PostModeration.php 26 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804
  1. <?php
  2. /**
  3. * This file's job is to handle things related to post moderation.
  4. *
  5. * Simple Machines Forum (SMF)
  6. *
  7. * @package SMF
  8. * @author Simple Machines http://www.simplemachines.org
  9. * @copyright 2012 Simple Machines
  10. * @license http://www.simplemachines.org/about/smf/license.php BSD
  11. *
  12. * @version 2.1 Alpha 1
  13. */
  14. if (!defined('SMF'))
  15. die('No direct access...');
  16. /**
  17. * This is a handling function for all things post moderation.
  18. */
  19. function PostModerationMain()
  20. {
  21. global $sourcedir;
  22. // @todo We'll shift these later bud.
  23. loadLanguage('ModerationCenter');
  24. loadTemplate('ModerationCenter');
  25. // Probably need this...
  26. require_once($sourcedir . '/ModerationCenter.php');
  27. // Allowed sub-actions, you know the drill by now!
  28. $subactions = array(
  29. 'approve' => 'ApproveMessage',
  30. 'attachments' => 'UnapprovedAttachments',
  31. 'replies' => 'UnapprovedPosts',
  32. 'topics' => 'UnapprovedPosts',
  33. );
  34. // Pick something valid...
  35. if (!isset($_REQUEST['sa']) || !isset($subactions[$_REQUEST['sa']]))
  36. $_REQUEST['sa'] = 'replies';
  37. $subactions[$_REQUEST['sa']]();
  38. }
  39. /**
  40. * View all unapproved posts.
  41. */
  42. function UnapprovedPosts()
  43. {
  44. global $txt, $scripturl, $context, $user_info, $smcFunc;
  45. $context['current_view'] = isset($_GET['sa']) && $_GET['sa'] == 'topics' ? 'topics' : 'replies';
  46. $context['page_title'] = $txt['mc_unapproved_posts'];
  47. // Work out what boards we can work in!
  48. $approve_boards = boardsAllowedTo('approve_posts');
  49. // If we filtered by board remove ones outside of this board.
  50. // @todo Put a message saying we're filtered?
  51. if (isset($_REQUEST['brd']))
  52. {
  53. $filter_board = array((int) $_REQUEST['brd']);
  54. $approve_boards = $approve_boards == array(0) ? $filter_board : array_intersect($approve_boards, $filter_board);
  55. }
  56. if ($approve_boards == array(0))
  57. $approve_query = '';
  58. elseif (!empty($approve_boards))
  59. $approve_query = ' AND m.id_board IN (' . implode(',', $approve_boards) . ')';
  60. // Nada, zip, etc...
  61. else
  62. $approve_query = ' AND 1=0';
  63. // We also need to know where we can delete topics and/or replies to.
  64. if ($context['current_view'] == 'topics')
  65. {
  66. $delete_own_boards = boardsAllowedTo('remove_own');
  67. $delete_any_boards = boardsAllowedTo('remove_any');
  68. $delete_own_replies = array();
  69. }
  70. else
  71. {
  72. $delete_own_boards = boardsAllowedTo('delete_own');
  73. $delete_any_boards = boardsAllowedTo('delete_any');
  74. $delete_own_replies = boardsAllowedTo('delete_own_replies');
  75. }
  76. $toAction = array();
  77. // Check if we have something to do?
  78. if (isset($_GET['approve']))
  79. $toAction[] = (int) $_GET['approve'];
  80. // Just a deletion?
  81. elseif (isset($_GET['delete']))
  82. $toAction[] = (int) $_GET['delete'];
  83. // Lots of approvals?
  84. elseif (isset($_POST['item']))
  85. foreach ($_POST['item'] as $item)
  86. $toAction[] = (int) $item;
  87. // What are we actually doing.
  88. if (isset($_GET['approve']) || (isset($_POST['do']) && $_POST['do'] == 'approve'))
  89. $curAction = 'approve';
  90. elseif (isset($_GET['delete']) || (isset($_POST['do']) && $_POST['do'] == 'delete'))
  91. $curAction = 'delete';
  92. // Right, so we have something to do?
  93. if (!empty($toAction) && isset($curAction))
  94. {
  95. checkSession('request');
  96. // Handy shortcut.
  97. $any_array = $curAction == 'approve' ? $approve_boards : $delete_any_boards;
  98. // Now for each message work out whether it's actually a topic, and what board it's on.
