function preview(){"; if( $config['allow_admin_wysiwyg'] == "yes" ) { echo "document.getElementById('short_story').value = $('#short_story').html(); document.getElementById('full_story').value = $('#full_story').html();"; } echo "if(document.addnews.short_story.value == '' || document.addnews.title.value == ''){ DLEalert('$lang[addnews_alert]', '$lang[p_info]'); } else{ dd=window.open('','prv','height=400,width=750,resizable=1,scrollbars=1') document.addnews.mod.value='preview';document.addnews.target='prv' document.addnews.submit();dd.focus() setTimeout(\"document.addnews.mod.value='addnews';document.addnews.target='_self'\",500) } } onload=focus;function focus(){document.forms[0].title.focus();} function auto_keywords ( key ) { var ajax = new dle_ajax(); ajax.onShow (''); var wysiwyg = '{$config['allow_admin_wysiwyg']}'; if (wysiwyg == \"yes\") { var short_txt = ajax.encodeVAR( $('#short_story').html() ); var varsString = \"short_txt=\" + short_txt; ajax.setVar(\"full_txt\", ajax.encodeVAR( $('#full_story').html() )); } else { var short_txt = ajax.encodeVAR( document.getElementById('short_story').value ); var varsString = \"short_txt=\" + short_txt; ajax.setVar(\"full_txt\", ajax.encodeVAR( document.getElementById('full_story').value )); } ajax.setVar(\"key\", key); ajax.requestFile = \"engine/ajax/keywords.php\"; if (key == 1) { ajax.element = 'autodescr'; } else { ajax.element = 'keywords';} ajax.method = 'POST'; ajax.sendAJAX(varsString); return false; } function find_relates ( ) { var ajax = new dle_ajax(); var title = ajax.encodeVAR( document.getElementById('title').value ); var varsString = \"title=\" + title; ajax.onShow (''); ajax.requestFile = 'engine/ajax/find_relates.php'; ajax.method = 'POST'; ajax.element = 'related_news'; ajax.sendAJAX(varsString); return false; }; $(function(){ $('#tags').autocomplete({ serviceUrl:'engine/ajax/find_tags.php', minChars:3, delimiter: /(,|;)\s*/, maxHeight:400, width:348, deferRequestBy: 300 }); }); "; if( $config['allow_admin_wysiwyg'] == "yes" ) echo "

"; else echo ""; $categories_list = CategoryNewsSelection( 0, 0 ); if( $config['allow_multi_category'] ) $category_multiple = "class=\"cat_select\" multiple"; else $category_multiple = ""; echo <<

HTML; echo <<

{$lang['v_ftitle']}	[?]
{$lang['vote_title']}	[?]
$lang[vote_body] $lang[vote_str_1]
	{$lang['v_multi']}

