mambax7 / extcal

post.php

<?php

include __DIR__ . '/../../mainfile.php';
$GLOBALS['xoopsOption']['template_main'] = 'extcal_post.tpl';

include XOOPS_ROOT_PATH . '/class/xoopsformloader.php';
include __DIR__ . '/class/form/extcalform.php';
include __DIR__ . '/class/perm.php';

include_once __DIR__ . '/class/utilities.php';
include_once __DIR__ . '/include/constantes.php';

$permHandler = ExtcalPerm::getHandler();
$xoopsUser   = $xoopsUser ?: null;

if (!$permHandler->isAllowed($xoopsUser, 'extcal_cat_submit', (int)$_POST['cat_id'])) {
    redirect_header('index.php', 3);
    exit;
}

// Getting eXtCal object's handler
$eventHandler = xoops_getModuleHandler(_EXTCAL_CLS_EVENT, _EXTCAL_MODULE);

if (isset($_POST['form_preview'])) {
    include XOOPS_ROOT_PATH . '/header.php';

    // Title of the page
    $xoopsTpl->assign('xoops_pagetitle', _MI_EXTCAL_SUBMIT_EVENT);

    $data = array(
        'event_title'        => $_POST['event_title'],
        'cat_id'             => (int)$_POST['cat_id'],
        'event_desc'         => $_POST['event_desc'],
        'event_nbmember'     => (int)$_POST['event_nbmember'],
        'event_contact'      => $_POST['event_contact'],
        'event_url'          => $_POST['event_url'],
        'event_email'        => $_POST['event_email'],
        'event_address'      => $_POST['event_address'],
        'event_approved'     => 1,
        'event_start'        => $_POST['event_start'],
        'have_end'           => $_POST['have_end'],
        'event_end'          => $_POST['event_end'],
        'dohtml'             => (int)$xoopsModuleConfig['allow_html'],
        'event_price'        => $_POST['event_price'],
        'event_organisateur' => $_POST['event_organisateur'],
        'event_icone'        => $_POST['event_icone'],
    );

    if (isset($_POST['event_id'])) {
        $data['event_id'] = (int)$_POST['event_id'];
    }

    // Creating tempory event object to apply Object data filtering
    $event = $eventHandler->createEventForPreview($data);
    $event = $eventHandler->objectToArray($event, array('cat_id'), 'p');

    // Adding formated date for start and end event
    $eventHandler->formatEventDate($event, $xoopsModuleConfig['event_date_event']);

    // Assigning event to the template
    $xoopsTpl->assign('event', $event);

    //     $lang = array(
    //         'start' => _MD_EXTCAL_START, 'end' => _MD_EXTCAL_END, 'contact_info' => _MD_EXTCAL_CONTACT_INFO, 'email' => _MD_EXTCAL_EMAIL, 'url' => _MD_EXTCAL_URL, 'whos_going' => _MD_EXTCAL_WHOS_GOING, 'whosnot_going' => _MD_EXTCAL_WHOSNOT_GOING
    //     );
    //     // Assigning language data to the template
    //     $xoopsTpl->assign('lang', $lang);

    $event['cat_id']   = (int)$_POST['cat_id'];
    $event['have_end'] = $_POST['have_end'];

    // Display the submit form
    $form     = $eventHandler->getEventForm('user', 'preview', $event);
    $formBody = $form->render();
    $xoopsTpl->assign('preview', true);
    $xoopsTpl->assign('formBody', $formBody);

