_popup.php

<?PHP
/*
	01-Gästebuch - Copyright 2009-2014 by Michael Lorer - 01-Scripts.de
	Lizenz: Creative-Commons: Namensnennung-Keine kommerzielle Nutzung-Weitergabe unter gleichen Bedingungen 3.0 Deutschland
	Weitere Lizenzinformationen unter: http://www.01-scripts.de/lizenz.php
	
	Modul:		01gbook
	Dateiinfo: 	PopUp-Datei zum Ansehen und Bearbeiten von Gästebuch-Einträgen
	#fv.101#
*/

// Kommentar anzeigen
if(isset($_REQUEST['action']) && $_REQUEST['action'] == "show_entry" && $userdata[$modul] == 1 &&
	isset($_REQUEST['var1']) && !empty($_REQUEST['var1']) && is_numeric($_REQUEST['var1'])){
	
	if(isset($_REQUEST['var2']) && $_REQUEST['var2'] == "erfolg")
		echo "<p class=\"meldung_erfolg\">Eintrag wurde erfolgreich bearbeitet!
				<a href=\"javascript:window.close();\">Schlie&szlig;en</a></p>";

	// Einmalig Felder in Array einlesen
	$fields = _01gbook_getFields("");

	// Eintrag aus DB holen
	$list = $mysqli->query("SELECT * FROM ".$mysql_tables['gb_entry']." WHERE id = '".$mysqli->escape_string($_REQUEST['var1'])."' LIMIT 1");
	while($row = $list->fetch_assoc()){
		$feldinhalte = "";
		echo "<p>Geschrieben von <b>".stripslashes($row['field_'.$namefield_id])."</b> (".$row['ip'].") 
				am <b>".date("d.m.Y",$row['utimestamp'])."</b>, <b>".date("H:i",$row['utimestamp'])."</b> Uhr</p>";
		
		echo "<p style=\"float:right;\">
		<a href=\"".$filename."?modul=".$modul."&amp;action=edit_entry&amp;var1=".$_REQUEST['var1']."\"><img src=\"images/icons/icon_edit.gif\" alt=\"Stift+Papier\" title=\"Eintrag bearbeiten\" /></a>
		<img src=\"images/layout/spacer.gif\" alt=\"spacer\" width=\"15\" />
		<a href=\"".$filename."?modul=".$modul."&amp;action=del_entry&amp;var1=".$_REQUEST['var1']."\"><img src=\"images/icons/icon_delete.gif\" alt=\"rotes Kreuz\" title=\"Eintrag l&ouml;schen\" /></a>
		</p>";
		
		// Angelegte Felder durchgehen
		foreach($fields as $field){
			if($field['id'] != $namefield_id && !empty($row['field_'.$field['id']])){
				$feldinhalte .= "\n\n<p class=\"entryfieldline\">\n";
				
				// Feldnamen ausgeben (außer beim Nachrichtenfeld)
				if($field['id'] != $eintragsfield_id)
					$feldinhalte .= "<b>".$field['name']."</b> ";
				
				switch($field['fieldtype']){
				  case "text":
				  case "select":
				    if($field['parse'] == "email")
						$feldinhalte .= "<a href=\"mailto:".stripslashes($row['field_'.$field['id']])."\">".stripslashes($row['field_'.$field['id']])."</a>";
					elseif($field['parse'] == "url")
						$feldinhalte .= "<a href=\"".stripslashes($row['field_'.$field['id']])."\" target=\"_blank\">".stripslashes($row['field_'.$field['id']])."</a>";
					else
						$feldinhalte .= stripslashes($row['field_'.$field['id']]);
				  break;
				  case "textarea":
					if($field['id'] == $eintragsfield_id){
						// BB-Code & Smilies
		                $inhalt = stripslashes($row['field_'.$field['id']]);
		                if($row['bbc_smile_deaktiv'] == 0 && $settings['gbooksmilies'] == 1 && $settings['gbookbbc'] == 1)
							$inhalt = bb_code_comment($inhalt,1,1,1);
						elseif($row['bbc_smile_deaktiv'] == 0 && $settings['gbookbbc'] == 1)
							$inhalt = bb_code_comment($inhalt,1,1,0);
						elseif($row['bbc_smile_deaktiv'] == 0 && $settings['gbooksmilies'] == 1)
							$inhalt = bb_code_comment($inhalt,1,0,1);
						else 
							$inhalt = nl2br($inhalt);
						
