<?php
$dir=substr(__FILE__, 0, strrpos(__FILE__, "/")+1);

date_default_timezone_set('Europe/Budapest');

include_once("config.inc.php");
include_once($dir."FCKeditor/fckeditor.php") ;

$dat=$dir."data.dat";
$templatefile=$dir."templates.inc.php";
$log=$dir."log.dat.php";
$pathtowysiwyg=$pathtoscript."wysiwyg/";
setlocale(LC_TIME, $datelang);

$me= $_SERVER['PHP_SELF'];
$empty=false;
$now=time();
$version="1.6.4";

$getvars="?a=a";

@session_start();
session_name();

header('Content-Type: text/html;charset=ISO-8859-2');
header('Cache-Control: no-cache');

define('ISO_88592_CODE', array(
	0x0080, 0x0081, 0x0082, 0x0083, 0x0084, 0x0085, 0x0086, 0x0087, 0x0088, 0x0089, 0x008a, 0x008b, 0x008c, 0x008d, 0x008e, 0x008f,
	0x0090, 0x0091, 0x0092, 0x0093, 0x0094, 0x0095, 0x0096, 0x0097, 0x0098, 0x0099, 0x009a, 0x009b, 0x009c, 0x009d, 0x009e, 0x009f,
	0x00a0, 0x0104, 0x02d8, 0x0141, 0x00a4, 0x013d, 0x015a, 0x00a7, 0x00a8, 0x0160, 0x015e, 0x0164, 0x0179, 0x00ad, 0x017d, 0x017b,
	0x00b0, 0x0105, 0x02db, 0x0142, 0x00b4, 0x013e, 0x015b, 0x02c7, 0x00b8, 0x0161, 0x015f, 0x0165, 0x017a, 0x02dd, 0x017e, 0x017c,
	0x0154, 0x00c1, 0x00c2, 0x0102, 0x00c4, 0x0139, 0x0106, 0x00c7, 0x010c, 0x00c9, 0x0118, 0x00cb, 0x011a, 0x00cd, 0x00ce, 0x010e,
	0x0110, 0x0143, 0x0147, 0x00d3, 0x00d4, 0x0150, 0x00d6, 0x00d7, 0x0158, 0x016e, 0x00da, 0x0170, 0x00dc, 0x00dd, 0x0162, 0x00df,
	0x0155, 0x00e1, 0x00e2, 0x0103, 0x00e4, 0x013a, 0x0107, 0x00e7, 0x010d, 0x00e9, 0x0119, 0x00eb, 0x011b, 0x00ed, 0x00ee, 0x010f,
	0x0111, 0x0144, 0x0148, 0x00f3, 0x00f4, 0x0151, 0x00f6, 0x00f7, 0x0159, 0x016f, 0x00fa, 0x0171, 0x00fc, 0x00fd, 0x0163, 0x02d9
));

function escape_html($str) {
	$ret = '';
	$len = strlen($str);
	$pos = 0;
	while ($pos<$len) {
		$c = ord($str[$pos]);
		if ($c<0x80) {
			$ret .= $str[$pos];
			$pos++;
		}
		else if ($c<0xC0) {
			$ret .= '&#'.$c.';';
			$pos++;
		}
		else if ($c<0xE0 && $pos+1<$len && (ord($str[$pos+1])&0xC0)==0x80) {
			$c = (($c&0x1F)<<6) | (ord($str[$pos+1])&0x3F);
			$ret .= '&#'.$c.';';
			$pos += 2;
		}
		else if ($c<0xF0 && $pos+2<$len && (ord($str[$pos+1])&0xC0)==0x80 && (ord($str[$pos+2])&0xC0)==0x80) {
			$c = (($c&0x0F)<<12) | ((ord($str[$pos+1])&0x3F)<<6) | (ord($str[$pos+2])&0x3F);
			$ret .= '&#'.$c.';';
			$pos += 3;
		}
		else if ($c<0xF8 && $pos+3<$len && (ord($str[$pos+1])&0xC0)==0x80 && (ord($str[$pos+2])&0xC0)==0x80 && (ord($str[$pos+3])&0xC0)==0x80) {
			$c = (($c&0x0F)<<18) | ((ord($str[$pos+1])&0x3F)<<12) | ((ord($str[$pos+2])&0x3F)<<6) | (ord($str[$pos+3])&0x3F);
			$ret .= '&#'.$c.';';
			$pos += 4;
		}
		else {
			$c = ISO_88592_CODE[$c-0x80];
			$ret .= '&#'.$c.';';
			$pos++;
		}
	}
	return $ret;
}

