'.print_r($_POST,1).'';
if (!array_key_exists('id',$_POST) || !array_key_exists('OurDesc',$_POST) || !array_key_exists('OurDescEN',$_POST))
muoribene(__LINE__.': Malformed input.',true);
if (preg_match('/^[0-9]+$/',$_POST['id'])===1) {
$instid=$_POST['id']+0;
$res=mysqli_query($link,'SELECT ID FROM Instances WHERE ID='.$instid)
or muoribene(__LINE__.': '.mysqli_error($link),true);
if (mysqli_num_rows($res)!=1)
muoribene(__LINE__.': There is no instance with ID='.$instid.'.');
} else {
muoribene(__LINE__.': Malformed input.',true);
}
if ($account['Level']=='guest' && !in_array($_POST['id'],$account['Insts']))
muoribene('You can modify only your instances.',true);
$que='UPDATE Instances SET ';
if ($account['Level']!='guest') {
(array_key_exists('Blacklisted',$_POST) && $_POST['Blacklisted']=='on') ? $sets[]='Blacklisted=1' : $sets[]='Blacklisted=0';
(array_key_exists('New',$_POST) && $_POST['New']=='on') ? $sets[]='New=1' : $sets[]='New=0';
(array_key_exists('Chosen',$_POST) && $_POST['Chosen']=='on') ? $sets[]='Chosen=1' : $sets[]='Chosen=0';
(array_key_exists('Visible',$_POST) && $_POST['Visible']=='on') ? $sets[]='Visible=1' : $sets[]='Visible=0';
}
(array_key_exists('OurLangsLock',$_POST) && $_POST['OurLangsLock']=='on') ? $sets[]='OurLangsLock=1' : $sets[]='OurLangsLock=0';
$_POST['OurDesc']=trim($_POST['OurDesc']);
($_POST['OurDesc']!='') ? $sets[]='OurDesc=\''.myesc($link,$_POST['OurDesc']).'\'' : $sets[]='OurDesc=NULL';
$_POST['OurDescEN']=trim($_POST['OurDescEN']);
($_POST['OurDescEN']!='') ? $sets[]='OurDescEN=\''.myesc($link,$_POST['OurDescEN']).'\'' : $sets[]='OurDescEN=NULL';
if (array_key_exists('LocalityID',$_POST)) {
if (preg_match('/^[0-9]+$/',$_POST['LocalityID'])===1)
$sets[]='LocalityID='.($_POST['LocalityID']+0);
else
muoribene(__LINE__.': Malformed input.',true);
} else {
$sets[]='LocalityID=NULL';
}
($account['Level']=='guest') ? $sets[]='LastGuestEdit='.time() : $sets[]='LastGuestEdit=NULL';
$que.=implode(', ',$sets).' WHERE ID='.$instid;
$dbg.='QUERONA: '.hspech($que).'
'.N;
mysqli_query($link,$que) or muoribene(__LINE__.': '.mysqli_error($link),true);
function multi(&$link,&$instid,&$dbg,$inpid,$table,$column,$line) {
$queries=array();
if (array_key_exists($inpid,$_POST)) {
if (is_array($_POST[$inpid])) {
$pos=0;
foreach ($_POST[$inpid] as $val) {
if (preg_match('/^[0-9]+$/',$val)===1) {
$pos++;
$val+=0;
$queries[]='INSERT INTO '.$table.' (InstID, '.$column.', Pos) VALUES ('.$instid.', '.$val.', '.$pos.')';
} else {
muoribene($line.':'.__LINE__.': Malformed input.',true);
}
}
} else {
muoribene($line.':'.__LINE__.': Malformed input.',true);
}
} //qui niente "else {muoribene...}!
$que='DELETE FROM '.$table.' WHERE InstID='.$instid;
$dbg.='QUEROTTA: '.hspech($que).'
'.N;
mysqli_query($link,$que) or muoribene($line.':'.__LINE__.': '.mysqli_error($link),true);
foreach ($queries as $que) {
$dbg.='QUERINA: '.hspech($que).'
'.N;
mysqli_query($link,$que) or muoribene($line.':'.__LINE__.': '.mysqli_error($link),true);
}
}
multi($link,$instid,$dbg,'ChosenLangs','InstOurLangs','OurLangID',__LINE__);
multi($link,$instid,$dbg,'ChosenFinModes','InstFinancing','FinID',__LINE__);
multi($link,$instid,$dbg,'ChosenPolicies','InstPolicies','PolID',__LINE__);
multi($link,$instid,$dbg,'ChosenTags','InstTags','TagID',__LINE__);
$res=mysqli_query($link,'SELECT *, ID AS IID FROM Instances WHERE ID='.$instid)
or muoribene(__LINE__.': '.mysqli_error($link),true);
$inst=mysqli_fetch_assoc($res);
require('include/columns.php');
require('include/dispinst.php');
$out=dispinst($inst,$cols,$link,$dlang,$account,false,0,0);
if ($account['Level']=='guest')
mysqli_query($link,'INSERT INTO Notifications (ID, Notification, Severity, Microtime, Seen) VALUES (NULL, \''.myesc($link,$account['Email'].' ha editato la sua istanza «'.$inst['URI'].'».').'\', 3, \''.microtime(true).'\', 0)')
or muoribene(__LINE__.': '.mysqli_error($link),true);
mysqli_close($link);
?>
Mustard - «<?php echo($inst['URI']); ?>» form saved