PostModeration.php 25 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796
  1. <?php
  2. /**
  3. * This file's job is to handle things related to post moderation.
  4. *
  5. * Simple Machines Forum (SMF)
  6. *
  7. * @package SMF
  8. * @author Simple Machines http://www.simplemachines.org
  9. * @copyright 2011 Simple Machines
  10. * @license http://www.simplemachines.org/about/smf/license.php BSD
  11. *
  12. * @version 2.1 Alpha 1
  13. */
  14. if (!defined('SMF'))
  15. die('Hacking attempt...');
  16. /**
  17. * This is a handling function for all things post moderation.
  18. */
  19. function PostModerationMain()
  20. {
  21. global $sourcedir;
  22. // @todo We'll shift these later bud.
  23. loadLanguage('ModerationCenter');
  24. loadTemplate('ModerationCenter');
  25. // Probably need this...
  26. require_once($sourcedir . '/ModerationCenter.php');
  27. // Allowed sub-actions, you know the drill by now!
  28. $subactions = array(
  29. 'approve' => 'ApproveMessage',
  30. 'attachments' => 'UnapprovedAttachments',
  31. 'replies' => 'UnapprovedPosts',
  32. 'topics' => 'UnapprovedPosts',
  33. );
  34. // Pick something valid...
  35. if (!isset($_REQUEST['sa']) || !isset($subactions[$_REQUEST['sa']]))
  36. $_REQUEST['sa'] = 'replies';
  37. $subactions[$_REQUEST['sa']]();
  38. }
  39. /**
  40. * View all unapproved posts.
  41. */
  42. function UnapprovedPosts()
  43. {
  44. global $txt, $scripturl, $context, $user_info, $smcFunc;
  45. $context['current_view'] = isset($_GET['sa']) && $_GET['sa'] == 'topics' ? 'topics' : 'replies';
  46. $context['page_title'] = $txt['mc_unapproved_posts'];
  47. // Work out what boards we can work in!
  48. $approve_boards = boardsAllowedTo('approve_posts');
  49. // If we filtered by board remove ones outside of this board.
  50. // @todo Put a message saying we're filtered?
  51. if (isset($_REQUEST['brd']))
  52. {
  53. $filter_board = array((int) $_REQUEST['brd']);
  54. $approve_boards = $approve_boards == array(0) ? $filter_board : array_intersect($approve_boards, $filter_board);
  55. }
  56. if ($approve_boards == array(0))
  57. $approve_query = '';
  58. elseif (!empty($approve_boards))
  59. $approve_query = ' AND m.id_board IN (' . implode(',', $approve_boards) . ')';
  60. // Nada, zip, etc...
  61. else
  62. $approve_query = ' AND 0';
  63. // We also need to know where we can delete topics and/or replies to.
  64. if ($context['current_view'] == 'topics')
  65. {
  66. $delete_own_boards = boardsAllowedTo('remove_own');
  67. $delete_any_boards = boardsAllowedTo('remove_any');
  68. $delete_own_replies = array();
  69. }
  70. else
  71. {
  72. $delete_own_boards = boardsAllowedTo('delete_own');
  73. $delete_any_boards = boardsAllowedTo('delete_any');
  74. $delete_own_replies = boardsAllowedTo('delete_own_replies');
  75. }
  76. $toAction = array();
  77. // Check if we have something to do?
  78. if (isset($_GET['approve']))
  79. $toAction[] = (int) $_GET['approve'];
  80. // Just a deletion?
  81. elseif (isset($_GET['delete']))
  82. $toAction[] = (int) $_GET['delete'];
  83. // Lots of approvals?
  84. elseif (isset($_POST['item']))
  85. foreach ($_POST['item'] as $item)
  86. $toAction[] = (int) $item;
  87. // What are we actually doing.
  88. if (isset($_GET['approve']) || (isset($_POST['do']) && $_POST['do'] == 'approve'))
  89. $curAction = 'approve';
  90. elseif (isset($_GET['delete']) || (isset($_POST['do']) && $_POST['do'] == 'delete'))
  91. $curAction = 'delete';
  92. // Right, so we have something to do?
  93. if (!empty($toAction) && isset($curAction))
  94. {
  95. checkSession('request');
  96. // Handy shortcut.
