Gazelle/sections/torrents/takegroupedit.php

<?

authorize();

include(SERVER_ROOT.'/classes/class_text.php');
$Text = new TEXT;

// Quick SQL injection check
if (!$_REQUEST['groupid'] || !is_number($_REQUEST['groupid'])) {
	error(404);
}
// End injection check

if (!check_perms('site_edit_wiki')) {
	error(403);
}

// Variables for database input
$UserID = $LoggedUser['ID'];
$GroupID = $_REQUEST['groupid'];

// Get information for the group log
$DB->query("SELECT VanityHouse FROM torrents_group WHERE ID = '$GroupID'");
if (!(list($OldVH) = $DB->next_record())) {
	error(404);
}

if (!empty($_GET['action']) && $_GET['action'] == 'revert') { // if we're reverting to a previous revision
	$RevisionID=$_GET['revisionid'];
	if (!is_number($RevisionID)) {
		error(0);
	}

	// to cite from merge: "Everything is legit, let's just confim they're not retarded"
	if (empty($_GET['confirm'])) {
		View::show_header();
?>
	<div class="center thin">
	<div class="header">
		<h2>Revert Confirm!</h2>
	</div>
	<div class="box pad">
		<form class="confirm_form" name="torrent_group" action="torrents.php" method="get">
			<input type="hidden" name="action" value="revert" />
			<input type="hidden" name="auth" value="<?=$LoggedUser['AuthKey']?>" />
			<input type="hidden" name="confirm" value="true" />
			<input type="hidden" name="groupid" value="<?=$GroupID?>" />
			<input type="hidden" name="revisionid" value="<?=$RevisionID?>" />
			<h3>You are attempting to revert to the revision <a href="torrents.php?id=<?=$GroupID?>&revisionid=<?=$RevisionID?>"><?=$RevisionID?></a>.</h3>
			<input type="submit" value="Confirm" />
		</form>
	</div>
	</div>
<?
		View::show_footer();
		die();
	}
} else { // with edit, the variables are passed with POST
	$Body = $_POST['body'];
	$Image = $_POST['image'];
	$ReleaseType = (int)$_POST['releasetype'];
	if ( $_POST['vanity_house'] && check_perms('torrents_edit_vanityhouse') ) {
		$VanityHouse = ( isset($_POST['vanity_house']) ? 1 : 0 );
	} else {
		$VanityHouse = $OldVH;
	}

	if (($GroupInfo = $Cache->get_value('torrents_details_'.$GroupID)) && !isset($GroupInfo[0][0])) {
		$GroupCategoryID = $GroupInfo[0]['CategoryID'];
	} else {
		$DB->query("SELECT CategoryID FROM torrents_group WHERE ID='$GroupID'");
		list($GroupCategoryID) = $DB->next_record();
	}
	if ($GroupCategoryID == 1 && !isset($ReleaseTypes[$ReleaseType]) || $GroupCategoryID != 1 && $ReleaseType) {
		error(403);
	}

	// Trickery
	if (!preg_match("/^".IMAGE_REGEX."$/i", $Image)) {
		$Image = '';
	}
	ImageTools::blacklisted($Image);
	$Summary = db_string($_POST['summary']);
}

// Insert revision
if (empty($RevisionID)) { // edit
	$DB->query("INSERT INTO wiki_torrents (PageID, Body, Image, UserID, Summary, Time)
				VALUES ('$GroupID', '".db_string($Body)."', '".db_string($Image)."', '$UserID', '$Summary', '".sqltime()."')");

	$DB->query("UPDATE torrents_group SET ReleaseType='$ReleaseType' WHERE ID='$GroupID'");
	Torrents::update_hash($GroupID);
}
else { // revert
	$DB->query("SELECT PageID,Body,Image FROM wiki_torrents WHERE RevisionID='$RevisionID'");
	list($PossibleGroupID, $Body, $Image) = $DB->next_record();
	if ($PossibleGroupID != $GroupID) {
		error(404);
	}

	$DB->query("INSERT INTO wiki_torrents (PageID, Body, Image, UserID, Summary, Time)
		SELECT '$GroupID', Body, Image, '$UserID', 'Reverted to revision $RevisionID', '".sqltime()."'
		FROM wiki_artists WHERE RevisionID='$RevisionID'");
}

$RevisionID=$DB->inserted_id();

$Body = db_string($Body);
$Image = db_string($Image);

// Update torrents table (technically, we don't need the RevisionID column, but we can use it for a join which is nice and fast)
$DB->query("
	UPDATE torrents_group
	SET
		RevisionID='$RevisionID',
		".((isset($VanityHouse)) ? "VanityHouse='$VanityHouse'," : '')."
		WikiBody='$Body',
		WikiImage='$Image'
	WHERE ID='$GroupID'");
// Log VH changes
if ($OldVH != $VanityHouse && check_perms('torrents_edit_vanityhouse')) {
	$DB->query("
		INSERT INTO group_log (GroupID, UserID, Time, Info)
		VALUES ('$GroupID',".$LoggedUser['ID'].",'".sqltime()."','".db_string('Vanity house status changed to '.($VanityHouse ? 'true' : 'false'))."')");
}

// There we go, all done!

$Cache->delete_value('torrents_details_'.$GroupID);
$DB->query("SELECT CollageID FROM collages_torrents WHERE GroupID='$GroupID'");
if ($DB->record_count() > 0) {
	while (list($CollageID) = $DB->next_record()) {
		$Cache->delete_value('collage_'.$CollageID);
	}
}

//Fix Recent Uploads/Downloads for image change
$DB->query("
	SELECT DISTINCT UserID
	FROM torrents AS t
		LEFT JOIN torrents_group AS tg ON t.GroupID=tg.ID
	WHERE tg.ID = $GroupID");

$UserIDs = $DB->collect('UserID');
foreach ($UserIDs as $UserID) {
	$RecentUploads = $Cache->get_value('recent_uploads_'.$UserID);
	if (is_array($RecentUploads)) {
		foreach ($RecentUploads as $Key => $Recent) {
			if ($Recent['ID'] == $GroupID) {
				if ($Recent['WikiImage'] != $Image) {
					$Recent['WikiImage'] = $Image;
					$Cache->begin_transaction('recent_uploads_'.$UserID);
					$Cache->update_row($Key, $Recent);
					$Cache->commit_transaction(0);
				}
			}
		}
	}
}

$DB->query("SELECT ID FROM torrents WHERE GroupID = ".$GroupID);
if ($DB->record_count()) {
	$TorrentIDs = implode(',', $DB->collect('ID'));
	$DB->query("SELECT DISTINCT uid FROM xbt_snatched WHERE fid IN (".$TorrentIDs.")");
	$Snatchers = $DB->collect('uid');
	foreach ($Snatchers as $UserID) {
		$RecentSnatches = $Cache->get_value('recent_snatches_'.$UserID);
		if (is_array($RecentSnatches)) {
			foreach ($RecentSnatches as $Key => $Recent) {
				if ($Recent['ID'] == $GroupID) {
					if ($Recent['WikiImage'] != $Image) {
						$Recent['WikiImage'] = $Image;
						$Cache->begin_transaction('recent_snatches_'.$UserID);
						$Cache->update_row($Key, $Recent);
						$Cache->commit_transaction(0);
					}
				}
			}
		}
	}
}

header("Location: torrents.php?id=".$GroupID);
?>