aboutsummaryrefslogtreecommitdiffstats
path: root/admin
diff options
context:
space:
mode:
authorJim Hu <jimhu@users.sourceforge.net>2008-12-11 21:54:52 +0000
committerJim Hu <jimhu@users.sourceforge.net>2008-12-11 21:54:52 +0000
commit9c705dc135dff435c0cb59dec4ebf3d0d1620d2c (patch)
treea75bce0639c690c95e6d338727d75d1b4c2ad107 /admin
parent1c7998281489f86ca209237b8f45e067fa9a674d (diff)
downloadphpicalendar-9c705dc135dff435c0cb59dec4ebf3d0d1620d2c.tar.gz
phpicalendar-9c705dc135dff435c0cb59dec4ebf3d0d1620d2c.tar.bz2
phpicalendar-9c705dc135dff435c0cb59dec4ebf3d0d1620d2c.zip
update lots of files
Diffstat (limited to 'admin')
-rw-r--r--admin/index.php89
1 files changed, 45 insertions, 44 deletions
diff --git a/admin/index.php b/admin/index.php
index 11108cc..ef85465 100644
--- a/admin/index.php
+++ b/admin/index.php
@@ -5,14 +5,14 @@ require_once(BASE.'functions/ical_parser.php');
require_once(BASE.'functions/template.php');
header("Content-Type: text/html; charset=$charset");
-if (empty($default_path)) {
+if (empty($phpiCal_config->default_path)) {
if (isset($_SERVER['HTTPS']) || strtolower($_SERVER['HTTPS']) == 'on' ) {
$default_path = 'https://'.$_SERVER['SERVER_NAME'].':'.$_SERVER['SERVER_PORT'].substr($_SERVER['PHP_SELF'],0,strpos($_SERVER['PHP_SELF'],'/admin/'));
} else {
$default_path = 'http://'.$_SERVER['SERVER_NAME'].':'.$_SERVER['SERVER_PORT'].substr($_SERVER['PHP_SELF'],0,strpos($_SERVER['PHP_SELF'],'/admin/'));
}
}
-if ($allow_admin != 'yes') {
+if ($phpiCal_config->allow_admin != 'yes') {
exit(error('The administration menu has been turned off.', $cal, '../'));
}
@@ -48,74 +48,75 @@ if ($auth_method == 'server') {
$login_good = ($is_loged_in) ? '' : 'oops';
$login_bad = ((!$is_loged_in) && ($_GET['action'] == 'login')) ? 'oops' : '';
-
-// Delete a calendar
-// Not at all secure - need to strip out path info if used by users besides admin in the future
-$delete_msg = '';
-if ($_POST['action'] == 'delete') {
- foreach ($delete_calendar as $filename) {
- if (!delete_cal(urldecode($filename))) {
- $delete_msg = $delete_msg . '<font color="red">' . $lang['l_delete_error'] . ' ' . urldecode(substr($filename,0,-4)) . '</font><br />';
- } else {
- $delete_msg = $delete_msg . '<font color="green">' . urldecode(substr($filename,0,-4)) . ' ' . $lang['l_delete_success'] . '</font><br />';
+if(is_loggedin()){
+ // Delete a calendar
+ // Not at all secure - need to strip out path info if used by users besides admin in the future
+ $delete_msg = '';
+ if ($_POST['action'] == 'delete') {
+ foreach ($delete_calendar as $filename) {
+ if (!delete_cal(urldecode($filename))) {
+ $delete_msg = $delete_msg . '<font color="red">' . $lang['l_delete_error'] . ' ' . urldecode(substr($filename,0,-4)) . '</font><br />';
+ } else {
+ $delete_msg = $delete_msg . '<font color="green">' . urldecode(substr($filename,0,-4)) . ' ' . $lang['l_delete_success'] . '</font><br />';
+ }
}
}
-}
-
-// Add or Update a calendar
-$addupdate_msg = '';
-if ((isset($_POST['action'])) && ($_POST['action'] == 'addupdate')) {
- for ($filenumber = 1; $filenumber < 6; $filenumber++) {
- $file = $_FILES['calfile'];
- $addupdate_success = FALSE;
-
- if (!is_uploaded_file_v4($file['tmp_name'][$filenumber])) {
- $upload_error = get_upload_error($file['error'][$filenumber]);
