diff options
author | Ludovic Arnaud <ludovic_arnaud@users.sourceforge.net> | 2003-09-14 22:21:57 +0000 |
---|---|---|
committer | Ludovic Arnaud <ludovic_arnaud@users.sourceforge.net> | 2003-09-14 22:21:57 +0000 |
commit | f96ded2eb65d5f282c5d9c98cb43b0c5820646cd (patch) | |
tree | 6e6f81ba554a55aa49de2bc1466ed3171b9b8344 /phpBB/mcp.php | |
parent | dff8c2e0e18b89f0efa10ca8058208d46016c957 (diff) | |
download | forums-f96ded2eb65d5f282c5d9c98cb43b0c5820646cd.tar forums-f96ded2eb65d5f282c5d9c98cb43b0c5820646cd.tar.gz forums-f96ded2eb65d5f282c5d9c98cb43b0c5820646cd.tar.bz2 forums-f96ded2eb65d5f282c5d9c98cb43b0c5820646cd.tar.xz forums-f96ded2eb65d5f282c5d9c98cb43b0c5820646cd.zip |
MCP take 2, see forum
git-svn-id: file:///svn/phpbb/trunk@4496 89ea8834-ac86-4346-8a33-228a782c2dd0
Diffstat (limited to 'phpBB/mcp.php')
-rw-r--r-- | phpBB/mcp.php | 2700 |
1 files changed, 469 insertions, 2231 deletions
diff --git a/phpBB/mcp.php b/phpBB/mcp.php index b43f0a2deb..fb3046518c 100644 --- a/phpBB/mcp.php +++ b/phpBB/mcp.php @@ -11,2453 +11,691 @@ // // ------------------------------------------------------------- -// TODO for 2.2: -// -// * Plug-in based? -// * Add session_id checks for all Moderator ops -// * Tab based system -// * Front page: -// * Select box listing all forums to which user has moderator rights -// * Five(?) most recent Moderator log entries (for relevant forum/s) -// * Five(?) most recent Moderator note entries (for relevant forum/s) -// * Five(?) most recent Report to Moderator messages (for relevant forum/s) -// * Note that above three, bar perhaps log entries could be on other tabs but with counters -// or some such on front page indicating new messages are present -// * List of topics awaiting Moderator approval (if appropriate and for relevant forum/s) -// * Topic view: -// * As current(?) plus differing colours for Approved/Unapproved topics/posts -// * When moving topics to forum for which Mod doesn't have Mod rights set for Mod approval -// * Find duplicates: -// * List supiciously similar posts across forum/s -// * "Ban" user/s: -// * Limit read/post/reply/etc. permissions -// * Posts/topics deletion! -// * Leave a reason for logging purpose? - define('IN_PHPBB', true); -define('NEED_SID', true); $phpbb_root_path = './'; $phpEx = substr(strrchr(__FILE__, '.'), 1); include($phpbb_root_path . 'common.'.$phpEx); include($phpbb_root_path . 'includes/functions_admin.'.$phpEx); +/* +CREATE TABLE phpbb_modules ( + module_id mediumint(8) NOT NULL auto_increment, + module_type char(3) NOT NULL default '', + module_title varchar(50) NOT NULL default '', + module_filename varchar(50) NOT NULL default '', + module_order mediumint(4) NOT NULL default '0', + module_enabled tinyint(1) unsigned NOT NULL default '1', + module_acl varchar(255) NOT NULL default '', + PRIMARY KEY (module_id), + KEY module_type (module_type,module_enabled) +); -// Start session management -$user->start(); -$auth->acl($user->data); - -$user->setup(); - - -// Obtain initial var settings -$forum_id = (isset($_REQUEST['f'])) ? max(0, intval($_REQUEST['f'])) : 0; -$topic_id = (!empty($_REQUEST['t'])) ? intval($_REQUEST['t']) : 0; -$post_id = (!empty($_REQUEST['p'])) ? intval($_REQUEST['p']) : 0; -$start = (!empty($_REQUEST['start'])) ? intval($_REQUEST['start']) : 0; - -$forum_data = $topic_data = $post_data = array(); -$topic_id_list = ($topic_id) ? array($topic_id) : array(); -$post_id_list = ($post_id) ? array($post_id) : array(); - -$to_forum_id = (!empty($_REQUEST['to_forum_id'])) ? intval($_REQUEST['to_forum_id']) : 0; -$to_topic_id = (!empty($_REQUEST['to_topic_id'])) ? intval($_REQUEST['to_topic_id']) : 0; - -$confirm = (!empty($_POST['confirm'])) ? TRUE : FALSE; -$mode = (!empty($_REQUEST['mode'])) ? $_REQUEST['mode'] : ''; -$action = (!empty($_GET['action'])) ? $_GET['action'] : ''; -$quickmod = (!empty($_REQUEST['quickmod'])) ? TRUE : FALSE; - - -// Check if user did or did not confirm -// If they did not, forward them to the last page they were on -if (isset($_POST['cancel'])) -{ - $redirect = ''; - if ($mode == 'forum_info') - { - $mode = 'front'; - } - elseif ($topic_id > 0) - { - $redirect = ($quickmod) ? "viewtopic.$phpEx$SID&f=$forum_id&t=$topic_id&start=$start" : "mcp.$phpEx$SID&t=$topic_id&start=$start"; - } - elseif ($forum_id > 0) - { - $redirect = ($quickmod) ? "viewforum.$phpEx$SID&t=$forum_id&start=$start" : "mcp.$phpEx$SID&t=$forum_id&start=$start"; - } - else - { - $redirect = ($quickmod) ? "index.$phpEx$SID" : "mcp.$phpEx$SID"; - } - - if ($redirect) - { - redirect($redirect); - } -} - -$subject = (!empty($_REQUEST['subject'])) ? $_REQUEST['subject'] : ''; - -$post_modes = array('approve', 'disapprove', 'move', 'fork', 'delete_topic', 'lock', 'unlock', 'merge_posts', 'delete_post', 'split_all', 'split_beyond', 'select_topic', 'resync', 'change_poster', 'change_poster_search', 'delete_report'); -foreach ($post_modes as $post_mode) -{ - if (isset($_POST[$post_mode])) - { - $mode = $post_mode; - break; - } -} - -// Cleanse inputted values -foreach ($_POST['topic_id_list'] as $t_id) -{ - if ($t_id = intval($t_id)) - { - $topic_id_list[] = $t_id; - } -} -foreach ($_POST['post_id_list'] as $p_id) -{ - if ($p_id = intval($p_id)) - { - $post_id_list[] = $p_id; - } -} - -// Build short_id_list and $return string -$selected_post_ids = array(); -if (!empty($_GET['post_id_list'])) -{ - $len = $_GET['post_id_list']{0}; - for ($i = 1; $i < strlen($_GET['post_id_list']); $i += $len) - { - $short = substr($_GET['post_id_list'], $i, $len); - $selected_post_ids[] = (int) base_convert($short, 36, 10); - $post_id_list[] = base_convert($short, 36, 10); - } -} -$url_extra = (!empty($post_id_list)) ? '&post_id_list=' . short_id_list($post_id_list ) : ''; -$return_mcp = '<br /><br />' . sprintf($user->lang['RETURN_MCP'], '<a href="mcp.' . $phpEx . $SID . '">', '</a>'); - -// Build up return links and acl list -// $acl_src contains the acl list for source forum(s) -// $acl_trg contains the acl list for destination forum(s) - -$acl_src = 'm_'; -$acl_trg = 'm_'; -$return_mode = '<br /><br />' . sprintf($user->lang['RETURN_MCP'], '<a href="mcp.' . $phpEx . $SID . '">', '</a>'); +INSERT INTO phpbb_modules VALUES (6, 'mcp', 'MAIN', 'main', 1, 1, ''); +*/ +@define('MODULES_TABLE', $table_prefix . 'modules'); -switch ($mode) -{ - case 'make_global': - case 'make_announce': - $acl_src = 'f_announce'; - break; - - case 'make_sticky': - $acl_src = 'f_sticky'; - break; - - case 'approve': - case 'unapprove': - case 'disapprove': - $acl_src = 'm_approve'; - break; - - case 'split': - case 'split_all': - case 'split_beyond': - $acl_src = 'a_'; - $acl_trg = 'f_post'; - - $return_mode = '<br /><br />' . sprintf($user->lang['RETURN_MCP'], '<a href="mcp.' . $phpEx . $SID . '&mode=split&t=' . $topic_id . $url_extra . '&subject=' . htmlspecialchars($subject) . '">', '</a>'); - break; - - case 'merge': - case 'merge_posts': - $acl_src = 'm_merge'; - $acl_trg = 'm_merge'; - - $return_mode = '<br /><br />' . sprintf($user->lang['RETURN_MCP'], '<a href="mcp.' . $phpEx . $SID . '&mode=merge&t=' . $topic_id . $url_extra . '">', '</a>'); - break; - - case 'move': - $acl_src = 'm_move'; - $acl_trg = 'f_post'; - break; - - case 'viewlogs': - $acl_src = array('m_', 'a_'); - break; - - case 'fork': - $acl_trg = 'f_post'; - break; - - case 'change_poster': - $acl_src = 'm_chgposter'; -} - -// Check destination forum or topic if applicable -if ($to_topic_id > 0) +// --------- +// FUNCTIONS +// +class module { - $sql = 'SELECT * - FROM ' . TOPICS_TABLE . ' - WHERE topic_id = ' . $to_topic_id; - $result = $db->sql_query($sql); + var $module_id = 0; + var $module_url; + var $modules = array(); + var $submodules = array(); - if (!$row = $db->sql_fetchrow($result)) + function module($module_type, $module_url, $selected) { - trigger_error($user->lang['TOPIC_NOT_EXIST'] . $return_mode); - } - $db->sql_freeresult($result); - - if (!isset($topic_data[$to_topic_id])) - { - $topic_data[$to_topic_id] = $row; - } + global $auth, $db, $phpbb_root_path, $phpEx, $user; - $to_forum_id = $row['forum_id']; -} - -if ($to_forum_id > 0) -{ - if (!isset($forum_data[$to_forum_id])) - { - $sql = 'SELECT * - FROM ' . FORUMS_TABLE . ' - WHERE forum_id = ' . $to_forum_id; + $sql = 'SELECT module_id, module_title, module_filename, module_acl + FROM ' . MODULES_TABLE . " + WHERE module_type = '{$module_type}' + AND module_enabled = 1 + ORDER BY module_order ASC"; $result = $db->sql_query($sql); - if (!$row = $db->sql_fetchrow($result)) + while ($row = $db->sql_fetchrow($result)) { - trigger_error($user->lang['FORUM_NOT_EXIST'] . $return_mode); - } - $db->sql_freeresult($result); - - $forum_data[$to_forum_id] = $row; - } - - if (!$auth->acl_get('f_list', $to_forum_id)) - { - trigger_error($user->lang['FORUM_NOT_EXIST'] . $return_mode); - } -} - -// Reset id lists then rebuild them from verified data -$topic_id_sql = implode(', ', array_unique($topic_id_list)); -$post_id_sql = implode(', ', array_unique($post_id_list)); -$forum_id_list = $topic_id_list = $post_id_list = array(); -$not_moderator = FALSE; + if ($row['module_acl']) + { + // Authorisation is required -if ($forum_id > 0) -{ - if ($auth->acl_gets($acl_src, $forum_id)) - { - $forum_id_list[] = $forum_id; - } - else - { - $not_moderator = TRUE; - } -} + $is_auth = FALSE; + foreach (explode(',', $row['module_acl']) as $auth_option) + { + if ($auth->acl_get($auth_option)) + { + $is_auth = TRUE; + break; + } + } + if (!$is_auth) + { + // The user is not authorised to use this module, skip it + continue; + } + } -if ($topic_id_sql) -{ - $sql = 'SELECT * - FROM ' . TOPICS_TABLE . " - WHERE topic_id IN ($topic_id_sql)"; - $result = $db->sql_query($sql); + if ($row['module_filename'] == $selected || $row['module_id'] == $selected) + { + $module_id = intval($row['module_id']); + $module_name = $row['module_filename']; + } - while ($row = $db->sql_fetchrow($result)) - { - if ($auth->acl_gets($acl_src, $row['forum_id'])) - { - $forum_id_list[] = $row['forum_id']; - $topic_id_list[] = $row['topic_id']; + // Get the localised lang string if available, or make up our own otherwise + $title = (isset($user->lang[strtoupper($module_type) . '_' . $row['module_title']])) ? $user->lang[strtoupper($module_type) . '_' . $row['module_title']] : ucfirst(str_replace('_', ' ', strtolower($row['module_title']))); - $topic_data[$row['topic_id']] = $row; + $modules[intval($row['module_id'])] = array( + 'title' => $title, + 'name' => $row['module_filename'], + 'link' => '&i=' . $row['module_id'] + ); } - else + $db->sql_freeresult($result); + + if (empty($module_id)) { - $not_moderator = TRUE; + trigger_error('MODULE_NOT_EXIST'); } - } - $db->sql_freeresult($result); -} + require($phpbb_root_path . "includes/{$module_type}/{$module_type}_{$module_name}.$phpEx"); + eval("\$this->module = new {$module_type}_{$module_name}(\$module_id);"); -if ($post_id_sql) -{ - $sql = 'SELECT * - FROM ' . POSTS_TABLE . " - WHERE post_id IN ($post_id_sql)"; - $result = $db->sql_query($sql); + $this->module->modules = $modules; + $this->module->module_url = $module_url; + } - while ($row = $db->sql_fetchrow($result)) + // This generates the block template variable for outputting the list + // of submodules, should be called with an associative array of modules + // in the form 'LANG_STRING' => 'LINK' + function menu($selected) { - if ($auth->acl_gets($acl_src, $row['forum_id'])) - { - $forum_id_list[] = $row['forum_id']; - $topic_id_list[] = $row['topic_id']; - $post_id_list[] = $row['post_id']; + global $template, $user; - $post_data[$row['post_id']] = $row; - } - else + foreach ($this->modules as $module_id => $section_data) { - $not_moderator = TRUE; + $template->assign_block_vars($this->module_type . '_section', array( + 'L_TITLE' => $section_data['title'], + 'S_SELECTED' => ($module_id == $this->module_id) ? TRUE : FALSE, + 'U_TITLE' => $this->url . $section_data['link']) + ); + + if ($module_id == $this->module_id) + { + foreach ($this->submodules as $title => $module_link) + { + // Get the localised lang string if available, or make up our own otherwise + $section_title = (isset($user->lang[$title])) ? $user->lang[$title] : ucfirst(str_replace('_', ' ', strtolower($title))); + + $template->assign_block_vars("{$this->module_type}_section.