HTML; echo <<

HTML; echofooter(); } // ******************************************************************************** // Do add News // ******************************************************************************** elseif( $action == "doaddnews" ) { include_once ENGINE_DIR . '/classes/parse.class.php'; $parse = new ParseFilter( Array (), Array (), 1, 1 ); $allow_comm = isset( $_POST['allow_comm'] ) ? intval( $_POST['allow_comm'] ) : 0; $allow_main = isset( $_POST['allow_main'] ) ? intval( $_POST['allow_main'] ) : 0; $approve = isset( $_POST['approve'] ) ? intval( $_POST['approve'] ) : 0; $allow_rating = isset( $_POST['allow_rating'] ) ? intval( $_POST['allow_rating'] ) : 0; $news_fixed = isset( $_POST['news_fixed'] ) ? intval( $_POST['news_fixed'] ) : 0; $allow_br = isset( $_POST['allow_br'] ) ? intval( $_POST['allow_br'] ) : 0; if( !count( $category ) ) { $category = array (); $category[] = '0'; } $category_list = $db->safesql( implode( ',', $category ) ); $allow_list = explode( ',', $user_group[$member_id['user_group']]['cat_add'] ); foreach ( $category as $selected ) { if( $allow_list[0] != "all" and ! in_array( $selected, $allow_list ) and $member_id['user_group'] != "1" ) $approve = 0; } $allow_list = explode( ',', $user_group[$member_id['user_group']]['cat_allow_addnews'] ); foreach ( $category as $selected ) { if( $allow_list[0] != "all" and ! in_array( $selected, $allow_list ) ) msg( "error", $lang['addnews_error'], $lang['news_err_41'], "javascript:history.go(-1)" ); } $title = $parse->process( trim( strip_tags ($_POST['title']) ) ); if ( !$user_group[$member_id['user_group']]['allow_html'] ) { $_POST['short_story'] = strip_tags ($_POST['short_story']); $_POST['full_story'] = strip_tags ($_POST['full_story']); } if ( $config['allow_admin_wysiwyg'] == "yes" ) $parse->allow_code = false; $full_story = $parse->process( $_POST['full_story'] ); $short_story = $parse->process( $_POST['short_story'] ); if( $config['allow_admin_wysiwyg'] == "yes" or $allow_br != '1' ) { $full_story = $db->safesql( $parse->BB_Parse( $full_story ) ); $short_story = $db->safesql( $parse->BB_Parse( $short_story ) ); } else { $full_story = $db->safesql( $parse->BB_Parse( $full_story, false ) ); $short_story = $db->safesql( $parse->BB_Parse( $short_story, false ) ); } if( $parse->not_allowed_text ) { msg( "error", $lang['addnews_error'], $lang['news_err_39'], "javascript:history.go(-1)" ); } $alt_name = $_POST['alt_name']; if( trim( $alt_name ) == "" or ! $alt_name ) $alt_name = totranslit( stripslashes( $title ), true, false ); else $alt_name = totranslit( stripslashes( $alt_name ), true, false ); $title = $db->safesql( $title ); $metatags = create_metatags( $short_story . $full_story ); $catalog_url = $db->safesql( dle_substr( htmlspecialchars( strip_tags( stripslashes( trim( $_POST['catalog_url'] ) ) ) ), 0, 3, $config['charset'] ) ); if( @preg_match( "/[\||\'|\<|\>|\"|\!|\?|\$|\@|\/|\\\|\&\~\*\+]/", $_POST['tags'] ) ) $_POST['tags'] = ""; else $_POST['tags'] = @$db->safesql( htmlspecialchars( strip_tags( stripslashes( trim( $_POST['tags'] ) ) ), ENT_QUOTES ) ); // обработка опроса if( trim( $_POST['vote_title'] != "" ) ) { $add_vote = 1; $vote_title = trim( $db->safesql( $parse->process( $_POST['vote_title'] ) ) ); $frage = trim( $db->safesql( $parse->process( $_POST['frage'] ) ) ); $vote_body = $db->safesql( $parse->BB_Parse( $parse->process( $_POST['vote_body'] ), false ) ); $allow_m_vote = intval( $_POST['allow_m_vote'] ); } else $add_vote = 0; // обработка доступа if( $member_id['user_group'] < 3 ) { $group_regel = array (); foreach ( $_POST['group_extra'] as $key => $value ) { if( $value ) $group_regel[] = intval( $key ) . ':' . intval( $value ); } if( count( $group_regel ) ) $group_regel = implode( "||", $group_regel ); else $group_regel = ""; } else $group_regel = ''; if( trim( $_POST['expires'] ) != "" ) { if( (($expires = strtotime( $_POST['expires'] )) === - 1) ) { msg( "error", $lang['addnews_error'], $lang['addnews_erdate'], "javascript:history.go(-1)" ); } } else $expires = ''; // Обработка даты и времени $added_time = time() + ($config['date_adjust'] * 60); if( $allow_date != "yes" ) { if( (($newsdate = strtotime( $newdate )) === - 1) or (trim( $newdate ) == "") ) { msg( "error", $lang['addnews_error'], $lang['addnews_erdate'], "javascript:history.go(-1)" ); } else { $thistime = date( "Y-m-d H:i:s", $newsdate ); } if( ! intval( $config['no_date'] ) and $newsdate > $added_time ) { $thistime = date( "Y-m-d H:i:s", $added_time ); } } else $thistime = date( "Y-m-d H:i:s", $added_time ); //////////////////////////// if( trim( $title ) == "" or ! $title ) { msg( "error", $lang['addnews_error'], $lang['addnews_ertitle'], "javascript:history.go(-1)" ); } if( trim( $short_story ) == "" or ! $short_story ) { msg( "error", $lang['addnews_error'], $lang['addnews_erstory'], "javascript:history.go(-1)" ); } if( dle_strlen( $title, $config['charset'] ) > 255 ) { msg( "error", $lang['addnews_error'], $lang['addnews_error'], "javascript:history.go(-1)" ); } $xfieldsid = $added_time; $xfieldsaction = "init"; include (ENGINE_DIR . '/inc/xfields.php'); $filecontents = array (); if( $config['safe_xfield'] ) { $parse->ParseFilter(); $parse->safe_mode = true; } if( ! empty( $postedxfields ) ) { foreach ( $postedxfields as $xfielddataname => $xfielddatavalue ) { if( $xfielddatavalue == "" ) { continue; } if( $config['allow_admin_wysiwyg'] == "yes" or $allow_br != '1' ) { $xfielddatavalue = $db->safesql($parse->BB_Parse($parse->process($xfielddatavalue))); } else { $xfielddatavalue = $db->safesql($parse->BB_Parse($parse->process($xfielddatavalue), false)); } $xfielddataname = $db->safesql( $xfielddataname ); $xfielddataname = str_replace( "|", "|", $xfielddataname ); $xfielddataname = str_replace( "\r\n", "__NEWL__", $xfielddataname ); $xfielddatavalue = str_replace( "|", "|", $xfielddatavalue ); $xfielddatavalue = str_replace( "\r\n", "__NEWL__", $xfielddatavalue ); $filecontents[] = "$xfielddataname|$xfielddatavalue"; } $filecontents = implode( "||", $filecontents ); } else $filecontents = ''; $db->query( "INSERT INTO " . PREFIX . "_post (date, autor, short_story, full_story, xfields, title, descr, keywords, category, alt_name, allow_comm, approve, allow_main, fixed, allow_rate, allow_br, votes, access, symbol, flag, tags, metatitle) values ('$thistime', '{$member_id['name']}', '$short_story', '$full_story', '$filecontents', '$title', '{$metatags['description']}', '{$metatags['keywords']}', '$category_list', '$alt_name', '$allow_comm', '$approve', '$allow_main', '$news_fixed', '$allow_rating', '$allow_br', '$add_vote', '$group_regel', '$catalog_url', '1', '{$_POST['tags']}', '{$metatags['title']}')" ); $row = $db->insert_id(); if( $add_vote ) { $db->query( "INSERT INTO " . PREFIX . "_poll (news_id, title, frage, body, votes, multiple, answer) VALUES('{$row}', '$vote_title', '$frage', '$vote_body', 0, '$allow_m_vote', '')" ); } if( $expires ) { $expires_action = intval($_POST['expires_action']); $db->query( "INSERT INTO " . PREFIX . "_post_log (news_id, expires, action) VALUES('{$row}', '$expires', '$expires_action')" ); } if( $_POST['tags'] != "" and $approve ) { $tags = array (); $_POST['tags'] = explode( ",", $_POST['tags'] ); foreach ( $_POST['tags'] as $value ) { $tags[] = "('" . $row . "', '" . trim( $value ) . "')"; } $tags = implode( ", ", $tags ); $db->query( "INSERT INTO " . PREFIX . "_tags (news_id, tag) VALUES " . $tags ); } $db->query( "UPDATE " . PREFIX . "_images set news_id='{$row}' where author = '{$member_id['name']}' AND news_id = '0'" ); $db->query( "UPDATE " . PREFIX . "_files set news_id='{$row}' where author = '{$member_id['name']}' AND news_id = '0'" ); $db->query( "UPDATE " . USERPREFIX . "_users set news_num=news_num+1 where user_id='{$member_id['user_id']}'" ); clear_cache(); msg( "info", $lang['addnews_ok'], $lang['addnews_ok_1'] . " \"" . stripslashes( stripslashes( $title ) ) . "\" " . $lang['addnews_ok_2'] ); } ?>