ave-cms/admin/rubs.php

<?php

	/**
	 * AVE.cms
	 *
	 * @package AVE.cms
	 * @version 3.x
	 * @filesource
	 * @copyright © 2007-2014 AVE.cms, http://www.ave-cms.ru
	 *
	 * @license GPL v.2
	 */

	if (!defined('ACP'))
	{
		header('Location:index.php');
		exit;
	}

	require(BASE_DIR . '/class/class.rubs.php');
	$AVE_Rubric = new AVE_Rubric;

	$AVE_Template->config_load(BASE_DIR . '/admin/lang/' . $_SESSION['admin_language'] . '/rubs.txt', 'rubs');

	switch($_REQUEST['action'])
	{
		case '' :
			if(check_permission('rubric_view'))
			{
				if(check_permission('rubric_edit'))
				{
					switch($_REQUEST['sub'])
					{
						case 'quicksave':
							$AVE_Rubric->quickSave();
							break;
					}
				}
				$AVE_Rubric->rubricList();
				$AVE_Template->assign('templates', get_all_templates());
				$AVE_Template->assign('content', $AVE_Template->fetch('rubs/list.tpl'));
			}
			else
			{
				$AVE_Template->assign('erorr', $AVE_Template->get_config_vars('RUBRIK_NO_VIEW'));
				$AVE_Template->assign('content', $AVE_Template->fetch('error.tpl'));
			}
			break;

		case 'new':
			if(check_permission('rubric_edit'))
			{
				$AVE_Template->assign('templates', get_all_templates());
				$AVE_Rubric->rubricNew();
			}
			else
			{
				$AVE_Template->assign('erorr', $AVE_Template->get_config_vars('RUBRIK_NO_CHANGE3'));
				$AVE_Template->assign('content', $AVE_Template->fetch('error.tpl'));
			}
			break;

		case 'template':
			if(check_permission('rubric_edit'))
			{
				switch($_REQUEST['sub'])
				{
					case '':
						$AVE_Rubric->rubricTemplateShow();
						break;

					case 'save':

						$Rtemplate = $_POST['rubric_template'];
						$Htemplate = $_POST['rubric_header_template'];
						$Ftemplate = $_POST['rubric_footer_template'];
						$Ttemplate = $_POST['rubric_teaser_template'];
						$Atemplate = $_POST['rubric_admin_teaser_template'];

						$check_code = strtolower($Rtemplate.$Htemplate.$Ttemplate.$Atemplate.$Ftemplate);

						$ok = true;

						if ((is_php_code($check_code)) && !check_permission('rubric_php') )
						{
							$AVE_Template->assign('php_forbidden', 1);

							$ok = false;
						}

						if (! $ok)
						{
							$message = $AVE_Template->get_config_vars('RUBRIC_SAVED_PHP_ERR');
							$header = $AVE_Template->get_config_vars('RUBRIC_ERROR');
							$theme = 'error';

							if (isAjax())
							{
								echo json_encode(array('message' => $message, 'header' => $header, 'theme' => $theme));
								exit;
							}
							else
							{
								$AVE_Rubric->rubricTemplateShow(1);
							}
						}
						else
						{
							$AVE_Rubric->rubricTemplateSave($Rtemplate, $Htemplate, $Ttemplate, $Atemplate, $Ftemplate);
						}
						break;
				}
			}
			else
			{
				$AVE_Template->assign('erorr', $AVE_Template->get_config_vars('RUBRIK_NO_CHANGE2'));
				$AVE_Template->assign('content', $AVE_Template->fetch('error.tpl'));
			}
			break;

		case 'delete':
			if(check_permission('rubric_edit'))
			{
				$AVE_Rubric->rubricDelete();
			}
			else
			{
				$AVE_Template->assign('erorr', $AVE_Template->get_config_vars('RUBRIK_NO_PERMISSION'));
				$AVE_Template->assign('content', $AVE_Template->fetch('error.tpl'));
			}
			break;

