diff options
Diffstat (limited to 'action.php')
| -rw-r--r-- | action.php | 70 |
1 files changed, 70 insertions, 0 deletions
diff --git a/action.php b/action.php new file mode 100644 index 0000000000..956ceb0866 --- /dev/null +++ b/action.php @@ -0,0 +1,70 @@ +<?php +// Perform an action, as an AJAX request. +// +// It is bad design to put actions in GET parameters (because +// reloading the page will execute the action again) or POST +// parameters (because it effectively disables the "back" button). +// +// It also means we must hide such links from search engines, +// which frequently penalize sites that generate different +// content for browsers/robots. +// +// Instead, use an AJAX request, such as +// +// <a href="#" onclick="jQuery.post('action.php',{action='foo',p1='bar'}, function(){location.reload()});">click-me!</a> +// <a href="#" onclick="jQuery.post('action.php',{action='foo',p1='bar'}).success(location.reload()).error(alert('failed'));">click-me!</a> +// +// Most actions will not need separate success() and error(). +// Typically this may occur if an action has already been submitted, or +// the login session has expired. In these cases, reloading the page is +// the correct response for both success/error. +// +// webtrees: Web based Family History software +// Copyright (C) 2011 webtrees development team. +// +// This program is free software; you can redistribute it and/or modify +// it under the terms of the GNU General Public License as published by +// the Free Software Foundation; either version 2 of the License, or +// (at your option) any later version. +// +// This program is distributed in the hope that it will be useful, +// but WITHOUT ANY WARRANTY; without even the implied warranty of +// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +// GNU General Public License for more details. +// +// You should have received a copy of the GNU General Public License +// along with this program; if not, write to the Free Software +// Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA +// +// $Id$ + +define('WT_SCRIPT_NAME', 'action.php'); +require './includes/session.php'; + +header('Content-type: text/html; charset=UTF-8'); + +switch (safe_POST('action')) { +case 'accept-changes': + // Accept all the pending changes for a record + require WT_ROOT.'includes/functions/functions_edit.php'; + $record=WT_GedcomRecord::getInstance(safe_POST_xref('xref')); + if ($record && WT_USER_CAN_ACCEPT && $record->canDisplayDetails() && $record->canEdit()) { + Zend_Controller_Action_HelperBroker::getStaticHelper('FlashMessenger')->addMessage(/* I18N: %s is the name of a person, source or other record */ WT_I18N::translate('The changes to “%s” have been accepted.', $record->getFullName())); + accept_all_changes($record->getXref(), $record->getGedId()); + } else { + header('HTTP/1.0 406 Not Acceptable'); + } + break; + +case 'reject-changes': + // Reject all the pending changes for a record + require WT_ROOT.'includes/functions/functions_edit.php'; + $record=WT_GedcomRecord::getInstance(safe_POST_xref('xref')); + if ($record && WT_USER_CAN_ACCEPT && $record->canDisplayDetails() && $record->canEdit()) { + Zend_Controller_Action_HelperBroker::getStaticHelper('FlashMessenger')->addMessage(/* I18N: %s is the name of a person, source or other record */ WT_I18N::translate('The changes to “%s” have been rejected.', $record->getFullName())); + reject_all_changes($record->getXref(), $record->getGedId()); + } else { + header('HTTP/1.0 406 Not Acceptable'); + } + break; +} |