Revize fbcb777f

Re #7580 administrace - články

old/html/multidic/app/webroot/administration/add_article.php

@@ -13 +13 @@
       echo $string;
   }
 
-
-if (Empty($language) || $language == "") {
+if (Empty(@$_REQUEST['language']) || @$_REQUEST['language'] == "") {
   $krok = 0;
 }
-else if (Empty($source) || $source == "") {
+else if (Empty(@$_REQUEST['source']) || @$_REQUEST['source'] == "") {
   $krok = 1;
 }
 else {
@@ -58 +57 @@
     <form action="" method="POST" name="new_article_form1">
       <table>
       <tr class="akt">
-        <td><?php echo(get_source_chooser($language))?></td>
+        <td><?php echo(get_source_chooser(@$_REQUEST['language']))?></td>
       </tr>
       <tr class="nadpis_sekce">
         <td>
-          <input type="hidden" name="language" value="<?php echo $language?>">
+          <input type="hidden" name="language" value="<?php echo @$_REQUEST['language']?>">
           <input type="hidden" name="action" value="select_source">
           <input type="submit" value="Dál">
         </td>
@@ -79 +78 @@
   
   $zobrazit_znovu = true;  
 
-    if (!Empty($action) && $action == "insert_new_article") {
+    if (!Empty(@$_REQUEST['action']) && @$_REQUEST['action'] == "insert_new_article") {
 
-    $user = $ses_IDuser;
+    $user = $_SESSION['ses_IDuser'];
   
   
-    if (Empty($lection)) {
+    if (Empty(@$_REQUEST['lection'])) {
       print_hlasku("Lekci musíte vyplnit");
     }
     else {
-      if (insert_article($language,$source,$lection,$title,$body,$note,$user)) {
+      if (insert_article(@$_REQUEST['language'],@$_REQUEST['source'],@$_REQUEST['lection'],@$_REQUEST['title'],@$_REQUEST['body'],@$_REQUEST['note'],$user)) {
         print_hlasku ("Článek přidán...");
+      }else{
+          print_hlasku("Nastala chyba při vytváření článku");
       }
 
       $zobrazit_znovu = false;
@@ -125 +126 @@
       <table>
       <tr class="akt">
         <td>název</td>
-        <td<?php if ($language == 1 || $language == 2) echo " dir=\"rtl\"" ?>>
-        <input type="text" <?php if ($language == 1 || $language == 2) echo "class=\"arabic\"\n" ?>
+        <td<?php if (@$_REQUEST['language'] == 1 || @$_REQUEST['language'] == 2) echo " dir=\"rtl\"" ?>>
+        <input type="text" <?php if (@$_REQUEST['language'] == 1 || @$_REQUEST['language'] == 2) echo "class=\"arabic\"\n" ?>
                name="title"  
-               size="29"<?php znova($title)?> 
+               size="29"<?php znova(@$_REQUEST['title'])?>
                onfocus="aktivujKlavesnici('new_article_form.title')" /></td>
       </tr>
       <tr class="akt">
         <td>text</td>
-        <td<?php if ($language == 1 || $language == 2) echo " dir=\"rtl\"" ?>>
-        <textarea <?php if ($language == 1 || $language == 2) echo "class=\"arabic\"\n" ?>
+        <td<?php if (@$_REQUEST['language'] == 1 || @$_REQUEST['language'] == 2) echo " dir=\"rtl\"" ?>>
+        <textarea <?php if (@$_REQUEST['language'] == 1 || @$_REQUEST['language'] == 2) echo "class=\"arabic\"\n" ?>
             name="body" 
             rows="7" 
             wrap="PHYSICAL" 
             cols="25"
             onfocus="aktivujKlavesnici('new_article_form.body')"
-        ><?php znova_hodnota($body) ?></textarea>       
+        ><?php znova_hodnota(@$_REQUEST['body']) ?></textarea>       
                
