{

global $statuses, $use_comments, $comments_disabled_after, $step, $txp_user, $event;

$show_authors = !has_single_author('textpattern', 'AuthorID');

$fields = array(

'ID' => array(

'column' => 'textpattern.ID',

'label' => 'id',

'visible' => false,

),

'Title' => array(

'column' => 'textpattern.Title',

'label' => 'title',

'class' => 'title',

),

'posted' => array(

'column' => 'TIMESTAMPDIFF(SECOND, COALESCE(FROM_UNIXTIME(0), FROM_UNIXTIME(1)), Posted)',

'label' => 'posted',

'class' => 'posted date',

),

'lastmod' => array(

'column' => 'TIMESTAMPDIFF(SECOND, COALESCE(FROM_UNIXTIME(0), FROM_UNIXTIME(1)), LastMod)',

'label' => 'modified',

'class' => 'lastmod date',

),

'expires' => array(

'column' => 'TIMESTAMPDIFF(SECOND, COALESCE(FROM_UNIXTIME(0), FROM_UNIXTIME(1)), Expires)',

'label' => 'expires',

'class' => 'expires date',

),

'Section' => array(

'column' => 'textpattern.Section',

'label' => 'section',

'class' => 'section',

),

'Category1' => array(

'column' => 'textpattern.Category1',

'label' => 'category1',

'class' => 'category1 category',

),

'Category2' => array(

'column' => 'textpattern.Category2',

'label' => 'category2',

'class' => 'category2 category',

),

'Status' => array(

'column' => 'textpattern.Status',

'label' => 'status',

'class' => 'status',

),

'AuthorID' => array(

'column' => 'textpattern.AuthorID',

'label' => 'author',

'class' => 'author name',

'visible' => $show_authors,

),

'Annotate' => array(

'column' => 'textpattern.Annotate',

'label' => 'comments',

'class' => 'comments',

'visible' => $use_comments,

),

'url_title' => array(

'column' => 'textpattern.url_title',

'visible' => false,

),

'category1_title' => array(

'column' => 'category1.title',

'visible' => false,

),

'category2_title' => array(

'column' => 'category2.title',

'visible' => false,

),

'section_title' => array(

'column' => 'section.title',

'visible' => false,

),

'RealName' => array(

'column' => 'user.RealName',

'visible' => false,

),

'total_comments' => array(

'column' => "(SELECT COUNT(*) FROM " . safe_pfx('txp_discuss') . " WHERE parentid = textpattern.ID)",

'visible' => false,

),

);

$sql_from =

safe_pfx('textpattern') . " textpattern

LEFT JOIN " . safe_pfx('txp_category') . " category1 ON category1.name = textpattern.Category1 AND category1.type = 'article'

LEFT JOIN " . safe_pfx('txp_category') . " category2 ON category2.name = textpattern.Category2 AND category2.type = 'article'

LEFT JOIN " . safe_pfx('txp_section') . " section ON section.name = textpattern.Section

LEFT JOIN " . safe_pfx('txp_users') . " user ON user.name = textpattern.AuthorID";

callback_event_ref('articles', 'fields', 'list', $fields);

callback_event_ref('articles', 'from', 'list', $sql_from);

$fieldlist = array();

// Build field list: shame that array_filter() can't get keys and

// values 'til PHP 5.6. @todo One day.

foreach ($fields as $fld => $def) {

$fieldlist[] = isset($def['column']) ? $def['column'] . ' AS ' . $fld : $fld;

}

pagetop(gTxt('tab_list'), $message);

extract(gpsa(array(

'page',

'sort',

'dir',

'crit',

'search_method',

)));

if ($sort === '') {

$sort = get_pref('article_sort_column', 'posted');

}

if (!in_array($sort, array_keys(array_filter($fields, function($value) {

return !isset($value['sortable']) || !empty($value['sortable']);

})))

) {

$sort = 'id';

}

set_pref('article_sort_column', $sort, 'list', PREF_HIDDEN, '', 0, PREF_PRIVATE);

if ($dir === '') {

$dir = get_pref('article_sort_dir', 'desc');

} else {

$dir = ($dir == 'asc') ? "asc" : "desc";

set_pref('article_sort_dir', $dir, 'list', PREF_HIDDEN, '', 0, PREF_PRIVATE);

