Файл: forum/action/edit_theme.php
Строк: 70
<?php
/*
* Форум
* DCMS Special
* Автор yadalay
* Модифицировал densnet
* Файл edit_theme.php
*/
if (!user_access('forum_them_edit') && $user['id'] != $theme->id_user) {
header('Location: /forum/' . $forum->id . '/' . $razdel->id . '/' . $theme->id . '.html');
exit;
} else {
if (isset($_POST['save'])) {
$name = mysql_real_escape_string(trim($_POST['name']));
$description = mysql_real_escape_string(trim($_POST['description']));
$type = ($user['group_access'] > 7 && isset($_POST['type'])) ? 1 : 0;
$razdel_id = intval($_POST['razdel']);
$forum_id = mysql_fetch_object(mysql_query('SELECT `id_forum` FROM `forum_razdels` WHERE `id` = ' . $razdel_id))->id_forum;
if (mb_strlen($name) < 3 || mb_strlen($name) > 40) {
echo "<div class = 'errs'>В поле 'Название темы' можно использовать от 3 до 40 символов.</div>";
} elseif (mb_strlen($description) < 3) {
echo "<div class = 'errs'>Слишком короткое содержание темы.</div>";
} else {
$_SESSION['success'] = '<div class = "msgs">Тема успешно изменена.</div>';
mysql_query('UPDATE `forum_themes` SET `id_forum` = ' . $forum_id . ', `id_razdel` = ' . $razdel_id . ', `id_admin` = ' . $user['id'] . ', `name` = "' . $name . '", `description` = "' . $description . '", `type` = ' . $type . ', `time_edit` = "' . $time . '" WHERE `id` = ' . $theme->id);
header('Location: /forum/' . $forum->id . '/' . $razdel->id . '/' . $theme->id . '.html');
exit;
}
} elseif (isset($_POST['delete']) && (user_access('forum_them_del'))) {
admin_log('Форум', 'Темы', 'Тема "' . $theme->name . '" была удалена из раздела "' . $razdel->name . '".');
$files = mysql_query('SELECT `name` FROM `forum_post_files` WHERE `id_theme` = ' . $theme->id);
while ($file = mysql_fetch_object($files)) {
unlink('/forum/files/' . $file->name);
}
$votes = mysql_query('SELECT `id` FROM `forum_votes` WHERE `id_theme` = ' . $theme->id);
while ($vote = mysql_query($votes)) {
mysql_query('DELETE FROM `forum_vote_voices` WHERE `id_vote` = ' . $vote->id);
}
mysql_query('DELETE FROM `forum_votes` WHERE `id_theme` = ' . $theme->id);
mysql_query('DELETE FROM `forum_post_rating` WHERE `id_theme` = ' . $theme->id);
mysql_query('DELETE FROM `forum_posts` WHERE `id_theme` = ' . $theme->id);
mysql_query('DELETE FROM `forum_post_files` WHERE `id_theme` = ' . $theme->id);
mysql_query('DELETE FROM `forum_votes_var` WHERE `id_theme` = ' . $theme->id);
mysql_query('DELETE FROM `forum_themes` WHERE `id` = ' . $theme->id);
$_SESSION['msg'] = '<div class = "msgs">Тема успешно удалена.</div>';
header('Location: /forum/' . $forum->id . '/' . $razdel->id . '/');
exit;
}
echo "<form action = '/forum/$forum->id/$razdel->id/$theme->id/edit_theme.html' class = 'razd' method = 'post'>";
echo "<b>Название темы:</b><br />";
echo "<input type = 'text' name = 'name' value = '$theme->name' style = 'width: 66%' /><br />";
echo "<b>Содержание темы:</b><br />";
echo L . "<textarea name = 'description' style = 'width: 66%'>$theme->description</textarea><br />";
echo "<b>Категория:</b><br />";
echo "<select name = 'razdel'>";
$forums = mysql_query('SELECT `id`, `name`, `access` FROM `forum`');
while ($forum_s = mysql_fetch_object($forums)) {
if ($forum_s->access == 0 || ($forum_s->access == 1 && $user['group_access'] > 7) || ($forum_s->access == 2 && $user['group_access'] > 2)) {
echo "<option disabled = 'disabled'><b>$forum_s->name</b></option>";
$razdels = mysql_query('SELECT `id`, `name` FROM `forum_razdels` WHERE `id_forum` = ' . $forum_s->id);
while ($cat = mysql_fetch_object($razdels)) {
echo "<option value = '$cat->id' " . (($cat->id == $theme->id_razdel) ? 'selected = "selected"' : NULL) . ">>> $cat->name</option>";
}
} else {
continue;
}
}
echo "</select><br />";
if ($user['group_access'] > 7) {
echo "<b>Вывод темы в разделе:</b><br />";
echo "<label><input type = 'checkbox' name = 'type' value = '1' " . (($theme->type == 1) ? 'checked = "checked"' : NULL) . " /> Тема всегда вверху</label><br />";
}
echo "<button name = 'save' class = 'action'>";
echo "<span class = 'label'><span class = 'icon icon67' /> Сохранить</span>";
echo "</button>";
if (user_access('forum_them_del')) {
echo "<button name = 'delete' class = 'action'>";
echo "<span class = 'label'>Удалить тему</span>";
echo "</button>";
}
echo "</form>";
require_once '../sys/inc/tfoot.php';
exit;
}