root/admin/admin_words.php

<?php
/***************************************************************************</span>
<span class="code-comment"> *                              admin_words.php
 *                            -------------------
 *   begin                : Thursday, Jul 12, 2001
 *   copyright            : (C) 2001 The phpBB Group
 *   email                : support@phpbb.com
 *
 *   $Id: admin_words.php,v 1.10.2.3 2004/03/25 15:57:20 acydburn Exp $
 *
 *
 ***************************************************************************/

/***************************************************************************
 *
 *   This program is free software; you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
 *   the Free Software Foundation; either version 2 of the License, or
 *   (at your option) any later version.
 *
 ***************************************************************************/

if( !empty($setmodules) )</span>
<span class="code-keyword">{
        $file = basename(__FILE__);
        $module['general']['word_censor'] = $file;
        return;
}

define('IN_PHPBB', 1);

//</span>
<span class="code-comment">// Load default header
//
$root_path = './../';</span>
<span class="code-lang">require($root_path . 'extension.inc');
require('./pagestart.' . $phpEx);
$cancel = ( isset($_POST['cancel']) ) ? true : false;
$no_page_header = $cancel;</span>
<span class="code-lang">if ($cancel)
{
        redirect('admin/' . append_sid("admin_words.$phpEx"));
}

if( isset($_GET['mode']) || isset($_POST['mode']) )
{
        $mode = (isset($_GET['mode'])) ? $_GET['mode'] : $_POST['mode'];
        $mode = htmlspecialchars($mode);
}
else
{
        //
        // These could be entered via a form button
        //
        if( isset($_POST['add']) )
        {
                $mode = "add";
        }
        else if( isset($_POST['save']) )
        {
                $mode = "save";
        }
        else
        {
                $mode = "";
        }
}

// Restrict mode input to valid options
$mode = ( in_array($mode, array('add', 'edit', 'save', 'delete')) ) ? $mode : '';</span>
<span class="code-lang">
if( $mode != "" )
{
        if( $mode == "edit" || $mode == "add" )
        {
                $word_id = ( isset($_GET['id']) ) ? intval($_GET['id']) : 0;

                $template->set_filenames(array(
                        "body" => "../admin/words_edit_body.tpl")
                );
                $word_info = array('word' => '', 'replacement' => '');

                $s_hidden_fields = '';

                if( $mode == "edit" )
                {
                        if( $word_id )
                        {
                                $sql = "SELECT *
                                        FROM " . WORDS_TABLE . "
                                        WHERE word_id = $word_id";
                                $result = $db->sql_query($sql);

                                $word_info = $db->sql_fetchrow($result);
                                $s_hidden_fields .= '<input type="hidden" name="id" value="' . $word_id . '" />';
                        }
                        else
                        {
                                trigger_error($lang['no_word_selected']);
                                return;
                        }
                }

                $template->assign_vars(array(
                        "WORD" => $word_info['word'],
                        "REPLACEMENT" => htmlspecialchars($word_info['replacement']),

                        "L_WORDS_TEXT" => $lang['words_explain'],
                        "L_WORD_CENSOR" => $lang['edit_word_censor'],

                        "S_WORDS_ACTION" => append_sid("admin_words.$phpEx"),
                        "S_HIDDEN_FIELDS" => $s_hidden_fields)
                );

                $template->display("body");

                include('./page_footer_admin.'.$phpEx);
        }
        else if( $mode == "save" )
        {
                $word_id = ( isset($_POST['id']) ) ? intval($_POST['id']) : 0;
                $word = ( isset($_POST['word']) ) ? trim($_POST['word']) : "";
                $replacement = ( isset($_POST['replacement']) ) ? trim($_POST['replacement']) : "";

                if($word == "" || $replacement == "")
                {
                        trigger_error($lang['must_enter_word']);
                        return;
                }
                $sql_ary = array(
                        'word'            => $word,
                        'replacement'    => $replacement
                );
                if ($word_id) {
                    $db->sql_query('UPDATE ' . WORDS_TABLE . ' SET ' . $db->sql_build_array('UPDATE', $sql_ary) . ' WHERE word_id = ' . $word_id);
                        $message = $lang['word_updated'];
                }
                else {
                    $db->sql_query('INSERT INTO ' . WORDS_TABLE . ' ' . $db->sql_build_array('INSERT', $sql_ary));
                        $message = $lang['word_added'];
                }