		case 'multi':
			if(check_permission('rubric_edit'))
			{
				switch($_REQUEST['sub'])
				{
					case 'save':
						$AVE_Rubric->rubricCopy();
						break;
				}
				$AVE_Template->assign('content', $AVE_Template->fetch('rubs/multi.tpl'));
			}
			else
			{
				$AVE_Template->assign('erorr', $AVE_Template->get_config_vars('RUBRIK_NO_MULTIPLY'));
				$AVE_Template->assign('content', $AVE_Template->fetch('error.tpl'));
			}
			break;

		case 'edit':
			if(check_permission('rubric_edit'))
			{
				switch($_REQUEST['sub'])
				{
					case '':
						switch($_REQUEST['submit'])
						{
							case 'saveperms':
								if (check_permission('rubric_perms')){
									$AVE_Rubric->rubricPermissionSave((int)$_REQUEST['Id']);
								}
								break;

							case 'save':
								$AVE_Rubric->rubricFieldSave((int)$_REQUEST['Id']);
								break;

							case 'linked_rubric':
								$AVE_Rubric->rubricShow(1);
								break;

							case 'code':
								if (check_permission('rubric_code')){
									$AVE_Rubric->rubricCode((int)$_REQUEST['Id']);
								}
								break;

							case 'description':
								$AVE_Rubric->rubricDesc((int)$_REQUEST['Id']);
								break;
						}
				}
				$AVE_Rubric->rubricFieldShow((int)$_REQUEST['Id'], null);
				break;
			}
			else
			{
				$AVE_Template->assign('erorr', $AVE_Template->get_config_vars('RUBRIK_NO_CHANGE1'));
				$AVE_Template->assign('content', $AVE_Template->fetch('error.tpl'));
			}
			break;

		case 'alias_add':
			if(check_permission_acp('rubric_edit'))
			{
				$AVE_Rubric->rubricAliasAdd();
			}
			break;

		case 'code':
			if (check_permission('rubric_code'))
			{
				$AVE_Rubric->rubricCodeEdit($_REQUEST['Id']);
			}
			break;

		case 'field_template':
			if(check_permission_acp('rubric_edit'))
			{
				$AVE_Rubric->rubricFieldTemplate();
			}
			break;

		case 'field_template_save':
			if(check_permission_acp('rubric_edit'))
			{
				$AVE_Rubric->rubricFieldTemplateSave((int)$_REQUEST['field_id'], (int)$_REQUEST['rubric_id']);
			}
			break;

		case 'fieldssort':
			if(check_permission_acp('rubric_edit'))
			{
				$AVE_Rubric->rubricFieldsSort((array)$_REQUEST['sort']);
			}
			exit;

		case 'rubssort':
			if(check_permission_acp('rubric_edit'))
			{
				$AVE_Rubric->rubricsSort((array)$_REQUEST['sort']);
			}
			exit;

		case 'alias_check':
			if(check_permission_acp('rubric_edit'))
			{
				$AVE_Rubric->rubricAliasCheck((int)$_REQUEST['rubric_id'],(int)$_REQUEST['field_id'], $_REQUEST['rubric_field_alias']);
			}
			break;

		case 'newfield':
			if(check_permission_acp('rubric_edit'))
			{
				$AVE_Rubric->rubricFieldNew((int)$_REQUEST['Id'], $_REQUEST['ajax']);
			}
			break;

		case 'fields':
			if(check_permission_acp('rubric_edit'))
			{
				$AVE_Rubric->rubricFieldShow((int)$_REQUEST['Id'], $_REQUEST['ajax']);
			}
			break;

		case 'change':
			if(check_permission_acp('rubric_edit'))
			{
				$AVE_Rubric->rubricFieldChange((int)$_REQUEST['field_id'], (int)$_REQUEST['rubric_id']);
			}
			break;

