# GPL: http://www.gnu.org/licenses/gpl.txt
#
##################################################
if (!defined('EXPONENT')) {
exit('');
}
$banner = null;
if (isset($_POST['id'])) {
$banner = $db->selectObject('banner_ad', 'id=' . intval($_POST['id']));
$loc = unserialize($banner->location_data);
}
if (exponent_permissions_check('manage', $loc)) {
$filenew = $_FILES['file']['tmp_name'];
$fileup = getimagesize($filenew);
if ($fileup[2] > 0 && $fileup[1] > 0) {
$banner = banner_ad::update($_POST, $banner);
$banner->location_data = serialize($loc);
if (!isset($banner->file_id)) {
$directory = 'files/BannerModule/' . $loc->src;
$file = file::update('file', $directory, null);
if (is_object($file)) {
$banner->file_id = $db->insertObject($file, 'file');
$db->insertObject($banner, 'banner_ad');
} else {
// If file::update() returns a non-object, it should be a string. That string is the error message.
$post = $_POST;
$post['_formError'] = $file;
exponent_sessions_set('last_POST', $post);
header('Location: ' . $_SERVER['HTTP_REFERER']);
}
} else {
