|
|
<?php
|
|
|
|
|
|
class Page {
|
|
|
var $url_name, $status, $title, $body, $style;
|
|
|
}
|
|
|
|
|
|
function savepage($page) {
|
|
|
if($page->url_name)
|
|
|
return updatepage($page);
|
|
|
else
|
|
|
return insertpage($page);
|
|
|
}
|
|
|
|
|
|
function insertpage($page) {
|
|
|
global $mtdb;
|
|
|
$sql = 'INSERT INTO static_page ( url_name, status, title, body, style ) VALUES ('
|
|
|
. ' "' . mysqli_real_escape_string($mtdb->link, $page->url_name)
|
|
|
. '", "' . mysqli_real_escape_string($mtdb->link, $page->status)
|
|
|
. '", "' . mysqli_real_escape_string( $mtdb->link, trim( $page->title ) )
|
|
|
. '", "' . mysqli_real_escape_string( $mtdb->link, trim( $page->body ) )
|
|
|
. '", "' . mysqli_real_escape_string( $mtdb->link, trim( $page->style ) )
|
|
|
. '")';
|
|
|
adminlog("Page '".$page->url_name."' has been added.", MTS_PAGE, MTA_ADD);
|
|
|
return $mtdb->query($sql);
|
|
|
}
|
|
|
|
|
|
function updatepage($page) {
|
|
|
if ( !$page->url_name ) return false;
|
|
|
global $mtdb;
|
|
|
|
|
|
$sql = 'UPDATE static_page SET url_name = "' . mysqli_real_escape_string($page->url_name)
|
|
|
. '", status = "' . mysqli_real_escape_string($mtdb->link, $page->status)
|
|
|
. '", title = "' . mysqli_real_escape_string( trim($mtdb->link, $page->title) )
|
|
|
. '", body = "' . mysqli_real_escape_string( trim($mtdb->link, $page->body ) )
|
|
|
. '", style = "' . mysqli_real_escape_string( trim($mtdb->link, $page->style ) )
|
|
|
. '" WHERE url_name = "' . mysqli_real_escape_string($mtdb->link, $page->url_name) . '"';
|
|
|
adminlog("Page '".$page->url_name."' has been updated.", MTS_PAGE, MTA_MODIFY);
|
|
|
return $mtdb->query( $sql );
|
|
|
}
|
|
|
|
|
|
function deletepage($url_name) {
|
|
|
if ( !$url_name ) return false;
|
|
|
global $mtdb;
|
|
|
adminlog("Page '".$page->url_name."' has been deleted.", MTS_PAGE, MTA_DELETE);
|
|
|
return $mtdb->query( 'DELETE FROM static_page WHERE url_name = "' . mysqli_real_escape_string($mtdb->link, $url_name) . '"' );
|
|
|
}
|
|
|
|
|
|
function getpage($url_name) {
|
|
|
global $mtdb;
|
|
|
return $mtdb->getRow( 'SELECT url_name, status, title, body, style FROM static_page WHERE url_name = "'. mysqli_real_escape_string($mtdb->link, $url_name) . '"' );
|
|
|
}
|
|
|
|
|
|
?>
|
|
|
|
