<?php



if (!eregi("admin.php", $PHP_SELF)) { die ("Access Denied"); }
$hlpfile = "manual/reviews.html";
$result = sql_query("select radminsuper from $prefix"._authors." where aid='$aid'", $dbi);
list($radminsuper) = sql_fetch_row($result, $dbi);
if ($radminsuper==1) {

/*********************************************************/
/* REVIEWS Block Functions                               */
/*********************************************************/

function modules() {
    global $hlpfile, $prefix, $dbi, $multilingual;
    include ("header.php");
    $hlpfile = "manual/reviews.html";
    GraphicAdmin($hlpfile);
    OpenTable();
    echo "<center><font class=\"title\"><b>"._MODULESADMIN."</b></font></center>";
    CloseTable();
    $handle=opendir('modules');
    while ($file = readdir($handle)) {
	if ( (!ereg("[.]",$file)) ) {
		$modlist .= "$file ";
	}
    }
    closedir($handle);
    $modlist = explode(" ", $modlist);
    sort($modlist);
    for ($i=0; $i < sizeof($modlist); $i++) {
	if($modlist[$i] != "") {
	    $result = sql_query("select mid from $prefix"._modules." where title='$modlist[$i]'", $dbi);
	    list ($mid) = sql_fetch_row($result, $dbi);
	    if ($mid == "") {
		sql_query("insert into $prefix"._modules." values (NULL, '$modlist[$i]', '$modlist[$i]', '0', '0')", $dbi);
	    }
	}
    }
    $result = sql_query("select title from $prefix"._modules."", $dbi);
    while (list($title) = sql_Fetch_row($result, $dbi)) {
	$a = 0;
	$handle=opendir('modules');
	while ($file = readdir($handle)) {
	    if ($file == $title) {
		$a = 1;
	    }
	}
	closedir($handle);
	if ($a == 0) {
	    sql_query("delete from $prefix"._modules." where title='$title'", $dbi);
	}
    }
    echo "<br>";
    OpenTable();
    echo "<br><center><font class=\"option\">"._MODULESADDONS."</font><br><br>"
	."<font class=\"content\">"._MODULESACTIVATION."</font><br><br>"
	."<form action=\"admin.php\" method=\"post\">"
        ."<table border=\"1\" align=\"center\" width=\"90%\"><tr><td align=\"center\">"
	."<b>"._TITLE."</b></td><td align=\"center\"><b>"._CUSTOMTITLE."</b></td><td align=\"center\"><b>"._STATUS."</b></td><td align=\"center\"><b>"._VIEW."</b></td><td align=\"center\"><b>"._FUNCTIONS."</b></td></tr>";
    $result = sql_query("select mid, title, custom_title, active, view from $prefix"._modules." order by title ASC", $dbi);
    while(list($mid, $title, $custom_title, $active, $view) = sql_fetch_row($result, $dbi)) {
	if ($active == 1) {
	    $active = _ACTIVE;
	    $change = _DEACTIVATE;
	    $act = 0;
	} else {
	    $active = "<i>"._INACTIVE."</i>";
	    $change = _ACTIVATE;
	    $act = 1;
	}
	if ($custom_title == "") {
	    $custom_title = ereg_replace("_", " ", $title);
	}
	if ($view == 0) {
	    $who_view = _MVALL;
	} elseif ($view == 1) {
	    $who_view = _MVUSERS;
	} elseif ($view == 2) {
	    $who_view = _MVADMIN;
	}
	echo "<tr><td>&nbsp;$title</td><td align=\"center\">$custom_title</td><td align=\"center\">$active</td><td align=\"center\">$who_view</td><td align=\"center\">[ <a href=\"admin.php?op=module_edit&mid=$mid\">"._EDIT."</a> | <a href=\"admin.php?op=module_status&mid=$mid&active=$act\">$change</a> ]</td></tr>";
    }
    echo "</table>";
    CloseTable();
    include ("footer.php");
}

function module_status($mid, $active) {
    global $prefix, $dbi;
    sql_query("update $prefix"._modules." set active='$active' where mid='$mid'", $dbi);
    Header("Location: admin.php?op=modules");
}

function module_edit($mid) {
    global $prefix, $dbi;
    $result = sql_query("select title, custom_title, view from $prefix"._modules." where mid='$mid'", $dbi);
    list($title, $custom_title, $view) = sql_fetch_row($result, $dbi);
    include ("header.php");
    $hlpfile = "manual/reviews.html";
    GraphicAdmin($hlpfile);
    title(""._MODULEEDIT."");
    OpenTable();
    if ($view == 0) {
	$sel1 = "selected";
	$sel2 = "";
	$sel3 = "";
    } elseif ($view == 1) {
	$sel1 = "";
	$sel2 = "selected";
	$sel3 = "";
    } elseif ($view == 2) {
	$sel1 = "";
	$sel2 = "";
	$sel3 = "selected";    
    }
    echo "<center><b>"._CHANGEMODNAME."</b><br>($title)</center><br><br>"
	."<form action=\"admin.php\" method=\"post\">"
	."<table border=\"0\"><tr><td>"
	.""._CUSTOMMODNAME."</td><td>"
	."<input type=\"text\" name=\"custom_title\" value=\"$custom_title\" size=\"50\"></td></tr>"
	."<tr><td>"._VIEWPRIV."</td><td><select name=\"view\">"
	."<option value=\"0\" $sel1>"._MVALL."</option>"
	."<option value=\"1\" $sel2>"._MVUSERS."</option>"
	."<option value=\"2\" $sel3>"._MVADMIN."</option>"
	."</select>"
	."</td></tr></table><br><br>"
	."<input type=\"hidden\" name=\"mid\" value=\"$mid\">"
	."<input type=\"hidden\" name=\"op\" value=\"module_edit_save\">"
	."<input type=\"submit\" value=\""._SAVECHANGES."\">"
	."</form>"
	."<br><br><center>"._GOBACK."</center>";
    CloseTable();
    include("footer.php");
}

function module_edit_save($mid, $custom_title, $view) {
    global $prefix, $dbi;
    $result = sql_query("update $prefix"._modules." set custom_title='$custom_title', view='$view' where mid='$mid'", $dbi);
    Header("Location: admin.php?op=modules");
}

switch ($op){

    case "modules":
    modules();
    break;

    case "module_status":
    module_status($mid, $active);
    break;

    case "module_edit":
    module_edit($mid);
    break;
    
    case "module_edit_save":
    module_edit_save($mid, $custom_title, $view);
    break;

}

} else {
    echo "Access Denied";
}

?>