1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
|
<?php
assert_redir(count($args) >= 3, 'notes');
$noteid = intval($args[2]);
$note = mysql_fetch_assoc(sql(
"SELECT na.id AS id, na.title AS title, na.text AS text, na.public AS public, na.owner AS owner, ".
"nb.title AS parent_title, nb.id AS parent_id, account.login AS ownername FROM notes na ".
"LEFT JOIN notes nb ON na.parent = nb.id LEFT JOIN account ON account.id = na.owner ".
"WHERE na.id = $noteid"
));
assert_error($note && ($note['owner'] == $user['id'] || $user['priv'] >= $priv_admin),
"This note does not exist, or you are not allowed to move it.");
if (count($args) == 4) {
$newparent = intval($args[3]);
// SHOULD CHECK FOR TREE CONSISTENCY, SKIP FOR NOW.
if ($newparent != 0) {
$p = mysql_fetch_assoc(sql("SELECT id, owner FROM notes WHERE id = $newparent"));
}
if ($newparent != 0 && !$p) {
$error = "Selected parent does not exist.";
} else if ($newparent != 0 && $p['owner'] != $user['id']) {
$error = "Selected parent is not belong to you.";
} else {
sql("UPDATE notes SET parent = $newparent WHERE id = $noteid");
header("Location: view-notes-$noteid");
die();
}
}
$notes_tree = array();
$n = sql("SELECT id, parent, title FROM notes ".
"WHERE owner = " . $user['id'] . " AND id != $noteid AND parent != $noteid ORDER BY title ASC");
while ($nn = mysql_fetch_assoc($n)) {
if (isset($notes_tree[$nn['parent']])) {
$notes_tree[$nn['parent']][] = $nn;
} else {
$notes_tree[$nn['parent']] = array($nn);
}
}
$title = "Move note : " . $note["title"];
require("tpl/notes/move.php");
|
