mirror/php-e107
1
0
Fork 0
mirror of https://github.com/e107inc/e107.git synced 2025-04-20 20:51:53 +02:00
Code Issues Releases Wiki Activity

New method to post attachment related data directly

Browse Source 
Allows posting new attachment file data directly with the $_POST request so that uploads and attachment data can be handled before the post is submitted. Alternate types of attachments also become possible then when overriding the forum attachment shortcodes. Data is posted with JSON instead of PHP Array to avoid the chance of eval() related security issues.
This commit is contained in:
Michael Waskosky 2016-04-24 16:08:57 -06:00
parent 5453be3ccd
commit a14b3baff7
1 changed files with 37 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

39
e107_plugins/forum/forum_post.php
View File

@ -796,6 +796,18 @@ class forum_post_handler
$postInfo['post_attachments'] = e107::serialize($newValues);
}
//Allows directly overriding the method of adding files (or other data) as attachments
if(isset($_POST['post_attachments_json']) && trim($_POST['post_attachments_json']))
{
$posted_attachments = json_decode($_POST['post_attachments_json'], true);
$attachments_json_errors = json_last_error();
if($attachments_json_errors === JSON_ERROR_NONE)
{
$postInfo['post_attachments'] = e107::serialize($posted_attachments);
}
}
// var_dump($uploadResult);
switch($this->action)
@ -1005,7 +1017,19 @@ class forum_post_handler
$postVals['post_attachments'] = e107::serialize($newValues);
// $postVals['post_attachments'] = implode(',', $attachments);
}
//Allows directly overriding the method of adding files (or other data) as attachments
if(isset($_POST['post_attachments_json']) && trim($_POST['post_attachments_json']))
{
$existingValues = e107::unserialize($this->data['post_attachments']);
$posted_attachments = json_decode($_POST['post_attachments_json'], true);
$attachments_json_errors = json_last_error();
if($attachments_json_errors === JSON_ERROR_NONE)
{
$postVals['post_attachments'] = e107::serialize(array_merge_recursive($existingValues,$posted_attachments));
}
}
$postVals['post_edit_datestamp'] = time();
$postVals['post_edit_user'] = USERID;
$postVals['post_entry'] = $_POST['post'];
@ -1071,7 +1095,18 @@ class forum_post_handler
$postVals['post_attachments'] = e107::serialize($newValues);
}
//Allows directly overriding the method of adding files (or other data) as attachments
if(isset($_POST['post_attachments_json']) && trim($_POST['post_attachments_json']))
{
$existingValues = e107::unserialize($this->data['post_attachments']);
$posted_attachments = json_decode($_POST['post_attachments_json'], true);
$attachments_json_errors = json_last_error();
if($attachments_json_errors === JSON_ERROR_NONE)
{
$postVals['post_attachments'] = e107::serialize(array_merge_recursive($existingValues,$posted_attachments));
}
}
$this->forumObj->postUpdate($this->data['post_id'], $postVals);