getPermission(); } else { // default permission $return['permission'] = 0; } if(WebUsers::isLoggedIn() && isset($_GET['id'])){ $ticket_id = filter_var($_GET['id'], FILTER_SANITIZE_NUMBER_INT); $target_ticket = new Ticket(); $target_ticket->load_With_TId($ticket_id); if(($target_ticket->getAuthor() == unserialize($_SESSION['ticket_user'])->getTUserId()) || Ticket_User::isMod(unserialize($_SESSION['ticket_user'])) ){ if (!empty($_FILES)) { $tempFile = $_FILES['Filedata']['tmp_name']; $fileParts = pathinfo($_FILES['Filedata']['name']); Ticket::add_Attachment($_GET['id'],$_FILES['Filedata']['name'],$_SESSION['id'],$tempFile); echo "Uploaded :".$_FILES['Filedata']['name']; } else { echo "Upload Failed!"; } echo "Upload Failed!"; } echo "Upload Failed!"; } echo "Upload Failed!"; ?>