Beispiel #1
0
         break;
     } else {
         editSong();
         break;
     }
 case "editSong":
     $song_id = mosGetParam($_GET, 'song_id', '');
     $song = new cbSong($database, "#__cb_");
     $song->load($song_id);
     if ($chordBase->has_permission("Edit Song", $cb_user_permission) || $song->published == 0 && $song->submitted_by == $my->id) {
         $song_id = mosGetParam($_REQUEST, 'song_id', '');
         editSong($song_id);
         break;
     } else {
         HTML_chordbase::cb_header("Error!");
         HTML_chordbase::cb_message(_PERMISSION_DENIED);
         break;
     }
 case "saveSong":
     if ($_POST["writer"] == "-1") {
         $query = "insert into `#__cb_writers` ( `name`, `published` ) values ( '" . $_POST["new_writer"] . "', '1' )";
         $database->setQuery($query);
         $database->query();
         $_POST["writer"] = $database->insertid();
     }
     if ($_POST["category"] == "-1") {
         $query = "insert into `#__cb_categories` ( `title`, `published` ) values ( '" . $_POST["new_category"] . "', '1' )";
         $database->setQuery($query);
         $database->query();
         $_POST["category"] = $database->insertid();
     }