  97. $any_array = $curAction == 'approve' ? $approve_boards : $delete_any_boards;
  98. // Now for each message work out whether it's actually a topic, and what board it's on.
  99. $request = $smcFunc['db_query']('', '
  100. SELECT m.id_msg, m.id_member, m.id_board, m.subject, t.id_topic, t.id_first_msg, t.id_member_started
  101. FROM {db_prefix}messages AS m
  102. INNER JOIN {db_prefix}topics AS t ON (t.id_topic = m.id_topic)
  103. LEFT JOIN {db_prefix}boards AS b ON (t.id_board = b.id_board)
  104. WHERE m.id_msg IN ({array_int:message_list})
  105. AND m.approved = {int:not_approved}
  106. AND {query_see_board}',
  107. array(
  108. 'message_list' => $toAction,
  109. 'not_approved' => 0,
  110. )
  111. );
  112. $toAction = array();
  113. $details = array();
  114. while ($row = $smcFunc['db_fetch_assoc']($request))
  115. {
  116. // If it's not within what our view is ignore it...
  117. if (($row['id_msg'] == $row['id_first_msg'] && $context['current_view'] != 'topics') || ($row['id_msg'] != $row['id_first_msg'] && $context['current_view'] != 'replies'))
  118. continue;
  119. $can_add = false;
  120. // If we're approving this is simple.
  121. if ($curAction == 'approve' && ($any_array == array(0) || in_array($row['id_board'], $any_array)))
  122. {
  123. $can_add = true;
  124. }
  125. // Delete requires more permission checks...
  126. elseif ($curAction == 'delete')
  127. {
  128. // Own post is easy!
  129. if ($row['id_member'] == $user_info['id'] && ($delete_own_boards == array(0) || in_array($row['id_board'], $delete_own_boards)))
  130. $can_add = true;
  131. // Is it a reply to their own topic?
  132. elseif ($row['id_member'] == $row['id_member_started'] && $row['id_msg'] != $row['id_first_msg'] && ($delete_own_replies == array(0) || in_array($row['id_board'], $delete_own_replies)))
  133. $can_add = true;
  134. // Someone elses?
  135. elseif ($row['id_member'] != $user_info['id'] && ($delete_any_boards == array(0) || in_array($row['id_board'], $delete_any_boards)))
  136. $can_add = true;
  137. }
  138. if ($can_add)
  139. $anItem = $context['current_view'] == 'topics' ? $row['id_topic'] : $row['id_msg'];
  140. $toAction[] = $anItem;
  141. // All clear. What have we got now, what, what?
  142. $details[$anItem] = array();
  143. $details[$anItem]["subject"] = $row['subject'];
  144. $details[$anItem]["topic"] = $row['id_topic'];
  145. $details[$anItem]["member"] = ($context['current_view'] == 'topics') ? $row['id_member_started'] : $row['id_member'];
  146. $details[$anItem]["board"] = $row['id_board'];
  147. }
  148. $smcFunc['db_free_result']($request);
  149. // If we have anything left we can actually do the approving (etc).
  150. if (!empty($toAction))
  151. {
  152. if ($curAction == 'approve')
  153. {
  154. approveMessages ($toAction, $details, $context['current_view']);
  155. }
  156. else
  157. {
  158. removeMessages ($toAction, $details, $context['current_view']);
  159. }
  160. }
  161. }
  162. // How many unapproved posts are there?
  163. $request = $smcFunc['db_query']('', '
  164. SELECT COUNT(*)
  165. FROM {db_prefix}messages AS m
  166. INNER JOIN {db_prefix}topics AS t ON (t.id_topic = m.id_topic AND t.id_first_msg != m.id_msg)
  167. INNER JOIN {db_prefix}boards AS b ON (b.id_board = t.id_board)
  168. WHERE m.approved = {int:not_approved}
  169. AND {query_see_board}
  170. ' . $approve_query,
  171. array(
  172. 'not_approved' => 0,
  173. )
  174. );
  175. list ($context['total_unapproved_posts']) = $smcFunc['db_fetch_row']($request);
  176. $smcFunc['db_free_result']($request);
  177. // What about topics? Normally we'd use the table alias t for topics but lets use m so we don't have to redo our approve query.