{$this->module_type}_subsection", array( + 'L_TITLE' => $section_title, + 'S_SELECTED' => ($title == $selected) ? TRUE : FALSE, + 'U_TITLE' => $this->url . $module_link + )); + } + } } } - $db->sql_freeresult($result); -} - -$forum_id_list = array_unique($forum_id_list); -$topic_id_list = array_unique($topic_id_list); -$post_id_list = array_unique($post_id_list); - -if (count($forum_id_list)) -{ - $sql = 'SELECT * - FROM ' . FORUMS_TABLE . ' - WHERE forum_id IN (' . implode(', ', $forum_id_list) . ')'; - $result = $db->sql_query($sql); - - while ($row = $db->sql_fetchrow($result)) + // Displays the appropriate template with the given title + function display($page_title, $tpl_name) { - $forum_data[$row['forum_id']] = $row; - } - $db->sql_freeresult($result); + global $template; - // Set infos about current forum/topic/post - // Uses each() because array_unique may unset index 0 if it's a duplicate - if (!isset($_REQUEST['f']) && count($forum_id_list) == 1) - { - // Using isset() rather than !empty() because of the jumpbox having f="0" for "All forums" - list($void, $forum_id) = each($forum_id_list); - } + page_header($page_title); - if (!$topic_id && count($topic_id_list) == 1) - { - list($void, $topic_id) = each($topic_id_list); - } + $template->set_filenames(array( + 'body' => $tpl_name) + ); - if (!$post_id && count($post_id_list) == 1) - { - list($void, $post_id) = each($post_id_list); + page_footer(); } - $forum_info = $forum_data[$forum_id]; - - if ($topic_id) + function message_die($msg) { - $topic_info = $topic_data[$topic_id]; - $return_topic = '<br /><br />' . sprintf($user->lang['RETURN_TOPIC'], '<a href="viewtopic.' . $phpEx . $SID . '&f=' . $forum_id . '&t=' . $topic_id . '">', '</a>'); - } - if ($post_id) - { - $post_info = $post_data[$post_id]; - $return_topic = '<br /><br />' . sprintf($user->lang['RETURN_TOPIC'], '<a href="viewtopic.' . $phpEx . $SID . '&f=' . $forum_id . '&p=' . $post_id . '#' . $post_id . '">', '</a>'); - } -} -else -{ - // There's no forums list available so the user either submitted an empty or invalid list of posts/topics or isn't a moderator + global $template, $user; - if ($not_moderator || !get_forum_list('m_', TRUE, TRUE, TRUE)) - { - trigger_error($user->lang['NOT_MODERATOR']); - } - else - { - // TODO: drop this and deal with each mode individually? - $forumless_modes = array('front', 'reports', 'mod_queue', 'viewlogs', 'forum_info'); - if ($mode != '' && !in_array($mode, $forumless_modes)) + if (isset($user->lang[$msg])) { - // The user has submitted invalid post_ids or topic_ids - trigger_error($user->lang['TOPIC_NOT_EXIST'] . $return_mcp); + $msg = $user->lang[$msg]; } - } -} - -// -// There we're done validating input. -// -// $post_id_list contains the complete list of post_id's, same for $topic_id_list and $forum_id_list -// $post_id, $topic_id, $forum_id have all been set. -// -// $forum_data is an array where $forum_data[<forum_id>] contains the corresponding row, same for $topic_data and $post_data. -// $forum_info is set to $forum_data[$forum_id] for quick reference, same for topic and post. -// -// We know that the user has m_ or a_ access to all the selected forums/topics/posts but we still have to check for specific authorisations. -// - -// Build links and tabs -$mcp_url = "mcp.$phpEx$SID"; -$tabs = array( - array( - 'mode' => 'front', - 'title' => $user->lang['FRONT_PAGE'], - 'url' => $mcp_url . '&mode=front' - ), - array( - 'mode' => 'mod_queue', - 'title' => $user->lang['MOD_QUEUE'], - 'url' => $mcp_url . '&f=' . $forum_id . '&mode=mod_queue' - ), - array( - 'mode' => 'reports', - 'title' => $user->lang['REPORTED_POSTS'], - 'url' => $mcp_url . '&f=' . $forum_id . '&mode=reports' - ) -); - -$mcp_url .= ($forum_id) ? '&f=' . $forum_id : ''; -$mcp_url .= ($topic_id) ? '&t=' . $topic_id : ''; -$mcp_url .= ($post_id) ? '&p=' . $post_id : ''; -$return_mcp = '<br /><br />' . sprintf($user->lang['RETURN_MCP'], '<a href="' . $mcp_url . '">', '</a>'); - -$tabs[] = array( - 'mode' => 'viewlogs', - 'title' => ($topic_id) ? $user->lang['VIEW_TOPIC_LOGS'] : $user->lang['VIEW_LOGS'], - 'url' => $mcp_url . '&mode=viewlogs' -); - -if ($auth->acl_get('m_info', $forum_id)) -{ - $tabs[] = array( - 'mode' => 'forum_info', - 'title' => $user->lang['FORUM_INFO'], - 'url' => $mcp_url . '&mode=forum_info&f=' . $forum_id - ); -} - -if ($forum_id && $forum_data[$forum_id]['forum_type'] == FORUM_POST && $auth->acl_get('m_', $forum_id)) -{ - $tabs[] = array( - 'mode' => 'forum_view', - 'title' => $user->lang['VIEW_FORUM'], - 'url' => $mcp_url . '&mode=forum_view' - ); -} - -if ($topic_id && $auth->acl_gets('m_delete', 'm_split', 'm_merge', 'm_approve', $forum_id)) -{ - $tabs[] = array( - 'mode' => 'topic_view', - 'title' => $user->lang['VIEW_TOPIC'], - 'url' => $mcp_url . '&mode=topic_view' - ); -} - -if ($post_id && $auth->acl_gets('m_', $forum_id)) -{ - $tabs[] = array( - 'modes' => array('post_details', 'change_poster', 'change_poster_search', 'delete_report'), - 'title' => $user->lang['POST_DETAILS'], - 'url' => $mcp_url . '&mode=post_details' - ); -} -if (!$mode) -{ - if ($post_id) - { - $mode = 'post_details'; - } - elseif ($topic_id) - { - $mode = 'topic_view'; - } - elseif ($forum_id && $forum_data[$forum_id]['forum_type'] == FORUM_POST) - { - $mode = 'forum_view'; - } - else - { - $mode = 'front'; + $template->assign_vars(array( + 'MESSAGE_TITLE' => $user->lang['MESSAGE'], + 'MESSAGE_TEXT' => $msg + )); + $this->display('MCP', 'mcp_message.html'); } } -switch ($mode) -{ - case 'select_topic': - if ($url_extra) - { - $tabs[] = array( - 'mode' => 'merge', - 'title' => $user->lang['MERGE_TOPIC'], - 'url' => $mcp_url . '&mode=merge' . $url_extra - ); - } - break; - - case 'merge': - case 'split': - $tabs[] = array( - 'mode' => $mode, - 'title' => $user->lang[strtoupper($mode) . '_TOPIC'], - 'url' => $mcp_url . '&mode=' . $mode . $url_extra - ); - break; -} - -foreach ($tabs as $tab) -{ - $template->assign_block_vars('tab', array( - 'S_IS_SELECTED' => ((!empty($tab['mode']) && $tab['mode'] == $mode) || (!empty($tab['modes']) && in_array($mode, $tab['modes']))) ? TRUE : FALSE, - 'NAME' => $tab['title'], - 'U_LINK' => $tab['url']) - ); -} - -// -// Do major work ... -// -// Current modes: -// - make_* Change topic type -// - resync Resyncs topics -// - delete_post Delete posts, displays confirmation if unconfirmed -// - delete_topic Delete topics, displays confirmation -// - select_topic Forward the user to forum view to select a destination topic for the merge -// - merge Topic view, only displays the Merge button -// - split Topic view, only displays the split buttons -// - delete Topic view, only displays the Delete button -// - topic_view Topic view, similar to viewtopic.php -// - forum_view Forum view, similar to viewforum.php -// - move Move selected topic(s), displays the forums list for confirmation. Used for quickmod as well -// - lock, unlock Lock or unlock topic(s). No confirmation. Used for quickmod. -// - merge_posts Actually merge posts to selected topic. Untested yet. -// - split_all Actually split selected topic -// - split_beyond Actually split selected topic -// - mod_queue Displays a list or unapproved posts and/or topics. I haven't designed the interface yet but it will have to be able to filter/order them by type (posts/topics), by timestamp or by forum.s -// - post_details Displays post details, IP informations and moderator options. -// -// TODO: -// - reports Displays a list of reported posts. No interface yet, must be able to order them by priority(?), type, timestamp or forum. Action: view all (default), read, delete. -// - notes Displays moderators notes for current forum or for all forums the user is a moderator of. Actions: view all (default), read, add, delete, edit(?). -// - a hell lot of other things -// - -switch ($mode) +class mcp extends module { - case 'forum_info': - if (!$auth->acl_get('m_info', $forum_id)) - { - trigger_error($user->lang['NOT_MODERATOR']); - } - - if ($confirm) - { - $sql_ary = array( - 'forum_name' => (string) (!empty($_POST['forum_name'])) ? $_POST['forum_name'] : $forum_info['forum_name'], - 'forum_desc' => (string) $_POST['forum_desc'], - 'forum_style' => (int) $_POST['forum_style'], - 'forum_status' => (int) $_POST['forum_status'] - ); + var $module_type = 'mcp'; + var $forum_id = 0; + var $topic_id = 0; + var $post_id = 0; - $sql = 'UPDATE ' . FORUMS_TABLE . ' SET ' . $db->sql_build_array('UPDATE', $sql_ary) . ' - WHERE forum_id = ' . $forum_id; - $db->sql_query($sql); - - $return_mcp = '<br /><br />' . sprintf($user->lang['RETURN_MCP'], '<a href="mcp.' . $phpEx . $SID . '">', '</a>'); - $return_forum = '<br /><br />' . sprintf($user->lang['RETURN_FORUM'], "<a href=\"viewforum.$phpEx$SID&f=$forum_id\">", '</a>'); - trigger_error($user->lang['FORUM_UPDATED'] . $return_forum . $return_mcp); - } - - mcp_header('mcp_foruminfo.html', 'm_info', TRUE); - - $result = $db->sql_query('SELECT style_id, style_name FROM ' . STYLES_TABLE . ' ORDER BY style_name'); - - $style_list = '<option value="0"' . (($forum_info['forum_style'] > 0) ? '>' : ' selected="selected">') . $user->lang['DEFAULT_STYLE'] . "</option>\n"; + function get_forum_data($forum_id, $acl_list = '', $return_on_error = FALSE) + { + global $auth, $db; + $rowset = array(); + $sql = 'SELECT * + FROM ' . FORUMS_TABLE . ' + WHERE forum_id ' . ((is_array($forum_id)) ? 'IN (' . implode(', ', $forum_id) . ')' : "= $forum_id"); + $result = $db->sql_query($sql); + while ($row = $db->sql_fetchrow($result)) { - $style_list .= '<option value="' . $row['style_id'] . '"' . (($forum_info['forum_style'] > 0 && $row['style_id'] == $forum_info['forum_style']) ? ' selected="selected">' : '>') . $row['style_name'] . "</option>\n"; - } - - $status_list = '<option value="' . ITEM_LOCKED . '"' . (($forum_info['forum_status'] == ITEM_LOCKED) ? ' selected="selected"' : '') . '>' . $user->lang['LOCKED'] . "</option>\n"; - $status_list .= '<option value="' . ITEM_UNLOCKED . '"' . (($forum_info['forum_status'] == ITEM_UNLOCKED) ? ' selected="selected"' : '') . '>' . $user->lang['UNLOCKED'] . "</option>\n"; - - $template->assign_vars(array( - 'S_MCP_ACTION' => $mcp_url . '&mode=forum_info', - 'S_FORUM_ID' => $forum_id, - - 'FORUM_NAME' => $forum_info['forum_name'], - 'FORUM_DESC' => $forum_info['forum_desc'], - 'STYLE_LIST' => $style_list, - 'STATUS_LIST' => $status_list - )); - - page_footer(); - break; - - case 'fork': - $return_mcp = '<br /><br />' . sprintf($user->lang['RETURN_MCP'], '<a href="' . $mcp_url . '&mode=forum_view&start="' . $start . '">', '</a>'); - $return_forum = '<br /><br />' . sprintf($user->lang['RETURN_NEW_FORUM'], '<a href="viewforum.' . $phpEx . $SID . '&f=' . $to_forum_id . '">', '</a>'); - - if (!count($topic_id_list)) - { - trigger_error($user->lang['NO_TOPIC_SELECTED'] . $return_mcp); - } - if ($to_forum_id < 1) - { - $confirm = FALSE; - } - - if (!$confirm) - { - $s_hidden_fields = ''; - foreach ($topic_id_list as $topic_id) - { - $s_hidden_fields .= '<input type="hidden" name="topic_id_list[]" value="' . $topic_id . '">'; - } - - $template->assign_vars(array( - 'S_MCP_ACTION' => "mcp.$phpEx$SID&mode=fork&start=$start", - 'S_HIDDEN_FIELDS' => $s_hidden_fields, - 'S_FORUM_SELECT' => make_forum_select(), - - 'L_MODE_TITLE' => $user->lang['FORK'], - 'L_MODE_EXPLAIN' => $user->lang['FORK_EXPLAIN'] - )); - - mcp_header('mcp_move.html'); - } - else - { - if ($forum_data[$to_forum_id]['forum_type'] == FORUM_CAT) + if ($acl_list && !