$fieldHash) { if (!is_array($fieldHash)) { continue; } // fields are stored as arrays, other entries are table metadata if (@$fieldHash['type'] != 'wysiwyg') { continue; } // skip all but wysiwyg fields $fieldSchema = array_merge($fieldHash, array('name' => $name)); $uploadBrowserCallback = @$fieldSchema['allowUploads'] ? "wysiwygUploadBrowser" : ""; $includeDomainsInLinks = $SETTINGS['wysiwyg']['includeDomainInLinks'] ? "remove_script_host : false," : ""; $programUrl = pathinfo($_SERVER['PHP_SELF'], PATHINFO_DIRNAME); // display field print <<<__HTML__ __HTML__; } } function showFields() { global $FORM, $schema, $escapedTableName, $CURRENT_USER; $num = (int) @$FORM['num']; # error checking if ($escapedTableName == '') { die("no tablename specified!"); } if ($num != (int) $num) { die("record number value must be an integer!"); } // load record $record = array(); if ($num) { $query = "SELECT * FROM `$escapedTableName` WHERE num = '".mysql_real_escape_string($num)."'"; $result = mysql_query($query) or die("MySQL Error: ". htmlspecialchars(mysql_error()) . "\n"); $record = mysql_fetch_assoc($result); } // create record - set special field values //else { NOTE: We may remove this in future versions // $currentDate = date("Y-m-d H:i:s", getAdjustedLocalTime()); // set default to required Format: YYYY-MM-DD HH:MM:SS // if (!array_key_exists('createdDate', $record)) { $record['createdDate'] = $currentDate; } // if (!array_key_exists('createdByUserNum', $record)) { $record['createdByUserNum'] = $GLOBALS['CURRENT_USER']['num']; } // if (!array_key_exists('updatedDate', $record)) { $record['updatedDate'] = $currentDate; } // if (!array_key_exists('updatedByUserNum', $record)) { $record['updatedByUserNum'] = $GLOBALS['CURRENT_USER']['num']; } //} // load schema columns _showCreatedUpdated($schema, $record); foreach ($schema as $name => $fieldHash) { if (!is_array($fieldHash)) { continue; } // fields are stored as arrays, other entries are table metadata if (@$fieldHash['adminOnly'] && !$CURRENT_USER['isAdmin'] && !$GLOBALS['hasAdminAccess']) { continue; } // skip admin only fields $fieldSchema = array_merge($fieldHash, array('name' => $name)); switch (@$fieldHash['type']) { case '': case 'none': break; case 'textfield': _showTextfield($fieldSchema, $record); break; case 'textbox': _showTextbox($fieldSchema, $record); break; case 'wysiwyg': _showWysiwyg($fieldSchema, $record); break; case 'date': _showDateTime($fieldSchema, $record); break; case 'list': _showList($fieldSchema, $record); break; case 'checkbox': _showCheckbox($fieldSchema, $record); break; case 'upload': _showUpload($fieldSchema, $record); break; case 'separator': _showSeparator($fieldSchema, $record); break; case 'accessList': _showAccessList($fieldSchema, $record); break; default: echo "field '$name' has unknown field type '" .@$fieldHash['type']. "'"; break; } } } function _showCreatedUpdated($schema, $record) { global $FORM, $CURRENT_USER, $TABLE_PREFIX, $isSingleMenu; // create dates $dateFormat = "M jS, Y - h:i:s A"; $currentDate = date("Y-m-d H:i:s", getAdjustedLocalTime()); # format: YYYY-MM-DD HH:MM:SS (24hour format) $createdDate = date($dateFormat, strtotime( @$record['createdDate'] ? $record['createdDate'] : $currentDate )); $updatedDate = date($dateFormat, strtotime( @$record['updatedDate'] ? $record['updatedDate'] : $currentDate )); // get user names $usernameField = 'username'; $createdByUsername = "Unknown"; $updatedByUsername = "Unknown"; if ($record) { // editing record $accountTable = $TABLE_PREFIX . "accounts"; if (@$record['createdByUserNum']) { $query = "SELECT $usernameField FROM $accountTable WHERE num = '".mysql_real_escape_string($record['createdByUserNum'])."'"; $result = mysql_query($query) or die("MySQL Error: ". htmlspecialchars(mysql_error()) . "\n"); list($createdByUsername) = mysql_fetch_row($result); } if (@$record['updatedByUserNum']) { $query = "SELECT $usernameField FROM $accountTable WHERE num = '".mysql_real_escape_string($record['updatedByUserNum'])."'"; $result = mysql_query($query) or die("MySQL Error: ". htmlspecialchars(mysql_error()) . "\n"); list($updatedByUsername) = mysql_fetch_row($result); } } else { // adding record $createdByUsername = $CURRENT_USER[$usernameField]; $updatedByUsername = $CURRENT_USER[$usernameField]; } // show created $html = ""; $showCreated = @$schema['createdDate'] && @$schema['createdByUserNum'] && @$record['createdDate'] != '0000-00-00 00:00:00'; if ($showCreated) { $html .= <<<__HTML__ {$schema['createdDate']['label']} $createdDate (by $createdByUsername) __HTML__; } // show updated $showUpdated = @$schema['updatedDate'] && @$schema['updatedByUserNum'] && @$record['updatedDate'] != '0000-00-00 00:00:00'; if ($showUpdated) { $html .= <<<__HTML__ {$schema['updatedDate']['label']} $updatedDate (by $updatedByUsername) __HTML__; } // add linebreak if ($showCreated || $showUpdated) { $html .= <<<__HTML__     __HTML__; } print $html; } // function _showTextfield($fieldSchema, $record) { // set field attributes $inputType = $fieldSchema['isPasswordField'] ? 'password' : 'text'; $maxLengthAttr = $fieldSchema['maxLength'] ? "maxlength='{$fieldSchema['maxLength']}'" : ''; $styleWidth = @$fieldSchema['fieldWidth'] ? "{$fieldSchema['fieldWidth']}px" : "250px"; $description = @$fieldSchema['description']; $fieldValue = $record ? @$record{$fieldSchema['name']} : $fieldSchema['defaultValue']; $encodedValue = htmlspecialchars($fieldValue); // display field print <<<__HTML__ {$fieldSchema['label']} $description __HTML__; } // function _showTextbox($fieldSchema, $record) { // set field attributes $fieldHeight = $fieldSchema['fieldHeight'] ? $fieldSchema['fieldHeight'] : 100; $fieldValue = $record ? @$record{$fieldSchema['name']} : $fieldSchema['defaultContent']; if ($fieldSchema['autoFormat']) { $fieldValue = preg_replace("/\n/", "\n", $fieldValue); // remove autoformat break tags } $encodedValue = htmlspecialchars($fieldValue); // display field print <<<__HTML__ {$fieldSchema['label']} __HTML__; } // function _showWysiwyg($fieldSchema, $record) { // set field attributes $fieldHeight = $fieldSchema['fieldHeight'] ? $fieldSchema['fieldHeight'] : 100; $fieldValue = $record ? @$record{$fieldSchema['name']} : $fieldSchema['defaultContent']; $encodedValue = htmlspecialchars($fieldValue); // display field print <<<__HTML__ {$fieldSchema['label']} __HTML__; } // function _showDateTime($fieldSchema, $record) { global $SETTINGS; // get date value(s) $currentTime = date("Y-m-d H:i:s", getAdjustedLocalTime()); # format: YYYY-MM-DD HH:MM:SS (24hour format) $fieldValue = @$record{$fieldSchema['name']} ? $record{$fieldSchema['name']} : $currentTime; list($date,$time) = explode(' ', $fieldValue); // expecting: YYYY-MM-DD HH:MM:SS list($year,$month,$day) = explode('-', $date); // expecting: YYYY-MM-DD list($hour24,$min,$sec) = explode(':', $time); // expecting: HH:MM:SS $amOrPm = $hour24 > 12 ? "PM" : "AM"; $hour12 = (($hour24 % 12) == 0) ? 12 : $hour24 % 12; // get month options $monthOptions = ''; $shortMonthNames = array('Jan','Feb','Mar','Apr','May','Jun','Jul','Aug','Sep','Oct','Nov','Dec'); foreach (range(1,12) as $num) { $selectedAttr = ($num == $month) ? 