Gazelle/sections/torrents/nonwikiedit.php

<?php
#declare(strict_types=1);

authorize();

//Set by system
if (!$_POST['groupid'] || !is_number($_POST['groupid'])) {
    error(404);
}
$GroupID = $_POST['groupid'];

//Usual perm checks
if (!check_perms('torrents_edit')) {
    $DB->query("
    SELECT UserID
    FROM torrents
    WHERE GroupID = $GroupID");
    if (!in_array($LoggedUser['ID'], $DB->collect('UserID'))) {
        error(403);
    }
}


if (check_perms('torrents_freeleech') && (isset($_POST['freeleech']) xor isset($_POST['neutralleech']) xor isset($_POST['unfreeleech']))) {
    if (isset($_POST['freeleech'])) {
        $Free = 1;
    } elseif (isset($_POST['neutralleech'])) {
        $Free = 2;
    } else {
        $Free = 0;
    }

    if (isset($_POST['freeleechtype']) && in_array($_POST['freeleechtype'], array(0, 1, 2, 3))) {
        $FreeType = $_POST['freeleechtype'];
    } else {
        error(404);
    }

    Torrents::freeleech_groups($GroupID, $Free, $FreeType);
}

$Artists = $_POST['idols'];

//Escape fields
$Studio = db_string($_POST['studio']);
$Series = db_string($_POST['series']);
$Year = db_string((int)$_POST['year']);
$CatalogueNumber = db_string($_POST['catalogue']);

// Get some info for the group log
$DB->query("
  SELECT Year
  FROM torrents_group
  WHERE ID = $GroupID");
list($OldYear) = $DB->next_record();



$DB->query("
  UPDATE torrents_group
  SET
    Year = '$Year',
    CatalogueNumber = '".$CatalogueNumber."',
    Studio = '$Studio',
    Series = '$Series',
  WHERE ID = $GroupID");

if ($OldYear != $Year) {
    $DB->query("
    INSERT INTO group_log (GroupID, UserID, Time, Info)
    VALUES ('$GroupID', ".$LoggedUser['ID'].", NOW(), '".db_string("Year changed from $OldYear to $Year")."')");
}

$DB->query("
  SELECT ag.Name
  FROM artists_group AS ag
    JOIN torrents_artists AS ta ON ag.ArtistID = ta.ArtistID
  WHERE ta.GroupID = ".$GroupID);

while ($r = $DB->next_record(MYSQLI_ASSOC, true)) {
    $CurrArtists[] = $r['Name'];
}

foreach ($Artists as $Artist) {
    if (!in_array($Artist, $CurrArtists)) {
        $DB->query("
      SELECT ArtistID
      FROM artists_group
      WHERE Name = '".db_string($Artist)."'");
        if ($DB->has_results()) {
            list($ArtistID) = $DB->next_record();
        } else {
            $DB->query("
        INSERT INTO artists_group
        (Name)
        VALUES
        ('".db_string($Artist)."')");
            $ArtistID = $DB->inserted_id();
        }
        $DB->query("
      INSERT INTO torrents_artists
      (GroupID, ArtistID, UserID)
      VALUES
      (".$GroupID.", ".$ArtistID.", ".$LoggedUser['ID'].")
      ON DUPLICATE KEY UPDATE UserID=".$LoggedUser['ID']); // Why does this even happen
        $Cache->delete_value('artist_groups_'.$ArtistID);
    }
}

foreach ($CurrArtists as $CurrArtist) {
    if (!in_array($CurrArtist, $Artists)) {
        $DB->query("
      SELECT ArtistID
      FROM artists_group
      WHERE Name = '".db_string($CurrArtist)."'");
        if ($DB->has_results()) {
            list($ArtistID) = $DB->next_record();

            $DB->query("
        DELETE FROM torrents_artists
        WHERE ArtistID = ".$ArtistID."
          AND GroupID = ".$GroupID);

            $DB->query("
        SELECT GroupID
        FROM torrents_artists
        WHERE ArtistID = ".$ArtistID);

            $Cache->delete_value('artist_groups_'.$ArtistID);

            if (!$DB->has_results()) {
                $DB->query("
          SELECT RequestID
          FROM requests_artists
          WHERE ArtistID = ".$ArtistID."
            AND ArtistID != 0");
                if (!$DB->has_results()) {
                    Artists::delete_artist($ArtistID);
                }
            }
        }
    }
}

$DB->query("
  SELECT ID
  FROM torrents
  WHERE GroupID = '$GroupID'");
while (list($TorrentID) = $DB->next_record()) {
    $Cache->delete_value("torrent_download_$TorrentID");
}
Torrents::update_hash($GroupID);
$Cache->delete_value("torrents_details_$GroupID");

header("Location: torrents.php?id=$GroupID");