News creation done

henyxia
1 parent a0daba42
Showing 2 changed files with 28 additions and 0 deletions Show diff stats
js/crep.js
sendNews.php
@@ -24,6 +24,16 @@ function deleteNewNews()
 		$("#newNews").remove();
 }
  
+function validNewNews()
+{
+	var ret;
+	ret = $.post( "sendNews.php", {title: Base64.encode($("#newNews")[0].childNodes[0].childNodes[0].childNodes[0].value), content: Base64.encode($("#newNews")[0].childNodes[1].childNodes[0].value)});
+	if(ret == true)
+		document.location.reload();
+	else
+		alert("Erreur durant la transmission de la news");
+}
+
 function addNews()
 {
 	var elem = "<div id=\"newNews\" class=\"panel panel-default\"><div class=\"panel-heading\"><h3 class=\"panel-title\"><input type=text class=\"form-control\" placeholder=\"Nouvel article\"/></h3></div><div class=\"panel-body\"><textarea class=\"form-control\"></textarea></div><div class=\"panel-footer\"><p><button type=\"button\" onClick=\"validNewNews();\" class=\"btn btn-success\">Success</button>&nbsp;<button type=\"button\" onClick=\"deleteNewNews();\" class=\"btn btn-danger\">Annuler</button></p></div></div>";
@@ -0,0 +1,18 @@
+<?php
+require_once("creds.php");
+
+if(isset($_SESSION["admin"])&&$_SESSION["admin"])
+{
+	$link = mysql_connect(__MYSQL_HOSTNAME__, __MYSQL_USERNAME__, __MYSQL_PASSWORD__)
+		or die("Impossible de se connecter : " . mysql_error());
+	if(!mysql_select_db('crep', $link))
+	{
+		echo 'Selection de la base de donnees impossible';
+		exit;
+	}
+	$requete = "INSERT INTO  `crep`.`news` (`pk` ,`fk_author` ,`created` ,`title` ,`content`) VALUES (NULL ,  '2',  CURDATE(), ".base64_decode($_POST["title"]).", ".base64_decode($_POST["content"]).")";
+	$resultat = mysql_query($requete);
+}
+else
+	die("Nop, only admins here !");
+