pages.php
53 lines
| 1.8 KiB
| text/x-php
|
PhpLexer
/ include / pages.php
| r1 | <?php | |||
| class Page { | ||||
| var $url_name, $status, $title, $body, $style; | ||||
| } | ||||
| function savepage($page) { | ||||
| if($page->url_name) | ||||
| return updatepage($page); | ||||
| else | ||||
| return insertpage($page); | ||||
| } | ||||
| function insertpage($page) { | ||||
| global $mtdb; | ||||
| $sql = 'INSERT INTO static_page ( url_name, status, title, body, style ) VALUES (' | ||||
| . ' "' . mysql_real_escape_string($page->url_name) | ||||
| . '", "' . mysql_real_escape_string($page->status) | ||||
| . '", "' . mysql_real_escape_string( trim( $page->title ) ) | ||||
| . '", "' . mysql_real_escape_string( trim( $page->body ) ) | ||||
| . '", "' . mysql_real_escape_string( trim( $page->style ) ) | ||||
| . '")'; | ||||
| adminlog("Page '".$page->url_name."' has been added.", MTS_PAGE, MTA_ADD); | ||||
| return $mtdb->query($sql); | ||||
| } | ||||
| function updatepage($page) { | ||||
| if ( !$page->url_name ) return false; | ||||
| global $mtdb; | ||||
| $sql = 'UPDATE static_page SET url_name = "' . mysql_real_escape_string($page->url_name) | ||||
| . '", status = "' . mysql_real_escape_string($page->status) | ||||
| . '", title = "' . mysql_real_escape_string( trim($page->title) ) | ||||
| . '", body = "' . mysql_real_escape_string( trim($page->body ) ) | ||||
| . '", style = "' . mysql_real_escape_string( trim($page->style ) ) | ||||
| . '" WHERE url_name = "' . mysql_real_escape_string($page->url_name) . '"'; | ||||
| adminlog("Page '".$page->url_name."' has been updated.", MTS_PAGE, MTA_MODIFY); | ||||
| return $mtdb->query( $sql ); | ||||
| } | ||||
| function deletepage($url_name) { | ||||
| if ( !$url_name ) return false; | ||||
| global $mtdb; | ||||
| adminlog("Page '".$page->url_name."' has been deleted.", MTS_PAGE, MTA_DELETE); | ||||
| return $mtdb->query( 'DELETE FROM static_page WHERE url_name = "' . mysql_real_escape_string($url_name) . '"' ); | ||||
| } | ||||
| function getpage($url_name) { | ||||
| global $mtdb; | ||||
| return $mtdb->getRow( 'SELECT url_name, status, title, body, style FROM static_page WHERE url_name = "'. mysql_real_escape_string($url_name) . '"' ); | ||||
| } | ||||
| ?> | ||||
