<%
 ' Fruibile - L'elemento CMS Open Source che mancava
 ' Copyright (C) 2002-2006 Roberto Scano
 ' 
 ' Licensed under the terms of the GNU Lesser General Public License:
 ' 		http://www.opensource.org/licenses/lgpl-license.php
 ' 
 ' For further information visit:
 ' 		http://www.fruibile.it/
 ' 
 ' File Author:
 ' 		Roberto Scano (mail@robertoscano.info)
%>
<!--#include virtual="/backoffice/security.asp"-->
<%
'controllo sicurezza --------------
if Session("WEBGODLogin") <> "W3C_VALIDATOR" then
	If session("manutenzione")<> 1 Then 
		response.Redirect "/backoffice/noentry.asp"
	end if
end if
'----------------------------------
'Prevent your website from cross website attacks ---------
refererUrl = Cstr(Request.ServerVariables("HTTP_REFERER"))
serverName = Cstr(Request.ServerVariables("SERVER_NAME"))
refererName = mid(refererUrl,8,len(serverName)) 
if refererName <> serverName then
   response.Redirect "/backoffice/noentry.asp"
   response.end
end if
'---------------------------------------------------------
%>
<!--#include virtual="/backoffice/inc/conx.asp"-->
<%
percorso = " " & DICLanguage(176) 
%>
<!--#include virtual="/backoffice/template/testata.asp"-->
<% 
ManuId = Trim(replace(Request("CatId"),"'","''"))
lingua = split(Session("editlanguage"),",")

if request("lastpage") <> "" then
	Session("lastpage") = request("lastpage")
else
	Session("lastpage") = Request.ServerVariables("HTTP_REFERER")
end if

'Imposta la funzione da utilizzare
If Request("Update") <> "" Then 
	strfunction = "Update"
Elseif Request("Delete") <> "" Then 
	strfunction = "Deletewait"
Elseif Request("Deleteok") <> "" Then 
	strfunction = "Delete"
Elseif Request("Add") <> "" Then 
	strfunction = "addmanu"
Elseif Request("Back") <> "" then
	response.redirect Session("lastpage")
End If
	
Function DeleteManu (ManuID)

	Set RSdel = Server.CreateObject("ADODB.Recordset")
	sql = "DELETE FROM " & application("prefix") & "modelli_html WHERE Id = " & ManuID 
	SET RSdel = conn.execute(sql) 
    SET RSdel = nothing
	
End Function

Function UpdateManu (ManuID)
Dim strSQL, rs

	If (Request("title_" & Session("Language")) = ""  and Session("translator") <> true) Or request("css_id") < 1 Then

		UpdateManu = -1

	Else
		
		Set objRS2 = Server.CreateObject("ADODB.Recordset")
	   	sql = "select * FROM " & application("prefix") & "modelli_html WHERE Id = " & ManuID 
		objRS2.open sql, conn, adOpenStatic, adLockOptimistic

		If objRS2.EOF AND objRS2.BOF then
			UpdateManu = -10
		else

			if request("css_id") <> "" then
				rs_css_id = request("css_id")
			else
				rs_css_id = 1
			end if

			rs_validato=0

			If lcase(Request("aree")) = "on" Then
				rs_aree = 1
			else
				rs_aree = 0
			End If

			If lcase(Request("argomenti")) = "on" Then
				rs_argomenti = 1
			else
				rs_argomenti = 0
			End If

			If lcase(Request("contenuti")) = "on" Then
				rs_contenuti = 1
			else
				rs_contenuti = 0
			End If

			If lcase(Request("comunicati")) = "on" Then
				rs_comunicati = 1
			else
				rs_comunicati = 0
			End If

			If lcase(Request("testi")) = "on" Then
				rs_testi = 1
			else
				rs_testi = 0
			End If

			If lcase(Request("uffici")) = "on" Then
				rs_uffici = 1
			else
				rs_uffici = 0
			End If


			upddescrizioni = ""
			
			for j=LBound(lingua) to UBound(lingua)

				if Session("supervisor") = true or Session("reviewer") = true or Session("poweruser") = true then
					