}

$sort_sql = $sort . ' ' . $dir . ($sort == 'id' ? '' : ", textpattern.ID $dir");

$switch_dir = ($dir == 'desc') ? 'asc' : 'desc';

$search = new Filter(

$event,

array(

'id' => array(

'column' => 'textpattern.ID',

'label' => gTxt('id'),

'type' => 'integer',

),

'title_body_excerpt' => array(

'column' => array('textpattern.Title', 'textpattern.Body', 'textpattern.Excerpt'),

'label' => gTxt('title_body_excerpt'),

),

'section' => array(

'column' => array('textpattern.Section', 'section.title'),

'label' => gTxt('section'),

),

'keywords' => array(

'column' => 'textpattern.Keywords',

'label' => gTxt('keywords'),

'type' => 'find_in_set',

),

'categories' => array(

'column' => array('textpattern.Category1', 'textpattern.Category2', 'category1.title', 'category2.title'),

'label' => gTxt('categories'),

),

'status' => array(

'column' => array('textpattern.Status'),

'label' => gTxt('status'),

'type' => 'boolean',

),

'author' => array(

'column' => array('textpattern.AuthorID', 'user.RealName'),

'label' => gTxt('author'),

),

'article_image' => array(

'column' => array('textpattern.Image'),

'label' => gTxt('article_image'),

'type' => 'find_in_set',

),

'posted' => array(

'column' => array('textpattern.Posted'),

'label' => gTxt('posted'),

'options' => array('case_sensitive' => true),

),

'lastmod' => array(

'column' => array('textpattern.LastMod'),

'label' => gTxt('modified'),

'options' => array('case_sensitive' => true),

),

)

);

$search->setAliases('status', $statuses);

list($criteria, $crit, $search_method) = $search->getFilter(array(

'id' => array('can_list' => true),

'title_body_excerpt' => array('always_like' => true),

));

$search_render_options = array('placeholder' => 'search_articles');

$total = (int)getThing("SELECT COUNT(*) FROM $sql_from WHERE $criteria");

$searchBlock =

n . tag(

$search->renderForm('list', $search_render_options),

'div', array(

'class' => 'txp-layout-4col-3span',

'id' => $event . '_control',

)

);

$buttons = array();

if (has_privs('article.edit.own')) {

$buttons[] = sLink('article', '', gTxt('create_article'), 'txp-button');

}

callback_event_ref('articles', 'controls', 'panel', $buttons);

$createBlock = n . tag(implode(n, $buttons), 'div', array('class' => 'txp-control-panel'));

$contentBlock = '';

$paginator = new \Textpattern\Admin\Paginator($event, 'article');

$limit = $paginator->getLimit();

list($page, $offset, $numPages) = pager($total, $limit, $page);

if ($total < 1) {

if ($crit !== '') {

$contentBlock .= graf(

span(null, array('class' => 'ui-icon ui-icon-info')) . ' ' .

gTxt($crit === '' ? 'no_articles_recorded' : 'no_results_found'),

array('class' => 'alert-block information')

);

}

} else {

$rs = safe_query("SELECT " . implode(', ', $fieldlist) .

" FROM $sql_from".

" WHERE $criteria ORDER BY $sort_sql LIMIT $offset, $limit");

if ($rs) {

$common_atts = array(

'event' => 'list',

'step' => 'list',

'is_link' => true,

'dir' => $switch_dir,

'crit' => $crit,

'method' => $search_method,

);

$headings = array();

$headings[] = hCell(

'<label for="select_all" class="txp-accessibility">' . gTxt('toggle_all_selected') . '</label>'.

fInput('checkbox', 'select_all', 0, '', '', '', '', '', 'select_all'),

'', 'class="txp-list-col-multi-edit" scope="col"'

) . column_head(array(

'options' => array('class' => trim('txp-list-col-id' . ('id' == $sort ? " $dir" : ''))),

'value' => 'ID',

'sort' => 'id'

) + $common_atts);

foreach ($fields as $col => $opts) {

if (isset($opts['visible']) && empty($opts['visible'])) {

continue;

}

$headings[] = column_head(array(

'options' => array('class' => trim('txp-list-col-' . (empty($opts['class']) ? $col : $opts['class']) . ($col == $sort ? " $dir" : ''))),