						$feldinhalte .= $inhalt;
						}
					else{
						$feldinhalte .= "<br />";
						$feldinhalte .= nl2br(stripslashes($row['field_'.$field['id']]));
						}
				  break;
				  }
				$feldinhalte .= "</p>";
				}
			}
		echo $feldinhalte;
		}
	}
	
	
	
	
	
	
	
	
// Kommentar bearbeiten (Formular)
if(isset($_REQUEST['action']) && $_REQUEST['action'] == "edit_entry" && $userdata[$modul] == 1 &&
	isset($_REQUEST['var1']) && !empty($_REQUEST['var1']) && is_numeric($_REQUEST['var1'])){
	
	echo "<h2>Eintrag bearbeiten</h2>";
	
	// Eintrag aus DB holen
	$list = $mysqli->query("SELECT * FROM ".$mysql_tables['gb_entry']." WHERE id = '".$mysqli->escape_string($_REQUEST['var1'])."' LIMIT 1");
	while($row = $list->fetch_assoc()){
		if($row['bbc_smile_deaktiv'] == 1) $c1 = " checked=\"checked\"";
		else $c1 = "";
		
		echo "<form action=\"".$filename."\" method=\"post\" name=\"post\">
	<table border=\"0\" align=\"center\" width=\"100%\" cellpadding=\"3\" cellspacing=\"5\" class=\"rundrahmen trab\">";

		$felder = "";
		$count = 0;
		$listfields = $mysqli->query("SELECT * FROM ".$mysql_tables['gb_fields']." ORDER BY sortorder,name");
		while($rowf = $listfields->fetch_assoc()){
			if($count == 1){ $class = "tra"; $count--; }else{ $class = "trb"; $count++; }
			
