. * */ require_once 'lib/init.php'; UI::show_header(); // Switch on the incomming action switch ($_REQUEST['action']) { case 'add_shout': // Must be at least a user to do this if (!Access::check('interface', '25')) { UI::access_denied(); exit; } if (!Core::form_verify('add_shout', 'post')) { UI::access_denied(); exit; } // Remove unauthorized defined values from here if (isset($_POST['user'])) { unset($_POST['user']); } if (isset($_POST['date'])) { unset($_POST['date']); } if (!Core::is_library_item($_POST['object_type'])) { UI::access_denied(); exit; } $shout_id = Shoutbox::create($_POST); header("Location:" . AmpConfig::get('web_path') . '/shout.php?action=show_add_shout&type=' . $_POST['object_type'] . '&id=' . intval($_POST['object_id'])); exit; break; case 'show_add_shout': // Get our object first $object = Shoutbox::get_object($_REQUEST['type'], $_REQUEST['id']); if (!$object || !$object->id) { AmpError::add('general', T_('Invalid Object Selected')); AmpError::display('general'); break; } $object->format(); if (strtolower(get_class($object)) == 'song') { $data = $_REQUEST['offset']; } // Now go ahead and display the page where we let them add a comment etc require_once AmpConfig::get('prefix') . UI::find_template('show_add_shout.inc.php'); break; default: header("Location:" . AmpConfig::get('web_path')); break; } // end switch on action UI::show_footer();