Hello Everyone,
I am currently working on a project and I want to make sure my forms are secure for users to edit their own listings so I am looking for advice on the best way to insure its secure from any cross scripting or SQL injections
Here is my file
<?php
require_once(__DIR__ .'/../secure/config.php');
if(empty($_POST['place_id'])) {
header("Location: $baseurl/user");
}
$errors = array();
$transport_smtp = Swift_SmtpTransport::newInstance($smtp_server, $smtp_port, $cfg_smtp_encryption)
->setUsername($smtp_user)
->setPassword($smtp_pass);
$mailer = Swift_Mailer::newInstance($transport_smtp);
$place_id = $_POST['place_id'];
$address = !empty($_POST['address']) ? $_POST['address'] : '';
$area_code = !empty($_POST['area_code']) ? $_POST['area_code'] : 0;
$country_code = !empty($_POST['country_code']) ? $_POST['country_code'] : '';
$cat_id = !empty($_POST['category_id']) ? $_POST['category_id'] : '';
$city_id = !empty($_POST['city_id']) ? $_POST['city_id'] : 0;
$mon_oc = !empty($_POST['mon_oc']) ? $_POST['mon_oc'] : 0;
$mon_oa = !empty($_POST['mon_oa']) ? $_POST['mon_oa'] : 0;
$mon_op = !empty($_POST['mon_op']) ? $_POST['mon_op'] : 0;
$tue_oc = !empty($_POST['tue_oc']) ? $_POST['tue_oc'] : 0;
$tue_oa = !empty($_POST['tue_oa']) ? $_POST['tue_oa'] : 0;
$tue_op = !empty($_POST['tue_op']) ? $_POST['tue_op'] : 0;
$wed_oc = !empty($_POST['wed_oc']) ? $_POST['wed_oc'] : 0;
$wed_oa = !empty($_POST['wed_oa']) ? $_POST['wed_oa'] : 0;
$wed_op = !empty($_POST['wed_op']) ? $_POST['wed_op'] : 0;
$thur_oc = !empty($_POST['thur_oc']) ? $_POST['thur_oc'] : 0;
$thur_oa = !empty($_POST['thur_oa']) ? $_POST['thur_oa'] : 0;
$thur_op = !empty($_POST['thur_op']) ? $_POST['thur_op'] : 0;
$fri_oc = !empty($_POST['fri_oc']) ? $_POST['fri_oc'] : 0;
$fri_oa = !empty($_POST['fri_oa']) ? $_POST['fri_oa'] : 0;
$fri_op = !empty($_POST['fri_op']) ? $_POST['fri_op'] : 0;
$sat_oc = !empty($_POST['sat_oc']) ? $_POST['sat_oc'] : 0;
$sat_oa = !empty($_POST['sat_oa']) ? $_POST['sat_oa'] : 0;
$sat_op = !empty($_POST['sat_op']) ? $_POST['sat_op'] : 0;
$sun_oc = !empty($_POST['sun_oc']) ? $_POST['sun_oc'] : 0;
$sun_oa = !empty($_POST['sun_oa']) ? $_POST['sun_oa'] : 0;
$sun_op = !empty($_POST['sun_op']) ? $_POST['sun_op'] : 0;
$hol_oc = !empty($_POST['hol_oc']) ? $_POST['hol_oc'] : 0;
$hol_oa = !empty($_POST['hol_oa']) ? $_POST['hol_oa'] : 0;
$hol_op = !empty($_POST['hol_op']) ? $_POST['hol_op'] : 0;
$new_oc = !empty($_POST['new_oc']) ? $_POST['new_oc'] : 0;
$new_oa = !empty($_POST['new_oa']) ? $_POST['new_oa'] : 0;
$new_op = !empty($_POST['new_op']) ? $_POST['new_op'] : 0;
$full_oc = !empty($_POST['full_oc']) ? $_POST['full_oc'] : 0;
$contact_email = !empty($_POST['contact_email']) ? $_POST['contact_email'] : '';
$cross_street = !empty($_POST['cross_street']) ? $_POST['cross_street'] : '';
$custom_fields_ids = !empty($_POST['custom_fields_ids']) ? $_POST['custom_fields_ids'] : '';
$delete_existing_pics = !empty($_POST['delete_existing_pics']) ? $_POST['delete_existing_pics'] : array();
$delete_temp_pics = !empty($_POST['delete_temp_pics']) ? $_POST['delete_temp_pics'] : array();
$short_desc = !empty($_POST['short_desc']) ? $_POST['short_desc'] : '';
$description = !empty($_POST['description']) ? $_POST['description'] : '';
$existing_pics = !empty($_POST['existing_pics']) ? $_POST['existing_pics'] : array();