			// Sonderfeld (Eingabefeld) ID == $eintragsfield_id ?
			if($rowf['id'] == $eintragsfield_id){
				if($settings['gbookbbc'] == 1){
					$felder .= "
    <tr>
        <td colspan=\"2\">
            <input type=\"button\" value=\"B\" style=\"font-weight: bold;\" onclick=\"bbcinsert('[B]', '[/B]')\" class=\"input\" />
            <input type=\"button\" value=\"I\" style=\"font-style: italic;\" onclick=\"bbcinsert('[I]', '[/I]')\" class=\"input\" />
            <input type=\"button\" value=\"U\" style=\"font-style: underline;\" onclick=\"bbcinsert('[U]', '[/U]')\" class=\"input\" />
            <input type=\"button\" value=\"Center\" onclick=\"bbcinsert('[CENTER]', '[/CENTER]')\" class=\"input\" />
            &nbsp;&nbsp;&nbsp;&nbsp;
            <input type=\"button\" value=\"Zitat\" onclick=\"bbcinsert('[QUOTE]', '[/QUOTE]')\" class=\"input\" />
            <input type=\"button\" value=\"URL\" onclick=\"bbcinsert('[URL=http://]', '[/URL]')\" class=\"input\" />
            <input type=\"button\" value=\"@\" onclick=\"bbcinsert('[EMAIL=@]', '[/EMAIL]')\" class=\"input\" />
        </td>
    </tr>";
					}
				if($settings['gbooksmilies'] == 1){
					$felder .= "
    <tr>
        <td colspan=\"2\">
            <a href=\"#textarea\" onclick=\"javascript:bbcinsert(' :eek: ', '');\"><img src=\"".$smiliedir."1.gif\" alt=\"Smilie :eek:\" style=\"border:0;\" /></a>
            <a href=\"#textarea\" onclick=\"javascript:bbcinsert(' :D ', '');\"><img src=\"".$smiliedir."2.gif\" alt=\"Smilie :D\" style=\"border:0;\" /></a>
            <a href=\"#textarea\" onclick=\"javascript:bbcinsert(' :p ', '');\"><img src=\"".$smiliedir."3.gif\" alt=\"Smilie *Zunge rausstreck*\" style=\"border:0;\" /></a>
            <a href=\"#textarea\" onclick=\"javascript:bbcinsert(' :?: ', '');\"><img src=\"".$smiliedir."4.gif\" alt=\"Smilie ???\" style=\"border:0;\" /></a>
            <a href=\"#textarea\" onclick=\"javascript:bbcinsert(' 8) ', '');\"><img src=\"".$smiliedir."5.gif\" alt=\"Smilie mit cooler Sonnenbrille\" style=\"border:0;\" /></a>
            <a href=\"#textarea\" onclick=\"javascript:bbcinsert(' :( ', '');\"><img src=\"".$smiliedir."6.gif\" alt=\"Smilie sad\" style=\"border:0;\" /></a>
            <a href=\"#textarea\" onclick=\"javascript:bbcinsert(' :x: ', '');\"><img src=\"".$smiliedir."7.gif\" alt=\"Smilie :x:\" style=\"border:0;\" /></a>
            <a href=\"#textarea\" onclick=\"javascript:bbcinsert(' :O_o: ', '');\"><img src=\"".$smiliedir."8.gif\" alt=\"Smilie oO\" style=\"border:0;\" /></a>
            <a href=\"#textarea\" onclick=\"javascript:bbcinsert(' :o ', '');\"><img src=\"".$smiliedir."9.gif\" alt=\"Smilie :o\" style=\"border:0;\" /></a>
            <a href=\"#textarea\" onclick=\"javascript:bbcinsert(' :lol: ', '');\"><img src=\"".$smiliedir."10.gif\" alt=\"Smilie *lol*\" style=\"border:0;\" /></a>
            <a href=\"#textarea\" onclick=\"javascript:bbcinsert(' :x( ', '');\"><img src=\"".$smiliedir."11.gif\" alt=\"Smilie :x(\" style=\"border:0;\" /></a>
            <a href=\"#textarea\" onclick=\"javascript:bbcinsert(' :no: ', '');\"><img src=\"".$smiliedir."12.gif\" alt=\"Smilie *Kopfsch&uuml;ttel*\" style=\"border:0;\" /></a>
            <a href=\"#textarea\" onclick=\"javascript:bbcinsert(' :-: ', '');\"><img src=\"".$smiliedir."13.gif\" alt=\"Smilie :-:\" style=\"border:0;\" /></a>
            <a href=\"#textarea\" onclick=\"javascript:bbcinsert(' :rolleyes: ', '');\"><img src=\"".$smiliedir."14.gif\" alt=\"Smilie, der mit den Augen rollt\" style=\"border:0;\" /></a>
            <a href=\"#textarea\" onclick=\"javascript:bbcinsert(' ;( ', '');\"><img src=\"".$smiliedir."15.gif\" alt=\"Weinender Smilie (sad)\" style=\"border:0;\" /></a>
            <a href=\"#textarea\" onclick=\"javascript:bbcinsert(' :) ', '');\"><img src=\"".$smiliedir."16.gif\" alt=\"Normaler lachender Smilie\" style=\"border:0;\" /></a>
            <a href=\"#textarea\" onclick=\"javascript:bbcinsert(' ;)D ', '');\"><img src=\"".$smiliedir."17.gif\" alt=\"Smilie ;)D\" style=\"border:0;\" /></a>
            <a href=\"#textarea\" onclick=\"javascript:bbcinsert(' X-X ', '');\"><img src=\"".$smiliedir."18.gif\" alt=\"Smilie X-X\" style=\"border:0;\" /></a>
            <a href=\"#textarea\" onclick=\"javascript:bbcinsert(' ;) ', '');\"><img src=\"".$smiliedir."19.gif\" alt=\"Zwinkernder Smilie\" style=\"border:0;\" /></a>
            <a href=\"#textarea\" onclick=\"javascript:bbcinsert(' :yes: ', '');\"><img src=\"".$smiliedir."20.gif\" alt=\"Smilie :yes:\" style=\"border:0;\" /></a>
        </td>
    </tr>";
					}
				}
			
