$dms, 'user'=>$user)); /* Check if the form data comes from a trusted request */ if(!checkFormKey('editfolder')) { UI::exitError(getMLText("folder_title", array("foldername" => getMLText("invalid_request_token"))),getMLText("invalid_request_token")); } if (!isset($_POST["folderid"]) || !is_numeric($_POST["folderid"]) || intval($_POST["folderid"])<1) { UI::exitError(getMLText("folder_title", array("foldername" => getMLText("invalid_folder_id"))),getMLText("invalid_folder_id")); } $folderid = $_POST["folderid"]; $folder = $dms->getFolder($folderid); if (!is_object($folder)) { UI::exitError(getMLText("folder_title", array("foldername" => getMLText("invalid_folder_id"))),getMLText("invalid_folder_id")); } $folderPathHTML = getFolderPathHTML($folder, true); if ($folder->getAccessMode($user, 'editFolder') < M_READWRITE) { UI::exitError(getMLText("folder_title", array("foldername" => $folder->getName())),getMLText("access_denied")); } $name = $_POST["name"]; $comment = $_POST["comment"]; if(isset($_POST["sequence"])) { $sequence = str_replace(',', '.', $_POST["sequence"]); if (!is_numeric($sequence)) { $sequence = "keep"; } } else { $sequence = "keep"; } if(isset($_POST["attributes"])) $attributes = $_POST["attributes"]; else $attributes = array(); $oldname = $folder->getName(); $oldcomment = $folder->getComment(); /* Make a real copy of each attribute because setting a new attribute value * will just update the old attribute object in array attributes[] and hence * also update the old value */ $oldattributes = array(); foreach($folder->getAttributes() as $ai=>$aa) $oldattributes[$ai] = clone $aa; $controller->setParam('fulltextservice', $fulltextservice); $controller->setParam('folder', $folder); $controller->setParam('name', $name); $controller->setParam('comment', $comment); $controller->setParam('sequence', $sequence); $controller->setParam('attributes', $attributes); if(!$controller->run()) { $err = $controller->getErrorMsg(); if(is_string($err)) $errmsg = getMLText($err); elseif(is_array($err)) { $errmsg = getMLText($err[0], $err[1]); } else { $errmsg = $err; } UI::exitError(getMLText("folder_title", array("foldername" => $folder->getName())), $errmsg); } // Send notification to subscribers. if($notifier) { $notifier->sendChangedFolderNameMail($folder, $user, $oldname); $notifier->sendChangedFolderCommentMail($folder, $user, $oldcomment); $notifier->sendChangedFolderAttributesMail($folder, $user, $oldattributes); } $session->setSplashMsg(array('type'=>'success', 'msg'=>getMLText('splash_folder_edited'))); add_log_line("?folderid=".$folderid); header("Location:../out/out.ViewFolder.php?folderid=".$folderid."&showtree=".$_POST["showtree"]); ?>