		case 'changesave':
			if(check_permission_acp('rubric_edit'))
			{
				$AVE_Rubric->rubricFieldChangeSave((int)$_REQUEST['field_id'], (int)$_REQUEST['rubric_id']);
			}
			break;

		case 'changegroup':
			if(check_permission_acp('rubric_edit'))
			{
				$AVE_Rubric->rubricFieldGroupChange((int)$_REQUEST['field_id'], (int)$_REQUEST['rubric_id']);
			}
			break;

		case 'changegroupsave':
			if(check_permission_acp('rubric_edit'))
			{
				$AVE_Rubric->rubricFieldGroupChangeSave((int)$_REQUEST['field_id'], (int)$_REQUEST['rubric_id']);
			}
			break;

		case 'fieldsgroups':
			if(check_permission_acp('rubric_edit'))
			{
				$AVE_Rubric->rubricFieldsGroups((int)$_REQUEST['Id']);
			}
			break;

		case 'newfieldsgroup':
			if(check_permission_acp('rubric_edit'))
			{
				$AVE_Rubric->rubricNewGroupFields((int)$_REQUEST['Id']);
			}
			break;

		case 'savefieldsgroup':
			if(check_permission_acp('rubric_edit'))
			{
				$AVE_Rubric->rubricEditGroupFields((int)$_REQUEST['Id']);
			}
			break;

		case 'delfieldsgroup':
			if(check_permission_acp('rubric_edit'))
			{
				$AVE_Rubric->rubricDelGroupFields((int)$_REQUEST['Id'], (int)$_REQUEST['rubric_id']);
			}
			break;

		case 'fieldsgroupssort':
			if(check_permission_acp('rubric_edit'))
			{
				$AVE_Rubric->rubricFieldsGroupsSort((array)$_REQUEST['sort']);
			}
			exit;

		case 'tmpls':
			if (check_permission_acp('rubric_edit'))
			{
				$AVE_Rubric->tmplsList();
				$AVE_Template->assign('content', $AVE_Template->fetch('rubs/tmpls.tpl'));
			}
			break;

		case 'tmpls_edit':
			if(check_permission('rubric_edit'))
			{
				switch($_REQUEST['sub'])
				{
					case '':
						$AVE_Rubric->tmplsEdit();
						break;

					case 'save':

						$title = $_POST['template_title'];
						$template = $_POST['rubric_template'];

						$check_code = strtolower($template);

						$ok = true;

						if((is_php_code($check_code)) && !check_permission('rubric_php') )
						{
							$AVE_Template->assign('php_forbidden', 1);

							$ok = false;
						}

						if(! $ok)
						{
							$message = $AVE_Template->get_config_vars('RUBRIC_SAVED_PHP_ERR');
							$header = $AVE_Template->get_config_vars('RUBRIC_ERROR');
							$theme = 'error';

							if (isAjax())
							{
								echo json_encode(array('message' => $message, 'header' => $header, 'theme' => $theme));
								exit;
							}
							else
							{
								$AVE_Rubric->tmplsEdit();
							}
						}
						else
						{
							$AVE_Rubric->tmplsSave($template, $title);
						}
						break;
				}
			}
			else
			{
				$AVE_Template->assign('erorr', $AVE_Template->get_config_vars('RUBRIK_NO_CHANGE2'));
				$AVE_Template->assign('content', $AVE_Template->fetch('error.tpl'));
			}
			break;

		case 'tmpls_new':
			if(check_permission('rubric_edit'))
			{
				switch($_REQUEST['sub'])
				{
					case '':
						$AVE_Rubric->tmplsEdit();
						break;

					case 'save':

						$title = $_POST['template_title'];
						$template = $_POST['rubric_template'];

						$check_code = strtolower($template);

						$ok = true;

						if((is_php_code($check_code)) && !check_permission('rubric_php') )
						{
							$AVE_Template->assign('php_forbidden', 1);