'value' => empty($opts['label']) ? $col : $opts['label'],

'sort' => $col,

) + $common_atts);

}

$contentBlock .= n . tag_start('form', array(

'class' => 'multi_edit_form',

'id' => 'articles_form',

'name' => 'longform',

'method' => 'post',

'action' => 'index.php',

)) .

n . tag_start('div', array(

'class' => 'txp-listtables',

'tabindex' => 0,

'aria-label' => gTxt('list'),

)) .

n . tag_start('table', array('class' => 'txp-list')) .

n . tag_start('thead') .

tr(implode(n, $headings)) .

n . tag_end('thead');

include_once txpath . '/publish/taghandlers.php';

$can_preview = has_privs('article.preview');

$contentBlock .= n . tag_start('tbody');

$validator = new Validator();

while ($a = nextRow($rs)) {

extract($a);

if ($Title === '') {

$Title = '<em>' . eLink('article', 'edit', compact('ID'), $ID, gTxt('untitled'), '', '', gTxt('edit')) . '</em>';

} else {

$Title = eLink('article', 'edit', compact('ID'), $ID, $Title, '', '', gTxt('edit'));

}

// Valid section and categories?

$validator->setConstraints(array(new SectionConstraint($Section)));

$vs = $validator->validate() ? '' : ' error';

$validator->setConstraints(array(new CategoryConstraint($Category1, array('type' => 'article'))));

$vc[1] = $validator->validate() ? '' : ' error';

$validator->setConstraints(array(new CategoryConstraint($Category2, array('type' => 'article'))));

$vc[2] = $validator->validate() ? '' : ' error';

$Category1 = ($Category1) ? span(txpspecialchars($category1_title), array('title' => $Category1)) : '';

$Category2 = ($Category2) ? span(txpspecialchars($category2_title), array('title' => $Category2)) : '';

if ($Status == STATUS_LIVE || $Status == STATUS_STICKY) {

$view_url = permlinkurl($a);

} else {

$view_url = $can_preview ? hu . '?id=' . intval($ID) . '.' . urlencode(Txp::get('\Textpattern\Security\Token')->csrf($txp_user)) : '';

}

if (isset($statuses[$Status])) {

$Status = $statuses[$Status];

}

$comments = "($total_comments)";

if ($total_comments) {

$comments = href($comments, array(

'event' => 'discuss',

'step' => 'discuss_list',

'search_method' => 'parent',

'crit' => $ID,

), array('title' => gTxt('manage')));

}

$comment_status = ($Annotate) ? gTxt('on') : gTxt('off');

if ($comments_disabled_after) {

$lifespan = $comments_disabled_after * 86400;

$time_since = time() - $posted;

if ($time_since > $lifespan) {

$comment_status = gTxt('expired');

}

}

$comments =

tag($comment_status, 'span', array('class' => 'comments-status')) . ' ' .

tag($comments, 'span', array('class' => 'comments-manage'));

$contentBlock .= tr(

td(

(

(

($a['Status'] >= STATUS_LIVE and has_privs('article.edit.published'))

or ($a['Status'] >= STATUS_LIVE and $AuthorID === $txp_user and has_privs('article.edit.own.published'))

or ($a['Status'] < STATUS_LIVE and has_privs('article.edit'))

or ($a['Status'] < STATUS_LIVE and $AuthorID === $txp_user and has_privs('article.edit.own'))

)

? '<label for="bulk_select-' . $ID . '" class="txp-accessibility">' . gTxt('bulk_select_row', array('{id}' => $ID)) . '</label>'.

fInput('checkbox', 'selected[]', $ID, 'checkbox', '', '', '', '', 'bulk_select-'.$ID)

: ''

), '', 'txp-list-col-multi-edit'

) .

hCell(

eLink('article', 'edit', compact('ID'), $ID, $ID, '', '', gTxt('edit')),

'',

array(

'class' => '',

'scope' => 'row',

)

) .

td(

$Title, '', 'txp-list-col-title'

) .

td(

gTime($posted), '', 'txp-list-col-posted date' . ($posted < time() ? '' : ' unpublished')

) .

td(

gTime($lastmod), '', 'txp-list-col-lastmod date' . ($posted === $lastmod ? ' not-modified' : '')

) .

td(

($expires ? gTime($expires) : ''), '', 'txp-list-col-expires date'

) .

td(

span(txpspecialchars($section_title), array('title' => $Section)), '', 'txp-list-col-section' . $vs

) .

td(

$Category1, '', 'txp-list-col-category1 category' . $vc[1]

) .

td(

$Category2, '', 'txp-list-col-category2 category' . $vc[2]

) .

td($view_url ?

href($Status, $view_url, join_atts(array(

'rel' => 'external',

'target' => '_blank',

'title' => gTxt('view'),

), TEXTPATTERN_STRIP_EMPTY)) : $Status, '', 'txp-list-col-status') .