$auth->acl_get($acl_list, $row['forum_id'])) { - trigger_error($user->lang['FORUM_NOT_POSTABLE'] . $return_mcp); - } - - $total_posts = 0; - $new_topic_id_list = $post_rows = array(); - foreach ($topic_data as $topic_id => $topic_row) - { - $sql_ary = array( - 'forum_id' => (int) $to_forum_id, - 'icon_id' => (int) $topic_row['icon_id'], - 'topic_approved' => 1, - 'topic_title' => (string) $topic_row['topic_title'], - 'topic_poster' => (int) $topic_row['topic_poster'], - 'topic_time' => (int) $topic_row['topic_time'], - 'topic_replies' => (int) $topic_row['topic_replies_real'], - 'topic_replies_real' => (int) $topic_row['topic_replies_real'], - 'topic_status' => (int) $topic_row['topic_status'], - 'topic_type' => (int) $topic_row['topic_type'], - 'topic_first_poster_name' => (string) $topic_row['topic_first_poster_name'], - 'topic_last_poster_id' => (int) $topic_row['topic_last_poster_id'], - 'topic_last_poster_name' => (string) $topic_row['topic_last_poster_name'], - 'topic_last_post_time' => (int) $topic_row['topic_last_post_time'], - 'poll_title' => (string) $topic_row['poll_title'], - 'poll_start' => (int) $topic_row['poll_start'], - 'poll_length' => (int) $topic_row['poll_length'] - ); - - $db->sql_query('INSERT INTO ' . TOPICS_TABLE . $db->sql_build_array('INSERT', $sql_ary)); - $new_topic_id = $db->sql_nextid(); - $new_topic_id_list[$new_topic_id] = $topic_id; - - if ($topic_row['poll_start']) - { - $poll_rows = array(); - - $result = $db->sql_query('SELECT * FROM ' . POLL_OPTIONS_TABLE . ' WHERE topic_id = ' . $topic_id); - while ($row = $db->sql_fetchrow($result)) - { - $sql = 'INSERT INTO ' . POLL_OPTIONS_TABLE . ' (poll_option_id, topic_id, poll_option_text, poll_option_total) - VALUES (' . $row['poll_option_id'] . ', ' . $new_topic_id . ", '" . $db->sql_escape($row['poll_option_text']) . "', 0)"; - - $db->sql_query($sql); - } - } - - $sql = 'SELECT * - FROM ' . POSTS_TABLE . " - WHERE topic_id = $topic_id - ORDER BY post_id ASC"; - $result = $db->sql_query($sql); - while ($row = $db->sql_fetchrow($result)) - { - $post_rows[] = $row; - } - $db->sql_freeresult(); - - if (!count($post_rows)) - { - continue; - } - - $total_posts += count($post_rows); - foreach ($post_rows as $row) - { - $sql_ary = array( - 'topic_id' => (int) $new_topic_id, - 'forum_id' => (int) $to_forum_id, - 'poster_id' => (int) $row['poster_id'], - 'icon_id' => (int) $row['icon_id'], - 'poster_ip' => (string) $row['poster_ip'], - 'post_time' => (int) $row['post_time'], - 'post_approved' => 1, - 'enable_bbcode' => (int) $row['enable_bbcode'], - 'enable_html' => (int) $row['enable_html'], - 'enable_smilies' => (int) $row['enable_smilies'], - 'enable_magic_url' => (int) $row['enable_magic_url'], - 'enable_sig' => (int) $row['enable_sig'], - 'post_username' => (string) $row['post_username'], - 'post_subject' => (string) $row['post_subject'], - 'post_text' => (string) $row['post_text'], - 'post_checksum' => (string) $row['post_checksum'], - 'post_encoding' => (string) $row['post_encoding'], - 'bbcode_bitfield' => (int) $row['bbcode_bitfield'], - 'bbcode_uid' => (string) $row['bbcode_uid'] - ); - - $db->sql_query('INSERT INTO ' . POSTS_TABLE . $db->sql_build_array('INSERT', $sql_ary)); - } + continue; } - - // Sync new topics, parent forums and board stats - sync('topic', 'topic_id', $topic_id_list, TRUE); - sync('forum', 'forum_id', $to_forum_id, TRUE); - set_config('num_topics', $config['num_topics'] + count($topic_id_list)); - set_config('num_posts', $config['num_posts'] + $total_posts); - - foreach ($new_topic_id_list as $new_topic_id => $topic_id) + if ($auth->acl_get('m_approve', $row['forum_id'])) { - add_log('mod', $to_forum_id, $new_topic_id, 'logm_fork', $forum_data[$topic_data[$topic_id]['forum_id']]['forum_name']); + $row['forum_topics'] = $row['forum_topics_real']; } - $msg = (count($topic_id_list) == 1) ? $user->lang['TOPIC_FORKED_SUCCESS'] : $user->lang['TOPICS_FORKED_SUCCESS']; - trigger_error($msg . $return_forum . $return_mcp); + $rowset[$row['forum_id']] = $row; } - page_footer(); - break; - - case 'move': - $return_forum = '<br /><br />' . sprintf($user->lang['RETURN_NEW_FORUM'], '<a href="viewforum.' . $phpEx . $SID . '&f=' . $to_forum_id . '">', '</a>'); - $return_mcp = '<br /><br />' . sprintf($user->lang['RETURN_MCP'], '<a href="' . $mcp_url . '&mode=forum_view&start=' . $start . '">', '</a>'); - - if (!count($topic_id_list)) + if (!$return_on_error && empty($rowset)) { - trigger_error($user->lang['NO_TOPIC_SELECTED'] . $return_mcp); - } - if ($to_forum_id < 1 || $to_forum_id == $forum_id) - { - $confirm = FALSE; - } - foreach ($topic_data as $row) - { - if ($row['forum_id'] == 0) - { - trigger_error($user->lang['CANNOT_MOVE_GLOBALS'] . $return_forum . $return_mcp); - } + $this->message_die('FORUM_NOT_EXIST'); } - if (!$confirm) + if (is_array($forum_id)) { - $s_hidden_fields = ''; - foreach ($topic_id_list as $topic_id) - { - $s_hidden_fields .= '<input type="hidden" name="topic_id_list[]" value="' . $topic_id . '">'; - } - - $template->assign_vars(array( - 'S_MCP_ACTION' => "mcp.$phpEx$SID&mode=move&start=$start", - 'S_HIDDEN_FIELDS' => $s_hidden_fields, - 'S_FORUM_SELECT' => make_forum_select(), - 'S_LEAVE_SHADOW' => TRUE, - - 'L_MODE_TITLE' => $user->lang['MOVE'], - 'L_MODE_EXPLAIN' => '' - )); - - mcp_header('mcp_move.html'); + return $rowset; } else { - if ($forum_data[$to_forum_id]['forum_type'] == FORUM_CAT) - { - trigger_error($user->lang['FORUM_NOT_POSTABLE'] . $return_mcp); - } - - move_topics($topic_id_list, $to_forum_id); - - if (!empty($_POST['move_leave_shadow'])) - { - $shadow = $topic_info; - $shadow['topic_status'] = ITEM_MOVED; - $shadow['topic_moved_id'] = $topic_info['topic_id']; - unset($shadow['topic_id']); - - $db->sql_query('INSERT INTO ' . TOPICS_TABLE . ' ' . $db->sql_build_array('INSERT', $shadow)); - } - - $msg = (count($topic_id_list) == 1) ? $user->lang['TOPIC_MOVED_SUCCESS'] : $user->lang['TOPICS_MOVED_SUCCESS']; - - $forum_ids = array($to_forum_id); - foreach ($topic_data as $topic_id => $row) - { - $forum_ids[] = $row['forum_id']; - add_log('mod', $to_forum_id, $topic_id, 'logm_move', $forum_data[$row['forum_id']]['forum_name']); - } - - // Sync forums - sync('forum', 'forum_id', $forum_ids); - - trigger_error($msg . $return_forum . $return_mcp); + return array_pop($rowset); } + } - page_footer(); - break; - - case 'make_global': - case 'make_announce': - case 'make_sticky': - case 'make_normal': - unset($new_forum_id); - - switch ($mode) - { - case 'make_global': - $set_sql = 'topic_type = ' . POST_GLOBAL; - break; - - case 'make_announce': - $set_sql = 'topic_type = ' . POST_ANNOUNCE; - break; - - case 'make_sticky': - $set_sql = 'topic_type = ' . POST_STICKY; - break; + function get_topic_data($topic_id, $acl_list = '', $return_on_error = FALSE) + { + global $auth, $db; + $rowset = array(); - case 'make_normal': - $set_sql = 'topic_type = ' . POST_NORMAL; - break; - } - if ($topic_info['forum_id'] == 0 && $mode != 'make_global') + // TODO: Known Bug: will fail on global announcements because of forum_id = 0 + $sql = 'SELECT t.*, f.* + FROM ' . TOPICS_TABLE . ' t, ' . FORUMS_TABLE . ' f + WHERE t.topic_id ' . ((is_array($topic_id)) ? 'IN (' . implode(', ', $topic_id) . ')' : "= $topic_id") . ' + AND t.forum_id = f.forum_id'; + $result = $db->sql_query($sql); + + while ($row = $db->sql_fetchrow($result)) { - if (!$to_forum_id) + if ($acl_list && !$auth->acl_get($acl_list, $row['forum_id'])) { - $template->assign_vars(array( - 'L_MODE_TITLE' => $user->lang['MOVE'], - 'L_MODE_EXPLAIN' => $user->lang['UNGLOBALISE_EXPLAIN'], - - 'S_MCP_ACTION' => "mcp.$phpEx$SID&mode=$mode&t=$topic_id", - 'S_FORUM_SELECT' => make_forum_select(), - 'S_HIDDEN_FIELDS' => '' - )); - - mcp_header('mcp_move.html'); - page_footer(); + continue; } - else + if ($auth->acl_get('m_approve', $row['forum_id'])) { - $new_forum_id = $to_forum_id; + $row['topic_replies'] = $row['topic_replies_real']; + $row['forum_topics'] = $row['forum_topics_real']; } - } - elseif ($topic_info['forum_id'] > 0 && $mode == 'make_global') - { - $new_forum_id = 0; - } - - $sql = 'UPDATE ' . TOPICS_TABLE . " - SET $set_sql" . ((isset($new_forum_id)) ? ", forum_id = $new_forum_id" : '') . " - WHERE topic_id = $topic_id"; - $db->sql_query($sql); - if (isset($new_forum_id)) - { - $sql = 'UPDATE ' . POSTS_TABLE . " - SET forum_id = $new_forum_id - WHERE topic_id = $topic_id"; - $db->sql_query($sql); - - if ($new_forum_id > 0) - { - sync('forum', 'forum_id', $new_forum_id, TRUE); - } + $rowset[$row['topic_id']] = $row; } - add_log('mod', $forum_id, $topic_id, 'logm_' . $mode); - - meta_refresh(3, "viewtopic.$phpEx$SID&f=$forum_id&t=$topic_id&start=$start"); - - $message = $user->lang['TOPIC_TYPE_CHANGED'] . '<br /><br />' . sprintf($user->lang['RETURN_TOPIC'], "<a href=\"viewtopic.$phpEx$SID&f=$forum_id&t=$topic_id&start=$start\">", '</a>') . '<br /><br />' . sprintf($user->lang['RETURN_FORUM'], "<a href=\"viewforum.$phpEx$SID&f=$forum_id\">", '</a>'); - trigger_error($message); - break; - - case 'disapprove': - // NOTE: what happens if the user disapproves the first post of the topic? Answer: the topic is deleted - $redirect_page = "mcp.$phpEx$SID&f=$forum_id"; - $l_redirect = sprintf($user->lang['RETURN_MCP'], "<a href=\"mcp.$phpEx$SID&f=$forum_id\">", '</a>'); - - if (!count($post_id_list)) + if (!$return_on_error && empty($rowset)) { - trigger_error($user->lang['NO_POST_SELECTED'] . '<br /><br />' . $l_redirect); + $this->message_die('TOPIC_NOT_EXIST'); } - if ($confirm) + if (is_array($topic_id)) { - $topic_ids = $post_ids = array(); - foreach ($post_id_list as $p_id) - { - if ($topic_data[$post_data[$p_id]['topic_id']]['topic_first_post_id'] == $p_id) - { - $topic_ids[] = $post_data[$p_id]['topic_id']; - } - else - { - $post_ids[] = $p_id; - } - } - - foreach ($post_id_list as $p_id) - { - if (!in_array($topic_ids, $post_data[$p_id]['topic_id'])) - { - $post_ids[] = $p_id; - } - } - - if (count($topic_ids)) - { - delete_topics('topic_id', $topic_ids); - } - - if (count($post_ids)) - { - delete_posts('post_id', $post_ids); - } - - // TODO: warn the user when post is disapproved - - meta_refresh(3, $redirect_page); - - $msg = (count($post_id_list) == 1) ? $user->lang['POST_REMOVED'] : $user->lang['POSTS_REMOVED']; - trigger_error($msg . '<br /><br />' . $l_redirect); + return $rowset; } - - // Not confirmed, show confirmation message - $hidden_fields = '<input type="hidden" name="mode" value="disapprove" />'; - foreach ($post_id_list as $p_id) + else { - $hidden_fields .= '<input type="hidden" name="post_id_list[]" value="' . $p_id . '" />'; + return array_pop($rowset); } + } - // Set template files - mcp_header('confirm_body.html'); + function mcp_init() + { + global $db; - $template->assign_vars(array( - 'MESSAGE_TITLE' => $user->lang['CONFIRM'], - 'MESSAGE_TEXT' => (count($post_id_list) == 1) ? $user->lang['CONFIRM_DELETE_POST'] : $user->lang['CONFIRM_DELETE_POSTS'], + // Obtain initial var settings + $this->forum_id = (isset($_REQUEST['f'])) ? max(0, intval($_REQUEST['f'])) : 0; + $this->topic_id = (!empty($_REQUEST['t'])) ? intval($_REQUEST['t']) : 0; + $this->post_id = (!empty($_REQUEST['p'])) ? intval($_REQUEST['p']) : 0; - 'S_CONFIRM_ACTION' => "mcp.$phpEx$SID&mode=disapprove", - 'S_HIDDEN_FIELDS' => $hidden_fields) - ); + $this->topic_id_list = ($this->topic_id) ? array($this->topic_id) : array(); + $this->post_id_list = ($this->post_id) ? array($this->post_id) : array(); - page_footer(); - break; + $this->to_forum_id = (!empty($_REQUEST['to_forum_id'])) ? intval($_REQUEST['to_forum_id']) : 0; + $this->to_topic_id = (!empty($_REQUEST['to_topic_id'])) ? intval($_REQUEST['to_topic_id']) : 0; - case 'approve': - case 'unapprove': - $user_posts = $resync_count = array(); - $value = ($mode == 'approve') ? 1 : 0; + $this->confirm = (!empty($_POST['confirm'])) ? TRUE : FALSE; + $this->action = (!empty($_REQUEST['action'])) ? $_REQUEST['action'] : ''; + $this->quickmod = (!empty($_REQUEST['quickmod'])) ? TRUE : FALSE; - if (count($post_id_list)) + // Put the forum_id and al in the url + if ($this->post_id) { - $sql = 'UPDATE ' . POSTS_TABLE . " - SET post_approved = $value - WHERE post_id IN (" . implode(', ', $post_id_list) . ')'; - $db->sql_query($sql); - - if (count($post_id_list) == 1) - { - $lang_str = ($mode == 'approve') ? 'POST_APPROVED' : 'POST_UNAPPROVED'; - } - else - { - $lang_str = ($mode == 'approve') ? 'POSTS_APPROVED' : 'POSTS_UNAPPROVED'; - } - - $redirect_page = "viewtopic.$phpEx$SID&f=$forum_id&t=$topic_id&start=$start"; - $l_redirect = sprintf($user->lang['RETURN_TOPIC'], '<a href="' . $redirect_page. '">', '</a>'); + $this->url .= '&p=' . $this->post_id; - foreach ($post_id_list as $post_id) + if (!$this->forum_id || !$this->topic_id) { - if ($post_id == $post_data[$post_id]['topic_first_post_id']) - { - $logm_mode = ($mode == 'approve') ? 'logm_approve_topic' : 'logm_unapprove_topic'; - } - else - { - $logm_mode = ($mode == 'approve') ? 'logm_approve_post' : 'logm_unapprove_post'; - } - - add_log('mod', $forum_id, $post_data[$post_id]['topic_id'], $logm_mode, $post_id); + $sql = 'SELECT forum_id, topic_id + FROM ' . POSTS_TABLE . ' + WHERE post_id = ' . $this->post_id; + $result = $db->sql_query($sql); - //NOTE: hey, who removed the enable_post_count field?! lol ^ ^ - $forum_data[$post_data[$post_id]['forum_id']]['enable_post_count'] = 1; - if ($forum_data[$post_data[$post_id]['forum_id']]['enable_post_count']) + if ($row = $db->sql_fetchrow($result)) { - if (isset($user_posts[$post_data[$post_id]['poster_id']])) + if (!$this->forum_id) { - ++$user_posts[$post_data[$post_id]['poster_id']]; + $this->forum_id = intval($row['forum_id']); } - else + if (!$this->topic_id) { - $user_posts[$post_data[$post_id]['poster_id']] = 1; + $this->topic_id = intval($row['topic_id']); } } } } - elseif (count($topic_id_list)) - { - // TODO: 20030325 - I'm not sure we will ever use this mode, users won't approve whole topics at once, will they? - - $sql = 'UPDATE ' . TOPICS_TABLE . " - SET topic_approved = $value - WHERE topic_id IN (" . implode(', ', $topic_id_list) . ')'; - $db->sql_query($sql); - - if (count($topic_id_list) == 1) - { - $lang_str = ($mode == 'approve') ? 'TOPIC_APPROVED' : 'TOPIC_UNAPPROVED'; - } - else - { - $lang_str = ($mode == 'approve') ? 'TOPICS_APPROVED' : 'TOPICS_UNAPPROVED'; - } - - $redirect_page = "viewforum.$phpEx$SID&f=$forum_id&start=$start"; - $l_redirect = sprintf($user->lang['RETURN_FORUM'], '<a href="' . $redirect_page. '">', '</a>'); - - $logm_mode = ($mode == 'approve') ? 'logm_approve_topic' : 'logm_unapprove_topic'; - - foreach ($topic_id_list as $topic_id) - { - add_log('mod', $forum_id, $topic_id, $logm_mode); - } - } - else + if ($this->topic_id) { - trigger_error($user->lang['NO_POST_SELECTED']); - } - - // Resync last post infos, replies count et caetera - sync('topic', 'topic_id', $topic_id_list); - sync('topic_attachment', 'topic_id', $topic_id_list); + $this->url .= '&t=' . $this->topic_id; - foreach ($user_posts as $user_id => $post_count) - { - if (isset($resync_count[$post_count])) + if (!$this->forum_id) { - $resync_count[$post_count][] = $user_id; - } - else - { - $resync_count[$post_count] = array($user_id); + $sql = 'SELECT forum_id + FROM ' . TOPICS_TABLE . ' + WHERE topic_id = ' . $this->topic_id; + $result = $db->sql_query($sql); + $this->forum_id = intval($db->sql_fetchfield('forum_id', 0, $result)); } } - - foreach ($resync_count as $post_count => $user_list) + if ($this->forum_id) { - $sql = 'UPDATE ' . USERS_TABLE . " - SET user_posts = user_posts + $post_count - WHERE user_id IN (" . implode(', ', $user_list) . ')'; - $db->sql_query($sql); + $this->url .= '&f=' . $this->forum_id; } - meta_refresh(3, $redirect_page); - - $return_mcp = '<br /><br />' . sprintf($user->lang['RETURN_MCP'], '<a href="mcp.' . $phpEx . $SID . '&mode=mod_queue">', '</a>'); - trigger_error($user->lang[$lang_str] . '<br /><br />' . $l_redirect . $return_mcp); - break; - - case 'mod_queue': - $forum_nav = ($forum_id) ? TRUE : FALSE; - mcp_header('mcp_queue.html', 'm_approve', $forum_nav); - mcp_sorting('unapproved', &$sort_days, &$sort_key, &$sort_dir, &$sort_by_sql, &$sort_order_sql, &$total, $forum_id); - - $sql = 'SELECT p.post_id, p.post_subject, p.post_time, p.poster_id, p.post_username, u.username, t.topic_id, t.topic_title, t.topic_first_post_id, f.forum_id, f.forum_name - FROM ' . POSTS_TABLE . ' p, ' . TOPICS_TABLE . ' t, ' . FORUMS_TABLE . ' f, ' . USERS_TABLE . ' u - WHERE p.forum_id = f.forum_id - AND p.topic_id = t.topic_id - AND p.poster_id = u.user_id - AND p.post_approved = 0 - ' . (($forum_id > 0) ? " AND p.forum_id = $forum_id" : '') . ' - ORDER BY ' . $sort_order_sql; - - $result = $db->sql_query_limit($sql, $config['topics_per_page'], $start); - - $rowset = array( - 'topic' => array(), - 'post' => array() - ); - while ($row = $db->sql_fetchrow($result)) + // Cleanse inputted values + if (!empty($_POST['topic_id_list']) && is_array($_POST['topic_id_list'])) { - if ($row['post_id'] == $row['topic_first_post_id']) + foreach ($_POST['topic_id_list'] as $t_id) { - $rowset['topic'][] = $row; - } - else - { - $rowset['post'][] = $row; + if ($t_id = intval($t_id)) + { + $this->topic_id_list[] = $t_id; + } } } - - if ($total == -1) - { - $sql = 'SELECT COUNT(post_id) AS total_posts - FROM ' . POSTS_TABLE . ' - WHERE post_approved = 0 - ' . (($forum_id > 0) ? " AND forum_id = $forum_id" : ''); - $result = $db->sql_query($sql); - $row = $db->sql_fetchrow($result); - - $total = $row['total_posts']; - } - - $template->assign_vars(array( - 'S_MCP_ACTION' => $mcp_url . '&mode=mod_queue', - 'S_HAS_UNAPPROVED_POSTS' => count($rowset['post']), - 'S_HAS_UNAPPROVED_TOPICS' => count($rowset['topic']), - - 'PAGE_NUMBER' => on_page($total, $config['topics_per_page'], $start), - 'PAGINATION' => generate_pagination("mcp.$phpEx$SID&f=$forum_id&mode=mod_queue&st=$sort_days&sk=$sort_key&sd=$sort_dir", $row['total_posts'], $config['topics_per_page'], $start) - )); - - foreach ($rowset as $type => $rows) + if (!empty($_POST['post_id_list']) && is_array($_POST['post_id_list'])) { - $block_name = 'unapproved_' . $type . 's'; - - foreach ($rows as $row) + foreach ($_POST['post_id_list'] as $p_id) { - if ($row['poster_id'] == ANONYMOUS) + if ($p_id = intval($p_id)) { - $author = ($row['post_username']) ? $row['post_username'] : $user->lang['GUEST']; + $this->post_id_list[] = $p_id; } - else - { - $author = '<a href="memberlist.' . $phpEx . $SID . '&mode=viewprofile&u=' . $row['poster_id'] . '">' . $row['username'] . '</a>'; - } - - $template->assign_block_vars($block_name, array( - 'U_POST_DETAILS' => $mcp_url . '&mode=post_details', - 'FORUM' => '<a href="viewforum.' . $phpEx . $SID . '&f=' . $row['forum_id'] . '">' . $row['forum_name'] . '</a>', - 'TOPIC' => '<a href="viewtopic.' . $phpEx . $SID . '&f=' . $row['forum_id'] . '&t=' . $row['topic_id'] . '">' . $row['topic_title'] . '</a>', - 'AUTHOR' => $author, - 'SUBJECT' => '<a href="mcp.' . $phpEx . $SID . '&p=' . $row['post_id'] . '&mode=post_details">' . (($row['post_subject']) ? $row['post_subject'] : $user->lang['NO_SUBJECT']) . '</a>', - 'POST_TIME' => $user->format_date($row['post_time']), - 'S_CHECKBOX' => '<input type="checkbox" name="post_id_list[]" value="' . $row['post_id'] . '">' - )); } } - unset($rowset); - - page_footer(); - break; - - case 'resync': - $redirect_page = "mcp.$phpEx$SID&f=$forum_id"; - $l_redirect = sprintf($user->lang['RETURN_MCP'], '<a href="mcp.' . $phpEx . $SID . '&f=' . $forum_id . '">', '</a>'); - - if (!count($topic_id_list)) - { - trigger_error($user->lang['NO_TOPIC_SELECTED'] . '<br /><br />' . $l_redirect); - } - - sync('topic', 'topic_id', $topic_id_list); - sync('reported', 'topic_id', $topic_id_list); - sync('topic_attachment', 'topic_id', $topic_id_list); - - meta_refresh(3, $redirect_page); - - $msg = (count($topic_id_list) == 1) ? $user->lang['TOPIC_RESYNCHRONISED'] : $user->lang['TOPICS_RESYNCHRONISED']; - trigger_error($msg . '<br /><br />' . $l_redirect); - break; - - case 'delete_moved': - if ($topic_id) - { - $sql = 'DELETE FROM ' . TOPICS_TABLE . ' - WHERE topic_moved_id = ' . $topic_d; - } - elseif ($forum_id) - { - $sql = 'DELETE FROM ' . TOPICS_TABLE . ' - WHERE topic_moved_id > 0 - AND forum_id = ' . $forum_id; - } - - $db->sql_query($sql); - - $return = ($quickmod) ? sprintf($user->lang['RETURN_TOPIC'], '<a href="viewtopic.' . $phpEx . $SID . '&t=' . $topic_id . '">', '</a>') : sprintf($user->lang['RETURN_MCP'], '<a href="' . $mcp_url . '">', '</a>'); - trigger_error($user->lang['SHADOWS_REMOVED'] . '<br /><br />' . $return); - break; - - case 'delete_post': - // NOTE: what happens if the user deletes the first post of the topic? The topic is resync'ed normally and topic time/topic author are updated by the new first post - $redirect_page = "mcp.$phpEx$SID&f=$forum_id"; - $l_redirect = sprintf($user->lang['RETURN_MCP'], '<a href="mcp.' . $phpEx . $SID . '&f=' . $forum_id . '">', '</a>'); - - if (!count($post_id_list)) - { - trigger_error($user->lang['NO_POST_SELECTED'] . '<br /><br />' . $l_redirect); - } - - if ($confirm) - { - delete_posts('post_id', $post_id_list); - - $log_mode = (count($post_id_list) == 1) ? 'logm_delete_post' : 'logm_delete_posts'; - add_log('mod', $topic_data[$topic_id]['forum_id'], $topic_id, $log_mode, implode(', ', $post_id_list)); - - meta_refresh(3, $redirect_page); - - $msg = (count($post_id_list) == 1) ? $user->lang['POST_REMOVED'] : $user->lang['POSTS_REMOVED']; - trigger_error($msg . '<br /><br />' . $l_redirect); - } - // Not confirmed, show confirmation message - $hidden_fields = '<input type="hidden" name="mode" value="delete_post" />'; - foreach ($post_id_list as $p_id) + // Build short_id_list + if (!empty($_GET['selected_ids'])) { - $hidden_fields .= '<input type="hidden" name="post_id_list[]" value="' . $p_id . '" />'; - } - - // Set template files - mcp_header('confirm_body.html'); - - $template->assign_vars(array( - 'MESSAGE_TITLE' => $user->lang['CONFIRM'], - 'MESSAGE_TEXT' => (count($post_id_list) == 1) ? $user->lang['CONFIRM_DELETE'] : $user->lang['CONFIRM_DELETE_POSTS'], - - 'S_CONFIRM_ACTION' => "mcp.$phpEx$SID&mode=delete_post", - 'S_HIDDEN_FIELDS' => $hidden_fields - )); - - page_footer(); - break; - - case 'delete_topic': - if ($quickmod) - { - $redirect_page = "viewforum.$phpEx$SID&f=$forum_id&start=$start"; - $l_redirect = sprintf($user->lang['RETURN_FORUM'], '<a href="' . $redirect_page. '">', '</a>'); - } - else - { - $redirect_page = "mcp.$phpEx$SID&f=$forum_id&start=$start"; - $l_redirect = sprintf($user->lang['RETURN_MCP'], '<a href="' . $redirect_page. '">', '</a>'); - } - - if (!count($topic_id_list)) - { - trigger_error($user->lang['NO_TOPIC_SELECTED'] . '<br /><br />' . $l_redirect); - } - - if ($confirm) - { - delete_topics('topic_id', $topic_id_list); - - foreach ($topic_id_list as $topic_id) + $len = $_GET['selected_ids']{0}; + for ($i = 1; $i < strlen($_GET['selected_ids']); $i += $len) { - add_log('mod', $topic_data[$topic_id]['forum_id'], $topic_id, 'logm_delete_topic', $topic_data[$topic_id]['topic_title']); + $short = substr($_GET['selected_ids'], $i, $len); + $this->post_id_list[] = base_convert($short, 36, 10); } - - meta_refresh(3, $redirect_page); - trigger_error($user->lang['TOPICS_REMOVED'] . '<br /><br />' . $l_redirect); - } - - // Not confirmed, show confirmation message - $hidden_fields = '<input type="hidden" name="mode" value="delete_topic" />'; - foreach ($topic_id_list as $t_id) - { - $hidden_fields .= '<input type="hidden" name="topic_id_list[]" value="' . $t_id . '" />'; - } - - // Set template files - mcp_header('confirm_body.html'); - - $template->assign_vars(array( - 'MESSAGE_TITLE' => $user->lang['CONFIRM'], - 'MESSAGE_TEXT' => (count($topic_id_list) == 1) ? $user->lang['CONFIRM_DELETE_TOPIC'] : $user->lang['CONFIRM_DELETE_TOPICS'], - - 'S_CONFIRM_ACTION' => "mcp.$phpEx$SID&mode=delete_topic" . (($quickmod) ? '&quickmod=1' : ''), - 'S_HIDDEN_FIELDS' => $hidden_fields - )); - - page_footer(); - break; - - case 'merge': - case 'split': - case 'delete': - case 'topic_view': - mcp_header('mcp_topic.html', array('m_merge', 'm_split', 'm_delete', 'm_approve'), TRUE); - - mcp_sorting('viewtopic', &$sort_days, &$sort_key, &$sort_dir, &$sort_by_sql, &$sort_order_sql, &$total, $forum_id, $topic_id); - if ($total == -1) - { - $total = ($auth->acl_get('m_approve')) ? $topic_info['topic_replies_real'] + 1 : $topic_info['topic_replies'] + 1; } + $this->selected_ids = (!empty($this->post_id_list)) ? '&selected_ids=' . $this->short_id_list($this->post_id_list) : ''; + } - $posts_per_page = (isset($_REQUEST['posts_per_page'])) ? intval($_REQUEST['posts_per_page']) : $config['posts_per_page']; + function mcp_jumpbox($action, $acl_list = 'f_list', $forum_id = false, $enable_select_all = false) + { + global $auth, $template, $user, $db, $phpEx, $SID; - $sql = 'SELECT u.username, p.