Gazelle/sections/tools/development/site_options.php

<?
if (!check_perms('admin_manage_permissions') && !check_perms('users_mod')) {
    error(403);
}

if (!check_perms('admin_manage_permissions')) {
    View::show_header('Site Options');
    $DB->query("SELECT Name, Value, Comment FROM site_options");
?>
    <div class="header">
        <h1>Site Options</h1>
    </div>
    <table width="100%">
        <tr class="colhead">
            <td>Name</td>
            <td>Value</td>
            <td>Comment</td>
        </tr>
<?
    $Row = 'a';
    while (list($Name, $Value, $Comment) = $DB->next_record()) {
    $Row = $Row === 'a' ? 'b' : 'a';
?>
        <tr class="row<?=$Row?>">
            <td><?=$Name?></td>
            <td><?=$Value?></td>
            <td><?=$Comment?></td>
        </tr>
<?
    }
?>
    </table>
<?
    View::show_footer();
    die();
}

if (isset($_POST['submit'])) {
    authorize();

    if ($_POST['submit'] == 'Delete') {
	$Name = db_string($_POST['name']);
        $DB->query("DELETE FROM site_options WHERE Name = '" . $Name . "'");
        $Cache->delete_value('site_option_' . $Name);
    } else {
        $Val->SetFields('name', '1', 'regex', 'The name must be separated by underscores. No spaces are allowed.', array('regex' => '/^[a-z][_a-z0-9]{0,63}$/i'));
        $Val->SetFields('value', '1', 'string', 'You must specify a value for the option.');
        $Val->SetFields('comment', '1', 'string', 'You must specify a comment for the option.');

        $Error = $Val->ValidateForm($_POST);
        if ($Error) {
            error($Error);
        }

        $Name = db_string($_POST['name']);
        $Value = db_string($_POST['value']);
        $Comment = db_string($_POST['comment']);

        if ($_POST['submit'] == 'Edit') {
            $DB->query("SELECT Name FROM site_options WHERE ID = '" . db_string($_POST['id']) . "'");
            list($OldName) = $DB->next_record();
            $DB->query("
                UPDATE site_options
                SET
                    Name = '$Name',
                    Value = '$Value',
                    Comment = '$Comment'
                WHERE ID = '" . db_string($_POST['id']) . "'
            ");
            $Cache->delete_value('site_option_' . $OldName);
        } else {
            $DB->query("
                INSERT INTO site_options (Name, Value, Comment)
                VALUES ('$Name', '$Value', '$Comment')
            ");
        }

        $Cache->delete_value('site_option_' . $Name);
    }
}

$DB->query("
    SELECT
        ID,
        Name,
        Value,
        Comment
    FROM site_options
    ORDER BY LOWER(Name) DESC
");

View::show_header('Site Options');
?>

<div class="header">
    <h2>Site Options</h2>
</div>
<table width="100%">
    <tr class="colhead">
        <td>
            <span class="tooltip" title="Words must be separated by underscores">Name</span>
        </td>
        <td>Value</td>
        <td>Comment</td>
        <td>Submit</td>
    </tr>
    <tr class="rowa">
        <form class="create_form" name="site_option" action="" method="post">
            <input type="hidden" name="action" value="site_options" />
            <input type="hidden" name="auth" value="<?=$LoggedUser['AuthKey']?>" />
            <td>
                <input type="text" size="40" name="name" />
            </td>
            <td>
                <input type="text" size="20" name="value" />
            </td>
            <td>
                <input type="text" size="75" name="comment" />
            </td>
            <td>
                <input type="submit" name="submit" value="Create" />
            </td>
        </form>
    </tr>
<?
$Row = 'a';
while (list($ID, $Name, $Value, $Comment) = $DB->next_record()) {
    $Row = $Row === 'a' ? 'b' : 'a';
?>
<tr class="row<?=$Row?>">
    <form class="manage_form" name="site_option" action="" method="post">
        <input type="hidden" name="id" value="<?=$ID?>" />
        <input type="hidden" name="action" value="site_options" />
        <input type="hidden" name="auth" value="<?=$LoggedUser['AuthKey']?>" />
        <td>
            <input type="text" size="40" name="name" value="<?=$Name?>" />
        </td>
        <td>
            <input type="text" size="20" name="value" value="<?=$Value?>" />
        </td>
        <td>
            <input type="text" size="75" name="comment" value="<?=$Comment?>" />
        </td>
        <td>
            <input type="submit" name="submit" value="Edit" />
            <input type="submit" name="submit" value="Delete" />
        </td>
    </form>
</tr>
<?
}
?>
</table>
<? View::show_footer(); ?>