PostModeration.php 26 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797
  1. <?php
  2. /**
  3. * This file's job is to handle things related to post moderation.
  4. *
  5. * Simple Machines Forum (SMF)
  6. *
  7. * @package SMF
  8. * @author Simple Machines http://www.simplemachines.org
  9. * @copyright 2012 Simple Machines Forum contributors
  10. * @license http://www.simplemachines.org/about/smf/license.php BSD
  11. *
  12. * @version 2.1 Alpha 1
  13. */
  14. if (!defined('SMF'))
  15. die('Hacking attempt...');
  16. /**
  17. * This is a handling function for all things post moderation.
  18. */
  19. function PostModerationMain()
  20. {
  21. global $sourcedir;
  22. // @todo We'll shift these later bud.
  23. loadLanguage('ModerationCenter');
  24. loadTemplate('ModerationCenter');
  25. // Probably need this...
  26. require_once($sourcedir . '/ModerationCenter.php');
  27. // Allowed sub-actions, you know the drill by now!
  28. $subactions = array(
  29. 'approve' => 'ApproveMessage',
  30. 'attachments' => 'UnapprovedAttachments',
  31. 'replies' => 'UnapprovedPosts',
  32. 'topics' => 'UnapprovedPosts',
  33. );
  34. // Pick something valid...
  35. if (!isset($_REQUEST['sa']) || !isset($subactions[$_REQUEST['sa']]))
  36. $_REQUEST['sa'] = 'replies';
  37. $subactions[$_REQUEST['sa']]();
  38. }
  39. /**
  40. * View all unapproved posts.
  41. */
  42. function UnapprovedPosts()
  43. {
  44. global $txt, $scripturl, $context, $user_info, $smcFunc;
  45. $context['current_view'] = isset($_GET['sa']) && $_GET['sa'] == 'topics' ? 'topics' : 'replies';
  46. $context['page_title'] = $txt['mc_unapproved_posts'];
  47. // Work out what boards we can work in!
  48. $approve_boards = boardsAllowedTo('approve_posts');
  49. // If we filtered by board remove ones outside of this board.
  50. // @todo Put a message saying we're filtered?
  51. if (isset($_REQUEST['brd']))
  52. {
  53. $filter_board = array((int) $_REQUEST['brd']);
  54. $approve_boards = $approve_boards == array(0) ? $filter_board : array_intersect($approve_boards, $filter_board);
  55. }
  56. if ($approve_boards == array(0))
  57. $approve_query = '';
  58. elseif (!empty($approve_boards))
  59. $approve_query = ' AND m.id_board IN (' . implode(',', $approve_boards) . ')';
  60. // Nada, zip, etc...
  61. else
  62. $approve_query = ' AND 0';
  63. // We also need to know where we can delete topics and/or replies to.
  64. if ($context['current_view'] == 'topics')
  65. {
  66. $delete_own_boards = boardsAllowedTo('remove_own');
  67. $delete_any_boards = boardsAllowedTo('remove_any');
  68. $delete_own_replies = array();
  69. }
  70. else
  71. {
  72. $delete_own_boards = boardsAllowedTo('delete_own');
  73. $delete_any_boards = boardsAllowedTo('delete_any');
  74. $delete_own_replies = boardsAllowedTo('delete_own_replies');
  75. }
  76. $toAction = array();
  77. // Check if we have something to do?
  78. if (isset($_GET['approve']))
  79. $toAction[] = (int) $_GET['approve'];
  80. // Just a deletion?
  81. elseif (isset($_GET['delete']))
  82. $toAction[] = (int) $_GET['delete'];
  83. // Lots of approvals?
  84. elseif (isset($_POST['item']))
  85. foreach ($_POST['item'] as $item)
  86. $toAction[] = (int) $item;
  87. // What are we actually doing.
  88. if (isset($_GET['approve']) || (isset($_POST['do']) && $_POST['do'] == 'approve'))
  89. $curAction = 'approve';
  90. elseif (isset($_GET['delete']) || (isset($_POST['do']) && $_POST['do'] == 'delete'))
  91. $curAction = 'delete';
  92. // Right, so we have something to do?
  93. if (!empty($toAction) && isset($curAction))
  94. {
  95. checkSession('request');
  96. // Handy shortcut.