* - FROM ' . POSTS_TABLE . ' p, ' . USERS_TABLE . " u - WHERE p.topic_id = $topic_id - AND p.poster_id = u.user_id - ORDER BY $sort_order_sql"; - $result = $db->sql_query_limit($sql, $posts_per_page, $start); + $sql = 'SELECT forum_id, forum_name, forum_type, left_id, right_id + FROM ' . FORUMS_TABLE . ' + ORDER BY left_id ASC'; + $result = $db->sql_query($sql, 120); - $rowset = array(); + $right = $cat_right = 0; + $padding = $forum_list = $holding = ''; while ($row = $db->sql_fetchrow($result)) { - $rowset[] = $row; - $bbcode_bitfield |= $row['bbcode_bitfield']; - } - - if ($bbcode_bitfield) - { - include($phpbb_root_path . 'includes/bbcode.' . $phpEx); - $bbcode = new bbcode($bbcode_bitfield); - } - - foreach ($rowset as $i => $row) - { - $has_unapproved_posts = FALSE; - $poster = (!empty($row['username'])) ? $row['username'] : ((!$row['post_username']) ? $user->lang['GUEST'] : $row['post_username']); - - $message = $row['post_text']; - $post_subject = ($row['post_subject'] != '') ? $row['post_subject'] : $topic_data['topic_title']; - - // If the board has HTML off but the post has HTML - // on then we process it, else leave it alone - if (!$config['allow_html'] && $row['enable_html']) + if ($row['forum_type'] == FORUM_CAT && ($row['left_id'] + 1 == $row['right_id'])) { - $message = preg_replace('#(<)([\/]?.*?)(>)#is', '<\\2>', $message); + // Non-postable forum with no subforums, don't display + continue; } - if ($row['bbcode_bitfield']) + if (!$auth->acl_get('f_list', $row['forum_id'])) { - $bbcode->bbcode_second_pass($message, $row['bbcode_uid'], $row['bbcode_bitfield']); + // if the user does not have permissions to list this forum skip + continue; } - $message = (empty($config['allow_smilies']) || !$user->data['user_viewsmilies']) ? preg_replace('#<!\-\- s(.*?) \-\-><img src="\{SMILE_PATH\}\/.*? \/><!\-\- s\1 \-\->#', '\1', $message) : str_replace('<img src="{SMILE_PATH}', '<img src="' . $config['smilies_path'], $message); - - $message = nl2br($message); - - $checked = (in_array(intval($row['post_id']), $selected_post_ids)) ? 'checked="checked" ' : ''; - $s_checkbox = ($row['post_id'] == $topic_info['topic_first_post_id'] && $mode == 'split') ? ' ' : '<input type="checkbox" name="post_id_list[]" value="' . $row['post_id'] . '" ' . $checked . '/>'; - - if (!$row['post_approved']) + if ($row['left_id'] < $right) { - $has_unapproved_posts = TRUE; + $padding .= ' '; } - - $template->assign_block_vars('postrow', array( - 'POSTER_NAME' => $poster, - 'POST_DATE' => $user->format_date($row['post_time']), - 'POST_SUBJECT' => $post_subject, - 'MESSAGE' => $message, - 'POST_ID' => $row['post_id'], - - 'S_CHECKBOX' => $s_checkbox, - 'S_DISPLAY_MODES' => ($i % 10 == 0) ? TRUE : FALSE, - 'S_ROW_COUNT' => $i, - 'S_POST_UNAPPROVED' => ($row['post_approved']) ? FALSE : TRUE, - - 'U_POST_DETAILS' => $mcp_url . '&p=' . $row['post_id'] . '&mode=post_details', - 'U_APPROVE' => "mcp.$phpEx$SID&mode=approve&p=" . $row['post_id'] - )); - - unset($rowset[$i]); - } - - if ($mode == 'topic_view' || $mode == 'split') - { - $icons = array(); - obtain_icons($icons); - - if (sizeof($icons)) + else if ($row['left_id'] > $right + 1) { - $s_topic_icons = true; - - foreach ($icons as $id => $data) - { - if ($data['display']) - { - $template->assign_block_vars('topic_icon', array( - 'ICON_ID' => $id, - 'ICON_IMG' => $config['icons_path'] . '/' . $data['img'], - 'ICON_WIDTH' => $data['width'], - 'ICON_HEIGHT' => $data['height'] - )); - } - } + $padding = substr($padding, 0, -13 * ($row['left_id'] - $right + 1)); } - } - - $template->assign_vars(array( - 'TOPIC_TITLE' => $topic_info['topic_title'], - 'U_VIEW_TOPIC' => "viewtopic.$phpEx$SID&f=$forum_id&t=$topic_id", - - 'TO_TOPIC_ID' => ($to_topic_id) ? $to_topic_id : '', - 'TO_TOPIC_INFO' => ($to_topic_id) ? sprintf($user->lang['TOPIC_NUMBER_IS'], $to_topic_id, '<a href="viewtopic.' . $phpEx . $SID . '&f=' . $forum_id . '&t=' . $to_topic_id . '" target="_new">' . $topic_data[$to_topic_id]['topic_title'] . '</a>') : '', - - 'SPLIT_SUBJECT' => $subject, - 'POSTS_PER_PAGE' => $posts_per_page, - 'UNAPPROVED_IMG' => $user->img('icon_unapproved', 'POST_NOT_BEEN_APPROVED', FALSE, TRUE), + $right = $row['right_id']; - 'S_FORM_ACTION' => "mcp.$phpEx$SID&mode=$mode&t=$topic_id&start=$start", - 'S_FORUM_SELECT' => '<select name="to_forum_id">' . make_forum_select($to_forum_id) . '</select>', - 'S_CAN_SPLIT' => ($auth->acl_get('m_split', $forum_id) &&($mode == 'topic_view' || $mode == 'split')) ? TRUE : FALSE, - 'S_CAN_MERGE' => ($auth->acl_get('m_merge', $forum_id) &&($mode == 'topic_view' || $mode == 'merge')) ? TRUE : FALSE, - 'S_CAN_DELETE' => ($auth->acl_get('m_delete', $forum_id) &&($mode == 'topic_view' || $mode == 'delete')) ? TRUE : FALSE, - 'S_CAN_APPROVE' => ($has_unapproved_posts && $auth->acl_get('m_approve', $forum_id) && $mode == 'topic_view') ? TRUE : FALSE, - 'S_SHOW_TOPIC_ICONS'=> (!empty($s_topic_icons)) ? TRUE : FALSE, - - 'PAGE_NUMBER' => on_page($total, $posts_per_page, $start), - 'PAGINATION' => (!$posts_per_page) ? '' : generate_pagination("mcp.$phpEx$SID&t=$topic_id&mode=$mode&posts_per_page=$posts_per_page&st=$sort_days&sk=$sort_key&sd=$sort_dir", $total, $posts_per_page, $start) - )); - - page_footer(); - break; - - case 'delete_report': - case 'change_poster': - case 'change_poster_search': - case 'post_details': - if ($mode == 'change_poster') - { - $sql = 'UPDATE ' . POSTS_TABLE . ' - SET poster_id = ' . intval($_POST['user_id']) . " - WHERE post_id = $post_id"; - $db->sql_query($sql); + $selected = ($row['forum_id'] == $forum_id) ? ' selected="selected"' : ''; - sync('topic', 'topic_id', $topic_id); - sync('forum', 'forum_id', $forum_id); - } - elseif ($mode == 'delete_report') - { - $sql = 'SELECT u.user_id, u.user_lang, p.post_subject - FROM ' . REPORTS_TABLE . ' r, ' . USERS_TABLE . ' u, ' . POSTS_TABLE . " p - WHERE r.post_id = $post_id - AND r. user_notify = 1 - AND u.user_id = r.user_id"; - $result = $db->sql_query($sql); - - while ($row = $db->sql_fetchrow($result)) + if ($row['right_id'] - $row['left_id'] > 1) { - // TODO: Warn users + $cat_right = max($cat_right, $row['right_id']); + $char = '+ '; } - - $sql = 'DELETE FROM ' . REPORTS_TABLE . ' - WHERE post_id = ' . $post_id; - $db->sql_query($sql); - - $sql = 'UPDATE ' . POSTS_TABLE . ' - SET post_reported = 0 - WHERE post_id = ' . $post_id; - $db->sql_query($sql); - - sync('reported', 'topic_id', $topic_id); - } - - - mcp_header('mcp_post.html', 'm_', TRUE); - $rdns_ip_num = (!empty($_GET['rdns'])) ? $_GET['rdns'] : ''; - - $sql = 'SELECT u.username, p.* - FROM ' . POSTS_TABLE . ' p, ' . USERS_TABLE . " u - WHERE p.post_id = $post_id - AND p.poster_id = u.user_id"; - $result = $db->sql_query($sql); - - if (!$post_info = $db->sql_fetchrow($result)) - { - trigger_error($user->lang['POST_NOT_EXIST']); - } - - if (!empty($_POST['lock_post']) ^ $post_info['post_edit_locked']) - { - $post_info['post_edit_locked'] = (!empty($_POST['lock_post'])) ? '1' : '0'; - - $sql = 'UPDATE ' . POSTS_TABLE . ' - SET post_edit_locked = ' . $post_info['post_edit_locked'] . ' - WHERE post_id = ' . $post_id; - $db->sql_query($sql); - } - - $poster = ($post_info['poster_id'] != ANONYMOUS) ? $post_info['username'] : ((!$post_info['post_username']) ? $user->lang['GUEST'] : $post_info['post_username']); - - $message = $post_info['post_text']; - $post_subject = ($post_info['post_subject'] != '') ? $post_info['post_subject'] : $topic_data['topic_title']; - - // If the board has HTML off but the post has HTML - // on then we process it, else leave it alone - if (!$config['allow_html'] && $post_info['enable_html']) - { - $message = preg_replace('#(<)([\/]?.*?)(>)#is', '<\\2>', $message); - } - - if ($post_info['bbcode_bitfield']) - { - include($phpbb_root_path . 'includes/bbcode.' . $phpEx); - $bbcode = new bbcode(); - $bbcode->bbcode_second_pass($message, $post_info['bbcode_uid'], $post_info['bbcode_bitfield']); - } - - $message = (empty($config['allow_smilies']) || !$user->data['user_viewsmilies']) ? preg_replace('#<!\-\- s(.*?) \-\-><img src="\{SMILE_PATH\}\/.*? \/><!\-\- s\1 \-\->#', '\1', $message) : str_replace('<img src="{SMILE_PATH}', '<img src="' . $config['smilies_path'], $message); - - $message = str_replace("\n", '<br />' , $message); - - $template->assign_vars(array( - 'FORUM_NAME' => $forum_info['forum_name'], - 'U_VIEW_FORUM' => "viewforum.$phpEx$SID&f=$forum_id", - - 'TOPIC_TITLE' => $topic_info['topic_title'], - 'U_VIEW_TOPIC' => "viewtopic.$phpEx$SID&f=$forum_id&t=$topic_id", - - 'S_MCP_ACTION' => "mcp.$phpEx$SID?mode=post_details&p=$post_id", - 'S_CAN_VIEWIP' => $auth->acl_get('m_viewip', $forum_id), - 'S_CAN_CHANGE_POSTER' => $auth->acl_get('m_chgposter', $forum_id), - 'S_CAN_LOCK_POST' => $auth->acl_get('m_edit', $forum_id), - 'S_CAN_DELETE' => $auth->acl_get('m_delete', $forum_id), - - 'S_LOCK_POST_CHECKED' => ($post_info['post_edit_locked']) ? 'checked="checked"' : '', - - 'USER_SELECT' => $user_select, - - 'POSTER_NAME' => $poster, - 'POST_DATE' => $user->format_date($post_info['post_time']), - 'POST_IP' => $post_info['poster_ip'] . ' (' . @gethostbyaddr($post_info['poster_ip']) . ')', - 'POST_SUBJECT' => $post_subject, - 'MESSAGE' => $message, - - 'U_LOOKUP_ALL' => ($rdns_ip_num == 'all') ? '' : $mcp_url . '&mode=post_details&rdns=all#ip', - - 'SEARCH_IMG' => $user->img('btn_search', 'SEARCH_USER_POSTS') - )); - - - // Get other users who've posted under this IP - $sql = "SELECT u.user_id, u.username, COUNT(*) as postings - FROM " . USERS_TABLE ." u, " . POSTS_TABLE . " p - WHERE p.poster_id = u.user_id - AND p.poster_ip = '" . $post_info['poster_ip'] . "' - GROUP BY u.user_id, u.username - ORDER BY postings DESC"; - $result = $db->sql_query($sql); - - $i = 0; - $users_ary = array(); - while ($row = $db->sql_fetchrow($result)) - { - if ($row['user_id'] != $post_info['poster_id']) + else { - $users_ary[strtolower($row['username'])] = $row; + $char = '- '; } - $template->assign_block_vars('userrow', array( - 'S_ROW_COUNT' => $i++, - - 'USERNAME' => ($row['user_id'] == ANONYMOUS) ? $user->lang['GUEST'] : $row['username'], - 'POSTS' => $row['postings'] . ' ' . (($row['postings'] == 1) ? $user->lang['POST'] : $user->lang['POSTS']), - - 'U_PROFILE' => "memberlist.$phpEx$SID&mode=viewprofile&u=" . $row['user_id'], - 'U_SEARCHPOSTS' => "search.$phpEx$SID&search_author=" . urlencode($username) . "&showresults=topics" - )); - } - $db->sql_freeresult($result); - - // Get other IP's this user has posted under - $sql = 'SELECT poster_ip, COUNT(*) AS postings - FROM ' . POSTS_TABLE . ' - WHERE poster_id = ' . $post_info['poster_id'] . ' - GROUP BY poster_ip - ORDER BY postings DESC'; - $result = $db->sql_query($sql); - - $i = 0; - while ($row = $db->sql_fetchrow($result)) - { - $ip = ($rdns_ip_num == $row['poster_ip'] || $rdns_ip_num == 'all') ? @gethostbyaddr($row['poster_ip']) . ' (' . $row['poster_ip'] . ')' : $row['poster_ip']; - - $template->assign_block_vars('iprow', array( - 'S_ROW_COUNT' => $i++, - 'IP' => $ip, - 'POSTS' => $row['postings'] . ' ' . (($row['postings'] == 1) ? $user->lang['POST'] : $user->lang['POSTS']), - 'U_LOOKUP_IP' => ($rdns_ip_num == $row['poster_ip'] || $rdns_ip_num == 'all') ? '' : $mcp_url . '&mode=post_details&rdns=' . $row['poster_ip'] . '#ip' - )); + $template->assign_block_vars('options', array( + 'VALUE' => ($row['forum_type'] != FORUM_POST || !$auth->acl_gets($acl_list, $row['forum_id'])) ? -1 : $row['forum_id'], + 'SELECTED' => $selected, + 'TEXT' => $padding . $char . $row['forum_name']) + ); } $db->sql_freeresult($result); - if ($mode == 'change_poster_search') - { - $username = (!empty($_POST['username'])) ? htmlspecialchars($_POST['username']) : ''; - - if ($username) - { - $users_ary = array(); - $username = str_replace('*', '%', str_replace('%', '\%', $username)); - - $sql = 'SELECT user_id, username - FROM ' . USERS_TABLE . " - WHERE username LIKE '" . $db->sql_escape($username) . "' - AND user_id NOT IN ( " . ANONYMOUS . ', ' . intval($post_info['poster_id']) . ') - AND user_active = 1 - ORDER BY username'; - $result = $db->sql_query($sql); - - while ($row = $db->sql_fetchrow($result)) - { - $users_ary[strtolower($row['username'])] = $row; - } - } - } - - $user_select = ''; - ksort($users_ary); - foreach ($users_ary as $row) - { - $user_select .