<%
' Fruibile - L'elemento CMS Open Source che mancava
' Copyright (C) 2002-2006 Roberto Scano
'
' Licensed under the terms of the GNU Lesser General Public License:
' http://www.opensource.org/licenses/lgpl-license.php
'
' For further information visit:
' http://www.fruibile.it/
'
' File Author:
' Roberto Scano (mail@robertoscano.info)
%>
<%
'controllo sicurezza --------------
if Session("WEBGODLogin") <> "W3C_VALIDATOR" then
If session("utenti")<> 1 Then
response.Redirect "/backoffice/noentry.asp"
end if
end if
'----------------------------------
'Prevent your website from cross website attacks ---------
refererUrl = Cstr(Request.ServerVariables("HTTP_REFERER"))
serverName = Cstr(Request.ServerVariables("SERVER_NAME"))
refererName = mid(refererUrl,8,len(serverName))
if refererName <> serverName then
response.Redirect "/backoffice/noentry.asp"
response.end
end if
'---------------------------------------------------------
%>
<%
'RICHIAMO ELENCO STRUTTURE
Set objX = Server.CreateObject("XStandard.Structure")
Set objDoc = Server.CreateObject("MSXML2.DOMDocument.4.0")
objDoc.async = False
Set rsData = Conn.Execute("SELECT Id, parentid, title_" & Session("Language") & " FROM strutture WHERE visibile=1")
objX.RootID = "0"
objX.AddNode "0", "root", ""
objX.AddNode "0-a", "id", "0", 2
objX.AddRelationship "0-a", "0"
Do Until rsData.EOF
strID = CStr(rsData("id").Value)
If Not IsNull(rsData("parentid").Value) Then
If Len(CStr(rsData("parentid").Value)) > 0 Then
If CStr(rsData("parentid").Value) = "0" Then
objX.AddNode strID, "group", ""
Else
objX.AddNode strID, "item", ""
End If
objX.AddRelationship strID, CStr(rsData("parentid").Value)
End If
End If
objX.AddNode strID & "-a", "id", strID, 2
objX.AddRelationship strID & "-a", strID
objX.AddNode strID & "-b", "title", rsData("title_" & Session("Language")).Value, 2
objX.AddRelationship strID & "-b", strID
rsData.MoveNext
Loop
rsdata.close
set rsdata = nothing
objDoc.loadXML objX.XML
if Session("supervisor") = true then
aggiunta_sql = ""
aggiunta_where_sql = ""
else
aggiunta_sql = " and office_id=" & Session("Office_ID")
aggiunta_where_sql = " where office_id=" & Session("Office_ID")
end if
Set rs = Server.CreateObject("ADODB.Recordset")
sql= "SELECT * FROM " & application("prefix") & "utenti WHERE Id = " & replace(Request("CatId"),"'","''") & aggiunta_sql
rs.Open sql,Conn, adOpenStatic, adLockOptimistic
If rs.EOF and rs.BOF Then
%>