$facebook = !empty($_POST['facebook']) ? $_POST['facebook'] : '';
$pinterest = !empty($_POST['pinterest']) ? $_POST['pinterest'] : '';
$instagram = !empty($_POST['instagram']) ? $_POST['instagram'] : '';
$linkedin = !empty($_POST['linkedin']) ? $_POST['linkedin'] : '';
$tiktok = !empty($_POST['tiktok']) ? $_POST['tiktok'] : '';
$threads = !empty($_POST['threads']) ? $_POST['threads'] : '';
$inside = !empty($_POST['inside']) ? $_POST['inside'] : '';
$latlng = !empty($_POST['latlng']) ? $_POST['latlng'] : '';
$logo = !empty($_POST['uploaded_logo']) ? $_POST['uploaded_logo'] : '';
$neighborhood = !empty($_POST['neighborhood']) ? $_POST['neighborhood'] : '';
$phone = !empty($_POST['phone']) ? $_POST['phone'] : '';
$place_name = !empty($_POST['place_name']) ? $_POST['place_name'] : '';
$zip_code = !empty($_POST['zip_code']) ? $_POST['zip_code'] : '';
$twitter = !empty($_POST['twitter']) ? $_POST['twitter'] : '';
$uploads = !empty($_POST['uploads']) ? $_POST['uploads'] : array();
$videos = !empty($_POST['videos']) ? $_POST['videos'] : array();
$website = !empty($_POST['website']) ? $_POST['website'] : '';
$anonymous = !empty($_POST['anonymous']) ? $_POST['anonymous'] : 0;
$wa_area_code = !empty($_POST['wa_area_code']) ? $_POST['wa_area_code'] : '';
$wa_country_code = !empty($_POST['wa_country_code']) ? $_POST['wa_country_code'] : '';
$wa_phone = !empty($_POST['wa_phone']) ? $_POST['wa_phone'] : '';
$cats_arr = !empty($_POST['cats']) ? $_POST['cats'] : array();
$orig_cat_id = !empty($_POST['orig_cat_id']) ? $_POST['orig_cat_id'] : '';
$orig_cat_slug = !empty($_POST['orig_cat_slug']) ? $_POST['orig_cat_slug'] : '';
$wa_area_code = preg_replace("/[^0-9]/", "", $wa_area_code);
$wa_country_code = preg_replace("/[^0-9]/", "", $wa_country_code);
$wa_phone = preg_replace("/[^0-9]/", "", $wa_phone);
$address = is_string($address) ? trim($address) : $address;
$area_code = is_string($area_code) ? trim($area_code) : $area_code;
$country_code = is_string($country_code) ? trim($country_code) : $country_code;
$contact_email = is_string($contact_email) ? trim($contact_email) : $contact_email;
$cross_street = is_string($cross_street) ? trim($cross_street) : $cross_street;
$description = is_string($description) ? trim($description) : $description;
$short_desc = is_string($short_desc) ? trim($short_desc) : $short_desc;
$facebook = is_string($facebook) ? trim($facebook) : $facebook;
$pinterest = is_string($pinterest) ? trim($pinterest) : $pinterest;
$instagram = is_string($instagram) ? trim($instagram) : $instagram;
$linkedin = is_string($linkedin) ? trim($linkedin) : $linkedin;
$tiktok = is_string($tiktok) ? trim($tiktok) : $tiktok;
$threads = is_string($threads) ? trim($threads) : $threads;
$inside = is_string($inside) ? trim($inside) : $inside;
$latlng = is_string($latlng) ? trim($latlng) : $latlng;
$logo = is_string($logo) ? trim($logo) : $logo;
$neighborhood = is_string($neighborhood) ? trim($neighborhood) : $neighborhood;
$phone = is_string($phone) ? trim($phone) : $phone;
$place_name = is_string($place_name) ? trim($place_name) : $place_name;
$zip_code = is_string($zip_code) ? trim($zip_code) : $zip_code;
$twitter = is_string($twitter) ? trim($twitter) : $twitter;
$uploads = is_string($uploads) ? trim($uploads) : $uploads;
$website = is_string($website) ? trim($website) : $website;
$wa_area_code = is_string($wa_area_code) ? trim($wa_area_code) : $wa_area_code;