$do= @$_REQUEST['do'];
$id= @$_REQUEST['id'];
$action= @$_REQUEST['action'];
$title= @$_REQUEST['title'];
$name= @$_REQUEST['name'];
$pwd= @$_REQUEST['pwd'];
$email= @$_REQUEST['email'];
$www= @$_REQUEST['www'];
$story= @$_REQUEST['story'];
$teaser= @$_REQUEST['teaser'];
$time= @$_REQUEST['time'];
$date= @$_REQUEST['date'];

$loginOK = false;

if ($do=="admin" && $action=="login") {
	$name_hash = md5($name);
	$pwd_hash = md5($name."/".$pwd);
	if ($name_hash==$adminname && $pwd_hash==$adminpwd) {
		$_SESSION['user'] = $_REQUEST['name'];
		session_set_cookie_params(0,'/');
		$loginOK = true;
	}
}
else if (($do=="view" || !$do) && $action=="logout") {
	$_SESSION = array();
	setcookie(session_name(), '', time()-42000, '/');
	session_destroy();
}

if (!@$_SESSION['user']) {
	if ($do=="admin" && !$action) {
		$_SESSION = array();
		setcookie(session_name(), '', time()-42000, '/');
		session_destroy();
	}
	else if ($do=="admin" && $action=="login") {
		$_SESSION = array();
		setcookie(session_name(), '', time()-42000, '/');
		session_destroy();
		$action = NULL;
	}
	else if ($do=="view" || !$do) {
		$_SESSION = array();
		setcookie(session_name(), '', time()-42000, '/');
		session_destroy();
	}
	else {
		$_SESSION = array();
		setcookie(session_name(), '', time()-42000, '/');
		session_destroy();
		$do = "view";
	}
}

// ************************** functions ***********************
// ************************************************************


if (!function_exists('getkey')) {
	function getkey($index, $stuff){
		foreach ($stuff->data as $key => $item){
			if ($item['id']==$index){
				$ret=$key;
				break;
			}
		}
		return $ret;
	}
}

if (!function_exists('validemail')) {
	function validemail($addr){
		return eregi("^[a-z0-9]+([_.-][a-z0-9]+)*@([a-z0-9]+([.-][a-z0-9]+)*)+\\.[a-z]{2,4}$", $addr);
	}
}

if (!function_exists('jsRedirect')) {
	function jsRedirect($url){
		echo "<script language=\"Javascript\" type=\"text/javascript\">\n<!--\n  location.href='$url'  \n//-->\n</script>";
	}
}

function saveposts($stuff){
	global $dat;
	$fp=fopen($dat, "w");
	foreach ($stuff as $item){
		$title = $item['title'];
		$story = $item['story'];
		$teaser = $item['teaser'];
		$title = escape_html($title);
		$story = escape_html($story);
		$teaser = escape_html($teaser);
		$line=$item['id']."|".$item['time']."|".$item['mode']."|".$title."|".$story."|".$teaser."\n";
		fputs($fp, $line);
	}
	fclose($fp);
}

if (!function_exists('isloggedin')) {
	function isloggedin() {
		return !!@$_SESSION['user'];
	}
}

if (!function_exists('showmenu')) {
	function showmenu() {
		global $txtsign, $txtview, $txtadmin, $me, $getvars;
		echo "<div class='smtxt' style='margin-bottom:8px;'><a href='$me$getvars&do=add'>$txtsign</a> :: <a href='$me$getvars&do=view'>$txtview</a></div>";
	}
}

if (!function_exists('emailencoder')) {
	function emailencoder ($str){
		for ($i=0; $i< strlen($str); $i++){
			$n=rand(0,10);
			if ($n>5) $foo.="&#".ord($str[$i]).";";
			else $foo.="&#x".sprintf("%X", ord($str[$i])).";";
		}
		return $foo;
	}
}

if (!function_exists('getTemplate')) {
	function getTemplate($tpl, $html){
		$match="/<\!\-\-$tpl\-\->(.*?)<\!\-\-$tpl\-\->/s";
		preg_match($match, $html, $tmp);
		return $tmp[1];
	}
}

if (!function_exists('str_ireplace'))
{
    function str_ireplace ($search, $replace, $subject, $count = null)
    {
        if (is_string($search) && is_array($replace)) {
            trigger_error('Array to string conversion', E_USER_NOTICE);
            $replace = (string) $replace;
        }
        if (!is_array($search)) {
            $search = array ($search);
        }
        if (!is_array($replace))
        {
            $replace_string = $replace;