    include XOOPS_ROOT_PATH . '/footer.php';
} elseif (isset($_POST['form_submit'])) {
    if (!isset($_POST['rrule_weekly_interval'])) {
        $_POST['rrule_weekly_interval'] = 0;
    }
    // ext_echoArray($_POST, '',true);
    // exit;
    // $ts = print_r($_POST,true);
    // echo "<pre>{$ts}</pre>";
    // If the date format is wrong
    //    if (
    //        !preg_match(_EXTCAL_MOTIF_DATE, $_POST['event_start']['date'])
    //            || !preg_match(_EXTCAL_MOTIF_DATE, $_POST['event_end']['date'])
    //    ) {
    //        redirect_header(
    //            'index.php', 3, _MD_EXTCAL_WRONG_DATE_FORMAT . "<br>"
    //            . implode('<br>', $GLOBALS['xoopsSecurity']->getErrors())
    //        );
    //        exit;
    //    }
    ///////////////////////////////////////////////////////////////////////////////
    ExtcalUtilities::extcal_loadImg($_REQUEST, $event_picture1, $event_picture2);
    ///////////////////////////////////////////////////////////////////////////////

    include_once __DIR__ . '/class/perm.php';

    $fileHandler = xoops_getModuleHandler(_EXTCAL_CLS_FILE, _EXTCAL_MODULE);
    $permHandler = ExtcalPerm::getHandler();
    $approve     = $permHandler->isAllowed($xoopsUser, 'extcal_cat_autoapprove', (int)$_POST['cat_id']);

    $data = array(
        'event_title'         => $_POST['event_title'],
        'cat_id'              => $_POST['cat_id'],
        'event_desc'          => $_POST['event_desc'],
        'event_nbmember'      => $_POST['event_nbmember'],
        'event_organisateur'  => $_POST['event_organisateur'],
        'event_contact'       => $_POST['event_contact'],
        'event_url'           => $_POST['event_url'],
        'event_email'         => $_POST['event_email'],
        'event_address'       => $_POST['event_address'],
        'event_approved'      => ($approve == false) ? 0 : 1,

It seems like you are loosely comparing two booleans. Considering using the strict comparison === instead.

        'event_start'         => $_POST['event_start'],
        'have_end'            => $_POST['have_end'],
        'event_end'           => $_POST['event_end'],
        'event_picture1'      => @$event_picture1,
        'event_picture2'      => @$event_picture2,
        'event_price'         => @$_POST['event_price'],
        'event_etablissement' => $_POST['event_etablissement'],
        'dohtml'              => $xoopsModuleConfig['allow_html'],
        'event_icone'         => $_POST['event_icone'],

    );

    if (isset($_POST['event_id'])) {
        $eventHandler->modifyEvent((int)$_POST['event_id'], $data);
        $fileHandler->updateEventFile((int)$_POST['event_id']);
        $fileHandler->createFile((int)$_POST['event_id']);

        redirect_header('event.php?event=' . $_POST['event_id'], 3, _MD_EXTCAL_EVENT_UPDATED, false);
    } else {
        $data['event_submitter']  = $xoopsUser ? $xoopsUser->getVar('uid') : 0;
        $data['event_submitdate'] = time();

        $eventHandler->createEvent($data);
        $fileHandler->createFile($eventHandler->getInsertId());

        $notifyEvent = 'new_event';
        if (!$approve) {
            $notifyEvent = 'new_event_pending';
        }

        $notificationHandler = xoops_getHandler('notification');
        $notificationHandler->triggerEvent('global', 0, $notifyEvent, array('EVENT_TITLE' => $_POST['event_title']));
        if ($approve == 1) {
            $catHandler = xoops_getModuleHandler(_EXTCAL_CLS_CAT, _EXTCAL_MODULE);
            $cat        = $catHandler->getCat((int)$_POST['cat_id'], $xoopsUser, 'all');
            $notificationHandler->triggerEvent('cat', (int)$_POST['cat_id'], 'new_event_cat', array(
                'EVENT_TITLE' => $_POST['event_title'],
                'CAT_NAME'    => $cat->getVar('cat_name'),
            ));
        }
    }

    if ($approve) {
        redirect_header(_EXTCAL_FILE_CALMONTH, 3, _MD_EXTCAL_EVENT_CREATED, false);
    } else {
        redirect_header(_EXTCAL_FILE_CALMONTH, 3, _MD_EXTCAL_EVENT_PENDING, false);
    }
}