- } elseif (!is_uploaded_ics($file['name'][$filenumber])) {
- $upload_error = $upload_error_type_lang;
- } elseif (!copy_cal($file['tmp_name'][$filenumber], $file['name'][$filenumber])) {
- $upload_error = $copy_error_lang . " " . $file['tmp_name'][$filenumber] . " - " . $calendar_path . "/" . $file['name'][$filenumber];
- } else {
- $addupdate_success = TRUE;
- }
-
- if ($addupdate_success == TRUE) {
- $addupdate_msg = $addupdate_msg . '<font color="green">'.$lang['l_cal_file'].' #'.$filenumber.': '.$lang['l_action_success'].'</font><br />';
- } else {
- $addupdate_msg = $addupdate_msg . '<font color="red">'.$lang['l_cal_file'].' #'.$filenumber.': '.$lang['l_upload_error'].'</font><br />';
+
+ // Add or Update a calendar
+ $addupdate_msg = '';
+ if ((isset($_POST['action'])) && ($_POST['action'] == 'addupdate')) {
+ for ($filenumber = 1; $filenumber < 6; $filenumber++) {
+ $file = $_FILES['calfile'];
+ $addupdate_success = FALSE;
+
+ if (!is_uploaded_file_v4($file['tmp_name'][$filenumber])) {
+ $upload_error = get_upload_error($file['error'][$filenumber]);
+ } elseif (!is_uploaded_ics($file['name'][$filenumber])) {
+ $upload_error = $upload_error_type_lang;
+ } elseif (!copy_cal($file['tmp_name'][$filenumber], $file['name'][$filenumber])) {
+ $upload_error = $copy_error_lang . " " . $file['tmp_name'][$filenumber] . " - " . $calendar_path . "/" . $file['name'][$filenumber];
+ } else {
+ $addupdate_success = TRUE;
+ }
+
+ if ($addupdate_success == TRUE) {
+ $addupdate_msg = $addupdate_msg . '<font color="green">'.$lang['l_cal_file'].' #'.$filenumber.': '.$lang['l_action_success'].'</font><br />';
+ } else {
+ $addupdate_msg = $addupdate_msg . '<font color="red">'.$lang['l_cal_file'].' #'.$filenumber.': '.$lang['l_upload_error'].'</font><br />';
+ }
}
}
}
$calendar_name = $lang['l_admin_header'];
-$page = new Page(BASE.'templates/'.$template.'/admin.tpl');
+$page = new Page(BASE.'templates/'.$phpiCal_config->template.'/admin.tpl');
$page->replace_files(array(
- 'header' => BASE.'templates/'.$template.'/header.tpl',
- 'footer' => BASE.'templates/'.$template.'/footer.tpl'
+ 'header' => BASE.'templates/'.$phpiCal_config->template.'/header.tpl',
+ 'footer' => BASE.'templates/'.$phpiCal_config->template.'/footer.tpl'
));
$page->replace_tags(array(
- 'version' => $phpicalendar_version,
+ 'version' => $phpiCal_config->phpicalendar_version,
'event_js' => '',
- 'charset' => $charset,
- 'default_path' => $default_path.'/',
- 'template' => $template,
+ 'charset' => $phpiCal_config->charset,
+ 'default_path' => "../".$phpiCal_config->default_path,
+ 'template' => $phpiCal_config->template,
'cal' => $cal,
'getdate' => $getdate,
'calendar_name' => $calendar_name,
'display_date' => $display_date,
'current_view' => $current_view,
'sidebar_date' => $sidebar_date,
- 'rss_powered' => $rss_powered,
+ 'rss_powered' => $phpiCal_config->rss_powered,
'rss_available' => '',
'rss_valid' => '',
'show_search' => '',
'login_error' => $login_bad,
'display_login' => $login_good,
'delete_msg' => $delete_msg,
- 'addupdate_msg' => $addupdate_msg,
+ 'addupdate_msg' => $addupdate_msg,
'l_day' => $lang['l_day'],
'l_week' => $lang['l_week'],
'l_month' => $lang['l_month'],

© 2014-2024 Faster IT GmbH | imprint | privacy policy