'
. (!empty($prefills[$language])? $prefills[$language]['question'] : '')
. '';
$form_answers[] = '';
}
return table(
array_merge(array(''), $languages),
array($form_questions, $form_answers),
false);
}
function admin_faq() {
$languages = sql_select("SELECT DISTINCT `Sprache` FROM `FAQ`");
$languages = array_map('array_shift', $languages);
if (!isset ($_REQUEST['action'])) {
$faqs = array();
foreach ($languages as $language) {
$lang_html .= '| ' . $language . " | \n";
$langfaqs = sql_select("SELECT `QID`, `Frage`, `Antwort` FROM `FAQ` WHERE `Sprache` = '" . sql_escape($language) . "'");
foreach ($langfaqs as $langfaq) {
if (!isset($faqs[$langfaq['QID']]))
$faqs[$langfaq['QID']] = array();
$faqs[$langfaq['QID']][$language] = sprintf('- %s
- %s
', $langfaq['Frage'], $langfaq['Antwort']);
$faqs[$langfaq['QID']]['edit'] = sprintf('Edit', page_link_to('admin_faq'), $langfaq['QID']);
}
}
$faqs_html = table(array_merge(array_combine($languages, $languages), array('edit' => '')), $faqs);
return template_render('../templates/admin_faq.html', array (
'link' => page_link_to("admin_faq"),
'faqs' => $faqs_html,
'new_form' => admin_faq_create_edit_table($languages)
));
} else {
switch ($_REQUEST['action']) {
case 'create' :
case 'save' :
if ($_REQUEST['action'] == 'create') {
sql_query("START TRANSACTION");
$qid = sql_select("SELECT MAX(`QID`)+1 AS QID FROM `FAQ`");
$qid = $qid[0]['QID'];
}
else {
if (isset ($_REQUEST['id']) && preg_match("/^[0-9]{1,11}$/", $_REQUEST['id']))
$qid = $_REQUEST['id'];
else
return error("Incomplete call, missing FAQ ID.", true);
$faq = sql_select("SELECT `QID` FROM `FAQ` WHERE `QID`=" . sql_escape($qid));
if (count($faq) == 0)
return error("No FAQ found.", true);
}
$values = array();
foreach ($_POST['question'] as $lang => $question) {
if (!in_array($lang, $languages))
continue;
if (empty($question))
sql_query("DELETE IGNORE FROM `FAQ` WHERE `QID` = $qid AND `Sprache` = '" . sql_escape($lang) . "'");
else {
$question = strip_item($question);
$answer = strip_item($_POST['answer'][$lang]);
$values[] = "('" . sql_escape($lang) . "', '" . sql_escape($question) . "', '" . sql_escape($answer) . "', $qid)";
}
}
if (!empty($values))
sql_query("REPLACE INTO `FAQ` (`Sprache`, `Frage`, `Antwort`, `QID`) VALUES " . implode(', ', $values));
sql_query("COMMIT");
header("Location: " . page_link_to("admin_faq"));
break;
case 'edit' :
if (isset ($_REQUEST['id']) && preg_match("/^[0-9]{1,11}$/", $_REQUEST['id']))
$id = $_REQUEST['id'];
else
return error("Incomplete call, missing FAQ ID.", true);
$faq = sql_select("SELECT `Sprache`, `Frage`, `Antwort` FROM `FAQ` WHERE `QID`=" . sql_escape($id));
if (count($faq) > 0) {
$prefills = array();
foreach ($faq as $row) {
$prefills[$row['Sprache']] = array('question' => $row['Frage'], 'answer' => $row['Antwort']);
}
return template_render('../templates/admin_faq_edit_form.html', array (
'link' => page_link_to("admin_faq"),
'id' => $id,
'form' => admin_faq_create_edit_table($languages, $prefills)
));
} else
return error("No FAQ found.", true);
break;
case 'delete' :
if (isset ($_REQUEST['id']) && preg_match("/^[0-9]{1,11}$/", $_REQUEST['id']))
$id = $_REQUEST['id'];
else
return error("Incomplete call, missing FAQ ID.", true);
$deleted = sql_query("DELETE FROM `FAQ` WHERE `QID`=" . sql_escape($id));
if ($deleted) {
header("Location: " . page_link_to("admin_faq"));
} else
return error("No FAQ found.", true);
break;
}
}
}
?>