docs/mods/_standard/blogs/add_post.php

   1 <?php\r
   2 /****************************************************************/\r
   3 /* ATutor                                                                                                               */\r
   4 /****************************************************************/\r
   5 /* Copyright (c) 2002-2010                                      */\r
   6 /* Inclusive Design Institute                                   */\r
   7 /* http://atutor.ca                                                                                             */\r
   8 /*                                                              */\r
   9 /* This program is free software. You can redistribute it and/or*/\r
  10 /* modify it under the terms of the GNU General Public License  */\r
  11 /* as published by the Free Software Foundation.                                */\r
  12 /****************************************************************/\r
  13 // $Id$\r
  14 define('AT_INCLUDE_PATH', '../../../include/');\r
  15 require (AT_INCLUDE_PATH.'vitals.inc.php');\r
  16 \r
  17 // authenticate ot+oid ....\r
  18 $owner_type = abs($_REQUEST['ot']);\r
  19 $owner_id = abs($_REQUEST['oid']);\r
  20 if (!($owner_status = blogs_authenticate($owner_type, $owner_id)) || !query_bit($owner_status, BLOGS_AUTH_WRITE)) {\r
  21         $msg->addError('ACCESS_DENIED');\r
  22         header('Location: '.url_rewrite('mods/_standard/blogs/index.php', AT_PRETTY_URL_IS_HEADER));\r
  23         exit;\r
  24 }\r
  25 \r
  26 if (isset($_POST['cancel'])) {\r
  27         $msg->addFeedback('CANCELLED');\r
  28         header('Location: '.url_rewrite('mods/_standard/blogs/view.php?ot='.BLOGS_GROUP.SEP.'oid='.$_POST['oid'], AT_PRETTY_URL_IS_HEADER));\r
  29         exit;\r
  30 } else if (isset($_POST['submit'])) {\r
  31         $_POST['title'] = $addslashes(trim($_POST['title']));\r
  32         $_POST['body']  = $addslashes(trim($_POST['body']));\r
  33 \r
  34         if ($_POST['body'] == '') {\r
  35                 $msg->addError(array('EMPTY_FIELDS', _AT('body')));\r
  36         }\r
  37 \r
  38         if (!$msg->containsErrors()) {\r
  39                 $_POST['private'] = abs($_POST['private']);\r
  40                 $sql = "INSERT INTO ".TABLE_PREFIX."blog_posts VALUES (NULL, $_SESSION[member_id], ".BLOGS_GROUP.", $_POST[oid], $_POST[private], NOW(), 0, '$_POST[title]', '$_POST[body]')";\r
  41                 mysql_query($sql, $db);\r
  42                 \r
  43                 if (!isset($sub)) { \r
  44                         require_once(AT_INCLUDE_PATH .'classes/subscribe.class.php');\r
  45                         $sub = new subscription(); \r
  46                 }\r
  47                 $sub->send_mail('blog', $_POST['oid'], mysql_insert_id());\r
  48                 $msg->addFeedback('POST_ADDED_SUCCESSFULLY');\r
  49         \r
  50                 header('Location: '.url_rewrite('mods/_standard/blogs/view.php?ot='.BLOGS_GROUP.SEP.'oid='.$_POST['oid'], AT_PRETTY_URL_IS_HEADER));\r
  51                 exit;\r
  52         }\r
  53 }\r
  54 \r
  55 // this will also be dynamic as the parent page changes\r
  56 $_pages['mods/_standard/blogs/add_post.php?ot='.BLOGS_GROUP.SEP.'oid='.$_REQUEST['oid']]['title_var'] = 'add';\r
  57 $_pages['mods/_standard/blogs/add_post.php?ot='.BLOGS_GROUP.SEP.'oid='.$_REQUEST['oid']]['parent'] = 'mods/_standard/blogs/view.php';\r
  58 \r
  59 $_pages['mods/_standard/blogs/add_post.php']['title_var'] = 'add';\r
  60 $_pages['mods/_standard/blogs/add_post.php']['parent']    = 'mods/_standard/blogs/view.php?ot='.BLOGS_GROUP.SEP.'oid='.$_REQUEST['oid'];\r
  61 \r
  62 $_pages['mods/_standard/blogs/view.php?ot='.BLOGS_GROUP.SEP.'oid='.$_REQUEST['oid']]['title'] = blogs_get_blog_name(BLOGS_GROUP, $_REQUEST['oid']);\r
  63 $_pages['mods/_standard/blogs/view.php?ot='.BLOGS_GROUP.SEP.'oid='.$_REQUEST['oid']]['parent']    = 'mods/_standard/blogs/index.php';\r
  64 $_pages['mods/_standard/blogs/view.php?ot='.BLOGS_GROUP.SEP.'oid='.$_REQUEST['oid']]['children']  = array('mods/_standard/blogs/add_post.php');\r
  65 \r
  66 \r
  67 $onload = 'document.form.title.focus();';\r
  68 require (AT_INCLUDE_PATH.'header.inc.php');\r
  69 ?>\r
  70 \r
  71 <form method="post" action="<?php echo $_SERVER['PHP_SELF']; ?>" name="form">\r
  72 <input type="hidden" name="ot" value="<?php echo BLOGS_GROUP; ?>" />\r
  73 <input type="hidden" name="oid" value="<?php echo abs($_REQUEST['oid']); ?>" />\r
  74 <div class="input-form">\r
  75         <div class="row">\r
  76                 <label for="title"><?php echo _AT('title'); ?></label><br />\r
  77                 <input type="text" name="title" id="title" value="<?php echo htmlspecialchars(stripslashes($_POST['title'])); ?>" size="50" />\r
  78         </div>\r
  79         <div class="row">\r
  80                 <span class="required" title="<?php echo _AT('required_field'); ?>">*</span><label for="body"><?php echo _AT('body'); ?></label><br />\r
  81                 <textarea name="body" id="body" cols="40" rows="10"></textarea>\r
  82         </div>\r
  83 \r
  84         <div class="row">       \r
  85                 <a href="<?php echo htmlspecialchars($_SERVER['REQUEST_URI'], ENT_QUOTES); ?>#jumpcodes" title="<?php echo _AT('jump_codes'); ?>"><img src="images/clr.gif" height="1" width="1" alt="<?php echo _AT('jump_codes'); ?>" border="0" /></a><?php require(AT_INCLUDE_PATH.'html/code_picker.inc.php'); ?>\r
  86 \r
  87                 <a name="jumpcodes"></a>\r
  88         </div>\r
  89 \r
  90         <div class="row">\r
  91                 <input type="checkbox" name="private" value="1" id="private" /><label for="private"><?php echo _AT('private'); ?></label>\r
  92         </div>\r
  93 \r
  94         <div class="row buttons">\r
  95                 <input type="submit" name="submit" value="<?php echo _AT('post'); ?>" accesskey="s" /> <input type="submit" name="cancel" value="<?php echo _AT('cancel'); ?>" /> \r
  96         </div>\r
  97 </div>\r
  98 </form>\r
  99 \r
 100 <?php require(AT_INCLUDE_PATH.'footer.inc.php'); ?>