"._CUSTPAGES.""; if(isset($_GET['delete']) && isNumber($_GET['delete'])) { $result = dbquery("DELETE FROM ".TABLEPREFIX."fanfiction_messages WHERE message_id = ".$_GET['delete']." LIMIT 1"); if($result) $output .= write_message(_ACTIONSUCCESSFUL); else $output .= write_error(_ERROR); } if(isset($_POST['submit'])) { if(!preg_match("!^[a-z0-9_]{3,30}$!i", $_POST['name'])) $output .= write_error(_BADVARNAME); else { $pagename = descript($_POST['name']); $pagetitle = descript($_POST['title']); if(isset($_GET['edit']) && isNumber($_GET['edit'])) $result = dbquery("UPDATE ".TABLEPREFIX."fanfiction_messages SET message_name = '".escapestring($pagename)."', message_title = '".escapestring($pagetitle)."', message_text = '".escapestring(descript($_POST['text']))."' WHERE message_id = ".$_GET['edit']." LIMIT 1"); else { $result = dbquery("INSERT INTO ".TABLEPREFIX."fanfiction_messages(`message_name`, `message_title`, `message_text`) VALUES( '".escapestring($pagename)."', '".escapestring($pagetitle)."', '".escapestring(descript($_POST['text']))."')"); if($result) $result = dbquery("INSERT INTO ".TABLEPREFIX."fanfiction_pagelinks(`link_name`, `link_text`, `link_url`, `link_target`, `link_access`) VALUES('".escapestring($pagename)."_link', '".escapestring($pagetitle)."', 'viewpage.php?page=$pagename', '0', '0')"); } if($result) $output .= write_message(_ACTIONSUCCESSFUL."

$pagetitle"); else $output .= write_error(_ERROR); unset($_GET['edit']); } } if((isset($_GET['edit']) && isNumber($_GET['edit'])) || isset($_GET["new"]) || isset($_POST['preview'])) { unset($message, $id, $name, $title, $text); if(isset($_POST['preview'])) { $name = descript($_POST['name']); $title = descript($_POST['title']); $thistext = descript($_POST['text']); $edit = isset($_GET['edit']) ? $_GET['edit'] : ""; if(strpos($thistext, "?>") === false) $output .= "

$title

\n\n$thistext"; else { $text = ""; eval("?>".$thistext."$title\n\n$text"; } $text = $thistext; } else if(isset($_GET['edit'])) { $edit = $_GET['edit']; $pagequery = dbquery("SELECT * FROM ".TABLEPREFIX."fanfiction_messages WHERE message_id = $edit LIMIT 1"); $message = dbassoc($pagequery); $id = $message['message_id']; $name = $message['message_name']; $title = $message['message_title']; $text = $message['message_text']; } else { $name = ""; $title = ""; $text = ""; } $output .= "

"; $output .= write_message(_CUSTPAGENOTE); } else { $listquery = dbquery("SELECT * FROM ".TABLEPREFIX."fanfiction_messages"); $output .= ""; while($msg = dbassoc($listquery)) { // Hidden messages they're listed in the settings. if($msg['message_name'] == "welcome" || $msg['message_name'] == "nothankyou" || $msg['message_name'] == "thankyou" || $msg['message_name'] == "copyright" || $msg['message_name'] == "printercopyright") continue; $output .= ""; } if(!dbnumrows($listquery)) $output .= ""; $output .= ""; $output .= "

"._ID."	"._NAME."	"._TITLE."	"._OPTIONS."
$msg[message_id]	$msg[message_name]	$msg[message_title]	"._EDIT." \| "._DELETE."
"._NORESULTS."
"._ADDCUSTPAGE."

"; $output .= write_message(_CUSTPAGENOTE); } ?>