<?php

// +--------------------------------------------------------------------+

// | PowerAdmin								|

// +--------------------------------------------------------------------+

// | Copyright (c) 1997-2002 The PowerAdmin Team			|

// +--------------------------------------------------------------------+

// | This source file is subject to the license carried by the overal	|

// | program PowerAdmin as found on http://poweradmin.sf.net		|

// | The PowerAdmin program falls under the QPL License:		|

// | http://www.trolltech.com/developer/licensing/qpl.html		|

// +--------------------------------------------------------------------+

// | Authors: Roeland Nieuwenhuis <trancer <AT> trancer <DOT> nl>	|

// |          Sjeemz <sjeemz <AT> sjeemz <DOT> nl>			|

// +--------------------------------------------------------------------+

//

// $Id: edit_record.php,v 1.9 2003/05/14 22:48:13 azurazu Exp $

//

require_once("inc/toolkit.inc.php");

if (isset($_GET["delid"])) {

   $db->query("DELETE FROM record_owners WHERE id='".$_GET["delid"]."'");

}

$xsid = (isset($_GET['id'])) ? $_GET['id'] : $_POST['recordid'];

if(!xs(recid_to_domid($xsid)))

{

    error(ERR_RECORD_ACCESS_DENIED);

}

/*

if($_SESSION["partial_".get_domain_name_from_id($_GET["domain"])] == 1 && !isset($_POST["recordid"])) 

{

    $checkPartial = $db->getOne("SELECT id FROM record_owners WHERE record_id='".$_GET["id"]."' AND user_id='".$_SESSION["userid"]."' LIMIT 1");

    if (empty($checkPartial)) {

        error(ERR_RECORD_ACCESS_DENIED);

    }

}

*/

if ($_POST["commit"])

{

        edit_record($_POST["recordid"], $_POST["domainid"], $_POST["name"], $_POST["type"], $_POST["content"], $_POST["ttl"], $_POST["prio"]);

        clean_page("edit.php?id=".$_POST["domainid"]);

} elseif($_SESSION["partial_".get_domain_name_from_id($_GET["domain"])] == 1)

{

    $checkPartial = $db->getOne("SELECT id FROM record_owners WHERE record_id='".$_GET["id"]."' AND user_id='".$_SESSION["userid"]."' LIMIT 1");

    if (empty($checkPartial)) {

        error(ERR_RECORD_ACCESS_DENIED);

    }

}

include_once("inc/header.inc.php");

?>

<FORM METHOD="post" ACTION="edit_record.php">

<INPUT TYPE="hidden" NAME="recordid" VALUE="<?= $_GET["id"] ?>">

<INPUT TYPE="hidden" NAME="domainid" VALUE="<?= $_GET["domain"] ?>">

<TABLE BORDER="0" CELLSPACING="4">

<?

	$rec = get_record_from_id($_GET["id"]);

?>

<TR><TD CLASS="tdbg">

<? if ($_SESSION[$_GET["domain"]."_ispartial"] == 1)  { ?>

<INPUT TYPE="hidden" NAME="name" VALUE="<?= trim(str_replace(get_domain_name_from_id($_GET["domain"]), '', $rec["name"]), '.')?>" CLASS="input">

<?= trim(str_replace(get_domain_name_from_id($_GET["domain"]), '', $rec["name"]), '.') ?>

<? } else { ?>

<INPUT TYPE="text" NAME="name" VALUE="<?= trim(str_replace(get_domain_name_from_id($_GET["domain"]), '', $rec["name"]), '.') ?>" CLASS="input">

<? } ?>

.<?= get_domain_name_from_id($_GET["domain"]) ?></TD><TD CLASS="tdbg">IN</TD><TD CLASS="tdbg"><SELECT NAME="type">

<?

foreach (get_record_types() as $c)

{

	if ($c == $rec["type"])

	{

		$add = " SELECTED";

	}

	else

	{

		$add = "";

	}

	?>

	<OPTION<?= $add ?> VALUE="<?= $c ?>"><?= $c ?></OPTION><?

}

?>

</SELECT></TD><TD CLASS="tdbg"><INPUT TYPE="text" NAME="prio" VALUE="<?= $rec["prio"] ?>" CLASS="sinput"></TD><TD CLASS="tdbg"><INPUT TYPE="text" NAME="content" VALUE="<?= $rec["content"] ?>" CLASS="input"></TD><TD CLASS="tdbg"><INPUT TYPE="text" NAME="ttl" VALUE="<?= $rec["ttl"] ?>" CLASS="sinput"></TD></TR>

</TABLE>

</FORM>

<?if (level(10)) { ?>

<table style="width:140px">

<?

$x_result = $db->query("SELECT r.id,u.username FROM record_owners as r, users as u WHERE r.record_id='".$_GET['id']."' AND u.id=r.user_id");

while ($x_r = $x_result->fetchRow()) {

   echo "<tr><td CLASS=\"tdbg\">".$x_r["username"]."</td><td CLASS=\"tdbg\">";

   echo "<a href=\"".$_SERVER["PHP_SELF"]."?id=".$_GET["id"]."&domain=".$_GET["domain"]."&delid=".$x_r["id"]."\">";

}

?>

</table>

<? }

include_once("inc/footer.inc.php");

?>