1 | <?php declare(strict_types=1); |
||
2 | |||
3 | /* |
||
4 | You may not change or alter any portion of this comment or credits |
||
5 | of supporting developers from this source code or any supporting source code |
||
6 | which is considered copyrighted (c) material of the original comment or credit authors. |
||
7 | |||
8 | This program is distributed in the hope that it will be useful, |
||
9 | but WITHOUT ANY WARRANTY; without even the implied warranty of |
||
10 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. |
||
11 | */ |
||
12 | |||
13 | /** |
||
14 | * @copyright XOOPS Project https://xoops.org/ |
||
15 | * @license GNU GPL 2 or later (http://www.gnu.org/licenses/gpl-2.0.html) |
||
16 | * @author Marcello Brandão aka Suico |
||
17 | * @author XOOPS Development Team |
||
18 | * @since |
||
19 | */ |
||
20 | |||
21 | use Xmf\Request; |
||
22 | use XoopsModules\Yogurt; |
||
23 | |||
24 | require __DIR__ . '/header.php'; |
||
25 | |||
26 | //require_once __DIR__ . '/class/Image.php'; |
||
27 | |||
28 | if (!$GLOBALS['xoopsSecurity']->check()) { |
||
29 | redirect_header(Request::getString('HTTP_REFERER', '', 'SERVER'), 3, _MD_YOGURT_TOKENEXPIRED); |
||
30 | } |
||
31 | |||
32 | $cod_img = Request::getInt('cod_img', 0, 'POST'); |
||
33 | |||
34 | /** |
||
35 | * Creating the factory loading the picture changing its caption |
||
36 | */ |
||
37 | $imageFactory = new Yogurt\ImageHandler( |
||
38 | $xoopsDB |
||
39 | ); |
||
40 | $picture = $imageFactory->create(false); |
||
41 | $picture->load($cod_img); |
||
0 ignored issues
–
show
Bug
introduced
by
![]() |
|||
42 | $picture->setVar('private', Request::getInt('private', 0, 'POST')); |
||
43 | |||
44 | /** |
||
45 | * Verifying who's the owner to allow changes |
||
46 | */ |
||
47 | $uid = (int)$xoopsUser->getVar('uid'); |
||
48 | if ($uid === (int)$picture->getVar('uid_owner')) { |
||
49 | if ($imageFactory->insert2($picture)) { |
||
50 | if (1 === Request::getInt('private', 0, 'POST')) { |
||
51 | redirect_header('album.php', 2, _MD_YOGURT_PRIVATIZED); |
||
52 | } else { |
||
53 | redirect_header('album.php', 2, _MD_YOGURT_UNPRIVATIZED); |
||
54 | } |
||
55 | } else { |
||
56 | redirect_header('album.php', 2, _MD_YOGURT_ERROR); |
||
57 | } |
||
58 | } |
||
59 | |||
60 | require dirname(__DIR__, 2) . '/footer.php'; |
||
61 |