= '<option value="' . $row['user_id'] . '">' . $row['username'] . "</option>\n"; - } $template->assign_vars(array( - 'S_NO_USERS_FOUND' => (!$username || !empty($users_ary)) ? FALSE : TRUE, - 'S_USER_SELECT' => $user_select + 'S_JUMPBOX_ACTION' => $action, + 'S_MCP_ACTION' => $action, + 'S_ENABLE_SELECT_ALL' => $enable_select_all, + 'S_CURRENT_FORUM' => intval($forum_id) )); + } - if ($post_info['post_reported']) - { - $sql = 'SELECT r.*, rr.*, u.username - FROM ' . REPORTS_TABLE . ' r, ' . REASONS_TABLE . ' rr, ' . USERS_TABLE . " u - WHERE r.post_id = $post_id - AND r.reason_id = rr.reason_id - AND u.user_id = r.user_id"; - $result = $db->sql_query($sql); - - if ($row = $db->sql_fetchrow($result)) - { - $template->assign_vars(array( - 'S_POST_REPORTED' => TRUE, - 'REPORTER' => ($row['user_id'] == ANONYMOUS) ? $user->lang['GUEST'] : '<a href="memberlist.' . $phpEx . $SID . '&mode=viewprofile&u=' . $row['user_id'] . '">' . $row['username'] . '</a>', - 'REASON_TITLE' => (!empty($user->lang['REPORT_REASONS']['TITLE'][$row['reason_name']])) ? $user->lang['REPORT_REASONS']['TITLE'][$row['reason_name']] : ucwords(str_replace('_' , ' ', $row['reason_name'])), - 'REPORT_TIME' => $user->format_date($row['report_time']), - 'REASON_DESCRIPTION' => (!empty($row['report_text'])) ? $row['report_text'] : (!empty($user->lang['REPORT_REASONS']['DESCRIPTION'][$row['reason_name']])) ? $user->lang['REPORT_REASONS']['DESCRIPTION'][$row['reason_name']] : $row['reason_description'] - )); - } - } - page_footer(); - break; - - case 'lock': - case 'unlock': - if (count($topic_id_list) == 1) - { - $message = ($mode == 'lock') ? $user->lang['TOPIC_LOCKED_SUCCESS'] : $user->lang['TOPIC_UNLOCKED_SUCCESS']; - } - else - { - $message = ($mode == 'lock') ? $user->lang['TOPICS_LOCKED_SUCCESS'] : $user->lang['TOPICS_UNLOCKED_SUCCESS']; - } - - if (isset($_GET['quickmod'])) - { - $redirect_page = "viewtopic.$phpEx$SID&f=$forum_id&t=$topic_id&start=$start"; - $l_redirect = sprintf($user->lang['RETURN_TOPIC'], '<a href="' . $redirect_page . '">', '</a>'); - } - else - { - $redirect_page = $mcp_url . '&mode=forum_view&start=' . $start; - $l_redirect = sprintf($user->lang['RETURN_MCP'], '<a href="' . $redirect_page . '">', '</a>'); - } - - if (!count($topic_id_list)) - { - trigger_error($user->lang['NO_TOPIC_SELECTED'] . '<br /><br />' . $l_redirect); - } - - $sql = 'UPDATE ' . TOPICS_TABLE . ' - SET topic_status = ' . (($mode == 'lock') ? ITEM_LOCKED : ITEM_UNLOCKED) . ' - WHERE topic_id IN (' . implode(', ', $topic_id_list) . ') - AND topic_moved_id = 0'; - $db->sql_query($sql); - - $message .= '<br /><br />' . $l_redirect . '<br \><br \>' . sprintf($user->lang['RETURN_FORUM'], "<a href=\"viewforum.$phpEx$SID&f=$forum_id\">", '</a>'); + function short_id_list($id_list) + { + $max_len = 0; + $short_id_list = array(); - foreach ($topic_id_list as $topic_id) + foreach ($id_list as $id) { - add_log('mod', $forum_id, $topic_id, 'logm_' . $mode); + $short = (string) base_convert($id, 10, 36); + $max_len = max(strlen($short), $max_len); + $short_id_list[] = $short; } - meta_refresh(3, $redirect_page); - trigger_error($message); - break; - - case 'merge_posts': - if (!$to_topic_id) - { - redirect("mcp.$phpEx$SID&mode=select_topic&f=$forum_id" . str_replace('&', '&', $url_extra)); - } - if (!count($post_id_list)) + $id_str = (string) $max_len; + foreach ($short_id_list as $short) { - trigger_error($user->lang['NO_POST_SELECTED'] . '<br /><br />' . sprintf($user->lang['RETURN_MCP'], '<a href="mcp.' . $phpEx . $SID . '&mode=merge&t=' . $topic_id . '&to_topic_id=' . $to_topic_id . '">', '</a>')); + $id_str .= str_pad($short, $max_len, '0', STR_PAD_LEFT); } - $return_url = '<br /><br />' . sprintf($user->lang['RETURN_TOPIC'], '<a href="viewtopic.' . $phpEx . $SID . '&f=' . $to_forum_id . '&t=' . $to_topic_id . '">', '</a>'); - move_posts($post_id_list, $to_topic_id); - add_log('mod', $to_forum_id, $to_topic_id, 'logm_merge', $topic_id); - trigger_error($user->lang['POSTS_MERGED'] . $return_url . $return_mcp); - break; - - case 'split_all': - case 'split_beyond': - $return_split = '<br /><br />' . sprintf($user->lang['RETURN_MCP'], '<a href="' . $mcp_url . '&mode=split' . $url_extra . '">', '</a>'); + return $id_str; + } - if (!count($post_id_list)) - { - trigger_error($user->lang['NO_POST_SELECTED'] . $return_split); - } - elseif (in_array($topic_info['topic_first_post_id'], $post_id_list)) - { - trigger_error($user->lang['CANNOT_SPLIT_FIRST_POST'] . $return_split); - } + function mcp_sorting($mode, &$sort_days, &$sort_key, &$sort_dir, &$sort_by_sql, &$sort_order_sql, &$total, $forum_id = 0, $topic_id = 0, $where_sql = 'WHERE') + { + global $db, $user, $auth, $template; - if (!$subject) - { - trigger_error($user->lang['EMPTY_SUBJECT'] . $return_split); - } - if ($to_forum_id <= 0) - { - trigger_error($user->lang['SELECT_DESTINATION_FORUM'] . $return_split); - } - if ($forum_data[$to_forum_id]['forum_type'] == FORUM_CAT) - { - trigger_error($user->lang['FORUM_NOT_POSTABLE'] . $return_split); - } + $sort_days = (!empty($_REQUEST['st'])) ? max(intval($_REQUEST['st']), 0) : 0; + $min_time = ($sort_days) ? time() - ($sort_days * 86400) : 0; - if ($mode == 'split_beyond') + switch ($mode) { - $sql = 'SELECT p.post_id - FROM ' . POSTS_TABLE . ' p, ' . USERS_TABLE . " u - WHERE p.topic_id = $topic_id - AND p.poster_id = u.user_id - $limit_posts_time - ORDER BY $sort_order_sql"; - $result = $db->sql_query_limit($sql, 0, $start); - - $store = FALSE; - $post_id_list = array(); - while ($row = $db->sql_fetchrow($result)) - { - // Start to store post_ids as soon as we see the first post that was selected - if ($row['post_id'] == $post_id) + case 'viewforum': + $type = 'topics'; + $default_key = 't'; + $default_dir = 'd'; + $sql = 'SELECT COUNT(topic_id) AS total + FROM ' . TOPICS_TABLE . " + $where_sql forum_id = $forum_id + AND topic_type <> " . POST_ANNOUNCE . " + AND topic_last_post_time >= $min_time"; + + if (!$auth->acl_get('m_approve', $forum_id)) { - $store = TRUE; + $sql .= 'AND topic_approved = 1'; } - if ($store) - { - $post_id_list[] = $row['post_id']; - } - } - } - - if (!count($post_id_list)) - { - trigger_error($user->lang['NO_POST_SELECTED'] . $return_split); - } - - $icon_id = (!empty($_POST['icon'])) ? intval($_POST['icon']) : 0; - $sql = 'INSERT INTO ' . TOPICS_TABLE . " (forum_id, topic_title, icon_id, topic_approved) - VALUES ($to_forum_id, '" . $db->sql_escape($subject) . "', $icon_id, 1)"; - $db->sql_query($sql); - - $to_topic_id = $db->sql_nextid(); - move_posts($post_id_list, $to_topic_id); - - $return_new .= '<br /><br />' . sprintf($user->lang['RETURN_NEW_TOPIC'], '<a href="viewtopic.' . $phpEx . $SID . '&f=' . $to_forum_id . '&t=' . $to_topic_id . '">', '</a>'); - trigger_error($user->lang['TOPIC_SPLIT'] . $return_topic . $return_new . $return_mcp); - break; - - case 'select_topic': - case 'forum_view': - mcp_header('mcp_forum.html', 'm_', TRUE); - mcp_sorting('viewforum', &$sort_days, &$sort_key, &$sort_dir, &$sort_by_sql, &$sort_order_sql, &$total, $forum_id); - $forum_topics = ($total == -1) ? $forum_info['forum_topics'] : $total; - $limit_time_sql = ($sort_days) ? 'AND t.topic_last_post_time >= ' . (time() - ($sort_days * 86400)) : ''; - - $template->assign_vars(array( - 'FORUM_NAME' => $forum_info['forum_name'], - - 'S_CAN_DELETE' => $auth->acl_get('m_delete', $forum_id), - 'S_CAN_MOVE' => $auth->acl_get('m_move', $forum_id), - 'S_CAN_FORK' => $auth->acl_get('m_', $forum_id), - 'S_CAN_LOCK' => $auth->acl_get('m_lock', $forum_id), - 'S_CAN_SYNC' => $auth->acl_get('m_', $forum_id), - - 'U_VIEW_FORUM' => "viewforum.$phpEx$SID&f=$forum_id", - 'S_MCP_ACTION' => "mcp.$phpEx$SID&mode=$mode&f=$forum_id&start=$start" . (($mode == 'select_topic') ? $url_extra : ''), - - 'PAGINATION' => generate_pagination("mcp.$phpEx$SID&mode=$mode&f=$forum_id" . (($mode == 'select_topic') ? $url_extra : ''), $forum_topics, $config['topics_per_page'], $start), - 'PAGE_NUMBER' => on_page($forum_topics, $config['topics_per_page'], $start) - )); - - - // Define censored word matches - $censors = array(); - obtain_word_list($censors); + break; - $topic_rows = array(); - - $sql = "SELECT t.* - FROM " . TOPICS_TABLE . " t - WHERE t.forum_id = $forum_id - " . (($auth->acl_gets('m_approve', $forum_id)) ? '' : 'AND t.topic_approved = 1') . " - AND t.topic_type = " . POST_ANNOUNCE . " - $limit_time_sql - ORDER BY $sort_order_sql"; - $result = $db->sql_query($sql); - - while ($row = $db->sql_fetchrow($result)) - { - $topic_rows[] = $row; - } - $db->sql_freeresult($result); - - $sql = "SELECT t.* - FROM " . TOPICS_TABLE . " t - WHERE t.forum_id = $forum_id - " . (($auth->acl_gets('m_approve', $forum_id)) ? '' : 'AND t.topic_approved = 1') . " - AND t.topic_type <> " . POST_ANNOUNCE . " - $limit_time_sql - ORDER BY t.topic_type DESC, $sort_order_sql"; - $result = $db->sql_query_limit($sql, $config['topics_per_page'], $start); - - while ($row = $db->sql_fetchrow($result)) - { - $topic_rows[] = $row; - } - $db->sql_freeresult($result); + case 'viewtopic': + $type = 'posts'; + $default_key = 't'; + $default_dir = 'a'; + $sql = 'SELECT COUNT(post_id) AS total + FROM ' . POSTS_TABLE . " + $where_sql topic_id = $topic_id + AND post_time >= $min_time"; - foreach ($topic_rows as $row) - { - $topic_title = ''; + if (!$auth->acl_get('m_approve', $forum_id)) + { + $sql .= 'AND post_approved = 1'; + } + break; - if ($row['topic_status'] == ITEM_LOCKED) - { - $folder_img = $user->img('folder_locked', 'VIEW_TOPIC_LOCKED'); - } - else - { - if ($row['topic_type'] == POST_ANNOUNCE) + case 'unapproved': + $type = 'posts'; + $default_key = 't'; + $default_dir = 'd'; + $sql = 'SELECT COUNT(post_id) AS total + FROM ' . POSTS_TABLE . " + $where_sql forum_id IN (" . (($forum_id) ? $forum_id : implode(', ', get_forum_list('m_approve'))) . ') + AND post_approved = 0 + AND post_time >= ' . $min_time; + break; + + case 'reports': + $type = 'reports'; + $default_key = 'p'; + $default_dir = 'd'; + $limit_time_sql = ($min_time) ? "AND r.report_time >= $min_time" : ''; + + if ($topic_id) { - $folder_img = $user->img('folder_announce', 'VIEW_TOPIC_ANNOUNCEMENT'); + $where_sql .= ' p.topic_id = ' . $topic_id; } - else if ($row['topic_type'] == POST_STICKY) + elseif ($forum_id) { - $folder_img = $user->img('folder_sticky', 'VIEW_TOPIC_STICKY'); + $where_sql .= ' p.forum_id = ' . $forum_id; } else { - $folder_img = $user->img('folder', 'NO_NEW_POSTS'); + $where_sql .= ' p.forum_id IN (' . implode(', ', get_forum_list('m_')) . ')'; } - } - - if ($row['topic_type'] == POST_ANNOUNCE) - { - $topic_type = $user->lang['VIEW_TOPIC_ANNOUNCEMENT'] . ' '; - } - else if ($row['topic_type'] == POST_STICKY) - { - $topic_type = $user->lang['VIEW_TOPIC_STICKY'] . ' '; - } - else if ($row['topic_status'] == ITEM_MOVED) - { - $topic_type = $user->lang['VIEW_TOPIC_MOVED'] . ' '; - } - else - { - $topic_type = ''; - } - - if (intval($row['poll_start'])) - { - $topic_type .= $user->lang['VIEW_TOPIC_POLL'] . ' '; - } - - // Shouldn't moderators be allowed to read uncensored title? - $topic_title = $row['topic_title']; - if (count($censors['match'])) - { - $topic_title = preg_replace($censors['match'], $censors['replace'], $topic_title); - } - - $template->assign_block_vars('topicrow', array( - 'U_VIEW_TOPIC' => $mcp_url . '&t=' . $row['topic_id'] . '&mode=topic_view', - - 'S_SELECT_TOPIC' => ($mode == 'select_topic' && $row['topic_id'] != $topic_id) ? TRUE : FALSE, - 'U_SELECT_TOPIC' => $mcp_url . '&mode=merge&to_topic_id=' . $row['topic_id'] . $url_extra, - - 'TOPIC_FOLDER_IMG' => $folder_img, - 'TOPIC_TYPE' => $topic_type, - 'TOPIC_TITLE' => $topic_title, - 'REPLIES' => $row['topic_replies'], - 'LAST_POST_TIME' => $user->format_date($row['topic_last_post_time']), - 'TOPIC_ID' => $row['topic_id'] - )); - } - unset($topic_rows); - - page_footer(); - break; - - case 'viewlogs': - mcp_header('mcp_viewlogs.html', array('m_', 'a_general'), FALSE); - - // The user used the jumpbox to get there, therefore we do not limit logs to the selected topic - if (isset($_POST['jumpbox']) || (isset($topic_id) && $topic_info['forum_id'] != $forum_id)) - { - $topic_id = 0; - } - - mcp_sorting('viewlogs', &$sort_days, &$sort_key, &$sort_dir, &$sort_by_sql, &$sort_order_sql, &$total, $forum_id, $topic_id); - - $log_count = 0; - $log = array(); - - if (!