mirror of
https://github.com/phpbb/phpbb.git
synced 2025-02-24 12:03:21 +01:00
347 lines
11 KiB
PHP
347 lines
11 KiB
PHP
<?php
|
|
// -------------------------------------------------------------
|
|
//
|
|
// $Id$
|
|
//
|
|
// FILENAME : mcp_post.php
|
|
// STARTED : Thu Jul 08, 2004
|
|
// COPYRIGHT : © 2004 phpBB Group
|
|
// WWW : http://www.phpbb.com/
|
|
// LICENCE : GPL vs2.0 [ see /docs/COPYING ]
|
|
//
|
|
// -------------------------------------------------------------
|
|
|
|
function mcp_post_details($id, $mode, $action, $url)
|
|
{
|
|
global $SID, $phpEx, $phpbb_root_path, $config;
|
|
global $template, $db, $user, $auth;
|
|
|
|
$user->add_lang('posting');
|
|
|
|
$post_id = request_var('p', 0);
|
|
$start = request_var('start', 0);
|
|
|
|
// Get post data
|
|
$post_info = get_post_data(array($post_id));
|
|
|
|
if (!sizeof($post_info))
|
|
{
|
|
trigger_error($user->lang['POST_NOT_EXIST']);
|
|
}
|
|
|
|
$post_info = $post_info[$post_id];
|
|
|
|
switch ($action)
|
|
{
|
|
case 'chgposter_search':
|
|
|
|
$username = request_var('username', '');
|
|
|
|
if ($username)
|
|
{
|
|
$users_ary = array();
|
|
|
|
if (strpos($username, '*') === false)
|
|
{
|
|
$username = "*$username*";
|
|
}
|
|
$username = str_replace('*', '%', str_replace('%', '\%', $username));
|
|
|
|
$sql = 'SELECT user_id, username
|
|
FROM ' . USERS_TABLE . "
|
|
WHERE username LIKE '" . $db->sql_escape($username) . "'
|
|
AND user_type NOT IN (" . USER_INACTIVE . ', ' . USER_IGNORE . ')
|
|
AND user_id <> ' . $post_info['user_id'];
|
|
$result = $db->sql_query($sql);
|
|
|
|
while ($row = $db->sql_fetchrow($result))
|
|
{
|
|
$users_ary[strtolower($row['username'])] = $row;
|
|
}
|
|
|
|
$user_select = '';
|
|
ksort($users_ary);
|
|
foreach ($users_ary as $row)
|
|
{
|
|
$user_select .= '<option value="' . $row['user_id'] . '">' . $row['username'] . "</option>\n";
|
|
}
|
|
}
|
|
|
|
if (!$user_select)
|
|
{
|
|
$template->assign_var('MESSAGE', $user->lang['NO_MATCHES_FOUND']);
|
|
}
|
|
|
|
$template->assign_vars(array(
|
|
'S_USER_SELECT' => $user_select,
|
|
'SEARCH_USERNAME' => request_var('username', ''))
|
|
);
|
|
break;
|
|
|
|
case 'chgposter':
|
|
|
|
$new_user = request_var('u', 0);
|
|
|
|
if ($new_user && $auth->acl_get('m_', $post_info['forum_id']) && $new_user != $post_info['user_id'])
|
|
{
|
|
$sql = 'UPDATE ' . POSTS_TABLE . "
|
|
SET poster_id = $new_user
|
|
WHERE post_id = $post_id";
|
|
$db->sql_query($sql);
|
|
|
|
if ($post_info['topic_last_post_id'] == $post_info['post_id'] || $post_info['forum_last_post_id'] == $post_info['post_id'])
|
|
{
|
|
sync('topic', 'topic_id', $post_info['topic_id'], false, false);
|
|
sync('forum', 'forum_id', $post_info['forum_id'], false, false);
|
|
}
|
|
|
|
// Renew post info
|
|
$post_info = get_post_data(array($post_id));
|
|
|
|
if (!sizeof($post_info))
|
|
{
|
|
trigger_error($user->lang['POST_NOT_EXIST']);
|
|
}
|
|
|
|
$post_info = $post_info[$post_id];
|
|
}
|
|
break;
|
|
|
|
case 'del_marked':
|
|
case 'del_all':
|
|
