$controller->storeFromDefaultForm(_MD_PROFILE_VIDEOS_CREATED, _MD_PROFILE_VIDEOS_MODIFIED, PROFILE_URL . basename(__FILE__)); break; case "del": if (!$videosObj->userCanEditAndDelete()) { redirect_header($videosObj->getItemLink(true), 3, _NOPERM); } if (isset($_POST['confirm']) && !icms::$security->check()) { redirect_header(icms_getPreviousPage('index.php'), 3, _MD_PROFILE_SECURITY_CHECK_FAILED . implode('<br />', icms::$security->getErrors())); } $controller = new icms_ipf_Controller($profile_videos_handler); $controller->handleObjectDeletionFromUserSide(); break; default: $clean_start = isset($_GET['start']) ? (int) $_GET['start'] : 0; if ($real_uid && $real_uid == $uid) { editvideos($videosObj, true); } if ($clean_uid > 0 || $real_uid > 0) { $uid = $clean_uid > 0 ? $clean_uid : $real_uid; $videosArray = $profile_videos_handler->getVideos($clean_start, icms::$module->config['videosperpage'], $clean_uid); if (count($videosArray) == 0) { $icmsTpl->assign('lang_nocontent', _MD_PROFILE_VIDEOS_NOCONTENT); } else { $total_videos_count = $profile_videos_handler->getCount(new icms_db_criteria_Compo(new icms_db_criteria_Item('uid_owner', $uid))); $pagenav = new icms_view_PageNav($total_videos_count, icms::$module->config['videosperpage'], $clean_start, 'start', 'uid=' . $uid); $icmsTpl->assign('profile_videos_pagenav', $pagenav->renderNav()); $icmsTpl->assign('profile_videos', $videosArray); unset($total_videos_count, $pagenav); } } else { redirect_header(PROFILE_URL);
/** Create a whitelist of valid values, be sure to use appropriate types for each value * Be sure to include a value for no parameter, if you have a default condition */ $valid_op = array('mod', 'changedField', 'addvideos', 'del', 'view', ''); /** * in_array() is a native PHP function that will determine if the value of the * first argument is found in the array listed in the second argument. Strings * are case sensitive and the 3rd argument determines whether type matching is * required */ if (in_array($clean_op, $valid_op, true)) { switch ($clean_op) { case "mod": case "changedField": icms_cp_header(); editvideos($clean_videos_id); break; case "del": $controller = new icms_ipf_Controller($profile_videos_handler); $controller->handleObjectDeletion(); break; default: icms_cp_header(); icms::$module->displayAdminMenu(10, _AM_PROFILE_VIDEOS); $objectTable = new icms_ipf_view_Table($profile_videos_handler); $objectTable->addColumn(new icms_ipf_view_Column('videos_id')); $objectTable->addColumn(new icms_ipf_view_Column('uid_owner', false, false, 'getVideoSender')); $objectTable->addColumn(new icms_ipf_view_Column('video_title', _GLOBAL_LEFT, false, 'getVideoTitle')); $objectTable->addColumn(new icms_ipf_view_Column('video_desc')); $objectTable->addColumn(new icms_ipf_view_Column('youtube_code', 'center', 330, 'getVideoToDisplay', false, false, false)); $objectTable->addQuickSearch(array('video_title', 'video_desc', 'youtube_code'));