  97. $any_array = $curAction == 'approve' ? $approve_boards : $delete_any_boards;
  98. // Now for each message work out whether it's actually a topic, and what board it's on.
  99. $request = $smcFunc['db_query']('', '
  100. SELECT m.id_msg, m.id_member, m.id_board, m.subject, t.id_topic, t.id_first_msg, t.id_member_started
  101. FROM {db_prefix}messages AS m
  102. INNER JOIN {db_prefix}topics AS t ON (t.id_topic = m.id_topic)
  103. LEFT JOIN {db_prefix}boards AS b ON (t.id_board = b.id_board)
  104. WHERE m.id_msg IN ({array_int:message_list})
  105. AND m.approved = {int:not_approved}
  106. AND {query_see_board}',
  107. array(
  108. 'message_list' => $toAction,
  109. 'not_approved' => 0,
  110. )
  111. );
  112. $toAction = array();
  113. $details = array();
  114. while ($row = $smcFunc['db_fetch_assoc']($request))
  115. {
  116. // If it's not within what our view is ignore it...
  117. if (($row['id_msg'] == $row['id_first_msg'] && $context['current_view'] != 'topics') || ($row['id_msg'] != $row['id_first_msg'] && $context['current_view'] != 'replies'))
  118. continue;
  119. $can_add = false;
  120. // If we're approving this is simple.
  121. if ($curAction == 'approve' && ($any_array == array(0) || in_array($row['id_board'], $any_array)))
  122. {
  123. $can_add = true;
  124. }
  125. // Delete requires more permission checks...
  126. elseif ($curAction == 'delete')
  127. {
  128. // Own post is easy!
  129. if ($row['id_member'] == $user_info['id'] && ($delete_own_boards == array(0) || in_array($row['id_board'], $delete_own_boards)))
  130. $can_add = true;
  131. // Is it a reply to their own topic?
  132. elseif ($row['id_member'] == $row['id_member_started'] && $row['id_msg'] != $row['id_first_msg'] && ($delete_own_replies == array(0) || in_array($row['id_board'], $delete_own_replies)))
  133. $can_add = true;
  134. // Someone elses?
  135. elseif ($row['id_member'] != $user_info['id'] && ($delete_any_boards == array(0) || in_array($row['id_board'], $delete_any_boards)))
  136. $can_add = true;
  137. }
  138. if ($can_add)
  139. $anItem = $context['current_view'] == 'topics' ? $row['id_topic'] : $row['id_msg'];
  140. $toAction[] = $anItem;
  141. // All clear. What have we got now, what, what?
  142. $details[$anItem] = array();
  143. $details[$anItem]["subject"] = $row['subject'];
  144. $details[$anItem]["topic"] = $row['id_topic'];
  145. $details[$anItem]["member"] = ($context['current_view'] == 'topics') ? $row['id_member_started'] : $row['id_member'];
  146. $details[$anItem]["board"] = $row['id_board'];
  147. }
  148. $smcFunc['db_free_result']($request);
  149. // If we have anything left we can actually do the approving (etc).
  150. if (!empty($toAction))
  151. {
  152. if ($curAction == 'approve')
  153. {
  154. approveMessages ($toAction, $details, $context['current_view']);
  155. }
  156. else
  157. {
  158. removeMessages ($toAction, $details, $context['current_view']);
  159. }
  160. }
  161. }
  162. // How many unapproved posts are there?
  163. $request = $smcFunc['db_query']('', '
  164. SELECT COUNT(*)
  165. FROM {db_prefix}messages AS m
  166. INNER JOIN {db_prefix}topics AS t ON (t.id_topic = m.id_topic AND t.id_first_msg != m.id_msg)
  167. INNER JOIN {db_prefix}boards AS b ON (b.id_board = t.id_board)
  168. WHERE m.approved = {int:not_approved}
  169. AND {query_see_board}
  170. ' . $approve_query,
  171. array(
  172. 'not_approved' => 0,
  173. )
  174. );
  175. list ($context['total_unapproved_posts']) = $smcFunc['db_fetch_row']($request);
  176. $smcFunc['db_free_result']($request);
  177. // What about topics? Normally we'd use the table alias t for topics but lets use m so we don't have to redo our approve query.