			// Pflichtfeld ?
			if($rowf['pflicht'] == 1) $pfl = "*";
			else $pfl = "";

			if($rowf['fieldtype'] == "text" || $rowf['fieldtype'] == "select")
				$felder .= "    <tr class=\"".$class."\">
				<td><b>".stripslashes($rowf['name']).$pfl."</b></td>";
			else
				$felder .= "    <tr class=\"".$class."\">
				<td colspan=\"2\"><b>".stripslashes($rowf['name']).$pfl."</b><br />\n";
			
			switch($rowf['fieldtype']){
			  case "text":
				// Maximale Länge
				if(isset($rowf['length']) && !empty($rowf['length']) && is_numeric($rowf['length']))
					$maxlength = " maxlength=\"".$rowf['length']."\"";
				else $maxlength = "";
				
				$felder .= "
				<td><input type=\"text\" name=\"feld_".$rowf['id']."\"".$maxlength." value=\"".$row['field_'.$rowf['id']]."\" size=\"30\" /></td>";
			  break;
			  case "select":
				$options = "";
				$optionarray = explode("\n",$rowf['wert']);
				if(is_array($optionarray)){
					foreach($optionarray as $option){
						if(chop($option) == $row['field_'.$rowf['id']]) $sel = " selected=\"selected\"";
						else $sel = "";
						
						$options .= "<option".$sel.">".chop($option)."</option>\n";
						}
					}
				else $options = "<option>".$optionarray."</option>\n";
				
				$felder .= "
				<td><select name=\"feld_".$rowf['id']."\" class=\"input_select\">".$options."</select></td>";
			  break;
			  case "textarea":
				if($rowf['id'] == $eintragsfield_id) $fieldname = "newsfeld";
				else $fieldname = "feld_".$rowf['id'];
				$felder .= "<textarea name=\"".$fieldname."\" rows=\"10\" cols=\"65\" rows=\"10\" cols=\"65\" style=\"font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; font-style: normal;\">".stripslashes($row['field_'.$rowf['id']])."</textarea>";
				
				if($settings['gbookbbc'] == 1 || $settings['gbooksmilies'] == 1){
					if($row['bbc_smile_deaktiv'] == 0) $c = "";
					else $c = " checked=\"checked\"";
					
					$felder .= "<br /><input type=\"checkbox\" name=\"deaktiv_bbc\" value=\"1\"".$c." /> Smilies &amp; BB-Code <b>de</b>aktivieren?";
					}
				
				$felder .= "</td>";
			  break;
			  }
			
			$felder .= "
			</tr>";
			}
		echo $felder;
		echo "
		<tr>
			<td class=\"tra\"><input type=\"reset\" value=\"Reset\" class=\"input\" /></td>
			<td class=\"tra\" align=\"right\">
				<input type=\"hidden\" name=\"var1\" value=\"".$row['id']."\" />
				<input type=\"hidden\" name=\"action\" value=\"save_entry\" />
				<input type=\"hidden\" name=\"modul\" value=\"".$modul."\" />
				<input type=\"submit\" name=\"submit\" value=\"Speichern &raquo;\" class=\"input\" />
			</td>
		</tr>
	</table>
</form>";
		}
	}
	
	
	
	
	
	
	
	
// Eintrag bearbeiten (Speichern)
if(isset($_REQUEST['action']) && $_REQUEST['action'] == "save_entry" && $userdata[$modul] == 1 &&
	isset($_REQUEST['var1']) && !empty($_REQUEST['var1']) && is_numeric($_REQUEST['var1'])){
	$_REQUEST['feld_'.$eintragsfield_id] = $_REQUEST['newsfeld'];
	
	// Pflichtfelder & parsing überprüfen
	$error = false;
	$list = $mysqli->query("SELECT id,parse,pflicht FROM ".$mysql_tables['gb_fields']." WHERE pflicht = '1' OR parse != ''");
	while($row = $list->fetch_assoc()){

		if($row['pflicht'] == 1){
			if(!isset($_REQUEST['feld_'.$row['id']]) || isset($_REQUEST['feld_'.$row['id']]) && empty($_REQUEST['feld_'.$row['id']])){
				$error = true;
				break;
				}
			}
			
