blob: 7d8204ca51de11b288a89f4767c69764be47dff2 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
|
<?php
/**
* Elgg bookmarks add/save action
*
* @package ElggBookmarks
*/
gatekeeper();
$title = strip_tags(get_input('title'));
$guid = get_input('bookmark_guid',0);
$description = get_input('description');
$address = get_input('address');
$access = get_input('access');
$shares = get_input('shares',array());
if (!$title || !$address) {
register_error(elgg_echo('bookmarks:save:failed'));
forward(REFERER);
}
// don't allow malicious code.
// put this in a context of a link so HTMLawed knows how to filter correctly.
$xss_test = "<a href=\"$address\"></a>";
if ($xss_test != filter_tags($xss_test)) {
register_error(elgg_echo('bookmarks:save:failed'));
forward(REFERER);
}
$tags = get_input('tags');
$tagarray = string_to_tag_array($tags);
$new_bookmark = FALSE;
if ($guid == 0) {
$entity = new ElggObject;
$entity->subtype = "bookmarks";
$entity->owner_guid = $_SESSION['user']->getGUID();
$entity->container_guid = (int)get_input('container_guid', $_SESSION['user']->getGUID());
$new_bookmark = TRUE;
} else {
$canedit = false;
if ($entity = get_entity($guid)) {
if ($entity->canEdit()) {
$canedit = true;
}
}
if (!$canedit) {
system_message(elgg_echo('notfound'));
forward("pg/bookmarks");
}
}
$entity->title = $title;
$entity->address = $address;
$entity->description = $description;
$entity->access_id = $access;
$entity->tags = $tagarray;
if ($entity->save()) {
$entity->clearRelationships();
$entity->shares = $shares;
if (is_array($shares) && sizeof($shares) > 0) {
foreach($shares as $share) {
$share = (int) $share;
add_entity_relationship($entity->getGUID(), 'share', $share);
}
}
system_message(elgg_echo('bookmarks:save:success'));
//add to river
if ($new_bookmark) {
add_to_river('river/object/bookmarks/create','create',$_SESSION['user']->guid,$entity->guid);
}
forward($entity->getURL());
} else {
register_error(elgg_echo('bookmarks:save:failed'));
forward("pg/bookmarks");
}
|
