science-ation/config/pagetexts.php

<?
/* 
   This file is part of the 'Science Fair In A Box' project
   Science-ation Website: https://science-ation.ca/

   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
   Copyright (C) 2024 AlgoLibre Inc. <science-ation@algolibre.io>

   This program is free software; you can redistribute it and/or
   modify it under the terms of the GNU General Public
   License as published by the Free Software Foundation, version 2.

   This program is distributed in the hope that it will be useful,
   but WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
    General Public License for more details.

   You should have received a copy of the GNU General Public License
   along with this program; see the file COPYING.  If not, write to
   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
   Boston, MA 02111-1307, USA.
*/
?>
<?
require("../common.inc.php");
require_once("../user.inc.php");
user_auth_required('committee', 'config');

//make sure storage folder exists
if (!file_exists("../data/userfiles"))
	mkdir("../data/userfiles");


send_header(
	"Page Texts",
	array(
		'Committee Main' => 'committee_main.php',
		'SFIAB Configuration' => 'config/index.php'
	),
	"page_texts"
);

$q = $pdo->prepare("SELECT * FROM pagetext WHERE year='-1' ORDER BY textname");
$q->execute();

while ($r = $q->fetch(PDO::FETCH_OBJ)) {
	foreach ($config['languages'] as $lang => $langname) {
		$q_current = $pdo->prepare("SELECT * FROM pagetext WHERE year=" . $pdo->quote($config['FAIRYEAR']) . " and textname=" . $pdo->quote($r->textname) . "");
		$q_current->execute();

		if ($q_current->rowCount() == 0) {
			$q1 = $pdo->prepare("INSERT INTO pagetext (`textname`,`textdescription`,`text`,`year`,`lang`) VALUES (
				" . $pdo->quote($r->textname) . ",
				" . $pdo->quote($r->textdescription) . ",
				" . $pdo->quote($r->text) . ",
				" . $pdo->quote($config['FAIRYEAR']) . ",
				" . $pdo->quote($lang) . ")");

			$q1->execute();
		}
	}
}


if (get_value_from_array($_POST, 'action') == "save") {
	foreach ($config['languages'] as $lang => $langname) {
		$textvar = "text_$lang";
		$text = $pdo->quote(stripslashes($_POST[$textvar]));

		$stmt = $pdo->prepare("UPDATE pagetext 
				SET 
					lastupdate=NOW(), 
					text=$text
				WHERE 
					textname=" . $pdo->quote($_POST['textname']) . " 
					AND year='" . $config['FAIRYEAR'] . "'
					AND lang='$lang'");
		$stmt->execute();
	}
	echo happy(i18n("Page texts successfully saved"));
}

if (get_value_from_array($_GET, 'textname')) {
	$q = $pdo->prepare("SELECT * FROM pagetext WHERE textname='" . $_GET['textname'] . "' AND year='" . $config['FAIRYEAR'] . "'");
	$q->execute();
	//needs to be at least one entry in any languages
	if ($r = $q->fetch(PDO::FETCH_OBJ)) {
		echo "<form method=\"post\" action=\"pagetexts.php\">";
		echo "<input type=\"hidden\" name=\"action\" value=\"save\">\n";
		echo "<input type=\"hidden\" name=\"textname\" value=\"$r->textname\">\n";


		foreach ($config['languages'] as $lang => $langname) {
			$q = $pdo->prepare("SELECT * FROM pagetext WHERE textname='" . $_GET['textname'] . "' AND year='" . $config['FAIRYEAR'] . "' AND lang='$lang'");
			$q->execute();
			$r = $q->fetch(PDO::FETCH_OBJ);

			if (!$r) {
				$stmt = $pdo->prepare("INSERT INTO pagetext (textname,year,lang) VALUES ('" . $pdo->quote($_GET['textname']) . "','" . $config['FAIRYEAR'] . "','$lang')");
				$stmt->execute();
				show_pdo_errors_if_any($pdo);
			}

			if ($r->lastupdate == "0000-00-00 00:00:00" || !$r->lastupdate) $lastupdate = "Never";
			else $lastupdate = $r->lastupdate;
			echo "<b>" . htmlspecialchars($_GET['textname']) . " - $langname</b> &nbsp;&nbsp; " . i18n("Last updated") . ": $lastupdate<br />";
			require_once("../fckeditor/fckeditor.php");

			$oFCKeditor = new FCKeditor("text_$lang");
			$oFCKeditor->BasePath  = "../fckeditor/";
			$oFCKeditor->Value = $r->text;
			$oFCKeditor->Width = "100%";
			$oFCKeditor->Height = 300;
			$oFCKeditor->Create();

			echo "<hr />";
		}

		echo "<table><tr><td>";
		echo "<input type=\"submit\" value=\"" . i18n("Save Page Texts") . "\" />\n";
		echo "</form>";
		echo "</td><td>";
		echo "<form method=\"get\" action=\"pagetexts.php\">";
		echo "<input type=\"submit\" value=\"" . i18n("Cancel Changes") . "\" />\n";
		echo "</form>\n";
		echo "</td></tr></table>\n";
	} else {
		echo error(i18n("Invalid text name"));
	}
} else {
	echo "<br />";
	echo i18n("Choose a page text to edit");
	echo "<table class=\"summarytable\">";

	$q = $pdo->prepare("SELECT * FROM pagetext WHERE year='" . $config['FAIRYEAR'] . "' AND lang='" . $config['default_language'] . "' ORDER BY textname");
	$q->execute();
	echo "<tr><th>" . i18n("Page Text Description") . "</th><th>" . i18n("Last Update") . "</th></tr>";
	while ($r = $q->fetch(PDO::FETCH_OBJ)) {
		echo "<tr><td><a href=\"pagetexts.php?textname=$r->textname\">$r->textdescription</a></td>";
		if ($r->lastupdate == "0000-00-00 00:00:00") $lastupdate = "Never";
		else $lastupdate = $r->lastupdate;
		echo "<td>$lastupdate</td>";
		echo "</tr>";
	}
	echo "</table>";
}

send_footer();
?>