            $replace = array ();
            for ($i = 0, $c = count($search); $i < $c; $i++)
            {
                $replace[$i] = $replace_string;
            }
        }
        $length_replace = count($replace);
        $length_search = count($search);
        if ($length_replace < $length_search)
        {
            for ($i = $length_replace; $i < $length_search; $i++)
            {
                $replace[$i] = '';
            }
        }
        $was_array = false;
        if (!is_array($subject)) {
            $was_array = true;
            $subject = array ($subject);
        }
        $count = 0;
        foreach ($subject as $subject_key => $subject_value)
        {
            foreach ($search as $search_key => $search_value)
            {
                $segments = explode(strtolower($search_value), strtolower($subject_value));
                $count += count($segments) - 1;
                $pos = 0;
                foreach ($segments as $segment_key => $segment_value)
                {
                    $segments[$segment_key] = substr($subject_value, $pos, strlen($segment_value));
                    $pos += strlen($segment_value) + strlen($search_value);
                }
                $subject_value = implode($replace[$search_key], $segments);
            }
            $result[$subject_key] = $subject_value;
        }
        if ($was_array === true) {
            return $result[0];
        }
        return $result;
    }
}

if (!function_exists('paging')) {
	function paging(
		$pages,
		$pagevar="page",
		$ppv=10,
		$first	="<a href='{url}'>&laquo;&laquo;&laquo;</a>&nbsp;",
		$firsts ="&laquo;&laquo;&laquo&nbsp;",
		$prev	="<a href='{url}'>&laquo;&laquo;</a>&nbsp;&nbsp;",
		$prevs	="&laquo;&laquo;&nbsp;&nbsp;",
		$num	="<a href='{url}'>{page}</a>",
		$nums	="{page}",
		$sep	="&nbsp;|&nbsp;",
		$more	="[<a href='{url}'>...</a>]",
		$next	="&nbsp;&nbsp;<a href='{url}'>&raquo;&raquo;</a>",
		$nexts	="&nbsp;&nbsp;&raquo;&raquo;",
		$last	="&nbsp;<a href='{url}'>&raquo;&raquo;&raquo;</a>",
		$lasts	="&nbsp;&raquo;&raquo;&raquo;"){

		// get URI parameters
		$getvars=$_SERVER['PHP_SELF']."?";
		foreach ($_GET as $key => $val){
			if ($key!=$pagevar){
				if (isset($val) && $val!=""){
					$getvars.="$key=$val&";
				}else{
					$getvars.="$key&";
				}
			}
		}

		$page=(is_numeric(@$_GET[$pagevar])) ? @$_GET[$pagevar] : 1;
		$page=($page>$pages) ? $pages : $page;
		$prevpage=($page>1) ? $page-1 : 1;
		$nextpage=($page < $pages) ? $page+1 : $pages;
		$paging="";

		if ($pages>1){
			// first
			$paging.=($page>1) ? str_replace("{url}", "$getvars$pagevar=1", $first) : $firsts;
			// prev
			$paging.=($page>1) ? str_replace("{url}", "$getvars$pagevar=$prevpage", $prev) : $prevs;

			// pages
			$ppvrange=ceil($page/$ppv);
			$start=($ppvrange-1)*$ppv;
			$end=($ppvrange-1)*$ppv+$ppv;
			$end=($end>$pages) ? $pages : $end;
			$paging.=($start>1) ? str_replace("{url}", "$getvars$pagevar=".($start-1), $more).$sep : "";
			for ($i=1; $i<=$pages; $i++){
				if ($i>$start && $i<= $end){
					$paging.=($page==$i) ? str_replace("{page}", $i, $nums).(($i<$end) ? $sep : "") : str_replace(array("{url}", "{page}"), array("$getvars$pagevar=$i", $i), $num).(($i<$end) ? $sep : "");
				}
			}
			$paging.=($end<$pages) ? $sep.str_replace("{url}", "$getvars$pagevar=".($end+1), $more) : "" ;

