mxml/www/articles.php
Michael R Sweet 2b6f4e62be Tweeking.
Add account management page.
2004-05-19 02:57:18 +00:00

722 lines
19 KiB
PHP

<?php
//
// "$Id: articles.php,v 1.6 2004/05/19 02:57:18 mike Exp $"
//
// Web form for the article table...
//
//
// Include necessary headers...
//
include_once "phplib/html.php";
include_once "phplib/common.php";
//
// Maximum number of articles per page...
//
$PAGE_MAX = 10;
// Get command-line options...
//
// Usage: article.php [operation] [options]
//
// Operations:
//
// B - Batch update selected articles
// D# - Delete article
// L = List all
// L# = List article #
// M# = Modify article #
// N = Create new article
//
// Options:
//
// I# = Set first article
// Qtext = Set search text
$search = "";
$index = 0;
if ($argc)
{
$op = $argv[0][0];
$id = (int)substr($argv[0], 1);
if ($op != 'D' && $op != 'L' && $op != 'M' && $op != 'N' && $op != 'B')
{
html_header("Article Error");
print("<p>Bad command '$op'!\n");
html_footer();
exit();
}
if (($op == 'D' || $op == 'M') && !$id)
{
html_header("Article Error");
print("<p>Command '$op' requires an ID!\n");
html_footer();
exit();
}
if (($op == 'D' || $op == 'M' && $op != 'B') && $LOGIN_USER == "")
{
html_header("Article Error");
print("<p>Command '$op' requires a login!\n");
html_footer();
exit();
}
if ($op == 'N' && $id)
{
html_header("Article Error");
print("<p>Command '$op' may not have an ID!\n");
html_footer();
exit();
}
for ($i = 1; $i < $argc; $i ++)
{
$option = substr($argv[$i], 1);
switch ($argv[$i][0])
{
case 'Q' : // Set search text
$search = $option;
$i ++;
while ($i < $argc)
{
$search .= " $argv[$i]";
$i ++;
}
break;
case 'I' : // Set first STR
$index = (int)$option;
if ($index < 0)
$index = 0;
break;
default :
html_header("Article Error");
print("<p>Bad option '$argv[$i]'!</p>\n");
html_footer();
exit();
break;
}
}
}
else
{
$op = 'L';
$id = 0;
}
if ($REQUEST_METHOD == "POST")
{
if (array_key_exists("SEARCH", $_POST))
$search = $_POST["SEARCH"];
}
$options = "+I$index+Q" . urlencode($search);
switch ($op)
{
case 'B' : // Batch update selected articles
if ($REQUEST_METHOD != "POST")
{
header("Location: $PHP_SELF?L$options");
break;
}
if (array_key_exists("IS_PUBLISHED", $_POST) &&
$_POST["IS_PUBLISHED"] != "")
{
$modify_date = time();
$modify_user = db_escape($LOGIN_USER);
$is_published = (int)$_POST["IS_PUBLISHED"];
$query = "is_published = $is_published, modify_date = $modify_date, "
."modify_user = '$modify_user'";
db_query("BEGIN TRANSACTION");
reset($_POST);
while (list($key, $val) = each($_POST))
if (substr($key, 0, 3) == "ID_")
{
$id = (int)substr($key, 3);
db_query("UPDATE article SET $query WHERE id = $id");
}
db_query("COMMIT TRANSACTION");
}
header("Location: $PHP_SELF?L$options");
break;
case 'D' : // Delete Article
if ($REQUEST_METHOD == "POST")
{
db_query("DELETE FROM article WHERE id = $id");
header("Location: $PHP_SELF?L$options");
}
else
{
$result = db_query("SELECT * FROM article WHERE id = $id");
if (db_count($result) != 1)
{
print("<p><b>Error:</b> Article #$id was not found!</p>\n");
html_footer();
exit();
}
$row = db_next($result);
html_header("Delete Article #$id");
html_start_links(1);
html_link("Return to Articles", "$PHP_SELF?L$options");
