Viewing file:  remove_attachment.php (3.41 KB) -rw-rw-r--
Select action/file-type:
 (+) |  (+) |  (+) | Code (+) | Session (+) |  (+) | SDB (+) |  (+) |  (+) |  (+) |  (+) |  (+) |
<?php
/**
*
* @copyright (c) 2009 Quoord Systems Limited
* @license http://opensource.org/licenses/gpl-license.php GNU Public License
*
*/
defined('IN_MOBIQUO') or exit;
function remove_attachment_func($xmlrpc_params)
{
global $db, $auth, $user, $config, $phpbb_root_path, $phpEx;
$params = php_xmlrpc_decode($xmlrpc_params);
include($phpbb_root_path . 'includes/functions_posting.' . $phpEx);
include($phpbb_root_path . 'includes/message_parser.' . $phpEx);
// get parameters
$attachment_id = isset($params[0]) ? intval($params[0]) : get_error(1);
$forum_id = isset($params[1]) ? intval($params[1]) : get_error(1);
$group_id = isset($params[2]) ? $params[2] : get_error(1);
$post_id = isset($params[3]) ? intval($params[3]) : '';
$_POST['attachment_data'] = $group_id ? unserialize(urldecode($group_id)) : array();
// Forum does not exist
if (!$forum_id)
{
return get_error(3);
}
$sql = "SELECT f.* FROM " . FORUMS_TABLE . " f WHERE f.forum_id = $forum_id";
$result = $db->sql_query($sql);
$forum_data = $db->sql_fetchrow($result);
$db->sql_freeresult($result);
$errors = array();
if (!$forum_data || $forum_data['forum_type'] != FORUM_POST) $errors[] = $mobiquo_error_code[3];
if (empty($errors) && !$auth->acl_gets('f_read', $forum_id)) $errors[] = $mobiquo_error_code[17];
if (empty($errors) && $forum_data['forum_password'] && !check_forum_password($forum_id)) $errors[] = $mobiquo_error_code[6];
// Check permissions
if (empty($errors)
&& ($user->data['is_bot'] || !$auth->acl_get('f_attach', $forum_id) || !$auth->acl_get('u_attach') || !$config['allow_attachments'] || @ini_get('file_uploads') == '0' || strtolower(@ini_get('file_uploads')) == 'off'))
{
$errors[] = $mobiquo_error_code[2];
}
if (empty($errors)
&& (!$user->data['is_registered']
|| (!$auth->acl_get('f_post', $forum_id) && !$auth->acl_gets('f_edit', 'm_edit', $forum_id) && !$auth->acl_get('f_reply', $forum_id))))
{
$errors[] = $mobiquo_error_code[2];
}
global $warn_msg;
if (empty($errors)) {
$position = '';
foreach($_POST['attachment_data'] as $pos => $data) {
if ($data['attach_id'] == $attachment_id) {
$position = $pos;
break;
}
}
if ($position === '') {
$warn_msg = 'Attachment not exists';
} else {
$_POST['delete_file'][$position] = 'Delete file';
$_REQUEST['delete_file'][$position] = 'Delete file';
$message_parser = new parse_message();
$message_parser->get_submitted_attachment_data();
$message_parser->parse_attachments('fileupload', 'post', $forum_id, false, false, true);
$group_id = serialize($message_parser->attachment_data);
$warn_msg = join("\n", $message_parser->warn_msg);
}
} else {
$warn_msg = join("\n", $errors);
}
$xmlrpc_result = new xmlrpcval(array(
'result' => new xmlrpcval($warn_msg ? false : true, 'boolean'),
'result_text' => new xmlrpcval(strip_tags($warn_msg), 'base64'),
'group_id' => new xmlrpcval($group_id),
), 'struct');
return new xmlrpcresp($xmlrpc_result);
}
|