Gazelle/sections/collages/new_handle.php

<?php
#declare(strict_types=1);

authorize();
include(SERVER_ROOT.'/classes/validate.class.php');

$Val = new Validate;

$P = [];
$P = db_array($_POST);

if ($P['category'] > 0 || check_perms('site_collages_renamepersonal')) {
    $Val->SetFields('name', '1', 'string', 'The name must be between 5 and 255 characters.', array('maxlength' => 255, 'minlength' => 5));
} else {
    // Get a collage name and make sure it's unique
    $name = $LoggedUser['Username']."'s personal collage";
    $P['name'] = db_string($name);
    $DB->query("
    SELECT ID
    FROM collages
    WHERE Name = '".$P['name']."'");
    $i = 2;
    while ($DB->has_results()) {
        $P['name'] = db_string("$name no. $i");
        $DB->query("
      SELECT ID
      FROM collages
      WHERE Name = '".$P['name']."'");
        $i++;
    }
}
$Val->SetFields('description', '1', 'string', 'The description must be between 10 and 65535 characters.', array('maxlength' => 65535, 'minlength' => 10));

$Err = $Val->ValidateForm($_POST);

if (!$Err && $P['category'] === '0') {
    $DB->query("
    SELECT COUNT(ID)
    FROM collages
    WHERE UserID = '$LoggedUser[ID]'
      AND CategoryID = '0'
      AND Deleted = '0'");
    list($CollageCount) = $DB->next_record();
    if (($CollageCount >= $LoggedUser['Permissions']['MaxCollages']) || !check_perms('site_collages_personal')) {
        $Err = 'You may not create a personal collage.';
    } elseif (check_perms('site_collages_renamepersonal') && !stristr($P['name'], $LoggedUser['Username'])) {
        $Err = "Your personal collage's title must include your username.";
    }
}

if (!$Err) {
    $DB->query("
    SELECT ID, Deleted
    FROM collages
    WHERE Name = '$P[name]'");
    if ($DB->has_results()) {
        list($ID, $Deleted) = $DB->next_record();
        if ($Deleted) {
            $Err = 'That collection already exists but needs to be recovered. Please <a href="staffpm.php">contact</a> the staff team.';
        } else {
            $Err = "That collection already exists: <a href='/collages.php?id=$ID'>$ID</a>.";
        }
    }
}

if (!$Err) {
    if (empty($CollageCats[$P['category']])) {
        $Err = 'Please select a category';
    }
}

if ($Err) {
    $Name = $_POST['name'];
    $Category = $_POST['category'];
    $Tags = $_POST['tags'];
    $Description = $_POST['description'];
    include(SERVER_ROOT.'/sections/collages/new.php');
    error();
}

$TagList = explode(',', $_POST['tags']);
foreach ($TagList as $ID => $Tag) {
    $TagList[$ID] = Misc::sanitize_tag($Tag);
}
$TagList = implode(' ', $TagList);

$DB->query("
  INSERT INTO collages
    (Name, Description, UserID, TagList, CategoryID)
  VALUES
    ('$P[name]', '$P[description]', $LoggedUser[ID], '$TagList', '$P[category]')");

$CollageID = $DB->inserted_id();
$Cache->delete_value("collage_$CollageID");
Misc::write_log("Collage $CollageID (".$_POST['name'].') was created by '.$LoggedUser['Username']);
header("Location: collages.php?id=$CollageID");