mirror of
https://github.com/phpbb/phpbb.git
synced 2025-05-24 00:05:33 +02:00
2f4a618900
Changes:
- Ascraeus now uses constants for the phpbb root path and the php extension. This ensures more security for external applications and modifications (no more overwriting of root path and extension possible through insecure mods and register globals enabled) as well as no more globalizing needed.
- A second change implemented here is an additional short-hand-notation for append_sid(). It is allowed to omit the root path and extension now (for example calling append_sid('memberlist')) - in this case the root path and extension get added automatically. The hook is called after these are added.
git-svn-id: file:///svn/phpbb/trunk@8572 89ea8834-ac86-4346-8a33-228a782c2dd0
459 lines
13 KiB
PHP
459 lines
13 KiB
PHP
<?php
|
|
/**
|
|
*
|
|
* @package acp
|
|
* @version $Id$
|
|
* @copyright (c) 2005 phpBB Group
|
|
* @license http://opensource.org/licenses/gpl-license.php GNU Public License
|
|
*
|
|
*/
|
|
|
|
/**
|
|
* @ignore
|
|
*/
|
|
if (!defined('IN_PHPBB'))
|
|
{
|
|
exit;
|
|
}
|
|
|
|
/**
|
|
* @package acp
|
|
*/
|
|
class acp_prune
|
|
{
|
|
var $u_action;
|
|
|
|
function main($id, $mode)
|
|
{
|
|
global $user;
|
|
|
|
$user->add_lang('acp/prune');
|
|
include_once(PHPBB_ROOT_PATH . 'includes/functions_user.' . PHP_EXT);
|
|
|
|
switch ($mode)
|
|
{
|
|
case 'forums':
|
|
$this->tpl_name = 'acp_prune_forums';
|
|
$this->page_title = 'ACP_PRUNE_FORUMS';
|
|
$this->prune_forums($id, $mode);
|
|
break;
|
|
|
|
case 'users':
|
|
$this->tpl_name = 'acp_prune_users';
|
|
$this->page_title = 'ACP_PRUNE_USERS';
|
|
$this->prune_users($id, $mode);
|
|
break;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Prune forums
|
|
*/
|
|
function prune_forums($id, $mode)
|
|
{
|
|
global $db, $user, $auth, $template, $cache, $config;
|
|
|
|
$all_forums = request_var('all_forums', 0);
|
|
$forum_id = request_var('f', array(0));
|
|
$submit = (isset($_POST['submit'])) ? true : false;
|
|
|
|
if ($all_forums)
|
|
{
|
|
$sql = 'SELECT forum_id
|
|
FROM ' . FORUMS_TABLE . '
|
|
ORDER BY left_id';
|
|
$result = $db->sql_query($sql);
|
|
|
|
$forum_id = array();
|
|
while ($row = $db->sql_fetchrow($result))
|
|
{
|
|
$forum_id[] = $row['forum_id'];
|
|
}
|
|
$db->sql_freeresult($result);
|
|
}
|
|
|
|
if ($submit)
|
|
{
|
|
if (confirm_box(true))
|
|
{
|
|
$prune_posted = request_var('prune_days', 0);
|
|
$prune_viewed = request_var('prune_vieweddays', 0);
|
|
$prune_all = (!$prune_posted && !$prune_viewed) ? true : false;
|
|
|
|
$prune_flags = 0;
|
|
$prune_flags += (request_var('prune_old_polls', 0)) ? 2 : 0;
|
|
$prune_flags += (request_var('prune_announce', 0)) ? 4 : 0;
|
|
$prune_flags += (request_var('prune_sticky', 0)) ? 8 : 0;
|
|
|
|
// Convert days to seconds for timestamp functions...