case 'add_feedback':
|
|
|
|
$deletemark = ($action == 'del_marked') ? true : false;
|
|
$deleteall = ($action == 'del_all') ? true : false;
|
|
$marked = request_var('marknote', 0);
|
|
$usernote = request_var('usernote', '');
|
|
|
|
if (($deletemark || $deleteall) && $auth->acl_get('a_clearlogs'))
|
|
{
|
|
$where_sql = '';
|
|
if ($deletemark && $marked)
|
|
{
|
|
$sql_in = array();
|
|
foreach ($marked as $mark)
|
|
{
|
|
$sql_in[] = $mark;
|
|
}
|
|
$where_sql = ' AND log_id IN (' . implode(', ', $sql_in) . ')';
|
|
unset($sql_in);
|
|
}
|
|
|
|
$sql = 'DELETE FROM ' . LOG_TABLE . '
|
|
WHERE log_type = ' . LOG_USERS . "
|
|
$where_sql";
|
|
$db->sql_query($sql);
|
|
|
|
add_log('admin', 'LOG_USERS_CLEAR');
|
|
|
|
$msg = ($deletemark) ? 'MARKED_DELETED' : 'ALL_DELETED';
|
|
$redirect = "$url&i=$id&mode=post_details";
|
|
meta_refresh(2, $redirect);
|
|
trigger_error($user->lang[$msg] . '<br /><br />' . sprintf($user->lang['RETURN_PAGE'], '<a href="' . $redirect . '">', '</a>'));
|
|
}
|
|
|
|
if ($usernote && $action == 'add_feedback')
|
|
{
|
|
add_log('admin', 'LOG_USER_FEEDBACK', $post_info['username']);
|
|
add_log('user', $post_info['user_id'], 'LOG_USER_GENERAL', $usernote);
|
|
|
|
$redirect = "$url&i=$id&mode=post_details";
|
|
meta_refresh(2, $redirect);
|
|
trigger_error($user->lang['USER_FEEDBACK_ADDED'] . '<br /><br />' . sprintf($user->lang['RETURN_PAGE'], '<a href="' . $redirect . '">', '</a>'));
|
|
}
|
|
break;
|
|
|
|
default:
|
|
}
|
|
|
|
// Set some vars
|
|
$users_ary = array();
|
|
$poster = ($post_info['user_colour']) ? '<span style="color:#' . $post_info['user_colour'] . '">' . $post_info['username'] . '</span>' : $post_info['username'];
|
|
|
|
// Process message, leave it uncensored
|
|
$message = $post_info['post_text'];
|
|
if ($post_info['bbcode_bitfield'])
|
|
{
|
|
include_once($phpbb_root_path . 'includes/bbcode.'.$phpEx);
|
|
$bbcode = new bbcode($post_info['bbcode_bitfield']);
|
|
$bbcode->bbcode_second_pass($message, $post_info['bbcode_uid'], $post_info['bbcode_bitfield']);
|
|
}
|
|
$message = smilie_text($message);
|
|
|
|
$template->assign_vars(array(
|
|
'U_MCP_ACTION' => "$url&i=main&quickmod=1", // Use this for mode paramaters
|
|
'U_POST_ACTION' => "$url&i=$id&mode=post_details", // Use this for action parameters
|
|
'U_APPROVE_ACTION' => "{$phpbb_root_path}mcp.$phpEx$SID&i=queue&p=$post_id",
|
|
|
|
'S_CAN_VIEWIP' => $auth->acl_get('m_ip', $post_info['forum_id']),
|
|
'S_CAN_CHGPOSTER' => $auth->acl_get('m_', $post_info['forum_id']),
|
|
'S_CAN_LOCK_POST' => $auth->acl_get('m_lock', $post_info['forum_id']),
|
|
'S_CAN_DELETE_POST' => $auth->acl_get('m_delete', $post_info['forum_id']),
|
|
|
|
'S_POST_REPORTED' => $post_info['post_reported'],
|
|
'S_POST_UNAPPROVED' => !$post_info['post_approved'],
|
|
'S_POST_LOCKED' => $post_info['post_edit_locked'],
|
|
'S_USER_WARNINGS' => ($post_info['user_warnings']) ? true : false,
|
|
'S_SHOW_USER_NOTES' => true,
|
|
'S_CLEAR_ALLOWED' => ($auth->acl_get('a_clearlogs')) ? true : false,
|
|