  99. $request = $smcFunc['db_query']('', '
  100. SELECT m.id_msg, m.id_member, m.id_board, m.subject, t.id_topic, t.id_first_msg, t.id_member_started
  101. FROM {db_prefix}messages AS m
  102. INNER JOIN {db_prefix}topics AS t ON (t.id_topic = m.id_topic)
  103. LEFT JOIN {db_prefix}boards AS b ON (t.id_board = b.id_board)
  104. WHERE m.id_msg IN ({array_int:message_list})
  105. AND m.approved = {int:not_approved}
  106. AND {query_see_board}',
  107. array(
  108. 'message_list' => $toAction,
  109. 'not_approved' => 0,
  110. )
  111. );
  112. $toAction = array();
  113. $details = array();
  114. while ($row = $smcFunc['db_fetch_assoc']($request))
  115. {
  116. // If it's not within what our view is ignore it...
  117. if (($row['id_msg'] == $row['id_first_msg'] && $context['current_view'] != 'topics') || ($row['id_msg'] != $row['id_first_msg'] && $context['current_view'] != 'replies'))
  118. continue;
  119. $can_add = false;
  120. // If we're approving this is simple.
  121. if ($curAction == 'approve' && ($any_array == array(0) || in_array($row['id_board'], $any_array)))
  122. {
  123. $can_add = true;
  124. }
  125. // Delete requires more permission checks...
  126. elseif ($curAction == 'delete')
  127. {
  128. // Own post is easy!
  129. if ($row['id_member'] == $user_info['id'] && ($delete_own_boards == array(0) || in_array($row['id_board'], $delete_own_boards)))
  130. $can_add = true;
  131. // Is it a reply to their own topic?
  132. elseif ($row['id_member'] == $row['id_member_started'] && $row['id_msg'] != $row['id_first_msg'] && ($delete_own_replies == array(0) || in_array($row['id_board'], $delete_own_replies)))
  133. $can_add = true;
  134. // Someone elses?
  135. elseif ($row['id_member'] != $user_info['id'] && ($delete_any_boards == array(0) || in_array($row['id_board'], $delete_any_boards)))
  136. $can_add = true;
  137. }
  138. if ($can_add)
  139. $anItem = $context['current_view'] == 'topics' ? $row['id_topic'] : $row['id_msg'];
  140. $toAction[] = $anItem;
  141. // All clear. What have we got now, what, what?
  142. $details[$anItem] = array();
  143. $details[$anItem]["subject"] = $row['subject'];
  144. $details[$anItem]["topic"] = $row['id_topic'];
  145. $details[$anItem]["member"] = ($context['current_view'] == 'topics') ? $row['id_member_started'] : $row['id_member'];
  146. $details[$anItem]["board"] = $row['id_board'];
  147. }
  148. $smcFunc['db_free_result']($request);
  149. // If we have anything left we can actually do the approving (etc).
  150. if (!empty($toAction))
  151. {
  152. if ($curAction == 'approve')
  153. {
  154. approveMessages ($toAction, $details, $context['current_view']);
  155. }
  156. else
  157. {
  158. removeMessages ($toAction, $details, $context['current_view']);
  159. }
  160. }
  161. }
  162. // How many unapproved posts are there?
  163. $request = $smcFunc['db_query']('', '
  164. SELECT COUNT(*)
  165. FROM {db_prefix}messages AS m
  166. INNER JOIN {db_prefix}topics AS t ON (t.id_topic = m.id_topic AND t.id_first_msg != m.id_msg)
  167. INNER JOIN {db_prefix}boards AS b ON (b.id_board = t.id_board)
  168. WHERE m.approved = {int:not_approved}
  169. AND {query_see_board}
  170. ' . $approve_query,
  171. array(
  172. 'not_approved' => 0,
  173. )
  174. );
  175. list ($context['total_unapproved_posts']) = $smcFunc['db_fetch_row']($request);
  176. $smcFunc['db_free_result']($request);
  177. // What about topics? Normally we'd use the table alias t for topics but lets use m so we don't have to redo our approve query.
