APO-Epsilon/apo-website

<?php

$exec_page = True;
$active_page = False;
$public_page = True;
require_once('permissions.php');

function show_exec() {
    include('../mysql_access.php');
    if(isset($_POST['page_text'])) {
        $page_text = $_POST['page_text'];
        $page_text = trim($page_text);
        $page_text = stripslashes($page_text);
        $page_text = $db->real_escape_string($page_text);
        $today = date("Y-m-d");
        $user_id = $_SESSION['sessionID'];
        $sql = "UPDATE editable_pages SET page_text=\"$page_text\", edit_date=\"$today\", edit_id=\"$user_id\" WHERE page_name=\"$_SERVER[PHP_SELF]\";";
        $result = $db->query($sql);
        if($result) {
            echo "Update Successful";
        } else {
            echo "Update Failed";
            echo $db->error;
        }
    }

    $sql = "SELECT page_text FROM editable_pages WHERE page_name=\"$_SERVER[PHP_SELF]\";";
    $result = $db->query($sql);
    $page_array = mysqli_fetch_array($result);
    $page_text = $page_array['page_text'];

    echo <<<END
        <h2>Update the page text below</h2>
        <form method="post" action="$_SERVER[PHP_SELF]">
            <label for="page_text">Page Text Goes Here</label>
            <textarea name="page_text">$page_text</textarea>
            <br>
            <input type="submit" class="button" value="Save Text" />
        </form>
        <script type="text/javascript" src="../js/tinymce/tinymce.min.js"></script>
        <script type="text/javascript">
            tinyMCE.init({
                selector : "textarea",
                content_css : ["../css/foundation.css"],
                height : 350,
                skin : "flatwhite",
                plugins : ["charmap", "fullscreen", "link", "paste", "textcolor", "anchor", "code", "lists", "preview", "searchreplace", "table", "autolink", "contextmenu"],
                contextmenu : "link image inserttable | cell row column deletetable",
                style_formats : [
                    {title : 'Large Heading', format: 'h2'},
                    {title : 'Small Heading', format: 'h3'}, 
                    {title : 'Paragraph', format: 'p'}
                ]
            });
        </script>
END;
}

function show_public() {
    include('../mysql_access.php');
    $sql = "SELECT page_text FROM editable_pages WHERE page_name=\"$_SERVER[PHP_SELF]\";";
    $result = $db->query($sql);
    $page_array = mysqli_fetch_array($result);
    $page_text = $page_array['page_text'];
    echo $page_text;
}

?>