Changeset 16597 for extensions/UserCollections/include/collections.inc.php

Timestamp:

Jul 10, 2012, 5:37:33 PM (12 years ago)

Author:

mistic100

Message:

-menu always displayed if user has unactive collections
-better user status checks
-localizations

File:

• extensions/UserCollections/include/collections.inc.php (modified) (10 diffs)

extensions/UserCollections/include/collections.inc.php

@@ -8 +8 @@
 switch ($page['sub_section'])
 {
+  /* list */
   case 'list':
   {
+    if (is_a_guest()) access_denied();
+    
     $template->set_filename('index', dirname(__FILE__) . '/../template/list.tpl');
     
@@ -125 +128 @@
     {
       $col['date_creation'] = format_date($col['date_creation'], true);
-      $col['U_VIEW'] = USER_COLLEC_PUBLIC.'view/'.$col['id'];
       $col['U_EDIT'] = USER_COLLEC_PUBLIC.'edit/'.$col['id'];
       $col['U_ACTIVE'] = USER_COLLEC_PUBLIC.'&action=set_active&col_id='.$col['id'];
@@ -133 +135 @@
       {
         $col['name'] = 'temp #'.$col['id'];
+        $col['U_VIEW'] = $col['U_EDIT'];
         $col['U_SAVE'] = USER_COLLEC_PUBLIC.'&action=save&col_id='.$col['id'];
         $template->append('temp_col', $col);
@@ -138 +141 @@
       else
       {
+        $col['U_VIEW'] = USER_COLLEC_PUBLIC.'view/'.$col['id'];
         $template->append('collections', $col);
       }
@@ -145 +149 @@
     break;
   }
-    
+  
+  /* edit */
   case 'edit':
   {
@@ -165 +170 @@
     try {
       $UserCollection = new UserCollection($page['col_id']);
+      
+      if (!is_admin() and $UserCollection->getParam('user_id') != $user['id'])
+      {
+        access_denied();
+      }
       
       // save properties
@@ -199 +209 @@
       
       include(PHPWG_ROOT_PATH . 'include/category_default.inc.php');
+      
+      $template->concat('TITLE', $conf['level_separator'].$UserCollection->getParam('name'));
     }
     catch (Exception $e)
@@ -208 +220 @@
   }
   
+  /* view */
   case 'view':
   {
@@ -234 +247 @@
       
       $template->assign('collection', $UserCollection->getCollectionInfo());
-      
-      include_once(PHPWG_ROOT_PATH.'admin/include/functions.php');
-      $template->assign('OWNER', get_username($UserCollection->getParam('user_id')));
       
       $page['start'] = isset($_GET['start']) ? $_GET['start'] : 0;
@@ -254 +264 @@
       
       include(PHPWG_ROOT_PATH . 'include/category_default.inc.php');
+      
+      include_once(PHPWG_ROOT_PATH.'admin/include/functions.php');
+      $template->concat('TITLE', 
+        $conf['level_separator'].$UserCollection->getParam('name').
+        ' ('.sprintf(l10n('by %s'), get_username($UserCollection->getParam('user_id'))).')'
+        );
     }
     catch (Exception $e)
     {
-      array_push($page['errors'], $e->getMessage());
+      access_denied();
     }
     
     break;
   }
-    
-  // case 'send':
-  // {
-    
-    // break;
-  // }
 }