  178. $request = $smcFunc['db_query']('', '
  179. SELECT COUNT(m.id_topic)
  180. FROM {db_prefix}topics AS m
  181. INNER JOIN {db_prefix}boards AS b ON (b.id_board = m.id_board)
  182. WHERE m.approved = {int:not_approved}
  183. AND {query_see_board}
  184. ' . $approve_query,
  185. array(
  186. 'not_approved' => 0,
  187. )
  188. );
  189. list ($context['total_unapproved_topics']) = $smcFunc['db_fetch_row']($request);
  190. $smcFunc['db_free_result']($request);
  191. $context['page_index'] = constructPageIndex($scripturl . '?action=moderate;area=postmod;sa=' . $context['current_view'] . (isset($_REQUEST['brd']) ? ';brd=' . (int) $_REQUEST['brd'] : ''), $_GET['start'], $context['current_view'] == 'topics' ? $context['total_unapproved_topics'] : $context['total_unapproved_posts'], 10);
  192. $context['start'] = $_GET['start'];
  193. // We have enough to make some pretty tabs!
  194. $context[$context['moderation_menu_name']]['tab_data'] = array(
  195. 'title' => $txt['mc_unapproved_posts'],
  196. 'help' => 'postmod',
  197. 'description' => $txt['mc_unapproved_posts_desc'],
  198. );
  199. // Update the tabs with the correct number of posts.
  200. $context['menu_data_' . $context['moderation_menu_id']]['sections']['posts']['areas']['postmod']['subsections']['posts']['label'] .= ' (' . $context['total_unapproved_posts'] . ')';
  201. $context['menu_data_' . $context['moderation_menu_id']]['sections']['posts']['areas']['postmod']['subsections']['topics']['label'] .= ' (' . $context['total_unapproved_topics'] . ')';
  202. // If we are filtering some boards out then make sure to send that along with the links.
  203. if (isset($_REQUEST['brd']))
  204. {
  205. $context['menu_data_' . $context['moderation_menu_id']]['sections']['posts']['areas']['postmod']['subsections']['posts']['add_params'] = ';brd=' . (int) $_REQUEST['brd'];
  206. $context['menu_data_' . $context['moderation_menu_id']]['sections']['posts']['areas']['postmod']['subsections']['topics']['add_params'] = ';brd=' . (int) $_REQUEST['brd'];
  207. }
  208. // Get all unapproved posts.
  209. $request = $smcFunc['db_query']('', '
  210. SELECT m.id_msg, m.id_topic, m.id_board, m.subject, m.body, m.id_member,
  211. IFNULL(mem.real_name, m.poster_name) AS poster_name, m.poster_time, m.smileys_enabled,
  212. t.id_member_started, t.id_first_msg, b.name AS board_name, c.id_cat, c.name AS cat_name
  213. FROM {db_prefix}messages AS m
  214. INNER JOIN {db_prefix}topics AS t ON (t.id_topic = m.id_topic)
  215. INNER JOIN {db_prefix}boards AS b ON (b.id_board = m.id_board)
  216. LEFT JOIN {db_prefix}members AS mem ON (mem.id_member = m.id_member)
  217. LEFT JOIN {db_prefix}categories AS c ON (c.id_cat = b.id_cat)
  218. WHERE m.approved = {int:not_approved}
  219. AND t.id_first_msg ' . ($context['current_view'] == 'topics' ? '=' : '!=') . ' m.id_msg
  220. AND {query_see_board}
  221. ' . $approve_query . '
  222. LIMIT ' . $context['start'] . ', 10',
  223. array(
  224. 'not_approved' => 0,
  225. )
  226. );
  227. $context['unapproved_items'] = array();
  228. for ($i = 1; $row = $smcFunc['db_fetch_assoc']($request); $i++)
  229. {
  230. // Can delete is complicated, let's solve it first... is it their own post?
  231. if ($row['id_member'] == $user_info['id'] && ($delete_own_boards == array(0) || in_array($row['id_board'], $delete_own_boards)))
  232. $can_delete = true;
  233. // Is it a reply to their own topic?
  234. elseif ($row['id_member'] == $row['id_member_started'] && $row['id_msg'] != $row['id_first_msg'] && ($delete_own_replies == array(0) || in_array($row['id_board'], $delete_own_replies)))
  235. $can_delete = true;
  236. // Someone elses?
