Commit | Line | Data |
---|---|---|
b42b2bf9 H |
1 | <?php |
2 | function addEvent() { | |
3 | global $db,$error,$node, $error_messages; | |
4 | $add_event_id = $_POST['add_event_id']; | |
5 | ||
6 | if (!is_numeric($add_event_id)) { | |
7 | $error = $error_messages['NOT_NUMERIC']; | |
8 | return false; | |
9 | } | |
10 | ||
11 | $set = $db->query("select node_parent, node_system_access, node_creator, | |
12 | template_id, node_content, node_name from nodes where nodes.node_id = '$add_event_id'"); | |
13 | $set->next(); | |
14 | $node_parent = $set->getString('node_parent'); | |
15 | $node_system_access = $set->getString('node_system_access'); | |
16 | $node_creator = $set->getString('node_creator'); | |
17 | $node_template = $set->getString('template_id'); | |
18 | $node_content = stripslashes($set->getString('node_content')); | |
19 | $event_name = $set->getString('node_name'); | |
20 | $fp = fopen (EVENT_DIR.$event_name.".inc","w+"); | |
21 | fwrite($fp,$node_content); | |
22 | fclose($fp); | |
23 | chown(EVENT_DIR.$event_name.".inc","wwwedit"); | |
24 | ||
25 | $q = "update nodes set external_link = '' where node_name = '".$event_name."' and external_link = 'event://$event_name'"; | |
26 | $db->query($q); | |
27 | $q = "update nodes set external_link = 'event://$event_name' where node_id = '".$add_event_id."'"; | |
28 | $db->query($q); | |
29 | ||
30 | //logging of every event for security reasons | |
31 | $params['node_creator'] = UBIK_ID; | |
32 | $params['node_parent'] = 2019771; | |
33 | $params['node_name'] = "addEvent execute: node $add_event_id"; | |
34 | $params['node_content'] = "addEvent execute: node <a href='$add_event_id'>$add_event_id</a> by user ".$_SESSION['user_name']; | |
35 | $params['node_content'] .= "<br />event_name: ".$event_name; | |
36 | $params['node_content'] .= "<br />template_id: <a href='$node_template'>".$node_template."</a>"; | |
37 | $params['node_content'] .= "<br />node_parent: <a href='$node_parent'>".$node_parent."</a>"; | |
38 | $params['node_content'] .= "<br />node_system_access: ".$node_system_access; | |
39 | $params['node_content'] .= "<br />node_creator: <a href='$node_creator'>".$node_creator."</a>"; | |
40 | $params['node_content'] = mysql_real_escape_string($params['node_content']); | |
41 | nodes::addNode($params); | |
42 | ||
43 | return true; | |
44 | } | |
45 | ?> |