user_add_remove_links.php

<?php

include_once('internal/Smarty.class.php');
$main_smarty = new Smarty;

include('config.php');
include(mnminclude.'html1.php');
include(mnminclude.'link.php');
include(mnminclude.'smartyvariables.php');

check_referrer();


// "Save this" feature by Nick Strand, http://strandalo.us
// -------------------------------------------------------------------------------------

global $db;
if ($current_user->user_id != 0) {
    $action = isset($_POST['action']) ? sanitize($_POST['action'], 3) : '';
    if ($action == 'add') {
        /*if(!($linkid = check_integer('link_id')))
        {
            die("Invalid Link ID");
        }*/
        $linkid=(int)$_POST['link_id'];
        //$link = new Link;
        //$link->id=$linkid;
        //$link->read();
        //$title = $db->get_var("SELECT link_title_url FROM " . table_links . " WHERE link_id = $linkid");
        $count = $db->get_var("SELECT count(*) FROM " . table_saved_links . " WHERE saved_link_id = $linkid AND saved_user_id = $current_user->user_id");
        if ($count == 0) {
            $sql="INSERT INTO " . table_saved_links . " (saved_user_id, saved_link_id) VALUES ($current_user->user_id, $linkid)";
            $db->query($sql);
            echo "1";
        } else {
            echo "Error";
        }
    } elseif ($action == 'remove') {
        /*if(!($linkid = check_integer('link')))
        {
            die("Invalid Link ID");
        }*/
        $linkid=(int)$_POST['link_id'];
        //$link = new Link;
        //$link->id=$linkid;
        //$link->read();
        //$title = $db->get_var("SELECT link_title_url FROM " . table_links . " WHERE link_id = $linkid");
        $count = $db->get_var("SELECT count(*) FROM " . table_saved_links . " WHERE saved_link_id = $linkid AND saved_user_id = $current_user->user_id");
        if ($count != 0) {
            $sql="DELETE FROM " . table_saved_links . " WHERE saved_user_id=$current_user->user_id AND saved_link_id=$linkid";
            $db->query($sql);
            echo "2";
        } else {
            echo "Error";
        }
    }
}
?>