Oxygen

<?php

/**

 * Project:     Oxygen Bulletin Board

 * File :       $HeadURL$

 * Revision :   $Revision$

 * Author :     $Author$

 * Date :       $Date$

 * Id :         $Id$

 *

 * Oxygen is free software; you can redistribute it and/or modify it

 * under the terms of the GNU General Public License as published

 * by the Free Software Foundation; either version 2 of the License,

 * or (at your option) any later version.

 *

 * Oxygen is distributed in the hope that it will be useful, but

 * WITHOUT ANY WARRANTY; without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

 * GNU General Public License for more details.

 *

 * You should have received a copy of the GNU General Public License

 * along with this program; if not, write to the Free Software

 * Foundation, Inc., 59 Temple Place, Suite 330, Boston,

 * MA  02111-1307  USA

 *

 * @link http://www.o2php.com/

 * @copyright 2002-2006 Oxygen Team.

 * @author Eric Fredj <heltem at o2php dot com>

 * @package o2php

 * @version [VERSION]

 */

define("O2_NOQUICKJUMP", true);

$TPL_LOAD = 'news, news_footer_admin, news_post, news_view_admin, news_list, news_list_row';

require('./header.php');

setCSS('CalendarPopup.css', 'calendar');

$nid = isset($_REQUEST['nid']) ? (int) $_REQUEST['nid'] : 0;

if(('view' == $action || 'Administrator' != $status) && 0 != $nid) {

        $query= $db->query("SELECT * FROM $table[news] WHERE nid=" . $nid);

        $news = $db->fetch_assoc($query);

        $bbT->handleTags('html');

        // Cache Smilies

        smcwcache(true, false);

        $smilies = $o2cache['smilies'];

        if($smilies[0] > 0) {

                $bbT->addSmilies($smilies[1]);

        }

        $news['msg'] = $bbT->processHtml($news['msg']);

        $news['msg'] = $bbT->processWrap($news['msg']);

        $news['msg'] = $bbT->processTags($news['msg'], true);

        $news['subject'] = $bbTinline->processHtml($news['subject']);

        $news['subject'] = $bbTinline->processTags($news['subject']);

        $bbT->removeTags('html');

        $date = datecvt($news['dateline']);

        $startdate = gmdate($huser['datecode'], $news['timestart'] + $time3600);

        $enddate = gmdate($huser['datecode'], $news['timeend'] + $time3600);

        if('Administrator' == $status) {

                eval("\$news_view_admin = \"" . template("news_view_admin") . "\";");

        }

        eval("\$news_content = \"" . template("news_view") . "\";");

        eval("\$news = \"" . template("news") . "\";");

        echo $news;

        exit;

}

if('Administrator' != $status) {

        redirect("javascript:window.close()");

        message($lang['notadmin'], false, false);

        exit;

}

if($action == "post") {

        if(!isset($submit)) {

                $news['nid'] = 0;

                $listmonth = implode('", "', $month_names);

                $listday = implode('", "', array($lang['timesunprfx'], $lang['timemonprfx'], $lang['timetueprfx'], $lang['timewedprfx'], $lang['timethuprfx'], $lang['timefriprfx'], $lang['timesatprfx']));

                $day_names = array();

                for($i = 1; $i < 32; $i++) {

                        $day_names[] = $i;

                }

                $year_start = gmdate('Y', $timestamp);

                $month_start = gmdate('n', $timestamp);

                $day_start = gmdate('j', $timestamp);

                $year_end = gmdate('Y', $timestamp + 15 * 86400);

                $month_end = gmdate('n', $timestamp + 15 * 86400);

                $day_end = gmdate('j', $timestamp + 15 * 86400);

                $start_month = newpopup('start_month', $month_names, array('blank' => true, 'attr' => 'class="smalltxt"', 'usekey' => true), $month_start);

                $end_month = newpopup('end_month', $month_names, array('blank' => true, 'attr' => 'class="smalltxt"', 'usekey' => true), $month_end);

                eval("\$news_content = \"".template("news_post")."\";");

        } else {

                $news = $_POST['news'];

                $news['timestart'] = mktime(0, 0, 0, $start_month, $start_day, $start_year);

