Gazelle/sections/tools/managers/forum_alter.php

<?
authorize();

if (!check_perms('admin_manage_forums')) {
	error(403);
}
$P = db_array($_POST);
if ($_POST['submit'] == 'Delete') { //Delete
	if (!is_number($_POST['id']) || $_POST['id'] == '') {
		error(0);
	}
	$DB->query('
		DELETE FROM forums
		WHERE ID = '.$_POST['id']);
} else { //Edit & Create, Shared Validation
	$Val->SetFields('name', '1', 'string', 'The name must be set, and has a max length of 40 characters', array('maxlength' => 40, 'minlength' => 1));
	$Val->SetFields('description', '0', 'string', 'The description has a max length of 255 characters', array('maxlength' => 255));
	$Val->SetFields('sort', '1', 'number', 'Sort must be set');
	$Val->SetFields('categoryid', '1', 'number', 'Category must be set');
	$Val->SetFields('minclassread', '1', 'number', 'MinClassRead must be set');
	$Val->SetFields('minclasswrite', '1', 'number', 'MinClassWrite must be set');
	$Val->SetFields('minclasscreate', '1', 'number', 'MinClassCreate must be set');
	$Err = $Val->ValidateForm($_POST); // Validate the form
	if ($Err) {
		error($Err);
	}

	if ($P['minclassread'] > $LoggedUser['Class'] || $P['minclasswrite'] > $LoggedUser['Class'] || $P['minclasscreate'] > $LoggedUser['Class']) {
		error(403);
	}
	$P['autolock'] = isset($_POST['autolock']) ? '1' : '0';

	if ($_POST['submit'] == 'Edit') { //Edit
		if (!is_number($_POST['id']) || $_POST['id'] == '') {
			error(0);
		}
		$DB->query('
			SELECT MinClassRead
			FROM forums
			WHERE ID = ' . $P['id']);
		if ($DB->record_count() < 1) {
			error(404);
		} else {
			list($MinClassRead) = $DB->next_record();
			if ($MinClassRead > $LoggedUser['Class']) {
				error(403);
			}
		}

		$DB->query("
			UPDATE forums
			SET
				Sort = '$P[sort]',
				CategoryID = '$P[categoryid]',
				Name = '$P[name]',
				Description = '$P[description]',
				MinClassRead = '$P[minclassread]',
				MinClassWrite = '$P[minclasswrite]',
				MinClassCreate = '$P[minclasscreate]',
				AutoLock = '$P[autolock]',
				AutoLockWeeks = '$P[autolockweeks]'
			WHERE ID = '$P[id]'");
	} else { //Create
		$DB->query("
			INSERT INTO forums
				(Sort, CategoryID, Name, Description, MinClassRead, MinClassWrite, MinClassCreate, AutoLock, AutoLockWeeks)
			VALUES
				('$P[sort]', '$P[categoryid]', '$P[name]', '$P[description]', '$P[minclassread]', '$P[minclasswrite]', '$P[minclasscreate]', '$P[autolock]', '$P[autolockweeks]')");
	}
}

$Cache->delete_value('forums_list'); // Clear cache

// Go back
header('Location: tools.php?action=forum')
?>