auction_watch.php

<?php
/***************************************************************************
 *   copyright				: (C) 2008 - 2017 WeBid
 *   site					: http://www.webidsupport.com/
 ***************************************************************************/

/***************************************************************************
 *   This program is free software; you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
 *   the Free Software Foundation; either version 2 of the License, or
 *   (at your option) any later version. Although none of the code may be
 *   sold. If you have been sold this script, get a refund.
 ***************************************************************************/

include 'common.php';

// If user is not logged in redirect to login page
if (!$user->checkAuth()) {
    $_SESSION['LOGIN_MESSAGE'] = $MSG['5000'];
    $_SESSION['REDIRECT_AFTER_LOGIN'] = 'auction_watch.php';
    header('location: user_login.php');
    exit;
}

// insert a new watch item
if (isset($_GET['insert']) && $_GET['insert'] == 'true' && !empty($_REQUEST['add'])) {
    $requestadd = $_REQUEST['add'];
    // Check if this keyword is not already added
    $auctions = trim($user->user_data['auc_watch']);
    unset($match); // just incase
    if (!empty($auctions)) {
        $checkarray = explode(' ', $requestadd);
        $requestadd = '';
        foreach ($checkarray as $check) {
            if (strpos($auctions, $check) === false) {
                $requestadd .= $check . ' ';
            }
        }
    }

    if (!isset($match) || empty($match)) {
        $auction_watch = trim($auctions . ' ' . $requestadd);
        $query = "UPDATE " . $DBPrefix . "users SET auc_watch = :auc_watch WHERE id = :id";
        $params = array(
            array(':auc_watch', $system->cleanvars($auction_watch), 'str'),
            array(':id', $user->user_data['id'], 'int'),
        );
        $db->query($query, $params);
        $user->user_data['auc_watch'] = $auction_watch;
    }
}

// Delete auction from auction watch
if (isset($_GET['delete'])) {
    $item_to_delete = $_GET['delete'];
    $currently_watched_auctions = explode(' ', trim($user->user_data['auc_watch']));
    
    $auctions_to_watch = array();

    for ($j = 0; $j < count($currently_watched_auctions); $j++) {
        if ($currently_watched_auctions[$j] != $item_to_delete) {
            array_push($auctions_to_watch, $currently_watched_auctions[$j]);
        }
    }

    $query = "UPDATE " . $DBPrefix . "users SET auc_watch = :auc_watch WHERE id = :id";
    $params = array(
        array(':auc_watch', implode(' ', $auctions_to_watch), 'str'),
        array(':id', $user->user_data['id'], 'int'),
    );
    $db->query($query, $params);
    $user->user_data['auc_watch'] = implode(' ', $auctions_to_watch);
}

$auctions = trim($user->user_data['auc_watch']);

if ($auctions != '') {
    $auction = explode(' ', $auctions);
    for ($j = 0; $j < count($auction); $j++) {
        $template->assign_block_vars('items', array(
                'ITEM' => $auction[$j],
                'ITEMENCODE' => urlencode($auction[$j])
                ));
    }
}

include 'header.php';
$TMP_usmenutitle = $MSG['471'];
include INCLUDE_PATH . 'user_cp.php';
$template->set_filenames(array(
        'body' => 'auction_watch.tpl'
        ));
$template->display('body');
include 'footer.php';