die; } echo '<div class="title"> <h2>' . $LANG['rewards_add_title'] . '</h2> <div style="float:right; margin: 0 2px 0 0;"> <a href="?route=rewards.php&action=list" class="btn">' . $LANG['rewards_view'] . '</a> </div>'; if (!empty($LANG['rewards_add_subtitle'])) { echo '<span>' . $LANG['rewards_add_subtitle'] . '</span>'; } echo '</div>'; if ($_SERVER['REQUEST_METHOD'] == 'POST' && isset($_POST['csrf']) && check_csrf($_POST['csrf'], 'rewards_csrf')) { if (isset($_POST['name']) && isset($_POST['points']) && isset($_POST['text']) && isset($_POST['fields'])) { if (actions::add_reward(array('name' => $_POST['name'], 'points' => $_POST['points'], 'description' => $_POST['text'], 'fields' => $_POST['fields'], 'publish' => isset($_POST['publish']) ? 1 : 0))) { echo '<div class="a-success">' . $LANG['msg_added'] . '</div>'; } else { echo '<div class="a-error">' . $LANG['msg_error'] . '</div>'; } } } $csrf = $_SESSION['rewards_csrf'] = \site\utils::str_random(10); echo '<div class="form-table"> <form action="#" method="POST" enctype="multipart/form-data" autocomplete="off"> <div class="row"><span>' . $LANG['form_name'] . ':</span><div><input type="text" name="name" value="" /></div></div> <div class="row"><span>' . $LANG['form_image'] . ':</span> <div><input type="file" name="logo" /></div> </div> <div class="row"><span>' . $LANG['rewards_form_points'] . ' <span class="info"><span>' . $LANG['rewards_form_ipoints'] . '</span></span>:</span><div><input type="number" name="points" value="100" /></div> </div> <div class="row"><span>' . $LANG['form_description'] . ':</span><div><textarea name="text" style="min-height:100px;"></textarea></div></div>