  178. $request = $smcFunc['db_query']('', '
  179. SELECT COUNT(m.id_topic)
  180. FROM {db_prefix}topics AS m
  181. INNER JOIN {db_prefix}boards AS b ON (b.id_board = m.id_board)
  182. WHERE m.approved = {int:not_approved}
  183. AND {query_see_board}
  184. ' . $approve_query,
  185. array(
  186. 'not_approved' => 0,
  187. )
  188. );
  189. list ($context['total_unapproved_topics']) = $smcFunc['db_fetch_row']($request);
  190. $smcFunc['db_free_result']($request);
  191. $context['page_index'] = constructPageIndex($scripturl . '?action=moderate;area=postmod;sa=' . $context['current_view'] . (isset($_REQUEST['brd']) ? ';brd=' . (int) $_REQUEST['brd'] : ''), $_GET['start'], $context['current_view'] == 'topics' ? $context['total_unapproved_topics'] : $context['total_unapproved_posts'], 10);
  192. $context['start'] = $_GET['start'];
  193. // We have enough to make some pretty tabs!
  194. $context[$context['moderation_menu_name']]['tab_data'] = array(
  195. 'title' => $txt['mc_unapproved_posts'],
  196. 'help' => 'postmod',
  197. 'description' => $txt['mc_unapproved_posts_desc'],
  198. );
  199. // Update the tabs with the correct number of posts.
  200. $context['menu_data_' . $context['moderation_menu_id']]['sections']['posts']['areas']['postmod']['subsections']['posts']['label'] .= ' (' . $context['total_unapproved_posts'] . ')';
  201. $context['menu_data_' . $context['moderation_menu_id']]['sections']['posts']['areas']['postmod']['subsections']['topics']['label'] .= ' (' . $context['total_unapproved_topics'] . ')';
  202. // If we are filtering some boards out then make sure to send that along with the links.
  203. if (isset($_REQUEST['brd']))
  204. {
  205. $context['menu_data_' . $context['moderation_menu_id']]['sections']['posts']['areas']['postmod']['subsections']['posts']['add_params'] = ';brd=' . (int) $_REQUEST['brd'];
  206. $context['menu_data_' . $context['moderation_menu_id']]['sections']['posts']['areas']['postmod']['subsections']['topics']['add_params'] = ';brd=' . (int) $_REQUEST['brd'];
  207. }
  208. // Get all unapproved posts.
  209. $request = $smcFunc['db_query']('', '
  210. SELECT m.id_msg, m.id_topic, m.id_board, m.subject, m.body, m.id_member,
  211. IFNULL(mem.real_name, m.poster_name) AS poster_name, m.poster_time, m.smileys_enabled,
  212. t.id_member_started, t.id_first_msg, b.name AS board_name, c.id_cat, c.name AS cat_name
  213. FROM {db_prefix}messages AS m
  214. INNER JOIN {db_prefix}topics AS t ON (t.id_topic = m.id_topic)
  215. INNER JOIN {db_prefix}boards AS b ON (b.id_board = m.id_board)
  216. LEFT JOIN {db_prefix}members AS mem ON (mem.id_member = m.id_member)
  217. LEFT JOIN {db_prefix}categories AS c ON (c.id_cat = b.id_cat)
  218. WHERE m.approved = {int:not_approved}
  219. AND t.id_first_msg ' . ($context['current_view'] == 'topics' ? '=' : '!=') . ' m.id_msg
  220. AND {query_see_board}
  221. ' . $approve_query . '
  222. LIMIT ' . $context['start'] . ', 10',
  223. array(
  224. 'not_approved' => 0,
  225. )
  226. );
  227. $context['unapproved_items'] = array();
  228. for ($i = 1; $row = $smcFunc['db_fetch_assoc']($request); $i++)
  229. {
  230. // Can delete is complicated, let's solve it first... is it their own post?
  231. if ($row['id_member'] == $user_info['id'] && ($delete_own_boards == array(0) || in_array($row['id_board'], $delete_own_boards)))
  232. $can_delete = true;
  233. // Is it a reply to their own topic?
  234. elseif ($row['id_member'] == $row['id_member_started'] && $row['id_msg'] != $row['id_first_msg'] && ($delete_own_replies == array(0) || in_array($row['id_board'], $delete_own_replies)))
  235. $can_delete = true;
  236. // Someone elses?
  237. elseif ($row['id_member'] != $user_info['id'] && ($delete_any_boards == array(0) || in_array($row['id_board'], $delete_any_boards)))
  238. $can_delete = true;
  239. else
  240. $can_delete = false;
  241. $context['unapproved_items'][] = array(
  242. 'id' => $row['id_msg'],
  243. 'alternate' => $i % 2,
  244. 'counter' => $context['start'] + $i,
  245. 'href' => $scripturl . '?topic=' . $row['id_topic'] . '.msg' . $row['id_msg'] . '#msg' . $row['id_msg'],
  246. 'subject' => $row['subject'],
  247. 'body' => parse_bbc($row['body'], $row['smileys_enabled'], $row['id_msg']),
  248. 'time' => timeformat($row['poster_time']),
  249. 'poster' => array(
  250. 'id' => $row['id_member'],
  251. 'name' => $row['poster_name'],
  252. 'link' => $row['id_member'] ? '<a href="' . $scripturl . '?action=profile;u=' . $row['id_member'] . '">' . $row['poster_name'] . '</a>' : $row['poster_name'],
  253. 'href' => $scripturl . '?action=profile;u=' . $row['id_member'],
  254. ),
  255. 'topic' => array(
  256. 'id' => $row['id_topic'],
  257. ),
  258. 'board' => array(
  259. 'id' => $row['id_board'],
  260. 'name' => $row['board_name'],
  261. ),
  262. 'category' => array(
  263. 'id' => $row['id_cat'],
  264. 'name' => $row['cat_name'],
  265. ),
  266. 'can_delete' => $can_delete,
  267. );
  268. }
  269. $smcFunc['db_free_result']($request);
  270. $context['sub_template'] = 'unapproved_posts';
  271. }
  272. /**
  273. * View all unapproved attachments.
  274. */
  275. function UnapprovedAttachments()
  276. {
  277. global $txt, $scripturl, $context, $user_info, $sourcedir, $smcFunc, $modSettings;
  278. $context['page_title'] = $txt['mc_unapproved_attachments'];
  279. // Once again, permissions are king!
  280. $approve_boards = boardsAllowedTo('approve_posts');
  281. if ($approve_boards == array(0))
  282. $approve_query = '';
  283. elseif (!empty($approve_boards))
  284. $approve_query = ' AND m.id_board IN (' . implode(',', $approve_boards) . ')';
  285. else
  286. $approve_query = ' AND 0';
  287. // Get together the array of things to act on, if any.
  288. $attachments = array();
  289. if (isset($_GET['approve']))
  290. $attachments[] = (int) $_GET['approve'];
  291. elseif (isset($_GET['delete']))
  292. $attachments[] = (int) $_GET['delete'];
  293. elseif (isset($_POST['item']))
  294. foreach ($_POST['item'] as $item)
  295. $attachments[] = (int) $item;
  296. // Are we approving or deleting?
  297. if (isset($_GET['approve']) || (isset($_POST['do']) && $_POST['do'] == 'approve'))
  298. $curAction = 'approve';
  299. elseif (isset($_GET['delete']) || (isset($_POST['do']) && $_POST['do'] == 'delete'))
  300. $curAction = 'delete';
  301. // Something to do, let's do it!
  302. if (!empty($attachments) && isset($curAction))
  303. {
  304. checkSession('request');
  305. // This will be handy.
  306. require_once($sourcedir . '/ManageAttachments.php');
  307. // Confirm the attachments are eligible for changing!
  308. $request = $smcFunc['db_query']('', '
  309. SELECT a.id_attach
  310. FROM {db_prefix}attachments AS a
  311. INNER JOIN {db_prefix}messages AS m ON (m.id_msg = a.id_msg)
  312. LEFT JOIN {db_prefix}boards AS b ON (m.id_board = b.id_board)
  313. WHERE a.id_attach IN ({array_int:attachments})
  314. AND a.approved = {int:not_approved}
  315. AND a.attachment_type = {int:attachment_type}
  316. AND {query_see_board}
  317. ' . $approve_query,
  318. array(
  319. 'attachments' => $attachments,
  320. 'not_approved' => 0,
  321. 'attachment_type' => 0,
  322. )
  323. );
  324. $attachments = array();
  325. while ($row = $smcFunc['db_fetch_assoc']($request))
  326. $attachments[] = $row['id_attach'];
  327. $smcFunc['db_free_result']($request);
  328. // Assuming it wasn't all like, proper illegal, we can do the approving.
  329. if (!empty($attachments))
  330. {
  331. if ($curAction == 'approve')
  332. ApproveAttachments($attachments);
  333. else
  334. removeAttachments(array('id_attach' => $attachments, 'do_logging' => true));
  335. }
  336. }
  337. require_once($sourcedir . '/Subs-List.php');
  338. $listOptions = array(
  339. 'id' => 'mc_unapproved_attach',
  340. 'width' => '100%',
  341. 'items_per_page' => $modSettings['defaultMaxMessages'],
  342. 'no_items_label' => $txt['mc_unapproved_attachments_none_found'],
  343. 'base_href' => $scripturl . '?action=moderate;area=attachmod;sa=attachments',
  344. 'default_sort_col' => 'attach_name',
  345. 'get_items' => array(
  346. 'function' => 'list_getUnapprovedAttachments',
  347. 'params' => array(
  348. $approve_query,
  349. ),
  350. ),
  351. 'get_count' => array(
  352. 'function' => 'list_getNumUnapprovedAttachments',
  353. 'params' => array(
  354. $approve_query,
  355. ),
  356. ),
  357. 'columns' => array(
  358. 'attach_name' => array(
  359. 'header' => array(
  360. 'value' => $txt['mc_unapproved_attach_name'],
  361. ),
  362. 'data' => array(
  363. 'db' => 'filename',
  364. ),
  365. 'sort' => array(
  366. 'default' => 'a.filename',
  367. 'reverse' => 'a.filename DESC',
  368. ),
  369. ),
  370. 'attach_size' => array(
  371. 'header' => array(
  372. 'value' => $txt['mc_unapproved_attach_size'],
  373. ),
  374. 'data' => array(
  375. 'db' => 'size',
  376. ),
  377. 'sort' => array(
  378. 'default' => 'a.size',
  379. 'reverse' => 'a.size DESC',
  380. ),
  381. ),
  382. 'attach_poster' => array(
  383. 'header' => array(
  384. 'value' => $txt['mc_unapproved_attach_poster'],
  385. ),
  386. 'data' => array(
  387. 'function' => create_function('$data', '
  388. return $data[\'poster\'][\'link\'];'
  389. )
  390. ),
  391. 'sort' => array(
  392. 'default' => 'm.id_member',
  393. 'reverse' => 'm.id_member DESC',
  394. ),
  395. ),
  396. 'date' => array(
  397. 'header' => array(
  398. 'value' => $txt['date'],
  399. 'style' => 'width: 18%;',
  400. ),
  401. 'data' => array(
  402. 'db' => 'time',
  403. 'class' => 'smalltext',
  404. 'style' => 'white-space:nowrap;',
  405. ),
  406. 'sort' => array(
  407. 'default' => 'm.poster_time',
  408. 'reverse' => 'm.poster_time DESC',
  409. ),
  410. ),
  411. 'message' => array(
  412. 'header' => array(
  413. 'value' => $txt['post'],
  414. ),
  415. 'data' => array(
  416. 'function' => create_function('$data', '
  417. return \'<a href="\' . $data[\'message\'][\'href\'] . \'">\' . shorten_subject($data[\'message\'][\'subject\'], 20) . \'</a>\';'
  418. ),
  419. 'class' => 'smalltext',
  420. 'style' => 'width:15em;',
  421. ),
  422. 'sort' => array(
  423. 'default' => 'm.subject',
  424. 'reverse' => 'm.subject DESC',
  425. ),
  426. ),
  427. 'action' => array(
  428. 'header' => array(
  429. 'value' => '<input type="checkbox" class="input_check" onclick="invertAll(this, this.form);" checked="checked" />',
  430. 'style' => 'width: 4%;',
  431. ),
  432. 'data' => array(
  433. 'sprintf' => array(
  434. 'format' => '<input type="checkbox" name="item[]" value="%1$d" checked="checked" class="input_check" />',
  435. 'params' => array(
  436. 'id' => false,
  437. ),
  438. ),
  439. 'style' => 'text-align: center;',
