Файл: admin/theme.php
Строк: 89
<?php 
/**
 * Theme
 *
 * @package GetSimple
 * @subpackage Theme
 */
# setup inclusions
$load['plugin'] = true;
include('inc/common.php');
# variable settings
login_cookie_check();
$path             = GSDATAOTHERPATH; 
$file             = "website.xml"; 
$theme_options     = '';
# was the form submitted?
if( (isset($_POST['submitted'])) && (isset($_POST['template'])) ) {
    
    # check for csrf
    if (!defined('GSNOCSRF') || (GSNOCSRF == FALSE) ) {
        $nonce = $_POST['nonce'];    
        if(!check_nonce($nonce, "activate")) {
            die("CSRF detected!");
        }
    }
    
    # get passed value from form
    $TEMPLATE = $_POST['template'];
    
    # backup old website.xml file
    $bakpath = GSBACKUPSPATH.'other/';
    createBak($file, $path, $bakpath);
    
    # udpate website.xml file with new theme
    $xml = new SimpleXMLExtended('<item></item>');
    $note = $xml->addChild('SITENAME');
    $note->addCData($SITENAME);
    $note = $xml->addChild('SITEURL');
    $note->addCData($SITEURL);
    $note = $xml->addChild('TEMPLATE');
    $note->addCData($TEMPLATE);
    $xml->addChild('PRETTYURLS', $PRETTYURLS);
    $xml->addChild('PERMALINK', $PERMALINK);
    XMLsave($xml, $path . $file);
    
    $success = i18n_r('THEME_CHANGED');
}
# get available themes (only look for folders)
$themes_handle = opendir(GSTHEMESPATH) or die("Unable to open ".GSTHEMESPATH);
while ($file = readdir($themes_handle)) {
    $curpath = GSTHEMESPATH . $file;
    if( is_dir($curpath) && $file != "." && $file != ".." ) {
        $sel="";
        if (file_exists($curpath.'/template.php')){
            if ($TEMPLATE == $file)    { 
                $sel="selected";
            }
            $theme_options .= '<option '.$sel.' value="'.$file.'" >'.$file.'</option>';
        }
    }
}
get_template('header', cl($SITENAME).' » '.i18n_r('THEME_MANAGEMENT')); 
?>
    
<?php include('template/include-nav.php'); ?>
<div class="bodycontent clearfix">
    
    <div id="maincontent">
        <div class="main">
        <h3><?php i18n('CHOOSE_THEME');?></h3>
        <form action="<?php myself(); ?>" method="post" accept-charset="utf-8" >
        <input id="nonce" name="nonce" type="hidden" value="<?php echo get_nonce("activate"); ?>" />            
        <?php    
            $theme_path = str_replace(GSROOTPATH,'',GSTHEMESPATH);
            if ( $SITEURL ) {    
                echo '<p><b>'.i18n_r('THEME_PATH').':  </b> <code>'.$SITEURL.$theme_path.$TEMPLATE.'/</code></p>';
            }
        ?>
        <p><select id="theme_select" class="text" style="width:250px;" name="template" >
                <?php echo $theme_options; ?>
            </select>   <input class="submit" type="submit" name="submitted" value="<?php i18n('ACTIVATE_THEME');?>" /></p>
        </form>
        <?php
             if (file_exists('../theme/'.$TEMPLATE.'/images/screenshot.png')) { 
                echo '<p><img id="theme_preview" style="border:2px solid #333;" src="../'.$theme_path.$TEMPLATE.'/images/screenshot.png" alt="'.i18n_r('THEME_SCREENSHOT').'" /></p>';
                echo '<span id="theme_no_img" style="visibility:hidden"><p><em>'.i18n_r('NO_THEME_SCREENSHOT').'</em></p></span>';                
            } else {
                echo '<p><img id="theme_preview" style="visiblity:hidden;border:2px solid #333;" src="../'.$theme_path.$TEMPLATE.'/images/screenshot.png" alt="'.i18n_r('THEME_SCREENSHOT').'" /></p>';                
                echo '<span id="theme_no_img"><p><em>'.i18n_r('NO_THEME_SCREENSHOT').'</em></p></span>';
            }
            exec_action('theme-extras');
        ?>
            
        </div>
    
    </div>
    
    <div id="sidebar" >
        <?php include('template/sidebar-theme.php'); ?>
    </div>
</div>
<?php get_template('footer'); ?>