<?php
  ///////////////////////////////////////////////////
  //перемещение строк вверх/вниз
  //2009 (C)
  //Карпухин Павел
  ///////////////////////////////////////////////////
  $lang = substr($_SERVER["HTTP_ACCEPT_LANGUAGE"], 0,2);
  if (is_file ("../lang/".$lang."/".$lang.".php")) include "../lang/".$lang."/".$lang.".php";
     else include "../lang/ru/ru.php";

  $title=$titlepage = $TEXT['org-title3'];

  require_once "../config.php";
  require_once "../util/top.php";

  if($result2['user'] == 1) puterror2($TEXT['error-loginform4']);
  if($result2['master'] == 1) puterror2($TEXT['error-loginform4']);
  if($result2['manager'] == 1) puterror2($TEXT['error-loginform4']);

  if(empty($_GET['razd_id'])) puterror2($TEXT['error-nd16']);
  if(strlen($_GET['razd_id'])>11) puterror2($TEXT['error-nd13']);
  if(empty($_GET['position'])) puterror2($TEXT['error-nd4']);
  if(strlen($_GET['position'])>5) puterror2($TEXT['error-nd5']);
  if(empty($_GET['moving'])) puterror2($TEXT['error-otd4']);
  if(strlen($_GET['moving'])>5) puterror2($TEXT['error-otd5']);

  $_GET['position'] = rep($_GET['position']);
  $_GET['razd_id'] = rep($_GET['razd_id']);
  $_GET['moving'] = rep($_GET['moving']);

  if($_GET['moving']=="up"){
  $query_move = "SELECT razd_id, position FROM `tbl_razdel_instr` WHERE `position`<'".$_GET['position']."' ORDER BY `position` DESC LIMIT 1 ";
  $result_move = mysql_query($query_move);
  if (!$result_move) puterror2($TEXT['error-tbl19']);
   $result2_move = mysql_fetch_array($result_move);
   if($result2_move['position'] == 0) puterror2($TEXT['global-up-down']);

   $query = "UPDATE `tbl_razdel_instr` SET `position`='".$result2_move['position']."' WHERE `razd_id`='".$_GET['razd_id']."' ";
   if(mysql_query($query))
   {
   $query = "UPDATE `tbl_razdel_instr` SET `position`='".$_GET['position']."' WHERE `razd_id`='".$result2_move['razd_id']."' ";
     if(mysql_query($query))
      {
       echo "<html><head>
          <meta HTTP-EQUIV='Refresh' CONTENT='0; URL=index.php' />
          </head></html>";
      } else puterror2($TEXT['error-nd21']);
   } else puterror2($TEXT['error-nd21']);
  }
  else
  {
  $query_move = "SELECT razd_id, position FROM `tbl_razdel_instr` WHERE `position`>'".$_GET['position']."' ORDER BY `position` LIMIT 1";
  $result_move = mysql_query($query_move);
  if (!$result_move) puterror2($TEXT['error-tbl19']);
   $result2_move = mysql_fetch_array($result_move);
  if($result2_move['position'] == 0) puterror2($TEXT['global-up-down']);

  $query = "UPDATE `tbl_razdel_instr` SET `position`='".$_GET['position']."' WHERE `razd_id`='".$result2_move['razd_id']."' ";
  if(mysql_query($query))
  {
   $query = "UPDATE `tbl_razdel_instr` SET `position`='".$result2_move['position']."' WHERE `razd_id`='".$_GET['razd_id']."' ";
     if(mysql_query($query))
      {
       echo "<html><head>
          <meta HTTP-EQUIV='Refresh' CONTENT='0; URL=index.php' />
          </head></html>";
      } else puterror2($TEXT['error-nd21']);
    } else puterror2($TEXT['error-nd21']);
  }
  require_once "../util/bottom.php";
?>
