blogadmin.php

<?php
	//include our admin functions
	include("../lib/blog/admin.lib.php");
	$admin = new admin();

	//make our command list from the path
	$request=$pathlist;
array_shift($request);
array_shift($request);
array_shift($request);

$smarty->assign("title", "Blog Admin");

	if ($session->loggedin) $admin->menu(); else {
		header("Location: {$admin->httpPath}");
		exit;
	}

ob_start();
		//alter the debuging state on request
		if ($request[0] == "debug") {
			$_SESSION[debug] = $request[1];
		}
		//if logged in
		if($session->loggedin && blogger($session->username)) {
				//call appropriate functions..
				switch (array_shift($request)) {
					case "newentry":
						$admin->printEntryForm() ;
						$smarty->assign("subselect", _("Write new entry"));
						if ($admin->blog->editor) $smarty->assign("action", "edit");
						break;
					case "Settings":
						if ($_REQUEST['submit'] == "Save Settings") {
							$admin->updateSettings();
						} else {
							$admin->printSettingsForm() ;
						}
						$smarty->assign("subselect", _("Settings"));
						break;
					case "postentry":
						$admin->postEntry() ;
						break;
					case "postupdate":
						$admin->updateEntry(array_shift($request)) ;
						break;
					case "update":
						$admin->updateForm(array_shift($request)) ;
						$smarty->assign("subselect", _("Edit entries"));
						if ($admin->blog->editor) $smarty->assign("action", "edit");
						break;
					case "showentries":
						$admin->printEntries() ;
						$smarty->assign("subselect", _("Edit entries"));
						break;
					case "deleteentry":
						$admin->deleteEntry(array_shift($request)) ;
						break;
					case "confirmdeleteentries":
						$admin->confirmDeleteEntries();
						break;
					case "deleteentries":
						$admin->deleteEntries();
						break;
					case "moderatecomments":
						$admin->printComments();
						$admin->printAuthorisedUsers();
						$comments=_("Comments");
						$result = $BlogDB->GetOne("SELECT count(comments.id) from comments join entries on comments.post = entries.id where moderated = false and entries.user_id = ".$admin->id.";");
						if($result){