  237. elseif ($row['id_member'] != $user_info['id'] && ($delete_any_boards == array(0) || in_array($row['id_board'], $delete_any_boards)))
  238. $can_delete = true;
  239. else
  240. $can_delete = false;
  241. $context['unapproved_items'][] = array(
  242. 'id' => $row['id_msg'],
  243. 'alternate' => $i % 2,
  244. 'counter' => $context['start'] + $i,
  245. 'href' => $scripturl . '?topic=' . $row['id_topic'] . '.msg' . $row['id_msg'] . '#msg' . $row['id_msg'],
  246. 'link' => '<a href="' . $scripturl . '?topic=' . $row['id_topic'] . '.msg' . $row['id_msg'] . '#msg' . $row['id_msg'] . '">' . $row['subject'] . '</a>',
  247. 'subject' => $row['subject'],
  248. 'body' => parse_bbc($row['body'], $row['smileys_enabled'], $row['id_msg']),
  249. 'time' => timeformat($row['poster_time']),
  250. 'poster' => array(
  251. 'id' => $row['id_member'],
  252. 'name' => $row['poster_name'],
  253. 'link' => $row['id_member'] ? '<a href="' . $scripturl . '?action=profile;u=' . $row['id_member'] . '">' . $row['poster_name'] . '</a>' : $row['poster_name'],
  254. 'href' => $scripturl . '?action=profile;u=' . $row['id_member'],
  255. ),
  256. 'topic' => array(
  257. 'id' => $row['id_topic'],
  258. ),
  259. 'board' => array(
  260. 'id' => $row['id_board'],
  261. 'name' => $row['board_name'],
  262. 'link' => '<a href="' . $scripturl . '?board=' . $row['id_board'] . '.0">' . $row['board_name'] . '</a>',
  263. ),
  264. 'category' => array(
  265. 'id' => $row['id_cat'],
  266. 'name' => $row['cat_name'],
  267. 'link' => '<a href="' . $scripturl . '#c' . $row['id_cat'] . '">' . $row['cat_name'] . '</a>',
  268. ),
  269. 'can_delete' => $can_delete,
  270. );
  271. }
  272. $smcFunc['db_free_result']($request);
  273. $context['sub_template'] = 'unapproved_posts';
  274. }
  275. /**
  276. * View all unapproved attachments.
  277. */
  278. function UnapprovedAttachments()
  279. {
  280. global $txt, $scripturl, $context, $user_info, $sourcedir, $smcFunc, $modSettings;
  281. $context['page_title'] = $txt['mc_unapproved_attachments'];
  282. // Once again, permissions are king!
  283. $approve_boards = boardsAllowedTo('approve_posts');
  284. if ($approve_boards == array(0))
  285. $approve_query = '';
  286. elseif (!empty($approve_boards))
  287. $approve_query = ' AND m.id_board IN (' . implode(',', $approve_boards) . ')';
  288. else
  289. $approve_query = ' AND 1=0';
  290. // Get together the array of things to act on, if any.
  291. $attachments = array();
  292. if (isset($_GET['approve']))
  293. $attachments[] = (int) $_GET['approve'];
  294. elseif (isset($_GET['delete']))
  295. $attachments[] = (int) $_GET['delete'];
  296. elseif (isset($_POST['item']))
  297. foreach ($_POST['item'] as $item)
  298. $attachments[] = (int) $item;
  299. // Are we approving or deleting?
  300. if (isset($_GET['approve']) || (isset($_POST['do']) && $_POST['do'] == 'approve'))
  301. $curAction = 'approve';
  302. elseif (isset($_GET['delete']) || (isset($_POST['do']) && $_POST['do'] == 'delete'))
  303. $curAction = 'delete';
  304. // Something to do, let's do it!
  305. if (!empty($attachments) && isset($curAction))
  306. {
  307. checkSession('request');
  308. // This will be handy.
  309. require_once($sourcedir . '/ManageAttachments.php');
  310. // Confirm the attachments are eligible for changing!
  311. $request = $smcFunc['db_query']('', '
  312. SELECT a.id_attach
  313. FROM {db_prefix}attachments AS a
  314. INNER JOIN {db_prefix}messages AS m ON (m.id_msg = a.id_msg)
  315. LEFT JOIN {db_prefix}boards AS b ON (m.id_board = b.id_board)
  316. WHERE a.id_attach IN ({array_int:attachments})
  317. AND a.approved = {int:not_approved}
  318. AND a.attachment_type = {int:attachment_type}
  319. AND {query_see_board}
  320. ' . $approve_query,
  321. array(
  322. 'attachments' => $attachments,
  323. 'not_approved' => 0,
  324. 'attachment_type' => 0,
  325. )
  326. );
  327. $attachments = array();
  328. while ($row = $smcFunc['db_fetch_assoc']($request))
  329. $attachments[] = $row['id_attach'];
  330. $smcFunc['db_free_result']($request);
  331. // Assuming it wasn't all like, proper illegal, we can do the approving.
