| | 55 | // Approve a friendship request |
|---|
| | 56 | case "friends:approve:request": |
|---|
| | 57 | if (isset($_REQUEST['request_id']) && logged_on && run("users:type:get", $page_owner) == "person") { |
|---|
| | 58 | |
|---|
| | 59 | $request_id = (int) $_REQUEST['request_id']; |
|---|
| | 60 | $request = db_query("select users.name, friends_requests.owner, friends_requests.friend from friends_requests left join users on users.ident = friends_requests.owner where friends_requests.ident = $request_id"); |
|---|
| | 61 | if (sizeof($request) > 0) { |
|---|
| | 62 | $request = $request[0]; |
|---|
| | 63 | if (run("permissions:check",array("userdetails:change", $page_owner))) { |
|---|
| | 64 | db_query("delete from friends_requests where ident = $request_id"); |
|---|
| | 65 | db_query("insert into friends set owner = " . $request->owner . ", friend = " . $request->friend); |
|---|
| | 66 | $messages[] = sprintf(gettext("You approved the friendship request. %s now lists you as a friend."),stripslashes($request->name)); |
|---|
| | 67 | } else { |
|---|
| | 68 | $messages[] = gettext("Error: you do not have authority to modify this friendship request."); |
|---|
| | 69 | } |
|---|
| | 70 | } else { |
|---|
| | 71 | $messages[] = gettext("An error occurred: the friendship request could not be found."); |
|---|
| | 72 | } |
|---|
| | 73 | |
|---|
| | 74 | } |
|---|
| | 75 | break; |
|---|
| | 76 | // Reject a friendship request |
|---|
| | 77 | case "friends:decline:request": |
|---|
| | 78 | if (isset($_REQUEST['request_id']) && logged_on && run("users:type:get", $page_owner) == "person") { |
|---|
| | 79 | |
|---|
| | 80 | $request_id = (int) $_REQUEST['request_id']; |
|---|
| | 81 | $request = db_query("select users.name, friends_requests.owner, friends_requests.friend from friends_requests left join users on users.ident = friends_requests.owner where ident = $request_id"); |
|---|
| | 82 | if (sizeof($request) > 0) { |
|---|
| | 83 | $request = $request[0]; |
|---|
| | 84 | if (run("permissions:check",array("userdetails:change", $page_owner))) { |
|---|
| | 85 | db_query("delete from friends_requests where ident = $request_id"); |
|---|
| | 86 | $messages[] = sprintf(gettext("You declined the friendship request. %s does not list you as a friend."),stripslashes($request->name)); |
|---|
| | 87 | } else { |
|---|
| | 88 | $messages[] = gettext("Error: you do not have authority to modify this friendship request."); |
|---|
| | 89 | } |
|---|
| | 90 | } else { |
|---|
| | 91 | $messages[] = gettext("An error occurred: the friendship request could not be found."); |
|---|
| | 92 | } |
|---|
| | 93 | |
|---|
| | 94 | } |
|---|
| | 95 | break; |
|---|
