<?php
/*
* JohnCMS NEXT Mobile Content Management System (http://johncms.com)
*
* For copyright and license information, please see the LICENSE.md
* Installing the system or redistributions of files must retain the above copyright notice.
*
* @link http://johncms.com JohnCMS Project
* @copyright Copyright (C) JohnCMS Community
* @license GPL-3
*/
defined('_IN_JOHNADM') or die('Error: restricted access');
/** @var Psr\Container\ContainerInterface $container */
$container = App::getContainer();
/** @var PDO $db */
$db = $container->get(PDO::class);
/** @var Johncms\Api\ToolsInterface $tools */
$tools = $container->get(Johncms\Api\ToolsInterface::class);
/** @var Johncms\Api\UserInterface $systemUser */
$systemUser = $container->get(Johncms\Api\UserInterface::class);
// Проверяем права доступа
if ($systemUser->rights < 7) {
header('Location: http://johncms.com/?err');
exit;
}
switch ($mod) {
case 'edit':
// Добавляем / редактируем ссылку
echo '<div class="phdr"><a href="index.php?act=ads"><b>' . _t('Advertisement') . '</b></a> | ' . ($id ? _t('Edit link') : _t('Add link')) . '</div>';
if ($id) {
// Если ссылка редактироется, запрашиваем ее данные в базе
$req = $db->query('SELECT * FROM `cms_ads` WHERE `id` = ' . $id);
if ($req->rowCount()) {
$res = $req->fetch();
} else {
echo $tools->displayError(_t('Wrong data'), '<a href="index.php?act=ads">' . _t('Back') . '</a>');
require('../system/end.php');
exit;
}
} else {
$res = ['link' => 'http://'];
}
if (isset($_POST['submit'])) {
$link = isset($_POST['link']) ? trim($_POST['link']) : '';
$name = isset($_POST['name']) ? trim($_POST['name']) : '';
$bold = isset($_POST['bold']) ? 1 : 0;
$italic = isset($_POST['italic']) ? 1 : 0;
$underline = isset($_POST['underline']) ? 1 : 0;
$show = isset($_POST['show']) ? 1 : 0;
$view = isset($_POST['view']) ? abs(intval($_POST['view'])) : 0;
$day = isset($_POST['day']) ? abs(intval($_POST['day'])) : 0;
$count = isset($_POST['count']) ? abs(intval($_POST['count'])) : 0;
$day = isset($_POST['day']) ? abs(intval($_POST['day'])) : 0;
$layout = isset($_POST['layout']) ? abs(intval($_POST['layout'])) : 0;
$type = isset($_POST['type']) ? intval($_POST['type']) : 0;
$mesto = isset($_POST['mesto']) ? abs(intval($_POST['mesto'])) : 0;
$color = isset($_POST['color']) ? mb_substr(trim($_POST['color']), 0, 6) : '';
$error = [];
if (empty($link) || empty($name)) {
$error[] = _t('The required fields are not filled');
}
if ($type > 3 || $type < 0) {
$type = 0;
}
if (!$mesto) {
$total = $db->query("SELECT COUNT(*) FROM `cms_ads` WHERE `mesto` = '" . $mesto . "' AND `type` = '" . $type . "'")->fetchColumn();
if ($total) {
$error[] = _t('This place is occupied');
}
}
if ($color) {
if (preg_match("/[^\da-fA-F_]+/", $color)) {
$error[] = _t('Invalid characters');
}
if (strlen($color) < 6) {
$error[] = _t('Color is specified incorrectly');
}
}
if ($error) {
echo $tools->displayError($error, '<a href="index.php?act=ads&from=addlink">' . _t('Back') . '</a>');
require('../system/end.php');
exit;
}
if ($id) {
// Обновляем ссылку после редактирования
$db->prepare('
UPDATE `cms_ads` SET
`type` = ?,
`view` = ?,
`link` = ?,
`name` = ?,
`color` = ?,
`count_link` = ?,
`day` = ?,
`layout` = ?,
`show` = ?,
`bold` = ?,
`italic` = ?,
`underline` = ?
