Changeset 25593 for trunk/admin/include/photos_add_direct_prepare.inc.php

Timestamp:

Nov 19, 2013, 9:19:36 PM (10 years ago)

Author:

plg

Message:

feature 3001: new link "add photos" on album edition page. Patch by msakik

File:

• trunk/admin/include/photos_add_direct_prepare.inc.php (modified) (2 diffs)

trunk/admin/include/photos_add_direct_prepare.inc.php

@@ -162 +162 @@
 $selected_category = array();
 
-$query = '
+if (isset($_GET['album']))
+{
+  // set the category from get url or ...
+  check_input_parameter('album', $_GET, false, PATTERN_ID);
+  
+  // test if album really exists
+  $query = '
+SELECT id
+  FROM '.CATEGORIES_TABLE.'
+  WHERE id = '.$_GET['album'].'
+;';
+  $result = pwg_query($query);
+  if (pwg_db_num_rows($result) == 1)
+  {
+    $selected_category = array($_GET['album']);
+    
+    // lets put in the session to persist in case of upload method switch
+    $_SESSION['selected_category'] = $selected_category;
+  }
+  else
+  {
+    fatal_error('[Hacking attempt] the album id = "'.$_GET['album'].'" is not valid');
+  }
+}
+else if (isset($_SESSION['selected_category']))
+{
+  $selected_category = $_SESSION['selected_category'];
+}
+else
+{
+  // we need to know the category in which the last photo was added
+  $query = '
 SELECT category_id
   FROM '.IMAGES_TABLE.' AS i
@@ -169 +200 @@
   ORDER BY i.id DESC
   LIMIT 1
-;';
-$result = pwg_query($query);
-if (pwg_db_num_rows($result) > 0)
-{
-  $row = pwg_db_fetch_assoc($result);
-  
-  $selected_category = array($row['category_id']);
+;
+';
+  $result = pwg_query($query);
+  if (pwg_db_num_rows($result) > 0)
+  {
+    $row = pwg_db_fetch_assoc($result);
+    $selected_category = array($row['category_id']);
+  }
 }