HEX
Server: Microsoft-IIS/8.5
System: Windows NT YDAWBH120 6.3 build 9600 (Windows Server 2012 R2 Standard Edition) AMD64
User: tentjecom_web (0)
PHP: 7.4.14
Disabled: NONE
Upload Files
File: D:/HostingSpaces/SBogers45/smuldersinterieurprojecten.nl/wwwroot/admin/php/getLibrariesPage.php
<?php

function getLibrariesPage(){
	require_once './php/media.php';
	require_once './php/documentManager.php';
	
	$output = '';
	
	$output .= getSubMenu();
	
	if(isset($_POST['back'])){
		$output .= selectContent();
	}
	else if(isset($_POST['selectToGroup'])){
		$output .= moveMediaToGroup();
	}
	else if(isset($_POST['sbmAddGroup'])){
		$output .= sbmAddEditGroup('add');
	}
	else if(isset($_POST['sbmEditGroup'])){
		$output .= sbmAddEditGroup('edit');
	}
	else if(isset($_POST['sbmDeleteGroup'])){
		$output .= sbmDeleteGroup();
	}
	else if(isset($_GET['action'])){
		$action = $_GET['action'];
		if($action == 'add-group'){
			$output .= addEditGroupForm('add');	
		}
		else if($action == 'edit-group'){
			$output .= addEditGroupForm('edit', $_GET['id']);	
		}
		else if($action == 'delete-group'){
			$output .= deleteGroupQuestion($_GET['id']);	
		}
		else{
			$output .= selectContent();
		}
	}
	else{
		$output .= selectContent();
	}
	
	return $output;	
}

function getSubMenu(){
	
	//get text
	$siteText = getSiteText();
	
	//Dynamic client information
	$result = mysql_query('SELECT website FROM _client LIMIT 1');
	$record = mysql_fetch_assoc($result);
	$clientWebsite = $record['website'];
	if(substr($clientWebsite, 0, 7) != 'http://'){
		$clientWebsite = 'http://'.$clientWebsite;
	}
	
	//does this CMS need a library?
	$hasMediaLibrary = false;
	$hasDocLibrary = false;
	$result = mysql_query('SELECT docLib, mediaLib FROM _pages');
	while($record = mysql_fetch_assoc($result)){
		$docLib = $record['docLib'];
		$mediaLib = $record['mediaLib'];
		if($mediaLib == 1) $hasMediaLibrary = true;
		if($docLib == 1) $hasDocLibrary = true;
	}
	
	//output 
	$output = '';
	$output .= '<div id="sub-nav" class="top-rounded">';
			$output .= '<div class="sub-header-bar top-rounded">'.$siteText['libSubMenuTitle'].'</div>';
		$output .= '<div class="single-column-content column-margin-left">';
			
			
		if($hasMediaLibrary){
			$output .= '<ul class="ul-sub-menu">';
					//title media
					$output .= '<li><a href="./media/"><strong>'.$siteText['libSubMenuMediaTitle'].'</strong></a></li>';
					
					//media groups
					$query = 'SELECT DISTINCT m.title, m.linkname 
							  FROM media_groups AS m, status AS s
							  WHERE s.itemId = m.id
							  AND s.page = "media_groups"
							  AND s.active = "1"
							  ORDER BY title ASC';
					$result = mysql_query($query);
					
					if(mysql_num_rows($result) > 0){
						$output .= '<li><a href="./media/all/">'.$siteText['libSubMenuMediaAll'].'</a></li>';
					}
					
					while($record = mysql_fetch_assoc($result)){
						$title = $record['title'];
						$linkname = $record['linkname'];
						$output .= '<li><a href="./media/'.$linkname.'/">'.ucfirst($title).'</a></li>';
					}
					
					//add new group
					$output .= '<li> <a href="./media/all/add-group/"><img src="./images/icons/plus.png" alt="add"/> '.$siteText['addNewGroup'].'</a></li>';
			$output .= '</ul>';
		}
		
		if($hasDocLibrary){
			$output .= '<ul class="ul-sub-menu">';
					$output .= '<li><a href="./documents/"><strong>'.$siteText['libSubMenuDocTitle'].'</strong></a></li>';
					