  440. ),
  441. ),
  442. ),
  443. 'form' => array(
  444. 'href' => $scripturl . '?action=moderate;area=attachmod;sa=attachments',
  445. 'include_sort' => true,
  446. 'include_start' => true,
  447. 'hidden_fields' => array(
  448. $context['session_var'] => $context['session_id'],
  449. ),
  450. 'token' => 'mod-ap',
  451. ),
  452. 'additional_rows' => array(
  453. array(
  454. 'position' => 'bottom_of_list',
  455. 'value' => '
  456. <select name="do" onchange="if (this.value != 0 &amp;&amp; confirm(\'' . $txt['mc_unapproved_sure'] . '\')) submit();">
  457. <option value="0">' . $txt['with_selected'] . ':</option>
  458. <option value="0">-------------------</option>
  459. <option value="approve">&nbsp;--&nbsp;' . $txt['approve'] . '</option>
  460. <option value="delete">&nbsp;--&nbsp;' . $txt['delete'] . '</option>
  461. </select>
  462. <noscript><input type="submit" name="ml_go" value="' . $txt['go'] . '" class="button_submit" /></noscript>',
  463. 'align' => 'right',
  464. ),
  465. ),
  466. );
  467. // Create the request list.
  468. createToken('mod-ap');
  469. createList($listOptions);
  470. $context['sub_template'] = 'unapproved_attachments';
  471. }
  472. /**
  473. * Callback function for UnapprovedAttachments
  474. * retrieve all the attachments waiting for approval the approver can approve
  475. *
  476. * @param int $start
  477. * @param int $items_per_page
  478. * @param string $sort
  479. * @param string $approve_query additional restrictions based on the boards the approver can see
  480. * @return array, an array of unapproved attachments
  481. */
  482. function list_getUnapprovedAttachments($start, $items_per_page, $sort, $approve_query)
  483. {
  484. global $smcFunc, $scripturl;
  485. // Get all unapproved attachments.
  486. $request = $smcFunc['db_query']('', '
  487. SELECT a.id_attach, a.filename, a.size, m.id_msg, m.id_topic, m.id_board, m.subject, m.body, m.id_member,
  488. IFNULL(mem.real_name, m.poster_name) AS poster_name, m.poster_time,
  489. t.id_member_started, t.id_first_msg, b.name AS board_name, c.id_cat, c.name AS cat_name
  490. FROM {db_prefix}attachments AS a
  491. INNER JOIN {db_prefix}messages AS m ON (m.id_msg = a.id_msg)
  492. INNER JOIN {db_prefix}topics AS t ON (t.id_topic = m.id_topic)
  493. INNER JOIN {db_prefix}boards AS b ON (b.id_board = m.id_board)
  494. LEFT JOIN {db_prefix}members AS mem ON (mem.id_member = m.id_member)
  495. LEFT JOIN {db_prefix}categories AS c ON (c.id_cat = b.id_cat)
  496. WHERE a.approved = {int:not_approved}
  497. AND a.attachment_type = {int:attachment_type}
  498. AND {query_see_board}
  499. {raw:approve_query}
  500. ORDER BY {raw:sort}
  501. LIMIT {int:start}, {int:items_per_page}',
  502. array(
  503. 'not_approved' => 0,
  504. 'attachment_type' => 0,
  505. 'start' => $start,
  506. 'sort' => $sort,
  507. 'items_per_page' => $items_per_page,
  508. 'approve_query' => $approve_query,
  509. )
  510. );
  511. $unapproved_items = array();
  512. while ($row = $smcFunc['db_fetch_assoc']($request))
  513. {
  514. $unapproved_items[] = array(
  515. 'id' => $row['id_attach'],
  516. 'filename' => $row['filename'],
  517. 'size' => round($row['size'] / 1024, 2),
  518. 'time' => timeformat($row['poster_time']),