|
|
$prunedate_posted = time() - ($prune_posted * 86400);
|
|
$prunedate_viewed = time() - ($prune_viewed * 86400);
|
|
|
|
$template->assign_vars(array(
|
|
'S_PRUNED' => true)
|
|
);
|
|
|
|
$sql_forum = (sizeof($forum_id)) ? ' AND ' . $db->sql_in_set('forum_id', $forum_id) : '';
|
|
|
|
// Get a list of forum's or the data for the forum that we are pruning.
|
|
$sql = 'SELECT forum_id, forum_name
|
|
FROM ' . FORUMS_TABLE . '
|
|
WHERE forum_type = ' . FORUM_POST . "
|
|
$sql_forum
|
|
ORDER BY left_id ASC";
|
|
$result = $db->sql_query($sql);
|
|
|
|
if ($row = $db->sql_fetchrow($result))
|
|
{
|
|
$prune_ids = array();
|
|
$p_result['topics'] = 0;
|
|
$p_result['posts'] = 0;
|
|
$log_data = '';
|
|
|
|
do
|
|
{
|
|
if (!$auth->acl_get('f_list', $row['forum_id']))
|
|
{
|
|
continue;
|
|
}
|
|
|
|
if ($prune_all)
|
|
{
|
|
$p_result = prune($row['forum_id'], 'posted', time(), $prune_flags, false);
|
|
}
|
|
else
|
|
{
|
|
if ($prune_posted)
|
|
{
|
|
$return = prune($row['forum_id'], 'posted', $prunedate_posted, $prune_flags, false);
|
|
$p_result['topics'] += $return['topics'];
|
|
$p_result['posts'] += $return['posts'];
|
|
}
|
|
|
|
if ($prune_viewed)
|
|
{
|
|
$return = prune($row['forum_id'], 'viewed', $prunedate_viewed, $prune_flags, false);
|
|
$p_result['topics'] += $return['topics'];
|
|
$p_result['posts'] += $return['posts'];
|
|
}
|
|
}
|
|
|
|
$prune_ids[] = $row['forum_id'];
|
|
|
|
$template->assign_block_vars('pruned', array(
|
|
'FORUM_NAME' => $row['forum_name'],
|
|
'NUM_TOPICS' => $p_result['topics'],
|
|
'NUM_POSTS' => $p_result['posts'])
|
|
);
|
|
|
|
$log_data .= (($log_data != '') ? ', ' : '') . $row['forum_name'];
|
|
}
|
|
while ($row = $db->sql_fetchrow($result));
|
|
|
|
// Sync all pruned forums at once
|
|
sync('forum', 'forum_id', $prune_ids, true, true);
|
|
add_log('admin', 'LOG_PRUNE', $log_data);
|
|
}
|
|
$db->sql_freeresult($result);
|
|
|
|
return;
|
|
}
|
|
else
|
|
{
|
|
confirm_box(false, $user->lang['PRUNE_FORUM_CONFIRM'], build_hidden_fields(array(
|
|
'i' => $id,
|
|
'mode' => $mode,
|
|
'submit' => 1,
|
|
'all_forums' => $all_forums,
|
|
'f' => $forum_id,
|
|
|
|
'prune_days' => request_var('prune_days', 0),
|
|
'prune_vieweddays' => request_var('prune_vieweddays', 0),
|
|
'prune_old_polls' => request_var('prune_old_polls', 0),
|
|
'prune_announce' => request_var('prune_announce', 0),
|
|
'prune_sticky' => request_var('prune_sticky', 0),
|
|
)));
|
|
}
|
|
}
|
|
|
|
// If they haven't selected a forum for pruning yet then
|
|
// display a select box to use for pruning.