|
|
'U_VIEW_PROFILE' => "memberlist.$phpEx$SID&mode=viewprofile&u=" . $post_info['user_id'],
|
|
// 'U_MCP_USERNOTES' => "mcp.$phpEx$SID&i=notes&mode=user_notes&u=" . $post_info['user_id'],
|
|
// 'U_MCP_WARNINGS' => "mcp.$phpEx$SID&i=warnings&mode=view_user&u=" . $post_info['user_id'],
|
|
'U_EDIT' => ($auth->acl_get('m_edit', $post_info['forum_id'])) ? "{$phpbb_root_path}posting.$phpEx$SID&mode=edit&f={$post_info['forum_id']}&p={$post_info['post_id']}" : '',
|
|
|
|
'RETURN_TOPIC' => sprintf($user->lang['RETURN_TOPIC'], "<a href=\"viewtopic.$phpEx$SID&p=$post_id#$post_id\">", '</a>'),
|
|
'RETURN_FORUM' => sprintf($user->lang['RETURN_FORUM'], "<a href=\"viewforum.$phpEx$SID&f={$post_info['forum_id']}&start={$start}\">", '</a>'),
|
|
'REPORTED_IMG' => $user->img('icon_reported', $user->lang['POST_REPORTED']),
|
|
'UNAPPROVED_IMG' => $user->img('icon_unapproved', $user->lang['POST_UNAPPROVED']),
|
|
'EDIT_IMG' => $user->img('btn_edit', $user->lang['EDIT_POST']),
|
|
|
|
'POSTER_NAME' => $poster,
|
|
'POST_PREVIEW' => $message,
|
|
'POST_SUBJECT' => $post_info['post_subject'],
|
|
'POST_DATE' => $user->format_date($post_info['post_time']),
|
|
'POST_IP' => $post_info['poster_ip'],
|
|
'POST_IPADDR' => @gethostbyaddr($post_info['poster_ip']),
|
|
'POST_ID' => $post_info['post_id'])
|
|
);
|
|
|
|
// Get User Notes
|
|
$log_data = array();
|
|
$log_count = 0;
|
|
view_log('user', $log_data, $log_count, $config['posts_per_page'], 0, 0, 0, $post_info['user_id']);
|
|
|
|
if ($log_count)
|
|
{
|
|
$template->assign_var('S_USER_NOTES', true);
|
|
|
|
foreach ($log_data as $row)
|
|
{
|
|
$template->assign_block_vars('usernotes', array(
|
|
'REPORT_BY' => $row['username'],
|
|
'REPORT_AT' => $user->format_date($row['time']),
|
|
'ACTION' => $row['action'],
|
|
'ID' => $row['id'])
|
|
);
|
|
}
|
|
}
|
|
|
|
// Get Reports
|
|
if ($auth->acl_get('m_', $post_info['forum_id']))
|
|
{
|
|
$sql = 'SELECT r.*, re.*, u.user_id, u.username
|
|
FROM ' . REPORTS_TABLE . ' r, ' . USERS_TABLE . ' u, ' . REASONS_TABLE . " re
|
|
WHERE r.post_id = $post_id
|
|
AND r.reason_id = re.reason_id
|
|
AND u.user_id = r.user_id
|
|
ORDER BY r.report_time DESC";
|
|
$result = $db->sql_query($sql);
|
|
|
|
if ($row = $db->sql_fetchrow($result))
|
|
{
|
|
$template->assign_var('S_SHOW_REPORTS', true);
|
|
|
|
do
|
|
{
|
|
$template->assign_block_vars('reports', array(
|
|
'REPORT_ID' => $row['report_id'],
|
|
'REASON_TITLE' => $user->lang['report_reasons']['TITLE'][strtoupper($row['reason_name'])],
|
|
'REASON_DESC' => $user->lang['report_reasons']['DESCRIPTION'][strtoupper($row['reason_name'])],
|
|
'REPORTER' => ($row['user_id'] != ANONYMOUS) ? $row['username'] : $user->lang['GUEST'],
|
|
'U_REPORTER' => ($row['user_id'] != ANONYMOUS) ? "memberlist.$phpEx$SID&mode=viewprofile&u={$row['user_id']}" : '',
|
|
'USER_NOTIFY' => ($row['user_notify']) ? true : false,
|
|
'REPORT_TIME' => $user->format_date($row['report_time']),
|
|
'REPORT_TEXT' => str_replace("\n", '<br />', trim($row['report_text'])))
|
|
);
|
|
