authorize();
include(SERVER_ROOT.'/classes/class_validate.php');
$Val = new VALIDATE;
$Val->SetFields('name', '1','string','The name must be between 3 and 100 characters',array('maxlength'=>100, 'minlength'=>3));
$Val->SetFields('description', '1','string','The description must be at least 10 characters',array('maxlength'=>65535, 'minlength'=>10));
$Err = $Val->ValidateForm($_POST);
$P = array();
$P = db_array($_POST);
if(!$Err) {
$DB->query("SELECT ID,Deleted FROM collages WHERE Name='$P[name]'");
if($DB->record_count()) {
list($ID, $Deleted) = $DB->next_record();
if($Deleted) {
$Err = 'That collection already exists but needs to be recovered, please contact the staff team!';
} else {
$Err = "That collection already exists: $ID.";
}
}
}
if(!$Err) {
if(empty($CollageCats[$P['category']]) || $P['category'] == 0) {
$Err = 'Please select a category';
}
}
if($Err) {
error($Err);
header('Location: collages.php?action=new');
die();
}
$TagList = explode(',',$_POST['tags']);
foreach($TagList as $ID=>$Tag) {
$TagList[$ID] = sanitize_tag($Tag);
}
$TagList = implode(' ',$TagList);
$DB->query("INSERT INTO collages
(Name, Description, UserID, TagList, CategoryID)
VALUES
('$P[name]', '$P[description]', $LoggedUser[ID], '$TagList', '$P[category]')");
$CollageID = $DB->inserted_id();
$Cache->delete_value('collage_'.$CollageID);
write_log("Collage ".$CollageID." (".$P[name].") was created by ".$LoggedUser['Username']);
header('Location: collages.php?id='.$CollageID);
?>