  519. 'poster' => array(
  520. 'id' => $row['id_member'],
  521. 'name' => $row['poster_name'],
  522. 'link' => $row['id_member'] ? '<a href="' . $scripturl . '?action=profile;u=' . $row['id_member'] . '">' . $row['poster_name'] . '</a>' : $row['poster_name'],
  523. 'href' => $scripturl . '?action=profile;u=' . $row['id_member'],
  524. ),
  525. 'message' => array(
  526. 'id' => $row['id_msg'],
  527. 'subject' => $row['subject'],
  528. 'body' => parse_bbc($row['body']),
  529. 'time' => timeformat($row['poster_time']),
  530. 'href' => $scripturl . '?topic=' . $row['id_topic'] . '.msg' . $row['id_msg'] . '#msg' . $row['id_msg'],
  531. ),
  532. 'topic' => array(
  533. 'id' => $row['id_topic'],
  534. ),
  535. 'board' => array(
  536. 'id' => $row['id_board'],
  537. 'name' => $row['board_name'],
  538. ),
  539. 'category' => array(
  540. 'id' => $row['id_cat'],
  541. 'name' => $row['cat_name'],
  542. ),
  543. );
  544. }
  545. $smcFunc['db_free_result']($request);
  546. return $unapproved_items;
  547. }
  548. /**
  549. * Callback function for UnapprovedAttachments
  550. * count all the attachments waiting for approval the approver can approve
  551. *
  552. * @param int $start
  553. * @param int $items_per_page
  554. * @param string $sort
  555. * @param string $approve_query additional restrictions based on the boards the approver can see
  556. * @return int, the number of unapproved attachments
  557. */
  558. function list_getNumUnapprovedAttachments($approve_query)
  559. {
  560. global $smcFunc;
  561. // How many unapproved attachments in total?
  562. $request = $smcFunc['db_query']('', '
  563. SELECT COUNT(*)
  564. FROM {db_prefix}attachments AS a
  565. INNER JOIN {db_prefix}messages AS m ON (m.id_msg = a.id_msg)
  566. INNER JOIN {db_prefix}boards AS b ON (b.id_board = m.id_board)
  567. WHERE a.approved = {int:not_approved}
  568. AND a.attachment_type = {int:attachment_type}
  569. AND {query_see_board}
  570. ' . $approve_query,
  571. array(
  572. 'not_approved' => 0,
  573. 'attachment_type' => 0,
  574. )
  575. );
  576. list ($total_unapproved_attachments) = $smcFunc['db_fetch_row']($request);
  577. $smcFunc['db_free_result']($request);
  578. return $total_unapproved_attachments;
  579. }
  580. /**
  581. * Approve a post, just the one.
  582. */
  583. function ApproveMessage()
  584. {
  585. global $user_info, $topic, $board, $sourcedir, $smcFunc;
  586. checkSession('get');
  587. $_REQUEST['msg'] = (int) $_REQUEST['msg'];
  588. require_once($sourcedir . '/Subs-Post.php');
  589. isAllowedTo('approve_posts');
  590. $request = $smcFunc['db_query']('', '
  591. SELECT t.id_member_started, t.id_first_msg, m.id_member, m.subject, m.approved
  592. FROM {db_prefix}messages AS m
  593. INNER JOIN {db_prefix}topics AS t ON (t.id_topic = {int:current_topic})
  594. WHERE m.id_msg = {int:id_msg}
  595. AND m.id_topic = {int:current_topic}
  596. LIMIT 1',
  597. array(
  598. 'current_topic' => $topic,
  599. 'id_msg' => $_REQUEST['msg'],
  600. )
  601. );
  602. list ($starter, $first_msg, $poster, $subject, $approved) = $smcFunc['db_fetch_row']($request);
  603. $smcFunc['db_free_result']($request);
  604. // If it's the first in a topic then the whole topic gets approved!
