<?php
checkadmin($role);
$tbl = 'links';

$id = $_REQUEST["id"];
$subject = htmlsafe($_POST["subject"]);
$description = htmlsafe($_POST["description"]);
$filename = htmlsafe($_POST["filename"]);
if (basename($_FILES['userfile']['name'])) {
	$filename = strtolower(basename($_FILES['userfile']['name']));
	upload_file();
}
$scope = $_POST["scope"];
if (!$scope) $scope = 'public';
$submit = $_POST["submit"];

if ($submit == 'SAVE') {
        if (mysql_num_rows(mysql_query("select * from $tbl where id=$id"))) {
                mysql_query("update $tbl set subject='$subject',filename='$filename',
		description='$description',scope='$scope',status='$status',userID='$user' where id=$id");
        } else {
                mysql_query("insert into $tbl(subject,filename,description,scope,status,dated,userID) 
		values('$subject','$filename','$description',scope,'online',now(),'$user')");
        }
} else if ($submit == "DELETE") {
        mysql_query("delete from $tbl where id=$id");
} else if ($action == "offline") {
        mysql_query("update $tbl set status='offline' where id=$id");
} else if ($action == "online") {
        mysql_query("update $tbl set status='online' where id=$id");
}
topmenu();
botmenu();
stdmenu();

echo "<div align='right'>Upload pdf file linked to this link <input type='file' name='userfile'></div>
Please select link file and enter the details below to uploading on site.
<table class='normal' width='90%'>";
if (!$id) {
        echo "<tr><td nowrap>Subject</td>
        <td><input type='text' name='subject' value='' size='50'></td></tr>
        <tr valign='top'><td>Description</td>
        <td><textarea name='description' rows='2' cols='50'></textarea></td></tr>
        <tr><td nowrap>Filename</td>
        <td><input type='text' name='filename' value='' size='50'>
        (if file is to be uploaded, leave it blank)</td></tr>
        <tr><td nowrap></td>
        <td nowrap><input type='checkbox' name='authentication' value='yes'>
        <input type='submit' name='submit' value='SAVE' style='width:80px'></td></tr>";
} else {
        echo "<tr><td>[ <a href='$PHP_SELF?conf=$conf&id='>New link</a> ]</td></tr>";
}
echo "</table>
<table class='normal' width='98%'>
<tr><th>No.</th><th width='95%'>Link</th></tr>";

$rs = mysql_query("select * from $tbl order by dated desc,id");
while ($o = mysql_fetch_object($rs)) {
        $i++;
        if ($id == $o->id) {
                echo "<tr><td>$i</td><td align='center'>
                <input type='hidden' name='id' value='$id'>
                <table class=normal width='90%'>
                <tr><td nowrap>Subject</td>
                <td><input type='text' name='subject' value='$o->subject' size='50'></td></tr>
                <tr valign='top'><td nowrap>Description</td>
                <td><textarea name='description' rows='2' cols='50'>$o->description</textarea></td></tr>
                <tr><td nowrap>Filename</td>
                <td><input type='text' name='filename' value='$o->filename' size='50'></td></tr>
                <tr><td nowrap></td>
                <td nowrap><input type='checkbox' name='authentication' value='yes'";
		if ($o->authentication == $authentication) echo " checked";
		echo "> Authentication ?
                <input type='submit' name='submit' value='SAVE' style='width:80px'>
                <input type='submit' name='submit' value='DELETE' style='width:80px'></td></tr>
                </table></td></tr>";
        } else {
                if ($i % 2) echo "<tr valign='top' bgcolor='$col1'>";
                else echo "<tr valign='top' bgcolor='$col2'>";
                echo "<td>$i</td><td width='80%'><a name='$o->id'></a>$o->subject
                [ <a href='$PHP_SELF?conf=$conf&id=$o->id#$o->id'>Edit</a> ] ";
                if ($o->status == 'offline')
                        echo "[ <a href='$PHP_SELF?conf=$conf&action=online&id=$o->id'>Online</a> ]";
                else
                        echo "[ <a href='$PHP_SELF?conf=$conf&action=offline&id=$o->id'>Offline</a> ]";
                echo "<br>
                >> $o->description<br>";
                if ($o->filename) echo "Filename: <a href='documents/$o->filename'>documents/$o->filename</a>";
                echo "<div align='right'>By $o->userID dated $o->dated & authentication $o->authentication</div></td></tr>";
        }
}
echo "</table>";

?>