WHERE `id` = ?
')->execute([
$type,
$view,
$link,
$name,
$color,
$count,
$day,
$layout,
$show,
$bold,
$italic,
$underline,
$id,
]);
} else {
// Добавляем новую ссылку
$req = $db->query("SELECT `mesto` FROM `cms_ads` ORDER BY `mesto` DESC LIMIT 1");
if ($req->rowCount()) {
$res = $req->fetch();
$mesto = $res['mesto'] + 1;
} else {
$mesto = 1;
}
$db->prepare('
INSERT INTO `cms_ads` SET
`type` = ?,
`view` = ?,
`mesto` = ?,
`link` = ?,
`name` = ?,
`color` = ?,
`count_link` = ?,
`day` = ?,
`layout` = ?,
`show` = ?,
`time` = ?,
`to` = 0,
`bold` = ?,
`italic` = ?,
`underline` = ?
')->execute([
$type,
$view,
$mesto,
$link,
$name,
$color,
$count,
$day,
$layout,
$show,
time(),
$bold,
$italic,
$underline,
]);
}
$db->exec('UPDATE `users` SET `lastpost` = ' . time() . ' WHERE `id` = ' . $systemUser->id);
echo '<div class="menu"><p>' . ($id ? _t('Link successfully changed') : _t('Link successfully added')) . '<br>' .
'<a href="index.php?act=ads&sort=' . $type . '">' . _t('Continue') . '</a></p></div>';
} else {
// Форма добавления / изменения ссылки
echo '<form action="index.php?act=ads&mod=edit' . ($id ? '&id=' . $id : '') . '" method="post">' .
'<div class="menu"><p><h3>' . _t('Link') . '</h3>' .
'<input type="text" name="link" value="' . htmlentities($res['link'], ENT_QUOTES, 'UTF-8') . '"/><br>' .
'<input type="checkbox" name="show" ' . ($res['show'] ? 'checked="checked"' : '') . '/> ' . _t('Direct Link') . '<br>' .
'<small>' . _t('Click statistics won\'t be counted, If the direct link is turned on') . '</small></p>' .
'<p><h3>' . _t('Title') . '</h3>' .
'<input type="text" name="name" value="' . htmlentities($res['name'], ENT_QUOTES, 'UTF-8') . '"/><br>' .
'<small>' . _t('To change the name when updating pages, you must wtite names trought the symbol |') . '</small></p>' .
'<p><h3>' . _t('Color') . '</h3>' .
'<input type="text" name="color" size="6" value="' . $res['color'] . '"/><br>' .
'<small>' . _t('In the format FFFFFF, if you do not want to use link color, simply do not fill this field') . '</small></p>' .
'<p><h3>' . _t('Hits') . '</h3>' .
'<input type="text" name="count" size="6" value="' . $res['count_link'] . '"/><br>' .
'<small>' . _t('Number of hits for link existence which will be automatically removed from the page<br>0 - Unlimited') . '</small></p>' .
'<p><h3>' . _t('Days') . '</h3>' .
'<input type="text" name="day" size="6" value="' . $res['day'] . '"/><br>' .
'<small>' . _t('Number of days for link existence which will be automatically removed from the page<br>0 - Unlimited') . '</small></p>' .
'</div><div class="gmenu">' .
'<p><h3>' . _t('Show') . '</h3>' .
'<input type="radio" name="view" value="0" ' . (!$res['view'] ? 'checked="checked"' : '') . '/> ' . _t('Everyone') . '<br>' .
'<input type="radio" name="view" value="1" ' . ($res['view'] == 1 ? 'checked="checked"' : '') . '/> ' . _t('Guests') . '<br>' .
'<input type="radio" name="view" value="2" ' . ($res['view'] == 2 ? 'checked="checked"' : '') . '/> ' . _t('Users') . '</p>' .
'<p><h3>' . _t('Location') . '</h3>' .