$wa_country_code = is_string($wa_country_code) ? trim($wa_country_code) : $wa_country_code;
$wa_phone = is_string($wa_phone) ? trim($wa_phone) : $wa_phone;
$query = "SELECT `userid`, `logo` FROM `places` WHERE `place_id` = :place_id";
$stmt = $conn->prepare($query);
$stmt->bindValue(':place_id', $place_id);
$stmt->execute();
$row = $stmt->fetch(PDO::FETCH_ASSOC);
$place_userid = $row['userid'];
$original_logo = !empty($row['logo']) ? $row['logo'] : '';
if($place_userid != $userid) {
if(!$is_admin) {
die('no permission to edit '.$place_name);
}
}
$query = "SELECT `feat_home` FROM `places` WHERE `place_id` = :place_id";
$stmt = $conn->prepare($query);
$stmt->bindValue(':place_id', $place_id);
$stmt->execute();
$row = $stmt->fetch(PDO::FETCH_ASSOC);
$feat_home = $row['feat_home'];
if(!empty($latlng)) {
$latlng = str_replace('(', '', $latlng);
$latlng = str_replace(')', '', $latlng);
$latlng = explode(',', $latlng);
$lat = trim($latlng[0]);
$lng = trim($latlng[1]);
settype($lat, 'float');
settype($lng, 'float');
} else {
$lat = $default_lat;
$lng = $default_lng;
}
$twitter = twitter_url(trim($twitter));
$facebook = facebook_url(trim($facebook));
$pinterest = pinterest_url(trim($pinterest));
$instagram = instagram_url(trim($instagram));
$linkedin = instagram_url(trim($linkedin));
$tiktok = instagram_url(trim($tiktok));
$threads = instagram_url(trim($threads));
$website = site_url(trim($website));
$short_desc = mb_substr($short_desc, 0, $short_desc_length);
if($city_id > 0) {
$query = "SELECT `state_id` FROM `cities` WHERE `city_id` = :city_id";
$stmt = $conn->prepare($query);
$stmt->bindValue(':city_id', $city_id);
$stmt->execute();
$row = $stmt->fetch(PDO::FETCH_ASSOC);
$state_id = $row['state_id'];
} else {
$state_id = 0;
}
$status = "pending";
if($cfg_auto_approve_listing) {
$status = "approved";
}
if($is_admin == 1) {
$status = "approved";
}
$existing_pics_in_db = array();
$query = "SELECT * FROM `photos` WHERE `place_id` = :place_id";
$stmt = $conn->prepare($query);
$stmt->bindValue(':place_id', $place_id);
$stmt->execute();
while($row = $stmt->fetch(PDO::FETCH_ASSOC)) {
$existing_pics_in_db[] = array('dir' => $row['dir'], 'filename' => $row['filename']);
}
$custom_fields_ids = explode(',', $custom_fields_ids);
$custom_fields = array();
foreach($custom_fields_ids as $v) {
$field_key = 'field_'.$v;
if(!empty($_POST[$field_key])) {
if(!is_array($_POST[$field_key])) {
$this_field_value = !empty($_POST[$field_key]) ? $_POST[$field_key] : '';
} else {
$this_field_value = !empty($_POST[$field_key]) ? $_POST[$field_key] : array();
}
$custom_fields[] = array('field_id' => $v, 'field_value' => $this_field_value);
}
}
$post_token = !empty($_POST['submit_token']) ? $_POST['submit_token'] : 'aaa';
$session_token = isset($_SESSION['submit_token']) ? $_SESSION['submit_token'] : '';
$cookie_token = isset($_COOKIE['submit_token']) ? $_COOKIE['submit_token'] : '';
$result_message = '';
if($post_token == $session_token || $post_token == $cookie_token) {
try {
$conn->beginTransaction();
if(!empty($logo)) {
if(!empty($original_logo)) {
if(is_file($pic_basepath.'/logo/'.substr($original_logo, 0, 2).'/'.$original_logo)) {
unlink($pic_basepath.'/logo/'.substr($original_logo, 0, 2).'/'.$original_logo);
}
$folder_path = $pic_basepath.'/logo/'.substr($logo, 0, 2);
if (!is_dir($folder_path)) {
