51 lines
1.8 KiB
PHP
51 lines
1.8 KiB
PHP
<?php
|
|
|
|
function create_ticket(){
|
|
try{
|
|
//if logged in
|
|
if(WebUsers::isLoggedIn() && isset($_SESSION['ticket_user'])){
|
|
|
|
if(isset($_POST['target_id'])){
|
|
|
|
//if target_id is the same as session id or is admin
|
|
if( ($_POST['target_id'] == $_SESSION['id']) || WebUsers::isAdmin() ){
|
|
|
|
global $cfg;
|
|
$category = filter_var($_POST['Category'], FILTER_SANITIZE_NUMBER_INT);
|
|
$title = filter_var($_POST['Title'], FILTER_SANITIZE_STRING);
|
|
$content = filter_var($_POST['Content'], FILTER_SANITIZE_STRING);
|
|
if($_POST['target_id'] == $_SESSION['id']){
|
|
$author = $_SESSION['ticket_user']->getTUserId();
|
|
}else{
|
|
$author= Ticket_User::constr_ExternId($_POST['target_id'], $cfg['db']['lib'])->getTUserId();
|
|
}
|
|
$ticket = new Ticket($cfg['db']['lib']);
|
|
$ticket->setTicket($title,0,0,$category,$author);
|
|
$ticket->create();
|
|
|
|
}else{
|
|
//ERROR: permission denied!
|
|
$_SESSION['error_code'] = "403";
|
|
header("Location: index.php?page=error");
|
|
exit;
|
|
}
|
|
|
|
}else{
|
|
//ERROR: The form was not filled in correclty
|
|
header("Location: index.php?page=settings");
|
|
exit;
|
|
}
|
|
}else{
|
|
//ERROR: user is not logged in
|
|
header("Location: index.php");
|
|
exit;
|
|
}
|
|
|
|
}catch (PDOException $e) {
|
|
//go to error page or something, because can't access website db
|
|
print_r($e);
|
|
exit;
|
|
}
|
|
|
|
}
|
|
|