misc($sql); $sql = sprintf("UPDATE %sCubeCart_docs SET doc_terms = 1 WHERE doc_id = %d;", $glob['dbprefix'], $_POST['termsid']); $db->misc($sql); } ## delete document if (isset($_GET['dir'])) { switch ($_GET['dir']) { case 'up': $query = sprintf("UPDATE %sCubeCart_docs SET doc_order = '%d' WHERE doc_order = '%d'", $glob['dbprefix'], $_GET['moveto']+1, $_GET['moveto']); $db->misc($query); $query = sprintf("UPDATE %sCubeCart_docs SET doc_order = '%d' WHERE doc_id = '%d'", $glob['dbprefix'], $_GET['moveto'], $_GET['id']); $db->misc($query); break; case 'down': case 'dn': $query = sprintf("UPDATE %sCubeCart_docs SET doc_order = '%d' WHERE doc_order = '%d'", $glob['dbprefix'], $_GET['moveto']-1, $_GET['moveto']); $db->misc($query); $query = sprintf("UPDATE %sCubeCart_docs SET doc_order = '%d' WHERE doc_id = '%d'", $glob['dbprefix'], $_GET['moveto'], $_GET['id']); $db->misc($query); break; case 'reset': $query = sprintf("UPDATE %sCubeCart_docs SET doc_order = doc_id WHERE 1", $glob['dbprefix']); $db->misc($query); break; } $cache = new cache(); $cache->clearCache(); } else if (isset($_GET['delete']) && $_GET['delete']>0) { $where = "doc_id = ".$db->mySQLSafe($_GET['delete']); $delete = $db->delete($glob['dbprefix']."CubeCart_docs", $where, ""); if ($delete) { $msg = "

".$lang['admin']['docs_delete_success']."

"; } else { $msg = "

".$lang['admin']['docs_delete_fail']."

"; } $cache = new cache(); $cache->clearCache(); } else if (isset($_POST['docId'])) { $record['doc_name'] = $db->mySQLSafe($_POST['doc_name']); $record['doc_url'] = $db->mySQLSafe($_POST['doc_url']); $record['doc_url_openin'] = $db->mySQLSafe($_POST['doc_url_openin']); ## Fix for bug 315 $fckEditor = (detectSSL() && !$config['force_ssl'] && $glob['rootRel'] != '/') ? str_replace($config['rootRel_SSL'], $glob['rootRel'], $_POST['FCKeditor']) : $_POST['FCKeditor']; $record['doc_content'] = $db->mySQLSafe($fckEditor); if ($config['seftags']) { $record['doc_metatitle'] = $db->mySQLSafe($_POST['doc_metatitle']); $record['doc_metadesc'] = $db->mySQLSafe($_POST['doc_metadesc']); $record['doc_metakeywords'] = $db->mySQLSafe($_POST['doc_metakeywords']); } if (is_numeric($_POST['docId']) && !is_null($_POST['docId'])) { $update = $db->update($glob['dbprefix'].'CubeCart_docs', $record, array('doc_id' => $_POST['docId'])); if ($update) { $msg = '

\''.$_POST['doc_name'].'\' '.$lang['admin']['docs_update_success'].'

'; } else { $msg = '

\''.$_POST['doc_name'].'\' '.$lang['admin']['docs_update_fail'].'

'; } } else { $insert = $db->insert($glob['dbprefix'].'CubeCart_docs', $record); if ($insert) { $msg = '

\''.$_POST['doc_name'].'\' '.$lang['admin']['docs_add_success'].'

'; $db->misc("UPDATE ".$glob['dbprefix']."CubeCart_docs SET doc_order = doc_id WHERE doc_id = ".$db->insertid()); } else { $msg = '

'.$lang['admin']['docs_add_fail'].'

'; } } $cache = new cache(); $cache->clearCache(); } ## Retrieve current documents if (!isset($_GET['mode'])) { ## Create the SQL query if (isset($_GET['edit']) && $_GET['edit']>0) { $query = sprintf("SELECT * FROM ".$glob['dbprefix']."CubeCart_docs WHERE doc_id = %s", $db->mySQLSafe($_GET['edit'])); } else { $query = "SELECT * FROM ".$glob['dbprefix']."CubeCart_docs ORDER BY doc_order ASC"; } $results = $db->select($query); } require($glob['adminFolder'].CC_DS."includes".CC_DS."header.inc.php"); echo msg($msg); ?>

'; } ?>
0) || (isset($_GET['mode']) && $_GET['mode']=="new")){ ?>

BasePath = $GLOBALS['rootRel'].$glob['adminFolder'].'/includes/rte/'; $oFCKeditor->Value = (isset($results[0]['doc_content'])) ? (!get_magic_quotes_gpc ()) ? stripslashes($results[0]['doc_content']) : $results[0]['doc_content'] : ''; if ($config['richTextEditor'] == 0) { $oFCKeditor->off = true; } $oFCKeditor->Create(); ?>

 

 
/> " target="_blank" class="txtLink"> 0) { ?> '; } ?> '; } ?> '; } ?>