if(!mkdir($folder_path, 0755, true)) {
$has_errors = true;
$result_message = 'Error creating logo directory';
}
touch($folder_path.'/index.php');
}
$path_tmp = $pic_basepath.'/logo-tmp/'.$logo;
$path_final = $folder_path.'/'.$logo;
if(is_file($path_tmp)) {
if(copy($path_tmp, $path_final)) {
unlink($path_tmp);
}
}
}
} else {
$logo = $original_logo;
}
$query = "UPDATE `places` SET `address` = :address, `area_code` = :area_code, `country_code` = :country_code, `city_id` = :city_id, `mon_oc` = :mon_oc, `mon_oa` = :mon_oa, `mon_op` = :mon_op, `tue_oc` = :tue_oc, `tue_oa` = :tue_oa, `tue_op` = :tue_op, `wed_oc` = :wed_oc, `wed_oa` = :wed_oa, `wed_op` = :wed_op, `thur_oc` = :thur_oc, `thur_oa` = :thur_oa, `thur_op` = :thur_op, `fri_oc` = :fri_oc, `fri_oa` = :fri_oa, `fri_op` = :fri_op, `sat_oc` = :sat_oc, `sat_oa` = :sat_oa, `sat_op` = :sat_op, `sun_oc` = :sun_oc, `sun_oa` = :sun_oa, `sun_op` = :sun_op, `hol_oc` = :hol_oc, `hol_oa` = :hol_oa, `hol_op` = :hol_op, `new_oc` = :new_oc, `new_oa` = :new_oa, `new_op` = :new_op, `full_oc` = :full_oc, `cross_street` = :cross_street, `contact_email` = :contact_email, `short_desc` = :short_desc, `description` = :description, `facebook` = :facebook, `pinterest` = :pinterest, `instagram` = :instagram, `inside` = :inside, `lat` = :lat, `lng` = :lng, `logo` = :logo, `neighborhood` = :neighborhood, `phone` = :phone, `place_name` = :place_name, `zip_code` = :zip_code, `state_id` = :state_id, `status` = :status, `anonymous` = :anonymous, `twitter` = :twitter, `wa_area_code` = :wa_area_code, `wa_country_code` = :wa_country_code, `wa_phone` = :wa_phone, `website` = :website, `linkedin` = :linkedin, `tiktok` = :tiktok, `threads` = :threads, `submission_date` = :submission_date WHERE `place_id` = :place_id";
$stmt = $conn->prepare($query);
$stmt->bindValue(':address', $address);
$stmt->bindValue(':area_code', $area_code);
$stmt->bindValue(':country_code', $country_code);
$stmt->bindValue(':city_id', $city_id);
$stmt->bindValue(':mon_oc', $mon_oc);
$stmt->bindValue(':mon_oa', $mon_oa);
$stmt->bindValue(':mon_op', $mon_op);
$stmt->bindValue(':tue_oc', $tue_oc);
$stmt->bindValue(':tue_oa', $tue_oa);
$stmt->bindValue(':tue_op', $tue_op);
$stmt->bindValue(':wed_oc', $wed_oc);
$stmt->bindValue(':wed_oa', $wed_oa);
$stmt->bindValue(':wed_op', $wed_op);
$stmt->bindValue(':thur_oc', $thur_oc);
$stmt->bindValue(':thur_oa', $thur_oa);
$stmt->bindValue(':thur_op', $thur_op);
$stmt->bindValue(':fri_oc', $fri_oc);
$stmt->bindValue(':fri_oa', $fri_oa);
$stmt->bindValue(':fri_op', $fri_op);
$stmt->bindValue(':sat_oc', $sat_oc);
$stmt->bindValue(':sat_oa', $sat_oa);
$stmt->bindValue(':sat_op', $sat_op);
$stmt->bindValue(':sun_oc', $sun_oc);
$stmt->bindValue(':sun_oa', $sun_oa);
$stmt->bindValue(':sun_op', $sun_op);
$stmt->bindValue(':hol_oc', $hol_oc);
$stmt->bindValue(':hol_oa', $hol_oa);
$stmt->bindValue(':hol_op', $hol_op);
$stmt->bindValue(':new_oc', $new_oc);
$stmt->bindValue(':new_oa', $new_oa);
$stmt->bindValue(':new_op', $new_op);
$stmt->bindValue(':full_oc', $full_oc);
$stmt->bindValue(':contact_email', $contact_email);
$stmt->bindValue(':cross_street', $cross_street);
$stmt->bindValue(':short_desc', $short_desc);
$stmt->bindValue(':description', $description);
$stmt->bindValue(':facebook', $facebook);
$stmt->bindValue(':pinterest', $pinterest);
$stmt->bindValue(':instagram', $instagram);