'<input type="radio" name="type" value="0" ' . (!$res['type'] ? 'checked="checked"' : '') . '/> ' . _t('Above logo') . '<br>' .
'<input type="radio" name="type" value="1" ' . ($res['type'] == 1 ? 'checked="checked"' : '') . '/> ' . _t('Under menu') . '<br>' .
'<input type="radio" name="type" value="2" ' . ($res['type'] == 2 ? 'checked="checked"' : '') . '/> ' . _t('Over the counter') . '<br>' .
'<input type="radio" name="type" value="3" ' . ($res['type'] == 3 ? 'checked="checked"' : '') . '/> ' . _t('Under counter') . '</p>' .
'<p><h3>' . _t('Layout') . '</h3>' .
'<input type="radio" name="layout" value="0" ' . (!$res['layout'] ? 'checked="checked"' : '') . '/> ' . _t('All pages') . '<br>' .
'<input type="radio" name="layout" value="1" ' . ($res['layout'] == 1 ? 'checked="checked"' : '') . '/> ' . _t('Only on Homepage') . '<br>' .
'<input type="radio" name="layout" value="2" ' . ($res['layout'] == 2 ? 'checked="checked"' : '') . '/> ' . _t('On all, except Homepage') . '</p>' .
'<p><h3>' . _t('Styling links') . '</h3>' .
'<input type="checkbox" name="bold" ' . ($res['bold'] ? 'checked="checked"' : '') . '/> <b>' . _t('Bold') . '</b><br>' .
'<input type="checkbox" name="italic" ' . ($res['italic'] ? 'checked="checked"' : '') . '/> <i>' . _t('Italic') . '</i><br>' .
'<input type="checkbox" name="underline" ' . ($res['underline'] ? 'checked="checked"' : '') . '/> <u>' . _t('Underline') . '</u></p></div>' .
'<div class="phdr"><input type="submit" name="submit" value="' . ($id ? _t('Edit') : _t('Add')) . '" /></div></form>' .
'<p><a href="index.php?act=ads">' . _t('Advertisement') . '</a><br>' .
'<a href="index.php">' . _t('Admin Panel') . '</a></p>';
}
break;
case 'down':
// Перемещаем на позицию вниз
if ($id) {
$req = $db->query("SELECT `mesto`, `type` FROM `cms_ads` WHERE `id` = '$id'");
if ($req->rowCount()) {
$res = $req->fetch();
$mesto = $res['mesto'];
$req = $db->query("SELECT * FROM `cms_ads` WHERE `mesto` > '$mesto' AND `type` = '" . $res['type'] . "' ORDER BY `mesto` ASC");
if ($req->rowCount()) {
$res = $req->fetch();
$id2 = $res['id'];
$mesto2 = $res['mesto'];
$db->exec("UPDATE `cms_ads` SET `mesto` = '$mesto2' WHERE `id` = '$id'");
$db->exec("UPDATE `cms_ads` SET `mesto` = '$mesto' WHERE `id` = '$id2'");
}
}
}
header('Location: ' . getenv("HTTP_REFERER"));
break;
case 'up':
// Перемещаем на позицию вверх
if ($id) {
$req = $db->query("SELECT `mesto`, `type` FROM `cms_ads` WHERE `id` = '$id'");
if ($req->rowCount()) {
$res = $req->fetch();
$mesto = $res['mesto'];
$req = $db->query("SELECT * FROM `cms_ads` WHERE `mesto` < '$mesto' AND `type` = '" . $res['type'] . "' ORDER BY `mesto` DESC");
if ($req->rowCount()) {
$res = $req->fetch();
$id2 = $res['id'];
$mesto2 = $res['mesto'];
$db->exec("UPDATE `cms_ads` SET `mesto` = '$mesto2' WHERE `id` = '$id'");
$db->exec("UPDATE `cms_ads` SET `mesto` = '$mesto' WHERE `id` = '$id2'");
}
}
}
header('Location: ' . getenv("HTTP_REFERER") . '');
break;
case 'del':
// Удаляем ссылку
if ($id) {
if (isset($_POST['submit'])) {
$db->exec("DELETE FROM `cms_ads` WHERE `id` = '$id'");
header('Location: ' . $_POST['ref']);
} else {
echo '<div class="phdr"><a href="index.php?act=ads"><b>' . _t('Advertisement') . '</b></a> | ' . _t('Delete') . '</div>' .
