admin.bas

File modules/admin.bas from the latest check-in


     1
     2
     3
     4
     5
     6
     7
     8
     9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    35
    36
    37
    38
    39
    40
    41
    42
    43
    44
    45
    46
    47
    48
    49
    50
    51
    52
    53
    54
    55
    56
    57
    58
    59
    60
    61
    62
    63
    64
    65
    66
    67
    68
    69
    70
    71
    72
    73
    74
    75
    76
    77
    78
    79
    80
    81
    82
    83
    84
    85
    86
    87
    88
    89
    90
    91
    92
    93
    94
    95
    96
    97
    98
    99
   100
   101
   102
   103
   104
   105
   106
   107
   108
   109
   110
   111
   112
   113
   114
   115
   116
   117
   118
   119
   120
   121
   122
   123
   124
   125
   126
   127
   128
   129
   130
   131
   132
   133
   134
   135
   136
   137
   138
   139
   140
   141
   142
   143
   144
   145
   146
   147
   148
   149
   150
   151
   152
   153
   154
   155
   156
   157
   158
   159
   160
   161
   162
   163
   164
   165
   166
   167
   168
   169
   170
   171
   172
   173
   174
   175
   176
   177
   178
   179
   180
   181
   182
   183
   184
   185
   186
   187
   188
   189
   190
   191
   192
   193
   194
   195
   196
   197
   198
   199
   200
   201
   202
   203
   204
   205
   206
   207
   208
   209
   210
   211
   212
   213
   214
   215
   216
   217
   218
   219
   220
   221
   222
   223
   224
   225
   226
   227
   228
   229
   230
   231
   232
   233
   234
   235
   236
   237
   238
   239
   240
   241
   242
   243
   244
   245
   246
   247
   248
   249
   250
   251
   252
   253
   254
   255
   256
   257
   258
   259
   260
   261
   262
   263
   264
   265
   266
   267
   268
   269
   270
   271
   272
   273
   274
   275
   276
   277
   278
   279
   280
   281
   282
   283
   284
   285
   286
   287
   288
   289
   290
   291
   292
   293
   294
   295
   296
   297
   298
   299
   300
   301
   302
   303
   304
   305
   306
   307
   308
   309
   310
   311
   312
   313
   314
   315
   316
   317
   318
   319
   320
   321
   322
   323
   324
   325
   326
   327
   328
   329
   330
   331
   332
   333
   334
   335
   336
   337
   338
   339
   340
   341
   342
   343
   344
   345
   346
   347
   348
   349
   350
   351
   352
   353
   354
   355
   356
   357
   358
   359
   360
   361
   362
   363
   364
   365
   366
   367
   368
   369
   370
   371
   372
   373
   374
   375
   376
   377
   378
   379
   380
   381
   382
   383
   384
   385
   386
   387
   388
   389
   390
   391
   392
   393
   394
   395
   396
   397
   398
   399
   400
   401
   402
   403
   404
   405
   406
   407
   408
   409
   410
   411
   412
   413
   414
   415
   416
   417
   418
   419
   420
   421
   422
   423
   424
   425
   426
   427
   428
   429
   430
   431
   432
   433
   434
   435
   436
   437
   438
   439
   440
   441
   442
   443
#INCLUDE "modules.bi"

CONST AS STRING ModuleName = "admin"

DIM SHARED AdminVars() AS KeyPair

SUB RegisterAdminVar(VarName AS STRING, VarValue AS STRING)
  RegisterVar(AdminVars(), VarName, VarValue)
END SUB

