-

bl-kernel/ajax/change-type.php

@@ -0,0 +1,69 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+header('Content-Type: application/json');
+
+/*
+| Change a page's type. Allowed types: published, sticky, static, draft.
+| Allowed transitions are restricted to the same set on both ends — anything
+| else (autosave, scheduled) goes through the normal edit flow.
+|
+| @_POST['key']	string	Page key
+| @_POST['type']	string	Target type
+|
+| @return	JSON { status, message, key, type }
+*/
+
+checkRole(array('admin', 'editor', 'author'));
+
+$allowed = array('published', 'sticky', 'static', 'draft');
+
+$key = isset($_POST['key']) ? Sanitize::html($_POST['key']) : false;
+$newType = isset($_POST['type']) ? Sanitize::html($_POST['type']) : false;
+
+if (empty($key) || !$pages->exists($key)) {
+	ajaxResponse(1, $L->g('Page not found.'));
+}
+
+if (!in_array($newType, $allowed, true)) {
+	ajaxResponse(1, $L->g('Target type is not allowed.'));
+}
+
+$current = $pages->db[$key]['type'];
+if (!in_array($current, $allowed, true)) {
+	ajaxResponse(1, $L->g('Current page type cannot be changed from this menu.'));
+}
+
+if ($current === $newType) {
+	ajaxResponse(0, $L->g('Page type unchanged.'), array(
+		'key' => $key,
+		'type' => $newType
+	));
+}
+
+// Authors can only change their own pages
+if (checkRole(array('author'), false)) {
+	if ($pages->db[$key]['username'] !== $login->username()) {
+		ajaxResponse(1, $L->g('Permission denied.'));
+	}
+}
+
+// Don't let a static parent be moved away from "static" while it has children;
+// otherwise the descendants get orphaned in the static tree (getStaticDB filters by type).
+if ($current === 'static' && $newType !== 'static') {
+	try {
+		$page = new Page($key);
+		if (count($page->children()) > 0) {
+			ajaxResponse(1, $L->g('Cannot change type while the page has children.'));
+		}
+	} catch (Exception $e) {
+		ajaxResponse(1, $L->g('Page not found.'));
+	}
+}
+
+if ($pages->setField($key, 'type', $newType) === false) {
+	ajaxResponse(1, $L->g('Failed to update page type.'));
+}
+
+ajaxResponse(0, $L->g('Page type updated.'), array(
+	'key' => $key,
+	'type' => $newType
+));