mirror of
https://github.com/WhatCD/Gazelle.git
synced 2024-12-15 03:46:25 +00:00
52 lines
1.5 KiB
PHP
52 lines
1.5 KiB
PHP
<?php
|
|
if (!isset($_GET['id']) || !is_number($_GET['id'])) {
|
|
error(404);
|
|
}
|
|
|
|
$Action = $_GET['action'];
|
|
if ($Action !== 'unfill' && $Action !== 'delete') {
|
|
error(404);
|
|
}
|
|
|
|
$DB->query("
|
|
SELECT UserID, FillerID
|
|
FROM requests
|
|
WHERE ID = ".$_GET['id']);
|
|
list($RequestorID, $FillerID) = $DB->next_record();
|
|
|
|
if ($Action === 'unfill') {
|
|
if ($LoggedUser['ID'] !== $RequestorID && $LoggedUser['ID'] !== $FillerID && !check_perms('site_moderate_requests')) {
|
|
error(403);
|
|
}
|
|
} elseif ($Action === 'delete') {
|
|
if ($LoggedUser['ID'] !== $RequestorID && !check_perms('site_moderate_requests')) {
|
|
error(403);
|
|
}
|
|
}
|
|
|
|
View::show_header(ucwords($Action) . ' Request');
|
|
?>
|
|
<div class="thin center">
|
|
<div class="box" style="width: 600px; margin: 0px auto;">
|
|
<div class="head colhead">
|
|
<?=ucwords($Action)?> Request
|
|
</div>
|
|
<div class="pad">
|
|
<form class="<?=(($Action === 'delete') ? 'delete_form' : 'edit_form')?>" name="request" action="requests.php" method="post">
|
|
<input type="hidden" name="action" value="take<?=$Action?>" />
|
|
<input type="hidden" name="auth" value="<?=$LoggedUser['AuthKey']?>" />
|
|
<input type="hidden" name="id" value="<?=$_GET['id']?>" />
|
|
<? if ($Action === 'delete') { ?>
|
|
<div class="warning">You will <strong>not</strong> get your bounty back if you delete this request.</div>
|
|
<? } ?>
|
|
<strong>Reason:</strong>
|
|
<input type="text" name="reason" size="30" />
|
|
<input value="<?=ucwords($Action)?>" type="submit" />
|
|
</form>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<?
|
|
View::show_footer();
|
|
?>
|