			// next
			$paging.=($page<$pages) ? str_replace("{url}", "$getvars$pagevar=$nextpage", $next) : $nexts;
			// last
			$paging.=($page<$pages) ? str_replace("{url}", "$getvars$pagevar=$pages", $last) : $lasts;
		}

		return $paging;
	}
}

?>
<html>
<head>
<meta http-equiv="CACHE-CONTROL" content="NO-CACHE" >
<meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-2">

<?php
if (!isset($fromFCK))
	$fromFCK = false;
if (@$_REQUEST['mndo']!="rss" && $fromFCK !== true){
?>
<style type="text/css">
<!--
.smtxt, .smtxt a {
	font-size: 14px;
}
.smsmall, .smsmall a {
	font-size: 12px;
	letter-spacing: 0px;
}
-->
</style>
<?php
}
?>

<script language="JavaScript" type="text/javascript">

function addEvent(obj, evType, fn, useCapture){
  if (obj.addEventListener){
    obj.addEventListener(evType, fn, useCapture);
    return true;
  } else if (obj.attachEvent){
    var r = obj.attachEvent("on"+evType, fn);
    return r;
  } else {
    alert("Handler could not be attached");
  }
}

function getElement(id){
	var obj;
	if (document.getElementById){
		obj = document.getElementById(id);
	}else if (document.all){
		obj = document.all.id;
	}
	return obj;
}

function toggleStory(chb, id){
	var obj = getElement(id);
	if (chb.checked){
		obj.style.visibility = "visible";
		obj.style.height = "450px";
	}else{
		obj.style.visibility = "hidden";
		obj.style.height = "0";
	}
}
</script>
</head>
<!--<body onload="history.forward()">-->
<body>
<?php

if ($do=="view" || !$do) {
?>
	<!--<script>setTimeout('location.reload()',10000)</script>-->
<?php
}

// ************************** MAIN ****************************
// ************************************************************

// init
$foo=file($dat);
$stuff= new mdasort;
$stuff->sortkeys = array(array('time','DESC'));

if (count($foo)==0){
	$empty=true;
	$nextindex=1;
}else{
	$i=0;
	foreach ($foo as $line){
		$line=explode("|", rtrim($line));
		if ($line[2]=="static" || ($line[2]=="dynamic" && $line[1]<$now) || isloggedin() ){
			$stuff->data[$i] = array("id" => $line[0], "time" => $line[1], "mode" => $line[2], "title" => $line[3], "story" => $line[4], "teaser" => $line[5]);
			$i++;
		}
	}
	if ($i>0){
		$stuff->sortkeys = array(array('id','DESC'));
		$stuff->msort();
		$foo=current($stuff->data);
		$nextindex=$foo['id']+1;
		$stuff->sortkeys = array(array('time','DESC'));
		$stuff->msort();
		$numposts=count($stuff->data);
	}else{
		$numposts=0;
		$empty=true;
	}
}

// RSS stuff
if ($rssEnable){
	$info = pathinfo($_SERVER['PHP_SELF']);
	$info['dirname'] = ($info['dirname'] == "/") ? $info['dirname'] : $info['dirname']."/";
	$url = $info['dirname'].$pathtoscript."rss.php?mndo=rss";
	echo "<link rel=\"alternate\" type=\"application/rss+xml\" title=\"$rssTitle\" href=\"$url\" />";
}

echo "\n\n<!-- start mynews $version -->\n\n";
echo "<table cellpadding='0' cellspacing='0' border='0' width='100%'><tr><td align='center'>";