'selected="selected"' : ''; $shortMonthName = $shortMonthNames{$num-1}; $monthOptions .= "\n"; } // get day options $dayOptions = ''; foreach (range(1,31) as $num) { $selectedAttr = ($num == $day) ? 'selected="selected"' : ''; $dayOptions .= "\n"; } // get year options $yearOptions = ''; foreach (range((int) $fieldSchema['yearRangeStart'], (int) $fieldSchema['yearRangeEnd']) as $num) { // (int) for range bug in PHP < 4.23 - see docs $selectedAttr = ($num == $year) ? 'selected="selected"' : ''; $yearOptions .= "\n"; } // get hour options $hour24Options = ''; $hour12Options = ''; foreach (range(0,23) as $num) { $selectedAttr = ($num == $hour24) ? 'selected="selected"' : ''; $hour24Options .= "\n"; } foreach (range(1,12) as $num) { $selectedAttr = ($num == $hour12) ? 'selected="selected"' : ''; $hour12Options .= "\n"; } // get minute options $minOptions = ''; foreach (range(0,59) as $num) { $selectedAttr = ($num == $min) ? 'selected="selected"' : ''; $minOptions .= "\n"; } // get second options $secOptions = ''; foreach (range(1,31) as $num) { $selectedAttr = ($num == $sec) ? 'selected="selected"' : ''; $secOptions .= "\n"; } // get AmPm optins $amSelectedAttr = ($amOrPm == 'AM') ? 'selected="selected"' : ''; $pmSelectedAttr = ($amOrPm == 'PM') ? 'selected="selected"' : ''; // display date field print " \n"; print " {$fieldSchema['label']}\n"; print " \n"; print " \n"; print " \n"; print " \n"; print "        \n"; if ($fieldSchema['showTime']) { if ($fieldSchema['use24HourFormat']) { // show 24 hour time print " \n"; print " \n"; if ($fieldSchema['showSeconds']) { print " \n"; } } else { // show 12 hour time print " \n"; print " \n"; if ($fieldSchema['showSeconds']) { print " \n"; } print " \n"; } } print " \n"; print " \n"; } // function _showList($fieldSchema, $record) { // set field attributes $listOptions = getListOptionsFromSchema($fieldSchema); $fieldValue = $record ? @$record{$fieldSchema['name']} : ''; $valignTop = ($fieldSchema['listType'] != 'pulldown') ? 'valign="top"' : ""; // print " \n"; print " {$fieldSchema['label']}\n"; print " \n"; // pulldown if ($fieldSchema['listType'] == 'pulldown') { print " \n"; } // radios else if ($fieldSchema['listType'] == 'radios') { foreach ($listOptions as $optionArray) { list($value,$label) = $optionArray; $encodedValue = htmlspecialchars($value); $encodedLabel = htmlspecialchars($label); $checkedAttr = ($value == $fieldValue) ? 'checked="checked"' : ''; $idAttr = "{$fieldSchema['name']}.$encodedValue"; print "\n"; print "
\n\n"; } } // checkboxes /*** NOTE: This isn't enabled on front end and may be removed in future versions ***/ else if ($fieldSchema['listType'] == 'checkboxes') { $checkedValues = explode(", ", $fieldValue); foreach ($listOptions as $optionArray) { list($value,$label) = $optionArray; $encodedValue = htmlspecialchars($value); $encodedLabel = htmlspecialchars($label); $checkedAttr = in_array($value, $checkedValues) ? 'checked="checked"' : ''; $idAttr = "{$fieldSchema['name']}.$encodedValue"; print "\n"; print "