							$ok = false;
						}

						if(! $ok)
						{
							$message = $AVE_Template->get_config_vars('RUBRIC_SAVED_PHP_ERR');
							$header = $AVE_Template->get_config_vars('RUBRIC_ERROR');
							$theme = 'error';

							if (isAjax())
							{
								echo json_encode(array('message' => $message, 'header' => $header, 'theme' => $theme));
								exit;
							}
							else
							{
								$AVE_Rubric->tmplsEdit();
							}
						}
						else
						{
							$AVE_Rubric->tmplsSave($template, $title);
						}
						break;
				}
			}
			else
			{
				$AVE_Template->assign('erorr', $AVE_Template->get_config_vars('RUBRIK_NO_CHANGE2'));
				$AVE_Template->assign('content', $AVE_Template->fetch('error.tpl'));
			}
			break;

		case 'tmpls_from':
			if(check_permission('rubric_edit'))
			{
				switch($_REQUEST['sub'])
				{
					case '':
						$AVE_Rubric->tmplsEdit();
						break;

					case 'save':

						$title = $_POST['template_title'];
						$template = $_POST['rubric_template'];

						$check_code = strtolower($template);

						$ok = true;

						if((is_php_code($check_code)) && !check_permission('rubric_php') )
						{
							$AVE_Template->assign('php_forbidden', 1);

							$ok = false;
						}

						if(! $ok)
						{
							$message = $AVE_Template->get_config_vars('RUBRIC_SAVED_PHP_ERR');
							$header = $AVE_Template->get_config_vars('RUBRIC_ERROR');
							$theme = 'error';

							if (isAjax())
							{
								echo json_encode(array('message' => $message, 'header' => $header, 'theme' => $theme));
								exit;
							}
							else
							{
								$AVE_Rubric->tmplsEdit();
							}
						}
						else
						{
							$AVE_Rubric->tmplsSave($template, $title);
						}
						break;
				}
			}
			else
			{
				$AVE_Template->assign('erorr', $AVE_Template->get_config_vars('RUBRIK_NO_CHANGE2'));
				$AVE_Template->assign('content', $AVE_Template->fetch('error.tpl'));
			}
			break;

		case 'tmpls_copy':
			if(check_permission('rubric_edit'))
			{
				switch($_REQUEST['sub'])
				{
					case '':
						$AVE_Rubric->tmplsEdit();
						break;

					case 'save':

						$title = $_POST['template_title'];
						$template = $_POST['rubric_template'];

						$check_code = strtolower($template);

						$ok = true;

						if((is_php_code($check_code)) && !check_permission('rubric_php') )
						{
							$AVE_Template->assign('php_forbidden', 1);

							$ok = false;
						}

						if(! $ok)
						{
							$message = $AVE_Template->get_config_vars('RUBRIC_SAVED_PHP_ERR');
							$header = $AVE_Template->get_config_vars('RUBRIC_ERROR');
							$theme = 'error';

							if (isAjax())
							{
								echo json_encode(array('message' => $message, 'header' => $header, 'theme' => $theme));
								exit;
							}
							else
							{
								$AVE_Rubric->tmplsEdit();
							}
						}
						else
						{
							$AVE_Rubric->tmplsSave($template, $title);
						}
						break;
				}
			}
			else
			{
				$AVE_Template->assign('erorr', $AVE_Template->get_config_vars('RUBRIK_NO_CHANGE2'));
				$AVE_Template->assign('content', $AVE_Template->fetch('error.tpl'));
			}
			break;

		case 'tmpls_del':
			if(check_permission('rubric_edit'))
			{
				$AVE_Rubric->tmplsDelete();
			}
			else
			{
				$AVE_Template->assign('erorr', $AVE_Template->get_config_vars('RUBRIK_NO_PERMISSION'));
				$AVE_Template->assign('content', $AVE_Template->fetch('error.tpl'));
			}
			break;