// admin stuff
if ($do=="admin") {

	if ($action=="login"){
		if ($loginOK){
			jsRedirect($me.$getvars);
		}
	}

	if ($action=="delete" && isloggedin()){
		$todel=getkey($id, $stuff);
		unset($stuff->data[$todel]);
		$stuff->msort();
		saveposts($stuff->data);
		$do="view";
	}else{
		?>
		<form action="<?php echo $me.$getvars;?>" method="post" name="form2" class="smtxt">
		Admin Login<br><br>
		<table border="0" cellpadding="0" cellspacing="2" class="smtxt">
		<tr><td>Login&nbsp;&nbsp;</td><td>
		<input name="name" type="text" id="name" size="20">
		</td></tr><tr><td>Password&nbsp;&nbsp;</td>
		<td><input name="pwd" type="password" id="pwd" size="20"></td>
		</tr><tr><td>&nbsp;</td><td>
		<input type="submit" name="Submit" value="Login">
		<input name="do" type="hidden" id="do" value="admin">
		<input name="action" type="hidden" id="action" value="login">
		</td></tr></table>
		</form>
		<?php
	}
}

if (isloggedin()){
	if (!($do=="admin" && !$action))
		showmenu();

	if ($do=="add"){
		if ($action=="save"){
			$saveit=false;
			$error=false;

			if ($id=="new"){
				$index=$numposts;
				$id=$nextindex;
				$saveit=true;
			}else if (is_numeric($id)){
				$index=getkey($id, $stuff);
				$saveit=true;
			}

			if ($saveit) {
				if ($title=="") $error.="<br>&raquo; $txtbadtitle";
				//if ($story=="") $error.="<br>&raquo;  $txtbadstory";
				if ($teaser=="") $error.="<br>&raquo;  $txtbadteaser";
				if ($date=="") $error.="<br>&raquo;  $txtbaddate";

				if ($error===false){

					$date = explode(".", $date);
					$daytime = explode(".", $_REQUEST['daytime']);
					$daytime[0] = (is_numeric($daytime[0]) &&  $daytime[0] >= 0 && $daytime[0] < 24) ? $daytime[0] : 23;
					$daytime[1] = (is_numeric($daytime[1]) &&  $daytime[1] >= 0 && $daytime[1] < 60) ? $daytime[1] : 59;
					$time = mktime($daytime[0], $daytime[1], 0, $date[1], $date[0], $date[2]);
					$story = ($_REQUEST['hasstory'] == 1) ? $_REQUEST['story'] : "";

					$stuff->data[$index]['id']=$id;
					$stuff->data[$index]['time']=$time;
					$stuff->data[$index]['mode']=$_REQUEST['mode'];
					$stuff->data[$index]['title']=str_replace(array("|"), array(" "), $title);
					if ($wysiwyg===true){
						$stuff->data[$index]['teaser']=stripslashes(str_replace(array("\r", "\n", "|"), array(" ", " ", " "), $teaser));
						$stuff->data[$index]['story']=stripslashes(str_replace(array("\r", "\n", "|"), array(" ", " ", " "), $story));
					}else{
						$stuff->data[$index]['teaser']=str_replace(array("\r", "\n", "|"), array(" ", "<br>", " "), $teaser);
						$stuff->data[$index]['story']=str_replace(array("\r", "\n", "|"), array(" ", "<br>", " "), $story);
					}
					saveposts($stuff->data);
					$stuff->msort();
					$empty=false;
					$do = "view";
				}
				else echo "<div class='smtxt' style='color:#cc0000;'><b>$txterrors</b>$error<br><br><i>$txtclickback</i></div>";
			}
			else
				$do="view";

		}else{
			if ($action=="edit"){
				$post=$stuff->data[getkey($id, $stuff)];
				$title= escape_html(stripslashes($post['title']));
				if ($wysiwyg===true){
					$teaser = escape_html(stripslashes($post['teaser']));
					$story = escape_html(stripslashes($post['story']));
				}else{
					$teaser = str_replace("<br>", "\n", escape_html($post['teaser']));
					$story = str_replace("<br>", "\n", escape_html($post['story']));
				}
				$time=$post['time'];
				$mode = $post['mode'];
				$hasstory = (trim($story) != "") ? true : false;
			}else{
				$title="";
				$story="";
				$time="notset";
				$id="new";
				$mode = "dynamic";
				$hasstory = true;
			}