		if(!empty($row['parse'])){
			switch($row['parse']){
			  case "email":
				if(isset($_REQUEST['feld_'.$row['id']]) && !empty($_REQUEST['feld_'.$row['id']]))
					if(!check_mail($_REQUEST['feld_'.$row['id']])) $error = true;
			  break;
			  case "url":
				if(isset($_REQUEST['feld_'.$row['id']]) && !empty($_REQUEST['feld_'.$row['id']])){
					if(!strchr($_REQUEST['feld_'.$row['id']],"http://"))
						$_REQUEST['feld_'.$row['id']] = "http://".$_REQUEST['feld_'.$row['id']];
					
					if(!_01gbook_check_url($_REQUEST['feld_'.$row['id']])) $error = true;
					}
			  break;
			  }
			
			if($error) break;
			}
		}
		
	if(!$error){
		if(!isset($_REQUEST['deaktiv_bbc']) || isset($_REQUEST['deaktiv_bbc']) && empty($_REQUEST['deaktiv_bbc'])) $_REQUEST['deaktiv_bbc'] = 0;
		// Build Update-Query
		$query_werte = "";
		$list = $mysqli->query("SELECT id,name,fieldtype,length FROM ".$mysql_tables['gb_fields']." ORDER BY id");
		while($row = $list->fetch_assoc()){
			if(isset($_REQUEST['feld_'.$row['id']]) && !empty($_REQUEST['feld_'.$row['id']])){
				$query_werte .= ",\nfield_".$row['id']." = ";
				if($row['fieldtype'] == "text" && !empty($row['length']) && $row['length'] > 0)
					$query_werte .= "'".$mysqli->escape_string(htmlentities(substr($_REQUEST['feld_'.$row['id']],0,$row['length']), $htmlent_flags, $htmlent_encoding_pub))."'";
				else
					$query_werte .= "'".$mysqli->escape_string(htmlentities($_REQUEST['feld_'.$row['id']], $htmlent_flags, $htmlent_encoding_pub))."'";
				}
			else
				$query_werte .= "";
			}

		$mysqli->query("UPDATE ".$mysql_tables['gb_entry']." SET 
					bbc_smile_deaktiv 	=	'".$mysqli->escape_string($_REQUEST['deaktiv_bbc'])."'
					".$query_werte."
					WHERE id = '".$mysqli->escape_string($_REQUEST['var1'])."' LIMIT 1");

		echo "
<script type=\"text/javascript\">
document.location.href = '".$filename."?modul=".$modul."&action=show_entry&var1=".$_REQUEST['var1']."&var2=erfolg';
</script>";
		}
	else// Fehlermeldung: Pflichtfelder / parsing
		echo "<p class=\"meldung_error\"><b>Fehler:</b> Es wurden nicht alle ben&ouml;tigen Pflichtfelder
				ausgef&uuml;llt. Bitte gehen Sie <a href=\"javascript:history.back();\">zur&uuml;ck</a>.</p>";
	}
	
	
	
	
	
	
	
// Eintrag löschen (Abfrage)
if(isset($_REQUEST['action']) && $_REQUEST['action'] == "del_entry" && $userdata[$modul] == 1 &&
	isset($_REQUEST['var1']) && !empty($_REQUEST['var1']) && is_numeric($_REQUEST['var1'])){
	
	echo "<p class=\"meldung_frage\">Möchten Sie den Eintrag wirklich löschen?<br /><br />
			<a href=\"".$filename."?modul=".$modul."&amp;action=dodel_entry&amp;var1=".$_REQUEST['var1']."\">JA</a> | <a href=\"javascript:window.close();\">Nein</a></p>";
	}
	
	
	
	
	
	
// Eintrag löschen (löschen)
if(isset($_REQUEST['action']) && $_REQUEST['action'] == "dodel_entry" && $userdata[$modul] == 1 &&
	isset($_REQUEST['var1']) && !empty($_REQUEST['var1']) && is_numeric($_REQUEST['var1'])){
	
	$mysqli->query("DELETE FROM ".$mysql_tables['gb_entry']." WHERE id='".$mysqli->escape_string($_REQUEST['var1'])."' LIMIT 1");
	
	echo "
<script type=\"text/javascript\">
opener.document.getElementById('del_erfolgsmeldung').style.display = 'block';
opener.document.getElementById('id".$_REQUEST['var1']."').style.display = 'none';
self.window.close();
</script>";
	}
?>