                
                </td>
       </tr>
       <tr class="akt">
         <td>poznámka</td>
-        <td><input type="text" name="note"  size="50"<?php znova($note)?> /></td>
+        <td><input type="text" name="note"  size="50"<?php znova(@$_REQUEST['note'])?> /></td>
       </tr>
       <tr class="akt">
         <td>lekce*</td>
-        <td><input type="text" name="lection"  size="50"<?php znova($lection)?> /></td>
+        <td><input type="text" name="lection"  size="50"<?php znova(@$_REQUEST['lection'])?> /></td>
       </tr>
       <tr class="nadpis_sekce">
         <td>
-          <input type="hidden" name="language" value="<?php echo $language?>">
-          <input type="hidden" name="source" value="<?php echo $source?>">
+          <input type="hidden" name="language" value="<?php echo @$_REQUEST['language']?>">
+          <input type="hidden" name="source" value="<?php echo @$_REQUEST['source']?>">
           <input type="hidden" name="action" value="insert_new_article">
         </td>
         <td><input type="submit" value="Vlož"></td>

old/html/multidic/app/webroot/administration/add_article_voice.php

@@ -3 +3 @@
   require_once("./administration/voice.php");
   $znovu = true;
 
-if (!Empty($action) && $action == "add_article_voice") {
+if (!Empty(@$_REQUEST['action']) && @$_REQUEST['action'] == "add_article_voice") {
   
-  if (Empty($soubor)) {
+  if (Empty(@$_REQUEST['soubor'])) {
     print_hlasku("Musíte vybrat soubor");
   }
   else {
     $znovu = false;
-    save_article_voice($soubor,$article_id);
+    save_article_voice(@$_REQUEST['soubor'],@$_REQUEST['article_id']);
     echo_zpet_do_clanku();
   }
 }
@@ -47 +47 @@
       <tr class="nadpis_sekce">
         <td>
           <input type="hidden" name="action" value="add_article_voice">
-          <input type="hidden" name="article_id" value="<?php echo $article_id?>">
+          <input type="hidden" name="article_id" value="<?php echo @$_REQUEST['article_id']?>">
         </td>
         <td><input type="submit" value="Vlož"></td>
       </tr>

old/html/multidic/app/webroot/administration/article.php

@@ -5 +5 @@
   require_once("./classes/db.php");
   $spojeni = new DB_Sql();
   $dotaz = "UPDATE article SET autorized = true
-                        WHERE \"IDarticle\" = '$ID'";
+                        WHERE IDarticle = '$ID'";
   $spojeni->query($dotaz);
   if ($spojeni->connection->errno != 0) {
     return false;
@@ -26 +26 @@
 }
 
 function get_row_of_table($Record) {
-  global $language;
-  global $order;
-  global $od;
-  global $limit;
-  global $contrains_source;
-  global $contrains_lection;
+  $language = $Record['language'];
+  $contrains_source = $_REQUEST['contrains_source'];
+  $contrains_lection = $_REQUEST['contrains_lection'];
 
   $nav_str = "language=$language&contrains_source=$contrains_source&contrains_lection=$contrains_lection";
 
   //pr($Record);
-  
+  $navrat = "";
   $navrat .= "  <tr>\n";
   $navrat .= '    <td>
                 <a href="?nav_id=list_article&action=delete_article&article_id='.$Record[0].'&'.$nav_str.'">smaž</a>
@@ -98 +95 @@
                     $contrains_lection = "all",
                     $nonauthorized = false) {
 
-  global $language;
 
   global $order;
   global $od;
@@ -108 +104 @@
   $od    = $l_od;
   $limit = $l_limit;
 
+  $language = $_REQUEST['language'];
+  $contrains_source = $_REQUEST['contrains_source'];
+  $contrains_lection = $_REQUEST['contrains_lection'];
 
   $nav = ($nonauthorized)? "list_nonauthorized_article" : "list_article";
   $nav_str = "language=$language&contrains_source=$contrains_source&contrains_lection=$contrains_lection";
@@ -159 +158 @@
 }
 
 function get_pocet_clanku($contrains_source, $contrains_lection, $nonauthorized) {
-  global $language;
-  require_once("./classes/db.php");
+  $language = $_REQUEST['language'];
+
   $spojeni = new DB_Sql();
   //$spojeni->debug = true;
-  $dotaz = "SELECT \"IDarticle\" FROM article";
+  $dotaz = "SELECT IDarticle FROM article";
    if ($nonauthorized == true) {
     $dotaz .= " WHERE autorized = false";
 	}
@@ -257 +256 @@
 function get_article($id) {
   require_once("./classes/db.php");
   $spojeni = new DB_Sql();
-  $dotaz = "SELECT * FROM article WHERE \"IDarticle\" = '$id'";
+  $dotaz = "SELECT * FROM article WHERE IDarticle = '$id'";
   $radky = $spojeni->query($dotaz);
   $spojeni->next_record();
 
   if ($spojeni->connection->errno != 0) {
-    print_hlasku("Clanek se nepodařilo načíst.");
+    print_hlasku("Članek se nepodařilo načíst.");
   }
 