SUB ClearAdminVars()
  ClearVars(AdminVars())
END SUB

SUB LoadAdminPanel()
  'Is the user logged in?
  IF IsAuth() THEN
    DIM AS STRING Section, Action, LastError, ArrayValues()
    Section = ValidateChar(GetURLParam("section", 2))
    IF Section <> "" THEN
      SELECT CASE Section
        CASE "pages"
          DIM sSQL AS STRING, PageDST AS DataSet
          IF VALINT(ReadUserData("user_group")) = ADMIN_GROUP THEN
            DIM AS STRING PageList, PageName, FileName
            Action = ValidateChar(GetURLParam("action", 3))
            IF Action <> "" THEN
              SELECT CASE Action
                CASE "edit"
                  PageName = ValidateChar(GetURLParam("pagename", 4))
                  IF PageName <> "" THEN
                    IF NOT LoadPage(PageName, -1) THEN
                      LastError = Language("error_page_not_exists")
                    END IF
                  END IF
                  SiteTitle = Language("module_admin_pages_editor")
                  RegisterAdminVar("error_message", LastError)
                  SiteContent = ReadTplSnippet("pages-editor")
                CASE "delete"
                  PageName = ValidateChar(GetURLParam("pagename", 4))
                  IF PageName <> "" THEN
                    IF LoadPage(PageName, -1) THEN
                      SiteTitle = Language("module_admin_pages_delete")
                      SiteContent = ReadTplSnippet("pages-delete")
                      IF CLNG(Post("page-delete")) AND ValidateSession(Post("session_token")) THEN
                        sSQL = "DELETE FROM [pages] WHERE [name] = @PageName;"
                        AddParam("@PageName", PageName, PARAM_TYPE_TEXT)
                        ExecuteSql(sSQL)
                        ClearParams()
                        RegisterAdminVar("error_message", Language("success_page_deleted"))
                        SiteContent = ReadTplSnippet("pages-deleted")
                      END IF
                    END IF
                  END IF
                CASE "save"
                  SiteTitle = Language("module_admin_pages_editor")
                  PageName = ValidateChar(Post("page-name"))
                  IF PageName = "" THEN
                    'Page name field empty
                    IF Post("page-title") <> "" THEN
                      'Create a new page name based on the title
                      PageName = CreatePermalink(Post("page-title"))
                    ELSE
                      'We cannot create a page without a name, fail the attempt
                      LastError = Language("error_page_name_undefined")
                      RegisterAdminVar("error_message", LastError)
                      SiteContent = ReadTplSnippet("pages-editor")
                    END IF
                  END IF
                  IF PageName <> "" AND ValidateSession(Post("session_token")) THEN
                    'Hopefully we have a page name now
                    DIM objPage AS JSON_Object, DateFormat AS STRING, PageStatus AS STRING
                    IF LoadPage(PageName, -1) THEN
                      'Edititng an existing page
                      sSQL = "UPDATE [pages] SET [published] = @PagePublished, [content] = @PageContent WHERE [name] = @PageName;"
                    ELSE
                      'Creating a new page
                      sSQL = "INSERT INTO [pages] ([name], [published], [content]) VALUES (@PageName, @PagePublished, @PageContent);"
                    END IF
                    AddParam("@PageName", PageName, PARAM_TYPE_TEXT)
                    PageStatus = Post("page-status")
                    IF PageStatus = "" THEN
                      PageStatus = "0"
                    END IF
                    AddParam("@PagePublished", PageStatus, PARAM_TYPE_INTEGER)
                    JSON_FillObject(objPage, "page_title", JSON_GenerateString(Post("page-title")))
                    DateFormat = Post("page-created-date")
                    IF IsDateFormat(DateFormat) THEN
                      JSON_FillObject(objPage, "page_created_date", JSON_GenerateString(DateFormat))
                    ELSE
                      JSON_FillObject(objPage, "page_created_date", JSON_GenerateString(SystemDate() + "T" + SystemTime()))
                    END IF
                    DateFormat = Post("page-lastmod-date")
                    IF IsDateFormat(DateFormat) THEN