					//document groups
					$query = 'SELECT DISTINCT d.title, d.linkname 
							  FROM documents_groups AS d, status AS s
							  WHERE s.itemId = d.id
							  AND s.page = "documents_groups"
							  AND s.active = "1"
							  ORDER BY title ASC';
					$result = mysql_query($query);
					
					if(mysql_num_rows($result) > 0){
						$output .= '<li><a href="./documents/all/">'.$siteText['libSubMenuDocAll'].'</a></li>';
					}
					
					while($record = mysql_fetch_assoc($result)){
						$title = $record['title'];
						$linkname = $record['linkname'];
						$output .= '<li><a href="./documents/'.$linkname.'/">'.ucfirst($title).'</a></li>';
					}
					
					//add new group
					$output .= '<li> <a href="./documents/all/add-group/"><img src="./images/icons/plus.png" alt="add"/> '.$siteText['addNewGroup'].'</a></li>';
			$output .= '</ul>';
			$output .= '<ul class="ul-sub-menu">';
				$output .= '<li class="visit"><a href="'.$clientWebsite.'" target="_blank" class="visit">'.$siteText['visitYourWebsite'].'</a></li>';
			$output .= '</ul>';
		}
		$output .= '<div class="clear"></div>';
		$output .= '</div>';
		$output .= '<div class="clear"></div>';
	$output .= '</div>';
	
	return $output;	
}



function selectContent(){
	
		
	//does this CMS need a library?
	$hasMediaLibrary = false;
	$hasDocLibrary = false;
	$result = mysql_query('SELECT docLib, mediaLib FROM _pages');
	while($record = mysql_fetch_assoc($result)){
		$docLib = $record['docLib'];
		$mediaLib = $record['mediaLib'];
		if($mediaLib == 1) $hasMediaLibrary = true;
		if($docLib == 1) $hasDocLibrary = true;
	}
	
	$start = '';	
	if(isset($_GET['page'])){
		$page = $_GET['page'];	
	}
	else{
		$page = $start;	
	}
	
	//output
	$output = '';
	$output .= '<div id="triple-column-container" class="triple-column-container top-rounded">';
	
	if($page == 'media'){
		if($hasMediaLibrary){
			$output .= getMedia();
		}
		else if($hasDocLibrary){
			$output .= initDocumentManager();
		}
		else{
			$output .= 'This CMS needs no libraries.';
		}
	}
	else if($page == 'documents' && $hasDocLibrary){
		if($hasDocLibrary){
			$output .= initDocumentManager();
		}
		else if($hasMediaLibrary){
			$output .= getMedia();
		}
		else{
			$output .= 'This CMS needs no libraries.';
		}
	}
	else{
		if($hasMediaLibrary){
			$output .= getMedia();
		}
		else if($hasDocLibrary){
			$output .= initDocumentManager();
		}
		else{
			$output .= 'This CMS needs no libraries.';
		};	
	}
	
	
	$output .= '</div>';
	$output .= '<div class="clear"></div>';

	
	return $output;
	
}


function addEditGroupForm($method, $editId = 0){
	//get text
	$siteText = getSiteText();
	
	if($method == 'edit'){
		// get table
		$_GET['page'] == 'media' ? $table = 'media_groups' : $table = 'documents_groups';
		
		//get info from database
		$query = 'SELECT title, linkname FROM '.$table.' WHERE id = '.$editId.' LIMIT 1';
		$result = mysql_query($query);
		$record = mysql_fetch_assoc($result);
		$title = $record['title'];
		$linkname = $record['linkname'];
		
		$_SESSION['addGroup']['value'][0] = $title;
		$_SESSION['addGroup']['value'][1] = $linkname;
	}
	
	//create vars
	if(!isset($_SESSION['addGroup']['errors'])){
		$_SESSION['addGroup']['errors'][0] = $_SESSION['addGroup']['errors'][1] = '';
	}
	if(!isset($_SESSION['addGroup']['value'])){
		$_SESSION['addGroup']['value'][0] = $_SESSION['addGroup']['value'][1] = '';
	}
	
	$output = '';
	$output .= '<div id="triple-column-container" class="triple-column-container top-rounded">';
	
		//header
		$output .= '<div class="header-bar top-rounded content-bar">';
		if($method == 'add') $output .= $siteText['addGroup'];
		if($method == 'edit') $output .= $siteText['editGroup'];
		$output .= '</div>';
		$output .= '<div class="double-column-content">';
			
			
			//form
			$output .= '<form action="" method="post">';
			
