mirror of
https://github.com/WhatCD/Gazelle.git
synced 2024-12-13 10:56:26 +00:00
49 lines
1.5 KiB
PHP
49 lines
1.5 KiB
PHP
<?
|
|
if (!isset($_GET['id']) || !is_number($_GET['id'])) {
|
|
error(404);
|
|
}
|
|
|
|
$Action = $_GET['action'];
|
|
if ($Action != 'unfill' && $Action != 'delete') {
|
|
error(404);
|
|
}
|
|
|
|
$DB->query("SELECT UserID, FillerID FROM requests WHERE ID = ".$_GET['id']);
|
|
list($RequestorID, $FillerID) = $DB->next_record();
|
|
|
|
if ($Action == 'unfill') {
|
|
if ($LoggedUser['ID'] != $RequestorID && $LoggedUser['ID'] != $FillerID && !check_perms('site_moderate_requests')) {
|
|
error(403);
|
|
}
|
|
} elseif ($Action == "delete") {
|
|
if ($LoggedUser['ID'] != $RequestorID && !check_perms('site_moderate_requests')) {
|
|
error(403);
|
|
}
|
|
}
|
|
|
|
View::show_header(ucwords($Action) . ' Request');
|
|
?>
|
|
<div class="thin center">
|
|
<div class="box" style="width: 600px; margin: 0px auto;">
|
|
<div class="head colhead">
|
|
<?=ucwords($Action)?> Request
|
|
</div>
|
|
<div class="pad">
|
|
<form class="<?=(($Action == 'delete') ? 'delete_form' : 'edit_form')?>" name="request" action="requests.php" method="post">
|
|
<input type="hidden" name="action" value="take<?=$Action?>" />
|
|
<input type="hidden" name="auth" value="<?=$LoggedUser['AuthKey']?>" />
|
|
<input type="hidden" name="id" value="<?=$_GET['id']?>" />
|
|
<? if ($Action == 'delete') { ?>
|
|
<div class="warning">You will <strong>not</strong> get your bounty back if you delete this request.</div>
|
|
<? } ?>
|
|
<strong>Reason:</strong>
|
|
<input type="text" name="reason" size="30" />
|
|
<input value="<?=ucwords($Action)?>" type="submit" />
|
|
</form>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<?
|
|
View::show_footer();
|
|
?>
|