                $cache->destroy('_word_censors');

                $message .= "<br /><br />" . sprintf($lang['click_return_wordadmin'], "<a href=\"" . append_sid("admin_words.$phpEx") . "\">", "</a>") . "<br /><br />" . sprintf($lang['click_return_admin_index'], "<a href=\"" . append_sid("index.$phpEx?pane=right") . "\">", "</a>");

                trigger_error($message);
                return;
        }
        else if( $mode == "delete" )
        {
                if( isset($_POST['id']) ||  isset($_GET['id']) )
                {
                        $word_id = ( isset($_POST['id']) ) ? $_POST['id'] : $_GET['id'];
                        $word_id = intval($word_id);
                }
                else
                {
                        $word_id = 0;
                }

                $confirm = isset($_POST['confirm']) ? 1 : 0;

                if( $word_id && $confirm )
                {
                        $sql = "DELETE FROM " . WORDS_TABLE . "
                                WHERE word_id = $word_id";
                        $result = $db->sql_query($sql);

                        $cache->destroy('_word_censors');

                        $message = $lang['word_removed'] . "<br /><br />" . sprintf($lang['click_return_wordadmin'], "<a href=\"" . append_sid("admin_words.$phpEx") . "\">", "</a>") . "<br /><br />" . sprintf($lang['click_return_admin_index'], "<a href=\"" . append_sid("index.$phpEx?pane=right") . "\">", "</a>");

                        trigger_error($message);
                }
                elseif( $word_id && !$confirm)
                {
                        // Present the confirmation screen to the user
                        $template->set_filenames(array(
                                'body' => '../admin/confirm_body.tpl')
                        );

                        $hidden_fields = '<input type="hidden" name="mode" value="delete" /><input type="hidden" name="id" value="' . $word_id . '" />';

                        $template->assign_vars(array(
                                'MESSAGE_TITLE' => $lang['confirm'],
                                'MESSAGE_TEXT' => $lang['confirm_delete_word'],

                                'S_CONFIRM_ACTION' => append_sid("admin_words.$phpEx"),
                                'S_HIDDEN_FIELDS' => $hidden_fields)
                        );
                        $template->display("body");

                        return;
                }
                else
                {
                        trigger_error($lang['no_word_selected']);
                        return;
                }
        }
}
else
{
        $template->set_filenames(array(
                "body" => "../admin/words_list_body.tpl")
        );

        $sql = "SELECT *
                FROM " . WORDS_TABLE . "
                ORDER BY word";
        $result = $db->sql_query($sql);

        $template->assign_vars(array(
                "L_WORDS_TEXT" => $lang['words_explain'],
                "L_ADD_WORD" => $lang['add_new_word'],

                "S_WORDS_ACTION" => append_sid("admin_words.$phpEx"),
                "S_HIDDEN_FIELDS" => '')
        );
        $i = 0;
        while ($word_rows = $db->sql_fetchrow($result))
        {
            ++$i;
                $word = $word_rows['word'];
                $replacement = $word_rows['replacement'];
                $word_id = $word_rows['word_id'];

                $row_color = ( !($i % 2) ) ? $theme['td_color1'] : $theme['td_color2'];
                $row_class = ( !($i % 2) ) ? $theme['td_class1'] : $theme['td_class2'];

                $template->assign_block_vars("words", array(
                        "ROW_COLOR" => "#" . $row_color,
                        "ROW_CLASS" => $row_class,
                        "WORD" => $word,
                        "REPLACEMENT" => $replacement,

                        "U_WORD_EDIT" => append_sid("admin_words.$phpEx?mode=edit&amp;id=$word_id"),
                        "U_WORD_DELETE" => append_sid("admin_words.$phpEx?mode=delete&amp;id=$word_id"))
                );
        }
}

$template->display("body");</span>
<span class="code-lang">
include('./page_footer_admin.'.$phpEx);

?>