labforum/post.php at master · labstry-opensource/labforum · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
<?php

include_once dirname(__FILE__) . '/autoload.php';

if(!isset($_SESSION)) session_start();


if(!isset($_SESSION['id'])){
    http_response_code(403);
    $error_arr = array(
        'error_info' => 'INSUFFICIENT_RIGHTS',
        'error_msg' => '你不能編輯此帖子',
        'link' => array(
            array(
                'title' => '返回首頁',
                'href' => BASE_URL. '/index.php',
            ),
            array(
                'title' => '嘗試登入，看能不能解決問題',
                'href' => BASE_URL. '/../login.php',
            )
        )
    );
    include LAF_PATH . '/error_page/general-error.php';
    die;
}

$thread = new Thread($pdoconnect);
$validator = new ThreadValidator($pdoconnect, null);
$roles = new UserRoles($connection);
$roles_arr = $roles->getUserRole(@$_SESSION['id']);


if(isset($_GET['id'])){
    if(!$thread->checkHasSuchThread($_GET['id'])){
        http_response_code(403);
        $errormsg = "NO_SUCH_THREAD";
        include LAF_PATH . '/error_page/not_allowed_to_edit.php';
        die;
    }
    if(!$thread->isThreadAuthor($_GET['id'], $_SESSION['id']) && !$roles_arr['rights'] > 90){
        http_response_code(403);
        $error_arr = array(
            'error_info' => 'INSUFFICIENT_RIGHTS',
            'error_msg' => '你不能編輯此帖子',
            'link' => array(
                array(
                    'title' => '返回首頁',
                    'href' => BASE_URL. '/index.php',
                ),
                array(
                    'title' => '嘗試登入，看能不能解決問題',
                    'href' => BASE_URL. '/../login.php',
                )
            )
        );
        include LAF_PATH . '/error_page/general-error.php';
        die;
    }
}


include dirname(__FILE__) . '/views/page-post-unstable.php';