} $action = 'new'; break; case 'update': // Update slug... // Check that this action request is not a CSRF hacked request: $Session->assert_received_crumb('slug'); // Check that current user has permission to edit slugs: $current_User->check_perm('slugs', 'edit', true); // Make sure we got an slug_ID: param('slug_ID', 'integer', true); // load data from request if ($edited_Slug->load_from_Request()) { // We could load data from form without errors: // Update slug in DB: $edited_Slug->dbupdate(); $Messages->add(T_('Slug updated.'), 'success'); // Redirect so that a reload doesn't write to the DB twice: header_redirect('?ctrl=slugs', 303); // Will EXIT // We have EXITed already at this point!! } $action = 'edit'; break; case 'delete': // Delete slug: // Check that this action request is not a CSRF hacked request: $Session->assert_received_crumb('slug'); // Check that current user has permission to edit slugs: $current_User->check_perm('slugs', 'edit', true); // Make sure we got an slug_ID: