mirror of
https://github.com/WhatCD/Gazelle.git
synced 2024-12-13 19:06:27 +00:00
84 lines
2.8 KiB
PHP
84 lines
2.8 KiB
PHP
<?
|
|
authorize();
|
|
|
|
include(SERVER_ROOT.'/classes/validate.class.php');
|
|
$Val = new VALIDATE;
|
|
|
|
$P = array();
|
|
$P = db_array($_POST);
|
|
|
|
if ($P['category'] > 0 || check_perms('site_collages_renamepersonal')) {
|
|
$Val->SetFields('name', '1','string','The name must be between 3 and 100 characters',array('maxlength'=>100, 'minlength'=>3));
|
|
} else {
|
|
// Get a collage name and make sure it's unique
|
|
$name = $LoggedUser['Username']."'s personal collage";
|
|
$P['name'] = db_string($name);
|
|
$DB->query("SELECT ID FROM collages WHERE Name='".$P['name']."'");
|
|
$i = 2;
|
|
while ($DB->record_count() != 0) {
|
|
$P['name'] = db_string($name." no. $i");
|
|
$DB->query("SELECT ID FROM collages WHERE Name='".$P['name']."'");
|
|
$i++;
|
|
}
|
|
}
|
|
$Val->SetFields('description', '1','string','The description must be at least 10 characters',array('maxlength'=>65535, 'minlength'=>10));
|
|
|
|
$Err = $Val->ValidateForm($_POST);
|
|
|
|
if ($P['category'] == '0') {
|
|
$DB->query("SELECT COUNT(ID) FROM collages WHERE UserID='$LoggedUser[ID]' AND CategoryID='0' AND Deleted='0'");
|
|
list($CollageCount) = $DB->next_record();
|
|
if (($CollageCount >= $LoggedUser['Permissions']['MaxCollages']) || !check_perms('site_collages_personal')) {
|
|
$Err = 'You may not create a personal collage.';
|
|
} elseif (check_perms('site_collages_renamepersonal') && !stristr($P['name'], $LoggedUser['Username'])) {
|
|
$Err = 'Your personal collage\'s title must include your username.';
|
|
}
|
|
}
|
|
|
|
if (!$Err) {
|
|
$DB->query("SELECT ID,Deleted FROM collages WHERE Name='$P[name]'");
|
|
if ($DB->record_count()) {
|
|
list($ID, $Deleted) = $DB->next_record();
|
|
if ($Deleted) {
|
|
$Err = "That collection already exists but needs to be recovered; please <a href=\"staffpm.php\">contact</a> the staff team!";
|
|
} else {
|
|
$Err = "That collection already exists: <a href=\"/collages.php?id=$ID\">$ID</a>.";
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!$Err) {
|
|
if (empty($CollageCats[$P['category']])) {
|
|
$Err = 'Please select a category';
|
|
}
|
|
}
|
|
|
|
if ($Err) {
|
|
//error($Err);
|
|
$Err = urlencode($Err);
|
|
$Name = urlencode($_POST['name']);
|
|
$Category = urlencode($_POST['category']);
|
|
$Tags = urlencode($_POST['tags']);
|
|
$Description = urlencode($_POST['description']);
|
|
header("Location: collages.php?action=new&err=$Err&name=$Name&cat=$Category&tags=$Tags&descr=$Description");
|
|
die();
|
|
}
|
|
|
|
$TagList = explode(',',$_POST['tags']);
|
|
foreach ($TagList as $ID=>$Tag) {
|
|
$TagList[$ID] = Misc::sanitize_tag($Tag);
|
|
}
|
|
$TagList = implode(' ',$TagList);
|
|
|
|
$DB->query("INSERT INTO collages
|
|
(Name, Description, UserID, TagList, CategoryID)
|
|
VALUES
|
|
('$P[name]', '$P[description]', $LoggedUser[ID], '$TagList', '$P[category]')");
|
|
|
|
$CollageID = $DB->inserted_id();
|
|
$Cache->delete_value('collage_'.$CollageID);
|
|
Misc::write_log("Collage ".$CollageID." (".$_POST['name'].") was created by ".$LoggedUser['Username']);
|
|
header('Location: collages.php?id='.$CollageID);
|
|
|
|
?>
|