[svn r19713] logic changes - allow validate formulary, before to sent - (partial FS#4021)

main/blog/blog_admin.php

@@ -72,24 +72,28 @@ if (api_is_allowed_to_edit())
 		PROCESSING..
 	==============================================================================
 	*/
-	if (!empty($_POST['new_blog_submit']))
-	{
-		Blog::create_blog($_POST['blog_name'],$_POST['blog_subtitle']);
+	$get_blog_name	   = Security::remove_XSS($_POST['blog_name']);
+	$get_blog_subtitle = Security::remove_XSS($_POST['blog_subtitle']);
+	$get_blog_id       = Security::remove_XSS($_POST['blog_id']);
+	
+	if (!empty($_POST['new_blog_submit'])) {
+		if (strlen(trim($_POST['blog_name']))>0 && strlen(trim($_POST['blog_subtitle']))>0) {
+			Blog::create_blog($get_blog_name,$get_blog_subtitle);
+		}
+
 	}
-	if (!empty($_POST['edit_blog_submit']))
-	{
-		Blog::edit_blog($_POST['blog_id'],$_POST['blog_name'],$_POST['blog_subtitle']);
+	if (!empty($_POST['edit_blog_submit'])) {
+		if (strlen(trim($_POST['blog_name']))>0 && strlen(trim($_POST['blog_subtitle']))>0) {
+			Blog::edit_blog($get_blog_id,$get_blog_name,$get_blog_subtitle);
+		}
 	}
-	if (isset($_GET['action']) && $_GET['action'] == 'visibility')
-	{
+	if (isset($_GET['action']) && $_GET['action'] == 'visibility') {
 		Blog::change_blog_visibility(Database::escape_string((int)$_GET['blog_id']));
 	}
-	if (isset($_GET['action']) && $_GET['action'] == 'delete')
-	{
+	if (isset($_GET['action']) && $_GET['action'] == 'delete') {
 		Blog::delete_blog(Database::escape_string((int)$_GET['blog_id']));
 	}
 	
-	
 	/*
 	==============================================================================
 		DISPLAY

main/inc/lib/blog.lib.php

@@ -2654,11 +2654,11 @@ class Blog
 					  	<td><b>' . get_lang('AddBlog') . '</b><br /><br /></td>
 					  </tr>
 						<tr>
-					   <td align="right">' . get_lang('Title') . ':&nbsp;&nbsp;</td>
+					   <td align="right"><span class="form_required">*</span>' . get_lang('Title') . ':&nbsp;&nbsp;</td>
 					   <td><input name="blog_name" type="text" size="100" /></td>
 						</tr>
 						<tr>
-					   <td align="right">' . get_lang('Subtitle') . ':&nbsp;&nbsp;</td>
+					   <td align="right"><span class="form_required">*</span>' . get_lang('Subtitle') . ':&nbsp;&nbsp;</td>
 					   <td><input name="blog_subtitle" type="text" size="100" /></td>
 						</tr>
 						<tr>
@@ -2691,11 +2691,11 @@ class Blog
 					  	<td><b>' . get_lang('EditBlog') . '</b><br /><br /></td>
 					  </tr>
 						<tr>
-					   <td align="right">' . get_lang('Title') . ':&nbsp;&nbsp;</td>
+					   <td align="right"><span class="form_required">*</span>' . get_lang('Title') . ':&nbsp;&nbsp;</td>
 					   <td><input name="blog_name" type="text" size="100" value="' . $blog['blog_name'] . '" /></td>
 						</tr>
 						<tr>
-					   <td align="right">' . get_lang('Subtitle') . ':&nbsp;&nbsp;</td>
+					   <td align="right"><span class="form_required">*</span>' . get_lang('Subtitle') . ':&nbsp;&nbsp;</td>
 					   <td><input name="blog_subtitle" type="text" size="100" value="' . $blog['blog_subtitle'] . '" /></td>
 						</tr>
 						<tr>