		case 'rules':
			if (check_permission('rubric_edit'))
			{
				switch($_REQUEST['sub'])
				{
					case '':
						switch($_REQUEST['submit'])
						{
							case 'saveperms':
								if (check_permission('rubric_perms'))
									$AVE_Rubric->rubricPermissionSave((int)$_REQUEST['Id']);
								break;
						}
				}
				$AVE_Rubric->rubricRulesShow((int)$_REQUEST['Id'], null);
				break;
			}
			else
			{
				$AVE_Template->assign('erorr', $AVE_Template->get_config_vars('RUBRIK_NO_CHANGE1'));
				$AVE_Template->assign('content', $AVE_Template->fetch('error.tpl'));
			}
			break;

		case 'ftlist':
			if (check_permission('rubric_edit'))
			{
				$AVE_Rubric->ShowFields();
			}
			else
			{
				$AVE_Template->assign('erorr', $AVE_Template->get_config_vars('RUBRIK_NO_PERMISSION'));
				$AVE_Template->assign('content', $AVE_Template->fetch('error.tpl'));
			}
			break;

		case 'ftshowfield':
			if (check_permission('rubric_edit'))
			{
				$AVE_Rubric->ShowFieldsByType($_REQUEST['type']);
			}
			else
			{
				$AVE_Template->assign('erorr', $AVE_Template->get_config_vars('RUBRIK_NO_PERMISSION'));
				$AVE_Template->assign('content', $AVE_Template->fetch('error.tpl'));
			}
			break;


		case 'ftcreate':
			if (check_permission('rubric_edit'))
			{
				$AVE_Rubric->EditFieldTpl((int)$_REQUEST['id'], $_REQUEST['fld'], $_REQUEST['type']);
			}
			else
			{
				$AVE_Template->assign('erorr', $AVE_Template->get_config_vars('RUBRIK_NO_PERMISSION'));
				$AVE_Template->assign('content', $AVE_Template->fetch('error.tpl'));
			}
			break;

		case 'ftedit':
			if (check_permission('rubric_edit'))
			{
				$AVE_Rubric->EditFieldTpl((int)$_REQUEST['id'], $_REQUEST['fld'], $_REQUEST['type']);
			}
			else
			{
				$AVE_Template->assign('erorr', $AVE_Template->get_config_vars('RUBRIK_NO_PERMISSION'));
				$AVE_Template->assign('content', $AVE_Template->fetch('error.tpl'));
			}
			break;

		case 'ftempledit':
			if (check_permission('rubric_edit'))
			{
				$AVE_Rubric->EditFieldTpl('', $_REQUEST['fld'], $_REQUEST['type']);
			}
			else
			{
				$AVE_Template->assign('erorr', $AVE_Template->get_config_vars('RUBRIK_NO_PERMISSION'));
				$AVE_Template->assign('content', $AVE_Template->fetch('error.tpl'));
			}
			break;

		case 'ftsave':
			if (check_permission('rubric_edit'))
			{
				$AVE_Rubric->SaveFieldTpl((int)$_REQUEST['field_id'], $_REQUEST['field_name'], $_REQUEST['field_type'], $_REQUEST['func']);
			}
			else
			{
				$AVE_Template->assign('erorr', $AVE_Template->get_config_vars('RUBRIK_NO_PERMISSION'));
				$AVE_Template->assign('content', $AVE_Template->fetch('error.tpl'));
			}
			break;


		case 'ftdelete':
			if (check_permission('rubric_edit'))
			{
				$AVE_Rubric->DeleteFieldTpl((int)$_REQUEST['id'], $_REQUEST['fld'], $_REQUEST['type'], $_REQUEST['func']);
			}
			else
			{
				$AVE_Template->assign('erorr', $AVE_Template->get_config_vars('RUBRIK_NO_PERMISSION'));
				$AVE_Template->assign('content', $AVE_Template->fetch('error.tpl'));
			}
			break;
	}
?>