|
|
if (!sizeof($forum_id))
|
|
{
|
|
$template->assign_vars(array(
|
|
'U_ACTION' => $this->u_action,
|
|
'S_SELECT_FORUM' => true,
|
|
'S_FORUM_OPTIONS' => make_forum_select(false, false, false))
|
|
);
|
|
}
|
|
else
|
|
{
|
|
$sql = 'SELECT forum_id, forum_name
|
|
FROM ' . FORUMS_TABLE . '
|
|
WHERE ' . $db->sql_in_set('forum_id', $forum_id);
|
|
$result = $db->sql_query($sql);
|
|
$row = $db->sql_fetchrow($result);
|
|
|
|
if (!$row)
|
|
{
|
|
$db->sql_freeresult($result);
|
|
trigger_error($user->lang['NO_FORUM'] . adm_back_link($this->u_action), E_USER_WARNING);
|
|
}
|
|
|
|
$forum_list = $s_hidden_fields = '';
|
|
do
|
|
{
|
|
$forum_list .= (($forum_list != '') ? ', ' : '') . '<b>' . $row['forum_name'] . '</b>';
|
|
$s_hidden_fields .= '<input type="hidden" name="f[]" value="' . $row['forum_id'] . '" />';
|
|
}
|
|
while ($row = $db->sql_fetchrow($result));
|
|
|
|
$db->sql_freeresult($result);
|
|
|
|
$l_selected_forums = (sizeof($forum_id) == 1) ? 'SELECTED_FORUM' : 'SELECTED_FORUMS';
|
|
|
|
$template->assign_vars(array(
|
|
'L_SELECTED_FORUMS' => $user->lang[$l_selected_forums],
|
|
'U_ACTION' => $this->u_action,
|
|
'U_BACK' => $this->u_action,
|
|
'FORUM_LIST' => $forum_list,
|
|
'S_HIDDEN_FIELDS' => $s_hidden_fields)
|
|
);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Prune users
|
|
*/
|
|
function prune_users($id, $mode)
|
|
{
|
|
global $db, $user, $auth, $template, $cache, $config;
|
|
|
|
$user->add_lang('memberlist');
|
|
|
|
$prune = (isset($_POST['prune'])) ? true : false;
|
|
|
|
if ($prune)
|
|
{
|
|
$action = request_var('action', 'deactivate');
|
|
$deleteposts = request_var('deleteposts', 0);
|
|
|
|
if (confirm_box(true))
|
|
{
|
|
$user_ids = $usernames = array();
|
|
$this->get_prune_users($user_ids, $usernames);
|
|
|
|
if (sizeof($user_ids))
|
|
{
|
|
if ($action == 'deactivate')
|
|
{
|
|
user_active_flip('deactivate', $user_ids);
|
|
$l_log = 'LOG_PRUNE_USER_DEAC';
|
|
}
|
|
else if ($action == 'delete')
|
|
{
|
|
if ($deleteposts)
|
|
{
|
|
foreach ($user_ids as $user_id)
|
|
{
|
|
user_delete('remove', $user_id);
|
|
}
|
|
|
|
$l_log = 'LOG_PRUNE_USER_DEL_DEL';
|
|
}
|
|
else
|
|
{
|
|
foreach ($user_ids as $user_id)
|
|
{
|
|
user_delete('retain', $user_id, $usernames[$user_id]);
|
|
}
|
|
|
|
$l_log = 'LOG_PRUNE_USER_DEL_ANON';
|
|
}
|
|
}
|
|
|
|
add_log('admin', $l_log, implode(', ', $usernames));
|
|
$msg = $user->lang['USER_' . strtoupper($action) . '_SUCCESS'];
|
|
}
|
|
else
|
|
{
|
|
$msg = $user->lang['USER_PRUNE_FAILURE'];
|
|
}
|
|
|
|
trigger_error($msg . adm_back_link($this->u_action));
|
|
}
|
|
else
|
|
{
|
|
// We list the users which will be pruned...