					If lcase(Request("visibile_" & lingua(j))) = "on" Then
						rs_visibile = 1
					else
						rs_visibile = 0
					End If

					upddescrizioni = upddescrizioni & "visibile_" & lingua(j) & "=" & rs_visibile & ","

				end if
				upddescrizioni = upddescrizioni & "validato_" & lingua(j) & "=0,"	
				upddescrizioni = upddescrizioni & "title_" & lingua(j) & "='" & FixMySQL((Request("title_" & lingua(j)))) & "',"
				upddescrizioni = upddescrizioni & "descrizione_" & lingua(j) & "='" & FixMySQL((Request("descrizione_" & lingua(j)))) & "',"
				upddescrizioni = upddescrizioni & "content_" & lingua(j) & "='" & FixMySQL((Request("content_" & lingua(j)))) & "',"
			next

			rs_lastuserid = "'" & Session("WEBGODLogin") & "'"
			rs_lastlogin = strDataOra
			rs_lastIP = "'" & Request.ServerVariables("REMOTE_ADDR") & "'"

			if Session("supervisor") = true then
				strSQL = "UPDATE " & application("prefix") & "modelli_html set " & upddescrizioni  & "css_id=" & rs_css_id  & ",aree=" & rs_aree & ",argomenti=" & rs_argomenti & ",contenuti=" & rs_contenuti & ",comunicati=" & rs_comunicati  & ",testi=" & rs_testi & ",uffici=" & rs_uffici & ",lastuserid=" & rs_lastuserid & ",lastlogin=" & rs_lastlogin & ",lastip=" & rs_lastip & ",lastRevid=" & rs_lastuserid & ",lastRevlogin=" & rs_lastlogin & ",lastRevip=" & rs_lastip & " where id=" & ManuID
			elseif Session("reviewer") = true then
				strSQL = "UPDATE " & application("prefix") & "modelli_html set " & upddescrizioni  & "css_id=" & rs_css_id  & ",aree=" & rs_aree & ",argomenti=" & rs_argomenti & ",contenuti=" & rs_contenuti & ",comunicati=" & rs_comunicati  & ",testi=" & rs_testi & ",uffici=" & rs_uffici & ",lastrevid=" & rs_lastuserid & ",lastrevlogin=" & rs_lastlogin & ",lastrevip=" & rs_lastip & " where id=" & ManuID
			else
				strSQL = "UPDATE " & application("prefix") & "modelli_html set " & upddescrizioni  & "css_id=" & rs_css_id  & ",aree=" & rs_aree & ",argomenti=" & rs_argomenti & ",contenuti=" & rs_contenuti & ",comunicati=" & rs_comunicati  & ",testi=" & rs_testi & ",uffici=" & rs_uffici & ",lastuserid=" & rs_lastuserid & ",lastlogin=" & rs_lastlogin & ",lastip=" & rs_lastip & " where id=" & ManuID
			end if

			'response.write strSQL
			set rs = Conn.execute(strSQL)
			set rs = nothing
		end if
		objRS2.close
		set objrs2 = nothing
	End If

End Function

Function AddManu (ManuID)

	If Request("title_" & Session("Language")) = "" Or request("css_id") < 1 Then
		AddManu = -1
	Else

		Set objRS2 = Server.CreateObject("ADODB.Recordset")
	   	sql = "select * FROM " & application("prefix") & "modelli_html WHERE title_" & Session("Language") & "= '" & FixMySQL(request("Title_" & Session("Language"))) & "'" 
		objRS2.open sql, conn, adOpenStatic, adLockOptimistic

			If objRS2.EOF AND objRS2.BOF then

			if request("css_id") <> "" then
				rs_css_id = request("css_id")
			else
				rs_css_id = 1
			end if

			rs_validato=0

			If lcase(Request("aree")) = "on" Then
				rs_aree = 1
			else
				rs_aree = 0
			End If

			If lcase(Request("argomenti")) = "on" Then
				rs_argomenti = 1
			else
				rs_argomenti = 0
			End If

			If lcase(Request("contenuti")) = "on" Then
				rs_contenuti = 1
			else
				rs_contenuti = 0
			End If

			If lcase(Request("comunicati")) = "on" Then
				rs_comunicati = 1
			else
				rs_comunicati = 0
			End If

			If lcase(Request("testi")) = "on" Then
				rs_testi = 1
			else
				rs_testi = 0
			End If

			If lcase(Request("uffici")) = "on" Then
				rs_uffici = 1
			else
				rs_uffici = 0
			End If

			descrizioni = ""
			testodescrizioni = ""

			for j=LBound(lingua) to UBound(lingua)
					if Session("supervisor") = true or Session("reviewer") = true or Session("poweruser") = true then
						descrizioni = descrizioni & "visibile_" & lingua(j) & ","
					end if
				descrizioni = descrizioni & "validato_" & lingua(j) & ","
				descrizioni = descrizioni & "title_" & lingua(j) & ","
				descrizioni = descrizioni & "descrizione_" & lingua(j) & ","
				descrizioni = descrizioni & "content_" & lingua(j) & ","

					if Session("supervisor") = true or Session("reviewer") = true or Session("poweruser") = true then

