From febd6409637c28f2dcc03f878d1ad2ce4b51a9d7 Mon Sep 17 00:00:00 2001
From: henyxia <henyxia@live.fr>
Date: Tue, 10 Feb 2015 22:45:38 +0100
Subject: [PATCH] News creation done

---
 js/crep.js   | 10 ++++++++++
 sendNews.php | 18 ++++++++++++++++++
 2 files changed, 28 insertions(+), 0 deletions(-)
 create mode 100644 sendNews.php

diff --git a/js/crep.js b/js/crep.js
index 1dd7fc7..dcb1ae4 100644
--- a/js/crep.js
+++ b/js/crep.js
@@ -24,6 +24,16 @@ function deleteNewNews()
 		$("#newNews").remove();
 }
 
+function validNewNews()
+{
+	var ret;
+	ret = $.post( "sendNews.php", {title: Base64.encode($("#newNews")[0].childNodes[0].childNodes[0].childNodes[0].value), content: Base64.encode($("#newNews")[0].childNodes[1].childNodes[0].value)});
+	if(ret == true)
+		document.location.reload();
+	else
+		alert("Erreur durant la transmission de la news");
+}
+
 function addNews()
 {
 	var elem = "<div id=\"newNews\" class=\"panel panel-default\"><div class=\"panel-heading\"><h3 class=\"panel-title\"><input type=text class=\"form-control\" placeholder=\"Nouvel article\"/></h3></div><div class=\"panel-body\"><textarea class=\"form-control\"></textarea></div><div class=\"panel-footer\"><p><button type=\"button\" onClick=\"validNewNews();\" class=\"btn btn-success\">Success</button>&nbsp;<button type=\"button\" onClick=\"deleteNewNews();\" class=\"btn btn-danger\">Annuler</button></p></div></div>";
diff --git a/sendNews.php b/sendNews.php
new file mode 100644
index 0000000..eb20586
--- /dev/null
+++ b/sendNews.php
@@ -0,0 +1,18 @@
+<?php
+require_once("creds.php");
+
+if(isset($_SESSION["admin"])&&$_SESSION["admin"])
+{
+	$link = mysql_connect(__MYSQL_HOSTNAME__, __MYSQL_USERNAME__, __MYSQL_PASSWORD__)
+		or die("Impossible de se connecter : " . mysql_error());
+	if(!mysql_select_db('crep', $link))
+	{
+		echo 'Selection de la base de donnees impossible';
+		exit;
+	}
+	$requete = "INSERT INTO  `crep`.`news` (`pk` ,`fk_author` ,`created` ,`title` ,`content`) VALUES (NULL ,  '2',  CURDATE(), ".base64_decode($_POST["title"]).", ".base64_decode($_POST["content"]).")";
+	$resultat = mysql_query($requete);
+}
+else
+	die("Nop, only admins here !");
+
--
libgit2 0.21.2