phpBB

<?php

/**

*

* @package mcp

* @version $Id$

* @copyright (c) 2005 phpBB Group

* @license http://opensource.org/licenses/gpl-license.php GNU Public License

*

*/

/**

* @ignore

*/

define('IN_PHPBB', true);

if (!defined('PHPBB_ROOT_PATH')) define('PHPBB_ROOT_PATH', './');

if (!defined('PHP_EXT')) define('PHP_EXT', substr(strrchr(__FILE__, '.'), 1));

include(PHPBB_ROOT_PATH . 'common.' . PHP_EXT);

include(PHPBB_ROOT_PATH . 'includes/functions_admin.' . PHP_EXT);

require(PHPBB_ROOT_PATH . 'includes/functions_module.' . PHP_EXT);

// Start session management

$user->session_begin();

$auth->acl($user->data);

$user->setup('mcp');

$module = new p_master();

// Setting a variable to let the style designer know where he is...

$template->assign_var('S_IN_MCP', true);

// Basic parameter data

$id = request_var('i', '');

if (isset($_REQUEST['mode']) && is_array($_REQUEST['mode']))

{

	$mode = request_var('mode', array(''));

	list($mode, ) = each($mode);

}

else

{

	$mode = request_var('mode', '');

}

// Only Moderators can go beyond this point

if (!$user->data['is_registered'])

{

	if ($user->data['is_bot'])

	{

		redirect(append_sid(PHPBB_ROOT_PATH . 'index.' . PHP_EXT));

	}

	login_box('', $user->lang['LOGIN_EXPLAIN_MCP']);

}

$quickmod = (isset($_REQUEST['quickmod'])) ? true : false;

$action = request_var('action', '');

$action_ary = request_var('action', array('' => 0));

$forum_action = request_var('forum_action', '');

if ($forum_action !== '' && !empty($_POST['sort']))

{

	$action = $forum_action;

}

if (sizeof($action_ary))

{

	list($action, ) = each($action_ary);

}

unset($action_ary);

if ($mode == 'topic_logs')

{

	$id = 'logs';

	$quickmod = false;

}

$post_id = request_var('p', 0);

$topic_id = request_var('t', 0);

$forum_id = request_var('f', 0);

$user_id = request_var('u', 0);

$username = utf8_normalize_nfc(request_var('username', '', true));

if ($post_id)

{

	// We determine the topic and forum id here, to make sure the moderator really has moderative rights on this post

	$sql = 'SELECT topic_id, forum_id

		FROM ' . POSTS_TABLE . "

		WHERE post_id = $post_id";

	$result = $db->sql_query($sql);

	$row = $db->sql_fetchrow($result);

	$db->sql_freeresult($result);

	$topic_id = (int) $row['topic_id'];

	$forum_id = (int) ($row['forum_id']) ? $row['forum_id'] : $forum_id;

}

else if ($topic_id)

{

	$sql = 'SELECT forum_id

		FROM ' . TOPICS_TABLE . "

		WHERE topic_id = $topic_id";

	$result = $db->sql_query($sql);

	$row = $db->sql_fetchrow($result);

	$db->sql_freeresult($result);

	$forum_id = (int) $row['forum_id'];

}

// If the user doesn't have any moderator powers (globally or locally) he can't access the mcp

if (!$auth->acl_getf_global('m_'))

{

	// Except he is using one of the quickmod tools for users

	$user_quickmod_actions = array(

		'lock'			=> 'f_user_lock',

		'make_sticky'	=> 'f_sticky',

		'make_announce'	=> 'f_announce',

		'make_global'	=> 'f_announce',

		'make_normal'	=> array('f_announce', 'f_sticky')

	);

	$allow_user = false;

	if ($quickmod && isset($user_quickmod_actions[$action]) && $user->data['is_registered'] && $auth->acl_gets($user_quickmod_actions[$action], $forum_id))

	{

		$topic_info = get_topic_data(array($topic_id));

		if ($topic_info[$topic_id]['topic_poster'] == $user->data['user_id'])

		{

			$allow_user = true;

		}

	}

	if (!$allow_user)