						If lcase(Request("visibile_" & lingua(j))) = "on" Then
							rs_visibile = 1
						else
							rs_visibile = 0
						End If

					testodescrizioni = testodescrizioni & rs_visibile & ","
				
					end if
				testodescrizioni = testodescrizioni & "0,"
				testodescrizioni = testodescrizioni & "'" & FixMySQL((Request("title_" & lingua(j)))) & "',"
				testodescrizioni = testodescrizioni & "'" & FixMySQL((Request("descrizione_" & lingua(j)))) & "',"
				testodescrizioni = testodescrizioni & "'" & FixMySQL((Request("content_" & lingua(j)))) & "',"
			next

				rs_lastuserid = "'" & Session("WEBGODLogin") & "'"
				rs_lastlogin = strDataOra
				rs_lastIP = "'" & Request.ServerVariables("REMOTE_ADDR") & "'"

				if Session("supervisor") = true then
					strSQL = "INSERT INTO " & application("prefix") & "modelli_html (css_id,aree,argomenti,contenuti,comunicati,testi,uffici," & descrizioni & "lastuserid,lastlogin,lastip,LastRevID,LastRevLogin,LastRevIP) VALUES (" & rs_css_id & "," & rs_aree & "," & rs_argomenti & "," & rs_contenuti & "," & rs_comunicati & ","  & rs_testi & ","  & rs_uffici & "," & testodescrizioni & rs_lastuserid & "," & rs_lastlogin & "," & rs_lastip & "," & rs_lastuserid & "," & rs_lastlogin & "," & rs_lastip &  ")"
				elseif Session("reviewer") = true then
					strSQL = "INSERT INTO " & application("prefix") & "modelli_html (css_id,aree,argomenti,contenuti,comunicati,testi,uffici," & descrizioni & "lastrevid,lastrevlogin,lastrevip) VALUES (" & rs_css_id & "," & rs_aree & ","  & rs_argomenti & "," & rs_contenuti & "," & rs_comunicati & ","  & rs_testi & ","  & rs_uffici & "," & testodescrizioni & rs_lastuserid & "," & rs_lastlogin & "," & rs_lastip & ")"
				else
					strSQL = "INSERT INTO " & application("prefix") & "modelli_html (css_id,aree,argomenti,contenuti,comunicati,testi,uffici," & descrizioni & "lastuserid,lastlogin,lastip) VALUES (" & rs_css_id & "," & rs_aree & ","  & rs_argomenti & "," & rs_contenuti & "," & rs_comunicati & ","  & rs_testi & ","  & rs_uffici & "," & testodescrizioni & rs_lastuserid & "," & rs_lastlogin & "," & rs_lastip & ")"
				end if
			
			set rs = Conn.execute(strSQL)
			set rs = nothing
		else
			addmanu = -10
		end if

		objrs2.close
		Set objRS2 = nothing		
		
	end if
End Function
%>
<h1><%=DICLanguage(176)%></h1>
<% 
if strfunction ="Deletewait" then%>
<div class="avviso"><p><%=replace(DICLanguage(311),"[TESTO]","'<strong>" & Request("title_" & Session("Language")) & "</strong>'")%><%=DICLanguage(0)%>&nbsp; <%=DICLanguage(312)%></p></div>
<form action="templatemgrcmd.asp" method="post" id="SaveForm">
<fieldset><legend><%=DICLanguage(20)%></legend>
 <p>
	<input type="hidden" id="LastPage" name="LastPage" value="<%=replace(Session("lastpage"),"&", "&amp;")%>" class="bottone" />
	<input type="hidden" id="mnu" name="mnu" value="<%=request("mnu")%>" /> 
	<input type="hidden" id="submnu" name="submnu" value="<%=request("submnu")%>" />
	<input type="hidden" name="catid" id="catid" value="<%=request("catid")%>" />
	<input type="submit" id="Deleteok" name="Deleteok" value="<%=DICLanguage(267)%>" class="bottone" />
	<input type="button" id="Back" name="Back" value="<%=DICLanguage(2)%>" onclick="history.back()" onkeypress="history.back()" class="bottone" />
 </p>
</fieldset>
</form>
<%elseIf strfunction = "Delete" Then  
DeleteManu (ManuId) %>
<p><%=DICLanguage(86)%><%=DICLanguage(0)%></p>
<p><%=DICLanguage(7)%></p>
<ul>
	<li><a href="templatemgr.asp?function=addmanu&amp;mnu=<%=request("mnu")%>&amp;submnu=<%=request("submnu")%>"><%=DICLanguage(87)%></a></li>
	<li><a href="showtemplatelist.asp?mnu=<%=request("mnu")%>&amp;submnu=<%=request("submnu")%>"><%=DICLanguage(88)%></a></li>
	<li><a href="templatemgrmenu.asp?mnu=<%=request("mnu")%>&amp;submnu=<%=request("submnu")%>"><%=DICLanguage(10)%></a></li>
</ul>
<% 
Elseif strfunction = "Update" Then 