			?>
			<form name="form1" method="post" action="<?php echo $me.$getvars;?>">
			<table border="0" cellpadding="2" cellspacing="0" class="smtxt">
			<tr>
			<td width="65">Date&nbsp;</td>
			<td>
			<input name="date" type="text" id="date" value="<?php echo date("d.m.Y", ($time=="notset") ? time() : $time);?>" style="width:100px;" maxlength="10"> [dd.mm.yyyy] &nbsp;&nbsp;
			<input name="daytime" type="text" id="time" value="<?php echo date("H.i", ($time=="notset") ? time() : $time);?>" style="width:80px;" maxlength="5"> [hh.mm]
			</td>
			</tr>
			<tr>
			<td>Mode&nbsp;</td>
			<td>
			<div style="float:left; padding-top:3px;">
			<input name="mode" type="radio" value="dynamic" id="dynamic" style="vertical-align:-3px;" <?php echo ($mode=="dynamic") ? "checked" : "";?>/><label for="dynamic">dynamic</label>&nbsp;&nbsp;&nbsp;
			<input name="mode" type="radio" value="static" id="static" style="vertical-align:-3px;" <?php echo ($mode=="static") ? "checked" : "";?>/><label for="static">static</label>&nbsp;
			</div>
			<div style="float:right; text-align:right; font-size:10px;">
			<strong>dynamic</strong> = news aren't shown when date is in future<br />
			<strong>static</strong> = news are always shown
			</div>
			</td>
			</tr>
						<tr>
			<td>Title&nbsp;</td>
			<td>
			<input name="title" type="text" id="title" value="<?php echo $title;?>" style="width:500px;" >
			</td></tr>

			<!-- Teaser -->
			<tr>
			<td valign="top">Teaser&nbsp;
			</td><td>
			<div class="rte">
			<?
			if ($wysiwyg===true){


				$oFCKeditor = new FCKeditor('teaser') ;
				$oFCKeditor->BasePath = $pathtoscript.'FCKeditor/';
				$oFCKeditor->Value = $teaser;
				$oFCKeditor->Width = "100%";
				$oFCKeditor->Height = 300;

				$oFCKeditor->Create() ;




			 } else {
				 ?>
				<textarea name="teaser" cols="50" rows="5" id="story" style="width:500px"><?php echo $teaser;?></textarea>
			<? }?>
			</div>
			</td></tr>

			<!-- Story -->
			<tr>
				<td valign="top">&nbsp;
				</td>
				<td>
				<input name="hasstory" type="checkbox" id="hasstory" value="1" <?php echo ($hasstory === true) ? "checked" : "";?> style="vertical-align:-3px;" onChange="toggleStory(this, 'rowStory');"/>
				<label for="hasstory">has story</label>
				</td>
			</tr>


			<tr>
				<td colspan="2" valign="top" style="padding:0px;">

					<div id="rowStory">
					<table border="0" cellpadding="2" cellspacing="0" class="smtxt" width="100%">
					<tr>
					<td width="65" valign="top">Story&nbsp;
					</td><td>
					<div class="rte">
					<?php if ($wysiwyg===true){

						$oFCKeditor = new FCKeditor('story') ;
						$oFCKeditor->BasePath = $pathtoscript.'FCKeditor/';
						$oFCKeditor->Value = $story;
						$oFCKeditor->Width = "100%";;
						$oFCKeditor->Height = 450;
						$oFCKeditor->Create() ;

					 } else { ?>
						<textarea name="story" cols="50" rows="5" id="story" style="width:500px"><?php echo $story;?></textarea>
					<?php }
					?>
					</div>
					</td>
					</tr>
					</table>
					</div>

					<script language="JavaScript" type="text/javascript">
					addEvent(window, 'load', toggleStory(getElement('hasstory'), 'rowStory'));
					</script>


				</td>
			</tr>


			<tr><td>&nbsp;</td><td>
			<input type="submit" name="Submit" value="<?php echo ($id=="new") ? "Add" : "Save";?>">
			<input type="submit" value="Cancel" onclick="this.form.id.value='none'">
			<input name="do" type="hidden" id="do" value="add">
			<input name="action" type="hidden" id="action" value="save">
			<input name="id" type="hidden" id="id" value="<?php echo $id;?>">
			</td></tr>
			</table>
			</form>
			<?php
		}
	}
}

$html = "";

// display posts
if ($do=="view" || !isset($do)){
	if (!$empty){

		$templates = implode("", file($templatefile));
		$tpl_teaser = getTemplate("TEASER", $templates);
		$tpl_story = getTemplate("STORY", $templates);