-  return $spojeni->Record;
+  return $spojeni->row;
 }
 
 function delete_article($ID) {
   require_once("./classes/db.php");
   $spojeni = new DB_Sql();
-  $dotaz = "DELETE FROM article WHERE \"IDarticle\" = '$ID'";
+  $dotaz = "DELETE FROM article WHERE IDarticle = '$ID'";
   $spojeni->query($dotaz);
   if ($spojeni->connection->errno != 0) {
     return false;
@@ -287 +286 @@
                             body = '".AddSlashes($body)."',
                             note = '".AddSlashes($note)."',
                             lection = '".AddSlashes($lection)."'
-                            WHERE \"IDarticle\" = '".AddSlashes($id)."'";
+                            WHERE IDarticle = '".AddSlashes($id)."'";
   $spojeni->query($dotaz);
   if ($spojeni->connection->errno != 0) {
     print_hlasku("Slovo se nepodařilo upravit.");
@@ -303 +302 @@
   $spojeni = new DB_Sql();
   //$NOW = Date("YmdHis");
 
-  $dotaz = "INSERT INTO article (\"language\",
-                              \"source\",
-                              \"lection\",
-                              \"inserted_by\",
-                              \"title\",
-                              \"body\",
-                              \"note\",
-                              \"article_voice\")
+  $dotaz = "INSERT INTO article (language,
+                              source,
+                              lection,
+                              inserted_by,
+                              title,
+                              body,
+                              note,
+                              article_voice)
                     VALUES ('$language',
                             '$source',
                             '$lection',
@@ -320 +319 @@
                             '$note',
                             '0')";
   $spojeni->query($dotaz);
-  if ($spojeni->connection->errno != 0) {
+
+    if ($spojeni->connection->errno != 0) {
     return false;
   }
   return true;

old/html/multidic/app/webroot/administration/edit_article.php

@@ -1 +1 @@
 <?php 
 require_once("./administration/article.php");
 $vypis_edit = true;
-if (!Empty($action) && $action == "edit_article") {
+if (!Empty(@$_REQUEST['action']) && @$_REQUEST['action'] == "edit_article") {
   
 
-  if (Empty($lection)) {
+  if (Empty(@$_REQUEST['lection'])) {
     print_hlasku("Lekci musíte vyplnit");
   }
   else {
-    update_article($article_id, $title, $body, $note, $lection);
+    update_article(@$_REQUEST['article_id'], @$_REQUEST['title'], @$_REQUEST['body'], @$_REQUEST['note'], @$_REQUEST['lection']);
     
     echo_zpet_do_clanku();
     $vypis_edit = false;
@@ -18 +18 @@
 }
 if($vypis_edit){
   
-  $Record = get_article($article_id);
-  $title         = $Record["title"];
-  $body          = $Record["body"];
-  $note          = $Record["note"];
-  $lection       = $Record["lection"]; 
+  $Record = get_article(@$_REQUEST['article_id']);
+  @$_REQUEST['title']         = $Record["title"];
+  @$_REQUEST['body']          = $Record["body"];
+  @$_REQUEST['note']          = $Record["note"];
+  @$_REQUEST['lection']       = $Record["lection"]; 
 