	rescode = UpdateManu(Request("CatId"))
	If rescode < 0 Then
		If rescode = -1 Then strError = "<p>" & DICLanguage(11) & DICLanguage(0) & " <a href=""" & replace(Session("lastpage"),"&", "&amp;") & """>" & DICLanguage(2) & "</a>" & DICLanguage(0) & "</p>"  	
		If rescode = -10 Then strError = "<p>" & DICLanguage(12) & DICLanguage(0) & "</p><p><a href=""" & replace(Session("lastpage"),"&", "&amp;") & """>" & DICLanguage(2) & "</a>" & DICLanguage(0) & "</p>" 	
%>
		<div class="avviso">
		<%= strError %>
		</div>
<%	else %>
<p><%=replace(DICLanguage(89),"[MODELLO]","'<strong>" & Request("title_" & Session("Language")) & "</strong>'")%><%=DICLanguage(0)%></p>
<p><%=DICLanguage(7)%></p>
	<ul>
		<li><a href="validaxhtml.asp?step=2&amp;modello=<%=ManuId%>&amp;mnu=<%=request("mnu")%>&amp;submnu=15"><%=replace(DICLanguage(313),"[MODELLO]", Request("title_" & Session("Language")))%></a></li>
		<li><a href="templatemgr.asp?catid=<%= ManuId %>&amp;function=showmanu&amp;mnu=<%=request("mnu")%>&amp;submnu=<%=request("submnu")%>"><%=replace(DICLanguage(90),"[MODELLO]", Request("title_" & Session("Language")))%></a></li>
		<li><a href="templatemgr.asp?function=addmanu&amp;mnu=<%=request("mnu")%>&amp;submnu=<%=request("submnu")%>"><%=DICLanguage(87)%></a></li>
		<li><a href="showtemplatelist.asp?mnu=<%=request("mnu")%>&amp;submnu=<%=request("submnu")%>"><%=DICLanguage(88)%></a></li>
		<li><a href="templatemgrmenu.asp?mnu=<%=request("mnu")%>&amp;submnu=<%=request("submnu")%>"><%=DICLanguage(10)%></a></li>

	</ul>
<% 	End If

'-----------------------------------------------
' Funzione: Aggiunge nuovo record
'-----------------------------------------------
Elseif strfunction = "addmanu" Then 
	rescode = AddManu(ManuId)
	If rescode < 0 Then
		If rescode = -10 Then strError = "<p>" & DICLanguage(15) & DICLanguage(0) & "</p><p><a href=""" & replace(Session("lastpage"),"&", "&amp;") & """>" & DICLanguage(2) & "</a>" & DICLanguage(0) & "</p>"
		If rescode = -1 Then strError = "<p>" &  DICLanguage(12) & DICLanguage(0) & " <a href=""" & replace(Session("lastpage"),"&", "&amp;") & """>" & DICLanguage(2) & "</a>" & DICLanguage(0) & "</p>" 
%>
		<div class="avviso">
		<%= strError %>
		</div>
<%	else %>
<p><%=replace(DICLanguage(91),"[MODELLO]","'<strong>" & Request("title_" & Session("Language")) & "</strong>'")%><%=DICLanguage(0)%></p>
<% 		If Request.Form("addmore")<>"" Then %>
		<!--#INCLUDE FILE="inc/addtemplate.asp"-->
		<% Else  %>
<p><%=DICLanguage(7)%></p>
	<ul>
		<li><a href="templatemgr.asp?function=addmanu&amp;mnu=<%=request("mnu")%>&amp;submnu=<%=request("submnu")%>"><%=DICLanguage(87)%></a></li>
		<li><a href="showtemplatelist.asp?mnu=<%=request("mnu")%>&amp;submnu=<%=request("submnu")%>"><%=DICLanguage(88)%></a></li>
		<li><a href="templatemgrmenu.asp?mnu=<%=request("mnu")%>&amp;submnu=<%=request("submnu")%>"><%=DICLanguage(10)%></a></li>
	</ul>
		<% End If
 	End If

Else %>
	 <div class="avviso">
		<p><%=DICLanguage(4)%>&nbsp;<a href="templatemgrmenu.asp?mnu=<%=request("mnu")%>&amp;submnu=<%=request("submnu")%>" title="<%=DICLanguage(10)%>"><%=DICLanguage(5)%></a><%=DICLanguage(0)%></p>
		<p><a href="<%=replace(Session("lastpage"),"&", "&amp;")%>" onclick="history.back()" onkeypress="history.back()"><%=DICLanguage(2)%></a><%=DICLanguage(0)%></p>
	</div>
<% End If  %>
<!--#include virtual ="/backoffice/template/finale.asp"-->