Elgg / Elgg

actions/avatar/upload.php

<?php
/**
 * Avatar upload action
 */

$guid = (int) get_input('guid');
$owner = get_user($guid);
if (!$owner || !$owner->canEdit()) {

$owner is of type ElggUser, thus it always evaluated to true.

	return elgg_error_response(elgg_echo('avatar:upload:fail'));
}

if (get_input('avatar_remove')) {
	if (!$owner->deleteIcon()) {
		return elgg_error_response(elgg_echo('avatar:remove:fail'));
	}
	
	return elgg_ok_response('', elgg_echo('avatar:remove:success'));
}

/* @var $avatar \Symfony\Component\HttpFoundation\File\UploadedFile */
$avatar = elgg_get_uploaded_file('avatar', false);
if (!empty($avatar) && !$avatar->isValid()) {
	$error = elgg_get_friendly_upload_error($avatar->getError());
	
	return elgg_error_response($error);
} elseif (empty($avatar)) {
	return elgg_error_response(elgg_echo('avatar:upload:fail'));
}

if (!$owner->saveIconFromUploadedFile('avatar')) {
	return elgg_error_response(elgg_echo('avatar:resize:fail'));
}

if (!elgg_trigger_event('profileiconupdate', $owner->type, $owner)) {
	return elgg_error_response();
}

// River
$view = 'river/user/default/profileiconupdate';

// remove old river items
elgg_delete_river([
	'subject_guid' => $owner->guid,
	'view' => $view,
	'limit' => false,
]);

// create new river entry
elgg_create_river_item([
	'view' => $view,
	'action_type' => 'update',
	'subject_guid' => $owner->guid,
	'object_guid' => $owner->guid,
]);

return elgg_ok_response('', elgg_echo('avatar:upload:success'));