38 lines
1.2 KiB
PHP
38 lines
1.2 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
require( '../../config.php' );
|
||
|
|
require_once( $AMS_LIB . '/libinclude.php' );
|
||
|
|
$id = $_POST['PHPSESSID'];
|
||
|
|
session_id($id);
|
||
|
|
session_start();
|
||
|
|
|
||
|
|
global $FILE_STORAGE_PATH;
|
||
|
|
|
||
|
|
// Set permission
|
||
|
|
if ( isset( $_SESSION['ticket_user'] ) ) {
|
||
|
|
$return['permission'] = unserialize( $_SESSION['ticket_user'] ) -> getPermission();
|
||
|
|
} else {
|
||
|
|
// default permission
|
||
|
|
$return['permission'] = 0;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
if(WebUsers::isLoggedIn() && isset($_GET['id'])){
|
||
|
|
|
||
|
|
$ticket_id = filter_var($_GET['id'], FILTER_SANITIZE_NUMBER_INT);
|
||
|
|
$target_ticket = new Ticket();
|
||
|
|
$target_ticket->load_With_TId($ticket_id);
|
||
|
|
if(($target_ticket->getAuthor() == unserialize($_SESSION['ticket_user'])->getTUserId()) || Ticket_User::isMod(unserialize($_SESSION['ticket_user'])) ){
|
||
|
|
|
||
|
|
if (!empty($_FILES)) {
|
||
|
|
$tempFile = $_FILES['Filedata']['tmp_name'];
|
||
|
|
$targetFile = $FILE_STORAGE_PATH . $_FILES['Filedata']['name'];
|
||
|
|
|
||
|
|
$fileParts = pathinfo($_FILES['Filedata']['name']);
|
||
|
|
move_uploaded_file($tempFile,$targetFile);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
?>
|