app->photoAlbumURL, strlen($gallery->app->photoAlbumURL)) != 0 &&
strncmp($return, $gallery->app->albumDirURL, strlen($gallery->app->albumDirURL)) != 0 &&
! isValidUrl($return))
{
die(gTranslate('core', 'Attempted security breach.'));
}
if(isset($index) && !isValidGalleryInteger($index)) {
die(gTranslate('core', 'Attempted security breach.'));
}
/* This is used for deleting comments from stats.php */
if (!empty($albumName)) {
$gallery->album = new Album();
$gallery->album->load($albumName);
}
if (empty($rebuild_type)) {
$title = gTranslate('core', "Rebuilding thumbnails");
}
else {
$title = gTranslate('core', "Performing operation...");
}
switch ($cmd) {
case 'rebuild_highlights':
if($gallery->user->isAdmin()) {
$albumDB = new AlbumDB(true);
$albumList = $albumDB->albumList;
$i = 0;
foreach($albumList as $nr => $album) {
if($album->isRoot()) {
$i++;
echo "\n
". sprintf (gTranslate('core', "Rebuilding highlight %s"), $i) . '';
$album->setHighlight($album->getHighlight());
$album->save();
}
}
}
dismissAndReload();
break;
case 'hide':
if ($gallery->user->canWriteToAlbum($gallery->album) ||
$gallery->album->isItemOwner($gallery->user->getUid(), $index))
{
$gallery->album->hidePhoto($index);
$gallery->album->save();
}
//-- this is expected to be loaded in a popup, so dismiss ---
dismissAndReload();
break;
case 'show':
if(isset($index)) {
if ($gallery->user->canWriteToAlbum($gallery->album) ||
$gallery->album->isItemOwner($gallery->user->getUid(), $index))
{
$gallery->album->unhidePhoto($index);
$gallery->album->save();
}
}
//-- this is expected to be loaded in a popup, so dismiss ---
dismissAndReload();
break;
case 'highlight':
if(isset($index)) {
if ($gallery->user->canWriteToAlbum($gallery->album)) {
$gallery->album->setHighlight($index);
$gallery->album->save(array(i18n("Changed Highlight")));
}
}
//-- this is expected to be loaded in a popup, so dismiss ---
dismissAndReload();
break;
case 'new-album':
if ($gallery->user->canCreateAlbums() ||
$gallery->user->canCreateSubAlbum($gallery->album))
{
if (!isset($parentName)) {
$parentName = null;
}
createNewAlbum($parentName);
if(!headers_sent()) {
header("Location: " . makeAlbumHeaderUrl($gallery->session->albumName));
}
else {
$backUrl = makeAlbumUrl($gallery->session->albumName);
}
}
else {
header("Location: " . makeAlbumHeaderUrl());
}
break;
case 'reset-album-clicks':
if ($gallery->user->canWriteToAlbum($gallery->album)) {
$gallery->album->resetAllClicks();
// this is a popup do dismiss and reload!
dismissAndReload();
}
else {
header("Location: " . makeAlbumHeaderUrl());
}
break;
case 'delete-comment':
$comment_index = getRequestVar('comment_index');
if ($gallery->user->canWriteToAlbum($gallery->album) ||
!isValidGalleryInteger($comment_index) && isset($index))
{
$comment = $gallery->album->getComment($index, $comment_index);
$gallery->album->deleteComment($index, $comment_index);
$gallery->album->save(array(i18n("Comment \"%s\" by %s deleted from %s"),
$comment->getCommentText(),
$comment->getName(),
makeAlbumURL($gallery->album->fields["name"],
$gallery->album->getPhotoId($index))));
if (!empty($return)) {
dismissAndLoad($return);
}
else {
dismissAndReload();
}
}
else {
header("Location: " . makeAlbumHeaderUrl());
}
break;
default:
if (!empty($return)) {
// No command; Can be used to set a session variable
header("Location: $return");
}
break;
}
?>