'<div class="rmenu"><form action="index.php?act=ads&mod=del&id=' . $id . '" method="post">' .
'<p>' . _t('Are you sure want to delete link?') . '</p>' .
'<p><input type="submit" name="submit" value="' . _t('Delete') . '" /></p>' .
'<input type="hidden" name="ref" value="' . htmlspecialchars($_SERVER['HTTP_REFERER']) . '" />' .
'</form></div>' .
'<div class="phdr"><a href="' . htmlspecialchars($_SERVER['HTTP_REFERER']) . '">' . _t('Cancel') . '</a></div>';
}
}
break;
case 'clear':
// Очистка базы от неактивных ссылок
if (isset($_POST['submit'])) {
$db->exec("DELETE FROM `cms_ads` WHERE `to` = '1'");
$db->query("OPTIMIZE TABLE `cms_ads`");
header('location: index.php?act=ads');
} else {
echo '<div class="phdr"><a href="index.php?act=ads"><b>' . _t('Advertisement') . '</b></a> | ' . _t('Delete inactive links') . '</div>' .
'<div class="menu"><form method="post" action="index.php?act=ads&mod=clear">' .
'<p>' . _t('Are you sure you want to delete all inactive links?') . '</p>' .
'<p><input type="submit" name="submit" value="' . _t('Delete') . '" />' .
'</p></form></div>' .
'<div class="phdr"><a href="index.php?act=ads">' . _t('Cancel') . '</a></div>';
}
break;
case 'show':
// Восстанавливаем / скрываем ссылку
if ($id) {
$req = $db->query("SELECT * FROM `cms_ads` WHERE `id` = '$id'");
if ($req->rowCount()) {
$res = $req->fetch();
$db->exec("UPDATE `cms_ads` SET `to`='" . ($res['to'] ? 0 : 1) . "' WHERE `id` = '$id'");
}
}
header('Location: ' . $_SERVER['HTTP_REFERER']);
break;
default:
// Главное меню модуля управления рекламой
echo '<div class="phdr"><a href="index.php"><b>' . _t('Admin Panel') . '</b></a> | ' . _t('Advertisement') . '</div>';
$array_placing = [
_t('All pages'),
_t('Only on Homepage'),
_t('On all, except Homepage'),
];
$array_show = [
_t('Everyone'),
_t('Guests'),
_t('Users'),
];
$type = isset($_GET['type']) ? intval($_GET['type']) : 0;
$array_menu = [
(!$type ? _t('Above logo') : '<a href="index.php?act=ads">' . _t('Above logo') . '</a>'),
($type == 1 ? _t('Under menu') : '<a href="index.php?act=ads&type=1">' . _t('Under menu') . '</a>'),
($type == 2 ? _t('Over the counter') : '<a href="index.php?act=ads&type=2">' . _t('Over the counter') . '</a>'),
($type == 3 ? _t('Under counter') : '<a href="index.php?act=ads&type=3">' . _t('Under counter') . '</a>'),
];
echo '<div class="topmenu">' . implode(' | ', $array_menu) . '</div>';
$total = $db->query("SELECT COUNT(*) FROM `cms_ads` WHERE `type` = '$type'")->fetchColumn();
if ($total) {
$req = $db->query("SELECT * FROM `cms_ads` WHERE `type` = '$type' ORDER BY `mesto` ASC LIMIT $start,$kmess");
$i = 0;
while ($res = $req->fetch()) {
echo $i % 2 ? '<div class="list2">' : '<div class="list1">';
$name = str_replace('|', '; ', $res['name']);
$name = htmlentities($name, ENT_QUOTES, 'UTF-8');
// Если был задан цвет, то применяем
if (!empty($res['color'])) {
$name = '<span style="color:#' . $res['color'] . '">' . $name . '</span>';
}
// Если было задано начертание шрифта, то применяем
$font = $res['bold'] ? 'font-weight: bold;' : false;
$font .= $res['italic'] ? ' font-style:italic;' : false;
$font .= $res['underline'] ? ' text-decoration:underline;' : false;
if ($font) {
$name = '<span style="' . $font . '">' . $name . '</span>';
}
// Выводим рекламмную ссылку с атрибутами
echo '<p><img src="../images/' . ($res['to'] ? 'red' : 'green') . '.gif" width="16" height="16" class="left"/> ' .
