is_maintainer($appId,$versionId)) )
{
errorpage("Insufficient Privileges!");
exit;
}
//set link for version
if ($versionId != 0)
{
$versionLink = "&versionId=$versionId";
}
if($sub == "Submit")
{
$query = "INSERT into appNotes VALUES (null, '".
addslashes($noteTitle)."', '".
addslashes($noteDesc)."', ".
"$appId , $versionId);";
if (mysql_query($query))
{
//successful
$email = getNotifyEmailAddressList($appId, $versionId);
if($email)
{
$fullAppName = "Application: ".lookupAppName($appId)." Version: ".lookupVersionName($appId, $versionId);
$ms = APPDB_ROOT."appview.php?appId=$appId&versionId=$versionId"."\n";
$ms .= "\n";
$ms .= ($_SESSION['current']->username ? $_SESSION['current']->username : "Anonymous")." added note to ".$fullAppName."\n";
$ms .= "\n";
$ms .= "title: ".$noteTitle."\n";
$ms .= "\n";
$ms .= $noteDesc."\n";
$ms .= "\n";
$ms .= STANDARD_NOTIFY_FOOTER;
mail(stripslashes($email), "[AppDB] ".$fullAppName ,$ms);
} else
{
$email = "no one";
}
addmsg("mesage sent to: ".$email, green);
$statusMessage = "Note added into the database
\n";
addmsg($statusMessage,Green);
}
else
{
//error
addmsg($query,red);
$statusMessage = "Database Error!
".mysql_error()."
\n";
addmsg($statusMessage,red);
}
redirect(apidb_fullurl("appview.php?appId=".$appId.$versionLink));
exit;
}
else
{
apidb_header("Add Application Note");
echo "