mods/_standard/file_storage/edit_folder.php

   1 <?php\r
   2 /****************************************************************/\r
   3 /* ATutor                                                                                                               */\r
   4 /****************************************************************/\r
   5 /* Copyright (c) 2002-2010                                      */\r
   6 /* Inclusive Design Institute                                   */\r
   7 /* http://atutor.ca                                                                                             */\r
   8 /*                                                              */\r
   9 /* This program is free software. You can redistribute it and/or*/\r
  10 /* modify it under the terms of the GNU General Public License  */\r
  11 /* as published by the Free Software Foundation.                                */\r
  12 /****************************************************************/\r
  13 // $Id$\r
  14 \r
  15 define('AT_INCLUDE_PATH', '../../../include/');\r
  16 require(AT_INCLUDE_PATH.'vitals.inc.php');\r
  17 require(AT_INCLUDE_PATH.'../mods/_standard/file_storage/file_storage.inc.php');\r
  18 \r
  19 $owner_type = abs($_REQUEST['ot']);\r
  20 $owner_id   = abs($_REQUEST['oid']);\r
  21 $owner_arg_prefix = '?ot='.$owner_type.SEP.'oid='.$owner_id. SEP;\r
  22 if (!($owner_status = fs_authenticate($owner_type, $owner_id)) || !query_bit($owner_status, WORKSPACE_AUTH_WRITE)) {\r
  23         $msg->addError('ACCESS_DENIED');\r
  24         header('Location: '.url_rewrite('mods/_standard/file_storage/index.php', AT_PRETTY_URL_IS_HEADER));\r
  25         exit;\r
  26 }\r
  27 \r
  28 if (isset($_POST['cancel'])) {\r
  29         $msg->addFeedback('CANCELLED');\r
  30         header('Location: '.url_rewrite('mods/_standard/file_storage/index.php'.$owner_arg_prefix.'folder='.abs($_POST['parent_folder']), AT_PRETTY_URL_IS_HEADER));\r
  31         exit;\r
  32 } else if (isset($_POST['submit'])) {\r
  33         $_POST['id'] = abs($_POST['id']);\r
  34 \r
  35         if (!$_POST['name']) {\r
  36                 $msg->addError(array('EMPTY_FIELDS', _AT('name')));\r
  37         }\r
  38 \r
  39         if (!$msg->containsErrors()) {\r
  40                 $_POST['name'] = $addslashes($_POST['name']);\r
  41                 $folder = abs($_POST['folder']);\r
  42                 $parent_folder = abs($_POST['parent_folder']);\r
  43 \r
  44                 $sql = "UPDATE ".TABLE_PREFIX."folders SET title='$_POST[name]' WHERE owner_type=$owner_type AND owner_id=$owner_id AND folder_id=$_POST[id] AND parent_folder_id=$parent_folder";\r
  45                 mysql_query($sql, $db);\r
  46 \r
  47                 $msg->addFeedback('FOLDER_EDITED_SUCCESSFULLY');\r
  48                 header('Location: '.url_rewrite('mods/_standard/file_storage/index.php'.$owner_arg_prefix.'folder='.$parent_folder, AT_PRETTY_URL_IS_HEADER));\r
  49                 exit;\r
  50         }\r
  51 \r
  52         $_GET['id'] = $_POST['id'];\r
  53 }\r
  54         \r
  55 $onload = 'document.form.name.focus();';\r
  56 \r
  57 require(AT_INCLUDE_PATH.'header.inc.php');\r
  58 \r
  59 $id = abs($_GET['id']);\r
  60 \r
  61 $sql = "SELECT title, parent_folder_id FROM ".TABLE_PREFIX."folders WHERE folder_id=$id";\r
  62 $result = mysql_query($sql, $db);\r
  63 if (!$row = mysql_fetch_assoc($result)) {\r
  64         $msg->printErrors('FOLDER_NOT_EXIST');\r
  65         require(AT_INCLUDE_PATH.'footer.inc.php');\r
  66         exit;\r
  67 }\r
  68 ?>\r
  69 \r
  70 <form method="post" action="<?php echo $_SERVER['PHP_SELF'].$owner_arg_prefix; ?>" name="form">\r
  71 <input type="hidden" name="id" value="<?php echo $id; ?>" />\r
  72 <input type="hidden" name="parent_folder" value="<?php echo $row['parent_folder_id']; ?>" />\r
  73 <div class="input-form">\r
  74         <div class="row">\r
  75                 <span class="required" title="<?php echo _AT('required_field'); ?>">*</span><label for="name"><?php echo _AT('name'); ?></label><br />\r
  76                 <input type="text" name="name" id="name" value="<?php echo htmlspecialchars($row['title']); ?>" size="40" maxlength="70" />\r
  77         </div>\r
  78 \r
  79         <div class="row buttons">\r
  80                 <input type="submit" name="submit" value="<?php echo _AT('save'); ?>" accesskey="s" />\r
  81                 <input type="submit" name="cancel" value="<?php echo _AT('cancel'); ?>" />\r
  82         </div>\r
  83 </div>\r
  84 </form>\r
  85 \r
  86 <?php require(AT_INCLUDE_PATH.'footer.inc.php'); ?>