  332. if (!empty($attachments))
  333. {
  334. if ($curAction == 'approve')
  335. ApproveAttachments($attachments);
  336. else
  337. removeAttachments(array('id_attach' => $attachments, 'do_logging' => true));
  338. }
  339. }
  340. require_once($sourcedir . '/Subs-List.php');
  341. $listOptions = array(
  342. 'id' => 'mc_unapproved_attach',
  343. 'width' => '100%',
  344. 'items_per_page' => $modSettings['defaultMaxMessages'],
  345. 'no_items_label' => $txt['mc_unapproved_attachments_none_found'],
  346. 'base_href' => $scripturl . '?action=moderate;area=attachmod;sa=attachments',
  347. 'default_sort_col' => 'attach_name',
  348. 'get_items' => array(
  349. 'function' => 'list_getUnapprovedAttachments',
  350. 'params' => array(
  351. $approve_query,
  352. ),
  353. ),
  354. 'get_count' => array(
  355. 'function' => 'list_getNumUnapprovedAttachments',
  356. 'params' => array(
  357. $approve_query,
  358. ),
  359. ),
  360. 'columns' => array(
  361. 'attach_name' => array(
  362. 'header' => array(
  363. 'value' => $txt['mc_unapproved_attach_name'],
  364. ),
  365. 'data' => array(
  366. 'db' => 'filename',
  367. ),
  368. 'sort' => array(
  369. 'default' => 'a.filename',
  370. 'reverse' => 'a.filename DESC',
  371. ),
  372. ),
  373. 'attach_size' => array(
  374. 'header' => array(
  375. 'value' => $txt['mc_unapproved_attach_size'],
  376. ),
  377. 'data' => array(
  378. 'db' => 'size',
  379. ),
  380. 'sort' => array(
  381. 'default' => 'a.size',
  382. 'reverse' => 'a.size DESC',
  383. ),
  384. ),
  385. 'attach_poster' => array(
  386. 'header' => array(
  387. 'value' => $txt['mc_unapproved_attach_poster'],
  388. ),
  389. 'data' => array(
  390. 'function' => create_function('$data', '
  391. return $data[\'poster\'][\'link\'];'
  392. )
  393. ),
  394. 'sort' => array(
  395. 'default' => 'm.id_member',
  396. 'reverse' => 'm.id_member DESC',
  397. ),
  398. ),
  399. 'date' => array(
  400. 'header' => array(
  401. 'value' => $txt['date'],
  402. 'style' => 'width: 18%;',
  403. ),
  404. 'data' => array(
  405. 'db' => 'time',
  406. 'class' => 'smalltext',
  407. 'style' => 'white-space:nowrap;',
  408. ),
  409. 'sort' => array(
  410. 'default' => 'm.poster_time',
  411. 'reverse' => 'm.poster_time DESC',
  412. ),
  413. ),
  414. 'message' => array(
  415. 'header' => array(
  416. 'value' => $txt['post'],
  417. ),
  418. 'data' => array(
  419. 'function' => create_function('$data', '
  420. return \'<a href="\' . $data[\'message\'][\'href\'] . \'">\' . shorten_subject($data[\'message\'][\'subject\'], 20) . \'</a>\';'
  421. ),
  422. 'class' => 'smalltext',
  423. 'style' => 'width:15em;',
  424. ),
  425. 'sort' => array(
  426. 'default' => 'm.subject',
  427. 'reverse' => 'm.subject DESC',
  428. ),
  429. ),
  430. 'action' => array(
  431. 'header' => array(
  432. 'value' => '<input type="checkbox" class="input_check" onclick="invertAll(this, this.form);" checked="checked" />',
  433. 'style' => 'width: 4%;',
  434. 'class' => 'centercol',
  435. ),
  436. 'data' => array(
  437. 'sprintf' => array(
  438. 'format' => '<input type="checkbox" name="item[]" value="%1$d" checked="checked" class="input_check" />',
  439. 'params' => array(
  440. 'id' => false,
  441. ),
  442. ),
  443. 'class' => 'centercol',
  444. ),
  445. ),
  446. ),
  447. 'form' => array(
  448. 'href' => $scripturl . '?action=moderate;area=attachmod;sa=attachments',
  449. 'include_sort' => true,
  450. 'include_start' => true,
  451. 'hidden_fields' => array(
  452. $context['session_var'] => $context['session_id'],
  453. ),
  454. 'token' => 'mod-ap',
  455. ),
  456. 'additional_rows' => array(
  457. array(
  458. 'position' => 'bottom_of_list',
  459. 'value' => '
  460. <select name="do" onchange="if (this.value != 0 &amp;&amp; confirm(\'' . $txt['mc_unapproved_sure'] . '\')) submit();">
  461. <option value="0">' . $txt['with_selected'] . ':</option>
  462. <option value="0">-------------------</option>
  463. <option value="approve">&nbsp;--&nbsp;' . $txt['approve'] . '</option>
  464. <option value="delete">&nbsp;--&nbsp;' . $txt['delete'] . '</option>
  465. </select>
  466. <noscript><input type="submit" name="ml_go" value="' . $txt['go'] . '" class="button_submit" /></noscript>',
  467. 'align' => 'right',
  468. ),
  469. ),
  470. );
  471. // Create the request list.
