View file plugins/rules/index.php

<?php
require( '../../sys/inc/core.php' );
$set['title'] = 'Информация';
include_once '../../sys/inc/thead.php';
title();
aut();
if ( isset( $user ) && $user['level'] > 2 ) {
    if ( isset( $_GET['del'] ) && is_numeric( $_GET['del'] ) && db::count("SELECT COUNT(*) FROM `rules` WHERE `id` = '" . intval( $_GET['del'] ) . "' LIMIT 1") == 1 ) {
        db::query("DELETE FROM `rules` WHERE `id` = '" . intval( $_GET['del'] ) . "' LIMIT 1");
        db::query("OPTIMIZE TABLE `rules`");
        $_SESSION['message'] = 'Пункт успешно удален';
        header( "Location: ?" );
        exit;
    }
}
if ( isset( $_GET['id'] ) && isset( $_GET['act'] ) && db::count("SELECT COUNT(*) FROM `rules` WHERE `id` = '" . intval( $_GET['id'] ) . "'") ) {
    $menu = db::fetch("SELECT * FROM `rules` WHERE `id` = '" . intval( $_GET['id'] ) . "' LIMIT 1", ARRAY_A);
    if ( $_GET['act'] == 'up' && $user['level'] > 2 ) {
        db::query("UPDATE `rules` SET `pos` = '" . ( $menu['pos'] ) . "' WHERE `pos` = '" . ( $menu['pos'] - 1 ) . "' LIMIT 1");
        db::query("UPDATE `rules` SET `pos` = '" . ( $menu['pos'] - 1 ) . "' WHERE `id` = '" . intval( $_GET['id'] ) . "' LIMIT 1");
        $_SESSION['message'] = 'Пункт меню сдвинут на позицию вверх';
        header( "Location: ?" );
        exit;
    }
    if ( $_GET['act'] == 'down' && $user['level'] > 2 ) {
        db::query("UPDATE `rules` SET `pos` = '" . ( $menu['pos'] ) . "' WHERE `pos` = '" . ( $menu['pos'] + 1 ) . "' LIMIT 1");
        db::query("UPDATE `rules` SET `pos` = '" . ( $menu['pos'] + 1 ) . "' WHERE `id` = '" . intval( $_GET['id'] ) . "' LIMIT 1");
        $_SESSION['message'] = 'Пункт меню сдвинут на позицию вниз';
        header( "Location: ?" );
        exit;
    }
}
$k_post = db::count("SELECT COUNT(*) FROM `rules`");
$q      = db::query("SELECT * FROM `rules` ORDER BY `pos` ASC");
echo '<table class="post">';
if ( $k_post == 0 ) {
    echo '<div class="mess">';
    echo 'Раздел информации не заполнен';
    echo '</div>';
}
while ( $post =  $q->fetch_assoc() ) {
    if ( $num == 0 ) {
        echo '<div class="nav1">';
        $num = 1;
    } elseif ( $num == 1 ) {
        echo '<div class="nav2">';
        $num = 0;
    }
    if ( $post['title'] )
        echo ( ( $user['level'] > 2 ) ? $post['pos'] . ") " : "" ) . ' <a href="post.php?id=' . $post['id'] . '">' . output_text( $post['title'] ) . '</a> ';
    if ( $post['url'] )
        echo ( ( $user['level'] > 2 ) ? $post['pos'] . ") " : "" ) . ' <a href="' . htmlspecialchars( $post['url'] ) . '">' . output_text( $post['name_url'] ) . '</a> ';
    if ( $post['msg'] )
        echo ( ( $user['level'] > 2 ) ? $post['pos'] . ") " : "" ) . output_text( $post['msg'] ) . ' ';
    if ( $user['level'] > 2 ) {
        echo '<a href="?id=' . $post['id'] . '&amp;act=up&amp;' . $passgen . '"><img src="/style/icons/up.gif" alt="*" /></a> | ';
        echo '<a href="?id=' . $post['id'] . '&amp;act=down&amp;' . $passgen . '"><img src="/style/icons/down.gif" alt="*" /></a> | ';
        echo '<a href="edit.php?id=' . $post['id'] . '&amp;act=edits&amp;' . $passgen . '"><img src="/style/icons/edit.gif" alt="*" /></a> | ';
        echo '<a href="index.php?del=' . $post['id'] . '"><img src="/style/icons/delete.gif" alt="*" /></a>';
    }
    echo '</div>';
}
echo '</table>';
if ( $user['level'] > 2 ) {
    echo '<div class="foot"><img src="/style/icons/ok.gif" alt="*" /> <a href="new.php?msg">Добавить текст</a></div>';
    echo '<div class="foot"><img src="/style/icons/ok.gif" alt="*" /> <a href="new.php?post">Добавить пункт</a></div>';
    echo '<div class="foot"><img src="/style/icons/ok.gif" alt="*" /> <a href="new.php?url">Добавить ссылку</a></div>';
}
include_once '../../sys/inc/tfoot.php';