                $news['timeend'] = mktime(23, 59, 59, $end_month, $end_day, $end_year);

                if($news['timeend'] < $news['timestart']) {

                        $news['timeend'] = mktime(23, 59, 59, $start_month, $start_day, $start_year);

                }

                $news['subject'] = $db->textFormat($news['subject']);

                $news['message'] = $db->textFormat($news['message']);

                if('' == $news['subject']) {

                        $newsmsg = $lang['textnosubject'];

                        $redirecturl = 'javascript:history.go(-1)';

                } elseif('' == $news['message']) {

                        $newsmsg = $lang['textemptypost'];

                        $redirecturl = 'javascript:history.go(-1)';

                } else {

                        if($nid) {

                                $db->query("UPDATE $table[news] SET author='{$huser['username']}', dateline=$now, subject=$news[subject], msg=$news[message], timestart=$news[timestart], timeend=$news[timeend] WHERE nid=$nid");

                        } else {

                                $db->query("INSERT INTO $table[news] VALUES('', '{$huser['username']}', $now, $news[subject], $news[message], $news[timestart], $news[timeend])");

                        }

                        $newsmsg = $lang['postmsg'];

                        $redirecturl = 'news.php';

                }

                redirect($redirecturl);

                message($newsmsg, false, false);

        }

} elseif('edit' == $action && 0 != $nid) {

        $query= $db->query("SELECT * FROM $table[news] WHERE nid=$nid");

        $news = $db->fetch_assoc($query);

        $listmonth = implode('", "', $month_names);

        $listday = implode('", "', array($lang['timesunprfx'], $lang['timemonprfx'], $lang['timetueprfx'], $lang['timewedprfx'], $lang['timethuprfx'], $lang['timefriprfx'], $lang['timesatprfx']));

        $day_names = array();

        for($i = 1; $i < 32; $i++) {

                $day_names[] = $i;

        }

        $year_start = gmdate('Y', $news['timestart'] + $time3600);

        $month_start = gmdate('n', $news['timestart'] + $time3600);

        $day_start = gmdate('j', $news['timestart'] + $time3600);

        $year_end = gmdate('Y', $news['timeend'] + $time3600);

        $month_end = gmdate('n', $news['timeend'] + $time3600);

        $day_end = gmdate('j', $news['timeend'] + $time3600);

        $start_month = newpopup('start_month', $month_names, array('blank' => true, 'attr' => 'class="smalltxt"', 'usekey' => true), $month_start);

        $end_month = newpopup('end_month', $month_names, array('blank' => true, 'attr' => 'class="smalltxt"', 'usekey' => true), $month_end);

        eval("\$news_content = \"" . template("news_post") . "\";");

} elseif($action == "delete") {

        if(is_array($delete) && !empty($delete)) {

                $nidlist = implode(', ', $delete);

                $query = $db->query("DELETE FROM $table[news] WHERE nid IN ($nidlist)");

        }

        header('Location: ' . O2_URL . '/news.php');

} else {

        $query = $db->query("SELECT * FROM $table[news] ORDER BY timestart DESC, timeend DESC, dateline DESC");

        while($news = $db->fetch_assoc($query)) {

                $thisbg = 'altbg' . (($j++ % 2) + 1);

                $date = gmdate($huser['datecode'], $news['dateline'] + $time3600);

                $startdate = gmdate($huser['datecode'], $news['timestart'] + $time3600);

                $enddate = gmdate($huser['datecode'], $news['timeend'] + $time3600);

                $news['subject'] = $bbTinline->processHtml($news['subject']);

                $news['subject'] = $bbTinline->processTags($news['subject']);

                $news['ssubject'] = strip_tags($news['subject']);

                if($now > $news['timestart'] && $now < $news['timeend']) {

                        $news['subject'] .= " *";

                }

                eval("\$news_list_row .= \"" . template("news_list_row")."\";");

        }

        eval("\$news_content .= \"" . template("news_list")."\";");

}

eval("\$news_footer_admin = \"" . template("news_footer_admin") . "\";");

eval("\$news = \"" . template("news") . "\";");

echo $news;