  178. $request = $smcFunc['db_query']('', '
  179. SELECT COUNT(m.id_topic)
  180. FROM {db_prefix}topics AS m
  181. INNER JOIN {db_prefix}boards AS b ON (b.id_board = m.id_board)
  182. WHERE m.approved = {int:not_approved}
  183. AND {query_see_board}
  184. ' . $approve_query,
  185. array(
  186. 'not_approved' => 0,
  187. )
  188. );
  189. list ($context['total_unapproved_topics']) = $smcFunc['db_fetch_row']($request);
  190. $smcFunc['db_free_result']($request);
  191. $context['page_index'] = constructPageIndex($scripturl . '?action=moderate;area=postmod;sa=' . $context['current_view'] . (isset($_REQUEST['brd']) ? ';brd=' . (int) $_REQUEST['brd'] : ''), $_GET['start'], $context['current_view'] == 'topics' ? $context['total_unapproved_topics'] : $context['total_unapproved_posts'], 10);
  192. $context['start'] = $_GET['start'];
  193. // We have enough to make some pretty tabs!
  194. $context[$context['moderation_menu_name']]['tab_data'] = array(
  195. 'title' => $txt['mc_unapproved_posts'],
  196. 'help' => 'postmod',
  197. 'description' => $txt['mc_unapproved_posts_desc'],
  198. );
  199. // Update the tabs with the correct number of posts.
  200. $context['menu_data_' . $context['moderation_menu_id']]['sections']['posts']['areas']['postmod']['subsections']['posts']['label'] .= ' (' . $context['total_unapproved_posts'] . ')';
  201. $context['menu_data_' . $context['moderation_menu_id']]['sections']['posts']['areas']['postmod']['subsections']['topics']['label'] .= ' (' . $context['total_unapproved_topics'] . ')';
  202. // If we are filtering some boards out then make sure to send that along with the links.
  203. if (isset($_REQUEST['brd']))
  204. {
  205. $context['menu_data_' . $context['moderation_menu_id']]['sections']['posts']['areas']['postmod']['subsections']['posts']['add_params'] = ';brd=' . (int) $_REQUEST['brd'];
  206. $context['menu_data_' . $context['moderation_menu_id']]['sections']['posts']['areas']['postmod']['subsections']['topics']['add_params'] = ';brd=' . (int) $_REQUEST['brd'];
  207. }
  208. // Get all unapproved posts.
  209. $request = $smcFunc['db_query']('', '
  210. SELECT m.id_msg, m.id_topic, m.id_board, m.subject, m.body, m.id_member,
  211. IFNULL(mem.real_name, m.poster_name) AS poster_name, m.poster_time, m.smileys_enabled,
  212. t.id_member_started, t.id_first_msg, b.name AS board_name, c.id_cat, c.name AS cat_name
  213. FROM {db_prefix}messages AS m
  214. INNER JOIN {db_prefix}topics AS t ON (t.id_topic = m.id_topic)
  215. INNER JOIN {db_prefix}boards AS b ON (b.id_board = m.id_board)
  216. LEFT JOIN {db_prefix}members AS mem ON (mem.id_member = m.id_member)
  217. LEFT JOIN {db_prefix}categories AS c ON (c.id_cat = b.id_cat)
  218. WHERE m.approved = {int:not_approved}
  219. AND t.id_first_msg ' . ($context['current_view'] == 'topics' ? '=' : '!=') . ' m.id_msg
  220. AND {query_see_board}
  221. ' . $approve_query . '
  222. LIMIT ' . $context['start'] . ', 10',
  223. array(
  224. 'not_approved' => 0,
  225. )
  226. );
  227. $context['unapproved_items'] = array();
  228. for ($i = 1; $row = $smcFunc['db_fetch_assoc']($request); $i++)
  229. {
  230. // Can delete is complicated, let's solve it first... is it their own post?
  231. if ($row['id_member'] == $user_info['id'] && ($delete_own_boards == array(0) || in_array($row['id_board'], $delete_own_boards)))
  232. $can_delete = true;
  233. // Is it a reply to their own topic?
  234. elseif ($row['id_member'] == $row['id_member_started'] && $row['id_msg'] != $row['id_first_msg'] && ($delete_own_replies == array(0) || in_array($row['id_board'], $delete_own_replies)))
  235. $can_delete = true;
  236. // Someone elses?