(

$show_authors

? td(span(txpspecialchars($RealName), array('title' => $AuthorID)), '', 'txp-list-col-author name')

: ''

) .

(

$use_comments

? td($comments, '', 'txp-list-col-comments')

: ''

).

pluggable_ui('articles_ui', 'list.row', '', $a)

);

}

$contentBlock .= n . tag_end('tbody') .

n . tag_end('table') .

n . tag_end('div') . // End of .txp-listtables.

list_multiedit_form($page, $sort, $dir, $crit, $search_method) .

tInput() .

n . tag_end('form');

}

}

$pageBlock = $paginator->render() .

nav_form('list', $page, $numPages, $sort, $dir, $crit, $search_method, $total, $limit);

$table = new \Textpattern\Admin\Table($event);

echo $table->render(compact('total', 'crit'), $searchBlock, $createBlock, $contentBlock, $pageBlock);

{

global $event;

Txp::get('\Textpattern\Admin\Paginator', $event, 'article')->change();

list_list();

{

global $statuses, $all_cats, $all_authors, $all_sections;

if ($all_cats) {

$category1 = treeSelectInput('Category1', $all_cats, '');

$category2 = treeSelectInput('Category2', $all_cats, '');

} else {

$category1 = $category2 = '';

}

$sections = $all_sections ? selectInput('Section', $all_sections, '', true) : '';

$comments = onoffRadio('Annotate', get_pref('comments_on_default'));

$statusa = has_privs('article.publish') ? $statuses : array_diff_key($statuses, array(STATUS_LIVE => 'live', STATUS_STICKY => 'sticky'));

$status = selectInput('Status', $statusa, '', true);

$authors = $all_authors ? selectInput('AuthorID', $all_authors, '', true) : '';

$methods = array(

'changestatus' => array(

'label' => gTxt('changestatus'),

'html' => $status,

),

'changesection' => array(

'label' => gTxt('changesection'),

'html' => $sections,

),

'changecategory1' => array(

'label' => gTxt('changecategory1'),

'html' => $category1,

),

'changecategory2' => array(

'label' => gTxt('changecategory2'),

'html' => $category2,

),

'changecomments' => array(

'label' => gTxt('changecomments'),

'html' => $comments,

),

'changeauthor' => array(

'label' => gTxt('changeauthor'),

'html' => $authors,

),

'duplicate' => gTxt('duplicate'),

'delete' => gTxt('delete'),

);

if (!$all_cats) {

unset($methods['changecategory1'], $methods['changecategory2']);

}

if (has_single_author('textpattern', 'AuthorID') || !has_privs('article.edit')) {

unset($methods['changeauthor']);

}

if (!has_privs('article.delete.own') && !has_privs('article.delete')) {

unset($methods['delete']);

}

return multi_edit($methods, 'list', 'list_multi_edit', $page, $sort, $dir, $crit, $search_method);

{

global $txp_user, $statuses, $all_cats, $all_authors, $all_sections;

extract(psa(array(

'selected',

'edit_method',

)));

if (!$selected || !is_array($selected)) {

return list_list();

}

// Fetch ids and remove bogus (false) entries to prevent SQL syntax errors being thrown.

$selected = array_map('assert_int', $selected);

$selected = array_filter($selected);

// Empty entry to permit clearing the categories.

