<?php
if (!defined('BASE_DIR')) { exit(header($_SERVER['SERVER_PROTOCOL'] . ' 404 Not Found', true)); }

$obEngine->addTitleHtml('Новости');

if (isset($_SESSION['user_id']) && $users_info['status'] == 1)
{
  if (isset($_POST['title'])) 
  {
    $title = clear($_POST['title']);
    $text = clear($_POST['text']);
    
    $mysqli->query("INSERT INTO `".PREFIX."_news` 
                                      (                                      
                                       `time_add`,
                                       `title`,
                                       `text`                                                                                                          
                                      )
                                      VALUES
                                      (                                                                                                                                                          
                                       NOW(),
                                       '".$title."', 
                                       '".$text."'                                                                                                                          
                                      )");
    
    exit(header('Location: /news.php'));    
  }    
}

?>
<div class="col-lg-8">
    <h5 class="page-title">Новости</h5>
    <?php
    $query = $mysqli->query("SELECT * FROM `".PREFIX."_news`");
    if ($query->num_rows)
    {
        while ($res = $query->fetch_assoc())
        {
            ?>
            <div class="card mb-4">
                <div class="card-body">
                    <h5 class="card-title"><b><?php echo $res['title']; ?></b> <div class="float-right"><?php echo date("d.m.Y", strtotime($res['time_add'])); ?></div></h5>
                    <p><?php echo $res['text']; ?></p>
                </div>
            </div>
            <?php
        }
    }
    else
    {
        ?>
        <div class="card mb-4">
            <div class="card-body">
                <h5 class="card-title mb-0">Новостей нет</h5>
            </div>
        </div>
        <?php
    }
    if (isset($_SESSION['user_id']) && $users_info['status'] == 1)
    {
        ?>
        <div class="card">
            <div class="card-body">
                <form style="margin-top: 30px;" name="form1" action="?mode=add" method="post">
                    <div class="form-group">
                        <label><b style="color:red;">*</b> Заголовок:</label>
                        <input type="text" name="title" maxlength="200" class="form-control">
                    </div>
                    <div class="form-group">
                        <label><b style="color:red;">*</b> Новость:</label>
                        <textarea name="text" class="form-control" cols="40" rows="6" maxlength="1000"></textarea>
                    </div>
                    <button class="btn btn-default" style="float:right;">Добавить</button>
                </form>
            </div>
        </div>
        <?php
    }
    ?>
</div>

<?php include 'module/user_menu.php'; ?>