html_link("View Article #$id</A>", "$PHP_SELF?L$id$options");
html_link("Modify Article #$id</A>", "$PHP_SELF?M$id$options");
html_end_links();
print("<h1>Delete Article #$id</h1>\n");
print("<form method='post' action='$PHP_SELF?D$id'>"
."<p><table width='100%' cellpadding='5' cellspacing='0' border='0'>\n");
if (!$row['is_published'])
print("<tr><th align='center' colspan='2'>This Article is "
."currently hidden from public view.</td></tr>\n");
$temp = htmlspecialchars($row["title"]);
print("<tr><th align='right'>Title:</th><td class='left'>$temp</td></tr>\n");
$temp = htmlspecialchars($row["abstract"]);
print("<tr><th align='right'>Abstract:</th><td class='left'>$temp</td></tr>\n");
$temp = htmlspecialchars($row["contents"]);
print("<tr><th align='right'>Contents:</th><td class='left'>$temp</td></tr>\n");
print("<tr><th colspan='2'>"
."<input type='submit' value='Confirm Delete Article'></th></tr>\n");
print("</table></p></form>\n");
html_footer();
}
break;
case 'L' : // List (all) Article(s)
if ($id)
{
html_header("Article #$id");
$result = db_query("SELECT * FROM article WHERE id = $id");
if (db_count($result) != 1)
{
print("<p><b>Error:</b> Article #$id was not found!</p>\n");
html_footer();
exit();
}
$row = db_next($result);
html_start_links(1);
html_link("Return to Articles", "$PHP_SELF?L$options");
html_link("Show Comments", "#_USER_COMMENTS");
if ($LOGIN_USER)
{
html_link("Modify Article</A>", "$PHP_SELF?M$id$options");
html_link("Delete Article #$id</A>", "$PHP_SELF?D$id$options");
}
html_end_links();
print("<h1>Article #$id</h1>\n");
print("<p><table width='100%' cellpadding='5' cellspacing='0' "
."border='0'>\n");
if (!$row['is_published'])
print("<tr><th align='center' colspan='2'>This Article is "
."currently hidden from public view.</td></tr>\n");
$temp = htmlspecialchars($row['title']);
print("<tr><th align='right' valign='top'>Title:</th><td class='left'>$temp</td></tr>\n");
$temp = htmlspecialchars($row['abstract']);
print("<tr><th align='right' valign='top'>Abstract:</th><td class='left'>$temp</td></tr>\n");
$temp = format_text($row['contents']);
print("<tr><th align='right' valign='top'>Contents:</th><td class='left'>$temp</td></tr>\n");
print("</table></p>\n");
db_free($result);
print("<hr noshade/>\n"
."<h2><a name='_USER_COMMENTS'>Comments</a> "
."[&nbsp;<a href='comment.php?r0+particles.php_L$id'>"
."Add&nbsp;Comment</a>&nbsp;]</h2>\n");
show_comments("articles.php_L$id");
}
else
{
html_header("Articles");
html_start_links(1);
html_link("Post New Article", "$PHP_SELF?N$options");
html_end_links();
print("<h1>Articles</h1>\n");
print("<form method='POST' action='$PHP_SELF'><p align='center'>"
."Search&nbsp;Words: &nbsp;<input type='text' size='60' "
."name='SEARCH' value='$search'>"
."<input type='submit' value='Search Articles'></p></form>\n");
print("<hr noshade/>\n");
$query = "";
$prefix = "WHERE ";
if (!$LOGIN_USER)
{
$query .= "${prefix}is_published = 1";
$prefix = " AND ";
}
if ($search)
{
$search_string = str_replace("'", " ", $search);
$search_string = str_replace("\"", " ", $search_string);
$search_string = str_replace("\\", " ", $search_string);
$search_string = str_replace("%20", " ", $search_string);
$search_string = str_replace("%27", " ", $search_string);