                      JSON_FillObject(objPage, "page_lastmod_date", JSON_GenerateString(DateFormat))
                    ELSE
                      JSON_FillObject(objPage, "page_lastmod_date", JSON_GenerateString(SystemDate() + "T" + SystemTime()))
                    END IF
                    IF JSON_GetType(Post("page-encode-content")) = JSON_TYPE_BOOLEAN THEN
                      JSON_FillObject(objPage, "page_encode_content", Post("page-encode-content"))
                    ELSE
                      JSON_FillObject(objPage, "page_encode_content", "false")
                    END IF
                    IF CBOOL(Post("page-encode-content")) THEN
                      JSON_FillObject(objPage, "page_content", JSON_GenerateString(HTMLEncode(Post("page-content"))))
                    ELSE
                      JSON_FillObject(objPage, "page_content", JSON_GenerateString(Post("page-content")))
                    END IF
                    AddParam("@PageContent", objPage.RawContent, PARAM_TYPE_TEXT)
                    ExecuteSql(sSQL)
                    ClearParams()
                    IF LoadPage(PageName, -1) THEN
                      RegisterAdminVar("error_message", Language("success_page_saved"))
                      SiteContent = ReadTplSnippet("pages-saved")
                    END IF
                  END IF
                CASE "preview"
                  PageName = ValidateChar(GetURLParam("pagename", 4))
                  IF PageName <> "" AND LoadPage(PageName) THEN
                    SiteTitle = Language("module_admin_pages_view")
                    SiteContent = ReadTplSnippet("page")
                  END IF
                CASE "page"
                  DIM CurPage AS LONG = VALINT(GetURLParam("page", 4))
                  SiteTitle = Language("module_admin_page_list")
                  ListPages("pages-list-body", -1, CurPage)
                  SiteTitle = Language("module_admin_page_list")
                  SiteContent = ReadTplSnippet("pages-list")
              END SELECT
            ELSE
              SiteTitle = Language("module_admin_page_list")
              ListPages("pages-list-body", -1)
              SiteTitle = Language("module_admin_page_list")
              SiteContent = ReadTplSnippet("pages-list")
            END IF
          ELSE
            SiteContent = "403"
          END IF
        CASE "settings"
          IF VALINT(ReadUserData("user_group")) = ADMIN_GROUP THEN
            Action = ValidateChar(GetURLParam("action", 3))
            IF Action <> "" THEN
              SELECT CASE Action
                CASE "edit"
                  SiteTitle = Language("module_admin_settings_editor")
                  SiteContent = ReadTplSnippet("settings-editor")
                  IF ValidateSession(Post("session_token")) THEN
                    DIM objSettings AS JSON_Object
                    JSON_FillObject(objSettings, "site_title", JSON_GenerateString(Post("site_title")))
                    JSON_FillObject(objSettings, "site_description", JSON_GenerateString(Post("site_description")))
                    JSON_FillObject(objSettings, "site_keywords", JSON_GenerateString(""))
                    SELECT CASE Post("site_protocol")
                      CASE "http://", "https://"
                        JSON_FillObject(objSettings, "site_protocol", JSON_GenerateString(Post("site_protocol")))
                      CASE ELSE
                        'Default protocol is http://
                        JSON_FillObject(objSettings, "site_protocol", JSON_GenerateString("http://"))
                    END SELECT
                    JSON_FillObject(objSettings, "site_domain", JSON_GenerateString(Post("site_domain")))
                    JSON_FillObject(objSettings, "site_url", JSON_GenerateString(Post("site_url")))
                    JSON_FillObject(objSettings, "site_admin", JSON_GenerateString(Post("site_admin")))
                    JSON_FillObject(objSettings, "site_email", JSON_GenerateString(Post("site_email")))
                    JSON_FillObject(objSettings, "site_encoding", JSON_GenerateString(Post("site_encoding")))
                    JSON_FillObject(objSettings, "site_template", JSON_GenerateString(Post("site_template")))
                    JSON_FillObject(objSettings, "site_language", JSON_GenerateString(Post("site_language")))
                    IF JSON_GetType(Post("site_timezone")) = JSON_TYPE_NUMERIC THEN
