48 lines
1.2 KiB
PHP
48 lines
1.2 KiB
PHP
<?php
|
|
|
|
session_start();
|
|
|
|
require_once("../../queries/post.php");
|
|
require_once("../../queries/group_page.php");
|
|
require_once("../../queries/connect.php");
|
|
require_once("../../queries/checkInput.php");
|
|
require_once("../../queries/user.php");
|
|
|
|
if (isset($_SESSION["userID"]) &&
|
|
getRoleByID($_SESSION["userID"]) != 'frozen' &&
|
|
getRoleByID($_SESSION["userID"]) != 'banned') {
|
|
|
|
if (empty($_POST["title"]) or
|
|
empty($_POST["content"]) or
|
|
empty($_SESSION["userID"])
|
|
) {
|
|
header('HTTP/1.1 500 Non enough arguments');
|
|
}
|
|
|
|
if (empty($_POST["group"])) {
|
|
// User Post
|
|
makePost(
|
|
$_SESSION["userID"],
|
|
null,
|
|
test_input($_POST["title"]),
|
|
test_input($_POST["content"])
|
|
);
|
|
} else {
|
|
// Group Post
|
|
|
|
// Check if the user is an admin or mod of the group.
|
|
if (!in_array(selectGroupRole($_POST["group"]), array('mod', 'admin'))) {
|
|
header('HTTP/1.1 500 Non enough rights');
|
|
return;
|
|
}
|
|
|
|
makePost(
|
|
$_SESSION["userID"],
|
|
$_POST["group"],
|
|
test_input($_POST["title"]),
|
|
test_input($_POST["content"])
|
|
);
|
|
}
|
|
} else {
|
|
echo "frozen";
|
|
} |