$search_string = str_replace(" ", " ", $search_string);
$search_words = explode(' ', $search_string);
// Loop through the array of words, adding them to the
$query .= "${prefix}(";
$prefix = "";
$next = " OR";
$logic = "";
reset($search_words);
while ($keyword = current($search_words))
{
next($search_words);
$keyword = db_escape(ltrim(rtrim($keyword)));
if (strcasecmp($keyword, 'or') == 0)
{
$next = ' OR';
if ($prefix != '')
$prefix = ' OR';
}
else if (strcasecmp($keyword, 'and') == 0)
{
$next = ' AND';
if ($prefix != '')
$prefix = ' AND';
}
else if (strcasecmp($keyword, 'not') == 0)
{
$logic = ' NOT';
}
else
{
if ($keyword == (int)$keyword)
$idsearch = " OR id = " . (int)$keyword;
else
$idsearch = "";
$query .= "$prefix$logic (title LIKE \"%$keyword%\"$idsearch"
." OR abstract LIKE \"%$keyword%\""
." OR contents LIKE \"%$keyword%\")";
$prefix = $next;
$logic = '';
}
}
$query .= ")";
}
$result = db_query("SELECT * FROM article $query "
."ORDER BY modify_date");
$count = db_count($result);
if ($count == 0)
{
print("<p>No Articles found.</p>\n");
html_footer();
exit();
}
if ($index >= $count)
$index = $count - ($count % $PAGE_MAX);
if ($index < 0)
$index = 0;
$start = $index + 1;
$end = $index + $PAGE_MAX;
if ($end > $count)
$end = $count;
$prev = $index - $PAGE_MAX;
if ($prev < 0)
$prev = 0;
$next = $index + $PAGE_MAX;
print("<p>$count article(s) found, showing $start to $end:</p>\n");
if ($LOGIN_USER)
print("<form method='POST' action='$PHP_SELF?B$options'>\n");
if ($count > $PAGE_MAX)
{
print("<p><table border='0' cellspacing='0' cellpadding='0' "
."width='100%'>\n");
print("<tr><td>");
if ($index > 0)
print("[&nbsp;<a href='$PHP_SELF?L+I$prev+Q" . urlencode($search)
."'>Previous&nbsp;$PAGE_MAX</a>&nbsp;]");
print("</td><td align='right'>");
if ($end < $count)
{
$next_count = min($PAGE_MAX, $count - $end);
print("[&nbsp;<a href='$PHP_SELF?L+I$next+Q" . urlencode($search)
."'>Next&nbsp;$next_count</a>&nbsp;]");
}
print("</td></tr>\n");
print("</table></p>\n");
}
html_start_table(array("ID","Title","Last Modified", "Comment(s)"));
db_seek($result, $index);
for ($i = 0; $i < $PAGE_MAX && $row = db_next($result); $i ++)
{
html_start_row();
$id = $row['id'];
$link = "<a href='$PHP_SELF?L$id$options' alt='Article #$id'>";
print("<td nowrap>");
if ($LOGIN_USER)
print("<input type='checkbox' name='ID_$row[id]'>");
print("$link$id</a></td>");
$temp = htmlspecialchars($row['title']);
if ($row['is_published'] == 0)
$temp .= " <img src='images/private.gif' width='16' height='16' "
."border='0' align='middle' alt='Private'/>";
print("<td align='center' width='67%'>$link$temp</a></td>");
$temp = date("M d, Y", $row['modify_date']);
print("<td align='center'>$link$temp</a></td>");
$count = count_comments("articles.php_L$id");
print("<td align='center'>$link$count</a></td>");
html_end_row();
html_start_row();
$temp = htmlspecialchars($row['abstract']);
print("<td></td><td colspan='3'>$temp</td>");
html_end_row();
}
if ($LOGIN_USER)
{
html_start_row("header");
print("<th colspan='4'>&nbsp;<br />Published:&nbsp;");
select_is_published();
print("<input type='submit' value='Modify Selected Articles'/></th>\n");
html_end_row();
}
html_end_table();
if ($count > $PAGE_MAX)
{
print("<p><table border='0' cellspacing='0' cellpadding='0' "