  472. createToken('mod-ap');
  473. createList($listOptions);
  474. $context['sub_template'] = 'show_list';
  475. $context['default_list'] = 'mc_unapproved_attach';
  476. $context[$context['moderation_menu_name']]['tab_data'] = array(
  477. 'title' => $txt['mc_unapproved_attachments'],
  478. 'help' => '',
  479. 'description' => $txt['mc_unapproved_attachments_desc']
  480. );
  481. }
  482. /**
  483. * Callback function for UnapprovedAttachments
  484. * retrieve all the attachments waiting for approval the approver can approve
  485. *
  486. * @param int $start
  487. * @param int $items_per_page
  488. * @param string $sort
  489. * @param string $approve_query additional restrictions based on the boards the approver can see
  490. * @return array, an array of unapproved attachments
  491. */
  492. function list_getUnapprovedAttachments($start, $items_per_page, $sort, $approve_query)
  493. {
  494. global $smcFunc, $scripturl;
  495. // Get all unapproved attachments.
  496. $request = $smcFunc['db_query']('', '
  497. SELECT a.id_attach, a.filename, a.size, m.id_msg, m.id_topic, m.id_board, m.subject, m.body, m.id_member,
  498. IFNULL(mem.real_name, m.poster_name) AS poster_name, m.poster_time,
  499. t.id_member_started, t.id_first_msg, b.name AS board_name, c.id_cat, c.name AS cat_name
  500. FROM {db_prefix}attachments AS a
  501. INNER JOIN {db_prefix}messages AS m ON (m.id_msg = a.id_msg)
  502. INNER JOIN {db_prefix}topics AS t ON (t.id_topic = m.id_topic)
  503. INNER JOIN {db_prefix}boards AS b ON (b.id_board = m.id_board)
  504. LEFT JOIN {db_prefix}members AS mem ON (mem.id_member = m.id_member)
  505. LEFT JOIN {db_prefix}categories AS c ON (c.id_cat = b.id_cat)
  506. WHERE a.approved = {int:not_approved}
  507. AND a.attachment_type = {int:attachment_type}
  508. AND {query_see_board}
  509. {raw:approve_query}
  510. ORDER BY {raw:sort}
  511. LIMIT {int:start}, {int:items_per_page}',
  512. array(
  513. 'not_approved' => 0,
  514. 'attachment_type' => 0,
  515. 'start' => $start,
  516. 'sort' => $sort,
  517. 'items_per_page' => $items_per_page,
  518. 'approve_query' => $approve_query,
  519. )
  520. );
  521. $unapproved_items = array();
  522. while ($row = $smcFunc['db_fetch_assoc']($request))
  523. {
  524. $unapproved_items[] = array(
  525. 'id' => $row['id_attach'],
  526. 'filename' => $row['filename'],
  527. 'size' => round($row['size'] / 1024, 2),
  528. 'time' => timeformat($row['poster_time']),
  529. 'poster' => array(
  530. 'id' => $row['id_member'],
  531. 'name' => $row['poster_name'],
  532. 'link' => $row['id_member'] ? '<a href="' . $scripturl . '?action=profile;u=' . $row['id_member'] . '">' . $row['poster_name'] . '</a>' : $row['poster_name'],
  533. 'href' => $scripturl . '?action=profile;u=' . $row['id_member'],
  534. ),