  237. elseif ($row['id_member'] != $user_info['id'] && ($delete_any_boards == array(0) || in_array($row['id_board'], $delete_any_boards)))
  238. $can_delete = true;
  239. else
  240. $can_delete = false;
  241. $context['unapproved_items'][] = array(
  242. 'id' => $row['id_msg'],
  243. 'alternate' => $i % 2,
  244. 'counter' => $context['start'] + $i,
  245. 'href' => $scripturl . '?topic=' . $row['id_topic'] . '.msg' . $row['id_msg'] . '#msg' . $row['id_msg'],
  246. 'link' => '<a href="' . $scripturl . '?topic=' . $row['id_topic'] . '.msg' . $row['id_msg'] . '#msg' . $row['id_msg'] . '">' . $row['subject'] . '</a>',
  247. 'subject' => $row['subject'],
  248. 'body' => parse_bbc($row['body'], $row['smileys_enabled'], $row['id_msg']),
  249. 'time' => timeformat($row['poster_time']),
  250. 'poster' => array(
  251. 'id' => $row['id_member'],
  252. 'name' => $row['poster_name'],
  253. 'link' => $row['id_member'] ? '<a href="' . $scripturl . '?action=profile;u=' . $row['id_member'] . '">' . $row['poster_name'] . '</a>' : $row['poster_name'],
  254. 'href' => $scripturl . '?action=profile;u=' . $row['id_member'],
  255. ),
  256. 'topic' => array(
  257. 'id' => $row['id_topic'],
  258. ),
  259. 'board' => array(
  260. 'id' => $row['id_board'],
  261. 'name' => $row['board_name'],
  262. 'link' => '<a href="' . $scripturl . '?board=' . $row['id_board'] . '.0">' . $row['board_name'] . '</a>',
  263. ),
  264. 'category' => array(
  265. 'id' => $row['id_cat'],
  266. 'name' => $row['cat_name'],
  267. 'link' => '<a href="', $scripturl, '#c', $row['id_cat'], '">', $row['cat_name'], '</a>',
  268. ),
  269. 'can_delete' => $can_delete,
  270. );
  271. }
  272. $smcFunc['db_free_result']($request);
  273. $context['sub_template'] = 'unapproved_posts';
  274. }
  275. /**
  276. * View all unapproved attachments.
  277. */
  278. function UnapprovedAttachments()
  279. {
  280. global $txt, $scripturl, $context, $user_info, $sourcedir, $smcFunc, $modSettings;
  281. $context['page_title'] = $txt['mc_unapproved_attachments'];
  282. // Once again, permissions are king!
  283. $approve_boards = boardsAllowedTo('approve_posts');
  284. if ($approve_boards == array(0))
  285. $approve_query = '';
  286. elseif (!empty($approve_boards))
  287. $approve_query = ' AND m.id_board IN (' . implode(',', $approve_boards) . ')';
  288. else
  289. $approve_query = ' AND 0';
  290. // Get together the array of things to act on, if any.
  291. $attachments = array();
  292. if (isset($_GET['approve']))
  293. $attachments[] = (int) $_GET['approve'];
  294. elseif (isset($_GET['delete']))
  295. $attachments[] = (int) $_GET['delete'];
  296. elseif (isset($_POST['item']))
  297. foreach ($_POST['item'] as $item)
  298. $attachments[] = (int) $item;
  299. // Are we approving or deleting?
  300. if (isset($_GET['approve']) || (isset($_POST['do']) && $_POST['do'] == 'approve'))
  301. $curAction = 'approve';
  302. elseif (isset($_GET['delete']) || (isset($_POST['do']) && $_POST['do'] == 'delete'))
  303. $curAction = 'delete';
  304. // Something to do, let's do it!
  305. if (!empty($attachments) && isset($curAction))
  306. {
  307. checkSession('request');
  308. // This will be handy.
  309. require_once($sourcedir . '/ManageAttachments.php');
  310. // Confirm the attachments are eligible for changing!
