<!--#include file="../Connections/connDUarticleAdmin.asp" -->
<%
'****************************************************************************************
'**  Copyright Notice                                                               
'**  Copyright 2003 DUware All Rights Reserved.                                
'**  This program is free software; you can modify (at your own risk) any part of it 
'**  under the terms of the License that accompanies this software and use it both 
'**  privately and commercially.
'**  All copyright notices must remain in tacked in the scripts and the 
'**  outputted HTML.
'**  You may use parts of this program in your own private work, but you may NOT
'**  redistribute, repackage, or sell the whole or any part of this program even 
'**  if it is modified or reverse engineered in whole or in part without express 
'**  permission from the author.
'**  You may not pass the whole or any part of this application off as your own work.
'**  All links to DUware and powered by logo's must remain unchanged and in place
'**  and must remain visible when the pages are viewed unless permission is first granted
'**  by the copyright holder.
'**  This program is distributed in the hope that it will be useful,
'**  but WITHOUT ANY WARRANTY; without even the implied warranty of
'**  MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR ANY OTHER 
'**  WARRANTIES WHETHER EXPRESSED OR IMPLIED.
'**  No official support is available for this program but you may post support questions at: -
'**  http://www.duware.com/support
'****************************************************************************************
%>

<%
' *** Restrict Access To Page: Grant or deny access to this page
MM_authorizedUsers=""
MM_authFailedURL="default.asp"
MM_grantAccess=false
If Session("MM_Username") <> "" Then
  If (true Or CStr(Session("MM_UserAuthorization"))="") Or _
         (InStr(1,MM_authorizedUsers,Session("MM_UserAuthorization"))>=1) Then
    MM_grantAccess = true
  End If
End If
If Not MM_grantAccess Then
  MM_qsChar = "?"
  If (InStr(1,MM_authFailedURL,"?") >= 1) Then MM_qsChar = "&"
  MM_referrer = Request.ServerVariables("URL")
  if (Len(Request.QueryString()) > 0) Then MM_referrer = MM_referrer & "?" & Request.QueryString()
  MM_authFailedURL = MM_authFailedURL & MM_qsChar & "accessdenied=" & Server.URLEncode(MM_referrer)
  Response.Redirect(MM_authFailedURL)
End If
%>


<%
' *** Edit Operations: declare variables

Dim MM_editAction
Dim MM_abortEdit
Dim MM_editQuery
Dim MM_editCmd

Dim MM_editConnection
Dim MM_editTable
Dim MM_editRedirectUrl
Dim MM_editColumn
Dim MM_recordId

Dim MM_fieldsStr
Dim MM_columnsStr
Dim MM_fields
Dim MM_columns
Dim MM_typeArray
Dim MM_formVal
Dim MM_delim
Dim MM_altVal
Dim MM_emptyVal
Dim MM_i

MM_editAction = CStr(Request.ServerVariables("SCRIPT_NAME"))
If (Request.QueryString <> "") Then
  MM_editAction = MM_editAction & "?" & Request.QueryString
End If

' boolean to abort record edit
MM_abortEdit = false

' query string to execute
MM_editQuery = ""
%>
<!--#include file="../inc_config.asp" -->
<%
' *** Update Record: set variables

If (CStr(Request("MM_update")) = "submit" And CStr(Request("MM_recordId")) <> "") Then

  MM_editConnection = MM_connDUarticle_STRING
  MM_editTable = "BARZELLETTE"
  MM_editColumn = "ART_ID"
  MM_recordId = "" + Request.Form("MM_recordId") + ""
  MM_editRedirectUrl = "articles.asp"
  MM_fieldsStr  = "ART_TYPE|value|ART_NAME|value|ART_DESCRIPTION|value|ART_DATED|value"
  MM_columnsStr = "ART_TYPE|none,none,NULL|ART_NAME|',none,''|ART_DESCRIPTION|',none,''|ART_DATED|',none,NULL"

  ' create the MM_fields and MM_columns arrays
  MM_fields = Split(MM_fieldsStr, "|")
  MM_columns = Split(MM_columnsStr, "|")
  
  ' set the form values
  For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2
    MM_fields(MM_i+1) = CStr(Request.Form(MM_fields(MM_i)))
  Next

  ' append the query string to the redirect URL
  If (MM_editRedirectUrl <> "" And Request.QueryString <> "") Then
    If (InStr(1, MM_editRedirectUrl, "?", vbTextCompare) = 0 And Request.QueryString <> "") Then
      MM_editRedirectUrl = MM_editRedirectUrl & "?" & Request.QueryString
    Else
      MM_editRedirectUrl = MM_editRedirectUrl & "&" & Request.QueryString
    End If
  End If

End If
%>
<%
' *** Delete Record: declare variables

if (CStr(Request("MM_delete")) = "delete" And CStr(Request("MM_recordId")) <> "") Then

  MM_editConnection = MM_connDUarticle_STRING
  MM_editTable = "BARZELLETTE"
  MM_editColumn = "ART_ID"
  MM_recordId = "" + Request.Form("MM_recordId") + ""
  MM_editRedirectUrl = "articles.asp"

