From decf2308ff1906202d658913062f21af1b1c5495 Mon Sep 17 00:00:00 2001
From: Jeff Teunissen <deek@d2dc.net>
Date: Sun, 18 Mar 2007 04:38:53 +0000
Subject: [PATCH]  Dammit.

---
 news_edit.php |  4 ++--
 plan_add.php  | 53 +++++++++++++++++++++++++++++++++++++++++++++++++++
 plans.php     |  5 -----
 3 files changed, 55 insertions(+), 7 deletions(-)
 create mode 100644 plan_add.php

diff --git a/news_edit.php b/news_edit.php
index c0ddfe6..e5aa649 100644
--- a/news_edit.php
+++ b/news_edit.php
@@ -66,8 +66,8 @@
 	need ('boxes sql table');
 
 	global $newsID;
-	global $newsText = $_POST['newsText'];
-	global $newsUser = $_POST['newsUser'];
+	global $newsText
+	global $newsUser
 
 	$newsID = $_GET['newsID'];
 	$newsText = $_POST['newsText'];
diff --git a/plan_add.php b/plan_add.php
new file mode 100644
index 0000000..2db4298
--- /dev/null
+++ b/plan_add.php
@@ -0,0 +1,53 @@
+<?	// Preamble
+	$pageName = "Post a new Plan Entry";
+	$need = 'auth';
+	require "parts/preamble.php";	// Load most of document
+
+	need ("boxes news");
+
+	// set up local vars
+	$mode = $_REQUEST['mode'];
+	$planSubj = $_REQUEST['planSubj'];
+	$planText = $_REQUEST['planText'];
+	$user = $userInfo['u_displayname'];
+
+	if ($planText && $planSubj && $mode == "Post") {
+		need ('sql');
+
+		$planText = addSlashes ($planText);
+
+		if ($conn = mysql_connect (sqlHost, sqlRWUser, sqlRWPass)) {
+			$query = 'INSERT INTO plans (p_date, p_user, p_subject, p_plan) VALUES ('
+					."NOW(), '$user', '$planSubj', '$planText')";
+
+			if ($result = mysql_db_query (sqlDB, $query, $conn)
+				&& $numRows = mysql_affected_rows ($conn)) {
+				echo '<P>Your plan entry has been posted successfully.</P>';
+			} else {
+				echo '<P>Somebody screwed up, MySQL said &quot;' . mysql_error () . '&quot;. Bug a project admin or somethin\' eh?</P>';
+			}
+			mysql_close ($conn);
+		} else {
+			echo '<P>Somebody screwed up, MySQL said &quot;' . mysql_error () . '&quot;. Bug a project admin or somethin\' eh?</P>';
+		}
+	} else {
+		$date = date ('d M Y');
+
+		newsBoxOpen ();
+		if ($planText) {
+			newsBoxTitle ("Latest Plan for $user (Preview)");
+			printNews ($date, $user, stripSlashes ($planText));
+		}
+		newsBoxTitle ("Post Plan Entry");
+		$form = '<FORM action="' . thisURL . '" method="post">'
+				.	'Subject: <INPUT type="text" name="planSubj" size="59" value="'. stripSlashes ($planSubj) .'"><BR>'
+				.	'<TEXTAREA name="planText" rows="25" cols="64">'
+				.		stripSlashes ($planText)
+				.	'</TEXTAREA><BR>'
+				.	'<INPUT align="center" type="submit" name="mode" value="Post"></INPUT>'
+				.	'<INPUT align="center" type="submit" name="mode" value="Preview"></INPUT>'
+				.'</FORM>';
+		printNews ($date, $user, $form);
+		newsBoxClose ();
+	}
+?>
diff --git a/plans.php b/plans.php
index d27c2f6..c079bb0 100644
--- a/plans.php
+++ b/plans.php
@@ -4,7 +4,6 @@
 	$currPage = "plans";				// Name of the page, for the menu
 	require "parts/preamble.php";		// Load most of document
 ?>	
-<!--SEARCHME-->
 <TABLE width="100%" cellSpacing="0" cellPadding="0" border="0">
 	<TR vAlign="top">
 		<TD colSpan="2"><?				// News display
@@ -16,7 +15,3 @@
 		?></TD>
 	</TR>
 </TABLE>	
-<!--NOSEARCH-->
-<?
-	require "parts/postamble.php";		// Finish this sucker up
-?>