  311. $request = $smcFunc['db_query']('', '
  312. SELECT a.id_attach
  313. FROM {db_prefix}attachments AS a
  314. INNER JOIN {db_prefix}messages AS m ON (m.id_msg = a.id_msg)
  315. LEFT JOIN {db_prefix}boards AS b ON (m.id_board = b.id_board)
  316. WHERE a.id_attach IN ({array_int:attachments})
  317. AND a.approved = {int:not_approved}
  318. AND a.attachment_type = {int:attachment_type}
  319. AND {query_see_board}
  320. ' . $approve_query,
  321. array(
  322. 'attachments' => $attachments,
  323. 'not_approved' => 0,
  324. 'attachment_type' => 0,
  325. )
  326. );
  327. $attachments = array();
  328. while ($row = $smcFunc['db_fetch_assoc']($request))
  329. $attachments[] = $row['id_attach'];
  330. $smcFunc['db_free_result']($request);
  331. // Assuming it wasn't all like, proper illegal, we can do the approving.
  332. if (!empty($attachments))
  333. {
  334. if ($curAction == 'approve')
  335. ApproveAttachments($attachments);
  336. else
  337. removeAttachments(array('id_attach' => $attachments, 'do_logging' => true));
  338. }
  339. }
  340. require_once($sourcedir . '/Subs-List.php');
  341. $listOptions = array(
  342. 'id' => 'mc_unapproved_attach',
  343. 'width' => '100%',
  344. 'items_per_page' => $modSettings['defaultMaxMessages'],
  345. 'no_items_label' => $txt['mc_unapproved_attachments_none_found'],
  346. 'base_href' => $scripturl . '?action=moderate;area=attachmod;sa=attachments',
  347. 'default_sort_col' => 'attach_name',
  348. 'get_items' => array(
  349. 'function' => 'list_getUnapprovedAttachments',
  350. 'params' => array(
  351. $approve_query,
  352. ),
  353. ),
  354. 'get_count' => array(
  355. 'function' => 'list_getNumUnapprovedAttachments',
  356. 'params' => array(
  357. $approve_query,
  358. ),
  359. ),
  360. 'columns' => array(
  361. 'attach_name' => array(
  362. 'header' => array(
  363. 'value' => $txt['mc_unapproved_attach_name'],
  364. ),
  365. 'data' => array(
  366. 'db' => 'filename',
  367. ),
  368. 'sort' => array(
  369. 'default' => 'a.filename',
  370. 'reverse' => 'a.filename DESC',
  371. ),
  372. ),
  373. 'attach_size' => array(
  374. 'header' => array(
  375. 'value' => $txt['mc_unapproved_attach_size'],
  376. ),
  377. 'data' => array(
  378. 'db' => 'size',
  379. ),
  380. 'sort' => array(
  381. 'default' => 'a.size',
  382. 'reverse' => 'a.size DESC',
  383. ),
  384. ),
  385. 'attach_poster' => array(
  386. 'header' => array(
  387. 'value' => $txt['mc_unapproved_attach_poster'],
  388. ),
  389. 'data' => array(
  390. 'function' => create_function('$data', '
  391. return $data[\'poster\'][\'link\'];'
  392. )
  393. ),
  394. 'sort' => array(
  395. 'default' => 'm.id_member',
  396. 'reverse' => 'm.id_member DESC',
  397. ),
  398. ),
  399. 'date' => array(
  400. 'header' => array(
  401. 'value' => $txt['date'],
  402. 'style' => 'width: 18%;',
  403. ),
  404. 'data' => array(
  405. 'db' => 'time',
  406. 'class' => 'smalltext',
  407. 'style' => 'white-space:nowrap;',
  408. ),
  409. 'sort' => array(
  410. 'default' => 'm.poster_time',
  411. 'reverse' => 'm.poster_time DESC',
  412. ),
  413. ),
  414. 'message' => array(
  415. 'header' => array(
  416. 'value' => $txt['post'],
  417. ),
  418. 'data' => array(
  419. 'function' => create_function('$data', '
  420. return \'<a href="\' . $data[\'message\'][\'href\'] . \'">\' . shorten_subject($data[\'message\'][\'subject\'], 20) . \'</a>\';'
  421. ),
  422. 'class' => 'smalltext',
  423. 'style' => 'width:15em;',
  424. ),
