<?php require_once 'cls/clsAlbum.php'; require_once 'cls/clsComment.php'; require_once 'cls/clsPicture.php'; $objComment = new clsComment(); $objComment->getFromRequest(); $objComment->load(); $objPicture = new clsPicture(); $objPicture->getFromRequest(); $objPicture->load(); $objAlbum = new clsAlbum($objPicture->get('album_id')); if ($strSubAction == 'edit') { if ($objComment->isNew() && !$objAlbum->canPostComment($objUser)) { throw new Exception('exception_accessdenied'); } if (!$objComment->canEdit($objUser)) { throw new Exception('exception_accessdenied'); } $objAlbum->addBreadcrumbs($objBreadcrumbs); $objBreadcrumbs->add($objPicture->get('name'), 'index.php?action=picture&' . $objPicture->getIDPair()); $objBreadcrumbs->add('Post comment', 'comment.php?action=edit&' . $objPicture->getIDPair() . '&' . $objComment->getIDPair()); $objCommentTemplate = new clsTemplate('editcomment'); $objCommentTemplate->setText('HIDDEN', $objComment->getHiddenField('id')); $objCommentTemplate->setText('HIDDEN', $objPicture->getHiddenField('id')); $objCommentTemplate->setText('HIDDEN', "<input type='hidden' name='action' value='comment'>"); $objCommentTemplate->setText('HIDDEN', "<input type='hidden' name='subaction' value='save'>"); if ($objUser) { $objCommentTemplate->setText('NAME', '<strong>' . $objUser->get('username') . '</strong>'); } else { $objCommentTemplate->setText('NAME', $objComment->getTextField('username'));
require_once 'cls/clsDB.php'; require_once 'cls/clsPicture.php'; require_once 'cls/clsSetting.php'; require_once 'cls/clsThumbnail.php'; require_once 'cls/clsUser.php'; require_once 'include/messages.php'; session_start(); clsSetting::load_settings(); try { if (!isset($_SESSION['objUser'])) { $objUser = clsUser::getCookie(); } else { $objUser = $_SESSION['objUser']; } $objPicture = new clsPicture(); $objPicture->getFromRequest(array('id')); $objPicture->load(); if ($objPicture->isnew()) { throw new Exception('exception_invalidrequest'); } $objAlbum = new clsAlbum($objPicture->get('album_id')); if (!$objAlbum->canView($objUser)) { throw new Exception('exception_invalidrequest'); } if (isset($_REQUEST['tn']) || isset($_REQUEST['action']) && $_REQUEST['action'] == 'tn') { $intWidth = isset($_REQUEST['w']) ? $_REQUEST['w'] : -1; $intHeight = isset($_REQUEST['h']) ? $_REQUEST['h'] : -1; if (!is_numeric($intWidth) || $intWidth < 0 || $intWidth > MAX_X) { throw new Exception('exception_invalidrequest'); } if (!is_numeric($intHeight) || $intHeight < 0 || $intHeight > MAX_Y) {