mirror of
https://github.com/WhatCD/Gazelle.git
synced 2024-12-13 02:46:30 +00:00
46 lines
1.5 KiB
PHP
46 lines
1.5 KiB
PHP
<?
|
|
if(!isset($_GET['id']) || !is_number($_GET['id'])) { error(404); }
|
|
|
|
$Action = $_GET['action'];
|
|
if($Action != "unfill" && $Action != "delete") {
|
|
error(404);
|
|
}
|
|
|
|
$DB->query("SELECT UserID, FillerID FROM requests WHERE ID = ".$_GET['id']);
|
|
list($RequestorID, $FillerID) = $DB->next_record();
|
|
|
|
if($Action == 'unfill') {
|
|
if($LoggedUser['ID'] != $RequestorID && $LoggedUser['ID'] != $FillerID && !check_perms('site_moderate_requests')) {
|
|
error(403);
|
|
}
|
|
} elseif($Action == "delete") {
|
|
if($LoggedUser['ID'] != $RequestorID && !check_perms('site_moderate_requests')) {
|
|
error(403);
|
|
}
|
|
}
|
|
|
|
View::show_header(ucwords($Action)." Request");
|
|
?>
|
|
<div class="thin center">
|
|
<div class="box" style="width:600px; margin:0px auto;">
|
|
<div class="head colhead">
|
|
<?=ucwords($Action)?> Request
|
|
</div>
|
|
<div class="pad">
|
|
<form class="<?=($Action == 'delete')?'delete_form':'edit_form'?>" name="request" action="requests.php" method="post">
|
|
<input type="hidden" name="action" value="take<?=$Action?>" />
|
|
<input type="hidden" name="auth" value="<?=$LoggedUser['AuthKey']?>" />
|
|
<input type="hidden" name="id" value="<?=$_GET['id']?>" />
|
|
<? if($Action == 'delete') { ?>
|
|
<div class="warning">You will <strong>not</strong> get your bounty back if you delete this request.</div>
|
|
<? } ?>
|
|
<strong>Reason:</strong>
|
|
<input type="text" name="reason" size="30" />
|
|
<input value="<?=ucwords($Action)?>" type="submit" />
|
|
</form>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<?
|
|
View::show_footer();
|
|
?>
|