  535. 'message' => array(
  536. 'id' => $row['id_msg'],
  537. 'subject' => $row['subject'],
  538. 'body' => parse_bbc($row['body']),
  539. 'time' => timeformat($row['poster_time']),
  540. 'href' => $scripturl . '?topic=' . $row['id_topic'] . '.msg' . $row['id_msg'] . '#msg' . $row['id_msg'],
  541. ),
  542. 'topic' => array(
  543. 'id' => $row['id_topic'],
  544. ),
  545. 'board' => array(
  546. 'id' => $row['id_board'],
  547. 'name' => $row['board_name'],
  548. ),
  549. 'category' => array(
  550. 'id' => $row['id_cat'],
  551. 'name' => $row['cat_name'],
  552. ),
  553. );
  554. }
  555. $smcFunc['db_free_result']($request);
  556. return $unapproved_items;
  557. }
  558. /**
  559. * Callback function for UnapprovedAttachments
  560. * count all the attachments waiting for approval that this approver can approve
  561. *
  562. * @param string $approve_query additional restrictions based on the boards the approver can see
  563. * @return int the number of unapproved attachments
  564. */
  565. function list_getNumUnapprovedAttachments($approve_query)
  566. {
  567. global $smcFunc;
  568. // How many unapproved attachments in total?
  569. $request = $smcFunc['db_query']('', '
  570. SELECT COUNT(*)
  571. FROM {db_prefix}attachments AS a
  572. INNER JOIN {db_prefix}messages AS m ON (m.id_msg = a.id_msg)
  573. INNER JOIN {db_prefix}boards AS b ON (b.id_board = m.id_board)
  574. WHERE a.approved = {int:not_approved}
  575. AND a.attachment_type = {int:attachment_type}
  576. AND {query_see_board}
  577. ' . $approve_query,
  578. array(
  579. 'not_approved' => 0,
  580. 'attachment_type' => 0,
  581. )
  582. );
  583. list ($total_unapproved_attachments) = $smcFunc['db_fetch_row']($request);
  584. $smcFunc['db_free_result']($request);
  585. return $total_unapproved_attachments;
  586. }
  587. /**
  588. * Approve a post, just the one.
  589. */
  590. function ApproveMessage()
  591. {
  592. global $user_info, $topic, $board, $sourcedir, $smcFunc;
  593. checkSession('get');
  594. $_REQUEST['msg'] = (int) $_REQUEST['msg'];
  595. require_once($sourcedir . '/Subs-Post.php');
  596. isAllowedTo('approve_posts');
  597. $request = $smcFunc['db_query']('', '
  598. SELECT t.id_member_started, t.id_first_msg, m.id_member, m.subject, m.approved
  599. FROM {db_prefix}messages AS m
  600. INNER JOIN {db_prefix}topics AS t ON (t.id_topic = {int:current_topic})
  601. WHERE m.id_msg = {int:id_msg}
  602. AND m.id_topic = {int:current_topic}
  603. LIMIT 1',
  604. array(
  605. 'current_topic' => $topic,
  606. 'id_msg' => $_REQUEST['msg'],
  607. )
  608. );
  609. list ($starter, $first_msg, $poster, $subject, $approved) = $smcFunc['db_fetch_row']($request);
  610. $smcFunc['db_free_result']($request);
  611. // If it's the first in a topic then the whole topic gets approved!