                      JSON_FillObject(objSettings, "site_timezone", Post("site_timezone"))
                    ELSE
                      JSON_FillObject(objSettings, "site_timezone", "0")
                    END IF
                    JSON_FillObject(objSettings, "site_index_type", JSON_GenerateString(Post("site_index_type")))
                    JSON_FillObject(objSettings, "site_index_page", JSON_GenerateString(Post("site_index_page")))
                    JSON_FillObject(objSettings, "site_index_module", JSON_GenerateString(Post("site_index_module")))
                    IF JSON_GetType(Post("site_fancy_url")) = JSON_TYPE_BOOLEAN THEN
                      JSON_FillObject(objSettings, "site_fancy_url", Post("site_fancy_url"))
                    ELSE
                      JSON_FillObject(objSettings, "site_fancy_url", "false")
                    END IF
                    JSON_FillObject(objSettings, "site_fancy_url_extension", JSON_GenerateString(Post("site_fancy_url_extension")))
                    JSON_FillObject(objSettings, "site_data_base", JSON_GenerateString(Post("site_data_base")))
                    JSON_FillObject(objSettings, "site_cache_mode", JSON_GenerateString(Post("site_cache_mode")))
                    JSON_FillObject(objSettings, "site_uploads_path", JSON_GenerateString(Post("site_uploads_path")))
                    JSON_FillObject(objSettings, "site_smtp_server", JSON_GenerateString(Post("site_smtp_server")))
                    'Save new settings on disk
                    WriteFile(DataPath + "settings.json", objSettings.RawContent)
                    LoadSettings()
                    LastError = Language("success_settings_saved")
                  END IF
                  RegisterAdminVar("error_message", LastError)
                  SiteContent = ReadTplSnippet("settings-editor")
              END SELECT
            ELSE
              SiteTitle = Language("module_admin_settings")
              SiteContent = ReadTplSnippet("settings-display")
            END IF
          ELSE
            SiteContent = "403"
          END IF
        CASE "templates"
          IF VALINT(ReadUserData("user_group")) = ADMIN_GROUP THEN
            DIM AS STRING TplPath, TplList, TplName, ListBody
            TplPath = DataPath + "templates" + PATH_DELIMITER
            TplName = ValidateChar(GetURLParam("template", 3))
            IF TplName <> "" THEN
              DIM AS STRING ModList, ModName
              ModName = ValidateChar(GetURLParam("modulename", 4))
              IF ModName <> "" THEN
                DIM objSnippets AS JSON_Object, ArrayTmpSnippets() AS JSON_Member
                DIM AS STRING SecName, SecList, FilePath
                DIM AS JSON_Member NewSnippet, EditedSnippet
                'Load template snippets
                IF ModName <> "main" THEN
                  FilePath = TplPath + TplName + PATH_DELIMITER + "modules" + PATH_DELIMITER + ModName + ".json"
                ELSE
                  FilePath = TplPath + TplName + PATH_DELIMITER + ModName + ".json"
                END IF
                objSnippets.RawContent = ReadFile(FilePath)
                IF objSnippets.RawContent <> "" THEN
                  JSON_CountMembers(objSnippets)
                END IF
                IF objSnippets.MemberCount THEN
                  REDIM ArrayTmpSnippets(objSnippets.MemberCount - 1)
                  JSON_ParseObject(objSnippets, ArrayTmpSnippets())
                END IF
                SecName = ValidateChar(GetURLParam("snippet", 5))
                IF SecName <> "" THEN
                  IF UBOUND(ArrayTmpSnippets) >= 0 THEN
                    SiteTitle = Language("module_admin_snippet_editor")
                    IF Post("snippet-content") <> "" AND ValidateSession(Post("session_token")) THEN
                      WITH EditedSnippet
                        .Name = SecName
                        .Value.RawContent = JSON_GenerateString(Post("snippet-content"))
                        .Value.ValueType = JSON_GetType(.Value.RawContent)
                      END WITH
                      JSON_UpdateMember(objSnippets, EditedSnippet)
                      WriteFile(FilePath, objSnippets.RawContent)
                      JSON_ParseObject(objSnippets, ArrayTmpSnippets())
                      LastError = Language("success_snippet_edited")
                    END IF
                    FOR i AS ULONG = 0 TO UBOUND(ArrayTmpSnippets)
                      WITH ArrayTmpSnippets(i)
