Files
vokspace/actions/edit-folder.php
2026-01-02 21:00:45 +01:00

117 lines
3.9 KiB
PHP

<?php session_start();
$_SESSION["redirect"] = 'edit-folder';
$Benutzername = $_SESSION["Benutzername"];
$Passwort = $_SESSION["Passwort"];
$_SESSION["Benutzername"] = $Benutzername;
$_SESSION["Passwort"] = $Passwort;
$folderTEXT = strip_tags(htmlentities($_POST["folderTEXT"]));
$folderID = $_SESSION["folderID"];
$gesamt_anzahl = $_SESSION["gesamtAnzahl"];
$folderTEXT = str_replace('\'', '&apos;', $folderTEXT);
$folderTEXT = str_replace('\\', '&#92;', $folderTEXT);
$savechange = strip_tags(htmlentities($_GET["savechange"]));
?>
<!DOCTYPE html>
<html>
<head>
<link rel="stylesheet" href="../files/style.css" />
<meta http-equiv="refresh" content="2; URL=../index?folderID=<?php print("$folderID"); ?>">
</head>
<body>
<main>
<div class="middle">
<div class="bar-content">
<div class="bar1 bar"></div>
<div class="bar2 bar"></div>
<div class="bar3 bar"></div>
<div class="bar4 bar"></div>
<div class="bar5 bar"></div>
<div class="bar6 bar"></div>
</div>
</div>
</main>
<?php
require "../files/ezine_db.inc.php";
include "../files/loginscript.inc.php";
include "../files/errorcodesscript.inc.php";
if($LoggedIn == 'true') {
if($savechange == 'publish') {
$conn->query("UPDATE `VokabelBoxVokabeln` SET `Public` = '1' WHERE `ID` = '$folderID' AND `Nutzername` = '$Benutzername'");
$_SESSION["errorCode"] = 'publicFolderSuccess';
print("<meta http-equiv='refresh' content='2; URL=../library'>");
}
else {
if($savechange == 'turnoff-publish') {
$conn->query("UPDATE `VokabelBoxVokabeln` SET `Public` = '0' WHERE `ID` = '$folderID' AND `Nutzername` = '$Benutzername'");
$_SESSION["errorCode"] = 'turnoffPublicFolderSuccess';
print("<meta http-equiv='refresh' content='2; URL=../index?folderID=$folderID'>");
}
else {
if(empty($folderTEXT) || empty($gesamt_anzahl)) {
$_SESSION["errorCode"] = 'generalError';
print("<meta http-equiv='refresh' content='2; URL=../index?folderID=$folderID'>");
}
else {
$sql = "SELECT `Public` FROM `VokabelBoxVokabeln` WHERE `Nutzername` = '$Benutzername' AND `ID` = '$folderID' AND `Sprache1` = '' AND `Sprache2` = ''";
$result_articles = $conn->query($sql);
while ($articleDb = mysqli_fetch_object($result_articles)) {
$Public = $articleDb->Public;
}
$conn->query("DELETE FROM `VokabelBoxVokabeln` WHERE `Nutzername` = '$Benutzername' AND `ID` = '$folderID'");
$conn->query("INSERT INTO `VokabelBoxVokabeln` (`Sprache1`,`Sprache2`,`Nutzername`,`ID`,`Ordner`,`Public`) VALUES ('','','$Benutzername','$folderID','$folderTEXT','$Public')");
$loop = 1;
while($loop <= $gesamt_anzahl) {
${'Vok'.$loop.'_1'} = strip_tags(htmlentities($_POST['Vok'.$loop.'-1']));
${'Vok'.$loop.'_2'} = strip_tags(htmlentities($_POST['Vok'.$loop.'-2']));
${'Vok'.$loop.'_1'} = str_replace('\'', '&apos;', ${'Vok'.$loop.'_1'});
${'Vok'.$loop.'_2'} = str_replace('\'', '&apos;', ${'Vok'.$loop.'_2'});
${'Vok'.$loop.'_1'} = str_replace('\\', '&#92;', ${'Vok'.$loop.'_1'});
${'Vok'.$loop.'_2'} = str_replace('\\', '&#92;', ${'Vok'.$loop.'_2'});
if(${'Vok'.$loop.'_1'} != '' && ${'Vok'.$loop.'_2'} != '') {
$conn->query("INSERT INTO `VokabelBoxVokabeln` (`Sprache1`,`Sprache2`,`Nutzername`,`ID`,`Ordner`,`Public`) VALUES ('${'Vok'.$loop.'_1'}','${'Vok'.$loop.'_2'}','$Benutzername','$folderID','','$Public')");
}
$loop = $loop + 1;
}
$_SESSION["errorCode"] = 'editFolderSuccess';
print("<meta http-equiv='refresh' content='2; URL=../index?folderID=$folderID'>");
}
}
}
}
?>
</body>
</html>