$categories = array('');

foreach ($all_cats as $row) {

$categories[] = $row['name'];

}

$allowed = array();

$field = $value = '';

switch ($edit_method) {

// Delete.

case 'delete':

if (!has_privs('article.delete')) {

if ($selected && has_privs('article.delete.own')) {

$allowed = safe_column_num(

"ID",

'textpattern',

"ID IN (" . join(',', $selected) . ") AND AuthorID = '" . doSlash($txp_user) . "'"

);

}

$selected = $allowed;

}

// @todo Post-delete callback should match event/step here when hooks are standardised.

callback_event('articles', 'multi_edit.' . $edit_method, 1, compact('selected', 'field', 'value'));

if ($selected && safe_delete('textpattern', "ID IN (" . join(',', $selected) . ")")) {

callback_event('articles_deleted', '', 0, $selected);

callback_event('multi_edited.articles', 'delete', 0, compact('selected', 'field', 'value'));

safe_delete('txp_discuss', "parentid IN (" . join(',', $selected) . ")");

update_lastmod('articles_deleted', $selected);

now('posted', true);

now('expires', true);

return list_list(gTxt('articles_deleted', array('{list}' => join(', ', $selected))));

}

return list_list();

break;

// Change author.

case 'changeauthor':

$value = ps('AuthorID');

if (has_privs('article.edit') && isset($all_authors[$value])) {

$field = 'AuthorID';

}

break;

// Change category1.

case 'changecategory1':

$value = ps('Category1');

if (in_array($value, $categories, true)) {

$field = 'Category1';

}

break;

// Change category2.

case 'changecategory2':

$value = ps('Category2');

if (in_array($value, $categories, true)) {

$field = 'Category2';

}

break;

// Change comment status.

case 'changecomments':

$field = 'Annotate';

$value = (int) ps('Annotate');

break;

// Change section.

case 'changesection':

$value = ps('Section');

if (isset($all_sections[$value])) {

$field = 'Section';

}

break;

// Change status.

case 'changestatus':

$value = (int) ps('Status');

if (array_key_exists($value, $statuses)) {

$field = 'Status';

}

if (!has_privs('article.publish') && $value >= STATUS_LIVE) {

$value = STATUS_PENDING;

}

break;

}

if ($selected) {

$selected = safe_rows(

"ID, AuthorID, Status",

'textpattern',

"ID IN (" . join(',', $selected) . ")"

);

}

foreach ($selected as $item) {

if (can_modify($item)) {

$allowed[] = $item['ID'];

}

}

$selected = $allowed;

// @todo Post-edit callback should match event/step here when hooks are standardised.

callback_event('articles', 'multi_edit.' . $edit_method, 1, compact('selected', 'field', 'value'));

if ($selected) {

$message = gTxt('articles_modified', array('{list}' => join(', ', $selected)));

if ($edit_method === 'duplicate') {

$rs = safe_rows_start("*", 'textpattern', "ID IN (" . join(',', $selected) . ")");

$created = $selected = array();

if ($rs) {

while ($a = nextRow($rs)) {

$pid = $a['ID'];

$title = $a['Title'];

unset($a['ID'], $a['comments_count']);

$a['uid'] = md5(uniqid(rand(), true));

$a['AuthorID'] = $txp_user;

$a['LastModID'] = $txp_user;

$a['Status'] = ($a['Status'] >= STATUS_LIVE) ? STATUS_DRAFT : $a['Status'];

foreach ($a as $name => &$value) {

if ($name == 'Expires' && !$value) {

$value = "Expires = NULL";

} else {

$value = "`$name` = '" . doSlash($value) . "'";

}

}

if ($id = (int) safe_insert('textpattern', join(',', $a))) {

$url_title = stripSpace($title . " ($id)", 1);

$created[$id] = $url_title;

$selected[$id] = $pid;

}

}

if ($created) {

$ids = implode(',', array_keys($created));

$titles = quote_list($created, ',');

safe_update(

'textpattern',

"Title = CONCAT(Title, ' (', ID, ')'),

feed_time = NOW()",

"ID IN ($ids)"

);

}

}

$message = gTxt('articles_duplicated', array('{list}' => join(', ', $selected)));

} elseif (!$field || safe_update('textpattern', "$field = '" . doSlash($value) . "'", "ID IN (" . join(',', $selected) . ")") === false) {

return list_list();

}

update_lastmod('articles_updated', compact('selected', 'field', 'value'));

now('posted', true);

now('expires', true);

callback_event('multi_edited.articles', $edit_method, 0, compact('selected', 'field', 'value'));

return list_list($message);

}

return list_list();