3) accessDenied(); $output .= "
" . _NEWS . "
"; if (isset($_POST['submit'])) { $title = addslashes(strip_tags(descript($_POST['title']), $allowed_tags)); $author = addslashes(strip_tags(descript($_POST['author']), $allowed_tags)); $story = addslashes(strip_tags(descript($_POST['story']), $allowed_tags)); $time = time(); if ($_GET['form'] == "new") $result = dbquery("INSERT INTO " . TABLEPREFIX . "fanfiction_news (title, author, story, time) VALUES ('$title', '$author', '$story', '$time')"); else $result = dbquery("UPDATE " . TABLEPREFIX . "fanfiction_news SET title = '$title', author = '$author', story = '$story' WHERE nid = '$_POST[nid]'"); if ($result) { $output .= write_message(_ACTIONSUCCESSFUL); unset($_GET['form']); } else $output .= write_error(_ERROR . " " . TRYAGAIN); } if (isset($_GET['delete']) && isNumber($_GET['delete'])) { if (isset($_GET['confirm'])) { if ($_GET['confirm'] == "yes") { dbquery("DELETE FROM " . TABLEPREFIX . "fanfiction_news where nid = '" . $_GET['delete'] . "'"); $output .= write_message(_ACTIONSUCCESSFUL); } else if ($_GET['confirm'] == "no") $output .= write_message(_ACTIONCANCELLED); } else { $output .= write_message(_CONFIRMDELETE . "

[ " . _YES . " | " . _NO . " ]"); } } else if (isset($_GET["form"])) { if ($_GET["form"] != "new" && isNumber($_GET["form"])) { $result = dbquery("SELECT * FROM " . TABLEPREFIX . "fanfiction_news WHERE nid = '" . $_GET['form'] . "' LIMIT 1"); $newsitem = dbassoc($result); } else $newsitem = array("title" => "", "author" => "", "story" => ""); $output .= "
" . ($_GET["form"] == "new" ? _ADDNEWS : _EDITNEWS) . "
" . _AUTHOR . ":
" . _TITLE . ":
" . _TEXT . ": "; if ($tinyMCE) $output .= "
"; $output .= "
" . ($_GET["form"] != "new" ? "" : "") . "
"; } else { $output .= "

" . _ADDNEWS . "

"; $count = dbquery("SELECT COUNT(nid) FROM " . TABLEPREFIX . "fanfiction_news"); list($numrows) = dbrow($count); $result = dbquery("SELECT n.*, n.time as date, count(c.cid) as comments FROM " . TABLEPREFIX . "fanfiction_news as n LEFT JOIN " . TABLEPREFIX . "fanfiction_comments as c ON n.nid = c.nid GROUP BY n.nid ORDER BY time DESC LIMIT $offset, $itemsperpage"); if (file_exists("$skindir/newsbox.tpl")) $news = new TemplatePower("$skindir/newsbox.tpl"); else $news = new TemplatePower("default_tpls/newsbox.tpl"); $news->prepare(); $count = 0; while ($stories = dbassoc($result)) { $news->newBlock("newsbox"); //assign values $news->assign("newstitle", $stories['title']); $news->assign("newsstory", $stories['story']); $news->assign("newsauthor", $stories['author']); $news->assign("newsdate", date("$dateformat $timeformat", $stories['date'])); $news->assign("oddeven", ($count % 2 ? "even" : "odd")); if ($newscomments == "1") $news->assign("newscomments", "" . $stories['comments'] . " " . _COMMENTS . ""); if (isADMIN) $news->assign("adminoptions", "" . _EDIT . " | " . _DELETE . ""); $count++; } $news->gotoBlock("_ROOT"); $output .= $news->getOutputContent(); if ($numrows > $itemsperpage) $output .= build_pagelinks("admin.php?action=news&", $numrows, $offset); }