	{

		trigger_error('NOT_AUTHORISED');

	}

}

// if the user cannot read the forum he tries to access then we won't allow mcp access either

if ($forum_id && !$auth->acl_get('f_read', $forum_id))

{

	trigger_error('NOT_AUTHORISED');

}

if ($forum_id)

{

	$module->acl_forum_id = $forum_id;

}

// Instantiate module system and generate list of available modules

$module->list_modules('mcp');

if ($quickmod)

{

	$mode = 'quickmod';

	switch ($action)

	{

		case 'lock':

		case 'unlock':

		case 'lock_post':

		case 'unlock_post':

		case 'make_sticky':

		case 'make_announce':

		case 'make_global':

		case 'make_normal':

		case 'fork':

		case 'move':

		case 'delete_post':

		case 'delete_topic':

			$module->load('mcp', 'main', 'quickmod');

			return;

		break;

		case 'topic_logs':

			$module->set_active('logs', 'topic_logs');

		break;

		case 'merge_topic':

			$module->set_active('main', 'forum_view');

		break;

		case 'split':

		case 'merge':

			$module->set_active('main', 'topic_view');

		break;

		default:

			trigger_error("$action not allowed as quickmod", E_USER_ERROR);

		break;

	}

}

else

{

	// Select the active module

	$module->set_active($id, $mode);

}

// Hide some of the options if we don't have the relevant information to use them

if (!$post_id)

{

	$module->set_display('main', 'post_details', false);

	$module->set_display('warn', 'warn_post', false);

}

if ($mode == '' || $mode == 'unapproved_topics' || $mode == 'unapproved_posts')

{

	$module->set_display('queue', 'approve_details', false);

}

if ($mode == '' || $mode == 'reports' || $mode == 'reports_closed')

{

	$module->set_display('reports', 'report_details', false);

}

if (!$topic_id)

{

	$module->set_display('main', 'topic_view', false);

	$module->set_display('logs', 'topic_logs', false);

}

if (!$forum_id)

{

	$module->set_display('main', 'forum_view', false);

	$module->set_display('logs', 'forum_logs', false);

}

if (!$user_id && $username == '')

{

	$module->set_display('notes', 'user_notes', false);

	$module->set_display('warn', 'warn_user', false);

}

// Load and execute the relevant module

$module->load_active();

// Assign data to the template engine for the list of modules

$module->assign_tpl_vars(append_sid(PHPBB_ROOT_PATH . 'mcp.' . PHP_EXT));

// Generate urls for letting the moderation control panel being accessed in different modes

$template->assign_vars(array(

	'U_MCP'			=> append_sid('mcp', 'i=main'),

	'U_MCP_FORUM'	=> ($forum_id) ? append_sid('mcp', "i=main&mode=forum_view&f=$forum_id") : '',

	'U_MCP_TOPIC'	=> ($forum_id && $topic_id) ? append_sid('mcp', "i=main&mode=topic_view&t=$topic_id") : '',

	'U_MCP_POST'	=> ($forum_id && $topic_id && $post_id) ? append_sid('mcp', "i=main&mode=post_details&t=$topic_id&p=$post_id") : '',

));

// Generate the page, do not display/query online list

$module->display($module->get_page_title(), false);

/**

* Functions used to generate additional URL paramters

*/

function _module__url($mode, &$module_row)

{

	return extra_url();

}

function _module_notes_url($mode, &$module_row)

{

	if ($mode == 'front')

	{

		return '';

	}

	global $user_id;

	return ($user_id) ? "&u=$user_id" : '';

}

function _module_warn_url($mode, &$module_row)

{

	if ($mode == 'front' || $mode == 'list')

	{

		global $forum_id;

		return ($forum_id) ? "&f=$forum_id" : '';

	}

	if ($mode == 'warn_post')

	{

		global $forum_id, $post_id;

		$url_extra = ($forum_id) ? "&f=$forum_id" : '';

		$url_extra .= ($post_id) ? "&p=$post_id" : '';

		return $url_extra;

	}

	else

	{

		global $user_id;

		return ($user_id) ? "&u=$user_id" : '';

