authInfo->getPerms('global')->check(Perm::G_NEWS_CATEGORIES_MANAGE)) Template::throwError(403); $categoryId = (string)filter_input(INPUT_GET, 'c', FILTER_SANITIZE_NUMBER_INT); $loadCategoryInfo = fn() => $msz->news->getCategory(categoryId: $categoryId); if(empty($categoryId)) $isNew = true; else try { $isNew = false; $categoryInfo = $loadCategoryInfo(); } catch(RuntimeException $ex) { Template::throwError(404); } if($_SERVER['REQUEST_METHOD'] === 'GET' && !empty($_GET['delete'])) { if(!CSRF::validateRequest()) Template::throwError(403); $msz->news->deleteCategory($categoryInfo); $msz->createAuditLog('NEWS_CATEGORY_DELETE', [$categoryInfo->id]); Tools::redirect($msz->urls->format('manage-news-categories')); return; } while($_SERVER['REQUEST_METHOD'] === 'POST' && CSRF::validateRequest()) { // @phpstan-ignore-line: this while is just weird, i don't blame it $name = trim((string)filter_input(INPUT_POST, 'nc_name')); $description = trim((string)filter_input(INPUT_POST, 'nc_desc')); $hidden = !empty($_POST['nc_hidden']); if($isNew) { $categoryInfo = $msz->news->createCategory($name, $description, $hidden); } else { if($name === $categoryInfo->name) $name = null; if($description === $categoryInfo->description) $description = null; if($hidden === $categoryInfo->hidden) $hidden = null; if($name !== null || $description !== null || $hidden !== null) $msz->news->updateCategory($categoryInfo, $name, $description, $hidden); } $msz->createAuditLog( $isNew ? 'NEWS_CATEGORY_CREATE' : 'NEWS_CATEGORY_EDIT', [$categoryInfo->id] ); if($isNew) { Tools::redirect($msz->urls->format('manage-news-category', ['category' => $categoryInfo->id])); return; } else $categoryInfo = $loadCategoryInfo(); break; } Template::render('manage.news.category', [ 'category_new' => $isNew, 'category_info' => $categoryInfo ?? null, ]);