khanat-opennel-code/code/web/public_php/ams/inc/createticket.php

<?php
/**
* This function is beign used to load info that's needed for the createticket page.
* the $_GET['user_id'] identifies for which user you try to create a ticket. A normal user can only create a ticket for himself, a mod/admin however can also create tickets for other users.
* It will also load all categories and return these, they will be used by the template.
* @author Daan Janssens, mentored by Matthew Lagoe
*/
function createticket(){

    //if logged in
    if(WebUsers::isLoggedIn()){
        //in case user_id-GET param set it's value as target_id, if no user_id-param is given, use the session id.
        if(isset($_GET['user_id'])){

            //check if you are a mod/admin or you try to create a ticket for your own, if this is not the case redirect to error page
            if(($_GET['user_id'] != $_SESSION['id']) && ( ! ticket_user::isMod(unserialize($_SESSION['ticket_user']))) ){

                //ERROR: No access!
                $_SESSION['error_code'] = "403";
                header("Location: index.php?page=error");
                die();

            }else{
                //if user_id is given, then set it as the target_id
                $result['target_id'] = filter_var($_GET['user_id'], FILTER_SANITIZE_NUMBER_INT);
            }

        }else{
            //set session_id as target_id
            $result['target_id'] = $_SESSION['id'];


        }
        if(Helpers::check_if_game_client()){
            //get all additional info, which is needed for adding the extra info page
           $result[] =  $_GET;
           $result['ingame'] = true;
        }


        //create array of category id & names
        $catArray = Ticket_Category::getAllCategories();
        $result['category'] = Gui_Elements::make_table_with_key_is_id($catArray, Array("getName"), "getTCategoryId" );
        global $INGAME_WEBPATH;
        $result['ingame_webpath'] = $INGAME_WEBPATH;
        return $result;

    }else{
        //ERROR: not logged in!
        header("Location: index.php");
        die();
    }

}