  425. 'sort' => array(
  426. 'default' => 'm.subject',
  427. 'reverse' => 'm.subject DESC',
  428. ),
  429. ),
  430. 'action' => array(
  431. 'header' => array(
  432. 'value' => '<input type="checkbox" class="input_check" onclick="invertAll(this, this.form);" checked="checked" />',
  433. 'style' => 'width: 4%;',
  434. 'class' => 'centercol',
  435. ),
  436. 'data' => array(
  437. 'sprintf' => array(
  438. 'format' => '<input type="checkbox" name="item[]" value="%1$d" checked="checked" class="input_check" />',
  439. 'params' => array(
  440. 'id' => false,
  441. ),
  442. ),
  443. 'class' => 'centercol',
  444. ),
  445. ),
  446. ),
  447. 'form' => array(
  448. 'href' => $scripturl . '?action=moderate;area=attachmod;sa=attachments',
  449. 'include_sort' => true,
  450. 'include_start' => true,
  451. 'hidden_fields' => array(
  452. $context['session_var'] => $context['session_id'],
  453. ),
  454. 'token' => 'mod-ap',
  455. ),
  456. 'additional_rows' => array(
  457. array(
  458. 'position' => 'bottom_of_list',
  459. 'value' => '
  460. <select name="do" onchange="if (this.value != 0 &amp;&amp; confirm(\'' . $txt['mc_unapproved_sure'] . '\')) submit();">
  461. <option value="0">' . $txt['with_selected'] . ':</option>
  462. <option value="0">-------------------</option>
  463. <option value="approve">&nbsp;--&nbsp;' . $txt['approve'] . '</option>
  464. <option value="delete">&nbsp;--&nbsp;' . $txt['delete'] . '</option>
  465. </select>
  466. <noscript><input type="submit" name="ml_go" value="' . $txt['go'] . '" class="button_submit" /></noscript>',
  467. 'align' => 'right',
  468. ),
  469. ),
  470. );
  471. // Create the request list.
  472. createToken('mod-ap');
  473. createList($listOptions);
  474. $context['sub_template'] = 'unapproved_attachments';
  475. }
  476. /**
  477. * Callback function for UnapprovedAttachments
  478. * retrieve all the attachments waiting for approval the approver can approve
  479. *
  480. * @param int $start
  481. * @param int $items_per_page
  482. * @param string $sort
  483. * @param string $approve_query additional restrictions based on the boards the approver can see
  484. * @return array, an array of unapproved attachments
  485. */
  486. function list_getUnapprovedAttachments($start, $items_per_page, $sort, $approve_query)
  487. {
  488. global $smcFunc, $scripturl;
  489. // Get all unapproved attachments.
  490. $request = $smcFunc['db_query']('', '
  491. SELECT a.id_attach, a.filename, a.size, m.id_msg, m.id_topic, m.id_board, m.subject, m.body, m.id_member,
  492. IFNULL(mem.real_name, m.poster_name) AS poster_name, m.poster_time,
  493. t.id_member_started, t.id_first_msg, b.name AS board_name, c.id_cat, c.name AS cat_name
  494. FROM {db_prefix}attachments AS a
  495. INNER JOIN {db_prefix}messages AS m ON (m.id_msg = a.id_msg)
  496. INNER JOIN {db_prefix}topics AS t ON (t.id_topic = m.id_topic)
  497. INNER JOIN {db_prefix}boards AS b ON (b.id_board = m.id_board)
  498. LEFT JOIN {db_prefix}members AS mem ON (mem.id_member = m.id_member)
  499. LEFT JOIN {db_prefix}categories AS c ON (c.id_cat = b.id_cat)
  500. WHERE a.approved = {int:not_approved}
  501. AND a.attachment_type = {int:attachment_type}
  502. AND {query_see_board}
  503. {raw:approve_query}
  504. ORDER BY {raw:sort}
  505. LIMIT {int:start}, {int:items_per_page}',
  506. array(
  507. 'not_approved' => 0,
  508. 'attachment_type' => 0,
  509. 'start' => $start,
  510. 'sort' => $sort,
  511. 'items_per_page' => $items_per_page,