'<a href="' . htmlspecialchars($res['link']) . '">' . htmlspecialchars($res['link']) . '</a> [' . $res['count'] . ']<br>' . $name . '</p>';
$menu = [
'<a href="index.php?act=ads&mod=up&id=' . $res['id'] . '">' . _t('Up') . '</a>',
'<a href="index.php?act=ads&mod=down&id=' . $res['id'] . '">' . _t('Down') . '</a>',
'<a href="index.php?act=ads&mod=edit&id=' . $res['id'] . '">' . _t('Edit') . '</a>',
'<a href="index.php?act=ads&mod=del&id=' . $res['id'] . '">' . _t('Delete') . '</a>',
'<a href="index.php?act=ads&mod=show&id=' . $res['id'] . '">' . ($res['to'] ? _t('Show') : _t('Hide')) . '</a>',
];
echo '<div class="sub">' .
'<div>' . implode(' | ', $menu) . '</div>' .
'<p><span class="gray">' . _t('Start date') . ':</span> ' . $tools->displayDate($res['time']) . '<br>' .
'<span class="gray">' . _t('Disposition') . ':</span> ' . $array_placing[$res['layout']] . '<br>' .
'<span class="gray">' . _t('Show') . ':</span> ' . $array_show[$res['view']];
// Вычисляем условия договора на рекламу
$agreement = [];
$remains = [];
if (!empty($res['count_link'])) {
$agreement[] = $res['count_link'] . ' ' . _t('hits');
$remains_count = $res['count_link'] - $res['count'];
if ($remains_count > 0) {
$remains[] = $remains_count . ' ' . _t('hits');
}
}
if (!empty($res['day'])) {
$agreement[] = $tools->timecount($res['day'] * 86400);
$remains_count = $res['day'] * 86400 - (time() - $res['time']);
if ($remains_count > 0) {
$remains[] = $tools->timecount($remains_count);
}
}
// Если был договор, то выводим описание
if ($agreement) {
echo '<br><span class="gray">' . _t('Agreement') . ':</span> ' . implode($agreement, ', ');
if ($remains) {
echo '<br><span class="gray">' . _t('Remains') . ':</span> ' . implode($remains, ', ');
}
}
echo ($res['show'] ? '<br><span class="red"><b>' . _t('Direct Link') . '</b></span>' : '') . '</p></div></div>';
++$i;
}
} else {
echo '<div class="menu"><p>' . _t('The list is empty') . '</p></div>';
}
echo '<div class="phdr">' . _t('Total') . ': ' . $total . '</div>';
if ($total > $kmess) {
echo '<div class="topmenu">' . $tools->displayPagination('index.php?act=ads&type=' . $type . '&', $start, $total, $kmess) . '</div>' .
'<p><form action="index.php?act=ads&type=' . $type . '" method="post">' .
'<input type="text" name="page" size="2"/>' .
'<input type="submit" value="' . _t('To Page') . ' >>"/></form></p>';
}
echo '<p><a href="index.php?act=ads&mod=edit">' . _t('Add link') . '</a><br>' .
'<a href="index.php?act=ads&mod=clear">' . _t('Delete inactive links') . '</a><br>' .
'<a href="index.php">' . _t('Admin Panel') . '</a></p>';
}