Gazelle/sections/collages/edit_handle.php

<?
authorize();

$CollageID = $_POST['collageid'];
if (!is_number($CollageID)) {
	error(0);
}

$DB->query("SELECT UserID, CategoryID, Locked, MaxGroups, MaxGroupsPerUser FROM collages WHERE ID='$CollageID'");
list($UserID, $CategoryID, $Locked, $MaxGroups, $MaxGroupsPerUser) = $DB->next_record();
if ($CategoryID == 0 && $UserID != $LoggedUser['ID'] && !check_perms('site_collages_delete')) {
	error(403);
}

$DB->query("SELECT ID,Deleted FROM collages WHERE Name='".db_string($_POST['name'])."' AND ID!='$CollageID' LIMIT 1");
if ($DB->record_count()) {
	list($ID, $Deleted) = $DB->next_record();
	if ($Deleted) {
		$Err = 'A collage with that name already exists but needs to be recovered, please <a href="staffpm.php">contact</a> the staff team!';
	} else {
		$Err = "A collage with that name already exists: <a href=\"/collages.php?id=$ID\">$_POST[name]</a>.";
	}
	$ErrNoEscape = true;
	include(SERVER_ROOT.'/sections/collages/edit.php');
	die();
}

$TagList = explode(',',$_POST['tags']);
foreach ($TagList as $ID=>$Tag) {
	$TagList[$ID] = Misc::sanitize_tag($Tag);
}
$TagList = implode(' ',$TagList);

$Updates = array("Description='".db_string($_POST['description'])."', TagList='".db_string($TagList)."'");

if (!check_perms('site_collages_delete') && ($CategoryID == 0 && $UserID == $LoggedUser['ID'] && check_perms('site_collages_renamepersonal'))) {
	if (!stristr($_POST['name'], $LoggedUser['Username'])) {
		error("Your personal collage's title must include your username.");
	}
}

if (isset($_POST['featured']) && $CategoryID == 0 && (($LoggedUser['ID'] == $UserID && check_perms('site_collages_personal')) || check_perms('site_collages_delete'))) {
	$DB->query("UPDATE collages SET Featured=0 WHERE CategoryID=0 and UserID=$UserID");
	$Updates[] = 'Featured=1';
}

if (check_perms('site_collages_delete') || ($CategoryID == 0 && $UserID == $LoggedUser['ID'] && check_perms('site_collages_renamepersonal'))) {
	$Updates[] = "Name='".db_string($_POST['name'])."'";
}

if (isset($_POST['category']) && !empty($CollageCats[$_POST['category']]) && $_POST['category'] != $CategoryID && ($_POST['category'] != 0 || check_perms('site_collages_delete'))) {
	$Updates[] = 'CategoryID='.$_POST['category'];
}

if (check_perms('site_collages_delete')) {
	if (isset($_POST['locked']) != $Locked) {
		$Updates[] = 'Locked=' . ($Locked ? "'0'" : "'1'");
	}
	if (isset($_POST['maxgroups']) && ($_POST['maxgroups'] == 0 || is_number($_POST['maxgroups'])) && $_POST['maxgroups'] != $MaxGroups) {
		$Updates[] = 'MaxGroups=' . $_POST['maxgroups'];
	}
	if (isset($_POST['maxgroups']) && ($_POST['maxgroupsperuser'] == 0 || is_number($_POST['maxgroupsperuser'])) && $_POST['maxgroupsperuser'] != $MaxGroupsPerUser) {
		$Updates[] = 'MaxGroupsPerUser=' . $_POST['maxgroupsperuser'];
	}
}

if (!empty($Updates)) {
	$DB->query("UPDATE collages SET ".implode(', ', $Updates)." WHERE ID=$CollageID");
}
$Cache->delete_value('collage_'.$CollageID);
header('Location: collages.php?id='.$CollageID);
?>