  512. 'approve_query' => $approve_query,
  513. )
  514. );
  515. $unapproved_items = array();
  516. while ($row = $smcFunc['db_fetch_assoc']($request))
  517. {
  518. $unapproved_items[] = array(
  519. 'id' => $row['id_attach'],
  520. 'filename' => $row['filename'],
  521. 'size' => round($row['size'] / 1024, 2),
  522. 'time' => timeformat($row['poster_time']),
  523. 'poster' => array(
  524. 'id' => $row['id_member'],
  525. 'name' => $row['poster_name'],
  526. 'link' => $row['id_member'] ? '<a href="' . $scripturl . '?action=profile;u=' . $row['id_member'] . '">' . $row['poster_name'] . '</a>' : $row['poster_name'],
  527. 'href' => $scripturl . '?action=profile;u=' . $row['id_member'],
  528. ),
  529. 'message' => array(
  530. 'id' => $row['id_msg'],
  531. 'subject' => $row['subject'],
  532. 'body' => parse_bbc($row['body']),
  533. 'time' => timeformat($row['poster_time']),
  534. 'href' => $scripturl . '?topic=' . $row['id_topic'] . '.msg' . $row['id_msg'] . '#msg' . $row['id_msg'],
  535. ),
  536. 'topic' => array(
  537. 'id' => $row['id_topic'],
  538. ),
  539. 'board' => array(
  540. 'id' => $row['id_board'],
  541. 'name' => $row['board_name'],
  542. ),
  543. 'category' => array(
  544. 'id' => $row['id_cat'],
  545. 'name' => $row['cat_name'],
  546. ),
  547. );
  548. }
  549. $smcFunc['db_free_result']($request);
  550. return $unapproved_items;
  551. }
  552. /**
  553. * Callback function for UnapprovedAttachments
  554. * count all the attachments waiting for approval that this approver can approve
  555. *
  556. * @param string $approve_query additional restrictions based on the boards the approver can see
  557. * @return int the number of unapproved attachments
  558. */
  559. function list_getNumUnapprovedAttachments($approve_query)
  560. {
  561. global $smcFunc;
  562. // How many unapproved attachments in total?
  563. $request = $smcFunc['db_query']('', '
  564. SELECT COUNT(*)
  565. FROM {db_prefix}attachments AS a
  566. INNER JOIN {db_prefix}messages AS m ON (m.id_msg = a.id_msg)
  567. INNER JOIN {db_prefix}boards AS b ON (b.id_board = m.id_board)
  568. WHERE a.approved = {int:not_approved}
  569. AND a.attachment_type = {int:attachment_type}
  570. AND {query_see_board}
  571. ' . $approve_query,
  572. array(
  573. 'not_approved' => 0,
  574. 'attachment_type' => 0,
  575. )
  576. );
  577. list ($total_unapproved_attachments) = $smcFunc['db_fetch_row']($request);
  578. $smcFunc['db_free_result']($request);
  579. return $total_unapproved_attachments;
  580. }
  581. /**
  582. * Approve a post, just the one.
  583. */
  584. function ApproveMessage()
  585. {
  586. global $user_info, $topic, $board, $sourcedir, $smcFunc;
  587. checkSession('get');
  588. $_REQUEST['msg'] = (int) $_REQUEST['msg'];
  589. require_once($sourcedir . '/Subs-Post.php');
  590. isAllowedTo('approve_posts');
  591. $request = $smcFunc['db_query']('', '
  592. SELECT t.id_member_started, t.id_first_msg, m.id_member, m.subject, m.approved
  593. FROM {db_prefix}messages AS m
  594. INNER JOIN {db_prefix}topics AS t ON (t.id_topic = {int:current_topic})
  595. WHERE m.id_msg = {int:id_msg}
  596. AND m.id_topic = {int:current_topic}
  597. LIMIT 1',
  598. array(
  599. 'current_topic' => $topic,
  600. 'id_msg' => $_REQUEST['msg'],
  601. )
  602. );
  603. list ($starter, $first_msg, $poster, $subject, $approved) = $smcFunc['db_fetch_row']($request);
  604. $smcFunc['db_free_result']($request);
  605. // If it's the first in a topic then the whole topic gets approved!