$forum_id) - { - $forum_id = get_forum_list('m_'); - $forum_id[] = 0; - } - $min_time = ($sort_days) ? time() - ($sort_days * 86400) : 0; - view_log('mod', &$log, &$log_count, $config['topics_per_page'], $start, $forum_id, $topic_id, $min_time, $sort_order_sql); - - foreach ($log as $row) - { - $template->assign_block_vars('log', array( - 'USERNAME' => $row['username'], - 'IP' => $row['ip'], - 'TIME' => $user->format_date($row['time']), - 'ACTION' => $row['action'], - 'U_VIEWTOPIC' => $row['viewtopic'], - 'U_VIEWLOGS' => $row['viewlogs'] - )); - } - - $template->assign_vars(array( - 'S_MCP_ACTION' => "mcp.$phpEx$SID&f=$forum_id&t=$topic_id&mode=viewlogs", - 'PAGINATION' => generate_pagination("mcp.$phpEx$SID&f=$forum_id&t=$topic_id&p=$post_id&mode=viewlogs", $log_count, $config['topics_per_page'], $start), - 'PAGE_NUMBER' => on_page($log_count, $config['topics_per_page'], $start), - - 'S_TOPIC_ID' => $topic_id, - 'TOPIC_NAME' => ($topic_id) ? $topic_info['topic_title'] : '' - )); - - page_footer(); - break; - - case 'reports': - mcp_header('mcp_reports.html', 'm_', FALSE); - - mcp_sorting('reports', &$sort_days, &$sort_key, &$sort_dir, &$sort_by_sql, &$sort_order_sql, &$total, $forum_id, $topic_id); - - if (isset($_POST['f'])) - { - $topic_id = 0; - unset($topic_info); - } - - if ($topic_id) - { - $where_extra = "AND p.topic_id = $topic_id"; - } - else - { - $where_extra = 'AND p.forum_id IN (' . implode(', ', get_forum_list('m_')) . ')'; - } - - $sql = 'SELECT r.*, rr.reason_name, u.username, p.post_subject, t.topic_id, t.topic_title - FROM ' . REPORTS_TABLE . ' r, ' . REASONS_TABLE . ' rr, ' . USERS_TABLE . ' u, ' . POSTS_TABLE . ' p, ' . TOPICS_TABLE . " t - WHERE rr.reason_id = r.reason_id - AND u.user_id = r.user_id - AND p.post_id = r.post_id - AND t.topic_id = p.topic_id - $where_extra - ORDER BY $sort_order_sql"; - $result = $db->sql_query_limit($sql, $config['topics_per_page'], $start); - - while ($row = $db->sql_fetchrow($result)) - { - $template->assign_block_vars('reportrow', array( - 'TOPIC' => "<a href=\"viewtopic.$phpEx$SID&p=" . $row['post_id'] . '#' . $row['post_id'] . '">' . $row['topic_title'] . '</a>', - 'SUBJECT' => $row['post_subject'], - 'REPORTER' => ($row['user_id'] == ANONYMOUS) ? $user->lang['GUEST'] : '<a href="memberlist.' . $phpEx . $SID . '&mode=viewprofile&u=' . $row['user_id'] . '">' . $row['username'] . '</a>', - 'REASON' => (!empty($user->lang['REPORT_REASONS']['TITLE'][$row['reason_name']])) ? $user->lang['REPORT_REASONS']['TITLE'][$row['reason_name']] : ucwords(str_replace('_' , ' ', $row['reason_name'])), - 'REPORT_TIME' => $user->format_date($row['report_time']), - 'U_VIEW_REPORT' => "mcp.$phpEx$SID&p=" . $row['post_id'] . '#reports' - )); - } + $sql = 'SELECT COUNT(r.report_id) AS total + FROM ' . REPORTS_TABLE . ' r, ' . POSTS_TABLE . " p + $where_sql + AND p.post_id = r.post_id + $limit_time_sql"; + break; + + case 'viewlogs': + $type = 'logs'; + $default_key = 't'; + $default_dir = 'd'; + $sql = 'SELECT COUNT(log_id) AS total + FROM ' . LOG_TABLE . " + $where_sql forum_id IN (" . (($forum_id) ? $forum_id : implode(', ', get_forum_list('m_'))) . ') + AND log_time >= ' . $min_time . ' + AND log_type = ' . LOG_MOD; + break; + } + + $sort_key = (!empty($_REQUEST['sk'])) ? htmlspecialchars($_REQUEST['sk']) : $default_key; + $sort_dir = (!empty($_REQUEST['sd'])) ? htmlspecialchars($_REQUEST['sd']) : $default_dir; + $sort_dir_text = array('a' => $user->lang['ASCENDING'], 'd' => $user->lang['DESCENDING']); + + switch ($type) + { + case 'topics': + $limit_days = array(0 => $user->lang['ALL_TOPICS'], 1 => $user->lang['1_DAY'], 7 => $user->lang['7_DAYS'], 14 => $user->lang['2_WEEKS'], 30 => $user->lang['1_MONTH'], 90 => $user->lang['3_MONTHS'], 180 => $user->lang['6_MONTHS'], 364 => $user->lang['1_YEAR']); + $sort_by_text = array('a' => $user->lang['AUTHOR'], 't' => $user->lang['POST_TIME'], 'tt' => $user->lang['TOPIC_TIME'], 'r' => $user->lang['REPLIES'], 's' => $user->lang['SUBJECT'], 'v' => $user->lang['VIEWS']); + + $sort_by_sql = array('a' => 't.topic_first_poster_name', 't' => 't.topic_last_post_time', 'tt' => 't.topic_time', 'r' => (($auth->acl_get('m_approve', $forum_id)) ? 't.topic_replies_real' : 't.topic_replies'), 's' => 't.topic_title', 'v' => 't.topic_views'); + $limit_time_sql = ($min_time) ? "AND t.topic_last_post_time >= $min_time" : ''; + break; + + case 'posts': + $limit_days = array(0 => $user->lang['ALL_POSTS'], 1 => $user->lang['1_DAY'], 7 => $user->lang['7_DAYS'], 14 => $user->lang['2_WEEKS'], 30 => $user->lang['1_MONTH'], 90 => $user->lang['3_MONTHS'], 180 => $user->lang['6_MONTHS'], 364 => $user->lang['1_YEAR']); + $sort_by_text = array('a' => $user->lang['AUTHOR'], 't' => $user->lang['POST_TIME'], 's' => $user->lang['SUBJECT']); + $sort_by_sql = array('a' => 'u.username', 't' => 'p.post_time', 's' => 'p.post_subject'); + $limit_time_sql = ($min_time) ? "AND p.post_time >= $min_time" : ''; + break; + + case 'reports': + $limit_days = array(0 => $user->lang['ALL_REPORTS'], 1 => $user->lang['1_DAY'], 7 => $user->lang['7_DAYS'], 14 => $user->lang['2_WEEKS'], 30 => $user->lang['1_MONTH'], 90 => $user->lang['3_MONTHS'], 180 => $user->lang['6_MONTHS'], 364 => $user->lang['1_YEAR']); + $sort_by_text = array('p' => $user->lang['REPORT_PRIORITY'], 'r' => $user->lang['REPORTER'], 't' => $user->lang['REPORT_TIME']); + $sort_by_sql = array('p' => 'rr.reason_priority', 'r' => 'u.username', 't' => 'r.report_time'); + break; + + case 'logs': + $limit_days = array(0 => $user->lang['ALL_ENTRIES'], 1 => $user->lang['1_DAY'], 7 => $user->lang['7_DAYS'], 14 => $user->lang['2_WEEKS'], 30 => $user->lang['1_MONTH'], 90 => $user->lang['3_MONTHS'], 180 => $user->lang['6_MONTHS'], 364 => $user->lang['1_YEAR']); + $sort_by_text = array('u' => $user->lang['SORT_USERNAME'], 't' => $user->lang['SORT_DATE'], 'i' => $user->lang['SORT_IP'], 'o' => $user->lang['SORT_ACTION']); + + $sort_by_sql = array('u' => 'l.user_id', 't' => 'l.log_time', 'i' => 'l.log_ip', 'o' => 'l.log_operation'); + $limit_time_sql = ($min_time) ? "AND l.log_time >= $min_time" : ''; + break; + } + + $sort_order_sql = $sort_by_sql[$sort_key] . ' ' . (($sort_dir == 'd') ? 'DESC' : 'ASC'); + + $s_limit_days = $s_sort_key = $s_sort_dir = ''; + gen_sort_selects($limit_days, $sort_by_text, $sort_days, $sort_key, $sort_dir, $s_limit_days, $s_sort_key, $s_sort_dir); $template->assign_vars(array( - 'S_TOPIC_ID' => (!empty($topic_info['topic_title'])) ? $topic_id : '', - 'TOPIC_NAME' => (!empty($topic_info['topic_title'])) ? $topic_info['topic_title'] : '', - - 'PAGE_NUMBER' => on_page($total, $config['topics_per_page'], $start), - 'PAGINATION' => generate_pagination("$mcp_url&mode=reports&st=$sort_days&sk=$sort_key&sd=$sort_dir", $total, $config['topics_per_page'], $start) + 'S_SELECT_SORT_DIR' => $s_sort_dir, + 'S_SELECT_SORT_KEY' => $s_sort_key, + 'S_SELECT_SORT_DAYS'=> $s_limit_days )); - page_footer(); - break; - - case 'front': - default: - mcp_header('mcp_front.html', 'm_'); - $template->assign_var('S_MCP_ACTION', $mcp_url); - - // ------------- - // Latest 5 unapproved - $forum_list = get_forum_list('m_approve'); - - $template->assign_var('S_SHOW_UNAPPROVED', (!empty($forum_list)) ? TRUE : FALSE); - if (!empty($forum_list)) - { - $where_sql = 'IN (0,' . implode(', ', $forum_list) . ')'; - - // KNOWN BUG: won't list posts from a global announcement because of the forum_id - $sql = 'SELECT p.post_id, p.post_subject, p.post_time, p.poster_id, p.post_username, u.username, t.topic_id, t.topic_title, t.topic_first_post_id, f.forum_id, f.forum_name - FROM ' . POSTS_TABLE . ' p, ' . TOPICS_TABLE . ' t, ' . USERS_TABLE . ' u - LEFT JOIN ' . FORUMS_TABLE . " f ON f.forum_id = p.forum_id - WHERE p.topic_id = t.topic_id - AND p.poster_id = u.user_id - AND p.post_approved = 0 - AND p.forum_id $where_sql - ORDER BY p.post_time DESC"; - $result = $db->sql_query_limit($sql, 5); - - while ($row = $db->sql_fetchrow($result)) - { - if ($row['poster_id'] == ANONYMOUS) - { - $author = ($row['post_username']) ? $row['post_username'] : $user->lang['GUEST']; - } - else - { - $author = '<a href="memberlist.' . $phpEx . $SID . '&mode=viewprofile&u=' . $row['poster_id'] . '">' . $row['username'] . '</a>'; - } - - $template->assign_block_vars('unapproved', array( - 'U_POST_DETAILS' => $mcp_url . '&mode=post_details', - 'FORUM' => (!empty($row['forum_id'])) ? '<a href="viewforum.' . $phpEx . $SID . '&f=' . $row['forum_id'] . '">' . $row['forum_name'] . '</a>' : $user->lang['POST_GLOBAL'], - 'TOPIC' => '<a href="viewtopic.' . $phpEx . $SID . '&f=' . $row['forum_id'] . '&t=' . $row['topic_id'] . '">' . $row['topic_title'] . '</a>', - 'AUTHOR' => $author, - 'SUBJECT' => '<a href="mcp.' . $phpEx . $SID . '&p=' . $row['post_id'] . '&mode=post_details">' . (($row['post_subject']) ? $row['post_subject'] : $user->lang['NO_SUBJECT']) . '</a>', - 'POST_TIME' => $user->format_date($row['post_time']) - )); - } - - $result = $db->sql_query('SELECT COUNT(post_id) AS total FROM ' . POSTS_TABLE . ' WHERE post_approved = 0 AND forum_id ' . $where_sql); - $row = $db->sql_fetchrow($result); - - if ($row['total'] == 0) - { - $template->assign_vars(array( - 'L_UNAPPROVED_TOTAL' => $user->lang['UNAPPROVED_POSTS_ZERO_TOTAL'], - 'S_HAS_UNAPPROVED_POSTS' => FALSE - )); - } - elseif ($row['total'] == 1) - { - $template->assign_vars(array( - 'L_UNAPPROVED_TOTAL' => $user->lang['UNAPPROVED_POST_TOTAL'], - 'S_HAS_UNAPPROVED_POSTS' => TRUE - )); - } - else - { - $template->assign_vars(array( - 'L_UNAPPROVED_TOTAL' => sprintf($user->lang['UNAPPROVED_POSTS_TOTAL'], $row['total']), - 'S_HAS_UNAPPROVED_POSTS' => TRUE - )); - } - } - // ------------- - // ------------- - // Latest 5 reported - $forum_list = get_forum_list('m_'); - - $template->assign_var('S_SHOW_REPORTS', (!empty($forum_list)) ? TRUE : FALSE); - if (!empty($forum_list)) + if (($sort_days && $mode != 'viewlogs') || $mode == 'reports') { - $where_sql = 'IN (0, ' . implode(', ', $forum_list) . ')'; - - $sql = 'SELECT r.