                        IF .Name = SecName THEN
                          RegisterAdminVar("snippet_content", HTMLEncode(JSON_ParseString(.Value.RawContent)))
                          EXIT FOR
                        END IF
                      END WITH
                    NEXT
                    RegisterURLVar("templatename", TplName)
                    RegisterURLVar("modulename", ModName)
                    RegisterURLVar("snippetname", SecName)
                    RegisterAdminVar("template_name", TplName)
                    RegisterAdminVar("module_name", ModName)
                    RegisterAdminVar("snippet_name", SecName)
                    RegisterAdminVar("error_message", LastError)
                    SiteContent = ReadTplSnippet("template-snippet-editor")
                  END IF
                ELSE
                  'Show Snippet List
                  DIM IsRepeated AS LONG
                  SiteTitle = Language("module_admin_snippet_list")
                  'Let's check if the snippet name is already in use
                  IF Post("snippet-name") <> "" THEN
                    IF UBOUND(ArrayTmpSnippets) >= 0 THEN 
                      FOR i AS ULONG = 0 TO UBOUND(ArrayTmpSnippets)
                        IF Post("snippet-name") = ArrayTmpSnippets(i).Name THEN
                          IsRepeated = -1
                          EXIT FOR
                        END IF
                      NEXT
                    END IF
                    IF NOT IsRepeated THEN
                      WITH NewSnippet
                        .Name = Post("snippet-name")
                        .Value.RawContent = JSON_GenerateString("")
                        .Value.ValueType = JSON_GetType(.Value.RawContent)
                      END WITH
                      JSON_AddMember(objSnippets, NewSnippet, objSnippets.MemberCount)
                      WriteFile(FilePath, objSnippets.RawContent)
                      REDIM ArrayTmpSnippets(objSnippets.MemberCount)
                      JSON_ParseObject(objSnippets, ArrayTmpSnippets())
                      LastError = Language("success_snippet_added")
                    ELSE
                      LastError = Language("error_snippet_name_repeated")
                    END IF
                  END IF
                  IF UBOUND(ArrayTmpSnippets) >= 0 THEN
                    FOR i AS ULONG = 0 TO UBOUND(ArrayTmpSnippets)
                      WITH ArrayTmpSnippets(i)
                        SecName = JSON_ParseString(.Name)
                        RegisterURLVar("templatename", TplName)
                        RegisterURLVar("modulename", ModName)
                        RegisterURLVar("snippetname", SecName)
                        RegisterAdminVar("snippet_name", SecName)
                        ListBody = ReadTplSnippet("template-snippet-list-body")
                        SecList += ListBody
                        ClearAdminVars()
                        ClearURLVars()
                      END WITH
                    NEXT
                  END IF
                  RegisterURLVar("templatename", TplName)
                  RegisterURLVar("modulename", ModName)
                  RegisterAdminVar("template_name", TplName)
                  RegisterAdminVar("module_name", ModName)
                  RegisterAdminVar("snippet_list", SecList)
                  RegisterAdminVar("error_message", LastError)
                  SiteContent = ReadTplSnippet("template-snippet-list")
                END IF
              ELSE
                'Show Module List
                SiteTitle = Language("module_admin_module_list")
                'Main module is always at template root and is called main.json
                ModName = "main"
                RegisterURLVar("templatename", TplName)
                RegisterURLVar("modulename", ModName)
                RegisterAdminVar("template_module_name", PATH_DELIMITER + ModName)
                ListBody = ReadTplSnippet("template-module-list-body")
                ModList = ListBody
                ClearAdminVars()
                ClearURLVars()
                'Get registered modules
                DIM ModuleCount AS LONG, CompiledModules() AS IguanaModule
                ListCompiledModules(CompiledModules())
                ModuleCount = UBOUND(CompiledModules)
                IF ModuleCount >= 0 THEN
                  FOR i AS LONG = 0 TO ModuleCount
