-
Notifications
You must be signed in to change notification settings - Fork 120
/
group_delete.php
68 lines (61 loc) · 2.23 KB
/
group_delete.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
<?php
/* Copyright (c) Anuko International Ltd. https://www.anuko.com
License: See license.txt */
require_once('initialize.php');
import('form.Form');
import('ttGroupHelper');
// Access checks.
if (!(ttAccessAllowed('delete_group') || ttAccessAllowed('manage_subgroups'))) {
header('Location: access_denied.php'); // No rights.
exit();
}
$group_id = (int)$request->getParameter('id');
if (!$user->isGroupValid($group_id)) {
header('Location: access_denied.php'); // Wrong group id.
exit();
}
if ($group_id == $user->group_id && !$user->can('delete_group')) {
header('Location: access_denied.php'); // Trying to delete home group without right.
exit();
}
// End of access checks.
$group_name = ttGroupHelper::getGroupName($group_id);
$form = new Form('groupForm');
$form->addInput(array('type'=>'hidden','name'=>'id','value'=>$group_id));
$form->addInput(array('type'=>'submit','name'=>'btn_delete','value'=>$i18n->get('label.delete')));
$form->addInput(array('type'=>'submit','name'=>'btn_cancel','value'=>$i18n->get('button.cancel')));
if ($request->isPost()) {
if ($request->getParameter('btn_delete')) {
$markedDeleted = ttGroupHelper::markGroupDeleted($group_id);
if ($markedDeleted) {
if ($group_id == $user->group_id) {
// We marked deleted our own group. Logout and redirect to login page.
$auth->doLogout();
session_unset();
header('Location: login.php');
exit();
} else {
// We marked deleted a subgroup.
if ($user->behalfGroup && $user->behalfGroup->id == $group_id)
$user->setOnBehalfGroup($user->group_id); // Remove on behalf group from session.
header('Location: success.php');
exit();
}
} else
$err->add($i18n->get('error.db'));
}
if ($request->getParameter('btn_cancel')) {
if ($group_id == $user->group_id) {
header('Location: group_edit.php');
exit();
} else {
header('Location: groups.php');
exit();
}
}
} // isPost
$smarty->assign('group_to_delete', $group_name);
$smarty->assign('forms', array($form->getName()=>$form->toArray()));
$smarty->assign('title', $i18n->get('title.delete_group'));
$smarty->assign('content_page_name', 'group_delete.tpl');
$smarty->display('index.tpl');