redirect_header(XOOPS_URL . "/user.php", 2, _MD_MUSTREGFIRST);
exit;
}
if (!empty($_POST['submit'])) {
$submitter = !empty($xoopsUser) ? $xoopsUser->getVar('uid') : 0;
// Check if Title exist
if ($_POST["title"] == "") {
$eh->show("1001");
}
// Check if URL exist
if ($_POST["url"] || $_POST["url"] != "") {
$url = $_POST["url"];
}
// For uploading file
if (array_intersect($xoopsModuleConfig['uploadgroups'], $xoopsUser->getGroups())) {
$fup = new fileUp(UPLOADS, $xoopsModuleConfig['maxuploadsize'], $xoopsModuleConfig['uploadtypes'], $xoopsModuleConfig['filename_code']);
$fup->fetchfile();
if ($fup->errmsg != "") {
redirect_header("index.php", 5, $fup->errmsg);
}
if ($fup->upfile_url) {
$url = $fup->upfile_url;
}
}
if ($url == "") {
$eh->show("1016");
}
// Check if HomePage exist
/*if ($_POST["homepage"]=="") {
$eh->show("1017");
}*/
include_once "./fileup.ini.php";
// For GET
$start = isset($_GET['start']) ? intval($_GET['start']) : 0;
$lid = isset($_GET['lid']) ? intval($_GET['lid']) : NULL;
$sortname = isset($_GET['sortname']) ? urlencode(strip_tags($_GET['sortname'])) : "date";
$sortorder = isset($_GET['sortorder']) ? intval($_GET['sortorder']) : SORT_DESC;
$filename = isset($_GET['filename']) ? rawurldecode(strip_tags($_GET['filename'])) : NULL;
$command = isset($_GET['command']) ? urlencode(strip_tags($_GET['command'])) : NULL;
// For POST
$lid = isset($_POST['lid']) ? intval($_POST['lid']) : $lid;
$sortname = isset($_POST['sortname']) ? urlencode(strip_tags($_POST['sortname'])) : $sortname;
$sortorder = isset($_POST['sortorder']) ? intval($_POST['sortorder']) : $sortorder;
$filename = isset($_POST['filename']) ? rawurldecode(strip_tags($_POST['filename'])) : $filename;
$command = isset($_POST['command']) ? urlencode(strip_tags($_POST['command'])) : $command;
$dir_src = XOOPS_ROOT_PATH . UPLOADS;
fileUp::chk_uploadfolder($dir_src);
//
// For delete controll
//
if ($xoopsUser) {
if ($xoopsUser->isAdmin($xoopsModule->mid())) {
$xoopsTpl->assign('isadmin', true);
$delok = 1;
} elseif ($lid && ($command == "deleteok" || $command == "delete")) {
$sql = "SELECT `submitter` FROM " . $xoopsDB->prefix("mydownloads_downloads") . " WHERE lid={$lid}";
$result = $xoopsDB->query($sql);
list($submitter) = $xoopsDB->fetchRow($result);
$delok = $xoopsUser->uid() == $submitter ? 1 : 0;
}
} else {
$delok = 0;