*, p.post_id, p.post_subject, u.username, t.topic_id, t.topic_title, f.forum_id, f.forum_name - FROM ' . REPORTS_TABLE . ' r, ' . REASONS_TABLE . ' rr,' . POSTS_TABLE . ' p, ' . TOPICS_TABLE . ' t, ' . USERS_TABLE . ' u - LEFT JOIN ' . FORUMS_TABLE . " f ON f.forum_id = p.forum_id - WHERE r.post_id = p.post_id - AND r.reason_id = rr.reason_id - AND p.topic_id = t.topic_id - AND r.user_id = u.user_id - AND p.forum_id $where_sql - ORDER BY p.post_time DESC"; - $result = $db->sql_query_limit($sql, 5); - - while ($row = $db->sql_fetchrow($result)) - { - $template->assign_block_vars('report', array( - 'U_POST_DETAILS' => $mcp_url . '&mode=post_details', - 'FORUM' => (!empty($row['forum_id'])) ? '<a href="viewforum.' . $phpEx . $SID . '&f=' . $row['forum_id'] . '">' . $row['forum_name'] . '</a>' : $user->lang['POST_GLOBAL'], - 'TOPIC' => '<a href="viewtopic.' . $phpEx . $SID . '&f=' . $row['forum_id'] . '&t=' . $row['topic_id'] . '">' . $row['topic_title'] . '</a>', - 'REPORTER' => ($row['user_id'] == ANONYMOUS) ? $user->lang['GUEST'] : '<a href="memberlist.' . $phpEx . $SID . '&mode=viewprofile&u=' . $row['user_id'] . '">' . $row['username'] . '</a>', - 'SUBJECT' => '<a href="mcp.' . $phpEx . $SID . '&p=' . $row['post_id'] . '&mode=post_details">' . (($row['post_subject']) ? $row['post_subject'] : $user->lang['NO_SUBJECT']) . '</a>', - 'REPORT_TIME' => $user->format_date($row['report_time']) - )); - } - - $sql = 'SELECT COUNT(r.report_id) AS total - FROM ' . REPORTS_TABLE . ' r, ' . POSTS_TABLE . ' p - WHERE r.post_id = p.post_id - AND p.forum_id ' . $where_sql; $result = $db->sql_query($sql); - $row = $db->sql_fetchrow($result); - - if ($row['total'] == 0) - { - $template->assign_vars(array( - 'L_REPORTS_TOTAL' => $user->lang['REPORTS_ZERO_TOTAL'], - 'S_HAS_REPORTS' => FALSE - )); - } - elseif ($row['total'] == 1) - { - $template->assign_vars(array( - 'L_REPORTS_TOTAL' => $user->lang['REPORT_TOTAL'], - 'S_HAS_REPORTS' => TRUE - )); - } - else - { - $template->assign_vars(array( - 'L_REPORTS_TOTAL' => sprintf($user->lang['REPORTS_TOTAL'], $row['total']), - 'S_HAS_REPORTS' => TRUE - )); - } + $total = ($row = $db->sql_fetchrow($result)) ? $row['total'] : 0; } - // ------------- - - // ------------- - // Latest 5 logs - $forum_list = get_forum_list(array('m_', 'a_general')); - - if (!empty($forum_list)) + else { - // Add forum_id 0 for global announcements - $forum_list[] = 0; - - $log_count = 0; - $log = array(); - view_log('mod', &$log, &$log_count, 5, 0, $forum_list); - - foreach ($log as $row) - { - $template->assign_block_vars('log', array( - 'USERNAME' => $row['username'], - 'IP' => $row['ip'], - 'TIME' => $user->format_date($row['time']), - 'ACTION' => $row['action'], - 'U_VIEWTOPIC' => $row['viewtopic'], - 'U_VIEWLOGS' => $row['viewlogs'] - )); - } + $total = -1; } - $template->assign_vars(array( - 'S_SHOW_LOGS' => (!empty($forum_list)) ? TRUE : FALSE, - 'S_HAS_LOGS' => (!empty($log)) ? TRUE : FALSE - )); - - page_footer(); + } } -trigger_error("DEBUG - you're not supposed to get there"); - -// ----------------------- -// Page specific functions -// -function mcp_header($template_name, $jumpbox_acl = FALSE, $forum_nav = FALSE) +function ipwhois($ip) { - global $phpbb_root_path, $phpEx, $SID, $url_extra, $template, $auth, $user, $db, $config; - global $forum_id, $forum_info, $mode; + $ipwhois = ''; - $forum_id = (!empty($forum_id)) ? $forum_id : FALSE; - - page_header(sprintf($user->lang['MCP'], '', '')); - - $template->set_filenames(array( - 'body' => $template_name) + $match = array( + '#RIPE\.NET#is' => 'whois.ripe.net', + '#whois\.apnic\.net#is' => 'whois.apnic.net', + '#nic\.ad\.jp#is' => 'whois.nic.ad.jp', + '#whois\.registro\.br#is' => 'whois.registro.br' ); - if (preg_match('#mod_queue|reports|viewlogs#', $mode)) + if ($fsk = @fsockopen('whois.arin.net', 43)) { - $enable_select_all = TRUE; + @fputs($fsk, "$ip\n"); + while (!feof($fsk)) + { + $ipwhois .= fgets($fsk, 1024); + } + fclose($fsk); } else { - $enable_select_all = FALSE; + return; } - if ($jumpbox_acl) - { - mcp_jumpbox('mcp.' . $phpEx . $SID . '&mode=' . $mode . $url_extra, $jumpbox_acl, $forum_id, $enable_select_all); - } - - if ($forum_nav) - { - generate_forum_nav($forum_info); - } - $template->assign_var('S_FORUM_NAV', $forum_nav); -} - -function mcp_jumpbox($action, $acl_list = 'f_list', $forum_id = false, $enable_select_all = false) -{ - global $auth, $template, $user, $db, $phpEx, $SID; - - $sql = 'SELECT forum_id, forum_name, forum_type, left_id, right_id - FROM ' . FORUMS_TABLE . ' - ORDER BY left_id ASC'; - $result = $db->sql_query($sql, 120); - $right = $cat_right = 0; - $padding = $forum_list = $holding = ''; - while ($row = $db->sql_fetchrow($result)) + foreach (array_keys($match) as $server) { - if ($row['forum_type'] == FORUM_CAT && ($row['left_id'] + 1 == $row['right_id'])) + if (preg_match($server, $ipwhois)) { - // Non-postable forum with no subforums, don't display - continue; - } - - if (!$auth->acl_get('f_list', $row['forum_id'])) - { - // if the user does not have permissions to list this forum skip - continue; - } - if ($row['forum_type'] == FORUM_CAT || !$auth->acl_gets($acl_list, $row['forum_id'])) - { - $row['forum_id'] = -1; - } - - if ($row['left_id'] < $right) - { - $padding .= ' '; - } - else if ($row['left_id'] > $right + 1) - { - $padding = substr($padding, 0, -13 * ($row['left_id'] - $right + 1)); + $ipwhois = ''; + if (($fsk = fsockopen($match[$server], 43))) + { + @fputs($fsk, "$ip\n"); + while (!feof($fsk)) + { + $ipwhois .= fgets($fsk, 1024); + } + fclose($fsk); + } + break; } + } - $right = $row['right_id']; + return $ipwhois; +} +// +// FUNCTIONS +// --------- - $selected = ($row['forum_id'] == $forum_id) ? ' selected="selected"' : ''; - if ($row['right_id'] - $row['left_id'] > 1) - { - $cat_right = max($cat_right, $row['right_id']); - $char = '+ '; - } - else - { - $char = '- '; - } - $template->assign_block_vars('options', array( - 'VALUE' => $row['forum_id'], - 'SELECTED' => $selected, - 'TEXT' => $padding . $char . $row['forum_name']) - ); - } - $db->sql_freeresult($result); - - $template->assign_vars(array( - 'S_JUMPBOX_ACTION' => $action, - 'S_ENABLE_SELECT_ALL' => $enable_select_all, - 'S_CURRENT_FORUM' => intval($forum_id) - )); +// Start session management +$user->start(); +$auth->acl($user->data); - return; -} +$user->setup(); -function short_id_list($id_list) +// Basic parameter data +$module = (!empty($_REQUEST['i'])) ? intval($_REQUEST['i']) : 0; +$start = (!empty($_REQUEST['start'])) ? intval($_REQUEST['start']) : 0; +if (!empty($_REQUEST['mode'])) { - $max_len = 0; - $short_id_list = array(); - - foreach ($id_list as $id) + if (is_array($_REQUEST['mode'])) { - $short = (string) base_convert($id, 10, 36); - $max_len = max(strlen($short), $max_len); - $short_id_list[] = $short; + list($mode, $void) = each($_REQUEST['mode']); } - - $id_str = (string) $max_len; - foreach ($short_id_list as $short) + else { - $id_str .= str_pad($short, $max_len, '0', STR_PAD_LEFT); + $mode = $_REQUEST['mode']; } - - return $id_str; } - -function mcp_sorting($mode, &$sort_days, &$sort_key, &$sort_dir, &$sort_by_sql, &$sort_order_sql, &$total, $forum_id = 0, $topic_id = 0, $where_sql = 'WHERE') +else { - global $db, $user, $auth, $template; - - $sort_days = (!empty($_REQUEST['st'])) ? max(intval($_REQUEST['st']), 0) : 0; - $min_time = ($sort_days) ? time() - ($sort_days * 86400) : 0; + $mode = 'front'; +} +// Basic "global" modes +if (!$module) +{ switch ($mode) { - case 'viewforum': - $type = 'topics'; - $default_key = 't'; - $default_dir = 'd'; - $sql = 'SELECT COUNT(topic_id) AS total - FROM ' . TOPICS_TABLE . " - $where_sql forum_id = $forum_id - AND topic_type <> " . POST_ANNOUNCE . " - AND topic_last_post_time >= $min_time"; - - if (!$auth->acl_get('m_approve', $forum_id)) - { - $sql .= 'AND topic_approved = 1'; - } - break; - - case 'viewtopic': - $type = 'posts'; - $default_key = 't'; - $default_dir = 'a'; - $sql = 'SELECT COUNT(post_id) AS total - FROM ' . POSTS_TABLE . " - $where_sql topic_id = $topic_id - AND post_time >= $min_time"; - - if (!$auth->acl_get('m_approve', $forum_id)) - { - $sql .= 'AND post_approved = 1'; - } - break; - - case 'unapproved': - $type = 'posts'; - $default_key = 't'; - $default_dir = 'd'; - $sql = 'SELECT COUNT(post_id) AS total - FROM ' . POSTS_TABLE . " - $where_sql forum_id IN (" . (($forum_id) ? $forum_id : implode(', ', get_forum_list('m_approve'))) . ') - AND post_approved = 0 - AND post_time >= ' . $min_time; - break; - - case 'reports': - $type = 'reports'; - $default_key = 'p'; - $default_dir = 'd'; - $limit_time_sql = ($min_time) ? "AND r.report_time >= $min_time" : ''; - - if ($topic_id) - { - $where_sql .= ' p.topic_id = ' . $topic_id; - } - elseif ($forum_id) - { - $where_sql .= ' p.forum_id = ' . $forum_id; - } - else - { - $where_sql .= ' p.forum_id IN (' . implode(', ', get_forum_list('m_')) . ')'; - } - $sql = 'SELECT COUNT(r.report_id) AS total - FROM ' . REPORTS_TABLE . ' r, ' . POSTS_TABLE . " p - $where_sql - AND p.post_id = r.post_id - $limit_time_sql"; - break; - - case 'viewlogs': - $type = 'logs'; - $default_key = 't'; - $default_dir = 'd'; - $sql = 'SELECT COUNT(log_id) AS total - FROM ' . LOG_TABLE . " - $where_sql forum_id IN (" . (($forum_id) ? $forum_id : implode(', ', get_forum_list('m_'))) . ') - AND log_time >= ' . $min_time . ' - AND log_type = ' . LOG_MOD; - break; - } + // NOTE: below are basic modes that must not require a module_id to ne passed + case 'topic_view': + case 'post_details': + case 'approve': + // used in viewtopic.php + + case 'split': + case 'delete': + case 'merge': + case 'move': + case 'fork': + case 'make_normal': + case 'make_sticky': + case 'make_announce': + case 'make_global': + // quick-mod + + case 'forum_view': + case 'front': + default: + $module = 'main'; + break; - $sort_key = (!empty($_REQUEST['sk'])) ? htmlspecialchars($_REQUEST['sk']) : $default_key; - $sort_dir = (!empty($_REQUEST['sd'])) ? htmlspecialchars($_REQUEST['sd']) : $default_dir; - $sort_dir_text = array('a' => $user->lang['ASCENDING'], 'd' => $user->lang['DESCENDING']); - - switch ($type) - { - case 'topics': - $limit_days = array(0 => $user->lang['ALL_TOPICS'], 1 => $user->lang['1_DAY'], 7 => $user->lang['7_DAYS'], 14 => $user->lang['2_WEEKS'], 30 => $user->lang['1_MONTH'], 90 => $user->lang['3_MONTHS'], 180 => $user->lang['6_MONTHS'], 364 => $user->lang['1_YEAR']); - $sort_by_text = array('a' => $user->lang['AUTHOR'], 't' => $user->lang['POST_TIME'], 'tt' => $user->lang['TOPIC_TIME'], 'r' => $user->lang['REPLIES'], 's' => $user->lang['SUBJECT'], 'v' => $user->lang['VIEWS']); - - $sort_by_sql = array('a' => 't.topic_first_poster_name', 't' => 't.topic_last_post_time', 'tt' => 't.topic_time', 'r' => (($auth->acl_get('m_approve', $forum_id)) ? 't.topic_replies_real' : 't.topic_replies'), 's' => 't.topic_title', 'v' => 't.topic_views'); - $limit_time_sql = ($min_time) ? "AND t.topic_last_post_time >= $min_time" : ''; - break; - - case 'posts': - $limit_days = array(0 => $user->lang['ALL_POSTS'], 1 => $user->lang['1_DAY'], 7 => $user->lang['7_DAYS'], 14 => $user->lang['2_WEEKS'], 30 => $user->lang['1_MONTH'], 90 => $user->lang['3_MONTHS'], 180 => $user->lang['6_MONTHS'], 364 => $user->lang['1_YEAR']); - $sort_by_text = array('a' => $user->lang['AUTHOR'], 't' => $user->lang['POST_TIME'], 's' => $user->lang['SUBJECT']); - $sort_by_sql = array('a' => 'u.username', 't' => 'p.post_time', 's' => 'p.post_subject'); - $limit_time_sql = ($min_time) ? "AND p.post_time >= $min_time" : ''; - break; - - case 'reports': - $limit_days = array(0 => $user->lang['ALL_REPORTS'], 1 => $user->lang['1_DAY'], 7 => $user->lang['7_DAYS'], 14 => $user->lang['2_WEEKS'], 30 => $user->lang['1_MONTH'], 90 => $user->lang['3_MONTHS'], 180 => $user->lang['6_MONTHS'], 364 => $user->lang['1_YEAR']); - $sort_by_text = array('p' => $user->lang['REPORT_PRIORITY'], 'r' => $user->lang['REPORTER'], 't' => $user->lang['REPORT_TIME']); - $sort_by_sql = array('p' => 'rr.reason_priority', 'r' => 'u.username', 't' => 'r.report_time'); - break; - - case 'logs': - $limit_days = array(0 => $user->lang['ALL_ENTRIES'], 1 => $user->lang['1_DAY'], 7 => $user->lang['7_DAYS'], 14 => $user->lang['2_WEEKS'], 30 => $user->lang['1_MONTH'], 90 => $user->lang['3_MONTHS'], 180 => $user->lang['6_MONTHS'], 364 => $user->lang['1_YEAR']); - $sort_by_text = array('u' => $user->lang['SORT_USERNAME'], 't' => $user->lang['SORT_DATE'], 'i' => $user->lang['SORT_IP'], 'o' => $user->lang['SORT_ACTION']); - - $sort_by_sql = array('u' => 'l.user_id', 't' => 'l.log_time', 'i' => 'l.log_ip', 'o' => 'l.log_operation'); - $limit_time_sql = ($min_time) ? "AND l.log_time >= $min_time" : ''; - break; } +} - $sort_order_sql = $sort_by_sql[$sort_key] . ' ' . (($sort_dir == 'd') ? 'DESC' : 'ASC'); - - $s_limit_days = $s_sort_key = $s_sort_dir = ''; - gen_sort_selects($limit_days, $sort_by_text, $sort_days, $sort_key, $sort_dir, &$s_limit_days, &$s_sort_key, &$s_sort_dir); - - $template->assign_vars(array( - 'S_SELECT_SORT_DIR' => $s_sort_dir, - 'S_SELECT_SORT_KEY' => $s_sort_key, - 'S_SELECT_SORT_DAYS'=> $s_limit_days - )); +// Instantiate a new mcp object +// NOTE: if $module is an integer, the module corresponding to this module_id will be loaded +// if it's a string, the module of this name will be loaded +$mcp = new module('mcp', "mcp.$phpEx$SID", $module); +$mcp->module->main($mode); - if (($sort_days && $mode != 'viewlogs') || $mode == 'reports') - { - $result = $db->sql_query($sql); - $total = ($row = $db->sql_fetchrow($result)) ? $row['total'] : 0; - } - else - { - $total = -1; - } -} -// -// End page specific functions -// --------------------------- ?>
\ No newline at end of file |