Subversion Repositories cheapmusic

<?php

include_once ($_SERVER['DOCUMENT_ROOT'] . '/php/hosting.php');

$rc = - 1;

$msg = "";

if (isset($_POST['function']) && in_array($_POST['function'], array(

    "add",

    "delete",

    "update"

))) {

    if (isset($_POST["id"])) {

        include_once ($_SERVER['DOCUMENT_ROOT'] . '/php/sessions_db.php');

        include_once ($_SERVER['DOCUMENT_ROOT'] . '/php/cryptor.php');

        include_once ($_SERVER['DOCUMENT_ROOT'] . '/php/wishlist.php');

        include_once ($_SERVER['DOCUMENT_ROOT'] . '/php/clsLibGTIN.php');

        include_once ($_SERVER['DOCUMENT_ROOT'] . '/php/constants.php');

        include_once ($_SERVER['DOCUMENT_ROOT'] . "/php/NonceUtil.php");

        $configFile = parse_ini_file(FCM_CONFIGFILE, true);

        $crypt = Cryptor::getInstance($configFile['cryptor']);

        $tmpSessionTab = (isset($_POST["sessionTab"]) && $_POST["sessionTab"] > 0 ? $_POST["sessionTab"] : null);

        $handler = MySessionHandler::getInstance($tmpSessionTab, $configFile['mysqli']);

        $systemConf = $configFile['system'];

        unset($configFile);

        session_set_cookie_params(604800, '/', '.findcheapmusic.com', true, true);

        session_set_save_handler($handler, true);

        if (!empty($_COOKIE['PHPSESSID'])) {

            session_id($_COOKIE['PHPSESSID']);

        }

        @session_start();

        $uid = $_SESSION['sessData']['userID'];

        $rc = 0;

        if (empty($_POST["nonce"]) || NonceUtil::check($systemConf["nonce_secret"], $_POST["nonce"]) === false) {

            $msg = "Internal Error. Please reload page.";

            $rc = 1;

        }

        if (!$rc && !empty($uid) && $uid > 0) {

            if ($_POST['function'] == "delete") {

                $rc = deleteWishlist($uid, $_POST["id"]);

            }

            else if ($_POST['function'] == "add") {

                $rc = addWishlist($uid, json_decode(base64_decode($_POST['wl'])));

            }

            else { /* update */

                $wlArr = [];

                $wlArr["id"] = $_POST['id'];

                $wlArr["artist"] = $_POST['artist'];

                $wlArr["title"] = $_POST['title'];

                $wlArr["barcode"] = $_POST['barcode'];

                $wlArr["cond"] = $_POST['cond'];

                $wlArr["format"] = $_POST['format'];

                $wlArr["price"] = $_POST['price'];

                if (empty($wlArr['id']) || $wlArr['id'] < 0) {

                    $msg = "Internal Error. Please reload page.";

                }

                if (empty($wlArr['artist']) && empty($wlArr['title']) && empty($wlArr['barcode'])) {

                    $msg = "Artist, Ttile and Barcode are empty. Please set at least one of them.";

                }

                if (!empty($wlArr['barcode'])) {

                    $barcodeType = clsLibGTIN::GTINCheck($wlArr['barcode'], false, 1);

                    if (empty($barcodeType)) {

                        $msg = "Invalid Barcode number. Please correct.";

                    }

                }

                if (!empty($wlArr['price'])) {

                    if (!is_numeric($wlArr['price']) || $wlArr['price'] < 0) {

                        $msg = "Invalid Ceiling Price. Please correct.";

                    }

                }

                if (empty($wlArr['cond']) || !in_array($wlArr['cond'], $condArr)) {

                    $msg = "Invalid Condition. Please correct.";

                }

                if (empty($wlArr['format']) || !in_array($wlArr['format'], $formatArr)) {

                    $msg = "Invalid Format. Please correct.";

                }

                if (empty($msg)) {

                    $rc = updateWishlist($uid, $wlArr);

                }

                else {

                    $rc = 1;

                }

            }

        }

    }

}

echo json_encode(array(

    "retval" => $rc,

    "msg" => $msg

));

exit;