  ' append the query string to the redirect URL
  If (MM_editRedirectUrl <> "" And Request.QueryString <> "") Then
    If (InStr(1, MM_editRedirectUrl, "?", vbTextCompare) = 0 And Request.QueryString <> "") Then
      MM_editRedirectUrl = MM_editRedirectUrl & "?" & Request.QueryString
    Else
      MM_editRedirectUrl = MM_editRedirectUrl & "&" & Request.QueryString
    End If
  End If
  
End If
%>
<%
' *** Update Record: construct a sql update statement and execute it

If (CStr(Request("MM_update")) <> "" And CStr(Request("MM_recordId")) <> "") Then

  ' create the sql update statement
  MM_editQuery = "update " & MM_editTable & " set "
  For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2
    MM_formVal = MM_fields(MM_i+1)
    MM_typeArray = Split(MM_columns(MM_i+1),",")
    MM_delim = MM_typeArray(0)
    If (MM_delim = "none") Then MM_delim = ""
    MM_altVal = MM_typeArray(1)
    If (MM_altVal = "none") Then MM_altVal = ""
    MM_emptyVal = MM_typeArray(2)
    If (MM_emptyVal = "none") Then MM_emptyVal = ""
    If (MM_formVal = "") Then
      MM_formVal = MM_emptyVal
    Else
      If (MM_altVal <> "") Then
        MM_formVal = MM_altVal
      ElseIf (MM_delim = "'") Then  ' escape quotes
        MM_formVal = "'" & Replace(MM_formVal,"'","''") & "'"
      Else
        MM_formVal = MM_delim + MM_formVal + MM_delim
      End If
    End If
    If (MM_i <> LBound(MM_fields)) Then
      MM_editQuery = MM_editQuery & ","
    End If
    MM_editQuery = MM_editQuery & MM_columns(MM_i) & " = " & MM_formVal
  Next
  MM_editQuery = MM_editQuery & " where " & MM_editColumn & " = " & MM_recordId

  If (Not MM_abortEdit) Then
    ' execute the update
    Set MM_editCmd = Server.CreateObject("ADODB.Command")
    MM_editCmd.ActiveConnection = MM_editConnection
    MM_editCmd.CommandText = MM_editQuery
    MM_editCmd.Execute
    MM_editCmd.ActiveConnection.Close

    If (MM_editRedirectUrl <> "") Then
      Response.Redirect(MM_editRedirectUrl)
    End If
  End If

End If
%>
<%
' *** Delete Record: construct a sql delete statement and execute it

If (CStr(Request("MM_delete")) <> "" And CStr(Request("MM_recordId")) <> "") Then

  ' create the sql delete statement
  MM_editQuery = "delete from " & MM_editTable & " where " & MM_editColumn & " = " & MM_recordId

  If (Not MM_abortEdit) Then
    ' execute the delete
    Set MM_editCmd = Server.CreateObject("ADODB.Command")
    MM_editCmd.ActiveConnection = MM_editConnection
    MM_editCmd.CommandText = MM_editQuery
    MM_editCmd.Execute
    MM_editCmd.ActiveConnection.Close

    If (MM_editRedirectUrl <> "") Then
      Response.Redirect(MM_editRedirectUrl)
    End If
  End If

End If
%>


<%
Dim rsType
Dim rsType_numRows

Set rsType = Server.CreateObject("ADODB.Recordset")
rsType.ActiveConnection = MM_connDUarticle_STRING
rsType.Source = "SELECT * FROM BARZELLETTE_TYPES ORDER BY TYPE_NAME ASC"
rsType.CursorType = 0
rsType.CursorLocation = 2
rsType.LockType = 1
rsType.Open()

rsType_numRows = 0
%>
<%
Dim rsEdit__MMColParam
rsEdit__MMColParam = "1"
If (Request.QueryString("iArt") <> "") Then 
  rsEdit__MMColParam = Request.QueryString("iArt")
End If
%>
<%
Dim rsEdit
Dim rsEdit_numRows

Set rsEdit = Server.CreateObject("ADODB.Recordset")
rsEdit.ActiveConnection = MM_connDUarticle_STRING
rsEdit.Source = "SELECT * FROM BARZELLETTE WHERE ART_ID = " + Replace(rsEdit__MMColParam, "'", "''") + ""
rsEdit.CursorType = 0
rsEdit.CursorLocation = 2
rsEdit.LockType = 1
rsEdit.Open()

rsEdit_numRows = 0
%>

<SCRIPT RUNAT=SERVER LANGUAGE=VBSCRIPT>	
function DoTrimProperly(str, nNamedFormat, properly, pointed, points)
  dim strRet
  strRet = Server.HTMLEncode(str)
  strRet = replace(strRet, vbcrlf,"")
  strRet = replace(strRet, vbtab,"")
  If (LEN(strRet) > nNamedFormat) Then
    strRet = LEFT(strRet, nNamedFormat)			
    If (properly = 1) Then					
      Dim TempArray								
      TempArray = split(strRet, " ")	
      Dim n
      strRet = ""
      for n = 0 to Ubound(TempArray) - 1
        strRet = strRet & " " & TempArray(n)
      next
    End If
    If (pointed = 1) Then
      strRet = strRet & points
    End If
  End If
  DoTrimProperly = strRet
End Function
</SCRIPT>
<link href="../assets/DUarticle.css" rel="stylesheet" type="text/css">
<script language="JavaScript" type="text/JavaScript">
<!--
function MM_findObj(n, d) { //v4.01
  var p,i,x;  if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
    d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
  if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
  for(i=0;!x&&d.layers&&i<d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
  if(!x && d.getElementById) x=d.getElementById(n); return x;
}

