Mowie/apps/Navigation/action.php

<?php
require_once '../../inc/autoload.php';

$success = false;

if(is_loggedin())
{
	//Save items
	if(isset($_GET['save']))
	{
		if(hasPerm('edit_nav'))
		{
			$db->setCol('nav_nav');
			foreach ($_POST['navID'] as $order => $id)
			{
				$db->data['nav_order'] = $order;
				$success = $db->update(['id' => $id]);
			}

			//Stream Message
			stream_message('{user} edited a nav entry ({extra})', 3, $id);
		}
	}

	//Delete Items
	if(isset($_GET['del']))
	{
		if(hasPerm('edit_nav'))
		{
			if (isset($_POST['id']) && is_numeric(intval($_POST['id'])))
			{
				$db->setCol('nav_nav');
				$db->data['id'] = $_POST['id'];
				$success = $db->delete();

				//Find all childs
				$childs = [];
				function findChilds($parent)
				{
					global $db, $childs;
					foreach ($parent as $site)
					{
						$childs[] = $site['id'];
						$db->setCol('nav_nav');
						$db->data['parent'] = $site['id'];
						$db->get();
						$navd = $db->data;
						if (!empty($navd))
						{
							findChilds($navd);
						}
					}
				}

				$db->setCol('nav_nav');
				$db->data['parent'] = $_POST['id'];
				$db->get();
				findChilds($db->data);

				$db->setCol('nav_nav');
				foreach ($childs as $child)
				{
					$db->data['id'] = $child;
					$success = $db->delete();
				}

				//Stream Message
				stream_message('{user} deleted a nav entry ({extra})', 3, $_POST['id']);
			}
		}
	}

	//Create Items
	if(isset($_GET['create']))
	{
		if(hasPerm('edit_nav'))
		{
			if (isset($_POST['title'], $_POST['page'], $_POST['parent']))
			{
				if (is_numeric(intval($_POST['page'])) && is_numeric(intval($_POST['parent'])) && is_string(strval($_POST['title'])))
				{
					$pageval = $_POST['page'];
					$send_ready = true;
					if($_POST['external'] !== ''){
						if (filter_var($_POST['external'], FILTER_VALIDATE_URL) === false) {
							$send_ready = false;
							echo 'url_invalid';
						}
					} $pageval = 0;

					if($send_ready)
					{
						$db->setCol('nav_nav');
						$db->data['title'] = $_POST['title'];
						$db->data['page'] = $pageval;
						$db->data['external'] = $_POST['external'];
						$db->data['parent'] = $_POST['parent'];
						$success = $db->insert();

						//Stream Message
						stream_message('{user} created a nav entry ({extra})', 3, $_POST['page']);
					}
				}
			}
		}
	}

	//Update Parents
	if(isset($_GET['update']))
	{
		if(isset($_POST['id'], $_POST['parent']))
		{
			if (is_numeric(intval($_POST['id'])) && is_numeric(intval($_POST['parent'])) && $_POST['parent'] != $_POST['id'])
			{
				$db->setCol('nav_nav');
				$db->data['parent'] = $_POST['parent'];
				$success = $db->update(['id' => $_POST['id']]);

				//Stream Message
				stream_message('{user} edited a nav entry ({extra})', 3, $_POST['id']);
			}
		}
	}
}

if($success)
{
	echo 'success';
}