  612. if ($first_msg == $_REQUEST['msg'])
  613. {
  614. approveTopics($topic, !$approved);
  615. if ($starter != $user_info['id'])
  616. logAction(($approved ? 'un' : '') . 'approve_topic', array('topic' => $topic, 'subject' => $subject, 'member' => $starter, 'board' => $board));
  617. }
  618. else
  619. {
  620. approvePosts($_REQUEST['msg'], !$approved);
  621. if ($poster != $user_info['id'])
  622. logAction(($approved ? 'un' : '') . 'approve', array('topic' => $topic, 'subject' => $subject, 'member' => $poster, 'board' => $board));
  623. }
  624. redirectexit('topic=' . $topic . '.msg' . $_REQUEST['msg']. '#msg' . $_REQUEST['msg']);
  625. }
  626. /**
  627. * Approve a batch of posts (or topics in their own right)
  628. *
  629. * @param array $messages
  630. * @param array $messageDetails
  631. * @param (string) $current_view = replies
  632. */
  633. function approveMessages($messages, $messageDetails, $current_view = 'replies')
  634. {
  635. global $sourcedir;
  636. require_once($sourcedir . '/Subs-Post.php');
  637. if ($current_view == 'topics')
  638. {
  639. approveTopics($messages);
  640. // and tell the world about it
  641. foreach ($messages as $topic)
  642. {
  643. logAction('approve_topic', array('topic' => $topic, 'subject' => $messageDetails[$topic]['subject'], 'member' => $messageDetails[$topic]['member'], 'board' => $messageDetails[$topic]['board']));
  644. }
  645. }
  646. else
  647. {
  648. approvePosts($messages);
  649. // and tell the world about it again
  650. foreach ($messages as $post)
  651. {
  652. logAction('approve', array('topic' => $messageDetails[$post]['topic'], 'subject' => $messageDetails[$post]['subject'], 'member' => $messageDetails[$post]['member'], 'board' => $messageDetails[$post]['board']));
  653. }
  654. }
  655. }
  656. /**
  657. * This is a helper function - basically approve everything!
  658. */
  659. function approveAllData()
  660. {
  661. global $smcFunc, $sourcedir;
  662. // Start with messages and topics.
  663. $request = $smcFunc['db_query']('', '
  664. SELECT id_msg
  665. FROM {db_prefix}messages
  666. WHERE approved = {int:not_approved}',
  667. array(
  668. 'not_approved' => 0,
  669. )
  670. );
  671. $msgs = array();
  672. while ($row = $smcFunc['db_fetch_row']($request))
  673. $msgs[] = $row[0];
  674. $smcFunc['db_free_result']($request);
  675. if (!empty($msgs))
  676. {
  677. require_once($sourcedir . '/Subs-Post.php');
  678. approvePosts($msgs);
  679. }
  680. // Now do attachments
  681. $request = $smcFunc['db_query']('', '
  682. SELECT id_attach
  683. FROM {db_prefix}attachments
  684. WHERE approved = {int:not_approved}',
  685. array(
  686. 'not_approved' => 0,
  687. )
  688. );
  689. $attaches = array();
  690. while ($row = $smcFunc['db_fetch_row']($request))
  691. $attaches[] = $row[0];
  692. $smcFunc['db_free_result']($request);
  693. if (!empty($attaches))
  694. {
  695. require_once($sourcedir . '/ManageAttachments.php');
  696. ApproveAttachments($attaches);
  697. }
  698. }
  699. /**
  700. * Remove a batch of messages (or topics)
  701. *
  702. * @param array $messages
  703. * @param array $messageDetails
  704. * @param string $current_view = replies
  705. */
  706. function removeMessages($messages, $messageDetails, $current_view = 'replies')
  707. {
  708. global $sourcedir, $modSettings;
  709. // @todo something's not right, removeMessage() does check permissions,
  710. // removeTopics() doesn't
  711. require_once($sourcedir . '/RemoveTopic.php');
  712. if ($current_view == 'topics')
  713. {
  714. removeTopics($messages);
  715. // and tell the world about it
  716. foreach ($messages as $topic)
  717. // Note, only log topic ID in native form if it's not gone forever.
  718. logAction('remove', array(
  719. (empty($modSettings['recycle_enable']) || $modSettings['recycle_board'] != $messageDetails[$topic]['board'] ? 'topic' : 'old_topic_id') => $topic, 'subject' => $messageDetails[$topic]['subject'], 'member' => $messageDetails[$topic]['member'], 'board' => $messageDetails[$topic]['board']));
  720. }
  721. else
  722. {
  723. foreach ($messages as $post)
  724. {
  725. removeMessage($post);
  726. logAction('delete', array(
  727. (empty($modSettings['recycle_enable']) || $modSettings['recycle_board'] != $messageDetails[$post]['board'] ? 'topic' : 'old_topic_id') => $messageDetails[$post]['topic'], 'subject' => $messageDetails[$post]['subject'], 'member' => $messageDetails[$post]['member'], 'board' => $messageDetails[$post]['board']));
  728. }
  729. }
  730. }
  731. ?>