  605. if ($first_msg == $_REQUEST['msg'])
  606. {
  607. approveTopics($topic, !$approved);
  608. if ($starter != $user_info['id'])
  609. logAction('approve_topic', array('topic' => $topic, 'subject' => $subject, 'member' => $starter, 'board' => $board));
  610. }
  611. else
  612. {
  613. approvePosts($_REQUEST['msg'], !$approved);
  614. if ($poster != $user_info['id'])
  615. logAction('approve', array('topic' => $topic, 'subject' => $subject, 'member' => $poster, 'board' => $board));
  616. }
  617. redirectexit('topic=' . $topic . '.msg' . $_REQUEST['msg']. '#msg' . $_REQUEST['msg']);
  618. }
  619. /**
  620. * Approve a batch of posts (or topics in their own right)
  621. *
  622. * @param array $messages
  623. * @param array $messageDetails
  624. * @param (string) $current_view = replies
  625. */
  626. function approveMessages($messages, $messageDetails, $current_view = 'replies')
  627. {
  628. global $sourcedir;
  629. require_once($sourcedir . '/Subs-Post.php');
  630. if ($current_view == 'topics')
  631. {
  632. approveTopics($messages);
  633. // and tell the world about it
  634. foreach ($messages as $topic)
  635. {
  636. logAction('approve_topic', array('topic' => $topic, 'subject' => $messageDetails[$topic]['subject'], 'member' => $messageDetails[$topic]['member'], 'board' => $messageDetails[$topic]['board']));
  637. }
  638. }
  639. else
  640. {
  641. approvePosts($messages);
  642. // and tell the world about it again
  643. foreach ($messages as $post)
  644. {
  645. logAction('approve', array('topic' => $messageDetails[$post]['topic'], 'subject' => $messageDetails[$post]['subject'], 'member' => $messageDetails[$post]['member'], 'board' => $messageDetails[$post]['board']));
  646. }
  647. }
  648. }
  649. /**
  650. * This is a helper function - basically approve everything!
  651. */
  652. function approveAllData()
  653. {
  654. global $smcFunc, $sourcedir;
  655. // Start with messages and topics.
  656. $request = $smcFunc['db_query']('', '
  657. SELECT id_msg
  658. FROM {db_prefix}messages
  659. WHERE approved = {int:not_approved}',
  660. array(
  661. 'not_approved' => 0,
  662. )
  663. );
  664. $msgs = array();
  665. while ($row = $smcFunc['db_fetch_row']($request))
  666. $msgs[] = $row[0];
  667. $smcFunc['db_free_result']($request);
  668. if (!empty($msgs))
  669. {
  670. require_once($sourcedir . '/Subs-Post.php');
  671. approvePosts($msgs);
  672. }
  673. // Now do attachments
  674. $request = $smcFunc['db_query']('', '
  675. SELECT id_attach
  676. FROM {db_prefix}attachments
  677. WHERE approved = {int:not_approved}',
  678. array(
  679. 'not_approved' => 0,
  680. )
  681. );
  682. $attaches = array();
  683. while ($row = $smcFunc['db_fetch_row']($request))
  684. $attaches[] = $row[0];
  685. $smcFunc['db_free_result']($request);
  686. if (!empty($attaches))
  687. {
  688. require_once($sourcedir . '/ManageAttachments.php');
  689. ApproveAttachments($attaches);
  690. }
  691. }
  692. /**
  693. * Remove a batch of messages (or topics)
  694. *
  695. * @param array $messages
  696. * @param array $messageDetails
  697. * @param string $current_view = replies
  698. */
  699. function removeMessages($messages, $messageDetails, $current_view = 'replies')
  700. {
  701. global $sourcedir, $modSettings;
  702. // @todo something's not right, removeMessage() does check permissions,
  703. // removeTopics() doesn't
  704. require_once($sourcedir . '/RemoveTopic.php');
  705. if ($current_view == 'topics')
  706. {
  707. removeTopics($messages);
  708. // and tell the world about it
  709. foreach ($messages as $topic)
  710. // Note, only log topic ID in native form if it's not gone forever.
  711. logAction('remove', array(
  712. (empty($modSettings['recycle_enable']) || $modSettings['recycle_board'] != $messageDetails[$topic]['board'] ? 'topic' : 'old_topic_id') => $topic, 'subject' => $messageDetails[$topic]['subject'], 'member' => $messageDetails[$topic]['member'], 'board' => $messageDetails[$topic]['board']));
  713. }
  714. else
  715. {
  716. foreach ($messages as $post)
  717. {
  718. removeMessage($post);
  719. logAction('delete', array(
  720. (empty($modSettings['recycle_enable']) || $modSettings['recycle_board'] != $messageDetails[$post]['board'] ? 'topic' : 'old_topic_id') => $messageDetails[$post]['topic'], 'subject' => $messageDetails[$post]['subject'], 'member' => $messageDetails[$post]['member'], 'board' => $messageDetails[$post]['board']));
  721. }
  722. }
  723. }
  724. ?>