\n"; } } // else { die("Unknown listType '{$fieldSchema['listType']}'!"); } // print " \n"; print " \n"; } // function _showCheckbox($fieldSchema, $record) { // set field attributes $checkedAttr = ''; if ($record && @$record{$fieldSchema['name']}) { $checkedAttr = 'checked="checked"'; } else if (!@$record['num'] && $fieldSchema['checkedByDefault']) { $checkedAttr = 'checked="checked"'; } $description = @$fieldSchema['description']; // display field print <<<__HTML__ {$fieldSchema['label']} __HTML__; } // function _showUpload($fieldSchema, $record) { global $menu, $FORM, $preSaveTempId, $SETTINGS; // create uploadList url $uploadList = "?" . "menu=" . urlencode($menu) . "&action=uploadList" . "&fieldName=" . urlencode($fieldSchema['name']) . "&num=" . urlencode(@$FORM['num']) . "&preSaveTempId=" . urlencode($preSaveTempId); // create uploadLink url $uploadLink = "?menu=" . urlencode($menu) . "&action=uploadForm" . "&fieldName=" . urlencode($fieldSchema['name']) . "&num=" . urlencode(@$FORM['num']) . "&preSaveTempId=" . urlencode($preSaveTempId) . "&TB_iframe=true&height=350&width=700&modal=false"; // error checking $errors = ""; $uploadDir = @$fieldSchema['useCustomUploadDir'] ? $fieldSchema['customUploadDir'] : $SETTINGS['uploadDir']; if (!file_exists($uploadDir)) { mkdir_recursive($uploadDir, 0755); } // create upload dir (if not possible, dir not exists error will show below) if (!file_exists($uploadDir)) { $errors .= "Upload directory '" .htmlspecialchars($uploadDir). "' doesn't exist!.
\n"; } elseif (!is_writable($uploadDir)) { $errors .= "Upload directory '" .htmlspecialchars($uploadDir). "' isn't writable!.
\n"; } // display errors if ($errors) { print <<<__HTML__
{$fieldSchema['label']}

$errors
__HTML__; return; } // display field print <<<__HTML__
These uploads may be displayed or linked on output page. {$fieldSchema['label']}
Add or Upload File(s)
__HTML__; } // function _showSeparator($fieldSchema, $record) { if ($fieldSchema['separatorType'] == 'blank line') { print " \n"; print "  \n"; print "  \n"; print " \n"; } else if ($fieldSchema['separatorType'] == 'header bar') { print " \n"; print " \n"; print "
{$fieldSchema['separatorHeader']}
\n"; print " \n"; print " \n"; } else if ($fieldSchema['separatorType'] == 'html') { # old: print "\n{$fieldSchema['separatorHTML']}\n"; # new: eval("?".">\n". $fieldSchema['separatorHTML'] . "\n"); } else { die("Unknown separator type '{$fieldSchema['separatorType']}'!"); } } // function _showAccessList($fieldSchema, $record) { global $FORM, $TABLE_PREFIX; // load access list $accessList = array(); if (@$FORM['num']) { $query = "SELECT * FROM `{$TABLE_PREFIX}_accesslist` WHERE userNum = '" . mysql_real_escape_string($FORM['num']) . "'"; $result = mysql_query($query) or die("MySQL Error: ". htmlspecialchars(mysql_error()) . "\n"); while ($record = mysql_fetch_assoc($result)) { $accessList[ $record['tableName'] ] = $record; } } // get section list $sectionList = array(); foreach (getSchemaTables() as $tableName) { $schema = loadSchema($tableName); if (@$schema['menuType'] != 'single' && @$schema['menuType'] != 'multi') { continue; } if (@$schema['menuHidden']) { continue; } $thisMenu = array(); $thisMenu['menuName'] = $schema['menuName']; $thisMenu['menuOrder'] = $schema['menuOrder']; $thisMenu['tableName'] = $tableName; $thisMenu['menuType'] = $schema['menuType']; array_push($sectionList, $thisMenu); } uasort($sectionList, '_sortMenusByOrder'); // sort menus by order value // display field $allAccessLevel = @$accessList['all']['accessLevel']; $sectionsDivStyle = ($allAccessLevel != 1) ? "display: none;" : ""; ?>
Section Name Access Max Records
All Sections No Limit
= 9) ? 'style="text-align: center; background-color: #DDD;" disabled="disabled"' : 'style="text-align: center;"'; ?>
Access Levels:
None - Don't allow user to access this section
Regular - User can only access records they have created
Admin - User can access any records in this section
Max Records: Max records user is allowed to create (for regular users only - leave blank for unlimited)
__HTML__; } ?>
     /> /> Single Page