			//title
			$output .= '<div class="input-total">';	
				$output .= '<div class="input-title">';
					//error	
					if(!empty($_SESSION['addGroup']['errors'][0])){ $output .= '<span class="errForm">'.$_SESSION['addGroup']['errors'][0].'</span><br />'; }	
					//title
					$output .= $siteText['formGroupTitle'];
				$output .= '</div>';
				$output .= '<input type="text" name="title" value="'.$_SESSION['addGroup']['value'][0].'" />';
			$output .= '</div>';
			$output .= '<div class="clear"></div>';		
		/*
			//linkname
			$output .= '<div class="input-total">';
				$output .= '<div class="input-title">';
					//error	
					if(!empty($_SESSION['addGroup']['errors'][1])){ $output .= '<span class="errForm">'.$_SESSION['addGroup']['errors'][1].'</span><br />'; }
					//linkname
					$output .= $siteText['formGroupLinkname'];
				$output .= '</div>';
				$output .= '<input type="text" name="linkname" value="'.$_SESSION['addGroup']['value'][1].'" />';
			$output .= '</div>';
		*/
			$output .= '<div class="clear"></div>';		
			if($method == 'edit') $output .= '<input type="hidden" name="editId" value="'.$editId.'"/>';
			
			if($method == 'add') $output .= '<input type="submit" name="sbmAddGroup" value="add group" class="button fully-rounded"/>';
			if($method == 'edit') $output .= '<input type="submit" name="sbmEditGroup" value="edit group" class="button fully-rounded"/>';
			$output .= '</form>';
		$output .= '</div>';
	$output .= '</div>';
	$output .= '<div class="clear"></div>';
	
	return $output;
}

function sbmAddEditGroup($method){
	//get text
	$siteText = getSiteText();
		
	$editId = 0;
	if(!empty($_POST['title'])){
		$_SESSION['addGroup']['value'][0] = $_POST['title'];
		unset($_SESSION['addGroup']['errors'][0]);	
		
		//if(!empty($_POST['linkname'])){
			# get table
			$_GET['page'] == 'media' ? $table = 'media_groups' : $table = 'documents_groups';
			
			//urlencode linkname
			$linkname = linkname($_POST['title']);
			$linkname = urlencode($linkname);
				
			if($linkname != 'all'){
				if($method == 'add'){
	
					//check exists
					$query = 'SELECT linkname FROM '.$table.' WHERE linkname="'.$linkname.'"';
					
					$result = mysql_query($query);
					if(mysql_num_rows($result) == 0){
						
						//unset sessions
						unset($_SESSION['addGroup']);
						
							//insert into database
							mysql_query('INSERT INTO '.$table.'(title,linkname, timest) VALUES ("'.$_POST['title'].'","'.$linkname.'","'.time().'")');
							
							$itemId = mysql_insert_id();
							
							mysql_query('INSERT INTO status(itemId, page, active) VALUES ("'.$itemId.'","'.$table.'","1")');
							header('location: ../../');
						}
					else{
						//set error
						$_SESSION['addGroup']['errors'][1] = $siteText['linknameExists'];
						return addEditGroupForm($method, $editId);	
					}	
				}
				else{
					//unset sessions
						unset($_SESSION['addGroup']);
					//update database
					$query = 'UPDATE '.$table.' SET title="'.$_POST['title'].'", linkname="'.$linkname.'" WHERE id="'.$_POST['editId'].'" LIMIT 1';
				//	echo $query;
					mysql_query($query);
					header('location: ../../../'.$linkname);
				}
			/*}
			else{
				//set error
				$_SESSION['addGroup']['errors'][1] = $siteText['linknameAll'];
				return addEditGroupForm($method, $editId);	
			}*/
			
		}
		else{
			//set error
			$_SESSION['addGroup']['errors'][1] = $siteText['emptyField1'];
			return addEditGroupForm($method, $editId);	
		}
	}
	else{
		//set error
		$_SESSION['addGroup']['errors'][0] = $siteText['emptyField1'];
		if(empty($_POST['linkname'])) $_SESSION['addGroup']['errors'][1] = $siteText['emptyField1'];
		
		return addEditGroupForm($method, $editId);
	}
		
}



/* DELETE GROUP */
function deleteGroupQuestion($deleteId){

	//get table
	$_GET['page'] == 'media' ? $table = 'media_groups' : $table = 'documents_groups';
	
