mirror of
https://github.com/WhatCD/Gazelle.git
synced 2024-12-13 02:46:30 +00:00
90 lines
3.0 KiB
PHP
90 lines
3.0 KiB
PHP
<?
|
|
authorize();
|
|
|
|
$CollageID = $_POST['collageid'];
|
|
if (!is_number($CollageID)) {
|
|
error(0);
|
|
}
|
|
|
|
$DB->query("
|
|
SELECT UserID, CategoryID, Locked, MaxGroups, MaxGroupsPerUser
|
|
FROM collages
|
|
WHERE ID = '$CollageID'");
|
|
list($UserID, $CategoryID, $Locked, $MaxGroups, $MaxGroupsPerUser) = $DB->next_record();
|
|
if ($CategoryID == 0 && $UserID != $LoggedUser['ID'] && !check_perms('site_collages_delete')) {
|
|
error(403);
|
|
}
|
|
|
|
if (isset($_POST['name'])) {
|
|
$DB->query("
|
|
SELECT ID, Deleted
|
|
FROM collages
|
|
WHERE Name = '".db_string($_POST['name'])."'
|
|
AND ID != '$CollageID'
|
|
LIMIT 1");
|
|
if ($DB->has_results()) {
|
|
list($ID, $Deleted) = $DB->next_record();
|
|
if ($Deleted) {
|
|
$Err = 'A collage with that name already exists but needs to be recovered, please <a href="staffpm.php">contact</a> the staff team!';
|
|
} else {
|
|
$Err = "A collage with that name already exists: <a href=\"/collages.php?id=$ID\">$_POST[name]</a>.";
|
|
}
|
|
$ErrNoEscape = true;
|
|
include(SERVER_ROOT.'/sections/collages/edit.php');
|
|
die();
|
|
}
|
|
}
|
|
|
|
$TagList = explode(',', $_POST['tags']);
|
|
foreach ($TagList as $ID => $Tag) {
|
|
$TagList[$ID] = Misc::sanitize_tag($Tag);
|
|
}
|
|
$TagList = implode(' ', $TagList);
|
|
|
|
$Updates = array("Description='".db_string($_POST['description'])."', TagList='".db_string($TagList)."'");
|
|
|
|
if (!check_perms('site_collages_delete') && ($CategoryID == 0 && $UserID == $LoggedUser['ID'] && check_perms('site_collages_renamepersonal'))) {
|
|
if (!stristr($_POST['name'], $LoggedUser['Username'])) {
|
|
error("Your personal collage's title must include your username.");
|
|
}
|
|
}
|
|
|
|
if (isset($_POST['featured']) && $CategoryID == 0 && (($LoggedUser['ID'] == $UserID && check_perms('site_collages_personal')) || check_perms('site_collages_delete'))) {
|
|
$DB->query("
|
|
UPDATE collages
|
|
SET Featured = 0
|
|
WHERE CategoryID = 0
|
|
AND UserID = $UserID");
|
|
$Updates[] = 'Featured = 1';
|
|
}
|
|
|
|
if (check_perms('site_collages_delete') || ($CategoryID == 0 && $UserID == $LoggedUser['ID'] && check_perms('site_collages_renamepersonal'))) {
|
|
$Updates[] = "Name = '".db_string($_POST['name'])."'";
|
|
}
|
|
|
|
if (isset($_POST['category']) && !empty($CollageCats[$_POST['category']]) && $_POST['category'] != $CategoryID && ($_POST['category'] != 0 || check_perms('site_collages_delete'))) {
|
|
$Updates[] = 'CategoryID = '.$_POST['category'];
|
|
}
|
|
|
|
if (check_perms('site_collages_delete')) {
|
|
if (isset($_POST['locked']) != $Locked) {
|
|
$Updates[] = 'Locked = ' . ($Locked ? "'0'" : "'1'");
|
|
}
|
|
if (isset($_POST['maxgroups']) && ($_POST['maxgroups'] == 0 || is_number($_POST['maxgroups'])) && $_POST['maxgroups'] != $MaxGroups) {
|
|
$Updates[] = 'MaxGroups = ' . $_POST['maxgroups'];
|
|
}
|
|
if (isset($_POST['maxgroups']) && ($_POST['maxgroupsperuser'] == 0 || is_number($_POST['maxgroupsperuser'])) && $_POST['maxgroupsperuser'] != $MaxGroupsPerUser) {
|
|
$Updates[] = 'MaxGroupsPerUser = ' . $_POST['maxgroupsperuser'];
|
|
}
|
|
}
|
|
|
|
if (!empty($Updates)) {
|
|
$DB->query('
|
|
UPDATE collages
|
|
SET '.implode(', ', $Updates)."
|
|
WHERE ID = $CollageID");
|
|
}
|
|
$Cache->delete_value('collage_'.$CollageID);
|
|
header('Location: collages.php?id='.$CollageID);
|
|
?>
|