| 1 |
<?php |
|---|
| 2 |
|
|---|
| 3 |
|
|---|
| 4 |
|
|---|
| 5 |
if (isset($_REQUEST['action'])) { |
|---|
| 6 |
switch($_REQUEST['action']) { |
|---|
| 7 |
|
|---|
| 8 |
|
|---|
| 9 |
case "group:create": |
|---|
| 10 |
if (isset($_POST['name']) && logged_on) { |
|---|
| 11 |
$name = addslashes($_POST['name']); |
|---|
| 12 |
$ident = (int) $_SESSION['userid']; |
|---|
| 13 |
db_query("insert into groups set |
|---|
| 14 |
name = '$name', |
|---|
| 15 |
owner = $ident"); |
|---|
| 16 |
unset($_SESSION['groups_cache']); |
|---|
| 17 |
} |
|---|
| 18 |
break; |
|---|
| 19 |
|
|---|
| 20 |
case "group:edit": |
|---|
| 21 |
if ( |
|---|
| 22 |
logged_on && |
|---|
| 23 |
isset($_REQUEST['groupid']) && |
|---|
| 24 |
isset($_REQUEST['groupname']) |
|---|
| 25 |
) { |
|---|
| 26 |
$groupid = (int) $_REQUEST['groupid']; |
|---|
| 27 |
$ident = (int) $_SESSION['userid']; |
|---|
| 28 |
$name = addslashes($_REQUEST['groupname']); |
|---|
| 29 |
db_query("update groups set name = '$name' |
|---|
| 30 |
where owner = $ident |
|---|
| 31 |
and ident = $groupid"); |
|---|
| 32 |
unset($_SESSION['groups_cache']); |
|---|
| 33 |
$messages[] = "Your group was updated."; |
|---|
| 34 |
foreach($data['access'] as $key => $accessarray) { |
|---|
| 35 |
if ($accessarray[1] == "group" . $groupid) { |
|---|
| 36 |
$data['access'][$key] = array(stripslashes($_REQUEST['groupname']),"group" . $groupid); |
|---|
| 37 |
} |
|---|
| 38 |
} |
|---|
| 39 |
} |
|---|
| 40 |
break; |
|---|
| 41 |
|
|---|
| 42 |
case "group:delete": |
|---|
| 43 |
if (isset($_POST['groupid']) && logged_on) { |
|---|
| 44 |
$groupid = (int) $_POST['groupid']; |
|---|
| 45 |
$ident = (int) $_SESSION['userid']; |
|---|
| 46 |
db_query("delete from groups where ident = $groupid and owner = $ident"); |
|---|
| 47 |
if (db_affected_rows() > 0) { |
|---|
| 48 |
db_query("delete from group_membership where group_id = $groupid"); |
|---|
| 49 |
} |
|---|
| 50 |
unset($_SESSION['groups_cache']); |
|---|
| 51 |
} else { |
|---|
| 52 |
|
|---|
| 53 |
} |
|---|
| 54 |
break; |
|---|
| 55 |
|
|---|
| 56 |
case "group:addmember": |
|---|
| 57 |
if (isset($_POST['groupid']) && logged_on) { |
|---|
| 58 |
$groupid = (int) $_POST['groupid']; |
|---|
| 59 |
$ident = (int) $_SESSION['userid']; |
|---|
| 60 |
$exists = db_query("select * from groups where ident = $groupid and owner = $ident"); |
|---|
| 61 |
if (sizeof($exists) > 0) { |
|---|
| 62 |
if (sizeof($_POST['friends']) > 0) { |
|---|
| 63 |
foreach($_POST['friends'] as $newmember) { |
|---|
| 64 |
$newmember = (int) $newmember; |
|---|
| 65 |
$exists = db_query("select * from group_membership |
|---|
| 66 |
where user_id = $newmember |
|---|
| 67 |
and group_id = $groupid"); |
|---|
| 68 |
if (sizeof($exists) < 1) { |
|---|
| 69 |
db_query("insert into group_membership |
|---|
| 70 |
set user_id = $newmember, |
|---|
| 71 |
group_id = $groupid"); |
|---|
| 72 |
} else { |
|---|
| 73 |
echo "membership exists: " . var_export($exists,true); |
|---|
| 74 |
} |
|---|
| 75 |
} |
|---|
| 76 |
} else { |
|---|
| 77 |
echo "post: " . var_export($_POST,true); |
|---|
| 78 |
} |
|---|
| 79 |
} else { |
|---|
| 80 |
echo "group exists: " . var_export($exists,true); |
|---|
| 81 |
} |
|---|
| 82 |
unset($_SESSION['groups_cache']); |
|---|
| 83 |
} |
|---|
| 84 |
break; |
|---|
| 85 |
|
|---|
| 86 |
case "group:removemember": |
|---|
| 87 |
if (isset($_POST['groupid']) && logged_on) { |
|---|
| 88 |
$groupid = (int) $_POST['groupid']; |
|---|
| 89 |
$ident = (int) $_SESSION['userid']; |
|---|
| 90 |
$exists = db_query("select * from groups where ident = $groupid and owner = $ident"); |
|---|
| 91 |
if (sizeof($exists) > 0) { |
|---|
| 92 |
if (sizeof($_POST['members']) > 0) { |
|---|
| 93 |
foreach($_POST['members'] as $newmember) { |
|---|
| 94 |
$newmember = (int) $newmember; |
|---|
| 95 |
db_query("delete from group_membership where user_id = $newmember |
|---|
| 96 |
and group_id = $groupid"); |
|---|
| 97 |
} |
|---|
| 98 |
} |
|---|
| 99 |
} |
|---|
| 100 |
unset($_SESSION['groups_cache']); |
|---|
| 101 |
} |
|---|
| 102 |
break; |
|---|
| 103 |
|
|---|
| 104 |
} |
|---|
| 105 |
|
|---|
| 106 |
} |
|---|
| 107 |
|
|---|
| 108 |
?> |
|---|