<?php
rg_log("FILE: /feedback/suggestion");

$_suggestion = "";

$errmsg = array();

while (1) {
	if ($rg['doit'] != 1) {
		// defaults
		$suggestion = "";
		break;
	}

	$suggestion = rg_var_str("suggestion");

	if (!rg_valid_referer()) {
		$errmsg[] = "invalid referer; try again";
		break;
	}

	if (!rg_token_valid($db, $rg, 'suggestion', FALSE)) {
		$errmsg[] = "invalid token; try again";
		break;
	}

	if (empty($suggestion)) {
		$errmsg[] = "empty suggestion";
		break;
	}

	$r = rg_user_suggestion($db, $rg['login_ui']['uid'], $suggestion);
	if ($r === FALSE) {
		$errmsg[] = "could not add suggestion (" . rg_user_error() . ")!";
		break;
	}

	$suggestion = '';
	$_suggestion .= rg_template("suggestion_sent.html", $rg, TRUE /* xss */);
	break;
}

$rg['suggestion'] = $suggestion;
$rg['HTML:errmsg'] = rg_template_errmsg($errmsg);
$rg['rg_form_token'] = rg_token_get($db, $rg, 'suggestion');
$_suggestion .= rg_template("suggestion.html", $rg, TRUE /* xss */);

?>