                    'Every module must have his own template file
                    ModName = CompiledModules(i).Name
                    IF FileExists(TplPath + TplName + PATH_DELIMITER + "modules" + PATH_DELIMITER + ModName + ".json") THEN
                      RegisterURLVar("templatename", TplName)
                      RegisterURLVar("modulename", ModName)
                      RegisterAdminVar("template_module_name", PATH_DELIMITER + "modules" + PATH_DELIMITER + ModName)
                      ListBody = ReadTplSnippet("template-module-list-body")
                      ModList += ListBody
                      ClearAdminVars()
                      ClearURLVars()
                    END IF
                  NEXT
                END IF
                RegisterAdminVar("template_name", TplName)
                RegisterAdminVar("template_module_list", ModList)
                SiteContent = ReadTplSnippet("template-module-list")
              END IF
            ELSE
              'Show Template List
              SiteTitle = Language("module_admin_templates_list")
              TplName = DIR(TplPath + "*", 16)
              IF TplName <> "" THEN
                DO WHILE TplName <> ""
                  IF TplName <> "." AND TplName <> ".." THEN
                    RegisterAdminVar("template_name", TplName)
                    RegisterUrlVar("templatename", TplName)
                    ListBody = ReadTplSnippet("template-list-body")
                    TplList += ListBody + LINE_ENDING
                    ClearAdminVars()
                    ClearURLVars()
                  END IF
                  TplName = DIR()
                LOOP
              END IF
              RegisterAdminVar("template_list", TplList)
              SiteContent = ReadTplSnippet("template-list")
            END IF
          ELSE
            SiteContent = "403"
          END IF
        CASE "languages"
          IF VALINT(ReadUserData("user_group")) = ADMIN_GROUP THEN
          ELSE
            SiteContent = "403"
          END IF
        CASE "menus"
          IF VALINT(ReadUserData("user_group")) = ADMIN_GROUP THEN
          ELSE
            SiteContent = "403"
          END IF
        CASE "captcha"
          IF VALINT(ReadUserData("user_group")) = ADMIN_GROUP THEN
          ELSE
            SiteContent = "403"
          END IF
        CASE "bbcodes"
          IF VALINT(ReadUserData("user_group")) = ADMIN_GROUP THEN
          ELSE
            SiteContent = "403"
          END IF
        CASE "modules"
          DIM ModuleRequest AS STRING = ValidateChar(GetURLParam("modulename", 3))
          IF ModuleRequest <> "" THEN
            LoadAdminModule(ModuleRequest)
          ELSE
            DIM CompiledModules() AS IguanaModule
            DIM AS STRING ModName, ModList
            DIM AS LONG ModuleCount
            'Get registered modules
            ListCompiledModules(CompiledModules())
            ModuleCount = UBOUND(CompiledModules)
            IF ModuleCount >= 0 THEN
              FOR i AS LONG = 0 TO ModuleCount
                IF CompiledModules(i).ListedForAdmin THEN
                  ModName = LCASE(CompiledModules(i).Name)
                  LoadLanguage(ModName)
                  RegisterURLVar("modulename", ModName)
                  RegisterAdminVar("module_name", Language("module_" + ModName + "_module_title"))
                  ModList += ReadTplSnippet("module-list-body")
                  ClearAdminVars()
                  ClearURLVars()
                END IF
              NEXT
            ELSE
              LastError = Language("error_module_list_empty")
            END IF
            RegisterAdminVar("module_list", ModList)
            RegisterAdminVar("error_message", LastError)
            SiteTitle = Language("module_admin_module_list")
            SiteContent = ReadTplSnippet("module-list")
          END IF
      END SELECT
    ELSE
      SiteTitle = Language("module_admin_control_panel")
      SiteContent = ReadTplSnippet("panel")
    END IF
  ELSE
    SiteContent = "403"
  END IF
END SUB

FUNCTION AdminParser(Key AS STRING) AS STRING
  DIM Result AS STRING = GetVarValue(AdminVars(), Key)
  AdminParser = Result
END FUNCTION

DIM CurrentModule AS IguanaModule

WITH CurrentModule
  .Name = ModuleName
  .ListedForAdmin = 0
  .HasOwnTemplate = -1
  .MainLoader = CINT(ProcPtr(LoadAdminPanel))
  .VarsFunction = CINT(ProcPtr(AdminParser))
END WITH

RegisterModule(CurrentModule)