  606. if ($first_msg == $_REQUEST['msg'])
  607. {
  608. approveTopics($topic, !$approved);
  609. if ($starter != $user_info['id'])
  610. logAction(($approved ? 'un' : '') . 'approve_topic', array('topic' => $topic, 'subject' => $subject, 'member' => $starter, 'board' => $board));
  611. }
  612. else
  613. {
  614. approvePosts($_REQUEST['msg'], !$approved);
  615. if ($poster != $user_info['id'])
  616. logAction(($approved ? 'un' : '') . 'approve', array('topic' => $topic, 'subject' => $subject, 'member' => $poster, 'board' => $board));
  617. }
  618. redirectexit('topic=' . $topic . '.msg' . $_REQUEST['msg']. '#msg' . $_REQUEST['msg']);
  619. }
  620. /**
  621. * Approve a batch of posts (or topics in their own right)
  622. *
  623. * @param array $messages
  624. * @param array $messageDetails
  625. * @param (string) $current_view = replies
  626. */
  627. function approveMessages($messages, $messageDetails, $current_view = 'replies')
  628. {
  629. global $sourcedir;
  630. require_once($sourcedir . '/Subs-Post.php');
  631. if ($current_view == 'topics')
  632. {
  633. approveTopics($messages);
  634. // and tell the world about it
  635. foreach ($messages as $topic)
  636. {
  637. logAction('approve_topic', array('topic' => $topic, 'subject' => $messageDetails[$topic]['subject'], 'member' => $messageDetails[$topic]['member'], 'board' => $messageDetails[$topic]['board']));
  638. }
  639. }
  640. else
  641. {
  642. approvePosts($messages);
  643. // and tell the world about it again
  644. foreach ($messages as $post)
  645. {
  646. logAction('approve', array('topic' => $messageDetails[$post]['topic'], 'subject' => $messageDetails[$post]['subject'], 'member' => $messageDetails[$post]['member'], 'board' => $messageDetails[$post]['board']));
  647. }
  648. }
  649. }
  650. /**
  651. * This is a helper function - basically approve everything!
  652. */
  653. function approveAllData()
  654. {
  655. global $smcFunc, $sourcedir;
  656. // Start with messages and topics.
  657. $request = $smcFunc['db_query']('', '
  658. SELECT id_msg
  659. FROM {db_prefix}messages
  660. WHERE approved = {int:not_approved}',
  661. array(
  662. 'not_approved' => 0,
  663. )
  664. );
  665. $msgs = array();
  666. while ($row = $smcFunc['db_fetch_row']($request))
  667. $msgs[] = $row[0];
  668. $smcFunc['db_free_result']($request);
  669. if (!empty($msgs))
  670. {
  671. require_once($sourcedir . '/Subs-Post.php');
  672. approvePosts($msgs);
  673. }
  674. // Now do attachments
  675. $request = $smcFunc['db_query']('', '
  676. SELECT id_attach
  677. FROM {db_prefix}attachments
  678. WHERE approved = {int:not_approved}',
  679. array(
  680. 'not_approved' => 0,
  681. )
  682. );
  683. $attaches = array();
  684. while ($row = $smcFunc['db_fetch_row']($request))
  685. $attaches[] = $row[0];
  686. $smcFunc['db_free_result']($request);
  687. if (!empty($attaches))
  688. {
  689. require_once($sourcedir . '/ManageAttachments.php');
  690. ApproveAttachments($attaches);
  691. }
  692. }
  693. /**
  694. * Remove a batch of messages (or topics)
  695. *
  696. * @param array $messages
  697. * @param array $messageDetails
  698. * @param string $current_view = replies
  699. */
  700. function removeMessages($messages, $messageDetails, $current_view = 'replies')
  701. {
  702. global $sourcedir, $modSettings;
  703. // @todo something's not right, removeMessage() does check permissions,
  704. // removeTopics() doesn't
  705. require_once($sourcedir . '/RemoveTopic.php');
  706. if ($current_view == 'topics')
  707. {
  708. removeTopics($messages);
  709. // and tell the world about it
  710. foreach ($messages as $topic)
  711. // Note, only log topic ID in native form if it's not gone forever.
  712. logAction('remove', array(
  713. (empty($modSettings['recycle_enable']) || $modSettings['recycle_board'] != $messageDetails[$topic]['board'] ? 'topic' : 'old_topic_id') => $topic, 'subject' => $messageDetails[$topic]['subject'], 'member' => $messageDetails[$topic]['member'], 'board' => $messageDetails[$topic]['board']));
  714. }
  715. else
  716. {
  717. foreach ($messages as $post)
  718. {
  719. removeMessage($post);
  720. logAction('delete', array(
  721. (empty($modSettings['recycle_enable']) || $modSettings['recycle_board'] != $messageDetails[$post]['board'] ? 'topic' : 'old_topic_id') => $messageDetails[$post]['topic'], 'subject' => $messageDetails[$post]['subject'], 'member' => $messageDetails[$post]['member'], 'board' => $messageDetails[$post]['board']));
  722. }
  723. }
  724. }
  725. ?>