$stmt->bindValue(':inside', $inside);
$stmt->bindValue(':lat', $lat);
$stmt->bindValue(':lng', $lng);
$stmt->bindValue(':logo', $logo);
$stmt->bindValue(':neighborhood', $neighborhood);
$stmt->bindValue(':phone', $phone);
$stmt->bindValue(':place_id', $place_id);
$stmt->bindValue(':place_name', $place_name);
$stmt->bindValue(':zip_code', $zip_code);
$stmt->bindValue(':state_id', $state_id);
$stmt->bindValue(':status', $status);
$stmt->bindValue(':anonymous', $anonymous);
$stmt->bindValue(':twitter', $twitter);
$stmt->bindValue(':wa_area_code', $wa_area_code);
$stmt->bindValue(':wa_country_code', $wa_country_code);
$stmt->bindValue(':wa_phone', $wa_phone);
$stmt->bindValue(':website', $website);
$stmt->bindValue(':linkedin', $linkedin);
$stmt->bindValue(':tiktok', $tiktok);
$stmt->bindValue(':threads', $threads);
$stmt->bindValue(':submission_date', date('Y-m-d\TH:i:sP', time()));
$stmt->execute();
$query = "DELETE FROM `rel_place_cat` WHERE `place_id` = :place_id";
$stmt = $conn->prepare($query);
$stmt->bindValue(':place_id', $place_id);
$stmt->execute();
foreach($cats_arr as $k => $v) {
if($v != $cat_id) {
$cats_arr[$k] = array($v, 0);
} else {
unset($cats_arr[$k]);
}
}
$cats_arr[] = array($cat_id, 1);
if(!empty($cats_arr)) {
$query = "INSERT IGNORE INTO rel_place_cat(place_id, cat_id, city_id, is_main) VALUES";
$i = 1;
foreach($cats_arr as $v) {
if(is_numeric($v[0])) {
if($i > 1) {
$query .= ", ";
}
$query .= "(:place_id_$i, :cat_id_$i, :city_id_$i, :is_main_$i)";
$i++;
}
}
$stmt = $conn->prepare($query);
$i = 1;
foreach($cats_arr as $v) {
if(is_numeric($v[0])) {
$stmt->bindValue(":place_id_$i", $place_id);
$stmt->bindValue(":cat_id_$i", $v[0]);
$stmt->bindValue(":city_id_$i", $city_id);
$stmt->bindValue(":is_main_$i", $v[1]);
$i++;
}
}
$stmt->execute();
}
if(!empty($delete_temp_pics)) {
foreach($delete_temp_pics as $v) {
$temp_pic_path = $pic_basepath.'/'.$place_tmp_folder.'/'.$v;
if(is_file($temp_pic_path)) {
unlink($temp_pic_path);
}
}
}
if(!empty($delete_existing_pics)) {
$where_clause = '';
foreach($delete_existing_pics as $k => $v) {
if(in_array($v, array_column($existing_pics_in_db, 'filename'))) {
$key = array_search($v, array_column($existing_pics_in_db, 'filename'));
$dir = $existing_pics_in_db[$key]['dir'];
$pic_full = $pic_basepath.'/'.$place_full_folder.'/'.$dir.'/'.$v;
$pic_thumb = $pic_basepath.'/'.$place_thumb_folder.'/'.$dir.'/'.$v;
if(is_file($pic_full)) {
unlink($pic_full);
}
if(is_file($pic_thumb)) {
unlink($pic_thumb);
}
$query = "DELETE FROM `photos` WHERE `filename` = :filename";
$stmt = $conn->prepare($query);
$stmt->bindValue(':filename', $v);
$stmt->execute();
}
}
}
$query = "SELECT COUNT(*) AS num_pics FROM `photos` WHERE `place_id` = :place_id";
$stmt = $conn->prepare($query);
$stmt->bindValue(':place_id', $place_id);
$stmt->execute();
$row = $stmt->fetch(PDO::FETCH_ASSOC);
$num_pics_in_db = $row['num_pics'];
if(!empty($uploads)) {
$query = "SELECT photo_id FROM `photos` ORDER BY photo_id DESC LIMIT 1";
$stmt = $conn->prepare($query);
$stmt->execute();
$row = $stmt->fetch(PDO::FETCH_ASSOC);
$last_photo_id = $row['photo_id'];
$dir_num = floor($last_photo_id / 1000) + 1;
$dir_full = $pic_basepath.'/'.$place_full_folder.'/'.$dir_num;
$dir_thumb = $pic_basepath.'/'.$place_thumb_folder.'/'.$dir_num;
if (!is_dir($dir_full)) {
mkdir($dir_full, 0777, true);