		// show full story of specific news
		if (is_numeric(@$_GET['mnid'])){

			$item = $stuff->data[getkey($_GET['mnid'], $stuff)];
			$item['title'] = stripslashes($item['title']);
			$item['teaser'] = stripslashes($item['teaser']);
			$item['story'] = stripslashes($item['story']);

			if ($wrap!==false) $item['story']=wordwrap($item['story'], $wrap, " ", 1);
			$match=array("{title}", "{time}", "{teaser}", "{story}", "{edit}", "{delete}", "{urltoallnews}");
			if (isloggedin()){
				$replace=array( $item['title'],
								strftime($dateformat, $item['time']),
								$item['teaser'],
								$item['story'],
								"<a href='$me$getvars&do=add&action=edit&id=".$item['id']."'>$txtedit</a>",
								"<a onclick='return confirm(\"Biztosan t�rl�d?\")' href='$me$getvars&do=admin&action=delete&id=".$item['id']."&page=".$_GET['page']."'>$txtdelete</a>",
								"$me$getvars&page=".$_GET['page']);
			}else $replace=array($item['title'], strftime($dateformat, $item['time']), $item['teaser'], $item['story'], "", "", "$me$getvars&page=".$_GET['page']);

			$tmp = str_replace($match, $replace, $tpl_story);
			$tmp = preg_replace("/[<][?][^>]*[?][>]/","",$tmp);
			ob_start();
			eval(" ?".">".$tmp."<"."?php ");
			$tmpparsed = ob_get_contents();
			ob_end_clean();
			$html .= escape_html($tmpparsed);

			echo stripslashes($html);


		// show all news
		}else{
			$i=1;
			$from=(is_numeric(@$_GET['page'])) ? ((@$_GET['page']-1)*$ppp)+1 : 1;
			foreach($stuff->data as $item){
				if ($item['id']!=0 && $i>=$from && $i< ($from+$ppp) ){

					$item['title'] = stripslashes($item['title']);
					$item['teaser'] = stripslashes($item['teaser']);
					$item['story'] = stripslashes($item['story']);
					$hasstory = (trim($item['story']) != "") ? true : false;

					if ($wrap!==false) $item['story']=wordwrap($item['story'], $wrap, " ", 1);
					$match=array("{title}", "{time}", "{teaser}", "{story}", "{edit}", "{delete}", "{urltofullstory}");
					if (isloggedin()){
						$replace=array( $item['title'],
										strftime($dateformat, $item['time']),
										$item['teaser'],
										$item['story'],
										"<a href='$me$getvars&do=add&action=edit&id=".$item['id']."'>$txtedit</a>",
										"<a onclick='return confirm(\"Biztosan t�rl�d?\")' href='$me$getvars&do=admin&action=delete&id=".$item['id']."&page=".$_GET['page']."'>$txtdelete</a>",
										($hasstory === true) ? "$me$getvars&mnid=".$item['id']."&page=".$_GET['page'] : ""
										);
					}else{
						$replace = array($item['title'],
										 strftime($dateformat,
										 $item['time']),
										 $item['teaser'],
										 $item['story'],
										 "",
										 "",
										 ($hasstory === true) ? "$me$getvars&mnid=".$item['id']."&page=".@$_GET['page'] : ""
										 );
					}
					$tmp = str_replace($match, $replace, $tpl_teaser);
					$tmp = preg_replace("/[<][?][^>]*[?][>]/","",$tmp);
					ob_start();
					eval(" ?".">".$tmp."<"."?php ");
					$tmpparsed = ob_get_contents();
					ob_end_clean();
					$html .= escape_html($tmpparsed);
				}
				$i++;
			}
			echo stripslashes($html);
			$numpages=(fmod($numposts,$ppp)>0) ? floor($numposts/$ppp)+1 : ($numposts/$ppp);
			echo "<div class='smtxt'><br>";
			echo paging($numpages);
			echo "</div><br>";
		}
	}
}


// closing table tags
// Please don't remove the 'powered by...' link
echo "</td></tr><tr class='smtxt'><td align='center' class='smsmall' height='20' valign='bottom'>";
if (!isloggedin()) echo "<a href='$me$getvars&do=admin'></a>";
else echo "<a href='$me?action=logout'>$txtlogout</a> - ";
echo " </td></tr></table>";
echo "\n\n<!-- end mynews $version -->\n\n";
?>
</body>
</html>