	//get info from database
	$query = 'SELECT title, linkname FROM '.$table.' WHERE id = '.$deleteId.' LIMIT 1';
	$result = mysql_query($query);
	$record = mysql_fetch_assoc($result);
	$title = $record['title'];
	$linkname = $record['linkname'];		
	
	//output
	$output = '';
	$output .= '<div id="triple-column-container" class="triple-column-container top-rounded">';
	
		//header
		$output .= '<div class="header-bar top-rounded content-bar">';
			$output .= 'move group to trash';
		$output .= '</div>';
		$output .= '<div class="double-column-content">';
	
		//form
		$output .= '<form action="" method="post">';
			$output .= 'Are you sure you want to move the group &ldquo;'.$title.'&rdquo; to the trashcan?<br />';
		
			$output .= '<input type="checkbox" name="allMediaToTrash" /> I also want to move all the items in the group to the trashcan.';
			$output .= '<input type="hidden" name="deleteId" value="'.$deleteId.'" class="button fully-rounded"/>';
			$output .= '<input type="submit" name="sbmDeleteGroup" value="yes, delete" class="button fully-rounded"/>
						<input type="submit" name="back" value="no" class="button fully-rounded"/>
						<div class="clear"></div>';	
		$output .= '</form>';
	
		$output .= '</div>';
	$output .= '</div>';
	
	return $output;
		
}

function sbmDeleteGroup(){
	$page = 'media';
	if(isset($_GET['page'])) $page = $_GET['page'];
	
	$deleteId = $_POST['deleteId'];
	//move group to trash	
	mysql_query('UPDATE status SET active = "0" WHERE itemId = '.$deleteId.' AND page = "'.$page.'_groups" LIMIT 1');
	
	//if user wants to remove al media items in that group
	if(isset($_POST['allMediaToTrash'])){
		
		if($page == 'media'){
			//get items in that group
			$query = 'SELECT m.id AS mediaId 
					  FROM media AS m, media_grouprows AS mg
					  WHERE m.id = mg.mediaId
					  AND mg.groupId = '.$deleteId;
			$result = mysql_query($query);
			while($record = mysql_fetch_assoc($result)){
				//move media to trash
				$id = $record['mediaId'];	
				mysql_query('UPDATE status SET active = "0" WHERE itemId = '.$id.' AND page = "media" LIMIT 1');
			}
		}
		else if($page == 'documents'){
			//get items in that group
			$query = 'SELECT d.id AS documentId 
					  FROM documents AS d, documents_grouprows AS dg
					  WHERE d.id = dg.mediaId
					  AND dg.groupId = '.$deleteId;
			$result = mysql_query($query);
			while($record = mysql_fetch_assoc($result)){
				//move media to trash
				$id = $record['documentId'];	
				mysql_query('UPDATE status SET active = "0" WHERE itemId = '.$id.' AND page = "documents" LIMIT 1');
			}
		}
	}
	header('location: ../../');
}

function moveMediaToGroup(){
	$toGroup = $_POST['selectToGroup'];
	$page = $_GET['page'];
	
	if(isset($_POST['option'])){
		foreach($_POST['option'] as $key => $mediaToMove){
			if($toGroup == 'all'){
				mysql_query('DELETE FROM '.$page.'_grouprows WHERE mediaId ='.$mediaToMove.' LIMIT 1');
			}
			else{
				
				/*
				$query = 'UPDATE '.$page.'_grouprows SET groupId = "'.$toGroup.'" WHERE mediaId = "'.$mediaToMove.'" LIMIT 1';
				$result = mysql_query($query);
				if(mysql_affected_rows() == 0){
					mysql_query('INSERT INTO '.$page.'_grouprows(groupId, mediaId, timest) VALUES("'.$toGroup.'","'.$mediaToMove.'","'.time().'")');
				}*/
				
			//if media already is in a group : update
				$result = mysql_query('SELECT groupId FROM '.$page.'_grouprows WHERE mediaId = '.$mediaToMove.' LIMIT 1');
				if(mysql_num_rows($result) > 0){
					mysql_query('UPDATE '.$page.'_grouprows SET groupId = "'.$toGroup.'" WHERE mediaId = '.$mediaToMove.' LIMIT 1');
				}
			//else : insert
				else{
					mysql_query('INSERT INTO '.$page.'_grouprows(groupId, mediaId,timest) VALUES("'.$toGroup.'","'.$mediaToMove.'",'.time().')');
				}
			}
		}
	}
	header('location: ./');

}



?>