phpgtk__legacy/apps/edit.php

116 lines
3.3 KiB
PHP

<?php
//
// This is the form end users use to submit modifications to their apps to the database.
// A modified app is actually a new record with a pointer to the old one. Once an administrator
// approves the new one the status is changed to active and the old one is removed from the system.
// This has the added benefit of bringing it to the top of the "newest applications" list.
//
require_once("apps.inc");
commonHeader('Edit your Application', false);
appHeader();
print("<h1>Edit Your PHPGTK Application</h1>");
//
// if the form was submitted add it to the databas
//
if( $action == "modify" ) {
$res = mysql_query("SELECT * FROM app WHERE id = $app_id");
if( $res ) {
$app = mysql_fetch_object($res);
if( $app->submitter == $submitter ) {
if( !empty($_FILES[screenshot][name]) && ereg("^image/", $_FILES[screenshot][type]) ) {
$has_screenshot = 'Y';
}else {
$has_screenshot = 'N';
}
$res = mysql_query("
INSERT INTO app
(id, modify_id, status, cat_id, date_added, name, has_screenshot, homepage_url, submitter, blurb)
VALUES
(0, $app->id, 'M', $cat_id, NOW(), '$name', '$has_screenshot', '$homepage_url', '$submitter', '$blurb')
");
if( $res == true ) {
if( $has_screenshot == 'Y' ) {
$app_id = mysql_insert_id();
handleAppImage($_FILES[screenshot][tmp_name], $app_id);
}
print("Thank you for the update. Someone will review it shortly.");
}else {
print("There was a problem with your update. Please try it again.");
print("<br>");
print("Error: (" . mysql_errno() . ") " . mysql_error() );
}
}else {
print("<p><b>Sorry, the email address you entered does not match the address on file for this application.</b></p>");
}
}else {
print("<p><b>Unable to find app #$app_id for editing.</b></p>");
}
}else if( $action == "edit" ) {
$res = mysql_query("SELECT * FROM app WHERE id = $app_id");
if( $res ) {
$form_app = mysql_fetch_object($res);
$form_app->submitter = "";
$form_url = "edit.php";
$form_action = "modify";
$form_submit = "Edit";
print("Please enter your email again for security purposes.");
include_once("form.php");
appFooter();
commonFooter();
exit;
}else {
print("<p><b>Unable to find app #$app_id for editing.</b></p>");
}
}else if( $action == "list" ) {
$email = ereg_replace("'", "", $email);
$res = mysql_query("SELECT * FROM app WHERE status = 'A' AND submitter = '$email' ORDER BY name");
$num_rows = mysql_num_rows($res);
if( $res && $num_rows > 0 ) {
print("<table border=0 cellpadding=2 cellspacing=0 width=100%>");
while( $row = mysql_fetch_object($res) ) {
displayApp($row, $the_cat, $the_subcat, 0, true);
}
print("</table>");
}else {
print("Unable to find any applications that you submitted.");
}
}else {
print("
<form action='edit.php' method=post>
<input type=hidden name='action' value='list'>
Please enter your email address.
<br>
<br>
<input type=text name='email'>
<input type=submit value='Continue'>
<br>
<br>
Your email address will be used to locate applications that you have submitted.
</form>
");
}
appFooter();
commonFooter(false);
?>