."width='100%'>\n");
print("<tr><td>");
if ($index > 0)
print("[&nbsp;<a href='$PHP_SELF?L+I$prev+Q" . urlencode($search)
."'>Previous&nbsp;$PAGE_MAX</a>&nbsp;]");
print("</td><td align='right'>");
if ($end < $count)
{
$next_count = min($PAGE_MAX, $count - $end);
print("[&nbsp;<a href='$PHP_SELF?L+I$next+Q" . urlencode($search)
."'>Next&nbsp;$next_count</a>&nbsp;]");
}
print("</td></tr>\n");
print("</table></p>\n");
}
}
html_footer();
break;
case 'M' : // Modify Article
if ($REQUEST_METHOD == "POST")
{
if (array_key_exists("IS_PUBLISHED", $_POST))
$is_published = (int)$_POST["IS_PUBLISHED"];
else
$is_published = 0;
if (array_key_exists("TITLE", $_POST))
$title = $_POST["TITLE"];
else
$title = "";
if (array_key_exists("ABSTRACT", $_POST))
$abstract = $_POST["ABSTRACT"];
else
$abstract = "";
if (array_key_exists("CONTENTS", $_POST))
$contents = $_POST["CONTENTS"];
else
$contents = "";
if (($is_published == 0 || $LOGIN_USER) && $title != "" &&
$abstract != "" && $contents != "")
$havedata = 1;
else
$havedata = 0;
}
else
{
$result = db_query("SELECT * FROM article WHERE id = $id");
if (db_count($result) != 1)
{
print("<p><b>Error:</b> Article #$id was not found!</p>\n");
html_footer();
exit();
}
$row = db_next($result);
$is_published = $row["is_published"];
$title = $row["title"];
$abstract = $row["abstract"];
$contents = $row["contents"];
db_free($row);
$havedata = 0;
}
if ($havedata)
{
$title = db_escape($title);
$abstract = db_escape($abstract);
$contents = db_escape($contents);
$modify_date = time();
db_query("UPDATE article SET "
."is_published = $is_published, "
."title = '$title', "
."abstract = '$abstract', "
."contents = '$contents', "
."modify_date = $modify_date, "
."modify_user = '$LOGIN_USER' "
."WHERE id = $id");
header("Location: $PHP_SELF?L$id$options");
}
else
{
html_header("Modify Article #$id");
html_start_links(1);
html_link("Return to Articles", "$PHP_SELF?L$options");
html_link("Article #$id", "$PHP_SELF?L$id$options");
html_end_links();
print("<h1>Modify Article #$id</h1>\n");
print("<form method='post' action='$PHP_SELF?M$id$options'>"
."<p><table width='100%' cellpadding='5' cellspacing='0' border='0'>\n");
print("<tr><th align='right'>Published:</th><td>");
select_is_published($is_published);
print("</td></tr>\n");
$temp = htmlspecialchars($title, ENT_QUOTES);
print("<tr><th align='right'>Title:</th>"
."<td><input type='text' name='TITLE' "
."value='$temp' size='40'></td></tr>\n");
$temp = htmlspecialchars($abstract, ENT_QUOTES);
print("<tr><th align='right'>Abstract:</th>"
."<td><input type='text' name='ABSTRACT' "
."value='$temp' size='40'></td></tr>\n");
$temp = htmlspecialchars($contents, ENT_QUOTES);
print("<tr><th align='right' valign='top'>Contents:</th>"
."<td><textarea name='CONTENTS' "
."cols='80' rows='10' wrap='virtual'>"
."$temp</textarea></td></tr>\n");
print("<tr><th colspan='2'>"
."<input type='submit' value='Update Article'></th></tr>\n");
print("</table></p></form>\n");
html_footer();
}
break;
case 'N' : // Post new Article
if ($REQUEST_METHOD == "POST")
{
if (array_key_exists("IS_PUBLISHED", $_POST))
$is_published = (int)$_POST["IS_PUBLISHED"];
else
$is_published = 0;
if (array_key_exists("TITLE", $_POST))
$title = $_POST["TITLE"];
else
$title = "";
if (array_key_exists("ABSTRACT", $_POST))
$abstract = $_POST["ABSTRACT"];
else
$abstract = "";
if (array_key_exists("CONTENTS", $_POST))
$contents = $_POST["CONTENTS"];
else
$contents = "";
if (array_key_exists("CREATE_USER", $_POST))
$create_user = $_POST["CREATE_USER"];
else
$create_user = "";
if (($is_published == 0 || $LOGIN_USER) && $title != "" &&
$abstract != "" && $contents != "")
$havedata = 1;
else
$havedata = 0;
}
else
{
$is_published = 0;
$title = "";
$abstract = "";
$contents = "";
if (array_key_exists("FROM", $_COOKIE))
$create_user = $_COOKIE["FROM"];
else
$create_user = "";
$havedata = 0;
}
if ($havedata)
{
$title = db_escape($title);
$abstract = db_escape($abstract);
$contents = db_escape($contents);
$create_date = time();
$create_user = db_escape($create_user);
db_query("INSERT INTO article VALUES(NULL,"
."$is_published,'$title','$abstract','$contents',"
."$create_date,'$create_user',$create_date,'$create_user')");
$id = db_insert_id();
header("Location: $PHP_SELF?L$id$options");
break;
}
html_header("Post New Article");
html_start_links(1);
html_link("Return to Articles", "$PHP_SELF?L$options");
html_end_links();
print("<h1>Post New Article</h1>\n");
print("<p>Please use this form to post announcements, how-to's, "
."examples, and case studies showing how you use $PROJECT. "
."We will proofread your article, and if we determine it is "
."appropriate for the site, we will make the article public "
."on the site. <i>Thank you</i> for supporting $PROJECT!</p>\n"
."<hr noshade/>\n");
print("<form method='post' action='$PHP_SELF?N$options'>"
."<p><table width='100%' cellpadding='5' cellspacing='0' border='0'>\n");
if ($LOGIN_USER != "")
{
print("<tr><th align='right'>Published:</th><td>");
select_is_published($is_published);
print("</td></tr>\n");
}
else
print("<input type='hidden' name='IS_PUBLISHED' value='0'/>\n");
$title = htmlspecialchars($title, ENT_QUOTES);
print("<tr><th align='right'>Title:</th>"
."<td><input type='text' name='TITLE' "
."size='40' value='$title'></td></tr>\n");
$abstract = htmlspecialchars($abstract, ENT_QUOTES);
print("<tr><th align='right'>Abstract:</th>"
."<td><input type='text' name='ABSTRACT' "
."size='40' value='$abstract'></td></tr>\n");
$author = htmlspecialchars($author, ENT_QUOTES);
print("<tr><th align='right'>Author:</th>"
."<td><input type='text' name='CREATE_USER' "
."size='40' value='$author'></td></tr>\n");
$contents = htmlspecialchars($contents, ENT_QUOTES);
print("<tr><th align='right' valign='top'>Contents:</th>"
."<td><textarea name='CONTENTS' "
."cols='80' rows='10' wrap='virtual'>"
."$contents</textarea>\n"
."<p>The contents of the article may contain the following "
."HTML elements: <tt>A</tt>, <tt>B</tt>, <tt>BLOCKQUOTE</tt>, "
."<tt>CODE</tt>, <tt>EM</tt>, <tt>H1</tt>, <tt>H2</tt>, "
."<tt>H3</tt>, <tt>H4</tt>, <tt>H5</tt>, <tt>H6</tt>, <tt>I</tt>, "
."<tt>IMG</tt>, <tt>LI</tt>, <tt>OL</tt>, <tt>P</tt>, <tt>PRE</tt>, "
."<tt>TT</tt>, <tt>U</tt>, <tt>UL</tt></p></td></tr>\n");
print("<tr><th colspan='2'>"
."<input type='submit' value='Create Article'></th></tr>\n");
print("</table></p></form>\n");
html_footer();
break;
}
//
// End of "$Id: articles.php,v 1.6 2004/05/19 02:57:18 mike Exp $".
//
?>