|
|
$user_ids = $usernames = array();
|
|
$this->get_prune_users($user_ids, $usernames);
|
|
|
|
if (!sizeof($user_ids))
|
|
{
|
|
trigger_error($user->lang['USER_PRUNE_FAILURE'] . adm_back_link($this->u_action), E_USER_WARNING);
|
|
}
|
|
|
|
// Assign to template
|
|
foreach ($user_ids as $user_id)
|
|
{
|
|
$template->assign_block_vars('users', array(
|
|
'USERNAME' => $usernames[$user_id],
|
|
'U_PROFILE' => append_sid('memberlist', 'mode=viewprofile&u=' . $user_id),
|
|
'U_USER_ADMIN' => ($auth->acl_get('a_user')) ? append_sid(PHPBB_ADMIN_PATH . 'index.' . PHP_EXT, 'i=users&mode=overview&u=' . $user_id, true, $user->session_id) : '',
|
|
));
|
|
}
|
|
|
|
$template->assign_vars(array(
|
|
'S_DEACTIVATE' => ($action == 'deactivate') ? true : false,
|
|
'S_DELETE' => ($action == 'delete') ? true : false,
|
|
));
|
|
|
|
confirm_box(false, $user->lang['CONFIRM_OPERATION'], build_hidden_fields(array(
|
|
'i' => $id,
|
|
'mode' => $mode,
|
|
'prune' => 1,
|
|
|
|
'users' => request_var('users', '', true),
|
|
'username' => request_var('username', '', true),
|
|
'email' => request_var('email', ''),
|
|
'joined_select' => request_var('joined_select', ''),
|
|
'joined' => request_var('joined', ''),
|
|
'active_select' => request_var('active_select', ''),
|
|
'active' => request_var('active', ''),
|
|
'count_select' => request_var('count_select', ''),
|
|
'count' => request_var('count', ''),
|
|
'deleteposts' => request_var('deleteposts', 0),
|
|
|
|
'action' => request_var('action', ''),
|
|
)), 'confirm_body_prune.html');
|
|
}
|
|
}
|
|
|
|
$find_count = array('lt' => $user->lang['LESS_THAN'], 'eq' => $user->lang['EQUAL_TO'], 'gt' => $user->lang['MORE_THAN']);
|
|
$s_find_count = '';
|
|
|
|
foreach ($find_count as $key => $value)
|
|
{
|
|
$selected = ($key == 'eq') ? ' selected="selected"' : '';
|
|
$s_find_count .= '<option value="' . $key . '"' . $selected . '>' . $value . '</option>';
|
|
}
|
|
|
|
$find_time = array('lt' => $user->lang['BEFORE'], 'gt' => $user->lang['AFTER']);
|
|
$s_find_join_time = '';
|
|
foreach ($find_time as $key => $value)
|
|
{
|
|
$s_find_join_time .= '<option value="' . $key . '">' . $value . '</option>';
|
|
}
|
|
|
|
$s_find_active_time = '';
|
|
foreach ($find_time as $key => $value)
|
|
{
|
|
$s_find_active_time .= '<option value="' . $key . '">' . $value . '</option>';
|
|
}
|
|
|
|
$template->assign_vars(array(
|
|
'U_ACTION' => $this->u_action,
|
|
'S_JOINED_OPTIONS' => $s_find_join_time,
|
|
'S_ACTIVE_OPTIONS' => $s_find_active_time,
|
|
'S_COUNT_OPTIONS' => $s_find_count,
|
|
'U_FIND_USERNAME' => append_sid('memberlist', 'mode=searchuser&form=acp_prune&field=users'),
|
|
));
|
|
}
|
|
|
|
/**
|
|
* Get user_ids/usernames from those being pruned
|
|
*/
|
|
function get_prune_users(&$user_ids, &$usernames)
|
|
{
|
|
global $user, $db;
|
|
|
|
$users = request_var('users', '', true);
|
|
|
|
if ($users)
|
|
{
|
|
$users = explode("\n", $users);
|
|
$where_sql = ' AND ' . $db->sql_in_set('username_clean', array_map('utf8_clean_string', $users));
