"._LINKS."";
if(isset($_GET['delete']) && isNumber($_GET['delete'])) {
$result = dbquery("DELETE FROM ".TABLEPREFIX."fanfiction_pagelinks WHERE link_id = $_GET[delete] LIMIT 1");
if($result) $output .= write_message(_ACTIONSUCCESSFUL);
else $output .= write_error(_ERROR);
}
if(isset($_POST['submit'])) {
if(!preg_match("!^[a-z0-9_]{3,30}$!i", $_POST['link_name'])) $output .= write_error(_BADVARNAME);
else {
if(isNumber($_POST['link_access'])) $link_access = $_POST['link_access'];
else $link_access = 0;
$link_name = descript($_POST['link_name']);
$link_text = descript($_POST['link_text']);
$link_url = descript(strip_tags($_POST['link_url']));
$link_target = descript($_POST['link_target']);
$link_key = strlen($_POST['link_key']) > 1 ? substr($_POST['link_key'], 0, 1) : $_POST['link_key']; // only one letter please.
if(isset($_GET['edit']) && isNumber($_GET['edit']))
$result = dbquery("UPDATE ".TABLEPREFIX."fanfiction_pagelinks SET link_name = '".escapestring($link_name)."', link_text = '".escapestring($link_text)."', link_key = '$link_key', link_url = '".escapestring($link_url)."', link_target = '$link_target', link_access = '$link_access' WHERE link_id = $_GET[edit] LIMIT 1");
else $result = dbquery("INSERT INTO ".TABLEPREFIX."fanfiction_pagelinks(`link_name`, `link_text`, `link_key`, `link_url`, `link_target`, `link_access`) VALUES('".escapestring($link_name)."', '".escapestring($link_text)."', '".escapestring($link_key)."', '".escapestring($link_url)."', '$link_target', '$link_access')");
if($result) {
$output .= write_message(_ACTIONSUCCESSFUL);
$linkquery = dbquery("SELECT * from ".TABLEPREFIX."fanfiction_pagelinks ORDER BY link_access ASC");
if(!isset($current)) $current = "";
while($link = dbassoc($linkquery)) {
if($link['link_access'] && !isMEMBER) continue;
if($link['link_access'] == 2 && !isADMIN) continue;
$tpl->assignGlobal($link['link_name'], "".$link['link_text']."");
$pagelinks[$link['link_name']] = array("id" => $link['link_id'], "text" => $link['link_text'], "url" => _BASEDIR.$link['link_url'], "link" => "".$link['link_text']."");
}
}
else $output .= write_error(_ERROR);
unset($_GET['edit']);
}
}
if(isset($_GET['edit']) || isset($_GET["new"])) {
if(isset($_GET['edit'])) {
$pagequery = dbquery("SELECT * FROM ".TABLEPREFIX."fanfiction_pagelinks WHERE link_id = ".$_GET['edit']." LIMIT 1");
$link = dbassoc($pagequery);
$id = $link['link_id'];
$name = $link['link_name'];
$text = $link['link_text'];
$url = $link['link_url'];
$target = $link['link_target'];
$access = $link['link_access'];
$edit = $_GET['edit'];
$accesskey = $link['link_key'];
}
else {
$link = "";
$id = "";
$name = "";
$text = "";
$url = "";
$target = "";
$link = "";
$edit = "";
$access = 0;
$accesskey = "";
}
$output .= "";
$output .= write_message(_NAMECONVENTIONS);
}
else {
// Re-populate the list of links to reflect any changes we just made.
$linkquery = dbquery("SELECT * from ".TABLEPREFIX."fanfiction_pagelinks ORDER BY link_access ASC");
if(!isset($current)) $current = "";
unset($pagelinks);
$output .= "| "._LINKS." | "._OPTIONS." |
|---|
";
while($link = dbassoc($linkquery)) {
if($link['link_access'] && !isMEMBER) continue;
if($link['link_access'] == 2 && !isADMIN) continue;
$tpl->assignGlobal($link['link_name'], "".$link['link_text']."");
$pagelinks[$link['link_name']] = array("id" => $link['link_id'], "text" => $link['link_text'], "url" => _BASEDIR.$link['link_url'], "link" => "".$link['link_text']."");
$output .= "| ".$link['link_text']." |
"._EDIT." |
"._DELETE." |
";
}
if(!dbnumrows($linkquery)) $output .= "| "._NORESULTS." |
";
$output .= "| "._ADDNEWLINK." |
";
$output .= "
";
}
?>