}
|
|
while ($row = $db->sql_fetchrow($result));
|
|
}
|
|
$db->sql_freeresult($result);
|
|
}
|
|
|
|
// Get IP
|
|
if ($auth->acl_get('m_ip', $post_info['forum_id']))
|
|
{
|
|
$rdns_ip_num = request_var('rdns', '');
|
|
|
|
if ($rdns_ip_num != 'all')
|
|
{
|
|
$template->assign_vars(array(
|
|
'U_LOOKUP_ALL' => "$url&i=main&mode=post_details&rdns=all")
|
|
);
|
|
}
|
|
|
|
// Get other users who've posted under this IP
|
|
$sql = 'SELECT u.user_id, u.username, COUNT(*) as postings
|
|
FROM ' . USERS_TABLE . ' u, ' . POSTS_TABLE . " p
|
|
WHERE p.poster_id = u.user_id
|
|
AND p.poster_ip = '{$post_info['poster_ip']}'
|
|
AND p.poster_id <> {$post_info['user_id']}
|
|
GROUP BY u.user_id
|
|
ORDER BY postings DESC";
|
|
$result = $db->sql_query($sql);
|
|
|
|
while ($row = $db->sql_fetchrow($result))
|
|
{
|
|
// Fill the user select list with users who have posted
|
|
// under this IP
|
|
if ($row['user_id'] != $post_info['poster_id'])
|
|
{
|
|
$users_ary[strtolower($row['username'])] = $row;
|
|
}
|
|
|
|
$template->assign_block_vars('userrow', array(
|
|
'USERNAME' => ($row['user_id'] == ANONYMOUS) ? $user->lang['GUEST'] : $row['username'],
|
|
'NUM_POSTS' => $row['postings'],
|
|
'L_POST_S' => ($row['postings'] == 1) ? $user->lang['POST'] : $user->lang['POSTS'],
|
|
|
|
'U_PROFILE' => ($row['user_id'] == ANONYMOUS) ? '' : "memberlist.$phpEx$SID&mode=viewprofile&u=" . $row['user_id'],
|
|
'U_SEARCHPOSTS' => "search.$phpEx$SID&search_author=" . urlencode($row['username']) . "&showresults=topics")
|
|
);
|
|
}
|
|
$db->sql_freeresult($result);
|
|
|
|
// Get other IP's this user has posted under
|
|
$sql = 'SELECT poster_ip, COUNT(*) AS postings
|
|
FROM ' . POSTS_TABLE . '
|
|
WHERE poster_id = ' . $post_info['poster_id'] . '
|
|
GROUP BY poster_ip
|
|
ORDER BY postings DESC';
|
|
$result = $db->sql_query($sql);
|
|
|
|
while ($row = $db->sql_fetchrow($result))
|
|
{
|
|
$hostname = (($rdns_ip_num == $row['poster_ip'] || $rdns_ip_num == 'all') && $row['poster_ip']) ? @gethostbyaddr($row['poster_ip']) : '';
|
|
|
|
$template->assign_block_vars('iprow', array(
|
|
'IP' => $row['poster_ip'],
|
|
'HOSTNAME' => $hostname,
|
|
'NUM_POSTS' => $row['postings'],
|
|
'L_POST_S' => ($row['postings'] == 1) ? $user->lang['POST'] : $user->lang['POSTS'],
|
|
|
|
'U_LOOKUP_IP' => ($rdns_ip_num == $row['poster_ip'] || $rdns_ip_num == 'all') ? '' : "$url&i=$id&mode=post_details&rdns={$row['poster_ip']}#ip",
|
|
'U_WHOIS' => "mcp.$phpEx$SID&i=$id&mode=whois&ip={$row['poster_ip']}")
|
|
);
|
|
}
|
|
$db->sql_freeresult($result);
|
|
|
|
// If we were not searching for a specific username fill
|
|
// the user_select box with users who have posted under
|
|
// the same IP
|
|
if ($action != 'chgposter_search')
|
|
{
|
|
$user_select = '';
|
|
ksort($users_ary);
|
|
foreach ($users_ary as $row)
|
|
{
|
|
$user_select .= '<option value="' . $row['user_id'] . '">' . $row['username'] . "</option>\n";
|
|
}
|
|
$template->assign_var('S_USER_SELECT', $user_select);
|
|
}
|
|
}
|
|
|
|
}
|
|
|
|
?>
|