	}

}

function _module_main_url($mode, &$module_row)

{

	return extra_url();

}

function _module_logs_url($mode, &$module_row)

{

	return extra_url();

}

function _module_ban_url($mode, &$module_row)

{

	return extra_url();

}

function _module_queue_url($mode, &$module_row)

{

	return extra_url();

}

function _module_reports_url($mode, &$module_row)

{

	return extra_url();

}

function extra_url()

{

	global $forum_id, $topic_id, $post_id, $user_id;

	$url_extra = '';

	$url_extra .= ($forum_id) ? "&f=$forum_id" : '';

	$url_extra .= ($topic_id) ? "&t=$topic_id" : '';

	$url_extra .= ($post_id) ? "&p=$post_id" : '';

	$url_extra .= ($user_id) ? "&u=$user_id" : '';

	return $url_extra;

}

/**

* Get simple topic data

*/

function get_topic_data($topic_ids, $acl_list = false, $read_tracking = false)

{

	global $auth, $db, $config, $user;

	static $rowset = array();

	$topics = array();

	if (!sizeof($topic_ids))

	{

		return array();

	}

	// cache might not contain read tracking info, so we can't use it if read

	// tracking information is requested

	if (!$read_tracking)

	{

		$cache_topic_ids = array_intersect($topic_ids, array_keys($rowset));

		$topic_ids = array_diff($topic_ids, array_keys($rowset));

	}

	else

	{

		$cache_topic_ids = array();

	}

	if (sizeof($topic_ids))

	{

		$sql_array = array(

			'SELECT'	=> 't.*, f.*',

			'FROM'		=> array(

				TOPICS_TABLE	=> 't',

			),

			'LEFT_JOIN'	=> array(

				array(

					'FROM'	=> array(FORUMS_TABLE => 'f'),

					'ON'	=> 'f.forum_id = t.forum_id'

				)

			),

			'WHERE'		=> $db->sql_in_set('t.topic_id', $topic_ids)

		);

		if ($read_tracking && $config['load_db_lastread'])

		{

			$sql_array['SELECT'] .= ', tt.mark_time, ft.mark_time as forum_mark_time';

			$sql_array['LEFT_JOIN'][] = array(

				'FROM'	=> array(TOPICS_TRACK_TABLE => 'tt'),

				'ON'	=> 'tt.user_id = ' . $user->data['user_id'] . ' AND t.topic_id = tt.topic_id'

			);

			$sql_array['LEFT_JOIN'][] = array(

				'FROM'	=> array(FORUMS_TRACK_TABLE => 'ft'),

				'ON'	=> 'ft.user_id = ' . $user->data['user_id'] . ' AND t.forum_id = ft.forum_id'

			);

		}

		$sql = $db->sql_build_query('SELECT', $sql_array);

		$result = $db->sql_query($sql);

		while ($row = $db->sql_fetchrow($result))

		{

			if (!$row['forum_id'])

			{

				// Global Announcement?

				$row['forum_id'] = request_var('f', 0);

			}

			$rowset[$row['topic_id']] = $row;

			if ($acl_list && !$auth->acl_gets($acl_list, $row['forum_id']))

			{

				continue;

			}

			$topics[$row['topic_id']] = $row;

		}

		$db->sql_freeresult($result);

	}

	foreach ($cache_topic_ids as $id)

	{

		if (!$acl_list || $auth->acl_gets($acl_list, $rowset[$id]['forum_id']))

		{

			$topics[$id] = $rowset[$id];

		}

	}

	return $topics;

}

/**

* Get simple post data

*/

function get_post_data($post_ids, $acl_list = false, $read_tracking = false)

{

	global $db, $auth, $config, $user;

	$rowset = array();

	if (!sizeof($post_ids))

	{

		return array();

	}

	$sql_array = array(

		'SELECT'	=> 'p.*, u.*, t.*, f.*',

		'FROM'		=> array(

			USERS_TABLE		=> 'u',

			POSTS_TABLE		=> 'p',

			TOPICS_TABLE	=> 't',

		),