|
|
}
|
|
else
|
|
{
|
|
$username = request_var('username', '', true);
|
|
$email = request_var('email', '');
|
|
|
|
$joined_select = request_var('joined_select', 'lt');
|
|
$active_select = request_var('active_select', 'lt');
|
|
$count_select = request_var('count_select', 'eq');
|
|
$joined = request_var('joined', '');
|
|
$active = request_var('active', '');
|
|
|
|
$active = ($active) ? explode('-', $active) : array();
|
|
$joined = ($joined) ? explode('-', $joined) : array();
|
|
|
|
if ((sizeof($active) && sizeof($active) != 3) || (sizeof($joined) && sizeof($joined) != 3))
|
|
{
|
|
trigger_error($user->lang['WRONG_ACTIVE_JOINED_DATE'] . adm_back_link($this->u_action), E_USER_WARNING);
|
|
}
|
|
|
|
$count = request_var('count', '');
|
|
|
|
$key_match = array('lt' => '<', 'gt' => '>', 'eq' => '=');
|
|
$sort_by_types = array('username', 'user_email', 'user_posts', 'user_regdate', 'user_lastvisit');
|
|
|
|
$where_sql = '';
|
|
$where_sql .= ($username) ? ' AND username_clean ' . $db->sql_like_expression(str_replace('*', $db->any_char, utf8_clean_string($username))) : '';
|
|
$where_sql .= ($email) ? ' AND user_email ' . $db->sql_like_expression(str_replace('*', $db->any_char, $email)) . ' ' : '';
|
|
$where_sql .= (sizeof($joined)) ? " AND user_regdate " . $key_match[$joined_select] . ' ' . gmmktime(0, 0, 0, (int) $joined[1], (int) $joined[2], (int) $joined[0]) : '';
|
|
$where_sql .= ($count !== '') ? " AND user_posts " . $key_match[$count_select] . ' ' . (int) $count . ' ' : '';
|
|
|
|
if (sizeof($active) && $active_select != 'lt')
|
|
{
|
|
$where_sql .= ' AND user_lastvisit ' . $key_match[$active_select] . ' ' . gmmktime(0, 0, 0, (int) $active[1], (int) $active[2], (int) $active[0]);
|
|
}
|
|
else if (sizeof($active))
|
|
{
|
|
$where_sql .= ' AND (user_lastvisit > 0 AND user_lastvisit < ' . gmmktime(0, 0, 0, (int) $active[1], (int) $active[2], (int) $active[0]) . ')';
|
|
}
|
|
}
|
|
|
|
// Protect the admin, do not prune if no options are given...
|
|
if (!$where_sql)
|
|
{
|
|
return;
|
|
}
|
|
|
|
// Get bot ids
|
|
$sql = 'SELECT user_id
|
|
FROM ' . BOTS_TABLE;
|
|
$result = $db->sql_query($sql);
|
|
|
|
$bot_ids = array();
|
|
while ($row = $db->sql_fetchrow($result))
|
|
{
|
|
$bot_ids[] = $row['user_id'];
|
|
}
|
|
$db->sql_freeresult($result);
|
|
|
|
// Do not prune founder members
|
|
$sql = 'SELECT user_id, username
|
|
FROM ' . USERS_TABLE . '
|
|
WHERE user_id <> ' . ANONYMOUS . '
|
|
AND user_type <> ' . USER_FOUNDER . "
|
|
$where_sql";
|
|
$result = $db->sql_query($sql);
|
|
|
|
$where_sql = '';
|
|
$user_ids = $usernames = array();
|
|
|
|
while ($row = $db->sql_fetchrow($result))
|
|
{
|
|
// Do not prune bots and the user currently pruning.
|
|
if ($row['user_id'] != $user->data['user_id'] && !in_array($row['user_id'], $bot_ids))
|
|
{
|
|
$user_ids[] = $row['user_id'];
|
|
$usernames[$row['user_id']] = $row['username'];
|
|
}
|
|
}
|
|
$db->sql_freeresult($result);
|
|
}
|
|
}
|
|
|
|
?>
|