}
if (!is_dir($dir_thumb)) {
mkdir($dir_thumb, 0777, true);
}
$tmp_folder = $pic_basepath.'/'.$place_tmp_folder;
$pic_count = 1;
foreach($uploads as $k => $v) {
$tmp_file = $tmp_folder.'/'.$v;
if($pic_count + $num_pics_in_db < $max_pics + 1) {
if(copy($tmp_file, $dir_full.'/'.$v)) {
$stmt = $conn->prepare('INSERT INTO photos(place_id, dir, filename) VALUES(:place_id, :dir, :filename)');
$stmt->bindValue(':place_id', $place_id);
$stmt->bindValue(':dir', $dir_num);
$stmt->bindValue(':filename', $v);
$stmt->execute();
}
smart_resize_image($tmp_file, null, $global_thumb_width, $global_thumb_height, false, $dir_thumb.'/'.$v, true, false, 85);
$query = "DELETE FROM `tmp_photos` WHERE `filename` = :filename";
$stmt = $conn->prepare($query);
$stmt->bindValue(':filename', $v);
$stmt->execute();
$pic_count++;
} else {
if(is_file($tmp_file)) {
unlink($tmp_file);
}
}
}
}
$query = "DELETE FROM `rel_place_custom_fields` WHERE `place_id` = :place_id";
$stmt = $conn->prepare($query);
$stmt->bindValue(':place_id', $place_id);
$stmt->execute();
$custom_fields = array_unique($custom_fields, SORT_REGULAR);
foreach($custom_fields as $v) {
if(!is_array($v['field_value'])) {
if(!empty($v['field_value'])) {
$query = "INSERT INTO rel_place_custom_fields(place_id, field_id, field_value) VALUES(:place_id, :field_id, :field_value)";
$stmt = $conn->prepare($query);
$stmt->bindValue(':place_id', $place_id);
$stmt->bindValue(':field_id', $v['field_id']);
$stmt->bindValue(':field_value', $v['field_value']);
$stmt->execute();
}
} else {
foreach($v['field_value'] as $v2) {
if(!empty($v2)) {
$query = "INSERT INTO rel_place_custom_fields(place_id, field_id, field_value) VALUES(:place_id, :field_id, :field_value)";
$stmt = $conn->prepare($query);
$stmt->bindValue(':place_id', $place_id);
$stmt->bindValue(':field_id', $v['field_id']);
$stmt->bindValue(':field_value', $v2);
$stmt->execute();
}
}
}
}
$query = "DELETE FROM `videos` WHERE `place_id` = :place_id";
$stmt = $conn->prepare($query);
$stmt->bindValue(':place_id', $place_id);
$stmt->execute();
if(!empty($videos)) {
foreach($videos as $v) {
$query = "INSERT INTO videos (place_id, video_url) VALUES(:place_id, :video_url)";
$stmt = $conn->prepare($query);
$stmt->bindValue(':place_id', $place_id);
$stmt->bindValue(':video_url', $v);
$stmt->execute();
}
}
$conn->commit();
$result_message = $txt_success;
if($cfg_enable_sitemaps) {
if($orig_cat_id != $cat_id) {
$permalink_arr = explode('/', $cfg_permalink_struct);
if(in_array('%category%', $permalink_arr)) {
$orig_listing_link = get_listing_link($place_id, '', $orig_cat_id, $orig_cat_slug, $city_id, '', '', $cfg_permalink_struct);
sitemap_remove_url($orig_listing_link);
$new_listing_link = get_listing_link($place_id, '', $cat_id, '', $city_id, '', '', $cfg_permalink_struct);
sitemap_add_url($new_listing_link);
}
} else {
$listing_link = get_listing_link($place_id, '', $cat_id, '', $city_id, '', '', $cfg_permalink_struct);
sitemap_update_lastmod($listing_link);
}
}
}
catch(PDOException $e) {
$conn->rollBack();
$result_message = $e->getMessage();
}
unset($_SESSION['submit_token']);
}
$result_message = str_replace('%place_name%', $place_name, $result_message);
$txt_main_title = str_replace('%place_name%', $place_name, $txt_main_title);
$canonical = $baseurl.'/user/process-edit-listing';
Any help would be appreciated ...