 ?>
 
@@ -53 +53 @@
       <table>
       <tr class="akt">
         <td>název</td>
-        <td<?php  if ($language == 1 || $language == 2) echo " dir=\"rtl\"" ?>>
-        <input type="text" <?php  if ($language == 1 || $language == 2) echo "class=\"arabic\"\n" ?>
+        <td<?php  if (@$_REQUEST['language'] == 1 || @$_REQUEST['language'] == 2) echo " dir=\"rtl\"" ?>>
+        <input type="text" <?php  if (@$_REQUEST['language'] == 1 || @$_REQUEST['language'] == 2) echo "class=\"arabic\"\n" ?>
                class= "arabic"
                name="title"  
                size="29"
-               value="<?php echo $title?>" 
+               value="<?php echo @$_REQUEST['title']?>" 
                onfocus="aktivujKlavesnici('edit_article_form.title')" /></td>
       </tr>
       <tr class="akt">
         <td>text</td>
-        <td<?php  if ($language == 1 || $language == 2) echo " dir=\"rtl\"" ?>>
-        <textarea <?php  if ($language == 1 || $language == 2) echo "class=\"arabic\"\n" ?>
+        <td<?php  if (@$_REQUEST['language'] == 1 || @$_REQUEST['language'] == 2) echo " dir=\"rtl\"" ?>>
+        <textarea <?php  if (@$_REQUEST['language'] == 1 || @$_REQUEST['language'] == 2) echo "class=\"arabic\"\n" ?>
         class= "arabic"
             name="body" 
             rows="7" 
             wrap="PHYSICAL" 
             cols="25"
             onfocus="aktivujKlavesnici('edit_article_form.body')"
-        ><?php  echo $body ?></textarea>       
+        ><?php  echo @$_REQUEST['body'] ?></textarea>       
                
                
                </td>
       </tr>
       <tr class="akt">
         <td>poznámka</td>
-        <td><input type="text" name="note"  size="50" value="<?php  echo $note ?>" /></td>
+        <td><input type="text" name="note"  size="50" value="<?php  echo @$_REQUEST['note'] ?>" /></td>
       </tr>
       <tr class="akt">
         <td>lekce*</td>
-        <td><input type="text" name="lection"  size="50" value="<?php  echo $lection ?>" /></td>
+        <td><input type="text" name="lection"  size="50" value="<?php  echo @$_REQUEST['lection'] ?>" /></td>
       </tr>
       <tr class="nadpis_sekce">
         <td>
-          <input type="hidden" name="article_id" value="<?php echo $article_id?>">
-          <input type="hidden" name="language" value="<?php echo $language?>">
-          <input type="hidden" name="source" value="<?php echo $source?>">
+          <input type="hidden" name="article_id" value="<?php echo @$_REQUEST['article_id']?>">
+          <input type="hidden" name="language" value="<?php echo @$_REQUEST['language']?>">
+          <input type="hidden" name="source" value="<?php echo @$_REQUEST['source']?>">
           <input type="hidden" name="action" value="edit_article">
         </td>
         <td><input type="submit" value="Uprav"></td>

old/html/multidic/app/webroot/administration/voice.php

@@ -23 +23 @@
   }
   require_once("./classes/db.php");
   $spojeni = new DB_Sql();
-  $dotaz = "UPDATE article SET article_voice = 1 WHERE \"IDarticle\" = $id ";
+  $dotaz = "UPDATE article SET article_voice = 1 WHERE IDarticle = $id ";
   $spojeni->query($dotaz);
   
   if ($spojeni->connection->errno != 0) return false;

old/html/multidic/app/webroot/functions/dictionary.php

@@ -1009 +1009 @@
 
 function echo_zpet_do_slovniku()
 {
-    global $language;
-    global $nonauthorized;
-    global $contrains_source;
-    global $contrains_lection;
-    global $contrains_user_id;
-
+    $language = $_REQUEST['language'];
+    $contrains_source = $_REQUEST['contrains_source'];
+    $contrains_lection = $_REQUEST['contrains_lection'];
+    $contrains_user_id = $_SESSION['ses_IDuser'];
     //echo $nonauthorized;
 
-    if ($nonauthorized) $pomocna = "list_nonauthorized_word";
+    if ($_REQUEST['nonauthorized']) $pomocna = "list_nonauthorized_word";
     else $pomocna = "list_word";
 
     echo "<br />
@@ -1028 +1026 @@
 
 function echo_zpet_do_clanku()
 {
-    global $language;
-    global $contrains_source;
-    global $contrains_lection;
-
+    $language = $_REQUEST['language'];
+    $contrains_source = $_REQUEST['contrains_source'];
+    $contrains_lection = $_REQUEST['contrains_lection'];
     echo "<br />
         <a href=\"?nav_id=list_article&language=$language&contrains_source=$contrains_source&contrains_lection=$contrains_lection\">
            Zpět na seznam článků