mirror of
https://github.com/WhatCD/Gazelle.git
synced 2024-12-13 19:06:27 +00:00
96 lines
2.7 KiB
PHP
96 lines
2.7 KiB
PHP
<?php
|
|
authorize();
|
|
|
|
include(SERVER_ROOT.'/classes/validate.class.php');
|
|
$Val = new VALIDATE;
|
|
|
|
$P = array();
|
|
$P = db_array($_POST);
|
|
|
|
if ($P['category'] > 0 || check_perms('site_collages_renamepersonal')) {
|
|
$Val->SetFields('name', '1', 'string', 'The name must be between 3 and 100 characters', array('maxlength' => 100, 'minlength' => 3));
|
|
} else {
|
|
// Get a collage name and make sure it's unique
|
|
$name = $LoggedUser['Username']."'s personal collage";
|
|
$P['name'] = db_string($name);
|
|
$DB->query("
|
|
SELECT ID
|
|
FROM collages
|
|
WHERE Name = '".$P['name']."'");
|
|
$i = 2;
|
|
while ($DB->has_results()) {
|
|
$P['name'] = db_string("$name no. $i");
|
|
$DB->query("
|
|
SELECT ID
|
|
FROM collages
|
|
WHERE Name = '".$P['name']."'");
|
|
$i++;
|
|
}
|
|
}
|
|
$Val->SetFields('description', '1', 'string', 'The description must be between 10 and 65535 characters', array('maxlength' => 65535, 'minlength' => 10));
|
|
|
|
$Err = $Val->ValidateForm($_POST);
|
|
|
|
if (!$Err && $P['category'] === '0') {
|
|
$DB->query("
|
|
SELECT COUNT(ID)
|
|
FROM collages
|
|
WHERE UserID = '$LoggedUser[ID]'
|
|
AND CategoryID = '0'
|
|
AND Deleted = '0'");
|
|
list($CollageCount) = $DB->next_record();
|
|
if (($CollageCount >= $LoggedUser['Permissions']['MaxCollages']) || !check_perms('site_collages_personal')) {
|
|
$Err = 'You may not create a personal collage.';
|
|
} elseif (check_perms('site_collages_renamepersonal') && !stristr($P['name'], $LoggedUser['Username'])) {
|
|
$Err = 'Your personal collage\'s title must include your username.';
|
|
}
|
|
}
|
|
|
|
if (!$Err) {
|
|
$DB->query("
|
|
SELECT ID, Deleted
|
|
FROM collages
|
|
WHERE Name = '$P[name]'");
|
|
if ($DB->has_results()) {
|
|
list($ID, $Deleted) = $DB->next_record();
|
|
if ($Deleted) {
|
|
$Err = 'That collection already exists but needs to be recovered; please <a href="staffpm.php">contact</a> the staff team!';
|
|
} else {
|
|
$Err = "That collection already exists: <a href=\"/collages.php?id=$ID\">$ID</a>.";
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!$Err) {
|
|
if (empty($CollageCats[$P['category']])) {
|
|
$Err = 'Please select a category';
|
|
}
|
|
}
|
|
|
|
if ($Err) {
|
|
$Name = $_POST['name'];
|
|
$Category = $_POST['category'];
|
|
$Tags = $_POST['tags'];
|
|
$Description = $_POST['description'];
|
|
include(SERVER_ROOT.'/sections/collages/new.php');
|
|
die();
|
|
}
|
|
|
|
$TagList = explode(',', $_POST['tags']);
|
|
foreach ($TagList as $ID => $Tag) {
|
|
$TagList[$ID] = Misc::sanitize_tag($Tag);
|
|
}
|
|
$TagList = implode(' ', $TagList);
|
|
|
|
$DB->query("
|
|
INSERT INTO collages
|
|
(Name, Description, UserID, TagList, CategoryID)
|
|
VALUES
|
|
('$P[name]', '$P[description]', $LoggedUser[ID], '$TagList', '$P[category]')");
|
|
|
|
$CollageID = $DB->inserted_id();
|
|
$Cache->delete_value("collage_$CollageID");
|
|
Misc::write_log("Collage $CollageID (".$_POST['name'].') was created by '.$LoggedUser['Username']);
|
|
header("Location: collages.php?id=$CollageID");
|
|
?>
|