99/binder_editor.php at master · PinkWrite/99 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
<?php

// Require the configuration before any PHP code as the configuration controls error reporting
require('./pw99-config.php');

// A settings page requires form functions
require_once('./includes/form_functions.inc.php');


// Include the header file
$active_binder = 'active';
$active_writs = '';
$active_blocks = '';
$active_roll = '';
$active_locker = '';
$active_admin = '';
$active_editor = 'activedash';
$active_observer = '';
$active_dash = '';
$page_title = "Editor :: $siteTitle";
include('./includes/header.html');

// Logged in or not?
if (isset($_SESSION['user_id'])) {
	// Okay to view this page
	$userid = $_SESSION['user_id'];
	$q = "SELECT name, username, email, blocks, level, editor FROM users WHERE id='$userid'";
	$r = mysqli_query ($dbc, $q);
	$row = mysqli_fetch_array($r, MYSQLI_NUM);
	$u_name = "$row[0]";
	$u_usrn = "$row[1]";
	$u_email = "$row[2]";
	$u_class = "$row[3]";
	$u_level = "$row[4]";
	$u_editor = "$row[5]";

	if ($_SESSION['user_is_admin'] == true) {
		$usr_type = "Admin";
	} elseif ($_SESSION['user_is_supervisor'] == true) {
		$usr_type = "Supervisor";
	} elseif ($_SESSION['user_is_editor'] == true) {
		$usr_type = "Editor";
	} elseif ($_SESSION['user_is_observer'] == true) {
		header("Location: observer.php");
		exit(); // Quit the script
	} elseif ($_SESSION['user_is_writer'] == true) {
	 $usr_type = "Writer";
 		header("Location: " . PW99_HOME);
 		exit(); // Quit the script
	}

	// Dashboard
	$dashgreeting = "Memos for $u_name";
	include('./inserts/dash_editor.ins.php');

} else {
	header("Location: " . PW99_HOME);
	exit(); // Quit the script
}

// Heading
echo '<h2 class="lt">Memos</h2>';

// Note table
if (isset($_GET['w'])) {
	if (filter_var($_GET['w'], FILTER_VALIDATE_INT, array('min_range' => 1))) {
		$writer_id = preg_replace("/[^0-9]/","", $_GET['w']);
		$where_am_i = "binder_editor.php?w=$writer_id";
	}
} elseif (isset($_GET['b'])) {
	if (filter_var($_GET['b'], FILTER_VALIDATE_INT, array('min_range' => 1))) {
		$block = preg_replace("/[^0-9]/","", $_GET['b']);
		$where_am_i = "binder_editor.php?b=$block";
	}
} elseif (isset($_GET['m'])) {
	if (filter_var($_GET['m'], FILTER_VALIDATE_INT, array('min_range' => 1))) {
		$editor_main_block = (preg_replace("/[^0-9]/","", $_GET['m']));
		$where_am_i = "binder_editor.php?m=$editor_main_block";
	}
} elseif (isset($_GET['v'])) {
	if (filter_var($_GET['v'], FILTER_VALIDATE_INT, array('min_range' => 1))) {
		$editor_all_notes = (preg_replace("/[^0-9]/","", $_GET['v']));
		$where_am_i = "binder_editor.php?v=$editor_all_notes";
	}
} else {
	$where_am_i = "binder_editor.php";
}
include('inserts/list_notes_editor.ins.php');

// Include the footer file to complete the template
require('./includes/footer.html');
?>