function MM_validateForm() { //v4.0
  var i,p,q,nm,test,num,min,max,errors='',args=MM_validateForm.arguments;
  for (i=0; i<(args.length-2); i+=3) { test=args[i+2]; val=MM_findObj(args[i]);
    if (val) { nm=val.name; if ((val=val.value)!="") {
      if (test.indexOf('isEmail')!=-1) { p=val.indexOf('@');
        if (p<1 || p==(val.length-1)) errors+='- '+nm+' must contain an e-mail address.\n';
      } else if (test!='R') { num = parseFloat(val);
        if (isNaN(val)) errors+='- '+nm+' must contain a number.\n';
        if (test.indexOf('inRange') != -1) { p=test.indexOf(':');
          min=test.substring(8,p); max=test.substring(p+1);
          if (num<min || max<num) errors+='- '+nm+' must contain a number between '+min+' and '+max+'.\n';
    } } } else if (test.charAt(0) == 'R') errors += '- '+nm+' is required.\n'; }
  } if (errors) alert('The following error(s) occurred:\n'+errors);
  document.MM_returnValue = (errors == '');
}
//-->
</script>
<div class = "links"> 
  <table width="100%" border="0" cellspacing="0" cellpadding="0">
    <tr align="center" valign="middle"> 
      <form ACTION="<%=MM_editAction%>" METHOD="POST" name="submit" id="submit">
        <td> <table border="0" cellpadding="0" cellspacing="1" bgcolor="#666666">
            <tr> 
              <td align="left" valign="top" bgcolor="#FFFFFF"><table align="center" cellpadding="3" cellspacing="3">
                  <% If Request.QueryString("requsername") <> "" Then %>
                  <% End If %>
                  <tr valign="baseline"> 
                    <td align="right" valign="middle" nowrap class="textBold">categoria:</td>
                    <td valign="middle"> <select name="ART_TYPE" class="form" id="select">
                        <%
While (NOT rsType.EOF)
%>
                        <option value="<%=(rsType.Fields.Item("TYPE_ID").Value)%>" <%If (Not isNull((rsEdit.Fields.Item("ART_TYPE").Value))) Then If (CStr(rsType.Fields.Item("TYPE_ID").Value) = CStr((rsEdit.Fields.Item("ART_TYPE").Value))) Then Response.Write("SELECTED") : Response.Write("")%> ><%=(rsType.Fields.Item("TYPE_NAME").Value)%></option>
                        <%
  rsType.MoveNext()
Wend
If (rsType.CursorType > 0) Then
  rsType.MoveFirst
Else
  rsType.Requery
End If
%>
                      </select> <input type="hidden" name="ART_DATED" value="<%= date()%>" size="32"> 
                    </td>
                  </tr>
                  <tr valign="baseline"> 
                    <td align="right" valign="middle" nowrap class="textBold"> 
                      titolo:</td>
                    <td valign="middle"> <input name="ART_NAME" type="text" class="form" value="<%=(rsEdit.Fields.Item("ART_NAME").Value)%>" size="45" maxlength="60"> 
                    </td>
                  </tr>
                  <tr> 
                    <td align="right" valign="top" nowrap class="textBold"> descrizione: 
                    </td>
                    <td valign="baseline"> <textarea name="ART_DESCRIPTION" cols="60" rows="10" class="form"><%=(rsEdit.Fields.Item("ART_DESCRIPTION").Value)%></textarea> 
                    </td>
                  </tr>
                  <tr valign="baseline"> 
                    <td colspan="2" align="center" valign="middle" nowrap> <input name="save" type="submit" class="form" id="submit2" onClick="MM_validateForm('ART_NAME','','R','ART_DESCRIPTION','','R');return document.MM_returnValue" value="Save Changes"> 
                    </td>
                  </tr>
                </table></td>
            </tr>
          </table></td>
        <input type="hidden" name="MM_update" value="submit">
        <input type="hidden" name="MM_recordId" value="<%= rsEdit.Fields.Item("ART_ID").Value %>">
      </form>
    </tr>
    <tr align="center" valign="middle">
     <form action="<%=MM_editAction%>" method="POST" name="delete" id="delete"> <td>
          
          <input name="delete" type="submit" class="form" id="delete" value="Delete Article">
          <input type="hidden" name="MM_delete" value="delete">
          <input type="hidden" name="MM_recordId" value="<%= rsEdit.Fields.Item("ART_ID").Value %>">
        </td></form>
    </tr>
  </table>
  
</div>


<%
rsType.Close()
Set rsType = Nothing
%>
<%
rsEdit.Close()
Set rsEdit = Nothing
%>