  // get themes
  include_once(PHPWG_ROOT_PATH.'admin/include/themes.class.php');
  $themes = new themes();
  foreach (array_keys($themes->fs_themes) as $theme)
  {
    $tpl_vars['THEMES'][$theme] = $theme;
  }

  // get languages
  foreach (get_languages() as $code => $name)
  {
    $tpl_vars['LANGS'][$code] = $name;
  }


  $template->assign(array(
    'ADMINTOOLS_PATH' => ADMINTOOLS_PATH,
    'ato' => $tpl_vars,
  ));

  $template->set_filename('ato', realpath(ADMINTOOLS_PATH . 'template/public_controller.tpl'));
  $template->parse('ato');
}

function admintools_remove_privacy($content)
{
  $search = '{if $display_info.privacy_level and isset($available_permission_levels)}';
  $replace = '{if false}';
  return str_replace($search, $replace, $content);
}

function admintools_save_picture()
{
  global $page, $conf;

  if (isset($_GET['delete']) and get_pwg_token()==@$_GET['pwg_token'])
  {
    include_once(PHPWG_ROOT_PATH . 'admin/include/functions.php');

    delete_elements(array($page['image_id']), true);
    invalidate_user_cache();

    if (isset($page['category']))
    {
      redirect(
        make_index_url(
          array(
            'category' => $page['category']
            )
          )
        );
    }

    redirect(make_index_url());
  }

  if (@$_POST['action'] == 'quick_edit')
  {
    include_once(PHPWG_ROOT_PATH . 'admin/include/functions.php');

    $data = array(
      'name' => $_POST['name'],
      'author' => $_POST['author'],
      'level' => $_POST['level'],
      );

    if ($conf['allow_html_descriptions'])
    {
      $data['comment'] = @$_POST['comment'];
    }
    else
    {
      $data['comment'] = strip_tags(@$_POST['comment']);
    }

    if (!empty($_POST['date_creation']) and strtotime($_POST['date_creation']) !== false)
    {
      $data['date_creation'] = $_POST['date_creation'] .' '. $_POST['date_creation_time'];
    }

    single_update(
      IMAGES_TABLE,
      $data,
      array('id' => $page['image_id'])
      );

    $tag_ids = array();
    if (!empty($_POST['tags']))
    {
      $tag_ids = get_tag_ids($_POST['tags']);
    }
    set_tags($tag_ids, $page['image_id']);
  }
}