private function _add() { use_helper('Validate'); $data = $_POST['fnb']; Flash::set('fnb_postdata', $data); // Add pre-save checks here $errors = false; // CSRF checks if (isset($_POST['csrf_token'])) { $csrf_token = $_POST['csrf_token']; if (!SecureToken::validateToken($csrf_token, BASE_URL . 'fnb/add')) { Flash::set('error', __('Invalid CSRF token found!')); redirect(get_url('fnb/add')); } } else { Flash::set('error', __('No CSRF token found!')); redirect(get_url('fnb/add')); } if (empty($data['name'])) { Flash::set('error', __('You have to specify a fnb name!')); redirect(get_url('fnb/add')); } if ($errors !== false) { // Set the errors to be displayed. Flash::set('error', implode('<br/>', $errors)); redirect(get_url('fnb/add')); } $new_fnb = new Fnb($data); $new_fnb->created_by_id = AuthUser::getId(); $new_fnb->created_on = date('Y-m-d H:i:s'); if ($new_fnb->save()) { if (isset($_FILES)) { if (strlen($_FILES['upload_file']['name']) > 0) { $fnb_id = $new_fnb->lastInsertId(); $overwrite = false; $file = $this->upload_pdf_file($fnb_id, $_FILES['upload_file']['name'], FILES_DIR . '/fnb/files/', $_FILES['upload_file']['tmp_name'], $overwrite); // if ($file === false) // Flash::set('error', __('File has not been uploaded!')); // redirect(get_url('fnb/edit/'.$new_fnb->id)); } if (strlen($_FILES['upload_left_bg']['name']) > 0) { $fnb_id = $new_fnb->lastInsertId(); $overwrite = false; $file = $this->upload_left_bg($fnb_id, $_FILES['upload_left_bg']['name'], FILES_DIR . '/fnb/bg/', $_FILES['upload_left_bg']['tmp_name'], $overwrite); // if ($file === false) // Flash::set('error', __('Image has not been uploaded!')); // redirect(get_url('fnb/edit/'.$new_fnb->id)); } if (strlen($_FILES['upload_right_bg']['name']) > 0) { $fnb_id = $new_fnb->lastInsertId(); $overwrite = false; $file = $this->upload_right_bg($fnb_id, $_FILES['upload_right_bg']['name'], FILES_DIR . '/fnb/bg/', $_FILES['upload_right_bg']['tmp_name'], $overwrite); // if ($file === false) // Flash::set('error', __('Image has not been uploaded!')); // redirect(get_url('fnb/edit/'.$new_fnb->id)); } } Flash::set('success', __('Fnb has been added!')); Observer::notify('fnb_after_add', $new_fnb->name); // save and quit or save and continue editing? if (isset($_POST['commit'])) { redirect(get_url('fnb')); } else { redirect(get_url('fnb/edit/' . $new_fnb->id)); } } else { Flash::set('error', __('Fnb has not been added!')); redirect(get_url('fnb/add')); } }